ML20006B005
| ML20006B005 | |
| Person / Time | |
|---|---|
| Site: | Davis Besse  |
| Issue date: | 01/19/1990 |
| From: | Shelton D TOLEDO EDISON CO. |
| To: | Davis A NRC OFFICE OF INSPECTION & ENFORCEMENT (IE REGION III) |
| Shared Package | |
| ML20006B003 | List: |
| References | |
| 1-907, NUDOCS 9001310163 | |
| Download: ML20006B005 (5) | |
Text
. _ - _ _ _
I E6TSON 1
e a c w.enrw m y_ g C g LTON 0O Docket Number 50-346 License Number NPF-3 Serisi Number 1-907 January 19, 1990 i
A. Bert Davis Regional Administrator Region III United States Nuclear Regulatory Commission 799 Roosevelt Road-Glen Ellyn, Illinois 60137
Subject:
Reactor Protection System Instrumentation:
Flux-AFlux-Flov Transmitter Dear Mr. Davis The purpose of this letter is to request enforcement discretion from the Nuclear Regulatory Commission regarding Davis-Besse Nuclear Power Station (DBNPS) Unit No. 1, Operating License Appendix A, Technical Specification (TS) 3.3.1.1, Reactor Protection System-(RPS) Instrumentation.'
Specifically, Action Statement 2.a for Technical Specification 3.3.1.1-Table 3.3-1, Item 4 flux-Aflux-flow instrument channel, requires an.
inoperable channel to be placed in the tripped condition within one hour.
The DBNPS RPS design does not provide features for tripping: individual functional channels and the entire RPS channel has been tripped to comply with the Action requirements.
As discussed below Toledo Edison is-requesting that RPS Channel 2 be allowed under enforcement discretion to be reset with the flux-oflux-flow channel inoperable and not tripped.
Toledo Rdison believes that under the current condition this option provides the requisite level of. protection while reducing the probability' of a spurious plant trip putting the plant through an unnecessary transient thereby unnecessarily challenging safety systems and other l
plant systems.
The Reactor Protection System is designed to initiate a reactor trip when a sensed parameter exceeds a setpoint value. The RPS consists of four identical protection channela which are redundant and independent.
Each RPS channel consists of contacts from eight trip bistables which are in j
series with the power supply to each of.the RPS channel trip relays.. The trip bistables include Reactor Coolant System (RCS)'high pressure, RCS 9001310163 900124 r
PDR ADOCK 05000346 8-PDC 7W TOLEGO EDISON COMPANY EDISON PLAZA 300 MADISON AVENUE
. TOLEDO, OHlO 43852 -
Docket h aber 50-346
~
License Number NPF-3
.' Serfal Number 1-907 Page 2 lov pressure, RCS pressure-temperature, flux-oflux-flow, high flux, flux-pumps, RCS high temperature and containment vessel high pressure.
When.any sensed parameter exceeds its setpoint value the bistable contacts open causing a power interruption-to the RPS channel trip relay (RPS channel trip). Two RPS channel trips are required to cause a reactor trip.
The function of the flux-Aflux-flow trip histable is to provide both high t
power level and lov RCS flow protection in the event the reactor powerThe power level level increases or the RC$ flow rate decreases.
produced by the flux-flow ratio provides overpower DNB protection for all j
modes of reactor coolant pump operation and provides protection for RCS flow decreasing transients from high power where' protection is not For provided by the flux-number of reactor _ coolant pumps trip bistable.
every RCS flow rate there is a maximum permissible power level, and for The every power level there is a minimum permissible lov flow rate.
aflux limits are established in order to prevent reactor thermal limits from being exceeded. These thermal limits are either power peaking KV/ft limits or DNBR limits.
Each of the four flux-oflux-flov channels receive two differential pressure signals (one from each reactor coolant loop).
The signals are developed by differential pressure transmitters'(one per reactor coolant loop RPS channel for a total of 8 transmitters) that measure pressure drop across gentile tubes mounted in the two reactor coolant loop hot legs. The analog output of the transmitters is proportional to the square of the flow.
A square root extractor converts this analog signal to one directly proportional to flow. The proportional flov signgls from both RCS loops are summed to produce a total RC flow signal in a summing amplifier.
Each flux-oflux-flow channel also monitors reactor power imbalance (oflux). This is the difference between the power measured in the top half of the core and the power measured in the bottom half of the core by the two separate power range neutron flux detectors.
The oflux signal and the flow signal are combined in a function generator and the resultant function signal becomes the trip setpoint of the flux-oflux-flov bistable. The total flux signal is compared with this trip setpoint in the bistable. The bistable vill trip when the' total reactor power signal exceeds the bistable trip setpoint. When this bistable trips, its relay contact opens, de-energizing (tripping) the RPS channel trip relay.
On January 12, 1990, with the reactor at full power, RPS Channel 2 Rosemount Flow Transmitter FTRClB2 was declared inoperable due to the transmitter drifting high out of calibration specifications. The output of FTRClB2 provides input to the flux-oflux-flow functional unit of RPS Channel 2.
The flux-oflux-flow channel instrument. string allovable calibration error is 41.3mV and the measured channel instrument string
.....e
Docket' Number 50-346 License Nurber NPP-3
.* Ser(al Number 1-p07 Page 3
[
error was determined to be 5.6mV above this limit (which corresponds to an increase in the flux-Aflux-flow trip setpoint of 0.07g full reactor The out-of-calibration j
pover above the Technical Specification limit).
.value was reached after a slow, gradual increase in output since August Toledo Edison declared RPS Channel 2 inoperable, and in accordance 1989.
vith the requirements of Action 2.a of Table 3.3-1, Channel 2 was placed l
in the tripped condition.
)
The RPS operates on a.two-out-of-four trip logic, i.e.. vhenever any two of the four RPS channels trip, the RPS vill interrupt power to the l
control rods causing the reactor to trip.
As stated above, individual i
i trip bistables are not individually trippable without tripping the entire With an inoperable RPS channel tripped,-the remaining RPS RPS channel.
i channels operate in a one-out-of-three configuration to cause a reactor This logic results in a half-trip of the RPS and makes the plant trip.
susceptible to tripping should a spurious trip occur on any'one of the eight trip bistables in the remaining three RPS channels (i.e., any one i
i As presented in the Babcock and Vilcox of the remainit:g 24 bistables).
Owners Group Topical Report BAV-10167 (dated May 1986) " Justification for Increasing the Reactor Trip System On-line Test Interval", this approximately doubles the probability of a spurious trip for this j
one-out-of-three configuration.
A two-out-of-three configuration (inoperable channel not tripped)
I provides greater safety than a one-out-of-three configuration (inoperable channel tripped). This is because the two-out-o.%three configuration i
provides reliability to trip on demand as well as protection against The one-out-of-three configurati>n is intolerant of a spurious trips.
single spurious channel trip since it results in an undesired reactor l
trip.
By having an inoperable flov transmitter without tripping the RPS channel, the RPS maintains the two-out-of-four logic for all RPS-parameters except for the flux-oflux-flow parameter, which becomes the Again, as presented in equivalent of a two-out-of-three configuration.
BAV-10167,theprobabglityofnottrippingondemandforflux-oflux-flow (for a
~
changes from 9 x 10 ~
(for a two-out-of three configuration). This change is considered insignificant.
Plant safety depends both on the reliability of the RPS to trip on demand and its ability to prevent spurious trips.
The best configuration balances the reliability of tripping on demand and a lov spurious trip l
J This has been analyzed by Babcock and Vilcox (B&V) under the l
rate.
direction of the B&V Ovners Group. BAV-10167 provides technical justification for bypassing one of the four RPS channels indefinitely (as-l currently allowed by other B&V-plant Technical Specifications).
Topical.
Report BAV-10167, Supplement 2 (dated September 1989), " Justification for Increasing the Reactor Trip System On-Line Test Intervals - Supplement Number 2 - Additional Information on Allowed Outage Time," vas submitted
,,._....-...y
,,.,_..y_m.
Docket Number 50-346 License Number NPF-3
- . Serial Number 1-907 Page 4 to the NRC by letter dated November 15, 1989. This report concludes that retaining an indefinite bypassing of one complete RPS channel is justifiable and in the interest of plant safety.
The relief Toledo Edison is seeking is even more conservative than those RPS configurations described in BW-10167 since only one parameter vould be in a two-ou.t-of-three configuration and the entir,e RPS channel vould not be bypassed.
i On January 17, 1990, a telephone conference call was held between Toledo Edison and NRC representatives to discuss the granting of relief from TS 3.3.1.1 requirements to place Channel 2 in the tripped condition which had created a one-out-of-three RPS trip configuration. Toledo Rdison proposed that RPS Channel 2 be returned to the non-tripped state thereby essentially retaining a RPS two-out-of-four configuration to trip the reactor with the exception of the flux-Aflux-flov functional unit which vould, in effect, be in a two-out-of-three configuration to trip the reactor.
During the present operating cycle (Cycle 6) three spurious trips,of RPS channels have occurred at the DBNPS.
Under the present RPS channel configuration (one channel tripped resulting in a one-out-of-three logic), each of these spurious trips vould have caused the reactor to unnecessarily trip.
Replacement of Flov Transmitter FTRC182 to correct the transmitter drift problem during plant operation is not feasible for the following reasons.
Flow Transmitter FTRC187 is located in an area on Reactor Coolant Loop B vhich has an estimated radiation field at full reactor power of 1 Rem /hr.
Approximately 4 to 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> vould be necessary to replace the transmitter and perform applicable post-maintenance testing.
In keeping with the concept of ALARA these doses are considered to be unacceptable.
Due to the time in core life for Cycle 6 and the resultant xenon transient which vould be incurred, a reduction in power to enter containment and perform this work is not practical because of the large volumes of boration/deboration water processing required and the delay in returning to power and its effect on the scheduled outage.
Should enforcement discretion not bo granted by the NRC, Toledo Edison plans to continue operation with the RPS in a one-out-of-three configuration for reactor l
trip in accordance with the Technical Specifications.
Should the NRC grant the requested relief, Toledo Edison plans to take the following compensatory action.
Data on the eight Rosemount 1153 transmitters that provide fluv information to the RPS will be gathered to 4
determine a 24 hour2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> average.
This method has been successful in identifying a transmitter which was drifting previously and replaced in i
September 1989, and in identifying the transmitter which has now drifted out of calibration. Toledo Edison believes that the proposed monitoring l
vould ensure that any other transmitter problem would be detected prior i
to degrading to the point of preventing the associated RPS channel from performing its intended function.
If any other transmitter for RPS
~
Docket N eber 50-346 L} cense Number NPF-3 a'
'Setial Number 1-907 i
Page 5 Channels 1, 3, or 4 degrades beyond its Technical Specification limit.
Toledo Edison vill follow the appropriate Technical Specification action j
of Limiting Condition for Operation 3.0.3.
The transmitters in RPS l
channels 1, 3, and 4 have not shown any significant drift which would indicate the same degradation as seen in the RPS Channel 2 transmitter.
Enforcement discretion is appropriate for these circucatances for the following reasons:
timely promotion of a safe course of action, a very J
limited time period of plant operation is affected, the situation was not reasonably foreseen by Toledo Edison and the timeliness of NRC action is of essence to preclude the potential imposition of a plant transient, As this is a limited circumstance, a permanent License Amendment would not be as appropriate as enforcement discretion.
The effectivity of this enforcement discretion vould be limited in duration until the next shutdown of the plant and in no case later than the commencement of the sixth refueling outage (presently scheduled for February 1, 1990).
Should you have any questions or require additional information, please 1
contact Mr. Robert V. Schrauder, Manager - Nuclear Licensing, at (419) 249-2366.
1 Sincerel yours, DRV/DJS/sma P. M. Byron, DB-1 NRC Senior Resident Inspector cc T. V. Vaabach, DB-1 NRC Senior Project Manager I
I State of Ohio i
.m--
- e. e r-a m
m e
-