Text

Proposed Tech Specs,Implementing Recommendations in Generic Ltr 84-15, Proposed Staff Actions to Improve & Maintain Diesel Generator Reliability
	ML18032A348
Person / Time
Site:	Browns Ferry
Issue date:	05/29/1987
From:	; TENNESSEE VALLEY AUTHORITY
To:	;
Shared Package
ML18032A347	List: ML18032A346; ML18032A348;
References
	GL-84-15, NUDOCS 8706100403
	Download: ML18032A348 (137)
	v • d • e

ENCLOSURE 1 PROPOSED TECHNICAL SPECIFICATIONS REVISIONS BROGANS FERRY NUCLEAR PLANT UNITS 1, 2, AND 3 (TVA BFN TS 231) 8><>+100@03 ~pgpq PDR ADOCK 05000259 P

PDR

II

LIST OF TABLES (Cont'd) labia 4.2.E Title

~Pa e Me.

Minimum Test and Calibration Frequency for Drywell Leak Detection Instrumentation.

3.2/4.2-53 4.2.F Minimum Test and Calibration Frequency for Surveillance Instrumentation 3.2/4.2-54 4.2.G Surveillance Requirements for Control Room Isolation Instrumentation.

3.2/4.2-56 4.2.H Minimum Test and Calibration Frequency for Flood Protection Instrumentation 3.2/4.2-57 4.2eJ Seismic Monitoring Instrument Surveillance Requirements 3.2/4.2-58 4.2eK 3.5-1 3.5.I 3.7.A 3.7.B 3.7.C 3.7.D Radioactive Gaseous Effluent Instrumentation S

~ '1 e urvexllance Minimum RHRSW and EECW Pump Assignment MAPLHGR Versus Average Planar Exposure Primary Containment Isolation Valves Testable Penetrations with Double 0-Ring Seals Testable Penetrations with Testable Bellows.

Air Tested Isolation Valves.

3.2/4.2-62 3.5/4.5-11 3.5/4.5-21 3.7/4.7-25 3.7/4.7-32 3.7/4.7-33 3.7/4.7-34 3.7.E Primary Containment Isolation Valves which Terminate below the Suppression Pool Water evel.

L 3.7/4.7-37 3.7.F Primary Containment Isolation Vales Located in Water Sealed Seismic Class 1 Lines 3.7.H 4.9.A Testable Electrical Penetrations Diesel Generator Reliability 3.11.A Fire Protection System Hydraulic Requirements.

6.8.A Minimum Shift Crew Requirements.

4.9.A.4.C Voltage Relay Setpoints/Diesel Generator Start 3.7/4.7-38 3.7/4.7-39 3.9/4.9-16 3.9/4.9-18 3.11/4.11-10 6.0-19 BFN Unit 1 vii

1 M

W U

I I li

~

t a

t' t

w

~ )

wp

( I a

~

W I

IU'.,'f i

i) >J II '

~ MW M

I I

W r

~

ti

~

M UI4.,'U

'I

>)

t

' ', g'Iw>>t

)

~

a

~

M 'h

"') "

I Wwt'>

II u )

tr t

M )

It i) t

~

fit)

M

.U f, W

~

"a' w t

~ I

"'" )0

)'g Pt" r'

W It

~

I til tiwl

~

) ')

Mh)tw) '

U> ".

h

".a

) f U>"

r ill "I,)

')

UI ) "4))r T

I>l a) 'l" M

~ a il gr)

UI

~

w

3.5/4.5 CORE AND CONTAINMENT COOLING SYSTEMS LIMITING CONDITIONS FOR OPERATION 3.5.A Core S ra S stem (CSS)

SURVEILLANCE REQUIREMENTS 4.5.A Core S ra S stem CSS) 4.5.A.l.d (Cont'd) 105 psi differential pressure between the reactor vessel and the primary containment.

2. If one CSS loop is INOPERABLE, the reactor may remain in operation for a period not to exceed 7 days providing all active components in the other CSS loop and the RHR system (LPCI mode) and the diesel generators are OPERABLE.

3. If Specification 3.5.A.1 or Specification 3.5.A.2 cannot be met, the reactor shall be shutdown in the Cold Condition within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .

2.

e.

Check Valve Once/

Operating Cycle When it is determined that one core spray loop is INOPERABLE, at a time when operability is

reguired, the other core spray loop and the RHRS (LPCI mode) shall be demonstrated to be OPERABLE immediately.

The OPERABLE core spray loop shall be demonstrated to be OPERABLE daily thereafter.

4.

When the reactor vessel pressure is atmospheric and irradiated fuel is in the reactor vessel at least one core spray loop with one OPERABLE pump and associated diesel generator shall be OPERABLE, except with the reactor vessel head removed as specified in 3.5.A.5 or prior to reactor startup as specified in 3.5.A.1.

BFN Unit 1 3.5/4.5-2

li, I I

4)(,H 0 I

00'I H

I 4,

fi 4

'I I

I 0

I' I

4)

I,)

I li

'J I

4 I

I I'I I

H Y

I )'I 0 I

, I,',4 4

I Ji 4 I 4

JH, Hk W I' I I II 41

3.5 4.5 CORE AND CONTAINMENT COOLING SYSTEMS LIMITING CONDITIONS FOR OPERATION 3.5.B Residual Heat Removal S stem (RRRS)

(LPCI and Containment Cooling)

SURVEILLANCE REQUIREMENT 4.5.B. Residual Heat Removal S stem (RHRS)

(LPCI and Containment Cooling)

3. If one RHR pump (LPCI mode) is INOPERABLE, the reactor may remain in operation for a period not to exceed 7 days provided the remaining RHR pumps (LPCI mode) and both access paths of the RHRS (LPCI mode) and the CSS and the diesel generators remain OPERABLE.

4. If any 2

RHR pumps (LPCI mode) become INOPERABLE, the reactor shall be placed in the Cold Shutdown condition within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .

5. If one RHR pump (containment cooling mode) or associated heat exchanger is INOPERABLE, the reactor may remain in operation for a period not to exceed 30 days provided the remaining RHR pumps (containment cooling mode) and associated heat exchangers and diesel generators and all access paths of the RHRS (containment cooling mode) are OPERABLE.

3 ~

5.

When it is determined that one RHR pump (LPCI mode) is INOPERABLE at a time when operability is required, the remaining RHR pumps (LPCI mode) and active components in both access paths of the RHRS (LPCI mode) and the CSS shall be demonstrated to be OPERABLE immediately and daily thereafter, No additional surveillance required.

When it is determined that one RHR pump (containment cooling mode) or associated heat exchanger is INOPERABLE at a time when operability is required, the remaining RHR pumps (containment cooling mode),

the associated heat exchangers and all active components in the access paths of the RHRS (containment cooling mode) shall be demonstrated to be OPERABLE immediately and weekly thereafter until the INOPERABLE RHR pump (containment cooling mode) and associated heat exchanger is returned to normal service.

BFN Unit l 3.5/4.5-5

t%

N

3.5 4.5 CORE AND CONTAINMENT COOLING SYSTEMS LIMITING CONDITION FOR OPERATION SURVEILLANCE REQUIREMENTS 3.5 B.

Residual Heat Removal S stem (RHRS)

(LPCI and Containment Cooling) 4.5 B.

Residual Heat Removal S stem (RHRS)

(LPCI and Containment Cooling)

6. If two RHR pumps (containment cooling mode) or associated heat exchangers are INOPERABLE, the reactor may remain in operation for a period not to exceed 7 days provided the remaining RHR pumps (containment cooling mode),

the associated heat exchangers, diesel generators, and all access paths of the RHRS (containment cooling mode) are OPERABLE.

6.

When it is determined that two RHR pumps (containment cooling mode) or associated heat exchangers are INOPERABLE at a time when operability is required, the remaining RHR pumps (containment cooling mode),

the associated heat exchangers, and all active components in the access paths of the RHRS (containment cooling mode) shall be demonstrated to be OPERABLE immediately and daily thereafter until at least three RHR pumps (containment cooling mode) and associated heat exchangers are returned to normal service.

7.

If two access paths of the RHRS (containment cooling mode) for each phase of the mode (drywell sprays, suppression chamber

sprays, and suppression pool cooling) are not OPERABLE, the unit may remain in operation for a period not to exceed 7 days provided at least one path for each phase of the mode remains OPERABLE.

7

~

When it is determined that one or more access paths of the RHRS (containment cooling mode) are INOPERABLE when access is required, all active components in the access paths of the RHRS (containment cooling mode) shall be demonstrated to be OPERABLE immediately and all active components in the access paths which are not backed by a second OPERABLE access path for the same phase of the mode (drywell sprays, suppression chamber sprays and suppression pool cooling) shall be demonstrated to be OPERABLE daily thereafter until the second path is returned to normal service.

BFN Unit 1 3.5/4.5-6

t

<<I 1 4

~(

II M

I

3.5/4 5

CORE AND CONTAINMENT COOLING SYSTEMS LIMITING CONDITIONS FOR OPERATION SURVEILLANCE REQUIREMENTS 3.5.B Residual Heat Removal S stem (RHRS)

(LPCI and Containment Cooling) 4.5.B Residual Heat Removal S stem (RHRS)

(LPCI and Containment Cooling,)

12. If one RHR pump or associated heat exchanger located on the unit cross-connection in the adjacent unit is INOPERABLE for any reason (including valve inoperability, pipe break, etc.),

the reactor may remain in operation for a period not to exceed 30 days provided the remaining RHR pump and associated diesel generator are OPERABLE.

12.

When it is determined that one RHR pump or associated heat exchanger located on the unit cross-connection in the adjacent unit is INOPERABLE at a time when operability is required, the remaining RHR pump and associated heat exchanger on the unit cross-connection shall be demonstrated to be OPERABLE immediately and every 15 days thereafter until the INOPERABLE pump and associated heat exchanger are returned to normal service.

13. If RHR cross-connection flow or heat removal capability is lost, the unit may remain in operation for a period not to exceed 10 days unless such capability is restored.

13.

No additional surveillance required.

14.

All recirculation pump discharge valves shall be OPERABLE prior to reactor startup (or closed if permitted elsewhere in these specifications).

14.

All recirculation pump discharge valves shall be tested for operability during any period of reactor Cold Shutdown exceeding 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months , if operability tests have not been performed during the preceding 31 days+

BFN Unit 1 3.5/4.5-8

II h

h

. ~

I K

3.5/4.5 CORE AND CONTAINMENT COOLING SYSTEMS LIMITING CONDITIONS FOR OPERATION SURVEILLANCE REQUIREMENTS

.3.5.C RHR Service Water and Emer enc E ui ment Coolin Water S stems (EECWs)

(Continued) 4.5.C RHR Service Water and Emer enc E ui ment Coolin Water S stems (EECWs)

(Continued) 2.

During reactor power operation, RHRSW pumps must be OPERABLE and assigned to service as indicated in Table 3.5-1 for the specified time limits.

3.

During power operation, both RHRSW pumps Dl and D2 normally or alternately assigned to the RHR heat exchanger header supplying the standby coolant supply connection must be OPERABLE except as specified in 3.5.C.4 and 3.5.C.5 below.

2 ~

a ~ lf no more than two RHRSW pumps are INOPERABLE, increased surveillance is not required.

b.

When three RHRSW pumps are INOPERABLE, the remaining pumps and associated essential control valves shall be operated daily.

c.

When four RHRSW pumps are INOPERABLE, the remaining pumps and associated essential control valves shall be operated daily.

3. Routine surveillance for these pumps is specified in 4.5.C.1.

BFN Unit 1 3.5/4.5-10

II Il 1q l

I" I

\\

ll II il N

lt r

lt

3.5/4.5 CORE AND CONTAINMENT COOLING SYSTEMS LIMITING CONDITIONS FOR OPERATION SVRVEILLANCE REQUIREMENTS 3.5.C RHR Service Water and Emer enc E ui ment Coolin Water S stems EECWs)

(Continued) 4.

One of the Dl or D2 RHRSW pumps assigned to the RHR heat exchanger supplying the standby coolant supply connection may be INOPERABLE for a period not to exceed 30 days provided the OPERABLE pump is aligned to supply the RHR heat exchanger header and the associated diesel generator and essential control valves are OPERABLE.

4.5.C RHR Service Water and Emer enc E ui ment Coolin Water S stems (EECWs)

Continued) 4.

When it is determined that one of the RHRSW pumps supplying standby coolant is INOPERABLE at a time when operability is

required, the OPERABLE RHRSW pump on the same header and the RHR heat exchanger header and associated essential control valves shall be demonstrated to be OPERABLE immediately and every 15 days thereafter.

5.

The standby coolant supply capability may be INOPERABLE for a period not to exceed 10 days.

6. If Specifications 3.5.C.2 through 3.5.C.S are not

met, an orderly shutdown shall be initiated and the unit placed in the Cold Shutdown condition within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .

7.

There shall be at least 2

RHRSW pumps, associated with the selected RHR pumps, aligned for RHR heat exchanger service for each reactor vessel containing irradiated fuel.

BFN Vnit 1 3.5/4.5-12

gq Il k

tl A

II W

C J

3.9/4.9<

AUXILIARYELECTRICAL SYSTEM LIMITING CONDITIONS FOR OPERATION SURVEILLANCE REQUIREMENTS 3.9 Auxiliar Electrical S stem 4.9 Auxiliar Electrical S stem A licabilit A licabilit Applies to all the auxiliary electrical power system.

Applies to the periodic testing requirements of the auxiliary electrical system.

O~b'ective O~t'ective To assure an adequate supply of electrical power for operation of those systems required for safety.

Verify the operability of the auxiliary electrical system.

S ecification S ecification A.

Auxiliar Electrical E ui ment 1.

The reactor shall not be started up (made critical) from the cold condition unless the following are satisfied:

a.

Diesel generators A,

B, C,

and D OPERABLE.

b.

Requirements 3.9.A.3 through 3.9.Ae6 are met.

c.

At least two of the following offsite power sources are available:

(1) The 500-kV system is available to the units 1 and 2 shut-down boards through the unit 1 station-service transformer TUSS/1B with no credit taken for the two 500-kV Trinity lines. If the unit/2 station-service transformer is the second choice, a minimum of two 500-kV lines must be available.

A.

Auxiliar Electrical S stem 1.

Diesel Generators a.

Each diesel generator shall be manually started and loaded to demonstrate operational readiness in accordance with the frequency specified in Table 4.9.A on a staggered test basis.

The test shall continue for at least a one hour period at 75% of rated load or greater and the operation of the diesel fuel oil transfer pumps shall be demonstrated.

Also, the diesel generator starting air compressor shall be checked for opera-tion and its ability to recharge air receivers.

The diesel generator fast starts (10 seconds) from standby conditions shall be performed once per 184 days in these surveillance tests.

All other engine starts for the purpose of this test may be preceeded by an engine idle start.

BFQ Unxt 1 3.9/4.9-1

3. 9/4. 9 AUXILIARYELECTRICAL SYSTEM LIMITING CONDITIONS FOR OPERATION SURVEILLANCE REQUIREMENTS 3.9.A. Auxiliar Electrical E ui ment 4.9.A. Auxiliar Electrical S stem 3.9.A.l.c. (Cont'd) 4.9.A.1.

(Cont'd)

Additional reporting requirements due to failures are noted in Table 4.9.A.

All diesel generator starts shall be logged.

(2) The 500-kV system is available to the units 1

and 2 shutdown boards through the unit 2 station-service transformer TUSS 2B with no credit taken for the two 500-kV Trinity lines.

If the unit 1 station-service transformer is the second choice, a minimum of two 500-kV lines must be available.

(3) The Trinity 161-kV line is available to the units 1

and 2 shutdown boards through both common station-service transformers.

NOTES FOR (3):

(a) If unit 3 is claiming the Trinity line as an offsite source, see unit 3 technical specifications, section 3.9.A.l.c.2.

(b) If unit 1 is in cold

shutdown, only one common station-service transformer is required.

b.

Once per operating

cycle, a test will be conducted simulating a

loss of offsite power and similar conditions that would exist with the presence of an actual safety-injection signal to demonstrate the following:

(1) Deenergization of the emergency buses and load shedding from the emergency buses.

(2) The diesel starts from ambient condition on the auto-start signal, energizes the emergency buses with permanently connected

loads, energizes the auto-connected emergency loads through load sequencing, and operates for greater than or equal to five minutes while its generator is loaded with the emergency loads+

BFN Unit 1 3.9/4.9-2

r I" $

pf P

I I

il t

1 I

H k

3.9/4.9 AUXILIARYELECTRICAL SYSTEM LIMITING CONDITIONS FOR OPERATION SURVEILLANCE REQUIREMENTS 3.9.A.

Auxiliar Electrical E ui ment 3.9.A.l.c.

(Cont'd) 4.9.A.

Auxiliar Electrical S stem 4.9.A.l.b (Cont'd)

(4) The Athens 161-kV line is available to the units 1

and 2 shutdown boards through a common station-service transformer when unit 1 is in Cold Shutdown and unit 3 is not claiming the Athens line as an offsite source.

NOTE FOR (3)

AND (4)'ith no cooling tower pumps or fans running, a cooling tower transformer may be substituted for a common station-service transformer.

(3)

On diesel generator breaker trip, the loads are shed from the emergency buses and the diesel restarts on the autostart signal, the emergency buses are energized with permanently connected

loads, the autoconnected emergency loads are energized through load sequencing, and the diesel operates for greater than or equal to five minutes while its generator is loaded with the emergency loads.

c ~

Once a month the quantity of diesel fuel available shall be logged.

d.

Each diesel generator shall be given an annual inspection in accordance with instructions based on the manufacturer's recommendations.

3.9/4.9-3 e.

Once a month a sample of diesel fuel shall be checked for quality.

The quality shall be within acceptable limits specified in Table 1 of the latest revision to ASTM D975 and logged.

' r ql I

EA I

lb I'

gf I

K Jl

3. 9/4. 9 AUXILIARYELECTRICAL SYSTEM LIMITING CONDITIONS FOR OPERATION SURVEILLANCE REQUIREMENTS 3.9.B.

0 eration with Ino erable

~Eui ment 4.9.B.

0 eration with Ino erable EcCEui ment Whenever the reactor is in Startup mode or Run mode and not in a cold condition, the availability of electric power shall be as specified in 3.9.A except as specified herein.

1.

From and after the date that only one offsite power source is available, reactor operation is permissible for 7 days.

1.

When only one offsite power source is OPERABLE, all units 1 and 2 diesel generators and associated boards must be demonstrated to be OPERABLE within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months and daily thereafter.

2.

From and after the date that the 4-kV bus tie board becomes INOPERABLE, reactor operation is permissible indefinitely provided one of the required offsite power sources is not supplied from the 161-kV system through the bus tie board.

2.

When a reguired offsite power source is unavailable to unit 1 because the 4-kV bus tie board or a start bus is INOPERABLE, all unit 1 and 2 diesel generators and associated boards shall be demonstrated OPERABLE within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months and daily thereafter.

The remaining offsite source and associated buses shall be checked to be energized daily, BFN Unit 1 3.9/4.9-8

e I

lf I

II I'C I

rt 1I

'I

<'t

3.9/4.9 AUXILIARYELECTRICAL SYSTEM LIMITING CONDITIONS FOR OPERATION SURVEILLANCE REQUIREMENTS 3.9.D.

0 eration With Ino erable E~ui ment' 4.9.B.

0 eration With Ino erable EcCEui ment 3.

When one of the units 1

and 2 diesel generator is INOPERABLE, continued reactor operation is permissible during the succeeding 7 days, provided that 2 offsite power sources are available as specified in 3.9.A.l.c and all of the CS, RHR (LPCI and containment cooling)

systems, and the remaining three units 1 and 2 diesel generators are OPERABLE.

If this requirement cannot be met, an orderly shutdown shall be initiated and the reactor shall be shut down and in the cold condition within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .

3 ~

When one of the units 1 and 2 diesel generators is found to be INOPERABLE, all of the CS, RHR (LPCI and contain-ment cooling) systems and the remaining diesel, generators and associated boards shall be demonstrated to be OPERABLE within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months and daily thereafter.

When one units 1 and 2

4-kV shutdown boaxd is INOPERABLE, continued reactor opexation is permissible for a period of 5 days provided that 2 offsite powex sources are available as specified in 3.9.A.l.c and the xemaining 4-kV shutdown boards and associated diesel generators, CS, RHR (LPCI and containment cooling)

systems, and all 480-V emergency power boards are OPERABLE. If this requirement cannot be

met, an orderly shutdown shall be initiated and the reactor shall be shut down and in the cold condition within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .

4.

When one 4-kV shutdown board is found to be INOPERABLE, all remaining 4-kV shutdown boards and associated diesel generators, CS, and RHR (LPCI and containment cooling) systems supplied by the remaining 4-kV shutdown boards shall be demonstrated to be operable within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months and daily thereafter.

BFN Unit 1 3.9/4.9-9

I, V'

3.9/4.9 AUXILIARYELECTRICAL SYSTEM LIMITING CONDITIONS FOR OPERATION 3.9.B.

0 eration With Ino erable

~Eui ment SURVEILLANCE REQUIREMENTS 4.9.B, 0 eration With Ino erable

~Eui ment S.

When one of the shutdown buses is INOPERABLE, reactor operation is permissible for a period of 7 days.

S.

When a shutdown bus is found to be INOPERABLE, all 1 and 2 diesel generators shall be proven OPERABLE within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months and daily thereafter.

6.

When one of the 480-V diesel auxiliary boards becomes INOPERABLE, reactor operation is permissible for a period of 5 days.

6.

When one units 1

and 2 diesel auxiliary board is found to be INOPERABLE, the remaining diesel auxiliary board and each unit 1 and 2 diesel generator shall be proven OPERABLE within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months and daily thereafter.

7.

From and after the date that one of the three 250-V unit batteries and/or its associated battery board is found to be INOPERABLE for any

reason, continued reactor operation is permissible during the succeeding 7 days.

Except for routine surveillance

testing, NRC shall be notified within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months of the situation, the precautions to be taken during this period, and the plans to return the failed component to an OPERABLE state.

BFN Unit 1 3.9/4.9-10

f k

t l

'4 N

AUXILIARYELECTRICAL SYSTENS TABLE 4.9.A Diesel Generator Reliability No. of Failures in last 20 valid tests+

No. of Failures in last 100 valid tests+

Reliabilit Actions

>2

> 3

>5 6

Test at least once per 31 days Test at least once per 7 days~

Within 30 days, prepare a

report for NRC audit, in accordance with Section 6.7.3.E.

Declare the diesel generator INOPERABLE and perform a requalification test For the affected diesel generator pursuant to the attachment to this table.

Criteria for determining number of failures and number of valid tests shall be in accordance with Regulatory Position C.2.e of Regulatory Guide l. 108, Revision 1, August 1977, except that the number of tests and failures are determined on a per diesel generator basis.

For the purposes of this test schedule, only valid tests conducted after the Operating License issuance date shall be included in the computation of the "last 20 valid tests".

Entry into this test schedule shall be made at the 31 day test frequency.

~his test frequency shall be maintained until seven consecutive failure free demands have been performed and the number of failures in the last 20 valid demands has been reduced on one or less.

BFN Unit 1

ATTACHMENT TO TABLE 4.9.A DIESEL GENERATOR REQUALIFICATION PROGRAM (1)

Perform seven consecutive successful demands without a failure within 30 days of diesel generator being restored to operable status and fourteen consecutive successful demands without a failure within 75 days of diesel generator of being restored to OPERABLE status.

(2) If a failure occurs during the first seven tests in the requalification test program, perform seven successful demands without an additional failure within 30 days of diesel generator of being restored to OPERABLE status and fourteen consecutive successful demands without a failure within 75 days of being restored to OPERABLE status.

(3) If a failure occurs during the second seven tests (tests 8 through 14) of (1) above, perform fourteen consecutive successful demands without an additional failure within 75 days of the failure which occurred during the requalification testing.

(4)

Following the second failure during the requalification test program, be in at least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and COLD SHUTDOWN within the following'30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months .

(5)

During, requalification testing the diesel generator should not be tested more frequently than at 24-hour intervals.

After a diesel generator has been successfully requalified, subsequent repeated requalification tests will not be required for that diesel generator under the following conditions:

(a)

The number of failures in the last 20 valid demands is less than 5.

(b)

The number of failures in the last 100 valid demands is less than 11.

(c)

In the event that, following successful requalification of a diesel generator, the number of failures is still in excess of the remedial action criteria (a and/or b above) the following exception will be allowed until the diesel generator is no longer in violation of the remedial action criteria (a and/or b above).

Requalification testing will not be required provided that after each valid demand the number of failures in the last 20 and/or 100 valid demands has not increased.

Once the diesel generator is no longer in violation of the remedial action criteria above the provisions of those criteria alone will prevail.

BFN Unit 1 3.9/4.9-17

4

VOLTAGE RELAY SETPOINTS/OIESEL GENERATOR START l.

4-kV Shutdown Boards Trip Setpoint:

Allowable Values:

Trip Range:

Reset Setpoint:

Allowable Values:

Reset Range:

0 volts with a 1.5-second time delay

~.1 second 1.4 to.l.6 seconds 2870-V AX oF 2870-V 2813-V to 2927-V Start diesel generators on loss of oFfsite power.

lhubu:m1in<1F.

2.

4-kV Shutdown Boards Trip Setpoint:

3920 Second level undervoltage sensing Allowable Values:

3900-3940 relays - start diesel generator Reset Setpoint:

Reset at S 1.5X above trip value on degraded voltage.

3.

4-kV Shutdown Boards (Timers shown for 4-kV shutdown board A:

4-kV shutdown boards B, C, and O.

similar, except for change oF sufFix.)

2-211-1A 2-211-2A 2-211-3A 2-211-4A Setpoint lmuuuhl 0.3 g lOX 4.0 ~ lOX 6.9 g lOX 1.3 g 10K Critical Time N/A N/A 8.2 1.5 Auxiliary timers for second level undervoltage sensing relays.

The setpoint ranges speciFied assure that the operating times will be below the critical times specified.

These ranges are based on timer repeatability of z 5X as speciFied by the manuFacturer.

BFN-Unit 1

r.

3.9 BASES The objective of this specification is to assure an adequate source of electrical power to operate facilities to cool the plant during shutdown and to operate the engineered safeguards following an accident.

There are three sources of alternating current electrical energy available,

namely, the 161-kV transmission

system, the 500-kV transmission

system, and the diesel generators.

The unit station-service transformer B for unit 1 or the unit station-service transformer B for unit 2 provide noninterruptible sources of offsite power from the 500-kV transmission system to the units 1 and 2 shutdown boards.

Auxiliary power can also be supplied from the 161-kV transmission system through the common station-service transformers or through the cooling tower transformers by way of the bus tie board.

The 4-kV bus tie board may remain out of service indefinitely provided one of the required offsite power sources is not supplied from the 161-kV system through the bus tie board.

The minimum fuel oil requirement of 103,300 gallons is sufficient for seven days of full load operation of three diesels and is conservatively based on availability of a replenishment supply.

The degraded voltage sensing relays provide a start signal to the diesel generators in the event that a deteriorated voltage condition exists on a 4-kV shutdown board.

This starting signal is independent of the starting signal generated by the complete loss of voltage relays and will continue to function and start the diesel generators on complete loss of voltage should the loss of voltage relays become inoperable.

The 15-day inoperable time limit specified when one of the three phase-to-phase degraded voltage relays is inoperable is justified based on the two-out-of-three permissive logic scheme provided with these relays.

A 4-kV shutdown board is allowed to be out of operation for a brief period to allow for maintenance and testing, provided all remaining 4-kV shutdown boards and associated diesel generators, CS,

RHR, (LPCI and containment cooling) systems supplied by the remaining 4-kV shutdown

boards, and all emergency 480-V power boards are operable.

There are eight 250-V dc battery systems, each of which consists of a battery, battery charger, and distribution equipment.

Three of these systems provide power for unit control functions, operative power for unit motor loads, and alternative drive power for a 115-V ac unit-preferred mg set.

One 250-V dc system provides power for common plant and transmission system control functions, drive power for a 115-V ac plant-preferred mg set, and emergency drive power for certain unit large motor loads.

The four remaining systems deliver control power to the 4,160-V shutdown boards.

BFN Unit 1 3.9/4.9-19

A r

r,'

I

3.9 BASES (Cont'd)

Each 250-V dc shutdown board control power supply can receive power from its own battery, battery charger, or from a spare charger.

The chargers are powered from normal plant auxiliary power or from the standby diesel-driven generator system.

Zero resistance short circuits between the control power supply and the shutdown board are cleared by fuses located in the respective control power supply.

Each power supply is located in the reactor building near the shutdown board it supplies.

Each battery is located in its own independently ventilated battery room.

The 250-V dc system is so arranged, and the batteries sized so that the loss of any one unit battery will not prevent the safe shutdown and cooldown of all three units in the event of the loss of offsite power and a design basis accident in any one unit.

Loss of control power to any engineered safeguard control circuits is annunciated in the main control room of the unit affected.

The loss of one 250-V shutdown board battery affects normal control power only for the 4,160-V shutdown board which it supplies.

The station battery supplies loads that are not essential for safe shutdown and cooldown of the nuclear system.

This battery was not considered in the accident load calculations.

There are two 480-Volt ac RMOV boards that contain mg sets in their feeder lines.

These 480-Volt ac RMOV boards have an automatic transfer from their normal to alternate power source (480-Volt ac shutdown boards).

The mg sets act as electrical isolators to prevent a fault from propagating between electrical divisions due to an automatic transfer.

The 480-Volt ac RMOV boards involved provide motive power to valves associated with the LPCI mode of the RHR system.

Having an mg set out of service reduces the assurance that full RHR (LPCI) capacity will be available when required.

Since sufficient equipment is available to maintain the minimum complement required for RHR (LPCI) operation, a 7-day servicing period is justified.

Having two mg sets out of service can considerably reduce equipment availability; therefore, the affected unit shall be placed in Cold Shutdown within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .

The offsite power source requirements are based on the capacity of the respective lines.

The Trinity line is limited to supplying two operating units because of the load limitations of CSST's A and B.

The Athens line is limited to supplying one operating unit because of the load limitations of the Athens line.

The limiting conditions are intended to prevent the 161-kV system from supplying more than two units in the event of a single failure in the offsite power system.

BFN Unit 1 3.9/4.9-20

if H

t

4.9 BASES The monthly test of the diesel generators is primarily to check for failures and deterioration in the system since last use.

The diesels will be loaded to at least 75 percent of rated power while engine and generator temperatures are stabilized (about one hour).

The minimum 75-percent load will prevent soot formation in the cylinders and injection nozzles.

Operation up to an equilibrium temperature ensures that there is no overheating problem.

The tests also provide an engine and generator operating history to be compared with subsequent engine-generator test data to identify and to correct any mechanical or electrical deficiency before it can result in a system failure.

The test during refueling outages is more comprehensive, including procedures that are most effectively conducted at that time.

These include automatic actuation and functional capability tests to verify that the generators can start and be ready to assume load in 10 seconds.

The annual inspection will detect any signs of wear long before failure.

Battery maintenance with regard to the floating charge, equalizing

charge, and electrolyte level will be based on the manufacturer's instruction and sound maintenance'ractices.

In addition, written records will be maintained of the battery performance.

The plant batteries will deteriorate with time but precipitous failure is unlikely.

The type of surveillance called for in this specification is that which has been demonstrated through experience to provide an indication of a cell becoming irregular or unserviceable long before it becomes a failure.

The equalizing charge, as recommended by the manufacturer, is vital to maintaining the ampere-hour capacity of the battery, and will be applied as recommended.

The testing of the logic systems will verify the ability of the logic systems to bring the auxiliary.electrical system to running standby readiness with the presence of an accident signal from any reactor or an undervoltage signal on the 4-kV shutdown boards.

The periodic simulation of accident signals in conjunction with diesel-generator voltage available signals will confirm the ability of the 480-V load shedding logic system to sequentially shed and restart 480-V loads if an accident signal were present and diesel-generator voltage was the only source of electrical power.

BFN Unit 1 3.9/4.9-21

4.9 B'ASES (Cont'd)

REFERENCES 1.

Normal Auxiliary Power System (BFNP FSAR Subsection 8.4) 2.

Standby AC Power Supply and Distribution (BFNP FSAR Subsection 8.5) 3.

250-Volt DC Power Supply and Distribution (BFNP FSAR Subsection 8.6) 4.

Memorandum from Gene M. Wilhoite to H. J.

Green dated December 4,

1981 (LOO 811208 664) and memorandum from C. E. Minn to H. J.

Green dated January 10, 1983 (G02 830112 002)

BFN Unit 1 3.9/4.9-22

E.

Diesel Generator Reliability Improvement Program Report shall be submitted within 30 days of meeting failure criteria in Table 4.9.A.

As a minimum, the Reliability Improvement Program report for NRC audit shall include:

a.

A summary of all tests (valid and invalid) that occurred within the time period over which the last 20/100 valid tests were performed.

b.

Analysis of failures and determination of root causes of failures.

ce Evaluation of each of the recommendations of NUREG/CR-0660, "Enhancement of Onsite Emergency Diesel Generator Reliability in Operating Reactors," with respect to their application to the plant.

d.

Identification of all actions taken or to be taken to (1) Correct the root causes of failures defined in b above and (2) Achieve a general improvement of diesel generator reliability.

e.

A supplemental report shall be prepared for an NRC audit within 30 days after each subsequent failure during a valid demand, for so long as the affected diesel generator unit continues to violate the criteria (3/20 or 6/100) for the reliability improvement program remedial action.

The supplemental report need only update the failure/demand history for the affected diesel generator unit since the last report for that diesel generator.

The supplemental report shall also present an analysis of the failure(s) with a root cause determination, if possible, and shall delineate any further procedural, hardware or operational changes to be incorporated into the site diesel generator improvement program and the schedule for implementation of those changes.

BFN Unit 1 6.0-17a

l

LIST OF TABLES (Cont'd) 1itble 4.2.E Title Minimum Test and Calibration Frequency for Drywell Leak Detection Instrumentation.

~Pa e Mo.

3.2/4.2-53 4.2.F Minimum Test and Calibration Frequency for Surveillance Instrumentation 3.2/4.2-54 4.2.G Surveillance Requirements for Control Room Isolation Instrumentation.

3.2/4.2-56 4.2.H Minimum Test and Calibration Frequency for Flood Protection Instrumentation 3.2/4.2-57 4.2.J Seismic Monitoring Instrument Surveillance Requirements 3.2/4.2-58 4.2aK 3.5-1 3.5.I 3.7.A 3.7.B 3.7.C 3.7.D Radioactive Gaseous Effluent Instrumentation Surveillance Minimum RHRSW and EECW Pump Assignment MAPLHGR Versus Average Planar Exposure Primary Containment Isolation Valves Testable Penetrations with Double 0-Ring Seals Testable Penetrations with Testable Bellows.

Air Tested Isolation Valves.

3.2/4.2-62 3.5/4.5-11 3.5/4.5-21 3.7/4.7-25 3.7/4.7-32 3.7/4.7-33 3.7/4.7-34 3.7.E Primary Containment Isolation Valves which Terminate below the Suppression Pool Water evel.

L 3.7/4.7-37 3.7.F Primary Containment Isolation Vales Located in Water Sealed Seismic Class 1 Lines 3.7.H 4.9.A Testable Electrical Penetrations Diesel Generator Reliability 3.11.A 6.8.A Fire Protection System Hydraulic Requirements.

Minimum Shift Crew Requirements.

4.9.A.4.C Voltage Relay Setpoints/Diesel Generator Start 3.7/4.7-38 3.7/4.7-39 3.9/4.9-16 3.9/4.9-18 3.11/4.11-10 6.0-19 BFN Unit 2 vii

P Ih

'I 'j 4

R ~

Pl K

~

I e'>>

'l 3",K K

'I I <<II I

I, 4

I 4

>>P II I

IM I<<./

Il

~

'P I I

)

derv" v

P P

4 M

I 4

>>M

)M M

4

'I f

R

$ )

I P

<> NN I

l ll N

N,4 IN

"'CN

)) )

If ) ) ~

>>,>>N)

I'I N

Ifp lf "I

,I>>),f y I

V NI

3.944.9 AUXILIARYELECTRICAL SYSTEM LIMITING CONDITIONS FOR OPERATION SURVEILLANCE REQUIREMENTS 3.9.B.

0 eration With Ino erable

~Eui ment 4.9.B.

0 eration With Ino erable EcCEui ment 3.

When one of the units 1

and 2 diesel generator is INOPERABLE, continued reactor operation is permissible during the succeeding 7 days, provided that 2 offsite power sources are available as specified in 3.9.A.l.c and all of the CS, RHR (LPCI and containment cooling)

systems, and the remaining three units 1 and 2 diesel generators are OPERABLE.
If this requirement cannot be met, an orderly shutdown shall be initiated and the reactor shall be shut down and in the cold condition within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .
3 ~
When one of the units 1 and 2 diesel generators is found to be INOPERABLE, all of the CS, RHR (LPCI and contain-ment cooling) systems and the remaining diesel generators and associated boards shall be demonstrated to be OPERABLE within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months and daily thereafter.
4 ~
When one units 1 and 2
4-kV shutdown board is INOPERABLE, continued reactor operation is permissible for a period of 5 days provided that 2 offsite power sources are available as specified in 3.9.A.l.c and the remaining 4-kV shutdown boards and associated diesel generators, CS, RHR (LPCI and containment cooling)
systems, and all 480-V emergency power boards are OPERABLE. If this requirement cannot be
met, an orderly shutdown shall be initiated and the reactor shall be shut down and in the cold condition within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .
4, When one 4-kV shutdown board is found to be INOPERABLE, all remaining 4-kV shutdown boards and associated diesel generators, CS, and RHR (LPCI and containment cooling) systems supplied by the remaining 4-kV shutdown boards shall be demonstrated to be operable within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months and daily thereafter.
BFN Unit 2 3.9/4.9-9
W II
J
3.9 4.9 AUXILIARYELECTRICAL SYSTEM LIMITING CONDITIONS FOR OPERATION 3.9.B.
0 eration With Ino erable
~Eui ment 5.
When one of the shutdown buses is INOPERABLE, reactor operation is permissible for a period of 7 days.
SURVEILLANCE REQUIREMENTS 4.9.B.
0 eration With Ino erable
~Eui ment 5.
When a shutdown bus is found to be INOPERABLE, all 1 and 2 diesel generators shall be proven OPERABLE within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months and daily thereafter.
6.
When one of the 480-V diesel auxiliary boards becomes INOPERABLE, reactor operation is permissible for a period of 5 days.
6.
When one units 1
and 2 diesel auxiliary board is found to be INOPERABLE, the remaining diesel auxiliary board and each unit 1 and 2 diesel generator shall be proven OPERABLE within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months and daily thereafter.
7.
From and after the date that one of the three 250-V unit batteries and/or its associated battery board is found to be INOPERABLE for any
reason, continued reactor operation is permissible during the succeeding 7 days.
Except for routine surveillance
testing, NRC shall be notified within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months of the situation, the precautions to be taken during this period, and the plans to return the failed component to an OPERABLE state.
BFN Unit 2 3.9/4.9-10
h I
J g Jl I
F,
"\\
All '
AUXILIARYELECTRICAL SYSTEMS TABLE 4.9.A Diesel Generator Reliability No. of Failures in last 20 valid tests+
No. of Failures in last 100 valid tests+
Reliabilit Actions
> 3
>5 6
Test at least once per 31 days Test at least once per 7 days~
Within 30 days, prepare a
report for NRC audit, in accordance with Sect>on 6.7.3.E.
Declare the diesel generator INOPERABLE and perform a requalification test for the affected diesel generator pursuant to the attachment to this table.
+ Criteria for determining number of failures and number of valid tests shall be in accordance with Regulatory Position C.2.e of Regulatory Guide l. 108, Revision 1, August 1977, except that the number of tests and failures are determined on a per diesel generator bas>s.
For the purposes of this test schedule, only valid tests conducted after the Operating License issuance date shall be included in the computation of the "last 20 valid tests".
Entry into this test schedule shall be made at the 31 day test frequency.
~his test frequency shall be maintained until seven consecutive failure free demands have been performed and the number of failures in the last 20 valid demands has been reduced on one or less.
BFN Unit 2
'I
ATTACHMENT TO TABLE 4.9.A DIESEL GENERATOR REQUALIFICATION PROGRAM (1)
Perform seven consecutive successful demands without a failure within 30 days of diesel generator being restored to operable status and fourteen consecutive successful demands without a failure within 75 days of diesel generator of being restored to OPERABLE status.
(2) If a failure occurs during the first seven tests in the requalification test program, perform seven successful demands without an additional failure within 30 days of diesel generator of being restored to OPERABLE status and fourteen consecutive successful demands without a failure within 75 days of being restored to OPERABLE status.
(3) If a failure occurs during the second seven tests (tests 8 through 14) of (1) above, perform fourteen consecutive successful demands without an additional failure within 75 days of the failure which occurred during the requalification testing.
(4)
Following the second failure during the requalification test program, be in at least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months .
(5)
During requalification testing the diesel generator should not be tested more frequently than at 24-hour intervals.
After a diesel generator has been successfully requalified, subsequent repeated requalification tests will not be required for that diesel generator under the following conditions:
(a)
The number of failures in the last 20 valid demands is less than 5.
(b)
The number of failures in the last 100 valid demands is less than 11.
(c)
In the event that, following successful requalification of a diesel generator, the number of failures is still in excess of the remedial action criteria (a and/or b above) the following exception will be allowed until the diesel generator is no longer in violation of the remedial action criteria (a and/or b above).
Requalification testing will not be required provided that after each valid demand the number of failures in the last 20 and/or 100 valid demands has not increased.
Once the diesel generator is no longer in violation of the remedial action criteria above the provisions of those criteria alone will prevail.
BFN Unit 2 3.9/4.9-17
1
~ "'
p
TABLE 4.9.A.4.C Rela Location Tri Level Settin Remarks l.
4-kV Shutdown Boards Trip Setpoint:
Allowable Values:
Trip Range:
Reset Setpoint:
Allowable Values:
Reset Range:
0 volts with a 1.5-second time delay
+.1 second T.4 to 1.6 seconds 2870-V
+K of 2870-V 2813-V to 2927-V Start diesel generators on loss of offsite power.
dander vol Sn e 2.
4-kV Shutdown Boards Trip Setpoint:
3920 Second level undervoltage sensing Allowable Values:
3900-3940 relays start diesel generator Reset Setpoint:
Reset at < 1.5'l above trip value on degraded voltage.
I CO 3.
4-kV Shutdown Boards (Timers shown for 4-kV. shutdown board A.
4-kV shutdown boards 8, C, and 0, similar, except for change of suffix.)
Timer 2-211-1A 2-211-2A 2-211-3A 2-211-4A Setpoint
~seconds 0.3 + l(C 4.0 + ltd 6.9 + llew 1.3 + 10K Critical Time N/A N/A 8.2 1.5 Auxiliary timers for second level undervoltage sensing relays.
The setpoint ranges specified assure that the operating times will be below the critical times specified.
These ranges are based on timer repeatability of + 5% as specified by the manufacturer.
BFN-Unit 2
lh h
h E'we hf I
hI I
I a
I a
Cl V
a
3,9 BASES 0
The objective of this specification is to assure an adequate source of electrical power to operate facilities to cool the plant during shutdown and to operate the engineered safeguards following an accident.
There are three sources of alternating current electrical energy available,
namely, the 161-kV transmission
system, the 500-kV transmission
system, and the diesel generators.
The unit station-service transformer B for unit 1 or the unit station-service transformer B for unit 2 provide noninterruptible sources of offsite power from the 500-kV transmission system to the units 1 and 2 shutdown boards.
Auxiliary power can also be supplied from the 161-kV transmission system through the common station-service transformers or through the cooling tower transformers by way of the bus tie board.
The 4-kV bus tie board may remain out of service indefinitely provided one of the required offsite power sources is not supplied from the 161-kV system through the bus tie board.
The minimum fuel oil requirement of 103,300 gallons is sufficient for seven days of full load operation of three diesels and is conservatively based on availability of a replenishment supply.
The degraded voltage sensing relays provide a start signal to the diesel generators in the event that a deteriorated voltage condition exists on a 4-kV shutdown board.
This starting signal is independent of the starting signal generated by the complete loss of voltage relays and will continue to function and start the diesel generators on complete loss of voltage should the loss of voltage relays become inoperable, The 15-day inoperable time limit specified when one of the three phase-to-phase degraded voltage relays is inoperable is justified based on the two-out-of-three permissive logic scheme provided with these relays.
A 4-kV shutdown board is allowed to be out of operation for a brief period to allow for maintenance and testing, provided all remaining 4-kV shutdown boards and associated diesel generators, CS,
RHR, (LPCI and containment cooling) systems supplied by the remaining 4-kV shutdown
boards, and all emergency 480-V power boards are operable.
There are eight 250-V dc battery systems, each of which consists of a battery, battery charger, and distribution equipment.
Three of these systems provide power for unit control functions, operative power for unit motor loads, and alternative drive power for a 115-V ac unit-preferred mg set.
One 250-V dc system provides power for common plant and transmission system control functions, drive power for a 115-V ac plant-preferred mg set, and emergency drive power for certain unit large motor loads.
The four remaining systems deliver control power to the 4,160-V shutdown boards, BFN Unit 2 3.9/4.9-19
N il
~l
3.9 BASES (Cont'd) e Each 250-V dc shutdown board control power supply can receive power from its own battery, battery charger, or from a spare charger.
The chargers are powered from normal plant auxiliary power or from the standby diesel-driven generator system.
Zero resistance short circuits between the control power supply and the shutdown board are cleared by fuses located in the respective control power supply.
Each power supply is located in the reactor building near the shutdown board it supplies.
Each battery is located in its own independently ventilated battery room.
The 250-V dc system is so arranged, and the batteries sized so, that the loss of any one unit battery will not prevent the safe shutdown and cooldown of all three units in the event of the loss of offsite power and a design basis accident in any one unit.
Loss of control power to any engineered safeguard control circuits is annunciated in the main control room of the unit affected.
The loss of one 250-V shutdown board battery affects normal control power only for the 4,160-V shutdown board which it supplies.
The station battery supplies loads that are not essential for safe shutdown and cooldown of the nuclear system.
This battery was not considered in the accident load calculations.
There are two 480-V ac RMOV boards that contain mg sets in their feeder lines.
These 480-V ac RMOV boards have an automatic transfer from their normal to alternate power source (480-V ac shutdown boards).
The mg sets act as electrical isolators to prevent a fault from propagating between electrical divisions due to an automatic transfer.
The 480-V ac RMOV boards involved provide motive power to valves associated with the LPCI mode of the RHR system.
Having an mg set out of service reduces the assurance that full RHR (LPCI) capacity will be available when required.
Since sufficient equipment is available to maintain the minimum complement required for RHR (LPCI) operation, a 7-day servicing period is justified.
Having two mg sets out of service can considerably reduce equipment availability; therefore, the affected unit shall be placed in Cold Shutdown within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .
The offsite power source requirements are based on the capacity of the respective lines.
The Trinity line is limited to supplying two operating units because of the load limitations of CSST's A and B.
The Athens line is limited to supplying one operating unit because of the load limitations of the Athens line.
The limiting conditions are intended to prevent the 161-kV system from supplying more than two units in the event of a single failure in the offsite power system.
BFN Unit 2 3.9/4.9-20
4.9 BASES The monthly tests of the diesel generators are primarily to check for failures and deterioration in the system since last use.
The diesels will be loaded to at least 75 percent of rated power while engine and generator temperatures are stabilized (about one hour).
The minimum 7S-percent load will prevent soot formation in the cylinders and injection nozzles.
Operation up to an equilibrium temperature ensures that there is no overheating problem.
The tests also provide an engine and generator operating history to be compared with subsequent engine-generator test data to identify and to correct any mechanical or electrical deficiency before it can result in a system failure.
The test during refueling outages is more comprehensive, including procedures that are most effectively conducted at that time.
These include automatic actuation and functional capability tests to verify that the generators can start and be ready to assume load in 10 seconds.
The annual inspection will detect any signs of wear long before failure.
The diesel generators are shared by units 1 and 2, Therefore, the capability for the units 1 and 2 diesel generators to accept the emergency loads will be performed during the unit 1 operating cycle using the unit 1 loads.
Battery maintenance with regard to the floating charge, equalizing
charge, and electrolyte level will be based on the manufacturer's instruction and sound maintenance practices.
In addition, written records will be maintained of the battery performance.
The plant batteries will deteriorate with time but precipitous failure is unlikely.
The type of surveillance called for in this specification is that which has been demonstrated through experience to provide an indication of a cell becoming irregular or unserviceable long before it becomes a failure.
The equalizing charge, as recommended by the manufacturer, is vital to maintaining the ampere-hour capacity of the battery, and will be applied as recommended.
The testing of the logic systems will verify the ability of the logic systems to bring the auxiliary electrical system to running standby readiness with the presence of an accident signal from any reactor or an undervoltage signal on the 4-kV shutdown boards.
The periodic simulation of accident signals in conjunction with diesel-generator voltage available signals will confirm the ability of the 480-V load shedding logic system to sequentially shed and restart 480-V loads if an accident signal were present and diesel-generator voltage were the only source of electrical power.
BFN Unit 2 3.9/4.9-21
Vl
(,
f(
1 il
REFERENCES 1.
Normal Auxiliary Power System (BFNP FSAR Subsection 8.4) 2.
Standby AC Power Supply and Distribution (BFNP FSAR Subsection 8.5) 3.
250-Volt DC Power Supply and Distribution (BFNP FSAR Subsection 8.6) 4.
Memorandum from Gene M. Wilhoite to H. J.
Green dated December 4,
1981 (LOO 811208 664) and memorandum from C. E. Winn to H. J.
Green dated January 10, 1983 (G02 830112 002)
BFN Unit 2 3.9/4.9-22
I I'
p il If
'I
E.
Diesel Generator Reliability Improvement Program Report shall be submitted within 30 days of meeting failure criteria in Table 4.9.A.
As a minimum, the Reliability Improvement Program report for NRC audit shall include:
a.
A summary of all tests (valid and invalid) that occurred within the time period over which the last 20/100 valid tests were performed.
b.
Analysis of failures and determination of root causes of failures.
c ~
Evaluation of each of the recommendations of NUREG/CR-0660, "Enhancement of Onsite Emergency Diesel Generator Reliability in Operating Reactors," with respect to their application to the plant.
d.
Identification of all actions taken or to be taken to (1) Correct the root causes of failures defined in b above and (2) Achieve a general improvement of diesel generator reliability.
e.
A supplemental report shall be prepared for an NRC audit within 30 days after each subsequent failure during a valid demand, for so long as the affected diesel generator unit continues to violate the criteria (3/20 or 6/100) for the reliability improvement program remedial action.
The supplemental report need only update the failure/demand history for the affected diesel generator unit since the last report for that diesel generator.
The supplemental report shall also present an analysis of the failure(s) with a root cause determination, if possible, and shall delineate any further procedural, hardware or operational changes to be incorporated into the site diesel generator improvement program and the schedule for implementation of those changes.
BFN Unit, 2 6.0-17a
l 4
II
'I ~
I l
J
/r J
t, f
I
LIST OF TABLES (Cont'd)
Table 4.2.E Title Minimum Test and Calibration Frequency for Drywell Leak Detection Instrumentation.
~Pa e Na.
3.2/4.2-52 4.2.F Minimum Test and Calibration Frequency for Surveillance Instrumentation 3.2/4.2-53 4.2.G Surveillance Requirements for Control Room Isolation Instrumentation.
3.2/4.2-55 4.2.H Minimum Test and Calibration Frequency for Flood Protection Instrumentation 3.2/4.2-56 4.2.J Seismic Monitoring Instrument Surveillance Requirements 3.2/4.2-57 4.2eK 3.5-1 3.5.I 3.7.A 3.7.B 3.7.C 3.7.D Radioactive Gaseous Effluent Instrumentation Surveillance Minimum RHRSW and EECW Pump Assignment MAPLHGR Versus Average Planar Exposure Primary Containment Isolation Valves Testable Penetrations with Double 0-Ring Seals Testable Penetrations with Testable Bellows.
Air Tested Isolation Valves.
3.2/4.2-61 3.5/4.5-11 3.5/4.5-21 3.7/4.7-24 3.7/4.7-31 3.7/4.7-32 3.7/4.7-33 3.7.E Primary Containment Isolation Valves which Terminate below the Suppression Pool Water evele
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
L 3.7/4.7-36 3.7.F Primary Containment Isolation Vales Located in Water Sealed Seismic Class 1 Lines 3.7.H 4.9.A Testable Electrical Penetrations Diesel Generator Reliability 3.11.A 6.8.A Fire Protection System Hydraulic Requirements.
Minimum Shift Crew Requirements.
4.9.A.4.C Voltage Relay Setpoints/Diesel Generator Start 3.7/4.7-37 3.7/4.7-38 3.9/4.9-15 3.9/4.9-17 3.11/4.11-10 6.0-19 BFN Unit 3 vii
)fh) iifVlj)4-f IW
~
~
h (
I~
t g f)I f ')))
)
t V
"If, f,
F t V
If w
W) '
~
'l)l f
)t"))I r
J Vf l
), ),),l,
'h...it fj h
)j tl,i
~
~
t l
V I 'I
,)
l\\
i K
)PP I
II R
~ I I'Vt R
V hl,'
~ Wh
~t
)
~
,l J)thff FI
)'f ll
)'
F, I
)jt
\\
t I
)(WF h
I l Wlh f)
V h))
fF I
t f P
I I.',
V f
II.
~
~
'IVJ
)l
'?
W Il
>> JIF, j
I h
Vtt h
h v t Ilf'4 h
~
FW
~
~
~
~
jtg I
i'<) ))
tt
)ML/
3.5/4.5 CORE AND CONTAINMENT COOLING SYSTEMS LIMITING CONDITIONS FOR OPERATION 3.5.A Core S ra S stem CSS SURVEILLANCE REQUIREMENTS 4.5.A Core S ra S stem (CSS) 4.5.A.l.d (Cont'd) 105 psi differential pressure between the reactor vessel and the primary containment.
2. If one CSS loop is INOPERABLE, the reactor may remain in operation for a period not to exceed 7 days providing all active components in the other CSS loop and the RHR system (LPCI mode) and the diesel generators are OPERABLE.
3. If Specification 3.5.A.l or Specification 3.5.A.2 cannot be met, the reactor shall be shutdown in the Cold Condition within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .
e.
Testable Once/
Check Valve Operating Cycle 2.
When it is determined that one core spray loop is INOPERABLE, at a time when operability is
required, the other core spray loop and the RHRS (LPCI mode) shall be demonstrated to be OPERABLE immediately.
The OPERABLE core spray loop shall be demonstrated to be OPERABLE daily thereafter.
4.
When the reactor vessel pressure is atmospheric and irradiated fuel is in the reactor vessel at least one core spray loop with one OPERABLE pump and associated diesel generator shall be OPERABLE, except with the reactor vessel head removed as specified in 3.5.A.S or prior to reactor startup as specified in 3.5.A.l, BFN Unit 3 3.5/4.5-2
H l,II w
i H
I' P
kI
3.5&4.5 CORE AND CONTAINMENT COOLING SYSTEMS LIMITING CONDITIONS FOR OPERATION SURVEILLANCE REQUIREMENT 3.5.B Residual Heat Removal S stem (RHRS)
(LPCI and Containment Cooling)
3. If one RHR pump (LPCI mode) is INOPERABLE, the reactor may remain in operation for a period not to exceed 7 days provided the remaining RHR pumps (LPCI mode) and both access paths of the RHRS (LPCI mode) and the CSS and the diesel generators remain OPERABLE.
4.5.B.
3.
Residual Heat Removal S stem
~(RHRS (LPCI and Containment Cooling)
When it is determined that one RHR pump (LPCI mode) is INOPERABLE at a time when operability is required, the remaining RHR pumps (LPCI mode) and active components in both access paths of the RHRS (LPCI mode) and the CSS shall be demonstrated to be OPERABLE immediately and daily thereafter.
4. If any 2
RHR pumps (LPCI mode) become INOPERABLE, the reactor shall be placed in the Cold Shutdown condition within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months , No additional surveillance required.
5. If one RHR pump (containment cooling mode) or associated heat exchanger is INOPERABLE, the reactor may remain in operation for a period not to exceed 30 days provided the remaining RHR pumps (containment cooling mode) and associated heat exchangers and diesel generators and all access paths of the RHRS (containment cooling mode) are OPERABLE.
When it is determined that one RHR pump (containment cooling mode) or associated heat exchanger is INOPERABLE at a time when operability is required, the remaining RHR pumps (containment cooling mode),
the associated heat exchangers and all active components in the access paths of the RHRS (containment cooling mode) shall be demonstrated to be OPERABLE immediately and weekly thereafter until the INOPERABLE RHR pump (containment cooling mode) and associated heat exchanger is returned to normal service.
BFN Unit 3 3.5/4.5-5
l
m 3.5)'4.5 CORE AND CONTAINMENT COOLING SYSTEMS LIMITING CONDITION FOR OPERATXON SURVEILLANCE REQUIREMENTS 3.5 B.
Residual Heat Removal S stem (RRRR)
<LPCI and Containment Cooling) 4.5 B.
Residual Heat Removal S stem (RHRS)
(LPCX and Containment Cooling) 6.
Xf two RHR pumps (containment cooling mode) or associated heat exchangers are XNOPERABLE, the reactor may remain in operation for a period not to exceed 7 days provided the remaining RHR pumps (containment cooling mode),
the associated heat exchangers, diesel generators, and all access paths of the RHRS (containment cooling mode) are OPERABLE.
6.
When it is determined that two RHR pumps (containment cooling mode) or associated heat exchangers are INOPERABLE at a time when operability is reguired, the remaining RHR pumps (containment cooling mode),
- the associated heat exchangers, and all active components in the access paths of the RHRS (containment cooling mode) shall be demonstrated to be OPERABLE immediately and daily thereafter until at least three RHR pumps (containment cooling mode) and associated heat exchangers are returned to normal service.
7. If two access paths of the RHRS (containment cooling mode) for each phase of the mode (drywell sprays, suppression chamber
sprays, and suppression pool cooling) are not OPERABLE, the unit may remain in operation for a period not to exceed 7 days provided at least one path for each phase of the mode remains OPERABLE.
7.
When it is determined that one or more access paths of the RHRS (containment cooling mode) are INOPERABLE when access is required, all active components in the access paths of the RHRS (containment cooling mode) shall be demonstrated to be OPERABLE immediately and all active components in the access paths which are not backed by a second OPERABLE access path for the same phase of the mode (drywell sprays, suppression chamber sprays and suppression pool cooling) shall be demonstrated to be OPERABLE daily thereafter until the second path is returned to normal service.
BFN Unit 3 3.5/4.5-6
P VP 1
l
3.5/%.5 CORE AND CONTAINMENT COOLING SYSTEMS LIMITING CONDITIONS FOR OPERATION 3.5.B Residual Heat Removal S stem
{RHRS) {LPCI and Containment Cooling)(dont'd)
SURVEILLANCE REQUIREMENTS 4.5.B Residual Heat Removal S stem
~(RHRS (LPCZ and Containment Cooling)(Cont'd) 12.
If one RHR pump or associated heat exchanger located on the unit cross-connection in unit 2 is INOPERABLE for any reason (including valve inoperability, pipe break, etc.),
the reactor may remain in operation for a period not to exceed 30 days provided the remaining RHR pump and associated diesel generator are OPERABLE.
12.
Mhen it is determined that one RHR pump or associated heat exchanger located on the unit cross-connection in the adjacent unit is INOPERABLE at a time when operability is required, the remaining RHR pump and associated heat exchanger on the unit cross-connection shall be demonstrated to be OPERABLE immediately and every 15 days thereafter until the INOPERABLE pump and associated heat exchanger are returned to normal service.
13.
If RHR cross-connection flow or heat removal capability is lost, the unit may remain in operation for a period not to exceed 10 days unless such capability is restored.
13.
No additional surveillance required.
14.
All recirculation pump discharge valves shall be OPERABLE prior to reactor startup (or closed if permitted elsewhere in these specifications).
14. All recirculation pump discharge valves shall be tested for operability during any period of reactor Cold Shutdown exceeding 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months , if operability tests have not been performed during the preceding 31 days.
BFN Unit 3 3.5/4.5-8
1 0
0 3.5/4.5 CORE AND CONTAINMENT COOLING SYSTEMS LIMITING CONDITIONS FOR OPERATION SURVEILLANCE REQUIREMENTS 3.5.C RHR Service Water and Emer enc E ui ment Coolin Mater S stems (EECWs) (Cont'd) 4.5.C RHR Service Water and Emer enc E ui ment Coolin Mater S stems (EECWs) (Cont'd)
2. During reactor power operation, RHRSM pumps must be OPERABLE and assigned to service as indicated in Table 3.5-1 for the specified time limits.
3. During power operation, both RHRSM pumps Bl and B2 normally or alternately assigned to the RHR heat exchanger header supplying the standby coolant supply connection must be OPERABLE; except as specified in 3.5.C.4 and 3. 5.C. 5 below.
3.
a. If no more than two RHRSM pumps are INOPERABLE, increased surveillance is not required.
b.
Mhen three RHRSM pumps are INOPERABLE, the remaining pumps and associated essential control valves shall be operated weekly.
c.
When four RHRSW pumps are INOPERABLE, the remaining pumps and associated essential control valves shall be operated daily.
Routine surveillance for these pumps is specified in 4.5.C.l.
BFN Unit 3 3.5/4.5-10
t k
1 4
t'l
,J t
3.5/4.5 CORE AND CONTAINMENT COOLING SYSTEMS LIMITING CONDITIONS FOR OPERATION SURVEILLANCE REQUIREMENTS 3.5.C RHR Service Water and Emer enc E ui ment Coolin Water S stems (EECWs) (Cont'd) 4.
One of the Bl or B2 RHRSW pumps assigned to the RHR heat exchanger supplying the standby coolant supply connection may be INOPERABLE for a period not to exceed 30 days provided the OPERABLE pump is aligned to supply the RHR heat exchanger header and the associated diesel generator and essential control valves are OPERABLE.
4.5.C RHR Service Water and Emer enc E ui ment Coolin Water S stems (EECWs) (Cont'd When it is determined that the Bl or B2 RHRSW pump is INOPERABLE at a time when operability is
required, the OPERABLE RHRSW pump on the same header and the RHR heat exchanger header and associated essential control valves shall be demonstrated to be OPERABLE immediately and every 15 days thereafter.
5.
The standby coolant supply capability may be INOPERABLE for a period not to exceed 10 days.
6. If Specifications 3.5.C.2 through 3.5.C.5 are not
met, an orderly shutdown shall be initiated and the unit placed in the Cold Shutdown condition within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .
7. There shall be at least 2
RHRSW pumps, associated with the selected RHR pumps, aligned for RHR heat exchanger service for each reactor vessel containing irradiated fuel.
BFN Unit 3 3.5/4.5-12
tt b
1
3.9/4.9e AUXILIARYELECTRICAL SYSTEM LIMITING CONDITIONS FOR OPERATION 3.9 Auxiliar Electrical S stem SURVEILLANCE REQUIREMENTS 4.9 Auxiliar Electrical S stem A licabilit Applies to all the auxiliary electrical power system.
Applies to the periodic testing requirements of the auxiliary electrical system.
~Ob 'ective O~b'ective To assure an adequate supply of electrical power for operation of those systems required for safety.
Verify the operability of the auxiliary electrical system.
S ecification S ecification A.
Auxiliar Electrical E ui ment A.
Auxiliar Electrical S stem 1.
The reactor shall not be started up (made critical) from the Cold Condition unless the following are satisfied:
a.
Diesel generators 3A, 3B, 3C, and 3D OPERABLE.
b.
Requirements 3.9.A.3 through 3.9.Ae6 are met.
c.
At. least two of the following offsite power sources are available:
(1) The 500-kV system is available to the unit 3 shutdown boards through the unit 3 station-service transformer TUSS 3B with no credit taken for the two 500-kV Trinity lines.
1.
Diesel Generators a.
Each diesel generator shall be manually started and loaded to demonstrate operational readiness in accordance with the frequency specified in Table 4.9.A on a staggered test basis.
The test shall continue for at least a
1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months period at 75%%u of rated load or greater and the operation of the diesel fuel oil transfer pumps shall be demonstrated.
Also, the diesel generator starting air compressor shall be checked for operation and its ability to recharge air receivers.
The diesel generator fast
'starts (10 seconds) from standby conditions shall be performed once per 184 days in these surveillance tests.
All other engine starts for the purpose of this test may be preceeded by an engine idle start.
BFg Unxt 3 3.9/4.9-1
8 I
1 I
II I
tt I
I I'I 4
I' f'
3.9/4.9 AUXILIARYELECTRICAL SYSTEM LIMITING CONDITIONS FOR OPERATION SURVEILLANCE REQUIREMENTS 3.9.A.
Auxiliar Electrical E ui ment 3.9.A.l.c.
(Cont'd) 4.9.A.
Auxiliar Electrical S stem 4.9.A.l. (Cont'd)
Additional reporting requirements due to failures are noted in Table 4.9.A.
All diesel generator starts shall be logged.
(2) The Trinity 161-kV line is available to the unit 3 shutdown boards through a
common station-service or cooling tower transformer.
NOTE FOR (2):
If units 1 and 2 are both in operation and claiming the Trinity line as an offsite
source, TUSS 3B must be claimed as the other offsite source for unit 3.
{3) The Athens 161-kV line is available to unit 3 shutdown boards through a common station-service or cooling tower transformer.
NOTE FOR (3):
If either unit 1 or unit 2 is claiming the Athens line as an offsite source, it may not be claimed as an offsite source for unit 3.
b.
Once per operating
cycle, a test will be conducted simulating a
loss of offsite power and similar conditions that would exist with the presence of an actual safety-injection signal
'to demonstrate the following:
{1) Deenergization of the emergency buses and load shedding from the emergency buses.
(2) The diesel starts from ambient condition on the auto-start signal, energizes the emergency buses with permanently connected
loads, energizes the auto-connected emergency loads through load sequencing, and operates for greater than or equal to five minutes while its generator is loaded with the emergency loads.
BFN Unit 3 3.9/4.9-2
h t
t 41 I
I" kl
<,1 lf
',1(
W I
)
I
3.9/4.9 AUXILIARYELECTRICAL SYSTEM LIMITING CONDITIONS FOR OPERATION SURVEILLANCE REQUIREMENTS 3.9.A.
Auxiliar Electrical EcCEui meet 4.9.A.
Auxiliar Electrical
~Setem 3.9.A.l.c.(3)
(Cont'd) 4.9.A.l.b. (Cont'd)
NOTES FOR (2)
AND (3):
If both Athens and Trinity lines are claimed as the two offsite sources for unit 3, no credit may be taken for the Athens-Trinity line tie breaker.
Specifically, the Athens line supplies unit 3 through common station-service transformer A or cooling tower transformer 1,
and the Trinity line must supply unit 3 through common station-service transformer B or cooling tower transformer.
2.
(3)
On diesel generator breaker trip, the loads are shed from the emergency buses and the diesel restarts on the auto-start signal, the emergency buses are energized with permanently connected
loads, the auto-connected emergency loads are energized through load sequencing, and the diesel operates for greater than or equal to five minutes while its generator is loaded with the with the emergency loads.
c ~
Once a month the quantity of diesel fuel available shall be logged.
d.
Each diesel generator shall be given an annual inspection in accordance with instructions based on the manufacturer's recommendations.
e.
Once a month a sample of diesel fuel shall be checked for quality.
The quality shall be within acceptable limits specified in Table 1 of the latest revision to ASTM D975 and logged.
BFN Unit 3 3.9/4.9-3
1(
k N
1I
~
,r 3.9/4.9 AUXILIARYELECTRICAL SYSTEM LIMITING CONDITIONS FOR OPERATION SURVEILLANCE REQUIREMENTS 3.9.B.
0 eration with Ino erable EqEui ment 4.9.B.
0 eration with Ino erable EcCEui ment Whenever the reactor is in STARTUP mode or RUN mode and not in a Cold Condition, the availability of electric power shall be as specified in 3.9.A except as specified herein.
1.
From and after the date that only one offsite power source is available, reactor operation is permissible under this condition for seven days.
1.
When only one offsite power source is OPERABLE, all unit 3 diesel generators and associated boards must be demonstrated to be OPERABLE within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months and daily thereafter.
2.
When one unit 3 diesel generator (3A, 3B, 3C, or 3D) is INOPERABLE, continued reactor operation is permissible during the succeeding 7 days, provided that two offsite power sources are available as specified in 3.9.A.l.c.
and all of the CS, RHR (LPCI and containment cooling) systems, and the remaining three unit 3 diesel generators are OPERABLE. If this reguire-ment cannot be met, an orderly shutdown shall be initiated and the reactor shall be shut down and in the Cold Condition within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .
2.
When one unit 3 diesel generator is found to be INOPERABLE, all of the CS, RHR (LPCI and containment cooling) systems and the remaining unit 3 diesel generators and associated boards shall be demonstrated to be OPERABLE within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months and daily thereafter.
BFN Unit 3 3.9/4.9-8
I
(
lf It 5
t I
tl j[
II
~
H lit t
,I ~
It v
tf I
( A
3.9/4.9 AUXILIARYELECTRICAL SYSTEM LIMITING CONDITIONS FOR OPERATION SURVEILLANCE REQUIREMENTS 3.9.B.
0 eration With Ino 'erable E~ui ment 4.9.B.
0 eration With Ino erable EcCEui ment 3.
From and after the date that the 4-kV bus tie board becomes inoperable, reactor operation is permissible indefinitely provided one of the required offsite power sources is not supplied from the 161-kV system through the bus tie board.
3.
When a required offsite power source is unavailable because the 4-kV bus tie board or a start bus is INOPERABLE, all unit 3 diesel generators and associated boards shall be demonstrated OPERABLE within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months and daily thereafter.
The remaining offsite source and associated buses shall be checked to be energized daily.
4.
When one unit 3 4-kV shutdown board is INOPERABLE, continued reactor operation is permissible for a period of 5 days provided that 2 offsite power sources are available as specified in 3.9.A.l.c and the remaining unit 3 4-kV shutdown boards and associated diesel generators, CS, RHR (LPCI and containment cooling)
systems, and all unit 3 480-V emergency power boards are OPERABLE. If this requirement cannot be
met, an orderly shutdown shall be initiated and the reactor shall be shut down and in the Cold Condition within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .
When one unit 3 4-kV shutdown board is found to be INOPERABLE, all remaining unit 3 4-kV shutdown boards and associated diesel generators, CS, and RHR (LPCI and containment cooling) systems supplied by the remaining 4-kV shutdown boards shall be demonstrated to be OPERABLE within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months and daily thereafter.
BFN Unit 3 3.9/4.9-9
r W
3.9/4.9 AUXILIARYELECTRICAL SYSTEM LIMITING CONDITIONS FOR OPERATION 3.9.B.
0 eration With Ino erable
~Eui ment SURVEILLANCE REQUIREMENTS 4.9.B.
0 eration With Ino erable
~Eui ment 5.
6.
From and after the date that one of the 480-V, diesel auxiliary boards becomes INOPERABLE, reactor operation is permissible for a period of 5 days.
From and after the date that the 250-V shutdown board 3EB battery or one of the three 250-V unit batteries and/or its associated battery board is found to be INOPERABLE for any reason, continued reactor operation is permissible during the succeeding seven days.
Except for routine surveillance testing, the NRC shall be notified within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months of the situation, the precautions to be taken during this period, and the plans to return the failed component to an OPERABLE state.
5.
When one 480-V diesel auxiliary board is found INOPERABLE, the remaining diesel auxiliary board and each unit 3 diesel shall be verified OPERABLE within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months and daily thereafter.
7.
When one division of the logic system is INOPERABLE, continued reactor operation is permissible under this condition for seven
days, provided the CSCS reguirements listed in Specification 3.9.B.2 are satisfied.
The NRC shall be notified within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months of the situation, the precautions to be taken during this period, and the plans to return the failed component to an OPERABLE state.
BFN Unit 3 3.9/4.9-10
(I t'4
(
t t
(
It I(
(*
l(
I I
(
(f
( t
AUXILIARYELECTRICAL SYSTBlS TABLE 4.9.A Diesel Generator Reliability No. of Failures in last 20 valid tests+
No. of Failures in last 100 valid tests+
Rel iabi 1it Actions
>2
>5 6
Test at least once per 31 days Test at least once per 7 days~
Within 30 days, prepare a
report for NRC audit, in accordance with Sect>on 6.7.3.E.
Declare the diesel generator INOPERABLE and perform a requalification test for the affected diesel generator pursuant to the attachment to this table.
Criteria for determining number of failures and number of valid tests shall be in accordance with Regulatory Position C.2.e of Regulatory Guide l. 108, Revision 1, August 1977, except that the number of tests and failures are determined on a per diesel generator basss.
For the purposes of this test schedule, only valid tests conducted after the Operating License issuance date shall be included in the computation of the "last 20 valid tests".
Entry into this test schedule shall be made at the 31 day test frequency.
~his test frequency shall be maintained until seven consecutive failure free demands have been performed and the number of failures in the last 20 valid demands has been reduced on one or less.
BFN Unit 3
l.
6 I,
4 A
L I
J' I
v 4
<<1 E~
l e
I I
V,4 1
lg L
~ C ir I
v~
l
ATTACHMENT TO TABLE 4.9.A DIESEL GENERATOR REQUALIFICATION PROGRAM (1)
Perform seven consecutive successful demands without a failure within 30 days of diesel generator being restored to operable status and fourteen consecutive successful demands without a failure within 75 days of diesel generator of being restored to OPERABLE status.
(2) If a failure occurs during the first seven tests in the requalification test program, perform seven successful demands without an additional failure within 30 days of diesel generator of being restored to OPERABLE status and fourteen consecutive successful demands without a failure within 75 days of being restored to OPERABLE status.
(3) If a failure occurs during the second seven tests (tests 8 through 14) of (1) above, perform fourteen consecutive successful demands without an additional failure within 75 days of the failure which occurred during the requalification testing.
(4)
Following the second failure during the requalification test program, be in at least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months .
(5)
During requalification testing the diesel generator should not be tested more frequently than at 24-hour intervals.
After a diesel generator has been successfully requalified, subsequent repeated requalification tests will not be required for that diesel generator under the following conditions:
(a)
The number of failures in the last 20 valid demands is less than 5.
(b)
The number of failures in the last 100 valid demands is less than 11.
(c)
In the event that, following successful requalification of a diesel generator, the number of failures is still in excess of the remedial action criteria (a and/or b above) the following exception will be allowed until the diesel generator is no longer in violation of the remedial action criteria (a and/or b above).
Requalification testing will not be required provided that after each valid demand the number of failures in the last 20 and/or 100 valid demands has not increased.
Once the diesel generator is no longer in violation of the remedial action criteria above the provisions of those criteria alone will prevail.
BFN Unit 3 3.9/4.9-16
0 1
lt'
TABLE 4.9.A.4.C VOLTAGE RElAY SETPOINTS/DIESEL GENERATOR START Rela Location Tri Level Settin Remarks l.
4-kV Shutdown Boards Trip Setpoint:
Allowable Values:
Trip Range:
Reset Setpoint:
Allowable Values:
Reset Range:
0 volts with a 1.5-second time delay
+. 1 second T.4 to 1.6 seconds 2870-V
+2% of 2870-V 2813-V to 2927-V Start diesel generators on loss of offsite power.
~dndervolen e
2.
4-kV Shutdown Boards Trip Setpoint:
3920 Second level undervoltage sensing Allowable Values:
3900-3940 relays start diesel generator Reset Setpoint:
Reset at < 1.5% above trip value on degraded voltage.
3.
4-kV Shutdown Boards (Timers shown for 4-kV shutdown board 3EA.
4-kV shutdown boards 8, C, and D, similar, except for change of suffix.)
Timer 2-211-1A 2-211-2A 2-211-3A 2-211-4A Setpoint
~seconds 0.3 + 1(5 4.0 + 10%
6.9 + l(C 1.3 + i(5 Critical Time N/A N/A 8.2 1.5 Auxiliary timers for second level undervoltage sensing relays.
The setpoint ranges specified assure that the operating times will be below the critical times specified.
These ranges are based on timer repeatability of + 5% as specified by the manufacturer.
BFN-Unit 3
P
,C e
~ 'P C
I C
1.
N L
C.
4 A
C" C
C P
f I
V fr
C$
0 ENCLOSURE 3 DETERMINATION OF NO SIGNIFICANT HAZARDS CONSIDERATION BROWNS FERRY NUCLEAR PLANT Descri tion of No Si nificant Hazards Consideration The proposed amendment would change the Technical Specifications of Browns Ferry Nuclear Plant (BFN) units 1, 2, and 3 to reflect the recommendations contained in NRC Generic Letter 84-15, "Proposed Staff Actions to Improve and Maintain Diesel Generator Reliability," July 2, 1984.
Specifically the amendment would make the following changes.
1.
The requirement to test the diesel generators whenever parts of other safety related systems are inoperable will be deleted.
2.
The requirement to immediately test the diesel generators and other equipment when electrical equipment becomes inoperable is to be changed to allow 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months to test the diesels.
3.
The technical specifications are changed to specify that diesel generator fast starts will only be required once per 184 days.
4.
A table will be added to the technical specifications that specifies a
testing frequency that is dependent on the test failure experience on a particular diesel generator.
The longest test interval in this table is once per 31 days, which compares to the current requirements to test once per month.
This table also will require a special report to NRC if there are three or more failures in the last 20 valid tests or six or more failures in the last 100 valid tests.
Similarly, the table will require the performance of a requalification test if there are five or more failures in the last 20 valid test or 11 or more failures in the last 100 valid tests.
Basis for Pro osed No Si nificant Hazards Consideration Determination The Commission has provided standards for determining, whether a significant hazards consideration exists as stated in 10 CFR 50.92(c).
A proposed amendment to an operating license for a facility involves no significant hazards consideration if operating of the facility in accordance with a proposed amendment would not (1) involve a significant increase in the probability or consequences of an accident previously evaluated.
or (2) create the possibility of a new or different. kind of accident from any accident previously evaluated, or (3) involve a significant reduction in a margin of safety.
A discussion of these standards as they relate to this amendment follow.
1.
The probability of the occurrence of an accident previously evaluated in the Final Safety Analysis Report has not been affected since the diesel generators are not considered in determining the probabilities of accidents.
Reducing the test frequency and modifying the starting requirements to be consistent with the recommendations made by Generic
1' d
II hf
Letter 84-15 are intended to enhance diesel generator reliability by minimizing severe test conditions that can lead to premature failures.
Therefore, the probability of a malfunction of equipment important to safety as previously evaluated in the Final Safety Analysis Report has been reduced since the detrimental test requirements have been reduced.
The consequences of a malfunction oE equipment important to safety has not changed since the new surveillance requirements will not afEect the operation or operability of the diesel generators or any other safety related equipment.
Based on this, the criteria set forth in 10 CFR 50.92 (c)(l) are satisEied.
2.
The possibility of a new accident or a different kind of accident than evaluated in the Final Safety Analysis Report has not been created since the change affects only the frequency of starting and the loading practices during testing of the diesel generators.
Operation of the diesel generators cannot create a new type of accident.
Based on this, the criteria set Eorth in 10 CFR 50.92(c)(2) are satisfied.
3.
The margin oE safety is not reduced by the proposed changes because the changes in Ithe testing requirements do not afEect the ability of the diesel generators to perform their function and therefore have no impact on safety margins.
Based on this, the criteria set forth in 10 CFR 50.92 (c)(3) are satisfied.
Since the application for amendment involves proposed changes that are encompassed by the criteria Eor which no significant hazards consideration
exists, TVA proposes to determine that the proposed amendments do not involve a significant hazards consideration.
r J'

ML18032A348

Text

Navigation menu

Search