05000458/LER-2016-005, Regarding Potential Loss of Safety Function of Onsite AC Sources and Operations Prohibited by Technical Specifications Due to Uncorrected Circuit Breaker Control Logic Design Causing Intermittent Failure to Close
| ML16126A229 | |
| Person / Time | |
|---|---|
| Site: | River Bend  |
| Issue date: | 04/25/2016 |
| From: | Maguire W Entergy Operations |
| To: | Document Control Desk, Office of Nuclear Reactor Regulation |
| References | |
| RBG-47679 LER 2016-005-00 | |
| Download: ML16126A229 (6) | |
| Event date: | |
|---|---|
| Report date: | |
| Reporting criterion: | 10 CFR 50.73(a)(2)(ii)(A), Seriously Degraded 10 CFR 50.73(a)(2)(viii)(A) 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition 10 CFR 50.73(a)(2)(viii)(B) 10 CFR 50.73(a)(2)(ix)(A) 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(x) 10 CFR 50.73(a)(2)(v)(A), Loss of Safety Function - Shutdown the Reactor 10 CFR 50.73(a)(2)(v)(B), Loss of Safety Function - Remove Residual Heat 10 CFR 50.73(a)(2)(v), Loss of Safety Function 10 CFR 50.73(a)(2)(i)(A), Completion of TS Shutdown 10 CFR 50.73(a)(2) 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications 10 CFR 50.73(a)(2)(vii), Common Cause Inoperability 10 CFR 50.73(a)(2)(i) |
| 4582016005R00 - NRC Website | |
text
~ ---
( ~:t~~;\\'.)
Eintc*Oll' 0(lera~ions, lne.
Aivor Berni Station
- ..... *Entergy.
RBG-47679 April25.2016 U. S. Nuclear Regulatory Commission ATI"N: Document Control Desk Washington. DC 20555
Subject:
RBF1*16-0051 Ucensee Event Report 50-45812016-00S-OO River Bend Statton - Unlt 1 Docket No. 50-458 Ucense No. NPF-47
Dear Sir or Madam:
5485 U.S. H!gh\\':lay 61N St. Frcnci:;vill:J, LA 70775 Tel 225-391-4157
\\:'Jl'.~~2:<1 F. rn::gulro Si~;:i Vic'.l Pro:iid:mt tn accordance with 10 CFR 50~73, enclosed is the subject Licensee Event Report. This document contains no commitments. If you have any questions, please contact Mt'.. Joseph Clark at 225-381-4177.
WFM/dhw Enclosure cc:
U. S. Nuclear Regulatory Commission Region IV 1600 East Lamar Blvd.
Arlington, TX 76011*4511 NRC Sr. Resident Inspector P. O. Box 1050 St. Francisville. LA 70775 INPO (via ICES reporting)
- ' "°\\
RBG'"47679 April 25, 2016 Page2of2 Central Records Clerk Public Utility Commission of Texas 1701 N. Congress Ave.
- - Austin, TX 78711 *3326 Department of Environmental Quality Office of Environmental Compliance RadlologiQSJ Emergency Planning and Response Section Ji Young Wiley P.O. Box 4312 eaten Rouge, LA 70821-4312 2
NRC FORM 366 U.S. NUCLEAR REGULATORY COMMISSION APPROVED BY OMB: NO. 3150-0104 EXPIRES: 1013112018 (11-2015)
, the NRC may not conduct or sponsor, and a person is not required to respond to, the information collecfion.
- 3. PAGE River Bend Station - Unit 1 05000 458 1 OF 4
- 4. TITLE Potential Loss of Safety Function of Onsite AC Sources and Operations Prohibited by Technical Specifications Due to Uncorrected Circuit Breaker Control Logic Design Causing Intermittent Failure to Close
- 5. EVENT DATE
- 6. LER NUMBER
- 7. REPORT DATE
- 8. OTHER FACILITIES INVOLVED I
SEQUENTIAL I REV FACILITY NAME DOCKET NUMBER MONTH DAY YEAR YEAR NUMBER NO.
MONTH DAY YEAR 05000 FACILITY NAME DOCKET NUMBER 02 24 2016
'2016..
005 - 00 04 25 2016 05000
- 9. OPERATING MODE
- 11. THIS REPORT IS SUBMITTED PURSUANT TO THE REQUIREMENTS OF 10 CFR §: (Check all that apply)
D 20.2201 (b)
D 20.2203(a)(3)(i) 0 50.73(a)(2)(ii)(A) 0 50.73(a)(2)(viii)(A)'
4 D 20.2201 (d)
D 20.2203(a)(3)(ii)
D 50.73(a)(2)(ii)(B) 0 50.73(a)(2)(viii)(B)
D 20.2203(a)(1>
D 20.2203(a)(4)
D so.73(a)(2)(iii) 0 50.73(a)(2)(ix)(A)
D 20.2203(a)(2)(i) 0 50.36(c)(1)(i)(A) 0 50.73(a)(2)(iv)(A) 0 50.73(a)(2)(x)
- 10. POWER LEVEL D 20.2203(a)(2)(ii) 0 50.36(c)(1)(ii)(A)
[{] 50.73(a)(2)(v)(A)
D 13.11(a)(4>
D 20.2203(a)(2)(m>
o so.3a(c)(2)
- 0 50.73(a)(2)(v)(B)
D 13.11(a)(s>
0 20.2203(a)(2)(iv)
D ~o.4a(a)(3)(ii) 0 50.73(a)(2)(v)(C)
D 1s.n(a)(1>
0 0 20.2203(a)(2)(v) 0 50.73(a)(2)(i)(A) 0 50.73(a)(2)(1i)(D)
D 1s.n(a)(2)(i) 0 20.2203(a)(2)(vi)
[{] 50.73(a)(2)(i)(B) 0 50.73(a)(2)(vii)
D 1s.n(a)(2)(ii)
D 50.73(a)(2)(i)(C)
D OTHER Specify in Abstract below or in REPORTED CONDITION On February 24, 2016, with the plant in cold shutdown, the operations shift manager was made aware of a notification regarding a certain model of Masterpact 480-volt s11fety-re(ated circuit breakers (**BKR~*) that described a failure mode that could potentially prevent the automatic closure of the breakers. The initial information regarded the emergency ventilation fans in the Division 1 and 2 emergency diesel generator rooms. These fans are not in Technical Specifications, but they provide a support function to the emergency diesel generators (**DG**). This condition required that both diesel generators to be declared inoperable. This constituted a condition that could potentially prevent fulfillment of the safety function of onsite AC power sources [ED].
Later on the same c:late, further evaluation of the notification identified four other circuit breakers affected by the same condition. These breakers supply power to Division l*and 2 containment unit coolers and the Division 1and2.auxiliary building 141 ft. elevation general area unit coolers. The auxiliary building unit coolers are not in Technical Specifications, but they provide a support function to the electrical distribution system. The required action in Technical Specification is to declare both trains of the residual heat removal system (shutdown cooling mode) [BO] inoperable. This inoperability constituted a condition that could have potentially prevented the fulfillment of the decay heat removal safety function.
Division 2 residual heat removal was operating in shutdown cooling, satisfactorily maintaining reactor coolant temperature. The affected breakers can be manually operated to start/stop their associated equipment, if necessary for operation INVESTIGATION AND IMMEDIATE ACTIONS Masterpa'ct breakers were installed at RBS as replacements for obsolete General Electric AKR breakers. Subsequently, at RBS and elsewhere, there were isolated failures ofthe breakers to close upon demand. Failure analyses had beer:i conducted by both the vendor and the utilities, but no such analyses determined that a potentially generic problem existed.
In 2014, the breaker vendor issued a non-conformance report that concluded that the closure failures were from intermittent mechanical binding of the anti-pump mechanism. The binding was the result of a "standing close signal,"
which is the condition where the relay that actuates the closing mechanism remains energized, either indefinitely or for a defined period of time following a closure actuation. The control logic for any given breaker is an inherent design feature of the circuitry of the switchgear, not internal to the breaker itself. It was eventually determined by the vendor that this condition could cause any Masterpact breaker to intermittently fail to close. The vendor indicated that the failure mode could not be predicted, but was repeatable, 'and occurred on both new and old breakers.
When RBS evaluated the vendor's nonconformance report, a population of affected circuit breakers was identified, and the served systems were evaluated for adverse effects on their ability to perform their safety functions. The operational history of the. breakers was examined, and it was determined that the observed increase in failure rate was not statistically significant. The affected systems were determined to be operable.
The nonconformance report stated that the failure mode could be averted by pressing the PUSH TO OPEN button on the front of the breaker after remote opening. This information was used to develop an Operations Standing Order, and this action was performed after every breaker opening for any of the affected breakers during power operations or hot
\\ (11-2015)
- 1. FACILITY NAME River Bend Station - Unit 1 LICENSEE EVENT REPORT (LER)
CONTINUATION SHEET
- 2. DOCKET NUMBER 05000- I
.s.
Page 2 of 3 U.S. NUCLEAR REGULATORY COMMISSION
- 3. LER NUMBER
~ NUMBER NO I
YEAR SEQUENTIAL REV u-1 oos 1-GJ shutaown until the moamcat1on to remove t 1e standing close signal was installed. No ailures of these oreakers occurred when standing order was utilized.
Isolated failures occurred in breakers serving the control building air conditioning system in the refueling outage in 2015, and vendor recommendations for modifying the breaker control circuitry were implemented. Those modifications were limited, however, to breakers with continuously energized closure relays.
In the February 2016 notification, the vendor provided information regarding the identification of a potential defect, with a recommendation that Masterpact breakers designed for electrical closing operation be evaluated. The vulnerable breakers identified in connection with the notification were not surfaced during previous extent-of-condition reviews due to being limited to the population with the. continuously energized closing relay. The new information provided in February 2016 revealed that even breakers with a time-delayed removal of power from the closing relay could be vulnerable while the relay was energized.
CAUSAL ANALYSIS The first direct cause of the event is that station personnel failed to recognize the breaker vulnerability to this failur~
mode. As a result, an additional population of breakers that had a time-delayed de-energization of the closing relay was identified in February 2016. These additional breakers included components that supported the emergency diesel generators and portions of the safety-related AC distribution system in the auxiliary building.
The second direct cause of the untimely corrective actions is that the breakers were incorrectly determined to be operable when the original condition with Masterpact breakers was discovered in 2014. Specifically, the procedure for development of operability determinations contained inadequate guidance on the use of reliability-based evaluations.
One contributing cause of the event was the insufficient detail in the procedure regarding distribution of OE information for screening. This caused the component engineer for circuit breakers to be bypassed in the OE review cycle, likely preventing early detection of the condition. Additionally, the OE notices did not contain detailed information regarding the failure mode.
CORRECTIVE ACTIONS TO PREVENT RECURRENCE The following actions have been completed to prevent recurrence of the reported condition.
- All safety-related Masterpact circuit breakers with the control circuit configuration that applied a* s.tanding close signal have been modified to eliminate this condition.
- The fleet procedure for operability evaluations has been revised to address conditions involving reduced reliability of safety-related components.
PREVIOUS OCCURRENCE EVALUATION The reported condition resulted from a very specific design feature of a certain model of circuit breakers. No previous event reports regarding this condition have been submitted by RBS in the last three years.
~
SAFETY SIGNIFICANCE
7 1
\\ (11-2015)
- 1. FACILITY NAME River Bend Station - Unit 1 LICENSEE EVENT REPORT (LER)
CONTINUATION SHEET
- 2. DOCKET NUMBER 0500-0-I Page 3 of 3 U.S. NUCLEAR REGULATORY COMMISSION
- 3. LER NUMBER D
NUMBER NO.
I.
YEAR SEQUENTIAL REV u-1 °0s 1-0 The plant was in cold shutdown when the vendor notification was received. Technical Specification limiting condition for operations for the affected system were entered, and the required actions were completed. Dedicated operators were assigned to implement the standing order to mitigate the failure mode. All safety-related Masterpact circuit breakers with the control circuit configuration that applied a standing close signal were modified to eliminate this condition prior to plant startup.
A probabilistic risk analysis of this condition has concluded that this condition w~s of very low risk significance.
(NOTE: Energy Industry Identification System component function identifier and system name of each component or system referred to in the LER are annotated as (**XX**) and [XX], respectively.)
\\'