ML20011F632
| ML20011F632 | |
| Person / Time | |
|---|---|
| Issue date: | 02/26/1990 |
| From: | Beckjord E NRC OFFICE OF NUCLEAR REGULATORY RESEARCH (RES) |
| To: | Morris B NRC OFFICE OF NUCLEAR REGULATORY RESEARCH (RES) |
| References | |
| REF-GTECI-129, REF-GTECI-NI, TASK-129, TASK-OR NUDOCS 9003070062 | |
| Download: ML20011F632 (10) | |
Text
p
[-
o UNITED STATES g
L y
g NUCLEAR REGULATORY COMMISSION
-5 p
W ASHINGTON, D. C. 20bb5
\\...../
4 i
FEB t 61990 i
MEMORANDUM FOR: Bill M. Morris, Director, Division of Regulatory Applications, RES FROM:
Eric S. Beckjord, Director, Office of Nuclear Regulatcry Research
SUBJECT:
GENERIC ISSUE 129, " VALVE INTERLOCKS TO PREVENT VESSEL DRAINAGE DURING SHUTDOWN COOLING" The prioritization of Generic Issue 129, " Valve Interlocks to Prevent Vessel Drainage during Shutdown Cooling" shows that the estimated aublic risk associated with the issue is small. Therefore, the issue will be DROP)ED from further consideration.
The enclosed prioritization evaluation will be incorporated into NUREG-0933, "A Prioritization of Generic Safety Issues," and is being sent to the regions, i
other offices, the ACRS, and the PDR, by copy of this memorandum and its enclosure, to allow others the opportunity to comment on the evaluation. All coments should be sent to the Advanced Reactors and Generic Issues Branch, DRA,RES(MailStopNL/S-169). Should you have questions pertainin contents of this memorandum, please contact Ronald Emrit (492-3731)g to the
@N #
Eric S. Beckjord, Director Office of Nuclear Regulatory Research
Enclosure:
Prioritization Evaluation cc:
T. Murley, NRR E. Jordan, AE00 W. Russell, Reg. I S. Ebneter, Rog. II A. Davis, Reg. III R. Hartin, Reg. IV J. Martin, Reg. Y c.POR A ACRS '
l0 9003070062 900226 h
4/
l
[
i i
I
.l t
I ENCLOSURE PRIORITIZATION EVALUATION Generic Issue 129: Valve Interlocks to Prevent Vessel Drainage During Shutdown Cooling t
i s
i
T I.
ISSUE 129: VALVE INTERLOCKS TO PREVENT VESSEL DRAINAGE DURING SHUTDOWN COOLING DESCRIPTION Historical Background 1264 in which 21 This issue was identified in a May ~1986 DSI memorandum instances of BWR vessel draining through various paths in the RHR system piping 2cs was issued identifying were described.
Later, in August 1986, AEOD/E609 six potential drain paths from the vessel to the suppression pool, liquid radioactive waste system, and voided RHR pipes.
The events described involved inadvertent reactor vessel drainage through various paths in the RHR system of GE BWR-3 -4, -5 and -6 plants during the shutdown cooling (SDC) operating mode.
There are approximately 30 plants of these designs in commercial operation.
Of the six p'otential drain paths identified in the AEOD report 1185 one
" fast-drain path connects the vessel to the suppression pool through a 20-inch diameter line when the SDC suction and suppression pool suction valves may be open at the same time.
Other " slow-drain" paths can be established by misalignment of test return, minimum flow, radioactive waste, and automatic depressurization system valves.
There are several systems in place to prevent inadvertent draining.
- First, about half of the sprating plants have valve interlocks to prevent establishment of ou fast-drain path, but not all have Technical Specifications (T/S) governity itW use.
Second, procedural controls are implemented at all plants to ensrec Mot at least one valve in each potential drain path remains closed. Thin, check valves are installed in the Low Pressure Coolant Injection line, the minimum flow line, and the RHR pump discharge line.
Fourth, all plants have an automatic isolation system which is designed to close SDC suction isolation valves on either high flow rate in the SDC suction line or on low reactor vessel water level.
Not all plant T/S require that this system be active during SDC operation.
Safety Significance Vessel draining incidents during SDC represent initiating events for sequences that can progress, by related equipment malfunctions and personnel errors, to core uncovery with the potential for subsequent core damage.
Compared to release accidents postulated for reactors at power, release from a plant in SDC mode is reduced by the lower heat output and smaller radioactive inventory present in the core at shutdown. The release is increased by the possibility of open containment and the unavailability of some safety equipment due to maintenance, repair, and testing associated with the shutdown.
Possible Solution The possible solution includes both preventive and mitigative measures.
Preventive measures include installation of valve interlocks on the suppression pool suction and SDC suction valves to prevent fast-drain events. While some plants have interlocks installed, they lack T/S governing their use; T/S revisions would be required. The mitigative measure is a revision of all plant 3.129-1
T,
{
T/S to require that the RHR System Cooling / Head Spray Mode Isolation System be operable and active while in the SDC mode.
PRIORITY DETERMINATION Frequency Estimate The frequencies of event sequences leading to uncovery of the core are estimated first under a set of assumptions representing the base case,itypifying the physical and logical arrangement of the current BWR.
(See Table 3.129-1.)
The frequencies of event sequences for the adjusted case are performed under a set of assumptions representing the current BWR with the proposed resolutions in place.
(See Table 3.129-2.) The two applicable plant operating modes, Mode 4 l
(SDC) and Mode 5 (refueling), were cor.sidered separately.
[
Two' types of potential draining events were evaluated.
Either type of event may be terminated by operator intervention or by automatic RHR isolation.
(1) " Fast Drain" events involve valve alignments with the suppression pool suction valve and the SDC suction valve open at the same time.
t This alignment establishes a drain path directly from the reactor vessel to the suppression pool.
It is this drain path that is addressed by.the proposed valve interlocks.
(2) " Slow Drain" events involve valve misalignments in other RHR piping.
The assumptions that characterize the fast and slow event sequences for the base case and for the adjusted case are the same.
Since interlocks are proposed only for valves in the fast drain path, interlock failure does not i
affect the slow paths.
The draining event is assumed to progress through five steps:
(1) initiation; (2) valve interlock failure; (3) failure of the RHR auto-isolation to respond to high SDC flow rate or low reactor vessel water level; (4) failure of the operator to analyze the condition and take critical action; and (5) failure of the vessel makeup water systems.
The frequencies of each of these steps are estimated in Tables 3.129-1 and 3.129-2.
Notes pertaining to the events in both tables appear at the end of Table 3.129-2.
i The change in core-melt frequency (af) that would result from implementation of the Safety Issue Resolution (SIR) is the difference between the total base case frequency from Table 3.129-1 and the total adjusted case frequency from Table 3.129-2.
AF = [(1.8 x 10 8)-(2.9 x 10 10)+(2.6 x 10 8).(1.4 x 10 20)]/RY
= 4.4 x 10 8/RY Consequence Estimate Dose calculations are based on the BWR 4 release category which assumes enough containment leakage exists to prevent failure by overpressure.
The reactor building is assumed to remain intact and concentrations of radioactive release l
to the atmosphere are reduced by condensation in the containment, standby gas L
treatment system, and release through an elevated stack.
Because of the 3.129-2 L
TABLE 3.129-1 ESTIMATED CORE-MELT FREQUENCY (BASE CASE)
MODE 4 (SDC)
MODE 5 (REFUELING)
FREQUENCY FREQUENCY Fast Slow Fast Slow EVENT NOTE
- Drain Drain Drain Drain Initiator Event (event /RY) 3 0.055 0.041 0.011 0.008 Valve Interlock Failure (per demand) 2 0.75 1.0 0.75 1.0 Draining Events (per RY) 1 0.041 0.041 0.008 0.008 RHR Automatic Isolation Failure (per demand) 4 0.03 0.03 0.03 0.03 Emergency Core Cooling System Failure (per demand) 5 0.01 0.01
- 1. 0
- 1. 0 Operator Failure to Diagnose 6
0.001 0.0005 0.0001 0.00001' and Take Critical Action (per demand)
PRODUCT (core-melt /RY) 7 1.2x10 s 6.2x10 8 2.4x10 s 2.4x10 8 TOTAL Fast and Slow Drain FREQUENCY (core melt /RY) 8 1.8x10 8 2.6x10 8 See bottom of Table 3.129-2 for explanation of Notes.
3.129-3
TABLE 3.129-2 ESTIMATED CORE-MELT FREQUENCY (ADJUSTED CASE)
MODE 4 (SDC)
MODE 5 (REFUELING)
FREQUENCY FREQUENCY Fast Slow Fast Slow EVENT NOTE Drain Drain Drain Drain Initiator Event (event /RY) 9 0.055 0.041 0.011 0.008 Valve Interlock Failure (per demand) 10 0.025
- 1. 0 0.025
- 1. 0 Draining Events (events /RY) 11 0.0014 0.041 0.00028 0.008 RHR Automatic Isolation Failure (per demand) 12 0.0013 0.0013 0.0013 0.0013 Emergency Core Cooling System Failure (per demand) 5 0.01 0.01 1.0
- 1. 0 Operator Failure to Diagnose and Take Critical Action (per demand) 6 0.001 0.0005 0.0001 0.00001 PRODUCT (core-melt /RY) 7 1.Sx10 11 2.7x10 to 3.6x10 11 10 20 TOTAL Fast and Slow Drain FREQUENCY (core melt /RY) 8 2.9x10 10 1.4x10 10 t
l l
3.129-4 I
~
iabla 3.129-2 (Cont.)
NOTES:
1.
The draining event frequency is estimated in the AEOD/E609 reportries by noting 11 operational events in approxirately 100 RY, yielding a frequency of about 0.1/RY for all types of draining events.
If it is assumed that about half of the events are fast draining, the frequencies for the fast and slow events should each sum to 0.05/RY. Accordingly to a PNL estimate,54 approximately 1/6 of the SDC transitions are for refueling.
The draining event frequencies are assumed to be distributed between Mode 4 and Mode 5 in the ratio of five to one.
2.
The base case protability of valve interlock failure or unavailability is taken as 0.75/ demand.
This assignment i-based on the observation that only 1/2 of the plants have the interlocks installed and onl: 1/2 of those have T/S governing their use; slow-drain paths are not affected by valve interloccs.
3.
The frequency of draining events and the frequency of valve interlock failure are used to estimate the frequency of he initiator, which is the attempted misalignment of RHR valves.
These values are used in Table 3.129-2.
4.
The probability o' auto-isolation failure for the base case is 0.03/ demand since it is assumed that one out of 30 plants does not have T/S or procedures for auto-isolation during SDC.
5.
The probability of failure or unavailability of the water inventory makeup in Mode 4 for both the base and the adjusted cases is assumed to be due to equipment malfunction.
The value of 0.01/ demand is assumed.
In Mode 5, the ECCS is not normally available and its failure / demand probability is assigned a value of 1.
6.
The probability of operator failure to diagnose the problem and take appropriate action reflects the relatively long period of time available between the initiation and estimated onset of core damage.
The staff reported results 1288 of a calculation of core heat transfer following a postulated fast draining event in a BWR in SDC.
In one calculated case, assumed to be completely unmitig-3ted, the peak cladding temperature does not rise appreciably above the water saturation temperature for over 60 minutes af ter initiation.
Citing Sandia operator performance data, PNL reported the probability of operator failure to diagnose a problem at 0.001 in 30 minutes.84 In the time predicted for the evolution of even,a fast drain event, the probability of failure to diagnose is insignificant.
The probabilities entered in Tables 3.129-1 and 3.129-2 characterize operator failure to take critical action, 10 3 for the fast drain case.
The probabilities for the slow drain events are smaller because of the muca greater time available to respond.
The operator failure probabilities entered for the Mode 5 seoiences are significantly smaller due to the larger inventory of coolant assumed to be present over the reactor.
3.129-5
Tabla 3.129-2 (Cont.)
NOTES:
7.
Because the events constituting a core-melt sequence are assumed to be independent, the
~
core-melt probability is calculated as the product of the sequence constituent probabilities.
8.
The fast drain and the slow drain events are independent but not mutually exclusive.
The combined probability of one or the other occurring is approximated here by adding the small probabilities for each occurring independently.
9.
The initiator event frequency for the adjusted case is assumed to be the same as that calculated from the base case.
(See Note 3 above.)
10.
Resolution assumes interlock installation at all plants and appropriate T/S revision.
Interlock failure probability for the resolved case is the sum of probability of failure of the electrical portion plus the probability of failure of the limit switch.
These probabilities are estimated in the PNL reports 4 as follows:
Component Failure Probability Source Electrical 10 3 NRC Accident Sequence Evaluation Program Limit Switch 2.4 x 10 2 Indian Point Review Study The combined probability is 2.5 x 10 2, 11.
The frequency of draining events for the adjusted case is calculated as the product of the initiator frequency and the valve interlock failure frequency.
12.
Failure probability of the RHR isolation system in the adjusted case is taken from the PNL citation 64 of the Station Blackout Study in which the actuation and control value of 1.3 x 10 3/ demand is given.
Assuming that the probability of mechanical failure is negligible, the RHR isolation failure rate is estimated to be due only to actuation and control, and the 1.3 x 10 3/ demand value was used.
3.129-6
L.
c reduced thermal power level of a plant in the SDC mode and the decay of the short-lived fission products, the assumed release is estimated to be 0.1 of the BWR 4 model described in Appendix B of NUREG/CR-280064 or (0.1)(6.1 x 105) man-rem = 6.1 x 104 man-rem. Thus, the net change in whole body dose is (6.1 x 104 man-rem) (4.4 x 10 8/RY) = 2.68 x 10 3 man-rem /RY.
Assuming a remaining lifetime of 1,000 RY for operating and planned plants, the estimate public risk reduction is 2.68 man-rem.
Cost Estimate Industry Cost:
The industry costs include review and documentation of the design bases, development of interim operating procedures, system design modifications, and T/S revisions.
No cost for replacement power is assigned to these modifications since it is assumed that the work can proceed during a 6
normal outage.
PNL estimated 4 the total industry cost to be $1.06M.
NRC Cost:
The NRC costs attributable to the resolution include SIR development, inspections of the valve interlock installations, and review of 6
the T/S revisions.
PNL estimated 4 the total NRC cost to be $0.27M.
s Thus, the total industry and NRC cost to implement the possible solution is
$(1.06 + 0.27)M or $1.33M.
Value/ Impact Assessment Based on a potential risk reduction of 2.68 man-rem and a cost of $1.33M, the value/ impact score is given by:
3 _ 2.68 man-rem
$1.33M
= 2 man-rem /$M Other Considerations (1) The occupational dose to install, inspect, and test the valve interlocks was estimated to be 57 man-rem.
This dose is large compared to the estimated public dose averted by implementation of the SIR.
(2) Recent thermal-hydraulic analysis of a postulated draining event that results in core uncovery* performed for the NRC by EG&G, Idaho 1166 reveals the following findings, a.
For a case where the operator fails to inject any coolant into the core, two phase cooling of the fuel rods will maintain the cladding temperature of the hottest rods at about the boiling point of water for over an hour, with a relatively low fuel heat up rate following dry out of the reactor vessel.
- As a consequence of the BWR jet pump design, any draining event is naturally terminated with the water level in the reactor vessel at an elevation such that only the upper third of the core is uncovered.
3.129-7
G., ;,
l-b.
For a case where a nominal flow of about 150 gpm is maintained through the CRD injection system, two phase ::ooling of the fuel rods is sufficient to keep cladding temperatures at tht boiling point of water for the duration of the analysis (i.e., an indefinite period of time).
The findings, therefore, suggest that the consequence value (6.1 x 104 MR/ event) used above may be significantly overestimated and that the real potential public risk reduction for this issue may be significantly less than the low value determined above.
CONCLUSION We recommend that this issue be placed in the DROP category.
REFERENCES 1164.
Memorandum for T. Speis from R. Bernero, "Prioritization of Generic Issue-Valve Interlocks to Prevent Vessel Draining During Shutdown Cooling," May 21, 1986.
1156.
AEOD/E609, " Inadvertent Draining of Reactor Vessel During Shutdown Cooling Operation," Office for Analysis and Evaluation of Operational' Data, U.S. Nuclear Regulatory Commission, August 1986.
1166.
Memorandum for T. King from K. Kniel, " Additional Comments Regarding Prioritization of Generic Issue-129, ' Residual Heat Removal System Valve Mis-alignment during Shutdown Cooling Operations,'" December 7,1988.
64.
NUREG/CR-2800, Guidelines for Nuclear Power Plant Safety Issue Prioritization Information Development," U.S. Nuclear Regulatory Commission, February 1983, (Supplement 1) May 1983, (Supplement 2)
December 1983, (Supp1 ment 3) September 1985, (Supplement 4) July 1986.
3.129-8