ML20027A616

From kanterella
Jump to navigation Jump to search
Technical Evaluation of Electrical,Instrumentation & Control Design Aspects of Override of Containment Purge Valve Isolation & Other Engineered Safety Features for St Lucie Nuclear Generating Plant
ML20027A616
Person / Time
Site: Saint Lucie NextEra Energy icon.png
Issue date: 08/31/1980
From: Cooper J
EG&G, INC.
To:
NRC
Shared Package
ML17213B027 List:
References
1183-4158, NUDOCS 8010070317
Download: ML20027A616 (16)


Text

_

1183-4158

'E A EG2G August 1980 n

r.=r=.-~

h Attachment I

TECHNICAL EVALUATION OF THE ELECTRICAL, INSTRUMENTATION, AND CONTROL DESIGN ASPECTS

~

OF THE l

dfERRIDE FC NTAINMENT PURGE VALVE 150LA' TION AND OTHER ENGINE 8 RED SAFETY FEATURE SIGNALS FOR THE ST. LUCIE NUCLEAR GENERATING PLANT

, DOCKET 50-335)

(

by J. H. Cooper Approved for Publication

$hL.2 J. R. Radosevic Department Manager This document is UNCLASSIFIED 4

I 55 er:

Nicholas E. BrbdericK Department Manager Work Performed for Lawrence Livermore NationalLabo r.! cry under U.S. Department of Energy Contract No. DE-ACOS-76 NVO 1183.

AL P 20.t enosi 3

/

9 l

[

ABSTRACT s

E This report documents the technical evaluation of the e.lectrical, instrumentation, and control design aspects of the override of containment purge valve isolation and other engineered safety feature signals for the St. Lucie Nuclear Generating Plant.

The review criteria are based on IEEE

_._j Std-279-1971 requirements for the safety signals to all purge and ventila-tion isolation valves.

- iii -

l l

w

_q Q

FOREWORD g

F~

This report is supplied as part of the Selected Electrical, Instrumentation, and Control Systems Issues 'SEICSI) Program being con-ducted for the U.S.

Nuclear Regulatory Comm, ssion, Office of Nuciear Reactor Regulation, Division of Operating Reactors, by Lawrence Livermore National Laboratory, Field Test Systems Division of the Electronics Engineering Department.

The U.S. Nuclear Regulatory Commission funded the work under an authorization entitled "El ectri cal, Instrumentation and Control System Support," B&R 20 19 04 031, FIN A-0231.

The work was performed by EG&G, Inc., Energy Measurements Group, San Ramon Operations, for Lawrence Livermore National Laboratory under U.S.

Department of Energy contract number DE-AC08-76NV01183.

.y-

~

l TABLE OF CONTENTS PL Page P

f 1

1.

INTRODUCTION.

2.

EVALUATION OF ST. LUCIE NUCLEAR GENERATING PLANT.

3 2.1 Review Criteria.

3 2.2 Containment Ventilation Isolation Circuits Design Description.

4 2.3 Containment Ventilation Isolation System Design Evaluation 5

2.4 Other Engineered Safety Feature System Circuits 6

3.

CONCLUSIONS 9

REFERENCES.

11

- vii -

__._J

I TECHNICAL EVALUATION OF THE ELECTRICAL, INSTRUMENTATION, AND CONTROL DESIGN ASPECTS OF THE OVERRIDE OF CONTAINMENT PURGE VALVE ISOLATION AND OTHER ENGINEERED SAFETY FEATURE SIGNALS FOR THE ST. LUCIE NUCLEAR GENERATING PLANT (Docket No. 50-335)

J. H. Cooper EG&G, Inc. Energy Measurements Group, San Ramon Operations L

l 1.

INTRODUCTION Several instances have been reported where automatic closure of the containment ventilation / purge valves would not have occurred because

(

the safety actuation signals were either manually overridden or blocked during normal plant operations.

These events resulted from procedural inadequacies, design deficiencies, and lack of proper management controls.

These events also orought into question the mechanical operability of the containment isolation valves themselves.

These events were determined by e

the U.S. Nuclear Regulatory Comission (NRC) to be an Abnomal Occurrence p

(#78-5) and were, accordingly, reported to the U.S. Congress.

As a follow-up on this Abnomal Occurrence, the NRC staff is reviewing the electrical override aspects and the mechanical operability aspects of containment purging for all operating power reactors.

On November 29, 1978, the NRC issued a generic letter entitled " Containment Purging During Nomal Plant Operation" [Ref. 1], to all Doiling water reactor (BWR) and pressurized water reactor (PWR) licensces.

In a letter dated January 5,1979 [Ref. 2], and a letter dated February 1,1979 [Ref.

33, the Florida Power and Light Company (FPL), licensee for the St. Lucie Nuclear Generating Plant, replied to the NRC generic letter. -

\\

1 j

This document addresses only the electrical, instrumentation, and control (El&C) design aspects of the containment ventilation isolation (CVI) and other engineered safety features (ESFs).

r i

I I:.

E i -

]

l 2.

EVALUATION OF ST. LUCIE NUCLEAR GENERATING PLANT f~

2.1 REVIEW CRITERIA The primary intent of this evaluation is to detennine that the following requirements are met for the safety signals to all ESF equipment.

(1) Criterion no.1-In keeping with the requirements' of GDC 55 and 56 [Ref. 43, the overriding

  • of one type of safety actuation signal (e.g., radiation) should not cause the blocking of any other type of safety actuation signal (e.g., pressure) for those valves that have no function besides containment i solation.

(2) Criterion no. 2--Sufficient physical features (e.g., keylock switches) are to be provided to facilitate adequate administrative controls.

(3) Criterion no. 3--The system-level annunciation of the overridden status should be provided for every safety system impacted when any override is active

( see R.G.1.47).

Incidental to this ruiew, the following additional NRC staff design critaria were used in the evaluation:

(1) Criterion no. 4--Diverse signals should be pro-vided to initiate isolation of the containment ventilation system.

Specifically, containment high radiation, safety injection actuation, and containment high pressure (where containment high pressure is not a portion of safety injection actuation) should automatically initiate CVI.

(2) Criterion no. 5--The instrumentation and control systems provided to initiate the ESF should be designed and qualified as safety-grade equipment.

  • The following definition is given for clarity of use in this evaluation:

Override:

The signal is still present, and it is blocked in order to perform a function contrary to the signal. - __

(3)

Criterion no. 6--The overriding or resetting

  • of the isolation actuation signal should not cause the auto-matic reopening of any isolation / purge valve.

Criterion 6 in this review applies primarily to related ESF l

systems because implementation of. this criterion for containment isolation systems will be reviewed by the Lessons Learned Task Force, based on th recomendations in NUREG 0578, Section 2.1.4 (Ref. 53.

Automatic valve repositioning upon reset may be acceptable when containment isolation not involved; consideration will be given on a case-by-case basis. A ability would be. dependent upon system function, design intent, and su able operating procedures.

i l

1 2.2 CONTAINMENT VENTILATION ISOLATION CIRCUITS D The containment purge valves are situated in two separate flow i

~

paths (FCV-25-1,-2,-3 inlet and FCV-25-4,-5,-6 exhaust).

These valves 77':

closed through de-energization of the control solenoids associated i

,h each valve upon initiation of the containment isolations signal (CIS) in Train A or Train B by the Engineered (ESFAS).

Safety Feature Actuation System I

The ESFAS provides two (2) independent (physically and electric-ally isolated) actuation paths to initiate and complete containment isola-I tion.

These paths are CIS "A"

and CIS "B".

CIS " A" de-energizes the solenoids, thereby causing them to vent and to close valves FCV-25-1,-3 At the same time, CIS "B"

de-energizes the solenoids, causing valves FCV-25-2,-4,-6 to close in a similar fashion.

q Operation of either the "A"

)

or the "B" train will effect the isolation of both containment purge paths.

1 1

  • The following definition is given for clarity of use in this evaluation:

cleared in order to return it to the normal condition. R \\

The ESFAS control train signals are combined as logic or func-tions of the trip signals as follows:

1 i

(1)

Automatic Signals I

(a) High containment pressure (b) High containment radiation q

(2)

Manual Signal l

ta) Containment isolation The valve control logic incorporates a latch, so that if a trip occurs and the system is subsequently reset, the system will remain iso-lated until each train is individually reset. The valves are also control-J 1ed manually at the train level.

Indicator lights are provided for each control train, as are indicator lights for each valve position indication.

l l

When a monitored plant condition calls for isolation, a trip l

occurs in ESFAS train A and/or B and the trip contacts open in the control l

logic causing drop-out of relays 4A1, 4A2, 4B1, 4B2, Trip contacts also open in the valve control causing de-energizing of solenoid valves

)

SE-25-2,-3,-4,-6 -7, and -8.

The air control valves close, removing air f

from the containment isolation valves, which close by spring force.

2.3 CONTAINMENT VENTILATION ISOLATION SYSTEM DESIGN EVALUATION In response to this issue, the licensee for St. Lucie has com-mitted to minimizing the number and duration of purges, most of which are performed on an interim basis when the plant is at or below the hot standby condition.

The containment ventilation isolation system (CIS) has no over-rides and no signals are blocked.

We conclude that yriterion No.1 is satisfied.

There is no override of containment ventilation isolation.

Wa conclude that NRC crite-ion Nos. 2 and 3 are satisfied.

CIS is initiated by high reactor building pressure and high radiation only and lacks diversity.

In a letter dated March 13, 1980 [Ref.

6 ], the licensee agreed to add the safety injectior actuation signal (SIAS), and with the addition of the SIAS criterion No. 4 will be met.

In.the letter dated March 13, 1980, attachment paragraph le [Ref.

5], the licensee states that the instrumentation and control systems pro-vided to initiate engineered safeguards are designed and qualified as safety-grade equ'ipment. Paragraph if of the attachment to the letter [Ref.

6] also states that resetting of the isolation signal will not cause auto-4 matic motion of any ESF valve.

Review of the control circuitry verifies this feature.

We conclude that criteria No. 5 and No. 6 are satisfied.

2.4 OTHER ENGINEERED SAFETY FEATURE (ESF) SYSTEM CIRCUITS.

In the course of this review, other ESF systems were audited for compliance with the criteria previously listed.

The information provided by the licensee was reviewed for compliance with the criteria.

This in-formation covered the containment purge isolation system, the control room air conditioning, and the emergency filtration fan system. Results of this audit were applied to the containment purge valve review.

The licensee for St. Lucie stated in the letter of March 13, 1980

[Ref. 6], that the safety actuation signals (SAS) have blocks that are keylock-operated and that they provide for orderly accomplishment of nonnal plant functions, such as shutdown.

Blocks to the SAS can be applied only if limiting conditions for operation are met.

The blocks are annunciated at the system level and are automatically removed.

Blocking of any one signal does not block any other signal. -

l E

l The March 13, 1980 letter [Ref. 6] also states that the instru-l l

mentation and control systems trat initiate the ESF are designed and qualified as safety-grade equipment The licensee stated that resetting of l

the isolation signal will not cause the automatic motion of any ESF valve.

1 E

I E

E 1

E I

l l

E l

l E

E E

E E

4 l

m.J l

m l

6 e

1 3.

CONCLUSIONS The EI&C design aspects of containment purge valve iso.lation and other ESF signals for St. Lucie Nuclear Generating Plant were evaluated 5

using those design criteria stated in section 2.1 of this report.

We conclude that the design of the CVI system meets the NRC staff cri teria.

E We also conclude that the other ESF circuit designs audited meet the NRC staff criteria.

_g.

l.

REFERENCES

~

7 1.

NRC/ DOR letter (T. Ippolito) to FPL, " Containment Purging During Nonnal Operation," dated November 29, 1978.

2.

FPL letter (R. E.

Uhrig) to NRC, " Docket No. 50-335, Containment J

Purging," dated January 5,1979.

3.

FPL letter (R. E. Uhrig) to NRC, "St. Lucie Unit 1, Docket No. 50-335, Containment Purging," dated February 1,1979.

4.

U.S. Nuclear Regulatory Comission, Standard Review Plan, " Containment Isolation System," NUREG 75/087, Rev.1, Section 6.2.4.

p 5.

U.S.

Nuclear Regulatory Comission, "TMI-2 Task Force Short-term Recommeidations," NUREG 0578, July 1979.

c 6.

FPL letter (R.E. Uhrig) to NRC, "ST. Lucie Unit 1, Docket No. 50-335, Containment Purge", dated March 13, 1980.

i 8

l Cathy #1/#24/amr I

I ll 1 I

1 I

DISTRIBUTION LIST LLNL/Livermore EG&G/SRO Lawrence Livermore National Laboratory EG&G, Inc.

P. O. Box 808 P. 0. Box 204 Livermore, California 94550 San Ramon, California 94583 M. H. Dittmore, L-97 (2 copies)

Author (2 copies)

C. E. Brown (4 copies)

[

B. G. Mayn M. W. Nishimura

[

LLNL/ Nevada NRC

[

Lawrence Livermore National Laboratory U. S. Nuclear Regulatory Commission P. O. Box 45 Washington, D.C.

20555 Mercury, Nevada 89023 W. E. Reeves, L-577 (2 copies)

J. T. Beard, MS-416 D. G. Eisenhut, MS-528 G.

Lainas, MS-416 P. C. Shemanski, MS-416 USD0E/NV00 USDOE/ TIC U. S. Department of Energy U. S. Department of Energy Nevada Operations Office Technical Information Center P. O. Box 14100 P. O. Box 62 Las Vegas, Nevada 89114 Oak Ridge, Tennessee 37830 J. A. Koch T. Abernathy (2 copies)

R. R. Loux R. B. Purcell

/ >R M Cgo,,

UNITED STATES nclosure 2 E'-

NUCLEAR REGULATORY COMMISSION n

h.

E WASHINGTON, D. C. 20555 GENERIC EVALUATION OF THE RADIOLOGICAL CONSEQUENCES 0F ACCIDENTS.WHILE PURGING OR VENTING AT POWER HULTI PLANT ACTION ITEM B-24.

~

The release of radioactivity through vent or purge valves from a potential large LO'CA at power has been considered generically to assure that such events do not constitute an undue hazard to the people residing around operating reactor sites. To evaluate the radiological consequences of such accidents, the following assumptions have been made:

a.

vent and purge valve isolation signals, circuitry and purge valve actuation are reliable; b.

purge system isolation valve closure times are generally sufficient to prevent the release of activity associated with fuel failures that could follow a large break (a total accident elapsed time of about 15 seconds or less);

c.

maximum allowable coolant fodine equilibrium and spiking activity limits do not exceed those contained in Standard Technical Specifications (STS);

d.

fission products generated by pipe breaks are reflective of coolant activity and fuel failures estinated using 10 CFR Part,.

50, Appendix K, analysis techniques; and e,

radiological consequences of accidents while purging or venting would be bounded by those produced by a large break.

9

~

A large number of staff evaluations of the radiological consequences of LOCA's have been performed for construction permit, operating license, operating license amendment, and Systematic Evaluation Program reviews.

In addition, a generic assessment of the amount of radioactivity that could be released while venting and purging from a spectrum of pipe breaks through the range of purge valve sizes utilized by industry has been made.

In virtually all cases, the contribution through vent or purge valves is estimated to be of the order of 2 percent, or less, of the Exclusion Area Boundary (EAB) and outer boundary of the Low Popula-tion Zone (LPZ) doses that would occur from a large break LOCA in which a source term indicative of a substantial melt of the core with subse-quent release of appreciable quantities of fission products is assumed.*

For dose assessments in which only activity in primary coolant systems would be released, or for events in which fuel failures indicative of 10 CFR Part 50, Appendix K, LOCA analyses are indicated, EAB and LPZ dose

, estimates are substant'f ally less than dose estimates made for a large break LOCA assuming a substantial fuel melt. Since the nagnitude of the vent or purge contribution to severe LOCA dose estimates is small compared to other LOCA scenarios within design bases, we conclude that the consequences of such accidents are within applicable dose-guidelines.

A generic assessment of the radiological consequences of large break accidents, including a resulting severe LOCA of the type hypothesized for site suitability purposes, while venting or purging at power indicates that the dose contribution through open valves is small.

Therefore,,the staff finds total accident radiological consequences of such accidents would be less than the dose guidelines of 10 CFR Part 100.

_