ML17258A610

SEP Topic VI-4,Electrical,Instrumentation & Control Aspects of Override of Containment Purge Valve Isolation,Re Ginna Nuclear Power Plant, Informal Rept

ML17258A610
Person / Time
Site:	Ginna
Issue date:	01/31/1982
From:	Udy A EG&G, INC.
To:	Scholl R Office of Nuclear Reactor Regulation
References
CON-FIN-A-6425, TASK-06-04, TASK-6-4, TASK-RR EGG-EA-5723, NUDOCS 8203080003
Download: ML17258A610 (15)

Text

~.

I<<,p 0 t

't

,/I

" <<f

, EGG-EA-5723, Rev. 2

. i JANUARY 1982

/

SYSTEMATIC EVALUATION PROGRAM TOPIC VI-4, ELECTRICAL, INSTRUMENTATION, AND CONTROL ASPECTS OF THE OVERRIDE OF CONTAINMENT PURGE VALVE ISOLATION, R. E. GINNA NUCLEAR POWER PLANT A. C. Udy U.S. Department of Energy Idaho Operations Office ~ Idaho National Engineering Laboratory

(!fZ'I

<</

l>>

~

1 << v<<

<<i / ~

r.~

.'hI ~ /<< /

h"<<~>>'

't'>> <<

"will)<<llillsl

%$ 8 It~

II+iqP.A' Cl ClRth

,r~w{

RPZFZXgq gA~

g3FSC~u

<<<<<<<<, +

grgzr L~?1K'

'>>/

~ ~~

<>, r I)

This is an informal report intended for use as a preliminary or working document Prepared for the U. S. Nuclear R'egulatory Commission.

Under DOE Contract No. DE-AC07-76ID01570 FIN No. A6425 ll H&ZKidaho

~~

lC J 4 I

n

+Q E&ZCr Idaho Inc FORM EGIIG499 IRev. IW9)

INTERIM REPORT Accession No.

Report No. EGG-EA-5723 Rev. 2 Contract Program or Project

Title:

Electrical, Instrumentation, and Control Systems Support for the Systematic Evaluation Program ( II)

Subject of this Document:

Systematic Evaluation Program Topic VI-4, Electrical, Instrumentation, and Control Aspects of the Override of Containment Purge Valve Isolation, R. ED Ginna Nuclear Power Plant Type of Document:

Informal Report Author(s):

A. C. Udy Date of Document:

January 1982 Responsible NRC Individual and NRC Office or Division:

Ray F. Scho1 1, Jr., Division of L i censing This document was prepared primarily for preliminary or internal use. It has not received full review and approval. Since there may be substantive changes, this document should not be considered final.

EG&G Idaho, Inc.

Idaho Falls, Idaho 83415 Prepared for the U.S. Nuclear Regulatory Commission Washington, D.C.

Under DOE Contract No. DE-AC07-76 IDO1670 NRC FIN No. A6425 INTERIM REPORT

'1 P

I 0

.I h

'l

't

0288J SYSTEMATIC EVALUATION PROGRAM TOPIC VI-4 ELECTRICAL, INSTRUMENTATION, AND CONTROL ASPECTS OF THE OVERRIDE OF CONTAINMENT PURGE VALVE ISOLATION R. E. GINNA NUCLEAR POWER PLANT Revision 2 Docket No. 50-244 January 1982 A. C. Udy Reliability and Statistics Branch Engineer ing Analysis Di vis ion EG&G Idaho, Inc.

1-7-82

ABSTRACT This SEP technical evaluation, for the R. E. Ginna Nuclear Power Plant, reviews the design capacity of the electrical, instrumentation, and control systems of the containment ventilation isolation system and other related engineered safety feature functions.

FOREWORD This report is supplied as part of the "Electrical, Instrumentation, and Control Systems Support for the Systematic Evaluation Program (II) being conducted for the U.S. Nuclear Regulatory Commission, Office of Nuclear Reactor Regulation, Division of Licensing by EG&G Idaho, Inc.,

Rel i ab il i ty & Stati s ties Br anch.

.The U.S. Nuclear Regulatory Commission funded the work under the authorization B&R 20-10-02-05, FIN A6425.

CONTENTS

~ 0 INTRODUCTION o ~ ~ ~ ~ ~ ~ ~ ~ t ~ ~ ~ o ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ o ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ 1 2.0 EVALUATION OF THE R. E. GINNA NUCLEAR POWER PLANT ........... ~ ~ ~ ~ 1 2.1 Review Guidelines ...... ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ t ~ ~ ~ 1 2.2 Containment Ventilation Isolation Circuits Design Description ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ 2 2.3 Containment Ventilation Isolation System Design Evaluation ............. ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ 3 2.4 Other Related Engineered Safety Feature System Circuits ... 4 3~0

SUMMARY

~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ 4 4.0 ,REFERENCES 5

E* )

Eg I

/

I I

\,

J 1

l

~ I

SYSTEMATIC EVALUATION PROGRAM TOPIC VI-4 ELECTRICAL, INSTRUMENTATION, AND CONTROL ASPECTS OF THE OVERRRIDE OF CONTAINMENT PURGE VALVE ISOLATION R. E. GINNA NUCLEAR POWER PLANT

1. 0 INTRODUCT ION Based on the information supplied by the Rochester Gas and Electric Company (RGE) this report addresses the electrical, instrumentation, and control system design aspects of the Containment Ventilation Isolation (CVI) system and other related Engineered Safety Feature (ESF) functions for the Ginna plant.

Several instances have been reported where the automatic closure of the containment ventilation or purge isolation valves would not have occurred because the safety actuation signals were manually overridden or blocked dur-ing normal pl ant operations. Lack of proper management controls, procedural inadequacies, and circuit design deficiencies contributed to these instances.

These events also brought into question the mechanical operability of the valves themselves. These events were determined by the Nuclear Regulatory Commission (NRC) to be an Abnormal Occurrence (¹78-05) and accordingly, were reported to Congress.

The NRC is now reviewing the electrical override aspects of containment purging and venting for all operating reactors. On November 28, 197), the NRC issued a letter, "Containment Purging During Normal Plant Operation" to all Boiling Water Reactor and Pressurized Water Reactor licensees, which required a re~imv of these sys)ems by the licensee. RGE responded on February 16, 1979 , March 30, 1979 , and March 17, 1980 . The Final Safe)y Analysis Report (FSAR) and Westinghouse Drawing No. 8820612, Sheet 6, also contain design informatioII reviewed for this RGE letters of March 2, 1981, November 19, 1979 and December 1, 1981 ressort.

also contain information on the control systems that was reviewed for this report.

2.0 EVALUATION OF THE R. E. GINNA NUCLEAR POWER PLANT 2.1 Review Guidelines. The in(ent of this evaluation is to determine if the actuating signals for the ESF equipment meet the following NRC criteria:

l. Guideline No. 1--In keeping with the requirements of Gen-eral Design Criteria 55 and 56, the overridea of one

a. The following definitions are given for clarity of use in this evaluation:

Override: the signal is still present, and it is blocked in order to perform a function contrary to the signal.

Reset: the signal has come and gone, and the circuit is being cleared in order to return it to the normal condition.

type of safety actuation signal (e.g., radiation) should not cause the blocking of any other type of safety actuation signal (e.g., pressure) for those valves that have no function besides containment i sol ation.

2. Guideline No. 2--Sufficient physical features (e.g.,

key lock switches) are to be provided to facilitate adequate administrative controls.

3. Guideline No. 3 A system level annunciation of the overridden status should be provided for every safety system impacted when any override is active.

Additionally, this review uses the following NRC design guidelines:

1. Guideline No. 4--Diverse signals should be provided to initiate isolation of the containment ventilation system. Specifically, containment high radiation, safety injection actuation, and containment high pres-sure (where containment high pressure is not a portion of safety injection actuation) should automatically initiate CYI.

2. Guideline No. 5--The instrumentation and control systems provided to initiate the ESF should be designed and qualified as safety grade equipment.

3. Guideline No. 6 the overriding or resetting of the ESF actuation signal should not cause any valve or damper to change position.

Guideline 6 in this review applies primarily to other related ESF systems because implementation of this guideline for containment isolation will be reviewed by the Lessons Learned Task Force, based on the recom-mendations in NUREG-0578, Section 2.1.4. When containment is'olation is not involved, consideration on a case-by-case basis of automatic valve reposi-tioning upon reset may be considered acceptable. Acceptability would be dependent upon system function, design intent, and suitable operating procedures.

2.2 Containment Ventilation Isolation Circuits Desi n Descri tion.

Automatic c osure o t e our conta>nment purge va ves, t e wo con ainment depressurization valves, and th~ two radiation monitor valves will occur on any of the following conditions :

1. High containment radiation

2. Safety injection signal (high containment pressure can initiate a safety injection signal).

RGE has indicated that these signals a~e derived from equipment "designed and constructed as a Class lE system." However, the radiation channels have not been shown to be Class lE.

These eight valves (except for the radiation monitor valves) are air-operated butterfly valves and are used. so that one is redundant for another on the same air line. Valve position lights show the actual valve posi-tion. The solenoid valves fail closed on loss of air or on loss of power.

The radiation monitor valves are air-operated diaphragm valves which have either a check valve or a manual valve for redundancy.

The logic of the containment isolation and the CVI valves is shown in reference 6. In both systems, the manual actuation is overridden along with the automatic actuation signals by operation of a reset switch (one per safeguards train). This logic has since been modified as outlined bel ow.

As a result of the short-term lessons learned, the CVI valve control circuits have been modified to provide individual resetting of each isola-tion valve. Resetting a valve after automatic closure now requires opera-tion of a key-locked reset switch and a valve reset (guarded) pushbutton switch. The valve then goes to the position the valve control circuit requires. Administrative procedure requires the valve controller to be in the closed position before resetting the valve logic.

2.3 Containment Ventilation Isolation S stem Desi n Evaluation.

Guideline requires that no signa override can prevent another safety actuation signal from functioning. Ginna has override provision in the reset switches. The circuits involved have been modified to comply with this guideline.

Guideline 2 requires that reset and override switches have physical provisions to aid in the administrative control of these switches. The reset switches are keylocked. The individual valve reset switches are guarded. This guideline is satisfied.

Guideline 3 requires system level annunciation whenever an override affects the performance of a safety system. The literal intent of this guideline is not satisfied by the Ginna design; however, individual status lights monitor the status of each individual valve override. Thus, oper-ators will be aware of the status of any overrides.

Guideline 4 requires that isolation of the CVI valves be actuated by several diverse signals. This criterion is met in that:

1. Safety injection will initiate isolation.

2. High pressure in the reactor building will initiate safety in jection.

3. High-level r adiation trips will initiate isolation.

Guideline 5 requires that isolation actuation signals be derived from safety grade equipment. The radiation monitors used to initiate isolation are not Class lE equipment. This guideline is not completely satisfied.

Guideline 6 requires that no reset of isolation logic will, of itself, automatically open the isolation valves. The isolation reset logic at the Ginna station has been modified so that no single operator action will open a path from containment to the atmosphere. Two divisions, each with identical operator actions needed to open its valve, are involved. Each division has a key locked master reset switch. Additionally, for a valve to be opened, an individual reset switch for that valve must be operated before the valve control switch can function. Thus, the intent of this guideline is satisfied.

2.4 Other Related En ineered Safet Feature S stem Circuits. Guide-line 2 requires that reset and override switches have physical provision to aid in the administrative control of these switches. There are some ESF override (preset) switches that are pushbuttons, with no physical restraint. The NRC should require that RGE install any additional pro-visions needed to conform to guideline 2.

Guideline 6 requires that no reset of isolation logic will, of itself, automatically open the isolation valves. While the main feedwater isola-tion valves were identified as not conforming with this guideline, further investigation shows that these isolation valves are interlocked so that a reset of the safety injection signal will not automatI'Ically reopen the valves when they are in the automatic mode of operation. They are operated in a non-automatic mode only below 15K of reactor power which is for about 5 hours5.787037e-5 days <br />0.00139 hours <br />8.267196e-6 weeks <br />1.9025e-6 months <br /> per startup.

No other manual overrides have been identified in the review of the material submitted for this audit.

3.0

SUMMARY

The NRC issued a letter, "Containment Purging Ouring Normal Plant Operation," which requested RGE to review purging requirements, controls, and procedures for purging at the R. E. Ginna Nuclear Power Plant.

The electrical, instrumentation, and control design aspects of the containment ventilation isolation valves for the Ginna station were evalu-ated using the design gudelines stated in Section 2.1 of this report.

These guidelines are satisfied except that the radiation channels used to initiate isolation of the CVI system are not qualified as Class lE equipment.

The NRC should require that this deficiency be corrected. Other ESF systems have deficiencies as outlined in Section 2.4. The NRC should also require that these be corrected.

~ ~ I

4. 0 REFER ENCES

1. NRC/DOR letter, A. Schwencer, to RGE and all BWR and PWR licensees, "Containment Purging During Normal Plant Operation," dated November 28, 1978.

2. RGE letter, L. D. White, Jr., to Director of Nuclear Reactor Regula-tion, U.S. NRC, "Containment Purging During Normal Plant Operations,"

January 2, 1979.

3. RGE letter, L. D. White, Jr., to Director of Nuclear Reactor Regula-tion, U.S. NRC, "Review of Safety Actuation Circuits with Overrides,"

February 16, 1979.

4. RGE letter, L. D. White, Jr., to Director of Nuclear Reactor Regula-tion, U.S. NRC, "Review of Safety Actuation Circuits with Overrides,"

A March 30, .1979.

t "H

I

5. RGE letter, L. D. White, Jr., to Director of Nuclear Reactor Regula-tion, U.S. NRC, "SEP Topic YI-4, Containment Isolation System,"

March 17, 1980.

6. Drawing, Westinghouse Logic Diagram No. 882D612, Sheet 6, Revision 7, "Safeguards Actuation Signals."

7. RGE letter, J. E. Maier to Director of Nuclear Reactor Regulation, NRC, "SEP Topic VI-4, Containment Isolation (Purge Valve Reset),"

March 2, 1981.

8. RGE letter, L. D. White to Director of Nuclear Reactor Regulation, NRC, "Discussion of Lessons Learned Short Term Requirements,"

November 19, 1979.

9. RGE letter, L. D. White to Director of Nuclear Reactor Regulation, NRC, "SEP Topic VI-4, Containment Isolation (Electrical)," December 1, 1981.

I' 4

e

Pl I

v e Cg

'V e r g 7@4 A~t ET l

o~ k>>

C' i '.

gr:

C a-'

I e

\

4 k