|
---|
Category:LICENSEE EVENT REPORT (SEE ALSO AO
MONTHYEARML18066A6271999-09-0202 September 1999 LER 98-011-01:on 981217,inadequate Lube Oil Collection Sys for Primary Coolant Pumps Was Noted.Caused by Design Change Not Containing Appropriate Level of Rigor.Exemption from 10CFR50,App R Was Requested.With 990902 Ltr ML18066A6221999-08-20020 August 1999 LER 99-002-00:on 990722,TS Surveillance Was Not Completed within Specified Frequency.Caused by Failure to Incorporate Revised Frequency Into Surveillance Schedule in Timely Manner.Verified Implementation.With 990820 Ltr ML18066A3781999-01-20020 January 1999 LER 98-013-00:on 981222,safeguards Transfer Tap Changer Failure Caused Inadvertant DG Start.Caused by Failed Motor Contactor.Contactor Was Replaced.With 990120 Ltr ML18068A4851998-10-29029 October 1998 LER 97-011-01:on 971012,starting of Primary Coolant Pump with SG Temps Greater than Cold Leg Temps Occurred.Caused by Inadequate Procedures & Operator Decision.Sop Used for Starting Primary Coolant Pump Enhanced ML18066A2831998-08-18018 August 1998 LER 98-010-00:on 980721,reactor Manually Tripped.Caused by Failure of Coupling Which Drives Feedwater Pump Main Lube Oil Pump.Main Lube Oil Pump Coupling & Associated Components Replaced & Satisfactorily Tested ML18066A2261998-06-30030 June 1998 LER 98-009-00:on 980531,small Pinhole Leak Found on One of Welds,During Leak Test Following Replacement of Pcs Sample Isolation Valves.Caused by Welder Error.Leaking Welds Repaired ML18066A1781998-06-0909 June 1998 LER 98-008-00:on 980511,noted That Procedure Did Not Fully Satisfy Requirement to Test High Startup Rate Trip Function. Caused by Misunderstanding of Testing Requirements.Revised TS Surveillance Test Procedure & Reviewed Other Procedures ML18065B2451998-05-13013 May 1998 LER 98-007-00:on 980413,HPIS Sys Was Noted Inoperable During TS Surveillance Test.Caused by Performance of Flawed Procedure.Operators & Engineers Will Be Trained to Improve Operational Decision Making Through Resources & Knowledge ML18065B1151997-12-0909 December 1997 LER 97-013-00:on 971110,failure to Closure Test Two Check Valves Resulted in Violation of TS 6.5.7 Occurred.Caused by Close Function for Check Valves.Check Valves Tested to Confirm Proper Closure Capability ML18067A7751997-11-11011 November 1997 LER 97-011-00:on 971012,primary Coolant Pump Was Started W/Sg Temperatures Greater than Cold Leg Temperature.Caused by Inadequate Procedures & Operator Decision Making.Critique of Event Conducted W/Operators Involved ML18067A7581997-10-30030 October 1997 LER 97-010-00:on 970930,determined That Inadequacy in App R Analysis Resulted in Condition Outside Design Basis of Plant.Caused by Missing Cable in Circuit & Raceway Schedule. Developed New Evaluation Re ASD Valves Validation ML18067A7461997-10-23023 October 1997 LER 97-009-00:on 970923,discovered Procedure Weakness Re Implementation of App R Shutdown Methodology.Caused by Human Error.Revised Off-Normal Procedure ONP-25.2, Alternate Safe Shutdown Procedure. ML18067A7191997-10-10010 October 1997 LER 97-008-00:on 970912,spurious Valve Operation Could Result in Loss of Shutdown Capabilities Per 10CFR50,App R, Section Iii.L,Was Discovered.Caused by Failure to Validate Info from App R.Design Bases for SW Backup Reviewed ML18067A6951997-09-24024 September 1997 LER 97-007-00:on 970826,discovered Inadequate Testing of DG Sequencer Control Relay Contacts.Caused by Oversight on Part of Personnel Involved in Installation of Facility Change FC-800.Tested 106D-1/XL & 106D-2/XL Relay Contacts ML18067A5651997-06-0303 June 1997 LER 96-013-01:on 961115,DC Breaker Failed During Testing for as-found Trip Setting.Failure Caused by Oversight within Preventive Maint Program.Breaker Was Replaced & Tested ML18067A5461997-05-12012 May 1997 LER 97-006-00:on 970412,overtime Limits Were Exceeded for Radiation Protection Technicians.Caused by Inadequate Design,Review & Proper Verifications of Overtime Work Schedule.Communicate Overtime Limitation Responsibilities ML18067A4431997-03-24024 March 1997 LER 97-004-00:on 970221,trip of High Pressure Safety Injection Pump Occurred While Filling Safety Injection Tank Resulting in TS Violation.Caused by Particle Lodged Between Surface of Indication disk.Y-phase Relay Was OOS ML18067A4391997-03-21021 March 1997 LER 97-005-00:on 961220,operation of Plant Outside Design Basis Occurred Due to an Unacceptable Repair on Main Steam Isolation Valves.Pipe Plugs Permanently Repaired ML18067A4401997-03-21021 March 1997 LER 97-003-00:on 961101,four Piping Lines Were Determined to Be Potentially Susceptible to Pressurization Due to Containment Temperature Increase During an Accident.Cac Discharge Piping Will Be verified.W/970321 Ltr ML18066A8931997-02-21021 February 1997 LER 97-002-00:on 970123,failure to Meet TSs 4.5.2d(1)(b) for Testing of Emergency Escape Airlock Occurred.Caused by Missed Surveillance.Emergency Escape Air Lock Testing Was Completed & Declared operable.W/970221 Ltr ML18066A8751997-02-0505 February 1997 LER 97-001-00:on 970106,TAVE Temp Dropped Below Minimum Temp for Criticality.Caused by Control Rod Withdrawal Rate to Increase Power Not Sufficient to Match Increase in Steam. Turbine Bypass Valve Actuator repaired.W/970205 Ltr ML18066A8041996-12-23023 December 1996 LER 96-014-00:on 961124,class 1E Raychem Cable Splices Were Installed Incorrectly.Caused by Incorrectly Made Electrical Splices.Total of 270 Splices Have Been Replaced within Containment ML18066A7831996-12-16016 December 1996 LER 96-013-00:on 961115,DC Breaker Failure During Testing for as-found Trip Setting Occurred.Cause Under Investigation.All molded-case Circuit Breakers in DC Distribution Panels Were Replaced ML18065A9951996-10-0404 October 1996 LER 96-002-01:on 960116,initiated TS Required Shutdown Due to Safeguards Cable Fault.Both Sets (Six Cables) of Cables Were Replaced & Installed Through Turbine Generator Bldg ML18065A9171996-09-0909 September 1996 LER 95-012-00:on 960809,TS Violation Occurred,Due to No Senior Reactor Operator in Cr.Caused by Extensive Remodeling.Cr Remodeling completed.W/960909 Ltr ML18065A8961996-08-29029 August 1996 LER 96-011-00:on 960730,CR Continuous Air Monitor Alarm Setpoint Improperly Established.Caused by Failure to Utilize Mod Process in 1988 Leading to Failure to Properly Select & Calibrate Instruments ML18065A8811996-08-20020 August 1996 LER 96-005-01:on 960207,determined Fuse on Main Supply to Two Safety Related DC Panels & Panel Branch Circuit Breakers Not Properly Coordinated.Caused by Lack of Thorough Associated Circuits Analysis.Supply Fuse to Panels Replaced ML18065A8741996-08-16016 August 1996 LER 96-010-00:on 960717,high Pressure Safety Injection Pump Tripped While Filling Safety Injection Tank.Caused by Faulty 150/151Y-207 Time Overcurrent Relay.All Similar Relays in Time Overcurrent Application Have Been Inspected ML18065A8651996-08-12012 August 1996 LER 96-009-00:on 960712,identified Penetration Seal Deficiency on Fire Barriers Caused by Failure to Perform & Document Comprehensive Fire Barrier Evaluation.Developed Basis document.W/960812 Ltr ML18065A8601996-08-0202 August 1996 LER 96-006-01 on 960207,discovered Limits of Design Analysis Could Have Been Violated.Subsequent Tests & Analyses Facility Did Not Exceed Basis.Operating Procedures Have Been Revised to Treat 2530 Megawatts Limit as Absolute Limit ML18065A8321996-08-0101 August 1996 LER 96-003-01:on 960115,alternate Shutdown Panel Inverter Resulted in Unavailability of Panel.Replaced Defective Inverter Alarm Logic Board ML18065A7691996-06-12012 June 1996 LER 96-008-00:on 960513,fire Door Not Maintained Open in Accordance W/Design Basis.Cause Under Investigation. Engineering Evaluation Performed & Revised Documents, Surveillance & Test procedures.W/960612 Ltr ML18065A6901996-05-0101 May 1996 LER 95-001-01:on 950302,malfunction of Left Channel DBA Sequencer Resulted in Inadvertent Actuation of Left Channel Safeguards Equipment.Replaced microprocessor.W/960501 Ltr ML18065A6681996-04-22022 April 1996 LER 96-007-00:on 960321,inadequate Emergency Lighting & Ventilation in post-fire Safe Shutdown Areas.Caused by App R Program Documentation Insufficient to Demonstrate Regulatory Compliance.Lighting modified.W/960422 Ltr ML18065A5721996-03-11011 March 1996 LER 96-006-00:on 960207,average Reactor Power Level Exceeded License Limit Due to Insufficient Procedural Guidance. GOP-12 Revised to Treat 2,530 Mwt Limit as Absolute Limit Requiring Immediate Corrective Action If Exceeded ML18065A5261996-03-0101 March 1996 LER 96-005-00:on 960202,fuse on Main Supply to Two SR DC Panels & Panel Branch Circuit Breakers Not Properly Coordinated.Caused by Inadequate Electrical/App R Design Review.Implemented Hourly Fire tours.W/960301 Ltr ML18065A5111996-02-19019 February 1996 LER 94-012-02:on 940427,determined That Internal Ground in Thermal Margin Monitor Causes Nonconformance W/Rps Design Basis.Incorporated RPS Failure Modes & Effects Analysis in Plant DBD.W/960219 Ltr ML18065A5061996-02-19019 February 1996 LER 96-004-00:on 960118,SIS Disabled W/Primary Coolant Sys Greater than 300 F.Caused by Personnel Error.Permanent Maint Procedure to Disable/Enable SIS Actuation on Low Pressurizer Pressure Will Be Revised to Align W/Ts ML18065A5021996-02-15015 February 1996 LER 96-003-00:on 960115,technicians Found Low Voltage cut- Off for Alternate Shutdown Panel Inverter Set That Resulted in Unavailability of Panel.Caused by Inadequate Post Mod. Readjusted Set Point to Minimum setting.W/960215 Ltr ML18065A4581996-01-31031 January 1996 LER 96-001-00:on 960103,failed to Test Duplicate Equipment. Caused by STS No Longer Containing Requirement for cross- Train Testing of Duplicate Components.Will Submit Request to Delete Subj Requirements from TS.W/960131 Ltr ML18065A4421996-01-19019 January 1996 LER 95-016-00:on 951226,did Not Analyze Primary Coolant Samples within 72 H.Caused by Belief Acceptability to Save Pcs Samples for Choride Analysis Past 72 H.Counseled Chemistry Supervision.W/960119 Ltr ML18065A4041996-01-15015 January 1996 LER 95-014-00:on 950119,PCP Oil Collection Deficiencies Created by FC-860 Piping Mod.Caused by Inadequate DBD for Sys & Lack of Review by Experienced Fire Protection Personnel.Updated Design Basis documentation.W/960115 Ltr ML18065A3291995-12-0404 December 1995 LER 95-013-00:on 951103,circuit Fuse Coordination Deficiency Which Affects App R Safe Shutdown Equipment Noted.Design of Fuse Coordination in Potential Transformer Circuits Will Be Evaluated & Modified as required.W/951204 Ltr ML18065A2361995-11-0202 November 1995 LER 95-012-00:on 950701,discovered Unqualified Electrical Connection in Containment SW Outlet Valve Controller.Caused by Failure of Assigned Engineers to Available Info.Replaced Wire Nuts W/Inline Butt connections.W/951102 Ltr ML18065A2051995-10-20020 October 1995 LER 95-008-01:on 950728,discovered That None of Four Containment High Pressure Channels Would Initiate Reactor Trip Due to Programmatic Deficiencies.Administrative Procedure (AP) 9.44,AP 9.45 & AP 10.44 Will Be Revised ML18065A0841995-09-18018 September 1995 LER 95-011-00:on 950817,CR 40 Withdrawal Occurred When Given Insertion Signal Due to skill-based Error in Crimping & Removing Foreign Matl from CRDM Motor Connection Box.Crd Package replaced.W/950918 Ltr ML18065A0681995-09-14014 September 1995 LER 95-010-00:on 950815,ESFA Resulted in Manual Rt Following Isolation of Pcs.Replaced Failed Instrument Line ML18065A0651995-09-0808 September 1995 LER 95-009-00:on 950728,discovered Lack of Procedural Guidance for Pump Repair Following Fire.Proposed Use of Power Supply Breaker Did Not Adequately Address Effect of Loss of Control Power.Performed Independent Assessment ML18064A8781995-08-28028 August 1995 LER 95-008-00:on 950728,discovered During Design Change Testing That None of Four Containment High Pressure Channels Would Initiate Rt.Caused by Programmatic Deficiencies. Reviewed Selected Tests & Mods from Recent Refueling Outage ML18064A8831995-08-21021 August 1995 LER 95-007-00:on 950720,discovered That 12 Instrument Loops Had V-bolted Type Qualified Cable Splices Connected to Wires W/Exposed Kapton Insulation.Caused by Human Error.All V- Bolted Splices Replaced w/in-line design.W/950821 Ltr 1999-09-02
[Table view] Category:RO)
MONTHYEARML18066A6271999-09-0202 September 1999 LER 98-011-01:on 981217,inadequate Lube Oil Collection Sys for Primary Coolant Pumps Was Noted.Caused by Design Change Not Containing Appropriate Level of Rigor.Exemption from 10CFR50,App R Was Requested.With 990902 Ltr ML18066A6221999-08-20020 August 1999 LER 99-002-00:on 990722,TS Surveillance Was Not Completed within Specified Frequency.Caused by Failure to Incorporate Revised Frequency Into Surveillance Schedule in Timely Manner.Verified Implementation.With 990820 Ltr ML18066A3781999-01-20020 January 1999 LER 98-013-00:on 981222,safeguards Transfer Tap Changer Failure Caused Inadvertant DG Start.Caused by Failed Motor Contactor.Contactor Was Replaced.With 990120 Ltr ML18068A4851998-10-29029 October 1998 LER 97-011-01:on 971012,starting of Primary Coolant Pump with SG Temps Greater than Cold Leg Temps Occurred.Caused by Inadequate Procedures & Operator Decision.Sop Used for Starting Primary Coolant Pump Enhanced ML18066A2831998-08-18018 August 1998 LER 98-010-00:on 980721,reactor Manually Tripped.Caused by Failure of Coupling Which Drives Feedwater Pump Main Lube Oil Pump.Main Lube Oil Pump Coupling & Associated Components Replaced & Satisfactorily Tested ML18066A2261998-06-30030 June 1998 LER 98-009-00:on 980531,small Pinhole Leak Found on One of Welds,During Leak Test Following Replacement of Pcs Sample Isolation Valves.Caused by Welder Error.Leaking Welds Repaired ML18066A1781998-06-0909 June 1998 LER 98-008-00:on 980511,noted That Procedure Did Not Fully Satisfy Requirement to Test High Startup Rate Trip Function. Caused by Misunderstanding of Testing Requirements.Revised TS Surveillance Test Procedure & Reviewed Other Procedures ML18065B2451998-05-13013 May 1998 LER 98-007-00:on 980413,HPIS Sys Was Noted Inoperable During TS Surveillance Test.Caused by Performance of Flawed Procedure.Operators & Engineers Will Be Trained to Improve Operational Decision Making Through Resources & Knowledge ML18065B1151997-12-0909 December 1997 LER 97-013-00:on 971110,failure to Closure Test Two Check Valves Resulted in Violation of TS 6.5.7 Occurred.Caused by Close Function for Check Valves.Check Valves Tested to Confirm Proper Closure Capability ML18067A7751997-11-11011 November 1997 LER 97-011-00:on 971012,primary Coolant Pump Was Started W/Sg Temperatures Greater than Cold Leg Temperature.Caused by Inadequate Procedures & Operator Decision Making.Critique of Event Conducted W/Operators Involved ML18067A7581997-10-30030 October 1997 LER 97-010-00:on 970930,determined That Inadequacy in App R Analysis Resulted in Condition Outside Design Basis of Plant.Caused by Missing Cable in Circuit & Raceway Schedule. Developed New Evaluation Re ASD Valves Validation ML18067A7461997-10-23023 October 1997 LER 97-009-00:on 970923,discovered Procedure Weakness Re Implementation of App R Shutdown Methodology.Caused by Human Error.Revised Off-Normal Procedure ONP-25.2, Alternate Safe Shutdown Procedure. ML18067A7191997-10-10010 October 1997 LER 97-008-00:on 970912,spurious Valve Operation Could Result in Loss of Shutdown Capabilities Per 10CFR50,App R, Section Iii.L,Was Discovered.Caused by Failure to Validate Info from App R.Design Bases for SW Backup Reviewed ML18067A6951997-09-24024 September 1997 LER 97-007-00:on 970826,discovered Inadequate Testing of DG Sequencer Control Relay Contacts.Caused by Oversight on Part of Personnel Involved in Installation of Facility Change FC-800.Tested 106D-1/XL & 106D-2/XL Relay Contacts ML18067A5651997-06-0303 June 1997 LER 96-013-01:on 961115,DC Breaker Failed During Testing for as-found Trip Setting.Failure Caused by Oversight within Preventive Maint Program.Breaker Was Replaced & Tested ML18067A5461997-05-12012 May 1997 LER 97-006-00:on 970412,overtime Limits Were Exceeded for Radiation Protection Technicians.Caused by Inadequate Design,Review & Proper Verifications of Overtime Work Schedule.Communicate Overtime Limitation Responsibilities ML18067A4431997-03-24024 March 1997 LER 97-004-00:on 970221,trip of High Pressure Safety Injection Pump Occurred While Filling Safety Injection Tank Resulting in TS Violation.Caused by Particle Lodged Between Surface of Indication disk.Y-phase Relay Was OOS ML18067A4391997-03-21021 March 1997 LER 97-005-00:on 961220,operation of Plant Outside Design Basis Occurred Due to an Unacceptable Repair on Main Steam Isolation Valves.Pipe Plugs Permanently Repaired ML18067A4401997-03-21021 March 1997 LER 97-003-00:on 961101,four Piping Lines Were Determined to Be Potentially Susceptible to Pressurization Due to Containment Temperature Increase During an Accident.Cac Discharge Piping Will Be verified.W/970321 Ltr ML18066A8931997-02-21021 February 1997 LER 97-002-00:on 970123,failure to Meet TSs 4.5.2d(1)(b) for Testing of Emergency Escape Airlock Occurred.Caused by Missed Surveillance.Emergency Escape Air Lock Testing Was Completed & Declared operable.W/970221 Ltr ML18066A8751997-02-0505 February 1997 LER 97-001-00:on 970106,TAVE Temp Dropped Below Minimum Temp for Criticality.Caused by Control Rod Withdrawal Rate to Increase Power Not Sufficient to Match Increase in Steam. Turbine Bypass Valve Actuator repaired.W/970205 Ltr ML18066A8041996-12-23023 December 1996 LER 96-014-00:on 961124,class 1E Raychem Cable Splices Were Installed Incorrectly.Caused by Incorrectly Made Electrical Splices.Total of 270 Splices Have Been Replaced within Containment ML18066A7831996-12-16016 December 1996 LER 96-013-00:on 961115,DC Breaker Failure During Testing for as-found Trip Setting Occurred.Cause Under Investigation.All molded-case Circuit Breakers in DC Distribution Panels Were Replaced ML18065A9951996-10-0404 October 1996 LER 96-002-01:on 960116,initiated TS Required Shutdown Due to Safeguards Cable Fault.Both Sets (Six Cables) of Cables Were Replaced & Installed Through Turbine Generator Bldg ML18065A9171996-09-0909 September 1996 LER 95-012-00:on 960809,TS Violation Occurred,Due to No Senior Reactor Operator in Cr.Caused by Extensive Remodeling.Cr Remodeling completed.W/960909 Ltr ML18065A8961996-08-29029 August 1996 LER 96-011-00:on 960730,CR Continuous Air Monitor Alarm Setpoint Improperly Established.Caused by Failure to Utilize Mod Process in 1988 Leading to Failure to Properly Select & Calibrate Instruments ML18065A8811996-08-20020 August 1996 LER 96-005-01:on 960207,determined Fuse on Main Supply to Two Safety Related DC Panels & Panel Branch Circuit Breakers Not Properly Coordinated.Caused by Lack of Thorough Associated Circuits Analysis.Supply Fuse to Panels Replaced ML18065A8741996-08-16016 August 1996 LER 96-010-00:on 960717,high Pressure Safety Injection Pump Tripped While Filling Safety Injection Tank.Caused by Faulty 150/151Y-207 Time Overcurrent Relay.All Similar Relays in Time Overcurrent Application Have Been Inspected ML18065A8651996-08-12012 August 1996 LER 96-009-00:on 960712,identified Penetration Seal Deficiency on Fire Barriers Caused by Failure to Perform & Document Comprehensive Fire Barrier Evaluation.Developed Basis document.W/960812 Ltr ML18065A8601996-08-0202 August 1996 LER 96-006-01 on 960207,discovered Limits of Design Analysis Could Have Been Violated.Subsequent Tests & Analyses Facility Did Not Exceed Basis.Operating Procedures Have Been Revised to Treat 2530 Megawatts Limit as Absolute Limit ML18065A8321996-08-0101 August 1996 LER 96-003-01:on 960115,alternate Shutdown Panel Inverter Resulted in Unavailability of Panel.Replaced Defective Inverter Alarm Logic Board ML18065A7691996-06-12012 June 1996 LER 96-008-00:on 960513,fire Door Not Maintained Open in Accordance W/Design Basis.Cause Under Investigation. Engineering Evaluation Performed & Revised Documents, Surveillance & Test procedures.W/960612 Ltr ML18065A6901996-05-0101 May 1996 LER 95-001-01:on 950302,malfunction of Left Channel DBA Sequencer Resulted in Inadvertent Actuation of Left Channel Safeguards Equipment.Replaced microprocessor.W/960501 Ltr ML18065A6681996-04-22022 April 1996 LER 96-007-00:on 960321,inadequate Emergency Lighting & Ventilation in post-fire Safe Shutdown Areas.Caused by App R Program Documentation Insufficient to Demonstrate Regulatory Compliance.Lighting modified.W/960422 Ltr ML18065A5721996-03-11011 March 1996 LER 96-006-00:on 960207,average Reactor Power Level Exceeded License Limit Due to Insufficient Procedural Guidance. GOP-12 Revised to Treat 2,530 Mwt Limit as Absolute Limit Requiring Immediate Corrective Action If Exceeded ML18065A5261996-03-0101 March 1996 LER 96-005-00:on 960202,fuse on Main Supply to Two SR DC Panels & Panel Branch Circuit Breakers Not Properly Coordinated.Caused by Inadequate Electrical/App R Design Review.Implemented Hourly Fire tours.W/960301 Ltr ML18065A5111996-02-19019 February 1996 LER 94-012-02:on 940427,determined That Internal Ground in Thermal Margin Monitor Causes Nonconformance W/Rps Design Basis.Incorporated RPS Failure Modes & Effects Analysis in Plant DBD.W/960219 Ltr ML18065A5061996-02-19019 February 1996 LER 96-004-00:on 960118,SIS Disabled W/Primary Coolant Sys Greater than 300 F.Caused by Personnel Error.Permanent Maint Procedure to Disable/Enable SIS Actuation on Low Pressurizer Pressure Will Be Revised to Align W/Ts ML18065A5021996-02-15015 February 1996 LER 96-003-00:on 960115,technicians Found Low Voltage cut- Off for Alternate Shutdown Panel Inverter Set That Resulted in Unavailability of Panel.Caused by Inadequate Post Mod. Readjusted Set Point to Minimum setting.W/960215 Ltr ML18065A4581996-01-31031 January 1996 LER 96-001-00:on 960103,failed to Test Duplicate Equipment. Caused by STS No Longer Containing Requirement for cross- Train Testing of Duplicate Components.Will Submit Request to Delete Subj Requirements from TS.W/960131 Ltr ML18065A4421996-01-19019 January 1996 LER 95-016-00:on 951226,did Not Analyze Primary Coolant Samples within 72 H.Caused by Belief Acceptability to Save Pcs Samples for Choride Analysis Past 72 H.Counseled Chemistry Supervision.W/960119 Ltr ML18065A4041996-01-15015 January 1996 LER 95-014-00:on 950119,PCP Oil Collection Deficiencies Created by FC-860 Piping Mod.Caused by Inadequate DBD for Sys & Lack of Review by Experienced Fire Protection Personnel.Updated Design Basis documentation.W/960115 Ltr ML18065A3291995-12-0404 December 1995 LER 95-013-00:on 951103,circuit Fuse Coordination Deficiency Which Affects App R Safe Shutdown Equipment Noted.Design of Fuse Coordination in Potential Transformer Circuits Will Be Evaluated & Modified as required.W/951204 Ltr ML18065A2361995-11-0202 November 1995 LER 95-012-00:on 950701,discovered Unqualified Electrical Connection in Containment SW Outlet Valve Controller.Caused by Failure of Assigned Engineers to Available Info.Replaced Wire Nuts W/Inline Butt connections.W/951102 Ltr ML18065A2051995-10-20020 October 1995 LER 95-008-01:on 950728,discovered That None of Four Containment High Pressure Channels Would Initiate Reactor Trip Due to Programmatic Deficiencies.Administrative Procedure (AP) 9.44,AP 9.45 & AP 10.44 Will Be Revised ML18065A0841995-09-18018 September 1995 LER 95-011-00:on 950817,CR 40 Withdrawal Occurred When Given Insertion Signal Due to skill-based Error in Crimping & Removing Foreign Matl from CRDM Motor Connection Box.Crd Package replaced.W/950918 Ltr ML18065A0681995-09-14014 September 1995 LER 95-010-00:on 950815,ESFA Resulted in Manual Rt Following Isolation of Pcs.Replaced Failed Instrument Line ML18065A0651995-09-0808 September 1995 LER 95-009-00:on 950728,discovered Lack of Procedural Guidance for Pump Repair Following Fire.Proposed Use of Power Supply Breaker Did Not Adequately Address Effect of Loss of Control Power.Performed Independent Assessment ML18064A8781995-08-28028 August 1995 LER 95-008-00:on 950728,discovered During Design Change Testing That None of Four Containment High Pressure Channels Would Initiate Rt.Caused by Programmatic Deficiencies. Reviewed Selected Tests & Mods from Recent Refueling Outage ML18064A8831995-08-21021 August 1995 LER 95-007-00:on 950720,discovered That 12 Instrument Loops Had V-bolted Type Qualified Cable Splices Connected to Wires W/Exposed Kapton Insulation.Caused by Human Error.All V- Bolted Splices Replaced w/in-line design.W/950821 Ltr 1999-09-02
[Table view] Category:TEXT-SAFETY REPORT
MONTHYEARML18066A6901999-11-0101 November 1999 Rev 5 to Palisades Nuclear Plant Colr. ML18066A6761999-09-30030 September 1999 Monthly Operating Rept for Sept 1999 for Palisades Nuclear Plant ML18066A6271999-09-0202 September 1999 LER 98-011-01:on 981217,inadequate Lube Oil Collection Sys for Primary Coolant Pumps Was Noted.Caused by Design Change Not Containing Appropriate Level of Rigor.Exemption from 10CFR50,App R Was Requested.With 990902 Ltr ML18066A6351999-08-31031 August 1999 Monthly Operating Rept for Aug 1999 for Palisades Nuclear Plant ML18066A6771999-08-31031 August 1999 Operating Data Rept Page of MOR for Aug 1999 for Palisades Nuclear Plant ML18066A6221999-08-20020 August 1999 LER 99-002-00:on 990722,TS Surveillance Was Not Completed within Specified Frequency.Caused by Failure to Incorporate Revised Frequency Into Surveillance Schedule in Timely Manner.Verified Implementation.With 990820 Ltr ML18066A6061999-07-31031 July 1999 Monthly Operating Rept for July 1999 for Palisades Nuclear Plant.With 990803 Ltr ML18066A5201999-06-30030 June 1999 Monthly Operating Rept for June 1999 for Palisades Nuclear Plant.With 990702 Ltr ML18066A4841999-05-31031 May 1999 Monthly Operating Rept for May 1999 for Palisades Nuclear Plant.With 990603 Ltr ML18066A6371999-04-30030 April 1999 Revised Monthly Operating Rept for Apr 1999 for Palisades Nuclear Plant ML18068A5941999-04-30030 April 1999 Monthly Operating Rept for Apr 1999 for Palisades Nuclear Plant.With 990503 Ltr ML18066A4161999-04-0101 April 1999 Rev 4 to COLR, for Palisades Nuclear Plant ML18066A4501999-03-31031 March 1999 Monthly Operating Rept for Mar 1999 for Palisades Nuclear Plant.With 990402 Ltr ML18066A4671999-03-31031 March 1999 Rev 0 to SIR-99-032, Flaw Tolerance & Leakage Evaluation Spent Fuel Pool Heat Exchanger E-53B Nozzle Palisades Nuclear Plant. ML18068A5351999-02-28028 February 1999 Monthly Operating Rept for Feb 1999 for Palisades Nuclear Plant.With 990302 Ltr ML18066A3931999-01-31031 January 1999 Monthly Operating Rept for Jan 1999 for Palisades Nuclear Plant.With 990202 Ltr ML18066A3781999-01-20020 January 1999 LER 98-013-00:on 981222,safeguards Transfer Tap Changer Failure Caused Inadvertant DG Start.Caused by Failed Motor Contactor.Contactor Was Replaced.With 990120 Ltr ML20206F6131998-12-31031 December 1998 1998 Consumers Energy Co Annual Rept. with ML18066A3651998-12-31031 December 1998 Monthly Operating Rept for Dec 1998 for Palisades Nuclear Plant.With 990105 Ltr ML18066A3421998-11-30030 November 1998 Monthly Operating Rept for Nov 1998 for Palisades Nuclear Plant.With 981202 Ltr ML18066A3301998-11-11011 November 1998 Part 21 Rept Re Potential Safety Hazard Associated with Wrist Pin Assemblies for FM-Alco 251 Engines at Palisades Nuclear Power Plant.Caused by Insufficient Friction Fit Between Pin & Sleeve.Supplier of Pin Will No Longer Be Used ML18068A4921998-10-31031 October 1998 Monthly Operating Rept for Oct 1998 for Palisades Nuclear Plant.With 981103 Ltr ML18068A4851998-10-29029 October 1998 LER 97-011-01:on 971012,starting of Primary Coolant Pump with SG Temps Greater than Cold Leg Temps Occurred.Caused by Inadequate Procedures & Operator Decision.Sop Used for Starting Primary Coolant Pump Enhanced ML18066A3181998-09-30030 September 1998 Monthly Operating Rept for Sept 1998 for Palisades Nuclear Plant ML18066A2901998-08-31031 August 1998 Monthly Operating Rept for Aug 1998 for Palisades Nuclear Power Plant.With 980903 Ltr ML18066A3191998-08-31031 August 1998 Revised Monthly Operating Rept Data for Aug 1998 for Palisades Nuclear Plant ML18066A2831998-08-18018 August 1998 LER 98-010-00:on 980721,reactor Manually Tripped.Caused by Failure of Coupling Which Drives Feedwater Pump Main Lube Oil Pump.Main Lube Oil Pump Coupling & Associated Components Replaced & Satisfactorily Tested ML18066A2771998-08-13013 August 1998 Part 21 Rept Re Deficiency in CE Current Screening Methodology for Determining Limiting Fuel Assembly for Detailed PWR thermal-hydraulic Sa.Evaluations Were Performed for Affected Plants to Determine Effect of Deficiency ML20237E0301998-07-31031 July 1998 ISI Rept 3-3 ML18066A2701998-07-31031 July 1998 Monthly Operating Rept for July 1998 for Palisades Nuclear Plant.W/980803 Ltr ML18066A2311998-06-30030 June 1998 Monthly Operating Rept for June 1998 for Palisades Nuclear Plant ML18066A2261998-06-30030 June 1998 LER 98-009-00:on 980531,small Pinhole Leak Found on One of Welds,During Leak Test Following Replacement of Pcs Sample Isolation Valves.Caused by Welder Error.Leaking Welds Repaired ML18066A3061998-06-18018 June 1998 SG Tube Inservice Insp. ML20249C4951998-06-17017 June 1998 Rev 1 to EA-GEJ-98-01, Palisades Cycle 14 Disposition of Events Review ML18066A1781998-06-0909 June 1998 LER 98-008-00:on 980511,noted That Procedure Did Not Fully Satisfy Requirement to Test High Startup Rate Trip Function. Caused by Misunderstanding of Testing Requirements.Revised TS Surveillance Test Procedure & Reviewed Other Procedures ML18066A1711998-06-0101 June 1998 Part 21 Rept Re Impact of RELAP4 Excessive Variability on Palisades Large Break LOCA ECCS Results.Change in PCT Between Cycle 13 & Cycle 14 Does Not Constitute Significant Change Per 10CFR50.46 ML18066A1741998-05-31031 May 1998 Monthly Operating Rept for May 1998 for Palisades Nuclear Plant.W/980601 Ltr ML18066A2321998-05-31031 May 1998 Revised MOR for May 1998 for Palisades Nuclear Plant ML18068A4701998-05-31031 May 1998 Annual Rept of Changes in ECCS Models Per 10CFR50.46. ML18065B2451998-05-13013 May 1998 LER 98-007-00:on 980413,HPIS Sys Was Noted Inoperable During TS Surveillance Test.Caused by Performance of Flawed Procedure.Operators & Engineers Will Be Trained to Improve Operational Decision Making Through Resources & Knowledge ML18066A2331998-04-30030 April 1998 Revised MOR for Apr 1998 for Palisades Nuclear Plant ML18068A3461998-04-30030 April 1998 Monthly Operating Rept for Apr 1998 for Palisades Nuclear Plant.W/980501 Ltr ML18066A3411998-04-22022 April 1998 Rev 0 to EMF-98-013, Palisades Cycle 14:Disposition & Analysis of SRP Chapter 15 Events. ML18065B2071998-03-31031 March 1998 Monthly Operating Rept for Mar 1998 for Palisades Nuclear Plant.W/980403 Ltr ML20217C2741998-03-31031 March 1998 Independent Review - Is Consumers Energy Method (W Method) of Determining Palisades Nuclear Plant Best Estimate Fluence by Combining Transport Calculation & Dosimetry Measurements Technically Sound & Does It Meet Intent of Pts ML18066A2341998-03-31031 March 1998 Revised MOR for Mar 1998 for Palisades Nuclear Plant ML18068A3041998-02-28028 February 1998 Monthly Operating Rept for Feb 1998 for Palisades Nuclear Plant.W/980302 Ltr ML18066A2351998-02-28028 February 1998 Revised MOR for Feb 1998 for Palisades Nuclear Plant ML18065B1641998-02-0505 February 1998 Rev 0 to Regression Analysis for Containment Prestressing Sys at 25th Year Surveillance. ML18067A8211998-01-31031 January 1998 Monthly Operating Rept for Jan 1998 for Palisades Nuclear Plant.W/980203 Ltr 1999-09-30
[Table view] |
Text
David W. Rogers c Plant Safety and Licensing Director l'OWERINli 11/llCHlliAN"S l'ROliRESS Palisades Nuclear Plant: 27780 Blue Star Memorial Highway, Covert, Mi 49043 August 29, 1994 Nuclear Regulatory Commission Document ~ontrol Desk Washington, D. C. 20555 DOCKET 50-255 - LICENSE DPR PALISADES PLANT-LICENSEE EVENT REPORT 94-00S-~OI - LACK OF SEPARATION OR ISOLATION BETWEEN IE AND NON-IE CIRCUITS - SUPPLEMENTAL REPORT Licensee Event Report (LER) 94~008~0I is attached. ~This supplement addresses four discrepancies_ first reported April 28, I994 ana eight *others found--*as a result of ongoing investigations. These discrepancies are reportable in accorijance with IOCFR50.73(~)(2)(ii)(B) as conditioris outside the design basi~
of the plant.
- David W. Rogers Plant Safety and Licensing Director CC Administrator, Region III, USNRC NRC Resident Inspectbr ~ P~lisades Attachment Jr: ... (,,,*.* (). .
-~*** \...
/({~~
/ z(' ,1*,.
A CM5 ENE'RGY COMPANY
NRC Form 366 .
19*83)
- -LICENSEE EVENT REPORT (LERI
.e* U.S. NUCLEAR REGULATORY COMMISSION APPROVED OMB N0."3160*
0104.
- EXPIRES: 8/31/B6 FACILITY NAME 111 DOCKET.NUMBER 121 PAGE 131 Palisades Plant o 5 o o o 2 s 5 OF Q 8 T1TLE14_1 LACK OF SEPARATION OR ISOLATION BETWEEN.1E AND NON-1E CIRCUITS -
SUPPLEMENTAL REPORT EVENT DATE (61 REPORT DATE 161 OTHER FACILITIES INVOLVED (Bl REVISION FACILITY NAMES MONTH DAY YEAR YEAR NUMBER MONTH DAY YEAR N/A o 5 o o o*
0 3 2 9 9 4 9 4 0 0 8 0 1 082994 N/A 0 6 0 0 0 THIS REPORT IS SUBMITTED PURSUANT TO THE REQUIREMENTS OF 10 CFR §:(Check one or more oUhe followingl 1111 OPERATING N 1--..-2-o.-40_2_1b1----------.......--.----------------.......--.-----------------..--......-1-3.-11~1b-1------------1 MOOE 191
. 20.4061*111 Iii) 73.71 lei 20.4061*111 !Iii) OTHER !Specify in Abstract 20.406!0111 lliii) below ft:t in.Text, 20.4061*111 llivl . NRC Form 366AJ 20.4061*111J(v) 60.731*11211iii) 50.731*ll211xr
. LICENSEE CONTACT FOR THIS LER 1121 NAME
'** AREA CODE Paul J. Gire, Staff Licensing Engineer 6 7 6 4 8 9 MANUFAC* REPORTABLE MANUFAC* REPORTABLE CAUSE SYSTEM COMPONENT TUR ER TO NPROS CAUSE SYSTEM COMPONENT TUR ER TO NPRDS SUPPL EM ENT Al REPORT EXPECTED 114 l *
- MONTH DAY YEAR EXPECTED SUBMISSIO N
YES Uf yes, complete EXPECTED SUBMISSION DA TE'i NO DATE 116)
ABSTRACT (Umit to 1400 $paces, i.e., approximeto/y fifteen llingltt-space rype.;,ritten lines) (16)
Between March 29, and May 3, 1994, with the plant in cold shutdown, twelve discrepancies were identified where Class 1 E and non-Class 1E equipment was not isolated or separated as .
required by the Palisades FSAR and IEEE 279 - 1971. These discrepancies are reportable as required by 10CFR~O. 73 (a)(2)(ii)(B) as conditions which were outside the plant's design basis.
- * -~:,Causes tor ~he devi.ations from sep_aration or is~lation ~riteria include inadeguate design ;reviews:;:
and design 1nstallat1on controls utilized at the time of either plant construction or subsequent
- modifications in the 1980's that added cabling or additional control circuits to the plant.
, ....,....Eleven of the twelve discrepancies have been corrected. The twelfth will remain in pl~ce: under~~
. -* an NRC approved deviation until the 1995 refueling outage. Longer term corrective actions
-j--
include full utilization of the recently enhanced moaification review process, providing training to design reviewers regarding specific separa~ion or isolation modification _guidelines previously developed, and developing accurate schematics for affected systems. This report addresses all of the plant's discoveries made as a result of a review of isolation and separation issues.
- NRC Form 366A U.S. NUCLEAR REGULATORY COMMISSION 19-831 APPROVED OMB NO. 3150-0104 EXPIRES: 8/31/85 LICENSEE EVENT REPORT (LERI TEXT CONTINUATION FACILITY NAME Ill DOCKET.NUMBER 121 LEA NUMBER 131 PAGE 141 SEQUENTIAL REVISION YEAR NUMBER NUMBER Palisades Plant 0 5 0 0 0 2 5 5 9 4 - 0 .o 8 - 0 0 2 OF 0 8 Event Descriotion:
On March 29 and 30, and April 9, 1994, with the plant in cold shutdown, it was discovered that some Class 1E (safety-related) circuits were not isolated or separated from non-Class 1E circuits. Requirements for electrical independence arid isolation are defined in the Palisades FSAR, Chapters 7 and 8, which commit to IEEE 279-1971. These require that non-Class 1E circuits be isolated from Class 1E circuits so that a fault in a non-Class 1E circuit would not affect the Class 1E circuit.
- Four discrepancies were identified involving isolation or separation of circuits for the Reactor Protection System (RPS), Engineered Safety Feature.s (ESF), and on the Subcooled Margin Monitor (SMM). Subsequently, it was discovered*that additional Class 1E (safety-related) circuits were not isolated from non:--Class 1E circuits. The plant was in cold shutdown at the time of discovery of all.the deficiencies. The following discrepancies were
Low Temperature Overoressure Protection: The first discovery on March 29, -1994, .. involved a .
lack of isolation between Class 1E Primary Coolant System (PCS) temrerature transmitters that provide inputs to the Reactor Protection System (RPS) via the Therma Margin Monitor (TMM)
- and the Class .1 E Low Temperature Overpressure Protection (LTOP) system. These circuits were not isolated from non-Class 1E PCS temperature indicators used for plant control. The .
LTOP is considered to have been outside the requir~d isolation design basis since its installation I in 1989. . * * . . * **
- Thermal Margin Monitor: Also on March 29, it was found that four channel circuit independence was not provided between the-safety related "upper" and "lower" nuclear power range signals-nor between the safety related TMM circuits. Redundant channels in both the nuclear power ran~e indication system and the TMM systems are routed through the same raceway. In addition, each of these systems is connected to both the non-Class 1E Critical Function Monitorin9 System (CFMS) and plant data logger without adequate circuit Class 1E to non-Class 1E iso.lat1on. *An analysis of the effects of both discoveries lead to *the conclusion
. that the TMM had been outside the plant's separation and.isolation design basis since the TMM was installed in 1988.. . * * . * . .
Inverter Power Cables: As a result of ongoing drawing reviews and physical walkdowns of systems, another discrepancy was identified on March 30, 1994. The power cables from inverters to RPS and ESF instrument loops were not se.Parated in accordance with Palisades design basis cable separation criteria. Cables for "right channel inverters Y20 and Y40 were routed together in the same cable tray, as were cables for "left" channel inverters Y10'and ** **
Y30. This condition had existed since original plant construction. .
Subcooled Margin Monitors: On April 9, in the course of further examinations prompted by the previous discoveries, plant personnel identified that power feeds to the Class 1E Subcooled Margin Monitors (SMMs) were not isolated from power feeds to non-Class 1E devices. The SMMs had been installed in 1980 to meet requirements of NUREG 0737 Item 11.F.2. One requirement was that primary and backup display channels should be electrically independent,*
~~~E~ied from Class 1 E sources, and physically separated from other devices per Reg Guide
NRC Form 388A 19*831
- .*"* U.S. NUCLEAR REGULATORY COMMISSION
0104 EXPIRES:. 8/31 /86 LICENSEE EVENT REPORT (LERI TEXT CONTINUATION FACILITY NAME l 11 DOCKET NUMBER 121 LER NUMBER 131 PAGE 141 SEQUENTIAL REVISION YEAR NUMBER NUMBER Palisades Plant 0500025594-008 -o 0 3 OF 0 8 Reactor Protection System: On April 17, 1994, it was found that there was no isolation between Reactor Protection System (RPS) "B" channel and a 120-volt standard power outlet installed in the same cabinet. Both are supplied by the same breaker. The RPS channel is Class 1E while the outlet, which may be used for any purpose, is not restricted to class 1E loads.
This condition had existed since original plant construction.
Auxiliary Feedwater: Class 1E Auxiliary Feedwater (AFW) -flow control and indication circuits and non-Class 1E Main .Feedwater (MFW) recirculation control circuits were found*on April 17, 1994, unisolated. Circuits were protected by the same fuses. This condition resulted from modifications in 1982 and 1.984. * * , * . .~ . *
- Condensate Storage Tank Level: One of the two Class 1E Condensate Storage Tank (CST) level indication circuits was found April 19, 1994, to be protected by the same fuse as the non-Class 1E diesel fuel oil tank level circuit and the non-Class 1E engineered safeguards room cooler temperature instrument circuit. This condition appears to have resulted from a modification
. made in 1981 or was left in place from original plant construction.
- connection from a breaker used for the Reactor Protection System (RPS) temperature protection and Thermal- Margin Monitor (TMM), both Class 1 E, was also used for the non-Class 1E audible count rate drawer. This discrepancy was identified on April 20, 1994. This condition appears to have resulted from modifications made jn 1980 or 1988, or:.~ was left in place from original plant construction. * * * * .* * . . .
- Inverter output: On April 22, 1994, it was* found that Class 1E breakers are used as isolation devices between Cle1ss 1E and non-Class 1E circuits on all four of the plant's safety related
.. inverters. The impact of a short circuit on any one of the non-Class 1E circuits isolated by
. these breakers could reduce output voltage on all four inverters below the manufacturer's * *
- design amount. This could result in an extended trip time of the breaker, allowing a reduced voltaae to feed the Class lE loads until the breakers tripped. This condition resufted from a combination of original plant construction and modifications made in 1984. **
Core Exit Thermocouoles: On April 27, 1994, it was found that there was no isolation device separating the 16 Class 1E qualified Core Exit Thermocouples (CETs) to the hon-Class* 1E
~>rimary data logger computer. The plant had initially committed to removing the 16 qualified CETs from the primary data logger. A request for a deviation from that previous commitment was made to the Commission on May 20, 1994, and was subsequently approved by the'NRC * **.**'*
on June 1, 1994. The CETs were connected to the Primary Data Logg~r as part of a modification in 1988. *
- -..* M r in M ni or I ola ors: On April 28, 1994, the plant identified that Primary *
..
- oolant ystem Instrumentation Class 1E isolators were not fully qualified in accordance with Reg. Guide 1.97 and Re9. Guide 1. 75 because they were-not tested to demonstrate acceptable isolation from output to input. The instrumentation affected included hot and cold leg
- temperature indicator channels, four channels of the Thermal Margin Monitors (TMM), two
- channels of the Low Temperature Overpressure Protection system (LTOP), two SMMs and two recorders. This condition appears to have *resulted from modifications made in 1980 and 1988.
NRC Form 388A
. *-19-831
- U.S. NUCLEAR REGULATORY COMMISSION APPROVED OMB NO. 3160*
0104 EXPIRES: B/31 /86 LICENSEE EVENT REPORT (LERI TEXT CONTINUATION FACILITY NAME 111 DOCKET NUMBER 121
- LER NUMBER 131 PAGE 141 SEQUENTIAL REVISION YEAR NUMBER NUMBER Palisades Plant 0 I5 I0 I0 I0 I2 I5 I5 9 14 - 0* 01 I8 - 0 I1 0 I4 OF 0 I8 Main Steam Isolation Valves: On May 3, 1994, ongoing reviews identified that the Class 1E main steam isolation valve solenoids were not electricalfy isolated from non-Class 1E equipment.
Non-Class 1E equipment powered from the same fuse as Class 1E equipment included main feedwater block solenoid valves, atmospheric steam dump solenoid valves, turbine bypass solenoid valves and a non-safety related solenoid valve associated with the auxiliary feedwater pump steam supply. This condition had existed since original plant construction.
- For each isolation or separation deficiency identified above, operability determinations were made and the appropriate equipment was declared inoperable. Those cases which required resolution
- prior to startup from the maintenance outage were identified and corrected. Because each I condition iden~ified to date showed ~.he plant outside its design basis, they are reportable in accordance with 10CFR50.73(a)(2)(11)(8). * * . .
Cause Of The Event:
For al! of the .discrepancies ad~res.sed in this reP.~rt an inad.equate or jncomplete revie.w of*. *
. electrical. design allowed the c1rcu1ts to be mod1f1ed or left in place without adequate 1solat1on or separation. A contributor to the problem was a lack of engineering design guides identifying standards; methods, and examples that are needed to achieve isolation or separation. A second contributor was a lack of composite schematic diagrams for use by engineering.
Analvsis of the Event* and Safety Significance Low Temperature Overoressure Protection: This discrepancy involved a lack of electrical isolation between Class 1 E and non-Class 1E temperature monitoring circuits. In two cases, a single .fuse was utilized to power non-Class 1E temperature monitoring instrumentation as well as Class 1E temperature monitoring loops' which provide input to the Reactor Protection System (RPS) and low temperature overpressure protection (LTOP). The fuse also provided power to the Thermal Margin Monitor (TMM) which provides input signals to the RPS for variable low pressure and high power trips .. A fault in the non-Class 1E temperature monitoring instrumentation could have caused the fuses to blow, resulting in a loss of Class 1E functions. This fault would have been immediately apparent to the operators as a loss o~ power to the TMM would result in generation
- Faults resulting in blowing fuses Would also affect the LTOP_ system. Loss of the temperature input would cause the LTOP to alarm, however, the low temperature input to the system .would .*
als.o result in generation of a signal to open the primary coolant system (PCS) power opera~ed relief valves (PORV). An alarm would be generated to alert the operator to the PORV opening.
During power operations, opening of a PORV would not be of any consequence as the PORV block valves are normally closed. Opening of a PORV during reduced temperature operations would result in a pressure reduction in the PCS. The operator could terminate this pressure reduction by closing the PORV block valves.
Thermal Margin Monitor: This discrepancy involved a lack of four channel cable separation for cables connected to the input of the TMMs. All four channels of upper and lower nuclear power inputs to the TMM were routed to remote data processors through a single cable. The upper and lower nuclear power signals are used in the TMM to aenerate an axial shape imbalance (ASI) signal. This ASI signal is then used to generate a variable PCS low pressure trip setpoint for
NRC Form 366A U.S. NUCLEAR REGULATORY COMMISSION (8-831 . APPROVED OM8 NO. 3160*
0104 EXPIRES: 8/31/86 LICENSEE EVENT REPORT (LERI TEXT CONTINUATION FACILITY NAME (11 DOCKET NUMBER 121 LER NUMBER 131 PAGE (41 SEQUENTIAL REVISION YEAR NUMBER NUMBER Palisades Plant 0 5 0 0 0 2 5 5 9 4 - 00 8 - 0 0 5 OF 0 8 input into the RPS. Failure in the common cable carrying signals for all four channels.would have .
resulted in erroneous calculation of ASI and generation of an incorrect low pressure trip setpoint.
The TMM however, also generates a constant minimum low pressure trip value and selects the higher of the ASI biased v~lue or the minimum value. Therefore faults in the cable would have resulted in a default to the constant low pressure trip setpoint and not a complete loss of low pressure trip capability. -
Inverter Cable Separation: This deficiency, identified on March 30, 1994, involved a lack of power cable separation from inverters to RPS and ESF instrument loops. Cables for the "right" and "left" channels were installed in the same cable trays rather than separated. .
The RPS is designed as a deenergize-to-trip system. Postulated failures of the cables (short, open or ground) sharing a common raceway would have resulted in a loss of power to the system. This loss of power would deenerg1ze the associated RPS channel resulting in the one ..
channel failing to a trip condition. If both cables faulted, the two out of four trip logic of the RPS, would have been s~tisfied, resulting in a reactor trip. ..
The ESF detection circuits are designed deenergize to act~ate whereas the actuation circuits (two .
- out of four logic) are designed energize to actuate. Postulated failures of the cables (short, operi .
or ground) sharing a common raceway vyould result in a loss of*power to.the system. If both cables faulted, two of the four detection relays would drop out, providing inputs to both "left"
- and "right" channel actuation circuits. As one of the faulted cables also powers one channel of actuation circuits, only one channel of required safeguards equipment would have been actuatep.
Subcooled Margin Monitors: On April 9, 1994, the Subcooled Margin Monitors (SMM) were
- declared inoperable when it was found that this Class 1E system was powered from the same fuse as the non-Class 1 E feedwater control solenoid valves. Loss of the SMM would be obvious j to the operator as the digital display would be dark. In a case where both SMMs are lost, plant
- procedures require that the operator manually calculate subcooling margin using pressure and
. temperature curves o_r steam tables. . . * .. . * * *. .
Reactor Protection S~stem: This deficiency involved a 120-volt AC outlet being connected to .
one channel of the R S without adequate electrical isolation. A fault in equipment connected to the 120-volt power outlet could have resulted in losing *power to one channel of the RPS. Each
- of the four RPS channels is designed to trip on loss of power. This fault could have resulted in
. tripping one-channel, leaving the RPS in a one out of three tripping scheme. As the 120-volt
- *outlet was only connected to one channel of the RPS, this lack of isolation is not considered,to **..<
. . : ,.be safety significant. . * . ..
Auxiliary Feedwater: This discrepancy involves a lack of electrical isolation between non-Class 1E instrumentation in the main feedwater system and Class 1E auxiliary feedwater instrumentation. -
For the "Left" channel circuitry, a fault in the non-Class 1E components would result in a loss of 1 of 2 auctioneered DC power supplies which provide auxiliary feedwater flow control and
- indication. The remaining auctioneered power supply would remain available and auxiliary feedwater control and indication would not be affected. Two backup redundant AFW flow
.' ~<:)*
. .., . NRC Form 366A U.S. NUCLEAR REGULATORY COMMISSION
.
- 1&-83) APPROVED OMB NO. 3160*
0104 EXPIRES: 8/31/86 LICENSEE EVENT REPORT (LERI TEXT CONTINUATION FACILITY NAME 11 l DOCKET NUMBER 12) LER NUMBER 131 PAGE 14)
SEQUENTIAL REVISION YEAR NUMBER NUMBER Palisades Plant 0500025594-008-0 0 6 OF 0 8 indicators (one per steam generator) would, however, lose power and be unavailable. Forthe "Right" .channel circuitry, *a fault in the non-Class 1E components would result in a loss of flow control and indication to both steam generators. The flow control valves in this train of AFW would fail open assuring that a supply of feedwater was available for removing heat from the steam generators in the event that AFW co<;>ling was req~ired. The operator would rely on steam generator level to control AFW flow by cycling the AFW pumps as necessary.
Condensate Storage Tank Level: This discrepancy involves a lack of electrical .isolation between non-Class 1E instrumentation and Class 1E condensate storage tank level instrumentation. A fault in either of the two non-Class 1E indication loops could result in a loss of tank level
- monitoring loop LT-2021. A redundant tank level monitoring loop, LT-2022~ would have .been .
available to provide control room operators with an indication of Condensate Storage Tank level.
Reactor Protection System Tem~erature Protection and Thermal Margin Monitor: This * *
- discrepancy involves a .lack of e ectrical isolation between the non-Class 1E source range audible countrate amplifier and Class 1E temperature monitoring equipment. A fault in the no*n..:c1ass 1E audible count rate drawer could cause a loss of the Class 1E RPS temperature protection cha~nel "D". This would result in the los.s of th~t channel's inputs to the Subcoole~ Margin_ ..
Monitors (SMMs) and one channel of Variable High Power (VHP) and-Thermal Margin/Low .
Pressure (TM/LP) trips. With the loss of the "D" channel inputs to the SMMs the operator would receive an annunciator alarm. However, the SMM would continue to function using redundant
.temperature inputs from other sources. The loss of the "D" channel of TM/LPNHP trips would also be alarmed in the control room, "D" channel could be placed in the bypass condition, and
- the resultant two out of three tripf?ing logic would be used. It has been concluded that, .even .. ,.
with the fault, the (RPS) would still have been capable of performing its safety function. .
- Inverter output: Class 1E inverter output breakers were used as isolation devices between Class 1E and non:--Class 1E circuits on all four 120 vac preferred power inverters. Due to the current limiting nature of inverters, short circuits on the non-Class 1E loads have the potential to reduce voltage below the manufacturer's minimum requirements for the equipment being fed from the .
inverters for a period of between 8 and 25 seconds. A short circuit on one of the unfused non:..
Class 1E inverters would result in a trip of one channel of the reactor protection system .. The remaining three inverters would remain available to power vital instrumentation. The affected inverter's output voltage would recover in 8 to 25 seconds. . * *.
- Core Exit Thermocouples: Palisades has 16 core exit thermocouples (CETs) which provide .
operators information on primary coolant conditions during accident conditions. These .CETs . .. *. *
- -were found connected to a non-Class 1E data logger computer. A fault on the non-Class"1 E *data .. *
- logger computer could potentially render all of these thermocouples inoperable. Although it is
- considered unlikely that a single fault would affect all .16 circuits, other temperature indications including hot and cold leg temperatures would still have been available. These temperature indicators in conjunction with the reactor vessel level monitors and SMMs would provide the operator with sufficient information to monitor for potential inadequate core cooling. The plant
. requested, and received approval for, a temporary deviation from the commitment to remove the ***"' *
- 16 CETs from the data logger on June 1, 1994. The CETs will, however, be disconnected from
..the non-class 1E datalogger during the 1995 refueling outage. * * *
. ., . .,r---------------'I NRC Form 366A U.S. NUCLEAR REGULATORY COMMISSION.19-831 APPROVEO OMS NO. 3160-0104
~PIRES: 8/31186 LICENSEE EVENT REPORT (LERI TEXT CONTINUATION FACILITY NAME 111 DOCKET NUMBER 121 LER NUMBER 131 PAGE 141 SEQUENTIAL REVISION YEAR NUMBER NUMBER Palisades Plant 0 5 0 0 0 2 5 5 9. 4 - 0 0 8 -C 0 0 7 OF 0 8
- Subcooled Marcin Monitor Isolators: This discrepancy involved electrical signal isolators in the
- primary.. coolant system temperature monitoring loops. No documentation was available for these isolators demonstrating their ability to prevent a fault on the output side of the device.
from degrading below an acceptable level for the circuit connected to the device input. These isolators are used for two applications. First is isolation of two temperature channels which feed the SMMs. An electrical fault in one of these channels or the SMM could result in a reactor trip if- two of the High Power trips or two of the TM/LP trips were actuated. In the event the reactor" did not trip because of erroneous indication, the control room would have quickly noted the problem given the high visibility of the Var*iable High Power Trip instrumentation. The second
- application of these isolators is to isolate non-class 1E instrumentation used for reactor control.
A fault in control circuitry could propagate to the safety channelcircuitry.<One channel of the
- instrumentation would be disabled. A reactor trip could riot result but any temperature error would be quickly noted due to the high visibility of the instrumentation in the control room.
Although no qualification tests were available for these electricaf isolators, they are similar in design to other isolators (transformer coupled) which have been successfully qualified. It is believed that if these isolators had been tested they would have been shown to be. acceptable for their application. * * *
- .* *:Main Steam lsol~tion Val'(es: This discrepancy involv~s a lack-of'electrical isolation between
- the Class 1E main steam 1solat1on valve (MSIV) actuation solenoid valves and non-Class 1 E
- equipment including the atmospheric dump valve and turbine bypass valve control circuitry. A fault in the non-Class 1 E circuitry could have resulted in blowing fuses. which provide power to
- the MSIV solenoids. These solenoids are energize to actuate and operate valves to remove air .
from the MSIV operators to allow them to close. There are two redundant MSIV isolation .
control circuits and each of those circuits provides output signals to close both valves. Thus, *
- even if the fuses were blown in one of the circuits, the redundant circuit would have remained -
available to actuate both MSIVs if required. The control povver schemes for the MSIVs contain power available lights located in the control room. Had the MSIV fuses blown, the .control. .
- power lights woufd have extinguished.
- This would have been noted by the control room operators during their routine rounds in the control room. . * .*.
Corrective Actions:
To provide higher quality designs, a number of enhancements to the plant's design change program have taken place in recent years. In the early .1990s, modification procedures*were revised to more clearly identify separation and isolation requirements. By 1993, engineering guidelines had been developed to identify specific approaches to implementing effectiv.e_channel .
separation and Class 1 E to non-Class 1 E isolation in the field. These guidelines are now * . **-
'**' referenced in the plant modification procedures. . .
- . Prior to 1994 the plant's modification process was revised to require a multi-disciplinary group
-.-'. * , review of all safety-related design changes just prior to their release for installation. _*
NRC Form 366A . U.S. NUCLEAR REGULATORY COMMISSION 19-83) APPROVED OMB NO. 3160-0104
- LICENSEE EVENT REPORT (LERI TEXT CONTINUATION EXPIRES: 8/31 /86 FACILITY NAME 11 l DOCKET NUMBER 12) LER NUMBER 131 PAGE 14)
SEQUENTIAL REVISION YEAR NUMBER NUMBER Palisades Plant Q 5 Q Q Q 2 5 5 9 4 - Q Q 8 - Q 1* Q 8 . OF Q 8 During the recent maintenance outage an overall review of channel separation and Class lE-10 ...
non-Class 1E isolation was conducted; As part of this review, composite connection.diagrams for preferred AC power circuits were developed .. Prior to startup from that outage, all identified separation and isolation deviations were corrected with the exception of the Core Exit Thermocouples which will be corrected during the 1995 refueling outage. A request for .a
- deviation to allow the CETs to remain in place was granted by the NRC on June 1, 1994.
Training of plant personnel regarding the Class 1 E to non-Class 1 E isolation and associated design guidelines and bases will be conducted as part of technical staff training.
Previous Occurrences:
LER 94-008.
LER 93-006 Jj,***.