ML17326A277

From kanterella
Jump to navigation Jump to search
Forwards Info Re Potential Unreviewed Safety Question on Interaction Between nonsafety-grade Sys & safety-grade Sys in Response to NRC & IE Info Notice 79-22
ML17326A277
Person / Time
Site: Cook  American Electric Power icon.png
Issue date: 10/05/1979
From: Hunter R
INDIANA MICHIGAN POWER CO.
To: Harold Denton
Office of Nuclear Reactor Regulation
References
AEP:NRC:00285, AEP:NRC:285, NUDOCS 7910100447
Download: ML17326A277 (21)


Text

REGULATORY I1 RMATION DISTRIBUTION SYST (RIDS)

A ACCESSION NBR: 7910100447 DOC ~ DATE; 79/10/05 NOTARIZED: YES FACIL:50-315 Donald C ~

Cook Nuclear Power Plant< Unit ir Indiana 8,

00031 50-316 Donald C,

Cook Nuclear Power Plantr Unit 2g Indiana 8,

05 AUTHNAME AUTHOR AFFILIATION HUNTERiR.S.

Indiana 8 h1ichigan Power Co, RECIP NAME" RECIPIENT AFFILIATION DENTONEH,RE Office of Nuclear Reactor Regulation SUSJECT:

Forwards info re potential unreviewed safety question on interaction between nonsafety grade sys 8 safety grade'ys in response to NRC '790917 ltr 8

IE Info Notice 79-22

'ISTRIBUTION CODE:

A03SS COPIES RECEIYED:LTR L ENCL g SIZE:

I TITLE: Resp 9/17/79 Denton Ltr-Interact Sfty Grde Sys 8

Non Sgs N

E 0 ~

3 II R

8 OTES ~

REC IP IENT ID CODE/NAME ACTION!

5 SC ++18 ~(

INTERNAL:

11 REAC SFTY BR 14 EEB 16 OELD 3

LPDR 6

T MARSH 8

H MORRIS EXTERNAL:

17 ACRS COPIES LTTR ENCL 1

1 1

1 1

1 1

1 1

1 1

1 1

1 16 16 RECIPIENT ID CODE/NAME

'10 ENGR BR 12 I8E'5 EFLT TRT SYS 2

NRC PDR 5

M GROTENHUIS 7 J ROSENTHAL' CORE PERF BR NSIC COPIES LTTR ENCL 1

1 2

2 1

1 1

1 1

1 1

1 1

1

~ w C. > ~V+

UQ $ 'Pi f,~~7~

3R TOTAL NUMBER OF COPIES REQUIRED:

LTTR ~

ENCL

0

'I 1)

'I f

V 3

V p

a V

rt k

~',%4%

3

'E

INDIANA II MICHIGAN POWER COMPANY P.

Oa 60X 18 BOWLINV GREEN STATION NEW YORK) N. Y. 10004 October 5,

1979 AEP:NRC:00285 Donald C.

Cook Nuclear Plant Units 1

and 2

Docket,Nos.

50-315 and 50-316 License Nos.

DPR-58 and DPR-74

Reference:

IE Information Notice 79-22 Mr. Harold R. Denton, Director Office of Nuclear Reactor Regulation U.S. Nuclear Regulatory Commission Washington, D.C.

20555

Dear Mr. Denton:

4 This letter'nd its attachment respond to your letter, of September 17, 1979.which dealt with the existence of a potential un-reviewed safety question because of interactions between non-safety grade systems and safety grade sys'tems.

'e began a review 'of this concern as it applied to the Co'ok Plant just as soon as Westinghouse notified us at a meeting held on September 6,

1979 of potential i'jteractions between non-safety grade control systems and the prote'ctive functions perfbrmed by safety

- grade systems.

Such a review was necessary because the'Westinghouse postulated scenarios are too conservative and do not consider the positve aspects of,Cook Plant specific design features.

Our revi'ew has specifically addressed the non-safety grade systems

- listed in IE Information Notice 79-22.

For those systems we have not identified. any such'nteraction that could constitute a substantial safety hazard.

Our review and fin'dings are contained in the Attachment to this letter.

~

NUREG-0578 requirements for analyses of potential safety problems

. envision the type. of scenarios identifigd by Westinghouse and made the subject of IE Information Notice 79-22 (").

This fact makes the scope of 'IE Information Notice 79-22 con'sistent with the requirements of NUREG-0578.

As pa'rt of preparing our response to NUREG-0578 we are investigating the potential for similar interactions involving control systems employed at Cook Plant that are not a part of the Westinghouse investigation.

Q'3 V 9XO> 00

II

~

A I

t' I't~

C 4 ~

'I Q

~

3 f I ~

illg I

Nr. Harold R. Denton, Di'rector 2>>

AEP:NRC:00285 Based on our investi'gation and findings, as well as those of industry - wide studies, we beli'eve that no modi'fication, suspension or revocation our operating license is necessary.

Very tru y yours, RSH:em S.

Hunter Vice President cc:

R.

C. Callen G. Charnoff RE S.

Hunter R.

W. Jurgensen D. V. Shaller

-Bridgman (1)

See Section 3.2, page 17, and page A-45 of NUREG-0578.

STATE OF NEW YORK

)

)

COUNTY OF NEW YORK

)

ss.

R., S. Hunter, being duly sworn, deposes and says that he is the Vice President of Indiana 8 Michigan Power Company; that he has read the foregoing statements and knows the contents thereof; and that said contents are true to the best of his knowledge and belief.

Subscribed and sworn to before me this >

day of ~~o~,

1979.

e I

c'C Notary Public EAiHL&:iN BARRY NOTAkY ruat.rC, State of New York b:0. 41<606'i 92 Quelitred in Queens County Cortificute lifed in New York Countrl'crnnussrorr cxprrcs rnerch 30, 198'I

I

~

ATTACHMENT TO AEP:NRC:00285

RESPONSE

TO IE INFORMATION NOTICE 79-22 Donald C.

Cook Nuclear Plant Docket Nos.

50-315 lm 50-316 License Nos.

DPR-58 8

DPR-74 On September 18, 1979 llestinghouse presented to the NRC Staff a summary of an investigation which led to the identitication of four potential scenarios where the effect on control systems of adverse environments resulting from high energy line breaks could lead to consequences more limiting than those implied by the results presented in the FSAR.

Table 1 summarizes the scope of Mestinghouse's investigation.

The, seven control systems selected for the investigation include control 'systems directly addressed in the llestinghouse functional requirements.

The seven events considered included postulated High Energy Line Break (HELB) environments at various locations and for a range of break sizes.

Of the forty-nine possible combinations, fifteen scenarios, denoted by an X in Table 1, were identified as having interactions which merited further analysis.

The fifteen scenarios are bounded by consideration of the four potential interactions discussed in IE Information Notice 79-22.

Implicit in the four potential interactions identified by

>lestinghouse are "worst case" assumptions concerning the break size and

location, and the type and extent of consequential failures in control systems induced by the adverse environment.

The scenarios postulated by 'ilestinghouse did not account for plant specific design features

and, therefore, could not be directly, applied to Cook Plant.

Cook Plant specific design characteristics relevant to the four scenarios are:

1.

System layout with respect to the postulated HELB.

2.

Plant modifications made as a result of the HELB study and presented in Appendix 0 to the FSAR.

3.

Type and qualification of components utilized in the corresponding control systems.

4.

Safety grade protective functions which were assumed not to occur in the accident analysis as a conservative measure or for calculational convenience.

With respect to Items 1 and 2 above, the Cook Plant HELB outside containment study considered those effects arising from compartment differential pressures, pipe whip, jet impingement, and exposure to adverse environments which could impact systems required for safe shutdown of the Plant.

Control systems, such as the steam generator PORV's,'were included in the previous HELB study.

Where ever it had been determined that unacceptable damage might occur from a HELB, appropriate plant modifications were made.

Depending on the extent of the exposure to the HELB, protective shields or deflectors were added and suitable sealing against environmental conditions was provided.

Pressures and temperatures were calculated for compartments where HELB's had been postulated.

The portions of Appendix 0 which are relevant to the review required by IE Information Notice 79-22 are:

Sections 0.7 and 0. 11, Tables O-l', 0-19 and 0-20 and Figures 0-22, 0-26 and 0-27.

Instead of performing a plant specific analysis to address each of the potential interactions involving a feedwater line rupture, Westinghouse has referred to bounding accident analyses that have been submitted to the NRC in WCAP-9600, "Report on Small Break Accidents for Westinghouse NSSS Systems".

Section 4.2 of the WCAP provides transient results following a total loss of main and auxiliary feedwater.

Westinghouse has performed calculations that, when added to the analysis contained in WCAP-9600, demonstrate that the consequences following the control system interaction scenarios for the steam generator PORV control

system, main feedwater control system and pressurizer PORV control system are in fact bounded by the present requirements for operator action.

Presented below is the evaluation for the Cook Plant of the scenarios involving the control systems identified by Westinghouse.

Based on previous work, these evaluations and engineering judgement, we believe that the Cook Plant could withstand the failure of any high - energy line inside or outside containment and retain the capability to be safely placed in a cold shutdown condition.

1.

HAIN STEAH POWER-OPERATED RELIEF VALVE CONTROL SYSTEH Summar of Postulated Scenario I

Westinghouse has hypothesized an event scenario which>is initiated by the non-mechanistic rupture of a main feedwater line outside of reactor containment.

Hain feedwater discharge at the break location coupled with reverse blowdown from the affected steam generator results in an adverse environment in the vicinity of the break.

'The adverse environment is assumed in the Westinghouse scenario to result in the failure of the main steam power-operated relief valve control system.

Failure of the PORVs in the open position would result in the eventual depressurization of the affected steam lines and could ultimately result in loss of steam supply for the turbine driven auxiliary feedwater pump (TDAFP).

i In order for a feedttater line rupture to potentially lead to the total loss of feedwater, the following events must occur concurrently:

It (1)

The non-mechanistic rupture of the main feedwater line must occur outside of containment between the containment penetration and the containment isolation valve.

Rupture of a feedwater line at this location results in loss of auxiliary feedwater capability to the affected loop and allows the reverse blowdown of secondary fluid from the affected steam generator through the break.

Hypothetical feedwater line breaks upstream of the containment isolation valve would not result in loss of auxiliary feedwater to the affected steam generator.

The NSSS response to postulated feedwater line breaks upstream of the check valves is similar

  • ~

to that of a "Loss of Feedwater" Transient.

Conservative analyses of the "Loss of Feedwater" Transient have been performed for both Units of the Donald C.

Cook Plant.

These analyses are shown in Sections 14.1.9 (Unit No. 1) and 14.1.9 "Yellow Pages" (Unit No. 2) of the FSAR.

(2)

The feedwater line rupture would have to occur on one of the two secondary loops which supply steam to the TDAFP.

Postulated ruptures on either of the other two secondary loops could not result in the loss of steam supply to the TDAFP at the Cook Plant.

(3)

As reported in WCAP-9226 Revision 1, "Reactor Core Response to Excessive Secondary Side Steam Releases," if the highest worth control rod assembly is not assumed to be stuck out of the core, the core response to an excessive secondary side release is insignificant from a reactivity point of view.

(4)

The failure to start one of the Hotor Driven Auxiliary Feedwater Pumps (MDAFP), must occur in the train simultaneously supplying cooling water to two out of the three intact steam generators.

If the single failure is taken on the HDAFP train supplying water to the broken secondary loop, then the remaining MDAFP will supply adequate flow to two intact steam generators to assure an orderly, safe shut down of the reactor.

This'ostulated

scenario, single failure on the HDAFP train feeding the break, is similar to the "Loss of Feedwater" Transient referenced above.

(5)

The assumption made in the Westinghouse scenario that an adverse environment, would result in<the opening, and subsequent failure to reseat, of a Hain Steam PORV is highly improbable for the Cook Plant as presented below.

Thus it can be seen that the Westinghouse scenario represents the combi-nation of a series of very low probability events (items (1) through (5) above) coupled with an initiating design basis

event, Feedwater Line Break, whi ch is in and of itself a low probability event.

Overall the Westinghouse scenario seems to be a highly unlikely event.

I Cook Plant Status:

l The effects of a high energy.line break (HELB), and the resulting adverse environment, on the main steam PORV control system is not an unre-viewed safety question for the Cook Plant.

A design study was performed

- in 1973 to review potential interactions due to HELBs outside containment.

This study evaluated the potential effects of an adverse environment on control systems in the vicinity of high energy lines, including the main steam and main feedwater lines.

As' result of this study, modifications were made at the Cook Plant to assure that a high energy line rupture on one secondary loop could not lead to an adverse failure on the adjacent loop.

I Hain feedwater piping outside of containment up to and including the containment isolation valve is designed to Seismic Category I standards.

As shown in Appendix '0'o the FSAR, the feedwater isolation valves are on the order of one to two feet upstream of their respective containment penetration.

Stress calculations were performed on this and other main feedwater piping runs.

~The calculated stresses at various points along the main feedwater line are shown in Table 0-3 of Appendix '0'o the FSAR.

The maximum combined stress at the containment penetration of any feedwater line never exceeds one third (33K) of the code allowable stress.

The stress values shown in Table 0.3 of Appendix '0're for the Unit No.

1 main feedwater lines.

The orientation of and layout of the main feedwater lines in Unit No.

2 are similar to Unit No. 1.

The stresses in the Unit No.

2 feedwater lines are of similar magnitude to those reported in Table 0.3 for Unit No. l.

Rupture of almain feedrlater pipe at its containment penetration was postulated as part of the Appendix '0'tudy.

The environmental conditions in the main steami enclosure housing the affected secondary loop were calculated using the westinghouse CONTEMPT-PS and TMD Codes.

The calculate in that:

onal model used for the analysis is extremely conservative (1)

No credit waji taken for the, steam flow restrictors inside and outside containment.

These'estrictors limit the effective area of a steam line rupture at the penetration to 1.4 square feet.

The Appendix '0'nalysis conservatively assumed a break area of 4.27'Isquare feet.

The,flow restrictors outside contain-ment in the intact secondary lopps would limit backflow to the break.

(2)

The mass and energy assumed to be released into the affected main steam enclosure is based on continuous forward flow from the affected generator and ten seconds of backflow from the intact steam ',lines.

The ten second time limit assumed for the terminati'on of backflow was, based on an assumed ten second closure time of the main steam isolation valves (MSIVs).

Subse-quent to the.submittal of Appendix '0'o the Commission in September 1973, the closure time of the MSIVs has been reduced to ~5 seconds.

Thus, the backflow assumed in the Appendix

'0'nalysis is very conservative with respect to the current Cook Plant valve response times.

The environmental conditions in a main steam enclosure are more severe following steam line rupture than they would be following a feedwater line rupture.

The more limiting environmental conditions of the steam line break were used in the determination of minimum environmental qualification requirements for equipment in the enclosure required to function during and after the event.

Appendix '0'hows that the peak calculated temperature in the west main steam enclosure following a steam line break is 230oF and the peak pressure is approximately 12 psig.

The enclosure temperature decreases rapidly once steam line isolation has been completed (five seconds after the initiation of the event),

and would eventually stabilize at the ambient outside temperature and atmospheric pressure.

Operation of the PORV on a given steam line is controlled by one of the three pressure transmitters on each loop used for the "Steamline Pressure" function in the Solid-State Protection System (SSPS).

The transmitter output signal is 'processed through the SSPS and back to the Electro Pneumatic Transducer (EPT) device on the PORV.

The EPT output controls the PORV position.

The transmitters utilized for PORV control are Foxboro t1odel EllGN Gauge Pressure Transmitters, The transmitters are contained in leak tight watertight housings and are located such that a

HELB in one loop will not have an adverse impact on PORV control system equipment on the adjacent loop.

The electrical cable in the enclosure running from the transmitter to the SSPS has been protected from HELB on the adjacent 1oop.

Similar protection was provided for cable from the SSPS to the EPT device.

The cable is qualified for post LOCA service inside con-tainment.

Hence the transmitters and their associated cabling would not be affected by the adverse environment generated by the HELB in the enclosure.

The EPT devices are manufactured by the Fisher Company and are also qualified for the pressure and temperature environment for the post-I,'OCA use inside containment.

Actuation of the PORY positioner would only occur if an "action" signal were received from the EPT device.

The pressure transmitters, the associated

cable, and the EPT device are qualified for operation following a HELB, thus the possibility of e'nvironmentally induced PORV opening is eliminated.

Furthermore the duration of the temperature "spike" resulting from the feedwater line rupture is so short that the thermal capacity of the equipment coupled with the p) otective features mentioned above and distance from the break dampens the environmental condition to the point where equipment i'n the PORV control system will perform its intended function, Thus the postulated scenario is not credible at the Cook Plant.

0 2.

PRESSURIZER PORY CONTROL SYSTEM:

Summar of Postulated Scenario Westinghouse has hypothesized that following a feedwater line rupture inside containment, the pressurizer PORV control system mal-functions in such a manner that the PORYs fail in the open position.

Thus, ir, addition to a feedwater line rupture between the steam generator nozzle and the containment penetration, a break of the re-actor coolant system boundary occurs in the pressurizer vapor space.

Westinghouse has evaluated the consequences resulting from such an accident in the following manner.

Section 4.2 of WCAP-9600 de-scribes transient analyses for a postulated loss of all main and auxili;ary feedwater (no pipe rupture).

The results indicate that, in the event that the operator cannot restore auxiliary feedwater to the steam generators, the operator is required to open the pressurizer PORYs,within 2,500 seconds to maintain adequate core cooling.

The interaction scenario postulated above is similar to that presented in Section 4.2 of WCAP-9600.

The additional assumptions made are the following:

a.

A feedline rupture is assumed to occur between the steam generator nozzle and the containment penetration.

b.

Auxiliary feedwater is injected into the intact steam generators following the feedline rupture.

Conservatively assuming that, all liquid inventory in the steam generator associated with the ruptured feedline is lost via the rupture without removing any heat (i.e., liquid blowdown), the loss of heat sink due to the liquid inventory blowdown of the ruptured steam generator is more than counterbalanced by the auxiliary feedwater being injected into the intact steam generators following reactor trip.

Therefore, the results of the analyses presented in WCAP-9600, Section 4.2, which illustrated that the operator is not required to take corrective action for at least 2,500 seconds following the loss of feedwater, also apply to this scenario.

Cook Plant Status Our review of the type and qualification of the components utilized in the pressurizer PORV control system indicates that the control system will operate correctly.

Specifically, the transmitters are protection grade instruments qualified for the anticipated environment expected in-side containment as are the cables associated with the PORV control system.

The solenoids and relief valves themselves are located inside the en-closure near the top of the pressurizer.

This equipment:is protected from a 100/ humidity condition and from jet impingement.

Under a feedwater line rupture inside containment, the ice condenser would function, thus, environmental conditions in the top of the pressurizer enclosure would not be as severe as the lower containment.

The solenoids for the PORVs will function as designed up to an ambient temperature of 176oF.

The duration of the temperature "spike" resulting from a feedwater line rupture inside containment is so short that when the thermal capacity of the equipment is coupled with the protective features mentioned above and when the distance from the break is taken into account, the environmental condition will be damped to the point where the solenoids will perform their intended function.

Thus, the Westinghouse scenario is not credible at the Cook Plant.

3.

MAIN FEEDWATER CONTROL SYSTEM Summar of Postulated Scenario Westinghouse has hypothesized an event scenario initiated by a small feedwater line rupture, break area

~ 0.2 sq. ft., between the con-tainment penetration and the containment isolation valve.

The resulting adverse environment would then have an adverse effect on the main feedwater regulating valves on the intact loops.

Due to the adverse environment, the feedwater regulating valves on.all four loops would then go to the closed position in the Westinghouse scenario.

Such a

sequence of events could conceivably lead to the situation where all four steam generators would be at the low-low water level at the time of reactor trip.

For reasons cited below, the scenario postulated by Westinghouse is not possible at the Cook Plant.

Cook Plant Status The feedwater regulating valves for secondary loops 1 and 4 are located in the annulus outside of the east main steam enclosure.

The feedwater regulating valves for secondary loops 2 and 3 are located in main steam/feedwater access tunnel.

A small feedwater line rupture near the containment penetration could, at most, have an adverse effect on the feedwater regulating valves on two second'ary loops.

The electrical equipment used to control the feedwater regulating valves in the vicinity of the.subject high energy lines is, in fact, fully qualified for use in a post-LOCA environment inside containment.

Thus, the event scenario postulated by Westinghouse is not possible at the Cook Plant.

4.

SECONDARY SIDE BREAKS CAUSING MALFUNCTION OF THE AUTOMATIC ROD CONTROL SYSTEM Summar of Postulated Scenario:

Westinghouse has postulated an event scenario consisting of an intermed-;ate secondary side break occurring at a time when the automatic rod control system (ARCS) is in operation.

Westinghouse has hypothesized that the post-break containment environment could cause the ARCS to malfunction in such a manner that the control rods are stepped out of the core before a reactor trip is generated.

The increased power generation coupled with the RCS conditions produced by the excessive cooldown could then cause the DHBR to decrease below established safety limits.

Westinghouse assumes that a reactor trip will occur about two minutes after the break due to the overpower

QT trip.

The scoping calculations were done for a three loop RESAR-3S

~~ plant.

I~

Cook Plant Status:

Although this postulated event is not specifically analyzed for Cook Plant, there are numerous FSAR, reload and other analyses which are relevant to this event.

Some of these are:

Steam Line Break (SLB)

Accident Analysis, (FSAR Section 14.2.5 - Units 1 and 2; Appendix g 022.9, 212.7 and.12; XH-76-35, XH-HF-70-17(1); and generic LOTIC-III intermediate SLB analyses) and Uncontrolled Rod Withdrawal Accident Analysis (FSAR Section 14.1.2 - Units 1 and 2, XN-76-35, and'H-NF 17<IJ).

All of these analyses show that the Cook responses to these events are well within established acceptance criteria.

There are, in addition, major differences between the four loop ice condenser Cook Plant and the reference three loop RESAR 3S plant from a dynamic response viewpoint.

In particular, the containment design of the Cook Plant calls for much lower "containment high-pressure trip" setpoints (1.2 psig).

The Cook Plant has four excore detectors, all of which must fail for the above scenario to be at all applicable.

The HSSS response of a four loop plant is not the same as the three loop plant.

In order for the Westinghouse scenario to become a problem at the Cook Plant, the NSSS must remain unchecked long enough for a DNB condition to develop.

This implies both the lack of a reactor trip and the addition of a certain amount of reactivity.

The relevant automatic reactor trips at the Cook Plant are:

1.

High neutron flux 2.

High positive flux rate 3.

Overtemperature 5 T 4.

Overpower ~T 5.

Steam flour/feed flow mismatch coincident with low steam generator level 6.

Low-Low steam generator level 7.

Pressurizer Pressure-high 8.

Reactor Trip from safety injection signal generated by:

a) containment pressure high b) differential steam line pressure c) low pressurizer pressure d) steam flow in two steam lines high coincident with Tavg low-low or steam line pressure low (Unit 1) e) low steam line pressure (Unit 2)

There are a number of these trips which are independent of the reactivity insertion rate postulated.

The steam/feed mismatch coincident with low steam generator level trip, and the low-low steam generator level trip would occur during such an event.

The reactor trip from a safety injection signal generated by differential steam line pressure should also occur.

An estimate of this trip time, using the RESAR 3S results foi a 0.22 ft2 SLB and the Cook setpoints, is about 80 seconds.

The final and most significant trip is high containment pressure generating a safety injection signal and a subsequent reactor trip at 1.2 psig.

A generic ice condenser analysis for a 0.1 ft2 SLB, at 30%%d

power, shows that the high pressure setpoint is reached in 20 seconds.

The reactivity insertion rates depend on the core life and the withdrawal rate and rod worths of the control assemblies.

Considering the cooldown effect of an intermediate SLB and possible range of control rod withdrawal speeds, the possible insertion range is bounded by 6 pcm/sec.

and 40 pcm/sec.

The results of the FSAR analysis of uncontrolled rod withdrawals are as follows:

-12 Insertion Rate 80 pcm/sec (Unit 1) 70 pcm/sec (Unit 2) 2 pcm/sec Unit 1 trip in 5 sec.

on high flux.

HDNBR = 1.65 trip in 55 sec.

on overtemperature hT HDNBR = 1.4 (this is

.independent of the excore detectors)

Unit 2 trip in 5 sec.

on high flux.

HDNBR = 2.2 trip in 80 sec.

on overtemperature hT HDNBR

"-, 2.0 (this is independent of the excore detectors)

The FSAR analyses are not completely applicable to the Westinghouse scenario because the coolant conditions are different for the two events.

However, considering that the most likely reactivity inser2ion rate is around 30 pcm/sec.,

the high flux trip would occur in approximately 10 seconds.

Thus, the excore detectors would have to operate (or only 10 seconds after the RCS cooldown begins.

The excore detectors are located inside the reactor cavity in individual wells.

They are protected from a 100Ã humidity condition and against jet impingement.

The duration of the temperature "spike" resulting from a secondary line rupture inside containment is very short.

This coupled with the protective features mentioned above, will dampen the environmental condition to the point where the excore detectors will most likely perform their intended function.

,1 I

This scenario is not credible at Cook Plant since the reactor will be tl ipped on high containment pressure in approximately 20 seconds which is much less than the two minutes

assumed, by Westinghouse.

(1) XN-76-35 "Plant Transient Analysis for the Donald C.

Cook Unit 1 Nuclear Plant" XN-NF-79-17. "Plant Transient Analysis for the Donald C.

Cook Unit 1 Nuclear Power Plant".

Colltrol ys tern Accident R"actor Control

'f'ressure Control Level Control t'r s <<rizc:r F edwater Control Stean Generator Pressure Control SteaQ Vurrlp System Turbine Control Small Stearnline Rupture Large Steamlire Rupture Sr!all Feedline Rupture Large Feedline Rupture 5'.rral 1 LOCA Large LOCA Rod E)ection

~

\\ ~

'ABLE 1 PAOTECTIAll S'/STElk-CGttTRO'YSTEt< POT:".l!TI,"L ENVIf4)ttll HTAL IHTEPACTIOH X -

POTEttTIAL fttTLRACTIObt If!Ettfft:IEflfttAT COttt.f) flt;t'AAOE ACCIOCNT AttALYSIS Q -

fl0 SVCH ItlTFRACTIOtt tlECltAttISH IOEttl'IFIFfl