Text

Proposed Tech Specs,Changing Pressurizer Cooldown Limit from 100 to 200 F/H,Adding Word Shall to TS 3.1.2c,adding Average Hourly to Column Headings in TS 3.1.2c & Removing Action 3.3.3C from Page 3-31 to 3-30
	ML18065A176
Person / Time
Site:	Palisades
Issue date:	10/17/1995
From:	; CONSUMERS ENERGY CO. (FORMERLY CONSUMERS POWER CO.)
To:	;
Shared Package
ML18065A175	List: ML18065A174; ML18065A176;
References
	NUDOCS 9510250220
	Download: ML18065A176 (73)
	v • d • e

. . ,\*

ATTACHMENT 4 Consumers Power Comp.any Palisades* Plant Docket 50-255

OPERATING LICENSE AND TECHNICAL SPECIFICATIONS CHANGE REQUEST Existing Technical Specifications and Basis Pages With Proposed Changes Marked

9510250220 951017 PDR ADOCK 05000255 30 Pages P PDR

y 3.1 PRIMARY COOLANT SYSTEM 3 .1.1 Operable Components (continued)

Basis When primary coolant boron.concentration is being changed, the process must be uniform throughout the primary coolant system volume to prevent stratification of primary coolant at lower boron concentration which could result in a reactivity insertion. Sufficient mixing of the primary coolant is assured if one shutdown cooling or one primary coolant pump is in

. operation. 111 The shutdown cooling pump will circulate the primary system volume in less than 60 minutes when operated at rated capacity. By imposing a minimum shutdown cooling pump flow rate of 2810 gpm, sufficient time is provided for the operator to terminate the boron dilution under asymmetric flow conditions. 151 The pressurizer volume is relatively inactive, therefore it will tend to have a boron concentration higher than the rest of the primary coolant system during a dilution operation. Administrative procedures will provide for use of pressurizer sprays to maintain a nominal spread between the boron concentration in the pressurizer and the primary system during the addition of boron. 121 The 57% pressurizer level, in section 3.1.lh(4), is not an analytical result, but simply a decision point between having and not having a bubble. It was chosen to agree with the maximum programmed level during power operation.

The limitation, in section 3.1.li, on operating P-50A and P-50B together with T0 below 300°F allows the Pressure Temperature limits of Figures 3-1 and 3-2 to be higher than they would be without this limit .

The FSAR safety analysis was performed assuming four primary coolant pumps were operating for accidents that occur during reactor operation. Therefore, reactor startup above hot shutdown is not permitted unless all four primary coolant pumps are operating~ Operation with three primary coolant pumps is permitted for a limited time to allow the restart of a stopped pump or for reactor internals vibration monitoring and testing.

Requiring the plant to be in hot shutdown with the reactor tripped from the C-06 panel, opening the 42-01 and 42-02 circuit breakers, assures an inadvertent rod bank withdrawal will not be initiated by the control room operator. Both steam generators are required to be operable whenever the temperature of the primary coolant is greater than the design temperature of the shutdown cooling system to assure a redundant heat removal system for the reactor.

The transient analyses were 6 performed assuming a vessel flow at hot zero power (532°F) of 140.7 x 10 lb/hr minus 6% to account for flow measurement uncertainty and core flow bypass. A DNB analysis was performed in a parametric fashion to determine the core inlet temperature as a function of pressure and flow for which the minimum DNBR is equal to the DNB correlation safety limit. This analysis includes the following uncertainties and a11 owances: 2% of ...rated power for power measurement; +/-0. 06 for AS I measurement; +/-.W:~l? psi for pressurizer pressur~.i +/-7°F for inlet temperature; and 3% measureme"fff and 3% bypass for core flowl1 . =. In addition, transient biases were included in the determination of the allowable reactor inlet temperature.

3-2 Amendment No. frl-, SS, H-7, H-8, +/-3-1-, 7, 63-, 69,

1-- - - - .. -

3.1 PRIMARY COOLANT SYSTEM (continued)

The limits of validity of the Tinlet equ(ltion are:

1800 ~ pressure ~ 2200 psia 100.0 x 106 ~ Vessel Flow ~ 150 x 106 lb/h ASI as shown in Fi g1:1Pe 3. O!l1!m!@;B,:!t With measured primary coolant system flow rates > 150 M lbm/hr, limiting the maximum allowed inlet temperature to the T1"I\' LCO at 150 Mlbm/hr increases the margin to DNB for higher PCS flow rates .

The Axial Shape Index alarm,channel is being used to monitor the ASI to ensure that the assumed axial power profiles used in the development of the inlet temperature LCO bound measured axial power profiles. The signal representing core power (Q) is the auctioneered higher of the neutron flux power and the Delta-T power. The measured ASI calculated from the excore detector signals and adjusted for shape annealing (Y 1) and the core power constitute an ordered pair (Q,Y 1). An alarm signal is activated before the ordered pair exceed the boundaries specified in the COLR.

The *requirement that the steam generator temperature be ~ the PCS temperature when forced circulation is initiated in the PCS ensures that an energy addition caused by heat transferred from the secondary system to the PCS will not occur. This requirement applies only to the initiation of forced

circulation (the start of the first primary coolant pump) when the PCS cold leg temperature is < 430°F. However, analysis (Reference 6) shows that under limited conditions when the Shutdown Cooling System is isolated from the PCS, forced circulation may be initiated when the steam generator temperature is higher than the PCS cold leg temperature.

References (1) Updated FSAR, Section 14.3.2.

(2) Updated FSAR, Section 4.3.7.

(3) Deleted (4) EMF-92-178, Revision 3, Section 15.0.7.1 (5) ANF-90-078 (6) Consumers Power Company Engineering Analysis EA-A-NL-89-14-1 3-.3 Amendment No. a-!, *M, H-7, HS, -l-3-:l-, 34, -l-3-7, -14a-, ~' §.9., .f.e9.,

3.1 PRIMARY COOLANT SYSTEM Specification

3.1.2 PCS pressure, PCS temperature, and PCS heatup and cooldown rates shall be maintained within the following limits:

a.

b.

The primary coolant system (PCS) pressure shall be maintained within the limits of Figures 3-1 and 3-2.

The pressl:Jri zer heat up aAel ceel elmm rates be mai Atai Aeel J I00°F/heur **.

c. Tl:U~, ..Jffi mary cool ant system (PCS) heatup and cool down rates 1:0:1J:mt:be maintained within the following limits:

In l ~ia~~~~e~~~~~! CT) ft§l,~!lll,ll~l::~::,:;::::::::::I\:::::\:M~~\~,~~\WR:~1:1'lL i mi t T ~ 170°F 20°F/hour 40°F/hour 250 ~ T > 170°F 40°F/hour 40°F/hour 350 > T > 250°F 60°F/hour ** 60°F/hour T ~ 350°F -100 °F/hour l00°F/hour

- When shutdown cooling isolation valves M0-3015 and M0-3016 are open, PCS heatup rate shall be maintained ~ 40°F/hour and the pressurizer heatup rate shall be maintained ~ 60°F/hour .

Applicability Specification 3.1.2 applies at all times.

Action

a. If the limits of Specification 3.1.2 are exceeded:

1. Return to within limits within 30 minutes, and

2. Determine that the PCS condition is acceptable for continued operation within 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months .

b. If any action required by 3.l.2a is not met and the associated completion time has expired:

1. The reactor shall be placed in HOT SHUTDOWN within 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months , and

2. The reactor shall be placed in a COLD SHUTDOWN with PCS pressure less than 270 psia, within 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months .

~ 3-4 Amendment No. Y, 41-, .§.§., 89, IN-, -H-7, 3+, 63-,

3.1 PRIMARY COOLANT SYSTEM Basis - Pressure Temperature Limits:

The Primary Coolant System Pressure-Temperature limits are calculated for a reactor vessel wall fluence of 2.192 x 10 19 nvt. Before the radiation exposure of the reactor vessel exceeds that fluence, Figures 3-1 and 3-2 shall be updated in accordance with the following criteria and procedure:

1. US Nuclear Regulatory Commission Regulatory Guide 1.99 Revision 2 has been used to predict the increase in transition temperature based on integrated fast neutron flux and surveillance test data. If measurements on the irradiated specimens show increase above this curve, a new curve shall be constructed such that it is above and to the left of all applicable data points.

2. Before the end of the integrated power period for which Figures 3-1 and 3-2 apply, the limit lines on the figures shall be updated for a new integrated power period. The total integrated reactor thermal power from start-up to the end of the new power period shall be converted to an equivalent integrated fast neutron exposure (E ~ 1 MeV). Such a conversion shall be made consistent with the dosimetry evaluation of capsule W-290(12).

3. The limit lines in Figures 3-1 and 3-2 are based on the requirements of Reference 9, Paragraphs IV.A.2 and IV.A.3.

All components in the primary coolant system are designed to withstand the effects of cyclic loads due to primary system temperature and pressure

changes.(!) These cyclic loads are introduced by normal unit load transients, reactor trips and start-up and shutdown operation. During unit start-up and shutdown, the rates of temperature and pressure changes are limited. A er The reactor vessel plate and material opposite the core has been purchased to a specified Charpy V-Notch test result of 30 ft-lb or greater at an NOTT of+

I0°F or less. The vessel circumferential weld has the highest RTNDT of plate, weld and HAZ materials at the fluence tG which the Figures 3-1 and 3-2 apply.(10) The unirradiated RTNDT has been determined to be -56°F.(ll) An RTNDT of -56°F is used as an unirradiated value to which irradiation effects are added. In addition, the plate has been 100% volumetrically inspected by ultrasonic test using both longitudinal and shear wave methods. The remaining material in the reactor vessel, and other primary coolant system components, meets the appropriate design code requirements and specific component function and has a maximum NOTT of +40°F.(5)

As a result of fast neutron irradiation in the beltline region of the core, there will be an increase in the RTNoT with operation. The integrated fast neutron (E >l MeV) fluxes of the reactor vessel are contained in Reference 13.

3-7 Amendment No. !8-, 4-l, ~' 89, 9+, H-7, 3+, 63-,

3.3 EMERGENCY CORE COOLING SYSTEM (Continued) 3.3.3 Prior to returning to the Power Operation Condition after every time the plant has been placed in the Refueling Shutdown Condition; or the Cold Shutdown Condition for more than 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months and testing of Specification 4.3.h has not been accomplished in the previous 9 months, or prior to returning the check valves in Table 4.3.1 to service after maintenance, repair or replacement, the following conditions shall be met:

a. All pressure isolation valves listed in Table 4.3.1 shall be functional as a pressure isolation device, except as specified in b. Valve leakage shall not exceed the amounts indicated.

b. In the event that integrity of any pressure isolation valve specified in Table 4.3.1 cannot be demonstrated, at least two valves in each high pressure line having a non-functional valve must be in and remain in, the mode corresponding to the isolated condition. 111 1

Motor-operated valves shall be placed in the closed position and power supplies deenergized.

3.3.4 Two HPSI pumps shall -be operable when the -PCS temperature is >325°F.

a) One HPSI pump may be inoperable provided the requirements of Section 3.3.2.c are met.

3.3.5 Two HPSI pumps shall be rendered incapable of injection into the PCS when PCS temperature is <300°F, if the reactor vessel head is installed.

Note: Specification 3.3.5 does not prohibit use of the HPSI pumps for emergency addition of makeup to the PCS.

3-30 Amendment No . lG-1-, i:-+/---7, -l-3+, -6--l-, -l- *

.§-!.,

3.3 EMERGENCY CORE COOLING SYSTEM (Co~tinued)

c. If SpecificatieA a. aAa b. caAAet be met, aA eraerly shijtaewA shall be iAitiatea aAa the reacter shall be iA hat shijtaewA ceAaitieA withiA 12 heijrs, aAd cela shijtdewA withiA the Aext 24 heijrs.

The normal procedure for starting the reactor is, first, to heat the primary coolant to near operating temperature by running the primary coolant pumps.

The reactor is then made cri ti ca1 by withdrawing contra 1 rods and dil ut i"ng boron in the primary coolant. 111 With this mode of start-up, the energy stored in the primary coolant during the approach to criticality is substantially equal to that during power operation and, therefore, all engineered safety features and auxiliary cooling systems are required to be fully operable. During low-temperature physics tests, there is a negligible amount of stored energy in the primary coolant; therefore, an accident*

comparable in severity to the design basis accident is not possible and the engineered safeguards' systems are no_t required.

The SIRW tank contains a minimum of 250,000 gallons of water containing a minimum of 1720 ppm boron and a maximum of 2500 ppm. This is sufficient boron concentration to provide a 53 shutdown margin with all control rods withdrawn and a new core at a temperature of 60°F.

Heating steam is ~rovided to maintain the tank above 40°F to prevent freezing. The 1.43% boron (2500 ppm)-solution will not precipitate out above 32°F. The source of steam during normal plant operatiQn is extraction steam line in the turbine cycle .

The limits for the safety injection tank pressure and volume assure the required amount of water injection during an accident and are based on values used for the accident analyses. The minimum 174-inch level corresponds to a volume of 1040 ft 3 and the maximum 200-inch level corresponds to a volume of 1176 ft3.

Prior to the time the reactor is brought critical, t~e valving of the safety injection system must be checked for correct alignment and appropria~e valves locked. Since the system is used for shutdown cooling, the valving will be changed and must be properly aligned prior to start-up of the reactor.

The operable status of the various systems and components is to be demonstrated by periodic tests. A large fraction of these tests will be perform~d while the reactor is operating in the power range. If a component is found to be inoperable, it will be possible in most cases to effect repairs and restore the system to full operability within a relatively short time. For a single component to be inoperable does not negate the ability of the system to perform its function, but it reduces the redundancy provided in the reactor design and thereby limits the 3~31 GhaA§e Ne. I

Amendment No. -l-l-7, ~' ~' ~

l.7 ELECTRICAL SYSTEMS {Cont'd}

a. Station power transformer I-2 {2400 V} may be inoperable for up to 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months provided the operability of both diesel generators is demonstrated immediately.

b. Start-up transformer I-2 (2400 V} may be inoperable for up to 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months provided the operability of both diesel generators is demonstrated immediately. Continued operation beyond 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months is permissible provided that a report is sent to the NRC immediately with an outline of the plans for prompt restoration of the sta.rt-up transformer and the additional precautions to be taken while the transformer is out of service, and continue operating until notified differently by the NRC.

c. 2400 V engineered safeguards bus IC or ID may be inoperable for up to 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months provided the operability of the diesel generator associated with the operable bus is demonstrated immediately and there are no inoperable engineered safety feature components associated with the operable bus.

d. 480 V distribution bus II or I2 may be inoperable for up to 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months provided there are no inoperable safety feature components associated with the operable bus.

e. MCC No. I and 7 or 2 and 8 may be inoperable for up to 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months provided there are no inoperable safety feature components associated with the operable pair _of .MCC.

f. I25 V d-c bus No. I or 2 may be inoperable for up to 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months provided there are no inoperable safety feature components associated with the operable -bus and adequate portable emergency lighting is available during the inoperability of the No. 2 bus~

g. One of the four preferred a-c buses may be inoperable for 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months provided the reactor protection and engineered safety feature systems supplied by the remaining three buses are all operable.

h. One of the station batteries may be inoperable for 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months , providing both battery chargers on the affected bus are in operation.

i. One of the diesel generators may be inoperable for up to 7 daysx {total for both} during any month, provided the other diesel is started to verify operability, shutdown and the controls are left in the automatic mode, and there are no inoperable engineered safety feature components associated with the operable diesel generator.

19 ~ays eAe time eAly, fer the meAth ef .May 1985.

3-42 Amendment No. SS,

3.11 POWER DISTRIBUTION INSTRUMENTATION 3.11.1 INCORE DETECTORS

~ LIMITING CONDITION FOR OPERATION The incore detection system shall be operable:

a. With at least 160 of the 215 possible incore detectors and 2 incores per axial level per core quadrant.

b. With the incore alarming function of the datalogger operable and alarm set points entered into the datalogger.

APPLICABILITY (1) Item a. above is applicable when the incore detection system is used for:

Measuring quadrant power tilt, Measuring radial peaking factors, Measuring linear heat rate (LHR), or Determining target Axial Offset (AO) and excore monitoring allowable power level.

(2) Items a. and b. above are applicable when the incore detection system is used for monitoring LHR with automatic alarms. (lncore Alarm System.)

ACTION 1:

With less than the required number of incore detectors, do not use the system for the measuring and calibration functions under (1) above.

ACTION 2:

With the alarming function of the datalogger inoperable, do not use the system for automatic monitoring of LHR (Inoperable Incore Alarm System).

Operation may continue using the excore monitoring system as specified in 3.11.2 or by meeting the requirements of 3.23.1.

The operability of the incore detectors with the specified minimum complement of equipment ensures that the measurements obtained from use of this system accurately represent the spatial neutron flux distribution of the reactor core. The operability of the incore ~larm system depends on the availability of the datalogger as well-as the operability of a minimum number of incore detectors. Incore alarm set points must be updated periodically based on measured power di stri but.i.9.D..~.~...... ..The i ncore detector Channel Check is normally performed by an eff 1i rrn:P.JP.Hli!J]i.!g computer program that carrel ates readings with one another and wi th. . . C"oiii"J)""lited power shapes in order to identify inoperable detectors .

3-56 Amendment No. 50, 58, 68, 144, ~,

3.15 REACTOR PRIMARY SHIELD COOLING SYSTEM U~;M~l\:l!d

- ~:*:*:*:*:*:*:*:*:*:*:*:*:

Aflfll i eabi 1i tv

Applies te the shield eeeliRg system.

Objeethe Te assure the eeRerete iR the reaeter eavity dees Ret everheat aRd develep exeessive thermal stress.

Sf)eeifieatieR 0Re shield eeeliRg pump aRd eeeliRg eeil shall be iR eperatieR ~JheRever eeeliRg is required te maiRtaiR the temperature ef the eeRerete belew appreximately 16§°F.

The shield eeeliRg system is used te maiRtaiR the eeRerete temperature belew 16§°F, thus preveRtiRg weakeRiRg ef the strueture threugh less ef meisture.

The strueture must remaiR iRtaet duriRg a DBA te preelude damage te the reaeter euildiRg sump aRd the pluggiRg ef the suetieR liRes te the-eRgiReered safeguards pumps. 0Re pump aRd eeeliRg eeil is mere thaR adequate te remeve the 120, 000 Btu/hr heat 1ead at RATED POWER eperat i eR. 111 RefereRee

(1) FSAR, Seeti eR 9. 2. I.

3-62 Amendment No. 8-l, &2-,

J.16 ESF SYSTEM INSTRUMENTATION SETTINGS Basis: Table 3.16 (continued}

4. Steam Generator Low Pressure - A separate Steam Generator Low Pressure (SGLP} signal is provided from each generator. The individual channel signals from each generator are combined in 2 out of 4 logic to initiate a SGLP si~nal for that generator. Each SGLP signal actuates closure of both Main Steam Isolation Valves (MSIVs} and closure of the feed water regulating valve and its bypass for the associated generator.

The setpoint was chosen to be low enough to avoid actuation during plant operation, but be close enough to full power operating pressure to be actuated quickly in the event of a MSLB. The setting of includes a -22 psi uncertain\r allowance and was the setting used in the FSAR Section 14 analysis. 1 .

5. Steam Generator Low Level - The Auxiliary Feedwater Actuation Signal (AFAS} is initiated by 2 out of 4 low level signals occurring for either steam generator. The setpoint is the same as that for Reactor Trip. The setpoint was chosen to assure that Auxiliary Feedwater Flow would be initiated while the steam generator could still act as a heat sink and steam source, and to assure that a reactor trip would not occur on low level without the actuation of Auxiliary Feedwater.

6. SIRW Tank Low Level - Four SIRWT level sensors are arranged to provide two independent Recirculation Actuation Signals. Each low level sensor~ is

powered from a separate Preferred AC -bus; thus two ar~ultimately powered from each station battery. Each Recirculation Actuation Signal (RAS} circuit is wired with the contacts from the pair of level sensors powered from the same battery in parallel. These two parallel circuits are wired in series, producing a "l out of 2 taken twice" logic. RAS for each train is actuated by either switch from the left battery sensing low level concµrrently with either switch from the right battery. This circuit is illustrated in reference 3.

The RAS signal is actuated by separate sensors from those which provide tank level indication. The allowable range of 21" to 27" above the tank floor corresponds to 1.1% to 3.3% indicated level. Typically the actual setting is near the midpoint of the allowable range.

Each RAS actuates the valves in the injection and spray pump suction lines for the associated train switching the water supply from the SIRW tank to the containment sump for a recirculation mode of operation. The time required to reach the RAS set point depends on the initiating event ....... .F..9U.QW5.!1.g.... a OBA, RAS would occur after a period of approximately 20 minutes i'i~S.Uml!ng:!Jamm

~!l~!:~1,~1w:~:~~,91:1,~:!~~!,!l!~'!:,9:,~1:,w11~:J~f:1:,~m!;~':::::::,5:~~1:~:*;t~*~:;:~:e:~~~~ n~e~as positive suction head following an accident, but prevent the pumps from running dry during the 60 second switchover .

B 3.16-2 Amendment No. ~'

3.17 INSTRUMENTATION SYSTEMS Basis: Instrumentation Systems 3.17 (continued)

Instruments Affecting Multiple Specifications Table B 3.17-1 Affected Required Instrument channels Specifications Start1:113S.O.itffjj Range NI-Oll;QI Counf"'Rate Indication@ C-150 3.17.5 #1 Wide Range NI-1:~203 & 11,104 Flux level 10-4 interlock 3.17.1 #3, 4, 6, 10, & 11 Wide Range NI-l)l.%03 & 02#04 Start-up Rate 3 .17 .1 #3 i~li:iiiili;:~i:i:illlil:1i:::::lllli1:il::ii:1:~iiil:::::::;i:il::~::iil:~::ii:I]iM:::::]:::::]l:i.:It:I1::I]:JI:::::::~mI:::1I::11:im1I::::i::~:::~:z::~::iI:i:!:

Power Range NI-05 - 08, Power level signal 3 . 17 . 6 #14 ' 17 ' & 2~:~::~:~:::~:::~:1:~:1:~:'

Power Range NI-05 - 08, Power level signal Power Range NI-05 - 08, Q-power 3 .17 .1 #2 & 4 Power Range NI-05 - 08, ASI 3 .17 .1 #2 & 4 Power Range Nl-05 - 08, AS! 3

17

6 #-1-&1:6.

Power Range NI-05 08, ASI 3.1.1 ¥9' Power Range NI-05 & 06; 15% interlock 3 .17 .1 #3 & 7 Power Range Nl-05 & 06; 15% interlock 3.17.6 #18

PCS PCS PCS PCS TC, TC, TC, TC, Temperature signal Temperature indication Q-power Q-power 3 .17 .1 #4 3 .17. 5 3 .17 .1 #2 & 4 3.17.6 # 14

6 &7 PCS TH, Temperature indication 3 .17. 5 #5 & 6 PCS TH, Q-power 3 .17 .1 #2 & 4 PCS TH, Q-power 3.17.6 # 14 Pressurizer Pressure Pl-QlOl Q1Q4~i~ililitl, Pressure signal 3.17.1 #4 &5 Pressurizer Pressure PI-QlQl .........Qrn4Q!Ul.1atl\f:Q, Pressure signal 3.17.2 #1.d Pressurizer Pressure PI-GMll.11!MJ., *:*:*:*:*:*:*:*:-:*:*:*:*

PFe"S""s*lfhf****indication 3.17.5 #2 3 .17 .1 #8 & 9 3.17.2 #3.c &d 3.17.5 # 10 & 11 Containment Pressure PS-1801, 2, 3, & 4, switch output 3.17.1 # 12 Containment Pressure PS-1801, 2, 3, & 4, switch output 3.17.3 #1.a & b

B 3 .17-3 Amendment No. ~'

3.17 INSTRUMENTATION SYSTEMS Basis: 3.17.6 Other Safety Features The Safety Functions required by Specification 3.17.6 provide alarm and indication functions to assist the operator in monitoring plant conditions.

None of the required functions provide automatic actions assumed to be available in the safety analysis, therefore, operation may continue even though the function is degraded or lost provided that the specified action is met.

The provisions of Specifications 3.0.4 and 4.0.4 are not applicable to several required instrument functions, as noted in Table 3.17.6. These instrument functions have sufficient redundancy to provide their required functions with one or more installed channels operable. The exception to 3.0.4 and 4.0.4 allows changing of plant operating conditions, but the required actions require eventual return to service.

Basis: Applicability 3.17.6 Specification 3.17.6 involves miscellaneous instruments with widely differing function. The applicability for each required instrument is provided in the Applicable Conditions column of Table 3.17.6.

Basis: Action statements 3.17.6 The listed Action is required to be completed within the specified time if the conditions of the specification are not met. If, prior to expiration of the specified completion time, the required conditions are restored, completion of the Action is not required. Each specified completion time starts at the time it is discovered that the Action statement is applicable.

Since Table 3.17.6 consists of instruments of widely different function, each table entry has its own Action statements whose numbering corresponds to that of the table entries. These Actions are discussed following the basis for the associated channel.

Basis: Table 3.17.6

1. Neut ron_fl.Y.~ .. M~riJ~.C>Ti.T.19 ....:::. . . ..IW..Q. . . ch anne ls of ~ii de raAge neutron flux

~~~~ t~~i ~~e:I:~i!ii!~i~~~lllllllll=l*l~Bll~l,i:lit::~:~§i~::liiiml:i9~;.:g~PE~~~~E f~~~n i ;here is greater than 10-4%, .. The***req-U-freiiienfs***"<if°"Spe*cTffcaffi:ifr ...3 .17 .1 assure adequate flux monitoring capability. Neutron flux channels are used to monitor core reactivity changes .

B 3.17-25 Amendment No. -+/--6-2-,

3'.17 INSTRUMENTATION SYSTEMS Basis: Table 3.17.6 (continued)

The count rate section of the wide range neutron flux monitoring channels is capable of detecting flux levels below the indicating scale. Flux levels decrease with time while the reactor is shutdown. After extended shutdowns the flux level may decrease below the indicating range. When flux is below the indication range, channel OPERABILITY may be verified by using scaler-counters or other additional instrumentation.

Action 3.17.6.1 - One or two Neutron Flux Monitoring channels inoperable -

When there are fewer than two OPERABLE Neutron Flux Monitoring channels, complete monitoring of core reactivity is not possible. All positive reactivity changes must be terminated immediately, the reactor must be shutdown, if it was critical, and SHUTDOWN MARGIN verified within 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months and each 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months thereafter until the required monitoring is restored. The completion time of "immediately" does not mean "instantaneously", rather it implies "start as quickly as plant conditions permit and continue until completed." *

2. Rod Position Indication - Two channels of rod position indication are required to be OPERABLE for each full-length and each part-length rod. Rod position indication is required to allow verificati-0n that the rods are positioned and aligned as required. Rod position channels are required to be OPERABLE whenever more than one CROM is capable of rod withdrawal. It is not required when only a single rod may be withdrawn for two reasons: first, it

is necessary to withdraw a *rod in order to pe'rform the calibration necessary to declare the position indication channels OPERABLE, and second, the safety analyses assume that the most reactive rod is stuck in the fully withdrawn position. Both rod position channels are calibrated to read the height of the bottom of the control rod blade, in inches, above the fully inserted position.

Primary rod position indication is epel"ateelp)[gy)!)gjl by a gear train driven

~:~m~~~~~h

{:fi:!:,,,:;:l:Tfu:l:t::,.,:::i:Wi'fE~:~:'n~:~~!!!:~:,,;::~:E~c~ ~~ ~

r i en al ear~ ! ~o ~~ ~~ ~~ !~a~~ ~~n ~ont ~o gl } aa l The pri.mary rod position system is considered OPERABLE, for purposes of this specification, if the digital position readout or the* cam operated position indication lights give positive indication of rod position.

Secondary Position Indication (SPI) is operated by a magnet integral with the connector nut and a magnetically operated reed switch stack attached to the CROM housing. The reed switches are located at uniform intervals along the

travel of the connector nut.

B 3.17-26 Amendment No. ~'

3'.17 INSTRUMENTATION SYSTEf¥1S Basis: Table 3.17.6 (continued)

The reed switches are wired so that the voltage read across the reed switch stack is proportional to rod posttion. There is a dead band, near the bottom of the travel, where the CROM housing seismic support prevents operation of the switches. SPI also provides alarms, position indication lights, and control functions based on rod position.

The SPI for each control rod is considered OPERABLE, for purposes of LCO, if there are no occurrences, other than the seismic support dead band, where two adjacent switches fail to respond to rod motion.

Action 3.17.6.2 - One rod position indication channel inoperable - If one channel of rod position indication is inoperable, control and alarm functions may also be inoperable. The position of each rod in the associated group must be verified to be within the limits of specification 3.10 within 15

.minutes after moving any rod.

3. Safety Injection Refueling Water Tank Temperature - SIRWT temperature instrumentation is required to verify that the SIRWT temperature is within limits. Two channels of temperature indication are provided.

SIRWT temperature instrumentation is not required be-low 300°F Tave because*

the SIRWT and* systems supported by the SIRWT are not required to be OPERABLE below 300°F Tave.

SIRWT temperature indication has -been excepted form the provisions of Specifications 3.0.4 and 4.0.4 because alternate means of obtaining the required information are readily available.

Action 3.17.6.3 - One or two SIRWT temperature channels inoperable - With installed SIRWT temperature indication inoperable, operation may continue as long as temperature can be verified to be above the limit. The tank is not insulated and is accessible so alternate means of determining temperature are relatively simple. When ambient temperatures are well above the SIRWT limit, outside air temperature may be assumed to represent SIRWT temperature.

4. Main Feedwater Flow Indication - The Main Feedwater Flow measurements are necessary to perform the required daily calorimetric calculation. One feedwater flow instrument is provided for each feed line. These flow indicators are the same instruments which provide flow indication to the Feedwater Control System.

The instrumentation is not required below 15% RATED POWER where calorimetric calculations are not required.

Action 3.17.6.4 - Main Feedwater Flow indication inoperable - If feedwater flow indication is inoperable, this specification allows operation to continue if alternate indication can be provided to allow completion of the required daily calorimetric calculation. The inoperable channel must be restored to OPERABLE status prior to the next reactor startup, as required by

Specification 3.0.4.

B 3.17-27 Amendment No. -}&2.,

3:17 INSTRUMENTATION SYSTEMS Basis: Ta~le 3.17.6 (continued)

I

5. Main Feedwater Temperature Indication - The Main Feedwater Temperature measurements are necessary to perform the required daily calorimetric calculation. One feedwater temperature instrument is ,provided for each feed line. The instrumentation is not required below 15% RATED POWER where calorimetric calculations are not required.

Action 3.17.6.5 - Main Feedwater Temperature indication inoperable - If feedwater temperature indication is inoperable, this specification allows operation to continue if alternate indication can be provided to allow completion of the required daily calorimetric calculation. The inoperable channel must be restored to OPERABLE status prior to the next reactor startup, as required by Specification 3.0.4.

6. Auxiliary Feedwater Flow - The AFW system is arranged as two independent trains of pumps, piping, flow control valves and electrical controls. Each train is capable of feeding each steam generator through separate feed lines and flow control valves. Each AFW feed line is provided with two separate flow indication channels. One channel provides an input to the associated AFW flow control valve as well as control room flow indication; the other provides flow indication in the control room. A flow switch from each of the flow indicator channels .provi.des a flow signal to the AFW pump sequencing circuitry. In addition, two of the flow transmitters associated with the turbine driven AFW pump, those which do not provide flow control, can be manually switched into a completely separate circuit which provides AFW flow

information at Alternate Shutdown Panel C-150 .

The AFW flow channels are not required to be OPERABLE when the PCS is below 300°F because the AFW system in not required to be OPERABLE below 300"F.

Action 3.17.6.6.'l - One AFW flow indicator inoperable - If one flow channel becomes inoperable, the OPERABILITY of the associated flow control valve must be determined. Those flow indication channel failures which could prevent flow through that feed line cause the valve to be inoperable. Flow indication channel failures which affect only indication, or which cause the valve to fail open do not necessarily cause the valve to be inoperable.

Action 3.17.6.6.2 - Two AFW flow indicators inoperable - If two flow indication channels for one AFW feed line become inoperable there is no way to verify flow through that line; the associated AFW flow control valve must be declared inoperable. The completion time of "immediately" does not mean "instantaneously", rather it implies "start as quickly as plant conditions permit and continue until completed."

7. PCS Leakage Detection Instrumentation - Four diverse systems for PCS leak detection are required to be OPERABLE, any one Containment Humidity Monitor, any one Containment Atmosphere Gaseous Activity Monitor, any one Containment Air Cooler Condensate Level Switch, and any one Containment Sump Level indicator. The air cooler level switch must be associated with an operating air cooler .

B 3.17-28 Amendment No. ~'

3'.17 INSTRUMENTATION SYSTEMS Basis: Table 3.17.6 (continued)

Footnotes (b) and (c) are intended to clarify that the requirement is for one instrument channel of each type to be operable, and that continued operation is not permitted unless at least one instrument channel, out of all those specified, is operable. If one OPERABLE Instrument of each type is not available, the appropriate Action statement must be followed; if no PCS leakage Detection instrument channels are operable, Action 3.17.6.21 is applicable.

Th~ PCS leakage detection instrumentation systems are not required to be OPERABLE when the PCS temperature is below 300°F because the consequence of leakage at reduced temperature and pressure is small, and because the PCS is accessible for local inspection.

Action 3.17.6.7.1 - One reguired leak detection svstem inoperable - Operation may continue with one of the required four types of leak detection systems inoperable, but one instrument of each type must be restored to OPERABLE status prior to the next startup from COLD SHUTDOWN. Several of the instruments cannot be conveniently repaired with the plant at elevated temperature due to their location or their impact on containment integrity.

Three separate leak detection systems, together with daily PCS inventory checks, are considered adequate for continued operation.

Action 3.17.6.7.2 - Two or three reguired leak detection systems inoperable -

Daily PCS inventory calculations provide adequate leakage detection for limited periods. Thirty days is considered adequate time in which to accomplish repairs necessary to return at least three of the required instruments to operable status.

8. Primary Safety Valve Position Indication - Each Primary Safety valve is provided with two means of detecting an open or leaking valve; one acoustical monitor and one tail pipe temperature indicator.

Primary Safety Valve position indication instrumentation is not required to be OPERABLE when the PCS temperature is below 300°F because the consequence of leakage at reduced temperature and pressure is small, and because the PCS is accessible for local inspection.

Primary Safety Valve position indication has been excepted from the requirements of Specifications 3.0.4 and 4.0.4 to permit a startup from HOT SHUTDOWN with an inoperable channel. Without such an exception, no startup could be made without cooling down to repair the inoperable channel.

Action 3.17.6.8 - One Primary Safety Valve position indication channel inoperable - The Primary Safety valves.are located on top of the pressurizer.

During operation at elevated temperatures, the position indication is not accessible for repair. One OPERABLE channel provides sufficient capability to detect leakage for limited periods of time. The inoperable channel must be restored to OPERABLE status prior to the next start up from COLD SHUTDOWN .

B 3.17-29 Amendment No. -l-62-,

1 3 .17 INSTRUMENTATION SYSTEMS Basis: Table 3.17.6 (continued)

9. Power Operated Relief Valve Position Indication - Each PORV is provided with three means of position detection; a stem position indicator, an acoustical monitor mounted on the valve,"and a temperature indicator mounted on the common tailpipe. The acoustic monitors and t~mperature indicator provide indication of leakage through the PORV and its associated block valve.

PORV position indication is required to be OPERABLE except when the PCS is in COLD SHUTDOWN or when the PORV is isolated by a closed PORV block valve which has OPERABLE position indication. When the plant is in COLD SHUTDOWN, PORV leakage is of little consequence. When the PORV is isolated, the block valve position indication provides the needed information.

PORV position indication has been excepted from the requirements of Specifications 3.0.4 and 4.0.4 to permit a startup from HOT SHUTDOWN with an inoperable channel. Without such an exception, no startup could be made without cooling down to repair the inoperable channel.

Action 3.17.6.9 - One or two PORV position indication channels inoperable -

The PORVs are located on top of the pressurizer. During operation at elevated temperatures, the position indication is not accessible for repair.

One OPERABLE channel provides suffici.ent capability to detect leakage for limited periods of time. The inoperable channels must be restored to OPERABLE status prior to the next start up from COLD SHUTDOWN *

10. PORV Block Valve Position Indication - Each PORV block valve is provided with position indication lights operated by limit switches on the valve motor operator and by a temperature indicator mounted on the common PORV tailpipe.

l PORV block valve position indication is required to be OPERABLE except when the PCS is depressurized and vented through a monitored path. The PORV block valves are required to be open at low temperatures so that the PORVs can provide Low Temperature Over Pressure protection.

PORV block Valve position indication has been excepted from the requirements of Specifications 3~0.4 and 4.0.4 to permit a startup from HOT SHUTDOWN with an inoperable ch~nnel. Without such an exception, no startup could be made without cooling down to repair the inoperable channel.

Action 3.17.6.10 - PORV Block Valve position indication inoperable - The PORV block valves are located on top of the pressurizer. During operation at elevated temperatures, the position indication is not accessible for repair .

. The PORV block valves are motor operated valves and are not likely to inadvertently change position. They are in series with the PORVs. During operation at elevated temperatures, when LTOP is not required, operation may continue with only one channel of position indication. When LTOP protection is required, but valve position lights are inoperable, the PCS is accessible and operation may continue if position of the block valves is verified each 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months . Inoperable channels must be restored to OPERABLE status prior to the next start up from COLD SHUTDOWN .

B 3.17-30 Amendment No. +/-6-2-,

3'.17 INSTRUMENTATION SYSTEMS Basis: Table 3.17.6 (continued)

- 11. SWS Break Detector - Fl ow i ndi ca tors measuring Service Water System flow into and out of the containment are used to actuate an alarm if in flow significantly exceeds outflow. Such a mismatch could be indicative of a cooler leak or a pipe break. The Break Detector is intended to allow identification of a leaking cooler by isolation of service water to each cooler in secession until the alarm clears. The Break Detector is strictly a maintenance aid and is intended to provide no safety function. (Ref. 12)

The SWS Break Detector is required to be OPERABLE at HOT STANDBY and above, when the containment is inaccessible for direct observation of leakage, yet

the SWS is required. Specifications 3.0.4 and 4.0.4 are not applicable to the SWS break detector because it does not provide an accident related safety function.

Action 3.17.6.11 - SWS Break Detector inoperable - If the break detector is inoperable, it must be restored to OPERABLE status prior to the next startup.

12. Flux - AT Power Comparator - The Flux - AT Power comparator compares the two Q Power inputs (Excore Power Range flux and AT power) for that RPS channel, provides a meter indicating the difference between these inputs, and initiates an alarm if the rlifference exceeds a set value. Existence of a significant difference between the monitored signals indicates that either a flux tilt is developing, or that a calibration of the Excore Power Range or AT power circuits is required .

The Flux - AT Power Comparator is not required to be OPERABLE when the reactor is below 2% power because the differential temperature measurement is not meaningful at very low power levels.

Action 3.17.6.12.1 ~One Flux - AT Power Comparator channel inoperable - With one channel inoperable, the three remaining power comparator channels are sufficient to assure that no unobserved flux tilt is developing. The inoperable channel must be restored to OPERABLE status prior to the next reactor startup.

Action 3.17.6.12.2 - Two Flux - AT Power Comparator channels inoperable -

With two power comparator channels inoperable, power must be limited to 70%

of RATED POWER to assure that no unobserved flux tilt causes 1oca1 power limits to be exceeded.

13. Rod Group Seguence Control/Alarm - The Ree pesitiefl iF1eicatieF1 previees twe regulatiAg res greup sequeAce relates fuF1ctieF1s. The PIP, usiAg the sigAals frem primary rea pesitiefl iFIGicatieFI SYFIChres efl the selectea target rees, previees the actual ceFJtrel ef greup sequeF1ciF1g relays; the SPI, usiflg the sigAals frem the seceAaary pesitieFJ iF1eicatieF1 reee switches eA the target rees, previees the Out ef SequeFJce Alarm if the target recl pesitiefl iAclicatecl that the greup is eut ef pesitiefl with respect te the ether regulatiflg greups. The Out ef SequeF1ce alarm previcles assuraAce that the eperater is aware ef abAermal regulatiAg recl pesitieAiAg .

B 3.17-31 Amendment No. 62-,

3~17 INSTRUMENTATION SYSTEMS Basis: Table 3.17.6 {continued)

When only one control rod is capable of being withdrawn, group sequencing and Out-of-Sequence alarm provide no useful function and are not required.

Action 3.17.6.13 - Group Rod Group Sequence Control/Alarm channel inoperable

- When either sequence function is inoperable, one of the methods of assuring correct control rod alignment is not available. Adequate assurance of correct rod positioning is retained by manual verification of regulating rod

position after each occurrence of rod motion .

14. Concentrated Boric Acid Tank Low Level Alarm - A common "Cone Boric Acid Tank Lo Level" alarm notifies the operator that one boric acid tank is below the required total inventory. There is one level switch mounted on each tank, either of which actuates the common alarm in the control room. These two switches and the common alarm comprise the required channels.

The Concentrated Boric Acid Tank low level alarm is not required to be OPERABLE when the reactor is at HOT SHUTDOWN or below, because the inventory of boric acid is not required.

Action 3.17.6.14 - One or Two Cone Boric Acid Tank low level alarm channels inoperable - When either a boric acid tank low level alarm switch or the common alarm is inoperable, the level in the tank or tanks without an operable level alarm should be verified to be within limits each shift.

15. Excore Detector Deviation Alarm - An alarm is derived by the Excore Detector Deviation Alarm channel on excessive flux tilt. The Excore Detector Deviation Alarm compares the combined average power reading of all four Excore Power Range channels to the average from each channel, and alarms if the setpoint is exceeded. One channel being significantly different from the average could indicate a developing quadrant Power Tilt (Tq) .

B 3.17-32 Amendment No. 6-2-,

3'.17 INSTRUMENTATION SYSTEMS Basis: Table 3.17.6 (continued)

The Excore Detector Deviation Alarm is required to be OPERABLE above 25%

RATED POWER, when the Tq specification is applicable.

Action 3.17.6.15 - Excore Deviation Alarm inoperable - When the Excore Deviation Alarm is inoperable, continuous monitoring of Tq is unavailable.

The function of Tq monitoring must be maintained by manually calculating Tq each 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months .

16. AXIAL SHAPE INDEX Alarm - The ASI Alarm Channel monitors the ASI using the Excore upper and lower detector signals as inputs and provides an alarm when ASI admini*strative limits are exceeded .

. This alarm is only functional above a nominal 15% indicated power when the High Startup Rate trip is bypassed. It uses the High Startup Rate Pre-Trip Unit to provide the alarm function, and shares the same alarm window. It is not required to be OPERABLE below 25% RATED POWER.

Action 3.17.6.16 - One or two ASI alarm channels inoperable - The ASI alarm is one function of the Therm.al Margin Monitor. Four channels are provided, but two are sufficient for ASI monitoring. If one or two channels are inoperable, they must be restored prior to the next startup from COLD SHUTDOWN .

17. Shutdown Cooling (SOC) Suction Valve Interlocks - Interlocks are provided for each SOC suction valve. These interlocks are pressure switches which prevent opening of the associated valve when PCS pressure is above the design pressure of the SOC system. One pressure switch is provided for each valve.

The interlocks are required to be OPERABLE when PCS pressure exceeds 200 psia to assure that the SOC System is not over pressurized by inadvertent opening of the suction valves at high PCS pressure.

Action 3.17.6.17 - One or two SOC suction interlocks inoperable - When an interlock is inoperable assurance that the valve will not be opened with high PCS pressure is reduced. The circuit breaker for the motor operator on the associated SOC suction valve must be racked out, except during actual operation of the valve. The extra action of having to rack in and close the breaker prior to valve operation provides protection against inadvertent valve operation. *

18. Power Dependant Insertion Limit CPDILl Alarm - PDIL Alarms are previded ey eeth the primary aHd seceHdary red pesitieH meHiters. E:ach system moHiters the positieH of each regulatiHg greup target red aHd cempares it te a setpoiHt which is a fuHctieH of pewer level. The greup deviatieH alarms assure that the eperater i.s aware ef aHy greup misaligHmeHt. MaiHtaiHiHg the reds aeeve the PDIL, wheH the reacter is critical, assures that adequate

SHUTDOWN MARGIN is available.

B 3 .17-33 Amendment No. ~'

3.17 INSTRUMENTATION SYSTEMS Basis: Table 3.17.6 (continued)

The PDIL alarm is not required at HOT SHUTDOWN and below, since no more than one control rod would be withdrawn and the SHUTDOWN Margin calculation accounts for that.

Action 3.17.6.18 - One PDIL alarm inoperable - With one PDIL alarm inoperable assurance of proper SHUTDOWN MARGIN is reduced. Additional assurance of proper SHUTDOWN MARGIN is provided by verification of proper group position within 15 minutes following any regulating rod motion.

19.- Fuel Pool Area Radiation Monitor - The spent fuel pool is provided with two radiation monitors. These instruments provide warning of a release in the case of a fuel handling accident and provide the fuel pool criticality

monitoring requi.red by 10 CFR 70.24 .

Action 3.17.6.19 - One or two Fuel Pool Area Monitors inoperable - With one or two Fuel Pool Area Radiation Monitors inoperable, fuel movement in the spent fuel pool area must be stopped. The monitor must be restored to OPERABLE status or equivalent monitoring capability provided within 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months .

The Fuel Pool is designed to be adequately subcritical even at zero ppm boron concentration. The specified 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months is adequate to repair the installed instrumentation or to provide other monitoring equipment without incurring undue risk of a criticality.

20. Containment Refueling Radiation Monitors - Two radiation monitors are located in the refueling area of the containment which actuate the Containment High Radiation Logic when switched to the refueling mode. In this mode, a high level alarm on either monitor will actuate containment isolation through the associated CHR logic channel. The arrangement of these controls is illustrated in reference 7.

Action 3.17.6.20 - One or two Containment Refueling Monitors inoperable -

With one or two Containment Refueling Radiation Monitors inoperable, stop REFUELING OPERATIONS in the containment. This eliminates the possibility of damaging an irradiated fuel bundle .

B 3.17-34 Amendment No. ~,

f 3.17 INSTRUMENTATION SYSTEMS Action 3.17.6.21 - Required action AND associated completion time not met -

If any action specified by Action statements 3.17.6.1 through 3.17.6.18 (items 19 and 20 are not associated with reactor operation) is not met AND its completion time has expired, the plant must be placed in a cQndition where the inoperable equi_pment is not required. Twelve hours are allowed to bring the plant to HOT SHUTDOWN, and 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months to reach conditions where the affected equipment is not required, to avoid unusual plant transients. Both the 12 and the 48 hour5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months time periods start when it is discovered that Action 3.17.21.6 is applicable .

B 3.17-35 Amendment No . .J.62.,

..4.0 SURVEILLANCE REQUIREMENTS 4.0.1 Surveillance requirements shall be applicable during the reactor operating conditions associated with individual Limiting Conditions for Operation unless otherwise stated in an individual surveillance requirement.

4.0.2 UAless otherwise specified, each surveillaAce requiremeAt shall be performed withiA the specified time iAterval with:

a. A maximum allowable exteAsioA Rot to exceed 25% of the surveillaAce iAterval, aAd.

b. A total maximum combiAed iAterval time for aAy three coAsecutive surveillaAce iAtervals Rot to exceed 3.25 times the specified surveillaAce iAterval.

4.0.3 Failure to perform a Surveillance Requirement within the allowed surveillance interval, defined by Specification 4.0.2, shall constitute noncompliance with the operability requirements for a Limiting Condition for Operation. The time limits of the action requirements are applicable at the time it is identified that a Surveillance Requirement has not been performed. The action requirements may be delayed for up to 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months to permit the completion of the surveillance when the

4.0.4 allowable outage time limits of the action requirements are less than 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months . Surveillance Requirements do not have to be performed on inoperable equipment.

Entry into a reactor operating condition or other specified condition shall not be made unless the Surveillance Requirements associated with a Limiting Condition of Operation has been performed within the stated surveillance interval or as otherwise specified. This provision shall not prevent passage through or to plant conditions as required to comply with action requirements.

4.0.5 Surveillance Requirements for inservice inspection and testing of ASME Code Class 1, 2, and 3 components shall be applicable as follows:

a. Inservice inspection of ASME Code Class 1, 2, and 3 components and inservice testing of ASME Code Class 1, 2, and 3 pumps and valves shall be performed in accordance with Section XI of the ASME Boiler and Pressure Vessel Code and applicable Addenda as required by 10 CFR 50, Section 50.55a(g), except where specific written relief has been granted by the Commission pursuant to.10 CFR 50, Section

50. 55a ( g)( 6 )( i) .

4-1 Amendment No. 3-G, .§..+/--, -l-3-G, ~'

4.0 BASIS Specifications 4.0.1 through 4.0.5 establish the general requirements applicable to Surveillance Requirements. These requirements are based on the Surveillance requirements stated in the code of Federal Regulations, 10 CFR 50.36(c)(3):

"Surveillance requirements are requirements relating to test, calibration, or inspection to ensure that the necessary quality of systems and components is maintained, that facility operation will be within safety limits, and that the limiting conditions of operation will be met."

Specification 4.0.1 establishes the requirement that surveillances must be performed during reactor operating conditions or other conditions for which the requirements of the Limiting Conditions for Operation apply, unless otherwise stated in an individual Surveillance Requirement. The purpose of this specification is to ensure that surveillances are performed to verify the operational status of systems and components and that parameters are within specified limits to ensure safe operation of the facility when the plant is in a reactor operating condition or other specified ~ondition for which the associated Limiting Conditions for Operation are applicable.

Surveillance Requirements do not have to be performed when the facility is in an operational condition for which the requirements of the associated Limiting Condition for Operation do not apply, unless otherwise specified.

The Surveillance Requirements associated with a Special Test Exception are only applicable when the Special Test Exception is used as an allowable exception the requirements of a specification.

Specification 4.0.2 establishes the COFlditiOFIS 1:tf1derm:1:nu::1:1:~!n Which the specified time interval for Surveillance Requirements may be extended. Item

a. permits an allowable extension of the normal surveillance interval to facilitate surveillance scheduling and consideration of plant operating conditions that may not be suitable for conducting the surveillance; e.g.,

transient conditions or other ongoing surveillance or maintenance activities.

result of any particular survei 11 ance being performed t~. . J.he veri fi cat i on... gf conformance with the Surveillance Requirements. +heseillJU!iii provisions- are).!:$,

sufficient to ensure that the re 1i ability ensured thro'lHflf""survei 11 ance . . . . . . .

activities is not significantly degraded beyond that obtained from the specified surveillance interval.

Specification 4.0.3 establishes the failure to perform a Surveillance Requirement within the allowed surveillance interval, defined by the provisions of Specification 4.0.2, as a condition that constitutes a failure to meet the operability requirements for a Limiting Condition for Operation.

Under the provisions of this specification, systems and components are assumed to be operable when Surveillance Requirements have

4-3 Amendment No. -l-3{}, -l-6-2-,

4.1 OVERPRESSURE PROTECTION SYSTEM TESTS Surveillance Requirements

In addition to the requirements of Specification 4.0.5, each PORV flow path shall be demonstrated OPERABLE by:

1. Testing the PORVs in accordance with the inservice inspection requirements for ASME Boiler and Pressure Vessel Code,Section XI, Section IWV, Category B valves.

2. Performance of a CHANNEL CALIBRATION on the PORV actuation channel at least once per 18 monthsz.

3. When the PORV flow path is required to be OPERABLE by Specification 3.1.8.1:

(a) Performing a complete cycle of the PORV with the plant above COLD SHUTDOWN at least once per 18 months.

(b) Performing a complete cycle of the block valve prior to heatup from COLD SHUTDOWN, if not cycled within 92 days.

4. When the PORV flow path is required to be OPERABLE by Specification 3.1.8.2:

(a) Performance of a CHANNEL FUNCTIONAL TEST on the PORV actuation channel, but excluding valve operation, at least once per 31 days .

5.

(b) Verifying the associated block valve is open at least once per 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months .

Both High Pressure Safety Injection pumps shall be verified incapable of injection into the PCS at least once per 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months , unless the reactor head is removed, when either PCS cold leg temperature is <300°F, or when both shutdown cooling suction valves, M0-3015 and M0-3016, are open.

With the reactor vessel head installed when the PCS cold leg temperature is less than 300°F, or if the shutdown cooling system isolation valves M0-3015 and M0-3016 are open, the start of one HPSI pump could cause the Appendix G or the shutdown cooling system pressure limits to be exceeded; therefore, both pumps are rendered inoperable.

Fer Cycle 11 eAly, this SijrveillaAce Heed Aet be ~erfermed ijAtil ~rier te startij~ fer Cycle 12 .

Amendment No. -l-3G, +/-49, &G, +/-&2-, 63-, 64, 4-6

4.14 AUGMENTED INSERVICE INSPECTION PROGRAM FOR STEAM GENERATORS (Cont'd)

7. Unserviceable described the condition of a tube if it leaks or contains a defect large enough to affect its structural integrity in the event of an Operating Basis Earthquake, a loss-of-coolant accident, or a steam line or feedwater line break as specified in 4.14.4.c, above.

8. Tube Inspection means an inspection of the steam generator tube from the point of entry (hot leg side) completely around the U-bend to the top support of the cold leg.

9. Preservice Inspection means an inspection of the full length of each tube in steam generator performed by eddy current techniques prior to service to establish a baseline condition of the tubing.

This inspection shall be performed after the shop hydrostatic test and prior to initial POWER OPERATION using the equipment and techniques expected to be used during subsequent inservice inspections.

b. The st~am generator shall be determined OPERABLE after completing the corresponding actions (plug all tubes exceeding the plugging limit and all tubes containing through-wall cracks) required by Table 4.14-2.

4.14.6 Reports

a. Within 15 days following the completion of each inservice inspection of steam generator tubes, the number of tubes plugged in each steam generator sha 11 be reported to the. . -.-~.9.mmt§.§Jgn in a Special Report

b.

pursuant to Speei fi eati efl 6. 9 .3 .31:>:U~:::::::QnB.{i§IMI*

The complete results of the steam*generator tube inservi~e inspection shall be submitted to t.hE:! ....C..<l.rn.llli.~~ion in a Special Report pursuant to Speei fi eati efl 6. 9 .3 .31:>:Ul~tilfil.ti5.QMI within 12 months foll owing completion of the inspection. Thl*s. . . .Sii'e'C'fil"""Report shall include:

1. Number and exte'nt of tubes inspected.

2. Location and percent of wall-thickness penetration.for each indication of an imperfection.

3. Identification of tubes plugged

c. Results of steam generator tube inspections that fall into Category C-3 shall require 24 hour2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months verbal notification to the NRC prior to resumption of plant operation. A written followup within the next 30 days shall provide a description of investigations and corrective measures taken to prevent recurrence.

4-69

Amendment No. a-9-, 2-, Me, H-2-, ~, -l-4-l,

lJ. t 4.16 INSERVICE INSPECTION PROGRAM FOR SHOCK SUPPRESSORS (Snubbers) 4.16.l b. Visual Inspection Acceptance Criteria (continued)

c.

A review and evaluation shall be performed and documented to justify continued operation with an unacceptable snubber. If continued operation cannot be justified, the snubber shall be declared inoperable and the action requirements shall be met.

Functional Tests*

At least once per 18 months during shutdown, a representative sample (10% of the total safety-related snubbers in use at the plant) shall be functionally tested either in place or in a bench test. The test shall verify the snubber has freedom of movement and is not frozen up. For each snubber which did not meet the functional test acceptance criteria of Specification 4.16.1.d or 4.16.1.e, an additional 10% of the total shall be functionally tested. 111 The representative sample selected for functional testing shall include the various configurations, operating environments and the range of size and capacity of snubbers. Snubbers identified as especially difficult to remove or in high radiation zones during shutdown shall also be included in the representative sample.~ 1 In additi~n to the regular sample, snubbers which failed the previous functional test shall be retested during the next test period. If a spare snubber has been installed in place of a fai.led snubber, .. then both the failed snubber (if it is repaired.and installed in another position)

and the spare snubber shall be retested. Test results of these snubbers may not be included for the resampling.

If any snubber selected for functional testing either fails to lockup or fails to move, i.e., frozen in place, the cause will be evaluated and, if caused by manufacturer or design deficiency, all snubbers of the same design subject to the same defect shall be functionally* tested. This testing requirement shall be independent* of the r~quirements stated above for snubbers not meeting the functi~nal test acceptance criteria.

1 Snubbers of rated capacity greater than 50,000 pounds are not to be included when defining the total number of safety-related snubbers in use at the plant.

2 Permanent or other exemptions from functional testing for individual snubbers may be granted by the Commission only if a justifiable basis for exemption is presented and/or snubber life destructive testing was performed to qualify snubber operability for all design conditions at either the completion of their fabrication or at a subsequent date.

Fer Cycle 11 eAly, this slirveillaAce Aeee Aet be perfermee liAtil prier te startlip fer Cycle 12.

4-72 Amendment No. -148, ~'

1,* l 4.16 INSERVICE INSPECTION PROGRAM FOR SHOCK SUPPRESSORS (Snubbers) 4.16.1 c. Functional Testsx (continued)

Snubbers of rated capacity greater than 50,000 pounds will be functionally tested in lots comprising 25% of their total during each refueling outage. In the event of one snubber failure out of the four tested, no additional snubbers will be tested provided the problem is non-generic. For each additional snubber failure, however, two additional snubbers wil 1 be tested until no further snubber failures are identified or all snubbers have been tested.

Generic failures*will be handled as the specific circumstances require.

For the snubber(s) found inoperable, an engineering evaluation shall be performed on the components which are suppressed by the snubber(s). The purpose of this engineering evaluation shall be to determine if the components suppressed by the snubber(s) were adversely affected by the inoperability of the snubber(s) in order to ensure that the suppressed component remains capable of meeting the designed service.

d. Hydraulic Snubbers Functional Test Acceptance Criteria The hydraulic snubber functional test shall verify that:

1. Activation (restraining action) is achieved within the specified range of velocity or acceleration in both tension and compression .

2. Snubber bleed, or release rate, where required, is within the specified range in compression or tension. For snubbers specifically required not to displace under continuous load, the ability of the snubber to withstand load without displacement shall be verified.

e. Mechanical Snubbers Functional Test Acceptance Criteria The mechanical snubber functional test shall verify that:

1. The force that initiates-free movement of the snubber rod in either tension or compression is less than the specified maximum drag force (break away friction).

2. Activation (restraining action) is achieved within the specified range of vel~city or acceleration in both tension and compression.

3. Snubber release rate, where required, is within the specified range in compression or tension. For snubbers specifically required not to displace under continuous load, the ability of the snubber to withstand load without displacement shall be veri ffed.

Fer Cycle 11 eAly, this surveillaAce Aeed Aet be perfermed UAtil

prier te startup fer Cycle 12.

4-73 Amendment No. ~' W, .J..G.7., 64,

-..'~ t 4.17 INSTRUMENTATION SYSTEMS TESTS Table 4.17.1

Instrumentation Surveillance Requirements for Functional Unit Reactor Protective System CHANNEL CHECK CHANNEL FUNCTIONAL TEST CHANNEL CALIBRATION

1. Manual Trip NA (a) NA

2. Variable High Power 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months 31 days (b, c, & d)

3. High Start Up Rate 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months (a) 18 months 101

4. Thermal Margin/ 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months 31 days 18 monthsx Low Pressure

5. High Pressurizer 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months 31 days 18 monthsx Pressure

6. Low PCS Flow 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months 31 days 18 monthsx

7. Loss of load NA (a) 18-months

8. Low "A" SG Level 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months 31 days 18 monthsx

9.

10.

11.

Low "B" SG Level Low "A" SG Pressure Low "B" SG Pressure 12 *hours 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months 12 hours 31 days 31 days 31 days 18*monthsx 18 monthsx 18 monthsx

12. High Containment Pressure NA 31 days 18 months

13. RPS Matrix Logic NA 31 days NA

14. RPS Initiation Logic NA 31 days NA

15. Thermal Margin Monitor; Verify constants each 92 days.

(a) Once within 7 days prior to each reactor startup.

(b) Calibrate with Heat Balance each 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months , when > 15% RATED POWER.

(c) Calibrate Excores channels with test signal each 31 days.

(d) CHANNEL CALIBRATION each 18 months.

(e) Include verification of automatic Zero Power Mode Bypass removal.

Fer Cycle 11 eAly, this ~ijrveillaAce Aeed Aet ~e perfermed ijAtil prier ta startijp fer Cycle 12.

~ Amendment No. -l-1-8, .J.3G, !3e, &G, ~' +/-64, 4-76

4.17 INSTRUMENTATION SYSTEMS TESTS Table 4.17.2 Instrumentation Surveillance Reguirements for Engineered Safety Features CHANNEL CHANNEL FUNCTIONAL CHANNEL Functional Unit CHECK TEST CALIBRATION I. Safety Injection Signal {SIS}

a. Manual Initiation NA 18 months NA

b. SIS Logic NA (a} NA (Initiation, Actuation, and low pressure block auto reset}

c. *CHP Signal SIS initiation NA 18 months NA (SP Relay Output}

d. Pressurizer Pressure 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months 31 days 18 monthsx Instrument Channels

2. Recirculation Actuation Signal .(RAS}

a. Manual Initiation NA 18 months NA

3.

b.

c.

RAS Logic SIRWT Level Switches NA NA Auxiliary Feedwater Actuation Signal (AFAS}

18 monthsx 18 nionthsx NA 18 monthsx

a. Manual Initiation NA 18 months NA

b. AFAS Logic NA 92 days NA

c. "A" SG Level 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months 31 days 18 monthsx

d. "B" SG Level 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months 31 days 18 monthsx

4. Emergency Power Seguencers

a. DBA Sequencer NA 92 days 18 months

b. Normal Shutdown Sequencer NA 18 Months 18 months (a} Test normal and emergency power functions using test circuits each 92 days.

Verify all automatic actuations and automatic resetting of low pressure block each 18 months.

~

Fer Cycle 11 eAly, this SijrveillaAce Aeed Aet be perfermed ijAtil prier te startijp fer Cycle 12.

Amendment No. ~, 64,

..... \

4.17 INSTRUMENTATION SYSTEMS TESTS Table 4.17.3

Instrumentation Surveillance Requirements for Functional Unit Isolation Functions CHANNEL CHECK CHANNEL FUNCTIONAL TEST CHANNEL CALIBRATION I. Containment High Pressure (CHP}

a. CHP logic Trains NA 18 months NA

p. Containment Pressure NA 31 days 18 months Switches - Left Train

c. Containment Pressure NA 31 days 18 months Switches - Right Train

2. Containment High Radiation (CHR}

a. Manual Initiation NA 18 months NA

b. CHR Logic Trains NA 18 months NA

c. Containment Area Radiation Monitors 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months 31 days 18 months*

3. Steam Generator Low Pressure (SGLP)

a. Manual Actuation NA 18.months NA

b. SGLP Logic Trains NA 18 months NA

c. "A" Steam Generator 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months 31 days 18 months*

Pressure

d. "B" Steam Generator 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months 31 days 18 months*

Pressure

4. Engineered Safeguards Pump Room High Radiation

a. East Room Monitor 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months 31 days 18 months

b. West Room Monitor 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months 31 days 18 months For Cycle 11 oRly, this SijrveillaRce Reed Rot be performed ijRtil prior to startijp for Cycle 12.

Amendment No. ~, 64, 4-78

... ,. 1o

. 4.17 INSTRUMENTATION SYSTEMS TESTS Table 4.17.4

1.

Instrument Wide Range TH Instrumentation Surveillance Requirements for Accident Monitoring CHANNEL CHECK 31 days CHANNEL CALIBRATION 18 months

2. Wide Range Tc 31 days 18 months

3. Wide Range Flux 31 days 18 months

4. Containment Floor Water Level 31 days 18 months

5. Subcooled Margin Monitor 31 days 18 months*

6. Wide Range Pressurizer Level 31 days 18 months

7. Containment H2 Concentration 31 days 18 months

8. Condensate Storage Tank Level 31 days 18 months

9. Wide Range Pressurizer Pressure 31 days 18 months*

10. Wide Range Containment Pressure 31 days 18 months

11. Wide Range "A" SG Level 31 days 18 months*

12. Wide Range "B" SG Level 31 days 18 months*

13. Narrow Range "A" SG Pressure 31 days 18 months*

14. Narrow Range "B" SG Pressure 31 days 18 months*

15. Position Indication for each 31 days 18 months Containment Isolation Valve

16. Core Exit Thermocouples (CET) 31 days 18 months(al Quadrant 1

17. Core Exit Thermocouples (CET) 31 days 18 months(al Quadrant 2

18. Core Exit Thermocouples (CET) 31 days 18 months(al Quadrant 3

19. Core Exit Thermocouples (CET) 31 days 18 months(al Quadrant 4

20. Reactor Vessel Water Level (RVWL) 31 days 18 months

21. High Range Containment Radiation 31 days 18 months*

(a) Calibrate by substituting a known voltage for the.rmocouple.

Fer Cycle 11 eRly, this surveillaRce Reed Ret be perfermed URtil prier te startup fer Cycle 12 .

4-79 Amendment No. -le2-, -l-64,

" ,.,. 4'".17 . INSTRUMENTATION SYSTEMS TESTS Table 4.17.5

- Instrumentation Surveillance Requirements for Instrument or Control Alternate Shutdown System CHANNEL CHECK CHANNEL FUNCTIONAL TEST CHANNEL CALIBRATION

1. Start-up Range Flux (a) (a) 18 months

2. Pressurizer Pressure 92 days NA 18 monthsx

3. Pressurizer Level 92 days NA 18 months

4. #1 Hot Leg Temperature 92 days NA 18 months

5. #2 Hot Leg Temperature 92 days NA 18 months

6. #1 Cold Leg Temperature 92 days NA 18 months

7. #2 Cold Leg Temperature 92 days NA 18 months

8. "A" SG Pressure 92 days NA 18 monthsx

9. 11 8 SG Pressure 11 92 days NA 18 monthsx

10. "A" SG Level 92 days NA 18 monthsx

11. 11 8 SG Level 11 92 days NA 18 monthsx

12.

13.

14.

SIRW Tank Level P-88 Flow to "A" SG P-88 Flow to 8 SG 11 11 92 days 18 months 18 months NA 18 months 18 months 18 months 18 months 18 months 18 'months 18 months

15. P-88 Low Suction Alarm NA

16. P-88 Steam Valve Control NA 18 months NA

17. AFW Flow Control "A" SG NA 18 months NA

18. AFW Flow Control 11 8 SG 11 NA 18 months NA

19. Transfer Switches, C-150 NA 18 months NA

20. Transfer Switch, C-150A NA 18 months NA (a) Once within 7 days prior to each reactor startup.

Fel" Gycle 11 eAly, this Slll"VeillaAce Aeed Aet ~e perfermed llAtil prier te stal"tllp fel" Gycle 12 *

- 4-80 Amendment No . .J-2-2., 36, +/-6-2-, 64,

. 1

4.17 INSTRUMENTATION SYSTEMS TESTS Table 4.17.6 Instrumentation Surveillance Reauirements for Other Safety Functions CHANNEL CHANNEL FUNCTIONAL CHANNEL Instrument CHECK TEST CALIBRATION

1. Neutron Flux Monitoring 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months {a) 18 months

2. Rod Position Indication 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months {b) 18 months

3. SIRW Tank Temperature 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months NA 18 months

4. Main Feedwater Flow 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months Not Required 18 months-*-

5. Main Feedwater Temp. 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months Not Required 18 months-*-

6. AFW Flow Indication 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months 18 months 18 months

7. PCS Leakage Detection:

a. Sump Leve 1 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months 18 months 18 months

b. Atmos. Gas Monitor 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months 18 months 18 months

c. Humidity Monitor 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months 18 months 18 months-*-

d. Air Cooler Condensate NA 18 months Not Required Fl ow Switch Ba. Primary Safety Valve NA 18 months 18 months acoustical monitor Bb/ Safety Valve / PORV 1c1 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months 18 months 18 months 9a. tailpipe temperature 9b. PORV Acoustical Monitor NA 18 months 18 months 9c. PORV Stem Position 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months 18 months 18 months

10. PORV Block Valve 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months NA 18 months Position Indication (a) Once within 7 days prior to each reactor startup.

(b) Verification of Regulating Rod Withdrawal and Shutdown Rod Insertion interlocks OPERABILITY only, once within 92 days prior to each reactor startup AND once prior to startup after each refueling.

{c) The tailpipe temperature indicator is common to the safety valves and PORVs

For Cyele 11 oAly, t~is SijrveillaAee Aced Aot be performed ijAtil prior to startijp for Cyele 12.

{continued)

Amendment No. 6-2-, 64, 4-81

... *-- If .17 INSTRUMENTATION SYSTEMS TESTS_

Table 4.17.6 (continued)

Instrumentation Surveillance Reguirements for

~ Other Safety Functions CHANNEL CHANNEL FUNCTIONAL CHANNEL Instrument CHECK TEST CALIBRATION

11. SWS Break Detector NA 18 months 18 months

12. Flux - AT Comparator _ 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months 31 days 18 months

13. Rod Group Sequence NA 18 months 18 months Control/Alarm

14. BAT Low Level Alarm NA 18 months Not Required

15. Excore Deviation Alarm NA 18 months 18 months

16. ASI Alarm NA 18 months 18 months

17. SOC Suction Interlocks NA 18 months* 18 months*

18. PDIL Alarm NA 31 days 1d1 18 months

19. fuel ~ool Rad ~onitor hours 31 -days 18 months

20. Containment Refueling 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months 31 days 18 months Radiation Monitor

(d)

Setpoint verification only; Fer Gye1e ll eA1y, this Sijrvei11aAee Aeed Aet be startijp fer Gye1e 12.

~erfermed ijflti1 prier te Amendment No. -62-, 64, 4-82

-* o,*-.. 5.3 NUCLEAR STEAM SUPPLY SYSTEM (NSSS) (Continued) 5.3.2 Reactor Core and Control

- a.

b.

The reactor core shall approximate a right circular cylinder with an equivalent diameter of about 136 inches and an active height of about 132 inches.

~~:dr*~~f 0

~oJ~r~o~~:1 ~i ~~niii~:~:f:,a.:l:~:~fii.:iii:~i~!j~:b.ii::~ i ~~~l;i ~~~1 ~h~~

uranium in the form of sinfe.feff****uo;**. . .tfeTTeYf:. . . . . . . Tffe fuel rods shall be grouped into 204 assemblies. A core plug or plugs may be used to replace one or more fuel assemblies subject to the analysis of the resulting power distribution.

c. The fully loaded core shall contain approximately 211,000 pounds U0 2 and approximately 56,000 pounds of Zircaloy-4. Poison may be placed in the fuel bundles for long-term reactivity control.

d. The core excess reactivity shall be controlled by a combination of boric acid chemical shim, cruciform control rods, and mechanically fixed absorber rods where required. Forty-five control r.Q.Q.$.. shall be distributed throughout the core as shown in Figure ~~Mi: of the FSAR. Four of these control rods may consist of part-length absorbers.

5.3.3 Emergency Core Cooling System An emergency core cooling system shall be installed consisting of various subsystems each with internal redundancy. These subsystems shall include four safety injection tanks, two high-pressure and two low-pressure safety injection pumps, a safety injection and refueling water storage tank, and interconnect i.ng .piping as shown in Section 6 of the FSAR.

5-3 Amendment No. !ll-, 49, 83-, ~'

ATTACHMENT 3 Consumers Power Company Palisades Plant Docket 50-255

OPERATING LICENSE AND TECHNICAL SPECIFICATIONS CHANGE REQUEST Proposed Technical Specifications and Basis Pages 30 Pages

"~ 3 .1 PRIMARY COOLANT SYSTEM

. 3.1.1 Operable Components (continued)

Basis When primary coolant boron concentration is being changed, the process must be uni form throu.ghout the primary coo 1ant system vo 1ume to prevent stratification of primary coolant at lower boron concentration which could result in a reactivity insertion. Sufficient mixing of the primary coolant is assured if one shutdown cooling or one primary coolant pump is in operation.'1 1 The shutdown cooling pump will circulate the primary system volume in less than 60 minutes when operated at rated capacity. By imposing a minimum shutdown cooling pump flow rate of 2810 gpm, sufficient time is provided for the operator to terminate the borQn dilution under asymmetric flow conditions.'~ The pressurizer volume is relatively inactive, therefore it will tend to have a boron concentration higher than the rest of the primary coolant system during a dilution operation. Administrative procedures will provide for use of pressurizer sprays to maintain a nominal spread between the boron concentration in the pressurizer and the primary system during the addition of boron.'21 The 57% pressurizer level, in section 3.l.lh(4), is not an analytical result, but simply a decision point between having and not having a bubble. It was chosen to agree with the maximum programmed level during power operation.

The limitation, in section 3.1.li, on operating P-50A and P-50B together with T0 below 300°F allows the Pressure Temperature limits of Figures 3-1 and 3-2 to be higher than they would be without this limit .

The FSAR safety analysis was performed assuming four primary coolant pumps were operating for accidents that occur during reactor operation. Therefore, reactor startup above hot shutdown is not permitted unless all four primary coolant pumps are operating. Operation with three primary coolant pumps is permitted for a limited time to allow the restart of a stopped pump or for

r~actor internals vibration monitoring and testing.

Requiring the plant to be in hot shutdown with the reactor tripped from the C-06 panel, opening the 42-01 and 42-02 circuit breakers, assures an inadvertent rod bank withdrawal will not be initiated by the control room operator. Both steam generators are required to be operable whenever the temperature of the primary coolant is greater than the design temperature of the shutdown cooling system to assure a redundant heat removal system for the reactor.

The transient analyses were 6 performed assuming a vessel flow at hot zero power (532°F) of 140.7 x 10 lb/hr minus 6% to account for flow measurement uncertainty and core flow bypass. A DNB analysis was performed in a parametric fashion to determine the core inlet temperature as a function of pressure and flow for which the minimum DNBR is equal to the DNB correlation safety limit. This analysis includes the following uncertainties and allowances: 2% of rated power for power measurement; +/-0.06 for ASI

measurement; +/-22 psi for pressurizer pressure; 141+/-7°F for inlet temperature; and 3% measurement and 3% bypass for core flow

In addition, transient biases were included in the determination of the allowable reactor inlet temperature.

3-2 Amendment No. fH-, ~' -l-l-7, l-18, Bl-, +/-3-7, -l-63, 69,

.,. 3 .1 PRIMARY COOLANT SYSTEM (continued)

The 1imits of validity of the 1800 s pressure s 2200 psia Tinlet equation are:

100.0 x 10 6 s Vessel Flow s 150 x 10 6 lb/h ASI as shown in the COLR.

With measured primary coolant system flow rates> 150 Mlbm/hr, limiting the maximum allowed inlet temperature to the T 1 "l'4~ LCO at 150 Mlbm/hr increases the margin to DNB for higher PCS flow rates .

The Axial Shape Index alarm channel is being used to monitor the ASI to ensure that the assumed axial power profiles used in the development of the inlet temperature LCO bound measured axial power profiles. The signal representing core power (Q) is the auctioneered higher of the neutron flux power and the Delta-T power. The measured ASI calculated from the excore detector signals and adjusted for shape annealing (Y 1) and the core power constitute an ordered pair (Q,Y 1). An alarm signal is activated before the ordered pair exceed the boundaries specified in the COLR.

The requirement that-the steam generator temperature bes the PCS temperature when forced circulation is initiated in the PCS ensures that an energy addition caused by heat transferred from the secondary system to the PCS will not occur. This requirement applies only to the initiation of forced circulation (the start of the first primary coolant pump) when the PCS cold leg temperature is < 430°F. However, analysis (Reference 6) shows that under limited conditions when the Shutdown Cooling System is isolated from the PCS, forced circulation may be initiated when the steam generator temperature is higher than the PCS cold leg temperature.

References (1) Updated FSAR, Section 14.3.2.

(2) Updated FSAR, Section 4.3.7.

(3) Deleted (4) EMF-92-178, Revision 3, Section 15.0.7.1 (5) ANF-90-078 (6)

Consumers Power Company Engineering Analysis EA-A-NL-89-14-1 3-3 Amendment No. *' £., ll-7-, H-8, -la-l-, 34, +/-3-7, -14a-, §.e, -l-69, 69,

.3.1 PRIMARY COOLANT SYSTEM Specification

3.1.2 PCS pressure, PCS temperature, and PCS heatup and cooldown rates shall be maintained within the following limits:

a. The primary coolant system (PCS) pressure shall be maintained within the limits of Figures 3-1 and 3-2.

b. The pressurizer heatup rate shall be maintained s l00°F/hour**; the pressurizer cooldown rate shall be maintained ~ 200°F/hour.

c. The primary coolant system (PCS) heatup and cooldown rates shall be maintained within the following limits:

Reactor Vessel Average Hourly Average Hourly Inlet Temperature (T) Heatup Rate Limit Cooldown Rate Limit T s 170°F 20°F/hour 40°F/hour 250 ~ T > 170°F 40°F/hour 40°F/hour 350 > T > 250°F G0°F/hour ** G0°F/hour T ~ 350°F 100°F/hour 100°F/hour

- When shutdown cooling isolation valves*M0-3015 and M0-301G are open, PCS heatup rate shall be maintained s 40°F/hour and the

-pressurizer -heatup rate sha 11 be ma i-nta i ned s GO °F/hour .

Applicability Specification 3.1.2 applies at all times.

Action

a. If the limits of Specification 3.1.2 are exceeded:

1. Return to within limits within 30 minutes, and

2. Determine that the PCS condition is acceptable for continued operation within 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months .

b. If any action required- by 3.l.2a is not met and the associated completion time has expired:

I. The reactor shall be placed in HOT SHUTDOWN within 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months , and

\

2. The reactor shall be placed in a COLD SHUTDOWN with PCS pressure less than 270 psia, within 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months .

3-4 Amendment No. Y,' 4+/-, .§.S, M, 91-, -H-7, -l-3-1-, .J-63.,

.3.1 PRIMARY COOLANT SYSTEM Basis - Pressure Temperature Limits:

The Primary Coolant System Pressure-Temperature limits are calculated for a reactor vessel wall fluence of 2.192 x 10 19 nvt. Before the radiation exposure of the reactor vessel exceeds that fluence, Figures 3-1 and 3-2 shall be updated in accordance with the following criteria and ~rocedure:

I. US Nuclear Regulatory Commission Regulatory Guide 1.99 Revision 2 has been used to predict the increase in transition temperature based on integrated fast neutron flux and surveillance test data. If measurements on the irradiated specimens show increase above this curve, a new curve shall be constructed such that it is above and to the left of all applicable data points.

2~ Before the end of the integrated power period for which Figures 3-1 and 3-2 apply, the limit lines on the figures shall be updated for a new integrated power period. The total integrated reactor thermal power from start-up to the end of the new power period shall be converted to an equivalent integrated fast neutron exposure (E ~I MeV). Such a conversion shall be made consistent with the dosimetry evaluation of capsule W-290(12).

3. The limit lines in Figures 3-1 and 3-2 are based on the requirements of

.Reference 9, Paragraphs IV.A.2 ~nd IV.A.3.

All components in the primary coolant system are designed to withstand the effects of cyclic loads due to primary system temperature and pressure

'changes.(!) These cyclic loads are introduced by normal unit load transients, reactor trips and start-up and shutdown operation. During unit start-up and shutdown, the rates of temperature and pressure changes are limited. A maximum plant heatup and cooldown limit of I00°F per hour for the reactor vessel and a maximum heatup limit of I00°F per hour and cooldown limit of 200°F per hour for the pressurizer are consistent with the design number of cycles and satisfies stress limits for cyclic operation.(2)

The reactor vessel plate and material opposite the core has been purchased to a specified Charpy V-Notch test result of 30 ft-lb or greater at an NOTT of+

I0°F or less. The vessel circumferential weld has the highest RTNDT of plate, weld and HAZ materials at the fluence to which the Figures 3-1 and 3-2 apply.(10) The unirradiated RTNDT has been determined to be -56°F.(ll) An RTNDT of -56°F is used as an unirradiated value to which irradiation effects are added. In addition, the plate has been 100% volumetrically inspected by ultrasonic test using both longitudinal and shear wave methods. The remaining material in the reactor vessel, and other primary coolant system components, meets the appropriate design code requirements and specific component function and has a maximum NOTT of +40°F.(5)

As a result of fast neutron trradiation in the beltline region of the core, there will be an increase in the RTNoT with operation. The integrated fast neutron (E >l MeV) fluxes of the reactor vessel are contained in Reference 13.

3-7 Amendment No. ~' 4-l-, ~' 89, 91-, -H-7-, 3+, Q,

,3.3 EMERGENCY CORE COOLING SYSTEM (Continued) 3.3.3 Prior to returning to the Power Operation Condition after every time the plant has been placed in the Refueling Shutdown Condition, or the Cold Shutdown Condition for more than 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months and testing of Specification 4.3.h has not been accomplished in the previous 9 months, or prior to returning the check valves in Table 4.3.1 to service after maintenance, repair or replacement, the following conditions shall be met:

a. All pressure isolation valves listed in Table 4.3.l shall be functional as a pressure isolation device, except as specified in b. Valve leakage shall not exceed the amounts indicated.

b. In the event that integrity of any pressure isolation valve specified in Table 4.3.l cannot be demonstrated, at least two valves in each high pressure line having a non-functional valve must be in and remain in, the mode corresponding to the isolated condition. 111 .

c. If Specification a. and b. cannot be met, an orderly shutdown shall be initiated and the reactor shall be in hot shutdown condition within 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months , and cold shutdown within the next 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .

1 Motor-operated valves shall be placed in the closed position and power supplies deenergized.

3.3.4 Two HPSI pumps shall be operable when the PCS temperature is >325°F.

a) One HPSI pump may be inoperable provided the requirements of Section 3.3.2.c are met.

3.3.5 Two HPSI pumps shall be rendered incapable of injection into the PCS when PCS temperature is <300°F, if the reactor vessel head is installed.

Note: Specification 3.3.5 does not prohibit use of the HPSI pumps for emergency addition of makeup to the PCS .

3-30 Amendment No . .§.!., -l-9-l-, .}l-7, +/-3-l-, .f-6.+/-., -l-63

3.3 EMERGENCY CORE COOLING SYSTEM (Continued)

. I

Basis The normal procedure for starting the reactor is, first, to heat the primary coolant to near operating temperature by running the _primary coolant pumps.

The r~actor is then made critical by withdrawing control rods and diluting boron in the primary cool ant. 111 With this mode of start- up, the energy stored in the primary coolant during the approach to criticality is substantially equal to that during power operation and, therefore, all engineered safety features and auxiliary cooling systems are required to be fully operable. During low-temperature physics tests, there is a negligible amount of stored energy in the primary coolant; therefore, an accident comparable in severity to the design basis accident is not possible and the engineered safeguards' systems are not required.

The SIRW tank contains a minimum of 250,000 gallons of water containing a minimum of 1720 ppm boron and a maximum of 2500 ppm. This is sufficient boron concentration to provide a 5%'shutdown margin with all control rods withdrawn and a new core at a temperature of 60°F.

Heating steam is provided 'to maintain the tank above 40°F to prevent freezing. The 1.43% boron (2500 ppm) solution will not precipitate out above

-32°F. The source of steam during normal plant operation is extraction steam line in the turbine cycle.

The limits for the safety injection tank pressure and volume assure the

required ~mount -0f-water injection during an accident ~nd are ba~ed on values used fo.r the accident analyses. The minimum 174-inch level corresponds to a volume of 1040 ft 3 and the maximum 200-inch level corresponds to*a volume of 1176 ft3.

Prior to the time the reactor is brought critical, the valving of the safety injection system must be checked for correct alignment and appropriate valves locked. Since the system is used for shutdown cooling, the valving will be changed and must be properly aligned prior to start-up of the reactor.

The operable status of the various systems and components is to be demonstrated by periodic tests. A 1arge fraction of these tests wi 11 be performed while the reactor is operating in the power range. If a component*

is found to be inoperable, it will be possible in most cases to effect repairs and restore the system to full operability within a relatively short time. For a single component to be inoperable does not negate the ability of the system to perform its function, but it reduces the redundancy provided in the reactor design and thereby limits the 3-31 ChaR~e Ne. I Amendment No. 1-7, -l-3e, -143-, ~,

.3.7_ ELECTRICAL S'VSTEMS (Cont'd)

a. Station power transformer I-2 (2400 V) may be inoperable for up to 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months provided the operability of both diesel generators is demonstrated immediately.

b. Start-up transformer I-2 (2400 V) may be inoperable for up to 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months provided the operability of both diesel generators is demonstrated immediately. Continued operation beyond 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months is permissible provided that a report is sent to the NRC immediately with an outline of the plans for prompt restoration of the sta.rt-up transformer and the additional precautions to be taken while the transformer is out of service, and continue operating until notified differently by the NRC.

c. 2400 V engineered safeguards bus IC or ID may be inoperable for up to 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months provided the operability of the diesel generator associated with the operable bus is demonstrated immediately and there are no inoperable engineered safety feature components associated with the operable bus.

d. 480 V distribution bus II or I2 may be inoperabl~ for up to 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months provided there are no inoperable safety feature components associated with the operab1e bus. *

e. MCC No. I and 7 or 2 and 8 may be inoperable for up to 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months provided there are no inoperable safety feature components associated with the

-Operable ~air -0f MCC.

f. I25 V d-c bus No. I or 2 may be inoperable for up to 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months provided there are no inoperable safety feature components associated with the

g.

operable bus and adequate portable emergency lighting is available during the inoperability of the No. 2 bus.

One *;of the four preferred a-c buses may be inoperable for 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months provided the reactor protection and engineered safety feature systems supplied by the remaining three buses are all operable.

h. One of the station batteries may be inoperable for 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months , providing both battery chargers on the affected bus are in operation.

i. One of the diesel generators may be inoperable for up to 7 days (total for both) during any month, provided the other diesel is started to verify operability, shutdown and the controls are left in the automatic mode, and there are no inoperable engineered safety feature components associated with the operable diesel generator.

3-42 Amendment No. 88,

3.11 POWER DISTRIBUTION INSTRUMENTATION 3.11.1 INCORE DETECTORS

LIMITING CONDITION FOR OPERATION The incore detection system shall be operable:

a. With at least 160 of the 215 possible incore detectors and 2 incores per axial level per core quadrant.

b. With the incore alarming function of the datalogger operable and alarm set points entered into the datalogger.

APPLICABILITY (1) Item a. above is applicable when the incore detection system is used for:

Measuring quadrant power tilt, Measuring radial peaking factors, Measuring linear heat rate (LHR), or Determining target Axial Offset (AO) and excore monitoring allowable power level .

.(2) Items a. and b. above are applicable when the incore detection system is used for monitoring LHR with automatic alarms. (lncore Al arm System.)

ACTION 1:

With less than the required number of incore detectors, do not use the system for the measuring and ~alibration functions under (1) above.

ACTION 2:

With the alarming function of the datalogger inoperable, do not use the system for automatic monitoring of LHR (Inoperable Incore Alarm System).

Operation may continue using the excore monitoring system as specified in 3.11.2 or by meeting the requirements of 3.23.1.

The operability of the incore detectors with the specified minimum complement of equipment ensures that the measurements obtained from use of this system accurately represent the spatial neutron flux distribution of the reactor core. The operability of the incore alarm system depends on the availability of the datalogger as well-as the operability of a minimum number of incore detectors. Incore alarm set points must be updated periodically based on measured power distributions. The incore detector Channel Check is normally performed by an on-line computer program that correlates readings with one another and with computed power shapes in order to identify inoperable detectors .

3-56 Amendment No. W, .§8, 68, -l-44, ~'

3.15 Deleted

3-62 Amendment No. 8-l-, 6-2-,

3.16 ESF SYSTEM INSTRUMENTATION SETTINGS Basis: Table 3.16 (continued)

4. Steam Generator Low Pressure - A separate Steam Generator Low Pressure (SGLP) signal is provided from each generator. The individual channel signals from each generator are combined in 2 out of 4 logic to initiate a SGLP signal for that 9enerator. Each SGLP signal actuates closure of both Main Steam Isolation Valves (MSIVs) and closure of the feed water regulating valve and its bypass for the associated generator.

The setpoint was chosen to be low enough to avoid actuation during plant operation, but be close enough to full power operating pressure to be actuated quickly in the event of a MSLB. The settin~ of includes a -22 psi uncertainty allowance and was the setting used in the FSAR Section 14 analysis. 121

5. Steam Generator Low Level - The Auxiliary Feedwater Actuation Signal (AFAS) is initiated by 2 out of 4 low level signals occurring for either steam generator. The setpoint is the same as that for Reactor Trip.

The setpoint was chosen to assure that Auxiliary Feedwater Flow would be initiated while the steam generator could still act as a heat sink and steam source, and to assure that a reactor trip would not occur on low level without the actuation of Auxiliary Feedwater.

6. SIRW Tank Low Level - Four SIRWT level sensors are arranged to provide two independent Recirculation Actuation Signals. Each low level

sensor is powered from a separate Preferred AC bus; thus two are ultimately powered from each station battery. Each Recirculation Actuation Signal (RAS) circuit is wired with the contacts from the pair of level sensors powered from the same battery in parallel. These two parallel circuits are wired in series, producing a 11 1 out of 2 taken twice" logic. RAS for each train is actuated by either switch from the left battery sensing low level concurrently with either switch from the right battery. This circuit is illustrated in reference 3.

The RAS signal is actuated by separate sensors from those which provide tank level indication. The allowable range of 21 11 to 27" above the tank floor corresponds to 1.1% to 3.3% indicated level. Typically the actual setting is near the midpoint of the allowable range.

Each RAS actuates the valves in the injection and spray pump suction lines for the associated train switching the water supply from the SIRW tank to the containment sump for a recirculation mode of operation. The time required to reach the RAS setpoint depends on the initiating event.

Following a DBA, RAS would occur after a period of approximately 20 minutes assuming all engineered safeguards pumps are operating at runout flows. The setpoint was chosen to provide adequate water in the containment sump for HPSI pump net positive suction head following an accident, but prevent the pumps from running dry during the 60 second switchover .

B 3.16-2 Amendment No. -l-6-2-,

3.17 INSTRUMENTATION SYSTEMS Basis: Instrumentation Systems 3.17 (continued)

Table B 3.17-1 Instruments Affecting Multiple Specifications Affected Required Instrument channels Speci fi cations Source Range NI-01/03 &02/04 Count Rate Signal 3.8.e Source Range NI-01/03 &02/04 Count Rate Signal 3.17.6 #1 Source Range NI-01/03 Count Rate Indication @ C-150 3.17.5 #1 Wide Range NI-01/03 &02/04 Flux level 10-4 interlock 3.17.1 #3, 4, 6, 10, & 11 Wide Range NI-01/03 & 02/04 Start-up Rate 3.17.1 #3 Wide Range NI-01/03 &02/04 Flux Level Indication 3 .17 .4 #3 Wide Range NI-01/03 &02/04 Flux Level Indication 3.17.6 #1 Power Range NI-05 - 08, Power level signal 3.17.6 #12, 15, 18 Power Range NI-05 - 08, Power level signal 3.23.1 #A.2 Power Range NI-05 08, Q-power 3 .17 .1 #2 & 4 Power Range NI-05 - 08, ASI 3.17.1 #2 & 4 Power Range NI.-05 - 08, -ASI 3.17.6 #16 Power Range NI-05 - 08, ASI 3. I. I #g Power Range NI-05 &06; 15% interlock 3 .17 .1 #3 & 7 Power Range NI-05 &06; 15% interlock 3.17.6 #18

PCS PCS PCS PCS TC, TC, TC, TC, Temperature signal Temperature indication Q-power Q-power 3 .17. I #4 3.17.5 #6 &7 3 .17. I #2 & 4 3.17.6 # 14 PCS TH, Temperature indication 3.17.5 #5 & 6 PCS TH, Q-power 3 .17. I #2 & 4 PCS TH, Q-power 3.17.6 # 14 Pressurizer Pressure PI-0102 A-D, Pressure signal 3 .17. I #4 & 5 Pressurizer Pressure PI-0102 A-D, Pressure signal 3.17.2 #1.d Pressurizer Pressure PI-0110, Pressure indication 3 .17. 5 #2 Steam Generator Level LI-0751 &0752 A-D, Level Signal 3 .17 .1 #8 & 9 Steam Generator Level LI-0751 &0752 A-D, Level Signal 3 . 17. 2 #3 . c & d Steam Generator Level LI-0751A &0752A, Level indication 3.17.5 # 10 & 11 Steam Generator Pressure PI-0751 & 0752 A-D, Pressure Signal 3.17.1 #10 & 11 Steam Gen_erator Pressure PI-0751 & 0752 A-D, Pressure Signal 3.17.3 #3.c & d Steam Generator Pressure PI-0751 &0752 A-D, Pressure Indication 3.17.4 #13 & 14 Steam Generator Pressure PI-0757 &0758 A&B, WR Pressure Indication 3.17.5 #8 & 9 Containment Pressure PS-1801, 2, 3, & 4, switch output 3.17.1 # 12 Containment Pressure PS-1801, 2, 3, & 4, switch output 3.17.3 #I.a & b

B 3.17-3 Amendment No. ~,

3.17 INSTRUMENTATION SYSTEMS Basis: 3.17.6 Other Safety Features The Safety Functions required by Specification 3.17.6 provide alarm and*

indication functions to assist the operator in monitoring plant conditions, None of the required functions provide automatic actions assumed to be available in the safety analysis, therefore, operation may continue even though the function is degraded or lost provided that the specified action is met.

The provisions of Specifications 3.0.4 and 4.0.4 are not applicable to several required instrument functions, as noted in Table 3.17.6. These instrument functions have sufficient redundancy to provide their_ required functions with one or more installed channels operable. The exception to 3.0.4 and 4.0.4 allows changing of plant operating conditions, but the required actions require eventual return to service.

Basis: Applicability 3.17.6 Specification 3.17.6 involves miscellaneous instruments with widely differing function. The applicability for each required instrument is provided in the Applicable Conditions column of Table 3.17.6.

Basis: Action statements 3.17..6 The listed Action is required to be completed within the specified time if the conditions of the specification are not met. If, prior to expiration of

the specified completion -t*ime, the requ*ired conditions are restored, completion of the Action is not required. Each specified completion time starts at the time it is discovered that the Action statement is applicable.

Since Table 3.17.6 consists of instruments of widely different function, each table entry has its own Action statements whose numbering corresponds to that of the table entries. These Actions are discussed following the basis for the associated channel.

Basis: Table 3.17.6

1. Neutron Flux Monitoring - Two channels of neutron flux monitoring (NI-01/03 and NI-02/04) are required to be OPERABLE when there is fuel in the reactor and the flux is :5: 10*43 RATED POWER. When flux is greater than 10*4 %,

the requirements of Specification 3.17.1 assure adequate flux monitoring capability. Neutron flux channels are used to monitor core reactivity changes.

If only one section of a neutron flux monitoring channel, source or wide range, is functioning, the neutron flux monitoring channel may be considered OPERABLE if it is capable of detecting the existing reactor neutron flux.

For example, with the source range count rate indicator functioning properly, indicating 150 cpm, in reasonable agreement with the other source range, a neutron flux monitor channel may be considered OPERABLE even though its wide range indicator is not functioning. *

B 3.17-25 Amendment No. ~,

.3.17 INSTRUMENTATION SYSTEMS Basis: Table 3.17.6 (continued)

The count rate section of the wide range neutron flux monitoring channels is capable of detecting flux levels below the indicating scale. Flux levels decrease with time while the reactor is shutdown. After extended shutdowns the flux level may decrease below the indicating range. When flux is below the indication range, channel OPERABILITY may be verified by using scaler-counters or other additional instrumentation.

Action 3.17.6.1 - One or two Neutron Flux Monitoring channels inoperable -

When there are fewer than two OPERABLE Neutron Flux Monitoring channels, complete monitoring of core reactivity is not possible. All positive reactivity changes must be terminated immediately, the reactor must be shutdown, if it was critical, and SHUTDOWN MARGIN verified within 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months and each 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months thereafter until the required monitoring is restored. The completion time of "immediately" does not mean "instantaneously", rather it implies "start as quickly as plant conditions permit and continue until completed."

2. Rod Position Indication - Two channels of rod position indication are required to be OPERABLE for each full-length and each part-length rod. Rod position indication is required to allow verification that the rods are positioned and aligned as required. Rod position channels are required to be OPERABLE whenever more than one CROM is capable of rod withdrawal. It is not required when only a single rod may be withdrawn for two reasons: first, it

is necessary to withdraw a rod in order to perform the calibration necessary to declare the position indication channels OPERABLE, and second, the safety analyses assume that the most reactive rod is stuck in the fully withdrawn position. Both rod po~ition channels are calibrated to read the height of the bottom of the control rod blade, in inches, above the fully inserted position.

1 Primary rod position indication is provided by a gear train driven from the CROM drive package, below the clutch. The gear train actuates cam operated limit switches and a synchro. The limit switches also actuate some of the rod position indication lights. The synchro, together with the PIP section of the plant computer, operate the digital position indication. Both the limit switches and the synchro signal are also used for alarm and control functions. The "upper electric limit" and "lower electric limit" limit switches stop the CRDM motor when the rod nears full mechanical travel of the CRDM. This provides redundant assurance that the CRDM buffer piston is not driven into the lower hard stop and that the pinion gear is not driven beyond the end of the teeth on the rack.

The primary rod position system is considered OPERABLE, for purposes of this specification, if the digital position readout or the cam operated position indication lights give positive indication of rod position.

Secondary Position Indication (SPI) is operated by a magnet integral with the connector nut and a magnetically operated reed switch stack attached to the CRDM housing. The reed switches are located at uniform intervals along the

travel of the connector nut.

B 3.17-26 Amendment No. -l-6-2-,

.3.17 INSTRUMENTATION SYSTEMS Basis: Table 3.17.6 (continued)

The reed switches are wired so that the voltage read across the reed switch stack is proportional to rod position. There is a dead band, near the bottom of the travel, where the CROM housing seismic support prevents operation of the switches. SPI also provides alarms, position indication lights, and control functions based on rod position.

The SPI for each control rod is considered OPERABLE, for purposes of LCO, if there are no occurrences, other than the seismic support dead band, where two adjacent switches fail to respond to rod motion.

Action 3.17.6.2 - One rod position indication channel inoperable - If one channel of rod position indication is inoperable, control and alarm functions may also be inoperable. The position of each rod in the associated group must be verified to be within the limits of specification 3.10 within 15 minutes after moving any rod.

3. Safety Injection Refu~linq Water Tank Temperature - SIRWT temperature instrumentation is required to verify that the SIRWT temperature is within limits. Two channels of temperature indication are provided.

SIRWT temperature instrumentation is not required below 300°F Tave because the SIRWT and systems supported by the SIRWT are not required to be OPERABLE below 300°F Tave.

SIRWT temperature i ndi ca ti on has been -excepted form the provisions of Specifications 3.0.4 and 4.0.4 because alternate means of obtaining the required information are readily available.

Action 3.17.6.3 - One or two SIRWT temperature channels inoperable - With installed SIRWT temperature indication inoperable, operation may continue as long as temperature can be verified to be above the limit. The tank is not insulated and is accessible so alternate means of determining temperature are relatively simple. When ambient temperatures are well above the SIRWT limit, outside air temperature may be assumed to represent SIRWT temperature.

4. Main Feedwater Flow Indication - The Main Feedwater Flow measurements are necessary to perform the required daily calorimetric calculation. One feedwater flow instrument is provided for-each feed line. These flow indicators are the same instruments which provide flow indication to the Feedwater Control System.

The instrumentation is not required below 15% RATED POWER where calorimetric calculations are not required.

Action 3.17.6.4 - Main Feedwater Flow indication inoperable - If feedwater flow indication is inoperable, this specification allows operation to continue if alternate indication can be provided to allow completion of the required daily calorimetric calculation. The inoperable channel must be restored to OPERABLE status prior to the next reactor startup, as required by

Specification 3.0.4.

B 3.17-27 Amendment No. -!6-2-,

.3.17 INSTRUMENTATION SYSTEMS Basis: Table 3.17.6 (continued)

5. Main Feedwater Temperature Indication - The M.ain Feedwater Temperature measurements are necessary to perform the required daily calorimetric calculation. One feedwater temperature instrument is provided for each feed line. The instrumentation is not required below 15% RATED POWER where calorimetric calculations are not required.

Action 3.17.6.5 - Main Feedwater Temperature indication inoperable - If feedwater temperature indication is inoperable, this specification allows operation to continue if alternate indication can be provided to allow completion of the required daily calorimetric calculation. The inoperable channel must be restored to OPERABLE status prior to the next reactor startup, as required by Specification 3.0.4.

6. Auxiliary Feedwater Flow - The AFW system is arranged as two independent trains of pumps, piping, flow control valves and electrical controls. Each train is capable of feeding each steam generator through separate feed lines and flow control valves. Each AFW feed line is provided with two separate flow indication channels. One channel provides an input to the associated AFW flow control valve as well as control room flow indication; the other provides flow indication in the control room. A flow switch from each of the flow indicator channels provides a flow signal to the AFW pump sequencing circuitry. In addition, two of the flow transmitters associated with the turbine driven AFW pump, those which do not provide flow control, can be manually switched into a completely separate circuit which provides AFW flow

information at Alternate Shutdown Panel C-150 .

The AFW flow channels are not required to be OPERABLE when the PCS is below 300°F because the AFW system in not required to be OPERABLE below 300°F.

Action 3.17.6.6.l - One AFW flow indicator inoperable - If one flow channel becomes inoperable, the OPERABILITY of the associated flow control valve must be determined. Those flow indication channel failures which could prevent flow through that feed line cause the valve to be inoperable. Flow indication channel failures which affect only indication, or which cause the valve to fail open do not necessarily cause the valve to be inoperable.

Action 3.17.6.6.2 - Two AFW flow indicators inoperable - If two flow indication channels for one AFW feed line become inoperable there is no way to verify flow through that line; the associated AFW flow control valve must be declared inoperable. The completion time of "immediately" does not mean "instantaneously", rather it implies "start as quickly as plant conditions permit and continue until completed."

7. PCS Leakage Detection Instrumentation - Four diverse systems for PCS leak detection are required to be OPERABLE, any one Containment Humidity Monitor, any one Containment Atmosphere Gaseous Activity Monitor, any one Containment Air Cooler Condensate Level Switch, and any one Containment Sump Level indicator. The air cooler level switch must be associated with an operating air cooler.

B 3.17-28 Amendment No. ~,

3.17 INSTRUMENTATION SYSTEMS Basis: Table 3.17.6 (continued)

Footnotes (b) and (c) are intended to clarify that the requirement is for one instrument channel of each type to be operable, and that continued operation is not permitted unless at least one instrument channel, out of all those specified, is operable. If one OPERABLE Instrument of each type is not available, the appropriate Action statement must be followed; if no PCS leakage Detection instrument channels are operable, Action 3.17.6.21 is applicable.

The PCS leakage detection instrumentation systems are not required to be OPERABLE when the PCS temperature is below 300°F because the consequence of leakage at reduced temperature and pressure is small, and because the PCS is accessible for local inspection.

Action 3.17.6.7.1 - One required leak detection system inoperable - Operation may continue with one of the required four types of leak detection systems inoperable, but one instrument of each type must be restored to OPERABLE status prior to the next startup from COLD SHUTDOWN. Several of the instruments cannot be conveniently repaired with the plant at elevated temperature due to their location or their impact on containment integrity.

Three separate leak detection systems, together.with daily PCS inventory checks, are .considered adequate .for continued operation.

Action 3.17.6.7.2 - Two or three required leak detection systems inoperable -

Daily PCS inventory calculations provide adequate leakage detection for

limited periods. Thirty days is considered adequate time in which to accomplish repairs necessary to return at least three of the required instruments to operable status.

8. Primary Safety Valve Position Indication - Each Primary Safety valve is provided with two means of detecting an open or leaking valve; one acoustical monitor and one tail pipe temperature indicator.

Primary Safety Valve position.indication instrumentation is not required to be OPERABLE when the PCS temperature is below 300°F because the consequence of leakage at reduced temperature and pressure is small, and because the PCS is accessible for local inspection.

Primary Safety Valve position indication has been excepted from the requirements of Specifications 3.0.4 and 4.0.4 to permit a startup from HOT SHUTDOWN with an inoperable channel. Without such an exception, no startup could be made without cooling down to repair the inoperable ch~nnel.

Action 3.17.6.8 - One Primary Safety Valve position indication channel inoperable - The Primary Safety valves are located on top of the pressurizer.

During operation at elevated temperatures, the position indication is not accessible for repair. One OPERABLE channel provides sufficient capability to detect leakage for limited periods of time. The inoperable channel must be restored to OPERABLE status prior to the next start up from COLD SHUTDOWN .

B 3.17-29 Amendment No. +/-62-,

.3.17 INSTRUMENTATION SYSTEMS Basis: Table 3.17.6 (continued)

9. Power Operated Relief Valve Position Indication - Each PORV is provided with three means of position detection; a stem position indicator, an acoustical monitor mounted on the valve, and a temperature indicator mounted on the common tailpipe. The acoustic monitors and temperature indicator provide indication of leakage through the PORV and its associated block valve.

PORV position indication is required to be OPERABLE ex~ept when the PCS is in COLD SHUTDOWN or when the PORV is isolated by a closed PORV block valve which has OPERABLE position indication. When the plant is in COLD SHUTDOWN, PORV leakage is of little consequence. When the PORV is isolated, the block valve position indication provides the needed information.

PORV position indication has been excepted from the requirements of Specifications 3.0.4 and 4.0.4 to permit a startup from HOT SHUTDOWN with an inoperable channel. Without such an exception, no startup could be made without cooling down to repair the inoperable channel.

Action 3.17.6.9 - One or two PORV position indication channels inoperable -

The PORVs are located on top of the pressurizer. During operation at elevated temperatures, the position indication is not accessible for repair.

One OPERABLE channe 1 provides sufficient capability to detect 1eakage for limited periods of time. The inoperable channels must be restored to OPERABLE status prior to the.next start up from COLD SHUTDOWN .

10. PORV Block Valve Position Indication - Each PORV block valve is provided with position indication lights operated by limit switches on the valve motor operator and by a temperature indicator mounted on the common PORV tailpipe.

PORV block valve position indication is required to be OPERABLE except when the PCS is depressurized and vented through a monitored path. The PORV block valves are required to be open at low temperatures so that the PORVs can provide Low Temperature Over Pressure protection.

PORV block Valve position indication has been excepted from the requirements of Specifications 3.0.4 and 4.0.4 to permit a startup from HOT SHUTDOWN with an inoperable channel. Without such an exception, no startup could be made without cooling down to repair the inoperable channel.

Action 3.17.6.10 - PORV Block Valve position indication inoperable - The PORV block valves are located on top of the pressurizer. During operation at

~levated temperatures, the position indication is not accessible for repair.

The PORV block valves are motor operated valves and are not likely to inadvertently change position. They are in series with the PORVs. During operation at elevated temperatures, when LTOP is not required, operation may continue with only one channel of position indication. When LTOP protection is required, but valve position lights are inoperable, the PCS is accessible and operation may continue if position of the block valves is verified each 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months . Inoperable channels must be restored to OPERABLE status prior to the next start up from COLD SHUTDOWN .

B 3.17-30 Amendment No. +/-6-2-,

.3.17 INSTRUMENTATION SYSTEMS Basis: Table 3.17.6 (continued)

11. SWS Break Detector - Flow indicators measuring Service Water System flow into and out of the containment are used to actuate an alarm if in flow significantly exceeds outflow. Such a mismatch could be indicative of a cooler leak or a pipe break. The Break Detector is intended to allow identification of a leaking cooler by isolation of service water to each cooler in secession until the alarm clears. The Break Detector is strictly a maintenance aid and is intended to provide no safety function. (Ref. 12)

The SWS Break Detector is required to be OPERABLE at HOT STANDBY and above, when the containment is inaccessible for direct observation of leakage, yet the SWS is required. Specifications 3.0.4 and 4.0.4 are not applicable to the SWS break detector because it does not provide an accident related safety function.

Action 3.17.6.11 - SWS Break Detector inoperable - If the break detector is inoperable, it must be restored to OPERABLE status prior to the next startup.

12. Flux - AT Power Comparator - The Flux - AT Power comparator compares the two Q Power inputs (Excore Power Range flux and AT power) for that RPS channel, provides a meter indicating the difference between these inputs, and initiates an alarm if the difference exceeds a set value. Existence of a significant difference between the monitored signals indicates that either a flux tilt is developing, or that a calibration of the Excore Power Range or AT power circuits is required .

The Flux - AT Power Comparator is not required to be OPERABLE when the reactor is below 2% power because the differential temperature measurement is not meaningful at very low power levels.

Action 3.17.6.12.1 - One Flux - AT Power Comparator channel inoperable - With one channel inoperable, the three remaining power comparator channels are sufficient to assure that no unobserved flux tilt is developing. The inoperable channel must be restored to OPERABLE status prior to the next reactor startup.

Action 3.17.6.12.2 - Two Flux - AT Power Comparator channels inoperable -

With two power comparator channels inoperable, power must be limited to 70%

of RATED POWER to assure that no unobserved flux tilt causes local power limits to be exceeded.

13. Rod Group Sequence Control/Alarm - The Rod position indication provides two regulating rod group sequence related functions. The PIP section of the plant computer, using the signals from primary rod position indication synchros on the selected target rods, provides the actual control of group sequencing relays in addition to monitoring the target rods for the correct group position relative to the other groups. If the group position is not correct relative to the position of the other regulating groups, an Out-of-Sequence alarm is annunciated on the main control panels .

B 3.17-31 Amendment No. -l-6-2-,

.3.17 INSTRUMENTATION SYSTEMS Basis: Table 3.17.6 (continued)

The SPI system - composed of the SPI input module and the Host computer -

also uses the signals from the primary rod position indication synchros to monitor the target rods for the correct group position relative to the other groups. If the group position is not correct relative to the position of the other regulating groups, an Out-of-Sequence alarm is annunciated on the computer system. If a primary rod position indication synchro input card were to lose power, the corresponding reed switch position from the SPI input module would be used in the Out-of-Sequence monitoring on the SPI system. The Out-of-Sequence alarm provides assurance that the operator is aware of abnormal regulating rod positioning.

When only one control rod is capable of being withdrawn, group sequencing and Out-of-Sequence alarm provide no useful function and are not required.

Action 3.17.6.13 - Group Rod Group Sequence Control/Alarm channel inoperable

- When either sequence function is inoperable, one of the methods of assuring correct control rod alignment is not available. Adequate assurance of correct rod positioning is retained by manual verification of regulating rod position after each occurrence of rod motion.

14. Concentrated Boric Acid Tank low Level Alarm - A common Conc Boric Acid 11 Tank Lo Level" alarm notifies the operator that one boric acid tank is below the required total inventory. There is one level switch mounted on each tank, either of which actuates the common alarm in the control room. These

two switches and the common al arm compr*i se the required channels .

The Concentrated Boric Acid Tank low level alarm is not required to be OPERABLE when the reactor is at HOT SHUTDOWN or below, because the inventory of boric acid is not required.

Action 3.17.6.14 - One or Two Cone Boric Acid Tank low level alarm channels inoperable - When either a boric acid tank low level alarm switch or the common alarm is inoperable, the level in the tank or tanks without an operable level alarm should be verified to be within limits each shift.

15. Excore Detector Deviation Alarm - An alarm is derived by the Excore Detector Deviation Alarm channel on excessive flux tilt. The Excore Detector Deviation Alarm compares the combined average power reading of all four Excore Power Range channels to the average from each channel,- and alarms.if the setpoint is exceeded. One channel being significantly different from the

average could indicate a developing Quadrant Power Tilt (Tq}.

The Excore Detector Deviation Alarm is required to be OPERABLE above 25%

RATED POWER, when the Tq specification is applicable.

Action 3.17.6.15 - Excore Deviation Alarm inoperable - When the Excore Deviation Alarm is inoperable, continuous monitoring of Tq is unavailable.

The function of Tq monitoring must be maintained by manually calculating Tq each 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months .

B 3 .17-32 Amendment No. 6-2-,

.3.17 INSTRUMENTATION SYSTEMS Basis: Table l.17.6 (continued)

16. AXIAL SHAPE INDEX Alarm - The ASI Alarm Channel monitors the ASI using the Excore upper and lower detector signals as inputs and provides an alarm when ASI administrative limits are exceeded.

This alarm is only functional above a nominai 15% indicated power when the High Startup Rate trip is bypassed. It uses the High Startup Rate Pre-Trip Unit to provide the alarm function, and shares the same alarm window. It is not required to be OPERABLE below 25% RATED POWER.

Action 3.17.6.16 - One or two ASI alarm channels inoperable - The ASI alarm is one function of the Thermal Margin Monitor. Four channels are provided, but two are sufficient for ASI monitoring. If one or two channels are inoperable, they must be restored prior to the next startup from COLD SHUTDOWN.

17. Shutdown Cooling (SDC) Suction Valve Interlocks - Interlocks are provided for each SDC suction valve. These interlocks are pressure switches which prevent opening of the associated valve when PCS pressure is above the design pressure of the SDC system. One pressure switch is provided for each valve.

The interlocks are required to be OPERABLE when PCS pressure exceeds 200 psia to assure that the SDC System is not over pressurized by inadvertent opening

of the suction valves ~t high PCS pressure .

Action 3.17.6.17 - One or two SDC suction interlocks inoperable - When an interlock is inoperable assurance that the valve will not be opened with high PCS pressure is reduced. The circuit breaker for the motor operator on the associated SDC suction valve must be racked out, except during actual operation of the valve. The extra action of having to rack in and close the breaker prior to valve operation provides protection against inadvertent valve operation.

18. Power Dependant Insertion Limit (PDIL) Alarm - PDIL Alarms are provided by both the PIP and the SPI sections of the plant computer. The SPI system is composed of the SPI input module and the Host computer. Each system monitors the position of each regulating group target rod from the primary rod position synchros and compares it to a setpoint which is a function of power level. If a primary rod position indication synchro input card were to lose power, the corresponding secondary reed switch position from the SPI input module would be used in PDIL monitoring on the SPI System. The group deviation alarms assure that the operator is aware of any group misalignment.

Maintaining the rods above the PDIL, when the reactor is critical, assures that adequate SHUTDOWN MARGIN is available.

The PDIL alarm is not required at HOT SHUTDOWN and below, since no more than one control rod would be withdrawn and the SHUTDOWN Margin calculation accounts for that .

B 3.17-33 Amendment No. ~,

.3.17 INSTRUMENTATION SYSTEMS Basis: Table 3.17.6 (continued)

Action 3.17.6.18 - One PDIL alarm inoperable - With one PDIL alarm inoperable assurance of proper SHUTDOWN MARGIN is reduced. Additional assurance of proper SHUTDOWN MARGIN is provided by veri fi cation of proper grou.p position within 15 minutes following any regulating rod motion.

19. Fuel Pool Area Radiation Monitor - The spent fuel pool is provided with two radiation monitors. These instruments provide warning of a release in the case of a fuel handling accident and provide the fuel pool criticality monitoring required by 10 CFR 70.24.

Action 3.17.6.19 - One or two Fuel Pool Area Monitors inoperable - With one or two Fuel Pool Area Radiation Monitors inoperable, fuel movement in the spent fuel pool area must be stopped. The monitor must be restored to OPERABLE status or equivalent monitoring capability provided within 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months .

The Fuel Pool is designed to be adequately subcritical even at zero ppm boron concentration. The specified 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months is adequate to repair the installed instrumentation or to provide other monitoring equipment without incurring undue risk of a criticality.

20. Containment Refueling Radiation Monitors - Two radiation monitors are located in the refueling area of the containment which actuate the Containment High Radiation Logic when switched to the refueling mode. In

this mode, a high level alarm on either monitor will actuate containment isolation through the associated CHR logic channel. The arrangement of these controls is illustrated in reference 7.

Action 3.17.6.20 - One or two Containment Refueling Monitors inoperable -

With one or two Containment Refueling Radiation Monitors inoperable, stop REFUELING OPERATIONS in the containment. This eliminates the possibility of damaging an irradiated fuel bundle.

Action 3.17.6.21 - Required action AND associated completion time not met -

If any action specified by Action statements 3.17.6.1 through 3.17.6.18 (items 19 and 20 are not associated with reactor operation) is not met AND its completion time has expired, the plant must be placed in a condition where the inoperable equipment is not required. Twelve hours are allowed to bring the plant to HOT SHUTDOWN, and 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months to reach conditions where the affected equipment is not required, to avoid unusual plant transients. Both the 12 and the 48 hour5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months time periods start when it is discovered that Action 3.17.21.6 is applicable .

B 3.17-34 Amendment No. -l6-2-,

.4.0 SURVEILLANCE REQUIREMENTS 4.0.1 Surveillance requirements shall be applicable duiing the reactor operating conditions associated with individual Limiting Conditions for Operation unless otherwise stated in an individual surveillance requirement.

4.0.2 Each Surveillance Requirement shall be performed within the specified surveillance interval with.a maximum allowable extension not to exceed 25 percent of the specified surveillance interval.

4.0.3 Failure to perform a Surveillance Requirement within the allowed surveillance interval, defined by Specification 4.0.2, shall constitute noncompliance with the operability requirements for a Limiting Condition for Operation. The time limits of the action requirements are applicable at.the time it is identified that a Surveillance Requirement has not been performed. The action requirements may be delayed for up to 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months to permit the completion.of the surveillance when the allowable outage time limits of the action requirements are less than 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months . Surveillance Requirements do not have to be performed on inoperable equipment.

4.0.4 Entry into*a reactor operating condition or other specified condition shall not be made unless the Surveillance Requirements aisociated with a Limiting Condition of Operation has been performed within the stated surveillance interval or as otherwise specified. This provision shall

4.0.5 flot prevent passage through or ~o plant-conditions as required to comply with action requirements.

Surveillance Requirements for inservice inspection and testing of ASME Code Class 1, 2, and 3 components shall be applicable as follows:

a. Inservice inspection of ASME Code Class 1, 2, and 3 components and inservice testing of ASME Code Class 1, 2, and 3 pumps and valves shall be performed in accordance with Section XI of the ASME Boiler and Pressure Vessel Code and applicable Addenda as required by 10 CFR 50, Section 50.55a(g), except where specific written relief has been granted by the Commission pursuant to 10 CFR 50, Section 50.55a(g)(6)(i).

Amendment No. a.G, &!-, HG, 62-,

4-1

4.0 BASIS Specifications 4.0.1 through 4.0.5 establish the general requirements

applicable to Surveillance Requirements. These requirements are based on the Surveillance requirements stated in the code of Federal Regulations, .10 CFR 50.36{c){3):

"Surveillance requirements are requirements relating to test, calibration, or inspection to ensure that the necessary quality of systems and components is maintained, that facility operation will be within safety limits, and that the limiting conditions of operation will be met."

Specification 4.0.1 establishes the requirement that surveillances must be performed during reactor operating conditions or other conditions for which the requirements of the Limiting Conditions for Operation apply, unless otherwise stated in an individual Surveillance Requirement. The purpose of this specification is to ensure that surveillances are performed to verify the operational status of systems and components and that parameters are within specified limits to ensure safe operation of the facility when the plant is in a reactor operating condition or other specified condition for which the associated Limiting Conditions for Operation are applicable.

Surveillance Requirements do not have to be performed when the facility is in an operational condition for which the requirements of the associated Limiting Condition for Operation do not apply, unless otherwise specified.

The Surveillance Requirements associated with a Special Test Exception are only applicable when the Special Test Exception is used as an allowable exception the requirements of a specification.

Specification 4.0.2 establishes the limit for which the specified time interval for Surveillance Requirements may be extended. It permits an allowable extension of the normal surveillance interval to facilitate surveillance scheduling and consideration of plant operating conditions that may not be suitable for conducting the surveillance; e.g., transient conditions or other ongoing surveillance or maintenance activities. It also provides flexibility to accommodate the length of a fuel cycle for surveillances that are performed at each refueling outage and are specified with an 18-month surveillance interval. It is not intended that this provision be used repeatedly as a convenience to extend the surveillance intervals beyond that specified for surveillances that are not performed during refueling outages. The limitation of Specification 4.0.2 is based on engineering judgment and the recognition that the most probable result of any particular surveillance being performed is the verification of conformance with the Surveillance Requirements. This provision is sufficient to ensure that the reliability ensured through surveillance activities is not significantly degraded beyond that obtained from the specified surveillance interval.

Specification 4.0.3 establishes the failure to perform a Surveillance Requirement within the allowed surveillance interval, defined by the provisions of Specification 4.0.2, as a condition that constitutes a failure to meet the operability requirements for a Limiting Condition for Operation.

Under the provisions of this specification, systems and components are assumed to be operable when Surveillance Requirements have

4-3 Amendment No. 3-G, -162-,

4.1 OVERPRESSURE PROTECTION SYSTEM TESTS Surveillance Requirements

In addition to the requirements of Specification 4.0.5, each PORV flow path shall be demonstrated OPERABLE by:

1. Testing the PORVs in accordance with the inservice inspection requirements for ASME Boiler and Pressure Vessel Code,Section XI, Section IWV, Category B valves.

2. Performance of a CHANNEL CALIBRATION on the PORV actuation channel at least once per 18 months.

3. When the PORV flow path is required to be OPERABLE by Specification 3.1.8.1:

(a) Performing a complete cycle of the PORV with the plant above COLD SHUTDOWN at least once per 18 months.

(b) Performing a complete cycle of the block valve prior to heatup from COLD SHUTDOWN, if not cycled within 92 days.

4. When the PORV flow path is required to be OPERABLE by Specification 3.1.8.2:

(a) Performance of a CHANNEL FUNCTIONAL TEST on the PORV actuation channel, but excluding valve operation, at least once per 31 days .

5.

(b) Verifying the associated block valve is open at least once per 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months .

Both High Pressure Safety Injection pumps shall be verified incapable of injection into the PCS at least once per 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months , unless the reactor head is removed, when either PCS cold leg temperature is <300°F, or when both shutdown cooling suction valves, M0-3015 and M0-3016, are open ..

With the reactor vessel head installed when the PCS cold leg temperature is less than 300°F, or if the shutdown cooling system isolation valves M0-3015 and M0-3016 are open, the start of one HPSI pump could cause the Appendix G or the shutdown cooling system pressure limits to be exceeded; therefore, both pumps are rendered inoperable .

Amendment No. laG, +/-49, l-GG, 4-6

~, 66, 64,

_4.14 AUGMENTED INSERVICE INSPECTION PROGRAM FO_R STEAM GENERATORS (Cont'd)

7. Unserviceable described the condition of a tube if it leaks or*

contains a defect large enough to affect its structural integrity in the event of an Operating Basis Earthquake, a loss-of-coolant accident, or a steam line or feedwater line break as specified in 4.14.4.c, above.

8. Tube Inspection means an inspection of the steam generator tube from the point of entry (hot leg side) completely around the U-bend to the top support of the cold leg.

9. Preservice Inspection means an inspection of the full length of each tube in steam generator performed by eddy current techniques prior to service to establish a baseline condition of the tubing.

This inspection shall be performed after the shop hydrostatic test and prior to initial POWER OPERATION using the equipment and techniques expected to be used during subsequent inservice inspections.

b. The steam generator shall be determined OPERABLE after completing the corresponding actions (plug all tubes exceeding the plugging limit and all tubes containing through-wall cracks) required by Table 4.14-2.

4.14.6 Reports

a. Within 15 days following the completion of each inservice inspection of steam generator tubes, the number of tubes plugged in each steam generator shall be reported to the Commission in a Special Report pursuant to 10 CFR 50.4.

b. The complete results of the steam generator tube inservice inspection shall be submitted to the Commission in a Special Report pursuant to 10 CFR 50.4 within 12 months following completion of the inspection.

This Special Report shall include:

1. Number and extent of tubes inspected.

2. Location and percent of wall-thickness penetration for each indication of an imperfection.

3. Identification of tubes plugged

c. Results of steam generator tube inspections that fall into Category C-3 shall require 24 hour2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months verbal notification to the NRC prioi to resumption of plant operation. A written followup within the next 30 days shall provide a description of investigations and corrective measures taken to prevent recurrence .

4-69 Amendment No. a-9, 2-, +/-Ge, -H-2-, ~' i-4!,

. 4.16 INSERVICE INSPECTION PROGRAM FOR SHOCK SUPPRESSORS CSnubbersl 4.16.1 b. Visual Inspection Acceptance Criteria (continued)

c.

A review and evaluation shall be performed and documented to justify continued operation with an unacceptable snubber. If continued operation cannot be justified, the snubber shall be declared inoperable and the action requirements shall be met.

Functional Tests At least once per 18 months during shutdown, a representative sample (10% of the total safety-related snubbers in use at the plant) shall be functionally tested either in place or in a bench test. The test shall verify the snubber has freedom of movement and is not frozen up. For each snubber which did not meet the functional test acceptance criteria of Specification 4.16.1.d or 4.16.1.e, an additional 10% of the total shall be functionally tested. 111 ,

The representative sample selected for functional testing shall include the various configurations, operating environments and the range of size and capacity of snubbers. Snubbers identified as especially difficult to remove or in high radiation zones during shutdown shall also be included in the representative sample.'~

In addition to the regular sample, snubbers which failed the previous functional test shall be retested during the next test period. If a spare snubber has been installed in place of a failed snubber, then both the failed snubber (if it is repaired and installed in another position)

and the spare snubber shall be retested. Test results of these snubbers may not be included for the resampling.

If any snubber selected for functional testing either fails to lockup or fails to move, i.e., frozen in place, the cause will be evaluated and, if caused by manufacturer or design deficiency, all snubbers of the same design subject to the same defect shall be functionally tested. This testing requirement shall be independent of the requirements stated above for snubbers not meeting the functional test acceptance criteria.

1 Snubbers of rated capacity greater than 50,000 pounds are not to be included when defining the total number of safety-related snubbers in use at the plant.

2 Permanent or other exemptions from functional testing for individual snubbers may be granted by the Commission only if a justifiable basis for exemption is presented and/or snubber life destructive testing was performed to qualify snubber operability for all design conditions at either the completion of their fabrication or at a subsequent date .

4-72 Amendment No. !48, +/-64,

4.16 INSERVICE INSPECTION PROGRAM FOR SHOCK SUPPRESSORS (Snubbers) 4.16.1 c* Functional Tests (continued)

Snubbers of rated capacity greater than 50,000 pounds will be functionally tested in lots comprising 25% of their total during each refueling outage. In the event of one snubber failure out of the four tested, no additional snubbers will be tested provided the problem is non-generic. For each additional snubber failure, however, two additional snubbers will be tested until no further snubber failures are identified or all snubbers have been tested.

Generic failures will be handled as the specific circumstances require.

For the snubber(s) found inoperable, an engineering evaluation shall be performed on the components which are suppressed by the snubber(s). The purpose of this engineering evaluation shall be to determine if the components suppressed by.the snubber(s) were adversely affected by the inoperability of the snubber(s) in order to ensure that the suppressed component remains capable of meeting the designed service.

d. Hydraulic Snubbers Functional Test Acceptance Criteria The hydraulic snubber functional test shall verify that:

1. Activation (restraining action) is achieved within the specified range of velocity or acceleration in both tension and compression .

2. Snubber bleed, or release rate, where required, is within the specified range in compression or tension. For snubbers specifically required not to displace under continuous load, the ability of the snubber to withstand load without displacement shall be verified.

e. Mechanical Snubbers Functional Test Acceptance Criteria The mechanical snubber functional test shall verify that:

I. The force that initiates free movement of the snubber rod in either tension or compression is less than the specified maximum drag force (break away friction).

2. Activation (restraining action) is achieved within the specified range of velocity or acceleration in both tension and compression.

3. Snubber release rate, where required, is within the specified range in compression or tension. For snubbers specifically required not to displace under continuous load, the ability of the snubber to withstand load without displacement shall be verified .

4-73 Amendment No. 3-, &9, -l-G-7, 64,

4.17 INSTRUMENTATION SYSTEMS TESTS Table 4.17.1

Instrumentation Surveillance Requirements for Functional Unit Reactor Protective System CHANNEL CHECK CHANNEL FUNCTIONAL TEST CHANNEL CALIBRATION

1. Manual Trip NA (a) NA

2. Variable High Power 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months 31 days {b, c, &d)

3. High Start Up Rate 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months (a) 18 months 101

4. Thermal Margin/ 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months 31 days 18 months Low Pressure

5. High Pressurizer 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months 31 days 18 months Pressure

6. Low PCS Flow 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months 31 days 18 months

7. Loss of Load NA (a) 18 months

8. Low "A" SG Level 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months 31 days 18 months

9.

10.

11.

Low "B" SG -Level Low "A" SG Pressure Low "B" SG Pressure 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months 12 hours 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months 31 days 31 days 31 days 18 months 18 months 18 months

12. High Containment Pressure NA 31 days 18 months

13. RPS Matrix Logic NA 31 days NA

14. RPS Initiation Logic NA 31 days NA

15. Thermal Margin Monitor; Verify constants each 92 days.

{a) Once within 7 days prior to each reactor startup.

{b) Calibrate with Heat Balance each 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months , when> 15% RATED POWER.

(c) Calibrate Excores channels with test signal each 31 days.

(d) CHANNEL CALIBRATION each 18 months.

(e) Include verification of automatic Zero Power Mode Bypass removal.

Amendment No. -l-18, +/-6G, -l-66, §G, 62-, 64, 4-76

4.17 INSTRUMENTATION SYSTEMS TESTS Table 4.17.2

Functional Unit Instrumentation Surveillance Requirements for Engineered Safety Features CHANNEL CHECK CHANNEL FUNCTIONAL TEST CHANNEL CALIBRATION

1. Safety Injection Signal (SIS)

a. Manual Initiation NA 18 months NA

b. SIS Logic NA (a) NA (Initiation, Actuation, and low pressure block auto reset)

c. CHP Signal SIS initiation NA 18 months NA (SP Relay Output)

d. Pressurizer Pressure 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months 31 days 18 months Instrument Channels

2. Recirculation Actuation Signal (RAS)

a. Manual Initiation NA 18 months NA

b.

c.

RAS Logic SIRWT Level Switches NA NA 18 months 18 months NA 18 months

3. Auxiliary Feedwater Actuation Signal (AFAS)

a. Manual Initiation NA 18 months NA

b. AFAS Logic NA 92 days NA

c. 11 A11 SG Level 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months 31 days 18 months

d. "B 11 SG Level 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months 31 days 18 months

4. Emergency Power Sequencers

a. OBA Sequencer NA 92 days 18 months

b. Normal Shutdown Sequencer NA 18 Months 18 months (a) Test normal and emergency power functions using test circuits each 92 days.

Verify all automatic actuations and automatic resetting of low pressure block each 18 months .

4-77 Amendment No. -l-&2-, -l-64,

4.17 INSTRUMENTATION SYSTEMS TESTS Table 4.17.3

Instrumentation Surveillance Requirements for Functional Unit Isolation Functions CHANNEL CHECK CHANNEL FUNCTIONAL TEST CHANNEL CALIBRATION I. Containment High Pressure {CHP)

a. CHP logic Trains NA 18 months NA

b. Containment Pressure NA 31 days 18 months Switches - Left Train

c. Containment Pressure NA 31 days 18 months Switches - Right Train

2. Containment High Radiation {CHR)

a. Manual Initiation NA 18 months NA

1 b. CHR Logic Trains

c. Containment Area Radiation Monitors NA 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months 18 months 31 days NA 18 months

3. Steam Generator Low Pressure {SGLP)

a. Manual Actuation NA 18 months NA

b. SGLP Logic Trains NA 18 months NA

c. "A" Steam Generator 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months 31 days 18 months Pressure

d. "B" Steam Generator 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months 31 days 18 months Pressure

4. Engineered Safeguards Pump Room High Radiation

a. East Room Monitor 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months 31 days 18 months

b. West Room Monitor 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months 31 days 18*months Amendment No. ~' -l-64, 4-78

4.17 INSTRUMENTATION SYSTEMS TESTS Table 4.17.4

- Instrument Instrumentation Surveillance Requirements for Accident Monitoring CHANNEL CHECK CHANNEL CALIBRATION

1. Wide Range TH 31 days 18 months

2. Wide Range Tc 31 days 18 months

3. Wide Range Flux 31 days 18 months

4. Containment Floor Water Level 31 days 18 months

5. Subcooled Margin Monitor 31 days 18 months

6. Wide Range Pressurizer Level 31 days 18 months

7. Containment H2 Concentration 31 days 18 months

8. Condensate Storage Tank Level 31 days 18 months

9. Wide Range Pressurizer Pressure 31 days 18 months

10. Wide Range Containment Pressure 31 days 18 months

11. Wide Range "A" SG Level 31 days 18 months

12. Wide Range "B" SG Level 31 days 18 months

13. Narrow Range "A" SG Pressure 31 days 18 months

14. Narrow Range "B" SG Pressure 31 days 18 months

15. Position Indication for each 31 days 18 months Containment Isolation Valve

16. Core Exit Thermocouples (CET) 31 days 18 months!al Quadrant 1

17. Core Exit Thermocouples (CET) 31 days 18 months(al Quadrant 2

18. Core Exit Thermocouples (CET) 31 days 18 months(al Quadrant 3

19. Core Exit Thermocouples (CET) 31 days 18 months'a' Quadrant 4

20. Reactor Vessel Water Level (RVWL) 31 days 18 months

21. High Range Containment Radiation 31 days 18 months (a) Calibrate by substituting a known voltage for thermocouple .

4-79 Amendment No. 62-, ~'

4.17 INSTRUMENTATION SYSTEMS TESTS Table 4.17.5

Instrumentation Surveillance Reguirements for Instrument or Control Alternate Shutdown System CHANNEL CHECK CHANNEL FUNCTIONAL TEST

.CHANNEL CALIBRATION I. Start-up Range Flux (a} (a} 18 IJlOnths

2. Pressurizer Pressure 92 days NA 18 months

3. Pressurizer Level 92 days NA 18 months

4. #1 Hot Leg Temperature 92 days NA 18 months

5. #2 Hot Leg Temperature 92 days NA 18 months

6. #1 Cold Leg Temperature 92 days NA 18 months

7. #2 Cold Leg Temperature 92 days NA 18 months

8. "A" SG Pressure 92 days NA 18 months

9. "8" SG Pressure 92 days NA 18 months

10. "A" SG Level 92 days NA 18 months

11. "8" SG Level 92 days NA 18 months

12.

13.

14.

SIRW Tank Level P-88 Flow to "A" SG P-88 Flow to "8" SG 92 days

. 18 months 18 months NA 18 months 18 months 18 months 18 months 18 months

15. P-88 Low Suction Alarm NA 18 months 18 months

16. P-88 Steam Valve Control NA 18 months NA

17. AFW Fl ow Centro l "A" SG NA 18 months NA

18. AFW Flow Control "B" SG NA 18 months NA

19. Transfer Switches, C-150 NA 18 months NA

20. Transfer Switch, C-150A NA 18 months NA (a} Once within 7 days prior to each reactor startup.

4-80 Amendment No. ~' ~' +/-6-2-, .i-64,

4.17 INSTRUMENTATION SYSTEMS TESTS Table 4.17.6 Instrumentation Surveillance Requirements for Other Safety Functions CHANNEL CHANNEL FUNCTIONAL CHANNEL Instrument CHECK TEST CALIBRATION

1. Neutron Flux Monitoring 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months (a) lS months

2. Rod Position Indication 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months (b) lS months

3. SIRW Tank Temperature 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months NA 18 months

4. Main Feedwater Flow 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months Not Required 18 months

5. Main Feedwater Temp. 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months Not Required lS months

6. AFW Flow Indication 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months lS months 18 months

7. PCS Leakage Detection:

a. Sump Level 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months lS months lS months

b. Atmos. Gas Monitor 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months 18 months 18 months

c. Humidity Monitor 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months lS months 18 months

d. Air Cooler Condensate NA lS months Not Required Flow Switch Sa. *Primary Safety Valve NA lS months lS months acoustical monitor Sb/ Safety Valve / PORV 101 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months lS months lS months 9a. tailpipe temperature 9b. PORV Acoustical Monitor NA 18 months 18 months 9c. PORV Stem Position 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months 18 months 18 months

10. PORV Block Valve 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months NA 18 months Position Indication.

(a) Once within 7 days prior to each reactor startup.

(b) Verification of Regulating Rod Withdrawal and Shutdown Rod Insertion interlocks OPERABILITY only, once within 92 days prior to each reactor startup AND once prior to startup after each refueling. .

(c) The tailpipe temperature indicator is common to the safety valves and PORVs (continued)

4-Sl Amendment No . .J.6.2., 64,

4.17 INSTRUMENTATION SYSTEMS TESTS Table 4.17.6 (continued) e Instrumentation Surveillance Reguirements for Other Safet~ Functions CHANNEL CHANNEL FUNCTIONAL CHANNEL Instrument CHECK TEST CALIBRATION

11. SWS Break Detector NA 18 months 18 months

12. Flux - AT Comparator 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months 31 days 18 months

13. Rod Group Sequence NA 18. months 18 months Control/Alarm

14. BAT Low Level Alarm NA 18 months Not Required

15. Excore Deviation Alarm NA 18 months 18 months

16. ASI Alarm NA 18 months 18 months

17. SOC Suction Interlocks NA 18 months 18 months

18. PDIL Alarm NA 31 days 1d1 18 months

19. Fuel Fool Rad Monitor 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months 31 days 18 months

20. Containment Refueling 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months 31 days 18 months Radiation Monitor

(d) Setpoint verification only.

Amendment No. ~' -l-64, 4-82

5.3 NUCLEAR STEAM SUPPLY SYSTEM (NSSS) {Continued) 5.3.2 Reactor Core and Control

a. The reactor core shall approximate a right circular cylinder with an equivalent diameter of about 136 inches and an active height of about 132 inches.

b. The reactor core shall consist of approximately 43,000 Zircaloy-4 clad fuel rods containin~ depleted, natural, or slightly enriched uranium in the form of sintered U0 2 pellets. The fuel rods shall be grouped into 204 assemblies. A core plug or plugs may be used to replace one or more fuel assemblies subject to the analysis of the resulting power distribution.

c. The fully loaded core shall contain approximately 211,000 pounds U0 2 -and approximately 56,000 pounds of Zircaloy-4. Poison may be placed in the fuel bundles for long-term reactivity control.

d. The core excess reactivity shall be controlled by a combination of boric acid chemical shim, cruciform control rods, and mechanically fixed absorber rods where required. Forty-five control rods shall be distributed throughout the core as shown in Figure -- of the FSAR. Four of these control rods may consist of part-length absorbers.

5.3.3 Emergency Core Cooling System An emergency core cooling system shall be installed consisting of various subsystems each with internal redundancy. These subsystems shall include four safety injection tanks, two high-pressure and two low-pressure safety injection pumps, a safety injection and refueling water storage tank, and interconnecting piping as shown in Section 6 of the FSAR.

5-3 Amendment No. 2:1-, 49, 83-, ~'

ML18065A176

Text

Navigation menu

Search