ML19247B346
| ML19247B346 | |
| Person / Time | |
|---|---|
| Issue date: | 07/31/1978 |
| From: | Office of Nuclear Reactor Regulation |
| To: | |
| References | |
| NUREG-0462, NUREG-462, NUDOCS 7908080380 | |
| Download: ML19247B346 (33) | |
Text
.
N U REG-0482 TECHNICAL REPORT ON OPERATING EXPERIENCE WITH BWR PRESSURE PELIEF SYSTEMS July 1978
- p. a,4 f,-
&, ~b,
8e380 ggo80 Office of Nuclear Reacter Regulation U. S. Nuclear Regulatory Commission u
501 241 i
l.
a-s.
Available from Naticnal Technical Information Service Springfield, Virginia 22161 Price:
Printed Copy $5.25, Microfiche $3.00 The price of this document for requesters outside of the North American Continent can be obtained from the National Technical Information Service.
a (.s I
( '/l 9
't 1
'l 3
tL L t.1 f
I
- t
NUREG 0462 TECHNICAL REPORT ON OPERATING EXPERIENCE WITH BWR PRESSURE RELIEF SYSTEMS Manuscript Completed: June 1978 Date Published: July 1978 501 243 Division of Operating Reactors Office of Nuclear Reactor Regulation U. S. Nuclear Regulatory Commis>, ion Washington D. C. 20555 i
TECHNICAL REPORT ON OPERATING EXPERIENCE WITH BOILING WATER REACTOR PRESSURE RELIEF SYSTEMS PAGE u
ABSTRACT i
1.0 DISCUSSION OF BWR PRESSURE RELIEF SYSTEMS 1
1.1 System Design Considerations 2
1.2 Valve Design Descriptions 6
2.0 OPERATING EXPERIENCE WITH BWR PRESSURE RELIEF SYSTEMS 9
2.1 Inadvertent Blowdown Events due to Pressure Relief 10 System Valve Malfunctions 2.1.1 SRV Malfunctions 11 2.1.2 PARV Malfunctions 12 2.2 Failures of Pressure Relier System Valves to 12 Open Properly 2.2.1 SRV Malfunctions 14 2.2.2 PARV Malfunctions 14 2.3 Potential Failures of Pressure Relief System Valves 15 to Open Properly 2.3.1 SRV Malfunctions 15 2.3.2 PARY Malfunctions 16 2.4 Experience Summary 17 3.0 EVALUATION OF INADVERTENT BLOWDOWN EVENTS DUE TO PRESSURE 18 RELIEF SYSTEM VALVE MALFUNCTIONS 3.1 Thermal Stress Considerations 18 3.1.1 Reactor Vessel Thermal Stress Considerations 19 3.1.2 Effects of Stress Cycles 20 G h 1, 20$
PAGE 24 Pressure Suppression Pool Dynarc.ic Loading 3.2 Considerations 25 3.2.1 Dynamic Loading Description a
26 3.2.2 Summary of Operating Experience 27 3.2.3 Ongoing Review Efforts 28 3.2.4 Conclusions 30 3.3 Radiological Considerations 31 3.4 Conclusion 33 EVALUATION OF EVENTS INVOLVING FAILURES OF PRESSUR 4.0 RELIEF SYSTEM VALVES TO OPEN PROPERLY 33 Primary System Overpressure Considerations 4.1 33 4.1.1 SRVs 35 4.1.2 PARVs 37 Automatic Depressurization System Operability 4.2 Considerations 37 4. 2.1 SRVs 38 4.2.2 PARVs 39 4.3 Conclusion 41 5.0 CORRECTIVE ACTIONS 44
6.0 CONCLUSION
50' 245 6
ABSTRACT The staff has conducted a review of operating experience with Boiling u
Water Reactor (BWR) pressure reliJf systems because of the number of unanticipated events with the power actuated relief valves and the safety /
relief valves utilized in these systems.
This experience includes (1) valves that failed to open properly, (2) valves that opened properly and f ailed to reseat, and (3) valves that inadvertently opened and failed to reseat.
This report describes the pressure relief systems utilized in operating BWR facilities, the operating experience involving failures of pressure relief system valves, the safety considerations associated with such failures, and possible corrective measures to reduce the likelihood of future failures.
F i
}))
246 a
1.0 DISCUSSION OF BWR PRESSURE RELIEF SYSTEMS A typical Boiling Water Reactor (BWR) manufactured by the Gcneral
~
Electric Comrany is schematically represented in Figure 1.
The heat generated oy the nuclear fuel is transferred to the coolant water which flows adjacent to the fuel elements.
The coolant is u
heated to boiling and the steam which results is ruuted via steam lines to the turbine generator where it is utilized to generate electrici ty.
BWRs may experience pressure transient a during operation as a result of a mismatch between the reactor power level and the electrical load demand. When the electrical load demand is less than the powpr gen-erated by the reactor (e.g., due to a sudden loss of electrical load), an increase in the pressure of the reactor coolant generally resul ts.
An increase in th eactor coolont pressure will reduce the voids (vapor bubbles resulting from boiling) in the core cooling water, thereby causing an increase in reactor power.* Therefore, pressure transients must be limited both to prevent damage or rupture of the reactor coolant pressure boundary (RCPB) due to excessive pres-sure and to prevent possible core damage due to excessive power.
- This occurs because BWR power is strongly affected by the presence of voids in the core cooling water; a reduction in voids results in more effective neutron moderation in the cooling water and an increased fission rate in the core.
IN O
-J.
- c. ~ i Le
1.1 System Design Considerations The BWR pressure relief system is designed to limit reactor pressure during normal operational transients and to prevent u
overpressurization of the RCPB under the most severe abnormal operational transient (e.g., closure of the main steamline isolation valves or f ast closure of the turbine stop valves at full power). These design functions are accomplished through the use of a plant-unique combination of safety valves (SVs),
power actuated relief valves (PARVs), and dual function safety /
relief valves (SRVs). As shown in Fiaure 2, these valves are installed in the horizontal section of the main steamlines in-side the containment drywell upstream of the first set of main steam isolation valves.* The design features of each of these three types of valves are described in Section 1.2 of this report.
The combiration of valves utilized in the pressure relief system of each operating BWR-2, BWR-3, and BWR-4** facility is pr esented in Table 1.
- The SVs utilized at Nine Mile Point Unit Wo.1 and at Oyster Creek are installed on the reactor vessel head.
- BWR-1 through BWR-6 are the product line designations for tre Boiling Water Reactor Nuclear Steam Supply Systems designed and supplied by the General Electric Company (GE). This report addresses operating experience with the pressure relief system valves utilized in BWR-2, BWR-3, and BWR-4 facilities. There are a few operating BWR facilities which pre-d, ate the BWR-2 product line; however, these facilities are not discussed herein because of their unique designs. Facilities of the BWR-5 and BWR-6 design have not yet been licensed for operation.1 2bb
. As shown in Table 1, the typical pressure relief system utilized in older cperating BWR facilities consists of (1) a large number of spring-loaded SVs which protect the RCPB n from overpressurization during the most severe abnormal operational transient, and (2) a smaller number of PARVs which supplement the SVs by relieving pressure surges asso-ciated with normal operational transients that might other-wise cause the higher setpoint SVs to actuate.* The relief capacity cf the SVs must be sufficient to limit the reactor coolant pres;ure during the most severe abnormal operational transient to less 1375 psig, which is 110% of the nominal 1250 psig RCPB design pressure, with sufficient margin to account for uncertainties in the design and operation of the facility and with certain conservative assumptions, including allowance of no credit for PARV operation.** Most SVs discharge directly to the containment drywell whereas the PARVs have been designed to discharge beneath the water level in the containment pressure suppression chamber (torus).
- The PARVs have a lower pressure setpoint (nominally 1130 psig) than the spring-loaded SVs (nominally 1225 psig).
- For RCPB overpressure protection, credit is only allowed for self-actuated pressure relief system valves.
E f.) I, 2hj u
Consequently, the relief capacity of the PARVs must be suf ficient to limit the reactor coolant pressure during normal operational transients so as to prevent SV dis-u charges. As shown in Table 1, the typical pressure relief system utilized in the newer operating BWR f acilities consists of dual function SRVs, either exclusively or in conjunction with a small number of SVs. The SRVs self-actuate on increased system pressure, have a nominal setpoint of 1100 psil, and are designed to discharge As a result. for beneath the water level in the torus. those facilities which utilize SRVs exclusively in their pres-sure relief systems, a single type of valve provides system overpressure protection both during nomal operational tran-The sients and during the most severe abnonnal transient. required relief capacity of the SRVs is based on limiting the reactor coolant pressure during the most severe abnomal opera-tinal transient to less than 110% of the RCPB design pressure with sufficient margin to account for uncertainties in the design and operation of the facility and with certain conserva-tive assumptions. 501 250 a
For those facilities which utilize a small number of SVs to supplement the SRVs, the total relief capacity of the SRVs and SVs must be sufficient to prevent overpressurization of the RCPB during the most severe abnormal transient. In addi-tion, the relief apacity of the SRVs must be sufficient to preclude SV discharge to the drywell during normal operational transients. In addition to the RCPB overpressure protectior, design fL ctions of the BWR pressure relief system, a specified number of the PARVs or SRVs utilized in the pressure relief system of each BWR facility are also used in the Automatic Depressurization System ( ADS), which is one of the Emergency Core Cooling Sy stems. In the event of certain postulated small break loss of coolant accidents (LOCAs),* the ADS is designed to reduce reactor coolant
- For certain sizes of postulated BWR pipe ruptures, the rate of fluid loss would exceed the normal makeup capability of the system but would not be rapid enough to cause the reduction of the system pressure necessary to permit the low pressure emergency core cooling systems to function when required.
In such a situation, operation of either the High Pressure Coolant Injection System (HPCI) or the ADS would be required to assure proper operation of the low pressure cooling systems. It should be noted that certain of the older operating BWR facilities do not have a qualified HPCI system and, therefore, rely on two redundant trains of ADS. 2
system pressure to permit the low pressure emergency core spray and/or low pressure coolant injection systems to func-tion. The ADS performs this design function by automatically a actuating certain pre-selected PARVs or SRVs following re-ceipt of specific signals from the protection system. 1.2 Valve Design Descriptions A typical spring-loaded SV is shown in Figure 3. In the event that the reactor coolant system pressure at the valve inlet reaches the valve setpoint, the pressure exerted on the valve disc is sufficient to overcome the spring pressure ard the valve will actuate. A typical PARV is shown in Figure 4. During normal plant operation, reactor coolant system steam pressur e enters the main volve through the Chamber A and passes upward around the di:;c guide in Chamber B. Steam a.,o enters Chamber C through a clearance space between the main valve disc and the disc guide. The main valve disc is held in the closed position by the steam pressure in Chamber C_ PARV actuation is accomplished by energizing the solenoid in the pilot valve assembly. When the solt.1oid is energized, the pilot valve opens and allows the steam in Chamber C to be vented to atmosphere through port F. The resulting differen-tial pressure on.he main valve disc causes it to open, thereby permitting steam to escape from Chamber B to the valve outlet. 501 252
The electrical control system for a PARY is designed to provide power to energize the pilot valve solcnoid in any one of the following ways: I a (1) When the reactor system pressure reaches the valve setpoint, a pressure sensing switch senses the increasing pressure, actuates, and signals the pilot valve solenoid to energize; (2) The reactor operator can manually open the valve, either for testing purposes or to relieve system pressure during a transient, by providing power to the pilot valve sole-noid through a switch on one of the control room panels; (3) If a PARV is utilized in the ADS and a postulated small br3ak LOCA occurs, a protection system signai will energize the pilot valve solenoid provided that certain plant conditions exist. The valve is designed to reseat when the solenoid is de-energize (, the pilot valve closes, and the steam pressure in the chamber beneath the main valve disc is restored. A typical SRV is shown in Figures 5, 6, and 7. Figures 5 and 6 depict the manner in which an SRV self-actuates; Figure 7 depicts the manner in which an SRV may be externally actuated. 5Ui 253 a
Self-actuation of an SRV is accomplished through a two-When reactor pressure reaches the valve stage pilot valve. setpoint pressure, the first stage pilot valve opens against the preset setpoint spring and allows steam pres-u sure to enter into the chamber above tt,e second stage piston. The second stage piston operates to open the second stage pilot valve which, in turn, opens a path for steam in the The chamber above the main valve piston to be exhausted. resulting differcntial pressure across the main valve pis-ton causes the SRY to open. External actuation of an SRV is accomplished throuch a When instrument air or nitrogen diaphragm type air operator. is admitted to the air operator chamber, the resultant differ-ential pressure across the diaphragm causes the air operator stem to stroke the second stage pilot valve disc which results in the opening of the main valve. The external control system for an SRV is designed to provide instrument air or nitrogen to the air operator by energizing a Electrical solenoid valve in the air or nitrogen supply line. power to energize the solenoid valve is provided either through a remote, manual actuation switch on one of the control room panels or through the ADS (for those SRVs which are part of that system.) 501 254 a U e ~ Y 2.0 OPERATING EXPERIENCE WITH BWR PRESSURE RELIEF SYSTEMS Over 100 reactor years of BWR operating experience have been accum-ulated since the first commercial operation of a BWR. This exper-ience includes a number of malfunctions' of the valves utilized in the BWR pressare relief systems. These malfunctions can be characterized by the following subsets: (1) f ailures of a valve to open properly on demand, (2) spurious opening of a valve with subsequent failure of the valve to properly reseat, and (3) proper opening of a valve with subsequent failure of the valve to properly reseat. The failure of a pressure relief system valve to open on demand results in a decrease in the total available pressure relieving capacity of the system. In addition, if the failed valve also serves as part of the ADS, a degradation of the capability of the ADS to perform its design function could result. Spurious openings of pressure relief system valves or failures of valves to properly reseat af ter opening can result in unnecessary thermal transients on the reactor vessel and the vessel internals, unnecessary hydrodynamic loading of the containment system's pressure suppres-'on chamber (torus) and its internal components, and potential increase: the release of radioactivity to the environs. Operating experience related to (1) failure of pressure relief system valves to open and (2) inadvartent reactor coolant system blowdown 50? 'cc isa n
. events due to spurious valve openings or failures of valves to properly reseat af ter opening is discussed below. These discus-sions are based on reported failures of either the PARVs or the SRVs utilized in BWR-2, BWR-J, and BWR-4 facilities. Operating experience with the spring-loaded SVs has been essentially failure free. The operating experience discussed in this report is based upon Licensee Event Reports submitted to the NRC during the period from 1969 through April 1978 and upon information obtained from General Electric Company (GE), valve manufacturers, and licensees of operating BWR f acilities. While it is recognized that the operating exper-ience information presented in this report may not be all inclusive, we believe that it is sufficiently complete and representative of operating experience to date for the purpose of this renort. 2.1 Inadvertent Blowdown Events Due to Pressure Relief System Valve Mal func tions As shown in Table 2, t;.w e have been a total of 53 inadvertent blowdown events due to pressure elief system valve malfunctions which have been reported from 1969 through April 1978. These avents have varied in severity from a very short duration pres-sure transient to a rapid depressurization and cooldown of the primary coolant system from approximately 1100 psig (normal operating pressure is approximately 1000 psig) to a few hundred psig. During more than one-third of these events, the maximum , L 65 [ i )C c. J C' v. allowable primary system cocidown rate (100*F per hour) per-I mitted by the facility Technical Specifications was exceeded. 2.1.1 SRV Malfunctions i Forty-nine of the inadvertent blowdown events have re-sulted from 2 malfunct-of an SRV. Of these events, (a) twenty-five events involved the spurious opening of a valve with subsequent f ailure to properly reseat, (b) twelve events involved the proper opening of a valve during a pressure transient with subsequent failure to properly reseat, (c) eleven events involved the proper opening of a valve (manually) during in-plant testing with subsequent failure to properly reseat, and (d) one event involved the inadvertent actuation of the SRVs used in the ADS during required surveillance testing. The majority of the inadvertent blowdown events due to SRV malfunctions have been attributed to failures in the two-stage pilot valve section. Erosion of the first-stage pilot valve seat, which results in the leakage of steam into the second-stage actuating chamber and subse-quent actuation of the main valve, has been the primary cause of the valve failures. (This same leakage path acts to prevent the proper reseating of the valve once it has opened). Accumulation of foreign material (dirt, A 9 t[ 7 5 r ) (. J IP rust) in the pilot valve section and mechanical failure of pilot va've section internal parts have been the causes of a lesser number of the valve b failures. 2.1.2 PARV Malfunctions Four of the inadvertent blowdown events have resulted from a c31 function of a PARV. Of these events, (a) three events involved the proper opening of a valve during a pressure transient with subsequent failure to properly reseat, and (b) one event involved the proor-opening of a valse (manually) during in-plant testi a These with a subsequent f ailure to properly reseat. failures have been attributed to mechanical damage to the main valve internals (e.g., scored valve rings), buildup of foreign material on the pilot valve seat, and steam erosion of the pilot valve seat. F_ailures of Pressure Relief System Valv's to Open Properly 2.2 As shown in Table 3, there have been a u,tal of twenty-seven events involving the failure of pressure relief system valves to open properly on demand which have been reported from 1969 thrcugh April 1978. Of these twenty-seven operational events, twenty events involved f ailures of pressure relief system valves to open during in-plant 501 258 testing (usually during reactor e+artup) and the remaining seven events involved the failure of a valve to open properly during a pressure transient. None of these events resulted in u RCPB overpressurization. The failure of more than one valve during a single pressure transient event occurred only on one occasion when four of eleven SRVs failed to open during a pressure transient following a reactor scram; however, in that instance, the pressure rise peaked at 1120 psig and no system damage resulted. Only one of these events involved a major degradation of the ADS. In that event. three of the four SRVs utilized in the ADS were determined to be inoperable due to the common mode failure of the air actuator diaphragm due to overheating. The over-heating had been the result of improper installation of insula-tion on the valve.* Although this event resulted in a major degradation of the ADS for the affected facility, the diverse HPCI system was operable and capable of providing emergency core cool'ng protection in the etent of a postulated small break LOCA.
- As a result of this event, the NRC took positive action via an 01&E Bulle-tin (Bulletin 76-06, " Diaphragm Failures in Air'0perated Auxiliary Actua-tors for Safety / Relief Valves," July 21, 1976) to ensure that other 11cen-sees inspected their SRVs to determine that a similar condition did not exist.
As a result of this NRC action, e similar problem with SRV diaphragms was detected at another facility. This second occurrence involved the deter-ioration (delamination) of the diaphragms for 9 of the 11 SRVs. Although it is believed that the deterioration had not yet progressed to the point where the valves would have f ailed to function on demand, for the purposes of this report we have included this event as a " potential fail toopey3Si properly.
I. 2.2.1 SRV Malfunction Eleven of the twenty-seven events involved the fail-ure of an SRV to open properly. Six of these failures occurred during a pressure transient event (five in the F r self-actuating mode of valve operation); the remaining The five five f ailures occurred during in-plant testing. l failures which have occurred in the self-actuated mode of valve operation have primarily been attributed to leakage in the bellows setpoint assembly of the first stage pilot valve. The six f ailures which have occurred in the externally actuated mode of valve opera-tion have been attributed to degradation of the air / e nitrogen actuator diaphragm or failures in the air / nitrogen 4 supply system (e.g., valves misaligned, solenoid valve I failures). 1 l 2.2.2 PARV Maifunctions Sixteen of the twenty-seven events involved the failure of a PARV to open properly. Fifteen of these failures occurred during in-plant valve testing; one f ailure-occurred during a pressure transient event. The majority " of these failures have been attributed to improper align-ment or adjustment of the pilot valve mechanism which Loose parts or prevented the opening of the pilot valve. leaking seal rings in the main valve section have been the causes of a lesser number of these valve failures. 501 260
. 2.3 Potential Failures of Pressure Relief System Valves to Open Properly As shown in Table 4, there have been seventeen instances where pressure relief system valves were determined to be in a condition in which they would have failed to open properly had they been required to do so. 2.3.1 SRV Malfunctions Sixteen of the seventeen potential failure-to-open events involved SRVs. Twelve of these events involved leakage or suspected leakage
- in the bellows setpoint assembly of the first stage p'let valve.
All but one of the bellows leakage failures ocurred during plant operation and were detected by the bellows leakage detection system. Three of these eleven opera-tional events involved the occurrence of bellows leakage alarms on two SRVs simultaneously. In these instances, the affected facilities wt e shut down immediately to inves-tigate and resolve the orcblem. The single remaining bellows leakage event occurred during bench testing of the SRVs while the affected facility was shut down. In this instance, three SRVs were found to have leaking bellows assemblies. The defective valves were repaired P prior to the resumption of power operation.
- In several instances, bellows leakage alarms which were receivec an the leak fafiuk of 55e'$eYio0s bhessN!e*s0! EON.
ave been caused by an electrical 501 26i
. Two of the remaining four SRV-related potential f ailure-to-open events involved electrical problems (e.g., air supply solenoid electrically grounded) l which affected only one SRV. The third event, j which occurred during bench testing of the SRVs f while the af fected f acility was shut down, involved i the f ailure of all six of the SRVs utilized in the i 1 pressure relief system to open at the required setpoint Two valves opened at an elevated pressure 4 pressure. and four valves f ailed to open at all. These valves j were of a unique design and were subsequently replaced 3 with the type of SRV utilized in other operating BWR f acili ties. The fourth event, which also occurred while the affectr.c facility was shut down, involved the deterioration (delamination) of the air actuator diaphragms for 9 of the 11 SRVs. The degraded diaphragms were replaced prior to the resumption of g power operation.* w 2.3.2 PARVs 4 The only PARV-related potential failure-to-open event 1 involved the f ailure of an electrical actuating switch
- 0f the sixteen SRV-related potential failure-to-open events, this event
~ is the only one which involved a potential major degradation of the ADS. 1 Sn1 262 j i ~ a in the ADS. This failure rendered three of the six ADS valves inoperable; however, the remaining three valves would have adequately performed the design function of the ADS if a postulated small break LOCA a. had occurred. 2.4 Experience Summary Table 5 summarizes the operot'v experience with SRVs and PARVs. 501 263 u i I
'~
3.0 EVAG'ATION OF ISADVERTENT BLOWDOWN EVENTS DUE TO PRESSURE RELIEF p h VALVE MALFUNCTIONS Safety considerations related to inadvertent pressure relief system blowdown events include: (T) the imposition of unnecessary or exces-v sive thermal stresses on the reactor vessel and on the vessel internals, (2) the imposition of unnecessary hydrodynamic loads on the torus and its internal components, and (3) potential increases in the release of radioactive material to the environs. Each of these considerations is discussed in the following sections. 3.1 Thermal Stress Considerations During an inadvertent pressure relief system blowdown event, the reactor coolant temperature will drop due to one or more of the following: (1) the release of energy through the open valve (s), (2) a rapid decrease in reactor heat generating capacity (reactor scram)*, and (3) the addition of cold feedwater or makeup water to maintain reactor coolant inventory. This drop in reactor coolant j I temperature will, in turn, induce a thermal transient on the reactor vessel and the vessel internals. i The reactor vessel wall will cool down at a rate determined mainly i by its mass and the magnitude of the reactor coolant thermal } t"
- 1f the reactor is initially operating at high power, the inadvertent opening of c oressure relief system valve may cause a scram on high power, or the
-j reactor may scram on low pressure. A turbine trip would also occur which f l would remove the plant load. E () l. 2bk o 3 d H n$ In transient. Since only the vessel inside wall is directly exposed to the reactor coolant, the temperature of the outer wall will lag behind the temperature of the inner wall. Themal stresses due to the dif ferential temperature across the vessel wall will result. The significance of these themal stresses is discussed in Section 3.1.1. Unlike the reactor vessel, the vessel 'ernals are immersed in the reactor coolant and will be unifonnly cooled throughout the temperature transient. The vessal internals are also thinner and less massive than the vessel wall, so their temperature more closely follows the coolant temperature. Since the vessel inter-nals do not develop significant temperature gradients during pressure relief system blowdown events, the thermal stresses developed in the vessel internals during an inadvertent pressure relief system blowdown event are not of significant concern. 3.1.1 Reactor Vessel Thermal Stress Considerations In addition to assuring that the reactor vessel can accom-modate, with sufficient safety margin, the maxin.um stress loadings anticipated to occur, vessels are also designed for fatigue considerations. ~ ) y) u' u u As part of the design procedures for a reactor vessel, a specific number of stress cycles of various These correspond to occur. magnitudes are postulateo 3 to the many operational events which are likely to occur during the anticipated 40 year life of the vessel. A listing of the various types of stress cycles, utilized in the design of the reactor vessel for an older operating BWR facility, including the number of times each is postu-lated to occur during the life of the vessel, is shown in In the case described, two pressure relief system Table 6. For newer BWR valve blowdown events were postulated. f acilities, about eight such events have been postulated to occur during the life of the vessel. inadvertent pressure relief As discussed in Section 2.1, system blowdown events have occurred more frequently tha originally anticipated during the design of most operating The staff has evaluated the response of BWR facilities these older vessels to more than the design number of stress cycles associated with pressure relief system blowdown e events. Effects cf Stress Cycles 3.1.2 When the reactor coolant system is heated and pressurized during a normal startup operation, the vessel is subjected 501 266 q A to stresses due to the change in ve u el internal p pressure and due to the transient effects of unequal temperatures in the various regions of the vessel. The magnitudes of these stresses are kept within allowable bounds by proper design and operation. When the system is depressurized and cooled down, these stresses are removed and a stress cycle has been completed. When a number of design stress cycles of a specifc type are postulated to occur during the life of a reactor vessel, it does not imply that the vessel will fail if that number is exceeded, rather it 's a way of incorporating an estimate of the number of such cycles the vessel will experience into the vessel design considerations. After estimating the number of all the various anticipated stress cycles, the designer quar,tifies the combined fatigue effect on the vessel. This is accomplished in accordance i with procedures specified by the ASME design codes. 1 The fractional amount that each stre~ss cycle fatigues the i vessel is known as a usage factor. The usage factors for each type of stress cycle are multiplied by the number of cycles of each type which are postulated to occur and are summed for each of the various regions of the reactor vessel. The resultant total usage factor must be less than n u 5 0,t N< I 't unity for each region of the vessel, where unity The is the design limit specified by the code. I total usage factor, not the usage factor associated with a particiar stress cycle, is used as the main indicator of vessel fatigue strength. Usually, vessels are designed with the total of the individual usage f actors equal to less than unity because it is recog-nized that the numbe; of cycles of each type that will occur during the life of the vessel cannot be accurately predicted. ( A typical design total usage factor is 0.5). In addition, stresses per cycle are calculated in a con-There is additional margin to failure servative manner. because the ASME code limit is itself conservative (it contains a margin of a factor of 2 on st'ress or 20 on the number of cycles, whichever is controlling). Should the ultimate f atigue limit (without all the safety f actors) be reached during the life of a vessel, it is generally believed that the result would not be immediate vessel Such failure but probably the onset of f atigue cracking. shallow cracking would probably not be serious unless the cracks were allowed to grow longer and deeper over a period of years. Cyclic stresses of concern during an inadvertent pressure relief system blowdown event are caused by the cooling 50! 268 of the inner surface of the vessel while the bulk of the vessel wall remains at a higher temperature. This differential temperature results in thermal stresses in the wall because the inner surface tries to contract or snrink relative to the outer surface. The stress magnitude is proportional to the tempera-ture difference and is normally kept low by li'miting the total water temperature change or by limiting the rate of temperature change. At a typical Technical Specification cooldown limit of 100*F/ hour, the thermal stresses are well within allowable limits. For many of the reported inadvertent pressure relief system blow-down events, either the cooldown rate was less than 100 F/ hour or 'the total temperature change was not significant. These particular events are not of safety significance because the resulting thermal stresses were quite low. Because some of the inadvertent pressure relief system blowdown events resulted in faster than normal cooldown rates over a significant temperature range, the staff performed an analysis of a hypothetical worst case eveat. 7 v 501 ?69 h., The resulting usage f actor for such a postulated worst case event was determined to be less than 0.001. By comparison, the usage factor per pressure relief b system blowdown event based on more realistic assump-tiens is about 0.0001, which is of the same order as the usage factor due to a typical startup-shutdown cycle. Assuming that the average blowdown event tas a f actor of 0.0001 and that 100 such events occur during the life of the vessel, the total usage factor would be increased by only 0.01 as a result of inadver-tent blowdown events. Thus, it is concluded that these BWR pressure relief system blowdown events are not likely to significantly affect the reactor vessel fatigue life even if they were to continue to occur at a frequency even greater than that indicated by opercting experience. 3.2 Pressure Suppression Pool Dynamic Lotding Considerations The steam discharge from an SRV or a LARV is routed through piping from the drywell to the suppression pool (Figure 8). There, the steam is condensed and the energy is absorbed by the water in the suppression pool. Prior to relief valve actuation, the discharge piping between the relief valve and P [)O k
. the suppression pool is filled with air and the discharge piping below the surface of the suppression pool is filled with water. 3.2.1 Dynamic Loading Description During relief valve actuation, high pressure steam corr.- presses the air column and accelerates the water leg in the submerged section of the discharge line. When the water leg has been discharged, the compressed air is released into the pool. The air bubble expands in the pool causing a short duration, high pressure load on the suppression chamber (torus) structures and components. In addition, the momentum of the displaced pool water causes the air bubble to over expand and contract and subsequently collapse, causing vibratory loads on the torus structures and c on,. ents. The steam subsequently discharged into the suppres-sion pool causes low amplitude pressure oscillations on the torus structures and comporients which continue for the remainder of the blowdown event. In addition to the above-mentioned loads, the high mass flow rates through the discharge liner create reaction forces on the discharge line piping supports, and the pool motion induced by the discharge flow causes I drag loads on the structures and components located within l the pool. 501 2'1 l l As the steam discharge continues, the temperature of the ;uppression pool will rise as the energy of the i steam is absorbed by the pool. At a point referred to as th? " threshold temperature", the steam condensation process would become unstable and the pressure oscilla-tion loads could increase by a factor of ten or more. This effect is referred to as the steam quenching vibra-The threshold temperature for this tion phenomenon. phenomenor; is a function of the discharge mass flow rate and is considered to occur wher, the bulk pool temperature is approximately 150*F to 170*F. 3.2.2 Summary of operating Experience A large number of pressure relief system actuations have occurred in both domestic and foreign BWR f acilities. In a number of cases, typically early in the life of a given facility, localized damage to tne discharge line restraints in the suppressic, pool and to the suppression pool baffles has occurred. The cause of this localized damage has been attributed to tne reaction loads and to the pressure forces generated during the discharge of the air bubble. In these cases, the affected structures were repaired or modified such that additional structural capacity was provided. In no case did '.his localized damage result in a loss of containment function or a release of radioactivity. ~~~ ta g. 4 i In an event in April 1972 at a foreign BWR facility, ~ significant steam quenching vibrations were encountered when the pool temperature was in excess of 160 F. These vibrations caused the suppression pool liner to separate a from reinforcing beams in the bottom of the structure. However, this facility utilized a straight pipe relief valve discharge device, while domestic facilities typically utilize a split (e.g., ramshead) discharge device. The ramshead device is considered to have a relatively higher threshold temperature. At least one relief valve discharge event has occurred in a domestic facility where the suppres-sion pool temperature exceeded 160 F, with no visible evidence of damage to the suppressicn chamber.* 3.2.3 Ongoing Review Ef fo, ts In response to the concerns relating to relief valve loads, letters were sent in 1975 to all licensees of operating BWR plants requestirg that they report on the potential magni-tude of relief valve loads and on the structural capability of the suppression chamber and internal structures to
- Current practice for domestic BWR plants is to restrict the maximum allowable bulk suppression pool temperature to limits specified in the facility Techni-cal Specifications for specific plant operating modes, such ; hat the threshold temperature would not be reached.
Further, plant operating procedures include specific provisions to minimize the potential for exceeding the threshold temperature. 501 273 tolerate such loads. In addition, the consideration of relief valve loads has become an integral part of the staff's review of construction permit and operating license applications for all BWR pressure suppression t containment designs (i.e., Mark 1, II, and 111). As a result of generic suppression pool hydrodynamic conc, erns, Owners Groups were formed by utilities.with plants utilizing the Mark I and Mark 11 containment designs. Through these Groups, generic, analytical and experimental prograns have been developed to address relief valve loads. For the operating facilities, the relief valve related tasks of the Mark I containment Long Term Program (LTP) are intended to improve the quantifica-tion of relief valve loads, to confirm the suppression chamber structural margins, and to confirm the adequacy of the suppression pool temperature limits. l r 3.2.4 Conclusions The staff believes that there is no immediate (i.e., short term) potential hazard for the major containment structures from the vibratory loads associated with relief valve opera-tion due to the slowly progressive nature of the material fatigue mode of failure associated with cyclic loadings. Based upon the test results and analyses repor ed by the -. i
i . Gereral Electric Company in " Steam Vent Clearing Phenomena and Structural Response of the BWR Torus," NEDO 10859, April 1973, substantial fatique life margin is available in the torus structure to accommo-date the potential relief vai'e actuations that may occur during the conduct of the LTP. The Mark I Owners Group has recently performed additional in-plant tests at the Monticello facility to identify and quantify the stresses in the torus structures associated with relief valve operation. The need for structural modifications to provide conservative margins tc assure structural integrity throughout the life of these facilities ~ill be l determined during the LTP. This part of the LTP, currently scheduled for completion in early 1979, will permit ~ necessary modifications to be instituted before any more than a small fraction of the fatigue life predicted by the GE analysis has been utilized. We are continuing our review of this matter and will take appropriate action should this program fail to resolve our concerns on an acceptable ( schedule. k P 4 r i H Y
. 3.3 Radiologica' Considerations P As discussed previously, depressurization of the reactor system via SRVs or PARVs is accomplished by transferring steam from the reactor vessel to the torus. Since the steam p contains radioactive gases and some non-gaseous (soluble and particulate) radioactive isotopes which are entrapped in small amounts of water which aay be swept along with the steam (called carryover), a small fraction of the primary coolant radioactivity inventory can be transferred to the torus along with the steam. The staff has been evaluating the increased liquid and airborne radioactivity concentrations in the torus from this process and has generally concluded that they are not significant for the following reasons: 1. Most (generally more than 991) of the soluble and part'culate radioactivity remains in the reactor coolant water and thus stays in the reactor vessel. That which is carried over into the torus is diluted by at least a factor of 20 in the suppres-sion pool water. 2. The increased radioactivity in the suppression pool water can be removed by conventional reactor water treatment systems, for example, the condensate polishing system. 3. Gaseous radioactivity in the steam will be released to the air space in the tores. This gaseous activity is basically 501 276 no different than that which would have been transferred to the condenser air ejector and offgas system during normal operation and normal shutdown. Even thcugh there may be increases in radioactivity concentrations within the torus, b it is not expected that there will be sigaificant increases in the radioactive effluents to tne environment since the torus is part of the primary containment and is basically sealed from the environment. Generally, the torus air space is not vented to the environment, but it can be vented if per-sonnel access is required. If this is necessary, the gaseous radioactivity will have beer. decayed and will be vented to the environment through charcoal and particulate filters such that radioactive effluents should be less than that which is speci-fied in the facility Technical Specifications. Consequently, we have concluded that a blowdown via the SRVs or PARVs does not have a significant impact on the environment appreci-ably different than that encountered during normal reactor shutdown. 3.4 Conclusion The inadvertent blowdown events which have occurred to date as a result of pressure relief system valve malfunctions have neither significantly affected the structural integrity or capability of the reactor Yessel, the reactor vessel internals, or the pressure-suppression containment system nor resulted in any significant radiation releases to the environment. l 501 277 u 9 e J
. The staf f has concluded that s::ch events, even if they were to occur at a more frequent rate than that indicated by operating experience, would not likely have any significant effects on the reactor vessel or the vessel internals. The staff has also concluded that pressure relief valve blow-down events will not result in offsite radiological conse-quences appreciably different from hose encountered during a normal reactor shutdown. With respect to the pressure-wooression containment system, due to the slowly progressive nature of the material fatigue mode of f ailure associated with the dynamic loading conditions resulting from pressure relief valve blowdown events and due to the substantial fatigue life margin currently available in the affected structures, the staff has concluded that additional short term actions ore not required to assure that the integrity and The staff functional capability of the system will be maintained. has also determined that the currently ongoing programs to provide additional containment system structural safety margins for the long term (i.e., the anticipated 40 year lifetime of BWR f acilities) are acceptable. I 501 278 e
4.0 EVALUATION OF EVENTS INVOLVING FAILURES OF PRESS.lRE RELIEF SYSTEM VALVES TO OPEN PROPERLY The safety considerations related to the failure of a prece"r;.elief valve to open properly include the potential degradation of the over-pressurization protection provided for the reactor vessel and the primary coolant system, and the continued capability of the ADS to function as designed to mitigate the consequences of a postulated LOCA. Each of these considerations is addressed below. 4.1 Primary System Overpressure Considerations 4.1.1 SRVs Since the self-actuation mode of a SRV provides the auto-matic overpressure protection for facilities in which such valves are installed, only failures to open in the self-actuation mode of operation need be examined. The majority of the SRV failure or potential failure to open events (self-actuation mode) have been attributed to bellows assembly leakage. Since the bellows assembly of each SRV is continuously monitored for leakage, the likelihood of such failures occurring without being detected is low. Upon I?tection of a leaking SRV bellows assembly, appropriate operator action is required.* r
- Since an additional SRV (beyond that which is taken credit for in the plant overpressure protection analysis) is installed in most operating facilities, plant shutdown usu !1' would not be required unless bellows leakage was detected on two valves.
501 279
. During each refueling outage a specified percentage of the installed SRVs are required to be bench-tested to verify their operability in the self-actuated mode. The percentage of valves that are required to be tested ranges from 20t to 501 based on plant unique considera-tions; however, during the past few years most licensees b:ve elected to test more than the minimum required number of valves. As discussed in Section 2.2, operating experience includes i five SRV failure-to-open events during pressure transients where the failure occurred in the self-actuation mode. Of these, only one event involved the failure of more than one j valve. The peak primary coolant pressure resulting froia f e any of these events was 1140 psig which is well within the I l reactor coolant pressure boundary design pressure (i250 psig). l As discus:ed in Section 2.3, operating experience includes thirteen potdntial failure-to-open events involving the self-actuation mode of operation of an SRV. Of these, only one event, which was detected during bench testing while the j i affected facility was shutdown, involved the potential for i system overpressure. The valves involved in this event I were of a unique design and were replaced prior to resump- .j tion of power operation. "l'O' E 50\\ u H ( 4
. In summary, based on the demonstrated performance and established surveillance programs for SRVs, the staff has determined that they provide reliable overpressure l protection for the RCPB. u 4.1.2 PARVs. With respect to the PARV failure-to-open events, it should be noted that credit is not given for the relieving capacity of these valves in the overpressure analysis for the f acili ty. As discussed in Section 1.1, the design of the PARVs is based on establishing an adequate pressure relieving capacity to avoid opening of the SVs during normal operational events. Operating experience indicates that in only one case have more than two PARVs been in a condicion where they would have failed to open during a pressure transient at a given time. Even in this case, it is not likely that SV actuation would have been required in the event of a pressure transient. However, in the event that SV actuation would be required to avoid an overpressurization event, the radiological conse-quences of such an actuation, as discussed below, are not significant. f sw w u 1 I
When SV blowdown occurs, the steam is transferred first The amount of radio-to the torus. to the drywell and thence activity transferred to the drywell is similar to that i transferred to the torus during a relief valve blowdown. This results in increased airborne radioactivity concen-As the steam condenses into trations in the drywell. water, it will wasn the soluble and particulate radio-The torus water could then activity down into the torus. be processed through a treatment system to remrve soluble radi oactivity. There would also be increased airoorne concentrations of noble gases and some radiciodines within the drywell. Even though the drywell aiborne concentrations would be increased by this event, this is not expected to lead to t, The dry-significant increases in radioactive effluents. well is part of the primary containment system and is Most of the radioactivity isolated from the environment. should be of short half life such that, if necessary, the drywell need not be purged until most of the radioactivity In addition, charcoal has decayed to acceptable levels. and particulate filters (the Standby Gas Treatment System) can be used to filter any leakage or ventilation exhaust ( The use of these filters, coupled with f rom the drywell. N! }@} i t h
-?7-sampling of the drywell atmosphere and the technical specification requirements related to radioactive effluent releases, provide adequate assurance that SV blowdown would not have any impact on the environment appreciably different than that encountered during normal reactor shutdown. 4.2 Automatic Depressurization System Operability Considerations 4.2.1 SRVs As discussed previously a specified number of SRVs are utilized in the externally actuated mode as part of the f acili ty's ADS. Consequently, only failures to open in the externally-actuated mode of SRV operation need be considered. As discussed in Section 2.2, operating experience includes six events where SRVs have failed to open in the externally-actuated mode of operation. Of these, only one event involved more than one valve in the ADS.* In that event, three of the four ADS valves were determined to be inoperable due to the common mode failure of the air actuator diaphragm due to overheating. The overheating had been the result of improper installation of insulation on the valve. Al though this event resulted in a major degradation on the ADS, the diverse PCI system was available to provide protection in the event of a postulated small break LOCA. 501 783
- In general, the ADS will include a larger number of SRVs than that which is necessary to accomplish its cesign function.
At least one extra SRV is usually included. 2
As discussed in Section 2.3, operating experience includes one potential failure-te --.n event involving the externally-actuated mode of SRV operation. This event, which was discovered during maintenance while the af fected f acility was shut down, involved the deterioration of the air actt 3 tc-diaphragms for 9 of the 11 SRVs. It is believed that this deterioration had not yet progressed to the point where the val *ies would hcve failed to function on demand. f i In any event, the.liverse HPCI system was operable. i Based on the demonstrated performance and established surveil-t lance programs for SRVs used in the ADS, we conclude that such valves provide reliable protection against a postulated small break LOCA. The existence of a diverse HPCI system at most 1 i I operating BWR facilities f a ther enhances the reliability of k the protection provided against such an accident. I u 4.2.2 PARVs As discussed in Sections 2.2 and 2.3, operating experience includes a number of events where PARVs utilized in the ADS failed to open. Of these, only one constituted a significant degradation of the ADS. In that event, three of the six ADS valves were rendered inoperable by the failure of the e'ectri-cal actuating switch. However, the remaining three valves would have adequately performed the design function of the ADS in the event of a postulated small break LOCA. E, B.,1 'b 4 Other f ailures of PARVs have been limited to one or two valves, and, in a71 cases, either a sufficient number of valves were operable to perform the ADS u function and/or t'he diverse HPCI system was operable. 4.3 Conclusion The events involving failures of pressure relief system valves to open properly which have occurred to date have not resulted in a significant degradation of either the overpressurization protection provided for the reactor vessel and the primary coolant system or the protection provided for a postulated small break LOCA. Only a few of these events have involved the simultaneous failure of more than one pressure relief valve to open prop-erly. Although even in those instances the consequences were minimal, the staf f believes ti at such occurrences are undesirable and that appropriate actions should continue to be taken to assure that the high level of reliability of the overpressurization protection provided by the pressure relief system is maintained. Only two of these events have involved a significant degrada-tion of the capability of the ADS to perform its design function L [iG1 735
Although in ia the event of a postulated stall break LOCA. each of these instances adequate pro,tection capability was available either through the remaining operable ADS v 'ves e or the diverse HPCI system, the staf f belicves that suc.. events are undesirable and that appropriite actions should continue to ce taken to assure that the high level of relia-bility of the A05 is maintained. iIN e l l !J ()V\\ \\ .s;- 5.0 CORRECTIVE ACTIONS For some time licensees, manufacturers of pressure relief valves and GE have been working with the NRC to improve pressure relief u valve maintenance programs. In general, an increased number of pressure relief valves are periodically inspected, tested, and refurbished at operating BWRs. The reduction in the reported failure rate for pressure relief valves from approximately one fail-ure per 40,000 hours of operation in 1974 to one failure per 80,000 hours of operation in 1976 (a factor of 2 improvement) can, for the most part, be attributed to these improved maintenance programs. With respect to the reliability of SRVs, GE, working with the valve manufacturers, has developed a two-phase program to further improve reliability of the SRVs. A short term program has been initiated which involves minor modifications to the existing 3-stage SRV design and increases monitoring to detect valve leakage prior to inadvertent actuation. Since almost all the inadvertent blowdown events causer. by SRV malfunctions have occurred on valves which have had less than 100 psi of " simmer margin,"* this short arm effort is designed to increase the simmer margin of such valves. In order to increase the simmer margins at their facilities, several licensees have increased
- Simmer margin is the differentia pressure between normal system operating pressure and the SRV setpoint.
bb! ['] [ u n
the SRV setpoint pressure for their valves. In some cases this required a grinding out of the valve discharge " throat" diameter in order to assure adequate relieving capacity. u The long term program involves the development and installation of an improved self-actuation mechanism for the SRVs. The most significant changes incorporated in this new design are the elimina-tion of one of the pilot stages and the elimination of the bellows assembly. 'he new design is expected to irc 3ve the performince of the SRVs by eliminating failures of valves to open due to bellows leakage 2nd by eliminating spurious valve openin'gs due to leakage past the first stage pilot seat. This second improvement is accomplished by preventing such leakage from building up pressure on the actuating mechanism of the main valve. Valves of this new design have undergone a testing program which is currently under review by the NRC sts tf. The NRC also has under re-view applications to utilize valves of this r.ew design or two facilities. It is anticipated that licensees of other operating facilities will shift to this new design, as appropriate, in the future. With respect to NRC-initiated action, on several occasions the NRC t~ staff has sent IE Bulletins or Circulars to licensees of operating facilities informing them of particular problems with pressure relief me n valves. G {T 1, /OO b Q 4 In addition, the NRC staff has been considering revising facility Technical Specification requirements related to pressure relief valve inspection and t'esting. Some of the changes that the staff lu presently has under consideration are: (1) A variable frequency operational testing schedule based on the number of PARVs and SRVs that failed to open on Jamand since the last testing period. (2) Increased refurbishing and bench testing requirements for PARVs and SRVs that would vary as a function of the number of valves that are spuriously opened or opened and failed to reseat properly during a specified period. (3) Increased surveillance of the structural integrity of relief valve line restraints in the pressure suppression pool based on the frequency of relief valve actuation. One of the considerations as to whether or not to implement such Technical Specification requirements will be an assessment of con-tinuing operating experitnce with respect to pressure relief valve failures. i f n.o j> <u
?
6.0 CONCLUSION
As discussed in this report, the staff has concluded that the eveite involving BWR pressure relief system valve mal-u functions which have occurred to date have neither resulted in significant impact on the nuclear facility nor involved any significant radiation release to the environment. Although the events which have occurred to date have had only minimal consequences, the staf f believes that appropriate actions should continue to be taken to improve the reliability of the pressure relief system valvas and, thereby, to reduce the frequency of occurrence of such events. This belief is primarily based on the fact that such events involve a reduction in the original design safety margins provided for overpressurization events and for a postulated small break LOCA. n-l 50.7 og u
TABLE 1 VALVE COMPLEMENT BWR POWER-ACTUATED _ TYPE FACILITY SAFETY / RELIEF VALVES SAFETY VALVES RELIEF VALVES 2 Nine Mile Point 16 6 2 Oyster Creek 16 5 a 3 Dresden 2 1 8 4 3 Dre,sden 3 1 8 4 3 Millstone 1 6 3 Monticello 7 3 Pilgrim 1 4 2 3 Quad Cities 1 1 8 4 3 Quad Cities 2 1 8 4 4 Browns Ferry I 11 2 4 Browns Ferry 2 11 2 4 Browns Ferry 3 11 2 4 Brunswick 1 11 4 Brunswick 2 11 4 Cooper 8 3 4 Duane Arnold 6 2 4 Fitzpatrick 11 4 Hatch 1 11 4 Peach Bottom 2 11 2 4 Peach Bottom 3 11 2 ~ 4 Vemont Yankee 4 2 E il s., l, 70} ~,
TABLE 2 Inadvertent Blowdo. ins Events 1969 1970 1971 1972 1973 1974 1975 1976 1977 1978 Browns Ferry 1 2 1 2 Browns Ferry 2 2 1 2 1 Browns Ferry 3 Brunswick 1 Bruwnswick 2 2 1 1 4 Cooper 1 Dresden 2 Dresden 3 Duane Arnold 3 Fitzpatrick Hatch 1 1 1 3 1 1 Millstone 1 1 Monticello 1 1 2l Nine Mile Pt. 1 1* Oyster Creek 1* Peach Bottom 2 3 i 2 1 2 Peach Bottom ' Pilgrim 1 2 1 1 Quad Cities 1 2* Quad Cities 2 Vermont Yankee 10 6 l10 TOTAL 0 0 2 4 2 11 8
- Power Actuated Relief Valve 50'i M2 q
4
TABLE 3 Failures to Goen Properly on Demand 1969 1970 1971 1972 1973 1974 1975 1976 197 1978 i Browns Ferry 1 Browns Ferry 2 Browns Ferry 3 Brunswick 1 Brunswick 2 Cooper Dresden 2 3* 2* 1* Dresden 3 1* 1* Duane Arnold 1 Fitzpatrick Hatch 1 2 Millstor.e 1 Monticello 2 1 Nine Mile Point Oyster Creek 1* 1* Peach Bottom 2 i 1 Peach Bottom 3 Pilgrim 1 2 Quad Cities 1 1* 1* I Quad Cities 2 1* 2* Vermont Yankee 1 1 TOTAL 1 3 0 2 2 4 2 4 9 0
- Power Actuated Relief Valve n
i r;;;i 5' 'l [] 2 1
TABLE 4 Potential Failures to Goen Properly 1969 1970 1971 1972 1973 1974 1975 1976 1977 1978 Browns Ferry 1 1 } Browns Ferry 2 i Browns Ferry 3 Brunswick 1 Brunswick 2 1 Cooper 1 1 Dresden 2 Dresden 3 Duane Arnold 1 1 Fitzpatrick 1 Hatch 1 1 1 Millstone 1 1 Monticello Nine Mile Point 1* Oyster Creek Peach Bottom 2 1 2 1 Peach Bottom 3 Pilgrim 1 Quad Cities 1 Quad Cities 2 Vermont Yankee 2 TOTA'- 0 0 0 2 2 2 3 l 3 4 1
- Powcr Actuated Relief Valve i
{,ij i '? ^
- TABLE 5 hwer Actuated Event Type Safety Relief Vavles Pressure Relief Valves Total Inadvertent 49 4
53 Blowdowns t Failures to 11 16 27 Open Potential 16 1 17 Failures to Open 501 295 u i n .I
TABLE 6 Reactor Design Cycles (40 year life) Type of Cycle Numt' er_ of Cycles Bolt up 123 Design hydrostatic test at 1250 psig 130 Startup (100 F/hr heatup rate) 120 Daily reduction to 75 percent power 10,000 Weekly reduction tc 50 per:ent power 2,000 Control rod worth test 400 Loss of Feedwater heaters (80 cycles total) Turbine trip at 25 percent power 10 Loss of heating to feedwater heater 70 Scram (200 cycles total) Loss of feedwater pumps, isolation valves close 10 Turbine trip, feedwater on, isolation valves 40 stay open Reactor nyerpressure with delayed scram, feedwater 1 stays on, isolct s "alves stay open Single relief valve or safety valve blowdown 2 All other scrams 147 Improper star + of cold recirculation loop 5 Sudden start of pump in cold recirculation loop 5 Shutdown (100 F/hr cooldown rate) 118 Hydrostutic test at 1563 psig 3 l'nhol t 123 hi)) 29b
I t r ) "\\ * % }/'/ ( () 3 / k) / MAIN STE AM FLOW r() TO TURBINE STE AM DRYERS % / / / STEAM SEP AR ATOR$ ]QQQQQ] MAIN FEED FLCW FROM TURBINE h DRIVING FLOW --h- - 4 + v --------- 7 core m p asT evuP p - + '{ V 'I [' j RECIRCULATION PUMP ^ s. W.- ------ a FIGURE 1 SCHEMATIC 0F A TYPICAL BOILING WATER REACTOR Gn1 m/r~ u // J '.; t
Safety / Relief Valve or Power-Actuated Relief Valve / / / / r s m us to u t0 ,/ / g ,/ [$4FETTVALVE km_ _ ...a -a E ~ BAIN STEAR ,,..<e<. REACTCR VE51[L 1r 1r 10 TO SUPPRESSION FOOL $UPrattlitt POOL FIGURE 2 PHYSICAL LOCATION OF BWR SAFETY VALVES AND RELIEF VALVES 5()1 '2 '~i 6
1 ,Fdn C ~g' i _-_s, LIFTING GEAR / (jg.g? COMPRESSION SCRE COMP. SCREW ADAPTER
- i,.,
1 THRUST BEARING o / T j A p i 1. y V SPINDLE I ) SPRING YOKE ROD w ,I y 7 i '\\ COVER PLATE O GUIDE md DISC HOLDER C DISC COLLAR y g" DISC ' h j j Uf-UPPER ADJ. RING t F) c LOWER ADJ. RING Outlet SEAT BUSHING m ~~9l f 8^$" ,j (j -.,.
- =a
(, lR
- 1,.
,I ,u' ; lj (; i Inlet '[t :l h a FIGURE 3 b (u, SAFETY VALVE
a B 3 SCLEN01D ASSEMBLY MAIN VALVE DISC CH AMBER B outle ^\\\\KN\\MD' \\ - y }^ \\ \\\\ .., _I MAIN VALVE b I sy N l (f ) PILOT ~~' 2 SPRING CHAMBER C j OPERATING LEVER o ( f PILOT VALVE SPRING DISC GUIDE I (f i, C + POR T F leAMBE " ' " ^ " C-Re g E \\ v: iniet / O CHAMBER A / O 1= - RELIEF VALVE PILOT VALVE
- ==,
t:GURE 4 POWER ACTUATED RELIEF VALVE
u REMOTE AIR ACTUATOR @ ABUTIEhi GAP (OPEM) @- r IELLOTS O q SONNET f///)(M '///)'] IELL0fS LEAKAGE g ALARE PCRT l PRE LCAC 1 PACER l,l5,t,,fY gg EML PRE LO10 SPRING %\\ -t-ti 2 '\\ \\ N k SECON: STAGE \\ \\ }]\\ PILOT STER /fy//// DISK (CLOSEDJ Q -QN g/- ,I \\ g s NP x PR 6 0 PRING E \\ \\ TOKE PORT 10N \\ OF PILOT VALVE 1 p ( l PILOT VALVE 'd 'b MIf \\ Ellh VALVE PISTON ORIFICE w j ; ,j PILOT SENSING LINE Ng Ij M'N .NxV \\T EAlh YALVE \\ F ' N l DISK (CLOSED) Sw s ~ W 8 'N ig __t _ - 1 \\\\\\\\\\Y i \\ t N\\ \\ \\ \\ 7e,lFLul0 MICM PRES $URE A Y b .0UTLET FIGURE 5 - Operational Diagram of Three-Stage Pilot-Operated Pres- ~ sure Relief Valve in Closed Position. } {} j t-
e ABUTNENT CAP (CLCSED ) (J) i l C ' ' kli / /,/ - ] IELLDI$ (l) A x 's ' m' 'x\\ s pC 'Q; \\ f \\' ~ ds steene sTAst \\' s,- .;g Y ' e' q - @,- s Pisick (0) M'\\' f 'NN'N ' g ' y i \\ '.N N 'x' j > Q 'o,- s 3 ,'?, k xlN>x ;h i u Na D!s! (o! SE ! (s) s ' )$ y, 'N 'M / / / \\ N s s }s PILOT TALV[ '\\ Disk (cPtu)(c) n%'gg}'R[N ]~ sam vatyt Pisich (s) salw v4Lyr Olst (OPEN (0) 1 N i I 0 t t ]\\ _,3 N ggg pg3 Of$ CHARGE LIM w i s -l - - _ =, ' '.2 ,.v. c .( s' N v,4 ; - xN NNNNNy N 'N 4 b 'd Operational Diagram of Three-Stage Pilos-Operated Pres-FIGURE 6 - sure Relief Valve in Open Position. +*,/** I 501
g REMOTE AIR ACTUATOR BELLOWS / /// 'M -l / /' // BELLOW LE AKAGE AL ARM PORT \\T N ..==_g__ gN \\ PIL PR AD OPEN-h (,q s N -- 'r ADJUSTMENT p PISTON \\ \\\\lv ' /,'([/////,- SP RING SECOND STAGE 'N / \\ ,e g PRELOAD SPRING \\\\ \\N SECOND STAGE N . Idi I/. I/ N' / il ' I \\N'\\r \\J
- \\
N c_ _ _ __ _ __ _g U/
- g SECOND STAGEDISC (OPE N) \\,).\\
FT s ~ _\\ 8 \\ i {. /, 'Ys'x \\ \\ ' ' / /// ////// ,N s s j \\' <s ' h' k, r \\ @ MAIN VALVE khgNs h M' N'k k (innf#v' 'S' PRELOAD 's s Nb @"^'"Enxggggy? 'g x,sy Pau c\\ e MAIN VALVE ' 's ,,[ PILOT SENSING PORT \\ PISTON j[N{\\ x ORIFICE N j \\\\ 's - N s '\\ N g M AIN VAL D INLET @ 4 x t g,ggj,vg 4x's:xx:xx's s J OUTLFT 'N N N N L'N Y rh FIGURE 7 v rety net;et Valve (Enterna Actuation) a - ~ e-3 g .i.)
SRV or PARV [ 3 ilf_ ' .h main steam line n .ea N L I / ywell C '.. dr I { tT'
- o.'
4 ,n ~ -;.s { . 0.,l.: :.' .A ., s -[.. C i;- , u- .p. ...i-4 ) wetwell ,'Q. ", y ,.,"Ji se ti. SRV or PARV .~ / Discharqe s. *. - /
- e... -
/ 2 r ri s.n.. i.d. g -: 'U :1 ? / .. ^ r \\ i) 5 \\ ..;. M.i ) e 3 . ?:)tM (6, t )b i-L r a E t' -s Ll
- i p:.:
-~ .. t .j 8 g g 1 ..e. r. t.., r L p,', r. i .. %.. 6;.'. {.... i g FIGURE 8 3 RELIEF VALVE DISCHARGE FLOW PATH w V ~ l}}