L-16-020, Request for Licensing Action to Revise the Emergency Plan

From kanterella
(Redirected from ML16049A513)
Jump to navigation Jump to search

Request for Licensing Action to Revise the Emergency Plan
ML16049A513
Person / Time
Site: Davis Besse Cleveland Electric icon.png
Issue date: 02/17/2016
From: Boles B
FirstEnergy Nuclear Operating Co
To:
Document Control Desk, Office of Nuclear Reactor Regulation
References
L-16-020
Download: ML16049A513 (751)


Text

{{#Wiki_filter:5501 North State Route 2 Oak Harbor, Ohio 43449 Brian D. Boles 419-321-7676 Vice President - Nuclear Fax: 419-321-7582 February 17, 2016 L-16-020 10 CFR 50, Appendix E ATTN: Document Control Desk U.S. Nuclear Regulatory Commission Washington, DC 20555-0001

SUBJECT:

Davis-Besse Nuclear Power Station, Unit No. 1 Docket No. 50-346, License No. NPF-3 Request for Licensing Action to Revise the Emergency Plan In accordance with the provisions of 10 CFR 50, Appendix E, "Emergency Planning and 1 Preparedness for Production and Utilization Facilities,' Section IV.B.2, FirstEnergy Nuclear Operating Company (FENOC) is requesting an amendment to revise the current Davis-Besse Nuclear Power Station, Unit No. 1 Emergency Plan emergency action level scheme to one based on Nuclear Energy Institute (NEI) 99-01, "Development of Emergency Action Level for Non-Passive Reactors," Revision 6. An evaluation of the proposed amendment is provided as Enclosure A. Calculations referenced in the proposed amendment are provided as Enclosure B. FENOC is requesting the Nuclear Regulatory Commission (NRC) staff approval by March 1, 2017, with an implementation period of 120 days following issuance of the amendment. There are no regulatory commitments contained in this submittal. If there are any questions or if additional information is required, please contact Mr. Thomas A. Lentz, Manager - Fleet Licensing, at (330) 315-6810. I declare under penalty of perjury that the foregoing is true and correct. Executed on February JI , 2016. Sincerely,

         ~~~

Brian D. Boles

Davis-Besse Nuclear Power Station, Unit No. 1 L-16-020 Page 2

Enclosures:

A. Evaluation of Proposed License Amendment B. EAL Calculations cc: NRC Region Ill Administrator NRC Project Manager NRC Resident Inspector Executive Director, Ohio Emergency Management Agency State of Ohio (NRC Liaison) Utility Radiological Safety Board

Enclosure A L-16-020 Evaluation of Proposed License Amendment (697 Pages Follow)

EVALUATION OF PROPOSED LICENSE AMENDMENT Page 1 of 8

Subject:

Request to Adopt Emergency Action Level Scheme Pursuant to 99-01, Revision 6, Development of Emergency Action Levels for Non-Passive Reactors 1.0

SUMMARY

DESCRIPTION 2.0 DETAILED DESCRIPTION 2.1 Background of NEI 99-01, Revision 6 2.2 Proposed Change to Current EAL Scheme

3.0 TECHNICAL EVALUATION

3.1 NEI 99-01, Revision 6 Evaluation 3.2 Instrumentation Validation 3.3 EAL Scheme Change Evaluation

4.0 REGULATORY EVALUATION

4.1 Significant Hazards Consideration 4.2 Applicable Regulatory Requirements/Criteria 4.3 Conclusions

5.0 ENVIRONMENTAL CONSIDERATION

6.0 REFERENCES

7.0 ATTACHMENTS

Evaluation of Proposed License Amendment Page 2 of 8 1.0

SUMMARY

DESCRIPTION In accordance with the provisions of 10 CFR 50.90 and 10 CFR 50, Appendix E, Emergency Planning and Preparedness for Production and Utilization Facilities, Section IV.B, FirstEnergy Nuclear Operating Company (FENOC), is proposing a change to the Davis-Besse Nuclear Power Station (DBNPS) Emergency Plan by revising the emergency action level (EAL) scheme. FENOC proposes to change the EALs from a scheme based on Revision 5 of Nuclear Energy Institute (NEI) 99-01, Methodology for Development of Emergency Action Levels, to a scheme based on Revision 6 of NEI 99-01, Development of Emergency Action Levels for Non-Passive Reactors. Such a change in scheme requires NRC approval prior to implementation. The proposed change would continue to meet the standards in 10 CFR 50.47(b)(4) and the requirements in Appendix E to 10 CFR 50. 2.0 DETAILED DESCRIPTION 2.1 Background of NEI 99-01, Revision 6 In November 2012, NEI published NEI 99-01, Revision 6. The NRC formally endorsed NEI 99-01, Revision 6 as documented in a letter to NEI dated March 28, 2013 (ADAMS Accession Number ML12346A463). NEI 99-01, Revision 6 addresses changes recommended by the NRC, along with enhancements identified by the industry. NEI 99-01, Revision 6, represents the most recently accepted EAL methodology endorsed by the NRC. 2.2 Proposed Change to Current EAL Scheme DBNPS currently uses an emergency classification scheme based on NEI 99-01, Revision 5, as approved by the NRC in a letter dated December 19, 2008 (ADAMS Accession Number ML083450120). FENOC requests approval to change the DBNPS EAL scheme basis to that described in NEI 99-01, Revision 6. Detailed descriptions of the proposed changes and supporting information are attached: x Attachment 1 - Emergency Action Level (EAL) Bases Document provides the proposed DBNPS EALs and EAL technical bases. x Attachment 2 - Emergency Action Level (EAL) Bases Document (Redline Version) provides a marked up version of the proposed DBNPS EALs and EAL technical bases. It identifies the marked-up changes to NEI 99-01, Revision 6, EAL Basis as incorporated into Attachment 1; it is provided for information purposes only. Changes to the NEI 99-01, Revision 6, IC and EAL language are captured in the EAL comparison matrix. x Attachment 3 - Davis-Besse Nuclear Power Station NEI 99-01, Revision 6, EAL Comparison Matrix compares the proposed DBNPS EALs to the NEI 99-01, Revision 6, EALs and provides the differences.

Evaluation of Proposed License Amendment Page 3 of 8 x Attachment 4 - Emergency Action Level (EAL) Wallcharts provides the proposed wallcharts that incorporate the requested changes for ease of use of the proposed DBNPS EALs.

3.0 TECHNICAL EVALUATION

3.1 NEI 99-01, Revision 6 Evaluation NEI 99-01, Revision 6, provides guidance to nuclear power plant operators for the development of a site-specific emergency classification scheme. 10 CFR 50.47(b)(4) stipulates that emergency plans include a standard emergency classification and action level scheme. This scheme is a fundamental component of an emergency plan, in that it provides the defined thresholds that will allow site personnel to rapidly implement a range of pre-planned emergency response measures. An emergency classification scheme also facilitates timely decision-making by an emergency response organization (ERO) concerning the implementation of precautionary or protective actions for the public. The initiating conditions (ICs), EALs, and basis that comprise the proposed emergency classification scheme are described in DBNPS EAL technical bases document (Attachment 1). A comparison matrix (Attachment 3) was developed to compare the DBNPS EALs to the NEI 99-01, Revision 6 EALs. This matrix provides a tabular format of the ICs, mode applicability, and EAL threshold values in NEI 99-01, Revision 6, along with the proposed EALs. The comparison matrix also compares the proposed EALs in terms of differences and deviations from the NRC-endorsed guidance provided in NEI 99-01, Revision 6. The comparison matrix summarizes an evaluation that determined if the proposed IC and EAL wording represents no change from the guidance, a difference from the guidance, or a deviation from the guidance contained in NEI 99-01, Revision 6. Items were determined to be differences or deviations based on the definitions provided in Regulatory Issue Summary (RIS) 2003-18, Supplement 2. The RIS defines an EAL difference and deviation as follows: x A difference is an EAL change where the basis scheme guidance differs in wording but agrees in meaning and intent, such that a classification of an event would be the same, whether using the basis scheme guidance or the site-specific proposed EAL. Examples of differences include the use of site-specific terminology or administrative re-formatting of site-specific EALs. x A deviation is an EAL change where the basis scheme guidance differs in wording and is altered in meaning or intent, such that a classification of the event could be different between the basis scheme guidance and the site-specific proposed EAL. Examples of deviations include the use of altered mode applicability, altering key words or time limits, or changing words of physical reference (protected area, safety-related equipment, etc.). The evaluation determined that the proposed DBNPS specific ICs and EALs contain differences from the NEI 99-01, Revision 6, guidance, but do not contain deviations. The basis for each difference is included in Attachment 3.

Evaluation of Proposed License Amendment Page 4 of 8 3.2 Instrumentation Validation NRC Information Notice (IN) 2013-01, Emergency Action Level Thresholds Outside the Range of Radiation Monitors, is intended to inform licensees of the importance of having adequate procedures to properly evaluate changes to site procedures, equipment, and facilities for potential impact on the licensees ability to maintain an effective emergency plan. Specifically, the IN informs licensees of issues that arose when radiation monitors were not properly evaluated in conjunction with changes made to EAL thresholds for emergency classifications. The NRC also alerted licensees to similar issues in IN 2005-19, Effect of Plant Configuration Changes on the Emergency Plan. Using the guidance from IN 2013-01, IN 2005-19, and NEI 99-01, Revision 6, Section 4.3 Instrumentation Used for EALs, FENOC conducted reviews to verify the threshold values in the proposed EAL scheme could be accurately read on the instrumentation referenced in the EALs. The reviews concluded that the proposed EAL threshold values are within the requisite calibrated ranges of the instrumentation referenced in the EALs and they can be accurately read. 3.3 EAL Scheme Change Evaluation 10 CFR 50, Appendix E, Section IV.B.2 stipulates that a licensee desiring to change its entire EAL scheme shall submit an application for an amendment to its license and receive NRC approval before implementing the change. The proposed changes to the EAL scheme to adopt the NEI 99-01, Revision 6, guidance, do not reduce the capability to meet the applicable emergency planning requirements established in 10 CFR 50.47 and 10 CFR 50, Appendix E. The proposed changes to adopt the NEI 99-01, Revision 6, EAL scheme will continue to provide consistent emergency classifications. Changes to DBNPSs emergency plan and procedures resulting from implementation of the revised EALs will be evaluated in accordance with the requirements of 10 CFR 50.54(q), subsequent to NRC approval. Accordingly, pursuant to the requirements of 10 CFR 50, Appendix E, Section IV.B.2, FENOC requests NRC review and approval of the proposed changes to the DBNPS EAL scheme in accordance with 10 CFR 50.90.

Evaluation of Proposed License Amendment Page 5 of 8

4.0 REGULATORY EVALUATION

4.1 Significant Hazards Consideration FirstEnergy Nuclear Operating Company (FENOC), requests an amendment to the Facility Operating License for Davis-Besse Nuclear Power Station (DBNPS) to support the adoption of an emergency action level (EAL) scheme based on Nuclear Energy Institute (NEI) 99-01, Revision 6. The proposed changes to DBNPSs EAL scheme does not reduce the capability to meet the emergency planning requirements established in 10 CFR 50.47 and 10 CFR 50, Appendix E. The proposed changes do not reduce the functionality, performance, or capability of DBNPSs Emergency Response Organization (ERO) to respond in mitigating the consequences of accidents. All DBNPS ERO functions will continue to be performed as required. FENOC has evaluated whether or not a significant hazards consideration is involved with the proposed amendment(s) by focusing on the three standards set forth in 10 CFR 50.92, Issuance of amendment, as discussed below:

1. Does the proposed amendment involve a significant increase in the probability or consequences of an accident previously evaluated?

Response: No. The proposed changes to DBNPSs EAL scheme to adopt the NRC-endorsed guidance in NEI 99-01, Revision 6, do not involve any physical changes to plant systems or equipment. The proposed changes do not alter any of the requirements of the technical specifications. The proposed changes do not modify any plant equipment and do not impact any failure modes that could lead to an accident. Additionally, the proposed changes do not impact the ability of structures, systems, or components (SSCs) to perform their intended safety functions in mitigating the consequences of an initiating event within the assumed acceptance limits. Therefore, the proposed change does not involve a significant increase in the probability or consequences of an accident previously evaluated.

2. Does the proposed amendment create the possibility of a new or different kind of accident from any accident previously evaluated?

Response: No. The proposed changes to DBNPSs EAL scheme to adopt the NRC-endorsed guidance in NEI 99-01, Revision 6, do not involve any physical changes to plant systems or equipment. The proposed changes do not involve the addition of any new plant equipment. The proposed changes will not alter the design configuration, or method of operation of plant equipment beyond its normal functional capabilities. DBNPS functions will continue to be performed as required. The proposed changes do not create any new credible failure mechanisms, malfunctions, or accident initiators.

Evaluation of Proposed License Amendment Page 6 of 8 Therefore, the proposed change does not create the possibility of a new or different kind of accident from any previously evaluated.

3. Does the proposed amendment involve a significant reduction in a margin of safety?

Response: No. The proposed changes to DBNPSs EAL scheme to adopt the NRC-endorsed guidance in NEI 99-01, Revision 6, do not involve any physical changes to plant systems or equipment. Margins of safety are unaffected by the proposed changes. There are no changes being made to safety analysis assumptions, safety limits, or limiting safety system settings that would adversely affect plant safety as a result of the proposed EAL scheme change. The proposed change does not affect the technical specifications. There are no changes to environmental conditions of any of the SSC or the manner in which any SSC is operated. The applicable requirements of 10 CFR 50.47 and 10 CFR 50, Appendix E will continue to be met. Therefore, the proposed change does not involve a significant reduction in a margin of safety. Based on the above, FENOC concludes that the proposed amendment does not involve a significant hazards consideration under the standards set forth in 10 CFR 50.92(c), and, accordingly, a finding of no significant hazards consideration is justified. 4.2 Applicable Regulatory Requirements/Criteria 10 CFR 50.47(b)(4) requires the emergency response plan to meet the following standard: A standard emergency classification and action level scheme, the bases of which include facility system and effluent parameters, is in use by the nuclear facility licensee, and State and local response plans call for reliance on information provided by facility licensees for determinations of minimum initial offsite response measures. 10 CFR 50 Appendix E, section IV, Content of Emergency Plan, item B, Assessment Actions, states:

1. The means to be used for determining the magnitude of, and for continually assessing the impact of, the release of radioactive materials shall be described, including emergency action levels that are to be used as criteria for determining the need for notification and participation of local and State agencies, the Commission, and other Federal agencies, and the emergency action levels that are to be used for determining when and what type of protective measures should be considered within and outside the site boundary to protect health and safety. The emergency action levels shall be based on in-plant conditions and instrumentation in addition to onsite and offsite monitoring. By June 20, 2012, for nuclear power reactor licensees, these action levels must include hostile action that may adversely affect the nuclear power plant. The initial emergency action levels shall be discussed and agreed on by the applicant or licensee and state and local governmental authorities, and approved by the

Evaluation of Proposed License Amendment Page 7 of 8 NRC. Thereafter, emergency action levels shall be reviewed with the State and local governmental authorities on an annual basis.

2. A licensee desiring to change its entire emergency action level scheme shall submit an application for an amendment to its license and receive NRC approval before implementing the change. Licensees shall follow the change process in § 50.54(q) for all other emergency action level changes.

FENOC has determined that the proposed amendment maintains conformance with the regulatory requirements described above. 4.3 Conclusions In conclusion, based on the considerations discussed above, (1) there is reasonable assurance that the health and safety of the public will not be endangered by operation in the proposed manner, (2) such activities will be conducted in compliance with the Commissions regulations, and (3) the issuance of the amendment will not be inimical to the common defense and security or to the health and safety of the public.

5.0 ENVIRONMENTAL CONSIDERATION

The proposed changes to the emergency action levels maintain the environmental bounds of the current environmental assessment associated with the DBNPS. The proposed changes will not affect plant safety and will not have an adverse effect on the probability of an accident occurring. The proposed amendment does not involve (i) a significant hazards consideration, (ii) a significant change in the types or significant increase in the amounts of any effluents that may be released offsite, or (iii) a significant increase in individual or cumulative occupational radiation exposure. Therefore, no environmental impact statement of environmental assessment need be prepared in connection with the proposed amendment.

Evaluation of Proposed License Amendment Page 8 of 8

6.0 REFERENCES

1. Letter from Mark Thaggard (U.S. Nuclear Regulatory Commission) to Susan Perkins-Grew (Nuclear Energy Institute), U.S. Nuclear Regulatory Commission Review and Endorsement of NEI 99-01, Revision 6, November 2012, dated March 28, 2013 (ADAMS Accession Number ML12346A463).
2. NEI 99-01, Revision 6, Development of Emergency Action Levels for Non-Passive Reactors, dated November 2012 (ADAMS Accession Number ML13091A209).
3. Regulatory Issue Summary 2005-02, Revision 1, Clarifying the Process for Making Emergency Plan Changes, dated August 19, 2011 (ADAMS Accession Number ML100340545).
4. Regulatory Issue Summary 2003-18, Supplement 2, Use of NEI 99-01, Methodology for Development of Emergency Action Levels, dated December 12, 2005 (ADAMS Accession Number ML051450482).
5. Letter from Eric J. Leeds (NRC) to Barry S. Allen (FENOC), Davis-Besse Nuclear Power Station, Unit No. 1, Safety Evaluation for Emergency Action Levels (TAC No.

MD7313), dated December 19, 2008 (ADAMS Accession Number ML083450120).

6. Information Notice 2013-01, Emergency Action Level Thresholds Outside the Range of Radiation Monitors, dated February 13, 2013 (ADAMS Accession Number ML12325A326).
7. Information Notice 2005-19, Effect of Plant Configuration Changes on the Emergency Plan, dated July 18, 2005 (ADAMS Accession Number ML051530520).

7.0 ATTACHMENTS

1. Emergency Action Level (EAL) Bases Document
2. Emergency Action Level (EAL) Bases Document (Redline Version)
3. Davis-Besse Nuclear Power Station NEI 99-01, Revision 6, EAL Comparison Matrix
4. Emergency Action Level (EAL) Wallcharts

Evaluation of Proposed License Amendment Attachment 1 Emergency Action Level (EAL) Bases Document (272 Pages Follow)

DAVIS-BESSE REFERENCE MATERIAL EMERGENCY ACTION LEVEL TECHNICAL BASES DOCUMENT EAL BASES DOCUMENT Rev. 0 Page 1 of 272

TABLE OF CONTENTS SECTION PAGE 1.0 PURPOSE ................................................................................................................................... 6 2.0 DISCUSSION ............................................................................................................................... 6 2.1 Background ............................................................................................................................... 6 2.2 Fission Product Barriers ............................................................................................................ 7 2.3 Fission Product Barrier Classification Criteria ........................................................................... 7 2.4 EAL Organization ...................................................................................................................... 8 2.5 Technical Bases Information................................................................................................... 10 2.6 Operating Mode Applicability .................................................................................................. 11 3.0 GUIDANCE ON MAKING EMERGENCY CLASSIFICATIONS .................................................. 12 3.1 General Considerations .......................................................................................................... 12 3.2 Classification Methodology ..................................................................................................... 13 4.0 REFERENCES .......................................................................................................................... 17 4.1 Developmental ........................................................................................................................ 17 4.2 Implementing .......................................................................................................................... 17 5.0 DEINITIONS, ACRONYMS & ABBREVIATIONS ...................................................................... 18 5.1 Definitions ..18 5.2 Abbreviations/Acronyms . 23 6.0 DBNPS TO NEI 99-01 Rev. 6 EAL CROSS-REFERENCE ....................................................... 26 7.0 ATTACHMENTS ........................................................................................................................ 30 1 Emergency Action Level Technical Bases .................................................................... 30 Category H Hazards ............................................................................................. 31 HG1.1 ................................................................................................ 33 HS1.1 ................................................................................................ 35 HA1.1 ................................................................................................ 37 HA1.2 ................................................................................................ 39 HU1.1 ................................................................................................ 41 HU1.2 ................................................................................................ 43 HU1.3 ................................................................................................ 45 HU2.1 ................................................................................................ 47 HU3.1 ................................................................................................ 49 HU3.2 ................................................................................................ 50 HU3.3 ................................................................................................ 51 HU3.4 ................................................................................................ 52 EAL BASES DOCUMENT Rev. 0 Page 2 of 272

HU4.1 ................................................................................................ 53 HU4.2 ................................................................................................ 56 HU4.3 ................................................................................................ 59 HU4.4 ................................................................................................ 60 HA5.1 ................................................................................................ 61 HS6.1 ................................................................................................ 64 HA6.1 ................................................................................................ 66 HG7.1 ................................................................................................ 68 HS7.1 ................................................................................................ 70 HA7.1 ................................................................................................ 71 HU7.1 ................................................................................................ 72 Category R Abnormal Rad Release / Rad Effluent .............................................. 73 RG1.1 ................................................................................................ 74 RG1.2 ................................................................................................ 76 RG1.3 ................................................................................................ 78 RS1.1 ................................................................................................ 80 RS1.2 ................................................................................................ 82 RS1.3 ................................................................................................ 84 RA1.1 ................................................................................................ 86 RA1.2 ................................................................................................ 88 RA1.3 ................................................................................................ 90 RA1.4 ................................................................................................ 92 RU1.1 ................................................................................................ 94 RU1.2 ................................................................................................ 97 RG2.1 ................................................................................................ 99 RS2.1 .............................................................................................. 100 RA2.1 .............................................................................................. 101 RA2.2 .............................................................................................. 103 RA2.3 .............................................................................................. 105 RU2.1 .............................................................................................. 106 RA3.1 .............................................................................................. 108 RA3.2 .............................................................................................. 109 Category E DFSF ............................................................................................... 111 EU1.1 .............................................................................................. 112 Category C Cold Shutdown / Refueling System Malfunction.............................. 114 EAL BASES DOCUMENT Rev. 0 Page 3 of 272

CG1.1 .............................................................................................. 116 CS1.1 .............................................................................................. 120 CA1.1 .............................................................................................. 122 CA1.2 .............................................................................................. 123 CU1.1 .............................................................................................. 125 CU1.2 .............................................................................................. 127 CA2.1 .............................................................................................. 129 CU2.1 .............................................................................................. 131 CA3.1 .............................................................................................. 134 CU3.1 .............................................................................................. 137 CU3.2 .............................................................................................. 139 CU4.1 .............................................................................................. 141 CU5.1 .............................................................................................. 143 CU5.2 .............................................................................................. 146 CU5.3 .............................................................................................. 149 CA6.1 .............................................................................................. 152 Category S System Malfunction ......................................................................... 155 SG1.1 .............................................................................................. 157 SG1.2 .............................................................................................. 160 SS1.1 .............................................................................................. 163 SA1.1 .............................................................................................. 165 SU1.1 .............................................................................................. 168 SS2.1 .............................................................................................. 170 SA3.1 .............................................................................................. 172 SU3.1 .............................................................................................. 175 SU4.1 .............................................................................................. 177 SU4.2 .............................................................................................. 178 SU5.1 .............................................................................................. 179 SS6.1 .............................................................................................. 181 SA6.1 .............................................................................................. 184 SU6.1 .............................................................................................. 186 SU6.2 .............................................................................................. 189 SU7.1 .............................................................................................. 192 SU7.2 .............................................................................................. 195 SU7.3 .............................................................................................. 198 EAL BASES DOCUMENT Rev. 0 Page 4 of 272

SU8.1 .............................................................................................. 201 SU8.2 .............................................................................................. 202 SA9.1 .............................................................................................. 204 Category F Fission Product Barrier Degradation ............................................... 206 FG1.1 .............................................................................................. 208 FS1.1 ............................................................................................... 209 FA1.1 ............................................................................................... 210 2 Fission Product Barrier Loss / Potential Loss Matrix and Bases ......................................................................................................... 211 3 Safe Shutdown Rooms/Areas Tables R-2 & H-2 Bases .............................................. 262 EAL BASES DOCUMENT Rev. 0 Page 5 of 272

1.0 PURPOSE This document provides an explanation and rationale for each Emergency Action Level (EAL) included in the EAL Upgrade Project for Davis-Besse Nuclear Power Station (DBNPS). It should be used to facilitate review of the DBNPS EALs and provide historical documentation for future reference. Decision-makers responsible for implementation of RA-EP-01500 Emergency Classification, may use this document as a technical reference in support of EAL interpretation. This information may assist the Emergency Director in making classifications, particularly those involving judgment or multiple events. The basis information may also be useful in training and for explaining event classifications to off-site officials. The expectation is that emergency classifications are made as soon as conditions are present and recognizable for the classification, but within 15 minutes or less in ALL cases of conditions present. Use of this document for assistance is not intended to delay the emergency classification. Because the information in a basis document can affect emergency classification decision-making (e.g., the Emergency Coordinator refers to it during an event), the NRC staff expects that changes to the basis document will be evaluated in accordance with the provisions of 10 CFR 50.54(q). 2.0 DISCUSSION 2.1 Background EALs are the plant-specific indications, conditions or instrument readings that are utilized to classify emergency conditions defined in the DBNPS Emergency Plan (ref. 4.1.13). In 1992, the NRC endorsed NUMARC/NESP-007 Methodology for Development of Emergency Action Levels as an alternative to NUREG-0654 EAL guidance. NEI 99-01 (NUMARC/NESP-007) Revisions 4 and 5 were subsequently issued for industry implementation. Enhancements over earlier revisions included:

  • Consolidating the system malfunction initiating conditions and example emergency action levels, which address conditions that may occur during plant shutdown conditions.
  • Initiating conditions and example emergency action levels that fully address conditions that may be postulated to occur at permanently Defueled Stations and Independent Spent Fuel Storage Installations (ISFSIs).
  • Simplifying the fission product barrier EAL threshold for a Site Area Emergency.

Subsequently, Revision 6 of NEI 99-01 has been issued which incorporates resolutions to numerous implementation issues including the NRC EAL Frequently Asked Questions (FAQs). Using NEI 99-01 Revision 6, "Methodology for the Development of Emergency Action Levels EAL BASES DOCUMENT Rev. 0 Page 6 of 272

for Non-Passive Reactors, (ref. 4.1.1), DBNPS conducted an EAL implementation upgrade project that produced the EALs discussed herein. 2.2 Fission Product Barriers FISSION PRODUCT BARRIER THRESHOLDS represent threats to the defense in depth design concept that precludes the release of radioactive fission products to the environment. This concept relies on multiple physical barriers, any one of which, if maintained intact, precludes the release of significant amounts of radioactive fission products to the environment. Many of the EALs derived from the NEI methodology are FISSION PRODUCT BARRIER THRESHOLD based. That is, the conditions that define the EALs are based upon thresholds that represent the loss or potential loss of one or more of the three fission product barriers. Loss and Potential Loss signify the relative damage and threat of damage to the barrier. A Loss threshold means the barrier no longer assures containment of radioactive materials. A Potential Loss threshold implies an increased probability of barrier loss and decreased certainty of maintaining the barrier. The primary fission product barriers are: A. Fuel Clad (FC): The Fuel Clad Barrier consists of the cladding material that contains the fuel pellets. B. Reactor Coolant System (RC): The RC Barrier includes the RCS primary side and its connections up to and including the pressurizer safety and relief valves, and other connections up to and including the primary isolation valves. C. Containment (CT): The Containment Barrier includes the containment building, and connections up to and including the outermost containment isolation valves. This barrier also includes the main steam, feedwater, and blowdown line extensions outside the containment building up to and including the outermost secondary side isolation valve. Containment Barrier thresholds are used as criteria for escalation of the ECL from Alert to a Site Area Emergency or a General Emergency 2.3 Fission Product Barrier Classification Criteria The following criteria are the bases for event classification related to fission product barrier loss or potential loss: Alert: ANY loss or ANY potential loss of EITHER Fuel Clad or RC Barrier Site Area Emergency: Loss or potential loss of ANY two barriers General Emergency: Loss of ANY two barriers AND loss or potential loss of the third barrier EAL BASES DOCUMENT Rev. 0 Page 7 of 272

2.4 EAL Organization The DBNPS EAL scheme includes the following features:

  • Division of the EAL set into three broad groups:

o EALs applicable under ANY plant operating modes - This group would be reviewed by the EAL-user any time emergency classification is considered. o EALs applicable only under hot operating modes - This group would only be reviewed by the EAL-user when the plant is in Hot Shutdown, Hot Standby, Startup, or Power Operation mode. o EALs applicable only under cold operating modes - This group would only be reviewed by the EAL-user when the plant is in Cold Shutdown, Refueling or Defueled mode. The purpose of the groups is to avoid review of hot condition EALs when the plant is in a cold condition and avoid review of cold condition EALs when the plant is in a hot condition. This approach significantly minimizes the total number of EALs that must be reviewed by the EAL-user for a given plant condition, reduces EAL-user reading burden and, thereby, speeds identification of the EAL that applies to the emergency.

  • Within each group, assignment of EALs to recognition categories and subcategories:

Recognition category and subcategory titles were selected to represent conditions that are operationally significant to the EAL-user. The DBNPS EAL recognition categories align to and represent the NEI 99-01 Revision 6 Recognition Categories. Subcategories are used in the DBNPS scheme to further divide the EALs of a category into logical sets of possible emergency classification thresholds. The DBNPS EAL categories and subcategories are listed below. EAL BASES DOCUMENT Rev. 0 Page 8 of 272

EAL Groups, Recognition Categories and Subcategories EAL Group/Category EAL Subcategory ANY Operating Mode: H - Hazards and Other Conditions 1 - Security Affecting Plant Safety 2 - Seismic Event 3 - Natural or Technological Hazard 4 - Fire 5 - Hazardous Gas 6 - Control Room Evacuation 7 - Emergency Director Judgment R - Abnormal Rad Levels / Rad Effluent 1 - Radiological Effluent 2 - Irradiated Fuel Event 3 - Area Radiation Levels E - Dry Fuel Storage Facility (DFSF) 1 - Confinement Boundary Hot Conditions: S - System Malfunction 1 - Loss of Essential AC Power 2 - Loss of Essential DC Power 3 - Loss of Control Room Indications 4 - RCS Activity 5 - RCS Leakage 6 - RPS Failure 7 - Loss of Communications 8 - Containment Failure 9 - Hazardous Event Affecting Safety Systems F - Fission Product Barrier Degradation None Cold Conditions: C - Cold Shutdown / Refueling System 1 - RCS Level Malfunction 2 - Loss of Essential AC Power 3 - RCS Temperature 4 - Loss of Essential DC Power 5 - Loss of Communications 6 - Hazardous Event Affecting Safety Systems The primary tool for determining the emergency classification level is the EAL Classification Matrix. The user of the EAL Classification Matrix may (but is not required to) consult the EAL Technical Bases Document in order to obtain additional information concerning the EALs under classification consideration. The user should consult Section 3.0 and Attachments 1 & 2 of this document for such information. EAL BASES DOCUMENT Rev. 0 Page 9 of 272

2.5 Technical Bases Information EAL technical bases are provided in Attachment 1 for each EAL according to EAL group (ANY, Hot, Cold), EAL category (R, C, H, S, F and E) and EAL subcategory. A summary explanation of each category and subcategory is given at the beginning of the technical bases discussions of the EALs included in the category. For each EAL, the following information is provided: Category Letter & Title Subcategory Number & Title Initiating Condition (IC) Site-specific description of the generic IC given in NEI 99-01 Rev. 6 EAL Identifier (enclosed in rectangle) Each EAL is assigned a unique identifier to support accurate communication of the emergency classification to onsite and offsite personnel. Four characters define each EAL identifier:

1. First character (letter): Corresponds to the EAL recognition category as described in Section 2.4 (H, R, E, C, S or F)
2. Second character (letter): The emergency classification (G, S, A or U)

G = General Emergency S = Site Area Emergency A = Alert U = Unusual Event

3. Third character (number): Subcategory number within the given category.

Subcategories are sequentially numbered beginning with the number one (1). If a category does not have a subcategory, this character is assigned the number one (1).

4. Fourth character (number): The numerical sequence of the EAL within the EAL subcategory. If the subcategory has only one EAL, it is given the number one (1).

Classification (enclosed in rectangle): Unusual Event (U), Alert (A), Site Area Emergency (S) or General Emergency (G) EAL (enclosed in rectangle) Exact wording of the EAL as it appears in the EAL Classification Matrix EAL BASES DOCUMENT Rev. 0 Page 10 of 272

Mode Applicability One or more of the following plant operating conditions comprise the mode to which each EAL is applicable: 1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown, 5 - Cold Shutdown, 6 - Refueling, D - Defueled, or ALL. (See Section 2.6 for operating mode definitions) Basis: A Generic basis section that provides a description of the rationale for the EAL as provided in NEI 99-01 Rev. 6. This is followed by a Plant-Specific basis section that provides DBNPS-relevant information concerning the EAL. DBNPS Basis Reference(s): Site-specific source documentation from which the EAL is derived 2.6 Operating Mode Applicability (ref. 4.1.8) Reactivity Condition Avg. Reactor Coolant Mode  % Rated Power* (Keff) Temperature (ºF)

1) Power Operation 0.99 > 5% N/A
2) Startup 0.99 5% N/A
3) Hot Standby < 0.99 N/A 280
4) Hot Shutdown < 0.99 N/A 280 > Tavg > 200
5) Cold Shutdown < 0.99 N/A 200
6) Refueling One or more vessel head closure bolts less than fully tensioned.

ALL reactor fuel removed from reactor pressure vessel (full core offload D) Defueled during refueling or extended outage). Refer to Section 3.3.2 for guidance on event caused mode changes. EAL BASES DOCUMENT Rev. 0 Page 11 of 272

3.0 GUIDANCE ON MAKING EMERGENCY CLASSIFICATIONS 3.1 General Considerations When making an emergency classification, the Emergency Director must consider ALL information having a bearing on the proper assessment of an Initiating Condition (IC). This includes the Emergency Action Level (EAL) plus the associated Operating Mode Applicability, Notes, and the technical basis information. In the Recognition Category F matrices, EALs are based on loss or potential loss of FISSION PRODUCT BARRIER THRESHOLDS. 3.1.1 Classification Timeliness NRC regulations require the licensee to establish and maintain the capability to assess, classify, and declare an emergency condition within 15 minutes after the availability of indications to plant operators that an emergency action level has been exceeded and to promptly declare the emergency condition as soon as possible following identification of the appropriate emergency classification level. The NRC staff has provided guidance on implementing this requirement in NSIR/DPR-ISG-01, "Interim Staff Guidance, Emergency Planning for Nuclear Power Plants" (ref. 4.1.11). 3.1.2 Valid Indications ALL emergency classification assessments shall be based upon VALID indications, reports or conditions. A VALID indication, report, or condition, is one that has been verified through appropriate means such that there is no doubt regarding the indicators operability, the conditions existence, or the reports accuracy. For example, verification could be accomplished through an instrument channel check, response on related or redundant indicators, or direct observation by plant personnel. An indication, report, or condition is considered VALID when it is verified by (1) an instrument channel check, or (2) indications on related or redundant indicators, or (3) by direct observation by plant personnel, such that doubt related to the indicators operability, the conditions existence, or the reports accuracy is removed. The validation of indications should be completed in a manner that supports timely emergency declaration. 3.1.3 IMMINENT Conditions For ICs and EALs that have a stipulated time duration (e.g., 15 minutes, 30 minutes, etc.), the Emergency Director should not wait until the applicable time has elapsed, but should declare the event as soon as it is determined that the condition has exceeded, or will likely exceed, the applicable time. If an ongoing radiological release is detected and the release start time is unknown, it should be assumed that the release duration specified in the IC/EAL has been exceeded, absent data to the contrary. 3.1.4 Planned vs. Unplanned Events A planned work activity that results in an expected event or condition which meets or exceeds an EAL does not warrant an emergency declaration provided that: 1) the activity proceeds as planned, and 2) the plant remains within the limits imposed by the operating license. Such activities include planned work to test, manipulate, repair, maintain or modify a system or EAL BASES DOCUMENT Rev. 0 Page 12 of 272

component. In these cases, the controls associated with the planning, preparation and execution of the work will ensure that compliance is maintained with ALL aspects of the operating license provided that the activity proceeds and concludes as expected. Events or conditions of this type may be subject to the reporting requirements of 10 § CFR 50.72 (ref. 4.1.4). 3.1.5 Classification Based on Analysis The assessment of some EALs is based on the results of analyses that are necessary to ascertain whether a specific EAL threshold has been exceeded (e.g., dose assessments, chemistry sampling, RCS leak rate calculation, etc.). For these EALs, the EAL wording or the associated basis discussion will identify the necessary analysis. In these cases, the 15-minute declaration period starts with the availability of the analysis results that show the threshold to be exceeded (i.e., this is the time that the EAL information is first available). The NRC expects licensees to establish the capability to initiate and complete EAL-related analyses within a reasonable period of time (e.g., maintain the necessary expertise on-shift) (ref. 4.1.11). 3.1.6 Emergency Director Judgment While the EALs have been developed to address a full spectrum of possible events and conditions which may warrant emergency classification, a provision for classification based on operator/management experience and judgment is still necessary. The NEI 99-01 EAL scheme provides the Emergency Director with the ability to classify events and conditions based upon judgment using EALs that are consistent with the Emergency Classification Level (ECL) definitions (refer to Category H). The Emergency Director will need to determine if the effects or consequences of the event or condition reasonably meet or exceed a particular ECL definition. A similar provision is incorporated in the Fission Product Barrier Tables; judgment may be used to determine the status of a fission product barrier. 3.1.7 Emergency Action Levels with Embedded Time Requirements Some EALs have embedded time requirements. Declaration must be made as soon as the Emergency Director recognizes that the conditions will not be successfully resolved within 15 minutes. Therefore, for EALs with time-embedded requirements the time for emergency declaration starts with the initial alarm or indication of the event, not after the embedded time has elapsed. For EALs with longer embedded time requirements, the 15-minute clock for declaration begins with recognition that the assigned time limit will be exceeded. For example, SG1.1 - Restoration of at least one essential bus in < 4 hours is not likely. If 20 minutes after loss of the C-1 bus and the D-1 bus it becomes apparent that restoration of either bus will not likely occur within 4 hours the Emergency Director must immediately declare the General Emergency. 3.2 Classification Methodology To make an emergency classification, the user will compare an event or condition (i.e., the relevant plant indications and reports) to an EAL(s) and determine if the EAL has been met or exceeded. The evaluation of an EAL must be consistent with the related Operating Mode Applicability and Notes. If an EAL has been met or exceeded, the associated IC is likewise EAL BASES DOCUMENT Rev. 0 Page 13 of 272

met, the emergency classification process clock starts, and the ECL must be declared in accordance with plant procedures no later than fifteen minutes after the process clock started. When assessing an EAL that specifies a time duration for the off-normal condition, the clock for the EAL time duration runs concurrently with the emergency classification process clock. For a full discussion of this timing requirement, refer to NSIR/DPR-ISG-01 (ref. 4.1.11). 3.2.1 Classification of Multiple Events and Conditions When multiple emergency events or conditions are present, the user will identify ALL met or exceeded EALs. The highest applicable ECL identified during this review is declared. For example:

  • If an Alert EAL and a Site Area Emergency EAL are met, a Site Area Emergency should be declared.

There is no additive effect from multiple EALs meeting the same ECL. For example:

  • If two Alert EALs are met, an Alert should be declared.

Related guidance concerning classification of rapidly escalating events or conditions is provided in Regulatory Issue Summary (RIS) 2007-02, Clarification of NRC Guidance for Emergency Notifications During Quickly Changing Events (ref. 4.1.2). 3.2.2 Consideration of Mode Changes During Classification The mode in effect at the time an event or condition occurred, and prior to any plant or operator response, is the mode that determines whether an IC is applicable. If an event or condition occurs, and results in a mode change before the emergency is declared, the emergency classification level is still based on the mode that existed at the time that the event or condition was initiated (and not when it was declared). Once a different mode is reached, any new event or condition, not related to the original event or condition, requiring emergency classification should be evaluated against the ICs and EALs applicable to the operating mode at the time of the new event or condition. For events that occur in Cold Shutdown or Refueling, escalation is via EALs that are applicable in the Cold Shutdown or Refueling modes, even if Hot Shutdown (or a higher mode) is entered during the subsequent plant response. In particular, the fission product barrier EALs are applicable only to events that initiate in the Hot Shutdown mode or higher. 3.2.3 Classification of IMMINENT Conditions Although EALs provide specific thresholds, the Emergency Director must remain alert to events or conditions that could lead to meeting or exceeding an EAL within a relatively short period of time (i.e., a change in the ECL is IMMINENT). If, in the judgment of the Emergency Director, meeting an EAL is IMMINENT, the emergency classification should be made as if the EAL has been met. While applicable to ALL emergency classification levels, this approach is particularly important at the higher emergency classification levels since it provides additional time for implementation of protective measures. EAL BASES DOCUMENT Rev. 0 Page 14 of 272

3.2.4 Emergency Classification Level Upgrading and Downgrading An ECL may be downgraded when the event or condition that meets the highest IC and EAL no longer exists, and other site-specific downgrading requirements are met. If downgrading the ECL is deemed appropriate, the new ECL would then be based on a lower applicable IC(s) and EAL(s). The ECL may also be terminated. As noted above, guidance concerning classification of rapidly escalating events or conditions is provided in RIS 2007-02 (ref. 4.1.2). 3.2.5 Classification of Short-Lived Events Event-based ICs and EALs define a variety of specific occurrences that have potential or actual safety significance. By their nature, some of these events may be short-lived and, thus, over before the emergency classification assessment can be completed. If an event occurs that meets or exceeds an EAL, the associated ECL must be declared regardless of its continued presence at the time of declaration. Examples of such events include an earthquake or a failure of the reactor protection system to automatically trip the reactor followed by a successful manual trip. 3.2.6 Classification of Transient Conditions Many of the ICs and/or EALs employ time-based criteria. These criteria will require that the IC/EAL conditions be present for a defined period of time before an emergency declaration is warranted. In cases where no time-based criterion is specified, it is recognized that some transient conditions may cause an EAL to be met for a brief period of time (e.g., a few seconds to a few minutes). The following guidance should be applied to the classification of these conditions. EAL momentarily met during expected plant response - In instances where an EAL is briefly met during an expected (normal) plant response, an emergency declaration is not warranted provided that associated systems and components are operating as expected, and operator actions are performed in accordance with procedures. EAL momentarily met but the condition is corrected prior to an emergency declaration - If an operator takes prompt manual action to address a condition, and the action is successful in correcting the condition prior to the emergency declaration, then the applicable EAL is not considered met and the associated emergency declaration is not required. It is important to stress that the 15-minute emergency classification assessment period (process clock) is not a grace period during which a classification may be delayed to allow the performance of a corrective action that would obviate the need to classify the event. Emergency classification assessments must be deliberate and timely, with no undue delays. The provision discussed above addresses only those rapidly evolving situations when an operator is able to take a successful corrective action prior to the Emergency Director completing the review and steps necessary to make the emergency declaration. This provision is included to ensure that any public protective actions resulting from the emergency classification are truly warranted by the plant conditions. EAL BASES DOCUMENT Rev. 0 Page 15 of 272

3.2.7 After-the-Fact Discovery of an Emergency Event or Condition In some cases, an EAL may be met but the emergency classification was not made at the time of the event or condition. This situation can occur when personnel discover that an event or condition existed which met an EAL, but no emergency was declared, and the event or condition no longer exists at the time of discovery. This may be due to the event or condition not being recognized at the time or an error that was made in the emergency classification process. In these cases, no emergency declaration is warranted; however, the guidance contained in NUREG-1022 (ref. 4.1.3) is applicable. Specifically, the event should be reported to the NRC in accordance with 10 CFR § 50.72 (ref. 4.1.4) within one hour of the discovery of the undeclared event or condition. The licensee should also notify appropriate State and local agencies in accordance with the agreed upon arrangements. 3.2.8 Retraction of an Emergency Declaration Guidance on the retraction of an emergency declaration reported to the NRC is discussed in NUREG-1022 (ref. 4.1.3). EAL BASES DOCUMENT Rev. 0 Page 16 of 272

4.0 REFERENCES

4.1 Developmental 4.1.1 NEI 99-01 Revision 6, Methodology for the Development of Emergency Action Levels for Non-Passive Reactors, ADAMS Accession Number ML13091A209 4.1.2 RIS 2007-02 Clarification of NRC Guidance for Emergency Notifications During Quickly Changing Events, February 2, 2007 4.1.3 NUREG-1022 Event Reporting Guidelines: 10CFR50.72 and 50.73 4.1.4 10 § CFR 50.72 Immediate Notification Requirements for Operating Nuclear Power Reactors 4.1.5 10 § CFR 50.73 License Event Report System 4.1.6 DBNPS ODCM 4.1.7 DBNPS UFSAR Figure 1.2-12 Site Plan 4.1.8 Technical Specifications Table 1.1-1 Modes 4.1.9 DB-OP-06904 Shutdown Operations 4.1.10 NG-QS-00121 DBNPS Writers Guide 4.1.11 NSIR/DPR-ISG-01 Interim Staff Guidance, Emergency Planning for Nuclear Power Plants 4.1.12 Site CSAR NUH-003 4.1.13 DBNPS Emergency Plan 4.1.14 DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tube Rupture 4.2 Implementing 4.2.1 RA-EP-01500 Emergency Classification 4.2.2 NEI 99-01 Rev. 6 to DBNPS EAL Comparison Matrix 4.2.3 DBNPS EAL Matrix EAL BASES DOCUMENT Rev. 0 Page 17 of 272

5.0 DEFINITIONS, ACRONYMS & ABBREVIATIONS 5.1 Definitions (ref. 4.1.1 except as noted) Selected terms used in Initiating Condition and Emergency Action Level statements are set in ALL capital letters (e.g., ALL CAPS). These words are defined terms that have specific meanings as used in this document. The definitions of these terms are provided below. Alert Events are in progress or have occurred which involve an actual or potential substantial degradation of the level of safety of the plant or a security event that involves probable life threatening risk to site personnel or damage to site equipment because of HOSTILE ACTION. Any releases are expected to be limited to small fractions of the EPA PAG exposure levels. Confinement Boundary The barrier(s) between spent fuel and the environment once the spent fuel is processed for dry storage. As related to the DBNPS Dry Fuel Storage Facility, CONFINEMENT BOUNDARY is defined as the Dry Shielded Canister (DSC) (ref. 4.1.12). Containment Closure The procedurally defined actions taken to secure containment and its associated structures, systems, and components as a functional barrier to fission product release under existing plant conditions (ref. 4.1.9). Emergency Action Level (EAL) A pre-determined, site-specific, observable threshold for an Initiating Condition that, when met or exceeded, places the plant in a given emergency classification level. Emergency Classification Level (ECL) One of a set of names or titles established by the US Nuclear Regulatory Commission (NRC) for grouping off-normal events or conditions according to (1) potential or actual effects or consequences, and (2) resulting onsite and offsite response actions. The emergency classification levels, in ascending order of severity, are:

  • Unusual Event (UE)
  • Alert
  • Site Area Emergency (SAE)
  • General Emergency (GE)

EPA PAGs Environment Protection Agency Protective Action Guidelines. The EPA PAGs are expressed in terms of dose commitment: 1 Rem TEDE or 5 Rem CDE Thyroid. Actual or projected offsite exposures in excess of the EPA PAGs requires DBNPS to recommend protective actions for the general public to offsite planning agencies. EAL BASES DOCUMENT Rev. 0 Page 18 of 272

Explosion A rapid, violent and catastrophic failure of a piece of equipment due to combustion, chemical reaction or overpressurization. A release of steam (from high energy lines or components) or an electrical component failure (caused by short circuits, grounding, arcing, etc.) should not automatically be considered an EXPLOSION. Such events may require a post-event inspection to determine if the attributes of an EXPLOSION are present. Faulted The term applied to a steam generator that has a steam leak on the secondary side of sufficient size to cause an uncontrolled drop in steam generator pressure or the steam generator to become completely depressurized. Fire Combustion characterized by heat and light. Sources of smoke such as slipping drive belts or overheated electrical equipment do not constitute FIRES. Observation of flame is preferred but is NOT required if large quantities of smoke and heat are observed. Fission Product Barrier Threshold A pre-determined, site-specific, observable threshold indicating the loss or potential loss of a fission product barrier. Flooding A condition where water is entering a room or area faster than installed equipment is capable of removal, resulting in a rise of water level within the room or area. General Emergency Events are in progress or have occurred which involve actual or IMMINENT substantial core degradation or melting with potential for loss of containment integrity or HOSTILE ACTION that results in an actual loss of physical control of the facility. Releases can be reasonably expected to exceed EPA PAG exposure levels offsite for more than the immediate site area. Hostage A person(s) held as leverage against the station to ensure that demands will be met by the station. Hostile Action An act toward DBNPS or its personnel that includes the use of violent force to destroy equipment, take HOSTAGES, and/or intimidate the licensee to achieve an end. This includes attack by air, land, or water using guns, explosives, PROJECTILEs, vehicles, or other devices used to deliver destructive force. Other acts that satisfy the overall intent may be included. HOSTILE ACTION should not be construed to include acts of civil disobedience or felonious acts that are not part of a concerted attack on DBNPS. Non-terrorism-based EALs should be EAL BASES DOCUMENT Rev. 0 Page 19 of 272

used to address such activities (i.e., this may include violent acts between individuals in the OWNER CONTROLLED AREA). Hostile Force One or more individuals who are engaged in a determined assault, overtly or by stealth and deception, equipped with suitable weapons capable of killing, maiming, or causing destruction. Imminent The trajectory of events or conditions is such that an EAL will be met within a relatively short period of time regardless of mitigation or corrective actions. Impede(d) Personnel access to a room or area is hindered to an extent that extraordinary measures are necessary to facilitate entry of personnel into the affected room/area (e.g., requiring use of protective equipment, such as SCBAs, that is not routinely employed). Independent Spent Fuel Storage Installation (ISFSI) A complex that is designed and constructed for the interim storage of spent nuclear fuel and other radioactive materials associated with spent fuel storage. Initiating Condition (IC) An event or condition that aligns with the definition of one of the four emergency classification levels by virtue of the potential or actual effects or consequences. Maintain Take appropriate action to hold the value of an identified parameter within specified limits. Owner Controlled Area The property associated with the station and owned by the company. Access is normally limited to persons entering for official business (ref. 4.1.13). Projectile An object directed toward a Nuclear Power Plant that could cause concern for its continued operability, reliability, or personnel safety. Protected Area An area that normally encompasses all controlled areas within the security protected area fence. EAL BASES DOCUMENT Rev. 0 Page 20 of 272

RCS Intact The RCS should be considered intact when the RCS pressure boundary is in its normal condition for the cold shutdown mode of operation (e.g., no freeze seals or nozzle dams). Refueling Pathway The reactor refueling canal, spent fuel pool and fuel transfer canal comprise the REFUELING PATHWAY. Restore Take the appropriate action required to return the value of an identified parameter to the applicable limits Ruptured The condition of a steam generator in which primary-to-secondary leakage is of sufficient magnitude to require a safety injection (ref. 4.1.14). Safety System A system required for safe plant operation, cooling down the plant and/or placing it in the cold shutdown condition, including the ECCS. These are typically systems classified as safety-related (as defined in 10CFR50.2): Those structures, systems and components that are relied upon to remain functional during and following design basis events to assure: (1) The integrity of the reactor coolant pressure boundary; (2) The capability to shut down the reactor and maintain it in a safe shutdown condition; (3) The capability to prevent or mitigate the consequences of accidents which could result in potential offsite exposures. Security Condition ANY Security Event as listed in the approved security contingency plan that constitutes a threat/compromise to site security, threat/risk to site personnel, or a potential degradation to the level of safety of the plant. A SECURITY CONDITION does not involve a HOSTILE ACTION. Site Area Emergency Events are in progress or have occurred which involve actual or likely major failures of plant functions needed for protection of the public or HOSTILE ACTION that results in intentional damage or malicious acts; 1) toward site personnel or equipment that could lead to the likely failure of or; 2) that prevent effective access to, equipment needed for the protection of the public. Any releases are not expected to result in exposure levels which exceed EPA PAG exposure levels beyond the SITE BOUNDARY. EAL BASES DOCUMENT Rev. 0 Page 21 of 272

Site Boundary Area as depicted in UFSAR Figure 1.2-12 Site Plan (ref. 4.1.7). The SITE BOUNDARY is defined at a minimum exclusion distance of 0.75 miles. This is the nearest distance from potential release points at which protective actions would be required for members of the public. Unisolable An open or breached system line that cannot be isolated, remotely or locally. Unplanned A parameter change or an event that is not 1) the result of an intended evolution or 2) an expected plant response to a transient. The cause of the parameter change or event may be known or unknown. Unusual Event Events are in progress or have occurred which indicate a potential degradation of the level of safety of the plant or indicate a security threat to facility protection has been initiated. No releases of radioactive material requiring offsite response or monitoring are expected unless further degradation of SAFETY SYSTEMS occurs. Valid An indication, report, or condition, is considered to be VALID when it is verified by (1) an instrument channel check, or (2) indications on related or redundant indicators, or (3) by direct observation by plant personnel, such that doubt related to the indicators operability, the conditions existence, or the reports accuracy is removed. Implicit in this definition is the need for timely assessment. Visible Damage Damage to a component or structure that is readily observable without measurements, testing, or analysis. The visual impact of the damage is sufficient to cause concern regarding the operability or reliability of the affected component or structure. EAL BASES DOCUMENT Rev. 0 Page 22 of 272

5.2 Abbreviations/Acronyms °F ....................................................................................................... Degrees Fahrenheit °........................................................................................................................... Degrees AC ....................................................................................................... Alternating Current AOP ................................................................................. Abnormal Operating Procedure ATWS ..................................................................... Anticipated Transient Without Scram B&W ..................................................................................................... Babcock & Wilcox BWST .................................................................................. Borated Water Storage Tank DBNPS ..................................................................... Davis-Besse Nuclear Power Station CCW ....................................................................................... Component Cooling Water CDE ...................................................................................... Committed Dose Equivalent CFR ..................................................................................... Code of Federal Regulations DBA ............................................................................................... Design Basis Accident DC ............................................................................................................... Direct Current DFSF .......................................................................................... Dry Fuel Storage Facility DHR ................................................................................................. Decay Heat Removal DSC ................................................................................................ Dry Shielded Canister EAL ............................................................................................. Emergency Action Level ECCS............................................................................ Emergency Core Cooling System ECL ................................................................................. Emergency Classification Level EOF .................................................................................. Emergency Operations Facility EOP ...............................................................................Emergency Operating Procedure EPA .............................................................................. Environmental Protection Agency EPIP ................................................................Emergency Plan Implementing Procedure ERG ................................................................................Emergency Response Guideline ESF ........................................................................................ Engineered Safety Feature FAA ................................................................................. Federal Aviation Administration FBI ................................................................................... Federal Bureau of Investigation FEMA............................................................... Federal Emergency Management Agency FSAR .................................................................................... Final Safety Analysis Report GE ..................................................................................................... General Emergency IC ......................................................................................................... Initiating Condition IPEEE .................Individual Plant Examination of External Events (Generic Letter 88-20) ISFSI ........................................................... Independent Spent Fuel Storage Installation EAL BASES DOCUMENT Rev. 0 Page 23 of 272

Keff .........................................................................Effective Neutron Multiplication Factor LCO .................................................................................. Limiting Condition of Operation LER ............................................................................................... Licensee Event Report LOCA ......................................................................................... Loss of Coolant Accident MSIV ...................................................................................... Main Steam Isolation Valve MSL ........................................................................................................ Main Steam Line MSSV ........................................................................................ Main Steam Safety Valve mR, mRem, mrem, mREM .............................................. milli-Roentgen Equivalent Man MU-HPI .................................................................... Makeup and High Pressure Injection MW .................................................................................................................... Megawatt NEI .............................................................................................. Nuclear Energy Institute NESP ................................................................... National Environmental Studies Project NRC ................................................................................Nuclear Regulatory Commission NSSS ................................................................................ Nuclear Steam Supply System NORAD................................................... North American Aerospace Defense Command OBE ...................................................................................... Operating Basis Earthquake OCA .............................................................................................. Owner Controlled Area ODCM........................................................................... Off-site Dose Calculation Manual ORO ................................................................................. Offsite Response Organization PA .............................................................................................................. Protected Area PAG ........................................................................................ Protective Action Guideline PORV .................................................................................. Power Operated Relief Valve PRA/PSA ..................... Probabilistic Risk Assessment / Probabilistic Safety Assessment PWR ....................................................................................... Pressurized Water Reactor PSIG ............................................................................... Pounds per Square Inch Gauge R ........................................................................................................................ Roentgen RCDT.................................................................................... Reactor Coolant Drain Tank RCS ............................................................................................ Reactor Coolant System Rem, rem, REM ....................................................................... Roentgen Equivalent Man RPS ........................................................................................ Reactor Protection System RV .............................................................................................................Reactor Vessel SAR ............................................................................................... Safety Analysis Report SBO ......................................................................................................... Station Blackout SBODG........................................................................ Station Blackout Diesel Generator EAL BASES DOCUMENT Rev. 0 Page 24 of 272

SCBA ...................................................................... Self-Contained Breathing Apparatus SG ......................................................................................................... Steam Generator SI .............................................................................................................. Safety Injection SPDS ........................................................................... Safety Parameter Display System SRO ............................................................................................ Senior Reactor Operator TEDE ............................................................................... Total Effective Dose Equivalent TOAF .................................................................................................... Top of Active Fuel TSC .......................................................................................... Technical Support Center TRM ............................................................................... Technical Requirements Manual EAL BASES DOCUMENT Rev. 0 Page 25 of 272

6.0 DBNPS-TO-NEI 99-01 Rev. 6 EAL CROSS-REFERENCE This cross-reference is provided to facilitate association and location of a DBNPS EAL within the NEI 99-01 IC/EAL identification scheme. Further information regarding the development of the DBNPS EALs based on the NEI guidance can be found in the EAL Comparison Matrix. DBNPS NEI 99-01 Rev. 6 Example EAL IC EAL HU1.1 HU1 1 HU1.2 HU1 2 HU1.3 HU1 3 HU2.1 HU2 1 HU3.1 HU3 1 HU3.2 HU3 2 HU3.3 HU3 3 HU3.4 HU3 4 HU4.1 HU4 1 HU4.2 HU4 2 HU4.3 HU4 3 HU4.4 HU4 4 HU7.1 HU7 1 HA1.1 HA1 1 HA1.2 HA1 2 HA5.1 HA5 1 HA6.1 HA6 1 HA7.1 HA7 1 HS1.1 HS1 1 HS6.1 HS6 1 HS7.1 HS7 1 EAL BASES DOCUMENT Rev. 0 Page 26 of 272

DBNPS NEI 99-01 Rev. 6 Example EAL IC EAL HG1.1 HG1 1 HG7.1 HG7 1 RU1.1 AU1 1, 2 RU1.2 AU1 3 RU2.1 AU2 1 RA1.1 AA1 1 RA1.2 AA1 2 RA1.3 AA1 3 RA1.4 AA1 4 RA2.1 AA2 1 RA2.2 AA2 2 RA2.3 AA2 3 RA3.1 AA3 1 RA3.2 AA3 2 RS1.1 AS1 1 RS1.2 AS1 2 RS1.3 AS1 3 RS2.1 AS2 1 RG1.1 AG1 1 RG1.2 AG1 2 RG1.3 AG1 3 RG2.1 AG2 1 EU1.1 E-HU1 1 CU1.1 CU1 1 CU1.2 CU1 2 EAL BASES DOCUMENT Rev. 0 Page 27 of 272

DBNPS NEI 99-01 Rev. 6 Example EAL IC EAL CU2.1 CU2 1 CU3.1 CU3 1 CU3.2 CU3 2 CU4.1 CU4 1 CU5.1 CU5 1 CU5.2 CU5 2 CU5.3 CU5 3 CA1.1 CA1 1 CA1.2 CA1 2 CA2.1 CA2 1 CA3.1 CA3 1, 2 CA6.1 CA6 1 CS1.1 CS1 3 CG1.1 CG1 2 SU1.1 SU1 1 SU3.1 SU2 1 SU4.1 SU3 1 SU4.2 SU3 2 SU5.1 SU4 1 SU6.1 SU5 1 SU6.2 SU5 2 SU7.1 SU6 1 SU7.2 SU6 2 SU7.3 SU6 3 SU8.1 SU7 1 EAL BASES DOCUMENT Rev. 0 Page 28 of 272

DBNPS NEI 99-01 Rev. 6 Example EAL IC EAL SU8.2 SU7 2 SA1.1 SA1 1 SA3.1 SA2 1 SA6.1 SA5 1 SA9.1 SA9 1 SS1.1 SS1 1 SS2.1 SS8 1 SS6.1 SS5 1 SG1.1 SG1 1 SG1.2 SG8 1 FA1.1 FA1 1 FS1.1 FS1 1 FG1.1 FG1 1 EAL BASES DOCUMENT Rev. 0 Page 29 of 272

7.0 ATTACHMENTS Attachment 1, Emergency Action Level Technical Bases Attachment 2, Fission Product Barrier Matrix and Basis Attachment 3, Safe Shutdown Rooms/Areas Tables R-2 & H-2 Bases EAL BASES DOCUMENT Rev. 0 Page 30 of 272

ATTACHMENT 1 EAL Bases Category H - Hazards and Other Conditions Affecting Plant Safety EAL Group: ANY (EALs in this category are applicable to ANY plant condition, hot or cold.) Hazards are non-plant, system-related events that can directly or indirectly affect plant operation, reactor plant safety or personnel safety.

1. Security Unauthorized entry attempts into the PROTECTED AREA, bomb threats, sabotage attempts, and actual security compromises threatening loss of physical control of the plant.
2. Seismic Event Natural events such as earthquakes have potential to cause plant structure or equipment damage of sufficient magnitude to threaten personnel or plant safety.
3. Natural or Technology Hazard Other natural and non-naturally occurring events that can cause damage to plant facilities include tornados, FLOODING, hazardous material releases and events restricting site access warranting classification.
4. Fire FIREs can pose significant hazards to personnel and reactor safety. Appropriate for classification are FIREs within the site PROTECTED AREA or FIREs that may affect operability of equipment needed for safe shutdown.
5. Hazardous Gas Toxic, corrosive, asphyxiant or flammable gas leaks can affect normal plant operations or preclude access to plant areas required to safely shutdown the plant.
6. Control Room Evacuation Events that are indicative of loss of Control Room habitability. If the Control Room must be evacuated, additional support for monitoring and controlling plant functions is necessary through the emergency response facilities.
7. Emergency Director Judgment The EALs defined in other categories specify the predetermined symptoms or events that are indicative of emergency or potential emergency conditions and thus warrant classification. While these EALs have been developed to address the full spectrum of possible emergency conditions that may warrant classification and subsequent implementation of the Emergency Plan, a provision for classification of emergencies based on operator/management experience and judgment is still necessary. The EALs of this EAL BASES DOCUMENT Rev. 0 Page 31 of 272

ATTACHMENT 1 EAL Bases category provide the Emergency Director the latitude to classify emergency conditions consistent with the established classification criteria based upon Emergency Director judgment. EAL BASES DOCUMENT Rev. 0 Page 32 of 272

ATTACHMENT 1 EAL Bases Category: H - Hazards Subcategory: 1 - Security Initiating Condition: HOSTILE ACTION resulting in loss of physical control of the facility EAL: HG1.1 General Emergency A HOSTILE ACTION is occurring or has occurred within the PROTECTED AREA as reported by the Security Shift Supervisor AND EITHER of the following has occurred: ANY of the following safety functions cannot be controlled or maintained z Reactivity z Core cooling (RCS inventory) z RCS heat removal (ability to maintain heat sink) OR Damage to spent fuel has occurred or is IMMINENT Mode Applicability: ALL NEI 99-01 Basis: This IC addresses an event in which a HOSTILE FORCE has taken physical control of the facility to the extent that the plant staff can no longer operate equipment necessary to maintain key safety functions. It also addresses a HOSTILE ACTION leading to a loss of physical control that results in actual or IMMINENT damage to spent fuel due to 1) damage to a spent fuel pool cooling system (e.g., pumps, heat exchangers, controls, etc.) or, 2) loss of spent fuel pool integrity such that sufficient water level cannot be maintained. Timely and accurate communications between Security Shift Supervision and the Control Room is essential for proper classification of a security-related event (ref. 2, 3). Security plans and terminology are based on the guidance provided by NEI 03-12, Template for the Security Plan, Training and Qualification Plan, Safeguards Contingency Plan and Independent Spent Fuel Storage Installation Security Program. EAL BASES DOCUMENT Rev. 0 Page 33 of 272

ATTACHMENT 1 EAL Bases Emergency plans and implementing procedures are public documents; therefore, EALs should not incorporate Security-sensitive information. This includes information that may be advantageous to a potential adversary, such as the particulars concerning a specific threat or threat location. Security-sensitive information should be contained in non-public documents such as the DBNPS Physical Security Plan (ref.1). DBNPS Basis: None DBNPS Basis Reference(s):

1. DBNPS Physical Security Plan (safeguards)
2. DB-OP-02544 Security Events or Threats (restricted)
3. RA-EP-02890 Emergency Response Organization Response to Security Events or Threats
4. NEI 99-01 HG1 EAL BASES DOCUMENT Rev. 0 Page 34 of 272

ATTACHMENT 1 EAL Bases Category: H - Hazards Subcategory: 1 - Security Initiating Condition: HOSTILE ACTION within the PROTECTED AREA EAL: HS1.1 Site Area Emergency A HOSTILE ACTION is occurring or has occurred within the PROTECTED AREA as reported by the Security Shift Supervisor Mode Applicability: ALL NEI 99-01 Basis: This IC addresses the occurrence of a HOSTILE ACTION within the PROTECTED AREA. This event will require rapid response and assistance due to the possibility for damage to plant equipment. Timely and accurate communications between Security Shift Supervision and the Control Room is essential for proper classification of a security-related event (ref. 2, 3). Security plans and terminology are based on the guidance provided by NEI 03-12, Template for the Security Plan, Training and Qualification Plan, Safeguards Contingency Plan and Independent Spent Fuel Storage Installation Security Program. As time and conditions allow, these events require a heightened state of readiness by the plant staff and implementation of onsite protective measures (e.g., evacuation, dispersal or sheltering). The Site Area Emergency declaration will mobilize Offsite Response Organization (ORO) resources and have them available to develop and implement public protective actions in the unlikely event that the attack is successful in impairing multiple safety functions. This IC does not apply to incidents that are accidental events, acts of civil disobedience, or otherwise are not a HOSTILE ACTION perpetrated by a HOSTILE FORCE. Examples include the crash of a small aircraft, shots from hunters, physical disputes between employees, etc. Reporting of these types of events is adequately addressed by other EALs, or the requirements of 10 CFR § 73.71 or 10 CFR § 50.72. Emergency plans and implementing procedures are public documents; therefore, EALs should not incorporate Security-sensitive information. This includes information that may be advantageous to a potential adversary, such as the particulars concerning a specific threat or threat location. Security-sensitive information should be contained in non-public documents such as the DBNPS Physical Security Plan (ref. 1). Escalation of the emergency classification level would be via IC HG1. EAL BASES DOCUMENT Rev. 0 Page 35 of 272

ATTACHMENT 1 EAL Bases DBNPS Basis: The Security Shift Supervision is defined as the Security Shift Supervisor or designee. These individuals are the designated on-site personnel qualified and trained to confirm that a security event is occurring or has occurred. Training on security event classification is highly controlled due to the strict secrecy controls placed on the DBNPS Physical Security Plan (Safeguards) information (ref. 1). DBNPS Basis Reference(s):

1. DBNPS Physical Security Plan (safeguards)
2. DB-OP-02544 Security Events or Threats (restricted)
3. RA-EP-02890 Emergency Response Organization Response to Security Events or Threats
4. NEI 99-01 HS1 EAL BASES DOCUMENT Rev. 0 Page 36 of 272

ATTACHMENT 1 EAL Bases Category: H - Hazards Subcategory: 1 - Security Initiating Condition: HOSTILE ACTION within the OWNER CONTROLLED AREA or airborne attack threat within 30 minutes EAL: HA1.1 Alert A HOSTILE ACTION is occurring or has occurred within the OWNER CONTROLLED AREA as reported by the Security Shift Supervisor Mode Applicability: ALL NEI 99-01 Basis: This IC addresses the occurrence of a HOSTILE ACTION within the OWNER CONTROLLED AREA. This event will require rapid response and assistance due to the possibility of the attack progressing to the PROTECTED AREA. Timely and accurate communications between Security Shift Supervision and the Control Room is essential for proper classification of a security-related event (ref. 2, 3). Security plans and terminology are based on the guidance provided by NEI 03-12, Template for the Security Plan, Training and Qualification Plan, Safeguards Contingency Plan and Independent Spent Fuel Storage Installation Security Program. As time and conditions allow, these events require a heightened state of readiness by the plant staff and implementation of onsite protective measures (e.g., evacuation, dispersal or sheltering). The Alert declaration will also heighten the awareness of Offsite Response Organizations (OROs), allowing them to be better prepared should it be necessary to consider further actions. This IC does not apply to incidents that are accidental events, acts of civil disobedience, or otherwise are not a HOSTILE ACTION perpetrated by a HOSTILE FORCE. Examples include the crash of a small aircraft, shots from hunters, physical disputes between employees, etc. Reporting of these types of events is adequately addressed by other EALs, or the requirements of 10 CFR § 73.71 or 10 CFR § 50.72. This EAL is applicable for ANY HOSTILE ACTION occurring, or that has occurred, in the OWNER CONTROLLED AREA. This includes any action directed against an ISFSI that is located outside the plant PROTECTED AREA. Emergency plans and implementing procedures are public documents; therefore, EALs should not incorporate Security-sensitive information. This includes information that may be EAL BASES DOCUMENT Rev. 0 Page 37 of 272

ATTACHMENT 1 EAL Bases advantageous to a potential adversary, such as the particulars concerning a specific threat or threat location. Security-sensitive information should be contained in non-public documents such as the DBNPS Physical Security Plan (ref. 1). DBNPS Basis: The Security Shift Supervision is defined as the Security Shift Supervisor or designee. Escalation of the emergency classification level would be via IC HS1 or HG1. DBNPS Basis Reference(s):

1. DBNPS Physical Security Plan (safeguards)
2. DB-OP-02544 Security Events or Threats (restricted)
3. RA-EP-02890 Emergency Response Organization Response to Security Events or Threats
4. NEI 99-01 HA1 EAL BASES DOCUMENT Rev. 0 Page 38 of 272

ATTACHMENT 1 EAL Bases Category: H - Hazards Subcategory: 1 - Security Initiating Condition: HOSTILE ACTION within the OWNER CONTROLLED AREA or airborne attack threat within 30 minutes EAL: HA1.2 Alert A validated notification from NRC of an aircraft attack threat within 30 min. of the site Mode Applicability: ALL NEI 99-01 Basis: This IC addresses the notification of an aircraft attack threat. This event will require rapid response and assistance due to the need to prepare the plant and staff for a potential aircraft impact. Timely and accurate communications between Security Shift Supervision and the Control Room is essential for proper classification of a security-related event (ref. 2, 3). Security plans and terminology are based on the guidance provided by NEI 03-12, Template for the Security Plan, Training and Qualification Plan, Safeguards Contingency Plan and Independent Spent Fuel Storage Installation Security Program. As time and conditions allow, these events require a heightened state of readiness by the plant staff and implementation of onsite protective measures (e.g., evacuation, dispersal or sheltering). The Alert declaration will also heighten the awareness of Offsite Response Organizations (OROs), allowing them to be better prepared should it be necessary to consider further actions. This IC does not apply to incidents that are accidental events, acts of civil disobedience, or otherwise are not a HOSTILE ACTION perpetrated by a HOSTILE FORCE. Examples include the crash of a small aircraft, shots from hunters, physical disputes between employees, etc. Reporting of these types of events is adequately addressed by other EALs, or the requirements of 10 CFR § 73.71 or 10 CFR § 50.72. This EAL addresses the threat from the impact of an aircraft on the plant, and the anticipated arrival time is within 30 minutes. The intent of this EAL is to ensure that threat-related notifications are made in a timely manner so that plant personnel and OROs are in a heightened state of readiness. This EAL is met when the threat-related information has been validated in accordance with site-specific security procedures. EAL BASES DOCUMENT Rev. 0 Page 39 of 272

ATTACHMENT 1 EAL Bases The NRC Headquarters Operations Officer (HOO) will communicate to the licensee if the threat involves an aircraft. The status and size of the plane may be provided by NORAD through the NRC. In some cases, it may not be readily apparent if an aircraft impact within the OWNER CONTROLLED AREA was intentional (i.e., a HOSTILE ACTION). It is expected, although not certain, that notification by an appropriate Federal agency to the site would clarify this point. In this case, the appropriate federal agency is intended to be NORAD, FBI, FAA or NRC. The emergency declaration, including one based on other ICs/EALs, should not be unduly delayed while awaiting notification by a Federal agency. Emergency plans and implementing procedures are public documents; therefore, EALs should not incorporate Security-sensitive information. This includes information that may be advantageous to a potential adversary, such as the particulars concerning a specific threat or threat location. Security-sensitive information should be contained in non-public documents such as the DBNPS Physical Security Plan (ref. 1). DBNPS Basis: The Security Shift Supervision is defined as the Security Shift Supervisor or designee. Escalation of the emergency classification level would be via IC HS1 or HG1. DBNPS Basis Reference(s):

1. DBNPS Physical Security Plan (safeguards)
2. DB-OP-02544 Security Events or Threats (restricted)
3. RA-EP-02890 Emergency Response Organization Response to Security Events or Threats
4. NEI 99-01 HA1 EAL BASES DOCUMENT Rev. 0 Page 40 of 272

ATTACHMENT 1 EAL Bases Category: H - Hazards Subcategory: 1 - Security Initiating Condition: Confirmed SECURITY CONDITION or threat EAL: HU1.1 Unusual Event A SECURITY CONDITION that does not involve a HOSTILE ACTION as reported by the Security Shift Supervisor Mode Applicability: ALL NEI 99-01 Basis: This IC addresses events that pose a threat to plant personnel or SAFETY SYSTEM equipment, and thus represent a potential degradation in the level of plant safety. Security events which do not meet one of these EALs are adequately addressed by the requirements of 10 CFR § 73.71 or 10 CFR § 50.72. Security events assessed as HOSTILE ACTIONS are classifiable under ICs HA1, HS1 and HG1. Timely and accurate communications between Security Shift Supervision and the Control Room is essential for proper classification of a security-related event (ref. 2, 3, 4). Classification of these events will initiate appropriate threat-related notifications to plant personnel and Offsite Response Organizations. Security plans and terminology are based on the guidance provided by NEI 03-12, Template for the Security Plan, Training and Qualification Plan, Safeguards Contingency Plan and Independent Spent Fuel Storage Installation Security Program. This EAL references the Security Shift Supervisor because these are the individuals trained to confirm that a security event is occurring or has occurred. Training on security event confirmation and classification is controlled due to the nature of Safeguards and 10 CFR § 2.39 information. Emergency plans and implementing procedures are public documents; therefore, EALs should not incorporate Security-sensitive information. This includes information that may be advantageous to a potential adversary, such as the particulars concerning a specific threat or threat location. Security-sensitive information should be contained in non-public documents such as the DBNPS Physical Security Plan (ref. 1). Escalation of the emergency classification level would be via IC HA1. EAL BASES DOCUMENT Rev. 0 Page 41 of 272

ATTACHMENT 1 EAL Bases DBNPS Basis: The Security Shift Supervision is defined as the Security Shift Supervisor or designee. This EAL is based on the DBNPS Physical Security Plan (ref. 1). DBNPS Basis Reference(s):

1. DBNPS Physical Security Plan (safeguards)
2. DB-OP-02544 Security Events or Threats (restricted)
3. RA-EP-02890 Emergency Response Organization Response to Security Events or Threats
4. NEI 99-01 HU1 EAL BASES DOCUMENT Rev. 0 Page 42 of 272

ATTACHMENT 1 EAL Bases Category: H - Hazards Subcategory: 1 - Security Initiating Condition: Confirmed SECURITY CONDITION or threat EAL: HU1.2 Unusual Event Notification of a credible security threat directed at the site Mode Applicability: ALL NEI 99-01 Basis: This IC addresses events that pose a threat to plant personnel or SAFETY SYSTEM equipment, and thus represent a potential degradation in the level of plant safety. Security events which do not meet one of these EALs are adequately addressed by the requirements of 10 CFR § 73.71 or 10 CFR § 50.72. Security events assessed as HOSTILE ACTIONS are classifiable under ICs HA1, HS1 and HG1. Timely and accurate communications between Security Shift Supervision and the Control Room is essential for proper classification of a security-related event (ref. 2, 3, 4). Classification of these events will initiate appropriate threat-related notifications to plant personnel and Offsite Response Organizations. Security plans and terminology are based on the guidance provided by NEI 03-12, Template for the Security Plan, Training and Qualification Plan, Safeguards Contingency Plan and Independent Spent Fuel Storage Installation Security Program. This EAL addresses the receipt of a credible security threat. The credibility of the threat is assessed in accordance with the DBNPS Physical Security Plan (ref. 1). Emergency plans and implementing procedures are public documents; therefore, EALs should not incorporate Security-sensitive information. This includes information that may be advantageous to a potential adversary, such as the particulars concerning a specific threat or threat location. Security-sensitive information should be contained in non-public documents such as the DBNPS Physical Security Plan (ref. 1). Escalation of the emergency classification level would be via IC HA1. DBNPS Basis: The Security Shift Supervision is defined as the Security Shift Supervisor or designee. This EAL is based on the DBNPS Physical Security Plan (ref. 1). EAL BASES DOCUMENT Rev. 0 Page 43 of 272

ATTACHMENT 1 EAL Bases DBNPS Basis Reference(s):

1. DBNPS Physical Security Plan (safeguards)
2. DB-OP-02544 Security Events or Threats (restricted)
3. RA-EP-02890 Emergency Response Organization Response to Security Events or Threats
4. NEI 99-01 HU1 EAL BASES DOCUMENT Rev. 0 Page 44 of 272

ATTACHMENT 1 EAL Bases Category: H - Hazards Subcategory: 1 - Security Initiating Condition: Confirmed SECURITY CONDITION or threat EAL: HU1.3 Unusual Event A validated notification from the NRC providing information of an aircraft threat Mode Applicability: ALL NEI 99-01 Basis: This IC addresses events that pose a threat to plant personnel or SAFETY SYSTEM equipment, and thus represent a potential degradation in the level of plant safety. Security events which do not meet one of these EALs are adequately addressed by the requirements of 10 CFR § 73.71 or 10 CFR § 50.72. Security events assessed as HOSTILE ACTIONS are classifiable under ICs HA1, HS1 and HG1. Timely and accurate communications between Security Shift Supervision and the Control Room is essential for proper classification of a security-related event (ref. 2, 3, 4). Classification of these events will initiate appropriate threat-related notifications to plant personnel and Offsite Response Organizations. Security plans and terminology are based on the guidance provided by NEI 03-12, Template for the Security Plan, Training and Qualification Plan, Safeguards Contingency Plan and Independent Spent Fuel Storage Installation Security Program. This EAL addresses the threat from the impact of an aircraft on the plant. The NRC Headquarters Operations Officer (HOO) will communicate to the licensee if the threat involves an aircraft. The status and size of the plane may also be provided by NORAD through the NRC. Validation of the threat is performed in accordance with the DBNPS Physical Security Plan (ref. 1). Emergency plans and implementing procedures are public documents; therefore, EALs should not incorporate Security-sensitive information. This includes information that may be advantageous to a potential adversary, such as the particulars concerning a specific threat or threat location. Security-sensitive information should be contained in non-public documents such as the DBNPS Physical Security Plan (ref. 1). Escalation of the emergency classification level would be via IC HA1. EAL BASES DOCUMENT Rev. 0 Page 45 of 272

ATTACHMENT 1 EAL Bases DBNPS Basis: The Security Shift Supervision is defined as the Security Shift Supervisor or designee. This EAL is based on the DBNPS Physical Security Plan (ref. 1). DBNPS Basis Reference(s):

1. DBNPS Physical Security Plan (safeguards)
2. DB-OP-02544 Security Events or Threats (restricted)
3. RA-EP-02890 Emergency Response Organization Response to Security Events or Threats
4. NEI 99-01 HU1 EAL BASES DOCUMENT Rev. 0 Page 46 of 272

ATTACHMENT 1 EAL Bases Category: H - Hazards and Other Conditions Affecting Plant Safety Subcategory: 2 - Seismic Event Initiating Condition: Seismic event greater than OBE levels EAL: HU2.1 Unusual Event Seismic event > OBE as indicated by OBE alarm on seismic alarm panel C5764A Mode Applicability: ALL NEI 99-01 Basis: This IC addresses a seismic event that results in accelerations at the plant site greater than those specified for an Operating Basis Earthquake (OBE). An earthquake greater than an OBE but less than a Safe Shutdown Earthquake (SSE) should have no significant impact on safety-related systems, structures and components; however, some time may be required for the plant staff to ascertain the actual post-event condition of the plant (e.g., performs walk-downs and post-event inspections). Given the time necessary to perform walk-downs and inspections, and fully understand any impacts, this event represents a potential degradation of the level of safety of the plant. Event verification with external sources should not be necessary during or following an OBE. Earthquakes of this magnitude should be readily felt by on-site personnel and recognized as a seismic event (e.g., lateral accelerations in excess of 0.08g). The Shift Manager or Emergency Director may seek external verification if deemed appropriate (e.g., a call to the USGS, check internet news sources, etc.); however, the verification action must not preclude a timely emergency declaration. Depending upon the plant mode at the time of the event, escalation of the emergency classification level would be via IC CA6 or SA9. DBNPS Basis: Ground motion acceleration of 0.08g horizontal or 0.053g vertical is the Maximum Probable Earthquake as is considered generically as the Operating Basis Earthquake for DBNPS (ref. 1). Four triaxial strong motion accelerographs are installed within plant structures. A twelve-channel magnetic tape acceleration recording device is used to record all triaxial accelerometer transducer outputs. The recording device is located in the control room with a playback unit featuring a visual display. The time-history recorded at each accelerograph location can be analyzed to determine its corresponding peak acceleration values and to verify that site Operating Basis Earthquake (OBE) limits have not been exceeded. Immediate EAL BASES DOCUMENT Rev. 0 Page 47 of 272

ATTACHMENT 1 EAL Bases control room alarm indication of an earthquake of 0.08 g or greater is annunciated on the seismic control panel (C5764A), following seismic trigger actuation by the Containment Concrete Foundation accelerograph (ref. 2). RA-EP-02820 Earthquake provides the guidance for determining any required response actions if the OBE earthquake threshold is exceeded (ref. 3). When the Seismic Monitoring Cabinet key locked switch is placed in OFF, ALL OBE and SSE alarms and cabinet recording functions (TNC 8.3.3 functions 1 and 3 and the DBRM-EMER-5003 Seismic Event Detection function) are nonfunctional. Therefore, the Compensatory Measures listed in DBRM-EMER-5003, Equipment Important to Emergency Response for a loss of the Seismic Event Detection function are required to be employed by the operators to determine if an earthquake occurs and to determine the magnitude of the event in a timely manner" (ref. 5). To avoid inappropriate emergency classification resulting from spurious actuation of the seismic instrumentation or felt motion not attributable to seismic activity, an offsite agency (USGS, National Earthquake Information Center) can confirm that an earthquake has occurred in the area of the plant. However, such confirmation should not preclude a timely emergency declaration based on receipt of the OBE alarm. Contact the NEIC by calling (303) 273-8500. Select option #1, then #2 and inform the analyst you wish to confirm recent seismic activity near DBNPS. Provide the analyst with the following DBNPS coordinates: 41º 35' 49" north latitude, 83º 05' 16" west longitude and exact time of seismic activity (ref. 4). Alternatively, access near real-time seismic activity via the NEIC website: http://earthquake.usgs.gov/eqcenter/ DBNPS Basis Reference(s):

1. Updated FSAR Section 3.1 Seismic Design
2. Updated FSAR Section 3.7.4 Criteria for Seismic Instrumentation Program
3. RA-EP-02820 Earthquake
4. UFSAR Section 2.1.1 Site Location
5. CA 2012-04838-08
6. NEI 99-01 HU2 EAL BASES DOCUMENT Rev. 0 Page 48 of 272

ATTACHMENT 1 EAL Bases Category: H - Hazards and Other Conditions Affecting Plant Safety Subcategory: 3 - Natural or Technology Hazard Initiating Condition: Hazardous event EAL: HU3.1 Unusual Event A tornado strike within the PROTECTED AREA Mode Applicability: ALL NEI 99-01 Basis: This IC addresses hazardous events that are considered to represent a potential degradation of the level of safety of the plant. EAL HU3.1 addresses a tornado striking (touching down) within the PROTECTED AREA. Escalation of the emergency classification level would be based on ICs in Recognition Categories R, F, S or C. DBNPS Basis: Response actions associated with a tornado onsite is provided in RA-EP-02810 Tornado or High Winds (ref. 1). If damage is confirmed visually or by other in-plant indications, the event may be escalated to an Alert under EAL CA6.1 or SA9.1. A tornado striking (touching down) within the PROTECTED AREA warrants declaration of an Unusual Event regardless of the measured wind speed at the meteorological tower. DBNPS Basis Reference(s):

1. RA-EP-02810 Tornado or High Winds
2. NEI 99-01 HU3 EAL BASES DOCUMENT Rev. 0 Page 49 of 272

ATTACHMENT 1 EAL Bases Category: H - Hazards and Other Conditions Affecting Plant Safety Subcategory: 3 - Natural or Technology Hazard Initiating Condition: Hazardous event EAL: HU3.2 Unusual Event Internal room or area FLOODING of a magnitude sufficient to require manual or automatic electrical isolation of a SAFETY SYSTEM component needed for the current operating mode Mode Applicability: ALL NEI 99-01 Basis: This IC addresses hazardous events that are considered to represent a potential degradation of the level of safety of the plant. This EAL addresses FLOODING of a building room or area that results in operators isolating power to a SAFETY SYSTEM component due to water level or other wetting concerns. Classification is also required if the water level or related wetting causes an automatic isolation of a SAFETY SYSTEM component from its power source (e.g., a breaker or relay trip). To warrant classification, operability of the affected component must be required by Technical Specifications for the current operating mode. Escalation of the emergency classification level would be based on ICs in Recognition Categories R, F, S or C. DBNPS Basis: Areas containing safe shutdown equipment susceptible to internal FLOODING are Service Water Pump Room and adjacent areas, Component Cooling Water Pump Room and Emergency Core Cooling System Room(s) (ref.1). Refer to EAL CA6.1 or SA9.1 for internal FLOODING affecting one or more SAFETY SYSTEM trains. DBNPS Basis Reference(s):

1. RA-EP-02880 Internal Flooding
2. NEI 99-01 HU3 EAL BASES DOCUMENT Rev. 0 Page 50 of 272

ATTACHMENT 1 EAL Bases Category: H - Hazards and Other Conditions Affecting Plant Safety Subcategory: 3 - Natural or Technology Hazard Initiating Condition: Hazardous event EAL: HU3.3 Unusual Event Movement of personnel within the PROTECTED AREA is IMPEDED due to an offsite event involving hazardous materials (e.g., an offsite chemical spill or toxic gas release) Mode Applicability: ALL NEI 99-01 Basis: This IC addresses hazardous events that are considered to represent a potential degradation of the level of safety of the plant. This EAL addresses a hazardous materials event originating at an offsite location and of sufficient magnitude to IMPEDE the movement of personnel within the PROTECTED AREA. Escalation of the emergency classification level would be based on ICs in Recognition Categories R, F, S or C. DBNPS Basis: As used here, the term "offsite" means the areas external to the DBNPS PROTECTED AREA. DBNPS Basis Reference(s):

1. NEI 99-01 HU3 EAL BASES DOCUMENT Rev. 0 Page 51 of 272

ATTACHMENT 1 EAL Bases Category: H - Hazards and Other Conditions Affecting Plant Safety Subcategory: 3 - Natural or Technology Hazard Initiating Condition: Hazardous event EAL: HU3.4 Unusual Event A hazardous event that results in on-site conditions sufficient to prohibit the plant staff from accessing the site via personal vehicles (Note 7) Note 7: This EAL does not apply to routine traffic impediments such as fog, snow, ice, or vehicle breakdowns or accidents. Mode Applicability: ALL NEI 99-01 Basis: This IC addresses hazardous events that are considered to represent a potential degradation of the level of safety of the plant. This EAL addresses a hazardous event that causes an on-site impediment to vehicle movement and significant enough to prohibit the plant staff from accessing the site using personal vehicles. Examples of such an event include site FLOODING caused by a hurricane, heavy rains, up-river water releases, dam failure, etc., or an on-site train derailment blocking the access road. This EAL is not intended apply to routine impediments such as fog, snow, ice, or vehicle breakdowns or accidents, but rather to more significant conditions such as the Hurricane Andrew strike on Turkey Point in 1992, the flooding around the Cooper Station during the Midwest floods of 1993, or the flooding around Ft. Calhoun Station in 2011. Escalation of the emergency classification level would be based on ICs in Recognition Categories R, F, S or C. DBNPS Basis: As used here, the term "onsite" means the areas within the DBNPS OWNER CONTROLLED AREA. DBNPS Basis Reference(s):

1. NEI 99-01 HU3 EAL BASES DOCUMENT Rev. 0 Page 52 of 272

ATTACHMENT 1 EAL Bases Category: H - Hazards and Other Conditions Affecting Plant Safety Subcategory: 4 - FIRE Initiating Condition: FIRE potentially degrading the level of safety of the plant EAL: HU4.1 Unusual Event A FIRE is not extinguished within 15 min. of ANY of the following FIRE detection indications (Note 1): z Report from the field (i.e., visual observation) z Receipt of multiple (more than 1) fire alarms z Field verification of a single fire alarm AND The FIRE is located within ANY Table H-1 area Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Table H-1 Safe Shutdown Fire Areas

  • Containment
  • Control Room
  • Auxiliary Building
  • Intake Structure
  • Borated Water Storage Tank Mode Applicability:

ALL NEI 99-01 Basis: This IC addresses the magnitude and extent of FIRES that may be indicative of a potential degradation of the level of safety of the plant. For EAL HU4.1 the intent of the 15-minute duration is to size the FIRE and to discriminate against small FIRES that are readily extinguished (e.g., smoldering waste paper basket). In addition to alarms, other indications of a FIRE could be a drop in fire main pressure, automatic activation of a suppression system, etc. EAL BASES DOCUMENT Rev. 0 Page 53 of 272

ATTACHMENT 1 EAL Bases Upon receipt, operators will take prompt actions to confirm the validity of an initial fire alarm, indication, or report. For EAL assessment purposes, the emergency declaration clock starts at the time that the initial alarm, indication, or report was received, and not the time that a subsequent verification action was performed. Similarly, the fire duration clock also starts at the time of receipt of the initial alarm, indication or report. Basis-Related Requirements from Appendix R Appendix R to 10 CFR 50, states in part: Criterion 3 of Appendix A to this part specifies that "Structures, systems, and components important to safety shall be designed and located to minimize, consistent with other safety requirements, the probability and effect of fires and explosions." When considering the effects of fire, those systems associated with achieving and maintaining safe shutdown conditions assume major importance to safety because damage to them can lead to core damage resulting from loss of coolant through boil-off. Because fire may affect safe shutdown systems and because the loss of function of systems used to mitigate the consequences of design basis accidents under post-fire conditions does not per se impact public safety, the need to limit fire damage to systems required to achieve and maintain safe shutdown conditions is greater than the need to limit fire damage to those systems required to mitigate the consequences of design basis accidents. In addition, Appendix R to 10 CFR 50, requires, among other considerations, the use of 1-hour fire barriers for the enclosure of cable and equipment and associated non-safety circuits of one redundant train (G.2.c). As used in EAL HU4.2, the 30-minutes to verify a single alarm is well within this worst-case 1-hour time period. Depending upon the plant mode at the time of the event, escalation of the emergency classification level would be via IC CA6 or SA9. DBNPS Basis: The 15-minute requirement begins with a credible notification that a FIRE is occurring, or receipt of multiple VALID fire detection system alarms or field validation of a single fire alarm. The alarm is to be validated using available Control Room indications or alarms to prove that it is not spurious, or by reports from the field. Table H-1 Fire Areas are based on DBNPS Unit 1 Fire Hazard Analysis Report. Table H-1 Fire Areas include those structures containing functions and systems required for safe shutdown of the plant (SAFETY SYSTEMS) (ref. 1, 2). One of the following 4 things must occur within 15-minutes of the original FIRE indication / notification (ref. 3, 4): EAL BASES DOCUMENT Rev. 0 Page 54 of 272

ATTACHMENT 1 EAL Bases

1. The alarm must be proven to be spurious (there is no FIRE),
2. The FIRE must be extinguished,
3. The FIRE must be proven not to be in a Table H-1 area, or
4. The Unusual Event must be declared.

For the purposes of declaring an emergency event, the term "extinguished" means no visible flames. The 15 minute time period starts with EITHER:

1. A credible notification to the Control Room that a FIRE is occurring in a table H-1 area, (verbal notification from the scene) or
2. Control Room indication of multiple fire detection system alarms/actuations in a Table H-1 area DBNPS Basis Reference(s):
1. DBNPS Fire Hazard Analysis Report
2. DB-OP-02529 Fire Procedure
3. Condition Report 09-66994, Emergency Action Level Clarification
4. Condition Report 09-69475, White Finding Identified For Inadequate Emergency Classification of Event
5. NEI 99-01 HU4 EAL BASES DOCUMENT Rev. 0 Page 55 of 272

ATTACHMENT 1 EAL Bases Category: H - Hazards and Other Conditions Affecting Plant Safety Subcategory: 4 - FIRE Initiating Condition: FIRE potentially degrading the level of safety of the plant EAL: HU4.2 Unusual Event Receipt of a single fire alarm (i.e., no other indications of a FIRE) AND The fire alarm is indicating a FIRE within ANY Table H-1 area AND The existence of a FIRE is not verified within 30 min. of alarm receipt (Note 1) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Table H-1 Safe Shutdown Fire Areas

  • Containment
  • Control Room
  • Auxiliary Building
  • Intake Structure
  • Borated Water Storage Tank Mode Applicability:

ALL NEI 99-01 Basis: This IC addresses the magnitude and extent of FIRES that may be indicative of a potential degradation of the level of safety of the plant. This EAL addresses receipt of a single fire alarm, and the existence of a FIRE is not verified (i.e., proved or disproved) within 30-minutes of the alarm. Upon receipt, operators will take prompt actions to confirm the validity of a single fire alarm. For EAL assessment purposes, the 30-minute clock starts at the time that the initial alarm was received, and not the time that a subsequent verification action was performed. EAL BASES DOCUMENT Rev. 0 Page 56 of 272

ATTACHMENT 1 EAL Bases A single fire alarm, absent other indication(s) of a FIRE, may be indicative of equipment failure or a spurious activation, and not an actual FIRE. For this reason, additional time is allowed to verify the validity of the alarm. The 30-minute period is a reasonable amount of time to determine if an actual FIRE exists; however, after that time, and absent information to the contrary, it is assumed that an actual FIRE is in progress. If an actual FIRE is verified by a report from the field, then HU4.1 is immediately applicable, and the emergency must be declared if the FIRE is not extinguished within 15-minutes of the report. If the alarm is verified to be due to an equipment failure or a spurious activation, and this verification occurs within 30-minutes of the receipt of the alarm, then this EAL is not applicable and no emergency declaration is warranted. Basis-Related Requirements from Appendix R Appendix R to 10 CFR 50, states in part: Criterion 3 of Appendix A to this part specifies that "Structures, systems, and components important to safety shall be designed and located to minimize, consistent with other safety requirements, the probability and effect of fires and explosions." When considering the effects of fire, those systems associated with achieving and maintaining safe shutdown conditions assume major importance to safety because damage to them can lead to core damage resulting from loss of coolant through boil-off. Because fire may affect safe shutdown systems and because the loss of function of systems used to mitigate the consequences of design basis accidents under post-fire conditions does not per se impact public safety, the need to limit fire damage to systems required to achieve and maintain safe shutdown conditions is greater than the need to limit fire damage to those systems required to mitigate the consequences of design basis accidents. In addition, Appendix R to 10 CFR 50, requires, among other considerations, the use of 1-hour fire barriers for the enclosure of cable and equipment and associated non-safety circuits of one redundant train (G.2.c). As used in this EAL, the 30-minutes to verify a single alarm is well within this worst-case 1-hour time period. Depending upon the plant mode at the time of the event, escalation of the emergency classification level would be via IC CA6 or SA9. DBNPS Basis: The 30-minute requirement begins upon receipt of a single VALID fire detection system alarm. The alarm is to be validated using available Control Room indications or alarms to prove that it is not spurious, or by reports from the field. Actual field reports must be made within the 30-minute time limit or a classification must be made. If a FIRE is verified to be occurring by field report, classification shall be made based on EAL HU4.1. EAL BASES DOCUMENT Rev. 0 Page 57 of 272

ATTACHMENT 1 EAL Bases Table H-1 Fire Areas are based on DBNPS-1465.00-00-0006 Design Basis Specification for the Plant Fire Protection and AP/0/A/5500/045 Plant Fire. Table H-1 Fire Areas include those structures containing functions and systems required for safe shutdown of the plant (SAFETY SYSTEMS) (ref. 1, 2). One of the following 4 things must occur within 30 minutes of the original FIRE indication / notification (ref. 3, 4):

1. The alarm must be proven to be spurious (there is no FIRE),
2. The FIRE must be extinguished,
3. The FIRE must be proven not to be in a Table H-1 area, or
4. The Unusual Event must be declared.

For the purposes of declaring an emergency event, the term "extinguished" means no visible flames. The 30 minute time period starts with Control Room indication of a fire detection system alarm/actuation (any single alarm or a single actuation of a system). DBNPS Basis Reference(s):

1. DBNPS Fire Hazard Analysis Report
2. DB-OP-02529 Fire Procedure
3. Condition Report 09-66994, Emergency Action Level Clarification
4. Condition Report 09-69475, White Finding Identified For Inadequate Emergency Classification of Event
5. NEI 99-01 HU4 EAL BASES DOCUMENT Rev. 0 Page 58 of 272

ATTACHMENT 1 EAL Bases Category: H - Hazards and Other Conditions Affecting Plant Safety Subcategory: 4 - FIRE Initiating Condition: FIRE potentially degrading the level of safety of the plant EAL: HU4.3 Unusual Event A FIRE within the plant PROTECTED AREA not extinguished within 60 min. of the initial report, alarm or indication (Note 1) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Mode Applicability: ALL NEI 99-01 Basis: This IC addresses the magnitude and extent of FIRES that may be indicative of a potential degradation of the level of safety of the plant. In addition to a FIRE addressed by EAL HU4.1 or HU4.2, a FIRE within the plant PROTECTED AREA not extinguished within 60-minutes may also potentially degrade the level of plant safety. Depending upon the plant mode at the time of the event, escalation of the emergency classification level would be via IC CA6 or SA9. DBNPS Basis: None DBNPS Basis Reference(s):

1. NEI 99-01 HU4 EAL BASES DOCUMENT Rev. 0 Page 59 of 272

ATTACHMENT 1 EAL Bases Category: H - Hazards and Other Conditions Affecting Plant Safety Subcategory: 4 - FIRE Initiating Condition: FIRE potentially degrading the level of safety of the plant EAL: HU4.4 Unusual Event A FIRE within the plant PROTECTED AREA that requires firefighting support by an offsite fire response agency to extinguish Mode Applicability: ALL NEI 99-01 Basis: This IC addresses the magnitude and extent of FIRES that may be indicative of a potential degradation of the level of safety of the plant. If a FIRE within the plant PROTECTED AREA is of sufficient size to require a response by an offsite firefighting agency (e.g., a local town Fire Department), then the level of plant safety is potentially degraded. The dispatch of an offsite firefighting agency to the site requires an emergency declaration only if it is needed to actively support firefighting efforts because the FIRE is beyond the capability of the Fire Brigade to extinguish. Declaration is not necessary if the agency resources are placed on stand-by, or supporting post-extinguishment recovery or investigation actions. Depending upon the plant mode at the time of the event, escalation of the emergency classification level would be via IC CA6 or SA9. DBNPS Basis: None DBNPS Basis Reference(s):

1. NEI 99-01 HU4 EAL BASES DOCUMENT Rev. 0 Page 60 of 272

ATTACHMENT 1 EAL Bases Category: H - Hazards and Other Conditions Affecting Plant Safety Subcategory: 5 - Hazardous Gases Initiating Condition: Gaseous release IMPEDING access to equipment necessary for normal plant operations, cooldown or shutdown EAL: HA5.1 Alert Release of a toxic, corrosive, asphyxiant or flammable gas into ANY Table H-2 Safe Shutdown Rooms or Areas AND Entry into the room or area is prohibited or IMPEDED (Note 5) Note 5: If the equipment in the listed room or area was already inoperable or out-of-service before the event occurred, then no emergency classification is warranted. Table H-2 Safe Shutdown Rooms/Areas Room/Area Mode Applicability Aux Bldg. 565 ele. Room 236 #2 Mechanical 1, 2, 3 Penetration Room Aux Bldg. 585 ele. Room 304 corridor outside 1, 2, 3

            #3 Mechanical Penetration Room Aux Bldg. 603 ele. Room 427 - #2 Electrical 1, 2, 3 Penetration Room Mode Applicability:

1 - Power Operation, 2 - Startup, 3 - Hot Standby NEI 99-01 Basis: This IC addresses an event involving a release of a hazardous gas that precludes or IMPEDES access to equipment necessary to maintain normal plant operation, or required for a normal plant cooldown and shutdown. This condition represents an actual or potential substantial degradation of the level of safety of the plant. An Alert declaration is warranted if entry into the affected room/area is, or may be, procedurally required during the plant operating mode in effect at the time of the gaseous release. The emergency classification is not contingent upon whether entry is actually necessary at the time of the release. Evaluation of the IC and EAL do not require atmospheric sampling; it only requires the Emergency Director judgment that the gas concentration in the affected room/area is sufficient EAL BASES DOCUMENT Rev. 0 Page 61 of 272

ATTACHMENT 1 EAL Bases to preclude or significantly IMPEDE procedurally required access. This judgment may be based on a variety of factors including an existing job hazard analysis, report of ill effects on personnel, advice from a subject matter expert or operating experience with the same or similar hazards. Access should be considered as IMPEDED if extraordinary measures are necessary to facilitate entry of personnel into the affected room/area (e.g., requiring use of protective equipment, such as SCBAs, that is not routinely employed). An emergency declaration is not warranted if ANY of the following conditions apply: z The plant is in an operating mode different than the mode specified for the affected room/area (i.e., entry is not required during the operating mode in effect at the time of the gaseous release). For example, the plant is in Mode 1 when the gaseous release occurs, and the procedures used for normal operation, cooldown and shutdown do not require entry into the affected room until Mode 4. z The gas release is a planned activity that includes compensatory measures, which address the temporary inaccessibility of a room or area (e.g., fire suppression system testing). z The action for which room/area entry is required is of an administrative or record keeping nature (e.g., normal rounds or routine inspections). z The access control measures are of a conservative or precautionary nature, and would not actually prevent or IMPEDE a required action. z If the equipment in the listed room or area was already inoperable, or out-of-service, before the event occurred, then no emergency should be declared since the event will have no adverse impact beyond that already allowed by Technical Specifications at the time of the event. An asphyxiant is a gas capable of reducing the level of oxygen in the body to dangerous levels. Most commonly, asphyxiants work by merely displacing air in an enclosed environment. This reduces the concentration of oxygen below the normal level of around 19%, which can lead to breathing difficulties, unconsciousness or even death. A steam leak of significant magnitude that prevents access to the area should be considered an asphyxiant. This EAL does not apply to firefighting activities that automatically or manually activate a fire suppression system in an area. Escalation of the emergency classification level would be via Recognition Category R, C or F ICs. DBNPS Basis: If the equipment in the listed room or area was already inoperable, or out-of-service, before the event occurred, then no emergency should be declared since the event will have no adverse impact beyond that already allowed by Technical Specifications at the time of the event. The list of plant rooms or areas with entry-related mode applicability identified specify those rooms or areas that contain equipment which require a manual/local action as specified in operating procedures used for normal plant operation, cooldown and shutdown. Rooms or EAL BASES DOCUMENT Rev. 0 Page 62 of 272

ATTACHMENT 1 EAL Bases areas in which actions of a contingent or emergency nature would be performed (e.g., an action to address an off-normal or emergency condition such as emergency repairs, corrective measures or emergency operations) are not included. In addition, the list specifies the plant mode(s) during which entry would be required for each room or area (ref. 1). DBNPS Basis Reference(s):

1. Attachment 3 Safe Shutdown Rooms/Areas Tables R-2 & H-2 Bases
2. NEI 99-01 HA5 EAL BASES DOCUMENT Rev. 0 Page 63 of 272

ATTACHMENT 1 EAL Bases Category: H - Hazards and Other Conditions Affecting Plant Safety Subcategory: 6 - Control Room Evacuation Initiating Condition: Inability to control a key safety function from outside the Control Room EAL: HS6.1 Site Area Emergency An event has resulted in plant control being transferred from the Control Room to the Auxiliary Shutdown Panel AND Control of ANY of the following key safety functions is not reestablished within 15 min. (Note 1): z Reactivity z Core Cooling (RCS inventory) z RCS heat removal (ability to maintain heat sink) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Mode Applicability: 1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4- Hot Shutdown NEI 99-01 Basis: This IC addresses an evacuation of the Control Room that results in transfer of plant control to alternate locations, and the control of a key safety function cannot be reestablished in a timely manner. The failure to gain control of a key safety function following a transfer of plant control to alternate locations is a precursor to a challenge to one or more fission product barriers within a relatively short period of time. The determination of whether or not control is established at the remote safe shutdown location(s) is based on Emergency Director judgment. The Emergency Director is expected to make a reasonable, informed judgment within 15-minutes whether or not the operating staff has control of key safety functions from the remote safe shutdown location(s). Escalation of the emergency classification level would be via IC FG1 or CG1. EAL BASES DOCUMENT Rev. 0 Page 64 of 272

ATTACHMENT 1 EAL Bases DBNPS Basis: Shift Manager determines the Control Room requires evacuation. Control Room may become uninhabitable by FIRE, dense smoke, noxious fumes, bomb threat in or adjacent to the Control Room, or other life threatening conditions (ref. 1, 2). The 15-minute time for transfer is based on analysis or assessments as to how quickly control must be reestablished without core uncovering and/or core damage. The 15-minute time period starts when EITHER 1) control of the plant is no longer maintained in the Control Room or 2) the last operator has left the Control Room, whichever comes first. DBNPS Basis Reference(s):

1. DB-OP-02508 Control Room Evacuation
2. DB-OP 02519 Serious Control Room Fire
3. NEI 99-01 HS6 EAL BASES DOCUMENT Rev. 0 Page 65 of 272

ATTACHMENT 1 EAL Bases Category: H - Hazards and Other Conditions Affecting Plant Safety Subcategory: 6 - Control Room Evacuation Initiating Condition: Control Room evacuation resulting in transfer of plant control to alternate locations EAL: HA6.1 Alert An event has resulted in plant control being transferred from the Control Room to the Auxiliary Shutdown Panel Mode Applicability: ALL NEI 99-01 Basis: This IC addresses an evacuation of the Control Room that results in transfer of plant control to alternate locations outside the Control Room. The loss of the ability to control the plant from the Control Room is considered to be a potential substantial degradation in the level of plant safety. Following a Control Room evacuation, control of the plant will be transferred to alternate shutdown locations. The necessity to control a plant shutdown from outside the Control Room, in addition to responding to the event that required the evacuation of the Control Room, will present challenges to plant operators and other on-shift personnel. Activation of the ERO and emergency response facilities will assist in responding to these challenges. This EAL is only applicable when the decision has been made to evacuate the Control Room, and not when conditions that may require evacuation are being evaluated by referring to either DB-OP-02519 or DB-OP-02508 (ref. 1, 2). Escalation of the emergency classification level would be via IC HS6. DBNPS Basis: Shift Manager (SM) determines Control Room requires evacuation. Control Room inhabitability may be caused by FIRE, dense smoke, noxious fumes, bomb threat in or adjacent to the Control Room, or other life threatening conditions (ref. 1, 2). Inability to establish plant control from outside the Control Room escalates this event to a Site Area Emergency per EAL HS6.1. EAL BASES DOCUMENT Rev. 0 Page 66 of 272

ATTACHMENT 1 EAL Bases DBNPS Basis Reference(s):

1. DB-OP-02508 Control Room Evacuation
2. DB-OP 02519 Serious Control Room Fire
3. NEI 99-01 HA6 EAL BASES DOCUMENT Rev. 0 Page 67 of 272

ATTACHMENT 1 EAL Bases Category: H - Hazards and Other Conditions Affecting Plant Safety Subcategory: 7 - Emergency Director Judgment Initiating Condition: Other conditions exist which in the judgment of the Emergency Director warrant declaration of a General Emergency EAL: HG7.1 General Emergency Other conditions exist which in the judgment of the Emergency Director indicate that events are in progress or have occurred which involve actual or IMMINENT substantial core degradation or melting with potential for loss of containment integrity or HOSTILE ACTION that results in an actual loss of physical control of the facility. Releases can be reasonably expected to exceed EPA Protective Action Guideline exposure levels offsite for more than the immediate site area. Mode Applicability: ALL NEI 99-01 Basis: This IC addresses unanticipated conditions not addressed explicitly elsewhere but that warrant declaration of an emergency because conditions exist which are believed by the Emergency Director to fall under the emergency classification level description for a General Emergency. DBNPS Basis: The Emergency Director is the designated onsite individual having the responsibility and authority for implementing the DBNPS Emergency Response Plan. The Operations Shift Manager(SM) initially acts in the capacity of the Emergency Director and takes actions as outlined in the Emergency Plan implementing procedures. If required by the emergency classification or if deemed appropriate by the Emergency Director, emergency response personnel are notified and instructed to report to their emergency response locations. In this manner, the individual usually in charge of activities in the Control Room is responsible for initiating the necessary emergency response, but Plant Management is expected to manage the emergency response as soon as available to do so in anticipation of the possible wide-ranging responsibilities associated with managing a major emergency (ref. 1). Releases can reasonably be expected to exceed EPA PAG plume exposure levels outside the SITE BOUNDARY. EAL BASES DOCUMENT Rev. 0 Page 68 of 272

ATTACHMENT 1 EAL Bases DBNPS Basis Reference(s):

1. DBNPS Emergency Plan section 5.2 DBNPS Emergency Management
2. NEI 99-01 HG7 EAL BASES DOCUMENT Rev. 0 Page 69 of 272

ATTACHMENT 1 EAL Bases Category: H - Hazards and Other Conditions Affecting Plant Safety Subcategory: 7 - Emergency Director Judgment Initiating Condition: Other conditions exist which in the judgment of the Emergency Director warrant declaration of a Site Area Emergency EAL: HS7.1 Site Area Emergency Other conditions exist which in the judgment of the Emergency Director indicate that events are in progress or have occurred which involve actual or likely major failures of plant functions needed for protection of the public or HOSTILE ACTION that results in intentional damage or malicious acts, (1) toward site personnel or equipment that could lead to the likely failure of or, (2) that prevent effective access to equipment needed for the protection of the public. ANY releases are not expected to result in exposure levels which exceed EPA Protective Action Guideline exposure levels beyond the SITE BOUNDARY. Mode Applicability: ALL NEI 99-01 Basis: This IC addresses unanticipated conditions not addressed explicitly elsewhere but that warrant declaration of an emergency because conditions exist which are believed by the Emergency Director to fall under the emergency classification level description for a Site Area Emergency. DBNPS Basis: The Emergency Director is the designated onsite individual having the responsibility and authority for implementing the DBNPS Emergency Response Plan. The Operations Shift Manager (SM) initially acts in the capacity of the Emergency Director and takes actions as outlined in the Emergency Plan implementing procedures. If required by the emergency classification or if deemed appropriate by the Emergency Director, emergency response personnel are notified and instructed to report to their emergency response locations. In this manner, the individual usually in charge of activities in the Control Room is responsible for initiating the necessary emergency response, but Plant Management is expected to manage the emergency response as soon as available to do so in anticipation of the possible wide-ranging responsibilities associated with managing a major emergency (ref. 1). DBNPS Basis Reference(s):

1. DBNPS Emergency Plan section 5.2 DBNPS Emergency Management
2. NEI 99-01 HS7 EAL BASES DOCUMENT Rev. 0 Page 70 of 272

ATTACHMENT 1 EAL Bases Category: H - Hazards and Other Conditions Affecting Plant Safety Subcategory: 7 - Emergency Director Judgment Initiating Condition: Other conditions exist which in the judgment of the Emergency Director warrant declaration of an Alert EAL: HA7.1 Alert Other conditions exist which, in the judgment of the Emergency Director, indicate that events are in progress or have occurred which involve an actual or potential substantial degradation of the level of safety of the plant or a security event that involves probable life threatening risk to site personnel or damage to site equipment because of HOSTILE ACTION. ANY releases are expected to be limited to small fractions of the EPA Protective Action Guideline exposure levels. Mode Applicability: ALL NEI 99-01 Basis: This IC addresses unanticipated conditions not addressed explicitly elsewhere but that warrant declaration of an emergency because conditions exist which are believed by the Emergency Director to fall under the emergency classification level description for an Alert. DBNPS Basis: The Emergency Director is the designated onsite individual having the responsibility and authority for implementing the DBNPS Emergency Response Plan. The Operations Shift Manager (SM) initially acts in the capacity of the Emergency Director and takes actions as outlined in the Emergency Plan implementing procedures. If required by the emergency classification or if deemed appropriate by the Emergency Director, emergency response personnel are notified and instructed to report to their emergency response locations. In this manner, the individual usually in charge of activities in the Control Room is responsible for initiating the necessary emergency response, but Plant Management is expected to manage the emergency response as soon as available to do so in anticipation of the possible wide-ranging responsibilities associated with managing a major emergency (ref.1). DBNPS Basis Reference(s):

1. DBNPS Emergency Plan section 5.2 DBNPS Emergency Management
2. NEI 99-01 HA7 EAL BASES DOCUMENT Rev. 0 Page 71 of 272

ATTACHMENT 1 EAL Bases Category: H - Hazards and Other Conditions Affecting Plant Safety Subcategory: 7 - Emergency Director Judgment Initiating Condition: Other conditions exist which in the judgment of the Emergency Director warrant declaration of a UE EAL: HU7.1 Unusual Event Other conditions exist which in the judgment of the Emergency Director indicate that events are in progress or have occurred which indicate a potential degradation of the level of safety of the plant or indicate a security threat to facility protection has been initiated. No releases of radioactive material requiring offsite response or monitoring are expected unless further degradation of SAFETY SYSTEMS occurs. Mode Applicability: ALL NEI 99-01 Basis: This IC addresses unanticipated conditions not addressed explicitly elsewhere but that warrant declaration of an emergency because conditions exist which are believed by the Emergency Director to fall under the emergency classification level description for an Unusual Event. DBNPS Basis: The Emergency Director is the designated onsite individual having the responsibility and authority for implementing the DBNPS Emergency Response Plan. The Operations Shift Manager (SM) initially acts in the capacity of the Emergency Director and takes actions as outlined in the Emergency Plan implementing procedures. If required by the emergency classification or if deemed appropriate by the Emergency Director, emergency response personnel are notified and instructed to report to their emergency response locations. In this manner, the individual usually in charge of activities in the Control Room is responsible for initiating the necessary emergency response, but Plant Management is expected to manage the emergency response as soon as available to do so in anticipation of the possible wide-ranging responsibilities associated with managing a major emergency (ref. 1). DBNPS Basis Reference(s):

1. DBNPS Emergency Plan section 5.2 DBNPS Emergency Management
2. NEI 99-01 HU7 EAL BASES DOCUMENT Rev. 0 Page 72 of 272

ATTACHMENT 1 EAL Bases Category R - Abnormal Rad Release / Rad Effluent EAL Group: ANY (EALs in this category are applicable to ANY plant condition, hot or cold.) Many EALs are based on actual or potential degradation of fission product barriers because of the elevated potential for offsite radioactivity release. Degradation of fission product barriers though is not always apparent via non-radiological symptoms. Therefore, direct indication of elevated radiological effluents or area radiation levels are appropriate symptoms for emergency classification. At lower levels, abnormal radioactivity releases may be indicative of a failure of containment systems or precursors to more significant releases. At higher release rates, offsite radiological conditions may result which require offsite protective actions. Elevated area radiation levels in plant may also be indicative of the failure of containment systems or preclude access to plant vital equipment necessary to ensure plant safety. Events of this category pertain to the following subcategories:

1. Radiological Effluent Direct indication of effluent radiation monitoring systems provides a rapid assessment mechanism to determine releases in excess of classifiable limits. Projected offsite doses, actual offsite field measurements or measured release rates via sampling indicate doses or dose rates above classifiable limits.
2. Irradiated Fuel Event Conditions indicative of a loss of adequate shielding or damage to irradiated fuel may preclude access to vital plant areas or result in radiological releases that warrant emergency classification.
3. Area Radiation Levels Sustained general area radiation levels, which may preclude access to areas requiring continuous occupancy, also warrant emergency classification.

EAL BASES DOCUMENT Rev. 0 Page 73 of 272

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 1 - Radiological Effluent Initiating Condition: Release of gaseous radioactivity resulting in offsite dose greater than 1,000 mrem TEDE or 5,000 mrem thyroid CDE EAL: RG1.1 General Emergency Station Vent Channel 1 Noble Gas (RE 4598 AB/BB) > 8.4E +00 Ci/cc for 15 minutes or longer (Notes 1, 2, 3, 4) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Note 2: If an ongoing release is detected and the release start time is unknown, assume that the release duration has exceeded the specified time limit. Note 3: If the effluent flow past an effluent monitor is known to have stopped, indicating that the release path is isolated, the effluent monitor reading is no longer VALID for classification purposes. Note 4: The pre-calculated effluent monitor values presented in EALs RA1.1, RS1.1 and RG1.1 should be used for emergency classification assessments until the results from a dose assessment using actual meteorology are available. Mode Applicability: ALL NEI 99-01 Basis: This IC addresses a release of gaseous radioactivity that results in projected or actual offsite doses greater than or equal to the EPA Protective Action Guides (PAGs). It includes both monitored and un-monitored releases. Releases of this magnitude will require implementation of protective actions for the public. Radiological effluent EALs are also included to provide a basis for classifying events and conditions that cannot be readily or appropriately classified on the basis of plant conditions alone. The inclusion of both plant condition and radiological effluent EALs more fully addresses the spectrum of possible accident events and conditions. The TEDE dose is set at the EPA PAG of 1,000 mrem while the 5,000 mrem thyroid CDE was established in consideration of the 1:5 ratio of the EPA PAG for TEDE and thyroid CDE. Classification based on effluent monitor readings assumes that a release path to the environment is established. If the effluent flow past an effluent monitor is known to have stopped due to actions to isolate the release path, then the effluent monitor reading is no longer VALID for classification purposes. EAL BASES DOCUMENT Rev. 0 Page 74 of 272

ATTACHMENT 1 EAL Bases DBNPS Basis: The DBNPS gaseous effluent limits for RG1.1 are based on values that equate to an offsite dose greater than EITHER:

  • 1000 mrem TEDE
  • 5000 mrem CDE Thyroid Note: EAL thresholds reflect the State of Ohio guidance to utilities within their jurisdiction to evaluate the consequences of radiological releases in terms of a Child Thyroid PAG rather than an EPA-400 CDE Thyroid PAG.

The station vent is the primary effluent monitor release point. Other pathways such as Safety and relief valves, as well as AFW and MSSV, do not have direct effluent release monitors. Releases from these points would be verified and monitored by RG1.3 survey readings. The GE Station Vent gaseous effluent monitor value corresponds to calculated doses of 100% of the EPA Protective Action Guidelines (TEDE or CDE Thyroid) per EP-EALCALC-DB-0703 Radiological Gaseous Effluent EAL Values (EALs RG1, RS1, RA1 and RU1) (ref. 1). DBNPS Basis Reference(s):

1. EP-EALCALC-DB-0703 Rev. 2 Radiological Gaseous Effluent EAL Values (EALs RG1, RS1, RA1 and RU1)
2. NEI 99-01 AG1 EAL BASES DOCUMENT Rev. 0 Page 75 of 272

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 1 - Radiological Effluent Initiating Condition: Release of gaseous radioactivity resulting in offsite dose greater than 1,000 mrem TEDE or 5,000 mrem thyroid CDE EAL: RG1.2 General Emergency Dose assessment using actual meteorology indicates doses > 1,000 mrem TEDE or 5,000 mrem thyroid CDE at or beyond the SITE BOUNDARY (Note 4) Note 4: The pre-calculated effluent monitor values presented in EALs RA1.1, RS1.1 and RG1.1 should be used for emergency classification assessments until the results from a dose assessment using actual meteorology are available. Mode Applicability: ALL NEI 99-01 Basis: This IC addresses a release of gaseous radioactivity that results in projected or actual offsite doses greater than or equal to the EPA Protective Action Guides (PAGs). It includes both monitored and un-monitored releases. Releases of this magnitude will require implementation of protective actions for the public. Radiological effluent EALs are also included to provide a basis for classifying events and conditions that cannot be readily or appropriately classified on the basis of plant conditions alone. The inclusion of both plant condition and radiological effluent EALs more fully addresses the spectrum of possible accident events and conditions. The TEDE dose is set at the EPA PAG of 1,000 mrem while the 5,000 mrem thyroid CDE was established in consideration of the 1:5 ratio of the EPA PAG for TEDE and thyroid CDE. Classification based on effluent monitor readings assumes that a release path to the environment is established. If the effluent flow past an effluent monitor is known to have stopped due to actions to isolate the release path, then the effluent monitor reading is no longer VALID for classification purposes. DBNPS Basis: Dose assessments are performed by computer-based methods (ref. 1, 2). Note: EAL thresholds reflect the State of Ohio guidance to utilities within their jurisdiction to evaluate the consequences of radiological releases in terms of a Child Thyroid PAG rather than an EPA-400 CDE Thyroid PAG. EAL BASES DOCUMENT Rev. 0 Page 76 of 272

ATTACHMENT 1 EAL Bases DBNPS Basis Reference(s):

1. NOP-LP-5402 Davis-Besse MIDAS Dose Assessment Software
2. RA-EP-02240 Offsite Dose Assessment
3. NEI 99-01 AG1 EAL BASES DOCUMENT Rev. 0 Page 77 of 272

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 1 - Radiological Effluent Initiating Condition: Release of gaseous radioactivity resulting in offsite dose greater than 1,000 mrem TEDE or 5,000 mrem thyroid CDE EAL: RG1.3 General Emergency Field survey results indicate EITHER of the following at or beyond the SITE BOUNDARY: z Closed window dose rates > 1,000 mR/hr expected to continue for 60 min. z Analyses of field survey samples indicate thyroid CDE > 5,000 mrem for 60 min. of inhalation. (Notes 1, 2) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Note 2: If an ongoing release is detected and the release start time is unknown, assume that the release duration has exceeded the specified time limit. Mode Applicability: ALL NEI 99-01 Basis: This IC addresses a release of gaseous radioactivity that results in projected or actual offsite doses greater than or equal to the EPA Protective Action Guides (PAGs). It includes both monitored and un-monitored releases. Releases of this magnitude will require implementation of protective actions for the public. Radiological effluent EALs are also included to provide a basis for classifying events and conditions that cannot be readily or appropriately classified on the basis of plant conditions alone. The inclusion of both plant condition and radiological effluent EALs more fully addresses the spectrum of possible accident events and conditions. The TEDE dose is set at the EPA PAG of 1,000 mrem while the 5,000 mrem thyroid CDE was established in consideration of the 1:5 ratio of the EPA PAG for TEDE and thyroid CDE. EAL BASES DOCUMENT Rev. 0 Page 78 of 272

ATTACHMENT 1 EAL Bases DBNPS Basis: NOP-LP-5015 FENOC Field Monitoring Teams Radiation Monitoring Teams Field Surveys provides guidance for emergency or post-accident radiological environmental monitoring (ref. 1). Note: EAL thresholds reflect the State of Ohio guidance to utilities within their jurisdiction to evaluate the consequences of radiological releases in terms of a Child Thyroid PAG rather than an EPA-400 CDE Thyroid PAG. DBNPS Basis Reference(s):

1. NOP-LP-5015 FENOC Field Monitoring Teams Radiation Monitoring Teams Field Surveys
2. NEI 99-01 AG1 EAL BASES DOCUMENT Rev. 0 Page 79 of 272

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 1 - Radiological Effluent Initiating Condition: Release of gaseous radioactivity resulting in offsite dose greater than 100 mrem TEDE or 500 mrem thyroid CDE EAL: RS1.1 Site Area Emergency Station Vent Channel 1 Noble Gas (RE 4598 AB/BB) > 8.4E -01 Ci/cc for 15 minutes or longer (Notes 1, 2, 3, 4) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Note 2: If an ongoing release is detected and the release start time is unknown, assume that the release duration has exceeded the specified time limit. Note 3: If the effluent flow past an effluent monitor is known to have stopped, indicating that the release path is isolated, the effluent monitor reading is no longer VALID for classification purposes. Note 4: The pre-calculated effluent monitor values presented in EALs RA1.1, RS1.1 and RG1.1 should be used for emergency classification assessments until the results from a dose assessment using actual meteorology are available. Mode Applicability: ALL NEI 99-01 Basis: This IC addresses a release of gaseous radioactivity that results in projected or actual offsite doses greater than or equal to 10% of the EPA Protective Action Guides (PAGs). It includes both monitored and un-monitored releases. Releases of this magnitude are associated with the failure of plant systems needed for the protection of the public. Radiological effluent EALs are also included to provide a basis for classifying events and conditions that cannot be readily or appropriately classified on the basis of plant conditions alone. The inclusion of both plant condition and radiological effluent EALs more fully addresses the spectrum of possible accident events and conditions. The TEDE dose is set at 10% of the EPA PAG of 1,000 mrem while the 500 mrem thyroid CDE was established in consideration of the 1:5 ratio of the EPA PAG for TEDE and thyroid CDE. Classification based on effluent monitor readings assumes that a release path to the environment is established. If the effluent flow past an effluent monitor is known to have stopped due to actions to isolate the release path, then the effluent monitor reading is no longer VALID for classification purposes. EAL BASES DOCUMENT Rev. 0 Page 80 of 272

ATTACHMENT 1 EAL Bases Escalation of the emergency classification level would be via IC RG1. DBNPS Basis: The DBNPS gaseous effluent limits for RS1.1 are based on values that equate to an offsite dose greater than EITHER:

  • 100 mrem TEDE
  • 500 mrem CDE Thyroid Note: EAL thresholds reflect the State of Ohio guidance to utilities within their jurisdiction to evaluate the consequences of radiological releases in terms of a Child Thyroid PAG rather than an EPA-400 CDE Thyroid PAG.

The station vent is the primary effluent monitor release point. Other pathways such as Safety and relief valves, as well as AFW and MSSV, do not have direct effluent release monitors. Releases from these points would be verified and monitored by RS1.3 survey readings. The SAE Station Vent gaseous effluent monitor value corresponds to calculated doses of 10% of the EPA Protective Action Guidelines (TEDE or CDE Thyroid) per EP-EALCALC-DB-0703 Radiological Gaseous Effluent EAL Values (EALs RG1, RS1, RA1 and RU1) (ref. 1). DBNPS Basis Reference(s):

1. EP-EALCALC-DB-0703 Rev.2 Radiological Gaseous Effluent EAL Values (EALs RG1, RS1, RA1 and RU1)
2. NEI 99-01 AS1 EAL BASES DOCUMENT Rev. 0 Page 81 of 272

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 1 - Radiological Effluent Initiating Condition: Release of gaseous radioactivity resulting in offsite dose greater than 100 mrem TEDE or 500 mrem thyroid CDE EAL: RS1.2 Site Area Emergency Dose assessment using actual meteorology indicates doses > 100 mrem TEDE or 500 mrem thyroid CDE at or beyond the SITE BOUNDARY (Note 4) Note 4: The pre-calculated effluent monitor values presented in EALs RA1.1, RS1.1 and RG1.1 should be used for emergency classification assessments until the results from a dose assessment using actual meteorology are available. Mode Applicability: ALL NEI 99-01 Basis: This IC addresses a release of gaseous radioactivity that results in projected or actual offsite doses greater than or equal to 10% of the EPA Protective Action Guides (PAGs). It includes both monitored and un-monitored releases. Releases of this magnitude are associated with the failure of plant systems needed for the protection of the public. Radiological effluent EALs are also included to provide a basis for classifying events and conditions that cannot be readily or appropriately classified on the basis of plant conditions alone. The inclusion of both plant condition and radiological effluent EALs more fully addresses the spectrum of possible accident events and conditions. The TEDE dose is set at 10% of the EPA PAG of 1,000 mrem while the 500 mrem thyroid CDE was established in consideration of the 1:5 ratio of the EPA PAG for TEDE and thyroid CDE. Classification based on effluent monitor readings assumes that a release path to the environment is established. If the effluent flow past an effluent monitor is known to have stopped due to actions to isolate the release path, then the effluent monitor reading is no longer VALID for classification purposes. Escalation of the emergency classification level would be via IC RG1. EAL BASES DOCUMENT Rev. 0 Page 82 of 272

ATTACHMENT 1 EAL Bases DBNPS Basis: Dose assessments are performed by computer-based or manual methods (ref. 1, 2). Note: EAL thresholds reflect the State of Ohio guidance to utilities within their jurisdiction to evaluate the consequences of radiological releases in terms of a Child Thyroid PAG rather than an EPA-400 CDE Thyroid PAG. DBNPS Basis Reference(s):

1. NOP-LP-5402 Davis-Besse MIDAS Dose Assessment Software
2. RA-EP-02240 Offsite Dose Assessment
3. NEI 99-01 AS1 EAL BASES DOCUMENT Rev. 0 Page 83 of 272

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 1 - Radiological Effluent Initiating Condition: Release of gaseous radioactivity resulting in offsite dose greater than 100 mrem TEDE or 500 mrem thyroid CDE EAL: RS1.3 Site Area Emergency Field survey results indicate EITHER of the following at or beyond the SITE BOUNDARY: z Closed window dose rates > 100 mR/hr expected to continue for 60 min. z Analyses of field survey samples indicate thyroid CDE > 500 mrem for 60 min. of inhalation. (Notes 1, 2) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Note 2: If an ongoing release is detected and the release start time is unknown, assume that the release duration has exceeded the specified time limit. Mode Applicability: ALL NEI 99-01 Basis: This IC addresses a release of gaseous radioactivity that results in projected or actual offsite doses greater than or equal to 10% of the EPA Protective Action Guides (PAGs). It includes both monitored and un-monitored releases. Releases of this magnitude are associated with the failure of plant systems needed for the protection of the public. Radiological effluent EALs are also included to provide a basis for classifying events and conditions that cannot be readily or appropriately classified on the basis of plant conditions alone. The inclusion of both plant condition and radiological effluent EALs more fully addresses the spectrum of possible accident events and conditions. The TEDE dose is set at 10% of the EPA PAG of 1,000 mrem while the 500 mrem thyroid CDE was established in consideration of the 1:5 ratio of the EPA PAG for TEDE and thyroid CDE. Escalation of the emergency classification level would be via IC RG1. EAL BASES DOCUMENT Rev. 0 Page 84 of 272

ATTACHMENT 1 EAL Bases DBNPS Basis: NOP-LP-5015 FENOC Field Monitoring Teams Radiation Monitoring Teams Field Surveys provides guidance for emergency or post-accident radiological environmental monitoring (ref. 1). Note: EAL thresholds reflect the State of Ohio guidance to utilities within their jurisdiction to evaluate the consequences of radiological releases in terms of a Child Thyroid PAG rather than an EPA-400 CDE Thyroid PAG. DBNPS Basis Reference(s):

1. NOP-LP-5015 FENOC Field Monitoring Teams Radiation Monitoring Teams Field Surveys
2. NEI 99-01 AS1 EAL BASES DOCUMENT Rev. 0 Page 85 of 272

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 1 - Radiological Effluent Initiating Condition: Release of gaseous or liquid radioactivity resulting in offsite dose greater than 10 mrem TEDE or 50 mrem thyroid CDE EAL: RA1.1 Alert Station Vent Channel 1 Noble Gas (RE 4598 AB/BB) > 8.4E -02 Ci/cc for 15 minutes or longer (Notes 1, 2, 3, 4) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Note 2: If an ongoing release is detected and the release start time is unknown, assume that the release duration has exceeded the specified time limit. Note 3: If the effluent flow past an effluent monitor is known to have stopped, indicating that the release path is isolated, the effluent monitor reading is no longer VALID for classification purposes. Note 4: The pre-calculated effluent monitor values presented in EALs RA1.1, RS1.1 and RG1.1 should be used for emergency classification assessments until the results from a dose assessment using actual meteorology are available. Mode Applicability: ALL NEI 99-01 Basis: This IC addresses a release of gaseous or liquid radioactivity that results in projected or actual offsite doses greater than or equal to 1% of the EPA Protective Action Guides (PAGs). It includes both monitored and un-monitored releases. Releases of this magnitude represent an actual or potential substantial degradation of the level of safety of the plant as indicated by a radiological release that significantly exceeds regulatory limits (e.g., a significant uncontrolled release). Radiological effluent EALs are also included to provide a basis for classifying events and conditions that cannot be readily or appropriately classified on the basis of plant conditions alone. The inclusion of both plant condition and radiological effluent EALs more fully addresses the spectrum of possible accident events and conditions. The TEDE dose is set at 1% of the EPA PAG of 1,000 mrem while the 50 mrem thyroid CDE was established in consideration of the 1:5 ratio of the EPA PAG for TEDE and thyroid CDE. Classification based on effluent monitor readings assumes that a release path to the environment is established. If the effluent flow past an effluent monitor is known to have EAL BASES DOCUMENT Rev. 0 Page 86 of 272

ATTACHMENT 1 EAL Bases stopped due to actions to isolate the release path, then the effluent monitor reading is no longer VALID for classification purposes. Escalation of the emergency classification level would be via IC RS1. DBNPS Basis: The DBNPS gaseous effluent limits for RA1.1 are based on values that equate to an offsite dose greater than EITHER:

  • 10 mrem TEDE
  • 50 mrem CDE Thyroid Note: EAL thresholds reflect the State of Ohio guidance to utilities within their jurisdiction to evaluate the consequences of radiological releases in terms of a Child Thyroid PAG rather than an EPA-400 CDE Thyroid PAG.

The Alert Station Vent gaseous effluent monitor value corresponds to calculated doses of 1% of the EPA Protective Action Guidelines (TEDE or CDE Thyroid) per EP-EALCALC-DB-0703 Radiological Gaseous Effluent EAL Values (EALs RG1, RS1, RA1 and RU1) (ref. 1). The station vent is the primary effluent monitor release point. Other pathways such as Safety and relief valves, as well as AFW and MSSV, do not have direct effluent release monitors. Releases from these points would be verified and monitored by RA1.3 survey readings. DBNPS Basis Reference(s):

1. EP-EALCALC-DB-0703 Rev.2 Radiological Gaseous Effluent EAL Values (EALs RG1, RS1, RA1 and RU1)
2. NEI 99-01 AA1 EAL BASES DOCUMENT Rev. 0 Page 87 of 272

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 1 - Radiological Effluent Initiating Condition: Release of gaseous or liquid radioactivity resulting in offsite dose greater than 10 mrem TEDE or 50 mrem thyroid CDE EAL: RA1.2 Alert Dose assessment using actual meteorology indicates doses > 10 mrem TEDE or 50 mrem thyroid CDE at or beyond the SITE BOUNDARY (Note 4) Note 4: The pre-calculated effluent monitor values presented in EALs RA1.1, RS1.1 and RG1.1 should be used for emergency classification assessments until the results from a dose assessment using actual meteorology are available. Mode Applicability: ALL NEI 99-01 Basis: This IC addresses a release of gaseous or liquid radioactivity that results in projected or actual offsite doses greater than or equal to 1% of the EPA Protective Action Guides (PAGs). It includes both monitored and un-monitored releases. Releases of this magnitude represent an actual or potential substantial degradation of the level of safety of the plant as indicated by a radiological release that significantly exceeds regulatory limits (e.g., a significant uncontrolled release). Radiological effluent EALs are also included to provide a basis for classifying events and conditions that cannot be readily or appropriately classified on the basis of plant conditions alone. The inclusion of both plant condition and radiological effluent EALs more fully addresses the spectrum of possible accident events and conditions. The TEDE dose is set at 1% of the EPA PAG of 1,000 mrem while the 50 mrem thyroid CDE was established in consideration of the 1:5 ratio of the EPA PAG for TEDE and thyroid CDE. Classification based on effluent monitor readings assumes that a release path to the environment is established. If the effluent flow past an effluent monitor is known to have stopped due to actions to isolate the release path, then the effluent monitor reading is no longer VALID for classification purposes. Escalation of the emergency classification level would be via IC RS1. EAL BASES DOCUMENT Rev. 0 Page 88 of 272

ATTACHMENT 1 EAL Bases DBNPS Basis: Dose assessments are performed by computer-based and manual methods (ref. 1, 2). Note: EAL thresholds reflect the State of Ohio guidance to utilities within their jurisdiction to evaluate the consequences of radiological releases in terms of a Child Thyroid PAG rather than an EPA-400 CDE Thyroid PAG. DBNPS Basis Reference(s):

1. NOP-LP-5402 Davis-Besse MIDAS Dose Assessment Software
2. RA-EP-02240 Offsite Dose Assessment
3. NEI 99-01 AA1 EAL BASES DOCUMENT Rev. 0 Page 89 of 272

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 1 - Radiological Effluent Initiating Condition: Release of gaseous or liquid radioactivity resulting in offsite dose greater than 10 mrem TEDE or 50 mrem thyroid CDE EAL: RA1.3 Alert Analysis of a liquid effluent sample indicates a concentration or release rate that would result in doses > 10 mrem TEDE or 50 mrem thyroid CDE at or beyond the SITE BOUNDARY for 60 min. of exposure (Notes 1, 2) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Note 2: If an ongoing release is detected and the release start time is unknown, assume that the release duration has exceeded the specified time limit. Mode Applicability: ALL NEI 99-01 Basis: This IC addresses a release of gaseous or liquid radioactivity that results in projected or actual offsite doses greater than or equal to 1% of the EPA Protective Action Guides (PAGs). It includes both monitored and un-monitored releases. Releases of this magnitude represent an actual or potential substantial degradation of the level of safety of the plant as indicated by a radiological release that significantly exceeds regulatory limits (e.g., a significant uncontrolled release). Radiological effluent EALs are also included to provide a basis for classifying events and conditions that cannot be readily or appropriately classified on the basis of plant conditions alone. The inclusion of both plant condition and radiological effluent EALs more fully addresses the spectrum of possible accident events and conditions. The TEDE dose is set at 1% of the EPA PAG of 1,000 mrem while the 50 mrem thyroid CDE was established in consideration of the 1:5 ratio of the EPA PAG for TEDE and thyroid CDE. Classification based on effluent monitor readings assumes that a release path to the environment is established. If the effluent flow past an effluent monitor is known to have stopped due to actions to isolate the release path, then the effluent monitor reading is no longer VALID for classification purposes. Escalation of the emergency classification level would be via IC RS1. EAL BASES DOCUMENT Rev. 0 Page 90 of 272

ATTACHMENT 1 EAL Bases DBNPS Basis: Dose assessments based on liquid releases are performed per Offsite Dose Calculation Manual (ref. 1). Note: EAL thresholds reflect the State of Ohio guidance to utilities within their jurisdiction to evaluate the consequences of radiological releases in terms of a Child Thyroid PAG rather than an EPA-400 CDE Thyroid PAG. DBNPS Basis Reference(s):

1. DBNPS ODCM
2. NEI 99-01 AA1 EAL BASES DOCUMENT Rev. 0 Page 91 of 272

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 1 - Radiological Effluent Initiating Condition: Release of gaseous or liquid radioactivity resulting in offsite dose greater than 10 mrem TEDE or 50 mrem thyroid CDE EAL: RA1.4 Alert Field survey results indicate EITHER of the following at or beyond the SITE BOUNDARY: z Closed window dose rates > 10 mR/hr expected to continue for 60 min. z Analyses of field survey samples indicate thyroid CDE > 50 mrem for 60 min. of inhalation. (Notes 1, 2) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Note 2: If an ongoing release is detected and the release start time is unknown, assume that the release duration has exceeded the specified time limit. Mode Applicability: ALL NEI 99-01 Basis: This IC addresses a release of gaseous or liquid radioactivity that results in projected or actual offsite doses greater than or equal to 1% of the EPA Protective Action Guides (PAGs). It includes both monitored and un-monitored releases. Releases of this magnitude represent an actual or potential substantial degradation of the level of safety of the plant as indicated by a radiological release that significantly exceeds regulatory limits (e.g., a significant uncontrolled release). Radiological effluent EALs are also included to provide a basis for classifying events and conditions that cannot be readily or appropriately classified on the basis of plant conditions alone. The inclusion of both plant condition and radiological effluent EALs more fully addresses the spectrum of possible accident events and conditions. The TEDE dose is set at 1% of the EPA PAG of 1,000 mrem while the 50 mrem thyroid CDE was established in consideration of the 1:5 ratio of the EPA PAG for TEDE and thyroid CDE. Classification based on effluent monitor readings assumes that a release path to the environment is established. If the effluent flow past an effluent monitor is known to have EAL BASES DOCUMENT Rev. 0 Page 92 of 272

ATTACHMENT 1 EAL Bases stopped due to actions to isolate the release path, then the effluent monitor reading is no longer VALID for classification purposes. Escalation of the emergency classification level would be via IC RS1. DBNPS Basis: NOP-LP-5015 FENOC Field Monitoring Teams Radiation Monitoring Teams Field Surveys provides guidance for emergency or post-accident radiological environmental monitoring (ref. 1). Note: EAL thresholds reflect the State of Ohio guidance to utilities within their jurisdiction to evaluate the consequences of radiological releases in terms of a Child Thyroid PAG rather than an EPA-400 CDE Thyroid PAG. DBNPS Basis Reference(s):

1. NOP-LP-5015 FENOC Field Monitoring Teams Radiation Monitoring Teams Field Surveys
2. NEI 99-01 AA1 EAL BASES DOCUMENT Rev. 0 Page 93 of 272

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 1 - Radiological Effluent Initiating Condition: Release of gaseous or liquid radioactivity greater than 2 times the ODCM limits for 60 minutes or longer EAL: RU1.1 Unusual Event Station Vent Channel 1 Noble Gas (RE 4598AA/BA) > 5.72E-03 Ci/cc for 60 minutes or longer OR ANY of the following effluent monitors > 2 times the high alarm setpoint established by a current radioactivity discharge permit for 60 minutes or longer:

  • Waste Gas System Outlet (RE 1822A or B).
  • Clean Waste System Outlet (RE 1770A or B).
  • Miscellaneous Waste System Outlet (RE 1878A or B).
  • Discharge permit specified monitor.

(Notes 1, 2, 3) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Note 2: If an ongoing release is detected and the release start time is unknown, assume that the release duration has exceeded the specified time limit. Note 3: If the effluent flow past an effluent monitor is known to have stopped, indicating that the release path is isolated, the effluent monitor reading is no longer VALID for classification purposes. Mode Applicability: ALL NEI 99-01 Basis: This IC addresses a potential decrease in the level of safety of the plant as indicated by a low-level radiological release that exceeds regulatory commitments for an extended period of time (e.g., an uncontrolled release). It includes ANY gaseous or liquid radiological release, EAL BASES DOCUMENT Rev. 0 Page 94 of 272

ATTACHMENT 1 EAL Bases monitored or un-monitored, including those for which a radioactivity discharge permit is normally prepared. Nuclear power plants incorporate design features intended to control the release of radioactive effluents to the environment. Further, there are administrative controls established to prevent unintentional releases, and to control and monitor intentional releases. The occurrence of an extended, uncontrolled radioactive release to the environment is indicative of degradation in these features and/or controls. Radiological effluent EALs are also included to provide a basis for classifying events and conditions that cannot be readily or appropriately classified on the basis of plant conditions alone. The inclusion of both plant condition and radiological effluent EALs more fully addresses the spectrum of possible accident events and conditions. Classification based on effluent monitor readings assumes that a release path to the environment is established. If the effluent flow past an effluent monitor is known to have stopped due to actions to isolate the release path, then the effluent monitor reading is no longer VALID for classification purposes. Releases should not be prorated or averaged. For example, a release exceeding 4 times release limits for 30 minutes does not meet the EAL. This EAL addresses normally occurring continuous radioactivity releases from monitored gaseous or liquid effluent pathways or radioactivity releases that cause effluent radiation monitor readings to exceed 2 times the limit established by a radioactivity discharge permit. This EAL will typically be associated with planned batch releases from non-continuous release pathways (e.g., radwaste, waste gas). Escalation of the emergency classification level would be via IC RA1. DBNPS Basis: The UE gaseous and liquid release values represent two times the appropriate ODCM release rate limits associated with the specified monitors (ref. 2). Gaseous Releases Instrumentation that may be used to assess this EAL is listed below (ref. 1):

  • Station Vent - RE 4598AA or BA
  • Waste Gas System Outlet - RE 1822 A or B (batch release)

The Station Vent gaseous effluent (RE 4598AA/BA) value of 2 times the ODCM setpoint was determined using formulas, isotopic dose conversion factors and meteorology data as specified in the ODCM based on a normal operating isotopic mixture (no clad damage condition). Assumptions and calculation inputs are provided in EP-EALCALC-DB-0703 Rev. 2 (ref. 2). EAL BASES DOCUMENT Rev. 0 Page 95 of 272

ATTACHMENT 1 EAL Bases The Waste Gas Outlet (RE 1822 A or B for batch release) are the release monitors normally used for planned discharges. If a discharge is performed using a different flow path or effluent monitor (e.g., a portable or temporary effluent monitor), then the declaration criteria will be based on the monitor specified in the discharge permit. Liquid Releases Instrumentation that may be used to assess this EAL is listed below (ref. 1):

  • Clean Waste System Outlet - RE 1770 A or B (batch release)
  • Misc. Waste System Outlet - RE 1878 A or B (batch release)

The liquid release monitors listed are those normally used for planned discharges. If a discharge is performed using a different flow path or effluent monitor (e.g., a portable or temporary effluent monitor), then the declaration criteria will be based on the monitor specified in the discharge permit. DBNPS Basis Reference(s):

1. DBNPS ODCM
2. EP-EALCALC-DB-0703 Rev. 2 Radiological Gaseous Effluent EAL Values (EALs RG1, RS1, RA1 and RU1)
3. NEI 99-01 AU1 EAL BASES DOCUMENT Rev. 0 Page 96 of 272

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 1 - Radiological Effluent Initiating Condition: Release of gaseous or liquid radioactivity greater than 2 times the ODCM limits for 60 minutes or longer. EAL: RU1.2 Unusual Event Sample analysis for a gaseous or liquid release indicates a concentration or release rate > 2 x ODCM limits for 60 min. (Notes 1, 2) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Note 2: If an ongoing release is detected and the release start time is unknown, assume that the release duration has exceeded the specified time limit. Mode Applicability: ALL NEI 99-01 Basis: This IC addresses a potential decrease in the level of safety of the plant as indicated by a low-level radiological release that exceeds regulatory commitments for an extended period of time (e.g., an uncontrolled release). It includes ANY gaseous or liquid radiological release, monitored or un-monitored, including those for which a radioactivity discharge permit is normally prepared. Nuclear power plants incorporate design features intended to control the release of radioactive effluents to the environment. Further, there are administrative controls established to prevent unintentional releases, and to control and monitor intentional releases. The occurrence of an extended, uncontrolled radioactive release to the environment is indicative of degradation in these features and/or controls. Radiological effluent EALs are also included to provide a basis for classifying events and conditions that cannot be readily or appropriately classified on the basis of plant conditions alone. The inclusion of both plant condition and radiological effluent EALs more fully addresses the spectrum of possible accident events and conditions. Releases should not be prorated or averaged. For example, a release exceeding 4 times release limits for 30 minutes does not meet the EAL. This EAL addresses uncontrolled gaseous or liquid releases that are detected by sample analyses or environmental surveys, particularly on unmonitored pathways (e.g., spills of radioactive liquids into storm drains, heat exchanger leakage in river water systems, etc.). EAL BASES DOCUMENT Rev. 0 Page 97 of 272

ATTACHMENT 1 EAL Bases Escalation of the emergency classification level would be via IC RA1. DBNPS Basis: Grab samples are used to determine release concentrations or release rates, confirm meter readings, or indicate the need for sampling when the effluent monitors are not in service or other alarms occur. The maximum instantaneous release rate limits are calculated in accordance with the ODCM. These are indicated on approved discharge permit release packages (ref. 1). DBNPS Basis Reference(s):

1. DBNPS ODCM
2. NEI 99-01 AU1 EAL BASES DOCUMENT Rev. 0 Page 98 of 272

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 2 - Irradiated Fuel Event Initiating Condition: Spent fuel pool level cannot be restored to at least the top of the fuel racks for 60 minutes or longer EAL: RG2.1 General Emergency Spent fuel pool level cannot be restored to at least 1 ft. for > 60 min. (Note 1) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Mode Applicability: ALL NEI 99-01 Basis: This EAL addresses a significant loss of spent fuel pool inventory control and makeup capability leading to a prolonged uncovery of spent fuel. This condition will lead to fuel damage and a radiological release to the environment. It is recognized that this IC would likely not be met until well after another General Emergency IC was met; however, it is included to provide classification diversity. DBNPS Basis: Post-Fukushima order EA-12-051 (ref.1) required the installation of reliable SFP level indication capable of identifying normal level (Level 1), SFP level 10 ft. above the top of the fuel racks (Level 2) and SFP level at the top of the fuel racks (Level 3). Indicated level of 1 ft. on LI4801A (primary) or LI4801B (Backup) corresponds approximately to 1 ft. above the top of the SFP racks (ref. 2). DBNPS Basis Reference(s):

1. NRC EA-12-51 Issuance of Order to Modify Licenses with Regard to Reliable Spent Fuel Pool Instrumentation
2. Engineering Change Package 13-0596
3. NEI 99-01 AG2 EAL BASES DOCUMENT Rev. 0 Page 99 of 272

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 2 - Irradiated Fuel Event Initiating Condition: Spent fuel pool level at the top of the fuel racks EAL: RS2.1 Site Area Emergency Lowering of spent fuel pool level to 1 ft. Mode Applicability: ALL NEI 99-01 Basis: This EAL addresses a significant loss of spent fuel pool inventory control and makeup capability leading to IMMINENT fuel damage. This condition entails major failures of plant functions needed for protection of the public and thus warrant a Site Area Emergency declaration. It is recognized that this IC would likely not be met until well after another Site Area Emergency IC was met; however, it is included to provide classification diversity. Escalation of the emergency classification level would be via IC RG1 or RG2. DBNPS Basis: Post-Fukushima order EA-12-051 (ref.1) required the installation of reliable SFP level indication capable of identifying normal level (Level 1), SFP level 10 ft. above the top of the fuel racks (Level 2) and SFP level at the top of the fuel racks (Level 3). Indicated level of 1 ft. on LI4801A (primary) or LI4801B (Backup) corresponds approximately to 1 ft. above the top of the SFP racks (ref. 2). DBNPS Basis Reference(s):

1. NRC EA-12-51 Issuance of Order to Modify Licenses with Regard to Reliable Spent Fuel Pool Instrumentation
2. Engineering Change Package 13-0596
3. NEI 99-01 AS2 EAL BASES DOCUMENT Rev. 0 Page 100 of 272

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 2 - Irradiated Fuel Event Initiating Condition: Significant lowering of water level above, or damage to, irradiated fuel EAL: RA2.1 Unusual Event Uncovery of irradiated fuel in the REFUELING PATHWAY Mode Applicability: ALL NEI 99-01 Basis: This IC addresses events that have caused IMMINENT or actual damage to an irradiated fuel assembly, or a significant lowering of water level within the spent fuel pool. These events present radiological safety challenges to plant personnel and are precursors to a release of radioactivity to the environment. As such, they represent an actual or potential substantial degradation of the level of safety of the plant. This IC applies to irradiated fuel that is licensed for dry storage up to the point that the loaded storage cask is sealed. Once sealed, damage to a loaded cask causing loss of the CONFINEMENT BOUNDARY is classified in accordance with EAL EU1.1. Escalation of the emergency would be based on either Recognition Category R or C ICs. EAL #1 This EAL escalates from RU2.1 in that the loss of level, in the affected portion of the REFUELING PATHWAY, is of sufficient magnitude to have resulted in uncovery of irradiated fuel. Indications of irradiated fuel uncovery may include direct or indirect visual observation (e.g., reports from personnel or camera images), as well as significant changes in water and radiation levels, or other plant parameters. Computational aids may also be used (e.g., a boil-off curve). Classification of an event using this EAL should be based on the totality of available indications, reports and observations. While an area radiation monitor could detect an increase in a dose rate due to a lowering of water level in some portion of the REFUELING PATHWAY, the reading may not be a reliable indication of whether or not the fuel is actually uncovered. To the degree possible, readings should be considered in combination with other available indications of inventory loss. EAL BASES DOCUMENT Rev. 0 Page 101 of 272

ATTACHMENT 1 EAL Bases A drop in water level above irradiated fuel within the reactor vessel may be classified in accordance Recognition Category C during the Cold Shutdown and Refueling modes. Escalation of the emergency classification level would be via IC RS1. DBNPS Basis: None DBNPS Basis Reference(s):

1. DB-OP-02003 3-1-B, SFP LVL
2. DB-OP-02003 3-1-A, REFUELING CANAL LVL
3. DB-OP-02547 Spent Fuel Pool Cooling Malfunctions
4. NEI 99-01 AA2 EAL BASES DOCUMENT Rev. 0 Page 102 of 272

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 2 - Irradiated Fuel Event Initiating Condition: Significant lowering of water level above, or damage to, irradiated fuel EAL: RA2.2 Alert Damage to irradiated fuel resulting in a release of radioactivity as indicated by a high radiation alarm on ANY of the following radiation monitor indications:

  • RE 8426 SFP Area
  • RE 8427 SFP Area
  • RE 8417 Fuel Handling Area
  • RE 8418 Fuel Handling Area
  • RE 8425 Equipment Hatch Area
  • RE 8446/8447 Fuel Handling Exhaust
  • RE 4598AA/BA Station Vent Mode Applicability:

ALL NEI 99-01 Basis: This IC addresses events that have caused IMMINENT or actual damage to an irradiated fuel assembly, or a significant lowering of water level within the spent fuel pool. These events present radiological safety challenges to plant personnel and are precursors to a release of radioactivity to the environment. As such, they represent an actual or potential substantial degradation of the level of safety of the plant. Escalation of the emergency would be based on either Recognition Category R or C ICs. This EAL addresses a release of radioactive material caused by mechanical damage to irradiated fuel. Damaging events may include the dropping, bumping or binding of an assembly, or dropping a heavy load onto an assembly. A rise in readings on radiation monitors should be considered in conjunction with in-plant reports or observations of a potential fuel damaging event (e.g., a fuel handling accident). Escalation of the emergency classification level would be via IC RS1. EAL BASES DOCUMENT Rev. 0 Page 103 of 272

ATTACHMENT 1 EAL Bases DBNPS Basis: The specified radiation monitors are those expected to see increase area radiation levels as a result of damage to irradiated fuel (ref. 1). The high alarm setpoints for the radiation monitors are set to be indicative of significant increases in area and/or airborne radiation (ref. 2). DBNPS Basis Reference(s):

1. DB-OP-02530 Fuel Handling Accident
2. Radiation Setpoints Manual
3. NEI 99-01 AA2 EAL BASES DOCUMENT Rev. 0 Page 104 of 272

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 2 - Irradiated Fuel Event Initiating Condition: Significant lowering of water level above, or damage to, irradiated fuel EAL: RA2.3 Alert Lowering of spent fuel pool level to 10 ft. Mode Applicability: ALL NEI 99-01 Basis: This IC addresses events that have caused IMMINENT or actual damage to an irradiated fuel assembly, or a significant lowering of water level within the spent fuel pool. These events present radiological safety challenges to plant personnel and are precursors to a release of radioactivity to the environment. As such, they represent an actual or potential substantial degradation of the level of safety of the plant. Escalation of the emergency would be based on either Recognition Category R or C ICs. Spent fuel pool water level at this value is within the lower end of the level range necessary to prevent significant dose consequences from direct gamma radiation to personnel performing operations in the vicinity of the spent fuel pool. This condition reflects a significant loss of spent fuel pool water inventory and thus it is also a precursor to a loss of the ability to adequately cool the irradiated fuel assembles stored in the pool. Escalation of the emergency classification level would be via IC RS1or RS2. DBNPS Basis: Post-Fukushima order EA-12-051 (ref.1) required the installation of reliable SFP level indication capable of identifying normal level (Level 1), SFP level 10 ft. above the top of the fuel racks (Level 2) and SFP level at the top of the fuel racks (Level 3). Indicated level of 10 ft. on LI4801A (primary) or LI4801B (Backup) corresponds to plant elevation 588 ft. 6 in. (ref. 2). DBNPS Basis Reference(s):

1. NRC EA-12-51 Issuance of Order to Modify Licenses with Regard to Reliable Spent Fuel Pool Instrumentation
2. Engineering Change Package 13-0596
3. NEI 99-01 AA2 EAL BASES DOCUMENT Rev. 0 Page 105 of 272

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 2 - Irradiated Fuel Event Initiating Condition: UNPLANNED loss of water level above irradiated fuel EAL: RU2.1 Unusual Event UNPLANNED water level drop in the REFUELING PATHWAY as indicated by ANY of the following:

  • SFP level alarm or indication (Ll 1600)
  • SFP level indication (Ll 4801 A/B)
  • Refueling Canal low water level alarm or indication (Ll 1627)
  • Visual observation AND UNPLANNED rise in corresponding area radiation levels as indicated by ANY of the following radiation monitors:
  • RE 8426 SFP Area
  • RE 8427 SFP Area
  • RE 8417 Fuel Handling Area
  • RE 8418 Fuel Handling Area
  • RE 8425 Equipment Hatch Area Mode Applicability:

ALL NEI 99-01 Basis: This IC addresses a decrease in water level above irradiated fuel sufficient to cause elevated radiation levels. This condition could be a precursor to a more serious event and is also indicative of a minor loss in the ability to control radiation levels within the plant. It is therefore a potential degradation in the level of safety of the plant. A water level decrease will be primarily determined by indications from available level instrumentation. Other sources of level indications may include reports from plant personnel (e.g., from a refueling crew) or video camera observations (if available). A significant drop in the water level may also cause an increase in the radiation levels of adjacent areas that can be detected by monitors in those locations. EAL BASES DOCUMENT Rev. 0 Page 106 of 272

ATTACHMENT 1 EAL Bases The effects of planned evolutions should be considered. For example, a refueling bridge area radiation monitor reading may increase due to planned evolutions such as lifting of the reactor vessel head or movement of a fuel assembly. Note that this EAL is applicable only in cases where the elevated reading is due to an UNPLANNED loss of water level. A drop in water level above irradiated fuel within the reactor vessel may be classified in accordance Recognition Category C during the Cold Shutdown and Refueling modes. Escalation of the emergency classification level would be via IC RA2. DBNPS Basis: The SFP low water level alarm setpoint is actuated by LS 1600 at a setpoint of 23.2 feet on LI 1600 (ref. 1). The refueling canal low water level alarm setpoint is actuated by LS 1627 at a setpoint of 23.4 feet on LI 1627 (this corresponds to 1.5 inches below normal) (ref. 2). The Ll 4801 A/B is indication only, with no alarm or computer point function. Water level restoration instructions are performed in accordance with AOPs (ref. 1, 2, 3). The specified radiation monitors are those expected to see increase area radiation levels as a result of a loss of REFUELING PATHWAY inventory (ref. 1). Increasing radiation indications on these monitors in the absence of indications of decreasing REFUELING PATHWAY level are not classifiable under this EAL. When the spent fuel pool and reactor cavity are connected, there could exist the possibility of uncovering irradiated fuel. Therefore, this EAL is applicable for conditions in which irradiated fuel is being transferred to and from the reactor vessel and spent fuel pool. DBNPS Basis Reference(s):

1. DB-OP-02003 3-1-B, SFP LVL
2. DB-OP-02003 3-1-A, REFUELING CANAL LVL
3. DB-OP-02547 Spent Fuel Pool Cooling Malfunctions
4. NEI 99-01 AU2 EAL BASES DOCUMENT Rev. 0 Page 107 of 272

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 3 - Area Radiation Levels Initiating Condition: Radiation levels that IMPEDE access to equipment necessary for normal plant operations, cooldown or shutdown EAL: RA3.1 Alert Dose rates > 15 mR/hr in EITHER of the following areas:

  • Control Room (RE 8430 or 8431)
  • Central Alarm Station (RE 8435 or 8436)

Mode Applicability: ALL NEI 99-01 Basis: This IC addresses elevated radiation levels in certain plant rooms/areas sufficient to preclude or IMPEDE personnel from performing actions necessary to maintain normal plant operation, or to perform a normal plant cooldown and shutdown. As such, it represents an actual or potential substantial degradation of the level of safety of the plant. The Emergency Director should consider the cause of the increased radiation levels and determine if another IC may be applicable. Escalation of the emergency classification level would be via Recognition Category R, C or F ICs. DBNPS Basis: Areas that meet this threshold include the Control Room and the Central Alarm Station (CAS). RE 8430 and 8431 monitors the Control room for area radiation. The CAS area does not have installed radiation monitoring but RE 8435 and 8436 are in near proximity and can be used to approximate CAS area radiation levels (ref. 1, 2). The CAS is included because of its importance to permitting access to areas required to assure safe plant operations. DBNPS Basis Reference(s):

1. DB-OP-06412 Process and Area Radiation Monitor
2. SD-017B System Description for Area Radiation Monitors
3. NEI 99-01 AA3 EAL BASES DOCUMENT Rev. 0 Page 108 of 272

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 3 - Area Radiation Levels Initiating Condition: Radiation levels that IMPEDE access to equipment necessary for normal plant operations, cooldown or shutdown EAL: RA3.2 Alert An UNPLANNED event results in radiation levels that prohibit or IMPEDE access to ANY Table R-2 Safe Shutdown Rooms or Areas (Note 5) Note 5: If the equipment in the listed room or area was already inoperable or out-of-service before the event occurred, then no emergency classification is warranted. Table R-2 Safe Shutdown Rooms/Areas Room/Area Mode Applicability Aux Bldg. 565 ele. Room 236 #2 Mechanical 1, 2, 3 Penetration Room Aux Bldg. 585 ele. Room 304 corridor outside 1, 2, 3

            #3 Mechanical Penetration Room Aux Bldg. 603 ele. Room 427 - #2 Electrical 1, 2, 3 Penetration Room Mode Applicability:

1 - Power Operation, 2 - Startup, 3 - Hot Standby NEI 99-01 Basis: This IC addresses elevated radiation levels in certain plant rooms/areas sufficient to preclude or IMPEDE personnel from performing actions necessary to maintain normal plant operation, or to perform a normal plant cooldown and shutdown. As such, it represents an actual or potential substantial degradation of the level of safety of the plant. The Emergency Director should consider the cause of the increased radiation levels and determine if another IC may be applicable. For RA3.2, an Alert declaration is warranted if entry into the affected room/area is, or may be, procedurally required during the plant operating mode in effect at the time of the elevated radiation levels. The emergency classification is not contingent upon whether entry is actually necessary at the time of the increased radiation levels. Access should be considered as IMPEDED if extraordinary measures are necessary to facilitate entry of personnel into the affected room/area (e.g., installing temporary shielding, requiring use of non-routine protective equipment, requesting an extension in dose limits beyond normal administrative limits). EAL BASES DOCUMENT Rev. 0 Page 109 of 272

ATTACHMENT 1 EAL Bases An emergency declaration is not warranted if ANY of the following conditions apply: z The plant is in an operating mode different than the mode specified for the affected room/area (i.e., entry is not required during the operating mode in effect at the time of the elevated radiation levels). For example, the plant is in Mode 1 when the radiation increase occurs, and the procedures used for normal operation, cooldown and shutdown do not require entry into the affected room until Mode 4. z The increased radiation levels are a result of a planned activity that includes compensatory measures, which address the temporary inaccessibility of a room or area (e.g., radiography, spent filter or resin transfer, etc.). z The action for which room/area entry is required is of an administrative or record keeping nature (e.g., normal rounds or routine inspections). z The access control measures are of a conservative or precautionary nature, and would not actually prevent or IMPEDE a required action. If the equipment in the listed room or area was already inoperable, or out-of-service, before the event occurred, then no emergency should be declared since the event will have no adverse impact beyond that already allowed by Technical Specifications at the time of the event. Escalation of the emergency classification level would be via Recognition Category R, C or F ICs. DBNPS Basis: If the equipment in the listed room or area was already inoperable, or out-of-service, before the event occurred, then no emergency should be declared since the event will have no adverse impact beyond that already allowed by Technical Specifications at the time of the event. The list of plant rooms or areas with entry-related mode applicability identified specify those rooms or areas that contain equipment which require a manual/local action as specified in operating procedures used for normal plant operation, cooldown and shutdown. Rooms or areas in which actions of a contingent or emergency nature would be performed (e.g., an action to address an off-normal or emergency condition such as emergency repairs, corrective measures or emergency operations) are not included. In addition, the list specifies the plant mode(s) during which entry would be required for each room or area (ref. 1). DBNPS Basis Reference(s):

1. Attachment 3 Safe Shutdown Rooms/Areas Tables R-2 & H-2 Bases
2. RA-EP-02861 Radiological Incidents
3. NEI 99-01 AA3 EAL BASES DOCUMENT Rev. 0 Page 110 of 272

ATTACHMENT 1 EAL Bases Category E - Dry Fuel Storage Facility (DFSF) EAL Group: ANY (EALs in this category are applicable to ANY plant condition, hot or cold) A dry fuel storage facility (DFSF) is a complex that is designed and constructed for the interim storage of spent nuclear fuel and other radioactive materials associated with spent fuel storage. A significant amount of the radioactive material contained within a cask/canister must escape its packaging and enter the biosphere for there to be a significant environmental effect resulting from an accident involving the dry storage of spent nuclear fuel. An Unusual Event is declared based on the occurrence of an event of sufficient magnitude that a loaded cask CONFINEMENT BOUNDARY is damaged or violated. Minor surface damage that does not affect storage cask/canister boundary is excluded from the scope of these EALs. EAL BASES DOCUMENT Rev. 0 Page 111 of 272

ATTACHMENT 1 EAL Bases Category: E - DFSF Sub-category: None Initiating Condition: Damage to a loaded cask CONFINEMENT BOUNDARY EAL: EU1.1 Notification of Unusual Event Damage to a loaded canister CONFINEMENT BOUNDARY as indicated by an on-contact radiation reading on the surface of a loaded spent fuel HSM cask > EITHER of the following:

  • 100 mrem/hr (neutron + gamma) on the HSM cask wall or roof
  • 100 mrem/hr (neutron + gamma) on the center of the HSM cask door Mode Applicability:

ALL NEI 99-01 Basis: This IC addresses an event that results in damage to the CONFINEMENT BOUNDARY of a storage cask containing spent fuel. It applies to irradiated fuel that is licensed for dry storage beginning at the point that the loaded storage cask is sealed. The issues of concern are the creation of a potential or actual release path to the environment, degradation of one or more fuel assemblies due to environmental factors, and configuration changes, which could cause challenges in removing the cask or fuel from storage. The existence of damage is determined by radiological survey. The technical specification multiple of 2 times, which is also used in Recognition Category R IC RU1, is used here to distinguish between non-emergency and emergency conditions. The emphasis for this classification is the degradation in the level of safety of the spent fuel cask and not the magnitude of the associated dose or dose rate. It is recognized that in the case of extreme damage to a loaded cask, the fact that the on-contact dose rate limit is exceeded may be determined based on measurement of a dose rate at some distance from the cask. Security-related events for DFSFs are covered under ICs HU1 and HA1. DBNPS Basis: The DBNPS DFSF utilizes one design for dry spent fuel storage: the Nuclear Horizontal Modular Storage (NUHOMS) system. The system consists of Horizontal Storage Modules (HSM) that contains dry shielded canisters (DSCs). The DSC serves as the CONFINEMENT BOUNDARY. The DSC is welded and designed to provide confinement of all radionuclides under normal, off normal, and accident conditions. EAL BASES DOCUMENT Rev. 0 Page 112 of 272

ATTACHMENT 1 EAL Bases CONFINEMENT BOUNDARY is defined as the barrier(s) between areas containing radioactive substances and the environment. Therefore, damage to a CONFINEMENT BOUNDARY must be a confirmed physical breach between the spent fuel and the environment for the DSC. The values shown represent 2 times the limits specified in the DFSF Site CSAR for radiation external to a loaded DSC (ref. 1). DBNPS Basis Reference(s):

1. Site CSAR NUH-003 Table 7.3-2 Shielding Analysis Results for 5 year Cooled Fuel NUHOMS-24P System
3. NEI 99-01 E-HU1 EAL BASES DOCUMENT Rev. 0 Page 113 of 272

ATTACHMENT 1 EAL Bases Category C - Cold Shutdown / Refueling System Malfunction EAL Group: Cold Conditions (RCS temperature 200ºF); EALs in this category are applicable only in one or more cold operating modes. Category C EALs are directly associated with Cold Shutdown or Refueling system safety functions. Given the variability of plant configurations (e.g., systems out-of-service for maintenance, containment open, reduced AC power redundancy, time since shutdown) during these periods, the consequences of any given initiating event can vary greatly. For example, a loss of decay heat removal capability that occurs at the end of an extended outage has less significance than a similar loss occurring during the first week after shutdown. Compounding these events is the likelihood that instrumentation necessary for assessment may also be inoperable. The Cold Shutdown and Refueling system malfunction EALs are based on performance capability to the extent possible with consideration given to RCS integrity, CONTAINMENT CLOSURE, and fuel clad integrity for the applicable operating modes (5 - Cold Shutdown, 6 - Refueling, D - Defueled). The events of this category pertain to the following subcategories:

1. RCS Level RCS water level is directly related to the status of adequate core cooling and, therefore, fuel clad integrity.
2. Loss of Essential AC Power Loss of essential plant electrical power can compromise plant SAFETY SYSTEM operability including decay heat removal and emergency core cooling systems, which may be necessary to ensure fission product barrier integrity. This category includes loss of onsite and offsite power sources for 4160 VAC essential buses.
3. RCS Temperature Uncontrolled or inadvertent temperature or pressure increases are indicative of a potential loss of safety functions.
4. Loss of Essential DC Power Loss of emergency plant electrical power can compromise plant SAFETY SYSTEM operability including decay heat removal and emergency core cooling systems, which may be necessary to ensure fission product barrier integrity. This category includes loss of power to or degraded voltage on the 125 VDC buses.

EAL BASES DOCUMENT Rev. 0 Page 114 of 272

ATTACHMENT 1 EAL Bases

5. Loss of Communications Certain events that degrade plant operators ability to communicate with essential personnel within or external to the plant warrant emergency classification.
6. Hazardous Event Affecting SAFETY SYSTEMS Certain hazardous natural and technological events may result in visible damage to or degraded performance of SAFETY SYSTEMS warranting classification.

EAL BASES DOCUMENT Rev. 0 Page 115 of 272

ATTACHMENT 1 EAL Bases Category: C - Cold Shutdown / Refueling System Malfunction Subcategory: 1 - RCS Level Initiating Condition: Loss of RCS inventory affecting fuel clad integrity with containment challenged EAL: CG1.1 General Emergency RCS level cannot be monitored for 30 min. (Note 1) AND Core uncovery is indicated by ANY of the following:

  • UNPLANNED increase in Containment Sumps, Auxiliary Building Sumps, BWST or RCDT levels of sufficient magnitude to indicate core uncovery
  • Containment Radiation Monitor (RE 4596A or B) reading > 16 R/hr
  • Refueling Bridge Portable Area Radiation Monitor reading > 30 R/hr
  • Erratic Source Range Monitor indication AND ANY Containment Challenge indication, Table C-1 Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded.

Note 6: If CONTAINMENT CLOSURE is re-established prior to exceeding the 30-minute time limit, declaration of a General Emergency is not required. Table C-1 Containment Challenge Indications

  • CONTAINMENT CLOSURE not established (Note 6)
  • Containment Hydrogen concentration > 4%
  • UNPLANNED rise in Containment pressure Mode Applicability:

5 - Cold Shutdown, 6 - Refueling EAL BASES DOCUMENT Rev. 0 Page 116 of 272

ATTACHMENT 1 EAL Bases NEI 99-01 Basis: This IC addresses the inability to restore and maintain RCS level above the top of active fuel with containment challenged. This condition represents actual or IMMINENT substantial core degradation or melting with potential for loss of containment integrity. Releases can be reasonably expected to exceed EPA PAG exposure levels offsite for more than the immediate site area. Following an extended loss of core decay heat removal and inventory makeup, decay heat will cause reactor coolant boiling and a further reduction in RCS level. If RCS level cannot be restored, fuel damage is probable. With CONTAINMENT CLOSURE not established, there is a high potential for a direct and unmonitored release of radioactivity to the environment. If CONTAINMENT CLOSURE is re-established prior to exceeding the 30-minute time limit, then declaration of a General Emergency is not required. The existence of an explosive mixture means, at a minimum, that the containment atmospheric hydrogen concentration is sufficient to support a hydrogen burn (i.e., at the lower deflagration limit). A hydrogen burn will raise containment pressure and could result in collateral equipment damage leading to a loss of containment integrity. It therefore represents a challenge to Containment integrity. In the early stages of a core uncovery event, it is unlikely that hydrogen buildup due to a core uncovery could result in an explosive gas mixture in containment. If all installed hydrogen gas monitors are out-of-service during an event leading to fuel cladding damage, it may not be possible to obtain a containment hydrogen gas concentration reading, as ambient conditions within the containment will preclude personnel access. During periods when installed containment hydrogen gas monitors are out-of-service, operators may use the other listed indications to assess whether or not containment is challenged. The 30-minute criterion is tied to a readily recognizable event start time (i.e., the total loss of ability to monitor level), and allows sufficient time to monitor, assess and correlate reactor and plant conditions to determine if core uncovery has actually occurred (i.e., to account for various accident progression and instrumentation uncertainties). It also allows sufficient time for performance of actions to terminate leakage, recover inventory control/makeup equipment and/or restore level monitoring. The inability to monitor RCS level may be caused by instrumentation and/or power failures, or water level dropping below the range of available instrumentation. If water level cannot be monitored, operators may determine that an inventory loss is occurring by observing changes in sump and/or tank levels. Sump and/or tank level changes must be evaluated against other potential sources of water flow to ensure they are indicative of leakage from the RCS. This EAL addresses concerns raised by Generic Letter 88-17, Loss of Decay Heat Removal; SECY 91-283, Evaluation of Shutdown and Low Power Risk Issues; NUREG-1449, Shutdown and Low-Power Operation at Commercial Nuclear Power Plants in the United States; and NUMARC 91-06, Guidelines for Industry Actions to Assess Shutdown Management. EAL BASES DOCUMENT Rev. 0 Page 117 of 272

ATTACHMENT 1 EAL Bases DBNPS Basis: The lowest measurable RCS level is the elevation of the RCS hot leg mid-loop (0.4 ft. on LI 10596). Therefore, RCS inventory loss relative to the RCS level elevation corresponding to the top of active fuel must be detected by indirect leakage indications (ref. 1, 2, 3). Sump level increases must be evaluated against other potential sources of leakage. If the make-up rate to the RCS unexplainably rises above the pre-established rate, a loss of RCS inventory may be occurring even if the source of the leakage cannot be immediately identified. Visual observation of leakage from systems connected to the RCS in areas outside the containment that cannot be isolated, or a sump sample verified by Chemistry, could also be indicative of a loss of RCS inventory (ref. 1). In the Refueling Mode, as water level in the reactor vessel lowers, the dose rate above the core will increase. The dose rate due to this core shine should result in indications on installed and portable area radiation monitors. RE 4596A or B, Containment Radiation Monitors are located in the containment, a reading greater than 16 R/hr is indicative of core uncovery. The Refuel Bridge Portable Radiation Monitor, when installed during refueling operations, is designed to provide monitoring of radiation due to a fuel handling event or loss of shielding during refueling operations. If this radiation monitor reaches and exceeds 30 R/hr, a loss of inventory indicative of core uncovery has occurred (ref. 2, 3). Post-TMI accident studies indicated that the installed PWR nuclear instrumentation will operate erratically when the core is uncovered and that this should be used as a tool for making such determinations. Three conditions are associated with a challenge to containment integrity:

  • CONTAINMENT CLOSURE is not established (Ref. 4).
  • In the early stages of a core uncovery event, it is unlikely that hydrogen buildup due to a core uncovery could result in an explosive mixture of dissolved gases in the containment. However, containment monitoring and/or sampling should be performed to verify this assumption and a General Emergency declared if it is determined that an explosive mixture exists. An explosive mixture can be formed when hydrogen gas concentration in the containment atmosphere is greater than 4% by volume in the presence of oxygen. Hydrogen monitors, although available at all times, are not in service during normal operations. They are started per DB-OP-02000 Table 3. Action is required if the measured concentration reaches 0.6% (notify TSC) and 3% (notify TSC) (ref 5).
  • ANY UNPLANNED increase in containment pressure in the Cold Shutdown or Refueling mode indicates a potential loss of CONTAINMENT CLOSURE capability.

UNPLANNED containment pressure increases indicates CONTAINMENT CLOSURE cannot be assured and the containment cannot be relied upon as a barrier to fission product release. DBNPS Basis Reference(s):

1. DB-OP-02527 Loss of Decay Heat Removal EAL BASES DOCUMENT Rev. 0 Page 118 of 272

ATTACHMENT 1 EAL Bases

2. EP-EALCALC-DB-0704 Radiation Monitor Readings for Core Uncovery During Refueling
3. DB-HP-01152 Performance of High Exposure Work
4. DB-OP-06904, Shutdown Operations
5. DB-OP-02000 Table 3, Containment Monitoring and Control
6. NEI 99-01 CG1 EAL BASES DOCUMENT Rev. 0 Page 119 of 272

ATTACHMENT 1 EAL Bases Category: C - Cold Shutdown / Refueling System Malfunction Subcategory: 1 - RCS Level Initiating Condition: Loss of RCS inventory affecting core decay heat removal capability EAL: CS1.1 Site Area Emergency RCS level cannot be monitored for 30 min. (Note 1) AND Core uncovery is indicated by ANY of the following:

  • UNPLANNED increase in Containment Sumps, Auxiliary Building Sumps, BWST or RCDT levels of sufficient magnitude to indicate core uncovery
  • Containment Radiation Monitor (RE 4596A or B) reading > 16 R/hr
  • Refueling Bridge Portable Area Radiation Monitor reading > 30 R/hr
  • Erratic Source Range Monitor indication Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded.

Mode Applicability: 5 - Cold Shutdown, 6 - Refueling NEI 99-01 Basis: This IC addresses a significant and prolonged loss of RCS inventory control and makeup capability leading to IMMINENT fuel damage. The lost inventory may be due to a RCS component failure, a loss of configuration control or prolonged boiling of reactor coolant. These conditions entail major failures of plant functions needed for protection of the public and thus warrant a Site Area Emergency declaration. Following an extended loss of core decay heat removal and inventory makeup, decay heat will cause reactor coolant boiling and a further reduction in RCS level. If RCS level cannot be restored, fuel damage is probable. The 30-minute criterion is tied to a readily recognizable event start time (i.e., the total loss of ability to monitor level), and allows sufficient time to monitor, assess and correlate reactor and plant conditions to determine if core uncovery has actually occurred (i.e., to account for various accident progression and instrumentation uncertainties). It also allows sufficient time for performance of actions to terminate leakage, recover inventory control/makeup equipment and/or restore level monitoring. EAL BASES DOCUMENT Rev. 0 Page 120 of 272

ATTACHMENT 1 EAL Bases The inability to monitor RCS level may be caused by instrumentation and/or power failures, or water level dropping below the range of available instrumentation. If water level cannot be monitored, operators may determine that an inventory loss is occurring by observing changes in sump and/or tank levels. Sump and/or tank level changes must be evaluated against other potential sources of water flow to ensure they are indicative of leakage from the RCS. This EAL addresses concerns raised by Generic Letter 88-17, Loss of Decay Heat Removal; SECY 91-283, Evaluation of Shutdown and Low Power Risk Issues; NUREG-1449, Shutdown and Low-Power Operation at Commercial Nuclear Power Plants in the United States; and NUMARC 91-06, Guidelines for Industry Actions to Assess Shutdown Management. Escalation of the emergency classification level would be via IC CG1 or RG1. DBNPS Basis: The lowest measurable RCS level is the elevation of the RCS hot leg mid-loop (0.4 ft. on LI 10596). Therefore, RCS inventory loss relative to the RCS level elevation corresponding to the top of active fuel must be detected by indirect leakage indications (ref. 1, 2, 3). Sump level increases must be evaluated against other potential sources of leakage. If the make-up rate to the RCS unexplainably rises above the pre-established rate, a loss of RCS inventory may be occurring even if the source of the leakage cannot be immediately identified. Visual observation of leakage from systems connected to the RCS in areas outside the containment that cannot be isolated, or a sump sample verified by Chemistry, could also be indicative of a loss of RCS inventory (ref. 1). In the Refueling Mode, as water level in the reactor vessel lowers, the dose rate above the core will increase. The dose rate due to this core shine should result in indications on installed and portable area radiation monitors. RE 4596A or B, Containment Radiation Monitors are located in the containment, a reading greater than 16 R/hr is indicative of core uncovery. The Refuel Bridge Portable Radiation Monitor, when installed during refueling operations, is designed to provide monitoring of radiation due to a fuel handling event or loss of shielding during refueling operations. If this radiation monitor reaches and exceeds 30 R/hr, a loss of inventory indicative of core uncovery has occurred (ref. 2, 3). Post-TMI accident studies indicated that the installed PWR nuclear instrumentation will operate erratically when the core is uncovered and that this should be used as a tool for making such determinations. DBNPS Basis Reference(s):

1. DB-OP-02527 Loss of Decay Heat Removal
2. EP-EALCALC-DB-0704 Radiation Monitor Readings for Core Uncovery During Refueling
3. DB-HP-01152 Performance of High Exposure Work
4. NEI 99-01 CS1 EAL BASES DOCUMENT Rev. 0 Page 121 of 272

ATTACHMENT 1 EAL Bases Category: C - Cold Shutdown / Refueling System Malfunction Subcategory: 1 - RCS Level Initiating Condition: Loss of RCS inventory EAL: CA1.1 Alert Loss of RCS inventory as indicated by RCS level 0.4 ft. (LI 10596) Mode Applicability: 5 - Cold Shutdown, 6 - Refueling NEI 99-01 Basis: This IC addresses conditions that are precursors to a loss of the ability to adequately cool irradiated fuel (i.e., a precursor to a challenge to the fuel clad barrier). This condition represents a potential substantial reduction in the level of plant safety. For this EAL, a lowering of RCS water level at or below 0.4 ft. indicates that operator actions have not been successful in restoring and maintaining RCS water level. The heat-up rate of the coolant will increase as the available water inventory is reduced. A continuing decrease in water level will lead to core uncovery. Although related, this EAL is concerned with the loss of RCS inventory and not the potential concurrent effects on systems needed for decay heat removal (e.g., loss of a Decay Heat Removal suction point). An increase in RCS temperature caused by a loss of decay heat removal capability is evaluated under IC CA3. If RCS water level continues to lower, then escalation to Site Area Emergency would be via IC CS1. DBNPS Basis: RCS level cannot be measured below the 571 feet elevation (0.4 feet on LI 10596) which is centerline of the hot leg inlet. Should RCS level drop below this point it is assumed water level cannot be monitored other than visually. Continued loss of RCS inventory may result in DHR pump cavitation (ref. 1). DBNPS Basis Reference(s):

1. DB-OP-02527 Loss of Decay Heat Removal
2. NEI 99-01 CA1 EAL BASES DOCUMENT Rev. 0 Page 122 of 272

ATTACHMENT 1 EAL Bases Category: C - Cold Shutdown / Refueling System Malfunction Subcategory: 1 - RCS Level Initiating Condition: Loss of RCS inventory EAL: CA1.2 Alert RCS level cannot be monitored for 15 min. (Note 1) AND EITHER

  • UNPLANNED increase in Containment Sumps, Auxiliary Building Sumps, BWST or RCDT due to a loss of RCS inventory
  • Visual observation of UNISOLABLE RCS leakage Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded.

Mode Applicability: 5 - Cold Shutdown, 6 - Refueling NEI 99-01 Basis: This IC addresses conditions that are precursors to a loss of the ability to adequately cool irradiated fuel (i.e., a precursor to a challenge to the fuel clad barrier). This condition represents a potential substantial reduction in the level of plant safety. For this EAL, the inability to monitor RCS level may be caused by instrumentation and/or power failures, or water level dropping below the range of available instrumentation. If water level cannot be monitored, operators may determine that an inventory loss is occurring by observing changes in sump and/or tank levels. Sump and/or tank level changes must be evaluated against other potential sources of water flow to ensure they are indicative of leakage from the RCS. The 15-minute duration for the loss of level indication was chosen because it is half of the EAL duration specified in IC CS1. If the RCS inventory level continues to lower, then escalation to Site Area Emergency would be via IC CS1. DBNPS Basis: In Cold Shutdown mode, the RCS will normally be intact and standard RCS level monitoring means are available. In the Refuel mode, the RCS is not intact and RCS level may be monitored by different means, including the ability to monitor level visually. EAL BASES DOCUMENT Rev. 0 Page 123 of 272

ATTACHMENT 1 EAL Bases RCS level in the Refueling mode is normally monitored using the following instruments:

  • LI 10596
  • LI10577 A and B
  • Clear tubing used for manometer level indication at the RCS cold legs.

RCS level indications (LI 10596, LI 10577A and B and cold leg tubing) provide accurate indication of water level when the RCS is at atmospheric pressure. The reactor vessel flange is at 577 ft. 7 in. (80 in. indicated) (ref. 1). In this EAL, all RCS water level indication would be unavailable for greater than 15-minutes, and the RCS inventory loss must be detected by indirect leakage indications (ref. 1). Sump and tank level increases must be evaluated against other potential sources of leakage. If the make-up rate to the RCS unexplainably rises above the pre-established rate, a loss of RCS inventory may be occurring even if the source of the leakage cannot be immediately identified. Visual observation of leakage from systems connected to the RCS that cannot be isolated, or a sump sample verified by Chemistry, could also be indicative of a loss of RCS inventory. DBNPS Basis Reference(s):

1. DB-OP-06904 Shutdown Operations
2. NEI 99-01 CA1 EAL BASES DOCUMENT Rev. 0 Page 124 of 272

ATTACHMENT 1 EAL Bases Category: C - Cold Shutdown / Refueling System Malfunction Subcategory: 1 - RCS Level Initiating Condition: UNPLANNED loss of RCS inventory for 15 minutes or longer EAL: CU1.1 Unusual Event UNPLANNED loss of reactor coolant results in RCS level less than a required lower limit for 15 min. (Note 1) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Mode Applicability: 5 - Cold Shutdown, 6 - Refueling NEI 99-01 Basis: This IC addresses the inability to restore and maintain water level to a required minimum level (or the lower limit of a level band), or a loss of the ability to monitor RCS level concurrent with indications of coolant leakage. Either of these conditions is considered to be a potential degradation of the level of safety of the plant. RCS draining evolutions that decrease RCS water inventory are carefully planned and controlled. An UNPLANNED event that results in water level decreasing below a procedurally required limit warrants the declaration of an Unusual Event due to the reduced water inventory that is available to keep the core covered. This EAL recognizes that the minimum required RCS level can change several times during the course of a refueling outage as different plant configurations and system lineups are implemented. This EAL is met if the minimum level, specified for the current plant conditions, cannot be maintained for 15 minutes or longer. The minimum level is typically specified in the applicable operating procedure but may be specified in another controlling document. The 15-minute threshold duration allows sufficient time for prompt operator actions to restore and maintain the expected water level. This criterion excludes transient conditions causing a brief lowering of water level. Continued loss of RCS inventory may result in escalation to the Alert emergency classification level via either IC CA1 or CA3. EAL BASES DOCUMENT Rev. 0 Page 125 of 272

ATTACHMENT 1 EAL Bases DBNPS Basis: With the plant in Cold Shutdown, RCS water level is normally maintained above a lower level band limit (ref. 1, 2), typically above the pressurizer low level setpoint. However, if RCS level is being controlled below the pressurizer low level setpoint, or if level is being maintained in a designated band in the reactor vessel it is the inability to maintain level above the low end of the designated control band due to a loss of inventory resulting from a leak in the RCS that is the concern. With the plant in Refueling mode, RCS water level is normally maintained at or above the reactor vessel flange, (Technical Specification LCO 3.9.6 requires at least 23 ft. of water above the top of the reactor vessel flange in the refueling canal when irradiated fuel is moved in containment). The reactor vessel flange is at 577 ft. 7 in. (80 in. indicated) (ref. 3, 4). In Cold Shutdown mode, the RCS will normally be intact and standard RCS level monitoring means are available. RCS level in the Refueling mode is normally monitored using the following instruments:

  • LI 10596
  • LI 10577 A and B
  • Clear tubing used for manometer level indication at the RCS cold legs.

RCS level indications (LI 10596, LI 10577A and B and cold leg tubing) provide accurate indication of water level when the RCS is at atmospheric pressure (ref. 3). DBNPS Basis Reference(s):

1. DB-OP-02513 Pressurizer System Abnormal Operation
2. DB-OP-02004 4-2-E PZR LVL LO
3. DB-OP-06904 Shutdown Operations
4. DBNPS Technical Specifications Section 3.9.6 Refueling Canal Water Level
5. DB-OP-02527 Loss of Decay Heat Removal
6. NEI 99-01 CU1 EAL BASES DOCUMENT Rev. 0 Page 126 of 272

ATTACHMENT 1 EAL Bases Category: C - Cold Shutdown / Refueling System Malfunction Subcategory: 1 - RCS Level Initiating Condition: UNPLANNED loss of RCS inventory for 15 minutes or longer EAL: CU1.2 Unusual Event RCS level cannot be monitored AND EITHER

  • UNPLANNED increase in Containment Sumps, Auxiliary Building Sumps, BWST or RCDT due to a loss of RCS inventory
  • Visual observation of UNISOLABLE RCS leakage Mode Applicability:

5 - Cold Shutdown, 6 - Refueling NEI 99-01 Basis: This IC addresses the inability to restore and maintain water level to a required minimum level (or the lower limit of a level band), or a loss of the ability to monitor RCS level concurrent with indications of coolant leakage. Either of these conditions is considered to be a potential degradation of the level of safety of the plant. RCS draining evolutions that decrease RCS water inventory are carefully planned and controlled. An UNPLANNED event that results in water level decreasing below a procedurally required limit warrants the declaration of an Unusual Event due to the reduced water inventory that is available to keep the core covered. This EAL addresses a condition where all means to determine RCS level have been lost. In this condition, operators may determine that an inventory loss is occurring by observing changes in sump and/or tank levels. Sump and/or tank level changes must be evaluated against other potential sources of water flow to ensure they are indicative of leakage from the RCS. Continued loss of RCS inventory may result in escalation to the Alert emergency classification level via either IC CA1 or CA3. EAL BASES DOCUMENT Rev. 0 Page 127 of 272

ATTACHMENT 1 EAL Bases DBNPS Basis: In Cold Shutdown mode, the RCS will normally be intact and standard RCS level monitoring means are available. RCS level in the Refueling mode is normally monitored using the following instruments:

  • LI 10596
  • LI10577 A and B
  • Clear tubing used for manometer level indication at the RCS cold legs.

RCS level indications (LI 10596, LI 10577A and B and cold leg tubing) provide accurate indication of water level when the RCS is at atmospheric pressure. The reactor vessel flange is at 577 ft. 7 in. (80 in. indicated) (ref. 1). In this EAL, all water level indication is unavailable and the RCS inventory loss must be detected by indirect leakage indications (ref. 1). Sump and tank level increases must be evaluated against other potential sources of leakage such as cooling water sources inside the containment to ensure they are indicative of RCS leakage. If the make-up rate to the RCS unexplainably rises above the pre-established rate, a loss of RCS inventory may be occurring even if the source of the leakage cannot be immediately identified. Visual observation of leakage from systems connected to the RCS that cannot be isolated, or a sump sample verified by Chemistry, could also be indicative of a loss of RCS inventory. DBNPS Basis Reference(s):

1. DB-OP-06904 Shutdown Operations
2. NEI 99-01 CU1 EAL BASES DOCUMENT Rev. 0 Page 128 of 272

ATTACHMENT 1 EAL Bases Category: C - Cold Shutdown / Refueling System Malfunction Subcategory: 2 - Loss of Essential AC Power Initiating Condition: Loss of ALL offsite and ALL onsite AC power to essential buses for 15 minutes or longer EAL: CA2.1 Alert Loss of ALL offsite and ALL onsite AC power capability, Table C-2, to essential 4160V buses C1 and D1 for 15 min. (Note 1) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Table C-2 Offsite/Onsite AC Power Sources Offsite:

  • X01
  • X02
  • X11 (back-fed via Main Transformer)

Onsite:

  • EDG1
  • EDG2
  • SBODG Mode Applicability:

5 - Cold Shutdown, 6 - Refueling, D - Defueled NEI 99-01 Basis: This IC addresses a total loss of AC power that compromises the performance of ALL SAFETY SYSTEMS requiring electric power including those necessary for emergency core cooling, containment heat removal/pressure control, spent fuel heat removal and the ultimate heat sink. When in the Cold Shutdown, Refueling, or Defueled mode, this condition is not classified as a Site Area Emergency because of the increased time available to restore an essential bus to service. Additional time is available due to the reduced core decay heat load, and the lower temperatures and pressures in various plant systems. Thus, when in these modes, this EAL BASES DOCUMENT Rev. 0 Page 129 of 272

ATTACHMENT 1 EAL Bases condition represents an actual or potential substantial degradation of the level of safety of the plant. Fifteen minutes was selected as a threshold to exclude transient or momentary power losses. Escalation of the emergency classification level would be via IC CS1 or RS1. DBNPS Basis: The 4160 VAC System provides the power requirements for operation and safe shutdown of the plant. The essential switchgear are buses C1 and D1 (ref. 1). The essential buses during plant operation are normally powered from the 13.8KV offsite power system through their respective 13.8KV/4160V bus tie transformers, via the Unit Auxiliary Transformer (X11). In cold operating modes, the essential buses may be back-fed via the X11 and Main Transformer provided the main generator lead disconnect links are removed (ref. 1, 2). Credit for the X11 back-feed can only be taken if already aligned, as it takes greater than 15 minutes to align. A standby source of offsite power to each 4160V essential bus is provided from the 13.8KV offsite power system via two separate and independent 13.8KV/4160V Startup Transformers (X01 & X02). Normally each startup transformer serves as a reserve power source for only one essential bus. However, a single startup transformer can be aligned to power both essential buses (ref. 1, 2). Each essential bus has a diesel generator (EDG1 & EDG2) to supply an onsite emergency source of power to safe shutdown loads in the event of a loss of the normal power source or loss of off-site power (ref. 1). An Alternate AC power source, the SBO Diesel Generator, is located onsite. This onsite AC power source can be started from the Control Room and be loaded within 10 minutes of a SBO (ref. 1). This cold condition EAL is equivalent to the hot condition loss of ALL offsite AC power EAL SS1.1. DBNPS Basis Reference(s):

1. UFSAR Section 8.0 Electric Power
2. DB-OP-02521 Loss of AC Bus Power Sources
3. NEI 99-01 CA2 EAL BASES DOCUMENT Rev. 0 Page 130 of 272

ATTACHMENT 1 EAL Bases Category: C - Cold Shutdown / Refueling System Malfunction Subcategory: 2 - Loss of Essential AC Power Initiating Condition: Loss of ALL but one AC power source to essential buses for 15 minutes or longer EAL: CU2.1 Unusual Event AC power capability, Table C-2, to essential 4160V buses C1 and D1 reduced to a single power source for 15 min. (Note 1) AND ANY additional single power source failure will result in loss of ALL AC power to SAFETY SYSTEMS Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Table C-2 Offsite/Onsite AC Power Sources Offsite:

  • X01
  • X02
  • X11 (back-fed via Main Transformer)

Onsite:

  • EDG1
  • EDG2
  • SBODG Mode Applicability:

5 - Cold Shutdown, 6 - Refueling, D - Defueled EAL BASES DOCUMENT Rev. 0 Page 131 of 272

ATTACHMENT 1 EAL Bases NEI 99-01 Basis: This IC describes a significant degradation of offsite and onsite AC power sources such that any additional single failure would result in a loss of ALL AC power to SAFETY SYSTEMS. In this condition, the sole AC power source may be powering one, or more than one, train of safety-related equipment. When in the Cold Shutdown, Refueling, or Defueled mode, this condition is not classified as an Alert because of the increased time available to restore another power source to service. Additional time is available due to the reduced core decay heat load, and the lower temperatures and pressures in various plant systems. Thus, when in these modes, this condition is considered to be a potential degradation of the level of safety of the plant. An AC power source is a source recognized in AOPs and EOPs, and capable of supplying required power to an essential bus. Some examples of this condition are presented below.

  • A loss of ALL offsite power with a concurrent failure of ALL but one essential power source (e.g., an onsite diesel generator)
  • A loss of essential power sources (e.g., onsite diesel generators) with a single train of essential buses being fed from an offsite power source Fifteen minutes was selected as a threshold to exclude transient or momentary losses of power.

The subsequent loss of the remaining single power source would escalate the event to an Alert in accordance with IC CA2. DBNPS Basis: The 4160 VAC System provides the power requirements for operation and safe shutdown of the plant. The essential switchgear are buses C1 and D1 (ref. 1). The essential buses during plant operation are normally powered from the 13.8KV offsite power system through their respective 13.8KV/4160V bus tie transformers, via the Unit Auxiliary Transformer (X11). In cold operating modes, the essential buses may be back-fed via the X11 and Main Transformer provided the main generator lead disconnect links are removed (ref. 1, 2). Credit for the X11 back-feed can only be taken if already aligned, as it takes greater than 15 minutes to align. A standby source of offsite power to each 4160V essential bus is provided from the 13.8KV offsite power system via two separate and independent 13.8KV/4160V Startup Transformers (X01 & X02). Normally each startup transformer serves as a reserve power source for only one essential bus. However, a single startup transformer can be aligned to power both essential buses (ref. 1, 2). Each essential bus has a diesel generator (EDG1 & EDG2) to supply an onsite emergency source of power to safe shutdown loads in the event of a loss of the normal power source or loss of off-site power (ref. 1). EAL BASES DOCUMENT Rev. 0 Page 132 of 272

ATTACHMENT 1 EAL Bases An Alternate AC power source, the SBO Diesel Generator, is located onsite. This onsite AC power source can be started from the Control Room and be loaded within 10 minutes of a SBO (ref. 1). This cold condition EAL is equivalent to the hot condition EAL SA1.1. DBNPS Basis Reference(s):

1. UFSAR Section 8.0 Electric Power
2. DB-OP-02521 Loss of AC Bus Power Sources
3. NEI 99-01 CU2 EAL BASES DOCUMENT Rev. 0 Page 133 of 272

ATTACHMENT 1 EAL Bases Category: C - Cold Shutdown / Refueling System Malfunction Subcategory: 3 - RCS Temperature Initiating Condition: Inability to maintain plant in cold shutdown EAL: CA3.1 Alert UNPLANNED increase in RCS temperature to > 200°F for > Table C-3 duration (Note 1, 10) OR UNPLANNED RCS pressure increase > 10 psig due to a loss of RCS cooling (This EAL does not apply during water-solid plant conditions). Note 1: The Emergency Director should declare the event promptly upon determining that the applicable time has been exceeded, or will likely be exceeded. Note: 10 In the absence of reliable RCS temperature indication caused by the loss of decay heat removal capability, classification should be based on the RCS pressure increase criteria when the RCS is intact in Mode 5 or based on time to boil data when in Mode 6 or the RCS is not intact in Mode 5. Table C-3: RCS Heat-up Duration Thresholds Containment Closure RCS Status Heat-up Duration Status Intact (but not reduced N/A 60 min.* inventory) Not intact established 20 min.* OR not established 0 min. At reduced inventory

  • If an RCS heat removal system is in operation within this time frame and RCS temperature is being reduced, the EAL is not applicable.

Mode Applicability: 5 - Cold Shutdown, 6 - Refueling NEI 99-01 Basis: This IC addresses conditions involving a loss of decay heat removal capability or an addition of heat to the RCS in excess of that which can currently be removed. Either condition represents an actual or potential substantial degradation of the level of safety of the plant. A momentary UNPLANNED excursion above the Technical Specification cold shutdown temperature limit when the heat removal function is available does not warrant a classification. EAL BASES DOCUMENT Rev. 0 Page 134 of 272

ATTACHMENT 1 EAL Bases The RCS Heat-up Duration Thresholds table addresses an increase in RCS temperature when CONTAINMENT CLOSURE is established but the RCS is not intact, or RCS inventory is reduced (e.g., mid-loop operation). The 20-minute criterion was included to allow time for operator action to address the temperature increase. The RCS Heat-up Duration Thresholds table also addresses an increase in RCS temperature with the RCS INTACT. The status of CONTAINMENT CLOSURE is not crucial in this condition since the intact RCS is providing a high pressure barrier to a fission product release. The 60-minute time frame should allow sufficient time to address the temperature increase without a substantial degradation in plant safety. Finally, in the case where there is an increase in RCS temperature, the RCS is not intact or is at reduced inventory, and CONTAINMENT CLOSURE is not established, no heat-up duration is allowed (i.e., 0 minutes). This is because 1) the evaporated reactor coolant may be released directly into the containment atmosphere and subsequently to the environment, and

2) there is reduced reactor coolant inventory above the top of irradiated fuel.

The RCS pressure increase threshold provides a pressure-based indication of RCS heat-up in the absence of RCS temperature monitoring capability. Escalation of the emergency classification level would be via IC CS1 or RS1. DBNPS Basis: In the absence of reliable RCS temperature indication caused by the loss of decay heat removal capability, classification should be based on the RCS pressure increase criteria when the RCS is intact in Mode 5 or based on time to boil data when in Mode 6 or the RCS is not intact in Mode 5. Several instruments are capable of providing indication of RCS temperature with respect to the Technical Specification cold shutdown temperature limit (200°F, ref. 1) including:

  • Selected Incore thermocouples
  • TIRC4B2 Reactor Coolant T-Cold Wide Range (Loop 1)
  • TIRC4A2 Reactor Coolant T-Cold Wide Range (Loop 2)
  • TIRC3B5 or TIRCB6 Reactor Coolant T-Hot (Loop 1)
  • TIRC3A5 or TIRCA6 Reactor Coolant T-Hot (Loop 2)
  • DHR Display on SPDS (ref. 2)

A 10 psig RCS pressure increase can be read on various instruments such as (ref. 2):

  • PI 6365B, Loop 1 Pressure EAL BASES DOCUMENT Rev. 0 Page 135 of 272

ATTACHMENT 1 EAL Bases

  • PI 6365A, Loop 2 Pressure
  • PRS RC2A1, Loop 2 Wide Range Pressure
  • PI RC2A6, Low Range Pressure The RCS is considered in reduced inventory if (ref. 3):
  • The Reactor Coolant System is not full (loops not filled and the RCS is incapable of natural circulation), OR
  • Both steam generators are not available as a heat sink, OR
  • The refueling canal level is less than a stable level specified in the Shutdown Defense in Depth Review, typically 23 feet, with the head removed.

DBNPS Basis Reference(s):

1. DBNPS Technical Specifications Table 1.1-1
2. DB-OP-02527 Loss of Decay Heat Removal
3. NG-DB-00117 Shutdown Defense In Depth Assessment
4. NEI 99-01 CA3 EAL BASES DOCUMENT Rev. 0 Page 136 of 272

ATTACHMENT 1 EAL Bases Category: C - Cold Shutdown / Refueling System Malfunction Subcategory: 3 - RCS Temperature Initiating Condition: UNPLANNED increase in RCS temperature EAL: CU3.1 Unusual Event UNPLANNED increase in RCS temperature to > 200°F due to loss of decay heat removal capability Mode Applicability: 5 - Cold Shutdown, 6 - Refueling NEI 99-01 Basis: This IC addresses an UNPLANNED increase in RCS temperature above the Technical Specification cold shutdown temperature limit and represents a potential degradation of the level of safety of the plant. If the RCS is not intact and CONTAINMENT CLOSURE is not established during this event, the Emergency Director should also refer to IC CA3. A momentary UNPLANNED excursion above the Technical Specification cold shutdown temperature limit when the heat removal function is available does not warrant a classification. This EAL involves a loss of decay heat removal capability, or an addition of heat to the RCS in excess of that which can currently be removed, such that reactor coolant temperature cannot be maintained below the cold shutdown temperature limit specified in Technical Specifications. During this condition, there is no immediate threat of fuel damage because the core decay heat load has been reduced since the cessation of power operation. During an outage, the level in the reactor vessel will normally be maintained at or above the reactor vessel flange. Refueling evolutions that lower water level below the reactor vessel flange are carefully planned and controlled. A loss of forced decay heat removal at reduced inventory may result in a rapid increase in reactor coolant temperature depending on the time after shutdown. Escalation to Alert would be via IC CA1 based on an inventory loss or IC CA3 based on exceeding plant configuration-specific time criteria. DBNPS Basis: Several instruments are capable of providing indication of RCS temperature with respect to the Technical Specification cold shutdown temperature limit (200°F, ref. 1) including:

  • Selected Incore thermocouples EAL BASES DOCUMENT Rev. 0 Page 137 of 272

ATTACHMENT 1 EAL Bases

  • TIRC4B2 Reactor Coolant T-Cold Wide Range (Loop 1)
  • TIRC4A2 Reactor Coolant T-Cold Wide Range (Loop 2)
  • TIRC3B5 or TIRCB6 Reactor Coolant T-Hot (Loop 1)
  • TIRC3A5 or TIRCA6 Reactor Coolant T-Hot (Loop 2)
  • DHR Display on SPDS (ref. 2)

In the absence of reliable RCS temperature indication caused by a loss of decay heat removal capability, classification should be based on EAL CU3.2 should RCS level indication be subsequently lost. DBNPS Basis Reference(s):

1. DBNPS Technical Specifications Table 1.1-1 Modes
2. DB-OP-02527 Loss of Decay Heat Removal
3. NEI 99-01 CU3 EAL BASES DOCUMENT Rev. 0 Page 138 of 272

ATTACHMENT 1 EAL Bases Category: C - Cold Shutdown / Refueling System Malfunction Subcategory: 3 - RCS Temperature Initiating Condition: UNPLANNED increase in RCS temperature EAL: CU3.2 Unusual Event Loss of ALL RCS temperature and RCS level indication for 15 min. (Note 1) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Mode Applicability: 5 - Cold Shutdown, 6- Refueling NEI 99-01 Basis: This EAL addresses the inability to determine RCS temperature and level, and represents a potential degradation of the level of safety of the plant. If the RCS is not intact and CONTAINMENT CLOSURE is not established during this event, the Emergency Director should also refer to IC CA3. This EAL reflects a condition where there has been a significant loss of instrumentation capability necessary to monitor RCS conditions and operators would be unable to monitor key parameters necessary to assure core decay heat removal. During this condition, there is no immediate threat of fuel damage because the core decay heat load has been reduced since the cessation of power operation. Fifteen minutes was selected as a threshold to exclude transient or momentary losses of indication. Escalation to Alert would be via IC CA1 based on an inventory loss or IC CA3 based on exceeding plant configuration-specific time criteria. DBNPS Basis: Several instruments are capable of providing indication of RCS temperature with respect to the Technical Specification cold shutdown temperature limit (200°F, ref. 1) including:

  • Selected Incore thermocouples
  • TIRC4B2 Reactor Coolant T-Cold Wide Range (Loop 1)
  • TIRC4A2 Reactor Coolant T-Cold Wide Range (Loop 2)
  • TIRC3B5 or TIRCB6 Reactor Coolant T-Hot (Loop 1)

EAL BASES DOCUMENT Rev. 0 Page 139 of 272

ATTACHMENT 1 EAL Bases

  • TIRC3A5 or TIRCA6 Reactor Coolant T-Hot (Loop 2)
  • DHR Display on SPDS (ref. 2)

In Cold Shutdown mode, the RCS will normally be intact and standard RCS level monitoring means are available. In the Refueling mode, the RCS is not intact and RCS level may be monitored by different means, including the ability to monitor level visually. RCS level in the Refueling mode is normally monitored using the following instruments:

  • LI 10596
  • LI10577 A and B
  • Clear tubing used for manometer level indication at the RCS cold legs.

RCS level indications (LI 10596, LI 10577A and B and cold leg tubing) provide accurate indication of water level when the RCS is at atmospheric pressure. However, there is no redundant means of RCS level indication when Mode 6 is entered (ref. 2). DBNPS Basis Reference(s):

1. DBNPS Technical Specifications Table 1.1-1
2. DB-OP-02527 Loss of Decay Heat Removal
3. NEI 99-01 CU3 EAL BASES DOCUMENT Rev. 0 Page 140 of 272

ATTACHMENT 1 EAL Bases Category: C - Cold Shutdown / Refueling System Malfunction Subcategory: 4 - Loss of Essential DC Power Initiating Condition: Loss of essential DC power for 15 minutes or longer EAL: CU4.1 Unusual Event < 105 VDC voltage indications on Technical Specification required essential 125 VDC distribution panels for 15 min. (Note 1) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Mode Applicability: 5 - Cold Shutdown, 6 - Refueling NEI 99-01 Basis This IC addresses a loss of essential DC power, which compromises the ability to monitor and control operable SAFETY SYSTEMS when the plant is in the Cold Shutdown or Refueling mode. In these modes, the core decay heat load has been significantly reduced, and coolant system temperatures and pressures are lower; these conditions increase the time available to restore an essential DC bus to service. Thus, this condition is considered to be a potential degradation of the level of safety of the plant. As used in this EAL, required means the essential DC buses necessary to support operation of the in-service, or operable, train or trains of SAFETY SYSTEM equipment. For example, if Train A is out-of-service (inoperable) for scheduled outage maintenance work and Train B is in-service (operable), then a loss of essential DC power affecting Train B would require the declaration of an Unusual Event. A loss of essential DC power to Train A would not warrant an emergency classification. Fifteen minutes was selected as a threshold to exclude transient or momentary power losses. Depending upon the event, escalation of the emergency classification level would be via IC CA1 or CA3, or an IC in Recognition Category R. DBNPS Basis: The DC electrical distribution subsystem consists of two trains, designated Train 1 and Train

2. Each train consists of a 250/125 VDC motor control center (MCC), and each 250/125 VDC MCC consists of two 125 VDC buses (one positive and one negative) that can be powered from a polarity specific battery or battery charger. The two DC buses then supply a specific Essential DC Distribution Panel (D1P and D1N for DCMCC 1, and D2P and D2N for DCMCC2). The four Essential DC Distribution Panels independently supply DC electrical EAL BASES DOCUMENT Rev. 0 Page 141 of 272

ATTACHMENT 1 EAL Bases power to the four inverters, which in turn power the 120 VAC essential buses (ref. 1, 2, 3, 4, 5, 6). The Class 1E DC loads have an operating voltage range of 105 to 135 volts. The minimum battery discharge voltage (requiring opening the degraded battery output breaker) is 105 VDC (ref. 1, 6). This EAL is the cold condition equivalent of the hot condition loss of DC power EAL SS2.1. DBNPS Basis Reference(s):

1. DBNPS UFSAR Section 8.0 Electrical Power
2. DB-OP-02537 Loss of D1P and DAP
3. DB-OP-02538 Loss of D2P and DBP
4. DB-OP-02539 Loss of D1N and DAN
5. DB-OP-02540 Loss of D2N and DBN
6. System Description for 125/250 VDC and 120 V Instrumentation AC System
7. NEI 99-01 CU4 EAL BASES DOCUMENT Rev. 0 Page 142 of 272

ATTACHMENT 1 EAL Bases Category: C - Cold Shutdown / Refueling System Malfunction Subcategory: 5 - Loss of Communications Initiating Condition: Loss of ALL onsite or offsite communications capabilities EAL: CU5.1 Unusual Event Loss of ALL Table C-4 onsite communication methods Table C-4 Communication Methods System Onsite ORO NRC Public Address (Gaitronics) X Onsite Radios X Plant Telephones X X X Commercial Telephones X X X 4-Way Ringdown Circuit X Satellite Phones X X Cellular Phones X X NRC Emergency Telephone System (ETS) X Mode Applicability: 5 - Cold Shutdown, 6 - Refueling, D - Defueled NEI 99-01 Basis: This IC addresses a significant loss of on-site or offsite communications capabilities. While not a direct challenge to plant or personnel safety, this event warrants prompt notifications to OROs and the NRC. This IC should be assessed only when extraordinary means are being utilized to make communications possible (e.g., use of non-plant, privately owned equipment, relaying of on-site information via individuals or multiple radio transmission points, individuals being sent to offsite locations, etc.). EAL BASES DOCUMENT Rev. 0 Page 143 of 272

ATTACHMENT 1 EAL Bases This EAL addresses a total loss of the communications methods used in support of routine plant operations. DBNPS Basis: Onsite/Offsite Response Organization (ORO)/NRC communications include one or more of the systems listed in Table C-4 (ref. 1, 2). Public Address (Gaitronics) System The DBNPS public address system provides paging and party line communications between stations located throughout the plant. Inside and outside type wall and desk-mounted stations are used to communicate between roaming personnel and fixed work locations. Plant-wide instructions are issued using the paging feature. On-site Radio System Radio systems can be used for communication among operators, off-site monitoring teams, the control room, security, TSC and EOF. Plant Telephone System The DBNPS plant telephone system provides communication capability between telephone stations located within the plant by dialing the four-digit telephone station code as well as external or offsite calling capability. Commercial Telephones Commercial telephone lines, which supply public telephone communications, are employed by DBNPS. The local service provider provides primary and secondary power for their lines at the Central Office. 4-Way Ringdown Circuit Dedicated ring down line that includes the State and County EOCs, the Ohio Highway Patrol Office, the Lucas County and Ottawa County Sheriff's dispatcher offices, the Emergency Operations Facility, and the Control Room. Satellite Phones Portable satellite telephones are available which enable communication when all other phone systems are inoperable, e.g. following a major external event. Internal batteries, external DC sources as well as external AC sources can power these portable systems. EAL BASES DOCUMENT Rev. 0 Page 144 of 272

ATTACHMENT 1 EAL Bases Cellular Phones Cellular phones may be used during emergencies if other communications means are not readily available or are inoperable. These phones are not expected to be used in the Control Room or Power Block due to interference with plant equipment and loss of signal to the phone. NRC Emergency Telephone System The NRC uses a DBNPS dedicated telephone line, which allows direct telephone communications from the plant to NRC regional and national offices. The DBNPS communications line provides a link independent of the local public telephone network. Telephones connected to this network are located in the DBNPS Control Room, Technical Support Center, and Emergency Operations Facility and can be used to establish NRC Emergency Notification System (ENS) and Health Physics Network (HPN) capability. This EAL is the cold condition equivalent of the hot condition EAL SU7.1. DBNPS Basis Reference(s):

1. DBNPS UFSAR Section 9.5.2 Communications Systems
2. DBNPS Emergency Plan 7.6 Communications Systems
3. NEI 99-01 CU5 EAL BASES DOCUMENT Rev. 0 Page 145 of 272

ATTACHMENT 1 EAL Bases Category: C - Cold Shutdown / Refueling System Malfunction Subcategory: 5 - Loss of Communications Initiating Condition: Loss of ALL onsite or offsite communications capabilities EAL: CU5.2 Unusual Event Loss of ALL Table C-4 ORO communication methods Table C-4 Communication Methods System Onsite ORO NRC Public Address (Gaitronics) X Onsite Radios X Plant Telephones X X X Commercial Telephones X X X 4-Way Ringdown Circuit X Satellite Phones X X Cellular Phones X X NRC Emergency Telephone System (ETS) X Mode Applicability: 5 - Cold Shutdown, 6 - Refueling, D - Defueled NEI 99-01 Basis: This IC addresses a significant loss of on-site or offsite communications capabilities. While not a direct challenge to plant or personnel safety, this event warrants prompt notifications to OROs and the NRC. This IC should be assessed only when extraordinary means are being utilized to make communications possible (e.g., use of non-plant, privately owned equipment, relaying of on-site information via individuals or multiple radio transmission points, individuals being sent to offsite locations, etc.). EAL BASES DOCUMENT Rev. 0 Page 146 of 272

ATTACHMENT 1 EAL Bases This EAL addresses a total loss of the communications methods used to notify all OROs of an emergency declaration. The OROs referred to here are the State, Lucas and Ottawa County EOCs. DBNPS Basis: Onsite/Offsite Response Organization (ORO)/NRC communications include one or more of the systems listed in Table C-4 (ref. 1, 2). Public Address (Gaitronics) System The DBNPS public address system provides paging and party line communications between stations located throughout the plant. Inside and outside type wall and desk-mounted stations are used to communicate between roaming personnel and fixed work locations. Plant-wide instructions are issued using the paging feature. On-site Radio System Radio systems can be used for communication among operators, off-site monitoring teams, the control room, security, TSC and EOF. Plant Telephone System The DBNPS plant telephone system provides communication capability between telephone stations located within the plant by dialing the four-digit telephone station code as well as external or offsite calling capability. Commercial Telephones Commercial telephone lines, which supply public telephone communications, are employed by DBNPS. The local service provider provides primary and secondary power for their lines at the Central Office. 4-Way Ringdown Circuit Dedicated ring down line that includes the State and County EOCs, the Ohio Highway Patrol Office, the Lucas County and Ottawa County Sheriff's dispatcher offices, the Emergency Operations Facility, and the Control Room. Satellite Phones Portable satellite telephones are available which enable communication when all other phone systems are inoperable, e.g. following a major external event. Internal batteries, external DC sources as well as external AC sources can power these portable systems. EAL BASES DOCUMENT Rev. 0 Page 147 of 272

ATTACHMENT 1 EAL Bases Cellular Phones Cellular phones may be used during emergencies if other communications means are not readily available or are inoperable. These phones are not expected to be used in the Control Room or Power Block due to interference with plant equipment and loss of signal to the phone. NRC Emergency Telephone System The NRC uses a DBNPS dedicated telephone line, which allows direct telephone communications from the plant to NRC regional and national offices. The DBNPS communications line provides a link independent of the local public telephone network. Telephones connected to this network are located in the DBNPS Control Room, Technical Support Center, and Emergency Operations Facility and can be used to establish NRC Emergency Notification System (ENS) and Health Physics Network (HPN) capability. This EAL is the cold condition equivalent of the hot condition EAL SU7.2. DBNPS Basis Reference(s):

1. DBNPS UFSAR Section 9.5.2 Communications Systems
2. DBNPS Emergency Plan 7.6 Communications Systems
3. NEI 99-01 CU5 EAL BASES DOCUMENT Rev. 0 Page 148 of 272

ATTACHMENT 1 EAL Bases Category: C - Cold Shutdown / Refueling System Malfunction Subcategory: 5 - Loss of Communications Initiating Condition: Loss of ALL onsite or offsite communications capabilities EAL: CU5.3 Unusual Event Loss of ALL Table C-4 NRC communication methods Table C-4 Communication Methods System Onsite ORO NRC Public Address (Gaitronics) X Onsite Radios X Plant Telephones X X X Commercial Telephones X X X 4-Way Ringdown Circuit X Satellite Phones X X Cellular Phones X X NRC Emergency Telephone System (ETS) X Mode Applicability: 5 - Cold Shutdown, 6 - Refueling, D - Defueled NEI 99-01 Basis: This IC addresses a significant loss of on-site or offsite communications capabilities. While not a direct challenge to plant or personnel safety, this event warrants prompt notifications to OROs and the NRC. This IC should be assessed only when extraordinary means are being utilized to make communications possible (e.g., use of non-plant, privately owned equipment, relaying of on-site information via individuals or multiple radio transmission points, individuals being sent to offsite locations, etc.). EAL BASES DOCUMENT Rev. 0 Page 149 of 272

ATTACHMENT 1 EAL Bases This EAL addresses a total loss of the communications methods used to notify the NRC of an emergency declaration. DBNPS Basis: Onsite/Offsite Response Organization (ORO)/NRC communications include one or more of the systems listed in Table C-4 (ref. 1, 2). Public Address (Gaitronics) System The DBNPS public address system provides paging and party line communications between stations located throughout the plant. Inside and outside type wall and desk-mounted stations are used to communicate between roaming personnel and fixed work locations. Plant-wide instructions are issued using the paging feature. On-site Radio System Radio systems can be used for communication among operators, off-site monitoring teams, the control room, security, TSC and EOF. Plant Telephone System The DBNPS plant telephone system provides communication capability between telephone stations located within the plant by dialing the four-digit telephone station code as well as external or offsite calling capability. Commercial Telephones Commercial telephone lines, which supply public telephone communications, are employed by DBNPS. The local service provider provides primary and secondary power for their lines at the Central Office. 4-Way Ringdown Circuit Dedicated ring down line that includes the State and County EOCs, the Ohio Highway Patrol Office, the Lucas County and Ottawa County Sheriff's dispatcher offices, the Emergency Operations Facility, and the Control Room. Satellite Phones Portable satellite telephones are available which enable communication when all other phone systems are inoperable, e.g. following a major external event. Internal batteries, external DC sources as well as external AC sources can power these portable systems. EAL BASES DOCUMENT Rev. 0 Page 150 of 272

ATTACHMENT 1 EAL Bases Cellular Phones Cellular phones may be used during emergencies if other communications means are not readily available or are inoperable. These phones are not expected to be used in the Control Room or Power Block due to interference with plant equipment and loss of signal to the phone. NRC Emergency Telephone System The NRC uses a DBNPS dedicated telephone line, which allows direct telephone communications from the plant to NRC regional and national offices. The DBNPS communications line provides a link independent of the local public telephone network. Telephones connected to this network are located in the DBNPS Control Room, Technical Support Center, and Emergency Operations Facility and can be used to establish NRC Emergency Notification System (ENS) and Health Physics Network (HPN) capability. This EAL is the cold condition equivalent of the hot condition EAL SU7.3. DBNPS Basis Reference(s):

1. DBNPS UFSAR Section 9.5.2 Communications Systems
2. DBNPS Emergency Plan 7.6 Communications Systems
3. NEI 99-01 CU5 EAL BASES DOCUMENT Rev. 0 Page 151 of 272

ATTACHMENT 1 EAL Bases Category: C - Cold Shutdown / Refueling System Malfunction Subcategory: 6 - Hazardous Event Affecting SAFETY SYSTEMS Initiating Condition: Hazardous event affecting a SAFETY SYSTEM needed for the current operating mode EAL: CA6.1 Alert The occurrence of ANY Table C-5 Hazardous Event AND EITHER: z Event has caused indications of degraded performance in at least one train of a SAFETY SYSTEM required for the current operating mode z The event has caused VISIBLE DAMAGE to a SAFETY SYSTEM component or structure required for the current operating mode Table C-5 Hazardous Events z Seismic event (earthquake) z Internal or external FLOODING event z High winds or tornado strike z FIRE z EXPLOSION z Other events with similar hazard characteristics as determined by the Emergency Director Mode Applicability: 5 - Cold Shutdown, 6 - Refueling NEI 99-01 Basis: This IC addresses a hazardous event that causes damage to a SAFETY SYSTEM, or a structure containing SAFETY SYSTEM components, needed for the current operating mode. This condition significantly reduces the margin to a loss or potential loss of a fission product barrier, and therefore represents an actual or potential substantial degradation of the level of safety of the plant. EAL BASES DOCUMENT Rev. 0 Page 152 of 272

ATTACHMENT 1 EAL Bases The first conditional addresses damage to a SAFETY SYSTEM train that is in service/operation since indications for it will be readily available. The indications of degraded performance should be significant enough to cause concern regarding the operability or reliability of the SAFETY SYSTEM train. The second conditional addresses damage to a SAFETY SYSTEM component that is not in service/operation or readily apparent through indications alone, or to a structure containing SAFETY SYSTEM components. Operators will make this determination based on the totality of available event and damage report information. This is intended to be a brief assessment not requiring lengthy analysis or quantification of the damage. Escalation of the emergency classification level would be via IC CS1 or RS1. DBNPS Basis:

  • Ground motion acceleration of 0.08g horizontal or 0.053g vertical is the Maximum Probable Earthquake as is considered generically as the Operating Basis Earthquake for DBNPS (ref. 8). Control room alarm indication of an earthquake greater than OBE is indicated on the seismic control panel (C5764A). RA-EP-02820 Earthquake provides the guidance for determining any required response actions if the OBE earthquake threshold is exceeded (ref. 1). The significance of seismic events is discussed under EAL HU2.1.
  • Internal FLOODING occurs from breaches of water systems that are located inside plant buildings and are connected to large water sources such as Intake Forebay or tanks (ref.

2).

  • External FLOODING may be due to high lake level. DBNPS flood emergency elevation is 578 ft. Site access would be limited to rail, boat or helicopter (ref. 3).
  • Seismic Category I structures are analyzed to withstand a sustained, design wind velocity of at least 90 mph. (ref. 4).
  • Areas containing functions and systems required for safe shutdown of the plant are identified by fire area in the fire abnormal procedure (ref. 5).
  • An EXPLOSION that degrades the performance of a SAFETY SYSTEM train or visibly damages a SAFETY SYSTEM component or structure would be classified under this EAL (ref. 6).

DBNPS Basis Reference(s):

1. RA-EP-02820 Earthquake
2. RA-EP-02880 Internal Flooding
3. RA-EP-02830 Flooding
4. DBNPS UFSAR Section 3.3.1 Wind Criteria
5. DB-OP-02501 Serious Station Fire
6. RA-EP-02840 Explosion EAL BASES DOCUMENT Rev. 0 Page 153 of 272

ATTACHMENT 1 EAL Bases

7. NEI 99-01 CA6
8. Updated FSAR Section 3.1 Seismic Design EAL BASES DOCUMENT Rev. 0 Page 154 of 272

ATTACHMENT 1 EAL Bases Category S - System Malfunction EAL Group: Hot Conditions (RCS temperature > 200ºF); EALs in this category are applicable only in one or more hot operating modes. Numerous system-related equipment failure events that warrant emergency classification have been identified in this category. They may pose actual or potential threats to plant safety. The events of this category pertain to the following subcategories:

1. Loss of Essential AC Power Loss of emergency electrical power can compromise plant SAFETY SYSTEM operability including decay heat removal and emergency core cooling systems, which may be necessary to ensure fission product barrier integrity. This category includes loss of onsite and offsite sources for 4160 V essential buses.
2. Loss of Essential DC Power Loss of emergency electrical power can compromise plant SAFETY SYSTEM operability including decay heat removal and emergency core cooling systems, which may be necessary to ensure fission product barrier integrity. This category includes loss of essential plant 125 VDC power sources.
3. Loss of Control Room Indications Certain events that degrade plant operators ability to assess plant conditions within the plant warrant emergency classification. Losses of indicators are in this subcategory.
4. RCS Activity During normal operation, reactor coolant fission product activity is very low. Small concentrations of fission products in the coolant are primarily from the fission of tramp uranium in the fuel clad or minor perforations in the clad itself. Any significant increase from these base-line levels (2% - 5% clad failures) is indicative of fuel failures and is covered under the Fission Product Barrier Degradation category. However, lesser amounts of clad damage may result in coolant activity exceeding Technical Specification limits. These fission products will be circulated with the reactor coolant and can be detected by coolant sampling.
5. RCS Leakage The reactor vessel provides a volume for the coolant that covers the reactor core. The reactor pressure vessel and associated pressure piping (reactor coolant system) together provide a barrier to limit the release of radioactive material should the reactor fuel clad EAL BASES DOCUMENT Rev. 0 Page 155 of 272

ATTACHMENT 1 EAL Bases integrity fail. Excessive RCS leakage greater than Technical Specification limits indicates potential pipe cracks that may propagate to an extent threatening fuel clad, RCS and containment integrity.

6. RPS Failure This subcategory includes events related to failure of the Reactor Protection System (RPS) to initiate and complete reactor trips. In the plant licensing basis, postulated failures of the RPS to complete a reactor trip comprise a specific set of analyzed events referred to as Anticipated Transient Without Scram (ATWS) events. For EAL classification, however, ATWS is intended to mean ANY trip failure event that does not achieve reactor shutdown.

If RPS actuation fails to assure reactor shutdown, positive control of reactivity is at risk and could cause a threat to fuel clad, RCS and containment integrity.

7. Loss of Communications Certain events that degrade plant operators ability to communicate with essential personnel within or external to the plant warrant emergency classification.
8. Containment Failure Failure of containment isolation capability (under conditions in which the containment is not currently challenged) warrants emergency classification. Failure of containment pressure control capability also warrants emergency classification.
9. Hazardous Event Affecting SAFETY SYSTEMS Various natural and technological events that result in degraded plant SAFETY SYSTEM performance or significant visible damage warrant emergency classification under this subcategory.

EAL BASES DOCUMENT Rev. 0 Page 156 of 272

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 1 - Loss of Essential AC Power Initiating Condition: Prolonged loss of ALL offsite and ALL onsite AC power to essential buses EAL: SG1.1 General Emergency Loss of ALL offsite and ALL onsite AC power capability, Table S-1, to essential 4160V buses C1 and D1 AND EITHER:

  • Restoration of at least one essential bus in < 4 hours is not likely (Note 1)
  • Calculated Clad Temperature in Region 3 (DB-OP-02000 Figure 2)

Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Table S-1 Offsite/Onsite AC Power Sources Offsite:

  • X11
  • X11 (back-fed via Main Transformer)
  • X01
  • X02 Onsite:
  • EDG1
  • EDG2
  • SBODG Mode Applicability:

1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown NEI 99-01 Basis: This IC addresses a prolonged loss of ALL power sources to AC essential buses. A loss of ALL AC power compromises the performance of ALL SAFETY SYSTEMS requiring electric power including those necessary for emergency core cooling, containment heat removal/pressure control, spent fuel heat removal and the ultimate heat sink. A prolonged EAL BASES DOCUMENT Rev. 0 Page 157 of 272

ATTACHMENT 1 EAL Bases loss of these buses will lead to a loss of one or more fission product barriers. In addition, fission product barrier monitoring capabilities may be degraded under these conditions. The EAL should require declaration of a General Emergency prior to meeting the thresholds for IC FG1. This will allow additional time for implementation of offsite protective actions. Escalation of the emergency classification from Site Area Emergency will occur if it is projected that power cannot be restored to at least one AC essential bus by the end of the analyzed station blackout coping period. Beyond this time, plant responses and event trajectory are subject to greater uncertainty, and there is an increased likelihood of challenges to multiple fission product barriers. The estimate for restoring at least one essential bus should be based on a realistic appraisal of the situation. Mitigation actions with a low probability of success should not be used as a basis for delaying a classification upgrade. The goal is to maximize the time available to prepare for, and implement, protective actions for the public. The EAL will also require a General Emergency declaration if the loss of AC power results in parameters that indicate an inability to adequately remove decay heat from the core. DBNPS Basis: This EAL is indicated by the extended loss of ALL offsite and onsite AC power capability to 4160V essential buses C1 and D1 either for greater than 4 hours or that has resulted in indications of an actual loss of adequate core cooling. Indication of continuing core cooling degradation is manifested by Calculated Clad Temperature in Region 3 (DB-OP-02000 Figure 2) (ref. 3). The 4160 VAC System provides the power requirements for operation and safe shutdown of the plant. The essential switchgear are buses C1 and D1 (ref. 1). The essential buses during plant operation are normally powered from the 13.8KV offsite power system through their respective 13.8KV/4160V bus tie transformers, via the Unit Auxiliary Transformer (X11). In non-power operating modes, the essential buses may be back-fed via the X11 and Main Transformer provided the main generator lead disconnect links are removed (ref. 1, 2). A standby source of offsite power to each 4160V essential bus is provided from the 13.8KV offsite power system via two separate and independent 13.8KV/4160V Startup Transformers (X01 & X02). Normally each startup transformer serves as a reserve power source for only one essential bus. However, a single startup transformer can be aligned to power both essential buses (ref. 1, 2). Each essential bus has a diesel generator (EDG1 & EDG2) to supply an onsite emergency source of power to safe shutdown loads in the event of a loss of the normal power source or loss of off-site power (ref. 1). EAL BASES DOCUMENT Rev. 0 Page 158 of 272

ATTACHMENT 1 EAL Bases An Alternate AC power source, the Station Black Out (SBO) Diesel Generator, is located onsite. This onsite AC power source can be started from the Control Room and be loaded within 10 minutes of a SBO (ref. 1). The SBODG fuel oil supply is separate from fuel oil supply for the station's EDGs. The SBODG fuel oil supply tank capacity is based on an eight-hour supply with the SBODG at rated load. A minimum supply of four hours must be stored in this tank to meet the site's station blackout duration analysis conditions (ref 1). Indication of continuing core cooling degradation must be based on fission product barrier monitoring with particular emphasis on Emergency Director judgment as it relates to IMMINENT Loss or Potential Loss of fission product barriers and degraded ability to monitor fission product barriers. Indication of continuing core cooling degradation is manifested by Calculated Clad Temperature in Region 3 (DB-OP-02000 Figure 2). Figure 2, Incore T/C Temperature vs. RCS Pressure for ICC, provides indication of how serious core conditions are based upon combinations of RCS pressure and incore thermocouple temperatures. If the RCS P-T point is in Region 3, the cladding temperatures in the high power regions of the Core may be 1400ºF or higher. This is a serious condition, which could lead to significant amounts of H2 production; Core damage may be unavoidable (ref. 3, 4). DBNPS Basis Reference(s):

1. UFSAR Section 8.0 Electric Power
2. DB-OP-02521 Loss of AC Bus Power Sources
3. DB-OP-02000 Figure 2, Incore T/C Temperature vs. RC Pressure for Inadequate Core Cooling
4. Bases and Deviation Document for DB-OP-02000
5. NEI 99-01 SG1 EAL BASES DOCUMENT Rev. 0 Page 159 of 272

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 1 - Loss of Essential AC Power Initiating Condition: Loss of ALL essential AC and DC power sources for 15 minutes or longer EAL: SG1.2 General Emergency Loss of ALL offsite and ALL onsite AC power capability, Table S-1, to essential 4160V buses C1 and D1 for 15 min. AND Loss of ALL 125 VDC power based on battery bus voltage indications < 105 VDC on ALL essential DC distribution panels D1P, D1N, D2P and D2N for 15 min. (Note 1) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Table S-1 Offsite/Onsite AC Power Sources Offsite:

  • X11
  • X11 (back-fed via Main Transformer)
  • X01
  • X02 Onsite:
  • EDG1
  • EDG2
  • SBODG Mode Applicability:

1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown EAL BASES DOCUMENT Rev. 0 Page 160 of 272

ATTACHMENT 1 EAL Bases NEI 99-01 Basis: This IC addresses a concurrent and prolonged loss of both essential AC AND DC power. A loss of ALL essential AC power compromises the performance of ALL SAFETY SYSTEMS requiring electric power including those necessary for emergency core cooling, containment heat removal/pressure control, spent fuel heat removal and the ultimate heat sink. A loss of essential DC power compromises the ability to monitor and control SAFETY SYSTEMS. A sustained loss of both AC and DC power will lead to multiple challenges to fission product barriers. Fifteen minutes was selected as a threshold to exclude transient or momentary power losses. The 15-minute emergency declaration clock begins at the point when both EAL thresholds are met. DBNPS Basis: This EAL is indicated by the loss of ALL offsite and onsite essential AC power capability to 4160V essential buses C1 and D1 for greater than 15 minutes in combination with degraded DC power voltage. This EAL addresses operating experience from the March 2011 accident at Fukushima Daiichi. The 4160 VAC System provides the power requirements for operation and safe shutdown of the plant. The essential switchgear are buses C1 and D1 (ref. 1). The essential buses during plant operation are normally powered from the 13.8KV offsite power system through their respective 13.8KV/4160V bus tie transformers, via the Unit Auxiliary Transformer (X11). In non-power operating modes, the essential buses may be back-fed via the X11 and Main Transformer provided the main generator lead disconnect links are removed (ref. 1, 2). Credit for the X11 back-feed can only be taken if already aligned, as it takes greater than 15 minutes to align. A standby source of offsite power to each 4160V essential bus is provided from the 13.8KV offsite power system via two separate and independent 13.8KV/4160V Startup Transformers (X01 & X02). Normally each startup transformer serves as a reserve power source for only one essential bus. However, a single startup transformer can be aligned to power both essential buses (ref. 1, 2). Each essential bus has a diesel generator (EDG1 & EDG2) to supply an onsite emergency source of power to safe shutdown loads in the event of a loss of the normal power source or loss of off-site power (ref. 1). An Alternate AC power source, the Station Black Out (SBO) Diesel Generator, is located onsite. This onsite AC power source can be started from the Control Room and be loaded within 10 minutes of a SBO (ref. 1). The DC electrical distribution subsystem consists of two trains, designated Train 1 and Train

2. Each train consists of a 250/125 VDC motor control center (MCC), and each 250/125 VDC MCC consists of two 125 VDC buses (one positive and one negative) that can be powered EAL BASES DOCUMENT Rev. 0 Page 161 of 272

ATTACHMENT 1 EAL Bases from a polarity specific battery or battery charger. The two DC buses then supply a specific Essential DC Distribution Panel (D1P and D1N for DCMCC 1, and D2P and D2N for DCMCC 2). The four Essential DC Distribution Panels independently supply DC electrical power to the four inverters, which in turn power the 120 VAC essential buses (ref. 1, 3, 4, 5, 6, 7). The Class 1E DC loads have an operating voltage range of 105 to 135 volts. The minimum battery discharge voltage (requiring opening the degraded battery output breaker) is 105 VDC (ref. 1, 7). DBNPS Basis Reference(s):

1. UFSAR Section 8.0 Electric Power
2. DB-OP-02521 Loss of AC Bus Power Sources
3. DB-OP-02537 Loss of D1P and DAP
4. DB-OP-02538 Loss of D2P and DBP
5. DB-OP-02539 Loss of D1N and DAN
6. DB-OP-02540 Loss of D2N and DBN
7. System Description for 125/250 VDC and 120 V Instrumentation AC System
8. NEI 99-01 SG8 EAL BASES DOCUMENT Rev. 0 Page 162 of 272

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 1 - Loss of Essential AC Power Initiating Condition: Loss of ALL offsite power and ALL onsite AC power to essential buses for 15 minutes or longer EAL: SS1.1 Site Area Emergency Loss of ALL offsite and ALL onsite AC power capability, Table S-1, to essential 4160V buses C1 and D1 for 15 min. (Note 1) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Table S-1 Offsite/Onsite AC Power Sources Offsite:

  • X11
  • X11 (back-fed via Main Transformer)
  • X01
  • X02 Onsite:
  • EDG1
  • EDG2
  • SBODG Mode Applicability:

1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown NEI 99-01 Basis: This IC addresses a total loss of AC power that compromises the performance of ALL SAFETY SYSTEMS requiring electric power including those necessary for emergency core cooling, containment heat removal/pressure control, spent fuel heat removal and the ultimate heat sink. In addition, fission product barrier monitoring capabilities may be degraded under these conditions. This IC represents a condition that involves actual or likely major failures of plant functions needed for the protection of the public. Fifteen minutes was selected as a threshold to exclude transient or momentary power losses. EAL BASES DOCUMENT Rev. 0 Page 163 of 272

ATTACHMENT 1 EAL Bases Escalation of the emergency classification level would be via ICs RG1, FG1 or SG1. DBNPS Basis: This EAL is indicated by the loss of ALL offsite and onsite AC power capability (Table S-1) to 4160V essential buses C1 and D1. The essential switchgear are buses C1 (Train A) and D1 (Train B) (ref. 1). For emergency classification purposes, capability means that an AC power source is available to the essential buses, whether or not the buses are powered from it. The 4160 VAC System provides the power requirements for operation and safe shutdown of the plant. The essential switchgear are buses C1 and D1 (ref. 1). The essential buses during plant operation are normally powered from the 13.8KV offsite power system through their respective 13.8KV/4160V bus tie transformers, via the Unit Auxiliary Transformer (X11). In non-power operating modes, the essential buses may be back-fed via the X11 and Main Transformer provided the main generator lead disconnect links are removed (ref. 1, 2). Credit for the X11 back-feed can only be taken if already aligned, as it takes greater than 15 minutes to align. A standby source of offsite power to each 4160V essential bus is provided from the 13.8KV offsite power system via two separate and independent 13.8KV/4160V Startup Transformers (X01 & X02). Normally each startup transformer serves as a reserve power source for only one essential bus. However, a single startup transformer can be aligned to power both essential buses (ref. 1, 2). Each essential bus has a diesel generator (EDG1 & EDG2) to supply an onsite emergency source of power to safe shutdown loads in the event of a loss of the normal power source or loss of off-site power (ref. 1). An Alternate AC power source, the Station Black Out (SBO) Diesel Generator, is located onsite. This onsite AC power source can be started from the Control Room and be loaded within 10 minutes of a SBO (ref. 1). The 15-minute interval was selected as a threshold to exclude transient or momentary power losses. The interval begins when both offsite and onsite AC power capability are lost. DBNPS Basis Reference(s):

1. UFSAR Section 8.0 Electric Power
2. DB-OP-02521 Loss of AC Bus Power Sources
3. NEI 99-01 SS1 EAL BASES DOCUMENT Rev. 0 Page 164 of 272

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 1 - Loss of Essential AC Power Initiating Condition: Loss of ALL but one AC power source to essential buses for 15 minutes or longer EAL: SA1.1 Alert AC power capability, Table S-1, to essential 4160V buses C1 and D1 reduced to a single power source for 15 min. (Note 1) AND ANY additional single power source failure will result in loss of ALL AC power to SAFETY SYSTEMS Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Table S-1 Offsite/Onsite AC Power Sources Offsite:

  • X11
  • X11 (back-fed via Main Transformer)
  • X01
  • X02 Onsite:
  • EDG1
  • EDG2
  • SBODG Mode Applicability:

1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4- Hot Shutdown Basis: NEI 99-01 Basis: This IC describes a significant degradation of offsite and onsite AC power sources such that ANY additional single failure would result in a loss of ALL AC power to SAFETY SYSTEMS. EAL BASES DOCUMENT Rev. 0 Page 165 of 272

ATTACHMENT 1 EAL Bases In this condition, the sole AC power source may be powering one, or more than one, train of safety-related equipment. This IC provides an escalation path from IC SU1. An AC power source is a source recognized in AOPs and EOPs, and capable of supplying required power to an essential bus. Some examples of this condition are presented below. z A loss of ALL offsite power with a concurrent failure of ALL but one emergency power source (e.g., an onsite diesel generator) z A loss of ALL offsite power and loss of ALL emergency power sources (e.g., onsite diesel generators) with a single train of essential buses being back-fed from the unit main generator z A loss of emergency power sources (e.g., onsite diesel generators) with a single train of essential buses being fed from an offsite power source Fifteen minutes was selected as a threshold to exclude transient or momentary losses of power. Escalation of the emergency classification level would be via IC SS1. DBNPS Basis: For emergency classification purposes, capability means that an AC power source is available to the essential buses, whether or not the buses are powered from it. The 4160 VAC System provides the power requirements for operation and safe shutdown of the plant. The essential switchgear are buses C1 and D1 (ref. 1). The essential buses during plant operation are normally powered from the 13.8KV offsite power system through their respective 13.8KV/4160V bus tie transformers, via the Unit Auxiliary Transformer (X11). In non-power operating modes, the essential buses may be back-fed via the X11 and Main Transformer provided the main generator lead disconnect links are removed (ref. 1, 2). Credit for the X11 back-feed can only be taken if already aligned, as it takes greater than 15 minutes to align. A standby source of offsite power to each 4160V essential bus is provided from the 13.8KV offsite power system via two separate and independent 13.8KV/4160V Startup Transformers (X01 & X02). Normally each startup transformer serves as a reserve power source for only one essential bus. However, a single startup transformer can be aligned to power both essential buses (ref. 1, 2). Each essential bus has a diesel generator (EDG1 & EDG2) to supply an onsite emergency source of power to safe shutdown loads in the event of a loss of the normal power source or loss of off-site power (ref. 1). An Alternate AC power source, the Station Black Out (SBO) Diesel Generator, is located onsite. This onsite AC power source can be started from the Control Room and be loaded within 10 minutes of a SBO (ref. 1). EAL BASES DOCUMENT Rev. 0 Page 166 of 272

ATTACHMENT 1 EAL Bases The 15-minute interval was selected as a threshold to exclude transient or momentary power losses. If the capability of a second source of essential bus power is not restored within 15 minutes, an Alert is declared under this EAL. DBNPS Basis Reference(s):

1. UFSAR Section 8.0 Electric Power
2. DB-OP-02521 Loss of AC Bus Power Sources
3. NEI 99-01 SA1 EAL BASES DOCUMENT Rev. 0 Page 167 of 272

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 1 - Loss of Essential AC Power Initiating Condition: Loss of ALL offsite AC power capability to essential buses for 15 minutes or longer EAL: SU1.1 Unusual Event Loss of ALL offsite AC power capability, Table S-1, to essential 4160V buses C1 and D1 for 15 min. (Note 1) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Table S-1 Offsite/Onsite AC Power Sources Offsite:

  • X11
  • X11 (back-fed via Main Transformer)
  • X01
  • X02 Onsite:
  • EDG1
  • EDG2
  • SBODG Mode Applicability:

1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown Basis: NEI 99-01 Basis: This IC addresses a prolonged loss of offsite power. The loss of offsite power sources renders the plant more vulnerable to a complete loss of power to AC essential buses. This condition represents a potential reduction in the level of safety of the plant. For emergency classification purposes, capability means that an offsite AC power source(s) is available to the essential buses, whether or not the buses are powered from it. EAL BASES DOCUMENT Rev. 0 Page 168 of 272

ATTACHMENT 1 EAL Bases Fifteen minutes was selected as a threshold to exclude transient or momentary losses of offsite power. Escalation of the emergency classification level would be via IC SA1. DBNPS Basis: For emergency classification purposes, capability means that an AC power source is available to the essential buses, whether or not the buses are powered from it. The 4160 VAC System provides the power requirements for operation and safe shutdown of the plant. The essential switchgear are buses C1 and D1 (ref. 1). The essential buses during plant operation are normally powered from the 13.8KV offsite power system through their respective 13.8KV/4160V bus tie transformers, via the Unit Auxiliary Transformer (X11). In non-power operating modes, the essential buses may be back-fed via the X11 and Main Transformer provided the main generator lead disconnect links are removed (ref. 1, 2). Credit for the X11 back-feed can only be taken if already aligned, as it takes greater than 15 minutes to align. A standby source of offsite power to each 4160V essential bus is provided from the 13.8KV offsite power system via two separate and independent 13.8KV/4160V Startup Transformers (X01 & X02). Normally each startup transformer serves as a reserve power source for only one essential bus. However, a single startup transformer can be aligned to power both essential buses (ref. 1, 2). Each essential bus has a diesel generator (EDG1 & EDG2) to supply an onsite emergency source of power to safe shutdown loads in the event of a loss of the normal power source or loss of off-site power (ref. 1). An Alternate AC power source, the Station Black Out (SBO) Diesel Generator, is located onsite. This onsite AC power source can be started from the Control Room and be loaded within 10 minutes of a SBO (ref. 1). The 15-minute interval was selected as a threshold to exclude transient or momentary power losses. DBNPS Basis Reference(s):

1. UFSAR Section 8.0 Electric Power
2. DB-OP-02521 Loss of AC Bus Power Sources
3. NEI 99-01 SU1 EAL BASES DOCUMENT Rev. 0 Page 169 of 272

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 2 - Loss of Essential DC Power Initiating Condition: Loss of ALL essential DC power for 15 minutes or longer EAL: SS2.1 Site Area Emergency Loss of ALL 125 VDC power based on battery bus voltage indications < 105 VDC on ALL essential DC distribution panels D1P, D1N, D2P and D2N for 15 min. (Note 1) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Mode Applicability: 1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown NEI 99-01 Basis: This IC addresses a loss of essential DC power, which compromises the ability to monitor and control SAFETY SYSTEMS. In modes above Cold Shutdown, this condition involves a major failure of plant functions needed for the protection of the public. Fifteen minutes was selected as a threshold to exclude transient or momentary power losses. Escalation of the emergency classification level would be via ICs RG1, FG1 or SG1. DBNPS Basis: The DC electrical distribution subsystem consists of two trains, designated Train 1 and Train

2. Each train consists of a 250/125 VDC motor control center (MCC), and each 250/125 VDC MCC consists of two 125 VDC buses (one positive and one negative) that can be powered from a polarity specific battery or battery charger. The two DC buses then supply a specific Essential DC Distribution Panel (D1P and D1N for DCMCC 1, and D2P and D2N for DCMCC 2). The four Essential DC Distribution Panels independently supply DC electrical power to the four inverters, which in turn power the 120 VAC essential buses (ref. 1, 2, 3, 4, 5, 6).

The Class 1E DC loads have an operating voltage range of 105 to 135 volts. The minimum battery discharge voltage (requiring opening the degraded battery output breaker) is 105 VDC (ref. 1, 6). EAL BASES DOCUMENT Rev. 0 Page 170 of 272

ATTACHMENT 1 EAL Bases DBNPS Basis Reference(s):

1. DBNPS UFSAR Section 8.0 Electrical Power
2. DB-OP-02537 Loss of D1P and DAP
3. DB-OP-02538 Loss of D2P and DBP
4. DB-OP-02539 Loss of D1N and DAN
5. DB-OP-02540 Loss of D2N and DBN
6. System Description for 125/250 VDC and 120 V Instrumentation AC System
7. NEI 99-01 SS8 EAL BASES DOCUMENT Rev. 0 Page 171 of 272

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 3 - Loss of Control Room Indications Initiating Condition: UNPLANNED loss of Control Room indications for 15 minutes or longer with a significant transient in progress EAL: SA3.1 Alert An UNPLANNED event results in the inability to monitor one or more Table S-2 SAFETY SYSTEM parameters from within the Control Room for 15 min. (Note 1) AND ANY Significant Transient is or may be in progress, Table S-3 Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Table S-2 Safety System Parameters

  • Reactor power
  • RCS pressure
  • In-core T/C temperature
  • Level in at least one S/G
  • Auxiliary or emergency feed flow Table S-3 Significant Transients
  • Reactor trip
  • Runback > 25% thermal power
  • Electrical load rejection > 25%

electrical load

  • Safety injection actuation Mode Applicability:

1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown EAL BASES DOCUMENT Rev. 0 Page 172 of 272

ATTACHMENT 1 EAL Bases NEI 99-01 Basis: This IC addresses the difficulty associated with monitoring rapidly changing plant conditions during a transient without the ability to obtain SAFETY SYSTEM parameters from within the Control Room. During this condition, the margin to a potential fission product barrier challenge is reduced. It thus represents a potential substantial degradation in the level of safety of the plant. As used in this EAL, an inability to monitor means that values for one or more of the listed parameters cannot be determined from within the Control Room. This situation would require a loss of ALL of the Control Room sources for the given parameter(s). For example, the reactor power level cannot be determined from any analog, digital and recorder source within the Control Room. An event involving a loss of plant indications, annunciators and/or display systems is evaluated in accordance with 10 CFR 50.72 (and associated guidance in NUREG-1022) to determine if an NRC event report is required. The event would be reported if it significantly impaired the capability to perform emergency assessments. In particular, emergency assessments necessary to implement abnormal operating procedures, emergency operating procedures, and emergency plan implementing procedures addressing emergency classification, accident assessment, or protective action decision-making. This EAL is focused on a selected subset of plant parameters associated with the key safety functions of reactivity control, core cooling and RCS heat removal. The loss of the ability to determine one or more of these parameters from within the Control Room is considered to be more significant than simply a reportable condition. In addition, if ALL indication sources for one or more of the listed parameters are lost, then the ability to determine the values of other SAFETY SYSTEM parameters may be impacted as well. For example, if the value for RCS pressure cannot be determined from the indications and recorders on a main control board, the SPDS or the plant computer, the availability of other parameter values may be compromised as well. Fifteen minutes was selected as a threshold to exclude transient or momentary losses of indication. Escalation of the emergency classification level would be via ICs FS1 or RS1 DBNPS Basis: SAFETY SYSTEM parameters listed in Table S-2 are monitored in the Control Room through a combination of hard control panel indicators as well as computer based information systems. The Plant Process Computer, which displays SPDS required information, serves as a redundant compensatory indicator, which may be utilized in lieu of normal Control Room indicators (ref. 1, 2, 3). Significant transients are listed in Table S-3 and include response to automatic or manually initiated functions such as reactor trips, runbacks involving greater than 25% thermal power EAL BASES DOCUMENT Rev. 0 Page 173 of 272

ATTACHMENT 1 EAL Bases change, electrical load rejections of greater than 25% full electrical load or SI injection actuations. DBNPS Basis Reference(s):

1. UFSAR Section 7.5 Safety-Related Display Instrumentation
2. DB-OP-02541 Loss of YAU
3. DB-OP-02542 Loss of YBU
4. NEI 99-01 SA2 EAL BASES DOCUMENT Rev. 0 Page 174 of 272

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 3 - Loss of Control Room Indications Initiating Condition: UNPLANNED loss of Control Room indications for 15 minutes or longer EAL: SU3.1 Unusual Event An UNPLANNED event results in the inability to monitor one or more Table S-2 SAFETY SYSTEM parameters from within the Control Room for 15 min. (Note 1) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Table S-2 Safety System Parameters

  • Reactor power
  • RCS pressure
  • In-core T/C temperature
  • Level in at least one S/G
  • Auxiliary or emergency feed flow Mode Applicability:

1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown NEI 99-01 Basis: This IC addresses the difficulty associated with monitoring normal plant conditions without the ability to obtain SAFETY SYSTEM parameters from within the Control Room. This condition is a precursor to a more significant event and represents a potential degradation in the level of safety of the plant. As used in this EAL, an inability to monitor means that values for one or more of the listed parameters cannot be determined from within the Control Room. This situation would require a loss of ALL of the Control Room sources for the given parameter(s). For example, the reactor power level cannot be determined from any analog, digital and recorder source within the Control Room. An event involving a loss of plant indications, annunciators and/or display systems is evaluated in accordance with 10 CFR 50.72 (and associated guidance in NUREG-1022) to determine if an NRC event report is required. The event would be reported if it significantly impaired the capability to perform emergency assessments. In particular, emergency assessments necessary to implement abnormal operating procedures, emergency operating EAL BASES DOCUMENT Rev. 0 Page 175 of 272

ATTACHMENT 1 EAL Bases procedures, and emergency plan implementing procedures addressing emergency classification, accident assessment, or protective action decision-making. This EAL is focused on a selected subset of plant parameters associated with the key safety functions of reactivity control, core cooling and RCS heat removal. The loss of the ability to determine one or more of these parameters from within the Control Room is considered to be more significant than simply a reportable condition. In addition, if ALL indication sources for one or more of the listed parameters are lost, then the ability to determine the values of other SAFETY SYSTEM parameters may be impacted as well. For example, if the value for RCS pressure cannot be determined from the indications and recorders on a main control board, the SPDS or the plant computer, the availability of other parameter values may be compromised as well. Fifteen minutes was selected as a threshold to exclude transient or momentary losses of indication. Escalation of the emergency classification level would be via IC SA3. DBNPS Basis: SAFETY SYSTEM parameters listed in Table S-2 are monitored in the Control Room through a combination of hard control panel indicators as well as computer based information systems. The Plant Process Computer, which displays SPDS required information, serves as a redundant compensatory indicator, which may be utilized in lieu of normal Control Room indicators (ref. 1, 2, 3). DBNPS Basis Reference(s):

1. UFSAR Section 7.5 Safety-Related Display Instrumentation
2. DB-OP-02541 Loss of YAU
3. DB-OP-02542 Loss of YBU
4. NEI 99-01 SU2 EAL BASES DOCUMENT Rev. 0 Page 176 of 272

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 4 - RCS Activity Initiating Condition: Reactor coolant activity greater than Technical Specification allowable limits EAL: SU4.1 Unusual Event Letdown Monitor (RE 1998) reading > 2.0E+06 cpm Mode Applicability: 1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown NEI 99-01 Basis: This IC addresses a reactor coolant activity value that exceeds an allowable limit specified in Technical Specifications. This condition is a precursor to a more significant event and represents a potential degradation of the level of safety of the plant. Escalation of the emergency classification level would be via ICs FA1 or the Recognition Category R ICs. DBNPS Basis: The DBNPS historical highest failed fuel level of 0.007% corresponds to a reading of 1.4E+05 cpm on the Failed Fuel Monitor (RE 1998). The top of scale for RE 1998 is 1.0E+07. A monitor value of 2.0E+06 (0.1% clad damage) was chosen for its ability to be recognized even though exceeding Technical Specification Limits could potentially result in much higher readings (ref. 1, 2). DBNPS Basis Reference(s):

1. Radiation Monitor Setpoint Manual, RE 1998 Failed Fuel Detector
2. DBNPS Technical Specifications LCO 3.4.16 RCS Specific Activity
3. NEI 99-01 SU3 EAL BASES DOCUMENT Rev. 0 Page 177 of 272

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 4 - RCS Activity Initiating Condition: Reactor coolant activity greater than Technical Specification allowable limits EAL: SU4.2 Unusual Event RCS activity > Technical Specification LCO 3.4.16 as indicated by ANY of the following:

  • Dose equivalent I-131 in the unacceptable region of Figure 3.4.16-1
   *   > 1 Ci/gm dose equivalent I-131 for > 48 hrs
   *   > 100/ Ci/gm gross specific coolant activity Mode Applicability:

1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown NEI 99-01 Basis: This IC addresses a reactor coolant activity value that exceeds an allowable limit specified in Technical Specifications. This condition is a precursor to a more significant event and represents a potential degradation of the level of safety of the plant. Escalation of the emergency classification level would be via ICs FA1 or the Recognition Category R ICs. DBNPS Basis: Technical Specification LCO 3.4.16 Condition A limits RCS System Dose Equivalent I-131 to 1.0 Ci/gm for > 48 hours. Technical Specification Section 3.4.16 Condition B limits RCS System Dose Equivalent I-131 to within Figure 3.4.16-1 and gross specific activity to < 100/ Ci/gm. (ref 1). DBNPS Basis Reference(s):

1. DBNPS Technical Specifications section 3.4.16 RCS Specific Activity
2. NEI 99-01 SU3 EAL BASES DOCUMENT Rev. 0 Page 178 of 272

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 5 - RCS Leakage Initiating Condition: RCS leakage for 15 minutes or longer EAL: SU5.1 Unusual Event RCS leakage > 10 gpm for 15 min. (Note 1) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Mode Applicability: 1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown NEI 99-01 Basis: This IC addresses RCS leakage, which may be a precursor to a more significant event. In this case, RCS leakage has been detected and operators, following applicable procedures, have been unable to promptly isolate the leak. This condition is considered to be a potential degradation of the level of safety of the plant. This EAL is focused on a loss of mass from the RCS due to unidentified leakage" or "pressure boundary leakage" (as these leakage types are defined in the plant Technical Specifications). The leak rate value was selected because it is usually observable with normal Control Room indications. Lesser values typically require time-consuming calculations to determine (e.g., a mass balance calculation). The release of mass from the RCS due to the as-designed/expected operation of a relief valve does not warrant an emergency classification. An emergency classification would be required if a mass loss is caused by a relief valve that is not functioning as designed/expected (e.g., a relief valve sticks open and the line flow cannot be isolated). The 15-minute threshold duration allows sufficient time for prompt operator actions to isolate the leakage, if possible. Escalation of the emergency classification level would be via ICs of Recognition Category R or F. DBNPS Basis: Unidentified leakage is ALL leakage (except RCP seal return) that is not identified leakage (ref. 1, 2). EAL BASES DOCUMENT Rev. 0 Page 179 of 272

ATTACHMENT 1 EAL Bases DBNPS does not have the capability to classify leakage as identified leakage within 15 minutes. Therefore, for the purpose of this IC and EAL all RCS leakage is considered unidentified leakage and the 10 gpm leak rate applies. Escalation of this EAL to the Alert level is via Category F, Fission Product Barrier Degradation, EAL FA1.1. DBNPS Basis Reference(s):

1. DBNPS Technical Specifications Definitions section 1.1
2. UFSAR Section 5.2.4.7 Leakage Identification
3. DB-OP-02522 Small RCS Leaks
4. NEI 99-01 SU4 EAL BASES DOCUMENT Rev. 0 Page 180 of 272

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 6 - RPS Failure Initiating Condition: Inability to shut down the reactor causing a challenge to core cooling or RCS heat removal EAL: SS6.1 Site Area Emergency An automatic or manual trip fails to shut down the reactor as indicated by reactor power 5% AND ALL actions to shut down the reactor are not successful as indicated by reactor power 5% AND EITHER:

  • Calculated Clad Temperature in Region 3 (DB-OP-02000 Figure 2)
  • MFW, AFW and MU-HPI PORV Cooling are all unavailable Mode Applicability:

1 - Power Operation NEI 99-01 Basis: This IC addresses a failure of the RPS to initiate or complete an automatic or manual reactor trip that results in a reactor shutdown, ALL subsequent operator actions to manually shutdown the reactor are unsuccessful, and continued power generation is challenging the capability to adequately remove heat from the core and/or the RCS. This condition will lead to fuel damage if additional mitigation actions are unsuccessful and thus warrants the declaration of a Site Area Emergency. In some instances, the emergency classification resulting from this IC/EAL may be higher than that resulting from an assessment of the plant responses and symptoms against the Recognition Category F ICs/EALs. This is appropriate in that the Recognition Category F ICs/EALs do not address the additional threat posed by a failure to shut down the reactor. The inclusion of this IC and EAL ensures the timely declaration of a Site Area Emergency in response to prolonged failure to shutdown the reactor. A reactor shutdown is determined in accordance with applicable Emergency Operating Procedure criteria. Escalation of the emergency classification level would be via ICs RG1 or FG1. EAL BASES DOCUMENT Rev. 0 Page 181 of 272

ATTACHMENT 1 EAL Bases DBNPS Basis: This EAL addresses the following:

  • ANY automatic reactor trip signal followed by a manual trip that fails to shut down the reactor to an extent the reactor is producing energy in excess of the heat load for which the SAFETY SYSTEMS were designed (EAL SA6.1), AND
  • Indications that either core cooling is extremely challenged or heat removal is extremely challenged The combination of failure of both front line and backup protection systems to function in response to a plant transient, along with the continued production of heat, poses a direct threat to the Fuel Clad and RCS barriers.

Reactor shutdown achieved by use of other trip actions specified in DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture (locally opening Reactor Trip Breaker, emergency boration or manually driving control rods) are also credited as a successful manual trip methods provided reactor power can be reduced below 5% before indications of an extreme challenge to either core cooling or heat removal exist (ref. 1). Each of the redundant Auxiliary Feed Pumps is sized to provide 100% of the capacity required by the SGs to remove 5% of the reactor thermal power produced at full load steam pressure conditions. The 5% power portion of this EAL threshold was chosen to be an easily recognizable, onscale indication that the reactor trip has not functioned to shutdown the reactor assuming the reactor power was in the normal operating range. Indication of continuing core cooling degradation must be based on fission product barrier monitoring with particular emphasis on Emergency Director judgment as it relates to IMMINENT Loss or Potential Loss of fission product barriers and degraded ability to monitor fission product barriers. Indication of continuing core cooling degradation is manifested by Calculated Clad Temperature in Region 3 (DB-OP-02000 Figure 2). Figure 2, Incore T/C Temperature vs. RCS Pressure for ICC, provides indication of how serious core conditions are based upon combinations of RCS pressure and incore thermocouple temperatures. If the RCS P-T point is in Region 3, the cladding temperatures in the high power regions of the core may be 1400°F or higher. This is a serious condition, which will lead to significant amounts of H2 production; core damage may be unavoidable (ref. 1). An extreme challenge to heat removal is defined as a complete loss of MFW, AFW and MU-HPI PORV Cooling (ref. 2, 3). DBNPS Basis Reference(s):

1. DBNPS Technical Specifications section 3.3.1 Reactor Protection System (RPS)

Instrumentation

2. DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture
3. Bases and Deviation Document for DB-OP-02000 EAL BASES DOCUMENT Rev. 0 Page 182 of 272

ATTACHMENT 1 EAL Bases

4. NEI 99-01 SS5 EAL BASES DOCUMENT Rev. 0 Page 183 of 272

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 6 - RPS Failure Initiating Condition: Automatic or manual trip fails to shut down the reactor AND subsequent manual actions taken at the Controls Area are not successful in shutting down the reactor EAL: SA6.1 Alert An automatic or manual trip fails to shut down the reactor as indicated by reactor power 5% AND Manual trip actions taken at the Controls Area (manual RPS trip pushbuttons and de-energizing E2 and F2) are not successful in shutting down the reactor as indicated by reactor power 5% (Note 8) Note 8: A manual trip action is ANY operator action, or set of actions, which causes the control rods to be rapidly inserted into the core, and does not include manually driving in control rods or implementation of boron injection strategies. Mode Applicability: 1 - Power Operation NEI 99-01 Basis: This IC addresses a failure of the RPS to initiate or complete an automatic or manual reactor trip that results in a reactor shutdown, AND subsequent operator manual actions taken at the Controls Area to shutdown the reactor are also unsuccessful. This condition represents an actual or potential substantial degradation of the level of safety of the plant. An emergency declaration is required even if the reactor is subsequently shutdown by an action taken away from the Controls Area since this event entails a significant failure of the RPS. A manual action at the Controls Area is ANY operator action, or set of actions, which causes the control rods to be rapidly inserted into the core (e.g., initiating a manual reactor trip). This action does not include manually driving in control rods or implementation of boron injection strategies. If this action(s) is unsuccessful, operators would immediately pursue additional manual actions at locations away from the Controls Area (e.g., locally opening breakers). Actions taken at back-panels or other locations within the Control Room, or any location outside the Control Room, are not considered to be at the Controls Area. The plant response to the failure of an automatic or manual reactor trip will vary based upon several factors including the reactor power level prior to the event, availability of the condenser, performance of mitigation equipment and actions, other concurrent plant EAL BASES DOCUMENT Rev. 0 Page 184 of 272

ATTACHMENT 1 EAL Bases conditions, etc. If the failure to shut down the reactor is prolonged enough to cause a challenge to the core cooling or RCS heat removal safety functions, the emergency classification level will escalate to a Site Area Emergency via IC SS6. Depending upon plant responses and symptoms, escalation is also possible via IC FS1. Absent the plant conditions needed to meet either IC SS6 or FS1, an Alert declaration is appropriate for this event. It is recognized that plant responses or symptoms may also require an Alert declaration in accordance with the Recognition Category F ICs; however, this IC and EAL are included to ensure a timely emergency declaration. A reactor shutdown is determined in accordance with applicable Emergency Operating Procedure criteria. DBNPS Basis: This EAL addresses ANY automatic or manual reactor trip signal that fails to shut down the reactor followed by a subsequent manual trip that fails to shut down the reactor to an extent the reactor is producing energy in excess of the heat load for which the SAFETY SYSTEMS were designed. For the purposes of emergency classification, successful manual trip actions are those, which can be quickly performed from the Controls Area (ATCA) (i.e., manual pushbuttons or de-energizing E2 and F2). Reactor shutdown achieved by use of other trip actions specified in DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture (locally opening Reactor Trip Breaker, emergency boration or manually driving control rods) do not constitute a successful manual trip (ref. 1). Each of the redundant Auxiliary Feed Pumps is sized to provide 100% of the capacity required by the SGs to remove 5% of the reactor thermal power produced at full load steam pressure conditions. The 5% power portion of this EAL threshold was chosen to be an easily recognizable, onscale indication that the reactor trip has not functioned to shutdown the reactor assuming the reactor power was in the normal operating range. Escalation of this event to a Site Area Emergency would be under EAL SS6.1 or Emergency Director judgment. DBNPS Basis Reference(s):

1. DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture
2. NEI 99-01 SA5 EAL BASES DOCUMENT Rev. 0 Page 185 of 272

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 6 - RPS Failure Initiating Condition: Automatic or manual trip fails to shut down the reactor EAL: SU6.1 Unusual Event An automatic trip did not shut down the reactor as indicated by reactor power 5% after ANY RPS setpoint is exceeded AND A subsequent manual trip action taken at the Controls Area (manual RPS trip pushbuttons or de-energizing E2 and F2) is successful in shutting down the reactor as indicated by reactor power < 5% (Note 8) Note 8: A manual trip action is ANY operator action, or set of actions, which causes the control rods to be rapidly inserted into the core, and does not include manually driving in control rods or implementation of boron injection strategies. Mode Applicability: 1 - Power Operation NEI 99-01 Basis: This EAL addresses a failure of the RPS to initiate or complete an automatic or manual reactor trip that results in a reactor shutdown, AND a subsequent operator manual action taken at the Controls Area is successful in shutting down the reactor. This event is a precursor to a more significant condition and thus represents a potential degradation of the level of safety of the plant. Following the failure on an automatic reactor trip, operators will promptly initiate manual actions at the Controls Area to shutdown the reactor (e.g., initiate a manual reactor trip). If these manual actions are successful in shutting down the reactor, core heat generation will quickly fall to a level within the capabilities of the plants decay heat removal systems. If an initial manual reactor trip is unsuccessful, operators will promptly take manual action at another location(s) on the Controls Area to shutdown the reactor (e.g., initiate a manual reactor trip) using a different switch). Depending upon several factors, the initial or subsequent effort to manually trip the reactor, or a concurrent plant condition, may lead to the generation of an automatic reactor trip signal. If a subsequent manual or automatic trip is successful in shutting down the reactor, core heat generation will quickly fall to a level within the capabilities of the plants decay heat removal systems. A manual action at the Controls Area is ANY operator action, or set of actions, which causes the control rods to be rapidly inserted into the core (e.g., initiating a manual reactor trip). This EAL BASES DOCUMENT Rev. 0 Page 186 of 272

ATTACHMENT 1 EAL Bases action does not include manually driving in control rods or implementation of boron injection strategies. Actions taken at back-panels or other locations within the Control Room, or any location outside the Control Room, are not considered to be at the Controls Area. The plant response to the failure of an automatic or manual reactor trip will vary based upon several factors including the reactor power level prior to the event, availability of the condenser, performance of mitigation equipment and actions, other concurrent plant conditions, etc. If subsequent operator manual actions taken at the Controls Area are also unsuccessful in shutting down the reactor, then the emergency classification level will escalate to an Alert via IC SA6. Depending upon the plant response, escalation is also possible via IC FA1. Absent the plant conditions needed to meet either IC SA6 or FA1, an Unusual Event declaration is appropriate for this event. A reactor shutdown is determined in accordance with applicable Emergency Operating Procedure criteria. Should a reactor trip signal be generated as a result of plant work (e.g., RPS setpoint testing), the following classification guidance should be applied. z If the signal causes a plant transient that should have included an automatic reactor trip and the RPS fails to automatically shutdown the reactor, then this IC and the EALs are applicable, and should be evaluated. z If the signal does not cause a plant transient and the trip failure is determined through other means (e.g., assessment of test results), then this IC and the EALs are not applicable and no classification is warranted. DBNPS Basis: The first condition of this EAL identifies the need to cease critical reactor operations by actuation of the automatic Reactor Protection System (RPS) trip function. A reactor trip is automatically initiated by the RPS when certain continuously monitored parameters exceed predetermined setpoints (ref. 1). Following a successful reactor trip, rapid insertion of the control rods occurs. Reactor power promptly drops to a fraction of the original power level and then decays to a level several decades less with a negative startup rate. The reactor power drop continues until reactor power reaches the point at which the influence of source neutrons on reactor power starts to be observable. A predictable post-trip response from an automatic reactor trip signal should therefore consist of a prompt drop in reactor power as sensed by the nuclear instrumentation and a lowering of power into the source range. A successful trip has therefore occurred when there is sufficient rod insertion from the trip of RPS to bring the reactor power below the immediate shutdown decay heat level of 5% (ref. 2). Each of the redundant Auxiliary Feed Pumps is sized to provide 100% of the capacity required by the SGs to remove 5% of the reactor thermal power produced at full load steam pressure conditions. The 5% power portion of this EAL threshold was chosen to be an easily EAL BASES DOCUMENT Rev. 0 Page 187 of 272

ATTACHMENT 1 EAL Bases recognizable, onscale indication that the reactor trip has not functioned to shutdown the reactor assuming the reactor power was in the normal operating range. For the purposes of emergency classification, successful manual trip actions are those, which can be quickly performed from the Controls Area (ATCA) (i.e., manual pushbuttons or de-energizing E2 and F2). Reactor shutdown achieved by use of other trip actions specified in DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture (locally opening Reactor Trip Breaker, emergency boration or manually driving control rods) do not constitute a successful manual trip (ref. 2). In the event that the operator identifies a reactor trip is imminent and initiates a successful manual reactor trip before the automatic RPS trip setpoint is reached, no declaration is required. The successful manual trip of the reactor before it reaches its automatic trip setpoint or reactor trip signals caused by instrumentation channel failures do not lead to a potential fission product barrier loss. However, if subsequent manual reactor trip actions fail to reduce reactor power below 5%, the event escalates to the Alert under EAL SA6.1. If by procedure, operator actions include the initiation of an immediate manual trip following receipt of an automatic trip signal and there are no clear indications that the automatic trip failed (such as a time delay following indications that a trip setpoint was exceeded), it may be difficult to determine if the reactor was shut down because of automatic trip or manual actions. If a subsequent review of the trip actuation indications reveals that, the automatic trip did not cause the reactor to be shut down, then consideration should be given to evaluating the fuel for potential damage, and the reporting requirements of 10 CFR 50.72 should be considered for the transient event. DBNPS Basis Reference(s):

1. DBNPS Technical Specifications section 3.3.1 Reactor Protection System (RPS)

Instrumentation

2. DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture
3. NEI 99-01 SU5 EAL BASES DOCUMENT Rev. 0 Page 188 of 272

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 6 - RPS Failure Initiating Condition: Automatic or manual trip fails to shut down the reactor EAL: SU6.2 Unusual Event A manual trip did not shut down the reactor as indicated by reactor power 5% after ANY manual trip action was initiated AND A subsequent automatic trip or manual trip action taken at the Controls Area (manual RPS trip pushbuttons or de-energizing E2 and F2) is successful in shutting down the reactor as indicated by reactor power < 5% (Note 8) Note 8: A manual trip action is ANY operator action, or set of actions, which causes the control rods to be rapidly inserted into the core, and does not include manually driving in control rods or implementation of boron injection strategies. Mode Applicability: 1 - Power Operation NEI 99-01 Basis: This EAL addresses a failure of the RPS to initiate or complete a manual reactor trip that results in a reactor shutdown, AND either a subsequent operator manual action taken at the Controls Area or an automatic trip is successful in shutting down the reactor. This event is a precursor to a more significant condition and thus represents a potential degradation of the level of safety of the plant. Following the failure on an automatic reactor trip, operators will promptly initiate manual actions at the Controls Area to shutdown the reactor (e.g., initiate a manual reactor trip). If these manual actions are successful in shutting down the reactor, core heat generation will quickly fall to a level within the capabilities of the plants decay heat removal systems. If an initial manual reactor trip is unsuccessful, operators will promptly take manual action at another location(s) on the Controls Area to shutdown the reactor (e.g., initiate a manual reactor trip) using a different switch. Depending upon several factors, the initial or subsequent effort to manually trip the reactor, or a concurrent plant condition, may lead to the generation of an automatic reactor trip signal. If a subsequent manual or automatic trip is successful in shutting down the reactor, core heat generation will quickly fall to a level within the capabilities of the plants decay heat removal systems. A manual action at the Controls Area is ANY operator action, or set of actions, which causes the control rods to be rapidly inserted into the core (e.g., initiating a manual reactor trip). This EAL BASES DOCUMENT Rev. 0 Page 189 of 272

ATTACHMENT 1 EAL Bases action does not include manually driving in control rods or implementation of boron injection strategies. Actions taken at back-panels or other locations within the Control Room, or any location outside the Control Room, are not considered to be at the Controls Area. The plant response to the failure of an automatic or manual reactor trip will vary based upon several factors including the reactor power level prior to the event, availability of the condenser, performance of mitigation equipment and actions, other concurrent plant conditions, etc. If subsequent operator manual actions taken at the Controls Area are also unsuccessful in shutting down the reactor, then the emergency classification level will escalate to an Alert via IC SA6. Depending upon the plant response, escalation is also possible via IC FA1. Absent the plant conditions needed to meet either IC SA6 or FA1, an Unusual Event declaration is appropriate for this event. A reactor shutdown is determined in accordance with applicable Emergency Operating Procedure criteria. Should a reactor trip signal be generated as a result of plant work (e.g., RPS setpoint testing), the following classification guidance should be applied. z If the signal causes a plant transient that should have included an automatic reactor trip and the RPS fails to automatically shutdown the reactor, then this IC and the EALs are applicable, and should be evaluated. z If the signal does not cause a plant transient and the trip failure is determined through other means (e.g., assessment of test results), then this IC and the EALs are not applicable and no classification is warranted. DBNPS Basis: This EAL addresses a failure of a manually initiated trip in the absence of having exceeded an automatic RPS trip setpoint AND a subsequent automatic or manual trip is successful in shutting down the reactor (reactor power < 5%) (ref. 1). Following a successful reactor trip, rapid insertion of the control rods occurs. Reactor power promptly drops to a fraction of the original power level and then decays to a level several decades less with a negative startup rate. The reactor power drop continues until reactor power reaches the point at which the influence of source neutrons on reactor power starts to be observable. A predictable post-trip response from a manual reactor trip signal should therefore consist of a prompt drop in reactor power as sensed by the nuclear instrumentation and a lowering of power into the source range. A successful trip has therefore occurred when there is sufficient rod insertion from the trip of RPS to bring the reactor power below the immediate shutdown decay heat level of 5% (ref. 2). Each of the redundant Auxiliary Feed Pumps is sized to provide 100% of the capacity required by the SGs to remove 5% of the reactor thermal power produced at full load steam pressure conditions. The 5% power portion of this EAL threshold was chosen to be an easily recognizable, onscale indication that the reactor trip has not functioned to shutdown the reactor assuming the reactor power was in the normal operating range. EAL BASES DOCUMENT Rev. 0 Page 190 of 272

ATTACHMENT 1 EAL Bases For the purposes of emergency classification, successful manual trip actions are those, which can be quickly performed from the Controls Area (ATCA) (i.e., manual pushbuttons or de-energizing E2 and F2). Reactor shutdown achieved by use of other trip actions specified in DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture (locally opening Reactor Trip Breaker, emergency boration or manually driving control rods) do not constitute a successful manual trip (ref. 2). If both subsequent automatic and subsequent manual reactor trip actions in the Control Room fail to reduce reactor power below the power associated with the SAFETY SYSTEM design (< 5%) following a failure of an initial manual trip, the event escalates to an Alert under EAL SA6.1 DBNPS Basis Reference(s):

1. DBNPS Technical Specifications section 3.3.1 Reactor Protection System (RPS)

Instrumentation

2. DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture
3. NEI 99-01 SU5 EAL BASES DOCUMENT Rev. 0 Page 191 of 272

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 7 - Loss of Communications Initiating Condition: Loss of ALL onsite or offsite communications capabilities EAL: SU7.1 Unusual Event Loss of ALL Table S-4 onsite communication methods Table S-4 Communication Methods System Onsite ORO NRC Public Address (Gaitronics) X Onsite Radios X Plant Telephones X X X Commercial Telephones X X X 4-Way Ringdown Circuit X Satellite Phones X X Cellular Phones X X NRC Emergency Telephone System X Mode Applicability: 1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown NEI 99-01 Basis: This IC addresses a significant loss of on-site or offsite communications capabilities. While not a direct challenge to plant or personnel safety, this event warrants prompt notifications to OROs and the NRC. This IC should be assessed only when extraordinary means are being utilized to make communications possible (e.g., use of non-plant, privately owned equipment, relaying of on-site information via individuals or multiple radio transmission points, individuals being sent to offsite locations, etc.). EAL BASES DOCUMENT Rev. 0 Page 192 of 272

ATTACHMENT 1 EAL Bases This EAL addresses a total loss of the communications methods used in support of routine plant operations. DBNPS Basis: Onsite/Offsite Response Organization (ORO)/NRC communications include one or more of the systems listed in Table S-4 (ref. 1, 2). Public Address (Gaitronics) System The DBNPS public address system provides paging and party line communications between stations located throughout the plant. Inside and outside type wall and desk-mounted stations are used to communicate between roaming personnel and fixed work locations. Plant-wide instructions are issued using the paging feature. On-site Radio System Radio systems can be used for communication among operators, off-site monitoring teams, the control room, security, TSC and EOF. Plant Telephone System The DBNPS plant telephone system provides communication capability between telephone stations located within the plant by dialing the four-digit telephone station code as well as external or offsite calling capability. Commercial Telephones Commercial telephone lines, which supply public telephone communications, are employed by DBNPS. The local service provider provides primary and secondary power for their lines at the Central Office. 4-Way Ringdown Circuit Dedicated ring down line that includes the State and County EOCs, the Ohio Highway Patrol Office, the Lucas County and Ottawa County Sheriff's dispatcher offices, the Emergency Operations Facility, and the Control Room. Satellite Phones Portable satellite telephones are available which enable communication when all other phone systems are inoperable, e.g. following a major external event. Internal batteries, external DC sources as well as external AC sources can power these portable systems. EAL BASES DOCUMENT Rev. 0 Page 193 of 272

ATTACHMENT 1 EAL Bases Cellular Phones Cellular phones may be used during emergencies if other communications means are not readily available or are inoperable. These phones are not expected to be used in the Control Room or Power Block due to interference with plant equipment and loss of signal to the phone. NRC Emergency Telephone System The NRC uses a DBNPS dedicated telephone line, which allows direct telephone communications from the plant to NRC regional and national offices. The DBNPS communications line provides a link independent of the local public telephone network. Telephones connected to this network are located in the DBNPS Control Room, Technical Support Center, and Emergency Operations Facility and can be used to establish NRC Emergency Notification System (ENS) and Health Physics Network (HPN) capability. This EAL is the hot condition equivalent of the cold condition EAL CU5.1. DBNPS Basis Reference(s):

1. DBNPS UFSAR Section 9.5.2 Communications Systems
2. DBNPS Emergency Plan 7.6 Communications Systems
3. NEI 99-01 SU6 EAL BASES DOCUMENT Rev. 0 Page 194 of 272

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 7 - Loss of Communications Initiating Condition: Loss of ALL onsite or offsite communications capabilities EAL: SU7.2 Unusual Event Loss of ALL Table S-4 ORO communication methods Table S-4 Communication Methods System Onsite ORO NRC Public Address (Gaitronics) X Onsite Radios X Plant Telephones X X X Commercial Telephones X X X 4-Way Ringdown Circuit X Satellite Phones X X Cellular Phones X X NRC Emergency Telephone System X Mode Applicability: 1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown NEI 99-01 Basis: This IC addresses a significant loss of on-site or offsite communications capabilities. While not a direct challenge to plant or personnel safety, this event warrants prompt notifications to OROs and the NRC. This IC should be assessed only when extraordinary means are being utilized to make communications possible (e.g., use of non-plant, privately owned equipment, relaying of on-site information via individuals or multiple radio transmission points, individuals being sent to offsite locations, etc.). EAL BASES DOCUMENT Rev. 0 Page 195 of 272

ATTACHMENT 1 EAL Bases This EAL addresses a total loss of the communications methods used to notify ALL OROs of an emergency declaration. The OROs referred to here are the State of Ohio, Lucas and Ottawa County EOCs. DBNPS Basis: Onsite/Offsite Response Organization (ORO)/NRC communications include one or more of the systems listed in Table S-4 (ref. 1, 2). Public Address (Gaitronics) System The DBNPS public address system provides paging and party line communications between stations located throughout the plant. Inside and outside type wall and desk-mounted stations are used to communicate between roaming personnel and fixed work locations. Plant-wide instructions are issued using the paging feature. On-site Radio System Radio systems can be used for communication among operators, off-site monitoring teams, the control room, security, TSC and EOF. Plant Telephone System The DBNPS plant telephone system provides communication capability between telephone stations located within the plant by dialing the four-digit telephone station code as well as external or offsite calling capability. Commercial Telephones Commercial telephone lines, which supply public telephone communications, are employed by DBNPS. The local service provider provides primary and secondary power for their lines at the Central Office. 4-Way Ringdown Circuit Dedicated ring down line that includes the State and County EOCs, the Ohio Highway Patrol Office, the Lucas County and Ottawa County Sheriff's dispatcher offices, the Emergency Operations Facility, and the Control Room. Satellite Phones Portable satellite telephones are available which enable communication when ALL other phone systems are inoperable, e.g. following a major external event. Internal batteries, external DC sources as well as external AC sources can power these portable systems. EAL BASES DOCUMENT Rev. 0 Page 196 of 272

ATTACHMENT 1 EAL Bases Cellular Phones Cellular phones may be used during emergencies if other communications means are not readily available or are inoperable. These phones are not expected to be used in the Control Room or Power Block due to interference with plant equipment and loss of signal to the phone. NRC Emergency Telephone System The NRC uses a DBNPS dedicated telephone line, which allows direct telephone communications from the plant to NRC regional and national offices. The DBNPS communications line provides a link independent of the local public telephone network. Telephones connected to this network are located in the DBNPS Control Room, Technical Support Center, and Emergency Operations Facility and can be used to establish NRC Emergency Notification System (ENS) and Health Physics Network (HPN) capability. This EAL is the hot condition equivalent of the cold condition EAL CU5.2. DBNPS Basis Reference(s):

1. DBNPS UFSAR Section 9.5.2 Communications Systems
2. DBNPS Emergency Plan 7.6 Communications Systems
3. NEI 99-01 SU6 EAL BASES DOCUMENT Rev. 0 Page 197 of 272

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 7 - Loss of Communications Initiating Condition: Loss of ALL onsite or offsite communications capabilities EAL: SU7.3 Unusual Event Loss of ALL Table S-4 NRC communication methods Table S-4 Communication Methods System Onsite ORO NRC Public Address (Gaitronics) X Onsite Radios X Plant Telephones X X X Commercial Telephones X X X 4-Way Ringdown Circuit X Satellite Phones X X Cellular Phones X X NRC Emergency Telephone System X Mode Applicability: 1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown NEI 99-01 Basis: This IC addresses a significant loss of on-site or offsite communications capabilities. While not a direct challenge to plant or personnel safety, this event warrants prompt notifications to OROs and the NRC. This IC should be assessed only when extraordinary means are being utilized to make communications possible (e.g., use of non-plant, privately owned equipment, relaying of on-site information via individuals or multiple radio transmission points, individuals being sent to offsite locations, etc.). EAL BASES DOCUMENT Rev. 0 Page 198 of 272

ATTACHMENT 1 EAL Bases This EAL addresses a total loss of the communications methods used to notify the NRC of an emergency declaration. DBNPS Basis: Onsite/Offsite Response Organization (ORO)/NRC communications include one or more of the systems listed in Table S-4 (ref. 1, 2). Public Address (Gaitronics) System The DBNPS public address system provides paging and party line communications between stations located throughout the plant. Inside and outside type wall and desk-mounted stations are used to communicate between roaming personnel and fixed work locations. Plant-wide instructions are issued using the paging feature. On-site Radio System Radio systems can be used for communication among operators, off-site monitoring teams, the control room, security, TSC and EOF. Plant Telephone System The DBNPS plant telephone system provides communication capability between telephone stations located within the plant by dialing the four-digit telephone station code as well as external or offsite calling capability. Commercial Telephones Commercial telephone lines, which supply public telephone communications, are employed by DBNPS. The local service provider provides primary and secondary power for their lines at the Central Office. 4-Way Ringdown Circuit Dedicated ring down line that includes the State and County EOCs, the Ohio Highway Patrol Office, the Lucas County and Ottawa County Sheriff's dispatcher offices, the Emergency Operations Facility, and the Control Room. Satellite Phones Portable satellite telephones are available which enable communication when ALL other phone systems are inoperable, e.g. following a major external event. Internal batteries, external DC sources as well as external AC sources can power these portable systems. EAL BASES DOCUMENT Rev. 0 Page 199 of 272

ATTACHMENT 1 EAL Bases Cellular Phones Cellular phones may be used during emergencies if other communications means are not readily available or are inoperable. These phones are not expected to be used in the Control Room or Power Block due to interference with plant equipment and loss of signal to the phone. NRC Emergency Telephone System The NRC uses a DBNPS dedicated telephone line, which allows direct telephone communications from the plant to NRC regional and national offices. The DBNPS communications line provides a link independent of the local public telephone network. Telephones connected to this network are located in the DBNPS Control Room, Technical Support Center, and Emergency Operations Facility and can be used to establish NRC Emergency Notification System (ENS) and Health Physics Network (HPN) capability. This EAL is the hot condition equivalent of the cold condition EAL CU5.3. DBNPS Basis Reference(s):

1. DBNPS UFSAR Section 9.5.2 Communications Systems
2. DBNPS Emergency Plan 7.6 Communications Systems
3. NEI 99-01 SU6 EAL BASES DOCUMENT Rev. 0 Page 200 of 272

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 8 - Containment Failure Initiating Condition: Failure to isolate containment or loss of containment pressure control EAL: SU8.1 Unusual Event ANY penetration is not closed within 15 min. of a VALID containment isolation signal (Note 1) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Mode Applicability: 1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown NEI 99-01 Basis: This EAL addresses a failure of one or more containment penetrations to automatically isolate (close) when required by an actuation signal. Absent challenges to another fission product barrier, this condition represents potential degradation of the level of safety of the plant. For this EAL the containment isolation signal must be generated as the result on an off-normal/accident condition (e.g., a safety injection or high containment pressure); a failure resulting from testing or maintenance does not warrant classification. The determination of containment and penetration status - isolated or not isolated - should be made in accordance with the appropriate criteria contained in the plant AOPs and EOPs. The 15-minute criterion is included to allow operators time to manually isolate the required penetrations, if possible. This event would escalate to a Site Area Emergency in accordance with IC FS1 if there were a concurrent loss or potential loss of either the Fuel Clad or RCS fission product barriers. DBNPS Basis: Successful closure of any one valve in a penetration line is sufficient to consider the penetration closed. DBNPS Basis Reference(s):

1. NEI 99-01 SU7 EAL BASES DOCUMENT Rev. 0 Page 201 of 272

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 8 - Containment Failure Initiating Condition: Failure to isolate containment or loss of containment pressure control EAL: SU8.2 Unusual Event Containment pressure > 40 psia with < one full train of containment cooling, Table S-6, operating per design for 15 min. (Note 1) Table S-6 Containment Cooling Full Train CT Spray Pumps CT Cooling Fans 2 0 1 1 0 2 Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Mode Applicability: 1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown NEI 99-01 Basis: This EAL addresses an event that results in high containment pressure with a concurrent failure of containment pressure control systems. Absent challenges to another fission product barrier, this condition represents a potential degradation of the level of safety of the plant. This EAL addresses a condition where containment pressure is greater than the setpoint at which containment energy (heat) removal systems are designed to automatically actuate, and less than one full train of equipment is capable of operating per design. The 15-minute criterion is included to allow operators time to manually start equipment that may not have automatically started, if possible. The inability to start the required equipment indicates that containment heat removal/depressurization systems (e.g., containment sprays or ice condenser fans) are either lost or performing in a degraded manner. This event would escalate to a Site Area Emergency in accordance with IC FS1 if there were a concurrent loss or potential loss of either the Fuel Clad or RCS fission product barriers. EAL BASES DOCUMENT Rev. 0 Page 202 of 272

ATTACHMENT 1 EAL Bases DBNPS Basis: The combination of Containment spray pumps and Containment cooling fan units considered to be a full train of containment cooling operating per design is shown in Table F-3 (ref. 1). SFAS 2 actuation automatically initiates Containment Air Coolers upon exceeding the Containment pressure high setpoint of 18.7 psia or low RCS pressure of 1600 psig. SFAS Level 4 actuation automatically initiates Containment Spray upon exceeding the Containment pressure high-high setpoint of 40 (nominal) psia (ref. 2, 3). DBNPS Basis Reference(s):

1. UFSAR Section 6.2.2. Containment Vessel Heat Removal Systems
2. DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture
3. DBNPS Technical Specifications Table 3.3.5-1 Safety Features Actuation System Instrumentation
4. NEI 99-01 SU7 EAL BASES DOCUMENT Rev. 0 Page 203 of 272

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 9 - Hazardous Event Affecting SAFETY SYSTEMS Initiating Condition: Hazardous event affecting a SAFETY SYSTEM needed for the current operating mode EAL: SA9.1 Alert The occurrence of ANY Table S-5 Hazardous Event AND EITHER: z Event has caused indications of degraded performance in at least one train of a SAFETY SYSTEM required for the current operating mode z The event has caused VISIBLE DAMAGE to a SAFETY SYSTEM component or structure required for the current operating mode Table S-5 Hazardous Events z Seismic event (earthquake) z Internal or external FLOODING event z High winds or tornado strike z FIRE z EXPLOSION z Other events with similar hazard characteristics as determined by the Emergency Director Mode Applicability: 1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown NEI 99-01 Basis: This IC addresses a hazardous event that causes damage to a SAFETY SYSTEM, or a structure containing SAFETY SYSTEM components, needed for the current operating mode. This condition significantly reduces the margin to a loss or potential loss of a fission product barrier, and therefore represents an actual or potential substantial degradation of the level of safety of the plant. The first conditional addresses damage to a SAFETY SYSTEM train that is in service/operation since indications for it will be readily available. The indications of degraded performance should be significant enough to cause concern regarding the operability or reliability of the SAFETY SYSTEM train. EAL BASES DOCUMENT Rev. 0 Page 204 of 272

ATTACHMENT 1 EAL Bases The second conditional addresses damage to a SAFETY SYSTEM component that is not in service/operation or readily apparent through indications alone, or to a structure containing SAFETY SYSTEM components. Operators will make this determination based on the totality of available event and damage report information. This is intended to be a brief assessment not requiring lengthy analysis or quantification of the damage. Escalation of the emergency classification level would be via IC FS1 or RS1. DBNPS Basis:

  • Ground motion acceleration of 0.08g horizontal or 0.053g vertical is the Maximum Probable Earthquake as is considered generically as the Operating Basis Earthquake for DBNPS (ref. 8). Control room alarm indication of an earthquake greater than OBE is indicated on the seismic control panel (C5764A). RA-EP-02820 Earthquake provides the guidance for determining any required response actions if the OBE earthquake threshold is exceeded (ref. 1). The significance of seismic events is discussed under EAL HU2.1.
  • Internal FLOODING occurs from breaches of water systems that are located inside plant buildings and are connected to large water sources such as Intake Forebay or tanks (ref.

2).

  • External FLOODING may be due to high lake level. DBNPS flood emergency elevation is 578 ft. Site access would be limited to rail, boat or helicopter (ref. 3).
  • Seismic Category I structures are analyzed to withstand a sustained, design wind velocity of at least 90 mph. (ref. 4).
  • Areas containing functions and systems required for safe shutdown of the plant are identified by fire area in the fire abnormal procedure (ref. 5).
  • An EXPLOSION that degrades the performance of a SAFETY SYSTEM train or visibly damages a SAFETY SYSTEM component or structure would be classified under this EAL (ref. 6).

DBNPS Basis Reference(s):

1. RA-EP-02820 Earthquake
2. RA-EP-02880 Internal Flooding
3. RA-EP-02830 Flooding
4. DBNPS UFSAR Section 3.3.1 Wind Criteria
5. DB-OP-02501 Serious Station Fire
6. RA-EP-02840 Explosion
7. NEI 99-01 SA9
8. Updated FSAR Section 3.1 Seismic Design EAL BASES DOCUMENT Rev. 0 Page 205 of 272

ATTACHMENT 1 EAL Bases Category F - Fission Product Barrier Degradation EAL Group: Hot Conditions (RCS temperature > 200ºF); EALs in this category are applicable only in one or more hot operating modes. EALs in this category represent threats to the defense in depth design concept that precludes the release of highly radioactive fission products to the environment. This concept relies on multiple physical barriers any one of which, if maintained intact, precludes the release of significant amounts of radioactive fission products to the environment. The primary fission product barriers are: A. Fuel Clad (FC): The Fuel Clad Barrier consists of the cladding material that contains the fuel pellets. B. Reactor Coolant System (RCS): The RCS Barrier includes the RCS primary side and its connections up to and including the pressurizer safety and relief valves, and other connections up to and including the primary isolation valves. C. Containment (CT): The Containment Barrier includes the containment building, connections up to and including the outermost containment isolation valves. This barrier also includes the main steam, feedwater, and blowdown line extensions outside the containment building up to and including the outermost secondary side isolation valve. Containment Barrier thresholds are used as criteria for escalation of the ECL from Alert to a Site Area Emergency or a General Emergency. The EALs in this category require evaluation of the loss and potential loss thresholds listed in the fission product barrier matrix of Table F-1 (Attachment 2). Loss and Potential Loss signify the relative damage and threat of damage to the barrier. Loss means the barrier no longer assures containment of radioactive materials. Potential Loss means integrity of the barrier is threatened and could be lost if conditions continue to degrade. The number of barriers that are lost or potentially lost and the following criteria determine the appropriate emergency classification level: Alert: ANY loss or ANY potential loss of EITHER Fuel Clad or RCS Site Area Emergency: Loss or potential loss of ANY two barriers General Emergency: Loss of ANY two barriers AND loss or potential loss of third barrier The logic used for emergency classification based on fission product barrier monitoring should reflect the following considerations: EAL BASES DOCUMENT Rev. 0 Page 206 of 272

ATTACHMENT 1 EAL Bases

  • The Fuel Clad Barrier and the RCS Barrier are weighted more heavily than the Containment Barrier.
  • Unusual Event ICs associated with RCS and Fuel Clad Barriers are addressed under System Malfunction ICs.
  • For accident conditions involving a radiological release, evaluation of the FISSION PRODUCT BARRIER THRESHOLDS will need to be performed in conjunction with dose assessments to ensure correct and timely escalation of the emergency classification. For example, an evaluation of the FISSION PRODUCT BARRIER THRESHOLDS may result in a Site Area Emergency classification while a dose assessment may indicate that an EAL for General Emergency IC RG1 has been exceeded.
  • The FISSION PRODUCT BARRIER THRESHOLDS specified within a scheme reflect plant-specific DBNPS design and operating characteristics.
  • As used in this category, the term RCS leakage encompasses not just those types defined in Technical Specifications but also includes the loss of RCS mass to any location- inside the containment, an interfacing system, or outside of the containment.

The release of liquid or steam mass from the RCS due to the as-designed/expected operation of a relief valve is not considered RCS leakage.

  • At the Site Area Emergency level, EAL users should maintain cognizance of how far present conditions are from meeting a threshold that would require a General Emergency declaration. For example, if the Fuel Clad and RCS fission product barriers were both lost, then there should be frequent assessments of containment radioactive inventory and integrity. Alternatively, if both the Fuel Clad and RCS fission product barriers were potentially lost, the Emergency Director would have more assurance that there was no immediate need to escalate to a General Emergency.

EAL BASES DOCUMENT Rev. 0 Page 207 of 272

ATTACHMENT 1 EAL Bases Category: Fission Product Barrier Degradation Subcategory: N/A Initiating Condition: Loss of ANY two barriers AND Loss or Potential Loss of third barrier EAL: FG1.1 General Emergency Loss of ANY two barriers AND Loss or Potential Loss of third barrier (Table F-1) Mode Applicability: 1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown NEI 99-01 Basis: None DBNPS Basis: Fuel Clad, RCS and Containment comprise the fission product barriers. Table F-1 (Attachment 2) lists the FISSION PRODUCT BARRIER THRESHOLDS, bases and references. At the General Emergency classification level, each barrier is weighted equally. A General Emergency is therefore appropriate for ANY combination of the following conditions:

  • Loss of Fuel Clad, RCS and Containment barriers
  • Loss of Fuel Clad and RCS barriers with Potential Loss of Containment barrier
  • Loss of RCS and Containment barriers with Potential Loss of Fuel Clad barrier
  • Loss of Fuel Clad and Containment barriers with Potential Loss of RCS barrier DBNPS Basis Reference(s):
1. NEI 99-01 FG1 EAL BASES DOCUMENT Rev. 0 Page 208 of 272

ATTACHMENT 1 EAL Bases Category: Fission Product Barrier Degradation Subcategory: N/A Initiating Condition: Loss or Potential Loss of ANY two barriers EAL: FS1.1 Site Area Emergency Loss or Potential Loss of ANY two barriers (Table F-1) Mode Applicability: 1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown NEI 99-01 Basis: None DBNPS Basis: Fuel Clad, RCS and Containment comprise the fission product barriers. Table F-1 (Attachment 2) lists the FISSION PRODUCT BARRIER THRESHOLDS, bases and references. At the Site Area Emergency classification level, each barrier is weighted equally. A Site Area Emergency is therefore appropriate for ANY combination of the following conditions:

  • One barrier loss AND a second barrier loss (i.e., loss - loss)
  • One barrier loss AND a second barrier potential loss (i.e., loss - potential loss)
  • One barrier potential loss AND a second barrier potential loss (i.e., potential loss -

potential loss) At the Site Area Emergency classification level, the ability to assess the proximity of present conditions with respect to the threshold for a General Emergency is important. For example, the existence of Fuel Clad and RCS Barrier loss thresholds in addition to offsite dose assessments would require continual assessments of radioactive inventory and Containment integrity in anticipation of reaching a General Emergency classification. Alternatively, if both Fuel Clad and RCS potential loss thresholds existed, the Emergency Director would have greater assurance that escalation to a General Emergency is less IMMINENT. DBNPS Basis Reference(s):

1. NEI 99-01 FS1 EAL BASES DOCUMENT Rev. 0 Page 209 of 272

ATTACHMENT 1 EAL Bases Category: Fission Product Barrier Degradation Subcategory: N/A Initiating Condition: ANY Loss or ANY Potential Loss of EITHER Fuel Clad or RCS EAL: FA1.1 Alert ANY Loss or ANY Potential Loss of EITHER Fuel Clad or RCS (Table F-1) Mode Applicability: 1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown NEI 99-01 Basis: None DBNPS Basis: Fuel Clad, RCS and Containment comprise the fission product barriers. Table F-1 (Attachment 2) lists the FISSION PRODUCT BARRIER THRESHOLDS, bases and references. At the Alert classification level, Fuel Clad and RCS barriers are weighted more heavily than the Containment barrier. Unlike the Containment barrier, Loss or Potential Loss of either the Fuel Clad or RCS barrier may result in the relocation of radioactive materials or degradation of core cooling capability. Note that the loss or potential loss of Containment barrier in combination with loss or potential loss of either Fuel Clad or RCS barrier results in declaration of a Site Area Emergency under EAL FS1.1 DBNPS Basis Reference(s):

1. NEI 99-01 FA1 EAL BASES DOCUMENT Rev. 0 Page 210 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Introduction Table F-1 lists the threshold conditions that define the Loss and Potential Loss of the three fission product barriers (Fuel Clad, Reactor Coolant System, and Containment). The table is structured so that each of the three barriers occupies adjacent columns. Each fission product barrier column is further divided into two columns, one for Loss thresholds and one for Potential Loss thresholds. The first column of the table (to the left of the Fuel Clad Loss column) lists the categories (types) of FISSION PRODUCT BARRIER THRESHOLDS. The fission product barrier categories are: A. RCS or SG Tube Leakage B. Inadequate Heat removal C. CT Radiation / RCS Activity D. CT Integrity or Bypass E. Emergency Director Judgment Each category occupies a row in Table F-1 thus forming a matrix defined by the categories. The intersection of each row with each Loss/Potential Loss column forms a cell in which one or more FISSION PRODUCT BARRIER THRESHOLDS appear. If NEI 99-01 does not define a threshold for a barrier Loss/Potential Loss, the word None is entered in the cell. Thresholds are assigned sequential numbers within each Loss and Potential Loss column beginning with number one. In this manner, a threshold can be identified by its category title and number. For example, the first Fuel Clad barrier Loss in Category A would be assigned FC Loss A.1, the third Containment barrier Potential Loss in Category C would be assigned CT P-Loss C.3, etc. If a cell in Table F-1 contains more than one numbered threshold, each of the numbered thresholds, if exceeded, signifies a Loss or Potential Loss of the barrier. It is not necessary to exceed ALL of the thresholds in a category before declaring a barrier Loss/Potential Loss. Subdivision of Table F-1 by category facilitates association of plant conditions to the applicable fission product barrier Loss and Potential Loss thresholds. This structure promotes a systematic approach to assessing the classification status of the fission product barriers. When equipped with knowledge of plant conditions related to the fission product barriers, the EAL-user first scans down the category column of Table F-1, locates the likely category and then reads across the fission product barrier Loss and Potential Loss thresholds in that category to determine if a threshold has been exceeded. If a threshold has not been exceeded, the EAL-user proceeds to the next likely category and continues review of the thresholds in the new category. EAL BASES DOCUMENT Rev. 0 Page 211 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases If the EAL-user determines that ANY threshold has been exceeded, by definition, the barrier is lost or potentially lost - even if multiple thresholds in the same barrier column are exceeded; only that one barrier is lost or potentially lost. The EAL-user must examine each of the three fission product barriers to determine if other barrier thresholds in the category are lost or potentially lost. For example, if containment radiation is sufficiently high, a Loss of the Fuel Clad and RCS barriers and a Potential Loss of the Containment barrier can occur. Barrier Losses and Potential Losses are then applied to the algorithms given in EALs FG1.1, FS1.1, and FA1.1 to determine the appropriate emergency classification. In the remainder of this Attachment, the Fuel Clad barrier threshold bases appear first, followed by the RCS barrier and finally the Containment barrier threshold bases. In each barrier, the bases are given according category Loss followed by category Potential Loss beginning with Category A, then B E. EAL BASES DOCUMENT Rev. 0 Page 212 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Table F-1 Fission Product Barrier Threshold Matrix Fuel Clad (FC) Barrier Reactor Coolant System (RCS) Barrier Containment (CT) Barrier Category Loss Potential Loss Loss Potential Loss Loss Potential Loss

1. Operation of a standby Makeup
1. An automatic or manual ECCS Pump (>250 gpm) is required by (SFAS) actuation required by EITHER:

A EITHER:

  • UNISOLABLE RCS leakage 1. A leaking or RUPTURED SG is RCS or None None None
  • UNISOLABLE RCS FAULTED outside of containment SG Tube
  • SG tube leakage leakage Leakage OR
  • SG tube RUPTURE
2. PTS requirements invoked (SR5)
1. Calculated Clad Temperature in Region 2 or higher (DB-OP-02000 1. Calculated Clad Temperature in Figure 2) Region 3 or higher (DB-OP-02000 B 1. Loss of ALL feedwater
1. Calculated Clad Temperature Figure 2)

OR Inadequate in Region 3 or higher (DB- None AND None AND Heat OP-02000 Figure 2) 2. Loss of ALL feedwater SG Cooling is required Removal Restoration procedures not AND effective within 15 min. (Note 1) SG Cooling is required C 1. RE 4596A or B > Table F-2 column FC Loss (Note 9) CT 1. RE 4596A or B > Table F-2 1. RE 4596A or B > Table F-2 column OR None None None Radiation column RCS Loss (Note 9) CT Potential Loss (Note 9)

   / RCS   2. Dose equivalent I-131 coolant activity > 300 Ci/gm Activity
1. Containment isolation is required
1. Containment pressure > 50.4 psia AND EITHER:

OR

  • Containment integrity has been lost based on 2. Containment hydrogen D Emergency Director concentration > 4%

judgment CT None None None None OR Integrity

  • UNISOLABLE pathway from Containment to the environment 3. Containment pressure > 40 psia or Bypass with < one full train, exists Table F-3, of containment cooling OR operating per design for 15 min.

(Note 1)

2. Indications of RCS leakage outside of containment
1. ANY condition in the opinion of 1. ANY condition in the opinion of 1. ANY condition in the opinion of 1. ANY condition in the opinion of 1. ANY condition in the opinion of the E 1. ANY condition in the opinion of the the Emergency Director that the Emergency Director that the Emergency Director that the Emergency Director that Emergency Director that indicates Emergency Director that indicates ED indicates Loss of the Fuel Clad indicates Potential Loss of the indicates Loss of the RCS indicates Loss of the Potential Loss of the Containment Potential Loss of the RCS Barrier Judgment Barrier Fuel Clad Barrier Barrier Containment Barrier Barrier EAL BASES DOCUMENT Rev. 0 Page 213 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Table F-2 Containment Radiation - R/hr (RE 4596A or B) Time After S/D (Hrs.) RCS Loss FC Loss CT Potential Loss 0-1 1.50E+01 3.03E+03 1.40E+04 1-2 1.50E+01 2.56 E+03 1.18 E+04 2-8 1.50E+01 1.61 E+03 7.46 E+03 8-16 1.50E+01 1.14 E+03 5.28 E+03 16-24 1.50E+01 8.66 E+02 4.00 E+03

            >24                1.50E+01              3.94 E+02            1.82 E+03 Table F-3 Containment Cooling Full Train Spray                Coolers 2                     0 1                     1 0                     2 EAL BASES DOCUMENT                                               Rev. 0                         Page 214 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Fuel Clad Category: A. RCS or SG Tube Leakage Degradation Threat: Loss Threshold: None EAL BASES DOCUMENT Rev. 0 Page 215 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Fuel Clad Category: A. RCS or SG Tube Leakage Degradation Threat: Potential Loss Threshold: None EAL BASES DOCUMENT Rev. 0 Page 216 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Fuel Clad Category: B. Inadequate Heat Removal Degradation Threat: Loss Threshold:

1. Calculated Clad Temperature in Region 3 or higher (DB-OP-02000 Figure 2)

Basis: Generic This reading indicates temperatures within the core have caused significant superheating of reactor coolant. Plant-Specific Indication of severe core cooling degradation is manifested by Calculated Clad Temperature in Region 3 or higher (DB-OP-02000 Figure 2). Figure 2, Incore T/C Temperature vs. RCS Pressure for ICC, provides indication of how serious core conditions are based upon combinations of RCS pressure and incore thermocouple temperatures. If the RCS P-T point is in Region 3, the cladding temperatures in the core may be 1400°F or higher. This is a very serious condition and may lead to significant amounts of H2 production; core damage may be unavoidable as this represents a very serious inadequate core cooling condition (ref. 1, 2). WCAP-14969-A states, "Analyses performed for the WOG ERGs for indication of inadequate core cooling concluded that the temperature indicated by the core exit thermocouples, especially during transient heatup conditions, is always several hundred degrees lower than the fuel rod cladding temperatures. Thus, an indicated temperature of 1200°F can be translated to a peak cladding temperature on the order of 1400°F (ref. 4). DBNPS Basis Reference(s):

1. DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture
2. Bases and Deviation Document for DB-OP-02000
3. NEI 99-01 Inadequate Heat Removal Fuel Clad Loss 2.A
4. WCAP-14969-A, Westinghouse Owners Group Core Damage Assessment Guidance EAL BASES DOCUMENT Rev. 0 Page 217 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Fuel Clad Category: B. Inadequate Heat Removal Degradation Threat: Potential Loss Threshold:

1. Calculated Clad Temperature in Region 2 or higher (DB-OP-02000 Figure 2)

Basis: Generic This reading indicates a reduction in reactor vessel water level sufficient to allow the onset of heat-induced cladding damage. Plant-Specific The average incore thermocouple temperature and RCS pressure is used to determine whether Calculated Clad Temperature is in Region 2. This corresponds to a loss of RCS subcooling with clad temperatures remaining below the point where damage is immediately likely (Tclad approximately 900° to 1100° F). DBNPS Basis Reference(s):

1. DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture
2. Bases and Deviation Document for DB-OP-02000
3. NEI 99-01 Inadequate Heat Removal Fuel Clad Potential Loss 2.A EAL BASES DOCUMENT Rev. 0 Page 218 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Fuel Clad Category: B. Inadequate Heat Removal Degradation Threat: Potential Loss Threshold:

2. Loss of ALL feedwater AND SG cooling is required Basis:

Generic This condition indicates an extreme challenge to the ability to remove RCS heat using the steam generators (i.e., loss of an effective secondary-side heat sink). This condition represents a potential loss of the Fuel Clad Barrier. In accordance with EOPs, there may be unusual accident conditions during which operators intentionally reduce the heat removal capability of the steam generators; during these conditions, classification using threshold is not warranted. Plant-Specific In combination with RCS Potential Loss B.1, meeting this threshold would result in a Site Area Emergency. Loss of ALL feedwater cooling heat transfer capability when SG cooling is required indicates the ultimate heat sink function is under extreme challenge AND that the RCS barrier is also challenged (ref. 1). The phrase AND SG cooling is required precludes the need for classification for conditions in which RCS pressure is less than SG pressure. For large LOCA events inside the Containment, the SGs are moot because heat removal through the containment heat removal systems takes place. Therefore, SG cooling should not be required and, should not be assessed for EAL classification because a LOCA event alone should not require higher than an Alert classification (ref. 1, 2). DBNPS Basis Reference(s):

1. DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture
2. Bases and Deviation Document for DB-OP-02000
3. NEI 99-01 Inadequate Heat Removal Fuel Clad Loss 2.B EAL BASES DOCUMENT Rev. 0 Page 219 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Fuel Clad Category: C. CT Radiation / RCS Activity Degradation Threat: Loss Threshold:

1. RE 4596A or B > Table F-2 column FC Loss (Note 9)

Table F-2 Containment Radiation - R/hr (RE 4596A or B) Time After S/D (Hrs.) RCS Loss FC Loss CT Potential Loss 0-1 1.50E+01 3.03E+03 1.40E+04 1-2 1.50E+01 2.56 E+03 1.18 E+04 2-8 1.50E+01 1.61 E+03 7.46 E+03 8-16 1.50E+01 1.14 E+03 5.28 E+03 16-24 1.50E+01 8.66 E+02 4.00 E+03

                >24                       1.50E+01             3.94 E+02            1.82 E+03 Note 9:   During a main steam line break in containment or LOCA with temperature >170F, there is a potential to induce transient errors into the output of RE4596A and B during the peak rate of temperature change.

Consult alternate indications. If the main steam line break is accompanied by core damage this error is insignificant (ref. 4, 5, 6, 7, 8). Basis: Generic The radiation monitor reading corresponds to an instantaneous release of ALL reactor coolant mass into the containment, assuming that reactor coolant activity equals 300 Ci/gm dose equivalent I-131. Reactor coolant activity above this level is greater than that expected for iodine spikes and corresponds to an approximate range of 2% to 5% fuel clad damage. Since this condition indicates that a significant amount of fuel clad damage has occurred, it represents a loss of the Fuel Clad Barrier. The radiation monitor reading in this threshold is higher than that specified for RCS Barrier Loss threshold C.1 since it indicates a loss of both the Fuel Clad Barrier and the RCS Barrier. Note that a combination of the two monitor readings appropriately escalates the ECL to a Site Area Emergency. Plant-Specific The containment high range monitors, RE 4596A & B., monitor the gamma dose rate resulting from a postulated loss of coolant accident (LOCA). RE 4596A & B are located inside containment. The detector range is approximately 1 to 1E8 R/hr (logarithmic scale) (ref. 1). EAL BASES DOCUMENT Rev. 0 Page 220 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases The Table F-2 values, column FC Loss represents, based on Calculation EP-EALCALC-DB-0701, the expected containment high range radiation monitor (RE 4596A & B) response based on a LOCA, for periods of 1, 2, 8, 16, 24 and 48 (>24) hours after shutdown with ~4.33% fuel failure (ref. 2). When evaluating fission product barrier integrity values in Table F-2, time after shutdown should be confirmed with the Control Room as the time that the reactor is tripped, and reactor power is verified to be lowering on the Intermediate Range (ref. 3). If time after shutdown is less than one hour (or the reactor is still critical), the 0-1 hour after shutdown value should be chosen. This is conservative as it represents sufficient time for plant conditions to deteriorate to the point that core damage may occur, and the activity released from the RCS into the containment atmosphere to reach equilibrium mixing throughout containment. During a main steam line break in containment or LOCA with temperature > 170ºF, there is a potential to induce transient errors (positive and negative) into the output of RE4596A & B during the peak rate of temperature change. Consult alternate indications. If the main steam line break or LOCA is accompanied by core damage this error is, however, insignificant (ref. 4). DBNPS Basis Reference(s):

1. UFSAR Section 7.13.3.1 Containment High Radiation Monitors
2. EP-EALCALC-DB-0701 Containment Radiation Monitor Readings Following Clad Damage (FC2 and CT2 Potential Loss)
3. DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture
4. NRC Information Notice 97-45 Supplement 1 Environmental Qualification Deficiency for Cables and Containment Penetration Pigtails
5. Condition Report 09-53277, Containment High Range Rad Monitor Function and Current EALS
6. Condition Report 09-53278, Containment High Range Rad Monitor Function and NEI 99-01 EAL Submittal
7. Condition Report 07-31108, Potential for Thermally Induced Currents In Containment HRRM
8. Condition Report 09-55171, Containment High Range Rad Monitors Engineering Assistance Requested
9. NEI 99-01 CMT Radiation / RCS Activity Fuel Clad Loss 3.A EAL BASES DOCUMENT Rev. 0 Page 221 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Fuel Clad Category: C. CT Radiation / RCS Activity Degradation Threat: Loss Threshold:

2. Dose equivalent I-131 coolant activity > 300 Ci/gm Basis:

Generic This threshold indicates that RCS radioactivity concentration is greater than 300 Ci/gm dose equivalent I-131. Reactor coolant activity above this level is greater than that expected for iodine spikes and corresponds to an approximate range of 2% to 5% fuel clad damage. Since this condition indicates that a significant amount of fuel clad damage has occurred, it represents a loss of the Fuel Clad Barrier. Plant-Specific Elevated reactor coolant activity represents a potential degradation in the level of safety of the plant and a potential precursor of more serious problems. The threshold dose equivalent I-131 concentration is well above that expected for iodine spikes and corresponds to about 4.33% fuel clad damage. When reactor coolant activity reaches this level the Fuel Clad barrier is considered lost (ref. 1). There is no Potential Loss threshold associated with RCS Activity / Containment Radiation. DBNPS Basis Reference(s):

1. EP-EALCALC-DB-0701 Containment Radiation Monitor Readings Following Clad Damage (FC2 and CT2 Potential Loss)
2. NEI 99-01 CMT Radiation / RCS Activity Fuel Clad Loss 3.B EAL BASES DOCUMENT Rev. 0 Page 222 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Fuel Clad Category: C. CT Radiation / RCS Activity Degradation Threat: Potential Loss Threshold: None EAL BASES DOCUMENT Rev. 0 Page 223 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Fuel Clad Category: D. CT Integrity or Bypass Degradation Threat: Loss Threshold: None EAL BASES DOCUMENT Rev. 0 Page 224 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Fuel Clad Category: D. CT Integrity or Bypass Degradation Threat: Potential Loss Threshold: None EAL BASES DOCUMENT Rev. 0 Page 225 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Fuel Clad Category: E. Emergency Director Judgment Degradation Threat: Loss Threshold:

1. ANY condition in the opinion of the Emergency Director that indicates Loss of the Fuel Clad Barrier Basis:

Generic This threshold addresses any other factors that are to be used by the Emergency Director in determining whether the Fuel Clad Barrier is lost. Plant-Specific The Emergency Director judgment threshold addresses any other factors relevant to determining if the Fuel Clad barrier is lost. Such a determination should include imminent barrier degradation, barrier monitoring capability and dominant accident sequences.

  • Imminent barrier degradation exists if the degradation will likely occur within two hours based on a projection of current SAFETY SYSTEM performance. The term IMMINENT refers to recognition of the inability to reach safety acceptance criteria before completion of ALL checks.
  • Barrier monitoring capability is decreased if there is a loss or lack of reliable indicators.

This assessment should include instrumentation operability concerns, readings from portable instrumentation and consideration of offsite monitoring results.

  • Dominant accident sequences lead to degradation of ALL fission product barriers and likely entry to the EOPs. The Emergency Director should be mindful of the Loss of AC power (Station Blackout) and ATWS EALs to assure timely emergency classification declarations.

DBNPS Basis Reference(s):

1. NEI 99-01 Emergency Director Judgment Fuel Clad Loss 6.A EAL BASES DOCUMENT Rev. 0 Page 226 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Fuel Clad Category: E. Emergency Director Judgment Degradation Threat: Potential Loss Threshold:

1. ANY condition in the opinion of the Emergency Director that indicates Potential Loss of the Fuel Clad Barrier Basis:

Generic This threshold addresses any other factors that are to be used by the Emergency Director in determining whether the Fuel Clad Barrier is potentially lost. The Emergency Director should also consider whether or not to declare the barrier potentially lost in the event that barrier status cannot be monitored. Plant-Specific The Emergency Director judgment threshold addresses any other factors relevant to determining if the Fuel Clad barrier is potentially lost. Such a determination should include imminent barrier degradation, barrier monitoring capability and dominant accident sequences.

  • Imminent barrier degradation exists if the degradation will likely occur within two hours based on a projection of current SAFETY SYSTEM performance. The term IMMINENT refers to recognition of the inability to reach safety acceptance criteria before completion of ALL checks.
  • Barrier monitoring capability is decreased if there is a loss or lack of reliable indicators.

This assessment should include instrumentation operability concerns, readings from portable instrumentation and consideration of offsite monitoring results.

  • Dominant accident sequences lead to degradation of ALL fission product barriers and likely entry to the EOPs. The Emergency Director should be mindful of the Loss of AC power (Station Blackout) and ATWS EALs to assure timely emergency classification declarations.

DBNPS Basis Reference(s):

1. NEI 99-01 Emergency Director Judgment Potential Fuel Clad Loss 6.A EAL BASES DOCUMENT Rev. 0 Page 227 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Reactor Coolant System Category: A. RCS or SG Tube Leakage Degradation Threat: Loss Threshold:

1. An automatic or manual ECCS (SFAS) actuation required by EITHER:
  • UNISOLABLE RCS leakage
  • SG tube RUPTURE Basis:

Generic This threshold is based on an UNISOLABLE RCS leak of sufficient size to require an automatic or manual actuation of the Emergency Core Cooling System (ECCS). This condition clearly represents a loss of the RCS Barrier. This threshold is applicable to unidentified and pressure boundary leakage, as well as identified leakage. It is also applicable to UNISOLABLE RCS leakage through an interfacing system. The mass loss may be into any location - inside containment, to the secondary-side (i.e., steam generator tube leakage) or outside of containment. A steam generator with primary-to-secondary leakage of sufficient magnitude to require a safety injection is considered to be RUPTURED. If a RUPTURED steam generator is also FAULTED outside of containment, the declaration escalates to a Site Area Emergency since the Containment Barrier Loss threshold A.1 will also be met. Plant-Specific ECCS (SFAS) actuation is caused by (ref. 1):

  • Low RCS pressure
  • High Containment pressure DBNPS Basis Reference(s):
1. DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture
2. NEI 99-01 RCS or SG Tube Leakage Reactor Coolant System Loss 1.A EAL BASES DOCUMENT Rev. 0 Page 228 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Reactor Coolant System Category: A. RCS or SG Tube Leakage Degradation Threat: Potential Loss Threshold:

1. Operation of a standby Makeup Pump is required (> 250 gpm) by EITHER:
  • UNISOLABLE RCS leakage
  • SG tube leakage Basis:

Generic This threshold is based on an UNISOLABLE RCS leak that results in the inability to maintain pressurizer level within specified limits by operation of a normally used charging (makeup) pump, but an ECCS (SI) actuation has not occurred. The threshold is met when an operating procedure, or operating crew supervision, directs that a standby charging (makeup) pump be placed in service to restore and maintain pressurizer level. This threshold is applicable to unidentified and pressure boundary leakage, as well as identified leakage. It is also applicable to UNISOLABLE RCS leakage through an interfacing system. The mass loss may be into any location - inside containment, to the secondary-side (i.e., steam generator tube leakage) or outside of containment. If a leaking steam generator is also FAULTED outside of containment, the declaration escalates to a Site Area Emergency since the Containment Barrier Loss threshold 1.A will also be met. Plant-Specific The Makeup and Purification System includes two centrifugal makeup pumps, which take suction from the Makeup Tank, and return cooled, purified reactor coolant to the RCS. One of the two makeup pumps handles normal charging flow. Makeup pump capacity of a single makeup injection line is ~250 gpm. A second makeup pump being required is indicative of a substantial RCS leak (ref. 1, 2). DBNPS Basis Reference(s):

1. UFSAR Table 9.3-8 Makeup and Purification System Component Data
2. DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture
3. NEI 99-01 RCS or SG Tube Leakage Reactor Coolant System Potential Loss 1.A EAL BASES DOCUMENT Rev. 0 Page 229 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Reactor Coolant System Category: A. RCS or SG Tube Leakage Degradation Threat: Potential Loss Threshold:

2. PTS requirements invoked (SR5)

Basis: Generic This condition indicates an extreme challenge to the integrity of the RCS pressure boundary due to pressurized thermal shock - a transient that causes rapid RCS cooldown while the RCS is in Mode 3 or higher (i.e., hot and pressurized). Plant-Specific With an extended overcooling, thermal shock becomes a concern. Pressurized Thermal Shock (PTS) limits must be invoked if the criteria specified in Specific Rule 5 are met. The RCS pressure must be controlled to ensure that PTS limits are not violated. This requires action on the part of the operator to control RCS pressure and temperature (ref. 1). The "Potential Loss" threshold is defined by the PTS limits as specified in DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture Specific Rule 5 being invoked. This indicates an extreme challenge to the RCS barrier (ref. 1, 2). DBNPS Basis Reference(s):

1. DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture
2. Bases and Deviation Document for DB-OP-02000
3. NEI 99-01 RCS or SG Tube Leakage Reactor Coolant System Potential Loss 1.B EAL BASES DOCUMENT Rev. 0 Page 230 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Reactor Coolant System Category: B. Inadequate Heat Removal Degradation Threat: Loss Threshold: None EAL BASES DOCUMENT Rev. 0 Page 231 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Reactor Coolant System Category: B. Inadequate Heat Removal Degradation Threat: Potential Loss Threshold:

1. Loss of ALL feedwater AND SG cooling is required Basis:

Generic This condition indicates an extreme challenge to the ability to remove RCS heat using the steam generators (i.e., loss of an effective secondary-side heat sink). This condition represents a potential loss of the RCS Barrier. In accordance with EOPs, there may be unusual accident conditions during which operators intentionally reduce the heat removal capability of the steam generators; during these conditions, classification using threshold is not warranted. Meeting this threshold results in a Site Area Emergency because this threshold is identical to Fuel Clad Barrier Potential Loss threshold B.2; both will be met. This condition warrants a Site Area Emergency declaration because inadequate RCS heat removal may result in fuel heat-up sufficient to damage the cladding and increase RCS pressure to the point where mass will be lost from the system. Plant-Specific In combination with FC Potential Loss B.2, meeting this threshold results in a Site Area Emergency. Loss of ALL feedwater cooling heat transfer capability when SG cooling is required indicates the ultimate heat sink function is under extreme challenge and that the RCS barrier is also challenged (ref. 1). The phrase AND SG cooling required precludes the need for classification for conditions in which RCS pressure is less than SG pressure. For large LOCA events inside the Containment, the SGs are moot because heat removal through the containment heat removal systems takes place. Therefore, SG cooling should not be required and, should not be assessed for EAL classification because a LOCA event alone should not require higher than an Alert classification (ref. 1, 2). EAL BASES DOCUMENT Rev. 0 Page 232 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases DBNPS Basis Reference(s):

1. DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture
2. Bases and Deviation Document for DB-OP-02000
3. NEI 99-01 Inadequate Heat Removal RCS Loss 2.B EAL BASES DOCUMENT Rev. 0 Page 233 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Reactor Coolant System Category: C. CT Radiation/ RCS Activity Degradation Threat: Loss Threshold:

1. RE 4596A or B > Table F-2 column RCS Loss (Note 9)

Table F-2 Containment Radiation - R/hr (RE 4596A or B) Time After S/D (Hrs.) RCS Loss FC Loss CT Potential Loss 0-1 1.50E+01 3.03E+03 1.40E+04 1-2 1.50E+01 2.56 E+03 1.18 E+04 2-8 1.50E+01 1.61 E+03 7.46 E+03 8-16 1.50E+01 1.14 E+03 5.28 E+03 16-24 1.50E+01 8.66 E+02 4.00 E+03

                >24                       1.50E+01             3.94 E+02            1.82 E+03 Note 9:   During a main steam line break in containment or LOCA with temperature >170F, there is a potential to induce transient errors into the output of RE4596A and B during the peak rate of temperature change.

Consult alternate indications. If the main steam line break is accompanied by core damage this error is insignificant (ref. 5, 6, 7, 8, 9). Basis: Generic The radiation monitor reading corresponds to an instantaneous release of ALL reactor coolant mass into the containment, assuming that reactor coolant activity equals Technical Specification allowable limits. This value is lower than that specified for Fuel Clad Barrier Loss threshold C.1 since it indicates a loss of the RCS Barrier only. There is no Potential Loss threshold associated with RCS Activity / Containment Radiation. Plant-Specific The containment high range monitors, RE 4596A & B., monitor the gamma dose rate resulting from a postulated loss of coolant accident (LOCA). RE 4596A & B are located inside containment. The detector range is approximately 1 to 1E8 R/hr (logarithmic scale) (ref. 1). The Table F-2 values, column RCS Loss represents, based on Calculation EP-EALCALC-DB-0702, the expected containment high range radiation monitor (RE 4596A & B) response based on a LOCA, using the USAR maximum RCS activity (no core damage) (ref. 2, 3). EAL BASES DOCUMENT Rev. 0 Page 234 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases During a main steam line break in containment or LOCA with temperature > 170ºF, there is a potential to induce transient errors (positive and negative) into the output of RE4596A & B during the peak rate of temperature change. Consult alternate indications. If the main steam line break or LOCA is accompanied by core damage this error is, however, insignificant (ref. 5). Since fuel cladding degradation and/or failures could also result in high Containment Area Radiation levels, a reading of >15 R/hr may be obtained without a physical loss of the RCS barrier. However, this threshold should be declared as being met if the Containment Area Radiation levels are >15 R/hr even if there are no other indications of a RCS leak or physical loss. In this case it would also be prudent to evaluate the fuel clad FISSION PRODUCT BARRIER THRESHOLDS. DBNPS Basis Reference(s):

1. UFSAR Section 7.13.3.1 Containment High Radiation Monitors
2. EP-EALCALC-DB-0702 Containment Radiation Monitor Readings Following a LOCA (RC2 Loss)
3. USAR Table 15A-4 Maximum Fission Product Activity in Reactor Coolant
4. DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture
5. NRC Information Notice 97-45 Supplement 1 Environmental Qualification Deficiency for Cables and Containment Penetration Pigtails
6. Condition Report 09-53277, Containment High Range Rad Monitor Function and Current EALS
7. Condition Report 09-53278, Containment High Range Rad Monitor Function and NEI 99-01 EAL Submittal
8. Condition Report 07-31108, Potential for Thermally Induced Currents In Containment HRRM
9. Condition Report 09-55171, Containment High Range Rad Monitors Engineering Assistance Requested
10. NEI 99-01 CMT Radiation / RCS Activity RCS Loss 3.A EAL BASES DOCUMENT Rev. 0 Page 235 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Reactor Coolant System Category: B. CT Radiation/ RCS Activity Degradation Threat: Potential Loss Threshold: None EAL BASES DOCUMENT Rev. 0 Page 236 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Reactor Coolant System Category: D. CT Integrity or Bypass Degradation Threat: Loss Threshold: None EAL BASES DOCUMENT Rev. 0 Page 237 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Reactor Coolant System Category: D. CT Integrity or Bypass Degradation Threat: Potential Loss Threshold: None EAL BASES DOCUMENT Rev. 0 Page 238 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Reactor Coolant System Category: E. Emergency Director Judgment Degradation Threat: Loss Threshold:

1. ANY condition in the opinion of the Emergency Director that indicates Loss of the RCS Barrier Basis:

Generic This threshold addresses any other factors that may be used by the Emergency Director in determining whether the RCS Barrier is lost. Plant-Specific The Emergency Director judgment threshold addresses any other factors relevant to determining if the RCS Barrier is lost. Such a determination should include imminent barrier degradation, barrier monitoring capability and dominant accident sequences.

  • Imminent barrier degradation exists if the degradation will likely occur within two hours based on a projection of current SAFETY SYSTEM performance. The term IMMINENT refers to the recognition of the inability to reach safety acceptance criteria before completion of ALL checks.
  • Barrier monitoring capability is decreased if there is a loss or lack of reliable indicators.

This assessment should include instrumentation operability concerns, readings from portable instrumentation and consideration of offsite monitoring results.

  • Dominant accident sequences lead to degradation of ALL fission product barriers and likely entry to the EOPs. The Emergency Director should be mindful of the Loss of AC power (Station Blackout) and ATWS EALs to assure timely emergency classification declarations.

DBNPS Basis Reference(s):

1. NEI 99-01 Emergency Director Judgment RCS Loss 6.A EAL BASES DOCUMENT Rev. 0 Page 239 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Reactor Coolant System Category: E. Emergency Director Judgment Degradation Threat: Potential Loss Threshold:

1. ANY condition in the opinion of the Emergency Director that indicates Potential Loss of the RCS Barrier Basis:

Generic This threshold addresses any other factors that may be used by the Emergency Director in determining whether the RCS Barrier is potentially lost. The Emergency Director should also consider whether or not to declare the barrier potentially lost in the event that barrier status cannot be monitored. Plant-Specific The Emergency Director judgment threshold addresses any other factors relevant to determining if the RCS Barrier is potentially lost. Such a determination should include imminent barrier degradation, barrier monitoring capability and dominant accident sequences.

  • Imminent barrier degradation exists if the degradation will likely occur within two hours based on a projection of current SAFETY SYSTEM performance. The term IMMINENT refers to the inability to reach final safety acceptance criteria before completing ALL checks.
  • Barrier monitoring capability is decreased if there is a loss or lack of reliable indicators.

This assessment should include instrumentation operability concerns, readings from portable instrumentation and consideration of offsite monitoring results.

  • Dominant accident sequences lead to degradation of ALL fission product barriers and likely entry to the EOPs. The Emergency Director should be mindful of the Loss of AC power (Station Blackout) and ATWS EALs to assure timely emergency classification declarations.

DBNPS Basis Reference(s):

1. NEI 99-01 Emergency Director Judgment RCS Potential Loss 6.A EAL BASES DOCUMENT Rev. 0 Page 240 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Containment Category: A. RCS or SG Tube Leakage Degradation Threat: Loss Threshold:

1. A leaking or RUPTURED SG is FAULTED outside of Containment Basis:

Generic This threshold addresses a leaking or RUPTURED Steam Generator (SG) that is also FAULTED outside of containment. The condition of the SG, whether leaking or RUPTURED, is determined in accordance with the thresholds for RCS Barrier Potential Loss A.1 and Loss A.1, respectively. This condition represents a bypass of the containment barrier. FAULTED is a defined term within the NEI 99-01 methodology; this determination is not necessarily dependent upon entry into, or diagnostic steps within, an EOP. For example, if the pressure in a steam generator is decreasing uncontrollably (part of the FAULTED definition) and the FAULTED steam generator isolation procedure is not entered because EOP user rules are dictating implementation of another procedure to address a higher priority condition; the steam generator is still considered FAULTED for emergency classification purposes. The FAULTED criterion establishes an appropriate lower bound on the size of a steam release that may require an emergency classification. Steam releases of this size are readily observable with normal Control Room indications. The lower bound for this aspect of the containment barrier is analogous to the lower bound criteria specified in IC SU4 for the fuel clad barrier (i.e., RCS activity values) and IC SU5 for the RCS barrier (i.e., RCS leak rate values). This threshold also applies to prolonged steam releases necessitated by operational considerations such as the forced steaming of a leaking or RUPTURED steam generator directly to atmosphere to cooldown the plant, or to drive an auxiliary (emergency) feed water pump. These types of conditions will result in a significant and sustained release of radioactive steam to the environment (and are thus similar to a FAULTED condition). The inability to isolate the steam flow without an adverse effect on plant cooldown meets the intent of a loss of containment. Steam releases associated with the expected operation of a SG power operated relief valve or safety relief valve do not meet the intent of this threshold. Such releases may occur intermittently for a short period of time following a reactor trip as operators process through emergency operating procedures to bring the plant to a stable condition and prepare to initiate a plant cooldown. Steam releases associated with the unexpected operation of a valve (e.g., a stuck-open safety valve) do meet this threshold. EAL BASES DOCUMENT Rev. 0 Page 241 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Following an SG tube leak or rupture, there may be minor radiological releases through a secondary-side system component (e.g., air ejectors, glad seal exhausters, valve packing, etc.). These types of releases do not constitute a loss or potential loss of containment but should be evaluated using the Recognition Category R ICs. The ECLs resulting from primary-to-secondary leakage, with or without a steam release from the FAULTED SG, are summarized below. Affected SG is FAULTED Outside of Containment? P-to-S Leak Rate Yes No Less than or equal to 10 gpm No classification No classification Greater than 10 gpm for 15 Unusual Event per SU5 Unusual Event per SU5 minutes or longer Requires operation of a standby Site Area Emergency per charging (makeup) pump (RCS Alert per FA1 FS1 Barrier Potential Loss) Requires an automatic or manual Site Area Emergency per ECCS (SI) actuation (RCS Barrier Alert per FA1 FS1 Loss) There is no Potential Loss threshold associated with RCS or SG Tube Leakage. Plant-Specific None DBNPS Basis Reference(s):

1. DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture
2. NEI 99-01 RCS or SG Tube Leakage Containment Loss 1.A EAL BASES DOCUMENT Rev. 0 Page 242 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Containment Category: A. RCS or SG Tube Leakage Degradation Threat: Potential Loss Threshold: None EAL BASES DOCUMENT Rev. 0 Page 243 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Containment Category: B. Inadequate heat Removal Degradation Threat: Loss Threshold: None EAL BASES DOCUMENT Rev. 0 Page 244 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Containment Category: B. Inadequate heat Removal Degradation Threat: Potential Loss Threshold:

1. Calculated Clad Temperature in Region 3 or higher (DB-OP-02000 Figure 2)

AND Restoration procedures not effective within 15 min. (Note 1) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Basis: Generic This condition represents an IMMINENT core melt sequence, which, if not corrected, could lead to vessel failure and an increased potential for containment failure. For this condition to occur there must already have been a loss of the RCS Barrier AND the Fuel Clad Barrier. If implementation of a procedure(s) to restore adequate core cooling is not effective (successful) within 15 minutes, it is assumed that the event trajectory will likely lead to core melting and a subsequent challenge of the Containment Barrier. The restoration procedure is considered effective if core exit thermocouple readings are decreasing and/or if reactor vessel level is increasing. Whether or not the procedure(s) will be effective should be apparent within 15 minutes. The Emergency Director should escalate the emergency classification level as soon as it is determined that the procedure(s) will not be effective. Severe accident analyses (e.g., NUREG-1150) have concluded that function restoration procedures can arrest core degradation in a significant fraction of core damage scenarios, and that the likelihood of containment failure is very small in these events. Given this, it is appropriate to provide 15 minutes beyond the required entry point to determine if procedural actions can reverse the core melt sequence. Plant-Specific Indication of severe core cooling degradation is manifested by Calculated Clad Temperature in Region 3 (DB-OP-02000 Figure 2). Figure 2, Incore T/C Temperature vs. RCS Pressure for ICC, provides indication of how serious core conditions are based upon combinations of RCS pressure AND incore thermocouple temperatures. If the RCS P-T point is in Region 3, the cladding temperatures in the core may be 1400°F or higher. This is a very serious condition EAL BASES DOCUMENT Rev. 0 Page 245 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases and may lead to significant amounts of H2 production; core damage may be unavoidable as this represents a very serious inadequate core cooling condition (ref. 1, 2). The function restoration procedures are those emergency operating procedures that address the recovery of core cooling functions. The procedure is considered effective if the clad temperature is decreasing or if RCS water level is increasing (ref. 1, 2). DBNPS Basis Reference(s):

1. DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture
2. Bases and Deviation Document for DB-OP-02000
3. NEI 99-01 Inadequate Heat Removal Containment Potential Loss 2.A EAL BASES DOCUMENT Rev. 0 Page 246 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Containment Category: C. CT Radiation/RCS Activity Degradation Threat: Loss Threshold: None EAL BASES DOCUMENT Rev. 0 Page 247 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Containment Category: C. CT Radiation/RCS Activity Degradation Threat: Potential Loss Threshold:

1. RE 4596A or B > Table F-2 column CT Potential Loss (Note 9)

Table F-2 Containment Radiation - R/hr (RE 4596A or B) Time After S/D (Hrs.) RCS Loss FC Loss CT Potential Loss 0-1 1.50E+01 3.03E+03 1.40E+04 1-2 1.50E+01 2.56 E+03 1.18 E+04 2-8 1.50E+01 1.61 E+03 7.46 E+03 8-16 1.50E+01 1.14 E+03 5.28 E+03 16-24 1.50E+01 8.66 E+02 4.00 E+03

                >24                    1.50E+01                3.94 E+02            1.82 E+03 Note 9:   During a main steam line break in containment or LOCA with temperature >170F, there is a potential to induce transient errors into the output of RE4596A and B during the peak rate of temperature change.

Consult alternate indications. If the main steam line break is accompanied by core damage, this error is insignificant. Basis: Generic The radiation monitor reading corresponds to an instantaneous release of ALL reactor coolant mass into the containment, assuming that 20% of the fuel cladding has failed. This level of fuel clad failure is well above that used to determine the analogous Fuel Clad Barrier Loss and RCS Barrier Loss thresholds. NUREG-1228, Source Estimations During Incident Response to Severe Nuclear Power Plant Accidents, indicates the fuel clad failure must be greater than approximately 20% in order for there to be a major release of radioactivity requiring offsite protective actions. For this condition to exist there must already have been a loss of the RCS Barrier and the Fuel Clad Barrier. It is therefore prudent to treat this condition as a potential loss of containment, which would then escalate the ECL to a General Emergency. Plant-Specific The containment high range monitors, RE 4596A & B., monitor the gamma dose rate resulting from a postulated loss of coolant accident (LOCA). RE 4596A & B are located inside containment. The detector range is approximately 1 to 1E8 R/hr (logarithmic scale) (ref. 1). EAL BASES DOCUMENT Rev. 0 Page 248 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases The Table F-2 values, column CT Potential Loss represents, based on Calculation EP-EALCALC-DB-0701, the expected containment high range radiation monitor (RE 4596A & B) response based on a LOCA, for periods of 1, 2, 8, 16, 24 and 48 (>24) hours after shutdown with ~20% fuel failure (ref. 2). When evaluating fission product barrier integrity values in Table F-2, time after shutdown should be confirmed with the Control Room as the time that the reactor is tripped, and reactor power is verified to be lowering on the Intermediate Range (ref. 3). If time after shutdown is less than one hour (or the reactor is still critical), the 0-1 hour after shutdown value should be chosen. This is conservative as it represents sufficient time for plant conditions to deteriorate to the point that core damage may occur, and the activity released from the RCS into the containment atmosphere to reach equilibrium mixing throughout containment. During a main steam line break in containment or LOCA with temperature > 170ºF, there is a potential to induce transient errors (positive and negative) into the output of RE4596A & B during the peak rate of temperature change. Consult alternate indications. If the main steam line break or LOCA is accompanied by core damage this error is, however, insignificant (ref. 4). DBNPS Basis Reference(s):

1. UFSAR Section 7.13.3.1 Containment High Radiation Monitors
2. EP-EALCALC-DB-0701 Containment Radiation Monitor Readings Following Clad Damage (FC2 and CT2 Potential Loss)
3. DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture
4. NRC Information Notice 97-45 Supplement 1 Environmental Qualification Deficiency for Cables and Containment Penetration Pigtails
5. NEI 99-01 CMT Radiation / RCS Activity Containment Potential Loss 3.A EAL BASES DOCUMENT Rev. 0 Page 249 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Containment Category: D. CT Integrity or Bypass Degradation Threat: Loss Threshold:

1. Containment isolation is required AND EITHER:
  • Containment integrity has been lost based on Emergency Director judgment
  • UNISOLABLE pathway from Containment to the environment exists Basis:

Generic These thresholds address a situation where containment isolation is required and one of two conditions exists as discussed below. Users are reminded that there may be accident and release conditions that simultaneously meet both bulleted thresholds. First Threshold - Containment integrity has been lost, i.e., the actual containment atmospheric leak rate likely exceeds that associated with allowable leakage (or sometimes referred to as design leakage). Following the release of RCS mass into containment, containment pressure will fluctuate based on a variety of factors; a loss of containment integrity condition may (or may not) be accompanied by a noticeable drop in containment pressure. Recognizing the inherent difficulties in determining a containment leak rate during accident conditions, it is expected that the Emergency Director will assess this threshold using judgment, and with due consideration given to current plant conditions, and available operational and radiological data (e.g., containment pressure, readings on radiation monitors outside containment, operating status of containment pressure control equipment, etc.). Refer to the middle piping run of Figure 1. Two simplified examples are provided. One is leakage from a penetration and the other is leakage from an in-service system valve. Depending upon radiation monitor locations and sensitivities, the leakage could be detected by any of the four monitors depicted in the figure. Another example would be a loss or potential loss of the RCS barrier, and the simultaneous occurrence of two FAULTED locations on a steam generator where one fault is located inside containment (e.g., on a steam or feedwater line) and the other outside of containment. In this case, the associated steam line provides a pathway for the containment atmosphere to escape to an area outside the containment. Following the leakage of RCS mass into containment and a rise in containment pressure, there may be minor radiological releases associated with allowable (design) containment EAL BASES DOCUMENT Rev. 0 Page 250 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases leakage through various penetrations or system components. These releases do not constitute a loss or potential loss of containment but should be evaluated using the Recognition Category R ICs. Second Threshold - Conditions are such that there is an UNISOLABLE pathway for the migration of radioactive material from the containment atmosphere to the environment. As used here, the term environment includes the atmosphere of a room or area, outside the containment, that may, in turn, communicate with the outside-the-plant atmosphere (e.g., through discharge of a ventilation system or atmospheric leakage). Depending upon a variety of factors, this condition may or may not be accompanied by a noticeable drop in containment pressure. Refer to the top piping run of Figure 1. In this simplified example, the inboard and outboard isolation valves remained open after a containment isolation was required (i.e., containment isolation was not successful). There is now an UNISOLABLE pathway from the containment to the environment. The existence of a filter is not considered in the threshold assessment. Filters do not remove fission product noble gases. In addition, a filter could become ineffective due to iodine and/or particulate loading beyond design limits (i.e., retention ability has been exceeded) or water saturation from steam/high humidity in the release stream. Leakage between two interfacing liquid systems, by itself, does not meet this threshold. Refer to the bottom piping run of Figure 1. In this simplified example, leakage in an RCP seal cooler is allowing radioactive material to enter the Auxiliary Building. The radioactivity would be detected by the Process Monitor. If there is no leakage from the closed water cooling system to the Auxiliary Building, then no threshold has been met. If the pump developed a leak that allowed steam/water to enter the Auxiliary Building, then second threshold would be met. Depending upon radiation monitor locations and sensitivities, this leakage could be detected by any of the four monitors depicted in the figure and cause the first threshold to be met as well. Following the leakage of RCS mass into containment and a rise in containment pressure, there may be minor radiological releases associated with allowable containment leakage through various penetrations or system components. Minor releases may also occur if a containment isolation valve(s) fails to close but the containment atmosphere escapes to an enclosed system. These releases do not constitute a loss or potential loss of containment but should be evaluated using the Recognition Category R ICs. The status of the containment barrier during an event involving steam generator tube leakage is assessed using Loss Threshold A.1. Plant-Specific None EAL BASES DOCUMENT Rev. 0 Page 251 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases DBNPS Basis Reference(s):

1. NEI 99-01 CMT Integrity or Bypass Containment Loss 4.A EAL BASES DOCUMENT Rev. 0 Page 252 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Containment Category: D. CT Integrity or Bypass Degradation Threat: Loss Threshold:

2. Indications of RCS leakage outside of Containment Basis:

Generic Containment sump level, temperature, pressure and/or radiation levels will increase if reactor coolant mass is leaking into the containment. If these parameters have not increased, then the reactor coolant mass may be leaking outside of containment (i.e., a containment bypass sequence). Increases in sump level, temperature, pressure, flow and/or radiation level readings outside of the containment may indicate that the RCS mass is being lost outside of containment. Unexpected elevated readings and alarms on radiation monitors with detectors outside containment should be corroborated with other available indications to confirm that the source is a loss of RCS mass outside of containment. If the fuel clad barrier has not been lost, radiation monitor readings outside of containment may not increase significantly; however, other unexpected changes in sump levels, area temperatures or pressures, flow rates, etc. should be sufficient to determine if RCS mass is being lost outside of the containment. Refer to the middle piping run of Figure 1. In this simplified example, a leak has occurred at a reducer on a pipe carrying reactor coolant in the Auxiliary Building. Depending upon radiation monitor locations and sensitivities, the leakage could be detected by any of the four monitors depicted in the figure and cause threshold D.1 to be met as well. To ensure proper escalation of the emergency classification, the RCS leakage outside of containment must be related to the mass loss that is causing the RCS Loss and/or Potential Loss threshold A.1 to be met. Plant-Specific Potential RCS leak pathways outside containment include (ref. 1, 2):

  • Decay Heat Removal
  • ECCS (Safety Injection)
  • Makeup and Purification
  • RC pump seals
  • RCS sample lines
  • RCS drain lines EAL BASES DOCUMENT Rev. 0 Page 253 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases DBNPS Basis Reference(s):

1. UFSAR Section 5.2.4.7 Leakage Identification
2. DB-OP-02522 Small RCS Leaks
3. NEI 99-01 CMT Integrity or Bypass Containment Loss EAL BASES DOCUMENT Rev. 0 Page 254 of 272

m w a m a o I o o c 9tril (o

             =

o a g) @6: (, o o o E 5.o dI m 6- o ='o z-t A) f - o q)

                   /x F

A) A' o (o o (D lt (fr o o u. trf 6T Jo o-o= o:4

x. =w F' og)
                                  ='   =-.

E. 4 A

                                  == 3=

(of

                                  =

ff;

                                       <O T-E e+

o = m =. Etr f D-{ o o o

                          - f     -

FI\)

                                  @o L-E8 P

d6E ltr =' iDP 3d_

                                  =rE iiB o

a q) (o o lU (t (tl o

 +

N)

 \

N)

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Containment Category: D. CT Integrity or Bypass Degradation Threat: Potential Loss Threshold:

1. Containment pressure > 50.4 psia Basis:

Generic If containment pressure exceeds the design pressure, there exists a potential to lose the Containment Barrier. To reach this level, there must be an inadequate core cooling condition for an extended period of time; therefore, the RCS and Fuel Clad barriers would already be lost. Thus, this threshold is a discriminator between a Site Area Emergency and General Emergency since there is now a potential to lose the third barrier. Plant-Specific 50.4 psia (36 psig + elevation adjusted atmospheric pressure of 14.4 psia) is based on the containment design pressure (ref.1). DBNPS Basis Reference(s):

1. UFSAR Section 3.8.2.1 Containment Vessel
2. NEI 99-01 CMT Integrity or Bypass Containment Potential Loss 4.A EAL BASES DOCUMENT Rev. 0 Page 256 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Containment Category: D. CMT Integrity or Bypass Degradation Threat: Potential Loss Threshold:

2. Containment Hydrogen concentration > 4%

Basis: Generic The existence of an explosive mixture means, at a minimum, that the containment atmospheric hydrogen concentration is sufficient to support a hydrogen burn (i.e., at the lower deflagration limit). A hydrogen burn will raise containment pressure and could result in collateral equipment damage leading to a loss of containment integrity. It therefore represents a potential loss of the Containment Barrier. Plant-Specific Following a design basis accident, hydrogen gas may be generated inside the containment by reactions such as zirconium metal with water, corrosion of materials of construction and radiolysis of aqueous solution in the core and sump (ref. 1). The Containment Hydrogen Monitoring System is used to monitor the hydrogen concentration inside containment after a severe accident involving core damage. The containment hydrogen monitors (AI 5027 & AI 5028) are not required to be operated in the continuous mode, however, the system is required to be started up 30 minutes after containment sprays have been initiated (ref. 2). The lower limit for the occurrence of an in-containment hydrogen burn is approximately 4% (ref. 1). To generate such levels of combustible gas, loss of the Fuel Clad and RCS barriers must have occurred. With the Potential Loss of the containment barrier, the threshold hydrogen concentration, therefore, will likely warrant declaration of a General Emergency. DBNPS Basis Reference(s):

1. DBSAMG-TBD Davis-Besse Severe Accident Management Guidelines Technical Bases Document
2. UFSAR Section 7.13.3.4 Containment Hydrogen Monitors
3. NEI 99-01 CMT Integrity or Bypass Containment Potential Loss 4.B EAL BASES DOCUMENT Rev. 0 Page 257 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Containment Category: D. CMT Integrity or Bypass Degradation Threat: Potential Loss Threshold:

3. Containment pressure > 40 psia with < one full train of containment cooling, Table F-3, operating per design for 15 min. (Note 1)

Table F-3 Containment Cooling Full Train CT Spray Pumps CT Cooling Fans 2 0 1 1 0 2 Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Basis: Generic This threshold describes a condition where containment pressure is greater than the setpoint at which containment energy (heat) removal systems are designed to automatically actuate, and less than one full train of equipment is capable of operating per design. The 15-minute criterion is included to allow operators time to manually start equipment that may not have automatically started, if possible. This threshold represents a potential loss of containment in that containment heat removal/depressurization systems (e.g., containment sprays, ice condenser fans, etc., but not including containment venting strategies) are either lost or performing in a degraded manner. Plant-Specific The combination of Containment spray pumps and Containment cooling fan units considered to be a full train of containment cooling operating per design is shown in Table F-3 (ref. 1). SFAS 2 actuation automatically initiates Containment Air Coolers upon exceeding the Containment pressure high setpoint of 18.7 psia or low RCS pressure of 1600 psig. SFAS Level 4 actuation automatically initiates Containment Spray upon exceeding the Containment pressure high-high setpoint of 40 (nominal) psia (ref. 2, 3). EAL BASES DOCUMENT Rev. 0 Page 258 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases DBNPS Basis Reference(s):

1. UFSAR Section 6.2.2. Containment Vessel Heat Removal Systems
2. DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture
3. DBNPS Technical Specifications Table 3.3.5-1 Safety Features Actuation System Instrumentation
4. NEI 99-01 CMT Integrity or Bypass Containment Potential Loss 4.C EAL BASES DOCUMENT Rev. 0 Page 259 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Containment Category: F. Emergency Director Judgment Degradation Threat: Loss Threshold:

1. ANY condition in the opinion of the Emergency Director that indicates Loss of the Containment Barrier Basis:

Generic This threshold addresses any other factors that may be used by the Emergency Director in determining whether the Containment Barrier is lost. Plant-Specific The Emergency Director judgment threshold addresses any other factors relevant to determining if the Containment barrier is lost. Such a determination should include imminent barrier degradation, barrier monitoring capability and dominant accident sequences.

  • Imminent barrier degradation exists if the degradation will likely occur within two hours based on a projection of current SAFETY SYSTEM performance. The term IMMINENT refers to recognition of the inability to reach safety acceptance criteria before completion of ALL checks.
  • Barrier monitoring capability is decreased if there is a loss or lack of reliable indicators.

This assessment should include instrumentation operability concerns, readings from portable instrumentation and consideration of offsite monitoring results.

  • Dominant accident sequences lead to degradation of all fission product barriers and likely entry to the EOPs. The Emergency Director should be mindful of the Loss of AC power (Station Blackout) and ATWS EALs to assure timely emergency classification declarations.

DBNPS Basis Reference(s):

1. NEI 99-01 Emergency Director Judgment PC Loss 6.A EAL BASES DOCUMENT Rev. 0 Page 260 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Containment Category: F. Emergency Director Judgment Degradation Threat: Potential Loss Threshold:

1. ANY condition in the opinion of the Emergency Director that indicates Potential Loss of the Containment Barrier Basis:

Generic This threshold addresses any other factors that may be used by the Emergency Director in determining whether the Containment Barrier is lost. Plant-Specific The Emergency Director judgment threshold addresses any other factors relevant to determining if the Containment barrier is potentially lost. Such a determination should include imminent barrier degradation, barrier monitoring capability and dominant accident sequences.

  • Imminent barrier degradation exists if the degradation will likely occur within two hours based on a projection of current SAFETY SYSTEM performance. The term IMMINENT refers to recognition of the inability to reach safety acceptance criteria before completion of ALL checks.
  • Barrier monitoring capability is decreased if there is a loss or lack of reliable indicators.

This assessment should include instrumentation operability concerns, readings from portable instrumentation and consideration of offsite monitoring results.

  • Dominant accident sequences lead to degradation of ALL fission product barriers and likely entry to the EOPs. The Emergency Director should be mindful of the Loss of AC power (Station Blackout) and ATWS EALs to assure timely emergency classification declarations.

DBNPS Basis Reference(s):

1. NEI 99-01 Emergency Director Judgment PC Potential Loss 6.A EAL BASES DOCUMENT Rev. 0 Page 261 of 272

ATTACHMENT 3 Safe Shutdown Rooms/Areas Tables R-2 & H-2 Bases

Background

NEI 99-01 Revision 6 ICs AA3 and HA5 prescribe declaration of an Alert based on IMPEDED access to rooms or areas (due to either area radiation levels or hazardous gas concentrations) where equipment necessary for normal plant operations, cooldown or shutdown is located. These areas are intended to be plant operating mode dependent. Specifically the Developers Notes for AA3 and HA5 states: The site-specific list of plant rooms or areas with entry-related mode applicability identified should specify those rooms or areas that contain equipment which require a manual/local action as specified in operating procedures used for normal plant operation, cooldown and shutdown. Do not include rooms or areas in which actions of a contingent or emergency nature would be performed (e.g., an action to address an off-normal or emergency condition such as emergency repairs, corrective measures or emergency operations). In addition, the list should specify the plant mode(s) during which entry would be required for each room or area. The list should not include rooms or areas for which entry is required solely to perform actions of an administrative or record keeping nature (e.g., normal rounds or routine inspections). Further, as specified in IC HA5: The list need not include the Control Room if adequate engineered safety/design features are in place to preclude a Control Room evacuation due to the release of a hazardous gas. Such features may include, but are not limited to, capability to draw air from multiple air intakes at different and separate locations, inner and outer atmospheric boundaries, or the capability to acquire and maintain positive pressure within the Control Room envelope. EAL BASES DOCUMENT Rev. 0 Page 262 of 272

ATTACHMENT 3 Safe Shutdown Rooms/Areas Tables R-2 & H-2 Bases DBNPS Table R-2 and H-2 Bases NEI 99-01 Rev 06 addresses elevated radiation levels in certain plant rooms/areas sufficient to preclude or IMPEDE personnel from performing actions necessary to maintain normal plant operation, or to perform a normal plant cooldown and shutdown. DB-OP-06902, Power Operations Rev 46 was reviewed to determine what actions are necessary to maintain power operations. It was determined that over reasonable periods of time (days vice years) there are no actions outside the Control Room that are required to be performed to maintain normal operations. Eventually, a shutdown would be required if Technical Specification surveillance testing was not completed and you complied with the associated LCOs or based on consumable supplies being depleted. For the purpose of this table, no actions were determined to be required. The following table lists the locations that an operator may be dispatched in order perform a normal plant cooldown and shutdown. The review was completed using the following procedures as the controlling documents: DB-OP-06902, Power Operations R46 DB-OP-06903, Plant Cooldown R47 DB-OP-02504, Rapid Shutdown R20 In addition, DB-OP-06012 was reviewed to ensure the Decay Heat Removal System is aligned. At Davis-Besse, RCS Cooldown starts once both Steam Generators reach Low Level Limits during a power reduction (approximately 30% power). As a result, this review started with DB-OP-06902, Power Operations, Section 8, Turbine and Reactor Shutdown and then transitioned to DB-OP-06903, Plant Cooldown. Each step in the controlling procedures was evaluated to determine if the action was performed in the Control Room or in the plant. In-plant actions were evaluated and a determination was made whether or not the actions, if not performed, would prevent achieving cold shutdown. The following generic assumptions were applied:

  • Steps involving optional degasing of the RCS were not included since degasing the RCS is not required to reach cold shutdown.
  • Steps involving supplying Auxiliary Steam were not included since AFW and AVVs can be used to reach cold shutdown if Condenser vacuum is lost.
  • Steps involving Main Feedwater Pumps were not included since AFW and AVVs can be used to reach cold shutdown if Main Feedwater is not available.
  • Travel paths to the locations where the equipment is operated are not part of the determination, only the rooms where the equipment is actually operated are considered EAL BASES DOCUMENT Rev. 0 Page 263 of 272

ATTACHMENT 3 Safe Shutdown Rooms/Areas Tables R-2 & H-2 Bases as the affected room. Travel paths were not included because most locations can be reached via alternate travel paths if required due to a localized issue.

  • No assumptions made about which LPI Train is aligned for DHR Operation. Locations could be reduced by preselecting one train (typically Train 2) to provide this function. It is assumed that both trains are in a Standby LPI mode at the start of the event.

The minimum set of in-plant actions, associated locations, and operating modes to shut down and cool down the reactor are highlighted. The locations where those actions are performed comprise the rooms/areas in EAL Tables R-2 and H-2. The control room was not included in Table H-2 evaluation because the control room is governed by H6 series for Control Room Evacuation. UFSAR Section 6.4.2 Toxic Gas Protection Provisions states that no toxic or explosive materials are stored in volumes or locations, which pose a control room habitability hazard that exceeds emergency system capabilities. EAL RA3.1 addresses control room habitability relative to area radiation levels. EAL BASES DOCUMENT Rev. 0 Page 264 of 272

ATTACHMENT 3 Safe Shutdown Rooms/Areas Tables R-2 & H-2 Bases In Plant Task - If action not performed, does this Step Action Building Elevation Room Mode Procedure prevents cooldown shutdown? and Step 06902 Align CWRT to RCS No - Inventory and Boration requirements 8.2.2 Makeup. can be met from Control Room using N/A N/A N/A N/A BWST and BAATs. 06902 Turbine Overspeed trip No - This testing is not required. Testing 8.2.3 testing if required. could be performed on subsequent restart. N/A N/A N/A N/A 06902 Set condenser pressure to No - This action is not required to perform 8.3.9 Bullet 1.5 to 2.5 inches HgA using Shutdown - Cooldown. N/A N/A N/A N/A PCV1061. 06902 Attachment 8, Drain and No - This only affects efficiency or 8.3.9 Bullet Steam Trap Alignment for improves moisture removal. N/A N/A N/A N/A Shutdown 06902 Fill and Vent the SG No - This action facilitates SG Fill, Soak, 8.3.9 Bullet Blowdown lines, and Drains, but is not required to complete N/A N/A N/A N/A Shutdown - Cooldown. 06902 Place both Instrument Air No - Step improves response of air 8.3.9 Bullet dryers in service in parallel, system, but is not required. N/A N/A N/A N/A 06902 MDFP is in Standby in the No - MDFP could be used in AFW Mode 8.3.9 Bullet Main Feedwater mode and to reach Cold Shutdown. N/A N/A N/A N/A warm up is complete. 06902 Place the Auxiliary Boiler in No - Aux Steam will continue to be 8.3.9 Bullet service. supplied from Main Steam. If vacuum and N/A N/A N/A N/A therefore condenser is lost, steam can be dumped via AVVs. 6902 8.3.9 Transfer Auxiliary Steam No - Aux Steam will continue to be Bullet Loads from the Main Steam supplied from Main Steam. If vacuum and N/A N/A N/A N/A Reducing Station to the therefore condenser is lost, steam can be Auxiliary Boiler. dumped via AVVs. EAL BASES DOCUMENT Rev. 0 Page 265 of 272

ATTACHMENT 3 Safe Shutdown Rooms/Areas Tables R-2 & H-2 Bases In Plant Task - If action not performed, does this Step Action Building Elevation Room Mode Procedure prevents cooldown shutdown? and Step 6902 8.3.10 Perform Attachment 10, No - MDFP could be used in AFW Mode Bullet MDFP Operation. to reach Cold Shutdown. N/A N/A N/A N/A 6902 8.3.10 Closed the actuator cylinder No - This action facilitates SG Fill, Soak, Bullet equalizing valve for and Drains, but is not required to complete N/A N/A N/A N/A MS4531/MS4532 Shutdown - Cooldown. 6902 8.3.10 Place the SG Blowdown No - This action facilitates SG Fill, Soak, Bullet Lines in service. and Drains, but is not required to complete N/A N/A N/A N/A Shutdown - Cooldown. 6902 8.3.16 IF Main Turbine Overspeed No - This testing is not required. Testing Testing is required, could be performed on subsequent restart. N/A N/A N/A N/A 6902 8.3.17 Perform Attachment 13, No - This action completes Turbine Turbine Shutdown. Shutdown, but is not required to meet Cold N/A N/A N/A N/A Shutdown. 6902 8.3.30 Open the air isolation valve No - Since performance of Attachment 10 that was closed in is not required, neither is restoration. N/A N/A N/A N/A Attachment 10, MDFP Operation: 6902 8.3.31 Complete the shutdown of No - desired to complete MFPT shutdown, the running MFPT to Turning but will not prevent reaching cold N/A N/A N/A N/A Gear operation. shutdown. 6902 8.3.32 Perform Attachment 8, Drain No - This only affects efficiency or and Steam Trap Alignment improves moisture removal. N/A N/A N/A N/A for Shutdown, step 3.0. 6902 8.3.38 Transition to DB-OP-06903, No - This is a procedure routing step. Plant Cooldown N/A N/A N/A N/A 6903 3.3.10 Perform the following to read No - Action not required to reach cold Reactor Vessel Head O- shutdown. N/A N/A N/A N/A Ring pressure. EAL BASES DOCUMENT Rev. 0 Page 266 of 272

ATTACHMENT 3 Safe Shutdown Rooms/Areas Tables R-2 & H-2 Bases In Plant Task - If action not performed, does this Step Action Building Elevation Room Mode Procedure prevents cooldown shutdown? and Step 6903 3.12.1 Verify the requirements No - Action not required to reach cold pertaining to containment shutdown. closure control and N/A N/A N/A N/A protected equipment are initiated. 6903 3.12.2 Initiate Attachment 13, No - Action not required to reach cold Preparation of MU Filter 1 shutdown. N/A N/A N/A N/A for Hydrogen Peroxide Addition. 6903 3.13 Direct I & C Department to No - Action not required to reach cold perform Attachment 8, shutdown. Radiation Monitor N/A N/A N/A N/A Preparations for Plant Shutdown 6903 3.16 IF the RCS will be opened to No - Opening the RCS is not required to atmosphere, THEN begin to reach cold shutdown. reduce the RCS H2 N/A N/A N/A N/A concentration to less than 15 cc/kg. 6903 3.17 IF the Circulating Water No - Draining Circ Water is not required to System is to be drained, reach cold shutdown. THEN notify Chemistry to N/A N/A N/A N/A chemically shock it prior to bypassing the Cooling Tower. 6903 3.18 Remove TPCW pumps and No - Controlling temperature and heat exchangers from Shutdown of TPCW is not required to service, REFER TO DB-OP- reach cold shutdown. N/A N/A N/A N/A 06263, Turbine Plant Cooling Water 6903 3.21 Verify one of the Clean No - The BWST and the BAATs can be Waste Receiver Tanks is used from the Control Room for RCS N/A N/A N/A N/A aligned inventory and Boration. 6903 3.25 Begin making preparations No - Placing CTMT Purge in service is not to Start-up Containment required to reach cold shutdown. N/A N/A N/A N/A Vessel Purge. EAL BASES DOCUMENT Rev. 0 Page 267 of 272

ATTACHMENT 3 Safe Shutdown Rooms/Areas Tables R-2 & H-2 Bases In Plant Task - If action not performed, does this Step Action Building Elevation Room Mode Procedure prevents cooldown shutdown? and Step 6903 Place/remove a second seal No - Controlling a second seal return 3.25.2.a/d.3 return cooler in/from service. cooler not required to reach cold N/A N/A N/A N/A shutdown. 6903 3.35.2 Begin performing No - This action facilitates SG Fill, Soak, Attachment 5 SG Fill, Soak, and Drains, but is not required to reach N/A N/A N/A N/A and Drain. cold shutdown. 6903 3.47 Shutdown one RCP. No - The controlling procedure provides direction when CTMT is not accessible. N/A N/A N/A N/A That direction would be used. 6903 3.53 Isolate Core Flood Tank 1 Yes - Action is required to reduce RCS perform the following: Pressure. CFT 1 Outlet Valve power Rm 304 - Corridor Aux 585 1, 2, 3 restored at E11B to allow closure. Outside #3 MPR 6903 3.53 Isolate Core Flood Tank 2 Yes - Action is required to reduce RCS perform the following: Pressure. CFT 2 Outlet Valve power Rm 427 - #2 Electrical Aux 603 1, 2, 3 restored at F11A to allow closure. Penetration Room 06903 3.63 WHEN RCS pressure is No - The controlling procedure provides between 450 psig and 425 direction when CTMT is not accessible. N/A N/A N/A N/A psig THEN establish a 0/2 or That direction would be used. 2/0 RCP combination. 6903 3.64 Control Letdown Flow - No - This action aids in RCS cleanup, Open or throttle MU 83 which is not required to reach cold N/A N/A N/A N/A shutdown. 6903 3.64.1 IF its necessary to reduce No - This action allow lower Makeup Flow, the total makeup flow to the which would only be required in a very RCS by throttling MU 58A, slow cooldown. This action is not required N/A N/A N/A N/A NORMAL MAKEUP FLOW to reach cold shutdown. FE MU58 SOURCE/NEEDLE, 6903 3.66 WHEN Feedwater flow No - This action would reduce FW flow via reduces to the point where the MFW header, which would only be level control using the required in a very slow cooldown. This N/A N/A N/A N/A Feedwater Startup Valves is action is not required to reach cold difficult, Throttle FW 139 shutdown. and/or FW44. EAL BASES DOCUMENT Rev. 0 Page 268 of 272

ATTACHMENT 3 Safe Shutdown Rooms/Areas Tables R-2 & H-2 Bases In Plant Task - If action not performed, does this Step Action Building Elevation Room Mode Procedure prevents cooldown shutdown? and Step 6903 3.68 Start actions to reduce No - This action will allow cooldown to feedwater temperature to proceed quicker if on Main Feedwater, but N/A N/A N/A N/A 200F. is not required to reach cold shutdown. 6903 4.17.1 To prevent a transfer of Yes - Action is required to align LPI Train Room 236 water from the RCS to the 1 for DHR Operations. Aux 565 #2 Mechanical 1, 2, 3 BWST, close DH10. Penetration Room 6903 4.17.1 To prevent a transfer of Yes - Action is required to align LPI Train Room 236 water from the RCS to the 2 for DHR Operations. Aux 565 #2 Mechanical 1, 2, 3 BWST, close DH26. Penetration Room 6903 4.17.2 Close breaker BF 1130 in Yes - Action is required to align either LPI F11A, for DH 11 Train 1 or 2 for DHR Operations. Rm 427 - #2 Electrical Aux 603 1, 2, 3 Penetration Room 6903 4.17.2 Close breaker BE 1183 in Yes - Action is required to align either LPI E11B, for DH 12. Train 1 or 2 for DHR Operations. Rm 304 - Corridor Aux 585 1, 2, 3 Outside #3 MPR 6903 If DH12 does not open Yes - Action is required to align either LPI 4.17.8.d (which is generally does Train 1 or 2 for DHR Operations. Rm 304 - Corridor Aux 585 1, 2, 3 not), Install jumper. Outside #3 MPR 6903 4.20 Begin reducing Deaerator No - This action will allow cooldown to and Feedwater temperature proceed quicker if on Main Feedwater, but N/A N/A N/A N/A to less than 120F. is not required to reach cold shutdown. 6903 4.21 WHEN RCS temperature is No - This action will prevent low temp-high less than 280ºF, THEN pressure conditions in RCS, but is not N/A N/A N/A N/A disable HPI by racking out required to reach cold shutdown. breakers. 6903 4.22.3 IF MSIVs are to be stroked No - Action is not required to reach cold or pinned, THEN stroke test shutdown. N/A N/A N/A N/A MS100 and MS101. 6903 4.25 Place a LPI Train in service Yes - This action is performed per DB-OP-as a Decay Heat Removal 06012. However, since numerous actions N/A N/A N/A N/A Train, are required each action in that procedure was assessed separately. EAL BASES DOCUMENT Rev. 0 Page 269 of 272

ATTACHMENT 3 Safe Shutdown Rooms/Areas Tables R-2 & H-2 Bases In Plant Task - If action not performed, does this Step Action Building Elevation Room Mode Procedure prevents cooldown shutdown? and Step 6903 4.28 Remove the Auxiliary No - Action is not required to reach cold Feedwater System from shutdown. N/A N/A N/A N/A service. 6903 4.30 IF SG 1 level control No - Action is not required to reach cold becomes difficult due to shutdown. N/A N/A N/A N/A excess flow through SP7B, adjust FW161/139. 6903 4.32 IF SG 2 level control No - Action is not required to reach cold becomes difficult due to shutdown. N/A N/A N/A N/A excess flow through SP7A, adjust FW162/44. 6903 4.34 WHEN RCS temperature is No - Cold shutdown has been reached. less than 200ºF, End of review using DB-OP-06903. N/A N/A N/A N/A 6012 3.5.5 Verify the CLOSE power No - Just prevents inadvertent start of LPI fuses for AC 112, DECAY pump 1 while transferring suction. SFAS N/A N/A N/A N/A HT PUMP 1-1, are removed. is already blocked. 6012 3.5.6 Verify BE 1187 (E11E), MV No - Just prevents possible valve motor DH64 LPI-HPI CROSS overload if stroked with RCS Suction N/A N/A N/A N/A CONN ISO VLV 1, is open. Source. 6012 3.5.10 Open BE 1121 (E11A), MV No - Just prevents inadvertent transfer of 2733 DH PUMP 1 SUCT BWST inventory to RCS if the valve N/A N/A N/A N/A VLV FRM BWST. opened. SFAS is already blocked. 6012 3.5.13 Close DH10*, DH PUMP 1 Yes - This action is required to align LPI Room 236 MINIMUM COOLDOWN Train 1 or 2 for DHR Operations. Aux 565 #2 Mechanical 1, 2, 3 ISOLATION. Penetration Room 6012 3.5.17 Open BE 1126 (E11D), MV No - Just prevent inadvertent loss of DHR 1517 DH NORM SUCT LINE Train 1 suction from RCS is valve is N/A N/A N/A N/A 1 ISO VLV. stroked closed. 6012 3.6.5 Verify the CLOSE power No - Just prevents inadvertent start of LPI fuses for AD 112, DECAY pump 2 while transferring suction. SFAS N/A N/A N/A N/A HT PUMP 1-2, are removed. is already blocked. EAL BASES DOCUMENT Rev. 0 Page 270 of 272

ATTACHMENT 3 Safe Shutdown Rooms/Areas Tables R-2 & H-2 Bases In Plant Task - If action not performed, does this Step Action Building Elevation Room Mode Procedure prevents cooldown shutdown? and Step 6012 3.6.6 Verify BE 1195 (F11E), MV No - Just prevents possible valve motor DH63 LPI-HPI CROSS overload if stroked with RCS Suction N/A N/A N/A N/A CONN ISO VLV 2, is open. Source. 6012 3.6.11 Open BF 1134 (F11C), MV No - Just prevents inadvertent transfer of 2734 DH PMP 2 SUCT VLV BWST inventory to RCS if the valve N/A N/A N/A N/A FRM BWST. opened. SFAS is already blocked. 6012 3.6.14 Close DH10*, DH PUMP 1 Yes - Action is required to align LPI Train Room 236 MINIMUM COOLDOWN 1 or 2 for DHR Operations. Aux 565 #2 Mechanical 1, 2, 3 ISOLATION. Penetration Room 6012 3.6.19 Open BF1129 (F11C), MV No - Prevents inadvertent loss of DHR 1518 DH NORM SUCT LINE Train 2 suction from RCS is valve is N/A N/A N/A N/A 2 ISO VLV. stroked closed. 6012 3.6.27 Verify the CLOSE power No - If not initially removed, then fuses for AD 112. reinstalling will not be required. N/A N/A N/A N/A 6012 3.7.8.a Station an operator at DH No - Operator only stationed for Pump 1. monitoring function. Action is not required N/A N/A N/A N/A to reach Cold Shutdown. 6012 3.7.8.d Verify DH59, DH PUMP 1 No - Opening this valve provides the DISCHARGE SAMPLE capability to sample RCS inventory from N/A N/A N/A N/A ISOL, is open. the DHR system. 6012 3.8.8.a Station an operator at DH No - Operator only stationed for Pump 2. monitoring function. Action is not required N/A N/A N/A N/A to reach Cold Shutdown. 6012 3.8.8.d Verify DH60, DH PUMP 2 No - Opening this valve provides the DISCHARGE SAMPLE capability to sample RCS inventory from N/A N/A N/A N/A ISOL, is open. the DHR system. Note: The information in the above table is included for historical reference information only and based upon the procedure revision numbers referenced in the DBNPS Table R-2 and H-2 Bases summary. EAL BASES DOCUMENT Rev. 0 Page 271 of 272

ATTACHMENT 3 Safe Shutdown Rooms/Areas Tables R-2 & H-2 Bases Table R-2 & H-2 Results Table R-2 & H-2 Safe Shutdown Rooms/Areas Room/Area Mode Applicability Aux Bldg. 565 ele. Room 236 #2 Mechanical Penetration Room 1, 2, 3 Aux Bldg. 585 ele. Room 304 corridor outside #3 Mechanical Penetration Room 1, 2, 3 Aux Bldg. 603 ele. Room 427 - #2 Electrical Penetration Room 1, 2, 3 EAL BASES DOCUMENT Rev. 0 Page 272 of 272

Evaluation of Proposed License Amendment Attachment 2 Emergency Action Level (EAL) Bases Document (Redline Version) (292 Pages Follow)

DAVIS-BESSE REFERENCE MATERIAL EMERGENCY ACTION LEVEL TECHNICAL BASES DOCUMENT EAL BASES DOCUMENT Rev. 0 Page 1 of 292

TABLE OF CONTENTS SECTION PAGE 1.0 PURPOSE ................................................................................................................................... 6 2.0 DISCUSSION ............................................................................................................................... 6 2.1 Background ............................................................................................................................... 6 2.2 Fission Product Barriers ............................................................................................................ 7 2.3 Fission Product Barrier Classification Criteria ........................................................................... 7 2.4 EAL Organization ...................................................................................................................... 8 2.5 Technical Bases Information................................................................................................... 10 2.6 Operating Mode Applicability .................................................................................................. 11 3.0 GUIDANCE ON MAKING EMERGENCY CLASSIFICATIONS .................................................. 12 3.1 General Considerations .......................................................................................................... 12 3.2 Classification Methodology ..................................................................................................... 13 4.0 REFERENCES .......................................................................................................................... 17 4.1 Developmental ........................................................................................................................ 17 4.2 Implementing .......................................................................................................................... 17 5.0 DEINITIONS, ACRONYMS & ABBREVIATIONS ...................................................................... 18 5.1 Definitions ..18 5.2 Abbreviations/Acronyms . 23 6.0 DBNPS TO NEI 99-01 Rev. 6 EAL CROSS-REFERENCE ....................................................... 26 7.0 ATTACHMENTS ........................................................................................................................ 30 1 Emergency Action Level Technical Bases .................................................................... 30 Category H Hazards ............................................................................................. 31 HG1.1 ................................................................................................ 33 HS1.1 ................................................................................................ 35 HA1.1 ................................................................................................ 37 HA1.2 ................................................................................................ 39 HU1.1 ................................................................................................ 41 HU1.2 ................................................................................................ 43 HU1.3 ................................................................................................ 45 HU2.1 ................................................................................................ 47 HU3.1 ................................................................................................ 49 HU3.2 ................................................................................................ 50 HU3.3 ................................................................................................ 51 HU3.4 ................................................................................................ 52 EAL BASES DOCUMENT Rev. 0 Page 2 of 292

HU4.1 ................................................................................................ 53 HU4.2 ................................................................................................ 56 HU4.3 ................................................................................................ 59 HU4.4 ................................................................................................ 60 HA5.1 ................................................................................................ 61 HS6.1 ................................................................................................ 64 HA6.1 ................................................................................................ 66 HG7.1 ................................................................................................ 68 HS7.1 ................................................................................................ 70 HA7.1 ................................................................................................ 71 HU7.1 ................................................................................................ 72 Category R Abnormal Rad Release / Rad Effluent .............................................. 73 RG1.1 ................................................................................................ 74 RG1.2 ................................................................................................ 76 RG1.3 ................................................................................................ 78 RS1.1 ................................................................................................ 80 RS1.2 ................................................................................................ 82 RS1.3 ................................................................................................ 84 RA1.1 ................................................................................................ 86 RA1.2 ................................................................................................ 88 RA1.3 ................................................................................................ 90 RA1.4 ................................................................................................ 92 RU1.1 ................................................................................................ 94 RU1.2 ................................................................................................ 97 RG2.1 ................................................................................................ 99 RS2.1 .............................................................................................. 100 RA2.1 .............................................................................................. 101 RA2.2 .............................................................................................. 103 RA2.3 .............................................................................................. 105 RU2.1 .............................................................................................. 106 RA3.1 .............................................................................................. 108 RA3.2 .............................................................................................. 109 Category E DFSF ............................................................................................... 111 EU1.1 .............................................................................................. 112 Category C Cold Shutdown / Refueling System Malfunction.............................. 114 EAL BASES DOCUMENT Rev. 0 Page 3 of 292

CG1.1 .............................................................................................. 116 CS1.1 .............................................................................................. 120 CA1.1 .............................................................................................. 122 CA1.2 .............................................................................................. 123 CU1.1 .............................................................................................. 125 CU1.2 .............................................................................................. 127 CA2.1 .............................................................................................. 129 CU2.1 .............................................................................................. 131 CA3.1 .............................................................................................. 134 CU3.1 .............................................................................................. 137 CU3.2 .............................................................................................. 139 CU4.1 .............................................................................................. 141 CU5.1 .............................................................................................. 143 CU5.2 .............................................................................................. 146 CU5.3 .............................................................................................. 149 CA6.1 .............................................................................................. 152 Category S System Malfunction ......................................................................... 155 SG1.1 .............................................................................................. 157 SG1.2 .............................................................................................. 160 SS1.1 .............................................................................................. 163 SA1.1 .............................................................................................. 165 SU1.1 .............................................................................................. 168 SS2.1 .............................................................................................. 170 SA3.1 .............................................................................................. 172 SU3.1 .............................................................................................. 175 SU4.1 .............................................................................................. 177 SU4.2 .............................................................................................. 178 SU5.1 .............................................................................................. 179 SS6.1 .............................................................................................. 181 SA6.1 .............................................................................................. 184 SU6.1 .............................................................................................. 186 SU6.2 .............................................................................................. 189 SU7.1 .............................................................................................. 192 SU7.2 .............................................................................................. 195 SU7.3 .............................................................................................. 198 EAL BASES DOCUMENT Rev. 0 Page 4 of 292

SU8.1 .............................................................................................. 201 SU8.2 .............................................................................................. 202 SA9.1 .............................................................................................. 204 Category F Fission Product Barrier Degradation ............................................... 206 FG1.1 .............................................................................................. 208 FS1.1 ............................................................................................... 209 FA1.1 ............................................................................................... 210 2 Fission Product Barrier Loss / Potential Loss Matrix and Bases ......................................................................................................... 211 3 Safe Shutdown Rooms/Areas Tables R-2 & H-2 Bases .............................................. 262 EAL BASES DOCUMENT Rev. 0 Page 5 of 292

1.0 PURPOSE This document provides an explanation and rationale for each Emergency Action Level (EAL) included in the EAL Upgrade Project for Davis-Besse Nuclear Power Station (DBNPS). It should be used to facilitate review of the DBNPS EALs and provide historical documentation for future reference. Decision-makers responsible for implementation of RA-EP-01500 Emergency Classification, may use this document as a technical reference in support of EAL interpretation. This information may assist the Emergency Director in making classifications, particularly those involving judgment or multiple events. The basis information may also be useful in training and for explaining event classifications to off-site officials. The expectation is that emergency classifications are made as soon as conditions are present and recognizable for the classification, but within 15 minutes or less in ALL cases of conditions present. Use of this document for assistance is not intended to delay the emergency classification. Because the information in a basis document can affect emergency classification decision-making (e.g., the Emergency Coordinator refers to it during an event), the NRC staff expects that changes to the basis document will be evaluated in accordance with the provisions of 10 CFR 50.54(q). 2.0 DISCUSSION 2.1 Background EALs are the plant-specific indications, conditions or instrument readings that are utilized to classify emergency conditions defined in the DBNPS Emergency Plan (ref. 4.1.13). In 1992, the NRC endorsed NUMARC/NESP-007 Methodology for Development of Emergency Action Levels as an alternative to NUREG-0654 EAL guidance. NEI 99-01 (NUMARC/NESP-007) Revisions 4 and 5 were subsequently issued for industry implementation. Enhancements over earlier revisions included:

  • Consolidating the system malfunction initiating conditions and example emergency action levels, which address conditions that may occur during plant shutdown conditions.
  • Initiating conditions and example emergency action levels that fully address conditions that may be postulated to occur at permanently Defueled Stations and Independent Spent Fuel Storage Installations (ISFSIs).
  • Simplifying the fission product barrier EAL threshold for a Site Area Emergency.

Subsequently, Revision 6 of NEI 99-01 has been issued which incorporates resolutions to numerous implementation issues including the NRC EAL Frequently Asked Questions (FAQs). Using NEI 99-01 Revision 6, "Methodology for the Development of Emergency Action Levels EAL BASES DOCUMENT Rev. 0 Page 6 of 292

for Non-Passive Reactors, (ref. 4.1.1), DBNPS conducted an EAL implementation upgrade project that produced the EALs discussed herein. 2.2 Fission Product Barriers FISSION PRODUCT BARRIER THRESHOLDS represent threats to the defense in depth design concept that precludes the release of radioactive fission products to the environment. This concept relies on multiple physical barriers, any one of which, if maintained intact, precludes the release of significant amounts of radioactive fission products to the environment. Many of the EALs derived from the NEI methodology are FISSION PRODUCT BARRIER THRESHOLD based. That is, the conditions that define the EALs are based upon thresholds that represent the loss or potential loss of one or more of the three fission product barriers. Loss and Potential Loss signify the relative damage and threat of damage to the barrier. A Loss threshold means the barrier no longer assures containment of radioactive materials. A Potential Loss threshold implies an increased probability of barrier loss and decreased certainty of maintaining the barrier. The primary fission product barriers are: A. Fuel Clad (FC): The Fuel Clad Barrier consists of the cladding material that contains the fuel pellets. B. Reactor Coolant System (RC): The RC Barrier includes the RCS primary side and its connections up to and including the pressurizer safety and relief valves, and other connections up to and including the primary isolation valves. C. Containment (CT): The Containment Barrier includes the containment building, and connections up to and including the outermost containment isolation valves. This barrier also includes the main steam, feedwater, and blowdown line extensions outside the containment building up to and including the outermost secondary side isolation valve. Containment Barrier thresholds are used as criteria for escalation of the ECL from Alert to a Site Area Emergency or a General Emergency 2.3 Fission Product Barrier Classification Criteria The following criteria are the bases for event classification related to fission product barrier loss or potential loss: Alert: ANY loss or ANY potential loss of EITHER Fuel Clad or RC Barrier Site Area Emergency: Loss or potential loss of ANY two barriers General Emergency: Loss of ANY two barriers AND loss or potential loss of the third barrier EAL BASES DOCUMENT Rev. 0 Page 7 of 292

2.4 EAL Organization The DBNPS EAL scheme includes the following features:

  • Division of the EAL set into three broad groups:

o EALs applicable under ANY plant operating modes - This group would be reviewed by the EAL-user any time emergency classification is considered. o EALs applicable only under hot operating modes - This group would only be reviewed by the EAL-user when the plant is in Hot Shutdown, Hot Standby, Startup, or Power Operation mode. o EALs applicable only under cold operating modes - This group would only be reviewed by the EAL-user when the plant is in Cold Shutdown, Refueling or Defueled mode. The purpose of the groups is to avoid review of hot condition EALs when the plant is in a cold condition and avoid review of cold condition EALs when the plant is in a hot condition. This approach significantly minimizes the total number of EALs that must be reviewed by the EAL-user for a given plant condition, reduces EAL-user reading burden and, thereby, speeds identification of the EAL that applies to the emergency.

  • Within each group, assignment of EALs to recognition categories and subcategories:

Recognition category and subcategory titles were selected to represent conditions that are operationally significant to the EAL-user. The DBNPS EAL recognition categories align to and represent the NEI 99-01 Revision 6 Recognition Categories. Subcategories are used in the DBNPS scheme to further divide the EALs of a category into logical sets of possible emergency classification thresholds. The DBNPS EAL categories and subcategories are listed below. EAL BASES DOCUMENT Rev. 0 Page 8 of 292

EAL Groups, Recognition Categories and Subcategories EAL Group/Category EAL Subcategory ANY Operating Mode: H - Hazards and Other Conditions 1 - Security Affecting Plant Safety 2 - Seismic Event 3 - Natural or Technological Hazard 4 - Fire 5 - Hazardous Gas 6 - Control Room Evacuation 7 - Emergency Director Judgment R - Abnormal Rad Levels / Rad Effluent 1 - Radiological Effluent 2 - Irradiated Fuel Event 3 - Area Radiation Levels E - Dry Fuel Storage Facility (DFSF) 1 - Confinement Boundary Hot Conditions: S - System Malfunction 1 - Loss of Essential AC Power 2 - Loss of Essential DC Power 3 - Loss of Control Room Indications 4 - RCS Activity 5 - RCS Leakage 6 - RPS Failure 7 - Loss of Communications 8 - Containment Failure 9 - Hazardous Event Affecting Safety Systems F - Fission Product Barrier Degradation None Cold Conditions: C - Cold Shutdown / Refueling System 1 - RCS Level Malfunction 2 - Loss of Essential AC Power 3 - RCS Temperature 4 - Loss of Essential DC Power 5 - Loss of Communications 6 - Hazardous Event Affecting Safety Systems The primary tool for determining the emergency classification level is the EAL Classification Matrix. The user of the EAL Classification Matrix may (but is not required to) consult the EAL Technical Bases Document in order to obtain additional information concerning the EALs under classification consideration. The user should consult Section 3.0 and Attachments 1 & 2 of this document for such information. EAL BASES DOCUMENT Rev. 0 Page 9 of 292

2.5 Technical Bases Information EAL technical bases are provided in Attachment 1 for each EAL according to EAL group (ANY, Hot, Cold), EAL category (R, C, H, S, F and E) and EAL subcategory. A summary explanation of each category and subcategory is given at the beginning of the technical bases discussions of the EALs included in the category. For each EAL, the following information is provided: Category Letter & Title Subcategory Number & Title Initiating Condition (IC) Site-specific description of the generic IC given in NEI 99-01 Rev. 6 EAL Identifier (enclosed in rectangle) Each EAL is assigned a unique identifier to support accurate communication of the emergency classification to onsite and offsite personnel. Four characters define each EAL identifier:

1. First character (letter): Corresponds to the EAL recognition category as described in Section 2.4 (H, R, E, C, S or F)
2. Second character (letter): The emergency classification (G, S, A or U)

G = General Emergency S = Site Area Emergency A = Alert U = Unusual Event

3. Third character (number): Subcategory number within the given category.

Subcategories are sequentially numbered beginning with the number one (1). If a category does not have a subcategory, this character is assigned the number one (1).

4. Fourth character (number): The numerical sequence of the EAL within the EAL subcategory. If the subcategory has only one EAL, it is given the number one (1).

Classification (enclosed in rectangle): Unusual Event (U), Alert (A), Site Area Emergency (S) or General Emergency (G) EAL (enclosed in rectangle) Exact wording of the EAL as it appears in the EAL Classification Matrix EAL BASES DOCUMENT Rev. 0 Page 10 of 292

Mode Applicability One or more of the following plant operating conditions comprise the mode to which each EAL is applicable: 1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown, 5 - Cold Shutdown, 6 - Refueling, D - Defueled, or ALL. (See Section 2.6 for operating mode definitions) Basis: A Generic basis section that provides a description of the rationale for the EAL as provided in NEI 99-01 Rev. 6. This is followed by a Plant-Specific basis section that provides DBNPS-relevant information concerning the EAL. DBNPS Basis Reference(s): Site-specific source documentation from which the EAL is derived 2.6 Operating Mode Applicability (ref. 4.1.8) Reactivity Condition Avg. Reactor Coolant Mode  % Rated Power* (Keff) Temperature (ºF)

1) Power Operation 0.99 > 5% N/A
2) Startup 0.99 5% N/A
3) Hot Standby < 0.99 N/A 280
4) Hot Shutdown < 0.99 N/A 280 > Tavg > 200
5) Cold Shutdown < 0.99 N/A 200
6) Refueling One or more vessel head closure bolts less than fully tensioned.

ALL reactor fuel removed from reactor pressure vessel (full core offload D) Defueled during refueling or extended outage). Refer to Section 3.3.2 for guidance on event caused mode changes. EAL BASES DOCUMENT Rev. 0 Page 11 of 292

3.0 GUIDANCE ON MAKING EMERGENCY CLASSIFICATIONS 3.1 General Considerations When making an emergency classification, the Emergency Director must consider ALL information having a bearing on the proper assessment of an Initiating Condition (IC). This includes the Emergency Action Level (EAL) plus the associated Operating Mode Applicability, Notes, and the technical basis information. In the Recognition Category F matrices, EALs are based on loss or potential loss of FISSION PRODUCT BARRIER THRESHOLDS. 3.1.1 Classification Timeliness NRC regulations require the licensee to establish and maintain the capability to assess, classify, and declare an emergency condition within 15 minutes after the availability of indications to plant operators that an emergency action level has been exceeded and to promptly declare the emergency condition as soon as possible following identification of the appropriate emergency classification level. The NRC staff has provided guidance on implementing this requirement in NSIR/DPR-ISG-01, "Interim Staff Guidance, Emergency Planning for Nuclear Power Plants" (ref. 4.1.11). 3.1.2 Valid Indications ALL emergency classification assessments shall be based upon VALID indications, reports or conditions. A VALID indication, report, or condition, is one that has been verified through appropriate means such that there is no doubt regarding the indicators operability, the conditions existence, or the reports accuracy. For example, verification could be accomplished through an instrument channel check, response on related or redundant indicators, or direct observation by plant personnel. An indication, report, or condition is considered VALID when it is verified by (1) an instrument channel check, or (2) indications on related or redundant indicators, or (3) by direct observation by plant personnel, such that doubt related to the indicators operability, the conditions existence, or the reports accuracy is removed. The validation of indications should be completed in a manner that supports timely emergency declaration. 3.1.3 IMMINENT Conditions For ICs and EALs that have a stipulated time duration (e.g., 15 minutes, 30 minutes, etc.), the Emergency Director should not wait until the applicable time has elapsed, but should declare the event as soon as it is determined that the condition has exceeded, or will likely exceed, the applicable time. If an ongoing radiological release is detected and the release start time is unknown, it should be assumed that the release duration specified in the IC/EAL has been exceeded, absent data to the contrary. 3.1.4 Planned vs. Unplanned Events A planned work activity that results in an expected event or condition which meets or exceeds an EAL does not warrant an emergency declaration provided that: 1) the activity proceeds as planned, and 2) the plant remains within the limits imposed by the operating license. Such activities include planned work to test, manipulate, repair, maintain or modify a system or EAL BASES DOCUMENT Rev. 0 Page 12 of 292

component. In these cases, the controls associated with the planning, preparation and execution of the work will ensure that compliance is maintained with ALL aspects of the operating license provided that the activity proceeds and concludes as expected. Events or conditions of this type may be subject to the reporting requirements of 10 § CFR 50.72 (ref. 4.1.4). 3.1.5 Classification Based on Analysis The assessment of some EALs is based on the results of analyses that are necessary to ascertain whether a specific EAL threshold has been exceeded (e.g., dose assessments, chemistry sampling, RCS leak rate calculation, etc.). For these EALs, the EAL wording or the associated basis discussion will identify the necessary analysis. In these cases, the 15-minute declaration period starts with the availability of the analysis results that show the threshold to be exceeded (i.e., this is the time that the EAL information is first available). The NRC expects licensees to establish the capability to initiate and complete EAL-related analyses within a reasonable period of time (e.g., maintain the necessary expertise on-shift) (ref. 4.1.11). 3.1.6 Emergency Director Judgment While the EALs have been developed to address a full spectrum of possible events and conditions which may warrant emergency classification, a provision for classification based on operator/management experience and judgment is still necessary. The NEI 99-01 EAL scheme provides the Emergency Director with the ability to classify events and conditions based upon judgment using EALs that are consistent with the Emergency Classification Level (ECL) definitions (refer to Category H). The Emergency Director will need to determine if the effects or consequences of the event or condition reasonably meet or exceed a particular ECL definition. A similar provision is incorporated in the Fission Product Barrier Tables; judgment may be used to determine the status of a fission product barrier. 3.1.7 Emergency Action Levels with Embedded Time Requirements Some EALs have embedded time requirements. Declaration must be made as soon as the Emergency Director recognizes that the conditions will not be successfully resolved within 15 minutes. Therefore, for EALs with time-embedded requirements the time for emergency declaration starts with the initial alarm or indication of the event, not after the embedded time has elapsed. For EALs with longer embedded time requirements, the 15-minute clock for declaration begins with recognition that the assigned time limit will be exceeded. For example, SG1.1 - Restoration of at least one essential bus in < 4 hours is not likely. If 20 minutes after loss of the C-1 bus and the D-1 bus it becomes apparent that restoration of either bus will not likely occur within 4 hours the Emergency Director must immediately declare the General Emergency. 3.2 Classification Methodology To make an emergency classification, the user will compare an event or condition (i.e., the relevant plant indications and reports) to an EAL(s) and determine if the EAL has been met or exceeded. The evaluation of an EAL must be consistent with the related Operating Mode Applicability and Notes. If an EAL has been met or exceeded, the associated IC is likewise EAL BASES DOCUMENT Rev. 0 Page 13 of 292

met, the emergency classification process clock starts, and the ECL must be declared in accordance with plant procedures no later than fifteen minutes after the process clock started. When assessing an EAL that specifies a time duration for the off-normal condition, the clock for the EAL time duration runs concurrently with the emergency classification process clock. For a full discussion of this timing requirement, refer to NSIR/DPR-ISG-01 (ref. 4.1.11). 3.2.1 Classification of Multiple Events and Conditions When multiple emergency events or conditions are present, the user will identify ALL met or exceeded EALs. The highest applicable ECL identified during this review is declared. For example:

  • If an Alert EAL and a Site Area Emergency EAL are met, a Site Area Emergency should be declared.

There is no additive effect from multiple EALs meeting the same ECL. For example:

  • If two Alert EALs are met, an Alert should be declared.

Related guidance concerning classification of rapidly escalating events or conditions is provided in Regulatory Issue Summary (RIS) 2007-02, Clarification of NRC Guidance for Emergency Notifications During Quickly Changing Events (ref. 4.1.2). 3.2.2 Consideration of Mode Changes During Classification The mode in effect at the time an event or condition occurred, and prior to any plant or operator response, is the mode that determines whether an IC is applicable. If an event or condition occurs, and results in a mode change before the emergency is declared, the emergency classification level is still based on the mode that existed at the time that the event or condition was initiated (and not when it was declared). Once a different mode is reached, any new event or condition, not related to the original event or condition, requiring emergency classification should be evaluated against the ICs and EALs applicable to the operating mode at the time of the new event or condition. For events that occur in Cold Shutdown or Refueling, escalation is via EALs that are applicable in the Cold Shutdown or Refueling modes, even if Hot Shutdown (or a higher mode) is entered during the subsequent plant response. In particular, the fission product barrier EALs are applicable only to events that initiate in the Hot Shutdown mode or higher. 3.2.3 Classification of IMMINENT Conditions Although EALs provide specific thresholds, the Emergency Director must remain alert to events or conditions that could lead to meeting or exceeding an EAL within a relatively short period of time (i.e., a change in the ECL is IMMINENT). If, in the judgment of the Emergency Director, meeting an EAL is IMMINENT, the emergency classification should be made as if the EAL has been met. While applicable to ALL emergency classification levels, this approach is particularly important at the higher emergency classification levels since it provides additional time for implementation of protective measures. EAL BASES DOCUMENT Rev. 0 Page 14 of 292

3.2.4 Emergency Classification Level Upgrading and Downgrading An ECL may be downgraded when the event or condition that meets the highest IC and EAL no longer exists, and other site-specific downgrading requirements are met. If downgrading the ECL is deemed appropriate, the new ECL would then be based on a lower applicable IC(s) and EAL(s). The ECL may also be terminated. As noted above, guidance concerning classification of rapidly escalating events or conditions is provided in RIS 2007-02 (ref. 4.1.2). 3.2.5 Classification of Short-Lived Events Event-based ICs and EALs define a variety of specific occurrences that have potential or actual safety significance. By their nature, some of these events may be short-lived and, thus, over before the emergency classification assessment can be completed. If an event occurs that meets or exceeds an EAL, the associated ECL must be declared regardless of its continued presence at the time of declaration. Examples of such events include an earthquake or a failure of the reactor protection system to automatically trip the reactor followed by a successful manual trip. 3.2.6 Classification of Transient Conditions Many of the ICs and/or EALs employ time-based criteria. These criteria will require that the IC/EAL conditions be present for a defined period of time before an emergency declaration is warranted. In cases where no time-based criterion is specified, it is recognized that some transient conditions may cause an EAL to be met for a brief period of time (e.g., a few seconds to a few minutes). The following guidance should be applied to the classification of these conditions. EAL momentarily met during expected plant response - In instances where an EAL is briefly met during an expected (normal) plant response, an emergency declaration is not warranted provided that associated systems and components are operating as expected, and operator actions are performed in accordance with procedures. EAL momentarily met but the condition is corrected prior to an emergency declaration - If an operator takes prompt manual action to address a condition, and the action is successful in correcting the condition prior to the emergency declaration, then the applicable EAL is not considered met and the associated emergency declaration is not required. It is important to stress that the 15-minute emergency classification assessment period (process clock) is not a grace period during which a classification may be delayed to allow the performance of a corrective action that would obviate the need to classify the event. Emergency classification assessments must be deliberate and timely, with no undue delays. The provision discussed above addresses only those rapidly evolving situations when an operator is able to take a successful corrective action prior to the Emergency Director completing the review and steps necessary to make the emergency declaration. This provision is included to ensure that any public protective actions resulting from the emergency classification are truly warranted by the plant conditions. EAL BASES DOCUMENT Rev. 0 Page 15 of 292

3.2.7 After-the-Fact Discovery of an Emergency Event or Condition In some cases, an EAL may be met but the emergency classification was not made at the time of the event or condition. This situation can occur when personnel discover that an event or condition existed which met an EAL, but no emergency was declared, and the event or condition no longer exists at the time of discovery. This may be due to the event or condition not being recognized at the time or an error that was made in the emergency classification process. In these cases, no emergency declaration is warranted; however, the guidance contained in NUREG-1022 (ref. 4.1.3) is applicable. Specifically, the event should be reported to the NRC in accordance with 10 CFR § 50.72 (ref. 4.1.4) within one hour of the discovery of the undeclared event or condition. The licensee should also notify appropriate State and local agencies in accordance with the agreed upon arrangements. 3.2.8 Retraction of an Emergency Declaration Guidance on the retraction of an emergency declaration reported to the NRC is discussed in NUREG-1022 (ref. 4.1.3). EAL BASES DOCUMENT Rev. 0 Page 16 of 292

4.0 REFERENCES

4.1 Developmental 4.1.1 NEI 99-01 Revision 6, Methodology for the Development of Emergency Action Levels for Non-Passive Reactors, ADAMS Accession Number ML13091A209 4.1.2 RIS 2007-02 Clarification of NRC Guidance for Emergency Notifications During Quickly Changing Events, February 2, 2007 4.1.3 NUREG-1022 Event Reporting Guidelines: 10CFR50.72 and 50.73 4.1.4 10 § CFR 50.72 Immediate Notification Requirements for Operating Nuclear Power Reactors 4.1.5 10 § CFR 50.73 License Event Report System 4.1.6 DBNPS ODCM 4.1.7 DBNPS UFSAR Figure 1.2-12 Site Plan 4.1.8 Technical Specifications Table 1.1-1 Modes 4.1.9 DB-OP-06904 Shutdown Operations 4.1.10 NG-QS-00121 DBNPS Writers Guide 4.1.11 NSIR/DPR-ISG-01 Interim Staff Guidance, Emergency Planning for Nuclear Power Plants 4.1.12 Site CSAR NUH-003 4.1.13 DBNPS Emergency Plan 4.1.14 DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tube Rupture 4.2 Implementing 4.2.1 RA-EP-01500 Emergency Classification 4.2.2 NEI 99-01 Rev. 6 to DBNPS EAL Comparison Matrix 4.2.3 DBNPS EAL Matrix EAL BASES DOCUMENT Rev. 0 Page 17 of 292

5.0 DEFINITIONS, ACRONYMS & ABBREVIATIONS 5.1 Definitions (ref. 4.1.1 except as noted) Selected terms used in Initiating Condition and Emergency Action Level statements are set in ALL capital letters (e.g., ALL CAPS). These words are defined terms that have specific meanings as used in this document. The definitions of these terms are provided below. Alert Events are in progress or have occurred which involve an actual or potential substantial degradation of the level of safety of the plant or a security event that involves probable life threatening risk to site personnel or damage to site equipment because of HOSTILE ACTION. Any releases are expected to be limited to small fractions of the EPA PAG exposure levels. Confinement Boundary The barrier(s) between spent fuel and the environment once the spent fuel is processed for dry storage. As related to the DBNPS Dry Fuel Storage Facility, CONFINEMENT BOUNDARY is defined as the Dry Shielded Canister (DSC) (ref. 4.1.12). Containment Closure The procedurally defined actions taken to secure containment and its associated structures, systems, and components as a functional barrier to fission product release under shutdown conditions existing plant conditions (ref. 4.1.9). Emergency Action Level (EAL) A pre-determined, site-specific, observable threshold for an Initiating Condition that, when met or exceeded, places the plant in a given emergency classification level. Emergency Classification Level (ECL) One of a set of names or titles established by the US Nuclear Regulatory Commission (NRC) for grouping off-normal events or conditions according to (1) potential or actual effects or consequences, and (2) resulting onsite and offsite response actions. The emergency classification levels, in ascending order of severity, are:

  • Notification of Unusual Event (NOUE)
  • Alert
  • Site Area Emergency (SAE)
  • General Emergency (GE)

EPA PAGs Environment Protection Agency Protective Action Guidelines. The EPA PAGs are expressed in terms of dose commitment: 1 Rem TEDE or 5 Rem CDE Thyroid. Actual or projected offsite exposures in excess of the EPA PAGs requires DBNPS to recommend protective actions for the general public to offsite planning agencies. EAL BASES DOCUMENT Rev. 0 Page 18 of 292

Explosion A rapid, violent and catastrophic failure of a piece of equipment due to combustion, chemical reaction or overpressurization. A release of steam (from high energy lines or components) or an electrical component failure (caused by short circuits, grounding, arcing, etc.) should not automatically be considered an EXPLOSION. Such events may require a post-event inspection to determine if the attributes of an EXPLOSION are present. Faulted The term applied to a steam generator that has a steam leak on the secondary side of sufficient size to cause an uncontrolled drop in steam generator pressure or the steam generator to become completely depressurized. Fire Combustion characterized by heat and light. Sources of smoke such as slipping drive belts or overheated electrical equipment do not constitute FIRES. Observation of flame is preferred but is NOT required if large quantities of smoke and heat are observed. Fission Product Barrier Threshold A pre-determined, site-specific, observable threshold indicating the loss or potential loss of a fission product barrier. Flooding A condition where water is entering a room or area faster than installed equipment is capable of removal, resulting in a rise of water level within the room or area. General Emergency Events are in progress or have occurred which involve actual or IMMINENT substantial core degradation or melting with potential for loss of containment integrity or HOSTILE ACTION that results in an actual loss of physical control of the facility. Releases can be reasonably expected to exceed EPA PAG exposure levels offsite for more than the immediate site area. Hostage A person(s) held as leverage against the station to ensure that demands will be met by the station. Hostile Action An act toward DBNPS or its personnel that includes the use of violent force to destroy equipment, take HOSTAGES, and/or intimidate the licensee to achieve an end. This includes attack by air, land, or water using guns, explosives, PROJECTILEs, vehicles, or other devices used to deliver destructive force. Other acts that satisfy the overall intent may be included. HOSTILE ACTION should not be construed to include acts of civil disobedience or felonious acts that are not part of a concerted attack on DBNPS. Non-terrorism-based EALs should be EAL BASES DOCUMENT Rev. 0 Page 19 of 292

used to address such activities (i.e., this may include violent acts between individuals in the OWNER CONTROLLED AREA). Hostile Force One or more individuals who are engaged in a determined assault, overtly or by stealth and deception, equipped with suitable weapons capable of killing, maiming, or causing destruction. Imminent The trajectory of events or conditions is such that an EAL will be met within a relatively short period of time regardless of mitigation or corrective actions. Impede(d) Personnel access to a room or area is hindered to an extent that extraordinary measures are necessary to facilitate entry of personnel into the affected room/area (e.g., requiring use of protective equipment, such as SCBAs, that is not routinely employed). Independent Spent Fuel Storage Installation (ISFSI) A complex that is designed and constructed for the interim storage of spent nuclear fuel and other radioactive materials associated with spent fuel storage. Initiating Condition (IC) An event or condition that aligns with the definition of one of the four emergency classification levels by virtue of the potential or actual effects or consequences. Maintain Take appropriate action to hold the value of an identified parameter within specified limits. Normal Levels As applied to radiological IC/EALs, the highest reading in the past twenty-four hours excluding the current peak value. Owner Controlled Area The property associated with the station and owned by the company. Access is normally limited to persons entering for official business (ref. 4.1.13). Projectile An object directed toward a Nuclear Power Plant that could cause concern for its continued operability, reliability, or personnel safety. Protected Area EAL BASES DOCUMENT Rev. 0 Page 20 of 292

An area that normally encompasses all controlled areas within the security protected area fence. RCS Intact The RCS should be considered intact when the RCS pressure boundary is in its normal condition for the cold shutdown mode of operation (e.g., no freeze seals or nozzle dams). Refueling Pathway The reactor refueling canal, spent fuel pool and fuel transfer canal comprise the REFUELING PATHWAY. Restore Take the appropriate action required to return the value of an identified parameter to the applicable limits Ruptured The condition of a steam generator in which primary-to-secondary leakage is of sufficient magnitude to require a safety injection (ref. 4.1.14). Safety System A system required for safe plant operation, cooling down the plant and/or placing it in the cold shutdown condition, including the ECCS. These are typically systems classified as safety-related (as defined in 10CFR50.2): Those structures, systems and components that are relied upon to remain functional during and following design basis events to assure: (1) The integrity of the reactor coolant pressure boundary; (2) The capability to shut down the reactor and maintain it in a safe shutdown condition; (3) The capability to prevent or mitigate the consequences of accidents which could result in potential offsite exposures. Security Condition ANY Security Event as listed in the approved security contingency plan that constitutes a threat/compromise to site security, threat/risk to site personnel, or a potential degradation to the level of safety of the plant. A SECURITY CONDITION does not involve a HOSTILE ACTION. Site Area Emergency EAL BASES DOCUMENT Rev. 0 Page 21 of 292

Events are in progress or have occurred which involve actual or likely major failures of plant functions needed for protection of the public or HOSTILE ACTION that results in intentional damage or malicious acts; 1) toward site personnel or equipment that could lead to the likely failure of or; 2) that prevent effective access to, equipment needed for the protection of the public. Any releases are not expected to result in exposure levels which exceed EPA PAG exposure levels beyond the SITE BOUNDARY. Site Boundary Area as depicted in UFSAR Figure 1.2-12 Site Plan (ref. 4.1.7). The SITE BOUNDARY is defined at a minimum exclusion distance of 0.75 miles. This is the nearest distance from potential release points at which protective actions would be required for members of the public. Unisolable An open or breached system line that cannot be isolated, remotely or locally. Unplanned A parameter change or an event that is not 1) the result of an intended evolution or 2) an expected plant response to a transient. The cause of the parameter change or event may be known or unknown. Unusual Event Events are in progress or have occurred which indicate a potential degradation of the level of safety of the plant or indicate a security threat to facility protection has been initiated. No releases of radioactive material requiring offsite response or monitoring are expected unless further degradation of SAFETY SYSTEMS occurs. Valid An indication, report, or condition, is considered to be VALID when it is verified by (1) an instrument channel check, or (2) indications on related or redundant indicators, or (3) by direct observation by plant personnel, such that doubt related to the indicators operability, the conditions existence, or the reports accuracy is removed. Implicit in this definition is the need for timely assessment. Visible Damage Damage to a component or structure that is readily observable without measurements, testing, or analysis. The visual impact of the damage is sufficient to cause concern regarding the operability or reliability of the affected component or structure. EAL BASES DOCUMENT Rev. 0 Page 22 of 292

5.2 Abbreviations/Acronyms °F ....................................................................................................... Degrees Fahrenheit °........................................................................................................................... Degrees AC ....................................................................................................... Alternating Current AOP ................................................................................. Abnormal Operating Procedure ATWS ..................................................................... Anticipated Transient Without Scram B&W ..................................................................................................... Babcock & Wilcox BWST .................................................................................. Borated Water Storage Tank DBNPS ..................................................................... Davis-Besse Nuclear Power Station CCW ....................................................................................... Component Cooling Water CDE ...................................................................................... Committed Dose Equivalent CFR ..................................................................................... Code of Federal Regulations DBA ............................................................................................... Design Basis Accident DC ............................................................................................................... Direct Current DFSF .......................................................................................... Dry Fuel Storage Facility DHR ................................................................................................. Decay Heat Removal DSC ................................................................................................ Dry Shielded Canister EAL ............................................................................................. Emergency Action Level ECCS............................................................................ Emergency Core Cooling System ECL ................................................................................. Emergency Classification Level EOF .................................................................................. Emergency Operations Facility EOP ...............................................................................Emergency Operating Procedure EPA .............................................................................. Environmental Protection Agency EPIP ................................................................Emergency Plan Implementing Procedure ERG ................................................................................Emergency Response Guideline ESF ........................................................................................ Engineered Safety Feature FAA ................................................................................. Federal Aviation Administration FBI ................................................................................... Federal Bureau of Investigation FEMA............................................................... Federal Emergency Management Agency FSAR .................................................................................... Final Safety Analysis Report GE ..................................................................................................... General Emergency IC ......................................................................................................... Initiating Condition IPEEE .................Individual Plant Examination of External Events (Generic Letter 88-20) ISFSI ........................................................... Independent Spent Fuel Storage Installation EAL BASES DOCUMENT Rev. 0 Page 23 of 292

Keff .........................................................................Effective Neutron Multiplication Factor LCO .................................................................................. Limiting Condition of Operation LER ............................................................................................... Licensee Event Report LOCA ......................................................................................... Loss of Coolant Accident MSIV ...................................................................................... Main Steam Isolation Valve MSL ........................................................................................................ Main Steam Line MSSV ........................................................................................ Main Steam Safety Valve mR, mRem, mrem, mREM .............................................. milli-Roentgen Equivalent Man MU-HPI .................................................................... Makeup and High Pressure Injection MW .................................................................................................................... Megawatt NEI .............................................................................................. Nuclear Energy Institute NESP ................................................................... National Environmental Studies Project NRC ................................................................................Nuclear Regulatory Commission NSSS ................................................................................ Nuclear Steam Supply System NORAD................................................... North American Aerospace Defense Command OBE ...................................................................................... Operating Basis Earthquake OCA .............................................................................................. Owner Controlled Area ODCM........................................................................... Off-site Dose Calculation Manual ORO ................................................................................. Offsite Response Organization PA .............................................................................................................. Protected Area PAG ........................................................................................ Protective Action Guideline PORV .................................................................................. Power Operated Relief Valve PRA/PSA ..................... Probabilistic Risk Assessment / Probabilistic Safety Assessment PWR ....................................................................................... Pressurized Water Reactor PSIG ............................................................................... Pounds per Square Inch Gauge R ........................................................................................................................ Roentgen RCDT.................................................................................... Reactor Coolant Drain Tank RCS ............................................................................................ Reactor Coolant System Rem, rem, REM ....................................................................... Roentgen Equivalent Man RPS ........................................................................................ Reactor Protection System RV .............................................................................................................Reactor Vessel SAR ............................................................................................... Safety Analysis Report SBO ......................................................................................................... Station Blackout SBODG........................................................................ Station Blackout Diesel Generator EAL BASES DOCUMENT Rev. 0 Page 24 of 292

SCBA ...................................................................... Self-Contained Breathing Apparatus SG ......................................................................................................... Steam Generator SI .............................................................................................................. Safety Injection SPDS ........................................................................... Safety Parameter Display System SRO ............................................................................................ Senior Reactor Operator TEDE ............................................................................... Total Effective Dose Equivalent TOAF .................................................................................................... Top of Active Fuel TSC .......................................................................................... Technical Support Center TRM ............................................................................... Technical Requirements Manual EAL BASES DOCUMENT Rev. 0 Page 25 of 292

6.0 DBNPS-TO-NEI 99-01 Rev. 6 EAL CROSS-REFERENCE This cross-reference is provided to facilitate association and location of a DBNPS EAL within the NEI 99-01 IC/EAL identification scheme. Further information regarding the development of the DBNPS EALs based on the NEI guidance can be found in the EAL Comparison Matrix. DBNPS NEI 99-01 Rev. 6 Example EAL IC EAL HU1.1 HU1 1 HU1.2 HU1 2 HU1.3 HU1 3 HU2.1 HU2 1 HU3.1 HU3 1 HU3.2 HU3 2 HU3.3 HU3 3 HU3.4 HU3 4 HU4.1 HU4 1 HU4.2 HU4 2 HU4.3 HU4 3 HU4.4 HU4 4 HU7.1 HU7 1 HA1.1 HA1 1 HA1.2 HA1 2 HA5.1 HA5 1 HA6.1 HA6 1 HA7.1 HA7 1 HS1.1 HS1 1 HS6.1 HS6 1 HS7.1 HS7 1 EAL BASES DOCUMENT Rev. 0 Page 26 of 292

DBNPS NEI 99-01 Rev. 6 Example EAL IC EAL HG1.1 HG1 1 HG7.1 HG7 1 RU1.1 AU1 1, 2 RU1.2 AU1 3 RU2.1 AU2 1 RA1.1 AA1 1 RA1.2 AA1 2 RA1.3 AA1 3 RA1.4 AA1 4 RA2.1 AA2 1 RA2.2 AA2 2 RA2.3 AA2 3 RA3.1 AA3 1 RA3.2 AA3 2 RS1.1 AS1 1 RS1.2 AS1 2 RS1.3 AS1 3 RS2.1 AS2 1 RG1.1 AG1 1 RG1.2 AG1 2 RG1.3 AG1 3 RG2.1 AG2 1 EU1.1 E-HU1 1 CU1.1 CU1 1 CU1.2 CU1 2 EAL BASES DOCUMENT Rev. 0 Page 27 of 292

DBNPS NEI 99-01 Rev. 6 Example EAL IC EAL CU2.1 CU2 1 CU3.1 CU3 1 CU3.2 CU3 2 CU4.1 CU4 1 CU5.1 CU5 1 CU5.2 CU5 2 CU5.3 CU5 3 CA1.1 CA1 1 CA1.2 CA1 2 CA2.1 CA2 1 CA3.1 CA3 1, 2 CA6.1 CA6 1 CS1.1 CS1 3 CG1.1 CG1 2 SU1.1 SU1 1 SU3.1 SU2 1 SU4.1 SU3 1 SU4.2 SU3 2 SU5.1 SU4 1 SU6.1 SU5 1 SU6.2 SU5 2 SU7.1 SU6 1 SU7.2 SU6 2 SU7.3 SU6 3 SU8.1 SU7 1 EAL BASES DOCUMENT Rev. 0 Page 28 of 292

DBNPS NEI 99-01 Rev. 6 Example EAL IC EAL SU8.2 SU7 2 SA1.1 SA1 1 SA3.1 SA2 1 SA6.1 SA5 1 SA9.1 SA9 1 SS1.1 SS1 1 SS2.1 SS8 1 SS6.1 SS5 1 SG1.1 SG1 1 SG1.2 SG8 1 FA1.1 FA1 1 FS1.1 FS1 1 FG1.1 FG1 1 EAL BASES DOCUMENT Rev. 0 Page 29 of 292

7.0 ATTACHMENTS Attachment 1, Emergency Action Level Technical Bases Attachment 2, Fission Product Barrier Matrix and Basis Attachment 3, Safe Shutdown Rooms/Areas Tables R-2 & H-2 Bases EAL BASES DOCUMENT Rev. 0 Page 30 of 292

ATTACHMENT 1 EAL Bases Category H - Hazards and Other Conditions Affecting Plant Safety EAL Group: ANY (EALs in this category are applicable to ANY plant condition, hot or cold.) Hazards are non-plant, system-related events that can directly or indirectly affect plant operation, reactor plant safety or personnel safety.

1. Security Unauthorized entry attempts into the PROTECTED AREA, bomb threats, sabotage attempts, and actual security compromises threatening loss of physical control of the plant.
2. Seismic Event Natural events such as earthquakes have potential to cause plant structure or equipment damage of sufficient magnitude to threaten personnel or plant safety.
3. Natural or Technology Hazard Other natural and non-naturally occurring events that can cause damage to plant facilities include tornados, FLOODING, hazardous material releases and events restricting site access warranting classification.
4. Fire FIREs can pose significant hazards to personnel and reactor safety. Appropriate for classification are FIREs within the site PROTECTED AREA or FIREs that may affect operability of equipment needed for safe shutdown.
5. Hazardous Gas Toxic, corrosive, asphyxiant or flammable gas leaks can affect normal plant operations or preclude access to plant areas required to safely shutdown the plant.
6. Control Room Evacuation Events that are indicative of loss of Control Room habitability. If the Control Room must be evacuated, additional support for monitoring and controlling plant functions is necessary through the emergency response facilities.
7. Emergency Director Judgment The EALs defined in other categories specify the predetermined symptoms or events that are indicative of emergency or potential emergency conditions and thus warrant classification. While these EALs have been developed to address the full spectrum of possible emergency conditions that may warrant classification and subsequent implementation of the Emergency Plan, a provision for classification of emergencies based on operator/management experience and judgment is still necessary. The EALs of this EAL BASES DOCUMENT Rev. 0 Page 31 of 292

ATTACHMENT 1 EAL Bases category provide the Emergency Director the latitude to classify emergency conditions consistent with the established classification criteria based upon Emergency Director judgment. EAL BASES DOCUMENT Rev. 0 Page 32 of 292

ATTACHMENT 1 EAL Bases Category: H - Hazards Subcategory: 1 - Security Initiating Condition: HOSTILE ACTION resulting in loss of physical control of the facility EAL: HG1.1 General Emergency A HOSTILE ACTION is occurring or has occurred within the PROTECTED AREA as reported by the Security Shift Supervisor AND EITHER of the following has occurred: ANY of the following safety functions cannot be controlled or maintained z Reactivity z Core cooling (RCS inventory) z RCS heat removal (ability to maintain heat sink) OR Damage to spent fuel has occurred or is IMMINENT Mode Applicability: ALL NEI 99-01 Basis: This IC addresses an event in which a HOSTILE FORCE has taken physical control of the facility to the extent that the plant staff can no longer operate equipment necessary to maintain key safety functions. It also addresses a HOSTILE ACTION leading to a loss of physical control that results in actual or IMMINENT damage to spent fuel due to 1) damage to a spent fuel pool cooling system (e.g., pumps, heat exchangers, controls, etc.) or, 2) loss of spent fuel pool integrity such that sufficient water level cannot be maintained. Timely and accurate communications between Security Shift Supervision and the Control Room is essential for proper classification of a security-related event (ref. 2, 3). Security plans and terminology are based on the guidance provided by NEI 03-12, Template for the Security Plan, Training and Qualification Plan, Safeguards Contingency Plan [and Independent Spent Fuel Storage Installation Security Program]. EAL BASES DOCUMENT Rev. 0 Page 33 of 292

ATTACHMENT 1 EAL Bases Emergency plans and implementing procedures are public documents; therefore, EALs should not incorporate Security-sensitive information. This includes information that may be advantageous to a potential adversary, such as the particulars concerning a specific threat or threat location. Security-sensitive information should be contained in non-public documents such as the DBNPS Physical Security Plan (ref.1). DBNPS Basis: None DBNPS Basis Reference(s):

1. DBNPS Physical Security Plan (safeguards)
2. DB-OP-02544 Security Events or Threats (restricted)
3. RA-EP-02890 Emergency Response Organization Response to Security Events or Threats
4. NEI 99-01 HG1 EAL BASES DOCUMENT Rev. 0 Page 34 of 292

ATTACHMENT 1 EAL Bases Category: H - Hazards Subcategory: 1 - Security Initiating Condition: HOSTILE ACTION within the PROTECTED AREA EAL: HS1.1 Site Area Emergency A HOSTILE ACTION is occurring or has occurred within the PROTECTED AREA as reported by the Security Shift Supervisor Mode Applicability: ALL NEI 99-01 Basis: This IC addresses the occurrence of a HOSTILE ACTION within the PROTECTED AREA. This event will require rapid response and assistance due to the possibility for damage to plant equipment. Timely and accurate communications between Security Shift Supervision and the Control Room is essential for proper classification of a security-related event (ref. 2, 3). Security plans and terminology are based on the guidance provided by NEI 03-12, Template for the Security Plan, Training and Qualification Plan, Safeguards Contingency Plan [and Independent Spent Fuel Storage Installation Security Program]. As time and conditions allow, these events require a heightened state of readiness by the plant staff and implementation of onsite protective measures (e.g., evacuation, dispersal or sheltering). The Site Area Emergency declaration will mobilize Offsite Response Organization (ORO) resources and have them available to develop and implement public protective actions in the unlikely event that the attack is successful in impairing multiple safety functions. This IC does not apply to a HOSTILE ACTION directed at an ISFSI PROTECTED AREA located outside the plant PROTECTED AREA; such an attack should be assessed using IC HA1. It also does not apply to incidents that are accidental events, acts of civil disobedience, or otherwise are not a HOSTILE ACTION perpetrated by a HOSTILE FORCE. Examples include the crash of a small aircraft, shots from hunters, physical disputes between employees, etc. Reporting of these types of events is adequately addressed by other EALs, or the requirements of 10 CFR § 73.71 or 10 CFR § 50.72. Emergency plans and implementing procedures are public documents; therefore, EALs should not incorporate Security-sensitive information. This includes information that may be advantageous to a potential adversary, such as the particulars concerning a specific threat or threat location. Security-sensitive information should be contained in non-public documents such as the DBNPS Physical Security Safeguards Plan (ref. 1). EAL BASES DOCUMENT Rev. 0 Page 35 of 292

ATTACHMENT 1 EAL Bases Escalation of the emergency classification level would be via IC HG1. DBNPS Basis: The Security Shift Supervision is defined as the Security Shift Supervisor or designee. These individuals are the designated on-site personnel qualified and trained to confirm that a security event is occurring or has occurred. Training on security event classification is highly controlled due to the strict secrecy controls placed on the DBNPS Physical Security Plan (Safeguards) information (ref. 1). DBNPS Basis Reference(s):

1. DBNPS Physical Security Plan (safeguards)
2. DB-OP-02544 Security Events or Threats (restricted)
3. RA-EP-02890 Emergency Response Organization Response to Security Events or Threats
4. NEI 99-01 HS1 EAL BASES DOCUMENT Rev. 0 Page 36 of 292

ATTACHMENT 1 EAL Bases Category: H - Hazards Subcategory: 1 - Security Initiating Condition: HOSTILE ACTION within the OWNER CONTROLLED AREA or airborne attack threat within 30 minutes EAL: HA1.1 Alert A HOSTILE ACTION is occurring or has occurred within the OWNER CONTROLLED AREA as reported by the Security Shift Supervisor Mode Applicability: ALL NEI 99-01 Basis: This IC addresses the occurrence of a HOSTILE ACTION within the OWNER CONTROLLED AREA or notification of an aircraft attack threat. This event will require rapid response and assistance due to the possibility of the attack progressing to the PROTECTED AREA, or the need to prepare the plant and staff for a potential aircraft impact. Timely and accurate communications between Security Shift Supervision and the Control Room is essential for proper classification of a security-related event (ref. 2, 3). Security plans and terminology are based on the guidance provided by NEI 03-12, Template for the Security Plan, Training and Qualification Plan, Safeguards Contingency Plan [and Independent Spent Fuel Storage Installation Security Program]. As time and conditions allow, these events require a heightened state of readiness by the plant staff and implementation of onsite protective measures (e.g., evacuation, dispersal or sheltering). The Alert declaration will also heighten the awareness of Offsite Response Organizations (OROs), allowing them to be better prepared should it be necessary to consider further actions. This IC does not apply to incidents that are accidental events, acts of civil disobedience, or otherwise are not a HOSTILE ACTION perpetrated by a HOSTILE FORCE. Examples include the crash of a small aircraft, shots from hunters, physical disputes between employees, etc. Reporting of these types of events is adequately addressed by other EALs, or the requirements of 10 CFR § 73.71 or 10 CFR § 50.72. EAL #1This EAL is applicable for ANY HOSTILE ACTION occurring, or that has occurred, in the OWNER CONTROLLED AREA. This includes any action directed against an ISFSI that is located outside the plant PROTECTED AREA. EAL BASES DOCUMENT Rev. 0 Page 37 of 292

ATTACHMENT 1 EAL Bases EAL #2 addresses the threat from the impact of an aircraft on the plant, and the anticipated arrival time is within 30 minutes. The intent of this EAL is to ensure that threat-related notifications are made in a timely manner so that plant personnel and OROs are in a heightened state of readiness. This EAL is met when the threat-related information has been validated in accordance with (site-specific procedure). The NRC Headquarters Operations Officer (HOO) will communicate to the licensee if the threat involves an aircraft. The status and size of the plane may be provided by NORAD through the NRC. In some cases, it may not be readily apparent if an aircraft impact within the OWNER CONTROLLED AREA was intentional (i.e., a HOSTILE ACTION). It is expected, although not certain, that notification by an appropriate Federal agency to the site would clarify this point. In this case, the appropriate federal agency is intended to be NORAD, FBI, FAA or NRC. The emergency declaration, including one based on other ICs/EALs, should not be unduly delayed while awaiting notification by a Federal agency. Emergency plans and implementing procedures are public documents; therefore, EALs should not incorporate Security-sensitive information. This includes information that may be advantageous to a potential adversary, such as the particulars concerning a specific threat or threat location. Security-sensitive information should be contained in non-public documents such as the DBNPS Physical Security Plan (ref. 1). DBNPS Basis: The Security Shift Supervision is defined as the Security Shift Supervisor or designee. Escalation of the emergency classification level would be via IC HS1 or HG1. DBNPS Basis Reference(s):

1. DBNPS Physical Security Plan (safeguards)
2. DB-OP-02544 Security Events or Threats (restricted)
3. RA-EP-02890 Emergency Response Organization Response to Security Events or Threats
4. NEI 99-01 HA1 EAL BASES DOCUMENT Rev. 0 Page 38 of 292

ATTACHMENT 1 EAL Bases Category: H - Hazards Subcategory: 1 - Security Initiating Condition: HOSTILE ACTION within the OWNER CONTROLLED AREA or airborne attack threat within 30 minutes EAL: HA1.2 Alert A validated notification from NRC of an aircraft attack threat within 30 min. of the site Mode Applicability: ALL NEI 99-01 Basis: This IC addresses the occurrence of a HOSTILE ACTION within the OWNER CONTROLLED AREA or notification of an aircraft attack threat. This event will require rapid response and assistance due to the possibility of the attack progressing to the PROTECTED AREA, or the need to prepare the plant and staff for a potential aircraft impact. Timely and accurate communications between Security Shift Supervision and the Control Room is essential for proper classification of a security-related event (ref. 2, 3). Security plans and terminology are based on the guidance provided by NEI 03-12, Template for the Security Plan, Training and Qualification Plan, Safeguards Contingency Plan [and Independent Spent Fuel Storage Installation Security Program]. As time and conditions allow, these events require a heightened state of readiness by the plant staff and implementation of onsite protective measures (e.g., evacuation, dispersal or sheltering). The Alert declaration will also heighten the awareness of Offsite Response Organizations (OROs), allowing them to be better prepared should it be necessary to consider further actions. This IC does not apply to incidents that are accidental events, acts of civil disobedience, or otherwise are not a HOSTILE ACTION perpetrated by a HOSTILE FORCE. Examples include the crash of a small aircraft, shots from hunters, physical disputes between employees, etc. Reporting of these types of events is adequately addressed by other EALs, or the requirements of 10 CFR § 73.71 or 10 CFR § 50.72. EAL #1 is applicable for any HOSTILE ACTION occurring, or that has occurred, in the OWNER CONTROLLED AREA. This includes any action directed against an ISFSI that is located outside the plant PROTECTED AREA. EAL #2This EAL addresses the threat from the impact of an aircraft on the plant, and the anticipated arrival time is within 30 minutes. The intent of this EAL is to ensure that threat-EAL BASES DOCUMENT Rev. 0 Page 39 of 292

ATTACHMENT 1 EAL Bases related notifications are made in a timely manner so that plant personnel and OROs are in a heightened state of readiness. This EAL is met when the threat-related information has been validated in accordance with (site-specific security procedures). The NRC Headquarters Operations Officer (HOO) will communicate to the licensee if the threat involves an aircraft. The status and size of the plane may be provided by NORAD through the NRC. In some cases, it may not be readily apparent if an aircraft impact within the OWNER CONTROLLED AREA was intentional (i.e., a HOSTILE ACTION). It is expected, although not certain, that notification by an appropriate Federal agency to the site would clarify this point. In this case, the appropriate federal agency is intended to be NORAD, FBI, FAA or NRC. The emergency declaration, including one based on other ICs/EALs, should not be unduly delayed while awaiting notification by a Federal agency. Emergency plans and implementing procedures are public documents; therefore, EALs should not incorporate Security-sensitive information. This includes information that may be advantageous to a potential adversary, such as the particulars concerning a specific threat or threat location. Security-sensitive information should be contained in non-public documents such as the DBNPS Physical Security Plan (ref. 1). DBNPS Basis: The Security Shift Supervision is defined as the Security Shift Supervisor or designee. Escalation of the emergency classification level would be via IC HS1 or HG1. DBNPS Basis Reference(s):

1. DBNPS Physical Security Plan (safeguards)
2. DB-OP-02544 Security Events or Threats (restricted)
3. RA-EP-02890 Emergency Response Organization Response to Security Events or Threats
4. NEI 99-01 HA1 EAL BASES DOCUMENT Rev. 0 Page 40 of 292

ATTACHMENT 1 EAL Bases Category: H - Hazards Subcategory: 1 - Security Initiating Condition: Confirmed SECURITY CONDITION or threat EAL: HU1.1 Unusual Event A SECURITY CONDITION that does not involve a HOSTILE ACTION as reported by the Security Shift Supervisor Mode Applicability: ALL NEI 99-01 Basis: This IC addresses events that pose a threat to plant personnel or SAFETY SYSTEM equipment, and thus represent a potential degradation in the level of plant safety. Security events which do not meet one of these EALs are adequately addressed by the requirements of 10 CFR § 73.71 or 10 CFR § 50.72. Security events assessed as HOSTILE ACTIONS are classifiable under ICs HA1, HS1 and HG1. Timely and accurate communications between Security Shift Supervision and the Control Room is essential for proper classification of a security-related event (ref. 2, 3, 4). Classification of these events will initiate appropriate threat-related notifications to plant personnel and Offsite Response Organizations. Security plans and terminology are based on the guidance provided by NEI 03-12, Template for the Security Plan, Training and Qualification Plan, Safeguards Contingency Plan [and Independent Spent Fuel Storage Installation Security Program]. EAL #1This EAL references (site-specific the security Security Shift Supervisorshift supervision) because these are the individuals trained to confirm that a security event is occurring or has occurred. Training on security event confirmation and classification is controlled due to the nature of Safeguards and 10 CFR § 2.39 information. EAL #2 addresses the receipt of a credible security threat. The credibility of the threat is assessed in accordance with (site-specific procedure)DBNPS. EAL #3 addresses the threat from the impact of an aircraft on the plant. The NRC Headquarters Operations Officer (HOO) will communicate to the licensee if the threat involves an aircraft. The status and size of the plane may also be provided by NORAD through the NRC. Validation of the threat is performed in accordance with DBNPS(site-specific procedure). Emergency plans and implementing procedures are public documents; therefore, EALs should EAL BASES DOCUMENT Rev. 0 Page 41 of 292

ATTACHMENT 1 EAL Bases not incorporate Security-sensitive information. This includes information that may be advantageous to a potential adversary, such as the particulars concerning a specific threat or threat location. Security-sensitive information should be contained in non-public documents such as the DBNPS Physical Security Plan (ref. 1). Escalation of the emergency classification level would be via IC HA1. EAL BASES DOCUMENT Rev. 0 Page 42 of 292

ATTACHMENT 1 EAL Bases DBNPS Basis: The Security Shift Supervision is defined as the Security Shift Supervisor or designee. This EAL is based on the DBNPS Physical Security Plan (ref. 1). DBNPS Basis Reference(s):

1. DBNPS Physical Security Plan (safeguards)
2. DB-OP-02544 Security Events or Threats (restricted)
3. RA-EP-02890 Emergency Response Organization Response to Security Events or Threats
4. NEI 99-01 HU1 EAL BASES DOCUMENT Rev. 0 Page 43 of 292

ATTACHMENT 1 EAL Bases Category: H - Hazards Subcategory: 1 - Security Initiating Condition: Confirmed SECURITY CONDITION or threat EAL: HU1.2 Unusual Event Notification of a credible security threat directed at the site Mode Applicability: ALL NEI 99-01 Basis: This IC addresses events that pose a threat to plant personnel or SAFETY SYSTEM equipment, and thus represent a potential degradation in the level of plant safety. Security events which do not meet one of these EALs are adequately addressed by the requirements of 10 CFR § 73.71 or 10 CFR § 50.72. Security events assessed as HOSTILE ACTIONS are classifiable under ICs HA1, HS1 and HG1. Timely and accurate communications between Security Shift Supervision and the Control Room is essential for proper classification of a security-related event (ref. 2, 3, 4). Classification of these events will initiate appropriate threat-related notifications to plant personnel and Offsite Response Organizations. Security plans and terminology are based on the guidance provided by NEI 03-12, Template for the Security Plan, Training and Qualification Plan, Safeguards Contingency Plan [and Independent Spent Fuel Storage Installation Security Program]. EAL #1 references (site-specific security shift supervision) because these are the individuals trained to confirm that a security event is occurring or has occurred. Training on security event confirmation and classification is controlled due to the nature of Safeguards and 10 CFR § 2.39 information. EAL #2This EAL addresses the receipt of a credible security threat. The credibility of the threat is assessed in accordance with (site-specific procedure)the DBNPS Physical Security Plan (ref. 1). EAL #3 addresses the threat from the impact of an aircraft on the plant. The NRC Headquarters Operations Officer (HOO) will communicate to the licensee if the threat involves an aircraft. The status and size of the plane may also be provided by NORAD through the NRC. Validation of the threat is performed in accordance with DBNPS(site-specific procedure). Emergency plans and implementing procedures are public documents; therefore, EALs should EAL BASES DOCUMENT Rev. 0 Page 44 of 292

ATTACHMENT 1 EAL Bases not incorporate Security-sensitive information. This includes information that may be advantageous to a potential adversary, such as the particulars concerning a specific threat or threat location. Security-sensitive information should be contained in non-public documents such as the DBNPS Physical Security Plan (ref. 1). Escalation of the emergency classification level would be via IC HA1. DBNPS Basis: The Security Shift Supervision is defined as the Security Shift Supervisor or designee. This EAL is based on the DBNPS Physical Security Plan (ref. 1). DBNPS Basis Reference(s):

1. DBNPS Physical Security Plan (safeguards)
2. DB-OP-02544 Security Events or Threats (restricted)
3. RA-EP-02890 Emergency Response Organization Response to Security Events or Threats
4. NEI 99-01 HU1 EAL BASES DOCUMENT Rev. 0 Page 45 of 292

ATTACHMENT 1 EAL Bases Category: H - Hazards Subcategory: 1 - Security Initiating Condition: Confirmed SECURITY CONDITION or threat EAL: HU1.3 Unusual Event A validated notification from the NRC providing information of an aircraft threat Mode Applicability: ALL NEI 99-01 Basis: This IC addresses events that pose a threat to plant personnel or SAFETY SYSTEM equipment, and thus represent a potential degradation in the level of plant safety. Security events which do not meet one of these EALs are adequately addressed by the requirements of 10 CFR § 73.71 or 10 CFR § 50.72. Security events assessed as HOSTILE ACTIONS are classifiable under ICs HA1, HS1 and HG1. Timely and accurate communications between Security Shift Supervision and the Control Room is essential for proper classification of a security-related event (ref. 2, 3, 4). Classification of these events will initiate appropriate threat-related notifications to plant personnel and Offsite Response Organizations. Security plans and terminology are based on the guidance provided by NEI 03-12, Template for the Security Plan, Training and Qualification Plan, Safeguards Contingency Plan [and Independent Spent Fuel Storage Installation Security Program]. EAL #1 references (site-specific security shift supervision) because these are the individuals trained to confirm that a security event is occurring or has occurred. Training on security event confirmation and classification is controlled due to the nature of Safeguards and 10 CFR § 2.39 information. EAL #2 addresses the receipt of a credible security threat. The credibility of the threat is assessed in accordance with (site-specific procedure). EAL #3This EAL addresses the threat from the impact of an aircraft on the plant. The NRC Headquarters Operations Officer (HOO) will communicate to the licensee if the threat involves an aircraft. The status and size of the plane may also be provided by NORAD through the NRC. Validation of the threat is performed in accordance with the DBNPS Physical Security Plan (ref. 1)(site-specific procedure). Emergency plans and implementing procedures are public documents; therefore, EALs should not incorporate Security-sensitive information. This includes information that may be EAL BASES DOCUMENT Rev. 0 Page 46 of 292

ATTACHMENT 1 EAL Bases advantageous to a potential adversary, such as the particulars concerning a specific threat or threat location. Security-sensitive information should be contained in non-public documents such as the DBNPS Physical Security Plan (ref. 1). Escalation of the emergency classification level would be via IC HA1. EAL BASES DOCUMENT Rev. 0 Page 47 of 292

ATTACHMENT 1 EAL Bases DBNPS Basis: The Security Shift Supervision is defined as the Security Shift Supervisor or designee. This EAL is based on the DBNPS Physical Security Plan (ref. 1). DBNPS Basis Reference(s):

1. DBNPS Physical Security Plan (safeguards)
2. DB-OP-02544 Security Events or Threats (restricted)
3. RA-EP-02890 Emergency Response Organization Response to Security Events or Threats
4. NEI 99-01 HU1 EAL BASES DOCUMENT Rev. 0 Page 48 of 292

ATTACHMENT 1 EAL Bases Category: H - Hazards and Other Conditions Affecting Plant Safety Subcategory: 2 - Seismic Event Initiating Condition: Seismic event greater than OBE levels EAL: HU2.1 Unusual Event Seismic event > OBE as indicated by OBE alarm on seismic alarm panel C5764A Mode Applicability: ALL NEI 99-01 Basis: This IC addresses a seismic event that results in accelerations at the plant site greater than those specified for an Operating Basis Earthquake (OBE). An earthquake greater than an OBE but less than a Safe Shutdown Earthquake (SSE) should have no significant impact on safety-related systems, structures and components; however, some time may be required for the plant staff to ascertain the actual post-event condition of the plant (e.g., performs walk-downs and post-event inspections). Given the time necessary to perform walk-downs and inspections, and fully understand any impacts, this event represents a potential degradation of the level of safety of the plant. Event verification with external sources should not be necessary during or following an OBE. Earthquakes of this magnitude should be readily felt by on-site personnel and recognized as a seismic event (e.g., lateral accelerations in excess of 0.08g). The Shift Manager or Emergency Director may seek external verification if deemed appropriate (e.g., a call to the USGS, check internet news sources, etc.); however, the verification action must not preclude a timely emergency declaration. Depending upon the plant mode at the time of the event, escalation of the emergency classification level would be via IC CA6 or SA9. DBNPS Basis: Ground motion acceleration of 0.08g horizontal or 0.053g vertical is the Maximum Probable Earthquake as is considered generically as the Operating Basis Earthquake for DBNPS (ref. 1). Four triaxial strong motion accelerographs are installed within plant structures. A twelve-channel magnetic tape acceleration recording device is used to record all triaxial accelerometer transducer outputs. The recording device is located in the control room with a playback unit featuring a visual display. The time-history recorded at each accelerograph location can be analyzed to determine its corresponding peak acceleration values and to verify that site Operating Basis Earthquake (OBE) limits have not been exceeded. Immediate EAL BASES DOCUMENT Rev. 0 Page 49 of 292

ATTACHMENT 1 EAL Bases control room alarm indication of an earthquake of 0.08 g or greater is annunciated on the seismic control panel (C5764A), following seismic trigger actuation by the Containment Concrete Foundation accelerograph (ref. 2). RA-EP-02820 Earthquake provides the guidance for determining any required response actions if the OBE earthquake threshold is exceeded (ref. 3). When the Seismic Monitoring Cabinet key locked switch is placed in OFF, ALL OBE and SSE alarms and cabinet recording functions (TNC 8.3.3 functions 1 and 3 and the DBRM-EMER-5003 Seismic Event Detection function) are nonfunctional. Therefore, the Compensatory Measures listed in DBRM-EMER-5003, Equipment Important to Emergency Response for a loss of the Seismic Event Detection function are required to be employed by the operators to determine if an earthquake occurs and to determine the magnitude of the event in a timely manner" (ref. 5). To avoid inappropriate emergency classification resulting from spurious actuation of the seismic instrumentation or felt motion not attributable to seismic activity, an offsite agency (USGS, National Earthquake Information Center) can confirm that an earthquake has occurred in the area of the plant. However, such confirmation should not preclude a timely emergency declaration based on receipt of the OBE alarm. Contact the NEIC by calling (303) 273-8500. Select option #1, then #2 and inform the analyst you wish to confirm recent seismic activity near DBNPS. Provide the analyst with the following DBNPS coordinates: 41º 35' 49" north latitude, 83º 05' 16" west longitude and exact time of seismic activity (ref. 4). Alternatively, access near real-time seismic activity via the NEIC website: http://earthquake.usgs.gov/eqcenter/ DBNPS Basis Reference(s):

1. Updated FSAR Section 3.1 Seismic Design
2. Updated FSAR Section 3.7.4 Criteria for Seismic Instrumentation Program
3. RA-EP-02820 Earthquake
4. UFSAR Section 2.1.1 Site Location
5. CA 2012-04838-08
6. NEI 99-01 HU2 EAL BASES DOCUMENT Rev. 0 Page 50 of 292

ATTACHMENT 1 EAL Bases Category: H - Hazards and Other Conditions Affecting Plant Safety Subcategory: 3 - Natural or Technology Hazard Initiating Condition: Hazardous event EAL: HU3.1 Unusual Event A tornado strike within the PROTECTED AREA Mode Applicability: ALL NEI 99-01 Basis: This IC addresses hazardous events that are considered to represent a potential degradation of the level of safety of the plant. EAL #1EAL HU3.1 addresses a tornado striking (touching down) within the PROTECTED AREA. EAL #2 addresses flooding of a building room or area that results in operators isolating power to a SAFETY SYSTEM component due to water level or other wetting concerns. Classification is also required if the water level or related wetting causes an automatic isolation of a SAFETY SYSTEM component from its power source (e.g., a breaker or relay trip). To warrant classification, operability of the affected component must be required by Technical Specifications for the current operating mode. EAL #3 addresses a hazardous materials event originating at an offsite location and of sufficient magnitude to impede the movement of personnel within the PROTECTED AREA. EAL #4 addresses a hazardous event that causes an on-site impediment to vehicle movement and significant enough to prohibit the plant staff from accessing the site using personal vehicles. Examples of such an event include site flooding caused by a hurricane, heavy rains, up-river water releases, dam failure, etc., or an on-site train derailment blocking the access road. This EAL is not intended apply to routine impediments such as fog, snow, ice, or vehicle breakdowns or accidents, but rather to more significant conditions such as the Hurricane Andrew strike on Turkey Point in 1992, the flooding around the Cooper Station during the Midwest floods of 1993, or the flooding around Ft. Calhoun Station in 2011. EAL #5 addresses (site-specific description). Escalation of the emergency classification level would be based on ICs in Recognition Categories AR, F, S or C. EAL BASES DOCUMENT Rev. 0 Page 51 of 292

ATTACHMENT 1 EAL Bases DBNPS Basis: Response actions associated with a tornado onsite is provided in RA-EP-02810 Tornado or High Winds (ref. 1). If damage is confirmed visually or by other in-plant indications, the event may be escalated to an Alert under EAL CA6.1 or SA9.1. A tornado striking (touching down) within the PROTECTED AREA warrants declaration of an Unusual Event regardless of the measured wind speed at the meteorological tower. DBNPS Basis Reference(s):

1. RA-EP-02810 Tornado or High Winds
2. NEI 99-01 HU3 EAL BASES DOCUMENT Rev. 0 Page 52 of 292

ATTACHMENT 1 EAL Bases Category: H - Hazards and Other Conditions Affecting Plant Safety Subcategory: 3 - Natural or Technology Hazard Initiating Condition: Hazardous event EAL: HU3.2 Unusual Event Internal room or area FLOODING of a magnitude sufficient to require manual or automatic electrical isolation of a SAFETY SYSTEM component needed for the current operating mode Mode Applicability: ALL NEI 99-01 Basis: This IC addresses hazardous events that are considered to represent a potential degradation of the level of safety of the plant. EAL #1 addresses a tornado striking (touching down) within the PROTECTED AREA. This EAL addresses FLOODING of a building room or area that results in operators isolating power to a SAFETY SYSTEM component due to water level or other wetting concerns. Classification is also required if the water level or related wetting causes an automatic isolation of a SAFETY SYSTEM component from its power source (e.g., a breaker or relay trip). To warrant classification, operability of the affected component must be required by Technical Specifications for the current operating mode. EAL #3 addresses a hazardous materials event originating at an offsite location and of sufficient magnitude to impede the movement of personnel within the PROTECTED AREA. EAL #4 addresses a hazardous event that causes an on-site impediment to vehicle movement and significant enough to prohibit the plant staff from accessing the site using personal vehicles. Examples of such an event include site flooding caused by a hurricane, heavy rains, up-river water releases, dam failure, etc., or an on-site train derailment blocking the access road. This EAL is not intended apply to routine impediments such as fog, snow, ice, or vehicle breakdowns or accidents, but rather to more significant conditions such as the Hurricane Andrew strike on Turkey Point in 1992, the flooding around the Cooper Station during the Midwest floods of 1993, or the flooding around Ft. Calhoun Station in 2011. EAL #5 addresses (site-specific description). EAL BASES DOCUMENT Rev. 0 Page 53 of 292

ATTACHMENT 1 EAL Bases Escalation of the emergency classification level would be based on ICs in Recognition Categories AR, F, S or C. DBNPS Basis: Areas containing safe shutdown equipment susceptible to internal FLOODING are Service Water Pump Room and adjacent areas, Component Cooling Water Pump Room and Emergency Core Cooling System Room(s) (ref.1). Refer to EAL CA6.1 or SA9.1 for internal FLOODING affecting one or more SAFETY SYSTEM trains. DBNPS Basis Reference(s):

1. RA-EP-02880 Internal Flooding
2. NEI 99-01 HU3 EAL BASES DOCUMENT Rev. 0 Page 54 of 292

ATTACHMENT 1 EAL Bases Category: H - Hazards and Other Conditions Affecting Plant Safety Subcategory: 3 - Natural or Technology Hazard Initiating Condition: Hazardous event EAL: HU3.3 Unusual Event Movement of personnel within the PROTECTED AREA is IMPEDED due to an offsite event involving hazardous materials (e.g., an offsite chemical spill or toxic gas release) Mode Applicability: ALL NEI 99-01 Basis: This IC addresses hazardous events that are considered to represent a potential degradation of the level of safety of the plant. EAL #1 addresses a tornado striking (touching down) within the PROTECTED AREA. This EAL addresses flooding of a building room or area that results in operators isolating power to a SAFETY SYSTEM component due to water level or other wetting concerns. Classification is also required if the water level or related wetting causes an automatic isolation of a SAFETY SYSTEM component from its power source (e.g., a breaker or relay trip). To warrant classification, operability of the affected component must be required by Technical Specifications for the current operating mode. EAL #3This EAL addresses a hazardous materials event originating at an offsite location and of sufficient magnitude to IMPEDE the movement of personnel within the PROTECTED AREA. EAL #4 addresses a hazardous event that causes an on-site impediment to vehicle movement and significant enough to prohibit the plant staff from accessing the site using personal vehicles. Examples of such an event include site flooding caused by a hurricane, heavy rains, up-river water releases, dam failure, etc., or an on-site train derailment blocking the access road. This EAL is not intended apply to routine impediments such as fog, snow, ice, or vehicle breakdowns or accidents, but rather to more significant conditions such as the Hurricane Andrew strike on Turkey Point in 1992, the flooding around the Cooper Station during the Midwest floods of 1993, or the flooding around Ft. Calhoun Station in 2011. EAL #5 addresses (site-specific description). EAL BASES DOCUMENT Rev. 0 Page 55 of 292

ATTACHMENT 1 EAL Bases Escalation of the emergency classification level would be based on ICs in Recognition Categories R, F, S or C. DBNPS Basis: As used here, the term "offsite" means the areas external to the DBNPS PROTECTED AREA. DBNPS Basis Reference(s):

1. NEI 99-01 HU3 EAL BASES DOCUMENT Rev. 0 Page 56 of 292

ATTACHMENT 1 EAL Bases Category: H - Hazards and Other Conditions Affecting Plant Safety Subcategory: 3 - Natural or Technology Hazard Initiating Condition: Hazardous event EAL: HU3.4 Unusual Event A hazardous event that results in on-site conditions sufficient to prohibit the plant staff from accessing the site via personal vehicles (Note 7) Note 7: This EAL does not apply to routine traffic impediments such as fog, snow, ice, or vehicle breakdowns or accidents. Mode Applicability: ALL NEI 99-01 Basis: This IC addresses hazardous events that are considered to represent a potential degradation of the level of safety of the plant.EAL #1 addresses a tornado striking (touching down) within the PROTECTED AREA. This EAL addresses flooding of a building room or area that results in operators isolating power to a SAFETY SYSTEM component due to water level or other wetting concerns. Classification is also required if the water level or related wetting causes an automatic isolation of a SAFETY SYSTEM component from its power source (e.g., a breaker or relay trip). To warrant classification, operability of the affected component must be required by Technical Specifications for the current operating mode. EAL #3 addresses a hazardous materials event originating at an offsite location and of sufficient magnitude to impede the movement of personnel within the PROTECTED AREA. EAL #4This EAL addresses a hazardous event that causes an on-site impediment to vehicle movement and significant enough to prohibit the plant staff from accessing the site using personal vehicles. Examples of such an event include site FLOODING caused by a hurricane, heavy rains, up-river water releases, dam failure, etc., or an on-site train derailment blocking the access road. This EAL is not intended apply to routine impediments such as fog, snow, ice, or vehicle breakdowns or accidents, but rather to more significant conditions such as the Hurricane Andrew strike on Turkey Point in 1992, the flooding around the Cooper Station during the Midwest floods of 1993, or the flooding around Ft. Calhoun Station in 2011.EAL #5 addresses (site-specific description). Escalation of the emergency classification level would be based on ICs in Recognition Categories AR, F, S or C. EAL BASES DOCUMENT Rev. 0 Page 57 of 292

ATTACHMENT 1 EAL Bases DBNPS Basis: As used here, the term "onsite" means the areas within the DBNPS OWNER CONTROLLED AREA. DBNPS Basis Reference(s):

1. NEI 99-01 HU3 EAL BASES DOCUMENT Rev. 0 Page 58 of 292

ATTACHMENT 1 EAL Bases Category: H - Hazards and Other Conditions Affecting Plant Safety Subcategory: 4 - FIRE Initiating Condition: FIRE potentially degrading the level of safety of the plant EAL: HU4.1 Unusual Event A FIRE is not extinguished within 15 min. of ANY of the following FIRE detection indications (Note 1): z Report from the field (i.e., visual observation) z Receipt of multiple (more than 1) fire alarms z Field verification of a single fire alarm AND The FIRE is located within ANY Table H-1 area Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Table H-1 Safe Shutdown Fire Areas

  • Containment
  • Control Room
  • Auxiliary Building
  • Intake Structure
  • Borated Water Storage Tank Mode Applicability:

ALL NEI 99-01 Basis: This IC addresses the magnitude and extent of FIRES that may be indicative of a potential degradation of the level of safety of the plant. EAL #1 The For EAL HU4.1 the intent of the 15-minute duration is to size the FIRE and to discriminate against small FIRES that are readily extinguished (e.g., smoldering waste paper basket). In addition to alarms, other indications of a FIRE could be a drop in fire main pressure, automatic activation of a suppression system, etc. EAL BASES DOCUMENT Rev. 0 Page 59 of 292

ATTACHMENT 1 EAL Bases Upon receipt, operators will take prompt actions to confirm the validity of an initial fire alarm, indication, or report. For EAL assessment purposes, the emergency declaration clock starts at the time that the initial alarm, indication, or report was received, and not the time that a subsequent verification action was performed. Similarly, the fire duration clock also starts at the time of receipt of the initial alarm, indication or report.EAL #2 This EAL addresses receipt of a single fire alarm, and the existence of a FIRE is not verified (i.e., proved or disproved) within 30-minutes of the alarm. Upon receipt, operators will take prompt actions to confirm the validity of a single fire alarm. For EAL assessment purposes, the 30-minute clock starts at the time that the initial alarm was received, and not the time that a subsequent verification action was performed. A single fire alarm, absent other indication(s) of a FIRE, may be indicative of equipment failure or a spurious activation, and not an actual FIRE. For this reason, additional time is allowed to verify the validity of the alarm. The 30-minute period is a reasonable amount of time to determine if an actual FIRE exists; however, after that time, and absent information to the contrary, it is assumed that an actual FIRE is in progress. If an actual FIRE is verified by a report from the field, then EAL #1 is immediately applicable, and the emergency must be declared if the FIRE is not extinguished within 15-minutes of the report. If the alarm is verified to be due to an equipment failure or a spurious activation, and this verification occurs within 30-minutes of the receipt of the alarm, then this EAL is not applicable and no emergency declaration is warranted. EAL #3 In addition to a FIRE addressed by EAL #1 or EAL #2, a FIRE within the plant PROTECTED AREA not extinguished within 60-minutes may also potentially degrade the level of plant safety. This basis extends to a FIRE occurring within the PROTECTED AREA of an ISFSI located outside the plant PROTECTED AREA. [Sentence for plants with an ISFSI outside the plant Protected Area] EAL #4 If a FIRE within the plant or ISFSI [for plants with an ISFSI outside the plant Protected Area] PROTECTED AREA is of sufficient size to require a response by an offsite firefighting agency (e.g., a local town Fire Department), then the level of plant safety is potentially degraded. The dispatch of an offsite firefighting agency to the site requires an emergency declaration only if it is needed to actively support firefighting efforts because the fire is beyond the capability of the Fire Brigade to extinguish. Declaration is not necessary if the agency resources are placed on stand-by, or supporting post-extinguishment recovery or investigation actions. Basis-Related Requirements from Appendix R Appendix R to 10 CFR 50, states in part: EAL BASES DOCUMENT Rev. 0 Page 60 of 292

ATTACHMENT 1 EAL Bases Criterion 3 of Appendix A to this part specifies that "Structures, systems, and components important to safety shall be designed and located to minimize, consistent with other safety requirements, the probability and effect of fires and explosions." When considering the effects of fire, those systems associated with achieving and maintaining safe shutdown conditions assume major importance to safety because damage to them can lead to core damage resulting from loss of coolant through boil-off. Because fire may affect safe shutdown systems and because the loss of function of systems used to mitigate the consequences of design basis accidents under post-fire conditions does not per se impact public safety, the need to limit fire damage to systems required to achieve and maintain safe shutdown conditions is greater than the need to limit fire damage to those systems required to mitigate the consequences of design basis accidents. In addition, Appendix R to 10 CFR 50, requires, among other considerations, the use of 1-hour fire barriers for the enclosure of cable and equipment and associated non-safety circuits of one redundant train (G.2.c). As used in EAL #2HU4.2, the 30-minutes to verify a single alarm is well within this worst-case 1-hour time period. Depending upon the plant mode at the time of the event, escalation of the emergency classification level would be via IC CA6 or SA9. DBNPS Basis: The 15-minute requirement begins with a credible notification that a FIRE is occurring, or receipt of multiple VALID fire detection system alarms or field validation of a single fire alarm. The alarm is to be validated using available Control Room indications or alarms to prove that it is not spurious, or by reports from the field. Table H-1 Fire Areas are based on DBNPS Unit 1 Fire Hazard Analysis Report. Table H-1 Fire Areas include those structures containing functions and systems required for safe shutdown of the plant (SAFETY SYSTEMS) (ref. 1, 2). One of the following 4 things must occur within 15-minutes of the original FIRE indication / notification (ref. 3, 4):

1. The alarm must be proven to be spurious (there is no FIRE),
2. The FIRE must be extinguished,
3. The FIRE must be proven not to be in a Table H-1 area, or
4. The Unusual Event must be declared.

For the purposes of declaring an emergency event, the term "extinguished" means no visible flames. EAL BASES DOCUMENT Rev. 0 Page 61 of 292

ATTACHMENT 1 EAL Bases The 15 minute time period starts with EITHER:

1. A credible notification to the Control Room that a FIRE is occurring in a table H-1 area, (verbal notification from the scene) or
2. Control Room indication of multiple fire detection system alarms/actuations in a Table H-1 area DBNPS Basis Reference(s):
1. DBNPS Fire Hazard Analysis Report
2. DB-OP-02529 Fire Procedure
3. Condition Report 09-66994, Emergency Action Level Clarification
4. Condition Report 09-69475, White Finding Identified For Inadequate Emergency Classification of Event
5. NEI 99-01 HU4 EAL BASES DOCUMENT Rev. 0 Page 62 of 292

ATTACHMENT 1 EAL Bases Category: H - Hazards and Other Conditions Affecting Plant Safety Subcategory: 4 - FIRE Initiating Condition: FIRE potentially degrading the level of safety of the plant EAL: HU4.2 Unusual Event Receipt of a single fire alarm (i.e., no other indications of a FIRE) AND The fire alarm is indicating a FIRE within ANY Table H-1 area AND The existence of a FIRE is not verified within 30 min. of alarm receipt (Note 1) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Table H-1 Safe Shutdown Fire Areas

  • Containment
  • Control Room
  • Auxiliary Building
  • Intake Structure
  • Borated Water Storage Tank Mode Applicability:

ALL NEI 99-01 Basis: This IC addresses the magnitude and extent of FIRES that may be indicative of a potential degradation of the level of safety of the plant. EAL #1 The intent of the 15-minute duration is to size the FIRE and to discriminate against small FIRES that are readily extinguished (e.g., smoldering waste paper basket). In addition to alarms, other indications of a FIRE could be a drop in fire main pressure, automatic activation of a suppression system, etc. EAL BASES DOCUMENT Rev. 0 Page 63 of 292

ATTACHMENT 1 EAL Bases Upon receipt, operators will take prompt actions to confirm the validity of an initial fire alarm, indication, or report. For EAL assessment purposes, the emergency declaration clock starts at the time that the initial alarm, indication, or report was received, and not the time that a subsequent verification action was performed. Similarly, the fire duration clock also starts at the time of receipt of the initial alarm, indication or report. EAL #2 This EAL addresses receipt of a single fire alarm, and the existence of a FIRE is not verified (i.e., proved or disproved) within 30-minutes of the alarm. Upon receipt, operators will take prompt actions to confirm the validity of a single fire alarm. For EAL assessment purposes, the 30-minute clock starts at the time that the initial alarm was received, and not the time that a subsequent verification action was performed. A single fire alarm, absent other indication(s) of a FIRE, may be indicative of equipment failure or a spurious activation, and not an actual FIRE. For this reason, additional time is allowed to verify the validity of the alarm. The 30-minute period is a reasonable amount of time to determine if an actual FIRE exists; however, after that time, and absent information to the contrary, it is assumed that an actual FIRE is in progress. If an actual FIRE is verified by a report from the field, then EAL #1HU4.1 is immediately applicable, and the emergency must be declared if the FIRE is not extinguished within 15-minutes of the report. If the alarm is verified to be due to an equipment failure or a spurious activation, and this verification occurs within 30-minutes of the receipt of the alarm, then this EAL is not applicable and no emergency declaration is warranted. EAL #3 In addition to a FIRE addressed by EAL #1 or EAL #2, a FIRE within the plant PROTECTED AREA not extinguished within 60-minutes may also potentially degrade the level of plant safety. This basis extends to a FIRE occurring within the PROTECTED AREA of an ISFSI located outside the plant PROTECTED AREA. [Sentence for plants with an ISFSI outside the plant Protected Area] EAL #4 If a FIRE within the plant or ISFSI [for plants with an ISFSI outside the plant Protected Area] PROTECTED AREA is of sufficient size to require a response by an offsite firefighting agency (e.g., a local town Fire Department), then the level of plant safety is potentially degraded. The dispatch of an offsite firefighting agency to the site requires an emergency declaration only if it is needed to actively support firefighting efforts because the fire is beyond the capability of the Fire Brigade to extinguish. Declaration is not necessary if the agency resources are placed on stand-by, or supporting post-extinguishment recovery or investigation actions. Basis-Related Requirements from Appendix R Appendix R to 10 CFR 50, states in part: EAL BASES DOCUMENT Rev. 0 Page 64 of 292

ATTACHMENT 1 EAL Bases Criterion 3 of Appendix A to this part specifies that "Structures, systems, and components important to safety shall be designed and located to minimize, consistent with other safety requirements, the probability and effect of fires and explosions." When considering the effects of fire, those systems associated with achieving and maintaining safe shutdown conditions assume major importance to safety because damage to them can lead to core damage resulting from loss of coolant through boil-off. Because fire may affect safe shutdown systems and because the loss of function of systems used to mitigate the consequences of design basis accidents under post-fire conditions does not per se impact public safety, the need to limit fire damage to systems required to achieve and maintain safe shutdown conditions is greater than the need to limit fire damage to those systems required to mitigate the consequences of design basis accidents. In addition, Appendix R to 10 CFR 50, requires, among other considerations, the use of 1-hour fire barriers for the enclosure of cable and equipment and associated non-safety circuits of one redundant train (G.2.c). As used in EAL #2this EAL, the 30-minutes to verify a single alarm is well within this worst-case 1-hour time period. Depending upon the plant mode at the time of the event, escalation of the emergency classification level would be via IC CA6 or SA9. DBNPS Basis: The 30-minute requirement begins upon receipt of a single VALID fire detection system alarm. The alarm is to be validated using available Control Room indications or alarms to prove that it is not spurious, or by reports from the field. Actual field reports must be made within the 30-minute time limit or a classification must be made. If a FIRE is verified to be occurring by field report, classification shall be made based on EAL HU4.1. Table H-1 Fire Areas are based on DBNPS-1465.00-00-0006 Design Basis Specification for the Plant Fire Protection and AP/0/A/5500/045 Plant Fire. Table H-1 Fire Areas include those structures containing functions and systems required for safe shutdown of the plant (SAFETY SYSTEMS) (ref. 1, 2). One of the following 4 things must occur within 30 minutes of the original FIRE indication / notification (ref. 3, 4):

1. The alarm must be proven to be spurious (there is no FIRE),
2. The FIRE must be extinguished,
3. The FIRE must be proven not to be in a Table H-1 area, or
4. The Unusual Event must be declared.

For the purposes of declaring an emergency event, the term "extinguished" means no visible EAL BASES DOCUMENT Rev. 0 Page 65 of 292

ATTACHMENT 1 EAL Bases flames. The 30 minute time period starts with Control Room indication of a fire detection system alarm/actuation (any single alarm or a single actuation of a system). DBNPS Basis Reference(s):

1. DBNPS Fire Hazard Analysis Report
2. DB-OP-02529 Fire Procedure
3. Condition Report 09-66994, Emergency Action Level Clarification
4. Condition Report 09-69475, White Finding Identified For Inadequate Emergency Classification of Event
5. NEI 99-01 HU4 EAL BASES DOCUMENT Rev. 0 Page 66 of 292

ATTACHMENT 1 EAL Bases Category: H - Hazards and Other Conditions Affecting Plant Safety Subcategory: 4 - FIRE Initiating Condition: FIRE potentially degrading the level of safety of the plant EAL: HU4.3 Unusual Event A FIRE within the plant PROTECTED AREA not extinguished within 60 min. of the initial report, alarm or indication (Note 1) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Mode Applicability: ALL NEI 99-01 Basis: This IC addresses the magnitude and extent of FIRES that may be indicative of a potential degradation of the level of safety of the plant. EAL #1 The intent of the 15-minute duration is to size the FIRE and to discriminate against small FIRES that are readily extinguished (e.g., smoldering waste paper basket). In addition to alarms, other indications of a FIRE could be a drop in fire main pressure, automatic activation of a suppression system, etc. Upon receipt, operators will take prompt actions to confirm the validity of an initial fire alarm, indication, or report. For EAL assessment purposes, the emergency declaration clock starts at the time that the initial alarm, indication, or report was received, and not the time that a subsequent verification action was performed. Similarly, the fire duration clock also starts at the time of receipt of the initial alarm, indication or report. EAL #2 This EAL addresses receipt of a single fire alarm, and the existence of a FIRE is not verified (i.e., proved or disproved) within 30-minutes of the alarm. Upon receipt, operators will take prompt actions to confirm the validity of a single fire alarm. For EAL assessment purposes, the 30-minute clock starts at the time that the initial alarm was received, and not the time that a subsequent verification action was performed. A single fire alarm, absent other indication(s) of a FIRE, may be indicative of equipment failure or a spurious activation, and not an actual FIRE. For this reason, additional time is allowed to verify the validity of the alarm. The 30-minute period is a reasonable amount of time to EAL BASES DOCUMENT Rev. 0 Page 67 of 292

ATTACHMENT 1 EAL Bases determine if an actual FIRE exists; however, after that time, and absent information to the contrary, it is assumed that an actual FIRE is in progress. If an actual FIRE is verified by a report from the field, then EAL #1 is immediately applicable, and the emergency must be declared if the FIRE is not extinguished within 15-minutes of the report. If the alarm is verified to be due to an equipment failure or a spurious activation, and this verification occurs within 30-minutes of the receipt of the alarm, then this EAL is not applicable and no emergency declaration is warranted. EAL #3 In addition to a FIRE addressed by EAL #1HU4.1 or EAL #2HU4.2, a FIRE within the plant PROTECTED AREA not extinguished within 60-minutes may also potentially degrade the level of plant safety. This basis extends to a FIRE occurring within the PROTECTED AREA of an ISFSI located outside the plant PROTECTED AREA. [Sentence for plants with an ISFSI outside the plant Protected Area]EAL #4 If a FIRE within the plant or ISFSI [for plants with an ISFSI outside the plant Protected Area] PROTECTED AREA is of sufficient size to require a response by an offsite firefighting agency (e.g., a local town Fire Department), then the level of plant safety is potentially degraded. The dispatch of an offsite firefighting agency to the site requires an emergency declaration only if it is needed to actively support firefighting efforts because the fire is beyond the capability of the Fire Brigade to extinguish. Declaration is not necessary if the agency resources are placed on stand-by, or supporting post-extinguishment recovery or investigation actions. Basis-Related Requirements from Appendix R Appendix R to 10 CFR 50, states in part: Criterion 3 of Appendix A to this part specifies that "Structures, systems, and components important to safety shall be designed and located to minimize, consistent with other safety requirements, the probability and effect of fires and explosions." When considering the effects of fire, those systems associated with achieving and maintaining safe shutdown conditions assume major importance to safety because damage to them can lead to core damage resulting from loss of coolant through boil-off. Because fire may affect safe shutdown systems and because the loss of function of systems used to mitigate the consequences of design basis accidents under post-fire conditions does not per se impact public safety, the need to limit fire damage to systems required to achieve and maintain safe shutdown conditions is greater than the need to limit fire damage to those systems required to mitigate the consequences of design basis accidents. In addition, Appendix R to 10 CFR 50, requires, among other considerations, the use of 1-hour fire barriers for the enclosure of cable and equipment and associated non-safety circuits of one redundant train (G.2.c). As used in EAL #2, the 30-minutes to verify a single alarm is well within this worst-case 1-hour time period. EAL BASES DOCUMENT Rev. 0 Page 68 of 292

ATTACHMENT 1 EAL Bases Depending upon the plant mode at the time of the event, escalation of the emergency classification level would be via IC CA6 or SA9. DBNPS Basis: None DBNPS Basis Reference(s):

1. NEI 99-01 HU4 EAL BASES DOCUMENT Rev. 0 Page 69 of 292

ATTACHMENT 1 EAL Bases Category: H - Hazards and Other Conditions Affecting Plant Safety Subcategory: 4 - FIRE Initiating Condition: FIRE potentially degrading the level of safety of the plant EAL: HU4.4 Unusual Event A FIRE within the plant PROTECTED AREA that requires firefighting support by an offsite fire response agency to extinguish Mode Applicability: ALL NEI 99-01 Basis: This IC addresses the magnitude and extent of FIRES that may be indicative of a potential degradation of the level of safety of the plant. EAL #1 The intent of the 15-minute duration is to size the FIRE and to discriminate against small FIRES that are readily extinguished (e.g., smoldering waste paper basket). In addition to alarms, other indications of a FIRE could be a drop in fire main pressure, automatic activation of a suppression system, etc. Upon receipt, operators will take prompt actions to confirm the validity of an initial fire alarm, indication, or report. For EAL assessment purposes, the emergency declaration clock starts at the time that the initial alarm, indication, or report was received, and not the time that a subsequent verification action was performed. Similarly, the fire duration clock also starts at the time of receipt of the initial alarm, indication or report. EAL #2 This EAL addresses receipt of a single fire alarm, and the existence of a FIRE is not verified (i.e., proved or disproved) within 30-minutes of the alarm. Upon receipt, operators will take prompt actions to confirm the validity of a single fire alarm. For EAL assessment purposes, the 30-minute clock starts at the time that the initial alarm was received, and not the time that a subsequent verification action was performed. A single fire alarm, absent other indication(s) of a FIRE, may be indicative of equipment failure or a spurious activation, and not an actual FIRE. For this reason, additional time is allowed to verify the validity of the alarm. The 30-minute period is a reasonable amount of time to determine if an actual FIRE exists; however, after that time, and absent information to the contrary, it is assumed that an actual FIRE is in progress. EAL BASES DOCUMENT Rev. 0 Page 70 of 292

ATTACHMENT 1 EAL Bases If an actual FIRE is verified by a report from the field, then EAL #1 is immediately applicable, and the emergency must be declared if the FIRE is not extinguished within 15-minutes of the report. If the alarm is verified to be due to an equipment failure or a spurious activation, and this verification occurs within 30-minutes of the receipt of the alarm, then this EAL is not applicable and no emergency declaration is warranted. EAL #3 In addition to a FIRE addressed by EAL #1 or EAL #2, a FIRE within the plant PROTECTED AREA not extinguished within 60-minutes may also potentially degrade the level of plant safety. This basis extends to a FIRE occurring within the PROTECTED AREA of an ISFSI located outside the plant PROTECTED AREA. [Sentence for plants with an ISFSI outside the plant Protected Area] EAL #4 If a FIRE within the plant or ISFSI [for plants with an ISFSI outside the plant Protected Area] PROTECTED AREA is of sufficient size to require a response by an offsite firefighting agency (e.g., a local town Fire Department), then the level of plant safety is potentially degraded. The dispatch of an offsite firefighting agency to the site requires an emergency declaration only if it is needed to actively support firefighting efforts because the FIRE is beyond the capability of the Fire Brigade to extinguish. Declaration is not necessary if the agency resources are placed on stand-by, or supporting post-extinguishment recovery or investigation actions. Basis-Related Requirements from Appendix R Appendix R to 10 CFR 50, states in part: Criterion 3 of Appendix A to this part specifies that "Structures, systems, and components important to safety shall be designed and located to minimize, consistent with other safety requirements, the probability and effect of fires and explosions." When considering the effects of fire, those systems associated with achieving and maintaining safe shutdown conditions assume major importance to safety because damage to them can lead to core damage resulting from loss of coolant through boil-off. Because fire may affect safe shutdown systems and because the loss of function of systems used to mitigate the consequences of design basis accidents under post-fire conditions does not per se impact public safety, the need to limit fire damage to systems required to achieve and maintain safe shutdown conditions is greater than the need to limit fire damage to those systems required to mitigate the consequences of design basis accidents. In addition, Appendix R to 10 CFR 50, requires, among other considerations, the use of 1-hour fire barriers for the enclosure of cable and equipment and associated non-safety circuits of one redundant train (G.2.c). As used in EAL #2, the 30-minutes to verify a single alarm is well within this worst-case 1-hour time period. EAL BASES DOCUMENT Rev. 0 Page 71 of 292

ATTACHMENT 1 EAL Bases Depending upon the plant mode at the time of the event, escalation of the emergency classification level would be via IC CA6 or SA9. DBNPS Basis: None DBNPS Basis Reference(s):

1. NEI 99-01 HU4 EAL BASES DOCUMENT Rev. 0 Page 72 of 292

ATTACHMENT 1 EAL Bases Category: H - Hazards and Other Conditions Affecting Plant Safety Subcategory: 5 - Hazardous Gases Initiating Condition: Gaseous release IMPEDING access to equipment necessary for normal plant operations, cooldown or shutdown EAL: HA5.1 Alert Release of a toxic, corrosive, asphyxiant or flammable gas into ANY Table H-2 Safe Shutdown Rooms or Areas AND Entry into the room or area is prohibited or IMPEDED (Note 5) Note 5: If the equipment in the listed room or area was already inoperable or out-of-service before the event occurred, then no emergency classification is warranted. Table H-2 Safe Shutdown Rooms/Areas Room/Area Mode Applicability Aux Bldg. 565 ele. Room 236 #2 Mechanical 1, 2, 3 Penetration Room Aux Bldg. 585 ele. Room 304 corridor outside 1, 2, 3

            #3 Mechanical Penetration Room Aux Bldg. 603 ele. Room 427 - #2 Electrical 1, 2, 3 Penetration Room Mode Applicability:

1 - Power Operation, 2 - Startup, 3 - Hot Standby NEI 99-01 Basis: This IC addresses an event involving a release of a hazardous gas that precludes or IMPEDES access to equipment necessary to maintain normal plant operation, or required for a normal plant cooldown and shutdown. This condition represents an actual or potential substantial degradation of the level of safety of the plant. An Alert declaration is warranted if entry into the affected room/area is, or may be, procedurally required during the plant operating mode in effect at the time of the gaseous release. The emergency classification is not contingent upon whether entry is actually necessary at the time of the release. Evaluation of the IC and EAL do not require atmospheric sampling; it only requires the Emergency Director judgment that the gas concentration in the affected room/area is sufficient EAL BASES DOCUMENT Rev. 0 Page 73 of 292

ATTACHMENT 1 EAL Bases to preclude or significantly IMPEDE procedurally required access. This judgment may be based on a variety of factors including an existing job hazard analysis, report of ill effects on personnel, advice from a subject matter expert or operating experience with the same or similar hazards. Access should be considered as IMPEDED if extraordinary measures are necessary to facilitate entry of personnel into the affected room/area (e.g., requiring use of protective equipment, such as SCBAs, that is not routinely employed). An emergency declaration is not warranted if ANY of the following conditions apply: z The plant is in an operating mode different than the mode specified for the affected room/area (i.e., entry is not required during the operating mode in effect at the time of the gaseous release). For example, the plant is in Mode 1 when the gaseous release occurs, and the procedures used for normal operation, cooldown and shutdown do not require entry into the affected room until Mode 4. z The gas release is a planned activity that includes compensatory measures, which address the temporary inaccessibility of a room or area (e.g., fire suppression system testing). z The action for which room/area entry is required is of an administrative or record keeping nature (e.g., normal rounds or routine inspections). z The access control measures are of a conservative or precautionary nature, and would not actually prevent or IMPEDE a required action. z If the equipment in the listed room or area was already inoperable, or out-of-service, before the event occurred, then no emergency should be declared since the event will have no adverse impact beyond that already allowed by Technical Specifications at the time of the event. An asphyxiant is a gas capable of reducing the level of oxygen in the body to dangerous levels. Most commonly, asphyxiants work by merely displacing air in an enclosed environment. This reduces the concentration of oxygen below the normal level of around 19%, which can lead to breathing difficulties, unconsciousness or even death. A steam leak of significant magnitude that prevents access to the area should be considered an asphyxiant. This EAL does not apply to firefighting activities that automatically or manually activate a fire suppression system in an area, or to intentional inerting of containment.. Escalation of the emergency classification level would be via Recognition Category AR, C or F ICs. DBNPS Basis: If the equipment in the listed room or area was already inoperable, or out-of-service, before the event occurred, then no emergency should be declared since the event will have no adverse impact beyond that already allowed by Technical Specifications at the time of the event. The list of plant rooms or areas with entry-related mode applicability identified specify those rooms or areas that contain equipment which require a manual/local action as specified in operating procedures used for normal plant operation, cooldown and shutdown. Rooms or EAL BASES DOCUMENT Rev. 0 Page 74 of 292

ATTACHMENT 1 EAL Bases areas in which actions of a contingent or emergency nature would be performed (e.g., an action to address an off-normal or emergency condition such as emergency repairs, corrective measures or emergency operations) are not included. In addition, the list specifies the plant mode(s) during which entry would be required for each room or area (ref. 1). DBNPS Basis Reference(s):

1. Attachment 3 Safe Shutdown Rooms/Areas Tables R-2 & H-2 Bases
2. NEI 99-01 HA5 EAL BASES DOCUMENT Rev. 0 Page 75 of 292

ATTACHMENT 1 EAL Bases Category: H - Hazards and Other Conditions Affecting Plant Safety Subcategory: 6 - Control Room Evacuation Initiating Condition: Inability to control a key safety function from outside the Control Room EAL: HS6.1 Site Area Emergency An event has resulted in plant control being transferred from the Control Room to the Auxiliary Shutdown Panel AND Control of ANY of the following key safety functions is not reestablished within 15 min. (Note 1): z Reactivity z Core Cooling (RCS inventory) z RCS heat removal (ability to maintain heat sink) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Mode Applicability: 1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4- Hot Shutdown NEI 99-01 Basis: This IC addresses an evacuation of the Control Room that results in transfer of plant control to alternate locations, and the control of a key safety function cannot be reestablished in a timely manner. The failure to gain control of a key safety function following a transfer of plant control to alternate locations is a precursor to a challenge to one or more fission product barriers within a relatively short period of time. The determination of whether or not control is established at the remote safe shutdown location(s) is based on Emergency Director judgment. The Emergency Director is expected to make a reasonable, informed judgment within (the site-specific time for transfer)15-minutes whether or not the operating staff has control of key safety functions from the remote safe shutdown location(s). Escalation of the emergency classification level would be via IC FG1 or CG1. EAL BASES DOCUMENT Rev. 0 Page 76 of 292

ATTACHMENT 1 EAL Bases DBNPS Basis: Shift Manager determines the Control Room requires evacuation. Control Room may become uninhabitable by FIRE, dense smoke, noxious fumes, bomb threat in or adjacent to the Control Room, or other life threatening conditions (ref. 1, 2). The 15-minute time for transfer is based on analysis or assessments as to how quickly control must be reestablished without core uncovering and/or core damage. The 15-minute time period starts when EITHER 1) control of the plant is no longer maintained in the Control Room or 2) the last operator has left the Control Room, whichever comes first. DBNPS Basis Reference(s):

1. DB-OP-02508 Control Room Evacuation
2. DB-OP 02519 Serious Control Room Fire
3. NEI 99-01 HS6 EAL BASES DOCUMENT Rev. 0 Page 77 of 292

ATTACHMENT 1 EAL Bases Category: H - Hazards and Other Conditions Affecting Plant Safety Subcategory: 6 - Control Room Evacuation Initiating Condition: Control Room evacuation resulting in transfer of plant control to alternate locations EAL: HA6.1 Alert An event has resulted in plant control being transferred from the Control Room to the Auxiliary Shutdown Panel Mode Applicability: ALL NEI 99-01 Basis: This IC addresses an evacuation of the Control Room that results in transfer of plant control to alternate locations outside the Control Room. The loss of the ability to control the plant from the Control Room is considered to be a potential substantial degradation in the level of plant safety. Following a Control Room evacuation, control of the plant will be transferred to alternate shutdown locations. The necessity to control a plant shutdown from outside the Control Room, in addition to responding to the event that required the evacuation of the Control Room, will present challenges to plant operators and other on-shift personnel. Activation of the ERO and emergency response facilities will assist in responding to these challenges. This EAL is only applicable when the decision has been made to evacuate the Control Room, and not when conditions that may require evacuation are being evaluated by referring to either DB-OP-02519 or DB-OP-02508 (ref. 1, 2). Escalation of the emergency classification level would be via IC HS6. DBNPS Basis: Shift Manager (SM) determines Control Room requires evacuation. Control Room inhabitability may be caused by FIRE, dense smoke, noxious fumes, bomb threat in or adjacent to the Control Room, or other life threatening conditions (ref. 1, 2). Inability to establish plant control from outside the Control Room escalates this event to a Site Area Emergency per EAL HS6.1. EAL BASES DOCUMENT Rev. 0 Page 78 of 292

ATTACHMENT 1 EAL Bases DBNPS Basis Reference(s):

1. DB-OP-02508 Control Room Evacuation
2. DB-OP 02519 Serious Control Room Fire
3. NEI 99-01 HA6 EAL BASES DOCUMENT Rev. 0 Page 79 of 292

ATTACHMENT 1 EAL Bases Category: H - Hazards and Other Conditions Affecting Plant Safety Subcategory: 7 - Emergency Director Judgment Initiating Condition: Other conditions exist which in the judgment of the Emergency Director warrant declaration of a General Emergency EAL: HG7.1 General Emergency Other conditions exist which in the judgment of the Emergency Director indicate that events are in progress or have occurred which involve actual or IMMINENT substantial core degradation or melting with potential for loss of containment integrity or HOSTILE ACTION that results in an actual loss of physical control of the facility. Releases can be reasonably expected to exceed EPA Protective Action Guideline exposure levels offsite for more than the immediate site area. Mode Applicability: ALL NEI 99-01 Basis: This IC addresses unanticipated conditions not addressed explicitly elsewhere but that warrant declaration of an emergency because conditions exist which are believed by the Emergency Director to fall under the emergency classification level description for a General Emergency. DBNPS Basis: The Emergency Director is the designated onsite individual having the responsibility and authority for implementing the DBNPS Emergency Response Plan. The Operations Shift Manager(SM) initially acts in the capacity of the Emergency Director and takes actions as outlined in the Emergency Plan implementing procedures. If required by the emergency classification or if deemed appropriate by the Emergency Director, emergency response personnel are notified and instructed to report to their emergency response locations. In this manner, the individual usually in charge of activities in the Control Room is responsible for initiating the necessary emergency response, but Plant Management is expected to manage the emergency response as soon as available to do so in anticipation of the possible wide-ranging responsibilities associated with managing a major emergency (ref. 1). Releases can reasonably be expected to exceed EPA PAG plume exposure levels outside the SITE BOUNDARY. EAL BASES DOCUMENT Rev. 0 Page 80 of 292

ATTACHMENT 1 EAL Bases DBNPS Basis Reference(s):

1. DBNPS Emergency Plan section 5.2 DBNPS Emergency Management
2. NEI 99-01 HG7 EAL BASES DOCUMENT Rev. 0 Page 81 of 292

ATTACHMENT 1 EAL Bases Category: H - Hazards and Other Conditions Affecting Plant Safety Subcategory: 7 - Emergency Director Judgment Initiating Condition: Other conditions exist which in the judgment of the Emergency Director warrant declaration of a Site Area Emergency EAL: HS7.1 Site Area Emergency Other conditions exist which in the judgment of the Emergency Director indicate that events are in progress or have occurred which involve actual or likely major failures of plant functions needed for protection of the public or HOSTILE ACTION that results in intentional damage or malicious acts, (1) toward site personnel or equipment that could lead to the likely failure of or, (2) that prevent effective access to equipment needed for the protection of the public. ANY releases are not expected to result in exposure levels which exceed EPA Protective Action Guideline exposure levels beyond the SITE BOUNDARY. Mode Applicability: ALL NEI 99-01 Basis: This IC addresses unanticipated conditions not addressed explicitly elsewhere but that warrant declaration of an emergency because conditions exist which are believed by the Emergency Director to fall under the emergency classification level description for a Site Area Emergency. DBNPS Basis: The Emergency Director is the designated onsite individual having the responsibility and authority for implementing the DBNPS Emergency Response Plan. The Operations Shift Manager (SM) initially acts in the capacity of the Emergency Director and takes actions as outlined in the Emergency Plan implementing procedures. If required by the emergency classification or if deemed appropriate by the Emergency Director, emergency response personnel are notified and instructed to report to their emergency response locations. In this manner, the individual usually in charge of activities in the Control Room is responsible for initiating the necessary emergency response, but Plant Management is expected to manage the emergency response as soon as available to do so in anticipation of the possible wide-ranging responsibilities associated with managing a major emergency (ref. 1). DBNPS Basis Reference(s):

1. DBNPS Emergency Plan section 5.2 DBNPS Emergency Management
2. NEI 99-01 HS7 EAL BASES DOCUMENT Rev. 0 Page 82 of 292

ATTACHMENT 1 EAL Bases Category: H - Hazards and Other Conditions Affecting Plant Safety Subcategory: 7 - Emergency Director Judgment Initiating Condition: Other conditions exist which in the judgment of the Emergency Director warrant declaration of an Alert EAL: HA7.1 Alert Other conditions exist which, in the judgment of the Emergency Director, indicate that events are in progress or have occurred which involve an actual or potential substantial degradation of the level of safety of the plant or a security event that involves probable life threatening risk to site personnel or damage to site equipment because of HOSTILE ACTION. ANY releases are expected to be limited to small fractions of the EPA Protective Action Guideline exposure levels. Mode Applicability: ALL NEI 99-01 Basis: This IC addresses unanticipated conditions not addressed explicitly elsewhere but that warrant declaration of an emergency because conditions exist which are believed by the Emergency Director to fall under the emergency classification level description for an Alert. DBNPS Basis: The Emergency Director is the designated onsite individual having the responsibility and authority for implementing the DBNPS Emergency Response Plan. The Operations Shift Manager (SM) initially acts in the capacity of the Emergency Director and takes actions as outlined in the Emergency Plan implementing procedures. If required by the emergency classification or if deemed appropriate by the Emergency Director, emergency response personnel are notified and instructed to report to their emergency response locations. In this manner, the individual usually in charge of activities in the Control Room is responsible for initiating the necessary emergency response, but Plant Management is expected to manage the emergency response as soon as available to do so in anticipation of the possible wide-ranging responsibilities associated with managing a major emergency (ref.1). DBNPS Basis Reference(s):

1. DBNPS Emergency Plan section 5.2 DBNPS Emergency Management
2. NEI 99-01 HA7 EAL BASES DOCUMENT Rev. 0 Page 83 of 292

ATTACHMENT 1 EAL Bases Category: H - Hazards and Other Conditions Affecting Plant Safety Subcategory: 7 - Emergency Director Judgment Initiating Condition: Other conditions exist which in the judgment of the Emergency Director warrant declaration of a UE EAL: HU7.1 Unusual Event Other conditions exist which in the judgment of the Emergency Director indicate that events are in progress or have occurred which indicate a potential degradation of the level of safety of the plant or indicate a security threat to facility protection has been initiated. No releases of radioactive material requiring offsite response or monitoring are expected unless further degradation of SAFETY SYSTEMS occurs. Mode Applicability: ALL NEI 99-01 Basis: This IC addresses unanticipated conditions not addressed explicitly elsewhere but that warrant declaration of an emergency because conditions exist which are believed by the Emergency Director to fall under the emergency classification level description for an NOUEUnusual Event. DBNPS Basis: The Emergency Director is the designated onsite individual having the responsibility and authority for implementing the DBNPS Emergency Response Plan. The Operations Shift Manager (SM) initially acts in the capacity of the Emergency Director and takes actions as outlined in the Emergency Plan implementing procedures. If required by the emergency classification or if deemed appropriate by the Emergency Director, emergency response personnel are notified and instructed to report to their emergency response locations. In this manner, the individual usually in charge of activities in the Control Room is responsible for initiating the necessary emergency response, but Plant Management is expected to manage the emergency response as soon as available to do so in anticipation of the possible wide-ranging responsibilities associated with managing a major emergency (ref. 1). DBNPS Basis Reference(s):

1. DBNPS Emergency Plan section 5.2 DBNPS Emergency Management
2. NEI 99-01 HU7 EAL BASES DOCUMENT Rev. 0 Page 84 of 292

ATTACHMENT 1 EAL Bases Category R - Abnormal Rad Release / Rad Effluent EAL Group: ANY (EALs in this category are applicable to ANY plant condition, hot or cold.) Many EALs are based on actual or potential degradation of fission product barriers because of the elevated potential for offsite radioactivity release. Degradation of fission product barriers though is not always apparent via non-radiological symptoms. Therefore, direct indication of elevated radiological effluents or area radiation levels are appropriate symptoms for emergency classification. At lower levels, abnormal radioactivity releases may be indicative of a failure of containment systems or precursors to more significant releases. At higher release rates, offsite radiological conditions may result which require offsite protective actions. Elevated area radiation levels in plant may also be indicative of the failure of containment systems or preclude access to plant vital equipment necessary to ensure plant safety. Events of this category pertain to the following subcategories:

1. Radiological Effluent Direct indication of effluent radiation monitoring systems provides a rapid assessment mechanism to determine releases in excess of classifiable limits. Projected offsite doses, actual offsite field measurements or measured release rates via sampling indicate doses or dose rates above classifiable limits.
2. Irradiated Fuel Event Conditions indicative of a loss of adequate shielding or damage to irradiated fuel may preclude access to vital plant areas or result in radiological releases that warrant emergency classification.
3. Area Radiation Levels Sustained general area radiation levels, which may preclude access to areas requiring continuous occupancy, also warrant emergency classification.

EAL BASES DOCUMENT Rev. 0 Page 85 of 292

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 1 - Radiological Effluent Initiating Condition: Release of gaseous radioactivity resulting in offsite dose greater than 1,000 mrem TEDE or 5,000 mrem thyroid CDE EAL: RG1.1 General Emergency Station Vent Channel 1 Noble Gas (RE 4598 AB/BB) > 8.4E +00 Ci/cc for 15 minutes or longer (Notes 1, 2, 3, 4) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Note 2: If an ongoing release is detected and the release start time is unknown, assume that the release duration has exceeded the specified time limit. Note 3: If the effluent flow past an effluent monitor is known to have stopped, indicating that the release path is isolated, the effluent monitor reading is no longer VALID for classification purposes. Note 4: The pre-calculated effluent monitor values presented in EALs RA1.1, RS1.1 and RG1.1 should be used for emergency classification assessments until the results from a dose assessment using actual meteorology are available. Mode Applicability: ALL NEI 99-01 Basis: This IC addresses a release of gaseous radioactivity that results in projected or actual offsite doses greater than or equal to the EPA Protective Action Guides (PAGs). It includes both monitored and un-monitored releases. Releases of this magnitude will require implementation of protective actions for the public. Radiological effluent EALs are also included to provide a basis for classifying events and conditions that cannot be readily or appropriately classified on the basis of plant conditions alone. The inclusion of both plant condition and radiological effluent EALs more fully addresses the spectrum of possible accident events and conditions. The TEDE dose is set at the EPA PAG of 1,000 mrem while the 5,000 mrem thyroid CDE was established in consideration of the 1:5 ratio of the EPA PAG for TEDE and thyroid CDE. Classification based on effluent monitor readings assumes that a release path to the environment is established. If the effluent flow past an effluent monitor is known to have stopped due to actions to isolate the release path, then the effluent monitor reading is no longer VALID for classification purposes. EAL BASES DOCUMENT Rev. 0 Page 86 of 292

ATTACHMENT 1 EAL Bases DBNPS Basis: The DBNPS gaseous effluent limits for RG1.1 are based on values that equate to an offsite dose greater than EITHER:

  • 1000 mrem TEDE
  • 5000 mrem CDE Thyroid Note: EAL thresholds reflect the State of Ohio guidance to utilities within their jurisdiction to evaluate the consequences of radiological releases in terms of a Child Thyroid PAG rather than an EPA-400 CDE Thyroid PAG.

The station vent is the primary effluent monitor release point. Other pathways such as Safety and relief valves, as well as AFW and MSSV, do not have direct effluent release monitors. Releases from these points would be verified and monitored by RG1.3 survey readings. The GE Station Vent gaseous effluent monitor value corresponds to calculated doses of 100% of the EPA Protective Action Guidelines (TEDE or CDE Thyroid) per EP-EALCALC-DB-0703 Radiological Gaseous Effluent EAL Values (EALs RG1, RS1, RA1 and RU1) (ref. 1). DBNPS Basis Reference(s):

1. EP-EALCALC-DB-0703 Rev. 2 Radiological Gaseous Effluent EAL Values (EALs RG1, RS1, RA1 and RU1)
2. NEI 99-01 AG1 EAL BASES DOCUMENT Rev. 0 Page 87 of 292

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 1 - Radiological Effluent Initiating Condition: Release of gaseous radioactivity resulting in offsite dose greater than 1,000 mrem TEDE or 5,000 mrem thyroid CDE EAL: RG1.2 General Emergency Dose assessment using actual meteorology indicates doses > 1,000 mrem TEDE or 5,000 mrem thyroid CDE at or beyond the SITE BOUNDARY (Note 4) Note 4: The pre-calculated effluent monitor values presented in EALs RA1.1, RS1.1 and RG1.1 should be used for emergency classification assessments until the results from a dose assessment using actual meteorology are available. Mode Applicability: ALL NEI 99-01 Basis: This IC addresses a release of gaseous radioactivity that results in projected or actual offsite doses greater than or equal to the EPA Protective Action Guides (PAGs). It includes both monitored and un-monitored releases. Releases of this magnitude will require implementation of protective actions for the public. Radiological effluent EALs are also included to provide a basis for classifying events and conditions that cannot be readily or appropriately classified on the basis of plant conditions alone. The inclusion of both plant condition and radiological effluent EALs more fully addresses the spectrum of possible accident events and conditions. The TEDE dose is set at the EPA PAG of 1,000 mrem while the 5,000 mrem thyroid CDE was established in consideration of the 1:5 ratio of the EPA PAG for TEDE and thyroid CDE. Classification based on effluent monitor readings assumes that a release path to the environment is established. If the effluent flow past an effluent monitor is known to have stopped due to actions to isolate the release path, then the effluent monitor reading is no longer VALID for classification purposes. DBNPS Basis: Dose assessments are performed by computer-based methods (ref. 1, 2). Note: EAL thresholds reflect the State of Ohio guidance to utilities within their jurisdiction to evaluate the consequences of radiological releases in terms of a Child Thyroid PAG rather than an EPA-400 CDE Thyroid PAG. EAL BASES DOCUMENT Rev. 0 Page 88 of 292

ATTACHMENT 1 EAL Bases DBNPS Basis Reference(s):

1. NOP-LP-5402 Davis-Besse MIDAS Dose Assessment Software
2. RA-EP-02240 Offsite Dose Assessment
3. NEI 99-01 AG1 EAL BASES DOCUMENT Rev. 0 Page 89 of 292

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 1 - Radiological Effluent Initiating Condition: Release of gaseous radioactivity resulting in offsite dose greater than 1,000 mrem TEDE or 5,000 mrem thyroid CDE EAL: RG1.3 General Emergency Field survey results indicate EITHER of the following at or beyond the SITE BOUNDARY: z Closed window dose rates > 1,000 mR/hr expected to continue for 60 min. z Analyses of field survey samples indicate thyroid CDE > 5,000 mrem for 60 min. of inhalation. (Notes 1, 2) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Note 2: If an ongoing release is detected and the release start time is unknown, assume that the release duration has exceeded the specified time limit. Mode Applicability: ALL NEI 99-01 Basis: This IC addresses a release of gaseous radioactivity that results in projected or actual offsite doses greater than or equal to the EPA Protective Action Guides (PAGs). It includes both monitored and un-monitored releases. Releases of this magnitude will require implementation of protective actions for the public. Radiological effluent EALs are also included to provide a basis for classifying events and conditions that cannot be readily or appropriately classified on the basis of plant conditions alone. The inclusion of both plant condition and radiological effluent EALs more fully addresses the spectrum of possible accident events and conditions. The TEDE dose is set at the EPA PAG of 1,000 mrem while the 5,000 mrem thyroid CDE was established in consideration of the 1:5 ratio of the EPA PAG for TEDE and thyroid CDE. EAL BASES DOCUMENT Rev. 0 Page 90 of 292

ATTACHMENT 1 EAL Bases Classification based on effluent monitor readings assumes that a release path to the environment is established. If the effluent flow past an effluent monitor is known to have stopped due to actions to isolate the release path, then the effluent monitor reading is no longer valid for classification purposes. DBNPS Basis: NOP-LP-5015 FENOC Field Monitoring Teams Radiation Monitoring Teams Field Surveys provides guidance for emergency or post-accident radiological environmental monitoring (ref. 1). Note: EAL thresholds reflect the State of Ohio guidance to utilities within their jurisdiction to evaluate the consequences of radiological releases in terms of a Child Thyroid PAG rather than an EPA-400 CDE Thyroid PAG. DBNPS Basis Reference(s):

1. NOP-LP-5015 FENOC Field Monitoring Teams Radiation Monitoring Teams Field Surveys
2. NEI 99-01 AG1 EAL BASES DOCUMENT Rev. 0 Page 91 of 292

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 1 - Radiological Effluent Initiating Condition: Release of gaseous radioactivity resulting in offsite dose greater than 100 mrem TEDE or 500 mrem thyroid CDE EAL: RS1.1 Site Area Emergency Station Vent Channel 1 Noble Gas (RE 4598 AB/BB) > 8.4E -01 Ci/cc for 15 minutes or longer (Notes 1, 2, 3, 4) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Note 2: If an ongoing release is detected and the release start time is unknown, assume that the release duration has exceeded the specified time limit. Note 3: If the effluent flow past an effluent monitor is known to have stopped, indicating that the release path is isolated, the effluent monitor reading is no longer VALID for classification purposes. Note 4: The pre-calculated effluent monitor values presented in EALs RA1.1, RS1.1 and RG1.1 should be used for emergency classification assessments until the results from a dose assessment using actual meteorology are available. Mode Applicability: ALL NEI 99-01 Basis: This IC addresses a release of gaseous radioactivity that results in projected or actual offsite doses greater than or equal to 10% of the EPA Protective Action Guides (PAGs). It includes both monitored and un-monitored releases. Releases of this magnitude are associated with the failure of plant systems needed for the protection of the public. Radiological effluent EALs are also included to provide a basis for classifying events and conditions that cannot be readily or appropriately classified on the basis of plant conditions alone. The inclusion of both plant condition and radiological effluent EALs more fully addresses the spectrum of possible accident events and conditions. The TEDE dose is set at 10% of the EPA PAG of 1,000 mrem while the 500 mrem thyroid CDE was established in consideration of the 1:5 ratio of the EPA PAG for TEDE and thyroid CDE. Classification based on effluent monitor readings assumes that a release path to the environment is established. If the effluent flow past an effluent monitor is known to have stopped due to actions to isolate the release path, then the effluent monitor reading is no longer VALID for classification purposes. EAL BASES DOCUMENT Rev. 0 Page 92 of 292

ATTACHMENT 1 EAL Bases Escalation of the emergency classification level would be via IC AG1RG1. DBNPS Basis: The DBNPS gaseous effluent limits for RS1.1 are based on values that equate to an offsite dose greater than EITHER:

  • 100 mrem TEDE
  • 500 mrem CDE Thyroid Note: EAL thresholds reflect the State of Ohio guidance to utilities within their jurisdiction to evaluate the consequences of radiological releases in terms of a Child Thyroid PAG rather than an EPA-400 CDE Thyroid PAG.

The station vent is the primary effluent monitor release point. Other pathways such as Safety and relief valves, as well as AFW and MSSV, do not have direct effluent release monitors. Releases from these points would be verified and monitored by RS1.3 survey readings. The SAE Station Vent gaseous effluent monitor value corresponds to calculated doses of 10% of the EPA Protective Action Guidelines (TEDE or CDE Thyroid) per EP-EALCALC-DB-0703 Radiological Gaseous Effluent EAL Values (EALs RG1, RS1, RA1 and RU1) (ref. 1). DBNPS Basis Reference(s):

1. EP-EALCALC-DB-0703 Rev.2 Radiological Gaseous Effluent EAL Values (EALs RG1, RS1, RA1 and RU1)
2. NEI 99-01 AS1 EAL BASES DOCUMENT Rev. 0 Page 93 of 292

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 1 - Radiological Effluent Initiating Condition: Release of gaseous radioactivity resulting in offsite dose greater than 100 mrem TEDE or 500 mrem thyroid CDE EAL: RS1.2 Site Area Emergency Dose assessment using actual meteorology indicates doses > 100 mrem TEDE or 500 mrem thyroid CDE at or beyond the SITE BOUNDARY (Note 4) Note 4: The pre-calculated effluent monitor values presented in EALs RA1.1, RS1.1 and RG1.1 should be used for emergency classification assessments until the results from a dose assessment using actual meteorology are available. Mode Applicability: ALL NEI 99-01 Basis: This IC addresses a release of gaseous radioactivity that results in projected or actual offsite doses greater than or equal to 10% of the EPA Protective Action Guides (PAGs). It includes both monitored and un-monitored releases. Releases of this magnitude are associated with the failure of plant systems needed for the protection of the public. Radiological effluent EALs are also included to provide a basis for classifying events and conditions that cannot be readily or appropriately classified on the basis of plant conditions alone. The inclusion of both plant condition and radiological effluent EALs more fully addresses the spectrum of possible accident events and conditions. The TEDE dose is set at 10% of the EPA PAG of 1,000 mrem while the 500 mrem thyroid CDE was established in consideration of the 1:5 ratio of the EPA PAG for TEDE and thyroid CDE. Classification based on effluent monitor readings assumes that a release path to the environment is established. If the effluent flow past an effluent monitor is known to have stopped due to actions to isolate the release path, then the effluent monitor reading is no longer VALID for classification purposes. Escalation of the emergency classification level would be via IC AG1RG1. EAL BASES DOCUMENT Rev. 0 Page 94 of 292

ATTACHMENT 1 EAL Bases DBNPS Basis: Dose assessments are performed by computer-based or manual methods (ref. 1, 2). Note: EAL thresholds reflect the State of Ohio guidance to utilities within their jurisdiction to evaluate the consequences of radiological releases in terms of a Child Thyroid PAG rather than an EPA-400 CDE Thyroid PAG. DBNPS Basis Reference(s):

1. NOP-LP-5402 Davis-Besse MIDAS Dose Assessment Software
2. RA-EP-02240 Offsite Dose Assessment
3. NEI 99-01 AS1 EAL BASES DOCUMENT Rev. 0 Page 95 of 292

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 1 - Radiological Effluent Initiating Condition: Release of gaseous radioactivity resulting in offsite dose greater than 100 mrem TEDE or 500 mrem thyroid CDE EAL: RS1.3 Site Area Emergency Field survey results indicate EITHER of the following at or beyond the SITE BOUNDARY: z Closed window dose rates > 100 mR/hr expected to continue for 60 min. z Analyses of field survey samples indicate thyroid CDE > 500 mrem for 60 min. of inhalation. (Notes 1, 2) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Note 2: If an ongoing release is detected and the release start time is unknown, assume that the release duration has exceeded the specified time limit. Mode Applicability: ALL NEI 99-01 Basis: This IC addresses a release of gaseous radioactivity that results in projected or actual offsite doses greater than or equal to 10% of the EPA Protective Action Guides (PAGs). It includes both monitored and un-monitored releases. Releases of this magnitude are associated with the failure of plant systems needed for the protection of the public. Radiological effluent EALs are also included to provide a basis for classifying events and conditions that cannot be readily or appropriately classified on the basis of plant conditions alone. The inclusion of both plant condition and radiological effluent EALs more fully addresses the spectrum of possible accident events and conditions. The TEDE dose is set at 10% of the EPA PAG of 1,000 mrem while the 500 mrem thyroid CDE was established in consideration of the 1:5 ratio of the EPA PAG for TEDE and thyroid CDE. Classification based on effluent monitor readings assumes that a release path to the environment is established. If the effluent flow past an effluent monitor is known to have stopped due to actions to isolate the release path, then the effluent monitor reading is no EAL BASES DOCUMENT Rev. 0 Page 96 of 292

ATTACHMENT 1 EAL Bases longer valid for classification purposes. Escalation of the emergency classification level would be via IC AG1RG1. EAL BASES DOCUMENT Rev. 0 Page 97 of 292

ATTACHMENT 1 EAL Bases DBNPS Basis: NOP-LP-5015 FENOC Field Monitoring Teams Radiation Monitoring Teams Field Surveys provides guidance for emergency or post-accident radiological environmental monitoring (ref. 1). Note: EAL thresholds reflect the State of Ohio guidance to utilities within their jurisdiction to evaluate the consequences of radiological releases in terms of a Child Thyroid PAG rather than an EPA-400 CDE Thyroid PAG. DBNPS Basis Reference(s):

1. NOP-LP-5015 FENOC Field Monitoring Teams Radiation Monitoring Teams Field Surveys
2. NEI 99-01 AS1 EAL BASES DOCUMENT Rev. 0 Page 98 of 292

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 1 - Radiological Effluent Initiating Condition: Release of gaseous or liquid radioactivity resulting in offsite dose greater than 10 mrem TEDE or 50 mrem thyroid CDE EAL: RA1.1 Alert Station Vent Channel 1 Noble Gas (RE 4598 AB/BB) > 8.4E -02 Ci/cc for 15 minutes or longer (Notes 1, 2, 3, 4) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Note 2: If an ongoing release is detected and the release start time is unknown, assume that the release duration has exceeded the specified time limit. Note 3: If the effluent flow past an effluent monitor is known to have stopped, indicating that the release path is isolated, the effluent monitor reading is no longer VALID for classification purposes. Note 4: The pre-calculated effluent monitor values presented in EALs RA1.1, RS1.1 and RG1.1 should be used for emergency classification assessments until the results from a dose assessment using actual meteorology are available. Mode Applicability: ALL NEI 99-01 Basis: This IC addresses a release of gaseous or liquid radioactivity that results in projected or actual offsite doses greater than or equal to 1% of the EPA Protective Action Guides (PAGs). It includes both monitored and un-monitored releases. Releases of this magnitude represent an actual or potential substantial degradation of the level of safety of the plant as indicated by a radiological release that significantly exceeds regulatory limits (e.g., a significant uncontrolled release). Radiological effluent EALs are also included to provide a basis for classifying events and conditions that cannot be readily or appropriately classified on the basis of plant conditions alone. The inclusion of both plant condition and radiological effluent EALs more fully addresses the spectrum of possible accident events and conditions. The TEDE dose is set at 1% of the EPA PAG of 1,000 mrem while the 50 mrem thyroid CDE was established in consideration of the 1:5 ratio of the EPA PAG for TEDE and thyroid CDE. Classification based on effluent monitor readings assumes that a release path to the environment is established. If the effluent flow past an effluent monitor is known to have EAL BASES DOCUMENT Rev. 0 Page 99 of 292

ATTACHMENT 1 EAL Bases stopped due to actions to isolate the release path, then the effluent monitor reading is no longer VALID for classification purposes. Escalation of the emergency classification level would be via IC AS1RS1. DBNPS Basis: The DBNPS gaseous effluent limits for RA1.1 are based on values that equate to an offsite dose greater than EITHER:

  • 10 mrem TEDE
  • 50 mrem CDE Thyroid Note: EAL thresholds reflect the State of Ohio guidance to utilities within their jurisdiction to evaluate the consequences of radiological releases in terms of a Child Thyroid PAG rather than an EPA-400 CDE Thyroid PAG.

The Alert Station Vent gaseous effluent monitor value corresponds to calculated doses of 1% of the EPA Protective Action Guidelines (TEDE or CDE Thyroid) per EP-EALCALC-DB-0703 Radiological Gaseous Effluent EAL Values (EALs RG1, RS1, RA1 and RU1) (ref. 1). The station vent is the primary effluent monitor release point. Other pathways such as Safety and relief valves, as well as AFW and MSSV, do not have direct effluent release monitors. Releases from these points would be verified and monitored by RA1.3 survey readings. DBNPS Basis Reference(s):

1. EP-EALCALC-DB-0703 Rev.2 Radiological Gaseous Effluent EAL Values (EALs RG1, RS1, RA1 and RU1)
2. NEI 99-01 AA1 EAL BASES DOCUMENT Rev. 0 Page 100 of 292

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 1 - Radiological Effluent Initiating Condition: Release of gaseous or liquid radioactivity resulting in offsite dose greater than 10 mrem TEDE or 50 mrem thyroid CDE EAL: RA1.2 Alert Dose assessment using actual meteorology indicates doses > 10 mrem TEDE or 50 mrem thyroid CDE at or beyond the SITE BOUNDARY (Note 4) Note 4: The pre-calculated effluent monitor values presented in EALs RA1.1, RS1.1 and RG1.1 should be used for emergency classification assessments until the results from a dose assessment using actual meteorology are available. Mode Applicability: ALL NEI 99-01 Basis: This IC addresses a release of gaseous or liquid radioactivity that results in projected or actual offsite doses greater than or equal to 1% of the EPA Protective Action Guides (PAGs). It includes both monitored and un-monitored releases. Releases of this magnitude represent an actual or potential substantial degradation of the level of safety of the plant as indicated by a radiological release that significantly exceeds regulatory limits (e.g., a significant uncontrolled release). Radiological effluent EALs are also included to provide a basis for classifying events and conditions that cannot be readily or appropriately classified on the basis of plant conditions alone. The inclusion of both plant condition and radiological effluent EALs more fully addresses the spectrum of possible accident events and conditions. The TEDE dose is set at 1% of the EPA PAG of 1,000 mrem while the 50 mrem thyroid CDE was established in consideration of the 1:5 ratio of the EPA PAG for TEDE and thyroid CDE. Classification based on effluent monitor readings assumes that a release path to the environment is established. If the effluent flow past an effluent monitor is known to have stopped due to actions to isolate the release path, then the effluent monitor reading is no longer VALID for classification purposes. Escalation of the emergency classification level would be via IC AS1RS1. EAL BASES DOCUMENT Rev. 0 Page 101 of 292

ATTACHMENT 1 EAL Bases DBNPS Basis: Dose assessments are performed by computer-based and manual methods (ref. 1, 2). Note: EAL thresholds reflect the State of Ohio guidance to utilities within their jurisdiction to evaluate the consequences of radiological releases in terms of a Child Thyroid PAG rather than an EPA-400 CDE Thyroid PAG. DBNPS Basis Reference(s):

1. NOP-LP-5402 Davis-Besse MIDAS Dose Assessment Software
2. RA-EP-02240 Offsite Dose Assessment
3. NEI 99-01 AA1 EAL BASES DOCUMENT Rev. 0 Page 102 of 292

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 1 - Radiological Effluent Initiating Condition: Release of gaseous or liquid radioactivity resulting in offsite dose greater than 10 mrem TEDE or 50 mrem thyroid CDE EAL: RA1.3 Alert Analysis of a liquid effluent sample indicates a concentration or release rate that would result in doses > 10 mrem TEDE or 50 mrem thyroid CDE at or beyond the SITE BOUNDARY for 60 min. of exposure (Notes 1, 2) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Note 2: If an ongoing release is detected and the release start time is unknown, assume that the release duration has exceeded the specified time limit. Mode Applicability: ALL NEI 99-01 Basis: This IC addresses a release of gaseous or liquid radioactivity that results in projected or actual offsite doses greater than or equal to 1% of the EPA Protective Action Guides (PAGs). It includes both monitored and un-monitored releases. Releases of this magnitude represent an actual or potential substantial degradation of the level of safety of the plant as indicated by a radiological release that significantly exceeds regulatory limits (e.g., a significant uncontrolled release). Radiological effluent EALs are also included to provide a basis for classifying events and conditions that cannot be readily or appropriately classified on the basis of plant conditions alone. The inclusion of both plant condition and radiological effluent EALs more fully addresses the spectrum of possible accident events and conditions. The TEDE dose is set at 1% of the EPA PAG of 1,000 mrem while the 50 mrem thyroid CDE was established in consideration of the 1:5 ratio of the EPA PAG for TEDE and thyroid CDE. Classification based on effluent monitor readings assumes that a release path to the environment is established. If the effluent flow past an effluent monitor is known to have stopped due to actions to isolate the release path, then the effluent monitor reading is no longer VALID for classification purposes. Escalation of the emergency classification level would be via IC AS1RS1. EAL BASES DOCUMENT Rev. 0 Page 103 of 292

ATTACHMENT 1 EAL Bases DBNPS Basis: Dose assessments based on liquid releases are performed per Offsite Dose Calculation Manual (ref. 1). Note: EAL thresholds reflect the State of Ohio guidance to utilities within their jurisdiction to evaluate the consequences of radiological releases in terms of a Child Thyroid PAG rather than an EPA-400 CDE Thyroid PAG. DBNPS Basis Reference(s):

1. DBNPS ODCM
2. NEI 99-01 AA1 EAL BASES DOCUMENT Rev. 0 Page 104 of 292

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 1 - Radiological Effluent Initiating Condition: Release of gaseous or liquid radioactivity resulting in offsite dose greater than 10 mrem TEDE or 50 mrem thyroid CDE EAL: RA1.4 Alert Field survey results indicate EITHER of the following at or beyond the SITE BOUNDARY: z Closed window dose rates > 10 mR/hr expected to continue for 60 min. z Analyses of field survey samples indicate thyroid CDE > 50 mrem for 60 min. of inhalation. (Notes 1, 2) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Note 2: If an ongoing release is detected and the release start time is unknown, assume that the release duration has exceeded the specified time limit. Mode Applicability: ALL NEI 99-01 Basis: This IC addresses a release of gaseous or liquid radioactivity that results in projected or actual offsite doses greater than or equal to 1% of the EPA Protective Action Guides (PAGs). It includes both monitored and un-monitored releases. Releases of this magnitude represent an actual or potential substantial degradation of the level of safety of the plant as indicated by a radiological release that significantly exceeds regulatory limits (e.g., a significant uncontrolled release). Radiological effluent EALs are also included to provide a basis for classifying events and conditions that cannot be readily or appropriately classified on the basis of plant conditions alone. The inclusion of both plant condition and radiological effluent EALs more fully addresses the spectrum of possible accident events and conditions. The TEDE dose is set at 1% of the EPA PAG of 1,000 mrem while the 50 mrem thyroid CDE was established in consideration of the 1:5 ratio of the EPA PAG for TEDE and thyroid CDE. Classification based on effluent monitor readings assumes that a release path to the environment is established. If the effluent flow past an effluent monitor is known to have EAL BASES DOCUMENT Rev. 0 Page 105 of 292

ATTACHMENT 1 EAL Bases stopped due to actions to isolate the release path, then the effluent monitor reading is no longer VALID for classification purposes. Escalation of the emergency classification level would be via IC AS1RS1. DBNPS Basis: NOP-LP-5015 FENOC Field Monitoring Teams Radiation Monitoring Teams Field Surveys provides guidance for emergency or post-accident radiological environmental monitoring (ref. 1). Note: EAL thresholds reflect the State of Ohio guidance to utilities within their jurisdiction to evaluate the consequences of radiological releases in terms of a Child Thyroid PAG rather than an EPA-400 CDE Thyroid PAG. DBNPS Basis Reference(s):

1. NOP-LP-5015 FENOC Field Monitoring Teams Radiation Monitoring Teams Field Surveys
2. NEI 99-01 AA1 EAL BASES DOCUMENT Rev. 0 Page 106 of 292

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 1 - Radiological Effluent Initiating Condition: Release of gaseous or liquid radioactivity greater than 2 times the ODCM limits for 60 minutes or longer EAL: RU1.1 Unusual Event Station Vent Channel 1 Noble Gas (RE 4598AA/BA) > 5.72E-03 Ci/cc for 60 minutes or longer OR ANY of the following effluent monitors > 2 times the high alarm setpoint established by a current radioactivity discharge permit for 60 minutes or longer:

  • Waste Gas System Outlet (RE 1822A or B).
  • Clean Waste System Outlet (RE 1770A or B).
  • Miscellaneous Waste System Outlet (RE 1878A or B).
  • Discharge permit specified monitor.

(Notes 1, 2, 3) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Note 2: If an ongoing release is detected and the release start time is unknown, assume that the release duration has exceeded the specified time limit. Note 3: If the effluent flow past an effluent monitor is known to have stopped, indicating that the release path is isolated, the effluent monitor reading is no longer VALID for classification purposes. Mode Applicability: ALL NEI 99-01 Basis: This IC addresses a potential decrease in the level of safety of the plant as indicated by a low-level radiological release that exceeds regulatory commitments for an extended period of time (e.g., an uncontrolled release). It includes ANY gaseous or liquid radiological release, EAL BASES DOCUMENT Rev. 0 Page 107 of 292

ATTACHMENT 1 EAL Bases monitored or un-monitored, including those for which a radioactivity discharge permit is normally prepared. Nuclear power plants incorporate design features intended to control the release of radioactive effluents to the environment. Further, there are administrative controls established to prevent unintentional releases, and to control and monitor intentional releases. The occurrence of an extended, uncontrolled radioactive release to the environment is indicative of degradation in these features and/or controls. Radiological effluent EALs are also included to provide a basis for classifying events and conditions that cannot be readily or appropriately classified on the basis of plant conditions alone. The inclusion of both plant condition and radiological effluent EALs more fully addresses the spectrum of possible accident events and conditions. Classification based on effluent monitor readings assumes that a release path to the environment is established. If the effluent flow past an effluent monitor is known to have stopped due to actions to isolate the release path, then the effluent monitor reading is no longer VALID for classification purposes. Releases should not be prorated or averaged. For example, a release exceeding 4 times release limits for 30 minutes does not meet the EAL. EAL #1 - This EAL addresses normally occurring continuous radioactivity releases from monitored gaseous or liquid effluent pathways or . EAL #2 - This EAL addresses radioactivity releases that cause effluent radiation monitor readings to exceed 2 times the limit established by a radioactivity discharge permit. This EAL will typically be associated with planned batch releases from non-continuous release pathways (e.g., radwaste, waste gas). EAL #3 - This EAL addresses uncontrolled gaseous or liquid releases that are detected by sample analyses or environmental surveys, particularly on unmonitored pathways (e.g., spills of radioactive liquids into storm drains, heat exchanger leakage in river water systems, etc.). Escalation of the emergency classification level would be via IC AA1RA1. DBNPS Basis: The UE gaseous and liquid release values represent two times the appropriate ODCM release rate limits associated with the specified monitors (ref. 2). Gaseous Releases Instrumentation that may be used to assess this EAL is listed below (ref. 1):

  • Station Vent - RE 4598AA or BA
  • Waste Gas System Outlet - RE 1822 A or B (batch release)

EAL BASES DOCUMENT Rev. 0 Page 108 of 292

ATTACHMENT 1 EAL Bases The Station Vent gaseous effluent (RE 4598AA/BA) value of 2 times the ODCM setpoint was determined using formulas, isotopic dose conversion factors and meteorology data as specified in the ODCM based on a normal operating isotopic mixture (no clad damage condition). Assumptions and calculation inputs are provided in EP-EALCALC-DB-0703 Rev. 2 (ref. 2). The Waste Gas Outlet (RE 1822 A or B for batch release) are the release monitors normally used for planned discharges. If a discharge is performed using a different flow path or effluent monitor (e.g., a portable or temporary effluent monitor), then the declaration criteria will be based on the monitor specified in the discharge permit. Liquid Releases Instrumentation that may be used to assess this EAL is listed below (ref. 1):

  • Clean Waste System Outlet - RE 1770 A or B (batch release)
  • Misc. Waste System Outlet - RE 1878 A or B (batch release)

The liquid release monitors listed are those normally used for planned discharges. If a discharge is performed using a different flow path or effluent monitor (e.g., a portable or temporary effluent monitor), then the declaration criteria will be based on the monitor specified in the discharge permit. DBNPS Basis Reference(s):

1. DBNPS ODCM
2. EP-EALCALC-DB-0703 Rev. 2 Radiological Gaseous Effluent EAL Values (EALs RG1, RS1, RA1 and RU1)
3. NEI 99-01 AU1 EAL BASES DOCUMENT Rev. 0 Page 109 of 292

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 1 - Radiological Effluent Initiating Condition: Release of gaseous or liquid radioactivity greater than 2 times the ODCM limits for 60 minutes or longer. EAL: RU1.2 Unusual Event Sample analysis for a gaseous or liquid release indicates a concentration or release rate > 2 x ODCM limits for 60 min. (Notes 1, 2) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Note 2: If an ongoing release is detected and the release start time is unknown, assume that the release duration has exceeded the specified time limit. Mode Applicability: ALL NEI 99-01 Basis: This IC addresses a potential decrease in the level of safety of the plant as indicated by a low-level radiological release that exceeds regulatory commitments for an extended period of time (e.g., an uncontrolled release). It includes ANY gaseous or liquid radiological release, monitored or un-monitored, including those for which a radioactivity discharge permit is normally prepared. Nuclear power plants incorporate design features intended to control the release of radioactive effluents to the environment. Further, there are administrative controls established to prevent unintentional releases, and to control and monitor intentional releases. The occurrence of an extended, uncontrolled radioactive release to the environment is indicative of degradation in these features and/or controls. Radiological effluent EALs are also included to provide a basis for classifying events and conditions that cannot be readily or appropriately classified on the basis of plant conditions alone. The inclusion of both plant condition and radiological effluent EALs more fully addresses the spectrum of possible accident events and conditions. Classification based on effluent monitor readings assumes that a release path to the environment is established. If the effluent flow past an effluent monitor is known to have stopped due to actions to isolate the release path, then the effluent monitor reading is no longer valid for classification purposes. EAL BASES DOCUMENT Rev. 0 Page 110 of 292

ATTACHMENT 1 EAL Bases Releases should not be prorated or averaged. For example, a release exceeding 4 times release limits for 30 minutes does not meet the EAL. EAL #1 - This EAL addresses normally occurring continuous radioactivity releases from monitored gaseous or liquid effluent pathways. EAL #2 - This EAL addresses radioactivity releases that cause effluent radiation monitor readings to exceed 2 times the limit established by a radioactivity discharge permit. This EAL will typically be associated with planned batch releases from non-continuous release pathways (e.g., radwaste, waste gas). EAL #3 - This EAL addresses uncontrolled gaseous or liquid releases that are detected by sample analyses or environmental surveys, particularly on unmonitored pathways (e.g., spills of radioactive liquids into storm drains, heat exchanger leakage in river water systems, etc.). Escalation of the emergency classification level would be via IC AA1RA1. DBNPS Basis: Grab samples are used to determine release concentrations or release rates, confirm meter readings, or indicate the need for sampling when the effluent monitors are not in service or other alarms occur. The maximum instantaneous release rate limits are calculated in accordance with the ODCM. These are indicated on approved discharge permit release packages (ref. 1). DBNPS Basis Reference(s):

1. DBNPS ODCM
2. NEI 99-01 AU1 EAL BASES DOCUMENT Rev. 0 Page 111 of 292

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 2 - Irradiated Fuel Event Initiating Condition: Spent fuel pool level cannot be restored to at least the top of the fuel racks for 60 minutes or longer EAL: RG2.1 General Emergency Spent fuel pool level cannot be restored to at least 1 ft. for > 60 min. (Note 1) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Mode Applicability: ALL NEI 99-01 Basis: This IC EAL addresses a significant loss of spent fuel pool inventory control and makeup capability leading to a prolonged uncovery of spent fuel. This condition will lead to fuel damage and a radiological release to the environment. It is recognized that this IC would likely not be met until well after another General Emergency IC was met; however, it is included to provide classification diversity. DBNPS Basis: Post-Fukushima order EA-12-051 (ref.1) required the installation of reliable SFP level indication capable of identifying normal level (Level 1), SFP level 10 ft. above the top of the fuel racks (Level 2) and SFP level at the top of the fuel racks (Level 3). Indicated level of 1 ft. on LI4801A (primary) or LI4801B (Backup) corresponds approximately to 1 ft. above the top of the SFP racks (ref. 2). DBNPS Basis Reference(s):

1. NRC EA-12-51 Issuance of Order to Modify Licenses with Regard to Reliable Spent Fuel Pool Instrumentation
2. Engineering Change Package 13-0596
3. NEI 99-01 AG2 EAL BASES DOCUMENT Rev. 0 Page 112 of 292

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 2 - Irradiated Fuel Event Initiating Condition: Spent fuel pool level at the top of the fuel racks EAL: RS2.1 Site Area Emergency Lowering of spent fuel pool level to 1 ft. Mode Applicability: ALL NEI 99-01 Basis: This IC EAL addresses a significant loss of spent fuel pool inventory control and makeup capability leading to IMMINENT fuel damage. This condition entails major failures of plant functions needed for protection of the public and thus warrant a Site Area Emergency declaration. It is recognized that this IC would likely not be met until well after another Site Area Emergency IC was met; however, it is included to provide classification diversity. Escalation of the emergency classification level would be via IC AG1 RG1 or AG2RG2. DBNPS Basis: Post-Fukushima order EA-12-051 (ref.1) required the installation of reliable SFP level indication capable of identifying normal level (Level 1), SFP level 10 ft. above the top of the fuel racks (Level 2) and SFP level at the top of the fuel racks (Level 3). Indicated level of 1 ft. on LI4801A (primary) or LI4801B (Backup) corresponds approximately to 1 ft. above the top of the SFP racks (ref. 2). DBNPS Basis Reference(s):

1. NRC EA-12-51 Issuance of Order to Modify Licenses with Regard to Reliable Spent Fuel Pool Instrumentation
2. Engineering Change Package 13-0596
3. NEI 99-01 AS2 EAL BASES DOCUMENT Rev. 0 Page 113 of 292

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 2 - Irradiated Fuel Event Initiating Condition: Significant lowering of water level above, or damage to, irradiated fuel EAL: RA2.1 Unusual Event Uncovery of irradiated fuel in the REFUELING PATHWAY Mode Applicability: ALL NEI 99-01 Basis: This IC addresses events that have caused IMMINENT or actual damage to an irradiated fuel assembly, or a significant lowering of water level within the spent fuel pool (see Developer Notes). These events present radiological safety challenges to plant personnel and are precursors to a release of radioactivity to the environment. As such, they represent an actual or potential substantial degradation of the level of safety of the plant. This IC applies to irradiated fuel that is licensed for dry storage up to the point that the loaded storage cask is sealed. Once sealed, damage to a loaded cask causing loss of the CONFINEMENT BOUNDARY is classified in accordance with IC EAL E-HU1.1. Escalation of the emergency would be based on either Recognition Category A R or C ICs. EAL #1 This EAL escalates from AU2 RU2.1 in that the loss of level, in the affected portion of the REFUELING PATHWAY, is of sufficient magnitude to have resulted in uncovery of irradiated fuel. Indications of irradiated fuel uncovery may include direct or indirect visual observation (e.g., reports from personnel or camera images), as well as significant changes in water and radiation levels, or other plant parameters. Computational aids may also be used (e.g., a boil-off curve). Classification of an event using this EAL should be based on the totality of available indications, reports and observations. While an area radiation monitor could detect an increase in a dose rate due to a lowering of water level in some portion of the REFUELING PATHWAY, the reading may not be a reliable indication of whether or not the fuel is actually uncovered. To the degree possible, readings should be considered in combination with other available indications of inventory loss. A drop in water level above irradiated fuel within the reactor vessel may be classified in accordance Recognition Category C during the Cold Shutdown and Refueling modes.EAL #2 EAL BASES DOCUMENT Rev. 0 Page 114 of 292

ATTACHMENT 1 EAL Bases This EAL addresses a release of radioactive material caused by mechanical damage to irradiated fuel. Damaging events may include the dropping, bumping or binding of an assembly, or dropping a heavy load onto an assembly. A rise in readings on radiation monitors should be considered in conjunction with in-plant reports or observations of a potential fuel damaging event (e.g., a fuel handling accident). EAL #3 Spent fuel pool water level at this value is within the lower end of the level range necessary to prevent significant dose consequences from direct gamma radiation to personnel performing operations in the vicinity of the spent fuel pool. This condition reflects a significant loss of spent fuel pool water inventory and thus it is also a precursor to a loss of the ability to adequately cool the irradiated fuel assembles stored in the pool. Escalation of the emergency classification level would be via ICs AS1 RS1or AS2 (see AS2 Developer Notes). DBNPS Basis: None DBNPS Basis Reference(s):

1. DB-OP-02003 3-1-B, SFP LVL
2. DB-OP-02003 3-1-A, REFUELING CANAL LVL
3. DB-OP-02547 Spent Fuel Pool Cooling Malfunctions
4. NEI 99-01 AA2 EAL BASES DOCUMENT Rev. 0 Page 115 of 292

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 2 - Irradiated Fuel Event Initiating Condition: Significant lowering of water level above, or damage to, irradiated fuel EAL: RA2.2 Alert Damage to irradiated fuel resulting in a release of radioactivity as indicated by a high radiation alarm on ANY of the following radiation monitor indications:

  • RE 8426 SFP Area
  • RE 8427 SFP Area
  • RE 8417 Fuel Handling Area
  • RE 8418 Fuel Handling Area
  • RE 8425 Equipment Hatch Area
  • RE 8446/8447 Fuel Handling Exhaust
  • RE 4598AA/BA Station Vent Mode Applicability:

ALL NEI 99-01 Basis: This IC addresses events that have caused IMMINENT or actual damage to an irradiated fuel assembly, or a significant lowering of water level within the spent fuel pool (see Developer Notes). These events present radiological safety challenges to plant personnel and are precursors to a release of radioactivity to the environment. As such, they represent an actual or potential substantial degradation of the level of safety of the plant. This IC applies to irradiated fuel that is licensed for dry storage up to the point that the loaded storage cask is sealed. Once sealed, damage to a loaded cask causing loss of the CONFINEMENT BOUNDARY is classified in accordance with IC E-HU1. Escalation of the emergency would be based on either Recognition Category A R or C ICs. EAL #This EAL escalates from AU2 in that the loss of level, in the affected portion of the REFUELING PATHWAY, is of sufficient magnitude to have resulted in uncovery of irradiated fuel. Indications of irradiated fuel uncovery may include direct or indirect visual observation (e.g., reports from personnel or camera images), as well as significant changes in water and radiation levels, or other plant parameters. Computational aids may also be used (e.g., a boil-off curve). Classification of an event using this EAL should be based on the totality of available indications, reports and observations. EAL BASES DOCUMENT Rev. 0 Page 116 of 292

ATTACHMENT 1 EAL Bases While an area radiation monitor could detect an increase in a dose rate due to a lowering of water level in some portion of the REFUELING PATHWAY, the reading may not be a reliable indication of whether or not the fuel is actually uncovered. To the degree possible, readings should be considered in combination with other available indications of inventory loss. A drop in water level above irradiated fuel within the reactor vessel may be classified in accordance Recognition Category C during the Cold Shutdown and Refueling modes. This EAL addresses a release of radioactive material caused by mechanical damage to irradiated fuel. Damaging events may include the dropping, bumping or binding of an assembly, or dropping a heavy load onto an assembly. A rise in readings on radiation monitors should be considered in conjunction with in-plant reports or observations of a potential fuel damaging event (e.g., a fuel handling accident).EAL #3Spent fuel pool water level at this value is within the lower end of the level range necessary to prevent significant dose consequences from direct gamma radiation to personnel performing operations in the vicinity of the spent fuel pool. This condition reflects a significant loss of spent fuel pool water inventory and thus it is also a precursor to a loss of the ability to adequately cool the irradiated fuel assembles stored in the pool. Escalation of the emergency classification level would be via ICs AS1 RS1or AS2 (see AS2 Developer Notes). DBNPS Basis: The specified radiation monitors are those expected to see increase area radiation levels as a result of damage to irradiated fuel (ref. 1). The high alarm setpoints for the radiation monitors are set to be indicative of significant increases in area and/or airborne radiation (ref. 2). DBNPS Basis Reference(s):

1. DB-OP-02530 Fuel Handling Accident
2. Radiation Setpoints Manual
3. NEI 99-01 AA2 EAL BASES DOCUMENT Rev. 0 Page 117 of 292

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 2 - Irradiated Fuel Event Initiating Condition: Significant lowering of water level above, or damage to, irradiated fuel EAL: RA2.3 Alert Lowering of spent fuel pool level to 10 ft. Mode Applicability: ALL NEI 99-01 Basis: This IC addresses events that have caused IMMINENT or actual damage to an irradiated fuel assembly, or a significant lowering of water level within the spent fuel pool (see Developer Notes). These events present radiological safety challenges to plant personnel and are precursors to a release of radioactivity to the environment. As such, they represent an actual or potential substantial degradation of the level of safety of the plant. This IC applies to irradiated fuel that is licensed for dry storage up to the point that the loaded storage cask is sealed. Once sealed, damage to a loaded cask causing loss of the CONFINEMENT BOUNDARY is classified in accordance with IC E-HU1. Escalation of the emergency would be based on either Recognition Category A R or C ICs.EAL #This EAL escalates from AU2 in that the loss of level, in the affected portion of the REFUELING PATHWAY, is of sufficient magnitude to have resulted in uncovery of irradiated fuel. Indications of irradiated fuel uncovery may include direct or indirect visual observation (e.g., reports from personnel or camera images), as well as significant changes in water and radiation levels, or other plant parameters. Computational aids may also be used (e.g., a boil-off curve). Classification of an event using this EAL should be based on the totality of available indications, reports and observations. While an area radiation monitor could detect an increase in a dose rate due to a lowering of water level in some portion of the REFUELING PATHWAY, the reading may not be a reliable indication of whether or not the fuel is actually uncovered. To the degree possible, readings should be considered in combination with other available indications of inventory loss. A drop in water level above irradiated fuel within the reactor vessel may be classified in accordance Recognition Category C during the Cold Shutdown and Refueling modes. This EAL addresses a release of radioactive material caused by mechanical damage to irradiated fuel. Damaging events may include the dropping, bumping or binding of an assembly, or dropping a heavy load onto an assembly. A rise in readings on radiation EAL BASES DOCUMENT Rev. 0 Page 118 of 292

ATTACHMENT 1 EAL Bases monitors should be considered in conjunction with in-plant reports or observations of a potential fuel damaging event (e.g., a fuel handling accident). EAL #3Spent fuel pool water level at this value is within the lower end of the level range necessary to prevent significant dose consequences from direct gamma radiation to personnel performing operations in the vicinity of the spent fuel pool. This condition reflects a significant loss of spent fuel pool water inventory and thus it is also a precursor to a loss of the ability to adequately cool the irradiated fuel assembles stored in the pool. Escalation of the emergency classification level would be via ICs AS1 RS1or AS2 (see AS2 Developer Notes)RS2. DBNPS Basis: Post-Fukushima order EA-12-051 (ref.1) required the installation of reliable SFP level indication capable of identifying normal level (Level 1), SFP level 10 ft. above the top of the fuel racks (Level 2) and SFP level at the top of the fuel racks (Level 3). Indicated level of 10 ft. on LI4801A (primary) or LI4801B (Backup) corresponds to plant elevation 588 ft. 6 in. (ref. 2). DBNPS Basis Reference(s):

1. NRC EA-12-51 Issuance of Order to Modify Licenses with Regard to Reliable Spent Fuel Pool Instrumentation
2. Engineering Change Package 13-0596
3. NEI 99-01 AA2 EAL BASES DOCUMENT Rev. 0 Page 119 of 292

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 2 - Irradiated Fuel Event Initiating Condition: UNPLANNED loss of water level above irradiated fuel EAL: RU2.1 Unusual Event UNPLANNED water level drop in the REFUELING PATHWAY as indicated by ANY of the following:

  • SFP level alarm or indication (Ll 1600)
  • SFP level indication (Ll 4801 A/B)
  • Refueling Canal low water level alarm or indication (Ll 1627)
  • Visual observation AND UNPLANNED rise in corresponding area radiation levels as indicated by ANY of the following radiation monitors:
  • RE 8426 SFP Area
  • RE 8427 SFP Area
  • RE 8417 Fuel Handling Area
  • RE 8418 Fuel Handling Area
  • RE 8425 Equipment Hatch Area Mode Applicability:

ALL NEI 99-01 Basis: This IC addresses a decrease in water level above irradiated fuel sufficient to cause elevated radiation levels. This condition could be a precursor to a more serious event and is also indicative of a minor loss in the ability to control radiation levels within the plant. It is therefore a potential degradation in the level of safety of the plant. A water level decrease will be primarily determined by indications from available level instrumentation. Other sources of level indications may include reports from plant personnel (e.g., from a refueling crew) or video camera observations (if available). A significant drop in the water level may also cause an increase in the radiation levels of adjacent areas that can be detected by monitors in those locations. EAL BASES DOCUMENT Rev. 0 Page 120 of 292

ATTACHMENT 1 EAL Bases The effects of planned evolutions should be considered. For example, a refueling bridge area radiation monitor reading may increase due to planned evolutions such as lifting of the reactor vessel head or movement of a fuel assembly. Note that this EAL is applicable only in cases where the elevated reading is due to an UNPLANNED loss of water level. A drop in water level above irradiated fuel within the reactor vessel may be classified in accordance Recognition Category C during the Cold Shutdown and Refueling modes. Escalation of the emergency classification level would be via IC AA2RA2. DBNPS Basis: The SFP low water level alarm setpoint is actuated by LS 1600 at a setpoint of 23.2 feet on LI 1600 (ref. 1). The refueling canal low water level alarm setpoint is actuated by LS 1627 at a setpoint of 23.4 feet on LI 1627 (this corresponds to 1.5 inches below normal) (ref. 2). The Ll 4801 A/B is indication only, with no alarm or computer point function. Water level restoration instructions are performed in accordance with AOPs (ref. 1, 2, 3). The specified radiation monitors are those expected to see increase area radiation levels as a result of a loss of REFUELING PATHWAY inventory (ref. 1). Increasing radiation indications on these monitors in the absence of indications of decreasing REFUELING PATHWAY level are not classifiable under this EAL. When the spent fuel pool and reactor cavity are connected, there could exist the possibility of uncovering irradiated fuel. Therefore, this EAL is applicable for conditions in which irradiated fuel is being transferred to and from the reactor vessel and spent fuel pool. DBNPS Basis Reference(s):

1. DB-OP-02003 3-1-B, SFP LVL
2. DB-OP-02003 3-1-A, REFUELING CANAL LVL
3. DB-OP-02547 Spent Fuel Pool Cooling Malfunctions
4. NEI 99-01 AU2 EAL BASES DOCUMENT Rev. 0 Page 121 of 292

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 3 - Area Radiation Levels Initiating Condition: Radiation levels that IMPEDE access to equipment necessary for normal plant operations, cooldown or shutdown EAL: RA3.1 Alert Dose rates > 15 mR/hr in EITHER of the following areas:

  • Control Room (RE 8430 or 8431)
  • Central Alarm Station (RE 8435 or 8436)

Mode Applicability: ALL NEI 99-01 Basis: This IC addresses elevated radiation levels in certain plant rooms/areas sufficient to preclude or IMPEDE personnel from performing actions necessary to maintain normal plant operation, or to perform a normal plant cooldown and shutdown. As such, it represents an actual or potential substantial degradation of the level of safety of the plant. The Emergency Director should consider the cause of the increased radiation levels and determine if another IC may be applicable.For EAL #2, an Alert declaration is warranted if entry into the affected room/area is, or may be, procedurally required during the plant operating mode in effect at the time of the elevated radiation levels. The emergency classification is not contingent upon whether entry is actually necessary at the time of the increased radiation levels. Access should be considered as impeded if extraordinary measures are necessary to facilitate entry of personnel into the affected room/area (e.g., installing temporary shielding, requiring use of non-routine protective equipment, requesting an extension in dose limits beyond normal administrative limits). An emergency declaration is not warranted if any of the following conditions apply. z The plant is in an operating mode different than the mode specified for the affected room/area (i.e., entry is not required during the operating mode in effect at the time of the elevated radiation levels). For example, the plant is in Mode 1 when the radiation increase occurs, and the procedures used for normal operation, cooldown and shutdown do not require entry into the affected room until Mode 4. z The increased radiation levels are a result of a planned activity that includes compensatory measures which address the temporary inaccessibility of a room or area (e.g., radiography, spent filter or resin transfer, etc.). EAL BASES DOCUMENT Rev. 0 Page 122 of 292

ATTACHMENT 1 EAL Bases z The action for which room/area entry is required is of an administrative or record keeping nature (e.g., normal rounds or routine inspections). z The access control measures are of a conservative or precautionary nature, and would not actually prevent or impede a required action. Escalation of the emergency classification level would be via Recognition Category AR, C or F ICs. DBNPS Basis: Areas that meet this threshold include the Control Room and the Central Alarm Station (CAS). RE 8430 and 8431 monitors the Control room for area radiation. The CAS area does not have installed radiation monitoring but RE 8435 and 8436 are in near proximity and can be used to approximate CAS area radiation levels (ref. 1, 2). The CAS is included because of its importance to permitting access to areas required to assure safe plant operations. DBNPS Basis Reference(s):

1. DB-OP-06412 Process and Area Radiation Monitor
2. SD-017B System Description for Area Radiation Monitors
3. NEI 99-01 AA3 EAL BASES DOCUMENT Rev. 0 Page 123 of 292

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 3 - Area Radiation Levels Initiating Condition: Radiation levels that IMPEDE access to equipment necessary for normal plant operations, cooldown or shutdown EAL: RA3.2 Alert An UNPLANNED event results in radiation levels that prohibit or IMPEDE access to ANY Table R-2 Safe Shutdown Rooms or Areas (Note 5) Note 5: If the equipment in the listed room or area was already inoperable or out-of-service before the event occurred, then no emergency classification is warranted. Table R-2 Safe Shutdown Rooms/Areas Room/Area Mode Applicability Aux Bldg. 565 ele. Room 236 #2 Mechanical 1, 2, 3 Penetration Room Aux Bldg. 585 ele. Room 304 corridor outside 1, 2, 3

            #3 Mechanical Penetration Room Aux Bldg. 603 ele. Room 427 - #2 Electrical 1, 2, 3 Penetration Room Mode Applicability:

1 - Power Operation, 2 - Startup, 3 - Hot Standby NEI 99-01 Basis: This IC addresses elevated radiation levels in certain plant rooms/areas sufficient to preclude or IMPEDE personnel from performing actions necessary to maintain normal plant operation, or to perform a normal plant cooldown and shutdown. As such, it represents an actual or potential substantial degradation of the level of safety of the plant. The Emergency Director should consider the cause of the increased radiation levels and determine if another IC may be applicable. For EAL #2RA3.2, an Alert declaration is warranted if entry into the affected room/area is, or may be, procedurally required during the plant operating mode in effect at the time of the elevated radiation levels. The emergency classification is not contingent upon whether entry is actually necessary at the time of the increased radiation levels. Access should be considered as IMPEDED if extraordinary measures are necessary to facilitate entry of personnel into the affected room/area (e.g., installing temporary shielding, requiring use of non-routine protective equipment, requesting an extension in dose limits beyond normal administrative limits). EAL BASES DOCUMENT Rev. 0 Page 124 of 292

ATTACHMENT 1 EAL Bases An emergency declaration is not warranted if ANY of the following conditions apply: z The plant is in an operating mode different than the mode specified for the affected room/area (i.e., entry is not required during the operating mode in effect at the time of the elevated radiation levels). For example, the plant is in Mode 1 when the radiation increase occurs, and the procedures used for normal operation, cooldown and shutdown do not require entry into the affected room until Mode 4. z The increased radiation levels are a result of a planned activity that includes compensatory measures, which address the temporary inaccessibility of a room or area (e.g., radiography, spent filter or resin transfer, etc.). z The action for which room/area entry is required is of an administrative or record keeping nature (e.g., normal rounds or routine inspections). z The access control measures are of a conservative or precautionary nature, and would not actually prevent or IMPEDE a required action. If the equipment in the listed room or area was already inoperable, or out-of-service, before the event occurred, then no emergency should be declared since the event will have no adverse impact beyond that already allowed by Technical Specifications at the time of the event. Escalation of the emergency classification level would be via Recognition Category AR, C or F ICs. DBNPS Basis: If the equipment in the listed room or area was already inoperable, or out-of-service, before the event occurred, then no emergency should be declared since the event will have no adverse impact beyond that already allowed by Technical Specifications at the time of the event. The list of plant rooms or areas with entry-related mode applicability identified specify those rooms or areas that contain equipment which require a manual/local action as specified in operating procedures used for normal plant operation, cooldown and shutdown. Rooms or areas in which actions of a contingent or emergency nature would be performed (e.g., an action to address an off-normal or emergency condition such as emergency repairs, corrective measures or emergency operations) are not included. In addition, the list specifies the plant mode(s) during which entry would be required for each room or area (ref. 1). DBNPS Basis Reference(s):

1. Attachment 3 Safe Shutdown Rooms/Areas Tables R-2 & H-2 Bases
2. RA-EP-02861 Radiological Incidents
3. NEI 99-01 AA3 EAL BASES DOCUMENT Rev. 0 Page 125 of 292

ATTACHMENT 1 EAL Bases Category E - Dry Fuel Storage Facility (DFSF) EAL Group: ANY (EALs in this category are applicable to ANY plant condition, hot or cold) A dry fuel storage facility (DFSF) is a complex that is designed and constructed for the interim storage of spent nuclear fuel and other radioactive materials associated with spent fuel storage. A significant amount of the radioactive material contained within a cask/canister must escape its packaging and enter the biosphere for there to be a significant environmental effect resulting from an accident involving the dry storage of spent nuclear fuel. An Unusual Event is declared based on the occurrence of an event of sufficient magnitude that a loaded cask CONFINEMENT BOUNDARY is damaged or violated. Minor surface damage that does not affect storage cask/canister boundary is excluded from the scope of these EALs. EAL BASES DOCUMENT Rev. 0 Page 126 of 292

ATTACHMENT 1 EAL Bases Category: E - DFSF Sub-category: None Initiating Condition: Damage to a loaded cask CONFINEMENT BOUNDARY EAL: EU1.1 Notification of Unusual Event Damage to a loaded canister CONFINEMENT BOUNDARY as indicated by an on-contact radiation reading on the surface of a loaded spent fuel HSM cask > EITHER of the following:

  • 100 mrem/hr (neutron + gamma) on the HSM cask wall or roof
  • 100 mrem/hr (neutron + gamma) on the center of the HSM cask door Mode Applicability:

ALL NEI 99-01 Basis: This IC addresses an event that results in damage to the CONFINEMENT BOUNDARY of a storage cask containing spent fuel. It applies to irradiated fuel that is licensed for dry storage beginning at the point that the loaded storage cask is sealed. The issues of concern are the creation of a potential or actual release path to the environment, degradation of one or more fuel assemblies due to environmental factors, and configuration changes, which could cause challenges in removing the cask or fuel from storage. The existence of damage is determined by radiological survey. The technical specification multiple of 2 times, which is also used in Recognition Category A R IC RAU1, is used here to distinguish between non-emergency and emergency conditions. The emphasis for this classification is the degradation in the level of safety of the spent fuel cask and not the magnitude of the associated dose or dose rate. It is recognized that in the case of extreme damage to a loaded cask, the fact that the on-contact dose rate limit is exceeded may be determined based on measurement of a dose rate at some distance from the cask. Security-related events for DFSFISFSIs are covered under ICs HU1 and HA1. DBNPS Basis: The DBNPS DFSF utilizes one design for dry spent fuel storage: the Nuclear Horizontal Modular Storage (NUHOMS) system. The system consists of Horizontal Storage Modules (HSM) that contains dry shielded canisters (DSCs). The DSC serves as the CONFINEMENT BOUNDARY. The DSC is welded and designed to provide confinement of all radionuclides under normal, off normal, and accident conditions. EAL BASES DOCUMENT Rev. 0 Page 127 of 292

ATTACHMENT 1 EAL Bases CONFINEMENT BOUNDARY is defined as the barrier(s) between areas containing radioactive substances and the environment. Therefore, damage to a CONFINEMENT BOUNDARY must be a confirmed physical breach between the spent fuel and the environment for the DSC. The values shown represent 2 times the limits specified in the DFSF Site CSAR for radiation external to a loaded DSC (ref. 1). DBNPS Basis Reference(s):

1. Site CSAR NUH-003 Table 7.3-2 Shielding Analysis Results for 5 year Cooled Fuel NUHOMS-24P System
3. NEI 99-01 E-HU1 EAL BASES DOCUMENT Rev. 0 Page 128 of 292

ATTACHMENT 1 EAL Bases Category C - Cold Shutdown / Refueling System Malfunction EAL Group: Cold Conditions (RCS temperature 200ºF); EALs in this category are applicable only in one or more cold operating modes. Category C EALs are directly associated with Cold Shutdown or Refueling system safety functions. Given the variability of plant configurations (e.g., systems out-of-service for maintenance, containment open, reduced AC power redundancy, time since shutdown) during these periods, the consequences of any given initiating event can vary greatly. For example, a loss of decay heat removal capability that occurs at the end of an extended outage has less significance than a similar loss occurring during the first week after shutdown. Compounding these events is the likelihood that instrumentation necessary for assessment may also be inoperable. The Cold Shutdown and Refueling system malfunction EALs are based on performance capability to the extent possible with consideration given to RCS integrity, CONTAINMENT CLOSURE, and fuel clad integrity for the applicable operating modes (5 - Cold Shutdown, 6 - Refueling, D - Defueled). The events of this category pertain to the following subcategories:

1. RCS Level RCS water level is directly related to the status of adequate core cooling and, therefore, fuel clad integrity.
2. Loss of Essential AC Power Loss of essential plant electrical power can compromise plant SAFETY SYSTEM operability including decay heat removal and emergency core cooling systems, which may be necessary to ensure fission product barrier integrity. This category includes loss of onsite and offsite power sources for 4160 VAC essential buses.
3. RCS Temperature Uncontrolled or inadvertent temperature or pressure increases are indicative of a potential loss of safety functions.
4. Loss of Essential DC Power Loss of emergency plant electrical power can compromise plant SAFETY SYSTEM operability including decay heat removal and emergency core cooling systems, which may be necessary to ensure fission product barrier integrity. This category includes loss of power to or degraded voltage on the 125 VDC buses.

EAL BASES DOCUMENT Rev. 0 Page 129 of 292

ATTACHMENT 1 EAL Bases

5. Loss of Communications Certain events that degrade plant operators ability to communicate with essential personnel within or external to the plant warrant emergency classification.
6. Hazardous Event Affecting SAFETY SYSTEMS Certain hazardous natural and technological events may result in visible damage to or degraded performance of SAFETY SYSTEMS warranting classification.

EAL BASES DOCUMENT Rev. 0 Page 130 of 292

ATTACHMENT 1 EAL Bases Category: C - Cold Shutdown / Refueling System Malfunction Subcategory: 1 - RCS Level Initiating Condition: Loss of RCS inventory affecting fuel clad integrity with containment challenged EAL: CG1.1 General Emergency RCS level cannot be monitored for 30 min. (Note 1) AND Core uncovery is indicated by ANY of the following:

  • UNPLANNED increase in Containment Sumps, Auxiliary Building Sumps, BWST or RCDT levels of sufficient magnitude to indicate core uncovery
  • Containment Radiation Monitor (RE 4596A or B) reading > 16 R/hr
  • Refueling Bridge Portable Area Radiation Monitor reading > 30 R/hr
  • Erratic Source Range Monitor indication AND ANY Containment Challenge indication, Table C-1 Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded.

Note 6: If CONTAINMENT CLOSURE is re-established prior to exceeding the 30-minute time limit, declaration of a General Emergency is not required. Table C-1 Containment Challenge Indications

  • CONTAINMENT CLOSURE not established (Note 6)
  • Containment Hydrogen concentration > 4%
  • UNPLANNED rise in Containment pressure Mode Applicability:

5 - Cold Shutdown, 6 - Refueling EAL BASES DOCUMENT Rev. 0 Page 131 of 292

ATTACHMENT 1 EAL Bases NEI 99-01 Basis: This IC addresses the inability to restore and maintain reactor vesselRCS level above the top of active fuel with containment challenged. This condition represents actual or IMMINENT substantial core degradation or melting with potential for loss of containment integrity. Releases can be reasonably expected to exceed EPA PAG exposure levels offsite for more than the immediate site area. Following an extended loss of core decay heat removal and inventory makeup, decay heat will cause reactor coolant boiling and a further reduction in reactor vesselRCS level. If RCS/reactor vessel level cannot be restored, fuel damage is probable. With CONTAINMENT CLOSURE not established, there is a high potential for a direct and unmonitored release of radioactivity to the environment. If CONTAINMENT CLOSURE is re-established prior to exceeding the 30-minute time limit, then declaration of a General Emergency is not required. The existence of an explosive mixture means, at a minimum, that the containment atmospheric hydrogen concentration is sufficient to support a hydrogen burn (i.e., at the lower deflagration limit). A hydrogen burn will raise containment pressure and could result in collateral equipment damage leading to a loss of containment integrity. It therefore represents a challenge to Containment integrity. In the early stages of a core uncovery event, it is unlikely that hydrogen buildup due to a core uncovery could result in an explosive gas mixture in containment. If all installed hydrogen gas monitors are out-of-service during an event leading to fuel cladding damage, it may not be possible to obtain a containment hydrogen gas concentration reading, as ambient conditions within the containment will preclude personnel access. During periods when installed containment hydrogen gas monitors are out-of-service, operators may use the other listed indications to assess whether or not containment is challenged. In EAL 2.b, tThe 30-minute criterion is tied to a readily recognizable event start time (i.e., the total loss of ability to monitor level), and allows sufficient time to monitor, assess and correlate reactor and plant conditions to determine if core uncovery has actually occurred (i.e., to account for various accident progression and instrumentation uncertainties). It also allows sufficient time for performance of actions to terminate leakage, recover inventory control/makeup equipment and/or restore level monitoring. The inability to monitor (reactor vessel/RCS [PWR] or RPV [BWR])level may be caused by instrumentation and/or power failures, or water level dropping below the range of available instrumentation. If water level cannot be monitored, operators may determine that an inventory loss is occurring by observing changes in sump and/or tank levels. Sump and/or tank level changes must be evaluated against other potential sources of water flow to ensure they are indicative of leakage from the (reactor vessel/RRCS [PWR] or RPV [BWR]). Thisese EALs addresses concerns raised by Generic Letter 88-17, Loss of Decay Heat Removal; SECY 91-283, Evaluation of Shutdown and Low Power Risk Issues; NUREG-1449, Shutdown and Low-Power Operation at Commercial Nuclear Power Plants in the United EAL BASES DOCUMENT Rev. 0 Page 132 of 292

ATTACHMENT 1 EAL Bases States; and NUMARC 91-06, Guidelines for Industry Actions to Assess Shutdown Management. DBNPS Basis: The lowest measurable RCS level is the elevation of the RCS hot leg mid-loop (0.4 ft. on LI 10596). Therefore, RCS inventory loss relative to the RCS level elevation corresponding to the top of active fuel must be detected by indirect leakage indications (ref. 1, 2, 3). Sump level increases must be evaluated against other potential sources of leakage. If the make-up rate to the RCS unexplainably rises above the pre-established rate, a loss of RCS inventory may be occurring even if the source of the leakage cannot be immediately identified. Visual observation of leakage from systems connected to the RCS in areas outside the containment that cannot be isolated, or a sump sample verified by Chemistry, could also be indicative of a loss of RCS inventory (ref. 1). In the Refueling Mode, as water level in the reactor vessel lowers, the dose rate above the core will increase. The dose rate due to this core shine should result in indications on installed and portable area radiation monitors. RE 4596A or B, Containment Radiation Monitors are located in the containment, a reading greater than 16 R/hr is indicative of core uncovery. The Refuel Bridge Portable Radiation Monitor, when installed during refueling operations, is designed to provide monitoring of radiation due to a fuel handling event or loss of shielding during refueling operations. If this radiation monitor reaches and exceeds 30 R/hr, a loss of inventory indicative of core uncovery has occurred (ref. 2, 3). Post-TMI accident studies indicated that the installed PWR nuclear instrumentation will operate erratically when the core is uncovered and that this should be used as a tool for making such determinations. Three conditions are associated with a challenge to containment integrity:

  • CONTAINMENT CLOSURE is not established (Ref. 4).
  • In the early stages of a core uncovery event, it is unlikely that hydrogen buildup due to a core uncovery could result in an explosive mixture of dissolved gases in the containment. However, containment monitoring and/or sampling should be performed to verify this assumption and a General Emergency declared if it is determined that an explosive mixture exists. An explosive mixture can be formed when hydrogen gas concentration in the containment atmosphere is greater than 4% by volume in the presence of oxygen. Hydrogen monitors, although available at all times, are not in service during normal operations. They are started per DB-OP-02000 Table 3. Action is required if the measured concentration reaches 0.6% (notify TSC) and 3% (notify TSC) (ref 5).
  • ANY UNPLANNED increase in containment pressure in the Cold Shutdown or Refueling mode indicates a potential loss of CONTAINMENT CLOSURE capability.

UNPLANNED containment pressure increases indicates CONTAINMENT CLOSURE cannot be assured and the containment cannot be relied upon as a barrier to fission product release. EAL BASES DOCUMENT Rev. 0 Page 133 of 292

ATTACHMENT 1 EAL Bases DBNPS Basis Reference(s):

1. DB-OP-02527 Loss of Decay Heat Removal
2. EP-EALCALC-DB-0704 Radiation Monitor Readings for Core Uncovery During Refueling
3. DB-HP-01152 Performance of High Exposure Work
4. DB-OP-06904, Shutdown Operations
5. DB-OP-02000 Table 3, Containment Monitoring and Control
6. NEI 99-01 CG1 EAL BASES DOCUMENT Rev. 0 Page 134 of 292

ATTACHMENT 1 EAL Bases Category: C - Cold Shutdown / Refueling System Malfunction Subcategory: 1 - RCS Level Initiating Condition: Loss of RCS inventory affecting core decay heat removal capability EAL: CS1.1 Site Area Emergency RCS level cannot be monitored for 30 min. (Note 1) AND Core uncovery is indicated by ANY of the following:

  • UNPLANNED increase in Containment Sumps, Auxiliary Building Sumps, BWST or RCDT levels of sufficient magnitude to indicate core uncovery
  • Containment Radiation Monitor (RE 4596A or B) reading > 16 R/hr
  • Refueling Bridge Portable Area Radiation Monitor reading > 30 R/hr
  • Erratic Source Range Monitor indication Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded.

Mode Applicability: 5 - Cold Shutdown, 6 - Refueling NEI 99-01 Basis: This IC addresses a significant and prolonged loss of (reactor vesselRCS [PWR] or RPV [BWR]) inventory control and makeup capability leading to IMMINENT fuel damage. The lost inventory may be due to a RCS component failure, a loss of configuration control or prolonged boiling of reactor coolant. These conditions entail major failures of plant functions needed for protection of the public and thus warrant a Site Area Emergency declaration. Following an extended loss of core decay heat removal and inventory makeup, decay heat will cause reactor coolant boiling and a further reduction in reactor vesselRCS level. If RCS/reactor vesselRCS level cannot be restored, fuel damage is probable. Outage/shutdown contingency plans typically provide for re-establishing or verifying CONTAINMENT CLOSURE following a loss of heat removal or RCS inventory control functions. The difference in the specified RCS/reactor vessel levels of EALs 1.b and 2.b reflect the fact that with CONTAINMENT CLOSURE established, there is a lower probability of a fission product release to the environment. EAL BASES DOCUMENT Rev. 0 Page 135 of 292

ATTACHMENT 1 EAL Bases In EAL 3.a, tThe 30-minute criterion is tied to a readily recognizable event start time (i.e., the total loss of ability to monitor level), and allows sufficient time to monitor, assess and correlate reactor and plant conditions to determine if core uncovery has actually occurred (i.e., to account for various accident progression and instrumentation uncertainties). It also allows sufficient time for performance of actions to terminate leakage, recover inventory control/makeup equipment and/or restore level monitoring. The inability to monitor (reactor vessel/RCS [PWR] or RPV [BWR]) level may be caused by instrumentation and/or power failures, or water level dropping below the range of available instrumentation. If water level cannot be monitored, operators may determine that an inventory loss is occurring by observing changes in sump and/or tank levels. Sump and/or tank level changes must be evaluated against other potential sources of water flow to ensure they are indicative of leakage from the (reactor vessel/RCS. [PWR] or RPV [BWR]). These This EALs addresses concerns raised by Generic Letter 88-17, Loss of Decay Heat Removal; SECY 91-283, Evaluation of Shutdown and Low Power Risk Issues; NUREG-1449, Shutdown and Low-Power Operation at Commercial Nuclear Power Plants in the United States; and NUMARC 91-06, Guidelines for Industry Actions to Assess Shutdown Management. Escalation of the emergency classification level would be via IC CG1 or AG1RG1. DBNPS Basis: The lowest measurable RCS level is the elevation of the RCS hot leg mid-loop (0.4 ft. on LI 10596). Therefore, RCS inventory loss relative to the RCS level elevation corresponding to the top of active fuel must be detected by indirect leakage indications (ref. 1, 2, 3). Sump level increases must be evaluated against other potential sources of leakage. If the make-up rate to the RCS unexplainably rises above the pre-established rate, a loss of RCS inventory may be occurring even if the source of the leakage cannot be immediately identified. Visual observation of leakage from systems connected to the RCS in areas outside the containment that cannot be isolated, or a sump sample verified by Chemistry, could also be indicative of a loss of RCS inventory (ref. 1). In the Refueling Mode, as water level in the reactor vessel lowers, the dose rate above the core will increase. The dose rate due to this core shine should result in indications on installed and portable area radiation monitors. RE 4596A or B, Containment Radiation Monitors are located in the containment, a reading greater than 16 R/hr is indicative of core uncovery. The Refuel Bridge Portable Radiation Monitor, when installed during refueling operations, is designed to provide monitoring of radiation due to a fuel handling event or loss of shielding during refueling operations. If this radiation monitor reaches and exceeds 30 R/hr, a loss of inventory indicative of core uncovery has occurred (ref. 2, 3). Post-TMI accident studies indicated that the installed PWR nuclear instrumentation will operate erratically when the core is uncovered and that this should be used as a tool for making such determinations. DBNPS Basis Reference(s): EAL BASES DOCUMENT Rev. 0 Page 136 of 292

ATTACHMENT 1 EAL Bases

1. DB-OP-02527 Loss of Decay Heat Removal
2. EP-EALCALC-DB-0704 Radiation Monitor Readings for Core Uncovery During Refueling
3. DB-HP-01152 Performance of High Exposure Work
4. NEI 99-01 CS1 EAL BASES DOCUMENT Rev. 0 Page 137 of 292

ATTACHMENT 1 EAL Bases Category: C - Cold Shutdown / Refueling System Malfunction Subcategory: 1 - RCS Level Initiating Condition: Loss of RCS inventory EAL: CA1.1 Alert Loss of RCS inventory as indicated by RCS level 0.4 ft. (LI 10596) Mode Applicability: 5 - Cold Shutdown, 6 - Refueling NEI 99-01 Basis: This IC addresses conditions that are precursors to a loss of the ability to adequately cool irradiated fuel (i.e., a precursor to a challenge to the fuel clad barrier). This condition represents a potential substantial reduction in the level of plant safety. For this EAL #1, a lowering of RCS water level at or below 0.4 ft.(site-specific level) ft. indicates that operator actions have not been successful in restoring and maintaining (reactor vessel/RCS [PWR] or RPV [BWR]) water level. The heat-up rate of the coolant will increase as the available water inventory is reduced. A continuing decrease in water level will lead to core uncovery. Although related, this EAL #1 is concerned with the loss of RCS inventory and not the potential concurrent effects on systems needed for decay heat removal (e.g., loss of a Residual Decay Heat Removal suction point). An increase in RCS RCS temperature caused by a loss of decay heat removal capability is evaluated under IC CA3. For EAL #2, the inability to monitor (reactor vessel/RCS [PWR] or RPV [BWR]) level may be caused by instrumentation and/or power failures, or water level dropping below the range of available instrumentation. If water level cannot be monitored, operators may determine that an inventory loss is occurring by observing changes in sump and/or tank levels. Sump and/or tank level changes must be evaluated against other potential sources of water flow to ensure they are indicative of leakage from the (reactor vessel/RCS [PWR] or RPV [BWR]). The 15-minute duration for the loss of level indication was chosen because it is half of the EAL duration specified in IC CS1 If RCS the (reactor vessel/RCS [PWR] or RPV [BWR]) inventory water level continues to lower, then escalation to Site Area Emergency would be via IC CS1. DBNPS Basis: EAL BASES DOCUMENT Rev. 0 Page 138 of 292

ATTACHMENT 1 EAL Bases RCS level cannot be measured below the 571 feet elevation (0.4 feet on LI 10596) which is centerline of the hot leg inlet. Should RCS level drop below this point it is assumed water level cannot be monitored other than visually. Continued loss of RCS inventory may result in DHR pump cavitation (ref. 1). DBNPS Basis Reference(s):

1. DB-OP-02527 Loss of Decay Heat Removal
2. NEI 99-01 CA1 EAL BASES DOCUMENT Rev. 0 Page 139 of 292

ATTACHMENT 1 EAL Bases Category: C - Cold Shutdown / Refueling System Malfunction Subcategory: 1 - RCS Level Initiating Condition: Loss of RCS inventory EAL: CA1.2 Alert RCS level cannot be monitored for 15 min. (Note 1) AND EITHER

  • UNPLANNED increase in Containment Sumps, Auxiliary Building Sumps, BWST or RCDT due to a loss of RCS inventory
  • Visual observation of UNISOLABLE RCS leakage Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded.

Mode Applicability: 5 - Cold Shutdown, 6 - Refueling NEI 99-01 Basis: This IC addresses conditions that are precursors to a loss of the ability to adequately cool irradiated fuel (i.e., a precursor to a challenge to the fuel clad barrier). This condition represents a potential substantial reduction in the level of plant safety. For EAL #1, a lowering of water level below (site-specific level) indicates that operator actions have not been successful in restoring and maintaining (reactor vessel/RCS [PWR] or RPV [BWR]) water level. The heat-up rate of the coolant will increase as the available water inventory is reduced. A continuing decrease in water level will lead to core uncovery. Although related, EAL #1 is concerned with the loss of RCS inventory and not the potential concurrent effects on systems needed for decay heat removal (e.g., loss of a Residual Heat Removal suction point). An increase in RCS temperature caused by a loss of decay heat removal capability is evaluated under IC CA3. For this EAL #2, the inability to monitor (reactor vessel/RCS [PWR] or RPV [BWR]) level may be caused by instrumentation and/or power failures, or water level dropping below the range of available instrumentation. If water level cannot be monitored, operators may determine that an inventory loss is occurring by observing changes in sump and/or tank levels. Sump and/or tank level changes must be evaluated against other potential sources of water flow to ensure they are indicative of leakage from the (reactor vessel/RCSRCS [PWR] or RPV [BWR]). EAL BASES DOCUMENT Rev. 0 Page 140 of 292

ATTACHMENT 1 EAL Bases The 15-minute duration for the loss of level indication was chosen because it is half of the EAL duration specified in IC CS1. If the (reactor vessel/RCS [PWR] or RPV [BWR]) inventory level continues to lower, then escalation to Site Area Emergency would be via IC CS1. DBNPS Basis: In Cold Shutdown mode, the RCS will normally be intact and standard RCS level monitoring means are available. In the Refuel mode, the RCS is not intact and RCS level may be monitored by different means, including the ability to monitor level visually. RCS level in the Refueling mode is normally monitored using the following instruments:

  • LI 10596
  • LI10577 A and B
  • Clear tubing used for manometer level indication at the RCS cold legs.

RCS level indications (LI 10596, LI 10577A and B and cold leg tubing) provide accurate indication of water level when the RCS is at atmospheric pressure. The reactor vessel flange is at 577 ft. 7 in. (80 in. indicated) (ref. 1). In this EAL, all RCS water level indication would be unavailable for greater than 15-minutes, and the RCS inventory loss must be detected by indirect leakage indications (ref. 1). Sump and tank level increases must be evaluated against other potential sources of leakage. If the make-up rate to the RCS unexplainably rises above the pre-established rate, a loss of RCS inventory may be occurring even if the source of the leakage cannot be immediately identified. Visual observation of leakage from systems connected to the RCS that cannot be isolated, or a sump sample verified by Chemistry, could also be indicative of a loss of RCS inventory. DBNPS Basis Reference(s):

1. DB-OP-06904 Shutdown Operations
2. NEI 99-01 CA1 EAL BASES DOCUMENT Rev. 0 Page 141 of 292

ATTACHMENT 1 EAL Bases Category: C - Cold Shutdown / Refueling System Malfunction Subcategory: 1 - RCS Level Initiating Condition: UNPLANNED loss of RCS inventory for 15 minutes or longer EAL: CU1.1 Unusual Event UNPLANNED loss of reactor coolant results in RCS level less than a required lower limit for 15 min. (Note 1) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Mode Applicability: 5 - Cold Shutdown, 6 - Refueling NEI 99-01 Basis: This IC addresses the inability to restore and maintain water level to a required minimum level (or the lower limit of a level band), or a loss of the ability to monitor (reactor vessel/RCS[PWR] or RPV [BWR]) level concurrent with indications of coolant leakage. Either of these conditions is considered to be a potential degradation of the level of safety of the plant. Refueling RCS draining evolutions that decrease RCS water inventory are carefully planned and controlled. An UNPLANNED event that results in water level decreasing below a procedurally required limit warrants the declaration of an Unusual Event due to the reduced water inventory that is available to keep the core covered. This EAL #1 recognizes that the minimum required RCS (reactor vessel/RCS [PWR] or RPV [BWR]) level can change several times during the course of a refueling outage as different plant configurations and system lineups are implemented. This EAL is met if the minimum level, specified for the current plant conditions, cannot be maintained for 15 minutes or longer. The minimum level is typically specified in the applicable operating procedure but may be specified in another controlling document. The 15-minute threshold duration allows sufficient time for prompt operator actions to restore and maintain the expected water level. This criterion excludes transient conditions causing a brief lowering of water level. EAL #2 addresses a condition where all means to determine (reactor vessel/RCS [PWR] or RPV [BWR]) level have been lost. In this condition, operators may determine that an inventory loss is occurring by observing changes in sump and/or tank levels. Sump and/or tank level changes must be evaluated against other potential sources of water flow to ensure they are indicative of leakage from the (reactor vessel/RCS [PWR] or RPV [BWR]). EAL BASES DOCUMENT Rev. 0 Page 142 of 292

ATTACHMENT 1 EAL Bases Continued loss of RCS inventory may result in escalation to the Alert emergency classification level via either IC CA1 or CA3. EAL BASES DOCUMENT Rev. 0 Page 143 of 292

ATTACHMENT 1 EAL Bases DBNPS Basis: With the plant in Cold Shutdown, RCS water level is normally maintained above a lower level band limit (ref. 1, 2), typically above the pressurizer low level setpoint. However, if RCS level is being controlled below the pressurizer low level setpoint, or if level is being maintained in a designated band in the reactor vessel it is the inability to maintain level above the low end of the designated control band due to a loss of inventory resulting from a leak in the RCS that is the concern. With the plant in Refueling mode, RCS water level is normally maintained at or above the reactor vessel flange, (Technical Specification LCO 3.9.6 requires at least 23 ft. of water above the top of the reactor vessel flange in the refueling canal when irradiated fuel is moved in containment). The reactor vessel flange is at 577 ft. 7 in. (80 in. indicated) (ref. 3, 4). In Cold Shutdown mode, the RCS will normally be intact and standard RCS level monitoring means are available. RCS level in the Refueling mode is normally monitored using the following instruments:

  • LI 10596
  • LI 10577 A and B
  • Clear tubing used for manometer level indication at the RCS cold legs.

RCS level indications (LI 10596, LI 10577A and B and cold leg tubing) provide accurate indication of water level when the RCS is at atmospheric pressure (ref. 3). DBNPS Basis Reference(s):

1. DB-OP-02513 Pressurizer System Abnormal Operation
2. DB-OP-02004 4-2-E PZR LVL LO
3. DB-OP-06904 Shutdown Operations
4. DBNPS Technical Specifications Section 3.9.6 Refueling Canal Water Level
5. DB-OP-02527 Loss of Decay Heat Removal
6. NEI 99-01 CU1 EAL BASES DOCUMENT Rev. 0 Page 144 of 292

ATTACHMENT 1 EAL Bases Category: C - Cold Shutdown / Refueling System Malfunction Subcategory: 1 - RCS Level Initiating Condition: UNPLANNED loss of RCS inventory for 15 minutes or longer EAL: CU1.2 Unusual Event RCS level cannot be monitored AND EITHER

  • UNPLANNED increase in Containment Sumps, Auxiliary Building Sumps, BWST or RCDT due to a loss of RCS inventory
  • Visual observation of UNISOLABLE RCS leakage Mode Applicability:

5 - Cold Shutdown, 6 - Refueling NEI 99-01 Basis: This IC addresses the inability to restore and maintain water level to a required minimum level (or the lower limit of a level band), or a loss of the ability to monitor (reactor vessel/RCS [PWR] or RPV [BWR]) level concurrent with indications of coolant leakage. Either of these conditions is considered to be a potential degradation of the level of safety of the plant. Refueling RCS draining evolutions that decrease RCS water inventory are carefully planned and controlled. An UNPLANNED event that results in water level decreasing below a procedurally required limit warrants the declaration of an Unusual Event due to the reduced water inventory that is available to keep the core covered. EAL #1 recognizes that the minimum required (reactor vessel/RCS [PWR] or RPV [BWR]) level can change several times during the course of a refueling outage as different plant configurations and system lineups are implemented. This EAL is met if the minimum level, specified for the current plant conditions, cannot be maintained for 15 minutes or longer. The minimum level is typically specified in the applicable operating procedure but may be specified in another controlling document. The 15-minute threshold duration allows sufficient time for prompt operator actions to restore and maintain the expected water level. This criterion excludes transient conditions causing a brief lowering of water level. EAL BASES DOCUMENT Rev. 0 Page 145 of 292

ATTACHMENT 1 EAL Bases This EAL #2 addresses a condition where all means to determine (reactor vessel/RCS [PWR] or RPV [BWR]) level have been lost. In this condition, operators may determine that an inventory loss is occurring by observing changes in sump and/or tank levels. Sump and/or tank level changes must be evaluated against other potential sources of water flow to ensure they are indicative of leakage from the (reactor vessel/RRCS [PWR] or RPV [BWR]). Continued loss of RCS inventory may result in escalation to the Alert emergency classification level via either IC CA1 or CA3. EAL BASES DOCUMENT Rev. 0 Page 146 of 292

ATTACHMENT 1 EAL Bases DBNPS Basis: In Cold Shutdown mode, the RCS will normally be intact and standard RCS level monitoring means are available. RCS level in the Refueling mode is normally monitored using the following instruments:

  • LI 10596
  • LI10577 A and B
  • Clear tubing used for manometer level indication at the RCS cold legs.

RCS level indications (LI 10596, LI 10577A and B and cold leg tubing) provide accurate indication of water level when the RCS is at atmospheric pressure. The reactor vessel flange is at 577 ft. 7 in. (80 in. indicated) (ref. 1). In this EAL, all water level indication is unavailable and the RCS inventory loss must be detected by indirect leakage indications (ref. 1). Sump and tank level increases must be evaluated against other potential sources of leakage such as cooling water sources inside the containment to ensure they are indicative of RCS leakage. If the make-up rate to the RCS unexplainably rises above the pre-established rate, a loss of RCS inventory may be occurring even if the source of the leakage cannot be immediately identified. Visual observation of leakage from systems connected to the RCS that cannot be isolated, or a sump sample verified by Chemistry, could also be indicative of a loss of RCS inventory. DBNPS Basis Reference(s):

1. DB-OP-06904 Shutdown Operations
2. NEI 99-01 CU1 EAL BASES DOCUMENT Rev. 0 Page 147 of 292

ATTACHMENT 1 EAL Bases Category: C - Cold Shutdown / Refueling System Malfunction Subcategory: 2 - Loss of Essential AC Power Initiating Condition: Loss of ALL offsite and ALL onsite AC power to essential buses for 15 minutes or longer EAL: CA2.1 Alert Loss of ALL offsite and ALL onsite AC power capability, Table C-2, to essential 4160V buses C1 and D1 for 15 min. (Note 1) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Table C-2 Offsite/Onsite AC Power Sources Offsite:

  • X01
  • X02
  • X11 (back-fed via Main Transformer)

Onsite:

  • EDG1
  • EDG2
  • SBODG Mode Applicability:

5 - Cold Shutdown, 6 - Refueling, D - Defueled NEI 99-01 Basis: This IC addresses a total loss of AC power that compromises the performance of ALL SAFETY SYSTEMS requiring electric power including those necessary for emergency core cooling, containment heat removal/pressure control, spent fuel heat removal and the ultimate heat sink. When in the Cold Shutdown, Refueling, or Defueled mode, this condition is not classified as a Site Area Emergency because of the increased time available to restore an essentialemergency bus to service. Additional time is available due to the reduced core decay heat load, and the lower temperatures and pressures in various plant systems. Thus, when in EAL BASES DOCUMENT Rev. 0 Page 148 of 292

ATTACHMENT 1 EAL Bases these modes, this condition represents an actual or potential substantial degradation of the level of safety of the plant. Fifteen minutes was selected as a threshold to exclude transient or momentary power losses. Escalation of the emergency classification level would be via IC CS1 or AS1RS1. DBNPS Basis: The 4160 VAC System provides the power requirements for operation and safe shutdown of the plant. The essential switchgear are buses C1 and D1 (ref. 1). The essential buses during plant operation are normally powered from the 13.8KV offsite power system through their respective 13.8KV/4160V bus tie transformers, via the Unit Auxiliary Transformer (X11). In cold operating modes, the essential buses may be back-fed via the X11 and Main Transformer provided the main generator lead disconnect links are removed (ref. 1, 2). Credit for the X11 back-feed can only be taken if already aligned, as it takes greater than 15 minutes to align. A standby source of offsite power to each 4160V essential bus is provided from the 13.8KV offsite power system via two separate and independent 13.8KV/4160V Startup Transformers (X01 & X02). Normally each startup transformer serves as a reserve power source for only one essential bus. However, a single startup transformer can be aligned to power both essential buses (ref. 1, 2). Each essential bus has a diesel generator (EDG1 & EDG2) to supply an onsite emergency source of power to safe shutdown loads in the event of a loss of the normal power source or loss of off-site power (ref. 1). An Alternate AC power source, the SBO Diesel Generator, is located onsite. This onsite AC power source can be started from the Control Room and be loaded within 10 minutes of a SBO (ref. 1). This cold condition EAL is equivalent to the hot condition loss of ALL offsite AC power EAL SS1.1. DBNPS Basis Reference(s):

1. UFSAR Section 8.0 Electric Power
2. DB-OP-02521 Loss of AC Bus Power Sources
3. NEI 99-01 CA2 EAL BASES DOCUMENT Rev. 0 Page 149 of 292

ATTACHMENT 1 EAL Bases Category: C - Cold Shutdown / Refueling System Malfunction Subcategory: 2 - Loss of Essential AC Power Initiating Condition: Loss of ALL but one AC power source to essential buses for 15 minutes or longer EAL: CU2.1 Unusual Event AC power capability, Table C-2, to essential 4160V buses C1 and D1 reduced to a single power source for 15 min. (Note 1) AND ANY additional single power source failure will result in loss of ALL AC power to SAFETY SYSTEMS Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Table C-2 Offsite/Onsite AC Power Sources Offsite:

  • X01
  • X02
  • X11 (back-fed via Main Transformer)

Onsite:

  • EDG1
  • EDG2
  • SBODG Mode Applicability:

5 - Cold Shutdown, 6 - Refueling, D - Defueled EAL BASES DOCUMENT Rev. 0 Page 150 of 292

ATTACHMENT 1 EAL Bases NEI 99-01 Basis: This IC describes a significant degradation of offsite and onsite AC power sources such that any additional single failure would result in a loss of ALL AC power to SAFETY SYSTEMS. In this condition, the sole AC power source may be powering one, or more than one, train of safety-related equipment. When in the Cold Shutdown, Refueling, or Defueled mode, this condition is not classified as an Alert because of the increased time available to restore another power source to service. Additional time is available due to the reduced core decay heat load, and the lower temperatures and pressures in various plant systems. Thus, when in these modes, this condition is considered to be a potential degradation of the level of safety of the plant. An AC power source is a source recognized in AOPs and EOPs, and capable of supplying required power to an essential bus. Some examples of this condition are presented below.

  • A loss of ALL offsite power with a concurrent failure of ALL but one essentialemergency power source (e.g., an onsite diesel generator).
  • A loss of all offsite power and loss of all emergency power sources (e.g., onsite diesel generators) with a single train of emergency buses being back-fed from the unit main generator.
  • A loss of essentialemergency power sources (e.g., onsite diesel generators) with a single train of emergency essential buses being back-fed from an offsite power source Fifteen minutes was selected as a threshold to exclude transient or momentary losses of power.

The subsequent loss of the remaining single power source would escalate the event to an Alert in accordance with IC CA2. DBNPS Basis: The 4160 VAC System provides the power requirements for operation and safe shutdown of the plant. The essential switchgear are buses C1 and D1 (ref. 1). The essential buses during plant operation are normally powered from the 13.8KV offsite power system through their respective 13.8KV/4160V bus tie transformers, via the Unit Auxiliary Transformer (X11). In cold operating modes, the essential buses may be back-fed via the X11 and Main Transformer provided the main generator lead disconnect links are removed (ref. 1, 2). Credit for the X11 back-feed can only be taken if already aligned, as it takes greater than 15 minutes to align. A standby source of offsite power to each 4160V essential bus is provided from the 13.8KV offsite power system via two separate and independent 13.8KV/4160V Startup Transformers (X01 & X02). Normally each startup transformer serves as a reserve power source for only one essential bus. However, a single startup transformer can be aligned to power both essential buses (ref. 1, 2). EAL BASES DOCUMENT Rev. 0 Page 151 of 292

ATTACHMENT 1 EAL Bases Each essential bus has a diesel generator (EDG1 & EDG2) to supply an onsite emergency source of power to safe shutdown loads in the event of a loss of the normal power source or loss of off-site power (ref. 1). An Alternate AC power source, the SBO Diesel Generator, is located onsite. This onsite AC power source can be started from the Control Room and be loaded within 10 minutes of a SBO (ref. 1). This cold condition EAL is equivalent to the hot condition EAL SA1.1. DBNPS Basis Reference(s):

1. UFSAR Section 8.0 Electric Power
2. DB-OP-02521 Loss of AC Bus Power Sources
3. NEI 99-01 CU2 EAL BASES DOCUMENT Rev. 0 Page 152 of 292

ATTACHMENT 1 EAL Bases Category: C - Cold Shutdown / Refueling System Malfunction Subcategory: 3 - RCS Temperature Initiating Condition: Inability to maintain plant in cold shutdown EAL: CA3.1 Alert UNPLANNED increase in RCS temperature to > 200°F for > Table C-3 duration (Note 1, 10) OR UNPLANNED RCS pressure increase > 10 psig due to a loss of RCS cooling (This EAL does not apply during water-solid plant conditions). Note 1: The Emergency Director should declare the event promptly upon determining that the applicable time has been exceeded, or will likely be exceeded. Note: 10 In the absence of reliable RCS temperature indication caused by the loss of decay heat removal capability, classification should be based on the RCS pressure increase criteria when the RCS is intact in Mode 5 or based on time to boil data when in Mode 6 or the RCS is not intact in Mode 5. Table C-3: RCS Heat-up Duration Thresholds Containment Closure RCS Status Heat-up Duration Status Intact (but not reduced N/A 60 min.* inventory) Not intact established 20 min.* OR not established 0 min. At reduced inventory

  • If an RCS heat removal system is in operation within this time frame and RCS temperature is being reduced, the EAL is not applicable.

Mode Applicability: 5 - Cold Shutdown, 6 - Refueling NEI 99-01 Basis: This IC addresses conditions involving a loss of decay heat removal capability or an addition of heat to the RCS in excess of that which can currently be removed. Either condition represents an actual or potential substantial degradation of the level of safety of the plant. A momentary UNPLANNED excursion above the Technical Specification cold shutdown temperature limit when the heat removal function is available does not warrant a classification. EAL BASES DOCUMENT Rev. 0 Page 153 of 292

ATTACHMENT 1 EAL Bases The RCS Heat-up Duration Thresholds table addresses an increase in RCS temperature when CONTAINMENT CLOSURE is established but the RCS is not intact, or RCS inventory is reduced (e.g., mid-loop operation in PWRs). The 20-minute criterion was included to allow time for operator action to address the temperature increase. The RCS Heat-up Duration Thresholds table also addresses an increase in RCS temperature with the RCS INTACT. The status of CONTAINMENT CLOSURE is not crucial in this condition since the intact RCS is providing a high pressure barrier to a fission product release. The 60-minute time frame should allow sufficient time to address the temperature increase without a substantial degradation in plant safety. Finally, in the case where there is an increase in RCS temperature, the RCS is not intact or is at reduced inventory [PWR], and CONTAINMENT CLOSURE is not established, no heat-up duration is allowed (i.e., 0 minutes). This is because 1) the evaporated reactor coolant may be released directly into the containment atmosphere and subsequently to the environment, and

2) there is reduced reactor coolant inventory above the top of irradiated fuel.

EAL #2The RCS pressure increase threshold provides a pressure-based indication of RCS heat-up in the absence of RCS temperature monitoring capability. Escalation of the emergency classification level would be via IC CS1 or AS1RS1. DBNPS Basis: In the absence of reliable RCS temperature indication caused by the loss of decay heat removal capability, classification should be based on the RCS pressure increase criteria when the RCS is intact in Mode 5 or based on time to boil data when in Mode 6 or the RCS is not intact in Mode 5. Several instruments are capable of providing indication of RCS temperature with respect to the Technical Specification cold shutdown temperature limit (200°F, ref. 1) including:

  • Selected Incore thermocouples
  • TIRC4B2 Reactor Coolant T-Cold Wide Range (Loop 1)
  • TIRC4A2 Reactor Coolant T-Cold Wide Range (Loop 2)
  • TIRC3B5 or TIRCB6 Reactor Coolant T-Hot (Loop 1)
  • TIRC3A5 or TIRCA6 Reactor Coolant T-Hot (Loop 2)
  • DHR Display on SPDS (ref. 2)

A 10 psig RCS pressure increase can be read on various instruments such as (ref. 2):

  • PI 6365B, Loop 1 Pressure EAL BASES DOCUMENT Rev. 0 Page 154 of 292

ATTACHMENT 1 EAL Bases

  • PI 6365A, Loop 2 Pressure
  • PRS RC2A1, Loop 2 Wide Range Pressure
  • PI RC2A6, Low Range Pressure The RCS is considered in reduced inventory if (ref. 3):
  • The Reactor Coolant System is not full (loops not filled and the RCS is incapable of natural circulation), OR
  • Both steam generators are not available as a heat sink, OR
  • The refueling canal level is less than a stable level specified in the Shutdown Defense in Depth Review, typically 23 feet, with the head removed.

DBNPS Basis Reference(s):

1. DBNPS Technical Specifications Table 1.1-1
2. DB-OP-02527 Loss of Decay Heat Removal
3. NG-DB-00117 Shutdown Defense In Depth Assessment
4. NEI 99-01 CA3 EAL BASES DOCUMENT Rev. 0 Page 155 of 292

ATTACHMENT 1 EAL Bases Category: C - Cold Shutdown / Refueling System Malfunction Subcategory: 3 - RCS Temperature Initiating Condition: UNPLANNED increase in RCS temperature EAL: CU3.1 Unusual Event UNPLANNED increase in RCS temperature to > 200°F due to loss of decay heat removal capability Mode Applicability: 5 - Cold Shutdown, 6 - Refueling NEI 99-01 Basis: This IC addresses an UNPLANNED increase in RCS temperature above the Technical Specification cold shutdown temperature limit , or the inability to determine RCS temperature and level,and represents a potential degradation of the level of safety of the plant. If the RCS is not intact and CONTAINMENT CLOSURE is not established during this event, the Emergency Director should also refer to IC CA3. A momentary UNPLANNED excursion above the Technical Specification cold shutdown temperature limit when the heat removal function is available does not warrant a classification. EAL #1This EAL involves a loss of decay heat removal capability, or an addition of heat to the RCS RCS in excess of that which can currently be removed, such that reactor coolant temperature cannot be maintained below the cold shutdown temperature limit specified in Technical Specifications. During this condition, there is no immediate threat of fuel damage because the core decay heat load has been reduced since the cessation of power operation. During an outage, the level in the reactor vessel will normally be maintained at or above the reactor vessel flange. Refueling evolutions that lower water level below the reactor vessel flange are carefully planned and controlled. A loss of forced decay heat removal at reduced inventory may result in a rapid increase in reactor coolant temperature depending on the time after shutdown. EAL #2 reflects a condition where there has been a significant loss of instrumentation capability necessary to monitor RCS conditions and operators would be unable to monitor key parameters necessary to assure core decay heat removal. During this condition, there is no immediate threat of fuel damage because the core decay heat load has been reduced since the cessation of power operation. Fifteen minutes was selected as a threshold to exclude transient or momentary losses of indication. EAL BASES DOCUMENT Rev. 0 Page 156 of 292

ATTACHMENT 1 EAL Bases Escalation to Alert would be via IC CA1 based on an inventory loss or IC CA3 based on exceeding plant configuration-specific time criteria. DBNPS Basis: Several instruments are capable of providing indication of RCS temperature with respect to the Technical Specification cold shutdown temperature limit (200°F, ref. 1) including:

  • Selected Incore thermocouples
  • TIRC4B2 Reactor Coolant T-Cold Wide Range (Loop 1)
  • TIRC4A2 Reactor Coolant T-Cold Wide Range (Loop 2)
  • TIRC3B5 or TIRCB6 Reactor Coolant T-Hot (Loop 1)
  • TIRC3A5 or TIRCA6 Reactor Coolant T-Hot (Loop 2)
  • DHR Display on SPDS (ref. 2)

In the absence of reliable RCS temperature indication caused by a loss of decay heat removal capability, classification should be based on EAL CU3.2 should RCS level indication be subsequently lost. DBNPS Basis Reference(s):

1. DBNPS Technical Specifications Table 1.1-1 Modes
2. DB-OP-02527 Loss of Decay Heat Removal
3. NEI 99-01 CU3 EAL BASES DOCUMENT Rev. 0 Page 157 of 292

ATTACHMENT 1 EAL Bases Category: C - Cold Shutdown / Refueling System Malfunction Subcategory: 3 - RCS Temperature Initiating Condition: UNPLANNED increase in RCS temperature EAL: CU3.2 Unusual Event Loss of ALL RCS temperature and RCS level indication for 15 min. (Note 1) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Mode Applicability: 5 - Cold Shutdown, 6- Refueling NEI 99-01 Basis: This IC EAL addresses an UNPLANNED increase in RCS temperature above the Technical Specification cold shutdown temperature limit, or the inability to determine RCS temperature and level, and represents a potential degradation of the level of safety of the plant. If the RCS is not intact and CONTAINMENT CLOSURE is not established during this event, the Emergency Director should also refer to IC CA3. A momentary UNPLANNED excursion above the Technical Specification cold shutdown temperature limit when the heat removal function is available does not warrant a classification. EAL #1 involves a loss of decay heat removal capability, or an addition of heat to the RCS in excess of that which can currently be removed, such that reactor coolant temperature cannot be maintained below the cold shutdown temperature limit specified in Technical Specifications. During this condition, there is no immediate threat of fuel damage because the core decay heat load has been reduced since the cessation of power operation. During an outage, the level in the reactor vessel will normally be maintained above the reactor vessel flange. Refueling evolutions that lower water level below the reactor vessel flange are carefully planned and controlled. A loss of forced decay heat removal at reduced inventory may result in a rapid increase in reactor coolant temperature depending on the time after shutdown. EAL #2This EAL reflects a condition where there has been a significant loss of instrumentation capability necessary to monitor RCS conditions and operators would be unable to monitor key parameters necessary to assure core decay heat removal. During this condition, there is no immediate threat of fuel damage because the core decay heat load has been reduced since the cessation of power operation. EAL BASES DOCUMENT Rev. 0 Page 158 of 292

ATTACHMENT 1 EAL Bases Fifteen minutes was selected as a threshold to exclude transient or momentary losses of indication. Escalation to Alert would be via IC CA1 based on an inventory loss or IC CA3 based on exceeding plant configuration-specific time criteria. DBNPS Basis: Several instruments are capable of providing indication of RCS temperature with respect to the Technical Specification cold shutdown temperature limit (200°F, ref. 1) including:

  • Selected Incore thermocouples
  • TIRC4B2 Reactor Coolant T-Cold Wide Range (Loop 1)
  • TIRC4A2 Reactor Coolant T-Cold Wide Range (Loop 2)
  • TIRC3B5 or TIRCB6 Reactor Coolant T-Hot (Loop 1)
  • TIRC3A5 or TIRCA6 Reactor Coolant T-Hot (Loop 2)
  • DHR Display on SPDS (ref. 2)

In Cold Shutdown mode, the RCS will normally be intact and standard RCS level monitoring means are available. In the Refueling mode, the RCS is not intact and RCS level may be monitored by different means, including the ability to monitor level visually. RCS level in the Refueling mode is normally monitored using the following instruments:

  • LI 10596
  • LI10577 A and B
  • Clear tubing used for manometer level indication at the RCS cold legs.

RCS level indications (LI 10596, LI 10577A and B and cold leg tubing) provide accurate indication of water level when the RCS is at atmospheric pressure. However, there is no redundant means of RCS level indication when Mode 6 is entered (ref. 2). DBNPS Basis Reference(s):

1. DBNPS Technical Specifications Table 1.1-1
2. DB-OP-02527 Loss of Decay Heat Removal
3. NEI 99-01 CU3 EAL BASES DOCUMENT Rev. 0 Page 159 of 292

ATTACHMENT 1 EAL Bases Category: C - Cold Shutdown / Refueling System Malfunction Subcategory: 4 - Loss of Essential DC Power Initiating Condition: Loss of vital essential DC power for 15 minutes or longer EAL: CU4.1 Unusual Event < 105 VDC voltage indications on Technical Specification required essential 125 VDC distribution panels for 15 min. (Note 1) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Mode Applicability: 5 - Cold Shutdown, 6 - Refueling NEI 99-01 Basis This IC addresses a loss of essential vital DC power, which compromises the ability to monitor and control operable SAFETY SYSTEMS when the plant is in the Cold Shutdown or Refueling mode. In these modes, the core decay heat load has been significantly reduced, and coolant system temperatures and pressures are lower; these conditions increase the time available to restore an essential vital DC bus to service. Thus, this condition is considered to be a potential degradation of the level of safety of the plant. As used in this EAL, required means the vital essential DC buses necessary to support operation of the in-service, or operable, train or trains of SAFETY SYSTEM equipment. For example, if Train A is out-of-service (inoperable) for scheduled outage maintenance work and Train B is in-service (operable), then a loss of essential Vital DC power affecting Train B would require the declaration of an Unusual Event. A loss of essential Vital DC power to Train A would not warrant an emergency classification. Fifteen minutes was selected as a threshold to exclude transient or momentary power losses. Depending upon the event, escalation of the emergency classification level would be via IC CA1 or CA3, or an IC in Recognition Category AR. DBNPS Basis: The DC electrical distribution subsystem consists of two trains, designated Train 1 and Train

2. Each train consists of a 250/125 VDC motor control center (MCC), and each 250/125 VDC MCC consists of two 125 VDC buses (one positive and one negative) that can be powered from a polarity specific battery or battery charger. The two DC buses then supply a specific Essential DC Distribution Panel (D1P and D1N for DCMCC 1, and D2P and D2N for DCMCC2). The four Essential DC Distribution Panels independently supply DC electrical EAL BASES DOCUMENT Rev. 0 Page 160 of 292

ATTACHMENT 1 EAL Bases power to the four inverters, which in turn power the 120 VAC essential buses (ref. 1, 2, 3, 4, 5, 6). The Class 1E DC loads have an operating voltage range of 105 to 135 volts. The minimum battery discharge voltage (requiring opening the degraded battery output breaker) is 105 VDC (ref. 1, 6). This EAL is the cold condition equivalent of the hot condition loss of DC power EAL SS2.1. DBNPS Basis Reference(s):

1. DBNPS UFSAR Section 8.0 Electrical Power
2. DB-OP-02537 Loss of D1P and DAP
3. DB-OP-02538 Loss of D2P and DBP
4. DB-OP-02539 Loss of D1N and DAN
5. DB-OP-02540 Loss of D2N and DBN
6. System Description for 125/250 VDC and 120 V Instrumentation AC System
7. NEI 99-01 CU4 EAL BASES DOCUMENT Rev. 0 Page 161 of 292

ATTACHMENT 1 EAL Bases Category: C - Cold Shutdown / Refueling System Malfunction Subcategory: 5 - Loss of Communications Initiating Condition: Loss of ALL onsite or offsite communications capabilities EAL: CU5.1 Unusual Event Loss of ALL Table C-4 onsite communication methods Table C-4 Communication Methods System Onsite ORO NRC Public Address (Gaitronics) X Onsite Radios X Plant Telephones X X X Commercial Telephones X X X 4-Way Ringdown Circuit X Satellite Phones X X Cellular Phones X X NRC Emergency Telephone System (ETS) X Mode Applicability: 5 - Cold Shutdown, 6 - Refueling, D - Defueled NEI 99-01 Basis: This IC addresses a significant loss of on-site or offsite communications capabilities. While not a direct challenge to plant or personnel safety, this event warrants prompt notifications to OROs and the NRC. This IC should be assessed only when extraordinary means are being utilized to make communications possible (e.g., use of non-plant, privately owned equipment, relaying of on-site information via individuals or multiple radio transmission points, individuals being sent to offsite locations, etc.). EAL BASES DOCUMENT Rev. 0 Page 162 of 292

ATTACHMENT 1 EAL Bases EAL #1This EAL addresses a total loss of the communications methods used in support of routine plant operations. DBNPS Basis: Onsite/Offsite Response Organization (ORO)/NRC communications include one or more of the systems listed in Table C-4 (ref. 1, 2). Public Address (Gaitronics) System The DBNPS public address system provides paging and party line communications between stations located throughout the plant. Inside and outside type wall and desk-mounted stations are used to communicate between roaming personnel and fixed work locations. Plant-wide instructions are issued using the paging feature. On-site Radio System Radio systems can be used for communication among operators, off-site monitoring teams, the control room, security, TSC and EOF. Plant Telephone System The DBNPS plant telephone system provides communication capability between telephone stations located within the plant by dialing the four-digit telephone station code as well as external or offsite calling capability. Commercial Telephones Commercial telephone lines, which supply public telephone communications, are employed by DBNPS. The local service provider provides primary and secondary power for their lines at the Central Office. 4-Way Ringdown Circuit Dedicated ring down line that includes the State and County EOCs, the Ohio Highway Patrol Office, the Lucas County and Ottawa County Sheriff's dispatcher offices, the Emergency Operations Facility, and the Control Room. Satellite Phones Portable satellite telephones are available which enable communication when all other phone systems are inoperable, e.g. following a major external event. Internal batteries, external DC sources as well as external AC sources can power these portable systems. EAL BASES DOCUMENT Rev. 0 Page 163 of 292

ATTACHMENT 1 EAL Bases Cellular Phones Cellular phones may be used during emergencies if other communications means are not readily available or are inoperable. These phones are not expected to be used in the Control Room or Power Block due to interference with plant equipment and loss of signal to the phone. NRC Emergency Telephone System The NRC uses a DBNPS dedicated telephone line, which allows direct telephone communications from the plant to NRC regional and national offices. The DBNPS communications line provides a link independent of the local public telephone network. Telephones connected to this network are located in the DBNPS Control Room, Technical Support Center, and Emergency Operations Facility and can be used to establish NRC Emergency Notification System (ENS) and Health Physics Network (HPN) capability. This EAL is the cold condition equivalent of the hot condition EAL SU7.1.EAL #2 addresses a total loss of the communications methods used to notify all OROs of an emergency declaration. The OROs referred to here are (see Developer Notes). EAL #3 addresses a total loss of the communications methods used to notify the NRC of an emergency declaration. DBNPS Basis Reference(s):

1. DBNPS UFSAR Section 9.5.2 Communications Systems
2. DBNPS Emergency Plan 7.6 Communications Systems
3. NEI 99-01 CU5 EAL BASES DOCUMENT Rev. 0 Page 164 of 292

ATTACHMENT 1 EAL Bases Category: C - Cold Shutdown / Refueling System Malfunction Subcategory: 5 - Loss of Communications Initiating Condition: Loss of ALL onsite or offsite communications capabilities EAL: CU5.2 Unusual Event Loss of ALL Table C-4 ORO communication methods Table C-4 Communication Methods System Onsite ORO NRC Public Address (Gaitronics) X Onsite Radios X Plant Telephones X X X Commercial Telephones X X X 4-Way Ringdown Circuit X Satellite Phones X X Cellular Phones X X NRC Emergency Telephone System (ETS) X Mode Applicability: 5 - Cold Shutdown, 6 - Refueling, D - Defueled NEI 99-01 Basis: This IC addresses a significant loss of on-site or offsite communications capabilities. While not a direct challenge to plant or personnel safety, this event warrants prompt notifications to OROs and the NRC. This IC should be assessed only when extraordinary means are being utilized to make communications possible (e.g., use of non-plant, privately owned equipment, relaying of on-site information via individuals or multiple radio transmission points, individuals being sent to offsite locations, etc.). EAL BASES DOCUMENT Rev. 0 Page 165 of 292

ATTACHMENT 1 EAL Bases EAL #1 addresses a total loss of the communications methods used in support of routine plant operations. EAL #2This EAL addresses a total loss of the communications methods used to notify all OROs of an emergency declaration. The OROs referred to here are (see Developer Notes) the State, Lucas and Ottawa County EOCs. DBNPS Basis: Onsite/Offsite Response Organization (ORO)/NRC communications include one or more of the systems listed in Table C-4 (ref. 1, 2). Public Address (Gaitronics) System The DBNPS public address system provides paging and party line communications between stations located throughout the plant. Inside and outside type wall and desk-mounted stations are used to communicate between roaming personnel and fixed work locations. Plant-wide instructions are issued using the paging feature. On-site Radio System Radio systems can be used for communication among operators, off-site monitoring teams, the control room, security, TSC and EOF. Plant Telephone System The DBNPS plant telephone system provides communication capability between telephone stations located within the plant by dialing the four-digit telephone station code as well as external or offsite calling capability. Commercial Telephones Commercial telephone lines, which supply public telephone communications, are employed by DBNPS. The local service provider provides primary and secondary power for their lines at the Central Office. 4-Way Ringdown Circuit Dedicated ring down line that includes the State and County EOCs, the Ohio Highway Patrol Office, the Lucas County and Ottawa County Sheriff's dispatcher offices, the Emergency Operations Facility, and the Control Room. Satellite Phones Portable satellite telephones are available which enable communication when all other phone systems are inoperable, e.g. following a major external event. Internal batteries, external DC sources as well as external AC sources can power these portable systems. EAL BASES DOCUMENT Rev. 0 Page 166 of 292

ATTACHMENT 1 EAL Bases Cellular Phones Cellular phones may be used during emergencies if other communications means are not readily available or are inoperable. These phones are not expected to be used in the Control Room or Power Block due to interference with plant equipment and loss of signal to the phone. NRC Emergency Telephone System The NRC uses a DBNPS dedicated telephone line, which allows direct telephone communications from the plant to NRC regional and national offices. The DBNPS communications line provides a link independent of the local public telephone network. Telephones connected to this network are located in the DBNPS Control Room, Technical Support Center, and Emergency Operations Facility and can be used to establish NRC Emergency Notification System (ENS) and Health Physics Network (HPN) capability. This EAL is the cold condition equivalent of the hot condition EAL SU7.2.EAL #3 addresses a total loss of the communications methods used to notify the NRC of an emergency declaration. DBNPS Basis Reference(s):

1. DBNPS UFSAR Section 9.5.2 Communications Systems
2. DBNPS Emergency Plan 7.6 Communications Systems
3. NEI 99-01 CU5 EAL BASES DOCUMENT Rev. 0 Page 167 of 292

ATTACHMENT 1 EAL Bases Category: C - Cold Shutdown / Refueling System Malfunction Subcategory: 5 - Loss of Communications Initiating Condition: Loss of ALL onsite or offsite communications capabilities EAL: CU5.3 Unusual Event Loss of ALL Table C-4 NRC communication methods Table C-4 Communication Methods System Onsite ORO NRC Public Address (Gaitronics) X Onsite Radios X Plant Telephones X X X Commercial Telephones X X X 4-Way Ringdown Circuit X Satellite Phones X X Cellular Phones X X NRC Emergency Telephone System (ETS) X Mode Applicability: 5 - Cold Shutdown, 6 - Refueling, D - Defueled NEI 99-01 Basis: This IC addresses a significant loss of on-site or offsite communications capabilities. While not a direct challenge to plant or personnel safety, this event warrants prompt notifications to OROs and the NRC. This IC should be assessed only when extraordinary means are being utilized to make communications possible (e.g., use of non-plant, privately owned equipment, relaying of on-site information via individuals or multiple radio transmission points, individuals being sent to offsite locations, etc.). EAL BASES DOCUMENT Rev. 0 Page 168 of 292

ATTACHMENT 1 EAL Bases EAL #1 addresses a total loss of the communications methods used in support of routine plant operations. EAL #2 addresses a total loss of the communications methods used to notify all OROs of an emergency declaration. The OROs referred to here are (see Developer Notes). EAL #3This EAL addresses a total loss of the communications methods used to notify the NRC of an emergency declaration. DBNPS Basis: Onsite/Offsite Response Organization (ORO)/NRC communications include one or more of the systems listed in Table C-4 (ref. 1, 2). Public Address (Gaitronics) System The DBNPS public address system provides paging and party line communications between stations located throughout the plant. Inside and outside type wall and desk-mounted stations are used to communicate between roaming personnel and fixed work locations. Plant-wide instructions are issued using the paging feature. On-site Radio System Radio systems can be used for communication among operators, off-site monitoring teams, the control room, security, TSC and EOF. Plant Telephone System The DBNPS plant telephone system provides communication capability between telephone stations located within the plant by dialing the four-digit telephone station code as well as external or offsite calling capability. Commercial Telephones Commercial telephone lines, which supply public telephone communications, are employed by DBNPS. The local service provider provides primary and secondary power for their lines at the Central Office. 4-Way Ringdown Circuit Dedicated ring down line that includes the State and County EOCs, the Ohio Highway Patrol Office, the Lucas County and Ottawa County Sheriff's dispatcher offices, the Emergency Operations Facility, and the Control Room. Satellite Phones Portable satellite telephones are available which enable communication when all other phone systems are inoperable, e.g. following a major external event. Internal batteries, external DC sources as well as external AC sources can power these portable systems. EAL BASES DOCUMENT Rev. 0 Page 169 of 292

ATTACHMENT 1 EAL Bases Cellular Phones Cellular phones may be used during emergencies if other communications means are not readily available or are inoperable. These phones are not expected to be used in the Control Room or Power Block due to interference with plant equipment and loss of signal to the phone. NRC Emergency Telephone System The NRC uses a DBNPS dedicated telephone line, which allows direct telephone communications from the plant to NRC regional and national offices. The DBNPS communications line provides a link independent of the local public telephone network. Telephones connected to this network are located in the DBNPS Control Room, Technical Support Center, and Emergency Operations Facility and can be used to establish NRC Emergency Notification System (ENS) and Health Physics Network (HPN) capability. This EAL is the cold condition equivalent of the hot condition EAL SU7.3. DBNPS Basis Reference(s):

1. DBNPS UFSAR Section 9.5.2 Communications Systems
2. DBNPS Emergency Plan 7.6 Communications Systems
3. NEI 99-01 CU5 EAL BASES DOCUMENT Rev. 0 Page 170 of 292

ATTACHMENT 1 EAL Bases Category: C - Cold Shutdown / Refueling System Malfunction Subcategory: 6 - Hazardous Event Affecting SAFETY SYSTEMS Initiating Condition: Hazardous event affecting a SAFETY SYSTEM needed for the current operating mode EAL: CA6.1 Alert The occurrence of ANY Table C-5 Hazardous Event AND EITHER: z Event has caused indications of degraded performance in at least one train of a SAFETY SYSTEM required for the current operating mode z The event has caused VISIBLE DAMAGE to a SAFETY SYSTEM component or structure required for the current operating mode Table C-5 Hazardous Events z Seismic event (earthquake) z Internal or external FLOODING event z High winds or tornado strike z FIRE z EXPLOSION z Other events with similar hazard characteristics as determined by the Emergency Director Mode Applicability: 5 - Cold Shutdown, 6 - Refueling NEI 99-01 Basis: This IC addresses a hazardous event that causes damage to a SAFETY SYSTEM, or a structure containing SAFETY SYSTEM components, needed for the current operating mode. This condition significantly reduces the margin to a loss or potential loss of a fission product barrier, and therefore represents an actual or potential substantial degradation of the level of safety of the plant. EAL BASES DOCUMENT Rev. 0 Page 171 of 292

ATTACHMENT 1 EAL Bases EAL 1.b.1The first conditional addresses damage to a SAFETY SYSTEM train that is in service/operation since indications for it will be readily available. The indications of degraded performance should be significant enough to cause concern regarding the operability or reliability of the SAFETY SYSTEM train. EAL 1.b.2The second conditional addresses damage to a SAFETY SYSTEM component that is not in service/operation or readily apparent through indications alone, or to a structure containing SAFETY SYSTEM components. Operators will make this determination based on the totality of available event and damage report information. This is intended to be a brief assessment not requiring lengthy analysis or quantification of the damage. Escalation of the emergency classification level would be via IC CS1 or AS1RS1. DBNPS Basis:

  • Ground motion acceleration of 0.08g horizontal or 0.053g vertical is the Maximum Probable Earthquake as is considered generically as the Operating Basis Earthquake for DBNPS (ref. 8). Control room alarm indication of an earthquake greater than OBE is indicated on the seismic control panel (C5764A). RA-EP-02820 Earthquake provides the guidance for determining any required response actions if the OBE earthquake threshold is exceeded (ref. 1). The significance of seismic events is discussed under EAL HU2.1.
  • Internal FLOODING occurs from breaches of water systems that are located inside plant buildings and are connected to large water sources such as Intake Forebay or tanks (ref.

2).

  • External FLOODING may be due to high lake level. DBNPS flood emergency elevation is 578 ft. Site access would be limited to rail, boat or helicopter (ref. 3).
  • Seismic Category I structures are analyzed to withstand a sustained, design wind velocity of at least 90 mph. (ref. 4).
  • Areas containing functions and systems required for safe shutdown of the plant are identified by fire area in the fire abnormal procedure (ref. 5).
  • An EXPLOSION that degrades the performance of a SAFETY SYSTEM train or visibly damages a SAFETY SYSTEM component or structure would be classified under this EAL (ref. 6).

DBNPS Basis Reference(s):

1. RA-EP-02820 Earthquake
2. RA-EP-02880 Internal Flooding
3. RA-EP-02830 Flooding
4. DBNPS UFSAR Section 3.3.1 Wind Criteria
5. DB-OP-02501 Serious Station Fire
6. RA-EP-02840 Explosion EAL BASES DOCUMENT Rev. 0 Page 172 of 292

ATTACHMENT 1 EAL Bases

7. NEI 99-01 CA6
8. Updated FSAR Section 3.1 Seismic Design EAL BASES DOCUMENT Rev. 0 Page 173 of 292

ATTACHMENT 1 EAL Bases Category S - System Malfunction EAL Group: Hot Conditions (RCS temperature > 200ºF); EALs in this category are applicable only in one or more hot operating modes. Numerous system-related equipment failure events that warrant emergency classification have been identified in this category. They may pose actual or potential threats to plant safety. The events of this category pertain to the following subcategories:

1. Loss of Essential AC Power Loss of emergency electrical power can compromise plant SAFETY SYSTEM operability including decay heat removal and emergency core cooling systems, which may be necessary to ensure fission product barrier integrity. This category includes loss of onsite and offsite sources for 4160 V essential buses.
2. Loss of Essential DC Power Loss of emergency electrical power can compromise plant SAFETY SYSTEM operability including decay heat removal and emergency core cooling systems, which may be necessary to ensure fission product barrier integrity. This category includes loss of essential plant 125 VDC power sources.
3. Loss of Control Room Indications Certain events that degrade plant operators ability to assess plant conditions within the plant warrant emergency classification. Losses of indicators are in this subcategory.
4. RCS Activity During normal operation, reactor coolant fission product activity is very low. Small concentrations of fission products in the coolant are primarily from the fission of tramp uranium in the fuel clad or minor perforations in the clad itself. Any significant increase from these base-line levels (2% - 5% clad failures) is indicative of fuel failures and is covered under the Fission Product Barrier Degradation category. However, lesser amounts of clad damage may result in coolant activity exceeding Technical Specification limits. These fission products will be circulated with the reactor coolant and can be detected by coolant sampling.
5. RCS Leakage The reactor vessel provides a volume for the coolant that covers the reactor core. The reactor pressure vessel and associated pressure piping (reactor coolant system) together provide a barrier to limit the release of radioactive material should the reactor fuel clad EAL BASES DOCUMENT Rev. 0 Page 174 of 292

ATTACHMENT 1 EAL Bases integrity fail. Excessive RCS leakage greater than Technical Specification limits indicates potential pipe cracks that may propagate to an extent threatening fuel clad, RCS and containment integrity.

6. RPS Failure This subcategory includes events related to failure of the Reactor Protection System (RPS) to initiate and complete reactor trips. In the plant licensing basis, postulated failures of the RPS to complete a reactor trip comprise a specific set of analyzed events referred to as Anticipated Transient Without Scram (ATWS) events. For EAL classification, however, ATWS is intended to mean ANY trip failure event that does not achieve reactor shutdown.

If RPS actuation fails to assure reactor shutdown, positive control of reactivity is at risk and could cause a threat to fuel clad, RCS and containment integrity.

7. Loss of Communications Certain events that degrade plant operators ability to communicate with essential personnel within or external to the plant warrant emergency classification.
8. Containment Failure Failure of containment isolation capability (under conditions in which the containment is not currently challenged) warrants emergency classification. Failure of containment pressure control capability also warrants emergency classification.
9. Hazardous Event Affecting SAFETY SYSTEMS Various natural and technological events that result in degraded plant SAFETY SYSTEM performance or significant visible damage warrant emergency classification under this subcategory.

EAL BASES DOCUMENT Rev. 0 Page 175 of 292

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 1 - Loss of Essential AC Power Initiating Condition: Prolonged loss of ALL offsite and ALL onsite AC power to essential buses EAL: SG1.1 General Emergency Loss of ALL offsite and ALL onsite AC power capability, Table S-1, to essential 4160V buses C1 and D1 AND EITHER:

  • Restoration of at least one essential bus in < 4 hours is not likely (Note 1)
  • Calculated Clad Temperature in Region 3 (DB-OP-02000 Figure 2)

Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Table S-1 Offsite/Onsite AC Power Sources Offsite:

  • X11
  • X11 (back-fed via Main Transformer)
  • X01
  • X02 Onsite:
  • EDG1
  • EDG2
  • SBODG Mode Applicability:

1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown NEI 99-01 Basis: This IC addresses a prolonged loss of ALL power sources to AC essentialemergency buses. A loss of ALL AC power compromises the performance of ALL SAFETY SYSTEMS requiring electric power including those necessary for emergency core cooling, containment heat removal/pressure control, spent fuel heat removal and the ultimate heat sink. A prolonged EAL BASES DOCUMENT Rev. 0 Page 176 of 292

ATTACHMENT 1 EAL Bases loss of these buses will lead to a loss of one or more fission product barriers. In addition, fission product barrier monitoring capabilities may be degraded under these conditions. The EAL should require declaration of a General Emergency prior to meeting the thresholds for IC FG1. This will allow additional time for implementation of offsite protective actions. Escalation of the emergency classification from Site Area Emergency will occur if it is projected that power cannot be restored to at least one AC essentialemergency bus by the end of the analyzed station blackout coping period. Beyond this time, plant responses and event trajectory are subject to greater uncertainty, and there is an increased likelihood of challenges to multiple fission product barriers. The estimate for restoring at least one essentialemergency bus should be based on a realistic appraisal of the situation. Mitigation actions with a low probability of success should not be used as a basis for delaying a classification upgrade. The goal is to maximize the time available to prepare for, and implement, protective actions for the public. The EAL will also require a General Emergency declaration if the loss of AC power results in parameters that indicate an inability to adequately remove decay heat from the core. DBNPS Basis: This EAL is indicated by the extended loss of ALL offsite and onsite AC power capability to 4160V essential buses C1 and D1 either for greater than 4 hours or that has resulted in indications of an actual loss of adequate core cooling. Indication of continuing core cooling degradation is manifested by Calculated Clad Temperature in Region 3 (DB-OP-02000 Figure 2) (ref. 3). The 4160 VAC System provides the power requirements for operation and safe shutdown of the plant. The essential switchgear are buses C1 and D1 (ref. 1). The essential buses during plant operation are normally powered from the 13.8KV offsite power system through their respective 13.8KV/4160V bus tie transformers, via the Unit Auxiliary Transformer (X11). In non-power operating modes, the essential buses may be back-fed via the X11 and Main Transformer provided the main generator lead disconnect links are removed (ref. 1, 2). A standby source of offsite power to each 4160V essential bus is provided from the 13.8KV offsite power system via two separate and independent 13.8KV/4160V Startup Transformers (X01 & X02). Normally each startup transformer serves as a reserve power source for only one essential bus. However, a single startup transformer can be aligned to power both essential buses (ref. 1, 2). Each essential bus has a diesel generator (EDG1 & EDG2) to supply an onsite emergency source of power to safe shutdown loads in the event of a loss of the normal power source or loss of off-site power (ref. 1). EAL BASES DOCUMENT Rev. 0 Page 177 of 292

ATTACHMENT 1 EAL Bases An Alternate AC power source, the Station Black Out (SBO) Diesel Generator, is located onsite. This onsite AC power source can be started from the Control Room and be loaded within 10 minutes of a SBO (ref. 1). The SBODG fuel oil supply is separate from fuel oil supply for the station's EDGs. The SBODG fuel oil supply tank capacity is based on an eight-hour supply with the SBODG at rated load. A minimum supply of four hours must be stored in this tank to meet the site's station blackout duration analysis conditions (ref 1). Indication of continuing core cooling degradation must be based on fission product barrier monitoring with particular emphasis on Emergency Director judgment as it relates to IMMINENT Loss or Potential Loss of fission product barriers and degraded ability to monitor fission product barriers. Indication of continuing core cooling degradation is manifested by Calculated Clad Temperature in Region 3 (DB-OP-02000 Figure 2). Figure 2, Incore T/C Temperature vs. RCS Pressure for ICC, provides indication of how serious core conditions are based upon combinations of RCS pressure and incore thermocouple temperatures. If the RCS P-T point is in Region 3, the cladding temperatures in the high power regions of the Core may be 1400ºF or higher. This is a serious condition, which could lead to significant amounts of H2 production; Core damage may be unavoidable (ref. 3, 4). DBNPS Basis Reference(s):

1. UFSAR Section 8.0 Electric Power
2. DB-OP-02521 Loss of AC Bus Power Sources
3. DB-OP-02000 Figure 2, Incore T/C Temperature vs. RC Pressure for Inadequate Core Cooling
4. Bases and Deviation Document for DB-OP-02000
5. NEI 99-01 SG1 EAL BASES DOCUMENT Rev. 0 Page 178 of 292

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 1 - Loss of Essential AC Power Initiating Condition: Loss of ALL essential AC and DC power sources for 15 minutes or longer EAL: SG1.2 General Emergency Loss of ALL offsite and ALL onsite AC power capability, Table S-1, to essential 4160V buses C1 and D1 for 15 min. AND Loss of ALL 125 VDC power based on battery bus voltage indications < 105 VDC on ALL essential DC distribution panels D1P, D1N, D2P and D2N for 15 min. (Note 1) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Table S-1 Offsite/Onsite AC Power Sources Offsite:

  • X11
  • X11 (back-fed via Main Transformer)
  • X01
  • X02 Onsite:
  • EDG1
  • EDG2
  • SBODG Mode Applicability:

1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown EAL BASES DOCUMENT Rev. 0 Page 179 of 292

ATTACHMENT 1 EAL Bases NEI 99-01 Basis: This IC addresses a concurrent and prolonged loss of both essential AC AND Vital DC power. A loss of ALL essential AC power compromises the performance of ALL SAFETY SYSTEMS requiring electric power including those necessary for emergency core cooling, containment heat removal/pressure control, spent fuel heat removal and the ultimate heat sink. A loss of essential vital DC power compromises the ability to monitor and control SAFETY SYSTEMS. A sustained loss of both AC and DC power will lead to multiple challenges to fission product barriers. Fifteen minutes was selected as a threshold to exclude transient or momentary power losses. The 15-minute emergency declaration clock begins at the point when both EAL thresholds are met. DBNPS Basis: This EAL is indicated by the loss of ALL offsite and onsite essential AC power capability to 4160V essential buses C1 and D1 for greater than 15 minutes in combination with degraded DC power voltage. This EAL addresses operating experience from the March 2011 accident at Fukushima Daiichi. The 4160 VAC System provides the power requirements for operation and safe shutdown of the plant. The essential switchgear are buses C1 and D1 (ref. 1). The essential buses during plant operation are normally powered from the 13.8KV offsite power system through their respective 13.8KV/4160V bus tie transformers, via the Unit Auxiliary Transformer (X11). In non-power operating modes, the essential buses may be back-fed via the X11 and Main Transformer provided the main generator lead disconnect links are removed (ref. 1, 2). Credit for the X11 back-feed can only be taken if already aligned, as it takes greater than 15 minutes to align. A standby source of offsite power to each 4160V essential bus is provided from the 13.8KV offsite power system via two separate and independent 13.8KV/4160V Startup Transformers (X01 & X02). Normally each startup transformer serves as a reserve power source for only one essential bus. However, a single startup transformer can be aligned to power both essential buses (ref. 1, 2). Each essential bus has a diesel generator (EDG1 & EDG2) to supply an onsite emergency source of power to safe shutdown loads in the event of a loss of the normal power source or loss of off-site power (ref. 1). An Alternate AC power source, the Station Black Out (SBO) Diesel Generator, is located onsite. This onsite AC power source can be started from the Control Room and be loaded within 10 minutes of a SBO (ref. 1). The DC electrical distribution subsystem consists of two trains, designated Train 1 and Train

2. Each train consists of a 250/125 VDC motor control center (MCC), and each 250/125 VDC MCC consists of two 125 VDC buses (one positive and one negative) that can be powered EAL BASES DOCUMENT Rev. 0 Page 180 of 292

ATTACHMENT 1 EAL Bases from a polarity specific battery or battery charger. The two DC buses then supply a specific Essential DC Distribution Panel (D1P and D1N for DCMCC 1, and D2P and D2N for DCMCC 2). The four Essential DC Distribution Panels independently supply DC electrical power to the four inverters, which in turn power the 120 VAC essential buses (ref. 1, 3, 4, 5, 6, 7). The Class 1E DC loads have an operating voltage range of 105 to 135 volts. The minimum battery discharge voltage (requiring opening the degraded battery output breaker) is 105 VDC (ref. 1, 7). DBNPS Basis Reference(s):

1. UFSAR Section 8.0 Electric Power
2. DB-OP-02521 Loss of AC Bus Power Sources
3. DB-OP-02537 Loss of D1P and DAP
4. DB-OP-02538 Loss of D2P and DBP
5. DB-OP-02539 Loss of D1N and DAN
6. DB-OP-02540 Loss of D2N and DBN
7. System Description for 125/250 VDC and 120 V Instrumentation AC System
8. NEI 99-01 SG8 EAL BASES DOCUMENT Rev. 0 Page 181 of 292

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 1 - Loss of Essential AC Power Initiating Condition: Loss of ALL offsite power and ALL onsite AC power to essential buses for 15 minutes or longer EAL: SS1.1 Site Area Emergency Loss of ALL offsite and ALL onsite AC power capability, Table S-1, to essential 4160V buses C1 and D1 for 15 min. (Note 1) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Table S-1 Offsite/Onsite AC Power Sources Offsite:

  • X11
  • X11 (back-fed via Main Transformer)
  • X01
  • X02 Onsite:
  • EDG1
  • EDG2
  • SBODG Mode Applicability:

1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown NEI 99-01 Basis: This IC addresses a total loss of AC power that compromises the performance of ALL SAFETY SYSTEMS requiring electric power including those necessary for emergency core cooling, containment heat removal/pressure control, spent fuel heat removal and the ultimate heat sink. In addition, fission product barrier monitoring capabilities may be degraded under these conditions. This IC represents a condition that involves actual or likely major failures of plant functions needed for the protection of the public. Fifteen minutes was selected as a threshold to exclude transient or momentary power losses. EAL BASES DOCUMENT Rev. 0 Page 182 of 292

ATTACHMENT 1 EAL Bases Escalation of the emergency classification level would be via ICs AG1RG1, FG1 or SG1. DBNPS Basis: This EAL is indicated by the loss of ALL offsite and onsite AC power capability (Table S-1) to 4160V essential buses C1 and D1. The essential switchgear are buses C1 (Train A) and D1 (Train B) (ref. 1). For emergency classification purposes, capability means that an AC power source is available to the essential buses, whether or not the buses are powered from it. The 4160 VAC System provides the power requirements for operation and safe shutdown of the plant. The essential switchgear are buses C1 and D1 (ref. 1). The essential buses during plant operation are normally powered from the 13.8KV offsite power system through their respective 13.8KV/4160V bus tie transformers, via the Unit Auxiliary Transformer (X11). In non-power operating modes, the essential buses may be back-fed via the X11 and Main Transformer provided the main generator lead disconnect links are removed (ref. 1, 2). Credit for the X11 back-feed can only be taken if already aligned, as it takes greater than 15 minutes to align. A standby source of offsite power to each 4160V essential bus is provided from the 13.8KV offsite power system via two separate and independent 13.8KV/4160V Startup Transformers (X01 & X02). Normally each startup transformer serves as a reserve power source for only one essential bus. However, a single startup transformer can be aligned to power both essential buses (ref. 1, 2). Each essential bus has a diesel generator (EDG1 & EDG2) to supply an onsite emergency source of power to safe shutdown loads in the event of a loss of the normal power source or loss of off-site power (ref. 1). An Alternate AC power source, the Station Black Out (SBO) Diesel Generator, is located onsite. This onsite AC power source can be started from the Control Room and be loaded within 10 minutes of a SBO (ref. 1). The 15-minute interval was selected as a threshold to exclude transient or momentary power losses. The interval begins when both offsite and onsite AC power capability are lost. DBNPS Basis Reference(s):

1. UFSAR Section 8.0 Electric Power
2. DB-OP-02521 Loss of AC Bus Power Sources
3. NEI 99-01 SS1 EAL BASES DOCUMENT Rev. 0 Page 183 of 292

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 1 - Loss of Essential AC Power Initiating Condition: Loss of ALL but one AC power source to essential buses for 15 minutes or longer EAL: SA1.1 Alert AC power capability, Table S-1, to essential 4160V buses C1 and D1 reduced to a single power source for 15 min. (Note 1) AND ANY additional single power source failure will result in loss of ALL AC power to SAFETY SYSTEMS Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Table S-1 Offsite/Onsite AC Power Sources Offsite:

  • X11
  • X11 (back-fed via Main Transformer)
  • X01
  • X02 Onsite:
  • EDG1
  • EDG2
  • SBODG Mode Applicability:

1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4- Hot Shutdown Basis: NEI 99-01 Basis: This IC describes a significant degradation of offsite and onsite AC power sources such that ANY additional single failure would result in a loss of ALL AC power to SAFETY SYSTEMS. EAL BASES DOCUMENT Rev. 0 Page 184 of 292

ATTACHMENT 1 EAL Bases In this condition, the sole AC power source may be powering one, or more than one, train of safety-related equipment. This IC provides an escalation path from IC SU1. An AC power source is a source recognized in AOPs and EOPs, and capable of supplying required power to an essentialemergency bus. Some examples of this condition are presented below. z A loss of ALL offsite power with a concurrent failure of ALL but one emergency power source (e.g., an onsite diesel generator) z A loss of ALL offsite power and loss of ALL emergency power sources (e.g., onsite diesel generators) with a single train of essentialemergency buses being back-fed from the unit main generator z A loss of emergency power sources (e.g., onsite diesel generators) with a single train of essentialemergency buses being back-fed from an offsite power source Fifteen minutes was selected as a threshold to exclude transient or momentary losses of power. Escalation of the emergency classification level would be via IC SS1. DBNPS Basis: For emergency classification purposes, capability means that an AC power source is available to the essential buses, whether or not the buses are powered from it. The 4160 VAC System provides the power requirements for operation and safe shutdown of the plant. The essential switchgear are buses C1 and D1 (ref. 1). The essential buses during plant operation are normally powered from the 13.8KV offsite power system through their respective 13.8KV/4160V bus tie transformers, via the Unit Auxiliary Transformer (X11). In non-power operating modes, the essential buses may be back-fed via the X11 and Main Transformer provided the main generator lead disconnect links are removed (ref. 1, 2). Credit for the X11 back-feed can only be taken if already aligned, as it takes greater than 15 minutes to align. A standby source of offsite power to each 4160V essential bus is provided from the 13.8KV offsite power system via two separate and independent 13.8KV/4160V Startup Transformers (X01 & X02). Normally each startup transformer serves as a reserve power source for only one essential bus. However, a single startup transformer can be aligned to power both essential buses (ref. 1, 2). Each essential bus has a diesel generator (EDG1 & EDG2) to supply an onsite emergency source of power to safe shutdown loads in the event of a loss of the normal power source or loss of off-site power (ref. 1). EAL BASES DOCUMENT Rev. 0 Page 185 of 292

ATTACHMENT 1 EAL Bases An Alternate AC power source, the Station Black Out (SBO) Diesel Generator, is located onsite. This onsite AC power source can be started from the Control Room and be loaded within 10 minutes of a SBO (ref. 1). The 15-minute interval was selected as a threshold to exclude transient or momentary power losses. If the capability of a second source of essential bus power is not restored within 15 minutes, an Alert is declared under this EAL. DBNPS Basis Reference(s):

1. UFSAR Section 8.0 Electric Power
2. DB-OP-02521 Loss of AC Bus Power Sources
3. NEI 99-01 SA1 EAL BASES DOCUMENT Rev. 0 Page 186 of 292

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 1 - Loss of Essential AC Power Initiating Condition: Loss of ALL offsite AC power capability to essential buses for 15 minutes or longer EAL: SU1.1 Unusual Event Loss of ALL offsite AC power capability, Table S-1, to essential 4160V buses C1 and D1 for 15 min. (Note 1) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Table S-1 Offsite/Onsite AC Power Sources Offsite:

  • X11
  • X11 (back-fed via Main Transformer)
  • X01
  • X02 Onsite:
  • EDG1
  • EDG2
  • SBODG Mode Applicability:

1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown Basis: NEI 99-01 Basis: This IC addresses a prolonged loss of offsite power. The loss of offsite power sources renders the plant more vulnerable to a complete loss of power to AC essentialemergency buses. This condition represents a potential reduction in the level of safety of the plant. For emergency classification purposes, capability means that an offsite AC power source(s) is available to the essentialemergency buses, whether or not the buses are powered from it. EAL BASES DOCUMENT Rev. 0 Page 187 of 292

ATTACHMENT 1 EAL Bases Fifteen minutes was selected as a threshold to exclude transient or momentary losses of offsite power. Escalation of the emergency classification level would be via IC SA1. DBNPS Basis: For emergency classification purposes, capability means that an AC power source is available to the essential buses, whether or not the buses are powered from it. The 4160 VAC System provides the power requirements for operation and safe shutdown of the plant. The essential switchgear are buses C1 and D1 (ref. 1). The essential buses during plant operation are normally powered from the 13.8KV offsite power system through their respective 13.8KV/4160V bus tie transformers, via the Unit Auxiliary Transformer (X11). In non-power operating modes, the essential buses may be back-fed via the X11 and Main Transformer provided the main generator lead disconnect links are removed (ref. 1, 2). Credit for the X11 back-feed can only be taken if already aligned, as it takes greater than 15 minutes to align. A standby source of offsite power to each 4160V essential bus is provided from the 13.8KV offsite power system via two separate and independent 13.8KV/4160V Startup Transformers (X01 & X02). Normally each startup transformer serves as a reserve power source for only one essential bus. However, a single startup transformer can be aligned to power both essential buses (ref. 1, 2). Each essential bus has a diesel generator (EDG1 & EDG2) to supply an onsite emergency source of power to safe shutdown loads in the event of a loss of the normal power source or loss of off-site power (ref. 1). An Alternate AC power source, the Station Black Out (SBO) Diesel Generator, is located onsite. This onsite AC power source can be started from the Control Room and be loaded within 10 minutes of a SBO (ref. 1). The 15-minute interval was selected as a threshold to exclude transient or momentary power losses. DBNPS Basis Reference(s):

1. UFSAR Section 8.0 Electric Power
2. DB-OP-02521 Loss of AC Bus Power Sources
3. NEI 99-01 SU1 EAL BASES DOCUMENT Rev. 0 Page 188 of 292

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 2 - Loss of Essential DC Power Initiating Condition: Loss of ALL essential DC power for 15 minutes or longer EAL: SS2.1 Site Area Emergency Loss of ALL 125 VDC power based on battery bus voltage indications < 105 VDC on ALL essential DC distribution panels D1P, D1N, D2P and D2N for 15 min. (Note 1) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Mode Applicability: 1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown NEI 99-01 Basis: This IC addresses a loss of vital essential DC power, which compromises the ability to monitor and control SAFETY SYSTEMS. In modes above Cold Shutdown, this condition involves a major failure of plant functions needed for the protection of the public. Fifteen minutes was selected as a threshold to exclude transient or momentary power losses. Escalation of the emergency classification level would be via ICs AG1RG1, FG1 or SG8SG1. DBNPS Basis: The DC electrical distribution subsystem consists of two trains, designated Train 1 and Train

2. Each train consists of a 250/125 VDC motor control center (MCC), and each 250/125 VDC MCC consists of two 125 VDC buses (one positive and one negative) that can be powered from a polarity specific battery or battery charger. The two DC buses then supply a specific Essential DC Distribution Panel (D1P and D1N for DCMCC 1, and D2P and D2N for DCMCC 2). The four Essential DC Distribution Panels independently supply DC electrical power to the four inverters, which in turn power the 120 VAC vital essential buses (ref. 1, 2, 3, 4, 5, 6).

The Class 1E DC loads have an operating voltage range of 105 to 135 volts. The minimum battery discharge voltage (requiring opening the degraded battery output breaker) is 105 VDC (ref. 1, 6). EAL BASES DOCUMENT Rev. 0 Page 189 of 292

ATTACHMENT 1 EAL Bases DBNPS Basis Reference(s):

1. DBNPS UFSAR Section 8.0 Electrical Power
2. DB-OP-02537 Loss of D1P and DAP
3. DB-OP-02538 Loss of D2P and DBP
4. DB-OP-02539 Loss of D1N and DAN
5. DB-OP-02540 Loss of D2N and DBN
6. System Description for 125/250 VDC and 120 V Instrumentation AC System
7. NEI 99-01 SS8 EAL BASES DOCUMENT Rev. 0 Page 190 of 292

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 3 - Loss of Control Room Indications Initiating Condition: UNPLANNED loss of Control Room indications for 15 minutes or longer with a significant transient in progress EAL: SA3.1 Alert An UNPLANNED event results in the inability to monitor one or more Table S-2 SAFETY SYSTEM parameters from within the Control Room for 15 min. (Note 1) AND ANY Significant Transient is or may be in progress, Table S-3 Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Table S-2 Safety System Parameters

  • Reactor power
  • RCS pressure
  • In-core T/C temperature
  • Level in at least one S/G
  • Auxiliary or emergency feed flow Table S-3 Significant Transients
  • Reactor trip
  • Runback > 25% thermal power
  • Electrical load rejection > 25%

electrical load

  • Safety injection actuation Mode Applicability:

1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown EAL BASES DOCUMENT Rev. 0 Page 191 of 292

ATTACHMENT 1 EAL Bases NEI 99-01 Basis: This IC addresses the difficulty associated with monitoring rapidly changing plant conditions during a transient without the ability to obtain SAFETY SYSTEM parameters from within the Control Room. During this condition, the margin to a potential fission product barrier challenge is reduced. It thus represents a potential substantial degradation in the level of safety of the plant. As used in this EAL, an inability to monitor means that values for one or more of the listed parameters cannot be determined from within the Control Room. This situation would require a loss of ALL of the Control Room sources for the given parameter(s). For example, the reactor power level cannot be determined from any analog, digital and recorder source within the Control Room. An event involving a loss of plant indications, annunciators and/or display systems is evaluated in accordance with 10 CFR 50.72 (and associated guidance in NUREG-1022) to determine if an NRC event report is required. The event would be reported if it significantly impaired the capability to perform emergency assessments. In particular, emergency assessments necessary to implement abnormal operating procedures, emergency operating procedures, and emergency plan implementing procedures addressing emergency classification, accident assessment, or protective action decision-making. This EAL is focused on a selected subset of plant parameters associated with the key safety functions of reactivity control, core cooling [PWR] / RPV level [BWR] and RCS heat removal. The loss of the ability to determine one or more of these parameters from within the Control Room is considered to be more significant than simply a reportable condition. In addition, if ALL indication sources for one or more of the listed parameters are lost, then the ability to determine the values of other SAFETY SYSTEM parameters may be impacted as well. For example, if the value for reactor vesselRCS level pressure [PWR] / RPV water level [BWR] cannot be determined from the indications and recorders on a main control board, the SPDS or the plant computer, the availability of other parameter values may be compromised as well. Fifteen minutes was selected as a threshold to exclude transient or momentary losses of indication. Escalation of the emergency classification level would be via ICs FS1 or AS1RS1 DBNPS Basis: SAFETY SYSTEM parameters listed in Table S-2 are monitored in the Control Room through a combination of hard control panel indicators as well as computer based information systems. The Plant Process Computer, which displays SPDS required information, serves as a redundant compensatory indicator, which may be utilized in lieu of normal Control Room indicators (ref. 1, 2, 3). Significant transients are listed in Table S-3 and include response to automatic or manually initiated functions such as reactor trips, runbacks involving greater than 25% thermal power EAL BASES DOCUMENT Rev. 0 Page 192 of 292

ATTACHMENT 1 EAL Bases change, electrical load rejections of greater than 25% full electrical load or SI injection actuations. DBNPS Basis Reference(s):

1. UFSAR Section 7.5 Safety-Related Display Instrumentation
2. DB-OP-02541 Loss of YAU
3. DB-OP-02542 Loss of YBU
4. NEI 99-01 SA2 EAL BASES DOCUMENT Rev. 0 Page 193 of 292

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 3 - Loss of Control Room Indications Initiating Condition: UNPLANNED loss of Control Room indications for 15 minutes or longer EAL: SU3.1 Unusual Event An UNPLANNED event results in the inability to monitor one or more Table S-2 SAFETY SYSTEM parameters from within the Control Room for 15 min. (Note 1) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Table S-2 Safety System Parameters

  • Reactor power
  • RCS pressure
  • In-core T/C temperature
  • Level in at least one S/G
  • Auxiliary or emergency feed flow Mode Applicability:

1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown NEI 99-01 Basis: This IC addresses the difficulty associated with monitoring normal plant conditions without the ability to obtain SAFETY SYSTEM parameters from within the Control Room. This condition is a precursor to a more significant event and represents a potential degradation in the level of safety of the plant. As used in this EAL, an inability to monitor means that values for one or more of the listed parameters cannot be determined from within the Control Room. This situation would require a loss of ALL of the Control Room sources for the given parameter(s). For example, the reactor power level cannot be determined from any analog, digital and recorder source within the Control Room. An event involving a loss of plant indications, annunciators and/or display systems is evaluated in accordance with 10 CFR 50.72 (and associated guidance in NUREG-1022) to determine if an NRC event report is required. The event would be reported if it significantly impaired the capability to perform emergency assessments. In particular, emergency assessments necessary to implement abnormal operating procedures, emergency operating EAL BASES DOCUMENT Rev. 0 Page 194 of 292

ATTACHMENT 1 EAL Bases procedures, and emergency plan implementing procedures addressing emergency classification, accident assessment, or protective action decision-making. This EAL is focused on a selected subset of plant parameters associated with the key safety functions of reactivity control, core cooling [PWR] / RPV level [BWR] and RCS heat removal. The loss of the ability to determine one or more of these parameters from within the Control Room is considered to be more significant than simply a reportable condition. In addition, if ALL indication sources for one or more of the listed parameters are lost, then the ability to determine the values of other SAFETY SYSTEM parameters may be impacted as well. For example, if the value for reactor vesselRCS level pressure[PWR] / RPV water level [BWR] cannot be determined from the indications and recorders on a main control board, the SPDS or the plant computer, the availability of other parameter values may be compromised as well. Fifteen minutes was selected as a threshold to exclude transient or momentary losses of indication. Escalation of the emergency classification level would be via IC SA2SA3. DBNPS Basis: SAFETY SYSTEM parameters listed in Table S-2 are monitored in the Control Room through a combination of hard control panel indicators as well as computer based information systems. The Plant Process Computer, which displays SPDS required information, serves as a redundant compensatory indicator, which may be utilized in lieu of normal Control Room indicators (ref. 1, 2, 3). DBNPS Basis Reference(s):

1. UFSAR Section 7.5 Safety-Related Display Instrumentation
2. DB-OP-02541 Loss of YAU
3. DB-OP-02542 Loss of YBU
4. NEI 99-01 SU2 EAL BASES DOCUMENT Rev. 0 Page 195 of 292

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 4 - RCS Activity Initiating Condition: Reactor coolant activity greater than Technical Specification allowable limits EAL: SU4.1 Unusual Event Letdown Monitor (RE 1998) reading > 2.0E+06 cpm Mode Applicability: 1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown NEI 99-01 Basis: This IC addresses a reactor coolant activity value that exceeds an allowable limit specified in Technical Specifications. This condition is a precursor to a more significant event and represents a potential degradation of the level of safety of the plant. Escalation of the emergency classification level would be via ICs FA1 or the Recognition Category A R ICs. DBNPS Basis: The DBNPS historical highest failed fuel level of 0.007% corresponds to a reading of 1.4E+05 cpm on the Failed Fuel Monitor (RE 1998). The top of scale for RE 1998 is 1.0E+07. A monitor value of 2.0E+06 (0.1% clad damage) was chosen for its ability to be recognized even though exceeding Technical Specification Limits could potentially result in much higher readings (ref. 1, 2). DBNPS Basis Reference(s):

1. Radiation Monitor Setpoint Manual, RE 1998 Failed Fuel Detector
2. DBNPS Technical Specifications LCO 3.4.16 RCS Specific Activity
3. NEI 99-01 SU3 EAL BASES DOCUMENT Rev. 0 Page 196 of 292

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 4 - RCS Activity Initiating Condition: Reactor coolant activity greater than Technical Specification allowable limits EAL: SU4.2 Unusual Event RCS activity > Technical Specification LCO 3.4.16 as indicated by ANY of the following:

  • Dose equivalent I-131 in the unacceptable region of Figure 3.4.16-1
   *   > 1 Ci/gm dose equivalent I-131 for > 48 hrs
   *   > 100/ Ci/gm gross specific coolant activity Mode Applicability:

1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown NEI 99-01 Basis: This IC addresses a reactor coolant activity value that exceeds an allowable limit specified in Technical Specifications. This condition is a precursor to a more significant event and represents a potential degradation of the level of safety of the plant. Escalation of the emergency classification level would be via ICs FA1 or the Recognition Category A R ICs. DBNPS Basis: Technical Specification LCO 3.4.16 Condition A limits RCS System Dose Equivalent I-131 to 1.0 Ci/gm for > 48 hours. Technical Specification Section 3.4.16 Condition B limits RCS System Dose Equivalent I-131 to within Figure 3.4.16-1 and gross specific activity to < 100/ Ci/gm. (ref 1). DBNPS Basis Reference(s):

1. DBNPS Technical Specifications section 3.4.16 RCS Specific Activity
2. NEI 99-01 SU3 EAL BASES DOCUMENT Rev. 0 Page 197 of 292

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 5 - RCS Leakage Initiating Condition: RCS leakage for 15 minutes or longer EAL: SU5.1 Unusual Event RCS leakage > 10 gpm for 15 min. (Note 1) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Mode Applicability: 1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown NEI 99-01 Basis: This IC addresses RCS leakage, which may be a precursor to a more significant event. In this case, RCS leakage has been detected and operators, following applicable procedures, have been unable to promptly isolate the leak. This condition is considered to be a potential degradation of the level of safety of the plant. EAL #1 and EAL #2 areThis EAL is focused on a loss of mass from the RCS due to unidentified leakage" or "pressure boundary leakage" or "identified leakage (as these leakage types are defined in the plant Technical Specifications). EAL #3 addresses a RCS mass loss caused by an UNISOLABLE leak through an interfacing system. These EALs thus apply to leakage into the containment, a secondary-side system (e.g., steam generator tube leakage in a PWR) or a location outside of containment. The leak rate values for each EAL were was selected because they areit is usually observable with normal Control Room indications. Lesser values typically require time-consuming calculations to determine (e.g., a mass balance calculation). EAL #1 uses a lower value that reflects the greater significance of unidentified or pressure boundary leakage. The release of mass from the RCS due to the as-designed/expected operation of a relief valve does not warrant an emergency classification. For PWRs, aAn emergency classification would be required if a mass loss is caused by a relief valve that is not functioning as designed/expected (e.g., a relief valve sticks open and the line flow cannot be isolated). For BWRs, a stuck-open Safety Relief Valve (SRV) or SRV leakage is not considered either identified or unidentified leakage by Technical Specifications and, therefore, is not applicable to this EAL. The 15-minute threshold duration allows sufficient time for prompt operator actions to isolate the leakage, if possible. EAL BASES DOCUMENT Rev. 0 Page 198 of 292

ATTACHMENT 1 EAL Bases Escalation of the emergency classification level would be via ICs of Recognition Category A R or F. DBNPS Basis: Unidentified leakage is ALL leakage (except RCP seal return) that is not identified leakage (ref. 1, 2). DBNPS does not have the capability to classify leakage as identified leakage within 15 minutes. Therefore, for the purpose of this IC and EAL all RCS leakage is considered unidentified leakage and the 10 gpm leak rate applies. Escalation of this EAL to the Alert level is via Category F, Fission Product Barrier Degradation, EAL FA1.1. DBNPS Basis Reference(s):

1. DBNPS Technical Specifications Definitions section 1.1
2. UFSAR Section 5.2.4.7 Leakage Identification
3. DB-OP-02522 Small RCS Leaks
4. NEI 99-01 SU4 EAL BASES DOCUMENT Rev. 0 Page 199 of 292

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 6 - RPS Failure Initiating Condition: Inability to shut down the reactor causing a challenge to core cooling or RCS heat removal EAL: SS6.1 Site Area Emergency An automatic or manual trip fails to shut down the reactor as indicated by reactor power 5% AND ALL actions to shut down the reactor are not successful as indicated by reactor power 5% AND EITHER:

  • Calculated Clad Temperature in Region 3 (DB-OP-02000 Figure 2)
  • MFW, AFW and MU-HPI PORV Cooling are all unavailable Mode Applicability:

1 - Power Operation NEI 99-01 Basis: This IC addresses a failure of the RPS to initiate or complete an automatic or manual reactor (trip [PWR] / scram [BWR]) that results in a reactor shutdown, ALL subsequent operator actions to manually shutdown the reactor are unsuccessful, and continued power generation is challenging the capability to adequately remove heat from the core and/or the RCS. This condition will lead to fuel damage if additional mitigation actions are unsuccessful and thus warrants the declaration of a Site Area Emergency. In some instances, the emergency classification resulting from this IC/EAL may be higher than that resulting from an assessment of the plant responses and symptoms against the Recognition Category F ICs/EALs. This is appropriate in that the Recognition Category F ICs/EALs do not address the additional threat posed by a failure to shut down the reactor. The inclusion of this IC and EAL ensures the timely declaration of a Site Area Emergency in response to prolonged failure to shutdown the reactor. A reactor shutdown is determined in accordance with applicable Emergency Operating Procedure criteria. Escalation of the emergency classification level would be via ICs AG1 RG1 or FG1. EAL BASES DOCUMENT Rev. 0 Page 200 of 292

ATTACHMENT 1 EAL Bases DBNPS Basis: This EAL addresses the following:

  • ANY automatic reactor trip signal followed by a manual trip that fails to shut down the reactor to an extent the reactor is producing energy in excess of the heat load for which the SAFETY SYSTEMS were designed (EAL SA6.1), AND
  • Indications that either core cooling is extremely challenged or heat removal is extremely challenged The combination of failure of both front line and backup protection systems to function in response to a plant transient, along with the continued production of heat, poses a direct threat to the Fuel Clad and RCS barriers.

Reactor shutdown achieved by use of other trip actions specified in DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture (locally opening Reactor Trip Breaker, emergency boration or manually driving control rods) are also credited as a successful manual trip methods provided reactor power can be reduced below 5% before indications of an extreme challenge to either core cooling or heat removal exist (ref. 1). Each of the redundant Auxiliary Feed Pumps is sized to provide 100% of the capacity required by the SGs to remove 5% of the reactor thermal power produced at full load steam pressure conditions. The 5% power portion of this EAL threshold was chosen to be an easily recognizable, onscale indication that the reactor trip has not functioned to shutdown the reactor assuming the reactor power was in the normal operating range. Indication of continuing core cooling degradation must be based on fission product barrier monitoring with particular emphasis on Emergency Director judgment as it relates to IMMINENT Loss or Potential Loss of fission product barriers and degraded ability to monitor fission product barriers. Indication of continuing core cooling degradation is manifested by Calculated Clad Temperature in Region 3 (DB-OP-02000 Figure 2). Figure 2, Incore T/C Temperature vs. RCS Pressure for ICC, provides indication of how serious core conditions are based upon combinations of RCS pressure and incore thermocouple temperatures. If the RCS P-T point is in Region 3, the cladding temperatures in the high power regions of the core may be 1400°F or higher. This is a serious condition, which will lead to significant amounts of H2 production; core damage may be unavoidable (ref. 1). An extreme challenge to heat removal is defined as a complete loss of MFW, AFW and MU-HPI PORV Cooling (ref. 2, 3). DBNPS Basis Reference(s):

1. DBNPS Technical Specifications section 3.3.1 Reactor Protection System (RPS)

Instrumentation

2. DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture
3. Bases and Deviation Document for DB-OP-02000 EAL BASES DOCUMENT Rev. 0 Page 201 of 292

ATTACHMENT 1 EAL Bases

4. NEI 99-01 SS5 EAL BASES DOCUMENT Rev. 0 Page 202 of 292

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 6 - RPS Failure Initiating Condition: Automatic or manual trip fails to shut down the reactor AND subsequent manual actions taken at the reactor control consolesControls Area are not successful in shutting down the reactor EAL: SA6.1 Alert An automatic or manual trip fails to shut down the reactor as indicated by reactor power 5% AND Manual trip actions taken at the Controls Area (manual RPS trip pushbuttons and de-energizing E2 and F2) are not successful in shutting down the reactor as indicated by reactor power 5% (Note 8) Note 8: A manual trip action is ANY operator action, or set of actions, which causes the control rods to be rapidly inserted into the core, and does not include manually driving in control rods or implementation of boron injection strategies. Mode Applicability: 1 - Power Operation NEI 99-01 Basis: This IC addresses a failure of the RPS to initiate or complete an automatic or manual reactor (trip [PWR] / scram [BWR]) that results in a reactor shutdown, AND subsequent operator manual actions taken at the reactor control consolesControls Area to shutdown the reactor are also unsuccessful. This condition represents an actual or potential substantial degradation of the level of safety of the plant. An emergency declaration is required even if the reactor is subsequently shutdown by an action taken away from the reactor control consolesControls Area since this event entails a significant failure of the RPS. A manual action at the reactor Controls console Area is ANY operator action, or set of actions, which causes the control rods to be rapidly inserted into the core (e.g., initiating a manual reactor (trip[PWR] / scram [BWR])). This action does not include manually driving in control rods or implementation of boron injection strategies. If this action(s) is unsuccessful, operators would immediately pursue additional manual actions at locations away from the reactor control consolesControls Area (e.g., locally opening breakers). Actions taken at back-- panels or other locations within the Control Room, or any location outside the Control Room, are not considered to be at the reactor Controls consoleAreas.Taking the Reactor Mode Switch to SHUTDOWN is considered to be a manual scram action. [BWR] EAL BASES DOCUMENT Rev. 0 Page 203 of 292

ATTACHMENT 1 EAL Bases The plant response to the failure of an automatic or manual reactor (trip [PWR] / scram [BWR]) will vary based upon several factors including the reactor power level prior to the event, availability of the condenser, performance of mitigation equipment and actions, other concurrent plant conditions, etc. If the failure to shut down the reactor is prolonged enough to cause a challenge to the core cooling[PWR] / RPV water level [BWR] or RCS heat removal safety functions, the emergency classification level will escalate to a Site Area Emergency via IC SS65. Depending upon plant responses and symptoms, escalation is also possible via IC FS1. Absent the plant conditions needed to meet either IC SS65 or FS1, an Alert declaration is appropriate for this event. It is recognized that plant responses or symptoms may also require an Alert declaration in accordance with the Recognition Category F ICs; however, this IC and EAL are included to ensure a timely emergency declaration. A reactor shutdown is determined in accordance with applicable Emergency Operating Procedure criteria. DBNPS Basis: This EAL addresses ANY automatic or manual reactor trip signal that fails to shut down the reactor followed by a subsequent manual trip that fails to shut down the reactor to an extent the reactor is producing energy in excess of the heat load for which the SAFETY SYSTEMS were designed. For the purposes of emergency classification, successful manual trip actions are those, which can be quickly performed from the Controls Area (ATCA) (i.e., manual pushbuttons or de-energizing E2 and F2). Reactor shutdown achieved by use of other trip actions specified in DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture (locally opening Reactor Trip Breaker, emergency boration or manually driving control rods) do not constitute a successful manual trip (ref. 1). Each of the redundant Auxiliary Feed Pumps is sized to provide 100% of the capacity required by the SGs to remove 5% of the reactor thermal power produced at full load steam pressure conditions. The 5% power portion of this EAL threshold was chosen to be an easily recognizable, onscale indication that the reactor trip has not functioned to shutdown the reactor assuming the reactor power was in the normal operating range. Escalation of this event to a Site Area Emergency would be under EAL SS6.1 or Emergency Director judgment. DBNPS Basis Reference(s):

1. DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture
2. NEI 99-01 SA5 EAL BASES DOCUMENT Rev. 0 Page 204 of 292

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 6 - RPS Failure Initiating Condition: Automatic or manual trip fails to shut down the reactor EAL: SU6.1 Unusual Event An automatic trip did not shut down the reactor as indicated by reactor power 5% after ANY RPS setpoint is exceeded AND A subsequent manual trip action taken at the Controls Area (manual RPS trip pushbuttons or de-energizing E2 and F2) is successful in shutting down the reactor as indicated by reactor power < 5% (Note 8) Note 8: A manual trip action is ANY operator action, or set of actions, which causes the control rods to be rapidly inserted into the core, and does not include manually driving in control rods or implementation of boron injection strategies. Mode Applicability: 1 - Power Operation NEI 99-01 Basis: This IC EAL addresses a failure of the RPS to initiate or complete an automatic or manual reactor (trip [PWR] / scram [BWR])that results in a reactor shutdown, ANDeither a subsequent operator manual action taken at the reactor control consolesControls Area or an automatic (trip[PWR] / scram [BWR]) is successful in shutting down the reactor. This event is a precursor to a more significant condition and thus represents a potential degradation of the level of safety of the plant. Following the failure on an automatic reactor (trip[PWR] / scram [BWR]), operators will promptly initiate manual actions at the reactor control consolesControls Area to shutdown the reactor (e.g., initiate a manual reactor (trip[PWR] / scram [BWR])). If these manual actions are successful in shutting down the reactor, core heat generation will quickly fall to a level within the capabilities of the plants decay heat removal systems. If an initial manual reactor (trip[PWR] / scram [BWR]) is unsuccessful, operators will promptly take manual action at another location(s) on the reactor control consolesControls Area to shutdown the reactor (e.g., initiate a manual reactor (trip[PWR] / scram [BWR])) using a different switch). Depending upon several factors, the initial or subsequent effort to manually (trip [PWR] / scram [BWR])the reactor, or a concurrent plant condition, may lead to the generation of an automatic reactor (trip [PWR] / scram [BWR])signal. If a subsequent manual or automatic (trip [PWR] / scram [BWR])is successful in shutting down the reactor, core heat EAL BASES DOCUMENT Rev. 0 Page 205 of 292

ATTACHMENT 1 EAL Bases generation will quickly fall to a level within the capabilities of the plants decay heat removal systems. A manual action at the reactor Controls consoles Area is ANY operator action, or set of actions, which causes the control rods to be rapidly inserted into the core (e.g., initiating a manual reactor (trip[PWR] / scram [BWR])). This action does not include manually driving in control rods or implementation of boron injection strategies. Actions taken at back-panels or other locations within the Control Room, or any location outside the Control Room, are not considered to be at the reactor control consolesControls Area.Taking the Reactor Mode Switch to SHUTDOWN is considered to be a manual scram action. [BWR] The plant response to the failure of an automatic or manual reactor (trip [PWR] / scram [BWR])will vary based upon several factors including the reactor power level prior to the event, availability of the condenser, performance of mitigation equipment and actions, other concurrent plant conditions, etc. If subsequent operator manual actions taken at the reactor control consolesControls Area are also unsuccessful in shutting down the reactor, then the emergency classification level will escalate to an Alert via IC SA5SA6. Depending upon the plant response, escalation is also possible via IC FA1. Absent the plant conditions needed to meet either IC SA5 SA6 or FA1, an Unusual Event declaration is appropriate for this event. A reactor shutdown is determined in accordance with applicable Emergency Operating Procedure criteria. Should a reactor (trip [PWR] / scram [BWR])signal be generated as a result of plant work (e.g., RPS setpoint testing), the following classification guidance should be applied. z If the signal causes a plant transient that should have included an automatic reactor (trip [PWR] / scram [BWR]) and the RPS fails to automatically shutdown the reactor, then this IC and the EALs are applicable, and should be evaluated. z If the signal does not cause a plant transient and the (trip [PWR] / scram [BWR])failure is determined through other means (e.g., assessment of test results), then this IC and the EALs are not applicable and no classification is warranted. DBNPS Basis: The first condition of this EAL identifies the need to cease critical reactor operations by actuation of the automatic Reactor Protection System (RPS) trip function. A reactor trip is automatically initiated by the RPS when certain continuously monitored parameters exceed predetermined setpoints (ref. 1). Following a successful reactor trip, rapid insertion of the control rods occurs. Reactor power promptly drops to a fraction of the original power level and then decays to a level several decades less with a negative startup rate. The reactor power drop continues until reactor power reaches the point at which the influence of source neutrons on reactor power starts to be observable. A predictable post-trip response from an automatic reactor trip signal should therefore consist of a prompt drop in reactor power as sensed by the nuclear instrumentation and a lowering of power into the source range. A successful trip has therefore occurred when EAL BASES DOCUMENT Rev. 0 Page 206 of 292

ATTACHMENT 1 EAL Bases there is sufficient rod insertion from the trip of RPS to bring the reactor power below the immediate shutdown decay heat level of 5% (ref. 2). Each of the redundant Auxiliary Feed Pumps is sized to provide 100% of the capacity required by the SGs to remove 5% of the reactor thermal power produced at full load steam pressure conditions. The 5% power portion of this EAL threshold was chosen to be an easily recognizable, onscale indication that the reactor trip has not functioned to shutdown the reactor assuming the reactor power was in the normal operating range. For the purposes of emergency classification, successful manual trip actions are those, which can be quickly performed from the Controls Area (ATCA) (i.e., manual pushbuttons or de-energizing E2 and F2). Reactor shutdown achieved by use of other trip actions specified in DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture (locally opening Reactor Trip Breaker, emergency boration or manually driving control rods) do not constitute a successful manual trip (ref. 2). In the event that the operator identifies a reactor trip is imminent and initiates a successful manual reactor trip before the automatic RPS trip setpoint is reached, no declaration is required. The successful manual trip of the reactor before it reaches its automatic trip setpoint or reactor trip signals caused by instrumentation channel failures do not lead to a potential fission product barrier loss. However, if subsequent manual reactor trip actions fail to reduce reactor power below 5%, the event escalates to the Alert under EAL SA6.1. If by procedure, operator actions include the initiation of an immediate manual trip following receipt of an automatic trip signal and there are no clear indications that the automatic trip failed (such as a time delay following indications that a trip setpoint was exceeded), it may be difficult to determine if the reactor was shut down because of automatic trip or manual actions. If a subsequent review of the trip actuation indications reveals that, the automatic trip did not cause the reactor to be shut down, then consideration should be given to evaluating the fuel for potential damage, and the reporting requirements of 10 CFR 50.72 should be considered for the transient event. DBNPS Basis Reference(s):

1. DBNPS Technical Specifications section 3.3.1 Reactor Protection System (RPS)

Instrumentation

2. DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture
3. NEI 99-01 SU5 EAL BASES DOCUMENT Rev. 0 Page 207 of 292

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 6 - RPS Failure Initiating Condition: Automatic or manual trip fails to shut down the reactor EAL: SU6.2 Unusual Event A manual trip did not shut down the reactor as indicated by reactor power 5% after ANY manual trip action was initiated AND A subsequent automatic trip or manual trip action taken at the Controls Area (manual RPS trip pushbuttons or de-energizing E2 and F2) is successful in shutting down the reactor as indicated by reactor power < 5% (Note 8) Note 8: A manual trip action is ANY operator action, or set of actions, which causes the control rods to be rapidly inserted into the core, and does not include manually driving in control rods or implementation of boron injection strategies. Mode Applicability: 1 - Power Operation NEI 99-01 Basis: This IC EAL addresses a failure of the RPS to initiate or complete an automatic or manual reactor (trip [PWR] / scram [BWR])that results in a reactor shutdown, AND either a subsequent operator manual action taken at the reactor control consolesControls Area or an automatic (trip [PWR] / scram [BWR])is successful in shutting down the reactor. This event is a precursor to a more significant condition and thus represents a potential degradation of the level of safety of the plant. Following the failure on an automatic reactor (trip[PWR] / scram [BWR]), operators will promptly initiate manual actions at the reactor control consolesControls Area to shutdown the reactor (e.g., initiate a manual reactor (trip[PWR] / scram [BWR])). If these manual actions are successful in shutting down the reactor, core heat generation will quickly fall to a level within the capabilities of the plants decay heat removal systems. If an initial manual reactor (trip[PWR] / scram [BWR]) is unsuccessful, operators will promptly take manual action at another location(s) on the reactor control consolesControls Area to shutdown the reactor (e.g., initiate a manual reactor (trip[PWR] / scram [BWR])) using a different switch). Depending upon several factors, the initial or subsequent effort to manually trip [BWRthe reactor, or a concurrent plant condition, may lead to the generation of an automatic reactor (trip [PWR] / scram [BWR])signal. If a subsequent manual or automatic (trip EAL BASES DOCUMENT Rev. 0 Page 208 of 292

ATTACHMENT 1 EAL Bases [PWR] / scram [BWR])is successful in shutting down the reactor, core heat generation will quickly fall to a level within the capabilities of the plants decay heat removal systems. A manual action at the reactor Controls consoles Area is ANY operator action, or set of actions, which causes the control rods to be rapidly inserted into the core (e.g., initiating a manual reactor (trip[PWR] / scram [BWR])). This action does not include manually driving in control rods or implementation of boron injection strategies. Actions taken at back-panels or other locations within the Control Room, or any location outside the Control Room, are not considered to be at the reactor control consolesControls Area. Taking the Reactor Mode Switch to SHUTDOWN is considered to be a manual scram action. [BWR] The plant response to the failure of an automatic or manual reactor (trip [PWR] / scram [BWR])will vary based upon several factors including the reactor power level prior to the event, availability of the condenser, performance of mitigation equipment and actions, other concurrent plant conditions, etc. If subsequent operator manual actions taken at the reactor control consolesControls Area are also unsuccessful in shutting down the reactor, then the emergency classification level will escalate to an Alert via IC SA5SA6. Depending upon the plant response, escalation is also possible via IC FA1. Absent the plant conditions needed to meet either IC SA5 SA6 or FA1, an Unusual Event declaration is appropriate for this event. A reactor shutdown is determined in accordance with applicable Emergency Operating Procedure criteria. Should a reactor (trip [PWR] / scram [BWR])signal be generated as a result of plant work (e.g., RPS setpoint testing), the following classification guidance should be applied. z If the signal causes a plant transient that should have included an automatic reactor (trip [PWR] / scram [BWR]) and the RPS fails to automatically shutdown the reactor, then this IC and the EALs are applicable, and should be evaluated. z If the signal does not cause a plant transient and the (trip [PWR] / scram [BWR])failure is determined through other means (e.g., assessment of test results), then this IC and the EALs are not applicable and no classification is warranted. DBNPS Basis: This EAL addresses a failure of a manually initiated trip in the absence of having exceeded an automatic RPS trip setpoint AND a subsequent automatic or manual trip is successful in shutting down the reactor (reactor power < 5%) (ref. 1). Following a successful reactor trip, rapid insertion of the control rods occurs. Reactor power promptly drops to a fraction of the original power level and then decays to a level several decades less with a negative startup rate. The reactor power drop continues until reactor power reaches the point at which the influence of source neutrons on reactor power starts to be observable. A predictable post-trip response from a manual reactor trip signal should therefore consist of a prompt drop in reactor power as sensed by the nuclear instrumentation EAL BASES DOCUMENT Rev. 0 Page 209 of 292

ATTACHMENT 1 EAL Bases and a lowering of power into the source range. A successful trip has therefore occurred when there is sufficient rod insertion from the trip of RPS to bring the reactor power below the immediate shutdown decay heat level of 5% (ref. 2). Each of the redundant Auxiliary Feed Pumps is sized to provide 100% of the capacity required by the SGs to remove 5% of the reactor thermal power produced at full load steam pressure conditions. The 5% power portion of this EAL threshold was chosen to be an easily recognizable, onscale indication that the reactor trip has not functioned to shutdown the reactor assuming the reactor power was in the normal operating range. For the purposes of emergency classification, successful manual trip actions are those, which can be quickly performed from the Controls Area (ATCA) (i.e., manual pushbuttons or de-energizing E2 and F2). Reactor shutdown achieved by use of other trip actions specified in DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture (locally opening Reactor Trip Breaker, emergency boration or manually driving control rods) do not constitute a successful manual trip (ref. 2). If both subsequent automatic and subsequent manual reactor trip actions in the Control Room fail to reduce reactor power below the power associated with the SAFETY SYSTEM design (< 5%) following a failure of an initial manual trip, the event escalates to an Alert under EAL SA6.1 DBNPS Basis Reference(s):

1. DBNPS Technical Specifications section 3.3.1 Reactor Protection System (RPS)

Instrumentation

2. DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture
3. NEI 99-01 SU5 EAL BASES DOCUMENT Rev. 0 Page 210 of 292

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 7 - Loss of Communications Initiating Condition: Loss of ALL onsite or offsite communications capabilities EAL: SU7.1 Unusual Event Loss of ALL Table S-4 onsite communication methods Table S-4 Communication Methods System Onsite ORO NRC Public Address (Gaitronics) X Onsite Radios X Plant Telephones X X X Commercial Telephones X X X 4-Way Ringdown Circuit X Satellite Phones X X Cellular Phones X X NRC Emergency Telephone System X Mode Applicability: 1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown NEI 99-01 Basis: This IC addresses a significant loss of on-site or offsite communications capabilities. While not a direct challenge to plant or personnel safety, this event warrants prompt notifications to OROs and the NRC. This IC should be assessed only when extraordinary means are being utilized to make communications possible (e.g., use of non-plant, privately owned equipment, relaying of on-site information via individuals or multiple radio transmission points, individuals being sent to offsite locations, etc.). EAL BASES DOCUMENT Rev. 0 Page 211 of 292

ATTACHMENT 1 EAL Bases EAL #1This EAL addresses a total loss of the communications methods used in support of routine plant operations. DBNPS Basis: Onsite/Offsite Response Organization (ORO)/NRC communications include one or more of the systems listed in Table S-4 (ref. 1, 2). Public Address (Gaitronics) System The DBNPS public address system provides paging and party line communications between stations located throughout the plant. Inside and outside type wall and desk-mounted stations are used to communicate between roaming personnel and fixed work locations. Plant-wide instructions are issued using the paging feature. On-site Radio System Radio systems can be used for communication among operators, off-site monitoring teams, the control room, security, TSC and EOF. Plant Telephone System The DBNPS plant telephone system provides communication capability between telephone stations located within the plant by dialing the four-digit telephone station code as well as external or offsite calling capability. Commercial Telephones Commercial telephone lines, which supply public telephone communications, are employed by DBNPS. The local service provider provides primary and secondary power for their lines at the Central Office. 4-Way Ringdown Circuit Dedicated ring down line that includes the State and County EOCs, the Ohio Highway Patrol Office, the Lucas County and Ottawa County Sheriff's dispatcher offices, the Emergency Operations Facility, and the Control Room. Satellite Phones Portable satellite telephones are available which enable communication when all other phone systems are inoperable, e.g. following a major external event. Internal batteries, external DC sources as well as external AC sources can power these portable systems. EAL BASES DOCUMENT Rev. 0 Page 212 of 292

ATTACHMENT 1 EAL Bases Cellular Phones Cellular phones may be used during emergencies if other communications means are not readily available or are inoperable. These phones are not expected to be used in the Control Room or Power Block due to interference with plant equipment and loss of signal to the phone. NRC Emergency Telephone System The NRC uses a DBNPS dedicated telephone line, which allows direct telephone communications from the plant to NRC regional and national offices. The DBNPS communications line provides a link independent of the local public telephone network. Telephones connected to this network are located in the DBNPS Control Room, Technical Support Center, and Emergency Operations Facility and can be used to establish NRC Emergency Notification System (ENS) and Health Physics Network (HPN) capability. This EAL is the hot condition equivalent of the cold condition EAL CU5.1. EAL #2 addresses a total loss of the communications methods used to notify all OROs of an emergency declaration. The OROs referred to here are (see Developer Notes). EAL #3 addresses a total loss of the communications methods used to notify the NRC of an emergency declaration. DBNPS Basis Reference(s):

1. DBNPS UFSAR Section 9.5.2 Communications Systems
2. DBNPS Emergency Plan 7.6 Communications Systems
3. NEI 99-01 SU6 EAL BASES DOCUMENT Rev. 0 Page 213 of 292

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 7 - Loss of Communications Initiating Condition: Loss of ALL onsite or offsite communications capabilities EAL: SU7.2 Unusual Event Loss of ALL Table S-4 ORO communication methods Table S-4 Communication Methods System Onsite ORO NRC Public Address (Gaitronics) X Onsite Radios X Plant Telephones X X X Commercial Telephones X X X 4-Way Ringdown Circuit X Satellite Phones X X Cellular Phones X X NRC Emergency Telephone System X Mode Applicability: 1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown NEI 99-01 Basis: This IC addresses a significant loss of on-site or offsite communications capabilities. While not a direct challenge to plant or personnel safety, this event warrants prompt notifications to OROs and the NRC. This IC should be assessed only when extraordinary means are being utilized to make communications possible (e.g., use of non-plant, privately owned equipment, relaying of on-site information via individuals or multiple radio transmission points, individuals being sent to offsite locations, etc.). EAL BASES DOCUMENT Rev. 0 Page 214 of 292

ATTACHMENT 1 EAL Bases EAL #1 addresses a total loss of the communications methods used in support of routine plant operations. EAL #2This EAL addresses a total loss of the communications methods used to notify ALL OROs of an emergency declaration. The OROs referred to here are (see Developer Notes) the State of Ohio, Lucas and Ottawa County EOCs. DBNPS Basis: Onsite/Offsite Response Organization (ORO)/NRC communications include one or more of the systems listed in Table S-4 (ref. 1, 2). Public Address (Gaitronics) System The DBNPS public address system provides paging and party line communications between stations located throughout the plant. Inside and outside type wall and desk-mounted stations are used to communicate between roaming personnel and fixed work locations. Plant-wide instructions are issued using the paging feature. On-site Radio System Radio systems can be used for communication among operators, off-site monitoring teams, the control room, security, TSC and EOF. Plant Telephone System The DBNPS plant telephone system provides communication capability between telephone stations located within the plant by dialing the four-digit telephone station code as well as external or offsite calling capability. Commercial Telephones Commercial telephone lines, which supply public telephone communications, are employed by DBNPS. The local service provider provides primary and secondary power for their lines at the Central Office. 4-Way Ringdown Circuit Dedicated ring down line that includes the State and County EOCs, the Ohio Highway Patrol Office, the Lucas County and Ottawa County Sheriff's dispatcher offices, the Emergency Operations Facility, and the Control Room. Satellite Phones Portable satellite telephones are available which enable communication when ALL other phone systems are inoperable, e.g. following a major external event. Internal batteries, external DC sources as well as external AC sources can power these portable systems. EAL BASES DOCUMENT Rev. 0 Page 215 of 292

ATTACHMENT 1 EAL Bases Cellular Phones Cellular phones may be used during emergencies if other communications means are not readily available or are inoperable. These phones are not expected to be used in the Control Room or Power Block due to interference with plant equipment and loss of signal to the phone. NRC Emergency Telephone System The NRC uses a DBNPS dedicated telephone line, which allows direct telephone communications from the plant to NRC regional and national offices. The DBNPS communications line provides a link independent of the local public telephone network. Telephones connected to this network are located in the DBNPS Control Room, Technical Support Center, and Emergency Operations Facility and can be used to establish NRC Emergency Notification System (ENS) and Health Physics Network (HPN) capability. This EAL is the hot condition equivalent of the cold condition EAL CU5.2. EAL #3 addresses a total loss of the communications methods used to notify the NRC of an emergency declaration. DBNPS Basis Reference(s):

1. DBNPS UFSAR Section 9.5.2 Communications Systems
2. DBNPS Emergency Plan 7.6 Communications Systems
3. NEI 99-01 SU6 EAL BASES DOCUMENT Rev. 0 Page 216 of 292

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 7 - Loss of Communications Initiating Condition: Loss of ALL onsite or offsite communications capabilities EAL: SU7.3 Unusual Event Loss of ALL Table S-4 NRC communication methods Table S-4 Communication Methods System Onsite ORO NRC Public Address (Gaitronics) X Onsite Radios X Plant Telephones X X X Commercial Telephones X X X 4-Way Ringdown Circuit X Satellite Phones X X Cellular Phones X X NRC Emergency Telephone System X Mode Applicability: 1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown NEI 99-01 Basis: This IC addresses a significant loss of on-site or offsite communications capabilities. While not a direct challenge to plant or personnel safety, this event warrants prompt notifications to OROs and the NRC. This IC should be assessed only when extraordinary means are being utilized to make communications possible (e.g., use of non-plant, privately owned equipment, relaying of on-site information via individuals or multiple radio transmission points, individuals being sent to offsite locations, etc.). EAL BASES DOCUMENT Rev. 0 Page 217 of 292

ATTACHMENT 1 EAL Bases EAL #1 addresses a total loss of the communications methods used in support of routine plant operations. EAL #2 addresses a total loss of the communications methods used to notify all OROs of an emergency declaration. The OROs referred to here are (see Developer Notes). EAL #3This EAL addresses a total loss of the communications methods used to notify the NRC of an emergency declaration. DBNPS Basis: Onsite/Offsite Response Organization (ORO)/NRC communications include one or more of the systems listed in Table S-4 (ref. 1, 2). Public Address (Gaitronics) System The DBNPS public address system provides paging and party line communications between stations located throughout the plant. Inside and outside type wall and desk-mounted stations are used to communicate between roaming personnel and fixed work locations. Plant-wide instructions are issued using the paging feature. On-site Radio System Radio systems can be used for communication among operators, off-site monitoring teams, the control room, security, TSC and EOF. Plant Telephone System The DBNPS plant telephone system provides communication capability between telephone stations located within the plant by dialing the four-digit telephone station code as well as external or offsite calling capability. Commercial Telephones Commercial telephone lines, which supply public telephone communications, are employed by DBNPS. The local service provider provides primary and secondary power for their lines at the Central Office. 4-Way Ringdown Circuit Dedicated ring down line that includes the State and County EOCs, the Ohio Highway Patrol Office, the Lucas County and Ottawa County Sheriff's dispatcher offices, the Emergency Operations Facility, and the Control Room. Satellite Phones Portable satellite telephones are available which enable communication when ALL other phone systems are inoperable, e.g. following a major external event. Internal batteries, external DC sources as well as external AC sources can power these portable systems. EAL BASES DOCUMENT Rev. 0 Page 218 of 292

ATTACHMENT 1 EAL Bases Cellular Phones Cellular phones may be used during emergencies if other communications means are not readily available or are inoperable. These phones are not expected to be used in the Control Room or Power Block due to interference with plant equipment and loss of signal to the phone. NRC Emergency Telephone System The NRC uses a DBNPS dedicated telephone line, which allows direct telephone communications from the plant to NRC regional and national offices. The DBNPS communications line provides a link independent of the local public telephone network. Telephones connected to this network are located in the DBNPS Control Room, Technical Support Center, and Emergency Operations Facility and can be used to establish NRC Emergency Notification System (ENS) and Health Physics Network (HPN) capability. This EAL is the hot condition equivalent of the cold condition EAL CU5.3. DBNPS Basis Reference(s):

1. DBNPS UFSAR Section 9.5.2 Communications Systems
2. DBNPS Emergency Plan 7.6 Communications Systems
3. NEI 99-01 SU6 EAL BASES DOCUMENT Rev. 0 Page 219 of 292

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 8 - Containment Failure Initiating Condition: Failure to isolate containment or loss of containment pressure control EAL: SU8.1 Unusual Event ANY penetration is not closed within 15 min. of a VALID containment isolation signal (Note 1) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Mode Applicability: 1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown NEI 99-01 Basis: This IC EAL addresses a failure of one or more containment penetrations to automatically isolate (close) when required by an actuation signal. It also addresses an event that results in high containment pressure with a concurrent failure of containment pressure control systems. Absent challenges to another fission product barrier, either this condition represents potential degradation of the level of safety of the plant. For EAL #1,this EAL the containment isolation signal must be generated as the result on an off-normal/accident condition (e.g., a safety injection or high containment pressure); a failure resulting from testing or maintenance does not warrant classification. The determination of containment and penetration status - isolated or not isolated - should be made in accordance with the appropriate criteria contained in the plant AOPs and EOPs. The 15-minute criterion is included to allow operators time to manually isolate the required penetrations, if possible. EAL #2 addresses a condition where containment pressure is greater than the setpoint at which containment energy (heat) removal systems are designed to automatically actuate, and less than one full train of equipment is capable of operating per design. The 15-minute criterion is included to allow operators time to manually start equipment that may not have automatically started, if possible. The inability to start the required equipment indicates that containment heat removal/depressurization systems (e.g., containment sprays or ice condenser fans) are either lost or performing in a degraded manner. This event would escalate to a Site Area Emergency in accordance with IC FS1 if there were a concurrent loss or potential loss of either the Fuel Clad or RCS fission product barriers. DBNPS Basis: Successful closure of any one valve in a penetration line is sufficient to consider the penetration closed. EAL BASES DOCUMENT Rev. 0 Page 220 of 292

ATTACHMENT 1 EAL Bases DBNPS Basis Reference(s):

1. NEI 99-01 SU7 EAL BASES DOCUMENT Rev. 0 Page 221 of 292

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 8 - Containment Failure Initiating Condition: Failure to isolate containment or loss of containment pressure control EAL: SU8.2 Unusual Event Containment pressure > 40 psia with < one full train of containment cooling, Table S-6, operating per design for 15 min. (Note 1) Table S-6 Containment Cooling Full Train CT Spray Pumps CT Cooling Fans 2 0 1 1 0 2 Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Mode Applicability: 1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown NEI 99-01 Basis: This IC EAL addresses a failure of one or more containment penetrations to automatically isolate (close) when required by an actuation signal. It also addresses an event that results in high containment pressure with a concurrent failure of containment pressure control systems. Absent challenges to another fission product barrier,, either this condition represents a potential degradation of the level of safety of the plant. For EAL #1, the containment isolation signal must be generated as the result on an off-normal/accident condition (e.g., a safety injection or high containment pressure); a failure resulting from testing or maintenance does not warrant classification. The determination of containment and penetration status - isolated or not isolated - should be made in accordance with the appropriate criteria contained in the plant AOPs and EOPs. The 15-minute criterion is included to allow operators time to manually isolate the required penetrations, if possible. EAL #2This EAL addresses a condition where containment pressure is greater than the setpoint at which containment energy (heat) removal systems are designed to automatically actuate, and less than one full train of equipment is capable of operating per design. The 15-minute criterion is included to allow operators time to manually start equipment that may not EAL BASES DOCUMENT Rev. 0 Page 222 of 292

ATTACHMENT 1 EAL Bases have automatically started, if possible. The inability to start the required equipment indicates that containment heat removal/depressurization systems (e.g., containment sprays or ice condenser fans) are either lost or performing in a degraded manner. This event would escalate to a Site Area Emergency in accordance with IC FS1 if there were a concurrent loss or potential loss of either the Fuel Clad or RCS fission product barriers. DBNPS Basis: The combination of Containment spray pumps and Containment cooling fan units considered to be a full train of containment cooling operating per design is shown in Table F-3 (ref. 1). SFAS 2 actuation automatically initiates Containment Air Coolers upon exceeding the Containment pressure high setpoint of 18.7 psia or low RCS pressure of 1600 psig. SFAS Level 4 actuation automatically initiates Containment Spray upon exceeding the Containment pressure high-high setpoint of 40 (nominal) psia (ref. 2, 3). DBNPS Basis Reference(s):

1. UFSAR Section 6.2.2. Containment Vessel Heat Removal Systems
2. DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture
3. DBNPS Technical Specifications Table 3.3.5-1 Safety Features Actuation System Instrumentation
4. NEI 99-01 SU7 EAL BASES DOCUMENT Rev. 0 Page 223 of 292

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 9 - Hazardous Event Affecting SAFETY SYSTEMS Initiating Condition: Hazardous event affecting a SAFETY SYSTEM needed for the current operating mode EAL: SA9.1 Alert The occurrence of ANY Table S-5 Hazardous Event AND EITHER: z Event has caused indications of degraded performance in at least one train of a SAFETY SYSTEM required for the current operating mode z The event has caused VISIBLE DAMAGE to a SAFETY SYSTEM component or structure required for the current operating mode Table S-5 Hazardous Events z Seismic event (earthquake) z Internal or external FLOODING event z High winds or tornado strike z FIRE z EXPLOSION z Other events with similar hazard characteristics as determined by the Emergency Director Mode Applicability: 1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown NEI 99-01 Basis: This IC addresses a hazardous event that causes damage to a SAFETY SYSTEM, or a structure containing SAFETY SYSTEM components, needed for the current operating mode. This condition significantly reduces the margin to a loss or potential loss of a fission product barrier, and therefore represents an actual or potential substantial degradation of the level of safety of the plant. EAL 1.b.1The first conditional addresses damage to a SAFETY SYSTEM train that is in service/operation since indications for it will be readily available. The indications of degraded performance should be significant enough to cause concern regarding the operability or reliability of the SAFETY SYSTEM train. EAL BASES DOCUMENT Rev. 0 Page 224 of 292

ATTACHMENT 1 EAL Bases EAL 1.b.2The second conditional addresses damage to a SAFETY SYSTEM component that is not in service/operation or readily apparent through indications alone, or to a structure containing SAFETY SYSTEM components. Operators will make this determination based on the totality of available event and damage report information. This is intended to be a brief assessment not requiring lengthy analysis or quantification of the damage. Escalation of the emergency classification level would be via IC FS1 or AS1RS1. DBNPS Basis:

  • Ground motion acceleration of 0.08g horizontal or 0.053g vertical is the Maximum Probable Earthquake as is considered generically as the Operating Basis Earthquake for DBNPS (ref. 8). Control room alarm indication of an earthquake greater than OBE is indicated on the seismic control panel (C5764A). RA-EP-02820 Earthquake provides the guidance for determining any required response actions if the OBE earthquake threshold is exceeded (ref. 1). The significance of seismic events is discussed under EAL HU2.1.
  • Internal FLOODING occurs from breaches of water systems that are located inside plant buildings and are connected to large water sources such as Intake Forebay or tanks (ref.

2).

  • External FLOODING may be due to high lake level. DBNPS flood emergency elevation is 578 ft. Site access would be limited to rail, boat or helicopter (ref. 3).
  • Seismic Category I structures are analyzed to withstand a sustained, design wind velocity of at least 90 mph. (ref. 4).
  • Areas containing functions and systems required for safe shutdown of the plant are identified by fire area in the fire abnormal procedure (ref. 5).
  • An EXPLOSION that degrades the performance of a SAFETY SYSTEM train or visibly damages a SAFETY SYSTEM component or structure would be classified under this EAL (ref. 6).

DBNPS Basis Reference(s):

1. RA-EP-02820 Earthquake
2. RA-EP-02880 Internal Flooding
3. RA-EP-02830 Flooding
4. DBNPS UFSAR Section 3.3.1 Wind Criteria
5. DB-OP-02501 Serious Station Fire
6. RA-EP-02840 Explosion
7. NEI 99-01 SA9
8. Updated FSAR Section 3.1 Seismic Design EAL BASES DOCUMENT Rev. 0 Page 225 of 292

ATTACHMENT 1 EAL Bases Category F - Fission Product Barrier Degradation EAL Group: Hot Conditions (RCS temperature > 200ºF); EALs in this category are applicable only in one or more hot operating modes. EALs in this category represent threats to the defense in depth design concept that precludes the release of highly radioactive fission products to the environment. This concept relies on multiple physical barriers any one of which, if maintained intact, precludes the release of significant amounts of radioactive fission products to the environment. The primary fission product barriers are: A. Fuel Clad (FC): The Fuel Clad Barrier consists of the cladding material that contains the fuel pellets. B. Reactor Coolant System (RCS): The RCS Barrier includes the RCS primary side and its connections up to and including the pressurizer safety and relief valves, and other connections up to and including the primary isolation valves. C. Containment (CT): The Containment Barrier includes the containment building, connections up to and including the outermost containment isolation valves. This barrier also includes the main steam, feedwater, and blowdown line extensions outside the containment building up to and including the outermost secondary side isolation valve. Containment Barrier thresholds are used as criteria for escalation of the ECL from Alert to a Site Area Emergency or a General Emergency. The EALs in this category require evaluation of the loss and potential loss thresholds listed in the fission product barrier matrix of Table F-1 (Attachment 2). Loss and Potential Loss signify the relative damage and threat of damage to the barrier. Loss means the barrier no longer assures containment of radioactive materials. Potential Loss means integrity of the barrier is threatened and could be lost if conditions continue to degrade. The number of barriers that are lost or potentially lost and the following criteria determine the appropriate emergency classification level: Alert: ANY loss or ANY potential loss of EITHER Fuel Clad or RCS Site Area Emergency: Loss or potential loss of ANY two barriers General Emergency: Loss of ANY two barriers AND loss or potential loss of third barrier The logic used for emergency classification based on fission product barrier monitoring should reflect the following considerations: EAL BASES DOCUMENT Rev. 0 Page 226 of 292

ATTACHMENT 1 EAL Bases

  • The Fuel Clad Barrier and the RCS Barrier are weighted more heavily than the Containment Barrier.
  • Unusual Event ICs associated with RCS and Fuel Clad Barriers are addressed under System Malfunction ICs.
  • For accident conditions involving a radiological release, evaluation of the FISSION PRODUCT BARRIER THRESHOLDS will need to be performed in conjunction with dose assessments to ensure correct and timely escalation of the emergency classification. For example, an evaluation of the FISSION PRODUCT BARRIER THRESHOLDS may result in a Site Area Emergency classification while a dose assessment may indicate that an EAL for General Emergency IC RG1 has been exceeded.
  • The FISSION PRODUCT BARRIER THRESHOLDS specified within a scheme reflect plant-specific DBNPS design and operating characteristics.
  • As used in this category, the term RCS leakage encompasses not just those types defined in Technical Specifications but also includes the loss of RCS mass to any location- inside the containment, an interfacing system, or outside of the containment.

The release of liquid or steam mass from the RCS due to the as-designed/expected operation of a relief valve is not considered RCS leakage.

  • At the Site Area Emergency level, EAL users should maintain cognizance of how far present conditions are from meeting a threshold that would require a General Emergency declaration. For example, if the Fuel Clad and RCS fission product barriers were both lost, then there should be frequent assessments of containment radioactive inventory and integrity. Alternatively, if both the Fuel Clad and RCS fission product barriers were potentially lost, the Emergency Director would have more assurance that there was no immediate need to escalate to a General Emergency.

EAL BASES DOCUMENT Rev. 0 Page 227 of 292

ATTACHMENT 1 EAL Bases Category: Fission Product Barrier Degradation Subcategory: N/A Initiating Condition: Loss of ANY two barriers AND Loss or Potential Loss of third barrier EAL: FG1.1 General Emergency Loss of ANY two barriers AND Loss or Potential Loss of third barrier (Table F-1) Mode Applicability: 1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown NEI 99-01 Basis: None DBNPS Basis: Fuel Clad, RCS and Containment comprise the fission product barriers. Table F-1 (Attachment 2) lists the FISSION PRODUCT BARRIER THRESHOLDS, bases and references. At the General Emergency classification level, each barrier is weighted equally. A General Emergency is therefore appropriate for ANY combination of the following conditions:

  • Loss of Fuel Clad, RCS and Containment barriers
  • Loss of Fuel Clad and RCS barriers with Potential Loss of Containment barrier
  • Loss of RCS and Containment barriers with Potential Loss of Fuel Clad barrier
  • Loss of Fuel Clad and Containment barriers with Potential Loss of RCS barrier DBNPS Basis Reference(s):
1. NEI 99-01 FG1 EAL BASES DOCUMENT Rev. 0 Page 228 of 292

ATTACHMENT 1 EAL Bases Category: Fission Product Barrier Degradation Subcategory: N/A Initiating Condition: Loss or Potential Loss of ANY two barriers EAL: FS1.1 Site Area Emergency Loss or Potential Loss of ANY two barriers (Table F-1) Mode Applicability: 1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown NEI 99-01 Basis: None DBNPS Basis: Fuel Clad, RCS and Containment comprise the fission product barriers. Table F-1 (Attachment 2) lists the FISSION PRODUCT BARRIER THRESHOLDS, bases and references. At the Site Area Emergency classification level, each barrier is weighted equally. A Site Area Emergency is therefore appropriate for ANY combination of the following conditions:

  • One barrier loss AND a second barrier loss (i.e., loss - loss)
  • One barrier loss AND a second barrier potential loss (i.e., loss - potential loss)
  • One barrier potential loss AND a second barrier potential loss (i.e., potential loss -

potential loss) At the Site Area Emergency classification level, the ability to assess the proximity of present conditions with respect to the threshold for a General Emergency is important. For example, the existence of Fuel Clad and RCS Barrier loss thresholds in addition to offsite dose assessments would require continual assessments of radioactive inventory and Containment integrity in anticipation of reaching a General Emergency classification. Alternatively, if both Fuel Clad and RCS potential loss thresholds existed, the Emergency Director would have greater assurance that escalation to a General Emergency is less IMMINENT. DBNPS Basis Reference(s):

1. NEI 99-01 FS1 EAL BASES DOCUMENT Rev. 0 Page 229 of 292

ATTACHMENT 1 EAL Bases Category: Fission Product Barrier Degradation Subcategory: N/A Initiating Condition: ANY Loss or ANY Potential Loss of EITHER Fuel Clad or RCS EAL: FA1.1 Alert ANY Loss or ANY Potential Loss of EITHER Fuel Clad or RCS (Table F-1) Mode Applicability: 1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown NEI 99-01 Basis: None DBNPS Basis: Fuel Clad, RCS and Containment comprise the fission product barriers. Table F-1 (Attachment 2) lists the FISSION PRODUCT BARRIER THRESHOLDS, bases and references. At the Alert classification level, Fuel Clad and RCS barriers are weighted more heavily than the Containment barrier. Unlike the Containment barrier, Loss or Potential Loss of either the Fuel Clad or RCS barrier may result in the relocation of radioactive materials or degradation of core cooling capability. Note that the loss or potential loss of Containment barrier in combination with loss or potential loss of either Fuel Clad or RCS barrier results in declaration of a Site Area Emergency under EAL FS1.1 DBNPS Basis Reference(s):

1. NEI 99-01 FA1 EAL BASES DOCUMENT Rev. 0 Page 230 of 292

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Introduction Table F-1 lists the threshold conditions that define the Loss and Potential Loss of the three fission product barriers (Fuel Clad, Reactor Coolant System, and Containment). The table is structured so that each of the three barriers occupies adjacent columns. Each fission product barrier column is further divided into two columns, one for Loss thresholds and one for Potential Loss thresholds. The first column of the table (to the left of the Fuel Clad Loss column) lists the categories (types) of FISSION PRODUCT BARRIER THRESHOLDS. The fission product barrier categories are: A. RCS or SG Tube Leakage B. Inadequate Heat removal C. CT Radiation / RCS Activity D. CT Integrity or Bypass E. Emergency Director Judgment Each category occupies a row in Table F-1 thus forming a matrix defined by the categories. The intersection of each row with each Loss/Potential Loss column forms a cell in which one or more FISSION PRODUCT BARRIER THRESHOLDS appear. If NEI 99-01 does not define a threshold for a barrier Loss/Potential Loss, the word None is entered in the cell. Thresholds are assigned sequential numbers within each Loss and Potential Loss column beginning with number one. In this manner, a threshold can be identified by its category title and number. For example, the first Fuel Clad barrier Loss in Category A would be assigned FC Loss A.1, the third Containment barrier Potential Loss in Category C would be assigned CT P-Loss C.3, etc. If a cell in Table F-1 contains more than one numbered threshold, each of the numbered thresholds, if exceeded, signifies a Loss or Potential Loss of the barrier. It is not necessary to exceed ALL of the thresholds in a category before declaring a barrier Loss/Potential Loss. Subdivision of Table F-1 by category facilitates association of plant conditions to the applicable fission product barrier Loss and Potential Loss thresholds. This structure promotes a systematic approach to assessing the classification status of the fission product barriers. When equipped with knowledge of plant conditions related to the fission product barriers, the EAL-user first scans down the category column of Table F-1, locates the likely category and then reads across the fission product barrier Loss and Potential Loss thresholds in that category to determine if a threshold has been exceeded. If a threshold has not been exceeded, the EAL-user proceeds to the next likely category and continues review of the thresholds in the new category. EAL BASES DOCUMENT Rev. 0 Page 231 of 292

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases If the EAL-user determines that ANY threshold has been exceeded, by definition, the barrier is lost or potentially lost - even if multiple thresholds in the same barrier column are exceeded; only that one barrier is lost or potentially lost. The EAL-user must examine each of the three fission product barriers to determine if other barrier thresholds in the category are lost or potentially lost. For example, if containment radiation is sufficiently high, a Loss of the Fuel Clad and RCS barriers and a Potential Loss of the Containment barrier can occur. Barrier Losses and Potential Losses are then applied to the algorithms given in EALs FG1.1, FS1.1, and FA1.1 to determine the appropriate emergency classification. In the remainder of this Attachment, the Fuel Clad barrier threshold bases appear first, followed by the RCS barrier and finally the Containment barrier threshold bases. In each barrier, the bases are given according category Loss followed by category Potential Loss beginning with Category A, then B E. EAL BASES DOCUMENT Rev. 0 Page 232 of 292

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Table F-1 Fission Product Barrier Threshold Matrix Fuel Clad (FC) Barrier Reactor Coolant System (RCS) Barrier Containment (CT) Barrier Category Loss Potential Loss Loss Potential Loss Loss Potential Loss

1. Operation of a standby Makeup
1. An automatic or manual ECCS Pump (>250 gpm) is required by (SFAS) actuation required by EITHER:

A EITHER:

  • UNISOLABLE RCS leakage 1. A leaking or RUPTURED SG is RCS or None None None
  • UNISOLABLE RCS FAULTED outside of containment SG Tube
  • SG tube leakage leakage Leakage OR
  • SG tube RUPTURE
2. PTS requirements invoked (SR5)
1. Calculated Clad Temperature in Region 2 or higher (DB-OP-02000 1. Calculated Clad Temperature in Figure 2) Region 3 or higher (DB-OP-02000 B 1. Loss of ALL feedwater
1. Calculated Clad Temperature Figure 2)

OR Inadequate in Region 3 or higher (DB- None AND None AND Heat OP-02000 Figure 2) 2. Loss of ALL feedwater SG Cooling is required Removal Restoration procedures not AND effective within 15 min. (Note 1) SG Cooling is required C 1. RE 4596A or B > Table F-2 column FC Loss (Note 9) CT 1. RE 4596A or B > Table F-2 1. RE 4596A or B > Table F-2 column OR None None None Radiation column RCS Loss (Note 9) CT Potential Loss (Note 9)

   / RCS   2. Dose equivalent I-131 coolant activity > 300 Ci/gm Activity
1. Containment isolation is required
1. Containment pressure > 50.4 psia AND EITHER:

OR

  • Containment integrity has been lost based on 2. Containment hydrogen D Emergency Director concentration > 4%

judgment CT None None None None OR Integrity

  • UNISOLABLE pathway from Containment to the environment 3. Containment pressure > 40 psia or Bypass with < one full train, exists Table F-3, of containment cooling OR operating per design for 15 min.

(Note 1)

2. Indications of RCS leakage outside of containment
1. ANY condition in the opinion of 1. ANY condition in the opinion of 1. ANY condition in the opinion of 1. ANY condition in the opinion of 1. ANY condition in the opinion of the E 1. ANY condition in the opinion of the the Emergency Director that the Emergency Director that the Emergency Director that the Emergency Director that Emergency Director that indicates Emergency Director that indicates ED indicates Loss of the Fuel Clad indicates Potential Loss of the indicates Loss of the RCS indicates Loss of the Potential Loss of the Containment Potential Loss of the RCS Barrier Judgment Barrier Fuel Clad Barrier Barrier Containment Barrier Barrier EAL BASES DOCUMENT Rev. 0 Page 233 of 292

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Table F-2 Containment Radiation - R/hr (RE 4596A or B) Time After S/D (Hrs.) RCS Loss FC Loss CT Potential Loss 0-1 1.50E+01 3.03E+03 1.40E+04 1-2 1.50E+01 2.56 E+03 1.18 E+04 2-8 1.50E+01 1.61 E+03 7.46 E+03 8-16 1.50E+01 1.14 E+03 5.28 E+03 16-24 1.50E+01 8.66 E+02 4.00 E+03

            >24                1.50E+01              3.94 E+02            1.82 E+03 Table F-3 Containment Cooling Full Train Spray                Coolers 2                     0 1                     1 0                     2 EAL BASES DOCUMENT                                               Rev. 0                         Page 234 of 292

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Fuel Clad Category: A. RCS or SG Tube Leakage Degradation Threat: Loss Threshold: None EAL BASES DOCUMENT Rev. 0 Page 235 of 292

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Fuel Clad Category: A. RCS or SG Tube Leakage Degradation Threat: Potential Loss Threshold: None EAL BASES DOCUMENT Rev. 0 Page 236 of 292

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Fuel Clad Category: B. Inadequate Heat Removal Degradation Threat: Loss Threshold:

1. Calculated Clad Temperature in Region 3 or higher (DB-OP-02000 Figure 2)

Basis: Generic This reading indicates temperatures within the core are sufficient tohave caused significant superheating of reactor coolant. Plant-Specific Indication of severe core cooling degradation is manifested by Calculated Clad Temperature in Region 3 or higher (DB-OP-02000 Figure 2). Figure 2, Incore T/C Temperature vs. RCS Pressure for ICC, provides indication of how serious core conditions are based upon combinations of RCS pressure and incore thermocouple temperatures. If the RCS P-T point is in Region 3, the cladding temperatures in the core may be 1400°F or higher. This is a very serious condition and may lead to significant amounts of H2 production; core damage may be unavoidable as this represents a very serious inadequate core cooling condition (ref. 1, 2). WCAP-14969-A states, "Analyses performed for the WOG ERGs for indication of inadequate core cooling concluded that the temperature indicated by the core exit thermocouples, especially during transient heatup conditions, is always several hundred degrees lower than the fuel rod cladding temperatures. Thus, an indicated temperature of 1200°F can be translated to a peak cladding temperature on the order of 1400°F (ref. 4). DBNPS Basis Reference(s):

1. DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture
2. Bases and Deviation Document for DB-OP-02000
3. NEI 99-01 Inadequate Heat Removal Fuel Clad Loss 2.A
4. WCAP-14969-A, Westinghouse Owners Group Core Damage Assessment Guidance EAL BASES DOCUMENT Rev. 0 Page 237 of 292

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Fuel Clad Category: B. Inadequate Heat Removal Degradation Threat: Potential Loss Threshold:

1. Calculated Clad Temperature in Region 2 or higher (DB-OP-02000 Figure 2)

Basis: Generic This reading indicates a reduction in reactor vessel water level sufficient to allow the onset of heat-induced cladding damage. Plant-Specific The average incore thermocouple temperature and RCS pressure is used to determine whether Calculated Clad Temperature is in Region 2. This corresponds to a loss of RCS subcooling with clad temperatures remaining below the point where damage is immediately likely (Tclad approximately 900° to 1100° F). DBNPS Basis Reference(s):

1. DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture
2. Bases and Deviation Document for DB-OP-02000
3. NEI 99-01 Inadequate Heat Removal Fuel Clad Potential Loss 2.A EAL BASES DOCUMENT Rev. 0 Page 238 of 292

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Fuel Clad Category: B. Inadequate Heat Removal Degradation Threat: Potential Loss Threshold:

2. Loss of ALL feedwater AND SG cooling is required Basis:

Generic This condition indicates an extreme challenge to the ability to remove RCS heat using the steam generators (i.e., loss of an effective secondary-side heat sink). This condition represents a potential loss of the Fuel Clad Barrier. In accordance with EOPs, there may be unusual accident conditions during which operators intentionally reduce the heat removal capability of the steam generators; during these conditions, classification using threshold is not warranted. Plant-Specific In combination with RCS Potential Loss B.1, meeting this threshold would result in a Site Area Emergency. Loss of ALL feedwater cooling heat transfer capability when SG cooling is required indicates the ultimate heat sink function is under extreme challenge AND that the RCS barrier is also challenged (ref. 1). The phrase AND SG cooling is required precludes the need for classification for conditions in which RCS pressure is less than SG pressure. For large LOCA events inside the Containment, the SGs are moot because heat removal through the containment heat removal systems takes place. Therefore, SG cooling should not be required and, should not be assessed for EAL classification because a LOCA event alone should not require higher than an Alert classification (ref. 1, 2). DBNPS Basis Reference(s):

1. DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture
2. Bases and Deviation Document for DB-OP-02000
3. NEI 99-01 Inadequate Heat Removal Fuel Clad Loss 2.B EAL BASES DOCUMENT Rev. 0 Page 239 of 292

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Fuel Clad Category: C. CT Radiation / RCS Activity Degradation Threat: Loss Threshold:

1. RE 4596A or B > Table F-2 column FC Loss (Note 9)

Table F-2 Containment Radiation - R/hr (RE 4596A or B) Time After S/D (Hrs.) RCS Loss FC Loss CT Potential Loss 0-1 1.50E+01 3.03E+03 1.40E+04 1-2 1.50E+01 2.56 E+03 1.18 E+04 2-8 1.50E+01 1.61 E+03 7.46 E+03 8-16 1.50E+01 1.14 E+03 5.28 E+03 16-24 1.50E+01 8.66 E+02 4.00 E+03

                >24                       1.50E+01             3.94 E+02            1.82 E+03 Note 9:   During a main steam line break in containment or LOCA with temperature >170F, there is a potential to induce transient errors into the output of RE4596A and B during the peak rate of temperature change.

Consult alternate indications. If the main steam line break is accompanied by core damage this error is insignificant (ref. 4, 5, 6, 7, 8). Basis: Generic The radiation monitor reading corresponds to an instantaneous release of ALL reactor coolant mass into the containment, assuming that reactor coolant activity equals 300 Ci/gm dose equivalent I-131. Reactor coolant activity above this level is greater than that expected for iodine spikes and corresponds to an approximate range of 2% to 5% fuel clad damage. Since this condition indicates that a significant amount of fuel clad damage has occurred, it represents a loss of the Fuel Clad Barrier. The radiation monitor reading in this threshold is higher than that specified for RCS Barrier Loss threshold 3.AC.1 since it indicates a loss of both the Fuel Clad Barrier and the RCS Barrier. Note that a combination of the two monitor readings appropriately escalates the emergency classification levelECL to a Site Area Emergency. Plant-Specific The containment high range monitors, RE 4596A & B., monitor the gamma dose rate resulting from a postulated loss of coolant accident (LOCA). RE 4596A & B are located inside containment. The detector range is approximately 1 to 1E8 R/hr (logarithmic scale) (ref. 1). EAL BASES DOCUMENT Rev. 0 Page 240 of 292

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases The Table F-2 values, column FC Loss represents, based on Calculation EP-EALCALC-DB-0701, the expected containment high range radiation monitor (RE 4596A & B) response based on a LOCA, for periods of 1, 2, 8, 16, 24 and 48 (>24) hours after shutdown with ~4.33% fuel failure (ref. 2). When evaluating fission product barrier integrity values in Table F-2, time after shutdown should be confirmed with the Control Room as the time that the reactor is tripped, and reactor power is verified to be lowering on the Intermediate Range (ref. 3). If time after shutdown is less than one hour (or the reactor is still critical), the 0-1 hour after shutdown value should be chosen. This is conservative as it represents sufficient time for plant conditions to deteriorate to the point that core damage may occur, and the activity released from the RCS into the containment atmosphere to reach equilibrium mixing throughout containment. During a main steam line break in containment or LOCA with temperature > 170ºF, there is a potential to induce transient errors (positive and negative) into the output of RE4596A & B during the peak rate of temperature change. Consult alternate indications. If the main steam line break or LOCA is accompanied by core damage this error is, however, insignificant (ref. 4). DBNPS Basis Reference(s):

1. UFSAR Section 7.13.3.1 Containment High Radiation Monitors
2. EP-EALCALC-DB-0701 Containment Radiation Monitor Readings Following Clad Damage (FC2 and CT2 Potential Loss)
3. DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture
4. NRC Information Notice 97-45 Supplement 1 Environmental Qualification Deficiency for Cables and Containment Penetration Pigtails
5. Condition Report 09-53277, Containment High Range Rad Monitor Function and Current EALS
6. Condition Report 09-53278, Containment High Range Rad Monitor Function and NEI 99-01 EAL Submittal
7. Condition Report 07-31108, Potential for Thermally Induced Currents In Containment HRRM
8. Condition Report 09-55171, Containment High Range Rad Monitors Engineering Assistance Requested
9. NEI 99-01 CMT Radiation / RCS Activity Fuel Clad Loss 3.A EAL BASES DOCUMENT Rev. 0 Page 241 of 292

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Fuel Clad Category: C. CT Radiation / RCS Activity Degradation Threat: Loss Threshold:

2. Dose equivalent I-131 coolant activity > 300 Ci/gm Basis:

Generic This threshold indicates that RCS radioactivity concentration is greater than 300 Ci/gm dose equivalent I-131. Reactor coolant activity above this level is greater than that expected for iodine spikes and corresponds to an approximate range of 2% to 5% fuel clad damage. Since this condition indicates that a significant amount of fuel clad damage has occurred, it represents a loss of the Fuel Clad Barrier. Plant-Specific Elevated reactor coolant activity represents a potential degradation in the level of safety of the plant and a potential precursor of more serious problems. The threshold dose equivalent I-131 concentration is well above that expected for iodine spikes and corresponds to about 4.33% fuel clad damage. When reactor coolant activity reaches this level the Fuel Clad barrier is considered lost (ref. 1). There is no Potential Loss threshold associated with RCS Activity / Containment Radiation. DBNPS Basis Reference(s):

1. EP-EALCALC-DB-0701 Containment Radiation Monitor Readings Following Clad Damage (FC2 and CT2 Potential Loss)
2. NEI 99-01 CMT Radiation / RCS Activity Fuel Clad Loss 3.B EAL BASES DOCUMENT Rev. 0 Page 242 of 292

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Fuel Clad Category: C. CT Radiation / RCS Activity Degradation Threat: Potential Loss Threshold: None EAL BASES DOCUMENT Rev. 0 Page 243 of 292

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Fuel Clad Category: D. CT Integrity or Bypass Degradation Threat: Loss Threshold: None EAL BASES DOCUMENT Rev. 0 Page 244 of 292

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Fuel Clad Category: D. CT Integrity or Bypass Degradation Threat: Potential Loss Threshold: None EAL BASES DOCUMENT Rev. 0 Page 245 of 292

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Fuel Clad Category: E. Emergency Director Judgment Degradation Threat: Loss Threshold:

1. ANY condition in the opinion of the Emergency Director that indicates Loss of the Fuel Clad Barrier Basis:

Generic This threshold addresses any other factors that are to be used by the Emergency Director in determining whether the Fuel Clad Barrier is lost. Plant-Specific The Emergency Director judgment threshold addresses any other factors relevant to determining if the Fuel Clad barrier is lost. Such a determination should include imminent barrier degradation, barrier monitoring capability and dominant accident sequences.

  • Imminent barrier degradation exists if the degradation will likely occur within two hours based on a projection of current SAFETY SYSTEM performance. The term IMMINENT refers to recognition of the inability to reach safety acceptance criteria before completion of ALL checks.
  • Barrier monitoring capability is decreased if there is a loss or lack of reliable indicators.

This assessment should include instrumentation operability concerns, readings from portable instrumentation and consideration of offsite monitoring results.

  • Dominant accident sequences lead to degradation of ALL fission product barriers and likely entry to the EOPs. The Emergency Director should be mindful of the Loss of AC power (Station Blackout) and ATWS EALs to assure timely emergency classification declarations.

DBNPS Basis Reference(s):

1. NEI 99-01 Emergency Director Judgment Fuel Clad Loss 6.A EAL BASES DOCUMENT Rev. 0 Page 246 of 292

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Fuel Clad Category: E. Emergency Director Judgment Degradation Threat: Potential Loss Threshold:

1. ANY condition in the opinion of the Emergency Director that indicates Potential Loss of the Fuel Clad Barrier Basis:

Generic This threshold addresses any other factors that are to be used by the Emergency Director in determining whether the Fuel Clad Barrier is potentially lost. The Emergency Director should also consider whether or not to declare the barrier potentially lost in the event that barrier status cannot be monitored. Plant-Specific The Emergency Director judgment threshold addresses any other factors relevant to determining if the Fuel Clad barrier is potentially lost. Such a determination should include imminent barrier degradation, barrier monitoring capability and dominant accident sequences.

  • Imminent barrier degradation exists if the degradation will likely occur within two hours based on a projection of current SAFETY SYSTEM performance. The term IMMINENT refers to recognition of the inability to reach safety acceptance criteria before completion of ALL checks.
  • Barrier monitoring capability is decreased if there is a loss or lack of reliable indicators.

This assessment should include instrumentation operability concerns, readings from portable instrumentation and consideration of offsite monitoring results.

  • Dominant accident sequences lead to degradation of ALL fission product barriers and likely entry to the EOPs. The Emergency Director should be mindful of the Loss of AC power (Station Blackout) and ATWS EALs to assure timely emergency classification declarations.

DBNPS Basis Reference(s):

1. NEI 99-01 Emergency Director Judgment Potential Fuel Clad Loss 6.A EAL BASES DOCUMENT Rev. 0 Page 247 of 292

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Reactor Coolant System Category: A. RCS or SG Tube Leakage Degradation Threat: Loss Threshold:

1. An automatic or manual ECCS (SFAS) actuation required by EITHER:
  • UNISOLABLE RCS leakage
  • SG tube RUPTURE Basis:

Generic This threshold is based on an UNISOLABLE RCS leak of sufficient size to require an automatic or manual actuation of the Emergency Core Cooling System (ECCS). This condition clearly represents a loss of the RCS Barrier. This threshold is applicable to unidentified and pressure boundary leakage, as well as identified leakage. It is also applicable to UNISOLABLE RCS leakage through an interfacing system. The mass loss may be into any location - inside containment, to the secondary-side (i.e., steam generator tube leakage) or outside of containment. A steam generator with primary-to-secondary leakage of sufficient magnitude to require a safety injection is considered to be RUPTURED. If a RUPTURED steam generator is also FAULTED outside of containment, the declaration escalates to a Site Area Emergency since the Containment Barrier Loss threshold 1.A.1 will also be met. Plant-Specific ECCS (SFAS) actuation is caused by (ref. 1):

  • Low RCS pressure
  • High Containment pressure DBNPS Basis Reference(s):
1. DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture
2. NEI 99-01 RCS or SG Tube Leakage Reactor Coolant System Loss 1.A EAL BASES DOCUMENT Rev. 0 Page 248 of 292

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Reactor Coolant System Category: A. RCS or SG Tube Leakage Degradation Threat: Potential Loss Threshold:

1. Operation of a standby Makeup Pump is required (> 250 gpm) by EITHER:
  • UNISOLABLE RCS leakage
  • SG tube leakage Basis:

Generic This threshold is based on an UNISOLABLE RCS leak that results in the inability to maintain pressurizer level within specified limits by operation of a normally used charging (makeup) pump, but an ECCS (SI) actuation has not occurred. The threshold is met when an operating procedure, or operating crew supervision, directs that a standby charging (makeup) pump be placed in service to restore and maintain pressurizer level. This threshold is applicable to unidentified and pressure boundary leakage, as well as identified leakage. It is also applicable to UNISOLABLE RCS leakage through an interfacing system. The mass loss may be into any location - inside containment, to the secondary-side (i.e., steam generator tube leakage) or outside of containment. If a leaking steam generator is also FAULTED outside of containment, the declaration escalates to a Site Area Emergency since the Containment Barrier Loss threshold 1.A will also be met. Plant-Specific The Makeup and Purification System includes two centrifugal makeup pumps, which take suction from the Makeup Tank, and return cooled, purified reactor coolant to the RCS. One of the two makeup pumps handles normal charging flow. Makeup pump capacity of a single makeup injection line is ~250 gpm. A second makeup pump being required is indicative of a substantial RCS leak (ref. 1, 2). DBNPS Basis Reference(s):

1. UFSAR Table 9.3-8 Makeup and Purification System Component Data
2. DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture
3. NEI 99-01 RCS or SG Tube Leakage Reactor Coolant System Potential Loss 1.A EAL BASES DOCUMENT Rev. 0 Page 249 of 292

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Reactor Coolant System Category: A. RCS or SG Tube Leakage Degradation Threat: Potential Loss Threshold:

2. PTS requirements invoked (SR5)

Basis: Generic This condition indicates an extreme challenge to the integrity of the RCS pressure boundary due to pressurized thermal shock - a transient that causes rapid RCS cooldown while the RCS is in Mode 3 or higher (i.e., hot and pressurized). Plant-Specific With an extended overcooling, thermal shock becomes a concern. Pressurized Thermal Shock (PTS) limits must be invoked if the criteria specified in Specific Rule 5 are met. The RCS pressure must be controlled to ensure that PTS limits are not violated. This requires action on the part of the operator to control RCS pressure and temperature (ref. 1). The "Potential Loss" threshold is defined by the PTS limits as specified in DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture Specific Rule 5 being invoked. This indicates an extreme challenge to the RCS barrier (ref. 1, 2). DBNPS Basis Reference(s):

1. DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture
2. Bases and Deviation Document for DB-OP-02000
3. NEI 99-01 RCS or SG Tube Leakage Reactor Coolant System Potential Loss 1.B EAL BASES DOCUMENT Rev. 0 Page 250 of 292

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Reactor Coolant System Category: B. Inadequate Heat Removal Degradation Threat: Loss Threshold: None EAL BASES DOCUMENT Rev. 0 Page 251 of 292

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Reactor Coolant System Category: B. Inadequate Heat Removal Degradation Threat: Potential Loss Threshold:

1. Loss of ALL feedwater AND SG cooling is required Basis:

Generic This condition indicates an extreme challenge to the ability to remove RCS heat using the steam generators (i.e., loss of an effective secondary-side heat sink). This condition represents a potential loss of the RCS Barrier. In accordance with EOPs, there may be unusual accident conditions during which operators intentionally reduce the heat removal capability of the steam generators; during these conditions, classification using threshold is not warranted. Meeting this threshold results in a Site Area Emergency because this threshold is identical to Fuel Clad Barrier Potential Loss threshold 2.B.2; both will be met. This condition warrants a Site Area Emergency declaration because inadequate RCS heat removal may result in fuel heat-up sufficient to damage the cladding and increase RCS pressure to the point where mass will be lost from the system. Plant-Specific In combination with FC Potential Loss B.2, meeting this threshold results in a Site Area Emergency. Loss of ALL feedwater cooling heat transfer capability when SG cooling is required indicates the ultimate heat sink function is under extreme challenge and that the RCS barrier is also challenged (ref. 1). The phrase AND SG cooling required precludes the need for classification for conditions in which RCS pressure is less than SG pressure. For large LOCA events inside the Containment, the SGs are moot because heat removal through the containment heat removal systems takes place. Therefore, SG cooling should not be required and, should not be assessed for EAL classification because a LOCA event alone should not require higher than an Alert classification (ref. 1, 2). EAL BASES DOCUMENT Rev. 0 Page 252 of 292

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases DBNPS Basis Reference(s):

1. DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture
2. Bases and Deviation Document for DB-OP-02000
3. NEI 99-01 Inadequate Heat Removal RCS Loss 2.B EAL BASES DOCUMENT Rev. 0 Page 253 of 292

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Reactor Coolant System Category: C. CT Radiation/ RCS Activity Degradation Threat: Loss Threshold:

1. RE 4596A or B > Table F-2 column RCS Loss (Note 9)

Table F-2 Containment Radiation - R/hr (RE 4596A or B) Time After S/D (Hrs.) RCS Loss FC Loss CT Potential Loss 0-1 1.50E+01 3.03E+03 1.40E+04 1-2 1.50E+01 2.56 E+03 1.18 E+04 2-8 1.50E+01 1.61 E+03 7.46 E+03 8-16 1.50E+01 1.14 E+03 5.28 E+03 16-24 1.50E+01 8.66 E+02 4.00 E+03

                >24                       1.50E+01             3.94 E+02            1.82 E+03 Note 9:   During a main steam line break in containment or LOCA with temperature >170F, there is a potential to induce transient errors into the output of RE4596A and B during the peak rate of temperature change.

Consult alternate indications. If the main steam line break is accompanied by core damage this error is insignificant (ref. 5, 6, 7, 8, 9). Basis: Generic The radiation monitor reading corresponds to an instantaneous release of ALL reactor coolant mass into the containment, assuming that reactor coolant activity equals Technical Specification allowable limits. This value is lower than that specified for Fuel Clad Barrier Loss threshold 3.AC.1 since it indicates a loss of the RCS Barrier only. There is no Potential Loss threshold associated with RCS Activity / Containment Radiation. Plant-Specific The containment high range monitors, RE 4596A & B., monitor the gamma dose rate resulting from a postulated loss of coolant accident (LOCA). RE 4596A & B are located inside containment. The detector range is approximately 1 to 1E8 R/hr (logarithmic scale) (ref. 1). The Table F-2 values, column RCS Loss represents, based on Calculation EP-EALCALC-DB-0702, the expected containment high range radiation monitor (RE 4596A & B) response based on a LOCA, using the USAR maximum RCS activity (no core damage) (ref. 2, 3). EAL BASES DOCUMENT Rev. 0 Page 254 of 292

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases During a main steam line break in containment or LOCA with temperature > 170ºF, there is a potential to induce transient errors (positive and negative) into the output of RE4596A & B during the peak rate of temperature change. Consult alternate indications. If the main steam line break or LOCA is accompanied by core damage this error is, however, insignificant (ref. 5). Since fuel cladding degradation and/or failures could also result in high Containment Area Radiation levels, a reading of >15 R/hr may be obtained without a physical loss of the RCS barrier. However, this threshold should be declared as being met if the Containment Area Radiation levels are >15 R/hr even if there are no other indications of a RCS leak or physical loss. In this case it would also be prudent to evaluate the fuel clad FISSION PRODUCT BARRIER THRESHOLDS. DBNPS Basis Reference(s):

1. UFSAR Section 7.13.3.1 Containment High Radiation Monitors
2. EP-EALCALC-DB-0702 Containment Radiation Monitor Readings Following a LOCA (RC2 Loss)
3. USAR Table 15A-4 Maximum Fission Product Activity in Reactor Coolant
4. DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture
5. NRC Information Notice 97-45 Supplement 1 Environmental Qualification Deficiency for Cables and Containment Penetration Pigtails
6. Condition Report 09-53277, Containment High Range Rad Monitor Function and Current EALS
7. Condition Report 09-53278, Containment High Range Rad Monitor Function and NEI 99-01 EAL Submittal
8. Condition Report 07-31108, Potential for Thermally Induced Currents In Containment HRRM
9. Condition Report 09-55171, Containment High Range Rad Monitors Engineering Assistance Requested
10. NEI 99-01 CMT Radiation / RCS Activity RCS Loss 3.A EAL BASES DOCUMENT Rev. 0 Page 255 of 292

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Reactor Coolant System Category: B. CT Radiation/ RCS Activity Degradation Threat: Potential Loss Threshold: None EAL BASES DOCUMENT Rev. 0 Page 256 of 292

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Reactor Coolant System Category: D. CT Integrity or Bypass Degradation Threat: Loss Threshold: None EAL BASES DOCUMENT Rev. 0 Page 257 of 292

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Reactor Coolant System Category: D. CT Integrity or Bypass Degradation Threat: Potential Loss Threshold: None EAL BASES DOCUMENT Rev. 0 Page 258 of 292

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Reactor Coolant System Category: E. Emergency Director Judgment Degradation Threat: Loss Threshold:

1. ANY condition in the opinion of the Emergency Director that indicates Loss of the RCS Barrier Basis:

Generic This threshold addresses any other factors that may be used by the Emergency Director in determining whether the RCS Barrier is lost. Plant-Specific The Emergency Director judgment threshold addresses any other factors relevant to determining if the RCS Barrier is lost. Such a determination should include imminent barrier degradation, barrier monitoring capability and dominant accident sequences.

  • Imminent barrier degradation exists if the degradation will likely occur within two hours based on a projection of current SAFETY SYSTEM performance. The term IMMINENT refers to the recognition of the inability to reach safety acceptance criteria before completion of ALL checks.
  • Barrier monitoring capability is decreased if there is a loss or lack of reliable indicators.

This assessment should include instrumentation operability concerns, readings from portable instrumentation and consideration of offsite monitoring results.

  • Dominant accident sequences lead to degradation of ALL fission product barriers and likely entry to the EOPs. The Emergency Director should be mindful of the Loss of AC power (Station Blackout) and ATWS EALs to assure timely emergency classification declarations.

DBNPS Basis Reference(s):

1. NEI 99-01 Emergency Director Judgment RCS Loss 6.A EAL BASES DOCUMENT Rev. 0 Page 259 of 292

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Reactor Coolant System Category: E. Emergency Director Judgment Degradation Threat: Potential Loss Threshold:

1. ANY condition in the opinion of the Emergency Director that indicates Potential Loss of the RCS Barrier Basis:

Generic This threshold addresses any other factors that may be used by the Emergency Director in determining whether the RCS Barrier is potentially lost. The Emergency Director should also consider whether or not to declare the barrier potentially lost in the event that barrier status cannot be monitored. Plant-Specific The Emergency Director judgment threshold addresses any other factors relevant to determining if the RCS Barrier is potentially lost. Such a determination should include imminent barrier degradation, barrier monitoring capability and dominant accident sequences.

  • Imminent barrier degradation exists if the degradation will likely occur within two hours based on a projection of current SAFETY SYSTEM performance. The term IMMINENT refers to the inability to reach final safety acceptance criteria before completing ALL checks.
  • Barrier monitoring capability is decreased if there is a loss or lack of reliable indicators.

This assessment should include instrumentation operability concerns, readings from portable instrumentation and consideration of offsite monitoring results.

  • Dominant accident sequences lead to degradation of ALL fission product barriers and likely entry to the EOPs. The Emergency Director should be mindful of the Loss of AC power (Station Blackout) and ATWS EALs to assure timely emergency classification declarations.

DBNPS Basis Reference(s):

1. NEI 99-01 Emergency Director Judgment RCS Potential Loss 6.A EAL BASES DOCUMENT Rev. 0 Page 260 of 292

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Containment Category: A. RCS or SG Tube Leakage Degradation Threat: Loss Threshold:

1. A leaking or RUPTURED SG is FAULTED outside of Containment Basis:

Generic This threshold addresses a leaking or RUPTURED Steam Generator (SG) that is also FAULTED outside of containment. The condition of the SG, whether leaking or RUPTURED, is determined in accordance with the thresholds for RCS Barrier Potential Loss 1.A.1 and Loss 1.A.1, respectively. This condition represents a bypass of the containment barrier. FAULTED is a defined term within the NEI 99-01 methodology; this determination is not necessarily dependent upon entry into, or diagnostic steps within, an EOP. For example, if the pressure in a steam generator is decreasing uncontrollably ([part of the FAULTED definition)] and the FAULTED steam generator isolation procedure is not entered because EOP user rules are dictating implementation of another procedure to address a higher priority condition; the steam generator is still considered FAULTED for emergency classification purposes. The FAULTED criterion establishes an appropriate lower bound on the size of a steam release that may require an emergency classification. Steam releases of this size are readily observable with normal Control Room indications. The lower bound for this aspect of the containment barrier is analogous to the lower bound criteria specified in IC SU3 SU4 for the fuel clad barrier (i.e., RCS activity values) and IC SU4 SU5 for the RCS barrier (i.e., RCS leak rate values). This threshold also applies to prolonged steam releases necessitated by operational considerations such as the forced steaming of a leaking or RUPTURED steam generator directly to atmosphere to cooldown the plant, or to drive an auxiliary (emergency) feed water pump. These types of conditions will result in a significant and sustained release of radioactive steam to the environment (and are thus similar to a FAULTED condition). The inability to isolate the steam flow without an adverse effect on plant cooldown meets the intent of a loss of containment. Steam releases associated with the expected operation of a SG power operated relief valve or safety relief valve do not meet the intent of this threshold. Such releases may occur intermittently for a short period of time following a reactor trip as operators process through emergency operating procedures to bring the plant to a stable condition and prepare to initiate a plant cooldown. Steam releases associated with the unexpected operation of a valve (e.g., a stuck-open safety valve) do meet this threshold. EAL BASES DOCUMENT Rev. 0 Page 261 of 292

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Following an SG tube leak or rupture, there may be minor radiological releases through a secondary-side system component (e.g., air ejectors, glad seal exhausters, valve packing, etc.). These types of releases do not constitute a loss or potential loss of containment but should be evaluated using the Recognition Category A R ICs. The emergency classification levelECLs resulting from primary-to-secondary leakage, with or without a steam release from the FAULTED SG, are summarized below. Affected SG is FAULTED Outside of Containment? P-to-S Leak Rate Yes No Less than or equal to 25 10 gpm No classification No classification Greater than 25 10 gpm for 15 Unusual Event per Unusual Event per minutes or longer SU4SU5 SU4SU5 Requires operation of a standby Site Area Emergency per charging (makeup) pump (RCS Alert per FA1 FS1 Barrier Potential Loss) Requires an automatic or manual Site Area Emergency per ECCS (SI) actuation (RCS Barrier Alert per FA1 FS1 Loss) There is no Potential Loss threshold associated with RCS or SG Tube Leakage. Plant-Specific None DBNPS Basis Reference(s):

1. DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture
2. NEI 99-01 RCS or SG Tube Leakage Containment Loss 1.A EAL BASES DOCUMENT Rev. 0 Page 262 of 292

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Containment Category: A. RCS or SG Tube Leakage Degradation Threat: Potential Loss Threshold: None EAL BASES DOCUMENT Rev. 0 Page 263 of 292

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Containment Category: B. Inadequate heat Removal Degradation Threat: Loss Threshold: None EAL BASES DOCUMENT Rev. 0 Page 264 of 292

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Containment Category: B. Inadequate heat Removal Degradation Threat: Potential Loss Threshold:

1. Calculated Clad Temperature in Region 3 or higher (DB-OP-02000 Figure 2)

AND Restoration procedures not effective within 15 min. (Note 1) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Basis: Generic This condition represents an IMMINENT core melt sequence, which, if not corrected, could lead to vessel failure and an increased potential for containment failure. For this condition to occur there must already have been a loss of the RCS Barrier AND the Fuel Clad Barrier. If implementation of a procedure(s) to restore adequate core cooling is not effective (successful) within 15 minutes, it is assumed that the event trajectory will likely lead to core melting and a subsequent challenge of the Containment Barrier. The restoration procedure is considered effective if core exit thermocouple readings are decreasing and/or if reactor vessel level is increasing. Whether or not the procedure(s) will be effective should be apparent within 15 minutes. The Emergency Director should escalate the emergency classification level as soon as it is determined that the procedure(s) will not be effective. Severe accident analyses (e.g., NUREG-1150) have concluded that function restoration procedures can arrest core degradation in a significant fraction of core damage scenarios, and that the likelihood of containment failure is very small in these events. Given this, it is appropriate to provide 15 minutes beyond the required entry point to determine if procedural actions can reverse the core melt sequence. Plant-Specific Indication of severe core cooling degradation is manifested by Calculated Clad Temperature in Region 3 (DB-OP-02000 Figure 2). Figure 2, Incore T/C Temperature vs. RCS Pressure for ICC, provides indication of how serious core conditions are based upon combinations of RCS pressure AND incore thermocouple temperatures. If the RCS P-T point is in Region 3, the cladding temperatures in the core may be 1400°F or higher. This is a very serious condition EAL BASES DOCUMENT Rev. 0 Page 265 of 292

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases and may lead to significant amounts of H2 production; core damage may be unavoidable as this represents a very serious inadequate core cooling condition (ref. 1, 2). The function restoration procedures are those emergency operating procedures that address the recovery of core cooling functions. The procedure is considered effective if the clad temperature is decreasing or if RCS water level is increasing (ref. 1, 2). DBNPS Basis Reference(s):

1. DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture
2. Bases and Deviation Document for DB-OP-02000
3. NEI 99-01 Inadequate Heat Removal Containment Potential Loss 2.A EAL BASES DOCUMENT Rev. 0 Page 266 of 292

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Containment Category: C. CT Radiation/RCS Activity Degradation Threat: Loss Threshold: None EAL BASES DOCUMENT Rev. 0 Page 267 of 292

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Containment Category: C. CT Radiation/RCS Activity Degradation Threat: Potential Loss Threshold:

1. RE 4596A or B > Table F-2 column CT Potential Loss (Note 9)

Table F-2 Containment Radiation - R/hr (RE 4596A or B) Time After S/D (Hrs.) RCS Loss FC Loss CT Potential Loss 0-1 1.50E+01 3.03E+03 1.40E+04 1-2 1.50E+01 2.56 E+03 1.18 E+04 2-8 1.50E+01 1.61 E+03 7.46 E+03 8-16 1.50E+01 1.14 E+03 5.28 E+03 16-24 1.50E+01 8.66 E+02 4.00 E+03

                >24                    1.50E+01                3.94 E+02            1.82 E+03 Note 9:   During a main steam line break in containment or LOCA with temperature >170F, there is a potential to induce transient errors into the output of RE4596A and B during the peak rate of temperature change.

Consult alternate indications. If the main steam line break is accompanied by core damage, this error is insignificant. Basis: Generic The radiation monitor reading corresponds to an instantaneous release of ALL reactor coolant mass into the containment, assuming that 20% of the fuel cladding has failed. This level of fuel clad failure is well above that used to determine the analogous Fuel Clad Barrier Loss and RCS Barrier Loss thresholds. NUREG-1228, Source Estimations During Incident Response to Severe Nuclear Power Plant Accidents, indicates the fuel clad failure must be greater than approximately 20% in order for there to be a major release of radioactivity requiring offsite protective actions. For this condition to exist there must already have been a loss of the RCS Barrier and the Fuel Clad Barrier. It is therefore prudent to treat this condition as a potential loss of containment, which would then escalate the emergency classification levelECL to a General Emergency. Plant-Specific The containment high range monitors, RE 4596A & B., monitor the gamma dose rate resulting from a postulated loss of coolant accident (LOCA). RE 4596A & B are located inside containment. The detector range is approximately 1 to 1E8 R/hr (logarithmic scale) (ref. 1). EAL BASES DOCUMENT Rev. 0 Page 268 of 292

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases The Table F-2 values, column CT Potential Loss represents, based on Calculation EP-EALCALC-DB-0701, the expected containment high range radiation monitor (RE 4596A & B) response based on a LOCA, for periods of 1, 2, 8, 16, 24 and 48 (>24) hours after shutdown with ~20% fuel failure (ref. 2). When evaluating fission product barrier integrity values in Table F-2, time after shutdown should be confirmed with the Control Room as the time that the reactor is tripped, and reactor power is verified to be lowering on the Intermediate Range (ref. 3). If time after shutdown is less than one hour (or the reactor is still critical), the 0-1 hour after shutdown value should be chosen. This is conservative as it represents sufficient time for plant conditions to deteriorate to the point that core damage may occur, and the activity released from the RCS into the containment atmosphere to reach equilibrium mixing throughout containment. During a main steam line break in containment or LOCA with temperature > 170ºF, there is a potential to induce transient errors (positive and negative) into the output of RE4596A & B during the peak rate of temperature change. Consult alternate indications. If the main steam line break or LOCA is accompanied by core damage this error is, however, insignificant (ref. 4). DBNPS Basis Reference(s):

1. UFSAR Section 7.13.3.1 Containment High Radiation Monitors
2. EP-EALCALC-DB-0701 Containment Radiation Monitor Readings Following Clad Damage (FC2 and CT2 Potential Loss)
3. DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture
4. NRC Information Notice 97-45 Supplement 1 Environmental Qualification Deficiency for Cables and Containment Penetration Pigtails
5. NEI 99-01 CMT Radiation / RCS Activity Containment Potential Loss 3.A EAL BASES DOCUMENT Rev. 0 Page 269 of 292

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Containment Category: D. CT Integrity or Bypass Degradation Threat: Loss Threshold:

1. Containment isolation is required AND EITHER:
  • Containment integrity has been lost based on Emergency Director judgment
  • UNISOLABLE pathway from Containment to the environment exists Basis:

Generic These thresholds address a situation where containment isolation is required and one of two conditions exists as discussed below. Users are reminded that there may be accident and release conditions that simultaneously meet both bulleted thresholds 4.A.1 and 4.A.2. 4.A.1First Threshold - Containment integrity has been lost, i.e., the actual containment atmospheric leak rate likely exceeds that associated with allowable leakage (or sometimes referred to as design leakage). Following the release of RCS mass into containment, containment pressure will fluctuate based on a variety of factors; a loss of containment integrity condition may (or may not) be accompanied by a noticeable drop in containment pressure. Recognizing the inherent difficulties in determining a containment leak rate during accident conditions, it is expected that the Emergency Director will assess this threshold using judgment, and with due consideration given to current plant conditions, and available operational and radiological data (e.g., containment pressure, readings on radiation monitors outside containment, operating status of containment pressure control equipment, etc.). Refer to the middle piping run of Figure 9-F-41. Two simplified examples are provided. One is leakage from a penetration and the other is leakage from an in-service system valve. Depending upon radiation monitor locations and sensitivities, the leakage could be detected by any of the four monitors depicted in the figure. Another example would be a loss or potential loss of the RCS barrier, and the simultaneous occurrence of two FAULTED locations on a steam generator where one fault is located inside containment (e.g., on a steam or feedwater line) and the other outside of containment. In this case, the associated steam line provides a pathway for the containment atmosphere to escape to an area outside the containment. Following the leakage of RCS mass into containment and a rise in containment pressure, there may be minor radiological releases associated with allowable (design) containment EAL BASES DOCUMENT Rev. 0 Page 270 of 292

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases leakage through various penetrations or system components. These releases do not constitute a loss or potential loss of containment but should be evaluated using the Recognition Category A R ICs. 4.A.2Second Threshold - Conditions are such that there is an UNISOLABLE pathway for the migration of radioactive material from the containment atmosphere to the environment. As used here, the term environment includes the atmosphere of a room or area, outside the containment, that may, in turn, communicate with the outside-the-plant atmosphere (e.g., through discharge of a ventilation system or atmospheric leakage). Depending upon a variety of factors, this condition may or may not be accompanied by a noticeable drop in containment pressure. Refer to the top piping run of Figure 9-F-41. In this simplified example, the inboard and outboard isolation valves remained open after a containment isolation was required (i.e., containment isolation was not successful). There is now an UNISOLABLE pathway from the containment to the environment. The existence of a filter is not considered in the threshold assessment. Filters do not remove fission product noble gases. In addition, a filter could become ineffective due to iodine and/or particulate loading beyond design limits (i.e., retention ability has been exceeded) or water saturation from steam/high humidity in the release stream. Leakage between two interfacing liquid systems, by itself, does not meet this threshold. Refer to the bottom piping run of Figure 9-F-41. In this simplified example, leakage in an RCP seal cooler is allowing radioactive material to enter the Auxiliary Building. The radioactivity would be detected by the Process Monitor. If there is no leakage from the closed water cooling system to the Auxiliary Building, then no threshold has been met. If the pump developed a leak that allowed steam/water to enter the Auxiliary Building, then second threshold 4.B would be met. Depending upon radiation monitor locations and sensitivities, this leakage could be detected by any of the four monitors depicted in the figure and cause the first threshold 4.A.1 to be met as well. Following the leakage of RCS mass into containment and a rise in containment pressure, there may be minor radiological releases associated with allowable containment leakage through various penetrations or system components. Minor releases may also occur if a containment isolation valve(s) fails to close but the containment atmosphere escapes to an enclosed system. These releases do not constitute a loss or potential loss of containment but should be evaluated using the Recognition Category A R ICs. The status of the containment barrier during an event involving steam generator tube leakage is assessed using Loss Threshold 1.A.1. Plant-Specific None EAL BASES DOCUMENT Rev. 0 Page 271 of 292

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases DBNPS Basis Reference(s):

1. NEI 99-01 CMT Integrity or Bypass Containment Loss 4.A EAL BASES DOCUMENT Rev. 0 Page 272 of 292

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Containment Category: D. CT Integrity or Bypass Degradation Threat: Loss Threshold:

2. Indications of RCS leakage outside of Containment Basis:

Generic Containment sump level, temperature, pressure and/or radiation levels will increase if reactor coolant mass is leaking into the containment. If these parameters have not increased, then the reactor coolant mass may be leaking outside of containment (i.e., a containment bypass sequence). Increases in sump level, temperature, pressure, flow and/or radiation level readings outside of the containment may indicate that the RCS mass is being lost outside of containment. Unexpected elevated readings and alarms on radiation monitors with detectors outside containment should be corroborated with other available indications to confirm that the source is a loss of RCS mass outside of containment. If the fuel clad barrier has not been lost, radiation monitor readings outside of containment may not increase significantly; however, other unexpected changes in sump levels, area temperatures or pressures, flow rates, etc. should be sufficient to determine if RCS mass is being lost outside of the containment. Refer to the middle piping run of Figure 9-F-41. In this simplified example, a leak has occurred at a reducer on a pipe carrying reactor coolant in the Auxiliary Building. Depending upon radiation monitor locations and sensitivities, the leakage could be detected by any of the four monitors depicted in the figure and cause threshold 4.AD.1 to be met as well. To ensure proper escalation of the emergency classification, the RCS leakage outside of containment must be related to the mass loss that is causing the RCS Loss and/or Potential Loss threshold 1.A.1 to be met. Plant-Specific Potential RCS leak pathways outside containment include (ref. 1, 2):

  • Decay Heat Removal
  • ECCS (Safety Injection)
  • Makeup and Purification
  • RC pump seals
  • RCS sample lines
  • RCS drain lines EAL BASES DOCUMENT Rev. 0 Page 273 of 292

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases DBNPS Basis Reference(s):

1. UFSAR Section 5.2.4.7 Leakage Identification
2. DB-OP-02522 Small RCS Leaks
3. NEI 99-01 CMT Integrity or Bypass Containment Loss EAL BASES DOCUMENT Rev. 0 Page 274 of 292

m w U) m o

      +se U)

U o o f o (o vt rD 6: c A) o g.o o E o o E o o dI m o o- o o ='o z-l f a) f f .;<

                    - o a)
            - g)        o
        !, 9)

(o a) o o o o ft 1fr. (oo 6T rd o-o= o>+

                            =    =cp A)
                            -    P.P c     I   9p

_o- '= g l--l (o fi;

                                 = +a o    ^vf ct   =<
                           < r'I o=
                                 =. Etr g)-l a'o    o 9f     -   -lu EO EE E=

ox g; gE 36_

                                  =tD iiH o

a T g) (o o t\) ul o tu (0 t\)

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Containment Category: D. CT Integrity or Bypass Degradation Threat: Potential Loss Threshold:

1. Containment pressure > 50.4 psia Basis:

Generic If containment pressure exceeds the design pressure, there exists a potential to lose the Containment Barrier. To reach this level, there must be an inadequate core cooling condition for an extended period of time; therefore, the RCS and Fuel Clad barriers would already be lost. Thus, this threshold is a discriminator between a Site Area Emergency and General Emergency since there is now a potential to lose the third barrier. Plant-Specific 50.4 psia (36 psig + elevation adjusted atmospheric pressure of 14.4 psia) is based on the containment design pressure (ref.1). DBNPS Basis Reference(s):

1. UFSAR Section 3.8.2.1 Containment Vessel
2. NEI 99-01 CMT Integrity or Bypass Containment Potential Loss 4.A EAL BASES DOCUMENT Rev. 0 Page 276 of 292

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Containment Category: D. CMT Integrity or Bypass Degradation Threat: Potential Loss Threshold:

2. Containment Hydrogen concentration > 4%

Basis: Generic The existence of an explosive mixture means, at a minimum, that the containment atmospheric hydrogen concentration is sufficient to support a hydrogen burn (i.e., at the lower deflagration limit). A hydrogen burn will raise containment pressure and could result in collateral equipment damage leading to a loss of containment integrity. It therefore represents a potential loss of the Containment Barrier. Plant-Specific Following a design basis accident, hydrogen gas may be generated inside the containment by reactions such as zirconium metal with water, corrosion of materials of construction and radiolysis of aqueous solution in the core and sump (ref. 1). The Containment Hydrogen Monitoring System is used to monitor the hydrogen concentration inside containment after a severe accident involving core damage. The containment hydrogen monitors (AI 5027 & AI 5028) are not required to be operated in the continuous mode, however, the system is required to be started up 30 minutes after containment sprays have been initiated (ref. 2). The lower limit for the occurrence of an in-containment hydrogen burn is approximately 4% (ref. 1). To generate such levels of combustible gas, loss of the Fuel Clad and RCS barriers must have occurred. With the Potential Loss of the containment barrier, the threshold hydrogen concentration, therefore, will likely warrant declaration of a General Emergency. DBNPS Basis Reference(s):

1. DBSAMG-TBD Davis-Besse Severe Accident Management Guidelines Technical Bases Document
2. UFSAR Section 7.13.3.4 Containment Hydrogen Monitors
3. NEI 99-01 CMT Integrity or Bypass Containment Potential Loss 4.B EAL BASES DOCUMENT Rev. 0 Page 277 of 292

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Containment Category: D. CMT Integrity or Bypass Degradation Threat: Potential Loss Threshold:

3. Containment pressure > 40 psia with < one full train of containment cooling, Table F-3, operating per design for 15 min. (Note 1)

Table F-3 Containment Cooling Full Train CT Spray Pumps CT Cooling Fans 2 0 1 1 0 2 Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Basis: Generic This threshold describes a condition where containment pressure is greater than the setpoint at which containment energy (heat) removal systems are designed to automatically actuate, and less than one full train of equipment is capable of operating per design. The 15-minute criterion is included to allow operators time to manually start equipment that may not have automatically started, if possible. This threshold represents a potential loss of containment in that containment heat removal/depressurization systems (e.g., containment sprays, ice condenser fans, etc., but not including containment venting strategies) are either lost or performing in a degraded manner. Plant-Specific The combination of Containment spray pumps and Containment cooling fan units considered to be a full train of containment cooling operating per design is shown in Table F-3 (ref. 1). SFAS 2 actuation automatically initiates Containment Air Coolers upon exceeding the Containment pressure high setpoint of 18.7 psia or low RCS pressure of 1600 psig. SFAS Level 4 actuation automatically initiates Containment Spray upon exceeding the Containment pressure high-high setpoint of 40 (nominal) psia (ref. 2, 3). EAL BASES DOCUMENT Rev. 0 Page 278 of 292

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases DBNPS Basis Reference(s):

1. UFSAR Section 6.2.2. Containment Vessel Heat Removal Systems
2. DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture
3. DBNPS Technical Specifications Table 3.3.5-1 Safety Features Actuation System Instrumentation
4. NEI 99-01 CMT Integrity or Bypass Containment Potential Loss 4.C EAL BASES DOCUMENT Rev. 0 Page 279 of 292

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Containment Category: F. Emergency Director Judgment Degradation Threat: Loss Threshold:

1. ANY condition in the opinion of the Emergency Director that indicates Loss of the Containment Barrier Basis:

Generic This threshold addresses any other factors that may be used by the Emergency Director in determining whether the Containment Barrier is lost. Plant-Specific The Emergency Director judgment threshold addresses any other factors relevant to determining if the Containment barrier is lost. Such a determination should include imminent barrier degradation, barrier monitoring capability and dominant accident sequences.

  • Imminent barrier degradation exists if the degradation will likely occur within two hours based on a projection of current SAFETY SYSTEM performance. The term IMMINENT refers to recognition of the inability to reach safety acceptance criteria before completion of ALL checks.
  • Barrier monitoring capability is decreased if there is a loss or lack of reliable indicators.

This assessment should include instrumentation operability concerns, readings from portable instrumentation and consideration of offsite monitoring results.

  • Dominant accident sequences lead to degradation of all fission product barriers and likely entry to the EOPs. The Emergency Director should be mindful of the Loss of AC power (Station Blackout) and ATWS EALs to assure timely emergency classification declarations.

DBNPS Basis Reference(s):

1. NEI 99-01 Emergency Director Judgment PC Loss 6.A EAL BASES DOCUMENT Rev. 0 Page 280 of 292

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Containment Category: F. Emergency Director Judgment Degradation Threat: Potential Loss Threshold:

1. ANY condition in the opinion of the Emergency Director that indicates Potential Loss of the Containment Barrier Basis:

Generic This threshold addresses any other factors that may be used by the Emergency Director in determining whether the Containment Barrier is lost. Plant-Specific The Emergency Director judgment threshold addresses any other factors relevant to determining if the Containment barrier is potentially lost. Such a determination should include imminent barrier degradation, barrier monitoring capability and dominant accident sequences.

  • Imminent barrier degradation exists if the degradation will likely occur within two hours based on a projection of current SAFETY SYSTEM performance. The term IMMINENT refers to recognition of the inability to reach safety acceptance criteria before completion of ALL checks.
  • Barrier monitoring capability is decreased if there is a loss or lack of reliable indicators.

This assessment should include instrumentation operability concerns, readings from portable instrumentation and consideration of offsite monitoring results.

  • Dominant accident sequences lead to degradation of ALL fission product barriers and likely entry to the EOPs. The Emergency Director should be mindful of the Loss of AC power (Station Blackout) and ATWS EALs to assure timely emergency classification declarations.

DBNPS Basis Reference(s):

1. NEI 99-01 Emergency Director Judgment PC Potential Loss 6.A EAL BASES DOCUMENT Rev. 0 Page 281 of 292

ATTACHMENT 3 Safe Shutdown Rooms/Areas Tables R-2 & H-2 Bases

Background

NEI 99-01 Revision 6 ICs AA3 and HA5 prescribe declaration of an Alert based on IMPEDED access to rooms or areas (due to either area radiation levels or hazardous gas concentrations) where equipment necessary for normal plant operations, cooldown or shutdown is located. These areas are intended to be plant operating mode dependent. Specifically the Developers Notes for AA3 and HA5 states: The site-specific list of plant rooms or areas with entry-related mode applicability identified should specify those rooms or areas that contain equipment which require a manual/local action as specified in operating procedures used for normal plant operation, cooldown and shutdown. Do not include rooms or areas in which actions of a contingent or emergency nature would be performed (e.g., an action to address an off-normal or emergency condition such as emergency repairs, corrective measures or emergency operations). In addition, the list should specify the plant mode(s) during which entry would be required for each room or area. The list should not include rooms or areas for which entry is required solely to perform actions of an administrative or record keeping nature (e.g., normal rounds or routine inspections). Further, as specified in IC HA5: The list need not include the Control Room if adequate engineered safety/design features are in place to preclude a Control Room evacuation due to the release of a hazardous gas. Such features may include, but are not limited to, capability to draw air from multiple air intakes at different and separate locations, inner and outer atmospheric boundaries, or the capability to acquire and maintain positive pressure within the Control Room envelope. EAL BASES DOCUMENT Rev. 0 Page 282 of 292

ATTACHMENT 3 Safe Shutdown Rooms/Areas Tables R-2 & H-2 Bases DBNPS Table R-2 and H-2 Bases NEI 99-01 Rev 06 addresses elevated radiation levels in certain plant rooms/areas sufficient to preclude or IMPEDE personnel from performing actions necessary to maintain normal plant operation, or to perform a normal plant cooldown and shutdown. DB-OP-06902, Power Operations Rev 46 was reviewed to determine what actions are necessary to maintain power operations. It was determined that over reasonable periods of time (days vice years) there are no actions outside the Control Room that are required to be performed to maintain normal operations. Eventually, a shutdown would be required if Technical Specification surveillance testing was not completed and you complied with the associated LCOs or based on consumable supplies being depleted. For the purpose of this table, no actions were determined to be required. The following table lists the locations that an operator may be dispatched in order perform a normal plant cooldown and shutdown. The review was completed using the following procedures as the controlling documents: DB-OP-06902, Power Operations R46 DB-OP-06903, Plant Cooldown R47 DB-OP-02504, Rapid Shutdown R20 In addition, DB-OP-06012 was reviewed to ensure the Decay Heat Removal System is aligned. At Davis-Besse, RCS Cooldown starts once both Steam Generators reach Low Level Limits during a power reduction (approximately 30% power). As a result, this review started with DB-OP-06902, Power Operations, Section 8, Turbine and Reactor Shutdown and then transitioned to DB-OP-06903, Plant Cooldown. Each step in the controlling procedures was evaluated to determine if the action was performed in the Control Room or in the plant. In-plant actions were evaluated and a determination was made whether or not the actions, if not performed, would prevent achieving cold shutdown. The following generic assumptions were applied:

  • Steps involving optional degasing of the RCS were not included since degasing the RCS is not required to reach cold shutdown.
  • Steps involving supplying Auxiliary Steam were not included since AFW and AVVs can be used to reach cold shutdown if Condenser vacuum is lost.
  • Steps involving Main Feedwater Pumps were not included since AFW and AVVs can be used to reach cold shutdown if Main Feedwater is not available.
  • Travel paths to the locations where the equipment is operated are not part of the determination, only the rooms where the equipment is actually operated are considered EAL BASES DOCUMENT Rev. 0 Page 283 of 292

ATTACHMENT 3 Safe Shutdown Rooms/Areas Tables R-2 & H-2 Bases as the affected room. Travel paths were not included because most locations can be reached via alternate travel paths if required due to a localized issue.

  • No assumptions made about which LPI Train is aligned for DHR Operation. Locations could be reduced by preselecting one train (typically Train 2) to provide this function. It is assumed that both trains are in a Standby LPI mode at the start of the event.

The minimum set of in-plant actions, associated locations, and operating modes to shut down and cool down the reactor are highlighted. The locations where those actions are performed comprise the rooms/areas in EAL Tables R-2 and H-2. The control room was not included in Table H-2 evaluation because the control room is governed by H6 series for Control Room Evacuation. UFSAR Section 6.4.2 Toxic Gas Protection Provisions states that no toxic or explosive materials are stored in volumes or locations, which pose a control room habitability hazard that exceeds emergency system capabilities. EAL RA3.1 addresses control room habitability relative to area radiation levels. EAL BASES DOCUMENT Rev. 0 Page 284 of 292

ATTACHMENT 3 Safe Shutdown Rooms/Areas Tables R-2 & H-2 Bases In Plant Task - If action not performed, does this Step Action Building Elevation Room Mode Procedure prevents cooldown shutdown? and Step 06902 Align CWRT to RCS No - Inventory and Boration requirements 8.2.2 Makeup. can be met from Control Room using N/A N/A N/A N/A BWST and BAATs. 06902 Turbine Overspeed trip No - This testing is not required. Testing 8.2.3 testing if required. could be performed on subsequent restart. N/A N/A N/A N/A 06902 Set condenser pressure to No - This action is not required to perform 8.3.9 Bullet 1.5 to 2.5 inches HgA using Shutdown - Cooldown. N/A N/A N/A N/A PCV1061. 06902 Attachment 8, Drain and No - This only affects efficiency or 8.3.9 Bullet Steam Trap Alignment for improves moisture removal. N/A N/A N/A N/A Shutdown 06902 Fill and Vent the SG No - This action facilitates SG Fill, Soak, 8.3.9 Bullet Blowdown lines, and Drains, but is not required to complete N/A N/A N/A N/A Shutdown - Cooldown. 06902 Place both Instrument Air No - Step improves response of air 8.3.9 Bullet dryers in service in parallel, system, but is not required. N/A N/A N/A N/A 06902 MDFP is in Standby in the No - MDFP could be used in AFW Mode 8.3.9 Bullet Main Feedwater mode and to reach Cold Shutdown. N/A N/A N/A N/A warm up is complete. 06902 Place the Auxiliary Boiler in No - Aux Steam will continue to be 8.3.9 Bullet service. supplied from Main Steam. If vacuum and N/A N/A N/A N/A therefore condenser is lost, steam can be dumped via AVVs. 6902 8.3.9 Transfer Auxiliary Steam No - Aux Steam will continue to be Bullet Loads from the Main Steam supplied from Main Steam. If vacuum and N/A N/A N/A N/A Reducing Station to the therefore condenser is lost, steam can be Auxiliary Boiler. dumped via AVVs. EAL BASES DOCUMENT Rev. 0 Page 285 of 292

ATTACHMENT 3 Safe Shutdown Rooms/Areas Tables R-2 & H-2 Bases In Plant Task - If action not performed, does this Step Action Building Elevation Room Mode Procedure prevents cooldown shutdown? and Step 6902 8.3.10 Perform Attachment 10, No - MDFP could be used in AFW Mode Bullet MDFP Operation. to reach Cold Shutdown. N/A N/A N/A N/A 6902 8.3.10 Closed the actuator cylinder No - This action facilitates SG Fill, Soak, Bullet equalizing valve for and Drains, but is not required to complete N/A N/A N/A N/A MS4531/MS4532 Shutdown - Cooldown. 6902 8.3.10 Place the SG Blowdown No - This action facilitates SG Fill, Soak, Bullet Lines in service. and Drains, but is not required to complete N/A N/A N/A N/A Shutdown - Cooldown. 6902 8.3.16 IF Main Turbine Overspeed No - This testing is not required. Testing Testing is required, could be performed on subsequent restart. N/A N/A N/A N/A 6902 8.3.17 Perform Attachment 13, No - This action completes Turbine Turbine Shutdown. Shutdown, but is not required to meet Cold N/A N/A N/A N/A Shutdown. 6902 8.3.30 Open the air isolation valve No - Since performance of Attachment 10 that was closed in is not required, neither is restoration. N/A N/A N/A N/A Attachment 10, MDFP Operation: 6902 8.3.31 Complete the shutdown of No - desired to complete MFPT shutdown, the running MFPT to Turning but will not prevent reaching cold N/A N/A N/A N/A Gear operation. shutdown. 6902 8.3.32 Perform Attachment 8, Drain No - This only affects efficiency or and Steam Trap Alignment improves moisture removal. N/A N/A N/A N/A for Shutdown, step 3.0. 6902 8.3.38 Transition to DB-OP-06903, No - This is a procedure routing step. Plant Cooldown N/A N/A N/A N/A 6903 3.3.10 Perform the following to read No - Action not required to reach cold Reactor Vessel Head O- shutdown. N/A N/A N/A N/A Ring pressure. EAL BASES DOCUMENT Rev. 0 Page 286 of 292

ATTACHMENT 3 Safe Shutdown Rooms/Areas Tables R-2 & H-2 Bases In Plant Task - If action not performed, does this Step Action Building Elevation Room Mode Procedure prevents cooldown shutdown? and Step 6903 3.12.1 Verify the requirements No - Action not required to reach cold pertaining to containment shutdown. closure control and N/A N/A N/A N/A protected equipment are initiated. 6903 3.12.2 Initiate Attachment 13, No - Action not required to reach cold Preparation of MU Filter 1 shutdown. N/A N/A N/A N/A for Hydrogen Peroxide Addition. 6903 3.13 Direct I & C Department to No - Action not required to reach cold perform Attachment 8, shutdown. Radiation Monitor N/A N/A N/A N/A Preparations for Plant Shutdown 6903 3.16 IF the RCS will be opened to No - Opening the RCS is not required to atmosphere, THEN begin to reach cold shutdown. reduce the RCS H2 N/A N/A N/A N/A concentration to less than 15 cc/kg. 6903 3.17 IF the Circulating Water No - Draining Circ Water is not required to System is to be drained, reach cold shutdown. THEN notify Chemistry to N/A N/A N/A N/A chemically shock it prior to bypassing the Cooling Tower. 6903 3.18 Remove TPCW pumps and No - Controlling temperature and heat exchangers from Shutdown of TPCW is not required to service, REFER TO DB-OP- reach cold shutdown. N/A N/A N/A N/A 06263, Turbine Plant Cooling Water 6903 3.21 Verify one of the Clean No - The BWST and the BAATs can be Waste Receiver Tanks is used from the Control Room for RCS N/A N/A N/A N/A aligned inventory and Boration. 6903 3.25 Begin making preparations No - Placing CTMT Purge in service is not to Start-up Containment required to reach cold shutdown. N/A N/A N/A N/A Vessel Purge. EAL BASES DOCUMENT Rev. 0 Page 287 of 292

ATTACHMENT 3 Safe Shutdown Rooms/Areas Tables R-2 & H-2 Bases In Plant Task - If action not performed, does this Step Action Building Elevation Room Mode Procedure prevents cooldown shutdown? and Step 6903 Place/remove a second seal No - Controlling a second seal return 3.25.2.a/d.3 return cooler in/from service. cooler not required to reach cold N/A N/A N/A N/A shutdown. 6903 3.35.2 Begin performing No - This action facilitates SG Fill, Soak, Attachment 5 SG Fill, Soak, and Drains, but is not required to reach N/A N/A N/A N/A and Drain. cold shutdown. 6903 3.47 Shutdown one RCP. No - The controlling procedure provides direction when CTMT is not accessible. N/A N/A N/A N/A That direction would be used. 6903 3.53 Isolate Core Flood Tank 1 Yes - Action is required to reduce RCS perform the following: Pressure. CFT 1 Outlet Valve power Rm 304 - Corridor Aux 585 1, 2, 3 restored at E11B to allow closure. Outside #3 MPR 6903 3.53 Isolate Core Flood Tank 2 Yes - Action is required to reduce RCS perform the following: Pressure. CFT 2 Outlet Valve power Rm 427 - #2 Electrical Aux 603 1, 2, 3 restored at F11A to allow closure. Penetration Room 06903 3.63 WHEN RCS pressure is No - The controlling procedure provides between 450 psig and 425 direction when CTMT is not accessible. N/A N/A N/A N/A psig THEN establish a 0/2 or That direction would be used. 2/0 RCP combination. 6903 3.64 Control Letdown Flow - No - This action aids in RCS cleanup, Open or throttle MU 83 which is not required to reach cold N/A N/A N/A N/A shutdown. 6903 3.64.1 IF its necessary to reduce No - This action allow lower Makeup Flow, the total makeup flow to the which would only be required in a very RCS by throttling MU 58A, slow cooldown. This action is not required N/A N/A N/A N/A NORMAL MAKEUP FLOW to reach cold shutdown. FE MU58 SOURCE/NEEDLE, 6903 3.66 WHEN Feedwater flow No - This action would reduce FW flow via reduces to the point where the MFW header, which would only be level control using the required in a very slow cooldown. This N/A N/A N/A N/A Feedwater Startup Valves is action is not required to reach cold difficult, Throttle FW 139 shutdown. and/or FW44. EAL BASES DOCUMENT Rev. 0 Page 288 of 292

ATTACHMENT 3 Safe Shutdown Rooms/Areas Tables R-2 & H-2 Bases In Plant Task - If action not performed, does this Step Action Building Elevation Room Mode Procedure prevents cooldown shutdown? and Step 6903 3.68 Start actions to reduce No - This action will allow cooldown to feedwater temperature to proceed quicker if on Main Feedwater, but N/A N/A N/A N/A 200F. is not required to reach cold shutdown. 6903 4.17.1 To prevent a transfer of Yes - Action is required to align LPI Train Room 236 water from the RCS to the 1 for DHR Operations. Aux 565 #2 Mechanical 1, 2, 3 BWST, close DH10. Penetration Room 6903 4.17.1 To prevent a transfer of Yes - Action is required to align LPI Train Room 236 water from the RCS to the 2 for DHR Operations. Aux 565 #2 Mechanical 1, 2, 3 BWST, close DH26. Penetration Room 6903 4.17.2 Close breaker BF 1130 in Yes - Action is required to align either LPI F11A, for DH 11 Train 1 or 2 for DHR Operations. Rm 427 - #2 Electrical Aux 603 1, 2, 3 Penetration Room 6903 4.17.2 Close breaker BE 1183 in Yes - Action is required to align either LPI E11B, for DH 12. Train 1 or 2 for DHR Operations. Rm 304 - Corridor Aux 585 1, 2, 3 Outside #3 MPR 6903 If DH12 does not open Yes - Action is required to align either LPI 4.17.8.d (which is generally does Train 1 or 2 for DHR Operations. Rm 304 - Corridor Aux 585 1, 2, 3 not), Install jumper. Outside #3 MPR 6903 4.20 Begin reducing Deaerator No - This action will allow cooldown to and Feedwater temperature proceed quicker if on Main Feedwater, but N/A N/A N/A N/A to less than 120F. is not required to reach cold shutdown. 6903 4.21 WHEN RCS temperature is No - This action will prevent low temp-high less than 280ºF, THEN pressure conditions in RCS, but is not N/A N/A N/A N/A disable HPI by racking out required to reach cold shutdown. breakers. 6903 4.22.3 IF MSIVs are to be stroked No - Action is not required to reach cold or pinned, THEN stroke test shutdown. N/A N/A N/A N/A MS100 and MS101. 6903 4.25 Place a LPI Train in service Yes - This action is performed per DB-OP-as a Decay Heat Removal 06012. However, since numerous actions N/A N/A N/A N/A Train, are required each action in that procedure was assessed separately. EAL BASES DOCUMENT Rev. 0 Page 289 of 292

ATTACHMENT 3 Safe Shutdown Rooms/Areas Tables R-2 & H-2 Bases In Plant Task - If action not performed, does this Step Action Building Elevation Room Mode Procedure prevents cooldown shutdown? and Step 6903 4.28 Remove the Auxiliary No - Action is not required to reach cold Feedwater System from shutdown. N/A N/A N/A N/A service. 6903 4.30 IF SG 1 level control No - Action is not required to reach cold becomes difficult due to shutdown. N/A N/A N/A N/A excess flow through SP7B, adjust FW161/139. 6903 4.32 IF SG 2 level control No - Action is not required to reach cold becomes difficult due to shutdown. N/A N/A N/A N/A excess flow through SP7A, adjust FW162/44. 6903 4.34 WHEN RCS temperature is No - Cold shutdown has been reached. less than 200ºF, End of review using DB-OP-06903. N/A N/A N/A N/A 6012 3.5.5 Verify the CLOSE power No - Just prevents inadvertent start of LPI fuses for AC 112, DECAY pump 1 while transferring suction. SFAS N/A N/A N/A N/A HT PUMP 1-1, are removed. is already blocked. 6012 3.5.6 Verify BE 1187 (E11E), MV No - Just prevents possible valve motor DH64 LPI-HPI CROSS overload if stroked with RCS Suction N/A N/A N/A N/A CONN ISO VLV 1, is open. Source. 6012 3.5.10 Open BE 1121 (E11A), MV No - Just prevents inadvertent transfer of 2733 DH PUMP 1 SUCT BWST inventory to RCS if the valve N/A N/A N/A N/A VLV FRM BWST. opened. SFAS is already blocked. 6012 3.5.13 Close DH10*, DH PUMP 1 Yes - This action is required to align LPI Room 236 MINIMUM COOLDOWN Train 1 or 2 for DHR Operations. Aux 565 #2 Mechanical 1, 2, 3 ISOLATION. Penetration Room 6012 3.5.17 Open BE 1126 (E11D), MV No - Just prevent inadvertent loss of DHR 1517 DH NORM SUCT LINE Train 1 suction from RCS is valve is N/A N/A N/A N/A 1 ISO VLV. stroked closed. 6012 3.6.5 Verify the CLOSE power No - Just prevents inadvertent start of LPI fuses for AD 112, DECAY pump 2 while transferring suction. SFAS N/A N/A N/A N/A HT PUMP 1-2, are removed. is already blocked. EAL BASES DOCUMENT Rev. 0 Page 290 of 292

ATTACHMENT 3 Safe Shutdown Rooms/Areas Tables R-2 & H-2 Bases In Plant Task - If action not performed, does this Step Action Building Elevation Room Mode Procedure prevents cooldown shutdown? and Step 6012 3.6.6 Verify BE 1195 (F11E), MV No - Just prevents possible valve motor DH63 LPI-HPI CROSS overload if stroked with RCS Suction N/A N/A N/A N/A CONN ISO VLV 2, is open. Source. 6012 3.6.11 Open BF 1134 (F11C), MV No - Just prevents inadvertent transfer of 2734 DH PMP 2 SUCT VLV BWST inventory to RCS if the valve N/A N/A N/A N/A FRM BWST. opened. SFAS is already blocked. 6012 3.6.14 Close DH10*, DH PUMP 1 Yes - Action is required to align LPI Train Room 236 MINIMUM COOLDOWN 1 or 2 for DHR Operations. Aux 565 #2 Mechanical 1, 2, 3 ISOLATION. Penetration Room 6012 3.6.19 Open BF1129 (F11C), MV No - Prevents inadvertent loss of DHR 1518 DH NORM SUCT LINE Train 2 suction from RCS is valve is N/A N/A N/A N/A 2 ISO VLV. stroked closed. 6012 3.6.27 Verify the CLOSE power No - If not initially removed, then fuses for AD 112. reinstalling will not be required. N/A N/A N/A N/A 6012 3.7.8.a Station an operator at DH No - Operator only stationed for Pump 1. monitoring function. Action is not required N/A N/A N/A N/A to reach Cold Shutdown. 6012 3.7.8.d Verify DH59, DH PUMP 1 No - Opening this valve provides the DISCHARGE SAMPLE capability to sample RCS inventory from N/A N/A N/A N/A ISOL, is open. the DHR system. 6012 3.8.8.a Station an operator at DH No - Operator only stationed for Pump 2. monitoring function. Action is not required N/A N/A N/A N/A to reach Cold Shutdown. 6012 3.8.8.d Verify DH60, DH PUMP 2 No - Opening this valve provides the DISCHARGE SAMPLE capability to sample RCS inventory from N/A N/A N/A N/A ISOL, is open. the DHR system. Note: The information in the above table is included for historical reference information only and based upon the procedure revision numbers referenced in the DBNPS Table R-2 and H-2 Bases summary. EAL BASES DOCUMENT Rev. 0 Page 291 of 292

ATTACHMENT 3 Safe Shutdown Rooms/Areas Tables R-2 & H-2 Bases Table R-2 & H-2 Results Table R-2 & H-2 Safe Shutdown Rooms/Areas Room/Area Mode Applicability Aux Bldg. 565 ele. Room 236 #2 Mechanical Penetration Room 1, 2, 3 Aux Bldg. 585 ele. Room 304 corridor outside #3 Mechanical Penetration Room 1, 2, 3 Aux Bldg. 603 ele. Room 427 - #2 Electrical Penetration Room 1, 2, 3 EAL BASES DOCUMENT Rev. 0 Page 292 of 292

Evaluation of Proposed License Amendment Attachment 3 Davis-Besse Nuclear Power Station NEI 99-01, Revision 6, EAL Comparison Matrix (118 Pages Follow)

Davis-Besse Nuclear Power Station NEI 99-01 Revision 6 EAL Comparison Matrix Revision 0

Table of Contents Section Page Introduction ---------------------------------------------------------------------------------------------------------------------------------------------------------1 Comparison Matrix Format -------------------------------------------------------------------------------------------------------------------------------------1 EAL Wording -------------------------------------------------------------------------------------------------------------------------------------------------------1 EAL Emphasis Techniques -------------------------------------------------------------------------------------------------------------------------------------1 Global Differences ------------------------------------------------------------------------------------------------------------------------------------------------1 Differences and Deviations -------------------------------------------------------------------------------------------------------------------------------------3 Category A - Abnormal Rad Levels / Rad Effluent ----------------------------------------------------------------------------------------------------- 13 Category C - Cold Shutdown / Refueling System Malfunction -------------------------------------------------------------------------------------- 30 Category D - Permanently Defueled Station Malfunction -------------------------------------------------------------------------------------------- 51 Category E - Independent Spent Fuel Storage Installation (ISFSI) -------------------------------------------------------------------------------- 53 Category F - Fission Product Barrier Degradation ----------------------------------------------------------------------------------------------------- 55 Category H - Hazards and Other Conditions Affecting Plant Safety ------------------------------------------------------------------------------- 69 Category S - System Malfunction -------------------------------------------------------------------------------------------------------------------------- 90 Table 1 - Perry EAL Categories/Subcategories ----------------------------------------------------------------------------------------------------------5 Table 2 - NEI / Perry EAL Identification Cross-Reference ---------------------------------------------------------------------------------------------6 Table 3 - Summary of Deviations -------------------------------------------------------------------------------------------------------------------------- 12 i of i

Introduction these criteria in cases when following the criteria would introduce undesirable This document provides a line-by-line comparison of the Initiating Conditions complications in the EAL layout. (ICs), Mode Applicability and Emergency Action Levels (EALs) in NEI 99-01,

  • Upper case-bold print is used for the logic terms AND, OR and Revision 6, Development of Emergency Action Levels for Non-Passive EITHER and as well as the terms, ANY and ALL.

Reactors (ADAMS Accession Number ML110240324), and the Davis-Besse

  • Bold font is used for certain logic terms, negative terms (not, Nuclear Power Station (DBNPS) ICs, Mode Applicability and EALs. This cannot, etc.).

document provides a means of assessing DBNPS differences and deviations from the NRC endorsed guidance given in NEI 99-01. Discussion of DBNPS

  • Upper case print is reserved for defined terms, acronyms, system EAL bases and lists of source document references are given in the EAL abbreviations, logic terms (and, or, etc. when not used as a Technical Bases Document. It is, therefore, advisable to reference the EAL conjunction), annunciator window engravings.

Technical Bases Document for background information while using this

  • Three or more items in a list are normally introduced with ANY of document. As shown in Table 3, DBNPS took no deviations from the the following... or ALL of the following... Items of the list begin with generic NEI 99-01 Revision 6 guidance.

bullets when a priority or sequence is not inferred.

  • The use of AND/OR logic within the same EAL has been avoided Comparison Matrix Format when possible. When such logic cannot be avoided, indentation and The ICs and EALs discussed in this document are grouped according to NEI separation of subordinate contingent phrases is employed.

99-01 Recognition Categories. Within each Recognition Category, the ICs and EALs are listed in tabular format according to the order in which they are Global Differences given in NEI 99-01. Generally, each row of the comparison matrix provides the following information: The differences listed below generally apply throughout the set of EALs and are not repeated in the Justification sections of this document. The global

  • NEI EAL/IC identifier differences do not decrease the effectiveness of the intent of NEI 99-01.
  • NEI EAL/IC wording
1. The NEI phrase Notification of Unusual Event has been changed to
  • DBNPS EAL/IC identifier Unusual Event or abbreviated "UE" to reduce EAL-user reading burden.
  • DBNPS EAL/IC wording
2. NEI 99-01 IC Example EALs are implemented in separate plant
  • Description of any differences or deviations EALs to improve clarity and readability. For example, NEI lists all IC HU3 Example EALs under one IC. The corresponding DBNPS EALs EAL Emphasis Techniques appear as unique EALs (e.g., HU3.1 through HU3.4).

Due to the width of the table columns and table formatting constraints in this 3. Mode applicability identifiers (numbers/letter) modify the NEI 99-01 document, line breaks and indentation may differ slightly from the mode applicability names as follows: 1 - Power Operation, 2 - appearance of comparable wording in the source documents. NEI 99-01 is Startup, 3 - Hot Standby, 4 - Hot Shutdown, 5 - Cold Shutdown, 6 - the source document for the NEI EALs, the DBNPS EAL Technical Bases Refueling, D - Defueled, and All. NEI 99-01 defines Defueled as Document for the DBNPS EALs. follows: Reactor Vessel contains no irradiated fuel (full core off-load The print and paragraph formatting conventions summarized below guide during refueling or extended outage). presentation of the DBNPS EALs in accordance with the EAL writing criteria. 4. NEI 99-01 uses the terms greater than, less than, greater than or Space restrictions in the EAL table of this document sometimes override equal to, etc. in the wording of some example EALs. For consistency 1 of 116

and reduce EAL-user reading burden, DBNPS has adopted use of when the plant is in Cold Shutdown, Refueling or Boolean symbols in place of the NEI 99-01 text modifiers within the Defueled mode. EAL wording. The purpose of the groups is to avoid review of hot

5. min. is the standard abbreviation for minutes and is used to condition EALs when the plant is in a cold condition and reduce EAL user reading burden. avoid review of cold condition EALs when the plant is in a
6. The EAL Bases document has a Generic basis section and a Plant- hot condition. This approach significantly minimizes the Specific basis section. The Generic basis section provides a total number of EALs that must be reviewed by the EAL-description of the rationale for the EAL as provided in NEI 99-01, user for a given plant condition, reduces EAL-user Revision 6, and the Plant-Specific basis section provides DBNPS- reading burden and, thereby, speeds identification of the relevant information concerning the EAL. The sections have been EAL that applies to the emergency.

separated to reduce EAL user reading burden. The Plant-Specific b. Within each of the above three groups, assignment of and Generic basis sections were reviewed to ensure there was no EALs to categories/subcategories - Category and conflict between the intent of the Generic NEI 99-01, Revision 6 subcategory titles are selected to represent conditions basis and the associated Plant-Specific basis. that are operationally significant to the EAL-user.

7. IC/EAL identification: Subcategories are used as necessary to further divide the EALs of a category into logical sets of possible
  • NEI Recognition Category A Abnormal Radiation Levels/ emergency classification thresholds. The DBNPS EAL Radiological Effluents has been changed to Category R categories/subcategories and their relationship to NEI Abnormal Rad Levels / Rad Effluent. The designator R is Recognition Categories are listed in Table 1.

more intuitively associated with radiation (rad) or radiological c. Unique identification of each EAL - Four characters events. NEI IC designators beginning with A have likewise comprise the EAL identifier as illustrated in Figure 1. been changed to R.

  • NEI 99-01 defines the thresholds requiring emergency Figure 1 - EAL Identifier classification (example EALs) and assigns them to ICs which, in turn, are grouped in Recognition Categories. EAL Identifier XXX.X
  • The DBNPS IC/EAL scheme includes the following features: Category (R, H, E, S, F, C) Sequential number within subcategory/classification Emergency classification (G, S, A, U) Subcategory number (1 if no subcategory)
a. Division of the NEI EAL set into three groups:

o EALs applicable under all plant operating modes - This group would be reviewed by the EAL-user any The first character is a letter associated with the category time emergency classification is considered. in which the EAL is located. The second character is a letter associated with the emergency classification level o EALs applicable only under hot operating modes - (G for General Emergency, S for Site Area Emergency, A This group would only be reviewed by the EAL-user for Alert, and U for Notification of Unusual Event). The when the plant is in Hot Shutdown, Hot Standby, third character is a number associated with one or more Startup or Power Operation mode. subcategories within a given category. Subcategories are o EALs applicable only under cold operating modes - sequentially numbered beginning with the number 1. If a This group would only be reviewed by the EAL-user category does not have a subcategory, this character is 2 of 116

assigned the number 1. The fourth character is a different between the basis scheme guidance and the DBNPS proposed number preceded by a period for each EAL within a EAL. subcategory. EALs are sequentially numbered within the Administrative changes that do not actually change the textual content are emergency classification level of a subcategory beginning neither differences nor deviations. Likewise, any format change that does not with the number 1. alter the wording of the IC or EAL is considered neither a difference nor a The EAL identifier is designed to fulfill the following deviation. objectives: The following are examples of differences: o Uniqueness - The EAL identifier ensures that there

  • Choosing the applicable EAL based upon plant type (i.e., BWR vs.

can be no confusion over which EAL is driving the PWR). need for emergency classification.

  • Using a numbering scheme other than that provided in NEI 99-01 o Speed in locating the EAL of concern - When the that does not change the intent of the overall scheme.

EALs are displayed in a matrix format, knowledge of the EAL identifier alone can lead the EAL-user to

  • Where the NEI 99-01 guidance specifically provides an option to not the location of the EAL within the classification include an EAL if equipment for the EAL does not exist at DBNPS matrix. The identifier conveys the category, (e.g., automatic real-time dose assessment capability).

subcategory and classification level. This assists

  • Pulling information from the bases section up to the actual EAL that ERO responders (who may not be in the same does not change the intent of the EAL.

facility as the ED) to find the EAL of concern in a timely manner without the need for a word

  • Choosing to state ALL Operating Modes are applicable instead of description of the classification threshold. stating N/A, or listing each mode individually under the Abnormal Rad Level/Radiological Effluent and Hazard and Other Conditions o Possible classification upgrade - The Affecting Plant Safety sections.

category/subcategory/identifier scheme helps the EAL-user find higher emergency classification EALs

  • Using synonymous wording (e.g., greater than or equal to vs. at or that may become active if plant conditions worsen. above, less than or equal vs. at or below, greater than or less than vs. above or below, etc.)

Table 2 lists the DBNPS ICs and EALs that correspond to the NEI ICs/Example EALs when the above EAL/IC

  • Adding DBNPS equipment/instrument identification and/or noun organization and identification scheme is implemented. names to EALs.
  • Combining like ICs that are exactly the same but have different Differences and Deviations operating modes as long as the intent of each IC is maintained and the overall progression of the EAL scheme is not affected.

In accordance NRC Regulatory Issue Summary (RIS) 2003-18 Use of Nuclear Energy Institute (NEI) 99-01, Methodology for Development of

  • Any change to the IC and/or EAL, and/or basis wording, as stated in Emergency Action Levels Supplements 1 and 2, a difference is an EAL NEI 99-01, that does not alter the intent of the IC and/or EAL, i.e.,

change in which the basis scheme guidance differs in wording but agrees in the IC and/or EAL continues to: meaning and intent, such that classification of an event would be the same, o Classify at the correct classification level. whether using the basis scheme guidance or the DBNPS EAL. A deviation is o Logically integrate with other EALs in the EAL scheme. an EAL change in which the basis scheme guidance differs in wording and is altered in meaning or intent, such that classification of the event could be 3 of 116

o Ensure that the resulting EAL scheme is complete (i.e., The Difference Justification columns in the remaining sections of this classifies all potential emergency conditions). document identify each difference between the NEI 99-01 IC/EAL wording The following are examples of deviations: and the DBNPS IC/EAL wording. An explanation that justifies the reason for each difference is then provided. In each case, however, the differences do

  • Use of altered mode applicability. not decrease the effectiveness of the intent of NEI 99-01. Table 3 provides a
  • Altering key words or time limits. summary list of DBNPS deviations from NEI 99-01, Revision 6, and no deviations were identified.
  • Changing words of physical reference (protected area, safety-related equipment, etc.).
  • Eliminating an IC. This includes the removal of an IC from the Fission Product Barrier Degradation category as this impacts the logic of Fission Product Barrier ICs.
  • Changing a Fission Product Barrier from a Loss to a Potential Loss or vice-versa.
  • Not using NEI 99-01 definitions as the intent is for all NEI 99-01 users to have a standard set of defined terms as defined in NEI 99-
01. Differences due to plant types are permissible (BWR or PWR).

Verbatim compliance to the wording in NEI 99-01 is not necessary as long as the intent of the defined word is maintained. Use of the wording provided in NEI 99-01 is encouraged since the intent is for all users to have a standard set of defined terms as defined in NEI 99-01.

  • Any change to the IC and/or EAL, and/or basis wording as stated in NEI 99-01 that does alter the intent of the IC and/or EAL, i.e., the IC and/or EAL:

o Does not classify at the classification level consistent with NEI 99-01. o Is not logically integrated with other EALs in the EAL scheme. o Results in an incomplete EAL scheme (i.e., does not classify all potential emergency conditions). 4 of 116

Table 1 - DBNPS EAL Categories/Subcategories DBNPS EALs NEI Category Subcategory Recognition Category Group: All Operating Mode: 1 - Radiological Effluent Abnormal Rad Levels/Radiological Effluent R - Abnormal Rad Levels/Rad Effluent 2 - Irradiated Fuel Event ICs/EALs 3 - Area Radiation Levels 1 - Security Hazards and Other Conditions Affecting 2 - Seismic Event Plant Safety ICs/EALs 3 - Natural or Technological Hazard H - Hazards and Other Conditions Affecting 4 - Fire Plant Safety 5 - Hazardous Gas 6 - Control Room Evacuation 7 - ED Judgment E - Dry Fuel Storage Facility (DFSF) 1 - Confinement Boundary ISFSI ICs/EALs Group: Hot Conditions: 1 - Loss of Emergency AC Power System Malfunction ICs/EALs 2 - Loss of DC Power 3 - Loss of Control Room Indications 4 - RCS Activity S -System Malfunction 5 - RCS Leakage 6 - RPS Failure 7 - Loss of Communications 8 - Containment Failure 9 - Hazardous Event Affecting Safety Systems F - Fission Product Barrier Degradation None Fission Product Barrier ICs/EALs Group: Cold Conditions: 1 - RCS Level Cold Shutdown./ Refueling System 2 - Loss of Emergency AC Power Malfunction ICs/EALs C - Cold Shutdown / Refueling System 3 - RCS Temperature Malfunction 4 - Loss of DC Power 5 - Loss of Communications 6 - Hazardous Event Affecting Safety Systems 5 of 116

Table 2 - NEI / DBNPS EAL Identification Cross-Reference NEI DBNPS Example IC Category and Subcategory EAL EAL AU1 1 R - Abnormal Rad Levels / Rad Effluent, 1 - Radiological Effluent RU1.1 AU1 2 R - Abnormal Rad Levels / Rad Effluent, 1 - Radiological Effluent RU1.1 AU1 3 R - Abnormal Rad Levels / Rad Effluent, 1 - Radiological Effluent RU1.2 AU2 1 R - Abnormal Rad Levels / Rad Effluent, 2 - Irradiated Fuel Event RU2.1 AA1 1 R - Abnormal Rad Levels / Rad Effluent, 1 - Radiological Effluent RA1.1 AA1 2 R - Abnormal Rad Levels / Rad Effluent, 1 - Radiological Effluent RA1.2 AA1 3 R - Abnormal Rad Levels / Rad Effluent, 1 - Radiological Effluent RA1.3 AA1 4 R - Abnormal Rad Levels / Rad Effluent, 1 - Radiological Effluent RA1.4 AA2 1 R - Abnormal Rad Levels / Rad Effluent, 2 - Irradiated Fuel Event RA2.1 AA2 2 R - Abnormal Rad Levels / Rad Effluent, 2 - Irradiated Fuel Event RA2.2 AA2 3 R - Abnormal Rad Levels / Rad Effluent, 2 - Irradiated Fuel Event RA2.3 AA3 1 R - Abnormal Rad Levels / Rad Effluent, 3 - Area Radiation Levels RA3.1 AA3 2 R - Abnormal Rad Levels / Rad Effluent, 3 - Area Radiation Levels RA3.2 AS1 1 R - Abnormal Rad Levels / Rad Effluent, 1 - Radiological Effluent RS1.1 AS1 2 R - Abnormal Rad Levels / Rad Effluent, 1 - Radiological Effluent RS1.2 AS1 3 R - Abnormal Rad Levels / Rad Effluent, 1 - Radiological Effluent RS1.3 6 of 116

NEI DBNPS Example IC Category and Subcategory EAL EAL AS2 1 R - Abnormal Rad Levels / Rad Effluent, 2 - Irradiated Fuel Event RS2.1 AG1 1 R - Abnormal Rad Levels / Rad Effluent, 1 - Radiological Effluent RG1.1 AG1 2 R - Abnormal Rad Levels / Rad Effluent, 1 - Radiological Effluent RG1.2 AG1 3 R - Abnormal Rad Levels / Rad Effluent, 1 - Radiological Effluent RG1.3 AG2 1 R - Abnormal Rad Levels / Rad Effluent, 2 - Irradiated Fuel Event RG2.1 CU1 1 C - Cold SD/ Refueling System Malfunction, 1 - RCS Level CU1.1 CU1 2 C - Cold SD/ Refueling System Malfunction, 1 - RCS Level CU1.2 CU2 1 C - Cold SD/ Refueling System Malfunction, 2 - Loss of Essential AC Power CU2.1 CU3 1 C - Cold SD/ Refueling System Malfunction, 3 - RCS Temperature CU3.1 CU3 2 C - Cold SD/ Refueling System Malfunction, 3 - RCS Temperature CU3.2 CU4 1 C - Cold SD/ Refueling System Malfunction, 4 - Loss of Essential DC Power CU4.1 CU5 1 C - Cold SD/ Refueling System Malfunction, 5 - Loss of Communications CU5.1 CU5 2 C - Cold SD/ Refueling System Malfunction, 5 - Loss of Communications CU5.2 CU5 3 C - Cold SD/ Refueling System Malfunction, 5 - Loss of Communications CU5.3 CA1 1 C - Cold SD/ Refueling System Malfunction, 1 - RCS Level CA1.1 CA1 2 C - Cold SD/ Refueling System Malfunction, 1 - RCS Level CA1.2 CA2 1 C - Cold SD/ Refueling System Malfunction, 1 - Loss of Essential AC Power CA2.1 CA3 1, 2 C - Cold SD/ Refueling System Malfunction, 3 - RCS Temperature CA3.1 7 of 116

NEI DBNPS Example IC Category and Subcategory EAL EAL CA6 1 C - Cold SD/ Refueling System Malfunction, 6 - Hazardous Event Affecting Safety Systems CA6.1 CS1 1 N/A N/A CS1 2 N/A N/A CS1 3 C - Cold SD/ Refueling System Malfunction, 1 - RCS Level CS1.1 CG1 1 N/A N/A CG1 2 C - Cold SD/ Refueling System Malfunction, 1 - RCS Level CG1.1 E-HU1 1 E - Dry Fuel Storage Facility (DFSF) EU1.1 FA1 1 F - Fission Product Barrier Degradation FA1.1 FS1 1 F - Fission Product Barrier Degradation FS1.1 FG1 1 F - Fission Product Barrier Degradation FG1.1 HU1 1 H - Hazards and Other Conditions Affecting Plant Safety, 1 - Security HU1.1 HU1 2 H - Hazards and Other Conditions Affecting Plant Safety, 1 - Security HU1.2 HU1 3 H - Hazards and Other Conditions Affecting Plant Safety, 1 - Security HU1.3 HU2 1 H - Hazards and Other Conditions Affecting Plant Safety, 2 - Seismic Event HU2.1 HU3 1 H - Hazards and Other Conditions Affecting Plant Safety, 3 - Natural or Technological Hazard HU3.1 HU3 2 H - Hazards and Other Conditions Affecting Plant Safety, 3 - Natural or Technological Hazard HU3.2 HU3 3 H - Hazards and Other Conditions Affecting Plant Safety, 3 - Natural or Technological Hazard HU3.3 HU3 4 H - Hazards and Other Conditions Affecting Plant Safety, 3 - Natural or Technological Hazard HU3.4 8 of 116

NEI DBNPS Example IC Category and Subcategory EAL EAL HU3 5 N/A N/A HU4 1 H - Hazards and Other Conditions Affecting Plant Safety, 4 - Fire HU4.1 HU4 2 H - Hazards and Other Conditions Affecting Plant Safety, 4 - Fire HU4.2 HU4 3 H - Hazards and Other Conditions Affecting Plant Safety, 4 - Fire HU4.3 HU4 4 H - Hazards and Other Conditions Affecting Plant Safety, 4 - Fire HU4.4 HU7 1 H - Hazards and Other Conditions Affecting Plant Safety, 7 - ED Judgment HU7.1 HA1 1 H - Hazards and Other Conditions Affecting Plant Safety, 1 - Security HA1.1 HA1 2 H - Hazards and Other Conditions Affecting Plant Safety, 1 - Security HA1.2 HA5 1 H - Hazards and Other Conditions Affecting Plant Safety, 5 - Hazardous Gas HA5.1 HA6 1 H - Hazards and Other Conditions Affecting Plant Safety, 6 - Control Room Evacuation HA6.1 HA7 1 H - Hazards and Other Conditions Affecting Plant Safety, 7 - ED Judgment HA7.1 HS1 1 H - Hazards and Other Conditions Affecting Plant Safety, 1 - Security HS1.1 HS6 1 H - Hazards and Other Conditions Affecting Plant Safety, 6 - Control Room Evacuation HS6.1 HS7 1 H - Hazards and Other Conditions Affecting Plant Safety, 7 - ED Judgment HS7.1 HG1 1 H - Hazards and Other Conditions Affecting Plant Safety, 1 - Security HG1.1 HG7 1 H - Hazards and Other Conditions Affecting Plant Safety, 7 - ED Judgment HG7.1 SU1 1 S - System Malfunction, 1 - Loss of Essential AC Power SU1.1 SU2 1 S - System Malfunction, 3 - Loss of Control Room Indications SU3.1 9 of 116

NEI DBNPS Example IC Category and Subcategory EAL EAL SU3 1 S - System Malfunction, 4 - RCS Activity SU4.1 SU3 2 S - System Malfunction, 4 - RCS Activity SU4.2 SU4 1 S - System Malfunction, 5 - RCS Leakage SU5.1 SU4 2 N/A N/A SU4 3 N/A N/A SU5 1 S - System Malfunction, 6 - RPS Failure SU6.1 SU5 2 S - System Malfunction, 6 - RPS Failure SU6.2 SU6 1 S - System Malfunction, 7 -Loss of Communications SU7.1 SU6 2 S - System Malfunction, 7 -Loss of Communications SU7.2 SU6 3 S - System Malfunction, 7 -Loss of Communications SU7.3 SU7 1 S - System Malfunction, 8 - Containment Failure SU8.1 SU7 2 S - System Malfunction, 8 - Containment Failure SU8.2 SA1 1 S - System Malfunction, 1 - Loss of Essential AC Power SA1.1 SA2 1 S - System Malfunction, 3 - Loss of Control Room Indications SA3.1 SA5 1 S - System Malfunction, 6 - RPS Failure SA6.1 SA9 1 S - System Malfunction, 8 - Hazardous Event Affecting Safety Systems SA9.1 SS1 1 S - System Malfunction, 1 - Loss of Essential AC Power SS1.1 SS5 1 S - System Malfunction, 6 - RPS Failure SS6.1 10 of 116

NEI DBNPS Example IC Category and Subcategory EAL EAL SS8 1 S - System Malfunction, 2 - Loss of Essential DC Power SS2.1 SG1 1 S - System Malfunction, 1 - Loss of Essential AC Power SG1.1 SG8 2 S - System Malfunction, 1 - Loss of Essential AC Power SG1.2 11 of 116

Table 3 - Summary of Deviations NEI DBNPS Description EAL IC Example EAL None None N/A N/A 12 of 116

Category A Abnormal Rad Levels / Radiological Effluent 13 of 116

NEI IC Wording and Mode DBNPS DBNPS IC Wording and Mode NEI IC# Difference Justification Applicability IC#(s) Applicability AU1 Release of gaseous or liquid RU1 Release of gaseous or liquid The DBNPS ODCM is the site-specific effluent release radioactivity greater than 2 times radioactivity greater than 2 times the controlling document. the (site-specific effluent release ODCM limits for 60 minutes or longer. controlling document) limits for MODE: ALL 60 minutes or longer. MODE: All NEI Ex. DBNPS NEI Example EAL Wording DBNPS EAL Wording Difference Justification EAL # EAL # 1 Reading on ANY effluent Station Vent Channel 1 Noble Gas Example EALs #1 and #2 have been combined into a single radiation monitor greater than 2 (RE 4598AA/BA) > 5.72E-03 Ci/cc EAL to simplify presentation. times the (site-specific effluent for 60 minutes or longer EAL #1 - The NEI phrase effluent radiation monitor release controlling document) OR greater than 2 times the (site-specific effluent release limits for 60 minutes or longer: controlling document) has been replaced with the DBNPS ANY of the following effluent monitors (site-specific monitor list and site-specific effluent radiation monitor and the two times the

                                                   > 2 times the high alarm setpoint threshold values corresponding                                                     ODCM limit.

established by a current radioactivity to 2 times the controlling discharge permit for 60 minutes or EAL #2 - The site-specific effluent radition monitors are document limits) RU1.1 longer: listed.

  • Waste Gas System Outlet (RE 2 Reading on ANY effluent 1822A or B).

radiation monitor greater than 2

  • Clean Waste System Outlet times the alarm setpoint (RE 1770A or B).

established by a current radioactivity discharge permit for

  • Miscellaneous Waste System 60 minutes or longer. Outlet (RE 1878A or B).
  • Discharge permit specified monitor.

(Notes 1, 2, 3) 3 Sample analysis for a gaseous RU1.2 Sample analysis for a gaseous or The DBNPS ODCM is the site-specific effluent release or liquid release indicates a liquid release indicates a controlling document. concentration or release rate concentration or release rate > 2 x greater than 2 times the (site-14 of 116

NEI Ex. DBNPS NEI Example EAL Wording DBNPS EAL Wording Difference Justification EAL # EAL # specific effluent release ODCM limits for 60 min. controlling document) limits for (Notes 1, 2) 60 minutes or longer. Notes z The Emergency Director N/A Note 1: The Emergency Director The classification timeliness and event level note has been should declare the Unusual should declare the event standardized across the DBNPS EAL scheme by Event promptly upon promptly upon determining referencing the "time limit" specified within the EAL determining that 60 minutes that time limit has been wording. has been exceeded, or will exceeded, or will likely be likely be exceeded. exceeded. z If an ongoing release is Note 2: If an ongoing release is The classification timeliness note has been standardized detected and the release detected and the release across the DBNPS EAL scheme by referencing the "time start time is unknown, start time is unknown, limit" specified within the EAL wording. assume that the release assume that the release duration has exceeded 60 duration has exceeded the minutes. specified time limit. z If the effluent flow past an Note 3: If the effluent flow past an Deleted the phrase due to actions to isolate the release effluent monitor is known to effluent monitor is known to path and revised with indicating that the release path is have stopped due to actions have stopped, indicating isolated to clarify note for the reader. to isolate the release path, that the release path is then the effluent monitor isolated, the effluent monitor reading is no longer valid for reading is no longer VALID classification purposes. for classification purposes. 15 of 116

NEI IC Wording and Mode DBNPS DBNPS IC Wording and Mode NEI IC# Difference Justification Applicability IC#(s) Applicability AU2 UNPLANNED loss of water level RU2 UNPLANNED loss of water level None above irradiated fuel. above irradiated fuel MODE: All MODE: ALL NEI Ex. DBNPS NEI Example EAL Wording DBNPS EAL Wording Difference Justification EAL # EAL # 1 a. UNPLANNED water RU2.1 UNPLANNED water level drop in the The SFP and Refueling Canal low water level are the site-level drop in the REFUELING REFUELING PATHWAY as indicated specific level alarms or indications. PATHWAY as indicated by ANY by ANY of the following: The site-specific radiation monitors are listed. The area of the following:

  • SFP level alarm of indication (Ll 1600) radiation monitors are listed in bullet format for clarification.

(site-specific level indications).

  • SFP level indication (Ll 4801 A/B)

AND

b. UNPLANNED rise in area
  • Refueling Canal low water level radiation levels as indicated alarm or indication (Ll 1627) by ANY of the following
  • Visual observation radiation monitors.

(site-specific list of area AND radiation monitors) UNPLANNED rise in corresponding area radiation levels as indicated by ANY of the following radiation monitors:

  • RE 8426 SFP Area
  • RE 8427 SFP Area
  • RE 8417 Fuel Handling Area
  • RE 8418 Fuel Handling Area
  • RE 8425 Equipment Hatch Area 16 of 116

DBNPS NEI IC# NEI IC Wording DBNPS IC Wording Difference Justification IC#(s) AA1 Release of gaseous or liquid RA1 Release of gaseous or liquid None radioactivity resulting in offsite radioactivity resulting in offsite dose dose greater than 10 mrem greater than 10 mrem TEDE or 50 TEDE or 50 mrem thyroid CDE. mrem thyroid CDE MODE: All MODE: ALL NEI Ex. DBNPS NEI Example EAL Wording DBNPS EAL Wording Difference Justification EAL # EAL # 1 Reading on ANY of the following RA1.1 Station Vent Channel 1 Noble Gas The DBNPS radiation monitors that detect radioactivity radiation monitors greater than (RE 4598 AB/BB) > 8.4E -02 Ci/cc effluent release to the environment and their threshold is the reading shown for 15 for 15 minutes or longer listed. minutes or longer: (Notes 1, 2, 3, 4) (site-specific monitor list and DBNPS does not have a liquid threshold limit for RA1.1. threshold values) The DBNPS liquid effluent limits are based on the liquid effluent concentration values given in 10CFR20 Appendix B Table 2 Column 2 (see Section 2.2.1 above). The 10CFR20 values are equivalent to the radionuclide concentrations which, if ingested continuously over the course of a year, would produce a total effective dose equivalent of 0.05 rem (50 millirem). The EPA PAGs are based on a TEDE dose from immersion, inhalation and deposition. The 10CFR20 limits and the EPA limits do not represent the same type of exposure and thus cannot be compared on a one to one basis. Additionally, significant dilution assumptions are incorporated in determining ODCM ingestion limits for liquid releases such that obtaining a dose of 10 mrem in one hour would require a discharge concentration above the effluent monitor threshold (ingestion of radioactivity from a liquid release at the site boundary is not practical). 17 of 116

Thus, DBNPS EALs will not contain a liquid effluent monitor threshold value that equates to 1% of the EPA PAG. 2 Dose assessment using actual RA1.2 Dose assessment using actual The site boundary is the site-specific receptor point. meteorology indicates doses meteorology indicates doses > 10 greater than 10 mrem TEDE or mrem TEDE or 50 mrem thyroid CDE 50 mrem thyroid CDE at or at or beyond the SITE BOUNDARY beyond (site-specific dose (Note 4) receptor point). 3 Analysis of a liquid effluent RA1.3 Analysis of a liquid effluent sample The site boundary is the site-specific receptor point. sample indicates a concentration indicates a concentration or release or release rate that would result rate that would result in doses > 10 in doses greater than 10 mrem mrem TEDE or 50 mrem thyroid CDE TEDE or 50 mrem thyroid CDE at or beyond the SITE BOUNDARY at or beyond (site-specific dose for 60 min. of exposure (Notes 1, 2) receptor point) for one hour of exposure. 4 Field survey results indicate RA1.4 Field survey results indicate EITHER The site boundary is the site-specific receptor point. EITHER of the following at or of the following at or beyond the SITE beyond (site-specific dose BOUNDARY: receptor point): Example 2 was revised to 60 min. instead of one hour to z Closed window dose rates > 10 align with previous example. z Closed window dose rates mR/hr expected to continue for greater than 10 mR/hr 60 min. expected to continue for 60 minutes or longer. z Analyses of field survey z Analyses of field survey samples indicate thyroid CDE samples indicate thyroid > 50 mrem for 60 min. of CDE greater than 50 mrem inhalation. for one hour of inhalation. (Notes 1, 2) Notes z The Emergency Director N/A Note 1: The Emergency Director The classification timeliness and event level note has been should declare the Alert should declare the event standardized across the DBNPS EAL scheme by referencing promptly upon determining promptly upon determining the "time limit" specified within the EAL wording. that the applicable time has that time limit has been been exceeded, or will likely exceeded, or will likely be be exceeded. exceeded. z If an ongoing release is 18 of 116

detected and the release Note 2: If an ongoing release is The classification timeliness note has been standardized start time is unknown, detected and the release across the DBNPS EAL scheme by referencing the "time assume that the release start time is unknown, limit" specified within the EAL wording. duration has exceeded 15 assume that the release minutes. duration has exceeded the specified time limit. z If the effluent flow past an effluent monitor is known to Note 3: If the effluent flow past an Deleted the phrase due to actions to isolate the release have stopped due to actions effluent monitor is known to path and revised with indicating that the release path is to isolate the release path, have stopped, indicating isolated to clarify note for the reader. then the effluent monitor that the release path is reading is no longer valid for isolated, the effluent monitor classification purposes. reading is no longer VALID for classification purposes. z The pre-calculated effluent monitor values presented in Note 4: The pre-calculated effluent EAL #1 should be used for monitor values presented in Incorporated site-specific EAL numbers associated with emergency classification EALs RA1.1, RS1.1 and generic EAL#1. assessments until the results RG1.1 should be used for from a dose assessment emergency classification using actual meteorology are assessments until the available. results from a dose assessment using actual meteorology are available. 19 of 116

DBNPS NEI IC# NEI IC Wording DBNPS IC Wording Difference Justification IC#(s) AA2 Significant lowering of water RA2 Significant lowering of water level None level above, or damage to, above, or damage to, irradiated fuel irradiated fuel. MODE: ALL MODE: All NEI Ex. DBNPS NEI Example EAL Wording DBNPS EAL Wording Difference Justification EAL # EAL # 1 Uncovery of irradiated fuel in the RA2.1 Uncovery of irradiated fuel in the None REFUELING PATHWAY. REFUELING PATHWAY 2 Damage to irradiated fuel RA2.2 Damage to irradiated fuel resulting in Deleted the NEI phrase from the fuel because it is resulting in a release of a release of radioactivity as indicated redundant to the preceding phrase irradiated fuel. radioactivity from the fuel as by a high radiation alarm on ANY of indicated by ANY of the the following radiation monitor Added the phrase by a high radiation alarm on to clarify the following radiation monitors: indications: indication on the site-specific radiation monitors. (site-specific listing of radiation

  • RE 8426 SFP Area monitors, and the associated
  • RE 8427 SFP Area Site-specific list of radiation monitors are listed in bullet readings, setpoints and/or
  • RE 8417 Fuel Handling Area format for clarification. Listed in bullet format for clarification.

alarms)

  • RE 8418 Fuel Handling Area
  • RE 8425 Equipment Hatch Area
  • RE 8446/8447 Fuel Handling Exhaust
  • RE 4598AA/BA Station Vent 3 Lowering of spent fuel pool level RA2.3 Lowering of spent fuel pool level to 10 Post-Fukushima order EA-12-051 (ref.1) required the to (site-specific Level 2 value). ft. installation of reliable SFP level indication capable of

[See Developer Notes] identifying normal level (Level 1), SFP level 10 ft. above the top of the fuel racks (Level 2) and SFP level at the top of the fuel racks (Level 3). 20 of 116

DBNPS NEI IC# NEI IC Wording DBNPS IC Wording Difference Justification IC#(s) AA3 Radiation levels that impede RA3 Radiation levels that IMPEDE access Revised RA3.2 mode applicability to align with mode access to equipment necessary to equipment necessary for normal dependent Table R-2. for normal plant operations, plant operations, cooldown or NEI 99-01 Revision 6 IC AA3 and HA5 prescribe the cooldown or shutdown shutdown. declaration of an Alert based upon IMPEDED access to MODE: All MODE: ALL (except for RA3.2 which rooms or areas where equipment necessary for normal plant is only applicable in 1 - Power operations, cooldown or shutdown is located. These areas Operation, 2 - Startup, 3 - Hot are intended to be plant-operating mode dependent. Standby Attachment 3 in the EAL Bases document provides a summary of the methodology, procedures, and locations reviewed to determine the minimum set of in-plant actions, associated locations, and operating modes necessary to shut down and cool down the reactor. The locations where those actions are performed comprise the rooms/areas in Table R-2 and H-2. NEI Ex. DBNPS NEI Example EAL Wording DBNPS EAL Wording Difference Justification EAL # EAL # 1 Dose rate greater than 15 mR/hr RA3.1 Dose rates > 15 mR/hr in EITHER of No other site-specific areas requiring continuous occupancy in ANY of the following areas: the following areas: exist at DBNPS. z Control Room

  • Control Room (RE 8430 or Revised ANY to EITHER since only 2 areas are listed 8431) z Central Alarm Station RE 8430 and 8431 monitors the Control room for area
  • CAS (RE 8435 or 8436) radiation. The CAS area does not have installed radiation z (other site-specific monitoring but RE 8435 and 8436 are in near proximity and areas/rooms) can be used to approximate CAS area radiation levels.

2 An UNPLANNED event results RA3.2 An UNPLANNED event results in The site-specific list of plant rooms or areas with entry-in radiation levels that prohibit or radiation levels that prohibit or related mode applicability are listed in Table R-2 for impede access to any of the IMPEDE access to ANY Table R-2 clarification. following plant rooms or areas: Safe Shutdown Rooms or Areas (Note 5) (site-specific list of plant rooms or areas with entry-related mode 21 of 116

applicability identified) Note If the equipment in the listed N/A Note 5 If the equipment in the listed None room or area was already area was already inoperable inoperable or out-of-service or out-of-service before the before the event occurred, then event occurred, then no no emergency classification is emergency classification is warranted. warranted. Table R-2 Safe Shutdown Rooms/Areas Room/Area Mode Applicability Aux Bldg. 565 ele. Room 236 #2 Mechanical Penetration 1, 2, 3 Room Aux Bldg. 585 ele. Room 304 corridor outside 1, 2, 3

                              #3 Mechanical Penetration Room Aux Bldg. 603 ele. Room 427 - #2 Electrical Penetration 1, 2, 3 Room 22 of 116

DBNPS NEI IC# NEI IC Wording DBNPS IC Wording Difference Justification IC#(s) AS1 Release of gaseous radioactivity RS1 Release of gaseous radioactivity None resulting in offsite dose greater resulting in offsite dose greater than than 100 mrem TEDE or 500 100 mrem TEDE or 500 mrem thyroid mrem thyroid CDE CDE MODE: All MODE: ALL NEI Ex. DBNPS NEI Example EAL Wording DBNPS EAL Wording Difference Justification EAL # EAL # 1 Reading on ANY of the following RS1.1 Station Vent Channel 1 Noble Gas (RE The DBNPS radiation monitors that detect radioactivity radiation monitors greater than 4598 AB/BB) > 8.4E -01 Ci/cc for 15 effluent release to the environment and their threshold are the reading shown for 15 minutes or longer (Notes 1, 2, 3, 4) listed. minutes or longer: (site-specific monitor list and threshold values) 2 Dose assessment using actual RS1.2 Dose assessment using actual The site boundary is the site-specific receptor point. meteorology indicates doses meteorology indicates doses > 100 greater than 100 mrem TEDE or mrem TEDE or 500 mrem thyroid CDE 500 mrem thyroid CDE at or at or beyond the SITE BOUNDARY beyond (site-specific dose (Note 4) receptor point) 3 Field survey results indicate RS1.3 Field survey results indicate EITHER The site boundary is the site-specific receptor point. EITHER of the following at or of the following at or beyond the SITE beyond (site-specific dose BOUNDARY: receptor point): z Closed window dose rates > z Closed window dose rates 100 mR/hr expected to continue greater than 100 mR/hr for 60 min. expected to continue for 60 z Analyses of field survey minutes or longer. samples indicate thyroid CDE z Analyses of field survey 500 mrem for 60 min. of samples indicate thyroid inhalation. CDE greater than 500 (Notes 1, 2) 23 of 116

mrem for one hour of inhalation. Notes z The Emergency Director Note 1: The Emergency Director The classification timeliness and event level note has been should declare the Site Area should declare the event standardized across the DBNPS EAL scheme by referencing Emergency promptly upon promptly upon determining the "time limit" specified within the EAL wording. determining that the that time limit has been applicable time has been exceeded, or will likely be exceeded, or will likely be exceeded. exceeded. The classification timeliness note has been standardized Note 2: If an ongoing release is z If an ongoing release is detected and the release across the DBNPS EAL scheme by referencing the "time limit" detected and the release start start time is unknown, specified within the EAL wording. time is unknown, assume that assume that the release the release duration has duration has exceeded the exceeded 15 minutes. specified time limit. z If the effluent flow past an Note 3: If the effluent flow past an Deleted the phrase due to actions to isolate the release path effluent monitor is known to effluent monitor is known to and revised with indicating that the release path is isolated to have stopped due to actions have stopped, indicating that clarify note for the reader. to isolate the release path, the release path is isolated, then the effluent monitor the effluent monitor reading reading is no longer valid for is no longer VALID for classification purposes. classification purposes. z The pre-calculated effluent Note 4: The pre-calculated effluent monitor values presented in monitor values presented in Incorporated site-specific EAL numbers associated with EAL #1 should be used for EALs RA1.1, RS1.1 and generic EAL#1. emergency classification RG1.1 should be used for assessments until the results emergency classification from a dose assessment assessments until the results using actual meteorology are from a dose assessment available. using actual meteorology are available. 24 of 116

DBNPS NEI IC# NEI IC Wording DBNPS IC Wording Difference Justification IC#(s) AS2 Spent fuel pool level at (site- RS2 Spent fuel pool level at the top of the Top of the fuel racks is the site specific Level 3. specific Level 3 description) fuel racks MODE: All NEI Ex. DBNPS NEI Example EAL Wording DBNPS EAL Wording Difference Justification EAL # EAL # Post-Fukushima order EA-12-051 (ref.1) required the 1 Lowering of spent fuel pool level RS2.1 Lowering of spent fuel pool level to 1 installation of reliable SFP level indication capable of to (site-specific Level 3 value) ft. identifying normal level (Level 1), SFP level 10 ft. above the top of the fuel racks (Level 2) and SFP level at the top of the fuel racks (Level 3). Indicated level of 1 ft. on LI4801A (primary) or LI4801B (Backup) corresponds approximately to 1 ft. above the top of the SFP racks (ref. 2). This is the site-specific Level three value to account for instrument uncertainties. 25 of 116

DBNPS NEI IC# NEI IC Wording DBNPS IC Wording Difference Justification IC#(s) AG1 Release of gaseous RG1 Release of gaseous radioactivity None radioactivity resulting in offsite resulting in offsite dose greater dose greater than 1,000 mrem than 1,000 mrem TEDE or 5,000 TEDE or 5,000 mrem thyroid mrem thyroid CDE CDE. MODE: ALL MODE: All NEI Ex. DBNPS NEI Example EAL Wording DBNPS EAL Wording Difference Justification EAL # EAL # 1 Reading on ANY of the RG1.1 Station Vent Channel 1 Noble Gas The DBNPS site specifc radiation monitors that detect radioactivity following radiation monitors (RE 4598 AB/BB) > 8.4E +00 effluent release to the environment monitor and threshold values greater than the reading shown Ci/cc for 15 minutes or longer are listed. for 15 minutes or longer: (Notes 1, 2, 3, 4) (site-specific monitor list and threshold values) 2 Dose assessment using actual RG1.2 Dose assessment using actual The site boundary is the site-specific receptor point. meteorology indicates doses meteorology indicates doses > greater than 1,000 mrem TEDE 1000 mrem TEDE or or 5,000 mrem thyroid CDE at 5000 mrem thyroid CDE at or or beyond (site-specific dose beyond the SITE BOUNDARY receptor point). (Note 4) 3 Field survey results indicate RG1.3 Field survey results indicate The site boundary is the site-specific receptor point. EITHER of the following at or EITHER of the following at or beyond (site-specific dose beyond the SITE BOUNDARY: z Closed window dose rates > receptor point): 1000 mR/hr expected to z Closed window dose rates continue for 60 min. greater than 1,000 mR/hr z Analyses of field survey expected to continue for 60 samples indicate thyroid CDE minutes or longer. > 5000 mrem for 60 min. of z Analyses of field survey inhalation. samples indicate thyroid (Notes 1, 2) 26 of 116

CDE greater than 5,000 mrem for one hour of inhalation. Notes z The Emergency Director Note 1: The Emergency Director The classification timeliness note has been standardized across should declare the Site Area should declare the the DBNPS EAL scheme by referencing the "time limit" specified Emergency promptly upon event promptly upon within the EAL wording. determining that the determining that time applicable time has been limit has been exceeded, or will likely be exceeded, or will likely exceeded. be exceeded. z If an ongoing release is Note 2: If an ongoing release is The classification timeliness note has been standardized across detected and the release detected and the the DBNPS EAL scheme by referencing the "time limit" specified start time is unknown, release start time is within the EAL wording. assume that the release unknown, assume that duration has exceeded 15 the release duration has minutes. exceeded the specified time limit. z If the effluent flow past an effluent monitor is known to Note 3: If the effluent flow past Deleted the phrase due to actions to isolate the release path and have stopped due to actions an effluent monitor is revised with indicating that the release path is isolated to clarify to isolate the release path, known to have stopped, note for the reader. then the effluent monitor indicating that the reading is no longer valid for release path is isolated, classification purposes. the effluent monitor reading is no longer z The pre-calculated effluent VALID for classification monitor values presented in purposes. EAL #1 should be used for emergency classification Note 4: The pre-calculated assessments until the results effluent monitor values from a dose assessment presented in EALs Incorporated site-specific EAL numbers associated with generic using actual meteorology are RA1.1, RS1.1 and EAL#1. available. RG1.1 should be used for emergency classification assessments until the results from a dose assessment using 27 of 116

actual meteorology are available. 28 of 116

DBNPS NEI IC# NEI IC Wording DBNPS IC Wording Difference Justification IC#(s) AG2 Spent fuel pool level cannot be RG2 Spent fuel pool level cannot be Top of the fuel racks is the site specific Level 3. restored to at least (site-specific restored to at least the top of the fuel Level 3 description) for 60 racks for 60 minutes or longer minutes or longer MODE: ALL MODE: All NEI Ex. DBNPS NEI Example EAL Wording DBNPS EAL Wording Difference Justification EAL # EAL # Post-Fukushima order EA-12-051 (ref.1) required the 1 Spent fuel pool level cannot be RG2.1 Spent fuel pool level cannot be installation of reliable SFP level indication capable of restored to at least (site-specific restored to at least 1 ft. for > 60 min. identifying normal level (Level 1), SFP level 10 ft. above the Level 3 value) for 60 minutes or (Note 1) top of the fuel racks (Level 2) and SFP level at the top of the longer fuel racks (Level 3). Indicated level of 1 ft. on LI4801A (primary) or LI4801B (Backup) corresponds approximately to 1 ft. above the top of the SFP racks (ref. 2). This is the site-specific Level three value to account for instrument uncertainties. Note The Emergency Director should Note 1: The Emergency Director The classification timeliness and event level note has been declare the General Emergency should declare the event standardized across the DBNPS EAL scheme by referencing promptly upon determining that promptly upon determining the "time limit" specified within the EAL wording. 60 minutes has been exceeded, that time limit has been or will likely be exceeded. exceeded, or will likely be exceeded. 29 of 116

Category C Cold Shutdown / Refueling System Malfunction 30 of 116

DBNPS NEI IC# NEI IC Wording DBNPS IC Wording Difference Justification IC#(s) CU1 UNPLANNED loss of (reactor CU1 UNPLANNED loss of RCS None vessel/RCS [PWR] or RCS inventory for 15 minutes or [BWR]) inventory for 15 minutes longer or longer. MODE: 5 - Cold Shutdown, 6 - MODE: Cold Shutdown, Refueling Refueling NEI Ex. DBNPS NEI Example EAL Wording DBNPS EAL Wording Difference Justification EAL # EAL # 1 UNPLANNED loss of reactor CU1.1 UNPLANNED loss of reactor None coolant results in (reactor coolant results in RCS level vessel/RCS [PWR] or RCS less than a required lower limit [BWR]) level less than a for 15 min. (Note 1) required lower limit for 15 minutes or longer. 2 a. (Reactor vessel/RCS [PWR] CU1.2 RCS level cannot be monitored Site-specific applicable sumps and tanks are specified. or RCS [BWR]) level cannot AND be monitored. The phrase due to a loss of RCS inventory has been added to the AND EITHER DBNPS EAL for clarification. This wording implements the intent of AND

  • UNPLANNED increase in the NEI EAL basis which states Sump and/or tank level changes
b. UNPLANNED increase in Containment Sumps, must be evaluated against other potential sources of water flow to (site-specific sump and/or Auxiliary Building Sumps, ensure they are indicative of leakage from the RCS.

tank) levels. BWST or RCDT due to a loss of RCS inventory Although Visual Observation is neither a sump nor tank, it is

  • Visual observation of included in order to implement the intent of the NEI basis, which UNISOLABLE RCS states: operators may determine that an inventory loss is leakage occurring by observing changes Note The Emergency Director N/A Note 1: The Emergency The classification timeliness and event level note has been should declare the Unusual Director should standardized across the DBNPS EAL scheme by referencing the Event promptly upon declare the event "time limit" specified within the EAL wording.

promptly upon 31 of 116

determining that 15 minutes determining that time has been exceeded, or will limit has been likely be exceeded. exceeded, or will likely be exceeded. 32 of 116

DBNPS NEI IC# NEI IC Wording DBNPS IC Wording Difference Justification IC#(s) CU2 Loss of all but one AC power CU2 Loss of ALL but one AC power essential is the site-specific designation for the DBNPS source to emergency buses for source to essential buses for 15 emergency AC buses. 15 minutes or longer. minutes or longer. MODE: Cold Shutdown, MODE: 5 - Cold Shutdown, 6 - Refueling, Defueled Refueling, D - Defueled NEI Ex. DBNPS NEI Example EAL Wording DBNPS EAL Wording Difference Justification EAL # EAL # 1 a. AC power capability to (site- CU2.1 AC power capability, Table C-2, Essential buses C1 and D1 are the site-specific emergency buses. specific emergency buses) is to essential 4160V buses C1 Onsite and offsite AC power sources are tabularized in Table C-2. reduced to a single power and D1 reduced to a single source for 15 minutes or power source for 15 min. longer. (Note 1) AND AND

b. Any additional single power ANY additional single power source failure will result in source failure will result in loss of loss of all AC power to ALL AC power to SAFETY SAFETY SYSTEMS. SYSTEMS Note The Emergency Director should N/A Note 1: The Emergency The classification timeliness and event level note has been declare the Unusual Event Director should declare standardized across the DBNPS EAL scheme by referencing the promptly upon determining that the event promptly "time limit" specified within the EAL wording.

15 minutes has been exceeded, upon determining that or will likely be exceeded. time limit has been exceeded, or will likely be exceeded. 33 of 116

Table C-2 Offsite/Onsite AC Power Sources Offsite:

  • X01
  • X02
  • X11 (back-fed via Main Transformer)

Onsite:

  • EDG1
  • EDG2
  • SBODG 34 of 116

DBNPS NEI IC# NEI IC Wording DBNPS IC Wording Difference Justification IC#(s) CU3 UNPLANNED increase in RCS CU3 UNPLANNED increase in RCS None temperature temperature MODE: Cold Shutdown, MODE: 5 - Cold Shutdown, 6 - Refueling Refueling NEI Ex. DBNPS NEI Example EAL Wording DBNPS EAL Wording Difference Justification EAL # EAL # 1 UNPLANNED increase in RCS CU3.1 UNPLANNED increase in RCS 200°F is the site-specific Tech. Spec. cold shutdown temperature temperature to greater than temperature to > 200°F due to limit. (site-specific Technical loss of decay heat removal Specification cold shutdown capability Added the phrase due to loss of decay heat removal capability to temperature limit) clarify that the increase in temperature is related to such capability as specified in the generic bases. 2 Loss of ALL RCS temperature CU3.2 Loss of ALL RCS temperature None and (reactor vessel/RCS [PWR] and RCS level indication for 15 or RCS [BWR]) level indication min. (Note 1) for 15 minutes or longer. Note The Emergency Director should N/A Note 1: The Emergency Director The classification timeliness and event level note has been declare the Unusual Event should declare the event standardized across the DBNPS EAL scheme by referencing the promptly upon determining that promptly upon "time limit" specified within the EAL wording. 15 minutes has been exceeded, determining that time or will likely be exceeded limit has been exceeded, or will likely be exceeded. 35 of 116

DBNPS NEI IC# NEI IC Wording DBNPS IC Wording Difference Justification IC#(s) CU4 Loss of Vital DC power for 15 CU4 Loss of essential DC power for 15 Replaced the term vital with essential. The term vital is minutes or longer. minutes or longer. reserved for vital 120V AC power. MODE: Cold Shutdown, MODE: 5 - Cold Shutdown, 6 - Refueling Refueling NEI Ex. DBNPS NEI Example EAL Wording DBNPS EAL Wording Difference Justification EAL # EAL # 1 Indicated voltage is less than CU4.1 < 105 VDC voltage indications on < 105 VDC is the site-specific minimum essential DC bus design (site-specific bus voltage value) Technical Specification required voltage. on required Vital DC buses for essential 125 VDC distribution 15 minutes or longer. panels for 15 min. (Note 1) Note The Emergency Director should N/A Note 1:The Emergency Director The classification timeliness and event level note has been declare the Unusual Event should declare the event standardized across the DBNPS EAL scheme by referencing the promptly upon determining that promptly upon determining that "time limit" specified within the EAL wording. 15 minutes has been exceeded, time limit has been exceeded, or or will likely be exceeded. will likely be exceeded. 36 of 116

DBNPS NEI IC# NEI IC Wording DBNPS IC Wording Difference Justification IC#(s) CU5 Loss of all onsite or offsite CU5 Loss of ALL onsite or offsite None communications capabilities. communications capabilities. MODE: Cold Shutdown, MODE: 5- Cold Shutdown, 6 - Refueling, Defueled Refueling, D - Defueled NEI Ex. DBNPS NEI Example EAL Wording DBNPS EAL Wording Difference Justification EAL # EAL # 1 Loss of ALL of the following CU5.1 Loss of ALL Table C-4 onsite Table C-4 provides a site-specific list of onsite, ORO and NRC onsite communication methods: communication methods communications methods. (site specific list of communications methods) 2 Loss of ALL of the following ORO CU5.2 Loss of ALL Table C-4 ORO communications methods: communication methods (site specific list of communications methods) 3 Loss of ALL of the following NRC CU5.3 Loss of ALL Table C-4 NRC communications methods: communication methods (site specific list of communications methods) 37 of 116

Table C-4 Communication Methods System Onsite ORO NRC Public Address (Gaitronics) X Onsite Radios X Plant Telephones X X X Commercial Telephones X X X 4-Way Ringdown Circuit X Satellite Phones X X Cellular Phones X X NRC Emergency Telephone System (ETS) X 38 of 116

DBNPS NEI IC# NEI IC Wording DBNPS IC Wording Difference Justification IC#(s) CA1 Loss of (reactor vessel/RCS CA1 Loss of RCS inventory None [PWR] or RCS [BWR]) inventory MODE: 5 - Cold Shutdown, 6 - MODE: Cold Shutdown, Refueling Refueling NEI Ex. DBNPS NEI Example EAL Wording DBNPS EAL Wording Difference Justification EAL # EAL # 1 Loss of (reactor vessel/RCS CA1.1 Loss of RCS inventory as RCS level cannot be measured below the 571 feet elevation (0.4 [PWR] or RCS [BWR]) inventory indicated by RCS level 0.4 ft feet on LI 10596) which is centerline of the hot leg inlet. Should as indicated by level less than (LI 10596) RCS level drop below this point it is assumed water level cannot be (site-specific level). monitored other than visually. 2 a. (Reactor vessel/RCS [PWR] CA1.2 RCS level cannot be monitored Site-specific applicable sumps and tanks are specified. or RCS [BWR]) level cannot for 15 min. (Note 1) Although Visual Observation is neither a sump nor tank, it is be monitored for 15 minutes AND EITHER included in order to implement the intent of the NEI basis which or longer states: operators may determine that an inventory loss is AND

  • UNPLANNED increase in occurring by observing changes Containment Sumps,
b. UNPLANNED increase in Auxiliary Building Sumps, (site-specific sump and/or BWST or RCDT due to a tank) levels due to a loss of loss of RCS inventory (reactor vessel/RCS [PWR]

or RCS [BWR]) inventory.

  • Visual observation of UNISOLABLE RCS leakage Note The Emergency Director should N/A Note 1:The Emergency Director The classification timeliness and event level note has been declare the Alert promptly upon should declare the event standardized across the DBNPS EAL scheme by referencing the determining that 15 minutes has promptly upon determining that "time limit" specified within the EAL wording..

been exceeded, or will likely be time limit has been exceeded, exceeded or will likely be exceeded. 39 of 116

DBNPS NEI IC# NEI IC Wording DBNPS IC Wording Difference Justification IC#(s) CA2 Loss of all offsite and all onsite CA2 Loss of ALL offsite and ALL essential is the site-specific designation for the DBNPS AC power to emergency buses onsite AC power to essential emergency AC buses. for 15 minutes or longer buses for 15 minutes or longer MODE: Cold Shutdown, MODE: MODE: 5 - Cold Refueling, Defueled Shutdown, 6 - Refueling, D - Defueled NEI Ex. DBNPS NEI Example EAL Wording DBNPS EAL Wording Difference Justification EAL # EAL # 1 Loss of ALL offsite and ALL CA2.1 Loss of ALL offsite and ALL Essential buses C1 and D1 are the site-specific emergency buses. onsite AC Power to (site- onsite AC power capability, Onsite and offsite AC power sources are tabularized in Table C-2. specific emergency buses) for Table C-2, to essential 4160V 15 minutes or longer. buses C1 and D1 for 15 min. (Note 1) Note The Emergency Director should N/A Note 1: The Emergency The classification timeliness and event level note has been declare the Unusual Event Director should standardized across the DBNPS EAL scheme by referencing the promptly upon determining that declare the event "time limit" specified within the EAL wording. 15 minutes has been exceeded, promptly upon or will likely be exceeded. determining that time limit has been exceeded, or will likely be exceeded. 40 of 116

DBNPS NEI IC# NEI IC Wording DBNPS IC Wording Difference Justification IC#(s) CA3 Inability to maintain the plant in CA3 Inability to maintain the plant in None cold shutdown. cold shutdown. MODE: Cold Shutdown, MODE: 5 - Cold Shutdown, 6 - Refueling Refueling NEI Ex. DBNPS NEI Example EAL Wording DBNPS EAL Wording Difference Justification EAL # EAL # 1 UNPLANNED increase in RCS CA3.1 UNPLANNED increase in RCS Example EALs #1 and #2 have been combined in one DBNPS EAL temperature to greater than temperature to > 200°F for > for simplification. (site-specific Technical Table C-3 duration 200°F is the site-specific Tech. Spec. cold shutdown temperature Specification cold shutdown (Note 1, 10) limit. temperature limit) for greater than the duration specified in OR Table C-3 is the site-specific implementation of the generic RCS the following table. UNPLANNED RCS pressure Reheat Duration Threshold table. increase > 10 psig due to a 10 psig is the site-specific pressure increase readable by Control 2 UNPLANNED RCS pressure loss of RCS cooling (This EAL Room indications. increase greater than (site- does not apply during water-specific pressure reading). solid plant conditions). (This EAL does not apply during water-solid plant conditions. [PWR]) Note The Emergency Director should N/A Note 1: The Emergency The classification timeliness and event level note has been declare the Unusual Event Director should standardized across the DBNPS EAL scheme by referencing the promptly upon determining that declare the event "time limit" specified within the EAL wording. 15 minutes has been exceeded, promptly upon or will likely be exceeded. determining that time limit has been exceeded, or will likely be exceeded. 41 of 116

N/A N/A Note 10: In the absence of N/A Added note to provide guidance for classification should reliable reliable RCS RCS temperature be lost due to loss of decay hear removal flow. temperature indication caused by the loss of decay heat removal capability, classification should be based on the RCS pressure increase criteria when the RCS is intact in Mode 5 or based on time to boil data when in Mode 6 or the RCS is not intact in Mode 5. Table: RCS Heat-up Duration Thresholds RCS Status Containment Closure Status Heat-up Duration Intact (but not at reduced Not applicable 60 minutes* inventory [PWR]) Not intact (or at reduced Established 20 minutes* inventory [PWR]) Not Established 0 minutes

  • If an RCS heat removal system is in operation within this time frame and RCS temperature is being reduced, the EAL is not applicable.

42 of 116

Table C-3: RCS Heat-up Duration Thresholds RCS Status Containment Closure Status Heat-up Duration Intact (but not reduced N/A 60 min.* inventory) Not intact established 20 min.* OR At reduced inventory not established 0 min.

  • If an RCS heat removal system is in operation within this time frame and RCS temperature is being reduced, the EAL is not applicable.

43 of 116

DBNPS NEI IC# NEI IC Wording DBNPS IC Wording Difference Justification IC#(s) CA6 Hazardous event affecting a CA6 Hazardous event affecting a None SAFETY SYSTEM needed for SAFETY SYSTEM needed for the current operating mode. the current operating mode. MODE: Cold Shutdown, MODE: 5 - Cold Shutdown, 6 - Refueling Refueling NEI Ex. DBNPS NEI Example EAL Wording DBNPS EAL Wording Difference Justification EAL # EAL # 1 a. The occurrence of ANY of CA6.1 The occurrence of ANY Table The hazardous events have been listed in Table C-5 to improve the the following hazardous C-5 Hazardous Event readability of the DBNPS EAL. events: AND EITHER: The NEI list of hazardous events includes all DBNPS hazardous z Seismic event events. No additional hazardous events could be identified. (earthquake)

  • Event has caused indications of degraded Deleted the word damage in the first condition as that z Internal or external performance in at least presupposes the determination of damage, but the criteria is flooding event one train of a SAFETY degraded performance of a safety system train.

z High winds or tornado strike SYSTEM required for Replaced the word needed with required consistent with z FIRE the current operating technical specifications. z EXPLOSION mode z (site-specific hazards) Shift Manager has been replaced with Emergency Director as the

  • The event has caused site-specific terminology.

z Other events with similar VISIBLE DAMAGE to a hazard characteristics as SAFETY SYSTEM determined by the Shift component or structure Manager required for the current AND operating mode

b. EITHER of the following:
1. Event damage has caused indications of degraded performance in at least one train of a SAFETY SYSTEM needed for the current operating mode.

44 of 116

OR

2. The event has caused VISIBLE DAMAGE to a SAFETY SYSTEM component or structure needed for the current operating mode.

Table C-5 Hazardous Events z Seismic event (earthquake) z Internal or external FLOODING event z High winds or tornado strike z FIRE z EXPLOSION z Other events with similar hazard characteristics as determined by the Emergency Director 45 of 116

DBNPS NEI IC# NEI IC Wording DBNPS IC Wording Difference Justification IC#(s) CS1 Loss of (reactor vessel/RCS CS1 Loss of RCS inventory affecting None [PWR] or RCS [BWR]) core decay heat removal inventory affecting core decay capability heat removal capability. MODE: 5 - Cold Shutdown, 6 - MODE: Cold Shutdown, Refueling Refueling NEI Ex. DBNPS NEI Example EAL Wording DBNPS EAL Wording Difference Justification EAL # EAL # 1 a. CONTAINMENT CLOSURE N/A N/A RCS level cannot be measured below the 571 feet elevation (0.4 not established. feet on LI 10596) which is centerline of the hot leg inlet. Should RCS level drop below this point it is assumed water level cannot be AND monitored other than visually.

b. (Reactor vessel/RCS [PWR]

or RCS [BWR]) level less than (site-specific level). 2 a. CONTAINMENT CLOSURE N/A N/A RCS level cannot be measured below the 571 feet elevation (0.4 established. feet on LI 10596) which is centerline of the hot leg inlet. Should RCS level drop below this point it is assumed water level cannot be AND monitored other than visually.

b. (Reactor vessel/RCS [PWR]

or RCS [BWR]) level less than (site-specific level). 3 a. (Reactor vessel/RCS [PWR] CS1.1 RCS level cannot be monitored Site-specific applicable sumps and tanks are specified. or RCS [BWR]) level cannot for 30 min. (Note 1) Site-specific radiation monitors and site-specific value are specfied. be monitored for 30 minutes AND The dose rate due to core shine when the top of the core becomes or longer. uncovered should result in the specified indications on the listed Core uncovery is indicated by AND monitors. ANY of the following:

b. Core uncovery is indicated by No other site-specific indicatios were identified.

ANY of the following:

  • UNPLANNED increase in Containment Sumps, 46 of 116

z (Site-specific radiation Auxiliary Building Sumps, monitor) reading greater BWST or RCDT levels of than (site-specific value) sufficient magnitude to indicate core uncovery z Erratic source range monitor indication [PWR]

  • Containment Radiation z UNPLANNED increase in Monitor (RE 4596A or B)

(site-specific sump and/or reading > 16 R/hr tank) levels of sufficient

  • Refueling Bridge Portable magnitude to indicate Area Radiation Monitor core uncovery reading > 30 R/hr z (Other site-specific indications)
  • Erratic Source Range Monitor indication Note The Emergency Director should N/A Note 1: The Emergency The classification timeliness and event level note has been declare the Site Area Director should declare standardized across the DBNPS EAL scheme by referencing the Emergency promptly upon the event promptly upon "time limit" specified within the EAL wording.

determining that 30 minutes has determining that time been exceeded, or will likely be limit has been exceeded exceeded, or will likely be exceeded. 47 of 116

DBNPS NEI IC# NEI IC Wording DBNPS IC Wording Difference Justification IC#(s) CG1 Loss of (reactor vessel/RCS CG1 Loss of RCS inventory affecting None [PWR] or RCS [BWR]) inventory fuel clad integrity with affecting fuel clad integrity with containment challenged containment challenged MODE: 5 - Cold Shutdown, 6 - MODE: Cold Shutdown, Refueling Refueling NEI Ex. DBNPS NEI Example EAL Wording DBNPS EAL Wording Difference Justification EAL # EAL # 1 a. (Reactor vessel/RCS [PWR] N/A RCS level cannot be measured below the 571 feet elevation (0.4 N/A or RCS [BWR]) level less than feet on LI 10596) which is centerline of the hot leg inlet. Should (site-specific level) for 30 RCS level drop below this point it is assumed water level cannot minutes or longer. be monitored other than visually. AND

b. ANY indication from the Containment Challenge Table (see below).

2 a. (Reactor vessel/RCS [PWR] CG1.1 RCS level cannot be monitored Site-specific applicable sumps and tanks are specified. or RCS [BWR]) level cannot for 30 min. (Note 1) Site-specific radiation monitors and site-specific value are be monitored for 30 minutes AND specfied. The dose rate due to core shine when the top of the or longer. core becomes uncovered should result in the specified Core uncovery is indicated by AND indications on the listed monitors. ANY of the following:

b. Core uncovery is indicated by No other site-specific indications were identified.

ANY of the following:

  • UNPLANNED increase in Containment Sumps, Auxiliary The generic Containment Challenge table has been implemented z (Site-specific radiation Building Sumps, BWST or as Table C-1.

monitor) reading greater RCDT levels of sufficient 4% hydrogen concentration in the presence of oxygen is the than (site-specific value) magnitude to indicate core minimum necessary to support a hydrogen burn (4%). uncovery 48 of 116

z Erratic source range

  • Containment Radiation monitor indication [PWR] Monitor (RE 4596A or B) reading > 16 R/hr z UNPLANNED increase in (site-specific sump and/or
  • Refueling Bridge Portable tank) levels of sufficient Area Radiation Monitor magnitude to indicate core reading > 30 R/hr uncovery
  • Erratic Source Range Monitor z (Other site-specific indication indications)

AND AND ANY Containment Challenge

c. ANY indication from the indication, Table C-1 Containment Challenge Table (see below).

Note The Emergency Director should N/A Note 1: The Emergency Director The classification timeliness and event level note has been declare the General Emergency should declare the event standardized across the DBNPS EAL scheme by referencing the promptly upon determining that promptly upon "time limit" specified within the EAL wording. 30 minutes has been exceeded, determining that time or will likely be exceeded. limit has been exceeded, or will likely be exceeded. N/A Note 6: If CONTAINMENT Note 6 implements the asterisked note associated with the CLOSURE is re- generic Containment Challenge table. established prior to exceeding the 30-minute time limit, declaration of a General Emergency is not required. 49 of 116

Containment Challenge Table CONTAINMENT CLOSURE not established* (Explosive mixture) exists inside containment UNPLANNED increase in containment pressure Secondary containment radiation monitor reading above (site-specific value) [BWR]

  • If CONTAINMENT CLOSURE is re-established prior to exceeding the 30-minute time limit, then declaration of a General Emergency is not required.

Table C-1 Containment Challenge Indications

  • CONTAINMENT CLOSURE not established (Note 6)
  • Containment Hydrogen concentration > 4%
  • UNPLANNED rise in Containment pressure 50 of 116

Category D Permanently Defueled Station Malfunction 51 of 116

DBNPS NEI IC# NEI IC Wording DBNPS IC Wording Difference Justification IC#(s) PD-AU1 Recognition Category D N/A N/A NEI Recognition Category PD ICs and EALs are applicable only to PD-AU2 Permanently Defueled Station permanently defueled stations. DBNPS is not a defueled station. PD-SU1 PD-HU1 PD-HU2 PD-HU3 PD-AA1 PD-AA2 PD-HA1 PD-HA3 52 of 116

Category E Independent Spent Fuel Storage Installation (ISFSI) 53 of 116

DBNPS NEI IC# NEI IC Wording DBNPS IC Wording Difference Justification IC#(s) E-HU1 Damage to a loaded cask EU1 Damage to a loaded cask None CONFINEMENT BOUNDARY CONFINEMENT BOUNDARY MODE: All MODE: ALL NEI Ex. DBNPS NEI Example EAL Wording DBNPS EAL Wording Difference Justification EAL # EAL # 1 Damage to a loaded cask EU1.1 Damage to a loaded canister The term cask was replaced with canister CONFINEMENT BOUNDARY as CONFINEMENT BOUNDARY The values shown represent 2 times the limits specified in the indicated by an on-contact as indicated by an on-contact DFSF Site CSAR for radiation external to a loaded DSC. radiation reading greater than (2 radiation reading on the surface times the site-specific cask of a loaded spent fuel HSM specific technical specification cask > EITHER of the following: allowable radiation level) on the

  • 100 mrem/hr (neutron +

surface of the spent fuel cask. gamma) on the HSM cask wall or roof

  • 100 mrem/hr (neutron +

gamma) on the center of the HSM cask door 54 of 116

Category F Fission Product Barrier Degradation 55 of 116

DBNPS NEI IC# NEI IC Wording DBNPS IC Wording Difference Justification IC#(s) FA1 Any Loss or any Potential Loss FA1 ANY Loss or ANY Potential Loss None of either the Fuel Clad or RCS of EITHER Fuel Clad or RCS barrier. MODE: 1 - Power Operation, 2 - MODE: Power Operation, Hot Startup, 3 - Hot Standby, 4 - Hot Standby, Startup, Hot Shutdown Shutdown NEI Ex. DBNPS NEI Example EAL Wording DBNPS EAL Wording Difference Justification EAL # EAL # 1 Any Loss or any Potential Loss FA1.1 ANY Loss or ANY Potential loss Table F-1 provides the fission product barrier loss and potential loss of either the Fuel Clad or RCS of EITHER Fuel Clad or RCS thresholds. barrier. (Table F-1) 56 of 116

DBNPS NEI IC# NEI IC Wording DBNPS IC Wording Difference Justification IC#(s) FS1 Loss or Potential Loss of any two FS1 Loss or Potential Loss of ANY None barriers two barriers MODE: Power Operation, Hot MODE: 1 - Power Operation, 2 - Standby, Startup, Hot Shutdown Startup, 3 - Hot Standby, 4 - Hot Shutdown NEI Ex. DBNPS NEI Example EAL Wording DBNPS EAL Wording Difference Justification EAL # EAL # 1 Loss or Potential Loss of any FS1.1 Loss or Potential Loss of ANY Table F-1 provides the fission product barrier loss and potential loss two barriers two barriers (Table F-1) thresholds. 57 of 116

DBNPS NEI IC# NEI IC Wording DBNPS IC Wording Difference Justification IC#(s) FG1 Loss of any two barriers and FG1 Loss of ANY two barriers and None Loss or Potential Loss of third Loss or Potential loss of the third barrier barrier MODE: Power Operation, Hot MODE: 1 - Power Operation, 2 - Standby, Startup, Hot Shutdown Startup, 3 - Hot Standby, 4 - Hot Shutdown NEI Ex. DBNPS NEI Example EAL Wording DBNPS EAL Wording Difference Justification EAL # EAL # 1 Loss of any two barriers and FG1.1 Loss of ANY two barriers Table F-1 provides the fission product barrier loss and potential loss Loss or Potential Loss of third thresholds. barrier AND Loss or Potential Loss of third barrier (Table F-1) 58 of 116

PWR Fuel Clad Fission Product Barrier Degradation Thresholds NEI DBNPS NEI Threshold Wording DBNPS FPB Wording Difference Justification FPB# FPB #(s) FC Loss RCS or SG Tube Leakage N/A None N/A 1 Not Applicable FC Loss Inadequate Heat Removal FC Loss Calculated Clad Temperature DBNPS does not use core exit thermocouples. in Region 3 or higher (DB-OP-2 A.Core exit thermocouple B.1 02000 Figure 2) DBNPS uses in-core thermocouples to develop calculated clad readings greater than (site-tempertures which are approximately equivalent to the generic specific temperature value). bases. Indication of severe core cooling degradation is manifested by Calculated Clad Temperature in Region 3 (DB-OP-02000 Figure 2). Figure 2, Incore T/C Temperature vs. RCS Pressure for ICC, provides indication of how serious core conditions are based upon combinations of RCS pressure and incore thermocouple temperatures. If the RCS P-T point is in Region 3, the cladding temperatures in the core may be 1400°F or higher.

1. RE 4596A or B > Table F-2 FC Loss RCS Activity/CMNT Rad FC Loss The Table F-2 values, column FC Loss represents, based on column FC Loss (Note 9)

Calculation EP-EALCALC-DB-0701, the expected containment 3 A.Containment radiation C.1 high range radiation monitor (RE 4596A & B) response based on a monitor reading greater than OR LOCA, for periods of 1, 2, 8, 16, 24 and 48 (>24) hours after (site-specific value) shutdown with ~4.33% fuel failure. OR Note 9 provides guidance on the effects of high temperature on the B.(Site-specific indications that containment radiation monitors. reactor coolant activity is

2. Dose equivalent I-131 greater than 300 Ci/gm dose FC Loss None coolant activity > 300 Ci/gm equivalent I-131)

C.2 FC Loss CNMT Integrity or Bypass N/A None N/A 4 Not Applicable 59 of 116

NEI DBNPS NEI Threshold Wording DBNPS FPB Wording Difference Justification FPB# FPB #(s) FC Loss Other Indications N/A N/A No other site-specific Fuel Clad Loss indication has been identified 5 for DBNPS. A.(site-specific as applicable) FC Loss ED Judgment FC Loss ANY condition in the opinion of None the Emergency Director that 6 A.ANY condition in the opinion E.1 indicates Loss of the Fuel Clad of the Emergency Director that Barrier indicates Loss of the Fuel Clad Barrier. FC RCS or SG Tube Leakage FC None DBNPS EOPs do not utilize RCS level as a parameter indicating a P-Loss P-Loss challenge to core heat removal and implementation of functional A.RCS/reactor vessel level less A.1 restoration procedures. 1 than (site-specific level)

1. Calculated Clad FC Inadequate Heat Removal FC DBNPS does not use core exit thermocouples.

Temperature in Region 2 P-Loss P-Loss A.Core exit thermocouple or higher (DB-OP-02000 B.1 DBNPS uses in-core thermocouples to develop calculated clad 2 readings greater than (site- Figure 2) temperatures, which are approximately equivalent to the generic specific temperature value) bases. OR OR The average incore thermocouple temperature and RCS pressure B.Inadequate RCS heat is used to determine whether Calculated Clad Temperature is in removal capability via steam Region 2. This corresponds to a loss of RCS subcooling with clad generators as indicated by temperatures remaining below the point where damage is (site-specific indications). immediately likely (Tclad approximately 900° to 1100° F). FC 2. Loss of ALL feedwater Loss of all feedwater cooling heat transfer capability when a SG P-Loss cooling is required indicates the ultimate heat sink function is under AND B.2 extreme challenge and that the RCS barrier is also challenged. SG cooling is required FC RCS Activity/CMNT Rad N/A None N/A P-Loss Not Applicable 3 60 of 116

NEI DBNPS NEI Threshold Wording DBNPS FPB Wording Difference Justification FPB# FPB #(s) FC CNMT Integrity or Bypass N/A None N/A P-Loss Not Applicable 4 FC Other Indications N/A N/A No other site-specific Fuel Clad Potential Loss indication has been P-Loss identified for DBNPS. A.(site-specific as applicable) 5 FC Emergency Director FC ANY condition in the opinion of None P-Loss Judgment P-Loss the Emergency Director that E.1 indicates Potential Loss of the 6 A.Any condition in the opinion Fuel Clad Barrier of the Emergency Director that indicates Potential Loss of the Fuel Clad Barrier. Table F-2 Containment Radiation - R/hr (RE 4596A or B) Time After S/D RCS Loss FC Loss CT Potential Loss (Hrs.) 0-1 1.50E+01 3.03E+03 1.40E+04 1-2 1.50E+01 2.56 E+03 1.18 E+04 2-8 1.50E+01 1.61 E+03 7.46 E+03 8-16 1.50E+01 1.14 E+03 5.28 E+03 16-24 1.50E+01 8.66 E+02 4.00 E+03

             >24                   1.50E+01            3.94 E+02               1.82 E+03 61 of 116

PWR RCS Fission Product Barrier Degradation Thresholds NEI DBNPS NEI IC Wording DBNPS FPB Wording Difference Justification FPB# FPB #(s) RCS RCS or SG Tube Leakage RCS Loss An automatic or manual SFAS is the site-specific nomenclature for SI. Loss ECCS (SFAS) actuation A. An automatic or manual A.1 1 ECCS (SI) actuation is required by EITHER: required by EITHER of the

  • UNISOLABLE RCS following: leakage
1. UNISOLABLE RCS
  • SG tube RUPTURE leakage OR
2. SG tube RUPTURE.

RCS Inadequate Heat Removal N/A None N/A Loss Not Applicable 2 RCS RCS Activity/CMNT Rad RCS Loss RE 4596A or B > Table F-2 The Table F-2 values, column RCS Loss represents, based on Loss column RCS Loss (Note 9) Calculation EP-EALCALC-DB-0702, the expected containment A.Containment radiation monitor C.1 3 high range radiation monitor (RE 4596A & B) response based on a reading greater than (site-LOCA, using the USAR maximum RCS activity (no core damage). specific value). Note 9 provides guidance on the effects of high temperature on the containment radiation monitors. RCS CNMT Integrity or Bypass N/A None N/A Loss Not Applicable 4 RCS Other Indications N/A N/A No other site-specific RCS Loss indication has been identified for Loss DBNPS. A.(site-specific as applicable) 5 62 of 116

NEI DBNPS NEI IC Wording DBNPS FPB Wording Difference Justification FPB# FPB #(s) RCS Emergency Director Judgment RCS Loss ANY condition in the opinion None Loss of the Emergency Director A.ANY condition in the opinion E.1 that indicates Loss of the RCS 6 of the Emergency Director that Barrier indicates Loss of the RCS Barrier.

1. Operation of a standby RCS RCS or SG Tube Leakage RCS Normal charging flow is handled by one of the two makeup pumps.

Makeup Pump (> 250 gpm) is P-Loss A.1 Makeup pump capacity of a single makeup injection line is ~250 P-Loss 1 A. Operation of a standby required by EITHER: gpm. A second makeup pump being required is indicative of a charging (makeup) pump is

  • UNISOLABLE RCS substantial RCS leak.

required by EITHER of the following: leakage

  • SG tube leakage
1. UNISOLABLE RCS leakage OR OR 2. PTS requirements invoked RCS This threshold is defined by the PTS limits as specified in DB-OP-(SR5)
2. SG tube leakage. P-Loss A.2 02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture Specific Rule 5 being invoked. This indicates an extreme challenge to the OR RCS barrier.

B.RCS cooldown rate greater than (site-specific pressurized thermal shock criteria/limits defined by site-specific indications). RCS Inadequate Heat Removal RCS Loss of ALL feedwater Loss of all feedwater cooling heat transfer capability when SG P-Loss B.1 cooling is required indicates the ultimate heat sink function is P-Loss 2 A. Inadequate RCS heat AND under extreme challenge and that the RCS barrier is also removal capability via steam SG cooling is required challenged. generators as indicated by (site-specific indications). RCS CS Activity/CMNT Rad N/A None N/A P-Loss 3 Not Applicable 63 of 116

NEI DBNPS NEI IC Wording DBNPS FPB Wording Difference Justification FPB# FPB #(s) RCS CNMT Integrity or Bypass N/A None N/A P-Loss 4 Not Applicable RCS Other Indications N/A N/A No other site-specific RCS Potential Loss indication has been identified for DBNPS. P-Loss 5 A.(site-specific as applicable) RCS Emergency Director Judgment RCS ANY condition in the opinion of None P-Loss E.1 the Emergency Director that P-Loss 6 A.ANY condition in the opinion indicates Potential Loss of the of the Emergency Director that RCS Barrier indicates Potential Loss of the RCS Barrier. 64 of 116

PWR Containment Fission Product Barrier Degradation Thresholds NEI DBNPS NEI IC Wording DBNPS FPB Wording Difference Justification FPB# FPB #(s) CNMT RCS or SG Tube Leakage CNMT A leaking or RUPTURED SG is None Loss Loss FAULTED outside of containment A.A leaking or RUPTURED SG is 1 FAULTED outside of containment. A.1 CNMT Inadequate Heat Removal N/A None N/A Loss Not Applicable 2 CNMT RCS Activity/CMNT Rad N/A None N/A Loss Not applicable 3 CNMT CNMT Integrity or Bypass CNMT 1. Containment isolation is required None Loss Loss A. Containment isolation is required AND EITHER: 4 D.1 AND

  • Containment integrity has been EITHER of the following: lost based on Emergency Director judgment
1. Containment integrity has been lost based on
  • UNISOLABLE pathway from Emergency Director judgment. Containment to the environment exists OR OR
2. UNISOLABLE pathway from the containment to the CNMT 2. Indications of RCS leakage outside None environment exists.

Loss of containment OR D.2 B. Indications of RCS leakage outside of containment. 65 of 116

NEI DBNPS NEI IC Wording DBNPS FPB Wording Difference Justification FPB# FPB #(s) CNMT Other Indications N/A N/A No other site-specific Containment Loss indication Loss has been identified for DBNPS. A. (site-specific as applicable) 5 CNMT Emergency Director Judgment CNMT ANY condition in the opinion of the None Loss Loss Emergency Director that indicates Loss ANY condition in the opinion of the 6 of the Containment Barrier Emergency Director that indicates E.1 Loss of the Containment Barrier. CNMT RCS or SG Tube Leakage N/A None N/A P-Loss Not Applicable 1 CNMT Inadequate Heat Removal CNMT Calculated Clad Temperature in Region Indication of severe core cooling degradation is P-Loss P-Loss 3 or higher (DB-OP-02000 Figure 2) manifested by Calculated Clad Temperature in A. 1. (Site-specific criteria for entry Region 3 (DB-OP-02000 Figure 2). Figure 2, Incore 2 into core cooling restoration B.1 AND T/C Temperature vs. RCS Pressure for ICC, provides procedure) Restoration procedures not effective indication of how serious core conditions are based AND within 15 min. (Note 1) upon combinations of RCS pressure and incore thermocouple temperatures.

2. Restoration procedure not effective within 15 minutes. The function restoration procedures are those emergency operating procedures that address the recovery of core cooling functions.

Added Note 1 consistent with other thresholds with a timing component. 66 of 116

NEI DBNPS NEI IC Wording DBNPS FPB Wording Difference Justification FPB# FPB #(s) CNMT RCS Activity/CMNT Rad CNMT RE 4596A or B > Table F-2 column The Table F-2 values, column CT Potential Loss P-Loss P-Loss CT Potential Loss (Note 9) represents, based on Calculation EP-EALCALC-DB-A. Containment radiation monitor 0701, the expected containment high range radiation 3 reading greater than (site-specific C.1 monitor (RE 4596A & B) response based on a LOCA, value). for periods of 1, 2, 8, 16, 24 and 48 (>24) hours after shutdown with ~20% fuel failure Note 9 provides guidance on the effects of high temperature on the containment radiation monitors. CNMT CNMT Integrity or Bypass CNMT 1. Containment pressure > 50.4 psia 50.4 psia (36 psig + elevation adjusted atmospheric P-Loss P-Loss pressure of 14. 4 psia) is based on the containment A. Containment pressure greater OR design pressure 4 than (site-specific value) D.1 OR B. Explosive mixture exists inside CNMT 2. Containment Hydrogen The lower limit for the occurrence of an in-containment P-Loss concentration > 4% containment hydrogen burn is approximately 4%. OR D.2 OR C. 1. Containment pressure greater than (site-specific pressure setpoint) AND CNMT 3. Containment pressure > 40 psia SFAS 2 actuation automatically initiates Containment P-Loss with < one full train, Table F-3, of Air Coolers upon exceeding the Containment

2. Less than one full train of containment cooling operating per pressure high setpoint of 18.7 psia or low RCS (site-specific system or D.3 design for 15 min. (Note 1) pressure of 1600 psig. SFAS Level 4 actuation equipment) is operating per automatically initiates Containment Spray upon design for 15 minutes or exceeding the Containment pressure high-high longer. setpoint of 40 (nominal) psia.

Added Note 1 consistent with other thresholds with a timing component. CNMT Other Indications N/A N/A No other site-specific Containment Potential Loss P-Loss indication has been identified for DBNPS. A. (site-specific as applicable) 5 67 of 116

NEI DBNPS NEI IC Wording DBNPS FPB Wording Difference Justification FPB# FPB #(s) CNMT Emergency Director Judgment CNMT ANY condition in the opinion of the None P-Loss P-Loss Emergency Director that indicates A.ANY condition in the opinion of the Potential Loss of the Containment 6 Emergency Director that indicates E.1 Barrier Potential Loss of the Containment Barrier. Table F-3 Containment Cooling Full Train Spray Coolers 2 0 1 1 0 2 68 of 116

Category H Hazards and Other Conditions Affecting Plant Safety 69 of 116

NEI DBNPS NEI IC Wording DBNPS IC Wording Difference Justification IC# IC#(s) HU1 Confirmed SECURITY HU1 Confirmed SECURITY None CONDITION or threat CONDITION or threat. MODE: All MODE: ALL NEI Ex. DBNPS NEI Example EAL Wording DBNPS EAL Wording Difference Justification EAL # EAL # 1 A SECURITY CONDITION that HU1.1 A SECURITY CONDITION that The site-specfic security shift supervision is defined as the does not involve a HOSTILE does not involve a HOSTILE Security Shift Supervisor. ACTION as reported by the (site- ACTION as reported by Security specific security shift Shift Supervisor supervision). 2 Notification of a credible security HU1.2 Notification of a credible security threat directed at the site. threat directed at the site 3 A validated notification from the HU1.3 A validated notification from the NRC providing information of an NRC providing information of an aircraft threat. aircraft threat 70 of 116

DBNPS NEI IC# NEI IC Wording DBNPS IC Wording Difference Justification IC#(s) HU2 Seismic event greater than OBE HU2 Seismic event greater than OBE None levels levels MODE: All MODE: ALL NEI Ex. DBNPS NEI Example EAL Wording DBNPS EAL Wording Difference Justification EAL # EAL # 1 Seismic event greater than HU2.1 Seismic event > OBE as Immediate control room alarm indication of an earthquake of 0.08 Operating Basis Earthquake indicated by OBE alarm on g (OBE) or greater is annunciated on the seismic control panel (OBE) as indicated by: seismic alarm panel C5764A (C5764A), following seismic trigger actuation by the Containment Concrete Foundation accelerograph. (site-specific indication that a seismic event met or exceeded OBE limits) 71 of 116

DBNPS NEI IC# NEI IC Wording DBNPS IC Wording Difference Justification IC#(s) HU3 Hazardous event. HU3 Hazardous event None MODE: All MODE: ALL NEI Ex. DBNPS NEI Example EAL Wording DBNPS EAL Wording Difference Justification EAL # EAL # 1 A tornado strike within the HU3.1 A tornado strike within the None PROTECTED AREA. PROTECTED AREA 2 Internal room or area flooding of HU3.2 Internal room or area None a magnitude sufficient to require FLOODING of a magnitude manual or automatic electrical sufficient to require manual or isolation of a SAFETY SYSTEM automatic electrical isolation of a component needed for the SAFETY SYSTEM component current operating mode. needed for the current operating mode 3 Movement of personnel within HU3.3 Movement of personnel within None the PROTECTED AREA is the PROTECTED AREA is impeded due to an offsite event IMPEDED due to an offsite event involving hazardous materials involving hazardous materials (e.g., an offsite chemical spill or (e.g., an offsite chemical spill or toxic gas release). toxic gas release) 4 A hazardous event that results in HU3.4 A hazardous event that results in Added reference to Note 7. on-site conditions sufficient to on-site conditions sufficient to prohibit the plant staff from prohibit the plant staff from accessing the site via personal accessing the site via personal vehicles. vehicles (Note 7) 5 (Site-specific list of natural or N/A N/A No other site-specific hazard has been identified for DBNPS. technological hazard events) 72 of 116

Note EAL #3 does not apply to routine N/A Note 7: This EAL does not The DBNPS note is intended to apply to generic example EAL #4, traffic impediments such as fog, apply to routine traffic not #3 as specified in the generic guidance. snow, ice, or vehicle breakdowns impediments such as or accidents. fog, snow, ice, or vehicle breakdowns or accidents. 73 of 116

DBNPS NEI IC# NEI IC Wording DBNPS IC Wording Difference Justification IC#(s) HU4 FIRE potentially degrading the HU4 FIRE potentially degrading the None level of safety of the plant. level of safety of the plant MODE: All MODE: ALL NEI Ex. DBNPS NEI Example EAL Wording DBNPS EAL Wording Difference Justification EAL # EAL # 1 a.A FIRE is NOT extinguished HU4.1 A FIRE is not extinguished Site-specific plant rooms and areas are listed in Table H-1 to within 15-minutes of ANY of the within 15 min. of ANY of the improve the readability of the EAL. following FIRE detection following FIRE detection Deleted or indications as the term is redundant to the statement indications: indications (Note 1): above. z Report from the field (i.e., z Report from the field (i.e., visual observation) visual observation) z Receipt of multiple (more z Receipt of multiple (more than 1) fire alarms or than 1) fire alarms indications z Field verification of a single z Field verification of a single fire alarm fire alarm AND AND The FIRE is located within ANY b.The FIRE is located within ANY Table H-1 area of the following plant rooms or areas: (site-specific list of plant rooms or areas) 2 a.Receipt of a single fire alarm HU4.2 Receipt of a single fire alarm Site-specific plant rooms and areas are listed in Table H-1 to (i.e., no other indications of a (i.e., no other indications of a improve the readability of the EAL. FIRE). FIRE) AND AND 74 of 116

b.The FIRE is located within ANY The fire alarm is indicating a of the following plant rooms or FIRE within ANY Table H-1 area Added fire alarm is indicating a to clarify intent of criteria. areas: AND (site-specific list of plant rooms or The existence of a FIRE is not areas) verified within 30 min. of alarm AND receipt (Note 1) c.The existence of a FIRE is not verified within 30-minutes of alarm receipt. 3 A FIRE within the plant or ISFSI HU4.3 A FIRE within the plant DBNPS does not have an ISFSI located outside the plant [for plants with an ISFSI outside PROTECTED AREA not Protected Area. the plant Protected Area] extinguished within 60 min. of PROTECTED AREA not the initial report, alarm or extinguished within 60-minutes of indication (Note 1) the initial report, alarm or indication. 4 A FIRE within the plant or ISFSI HU4.4 A FIRE within the plant DBNPS does not have an ISFSI located outside the plant [for plants with an ISFSI outside PROTECTED AREA that Protected Area. the plant Protected Area] requires firefighting support by PROTECTED AREA that an offsite fire response agency requires firefighting support by an to extinguish offsite fire response agency to extinguish. Note Note:The Emergency Director N/A Note 1:The Emergency Director The classification timeliness and event level note has been should declare the Unusual should declare the event standardized across the DBNPS EAL scheme by referencing the Event promptly upon determining promptly upon determining that "time limit" specified within the EAL wording. that the applicable time has been time limit has been exceeded, exceeded, or will likely be or will likely be exceeded. exceeded. 75 of 116

Table H-1 Safe Shutdown Fire Areas

  • Containment
  • Control Room
  • Auxiliary Building
  • Intake Structure
  • Borated Water Storage Tank 76 of 116

DBNPS NEI IC# NEI IC Wording DBNPS IC Wording Difference Justification IC#(s) HU7 Other conditions exist which in HU7 Other conditions exist which in None the judgment of the Emergency the judgment of the Emergency Director warrant declaration of a Director warrant declaration of a (NO)UE UE MODE: All MODE: ALL NEI Ex. DBNPS NEI Example EAL Wording DBNPS EAL Wording Difference Justification EAL # EAL # 1 Other conditions exist which in HU7.1 Other conditions exist which in None the judgment of the Emergency the judgment of the Emergency Director indicate that events are Director indicate that events are in progress or have occurred in progress or have occurred which indicate a potential which indicate a potential degradation of the level of safety degradation of the level of safety of the plant or indicate a security of the plant or indicate a security threat to facility protection has threat to facility protection has been initiated. No releases of been initiated. No releases of radioactive material requiring radioactive material requiring offsite response or monitoring are offsite response or monitoring expected unless further are expected unless further degradation of safety systems degradation of SAFETY occurs. SYSTEMS occurs. 77 of 116

DBNPS NEI IC# NEI IC Wording DBNPS IC Wording Difference Justification IC#(s) HA1 HOSTILE ACTION within the HA1 HOSTILE ACTION within the None OWNER CONTROLLED AREA or OWNER CONTROLLED AREA airborne attack threat within 30 or airborne attack threat within minutes. 30 minutes MODE: All MODE: ALL NEI Ex. DBNPS NEI Example EAL Wording DBNPS EAL Wording Difference Justification EAL # EAL # 1 A HOSTILE ACTION is occurring or HA1.1 A HOSTILE ACTION is The site-specfic security shift supervision is defined as the has occurred within the OWNER occurring or has occurred within Security Shift Supervisor. CONTROLLED AREA as reported the OWNER CONTROLLED by the (site-specific security shift AREA as reported by the supervision). Security Shift Supervisor 2 A validated notification from A validated notification from NRC of HA1.2 NRC of an aircraft attack threat an aircraft attack threat within 30 within 30 min. of the site minutes of the site. 78 of 116

DBNPS NEI IC# NEI IC Wording DBNPS IC Wording Difference Justification IC#(s) HA5 Gaseous release impeding HA5 Gaseous release IMPEDING Revised mode applicability to align with mode dependent Table H-access to equipment necessary access to equipment necessary 2. for normal plant operations, for normal plant operations, NEI 99-01 Revision 6 IC AA3 and HA5 prescribe the declaration of cooldown or shutdown. cooldown or shutdown an Alert based upon IMPEDED access to rooms or areas where MODE: All MODE: 1 - Power Operation, 2 - equipment necessary for normal plant operations, cooldown or Startup, 3 - Hot Standby shutdown is located. These areas are intended to be plant-operating mode dependent. Attachment 3 in the EAL Bases document provides a summary of the methodology, procedures, and locations reviewed to determine the minimum set of in-plant actions, associated locations, and operating modes necessary to shut down and cool down the reactor. The locations where those actions are performed comprise the rooms/areas in Table R-2 and H-2. NEI Ex. DBNPS NEI Example EAL Wording DBNPS EAL Wording Difference Justification EAL # EAL # 1 a.Release of a toxic, corrosive, HA5.1 Release of a toxic, corrosive, Plant rooms or areas with entry-related mode applicability are asphyxiant or flammable gas asphyxiant or flammable gas into listed in Table H-2 to improve the readability of the EAL. into any of the following plant ANY Table H-2 Safe Shutdown The control room was not included in Table H-2 because in the rooms or areas: Rooms or Areas event of control room evacuation shutdown activities can be (site-specific list of plant rooms AND completed from the Auxillary Shutdown Panel. UFSAR Section or areas with entry-related 7.4.1.6 Auxiliary Shutdown Panel states that if temporary Entry into the room or area is mode applicability identified) evacuation of the control room is required due to some abnormal prohibited or IMPEDED (Note 5) station condition, the operator can establish and maintain the AND station in a safe hot shutdown condition through the use of an

b. Entry into the room or area Auxiliary Shutdown Panel located outside of the control room.

is prohibited or impeded. Note Note:If the equipment in the N/A Note 5:If the equipment in the None listed room or area was already listed area was already inoperable or out-of-service inoperable or out-of-before the event occurred, then service before the event 79 of 116

no emergency classification is occurred, then no warranted. emergency classification is warranted. 80 of 116

Table H-2 Safe Shutdown Rooms/Areas Room/Area Mode Applicability Aux Bldg. 565 ele. Room 236 #2 Mechanical Penetration 1, 2, 3 Room Aux Bldg. 585 ele. Room 304 corridor outside #3 1, 2, 3 Mechanical Penetration Room Aux Bldg. 603 ele. Room 427 - #2 Electrical Penetration 1, 2, 3 Room 81 of 116

DBNPS NEI IC# NEI IC Wording DBNPS IC Wording Difference Justification IC#(s) HA6 Control Room evacuation HA6 Control Room evacuation None resulting in transfer of plant resulting in transfer of plant control to alternate locations. control to alternate locations MODE: All MODE: ALL NEI Ex. DBNPS NEI Example EAL Wording DBNPS EAL Wording Difference Justification EAL # EAL # 1 An event has resulted in plant HA6.1 An event has resulted in plant Auxiliary Shutdown Panel is the DBNPS site-specific remote control being transferred from the control being transferred from the shutdown panels and local control stations. Control Room to (site-specific Control Room to the Auxiliary remote shutdown panels and Shutdown Panel local control stations). 82 of 116

DBNPS NEI IC# NEI IC Wording DBNPS IC Wording Difference Justification IC#(s) HA7 Other conditions exist which in the HA7 Other conditions exist which in the None judgment of the Emergency Director judgment of the Emergency Director warrant declaration of an Alert. warrant declaration of an Alert MODE: All MODE: ALL NEI Ex. DBNPS NEI Example EAL Wording DBNPS EAL Wording Difference Justification EAL # EAL # 1 Other conditions exist which, in the HA7.1 Other conditions exist which, in the None judgment of the Emergency Director, judgment of the Emergency Director, indicate that events are in progress or indicate that events are in progress or have occurred which involve an actual have occurred which involve an actual or or potential substantial degradation of potential substantial degradation of the the level of safety of the plant or a level of safety of the plant or a security security event that involves probable life event that involves probable life threatening risk to site personnel or threatening risk to site personnel or damage to site equipment because of damage to site equipment because of HOSTILE ACTION. Any releases are HOSTILE ACTION. ANY releases are expected to be limited to small fractions expected to be limited to small fractions of the EPA Protective Action Guideline of the EPA Protective Action Guideline exposure levels. exposure levels. 83 of 116

DBNPS NEI IC# NEI IC Wording DBNPS IC Wording Difference Justification IC#(s) HS1 HOSTILE ACTION within the HS1 HOSTILE ACTION within the None PROTECTED AREA PROTECTED AREA MODE: All MODE: ALL NEI Ex. DBNPS NEI Example EAL Wording DBNPS EAL Wording Difference Justification EAL # EAL # 1 A HOSTILE ACTION is occurring HS1.1 A HOSTILE ACTION is occurring or has The site-specfic security shift supervision is defined as the or has occurred within the occurred within the PROTECTED AREA Security Shift Supervisor. PROTECTED AREA as reported as reported by the Security Shift by the (site-specific security shift Supervisor supervision). 84 of 116

DBNPS NEI IC# NEI IC Wording DBNPS IC Wording Difference Justification IC#(s) HS6 Inability to control a key safety HS6 Inability to control a key safety function Revised mode applicability to align with site-specific mode function from outside the Control from outside the Control Room restrictions, and none of the three listed safety functions Room. are required when the reactor is defueled. In addition, per MODE: 1 - Power Operation, 2 - Startup, the plant USAR the DBNPS is designed to be maintained in MODE: All 3 - Hot Standby, 4 - Hot Shutdown a safe hot shutdown condition from outside the control until access to the control room is regained and the need for taking the station to a cold shutdown condition from outside the control room is not anticipated. NEI Ex. DBNPS NEI Example EAL Wording DBNPS EAL Wording Difference Justification EAL # EAL # 1 a.An event has resulted in plant HS6.1 An event has resulted in plant control Auxiliary Shutdown Panel is the DBNPS site-specific control being transferred from the being transferred from the Control Room remote shutdown panels and local control stations. Control Room to (site-specific to the Auxiliary Shutdown Panel Added parentheticals after Core cooling and RCS heat remote shutdown panels and AND removal for clarification. local control stations). Control of ANY of the following key Deleted the word "control" after "reactivity" as it is AND safety functions is not reestablished redundant. b.Control of ANY of the following within 15 min. (Note 1): 15 minutes is the DBNPS site-specific number of minutes. key safety functions is not z Reactivity reestablished within (site-specific Added (ability to maintain heat sink) after RCS heat removal number of minutes). z Core cooling (RCS inventory) to clarify. z Reactivity control z RCS heat removal (ability to maintain heat sink) z Core cooling [PWR] / RCS water level [BWR] z RCS heat removal Note Note:The Emergency Director N/A Note 1:The Emergency Director should The classification timeliness and event level note has been should declare the Unusual Event declare the event promptly upon standardized across the DBNPS EAL scheme by promptly upon determining that determining that time limit has been referencing the "time limit" specified within the EAL wording. the applicable time has been exceeded, or will likely be exceeded. 85 of 116

exceeded, or will likely be exceeded. 86 of 116

DBNPS NEI IC# NEI IC Wording DBNPS IC Wording Difference Justification IC#(s) HS7 Other conditions exist which in HS7 Other conditions exist which in the None the judgment of the Emergency judgment of the Emergency Director Director warrant declaration of a warrant declaration of a Site Area Site Area Emergency. Emergency MODE: All MODE: ALL NEI Ex. DBNPS NEI Example EAL Wording DBNPS EAL Wording Difference Justification EAL # EAL # 1 Other conditions exist which in HS7.1 Other conditions exist which in the None the judgment of the Emergency judgment of the Emergency Director Director indicate that events are indicate that events are in progress or in progress or have occurred have occurred which involve actual or which involve actual or likely likely major failures of plant functions major failures of plant functions needed for protection of the public or needed for protection of the HOSTILE ACTION that results in public or HOSTILE ACTION that intentional damage or malicious acts, (1) results in intentional damage or toward site personnel or equipment that malicious acts, (1) toward site could lead to the likely failure of or, (2) personnel or equipment that that prevent effective access to could lead to the likely failure of equipment needed for the protection of or, (2) that prevent effective the public. ANY releases are not access to equipment needed for expected to result in exposure levels the protection of the public. Any which exceed EPA Protective Action releases are not expected to Guideline exposure levels beyond the result in exposure levels which SITE BOUNDARY. exceed EPA Protective Action Guideline exposure levels beyond the site boundary. 87 of 116

DBNPS NEI IC# NEI IC Wording DBNPS IC Wording Difference Justification IC#(s) HG1 HOSTILE ACTION resulting in HG1 HOSTILE ACTION resulting in loss of None loss of physical control of the physical control of the facility facility. MODE: ALL MODE: All NEI Ex. DBNPS NEI Example EAL Wording DBNPS EAL Wording Difference Justification EAL # EAL # 1 a.A HOSTILE ACTION is HG1.1 A HOSTILE ACTION is occurring or has The site-specfic security shift supervision is defined as the occurring or has occurred within occurred within the PROTECTED AREA Security Shift Supervisor. the PROTECTED AREA as as reported by the Security Shift Deleted the word "control" after "reactivity" as it is reported by the (site-specific Supervisor redundant. security shift supervision). AND EITHER of the following has Added parentheticals after Core cooling and RCS heat AND occurred: removal for clarification. b.EITHER of the following has ANY of the following safety functions Added (ability to maintain heat sink) after RCS heat occurred: cannot be controlled or maintained removal to clarify.

1. ANY of the following safety z Reactivity functions cannot be z Core cooling (RCS inventory) controlled or maintained.

z RCS heat removal (ability to z Reactivity control maintain heat sink) z Core cooling OR [PWR]/RCS water level [BWR] Damage to spent fuel has occurred or is IMMINENT z RCS heat removal OR

2. Damage to spent fuel has occurred or is IMMINENT.

88 of 116

DBNPS NEI IC# NEI IC Wording DBNPS IC Wording Difference Justification IC#(s) HG7 Other conditions exist which in HG7 Other conditions exist which in the None the judgment of the Emergency judgment of the Emergency Director Director warrant declaration of a warrant declaration of a General General Emergency Emergency MODE: All MODE: ALL NEI Ex. DBNPS NEI Example EAL Wording DBNPS EAL Wording Difference Justification EAL # EAL # 1 Other conditions exist which in HG7.1 Other conditions exist which in the None the judgment of the Emergency judgment of the Emergency Director Director indicate that events are indicate that events are in progress or in progress or have occurred have occurred which involve actual or which involve actual or IMMINENT substantial core degradation IMMINENT substantial core or melting with potential for loss of degradation or melting with containment integrity or HOSTILE potential for loss of containment ACTION that results in an actual loss of integrity or HOSTILE ACTION physical control of the facility. Releases that results in an actual loss of can be reasonably expected to exceed physical control of the facility. EPA Protective Action Guideline Releases can be reasonably exposure levels offsite for more than the expected to exceed EPA immediate site area. Protective Action Guideline exposure levels offsite for more than the immediate site area. 89 of 116

Category S System Malfunction 90 of 116

DBNPS NEI IC# NEI IC Wording DBNPS IC Wording Difference Justification IC#(s) SU1 Loss of all offsite AC power SU1 Loss of ALL offsite AC power essential is the site-specific designation for the DBNPS capability to emergency buses for capability to essential buses for emergency AC buses. 15 minutes or longer. 15 minutes or longer MODE: Power Operation, MODE: 1 - Power Operation, 2 - Startup, Hot Standby, Hot Startup, 3 - Hot Standby, 4 - Hot Shutdown Shutdown NEI Ex. DBNPS NEI Example EAL Wording DBNPS EAL Wording Difference Justification EAL # EAL # 1 Loss of ALL offsite AC power SU1.1 Loss of ALL offsite AC power Essential buses C1 and D1 are the site-specific emergency buses. capability to (site-specific capability, Table S-1, to essential Table S-1 tabularizes the onsite and offsite AC power sources. emergency buses) for 15 minutes 4160V buses C1 and D1 for 15 or longer. min. (Note 1) Note The Emergency Director should N/A Note 1: The Emergency Director The classification timeliness and event level note has been declare the Unusual Event should declare the standardized across the DBNPS EAL scheme by referencing the promptly upon determining that event promptly upon "time limit" specified within the EAL wording. 15 minutes has been exceeded, determining that time or will likely be exceeded. limit has been exceeded, or will likely be exceeded. 91 of 116

Table S-1 Offsite/Onsite AC Power Sources Offsite:

  • X11
  • X11 (back-fed via Main Transformer)
  • X01
  • X02 Onsite:
  • EDG1
  • EDG2
  • SBODG 92 of 116

DBNPS NEI IC# NEI IC Wording DBNPS IC Wording Difference Justification IC#(s) SU2 UNPLANNED loss of Control SU3 UNPLANNED loss of Control None Room indications for 15 minutes Room indications for 15 minutes or longer. or longer. MODE: Power Operation, MODE: 1 - Power Operation, 2 - Startup, Hot Standby, Hot Startup, 3 - Hot Standby, 4 - Hot Shutdown Shutdown NEI Ex. DBNPS NEI Example EAL Wording DBNPS EAL Wording Difference Justification EAL # EAL # 1 An UNPLANNED event results SU3.1 An UNPLANNED event results in The site-specific Safety System Parameter list is tabulated in in the inability to monitor one or the inability to monitor one or Table S-2. more of the following more Table S-2 SAFETY parameters from within the SYSTEM parameters from within Control Room for 15 minutes or the Control Room for 15 min. longer. (Note 1) Note The Emergency Director should N/A Note 1: The Emergency Director The classification timeliness and event level note has been declare the Unusual Event should declare the event standardized across the DBNPS EAL scheme by referencing the promptly upon determining that promptly upon "time limit" specified within the EAL wording. 15 minutes has been exceeded, determining that time or will likely be exceeded. limit has been exceeded, or will likely be exceeded. 93 of 116

[BWR parameter list] [PWR parameter list] Reactor Power Reactor Power RCS Water Level RCS Level RCS Pressure RCS Pressure Primary Containment Pressure In-Core/Core Exit Temperature Suppression Pool Level Levels in at least (site-specific number) steam generators Suppression Pool Temperature Steam Generator Auxiliary or Emergency Feed Water Flow Table S-2 Safety System Parameters

  • Reactor power
  • RCS pressure
  • In-core T/C temperature
  • Level in at least one S/G
  • Auxiliary or emergency feed flow 94 of 116

DBNPS NEI IC# NEI IC Wording DBNPS IC Wording Difference Justification IC#(s) SU3 Reactor coolant activity greater SU4 Reactor coolant activity greater None than Technical Specification than Technical Specification allowable limits. allowable limits MODE: Power Operation, MODE: 1 - Power Operation, 2 - Startup, Hot Standby, Hot Startup, 3 - Hot Standby, 4 - Hot Shutdown Shutdown NEI Ex. DBNPS NEI Example EAL Wording DBNPS EAL Wording Difference Justification EAL # EAL # 1 (Site-specific radiation monitor) SU4.1 Letdown Monitor (RE 1998) The DBNPS historical highest failed fuel level of 0.007% reading greater than (site-specific reading > 2.0E+06 cpm corresponds to a reading of 1.4E+05 cpm on the Failed Fuel value). Monitor (RE 1998). The top of calibrated range for RE 1998 is 1.0E+07. A monitor value of 2.0E+06 (0.1% clad damage) was chosen for its ability to be recognized even though exceeding Technical Specification Limits could potentially result in much higher readings. 2 Sample analysis indicates that a SU4.2 RCS activity > Technical TS LCO 3.4.16 specifies the allowed RCS activity limits. reactor coolant activity value is Specification LCO 3.4.16 as greater than an allowable limit indicated by ANY of the following: specified in Technical Specifications.

  • Dose equivalent I-131 in the unacceptable region of Figure 3.4.16-1
                                                       *   > 1 Ci/gm dose equivalent I-131 for > 48 hrs.
                                                       *   > 100/ Ci/gm gross specific coolant activity 95 of 116

DBNPS NEI IC# NEI IC Wording DBNPS IC Wording Difference Justification IC#(s) SU4 RCS leakage for 15 minutes or SU5 RCS leakage for 15 minutes or None longer. longer MODE: Power Operation, MODE: 1 - Power Operation, 2 - Startup, Hot Standby, Hot Startup, 3 - Hot Standby, 4 - Hot Shutdown Shutdown NEI Ex. DBNPS NEI Example EAL Wording DBNPS EAL Wording Difference Justification EAL # EAL # 1 RCS unidentified or pressure SU5.1 RCS leakage > 10 gpm for 15 The DBNPS Technical Specification defines unidentified leakage boundary leakage greater than min. (Note 1) as all RCS leakage that is not identified, regardless of where that (site-specific value) for 15 leakage may be (either inside or outside containment). Deleted minutes or longer. unidentified to align with site-specific terminology. EAL #2 was not included. DBNPS does not have the capability to 2 RCS identified leakage greater N/A N/A classify leakage as identified leakage within 15 minutes. than (site-specific value) for 15 Therefore, for the purpose of this IC and EAL all RCS leakage is minutes or longer. considered unidentified leakage and the 10 gpm leak rate applies. 3 Leakage from the RCS to a N/A N/A EAL #3 was not included. The DBNPS Technical Specification location outside containment defines unidentified leakage as all RCS leakage that is not greater than 25 gpm for 15 identified, regardless of where that leakage may be (either inside minutes or longer. or outside containment) and therefore EAL #3 was combined with EAL #1. Note The Emergency Director should N/A Note 1: The Emergency Director The classification timeliness and event level note has been declare the Unusual Event should declare the standardized across the DBNPS EAL scheme by referencing the promptly upon determining that event promptly upon "time limit" specified within the EAL wording. 15 minutes has been exceeded, determining that time or will likely be exceeded. limit has been exceeded, or will likely be exceeded. 96 of 116

DBNPS NEI IC# NEI IC Wording DBNPS IC Wording Difference Justification IC#(s) SU5 Automatic or manual (trip SU6 Automatic or manual trip fails to None [PWR] / scram [BWR]) fails to shut down the reactor shutdown the reactor. MODE: 1 - Power Operation MODE: Power Operation NEI Ex. DBNPS NEI Example EAL Wording DBNPS EAL Wording Difference Justification EAL # EAL # 1 a. An automatic (trip [PWR] / SU6.1 An automatic trip did not shut Added the phrase "... as indicated by reactor power 5% to specify scram [BWR]) did not down the reactor as indicated by the criteria under which the reactor is not shutdown. shutdown the reactor. reactor power 5% after ANY Added the phrase "... after any RPS setpoint is exceeded" to clarify RPS setpoint is exceeded AND that it is a failure of the automatic trip when a valid trip signal has AND been exceeded.

b. A subsequent manual action taken at the reactor control A subsequent manual trip action The term reactor control consoles was replaced with Controls consoles is successful in taken at the Controls Area Area. The controls area is the site-specific term for reactor shutting down the reactor. (manual RPS trip pushbuttons or controls consoles.

de-energizing E2 and F2) is Manual RPS trip pushbuttons or de-energizing E2 and F2 are the successful in shutting down the manual control console (Controls Area) actions taken to shut down reactor as indicated by reactor the reactor. power < 5% (Note 8) Reactor power below 5% is the site-specific indication of a successful reactor trip. As specified in the generic developers guidance Developers may include site-specific EOP criteria indicative of a successful reactor shutdown in an EAL statement, the Basis or both (e.g., a reactor power level). 2 a.A manual trip ([PWR] / scram SU6.2 A manual trip did not shut down Added the phrase "... as indicated by reactor power 5% to specify [BWR]) did not shutdown the the reactor as indicated by the criteria under which the reactor is not shutdown. reactor. reactor power 5% after ANY manual trip action was initiated AND 97 of 116

b.EITHER of the following: AND Added the phrase "... after ANY manual trip action was initiated" to clarify that it is a failure of any manual trip when an actual manual

1. A subsequent manual A subsequent automatic trip or trip signal has been inserted.

action taken at the manual trip action taken at the reactor control consoles Controls Area (manual RPS trip Combined conditions b.1 and b.2 into a single statement to simplify is successful in shutting pushbuttons or de-energizing E2 the presentation. down the reactor. and F2) is successful in shutting Manual RPS trip pushbuttons or de-energizing E2 and F2 are the down the reactor as indicated by OR manual control console (Controls Area) actions taken to shut down reactor power < 5% (Note 8) the reactor. 2 A subsequent automatic (trip [PWR] / scram The term reactor control consoles was replaced with Controls [BWR]) is successful in Area. The controls area is the site-specific term for reactor shutting down the reactor. controls consoles. As specified in the generic developers guidance Developers may include site-specific EOP criteria indicative of a successful reactor shutdown in an EAL statement, the Basis or both (e.g., a reactor power level). Reactor power below 5% is the site-specific indication of a successful reactor trip. Notes Note:A manual action is any N/A Note 8: A manual trip action is Added the word trip to actions to be consistent with EAL wording. operator action, or set of any operator action, or actions, which causes the set of actions, which control rods to be rapidly causes the control rods inserted into the core, and does to be rapidly inserted not include manually driving in into the core, and does control rods or implementation not include manually of boron injection strategies. driving in control rods or implementation of boron injection strategies. 98 of 116

DBNPS NEI IC# NEI IC Wording DBNPS IC Wording Difference Justification IC#(s) SU6 Loss of all onsite or offsite SU7 Loss of ALL onsite or offsite None communications capabilities. communications capabilities. MODE: Power Operation, MODE: 1 - Power Operation, 2 - Startup, Hot Standby, Hot Startup, 3 - Hot Standby, 4 - Hot Shutdown Shutdown NEI Ex. DBNPS NEI Example EAL Wording DBNPS EAL Wording Difference Justification EAL # EAL # 1 Loss of ALL of the following SU7.1 Loss of ALL Table S-4 onsite Table S-4 provides a site-specific list of onsite, ORO and NRC onsite communication methods: communication methods communications methods. (site-specific list of communications methods) 2 Loss of ALL of the following SU7.2 Loss of ALL Table S-4 ORO ORO communications methods: communication methods (site-specific list of communications methods) 3 Loss of ALL of the following SU7.3 Loss of ALL Table S-4 NRC NRC communications methods: communication methods (site-specific list of communications methods) 99 of 116

Table S-4 Communication Methods System Onsite ORO NRC Public Address (Gaitronics) X Onsite Radios X Plant Telephones X X X Commercial Telephones X X X 4-Way Ringdown Circuit X Satellite Phones X X Cellular Phones X X NRC Emergency Telephone System X 100 of 116

DBNPS NEI IC# NEI IC Wording DBNPS IC Wording Difference Justification IC#(s) SU7 Failure to isolate containment or SU8 Failure to isolate containment or None loss of containment pressure loss of containment pressure control. [PWR] control MODE: Power Operation, MODE: 1 - Power Operation, 2 - Startup, Hot Standby, Hot Startup, 3 - Hot Standby, 4 - Hot Shutdown Shutdown NEI Ex. DBNPS NEI Example EAL Wording DBNPS EAL Wording Difference Justification EAL # EAL # 1 a.Failure of containment to SU8.1 ANY penetration is not closed Simplified the EAL into a single statement for usability. isolate when required by an within 15 min. of a VALID actuation signal. containment isolation signal (Note 1) AND b.ALL required penetrations are not closed within 15 minutes of the actuation signal. 2 a.Containment pressure greater SU8.2 Containment pressure > 40 psia Simplified the EAL into a single statement for usability. than (site-specific pressure). with < one full train of 40 psia is the site specific containment cooling system actuation containment cooling, Table S-6, AND setpoint. operating per design for 15 b.Less than one full train of (site- min. (Note 1) Table S-6 specifies the site specific combinations of CT Spray specific system or equipment) is Pumps and CT Cooling Fans that constitute a full train of operating per design for 15 containment cooling. minutes or longer. N/A N/A N/A Note 1: The Emergency Director Added Note 1 to be consistent with criteria applied to EALs with a should declare the timing component. event promptly upon determining that time limit has been 101 of 116

exceeded, or will likely be exceeded Table S-6 Containment Cooling Full Train CT Spray Pumps CT Cooling Fans 2 0 1 1 0 2 102 of 116

DBNPS NEI IC# NEI IC Wording DBNPS IC Wording Difference Justification IC#(s) SA1 Loss of all but one AC power SA1 Loss of ALL but one AC power essential is the site-specific designation for the DBNPS source to emergency buses for source to essential buses for 15 emergency AC buses. 15 minutes or longer. minutes or longer. MODE: Power Operation, MODE: 1 - Power Operation, 2 - Startup, Hot Standby, Hot Startup, 3 - Hot Standby, 4 - Hot Shutdown Shutdown NEI Ex. DBNPS NEI Example EAL Wording DBNPS EAL Wording Difference Justification EAL # EAL # 1 a.AC power capability to (site- SA1.1 AC power capability, Table S-1, Essential buses C1 and D1 are the site-specific emergency buses. specific emergency buses) is to essential 4160V buses C1 Onsite and offsite AC power sources are tabularized in Table S-1. reduced to a single power and D1 reduced to a single source for 15 minutes or longer. power source for 15 min. (Note 1) AND AND

b. Any additional single power source failure will result in a loss ANY additional single power of all AC power to SAFETY source failure will result in loss of SYSTEMS. ALL AC power to SAFETY SYSTEMS Note The Emergency Director should N/A Note 1: The Emergency The classification timeliness and event level note has been declare the Alert promptly upon Director should declare standardized across the DBNPS EAL scheme by referencing the determining that 15 minutes has the event promptly "time limit" specified within the EAL wording.

been exceeded, or will likely be upon determining that exceeded. time limit has been exceeded, or will likely be exceeded. 103 of 116

DBNPS NEI IC# NEI IC Wording DBNPS IC Wording Difference Justification IC#(s) SA2 UNPLANNED loss of Control SA3 UNPLANNED loss of Control None Room indications for 15 minutes Room indications for 15 minutes or longer with a significant or longer with a significant transient in progress. transient in progress. MODE: Power Operation, MODE: 1 - Power Operation, 2 - Startup, Hot Standby, Hot Startup, 3 - Hot Standby, 4 - Hot Shutdown Shutdown NEI Ex. DBNPS NEI Example EAL Wording DBNPS EAL Wording Difference Justification EAL # EAL # 1 An UNPLANNED event results in SA3.1 An UNPLANNED event results in The site-specific Safety System Parameters are listed in Table S-the inability to monitor one or the inability to monitor one or 2. more of the following parameters more Table S-2 SAFETY Added or may be to take into consideration of the possible loss from within the Control Room for SYSTEM parameters from within of indicators relied upon to determine if a transient is in progress. 15 minutes or longer. the Control Room for 15 min. (Note 1) The significant transient list has been tabularized in Table S-3 for AND ease of use. AND ANY of the following transient events in progress. ANY Significant Transient is or may be in progress, Table S-3 z Automatic or manual runback greater than 25% thermal reactor power z Electrical load rejection greater than 25% full electrical load z Reactor scram [BWR] / trip [PWR] z ECCS (SI) actuation 104 of 116

z Thermal power oscillations greater than 10% [BWR] Note The Emergency Director should N/A Note 1: The Emergency Director The classification timeliness and event level note has been declare the Unusual Event should declare the event standardized across the DBNPS EAL scheme by referencing the promptly upon determining that promptly upon "time limit" specified within the EAL wording. 15 minutes has been exceeded, determining that time or will likely be exceeded. limit has been exceeded, or will likely be exceeded. [BWR parameter list] [PWR parameter list] Reactor Power Reactor Power RCS Water Level RCS Level RCS Pressure RCS Pressure Primary Containment Pressure In-Core/Core Exit Temperature Suppression Pool Level Levels in at least (site-specific number) steam generators Suppression Pool Temperature Steam Generator Auxiliary or Emergency Feed Water Flow Table S-2 Safety System Parameters

  • Reactor power
  • RCS pressure
  • In-core T/C temperature
  • Level in at least one S/G
  • Auxiliary or emergency feed flow Table S-3 Significant Transients
  • Reactor trip
  • Runback > 25% thermal power
  • Electrical load rejection > 25% electrical load
  • Safety injection actuation 105 of 116

DBNPS NEI IC# NEI IC Wording DBNPS IC Wording Difference Justification IC#(s) SA5 Automatic or manual (trip [PWR] SA6 Automatic or manual trip fails to The term reactor control consoles was replaced with Controls

       / scram [BWR]) fails to shutdown          shut down the reactor and          Area. The controls area is the site-specific term for reactor the reactor, and subsequent               subsequent manual actions          controls consoles.

manual actions taken at the taken at the controls area are reactor control consoles are not not successful in shutting down successful in shutting down the the reactor reactor. MODE: 1 - Power Operation MODE: Power Operation NEI Ex. DBNPS NEI Example EAL Wording DBNPS EAL Wording Difference Justification EAL # EAL # 1 a.An automatic or manual (trip SA6.1 An automatic or manual trip fails Added the phrase "... as indicated by reactor power 5% to specify [PWR] / scram [BWR]) did not to shut down the reactor as the criteria under which the reactor is not shutdown. shutdown the reactor. indicated by reactor power 5% Manual RPS trip pushbuttons and de-energizing E2 and F2 are the AND manual control console (Controls Area) actions taken to shut down AND the reactor. b.Manual actions taken at the reactor control consoles are not Manual trip actions taken at the The term reactor control consoles was replaced with Controls successful in shutting down the Controls Area (manual RPS trip Area. The controls area is the site-specific term for reactor reactor. pushbuttons and de-energizing controls consoles. E2 and F2) are not successful in shutting down the reactor as As specified in the generic developers guidance Developers may indicated by reactor power 5% include site-specific EOP criteria indicative of a successful reactor (Note 8) shutdown in an EAL statement, the Basis or both (e.g., a reactor power level). Reactor power below 5% is the site-specific indication of a successful reactor trip. Notes Note:A manual action is any N/A Note 8:A manual trip action is Added the word trip to actions to be consistent with EAL wording operator action, or set of any operator action, or set of actions, which causes the actions, which causes the control rods to be rapidly control rods to be rapidly inserted into the core, and does 106 of 116

inserted into the core, and does not include manually driving in not include manually driving in control rods or implementation control rods or implementation of boron injection strategies. of boron injection strategies. 107 of 116

DBNPS NEI IC# NEI IC Wording DBNPS IC Wording Difference Justification IC#(s) SA9 Hazardous event affecting a SA9 Hazardous event affecting a None SAFETY SYSTEM needed for SAFETY SYSTEM required for the current operating mode. the current operating mode. MODE: Power Operation, MODE: 1 - Power Operation, 2 - Startup, Hot Standby, Hot Startup, 3 - Hot Standby, 4 - Hot Shutdown Shutdown NEI Ex. DBNPS NEI Example EAL Wording DBNPS EAL Wording Difference Justification EAL # EAL # 1 a.The occurrence of ANY of the SA9.1 The occurrence of ANY Table The hazardous events have been listed in Table S-5 to improve the following hazardous events: S-5 Hazardous Event readability of the DBNPS EAL. z Seismic event (earthquake) AND EITHER: The NEI list of hazardous events includes all DBNPS hazardous events. No additional hazardous events could be identified. z Internal or external flooding

  • Event has caused event indications of degraded Deleted the word damage in the first condition as that performance in at least presupposes the determination of damage, but the criteria is z High winds or tornado strike one train of a SAFETY degraded performance of a safety system train.

z FIRE SYSTEM required for Replaced the word needed with required consistent with the current operating z EXPLOSION technical specifications. mode. z (site-specific hazards) The Emergency Director is the site specific terminology for the

  • The event has caused ERO position responsible for making emergency classifications.

z Other events with similar VISIBLE DAMAGE to a hazard characteristics as SAFETY SYSTEM determined by the Shift component or structure Manager required for the current AND operating mode b.EITHER of the following:

1. Event damage has caused indications of degraded performance in at least one train of a 108 of 116

SAFETY SYSTEM needed for the current operating mode. OR

2. The event has caused VISIBLE DAMAGE to a SAFETY SYSTEM component or structure needed for the current operating mode.

Table S-5 Hazardous Events z Seismic event (earthquake) z Internal or external FLOODING event z High winds or tornado strike z FIRE z EXPLOSION z Other events with similar hazard characteristics as determined by the Emergency Director 109 of 116

DBNPS NEI IC# NEI IC Wording DBNPS IC Wording Difference Justification IC#(s) SS1 Loss of all offsite and all onsite SS1 Loss of ALL offsite power and essential is the site-specific designation for the DBNPS AC power to emergency buses ALL onsite AC power to emergency AC buses. for 15 minutes or longer. essential buses for 15 minutes MODE: Power Operation, or longer Startup, Hot Standby, Hot MODE: 1 - Power Operation, 2 - Shutdown Startup, 3 - Hot Standby, 4 - Hot Shutdown NEI Ex. DBNPS NEI Example EAL Wording DBNPS EAL Wording Difference Justification EAL # EAL # 1 Loss of ALL offsite and ALL SS1.1 Loss of ALL offsite and ALL Essential buses C1 and D1 are the site-specific emergency buses. onsite AC power to (site-specific onsite AC power capability, Added term capability after power for clarification. emergency buses) for 15 Table S-1, to essential 4160V minutes or longer. buses C1 and D1 for 15 min. Onsite and onsite AC power sources are tabularized in Table S-1. (Note 1) Note The Emergency Director should N/A Note 1: The Emergency The classification timeliness and event level note has been declare the Unusual Event Director should standardized across the DBNPS EAL scheme by referencing the promptly upon determining that declare the event "time limit" specified within the EAL wording. 15 minutes has been exceeded, promptly upon or will likely be exceeded. determining that time limit has been exceeded, or will likely be exceeded. 110 of 116

DBNPS NEI IC# NEI IC Wording DBNPS IC Wording Difference Justification IC#(s) SS5 Inability to shutdown the reactor SS6 Inability to shut down the None causing a challenge to (core reactor causing a challenge to cooling [PWR] / RCS water level core cooling or RCS heat [BWR]) or RCS heat removal. removal MODE: Power Operation MODE: 1 - Power Operation NEI Ex. DBNPS NEI Example EAL Wording DBNPS EAL Wording Difference Justification EAL # EAL # 1 a.An automatic or manual (trip SS6.1 An automatic or manual trip fails Added the phrase "... as indicated by reactor power 5% to [PWR] / scram [BWR]) did not to shut down the reactor as specify the criteria under which the reactor is not shutdown. shutdown the reactor. indicated by reactor power As specified in the generic developers guidance Developers may 5% AND include site-specific EOP criteria indicative of a successful reactor AND shutdown in an EAL statement, the Basis or both (e.g., a reactor b.All manual actions to shutdown power level). Reactor power < 5% is the site-specific indication of the reactor have been ALL actions to shut down the a successful reactor scram. unsuccessful. reactor are not successful as indicated by reactor power Deleted the term manual actions from the second condition. For AND 5% generic IC SS5, all actions to shut down the reactor can be c.EITHER of the following credited, including emergency boration which is not considered a AND EITHER: conditions exist: manual trip action.

           *    (Site-specific indication of
  • Calculated Clad Indication of continuing core cooling degradation is manifested by an inability to adequately Temperature in Region 3 Calculated Clad Temperature in Region 3 (DB-OP-02000 Figure remove heat from the (DB-OP-02000 Figure 2) 2).

core)

  • MFW, AFW and MU-HPI An extreme challenge to heat removal is defined as a complete
           *    (Site-specific indication of               PORV Cooling are ALL         loss of MFW, AFW and MU-HPI PORV Cooling.

an inability to adequately unavailable remove heat from the RCS) 111 of 116

DBNPS NEI IC# NEI IC Wording DBNPS IC Wording Difference Justification IC#(s) SS8 Loss of all Vital DC power for 15 SS2 Loss of ALL essential DC essential is the site-specific designation for the DBNPS vital DC minutes or longer. power for 15 minutes or longer. buses. MODE: Power Operation, MODE: 1 - Power Operation, 2 - Startup, Hot Standby, Hot Startup, 3 - Hot Standby, 4 - Shutdown Hot Shutdown NEI Ex. DBNPS NEI Example EAL Wording DBNPS EAL Wording Difference Justification EAL # EAL # 1 Indicated voltage is less than SS2.1 Loss of ALL 125 VDC power < 105 VDC on essential DC distribution panels D1P, D1N, D2P and (site-specific bus voltage value) based on battery bus voltage D2N are the site-specific minimum Vital DC bus design. on ALL (site-specific Vital DC indications < 105 VDC on ALL D1P, D1N, D2P and D2N are the site-specific essential DC buses. busses) for 15 minutes or essential DC distribution panels longer. D1P, D1N, D2P and D2N for 15 min. (Note 1) Note The Emergency Director should N/A Note 1:The Emergency Director The classification timeliness and event level note has been declare the Unusual Event should declare the event standardized across the DBNPS EAL scheme by referencing the promptly upon determining that promptly upon determining that "time limit" specified within the EAL wording. 15 minutes has been exceeded, time limit has been exceeded, or will likely be exceeded. or will likely be exceeded. 112 of 116

DBNPS NEI IC# NEI IC Wording DBNPS IC Wording Difference Justification IC#(s) SG1 Prolonged loss of all offsite and SG1a Prolonged loss of ALL offsite essential is the site-specific designation for the DBNPS all onsite AC power to and ALL onsite AC power to emergency AC buses. emergency buses. essential buses Combined NEI ICs SG1 and SG8 under the loss of power category MODE: Power Operation, MODE: 1 - Power Operation, 2 for usability. FENOC considered the end-user human factors into Startup, Hot Standby, Hot - Startup, 3 - Hot Standby, 4 - combining SG1 and SG8 were combined into one IC and Shutdown Hot Shutdown numbering the EALs SG1.1 and SG1.2. Combining the EALs will allow the AC and DC loss of power EALs to be evaluated in series making the evaluation of loss of power more effective and efficient. Although the EAL sub-category identifier does differ from the methodology, the EAL itself and the basis do not differ from the standard emergency classification and action level scheme, thus the requirement of 10 CFR 50.47(b)(4) will continue to be met. NEI Ex. DBNPS NEI Example EAL Wording DBNPS EAL Wording Difference Justification EAL # EAL # 1 a.Loss of ALL offsite and ALL SG1.1 Loss of ALL offsite and ALL Essential buses C1 and D1 are the site-specific emergency onsite AC power to (site-specific onsite AC power capability, buses. emergency buses). Table S-1, to essential 4160V Added term capability after power for clarification. buses C1 and D1 AND Onsite and onsite AC power sources are tabularized in Table S-1. AND EITHER: b.EITHER of the following: Four hours is the minimum time the SBODG can run fully loaded

  • Restoration of at least one with the minimum fuel oil tank supply.
  • Restoration of at least essential bus in < 4 hours is one AC emergency bus Indication of continuing core cooling degradation is manifested by not likely (Note 1) in less than (site-specific Calculated Clad Temperature in Region 3 (DB-OP-02000 Figure hours) is not likely.
  • Calculated Clad 2)

Temperature in Region 3

           *    (Site-specific indication of            (DB-OP-02000 Figure 2) an inability to adequately remove heat from the core)

Note The Emergency Director should N/A Note 1: The Emergency The classification timeliness and event level note has been declare the General Emergency Director should declare standardized across the DBNPS EAL scheme by referencing the promptly upon determining that the event promptly "time limit" specified within the EAL wording. 113 of 116

(site-specific hours) has been upon determining that exceeded, or will likely be time limit has been exceeded. exceeded, or will likely be exceeded. 114 of 116

DBNPS NEI IC# NEI IC Wording DBNPS IC Wording Difference Justification IC#(s) SG8 Loss of all AC and Vital DC SG1b Loss of ALL essential AC and essential is the site-specific designation for the DBNPS power sources for 15 minutes or DC power sources for 15 emergency AC and DC power sources. longer. minutes or longer. Combined NEI ICs SG1 and SG8 under the loss of power MODE: Power Operation, MODE: 1 - Power Operation, 2 category. FENOC considered the end-user human factors into Startup, Hot Standby, Hot - Startup, 3 - Hot Standby, 4 - combining SG1 and SG8 were combined into one IC and Shutdown Hot Shutdown numbering the EALs SG1.1 and SG1.2. Combining the EALs will allow the AC and DC loss of power EALs to be evaluated in series making the evaluation of loss of power more effective and efficient. Although the EAL sub-category identifier does differ from the methodology, the EAL itself and the basis do not differ from the standard emergency classification and action level scheme, thus the requirement of 10 CFR 50.47(b)(4) will continue to be met. NEI Ex. DBNPS NEI Example EAL Wording DBNPS EAL Wording Difference Justification EAL # EAL # 1 a.Loss of ALL offsite and ALL SG1.2 Loss of ALL offsite and ALL Essential buses C1 and D1 are the site-specific emergency buses. onsite AC power to (site-specific onsite AC power capability, Added term capability after power for clarification. emergency buses) for 15 minutes Table S-1, to essential 4160V or longer. buses C1 and D1 for 15 min. < 105 VDC is the site-specific minimum essential DC bus design voltage. AND AND D1P, D1N, D2P and D2N are the site-specific essential DC panels. b.Indicated voltage is less than Loss of ALL 125 VDC power (site-specific bus voltage value) based on battery bus voltage Onsite and onsite AC power sources are tabularized in Table S-1. on ALL (site-specific Vital DC indications < 105 VDC on ALL busses) for 15 minutes or longer. essential DC distribution panels D1P, D1N, D2P and D2N for 15 min. (Note 1) Note The Emergency Director should N/A Note 1: The Emergency The classification timeliness and event level note has been declare the Unusual Event Director should declare standardized across the DBNPS EAL scheme by referencing the promptly upon determining that the event promptly "time limit" specified within the EAL wording. 115 of 116

15 minutes has been exceeded, upon determining that or will likely be exceeded. time limit has been exceeded, or will likely be exceeded. 116 of 116

 Evaluation of Proposed License Amendment Attachment 4 Emergency Action Level (EAL) Wallcharts (3 Pages Follow)

GENERAL EMERGENCY SITE AREA EMERGENCY ALERT UNUSUAL EVENT HG1 HOSTILE ACTION resulting in loss of physical control of the HS1 HOSTILE ACTION within the PROTECTED AREA HA1 HOSTILE ACTION within the OWNER CONTROLLED AREA or HU1 Confirmed SECURITY CONDITION or threat facility airborne attack threat within 30 minutes HG1.1 1 2 3 4 5 6 DEF HS1.1 1 2 3 4 5 6 DEF HA1.1 1 2 3 4 5 6 DEF HU1.1 1 2 3 4 5 6 DEF A HOSTILE ACTION is occurring or has occurred within A HOSTILE ACTION is occurring or has occurred within A HOSTILE ACTION is occurring or has occurred within A SECURITY CONDITION that does not involve a HOSTILE 1 the PROTECTED AREA as reported by the Security Shift Supervisor. AND EITHER of the following has occurred: the PROTECTED AREA as reported by the Security Shift Supervisor. the OWNER CONTROLLED AREA as reported by the Security Shift Supervisor. ACTION as reported by the Security Shift Supervisor. HU1.2 1 2 3 4 5 6 DEF Security ANY of the following safety functions cannot be HA1.2 1 2 3 4 5 6 DEF controlled or maintained Notification of a credible security threat directed at the site. A validated notification from NRC of an aircraft attack Reactivity threat within 30 min. of the site. Core cooling (RCS inventory) HU1.3 1 2 3 4 5 6 DEF RCS heat removal (ability to maintain heat sink) A validated notification from the NRC providing information OR of an aircraft threat. Damage to spent fuel has occurred or is IMMINENT. HU2 Seismic event greater than OBE levels 2 None None None HU2.1 1 2 3 4 5 6 DEF Seismic Seismic event > OBE as indicated by OBE alarm on seismic Event alarm panel C5764A. HU3 Hazardous event Notes HU3.1 1 2 3 4 5 6 DEF A tornado strike within the PROTECTED AREA. Note 1: The Emergency Director should declare the event promptly upon determining that time limit has HU3.2 1 2 3 4 5 6 DEF been exceeded, or will likely be exceeded. Internal room or area FLOODING of a magnitude sufficient to require manual or automatic electrical 3 Note 2: If an ongoing release is detected and the release isolation of a SAFETY SYSTEM component needed for start time is unknown, assume that the release None None the current operating mode. duration has exceeded the specified time limit. Natural or HU3.3 1 2 3 4 5 6 DEF Tech. Note 3: If the effluent flow past an effluent monitor is Hazard known to have stopped, indicating that the Movement of personnel within the PROTECTED AREA release path is isolated, the effluent monitor is IMPEDED due to an offsite event involving reading is no longer VALID for classification hazardous materials (e.g., an offsite chemical spill or purposes. toxic gas release). Note 4: The pre-calculated effluent monitor values HU3.4 1 2 3 4 5 6 DEF presented in EALs RA1.1, RS1.1 and RG1.1 A hazardous event that results in on-site conditions should be used for emergency classification sufficient to prohibit the plant staff from accessing the assessments until the results from a dose site via personal vehicles (Note 7). assessment using actual meteorology are available. HU4 FIRE potentially degrading the level of safety of the plant Note 5: If the equipment in the listed room or area was already inoperable or out-of-service before the HU4.1 1 2 3 4 5 6 DEF event occurred, then no emergency A FIRE is not extinguished within 15 min. of ANY of the classification is warranted. following FIRE detection indications (Note 1): Note 6: If CONTAINMENT CLOSURE is re-established Report from the field (i.e., visual observation) prior to exceeding the 30-minute time limit, Table H-1 Safe Shutdown Fire Areas Receipt of multiple (more than 1) fire alarms declaration of a General Emergency is not Field verification of a single fire alarm required. Containment AND Control Room The FIRE is located within ANY Table H-1 area. Note 7: This EAL does not apply to routine traffic Auxiliary Building H impediments such as fog, snow, ice, or vehicle Intake Structure HU4.2 1 2 3 4 5 6 DEF breakdowns or accidents. Borated Water Storage Tank 4 Receipt of a single fire alarm (i.e., no other indications of Hazards Note 8: A manual trip action is ANY operator action, or None a FIRE). set of actions, which causes the control rods to AND Fire be rapidly inserted into the core, and does not The fire alarm is indicating a FIRE within ANY Table H-1 include manually driving in control rods or area. implementation of boron injection strategies. AND The existence of a FIRE is not verified within 30 min. of Note 9: During a main steam line break in containment alarm receipt (Note 1). or LOCA with temperature >170°F, there is a potential to induce transient errors into the HU4.3 1 2 3 4 5 6 DEF output of RE4596A and B during the peak rate A FIRE within the plant PROTECTED AREA not of temperature change. Consult alternate extinguished within 60 min. of the initial report, alarm or indications. If the main steam line break is indication (Note 1). accompanied by core damage this error is insignificant. HU4.4 1 2 3 4 5 6 DEF A FIRE within the plant PROTECTED AREA that requires Note 10: In the absence of reliable RCS temperature firefighting support by an offsite fire response agency to indication caused by the loss of decay heat extinguish. removal capability, classification should be based on the RCS pressure increase criteria HA5 Gaseous release IMPEDING access to equipment necessary for when the RCS is intact in Mode 5 or based on normal plant operations, cooldown or shutdown time to boil data when in Mode 6 or the RCS is 5 Table H-2 Safe Shutdown Rooms/Areas not intact in Mode 5. HA5.1 1 2 3 Release of a toxic, corrosive, asphyxiant or flammable gas Area Mode Hazardous None None into ANY Table H-2 Safe Shutdown Rooms or Areas. Gas Aux Bldg. 565 ele. Room 236 AND 1, 2, 3 Entry into the room or area is prohibited or IMPEDED. #2 Mechanical Penetration Room (Note 5) Aux Bldg. 585 ele. Room 304 corridor 1, 2, 3 HS6 Inability to control a key safety function from outside the Control HA6 Control Room evacuation resulting in transfer of plant control to outside #3 Mechanical Penetration Room Room alternate locations Aux Bldg. 603 ele. Room 427 - 1 2 3 4 1 2 3 4 5 6 DEF 1, 2, 3

                                                                                                                                                                                                                                                                           #2 Electrical Penetration Room 6

HS6.1 HA6.1 An event has resulted in plant control being transferred from An event has resulted in plant control being transferred None the Control Room to the Auxiliary Shutdown Panel. from the Control Room to the Auxiliary Shutdown Panel. Control Room AND Evacuation Control of ANY of the following key safety functions is not reestablished within 15 min. (Note 1): Reactivity Core cooling (RCS inventory) RCS heat removal (ability to maintain heat sink) HG7 Other conditions exist which in the judgment of the Emergency HS7 Other conditions exist which in the judgment of the Emergency HA7 Other conditions exist which in the judgment of the Emergency HU7 Other conditions exist which in the judgment of the Emergency Director warrant declaration of General Emergency Director warrant declaration of Site Area Emergency Director warrant declaration of an Alert Director warrant declaration of a UE 1 2 3 4 5 6 DEF 1 2 3 4 5 6 DEF 1 2 3 4 5 6 DEF 1 2 3 4 5 6 DEF HG7.1 HS7.1 HA7.1 HU7.1 Other conditions exist which in the judgment of the Other conditions exist which in the judgment of the Other conditions exist which, in the judgment of the Other conditions exist which in the judgment of the Emergency Director indicate that events are in progress or Emergency Director, indicate that events are in progress or Emergency Director indicate that events are in progress or 7 Emergency Director indicate that events are in progress or have occurred which involve actual or IMMINENT have occurred which involve actual or likely major failures of have occurred which involve an actual or potential have occurred which indicate a potential degradation of the substantial core degradation or melting with potential for plant functions needed for protection of the public or substantial degradation of the level of safety of the plant or level of safety of the plant or indicate a security threat to Emergency loss of containment integrity or HOSTILE ACTION that HOSTILE ACTION that results in intentional damage or a security event that involves probable life threatening risk facility protection has been initiated. No releases of Director results in an actual loss of physical control of the facility. malicious acts, (1) toward site personnel or equipment that to site personnel or damage to site equipment because of radioactive material requiring offsite response or monitoring Judgment Releases can be reasonably expected to exceed EPA could lead to the likely failure of or, (2) that prevent effective HOSTILE ACTION. ANY releases are expected to be are expected unless further degradation of SAFETY Protective Action Guideline exposure levels offsite for more access to equipment needed for the protection of the public. limited to small fractions of the EPA Protective Action SYSTEMS occurs. than the immediate site area. ANY releases are not expected to result in exposure levels Guideline exposure levels. which exceed EPA Protective Action Guideline exposure levels beyond the SITE BOUNDARY. RG1 Release of gaseous radioactivity resulting in offsite dose greater RS1 Release of gaseous radioactivity resulting in offsite dose greater RA1 Release of gaseous or liquid radioactivity resulting in offsite RU1 Release of gaseous or liquid radioactivity > 2 times the ODCM than 1,000 mrem TEDE or 5,000 mrem thyroid CDE than 100 mrem TEDE or 500 mrem thyroid CDE dose greater than 10 mrem TEDE or 50 mrem thyroid CDE limits for 60 minutes or longer 1 2 3 4 5 6 DEF 1 2 3 4 5 6 DEF 1 2 3 4 5 6 DEF 1 2 3 4 5 6 DEF RG1.1 RS1.1 RA1.1 RU1.1 Station Vent Channel 1 Noble Gas (RE 4598 AB/BB) Station Vent Channel 1 Noble Gas (RE 4598 AB/BB) Station Vent Channel 1 Noble Gas (RE 4598 AB/BB) Station Vent Channel 1 Noble Gas (RE 4598AA/BA)

                                  > 8.4E +00 µCi/cc for 15 minutes or longer. (Notes 1, 2, 3, 4)               > 8.4E -01 µCi/cc for 15 minutes or longer. (Notes 1, 2, 3, 4)              > 8.4E -02 µCi/cc for 15 minutes or longer. (Notes 1, 2, 3, 4)            > 5.72E-03 µCi/cc for 60 minutes or longer.

RG1.2 RS1.2 RA1.2 OR Dose assessment using actual meteorology indicates Dose assessment using actual meteorology indicates Dose assessment using actual meteorology indicates ANY of the following effluent monitors > 2 times the high doses > 1000 mrem TEDE or 5000 mrem thyroid CDE at doses > 100 mrem TEDE or 500 mrem thyroid CDE at or doses > 10 mrem TEDE or 50 mrem thyroid CDE at or alarm setpoint established by a current radioactivity 1 or beyond the SITE BOUNDARY. (Note 4) beyond the SITE BOUNDARY. (Note 4) beyond the SITE BOUNDARY. (Note 4) discharge permit for 60 minutes or longer: RG1.3 RS1.3 RA1.3 Waste Gas System Outlet (RE 1822A or B). Clean Waste System Outlet (RE 1770A or B). Rad Analysis of a liquid effluent sample indicates a concentration Field survey results indicate EITHER of the following at or Field survey results indicate EITHER of the following at or Miscellaneous Waste System Outlet (RE 1878A or B). Effluent or release rate that would result in doses > 10 mrem TEDE beyond the SITE BOUNDARY: beyond the SITE BOUNDARY: Discharge permit specified monitor. Closed window dose rates > 100 mR/hr expected to or 50 mrem thyroid CDE at or beyond the SITE BOUNDARY Closed window dose rates > 1000 mR/hr expected (Notes 1, 2, 3) continue for 60 min. for 60 min. of exposure. (Notes 1, 2) to continue for 60 min. Analyses of field survey samples indicate thyroid RA1.4 Analyses of field survey samples indicate thyroid RU1.2 CDE > 500 mrem for 60 min. of inhalation. CDE > 5000 mrem for 60 min. of inhalation. Field survey results indicate EITHER of the following at or (Notes 1, 2) Sample analyses for a gaseous or liquid release indicates (Notes 1, 2) beyond the SITE BOUNDARY: concentration or release rate 2 x ODCM limits for 60 Closed window dose rates > 10 mR/hr expected to min. (Notes 1, 2) continue for 60 min. Analyses of field survey samples indicate thyroid CDE > 50 mrem for 60 min. of inhalation. (Notes 1, 2) RG2 Spent fuel pool level cannot be restored to at least the top of the RS2 Spent fuel pool level at the top of the fuel racks RA2 Significant lowering of water level above, or damage to, RU2 UNPLANNED loss of water level above irradiated fuel fuel racks for 60 minutes or longer irradiated fuel R 1 2 3 4 5 6 DEF 1 2 3 4 5 6 DEF 1 2 3 4 5 6 DEF 1 2 3 4 5 6 DEF RG2.1 RS2.1 RA2.1 RU2.1 Spent fuel pool level cannot be restored to at least 1 ft. for Lowering of spent fuel pool level to 1 ft. Uncovery of irradiated fuel in the REFUELING PATHWAY UNPLANNED water level drop in the REFUELING PATHWAY Abnormal > 60 min. (Note 1) as indicated by ANY of the following: Rad RA2.2 SFP level alarm or indication (Ll 1600) Release Damage to irradiated fuel resulting in a release of SFP level indication (Ll 4801 A/B)

        /                                                                                                                                                                                  radioactivity as indicated by a high radiation alarm on ANY Rad Effluent          2                                                                                                                                                                     of the following radiation monitor indications:

RE 8426 SFP Area Refueling Canal low water level alarm or indication (Ll 1627) Visual observation Irradiated RE 8427 SFP Area AND Fuel Event RE 8417 Fuel Handling Area UNPLANNED rise in corresponding area radiation levels as RE 8418 Fuel Handling Area indicated by ANY of the following radiation monitors: RE 8425 Equipment Hatch Area RE 8446/8447 Fuel Handling Exhaust RE 8426 SFP Area RE 4598AA/BA Station Vent RE 8427 SFP Area RE 8417 Fuel Handling Area RA2.3 RE 8418 Fuel Handling Area Lowering of spent fuel pool level to 10 ft. RE 8425 Equipment Hatch Area RA3 Radiation levels that IMPEDE access to equipment necessary Table R-2 Safe Shutdown Rooms/Areas for normal plant operations, cooldown or shutdown RA3.1 Area Mode 1 2 3 4 5 6 DEF 3 Dose rate > 15 mR/hr in EITHER of the following areas: Control Room (RE 8430 or 8431) Aux Bldg. 565 ele. Room 236

                                                                                                                                                                                                                                                                          #2 Mechanical Penetration Room 1, 2, 3 Area                                                None                                                                      None                                            Central Alarm Station (RE 8435 or 8436)                                Aux Bldg. 585 ele. Room 304 corridor Radiation                                                                                                                                                                                                                                                                                                           1, 2, 3 outside #3 Mechanical Penetration Room Levels                                                                                                                                                                 RA3.2          1        2        3 Aux Bldg. 603 ele. Room 427 -

An UNPLANNED event results in radiation levels that 1, 2, 3

                                                                                                                                                                                                                                                                          #2 Electrical Penetration Room prohibit or IMPEDE access to ANY Table R-2 Safe Shutdown Rooms or Areas. (Note 5)

EU1 Damage to a loaded cask CONFINEMENT BOUNDARY 1 2 3 4 5 6 DEF EU1.1 E 1 None None None Damage to a loaded canister CONFINEMENT BOUNDARY as indicated by an on-contact radiation reading on the surface of Confinement a loaded spent fuel HSM cask > EITHER of the following: DFSF Boundary 100 mrem/hr (neutron + gamma) on the HSM cask wall or roof 100 mrem/hr (neutron + gamma) on the center of the HSM cask door Davis-Besse RA-EP-01500 Rev. 0 Nuclear Power EAL Classification Matrix Modes: 1 2 3 4 5 6 DEF Station Page 1 of 3 Power Operation Startup Hot Standby Hot Shutdown Cold Shutdown Refueling Defueled ALL CONDITIONS Prepared for FENOC by: Operations Support Services, Inc. - 10/29/15

GENERAL EMERGENCY SITE AREA EMERGENCY ALERT UNUSUAL EVENT SG1a Prolonged loss of ALL offsite and ALL onsite AC power to SS1 Loss of ALL offsite and ALL onsite AC power to essential buses SA1 Loss of ALL but one AC power source to essential buses SU1 Loss of ALL offsite AC power capability to essential buses essential buses for 15 minutes or longer for 15 minutes or longer for 15 minutes or longer 1 2 3 4 1 2 3 4 1 2 3 4 1 2 3 4 SG1.1 SS1.1 SA1.1 SU1.1 Loss of ALL offsite and ALL onsite AC power capability, Loss of ALL offsite and ALL onsite AC power capability, AC power capability, Table S-1, to essential 4160V buses Loss of ALL offsite AC power capability, Table S-1, to Table S-1, to essential 4160V buses C1 and D1 Table S-1, to essential 4160V buses C1 and D1 for 15 min. C1 and D1 reduced to a single power source for 15 min. essential 4160V buses C1 and D1 for 15 min. (Note 1) 1 (Note 1) (Note 1) AND EITHER: AND Restoration of at least one essential bus in < 4 ANY additional single power source failure will result in loss Table S-1 Offsite/Onsite AC Power Sources hours is not likely (Note 1) Loss of of ALL AC power to SAFETY SYSTEMS Calculated Clad Temperature in Region 3 Essential (DB-OP-02000 Figure 2) Offsite: AC Power X11 SG1b Loss of ALL AC and DC power sources for 15 minutes or longer X11 (back-fed via Main Transformer) 1 2 3 4 X01 X02 SG1.2 Onsite: Loss of ALL offsite and ALL onsite AC power capability, EDG1 Table S-1, to essential 4160V buses C1 and D1 for 15 min. EDG2 AND SBODG 2 Loss of ALL 125 VDC power based on battery bus voltage SS2 Loss of ALL essential DC power for 15 minutes or longer indications < 105 VDC on ALL essential DC distribution panels 1 2 3 4 D1P, D1N, D2P and D2N for 15 min. SS2.1 Loss of (Note 1) None None Essential Loss of ALL 125 VDC power based on battery bus voltage DC Power indications < 105 VDC on ALL essential DC distribution panels D1P, D1N, D2P and D2N for 15 min. (Note 1) SA3 UNPLANNED loss of Control Room indications for 15 minutes or SU3 UNPLANNED loss of Control Room indications for 15 minutes or Table S-2 Safety System Parameters longer with a significant transient in progress longer 3 Reactor power SA3.1 1 2 3 4 SU3.1 1 2 3 4 Loss of None RCS pressure An UNPLANNED event results in the inability to monitor one An UNPLANNED event results in the inability to monitor Control Room In-core T/C temperature or more Table S-2 SAFETY SYSTEM parameters from within one or more Table S-2 SAFETY SYSTEM parameters Indications Level in at least one S/G the Control Room for 15 min. (Note 1) from within the Control Room for 15 min. (Note 1) AND Auxiliary or emergency feed flow ANY Significant Transient is or may be in progress, Table S-3 SU4 Reactor coolant activity greater than Technical Specification allowable limits Table S-3 Significant Transients 1 2 3 4 SU4.1 4 Reactor trip Letdown Monitor (RE 1998) reading > 2.0E+06 cpm. Runback > 25% thermal power None None SU4.2 Electrical load rejection > 25% RCS RCS activity > Technical Specification LCO 3.4.16 as electrical load Activity indicated by ANY of the following: Safety injection actuation Dose equivalent I-131 in the unacceptable region of Figure 3.4.16-1

                                                                                                                                                                                                                                                                        > 1 µCi/gm dose equivalent I-131 for > 48 hrs.
                                                                                                                                                                                                                                                                        > 100/ µCi/gm gross specific coolant activity 5

SU5 RCS leakage for 15 minutes or longer 1 2 3 4 None None None S RCS Leakage SU5.1 RCS leakage > 10 gpm for 15 min. (Note 1) System SS6 Inability to shut down the reactor causing a challenge to core SA6 Automatic or manual trip fails to shut down the reactor AND SU6 Automatic or manual trip fails to shut down the reactor Malfunct. cooling or RCS heat removal subsequent manual actions taken at the Controls Area are not successful in shutting down the reactor 1 1 1 SS6.1 SA6.1 SU6.1 An automatic or manual trip fails to shut down the reactor as An automatic or manual trip fails to shut down the reactor as An automatic trip did not shut down the reactor as indicated by reactor power 5% indicated by reactor power 5% indicated by reactor power 5% after ANY RPS setpoint is AND exceeded AND ALL actions to shut down the reactor are not successful as AND indicated by reactor power 5% Manual trip actions taken at the Controls Area (manual RPS trip pushbuttons and de-energizing E2 and F2) are not A subsequent manual trip action taken at the Controls Area AND EITHER: 6 successful in shutting down the reactor as indicated by (manual RPS trip pushbuttons or de-energizing E2 and F2) Calculated Clad Temperature in Region 3 reactor power 5% (Note 8). is successful in shutting down the reactor as indicated by None (DB-OP-02000 Figure 2) reactor power < 5% (Note 8). RPS MFW, AFW and MU-HPI PORV Cooling are all Failure unavailable SU6.2 A manual trip did not shut down the reactor as indicated by reactor power 5% after ANY manual trip action was initiated Table S-4 Communications Methods AND A subsequent automatic trip or manual trip action taken at System Onsite ORO the Controls Area (manual RPS trip pushbuttons or de-NRC energizing E2 and F2) is successful in shutting down the reactor as indicated by reactor power < 5% (Note 8). Public Address (Gaitronics) X Onsite Radios X SU7 Loss of ALL onsite or offsite communications capabilities Plant Telephones X X X 1 2 3 4 Notes Commercial Telephones X X X SU7.1 7 Note 1: The Emergency Director should declare the event None 4-Way Ringdown Circuit Satellite Phones X X X Loss of ALL Table S-4 onsite communication methods. SU7.2 Loss of promptly upon determining that time limit has Comm. been exceeded, or will likely be exceeded. Cellular Phones X X Loss of ALL Table S-4 ORO communication methods. Note 8: A manual trip action is ANY operator action, or NRC Emergency Telephone System X SU7.3 set of actions, which causes the control rods to Loss of ALL Table S-4 NRC communication methods. be rapidly insertedNoneinto the core, and does not include manually driving in control rods or SU8 Failure to isolate containment or loss of containment pressure implementation of boron injection strategies. control 1 2 3 4 Note 9: During a main steam line break in containment or LOCA with temperature >170F, there is a Table S-6 Containment Cooling Full Train SU8.1 8 potential to induce transient errors into the ANY penetration is not closed within 15 min. of a VALID output of RE4596A and B during the peak rate containment isolation signal (Note 1) CT Spray Pumps CT Cooling Fans of temperature change.None Consult alternate None None CMT indications. If the main steam line break is 2 0 SU8.2 Failure accompanied by core damage this error is 1 Containment pressure > 40 psia with < one full train of 1 insignificant. containment cooling, Table S-6, operating per design for > 15 0 2 min. (Note 1) SA9 Hazardous event affecting a SAFETY SYSTEM needed for the Table S-5 Hazardous Events current operating mode 1 2 3 4 9 Seismic event (earthquake) Internal or external FLOODING event SA9.1 The occurrence of ANY Table S-5 Hazardous Event Hazardous High winds or tornado strike AND EITHER: Event None None FIRE Affecting Event has caused indications of degraded Safety EXPLOSION performance in at least one train of a SAFETY Systems Other events with similar hazard SYSTEM required for the current operating mode characteristics as determined by the The event has caused VISIBLE DAMAGE to a Emergency Director SAFETY SYSTEM component or structure required for the current operating mode F FG1 1 Loss of ANY two barriers 2 3 4 FS1 1 2 3 4 Loss or Potential Loss of ANY two barriers (Table F-1) FA1 1 2 3 4 ANY Loss or ANY Potential Loss of EITHER Fuel Clad or None Fission Product AND RCS (Table F-1) Barrier Degradation Loss or Potential Loss of third barrier (Table F-1) Table F-1 Fission Product Barrier Matrix Fuel Clad (FC) Barrier Reactor Coolant System (RCS) Barrier Containment (CT) Barrier Category Loss Potential Loss Loss Potential Loss Loss Potential Loss

1. An automatic or manual ECCS 1. Operation of a standby Makeup 1. A leaking or RUPTURED SG is (SFAS) actuation required by Pump (>250 gpm) is required by FAULTED outside of containment A None None EITHER: EITHER:

None RCS or SG Tube UNISOLABLE RCS leakage UNISOLABLE RCS leakage Leakage SG tube leakage SG tube RUPTURE OR

2. PTS requirements invoked (SR5)
1. Calculated Clad Temperature in 1. Calculated Clad Temperature in 1. Loss of ALL feedwater 1. Calculated Clad Temperature in Region 3 or higher Region 2 or higher Region 3 or higher B (DB-OP-02000 Figure 2) (DB-OP-02000 Figure 2)

AND (DB-OP-02000 Figure 2) Inadequate Heat OR None SG cooling is required None AND Removal 2. Loss of ALL feedwater Restoration procedures not AND effective within 15 min. (Note1) SG cooling is required

1. RE 4596A or B > Table F-2 1. RE 4596A or B > Table F-2 column 1. RE 4596A or B > Table F-2 column FC Loss (Note 9)

C OR RCS Loss (Note 9) column CT Potential Loss (Note 9) CT Radiation / None None None

2. Dose equivalent I-131 coolant RCS Activity activity > 300 µCi/gm Table F-2 Containment Radiation R/hr (RE 4596A or B) 1. Containment isolation is required 1. Containment pressure > 50.4 psia Time After RCS CT Pot. AND EITHER: OR FC Loss S/D (hrs.) Loss Loss Table F-3 Containment Cooling Full Train Containment integrity has been 2. Containment Hydrogen 0-1 1.50E+01 3.03E+03 1.40E+04 lost based on Emergency concentration > 4%

D 1-2 1.50E+01 2.56E+03 1.18E+04 CT Spray Pumps CT Cooling Fans Director judgment OR CT Integrity or None None None None UNISOLABLE pathway from 2-8 1.50E+01 1.61E+03 7.46E+03 2 0 3. Containment pressure > 40 psia Bypass Containment to the environment 1 with < one full train, Table 8-16 1.50E+01 1.14E+03 5.28E+03 1 exists F-3, of containment cooling 0 2 OR operating per design for 15 min. 16-24 1.50E+01 8.66E+02 4.00E+03

2. Indications of RCS leakage outside (Note 1)
                                                                            >24        1.50E+01 3.94E+02 1.82E+03 of containment E                 1. ANY condition in the opinion of the Emergency Director that indicates
1. ANY condition in the opinion of the Emergency Director that indicates
1. ANY condition in the opinion of the Emergency Director that indicates
1. ANY condition in the opinion of the Emergency Director that indicates
1. ANY condition in the opinion of the Emergency Director that indicates
1. ANY condition in the opinion of the Emergency Director that indicates ED Judgment Loss of the Fuel Clad Barrier Potential Loss of the Fuel Clad Barrier Loss of the RCS Barrier Potential Loss of the RCS Barrier Loss of the Containment Barrier Potential Loss of the Containment Barrier Davis-Besse RA-EP-01500 Rev. 0 Nuclear Power EAL Classification Matrix Modes: 1 2 3 4 5 6 DEF Station HOT CONDITIONS Page 2 of 3 Power Operation Startup Hot Standby Hot Shutdown Cold Shutdown Refueling Defueled RCS > 200°F)

Prepared for FENOC by: Operations Support Services, Inc. - 10/29/15

GENERAL EMERGENCY SITE AREA EMERGENCY ALERT UNUSUAL EVENT CG1 Loss of RCS inventory affecting fuel clad integrity with CS1 Loss of RCS inventory affecting core decay heat removal CA1 Loss of RCS inventory CU1 UNPLANNED loss of RCS inventory for 15 minutes or longer containment challenged capability 5 6 5 6 5 6 5 6 CG1.1 CS1.1 CA1.1 CU1.1 Loss of RCS inventory as indicated by RCS level UNPLANNED loss of reactor coolant results in RCS level less RCS level cannot be monitored for 30 min. (Note 1) RCS level cannot be monitored for 30 min. (Note 1) 0.4 ft (LI 10596) than a required lower limit for 15 min. AND AND (Note 1) Core uncovery is indicated by ANY of the following: Core uncovery is indicated by ANY of the following: UNPLANNED increase in Containment Sumps, UNPLANNED increase in Containment Sumps, CA1.2 CU1.2 Auxiliary Building Sumps, BWST or RCDT levels of Auxiliary Building Sumps, BWST or RCDT levels of sufficient magnitude to indicate core uncovery sufficient magnitude to indicate core uncovery RCS level cannot be monitored for 15 min. (Note 1) RCS level cannot be monitored AND EITHER AND EITHER: 1 Containment Radiation Monitor (RE 4596A or B) Containment Radiation Monitor (RE 4596A or B) reading > 16 R/hr reading > 16 R/hr UNPLANNED increase in Containment Sumps, UNPLANNED increase in Containment Sumps, Refueling Bridge Portable Area Radiation Monitor Refueling Bridge Portable Area Radiation Monitor Auxiliary Building Sumps, BWST or RCDT due to a Auxiliary Building Sumps, BWST or RCDT due to a RCS reading > 30 R/hr reading > 30 R/hr loss of RCS inventory loss of RCS inventory Level Erratic Source Range Monitor indication Erratic Source Range Monitor indication Visual observation of UNISOLABLE RCS leakage Visual observation of UNISOLABLE RCS leakage AND ANY Containment Challenge indication, Table C-1 Table C-1 Containment Challenge Indications CONTAINMENT CLOSURE not established (Note 6) Containment Hydrogen concentration > 4% UNPLANNED rise in Containment pressure Table C-2 Offsite/Onsite AC Power Sources CA2 Loss of ALL offsite power and ALL onsite AC power to essential CU2 Loss of ALL but one AC power source to essential buses for 15 Offsite: buses for 15 minutes or longer minutes or longer X01 5 6 DEF 5 6 DEF 2 None Onsite: X02 X11 (back-fed via Main Transformer) CA2.1 Loss of ALL offsite and ALL onsite AC power capability, CU2.1 AC power capability, Table C-2, to essential 4160V buses Loss of Table C-2, to essential 4160V buses C1 and D1 for C1 and D1 reduced to a single power source for 15 min. EDG1 Essential 15 min. (Note 1) (Note 1) AC Power EDG2 AND SBODG ANY additional single power source failure will result in loss of ALL AC power to SAFETY SYSTEMS. C Table C-3 RCS Reheat Duration Thresholds CA3 Inability to maintain plant in cold shutdown CU3 UNPLANNED increase in RCS temperature Cold SD/ 5 6 5 6 Refueling 3

  • If an RCS heat removal system is in operation within this time frame and RCS CA3.1 CU3.1 System temperature is being reduced the EAL is not applicable Malfunct. UNPLANNED increase in RCS temperature to > 200°F for UNPLANNED increase in RCS temperature to > 200°F None Containment Heat-up > Table C-3 duration. (Note 1, 10)

RCS Status due to loss of decay heat removal capability. RCS Closure Status Duration OR Temp. UNPLANNED RCS pressure increase > 10 psig due to a CU3.2 Intact (but not reduced inventory) N/A 60 min.

  • loss of RCS cooling (This EAL does not apply during Loss of ALL RCS temperature and RCS level indication water-solid plant conditions).

Not intact for 15 min. (Note 1) established 20 min.

  • OR 4

At reduced inventory not established 0 min. CU4 Loss of essential DC power for 15 minutes or longer 5 6 CU4.1 Loss of None Table C-4 Communications Methods None < 105 VDC voltage indications on Technical Specification Essential required essential 125 VDC distribution panels for 15 min. DC Power System Onsite ORO NRC (Note 1) CU5 Loss of ALL onsite or offsite communications capabilities Public Address (Gaitronics) X Onsite Radios X 5 6 DEF 5 Plant Telephones X X X CU5.1 None None Commercial Telephones X X X Loss of ALL Table C-4 onsite communication methods. 4-Way Ringdown Circuit X CU5.2 Loss of Comm. Satellite Phones X X Loss of ALL Table C-4 ORO communication methods. Cellular Phones X X CU5.3 NRC Emergency Telephone System X Loss of ALL Table C-4 NRC communication methods. CA6 Hazardous event affecting a SAFETY SYSTEM needed for the Table C-5 Hazardous Events current operating mode 5 6 6 Seismic event (earthquake) Internal or external FLOODING event CA6.1 The occurrence of ANY Table C-5 Hazardous Event Hazardous None High winds or tornado strike None None AND EITHER: Event FIRE Event has caused indications of degraded Affecting Safety EXPLOSION performance in at least one train of a SAFETY Systems SYSTEM required for the current operating mode Other events with similar hazard The event has caused VISIBLE DAMAGE to a characteristics as determined by the SAFETY SYSTEM component or structure required Emergency Director for the current operating mode Notes Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Note 6: If CONTAINMENT CLOSURE is re-established prior to exceeding the 30-minute time limit, declaration of a General Emergency is not required. Note 10: In the absence of reliable RCS temperature indication caused by the loss of decay heat removal capability, classification should be based on the RCS pressure increase criteria when the RCS is intact in Mode 5 or based on time to boil data when in Mode 6 or the RCS is not intact in Mode 5. Davis-Besse RA-EP-01500 Rev. 0 Nuclear Power EAL Classification Matrix Modes: 1 2 3 4 5 6 DEF Station COLD CONDITIONS Page 3 of 3 Power Operation Startup Hot Standby Hot Shutdown Cold Shutdown Refueling Defueled (RCS 200°F) Prepared for FENOC by: Operations Support Services, Inc. - 10/29/15

Enclosure B L-16-020 EAL Calculations (50 Pages Follow)

EP-EALCALC-08-0701 Containment Radiation Monitor Readings Following Clad Damage (FC2 Loss, FC7 Loss, and CT2 Potential Loss) (REVISION 0) Document Author: Scott McCain Document Reviewer: Greg Van Wey Author: 10/17/07

            'Scott McCain                                      Date Review:

Davis-Besse EAL Technical Bases Calculations - FC2 Loss/CT2 Potential Loss TABLE OF CONTENTS

1. Purpose ..................................................................................................................... 3
2. Discussion ................................................................................................................. 3
3. Determination of Values ............................................................................................. 5 3.1. Assumptions and Input Constants ..................................................................... 5 3.2. Calculations ............. :......................................................................................... 5
4. Conclusions ............................................................................................................... 7
5. References ................................................................................................................ 7
6. Attachments ............................................................................................................... 7 Attachment 1, 300 µCi/gm DEl-131 Equivalent Clad Damage ................................... 8 Attachment 2, 20% and 4.33% CRM Readings vs. TAS ............................................ 9 Attachment 3, CRM vs. Time After Shutdown Graphs ............................................. 1O EP-EALCALC-DB-0701 Page 2of11 RevO

Davis-Besse EAL Technical Bases Calculations - FC2 Loss/CT2 Potential Loss

1. PURPOSE Documentation of the assumptions, calculations and results for the Fission Product Barrier (FPB) threshold values for containment radiation monitor readings corresponding to a loss of fuel clad (FC2.1 Loss) and potential loss of containment (CT2.1 Potential Loss).
2. DISCUSSION The Davis-Besse EAL Technical Basis Document contains the bases and references for the site specific EAL threshold values used to implement the NEI 99-01 Rev. 5 guidance methodology. This document has been developed to provide additional detailed technical documentation on how the containment radiation monitor values used to indicate a loss of the fuel clad and potential loss of containment fission product barriers were derived.

The generic guidance provided in NEI 99-01 is not intended to be used "as is." It is intended to give the logic for developing site specific EAL threshold values (Section 5.3 of NEI 99-01 ). NEI 99-01 Rev. 5 provides the following guidance for FC2(L) as indicated by a containment radiation monitor reading: The site specific reading is a value which indicates the release of reactor coolant, with elevated activity indicative of fuel damage, into the containment. The reading should be calculated assuming the instantaneous release and dispersal of the reactor coolant noble gas and iodine inventory associated with a concentration of 300 µCi/gm dose equivalent 1-131 into the containment atmosphere. Reactor coolant concentrations of this magnitude are several times larger than the maximum concentrations (including iodine spiking) allowed within technical specifications and are therefore indicative of fuel damage. Caution: it is important to recognize that in the event the radiation monitor is sensitive to shine from the reactor vessel or piping, spurious readings will be present and another indicator of fuel clad damage is necessary or compensated for in the threshold value. EP-EALCALC-DB-0701 Page 3of11 RevO

Davis-Besse EAL Technical Bases Calculations - FC2 Loss/CT2 Potential Loss It also provides the following guidance for CT2(PL) as indicated by a containment radiation monitor reading: The site specific reading is a value which indicates significant fuel damage well in excess of the thresholds associated with both loss of Fuel Clad and loss of RCS barriers. As stated in Section 3.8 [of NEI 99-01], a major release of radioactivity requiring off-site protective actions from core damage is not possible unless a major failure of fuel cladding allows radioactive material to be released from the core into the reactor coolant. Regardless of whether containment is challenged, this amount of activity in containment, if released, could have such severe consequences that it is prudent to treat this as a potential loss of containment, such that a General Emergency declaration is warranted. NUREG-1228, "Source Estimations During Incident Response to Severe Nuclear Power Plant Accidents," indicates that such conditions do not exist when the amount of clad damage is less than 20%. Unless there is a site specific analysis justifying a higher value, it is recommended that a radiation monitor reading corresponding to 20% fuel clad damage be specified here. The following calculations were performed to estimate the containment radiation monitor readings resulting for a release of the RCS inventory to the containment atmosphere as follows:

1) % clad damage associated with an RCS activity of 300 µCi/gm dose equivalent 1-131.
2) Containment radiation monitor readings for various times after reactor shutdown associated with the clad damage equivalent of 300 µCi/gm dose equivalent 1-131.
3) Containment radiation monitor readings for various times after reactor shutdown associated with 20% clad damage.

See section 3 for the assumptions, calculations and results. EP-EALCALC-DB-0701 Page 4of11 RevO

Davis-Besse EAL Technical Bases Calculations - FC2 Loss/CT2 Potential Loss

3. DETERMINATION OF VALUES 3.1. Assumptions and Constants 3.1.1. 453.6 gm per lbm unit conversion factor.

3.1.2. RCS mass is 504,433 lbm at NOP, NOT, and normal pressurizer level (C-NSA-028.01-007 RO) 3.1.3. Source term activity is based on 24 month core activity values taken from USAR Table 15A-6. 3.1.4. DEi isotopic conversion factors are taken from DB-CH-01815. 3.2. Calculations 3.2.1. Fuel Clad Damage Estimate Based on 300 µCi/gm DEl-131 See Attachment 1 for the iterative results to the below calculation steps of the 24 month fuel cycle clad source term activity and the % clad damage.

1. 100% Fuel Clad Gap Activity USAR Table 15A-2 isotopic ratios are used to determine the Table 1SA-6 equivalent clad gap activities are as follows:

15A-6ctad = 15A-&rotal X (15A-2c1ad / 15A-2rota1)

2. RCS Mass RCS Mass (gm) = RCS Mass (lbm) x 453.6 gm/lbm 2.29E+08 gm = 504,433 lbm x 453.6 gm/lbm
3. Total Dose Equivalent 1-131 Activity DEi Actrotai (Ci)= DEi Cone (µCi/gm) x RCS Mass (gm) x 1E-6 6.86E+04 Ci = 300 µCi/gm x 2.29E+08 gm x 1 E-6 Ci/µCi
4. Fuel Clad Isotopic Activity Fractions (IAF)

IAF1 = Fuel Clad Activity, I Fuel Clad ActivitYrotal

5. Normalized DEi Activity (NOA)

NDA1 = IAF1 x DEi Factor1 EP-EALCALC-DB-0701 Page 5of11 Rev 0

Davis-BesEe LAL TechnicalBaseaCalculatiore- F62 Losg/CTZFote*ial Lcss 6 , Nonnalized DEIActivityFractions {NrAF} NDAFT;NDA / NDArorrr 7 . lsotopicDEIActivity DII Activityr=NDAFTT DEIAetivity;611 8 . lsotopicAdjustedActivity Adjasted Activityl = DEIActivityl I DEI Factol

9. % CladDamage for 300pOi/gmAFL131
                      % Clad Damage= AdjuetsdActlvltyTe6l/ 15A6100%        crad 4.*3a/c= 9.26E+04     Ci 12.14E+0SCi 3.2.2.Containment     Radiation   Monitor(CRM)Readings   for CladDarnage CRMreadingsin Fi/hrconesponding       lo 100Yo and 17ocladdamage werederivedfromNUREG/BR-O150          FigursA-3 as follows:

CRMreadingsin Fl/hrconesponding to the 20%claddamage(GT? potentialloss)and4.33'/ocladdarnage{Fe2 bes} thresholdsare as follows: 3.2.3.CurveFit A MicrosoftExcelregression analysisl\nasrunusingTable3.2values to determine theslopeandintercept of the CRMreadings. The analysisis basedon the equation'x

  • b'm^y' {whichprovidesan exponenliallrend). Resultsareas follows:

t tOCeStl*nownjl's,knoran_x's,const,stats

                                         )

EP-EALCALC-DB-07S1 Page6 ol 11

Davis-Besse EAL Technical Bases Calculations - FC2 Loss/CT2 Potential Loss From this, a predicted CRM reading can be determined for any time after shutdown as follows: In(~) CRM = In ( m) See Attachment 2 for results.

4. CONCLUSIONS 4.1. 300 µCi/gm DEl-131 is equivalent to 4.33% fuel clad (gap) damage 4.2. 4.33% fuel clad damage corresponds to a containment radiation monitor reading of 3.03E+03 R/hr at 1 hour and 8.66E+02 R/hr at 24 hours.

4.3. 20% fuel clad damage corresponds to a containment radiation monitor reading of 1.40E+04 R/hr at 1 hour and 4.00E+03 R/hr at 24 hours.

5. REFERENCES 5.1. NEI 99-01 RS, Methodology for Development of Emergency Action Levels 5.2. NUREG/BR-0150 Vol 1 R4, Response Technical Manual (RTM-96), March 1996 5.3. USAR Table 15A-6, Comparison of Core Fission Product Inventory for a 24 month Fuel Cycle with Source Terms from Table 15A-2 and TIO 14844 5.4. C-NSA-028.01-007 RO, Control Room, LPZ, and EAB Radiation Doses due to ECCS leakage to the BWST and Auxiliary Building, 4/12/07.

5.5. DB-CH-01815, Dose Equivalent 1-131 Determination, Revision 1, 217105

6. ATTACHMENTS 6.1. 300 µCi/gm DEl-131 Equivalent Clad Damage 6.2. 20% and 4.33% CRM Readings vs. Time After Shutdown (TAS) 6.3. CRM vs. Time After Shutdown Graphs EP-EALCALC-DB-0701 Page 7of11 RevO 300 µCi/gm DEl-131 Equivalent Clad Damage 24 Month Fuel Cycle Clad Source Term Activity USAR Table 15A*2 USAR Table 15A-6 Fuel Clad Total Fuel Clad Total 1-131 7.46E+07 1.46E+06 7.61E+07 7.56E+07 1.48E+06 7.71E+07 1*132 1.09E+08 2.01E+05 1.09E+08 1.12E+08 2.06E+05 1.12E+08 1-133 1.44E+08 3.09E+05 1.44E+08 1.56E+08 3.34E+05 1.56E+08 i.134 1.83E+08 1.92E+04 1.83E+08 1.71E+08 1.79E+04 1.71E+08 1-135 1.40E+08 9.73E+04 1.40E+08 1.46E+08 1.01E+05 1.46E+08 Total 6.51E+08 2.09E+06 6.53E+08 6.60E+08 2.14E+06 6.62E+08
                                   % Clad Damage Calculation If)                   '~;

c0 ;i,n . '

                                       ,~*;-. >   ....
                                                                 <(   ~
                          ~         . /{,~. .. *:                0 .~
          ~

I! LL

                          ~
c .

ti . Zt; II ow

                                                                      <C                                       :;.
         ~                                        m                                                            >

u

         ,,<C -           ~
                           >                 . c*
                                                  -~             t;o l'O "CJ c

0 ,a._ ~ LL G>

                                                                                  ~
                                               . i.;.

If) <C .

                                                                 -     N                         *--  If)      <C -I/I w=cu             .__

cu ~

         .! *~                                                                                                       ~

Q) u ts *c: Q) (.) :I *a l'O 0 e LL LL.

                                                                                                  <C            ~::I Qi (.)            oLL-LL m
                                                                                  <C ~           -w   ::I

(,) (,)

I c LL :,:..

1-131 1.48E+06 0 <C If) - 69.17%

  • o.

1.00E+OO LL. 0

                                                                 <C z 6.92E-01 Cz z-93.28%

c c :::. 6.40E+04

                                                                                                               ~ :,E_

6.40E+04 1-132 2.06E+05 9.64% 3.62E-02 3.48E-03 0.47% 3.22E+02 8.92E+03 1-133 3.34E+05 15.61% 2.70E-01 4.22E-02 5.69% 3.91E+03 1.45E+04 1-134 1.79E+04 0.84% 1.69E-02 1.42E-04 0.02% 1.31E+01 7.76E+02 1-135 1.01E+05 4.74% 8.38E-02 3.97E-03 0.54% 3.68E+02 4.39E+03 Total 2.14E+06 100% 1.41E+OO 7.42E-01 100% 6.86E+04 9.26E+04 RCS Mass (lbm): 504433 Conversion Factor (gm/lbm): 453.6 RCS Mass (gm): 2.29E+08 DEl-131 (uCi/gm): 300 Total DEl-131 (uCi): 6.86E+10 Total DEl-131 (Ci): 6.864E+04

                                                                                                             '4~33%

EP-EALCALC-DB-0701 Page 8of11 RevO 20% and 4.33% CRM Readings vs. TAS High (100%) Low (1%) CT2 (20%) FC2 (4.33%) m 0.9999364409 0.9936640497 0.9996822451 0.9985331536 b 85.56491798 85.56491798 85.56491798 85.56491798 TAS 100% 1% 20% 4.33% 1 7.00E+04 7.00E+02 1.40E+04 3.03E+03 2 5.91E+04 5.91E+02 1.18E+04 2.56E+03 3 5.27E+04 5.27E+02 1.05E+04 2.28E+03 4 4.82E+04 4.82E+02 9.64E+03 2.09E+03 5 4.47E+04 4.47E+02 8.94E+03 1.93E+03 6 4.18E+04 4.18E+02 8.36E+03 1.81E+03 7 3.94E+04 3.94E+02 7.88E+03 1.71E+03 8 3.73E+04 3.73E+02 7.46E+03 1.61E+03 9 3.54E+04 3.54E+02 7.09E+03 1.53E+03 10 3.38E+04 3.38E+02 6.75E+03 1.46E+03 11 3.23E+04 3.23E+02 6.45E+03 1.40E+03 12 3.09E+04 3.09E+02 6.18E+03 1.34E+03 13 2.96E+04 2.96E+02 5.93E+03 1.28E+03 14 2.85E+04 2.85E+02 5.70E+03 1.23E+03 15 2.74E+04 2.74E+02 5.48E+03 1.19E+03 16 2.64E+04 2.64E+02 5.28E+03 1.14E+03 17 2.54E+04 2.54E+02 5.09E+03 1.10E+03 18 2.45E+04 2.45E+02 4.91E+03 1.06E+03 19 2.37E+04 2.37E+02 4.74E+03 1.03E+03 20 2.29E+04 2.29E+02 4.57E+03 9.90E+02 21 2.21E+04 2.21E+02 4.42E+03 9.57E+02 22 2.14E+04 2.14E+02 4.27E+03 9.25E+02 23 2.07E+04 2.07E+02 4.13E+03 8.95E+02 24 2.00E+04 2.00E+02 4.00E+03 8.66E+02 25 1.94E+04 1.94E+02 3.87E+03 8.38E+02 26 1.87E+04 1.87E+02 3.75E+03 8.11E+02 27 1.81E+04 1.81E+02 3.63E+03 7.86E+02 28 1.76E+04 1.76E+02 3.51E+03 7.61E+02 29 1.70E+04 1.70E+02 3.40E+03 7.37E+02 30 1.65E+04 1.65E+02 3.30E+03 7.14E+02 31 1.60E+04 1.60E+02 3.19E+03 6.92E+02 32 1.55E+04 1.55E+02 3.09E+03 6.70E+02 33 1.50E+04 1.50E+02 3.00E+03 6.49E+02 34 1.45E+04 1.45E+02 2.90E+03 6.29E+02 35 1.41E+04 1.41E+02 2.81E+03 6.09E+02 36 1.36E+04 1.36E+02 2.72E+03 5.90E+02 37 1.32E+04 1.32E+02 2.64E+03 5.71E+02 38 1.28E+04 1.28E+02 2.55E+03 5.53E+02 39 1.24E+04 1.24E+02 2.47E+03 5.35E+o2 40 1.20E+04 1.20E+02 2.39E+03 5.18E+02 41 1.16E+04 1.16E+02 2.31E+03 5.01E+02 42 1.12E+04 1.12E+02 2.24E+03 4.85E+02 43 1.08E+04 1.08E+02 2.17E+03 4.69E+02 44 1.05E+04 1.05E+02 2.09E+03 4.53E+02 45 1.01E+04 1.01E+02 2.02E+03 4.38E+02 46 9.76E+03 9.76E+01 1.95E+03 4.23E+02 47 9.43E+03 9.43E+01 1.89E+03 4.08E+02 48 9.09E+03 9.09E+01 1.82E+03 3.94E+02 EP-EALCALC-08-0701 Page 9 of 11 Rev 0

F

                                                    -f c                                                   ro 3

o tt aE l { (f) 3 IE { Q L E (E

                                                    .f go o                                                O)

(o o tt E G (a l-() ro

,i

= u so cr) (f) (r) o N Fo L (Y) o lts i o) c!g 9, ct, t-tr l\-c i\; E o (E ro It o N= F t t( u, b L o

     =                                                rg u                                                Nk         o o) o V

OrO Ftr (L (! ra Fi: o J o !o G (t) F C o {r, o g) o-(\ l'- o K} (r) o

                                                                 ?

co o I o o (rqru)969t gU - rolluoyllpBUluotuu!"luoC UJ I (L UJ

t\

                                                \r 1f) s (f) v o                                         s CD (E                                        o, E

(E cf) Fr (r) o to tt (Y) g (ft o (f, sc) lYl o L 3 c? o) NI

                                                     .9 t                                          t\g L                                         N}

e ED roE C\E o s

     .=                                         xi9's T'

G C \ K.g o tr, o)o tr

     =                                          Ni:

u () l() V o (Y) o o J (\ o lJ. o, N ro (o o

                                                         ?

dl c'lt oI g o o g E o (, (rq/U)969t gU - ro1uoygpBUluouruleluoC ut o ai I

                                                         .L t                                                         UJ

EP-EALCALC-DB.O7O2 ContainmentRadiationMonitorReadingFollowinga LOCA (RC2Loss) (REVISION O) DocumentAuthor: ScoftMc0ain Reviewer:GregVanWeY Document Author: Review:

Davis-Besse EAL Technical Bases Calculations - RC2 Loss TABLE OF CONTENTS

1. Purpose .................................................................................................................... 3
2. Discussion ................................................................................................................ 3
3. Determination of Values ........................................................................................... 4 3.1. Assumptions and Constants .......................................................................... 4 3.2. Calculations ................................................................................................... 4 3.3. MicroShield Modeling .................................................................................... 4 3.4. Results .......................................................................................................... 5
4. Conclusions .............................................................................................................. 5
5. References ............................................................................................................... 5 , RCS Maximum Available Isotopic Activity ................................................ 6 , MicroShield CRM Calculation Report ....................................................... 7 EP-EALCALC-08-0702 Page2 of 8 Revo

Davis-Besse EAL Technical Bases Calculations - RC2 Loss

1. PURPOSE Documentation of the assumptions, calculations and results for the Fission Product Barrier (FPS) threshold value for a containment radiation monitor reading corresponding to a loss of RCS (RC2.1 Loss).
2. DISCUSSION The Davis Besse EAL Technical Basis Document contains the bases and references for the site specific EAL threshold values used to implement the NEI 99-01 Rev. 5 guidance methodology. This document has been developed to provide additional detailed technical documentation on how the containment radiation monitor value used to indicate a loss of the RCS fission product barrier was derived.

The generic guidance provided in NEI 99-01 is not intended to be used "as is." It is intended to give the logic for developing site specific EAL threshold values (Section 5.3 of NEI 99-01 }. NEI 99-01 Rev. 5 provides the following guidance for the loss of the RCS barrier as indicated by a containment radiation monitor reading: The site specific reading is a value which indicates the release of reactor coolant to the containment. The reading should be calculated assuming the instantaneous release and dispersal of the reactor coolant noble gas and iodine inventory associated with normal operating concentrations (i.e., within TIS) into the containment atmosphere. This reading will be less than that specified for FC2(L) 1. Thus, this threshold would be indicative of a RCS leak only. If the radiation monitor reading increased to that specified by Fuel Clad barrier threshold, fuel damage would also be indicated. However, if the site specific physical location of the containment radiation monitor is such that radiation from a cloud of released RCS gases could not be distinguished from radiation from adjacent piping and components containing elevated reactor coolant activity, this threshold should be omitted and other site specific indications of RCS leakage substituted. The following calculations were performed to estimate the containment radiation monitor reading resulting from a release of the RCS inventory to the containment atmosphere using the USAR maximum RCS coolant activity (no core damage). See section 3 for the assumptions, calculations and results. EP-EALCALC-DB-0702 Page 3 of 8 Rev 0

Davis-Besse EAL Technical Bases Calculations - RC2 Loss

3. DETERMINATION OF VALUES 3.1. Assumptions and Constants 3.1.1. 28316.85 cc per ft 3 conversion factor.

3.1.2. Containment free volume is 2.834E+06 ft 3 (USAR 6.2.1.2.1) 3.1.3. Radius of the containment is 65 feet (Drawing M-127 R5) 3.1.4. RCS liquid volume is 11380 ft 3 at NOP, NOT, and normal pressurizer level of 220 inches (DB-NE-06201) 3.1.5. Maximum RCS activity in µCi/cc is taken from USAR Table 15A-4. 3.2. Calculations See Attachment 1 for the results to the calculations of the available isotopic activity. 3.3. MicroShield Modeling 3.3.1. Model Geometry Geometry 8, cylinder volume with end shields was selected as the basis MicroShield model for the calculation (end shielding was not modeled to provide dose rate reduction). Cylinder height was determined by the following equation to achieve the desired free volume: h = Cont Vol / 1tr2 213.5 = 2.834E+06 / n652 Drawing M-127 RSA indicates a height of 215 feet to the top of the containment dome which verifies the use of 213.5 feet as an acceptable approximation for the calculation geometry. 3.3.2. Dose Receptor The MicroShield dose receptor representing the containment radiation monitor was positioned at 55 feet along the x-axis. MicroShield modeling limitations do not allow the receptor point to be placed 40 feet up the cylinder wall (el. 643 feet) from the base (el. 603 feet). This limitation is not considered significant with regard to the overall accuracy of the calculation. EP-EALCALC-DB-0702 Page4 of 8 RevO

Davis-Besse EAL Technical Bases Calculations - RC2 Loss 3.4. Results MicroShield calculation results provide a CRM dose rate of 1.58E+04 mRJhr. The detailed MicroShield report is provided in Attachment 2.

4. CONCLUSIONS RE 4596 A and B are downscale during normal power operations and indicate approximately 1.5 Rlhr from their trace signal. The maximum RCS activity calculation results provide a value about 10 times the downscale reading. It is also considerably lower that the Fuel Clad loss value of 866 R/hr @1 hour, which provides consistency with the development guidance of NEI 99-01.

Projected Readings from the Release of Maximum RCS Inventory vs. Normal Operational Readings CRM Operational Dose Projected Dose Rate Recommended Value Rate 1.58E+04 mR/hr - 1.5 R/hr 15 Rlhr A value of 15 Rlhr has been selected as the RC2 .1 loss threshold.

5. REFERENCES 5.1. NEI 99-01 RS, Methodology for Development of Emergency Action Levels 5.2. USAR 6.2.1.2.1, (Containment) Design Parameters 5.3. USAR Table 15A-4, Maximum Fission Product Activity in Reactor Coolant 5.4. Drawing M-127 RS, Equipment Locations Containment Vessel Section "A" -
         "A" 5.5. SD-176 R4 Table 2.3-1, Area Radiation Monitor Location.

5.6. Procedure DB-NE-06201, Reactor Operators Curve Book, Revision 9.

6. ATTACHMENTS 6.1. RCS Maximum Isotopic Activity 6.2. MicroShield CRM Calculation Report EP-EALCALC-DB-0702 Page 5 of 8 RevO RCS Maximum Available Isotopic Activity c

0 u

                                                               ;            Q.
                                                               ~c            0 0

c 0 GI Ill :::-  ; u c

                                                                            -o             f Cl) -

0 O' 25 ~ c - Cl) (.) 0 u (.) ~ Cl! - en ::::::  :: > cc-m-

                                                                            ~~         ooO (JO a:: 2.                  oo.2.

Conversion Factor cc/ft3): I 28316.85l Kr83m 3.12E-01 1.0054E+02 1.25E-03 Kr85 9.30E+OO 2.9969E+03 3.73E-02 RCS Volume (ft3): 1.138E+04 Kr85m 1.65E+OO 5.3171E+02 6.63E-03 RCS Volume (cc): 3.222E+08 Kr87 9.04E-01 2.9131E+02 3.63E-03 Kr88 2.90E+OO 9.3451E+02 1.16E-02 Containment Volume (ft3): 2.834E+06 Xe-131m 2.32E+OO 7.4761E+02 9.32E-03 Containment Volume (cc): 8.025E+10 Xe-133 2.63E+02 8.4751E+04 1.06E+OO Xe-133m 3.03E+OO 9.7640E+02 1.22E..Q2 Xe-135 5.50E+OO 1.7724E+03 2.21E-02 Xe-135m 1.00E+OO 3.2225E+02 4.02E-03 Xe-138 5.52E-01 1.7788E+02 2.22E-03 1-131 3.48E+OO 1.1214E+03 1.40E-02 1-132 5.20E+OO 1.6757E+03 2.09E-02 1-133 4.11E+OO 1.3244E+03 1.65E-02 1-134 5.39E-01 1.7369E+02 2.16E-03 1-135 2.0SE+OO 6.6060E+02 8.23E-03 EP-EALCALC-DB-0702 Page 6 of 8 Reva Micro$lrieldCRil GalculationRepo:l irlicroShieldv5.03(5.0340091 )

                                   ?oledoEdieonCompanY
1 FileR6t:

Flle: EP-L-RC2.M$5 Oale: Oata:Oclober3,2007 3y: Tinc:9:51:35AM Checied:

00:00:02 CaseTltle:RC2LoseCRMieading Dercription:CRMReadingBaaedon *lox RCSAEfivif in eonbinn:nt Geometry:8 - CyllnderVolume- EndShields SourcgDirrgxlona Height S"Ser3cm 213tt 6.0in Radius 2.0s{gcm 65n0.0in Dlc.s Ppintg X T7 f 1 1676.4cn $"S1er03 em !rx 55 110.0in 213tl6.0in 0.01l ShiPldr ShieldNams Ditwrsion Malerial &eg[

Source 8"02e*10crn' Af 1.S122 AirGaP Air t.W122

                                         $ourceInPul Grouplngilethod : Standtrdlndicer l.lumberof Groupa: ?5 LowerEnergyCutoff: 0.015 Photonr< 0.015: Excluded Llbrary:Grove NucllSq       gg0e!        bscouerels                         gatet:f UCi&:t!

l-131 l.'t?a4e*003 4.149?e+0J3 1.397$e'002 $.1705e+0!? l-132 1.67574+003 6.29616+013 2.088?e{02 7.73S46+002 1133 1.3?44e+003 4.9003e+013 1.65O4e{02 8.1066r+0C2 l-134 1"?369e+002 6.42650+012 2.164$e-sg 8.A0gOe*C01 l-13S 6.6080E+002 ?.{442e+013 3.2323e-003 3.!{59e+00? Kr{3m 1.0054e+002 3.7200e+012 1.2329e-0t3 4;6358e+03'! Kr-85 2.9969e+003 1.'1039e+014 3.73478-00? 1.391&*003 Kr-8Em S.3t7te+002 1.9673e+013 6.6261e-003 2"45166+002 '1.3,*31e+00? Xr-87 2.9't31e+002 1.0778e+013 3.6302e{03 Kr_88 9.34916+002 3.4577e+013 1.1646e-012 4.30gge+002 Xe.131m 7.4761e+002 2.7662e+013 9.3166e{03 3.44?1et002 Xs,l33 g.4tble+004 3.1358+015 1.0561e+000 3.9078"l004 Xe-133m 9.7640e+002 3.6127e+013 1.21t8s402 {.5030e*002 Xe-135 1"7?2de+003 6.5579e+013 2.20873402 4.1723e$!2 Xe-135m 3.222.5+002 1.1$!ts+013 4.0158e-!03 1.135$e+003 Xe-138 1.7788e+002 6.5816e+012 ?,2167e-!03 8.?0tAe+001 EuilduP The matgriat raference ia : Sourca EP.EALCALC-DB-0702 Page7 of I

Attachment 2 MicroShield CRM Calculation Report Page :2 DOS File : EP-L-RC2.MS5 Run Date: October 3, 2007 Run Time: 9:51:35 AM Duration : 00:00:02 Integration Parameters Radial 20 Circumferential 10 Y Direction (axial) 10 Results Energy Activity Fluea~e Rat§ Fluence R§le Exgosure Rate Exgosure R~te MeV Qhotons/sec MeV/cm 2/sec MeV/cm 2/sec mR/hr mR/hr No BulldUQ Witt! Buildu12 NQ Buildu12 With Buildu12 0.03 1.548e+15 3.322e+05 5.419e+05 3.293e+03 5.370e+03 0.08 1.152e+15 8.634e+05 1.618e+06 1.366e+03 2.560e+03 0.1 6.819e+10 6.515e+01 1.129e+02 9.967e-02 1.727e-01 0.15 1.752e+13 2.592e+04 4.031e+04 4.268e+01 6.638e+01 0.2 7.508e+13 1.514e+05 2.124e+05 2.673e+02 3.749e+02 0.3 1.040e+13 3.248e+04 4.199e+04 6.162e+01 7.965e+01 0.4 4.616e+13 1.966e+05 2.423e+05 3.830e+02 4.721e+02 0.5 7.146e+13 3.869e+05 4.621e+05 7.594e+02 9.071e+02 0.6 8.762e+13 5.769e+05 6.743e+05 1.126e+03 1.316e+03 0.8 8.249e+13 7.391e+05 8.380e+05 1.406e+03 1.594e+03 1.0 3.527e+13 4.010e+05 4.466e+05 7.392e+02 8.233e+02 1.5 3.141e+13 5.495e+05 5.955e+05 9.245e+02 1.002e+03 2.0 2.934e+13 6.951e+05 7.409e+05 1.075e+03 1.146e+03 3.0 1.774e+12 6.427e+04 6.736e+04 8.719e+01 9.139e+01 TOTALS: 3.189e+15 5.015e+06 6.522e+06 1.153e+04 1.580e+04 EP-EALCALC-DB-0702 Page 8 of 8 RevO

EP-EALCALC.DB.O7O3 RadiologicalGaseousEffluentEAL Values (EALsRGl, RSl, RAi and RU1) (REVISION 2) Author: Document GregoryS. Van Wey DocumentReviewer: Vi"t eopa,o\\o Author: Review: ,r {,tl,

Davis Besse EAL Technical Bases Calculations - Rx1 Series TABLE OF CONTENTS

1. Purpose ............................................................................................... 4
2. Development Methodology and Bases ....................................................... 4 2.1 Threshold Limits ........................................................................... 4 2.2 Effluent Release Points .................................................................. 7 2.2.1 Liquid Release Points ........................................................... 7 2.2.2 Gaseous Release Points ....................................................... 9 2.3 Gaseous Threshold Source Terms ................................................... 9 2.3.1 RU1 .1 Gaseous Threshold Source Term ................................... 9 2.3.2 RA1.1, RS1.1, RG1.1 Gaseous Threshold Source Term ............. 10 2.4 Release Duration ......................................................................... 10 2.5 Meteorology ............................................................................... 11 2.5.1 Wind Speed ...................................................................... 11 2.5.2 Stability Class .................................................................... 11 2.5.3 Site Boundary Distances ...................................................... 11 2.5.4 Atmospheric Dispersion ....................................................... 11
3. Design Inputs .......................................................................................12 3.1 Constants and Conversion Factors .................................................. 12 3.2 Station Vent Effluent Monitor and Flow Specifications ......................... 12
4. Calculations ........................................................................................ 13 4.1 RU1 .1 Gaseous Effluent Monitor Values .......................................... 13 4.1.1 Maximum ODCM Effluent Monitor Limit. .................................. 13 4.1.2 RU1 .1 Gaseous Effluent Monitor Value ................................... 14 4.2 RA1.1, RS1.1, RG1.1 Gaseous Effluent MonitorValue ........................ 14
5. Conclusions ........................................................................................ 14
6. References .......................................................................................... 15 EP-EALCALC-DB-0703 Page 2of19 Rev2

Davis Besse EAL Technical Bases Calculations - Rx1 Series

7. Attachments ........................................................................................ 15 Attachment 1 - ODCM Limit Calculation ................................................... 16 Attachment 2 - MIDAS Gaseous Effluent EAL Calculations ........................... 17 EP-EALCALC-DB-0703 Page 3of19 Rev2

Davis Besse EAL Technical Bases Calculations - Rx1 Series

1. PURPOSE The DBNPS Emergency Action Level (EAL) Technical Bases Manual contains background information, event declaration thresholds, bases and references for the site specific EAL and Fission Product Barrier (FPB) values used to implement the Nuclear Energy Institute (NEI) Rev. 6 EAL guidance methodology. This calculation document provides additional technical detail specific to the derivation of the gaseous and liquid radiological effluent EAL values developed in accordance with the guidance in NEI 99-01, Rev. 6.

Documentation of the assumptions, calculations and results are provided for the DBNPS site specific Rx1 series EAL effluent monitor values associated with the NEI 99-01, Rev. 6 EALs listed below:

  • NEJ AU 1.1 (gaseous and liquid)
  • NEI AA 1.1 (gaseous and liquid)
  • NEI AS1 .1 (gaseous)
  • NEI AG1 .1 (gaseous)
2. DEVELOPMENT METHODOLOGY AND BASES
2. 1 Threshold Limits 2.1.1 RU1 .1 Liquid Threshold Limits Guidance Criteria The RU1 Initiating Condition (IC) addresses a release of radioactivity that, for whatever reason, causes effluent radiation monitor readings to exceed 2 times the Offsite Dose Calculation Manual (ODCM) limit for 60 minutes or longer.

DBNPS Bases The DBNPS liquid effluent limits for RU1 are taken from the ODCM, Liquid Effluent Monitor Setpoints, Section 2.3.3.

  • For individual nuclides, the limit is the concentration value specified in 10CFR20, Appendix B, Table 2, Column 2.
  • For dissolved and entrained noble gases, the limit is 2E-4 µCi/ml total activity.
  • For nuclide mixtures, the limit is the summation of individual nuclide concentrations divided by their corresponding individual effluent concentration (EC) where the resulting value equals 1 (ODCM 2.3.3).

The DBNPS RU1 .1 liquid effluent EAL threshold values will be established as the High Alarm level for the monitor and will equate to 2 times the ODCM limit. EP-EALCALC-DB-0703 Page 4of19 Rev 2

Davis Besse EAL Technical Bases Calculations - Rx1 Series 2.1.2 RU1 .1 Gaseous Threshold Limits Guidance Criteria The RU1 Initiating Condition (IC) addresses a release of radioactivity that, for whatever reason, causes effluent radiation monitor readings to exceed 2 times the Offsite Dose Calculation Manual (ODCM) limit for 60 minutes or longer. DBNPS Bases The DBNPS gaseous effluent limits for RU1 .1 are based on values that equate to effluent radiation monitor readings exceeding 2 times the ODCM limit for 60 minutes or longer. The DBNPS gaseous effluent limits for RU1 .1 are taken from ODCM Section 3.3.2. Note - Inhalation (internal organ) limits are not applicable for EAL threshold determination since the specified surveillance involves collection and analysis of composite samples. The after-the-fact assessment (individual uptake) could not be made in a timely manner conducive to accident classification.

  • Less than or equal to 500 mrem/yr to the total (whole) body from noble gases
  • Less than or equal to 3,000 mrem/yr to the skin from noble gases.

2.1.3 RA 1.1 Liquid Threshold Limits Guidance Criteria The RA 1 IC addresses a release of radioactivity resulting in offsite dose greater than 10 mrem TEDE or 50 mrem thyroid COE. This i~ based on values at 1% of the EPA Protective Action Guides (PAGs). Per NEI 99-01, the effluent monitor readings should correspond to the above dose limit at the "site-specific dose receptor point" (consistent with the calculation methodology employed) for one hour of exposure. DBNPS Bases The DBNPS liquid effluent limits are based on the liquid effluent concentration values given in 10CFR20 Appendix B Table 2 Column 2 (see Section 2.2.1 above). The 10CFR20 values are equivalent to the radionuclide concentrations which, if ingested continuously over the course of a year, would produce a total effective dose equivalent of 0.05 rem (50 millirem). The EPA PAGs are based on a TEDE dose from immersion, inhalation and deposition. The 10CFR20 limits and the EPA limits do not represent the same type of exposure and thus cannot be compared on a one to one basis. EP-EALCALC-DB-0703 Page 5 of 19 Rev2

Davis Besse EAL Technical Bases Calculations - Rx1 Series Additionally, significant dilution assumptions are incorporated in determining OOCM ingestion limits for liquid releases such that obtaining a dose of 10 mrem in one hour would require a discharge concentration above the effluent monitor threshold (ingestion of radioactivity from a liquid release at the site boundary is not practical). Thus, OBNPS EALs will not contain a liquid effluent monitor threshold value that equates to 1% of the EPA PAG. 2.1.4 RA 1.1 Gaseous Threshold Limits Guidance Criteria The RA 1 IC addresses a release of radioactivity resulting in offsite dose greater than 10 mrem TEOE or 50 mrem thyroid COE. Per NEI 99-01, the effluent monitor readings are based on values at 1% of the EPA Protective Action Guides (PAGs) at the "site-specific dose receptor point" (consistent with the calculation methodology employed) for one hour of exposure. The EPA PAG guidance provides for the use of adult thyroid dose conversion factors; however, some states have decided to base protective actions on child thyroid COE. Nuclear power plant ICs/EALs need to be consistent with the protective action methodologies employed by the States within their EPZs. They thyroid COE dose used in the IC and EALs should be adjusted as necessary to align with State protective action decision-making criteria. DBNPS Bases The OBNPS gaseous effluent limits for RA 1.1 are based on values that equate to an offsite dose greater than 10 mrem TEOE or 50 mrem child thyroid COE, which are effectively 1% of the EPA Protective Action Guides (PAGs) as the State of Ohio utilizes child thyroid COE for protective action decision making. 2.1.5 RS1 .1 Gaseous Threshold Limits Guidance Criteria The RS1 IC addresses a release of radioactivity resulting in offsite dose greater than 100 mrem TEOE or 500 mrem thyroid COE. This is based on values at 10% of the EPA Protective Action Guides (PAGs) at the "site-specific dose receptor point" (consistent with the calculation methodology employed) for one hour of exposure. The EPA PAG guidance provides for the use of adult thyroid dose conversion factors; however, some states have decided to base protective actions on child thyroid COE. Nuclear power plant ICs/EALs need to be consistent with the protective action methodologies employed by the States within their EPZs. They EP-EALCALC-08-0703 Page 6of19 Rev2

Davis Besse EAL Technical Bases Calculations - Rx1 Series thyroid COE dose used in the IC and EALs should be adjusted as necessary to align with State protective action decision-making criteria. DBNPS Bases The OBNPS gaseous effluent limits for RS1 .1 are based on values that equate to an offsite dose greater than 100 mrem TEOE or 500 mrem child thyroid COE, which are effectively 10% of the EPA Protective Action Guides (PAGs) as the State of Ohio utilizes child thyroid COE for protective action decision making. 2.1.6 RG1 .1 Gaseous Threshold Limits Guidance Criteria The RG1 IC addresses a release of radioactivity resulting in offsite dose greater than 1,000 mrem TEOE or 5,000 mrem thyroid COE. This is based on values at 100% of the EPA Protective Action Guides (PAGs) at the "site-specific dose receptor point" (consistent with the calculation methodology employed) for one hour of exposure. The EPA PAG guidance provides for the use of adult thyroid dose conversion factors; however, some states have decided to base protective actions on child thyroid COE. Nuclear power plant ICs/EALs need to be consistent with the protective action methodologies employed by the States within their EPZs. The thyroid COE dose used in the IC and EALs should be adjusted as necessary to align with State protective action decision-making criteria. DBNPS Bases The OBNPS gaseous effluent limits for RG1 .1 are based on values that equate to an offsite dose greater than 1,000 mrem TEOE or 5,000 mrem child thyroid COE, which are effectively 100% of the EPA Protective Action Guides (PAGs) as the State of Ohio utilizes child thyroid COE for protective action decision making. 2.2 Effluent Release Points 2.2.1 DBNPS Liquid Release Points Guidance Criteria Per NEI 99-01, the RU 1 IC addresses normally occurring continuous radioactivity releases from monitored gaseous or liquid effluent pathways and planned batch releases from non-continuous release pathways. Per NEI 99-01, the RA 1 IC includes events or conditions involving a radiological release, whether gaseous or liquid, monitored or un-monitored. Classification based on effluent monitor readings assumes that a release path to the environment is established. If the associated release path to the environment EP-EALCALC-DB-0703 Page 7 of 19 Rev 2

Davis Besse EAL Technical Bases Calculations - Rx1 Series has been isolated, the effluent monitor reading is no longer VALID for emergency classification purposes. The "site-specific monitor list and threshold values" should include the effluent monitors described in emergency plan and emergency dose assessment procedures. DBNPS Bases Batch Releases (ODCM Section 2.1.1.a) - Batch releases from the liquid radwaste system may occur from: Radiation Monitor Function Clean Radwaste Effluent RE-1770 A & B Alarm/Automatic Release Monitor Tanks (2) Termination Miscellaneous Liquid RE-1878 A & B Alarm/Automatic Release Waste Monitor Tank Termination Detergent Waste Drain RE-1878 A & B Alarm/Automatic Release Tank Termination Continuous Releases (ODCM Section 2.1.2) - DBNPS does not perform continuous radioactive liquid releases. Potential leakage pathways identified in the ODCM that could result in continuous leakage to the environment should barrier systems fail are: System Radiation Monitor Function Storm Sewer RE-4686 Alarm only Drain Line Component Cooling RE-1412 & 1413 Alarm only Water System (CCWS) Service Water System RE-8432 Alarm only (SWS) Intake Forebay RE-8434 Alarm only The above pathways include installed monitors (not required by the ODCM) or are checked by periodic grab sample. These sources are not engineered discharge pathways used for normally occurring continuous liquid radioactivity releases and thus are not applicable for use as a routine discharge liquid release point for EAL threshold development. EP-EALCALC-DB-0703 Page 8 of 19 Rev2

Davis Besse EAL Technical Bases Calculations - Rx1 Series 2.2.2 DBNPS Gaseous Release Point Guidance Criteria Per NEI 99-01, the RU1 and RA 1 ICs address normally occurring continuous radioactivity releases from monitored gaseous or liquid effluent pathways and planned batch releases from non-continuous release pathways. Per NEI 99-01, the RS1 and RG1 ICs include events or conditions involving a radiological release, whether gaseous of liquid, monitored or un-monitored. Classification based on effluent monitor readings assumes that a release path to the environment is established. If the associated release path to the environment has been isolated, the effluent monitor reading is no longer VALID for emergency classification purposes. The "site-specific monitor list and threshold values" should include the effluent monitors described in the emergency plan and emergency dose assessment procedures. DBNPS Bases All releases of gaseous radioactive effluents are designed to occur via the Station Vent (ODCM Section 3.3.2). Note - Site ground level elevation is 585'0". The DBNPS primary release point (Station Vent) is considered ground level (USAR 11A.3.1) 2.3 Gaseous Thresholds Source Terms 2.3.1 RU 1.1 Gaseous Threshold Source Term Guidance Criteria Per NEI 99-01, radiation monitor readings should reflect values that correspond to a radiological release exceeding 2 times a release control limit. The controlling document typically describes methodologies for determining effluent radiation monitor setpoints; these methodologies should be used to determine EAL values. For EAL #2 (RU1.1) values should be 2 times the setpoint established by the radioactivity permit. to warn of a release that is not in compliance with the specified limits. Indexing the value in this manner ensures consistency between the EAL and the setpoint established by a specific discharge permit. EP-EALCALC-DB-0703 Page 9of19 Rev2

Davis Besse EAL Technical Bases Calculations - Rx1 Series DBNPS Bases Radiation monitor setpoints are determined for each batch release based on the actual radionuclide mix that is contained in the tank prior to the release. For conservatism in determining the effluent radiation monitor values for this IC, the source term values are based on the estimated annual releases from gaseous radwaste systems, specifically the containment vessel purge, aux building and the steam jet air ejector, contained in USAR Table 11.3-14. 2.3.2 RA1.1, RS1.1, and RG1.1 Gaseous Thresholds Source Terms Guidance Criteria The calculation of monitor readings will require use of an assumed release isotopic mix; the selected mix should be the same for ICs AA 1, AS1. and AG1. DBNPS Bases The accident source term in the MIDAS dose model is based on NUREG-1228, Source Term Estimation During Incident Response to Severe Nuclear Power Plant Accidents, and RTM-96, Response Technical Manual, adjusted to DBNPS current core and plant configuration. The following MIDAS menu selections are used to establish the accident source term: Accident: Containment Bypass Core Condition: Gap Release, Uncovered 15-30 minutes Filtration: Filtered No credit is taken for source term decay. The start of release time entered into MIDAS is coincident with the time of reactor trip. 2.4 Release Duration Guidance Criteria Per NEI 99-01 1, since doses are generally monitored in real-time, it is suggested a release duration of one hour be assumed ... If individual site analyses indicate a longer or shorter duration for the period in which the substantial portion of the activity is release, the longer duration should be used. 1 Release duration basis is taken from NEI 99-01, Rev. 5, as NEI 99-01, Rev. 6 does not provide specific guidance for this input parameter. DBNPS Bases The DBNPS effluent monitor readings are calculated for a release duration of one hour. As a significant number of accident types, plant condition and operator action variables exist that would influence the duration of an effluent release, no EP-EALCALC-DB-0703 Page 10of19 Rev2

Davis Besse EAL Technical Bases Calculations - Rx1 Series site specific analysis has been performed to establish a shorter or longer release duration. 2.5 Meteorology Guidance Criteria The effluent monitor readings should correspond to the applicable dose limit at the "site-specific dose receptor point". The "site-specific dose receptor point" is the distance(s) and/or locations used by the licensee to distinguish between on-site and offsite doses. The selected distance(s) and/or locations should reflect the content of the emergency plan, and the procedural methodology used to determine offsite doses and protective action recommendations. This is typically the boundary of the Owner Controlled Area. DBNPS Bases The DBNPS site specific meteorology used for the calculation of monitor readings for these ICs/EALs is based on annual average meteorology. This is considered acceptable in that dose assessments using actual meteorology will be initiated for significant radioactivity releases. The annual average meteorology inputs for these calculations are: 2.5.1 Wind speed The average wind speed at the 10 meter level for DBNPS is 9.0 miles per hour (derived from historic Radiological Effluent Monitoring Program - REMP files and the OSlsoft Pl server archives for the period from 1/1/97 to 12/13/06). 2.5.2 Stability Class The most predominant stability for DBNPS is class "D" (derived from historic REMP files and the OSlsoft Pl server archives for the period from 1/1/97 to 12/13/06). 2.5.3 Site Boundary distance used for calculations For the RU1 .1 calculations, the DBNPS "site-specific dose receptor point" utilized in the derivation of the EAL effluent release threshold, is the limiting receptor location-for the downwind unrestricted area, or site boundary, which is 730 meters (0.45 miles) (1609.3 m/mi. conversion factor used) in the NNE direction. (ODCM Table 3-6 from the Chesapeake Nuclear Services report, "Davis-Besse Nuclear Power Station Meteorological and Atmospheric Dispersion Report, Rev. 1" dated June 2012). For the RA 1.1, RS 1.1 , and RG 1.1 calculations, an average site boundary distance of 0.75 miles is used, as agreed to with the State of Ohio (CR 07-26574). EP-EALCALC-DB-0703 Page 11 of 19 Rev 2

Davis Besse EAL Technical Bases Calculations - Rx1 Series 2.5.4 Atmospheric Dispersion For RU1 .1, methodology used in the ODCM is followed. The limiting receptor location for the downwind unrestricted area, or site boundary, is 730 meters (0.45 miles) in the NNE direction. The atmospheric dispersion used for this calculation is 5.90E-6 sec/m 3 X/Q value (ODCM Table 3-6 from the Chesapeake Nuclear Services report, "Davis-Besse Nuclear Power Station Meteorological and Atmospheric Dispersion Report, Rev. 1" dated June 2012). For RA 1.1, RS 1.1, and RG1 .1, calculations are performed using the MIDAS dose assessment software. The MIDAS software models atmospheric dispersion consistent with the regulatory guidance contained in Reg. Guide 1.145, Atmospheric Dispersion Models for Potential Accident Consequence Assessments at Nuclear Power Plants; Reg. Guide 1.23, Meteorological Monitoring Programs for Nuclear Power Plants; and Reg. Guide 1.109, Calculation of Annual Doses to Man from Routine Releases of Reactor Effluents for the Purpose of Evaluating Compliance with 10CFR50, Appendix I.

3. DESIGN INPUTS 3.1 Constants and Conversion Factors 3.1.1 1609.3 meters per mile (x value in the dispersion equations) 3.1.2 0.447 m/sec per mph 3.1.3 365.25 days per year 3.1.4 472 cc/sec per cfm 3.1.5 106 µCi per Ci 3.2 Station Vent Effluent Monitor and Flow Specifications 3.2.1 Station Vent Radiation Monitor (USAR Table 11.4-1)
  • RE-4598 AAC/BAC (noble gas) ................................. 1E-7 to 1E-1 µCi/cc
  • RE-4598 ABC/BBC (noble gas) ....................................... 1E-4 to 1ES µCi/cc 3.2.2 Normal Operations Ventilation Flow The RU1 .1 calculations are based on a normal operations station vent flow rate value of 1.21 E+S SCFM as follows:

EP-EALCALC-DB-0703 Page 12. of 19 Rev2

Davis Besse EAL Technical Bases Calculations - Rx1 Series

  • Main Station Exhaust (single train) ...................................... 7.1 E+04 SCFM USAR Table 11.4-1 ventilation flow rate (SCFM) for the RE-4598 detectors is provided as a band from 6.3E+04 to 7.1E+04.
  • Containment Vessel Purge ............................................... 5.0E+04 SCFM USAR Table 11.3-6
  • Steam Jet Air Ejectors ..................................................... 1.0E+01 SCFM Normal average operational value 3.2.3 Emergency Operations Ventilation Flow The RS1 .1 and RG1 .1 EAL calculations are based on an emergency station vent flow rate value of 8.7E+04 SCFM as follows:
  • Main Station Exhaust (single train) ......................................7.1 E+04 SCFM USAR Table 11.4-1 ventilation flow rate (SCFM) for the RE-4598 detectors is provided as a band from 6.3E+04 to 7.1 E+04.
  • Emergency Ventilation System (two trains) .......................... 1.6E+04 SCFM USAR 11.3.2.2.4.c specifies EVS flow rate as 8.0E+03 SCFM per train.
4. CALCULATIONS 4.1 RU1 .1 Gaseous Effluent Monitor value 4.1.1 Maximum ODCM Effluent Monitor Limit
1. Total Body Dose (ODE)
                            }:C x500 1

SP18 - ---------- 472x X xVFxl:(C 1 xK 1) QAVG

2. Skin Dose (SOE)
                                     !:Ci x3000 SPSKIN   = ------------------

472x Q~--- x VF x L(Ci ><(Li + 1.1M1)) AVG EP-EALCALC-DB-0703 Page 13of19 Rev 2

Davis Besse EAL Technical Bases Calculations - Rx1 Series Where: SPx Provides radiation monitor setpoint reading for given ODCM limit Ci Activity Released Limit ODCM Limit- 500 total body or 3000 skin (mRem/yr) 472 Conversion factor (CFM to cc/sec) XIQAvG Annual Average Dispersion Factor (sec/m 3) VF Vent Flow (CFM) LCiX... Activity Adjusted Dose Correction Factor See Attachment 1 for the ODCM setpoint spreadsheet calculations. 2.86E-3 µCi/cc ....................................................................... SProtal Body 8.28E-3 µCi/cc ................................................................................SPskin 4.1.2 RU1 .1 Gaseous Effluent Monitor value The RU 1.1 value is 2 times the calculated ODCM effluent monitor setpoint for the Total Body (the Skin limit required a higher release rate to achieve the limit). RU1.1=2 x SPre See Attachment 1 for the actual RU1 .1 spreadsheet calculations. 5.72E-3 µCi/cc ...............................................................................RU1.1 4.2 RA 1.1, RS1 .1, RG1 .1 Gaseous Effluent Monitor values See Attachment 2 for the results of the MIDAS gaseous effluent calculations for the EAL threshold values for RA 1.1, RS 1.1, and RG 1.1 .

5. CONCLUSIONS GE SAE Alert UE Release Point Monitor 8.4E-01 8.4E-02 I/)

Station Vent (noble gas) RE 4598 AB/BB 8.4E +00 (µCi/cc) (µCi/cc) {µCi/cc)

s 0 5.72E-03 Q)

I/) Station Vent (noble gas) RE 4598 AA/BA ----- ----- ---- (µCi/cc) . ro Cl 2 x High Waste Gas System Outlet RE 1822 A/B ----* --*** ----- Alarm 2 x High "C

  • 3 Clean Waste System Outlet RE 1770 A/B ----- ----* ----- Alarm C"

2 x High

.:J Misc. Waste System Outlet RE 1878 A/B ----- ----- ---- Alarm EP-EALCALC-DB-0703 Page 14 of 19 Rev 2

Davis Besse EAL Technical Bases Calculations - Rx1 Series

6. REFERENCES 6.1. NEI 99-01 R6, Methodology for Development of Emergency Action Levels 6.2. Davis-Besse Offsite Dose Calculation Manual (ODCM), Revision 31 6.3. Davis-Besse Updated Safety Analysis Report (USAR), Revision 30 6.4 MIDAS version 1.5.16.101714
7. ATTACHMENTS 7 .1 . Attachment 1 - ODCM Limit Calculation 7.2. Attachment 2 - MIDAS Gaseous Effluent EAL Calculations EP-EALCALC-DB-0703 Page15of19 Rev2 ODCM Limit Calculation ODCM Table 3-5 USAR Table 11.3-14 0

tJ m

u. ....c:

Q) U'J (:)' :J (:)' ~-

                                                         ._ M                                 c:             OJ 0

E .... E 2 E ~ 0 >... 0 Q) 0 -- tJ -(I) Ill II)

                                   ..... II)
                                                                                             ~               0               Cl)

IU E

                         *c
                          ;:J u *c                u.. -~

Cl) e:I +; c uCb ~ m 0

..  ::::i OJ  ::::i c  :::-

E Cl> 0 U'J 0 GI jjj' OJ 0 ns

I 11'1 j 0  ::i
                                                                        ...c::

Q.

                                                                                                             ...             0::           :;:;                ~

C> 0 ... 0 .... :q:

0) (,)

c: Cl) ('(!

                   >. Q.

0 Ill Q,

                                                         .... Cl>

a:i-  :::i-  !!!

                  -c      ....>.                        *-    Q.

E >, :0 ~ t: .... u_ 0

                                    !IS G) >.
                                          ....          ct ...                               - ::...         Q.J
                                                                                                           .., {ij t: >-                             +

Ill E m e <O

                                                         ~-
                                                              >.       .!: Ci!
                                                                        ....c: *-.....

lll <D

                                                                                             *:; Ci!

m Cb E -~ <( {ij Cb Q.J

                                                                                                                                           *;::;      ~
                                                                                                                                                               ...J Nuclide (ii o *-

I-~._ Cl> E c

                                   .x E U)_
                                          ...Cl>         - ...cuE
                                                         - "'C i=

ns 0£ 0  :::i

                                                                                              )( *.::
I ct~
i scu ~::I.....

(/)

                                                                                                                             ~ 'i:

0

                                                                                                                             ,_£
I 111 Gi Q:'.
                                                                                                                                                      )(

0 0 Cl - Kr-83m 7.56E-02 O.OOE+OO 1.93E+01 2.49E-02 6.35E-01 3.27E+OO 3.93E+OO 9.96E-04 7.53E-05 2.11E-02 Kr-85m 1.17E+03 1.46E+03 1.23E+03 1.83E-01 3.37E+OO 1.71E+01 2.06E+01 5.22E-03 6.11E+OO 1.47E+01 Kr-85 1.61 E+01 1.34E+03 1.72E+01 4.35E+01 6.93E+OO 3-49E+01 8.54E+01 2.16E-02 3.48E-01 2.94E+01 Kr-87 5.92E+03 9.73E+03 6.17E+03 6.14E-02 1.84E+OO 9.30E+OO 1.12E+01 2.84E-03 1.68E+01 4.69E+01 Kr-88 1.47E+04 2.37E+03 1.52E+04 2.67E-01 5.89E+OO 2.98E+01 3.60E+01 9.11E-03 1.34E+02 1.74E+02 Xe-131m 9.15E+01 4.76E+02 1.56E+02 6.17E+OO 4.96E+OO 2.49E+01 3.60E+01 9.13E-03 8.35E-01 5.91E+OO Xe-133m 2.51E+02 9.94E+02 3.27E+02 1.70E+OO 6.25E+OO 3.14E+01 3.94E+01 9.97E-03 2.50E+OO 1.35E+01 Xe-133 2.~t4E+02 3.06E+02 3.53E+02 3.15E+02 5.47E+02 2.75E+03 3.61E+03 9.15E-01 2.69E+02 6-35E+02 Xe-l35m 3.12E+03 7.11E+D2 3.36E+03 2.74E-02 2.04E+OO 1.03E+01 1.24E+01 3.13E-03 9.78E+OO 1.38E+01 Xe-135 *1.81E+03 1.86E+03 1.92E+03 8.62E-01 1.12E+01 5.65E+01 6.85E+01 L74E-02 3.14E+01 6.90E+01 Xe-138 8.83E+03 4.13E+03 9.21E+03 1.59E-02 1.13E+OO 5.70E+OO 6.85E+OO 1.73E-03 1.53E+01 2.47E+01 Ar-41 8.84E+03 2.69E+03 9.30E+03 9.38E-02 2.44E+OO 1.23E+01 1.48E+01 3.75E-03 3.31E+01 4.84E+01 3.6SE+02 5.93E+02 2.99E+03 3.95E+03 1.00E+OO 5.19E+02 1.08E+03 Calculation Constants Calculation Results Total Body (DOE): 500 mRem/yr SP (ODE): **~E'l.li)J~ uCi/ml Skin Dose (SDE): .30.00 mRem/yr SP (SOE): B.'.2,~~fj'$ uCi/ml Vent Flow: 1.21E+o5 CFM X/Q: 5.90E-06 sec/m3 Unit Conversion: 472 mllft3 x mi1 /sec Dose Conversion: 1.1 mRem/mR ad 2 times 5.72E-03 EP-EALCALC-DB-0703 Page 16 of 19 Rev 2 MIDAS Gaseous Effluent EAL Calculations Dose Assessment Data Form Insufficient D3ta to SITE: DB ACTUAL  :\IE:-.T: B Detem1ine Lake Breeze Summ.11*y For Calculation: ll!H/15 14:00 DATE PRIXTED: 11/14"15 B:56 jcurrent Input Data )1-------------------------------------- 1\Iereorologiral Data: Lenl 'Wind Direction from \Yind Spttd Wind Spttd inch/15 min Stabili~- Cla55 Lo'll-er 90 degrees 9.0 mph 9.0 mph No Rain Q Effectiw Release .Monitor Counrsion flow Release Rate Concentrarfon

  )fonitor ID     Point           Reading           Srntus*           Units       to uC:i/cc                                Reading     Status* Units             (uCilsee)

{uCi/cc) STVTA-A 1 8.4E+OO 0 uCi/cc 1.0E+OO 8.4E+OO 8.7E+04 0 CFM 3.4E+08

                        *srams:      O=Good. l=Que."tio?l.3b!e, '.!=Bad, 7=M:mual Oveci&! ~fR:av.- Da:a Release Characterization:                    fa*ent Tree Selec:riom:

Mix JD# 1041: CONTAINMENT BYPASS RELS\SE, GAP RELEASE \.JNCOVERED 15- 30 MIN, NORM.AL FILTRATION (0.0100) Type  :.'foble Gases Iodines Particulates Total Units Ground 3.4E+08 8.7E+05 1.9E+04 3.4E+08 uCi/sec Start of Release: 13:53 *11 I '14 115 Encl of Release: '14:53 11 / 14 I *15 Tf11'411s Time of Trip: '13:53

                                          --       -- --                  Start of Projection           ----- 11
                                                                                                          '13:53           114 115 Dose Proj&tion Parameten:                      Pro je<:tion :Period:          24.00 Hours            E..mmated Remaining Release Durntion:              1.00 Hours
'Dose Results         '                                3 Dispel'sion: (s/m )               Projected Dose:            (mrem)                Cunent Dose Rate:           (mremllu-)

Cltild Child IEDElEDEat Distance XfQ TEDE Th~-roid CDE ITDE Thyroid CDE EDE TEDERate EAB I Site Boundary 1.6E-05 {OE+OS. 4.4E+03 *J .4E+03 4.5E+03 13E+03 *1.08 2 miles 4.6E-06 3.7E+02 1.2E+03 1.4E-01 3.1E-01 1.4E-01 5 milt's 1.3E-06 *LOE+02 3.'l E+02 O.OE+OO O.OE+OO O.OE+OO IO miles 4.9E-07 3.1E+01 UE+02 O.OE+OO O.OE+OO O.OE+OO

                                                              ~~Jimtt is BC~ed:W~;~,

10% of PAG Limit Exceeded EP-EALCALC-DB-0703 Page 17of19 Rev2 MIDAS Gaseous Effluent EAL Calculations Dose Assessment Data Form Insufficient Data to SITE: DB ACTC~L  ::m:::\**u: B Detem1ine Lake Breeze Summary For Cakn1ation: 11/14!15 U:OO DATE PRL'\TID: llll4/15 14:03

 !Current Input Data           I                                                                         Adjusted                :Measured         Preci Meteorological Data:                    Lewl              \Vind Dinrrion from                         \Yind Spt'ed             Wind Speed          inch/15 min       Stability Class Lo"l\-er             90        degree~                         9_0 mph                9.0   mph              No Rain                    .Q Effecth-e RelN1se                       Monitor                         Co1ri.-ersion                                                Flow                     Release Rate Concentration
   ~fonttor ID       Point           Reading           Status*      Units           to uCilcc                                      Rea cling   Status" ruits               (uCilsec)

{uCi/cc) STVTA-A 1 8.4E-01 0 uCi/cc 1.0E+OO 8.4E-Ol 8.7E+04 0 CFM 3.4E+07

                          *stams:       O=Good, l~e-niouable,  '.!=B2d, 7=M:;:111wtl O.*artde of.:1-1w D,;:a Release Oiaracterizatiou:                     :Event Tiff Selectiom:

Mi:f. ID# 104: CONTAINMENT BYPASS RELEASE, GAP RELEASE UNCOVERED 15- 30 MlN. NORMAL FILTRATION (0.0100) T~-pe ~oble Gases Iodine~ Particulates Total Units Ground 3.4E+07 B.7E+04 *t.~IE+03 3.4E+o7 nCi/~ec Start of Release-: 13:53 11 f *14 I 15 End of Release: 14:53 11 I 14 115

                                                                                                              ----- 11IM115 Time of Trip:                    'l3:53    111141*15                    Start of Projecdon                     13:53 Dose Projedion Parameters:                      Projection Period:            24.00 Hours                 Estimated Reumining Release Dura cion:              *1.0 0 Hours 1

Dose Results ' 3 Dispersion: ( s/m ) Projected Dose: (1nrem) Current Dose Rate: {mrem*11r) Child Child TEDE.'EDE at Dio>tance XIQ TEDE ThyroidCDE TEDI: Th~Toid CDE EDE TEDE R.1te EAB I Site Boundary 1.6E-05 1.0E+02 4.4E+02 'l.4E+02 4.5E+02 1.3E+02 1.08 2 miles 4.6E-06 3.7E+O"l 1-2E+02 2.3E-02 5.0E-02 2.2E-02 5 miles 1.3E-06 1.0E+O*J 3_1E+Ot O.OE+OO O.OE+OO O.OE+OO 10 miles 4.9E-07 3.'IE+OO 1.1E+o*1 O.OE+OO O.OE+OO O.OE+OO 10% of PAG I imtt Fx~P.P.<'l!'!r1 EP-EALCALC-DB-0703 Page 18of19 Rev2 MIDAS Gaseous Effluent EAL Calculations Dose Assessment Data form Insufficient Data to SITE: DB ACTCAL ~IE::\T: B Determine Lake Breeze Summar:-* For Calcufation: ll/14/15 1-t:OO DATE PRTh"TED: 11/1.t./l~ 14:(18 jcurrent Input Data I Adj1l

 ).[eteorological Data:                    Lfiel               Wind Dh*ection from                        'Wind Sp<e'ed          Wind Speed         inch/15 min       Stability Clase; Lower                     90        degree'>                    9.0 mplt            9.0 mph                No Rain                    Q Effectin>

Release )fonit(}r ConYersion Flow RelEC"ase Rate Concentration

   }fonitorID      Point              Reading            Sta rm*           Units         to uCi/cc                                  Reading Statm* rnits                  (uCi!sec)

(uCi/cc2 STVTA-A 1 8.4E-02 0 uCi/cc 1.0E+OO B.4E-02 8.7E+04 0 CFM 3.4E+06

                         *su'!'t1s:      O=Good  l=Que-~tio::i.~ble.., 2=B:!.d. 7=Monual 0-,-etrid<! ofR11w Dao Release Characte1ization:                      r,*ent Tree Sele-ction$:

Mi:<IO # 104: CONTAl NMENT BYPASS REL~SE, G..'\P RELEASE:: UNCOVERED 15 - 30 MlN, NORMAL FILTRATION (O.o10G) Type  ::"oble Gase'> Iodine;; Particulates Total ruits Ground 3.4E+06 8.7E+03 1.9E+02 3.4E+o6 uCilsec Stm't of Release: 13:53 11 l 14 I 15 End of Release: '14:53 11 I 14 I *15 Time of Trip: '13:53 Tf 114

                                              --       -- I Th    --             Start of Projection               '13:53    Tl I U
                                                                                                                             --     -- I --15 Dose Projection Parameters:                      Projection Period:                 24.00      HOUl'S        Estimated Remaining Release Duracion:            1.00 Hom"l
 'Dose .Results        '                                   3 Dfapersion:       (sim)              Projected Dose:              (lilrem)             Cun-ent Dose Rate:         (mrem/hr)

Child Child TED£1EDEat Distance X.1Q TEDE Thyroid CD.£ TEDI: Thyroid CDE EDE ITDER.<tte EAB f Site Boundary- 1.6E-05 1.0E+01 4.4E+01 *1.4E+01 4.5E+01 1.3E+01 1.08

! miles 4.6E-06 3.7E+OO 1.2E+OI 3.8E-03 8.2E-03 3.7E-03 5 miles 1.3E-06 1.0E+OO 3.1E+OO O.OE+OO O.OE+OO O.OE+OO 10 miles 4.9E-07 3.1E-0*1 UE+OO O.OE+OO O.OE+OO O.OE+OO EP-EALCALC-08-0703 Page 19of19 Rev2

EP-EALCALC-DB-0704 Radiation Monitor Readings for Core Uncovery During Refueling (EALs CG7 and CS7) (REVISION 0) Document Author: Scott McCain Document Reviewer: Greg Van Wey Author: 10/29/07 Date Review:

Davis Besse EAL Technical Bases Calculations - CG7 and CS7 TABLE OF CONTENTS

1. Purpose ..................................................................................................................... 3
2. Discussion ................................................................................................................. 3
3. Determination of Values ............................................................................................. 4 3.1. Assumptions and Input Constants ................................................................... 4 3.1.1. Source Term Activity ............................................................................ 4 3.1.2. Source Material Mass and Density ....................................................... 4 3.1.3. Source Geometry ................................................................................. 4 3.1.4. Distance Between Source and Receptor Location ............................... 5 3.1.5. Shielding Between Source and Receptor Location .............................. 6 3.2. Calculations ..................................................................................................... 6 3.2.1. Source Volume ..................................................................................... 6 3.2.2. Source Materials Mixed Shielding Densities ......................................... 6
4. Conclusions ............................................................................................................... 7
5. References ................................................................................................................ 7
6. Attachments ............................................................................................................... 7 Attachment 1, Source T enTI Decay Corrected Core Inventory ................................... 8 Attachment 2, MicroShield Source Geometry and Density Inputs ........................... 9 Attachment 3, MicroShield Report ......................................................................... 10 EP-EALCALC-DB-0704 Page 2 of 12 RevO

Davis Besse EAL Technical Bases Calculations -CG7 and CS7

1. PURPOSE Documentation of the assumptions, calculations and results for the radiation monitor values used to indicate a loss of RPV inventory when the plant is in the cold shutdown and refueling modes for the EAL thresholds listed below.
  • CG7.2.a (NEI CG1 .2.a)
  • CS7.3.b (NEI CS1 .3)
2. DISCUSSION The Davis Besse EAL Technical Basis Document contains the bases and references for the site specific EAL threshold values used to implement the NEI 99-01 Rev. 5 guidance methodology. This document has been developed to provide additional detailed technical documentation on specifically how the containment radiation monitor value used to indicate core uncover when shutdown was derived.

The generic guidance provided in NEI 99-01 is not intended to be used "as is." It is intended to give the logic for developing site specific EAL threshold values (Section 5.3 of NEI 99-01 ). NEI 99-01 Rev. 5 provides the following guidance for CG7 and CS7 as indicated by a containment radiation monitor reading: As water level in the RPV lowers, the dose rate above the core will increase. The dose rate due to this core shine should result in site specific monitor indication and possible alarm. This EAL should conservatively estimate a site specific dose rate setpoint indicative of core uncovery (i.e., level at TOAF). A single value that would indicate core uncovery at all times cannot be set since several variables affect the source term (such as core loading, fuel bumup and time after shutdown). Therefore, a conservative set of assumptions must be established so that the calculated value will be low enough to be a valid indication of fuel uncovery for most conditions during refueling mode, but high enough so that inadvertent classifications are not made due to planned maintenance events or other conditions which may increase radiation levels. In most PWRs, the containment high range radiation monitors are either located high in the containment dome or on the outer walls and are designed to indicate fuel damage following a Loss of Coolant Accident (LOCA). Because of their design purpose and location, these monitors are not the best choice for indication of fuel uncovery. For this reason, the refuel bridge portable radiation monitor will be used as the basis to indicate uncovery of the core during refueling conditions at Davis Besse. EP-EALCALC-DB-0704 Page 3of12 Revo

Davis Besse EAL Technical Bases Calculations - CG7 and CS7

3. DETERMINATION OF VALUES 3.1. Assumptions and Input Constants 3.1.1. Source Term Activity
1. Source activity is from NUREG-1228 Table 2.2 Fission Product Inventories (Ci/MWe). Although this list represents a sub-set of the total inventory, it is based on the significant dose contributors. This results in lower (conservative) estimated radiation levels.
2. Davis-Besse rated power of 950 MWe.
3. Core inventory is decay corrected for 14 days, based on a nominal refuel outage duration. This results in lower (conservative) estimated radiation levels, which will be reached quicker when the source term is higher and the ability to cool the core is more critical.
4. Only decayed activities greater than 1 Curie are used in the calculation. Limiting the isotopes in this manner will result in lower (conservative) estimated radiation levels.
5. No exposure rate is attributed to activation materials in the reactor vessel such as vessel walls and internals.

See Attachment 1 for the source term activity values. 3.1.2. Source Material Mass and Density

1. From the DB Unit 1 CY 15 Reload Report, AREVA 2006.
  • 177 fuel bundles in a fully loaded core.
  • Total bundle weight is 7.06E+05 gm (see reference 5.5)
  • 4.88E+05 gm Uranium per bundle.
  • 2.18E+05 gm Zirconium 1 per bundle.
2. Source material density is taken from MicroShield (Uranium 18. 75, Zirconium 6.5 and water 1.0 gm/cm3).

3.1.3. Source Geometry

1. From the DB Unit 1 CY 15 Reload Report, AREVA 2006.
  • The active fuel length is 143".
  • The fuel assemblies (plus the gap) are 8.567" x 8.567" squares.
  • 177 assemblies in a 15'x15' circular matrix (-180" diameter).

1 The total weight of the cladding is attributed to Zirconium (versus a portion being stainless steel). EP-EALCALC-DB-0704 Page 4of12 Rev 0

Davis3esseIAL TechnicalBasosCalculation;* CG?and C$?

2. Thesourcewillbe considered a cylinderwiththecoroinventory evenlydistributed its throughout volume.

3.1.4.Fistaag!?.,Fetween SoulligandReceptor Locatiotl Traoreceplorpointswillbe evaluated, $e fixedcontai*nentradialion monitorandthe portablerefuelbridgemonitor.Bistances wereeslimabd fromplantdrawingsM-127R5andM-509SH,6R0.Theval*sof 30'lor the portablerefuelbridgemonitoris considered a nsrninalwlw (btween directlyovertheore andthefar edgeof travel).

                                                       $ource-Recepttr Geometry  lllustraliorr l3ryJ'                   \llllllllffiil-wt
                                      \---l         l -ts'oiarneterI Note:llx Y distanceusedin MicroShieldois lhr bottomcisor EP.EALCALC.DB.OTO4                   Page5 of 12

Davis Besse EAL Technical Bases Calculations - CG7 and CS7 3.1.5. Shielding Between Source and Receptor Location Since the receptor points are located above the core and water level is assumed at top of active fuel, the following shields are considered in the calculations:

1. The material density of the source itself has shielding effects. See section 3.2.2 for discussion on determining source density.
2. Air - Distance from receptor points to the source (the MicroShield program calculates the linear distance using the axial and radial values).
3. Steel (iron)- portion of fuel assembly above top of active fuel.

Since this distance contains many voids (coolant channels, fuel rod springs) shield length will be set at-10% of actual distance. For the Davis-Besse fuel assemblies, the distance from TOAF to top of the fuel assembly is - 14", therefore the effective shield distance is set a 1.4". 3.2. Calculations 3.2.1. Source Volume

1. Source Cylinder Total Volume:

V= 1Cr2h x 16.387 5.96E+7 cm 3 =Jrx (90in) 2 x143inx16.387 cm 3/in 3

2. Source Materials Volume:

See Attachment 2 for the source materials volume calculations. 3.2.2. Source Materials Mixed Shielding Densities

1. Uranium and Zirconium volume is derived as follows:

Volume Weight

                                   = __    __,_;gm
                                                ;. ._;.per bundle x# bundles 1

cm Density gmlcm 3

2. Water volume is derived as follows:

Water Vol= Source Vol - (U Vol + Zirc Vol) EP-EALCALC-DB-0704 Page 6of12 RevO

.* Davis Besse EAL Technical Bases Calculations - CG7 and CS7

3. Material Volume Fractions (MVF) per MicroShield instructions are derived as follows:

Material Volume 3 MVF = cm Source Volume cm 3

4. Individual Density Entries (IDE) per MicroShield instructions are derived as follows:

IDEgmlcc = MVF x Material Densitygm/cc See Attachment 2 for the source materials mixed shielding densities calculations.

4. CONCLUSIONS Containment Radiation Monitor Refuel Bridge Portable Monitor (R/hr) (R/hr) 1.58E+01 2.97E+01
5. REFERENCES 5.1. NUREG-1228, October 1988, Table 2.2, Fission Product Inventories 5.2. Nuclear Decay Data for Radionuclides Occuring in Routine Releases from Nuclear Fuel Cycle, D.C.Kocher 5.3. Drawing M-127 RS, Equipment Locations Containment Vessel Section "A" -
            "A" 5.4. Drawing M-509 SH.6 RO, Equipment Elevations Inside Containment 5.5. DB CY 15 Reload Report, AREVA 2006 5.6. 51-5016988-00, DB CY 14 Design Report Table 5-2
6. ATTACHMENTS 6.1. Source Term Decay Corrected Core Inventory 6.2. MicroShield Source Geometry and Density Inputs 6.3. MicroShield Report EP-EALCALC-DB-0704 Page 7of12 Ravo

.* Attachment 1 Source Term Decay Corrected Core Inventory

                                 ...c ic         co N

N co N N

                                                                 -u-         e_

0 *- o~ 0 0 ";" <'! Q) ";" e ~ 'g ~ i;, e,, N ~ >- 'O

                                                                   .sc                i 0

1:- ~ .!! ::e w

                                                          "    0             QI ...

u I!?

                                      .r:.  :::> .a ::::

0:: 0

> m>

QI B t i 0 QI

                                        *-  z .!! 9       zoc            ~8~         i Kr-85  7.38E-06     5.60E+02      5.32E+05       5.31E+05       ,/

Kr-85m 1.55E-01 2.40E+04 2.28E+07 5.49E-16 Kr-87 5.45E-01 4.70E+04 4.47E+07 1.32E-72 Kr-88 2.44E-01 6.80E+04 6.46E+07 1.60E-28 Xe-131m 2.42E-03 1.00E+03 9.50E+05 4.21E+05 ,/ Xe-133 5.51E-03 1.70E+05 1.62E+08 2.54E+07 ,/ Xe*133m 1.32E-02 6.00E+03 5.70E+06 6.76E+04 ,/ Xe-135 7.61E-02 3.40E+04 3.23E+07 2.54E-04 Xe-138 2.94E+OO 1.70E+05 1.62E+08 O.OOE+OO 1-131 3.60E-03 8.50E+04 8.08E+07 2.41E+07 ./ 1-132 3.01E-01 1.20E+05 1.14E+08 1.36E-36 1-133 3.33E-02 1.70E+05 1.62E+08 2.23E+03 ./ 1-134 7.91E-01 1.90E+05 1.81E+08 6.78E-108 1-135 1.05E-01 1.50E+05 1.43E+08 6.79E-08 Cs-134 3.84E-05 7.50E+03 7.13E+06 7.03E+06 ,/ Cs-136 2.21E-03 3.00E+03 2.85E+06 1.36E+06 ,/ Cs-137 2.63E-06 4.70E+03 4.47E+06 4.46E+06 ,/ Te*129m 8.60E-04 5.30E+03 5.04E+06 3.77E+06 ,/ Te-131m 2.14E-02 1.30E+04 1.24E+07 9.34E+03 ,/ Te-132 8.86E-03 1.20E+05 1.14E+08 5.80E+06 ./ Sb-127 7.52E-03 6.10E+03 5.80E+06 4.64E+05 ,/ Sb-129 1.58E-01 3.30E+04 3.14E+07 3.26E-16 Sr-89 5.73E-04 9.40E+04 8.93E+07 7.37E+07 ,/ Sr-90 2.72E-06 3.70E+03 3.52E+06 3.51E+06 ,/ Sr-91 7.29E-02 1.10E+05 1.05E+08 2.37E-03 Ba-140 2.26E-03 1.60E+05 1.52E+08 7.10E+07 ,/ Ru-103 7.35E-04 1.10E+05 1.05E+08 8.16E+07 ,/ Ru-106 7.84E-05 2.50E+04 2.38E+07 2.31E+07 ,/ Mo-99 1.05E-02 1.60E+05 1.52E+08 4.44E+06 ,/ La-140 1.72E-02 1.60E+05 1.52E+08 4.70E+05 ,/ Y-91 4.95E-04 1.20E+05 1.14E+08 9.65E+07 ,/ Ce-144 1.02E-04 8.50E+04 8.08E+07 7.80E+07 ,/ Np-239 1.23E-02 1.64E+06 1.56E+09 2.53E+07 ./ DB Rated Power (MWe}=r~.

  • TAS (days}: X/;;;, :

EP-EALCALC-DB-0704 Page 8of12 Ravo

Attachmgnt2 MicroShietd@ SourceGgomelryand De**ity lnpu& Miq#$hieldSourceMaterialq Instructions Malerials moy be "mixed"/or a shield b),enteringportial densitiesof more than one malerial.I shield may be composedof built-in materialsand custommalerialswith eitherspecifiedby ita dersity.A densityof zerofor eny no,t-zeroshield is not allowed. Whenmore than one mslerial is specifiedfor a shield,the userhas ws ehoicesto decidethe approprfate dewity. One choice is to pre-colculate the volumefraetian or lh* efective dewity for each material in the region and usethat as an entry. As sn exampleof pre-calculated volame fractiow, a tor/rc {:orsisls of a cylindrical tank of water with cteel interncl;truclvres. The source region may be representedas a tank with a hoaogexeous,rrixtare of steel and water, The valameof the tank is 10,00{}llters and it contains8,00Akg af waler and 1560kg of iron. The material dewities la enlel are /hen: Water:

  • 0"8gmlce Iron:
  • CI.l56 grn/cc Another waylo estimqtedensiliesis to multiply each individusl vraterialvolumeJraslion&y;ls pure density.For example,d a volumecontains95% (by volume)wE/eral a deiesfryof L0 gttt/cc and IaA {by vol*me} steelot o densttyof 7.85gmhc, then the individual dersff entriesare; Water: 0.9Jx l.0gdec = 0.95gm/cc Iron: 0.05x 7.85gm/cc : 0.3925gmlcc SourceHeight(in)'l]l SourceRadius(in):l 901 sourceVotume (cmgi:l.....-ffi671
                                                          # FuelBundles:l-T Bundte  weight(gt)'fft-E*.s5l Uranium  Weight perbundle):[1!!$*0!l (gm Claddins Weisht(smparbundle):!!!S!!J o              d!

(rt E 5B E= s 5^ u Efi.E 3o o E E5 E15 g f ot o o o 6 e

                                                                =t!          EEH Uranium            18.75 4.61Er06       7.73Y,         1.45 Zirconlum             6.5 5.94E+06        9,96%          0.65 liYatet            1 4.918+07        32.32Yr        0.82 EP-EALCALC.DB-0704                          Page9 of 12                                       Rev0

Altachmcrt 3  !/licro$hial$ Raport File:CCI$EVe!.X$5 Date: Date By: fim:2:34:10 PM Cicked:

00:00:06 CaceTitle:DsvlresseCG7/C3?

CoroUncoveryCrlculalion!- 1{ Ilay Oecry Oeacription: eometry:8 - CylindorVolume- End Shleldr SourceOimorr*lona Helgnl 363,2?cm 'll f 11.0h Radius 228.9cm 7 i 6.0In Doeelsints x tz

                                                                              '1645.92 f 1       914.43m                      cm        0 cm 30n           54 ll 0.0ln       0.0In
                                                 *2       1 2 1 9 .c2m        2926.33cm           0 cm 40 n 0.0il                  96 n       0.0in
                                                                        $hlaldr ShieldNarng Dlrqarlsion Mslsral 0p$ltv Source          5.9$e+t7  cm' Mixed-> 2.92 Urenirm 't.{3 Wst6r 0,82 Xrconium0.05 Shleld1             3.556tm         lton 7.86 Air cap                              Air     0.3!'t?2 lmmerston                            Alr     0.00'i?2
                                          $ourceInput Grouplngllothcd : Strndard Indices Numbarol Groupt : t5 Lowrr EnergyCutoff : 0.!15 Photon!< 0.015: lxcludsd ry*qtide    gtrries      l*H;':ro*         uci/c*i             8q/cm1 3a-140    7.100!e+007 2,8?7h+018 1.1907er!!6               4.4!Sr6i01g Ce-'!{,4  7.S000e+007 2.8860e+018 1.3080010!6              d.8398e*01!

cs.134 7.030&1006 2.60'11e+017 1.'t789e+006 4.36?!6+009 Cs-136 1.3600er006 5.03206+016 2 2807e+00l 8.43860+008 Cc'137 4.4600e+006 1.6502e+017 7.4793e+004  ?.767j1s+009 1.131 2.4'lg0e+007 8.9170e+017 {.9{15s}!!5 1.4954e10r, 1.133 2.?30&'003 8.2510s+013 3.7397e+!01 1.38!7o+006 Kr-85 5.3100ai005 'l 9647*016 8.9048e+003 3.2948sr008 la-140 4.70$0er005 1,7390t+016 7.8818e+0r3 2.9163+008 i{o-99 4.{400er006 1.6428e+017 7,4{58e+004 2.7i4r?+009 Np139 2.$30&i007 9.3610e+017 4.242*+A05 1.969!er01! Ru-1!3 8.1S00e+007 3.0192e+018 1.368&+g0e t.063ret0l0 2.3r00e+007 8547wr017 3.8738e+006

                                                                           '!.{333o}rll0 Ru-106 Sb-'f?7   4.6t00e+005 '1,7158e+016 7.7812e+r03              ?,3790st08 EP-EALCALC-DB.O7O4                            Page10 of 1?

MicroShigld@ Raport F]le:CG$EVEN,MS5 Dste:October17,20A7 Time.2:3418PM

00:00:06 ruqclCe g#tieE becouerels LtCilcrr'" s&!!

Sr-89 7.3700e+0!7 2,7269e+01 8 1 23591006 4.5790ei010

               $r-90        3.5100e+006 ,.2987ar017 5 8862e+004              2.1779+009 1e-129n      3.7700e+006 1.3949e+0176.3222e+004               2.339bf!99 Te-131m     3.3400e1003 3,4558e+0lt 1 56631002               5.795&{96 Te-132       5.&01081006 2.1460e+0     17    9 7265er004      3.5988e+!09 Xe-131m     4.21r0er005 1 , 5 5 7 7 e + 0 1 67,0601e+003      2.6122e+083 Xe.l33      2.5400e1007 9.3980e+01      7 4 2595i006         J.676&+010 Xe-133m     6.7600e+004 2.5912et0t5 1 1336e+003               4.19{&1007 Y-91        9.6500e+007 3.5703er018 1 6183e*006               5.98?7e.010 Buildup Tho mrterialrofprencoir : Sourco Thiebuildupr3t rrnca mrteriallr r mlxedmaierlalwlrl r hlgh ,lomic numberolem3nl{t?}. Bulldup Ftctore leeslhan and egr:teu,halgrgatol than '110keV rnaybe incorrrct. Pleareundsrstandyow read$.

IntogratlonParametera REdial 20 Circurterenllal 10 Y Dlretion(axiel) 1a Serults.DorePoint#'l. {9'lf.{,164t.tX,0} em glsfet Atl,rity Fluence Rate Fluence RFte Eposure.Fale *pgsu Rs:3 L{eV ohllgn*tec $pVlcm?sec M6vlcm'/sec mFylJ nF{t?lt NoBuilduo WiihSuildu* N?Bulldug WlttrBuiHus 3.C? 3.166e+16 0.000e+00 3.611e-1! 0.!00si00 1201r-20 0.03 1,106e+19 9.873-159 7.985-17 9.7t4e-1S1  ?.913s-19 0.04 2.712e+'17 3.580-69 1.727e-16 1.383e'71 7.039s-lg 0.05 4.03$o*16 4.314e-36 1.698e-16 1.143r-38 4.52es-19 0,!6 2.073e{16 8.207e-21 {.528e-16 1.630e-23 8.cgi!e-19 0.08 4.176e+17 1.641{6 1.504e{3 2.597e49 2.38$r-tl6 0.1 6.863?117 2.3276-01 1.0406+02 3.5319"CI4 ,.S00o.r1 0.1t 5.109e+'!? 9.749e+00 2.880e+03 1.60tr-02 :l.7t2E+0! 4.2 3.41$9*17 1.483e+03 1.324e+05 2.617e*00 2.33-7a+0! t.3 3.950e+17 3.939e+04 3.128e+06 '1.696132 5.93&+03 0.4 8.734e*17 1.322e+06  ?.839e+07  ?.t75el03 9.532e*M 0.6 3.3626118 1.S06e+07 2,3548+08 3.'!53s+04 {.420s}05 0"6 3.895a+17 S.080e{6 6.693e+07 1.1t?etrif '1.306s'05 0.8 3,50$e*17 1.011e+07 7.564e+07 1.9t3e${ "1.4333105 1.0 7.033e*16 4.07te+06 2.3ffi107 7.509{3 rl.357e$!4 1.5 2.453s*16 4.237e+06 1.699e+07 7.'129s+03 2.859e+04 2.0 1.62't3+1{ 5.323e+04 1.757e+05 8.231e+0'l Ll17*02 3.0 6,192e+14 4.378e+05 1.'161e+06 5.940e10? 1.$?5e*03 EP-EALCALC-DB-0704 Page11 of 12 Micro$hisld@ Repori File : CGSEVEN.MSS Oale:October17.2007 Time:2.34:10 PM tion :00:00:06 Enerov Activilv lll,pfce Rite Fluence Rate Exposure Rate xposure8$le MeV photgns/sec MeVlcm'/sec MeV/cm'/Sec rnRlhr mRlhr NoBuildup WilhBuil{ttp Na Rgilduo WithBuilduo 101A19: 9.11?e+18 4.247e+07 4 516e+08 8.069e+0{ 3.7:tet05 iesllts. DosgPoial*2.(1215.2,29!3"08,0) cm F?ergj Aclivitv flw.[ce Rate lluence Rale posurF Balg SxpospreR?te MeV pholons/sec MaV/cm'/seq MeV/cnt'isec mRlhr tnRlhr No Builduo lMth Buildup NoFuildqp WtthBuildup 0.02 3.166e+'16 0.000e+00 . l . 1 9 1 e - 1 9 0.tit?e+o0 {.125e-?'l 0.03 1.1966;18 A782e-170 2.633-17 4.74&-172 2.613$."19 0.04 2.712e+17 4,973e-75 5,695e-17 2.19s3-77 2.5193-19 0.CI5 4 035e+16 1 110e-39 5.599e.17 t.956e-4: 1.491s-19 0.06 2.073e+'16 2.759e-23 1.461e-J6 5.480e-2S 2.901F19 0.08 4.176er17 5.258e-08 3.819-05 3.3?0e'11 9.209e-08 0.1 9.363Ei17 1.846e-02 9.984e+!0 2.824e-03 1.r?7e-02 0.'15 t,109e117 4.476e-01 1.834+0? 7.3?0s-0t 3.!20e'01 4.2 3.44ter1? '1.713er02 2.043e+04 3.0?3e-0't 3.606e+0'! 3.3 3.950e117 3.382e+04 1.026e+06 4.319e+01 1.946o+03 8.0{7s+02 'l.9,{4e+04

     !.4         8.754e+17       ,.438e+05      9.976e+06 3.5         3.3B2ef 18      i.593e+06      8.'122er07           1"09&+!4       '1.59{e*05 0.6         5.895c*17       2-1J7e+06      2.27Ae+97            !.131e+r3     {.r31e}04 0.8         3.Sl5ca17       3.47'le+06     2.518e+07            6.60?e*03     1.799e*34
      '1.0       7.Ci3e*16        1.382er06     7.799e+06            1"$tie*!3      1.438e+0if 1.t        2.4S8e119        1.4'l4et06    5,561e+06            1.379er03      9.353er03 Z.g         1.62.1s+.t4 1.765e+04          5.737e+04            2.730o+01      8.872e+01 3.0         6.192e+'14 1.446e+05           3.788e+05             1.96?e+0?     5.139a+02 T0TALS:       9.117er13        1.461e,07     1.539e+08             2,?:73+04     ?s:rle+05 EP.EALCALC.DB.OTO4                            Page17 ot 12                                         Rev0

5501 North State Route 2 Oak Harbor, Ohio 43449 Brian D. Boles 419-321-7676 Vice President - Nuclear Fax: 419-321-7582 February 17, 2016 L-16-020 10 CFR 50, Appendix E ATTN: Document Control Desk U.S. Nuclear Regulatory Commission Washington, DC 20555-0001

SUBJECT:

Davis-Besse Nuclear Power Station, Unit No. 1 Docket No. 50-346, License No. NPF-3 Request for Licensing Action to Revise the Emergency Plan In accordance with the provisions of 10 CFR 50, Appendix E, "Emergency Planning and 1 Preparedness for Production and Utilization Facilities,' Section IV.B.2, FirstEnergy Nuclear Operating Company (FENOC) is requesting an amendment to revise the current Davis-Besse Nuclear Power Station, Unit No. 1 Emergency Plan emergency action level scheme to one based on Nuclear Energy Institute (NEI) 99-01, "Development of Emergency Action Level for Non-Passive Reactors," Revision 6. An evaluation of the proposed amendment is provided as Enclosure A. Calculations referenced in the proposed amendment are provided as Enclosure B. FENOC is requesting the Nuclear Regulatory Commission (NRC) staff approval by March 1, 2017, with an implementation period of 120 days following issuance of the amendment. There are no regulatory commitments contained in this submittal. If there are any questions or if additional information is required, please contact Mr. Thomas A. Lentz, Manager - Fleet Licensing, at (330) 315-6810. I declare under penalty of perjury that the foregoing is true and correct. Executed on February JI , 2016. Sincerely,

         ~~~

Brian D. Boles

Davis-Besse Nuclear Power Station, Unit No. 1 L-16-020 Page 2

Enclosures:

A. Evaluation of Proposed License Amendment B. EAL Calculations cc: NRC Region Ill Administrator NRC Project Manager NRC Resident Inspector Executive Director, Ohio Emergency Management Agency State of Ohio (NRC Liaison) Utility Radiological Safety Board

Enclosure A L-16-020 Evaluation of Proposed License Amendment (697 Pages Follow)

EVALUATION OF PROPOSED LICENSE AMENDMENT Page 1 of 8

Subject:

Request to Adopt Emergency Action Level Scheme Pursuant to 99-01, Revision 6, Development of Emergency Action Levels for Non-Passive Reactors 1.0

SUMMARY

DESCRIPTION 2.0 DETAILED DESCRIPTION 2.1 Background of NEI 99-01, Revision 6 2.2 Proposed Change to Current EAL Scheme

3.0 TECHNICAL EVALUATION

3.1 NEI 99-01, Revision 6 Evaluation 3.2 Instrumentation Validation 3.3 EAL Scheme Change Evaluation

4.0 REGULATORY EVALUATION

4.1 Significant Hazards Consideration 4.2 Applicable Regulatory Requirements/Criteria 4.3 Conclusions

5.0 ENVIRONMENTAL CONSIDERATION

6.0 REFERENCES

7.0 ATTACHMENTS

Evaluation of Proposed License Amendment Page 2 of 8 1.0

SUMMARY

DESCRIPTION In accordance with the provisions of 10 CFR 50.90 and 10 CFR 50, Appendix E, Emergency Planning and Preparedness for Production and Utilization Facilities, Section IV.B, FirstEnergy Nuclear Operating Company (FENOC), is proposing a change to the Davis-Besse Nuclear Power Station (DBNPS) Emergency Plan by revising the emergency action level (EAL) scheme. FENOC proposes to change the EALs from a scheme based on Revision 5 of Nuclear Energy Institute (NEI) 99-01, Methodology for Development of Emergency Action Levels, to a scheme based on Revision 6 of NEI 99-01, Development of Emergency Action Levels for Non-Passive Reactors. Such a change in scheme requires NRC approval prior to implementation. The proposed change would continue to meet the standards in 10 CFR 50.47(b)(4) and the requirements in Appendix E to 10 CFR 50. 2.0 DETAILED DESCRIPTION 2.1 Background of NEI 99-01, Revision 6 In November 2012, NEI published NEI 99-01, Revision 6. The NRC formally endorsed NEI 99-01, Revision 6 as documented in a letter to NEI dated March 28, 2013 (ADAMS Accession Number ML12346A463). NEI 99-01, Revision 6 addresses changes recommended by the NRC, along with enhancements identified by the industry. NEI 99-01, Revision 6, represents the most recently accepted EAL methodology endorsed by the NRC. 2.2 Proposed Change to Current EAL Scheme DBNPS currently uses an emergency classification scheme based on NEI 99-01, Revision 5, as approved by the NRC in a letter dated December 19, 2008 (ADAMS Accession Number ML083450120). FENOC requests approval to change the DBNPS EAL scheme basis to that described in NEI 99-01, Revision 6. Detailed descriptions of the proposed changes and supporting information are attached: x Attachment 1 - Emergency Action Level (EAL) Bases Document provides the proposed DBNPS EALs and EAL technical bases. x Attachment 2 - Emergency Action Level (EAL) Bases Document (Redline Version) provides a marked up version of the proposed DBNPS EALs and EAL technical bases. It identifies the marked-up changes to NEI 99-01, Revision 6, EAL Basis as incorporated into Attachment 1; it is provided for information purposes only. Changes to the NEI 99-01, Revision 6, IC and EAL language are captured in the EAL comparison matrix. x Attachment 3 - Davis-Besse Nuclear Power Station NEI 99-01, Revision 6, EAL Comparison Matrix compares the proposed DBNPS EALs to the NEI 99-01, Revision 6, EALs and provides the differences.

Evaluation of Proposed License Amendment Page 3 of 8 x Attachment 4 - Emergency Action Level (EAL) Wallcharts provides the proposed wallcharts that incorporate the requested changes for ease of use of the proposed DBNPS EALs.

3.0 TECHNICAL EVALUATION

3.1 NEI 99-01, Revision 6 Evaluation NEI 99-01, Revision 6, provides guidance to nuclear power plant operators for the development of a site-specific emergency classification scheme. 10 CFR 50.47(b)(4) stipulates that emergency plans include a standard emergency classification and action level scheme. This scheme is a fundamental component of an emergency plan, in that it provides the defined thresholds that will allow site personnel to rapidly implement a range of pre-planned emergency response measures. An emergency classification scheme also facilitates timely decision-making by an emergency response organization (ERO) concerning the implementation of precautionary or protective actions for the public. The initiating conditions (ICs), EALs, and basis that comprise the proposed emergency classification scheme are described in DBNPS EAL technical bases document (Attachment 1). A comparison matrix (Attachment 3) was developed to compare the DBNPS EALs to the NEI 99-01, Revision 6 EALs. This matrix provides a tabular format of the ICs, mode applicability, and EAL threshold values in NEI 99-01, Revision 6, along with the proposed EALs. The comparison matrix also compares the proposed EALs in terms of differences and deviations from the NRC-endorsed guidance provided in NEI 99-01, Revision 6. The comparison matrix summarizes an evaluation that determined if the proposed IC and EAL wording represents no change from the guidance, a difference from the guidance, or a deviation from the guidance contained in NEI 99-01, Revision 6. Items were determined to be differences or deviations based on the definitions provided in Regulatory Issue Summary (RIS) 2003-18, Supplement 2. The RIS defines an EAL difference and deviation as follows: x A difference is an EAL change where the basis scheme guidance differs in wording but agrees in meaning and intent, such that a classification of an event would be the same, whether using the basis scheme guidance or the site-specific proposed EAL. Examples of differences include the use of site-specific terminology or administrative re-formatting of site-specific EALs. x A deviation is an EAL change where the basis scheme guidance differs in wording and is altered in meaning or intent, such that a classification of the event could be different between the basis scheme guidance and the site-specific proposed EAL. Examples of deviations include the use of altered mode applicability, altering key words or time limits, or changing words of physical reference (protected area, safety-related equipment, etc.). The evaluation determined that the proposed DBNPS specific ICs and EALs contain differences from the NEI 99-01, Revision 6, guidance, but do not contain deviations. The basis for each difference is included in Attachment 3.

Evaluation of Proposed License Amendment Page 4 of 8 3.2 Instrumentation Validation NRC Information Notice (IN) 2013-01, Emergency Action Level Thresholds Outside the Range of Radiation Monitors, is intended to inform licensees of the importance of having adequate procedures to properly evaluate changes to site procedures, equipment, and facilities for potential impact on the licensees ability to maintain an effective emergency plan. Specifically, the IN informs licensees of issues that arose when radiation monitors were not properly evaluated in conjunction with changes made to EAL thresholds for emergency classifications. The NRC also alerted licensees to similar issues in IN 2005-19, Effect of Plant Configuration Changes on the Emergency Plan. Using the guidance from IN 2013-01, IN 2005-19, and NEI 99-01, Revision 6, Section 4.3 Instrumentation Used for EALs, FENOC conducted reviews to verify the threshold values in the proposed EAL scheme could be accurately read on the instrumentation referenced in the EALs. The reviews concluded that the proposed EAL threshold values are within the requisite calibrated ranges of the instrumentation referenced in the EALs and they can be accurately read. 3.3 EAL Scheme Change Evaluation 10 CFR 50, Appendix E, Section IV.B.2 stipulates that a licensee desiring to change its entire EAL scheme shall submit an application for an amendment to its license and receive NRC approval before implementing the change. The proposed changes to the EAL scheme to adopt the NEI 99-01, Revision 6, guidance, do not reduce the capability to meet the applicable emergency planning requirements established in 10 CFR 50.47 and 10 CFR 50, Appendix E. The proposed changes to adopt the NEI 99-01, Revision 6, EAL scheme will continue to provide consistent emergency classifications. Changes to DBNPSs emergency plan and procedures resulting from implementation of the revised EALs will be evaluated in accordance with the requirements of 10 CFR 50.54(q), subsequent to NRC approval. Accordingly, pursuant to the requirements of 10 CFR 50, Appendix E, Section IV.B.2, FENOC requests NRC review and approval of the proposed changes to the DBNPS EAL scheme in accordance with 10 CFR 50.90.

Evaluation of Proposed License Amendment Page 5 of 8

4.0 REGULATORY EVALUATION

4.1 Significant Hazards Consideration FirstEnergy Nuclear Operating Company (FENOC), requests an amendment to the Facility Operating License for Davis-Besse Nuclear Power Station (DBNPS) to support the adoption of an emergency action level (EAL) scheme based on Nuclear Energy Institute (NEI) 99-01, Revision 6. The proposed changes to DBNPSs EAL scheme does not reduce the capability to meet the emergency planning requirements established in 10 CFR 50.47 and 10 CFR 50, Appendix E. The proposed changes do not reduce the functionality, performance, or capability of DBNPSs Emergency Response Organization (ERO) to respond in mitigating the consequences of accidents. All DBNPS ERO functions will continue to be performed as required. FENOC has evaluated whether or not a significant hazards consideration is involved with the proposed amendment(s) by focusing on the three standards set forth in 10 CFR 50.92, Issuance of amendment, as discussed below:

1. Does the proposed amendment involve a significant increase in the probability or consequences of an accident previously evaluated?

Response: No. The proposed changes to DBNPSs EAL scheme to adopt the NRC-endorsed guidance in NEI 99-01, Revision 6, do not involve any physical changes to plant systems or equipment. The proposed changes do not alter any of the requirements of the technical specifications. The proposed changes do not modify any plant equipment and do not impact any failure modes that could lead to an accident. Additionally, the proposed changes do not impact the ability of structures, systems, or components (SSCs) to perform their intended safety functions in mitigating the consequences of an initiating event within the assumed acceptance limits. Therefore, the proposed change does not involve a significant increase in the probability or consequences of an accident previously evaluated.

2. Does the proposed amendment create the possibility of a new or different kind of accident from any accident previously evaluated?

Response: No. The proposed changes to DBNPSs EAL scheme to adopt the NRC-endorsed guidance in NEI 99-01, Revision 6, do not involve any physical changes to plant systems or equipment. The proposed changes do not involve the addition of any new plant equipment. The proposed changes will not alter the design configuration, or method of operation of plant equipment beyond its normal functional capabilities. DBNPS functions will continue to be performed as required. The proposed changes do not create any new credible failure mechanisms, malfunctions, or accident initiators.

Evaluation of Proposed License Amendment Page 6 of 8 Therefore, the proposed change does not create the possibility of a new or different kind of accident from any previously evaluated.

3. Does the proposed amendment involve a significant reduction in a margin of safety?

Response: No. The proposed changes to DBNPSs EAL scheme to adopt the NRC-endorsed guidance in NEI 99-01, Revision 6, do not involve any physical changes to plant systems or equipment. Margins of safety are unaffected by the proposed changes. There are no changes being made to safety analysis assumptions, safety limits, or limiting safety system settings that would adversely affect plant safety as a result of the proposed EAL scheme change. The proposed change does not affect the technical specifications. There are no changes to environmental conditions of any of the SSC or the manner in which any SSC is operated. The applicable requirements of 10 CFR 50.47 and 10 CFR 50, Appendix E will continue to be met. Therefore, the proposed change does not involve a significant reduction in a margin of safety. Based on the above, FENOC concludes that the proposed amendment does not involve a significant hazards consideration under the standards set forth in 10 CFR 50.92(c), and, accordingly, a finding of no significant hazards consideration is justified. 4.2 Applicable Regulatory Requirements/Criteria 10 CFR 50.47(b)(4) requires the emergency response plan to meet the following standard: A standard emergency classification and action level scheme, the bases of which include facility system and effluent parameters, is in use by the nuclear facility licensee, and State and local response plans call for reliance on information provided by facility licensees for determinations of minimum initial offsite response measures. 10 CFR 50 Appendix E, section IV, Content of Emergency Plan, item B, Assessment Actions, states:

1. The means to be used for determining the magnitude of, and for continually assessing the impact of, the release of radioactive materials shall be described, including emergency action levels that are to be used as criteria for determining the need for notification and participation of local and State agencies, the Commission, and other Federal agencies, and the emergency action levels that are to be used for determining when and what type of protective measures should be considered within and outside the site boundary to protect health and safety. The emergency action levels shall be based on in-plant conditions and instrumentation in addition to onsite and offsite monitoring. By June 20, 2012, for nuclear power reactor licensees, these action levels must include hostile action that may adversely affect the nuclear power plant. The initial emergency action levels shall be discussed and agreed on by the applicant or licensee and state and local governmental authorities, and approved by the

Evaluation of Proposed License Amendment Page 7 of 8 NRC. Thereafter, emergency action levels shall be reviewed with the State and local governmental authorities on an annual basis.

2. A licensee desiring to change its entire emergency action level scheme shall submit an application for an amendment to its license and receive NRC approval before implementing the change. Licensees shall follow the change process in § 50.54(q) for all other emergency action level changes.

FENOC has determined that the proposed amendment maintains conformance with the regulatory requirements described above. 4.3 Conclusions In conclusion, based on the considerations discussed above, (1) there is reasonable assurance that the health and safety of the public will not be endangered by operation in the proposed manner, (2) such activities will be conducted in compliance with the Commissions regulations, and (3) the issuance of the amendment will not be inimical to the common defense and security or to the health and safety of the public.

5.0 ENVIRONMENTAL CONSIDERATION

The proposed changes to the emergency action levels maintain the environmental bounds of the current environmental assessment associated with the DBNPS. The proposed changes will not affect plant safety and will not have an adverse effect on the probability of an accident occurring. The proposed amendment does not involve (i) a significant hazards consideration, (ii) a significant change in the types or significant increase in the amounts of any effluents that may be released offsite, or (iii) a significant increase in individual or cumulative occupational radiation exposure. Therefore, no environmental impact statement of environmental assessment need be prepared in connection with the proposed amendment.

Evaluation of Proposed License Amendment Page 8 of 8

6.0 REFERENCES

1. Letter from Mark Thaggard (U.S. Nuclear Regulatory Commission) to Susan Perkins-Grew (Nuclear Energy Institute), U.S. Nuclear Regulatory Commission Review and Endorsement of NEI 99-01, Revision 6, November 2012, dated March 28, 2013 (ADAMS Accession Number ML12346A463).
2. NEI 99-01, Revision 6, Development of Emergency Action Levels for Non-Passive Reactors, dated November 2012 (ADAMS Accession Number ML13091A209).
3. Regulatory Issue Summary 2005-02, Revision 1, Clarifying the Process for Making Emergency Plan Changes, dated August 19, 2011 (ADAMS Accession Number ML100340545).
4. Regulatory Issue Summary 2003-18, Supplement 2, Use of NEI 99-01, Methodology for Development of Emergency Action Levels, dated December 12, 2005 (ADAMS Accession Number ML051450482).
5. Letter from Eric J. Leeds (NRC) to Barry S. Allen (FENOC), Davis-Besse Nuclear Power Station, Unit No. 1, Safety Evaluation for Emergency Action Levels (TAC No.

MD7313), dated December 19, 2008 (ADAMS Accession Number ML083450120).

6. Information Notice 2013-01, Emergency Action Level Thresholds Outside the Range of Radiation Monitors, dated February 13, 2013 (ADAMS Accession Number ML12325A326).
7. Information Notice 2005-19, Effect of Plant Configuration Changes on the Emergency Plan, dated July 18, 2005 (ADAMS Accession Number ML051530520).

7.0 ATTACHMENTS

1. Emergency Action Level (EAL) Bases Document
2. Emergency Action Level (EAL) Bases Document (Redline Version)
3. Davis-Besse Nuclear Power Station NEI 99-01, Revision 6, EAL Comparison Matrix
4. Emergency Action Level (EAL) Wallcharts

Evaluation of Proposed License Amendment Attachment 1 Emergency Action Level (EAL) Bases Document (272 Pages Follow)

DAVIS-BESSE REFERENCE MATERIAL EMERGENCY ACTION LEVEL TECHNICAL BASES DOCUMENT EAL BASES DOCUMENT Rev. 0 Page 1 of 272

TABLE OF CONTENTS SECTION PAGE 1.0 PURPOSE ................................................................................................................................... 6 2.0 DISCUSSION ............................................................................................................................... 6 2.1 Background ............................................................................................................................... 6 2.2 Fission Product Barriers ............................................................................................................ 7 2.3 Fission Product Barrier Classification Criteria ........................................................................... 7 2.4 EAL Organization ...................................................................................................................... 8 2.5 Technical Bases Information................................................................................................... 10 2.6 Operating Mode Applicability .................................................................................................. 11 3.0 GUIDANCE ON MAKING EMERGENCY CLASSIFICATIONS .................................................. 12 3.1 General Considerations .......................................................................................................... 12 3.2 Classification Methodology ..................................................................................................... 13 4.0 REFERENCES .......................................................................................................................... 17 4.1 Developmental ........................................................................................................................ 17 4.2 Implementing .......................................................................................................................... 17 5.0 DEINITIONS, ACRONYMS & ABBREVIATIONS ...................................................................... 18 5.1 Definitions ..18 5.2 Abbreviations/Acronyms . 23 6.0 DBNPS TO NEI 99-01 Rev. 6 EAL CROSS-REFERENCE ....................................................... 26 7.0 ATTACHMENTS ........................................................................................................................ 30 1 Emergency Action Level Technical Bases .................................................................... 30 Category H Hazards ............................................................................................. 31 HG1.1 ................................................................................................ 33 HS1.1 ................................................................................................ 35 HA1.1 ................................................................................................ 37 HA1.2 ................................................................................................ 39 HU1.1 ................................................................................................ 41 HU1.2 ................................................................................................ 43 HU1.3 ................................................................................................ 45 HU2.1 ................................................................................................ 47 HU3.1 ................................................................................................ 49 HU3.2 ................................................................................................ 50 HU3.3 ................................................................................................ 51 HU3.4 ................................................................................................ 52 EAL BASES DOCUMENT Rev. 0 Page 2 of 272

HU4.1 ................................................................................................ 53 HU4.2 ................................................................................................ 56 HU4.3 ................................................................................................ 59 HU4.4 ................................................................................................ 60 HA5.1 ................................................................................................ 61 HS6.1 ................................................................................................ 64 HA6.1 ................................................................................................ 66 HG7.1 ................................................................................................ 68 HS7.1 ................................................................................................ 70 HA7.1 ................................................................................................ 71 HU7.1 ................................................................................................ 72 Category R Abnormal Rad Release / Rad Effluent .............................................. 73 RG1.1 ................................................................................................ 74 RG1.2 ................................................................................................ 76 RG1.3 ................................................................................................ 78 RS1.1 ................................................................................................ 80 RS1.2 ................................................................................................ 82 RS1.3 ................................................................................................ 84 RA1.1 ................................................................................................ 86 RA1.2 ................................................................................................ 88 RA1.3 ................................................................................................ 90 RA1.4 ................................................................................................ 92 RU1.1 ................................................................................................ 94 RU1.2 ................................................................................................ 97 RG2.1 ................................................................................................ 99 RS2.1 .............................................................................................. 100 RA2.1 .............................................................................................. 101 RA2.2 .............................................................................................. 103 RA2.3 .............................................................................................. 105 RU2.1 .............................................................................................. 106 RA3.1 .............................................................................................. 108 RA3.2 .............................................................................................. 109 Category E DFSF ............................................................................................... 111 EU1.1 .............................................................................................. 112 Category C Cold Shutdown / Refueling System Malfunction.............................. 114 EAL BASES DOCUMENT Rev. 0 Page 3 of 272

CG1.1 .............................................................................................. 116 CS1.1 .............................................................................................. 120 CA1.1 .............................................................................................. 122 CA1.2 .............................................................................................. 123 CU1.1 .............................................................................................. 125 CU1.2 .............................................................................................. 127 CA2.1 .............................................................................................. 129 CU2.1 .............................................................................................. 131 CA3.1 .............................................................................................. 134 CU3.1 .............................................................................................. 137 CU3.2 .............................................................................................. 139 CU4.1 .............................................................................................. 141 CU5.1 .............................................................................................. 143 CU5.2 .............................................................................................. 146 CU5.3 .............................................................................................. 149 CA6.1 .............................................................................................. 152 Category S System Malfunction ......................................................................... 155 SG1.1 .............................................................................................. 157 SG1.2 .............................................................................................. 160 SS1.1 .............................................................................................. 163 SA1.1 .............................................................................................. 165 SU1.1 .............................................................................................. 168 SS2.1 .............................................................................................. 170 SA3.1 .............................................................................................. 172 SU3.1 .............................................................................................. 175 SU4.1 .............................................................................................. 177 SU4.2 .............................................................................................. 178 SU5.1 .............................................................................................. 179 SS6.1 .............................................................................................. 181 SA6.1 .............................................................................................. 184 SU6.1 .............................................................................................. 186 SU6.2 .............................................................................................. 189 SU7.1 .............................................................................................. 192 SU7.2 .............................................................................................. 195 SU7.3 .............................................................................................. 198 EAL BASES DOCUMENT Rev. 0 Page 4 of 272

SU8.1 .............................................................................................. 201 SU8.2 .............................................................................................. 202 SA9.1 .............................................................................................. 204 Category F Fission Product Barrier Degradation ............................................... 206 FG1.1 .............................................................................................. 208 FS1.1 ............................................................................................... 209 FA1.1 ............................................................................................... 210 2 Fission Product Barrier Loss / Potential Loss Matrix and Bases ......................................................................................................... 211 3 Safe Shutdown Rooms/Areas Tables R-2 & H-2 Bases .............................................. 262 EAL BASES DOCUMENT Rev. 0 Page 5 of 272

1.0 PURPOSE This document provides an explanation and rationale for each Emergency Action Level (EAL) included in the EAL Upgrade Project for Davis-Besse Nuclear Power Station (DBNPS). It should be used to facilitate review of the DBNPS EALs and provide historical documentation for future reference. Decision-makers responsible for implementation of RA-EP-01500 Emergency Classification, may use this document as a technical reference in support of EAL interpretation. This information may assist the Emergency Director in making classifications, particularly those involving judgment or multiple events. The basis information may also be useful in training and for explaining event classifications to off-site officials. The expectation is that emergency classifications are made as soon as conditions are present and recognizable for the classification, but within 15 minutes or less in ALL cases of conditions present. Use of this document for assistance is not intended to delay the emergency classification. Because the information in a basis document can affect emergency classification decision-making (e.g., the Emergency Coordinator refers to it during an event), the NRC staff expects that changes to the basis document will be evaluated in accordance with the provisions of 10 CFR 50.54(q). 2.0 DISCUSSION 2.1 Background EALs are the plant-specific indications, conditions or instrument readings that are utilized to classify emergency conditions defined in the DBNPS Emergency Plan (ref. 4.1.13). In 1992, the NRC endorsed NUMARC/NESP-007 Methodology for Development of Emergency Action Levels as an alternative to NUREG-0654 EAL guidance. NEI 99-01 (NUMARC/NESP-007) Revisions 4 and 5 were subsequently issued for industry implementation. Enhancements over earlier revisions included:

  • Consolidating the system malfunction initiating conditions and example emergency action levels, which address conditions that may occur during plant shutdown conditions.
  • Initiating conditions and example emergency action levels that fully address conditions that may be postulated to occur at permanently Defueled Stations and Independent Spent Fuel Storage Installations (ISFSIs).
  • Simplifying the fission product barrier EAL threshold for a Site Area Emergency.

Subsequently, Revision 6 of NEI 99-01 has been issued which incorporates resolutions to numerous implementation issues including the NRC EAL Frequently Asked Questions (FAQs). Using NEI 99-01 Revision 6, "Methodology for the Development of Emergency Action Levels EAL BASES DOCUMENT Rev. 0 Page 6 of 272

for Non-Passive Reactors, (ref. 4.1.1), DBNPS conducted an EAL implementation upgrade project that produced the EALs discussed herein. 2.2 Fission Product Barriers FISSION PRODUCT BARRIER THRESHOLDS represent threats to the defense in depth design concept that precludes the release of radioactive fission products to the environment. This concept relies on multiple physical barriers, any one of which, if maintained intact, precludes the release of significant amounts of radioactive fission products to the environment. Many of the EALs derived from the NEI methodology are FISSION PRODUCT BARRIER THRESHOLD based. That is, the conditions that define the EALs are based upon thresholds that represent the loss or potential loss of one or more of the three fission product barriers. Loss and Potential Loss signify the relative damage and threat of damage to the barrier. A Loss threshold means the barrier no longer assures containment of radioactive materials. A Potential Loss threshold implies an increased probability of barrier loss and decreased certainty of maintaining the barrier. The primary fission product barriers are: A. Fuel Clad (FC): The Fuel Clad Barrier consists of the cladding material that contains the fuel pellets. B. Reactor Coolant System (RC): The RC Barrier includes the RCS primary side and its connections up to and including the pressurizer safety and relief valves, and other connections up to and including the primary isolation valves. C. Containment (CT): The Containment Barrier includes the containment building, and connections up to and including the outermost containment isolation valves. This barrier also includes the main steam, feedwater, and blowdown line extensions outside the containment building up to and including the outermost secondary side isolation valve. Containment Barrier thresholds are used as criteria for escalation of the ECL from Alert to a Site Area Emergency or a General Emergency 2.3 Fission Product Barrier Classification Criteria The following criteria are the bases for event classification related to fission product barrier loss or potential loss: Alert: ANY loss or ANY potential loss of EITHER Fuel Clad or RC Barrier Site Area Emergency: Loss or potential loss of ANY two barriers General Emergency: Loss of ANY two barriers AND loss or potential loss of the third barrier EAL BASES DOCUMENT Rev. 0 Page 7 of 272

2.4 EAL Organization The DBNPS EAL scheme includes the following features:

  • Division of the EAL set into three broad groups:

o EALs applicable under ANY plant operating modes - This group would be reviewed by the EAL-user any time emergency classification is considered. o EALs applicable only under hot operating modes - This group would only be reviewed by the EAL-user when the plant is in Hot Shutdown, Hot Standby, Startup, or Power Operation mode. o EALs applicable only under cold operating modes - This group would only be reviewed by the EAL-user when the plant is in Cold Shutdown, Refueling or Defueled mode. The purpose of the groups is to avoid review of hot condition EALs when the plant is in a cold condition and avoid review of cold condition EALs when the plant is in a hot condition. This approach significantly minimizes the total number of EALs that must be reviewed by the EAL-user for a given plant condition, reduces EAL-user reading burden and, thereby, speeds identification of the EAL that applies to the emergency.

  • Within each group, assignment of EALs to recognition categories and subcategories:

Recognition category and subcategory titles were selected to represent conditions that are operationally significant to the EAL-user. The DBNPS EAL recognition categories align to and represent the NEI 99-01 Revision 6 Recognition Categories. Subcategories are used in the DBNPS scheme to further divide the EALs of a category into logical sets of possible emergency classification thresholds. The DBNPS EAL categories and subcategories are listed below. EAL BASES DOCUMENT Rev. 0 Page 8 of 272

EAL Groups, Recognition Categories and Subcategories EAL Group/Category EAL Subcategory ANY Operating Mode: H - Hazards and Other Conditions 1 - Security Affecting Plant Safety 2 - Seismic Event 3 - Natural or Technological Hazard 4 - Fire 5 - Hazardous Gas 6 - Control Room Evacuation 7 - Emergency Director Judgment R - Abnormal Rad Levels / Rad Effluent 1 - Radiological Effluent 2 - Irradiated Fuel Event 3 - Area Radiation Levels E - Dry Fuel Storage Facility (DFSF) 1 - Confinement Boundary Hot Conditions: S - System Malfunction 1 - Loss of Essential AC Power 2 - Loss of Essential DC Power 3 - Loss of Control Room Indications 4 - RCS Activity 5 - RCS Leakage 6 - RPS Failure 7 - Loss of Communications 8 - Containment Failure 9 - Hazardous Event Affecting Safety Systems F - Fission Product Barrier Degradation None Cold Conditions: C - Cold Shutdown / Refueling System 1 - RCS Level Malfunction 2 - Loss of Essential AC Power 3 - RCS Temperature 4 - Loss of Essential DC Power 5 - Loss of Communications 6 - Hazardous Event Affecting Safety Systems The primary tool for determining the emergency classification level is the EAL Classification Matrix. The user of the EAL Classification Matrix may (but is not required to) consult the EAL Technical Bases Document in order to obtain additional information concerning the EALs under classification consideration. The user should consult Section 3.0 and Attachments 1 & 2 of this document for such information. EAL BASES DOCUMENT Rev. 0 Page 9 of 272

2.5 Technical Bases Information EAL technical bases are provided in Attachment 1 for each EAL according to EAL group (ANY, Hot, Cold), EAL category (R, C, H, S, F and E) and EAL subcategory. A summary explanation of each category and subcategory is given at the beginning of the technical bases discussions of the EALs included in the category. For each EAL, the following information is provided: Category Letter & Title Subcategory Number & Title Initiating Condition (IC) Site-specific description of the generic IC given in NEI 99-01 Rev. 6 EAL Identifier (enclosed in rectangle) Each EAL is assigned a unique identifier to support accurate communication of the emergency classification to onsite and offsite personnel. Four characters define each EAL identifier:

1. First character (letter): Corresponds to the EAL recognition category as described in Section 2.4 (H, R, E, C, S or F)
2. Second character (letter): The emergency classification (G, S, A or U)

G = General Emergency S = Site Area Emergency A = Alert U = Unusual Event

3. Third character (number): Subcategory number within the given category.

Subcategories are sequentially numbered beginning with the number one (1). If a category does not have a subcategory, this character is assigned the number one (1).

4. Fourth character (number): The numerical sequence of the EAL within the EAL subcategory. If the subcategory has only one EAL, it is given the number one (1).

Classification (enclosed in rectangle): Unusual Event (U), Alert (A), Site Area Emergency (S) or General Emergency (G) EAL (enclosed in rectangle) Exact wording of the EAL as it appears in the EAL Classification Matrix EAL BASES DOCUMENT Rev. 0 Page 10 of 272

Mode Applicability One or more of the following plant operating conditions comprise the mode to which each EAL is applicable: 1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown, 5 - Cold Shutdown, 6 - Refueling, D - Defueled, or ALL. (See Section 2.6 for operating mode definitions) Basis: A Generic basis section that provides a description of the rationale for the EAL as provided in NEI 99-01 Rev. 6. This is followed by a Plant-Specific basis section that provides DBNPS-relevant information concerning the EAL. DBNPS Basis Reference(s): Site-specific source documentation from which the EAL is derived 2.6 Operating Mode Applicability (ref. 4.1.8) Reactivity Condition Avg. Reactor Coolant Mode  % Rated Power* (Keff) Temperature (ºF)

1) Power Operation 0.99 > 5% N/A
2) Startup 0.99 5% N/A
3) Hot Standby < 0.99 N/A 280
4) Hot Shutdown < 0.99 N/A 280 > Tavg > 200
5) Cold Shutdown < 0.99 N/A 200
6) Refueling One or more vessel head closure bolts less than fully tensioned.

ALL reactor fuel removed from reactor pressure vessel (full core offload D) Defueled during refueling or extended outage). Refer to Section 3.3.2 for guidance on event caused mode changes. EAL BASES DOCUMENT Rev. 0 Page 11 of 272

3.0 GUIDANCE ON MAKING EMERGENCY CLASSIFICATIONS 3.1 General Considerations When making an emergency classification, the Emergency Director must consider ALL information having a bearing on the proper assessment of an Initiating Condition (IC). This includes the Emergency Action Level (EAL) plus the associated Operating Mode Applicability, Notes, and the technical basis information. In the Recognition Category F matrices, EALs are based on loss or potential loss of FISSION PRODUCT BARRIER THRESHOLDS. 3.1.1 Classification Timeliness NRC regulations require the licensee to establish and maintain the capability to assess, classify, and declare an emergency condition within 15 minutes after the availability of indications to plant operators that an emergency action level has been exceeded and to promptly declare the emergency condition as soon as possible following identification of the appropriate emergency classification level. The NRC staff has provided guidance on implementing this requirement in NSIR/DPR-ISG-01, "Interim Staff Guidance, Emergency Planning for Nuclear Power Plants" (ref. 4.1.11). 3.1.2 Valid Indications ALL emergency classification assessments shall be based upon VALID indications, reports or conditions. A VALID indication, report, or condition, is one that has been verified through appropriate means such that there is no doubt regarding the indicators operability, the conditions existence, or the reports accuracy. For example, verification could be accomplished through an instrument channel check, response on related or redundant indicators, or direct observation by plant personnel. An indication, report, or condition is considered VALID when it is verified by (1) an instrument channel check, or (2) indications on related or redundant indicators, or (3) by direct observation by plant personnel, such that doubt related to the indicators operability, the conditions existence, or the reports accuracy is removed. The validation of indications should be completed in a manner that supports timely emergency declaration. 3.1.3 IMMINENT Conditions For ICs and EALs that have a stipulated time duration (e.g., 15 minutes, 30 minutes, etc.), the Emergency Director should not wait until the applicable time has elapsed, but should declare the event as soon as it is determined that the condition has exceeded, or will likely exceed, the applicable time. If an ongoing radiological release is detected and the release start time is unknown, it should be assumed that the release duration specified in the IC/EAL has been exceeded, absent data to the contrary. 3.1.4 Planned vs. Unplanned Events A planned work activity that results in an expected event or condition which meets or exceeds an EAL does not warrant an emergency declaration provided that: 1) the activity proceeds as planned, and 2) the plant remains within the limits imposed by the operating license. Such activities include planned work to test, manipulate, repair, maintain or modify a system or EAL BASES DOCUMENT Rev. 0 Page 12 of 272

component. In these cases, the controls associated with the planning, preparation and execution of the work will ensure that compliance is maintained with ALL aspects of the operating license provided that the activity proceeds and concludes as expected. Events or conditions of this type may be subject to the reporting requirements of 10 § CFR 50.72 (ref. 4.1.4). 3.1.5 Classification Based on Analysis The assessment of some EALs is based on the results of analyses that are necessary to ascertain whether a specific EAL threshold has been exceeded (e.g., dose assessments, chemistry sampling, RCS leak rate calculation, etc.). For these EALs, the EAL wording or the associated basis discussion will identify the necessary analysis. In these cases, the 15-minute declaration period starts with the availability of the analysis results that show the threshold to be exceeded (i.e., this is the time that the EAL information is first available). The NRC expects licensees to establish the capability to initiate and complete EAL-related analyses within a reasonable period of time (e.g., maintain the necessary expertise on-shift) (ref. 4.1.11). 3.1.6 Emergency Director Judgment While the EALs have been developed to address a full spectrum of possible events and conditions which may warrant emergency classification, a provision for classification based on operator/management experience and judgment is still necessary. The NEI 99-01 EAL scheme provides the Emergency Director with the ability to classify events and conditions based upon judgment using EALs that are consistent with the Emergency Classification Level (ECL) definitions (refer to Category H). The Emergency Director will need to determine if the effects or consequences of the event or condition reasonably meet or exceed a particular ECL definition. A similar provision is incorporated in the Fission Product Barrier Tables; judgment may be used to determine the status of a fission product barrier. 3.1.7 Emergency Action Levels with Embedded Time Requirements Some EALs have embedded time requirements. Declaration must be made as soon as the Emergency Director recognizes that the conditions will not be successfully resolved within 15 minutes. Therefore, for EALs with time-embedded requirements the time for emergency declaration starts with the initial alarm or indication of the event, not after the embedded time has elapsed. For EALs with longer embedded time requirements, the 15-minute clock for declaration begins with recognition that the assigned time limit will be exceeded. For example, SG1.1 - Restoration of at least one essential bus in < 4 hours is not likely. If 20 minutes after loss of the C-1 bus and the D-1 bus it becomes apparent that restoration of either bus will not likely occur within 4 hours the Emergency Director must immediately declare the General Emergency. 3.2 Classification Methodology To make an emergency classification, the user will compare an event or condition (i.e., the relevant plant indications and reports) to an EAL(s) and determine if the EAL has been met or exceeded. The evaluation of an EAL must be consistent with the related Operating Mode Applicability and Notes. If an EAL has been met or exceeded, the associated IC is likewise EAL BASES DOCUMENT Rev. 0 Page 13 of 272

met, the emergency classification process clock starts, and the ECL must be declared in accordance with plant procedures no later than fifteen minutes after the process clock started. When assessing an EAL that specifies a time duration for the off-normal condition, the clock for the EAL time duration runs concurrently with the emergency classification process clock. For a full discussion of this timing requirement, refer to NSIR/DPR-ISG-01 (ref. 4.1.11). 3.2.1 Classification of Multiple Events and Conditions When multiple emergency events or conditions are present, the user will identify ALL met or exceeded EALs. The highest applicable ECL identified during this review is declared. For example:

  • If an Alert EAL and a Site Area Emergency EAL are met, a Site Area Emergency should be declared.

There is no additive effect from multiple EALs meeting the same ECL. For example:

  • If two Alert EALs are met, an Alert should be declared.

Related guidance concerning classification of rapidly escalating events or conditions is provided in Regulatory Issue Summary (RIS) 2007-02, Clarification of NRC Guidance for Emergency Notifications During Quickly Changing Events (ref. 4.1.2). 3.2.2 Consideration of Mode Changes During Classification The mode in effect at the time an event or condition occurred, and prior to any plant or operator response, is the mode that determines whether an IC is applicable. If an event or condition occurs, and results in a mode change before the emergency is declared, the emergency classification level is still based on the mode that existed at the time that the event or condition was initiated (and not when it was declared). Once a different mode is reached, any new event or condition, not related to the original event or condition, requiring emergency classification should be evaluated against the ICs and EALs applicable to the operating mode at the time of the new event or condition. For events that occur in Cold Shutdown or Refueling, escalation is via EALs that are applicable in the Cold Shutdown or Refueling modes, even if Hot Shutdown (or a higher mode) is entered during the subsequent plant response. In particular, the fission product barrier EALs are applicable only to events that initiate in the Hot Shutdown mode or higher. 3.2.3 Classification of IMMINENT Conditions Although EALs provide specific thresholds, the Emergency Director must remain alert to events or conditions that could lead to meeting or exceeding an EAL within a relatively short period of time (i.e., a change in the ECL is IMMINENT). If, in the judgment of the Emergency Director, meeting an EAL is IMMINENT, the emergency classification should be made as if the EAL has been met. While applicable to ALL emergency classification levels, this approach is particularly important at the higher emergency classification levels since it provides additional time for implementation of protective measures. EAL BASES DOCUMENT Rev. 0 Page 14 of 272

3.2.4 Emergency Classification Level Upgrading and Downgrading An ECL may be downgraded when the event or condition that meets the highest IC and EAL no longer exists, and other site-specific downgrading requirements are met. If downgrading the ECL is deemed appropriate, the new ECL would then be based on a lower applicable IC(s) and EAL(s). The ECL may also be terminated. As noted above, guidance concerning classification of rapidly escalating events or conditions is provided in RIS 2007-02 (ref. 4.1.2). 3.2.5 Classification of Short-Lived Events Event-based ICs and EALs define a variety of specific occurrences that have potential or actual safety significance. By their nature, some of these events may be short-lived and, thus, over before the emergency classification assessment can be completed. If an event occurs that meets or exceeds an EAL, the associated ECL must be declared regardless of its continued presence at the time of declaration. Examples of such events include an earthquake or a failure of the reactor protection system to automatically trip the reactor followed by a successful manual trip. 3.2.6 Classification of Transient Conditions Many of the ICs and/or EALs employ time-based criteria. These criteria will require that the IC/EAL conditions be present for a defined period of time before an emergency declaration is warranted. In cases where no time-based criterion is specified, it is recognized that some transient conditions may cause an EAL to be met for a brief period of time (e.g., a few seconds to a few minutes). The following guidance should be applied to the classification of these conditions. EAL momentarily met during expected plant response - In instances where an EAL is briefly met during an expected (normal) plant response, an emergency declaration is not warranted provided that associated systems and components are operating as expected, and operator actions are performed in accordance with procedures. EAL momentarily met but the condition is corrected prior to an emergency declaration - If an operator takes prompt manual action to address a condition, and the action is successful in correcting the condition prior to the emergency declaration, then the applicable EAL is not considered met and the associated emergency declaration is not required. It is important to stress that the 15-minute emergency classification assessment period (process clock) is not a grace period during which a classification may be delayed to allow the performance of a corrective action that would obviate the need to classify the event. Emergency classification assessments must be deliberate and timely, with no undue delays. The provision discussed above addresses only those rapidly evolving situations when an operator is able to take a successful corrective action prior to the Emergency Director completing the review and steps necessary to make the emergency declaration. This provision is included to ensure that any public protective actions resulting from the emergency classification are truly warranted by the plant conditions. EAL BASES DOCUMENT Rev. 0 Page 15 of 272

3.2.7 After-the-Fact Discovery of an Emergency Event or Condition In some cases, an EAL may be met but the emergency classification was not made at the time of the event or condition. This situation can occur when personnel discover that an event or condition existed which met an EAL, but no emergency was declared, and the event or condition no longer exists at the time of discovery. This may be due to the event or condition not being recognized at the time or an error that was made in the emergency classification process. In these cases, no emergency declaration is warranted; however, the guidance contained in NUREG-1022 (ref. 4.1.3) is applicable. Specifically, the event should be reported to the NRC in accordance with 10 CFR § 50.72 (ref. 4.1.4) within one hour of the discovery of the undeclared event or condition. The licensee should also notify appropriate State and local agencies in accordance with the agreed upon arrangements. 3.2.8 Retraction of an Emergency Declaration Guidance on the retraction of an emergency declaration reported to the NRC is discussed in NUREG-1022 (ref. 4.1.3). EAL BASES DOCUMENT Rev. 0 Page 16 of 272

4.0 REFERENCES

4.1 Developmental 4.1.1 NEI 99-01 Revision 6, Methodology for the Development of Emergency Action Levels for Non-Passive Reactors, ADAMS Accession Number ML13091A209 4.1.2 RIS 2007-02 Clarification of NRC Guidance for Emergency Notifications During Quickly Changing Events, February 2, 2007 4.1.3 NUREG-1022 Event Reporting Guidelines: 10CFR50.72 and 50.73 4.1.4 10 § CFR 50.72 Immediate Notification Requirements for Operating Nuclear Power Reactors 4.1.5 10 § CFR 50.73 License Event Report System 4.1.6 DBNPS ODCM 4.1.7 DBNPS UFSAR Figure 1.2-12 Site Plan 4.1.8 Technical Specifications Table 1.1-1 Modes 4.1.9 DB-OP-06904 Shutdown Operations 4.1.10 NG-QS-00121 DBNPS Writers Guide 4.1.11 NSIR/DPR-ISG-01 Interim Staff Guidance, Emergency Planning for Nuclear Power Plants 4.1.12 Site CSAR NUH-003 4.1.13 DBNPS Emergency Plan 4.1.14 DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tube Rupture 4.2 Implementing 4.2.1 RA-EP-01500 Emergency Classification 4.2.2 NEI 99-01 Rev. 6 to DBNPS EAL Comparison Matrix 4.2.3 DBNPS EAL Matrix EAL BASES DOCUMENT Rev. 0 Page 17 of 272

5.0 DEFINITIONS, ACRONYMS & ABBREVIATIONS 5.1 Definitions (ref. 4.1.1 except as noted) Selected terms used in Initiating Condition and Emergency Action Level statements are set in ALL capital letters (e.g., ALL CAPS). These words are defined terms that have specific meanings as used in this document. The definitions of these terms are provided below. Alert Events are in progress or have occurred which involve an actual or potential substantial degradation of the level of safety of the plant or a security event that involves probable life threatening risk to site personnel or damage to site equipment because of HOSTILE ACTION. Any releases are expected to be limited to small fractions of the EPA PAG exposure levels. Confinement Boundary The barrier(s) between spent fuel and the environment once the spent fuel is processed for dry storage. As related to the DBNPS Dry Fuel Storage Facility, CONFINEMENT BOUNDARY is defined as the Dry Shielded Canister (DSC) (ref. 4.1.12). Containment Closure The procedurally defined actions taken to secure containment and its associated structures, systems, and components as a functional barrier to fission product release under existing plant conditions (ref. 4.1.9). Emergency Action Level (EAL) A pre-determined, site-specific, observable threshold for an Initiating Condition that, when met or exceeded, places the plant in a given emergency classification level. Emergency Classification Level (ECL) One of a set of names or titles established by the US Nuclear Regulatory Commission (NRC) for grouping off-normal events or conditions according to (1) potential or actual effects or consequences, and (2) resulting onsite and offsite response actions. The emergency classification levels, in ascending order of severity, are:

  • Unusual Event (UE)
  • Alert
  • Site Area Emergency (SAE)
  • General Emergency (GE)

EPA PAGs Environment Protection Agency Protective Action Guidelines. The EPA PAGs are expressed in terms of dose commitment: 1 Rem TEDE or 5 Rem CDE Thyroid. Actual or projected offsite exposures in excess of the EPA PAGs requires DBNPS to recommend protective actions for the general public to offsite planning agencies. EAL BASES DOCUMENT Rev. 0 Page 18 of 272

Explosion A rapid, violent and catastrophic failure of a piece of equipment due to combustion, chemical reaction or overpressurization. A release of steam (from high energy lines or components) or an electrical component failure (caused by short circuits, grounding, arcing, etc.) should not automatically be considered an EXPLOSION. Such events may require a post-event inspection to determine if the attributes of an EXPLOSION are present. Faulted The term applied to a steam generator that has a steam leak on the secondary side of sufficient size to cause an uncontrolled drop in steam generator pressure or the steam generator to become completely depressurized. Fire Combustion characterized by heat and light. Sources of smoke such as slipping drive belts or overheated electrical equipment do not constitute FIRES. Observation of flame is preferred but is NOT required if large quantities of smoke and heat are observed. Fission Product Barrier Threshold A pre-determined, site-specific, observable threshold indicating the loss or potential loss of a fission product barrier. Flooding A condition where water is entering a room or area faster than installed equipment is capable of removal, resulting in a rise of water level within the room or area. General Emergency Events are in progress or have occurred which involve actual or IMMINENT substantial core degradation or melting with potential for loss of containment integrity or HOSTILE ACTION that results in an actual loss of physical control of the facility. Releases can be reasonably expected to exceed EPA PAG exposure levels offsite for more than the immediate site area. Hostage A person(s) held as leverage against the station to ensure that demands will be met by the station. Hostile Action An act toward DBNPS or its personnel that includes the use of violent force to destroy equipment, take HOSTAGES, and/or intimidate the licensee to achieve an end. This includes attack by air, land, or water using guns, explosives, PROJECTILEs, vehicles, or other devices used to deliver destructive force. Other acts that satisfy the overall intent may be included. HOSTILE ACTION should not be construed to include acts of civil disobedience or felonious acts that are not part of a concerted attack on DBNPS. Non-terrorism-based EALs should be EAL BASES DOCUMENT Rev. 0 Page 19 of 272

used to address such activities (i.e., this may include violent acts between individuals in the OWNER CONTROLLED AREA). Hostile Force One or more individuals who are engaged in a determined assault, overtly or by stealth and deception, equipped with suitable weapons capable of killing, maiming, or causing destruction. Imminent The trajectory of events or conditions is such that an EAL will be met within a relatively short period of time regardless of mitigation or corrective actions. Impede(d) Personnel access to a room or area is hindered to an extent that extraordinary measures are necessary to facilitate entry of personnel into the affected room/area (e.g., requiring use of protective equipment, such as SCBAs, that is not routinely employed). Independent Spent Fuel Storage Installation (ISFSI) A complex that is designed and constructed for the interim storage of spent nuclear fuel and other radioactive materials associated with spent fuel storage. Initiating Condition (IC) An event or condition that aligns with the definition of one of the four emergency classification levels by virtue of the potential or actual effects or consequences. Maintain Take appropriate action to hold the value of an identified parameter within specified limits. Owner Controlled Area The property associated with the station and owned by the company. Access is normally limited to persons entering for official business (ref. 4.1.13). Projectile An object directed toward a Nuclear Power Plant that could cause concern for its continued operability, reliability, or personnel safety. Protected Area An area that normally encompasses all controlled areas within the security protected area fence. EAL BASES DOCUMENT Rev. 0 Page 20 of 272

RCS Intact The RCS should be considered intact when the RCS pressure boundary is in its normal condition for the cold shutdown mode of operation (e.g., no freeze seals or nozzle dams). Refueling Pathway The reactor refueling canal, spent fuel pool and fuel transfer canal comprise the REFUELING PATHWAY. Restore Take the appropriate action required to return the value of an identified parameter to the applicable limits Ruptured The condition of a steam generator in which primary-to-secondary leakage is of sufficient magnitude to require a safety injection (ref. 4.1.14). Safety System A system required for safe plant operation, cooling down the plant and/or placing it in the cold shutdown condition, including the ECCS. These are typically systems classified as safety-related (as defined in 10CFR50.2): Those structures, systems and components that are relied upon to remain functional during and following design basis events to assure: (1) The integrity of the reactor coolant pressure boundary; (2) The capability to shut down the reactor and maintain it in a safe shutdown condition; (3) The capability to prevent or mitigate the consequences of accidents which could result in potential offsite exposures. Security Condition ANY Security Event as listed in the approved security contingency plan that constitutes a threat/compromise to site security, threat/risk to site personnel, or a potential degradation to the level of safety of the plant. A SECURITY CONDITION does not involve a HOSTILE ACTION. Site Area Emergency Events are in progress or have occurred which involve actual or likely major failures of plant functions needed for protection of the public or HOSTILE ACTION that results in intentional damage or malicious acts; 1) toward site personnel or equipment that could lead to the likely failure of or; 2) that prevent effective access to, equipment needed for the protection of the public. Any releases are not expected to result in exposure levels which exceed EPA PAG exposure levels beyond the SITE BOUNDARY. EAL BASES DOCUMENT Rev. 0 Page 21 of 272

Site Boundary Area as depicted in UFSAR Figure 1.2-12 Site Plan (ref. 4.1.7). The SITE BOUNDARY is defined at a minimum exclusion distance of 0.75 miles. This is the nearest distance from potential release points at which protective actions would be required for members of the public. Unisolable An open or breached system line that cannot be isolated, remotely or locally. Unplanned A parameter change or an event that is not 1) the result of an intended evolution or 2) an expected plant response to a transient. The cause of the parameter change or event may be known or unknown. Unusual Event Events are in progress or have occurred which indicate a potential degradation of the level of safety of the plant or indicate a security threat to facility protection has been initiated. No releases of radioactive material requiring offsite response or monitoring are expected unless further degradation of SAFETY SYSTEMS occurs. Valid An indication, report, or condition, is considered to be VALID when it is verified by (1) an instrument channel check, or (2) indications on related or redundant indicators, or (3) by direct observation by plant personnel, such that doubt related to the indicators operability, the conditions existence, or the reports accuracy is removed. Implicit in this definition is the need for timely assessment. Visible Damage Damage to a component or structure that is readily observable without measurements, testing, or analysis. The visual impact of the damage is sufficient to cause concern regarding the operability or reliability of the affected component or structure. EAL BASES DOCUMENT Rev. 0 Page 22 of 272

5.2 Abbreviations/Acronyms °F ....................................................................................................... Degrees Fahrenheit °........................................................................................................................... Degrees AC ....................................................................................................... Alternating Current AOP ................................................................................. Abnormal Operating Procedure ATWS ..................................................................... Anticipated Transient Without Scram B&W ..................................................................................................... Babcock & Wilcox BWST .................................................................................. Borated Water Storage Tank DBNPS ..................................................................... Davis-Besse Nuclear Power Station CCW ....................................................................................... Component Cooling Water CDE ...................................................................................... Committed Dose Equivalent CFR ..................................................................................... Code of Federal Regulations DBA ............................................................................................... Design Basis Accident DC ............................................................................................................... Direct Current DFSF .......................................................................................... Dry Fuel Storage Facility DHR ................................................................................................. Decay Heat Removal DSC ................................................................................................ Dry Shielded Canister EAL ............................................................................................. Emergency Action Level ECCS............................................................................ Emergency Core Cooling System ECL ................................................................................. Emergency Classification Level EOF .................................................................................. Emergency Operations Facility EOP ...............................................................................Emergency Operating Procedure EPA .............................................................................. Environmental Protection Agency EPIP ................................................................Emergency Plan Implementing Procedure ERG ................................................................................Emergency Response Guideline ESF ........................................................................................ Engineered Safety Feature FAA ................................................................................. Federal Aviation Administration FBI ................................................................................... Federal Bureau of Investigation FEMA............................................................... Federal Emergency Management Agency FSAR .................................................................................... Final Safety Analysis Report GE ..................................................................................................... General Emergency IC ......................................................................................................... Initiating Condition IPEEE .................Individual Plant Examination of External Events (Generic Letter 88-20) ISFSI ........................................................... Independent Spent Fuel Storage Installation EAL BASES DOCUMENT Rev. 0 Page 23 of 272

Keff .........................................................................Effective Neutron Multiplication Factor LCO .................................................................................. Limiting Condition of Operation LER ............................................................................................... Licensee Event Report LOCA ......................................................................................... Loss of Coolant Accident MSIV ...................................................................................... Main Steam Isolation Valve MSL ........................................................................................................ Main Steam Line MSSV ........................................................................................ Main Steam Safety Valve mR, mRem, mrem, mREM .............................................. milli-Roentgen Equivalent Man MU-HPI .................................................................... Makeup and High Pressure Injection MW .................................................................................................................... Megawatt NEI .............................................................................................. Nuclear Energy Institute NESP ................................................................... National Environmental Studies Project NRC ................................................................................Nuclear Regulatory Commission NSSS ................................................................................ Nuclear Steam Supply System NORAD................................................... North American Aerospace Defense Command OBE ...................................................................................... Operating Basis Earthquake OCA .............................................................................................. Owner Controlled Area ODCM........................................................................... Off-site Dose Calculation Manual ORO ................................................................................. Offsite Response Organization PA .............................................................................................................. Protected Area PAG ........................................................................................ Protective Action Guideline PORV .................................................................................. Power Operated Relief Valve PRA/PSA ..................... Probabilistic Risk Assessment / Probabilistic Safety Assessment PWR ....................................................................................... Pressurized Water Reactor PSIG ............................................................................... Pounds per Square Inch Gauge R ........................................................................................................................ Roentgen RCDT.................................................................................... Reactor Coolant Drain Tank RCS ............................................................................................ Reactor Coolant System Rem, rem, REM ....................................................................... Roentgen Equivalent Man RPS ........................................................................................ Reactor Protection System RV .............................................................................................................Reactor Vessel SAR ............................................................................................... Safety Analysis Report SBO ......................................................................................................... Station Blackout SBODG........................................................................ Station Blackout Diesel Generator EAL BASES DOCUMENT Rev. 0 Page 24 of 272

SCBA ...................................................................... Self-Contained Breathing Apparatus SG ......................................................................................................... Steam Generator SI .............................................................................................................. Safety Injection SPDS ........................................................................... Safety Parameter Display System SRO ............................................................................................ Senior Reactor Operator TEDE ............................................................................... Total Effective Dose Equivalent TOAF .................................................................................................... Top of Active Fuel TSC .......................................................................................... Technical Support Center TRM ............................................................................... Technical Requirements Manual EAL BASES DOCUMENT Rev. 0 Page 25 of 272

6.0 DBNPS-TO-NEI 99-01 Rev. 6 EAL CROSS-REFERENCE This cross-reference is provided to facilitate association and location of a DBNPS EAL within the NEI 99-01 IC/EAL identification scheme. Further information regarding the development of the DBNPS EALs based on the NEI guidance can be found in the EAL Comparison Matrix. DBNPS NEI 99-01 Rev. 6 Example EAL IC EAL HU1.1 HU1 1 HU1.2 HU1 2 HU1.3 HU1 3 HU2.1 HU2 1 HU3.1 HU3 1 HU3.2 HU3 2 HU3.3 HU3 3 HU3.4 HU3 4 HU4.1 HU4 1 HU4.2 HU4 2 HU4.3 HU4 3 HU4.4 HU4 4 HU7.1 HU7 1 HA1.1 HA1 1 HA1.2 HA1 2 HA5.1 HA5 1 HA6.1 HA6 1 HA7.1 HA7 1 HS1.1 HS1 1 HS6.1 HS6 1 HS7.1 HS7 1 EAL BASES DOCUMENT Rev. 0 Page 26 of 272

DBNPS NEI 99-01 Rev. 6 Example EAL IC EAL HG1.1 HG1 1 HG7.1 HG7 1 RU1.1 AU1 1, 2 RU1.2 AU1 3 RU2.1 AU2 1 RA1.1 AA1 1 RA1.2 AA1 2 RA1.3 AA1 3 RA1.4 AA1 4 RA2.1 AA2 1 RA2.2 AA2 2 RA2.3 AA2 3 RA3.1 AA3 1 RA3.2 AA3 2 RS1.1 AS1 1 RS1.2 AS1 2 RS1.3 AS1 3 RS2.1 AS2 1 RG1.1 AG1 1 RG1.2 AG1 2 RG1.3 AG1 3 RG2.1 AG2 1 EU1.1 E-HU1 1 CU1.1 CU1 1 CU1.2 CU1 2 EAL BASES DOCUMENT Rev. 0 Page 27 of 272

DBNPS NEI 99-01 Rev. 6 Example EAL IC EAL CU2.1 CU2 1 CU3.1 CU3 1 CU3.2 CU3 2 CU4.1 CU4 1 CU5.1 CU5 1 CU5.2 CU5 2 CU5.3 CU5 3 CA1.1 CA1 1 CA1.2 CA1 2 CA2.1 CA2 1 CA3.1 CA3 1, 2 CA6.1 CA6 1 CS1.1 CS1 3 CG1.1 CG1 2 SU1.1 SU1 1 SU3.1 SU2 1 SU4.1 SU3 1 SU4.2 SU3 2 SU5.1 SU4 1 SU6.1 SU5 1 SU6.2 SU5 2 SU7.1 SU6 1 SU7.2 SU6 2 SU7.3 SU6 3 SU8.1 SU7 1 EAL BASES DOCUMENT Rev. 0 Page 28 of 272

DBNPS NEI 99-01 Rev. 6 Example EAL IC EAL SU8.2 SU7 2 SA1.1 SA1 1 SA3.1 SA2 1 SA6.1 SA5 1 SA9.1 SA9 1 SS1.1 SS1 1 SS2.1 SS8 1 SS6.1 SS5 1 SG1.1 SG1 1 SG1.2 SG8 1 FA1.1 FA1 1 FS1.1 FS1 1 FG1.1 FG1 1 EAL BASES DOCUMENT Rev. 0 Page 29 of 272

7.0 ATTACHMENTS Attachment 1, Emergency Action Level Technical Bases Attachment 2, Fission Product Barrier Matrix and Basis Attachment 3, Safe Shutdown Rooms/Areas Tables R-2 & H-2 Bases EAL BASES DOCUMENT Rev. 0 Page 30 of 272

ATTACHMENT 1 EAL Bases Category H - Hazards and Other Conditions Affecting Plant Safety EAL Group: ANY (EALs in this category are applicable to ANY plant condition, hot or cold.) Hazards are non-plant, system-related events that can directly or indirectly affect plant operation, reactor plant safety or personnel safety.

1. Security Unauthorized entry attempts into the PROTECTED AREA, bomb threats, sabotage attempts, and actual security compromises threatening loss of physical control of the plant.
2. Seismic Event Natural events such as earthquakes have potential to cause plant structure or equipment damage of sufficient magnitude to threaten personnel or plant safety.
3. Natural or Technology Hazard Other natural and non-naturally occurring events that can cause damage to plant facilities include tornados, FLOODING, hazardous material releases and events restricting site access warranting classification.
4. Fire FIREs can pose significant hazards to personnel and reactor safety. Appropriate for classification are FIREs within the site PROTECTED AREA or FIREs that may affect operability of equipment needed for safe shutdown.
5. Hazardous Gas Toxic, corrosive, asphyxiant or flammable gas leaks can affect normal plant operations or preclude access to plant areas required to safely shutdown the plant.
6. Control Room Evacuation Events that are indicative of loss of Control Room habitability. If the Control Room must be evacuated, additional support for monitoring and controlling plant functions is necessary through the emergency response facilities.
7. Emergency Director Judgment The EALs defined in other categories specify the predetermined symptoms or events that are indicative of emergency or potential emergency conditions and thus warrant classification. While these EALs have been developed to address the full spectrum of possible emergency conditions that may warrant classification and subsequent implementation of the Emergency Plan, a provision for classification of emergencies based on operator/management experience and judgment is still necessary. The EALs of this EAL BASES DOCUMENT Rev. 0 Page 31 of 272

ATTACHMENT 1 EAL Bases category provide the Emergency Director the latitude to classify emergency conditions consistent with the established classification criteria based upon Emergency Director judgment. EAL BASES DOCUMENT Rev. 0 Page 32 of 272

ATTACHMENT 1 EAL Bases Category: H - Hazards Subcategory: 1 - Security Initiating Condition: HOSTILE ACTION resulting in loss of physical control of the facility EAL: HG1.1 General Emergency A HOSTILE ACTION is occurring or has occurred within the PROTECTED AREA as reported by the Security Shift Supervisor AND EITHER of the following has occurred: ANY of the following safety functions cannot be controlled or maintained z Reactivity z Core cooling (RCS inventory) z RCS heat removal (ability to maintain heat sink) OR Damage to spent fuel has occurred or is IMMINENT Mode Applicability: ALL NEI 99-01 Basis: This IC addresses an event in which a HOSTILE FORCE has taken physical control of the facility to the extent that the plant staff can no longer operate equipment necessary to maintain key safety functions. It also addresses a HOSTILE ACTION leading to a loss of physical control that results in actual or IMMINENT damage to spent fuel due to 1) damage to a spent fuel pool cooling system (e.g., pumps, heat exchangers, controls, etc.) or, 2) loss of spent fuel pool integrity such that sufficient water level cannot be maintained. Timely and accurate communications between Security Shift Supervision and the Control Room is essential for proper classification of a security-related event (ref. 2, 3). Security plans and terminology are based on the guidance provided by NEI 03-12, Template for the Security Plan, Training and Qualification Plan, Safeguards Contingency Plan and Independent Spent Fuel Storage Installation Security Program. EAL BASES DOCUMENT Rev. 0 Page 33 of 272

ATTACHMENT 1 EAL Bases Emergency plans and implementing procedures are public documents; therefore, EALs should not incorporate Security-sensitive information. This includes information that may be advantageous to a potential adversary, such as the particulars concerning a specific threat or threat location. Security-sensitive information should be contained in non-public documents such as the DBNPS Physical Security Plan (ref.1). DBNPS Basis: None DBNPS Basis Reference(s):

1. DBNPS Physical Security Plan (safeguards)
2. DB-OP-02544 Security Events or Threats (restricted)
3. RA-EP-02890 Emergency Response Organization Response to Security Events or Threats
4. NEI 99-01 HG1 EAL BASES DOCUMENT Rev. 0 Page 34 of 272

ATTACHMENT 1 EAL Bases Category: H - Hazards Subcategory: 1 - Security Initiating Condition: HOSTILE ACTION within the PROTECTED AREA EAL: HS1.1 Site Area Emergency A HOSTILE ACTION is occurring or has occurred within the PROTECTED AREA as reported by the Security Shift Supervisor Mode Applicability: ALL NEI 99-01 Basis: This IC addresses the occurrence of a HOSTILE ACTION within the PROTECTED AREA. This event will require rapid response and assistance due to the possibility for damage to plant equipment. Timely and accurate communications between Security Shift Supervision and the Control Room is essential for proper classification of a security-related event (ref. 2, 3). Security plans and terminology are based on the guidance provided by NEI 03-12, Template for the Security Plan, Training and Qualification Plan, Safeguards Contingency Plan and Independent Spent Fuel Storage Installation Security Program. As time and conditions allow, these events require a heightened state of readiness by the plant staff and implementation of onsite protective measures (e.g., evacuation, dispersal or sheltering). The Site Area Emergency declaration will mobilize Offsite Response Organization (ORO) resources and have them available to develop and implement public protective actions in the unlikely event that the attack is successful in impairing multiple safety functions. This IC does not apply to incidents that are accidental events, acts of civil disobedience, or otherwise are not a HOSTILE ACTION perpetrated by a HOSTILE FORCE. Examples include the crash of a small aircraft, shots from hunters, physical disputes between employees, etc. Reporting of these types of events is adequately addressed by other EALs, or the requirements of 10 CFR § 73.71 or 10 CFR § 50.72. Emergency plans and implementing procedures are public documents; therefore, EALs should not incorporate Security-sensitive information. This includes information that may be advantageous to a potential adversary, such as the particulars concerning a specific threat or threat location. Security-sensitive information should be contained in non-public documents such as the DBNPS Physical Security Plan (ref. 1). Escalation of the emergency classification level would be via IC HG1. EAL BASES DOCUMENT Rev. 0 Page 35 of 272

ATTACHMENT 1 EAL Bases DBNPS Basis: The Security Shift Supervision is defined as the Security Shift Supervisor or designee. These individuals are the designated on-site personnel qualified and trained to confirm that a security event is occurring or has occurred. Training on security event classification is highly controlled due to the strict secrecy controls placed on the DBNPS Physical Security Plan (Safeguards) information (ref. 1). DBNPS Basis Reference(s):

1. DBNPS Physical Security Plan (safeguards)
2. DB-OP-02544 Security Events or Threats (restricted)
3. RA-EP-02890 Emergency Response Organization Response to Security Events or Threats
4. NEI 99-01 HS1 EAL BASES DOCUMENT Rev. 0 Page 36 of 272

ATTACHMENT 1 EAL Bases Category: H - Hazards Subcategory: 1 - Security Initiating Condition: HOSTILE ACTION within the OWNER CONTROLLED AREA or airborne attack threat within 30 minutes EAL: HA1.1 Alert A HOSTILE ACTION is occurring or has occurred within the OWNER CONTROLLED AREA as reported by the Security Shift Supervisor Mode Applicability: ALL NEI 99-01 Basis: This IC addresses the occurrence of a HOSTILE ACTION within the OWNER CONTROLLED AREA. This event will require rapid response and assistance due to the possibility of the attack progressing to the PROTECTED AREA. Timely and accurate communications between Security Shift Supervision and the Control Room is essential for proper classification of a security-related event (ref. 2, 3). Security plans and terminology are based on the guidance provided by NEI 03-12, Template for the Security Plan, Training and Qualification Plan, Safeguards Contingency Plan and Independent Spent Fuel Storage Installation Security Program. As time and conditions allow, these events require a heightened state of readiness by the plant staff and implementation of onsite protective measures (e.g., evacuation, dispersal or sheltering). The Alert declaration will also heighten the awareness of Offsite Response Organizations (OROs), allowing them to be better prepared should it be necessary to consider further actions. This IC does not apply to incidents that are accidental events, acts of civil disobedience, or otherwise are not a HOSTILE ACTION perpetrated by a HOSTILE FORCE. Examples include the crash of a small aircraft, shots from hunters, physical disputes between employees, etc. Reporting of these types of events is adequately addressed by other EALs, or the requirements of 10 CFR § 73.71 or 10 CFR § 50.72. This EAL is applicable for ANY HOSTILE ACTION occurring, or that has occurred, in the OWNER CONTROLLED AREA. This includes any action directed against an ISFSI that is located outside the plant PROTECTED AREA. Emergency plans and implementing procedures are public documents; therefore, EALs should not incorporate Security-sensitive information. This includes information that may be EAL BASES DOCUMENT Rev. 0 Page 37 of 272

ATTACHMENT 1 EAL Bases advantageous to a potential adversary, such as the particulars concerning a specific threat or threat location. Security-sensitive information should be contained in non-public documents such as the DBNPS Physical Security Plan (ref. 1). DBNPS Basis: The Security Shift Supervision is defined as the Security Shift Supervisor or designee. Escalation of the emergency classification level would be via IC HS1 or HG1. DBNPS Basis Reference(s):

1. DBNPS Physical Security Plan (safeguards)
2. DB-OP-02544 Security Events or Threats (restricted)
3. RA-EP-02890 Emergency Response Organization Response to Security Events or Threats
4. NEI 99-01 HA1 EAL BASES DOCUMENT Rev. 0 Page 38 of 272

ATTACHMENT 1 EAL Bases Category: H - Hazards Subcategory: 1 - Security Initiating Condition: HOSTILE ACTION within the OWNER CONTROLLED AREA or airborne attack threat within 30 minutes EAL: HA1.2 Alert A validated notification from NRC of an aircraft attack threat within 30 min. of the site Mode Applicability: ALL NEI 99-01 Basis: This IC addresses the notification of an aircraft attack threat. This event will require rapid response and assistance due to the need to prepare the plant and staff for a potential aircraft impact. Timely and accurate communications between Security Shift Supervision and the Control Room is essential for proper classification of a security-related event (ref. 2, 3). Security plans and terminology are based on the guidance provided by NEI 03-12, Template for the Security Plan, Training and Qualification Plan, Safeguards Contingency Plan and Independent Spent Fuel Storage Installation Security Program. As time and conditions allow, these events require a heightened state of readiness by the plant staff and implementation of onsite protective measures (e.g., evacuation, dispersal or sheltering). The Alert declaration will also heighten the awareness of Offsite Response Organizations (OROs), allowing them to be better prepared should it be necessary to consider further actions. This IC does not apply to incidents that are accidental events, acts of civil disobedience, or otherwise are not a HOSTILE ACTION perpetrated by a HOSTILE FORCE. Examples include the crash of a small aircraft, shots from hunters, physical disputes between employees, etc. Reporting of these types of events is adequately addressed by other EALs, or the requirements of 10 CFR § 73.71 or 10 CFR § 50.72. This EAL addresses the threat from the impact of an aircraft on the plant, and the anticipated arrival time is within 30 minutes. The intent of this EAL is to ensure that threat-related notifications are made in a timely manner so that plant personnel and OROs are in a heightened state of readiness. This EAL is met when the threat-related information has been validated in accordance with site-specific security procedures. EAL BASES DOCUMENT Rev. 0 Page 39 of 272

ATTACHMENT 1 EAL Bases The NRC Headquarters Operations Officer (HOO) will communicate to the licensee if the threat involves an aircraft. The status and size of the plane may be provided by NORAD through the NRC. In some cases, it may not be readily apparent if an aircraft impact within the OWNER CONTROLLED AREA was intentional (i.e., a HOSTILE ACTION). It is expected, although not certain, that notification by an appropriate Federal agency to the site would clarify this point. In this case, the appropriate federal agency is intended to be NORAD, FBI, FAA or NRC. The emergency declaration, including one based on other ICs/EALs, should not be unduly delayed while awaiting notification by a Federal agency. Emergency plans and implementing procedures are public documents; therefore, EALs should not incorporate Security-sensitive information. This includes information that may be advantageous to a potential adversary, such as the particulars concerning a specific threat or threat location. Security-sensitive information should be contained in non-public documents such as the DBNPS Physical Security Plan (ref. 1). DBNPS Basis: The Security Shift Supervision is defined as the Security Shift Supervisor or designee. Escalation of the emergency classification level would be via IC HS1 or HG1. DBNPS Basis Reference(s):

1. DBNPS Physical Security Plan (safeguards)
2. DB-OP-02544 Security Events or Threats (restricted)
3. RA-EP-02890 Emergency Response Organization Response to Security Events or Threats
4. NEI 99-01 HA1 EAL BASES DOCUMENT Rev. 0 Page 40 of 272

ATTACHMENT 1 EAL Bases Category: H - Hazards Subcategory: 1 - Security Initiating Condition: Confirmed SECURITY CONDITION or threat EAL: HU1.1 Unusual Event A SECURITY CONDITION that does not involve a HOSTILE ACTION as reported by the Security Shift Supervisor Mode Applicability: ALL NEI 99-01 Basis: This IC addresses events that pose a threat to plant personnel or SAFETY SYSTEM equipment, and thus represent a potential degradation in the level of plant safety. Security events which do not meet one of these EALs are adequately addressed by the requirements of 10 CFR § 73.71 or 10 CFR § 50.72. Security events assessed as HOSTILE ACTIONS are classifiable under ICs HA1, HS1 and HG1. Timely and accurate communications between Security Shift Supervision and the Control Room is essential for proper classification of a security-related event (ref. 2, 3, 4). Classification of these events will initiate appropriate threat-related notifications to plant personnel and Offsite Response Organizations. Security plans and terminology are based on the guidance provided by NEI 03-12, Template for the Security Plan, Training and Qualification Plan, Safeguards Contingency Plan and Independent Spent Fuel Storage Installation Security Program. This EAL references the Security Shift Supervisor because these are the individuals trained to confirm that a security event is occurring or has occurred. Training on security event confirmation and classification is controlled due to the nature of Safeguards and 10 CFR § 2.39 information. Emergency plans and implementing procedures are public documents; therefore, EALs should not incorporate Security-sensitive information. This includes information that may be advantageous to a potential adversary, such as the particulars concerning a specific threat or threat location. Security-sensitive information should be contained in non-public documents such as the DBNPS Physical Security Plan (ref. 1). Escalation of the emergency classification level would be via IC HA1. EAL BASES DOCUMENT Rev. 0 Page 41 of 272

ATTACHMENT 1 EAL Bases DBNPS Basis: The Security Shift Supervision is defined as the Security Shift Supervisor or designee. This EAL is based on the DBNPS Physical Security Plan (ref. 1). DBNPS Basis Reference(s):

1. DBNPS Physical Security Plan (safeguards)
2. DB-OP-02544 Security Events or Threats (restricted)
3. RA-EP-02890 Emergency Response Organization Response to Security Events or Threats
4. NEI 99-01 HU1 EAL BASES DOCUMENT Rev. 0 Page 42 of 272

ATTACHMENT 1 EAL Bases Category: H - Hazards Subcategory: 1 - Security Initiating Condition: Confirmed SECURITY CONDITION or threat EAL: HU1.2 Unusual Event Notification of a credible security threat directed at the site Mode Applicability: ALL NEI 99-01 Basis: This IC addresses events that pose a threat to plant personnel or SAFETY SYSTEM equipment, and thus represent a potential degradation in the level of plant safety. Security events which do not meet one of these EALs are adequately addressed by the requirements of 10 CFR § 73.71 or 10 CFR § 50.72. Security events assessed as HOSTILE ACTIONS are classifiable under ICs HA1, HS1 and HG1. Timely and accurate communications between Security Shift Supervision and the Control Room is essential for proper classification of a security-related event (ref. 2, 3, 4). Classification of these events will initiate appropriate threat-related notifications to plant personnel and Offsite Response Organizations. Security plans and terminology are based on the guidance provided by NEI 03-12, Template for the Security Plan, Training and Qualification Plan, Safeguards Contingency Plan and Independent Spent Fuel Storage Installation Security Program. This EAL addresses the receipt of a credible security threat. The credibility of the threat is assessed in accordance with the DBNPS Physical Security Plan (ref. 1). Emergency plans and implementing procedures are public documents; therefore, EALs should not incorporate Security-sensitive information. This includes information that may be advantageous to a potential adversary, such as the particulars concerning a specific threat or threat location. Security-sensitive information should be contained in non-public documents such as the DBNPS Physical Security Plan (ref. 1). Escalation of the emergency classification level would be via IC HA1. DBNPS Basis: The Security Shift Supervision is defined as the Security Shift Supervisor or designee. This EAL is based on the DBNPS Physical Security Plan (ref. 1). EAL BASES DOCUMENT Rev. 0 Page 43 of 272

ATTACHMENT 1 EAL Bases DBNPS Basis Reference(s):

1. DBNPS Physical Security Plan (safeguards)
2. DB-OP-02544 Security Events or Threats (restricted)
3. RA-EP-02890 Emergency Response Organization Response to Security Events or Threats
4. NEI 99-01 HU1 EAL BASES DOCUMENT Rev. 0 Page 44 of 272

ATTACHMENT 1 EAL Bases Category: H - Hazards Subcategory: 1 - Security Initiating Condition: Confirmed SECURITY CONDITION or threat EAL: HU1.3 Unusual Event A validated notification from the NRC providing information of an aircraft threat Mode Applicability: ALL NEI 99-01 Basis: This IC addresses events that pose a threat to plant personnel or SAFETY SYSTEM equipment, and thus represent a potential degradation in the level of plant safety. Security events which do not meet one of these EALs are adequately addressed by the requirements of 10 CFR § 73.71 or 10 CFR § 50.72. Security events assessed as HOSTILE ACTIONS are classifiable under ICs HA1, HS1 and HG1. Timely and accurate communications between Security Shift Supervision and the Control Room is essential for proper classification of a security-related event (ref. 2, 3, 4). Classification of these events will initiate appropriate threat-related notifications to plant personnel and Offsite Response Organizations. Security plans and terminology are based on the guidance provided by NEI 03-12, Template for the Security Plan, Training and Qualification Plan, Safeguards Contingency Plan and Independent Spent Fuel Storage Installation Security Program. This EAL addresses the threat from the impact of an aircraft on the plant. The NRC Headquarters Operations Officer (HOO) will communicate to the licensee if the threat involves an aircraft. The status and size of the plane may also be provided by NORAD through the NRC. Validation of the threat is performed in accordance with the DBNPS Physical Security Plan (ref. 1). Emergency plans and implementing procedures are public documents; therefore, EALs should not incorporate Security-sensitive information. This includes information that may be advantageous to a potential adversary, such as the particulars concerning a specific threat or threat location. Security-sensitive information should be contained in non-public documents such as the DBNPS Physical Security Plan (ref. 1). Escalation of the emergency classification level would be via IC HA1. EAL BASES DOCUMENT Rev. 0 Page 45 of 272

ATTACHMENT 1 EAL Bases DBNPS Basis: The Security Shift Supervision is defined as the Security Shift Supervisor or designee. This EAL is based on the DBNPS Physical Security Plan (ref. 1). DBNPS Basis Reference(s):

1. DBNPS Physical Security Plan (safeguards)
2. DB-OP-02544 Security Events or Threats (restricted)
3. RA-EP-02890 Emergency Response Organization Response to Security Events or Threats
4. NEI 99-01 HU1 EAL BASES DOCUMENT Rev. 0 Page 46 of 272

ATTACHMENT 1 EAL Bases Category: H - Hazards and Other Conditions Affecting Plant Safety Subcategory: 2 - Seismic Event Initiating Condition: Seismic event greater than OBE levels EAL: HU2.1 Unusual Event Seismic event > OBE as indicated by OBE alarm on seismic alarm panel C5764A Mode Applicability: ALL NEI 99-01 Basis: This IC addresses a seismic event that results in accelerations at the plant site greater than those specified for an Operating Basis Earthquake (OBE). An earthquake greater than an OBE but less than a Safe Shutdown Earthquake (SSE) should have no significant impact on safety-related systems, structures and components; however, some time may be required for the plant staff to ascertain the actual post-event condition of the plant (e.g., performs walk-downs and post-event inspections). Given the time necessary to perform walk-downs and inspections, and fully understand any impacts, this event represents a potential degradation of the level of safety of the plant. Event verification with external sources should not be necessary during or following an OBE. Earthquakes of this magnitude should be readily felt by on-site personnel and recognized as a seismic event (e.g., lateral accelerations in excess of 0.08g). The Shift Manager or Emergency Director may seek external verification if deemed appropriate (e.g., a call to the USGS, check internet news sources, etc.); however, the verification action must not preclude a timely emergency declaration. Depending upon the plant mode at the time of the event, escalation of the emergency classification level would be via IC CA6 or SA9. DBNPS Basis: Ground motion acceleration of 0.08g horizontal or 0.053g vertical is the Maximum Probable Earthquake as is considered generically as the Operating Basis Earthquake for DBNPS (ref. 1). Four triaxial strong motion accelerographs are installed within plant structures. A twelve-channel magnetic tape acceleration recording device is used to record all triaxial accelerometer transducer outputs. The recording device is located in the control room with a playback unit featuring a visual display. The time-history recorded at each accelerograph location can be analyzed to determine its corresponding peak acceleration values and to verify that site Operating Basis Earthquake (OBE) limits have not been exceeded. Immediate EAL BASES DOCUMENT Rev. 0 Page 47 of 272

ATTACHMENT 1 EAL Bases control room alarm indication of an earthquake of 0.08 g or greater is annunciated on the seismic control panel (C5764A), following seismic trigger actuation by the Containment Concrete Foundation accelerograph (ref. 2). RA-EP-02820 Earthquake provides the guidance for determining any required response actions if the OBE earthquake threshold is exceeded (ref. 3). When the Seismic Monitoring Cabinet key locked switch is placed in OFF, ALL OBE and SSE alarms and cabinet recording functions (TNC 8.3.3 functions 1 and 3 and the DBRM-EMER-5003 Seismic Event Detection function) are nonfunctional. Therefore, the Compensatory Measures listed in DBRM-EMER-5003, Equipment Important to Emergency Response for a loss of the Seismic Event Detection function are required to be employed by the operators to determine if an earthquake occurs and to determine the magnitude of the event in a timely manner" (ref. 5). To avoid inappropriate emergency classification resulting from spurious actuation of the seismic instrumentation or felt motion not attributable to seismic activity, an offsite agency (USGS, National Earthquake Information Center) can confirm that an earthquake has occurred in the area of the plant. However, such confirmation should not preclude a timely emergency declaration based on receipt of the OBE alarm. Contact the NEIC by calling (303) 273-8500. Select option #1, then #2 and inform the analyst you wish to confirm recent seismic activity near DBNPS. Provide the analyst with the following DBNPS coordinates: 41º 35' 49" north latitude, 83º 05' 16" west longitude and exact time of seismic activity (ref. 4). Alternatively, access near real-time seismic activity via the NEIC website: http://earthquake.usgs.gov/eqcenter/ DBNPS Basis Reference(s):

1. Updated FSAR Section 3.1 Seismic Design
2. Updated FSAR Section 3.7.4 Criteria for Seismic Instrumentation Program
3. RA-EP-02820 Earthquake
4. UFSAR Section 2.1.1 Site Location
5. CA 2012-04838-08
6. NEI 99-01 HU2 EAL BASES DOCUMENT Rev. 0 Page 48 of 272

ATTACHMENT 1 EAL Bases Category: H - Hazards and Other Conditions Affecting Plant Safety Subcategory: 3 - Natural or Technology Hazard Initiating Condition: Hazardous event EAL: HU3.1 Unusual Event A tornado strike within the PROTECTED AREA Mode Applicability: ALL NEI 99-01 Basis: This IC addresses hazardous events that are considered to represent a potential degradation of the level of safety of the plant. EAL HU3.1 addresses a tornado striking (touching down) within the PROTECTED AREA. Escalation of the emergency classification level would be based on ICs in Recognition Categories R, F, S or C. DBNPS Basis: Response actions associated with a tornado onsite is provided in RA-EP-02810 Tornado or High Winds (ref. 1). If damage is confirmed visually or by other in-plant indications, the event may be escalated to an Alert under EAL CA6.1 or SA9.1. A tornado striking (touching down) within the PROTECTED AREA warrants declaration of an Unusual Event regardless of the measured wind speed at the meteorological tower. DBNPS Basis Reference(s):

1. RA-EP-02810 Tornado or High Winds
2. NEI 99-01 HU3 EAL BASES DOCUMENT Rev. 0 Page 49 of 272

ATTACHMENT 1 EAL Bases Category: H - Hazards and Other Conditions Affecting Plant Safety Subcategory: 3 - Natural or Technology Hazard Initiating Condition: Hazardous event EAL: HU3.2 Unusual Event Internal room or area FLOODING of a magnitude sufficient to require manual or automatic electrical isolation of a SAFETY SYSTEM component needed for the current operating mode Mode Applicability: ALL NEI 99-01 Basis: This IC addresses hazardous events that are considered to represent a potential degradation of the level of safety of the plant. This EAL addresses FLOODING of a building room or area that results in operators isolating power to a SAFETY SYSTEM component due to water level or other wetting concerns. Classification is also required if the water level or related wetting causes an automatic isolation of a SAFETY SYSTEM component from its power source (e.g., a breaker or relay trip). To warrant classification, operability of the affected component must be required by Technical Specifications for the current operating mode. Escalation of the emergency classification level would be based on ICs in Recognition Categories R, F, S or C. DBNPS Basis: Areas containing safe shutdown equipment susceptible to internal FLOODING are Service Water Pump Room and adjacent areas, Component Cooling Water Pump Room and Emergency Core Cooling System Room(s) (ref.1). Refer to EAL CA6.1 or SA9.1 for internal FLOODING affecting one or more SAFETY SYSTEM trains. DBNPS Basis Reference(s):

1. RA-EP-02880 Internal Flooding
2. NEI 99-01 HU3 EAL BASES DOCUMENT Rev. 0 Page 50 of 272

ATTACHMENT 1 EAL Bases Category: H - Hazards and Other Conditions Affecting Plant Safety Subcategory: 3 - Natural or Technology Hazard Initiating Condition: Hazardous event EAL: HU3.3 Unusual Event Movement of personnel within the PROTECTED AREA is IMPEDED due to an offsite event involving hazardous materials (e.g., an offsite chemical spill or toxic gas release) Mode Applicability: ALL NEI 99-01 Basis: This IC addresses hazardous events that are considered to represent a potential degradation of the level of safety of the plant. This EAL addresses a hazardous materials event originating at an offsite location and of sufficient magnitude to IMPEDE the movement of personnel within the PROTECTED AREA. Escalation of the emergency classification level would be based on ICs in Recognition Categories R, F, S or C. DBNPS Basis: As used here, the term "offsite" means the areas external to the DBNPS PROTECTED AREA. DBNPS Basis Reference(s):

1. NEI 99-01 HU3 EAL BASES DOCUMENT Rev. 0 Page 51 of 272

ATTACHMENT 1 EAL Bases Category: H - Hazards and Other Conditions Affecting Plant Safety Subcategory: 3 - Natural or Technology Hazard Initiating Condition: Hazardous event EAL: HU3.4 Unusual Event A hazardous event that results in on-site conditions sufficient to prohibit the plant staff from accessing the site via personal vehicles (Note 7) Note 7: This EAL does not apply to routine traffic impediments such as fog, snow, ice, or vehicle breakdowns or accidents. Mode Applicability: ALL NEI 99-01 Basis: This IC addresses hazardous events that are considered to represent a potential degradation of the level of safety of the plant. This EAL addresses a hazardous event that causes an on-site impediment to vehicle movement and significant enough to prohibit the plant staff from accessing the site using personal vehicles. Examples of such an event include site FLOODING caused by a hurricane, heavy rains, up-river water releases, dam failure, etc., or an on-site train derailment blocking the access road. This EAL is not intended apply to routine impediments such as fog, snow, ice, or vehicle breakdowns or accidents, but rather to more significant conditions such as the Hurricane Andrew strike on Turkey Point in 1992, the flooding around the Cooper Station during the Midwest floods of 1993, or the flooding around Ft. Calhoun Station in 2011. Escalation of the emergency classification level would be based on ICs in Recognition Categories R, F, S or C. DBNPS Basis: As used here, the term "onsite" means the areas within the DBNPS OWNER CONTROLLED AREA. DBNPS Basis Reference(s):

1. NEI 99-01 HU3 EAL BASES DOCUMENT Rev. 0 Page 52 of 272

ATTACHMENT 1 EAL Bases Category: H - Hazards and Other Conditions Affecting Plant Safety Subcategory: 4 - FIRE Initiating Condition: FIRE potentially degrading the level of safety of the plant EAL: HU4.1 Unusual Event A FIRE is not extinguished within 15 min. of ANY of the following FIRE detection indications (Note 1): z Report from the field (i.e., visual observation) z Receipt of multiple (more than 1) fire alarms z Field verification of a single fire alarm AND The FIRE is located within ANY Table H-1 area Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Table H-1 Safe Shutdown Fire Areas

  • Containment
  • Control Room
  • Auxiliary Building
  • Intake Structure
  • Borated Water Storage Tank Mode Applicability:

ALL NEI 99-01 Basis: This IC addresses the magnitude and extent of FIRES that may be indicative of a potential degradation of the level of safety of the plant. For EAL HU4.1 the intent of the 15-minute duration is to size the FIRE and to discriminate against small FIRES that are readily extinguished (e.g., smoldering waste paper basket). In addition to alarms, other indications of a FIRE could be a drop in fire main pressure, automatic activation of a suppression system, etc. EAL BASES DOCUMENT Rev. 0 Page 53 of 272

ATTACHMENT 1 EAL Bases Upon receipt, operators will take prompt actions to confirm the validity of an initial fire alarm, indication, or report. For EAL assessment purposes, the emergency declaration clock starts at the time that the initial alarm, indication, or report was received, and not the time that a subsequent verification action was performed. Similarly, the fire duration clock also starts at the time of receipt of the initial alarm, indication or report. Basis-Related Requirements from Appendix R Appendix R to 10 CFR 50, states in part: Criterion 3 of Appendix A to this part specifies that "Structures, systems, and components important to safety shall be designed and located to minimize, consistent with other safety requirements, the probability and effect of fires and explosions." When considering the effects of fire, those systems associated with achieving and maintaining safe shutdown conditions assume major importance to safety because damage to them can lead to core damage resulting from loss of coolant through boil-off. Because fire may affect safe shutdown systems and because the loss of function of systems used to mitigate the consequences of design basis accidents under post-fire conditions does not per se impact public safety, the need to limit fire damage to systems required to achieve and maintain safe shutdown conditions is greater than the need to limit fire damage to those systems required to mitigate the consequences of design basis accidents. In addition, Appendix R to 10 CFR 50, requires, among other considerations, the use of 1-hour fire barriers for the enclosure of cable and equipment and associated non-safety circuits of one redundant train (G.2.c). As used in EAL HU4.2, the 30-minutes to verify a single alarm is well within this worst-case 1-hour time period. Depending upon the plant mode at the time of the event, escalation of the emergency classification level would be via IC CA6 or SA9. DBNPS Basis: The 15-minute requirement begins with a credible notification that a FIRE is occurring, or receipt of multiple VALID fire detection system alarms or field validation of a single fire alarm. The alarm is to be validated using available Control Room indications or alarms to prove that it is not spurious, or by reports from the field. Table H-1 Fire Areas are based on DBNPS Unit 1 Fire Hazard Analysis Report. Table H-1 Fire Areas include those structures containing functions and systems required for safe shutdown of the plant (SAFETY SYSTEMS) (ref. 1, 2). One of the following 4 things must occur within 15-minutes of the original FIRE indication / notification (ref. 3, 4): EAL BASES DOCUMENT Rev. 0 Page 54 of 272

ATTACHMENT 1 EAL Bases

1. The alarm must be proven to be spurious (there is no FIRE),
2. The FIRE must be extinguished,
3. The FIRE must be proven not to be in a Table H-1 area, or
4. The Unusual Event must be declared.

For the purposes of declaring an emergency event, the term "extinguished" means no visible flames. The 15 minute time period starts with EITHER:

1. A credible notification to the Control Room that a FIRE is occurring in a table H-1 area, (verbal notification from the scene) or
2. Control Room indication of multiple fire detection system alarms/actuations in a Table H-1 area DBNPS Basis Reference(s):
1. DBNPS Fire Hazard Analysis Report
2. DB-OP-02529 Fire Procedure
3. Condition Report 09-66994, Emergency Action Level Clarification
4. Condition Report 09-69475, White Finding Identified For Inadequate Emergency Classification of Event
5. NEI 99-01 HU4 EAL BASES DOCUMENT Rev. 0 Page 55 of 272

ATTACHMENT 1 EAL Bases Category: H - Hazards and Other Conditions Affecting Plant Safety Subcategory: 4 - FIRE Initiating Condition: FIRE potentially degrading the level of safety of the plant EAL: HU4.2 Unusual Event Receipt of a single fire alarm (i.e., no other indications of a FIRE) AND The fire alarm is indicating a FIRE within ANY Table H-1 area AND The existence of a FIRE is not verified within 30 min. of alarm receipt (Note 1) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Table H-1 Safe Shutdown Fire Areas

  • Containment
  • Control Room
  • Auxiliary Building
  • Intake Structure
  • Borated Water Storage Tank Mode Applicability:

ALL NEI 99-01 Basis: This IC addresses the magnitude and extent of FIRES that may be indicative of a potential degradation of the level of safety of the plant. This EAL addresses receipt of a single fire alarm, and the existence of a FIRE is not verified (i.e., proved or disproved) within 30-minutes of the alarm. Upon receipt, operators will take prompt actions to confirm the validity of a single fire alarm. For EAL assessment purposes, the 30-minute clock starts at the time that the initial alarm was received, and not the time that a subsequent verification action was performed. EAL BASES DOCUMENT Rev. 0 Page 56 of 272

ATTACHMENT 1 EAL Bases A single fire alarm, absent other indication(s) of a FIRE, may be indicative of equipment failure or a spurious activation, and not an actual FIRE. For this reason, additional time is allowed to verify the validity of the alarm. The 30-minute period is a reasonable amount of time to determine if an actual FIRE exists; however, after that time, and absent information to the contrary, it is assumed that an actual FIRE is in progress. If an actual FIRE is verified by a report from the field, then HU4.1 is immediately applicable, and the emergency must be declared if the FIRE is not extinguished within 15-minutes of the report. If the alarm is verified to be due to an equipment failure or a spurious activation, and this verification occurs within 30-minutes of the receipt of the alarm, then this EAL is not applicable and no emergency declaration is warranted. Basis-Related Requirements from Appendix R Appendix R to 10 CFR 50, states in part: Criterion 3 of Appendix A to this part specifies that "Structures, systems, and components important to safety shall be designed and located to minimize, consistent with other safety requirements, the probability and effect of fires and explosions." When considering the effects of fire, those systems associated with achieving and maintaining safe shutdown conditions assume major importance to safety because damage to them can lead to core damage resulting from loss of coolant through boil-off. Because fire may affect safe shutdown systems and because the loss of function of systems used to mitigate the consequences of design basis accidents under post-fire conditions does not per se impact public safety, the need to limit fire damage to systems required to achieve and maintain safe shutdown conditions is greater than the need to limit fire damage to those systems required to mitigate the consequences of design basis accidents. In addition, Appendix R to 10 CFR 50, requires, among other considerations, the use of 1-hour fire barriers for the enclosure of cable and equipment and associated non-safety circuits of one redundant train (G.2.c). As used in this EAL, the 30-minutes to verify a single alarm is well within this worst-case 1-hour time period. Depending upon the plant mode at the time of the event, escalation of the emergency classification level would be via IC CA6 or SA9. DBNPS Basis: The 30-minute requirement begins upon receipt of a single VALID fire detection system alarm. The alarm is to be validated using available Control Room indications or alarms to prove that it is not spurious, or by reports from the field. Actual field reports must be made within the 30-minute time limit or a classification must be made. If a FIRE is verified to be occurring by field report, classification shall be made based on EAL HU4.1. EAL BASES DOCUMENT Rev. 0 Page 57 of 272

ATTACHMENT 1 EAL Bases Table H-1 Fire Areas are based on DBNPS-1465.00-00-0006 Design Basis Specification for the Plant Fire Protection and AP/0/A/5500/045 Plant Fire. Table H-1 Fire Areas include those structures containing functions and systems required for safe shutdown of the plant (SAFETY SYSTEMS) (ref. 1, 2). One of the following 4 things must occur within 30 minutes of the original FIRE indication / notification (ref. 3, 4):

1. The alarm must be proven to be spurious (there is no FIRE),
2. The FIRE must be extinguished,
3. The FIRE must be proven not to be in a Table H-1 area, or
4. The Unusual Event must be declared.

For the purposes of declaring an emergency event, the term "extinguished" means no visible flames. The 30 minute time period starts with Control Room indication of a fire detection system alarm/actuation (any single alarm or a single actuation of a system). DBNPS Basis Reference(s):

1. DBNPS Fire Hazard Analysis Report
2. DB-OP-02529 Fire Procedure
3. Condition Report 09-66994, Emergency Action Level Clarification
4. Condition Report 09-69475, White Finding Identified For Inadequate Emergency Classification of Event
5. NEI 99-01 HU4 EAL BASES DOCUMENT Rev. 0 Page 58 of 272

ATTACHMENT 1 EAL Bases Category: H - Hazards and Other Conditions Affecting Plant Safety Subcategory: 4 - FIRE Initiating Condition: FIRE potentially degrading the level of safety of the plant EAL: HU4.3 Unusual Event A FIRE within the plant PROTECTED AREA not extinguished within 60 min. of the initial report, alarm or indication (Note 1) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Mode Applicability: ALL NEI 99-01 Basis: This IC addresses the magnitude and extent of FIRES that may be indicative of a potential degradation of the level of safety of the plant. In addition to a FIRE addressed by EAL HU4.1 or HU4.2, a FIRE within the plant PROTECTED AREA not extinguished within 60-minutes may also potentially degrade the level of plant safety. Depending upon the plant mode at the time of the event, escalation of the emergency classification level would be via IC CA6 or SA9. DBNPS Basis: None DBNPS Basis Reference(s):

1. NEI 99-01 HU4 EAL BASES DOCUMENT Rev. 0 Page 59 of 272

ATTACHMENT 1 EAL Bases Category: H - Hazards and Other Conditions Affecting Plant Safety Subcategory: 4 - FIRE Initiating Condition: FIRE potentially degrading the level of safety of the plant EAL: HU4.4 Unusual Event A FIRE within the plant PROTECTED AREA that requires firefighting support by an offsite fire response agency to extinguish Mode Applicability: ALL NEI 99-01 Basis: This IC addresses the magnitude and extent of FIRES that may be indicative of a potential degradation of the level of safety of the plant. If a FIRE within the plant PROTECTED AREA is of sufficient size to require a response by an offsite firefighting agency (e.g., a local town Fire Department), then the level of plant safety is potentially degraded. The dispatch of an offsite firefighting agency to the site requires an emergency declaration only if it is needed to actively support firefighting efforts because the FIRE is beyond the capability of the Fire Brigade to extinguish. Declaration is not necessary if the agency resources are placed on stand-by, or supporting post-extinguishment recovery or investigation actions. Depending upon the plant mode at the time of the event, escalation of the emergency classification level would be via IC CA6 or SA9. DBNPS Basis: None DBNPS Basis Reference(s):

1. NEI 99-01 HU4 EAL BASES DOCUMENT Rev. 0 Page 60 of 272

ATTACHMENT 1 EAL Bases Category: H - Hazards and Other Conditions Affecting Plant Safety Subcategory: 5 - Hazardous Gases Initiating Condition: Gaseous release IMPEDING access to equipment necessary for normal plant operations, cooldown or shutdown EAL: HA5.1 Alert Release of a toxic, corrosive, asphyxiant or flammable gas into ANY Table H-2 Safe Shutdown Rooms or Areas AND Entry into the room or area is prohibited or IMPEDED (Note 5) Note 5: If the equipment in the listed room or area was already inoperable or out-of-service before the event occurred, then no emergency classification is warranted. Table H-2 Safe Shutdown Rooms/Areas Room/Area Mode Applicability Aux Bldg. 565 ele. Room 236 #2 Mechanical 1, 2, 3 Penetration Room Aux Bldg. 585 ele. Room 304 corridor outside 1, 2, 3

            #3 Mechanical Penetration Room Aux Bldg. 603 ele. Room 427 - #2 Electrical 1, 2, 3 Penetration Room Mode Applicability:

1 - Power Operation, 2 - Startup, 3 - Hot Standby NEI 99-01 Basis: This IC addresses an event involving a release of a hazardous gas that precludes or IMPEDES access to equipment necessary to maintain normal plant operation, or required for a normal plant cooldown and shutdown. This condition represents an actual or potential substantial degradation of the level of safety of the plant. An Alert declaration is warranted if entry into the affected room/area is, or may be, procedurally required during the plant operating mode in effect at the time of the gaseous release. The emergency classification is not contingent upon whether entry is actually necessary at the time of the release. Evaluation of the IC and EAL do not require atmospheric sampling; it only requires the Emergency Director judgment that the gas concentration in the affected room/area is sufficient EAL BASES DOCUMENT Rev. 0 Page 61 of 272

ATTACHMENT 1 EAL Bases to preclude or significantly IMPEDE procedurally required access. This judgment may be based on a variety of factors including an existing job hazard analysis, report of ill effects on personnel, advice from a subject matter expert or operating experience with the same or similar hazards. Access should be considered as IMPEDED if extraordinary measures are necessary to facilitate entry of personnel into the affected room/area (e.g., requiring use of protective equipment, such as SCBAs, that is not routinely employed). An emergency declaration is not warranted if ANY of the following conditions apply: z The plant is in an operating mode different than the mode specified for the affected room/area (i.e., entry is not required during the operating mode in effect at the time of the gaseous release). For example, the plant is in Mode 1 when the gaseous release occurs, and the procedures used for normal operation, cooldown and shutdown do not require entry into the affected room until Mode 4. z The gas release is a planned activity that includes compensatory measures, which address the temporary inaccessibility of a room or area (e.g., fire suppression system testing). z The action for which room/area entry is required is of an administrative or record keeping nature (e.g., normal rounds or routine inspections). z The access control measures are of a conservative or precautionary nature, and would not actually prevent or IMPEDE a required action. z If the equipment in the listed room or area was already inoperable, or out-of-service, before the event occurred, then no emergency should be declared since the event will have no adverse impact beyond that already allowed by Technical Specifications at the time of the event. An asphyxiant is a gas capable of reducing the level of oxygen in the body to dangerous levels. Most commonly, asphyxiants work by merely displacing air in an enclosed environment. This reduces the concentration of oxygen below the normal level of around 19%, which can lead to breathing difficulties, unconsciousness or even death. A steam leak of significant magnitude that prevents access to the area should be considered an asphyxiant. This EAL does not apply to firefighting activities that automatically or manually activate a fire suppression system in an area. Escalation of the emergency classification level would be via Recognition Category R, C or F ICs. DBNPS Basis: If the equipment in the listed room or area was already inoperable, or out-of-service, before the event occurred, then no emergency should be declared since the event will have no adverse impact beyond that already allowed by Technical Specifications at the time of the event. The list of plant rooms or areas with entry-related mode applicability identified specify those rooms or areas that contain equipment which require a manual/local action as specified in operating procedures used for normal plant operation, cooldown and shutdown. Rooms or EAL BASES DOCUMENT Rev. 0 Page 62 of 272

ATTACHMENT 1 EAL Bases areas in which actions of a contingent or emergency nature would be performed (e.g., an action to address an off-normal or emergency condition such as emergency repairs, corrective measures or emergency operations) are not included. In addition, the list specifies the plant mode(s) during which entry would be required for each room or area (ref. 1). DBNPS Basis Reference(s):

1. Attachment 3 Safe Shutdown Rooms/Areas Tables R-2 & H-2 Bases
2. NEI 99-01 HA5 EAL BASES DOCUMENT Rev. 0 Page 63 of 272

ATTACHMENT 1 EAL Bases Category: H - Hazards and Other Conditions Affecting Plant Safety Subcategory: 6 - Control Room Evacuation Initiating Condition: Inability to control a key safety function from outside the Control Room EAL: HS6.1 Site Area Emergency An event has resulted in plant control being transferred from the Control Room to the Auxiliary Shutdown Panel AND Control of ANY of the following key safety functions is not reestablished within 15 min. (Note 1): z Reactivity z Core Cooling (RCS inventory) z RCS heat removal (ability to maintain heat sink) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Mode Applicability: 1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4- Hot Shutdown NEI 99-01 Basis: This IC addresses an evacuation of the Control Room that results in transfer of plant control to alternate locations, and the control of a key safety function cannot be reestablished in a timely manner. The failure to gain control of a key safety function following a transfer of plant control to alternate locations is a precursor to a challenge to one or more fission product barriers within a relatively short period of time. The determination of whether or not control is established at the remote safe shutdown location(s) is based on Emergency Director judgment. The Emergency Director is expected to make a reasonable, informed judgment within 15-minutes whether or not the operating staff has control of key safety functions from the remote safe shutdown location(s). Escalation of the emergency classification level would be via IC FG1 or CG1. EAL BASES DOCUMENT Rev. 0 Page 64 of 272

ATTACHMENT 1 EAL Bases DBNPS Basis: Shift Manager determines the Control Room requires evacuation. Control Room may become uninhabitable by FIRE, dense smoke, noxious fumes, bomb threat in or adjacent to the Control Room, or other life threatening conditions (ref. 1, 2). The 15-minute time for transfer is based on analysis or assessments as to how quickly control must be reestablished without core uncovering and/or core damage. The 15-minute time period starts when EITHER 1) control of the plant is no longer maintained in the Control Room or 2) the last operator has left the Control Room, whichever comes first. DBNPS Basis Reference(s):

1. DB-OP-02508 Control Room Evacuation
2. DB-OP 02519 Serious Control Room Fire
3. NEI 99-01 HS6 EAL BASES DOCUMENT Rev. 0 Page 65 of 272

ATTACHMENT 1 EAL Bases Category: H - Hazards and Other Conditions Affecting Plant Safety Subcategory: 6 - Control Room Evacuation Initiating Condition: Control Room evacuation resulting in transfer of plant control to alternate locations EAL: HA6.1 Alert An event has resulted in plant control being transferred from the Control Room to the Auxiliary Shutdown Panel Mode Applicability: ALL NEI 99-01 Basis: This IC addresses an evacuation of the Control Room that results in transfer of plant control to alternate locations outside the Control Room. The loss of the ability to control the plant from the Control Room is considered to be a potential substantial degradation in the level of plant safety. Following a Control Room evacuation, control of the plant will be transferred to alternate shutdown locations. The necessity to control a plant shutdown from outside the Control Room, in addition to responding to the event that required the evacuation of the Control Room, will present challenges to plant operators and other on-shift personnel. Activation of the ERO and emergency response facilities will assist in responding to these challenges. This EAL is only applicable when the decision has been made to evacuate the Control Room, and not when conditions that may require evacuation are being evaluated by referring to either DB-OP-02519 or DB-OP-02508 (ref. 1, 2). Escalation of the emergency classification level would be via IC HS6. DBNPS Basis: Shift Manager (SM) determines Control Room requires evacuation. Control Room inhabitability may be caused by FIRE, dense smoke, noxious fumes, bomb threat in or adjacent to the Control Room, or other life threatening conditions (ref. 1, 2). Inability to establish plant control from outside the Control Room escalates this event to a Site Area Emergency per EAL HS6.1. EAL BASES DOCUMENT Rev. 0 Page 66 of 272

ATTACHMENT 1 EAL Bases DBNPS Basis Reference(s):

1. DB-OP-02508 Control Room Evacuation
2. DB-OP 02519 Serious Control Room Fire
3. NEI 99-01 HA6 EAL BASES DOCUMENT Rev. 0 Page 67 of 272

ATTACHMENT 1 EAL Bases Category: H - Hazards and Other Conditions Affecting Plant Safety Subcategory: 7 - Emergency Director Judgment Initiating Condition: Other conditions exist which in the judgment of the Emergency Director warrant declaration of a General Emergency EAL: HG7.1 General Emergency Other conditions exist which in the judgment of the Emergency Director indicate that events are in progress or have occurred which involve actual or IMMINENT substantial core degradation or melting with potential for loss of containment integrity or HOSTILE ACTION that results in an actual loss of physical control of the facility. Releases can be reasonably expected to exceed EPA Protective Action Guideline exposure levels offsite for more than the immediate site area. Mode Applicability: ALL NEI 99-01 Basis: This IC addresses unanticipated conditions not addressed explicitly elsewhere but that warrant declaration of an emergency because conditions exist which are believed by the Emergency Director to fall under the emergency classification level description for a General Emergency. DBNPS Basis: The Emergency Director is the designated onsite individual having the responsibility and authority for implementing the DBNPS Emergency Response Plan. The Operations Shift Manager(SM) initially acts in the capacity of the Emergency Director and takes actions as outlined in the Emergency Plan implementing procedures. If required by the emergency classification or if deemed appropriate by the Emergency Director, emergency response personnel are notified and instructed to report to their emergency response locations. In this manner, the individual usually in charge of activities in the Control Room is responsible for initiating the necessary emergency response, but Plant Management is expected to manage the emergency response as soon as available to do so in anticipation of the possible wide-ranging responsibilities associated with managing a major emergency (ref. 1). Releases can reasonably be expected to exceed EPA PAG plume exposure levels outside the SITE BOUNDARY. EAL BASES DOCUMENT Rev. 0 Page 68 of 272

ATTACHMENT 1 EAL Bases DBNPS Basis Reference(s):

1. DBNPS Emergency Plan section 5.2 DBNPS Emergency Management
2. NEI 99-01 HG7 EAL BASES DOCUMENT Rev. 0 Page 69 of 272

ATTACHMENT 1 EAL Bases Category: H - Hazards and Other Conditions Affecting Plant Safety Subcategory: 7 - Emergency Director Judgment Initiating Condition: Other conditions exist which in the judgment of the Emergency Director warrant declaration of a Site Area Emergency EAL: HS7.1 Site Area Emergency Other conditions exist which in the judgment of the Emergency Director indicate that events are in progress or have occurred which involve actual or likely major failures of plant functions needed for protection of the public or HOSTILE ACTION that results in intentional damage or malicious acts, (1) toward site personnel or equipment that could lead to the likely failure of or, (2) that prevent effective access to equipment needed for the protection of the public. ANY releases are not expected to result in exposure levels which exceed EPA Protective Action Guideline exposure levels beyond the SITE BOUNDARY. Mode Applicability: ALL NEI 99-01 Basis: This IC addresses unanticipated conditions not addressed explicitly elsewhere but that warrant declaration of an emergency because conditions exist which are believed by the Emergency Director to fall under the emergency classification level description for a Site Area Emergency. DBNPS Basis: The Emergency Director is the designated onsite individual having the responsibility and authority for implementing the DBNPS Emergency Response Plan. The Operations Shift Manager (SM) initially acts in the capacity of the Emergency Director and takes actions as outlined in the Emergency Plan implementing procedures. If required by the emergency classification or if deemed appropriate by the Emergency Director, emergency response personnel are notified and instructed to report to their emergency response locations. In this manner, the individual usually in charge of activities in the Control Room is responsible for initiating the necessary emergency response, but Plant Management is expected to manage the emergency response as soon as available to do so in anticipation of the possible wide-ranging responsibilities associated with managing a major emergency (ref. 1). DBNPS Basis Reference(s):

1. DBNPS Emergency Plan section 5.2 DBNPS Emergency Management
2. NEI 99-01 HS7 EAL BASES DOCUMENT Rev. 0 Page 70 of 272

ATTACHMENT 1 EAL Bases Category: H - Hazards and Other Conditions Affecting Plant Safety Subcategory: 7 - Emergency Director Judgment Initiating Condition: Other conditions exist which in the judgment of the Emergency Director warrant declaration of an Alert EAL: HA7.1 Alert Other conditions exist which, in the judgment of the Emergency Director, indicate that events are in progress or have occurred which involve an actual or potential substantial degradation of the level of safety of the plant or a security event that involves probable life threatening risk to site personnel or damage to site equipment because of HOSTILE ACTION. ANY releases are expected to be limited to small fractions of the EPA Protective Action Guideline exposure levels. Mode Applicability: ALL NEI 99-01 Basis: This IC addresses unanticipated conditions not addressed explicitly elsewhere but that warrant declaration of an emergency because conditions exist which are believed by the Emergency Director to fall under the emergency classification level description for an Alert. DBNPS Basis: The Emergency Director is the designated onsite individual having the responsibility and authority for implementing the DBNPS Emergency Response Plan. The Operations Shift Manager (SM) initially acts in the capacity of the Emergency Director and takes actions as outlined in the Emergency Plan implementing procedures. If required by the emergency classification or if deemed appropriate by the Emergency Director, emergency response personnel are notified and instructed to report to their emergency response locations. In this manner, the individual usually in charge of activities in the Control Room is responsible for initiating the necessary emergency response, but Plant Management is expected to manage the emergency response as soon as available to do so in anticipation of the possible wide-ranging responsibilities associated with managing a major emergency (ref.1). DBNPS Basis Reference(s):

1. DBNPS Emergency Plan section 5.2 DBNPS Emergency Management
2. NEI 99-01 HA7 EAL BASES DOCUMENT Rev. 0 Page 71 of 272

ATTACHMENT 1 EAL Bases Category: H - Hazards and Other Conditions Affecting Plant Safety Subcategory: 7 - Emergency Director Judgment Initiating Condition: Other conditions exist which in the judgment of the Emergency Director warrant declaration of a UE EAL: HU7.1 Unusual Event Other conditions exist which in the judgment of the Emergency Director indicate that events are in progress or have occurred which indicate a potential degradation of the level of safety of the plant or indicate a security threat to facility protection has been initiated. No releases of radioactive material requiring offsite response or monitoring are expected unless further degradation of SAFETY SYSTEMS occurs. Mode Applicability: ALL NEI 99-01 Basis: This IC addresses unanticipated conditions not addressed explicitly elsewhere but that warrant declaration of an emergency because conditions exist which are believed by the Emergency Director to fall under the emergency classification level description for an Unusual Event. DBNPS Basis: The Emergency Director is the designated onsite individual having the responsibility and authority for implementing the DBNPS Emergency Response Plan. The Operations Shift Manager (SM) initially acts in the capacity of the Emergency Director and takes actions as outlined in the Emergency Plan implementing procedures. If required by the emergency classification or if deemed appropriate by the Emergency Director, emergency response personnel are notified and instructed to report to their emergency response locations. In this manner, the individual usually in charge of activities in the Control Room is responsible for initiating the necessary emergency response, but Plant Management is expected to manage the emergency response as soon as available to do so in anticipation of the possible wide-ranging responsibilities associated with managing a major emergency (ref. 1). DBNPS Basis Reference(s):

1. DBNPS Emergency Plan section 5.2 DBNPS Emergency Management
2. NEI 99-01 HU7 EAL BASES DOCUMENT Rev. 0 Page 72 of 272

ATTACHMENT 1 EAL Bases Category R - Abnormal Rad Release / Rad Effluent EAL Group: ANY (EALs in this category are applicable to ANY plant condition, hot or cold.) Many EALs are based on actual or potential degradation of fission product barriers because of the elevated potential for offsite radioactivity release. Degradation of fission product barriers though is not always apparent via non-radiological symptoms. Therefore, direct indication of elevated radiological effluents or area radiation levels are appropriate symptoms for emergency classification. At lower levels, abnormal radioactivity releases may be indicative of a failure of containment systems or precursors to more significant releases. At higher release rates, offsite radiological conditions may result which require offsite protective actions. Elevated area radiation levels in plant may also be indicative of the failure of containment systems or preclude access to plant vital equipment necessary to ensure plant safety. Events of this category pertain to the following subcategories:

1. Radiological Effluent Direct indication of effluent radiation monitoring systems provides a rapid assessment mechanism to determine releases in excess of classifiable limits. Projected offsite doses, actual offsite field measurements or measured release rates via sampling indicate doses or dose rates above classifiable limits.
2. Irradiated Fuel Event Conditions indicative of a loss of adequate shielding or damage to irradiated fuel may preclude access to vital plant areas or result in radiological releases that warrant emergency classification.
3. Area Radiation Levels Sustained general area radiation levels, which may preclude access to areas requiring continuous occupancy, also warrant emergency classification.

EAL BASES DOCUMENT Rev. 0 Page 73 of 272

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 1 - Radiological Effluent Initiating Condition: Release of gaseous radioactivity resulting in offsite dose greater than 1,000 mrem TEDE or 5,000 mrem thyroid CDE EAL: RG1.1 General Emergency Station Vent Channel 1 Noble Gas (RE 4598 AB/BB) > 8.4E +00 Ci/cc for 15 minutes or longer (Notes 1, 2, 3, 4) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Note 2: If an ongoing release is detected and the release start time is unknown, assume that the release duration has exceeded the specified time limit. Note 3: If the effluent flow past an effluent monitor is known to have stopped, indicating that the release path is isolated, the effluent monitor reading is no longer VALID for classification purposes. Note 4: The pre-calculated effluent monitor values presented in EALs RA1.1, RS1.1 and RG1.1 should be used for emergency classification assessments until the results from a dose assessment using actual meteorology are available. Mode Applicability: ALL NEI 99-01 Basis: This IC addresses a release of gaseous radioactivity that results in projected or actual offsite doses greater than or equal to the EPA Protective Action Guides (PAGs). It includes both monitored and un-monitored releases. Releases of this magnitude will require implementation of protective actions for the public. Radiological effluent EALs are also included to provide a basis for classifying events and conditions that cannot be readily or appropriately classified on the basis of plant conditions alone. The inclusion of both plant condition and radiological effluent EALs more fully addresses the spectrum of possible accident events and conditions. The TEDE dose is set at the EPA PAG of 1,000 mrem while the 5,000 mrem thyroid CDE was established in consideration of the 1:5 ratio of the EPA PAG for TEDE and thyroid CDE. Classification based on effluent monitor readings assumes that a release path to the environment is established. If the effluent flow past an effluent monitor is known to have stopped due to actions to isolate the release path, then the effluent monitor reading is no longer VALID for classification purposes. EAL BASES DOCUMENT Rev. 0 Page 74 of 272

ATTACHMENT 1 EAL Bases DBNPS Basis: The DBNPS gaseous effluent limits for RG1.1 are based on values that equate to an offsite dose greater than EITHER:

  • 1000 mrem TEDE
  • 5000 mrem CDE Thyroid Note: EAL thresholds reflect the State of Ohio guidance to utilities within their jurisdiction to evaluate the consequences of radiological releases in terms of a Child Thyroid PAG rather than an EPA-400 CDE Thyroid PAG.

The station vent is the primary effluent monitor release point. Other pathways such as Safety and relief valves, as well as AFW and MSSV, do not have direct effluent release monitors. Releases from these points would be verified and monitored by RG1.3 survey readings. The GE Station Vent gaseous effluent monitor value corresponds to calculated doses of 100% of the EPA Protective Action Guidelines (TEDE or CDE Thyroid) per EP-EALCALC-DB-0703 Radiological Gaseous Effluent EAL Values (EALs RG1, RS1, RA1 and RU1) (ref. 1). DBNPS Basis Reference(s):

1. EP-EALCALC-DB-0703 Rev. 2 Radiological Gaseous Effluent EAL Values (EALs RG1, RS1, RA1 and RU1)
2. NEI 99-01 AG1 EAL BASES DOCUMENT Rev. 0 Page 75 of 272

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 1 - Radiological Effluent Initiating Condition: Release of gaseous radioactivity resulting in offsite dose greater than 1,000 mrem TEDE or 5,000 mrem thyroid CDE EAL: RG1.2 General Emergency Dose assessment using actual meteorology indicates doses > 1,000 mrem TEDE or 5,000 mrem thyroid CDE at or beyond the SITE BOUNDARY (Note 4) Note 4: The pre-calculated effluent monitor values presented in EALs RA1.1, RS1.1 and RG1.1 should be used for emergency classification assessments until the results from a dose assessment using actual meteorology are available. Mode Applicability: ALL NEI 99-01 Basis: This IC addresses a release of gaseous radioactivity that results in projected or actual offsite doses greater than or equal to the EPA Protective Action Guides (PAGs). It includes both monitored and un-monitored releases. Releases of this magnitude will require implementation of protective actions for the public. Radiological effluent EALs are also included to provide a basis for classifying events and conditions that cannot be readily or appropriately classified on the basis of plant conditions alone. The inclusion of both plant condition and radiological effluent EALs more fully addresses the spectrum of possible accident events and conditions. The TEDE dose is set at the EPA PAG of 1,000 mrem while the 5,000 mrem thyroid CDE was established in consideration of the 1:5 ratio of the EPA PAG for TEDE and thyroid CDE. Classification based on effluent monitor readings assumes that a release path to the environment is established. If the effluent flow past an effluent monitor is known to have stopped due to actions to isolate the release path, then the effluent monitor reading is no longer VALID for classification purposes. DBNPS Basis: Dose assessments are performed by computer-based methods (ref. 1, 2). Note: EAL thresholds reflect the State of Ohio guidance to utilities within their jurisdiction to evaluate the consequences of radiological releases in terms of a Child Thyroid PAG rather than an EPA-400 CDE Thyroid PAG. EAL BASES DOCUMENT Rev. 0 Page 76 of 272

ATTACHMENT 1 EAL Bases DBNPS Basis Reference(s):

1. NOP-LP-5402 Davis-Besse MIDAS Dose Assessment Software
2. RA-EP-02240 Offsite Dose Assessment
3. NEI 99-01 AG1 EAL BASES DOCUMENT Rev. 0 Page 77 of 272

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 1 - Radiological Effluent Initiating Condition: Release of gaseous radioactivity resulting in offsite dose greater than 1,000 mrem TEDE or 5,000 mrem thyroid CDE EAL: RG1.3 General Emergency Field survey results indicate EITHER of the following at or beyond the SITE BOUNDARY: z Closed window dose rates > 1,000 mR/hr expected to continue for 60 min. z Analyses of field survey samples indicate thyroid CDE > 5,000 mrem for 60 min. of inhalation. (Notes 1, 2) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Note 2: If an ongoing release is detected and the release start time is unknown, assume that the release duration has exceeded the specified time limit. Mode Applicability: ALL NEI 99-01 Basis: This IC addresses a release of gaseous radioactivity that results in projected or actual offsite doses greater than or equal to the EPA Protective Action Guides (PAGs). It includes both monitored and un-monitored releases. Releases of this magnitude will require implementation of protective actions for the public. Radiological effluent EALs are also included to provide a basis for classifying events and conditions that cannot be readily or appropriately classified on the basis of plant conditions alone. The inclusion of both plant condition and radiological effluent EALs more fully addresses the spectrum of possible accident events and conditions. The TEDE dose is set at the EPA PAG of 1,000 mrem while the 5,000 mrem thyroid CDE was established in consideration of the 1:5 ratio of the EPA PAG for TEDE and thyroid CDE. EAL BASES DOCUMENT Rev. 0 Page 78 of 272

ATTACHMENT 1 EAL Bases DBNPS Basis: NOP-LP-5015 FENOC Field Monitoring Teams Radiation Monitoring Teams Field Surveys provides guidance for emergency or post-accident radiological environmental monitoring (ref. 1). Note: EAL thresholds reflect the State of Ohio guidance to utilities within their jurisdiction to evaluate the consequences of radiological releases in terms of a Child Thyroid PAG rather than an EPA-400 CDE Thyroid PAG. DBNPS Basis Reference(s):

1. NOP-LP-5015 FENOC Field Monitoring Teams Radiation Monitoring Teams Field Surveys
2. NEI 99-01 AG1 EAL BASES DOCUMENT Rev. 0 Page 79 of 272

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 1 - Radiological Effluent Initiating Condition: Release of gaseous radioactivity resulting in offsite dose greater than 100 mrem TEDE or 500 mrem thyroid CDE EAL: RS1.1 Site Area Emergency Station Vent Channel 1 Noble Gas (RE 4598 AB/BB) > 8.4E -01 Ci/cc for 15 minutes or longer (Notes 1, 2, 3, 4) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Note 2: If an ongoing release is detected and the release start time is unknown, assume that the release duration has exceeded the specified time limit. Note 3: If the effluent flow past an effluent monitor is known to have stopped, indicating that the release path is isolated, the effluent monitor reading is no longer VALID for classification purposes. Note 4: The pre-calculated effluent monitor values presented in EALs RA1.1, RS1.1 and RG1.1 should be used for emergency classification assessments until the results from a dose assessment using actual meteorology are available. Mode Applicability: ALL NEI 99-01 Basis: This IC addresses a release of gaseous radioactivity that results in projected or actual offsite doses greater than or equal to 10% of the EPA Protective Action Guides (PAGs). It includes both monitored and un-monitored releases. Releases of this magnitude are associated with the failure of plant systems needed for the protection of the public. Radiological effluent EALs are also included to provide a basis for classifying events and conditions that cannot be readily or appropriately classified on the basis of plant conditions alone. The inclusion of both plant condition and radiological effluent EALs more fully addresses the spectrum of possible accident events and conditions. The TEDE dose is set at 10% of the EPA PAG of 1,000 mrem while the 500 mrem thyroid CDE was established in consideration of the 1:5 ratio of the EPA PAG for TEDE and thyroid CDE. Classification based on effluent monitor readings assumes that a release path to the environment is established. If the effluent flow past an effluent monitor is known to have stopped due to actions to isolate the release path, then the effluent monitor reading is no longer VALID for classification purposes. EAL BASES DOCUMENT Rev. 0 Page 80 of 272

ATTACHMENT 1 EAL Bases Escalation of the emergency classification level would be via IC RG1. DBNPS Basis: The DBNPS gaseous effluent limits for RS1.1 are based on values that equate to an offsite dose greater than EITHER:

  • 100 mrem TEDE
  • 500 mrem CDE Thyroid Note: EAL thresholds reflect the State of Ohio guidance to utilities within their jurisdiction to evaluate the consequences of radiological releases in terms of a Child Thyroid PAG rather than an EPA-400 CDE Thyroid PAG.

The station vent is the primary effluent monitor release point. Other pathways such as Safety and relief valves, as well as AFW and MSSV, do not have direct effluent release monitors. Releases from these points would be verified and monitored by RS1.3 survey readings. The SAE Station Vent gaseous effluent monitor value corresponds to calculated doses of 10% of the EPA Protective Action Guidelines (TEDE or CDE Thyroid) per EP-EALCALC-DB-0703 Radiological Gaseous Effluent EAL Values (EALs RG1, RS1, RA1 and RU1) (ref. 1). DBNPS Basis Reference(s):

1. EP-EALCALC-DB-0703 Rev.2 Radiological Gaseous Effluent EAL Values (EALs RG1, RS1, RA1 and RU1)
2. NEI 99-01 AS1 EAL BASES DOCUMENT Rev. 0 Page 81 of 272

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 1 - Radiological Effluent Initiating Condition: Release of gaseous radioactivity resulting in offsite dose greater than 100 mrem TEDE or 500 mrem thyroid CDE EAL: RS1.2 Site Area Emergency Dose assessment using actual meteorology indicates doses > 100 mrem TEDE or 500 mrem thyroid CDE at or beyond the SITE BOUNDARY (Note 4) Note 4: The pre-calculated effluent monitor values presented in EALs RA1.1, RS1.1 and RG1.1 should be used for emergency classification assessments until the results from a dose assessment using actual meteorology are available. Mode Applicability: ALL NEI 99-01 Basis: This IC addresses a release of gaseous radioactivity that results in projected or actual offsite doses greater than or equal to 10% of the EPA Protective Action Guides (PAGs). It includes both monitored and un-monitored releases. Releases of this magnitude are associated with the failure of plant systems needed for the protection of the public. Radiological effluent EALs are also included to provide a basis for classifying events and conditions that cannot be readily or appropriately classified on the basis of plant conditions alone. The inclusion of both plant condition and radiological effluent EALs more fully addresses the spectrum of possible accident events and conditions. The TEDE dose is set at 10% of the EPA PAG of 1,000 mrem while the 500 mrem thyroid CDE was established in consideration of the 1:5 ratio of the EPA PAG for TEDE and thyroid CDE. Classification based on effluent monitor readings assumes that a release path to the environment is established. If the effluent flow past an effluent monitor is known to have stopped due to actions to isolate the release path, then the effluent monitor reading is no longer VALID for classification purposes. Escalation of the emergency classification level would be via IC RG1. EAL BASES DOCUMENT Rev. 0 Page 82 of 272

ATTACHMENT 1 EAL Bases DBNPS Basis: Dose assessments are performed by computer-based or manual methods (ref. 1, 2). Note: EAL thresholds reflect the State of Ohio guidance to utilities within their jurisdiction to evaluate the consequences of radiological releases in terms of a Child Thyroid PAG rather than an EPA-400 CDE Thyroid PAG. DBNPS Basis Reference(s):

1. NOP-LP-5402 Davis-Besse MIDAS Dose Assessment Software
2. RA-EP-02240 Offsite Dose Assessment
3. NEI 99-01 AS1 EAL BASES DOCUMENT Rev. 0 Page 83 of 272

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 1 - Radiological Effluent Initiating Condition: Release of gaseous radioactivity resulting in offsite dose greater than 100 mrem TEDE or 500 mrem thyroid CDE EAL: RS1.3 Site Area Emergency Field survey results indicate EITHER of the following at or beyond the SITE BOUNDARY: z Closed window dose rates > 100 mR/hr expected to continue for 60 min. z Analyses of field survey samples indicate thyroid CDE > 500 mrem for 60 min. of inhalation. (Notes 1, 2) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Note 2: If an ongoing release is detected and the release start time is unknown, assume that the release duration has exceeded the specified time limit. Mode Applicability: ALL NEI 99-01 Basis: This IC addresses a release of gaseous radioactivity that results in projected or actual offsite doses greater than or equal to 10% of the EPA Protective Action Guides (PAGs). It includes both monitored and un-monitored releases. Releases of this magnitude are associated with the failure of plant systems needed for the protection of the public. Radiological effluent EALs are also included to provide a basis for classifying events and conditions that cannot be readily or appropriately classified on the basis of plant conditions alone. The inclusion of both plant condition and radiological effluent EALs more fully addresses the spectrum of possible accident events and conditions. The TEDE dose is set at 10% of the EPA PAG of 1,000 mrem while the 500 mrem thyroid CDE was established in consideration of the 1:5 ratio of the EPA PAG for TEDE and thyroid CDE. Escalation of the emergency classification level would be via IC RG1. EAL BASES DOCUMENT Rev. 0 Page 84 of 272

ATTACHMENT 1 EAL Bases DBNPS Basis: NOP-LP-5015 FENOC Field Monitoring Teams Radiation Monitoring Teams Field Surveys provides guidance for emergency or post-accident radiological environmental monitoring (ref. 1). Note: EAL thresholds reflect the State of Ohio guidance to utilities within their jurisdiction to evaluate the consequences of radiological releases in terms of a Child Thyroid PAG rather than an EPA-400 CDE Thyroid PAG. DBNPS Basis Reference(s):

1. NOP-LP-5015 FENOC Field Monitoring Teams Radiation Monitoring Teams Field Surveys
2. NEI 99-01 AS1 EAL BASES DOCUMENT Rev. 0 Page 85 of 272

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 1 - Radiological Effluent Initiating Condition: Release of gaseous or liquid radioactivity resulting in offsite dose greater than 10 mrem TEDE or 50 mrem thyroid CDE EAL: RA1.1 Alert Station Vent Channel 1 Noble Gas (RE 4598 AB/BB) > 8.4E -02 Ci/cc for 15 minutes or longer (Notes 1, 2, 3, 4) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Note 2: If an ongoing release is detected and the release start time is unknown, assume that the release duration has exceeded the specified time limit. Note 3: If the effluent flow past an effluent monitor is known to have stopped, indicating that the release path is isolated, the effluent monitor reading is no longer VALID for classification purposes. Note 4: The pre-calculated effluent monitor values presented in EALs RA1.1, RS1.1 and RG1.1 should be used for emergency classification assessments until the results from a dose assessment using actual meteorology are available. Mode Applicability: ALL NEI 99-01 Basis: This IC addresses a release of gaseous or liquid radioactivity that results in projected or actual offsite doses greater than or equal to 1% of the EPA Protective Action Guides (PAGs). It includes both monitored and un-monitored releases. Releases of this magnitude represent an actual or potential substantial degradation of the level of safety of the plant as indicated by a radiological release that significantly exceeds regulatory limits (e.g., a significant uncontrolled release). Radiological effluent EALs are also included to provide a basis for classifying events and conditions that cannot be readily or appropriately classified on the basis of plant conditions alone. The inclusion of both plant condition and radiological effluent EALs more fully addresses the spectrum of possible accident events and conditions. The TEDE dose is set at 1% of the EPA PAG of 1,000 mrem while the 50 mrem thyroid CDE was established in consideration of the 1:5 ratio of the EPA PAG for TEDE and thyroid CDE. Classification based on effluent monitor readings assumes that a release path to the environment is established. If the effluent flow past an effluent monitor is known to have EAL BASES DOCUMENT Rev. 0 Page 86 of 272

ATTACHMENT 1 EAL Bases stopped due to actions to isolate the release path, then the effluent monitor reading is no longer VALID for classification purposes. Escalation of the emergency classification level would be via IC RS1. DBNPS Basis: The DBNPS gaseous effluent limits for RA1.1 are based on values that equate to an offsite dose greater than EITHER:

  • 10 mrem TEDE
  • 50 mrem CDE Thyroid Note: EAL thresholds reflect the State of Ohio guidance to utilities within their jurisdiction to evaluate the consequences of radiological releases in terms of a Child Thyroid PAG rather than an EPA-400 CDE Thyroid PAG.

The Alert Station Vent gaseous effluent monitor value corresponds to calculated doses of 1% of the EPA Protective Action Guidelines (TEDE or CDE Thyroid) per EP-EALCALC-DB-0703 Radiological Gaseous Effluent EAL Values (EALs RG1, RS1, RA1 and RU1) (ref. 1). The station vent is the primary effluent monitor release point. Other pathways such as Safety and relief valves, as well as AFW and MSSV, do not have direct effluent release monitors. Releases from these points would be verified and monitored by RA1.3 survey readings. DBNPS Basis Reference(s):

1. EP-EALCALC-DB-0703 Rev.2 Radiological Gaseous Effluent EAL Values (EALs RG1, RS1, RA1 and RU1)
2. NEI 99-01 AA1 EAL BASES DOCUMENT Rev. 0 Page 87 of 272

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 1 - Radiological Effluent Initiating Condition: Release of gaseous or liquid radioactivity resulting in offsite dose greater than 10 mrem TEDE or 50 mrem thyroid CDE EAL: RA1.2 Alert Dose assessment using actual meteorology indicates doses > 10 mrem TEDE or 50 mrem thyroid CDE at or beyond the SITE BOUNDARY (Note 4) Note 4: The pre-calculated effluent monitor values presented in EALs RA1.1, RS1.1 and RG1.1 should be used for emergency classification assessments until the results from a dose assessment using actual meteorology are available. Mode Applicability: ALL NEI 99-01 Basis: This IC addresses a release of gaseous or liquid radioactivity that results in projected or actual offsite doses greater than or equal to 1% of the EPA Protective Action Guides (PAGs). It includes both monitored and un-monitored releases. Releases of this magnitude represent an actual or potential substantial degradation of the level of safety of the plant as indicated by a radiological release that significantly exceeds regulatory limits (e.g., a significant uncontrolled release). Radiological effluent EALs are also included to provide a basis for classifying events and conditions that cannot be readily or appropriately classified on the basis of plant conditions alone. The inclusion of both plant condition and radiological effluent EALs more fully addresses the spectrum of possible accident events and conditions. The TEDE dose is set at 1% of the EPA PAG of 1,000 mrem while the 50 mrem thyroid CDE was established in consideration of the 1:5 ratio of the EPA PAG for TEDE and thyroid CDE. Classification based on effluent monitor readings assumes that a release path to the environment is established. If the effluent flow past an effluent monitor is known to have stopped due to actions to isolate the release path, then the effluent monitor reading is no longer VALID for classification purposes. Escalation of the emergency classification level would be via IC RS1. EAL BASES DOCUMENT Rev. 0 Page 88 of 272

ATTACHMENT 1 EAL Bases DBNPS Basis: Dose assessments are performed by computer-based and manual methods (ref. 1, 2). Note: EAL thresholds reflect the State of Ohio guidance to utilities within their jurisdiction to evaluate the consequences of radiological releases in terms of a Child Thyroid PAG rather than an EPA-400 CDE Thyroid PAG. DBNPS Basis Reference(s):

1. NOP-LP-5402 Davis-Besse MIDAS Dose Assessment Software
2. RA-EP-02240 Offsite Dose Assessment
3. NEI 99-01 AA1 EAL BASES DOCUMENT Rev. 0 Page 89 of 272

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 1 - Radiological Effluent Initiating Condition: Release of gaseous or liquid radioactivity resulting in offsite dose greater than 10 mrem TEDE or 50 mrem thyroid CDE EAL: RA1.3 Alert Analysis of a liquid effluent sample indicates a concentration or release rate that would result in doses > 10 mrem TEDE or 50 mrem thyroid CDE at or beyond the SITE BOUNDARY for 60 min. of exposure (Notes 1, 2) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Note 2: If an ongoing release is detected and the release start time is unknown, assume that the release duration has exceeded the specified time limit. Mode Applicability: ALL NEI 99-01 Basis: This IC addresses a release of gaseous or liquid radioactivity that results in projected or actual offsite doses greater than or equal to 1% of the EPA Protective Action Guides (PAGs). It includes both monitored and un-monitored releases. Releases of this magnitude represent an actual or potential substantial degradation of the level of safety of the plant as indicated by a radiological release that significantly exceeds regulatory limits (e.g., a significant uncontrolled release). Radiological effluent EALs are also included to provide a basis for classifying events and conditions that cannot be readily or appropriately classified on the basis of plant conditions alone. The inclusion of both plant condition and radiological effluent EALs more fully addresses the spectrum of possible accident events and conditions. The TEDE dose is set at 1% of the EPA PAG of 1,000 mrem while the 50 mrem thyroid CDE was established in consideration of the 1:5 ratio of the EPA PAG for TEDE and thyroid CDE. Classification based on effluent monitor readings assumes that a release path to the environment is established. If the effluent flow past an effluent monitor is known to have stopped due to actions to isolate the release path, then the effluent monitor reading is no longer VALID for classification purposes. Escalation of the emergency classification level would be via IC RS1. EAL BASES DOCUMENT Rev. 0 Page 90 of 272

ATTACHMENT 1 EAL Bases DBNPS Basis: Dose assessments based on liquid releases are performed per Offsite Dose Calculation Manual (ref. 1). Note: EAL thresholds reflect the State of Ohio guidance to utilities within their jurisdiction to evaluate the consequences of radiological releases in terms of a Child Thyroid PAG rather than an EPA-400 CDE Thyroid PAG. DBNPS Basis Reference(s):

1. DBNPS ODCM
2. NEI 99-01 AA1 EAL BASES DOCUMENT Rev. 0 Page 91 of 272

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 1 - Radiological Effluent Initiating Condition: Release of gaseous or liquid radioactivity resulting in offsite dose greater than 10 mrem TEDE or 50 mrem thyroid CDE EAL: RA1.4 Alert Field survey results indicate EITHER of the following at or beyond the SITE BOUNDARY: z Closed window dose rates > 10 mR/hr expected to continue for 60 min. z Analyses of field survey samples indicate thyroid CDE > 50 mrem for 60 min. of inhalation. (Notes 1, 2) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Note 2: If an ongoing release is detected and the release start time is unknown, assume that the release duration has exceeded the specified time limit. Mode Applicability: ALL NEI 99-01 Basis: This IC addresses a release of gaseous or liquid radioactivity that results in projected or actual offsite doses greater than or equal to 1% of the EPA Protective Action Guides (PAGs). It includes both monitored and un-monitored releases. Releases of this magnitude represent an actual or potential substantial degradation of the level of safety of the plant as indicated by a radiological release that significantly exceeds regulatory limits (e.g., a significant uncontrolled release). Radiological effluent EALs are also included to provide a basis for classifying events and conditions that cannot be readily or appropriately classified on the basis of plant conditions alone. The inclusion of both plant condition and radiological effluent EALs more fully addresses the spectrum of possible accident events and conditions. The TEDE dose is set at 1% of the EPA PAG of 1,000 mrem while the 50 mrem thyroid CDE was established in consideration of the 1:5 ratio of the EPA PAG for TEDE and thyroid CDE. Classification based on effluent monitor readings assumes that a release path to the environment is established. If the effluent flow past an effluent monitor is known to have EAL BASES DOCUMENT Rev. 0 Page 92 of 272

ATTACHMENT 1 EAL Bases stopped due to actions to isolate the release path, then the effluent monitor reading is no longer VALID for classification purposes. Escalation of the emergency classification level would be via IC RS1. DBNPS Basis: NOP-LP-5015 FENOC Field Monitoring Teams Radiation Monitoring Teams Field Surveys provides guidance for emergency or post-accident radiological environmental monitoring (ref. 1). Note: EAL thresholds reflect the State of Ohio guidance to utilities within their jurisdiction to evaluate the consequences of radiological releases in terms of a Child Thyroid PAG rather than an EPA-400 CDE Thyroid PAG. DBNPS Basis Reference(s):

1. NOP-LP-5015 FENOC Field Monitoring Teams Radiation Monitoring Teams Field Surveys
2. NEI 99-01 AA1 EAL BASES DOCUMENT Rev. 0 Page 93 of 272

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 1 - Radiological Effluent Initiating Condition: Release of gaseous or liquid radioactivity greater than 2 times the ODCM limits for 60 minutes or longer EAL: RU1.1 Unusual Event Station Vent Channel 1 Noble Gas (RE 4598AA/BA) > 5.72E-03 Ci/cc for 60 minutes or longer OR ANY of the following effluent monitors > 2 times the high alarm setpoint established by a current radioactivity discharge permit for 60 minutes or longer:

  • Waste Gas System Outlet (RE 1822A or B).
  • Clean Waste System Outlet (RE 1770A or B).
  • Miscellaneous Waste System Outlet (RE 1878A or B).
  • Discharge permit specified monitor.

(Notes 1, 2, 3) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Note 2: If an ongoing release is detected and the release start time is unknown, assume that the release duration has exceeded the specified time limit. Note 3: If the effluent flow past an effluent monitor is known to have stopped, indicating that the release path is isolated, the effluent monitor reading is no longer VALID for classification purposes. Mode Applicability: ALL NEI 99-01 Basis: This IC addresses a potential decrease in the level of safety of the plant as indicated by a low-level radiological release that exceeds regulatory commitments for an extended period of time (e.g., an uncontrolled release). It includes ANY gaseous or liquid radiological release, EAL BASES DOCUMENT Rev. 0 Page 94 of 272

ATTACHMENT 1 EAL Bases monitored or un-monitored, including those for which a radioactivity discharge permit is normally prepared. Nuclear power plants incorporate design features intended to control the release of radioactive effluents to the environment. Further, there are administrative controls established to prevent unintentional releases, and to control and monitor intentional releases. The occurrence of an extended, uncontrolled radioactive release to the environment is indicative of degradation in these features and/or controls. Radiological effluent EALs are also included to provide a basis for classifying events and conditions that cannot be readily or appropriately classified on the basis of plant conditions alone. The inclusion of both plant condition and radiological effluent EALs more fully addresses the spectrum of possible accident events and conditions. Classification based on effluent monitor readings assumes that a release path to the environment is established. If the effluent flow past an effluent monitor is known to have stopped due to actions to isolate the release path, then the effluent monitor reading is no longer VALID for classification purposes. Releases should not be prorated or averaged. For example, a release exceeding 4 times release limits for 30 minutes does not meet the EAL. This EAL addresses normally occurring continuous radioactivity releases from monitored gaseous or liquid effluent pathways or radioactivity releases that cause effluent radiation monitor readings to exceed 2 times the limit established by a radioactivity discharge permit. This EAL will typically be associated with planned batch releases from non-continuous release pathways (e.g., radwaste, waste gas). Escalation of the emergency classification level would be via IC RA1. DBNPS Basis: The UE gaseous and liquid release values represent two times the appropriate ODCM release rate limits associated with the specified monitors (ref. 2). Gaseous Releases Instrumentation that may be used to assess this EAL is listed below (ref. 1):

  • Station Vent - RE 4598AA or BA
  • Waste Gas System Outlet - RE 1822 A or B (batch release)

The Station Vent gaseous effluent (RE 4598AA/BA) value of 2 times the ODCM setpoint was determined using formulas, isotopic dose conversion factors and meteorology data as specified in the ODCM based on a normal operating isotopic mixture (no clad damage condition). Assumptions and calculation inputs are provided in EP-EALCALC-DB-0703 Rev. 2 (ref. 2). EAL BASES DOCUMENT Rev. 0 Page 95 of 272

ATTACHMENT 1 EAL Bases The Waste Gas Outlet (RE 1822 A or B for batch release) are the release monitors normally used for planned discharges. If a discharge is performed using a different flow path or effluent monitor (e.g., a portable or temporary effluent monitor), then the declaration criteria will be based on the monitor specified in the discharge permit. Liquid Releases Instrumentation that may be used to assess this EAL is listed below (ref. 1):

  • Clean Waste System Outlet - RE 1770 A or B (batch release)
  • Misc. Waste System Outlet - RE 1878 A or B (batch release)

The liquid release monitors listed are those normally used for planned discharges. If a discharge is performed using a different flow path or effluent monitor (e.g., a portable or temporary effluent monitor), then the declaration criteria will be based on the monitor specified in the discharge permit. DBNPS Basis Reference(s):

1. DBNPS ODCM
2. EP-EALCALC-DB-0703 Rev. 2 Radiological Gaseous Effluent EAL Values (EALs RG1, RS1, RA1 and RU1)
3. NEI 99-01 AU1 EAL BASES DOCUMENT Rev. 0 Page 96 of 272

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 1 - Radiological Effluent Initiating Condition: Release of gaseous or liquid radioactivity greater than 2 times the ODCM limits for 60 minutes or longer. EAL: RU1.2 Unusual Event Sample analysis for a gaseous or liquid release indicates a concentration or release rate > 2 x ODCM limits for 60 min. (Notes 1, 2) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Note 2: If an ongoing release is detected and the release start time is unknown, assume that the release duration has exceeded the specified time limit. Mode Applicability: ALL NEI 99-01 Basis: This IC addresses a potential decrease in the level of safety of the plant as indicated by a low-level radiological release that exceeds regulatory commitments for an extended period of time (e.g., an uncontrolled release). It includes ANY gaseous or liquid radiological release, monitored or un-monitored, including those for which a radioactivity discharge permit is normally prepared. Nuclear power plants incorporate design features intended to control the release of radioactive effluents to the environment. Further, there are administrative controls established to prevent unintentional releases, and to control and monitor intentional releases. The occurrence of an extended, uncontrolled radioactive release to the environment is indicative of degradation in these features and/or controls. Radiological effluent EALs are also included to provide a basis for classifying events and conditions that cannot be readily or appropriately classified on the basis of plant conditions alone. The inclusion of both plant condition and radiological effluent EALs more fully addresses the spectrum of possible accident events and conditions. Releases should not be prorated or averaged. For example, a release exceeding 4 times release limits for 30 minutes does not meet the EAL. This EAL addresses uncontrolled gaseous or liquid releases that are detected by sample analyses or environmental surveys, particularly on unmonitored pathways (e.g., spills of radioactive liquids into storm drains, heat exchanger leakage in river water systems, etc.). EAL BASES DOCUMENT Rev. 0 Page 97 of 272

ATTACHMENT 1 EAL Bases Escalation of the emergency classification level would be via IC RA1. DBNPS Basis: Grab samples are used to determine release concentrations or release rates, confirm meter readings, or indicate the need for sampling when the effluent monitors are not in service or other alarms occur. The maximum instantaneous release rate limits are calculated in accordance with the ODCM. These are indicated on approved discharge permit release packages (ref. 1). DBNPS Basis Reference(s):

1. DBNPS ODCM
2. NEI 99-01 AU1 EAL BASES DOCUMENT Rev. 0 Page 98 of 272

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 2 - Irradiated Fuel Event Initiating Condition: Spent fuel pool level cannot be restored to at least the top of the fuel racks for 60 minutes or longer EAL: RG2.1 General Emergency Spent fuel pool level cannot be restored to at least 1 ft. for > 60 min. (Note 1) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Mode Applicability: ALL NEI 99-01 Basis: This EAL addresses a significant loss of spent fuel pool inventory control and makeup capability leading to a prolonged uncovery of spent fuel. This condition will lead to fuel damage and a radiological release to the environment. It is recognized that this IC would likely not be met until well after another General Emergency IC was met; however, it is included to provide classification diversity. DBNPS Basis: Post-Fukushima order EA-12-051 (ref.1) required the installation of reliable SFP level indication capable of identifying normal level (Level 1), SFP level 10 ft. above the top of the fuel racks (Level 2) and SFP level at the top of the fuel racks (Level 3). Indicated level of 1 ft. on LI4801A (primary) or LI4801B (Backup) corresponds approximately to 1 ft. above the top of the SFP racks (ref. 2). DBNPS Basis Reference(s):

1. NRC EA-12-51 Issuance of Order to Modify Licenses with Regard to Reliable Spent Fuel Pool Instrumentation
2. Engineering Change Package 13-0596
3. NEI 99-01 AG2 EAL BASES DOCUMENT Rev. 0 Page 99 of 272

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 2 - Irradiated Fuel Event Initiating Condition: Spent fuel pool level at the top of the fuel racks EAL: RS2.1 Site Area Emergency Lowering of spent fuel pool level to 1 ft. Mode Applicability: ALL NEI 99-01 Basis: This EAL addresses a significant loss of spent fuel pool inventory control and makeup capability leading to IMMINENT fuel damage. This condition entails major failures of plant functions needed for protection of the public and thus warrant a Site Area Emergency declaration. It is recognized that this IC would likely not be met until well after another Site Area Emergency IC was met; however, it is included to provide classification diversity. Escalation of the emergency classification level would be via IC RG1 or RG2. DBNPS Basis: Post-Fukushima order EA-12-051 (ref.1) required the installation of reliable SFP level indication capable of identifying normal level (Level 1), SFP level 10 ft. above the top of the fuel racks (Level 2) and SFP level at the top of the fuel racks (Level 3). Indicated level of 1 ft. on LI4801A (primary) or LI4801B (Backup) corresponds approximately to 1 ft. above the top of the SFP racks (ref. 2). DBNPS Basis Reference(s):

1. NRC EA-12-51 Issuance of Order to Modify Licenses with Regard to Reliable Spent Fuel Pool Instrumentation
2. Engineering Change Package 13-0596
3. NEI 99-01 AS2 EAL BASES DOCUMENT Rev. 0 Page 100 of 272

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 2 - Irradiated Fuel Event Initiating Condition: Significant lowering of water level above, or damage to, irradiated fuel EAL: RA2.1 Unusual Event Uncovery of irradiated fuel in the REFUELING PATHWAY Mode Applicability: ALL NEI 99-01 Basis: This IC addresses events that have caused IMMINENT or actual damage to an irradiated fuel assembly, or a significant lowering of water level within the spent fuel pool. These events present radiological safety challenges to plant personnel and are precursors to a release of radioactivity to the environment. As such, they represent an actual or potential substantial degradation of the level of safety of the plant. This IC applies to irradiated fuel that is licensed for dry storage up to the point that the loaded storage cask is sealed. Once sealed, damage to a loaded cask causing loss of the CONFINEMENT BOUNDARY is classified in accordance with EAL EU1.1. Escalation of the emergency would be based on either Recognition Category R or C ICs. EAL #1 This EAL escalates from RU2.1 in that the loss of level, in the affected portion of the REFUELING PATHWAY, is of sufficient magnitude to have resulted in uncovery of irradiated fuel. Indications of irradiated fuel uncovery may include direct or indirect visual observation (e.g., reports from personnel or camera images), as well as significant changes in water and radiation levels, or other plant parameters. Computational aids may also be used (e.g., a boil-off curve). Classification of an event using this EAL should be based on the totality of available indications, reports and observations. While an area radiation monitor could detect an increase in a dose rate due to a lowering of water level in some portion of the REFUELING PATHWAY, the reading may not be a reliable indication of whether or not the fuel is actually uncovered. To the degree possible, readings should be considered in combination with other available indications of inventory loss. EAL BASES DOCUMENT Rev. 0 Page 101 of 272

ATTACHMENT 1 EAL Bases A drop in water level above irradiated fuel within the reactor vessel may be classified in accordance Recognition Category C during the Cold Shutdown and Refueling modes. Escalation of the emergency classification level would be via IC RS1. DBNPS Basis: None DBNPS Basis Reference(s):

1. DB-OP-02003 3-1-B, SFP LVL
2. DB-OP-02003 3-1-A, REFUELING CANAL LVL
3. DB-OP-02547 Spent Fuel Pool Cooling Malfunctions
4. NEI 99-01 AA2 EAL BASES DOCUMENT Rev. 0 Page 102 of 272

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 2 - Irradiated Fuel Event Initiating Condition: Significant lowering of water level above, or damage to, irradiated fuel EAL: RA2.2 Alert Damage to irradiated fuel resulting in a release of radioactivity as indicated by a high radiation alarm on ANY of the following radiation monitor indications:

  • RE 8426 SFP Area
  • RE 8427 SFP Area
  • RE 8417 Fuel Handling Area
  • RE 8418 Fuel Handling Area
  • RE 8425 Equipment Hatch Area
  • RE 8446/8447 Fuel Handling Exhaust
  • RE 4598AA/BA Station Vent Mode Applicability:

ALL NEI 99-01 Basis: This IC addresses events that have caused IMMINENT or actual damage to an irradiated fuel assembly, or a significant lowering of water level within the spent fuel pool. These events present radiological safety challenges to plant personnel and are precursors to a release of radioactivity to the environment. As such, they represent an actual or potential substantial degradation of the level of safety of the plant. Escalation of the emergency would be based on either Recognition Category R or C ICs. This EAL addresses a release of radioactive material caused by mechanical damage to irradiated fuel. Damaging events may include the dropping, bumping or binding of an assembly, or dropping a heavy load onto an assembly. A rise in readings on radiation monitors should be considered in conjunction with in-plant reports or observations of a potential fuel damaging event (e.g., a fuel handling accident). Escalation of the emergency classification level would be via IC RS1. EAL BASES DOCUMENT Rev. 0 Page 103 of 272

ATTACHMENT 1 EAL Bases DBNPS Basis: The specified radiation monitors are those expected to see increase area radiation levels as a result of damage to irradiated fuel (ref. 1). The high alarm setpoints for the radiation monitors are set to be indicative of significant increases in area and/or airborne radiation (ref. 2). DBNPS Basis Reference(s):

1. DB-OP-02530 Fuel Handling Accident
2. Radiation Setpoints Manual
3. NEI 99-01 AA2 EAL BASES DOCUMENT Rev. 0 Page 104 of 272

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 2 - Irradiated Fuel Event Initiating Condition: Significant lowering of water level above, or damage to, irradiated fuel EAL: RA2.3 Alert Lowering of spent fuel pool level to 10 ft. Mode Applicability: ALL NEI 99-01 Basis: This IC addresses events that have caused IMMINENT or actual damage to an irradiated fuel assembly, or a significant lowering of water level within the spent fuel pool. These events present radiological safety challenges to plant personnel and are precursors to a release of radioactivity to the environment. As such, they represent an actual or potential substantial degradation of the level of safety of the plant. Escalation of the emergency would be based on either Recognition Category R or C ICs. Spent fuel pool water level at this value is within the lower end of the level range necessary to prevent significant dose consequences from direct gamma radiation to personnel performing operations in the vicinity of the spent fuel pool. This condition reflects a significant loss of spent fuel pool water inventory and thus it is also a precursor to a loss of the ability to adequately cool the irradiated fuel assembles stored in the pool. Escalation of the emergency classification level would be via IC RS1or RS2. DBNPS Basis: Post-Fukushima order EA-12-051 (ref.1) required the installation of reliable SFP level indication capable of identifying normal level (Level 1), SFP level 10 ft. above the top of the fuel racks (Level 2) and SFP level at the top of the fuel racks (Level 3). Indicated level of 10 ft. on LI4801A (primary) or LI4801B (Backup) corresponds to plant elevation 588 ft. 6 in. (ref. 2). DBNPS Basis Reference(s):

1. NRC EA-12-51 Issuance of Order to Modify Licenses with Regard to Reliable Spent Fuel Pool Instrumentation
2. Engineering Change Package 13-0596
3. NEI 99-01 AA2 EAL BASES DOCUMENT Rev. 0 Page 105 of 272

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 2 - Irradiated Fuel Event Initiating Condition: UNPLANNED loss of water level above irradiated fuel EAL: RU2.1 Unusual Event UNPLANNED water level drop in the REFUELING PATHWAY as indicated by ANY of the following:

  • SFP level alarm or indication (Ll 1600)
  • SFP level indication (Ll 4801 A/B)
  • Refueling Canal low water level alarm or indication (Ll 1627)
  • Visual observation AND UNPLANNED rise in corresponding area radiation levels as indicated by ANY of the following radiation monitors:
  • RE 8426 SFP Area
  • RE 8427 SFP Area
  • RE 8417 Fuel Handling Area
  • RE 8418 Fuel Handling Area
  • RE 8425 Equipment Hatch Area Mode Applicability:

ALL NEI 99-01 Basis: This IC addresses a decrease in water level above irradiated fuel sufficient to cause elevated radiation levels. This condition could be a precursor to a more serious event and is also indicative of a minor loss in the ability to control radiation levels within the plant. It is therefore a potential degradation in the level of safety of the plant. A water level decrease will be primarily determined by indications from available level instrumentation. Other sources of level indications may include reports from plant personnel (e.g., from a refueling crew) or video camera observations (if available). A significant drop in the water level may also cause an increase in the radiation levels of adjacent areas that can be detected by monitors in those locations. EAL BASES DOCUMENT Rev. 0 Page 106 of 272

ATTACHMENT 1 EAL Bases The effects of planned evolutions should be considered. For example, a refueling bridge area radiation monitor reading may increase due to planned evolutions such as lifting of the reactor vessel head or movement of a fuel assembly. Note that this EAL is applicable only in cases where the elevated reading is due to an UNPLANNED loss of water level. A drop in water level above irradiated fuel within the reactor vessel may be classified in accordance Recognition Category C during the Cold Shutdown and Refueling modes. Escalation of the emergency classification level would be via IC RA2. DBNPS Basis: The SFP low water level alarm setpoint is actuated by LS 1600 at a setpoint of 23.2 feet on LI 1600 (ref. 1). The refueling canal low water level alarm setpoint is actuated by LS 1627 at a setpoint of 23.4 feet on LI 1627 (this corresponds to 1.5 inches below normal) (ref. 2). The Ll 4801 A/B is indication only, with no alarm or computer point function. Water level restoration instructions are performed in accordance with AOPs (ref. 1, 2, 3). The specified radiation monitors are those expected to see increase area radiation levels as a result of a loss of REFUELING PATHWAY inventory (ref. 1). Increasing radiation indications on these monitors in the absence of indications of decreasing REFUELING PATHWAY level are not classifiable under this EAL. When the spent fuel pool and reactor cavity are connected, there could exist the possibility of uncovering irradiated fuel. Therefore, this EAL is applicable for conditions in which irradiated fuel is being transferred to and from the reactor vessel and spent fuel pool. DBNPS Basis Reference(s):

1. DB-OP-02003 3-1-B, SFP LVL
2. DB-OP-02003 3-1-A, REFUELING CANAL LVL
3. DB-OP-02547 Spent Fuel Pool Cooling Malfunctions
4. NEI 99-01 AU2 EAL BASES DOCUMENT Rev. 0 Page 107 of 272

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 3 - Area Radiation Levels Initiating Condition: Radiation levels that IMPEDE access to equipment necessary for normal plant operations, cooldown or shutdown EAL: RA3.1 Alert Dose rates > 15 mR/hr in EITHER of the following areas:

  • Control Room (RE 8430 or 8431)
  • Central Alarm Station (RE 8435 or 8436)

Mode Applicability: ALL NEI 99-01 Basis: This IC addresses elevated radiation levels in certain plant rooms/areas sufficient to preclude or IMPEDE personnel from performing actions necessary to maintain normal plant operation, or to perform a normal plant cooldown and shutdown. As such, it represents an actual or potential substantial degradation of the level of safety of the plant. The Emergency Director should consider the cause of the increased radiation levels and determine if another IC may be applicable. Escalation of the emergency classification level would be via Recognition Category R, C or F ICs. DBNPS Basis: Areas that meet this threshold include the Control Room and the Central Alarm Station (CAS). RE 8430 and 8431 monitors the Control room for area radiation. The CAS area does not have installed radiation monitoring but RE 8435 and 8436 are in near proximity and can be used to approximate CAS area radiation levels (ref. 1, 2). The CAS is included because of its importance to permitting access to areas required to assure safe plant operations. DBNPS Basis Reference(s):

1. DB-OP-06412 Process and Area Radiation Monitor
2. SD-017B System Description for Area Radiation Monitors
3. NEI 99-01 AA3 EAL BASES DOCUMENT Rev. 0 Page 108 of 272

ATTACHMENT 1 EAL Bases Category: R - Abnormal Rad Levels / Rad Effluent Subcategory: 3 - Area Radiation Levels Initiating Condition: Radiation levels that IMPEDE access to equipment necessary for normal plant operations, cooldown or shutdown EAL: RA3.2 Alert An UNPLANNED event results in radiation levels that prohibit or IMPEDE access to ANY Table R-2 Safe Shutdown Rooms or Areas (Note 5) Note 5: If the equipment in the listed room or area was already inoperable or out-of-service before the event occurred, then no emergency classification is warranted. Table R-2 Safe Shutdown Rooms/Areas Room/Area Mode Applicability Aux Bldg. 565 ele. Room 236 #2 Mechanical 1, 2, 3 Penetration Room Aux Bldg. 585 ele. Room 304 corridor outside 1, 2, 3

            #3 Mechanical Penetration Room Aux Bldg. 603 ele. Room 427 - #2 Electrical 1, 2, 3 Penetration Room Mode Applicability:

1 - Power Operation, 2 - Startup, 3 - Hot Standby NEI 99-01 Basis: This IC addresses elevated radiation levels in certain plant rooms/areas sufficient to preclude or IMPEDE personnel from performing actions necessary to maintain normal plant operation, or to perform a normal plant cooldown and shutdown. As such, it represents an actual or potential substantial degradation of the level of safety of the plant. The Emergency Director should consider the cause of the increased radiation levels and determine if another IC may be applicable. For RA3.2, an Alert declaration is warranted if entry into the affected room/area is, or may be, procedurally required during the plant operating mode in effect at the time of the elevated radiation levels. The emergency classification is not contingent upon whether entry is actually necessary at the time of the increased radiation levels. Access should be considered as IMPEDED if extraordinary measures are necessary to facilitate entry of personnel into the affected room/area (e.g., installing temporary shielding, requiring use of non-routine protective equipment, requesting an extension in dose limits beyond normal administrative limits). EAL BASES DOCUMENT Rev. 0 Page 109 of 272

ATTACHMENT 1 EAL Bases An emergency declaration is not warranted if ANY of the following conditions apply: z The plant is in an operating mode different than the mode specified for the affected room/area (i.e., entry is not required during the operating mode in effect at the time of the elevated radiation levels). For example, the plant is in Mode 1 when the radiation increase occurs, and the procedures used for normal operation, cooldown and shutdown do not require entry into the affected room until Mode 4. z The increased radiation levels are a result of a planned activity that includes compensatory measures, which address the temporary inaccessibility of a room or area (e.g., radiography, spent filter or resin transfer, etc.). z The action for which room/area entry is required is of an administrative or record keeping nature (e.g., normal rounds or routine inspections). z The access control measures are of a conservative or precautionary nature, and would not actually prevent or IMPEDE a required action. If the equipment in the listed room or area was already inoperable, or out-of-service, before the event occurred, then no emergency should be declared since the event will have no adverse impact beyond that already allowed by Technical Specifications at the time of the event. Escalation of the emergency classification level would be via Recognition Category R, C or F ICs. DBNPS Basis: If the equipment in the listed room or area was already inoperable, or out-of-service, before the event occurred, then no emergency should be declared since the event will have no adverse impact beyond that already allowed by Technical Specifications at the time of the event. The list of plant rooms or areas with entry-related mode applicability identified specify those rooms or areas that contain equipment which require a manual/local action as specified in operating procedures used for normal plant operation, cooldown and shutdown. Rooms or areas in which actions of a contingent or emergency nature would be performed (e.g., an action to address an off-normal or emergency condition such as emergency repairs, corrective measures or emergency operations) are not included. In addition, the list specifies the plant mode(s) during which entry would be required for each room or area (ref. 1). DBNPS Basis Reference(s):

1. Attachment 3 Safe Shutdown Rooms/Areas Tables R-2 & H-2 Bases
2. RA-EP-02861 Radiological Incidents
3. NEI 99-01 AA3 EAL BASES DOCUMENT Rev. 0 Page 110 of 272

ATTACHMENT 1 EAL Bases Category E - Dry Fuel Storage Facility (DFSF) EAL Group: ANY (EALs in this category are applicable to ANY plant condition, hot or cold) A dry fuel storage facility (DFSF) is a complex that is designed and constructed for the interim storage of spent nuclear fuel and other radioactive materials associated with spent fuel storage. A significant amount of the radioactive material contained within a cask/canister must escape its packaging and enter the biosphere for there to be a significant environmental effect resulting from an accident involving the dry storage of spent nuclear fuel. An Unusual Event is declared based on the occurrence of an event of sufficient magnitude that a loaded cask CONFINEMENT BOUNDARY is damaged or violated. Minor surface damage that does not affect storage cask/canister boundary is excluded from the scope of these EALs. EAL BASES DOCUMENT Rev. 0 Page 111 of 272

ATTACHMENT 1 EAL Bases Category: E - DFSF Sub-category: None Initiating Condition: Damage to a loaded cask CONFINEMENT BOUNDARY EAL: EU1.1 Notification of Unusual Event Damage to a loaded canister CONFINEMENT BOUNDARY as indicated by an on-contact radiation reading on the surface of a loaded spent fuel HSM cask > EITHER of the following:

  • 100 mrem/hr (neutron + gamma) on the HSM cask wall or roof
  • 100 mrem/hr (neutron + gamma) on the center of the HSM cask door Mode Applicability:

ALL NEI 99-01 Basis: This IC addresses an event that results in damage to the CONFINEMENT BOUNDARY of a storage cask containing spent fuel. It applies to irradiated fuel that is licensed for dry storage beginning at the point that the loaded storage cask is sealed. The issues of concern are the creation of a potential or actual release path to the environment, degradation of one or more fuel assemblies due to environmental factors, and configuration changes, which could cause challenges in removing the cask or fuel from storage. The existence of damage is determined by radiological survey. The technical specification multiple of 2 times, which is also used in Recognition Category R IC RU1, is used here to distinguish between non-emergency and emergency conditions. The emphasis for this classification is the degradation in the level of safety of the spent fuel cask and not the magnitude of the associated dose or dose rate. It is recognized that in the case of extreme damage to a loaded cask, the fact that the on-contact dose rate limit is exceeded may be determined based on measurement of a dose rate at some distance from the cask. Security-related events for DFSFs are covered under ICs HU1 and HA1. DBNPS Basis: The DBNPS DFSF utilizes one design for dry spent fuel storage: the Nuclear Horizontal Modular Storage (NUHOMS) system. The system consists of Horizontal Storage Modules (HSM) that contains dry shielded canisters (DSCs). The DSC serves as the CONFINEMENT BOUNDARY. The DSC is welded and designed to provide confinement of all radionuclides under normal, off normal, and accident conditions. EAL BASES DOCUMENT Rev. 0 Page 112 of 272

ATTACHMENT 1 EAL Bases CONFINEMENT BOUNDARY is defined as the barrier(s) between areas containing radioactive substances and the environment. Therefore, damage to a CONFINEMENT BOUNDARY must be a confirmed physical breach between the spent fuel and the environment for the DSC. The values shown represent 2 times the limits specified in the DFSF Site CSAR for radiation external to a loaded DSC (ref. 1). DBNPS Basis Reference(s):

1. Site CSAR NUH-003 Table 7.3-2 Shielding Analysis Results for 5 year Cooled Fuel NUHOMS-24P System
3. NEI 99-01 E-HU1 EAL BASES DOCUMENT Rev. 0 Page 113 of 272

ATTACHMENT 1 EAL Bases Category C - Cold Shutdown / Refueling System Malfunction EAL Group: Cold Conditions (RCS temperature 200ºF); EALs in this category are applicable only in one or more cold operating modes. Category C EALs are directly associated with Cold Shutdown or Refueling system safety functions. Given the variability of plant configurations (e.g., systems out-of-service for maintenance, containment open, reduced AC power redundancy, time since shutdown) during these periods, the consequences of any given initiating event can vary greatly. For example, a loss of decay heat removal capability that occurs at the end of an extended outage has less significance than a similar loss occurring during the first week after shutdown. Compounding these events is the likelihood that instrumentation necessary for assessment may also be inoperable. The Cold Shutdown and Refueling system malfunction EALs are based on performance capability to the extent possible with consideration given to RCS integrity, CONTAINMENT CLOSURE, and fuel clad integrity for the applicable operating modes (5 - Cold Shutdown, 6 - Refueling, D - Defueled). The events of this category pertain to the following subcategories:

1. RCS Level RCS water level is directly related to the status of adequate core cooling and, therefore, fuel clad integrity.
2. Loss of Essential AC Power Loss of essential plant electrical power can compromise plant SAFETY SYSTEM operability including decay heat removal and emergency core cooling systems, which may be necessary to ensure fission product barrier integrity. This category includes loss of onsite and offsite power sources for 4160 VAC essential buses.
3. RCS Temperature Uncontrolled or inadvertent temperature or pressure increases are indicative of a potential loss of safety functions.
4. Loss of Essential DC Power Loss of emergency plant electrical power can compromise plant SAFETY SYSTEM operability including decay heat removal and emergency core cooling systems, which may be necessary to ensure fission product barrier integrity. This category includes loss of power to or degraded voltage on the 125 VDC buses.

EAL BASES DOCUMENT Rev. 0 Page 114 of 272

ATTACHMENT 1 EAL Bases

5. Loss of Communications Certain events that degrade plant operators ability to communicate with essential personnel within or external to the plant warrant emergency classification.
6. Hazardous Event Affecting SAFETY SYSTEMS Certain hazardous natural and technological events may result in visible damage to or degraded performance of SAFETY SYSTEMS warranting classification.

EAL BASES DOCUMENT Rev. 0 Page 115 of 272

ATTACHMENT 1 EAL Bases Category: C - Cold Shutdown / Refueling System Malfunction Subcategory: 1 - RCS Level Initiating Condition: Loss of RCS inventory affecting fuel clad integrity with containment challenged EAL: CG1.1 General Emergency RCS level cannot be monitored for 30 min. (Note 1) AND Core uncovery is indicated by ANY of the following:

  • UNPLANNED increase in Containment Sumps, Auxiliary Building Sumps, BWST or RCDT levels of sufficient magnitude to indicate core uncovery
  • Containment Radiation Monitor (RE 4596A or B) reading > 16 R/hr
  • Refueling Bridge Portable Area Radiation Monitor reading > 30 R/hr
  • Erratic Source Range Monitor indication AND ANY Containment Challenge indication, Table C-1 Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded.

Note 6: If CONTAINMENT CLOSURE is re-established prior to exceeding the 30-minute time limit, declaration of a General Emergency is not required. Table C-1 Containment Challenge Indications

  • CONTAINMENT CLOSURE not established (Note 6)
  • Containment Hydrogen concentration > 4%
  • UNPLANNED rise in Containment pressure Mode Applicability:

5 - Cold Shutdown, 6 - Refueling EAL BASES DOCUMENT Rev. 0 Page 116 of 272

ATTACHMENT 1 EAL Bases NEI 99-01 Basis: This IC addresses the inability to restore and maintain RCS level above the top of active fuel with containment challenged. This condition represents actual or IMMINENT substantial core degradation or melting with potential for loss of containment integrity. Releases can be reasonably expected to exceed EPA PAG exposure levels offsite for more than the immediate site area. Following an extended loss of core decay heat removal and inventory makeup, decay heat will cause reactor coolant boiling and a further reduction in RCS level. If RCS level cannot be restored, fuel damage is probable. With CONTAINMENT CLOSURE not established, there is a high potential for a direct and unmonitored release of radioactivity to the environment. If CONTAINMENT CLOSURE is re-established prior to exceeding the 30-minute time limit, then declaration of a General Emergency is not required. The existence of an explosive mixture means, at a minimum, that the containment atmospheric hydrogen concentration is sufficient to support a hydrogen burn (i.e., at the lower deflagration limit). A hydrogen burn will raise containment pressure and could result in collateral equipment damage leading to a loss of containment integrity. It therefore represents a challenge to Containment integrity. In the early stages of a core uncovery event, it is unlikely that hydrogen buildup due to a core uncovery could result in an explosive gas mixture in containment. If all installed hydrogen gas monitors are out-of-service during an event leading to fuel cladding damage, it may not be possible to obtain a containment hydrogen gas concentration reading, as ambient conditions within the containment will preclude personnel access. During periods when installed containment hydrogen gas monitors are out-of-service, operators may use the other listed indications to assess whether or not containment is challenged. The 30-minute criterion is tied to a readily recognizable event start time (i.e., the total loss of ability to monitor level), and allows sufficient time to monitor, assess and correlate reactor and plant conditions to determine if core uncovery has actually occurred (i.e., to account for various accident progression and instrumentation uncertainties). It also allows sufficient time for performance of actions to terminate leakage, recover inventory control/makeup equipment and/or restore level monitoring. The inability to monitor RCS level may be caused by instrumentation and/or power failures, or water level dropping below the range of available instrumentation. If water level cannot be monitored, operators may determine that an inventory loss is occurring by observing changes in sump and/or tank levels. Sump and/or tank level changes must be evaluated against other potential sources of water flow to ensure they are indicative of leakage from the RCS. This EAL addresses concerns raised by Generic Letter 88-17, Loss of Decay Heat Removal; SECY 91-283, Evaluation of Shutdown and Low Power Risk Issues; NUREG-1449, Shutdown and Low-Power Operation at Commercial Nuclear Power Plants in the United States; and NUMARC 91-06, Guidelines for Industry Actions to Assess Shutdown Management. EAL BASES DOCUMENT Rev. 0 Page 117 of 272

ATTACHMENT 1 EAL Bases DBNPS Basis: The lowest measurable RCS level is the elevation of the RCS hot leg mid-loop (0.4 ft. on LI 10596). Therefore, RCS inventory loss relative to the RCS level elevation corresponding to the top of active fuel must be detected by indirect leakage indications (ref. 1, 2, 3). Sump level increases must be evaluated against other potential sources of leakage. If the make-up rate to the RCS unexplainably rises above the pre-established rate, a loss of RCS inventory may be occurring even if the source of the leakage cannot be immediately identified. Visual observation of leakage from systems connected to the RCS in areas outside the containment that cannot be isolated, or a sump sample verified by Chemistry, could also be indicative of a loss of RCS inventory (ref. 1). In the Refueling Mode, as water level in the reactor vessel lowers, the dose rate above the core will increase. The dose rate due to this core shine should result in indications on installed and portable area radiation monitors. RE 4596A or B, Containment Radiation Monitors are located in the containment, a reading greater than 16 R/hr is indicative of core uncovery. The Refuel Bridge Portable Radiation Monitor, when installed during refueling operations, is designed to provide monitoring of radiation due to a fuel handling event or loss of shielding during refueling operations. If this radiation monitor reaches and exceeds 30 R/hr, a loss of inventory indicative of core uncovery has occurred (ref. 2, 3). Post-TMI accident studies indicated that the installed PWR nuclear instrumentation will operate erratically when the core is uncovered and that this should be used as a tool for making such determinations. Three conditions are associated with a challenge to containment integrity:

  • CONTAINMENT CLOSURE is not established (Ref. 4).
  • In the early stages of a core uncovery event, it is unlikely that hydrogen buildup due to a core uncovery could result in an explosive mixture of dissolved gases in the containment. However, containment monitoring and/or sampling should be performed to verify this assumption and a General Emergency declared if it is determined that an explosive mixture exists. An explosive mixture can be formed when hydrogen gas concentration in the containment atmosphere is greater than 4% by volume in the presence of oxygen. Hydrogen monitors, although available at all times, are not in service during normal operations. They are started per DB-OP-02000 Table 3. Action is required if the measured concentration reaches 0.6% (notify TSC) and 3% (notify TSC) (ref 5).
  • ANY UNPLANNED increase in containment pressure in the Cold Shutdown or Refueling mode indicates a potential loss of CONTAINMENT CLOSURE capability.

UNPLANNED containment pressure increases indicates CONTAINMENT CLOSURE cannot be assured and the containment cannot be relied upon as a barrier to fission product release. DBNPS Basis Reference(s):

1. DB-OP-02527 Loss of Decay Heat Removal EAL BASES DOCUMENT Rev. 0 Page 118 of 272

ATTACHMENT 1 EAL Bases

2. EP-EALCALC-DB-0704 Radiation Monitor Readings for Core Uncovery During Refueling
3. DB-HP-01152 Performance of High Exposure Work
4. DB-OP-06904, Shutdown Operations
5. DB-OP-02000 Table 3, Containment Monitoring and Control
6. NEI 99-01 CG1 EAL BASES DOCUMENT Rev. 0 Page 119 of 272

ATTACHMENT 1 EAL Bases Category: C - Cold Shutdown / Refueling System Malfunction Subcategory: 1 - RCS Level Initiating Condition: Loss of RCS inventory affecting core decay heat removal capability EAL: CS1.1 Site Area Emergency RCS level cannot be monitored for 30 min. (Note 1) AND Core uncovery is indicated by ANY of the following:

  • UNPLANNED increase in Containment Sumps, Auxiliary Building Sumps, BWST or RCDT levels of sufficient magnitude to indicate core uncovery
  • Containment Radiation Monitor (RE 4596A or B) reading > 16 R/hr
  • Refueling Bridge Portable Area Radiation Monitor reading > 30 R/hr
  • Erratic Source Range Monitor indication Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded.

Mode Applicability: 5 - Cold Shutdown, 6 - Refueling NEI 99-01 Basis: This IC addresses a significant and prolonged loss of RCS inventory control and makeup capability leading to IMMINENT fuel damage. The lost inventory may be due to a RCS component failure, a loss of configuration control or prolonged boiling of reactor coolant. These conditions entail major failures of plant functions needed for protection of the public and thus warrant a Site Area Emergency declaration. Following an extended loss of core decay heat removal and inventory makeup, decay heat will cause reactor coolant boiling and a further reduction in RCS level. If RCS level cannot be restored, fuel damage is probable. The 30-minute criterion is tied to a readily recognizable event start time (i.e., the total loss of ability to monitor level), and allows sufficient time to monitor, assess and correlate reactor and plant conditions to determine if core uncovery has actually occurred (i.e., to account for various accident progression and instrumentation uncertainties). It also allows sufficient time for performance of actions to terminate leakage, recover inventory control/makeup equipment and/or restore level monitoring. EAL BASES DOCUMENT Rev. 0 Page 120 of 272

ATTACHMENT 1 EAL Bases The inability to monitor RCS level may be caused by instrumentation and/or power failures, or water level dropping below the range of available instrumentation. If water level cannot be monitored, operators may determine that an inventory loss is occurring by observing changes in sump and/or tank levels. Sump and/or tank level changes must be evaluated against other potential sources of water flow to ensure they are indicative of leakage from the RCS. This EAL addresses concerns raised by Generic Letter 88-17, Loss of Decay Heat Removal; SECY 91-283, Evaluation of Shutdown and Low Power Risk Issues; NUREG-1449, Shutdown and Low-Power Operation at Commercial Nuclear Power Plants in the United States; and NUMARC 91-06, Guidelines for Industry Actions to Assess Shutdown Management. Escalation of the emergency classification level would be via IC CG1 or RG1. DBNPS Basis: The lowest measurable RCS level is the elevation of the RCS hot leg mid-loop (0.4 ft. on LI 10596). Therefore, RCS inventory loss relative to the RCS level elevation corresponding to the top of active fuel must be detected by indirect leakage indications (ref. 1, 2, 3). Sump level increases must be evaluated against other potential sources of leakage. If the make-up rate to the RCS unexplainably rises above the pre-established rate, a loss of RCS inventory may be occurring even if the source of the leakage cannot be immediately identified. Visual observation of leakage from systems connected to the RCS in areas outside the containment that cannot be isolated, or a sump sample verified by Chemistry, could also be indicative of a loss of RCS inventory (ref. 1). In the Refueling Mode, as water level in the reactor vessel lowers, the dose rate above the core will increase. The dose rate due to this core shine should result in indications on installed and portable area radiation monitors. RE 4596A or B, Containment Radiation Monitors are located in the containment, a reading greater than 16 R/hr is indicative of core uncovery. The Refuel Bridge Portable Radiation Monitor, when installed during refueling operations, is designed to provide monitoring of radiation due to a fuel handling event or loss of shielding during refueling operations. If this radiation monitor reaches and exceeds 30 R/hr, a loss of inventory indicative of core uncovery has occurred (ref. 2, 3). Post-TMI accident studies indicated that the installed PWR nuclear instrumentation will operate erratically when the core is uncovered and that this should be used as a tool for making such determinations. DBNPS Basis Reference(s):

1. DB-OP-02527 Loss of Decay Heat Removal
2. EP-EALCALC-DB-0704 Radiation Monitor Readings for Core Uncovery During Refueling
3. DB-HP-01152 Performance of High Exposure Work
4. NEI 99-01 CS1 EAL BASES DOCUMENT Rev. 0 Page 121 of 272

ATTACHMENT 1 EAL Bases Category: C - Cold Shutdown / Refueling System Malfunction Subcategory: 1 - RCS Level Initiating Condition: Loss of RCS inventory EAL: CA1.1 Alert Loss of RCS inventory as indicated by RCS level 0.4 ft. (LI 10596) Mode Applicability: 5 - Cold Shutdown, 6 - Refueling NEI 99-01 Basis: This IC addresses conditions that are precursors to a loss of the ability to adequately cool irradiated fuel (i.e., a precursor to a challenge to the fuel clad barrier). This condition represents a potential substantial reduction in the level of plant safety. For this EAL, a lowering of RCS water level at or below 0.4 ft. indicates that operator actions have not been successful in restoring and maintaining RCS water level. The heat-up rate of the coolant will increase as the available water inventory is reduced. A continuing decrease in water level will lead to core uncovery. Although related, this EAL is concerned with the loss of RCS inventory and not the potential concurrent effects on systems needed for decay heat removal (e.g., loss of a Decay Heat Removal suction point). An increase in RCS temperature caused by a loss of decay heat removal capability is evaluated under IC CA3. If RCS water level continues to lower, then escalation to Site Area Emergency would be via IC CS1. DBNPS Basis: RCS level cannot be measured below the 571 feet elevation (0.4 feet on LI 10596) which is centerline of the hot leg inlet. Should RCS level drop below this point it is assumed water level cannot be monitored other than visually. Continued loss of RCS inventory may result in DHR pump cavitation (ref. 1). DBNPS Basis Reference(s):

1. DB-OP-02527 Loss of Decay Heat Removal
2. NEI 99-01 CA1 EAL BASES DOCUMENT Rev. 0 Page 122 of 272

ATTACHMENT 1 EAL Bases Category: C - Cold Shutdown / Refueling System Malfunction Subcategory: 1 - RCS Level Initiating Condition: Loss of RCS inventory EAL: CA1.2 Alert RCS level cannot be monitored for 15 min. (Note 1) AND EITHER

  • UNPLANNED increase in Containment Sumps, Auxiliary Building Sumps, BWST or RCDT due to a loss of RCS inventory
  • Visual observation of UNISOLABLE RCS leakage Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded.

Mode Applicability: 5 - Cold Shutdown, 6 - Refueling NEI 99-01 Basis: This IC addresses conditions that are precursors to a loss of the ability to adequately cool irradiated fuel (i.e., a precursor to a challenge to the fuel clad barrier). This condition represents a potential substantial reduction in the level of plant safety. For this EAL, the inability to monitor RCS level may be caused by instrumentation and/or power failures, or water level dropping below the range of available instrumentation. If water level cannot be monitored, operators may determine that an inventory loss is occurring by observing changes in sump and/or tank levels. Sump and/or tank level changes must be evaluated against other potential sources of water flow to ensure they are indicative of leakage from the RCS. The 15-minute duration for the loss of level indication was chosen because it is half of the EAL duration specified in IC CS1. If the RCS inventory level continues to lower, then escalation to Site Area Emergency would be via IC CS1. DBNPS Basis: In Cold Shutdown mode, the RCS will normally be intact and standard RCS level monitoring means are available. In the Refuel mode, the RCS is not intact and RCS level may be monitored by different means, including the ability to monitor level visually. EAL BASES DOCUMENT Rev. 0 Page 123 of 272

ATTACHMENT 1 EAL Bases RCS level in the Refueling mode is normally monitored using the following instruments:

  • LI 10596
  • LI10577 A and B
  • Clear tubing used for manometer level indication at the RCS cold legs.

RCS level indications (LI 10596, LI 10577A and B and cold leg tubing) provide accurate indication of water level when the RCS is at atmospheric pressure. The reactor vessel flange is at 577 ft. 7 in. (80 in. indicated) (ref. 1). In this EAL, all RCS water level indication would be unavailable for greater than 15-minutes, and the RCS inventory loss must be detected by indirect leakage indications (ref. 1). Sump and tank level increases must be evaluated against other potential sources of leakage. If the make-up rate to the RCS unexplainably rises above the pre-established rate, a loss of RCS inventory may be occurring even if the source of the leakage cannot be immediately identified. Visual observation of leakage from systems connected to the RCS that cannot be isolated, or a sump sample verified by Chemistry, could also be indicative of a loss of RCS inventory. DBNPS Basis Reference(s):

1. DB-OP-06904 Shutdown Operations
2. NEI 99-01 CA1 EAL BASES DOCUMENT Rev. 0 Page 124 of 272

ATTACHMENT 1 EAL Bases Category: C - Cold Shutdown / Refueling System Malfunction Subcategory: 1 - RCS Level Initiating Condition: UNPLANNED loss of RCS inventory for 15 minutes or longer EAL: CU1.1 Unusual Event UNPLANNED loss of reactor coolant results in RCS level less than a required lower limit for 15 min. (Note 1) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Mode Applicability: 5 - Cold Shutdown, 6 - Refueling NEI 99-01 Basis: This IC addresses the inability to restore and maintain water level to a required minimum level (or the lower limit of a level band), or a loss of the ability to monitor RCS level concurrent with indications of coolant leakage. Either of these conditions is considered to be a potential degradation of the level of safety of the plant. RCS draining evolutions that decrease RCS water inventory are carefully planned and controlled. An UNPLANNED event that results in water level decreasing below a procedurally required limit warrants the declaration of an Unusual Event due to the reduced water inventory that is available to keep the core covered. This EAL recognizes that the minimum required RCS level can change several times during the course of a refueling outage as different plant configurations and system lineups are implemented. This EAL is met if the minimum level, specified for the current plant conditions, cannot be maintained for 15 minutes or longer. The minimum level is typically specified in the applicable operating procedure but may be specified in another controlling document. The 15-minute threshold duration allows sufficient time for prompt operator actions to restore and maintain the expected water level. This criterion excludes transient conditions causing a brief lowering of water level. Continued loss of RCS inventory may result in escalation to the Alert emergency classification level via either IC CA1 or CA3. EAL BASES DOCUMENT Rev. 0 Page 125 of 272

ATTACHMENT 1 EAL Bases DBNPS Basis: With the plant in Cold Shutdown, RCS water level is normally maintained above a lower level band limit (ref. 1, 2), typically above the pressurizer low level setpoint. However, if RCS level is being controlled below the pressurizer low level setpoint, or if level is being maintained in a designated band in the reactor vessel it is the inability to maintain level above the low end of the designated control band due to a loss of inventory resulting from a leak in the RCS that is the concern. With the plant in Refueling mode, RCS water level is normally maintained at or above the reactor vessel flange, (Technical Specification LCO 3.9.6 requires at least 23 ft. of water above the top of the reactor vessel flange in the refueling canal when irradiated fuel is moved in containment). The reactor vessel flange is at 577 ft. 7 in. (80 in. indicated) (ref. 3, 4). In Cold Shutdown mode, the RCS will normally be intact and standard RCS level monitoring means are available. RCS level in the Refueling mode is normally monitored using the following instruments:

  • LI 10596
  • LI 10577 A and B
  • Clear tubing used for manometer level indication at the RCS cold legs.

RCS level indications (LI 10596, LI 10577A and B and cold leg tubing) provide accurate indication of water level when the RCS is at atmospheric pressure (ref. 3). DBNPS Basis Reference(s):

1. DB-OP-02513 Pressurizer System Abnormal Operation
2. DB-OP-02004 4-2-E PZR LVL LO
3. DB-OP-06904 Shutdown Operations
4. DBNPS Technical Specifications Section 3.9.6 Refueling Canal Water Level
5. DB-OP-02527 Loss of Decay Heat Removal
6. NEI 99-01 CU1 EAL BASES DOCUMENT Rev. 0 Page 126 of 272

ATTACHMENT 1 EAL Bases Category: C - Cold Shutdown / Refueling System Malfunction Subcategory: 1 - RCS Level Initiating Condition: UNPLANNED loss of RCS inventory for 15 minutes or longer EAL: CU1.2 Unusual Event RCS level cannot be monitored AND EITHER

  • UNPLANNED increase in Containment Sumps, Auxiliary Building Sumps, BWST or RCDT due to a loss of RCS inventory
  • Visual observation of UNISOLABLE RCS leakage Mode Applicability:

5 - Cold Shutdown, 6 - Refueling NEI 99-01 Basis: This IC addresses the inability to restore and maintain water level to a required minimum level (or the lower limit of a level band), or a loss of the ability to monitor RCS level concurrent with indications of coolant leakage. Either of these conditions is considered to be a potential degradation of the level of safety of the plant. RCS draining evolutions that decrease RCS water inventory are carefully planned and controlled. An UNPLANNED event that results in water level decreasing below a procedurally required limit warrants the declaration of an Unusual Event due to the reduced water inventory that is available to keep the core covered. This EAL addresses a condition where all means to determine RCS level have been lost. In this condition, operators may determine that an inventory loss is occurring by observing changes in sump and/or tank levels. Sump and/or tank level changes must be evaluated against other potential sources of water flow to ensure they are indicative of leakage from the RCS. Continued loss of RCS inventory may result in escalation to the Alert emergency classification level via either IC CA1 or CA3. EAL BASES DOCUMENT Rev. 0 Page 127 of 272

ATTACHMENT 1 EAL Bases DBNPS Basis: In Cold Shutdown mode, the RCS will normally be intact and standard RCS level monitoring means are available. RCS level in the Refueling mode is normally monitored using the following instruments:

  • LI 10596
  • LI10577 A and B
  • Clear tubing used for manometer level indication at the RCS cold legs.

RCS level indications (LI 10596, LI 10577A and B and cold leg tubing) provide accurate indication of water level when the RCS is at atmospheric pressure. The reactor vessel flange is at 577 ft. 7 in. (80 in. indicated) (ref. 1). In this EAL, all water level indication is unavailable and the RCS inventory loss must be detected by indirect leakage indications (ref. 1). Sump and tank level increases must be evaluated against other potential sources of leakage such as cooling water sources inside the containment to ensure they are indicative of RCS leakage. If the make-up rate to the RCS unexplainably rises above the pre-established rate, a loss of RCS inventory may be occurring even if the source of the leakage cannot be immediately identified. Visual observation of leakage from systems connected to the RCS that cannot be isolated, or a sump sample verified by Chemistry, could also be indicative of a loss of RCS inventory. DBNPS Basis Reference(s):

1. DB-OP-06904 Shutdown Operations
2. NEI 99-01 CU1 EAL BASES DOCUMENT Rev. 0 Page 128 of 272

ATTACHMENT 1 EAL Bases Category: C - Cold Shutdown / Refueling System Malfunction Subcategory: 2 - Loss of Essential AC Power Initiating Condition: Loss of ALL offsite and ALL onsite AC power to essential buses for 15 minutes or longer EAL: CA2.1 Alert Loss of ALL offsite and ALL onsite AC power capability, Table C-2, to essential 4160V buses C1 and D1 for 15 min. (Note 1) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Table C-2 Offsite/Onsite AC Power Sources Offsite:

  • X01
  • X02
  • X11 (back-fed via Main Transformer)

Onsite:

  • EDG1
  • EDG2
  • SBODG Mode Applicability:

5 - Cold Shutdown, 6 - Refueling, D - Defueled NEI 99-01 Basis: This IC addresses a total loss of AC power that compromises the performance of ALL SAFETY SYSTEMS requiring electric power including those necessary for emergency core cooling, containment heat removal/pressure control, spent fuel heat removal and the ultimate heat sink. When in the Cold Shutdown, Refueling, or Defueled mode, this condition is not classified as a Site Area Emergency because of the increased time available to restore an essential bus to service. Additional time is available due to the reduced core decay heat load, and the lower temperatures and pressures in various plant systems. Thus, when in these modes, this EAL BASES DOCUMENT Rev. 0 Page 129 of 272

ATTACHMENT 1 EAL Bases condition represents an actual or potential substantial degradation of the level of safety of the plant. Fifteen minutes was selected as a threshold to exclude transient or momentary power losses. Escalation of the emergency classification level would be via IC CS1 or RS1. DBNPS Basis: The 4160 VAC System provides the power requirements for operation and safe shutdown of the plant. The essential switchgear are buses C1 and D1 (ref. 1). The essential buses during plant operation are normally powered from the 13.8KV offsite power system through their respective 13.8KV/4160V bus tie transformers, via the Unit Auxiliary Transformer (X11). In cold operating modes, the essential buses may be back-fed via the X11 and Main Transformer provided the main generator lead disconnect links are removed (ref. 1, 2). Credit for the X11 back-feed can only be taken if already aligned, as it takes greater than 15 minutes to align. A standby source of offsite power to each 4160V essential bus is provided from the 13.8KV offsite power system via two separate and independent 13.8KV/4160V Startup Transformers (X01 & X02). Normally each startup transformer serves as a reserve power source for only one essential bus. However, a single startup transformer can be aligned to power both essential buses (ref. 1, 2). Each essential bus has a diesel generator (EDG1 & EDG2) to supply an onsite emergency source of power to safe shutdown loads in the event of a loss of the normal power source or loss of off-site power (ref. 1). An Alternate AC power source, the SBO Diesel Generator, is located onsite. This onsite AC power source can be started from the Control Room and be loaded within 10 minutes of a SBO (ref. 1). This cold condition EAL is equivalent to the hot condition loss of ALL offsite AC power EAL SS1.1. DBNPS Basis Reference(s):

1. UFSAR Section 8.0 Electric Power
2. DB-OP-02521 Loss of AC Bus Power Sources
3. NEI 99-01 CA2 EAL BASES DOCUMENT Rev. 0 Page 130 of 272

ATTACHMENT 1 EAL Bases Category: C - Cold Shutdown / Refueling System Malfunction Subcategory: 2 - Loss of Essential AC Power Initiating Condition: Loss of ALL but one AC power source to essential buses for 15 minutes or longer EAL: CU2.1 Unusual Event AC power capability, Table C-2, to essential 4160V buses C1 and D1 reduced to a single power source for 15 min. (Note 1) AND ANY additional single power source failure will result in loss of ALL AC power to SAFETY SYSTEMS Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Table C-2 Offsite/Onsite AC Power Sources Offsite:

  • X01
  • X02
  • X11 (back-fed via Main Transformer)

Onsite:

  • EDG1
  • EDG2
  • SBODG Mode Applicability:

5 - Cold Shutdown, 6 - Refueling, D - Defueled EAL BASES DOCUMENT Rev. 0 Page 131 of 272

ATTACHMENT 1 EAL Bases NEI 99-01 Basis: This IC describes a significant degradation of offsite and onsite AC power sources such that any additional single failure would result in a loss of ALL AC power to SAFETY SYSTEMS. In this condition, the sole AC power source may be powering one, or more than one, train of safety-related equipment. When in the Cold Shutdown, Refueling, or Defueled mode, this condition is not classified as an Alert because of the increased time available to restore another power source to service. Additional time is available due to the reduced core decay heat load, and the lower temperatures and pressures in various plant systems. Thus, when in these modes, this condition is considered to be a potential degradation of the level of safety of the plant. An AC power source is a source recognized in AOPs and EOPs, and capable of supplying required power to an essential bus. Some examples of this condition are presented below.

  • A loss of ALL offsite power with a concurrent failure of ALL but one essential power source (e.g., an onsite diesel generator)
  • A loss of essential power sources (e.g., onsite diesel generators) with a single train of essential buses being fed from an offsite power source Fifteen minutes was selected as a threshold to exclude transient or momentary losses of power.

The subsequent loss of the remaining single power source would escalate the event to an Alert in accordance with IC CA2. DBNPS Basis: The 4160 VAC System provides the power requirements for operation and safe shutdown of the plant. The essential switchgear are buses C1 and D1 (ref. 1). The essential buses during plant operation are normally powered from the 13.8KV offsite power system through their respective 13.8KV/4160V bus tie transformers, via the Unit Auxiliary Transformer (X11). In cold operating modes, the essential buses may be back-fed via the X11 and Main Transformer provided the main generator lead disconnect links are removed (ref. 1, 2). Credit for the X11 back-feed can only be taken if already aligned, as it takes greater than 15 minutes to align. A standby source of offsite power to each 4160V essential bus is provided from the 13.8KV offsite power system via two separate and independent 13.8KV/4160V Startup Transformers (X01 & X02). Normally each startup transformer serves as a reserve power source for only one essential bus. However, a single startup transformer can be aligned to power both essential buses (ref. 1, 2). Each essential bus has a diesel generator (EDG1 & EDG2) to supply an onsite emergency source of power to safe shutdown loads in the event of a loss of the normal power source or loss of off-site power (ref. 1). EAL BASES DOCUMENT Rev. 0 Page 132 of 272

ATTACHMENT 1 EAL Bases An Alternate AC power source, the SBO Diesel Generator, is located onsite. This onsite AC power source can be started from the Control Room and be loaded within 10 minutes of a SBO (ref. 1). This cold condition EAL is equivalent to the hot condition EAL SA1.1. DBNPS Basis Reference(s):

1. UFSAR Section 8.0 Electric Power
2. DB-OP-02521 Loss of AC Bus Power Sources
3. NEI 99-01 CU2 EAL BASES DOCUMENT Rev. 0 Page 133 of 272

ATTACHMENT 1 EAL Bases Category: C - Cold Shutdown / Refueling System Malfunction Subcategory: 3 - RCS Temperature Initiating Condition: Inability to maintain plant in cold shutdown EAL: CA3.1 Alert UNPLANNED increase in RCS temperature to > 200°F for > Table C-3 duration (Note 1, 10) OR UNPLANNED RCS pressure increase > 10 psig due to a loss of RCS cooling (This EAL does not apply during water-solid plant conditions). Note 1: The Emergency Director should declare the event promptly upon determining that the applicable time has been exceeded, or will likely be exceeded. Note: 10 In the absence of reliable RCS temperature indication caused by the loss of decay heat removal capability, classification should be based on the RCS pressure increase criteria when the RCS is intact in Mode 5 or based on time to boil data when in Mode 6 or the RCS is not intact in Mode 5. Table C-3: RCS Heat-up Duration Thresholds Containment Closure RCS Status Heat-up Duration Status Intact (but not reduced N/A 60 min.* inventory) Not intact established 20 min.* OR not established 0 min. At reduced inventory

  • If an RCS heat removal system is in operation within this time frame and RCS temperature is being reduced, the EAL is not applicable.

Mode Applicability: 5 - Cold Shutdown, 6 - Refueling NEI 99-01 Basis: This IC addresses conditions involving a loss of decay heat removal capability or an addition of heat to the RCS in excess of that which can currently be removed. Either condition represents an actual or potential substantial degradation of the level of safety of the plant. A momentary UNPLANNED excursion above the Technical Specification cold shutdown temperature limit when the heat removal function is available does not warrant a classification. EAL BASES DOCUMENT Rev. 0 Page 134 of 272

ATTACHMENT 1 EAL Bases The RCS Heat-up Duration Thresholds table addresses an increase in RCS temperature when CONTAINMENT CLOSURE is established but the RCS is not intact, or RCS inventory is reduced (e.g., mid-loop operation). The 20-minute criterion was included to allow time for operator action to address the temperature increase. The RCS Heat-up Duration Thresholds table also addresses an increase in RCS temperature with the RCS INTACT. The status of CONTAINMENT CLOSURE is not crucial in this condition since the intact RCS is providing a high pressure barrier to a fission product release. The 60-minute time frame should allow sufficient time to address the temperature increase without a substantial degradation in plant safety. Finally, in the case where there is an increase in RCS temperature, the RCS is not intact or is at reduced inventory, and CONTAINMENT CLOSURE is not established, no heat-up duration is allowed (i.e., 0 minutes). This is because 1) the evaporated reactor coolant may be released directly into the containment atmosphere and subsequently to the environment, and

2) there is reduced reactor coolant inventory above the top of irradiated fuel.

The RCS pressure increase threshold provides a pressure-based indication of RCS heat-up in the absence of RCS temperature monitoring capability. Escalation of the emergency classification level would be via IC CS1 or RS1. DBNPS Basis: In the absence of reliable RCS temperature indication caused by the loss of decay heat removal capability, classification should be based on the RCS pressure increase criteria when the RCS is intact in Mode 5 or based on time to boil data when in Mode 6 or the RCS is not intact in Mode 5. Several instruments are capable of providing indication of RCS temperature with respect to the Technical Specification cold shutdown temperature limit (200°F, ref. 1) including:

  • Selected Incore thermocouples
  • TIRC4B2 Reactor Coolant T-Cold Wide Range (Loop 1)
  • TIRC4A2 Reactor Coolant T-Cold Wide Range (Loop 2)
  • TIRC3B5 or TIRCB6 Reactor Coolant T-Hot (Loop 1)
  • TIRC3A5 or TIRCA6 Reactor Coolant T-Hot (Loop 2)
  • DHR Display on SPDS (ref. 2)

A 10 psig RCS pressure increase can be read on various instruments such as (ref. 2):

  • PI 6365B, Loop 1 Pressure EAL BASES DOCUMENT Rev. 0 Page 135 of 272

ATTACHMENT 1 EAL Bases

  • PI 6365A, Loop 2 Pressure
  • PRS RC2A1, Loop 2 Wide Range Pressure
  • PI RC2A6, Low Range Pressure The RCS is considered in reduced inventory if (ref. 3):
  • The Reactor Coolant System is not full (loops not filled and the RCS is incapable of natural circulation), OR
  • Both steam generators are not available as a heat sink, OR
  • The refueling canal level is less than a stable level specified in the Shutdown Defense in Depth Review, typically 23 feet, with the head removed.

DBNPS Basis Reference(s):

1. DBNPS Technical Specifications Table 1.1-1
2. DB-OP-02527 Loss of Decay Heat Removal
3. NG-DB-00117 Shutdown Defense In Depth Assessment
4. NEI 99-01 CA3 EAL BASES DOCUMENT Rev. 0 Page 136 of 272

ATTACHMENT 1 EAL Bases Category: C - Cold Shutdown / Refueling System Malfunction Subcategory: 3 - RCS Temperature Initiating Condition: UNPLANNED increase in RCS temperature EAL: CU3.1 Unusual Event UNPLANNED increase in RCS temperature to > 200°F due to loss of decay heat removal capability Mode Applicability: 5 - Cold Shutdown, 6 - Refueling NEI 99-01 Basis: This IC addresses an UNPLANNED increase in RCS temperature above the Technical Specification cold shutdown temperature limit and represents a potential degradation of the level of safety of the plant. If the RCS is not intact and CONTAINMENT CLOSURE is not established during this event, the Emergency Director should also refer to IC CA3. A momentary UNPLANNED excursion above the Technical Specification cold shutdown temperature limit when the heat removal function is available does not warrant a classification. This EAL involves a loss of decay heat removal capability, or an addition of heat to the RCS in excess of that which can currently be removed, such that reactor coolant temperature cannot be maintained below the cold shutdown temperature limit specified in Technical Specifications. During this condition, there is no immediate threat of fuel damage because the core decay heat load has been reduced since the cessation of power operation. During an outage, the level in the reactor vessel will normally be maintained at or above the reactor vessel flange. Refueling evolutions that lower water level below the reactor vessel flange are carefully planned and controlled. A loss of forced decay heat removal at reduced inventory may result in a rapid increase in reactor coolant temperature depending on the time after shutdown. Escalation to Alert would be via IC CA1 based on an inventory loss or IC CA3 based on exceeding plant configuration-specific time criteria. DBNPS Basis: Several instruments are capable of providing indication of RCS temperature with respect to the Technical Specification cold shutdown temperature limit (200°F, ref. 1) including:

  • Selected Incore thermocouples EAL BASES DOCUMENT Rev. 0 Page 137 of 272

ATTACHMENT 1 EAL Bases

  • TIRC4B2 Reactor Coolant T-Cold Wide Range (Loop 1)
  • TIRC4A2 Reactor Coolant T-Cold Wide Range (Loop 2)
  • TIRC3B5 or TIRCB6 Reactor Coolant T-Hot (Loop 1)
  • TIRC3A5 or TIRCA6 Reactor Coolant T-Hot (Loop 2)
  • DHR Display on SPDS (ref. 2)

In the absence of reliable RCS temperature indication caused by a loss of decay heat removal capability, classification should be based on EAL CU3.2 should RCS level indication be subsequently lost. DBNPS Basis Reference(s):

1. DBNPS Technical Specifications Table 1.1-1 Modes
2. DB-OP-02527 Loss of Decay Heat Removal
3. NEI 99-01 CU3 EAL BASES DOCUMENT Rev. 0 Page 138 of 272

ATTACHMENT 1 EAL Bases Category: C - Cold Shutdown / Refueling System Malfunction Subcategory: 3 - RCS Temperature Initiating Condition: UNPLANNED increase in RCS temperature EAL: CU3.2 Unusual Event Loss of ALL RCS temperature and RCS level indication for 15 min. (Note 1) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Mode Applicability: 5 - Cold Shutdown, 6- Refueling NEI 99-01 Basis: This EAL addresses the inability to determine RCS temperature and level, and represents a potential degradation of the level of safety of the plant. If the RCS is not intact and CONTAINMENT CLOSURE is not established during this event, the Emergency Director should also refer to IC CA3. This EAL reflects a condition where there has been a significant loss of instrumentation capability necessary to monitor RCS conditions and operators would be unable to monitor key parameters necessary to assure core decay heat removal. During this condition, there is no immediate threat of fuel damage because the core decay heat load has been reduced since the cessation of power operation. Fifteen minutes was selected as a threshold to exclude transient or momentary losses of indication. Escalation to Alert would be via IC CA1 based on an inventory loss or IC CA3 based on exceeding plant configuration-specific time criteria. DBNPS Basis: Several instruments are capable of providing indication of RCS temperature with respect to the Technical Specification cold shutdown temperature limit (200°F, ref. 1) including:

  • Selected Incore thermocouples
  • TIRC4B2 Reactor Coolant T-Cold Wide Range (Loop 1)
  • TIRC4A2 Reactor Coolant T-Cold Wide Range (Loop 2)
  • TIRC3B5 or TIRCB6 Reactor Coolant T-Hot (Loop 1)

EAL BASES DOCUMENT Rev. 0 Page 139 of 272

ATTACHMENT 1 EAL Bases

  • TIRC3A5 or TIRCA6 Reactor Coolant T-Hot (Loop 2)
  • DHR Display on SPDS (ref. 2)

In Cold Shutdown mode, the RCS will normally be intact and standard RCS level monitoring means are available. In the Refueling mode, the RCS is not intact and RCS level may be monitored by different means, including the ability to monitor level visually. RCS level in the Refueling mode is normally monitored using the following instruments:

  • LI 10596
  • LI10577 A and B
  • Clear tubing used for manometer level indication at the RCS cold legs.

RCS level indications (LI 10596, LI 10577A and B and cold leg tubing) provide accurate indication of water level when the RCS is at atmospheric pressure. However, there is no redundant means of RCS level indication when Mode 6 is entered (ref. 2). DBNPS Basis Reference(s):

1. DBNPS Technical Specifications Table 1.1-1
2. DB-OP-02527 Loss of Decay Heat Removal
3. NEI 99-01 CU3 EAL BASES DOCUMENT Rev. 0 Page 140 of 272

ATTACHMENT 1 EAL Bases Category: C - Cold Shutdown / Refueling System Malfunction Subcategory: 4 - Loss of Essential DC Power Initiating Condition: Loss of essential DC power for 15 minutes or longer EAL: CU4.1 Unusual Event < 105 VDC voltage indications on Technical Specification required essential 125 VDC distribution panels for 15 min. (Note 1) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Mode Applicability: 5 - Cold Shutdown, 6 - Refueling NEI 99-01 Basis This IC addresses a loss of essential DC power, which compromises the ability to monitor and control operable SAFETY SYSTEMS when the plant is in the Cold Shutdown or Refueling mode. In these modes, the core decay heat load has been significantly reduced, and coolant system temperatures and pressures are lower; these conditions increase the time available to restore an essential DC bus to service. Thus, this condition is considered to be a potential degradation of the level of safety of the plant. As used in this EAL, required means the essential DC buses necessary to support operation of the in-service, or operable, train or trains of SAFETY SYSTEM equipment. For example, if Train A is out-of-service (inoperable) for scheduled outage maintenance work and Train B is in-service (operable), then a loss of essential DC power affecting Train B would require the declaration of an Unusual Event. A loss of essential DC power to Train A would not warrant an emergency classification. Fifteen minutes was selected as a threshold to exclude transient or momentary power losses. Depending upon the event, escalation of the emergency classification level would be via IC CA1 or CA3, or an IC in Recognition Category R. DBNPS Basis: The DC electrical distribution subsystem consists of two trains, designated Train 1 and Train

2. Each train consists of a 250/125 VDC motor control center (MCC), and each 250/125 VDC MCC consists of two 125 VDC buses (one positive and one negative) that can be powered from a polarity specific battery or battery charger. The two DC buses then supply a specific Essential DC Distribution Panel (D1P and D1N for DCMCC 1, and D2P and D2N for DCMCC2). The four Essential DC Distribution Panels independently supply DC electrical EAL BASES DOCUMENT Rev. 0 Page 141 of 272

ATTACHMENT 1 EAL Bases power to the four inverters, which in turn power the 120 VAC essential buses (ref. 1, 2, 3, 4, 5, 6). The Class 1E DC loads have an operating voltage range of 105 to 135 volts. The minimum battery discharge voltage (requiring opening the degraded battery output breaker) is 105 VDC (ref. 1, 6). This EAL is the cold condition equivalent of the hot condition loss of DC power EAL SS2.1. DBNPS Basis Reference(s):

1. DBNPS UFSAR Section 8.0 Electrical Power
2. DB-OP-02537 Loss of D1P and DAP
3. DB-OP-02538 Loss of D2P and DBP
4. DB-OP-02539 Loss of D1N and DAN
5. DB-OP-02540 Loss of D2N and DBN
6. System Description for 125/250 VDC and 120 V Instrumentation AC System
7. NEI 99-01 CU4 EAL BASES DOCUMENT Rev. 0 Page 142 of 272

ATTACHMENT 1 EAL Bases Category: C - Cold Shutdown / Refueling System Malfunction Subcategory: 5 - Loss of Communications Initiating Condition: Loss of ALL onsite or offsite communications capabilities EAL: CU5.1 Unusual Event Loss of ALL Table C-4 onsite communication methods Table C-4 Communication Methods System Onsite ORO NRC Public Address (Gaitronics) X Onsite Radios X Plant Telephones X X X Commercial Telephones X X X 4-Way Ringdown Circuit X Satellite Phones X X Cellular Phones X X NRC Emergency Telephone System (ETS) X Mode Applicability: 5 - Cold Shutdown, 6 - Refueling, D - Defueled NEI 99-01 Basis: This IC addresses a significant loss of on-site or offsite communications capabilities. While not a direct challenge to plant or personnel safety, this event warrants prompt notifications to OROs and the NRC. This IC should be assessed only when extraordinary means are being utilized to make communications possible (e.g., use of non-plant, privately owned equipment, relaying of on-site information via individuals or multiple radio transmission points, individuals being sent to offsite locations, etc.). EAL BASES DOCUMENT Rev. 0 Page 143 of 272

ATTACHMENT 1 EAL Bases This EAL addresses a total loss of the communications methods used in support of routine plant operations. DBNPS Basis: Onsite/Offsite Response Organization (ORO)/NRC communications include one or more of the systems listed in Table C-4 (ref. 1, 2). Public Address (Gaitronics) System The DBNPS public address system provides paging and party line communications between stations located throughout the plant. Inside and outside type wall and desk-mounted stations are used to communicate between roaming personnel and fixed work locations. Plant-wide instructions are issued using the paging feature. On-site Radio System Radio systems can be used for communication among operators, off-site monitoring teams, the control room, security, TSC and EOF. Plant Telephone System The DBNPS plant telephone system provides communication capability between telephone stations located within the plant by dialing the four-digit telephone station code as well as external or offsite calling capability. Commercial Telephones Commercial telephone lines, which supply public telephone communications, are employed by DBNPS. The local service provider provides primary and secondary power for their lines at the Central Office. 4-Way Ringdown Circuit Dedicated ring down line that includes the State and County EOCs, the Ohio Highway Patrol Office, the Lucas County and Ottawa County Sheriff's dispatcher offices, the Emergency Operations Facility, and the Control Room. Satellite Phones Portable satellite telephones are available which enable communication when all other phone systems are inoperable, e.g. following a major external event. Internal batteries, external DC sources as well as external AC sources can power these portable systems. EAL BASES DOCUMENT Rev. 0 Page 144 of 272

ATTACHMENT 1 EAL Bases Cellular Phones Cellular phones may be used during emergencies if other communications means are not readily available or are inoperable. These phones are not expected to be used in the Control Room or Power Block due to interference with plant equipment and loss of signal to the phone. NRC Emergency Telephone System The NRC uses a DBNPS dedicated telephone line, which allows direct telephone communications from the plant to NRC regional and national offices. The DBNPS communications line provides a link independent of the local public telephone network. Telephones connected to this network are located in the DBNPS Control Room, Technical Support Center, and Emergency Operations Facility and can be used to establish NRC Emergency Notification System (ENS) and Health Physics Network (HPN) capability. This EAL is the cold condition equivalent of the hot condition EAL SU7.1. DBNPS Basis Reference(s):

1. DBNPS UFSAR Section 9.5.2 Communications Systems
2. DBNPS Emergency Plan 7.6 Communications Systems
3. NEI 99-01 CU5 EAL BASES DOCUMENT Rev. 0 Page 145 of 272

ATTACHMENT 1 EAL Bases Category: C - Cold Shutdown / Refueling System Malfunction Subcategory: 5 - Loss of Communications Initiating Condition: Loss of ALL onsite or offsite communications capabilities EAL: CU5.2 Unusual Event Loss of ALL Table C-4 ORO communication methods Table C-4 Communication Methods System Onsite ORO NRC Public Address (Gaitronics) X Onsite Radios X Plant Telephones X X X Commercial Telephones X X X 4-Way Ringdown Circuit X Satellite Phones X X Cellular Phones X X NRC Emergency Telephone System (ETS) X Mode Applicability: 5 - Cold Shutdown, 6 - Refueling, D - Defueled NEI 99-01 Basis: This IC addresses a significant loss of on-site or offsite communications capabilities. While not a direct challenge to plant or personnel safety, this event warrants prompt notifications to OROs and the NRC. This IC should be assessed only when extraordinary means are being utilized to make communications possible (e.g., use of non-plant, privately owned equipment, relaying of on-site information via individuals or multiple radio transmission points, individuals being sent to offsite locations, etc.). EAL BASES DOCUMENT Rev. 0 Page 146 of 272

ATTACHMENT 1 EAL Bases This EAL addresses a total loss of the communications methods used to notify all OROs of an emergency declaration. The OROs referred to here are the State, Lucas and Ottawa County EOCs. DBNPS Basis: Onsite/Offsite Response Organization (ORO)/NRC communications include one or more of the systems listed in Table C-4 (ref. 1, 2). Public Address (Gaitronics) System The DBNPS public address system provides paging and party line communications between stations located throughout the plant. Inside and outside type wall and desk-mounted stations are used to communicate between roaming personnel and fixed work locations. Plant-wide instructions are issued using the paging feature. On-site Radio System Radio systems can be used for communication among operators, off-site monitoring teams, the control room, security, TSC and EOF. Plant Telephone System The DBNPS plant telephone system provides communication capability between telephone stations located within the plant by dialing the four-digit telephone station code as well as external or offsite calling capability. Commercial Telephones Commercial telephone lines, which supply public telephone communications, are employed by DBNPS. The local service provider provides primary and secondary power for their lines at the Central Office. 4-Way Ringdown Circuit Dedicated ring down line that includes the State and County EOCs, the Ohio Highway Patrol Office, the Lucas County and Ottawa County Sheriff's dispatcher offices, the Emergency Operations Facility, and the Control Room. Satellite Phones Portable satellite telephones are available which enable communication when all other phone systems are inoperable, e.g. following a major external event. Internal batteries, external DC sources as well as external AC sources can power these portable systems. EAL BASES DOCUMENT Rev. 0 Page 147 of 272

ATTACHMENT 1 EAL Bases Cellular Phones Cellular phones may be used during emergencies if other communications means are not readily available or are inoperable. These phones are not expected to be used in the Control Room or Power Block due to interference with plant equipment and loss of signal to the phone. NRC Emergency Telephone System The NRC uses a DBNPS dedicated telephone line, which allows direct telephone communications from the plant to NRC regional and national offices. The DBNPS communications line provides a link independent of the local public telephone network. Telephones connected to this network are located in the DBNPS Control Room, Technical Support Center, and Emergency Operations Facility and can be used to establish NRC Emergency Notification System (ENS) and Health Physics Network (HPN) capability. This EAL is the cold condition equivalent of the hot condition EAL SU7.2. DBNPS Basis Reference(s):

1. DBNPS UFSAR Section 9.5.2 Communications Systems
2. DBNPS Emergency Plan 7.6 Communications Systems
3. NEI 99-01 CU5 EAL BASES DOCUMENT Rev. 0 Page 148 of 272

ATTACHMENT 1 EAL Bases Category: C - Cold Shutdown / Refueling System Malfunction Subcategory: 5 - Loss of Communications Initiating Condition: Loss of ALL onsite or offsite communications capabilities EAL: CU5.3 Unusual Event Loss of ALL Table C-4 NRC communication methods Table C-4 Communication Methods System Onsite ORO NRC Public Address (Gaitronics) X Onsite Radios X Plant Telephones X X X Commercial Telephones X X X 4-Way Ringdown Circuit X Satellite Phones X X Cellular Phones X X NRC Emergency Telephone System (ETS) X Mode Applicability: 5 - Cold Shutdown, 6 - Refueling, D - Defueled NEI 99-01 Basis: This IC addresses a significant loss of on-site or offsite communications capabilities. While not a direct challenge to plant or personnel safety, this event warrants prompt notifications to OROs and the NRC. This IC should be assessed only when extraordinary means are being utilized to make communications possible (e.g., use of non-plant, privately owned equipment, relaying of on-site information via individuals or multiple radio transmission points, individuals being sent to offsite locations, etc.). EAL BASES DOCUMENT Rev. 0 Page 149 of 272

ATTACHMENT 1 EAL Bases This EAL addresses a total loss of the communications methods used to notify the NRC of an emergency declaration. DBNPS Basis: Onsite/Offsite Response Organization (ORO)/NRC communications include one or more of the systems listed in Table C-4 (ref. 1, 2). Public Address (Gaitronics) System The DBNPS public address system provides paging and party line communications between stations located throughout the plant. Inside and outside type wall and desk-mounted stations are used to communicate between roaming personnel and fixed work locations. Plant-wide instructions are issued using the paging feature. On-site Radio System Radio systems can be used for communication among operators, off-site monitoring teams, the control room, security, TSC and EOF. Plant Telephone System The DBNPS plant telephone system provides communication capability between telephone stations located within the plant by dialing the four-digit telephone station code as well as external or offsite calling capability. Commercial Telephones Commercial telephone lines, which supply public telephone communications, are employed by DBNPS. The local service provider provides primary and secondary power for their lines at the Central Office. 4-Way Ringdown Circuit Dedicated ring down line that includes the State and County EOCs, the Ohio Highway Patrol Office, the Lucas County and Ottawa County Sheriff's dispatcher offices, the Emergency Operations Facility, and the Control Room. Satellite Phones Portable satellite telephones are available which enable communication when all other phone systems are inoperable, e.g. following a major external event. Internal batteries, external DC sources as well as external AC sources can power these portable systems. EAL BASES DOCUMENT Rev. 0 Page 150 of 272

ATTACHMENT 1 EAL Bases Cellular Phones Cellular phones may be used during emergencies if other communications means are not readily available or are inoperable. These phones are not expected to be used in the Control Room or Power Block due to interference with plant equipment and loss of signal to the phone. NRC Emergency Telephone System The NRC uses a DBNPS dedicated telephone line, which allows direct telephone communications from the plant to NRC regional and national offices. The DBNPS communications line provides a link independent of the local public telephone network. Telephones connected to this network are located in the DBNPS Control Room, Technical Support Center, and Emergency Operations Facility and can be used to establish NRC Emergency Notification System (ENS) and Health Physics Network (HPN) capability. This EAL is the cold condition equivalent of the hot condition EAL SU7.3. DBNPS Basis Reference(s):

1. DBNPS UFSAR Section 9.5.2 Communications Systems
2. DBNPS Emergency Plan 7.6 Communications Systems
3. NEI 99-01 CU5 EAL BASES DOCUMENT Rev. 0 Page 151 of 272

ATTACHMENT 1 EAL Bases Category: C - Cold Shutdown / Refueling System Malfunction Subcategory: 6 - Hazardous Event Affecting SAFETY SYSTEMS Initiating Condition: Hazardous event affecting a SAFETY SYSTEM needed for the current operating mode EAL: CA6.1 Alert The occurrence of ANY Table C-5 Hazardous Event AND EITHER: z Event has caused indications of degraded performance in at least one train of a SAFETY SYSTEM required for the current operating mode z The event has caused VISIBLE DAMAGE to a SAFETY SYSTEM component or structure required for the current operating mode Table C-5 Hazardous Events z Seismic event (earthquake) z Internal or external FLOODING event z High winds or tornado strike z FIRE z EXPLOSION z Other events with similar hazard characteristics as determined by the Emergency Director Mode Applicability: 5 - Cold Shutdown, 6 - Refueling NEI 99-01 Basis: This IC addresses a hazardous event that causes damage to a SAFETY SYSTEM, or a structure containing SAFETY SYSTEM components, needed for the current operating mode. This condition significantly reduces the margin to a loss or potential loss of a fission product barrier, and therefore represents an actual or potential substantial degradation of the level of safety of the plant. EAL BASES DOCUMENT Rev. 0 Page 152 of 272

ATTACHMENT 1 EAL Bases The first conditional addresses damage to a SAFETY SYSTEM train that is in service/operation since indications for it will be readily available. The indications of degraded performance should be significant enough to cause concern regarding the operability or reliability of the SAFETY SYSTEM train. The second conditional addresses damage to a SAFETY SYSTEM component that is not in service/operation or readily apparent through indications alone, or to a structure containing SAFETY SYSTEM components. Operators will make this determination based on the totality of available event and damage report information. This is intended to be a brief assessment not requiring lengthy analysis or quantification of the damage. Escalation of the emergency classification level would be via IC CS1 or RS1. DBNPS Basis:

  • Ground motion acceleration of 0.08g horizontal or 0.053g vertical is the Maximum Probable Earthquake as is considered generically as the Operating Basis Earthquake for DBNPS (ref. 8). Control room alarm indication of an earthquake greater than OBE is indicated on the seismic control panel (C5764A). RA-EP-02820 Earthquake provides the guidance for determining any required response actions if the OBE earthquake threshold is exceeded (ref. 1). The significance of seismic events is discussed under EAL HU2.1.
  • Internal FLOODING occurs from breaches of water systems that are located inside plant buildings and are connected to large water sources such as Intake Forebay or tanks (ref.

2).

  • External FLOODING may be due to high lake level. DBNPS flood emergency elevation is 578 ft. Site access would be limited to rail, boat or helicopter (ref. 3).
  • Seismic Category I structures are analyzed to withstand a sustained, design wind velocity of at least 90 mph. (ref. 4).
  • Areas containing functions and systems required for safe shutdown of the plant are identified by fire area in the fire abnormal procedure (ref. 5).
  • An EXPLOSION that degrades the performance of a SAFETY SYSTEM train or visibly damages a SAFETY SYSTEM component or structure would be classified under this EAL (ref. 6).

DBNPS Basis Reference(s):

1. RA-EP-02820 Earthquake
2. RA-EP-02880 Internal Flooding
3. RA-EP-02830 Flooding
4. DBNPS UFSAR Section 3.3.1 Wind Criteria
5. DB-OP-02501 Serious Station Fire
6. RA-EP-02840 Explosion EAL BASES DOCUMENT Rev. 0 Page 153 of 272

ATTACHMENT 1 EAL Bases

7. NEI 99-01 CA6
8. Updated FSAR Section 3.1 Seismic Design EAL BASES DOCUMENT Rev. 0 Page 154 of 272

ATTACHMENT 1 EAL Bases Category S - System Malfunction EAL Group: Hot Conditions (RCS temperature > 200ºF); EALs in this category are applicable only in one or more hot operating modes. Numerous system-related equipment failure events that warrant emergency classification have been identified in this category. They may pose actual or potential threats to plant safety. The events of this category pertain to the following subcategories:

1. Loss of Essential AC Power Loss of emergency electrical power can compromise plant SAFETY SYSTEM operability including decay heat removal and emergency core cooling systems, which may be necessary to ensure fission product barrier integrity. This category includes loss of onsite and offsite sources for 4160 V essential buses.
2. Loss of Essential DC Power Loss of emergency electrical power can compromise plant SAFETY SYSTEM operability including decay heat removal and emergency core cooling systems, which may be necessary to ensure fission product barrier integrity. This category includes loss of essential plant 125 VDC power sources.
3. Loss of Control Room Indications Certain events that degrade plant operators ability to assess plant conditions within the plant warrant emergency classification. Losses of indicators are in this subcategory.
4. RCS Activity During normal operation, reactor coolant fission product activity is very low. Small concentrations of fission products in the coolant are primarily from the fission of tramp uranium in the fuel clad or minor perforations in the clad itself. Any significant increase from these base-line levels (2% - 5% clad failures) is indicative of fuel failures and is covered under the Fission Product Barrier Degradation category. However, lesser amounts of clad damage may result in coolant activity exceeding Technical Specification limits. These fission products will be circulated with the reactor coolant and can be detected by coolant sampling.
5. RCS Leakage The reactor vessel provides a volume for the coolant that covers the reactor core. The reactor pressure vessel and associated pressure piping (reactor coolant system) together provide a barrier to limit the release of radioactive material should the reactor fuel clad EAL BASES DOCUMENT Rev. 0 Page 155 of 272

ATTACHMENT 1 EAL Bases integrity fail. Excessive RCS leakage greater than Technical Specification limits indicates potential pipe cracks that may propagate to an extent threatening fuel clad, RCS and containment integrity.

6. RPS Failure This subcategory includes events related to failure of the Reactor Protection System (RPS) to initiate and complete reactor trips. In the plant licensing basis, postulated failures of the RPS to complete a reactor trip comprise a specific set of analyzed events referred to as Anticipated Transient Without Scram (ATWS) events. For EAL classification, however, ATWS is intended to mean ANY trip failure event that does not achieve reactor shutdown.

If RPS actuation fails to assure reactor shutdown, positive control of reactivity is at risk and could cause a threat to fuel clad, RCS and containment integrity.

7. Loss of Communications Certain events that degrade plant operators ability to communicate with essential personnel within or external to the plant warrant emergency classification.
8. Containment Failure Failure of containment isolation capability (under conditions in which the containment is not currently challenged) warrants emergency classification. Failure of containment pressure control capability also warrants emergency classification.
9. Hazardous Event Affecting SAFETY SYSTEMS Various natural and technological events that result in degraded plant SAFETY SYSTEM performance or significant visible damage warrant emergency classification under this subcategory.

EAL BASES DOCUMENT Rev. 0 Page 156 of 272

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 1 - Loss of Essential AC Power Initiating Condition: Prolonged loss of ALL offsite and ALL onsite AC power to essential buses EAL: SG1.1 General Emergency Loss of ALL offsite and ALL onsite AC power capability, Table S-1, to essential 4160V buses C1 and D1 AND EITHER:

  • Restoration of at least one essential bus in < 4 hours is not likely (Note 1)
  • Calculated Clad Temperature in Region 3 (DB-OP-02000 Figure 2)

Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Table S-1 Offsite/Onsite AC Power Sources Offsite:

  • X11
  • X11 (back-fed via Main Transformer)
  • X01
  • X02 Onsite:
  • EDG1
  • EDG2
  • SBODG Mode Applicability:

1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown NEI 99-01 Basis: This IC addresses a prolonged loss of ALL power sources to AC essential buses. A loss of ALL AC power compromises the performance of ALL SAFETY SYSTEMS requiring electric power including those necessary for emergency core cooling, containment heat removal/pressure control, spent fuel heat removal and the ultimate heat sink. A prolonged EAL BASES DOCUMENT Rev. 0 Page 157 of 272

ATTACHMENT 1 EAL Bases loss of these buses will lead to a loss of one or more fission product barriers. In addition, fission product barrier monitoring capabilities may be degraded under these conditions. The EAL should require declaration of a General Emergency prior to meeting the thresholds for IC FG1. This will allow additional time for implementation of offsite protective actions. Escalation of the emergency classification from Site Area Emergency will occur if it is projected that power cannot be restored to at least one AC essential bus by the end of the analyzed station blackout coping period. Beyond this time, plant responses and event trajectory are subject to greater uncertainty, and there is an increased likelihood of challenges to multiple fission product barriers. The estimate for restoring at least one essential bus should be based on a realistic appraisal of the situation. Mitigation actions with a low probability of success should not be used as a basis for delaying a classification upgrade. The goal is to maximize the time available to prepare for, and implement, protective actions for the public. The EAL will also require a General Emergency declaration if the loss of AC power results in parameters that indicate an inability to adequately remove decay heat from the core. DBNPS Basis: This EAL is indicated by the extended loss of ALL offsite and onsite AC power capability to 4160V essential buses C1 and D1 either for greater than 4 hours or that has resulted in indications of an actual loss of adequate core cooling. Indication of continuing core cooling degradation is manifested by Calculated Clad Temperature in Region 3 (DB-OP-02000 Figure 2) (ref. 3). The 4160 VAC System provides the power requirements for operation and safe shutdown of the plant. The essential switchgear are buses C1 and D1 (ref. 1). The essential buses during plant operation are normally powered from the 13.8KV offsite power system through their respective 13.8KV/4160V bus tie transformers, via the Unit Auxiliary Transformer (X11). In non-power operating modes, the essential buses may be back-fed via the X11 and Main Transformer provided the main generator lead disconnect links are removed (ref. 1, 2). A standby source of offsite power to each 4160V essential bus is provided from the 13.8KV offsite power system via two separate and independent 13.8KV/4160V Startup Transformers (X01 & X02). Normally each startup transformer serves as a reserve power source for only one essential bus. However, a single startup transformer can be aligned to power both essential buses (ref. 1, 2). Each essential bus has a diesel generator (EDG1 & EDG2) to supply an onsite emergency source of power to safe shutdown loads in the event of a loss of the normal power source or loss of off-site power (ref. 1). EAL BASES DOCUMENT Rev. 0 Page 158 of 272

ATTACHMENT 1 EAL Bases An Alternate AC power source, the Station Black Out (SBO) Diesel Generator, is located onsite. This onsite AC power source can be started from the Control Room and be loaded within 10 minutes of a SBO (ref. 1). The SBODG fuel oil supply is separate from fuel oil supply for the station's EDGs. The SBODG fuel oil supply tank capacity is based on an eight-hour supply with the SBODG at rated load. A minimum supply of four hours must be stored in this tank to meet the site's station blackout duration analysis conditions (ref 1). Indication of continuing core cooling degradation must be based on fission product barrier monitoring with particular emphasis on Emergency Director judgment as it relates to IMMINENT Loss or Potential Loss of fission product barriers and degraded ability to monitor fission product barriers. Indication of continuing core cooling degradation is manifested by Calculated Clad Temperature in Region 3 (DB-OP-02000 Figure 2). Figure 2, Incore T/C Temperature vs. RCS Pressure for ICC, provides indication of how serious core conditions are based upon combinations of RCS pressure and incore thermocouple temperatures. If the RCS P-T point is in Region 3, the cladding temperatures in the high power regions of the Core may be 1400ºF or higher. This is a serious condition, which could lead to significant amounts of H2 production; Core damage may be unavoidable (ref. 3, 4). DBNPS Basis Reference(s):

1. UFSAR Section 8.0 Electric Power
2. DB-OP-02521 Loss of AC Bus Power Sources
3. DB-OP-02000 Figure 2, Incore T/C Temperature vs. RC Pressure for Inadequate Core Cooling
4. Bases and Deviation Document for DB-OP-02000
5. NEI 99-01 SG1 EAL BASES DOCUMENT Rev. 0 Page 159 of 272

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 1 - Loss of Essential AC Power Initiating Condition: Loss of ALL essential AC and DC power sources for 15 minutes or longer EAL: SG1.2 General Emergency Loss of ALL offsite and ALL onsite AC power capability, Table S-1, to essential 4160V buses C1 and D1 for 15 min. AND Loss of ALL 125 VDC power based on battery bus voltage indications < 105 VDC on ALL essential DC distribution panels D1P, D1N, D2P and D2N for 15 min. (Note 1) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Table S-1 Offsite/Onsite AC Power Sources Offsite:

  • X11
  • X11 (back-fed via Main Transformer)
  • X01
  • X02 Onsite:
  • EDG1
  • EDG2
  • SBODG Mode Applicability:

1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown EAL BASES DOCUMENT Rev. 0 Page 160 of 272

ATTACHMENT 1 EAL Bases NEI 99-01 Basis: This IC addresses a concurrent and prolonged loss of both essential AC AND DC power. A loss of ALL essential AC power compromises the performance of ALL SAFETY SYSTEMS requiring electric power including those necessary for emergency core cooling, containment heat removal/pressure control, spent fuel heat removal and the ultimate heat sink. A loss of essential DC power compromises the ability to monitor and control SAFETY SYSTEMS. A sustained loss of both AC and DC power will lead to multiple challenges to fission product barriers. Fifteen minutes was selected as a threshold to exclude transient or momentary power losses. The 15-minute emergency declaration clock begins at the point when both EAL thresholds are met. DBNPS Basis: This EAL is indicated by the loss of ALL offsite and onsite essential AC power capability to 4160V essential buses C1 and D1 for greater than 15 minutes in combination with degraded DC power voltage. This EAL addresses operating experience from the March 2011 accident at Fukushima Daiichi. The 4160 VAC System provides the power requirements for operation and safe shutdown of the plant. The essential switchgear are buses C1 and D1 (ref. 1). The essential buses during plant operation are normally powered from the 13.8KV offsite power system through their respective 13.8KV/4160V bus tie transformers, via the Unit Auxiliary Transformer (X11). In non-power operating modes, the essential buses may be back-fed via the X11 and Main Transformer provided the main generator lead disconnect links are removed (ref. 1, 2). Credit for the X11 back-feed can only be taken if already aligned, as it takes greater than 15 minutes to align. A standby source of offsite power to each 4160V essential bus is provided from the 13.8KV offsite power system via two separate and independent 13.8KV/4160V Startup Transformers (X01 & X02). Normally each startup transformer serves as a reserve power source for only one essential bus. However, a single startup transformer can be aligned to power both essential buses (ref. 1, 2). Each essential bus has a diesel generator (EDG1 & EDG2) to supply an onsite emergency source of power to safe shutdown loads in the event of a loss of the normal power source or loss of off-site power (ref. 1). An Alternate AC power source, the Station Black Out (SBO) Diesel Generator, is located onsite. This onsite AC power source can be started from the Control Room and be loaded within 10 minutes of a SBO (ref. 1). The DC electrical distribution subsystem consists of two trains, designated Train 1 and Train

2. Each train consists of a 250/125 VDC motor control center (MCC), and each 250/125 VDC MCC consists of two 125 VDC buses (one positive and one negative) that can be powered EAL BASES DOCUMENT Rev. 0 Page 161 of 272

ATTACHMENT 1 EAL Bases from a polarity specific battery or battery charger. The two DC buses then supply a specific Essential DC Distribution Panel (D1P and D1N for DCMCC 1, and D2P and D2N for DCMCC 2). The four Essential DC Distribution Panels independently supply DC electrical power to the four inverters, which in turn power the 120 VAC essential buses (ref. 1, 3, 4, 5, 6, 7). The Class 1E DC loads have an operating voltage range of 105 to 135 volts. The minimum battery discharge voltage (requiring opening the degraded battery output breaker) is 105 VDC (ref. 1, 7). DBNPS Basis Reference(s):

1. UFSAR Section 8.0 Electric Power
2. DB-OP-02521 Loss of AC Bus Power Sources
3. DB-OP-02537 Loss of D1P and DAP
4. DB-OP-02538 Loss of D2P and DBP
5. DB-OP-02539 Loss of D1N and DAN
6. DB-OP-02540 Loss of D2N and DBN
7. System Description for 125/250 VDC and 120 V Instrumentation AC System
8. NEI 99-01 SG8 EAL BASES DOCUMENT Rev. 0 Page 162 of 272

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 1 - Loss of Essential AC Power Initiating Condition: Loss of ALL offsite power and ALL onsite AC power to essential buses for 15 minutes or longer EAL: SS1.1 Site Area Emergency Loss of ALL offsite and ALL onsite AC power capability, Table S-1, to essential 4160V buses C1 and D1 for 15 min. (Note 1) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Table S-1 Offsite/Onsite AC Power Sources Offsite:

  • X11
  • X11 (back-fed via Main Transformer)
  • X01
  • X02 Onsite:
  • EDG1
  • EDG2
  • SBODG Mode Applicability:

1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown NEI 99-01 Basis: This IC addresses a total loss of AC power that compromises the performance of ALL SAFETY SYSTEMS requiring electric power including those necessary for emergency core cooling, containment heat removal/pressure control, spent fuel heat removal and the ultimate heat sink. In addition, fission product barrier monitoring capabilities may be degraded under these conditions. This IC represents a condition that involves actual or likely major failures of plant functions needed for the protection of the public. Fifteen minutes was selected as a threshold to exclude transient or momentary power losses. EAL BASES DOCUMENT Rev. 0 Page 163 of 272

ATTACHMENT 1 EAL Bases Escalation of the emergency classification level would be via ICs RG1, FG1 or SG1. DBNPS Basis: This EAL is indicated by the loss of ALL offsite and onsite AC power capability (Table S-1) to 4160V essential buses C1 and D1. The essential switchgear are buses C1 (Train A) and D1 (Train B) (ref. 1). For emergency classification purposes, capability means that an AC power source is available to the essential buses, whether or not the buses are powered from it. The 4160 VAC System provides the power requirements for operation and safe shutdown of the plant. The essential switchgear are buses C1 and D1 (ref. 1). The essential buses during plant operation are normally powered from the 13.8KV offsite power system through their respective 13.8KV/4160V bus tie transformers, via the Unit Auxiliary Transformer (X11). In non-power operating modes, the essential buses may be back-fed via the X11 and Main Transformer provided the main generator lead disconnect links are removed (ref. 1, 2). Credit for the X11 back-feed can only be taken if already aligned, as it takes greater than 15 minutes to align. A standby source of offsite power to each 4160V essential bus is provided from the 13.8KV offsite power system via two separate and independent 13.8KV/4160V Startup Transformers (X01 & X02). Normally each startup transformer serves as a reserve power source for only one essential bus. However, a single startup transformer can be aligned to power both essential buses (ref. 1, 2). Each essential bus has a diesel generator (EDG1 & EDG2) to supply an onsite emergency source of power to safe shutdown loads in the event of a loss of the normal power source or loss of off-site power (ref. 1). An Alternate AC power source, the Station Black Out (SBO) Diesel Generator, is located onsite. This onsite AC power source can be started from the Control Room and be loaded within 10 minutes of a SBO (ref. 1). The 15-minute interval was selected as a threshold to exclude transient or momentary power losses. The interval begins when both offsite and onsite AC power capability are lost. DBNPS Basis Reference(s):

1. UFSAR Section 8.0 Electric Power
2. DB-OP-02521 Loss of AC Bus Power Sources
3. NEI 99-01 SS1 EAL BASES DOCUMENT Rev. 0 Page 164 of 272

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 1 - Loss of Essential AC Power Initiating Condition: Loss of ALL but one AC power source to essential buses for 15 minutes or longer EAL: SA1.1 Alert AC power capability, Table S-1, to essential 4160V buses C1 and D1 reduced to a single power source for 15 min. (Note 1) AND ANY additional single power source failure will result in loss of ALL AC power to SAFETY SYSTEMS Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Table S-1 Offsite/Onsite AC Power Sources Offsite:

  • X11
  • X11 (back-fed via Main Transformer)
  • X01
  • X02 Onsite:
  • EDG1
  • EDG2
  • SBODG Mode Applicability:

1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4- Hot Shutdown Basis: NEI 99-01 Basis: This IC describes a significant degradation of offsite and onsite AC power sources such that ANY additional single failure would result in a loss of ALL AC power to SAFETY SYSTEMS. EAL BASES DOCUMENT Rev. 0 Page 165 of 272

ATTACHMENT 1 EAL Bases In this condition, the sole AC power source may be powering one, or more than one, train of safety-related equipment. This IC provides an escalation path from IC SU1. An AC power source is a source recognized in AOPs and EOPs, and capable of supplying required power to an essential bus. Some examples of this condition are presented below. z A loss of ALL offsite power with a concurrent failure of ALL but one emergency power source (e.g., an onsite diesel generator) z A loss of ALL offsite power and loss of ALL emergency power sources (e.g., onsite diesel generators) with a single train of essential buses being back-fed from the unit main generator z A loss of emergency power sources (e.g., onsite diesel generators) with a single train of essential buses being fed from an offsite power source Fifteen minutes was selected as a threshold to exclude transient or momentary losses of power. Escalation of the emergency classification level would be via IC SS1. DBNPS Basis: For emergency classification purposes, capability means that an AC power source is available to the essential buses, whether or not the buses are powered from it. The 4160 VAC System provides the power requirements for operation and safe shutdown of the plant. The essential switchgear are buses C1 and D1 (ref. 1). The essential buses during plant operation are normally powered from the 13.8KV offsite power system through their respective 13.8KV/4160V bus tie transformers, via the Unit Auxiliary Transformer (X11). In non-power operating modes, the essential buses may be back-fed via the X11 and Main Transformer provided the main generator lead disconnect links are removed (ref. 1, 2). Credit for the X11 back-feed can only be taken if already aligned, as it takes greater than 15 minutes to align. A standby source of offsite power to each 4160V essential bus is provided from the 13.8KV offsite power system via two separate and independent 13.8KV/4160V Startup Transformers (X01 & X02). Normally each startup transformer serves as a reserve power source for only one essential bus. However, a single startup transformer can be aligned to power both essential buses (ref. 1, 2). Each essential bus has a diesel generator (EDG1 & EDG2) to supply an onsite emergency source of power to safe shutdown loads in the event of a loss of the normal power source or loss of off-site power (ref. 1). An Alternate AC power source, the Station Black Out (SBO) Diesel Generator, is located onsite. This onsite AC power source can be started from the Control Room and be loaded within 10 minutes of a SBO (ref. 1). EAL BASES DOCUMENT Rev. 0 Page 166 of 272

ATTACHMENT 1 EAL Bases The 15-minute interval was selected as a threshold to exclude transient or momentary power losses. If the capability of a second source of essential bus power is not restored within 15 minutes, an Alert is declared under this EAL. DBNPS Basis Reference(s):

1. UFSAR Section 8.0 Electric Power
2. DB-OP-02521 Loss of AC Bus Power Sources
3. NEI 99-01 SA1 EAL BASES DOCUMENT Rev. 0 Page 167 of 272

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 1 - Loss of Essential AC Power Initiating Condition: Loss of ALL offsite AC power capability to essential buses for 15 minutes or longer EAL: SU1.1 Unusual Event Loss of ALL offsite AC power capability, Table S-1, to essential 4160V buses C1 and D1 for 15 min. (Note 1) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Table S-1 Offsite/Onsite AC Power Sources Offsite:

  • X11
  • X11 (back-fed via Main Transformer)
  • X01
  • X02 Onsite:
  • EDG1
  • EDG2
  • SBODG Mode Applicability:

1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown Basis: NEI 99-01 Basis: This IC addresses a prolonged loss of offsite power. The loss of offsite power sources renders the plant more vulnerable to a complete loss of power to AC essential buses. This condition represents a potential reduction in the level of safety of the plant. For emergency classification purposes, capability means that an offsite AC power source(s) is available to the essential buses, whether or not the buses are powered from it. EAL BASES DOCUMENT Rev. 0 Page 168 of 272

ATTACHMENT 1 EAL Bases Fifteen minutes was selected as a threshold to exclude transient or momentary losses of offsite power. Escalation of the emergency classification level would be via IC SA1. DBNPS Basis: For emergency classification purposes, capability means that an AC power source is available to the essential buses, whether or not the buses are powered from it. The 4160 VAC System provides the power requirements for operation and safe shutdown of the plant. The essential switchgear are buses C1 and D1 (ref. 1). The essential buses during plant operation are normally powered from the 13.8KV offsite power system through their respective 13.8KV/4160V bus tie transformers, via the Unit Auxiliary Transformer (X11). In non-power operating modes, the essential buses may be back-fed via the X11 and Main Transformer provided the main generator lead disconnect links are removed (ref. 1, 2). Credit for the X11 back-feed can only be taken if already aligned, as it takes greater than 15 minutes to align. A standby source of offsite power to each 4160V essential bus is provided from the 13.8KV offsite power system via two separate and independent 13.8KV/4160V Startup Transformers (X01 & X02). Normally each startup transformer serves as a reserve power source for only one essential bus. However, a single startup transformer can be aligned to power both essential buses (ref. 1, 2). Each essential bus has a diesel generator (EDG1 & EDG2) to supply an onsite emergency source of power to safe shutdown loads in the event of a loss of the normal power source or loss of off-site power (ref. 1). An Alternate AC power source, the Station Black Out (SBO) Diesel Generator, is located onsite. This onsite AC power source can be started from the Control Room and be loaded within 10 minutes of a SBO (ref. 1). The 15-minute interval was selected as a threshold to exclude transient or momentary power losses. DBNPS Basis Reference(s):

1. UFSAR Section 8.0 Electric Power
2. DB-OP-02521 Loss of AC Bus Power Sources
3. NEI 99-01 SU1 EAL BASES DOCUMENT Rev. 0 Page 169 of 272

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 2 - Loss of Essential DC Power Initiating Condition: Loss of ALL essential DC power for 15 minutes or longer EAL: SS2.1 Site Area Emergency Loss of ALL 125 VDC power based on battery bus voltage indications < 105 VDC on ALL essential DC distribution panels D1P, D1N, D2P and D2N for 15 min. (Note 1) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Mode Applicability: 1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown NEI 99-01 Basis: This IC addresses a loss of essential DC power, which compromises the ability to monitor and control SAFETY SYSTEMS. In modes above Cold Shutdown, this condition involves a major failure of plant functions needed for the protection of the public. Fifteen minutes was selected as a threshold to exclude transient or momentary power losses. Escalation of the emergency classification level would be via ICs RG1, FG1 or SG1. DBNPS Basis: The DC electrical distribution subsystem consists of two trains, designated Train 1 and Train

2. Each train consists of a 250/125 VDC motor control center (MCC), and each 250/125 VDC MCC consists of two 125 VDC buses (one positive and one negative) that can be powered from a polarity specific battery or battery charger. The two DC buses then supply a specific Essential DC Distribution Panel (D1P and D1N for DCMCC 1, and D2P and D2N for DCMCC 2). The four Essential DC Distribution Panels independently supply DC electrical power to the four inverters, which in turn power the 120 VAC essential buses (ref. 1, 2, 3, 4, 5, 6).

The Class 1E DC loads have an operating voltage range of 105 to 135 volts. The minimum battery discharge voltage (requiring opening the degraded battery output breaker) is 105 VDC (ref. 1, 6). EAL BASES DOCUMENT Rev. 0 Page 170 of 272

ATTACHMENT 1 EAL Bases DBNPS Basis Reference(s):

1. DBNPS UFSAR Section 8.0 Electrical Power
2. DB-OP-02537 Loss of D1P and DAP
3. DB-OP-02538 Loss of D2P and DBP
4. DB-OP-02539 Loss of D1N and DAN
5. DB-OP-02540 Loss of D2N and DBN
6. System Description for 125/250 VDC and 120 V Instrumentation AC System
7. NEI 99-01 SS8 EAL BASES DOCUMENT Rev. 0 Page 171 of 272

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 3 - Loss of Control Room Indications Initiating Condition: UNPLANNED loss of Control Room indications for 15 minutes or longer with a significant transient in progress EAL: SA3.1 Alert An UNPLANNED event results in the inability to monitor one or more Table S-2 SAFETY SYSTEM parameters from within the Control Room for 15 min. (Note 1) AND ANY Significant Transient is or may be in progress, Table S-3 Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Table S-2 Safety System Parameters

  • Reactor power
  • RCS pressure
  • In-core T/C temperature
  • Level in at least one S/G
  • Auxiliary or emergency feed flow Table S-3 Significant Transients
  • Reactor trip
  • Runback > 25% thermal power
  • Electrical load rejection > 25%

electrical load

  • Safety injection actuation Mode Applicability:

1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown EAL BASES DOCUMENT Rev. 0 Page 172 of 272

ATTACHMENT 1 EAL Bases NEI 99-01 Basis: This IC addresses the difficulty associated with monitoring rapidly changing plant conditions during a transient without the ability to obtain SAFETY SYSTEM parameters from within the Control Room. During this condition, the margin to a potential fission product barrier challenge is reduced. It thus represents a potential substantial degradation in the level of safety of the plant. As used in this EAL, an inability to monitor means that values for one or more of the listed parameters cannot be determined from within the Control Room. This situation would require a loss of ALL of the Control Room sources for the given parameter(s). For example, the reactor power level cannot be determined from any analog, digital and recorder source within the Control Room. An event involving a loss of plant indications, annunciators and/or display systems is evaluated in accordance with 10 CFR 50.72 (and associated guidance in NUREG-1022) to determine if an NRC event report is required. The event would be reported if it significantly impaired the capability to perform emergency assessments. In particular, emergency assessments necessary to implement abnormal operating procedures, emergency operating procedures, and emergency plan implementing procedures addressing emergency classification, accident assessment, or protective action decision-making. This EAL is focused on a selected subset of plant parameters associated with the key safety functions of reactivity control, core cooling and RCS heat removal. The loss of the ability to determine one or more of these parameters from within the Control Room is considered to be more significant than simply a reportable condition. In addition, if ALL indication sources for one or more of the listed parameters are lost, then the ability to determine the values of other SAFETY SYSTEM parameters may be impacted as well. For example, if the value for RCS pressure cannot be determined from the indications and recorders on a main control board, the SPDS or the plant computer, the availability of other parameter values may be compromised as well. Fifteen minutes was selected as a threshold to exclude transient or momentary losses of indication. Escalation of the emergency classification level would be via ICs FS1 or RS1 DBNPS Basis: SAFETY SYSTEM parameters listed in Table S-2 are monitored in the Control Room through a combination of hard control panel indicators as well as computer based information systems. The Plant Process Computer, which displays SPDS required information, serves as a redundant compensatory indicator, which may be utilized in lieu of normal Control Room indicators (ref. 1, 2, 3). Significant transients are listed in Table S-3 and include response to automatic or manually initiated functions such as reactor trips, runbacks involving greater than 25% thermal power EAL BASES DOCUMENT Rev. 0 Page 173 of 272

ATTACHMENT 1 EAL Bases change, electrical load rejections of greater than 25% full electrical load or SI injection actuations. DBNPS Basis Reference(s):

1. UFSAR Section 7.5 Safety-Related Display Instrumentation
2. DB-OP-02541 Loss of YAU
3. DB-OP-02542 Loss of YBU
4. NEI 99-01 SA2 EAL BASES DOCUMENT Rev. 0 Page 174 of 272

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 3 - Loss of Control Room Indications Initiating Condition: UNPLANNED loss of Control Room indications for 15 minutes or longer EAL: SU3.1 Unusual Event An UNPLANNED event results in the inability to monitor one or more Table S-2 SAFETY SYSTEM parameters from within the Control Room for 15 min. (Note 1) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Table S-2 Safety System Parameters

  • Reactor power
  • RCS pressure
  • In-core T/C temperature
  • Level in at least one S/G
  • Auxiliary or emergency feed flow Mode Applicability:

1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown NEI 99-01 Basis: This IC addresses the difficulty associated with monitoring normal plant conditions without the ability to obtain SAFETY SYSTEM parameters from within the Control Room. This condition is a precursor to a more significant event and represents a potential degradation in the level of safety of the plant. As used in this EAL, an inability to monitor means that values for one or more of the listed parameters cannot be determined from within the Control Room. This situation would require a loss of ALL of the Control Room sources for the given parameter(s). For example, the reactor power level cannot be determined from any analog, digital and recorder source within the Control Room. An event involving a loss of plant indications, annunciators and/or display systems is evaluated in accordance with 10 CFR 50.72 (and associated guidance in NUREG-1022) to determine if an NRC event report is required. The event would be reported if it significantly impaired the capability to perform emergency assessments. In particular, emergency assessments necessary to implement abnormal operating procedures, emergency operating EAL BASES DOCUMENT Rev. 0 Page 175 of 272

ATTACHMENT 1 EAL Bases procedures, and emergency plan implementing procedures addressing emergency classification, accident assessment, or protective action decision-making. This EAL is focused on a selected subset of plant parameters associated with the key safety functions of reactivity control, core cooling and RCS heat removal. The loss of the ability to determine one or more of these parameters from within the Control Room is considered to be more significant than simply a reportable condition. In addition, if ALL indication sources for one or more of the listed parameters are lost, then the ability to determine the values of other SAFETY SYSTEM parameters may be impacted as well. For example, if the value for RCS pressure cannot be determined from the indications and recorders on a main control board, the SPDS or the plant computer, the availability of other parameter values may be compromised as well. Fifteen minutes was selected as a threshold to exclude transient or momentary losses of indication. Escalation of the emergency classification level would be via IC SA3. DBNPS Basis: SAFETY SYSTEM parameters listed in Table S-2 are monitored in the Control Room through a combination of hard control panel indicators as well as computer based information systems. The Plant Process Computer, which displays SPDS required information, serves as a redundant compensatory indicator, which may be utilized in lieu of normal Control Room indicators (ref. 1, 2, 3). DBNPS Basis Reference(s):

1. UFSAR Section 7.5 Safety-Related Display Instrumentation
2. DB-OP-02541 Loss of YAU
3. DB-OP-02542 Loss of YBU
4. NEI 99-01 SU2 EAL BASES DOCUMENT Rev. 0 Page 176 of 272

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 4 - RCS Activity Initiating Condition: Reactor coolant activity greater than Technical Specification allowable limits EAL: SU4.1 Unusual Event Letdown Monitor (RE 1998) reading > 2.0E+06 cpm Mode Applicability: 1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown NEI 99-01 Basis: This IC addresses a reactor coolant activity value that exceeds an allowable limit specified in Technical Specifications. This condition is a precursor to a more significant event and represents a potential degradation of the level of safety of the plant. Escalation of the emergency classification level would be via ICs FA1 or the Recognition Category R ICs. DBNPS Basis: The DBNPS historical highest failed fuel level of 0.007% corresponds to a reading of 1.4E+05 cpm on the Failed Fuel Monitor (RE 1998). The top of scale for RE 1998 is 1.0E+07. A monitor value of 2.0E+06 (0.1% clad damage) was chosen for its ability to be recognized even though exceeding Technical Specification Limits could potentially result in much higher readings (ref. 1, 2). DBNPS Basis Reference(s):

1. Radiation Monitor Setpoint Manual, RE 1998 Failed Fuel Detector
2. DBNPS Technical Specifications LCO 3.4.16 RCS Specific Activity
3. NEI 99-01 SU3 EAL BASES DOCUMENT Rev. 0 Page 177 of 272

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 4 - RCS Activity Initiating Condition: Reactor coolant activity greater than Technical Specification allowable limits EAL: SU4.2 Unusual Event RCS activity > Technical Specification LCO 3.4.16 as indicated by ANY of the following:

  • Dose equivalent I-131 in the unacceptable region of Figure 3.4.16-1
   *   > 1 Ci/gm dose equivalent I-131 for > 48 hrs
   *   > 100/ Ci/gm gross specific coolant activity Mode Applicability:

1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown NEI 99-01 Basis: This IC addresses a reactor coolant activity value that exceeds an allowable limit specified in Technical Specifications. This condition is a precursor to a more significant event and represents a potential degradation of the level of safety of the plant. Escalation of the emergency classification level would be via ICs FA1 or the Recognition Category R ICs. DBNPS Basis: Technical Specification LCO 3.4.16 Condition A limits RCS System Dose Equivalent I-131 to 1.0 Ci/gm for > 48 hours. Technical Specification Section 3.4.16 Condition B limits RCS System Dose Equivalent I-131 to within Figure 3.4.16-1 and gross specific activity to < 100/ Ci/gm. (ref 1). DBNPS Basis Reference(s):

1. DBNPS Technical Specifications section 3.4.16 RCS Specific Activity
2. NEI 99-01 SU3 EAL BASES DOCUMENT Rev. 0 Page 178 of 272

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 5 - RCS Leakage Initiating Condition: RCS leakage for 15 minutes or longer EAL: SU5.1 Unusual Event RCS leakage > 10 gpm for 15 min. (Note 1) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Mode Applicability: 1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown NEI 99-01 Basis: This IC addresses RCS leakage, which may be a precursor to a more significant event. In this case, RCS leakage has been detected and operators, following applicable procedures, have been unable to promptly isolate the leak. This condition is considered to be a potential degradation of the level of safety of the plant. This EAL is focused on a loss of mass from the RCS due to unidentified leakage" or "pressure boundary leakage" (as these leakage types are defined in the plant Technical Specifications). The leak rate value was selected because it is usually observable with normal Control Room indications. Lesser values typically require time-consuming calculations to determine (e.g., a mass balance calculation). The release of mass from the RCS due to the as-designed/expected operation of a relief valve does not warrant an emergency classification. An emergency classification would be required if a mass loss is caused by a relief valve that is not functioning as designed/expected (e.g., a relief valve sticks open and the line flow cannot be isolated). The 15-minute threshold duration allows sufficient time for prompt operator actions to isolate the leakage, if possible. Escalation of the emergency classification level would be via ICs of Recognition Category R or F. DBNPS Basis: Unidentified leakage is ALL leakage (except RCP seal return) that is not identified leakage (ref. 1, 2). EAL BASES DOCUMENT Rev. 0 Page 179 of 272

ATTACHMENT 1 EAL Bases DBNPS does not have the capability to classify leakage as identified leakage within 15 minutes. Therefore, for the purpose of this IC and EAL all RCS leakage is considered unidentified leakage and the 10 gpm leak rate applies. Escalation of this EAL to the Alert level is via Category F, Fission Product Barrier Degradation, EAL FA1.1. DBNPS Basis Reference(s):

1. DBNPS Technical Specifications Definitions section 1.1
2. UFSAR Section 5.2.4.7 Leakage Identification
3. DB-OP-02522 Small RCS Leaks
4. NEI 99-01 SU4 EAL BASES DOCUMENT Rev. 0 Page 180 of 272

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 6 - RPS Failure Initiating Condition: Inability to shut down the reactor causing a challenge to core cooling or RCS heat removal EAL: SS6.1 Site Area Emergency An automatic or manual trip fails to shut down the reactor as indicated by reactor power 5% AND ALL actions to shut down the reactor are not successful as indicated by reactor power 5% AND EITHER:

  • Calculated Clad Temperature in Region 3 (DB-OP-02000 Figure 2)
  • MFW, AFW and MU-HPI PORV Cooling are all unavailable Mode Applicability:

1 - Power Operation NEI 99-01 Basis: This IC addresses a failure of the RPS to initiate or complete an automatic or manual reactor trip that results in a reactor shutdown, ALL subsequent operator actions to manually shutdown the reactor are unsuccessful, and continued power generation is challenging the capability to adequately remove heat from the core and/or the RCS. This condition will lead to fuel damage if additional mitigation actions are unsuccessful and thus warrants the declaration of a Site Area Emergency. In some instances, the emergency classification resulting from this IC/EAL may be higher than that resulting from an assessment of the plant responses and symptoms against the Recognition Category F ICs/EALs. This is appropriate in that the Recognition Category F ICs/EALs do not address the additional threat posed by a failure to shut down the reactor. The inclusion of this IC and EAL ensures the timely declaration of a Site Area Emergency in response to prolonged failure to shutdown the reactor. A reactor shutdown is determined in accordance with applicable Emergency Operating Procedure criteria. Escalation of the emergency classification level would be via ICs RG1 or FG1. EAL BASES DOCUMENT Rev. 0 Page 181 of 272

ATTACHMENT 1 EAL Bases DBNPS Basis: This EAL addresses the following:

  • ANY automatic reactor trip signal followed by a manual trip that fails to shut down the reactor to an extent the reactor is producing energy in excess of the heat load for which the SAFETY SYSTEMS were designed (EAL SA6.1), AND
  • Indications that either core cooling is extremely challenged or heat removal is extremely challenged The combination of failure of both front line and backup protection systems to function in response to a plant transient, along with the continued production of heat, poses a direct threat to the Fuel Clad and RCS barriers.

Reactor shutdown achieved by use of other trip actions specified in DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture (locally opening Reactor Trip Breaker, emergency boration or manually driving control rods) are also credited as a successful manual trip methods provided reactor power can be reduced below 5% before indications of an extreme challenge to either core cooling or heat removal exist (ref. 1). Each of the redundant Auxiliary Feed Pumps is sized to provide 100% of the capacity required by the SGs to remove 5% of the reactor thermal power produced at full load steam pressure conditions. The 5% power portion of this EAL threshold was chosen to be an easily recognizable, onscale indication that the reactor trip has not functioned to shutdown the reactor assuming the reactor power was in the normal operating range. Indication of continuing core cooling degradation must be based on fission product barrier monitoring with particular emphasis on Emergency Director judgment as it relates to IMMINENT Loss or Potential Loss of fission product barriers and degraded ability to monitor fission product barriers. Indication of continuing core cooling degradation is manifested by Calculated Clad Temperature in Region 3 (DB-OP-02000 Figure 2). Figure 2, Incore T/C Temperature vs. RCS Pressure for ICC, provides indication of how serious core conditions are based upon combinations of RCS pressure and incore thermocouple temperatures. If the RCS P-T point is in Region 3, the cladding temperatures in the high power regions of the core may be 1400°F or higher. This is a serious condition, which will lead to significant amounts of H2 production; core damage may be unavoidable (ref. 1). An extreme challenge to heat removal is defined as a complete loss of MFW, AFW and MU-HPI PORV Cooling (ref. 2, 3). DBNPS Basis Reference(s):

1. DBNPS Technical Specifications section 3.3.1 Reactor Protection System (RPS)

Instrumentation

2. DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture
3. Bases and Deviation Document for DB-OP-02000 EAL BASES DOCUMENT Rev. 0 Page 182 of 272

ATTACHMENT 1 EAL Bases

4. NEI 99-01 SS5 EAL BASES DOCUMENT Rev. 0 Page 183 of 272

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 6 - RPS Failure Initiating Condition: Automatic or manual trip fails to shut down the reactor AND subsequent manual actions taken at the Controls Area are not successful in shutting down the reactor EAL: SA6.1 Alert An automatic or manual trip fails to shut down the reactor as indicated by reactor power 5% AND Manual trip actions taken at the Controls Area (manual RPS trip pushbuttons and de-energizing E2 and F2) are not successful in shutting down the reactor as indicated by reactor power 5% (Note 8) Note 8: A manual trip action is ANY operator action, or set of actions, which causes the control rods to be rapidly inserted into the core, and does not include manually driving in control rods or implementation of boron injection strategies. Mode Applicability: 1 - Power Operation NEI 99-01 Basis: This IC addresses a failure of the RPS to initiate or complete an automatic or manual reactor trip that results in a reactor shutdown, AND subsequent operator manual actions taken at the Controls Area to shutdown the reactor are also unsuccessful. This condition represents an actual or potential substantial degradation of the level of safety of the plant. An emergency declaration is required even if the reactor is subsequently shutdown by an action taken away from the Controls Area since this event entails a significant failure of the RPS. A manual action at the Controls Area is ANY operator action, or set of actions, which causes the control rods to be rapidly inserted into the core (e.g., initiating a manual reactor trip). This action does not include manually driving in control rods or implementation of boron injection strategies. If this action(s) is unsuccessful, operators would immediately pursue additional manual actions at locations away from the Controls Area (e.g., locally opening breakers). Actions taken at back-panels or other locations within the Control Room, or any location outside the Control Room, are not considered to be at the Controls Area. The plant response to the failure of an automatic or manual reactor trip will vary based upon several factors including the reactor power level prior to the event, availability of the condenser, performance of mitigation equipment and actions, other concurrent plant EAL BASES DOCUMENT Rev. 0 Page 184 of 272

ATTACHMENT 1 EAL Bases conditions, etc. If the failure to shut down the reactor is prolonged enough to cause a challenge to the core cooling or RCS heat removal safety functions, the emergency classification level will escalate to a Site Area Emergency via IC SS6. Depending upon plant responses and symptoms, escalation is also possible via IC FS1. Absent the plant conditions needed to meet either IC SS6 or FS1, an Alert declaration is appropriate for this event. It is recognized that plant responses or symptoms may also require an Alert declaration in accordance with the Recognition Category F ICs; however, this IC and EAL are included to ensure a timely emergency declaration. A reactor shutdown is determined in accordance with applicable Emergency Operating Procedure criteria. DBNPS Basis: This EAL addresses ANY automatic or manual reactor trip signal that fails to shut down the reactor followed by a subsequent manual trip that fails to shut down the reactor to an extent the reactor is producing energy in excess of the heat load for which the SAFETY SYSTEMS were designed. For the purposes of emergency classification, successful manual trip actions are those, which can be quickly performed from the Controls Area (ATCA) (i.e., manual pushbuttons or de-energizing E2 and F2). Reactor shutdown achieved by use of other trip actions specified in DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture (locally opening Reactor Trip Breaker, emergency boration or manually driving control rods) do not constitute a successful manual trip (ref. 1). Each of the redundant Auxiliary Feed Pumps is sized to provide 100% of the capacity required by the SGs to remove 5% of the reactor thermal power produced at full load steam pressure conditions. The 5% power portion of this EAL threshold was chosen to be an easily recognizable, onscale indication that the reactor trip has not functioned to shutdown the reactor assuming the reactor power was in the normal operating range. Escalation of this event to a Site Area Emergency would be under EAL SS6.1 or Emergency Director judgment. DBNPS Basis Reference(s):

1. DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture
2. NEI 99-01 SA5 EAL BASES DOCUMENT Rev. 0 Page 185 of 272

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 6 - RPS Failure Initiating Condition: Automatic or manual trip fails to shut down the reactor EAL: SU6.1 Unusual Event An automatic trip did not shut down the reactor as indicated by reactor power 5% after ANY RPS setpoint is exceeded AND A subsequent manual trip action taken at the Controls Area (manual RPS trip pushbuttons or de-energizing E2 and F2) is successful in shutting down the reactor as indicated by reactor power < 5% (Note 8) Note 8: A manual trip action is ANY operator action, or set of actions, which causes the control rods to be rapidly inserted into the core, and does not include manually driving in control rods or implementation of boron injection strategies. Mode Applicability: 1 - Power Operation NEI 99-01 Basis: This EAL addresses a failure of the RPS to initiate or complete an automatic or manual reactor trip that results in a reactor shutdown, AND a subsequent operator manual action taken at the Controls Area is successful in shutting down the reactor. This event is a precursor to a more significant condition and thus represents a potential degradation of the level of safety of the plant. Following the failure on an automatic reactor trip, operators will promptly initiate manual actions at the Controls Area to shutdown the reactor (e.g., initiate a manual reactor trip). If these manual actions are successful in shutting down the reactor, core heat generation will quickly fall to a level within the capabilities of the plants decay heat removal systems. If an initial manual reactor trip is unsuccessful, operators will promptly take manual action at another location(s) on the Controls Area to shutdown the reactor (e.g., initiate a manual reactor trip) using a different switch). Depending upon several factors, the initial or subsequent effort to manually trip the reactor, or a concurrent plant condition, may lead to the generation of an automatic reactor trip signal. If a subsequent manual or automatic trip is successful in shutting down the reactor, core heat generation will quickly fall to a level within the capabilities of the plants decay heat removal systems. A manual action at the Controls Area is ANY operator action, or set of actions, which causes the control rods to be rapidly inserted into the core (e.g., initiating a manual reactor trip). This EAL BASES DOCUMENT Rev. 0 Page 186 of 272

ATTACHMENT 1 EAL Bases action does not include manually driving in control rods or implementation of boron injection strategies. Actions taken at back-panels or other locations within the Control Room, or any location outside the Control Room, are not considered to be at the Controls Area. The plant response to the failure of an automatic or manual reactor trip will vary based upon several factors including the reactor power level prior to the event, availability of the condenser, performance of mitigation equipment and actions, other concurrent plant conditions, etc. If subsequent operator manual actions taken at the Controls Area are also unsuccessful in shutting down the reactor, then the emergency classification level will escalate to an Alert via IC SA6. Depending upon the plant response, escalation is also possible via IC FA1. Absent the plant conditions needed to meet either IC SA6 or FA1, an Unusual Event declaration is appropriate for this event. A reactor shutdown is determined in accordance with applicable Emergency Operating Procedure criteria. Should a reactor trip signal be generated as a result of plant work (e.g., RPS setpoint testing), the following classification guidance should be applied. z If the signal causes a plant transient that should have included an automatic reactor trip and the RPS fails to automatically shutdown the reactor, then this IC and the EALs are applicable, and should be evaluated. z If the signal does not cause a plant transient and the trip failure is determined through other means (e.g., assessment of test results), then this IC and the EALs are not applicable and no classification is warranted. DBNPS Basis: The first condition of this EAL identifies the need to cease critical reactor operations by actuation of the automatic Reactor Protection System (RPS) trip function. A reactor trip is automatically initiated by the RPS when certain continuously monitored parameters exceed predetermined setpoints (ref. 1). Following a successful reactor trip, rapid insertion of the control rods occurs. Reactor power promptly drops to a fraction of the original power level and then decays to a level several decades less with a negative startup rate. The reactor power drop continues until reactor power reaches the point at which the influence of source neutrons on reactor power starts to be observable. A predictable post-trip response from an automatic reactor trip signal should therefore consist of a prompt drop in reactor power as sensed by the nuclear instrumentation and a lowering of power into the source range. A successful trip has therefore occurred when there is sufficient rod insertion from the trip of RPS to bring the reactor power below the immediate shutdown decay heat level of 5% (ref. 2). Each of the redundant Auxiliary Feed Pumps is sized to provide 100% of the capacity required by the SGs to remove 5% of the reactor thermal power produced at full load steam pressure conditions. The 5% power portion of this EAL threshold was chosen to be an easily EAL BASES DOCUMENT Rev. 0 Page 187 of 272

ATTACHMENT 1 EAL Bases recognizable, onscale indication that the reactor trip has not functioned to shutdown the reactor assuming the reactor power was in the normal operating range. For the purposes of emergency classification, successful manual trip actions are those, which can be quickly performed from the Controls Area (ATCA) (i.e., manual pushbuttons or de-energizing E2 and F2). Reactor shutdown achieved by use of other trip actions specified in DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture (locally opening Reactor Trip Breaker, emergency boration or manually driving control rods) do not constitute a successful manual trip (ref. 2). In the event that the operator identifies a reactor trip is imminent and initiates a successful manual reactor trip before the automatic RPS trip setpoint is reached, no declaration is required. The successful manual trip of the reactor before it reaches its automatic trip setpoint or reactor trip signals caused by instrumentation channel failures do not lead to a potential fission product barrier loss. However, if subsequent manual reactor trip actions fail to reduce reactor power below 5%, the event escalates to the Alert under EAL SA6.1. If by procedure, operator actions include the initiation of an immediate manual trip following receipt of an automatic trip signal and there are no clear indications that the automatic trip failed (such as a time delay following indications that a trip setpoint was exceeded), it may be difficult to determine if the reactor was shut down because of automatic trip or manual actions. If a subsequent review of the trip actuation indications reveals that, the automatic trip did not cause the reactor to be shut down, then consideration should be given to evaluating the fuel for potential damage, and the reporting requirements of 10 CFR 50.72 should be considered for the transient event. DBNPS Basis Reference(s):

1. DBNPS Technical Specifications section 3.3.1 Reactor Protection System (RPS)

Instrumentation

2. DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture
3. NEI 99-01 SU5 EAL BASES DOCUMENT Rev. 0 Page 188 of 272

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 6 - RPS Failure Initiating Condition: Automatic or manual trip fails to shut down the reactor EAL: SU6.2 Unusual Event A manual trip did not shut down the reactor as indicated by reactor power 5% after ANY manual trip action was initiated AND A subsequent automatic trip or manual trip action taken at the Controls Area (manual RPS trip pushbuttons or de-energizing E2 and F2) is successful in shutting down the reactor as indicated by reactor power < 5% (Note 8) Note 8: A manual trip action is ANY operator action, or set of actions, which causes the control rods to be rapidly inserted into the core, and does not include manually driving in control rods or implementation of boron injection strategies. Mode Applicability: 1 - Power Operation NEI 99-01 Basis: This EAL addresses a failure of the RPS to initiate or complete a manual reactor trip that results in a reactor shutdown, AND either a subsequent operator manual action taken at the Controls Area or an automatic trip is successful in shutting down the reactor. This event is a precursor to a more significant condition and thus represents a potential degradation of the level of safety of the plant. Following the failure on an automatic reactor trip, operators will promptly initiate manual actions at the Controls Area to shutdown the reactor (e.g., initiate a manual reactor trip). If these manual actions are successful in shutting down the reactor, core heat generation will quickly fall to a level within the capabilities of the plants decay heat removal systems. If an initial manual reactor trip is unsuccessful, operators will promptly take manual action at another location(s) on the Controls Area to shutdown the reactor (e.g., initiate a manual reactor trip) using a different switch. Depending upon several factors, the initial or subsequent effort to manually trip the reactor, or a concurrent plant condition, may lead to the generation of an automatic reactor trip signal. If a subsequent manual or automatic trip is successful in shutting down the reactor, core heat generation will quickly fall to a level within the capabilities of the plants decay heat removal systems. A manual action at the Controls Area is ANY operator action, or set of actions, which causes the control rods to be rapidly inserted into the core (e.g., initiating a manual reactor trip). This EAL BASES DOCUMENT Rev. 0 Page 189 of 272

ATTACHMENT 1 EAL Bases action does not include manually driving in control rods or implementation of boron injection strategies. Actions taken at back-panels or other locations within the Control Room, or any location outside the Control Room, are not considered to be at the Controls Area. The plant response to the failure of an automatic or manual reactor trip will vary based upon several factors including the reactor power level prior to the event, availability of the condenser, performance of mitigation equipment and actions, other concurrent plant conditions, etc. If subsequent operator manual actions taken at the Controls Area are also unsuccessful in shutting down the reactor, then the emergency classification level will escalate to an Alert via IC SA6. Depending upon the plant response, escalation is also possible via IC FA1. Absent the plant conditions needed to meet either IC SA6 or FA1, an Unusual Event declaration is appropriate for this event. A reactor shutdown is determined in accordance with applicable Emergency Operating Procedure criteria. Should a reactor trip signal be generated as a result of plant work (e.g., RPS setpoint testing), the following classification guidance should be applied. z If the signal causes a plant transient that should have included an automatic reactor trip and the RPS fails to automatically shutdown the reactor, then this IC and the EALs are applicable, and should be evaluated. z If the signal does not cause a plant transient and the trip failure is determined through other means (e.g., assessment of test results), then this IC and the EALs are not applicable and no classification is warranted. DBNPS Basis: This EAL addresses a failure of a manually initiated trip in the absence of having exceeded an automatic RPS trip setpoint AND a subsequent automatic or manual trip is successful in shutting down the reactor (reactor power < 5%) (ref. 1). Following a successful reactor trip, rapid insertion of the control rods occurs. Reactor power promptly drops to a fraction of the original power level and then decays to a level several decades less with a negative startup rate. The reactor power drop continues until reactor power reaches the point at which the influence of source neutrons on reactor power starts to be observable. A predictable post-trip response from a manual reactor trip signal should therefore consist of a prompt drop in reactor power as sensed by the nuclear instrumentation and a lowering of power into the source range. A successful trip has therefore occurred when there is sufficient rod insertion from the trip of RPS to bring the reactor power below the immediate shutdown decay heat level of 5% (ref. 2). Each of the redundant Auxiliary Feed Pumps is sized to provide 100% of the capacity required by the SGs to remove 5% of the reactor thermal power produced at full load steam pressure conditions. The 5% power portion of this EAL threshold was chosen to be an easily recognizable, onscale indication that the reactor trip has not functioned to shutdown the reactor assuming the reactor power was in the normal operating range. EAL BASES DOCUMENT Rev. 0 Page 190 of 272

ATTACHMENT 1 EAL Bases For the purposes of emergency classification, successful manual trip actions are those, which can be quickly performed from the Controls Area (ATCA) (i.e., manual pushbuttons or de-energizing E2 and F2). Reactor shutdown achieved by use of other trip actions specified in DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture (locally opening Reactor Trip Breaker, emergency boration or manually driving control rods) do not constitute a successful manual trip (ref. 2). If both subsequent automatic and subsequent manual reactor trip actions in the Control Room fail to reduce reactor power below the power associated with the SAFETY SYSTEM design (< 5%) following a failure of an initial manual trip, the event escalates to an Alert under EAL SA6.1 DBNPS Basis Reference(s):

1. DBNPS Technical Specifications section 3.3.1 Reactor Protection System (RPS)

Instrumentation

2. DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture
3. NEI 99-01 SU5 EAL BASES DOCUMENT Rev. 0 Page 191 of 272

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 7 - Loss of Communications Initiating Condition: Loss of ALL onsite or offsite communications capabilities EAL: SU7.1 Unusual Event Loss of ALL Table S-4 onsite communication methods Table S-4 Communication Methods System Onsite ORO NRC Public Address (Gaitronics) X Onsite Radios X Plant Telephones X X X Commercial Telephones X X X 4-Way Ringdown Circuit X Satellite Phones X X Cellular Phones X X NRC Emergency Telephone System X Mode Applicability: 1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown NEI 99-01 Basis: This IC addresses a significant loss of on-site or offsite communications capabilities. While not a direct challenge to plant or personnel safety, this event warrants prompt notifications to OROs and the NRC. This IC should be assessed only when extraordinary means are being utilized to make communications possible (e.g., use of non-plant, privately owned equipment, relaying of on-site information via individuals or multiple radio transmission points, individuals being sent to offsite locations, etc.). EAL BASES DOCUMENT Rev. 0 Page 192 of 272

ATTACHMENT 1 EAL Bases This EAL addresses a total loss of the communications methods used in support of routine plant operations. DBNPS Basis: Onsite/Offsite Response Organization (ORO)/NRC communications include one or more of the systems listed in Table S-4 (ref. 1, 2). Public Address (Gaitronics) System The DBNPS public address system provides paging and party line communications between stations located throughout the plant. Inside and outside type wall and desk-mounted stations are used to communicate between roaming personnel and fixed work locations. Plant-wide instructions are issued using the paging feature. On-site Radio System Radio systems can be used for communication among operators, off-site monitoring teams, the control room, security, TSC and EOF. Plant Telephone System The DBNPS plant telephone system provides communication capability between telephone stations located within the plant by dialing the four-digit telephone station code as well as external or offsite calling capability. Commercial Telephones Commercial telephone lines, which supply public telephone communications, are employed by DBNPS. The local service provider provides primary and secondary power for their lines at the Central Office. 4-Way Ringdown Circuit Dedicated ring down line that includes the State and County EOCs, the Ohio Highway Patrol Office, the Lucas County and Ottawa County Sheriff's dispatcher offices, the Emergency Operations Facility, and the Control Room. Satellite Phones Portable satellite telephones are available which enable communication when all other phone systems are inoperable, e.g. following a major external event. Internal batteries, external DC sources as well as external AC sources can power these portable systems. EAL BASES DOCUMENT Rev. 0 Page 193 of 272

ATTACHMENT 1 EAL Bases Cellular Phones Cellular phones may be used during emergencies if other communications means are not readily available or are inoperable. These phones are not expected to be used in the Control Room or Power Block due to interference with plant equipment and loss of signal to the phone. NRC Emergency Telephone System The NRC uses a DBNPS dedicated telephone line, which allows direct telephone communications from the plant to NRC regional and national offices. The DBNPS communications line provides a link independent of the local public telephone network. Telephones connected to this network are located in the DBNPS Control Room, Technical Support Center, and Emergency Operations Facility and can be used to establish NRC Emergency Notification System (ENS) and Health Physics Network (HPN) capability. This EAL is the hot condition equivalent of the cold condition EAL CU5.1. DBNPS Basis Reference(s):

1. DBNPS UFSAR Section 9.5.2 Communications Systems
2. DBNPS Emergency Plan 7.6 Communications Systems
3. NEI 99-01 SU6 EAL BASES DOCUMENT Rev. 0 Page 194 of 272

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 7 - Loss of Communications Initiating Condition: Loss of ALL onsite or offsite communications capabilities EAL: SU7.2 Unusual Event Loss of ALL Table S-4 ORO communication methods Table S-4 Communication Methods System Onsite ORO NRC Public Address (Gaitronics) X Onsite Radios X Plant Telephones X X X Commercial Telephones X X X 4-Way Ringdown Circuit X Satellite Phones X X Cellular Phones X X NRC Emergency Telephone System X Mode Applicability: 1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown NEI 99-01 Basis: This IC addresses a significant loss of on-site or offsite communications capabilities. While not a direct challenge to plant or personnel safety, this event warrants prompt notifications to OROs and the NRC. This IC should be assessed only when extraordinary means are being utilized to make communications possible (e.g., use of non-plant, privately owned equipment, relaying of on-site information via individuals or multiple radio transmission points, individuals being sent to offsite locations, etc.). EAL BASES DOCUMENT Rev. 0 Page 195 of 272

ATTACHMENT 1 EAL Bases This EAL addresses a total loss of the communications methods used to notify ALL OROs of an emergency declaration. The OROs referred to here are the State of Ohio, Lucas and Ottawa County EOCs. DBNPS Basis: Onsite/Offsite Response Organization (ORO)/NRC communications include one or more of the systems listed in Table S-4 (ref. 1, 2). Public Address (Gaitronics) System The DBNPS public address system provides paging and party line communications between stations located throughout the plant. Inside and outside type wall and desk-mounted stations are used to communicate between roaming personnel and fixed work locations. Plant-wide instructions are issued using the paging feature. On-site Radio System Radio systems can be used for communication among operators, off-site monitoring teams, the control room, security, TSC and EOF. Plant Telephone System The DBNPS plant telephone system provides communication capability between telephone stations located within the plant by dialing the four-digit telephone station code as well as external or offsite calling capability. Commercial Telephones Commercial telephone lines, which supply public telephone communications, are employed by DBNPS. The local service provider provides primary and secondary power for their lines at the Central Office. 4-Way Ringdown Circuit Dedicated ring down line that includes the State and County EOCs, the Ohio Highway Patrol Office, the Lucas County and Ottawa County Sheriff's dispatcher offices, the Emergency Operations Facility, and the Control Room. Satellite Phones Portable satellite telephones are available which enable communication when ALL other phone systems are inoperable, e.g. following a major external event. Internal batteries, external DC sources as well as external AC sources can power these portable systems. EAL BASES DOCUMENT Rev. 0 Page 196 of 272

ATTACHMENT 1 EAL Bases Cellular Phones Cellular phones may be used during emergencies if other communications means are not readily available or are inoperable. These phones are not expected to be used in the Control Room or Power Block due to interference with plant equipment and loss of signal to the phone. NRC Emergency Telephone System The NRC uses a DBNPS dedicated telephone line, which allows direct telephone communications from the plant to NRC regional and national offices. The DBNPS communications line provides a link independent of the local public telephone network. Telephones connected to this network are located in the DBNPS Control Room, Technical Support Center, and Emergency Operations Facility and can be used to establish NRC Emergency Notification System (ENS) and Health Physics Network (HPN) capability. This EAL is the hot condition equivalent of the cold condition EAL CU5.2. DBNPS Basis Reference(s):

1. DBNPS UFSAR Section 9.5.2 Communications Systems
2. DBNPS Emergency Plan 7.6 Communications Systems
3. NEI 99-01 SU6 EAL BASES DOCUMENT Rev. 0 Page 197 of 272

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 7 - Loss of Communications Initiating Condition: Loss of ALL onsite or offsite communications capabilities EAL: SU7.3 Unusual Event Loss of ALL Table S-4 NRC communication methods Table S-4 Communication Methods System Onsite ORO NRC Public Address (Gaitronics) X Onsite Radios X Plant Telephones X X X Commercial Telephones X X X 4-Way Ringdown Circuit X Satellite Phones X X Cellular Phones X X NRC Emergency Telephone System X Mode Applicability: 1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown NEI 99-01 Basis: This IC addresses a significant loss of on-site or offsite communications capabilities. While not a direct challenge to plant or personnel safety, this event warrants prompt notifications to OROs and the NRC. This IC should be assessed only when extraordinary means are being utilized to make communications possible (e.g., use of non-plant, privately owned equipment, relaying of on-site information via individuals or multiple radio transmission points, individuals being sent to offsite locations, etc.). EAL BASES DOCUMENT Rev. 0 Page 198 of 272

ATTACHMENT 1 EAL Bases This EAL addresses a total loss of the communications methods used to notify the NRC of an emergency declaration. DBNPS Basis: Onsite/Offsite Response Organization (ORO)/NRC communications include one or more of the systems listed in Table S-4 (ref. 1, 2). Public Address (Gaitronics) System The DBNPS public address system provides paging and party line communications between stations located throughout the plant. Inside and outside type wall and desk-mounted stations are used to communicate between roaming personnel and fixed work locations. Plant-wide instructions are issued using the paging feature. On-site Radio System Radio systems can be used for communication among operators, off-site monitoring teams, the control room, security, TSC and EOF. Plant Telephone System The DBNPS plant telephone system provides communication capability between telephone stations located within the plant by dialing the four-digit telephone station code as well as external or offsite calling capability. Commercial Telephones Commercial telephone lines, which supply public telephone communications, are employed by DBNPS. The local service provider provides primary and secondary power for their lines at the Central Office. 4-Way Ringdown Circuit Dedicated ring down line that includes the State and County EOCs, the Ohio Highway Patrol Office, the Lucas County and Ottawa County Sheriff's dispatcher offices, the Emergency Operations Facility, and the Control Room. Satellite Phones Portable satellite telephones are available which enable communication when ALL other phone systems are inoperable, e.g. following a major external event. Internal batteries, external DC sources as well as external AC sources can power these portable systems. EAL BASES DOCUMENT Rev. 0 Page 199 of 272

ATTACHMENT 1 EAL Bases Cellular Phones Cellular phones may be used during emergencies if other communications means are not readily available or are inoperable. These phones are not expected to be used in the Control Room or Power Block due to interference with plant equipment and loss of signal to the phone. NRC Emergency Telephone System The NRC uses a DBNPS dedicated telephone line, which allows direct telephone communications from the plant to NRC regional and national offices. The DBNPS communications line provides a link independent of the local public telephone network. Telephones connected to this network are located in the DBNPS Control Room, Technical Support Center, and Emergency Operations Facility and can be used to establish NRC Emergency Notification System (ENS) and Health Physics Network (HPN) capability. This EAL is the hot condition equivalent of the cold condition EAL CU5.3. DBNPS Basis Reference(s):

1. DBNPS UFSAR Section 9.5.2 Communications Systems
2. DBNPS Emergency Plan 7.6 Communications Systems
3. NEI 99-01 SU6 EAL BASES DOCUMENT Rev. 0 Page 200 of 272

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 8 - Containment Failure Initiating Condition: Failure to isolate containment or loss of containment pressure control EAL: SU8.1 Unusual Event ANY penetration is not closed within 15 min. of a VALID containment isolation signal (Note 1) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Mode Applicability: 1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown NEI 99-01 Basis: This EAL addresses a failure of one or more containment penetrations to automatically isolate (close) when required by an actuation signal. Absent challenges to another fission product barrier, this condition represents potential degradation of the level of safety of the plant. For this EAL the containment isolation signal must be generated as the result on an off-normal/accident condition (e.g., a safety injection or high containment pressure); a failure resulting from testing or maintenance does not warrant classification. The determination of containment and penetration status - isolated or not isolated - should be made in accordance with the appropriate criteria contained in the plant AOPs and EOPs. The 15-minute criterion is included to allow operators time to manually isolate the required penetrations, if possible. This event would escalate to a Site Area Emergency in accordance with IC FS1 if there were a concurrent loss or potential loss of either the Fuel Clad or RCS fission product barriers. DBNPS Basis: Successful closure of any one valve in a penetration line is sufficient to consider the penetration closed. DBNPS Basis Reference(s):

1. NEI 99-01 SU7 EAL BASES DOCUMENT Rev. 0 Page 201 of 272

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 8 - Containment Failure Initiating Condition: Failure to isolate containment or loss of containment pressure control EAL: SU8.2 Unusual Event Containment pressure > 40 psia with < one full train of containment cooling, Table S-6, operating per design for 15 min. (Note 1) Table S-6 Containment Cooling Full Train CT Spray Pumps CT Cooling Fans 2 0 1 1 0 2 Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Mode Applicability: 1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown NEI 99-01 Basis: This EAL addresses an event that results in high containment pressure with a concurrent failure of containment pressure control systems. Absent challenges to another fission product barrier, this condition represents a potential degradation of the level of safety of the plant. This EAL addresses a condition where containment pressure is greater than the setpoint at which containment energy (heat) removal systems are designed to automatically actuate, and less than one full train of equipment is capable of operating per design. The 15-minute criterion is included to allow operators time to manually start equipment that may not have automatically started, if possible. The inability to start the required equipment indicates that containment heat removal/depressurization systems (e.g., containment sprays or ice condenser fans) are either lost or performing in a degraded manner. This event would escalate to a Site Area Emergency in accordance with IC FS1 if there were a concurrent loss or potential loss of either the Fuel Clad or RCS fission product barriers. EAL BASES DOCUMENT Rev. 0 Page 202 of 272

ATTACHMENT 1 EAL Bases DBNPS Basis: The combination of Containment spray pumps and Containment cooling fan units considered to be a full train of containment cooling operating per design is shown in Table F-3 (ref. 1). SFAS 2 actuation automatically initiates Containment Air Coolers upon exceeding the Containment pressure high setpoint of 18.7 psia or low RCS pressure of 1600 psig. SFAS Level 4 actuation automatically initiates Containment Spray upon exceeding the Containment pressure high-high setpoint of 40 (nominal) psia (ref. 2, 3). DBNPS Basis Reference(s):

1. UFSAR Section 6.2.2. Containment Vessel Heat Removal Systems
2. DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture
3. DBNPS Technical Specifications Table 3.3.5-1 Safety Features Actuation System Instrumentation
4. NEI 99-01 SU7 EAL BASES DOCUMENT Rev. 0 Page 203 of 272

ATTACHMENT 1 EAL Bases Category: S - System Malfunction Subcategory: 9 - Hazardous Event Affecting SAFETY SYSTEMS Initiating Condition: Hazardous event affecting a SAFETY SYSTEM needed for the current operating mode EAL: SA9.1 Alert The occurrence of ANY Table S-5 Hazardous Event AND EITHER: z Event has caused indications of degraded performance in at least one train of a SAFETY SYSTEM required for the current operating mode z The event has caused VISIBLE DAMAGE to a SAFETY SYSTEM component or structure required for the current operating mode Table S-5 Hazardous Events z Seismic event (earthquake) z Internal or external FLOODING event z High winds or tornado strike z FIRE z EXPLOSION z Other events with similar hazard characteristics as determined by the Emergency Director Mode Applicability: 1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown NEI 99-01 Basis: This IC addresses a hazardous event that causes damage to a SAFETY SYSTEM, or a structure containing SAFETY SYSTEM components, needed for the current operating mode. This condition significantly reduces the margin to a loss or potential loss of a fission product barrier, and therefore represents an actual or potential substantial degradation of the level of safety of the plant. The first conditional addresses damage to a SAFETY SYSTEM train that is in service/operation since indications for it will be readily available. The indications of degraded performance should be significant enough to cause concern regarding the operability or reliability of the SAFETY SYSTEM train. EAL BASES DOCUMENT Rev. 0 Page 204 of 272

ATTACHMENT 1 EAL Bases The second conditional addresses damage to a SAFETY SYSTEM component that is not in service/operation or readily apparent through indications alone, or to a structure containing SAFETY SYSTEM components. Operators will make this determination based on the totality of available event and damage report information. This is intended to be a brief assessment not requiring lengthy analysis or quantification of the damage. Escalation of the emergency classification level would be via IC FS1 or RS1. DBNPS Basis:

  • Ground motion acceleration of 0.08g horizontal or 0.053g vertical is the Maximum Probable Earthquake as is considered generically as the Operating Basis Earthquake for DBNPS (ref. 8). Control room alarm indication of an earthquake greater than OBE is indicated on the seismic control panel (C5764A). RA-EP-02820 Earthquake provides the guidance for determining any required response actions if the OBE earthquake threshold is exceeded (ref. 1). The significance of seismic events is discussed under EAL HU2.1.
  • Internal FLOODING occurs from breaches of water systems that are located inside plant buildings and are connected to large water sources such as Intake Forebay or tanks (ref.

2).

  • External FLOODING may be due to high lake level. DBNPS flood emergency elevation is 578 ft. Site access would be limited to rail, boat or helicopter (ref. 3).
  • Seismic Category I structures are analyzed to withstand a sustained, design wind velocity of at least 90 mph. (ref. 4).
  • Areas containing functions and systems required for safe shutdown of the plant are identified by fire area in the fire abnormal procedure (ref. 5).
  • An EXPLOSION that degrades the performance of a SAFETY SYSTEM train or visibly damages a SAFETY SYSTEM component or structure would be classified under this EAL (ref. 6).

DBNPS Basis Reference(s):

1. RA-EP-02820 Earthquake
2. RA-EP-02880 Internal Flooding
3. RA-EP-02830 Flooding
4. DBNPS UFSAR Section 3.3.1 Wind Criteria
5. DB-OP-02501 Serious Station Fire
6. RA-EP-02840 Explosion
7. NEI 99-01 SA9
8. Updated FSAR Section 3.1 Seismic Design EAL BASES DOCUMENT Rev. 0 Page 205 of 272

ATTACHMENT 1 EAL Bases Category F - Fission Product Barrier Degradation EAL Group: Hot Conditions (RCS temperature > 200ºF); EALs in this category are applicable only in one or more hot operating modes. EALs in this category represent threats to the defense in depth design concept that precludes the release of highly radioactive fission products to the environment. This concept relies on multiple physical barriers any one of which, if maintained intact, precludes the release of significant amounts of radioactive fission products to the environment. The primary fission product barriers are: A. Fuel Clad (FC): The Fuel Clad Barrier consists of the cladding material that contains the fuel pellets. B. Reactor Coolant System (RCS): The RCS Barrier includes the RCS primary side and its connections up to and including the pressurizer safety and relief valves, and other connections up to and including the primary isolation valves. C. Containment (CT): The Containment Barrier includes the containment building, connections up to and including the outermost containment isolation valves. This barrier also includes the main steam, feedwater, and blowdown line extensions outside the containment building up to and including the outermost secondary side isolation valve. Containment Barrier thresholds are used as criteria for escalation of the ECL from Alert to a Site Area Emergency or a General Emergency. The EALs in this category require evaluation of the loss and potential loss thresholds listed in the fission product barrier matrix of Table F-1 (Attachment 2). Loss and Potential Loss signify the relative damage and threat of damage to the barrier. Loss means the barrier no longer assures containment of radioactive materials. Potential Loss means integrity of the barrier is threatened and could be lost if conditions continue to degrade. The number of barriers that are lost or potentially lost and the following criteria determine the appropriate emergency classification level: Alert: ANY loss or ANY potential loss of EITHER Fuel Clad or RCS Site Area Emergency: Loss or potential loss of ANY two barriers General Emergency: Loss of ANY two barriers AND loss or potential loss of third barrier The logic used for emergency classification based on fission product barrier monitoring should reflect the following considerations: EAL BASES DOCUMENT Rev. 0 Page 206 of 272

ATTACHMENT 1 EAL Bases

  • The Fuel Clad Barrier and the RCS Barrier are weighted more heavily than the Containment Barrier.
  • Unusual Event ICs associated with RCS and Fuel Clad Barriers are addressed under System Malfunction ICs.
  • For accident conditions involving a radiological release, evaluation of the FISSION PRODUCT BARRIER THRESHOLDS will need to be performed in conjunction with dose assessments to ensure correct and timely escalation of the emergency classification. For example, an evaluation of the FISSION PRODUCT BARRIER THRESHOLDS may result in a Site Area Emergency classification while a dose assessment may indicate that an EAL for General Emergency IC RG1 has been exceeded.
  • The FISSION PRODUCT BARRIER THRESHOLDS specified within a scheme reflect plant-specific DBNPS design and operating characteristics.
  • As used in this category, the term RCS leakage encompasses not just those types defined in Technical Specifications but also includes the loss of RCS mass to any location- inside the containment, an interfacing system, or outside of the containment.

The release of liquid or steam mass from the RCS due to the as-designed/expected operation of a relief valve is not considered RCS leakage.

  • At the Site Area Emergency level, EAL users should maintain cognizance of how far present conditions are from meeting a threshold that would require a General Emergency declaration. For example, if the Fuel Clad and RCS fission product barriers were both lost, then there should be frequent assessments of containment radioactive inventory and integrity. Alternatively, if both the Fuel Clad and RCS fission product barriers were potentially lost, the Emergency Director would have more assurance that there was no immediate need to escalate to a General Emergency.

EAL BASES DOCUMENT Rev. 0 Page 207 of 272

ATTACHMENT 1 EAL Bases Category: Fission Product Barrier Degradation Subcategory: N/A Initiating Condition: Loss of ANY two barriers AND Loss or Potential Loss of third barrier EAL: FG1.1 General Emergency Loss of ANY two barriers AND Loss or Potential Loss of third barrier (Table F-1) Mode Applicability: 1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown NEI 99-01 Basis: None DBNPS Basis: Fuel Clad, RCS and Containment comprise the fission product barriers. Table F-1 (Attachment 2) lists the FISSION PRODUCT BARRIER THRESHOLDS, bases and references. At the General Emergency classification level, each barrier is weighted equally. A General Emergency is therefore appropriate for ANY combination of the following conditions:

  • Loss of Fuel Clad, RCS and Containment barriers
  • Loss of Fuel Clad and RCS barriers with Potential Loss of Containment barrier
  • Loss of RCS and Containment barriers with Potential Loss of Fuel Clad barrier
  • Loss of Fuel Clad and Containment barriers with Potential Loss of RCS barrier DBNPS Basis Reference(s):
1. NEI 99-01 FG1 EAL BASES DOCUMENT Rev. 0 Page 208 of 272

ATTACHMENT 1 EAL Bases Category: Fission Product Barrier Degradation Subcategory: N/A Initiating Condition: Loss or Potential Loss of ANY two barriers EAL: FS1.1 Site Area Emergency Loss or Potential Loss of ANY two barriers (Table F-1) Mode Applicability: 1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown NEI 99-01 Basis: None DBNPS Basis: Fuel Clad, RCS and Containment comprise the fission product barriers. Table F-1 (Attachment 2) lists the FISSION PRODUCT BARRIER THRESHOLDS, bases and references. At the Site Area Emergency classification level, each barrier is weighted equally. A Site Area Emergency is therefore appropriate for ANY combination of the following conditions:

  • One barrier loss AND a second barrier loss (i.e., loss - loss)
  • One barrier loss AND a second barrier potential loss (i.e., loss - potential loss)
  • One barrier potential loss AND a second barrier potential loss (i.e., potential loss -

potential loss) At the Site Area Emergency classification level, the ability to assess the proximity of present conditions with respect to the threshold for a General Emergency is important. For example, the existence of Fuel Clad and RCS Barrier loss thresholds in addition to offsite dose assessments would require continual assessments of radioactive inventory and Containment integrity in anticipation of reaching a General Emergency classification. Alternatively, if both Fuel Clad and RCS potential loss thresholds existed, the Emergency Director would have greater assurance that escalation to a General Emergency is less IMMINENT. DBNPS Basis Reference(s):

1. NEI 99-01 FS1 EAL BASES DOCUMENT Rev. 0 Page 209 of 272

ATTACHMENT 1 EAL Bases Category: Fission Product Barrier Degradation Subcategory: N/A Initiating Condition: ANY Loss or ANY Potential Loss of EITHER Fuel Clad or RCS EAL: FA1.1 Alert ANY Loss or ANY Potential Loss of EITHER Fuel Clad or RCS (Table F-1) Mode Applicability: 1 - Power Operation, 2 - Startup, 3 - Hot Standby, 4 - Hot Shutdown NEI 99-01 Basis: None DBNPS Basis: Fuel Clad, RCS and Containment comprise the fission product barriers. Table F-1 (Attachment 2) lists the FISSION PRODUCT BARRIER THRESHOLDS, bases and references. At the Alert classification level, Fuel Clad and RCS barriers are weighted more heavily than the Containment barrier. Unlike the Containment barrier, Loss or Potential Loss of either the Fuel Clad or RCS barrier may result in the relocation of radioactive materials or degradation of core cooling capability. Note that the loss or potential loss of Containment barrier in combination with loss or potential loss of either Fuel Clad or RCS barrier results in declaration of a Site Area Emergency under EAL FS1.1 DBNPS Basis Reference(s):

1. NEI 99-01 FA1 EAL BASES DOCUMENT Rev. 0 Page 210 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Introduction Table F-1 lists the threshold conditions that define the Loss and Potential Loss of the three fission product barriers (Fuel Clad, Reactor Coolant System, and Containment). The table is structured so that each of the three barriers occupies adjacent columns. Each fission product barrier column is further divided into two columns, one for Loss thresholds and one for Potential Loss thresholds. The first column of the table (to the left of the Fuel Clad Loss column) lists the categories (types) of FISSION PRODUCT BARRIER THRESHOLDS. The fission product barrier categories are: A. RCS or SG Tube Leakage B. Inadequate Heat removal C. CT Radiation / RCS Activity D. CT Integrity or Bypass E. Emergency Director Judgment Each category occupies a row in Table F-1 thus forming a matrix defined by the categories. The intersection of each row with each Loss/Potential Loss column forms a cell in which one or more FISSION PRODUCT BARRIER THRESHOLDS appear. If NEI 99-01 does not define a threshold for a barrier Loss/Potential Loss, the word None is entered in the cell. Thresholds are assigned sequential numbers within each Loss and Potential Loss column beginning with number one. In this manner, a threshold can be identified by its category title and number. For example, the first Fuel Clad barrier Loss in Category A would be assigned FC Loss A.1, the third Containment barrier Potential Loss in Category C would be assigned CT P-Loss C.3, etc. If a cell in Table F-1 contains more than one numbered threshold, each of the numbered thresholds, if exceeded, signifies a Loss or Potential Loss of the barrier. It is not necessary to exceed ALL of the thresholds in a category before declaring a barrier Loss/Potential Loss. Subdivision of Table F-1 by category facilitates association of plant conditions to the applicable fission product barrier Loss and Potential Loss thresholds. This structure promotes a systematic approach to assessing the classification status of the fission product barriers. When equipped with knowledge of plant conditions related to the fission product barriers, the EAL-user first scans down the category column of Table F-1, locates the likely category and then reads across the fission product barrier Loss and Potential Loss thresholds in that category to determine if a threshold has been exceeded. If a threshold has not been exceeded, the EAL-user proceeds to the next likely category and continues review of the thresholds in the new category. EAL BASES DOCUMENT Rev. 0 Page 211 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases If the EAL-user determines that ANY threshold has been exceeded, by definition, the barrier is lost or potentially lost - even if multiple thresholds in the same barrier column are exceeded; only that one barrier is lost or potentially lost. The EAL-user must examine each of the three fission product barriers to determine if other barrier thresholds in the category are lost or potentially lost. For example, if containment radiation is sufficiently high, a Loss of the Fuel Clad and RCS barriers and a Potential Loss of the Containment barrier can occur. Barrier Losses and Potential Losses are then applied to the algorithms given in EALs FG1.1, FS1.1, and FA1.1 to determine the appropriate emergency classification. In the remainder of this Attachment, the Fuel Clad barrier threshold bases appear first, followed by the RCS barrier and finally the Containment barrier threshold bases. In each barrier, the bases are given according category Loss followed by category Potential Loss beginning with Category A, then B E. EAL BASES DOCUMENT Rev. 0 Page 212 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Table F-1 Fission Product Barrier Threshold Matrix Fuel Clad (FC) Barrier Reactor Coolant System (RCS) Barrier Containment (CT) Barrier Category Loss Potential Loss Loss Potential Loss Loss Potential Loss

1. Operation of a standby Makeup
1. An automatic or manual ECCS Pump (>250 gpm) is required by (SFAS) actuation required by EITHER:

A EITHER:

  • UNISOLABLE RCS leakage 1. A leaking or RUPTURED SG is RCS or None None None
  • UNISOLABLE RCS FAULTED outside of containment SG Tube
  • SG tube leakage leakage Leakage OR
  • SG tube RUPTURE
2. PTS requirements invoked (SR5)
1. Calculated Clad Temperature in Region 2 or higher (DB-OP-02000 1. Calculated Clad Temperature in Figure 2) Region 3 or higher (DB-OP-02000 B 1. Loss of ALL feedwater
1. Calculated Clad Temperature Figure 2)

OR Inadequate in Region 3 or higher (DB- None AND None AND Heat OP-02000 Figure 2) 2. Loss of ALL feedwater SG Cooling is required Removal Restoration procedures not AND effective within 15 min. (Note 1) SG Cooling is required C 1. RE 4596A or B > Table F-2 column FC Loss (Note 9) CT 1. RE 4596A or B > Table F-2 1. RE 4596A or B > Table F-2 column OR None None None Radiation column RCS Loss (Note 9) CT Potential Loss (Note 9)

   / RCS   2. Dose equivalent I-131 coolant activity > 300 Ci/gm Activity
1. Containment isolation is required
1. Containment pressure > 50.4 psia AND EITHER:

OR

  • Containment integrity has been lost based on 2. Containment hydrogen D Emergency Director concentration > 4%

judgment CT None None None None OR Integrity

  • UNISOLABLE pathway from Containment to the environment 3. Containment pressure > 40 psia or Bypass with < one full train, exists Table F-3, of containment cooling OR operating per design for 15 min.

(Note 1)

2. Indications of RCS leakage outside of containment
1. ANY condition in the opinion of 1. ANY condition in the opinion of 1. ANY condition in the opinion of 1. ANY condition in the opinion of 1. ANY condition in the opinion of the E 1. ANY condition in the opinion of the the Emergency Director that the Emergency Director that the Emergency Director that the Emergency Director that Emergency Director that indicates Emergency Director that indicates ED indicates Loss of the Fuel Clad indicates Potential Loss of the indicates Loss of the RCS indicates Loss of the Potential Loss of the Containment Potential Loss of the RCS Barrier Judgment Barrier Fuel Clad Barrier Barrier Containment Barrier Barrier EAL BASES DOCUMENT Rev. 0 Page 213 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Table F-2 Containment Radiation - R/hr (RE 4596A or B) Time After S/D (Hrs.) RCS Loss FC Loss CT Potential Loss 0-1 1.50E+01 3.03E+03 1.40E+04 1-2 1.50E+01 2.56 E+03 1.18 E+04 2-8 1.50E+01 1.61 E+03 7.46 E+03 8-16 1.50E+01 1.14 E+03 5.28 E+03 16-24 1.50E+01 8.66 E+02 4.00 E+03

            >24                1.50E+01              3.94 E+02            1.82 E+03 Table F-3 Containment Cooling Full Train Spray                Coolers 2                     0 1                     1 0                     2 EAL BASES DOCUMENT                                               Rev. 0                         Page 214 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Fuel Clad Category: A. RCS or SG Tube Leakage Degradation Threat: Loss Threshold: None EAL BASES DOCUMENT Rev. 0 Page 215 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Fuel Clad Category: A. RCS or SG Tube Leakage Degradation Threat: Potential Loss Threshold: None EAL BASES DOCUMENT Rev. 0 Page 216 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Fuel Clad Category: B. Inadequate Heat Removal Degradation Threat: Loss Threshold:

1. Calculated Clad Temperature in Region 3 or higher (DB-OP-02000 Figure 2)

Basis: Generic This reading indicates temperatures within the core have caused significant superheating of reactor coolant. Plant-Specific Indication of severe core cooling degradation is manifested by Calculated Clad Temperature in Region 3 or higher (DB-OP-02000 Figure 2). Figure 2, Incore T/C Temperature vs. RCS Pressure for ICC, provides indication of how serious core conditions are based upon combinations of RCS pressure and incore thermocouple temperatures. If the RCS P-T point is in Region 3, the cladding temperatures in the core may be 1400°F or higher. This is a very serious condition and may lead to significant amounts of H2 production; core damage may be unavoidable as this represents a very serious inadequate core cooling condition (ref. 1, 2). WCAP-14969-A states, "Analyses performed for the WOG ERGs for indication of inadequate core cooling concluded that the temperature indicated by the core exit thermocouples, especially during transient heatup conditions, is always several hundred degrees lower than the fuel rod cladding temperatures. Thus, an indicated temperature of 1200°F can be translated to a peak cladding temperature on the order of 1400°F (ref. 4). DBNPS Basis Reference(s):

1. DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture
2. Bases and Deviation Document for DB-OP-02000
3. NEI 99-01 Inadequate Heat Removal Fuel Clad Loss 2.A
4. WCAP-14969-A, Westinghouse Owners Group Core Damage Assessment Guidance EAL BASES DOCUMENT Rev. 0 Page 217 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Fuel Clad Category: B. Inadequate Heat Removal Degradation Threat: Potential Loss Threshold:

1. Calculated Clad Temperature in Region 2 or higher (DB-OP-02000 Figure 2)

Basis: Generic This reading indicates a reduction in reactor vessel water level sufficient to allow the onset of heat-induced cladding damage. Plant-Specific The average incore thermocouple temperature and RCS pressure is used to determine whether Calculated Clad Temperature is in Region 2. This corresponds to a loss of RCS subcooling with clad temperatures remaining below the point where damage is immediately likely (Tclad approximately 900° to 1100° F). DBNPS Basis Reference(s):

1. DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture
2. Bases and Deviation Document for DB-OP-02000
3. NEI 99-01 Inadequate Heat Removal Fuel Clad Potential Loss 2.A EAL BASES DOCUMENT Rev. 0 Page 218 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Fuel Clad Category: B. Inadequate Heat Removal Degradation Threat: Potential Loss Threshold:

2. Loss of ALL feedwater AND SG cooling is required Basis:

Generic This condition indicates an extreme challenge to the ability to remove RCS heat using the steam generators (i.e., loss of an effective secondary-side heat sink). This condition represents a potential loss of the Fuel Clad Barrier. In accordance with EOPs, there may be unusual accident conditions during which operators intentionally reduce the heat removal capability of the steam generators; during these conditions, classification using threshold is not warranted. Plant-Specific In combination with RCS Potential Loss B.1, meeting this threshold would result in a Site Area Emergency. Loss of ALL feedwater cooling heat transfer capability when SG cooling is required indicates the ultimate heat sink function is under extreme challenge AND that the RCS barrier is also challenged (ref. 1). The phrase AND SG cooling is required precludes the need for classification for conditions in which RCS pressure is less than SG pressure. For large LOCA events inside the Containment, the SGs are moot because heat removal through the containment heat removal systems takes place. Therefore, SG cooling should not be required and, should not be assessed for EAL classification because a LOCA event alone should not require higher than an Alert classification (ref. 1, 2). DBNPS Basis Reference(s):

1. DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture
2. Bases and Deviation Document for DB-OP-02000
3. NEI 99-01 Inadequate Heat Removal Fuel Clad Loss 2.B EAL BASES DOCUMENT Rev. 0 Page 219 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Fuel Clad Category: C. CT Radiation / RCS Activity Degradation Threat: Loss Threshold:

1. RE 4596A or B > Table F-2 column FC Loss (Note 9)

Table F-2 Containment Radiation - R/hr (RE 4596A or B) Time After S/D (Hrs.) RCS Loss FC Loss CT Potential Loss 0-1 1.50E+01 3.03E+03 1.40E+04 1-2 1.50E+01 2.56 E+03 1.18 E+04 2-8 1.50E+01 1.61 E+03 7.46 E+03 8-16 1.50E+01 1.14 E+03 5.28 E+03 16-24 1.50E+01 8.66 E+02 4.00 E+03

                >24                       1.50E+01             3.94 E+02            1.82 E+03 Note 9:   During a main steam line break in containment or LOCA with temperature >170F, there is a potential to induce transient errors into the output of RE4596A and B during the peak rate of temperature change.

Consult alternate indications. If the main steam line break is accompanied by core damage this error is insignificant (ref. 4, 5, 6, 7, 8). Basis: Generic The radiation monitor reading corresponds to an instantaneous release of ALL reactor coolant mass into the containment, assuming that reactor coolant activity equals 300 Ci/gm dose equivalent I-131. Reactor coolant activity above this level is greater than that expected for iodine spikes and corresponds to an approximate range of 2% to 5% fuel clad damage. Since this condition indicates that a significant amount of fuel clad damage has occurred, it represents a loss of the Fuel Clad Barrier. The radiation monitor reading in this threshold is higher than that specified for RCS Barrier Loss threshold C.1 since it indicates a loss of both the Fuel Clad Barrier and the RCS Barrier. Note that a combination of the two monitor readings appropriately escalates the ECL to a Site Area Emergency. Plant-Specific The containment high range monitors, RE 4596A & B., monitor the gamma dose rate resulting from a postulated loss of coolant accident (LOCA). RE 4596A & B are located inside containment. The detector range is approximately 1 to 1E8 R/hr (logarithmic scale) (ref. 1). EAL BASES DOCUMENT Rev. 0 Page 220 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases The Table F-2 values, column FC Loss represents, based on Calculation EP-EALCALC-DB-0701, the expected containment high range radiation monitor (RE 4596A & B) response based on a LOCA, for periods of 1, 2, 8, 16, 24 and 48 (>24) hours after shutdown with ~4.33% fuel failure (ref. 2). When evaluating fission product barrier integrity values in Table F-2, time after shutdown should be confirmed with the Control Room as the time that the reactor is tripped, and reactor power is verified to be lowering on the Intermediate Range (ref. 3). If time after shutdown is less than one hour (or the reactor is still critical), the 0-1 hour after shutdown value should be chosen. This is conservative as it represents sufficient time for plant conditions to deteriorate to the point that core damage may occur, and the activity released from the RCS into the containment atmosphere to reach equilibrium mixing throughout containment. During a main steam line break in containment or LOCA with temperature > 170ºF, there is a potential to induce transient errors (positive and negative) into the output of RE4596A & B during the peak rate of temperature change. Consult alternate indications. If the main steam line break or LOCA is accompanied by core damage this error is, however, insignificant (ref. 4). DBNPS Basis Reference(s):

1. UFSAR Section 7.13.3.1 Containment High Radiation Monitors
2. EP-EALCALC-DB-0701 Containment Radiation Monitor Readings Following Clad Damage (FC2 and CT2 Potential Loss)
3. DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture
4. NRC Information Notice 97-45 Supplement 1 Environmental Qualification Deficiency for Cables and Containment Penetration Pigtails
5. Condition Report 09-53277, Containment High Range Rad Monitor Function and Current EALS
6. Condition Report 09-53278, Containment High Range Rad Monitor Function and NEI 99-01 EAL Submittal
7. Condition Report 07-31108, Potential for Thermally Induced Currents In Containment HRRM
8. Condition Report 09-55171, Containment High Range Rad Monitors Engineering Assistance Requested
9. NEI 99-01 CMT Radiation / RCS Activity Fuel Clad Loss 3.A EAL BASES DOCUMENT Rev. 0 Page 221 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Fuel Clad Category: C. CT Radiation / RCS Activity Degradation Threat: Loss Threshold:

2. Dose equivalent I-131 coolant activity > 300 Ci/gm Basis:

Generic This threshold indicates that RCS radioactivity concentration is greater than 300 Ci/gm dose equivalent I-131. Reactor coolant activity above this level is greater than that expected for iodine spikes and corresponds to an approximate range of 2% to 5% fuel clad damage. Since this condition indicates that a significant amount of fuel clad damage has occurred, it represents a loss of the Fuel Clad Barrier. Plant-Specific Elevated reactor coolant activity represents a potential degradation in the level of safety of the plant and a potential precursor of more serious problems. The threshold dose equivalent I-131 concentration is well above that expected for iodine spikes and corresponds to about 4.33% fuel clad damage. When reactor coolant activity reaches this level the Fuel Clad barrier is considered lost (ref. 1). There is no Potential Loss threshold associated with RCS Activity / Containment Radiation. DBNPS Basis Reference(s):

1. EP-EALCALC-DB-0701 Containment Radiation Monitor Readings Following Clad Damage (FC2 and CT2 Potential Loss)
2. NEI 99-01 CMT Radiation / RCS Activity Fuel Clad Loss 3.B EAL BASES DOCUMENT Rev. 0 Page 222 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Fuel Clad Category: C. CT Radiation / RCS Activity Degradation Threat: Potential Loss Threshold: None EAL BASES DOCUMENT Rev. 0 Page 223 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Fuel Clad Category: D. CT Integrity or Bypass Degradation Threat: Loss Threshold: None EAL BASES DOCUMENT Rev. 0 Page 224 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Fuel Clad Category: D. CT Integrity or Bypass Degradation Threat: Potential Loss Threshold: None EAL BASES DOCUMENT Rev. 0 Page 225 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Fuel Clad Category: E. Emergency Director Judgment Degradation Threat: Loss Threshold:

1. ANY condition in the opinion of the Emergency Director that indicates Loss of the Fuel Clad Barrier Basis:

Generic This threshold addresses any other factors that are to be used by the Emergency Director in determining whether the Fuel Clad Barrier is lost. Plant-Specific The Emergency Director judgment threshold addresses any other factors relevant to determining if the Fuel Clad barrier is lost. Such a determination should include imminent barrier degradation, barrier monitoring capability and dominant accident sequences.

  • Imminent barrier degradation exists if the degradation will likely occur within two hours based on a projection of current SAFETY SYSTEM performance. The term IMMINENT refers to recognition of the inability to reach safety acceptance criteria before completion of ALL checks.
  • Barrier monitoring capability is decreased if there is a loss or lack of reliable indicators.

This assessment should include instrumentation operability concerns, readings from portable instrumentation and consideration of offsite monitoring results.

  • Dominant accident sequences lead to degradation of ALL fission product barriers and likely entry to the EOPs. The Emergency Director should be mindful of the Loss of AC power (Station Blackout) and ATWS EALs to assure timely emergency classification declarations.

DBNPS Basis Reference(s):

1. NEI 99-01 Emergency Director Judgment Fuel Clad Loss 6.A EAL BASES DOCUMENT Rev. 0 Page 226 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Fuel Clad Category: E. Emergency Director Judgment Degradation Threat: Potential Loss Threshold:

1. ANY condition in the opinion of the Emergency Director that indicates Potential Loss of the Fuel Clad Barrier Basis:

Generic This threshold addresses any other factors that are to be used by the Emergency Director in determining whether the Fuel Clad Barrier is potentially lost. The Emergency Director should also consider whether or not to declare the barrier potentially lost in the event that barrier status cannot be monitored. Plant-Specific The Emergency Director judgment threshold addresses any other factors relevant to determining if the Fuel Clad barrier is potentially lost. Such a determination should include imminent barrier degradation, barrier monitoring capability and dominant accident sequences.

  • Imminent barrier degradation exists if the degradation will likely occur within two hours based on a projection of current SAFETY SYSTEM performance. The term IMMINENT refers to recognition of the inability to reach safety acceptance criteria before completion of ALL checks.
  • Barrier monitoring capability is decreased if there is a loss or lack of reliable indicators.

This assessment should include instrumentation operability concerns, readings from portable instrumentation and consideration of offsite monitoring results.

  • Dominant accident sequences lead to degradation of ALL fission product barriers and likely entry to the EOPs. The Emergency Director should be mindful of the Loss of AC power (Station Blackout) and ATWS EALs to assure timely emergency classification declarations.

DBNPS Basis Reference(s):

1. NEI 99-01 Emergency Director Judgment Potential Fuel Clad Loss 6.A EAL BASES DOCUMENT Rev. 0 Page 227 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Reactor Coolant System Category: A. RCS or SG Tube Leakage Degradation Threat: Loss Threshold:

1. An automatic or manual ECCS (SFAS) actuation required by EITHER:
  • UNISOLABLE RCS leakage
  • SG tube RUPTURE Basis:

Generic This threshold is based on an UNISOLABLE RCS leak of sufficient size to require an automatic or manual actuation of the Emergency Core Cooling System (ECCS). This condition clearly represents a loss of the RCS Barrier. This threshold is applicable to unidentified and pressure boundary leakage, as well as identified leakage. It is also applicable to UNISOLABLE RCS leakage through an interfacing system. The mass loss may be into any location - inside containment, to the secondary-side (i.e., steam generator tube leakage) or outside of containment. A steam generator with primary-to-secondary leakage of sufficient magnitude to require a safety injection is considered to be RUPTURED. If a RUPTURED steam generator is also FAULTED outside of containment, the declaration escalates to a Site Area Emergency since the Containment Barrier Loss threshold A.1 will also be met. Plant-Specific ECCS (SFAS) actuation is caused by (ref. 1):

  • Low RCS pressure
  • High Containment pressure DBNPS Basis Reference(s):
1. DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture
2. NEI 99-01 RCS or SG Tube Leakage Reactor Coolant System Loss 1.A EAL BASES DOCUMENT Rev. 0 Page 228 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Reactor Coolant System Category: A. RCS or SG Tube Leakage Degradation Threat: Potential Loss Threshold:

1. Operation of a standby Makeup Pump is required (> 250 gpm) by EITHER:
  • UNISOLABLE RCS leakage
  • SG tube leakage Basis:

Generic This threshold is based on an UNISOLABLE RCS leak that results in the inability to maintain pressurizer level within specified limits by operation of a normally used charging (makeup) pump, but an ECCS (SI) actuation has not occurred. The threshold is met when an operating procedure, or operating crew supervision, directs that a standby charging (makeup) pump be placed in service to restore and maintain pressurizer level. This threshold is applicable to unidentified and pressure boundary leakage, as well as identified leakage. It is also applicable to UNISOLABLE RCS leakage through an interfacing system. The mass loss may be into any location - inside containment, to the secondary-side (i.e., steam generator tube leakage) or outside of containment. If a leaking steam generator is also FAULTED outside of containment, the declaration escalates to a Site Area Emergency since the Containment Barrier Loss threshold 1.A will also be met. Plant-Specific The Makeup and Purification System includes two centrifugal makeup pumps, which take suction from the Makeup Tank, and return cooled, purified reactor coolant to the RCS. One of the two makeup pumps handles normal charging flow. Makeup pump capacity of a single makeup injection line is ~250 gpm. A second makeup pump being required is indicative of a substantial RCS leak (ref. 1, 2). DBNPS Basis Reference(s):

1. UFSAR Table 9.3-8 Makeup and Purification System Component Data
2. DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture
3. NEI 99-01 RCS or SG Tube Leakage Reactor Coolant System Potential Loss 1.A EAL BASES DOCUMENT Rev. 0 Page 229 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Reactor Coolant System Category: A. RCS or SG Tube Leakage Degradation Threat: Potential Loss Threshold:

2. PTS requirements invoked (SR5)

Basis: Generic This condition indicates an extreme challenge to the integrity of the RCS pressure boundary due to pressurized thermal shock - a transient that causes rapid RCS cooldown while the RCS is in Mode 3 or higher (i.e., hot and pressurized). Plant-Specific With an extended overcooling, thermal shock becomes a concern. Pressurized Thermal Shock (PTS) limits must be invoked if the criteria specified in Specific Rule 5 are met. The RCS pressure must be controlled to ensure that PTS limits are not violated. This requires action on the part of the operator to control RCS pressure and temperature (ref. 1). The "Potential Loss" threshold is defined by the PTS limits as specified in DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture Specific Rule 5 being invoked. This indicates an extreme challenge to the RCS barrier (ref. 1, 2). DBNPS Basis Reference(s):

1. DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture
2. Bases and Deviation Document for DB-OP-02000
3. NEI 99-01 RCS or SG Tube Leakage Reactor Coolant System Potential Loss 1.B EAL BASES DOCUMENT Rev. 0 Page 230 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Reactor Coolant System Category: B. Inadequate Heat Removal Degradation Threat: Loss Threshold: None EAL BASES DOCUMENT Rev. 0 Page 231 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Reactor Coolant System Category: B. Inadequate Heat Removal Degradation Threat: Potential Loss Threshold:

1. Loss of ALL feedwater AND SG cooling is required Basis:

Generic This condition indicates an extreme challenge to the ability to remove RCS heat using the steam generators (i.e., loss of an effective secondary-side heat sink). This condition represents a potential loss of the RCS Barrier. In accordance with EOPs, there may be unusual accident conditions during which operators intentionally reduce the heat removal capability of the steam generators; during these conditions, classification using threshold is not warranted. Meeting this threshold results in a Site Area Emergency because this threshold is identical to Fuel Clad Barrier Potential Loss threshold B.2; both will be met. This condition warrants a Site Area Emergency declaration because inadequate RCS heat removal may result in fuel heat-up sufficient to damage the cladding and increase RCS pressure to the point where mass will be lost from the system. Plant-Specific In combination with FC Potential Loss B.2, meeting this threshold results in a Site Area Emergency. Loss of ALL feedwater cooling heat transfer capability when SG cooling is required indicates the ultimate heat sink function is under extreme challenge and that the RCS barrier is also challenged (ref. 1). The phrase AND SG cooling required precludes the need for classification for conditions in which RCS pressure is less than SG pressure. For large LOCA events inside the Containment, the SGs are moot because heat removal through the containment heat removal systems takes place. Therefore, SG cooling should not be required and, should not be assessed for EAL classification because a LOCA event alone should not require higher than an Alert classification (ref. 1, 2). EAL BASES DOCUMENT Rev. 0 Page 232 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases DBNPS Basis Reference(s):

1. DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture
2. Bases and Deviation Document for DB-OP-02000
3. NEI 99-01 Inadequate Heat Removal RCS Loss 2.B EAL BASES DOCUMENT Rev. 0 Page 233 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Reactor Coolant System Category: C. CT Radiation/ RCS Activity Degradation Threat: Loss Threshold:

1. RE 4596A or B > Table F-2 column RCS Loss (Note 9)

Table F-2 Containment Radiation - R/hr (RE 4596A or B) Time After S/D (Hrs.) RCS Loss FC Loss CT Potential Loss 0-1 1.50E+01 3.03E+03 1.40E+04 1-2 1.50E+01 2.56 E+03 1.18 E+04 2-8 1.50E+01 1.61 E+03 7.46 E+03 8-16 1.50E+01 1.14 E+03 5.28 E+03 16-24 1.50E+01 8.66 E+02 4.00 E+03

                >24                       1.50E+01             3.94 E+02            1.82 E+03 Note 9:   During a main steam line break in containment or LOCA with temperature >170F, there is a potential to induce transient errors into the output of RE4596A and B during the peak rate of temperature change.

Consult alternate indications. If the main steam line break is accompanied by core damage this error is insignificant (ref. 5, 6, 7, 8, 9). Basis: Generic The radiation monitor reading corresponds to an instantaneous release of ALL reactor coolant mass into the containment, assuming that reactor coolant activity equals Technical Specification allowable limits. This value is lower than that specified for Fuel Clad Barrier Loss threshold C.1 since it indicates a loss of the RCS Barrier only. There is no Potential Loss threshold associated with RCS Activity / Containment Radiation. Plant-Specific The containment high range monitors, RE 4596A & B., monitor the gamma dose rate resulting from a postulated loss of coolant accident (LOCA). RE 4596A & B are located inside containment. The detector range is approximately 1 to 1E8 R/hr (logarithmic scale) (ref. 1). The Table F-2 values, column RCS Loss represents, based on Calculation EP-EALCALC-DB-0702, the expected containment high range radiation monitor (RE 4596A & B) response based on a LOCA, using the USAR maximum RCS activity (no core damage) (ref. 2, 3). EAL BASES DOCUMENT Rev. 0 Page 234 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases During a main steam line break in containment or LOCA with temperature > 170ºF, there is a potential to induce transient errors (positive and negative) into the output of RE4596A & B during the peak rate of temperature change. Consult alternate indications. If the main steam line break or LOCA is accompanied by core damage this error is, however, insignificant (ref. 5). Since fuel cladding degradation and/or failures could also result in high Containment Area Radiation levels, a reading of >15 R/hr may be obtained without a physical loss of the RCS barrier. However, this threshold should be declared as being met if the Containment Area Radiation levels are >15 R/hr even if there are no other indications of a RCS leak or physical loss. In this case it would also be prudent to evaluate the fuel clad FISSION PRODUCT BARRIER THRESHOLDS. DBNPS Basis Reference(s):

1. UFSAR Section 7.13.3.1 Containment High Radiation Monitors
2. EP-EALCALC-DB-0702 Containment Radiation Monitor Readings Following a LOCA (RC2 Loss)
3. USAR Table 15A-4 Maximum Fission Product Activity in Reactor Coolant
4. DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture
5. NRC Information Notice 97-45 Supplement 1 Environmental Qualification Deficiency for Cables and Containment Penetration Pigtails
6. Condition Report 09-53277, Containment High Range Rad Monitor Function and Current EALS
7. Condition Report 09-53278, Containment High Range Rad Monitor Function and NEI 99-01 EAL Submittal
8. Condition Report 07-31108, Potential for Thermally Induced Currents In Containment HRRM
9. Condition Report 09-55171, Containment High Range Rad Monitors Engineering Assistance Requested
10. NEI 99-01 CMT Radiation / RCS Activity RCS Loss 3.A EAL BASES DOCUMENT Rev. 0 Page 235 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Reactor Coolant System Category: B. CT Radiation/ RCS Activity Degradation Threat: Potential Loss Threshold: None EAL BASES DOCUMENT Rev. 0 Page 236 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Reactor Coolant System Category: D. CT Integrity or Bypass Degradation Threat: Loss Threshold: None EAL BASES DOCUMENT Rev. 0 Page 237 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Reactor Coolant System Category: D. CT Integrity or Bypass Degradation Threat: Potential Loss Threshold: None EAL BASES DOCUMENT Rev. 0 Page 238 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Reactor Coolant System Category: E. Emergency Director Judgment Degradation Threat: Loss Threshold:

1. ANY condition in the opinion of the Emergency Director that indicates Loss of the RCS Barrier Basis:

Generic This threshold addresses any other factors that may be used by the Emergency Director in determining whether the RCS Barrier is lost. Plant-Specific The Emergency Director judgment threshold addresses any other factors relevant to determining if the RCS Barrier is lost. Such a determination should include imminent barrier degradation, barrier monitoring capability and dominant accident sequences.

  • Imminent barrier degradation exists if the degradation will likely occur within two hours based on a projection of current SAFETY SYSTEM performance. The term IMMINENT refers to the recognition of the inability to reach safety acceptance criteria before completion of ALL checks.
  • Barrier monitoring capability is decreased if there is a loss or lack of reliable indicators.

This assessment should include instrumentation operability concerns, readings from portable instrumentation and consideration of offsite monitoring results.

  • Dominant accident sequences lead to degradation of ALL fission product barriers and likely entry to the EOPs. The Emergency Director should be mindful of the Loss of AC power (Station Blackout) and ATWS EALs to assure timely emergency classification declarations.

DBNPS Basis Reference(s):

1. NEI 99-01 Emergency Director Judgment RCS Loss 6.A EAL BASES DOCUMENT Rev. 0 Page 239 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Reactor Coolant System Category: E. Emergency Director Judgment Degradation Threat: Potential Loss Threshold:

1. ANY condition in the opinion of the Emergency Director that indicates Potential Loss of the RCS Barrier Basis:

Generic This threshold addresses any other factors that may be used by the Emergency Director in determining whether the RCS Barrier is potentially lost. The Emergency Director should also consider whether or not to declare the barrier potentially lost in the event that barrier status cannot be monitored. Plant-Specific The Emergency Director judgment threshold addresses any other factors relevant to determining if the RCS Barrier is potentially lost. Such a determination should include imminent barrier degradation, barrier monitoring capability and dominant accident sequences.

  • Imminent barrier degradation exists if the degradation will likely occur within two hours based on a projection of current SAFETY SYSTEM performance. The term IMMINENT refers to the inability to reach final safety acceptance criteria before completing ALL checks.
  • Barrier monitoring capability is decreased if there is a loss or lack of reliable indicators.

This assessment should include instrumentation operability concerns, readings from portable instrumentation and consideration of offsite monitoring results.

  • Dominant accident sequences lead to degradation of ALL fission product barriers and likely entry to the EOPs. The Emergency Director should be mindful of the Loss of AC power (Station Blackout) and ATWS EALs to assure timely emergency classification declarations.

DBNPS Basis Reference(s):

1. NEI 99-01 Emergency Director Judgment RCS Potential Loss 6.A EAL BASES DOCUMENT Rev. 0 Page 240 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Containment Category: A. RCS or SG Tube Leakage Degradation Threat: Loss Threshold:

1. A leaking or RUPTURED SG is FAULTED outside of Containment Basis:

Generic This threshold addresses a leaking or RUPTURED Steam Generator (SG) that is also FAULTED outside of containment. The condition of the SG, whether leaking or RUPTURED, is determined in accordance with the thresholds for RCS Barrier Potential Loss A.1 and Loss A.1, respectively. This condition represents a bypass of the containment barrier. FAULTED is a defined term within the NEI 99-01 methodology; this determination is not necessarily dependent upon entry into, or diagnostic steps within, an EOP. For example, if the pressure in a steam generator is decreasing uncontrollably (part of the FAULTED definition) and the FAULTED steam generator isolation procedure is not entered because EOP user rules are dictating implementation of another procedure to address a higher priority condition; the steam generator is still considered FAULTED for emergency classification purposes. The FAULTED criterion establishes an appropriate lower bound on the size of a steam release that may require an emergency classification. Steam releases of this size are readily observable with normal Control Room indications. The lower bound for this aspect of the containment barrier is analogous to the lower bound criteria specified in IC SU4 for the fuel clad barrier (i.e., RCS activity values) and IC SU5 for the RCS barrier (i.e., RCS leak rate values). This threshold also applies to prolonged steam releases necessitated by operational considerations such as the forced steaming of a leaking or RUPTURED steam generator directly to atmosphere to cooldown the plant, or to drive an auxiliary (emergency) feed water pump. These types of conditions will result in a significant and sustained release of radioactive steam to the environment (and are thus similar to a FAULTED condition). The inability to isolate the steam flow without an adverse effect on plant cooldown meets the intent of a loss of containment. Steam releases associated with the expected operation of a SG power operated relief valve or safety relief valve do not meet the intent of this threshold. Such releases may occur intermittently for a short period of time following a reactor trip as operators process through emergency operating procedures to bring the plant to a stable condition and prepare to initiate a plant cooldown. Steam releases associated with the unexpected operation of a valve (e.g., a stuck-open safety valve) do meet this threshold. EAL BASES DOCUMENT Rev. 0 Page 241 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Following an SG tube leak or rupture, there may be minor radiological releases through a secondary-side system component (e.g., air ejectors, glad seal exhausters, valve packing, etc.). These types of releases do not constitute a loss or potential loss of containment but should be evaluated using the Recognition Category R ICs. The ECLs resulting from primary-to-secondary leakage, with or without a steam release from the FAULTED SG, are summarized below. Affected SG is FAULTED Outside of Containment? P-to-S Leak Rate Yes No Less than or equal to 10 gpm No classification No classification Greater than 10 gpm for 15 Unusual Event per SU5 Unusual Event per SU5 minutes or longer Requires operation of a standby Site Area Emergency per charging (makeup) pump (RCS Alert per FA1 FS1 Barrier Potential Loss) Requires an automatic or manual Site Area Emergency per ECCS (SI) actuation (RCS Barrier Alert per FA1 FS1 Loss) There is no Potential Loss threshold associated with RCS or SG Tube Leakage. Plant-Specific None DBNPS Basis Reference(s):

1. DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture
2. NEI 99-01 RCS or SG Tube Leakage Containment Loss 1.A EAL BASES DOCUMENT Rev. 0 Page 242 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Containment Category: A. RCS or SG Tube Leakage Degradation Threat: Potential Loss Threshold: None EAL BASES DOCUMENT Rev. 0 Page 243 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Containment Category: B. Inadequate heat Removal Degradation Threat: Loss Threshold: None EAL BASES DOCUMENT Rev. 0 Page 244 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Containment Category: B. Inadequate heat Removal Degradation Threat: Potential Loss Threshold:

1. Calculated Clad Temperature in Region 3 or higher (DB-OP-02000 Figure 2)

AND Restoration procedures not effective within 15 min. (Note 1) Note 1: The Emergency Director should declare the event promptly upon determining that time limit has been exceeded, or will likely be exceeded. Basis: Generic This condition represents an IMMINENT core melt sequence, which, if not corrected, could lead to vessel failure and an increased potential for containment failure. For this condition to occur there must already have been a loss of the RCS Barrier AND the Fuel Clad Barrier. If implementation of a procedure(s) to restore adequate core cooling is not effective (successful) within 15 minutes, it is assumed that the event trajectory will likely lead to core melting and a subsequent challenge of the Containment Barrier. The restoration procedure is considered effective if core exit thermocouple readings are decreasing and/or if reactor vessel level is increasing. Whether or not the procedure(s) will be effective should be apparent within 15 minutes. The Emergency Director should escalate the emergency classification level as soon as it is determined that the procedure(s) will not be effective. Severe accident analyses (e.g., NUREG-1150) have concluded that function restoration procedures can arrest core degradation in a significant fraction of core damage scenarios, and that the likelihood of containment failure is very small in these events. Given this, it is appropriate to provide 15 minutes beyond the required entry point to determine if procedural actions can reverse the core melt sequence. Plant-Specific Indication of severe core cooling degradation is manifested by Calculated Clad Temperature in Region 3 (DB-OP-02000 Figure 2). Figure 2, Incore T/C Temperature vs. RCS Pressure for ICC, provides indication of how serious core conditions are based upon combinations of RCS pressure AND incore thermocouple temperatures. If the RCS P-T point is in Region 3, the cladding temperatures in the core may be 1400°F or higher. This is a very serious condition EAL BASES DOCUMENT Rev. 0 Page 245 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases and may lead to significant amounts of H2 production; core damage may be unavoidable as this represents a very serious inadequate core cooling condition (ref. 1, 2). The function restoration procedures are those emergency operating procedures that address the recovery of core cooling functions. The procedure is considered effective if the clad temperature is decreasing or if RCS water level is increasing (ref. 1, 2). DBNPS Basis Reference(s):

1. DB-OP-02000 RPS, SFAS, SFRCS Trip, or SG Tubing Rupture
2. Bases and Deviation Document for DB-OP-02000
3. NEI 99-01 Inadequate Heat Removal Containment Potential Loss 2.A EAL BASES DOCUMENT Rev. 0 Page 246 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Containment Category: C. CT Radiation/RCS Activity Degradation Threat: Loss Threshold: None EAL BASES DOCUMENT Rev. 0 Page 247 of 272

ATTACHMENT 2 Fission Product Barrier Loss/Potential Loss Matrix and Bases Barrier: Containment Category: C. CT Radiation/RCS Activity Degradation Threat: Potential Loss Threshold:

1. RE 4596A or B > Table F-2 column CT Potential Loss (Note 9)

Table F-2 Containment Radiation - R/hr (RE 4596A or B) Time After S/D (Hrs.) RCS Loss FC Loss CT Potential Loss 0-1 1.50E+01 3.03E+03 1.40E+04 1-2 1.50E+01 2.56 E+03 1.18 E+04 2-8 1.50E+01 1.61 E+03 7.46 E+03 8-16 1.50E+01 1.14 E+03 5.28 E+03 16-24 1.50E+01 8.66 E+02 4.00 E+03

                >24                    1.50E+01                3.94 E+02            1.82 E+03 Note 9:   During a main steam line break in containment or LOCA with temperature >170F, there is a potential to induce tran}}