ML18033A964
| ML18033A964 | |
| Person / Time | |
|---|---|
| Site: | Browns Ferry |
| Issue date: | 09/21/1989 |
| From: | Medford M TENNESSEE VALLEY AUTHORITY |
| To: | NRC OFFICE OF INFORMATION RESOURCES MANAGEMENT (IRM) |
| References | |
| NUDOCS 8909280178 | |
| Download: ML18033A964 (16) | |
Text
ACCKMWTZD D)STKBU730N DEMONSTRATION SYFI'EM REGULATORY INFORMATION DISTRIBUTION SYSTEM (RIDS)
CESSION NBR:8909280178 DOC.DATE: 89/09/21 NOTARIZED: NO FACIL:50-259 Browns Ferry Nuclear Power Station, Unit 1, Tennessee 50-260 Browns Ferry Nuclear Power Station, Unit 2, Tennessee 50-296 Browns Ferry Nuclear Power Station, Unit 3, Tennessee AUTH.NAME AUTHOR AFFILIATION MEDFORD,M.O.
Tennessee Valley Authority RECIP.NAME RECIPIENT AFFILIATION Document Control Branch (Document Control Desk)
DOCKET 05000259 05000260 05000296 O5OOO259 'i 05000260 05000296 E'UBJECT:
Responds to NRC 890808 ltr re violations noted in Insp Repts 50 259/89 27I50 260/89 27
& 50 296/89 27
'ISTRIBUTION CODE:
IE01D COPIES RECEIVED:LTR ENCL
'IZE:
TITLE: General (50 Dkt)-Insp Rept/Notice of Violation Response
/
NOTES:1 gopy each to: B.Wilson,D.M.Crutchfield,B.D.Liaw,S.Black
-R.Pierson, 1 Copy each to: S.Black,D.M.Crutchfield,B.D.Liaw, R.Pierson,B.Wilson 1 Copy each to:
S. Black,D.M.Crutchfield,B.D.Liaw, R.Pierson,B.Wilson RECIPIENT ID CODE/NAME PD ERNAL: ACRS AEOD/DEIIB DEDRO NRR/DEST DIR NRR/DOEA DIR ll NRR/DREP/RPB 10 NUDOCS-ABSTRACT OGC/HDS2 RES MORISSEAUID EXTERNAL: LPDR NSIC NOTES:
COPIES LTTR ENCL 1
1 2
2 1
1, 1
1 1
1 1
1 2
2 1
1 1
1 1
1 1
1 1
1 5
5 RECIPIENT ID CODE/NAME GEARS,G AEOD AEOD/TPAD NRR SHANKMAN,S NRR/DLPQ/PEB
'RR/DREP/EPB10 NRR/PMAS/ILRB1 2 0
N J G FILE 01 NRC PDR COPIES LTTR ENCL 1
1 1
1 1
1 1
1 1
1 1
1 1
1 1
1 1
1 1
1 1
1 h
r NOIR 'IO ALL BIKS" BZCIPZEPIS:
PLEASE HELP US I0 REIXKR HASTE!
CGNI'ACT 'IHE DOCUMENI'GMIBOLDESK, BOCH P1-,37 (EXT. 20079)
KO ELIMINATEKXHt NUMB PRCH DISTRIBUZICN TAL NUMBER 8 24PKP668REP: RM %
ENCL 30
0',
TENNESSEE VALLEYAUTHORITY CHATTANOOGA. TENNESSEE 37401 6N 38A Lookout Place SEP 21589 U.S. Nuclear Regulatory Commission ATTN:
Document Control Desk Hashington, D.C.
20555 Gentlemen:
In the Hatter of Tennessee Valley Authority Docket Nos.
50-259 50-260 50-296 BROHNS FERRY NUCLEAR PLANT (BFN) UNITS 1; 2, AND 3 NRC INSPECTION REPORT NOS. 50-259/89-27, 50-260/89-27, AND 50-296/89-27
RESPONSE
TO NOTICE OF VIOLATION This letter provides TVA's response to the letter from B. A. Hilson to O.
D. Kingsley, 3r, dated August 8,
- 1989, which transmitted the subject
~
~
~
~
report.
The report cited TVA with a violation for failure to meet technical specification requirements for at least one operable residual heat removal loop and a violation with three examples for failure to submit a Licensee Event Report within 30 days after discovery of the event.
An extension of the due date for this response to. September 23, 1989 was agreed to by H. S. Little of your staff on September 8,
1989.
Enclosure 1 provides TVA's response to the two violations.
A list of commitments is provided in Enclosure
- 2. If you have any questions, please telephone Patrick P. Carier at (205) 729-3570.
.Very truly yours, TENNESSEE VALLEY AUTHORITY Enclosures cc:
See page 2
Hark O. Medford, Vice resident and Nuclear Technical Director go I
8':~05'28('.i i g ~
PDR ADCiC.I; A
nr0$ 2J O,~C~v625 ~
- PDC, An Equal Opportunity Employer
U.S. Nuclear Regulatory Commission SEP 21585 cc (Enclosures):
Ms. S.
C. Black, Assistant Director
'or Pro]ects TVA Pro)ects Division U.S. Nuclear Regulatory Commission One Hhite Flint, North 11555 Rockville Pike Rockvi lie, Maryland 20852 Mr. B. A. Hilson, Assistant Director for Inspection Pr'ograms TVA Pro]ects Div'ision U.S. Nuclear Regulatory, Commission Region II 101 Marietta Street, NH, Suite 2900 Atlanta, Georgia 30323 NRC Resident Inspector Browns Ferry Nuclear Plant Route 12, Box 637
- Athens, Alabama 35609-2000 0
0'
ENCLOSURE 1
RESPONSE
NRC INSPECTION REPORT NOS. 50-259/89-27, 50-260/89-27, AND 50-296/89-27 LETTER FROM B. A. NILSON TO 0.
D.
KINGSLEY DATED AUGUST 8,.1989 TVA admits violation A and example 3 of violation B.
Nith respect to violation B, it should be noted that each of the three examples cited in the violation involved conditions discovered by TVA.
Steps are being taken to correct the affected hardware in each instance..
TVA recognizes that there is room for interpretation when it comes to 10 CFR 50.73 reporting requirements and that we must be conservative in our reportability determinations.
TVA will continue to keep NRC informed of the status. of ongoing reportability determinations through regular discussions with the NRC residents.
Violation A Technical Specification (TS) 3.5.B.9 requires that at least one RHR loop with two pumps or two loops with one pump per loop be operable when the reactor vessel pressure is atmospheric and irradiated fuel is in the reactor vessel.
Contrary to the above, during the period of June 18-22,
During this
- period, Loop II of the RHR system was inoperable due to an inoperable testable check valve while Loop I was inoperable due to maintenance.
~VA'l l.
Admission or Denial of the Alle ed Violation TVA admits the violation as stated.
2.
Reasons for the Violation On June 23, 1989, following a thorough review of the 'events dating back to June 8,
1989, it was determined by TVA that loop II of the residual heat removal system (RHR) for Unit 2 had been inoperable for a period of time when operability was required.
The primary containment, inboard, testable check valve for this loop had not been cycled within its required surveillance frequency.
Required portions of Surveillance Instruction (SI) 2-SI-3.2.2, "Valves Cycled During Cold Shutdown,"
were completed on June 8,
1989, with the exception of the RHR loop II testable check valve, 2-FCV-74-68, and another minor exception.
These exceptions were documented as test deficiencies in the test package.
The test package was reviewed by the Shift Operations Supervisor (SOS) and the Shift Technical Advisor (STA) on June 8, 1989.
No additions or entries were made to the limiting condition for operation (LCO) tracking log concerning a potential LCO condition.
RHR Loop II was carried on LCO tracking as inoperable.
0
Enclosure 1
Page 2 of 7 However, it was not an Operations requirement or practice to track individual items restraining operability of systems which were out of service for planned maintenance or modification.
RHR loop I was being maintained in an operable status at that time; therefore, under the existing plant conditions, RHR loop II operability was not required.
At 0001 hours1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> on June 18,
- 1989, the surveillance band plus the allowable extension for testing the loop II valve 2-FCV-74-68 expired.
This technically rendered the RHR loop II testable check valve, 2-FCV-74-68, and loop II of RHR (low pressure coolant injection mode) inoperable.
Additional testing was performed on loop II RHR in preparation for returning the loop to operable status.
The SOS performed a review of system status including the return-to-service punchlist and outstanding surveillance instruction list, prepared by the work control organization and the LCO tracking list maintained by'he STA.
None of these tracking/status systems made the SOS aware that the RHR loop II testable check valve surveillance had.not been completed and he declared loop II of RHR operable at 1155 hours0.0134 days <br />0.321 hours <br />0.00191 weeks <br />4.394775e-4 months <br /> on June 18, 1989..
On June 18, 1989 at,1210 hours0.014 days <br />0.336 hours <br />0.002 weeks <br />4.60405e-4 months <br />, loop I of RHR was intentionally made inoperable to perform planned maintenance on the loop.
This made both loops of RHR inoperable and exceeded the TS requirements.
On June 21, 1989, at approximately 1200 hours0.0139 days <br />0.333 hours <br />0.00198 weeks <br />4.566e-4 months <br />, the status of the RHR loop II testable check valve was questioned by plant engineers when it was identified that the check valve had not been tested.
On June 21, 1'989, at 2135 hours0.0247 days <br />0.593 hours <br />0.00353 weeks <br />8.123675e-4 months <br />, surveillance testing was successfully completed on check valve 2-FCV-74-68.
This-made the check valve and loop II of RHR operable This event resulted from a failure to track the test deficiency (TD),
associated with not testing this valve, either as a potential LCO or on any other deficiency tracking list.
The root cause of the failure to track this TD wa's procedural inadequacy, in that procedural requirements for LCO tracking were not specifically delineated on forms that required review and the general requirements in the body of the administrative procedure did not specifically require tracking of individual items but only the inoperable systems/components.
Corrective Ste s Nhich Have Been Taken and Results Achieved The surveillance test was completed June 21, -1989.
Valve 2-FCV-74-68 operated correctly when tested.
An STA signoff was added to form Plant Manager Instruction (PHI) 47, "Test Deficiencies Log," on June 28, 1989, to ensure that each potential operability item is tracked.
This need had been previously determined, but the change was, not in effect at the time of this incident:
Enclosure 1
Page 3 of 7 Form PMI 34, "Data Cover Sheet for SI Not Performed,"
has been revised to require a review for potential LCO applicability and an STA signoff.
PMI 17.1, "Conduct of Testing,"
was revised September 1,
1989, to require that the cognizant engineer review SIs in a more timely manner and report any potential operability problems to the SOS and STA.
In response to NRC Inspection Report 50-259,260,296/89-11, Site Directors Standard Practice 7.9, "Integrated Schedule and Hork Control," was revised to require that impact evaluation sheets for work performed on technical specification required equipment be provided with an SOS/designee signoff for specifying the effect of the work on operability and an STA signoff to ensure tracking.
4.
Corrective Ste s Hhich Hill Be. Taken to Avoid Further Violations No further corrective steps are required to prevent recurrence of this violation.
Date Hhen Full Com liance Hil'l Be Achieved Full compliance has been achieved.
Violation B t
10 CFR 50.7 Contrary to the above, a report was not submitted 30 days after the discovery of the event for the following three examples:
l.
On September 16,
- 1988, the Unit 2 and on June.
14,.1989, the Unit 1 fuel
.pool antisiphon check valves were found stuck open.
This could result in draining the fuel pool with the loss of the ability to,remove residual heat from the fuel stored in the pool.
2.
On March 22,
- 1989, the licensee made a 4-hour report per 10 CFR 50.72 of an unanalyzed condition where the A, B, and C Diesel Generators could be overloaded during the first few minutes of an accident due to the single failure of the lockout relay which prevents the three motor driven fire pumps from sequentially starting during an accident condition.
A voluntary LER was submitted on May =-31, 1989, which stated that
'an additional lockout relay would be installed prior to Unit 2 startup.
3 requires that a Licensee Event Report be submitted within 30 days after the discovery of the event.
Section (a)(2)(ii)(B) requires a report for any event or condition that resulted in the nuclear power plant being outside the design basis of the plant.
Section (a)(2)(v) requires a report for any event or condition that alone could have prevented the fulfillment of the safety function of structures or systems that are needed to:
(A) shutdown the reactor and maintain it in a safe shutdown condition; (B) remove residual heat; (3) control the release of radioactive material; or (D) mitigate the consequences of an accident.
0'
Enclosure 1
Page 4 of.7 3.
In May 1989, the licensee determined that all four Unit 2 RHR room coolers (2A, 2B, 2C, and 2D) and the core spray room coolers (2B and 2D) tested less than the design flow requirement of 10,000 cfm + 10 X with a.range from 8,786 to 7,415.
The core spray room coolers (2A and 2C) tested less than the design flow of 12,700 at 8,328.
This condition alone could have prevented the low-pressure ECCS from functioning in. an accident condition.
The licensee did not report this item because of an acceptable post modification test in March 1988 after motor replacement with new EQ motors.
- However, the cause of the flow discrepancy has not been discovered.
Also, no procedure existed to periodically measure and determine if previous air flow was acceptable.
The licensee was only able to obtain values greater than 9000 cfm by ad)usting the variable pitch sheaves and adding into the total flow a small duct line, for the cooler motor itself, which was'previously not counted.
l.
.Admission or Denial of the Alle ed Violation TVA admits that a violation of 10 CFR 50.73 occurred for example 3.
TVA does not believe that examples 1 or 2 viol'ated 10 CFR 50.73.
~Exam le 1 (Fuel Pool Antlslphon Check Valves)
~
Reasons for the Denial The return lines of the BFN fuel pool cooling and cleanup system have an antisiphon check valve designed to prevent any pool inventory losses in the event of a line break.
On September 16,
- 1988, the Unit 2 fuel pool antisiphon check valves did not fully= close during a restart test as required.
Making a conservative initial reporting determination that this constituted an unanalyzed condition which could have prevented the fulfillment of a safety function, TVA made a four-hour report pursuant.to 10 CFR 50.72.
Subsequent evaluations conducted by BFN the plant staff revealed no basis for reporting this condition.
TVA later discovered the same condition with the check valves in the Unit 1 fuel pool cooling system, which required a, separate evaluation for reportability.
Having previously reported the identical generic condition for Unit 2, the BFN operations staff concluded that submitting an additional report under 10 CFR 50.72 would be redundant and, therefore,
=
unnecessary.
TVA then performed an independent evaluation to determine whether a
10 CFR 50.73 report was required for the Unit 1 condition, and concluded that it did not meet the criteria for reportability.
Although the antisiphon check valve is part of the origina'1 plant design, as discussed in section 10.5.5 of the FSAR, other system features provide the basis for not considering this an unanalyzed condition which could have prevented the fulfillment of a safety function.
Enclosure 1
Page 5 of 7 The system design includes seismically qualified piping and instrumentation which provides a low level alarm and isolation logic at a
lower level to automatically actuate fully redundant motor operated valves at the interface of nonseismically qualified piping.
Redundant check valves are provided for those interfaces which do not have motor operated valves.
These features assure adequate fuel covering in the event of a line break in the nonseismically qualified interface piping.
while the failure of the check valves to operate might increase the amount of the fuel pool water lost before the leak is isolated, the circuitry would provide early operator warning.
The time available in draining the large quantity of water allows for the consideration of reasonable operator actions to mitigate the problem.
If operator actions are not consi'dered, the system would automatically isolate.'ssuring the safety function is achieved.
TVA has corrected the check valve deficiency even though other features fulfill the safety function.
This will assure minimal loss of the fuel pool water and provide conservative margin in the system design.
I
~Exam le 2 (Fire Pump Lockout Relay>
2.
Reasons for the Denial As a result of the design baseline verification review, TYA submitted a
10 CFR 50.72 report concerning an unanalyzed condition in which the A, B, and C diesel generators could be overloaded due to the single failure of the fire pump lockout relay following a main steamline break.
The lockout relay prevents the three motor-driven fire pumps from starting during an accident.
In making its immediate reportabili ty determination, the scenario that TYA originally postulated involved the actuation of smoke detectors when
=
exposed to the steam environment, which would initiate the fire pumps.
Since a steamline.break could reduce the vessel water inventory and actuate low pressure injection systems, the additional load of the fire pumps might result in tripping more than one diesel generator.
Although there were uncertainties with this scenario, BFN conservatively made a
4-hour ENS report on March 22, 1989 based on this concern.
- However, TYA's subsequent evaluation which is discussed in LER 50-259/
89009 determined, based on engineering judgment, that the relay failure scenario originally postulated would trip only one diesel generator.
The loss of one diesel generator during a design basis event is an analyzed condition for the plant.
Therefore, TVA believes that the original concern was correctly resolved within $0 days.
TVA did not file a 10 CFR 50.73 report because no violation of 10 CFR 50.73(a)(2)(ii) occurred.
Nevertheless, consistent with its conservative reporting philosophy, TVA did submit a voluntar'y LER on May 31, 1989.
TVA explained in that LER that it has elected to modify the circuitry.
Enclosure 1
Page 6 of 7 This is a prudent measure designed to avoid future complications and eliminate the need to consider the additional diesel loading for other events which are not currently analyzed.
There are no identified events for which the fire pump loading exceeds the BFN design-basis.
~Exam le 3 (Equipment Area Cooler Low Flow Condition>
2.
Reason for the Violation TVA initially identified potential equipment area cooler air flow problems on May 25,
- 1989, when an air flow verification test performed on the 2C RHR room cooler revealed the flow to be less than design.
An investigation was initiated shortly thereafter.
Flow measurements were taken on the remaining RHR and CS equipment area coolers during the next few days as they were made available for testing.
Meanwhile, TVA's design organization evaluated air flow measurements obtained during the investigation and determined them to be sufficient for pump motor cooling under the current plant conditions.
Therefore, BFN was not in a condition prohibited by plant technical specifications.
The investigation initially revealed that variable pitch sheaves on the motor shafts of the coolers were set close to the minimum diameter and were suspected to be responsible for the reduction in air flow.
Adjustment of these sheaves on four of the six equipment area coolers brought them back to within the design flow rates,
- however, no evidence could be found that the sheaves had been adjusted from the last time the flows were verified (March 1988).
No LER was submitted within thirty days of May 25 because at that time TVA had not determined that a strong possibility existed that the plant had previously operated at power with the degraded flow rates.
The investigation continued into all possible causes of degraded flow until it was discovered on July 12, 1989 that the grill/registers mounted at the end of each room cooler duct were partially closed, restricting air flow.
No evidence currently exists of any activity during this outage which could have caused the partial closure of the grills/registers.
No previous maintenance (preventative or corrective) or modification activities on the 'grills/registers could be identified.
The condition of the gri lls/registers tended to indicate a long 'term degradation; therefore, TVA concluded that this condition could have existed during operation.
Given this determination, TVA considered the problem reportable at this point, and a report was promptly made.
Because the degraded flow condition initially appeared to have occurred during this current plant outage, TVA did not do a 10CFR50.73 report within 30 days of the discovery of the low flow condition.
Sufficient information was not available prior to July 12, 1989, to support the conclusion that the plant may have operated previously with the low flow condition.
'i
Enclosure 1
Page 7 of 7 3.
Corrective Ste s Which Have Been Taken and Results Achieved 4,
On July 12,
- 1989, TVA determined that the RHR and CS equipment area coolers may have operated with degraded airflow rates during previous plant operation.
TVA submitted a four-hour ENS phone report of this condition on that date at 2053 hours0.0238 days <br />0.57 hours <br />0.00339 weeks <br />7.811665e-4 months <br />.
Subsequently, on August 11,
- 1989, TVA submitted an LER (50-259/89018) which provided additional information and committed to corrective actions concerning this condition.
Corrective Ste s Which Will Be Taken To Avoid Further Violations
" 5.
For future events, BFN will advise NRC by letter within 30 days in cases where it is determined through subsequent evaluation that an LER is not required to be submitted under 10 CFR 50.73.
This will serve to improve communications between BFN and NRC on those items which are conservatively made the subject of a four-hour report but are later determined not to be reportable.
Please note that this is not intended to include reports made to NRC which do not require a followup 10 CFR 50.73 report, such as courtesy red phone calls, calls made to NRC when Emergency Notification System equipment is temporarily out of service, or calls made to NRC when notification is made to another government agency.
Date When Full Com liance Wi 1.1 Be Achieved Full compliance has been achieved.
'0 ENCLOSURE 2
- RESPONSE NRC INSPECTION REPORT NOS. 50-259/89-27, 50-260/89-27, AND 50-296/89-27 LETTER FROM B. A. NILSON TO 0.
D.
KINGSLEY DATED AUGUST 8, 1988 LIST OF COMMITMENT VIOLATION B For future events, BFN will advise NRC by letter within 30 days in cases where it is determined through subsequent evaluation that an LER is not required to be submitted under 10 CFR 50.73.