ML17223A625

From kanterella
Jump to navigation Jump to search
Proposed Tech Specs Implementing NRC Recommendations to Enhance Diesel Generator Reliability as Presented in Generic Ltr 84-15 & to Make Unit 1 Tech Specs Re Electrical Power Sys Ac Sources Similar to Unit 2 Tech Specs
ML17223A625
Person / Time
Site: Saint Lucie  NextEra Energy icon.png
Issue date: 04/24/1990
From:
FLORIDA POWER & LIGHT CO.
To:
Shared Package
ML17223A624 List:
References
GL-84-15, NUDOCS 9004270256
Download: ML17223A625 (51)


Text

Tl'A NT 1 Marked-up Technical Specification Pages:

3/4 0-1 3/4 1-8 3/4 4-1d 3/4 4-le 3/4 8-1 (plus 2 insert pages) 3/4 8-2 (plus 1 insert page) 3/4 8-3 (plus 2 insert pages) 3/4 8-4 (plus 3 insert pages) 3/4 8-5 (plus 1 insert page) 3/4 8-7(plus 1 insert page) 3/4 9-8a 3/4 9-9 B 3/4 0-3 B 3/4 0-4 B 3/4 0-5 B 3/4 8-1 (plus 1 insert page) 9004270256 900424 PDR ADOCK 05000335 P PDC

J ~

t

'1

3 4 0

LIMITING CONDITIONS FOR OPERATION AND

~

SURVEILLANCE RE UIREMENTS 3/4. 0 APPL ICAB IL ITY LI!1ITING CONDITION FOR OPERATION 3.0.1 Compliance with the Limiting Conditions for Operation (LCO) contained in the succeeding specifications is required during the OPERATIONAL NODES or other conditions specified therein; except that upon failure to meet the Limiting Conditions for Operation, the associated ACTION r equirements shall be met.

3.0.2 Noncompliance with a specification shall exist when the requirements of the Limiting Condition for Operation (LCO) and associated ACTION requirements are not met within the specified time intervals . If the Limiting Condition for Operation is restored prior to expiration of the specified time intervals, completion of the ACTION requirements is not required.

3.0.3 When a Limiting Condition for Operation (LCO) is not met, except as provided in the associated ACTION requirements, within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> action shall be initiated to place the unit in a RODE in which the specification does not apply by placing it, as applicable in:

1. At least HOT STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />,
2. At least HOT SHUTDOWN within the following 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />, and
3. At least COLO SHUTDOWN within the subsequent 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

Where corrective measures are completed that permit operation under the ACTION requirements, the ACTION may be taken in accordance with the specified time limits as measured from the time of failure to meet the LCO. Exceptions to these requirements are stated in the individual specifications.

This specification is not applicable .in HODES 5 or 6.

3.0.4 Entry into an OPERATIONAL,'IODE or other specified applicability condition shall not be made when the conditions of the Limiting Condition for Operation are not met and the associated ACTION requires a shutdown if they are not met within a specified time interval. Entry into an OPERATIONAL l<ODE or specified condition may be made in accordance with ACTION requirements when conformance to them permits continued operation of the facility for an unlimited period of time. This provision shall not prevent passage through or to OPERATIONAL NODES as required to comply with ACTION statements. Exceptions to these requirements are stated in the individual specifications.

5 When a system, subsystem, train, component or device is determined be in e solely because its emergency power source is inopera solely becau for the normal power source is inoperable, f satisfying it may sidered OPERABLE pu the requirement s applicable Limiting Condition for Oper rovided: (1) orresponding normal or emergency power sour ce is OPERABL , 2 of its redundant systen(s) .

subsystem(s), train(s), component(s s) are OPERABLE, or likewise satisfy the requirements of and (2) are satisfied, t th'ification.

'shall be placed in at both conditions (1)

T STANDBY within 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />, HO OWN within the following 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />, an st COLO SHUTDOW sn the subsequent 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

pecification is not applicable in NODE 5 or 6.

ST. LUCIE - UNIT 1 3/4 0-1 Amendment No. N, 98

J r

se.)-;<

~ 4

)

a

zw: ~

REACTIVITY CONTROL S YSTEMS hUb CP4%BW CF a&~ POQ6a@FtN'.OW ~

OPCRIKLC. EH~&scg VehM so~zc6 3/4.1.2 BORATION SYSTEMS FLOW PATHS - SHUTDOWN LIMITING CONOITION FOR PERATION 3.1.2.1 As a mini um, one of'he following boron injection flow paths shall be OPERABLE.

a 0 A flow path from the boric acid makeup tank via either a boric acid pump or a gravity feed connection and any charging pump to the Reactor Coolant System if only the borfc acid makeup tank in Specification 3.1.2.7a fs OPERABLE, or

b. The flow path from the refueling water tank via either a charging pump or a high pressure safety injection pump*

to the Reactor Coolant System if only the refueling water tank in Specification 3.1.2.7b fs OPERABLE.

I APPLICABILITY: MOOES 5 and 6.

ACTION:

With none of the above flow paths OPERABLE, suspend all operatfons involving CORE ALTERATIONS or positive reactivity changes until at least one injection path is restored to OPERABLE status.

SURVEILLANCE RE UIREMENTS 4,1.2.1 At least one of the above required flow paths shall be demonstrated OPERABLE:

a. At least once per 31 days by verifying that each valve (manual, power operated or automatic) in the flow path that is not locked, sealed, or otherwise secured fn position, is in its correct posftfon.

be established'ff: (a}

I,III the PCS II I I II IIII I pressure boundary does not exist, or (b} no charging pumps are operable. In thfs case all charging pumps

. shall be disabled, and heatup and cooldown rates shall be limited fn accordance with Ffg. 3.1-1b.

ST. LUCIE - UNIT 1 3/4 1-8 Amendment No. g g, ~g,94

~~

P ~I k

~ "k k I I

' ~

REACTOR COOLANT SYSTEM COLD SHUTDOWN - LOOPS FILLED LIMITING CONDITION FOR OPERATION 3.4.1.4.1* t least one shutdown cooling loop shall be OPEPABL .

and in operation: and either:

additional shutdown cooling loop shall

¹ or be OPERABLE,

~

a. One
b. The secondary side water level of at least two steam generator s shall be greater than 10% of narrow range indication.

APPLICABILITY: MODE 5 with reactor coolant loops filled ACTION:

a. With less than the above required loops OPERABLE or with less than the required steam generator level, within one (1) hour initiate corrective action to return the required loops to OPEPABLE status .

or to restore the required level.

b. With no shutdown cooling loop in operation, suspend all operations involving a reduction in boron concentration of the Reactor Coolant System and within one (1) hour initiate corrective action to return the required shutdown cooling loop to operation.

SURVEILLANCE RE UIRE tEHTS 4.4.1.4.1.1 The secondary side water level of at least two steam generators when required shall be determined to be within limits at least once per 12.hours.

4.4.1.4.1.2 At least one shutdown cooling loop shall be determined to be in operation and circulating reactor coolant at least once per 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />.

The shutdown cooling pump may be de-energized for up to l.hour provided 1),no operations are permitted that would cause dilution of the Reactor Coolant System boron concentration, and 2) core outlet temperature is maintained at least 10'F below saturation temperature.

¹ One shutdown cooling loop may be inoperable for up to 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> for surveillance testing provided the other shutdown cooling loop is OPERABLE and in operation.

¹¹A reactor coolant pump shall not be started with two idle loops unless the secondary:water temperature e.q f t.ash steam generator Wa.less, than 30'F above each of. the Reactor Coolant System cold leg temperatures ~

ST LUCI E - UNIT 1 3/4 4-ld Amendment No. Qi,81

t I 0

l 1

4 I

RE.-'.CTOR COOLANT SYSTEil

~

COLD SHUTDOWN LOOPS NOT FILLED LIffITII<G CONDITIOii FOR OPERATION 3..4.1.4.2 Two shutdown cooling loops shall be OPERABLE'nd at least one cooling loop shall be in operation".

shut-'own APPLICABILITY: NODE 5 with reactor coolant loops not filled.

ACTIOII:

a ~ With,less than the above required loops OPERABLE, within on'e (1) hour initiate corrective action to return the required loops t'o OPERABLE status.

With no shutdown cooling loop in operation, suspend all operations involving a reduction in boron concentration of the Reactor Coolant System and within one (1) hour initiate corrective action to return the required shutdown cooling loop to operation.

SURVEILLANCE RE iJIREI1ENTS 4.4.1.4.2 At least one shutdown cooling loop shall be determined to be in operation and circulating reactor coolant at least once per 12.hours.

One shutdown cooling loop may be inoperable for up to 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> for surveillance testing provided the other shutdown cooling loop is OPERABLE and in operation.

C

  • The'shutdown cooling pump may be de-energized for up to 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> provided 1') no operations ar e permi'tted that would cause dilution of the Reactor, Coolant System boron concentration, and 2) core outlet temperature is naintained at.

least 10'F below saturation temperature e, ST. LUCIE - UNIT 1 3/4 4-le Amendment No. 5 6,

3/4.8 ELECTRICAL POWER SYSTEMS 3/4.8.1 A.C. SOURCES OPERATING LIMITING CONOITION FOR OPERATION 3.8.1.1 As a minimum, the following A.C. electrical power sources shall be OPERABLE:

~ON

a. Two physically independent circuits between the offsite trans-mission network and the onsite Class 1E distribution system, and
b. Two separate and independent diesel generator sets each with:

Engine-mounted fuel tanks containing a minimum of 152 gallons of fuel,

2. A separate fuel storage system containing a minimum of 16,450 gallons of fuel, and 3.. A separate fuel transfer pump.

APPLICABILITY: MOOES 1, 2, 3 and 4.

ACTION:

-With either an offsite circuit or diesel generator set of above required A.C. electrical power sources inoperabl nstrate the OPERABILITY of the remaining A.C. s s by ..

pe 'ng Surveillance Requirements 4.8. 1. 1. 1. 4.8; 1. 1.2.a .4 .

within our and at least once per 8 hour9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> reafter; Xt,6~6) restore at two offsite ci rcuits an diesel. generator "

sets to OPERABL tus within 72 ho be in at least HOT Rspme8 STANOBY within the n hours 'OLO SHUTOOWN- within the following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />.

With one offsite circu'ne el generator set of the t'.mwcee above required A.C demonstrate performing th trical power BILITY of the remai illance Requirements 4.8.1.1.

'C.

ces inoperable, sources by nd 4.8.1.1.2.a.4 within our and at least once per 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> the er; rest t least one of the inoperable sources to OP '

s within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> or be in at least HOT STANOBY wit next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and in COLO SHUTOOWN within the following 3 ST. LUCIE - UNIT 1 3/4 8-1

P

~

1 (3)3J3f

.H'n6,i 3ahPlBFT j"."'w=itL

(<QA34I1'A 3

'F c1,

RT 1 ao With one offsite circuit of 3.8.1.1.a inoperable, except as provided in Action f. below, demonstrate the OPERABILITYof the remaining A.C. sources by performing Surveillance Requirement 4.8.1.1.1.a within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> and at least once per 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> thereafter. Ifeither has not been successfully tested within the past 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />, demonstrate its

'DG OPERABILITYby performing Surveillance Requirement 4.8.1.1.2.a.4 separately for each such EDG within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />. Restore the offsite circuit to OPERABLE status within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and COLD SHUTDOWN within the following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />.

With one diesel generator of 3.8.1.1.b inoperable, demonstrate the operability of the A.C.

sources by performing Surveillance Requirement 4.8.1.1.1.a within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> and at least once per 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> thereafter, and ifthe EDG became inoperable due to any cause other than preplanned preventative maintenance or testing, demonstrate the OPERABILITYof the remaining OPERABLE EDG by performing Surveillance Requirement 4.8.1.1.2.a.4 within 24 hour2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />s*; restore the diesel generator to OPERABLE status within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />. Additionally, verify within 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> or be in HOT STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br /> that:

1. all required systems, subsystems, trains, components and devices that depend on the remaining OPERABLE diesel generator as a source of emergency power are also OPERABLE, and
2. When in MODE 1, 2 or 3, the steam-driven auxiliary feed pump is OPERABLE.

With one offsite A.C. circuit and one diesel generator inoperable, demonstrate the OPERABILITYof the remaining A.C. sources by performing Surveillance Requirement 4.8.1.1.1.a within one hour and at least once per 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> thereafter; and ifthe EDG became inoperable due to any cause other than preplanned preventative maintenance or testing, demonstrate the OPERABILITYof the remaining OPERABLE EDG by performing Surveillance Requirement 4.8.1.1.2.a.4 within 8 hour9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br />s*. Restore at least one of the inoperable sources to OPERABLE status within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />.

Restore the other A.C. power source (offsite circuit or diesel generator) to OPERABLE status in accordance with the provisions of Section 3.8.1.1 ACTION statement a or b, as appropriate, with the time requirement of that ACTION Statement based on the time of the initial loss of the remaining inoperable A.C. power source. Additionally, verify within 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> or be in HOT STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and COLD SHUTDOWN within the following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br /> that:

all required systems, subsystems, trains, components and devices that depend on the remaining OPERABLE diesel generator as a source of emergency power are also OPERABLE, and When in MODE 1, 2 or 3, the steam-driven auxiliary feed pump is OPERABLE.

t ~

I

F 1300 kw, arid op es for > 60 mi

6. Verif the diesel generator set 'ligned to provide st y power to the associated emerg busses.
b. A ast once per 31 days by verifying that a sa of diesel 1 from the fuel storage tank is within the accep imits specified in Table 1 of ASTM 0975-68 when check r viscosity, water and sediment.
c. At least once per 18 months during shutdown by:
1. Subjecting the diesels to an inspection in accordanc with procedures prepared in conjunction with its anufacturer's recommendations for this class standby ce.
2. Verifyin generator capabilit reject, a load of >

600 hp witho 'ing.

LU~

3. Simulating a loss o power in conjunction with a safety injection nal, and:

a) Yerif 'e-energization o emergency busses a ad shedding from the emer c usses.

Verifying the diesels start from ambien o 'tion on the auto-start signal, energize the emer c busses with permanently connected loads, energi S(. LUCIE - UNIT 1 3/4 8-3

'l J

~luJ B3QJ Qp 1~3LJz3 P

(AS&>p>~->g )

1~

S n

~

't

<<3783K r

-/A> GJ:9">M99~('r P

(ct3b "qg @)

~ ~

SERT 4.8.1.1.2 Each diesel generator shall be demonstrated OPERABLE:

ao In accordance with the frequency specified in Table 4.8-1 on a STAGGERED TEST BASIS by:

1. Verifying fuel level in the engine-mounted fuel tank,
2. Verifying the fuel level in the fuel storage tank, Verifying the fuel transfer pump can be started and transfers fuel from the storage system to the engine-mounted tank, 4 Verifying the diesel starts from ambient condition and accelerates to approximately 900 rpm in less than or equal to 10 seconds**. The generator voltage and frequency shall be 4160+ 420 volts and 60+ 1.2 Hz within 10 seconds after the start signal**. The diesel generator shall be started for this test by using one of the following signals:

a) Manual.

b) Simulated loss-of-offsite power by itself.

c) Simulated loss-of-offsite power in conjunction with an ESF actuation test signal.

d) An ESF actuation test signal by itseK Verifying the generator is synchronized, loaded to greater than or equal to 3500 kW in less than or equal to 60 seconds***, and operates within a load band of 3300 to 3500 kW***for at least an additional 60 minutes, and

6. Verifying the diesel generator is aligned to provide standby power to the associated emergency busses.
    • The diesel generator start (10 sec.) from ambient conditions shall be performed at least once per 184 days in these surveillance tests. Allother diesel generator starts for the purposes of this surveillance testing may be preceded by an engine prelube period and may also include warmup procedures (e.g., gradual acceleration) as recommended by the manufacturer so that mechanical stress and wear on the diesel generator is minimized.
      • Generator loading in less than or equal to 60 seconds shall be performed at least once every 184 days; timing for this loading test shall start upon the closing of the diesel generator breaker. Allother loading for the purpose of this surveillance test may be performed according to manufacturer's recommendations. The indicated load band is meant as guidance to avoid routine overloading. Variations in loads in excess of the band due to changing bus loads shall not invalidate this test.

I ~ + ~

O'RT n'.

By removing accumulated water:

1. From the engine-mounted fuel tank at least once per 31 days and after each occasion when the diesel is operated for greater than 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br />, and
2. From the storage tank at least once per 92 days.

C. By sampling new fuel in accordance with ASTM D4057-81 prior to addition to the storage tanks and:

1. By verifying in accordance with the tests specified in ASTM D975-81 prior to addition to the storage tanks that the sample has:

a) API Gravity within 0.3 degrees at 60 F or a specific gravity of within 0.0016 at 60/60'F, when compared to the supplier's certificate or an absolute specific gravity at 60/60'F of greater than or equal to 0.83 but less than or equal to 0.89 or an API gravity of 60'F of greater than or equal to 27 degrees but less than or equal to 39 degrees.

b) A kinematic viscosity at 40'C of greater than or equal to 1.9 centistokes, but less than or equal to 4.1 centistokes, ifgravity was not determined by comparison with the supplier's certification.

c) A flash point equal to or greater than 125'F, and d) A clear and bright appearance with proper color when tested in accordance with ASTM D4176-82.

By verifying within 31 days of obtaining the sample that the other properties specified in Table 1 of ASTM D975-81 are met when tested in accordance with ASTM D975-81 except that the analysis for sulfur may be performed in accordance with ASTM D1552-79 or ASTM D2622-82.

At least once every 31 days by obtaining a sample of fuel oil from the storage tanks in accordance with ASTM D2276-83 and verifying that total particulate contamination is less than 10 mg/liter when checked in accordance with ASTM D2276-83, Method A, or Annex A-2.

ELECTRICAL POWER SYSTEMS SURVEILLANCE RE UIRENENTS Continued the auto-connected emergency loads through the lo sequencing system and operate for > 5 minutes e the generator is loaded with the emergency s.

Verifying that on the safety injectio tuation ignal, all diesel generator trips cept engine speed and generator differe 1, are automa-ts bypassed.

Verifying the el gener set operates for > 60 RGB cQ QL'tH'. minutes while lo to 00 kw.

Verifying that the nected loads to each diesel generator set d t exce e 2000 hour0.0231 days <br />0.556 hours <br />0.00331 weeks <br />7.61e-4 months <br /> rating of 3730 C~~ Ac.685 kw.

6. Verify wit

'hat e interval the automatic seque between each load b timers are OPERABLE within + 1 nd of its design interval.

d. east once per 18 months by verifying that each transfer pump transfers fuel from each fuel storage tank to the ine mounted fuel tanks on each diesel via the installed eros nection lines.

4.8.1.1. The Class IE underground cable system shall be demonstrated OPERABLE withi n 30 days after the movement of any loads in excess of 80~ of the ground surface design basis load over the cable ducts by pulling a mandrel with a diameter of at least 80> of the duct's inside diameter through a duct exposed to the maximum loading (duct nearest the ground's surface) and verifying that the duct has not been damaged.

~ZQ M:

4 6. I. l.5 +~EIEIB - ALL DIESCl ~GRAiiR FAILLLFES, 'IIALIIIISI LlbLI VALI', 5IIALI BE, a os> m~ Coge<wos ~usus m 4>Biecana<49.2. R~vs oF h>em~

Lib' NRbRFAiLuA~ 5AAl-4 luau+& T}t6 iuRRH~ ~HHECM l6 RG~CRg B.b EF~LAtt$8 6(LUIK I KC, RESISIDILX, AubPST, Ã'0%. 2F%$ Au+B3'F IFSLuRGS ILI lAST IOD NLIQTESF (D6 A XR IIIASA81Z IISIIE BASI9 IS SP %SR GAP'+L ISR 8BISIL

'IO %) ~

~u. BE:RQV~QGEb ~ iud ~

~SLL C.S.b EFRBI~L~hu~ I.IOE RShbOLI<,

p@Dimchi i~~g~S; EE'mHH&L~ i4

~<~+.

ST. L C - T 4 8-. Amendment No. 7, 53

<~

I ~

~

/

, 'x..u.'>~l.

)AIQ l~ 1 i39c.lg.1, x-'>~>>Al'Tp )

SFRY 4

e. At least once per 18 months during shutdown by:

Subjec'ting the diesel to an inspection in accordance with procedures prepared in conjunction with its manufacturer's recommendations for this class of standby service.

2. Verifying generator capability to reject a load of greater than or equal to 600 hp while maintaining voltage at 4160+ 420 volts and frequency at 60+ 1.2 Hz.

Simulating a loss of offsite power by itself, and:

a) Verifying deenergization of the emergency busses and load shedding from the emergency busses.

b) Verifying the diesel starts on the auto-start signal****,energizes the emergency busses with permanently connected loads within 10 seconds, energizes the auto-connected shutdown loads through the load sequencer and operates for greater than or equal to 5 minutes while its generator is loaded with the shutdown loads. After energization, the steady-state voltage and frequency of the emergency busses shall be maintained at 4160+ 420 volts and 60+

1.2 Hz during this test.

4. Verifying that on an ESF actuation test signal (without loss-of-offsite power) the diesel generator starts****on the auto-start signal and operates on standby for greater than or equal to 5 minutes. The steady state generator voltage and frequency shall be 4160+ 420 volts and 60+ 1.2 Hz within 10 seconds after the auto-start signal; the generator voltage and frequency shall be maintained within these limits during this test.
5. Simulating a loss-of-offsite power in conjunction with an ESF actuation test signal, and a) Verifying deenergization of the emergency busses and load shedding from the emergency busses.

b) Verifying the diesel starts on the auto-start signal****,energizes the emergency busses with permanently connected loads within 10 seconds, energizes the auto-connected emergency (accident) loads through the auto-sequencer and operates for greater than or equal to 5 minutes while its generator is loaded with the emergency loads.

After energization, the steady-state voltage and frequency of the emergency busses shall be maintained at 4160+ 420 volts and 60+

1.2 Hz during this test.

        • This test may be conducted in accordance with the manufacturer's recommendations concerning engine prelube period.

P

( ~ ~ ~ 'I SF~RT 4 n'.

c) Verifying that all automatic diesel generator trips, except engine overspeed and generator differential, are automatically bypassed upon loss of voltage on the emergency bus concurrent with a safety injection signal.

Verifying the diesel generator operates for at least 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.****During the first 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> of this test, the diesel generator shall be loaded within a load band of 3800 to 3960 kW¹ and during the remaining 22 hours2.546296e-4 days <br />0.00611 hours <br />3.637566e-5 weeks <br />8.371e-6 months <br /> of this test, the diesel generator shall be loaded within a load band of 3300 to 3500 kW¹. The generator voltage and frequency shall be 4160+ 420 volts and 60+ 1.2 Hz within 10 seconds after the start signal; the steady state generator voltage and frequency shall be maintained within these limits during this test.

7. Verifying that the auto-connected loads do not exceed the 2000-hour rating of 3730 kW.
8. Verifying the diesel generator's capability to:

a) Synchronize with the offsite power source while the generator is loaded with its emergency loads upon a simulated restoration of offsite power.

b) Transfer its lo'ads to the offsite power source, and c) Be restored to its standby status.

Verifying that with the diesel generator operating in a test mode (connected to its bus), a simulated safety, injection signal overrides'the test mode by (1) returning the diesel generator to standby operation and (2) automatically energizes the emergency loads with offsite power.

10. Verifying that the fuel transfer pump transfers fuel from each fuel storage tank to the engine-mounted tanks of each diesel via the installed cross connection lines.
11. Verifying that the automatic load sequence timers are operable with the interval between each load block within + 1 second of its design interval.

At least once per ten years or after any modification which could affect diesel generator independence by starting****the diesel generators simultaneously, during shutdown, and verifying that the diesel generators accelerate to approximately 900 rpm in less than or equal to 10 seconds.

¹ This band is meant as guidance to avoid routine overloading of the engine. Variations in load in excess of this band due to changing bus loads shall not invalidate this test.

        • This test may be conducted in accordance with the manufacturer's recommendations concerning engine prelube period.

sl l

~ I

~I ll Sl

~ ~

I SER'F 4 n't least once per ten years by:

1. Draining each fuel storage tank, removing the accumulated sediment and cleaning the tank using an appropriate cleaning compound, and
2. Performing a pressure test of those portions of the diesel fuel oil system designed to USAS B31.7 Class 3 requirements at a test pressure equal to 110% of the system design pressure.

p 0 h

~ ~

+u Z,kLSGEC W (AlYAGHQ)o ST. LUCI E - UNIT 1 3/4 8-5 Amendment No. 53

~

~

DIE EL ENERAT RTE T HED Number of Failures in Last 20 Number of Failures in Q~li T ~* T Fr n

<5 At least once per 31 days

) 2** )5 At least once per 7 days Criteria for determining number of failures and number of valid tests shall be in accordance with Regulatory Position C.2.e of Regulatory Guide 1.108, Revision 1, August 1977, where the number of tests and failures is determined on a per diesel generator basis.

    • This test frequency shall be maintained until seven consecutive failure free demands have been performed and the number of failures in the last 20 valid demands have been reduced to one or less. Initial entry into this test schedule shall be at the 31 day test frequency.

~ i

'I

~ ~ ~

ELECTRICAL POWER SYSTEMS SHUTOOWN LIMITING CONOITION FOR OPERATION 3.8.1.2 As a minimum, the following A.C. electrical power'sources shall be OPERABLE:

a. One circuit between the offsite transmission network and the onsite Class 1E distribution system, and
b. One diesel generator set with:

Engine-mounted fuel tanks containing a minimum of 152 gallons of fuel,

2. A fuel storage system containing a minimum of'6,450 gallons of fuel, and
3. A fuel transfer pump.

APPLICABILITY: MODES 5 and 6.

ACTION:

4m'; ss than the above minimum required A. C. el tions i pq+~e hbI PE t t'vity changes C.

NS electrical or positive power

~WRY @4 sou o OPERABLE status.

(~~6b)

SURVEILLANCE RE UIREMENTS "ebb:

4.8.1.

~ ~ ~ The above required A.C. electrical power sources'hall be demonstrated OPERABLE by the performance of each of the Surveillance Requirements of 4.8. l. l. 1 and 4. 8. l. 1. 2 except for requirement 4.8.1.1.2a.5.

~) II~~R)QIU.A;AICA. RQ(IAAPEHIO4T 4%I.Z.2. (~C JA'!5ERT +>

QTPrCN80)'T.

LUCIE - UNIT 1 3/4 8-7

iI ~

ACTION:

With less than the above minimum required A.C. electrical power sources OPERABLE, immediately suspend all operations involving CORE ALTERATIONS, positive reactivity changes, movement of irradiated fuel, or crane operation with loads over the fuel storage pool. In addition, when in MODE 5 with the reactor coolant loops not filled, or in MODE 6 with the water level less than 23 feet above the top of irradiated fuel assemblies seated within the reactor pressure vessel, immediately initiate corrective action to restore the required sources to OPERABLE status as soon as possible.

FRT 4.8.1.2.2 ~Rp~rt - Alldiesel generator failures, valid or non-valid, shall be reported to the Commission pursuant to Specification 6.9.2. Reports of diesel generator failures shall include the

'nformation recommended in Regulatory Position C.3.b of Regulatory Guide 1.108, Revision 1, August 1977. Ifthe number of failures in the last 100 valid tests (on a per nuclear unit basis) is greater than or equal to 7, the report shall be supplemented to include the additional information recommended in Regulatory Position C.3.b of Regulatory Guide 1.108, Revision 1, August 1977.

~ ~

~ I ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ I I ~ i ~ ~

~ I ~ ~ ~ ~ ~ ~ ~ ~ ~

~ ~ ~

II ~ 8 I ~ ~ , ~

~ ~ ~ ~ ~ ~ ~ ~ I'

~ ~

~

II ~ ~ ~ ~ ~ ~

~ ~

~ ~ ~ ~ ~ ~ I ~ ~ ~ I ~ ~ ~ ~

I I ~ ~ ~

~ ~ ~ ~ ~ ~ ~ ~ ~ ~ I

~ ~ ~ I

~ ~

~ ~ ~ ~ I ~ ~ ~ I

~

I ~

~ ~

~ I I ~ ~ I ~ ~

~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ I

~ III eI ~ ~

~ ~

e ~ ~

~ ~

I ~ 7 0

~ t~ ~

REFUELING OPERATIONS, CONTAINMENT ISOLATION SYSTEM LIMITING CONOITION FOR OPERATION 3.9.9 The containment isolation system shall be OPERAB *.

APPLICABILITY: MOOE 6.

ACTION:

With the containment isolation system inoperable, close each of the penetrations providing direct access from the containment atmosphere to the outside atmosphere. The provisions of Specification 3.0.3 are not applicable.

SURVEILLANCE RE UIREMENTS 4.9.9 The containment isolation system shall be demonstrated OPERABLE 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> prior to the start of and at least once per 7 days during

'ithin CORE ALTERATIONS by verifying that containment isolation occurs on manual initiation and on a high radiation signal from two of the containment radiation monitoring instrumentation channels.

t ST. LUCIE,- UNIT 1 3/4 9-9 Amendment Ho. 40

!~

~ k

~ ~

P

APPLICABILITY BASES The same principle applies with regard to the allowable outage time limits of the ACTION requirements, if compliance with the ACTION requirements for one specification results in entry into a MODE or condition of operation for another specification in which the requirements of the Limiting Condition for Operation are not met. If the new specification becomes applicable in less time than specified, the differ ence may be added to the allowable outage time limits of the second specification. However, the allowable outage time limits of ACTION requirements for a higher MODE of operation may not be used to extend the allowable outage time that is applicable when a Limiting Condition for Operation is not met in a lower MODE of ooeration.

The shutdown requirements of Specification 3.0.3 do not apply in MODES 5 and 6, because the ACTION requirements of individual specifications define the remedial measures to be taken.

3.0.4 This specification establishes limitations on MODE changes when a Limiting Condition for Operation is not met. It precludes placing the facility fn a higher MODE of operation when the requirements for a Limiting Condition for Operation are not met and continued noncompliance to these conditions would result in a shutdown to comply with the ACTION requirements MODES were permitted.

if a change in The purpose of this specification is to ensure that facility operation is not initiated or that higher MODES of operation are not entered when corrective action is being taken to obtain compliance with a specification by restoring equipment to OPERABLE status or parameters to specified limits. Compliance with ACTION requirements that permit continued operation of the facility for an unlimited period of time provides an accept-able level of safety for continued operation without regard to the status of the plant before or after a NODE change. Therefore, in this case, entry into an OPERATIONAL MODE or other specified condition may be made in accordance with the provisions of the ACTION requirements. The provisions of this specification should not, however, be interpreted as endorsing the failure to exercise good practice in restoring systems or components to OPERABLE status before plant startup.

When a shutdown is required to comply with the ACTION requirements, the provisions of Specification 3.0.< do not apply because they would delay placing the facility in a lower !10DE of operation.

Exceptions to this provision have been provided for a limited number of specifications when startup wi th inoperable equipment would not affect plant sa,ety. These exceptions are stated in the ACTION statements of the appro-

~riate specifications.

ification delineates what additional conditions mu fied to pe '

for power sources, when

'ontinue, consistent with ements erge o ce is not OPERABLE.

It specifically prohibits oper ' ion is inoperable because its normal or emer urce is inopera em, subsystem, train, e evice in another division is inopera ST. LUC IE - UNIT 1 9 3/4 0-3 Amendment No. 99,gB

J a

hi&

APPLICABILITY

. BASES The provisions of this specification permit the ACTION statements as iated with individual systems, subsystems, trains, components, or dev' to b onsistent with the ACTION statements of the associated electrical er sourc It allows operation to be governed by the time limits of the ON stateme ssociated with the Limiting Condition for Operation for th ormal or emerge . power source, not the individual ACTION statements for h system, su tern, train, component or device that is determined e inoperable s ly because of the inoperability of its normal or rgency

'ower source.

For example, cification 3.8.1.1 requires in part t two emergency diesel generators b PERABLE. The ACTION statement prov'd s for a 72 hour8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> out-of-service time g one emergency diesel generator not OPERABLE. If the definition of OPERA were applied without consi r tion of Specifica-tion 3.0.5, all systems, systems, trains, compon and devices supplied by the inoperable emergen ower source would als e inoperable. This would dictate invoking the icable ACTION sta nts for each of the appli-cable Limiting Conditions for ration. Howe r, the provisions of Specifica-tion 3.0.5 permit the time limi s for contin .operation to be consistent with the ACTION statement for the ino ble erne g cy diesel generator instead, provided the other specified condi s a atisfied. In this case, this would mean that the corresponding no wer source must be OPERABLE, and all redundant systems, subsystems, tr n , components, and devices must be OPERABLE, or otherwise satisfy Speci s i n 3.0.5 (i.e., be capable of performing their design function a ave least one normal or one emergency power source OPERABLE) they a e ot satisfied, shutdown is required in accordance with th'ecificati As a further example, ification 3.8.1.1 r uires in part that two physically independent ci ts between the off-ss e transmission network and the on-site Class IE di r'tion system be OPERABL The ACTION statement provides a 24 hour2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> out o -service time when both requ'ff-site circuits are not OPERABLE. I e definition of OPERABLE were a ied without consideration of S c fication 3.0.5, all systems, subsy e s, trains, components and d i s supplied by the inoperable normal p sources, both of the off-site c cuits, would also be inoperable. This wo 1 dictate invoking the p icable ACTION statements for each of the app 'c le LCOs.

However, e rovisions of Specification 3.0.5 permit the time li 't for continue eration to be consistent with the ACTION statement for e inoper 1 normal power sources instead, provided the other specified di-ion a satisfied. In this case, this would mean that for one divis>

the e rgency power source must be OPERABLE (as must be the compone t s p 1'ed by the emergency power source) and all redundant systems, subsyst r ns, components and devices in the other division must be OPERABLE, or s kewise satisfy Specification 3.0.5 (i.e., be capable of performing their ST. LUCIE - UNIT l. 8'3/4 0-4 Amendment No. 98

r p

~

~ I

APPLICABILITY BASES i n functions and have an emergency power source OPERABLE). In other emergency power sources must be OPERABLE and all red subsystem OPERABLE.

If thes accordance with this specs

're mponents and devices in both divisi not satisfied >s so be required in ems, In modes Condition 5

and thus the f

or 6 the indivi er 'n ACTION e or Spec i statements for each app '

these MOOES must be adhered to.

.5 does not apply, ing ST. LUC IE - UNIT 1 8 3/4 0-5 Amendment No.9B

~ K

+M

'E( ~

~

-J3 .i

3/4.8 ELECTRICAL POWER SYSTEMS BASES The OPERABILITY of the A.C. and D.C. power sources and associated distribution systems during operation ensures that sufficient power will be available to supply the safety related equipment required for 1)'he safe shutdown of the facility and 2) the mitigation and contro1 of accident conditions within the facility. The minimum specified indepen-dent and redundant A.C. and D.C. power sources and distribution systems satisfy the requirements of General Design Criteria 17 of Appendix "A" to 10 CFR 50.

The ACTION requirements specified for the levels of degradation of the power sources provide restriction upon continued facility ooeration commensurate with the level of degradation. The OPERABILITY of the power sources are consistent with the initial condition assumptions of the accident analyses and are based upon maintaining at least one of each of the onsite A.C. and D.C. power sources and associated distribution systems during accident conditions coincident with an assumed loss of

+b MKKf OPERABLE offsite power and single failure of the other onsite A.C. source.

( ~ (gl'hCA The OPERABILITY of the minimum specified A.C. and D.C. power sources and.associated distribution systems during shutdown and refueling ensures that 1) the facility can be maintained in the shutdown or refueling condition for extended time periods and 2) sufficient instrumentation and control capability is available for monitoring and maintaining the facilit ~st tu gy~ J pc~~ ~ Q (~i&c~)

ST. LUCIE - UNIT 1 B 3/4 8-1

When one diesel generator is inoperable, there is an additional ACTIONrequirement to verify that all required systems, subsystems, trains, components and devices that depend on the remaining OPERABLE diesel generator as a source of emergency power, are also OPERABLE, and that the steam-driven auxiliary feedwater pump is OPERABLE. This requirement is intended to provide assurance that a loss of offsite power event willnot result in a complete loss of safety function of critical systems during the period one of the diesel generators is inoperable. The term verify as used in this context means to administratively check by examining logs or other information to determine ifcertain components are out-of-service for maintenance or other reasons. It does not mean to perform the surveillance requirements needed to demonstrate the OPERABILITYof the component.

Ambient conditions are the normal standby conditions for the diesel engines. Any normally running warmup systems should be in service and operating, and manufacturer's recommendations for engine oil and water temperatures and other parameters should be followed.

IN I:RT The Surveillance Requirements for demonstrating the OPERABILITYof the diesel generators are in accordance with the recommendations of Regulatory Guide 1.108, "Periodic Testing of Diesel Generator Units Used as Onsite Electric Power Systems at Nuclear Power Plants," Revision 1, August 1977, Regulatory Guide 1.137, "Fuel Oil Systems for Standby Diesel Generators," Revision 1, October 1979, Generic Letter 84-15, "Proposed Staff Actions to Improve and Maintain Diesel Generator Reliability," dated July 2, 1984, and NRC staff positions reflected in Amendment No. 48 to Facility Operating License NPF-7 for North Anna Unit 2, dated April25, 1985.

~lTA .N 2 DISCUSSION OF PROPOSED CHANGES In a telephone conversation with the Nuclear Regulatory Commission staff on March 7, 1990, questions were raised concerning Florida Power and Light's St. Lucie Unit 1 proposed license amendment on Emergency Diesel Generators dated December 15, 1989. FPL's response to the staffs questions are provided below.

Full R n T .tin The St. Lucie Unit 1 emergency diesel generators have as their licensing basis Safety Guide 9, "Selection of Diesel Generator Set Capacity for Standby Power Supplies," dated March 10, 1971.

Safety Guide 9 states that, "A diesel generator set selected for use as a standby power source should have the capability to... start and accelerate a number of loads in rapid succession, and be

'able to sustain the loss of any such load..." Performance parameters for acceptable engine response are also provided in the Safety Guide as follows:

During recovery from transients caused by step load increases or resulting from the disconnection of the largest single load, the speed of the diesel generator set should not exceed 75 percent of the difference between nominal speed and the overspeed trip setpoint or 115 percent of nominal, whichever is lower.

The Unit 1 EDGs were preoperationally tested in accordance with the Atomic Energy Commission guidance provided by Safety Guide 9. In the St. Lucie Unit 1 Safety Evaluation Report (SER),

dated November 8, 1974, the AEC required the performance of, "... full load acceptance, rejection and load sequencing tests." The AEC also stated that the test results were to be submitted to the staff for evaluation prior to fuel loading. FPL responded to this requirement by including the following testing requirements in Amendment 38 to the Final Safety Analysis Report (FSAR):

After assembly of the sets in the field, in situ tests willbe performed

(+ y t'

~1

... Specifically, these tests willinclude (i) sequence testing simulating loss of offsite power and loss of offsite power concurrent with a LOCA; (ii) a full load acceptance test; and (iii) a load rejection test. Data will be recorded in accordance with preoperational test procedures. When available this material willbe made available to the Staff for its review.

The AEC staff stated in Supplement 1 to the SER that it had reviewed the above commitment made in Amendment 38, and found it to be acceptable.

Preoperational testing of the EDGs was completed in the spring of 1976; testing included the verification of the engines'bility to reject the single largest load without tripping. Subsequent surveillance testing of the emergency diesel generators has been to this criterion. FPL proposes to maintain the original licensing basis for load rejection testing.

Tw n -f rH rF>llL Ri Florida Power and Light proposes to include an additional testing requirement, Surveillance Requirement 4.8.1.1.2.e.6. The additional testing requirement will be the verification of EDG capability to run fully loaded for a period of twenty four hours without interruption. The EDG load for the first two hours of this test will be verified to be within a load band of 3800 to 3960 kW; the load for the remaining twenty-two hours will be verified to be within a load band of 3300 to 3500 kW. The intent of this testing is to ensure the EDG sets are capable of running in a fully loaded configuration for a moderately extended period of time without experiencing operational difficulties.

Vrific in fh ili f th, team-Driv n Auxili F w r P ]m Florida Power and Light proposes the addition of a statement to Limiting Condition for Operation (LCO) ACTION Statements 3.8.1.1.b and 3.8.1.1.c which provides for the verification of the operability of the steam-driven auxiliary feedwater pump whenever one EDG or one EDG and one offsite power source are not OPERABLE in MODES 1, 2 or 3. Appropriate additions are also proposed for the Bases Section for Specification 3.8.1.1.

4 C

Q ~ ~

Diesel Oil Stora e Tank Drainin Interval In the December, 1989 license amendment submittal, FPL proposed to drain the diesel oil storage tanks of accumulated water on a quarterly basis, as opposed to the monthly interval followed on Unit 2. The staff requested that additional information explaining the extended draining interval be provided.

To date, virtually no water has been present in fuel oil drained from the Unit 2 diesel oil storage tanks. However, replacing the diesel oil storage tank drain valves as a consequence of the more frequent exercising is a difficulttask involving the complete draining of the storage tanks. As the amount of accumulated water drained from the Unit 2 storage tanks has been negligible, FPL is of the opinion that the increase in draining intervals from monthly to quarterly willnot negatively affect the quality of the diesel generator fuel oil, nor the reliability and operability of the emergency diesel generators.

larification fT rmin 1: Am i n T m rature In conversations with the NRC staff, concerns were voiced by the staff relative to the use of the word 'ambient'n the Technical Specifications. To ensure optimal EDG reliability, oil and water temperatures should be within the limits recommended by the manufacturer prior to engine start.

Requirements for the starting of an EDG from ambient conditions should not be interpreted to mean the engine should be started with the normally operating warm-up systems not in operation, and the engine cooled to room temperature. Therefore, appropriate changes are proposed for the Bases section of the Unit 1 Technical Specifications to provide this clarification of staff intent.

V L

'v e

Ag