ML18038B519
| ML18038B519 | |
| Person / Time | |
|---|---|
| Site: | Browns Ferry  |
| Issue date: | 11/02/1995 |
| From: | Hebdon F Office of Nuclear Reactor Regulation |
| To: | |
| Shared Package | |
| ML18038B520 | List: |
| References | |
| DPR-33-A-227, DPR-52-A-242, DPR-68-A-201 NUDOCS 9511090237 | |
| Download: ML18038B519 (57) | |
Text
1P,R REG0 (4
~o Cy 0O C
Vh vk t
Yg
~o~
++**+
UNITED STATES NUCLEAR REGULATORY COMMISSION WASHINGTON, O.C. 2055&0001 TENNESSEE VALLEY AUTHORITY DOCK T NO. 50-259 BROWNS FERRY NUCLEAR PLANT U IT AMENDMENT TO FACI ITY OPERATING L
C NS Amendment No. 227 License No.
DPR-33 1.
The Nuclear Regulatory Commission (the Commission) has found that:
A.
The application for amendment by Tennessee Valley Authority (the licensee) dated January 4,
- 1995, complies with the standards and requirements of the Atomic Energy Act of 1954, as amended (the Act),
and the Commission's rules and regulations set forth in 10 CFR Chapter I; B.
The facility will operate in conformity with the application, the provisions of the Act, and the rules and regulations of the Commission; C.
There is reasonable assurance (i) that the activities authorized by this amendment can be conducted without endangering the health and safety of, the public, and (ii) that such activities will be conducted in compliance with the Commission's regulations; D.
The issuance of this amendment will not be inimical to the common defense and security or to the health and safety of the public; and E.
The issuance of this amendment is in accordance with 10 CFR Part 51 of the Commission's regulations and all applicable requirements have been satisfied.
9511090237 951102 PDR ADOCK 05000259 P
2.
Accordingly, the license is amended by changes to the Technical Specifications as indicated in the attachment to this license amendment and paragraph 2.C.(2) of Facility Operating License No.
DPR-33 is hereby amended to read as follows:
3.
(2)
Technical S ecifications The Technical Specifications contained in Appendices A and B,
as revised through Amendment No. 227, are hereby, incorporated in the license.
The licensee shall operate the facility in accordance with the Technical Specifications.
This license amendment is effective as of its date of issuance and shall
~ be implemented within 30 days from the date of issuance.
FOR THE NUCLEAR REGULATORY COMMISSION rP Frederick J.
Hebd n, Director Project Directorate II-4 Division of Reactor Projects I/II Office of Nuclear Reactor Regulation
Attachment:
Changes to the Technical Specifications Date of Issuance:
November 2, 1995
TO C
NS N
M T N 227 C
T Revise the Appendix A Technical Specifications by removing the pages identified below and inserting the enclosed pages.
The revised pages are identified by the captioned amendment number 'and contain marginal lines indicating the area of change.
- Overleaf pages are provided to maintain document completeness.
RENOVE 3.1/4.1-3 3.1/4.1-4 3.1/4.1-5 3.1/4.1-6 3.1/4.1-7 3.1/4.1-8 3.1/4.1-9 3.1/4.1-10 3.1/4.1-16 3.1/4.1-17 3.1/4.1-18 3.1/4.1-19 INSERT 3.1/4.1-3 3.1/4.1-4*
3.1/4.1-5*
3.1/4.1-6 3.1/4.1-7 3.1/4.1-8 3.1/4.1-9*
3.1/4.1-10 3.1/4.1-16 3.1/4.1-17 3.1/4.1-18*
3.1/4.1-19
- TABLE 3.1.A REACTQR PRQTECT ION SYSTEM (SCRAH) IHSTRUMENTATIOH REi)UIREMENTS Hin. No. of Operable Instr.
Channels Per Trip Hode S~itch in Shutdown N i F
Shut-Startup/
~d Q~~ Q~~ndb X
X X
X 1.A Manual Scram IRH (16)
High Flux Inoperative
<120/125 Indicated on scale X(22)
X X(22)
X (5)
(5) 1.A 1.A 1.A 4J-2 2
2 I
2 APRH (16) (24) (25)
High Flux (Flow Biased)
High Flux (Fixed Trip)
High Flux Inoperative Downscale High Reactor.
Pressure See Spec. 2.1.A.l 120K
< 15K rated power (13) 2, 3 Indicated on Scale g 1055 psig X(21)
X(17)
X(21) '(17)
(11)
(11)
X(10)
X X
1.A or 1.8 X
1.A or 1.8 (15) 1.A X
1.A X(12) 1.A or 1.8 1.A High D~ell Pressure (14)
< 2.5 psig Reactor Low Water Level (14)
> 538" above vessel zero X(8)
X(8) 1.A 1.A o
TABLE 3 1 A REACTOR PROTECTION SYSTEH (SCRAH)
INSTRUHENTATION RE(UIREHENTS Hin. No. of Operable Instr.
Channel s Per Trip m
1 2
n n
Tri L v 1
Se in Shut-
~dwn d
n Mhi h Fun ion Startup/
~~7 H~~i~ndb
~Rn
~Ai ~nl High Mater Level in Nest Scram Discharge Tank (LS&5-45A-0)
< 50 Gallons X(2)
X(2) 1.A High Mater Level in East Scram Discharge Tank (LS-85-45E-H)
Hain Steam Line Isolation Valve Closure Turbine Control Valve Fast Closure or Turbine Trip Turbine Stop Valve Closure Turbine First Stage Pressure Permissive
< 50 Gallons
<10K Valve Closure
>550 psig
<lOX Valve Closure not >154 psig X(2)
X(2)
X X(3)(6)
X(3)(6)
X(18)
X(18)
X 1.A X(6) 1.A or 1.C X(4) 1.A or 1.0 X(4) 1.A or 1.0 X(18) 1.A or 1.D (19)
M M
P NO ES FOR TABLE
.1.A There shall be two OPERABLE or tripped trip systems for each function.
If the minimum number of OPERABLE instrument channels per trip system cannot be met for one trip system, trip the inoperable channels or entire trip system within one hour, or, alternatively, take the below listed action for that trip function. If the minimum number of OPERABLE instrument channels cannot be met by either trip system, the appropriate
-action listed below (refer to right-hand column of Table) shall b taken.
An inoperable channel need not be placed in the tripped condition s
a e
i where this would cause the trip function to occur.
In these case th noperable channel shall be restored to OPERABLE status within two hours, or take the action listed below for that trip function.
A.
Initiate insertion of OPERABLE rods and complete insertion f 11 0
ono a
PERABLE rods within four hours.
In refueling mode, suspend all operations involving core alterations and fully insert all OPERABLE control rods within one hour.
B.
Reduce power level to IRM range and place mode switch in the STARTUP/HOT Standby position within 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br />.
C.
Reduce turbine load and close main steam line isolation valves within 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br />.
D.
Reduce power to less than 30 percent of rated.
2.
The scram discharge volume high water level bypass may be used in SHUTDOWN or REFUEL to bypass the scram discharge volume high-high water level scram signal in order to reset the reactor protection system trip.
A control rod withdraw block is present when this scram signal is bypassed.
3.
Bypassed if reactor pressure is less than 1055 psig and mode switch not in RUN.
4.
Bypassed when turbine first stage pressure is less than 154 psig.
5.
IRMs are bypassed when APRMs are onscale and the reactor mode switch is in the RUN position.
6.
The design permits closure of any two lines without a scram being initiated.
I 7.
When the reactor is subcritical and the reactor water temperature is less than 212 F, only the following trip functions need to be OPERABLE:
f A.
Mode switch in shutdown B.
Manual scram C.
High flux IRM BFN Unit 1 3.ll4.1-5 AMENDMERTNQ. 2 2 3
NOTES FOR TABL
.1.A (Cont'd)
D.
Scram discharge volume high level E.
Hot required to be OPERABLE when primary containment integrity is not required.
9.
(Deleted) 10.
Hot required to be OPERABLE when the reactor pressure vessel head is not bolted to the vessel.
The APRM downscale trip function is only active when the reactor mode switch is in RUH.
12.
The APRM downscale trip is automatically bypassed when the IRM instrumentation is OPERABLE and not high.
13.
Less than 14 OPERABLE LPRMs will cause a trip system trip.
14.
Channel shared by Reactor Protection System and Primary Containment and Reactor Vessel Isolation Control System.
A channel failure may be a channel failure in each system.
15.
The APRM 15 percent scram is bypassed in the RUH Mode.
16.
Channel shared by Reactor Protection System and Reactor Manual Control System (Rod Block Portion).
A channel failure may be a channel failure in each system. If a channel is allowed to be inoperable per Table 3.1.A, the corresponding function in that same channel may be inoperable in the Reactor Manual Control System (Rod Block).
Hot required while performing low power physics tests at atmospheric pressure during or after refueling at power levels not to exceed 5 MW(t).
18.
This function must inhibit the automatic bypassing of turbine control valve fast closure or turbine trip scram and turbine stop valve closure scram whenever turbine first state pressure is greater than or equal to 154 psig.
19.
Action 1.A or 1.D shall be taken only if the permissive fails in such a manner to prevent the affected RPS logic from performing its intended function.
Otherwise, no action is required.
20.
(Deleted) 21.
Only required with any control rod withdrawn from a core cell containing one or more fuel assemblies.
The APRM High Flux and Inoperative Trips do not have to be OPERABLE if the Source Range Monitors are connected to give a noncoincidence, High Flux scram, at 5 x 10 cps.
The SRMs shall be OPERABLE per Specification 3.10.B.l.
The removal of eight (8) shorting links is required to provide noncoincidence high-flux scram protection from the Source Range Monitors.
BFH Unit 1
,3.1/4.1-6 AMZxD1KZZ ?>0.
227
NOTES FOR T BLE 1
(Cont'd) 22.
Only required with any control rod withdrawn from a core cell containing
,one or more fuel assemblies.
For the IRM High Flux Trip Function, the three required IRMs per trip channel is not required if at least four IRMs (one in each core quadrant) are connected to give a noncoincidence, High Flux scram.
The removal of four (4) shorting links is required to provide noncoincidence high-flux scram protection from the IRMs.
23.
A channel may be placed in an inoperable status for up to 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> for required surveillance without placing the trip system in the tripped condition provided at least one OPERABLE channel in the same trip system is monitoring that parameter.
24.
The Average Power Range Monitor scram function is varied (Reference Figure 2.1-1) as a function of recirculation loop flow (W).
The trip setting of this function must be maintained in accordance with 2.1.A.
25.
The APRM flow-biased neutron flux signal is fed through a time constant circuit of approximately 6 seconds.
This time constant may be lowered or equivalently removed (no time delay) without affecting the operability of the flow-bi,ased neutron flux trip channels.
The APRM fixed high neutron flux signal does not incorporate the time constant but responds directly to instantaneous neutron flux.
BFH Unit 1 3.1/4.1-7 IJ&iDiKllTNO. 227
TABLE 4.1.A REACTOR PROTECTION SYSTEH (SCRAH)
INSTRUHENTATION FUNCTIONAL TESTS HININN FUNCTIONAL TEST FRE(UENCIES FOR SAFETY INSTR. AND CONTROL CIRCUITS ni Hode Switch in Shutdown Hanual Scram IRH High Flux Inoperative APRH High Flux (151 Scram)
High Flux (Flow Biased)
High Flux (Fi xed Trip)
Inoperative Downscale Flow Bias High Reactor Pressure High Drywell Pressure Reactor Low Mater Level A
Place Hode Switch in Shutdown A
Trip Channel and Alarm Trip Channel and Alarm (4)
Trip Channel and Alarm (4)
Trip Output Relays (4)
Trip Output Relays"(4)
Trip Output Relays (4)
Trip Output Relays (4)
Trip Output Relays (4)
(6)
Trip Channel and Alarm Trip Channel and Alarm Trip Channel and Alarm Each Refueling Outage Every 3 Honths Once/Meek (9)
Once/Meek (9)
Once/Meek (9)
Once/Meek Once/Meek Once/Meek Once/Meek (6)
Once/Honth (1)
Once/Honth (1)
Once/Honth (1)
O
garou )~2 High Water Level in Scram Oischarge Tank Float Switches (LS-85-45C-F)
A Electronic Level Switches (LS-85%5A, 8, G, H)
Hain Steam Line Isolation Valve Closure Turbine Control Valve Fast Closure or turbine trip Turbine First Stage Pressure Permissive (PT-1-81A and B, PT-1-91A and 8)
Turbine Stop Valve Closure TABLE 4.1.A (Continued)
Fun i nl T
Trip Channel and Alarm Trip Channel and Alarm Trip Channel and Alarm Trip Channel and Alarm Trip Channel and Alarm (7)
Trip Channel and Alarm inieum Fr u nc 3
Once/Honth Once/Honth Once/3 Months (8)
Once/Honth (1)
Every three months Once/Honth (1)
NOTES FOR ABLE 4 1
1.
Initially the minimum frequency for the indicated tests shall be once per
'month.
2.
A description of the three groups is included in the Bases of this specification.
3.
Functional tests are not required vhen the systems are not required to be operable or are operating (i.e., already tripped). If tests are missed, they shall be performed prior to returning the systems to an operable status.
4.
This instrumentation is exempted from the instrument channel test definition.
This instrument channel functional test vill consist of i+ecting a simulated electrical signal into the measurement channels.
5.
(Deleted) 6.
The functional test of the flov bias netvork is performed in accordance vith Table 4.2.C.
7.
Functional test consists of the i+ection of a simulated signal into the electronic trip circuitry in place of the sensor signal to verify operability of the trip end alarm functions.
8.
The functional test frequency decreased to once/3 months to reduce challenges to relief valves per HUREG 0737, Item II.K.3.16.
9.
Hot required to be performed vhen entering the STARTUP/HOT STANDBY Mode from RUH Mode until 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> after entering, the STARTUP/HOT STANDBY Mode.
BFH Unit 1 3.1/4.1-10 ALES'JDIKNT NO. 227
3.1 BASES (Cont'e accommodated which would result in slow scram times or partial control rod insertion.
To preclude this occurrence, level switches have been provided in the instrument volume which alarm and scram the reactor when the volume of water reaches 50 gallons.
As indicated above, there is sufficient volume in the piping to accommodate the scram without impairment of the scram times or amount of insertion of the control rods.
This function shuts the reactor down while sufficient volume remains to accommodate the discharge water and precludes the situation in which a scram would be required but not be able to perform its function adequately.
A source range monitor (SRM) system is also provided to supply additional.
neutron level information during startup but has no scram functions.
Reference Section 7.5.4 FSAR.
Thus, the IRM is required in the REFUEL (with any control rod withdrawn from a core cell containing one or more fuel assemblies) and STARTUP Modes.
In the power range the APRM system provides required protection.
Reference Section 7.5.7 FSAR.
Thus, the IRM System is no't required in the RUH mode.
The APRMs and the IRMs provide adequate coverage in the startup and intermediate range.
The high reactor pressure, high drywell pressure, reactor low water level and scram discharge volume high level scrams are required for STARTUP and RUH modes of plant operation.
They are, therefore, required to be operational for these modes of reactor operation.
Because of the APRM downscale limit of g 3 percent when in the RUH mode and high level limit of gl5 percent when in the STARTUP Mode, the transition between the STARTUP and RUH Modes must be made with the APRM instrumentation indicating between 3 percent and 15 percent of rated power or a control rod scram will occur.
In addition, the IRM system must be indicating below the High Flux setting (120/125 of scale) or a scram will occur when in the STARTUP Mode,.
For normal operating conditions, these limits provide assurance of overlap between the IRM system and APRM system so that there are no "gaps" in the power level indications (i.e., the power level is continuously monitored from beginning of startup to full power and from full power to shutdown).
When power is being reduced, if a transfer to the STARTUP mode is made and the IRMs have not been fully inserted (a maloperational but not impossible condition) a control rod block immediately occurs so that reactivity insertion by control rod withdrawal cannot occur.
BFH Unit 1 3.1/4.1-16 Atii2RI&Zi"tO. 227
4.1 BASES The minimum functional testing frequency used in this specification is
, based on a reliability analysis using the concepts developed in reference (1).
This concept was specifically adapted to the one-out-of-tvo taken tvice logic of the reactor protection system.
The analysis shove that the sensors are primarily responsible for the reliability of the reactor protection system.
This analysis makes use of "unsafe failure" rate experience at conventional and nuclear power plants in a reliability mode1 for the system.
An "unsafe failure" is defined as one vhich negates channel operability and which, due to its nature, is revealed only when the channel is functionally tested or attempts to respond to a real signal.
Failure such as'lown fuses, ruptured bourdon tubes, faulted.
amplifiers, faulted cables, etc., vhich result in "upscale" or "downscale" readings on the reactor instrumentation are "safe" and villbe easily recognized by the operators during operation because they are revealed by an alarm or a scram.
The channels listed in Tables 4.1.A and 4.1.B are divided into three groups for functional testing.
These are:
A.
On-Off sensors that provide a scram trip function.
B.
Analog devices coupled with bistable trips that provide a scram function.
C.
Devices vhich only serve a useful function during some restricted mode of operation, such as STARTUP, or for which the only practical test is one that can be performed at shutdown.
The sensors that make up group (A) are specifically selected from among the vhole family of industrial on-off sensors that have earned an excellent reputation for reliable operation.
During design, a goal of 0.99999 probability of success (at the 50 percent confidence level) vas
'dopted to assure that a balanced and adequate design is achieved.
The probability of success is primarily a function of the sensor failure rate and the test interval.
A three-month test interval vas planned for group (A) sensors.
This is in keeping vith good operating practices, and satisfies the design goal for the logic configuration utilized in the Reactor Protection System.
To satisfy the long-term ob)ective of maintaining an adequate level of safety throughout the plant lifetime, a minimum goal of 0.9999 at the 95 percent confidence level is proposed.
With the (1-out-of-2) X (2) logic, this requires that each sensor have an availability of 0.993 at the 95 percent confidence level.
This level of availability may be maintained by adgusting the test interval as a function of the observed failure history.l 1.
Reliability of Engineered Safety Features as a Function of Testing Frequency, I. M. Jacobs, "Huclear Safety," Vol. 9, Ho. 4, July-August, 1968, pp. 310-312.
BFH Unit 1 3.1/4.1-17 411ZvDi~~
'i0
~"7
4.1 BASES (Cont'd)
To facilitate the implementation of this technique,.Figure 4.1-1 is unprovided to indicate an appropriate trend in test interval.
The procedure is as follows:
1.
Like sensors are pooled into one group for the purpose of data acquisition.
2.
The factor M is the exposure hours and is equal to the number of sensors in a group, n, times the elapsed time T (M = nT).
3.
The accumulated number of unsafe failures is plotted as an ordinate against M as an abscissa on Figure 4.1-1.
4.
After a trend is established, the appropriate monthly test interval to satisfy the goal will be the test interval to the left of the plotted points.
5.
A test interval of one month will generally be used initially until a trend is established.
Group (B) devices utilize an analog sensor followed by an amplifier and a bistable trip circuit.
The sensor and amplifier are active components and a failure is almost always accompanied by an alarm and an indication of the source of trouble.
In the event of failure, repair or substitution can start immediately.
An "as-is" failure is one that "sticks" mid-scale and is not capable of going either up or down in response to an out-of-limits input.
This type of failure for analog devices is a rare occurrence and is detectable by an operator who observes that one signal does not track the other three.
For purpose of analysis, it is assumed that this rare failure will be detected within two hours.
The bistable trip circuit which is a part of the Group (B) devices can sustain unsafe failures which are revealed only on'est.
Therefore, it is necessary to test them periodically.
A study was conducted of the instrumentation channels included in the Group (B) devices to calculate their "unsafe" failure rates.
The analog devices (sensors and amplifiers) are predicted to have an unsafe failure rate of less than 20 x 10 failure/hour.
The bistable trip circuits are predicted to have unsafe failure rate of less than 2 x 10 6
failures/hour.
Considering the two hour monitoring interval for the analog devices as assumed
- above, and a weekly test interval for the bistable trip circuits, the design reliability goal of 0.99999 is attained with ample margin.
The bistable devices are monitored during plant operation to record their failure history and establish a test interval using the curve of Figure 4.1-1.
There are numerous identical bistable devices used throughout the plant's instrumentation system.
Therefore, significant data on the failure rates for the bistable devices should be accumulated rapidly.
BFN Unit 1 3.1/4.1-18
4.1 BASES (Cont The frequency of calibration of the APRN Flow Biasing Hetwork has been established as each refueling outage; There are several instruments which
'ust be calibrated and it will take several hours to perform the calibration of the entire network.
While the calibration is being performed, a zero flow signal will be sent to half of the APRMs resulting in a half scram and rod block condition.
Thus, if the calibration were performed during operation, flux shaping would not be possible.
Based on exper ence at other generating stations, drift of instruments, such as those in the Flow Biasing Hetwork, is not significant and therefore, to avoid spurious
- scrams, a calibration frequency of each refueli established.
e ng outage s
Group (C) devices are active only during a given portion of the operational cycle.
For example, the XRM is active during the STARTUP/HOT STAHDBY and REFUEL (with any control rod withdrawn from a core cell containing one or more fuel assemblies)
Modes and inactive during full-power operation.
Thus, the only test that is meaningful is the one performed prior to entering the applicable Mode (i.e., the tests that are performed prior to use of the instrument).
Since testing of the IRM functions is not practical in the RUH Mode, testing is not, required to be completed until 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> after entering the STARTUP/HOT STAHDBY Mode from the RUH Mode.
Twelve hours is based on operating experience and in consideration of providing reasonable time in which to complete the teat.
Calibration frequency of the instrument channel is divided into two groups.
These are as follows:
1.
Passive type indicating devices that can be compared with like units on a continuous basis.
2.
Vacuum tube or semiconductor devices and detectors that drift or.
lose sensitivity.
Experience with passive type instruments in generating stations and substations indicates that the specified calibrations are adequate.
For those devices which employ amplifiers, etc., drift specifications call for drift to be less than 0.4 percent/month; i.e., in the period of a month a drift of 4 percent would occur and thus providing for adequate margin.
For the APRM system drift of electronic apparatus is not the only consideration in determining a calibration frequency.
Change in power distribution and loss of chamber sensitivity dictate a calibration every seven days.
Calibration on this frequency assures plant operation at or below thermal limits.
A comparison of Tables 4.1.A and 4.1.B indicates that two instrument channels have been-included in the latter table.
These are:
mode switch in SHUTDOWH and manual scram.
All of the devices or sensors associated with these scram functions are simple on-off switches and, hence, calibration during operation is not applicable, i.e., the switch is either on or off.
BFH Unit 1 3.1/4.1-19 KKNOI~~ 1IO, 227
gg8 RK0(
c~
~o Cy 0O I
0
/J
~O
++*++
UNITED STATES NUCLEAR REGULATORY COMMISSION WASHINGTON> D.C. 2055&0001 TENNESSE VA Y AUTHORITY DOCKET NO. 50-260 BROWNS.FERRY NUCLEAR PLANT UNIT 2 AMENDMENT TO FACILITY OPERATING LICENS Amendment No. 242 License No.
DPR-52 The Nuclear Regulatory Commission (the Commission) has found that:
A.
The application for amendment by Tennessee Valley Authority (the licensee) dated January 4 1995, complies with the standards and requirements of the Atomic Energy Act of 1954, as amended (the Act),
and the Commission's rules and regulations set forth in 10 CFR Chapter I; B.
The facility will operate in conformity with the application, the provisions of the Act, and the rules and regulations of the Commission; C.
There is reasonable assurance (i) that the activities authorized by this amendment can be conducted without endangering the health and safety of the public, and (ii) that such activities will be conducted in compliance with the Commission's regulations; D.
The issuance of this amendment will not be inimical to the common defense and security or to the health and safety of the public; and E.
The issuance of this amendment is in accordance with 10 CFR Part 51 of the Commission's regulations and all applicable requirements have been satisfied.
2.
Accordingly, the license is amended by changes to the Technical Specifications as indicated in the attachment to this license amendment and paragraph 2.C.(2) of Facility Operating License No.
DPR-52 is hereby amended to read as follows:
3.
(2)
Technical S ecifications The Technical Specifications contained in Appendices A and B,
as revised through Amendment No. 242, are hereby incorporated in the license.
The licensee shall operate the facility in accordance with the Technical Specifications.
This license amendment is effective as of its date of issuance and shall be implemented within 30 days from the date of issuance.
FOR THE NUCLEAR REGULATORY COMMISSION
.)
Frederick J. Hebd, Director Project Directorate II-4 Division of Reactor Projects I/II Office of Nuclear Reactor Regulation
Attachment:
Changes to the Technical Specifications Date of Issuance:
Novenber 2, 1995
T M
TO LI NS AH NDNENT NO FAC ITY OPERATING LICENSE NO.
DPR-52 DOCK N
. 50- 60 Revise the Appendix A Technical Specifications by removing the pages identified below and inserting the enclosed pages.
The revised pages are identified by the captioned amendment number and contain marginal lines indicating the area of change.
- Overleaf and **spillover pages are provided to maintain document completeness.
RENOVE 3.1/4.1-3 3.1/4.1-4 3.1/4.1-5 3.1/4.1-6 3.1/4.1-7 3.1/4.1-8 3.1/4.1-9 3.1/4.1-10 3.1/4.1-16 3.1/4.1-17 3.1/4.1-18 3.1/4.1-19 3.1/4.1-20 3.1/4.1-21 INSERT 3.1/4.1-3 3.1/4.1-4*
3.1/4.1-5*
3.1/4.1-6 3.1/4.1-7 3.1/4.1-8 3.1/4.1-9*
3.1/4.1-10 3.1/4.1-16 3.1/4.1-17 3.1/4.1-18*
3.1/4.1-19 3.1/4.1-20**
3.1/4.1-21*
TABLE 3.1.A REACTOR PROTECTION SYSTEM (SCRAM) INSTRUMENTATION REQUIREMENTS Min. No. of Operable Instr.
Channels Per Trip m
1 2
T i n
Mode Switch in Shutdown Manual Scram IRM (16)
High Flux Inoperative
<120/125 Indicated on scale Shut-Md inwhihFn in Startup/
~RgRl ~7 Q~~andb X(22)
X X(22)
X (5)
(5)
~Ai ~nl 1.A 1.A 1.A 1.A APRM (16) (24) (25)
High Flux (Flow Biased)
High Flux (Fixed Trip)
High Flux Inoperative Downscale See Spec. 2.1.A.1
< 120K
< lSX rated po~er (13)
> 3 Indicated on Scale X(21)
X(17)
X(21)
X(17)
(11)
(11)
X 1.A or 1.8 X
1.A or 1.8 (15) 1.A X
1.A X(12) 1.A or 1.8 High Reactor Pressure
< 1055 psig (PIS-3-22AA,BB,C,D)
X(10)
X 1.A High Orywell Pressure (14)
< 2.5 psig (PIS&4-56 A-0)
Reactor Low Water Level (14)
> 538" above (LIS-3-203 A-D) vessel zero X(8)
X(8) 1.A 1.A
- TABLE 3.1.A REACTOR PROTECTION SYSTEM (SCRAH)
INSTRUHENTATION REQUIREMENTS Hin. No. of Operable Instr.
Channels Per Trip S stem 1
23 2
Tri Fun ion High Mater Level in West Scram Discharge Tank (LS-85-45A-D)
Tri Level Set in
< 50 Gallons Modes in which Function Mu t Be 0~areal e Shut-Startup/
~eefuet 7
H~et Standb Run X(2)
X(2)
A ion 1
1.A High Water Level in East Scram Discharge Tank (LS-85-45E-H)
Hain Steam Line Isolation Valve Closure Turbine Control Valve Fast Closure or Turbine Trip Turbine Stop Valve Closure Turbine First Stage Pressure Permissive (P IS-1-81A8 8, P IS-1-91AK8)
Low Scram Pilot Air Header Pressure
< 50 Gallons
<10K Valve Closure
>550 psig
<lOX Valve Closure not >154 psig
>50 psig X(2)
X(2)
X(18)
X(18)
X(2)
X(2)
X 1.A X(6) 1.A or 1.C X(4) 1.A or 1.0 X(4) 1.A or 1.D X(18) 1.A or 1.0 (19) 1.A
NOTES FOR TABLE
.1-A There shall be two OPERABLE or tripped trip systems for each function.
If the minimum number of OPERABLE instrument channels per trip system cannot be met for one trip system, trip the inoperable channels or entire trip system within one hour, or, alternatively, take the below listed action for that trip function. If the minimum number of OPERABLE instrument channels cannot be met by either trip system, the appropriate action listed below (refer to right-hand column of Table) shall be taken.
An inoperable channel need not be placed in the tripped condition where this would cause the trip function to occur.
In these
- cases, the inoperable channel shall be restored to OPERABLE status within two hours, or take the action listed below for that trip function.
A.
Initiate insertion of OPERABLE rods and complete insertion of all OPERABLE rods within four hours.
In refueling mode, suspend all operations involving core alterations and fully insert all OPERABLE control rods within one hour.
B.
Reduce power level to IRM range and place mode switch in the STARTUP/HOT Standby position within 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br />.
C.
Reduce turbine load and close main steam line isolation valves within 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br />.
D.
Reduce power to less than 30 percent of rated.
2.
The scram discharge volume high water level bypass may be used in SHUTDOWN or REFUEL to bypass both the scram discharge volume high-high water level and scram pilot air header low pressure scram signals in order to reset the reactor protection system trip.
A control rod withdraw block is present when these scram signals are bypassed.
3 ~
(Deleted)
Bypassed when turbine first stage pressure is less than 154 psig.
5.
IRMs are bypassed when APRMs are onscale and the reactor mode switch is in the RUN position.
6.
The design permits closure of any two lines without a scram being initiated.
7 ~
When the reactor is subcritical and the reactor water temperature is less than 212 F, only the following trip functions need to be OPERABLE:
A.
Mode switch in SHUTDOWN B.
Manual scram C.
High flux IRM D.
Scram discharge volume high level BFH Unit 2 3.1/4.1-5 AMENOMgfFgg. 23 g
NOTES FOR TABLE A (Cont'd)
E.
Scram pilot air header low pressure 8.
9.
Not required to be OPERABLE when primary containment integrity is not required.
(
(Deleted) 10.
Not required to be OPERABLE when the reactor pressure vessel head is not bolted to the vessel.
The APRM downscale trip function is only active when the reactor mode switch is in RUN.
12.
The APRM downscale trip is automatically bypassed when the IRM instrumentation is OPERABLE and not high.
13.
Less than 14 OPERABLE LPRMs will cause a trip system trip.
14.
15.
Channel shared by Reactor Protection System and Primary Containment and Reactor Vessel Isolation Control System.
A channel failure may be a channel failure in each system.
The APRM 15 percent scram is bypassed in the RUN Mode.
16.
Channel shared by Reactor Protection System and Reactor Manual Control System (Rod Block Portion).
A channel failure may be a channel failure in each system. If a channel is allowed.to be inoperable per Table 3.1.A, the corresponding function in that same channel may be inoperable in the Reactor Manual Control System (Rod Block).
17.
Not required while performing low power physics tests at atmospheric pressure during or after refueling at power levels not to exceed 5 MH(t).
18.
This function must inhibit the automatic bypassing of turbine control valve fast closure or turbine trip scram and turbine stop valve closure scram whenever turbine first stage pressure is greater than or equal to 154 psig.
19.
Action 1.A or 1.D shall be taken only if the permissive fails in such a manner to prevent the affected RPS logic from performing its intended function.
Otherwise, no action is required.
20.
(Deleted) 21.
Only required with any control rod withdrawn from a core cell containing one or more fuel assemblies.
The APRM High Flux and Inoperative Trips do not have to be OPERABLE if the Source Range Monitors are connected to give a noncoincidence, High Flux scram, at 5 x 10 cps.
The SRMs shall be OPERABLE per Specification 3.10.B.l.
The removal of eight (8) shorting links is required to provide noncoincidence high-flux scram protection from the Source Range Monitors.
BFN Unit 2 3.1/'4.1-6 AilEK1'F2% i<0. 242
NOTES FOR TABLE A (Cont'd) 22 ~
Only required with any control rod withdrawn from a core cell containing one or more fuel assemblies.
For the IRM High Flux Trip Function, the three required IRMs per trip channel is not required if at least four H
IRMs (one in each core quadrant) are connected to give a noncoincid o nc
- ence, igh Flux scram.
The removal of four (4) shorting links is required to provide noncoincidence high-flux scram protection from the IRMs.
23.
A channel may be placed in an INOPERABLE status for up to 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> for required surveillance without placing the trip system in the tripped condition provided at least one OPERABLE channel in the same trip system is monitoring that parameter.
24.
The Average Power Range Monitor scram function is varied (Reference Figure 2.1-1) as a function of recirculation loop flow (W).
The trip setting of this function must be maintained in accordance with 2.1.A.
25.
The APRM flow-biased neutron flux signal is fed through a time constant circuit of approximately 6 seconds.
This time constant may be lowered or equivalently removed (no time delay) without affecting the operability of the flow-biased neutron flux trip channels.
The APRM fixed high neutron flux signal does not incorporate the time constant but responds directly to instantaneous neutron flux.
BFH Unit 2 zmRlKRP~?40.
242
Hode Switch in Shutdown Hanual Scram IRH TABLE 4.1.A REACTOR PROTECTION SYSTEH (SCRAH)
INSTRUHENTATION FUNCTIONAL TESTS HINIHUH FUNCl'IONAL TEST FREQUENCIES FOR SAFETY INSTRUHENT AND CONTRQL CIRCUITS Place Hode Switch in Shutdown Each Refueling Outage A
Trip Channel and Alarm Every 3 Honths High Flux Inoperative APRH High Flux (15% Scram)
High Flux (Flow Biased)
High Flux (Fixed Trip)
Inoperative Downscale Flow Bias High Reactor Pressure (PIS-3-22AA, BB, C, D).
High Drywell Pressure (PIS-64-56 A-D)
Reactor Low Mater Level (LIS-3-203 A-D)
Trip Channel and Alarm (4)
Trip Channel and Alarm (4)
Trip Output Relays (4)
Trip Output Relays (4)
Trip Output Relays (4)
Trip Output Relays (4)
Trip Output Relays (4)
(6)
Trip Channel and Alarm (7)
Trip Channel and Alarm (1)
Trip Channel and Alarm (1)
Once/Meek (9)
Once/Meek (9)
Once/Meek (9)
Once/Meek Once/Meek Once/Meek Once/Meek (6)
Once/Honth Once/Honth Once/Honth
Grou 2
High Water Level in Scram Discharge Tank Float Switches (LS-85-45C-F)
A Electronic Level Switches (LS-85-45A, 8, G, H)
Hain Steam Line Isolation Valve Closure Turbine Control Valve Fast Closure or turbine trip Turbine First Stage Pressure Permissive (PIS-1-81A and 8, PIS-1-91A and 8)
Turbine Stop Valve Closure Low Scram Pilot Air Header Pressure (PS 85-35 Al, A2, Bl, 5 82)
TABLE 4.1.A (Continued)
Func ional Test Trip Channel and Alarm Trip Channel and Alarm (7}
Trip Channel and Alarm Trip Channel and Alarm Trip Channel and Alarm (7}
Trip Channel and Alarm Trip Channel and Alarm Hinsmum Fre uenc 3
Once/Honth Once/Honth Once/3 Honths (8)
Once/Honth (1)
Every three months Once/Honth (1)
Once/6 Honths t4
NOTES FOR TABLE 4 1 A 1.
Initially the minimum frequency for the indicated tests shall be once per month.
2 ~
A description of the three groups is included in the Bases of this specification.
3.
Functional tests are not required when the systems are not required to be OPERABLE or are operating (i.e., already tripped). If tests are missed, they shall be performed prior to returning the systems to an OPERABLE status.
4.
This instrumentation is exempted from the instrument channel test definition.
This instrument channel functional test will consist of injecting a simulated electrical signal into the measurement channels.
5.
(Deleted) 6.
The functional test of the flow bias network is performed in accordance with Table 4.2.C.
7.
Functional test consists of the injection of a simulated signal into the electronic trip circuitry in. place of the sensor signal to verify operability of the trip end alarm functions.
8.
The functional test frequency decreased to once every three months to reduce challenges to relief valves per HUREG 0737, Item II.K.3.16.
9.
Hot required to,be performed when entering the STARTUP/HOT STAHDBY Mode from RUH Mode until 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> after entering the STARTUP/HOT STAHDBY Mode.
BFH Unit 2 3.1/4.1-10 AHBtDIIENT NO. 242
3.1 BASES (Cont'd be accommodated which would result in slow scram times or partial control rod insertion.
To preclude this occurrence, level switches have been provided in the instrument volume which alarm and scram the reactor when the volume of water reaches 50 gallons.
As indicated above, there is sufficient volume in the piping to accommodate the scram without impairment of the scram times or amount of insertion of the control rods.
This function shuts the reactor down while sufficient volume remains to accommodate the discharge water and precludes the situation in which a scram would be required but not be able to perform its function adequately.
A source range monitor (SRM) system is also provided to supply additional neutron level information during startup but has no scram functions.
Reference Section 7.5.4 FSAR.
Thus, the IRM is required in the REFUEI (with any control rod withdrawn from a core cell containing one or more fuel assemblies) and STARTUP Modes.
In the power range the APRM system provides required protection.
Reference Section 7.5.7 FSAR.
Thus, the IRM System is not required in the RUH mode.
The APRMs and the IRMs provide adequate coverage in the STARTUP and intermediate range.
The high reactor pressure, high drywell pressure, reactor low water level, low scram pilot air header pressure and scram discharge volume high level scrams are required for STARTUP and RUH modes of plant operation.
They are, therefore, required to be operational for these modes of reactor operation.
Because of the APRM downscale limit of g 3 percent when in the RUH mode and high level limit of g15 percent when in the STARTUP Mode, the transition between the STARTUP and RUH Modes must be made with the APRM instrumentation indicating between 3 percent and 15 percent of rated power or a control rod scram will occur.
In addition, the IRM system must be indicating below the High Flux setting (120/125 of scale) or a scram will occur when in the STARTUP Mode.
For normal operating conditions, these limits provide assurance of. overlap between the IRM system and APRM system so that there are no "gapa" in the power level indications (i.e., the power level is continuously monitored from beginning of startup to full power and from full power to SHUTDOWH).
When power is being reduced, if a transfer to the STARTUP mode is made and the IRMs have not been fully inserted (a maloperational but not impossible condition) a control rod block immediately occurs so that reactivity insertion by control rod withdrawal cannot occur.
The low scram pilot air header pressure trip performs the same function as the high water level in the scram discharge instrument volume for fast fillevents in which the high level instrument response time may be inadequate.
A fast fillevent is postulated for certain degraded control air events in which the scram outlet valves unseat enough to allow 5 gpm per drive leakage into the scram discharge volume but not enough to cause control rod insertion.
BFH Unit 2 3.1/4.1-16 At~R~IBG.'O. 242
4.1 BASES The minimum functional testing frequency used in this specification is based on a reliability analysis using the concepts developed in reference (1).
This concept was specifically adapted to the one-out-of-two taken twice logic of the reactor protection system.
The analysis shows that the sensors are primarily responsible for the reliability of the reactor protection system.
This analysis makes use of "unsafe failure" rate experience at conventional and nuclear power plants in a reliability model for the system.
An "unsafe failure" is defined as one which negates channel operability and which, due to its nature, is revealed only when the channel is functionally tested or attempts to respond to a real signal.
Failure such as blown fuses, ruptured bourdon tubes, faulted amplifiers, faulted cables, etc., which result in "upscale" or "downscale" readings on the reactor instrumentation are "safe" and will be easily recognized by the operators during operation because they are revealed by an alarm or a scram.
The channels listed in Tables 4.1.A and 4.1.B are divided into three groups for functional testing.
These are:
A.
On-Off sensors that provide a scram trip function.
B.
Analog devices coupled with bistable trips that provide a scram function.
C.
Devices which only serve a useful function during some restricted mode of operation, such as STARTUP, or for which the only practical test is one that can be performed at SHUTDOWN.
The sensors that make up group (A) are specifically selected from among the whole family of industrial on-off sensors that have earned an excellent, reputation for reliable operation.
During design, a goal of 0.9999 probability of success (at the 50 percent confidence level) was adopted to assure that a balanced and adequate design is achieved.
The probability of success is primarily a function of the sensor failure rate and the test interval.
A three-month test interval was planned for group (A) sensors.
This is in keeping with good operating practices, and satisfies the design goal for the logic configuration utilized in the Reactor Protection System.
The once per six-month functional test frequency for the scram pilot air header low pressure trip function is acceptable due to:
1.
The functional reliability previously demonstrated by these switches on Unit 2 during Cycles 6 and 7, 2.
The need for minimizing the radiation exposure associated with the functional testing of these switches, and The increased risk to plant availability while the plant is in a half-scram condition during the performance of the functional testing versus the limited increase in reliability that would be obtained by more frequent functional testing.
BFN Unit 2 3.1/4.1-17 AtKNDt527Z i'. 242
4.1 BASES (Cont'd)
A single failure of one of the. scram pilot air header low pressure trip
. switches would not result in the loss of the trip function. It is highly unlikely that two switches in one channel would experience an undetected failure during the period between six-month functional tests.
To satisfy the long-term objective of maintaining an adequate level of safety throughout the plant lifetime, a minimum goal of 0.9999 at the 95 percent confidence level is proposed.
With the (1-out-of-2) X (2) logic, this requires that each sensor have an availability of 0.993 at the 95 percent confidence level.
This level of availability may be maintained. by adjusting the test interval as a function of the observed failure history.l To facilitate the implementation of this technique, Figure 4.1-1 is provided to indicate an appropriate trend in test interval.
The procedure is as follows:
i 1.
Like sensors are pooled into one group for the purpose of data acquisition.
2.
The factor M is the exposure hours and is equal to the number of sensors in a group, n, times the elapsed time T (M = nT).
3.
The accumulated number of unsafe failures is plotted as an ordinate against M as an abscissa on Figure 4.1-1.
4.
After a trend is established, the appropriate monthly test interval to satisfy the goal will be the test interval to the left of the plotted points.
5.
A test interval of one month will generally be used initially until a trend is established.
Group (B) devices utilize an analog*sensor followed by an amplifier and a bistable trip circuit.
The sensor and amplifier are active components and a failure is almost always accompanied by an alarm and an indication of the source of trouble.
In the event of failure, repair or substitution can start immediately.
An "as-is" failure is one that "sticks" mid-scale and is not capable of going either up or down in response to an out-of-limits input.
This type of failure for analog devices is a rare occurrence and is detectable by an operator who observes that one signal does not track the other three.
For purpose of analysis, it is assumed that this rare failure will be detected within two hours.
1.
Reliability of Engineered Safety Features as a Function of Testing Frequency, I. M. Jacobs, "Nuclear Safety," Vol. 9, No. 4, July-August, 1968, pp. 310-312.
BFN Unit 2
- 3. 1I4. 1-18 hMENOMENTgg. P g g
4.1 BASES (Cont'd)
The bistable trip circuit which is a part of the Group (B) devices can sustain unsafe failures which are revealed only on test.
Therefore, it is necessary to test them periodically.
A study was conducted of the instrumentation channels included in the Group (B) devices to calculate their "unsafe" failure rates.
The analog devices (sensors and amplifiers) are predicted to have an unsafe failure rate of less than 20 x 10 failure/hour.
The bistable trip circuits are predicted to have unsafe failure rate of less than 2 x 10 failures/hour.
Considering the two hour monitoring interval for the analog devices as assumed
- above, and a weekly test interval for the bistable trip circuits, the design reliability goal of 0.99999 is attained with ampl'e margin.
The bistable devices are monitored during plant operation to record their failure history and establish a test interval using the curve of Figure 4.1-1.
There are numerous identical bistable devices used throughout the plant's instrumentation system.
Therefore, significant data on the failure rates for the bistable devices should be accumulated rapidly.
The frequency of calibration of the APRM Flow Biasing Network has been established at each refueling outage.
There are several instruments which must be calibrated and it will take several hours to perform the calibration of the entire network.
While the calibration is being performed, a zero flow signal will be sent to half of the APRMs resulting in a half scram and rod block condition.
Thus, if the calibration were performed during operation, flux shaping would not be possible.
Based on experience at other generating stations, drift of instruments, such as those in the Flow Biasing Network, is not significant and therefore, to avoid spurious
- scrams, a calibration frequency of each refueling outage is established.
Group (C) devices are active only during a given portion of the operational cycle.
For example, the IRM is active during the STARTUP/HOT STANDBY and REFUEL (with any control rod withdrawn from a core cell containing one or more fuel assemblies)
Modes and inactive during full-power operation.
- Thus, the only test that is meaningful is the one performed prior to entering the applicable Mode (i.e., the tests that are performed prior to use of the instrument).
Since testing of the IRM functions is not practical in the RUN Mode, testing is not required to be completed until 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> after entering the STARTUP/HOT STANDBY Mode from the RUN Mode.
Twelve hours is based on operating experience and in consideration of providing reasonable time in which to complete the test.
Calibration frequency of the instrument channel is divided into two groups.
These are as follows:
1.
Passive type indicating devices that can be compared with like units on a continuous basis.
2., Vacuum tube or semiconductor devices and detectors that drift or lose sensitivity.
BFN Unit 2 3.1/4.1-19 PJfBR182FZ NO. 242
4.1 BASES (Cont'd}
Experience with passive type instruments in generating stations and
~ substations indicates that the specified calibrations are adequate.
For those devices which employ amplifiers, etc., drift specifications call for drift to be less than 0.4 percent/month; i.e., in the period of a month a drift of 4 percent would occur and thus providing for adequate margin.
For the APRM system drift of electronic apparatus is not the only consideration in determining a calibration frequency.
Change in power distribution and loss of chamber sensitivity dictate a calibration every seven days.
Calibration, on this frequency assures plant operation at or below thermal limits.
A comparison of Tables 4.1.A and 4.1.8 indicates that two instrument channels have been included in the latter table.
These are:
mode switch in SHUTDOWN and manual scram.
All of the devices or sensors associated
- with these scram functions are simple on-off switches and, hence, calibration during operation is not applicable, i.e., the switch is either on or off.
The sensitivity of LPRM detectors decreases with exposure to neutron flux at a slow and approximately constant rate.
The APRM system, which uses the LPRM readings to detect.a change in thermal power, will be calibrated every seven days using a heat balance to compensate for this change in sensitivity.
The RBM system uses the LPRM reading to detect a localized change in thermal power. It applies a correction factor based on the APRM output signal to determine the percent thermal power and therefore any change in LPRM sensitivity is compensated for by the APRM calibration.
The technical specification limits of CMFLPD,
These methods use LPRM readings and TIP data to determine the power.
distribution.
Compensation in the process computer for changes in LPRM sensitivity will be made by performing a full core TIP traverse to update the computer calculated LPRM correction factors every 1000 effective full power hours.
As a minimum the individual LPRM meter readings will be adjusted at the beginning of each operating cycle before reaching 100 percent power.
BFN Unit 2 3.1/4.1-20
(
A";1'>IBsZ NO. 242
l
THIS PAGE INTENTIONALLYLEFT BLANK BFN Unit 2 3.1/4.1-21 AMENDMgg~ 2 I
gP,R RE00 "o
Cy ClO IVl I
~O
++*++
UNITED STATES NUCLEAR REGULATORY COMMISSION WASHINGTON, D.C. 205M-0001 TENNESSEE VALLEY AUTHORITY DOCKET NO. 50-296 BROWNS FERRY NUCLEAR PLANT UNIT 3 AMENDMENT TO FACILITY OPERATING LICENSE Amendment No. 2O1 License No. DPR-68 The Nuclear Regulatory Commission (the Commission) has found that:
A.
The application for amendment by Tennessee Valley Authority (the licensee) dated January 4,
- 1995, complies with the standards and requirements of the Atomic Energy Act of 1954, as amended (the Act),
and the Commission's rules and regulations set forth in 10 CFR Chapter I; B.
The facility will operate in conformi'ty with the application, the provisions of the Act, and the rules and regulations of the Commission; C.
There is reasonable assurance (i) that the activities authorized by this amendment can be conducted without endangering the health and safety of the public, and (ii) that such activities will be conducted in compliance with the Commission's regulations; D.
The issuance of this amendment will not be inimical to the common defense and security or to the health and safety of the public; and E.
The issuance of this amendment is in accordance with 10 CFR Part 51 of the Commission's regulations and all applicable requirements have been satisfied.
~l
2.
Accordingly, the license is amended by changes to the Technical Specifications as indicated 'in the attachment to this license amendment and paragraph 2.C.(2) of Facility Operating License No.
DPR-68 is hereby amended to read as follows:
3.
(2)
Technical S ecifications The Technical Specifications contained in Appendices A and B,
as revised through Amendment No. 201, are hereby incorporated in the license.
The licensee shall operate the facility in accordance with the Technical Specifications.
This license amendment is effective as of its date of issuance and shall be implemented within 30 days from the date of issuance.
FOR THE NUCLEAR REGULATORY COMMISSION I
Frederick J.
Heb on, Director Project Directorate II-4 Division of Reactor Projects - I/II Office of Nuclear Reactor Regulation
Attachment:
Changes to the Technical Specifications Date of Issuance:
Novembe~ 2, 1995
N TO C
NS DM NT NO F
C I Y OPERATING LIC S
O.
DPR-68 DOCKET NO. 50-296 Revise the Appendix A Technical Specifications by removing the pages identified below and inserting the enclosed pages.
The revised pages are identified by the captioned amendment number and contain marginal lines indicating the area of change.
- Overleaf pages are provided to maintain document completeness.
RENOVE 3.1/4.1-2 3.1/4.1-3 3.1/4.1-4 3.1/4.1-5 3.1/4.1-6 3.1/4.1-7 3.1/4.1-8 3.1/4.1-9 3.1/4.1-15 3.1/4.1-16 3.1/4.1-17 3.1/4.1-18 INSERT 3.1/4.1-2 3.1/4.1-3*
3.3/4.1-4*
3.1/4.1-5 3.1/4.1-6 3.1/4.1-7 3.1/4.1-8*
3.1/4.1-9 3.1/4.1-15 3.1/4.1-16 3.1/4.1-17*
3.1/4.1-18
TABLE 3.1.A REACTOR PROTECTION SYSTEH (SCRAH)
INSTRUHENTATION REgUIREHENTS Hin. No. of Operable Instr.
Channels Per Trip Tri Function Hode Switch in Shutdown Hanual Scram Tri L vel S
in Shut-down Nodes in Mhich Func ion Startup/
~tetu 1
7 H~ot Standb X
X Run Ac ion 1
1.A 1.A IRH (16)
High Flux Inoperative
<120/125 Indicated on scale X(22)
X X(22)
X (5) 1.A (5) 1.A APRH (16)(24)(25)
High Flux (Fixed Trip)
High Flux (Flow Biased)
High Flux Inoperative Oownscale
- 120K, See Spec. 2.1.A.l
< 15K rated power (13)
> 3 Indicated on Scale High Reactor Pressure
< 1055 psig (PIS-3-22AA,BB,C,O)
High Orywell Pressure (14)
< 2.5 psig (PIS&4-56 A'-D)
Reactor Low Mater Level (14)
> 538" above (LIS-3-203 A-D) vessel zero X(21)
X(17)
X(21)
X(17)
(11)
(11)
X(10)
X X(8)
X(&)
X 1.A or 1
~ 8 X
1.A or 1.8 (15) 1.A' 1.A X(12) 1.A or 1.B 1.A 1.A 1.A
TABLE 3.1.A REACTOR PROTECTION SYSTEM (SCRAH)
INSTRUMENTATION RE(UIREHENTS Hin. No. of Operable Instr.
Channels Per Trip ri Function Shut-Tri Level Settin down Hode in Which Functi on Must Be 0 erable Startup/
~Ref el 7
H~eanda Ren Action 1
High Mater Level in West Scram Discharge Tank (LS-85-45A-0)
~
High Water Level in East Scram.
Discharge Tank (LS-85-45E-H)
Hain Steam Line Isolation Valve Closure Turbine Control Valve Fast Closure or Turbine Trip Turbine Stop Valve Closure Turbine First Stage Pressure Permissive (PIS-1-81ACB)
(PI5-1-91')
Low Scram Pilot Air Header Pressure
< 50 Gallons
< 50 Gallons
<105 Valve Closure
>550 psig
<10K Valve Closure not >154 psig
> 50 psig X(2)
X(2)
X(2)
X(2)
X(18)
X(18)
X(2)
X(2) 1.A X
1.A X(6) 1.A or 1.C X(4) 1.A or 1.0 X(4) 1.A or 1.0 X(18) 1.A or 1.D (19) 1.A
NOTES FOR TABLE 3 A
1.
There shall be two OPERABLE or tripped trip systems for each function.
If the minimum number of OPERABLE instrument channels per trip system cannot be met for one trip system, trip the inoperable channels or entire trip system within one hour, or, alternatively, take the below listed a'ction for that trip function. If the minimum number of OPERABLE instrument channels cannot be met by either trip system, the appropriate action listed below (refer to right-hand column of Table) shall be taken.
An inoperable channel need not be placed in the tripped condition where this would cause the trip function to occur.
In these
- cases, the inoperable channel shall be restored to OPERABLE status within two hours, or take the action listed below for that trip function.
A.
Initiate insertion of OPERABLE rods and complete insertion of all OPERABLE rods within four hours.
In refueling mode, suspend all operations involving core alterations and fully insert all OPERABLE control rods within one., hour.
B.
Reduce power level to IRM range and place mode switch in the STARTUP/HOT STANDBY position within 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br />.
C.
Reduce turbine load and close main steam line isolation valves within 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br />.
D.
Reduce power to less than 30 percent of rated.
2.
The scram discharge volume high water level bypass may be used in SHUTDOWN or REFUEL to bypass both the scram discharge volume high-high water level and scram pilot air header low. pressure scram signals in order to reset the reactor protection system trip.
A,control rod withdraw block is present when these scram signals are bypassed.
3.
DELETED 4.
Bypassed when turbine first stage pressure is less than 154 psig.
5.
IRMs are bypassed when APRMs are onscale and the reactor mode switch is in the RUN position.
6.
The design permits closure of any two lines without a scram being initiated.
7.
When the reactor is subcritical and the reactor water temperature is less than 212 F, only the following trip functions need to be OPERABLE:
A.
Mode switch in shutdown B.
Manual scram C.
High flux IRM D.
Scram discharge volume high level BFN Unit 3 3.1/4.1-4
'MENDMENTNO. 19 7
NOTES FOR TABLE.l.z (Cont'd)
E.
Scram pilot air header low pressure 8.
Not required to be OPERABLE when primary containment integrity is not required.
9.
(Deleted) 10.
Not required to be OPERABLE when the reactor pressure vessel head is not bolted to the vessel.
ll.
The APRM downscale trip function is only active when the reactor mode switch is in RUN.
12.
The APRM downscale trip is automatically bypassed when the IRM
'instrumentation is OPERABLE and not high.
13.
Less than 14 OPERABLE LPRMs will cause a trip system trip.
14.
Channel shared by Reactor Protection System and Primary Containment and Reactor Uessel Isolation Control System.
A channel failure may be a channel failure in each system.
15.
The APRM 15 percent scram is bypassed in the RUN Mode.
16.
Channel shared by Reactor Protection System and Reactor Manual Control System (Rod Block Portion).
A channel failure may be a channel failure in each system.
If a channel is allowed to be inoperable per Table 3.1.A, the corresponding function in that same channel may be inoperable in the Reactor Manual Control System (Rod Block).
17.
Not required while performing low power physics tests at atmospheric pressure during or after refueling at power levels not to exceed 5 MHt.
18.
This function must inhibit the automatic bypassing of turbine control valve fast closure or turbine trip scram and turbine stop valve closure scram whenever turbine first stage pressure is greater than or equal to 154 psig.
19.
Action 1.A or 1.D shall be taken only if the permissive fails in such a
manner to prevent the affected RPS logic from performing its intended function.
Otherwise, no action is required.
20.
(Deleted) 21.
Only required with any control rod withdrawn from a core cell containing one or more fuel assemblies.
The APRM High Flux and Inoperative Trips do not have to be OPERABLE if the Source Range Monitors are connected to give a noncoincidence, High Flux scram, at 5 x 10 cps.
The SRMs shall be OPERABLE per Specification 3.10.B.l.
The removal of eight (8)
~ shorting links is required to provide noncoincidence high-flux scram
. protection from the Source Range Monitors.
BFN Unit 3 3.1/4.1-5 NEiR>fB1T NO.
201.
22.
Only required with any control rod withdrawn from a core cell containing one or more fuel assemblies.
For the IRM High Flux Trip Function, the
'three required IRMs per trip channel is not required if at least four IRMs (one in each core quadrant) are connected to give a noncoincidence, High Flux scram.
The removal of four (4) shorting lixQcs is required to provide noncoincidence high-flux scram protection from the IRMs.
23.
A channel may be placed in an INOPERABLE status for up to 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> for required surveillance without placing the trip system in the tripped condition provided at least one OPERABLE channel in the same trip system is monitoring that parameter.
24.
The Average Power Range Monitor scram function is varied (Reference Figure 2.1-1) as a function of recirculation loop flow (W).
The trip setting of this function must be maintained in accordance with 2.1.A.
25.
The APRM flow-biased neutron flux signal is fed through a time constant circuit of approximately 6 seconds.
This time constant may be lowered or equivalently removed (no time delay) without affecting the operability of the flow-biased neutron flux trip channels.
The APRM fixed high neutron flux signal does not incorporate the time constant but responds directly to instantaneous neutron flux.
BFH Unit 3 3.1/4.1-6 A1KNDHBK NO.
201
TABLE 4.1.A REACTOR PROTECTION SYSTEH (SCRAH)
INSTRUMENTATION FUNCTIONAL TESTS HINIHUH FUNCTIONAL TEST FRE()UENCIES FOR SAFETY INSTR. AND CONTROL CIRCUITS Hode Switch in Shutdown Manual Scram IRH High Flux Inoperative APRH High Flux (15% Scram)
High Flux (Flow Biased)
High Flux (Fixed Trip)
Inoperative Downscale Flow Bias High Reactor Pressure (PIS-3-22AA,BB,C,D)
High Drywel'1 Pressure (PIS-64-56 A-D)
Reactor Low Water Level (LIS-3-203 A-D)
Grou 2
Functional Te t Place Hode Switch in Shutdown Trip Channel and Alarm Trip Channel and Alarm (4)
Trip Channel and Alarm (4)
Trip Output Relays (4)
Trip Output Relays (4)
Trip Output Relays (4)
Trip Output Relays (4)
Trip Output Relays (4)
(6)
Trip Channel and Alarm (7)
Trip Channel and Alarm (7)
Trip Channel and Alarm (7)
Hinimum Fre uenc 3
~
Each Refueling Outage Every 3 Months Once/Week (9)
Once/Week (9)
Once/Week (9)
Once/Week Once/Week Once/Week Once/Week (6)
Once/Honth Once/Honth Once/Honth
Grou 2
High Mater Level in Scram Oischarge Tank Float Switches (LS-85-45C-F)
A Electronic Level Switches (LS-85-45A, 8, G,
H)
TABLE 4.1.A (Continued)
Func ion 1 Test Trip Channel and Alarm
'I Trip Channel and Alarm (7)
Minimum Fre uenc Once/Month Once/Honth Hain Steam Line Isolation Valve Closure Turbine Control Valve Fast Closure or turbine trip Turbine First Stage Pressure Permissive (PIS-1-81A and 8, PIS-1-91A and 8)
Turbine Stop Valve Closure Low Scram Pilot Air Header Pressure (PS 85-35 Al, A2, 81, and 82)
A Trip Channel and Alarm Trip Channel and Alarm Trip Channel and Alarm (7)
Trip Channel and Alarm Trip Channel and Alarm Once/3 Honths (8)
Once/Honth (1)
Every three months Once/Honth (1)
Once/6 Honths
NOTES FOR TABLE 4 1 A 1.
Initially the minimum frequency for the indicated tests shall be once per
~ month.
2.
A description of the three groups is included in the Bases of this specification.
3.
Functional tests are not required when the systems are not required to be OPERABLE or are operating (i.e., already tripped). If tests are missed, they shall be performed prior to returning the systems to an OPERABLE status.
4.
This instrumentation is exempted from the instrument channel test definition.
This instrument channel functional test will consist of injecting a simulated electrical signal into the measurement channels.
5.
.(Deleted) 6.
The functional test of the flow bias network is performed in accordance with Table 4.2.C.
7.
Functional test consists of the injection of a simulated signal into the electronic trip circuitry in place of the sensor signal to verify operability of the trip end alarm functions.
8.
Functional test frequency decreased to once/3 months to reduce the challenges to relief valves per HUREG 0737, Item II.K.3.16.
9.
Not required to be performed when entering the STARTUP/HOT STANDBY Mode from RUN Mode until 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> after entering the STARTUP/HOT STANDBY Mode.
BFH Unit 3 3,1/4.1-9 AIZNDIiIKZHO. 201
'P
3.1 BASES (Cont'd}
be accommodated which would result in slow scram times or partial control
. rod insertion.
To preclude this occurrence, level switches have been provided in the instrument volume which alarm and scram the reactor when the volume of water reaches 50 gallons.
As indicated above, there is sufficient volume in the piping to accommodate the scram without impairment of the scram times or amount of insertion of the control rods.
This function shuts the reactor down while sufficient volume remains to accommodate the discharge water and precludes the situation in which a scram would be required but not be able to perform its function adequately.
A source range monitor (SRM) system is also provided to supply additional neutron level information during startup but has no scram functions.
Reference Section 7.5.4 FSAR.
- Thus, the IRM is required.in the REFUEL (with any control rod withdrawn from a core cell containing one or more fuel assemblies) and STARTUP Modes.
In the power range the APRM system provides required protection.
Reference Section 7.5.7 FSAR.
Thus, the IRM System is not required in the RUN mode.
The APRMs and the IRMs provide adequate coverage in the STARTUP and intermediate range.
The high reactor pressure, high drywell pressure, reactor low water level, low scram pilot air header pressure and scram discharge volume high level scrams are required for STARTUP and RUN modes of plant operation.
They are, therefore, required to be operational for these modes of reactor operation.
Because of the APRM downscale limit of g 3 percent when in the RUN mode and high level limit of gl5 percent when in the STARTUP Mode, the transition between the STARTUP and RUN Modes must be made with the APRM instrumentation indicating between 3 percent and 15 percent of rated power or a control rod scram will occur.
In addition, the IRM system-must be indicating below the High Flux setting (120/125 of scale) or a scram will occur when in the STARTUP Mode.
For normal operating conditions, these limits provide assurance of overlap between the IRM system and APRM system so that there are no "gaps" in the power level indications (i.e., the power level is. continuously monitored from beginning of startup to full power and from full power to shutdown).
When power is being reduced, if a transfer to the STARTUP mode is made and the IRMs have not been fully inserted (a maloperational but not impossible condition) a control rod block immediately occurs so that reactivity insertion by control rod withdrawal cannot occur.
The low scram pilot air header pressure trip performs the same function as the high water level in the scram discharge instrument. volume for fast fillevents in which the high level instrument response time may be inadequate.
A fast fillevent is postulated for certain degraded control air events in which the scram outlet valves unseat enough to allow 5 gpm per drive leakage into the scram discharge volume but not enough to cause control rod insertion.
BFN Unit 3 3.1/4.1-15 ZKhD~WPi HO: 201
411 BASES The minimum functional testing frequency used in this specification is based on a reliability analysis using the concepts developed in reference (1).
This concept was specifically adapted to the one-out-of-two taken twice logic of the reactor protection system.
The analysis shows that the sensors are primarily responsible for the reliability of the reactor protection system.
This analysis makes use of "unsafe failure" rate experience at conventional and nuclear power plants in a reliability model for the system.
An "unsafe failure" is defined as one which negates channel operability and which, due to its nature, is revealed only when the channel is functionally tested or attempts to respond to a real signal.
Failure such as blown fuses, ruptured bourdon tubes, faulted amplifiers, faulted cables, etc.,
which result in "upscale".or "downscale" readings on the reactor instrumentation are "safe" and will be easily recognized by the operators during operation because they are revealed by-an alarm or a scram.
The channels listed in Tables 4.1.A and 4.1.B are divided into three groups for functional testing.
These are:
A.
On-Off sensors that provide a scram trip function.
B.
Analog devices coupled with bistable trips that provide a scram function.
C.
Devices which only serve a useful function during some restricted mode of operation, such as STARTUP, or for which the only practical test is one that can be performed at shutdown.
The sensors that make up group (A) are specifically selected from among the whole family of industrial on-off sensors that have earned an excellent reputation for reliable operation.
During design, a goal of.
0.99999 probability of success (at the 50 percent confidence level) was adopted to assure that a balanced and adequate design is achieved.
The probability of success is primarily a function of the sensor failure rate and the test interval.
A three-month test interval was planned for group (A) sensors.
This is in keeping with good operating practices, and satisfies the design goal for the logic configuration utilized in the Reactor Protection System.
The once per six-month functional test frequency for the scram pilot air header low pressure trip function is acceptable due to:
1.
The functional reliability previously demonstrated by these switches on Unit 2 during Cycles 6 and 7, 2.
The need for minimizing the radiation exposure associated with the functional testing of these switches, and 3.
The increased risk to plant availability while the plant is in a half-scram condition during the performance of the functional testing versus the limited increase in reliability that would be obtained by more frequent functional testing.
BFN Unit 3 3.1/4.1-16 N.~r, 31B1T NO. 201
4.1 BASES (Cottt'd1 A single failure of one of the scram pilot air header low pressure trip switches would not result in the loss of the trip function. It is highly unlikely that two switches in one channel would experience an undetected failure during the period between six-month functional tests.
To satisfy the long-term objective of maintaining an adequate level of safety throughout the plant lifetime, a minimum goal of 0.9999 at the 95-percent confidence level is proposed.
With the (1-out-of-2) X (2) logic,.this requires that each sensor have an availability of 0.993 at the 95 percent confidence level.
This level of availability may be maintyined by adjusting the test interval as a function of the observed failure history.l To facilitate the implementation of this technique, Figure 4.1-1 is provided to indicate an appropriate trend in test interval.
The procedure is as follows:
1.
Like sensors are pooled into one group for the purpose of data acquisition.
2.
The factor M is the exposure hours and is equal to the number of sensors in a group, n, times the elapsed time T (M = nT).
3.
The accumulated number of unsafe failures is plotted as an ordinate against M as an abscissa on Figure 4.1-1.
4.
After a trend is established, the appropriate monthly test interval to satisfy the goal will be the test interval to the left of the plotted points.
5.
A test interval of one month will generally be used initially until a trend is established.
Group (B) devices utilize an analog sensor followed by an amplifier and a bistable trip circuit.
The sensor and amplifier are active components and a failure is almost always accompanied by an alarm and an indication of the source of trouble.
In the event of failure, repair or substitution can start immediately.
An "as-is" failure is one that "sticks" mid-scale and is not capable of going either up or down in response to an out-of-limits input.
This type of failure for analog devices is a rare occurrence and is detectable by an operator who observes that one signal does not track the other three.
For purpose of analysis, it is assumed that this rare failure will be detected within two hours.
1.
Reliability of Engineered Safety Features as a Function of Testing Frequency, I. M. Jacobs, "Nuclear Safety," Vol. 9, No. 4, July-August,
- 1968, pp. 310-312.
BFN Unit 3 3.1/4.1-17 AMENOMENTN5. I9 7
P
~e
The bistable trip circuit which is a part of the Group (B) devices can
.sustain unsafe failures which are revealed only on test.
Therefore, it is necessary to test them periodically.
A study was conducted of the instrumentation channels included in the Group (B) devices to calculate their "unsafe" failure rates.
The analog devices (sensors and amplifiers) are predicted to have an unsafe failure rate of less than 20 x 10 failure/hour.
The bistable trip circuits are predicted to have unsafe failure rate of less than 2 x 10 failures/hour.
Considering the two hour monitoring interval for the analog devices as assumed
- above, and a weekly test interval for the bistable trip circuits, the design reliability goal of 0.99999 is attained with ample margin.
The bistable devices are monitored during plant operation to record their.
.failure history and establish a test interval using the curve of Figure.
4.1-1.
There are numerous identical bistable devices used throughout the plant's instrumentation system.
Therefore, significant data on the failure rates for the bistable devices should be accumulated rapidly.
The frequency of calibration of the APRM Flow Biasing Network has been established at each refueling outage.
There are several instruments which must be calibrated and it will take several hours to perform the calibration of the entire network.
While the calibration is being performed, a zero flow signal will be sent to half of the APRMs resulting in a half scram and rod block condition.
Thus, if the calibration were performed during operation, flux shaping would not be possible.
Based on experience at other generating stations, drift of instruments, such as those in the Flow Biasing Network, is not significant and therefore, to avoid spurious
- scrams, a calibration frequency of each refueling outage is established.
Group (C) devices are active only during a given portion of the operational cycle.
For example, the IRM is active during the STARTUP/HOT STANDBY and REFUEL (with any control rod withdrawn from a core cell containing one or more fuel assemblies)
Modes and inactive during full-power operation.
- Thus, the only test that is meaningful is the one performed prior to entering the applicable Mode (i.e., the tests that are performed prior to use of the instrument).
Since testing of the IRM functions is not practical in the RUN Mode,. testing is not required to be completed until 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> after entering the STARTUP/HOT STANDBY Mode from the RUN Mode.
Twelve hours is based on operating experience and in consideration of providing reasonable time in which to complete the test.
Calibration frequency of the instrument channel is divided into two groups.
These are as follows:
1.
Passive type indicating devices that can be compared with like units on a continuous basis.
2.
Vacuum tube or semiconductor devices and detectors that drift or lose sensitivity.
BFN Unit 3 3.1/4.1-18 A~H. Ti"iZV. i'. 201
.L (i ~
Cg
+
1