ML17290A244

From kanterella
Jump to navigation Jump to search
LER 93-013-00:on 930318,design Error Identified by Engineers Working in Component Safety Calssification Program.Caused by Deficiency in Original Design of Cis.Rcic Pump Isolation Valve from Suppression de-energized.W/930419 Ltr
ML17290A244
Person / Time
Site: Columbia Energy Northwest icon.png
Issue date: 04/19/1993
From: John Baker, Mackaman C
WASHINGTON PUBLIC POWER SUPPLY SYSTEM
To:
NRC OFFICE OF INFORMATION RESOURCES MANAGEMENT (IRM)
References
GO2-93-088, GO2-93-88, LER-93-013, LER-93-13, NUDOCS 9304260178
Download: ML17290A244 (10)


Text

v( Cj.;LL'I'AT+0 uuCL'.ill'xT l)LSI'.1 (Ut I'jui SY ATE.il REGULARLY INFORMATION DISTRIBUTI SYSTEM (RIDS)

ACCESSION NBR:9304260178 DOC.DATE: 93/04/19 NOTARIZED: NO DOCKET FACIL':50-397 WPPSS Nuclear Project, Unit 2, Washington Public Powe 05000397 AUTH. NAME AUTHOR AFFILIATION MACKAMAN,C.D. Washington Public Power Supply System BAKERgJ.W. Washington Public Power Supply System RECIP.NAME RECIPIENT AFFILIATION

SUBJECT:

LER 93-013-00:on 930318,design error identified by engineers working in component safety calssification program. Caused by deficiency in original design of CIS.RCIC pump isolation valve from suppression de-energized.W/930419 ltr.

DISTRIBUTION CODE: IE22T COPIES RECEIVED:LTR ( ENCL (

TITLE: 50.73/50.9 Licensee Event Report (LER), Incident Rpt, etc.

SIZE: (0 NOTES:

RECI'PIENT COPIES RECIPIENT COP1ES ID CODE/NAME LTTR ENCL ID CODE/NAME LTTR ENCL ONDD LA 1 1 ONDD PD 1 1 CLIFFORD,J 1 1 INTERNAL: ACNW 2 2 2 2 AEOD/DOA 1 1 ACRS'EOD/DSP/TPAB 1 1' AEOD/ROAB/DSP .2 2 NRR/DE/EELB 1 NRR/DE/EMEB 1 . 1 NRR/DORS/OEAB 1 1 NRR/DRCH/HHFB 1 '1 NRR/DRCH/HICB 1 1 NRR/DRCH/HOLB 1 1 NRR/DRIL/RPEB 1 1 NRR/DRSS/PRPB 2 2 NRR/~SSA SPLB 1 1 NRR/DSSA/SRXB 1 1 CRgG L 02 1 1 RES/DSIR/EIB 1 1 RGN5 FILE 01 1 1 EXTERNAL'G&G BRYCEP J ~ H 2 2 L ST LOBBY WARD 1 1 NRC PDR 1 1 NSIC MURPHY,G.A 1 1 NSIC POORE,W. 1 1 NUDOCS FULL TXT 1 1

'g 'I O:pi.DU( I. iv.ic'j'j2! CQg">'<i~

,>z:~;>

(=y." qi" "06 i j<- S FOR DOCUi~<:"<TS .

~ TI>

Cj'Oib'-

~

"'jy:~"'"" YO'yi"-'" "j<

2"'j',

'"- -'")i D<1C<s,.',!4 j CO, ~, .c,i ':

>i:-D'ULL TEXT CONVERSION REQUIRED TOTAL NUMBER OF COPIES REQUIRED: LTTR 32 ENCL 32

ii WASHINGTON PUBLIC POWER SUPPLY SYSTEM

~

P.O. Box 968 ~ 3000 George 11'ashington Way ~ Richland, washington 99352 April 19, 1993

. G02-93-088 Docket No. 50-397 Document Control Desk U.S. Nuclear'egulatory Commission Washington, D.C. 20555

Subject:

NUCLEAR PLANT WNP-2, OPERATING LICENSE NPF-21 LICENSEE EVENT REPORT NO.93-013 Transmitted herewith is Licensee Event Report No.93-013 for the WNP-2 Plant. This report is submitted in response to the report requirements of 10CFR50.73 and discusses the items of reportability, corrective action taken, and action taken to preclude recurrence.

Sincerely,

. W. Baker WNP-2 Plant Manager (Mail Drop 927M)

JWB/CDM/cgeh Enclosure CC: Mr. J. B. Martin, NRC - Region V Mr. R. Barr, NRC Resident Inspector (Mail Drop 901A, 2 Copies)

INPO Records Center - Atlanta, GA Mr. D. L. Williams, BPA (Mail Drop 399)

+PAL 9304260i78 9304i9 PDR ADOCK 05000397 8 PDR

LIGENsEE EVEOREPQRT (LER)

ACILITY NAME (I) DOCKET NUHB R (2) PAGE (3)

Washin ton Nuclear Plant - Unit 2 0 5 0 0 0 3 9 7 I OF ITLE (4)

LOSS OF CONTAINMENT INTEGRITY DUE TO A REACTOR CORE ISOLATION COOLING SYSTEM SINGLE FAILURE CRITERIA VIOLATION EVENT DATE 5 LER NUHBER REPORT DATE (7 OTHER FACILITIES INVOLVED 8 SEQUENTIAL EVI 5 ION MOHTH DAY YEAR FACILITY NAHES DCKET NUMBERS(5)

HONTH DAY YEAR YEAR .

'UMBER UMBER 0 0 0 0 3 I 8 9 3 9 3 0 I 3 0 0 0 4 I 9 9 3 000 PERATING HIS REPORT 15 SUBHITTED PURSUANT TO THE REQUIREMENTS OF 10 CFR 5: (Ch eck one or more of the following) (11)

ODE (9)

DYER LEVEL 0.402(b) 20.405(C) 50.73(a)(2)(iv) 77.71(b)

(10) 0.405(a)(i)(i) 50.36(c)(1) 50.73(a)(2)(v) 73.73(c) 0.405(a)(1)(ii) 50.36(c)(2) 50.73(a)(2)(vii) THER (Specify in Abstract 0.405(a)(1)(iii) 0.73(a)(2)(i) 50.73(a)(2)(viii)(A) elow and in Text, NRC 0.405(a)(1)(iv) 50.73(a)(2)(ii) 50.73(a)(2)(viii)(B) orm 366A) 0.405(a)(1)(v) 50.73(a)(2)(iii) 50,73(a)(2)(x)

LICEHSEE CONTACT FOR THIS LER (12)

TELEPHOHE HUMBER REA CODE C. D. Mackaman, Licensing Engineer -

0 9 7 7 4 4 5 1 COMPLETE OHE LINE FOR EACH COMPOHEHT FAILURE DESCRIBED IN THIS REPORT (13)

CAUSE SYSTEH COMPONENT HAHUFACTURER EPORTABLE CAUSE SYSTEH COMPOHEHT MANUFACTURER REPORTABLE 0 NPRDS TO HPRDS SUPPLEMENTAL REPORT EXPECTED (14) EXPECTED SUBMISSIOH MONTH DAY YEAR ATE (15)

YES (If yes, conplete EXPECTED SUBHISSION DATE) HO rllACI I I er On March 18, 1993, a design error was identified by Supply System engineers working in the Component Safety Classification Program. The Reactor Core Isolation Cooling (RCIC) system pump suction line from the suppression pool did not meet single failure design criteria. A failure of Division 1 DC power to the RCIC system would cause the motor operators for the Pump Suction Isolation Valve (RCIC-V-31) and the Auxiliary Cooling Water Supply Valve (RCIC-V-46) to fail in an as-is open position. This could result in an unisolable release of suppression pool water to the Reactor Building. This potential release path violates commitments made to General Design Criterion (GDC) 56 for isolation of Primary Containment. The failure to comply with GDC 56 resulted in Primary Containment being inoperable.

The root cause for this event was a deficiency in the original design of the Containment Isolation system.

Corrective actions for this event include: (1) The RCIC pump suction isolation valve from the suppression pool (RCIC-V-31) was de-energized and tagged closed to restore Primary Containment operability; (2) the RCIC system was declared inoperable; (3) emergency relief from Technical Specification 3.7.3 was requested and approved to allow continued operation; (4) perform an Engineering evaluation for a permanent resolution; (5) implement the Engineering evaluation recommendation(s); and (6) perform an Engineering review of containment penetrations that rely on single valve isolation.

LICENSEE EVENT REPORTER)

TEXT CONTINUATlON AGILITY NAME (1) DOCKET NUHBER (2) LER NUMBER (8) AGE (3) umber ev. No.

Washington Nuclear Plant - Unit 2 0 0 3 9 7 0 5 0 3 13 0 2 F 8 ITLE (4)

LOSS OF CONTAINMENT INTEGRITY DUE TO A REACTOR CORE ISOLATION COOLING SYSTEM SINGLE FAILURE CRITERIA VIOLATION Plan n ii n Power Level - 100%

Plant Mode - 1 (Power)

Event Descri tion On March 18, 1993, a design error was identified by Supply System engineers working in the Component Safety Classification Program. The Design Requirement Document Program and the Component Safety Classification Program are ongoing design basis reconstitution programs funded through Fiscal Year 1995 and 1997, respectively. These programs provide a detailed review of WNP-2 design as a part of their methodology. The Component Safety Classification Program utilizes an Electric Power Research Institute (EPRI) Guideline based methodology to establish and document the technical basis for the safety classification of each safety-related component. The Design Requirement Document Program provides a documented reference to system level design requirements and functions.

A routine review of the safety-related containment portions of the Reactor Core Isolation Cooling (RCIC) system by Component Safety Classification engineers found that the containment isolation design for the RCIC pump (RCIC-P-1) suction line from the suppression pool did not meet single failure design criteria.

A failure of Division 1 DC power to the RCIC system would cause the motor operators for the Pump Suction Isolation Valve (RCIC-V-31) and the Auxiliary Cooling Water Supply Valve (RCIC-V-46) to fail in an as-is open position. This single failure, combined with a Loss Of Coolant Accident (LOCA), results in an unisolable suppression pool water flow path from Primary Containment to the Reactor Building (see Figure 1). This potential release path violates commitments made to General Design Criterion (GDC) 56 for isolation of the RCIC-P-1 suction line containment penetration. The failure to comply with GDC 56 resulted in Primary Containment being inoperable.

Imm 'v A in Immediate Corrective actions for this event include:

1. On Marcli 19, 1993, RCIC-V-31 was closed, and its motor operator was de-energized by tagging open the circuit breaker, to restore Primary Containment operability. This action removed the capability of RCIC to transfer RCIC-P-1 suction automatically to the suppression pool, although pump suction was still available from the Condensate Storage Tanks (CSTs). Since automatic transfer capability is a condition of operability as defined in Technical Specification 3.7.3, the RCIC system was declared inoperable at 1530 hours0.0177 days <br />0.425 hours <br />0.00253 weeks <br />5.82165e-4 months <br /> on March 19, 1993, and the associated Limiting Condition for Operation (LCO) was entered.

. LICENSEE EVENT REPORTER)

TEXT CONTINUATION AGILITY NAME (i) OOCKET NUMBER (2) LER NUMBER (8) AGE (3) ear umber ev. No.

Washington Nuclear Plant - Unit 2 3 13 0 3 F 8 ITLE (4)

LOSS OF CONTAINMENT INTEGRITY DUE TO A REACTOR CORE ISOLATION COOLING SYSTEM SINGLE FAILURE CRITERIA VIOLATION

2. On March 26, 1993, the Supply System formally requested emergency relief from Technical Specification 3.7.3 to allow continued power operation until the 1993 Refueling Outage (R-8).
3. On April 1, 1993, the Supply System formally requested an emergency amendment to Technical Specification 3.7.3 to temporarily restore RCIC operability until the beginning of R-8.
4. At 1500 hours0.0174 days <br />0.417 hours <br />0.00248 weeks <br />5.7075e-4 months <br /> on April 2, 1993, WNP-2 received a Notice of Enforcement Discretion allowing continued power operation beyond the 14 day LCO of Technical Specification 3.7.3.
5. The RCIC system was declared operable at 2232 hours0.0258 days <br />0.62 hours <br />0.00369 weeks <br />8.49276e-4 months <br /> on April 9, 1993, based upon approval of the Technical Specification amendment request.

Fu her Ev 1 i n n rrectiv Action A. '~hhh

1. In accordance with 10CFR50.72(b)(1)(ii)(B), this event was reported to the NRC Operations Center via the Emergency Notification System (ENS) at 1413 hours0.0164 days <br />0.393 hours <br />0.00234 weeks <br />5.376465e-4 months <br /> on March 19, 1993, as "Any event or condition during operation that... results in the nuclear power plant being . ~ .

In a condition that is outside the design basis of the plant .... "

2. This event is reportable under 10CFR50,73(a)(2)(i)(B) as "Any operation or condition prohibited by Technical Specifications," and 10CFR50.73(a)(2)(ii)(B) as "Any event or condition... that resulted in the nuclear power plant being... In a condition that was outside the design basis of theplant ...."
3. A Loss Of Coolant Accident (LOCA) event scenario that could lead to the release of suppression pool water to the Reactor Building is as follows (see Figure 1):

(1) The plant is at power with RCIC-P-1 suction in its normal alignment to the Condensate Storage Tank (CST).

(2) A Small Break Loss Of. Coolant Accident (SBLOCA) event occurs causing RCIC to initiate, or a Large Break Loss Of Coolant Accident (LBLOCA) event occurs causing RCIC-V-46 to open on low Reactor Pressure Vessel (RPV) water level.

(3) During the event, RCIC-P-1 suction transfers from the CST to the suppression pool on low CST water level. This automatic suction transfer opens RCIC-V-31. For the LBLOCA event, the transfer could occur as a result of a seismically induced failure of the nonsafety-related CST.

LICENSEE EVENT REPORIQFR)

TEXT CONTINUATION FACILITY NAHE (I) OOCKET NUHBER (2) LER NUHBER (8) AGE (3)

Year umber ev. No.

Washington Nuclear Plant - Unit 2 0 5 0 0 0 3 9 7 3 13 0 4 F 8 ITLE (4)

LOSS OF CONTAINMENT INTEGRITY DUE TO A REACTOR CORE ISOLATION COOLING SYSTEM SINGLE FAILURE CRITERIA VIOLATION (4) After the pump suction transfer, a loss of Division 1 DC power to the RCIC system occurs.

(5) The DC power failure causes a loss of RCIC control and power to the RCIC-V-31 and RCIC-V-46 motor operators resulting in both valves remaining open.

(6) The Lube Oil Cooler Pressure Control Valve (RCIC-PCV-15) will go full open attempting to maintain the downstream cooler pressure at approximately 50 psig.

(7) Suppression pool water will then drain through RCIC-V-31, RCIC-P-1, RCIC-V-46, RCIC-PCV-15, the lube oil cooler and the barometric condenser to the vacuum tank (see Figure 1). The elevation difference between the suppression pool water level and the vacuum tank will produce a static head sufficient to lift the vacuum tank relief valve at its setpoint of 6 psig.

(8) The suppression pool water will flow through the vacuum tank relief valve at approximately 5.5 gpm to the Equipment Drain (Radioactive) (EDR) system. The EDR system will then transfer the water to the Reactor Building equipment drain sump, where it will be collected. Since the sump is automatically isolated during a LOCA, it will fill and eventually overflow, flooding connectin'g rooms.

4. GDC 56 (10CFR50, Appendix A) requires each line that connects directly to the containment atmosphere and penetrates primary reactor containment to be provided with containment isolation valves. There must be one locked closed or automatic isolation valve inside containment and one locked closed or automatic isolation valve outside containment, or be demonstrated acceptable on some other defined basis. WNP-2 met containment isolation provisions for the RCIC-P-1 suction line containment penetration in accordance with prerequisites defined in Standard Review Plan (SRP) 6.2.4,Section II, Paragraph 6.e. Specifically, the provisions are; (1) System reliability must be greater with one isolation valve (instead of two) in the line; (2) The system must be closed outside containment and a single active failure can be accommodated with only one isolation valve; (3) This closed system must be protected from missiles; (4) The closed system must be designed to Seismic Category I, Safety Class 2 requirements, and a minimum temperature and pressure rating at least equal to that for the containment; and (5) The piping between the isolation valve and containment must be enclosed in the leak-tight housing or conservative design of the piping and valve, conforming to SRP 3.6.2, to preclude a breach of piping integrity.

LICENSEE EVENT REPORTER)

TEXT CONTINUATlON AGILITY NAME (I) OOCKET NUMBER (2) LER NUMBER (8) AGE (3) ear umber ev. No.

Washington Nuclear Plant - Unit 2 0 5 0 0 0 3 9 7 3 1 3 0 5 F 8 ITLE (4)

LOSS OF CONTAINMENT INTEGRITY DUE TO A REACTOR CORE ISOLATION COOLING, SYSTEM SINGLE

, FAILURE CRITERIA VIOLATION The WNP-2 Final Safety Analysis Report (FSAR), Section 6.2.4.3.2.2.2.1, "HPCS, LPCS, RCIC, and RHR Suction Lines," provides justification for this exception to GDC 56 on the basis that RCIC system reliability is greater with only one isolation valve. Furthermore, the RCIC-P-1 suction piping is considered an. extension of containment, and is designed to the same quality standards as containment. Although, SRP 6.2.4 and the FSAR provide acceptable basis for having only one isolation valve, a postulated single. failure event causing RCIC-V-31 and RCIC-V-46 to simultaneously, fail in an as-is open position was not addressed in the WNP-2 =

FSAR. Consequently, Primary Containment was outside the plant design basis, and technically inoperable during Operational Conditions 1, 2 and 3. Technical Specification 3.6.1.1 was violated when Primary Containment integrity was not maintained and became inoperable.

B. ~R~auue The root cause for this event was a deficiency in the original design of the Containment Isolation system. The single failure criterion for the postulated event scenario described above was not considered in the safety analysis.

A contributing cause was the failure to establish a corrective action for a similar event in February 1988, to look generically for similar concerns.

C. Fu her rrec ive Acti n

1. No further corrective action associated with original contractor related design errors and deficiencies are being considered. Due to the detailed nature of the Design Requirement Document Program and Component Safety Classification Program engineering reviews; design errors and omissions of the type reported in this LER could be reasonably expected to be found.

Because these programs are ongoing, there is the likelihood that additional reportable events will result. These events may be reported as revisions to this LER.-

2. Perform an Engineering evaluation for a permanent resolution to ensure the RCIC-P-1 suction line meets single failure design criteria. This action to be completed by May 24, 1993.
3. Implement the RCIC-P-1 suction line single failure Engineering evaluation recommendation(s) before startup from the R-8 refueling outage, or obtain Technical Specification-3.7.3 relief to allow startup.
4. Perform an Engineering review of containment penetrations that rely on single valve isolation to determine if single failure related unisolable flow paths from containment exist. This action to be completed by September 30, 1993.

LICENSEE EVENT REPORTER)

TEXT-CONTINUATION ACILITY NAHE (i) DOCKET NUHBER (2) LER NUMBER (8) AGE (3) ear umber ev. No.

Washington Nuclear P'lant - Unit 2 0 5 0 0 0 3 9 7 3 13 0 6 F 8 ITLE (4)

LOSS OF CONTAINMENT INTEGRITY DUE TO A REACTOR CORE ISOLATION COOLING SYSTEM SINGLE FAILURE CRITERIA VIOLATION S~fi i~

The FSAR, Section 6.3.3, Emergency Core Cooling System (ECCS) Performance Evaluation, shows that a SBLOCA event does not lead to fuel damage. Consequently, the postulated DC power failure event scenario described above would'only release reactor coolant activation and corrosion products to the suppression pool water and Reactor Building equipment drain sump. This limited release of radionuclides would be treated by the Standby Gas Treatment (SGT) system before release to the environment.

According to FSAR, Section 15.6.5.5.1.1, Fission Product Release from Fuel, a postulated LBLOCA and Division 1 DC power failure event scenario would result in significant fission product release from the fuel.

According to FSAR, Section 15.6.5.5.1.2, Fission Product Transport to the Environment, some of the release would be to the suppression pool. While the potential release to Secondary Containment would be treated by the SGT system, the fission product transport to the environment could have safety significance.

A Division 1 DC power failure event scenario involving fuel damage would only result in a limited release of radionuclides to Secondary Containment. The postulated flow path to the Reactor Building equipment drain sump would be isolated by Annunciator Response Procedure PPM 4.601.A4, 601.A4 Annunciator Panel Alarms, and Emergency Operating Procedure (EOP) PPM 5,3.1, Secondary Containment Control.

This would result in action to close RCIC-V-31 {by remote manual operation) when the RCIC Pump Room water level reached six inches (the maximum safe operating value). The airborne release would also be treated by the SGT system before release to the environment.

imil r Events On February 19, 1988, LER 88-002 reported an original plant design error that caused the RCIC-P-1 suction line not to meet containment isolation and single failure criteria. In February 1988, the Supply System had not implemented a formal Root Cause Analysis Program, as it was still in the formative stages.

Consequently, no corrective action was identified in the LER or the associated Nonconformance Report (288-0022) that would have prevented a similar occurrence.

The Supply System implemented a Root Cause Analysis Program in.December 1988, in accordance with Plant Administrative Procedure PPM 1.3.48, Root Cause Analysis, that addresses similar generic concerns to prevent recurrence.

LICENSEE EVENT REPORTER)

TEXT- CONTINUATION AGILITY NAME (I) OOCKET NUMBER (2) LER NUMBER (8) AGE (3) ear umber ev. No.

Washington Nuclear Plant - Unit 2 3 9 0 5 0 0 0 7 3 013 0 7 OF 8 ITLE (4)

LOSS OF CONTAINMENT INTEGRITY DUE TO A REACTOR CORE ISOLATION COOLING SYSTEM SINGLE FAILURE CRITERIA VIOLATION E~ff f Text R f ren E~E

/~/em grimm)o~nen Reactor Core Isolation System (RCIC) BN RCIC System Suction Line BN PSP Condensate Storage Tank (CST) KA TK RCIC Pump 1 (RCIC-P-1) BN P Suppression Pool Suction Valve (RCIC-V-31) BN ISV Auxiliary Cooling Water Supply Valve BN ISV (RCIC-V-46)

RCIC Motor Operated Valves BN 20 Primary Containment NH Secondary Containment NH Reactor Building NG Pressure Control Valve (RCIC-PCV-15) BN PCV RCIC Lube Oil Cooler BN CLR RCIC Barometric Condenser BN CDU Equipment Drain (Radioactive) (EDR) System WK Equipment Drain Sump WK TK DC Power EJ JX Standby Gas Treatment (SGT) System BH

\

LICENSEE EVENT REPORT~ER)

'EXT-CONTINUATIO~

AGILITY NAME (I) DOCKET NUMBER (2) LER NUMBER (8) AGE (3) ear umber ev. No.

Washington Nuclear Plant - Unit 2 5 0 0 0 3 9 7 0

x 3 I 3 0 8 F 8 ITLE (4)

LOSS OF CONTAINMENT INTEGRITY DUE TO A REACTOR CORE ISOLATION COOLING SYSTEM SINGLE FAILURE CRITERIA VIOLATION Is o5 x

0 CST l25 vdc l25 vdC la Tot at oa 5l s5 I 2

RCIC Ttvctna 6 Pstd P I Seats/Cratns (ty>I Vec Tank Exhaust to Suooresston Pool Lear Path I25/255 vdc RCIC V.31 and -SO I25/250 vdc tve closed avant no!teal plant op!rouen Figure I