Text

Proposed Tech Specs Revising Electrical Power Systems
	ML18067A600
Person / Time
Site:	Palisades
Issue date:	06/27/1997
From:	; CONSUMERS ENERGY CO. (FORMERLY CONSUMERS POWER CO.)
To:	;
Shared Package
ML18067A599	List: ML18067A598; ML18067A600;
References
	NUDOCS 9707030297
	Download: ML18067A600 (32)
	v • d • e

PALISADES PLANT TECHNICAL SPECIFICATIONS TABLE OF CONTENTS SECTION DESCRIPTION PAGE NO 1.0 DEFINITIONS 1-1 2.0 SAFETY LIMITS AND LIMITING SAFETY SYSTEM SETTINGS 2-1 2.1 SAFETY LIMITS - REACTOR CORE 2-1 2.2 SAFETY LIMITS - PRIMARY COOLANT SYSTEM PRESSURE . 2-1 2.3 LIMITING SAFETY SYSTEM SETTINGS - RPS 2-1 Table 2.3.1 Reactor Protective System Trip Setting Limits 2-2 B2.l Basis - Reactor Core Safety Limit B 2-1 B2.2 Basis - Primary Coolant System Safety Limit B 2-2 B2.3 Basis - Limiting Safety System Settings B 2-3 3.0 LIMITING CONDITIONS FOR OPERATION 3-1 3.0 APPLICABILITY 3-1 3 .1 PRIMARY COOLANT SYSTEM 3-1 b

3. I. I Operable Components 3-1 b 3.1.2 Heatup and Cooldown. Rates 3-4 Figure 3-1 Pressure - Temperature Limits for Heatup 3-5 Figure 3-2 Pressure - Temperature Limits for Cooldown 3-6 3.1.3 Minimum Conditions for Criticality 3-12 3.1.4 Maximum Primary Coolant Radioactivity 3-17 3 .1. 5 Primary Coolant System Leakage Limits 3-20 3.1.6 Maximum PCS Oxygen and Halogen Concentration . 3-23 3.1. 7 Primary and Secondary Safety Valves 3-24a 3.1.8 Over Pressure Protection Systems 3-25a Figure 3-4 LTOP Limit Curve 3-25c 3 .1.9 Shutdown Cooling 3-25h 3.2 CHEMICAL AND VOLUME CONTROL SYSTEM 3-26 3.3 EMERGENCY CORE COOLING SYSTEM 3-29 3.4 CONTAINMENT COOLING 3-34 3.5 STEAM AND FEEDWATER SYSTEMS 3-38 3.6 CONTAINMENT SYSTEM 3-40 Table 3.6.1 Containment Penetrations and Valves 3-40b 3.7 ELECTRICAL POWER SYSTEMS 3-41 B3.7 Bases - Electrical Power Systems B3.7.1-1 3.8 REFUELING OPERATIONS 3-46 3.9 Deleted 3-49 i

Amendment No. -l-&9, -l-74,

/-------9707030297 970627 ----,

PDR ADOCK 05000255 .

P PDR

P~SADES PLANT TECHNICAL SPECIFIC~ONS TABLE OF CONTENTS SECTION DESCRIPTION PAGE NO 4.0 SURVEILLANCE REQUIREMENTS 4-1 4.1 OVER PRESSURE PROTECTION SYSTEM TESTS 4-6 4.2 EQUIPMENT AND SAMPLING TESTS 4-7 Table 4.2.1 Minimum Frequencies for Sampling Tests 4-9 Table 4.2.2 Minimum Frequencies for Equipment Tests 4-11 Table 4.2.3 Ventilation Systems Tests 4-14 4.3 SYSTEMS SURVEILLANCE 4-16 Table 4.3.1 Primary Coolant System Pressure Isolation Valves 4-18 4.4 Deleted 4-19 4.5 CONTAINMENT TESTS 4-19 4.5.1 Integrated Leakage Rate Tests 4-19 4.5.2 Local Leak Detection Tests 4-19 4.5.3 Containment Isolation Valves 4-21 4.5.4 Surveillance for Prestressing System 4-21a 4.5.5 End Anchorage Concrete Surveillance 4-21c 4.5.6 Dome Delamination Surveillance 4-21c 4.6 SAFETY INJECTION AND CONTAINMENT SPRAY SYSTEMS TESTS 4-24 4.6.1 Safety Injection System 4-24 4.6.2 Containment Spray System 4-24 4.6.3 Pumps 4-24 4.6.4 Valves 4-24 4.6.5 Containment Air Cooling System 4-25 4.7 ELECTRICAL POWER SYSTEMS TESTS 4-42 4.8 MAIN STEAM STOP VALVES 4-44 4.9 AUXILIARY FEEDWATER SYSTEM 4-45 4.10 REACTIVITY ANOMALIES 4-46 4.11 Deleted 4-46

. 4.12 AUGMENTED ISi PROGRAM FOR HIGH ENERGY LINES 4-60 4.13 Deleted 4-65 4.14 AUGMENTED ISI PROGRAM FOR STEAM GENERATORS 4-66 4.15 PRIMARY SYSTEM FLOW MEASUREMENT 4-70 4.16 ISI PROGRAM FOR SHOCK SUPPRESSORS (Snubbers) 4-71 4.17 INSTRUMENTATION SYSTEMS TESTS 4-75 Table 4.17.1 Surveillance for the RPS 4-76 Table 4-17.2 Surveillance for ESF Functions 4-77 Table 4-17.3 Surveillance for Isolation Functions 4-78 Table 4-17.4 Surveillance for Accident Monitoring 4-79 Table 4-17.5 Surveillance for Alternate Shutdown 4-80 Table 4-17.6 Surveillance for Other Safety Functions 4-81 B4.17 Basis - Instrumentation Systems Surveillance B 4.17-1 4.18 POWER DISTRIBUTION INSTRUMENTATION 4-83 4.18 .1 Incore Detectors 4-83 4.18.2 Excore Monitoring System 4-83 4.19 POWER DISTRIBUTION LIMITS 4-84 4.19.1 Linear Heat Rate 4-84 4.19.2 Radial Peaking Factors 4-84 4.20 MODERATOR TEMPERATURE COEFFICIENT (MTC) 4-85 i ii Amendment No. ~' i:-74,

P~SADES PLANT TECHNICAL SPECIFIC~ONS TABLE OF CONTENTS SECTION DESCRIPTION PAGE NO 5.0 DESIGN FEATURES 5-1 5.1 SITE 5-1 5.2 CONTAINMENT DESIGN FEATURES 5-1 5.2.1 Containment Structures 5-1 5.2.2 Penetrations 5-2 5.2.3 Containment Structure Cooling Systems 5-2 5.3 NUCLEAR STEAM SUPPLY SYSTEM (NSSS) 5-2 5.3.l Primary Coolant System 5-2 5.3.Z Reactor Core and Control 5-3 5.3.3 Emergency Core Cooling System 5-3 5.4 FUEL STORAGE 5-4 5.4.1 New Fuel Storage 5-4 5.4.2 Spent Fuel Storage 5-4a Figure 5-1 Site Environment TLD Stations 5-5 6.0 ADMINISTRATIVE CONTROLS 6-1 6.1 RESPONSIBILITY 6-1 6.2 ORGANIZATION 6-1 6.2.1 Onsite and Offsite Organizations 6-1 6.2.2 Plant Staff 6-2 6.3 PLANT STAFF QUALIFICATIONS 6-3 6.4 PROCEDURES 6-4 6.5 PROGRAMS AND MANUALS 6-5 6.5.1 Offsite Dose Calculation Manual 6-5 6.5.2 Primary Coolant Sources Outside Containment 6-6 6.5.3 Post Accident Sampling Program 6-6 6.5.4 Radioactive Effluent Controls Program 6-7 6.5.5 Reserved 6-8 6.5.6 Primary Coolant Pump Flywheel Surv. Program 6-8 6.5.7 Inservice Inspection and Testing Program 6-8 6.5.8 Steam Generator iube Surveillance Program 6-9 6.5.9 Secondary Water Chemistry Program 6-14 6.5.10 Ventilation Filter Testing Program 6-15 6.5.11 Fuel Oil Testing Program 6-16 6.5.12 Technical Specification Bases Control Program 6-16 6.5.13 Reserved 6-17 6.5.14 Containment Leak Rate Testing Program 6-17 6.5.15 Process Control Program 6-18 6.6 REPORTING REQUIREMENTS 6-19 6.6.l Occupational Radiation Exposure Report 6-19 6.6.2 Radiological Environmental Operating Report 6-19 6.6.3 Radioactive Effluent Release Report 6-19 6.6.4 Monthly Operating Report 6-19 6.6.5 Core Operating Limits Report 6-20 6.6.6 Reserved 6-21 6.6.7 Accident Monitoring Instrument Report 6-21 6.6.8 Containment Structural Integrity Surveillance Report 6-22 6.6.9 Steam Generator Tube Surveillance Report 6-22 6.7. HIGH RADIATION AREA 6-23 6.8 REVIEW AND AUDIT 6-24 iv Amendment No. ~' -l-74,

3.J

' 3.7.1 3.7.1.C ELECTRICAL P~R SYSTEMS AC Sources - Operating Action (continued)

With two required offsite circuits inoperable:

1. Declare required feature(s) inoperable when the redundant required feature(s) is inoperable; within 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months from discovery of two inoperable required offsite circuits concurrent with the inoperability of redundant required feature(s), and

2. Restore one required offsite circuit to OPERABLE status; within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .

3.7.1.D With one required offsite circuit inoperable and one DG inoperable:

1. Restore required offsite circuits to OPERABLE status; within 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months , or

2. Restore DGs to OPERABLE status; within 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months .

3.7.1.E With two DGs inoperable:

1. Restore one DG to OPERABLE status; within 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months .

3.7.1.F With one or both automatic load sequencers inoperable:

1. Declare the affected DGs inoperable; immediately.

3.7.1.G With Fuel Transfer Pump P-18A inoperable:

1. Declare DG 1-2 inoperable; within 15 hours1.736111e-4 days 0.00417 hours 2.480159e-5 weeks 5.7075e-6 months 3.7.1.H With Fuel Transfer Pump P-18B inoperable:

1. Restore P-18B to OPERABLE status; within 7 days.

3.7.1.1 With both Fuel Transfer Pumps inoperable:

1. Restore one Fuel Transfer Pump to operable status; within 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months .

3.7.1.J If any action required by 3.7.1.A through 3.7.1.I is not met and the associated completion time has expired:

1. The reactor shall be placed in HOT SHUTDOWN; within 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months , and

2. The reactor shall be placed in COLD SHUTDOWN; within 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months .

3.7.1.K With three or more required AC sources inoperable:

1. Enter Specification 3.0.3 immediately.

3-42 Amendment No. 88,

4.7.2 4.7.2.1 ELECTRICAL P~R SYSTEMS TESTS AC Power Source Tests - Shutdown Verify each AC power source required by Specification 3.7.2 is OPERABLE by the following surveillance. Credit may be taken for unplanned events that satisfy a surveillance requirement.

4.7.1.1, Offsite source check 4.7.1.2, DG starting test 4.7.1.4, DG starting air check 4.7.1.5, DG day tank level check 4.7.1.6, Fuel transfer check 4.7.3 DG Fuel Oil and Lube Oil Verify that the fuel oil and lube oil for each required DG is adequate by the following surveillance:

4.7.3.1 Verify that the Fuel Oil Storage Tank contains~ 23,700 gallons of fuel; each 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .

4.7.3.2 Verify stored lube oil inventory is~ 175 gallons; each 31 days.

4.7.3.3 Verify properties of new fuel oil and stored fuel oil are tested in accordance with, and maintained within the limits of, the Fuel Oil Testing Program, Specification 6.5.11.

4.7.3.4 Check for and remove excess accumulated water from the Fuel Oil Storage Tank; each 92 days.

4-43b Amendment No.

BASES

~AC Sources - Opera t'1ng B 3.7.I and 4.7.I Safeguards Transformer 1-I is connected to the switchyard F bus. It feeds station 2400 volt loads through an underground line. It is available to supply these loads during operation and shutdown.

The onsite distribution system consists of seven main distribution buses (4I60 volt buses IA, IB, IF, and IG, and 2400 volt buses IC, ID, and IE) and supported lower voltage buses, motor control centers (MCCs), and lighting panels. The 4I60 volt buses and 2400 volt bus IE are not safely related.

Buses IC and ID and their supported buses and MCCs form two independent, redundant, safety related distribution trains. Each distribution train supplies one train of engineered safety features equipment.

In the event of a generator trip, all loads supplied by the station power transformers are automatically transferred to the startup transformers.

Loads supplied by the safeguards transformer are unaffected by a plant trip.

If power is lost to the safeguards transformer, the 2400 volt loads will automatically transfer to startup transformer I-2. If the startup transformers are not energized when these transfers occur, their output breakers will be blocked from closing and the 2400 volt safety related buses will be energized by the DGs.

The two DGs each supply one 2400 volt bus. They provide backup power in the event of loss of off-site power, or loss of power to the associated 2400 volt bus. The continuous rating of the DGs is 2500 kw, with IIO percent overload permissible for 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months in any 24 hour2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months period. The required fuel in the Fuel Oil Storage Tank and DG Day Tank will supply one DG for a minimum period of 7 days assuming accident loading conditions and fuel conservation practices.

If either 2400 volt bus, IC or lD, experiences a sustained undervoltage, the associated DG is started~ the affected bus is separated from its offsite power sources, major loads are stripped from that bus and its supported buses, the DGs are connected to the bus, and ECCS or shutdown loads are started by an automatic load sequencer.

The DGs share a common fuel oil storage and transfer system. A single buried Fuel Oil Storage Tank is used, along with an individual day tank for each DG, to maintain the required fuel oil inventory. Two fuel transfer pumps are provided. The fuel transfer pumps are necessary for long term operation of the DGs. Testing has shown that each DG consumes about 2.6 gallons of fuel oil per minute at 2400 kW. Each day tank is required to contain at least 2500 gallons. Therefore, each fuel oil day tank contains sufficient fuel for more than I5 hours of full load (2500 kW) operation. Beyond that time, a fuel transfer pump is required for continued DG operation.

Either fuel transfer pump is capable of supplying either DG. However, each fuel transfer pump is not capable, with normally available switching, of being powered from either DG. DG I-1 can power either fuel transfer pump, but DG I-2 can only power P-I8A. The fuel oil pumps share a common fuel oil storage tank, and common piping.

PALISADES B 3.7.I-2 Amendment No:

BASES

~AC Sources - Opera t'ing 8 3.7.1 and 4.7.1 3.7.1.E.l With both DGs inoperable, there are no rema1n1ng standby AC sources. Thus, with an assumed loss of offsite electrical power, no AC source would be available to power the minimum required ESF functions. Since the offsite electrical power system is the only source of AC power for this level of degradation, the risk associated with continued operation for a short time could be less than that associated with an immediate controlled shutdown (the immediate shutdown could cause grid instability, which could result in a total loss of AC power). Since an inadvertent generator trip could also result in a total loss of offsite AC power, however, the time allowed for continued operation is severely restricted. The intent here is to avoid the risk associated with an immediate controlled shutdown and to minimize the risk associated with this level of degradation.

According to the recommendations of RG 1.93, with both DGs inoperable, operation may continue for a period that should not exceed 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months .

3.7.1.F.l The sequencer is an essential support system to the DG. With the sequencer inoperable, the associated DG is unable to perform its specified function, and must thereby be immediately declared to be inoperable.

3.7.1.G.l, ~.l, and I.I Since DG 1-2 cannot power fuel transfer pump P-188, without P-18A, DG 1~2 becomes dependant on offsite power or DG 1-1 for its fuel supply (beyond the 15 hours1.736111e-4 days 0.00417 hours 2.480159e-5 weeks 5.7075e-6 months it will operate on the day tank), and does not meet the LCO requirement for independence. Since the condition is not as severe as the DG itself being inoperable, 15 hours1.736111e-4 days 0.00417 hours 2.480159e-5 weeks 5.7075e-6 months is allowed to restore the fuel transfer pump to operable status prior to declaring the DG inoperable.

Without P-18B, either DG can still provide power to the remaining fuel transfer pump, neither DG is directly affected. Continued operation with a single remaining fuel transfer pump, however, must be limited since an additional single active failure (P-18A) could disable the onsite power system. Because the loss of P-188 is less severe than the loss of one DG, a 7 day Completion Time is allowed.

If both fuel transfer pumps are inoperable, the onsite AC sources are limited to about 15 hours1.736111e-4 days 0.00417 hours 2.480159e-5 weeks 5.7075e-6 months duration. Since this condition is not as severe as both DGs being inoperable, 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months is allowed to restore one fuel transfer pump to OPERABLE status.

PALISADES B 3.7.1-9 Amendment No:

' \

BASES

~C/"\ Sources - opera t'ing B 3.7.1 and 4.7.1 The monthly testing starting of the DG provides assurance that the DG would start and be ready for loading in the time period assumed in the safety analyses. The monthly test, however does not, and is not intended to, test all portions of the circuitry necessary for automatic starting and loading.

The operation of the bus undervoltage relays and their auxiliary relays which initiate DG starting, the control relay which initiates DG breaker closure, and the DG breaker closure itself are not verified by this test. Verification of automatic operation of these components requires de-energizing the associated 2400 volt bus and cannot be done during plant operation .. For this test, the 10 second timing is started when the DG receives a start signal, and ends when the DG voltage sensing relays actuate.

For the purposes of SR 4.7.1.2, the DGs are manually started from standby conditions. Standby conditions for a DG mean the diesel engine is not running, but its coolant and oil temperatures are being maintained consistent with manufacturer recommendations.

Three relays sense the terminal voltage on each DG. These relays, in conjunction with a load shedding relay actuated by bus undervoltage, initiate automatic closing of the DG breaker. During monthly testing, the actuation of the three voltage sensing relays is used as the timing point to determine when the DG is ready for loading.

The 31 day Frequency for performance of SR 4.7.1.2 agrees with the original licensing basis for the Palisades plant.

SR 4.7.1.3 (DG loading test)

This Surveillance verifies that the DGs are capable of synchronizing with the offsite electrical system and accepting loads greater than or equal to the equivalent of the maximum expected accident loads for at least 15 minutes. A minimum total run time of 60 minutes is required to stabilize engine temperatures.

During the period when the DG is paralleled to the grid, it must be considered inoperable. This is because the load shedding circuits, which are actuated by the 2400 bus undervoltage relays and which must function to initiate automatic DG loading, are blocked when the DG breaker is closed. This load shed block assures that a spurious undervoltage will not cause load shedding while a DG is the sole source for accident loads, but it prevents automatic DG actuation while the DG is paralleled to the grid.

The 31 day Frequency for this Surveillance is consistent with the original Palisades licensing basis.

PALISADES B 3.7.1-12 Amendment No:

' I BASES

Sources - Operating B 3.7.1 and 4.7.1 During the period when the DG is paralleled to the grid, it must be considered inoperable. This is because the load shedding circuits, which are actuated by the 2400 Volt bus undervoltage relays and which must function to initiate automatic DG loading, are blocked when the DG breaker is closed. This load shed block assures that a spurious undervoltage will not cause load shedding while a DG is the sole source for accident loads, but it prevents automatic DG actuation while the DG is paralleled to the grid.

The 18 month Frequency is consistent with the recommendations of RG 1.9.

SR 4.7.1.11 (DG load transfer to offsite)

As recommended by RG 1.9, this Surveillance ensures that the manual synchronization and load transfer from the DG to the offsite source can be made and that the DG can be returned to ready to load status when offsite power is restored. The test is performed while the DG is supplying its associated 2400 volt bus, but not necessarily carrying the sequenced accident loads. The DG is considered to be in ready to load status when the DG is at rated speed and voltage, the output breaker is open, the automatic load sequencer is reset, and the DG controls are returned to "Unit".

During the period when the DG is paralleled to the grid, it must be considered inoperable. This is because the load shedding circuits, which are actuated by the 2400 bus undervoltage relays and which must function to initiate automatic DG loading, are blocked when the DG breaker is closed. This load shed block assures that a spurious undervoltage will not cause load shedding while a DG is the sole source for accident loads, but it prevents automatic DG actuation while the DG is paralleled to the grid.

The Frequency of 18 months is consistent with the recommendations of RG 1.9.

This SR is modified by a Note. The reason for the Note is that performing the Surveillance would remove a required offsite circuit from service, perturb the electrical distribution system, and challenge safety systems. However, credit may be taken for unplanned events that satisfy this SR.

SR 4.7.1.12 (Sequencer timing check)

If power is lost to bus IC or ID, loads are sequentially connected to the bus by the automatic load sequencer. The sequencing logic controls the permissive and starting signals to motor breakers to prevent overloading of the DGs by concurrent motor starting currents. The 0.3 second load sequence time interval tolerance ensures that sufficient time exists for the DG to restore frequency and voltage prior to applying the next load and ensures that safety analysis assumptions regarding ESF equipment time delays are met. Logic Drawing E-17 Sheet 4 provides a summary of the automatic loading of safety related buses.

PALISADES B 3.7.1-17 Amendment No:

BASES

Sources - Operating B 3.7.1 and 4.7.1 This SR is modified by a Note. The reason for the Note is that performing the Surveillance would remove a required offsite circuit from service, perturb the el~ctrical distribution system, and challenge safety systems. However, credit may be taken for unplanned events that satisfy this SR.

REFERENCES

1. 10 CFR 50, Appendix A, GDC 17

2. Regulatory Guide 1.93, December 1974

3. Generic Letter 84-15, July 2, 1984

4. 10 CFR 50, Appendix A, GDC 17

5. 10 CFR 50, Appendix A, GDC 18

6. Regulatory Guide 1.9, Rev. 3, July 1993

7. Regulatory Guide 1.137, Rev. 1, October 1979

8. ASME, Boiler and Pressure Vessel Code,Section XI

9. IEEE Standard 308-1978

10. Palisades Logic Drawing E-17, Sheet 4 PALISADES B 3.7.1-19 Amendment No:

BASES

.AC Sources - Shutdown B 3.7.2 and 4.7.2 SURVEILLANCE REQUIREMENTS SR 4.7.2.1 (Shutdown AC power surveillance}

SR 4.7.2.1 requires the SRs from LCO 3.7.1 that are necessary for ensuring the OPERABILITY of the AC sources in COLD SHUTDOWN and REFUELING SHUTDOWN.

The SRs from LCO 3.7.1 which are required are those which both support a feature required in COLD SHUTDOWN or REFUELING SHUTDOWN and which can be performed without effecting the OPERABILITY or reliability of the required sources.

With only one DG available, many tests cannot be performed since their performance would render that DG inoperable during the test. This is the case for tests which require DG loading: SRs 4.7.1.3, 4.7.1.7, 4.7.1.8, 4.7.1.9, 4.7.1.10, 4.7.1.11, 4.7.1.12, and 4.7.1.13.

REFERENCES None PALISADES B 3.7.2-4 Amendment No.

BASES

l.sel Fuel and Lube Oil B 3.7.3 and 4.7.3 3.7.3.C.l Diesel fuel oil with viscosity, or water and sediment out of limits is unacceptable for even short term DG operation. Viscosity is important primarily because of its effect on the handling of the fuel by the pump and injector system; water and sediment provides an indication of fuel contamination. When the fuel oil stored in the Fuel Oil Storage Tank is determined to be out of viscosity, or water and sediment limits, the DGs must be declared inoperable, immediately.

3.7.3.D.l With the stored fuel oil properties, other than viscosity or water and sediment, defined in the Fuel oil Testing Program not within the required limits, but acceptable for short term DG -Operation, a period of 30 days is allowed for restoring the stored fuel oil properties. The most likely cause of stored fuel oil becoming out of limits is the addition of new fuel oil with properties that do not meet all of the limits. This 30 day period provides sufficient time to determine if new fuel oil, when mixed with stored fuel oil, will produce an acceptable mixture, or if other methods to restore the stored fuel oil properties are required. This restoration may involve feed and bleed procedures, filtering, or combinations of these procedures. Even if a DG start and load was required during this time interval and the fuel oil properties were outside limits, there is a high likelihood that the DG would still be capable of performing its intended function.

3.7.3.E.l With a Required Action and associated Completion Time not met, or with diesel fuel oil or lube oil not within limits for reasons other than addressed by Conditions A through .D, the associated DG may be incapable of performing its intended function and must be immediately declared inoperable.

SURVEILLANCE REQUIREMENTS SR 4.7.3.l (Fuel oil quantity check)

This SR provides verification that there is an adequate inventory of fuel oil in the storage tank to support either DG's operation for 7 days at full post-accident load. The 7 day period is sufficient time to place the plant in a safe shutdown condition and to bring in replenishment fuel from an offsite location.

The 24 hour2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months Frequency is specified to ensure that a sufficient supply of fuel oil is available, since the Fuel Oil Storage Tank is the fuel oil supply for the diesel fire pumps, heating boilers, and rad waste evaporators, in addition to the DGs.

PALISADES B 3.7.3-3 Amendment No.

~sel Fuel and Lube Oil B 3.7.3 and 4.7.3 BASES SR 4.7.3.2 (Lube oil quantity check)

This Surveillance ensures that sufficient lube oil inventory is available to support at least 7 days of full accident load operation for one DG. The 175 gallons requirement is based on an estimated consumption of 1 gallon per hour.

A 31 day Frequency is adequate to ensure that a sufficient lube oil supply is onsite, since DG starts and run times are closely monitored by the plant staff.

SR 4.7.3.3 (Fuel oil quality check)

The tests listed below are a means of determining whether new fuel oil and stored fuel oil are of the appropriate grade and have not been contaminated with substances that would have an immediate, detrimental impact on diesel engine combustion.

Testing for viscosity, specific gravity, and water and sediment is completed for fuel oil delivered to the plant prior to its being added to the Fuel Oil Storage Tank. Fuel oil which fails the test, but has not been added to the Fuel Oil Storage Tank does not imply failure of this SR and requires no specific action. If results from these tests are within acceptable limits, the fuel oil may be added to the storage tank without concern for contaminating the entire volume of fuel oil in the storage tank.

Fuel oil is tested for other of the parameters specified in ASTM 0975 in accordance with the Fuel Oil Testing Program required by Specification 6.5.11.

Fuel oil determined to have one or more measured parameters, other than viscosity or water and sediment, outside acceptable limits will be evaluated for its effect on DG operation. Fuel oil which is determined t.b be acceptable for short term DG operation, but outside limits will be restored to within limits in accordance with LCO 3.7.3 Condition D.

PALISADES B 3.7.3-4 Amendment No.

~tteryB 3.7.6 Cell Parameters and 4.7.6 BASES SURVEILLANCE REQUIREMENTS SR 4.7.6.1 (Pilot cell checks)

This SR verifies that Category A battery cell parameters are consistent with IEEE-450, which recommends regular battery inspections {at least one per month) including voltage, specific gravity, and electrolyte temperature of pilot cells.

SR 4.7.6.2 (Temperature checks)

This Surveillance verification that the average temperature of representative cells is > 70°F is consistent with a recommendation of IEEE-450, which states that the temperature of electrolytes in representative cells should be determined on a quarterly basis. The monthly frequency specified is a feature of the initial Palisades license, and is the same as those other pilot cell tests specified in Surveillance 4.7.6.1.

Lower than normal temperatures act to inhibit or reduce battery capacity.

This SR ensures that the operating temperatures remain within an acceptable operating range. This limit is based on manufacturer recommendations.

SR 4.7.6.3 (Connected cell checks)

The quarterly inspection of specific gravity and voltage is consistent with the recommendations of IEEE-450.

I Table 3.7.6-1 This table delineates the limits on electrolyte level, float voltage, and specific gravity for three different categories. Each category is discussed below.

Category A defines the fully charged parameter limit for each designated pilot cell in each battery. The cells selected as pilot cells are those whose temperature, voltage and specific gravity approximate the state of charge of the entire battery.

Category B defines the normal parameter limits for each connected cell. The term "connected cell" excludes any battery cell that may be jumpered out.

PALISADES B 3.7.6-3 Amendment No.

. \.

~tteryB 3.7.6 Cell Parameters and 4.7.6 BASES Footnote (a) allows for the normally observed level increase which occurs during sustained battery charging. Footnotes (b) and (c) to Table 3.7.6-1 are applicable to Category A, B, and C specific gravity. Footnote (b) to Table 3.7.6-1 requires the above mentioned correction for electrolyte level and temperature, with the exception that level correction is not required when battery charging current is < 2 amps on float charge. This current provides, in general, an indication of overall battery condition.

Footnote (c) to Table 3.7.6-1 allows the float charge current to be used as an alternate to specific gravity readings. A stabilized charger current is an acceptable alternative to specific gravity measurement for determining the state of charge. This phenomenon is discussed in IEEE-450.

REFERENCES

1. IEEE-450-1995

2. C & D Standby Battery Installation and Operation Instructions PALISADES B 3.7.6-5 Amendment No.

Inverters - Operating B 3.7.7 and 4.7.7 BASES APPLICABILITY The inverters are required to be OPERABLE above COLD SHUTDOWN to ensure that

redundant sources of Preferred AC power for instrumentation and control are available to support engineered safeguards equipment in the event of an accident or transient and for power operation, plant heatups and cooldowns, and shutdown operation.

Inverter requirements for COLD SHUTDOWN, REFUELING SHUTDOWN, and during movement of irradiated fuel assemblies are addressed in LCO 3.7.8, "Inverters

- Shutdown".

ACTIONS 3.7.7.A.l and A.2 With an inverter inoperable, its associated Preferred AC bus becomes inoperable until it is manually re-energized from the bypass regulator. An inoperable Preferred AC Bus is addressed in LCO 3.7.9.

Required Action A.I allows 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months to fix the inoperable inverter and return it to service. The 24 hour2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months limit is based upon engineering judgment, taking into consideration the time required to repair an inverter and the additional risk to which the plant is exposed because of the inverter inoperability.

This has to be balanced against the risk of an immediate shutdown, along with the potential challenges to safety systems such a shutdown might entail.

3.7.7.B.1 and B.2 If the inoperable devices or components cannot be restored to OPERABLE status within the required Completion Time, the plant must be brought to an operating condition in which the LCO does not apply. To achieve this status, the plant must be brought to at least HOT SHUTDOWN within 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months and to COLD SHUTDOWN within 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months . The allowed Completion Times are reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.

PALISADES B 3.7.7-2 Amendment No.

6.0 6.5.11 ADMINISTRATIVE CONTROLS Fuel Oil Testing Program A fuel oil testing program to implement required testing of both new fuel oil and stored fuel oil shall be established. The program shall include sampling requirements, testing requirements, and acceptance criteria, based on the diesel manufacturer's specifications and applicable ASTM Standards. The program shall establish the following:

1. Acceptability of new fuel oil prior to addition to the Fuel Oil Storage Tank, and acceptability of fuel oil stored in the Fuel Oil Storage Tank, by determining that the fuel oil has the following properties within limits:

a) API gravity or an absolute specific gravity, b) Kinematic viscosity, and c) Water and sediment content.

2. Other properties of fuel oil stored in the Fuel Oil Storage Tank, specified by the diesel manufacturers or specified for grade 20 fuel oil in ASTM D 975, are within limits.

6.5.12 Technical Specifications (TS) Bases Control Program This program provides a means for ~rocessing changes to the Bases of these Technical Specifications.

a. Changes to the Bases of the TS shall be made under appropriate administrative controls and reviews.

b. Licensees may make changes to Bases without prior NRC approval provided the changes do not involve either of the following:

1. A change in the TS incorporated in the license; or

2. A change to the updated FSAR or Bases that involves an unreviewed safety question as defined in 10 CFR 50.59.

c. The Bases Control Program shall contain provisions to ensure that the Bases are maintained consistent with the FSAR.

d. Proposed changes that meet the criteria of Specification 6.5.12.b.

above shall be reviewed and approved by the NRC prior to implementation. Changes to the Bases implemented without prior NRC approval shall be provided to the NRC on a frequency consistent with 10 CFR 50.71(e).

6-16 Amendment No. +/--G, 74,

ATTACHMENT 3 CONSUMERS ENERGY COMPANY PALISADES PLANT DOCKET 50-255 TECHNICAL SPECIFICATION CHANGE REQUEST ELECTRICAL POWER SYSTEM REVISED PAGES MARKED.TO SHOW CHANGES FROM 9/4/96 SUBMITTAL

.. 3. 7 3.7.1 ELECTRICAL P~ SYSTEMS AC Sources - Operating Action (continued) 3.7.1.C With two required offsite circuits inoperable:

1. Declare required feature(s) inoperable when the redundant required feature(s) is inoperable; within 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months from discovery of two inoperable required offsite circuits concurrent with the inoperability of redundant required feature(s), and

2. Restore one required offsite circuit to OPERABLE status; within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .

3.7.1.D With one required offsite circuit inoperable and one DG inoperable:

1. Restore required offsite circuits to OPERABLE status; within 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months , or

2. Restore DGs to OPERABLE status; within 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months .

3.7.1.E With two DGs inoperable:

1. Restore one DG to OPERABLE status; within 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months .

3.7.1.F With one or both automatic load sequencers inoperable:

1. Declare the affected DGs inoperable; immediately.

3.7.1.G With Fuel Transfer Pump P-18A inoperable:

1. *~

Declare DG 1-2 i.noperable; within~ours 3.7.1.H With Fuel Transfer Pump P-18B inoperable:

1. Restore P-18B to OPERABLE status; within 7 days.

3.7.1.I With both Fuel Transfer Pumps inoperable:

1. Restore one Fuel Transfer Pump to operable status; within 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months .

3.7.1.J If any action required by 3.7.1.A through 3.7.1.I is not met and the associated completion time has expired:

1. The reactor shall be placed in HOT SHUTDOWN; within 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months , and

, 2. The reactor shall be placed in COLD SHUTDOWN; within 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months .

3.7.1.K With three or more required AC sources inoperable:

1. Enter Specification 3.0.3 immediately.

3-42 Amendment No. 88-,

' 4.7 4.7.2 ELECTRICAL P . SYSTEMS TESTS AC Power Source Tests - Shutdown 4.7.2.1 Verify each AC power source required by Specification 3.7.2 is OPERABLE by the following surveillance. Credit may be taken for unplanned events that satisfy a surveillance requirement.

4.7.1.1, Offsite source check 4.7.1.2, DG starting test 4.. 7.1.4, DG starting air check 4.7.1.5, DG day tank level check 4.7.1.6, Fuel transfer check 4.7.3 DG Fuel Oil and Lube Oil Verify that the fuel oil and lube oil for each required DG is adequate by the following surveillance:

4.7.3.1 Verify that the Fuel Oil Storage Tank contains~ 23,700 gallons of fuel; each 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .

4.7 .3.2 Verify stored lube oil inventory is ~ 175 gallons; each 31 days.

4.7.3.3 Verify properties of new fuel all and stored fuel oil are tested in accordance with, and maintained within the limits of, the Fuel Oil Testing Program, Specification &:8.42 ,.S:ll .

4.7.3.4 Check for and remove excess accumulated water from the Fuel Oil Storage Tank; each 92 days.

4-43b Amendment No.

BASES

~C Sources - Operating B 3.7.I and 4.7.I Safeguards Transformer I-I is connected to the switchyard F bus. It feeds station 2400 volt loads through an underground line. It is available to supply these loads during operation and shutdown.

The onsite distribution system consists of seven main distribution buses (4I60 volt buses IA, IB, IF, and lG, and 2400 volt buses IC, ID, and IE) and supported lower voltage buses, motor conttol centers (MCCs), and lighting panels. The 4I60 volt buses and 2400 volt bus IE are not safely related.

Buses IC and ID and their supported buses and MCCs form two independent, redundant, safety related distribution trains. Each distribution train supplies one train of engineered safety features equipment.

In the event of a generator trip, all loads supplied by the station power transformers are automatically transferred to the startup transformers.

Loads supplied by the safeguards transformer are unaffected by a plant trip.

If power is lost to the safeguards transformer, the 2400 volt loads will automatically transfer to startup transformer I-2. If the startup transformers are not energized when these transfers occur, their output breakers will be blocked from closing and the 2400 volt safety related buses will be energized by the DGs.

The two DGs each supply one 2400 volt bus. They provide backup power in the event of loss of off-site power, or loss 6f power to the associated 2400 volt bus. The continuous rating of tbe DGs is 2500 kw, with llO percent overload permissible for 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months in any 24 hour2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months period. The required fuel in the Fuel Oil Storage Tank and DG Day Tank will supply one DG for a minimum period of 7 days assuming accident loading conditions and fuel conservation practices.

If either 2400 volt bus, IC or ID, experiences a sustained undervoltage, the associated DG is started, the affected bus is separated from its offsite power sources, major loads are stripped from that bus and its supported buses, the DGs are connected to the bus, and ECCS or shutdown loads are started by an d automatic load sequencer. l\&.oH~ ~,..-w ,.,..., tN~*\110\1"'4.. l)lt1 T1r"'4\C.

Fott. e ~,.., llG-"

The DGs share a common fuel 01 rage and transfer system. A single buried Fuel Oil Storage Tank is use~ aintain the required fuel oil inventory.

Two fuel transfer pumps are provided. The fuel transfer pumps are necessary for long term operation of the DGs. Testing has shown that each DG consumes about 2.6 gallons of fuel oil per minute at 2400 kW. Each day tank is required to contain at least 2500 gallons. Therefore, each fuel oil day tank contains sufficient fuel for more than I5 hours of full load (2500 kW) operation. Beyond that time, a fuel transfer pump is required for continued DG operation.

Either fuel transfer pump is capable of supplying either DG. However, each fuel transfer pump is not capable, with normally available switching, of being powered from either DG. DG I-I can power either fuel transfer pump, but DG I-2 can only power P-IBA. The fuel oil pumps share a common fuel oil storage tank, and common piping.

PALISADES B 3.7.I-2 Amendment No:

\ ' ~

BASES

~AC Sources - Opera t'ing B 3.7.1 and 4.7.1 3.7.1.E.l With both DGs inoperable, there are no rema1n1ng standby AC sources. Thus, with an assumed loss of offsite electrical power, no AC source would be available to power the minimum required ESF functions. Since the offsite electrical power system is the only source of AC power for this level of degradation, the risk associated with continued operation for a short time could be less than that associated with an immediate controlled shutdown (the immediate shutdown could cause grid instability, which could result in a total loss of AC power). Since an inadvertent generator trip could also result in a total loss of offsite AC power, however, the time allowed for continued operation is severely restricted. The intent here is to avoid the risk associated with an immediate controlled shutdown and to minimize the risk associated with this level of degradation.

According to the recommendations of RG 1.93, with both DGs inoperable, operation may continue for a period that should not exceed 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months .

3.7.1.F.l The sequencer is an essential support system to the DG. With the sequencer inoperable, the associated DG is unable to perform its specified function, and must thereby be immed_iately declared to be inoperable.

3.7.1.G.l, H.l, and I.I Since DG 1-2 cannot power fuel transfer pump P-18B, without P-18A, DG 1-2 becomes dependant on offsite power or DG 1-1 for its fuel supply (beyond the 15 hours1.736111e-4 days 0.00417 hours 2.480159e-5 weeks 5.7075e-6 months it will operate on the day tank), and does not meet the LCO requirement for independe~nceSince the condition is not as severe as the DG itself being inoperable, ours is allowed to restore the fuel transfer pump to operable status prior to declaring the DG inoperable.

Without P-18B, either DG can still provide power to the remaining fuel transfer pump, neither DG is directly affected. Continued operation with a single remaining fuel transfer pump, however, must be limited since an additional single active failure (P-18A) could disable the onsite power system. Because the loss of P-18B is less severe than the loss of one DG, a 7 day Completion Time is allowed.

If both fuel transfer pumps are inoperable, the onsite AC sources are limited to about 15 hours1.736111e-4 days 0.00417 hours 2.480159e-5 weeks 5.7075e-6 months duration. Since this condition is not as severe as both DGs being inoperable, 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months is allowed to restore one fuel transfer pump to OPERABLE status.

PALISADES B 3.7.1-9 Amendment No:

\

BASES

41t.AC Sources - 0perat1ng B 3.7.1 and 4.7.1 The monthly testing starting of the DG provides assurance that the DG would start and be ready for loading in the ttme period assumed in the safety analyses. The monthly test, however does not, and is not intended to, test all portions of the circuitry necessary for automatic starting and loading.

The operation of the bus undervoltage relays and their auxiliary relays which initiate DG starting, the control relay which initiates DG breaker closure, and the DG breaker clasure itself are not verified by this test. Verification of automatic operation of these components requires de-energizing the associated 2400 volt bus and cannot be done during plant operation. For this test, the 10 second timing is started when the DG receives a start signal, and ends when the DG voltage sensing relays actuate.

For the purposes of SR 4.7.1.2, the DGs are manually started from standby conditions. Standby conditions for a DG mean the diesel engine is not running, but its coolant and oil temperatures are being maintained consistent with manufacturer recommendations.

Three relays sense the terminal voltage on each DG. These relays, in conjunction with a load shedding relay actuated by bus undervoltage, initiate automatic closing of the DG breaker. During monthly testing, the actuation of the three voltage sensing relays is used as the timing point to determine when the DG is ready for loading.

The 31 day Frequency for performance of SR 4.7.1.2 agrees with the original licensing basis for the Palisades plant, a*uf i3 eo11sist~mt 1H-tm rt!<tre~'l'l9 i'fie.,ttEllC!) I CCOll1ilrend&ti &11 of GM.~~012 Q4a~.

SR 4.7.1.3 (DG loading test)

This Surveillance verifies that the DGs are capable of synchronizing with the offsite electrical system and accepting loads greater than or equal to the equivalent of the maximum expected accident loads for at least 15 minutes. A minimum total run time of 60 minutes is required to stabilize engine temperatures.

During the period when the DG is paralleled to the grid, it must be considered inoperable. This is because the load shedding circuits, which are actuated by the 2400 bus undervoltage relays and which must function to initiate automatic DG loading, are blocked when the DG breaker is closed. This load shed block assures that a spurious undervoltage will not cause load shedding while a DG is the sole source for accident loads, but it prevents automatic DG actuation while the DG is parallel.ed to the grid.

The 31 day Frequency for this Surveillance is consistent with the original Pali sades licensing basis 41AEi *::Oh tlte~e3'8>i-A~ "f\1~e11~w0£

~AQPil!l!~tcer '4-&t.

PALISADES B 3.7.1-12 Amendment No:

\

\.

~ ' \

BASES

~C Sources - Operating B 3.7.I and 4.7.I During the period when the DG is paralleled to the grid, it must be considered inoperable. This is because the load shedding circuits, which are actuated by the 2400 Volt bus undervoltage relays and which must function to initiate automatic DG loading, are blocked when the DG breaker is closed. This load shed block assures that a spurious undervoltage will not cause load shedding while a DG is the sole source for accident loads, but it prevents automatic DG actuation while the DG is paralleled to the grid.

The IS month Frequency is consistent with the recommend at i ans of RG 1. 9.

SR 4.7.I.II (DG load transfer to offsite}

As recommended by RG I.9, this Surveillance ensures that the manual synchronization and load transfer from the DG to the offsite source can be made and that the DG can be returned to ready to load status when offsite power is restored. The test is performed while the DG is supplying its associated 2400 volt bus, but not necessarily carrying the sequenced accident loads. The DG is considered to be in ready to load status when the DG is at rated speed and voltage, the output breaker is open, the automatic load sequencer is reset, and the DG controls are returned to "Unit".

During the peri-0d when the DG is paralleled to the grid, it must be considered le. This is because the load shedding circuits, which are actuated by bus undervoltage relays and which must function to initiate automatic aJO() ng, are blocked when the DG breaker is closed. This load shed block

~., assures that a spurious undervoltage will not cause load shedding while a DG is the sole source for accident loads, but it prevents automatic DG actuation while the DG i.s paralleled to the grid.

The Frequency of I8 months is consistent with the recommendations of RG I.9.

This SR is mod.i fi ed by a Note. The reason for the Note is that performing the Surveillance woultl remove a required offsite circuit from service, perturb the electrical distribution system, and challenge safety systems. However, credit may be taken for unplanned events that satisfy this SR.

SR 4.7.I.I2 (Sequencer timing check}

If power is lost to bus IC or ID, loads are sequenti~lly connected to the bus by the automatic load sequencer. The sequencing logic controls the permissive and starting signals to motor breakers to prevent overloading of the DGs by concurrent motor starting currents. The 0.3 second load sequence time interval tolerance ensures that sufficient time exists for the DG to restore frequency and voltage prior to applying the next load and ensures that safety analysis assumptions regarding ESF equipment time delays are met. Logic Drawing E-17 Sheet 4 provides a summary of the automatic loading of safety related buses.

PALISADES 8 3.7.I-17 Amendment No:

1'

\.

~C Sources - Operating B 3.7.1 and 4.7.1 BASES This SR is modified by a Note. The reason for the Note is that performing the Surveillance would remove a required offsite circuit from service, perturb the electrical distribution system, and challenge safety systems. However, credit may be taken for unplanned events that satisfy this SR.

REFERENCES

1. 10 CFR 50, Appendix A, GDC 17

2. Regulatory Guide 1.93, December 1974

3. Generic Letter 84-15, July 2, 1984

4. 10 CFR 50, Appendix A, GDC 17

5. 10 CFR 50, Appendix A, GDC 18

6. Regulatory Guide 1.9, Rev. 3, July 1993

7. Regulatory Guide 1.137, Rev. 1, October 1979

.g., Ge:ner-+E-l!e*H"E!.,._g4=0+,-r+ay-3"l , t99'4-8 /f* ASME, Boiler and Pressure Vessel Code,Section XI

'1* KO. IEEE Standard 308-1978 lb.~ Palisades Logic Drawing E-17, Sheet 4 PALISADES B 3.7.1-19 Amendment No:

I.

BASES

*AC Sources - Shutdown B 3.7.2 and 4.7.2 SURVEILLANCE REQUIREMENTS SR 4.7.2.1 (Shutdown AC power surveillance)

SR 4.7.2.1 requires the SRs from LCO 3.7.1 that are necessary for ensuring the OPERABILITY of the AC sources in COLD SHUTDOWN and REFUELING SHUTDOWN.

The SRs from lCO 3.7.1 which are required are those which both support a feature required in COLD SHUTDOWN or REFUELING SHUTDOWN and~hich. be ~

performed.without effecting the OPERABILITY or reliability of th~uired sources.

With only one DG available, many tests cannot be performed since their performance would render that DG inoperable during the test. This is the case for tests which require DG loading: SRs 4.7.1.3, 4.7.1.7, 4.7.1.8, 4.7.1.9, 4.7.1.10, 4.7.1.11, 4.7.1.12, and 4.7.1.13.

REFERENCES None PALISADES B 3.7.2-4 Amendment No.

\' *'

BASES

~sel Fuel and Lube Oil B 3.7.3 and 4.7.3 3.7.3.C.l Diesel fuel oil with viscosity, or water and sediment out of limits is

~nacceptable for even short term DG operation. Viscosity is important primarily because of its effect on the handling of the fuel by the pump and inj.ector system; water and*sediment provides an indication of fuel contamination. When the fuel oil stored in the Fuel Oil Storage Tank is determined to be out of viscosity, or water and sediment limits, the DGs must be declared inoperable, immediately.

3.7.3.D.1 With the stored fuel oil properties, other than viscosity or water and sediment, defined in the Fuel oil Testing Program not within the required limits, but acceptable for short term DG operation, a period of 30 days is allowed for restoring the stored fuel oil properties. The most likely cause of stored fuel oil becoming out of limits is the addition of new fuel oil with properties that do not meet all of the limits. This 30 day period provides sufficient time to determine if new fuel oil, when mixed with stored fuel oil, will produce an acceptable mixture, or if other methods to restore the stored fuel oil properties are required. This restoration may involve feed and bleed procedures, filtering, or combinations of these procedures. Even if a DG start and load was required during this time interval and the fuel oil properties were outside limits, there is a high likelihood that the DG would still be capable of performing its intended function.

3.7.3.E.1 With a Required Action and associated Completion Time not met, or with diesel fuel oil or lube oil not within limits for reasons other than addressed by Conditions A through D, the associated DG may be incapable of performing its intended function and must be immediately declared inoperable.

SURVEILLANCE REQUIREMENTS SR 4.7.3.1 (Fuel oil quantity check)

This SR provides verification that there is an adequate inventory of fuel oil in the storage tank to support either DG's operation for 7 days at full post-accident load. The 7 day period is sufficient time to place the plant in a safe shutdown condition and to bring in replenishment fuel from an offsite location.

The 24 hour2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months Frequency is specified to ensure that a sufficient supply of fuel oil is available, since the Fuel Oil Storage Tank is the fuel oil supply for the diesel fire pumps, heating boilers, and rad waste evaporators, in addition to the DGs. -SR 4 .7, a. 9 ( Lcrt>e ai I quan t; 1iy s~e&I<)

PALISADES B 3.7.3-3 Amendment No.

\' 1' BASES

~sel Fuel and Lube Oil B 3.7.3 and 4.7.3

$'( &/, 'J. ), 't 6. u '3'1. 0t C.. & U f+fli/ T' I 1'"/ ,_/'IC.")

C This Surveillance ensures that sufficient lube oil inventory is available to support at least 7 days of full accident load operation for one DG. The 175 gallons requirement is based on an estimated consumption of 1 gallon per hour.

A 31 day Frequency is adequate to ensure that a sufficient lube oil supply is onsite, since DG starts and run times are closely monitored by the plant staff.

SR 4.7.3.3 (Fuel oil quality check)

The tests listed below are a means of determining whether new fuel oil and stored fuel oil are of the appropriate grade and have not been contaminated with substances that would have an immediate, detrimental impact on diesel engine combustion.

Testing for viscosity, specific gravity, and water and sediment is completed for fuel oil delivered to the plant prior to its being added to the Fuel Oil Storage Tank. Fuel oil which fails the test, but has not been added to the Fuel Oil Storage Tank does not imply failure of this SR and requires no specific action. If results from these tests are within acceptable limits, the fuel oil may be added to the storage tank without concern for contaminating the entire volume of fuel oil in the storage tank.

Fuel oil is tested for other of the parameters specified in ASTM 0975 in / "II accordance with the Fuel Oil Testing Program required by Specification i:8.1e¥ t..*~

Fuel oil determined to have one or more measured parameters, other than viscosity or water and sediment, outside acceptable limits will be evaluated for its effect on DG operation. Fuel oil which is determined to be acceptable for short term DG operation, but outside limits will be restored to within limits in accordance wit~ndition D.

PALISADES B 3.7.3-4 Amendment No.

~tteryB 3.7.6 Cell Parameters and 4.7.6 BASES SURVEILLANCE REQUIREMENTS SR 4.7.6.1 (Pilot cell checks)

This SR verifies that Category A battery cell parameters are consistent with IEEE-450, which recommends regular battery inspections (at least one per month) including voltage, specific gravity, and electrolyte temperature of pilot cells.

SR 4.7.6.2 (Temperature checks)

This Surveillance verification that the average temperature of representative cells is > 70°F is consistent with a recommendation of IEEE-450, which states that the temperature of electrolytes in representative cells should be determined on a quarterly basis. The monthly frequency specified is a feature of the initial Palisades license, and is the same as those other pilot cell tests specified in Surveillance 4.7.6.1.

Lower than normal temperatures act to inhibit or reduce battery capacity.

This SR ensures that the operating temperatures remain within an acceptable operating range. This limit is based on manufacturer recommendations.

SR 4.7.6.3 (Connected cell checks)

The quarterly inspection of specific gravity and voltage is consistent with the recommendations of IEEE-450.

Table 3.7.6-1 This table delineates the limits on electrolyte level, float voltage, and specific gravity for three different categories. Each category is discussed below.

Category A defines the fully charged parameter limit for each designated pilot cell in each battery. The cells selected as pilot cells are those whose temperature, voltage and specific gravity approximate the state of charge of the entire battery.

Category B defines the normal parameter limits for each connected cell. The term "connected cell" excludes any battery cell that may be jumpered out.

PALISADES B 3.7.6-3 Amendment No.

.' '\

BASES

~tteryB 3.7.6 Cell Parameters and 4.7.6 Footnote (a) allows for the normally observed level increase which occurs during sustained battery charging. Footnotes (b) and (c) to Table 3.7.6-1 are applicable to Category A, B, and C specific gravity. Footnote (b) to Table 3.7.6-1 requires the above mentioned correction for electrolyte level and temperature, with the exception that level correction is not required when battery charging current is < 2 amps on float charge. This current provides, in general, an indication of overall battery condition.

Footnote (c) to Table 3.7.6-1 allows the float charge current to be used as an alternate to specific gravity readings. A stabilized charger current is an acceptable alternative to specific gravity measurement for determining the state of charge. This phenomenon is discussed in IEEE-450.

REFERENCES

1. IEEE-450-1995

z. c: ~ 1") ~Tt.~~" B~Tfl't'/ /,.15r~,.. ,..Tloa.r rdt"-e1t11Tt,..J 11J~tevc; 6AI£ PALISADES B 3.7.6-5 Amendment No.

a.*"

~*'

BASES

*Inverters - Operating B 3.7.7 and 4.7.7 APPLICABILITY The i-nverters are required to be OPERABLE above COLD SHUTDOWN to ensure that redundant sources of Preferred AC power for instrumentation and control are available to support engineered safeguards equipment in the event of an accident or transient and for power operation, plant heatups and cooldowns, and shutdown operation.

Inverter requirements for COLD SHUTDOWN, REFUELING SHUTDOWN, and during movement of irradi.ated fuel assemblies are addressedA-CO 3.7.8, "Inverters - Shutdown". ,, '

~

ACTIONS 3.7.7.A.1 and A.2 With an inverter inoperable, its associated Preferred AC bus becomes inoperable until it is manually re-energized from the bypass regulator. An inoperable Preferred AC Bus is addressed in LCD 3.7.9.

Required Action A.I allows 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months to fix the inoperable inverter and return it to service. The .24 hour2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months limit is based upon engineering judgment, taking into consi~eration the time required to repair an inverter*and the additional risk to which the plant is exposed because of the inverter inoperability.

This has to be balanced against the risk of an immediate shutdown, along with the potential challenges to safety systems such a shutdown might entail.

3.7.7.B.1 and B.2 If the inoperable devices or components cannot be restored to OPERABLE status within the required Completion Time, the plant must be brought to an operating condition in which the LCD does not apply. To achieve this status, the plant must be brought to at least HOT SHUTDOWN within 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months and to COLD SHUTDOWN within 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months . The allowed Completion Times are reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.

PALISADES B 3.7.7-2 Amendment No.

---~-

A ,,,:"('AQM'INISTRATIVE CONTROLS.

6.8.4 (continued)

Environmental Monitoring Program

/y~~

A rogram shall be provided to monitor the r~}ation and radionuclides in environs of the plant. The prograr!l.fs*tlall provide (1) rep res tat i ve measurements of radi oactjN:l'ty in the highest potential exposure thways, and (2) verificatj;Oris of the accuracy of the effluent monitoring~ ogram and modeling ~f~nvironmental exposure pathways. The program shall ) be containe~i1i the ODCM, (2) conform to the guidance of Appendix I to O CFR 50,.,,,eahd ,,y (3) including the following:

Pf;'

1. Monitoring, samµ,>QJlg, analysis, and reporting of radiation and radi onuc 1 i des~.i;if" fh'~ environment in accordance with the methodo 1ogy and parameters in th~~-

2. A Lanqpc('(. Census to ensur~that changes in the use of areas at and be}!orfci the SITE BOUNDARY are'i~dent i fi.ed and that modifications to

~monitoring program are made if required by the results of this SUS' and

3. Participation in a Interlaboratory Cotn~arison Program to ensure that independent checks on the precision nd accuracy of the measurements of radioactive materials in e , ironmental sample matrices are performed as part of the qualit assurance program for environmental monitoring.

Fuel Oil Testing Program A fuel oil testing program to implement required testing of both new fuel oil and stored fuel oil shall be established. The program shall include sampling requirements, testing requirements, and acceptance criteria, based on the diesel manufacturer's specifications and applicable ASTM Standards. The program shall establish the following:

1. Acceptability of new fuel oil prior to addition to the Fuel Oil Storage Tank, and acceptability of fuel oil stored in the Fuel Oil Storage Tank, by determining that the fuel oil has the following properties within limits:

a) API gravity or an absolute specific gravity, b) Kinematic viscosity, and c) Water and sediment content.

2. Other properties of fuel oil stored in the Fuel Oil Storage Tank, specified by the diesel manufacturers or specified for grade 20 fuel oil in ASTM D 975, are within limits.

6-13 Amendment No. 3-6, -l-§4,

ML18067A600

Text

Navigation menu

Search