ML20029E199

Technical Support Document for Amends to 10CFR51 Considering Severe Accidents Under NEPA for Plants of Sys 80+ Design.

ML20029E199
Person / Time
Site:	05200002
Issue date:	05/06/1994
From:	ABB COMBUSTION ENGINEERING NUCLEAR FUEL (FORMERLY, ASEA BROWN BOVERI, INC.
To:
Shared Package
ML20029E198	List: ML20029E197 ML20029E199
References
NUDOCS 9405170175
Download: ML20029E199 (87)

Text

{{#Wiki_filter:.. __ \ TECHNICAL SUPPORT DOCUMENT FOR AMENDMENTS TO 10 CFR PART 51 CONSIDERING SEVERE ACCIDENTS UNDER NEPA FOR PLANTS OF SYSTEM 80+ DESIGN ABB-COMBUSTION ENGINEERING WINDSOR, CONNECTICUT I MAY 6, 1994 9405170175 940510 , PDR ADOCK 05200002 l A PDR

TECHNICAL SUPPORT DOCUMENT FOR AMENDMENTS TO ' 10 CFR PART 51 ., CONSIDERING SEVERE ACCIDENTS UNDER NEPA FOR PLANTS OF SYSTEM 80+ DESIGN Table of Contents i List of Tables ii EXECUTIVE

SUMMARY

iv

1.0 INTRODUCTION

1.1 Background 1 1.2 Purpose 3 1.3 Description of Technical Support Document 3 2.0 EVALUATIONS OF RADIOLOGICAL RISK FROM NUCLEAR POWER PLANTS 2.1 Evaluation of SAMDAs under NEPA and Limerick 4. Ecoloav Action 2.2 Cost / benefit Standard for NEPA Evaluation of SAMDAs 4 2.3 Socio-Economic Risks for Severe Accidents 5 3.0 RADIOLOGICAL RISK FROM NORMAL OPERATIONS AND SEVERE ACCIDENTS IN PLANTS OF System 80+ DESIGN . i 3.1 Radiological Risk from Normal Operations of a 7 System 80+ Plant 3.2 Severe Accidents in Plants of System 80+ Design 7 3.3 Dominant Severe Accident Sequences for Plants of .9 System 80+ Design 3.4 Overall Conclusions from Chapter 19 of the 9 System 80+ CESSAR-DC , 4.0 COST / BENEFIT EVALUATION OF SAMDAS FOR PLANTS OF PWR DESIGN 4.1 Methodology 10 4.2 Risk Reduction 10 4.3 Cost Estimates 11 t 4.4 Averted Onsite Cost 12 i 4.5 Cost Benefit Comparison 13 4.6 PRA Release Classes 13 4.7 Design Alternatives 15 5.0

SUMMARY

AND CONCLUSIONS 77

6.0 REFERENCES

80 ,

t LIST OF TABLES Table Title Page 4-1 Summary Description of System 80+ Release Classes 39 4-2 Mapping Sequences Into Release Classes 42 4-3 Ranking of Release Classes By Offsite Risk 49 4-4 Ranking of Sequences By CDF 50 4-5 Design Alternatives Considered 51 4-6 Design Alternatives Evaluated 55 4-7 Risk Reduction Evaluation for A2, 100% SG Inspection 57 4-8 Risk Reduction Evaluation for A6, Secondary Side 58 1 Guard Pipes 4-9 Risk Reduction Evaluation for B1, Alternative DC 59 Batteries & EFWS 4-10 Risk Reduction Evaluation for B2, 12-hour Batteries 60 4-11 Risk Reduction Evaluation for B3, Alternative 61 Pressurizer Auxiliary Spray , 4-12 Risk Reduction Evaluation for B4, Alternative High 62 Pressure Safety Injection , l 4-13 Risk Reduction Evaluation for B5, Alternative RCS 63 i Depressurization l 4-14 Risk Reduction Evaluation for B6, Diesel SI Pumps (2) 64 4-15 Risk Reduction Evaluation for B7, Alternative Startup 65 Feedwater System 4-16 Risk Reduction Evaluation for B8, Extended RWST Source 66 4-17 Risk Reduction Evaluation for C1, Third Diesel 67 Generator 4-18 Risk Reduction Evaluation for C2, Tornado-Protection 68 a for Combustion Turbine l 4-19 Risk Reduction Evaluation for D1, Alternative ATWS 69 , Pressure Relief Valves l l 1

                                       - ii -

l l LIST OF TABLES (continued) ) l Table Titla Pace l 4-20 Risk Reduction Evalaation for F1, Alternative 70 1 Containment Spray 4-21 Risk Reduction Evaluation for E2, Filtered Vent 71 (Containment) 4-22 Risk Reduction Evaluation for E3, Alternative Concrete 72 l Composition I 4-23 Risk Reduction Evaluation for E4, Reactor Vessel 73 j Exterior Cooling ' 4-24 Risk Reduction Evaluation for ES, Alternative H2 74 Igniters i 4-25 Risk Reduction Fvaluation for E7, MSSV and ADV 75 , Scrubbing ' 4-26 Risk Reduction Evaluation for E8, Alternative .76 Containment Monitoring System 5-1 NEPA Cost Estimate Analysis for System'80+ 79 i

                                                                           \

i l h l l l l

                                      - iii -

l l

EXECUTIVE

SUMMARY

The term " severe accident" refers to those events which are "beyond the substantial coverage of design basis events" and includes those for which there is substantial damage to the reactor core whether or not there are serious offsite consequencesm, The Nuclear Regulatory Commission (NRC), in satisfaction of its severe accident safety requirements and guidance, is requiring for new reactor designs, such as the System 80+ Standard Design, among other things, the evaluation of Design Alternatives (DAs) to reduce the radiological risk from a severe accident by preventing substantial core damage (i.e., preventing a severe accident) or by limiting releases from the containment in the event that substantial core damage occurs (i.e., mitigating the impacts of a

severe accident).

The National Environmental Policy Act (NEPA) requires the consideration of reasonable alternatives to proposed major Federal actions significantly affecting the quality of the human environment, including alternatives to mitigate the impacts of the , ' proposed action. In 1989, a Federal Court of Appeals determined that NEPA required consideration of certain Design Alternatives; namely, Severe Accident Mitigation Design Alternatives (SAMDAs). (Limerick Ecoloav Action v. NRC, 869 F.2d 719, 3rd Cir. 1989). The l court indicated that "[SAMDAs) are, as the name suggests, possible i plant design modifications that are intended not to prever.t an ) accident, but to lessen the severity of the impact of an accident 1 should one occur." Id. at 731. The court rejected the use of a policy statement as an acceptable basis for closing out NEPA  ! consideration of SAMDAs in a licensing proceeding, because, among ' other things, it was not a rulemaking. Id. at 739. Recently, the NRC staf f expanded the concept of SAMDAs to encompass Design Alternntives to prevent severe accidents, as well as mitigate them*. By doing so, the staff makes the set of SAMDAs considered under NEPA the same as the set of alternatives to prevent or mitigate severe accidents considered in satisfaction of the Commission's severe accident requirements and policy. j This document provides the technical basis for determining the status of severe accident closure under NEPA for the System 80+ design. The report concludes that there is an adequate technical basis for closure of severe accidents under NEPA for the System 80+  ; design. The basis and conclusions are expected to be codified in the form of proposed amendments to 10 CFR Part 51. The amendments would provide that: (1) For the System 80+ design, all reasonable steps have been taken to reduce the occurrence of a severe accident involving substantial damage to the core and to mitigate the consequerces of such an accident should one occur,

                                       - iv -

l I (2) No' cost-effective SAMDAs to the System 80+ design have been identified to prevent or mitigate the consequences of a-severe accident involving substantial damage to the core, and (3) No'further evaluation of severe accidents for the System 80+ design, including SAMDAs to the design, is required in any i environmental report, environmental assessment, environmental-  ! impact statement or other environmental analysis prepared in l connection with issuance of a combined license for a. nuclear  : power plant referencing the System 80+ design. l l l l l l 1

                             -v-

1.0 INTRODUCTION

1.1 Background The term " severe accident" refers to those events that are "beyond the substantial coverage of design basis events" and includes those for which there is substantial damage to the reactor core whether or not there are serious offsite consequences W . The Nuclear Regulatory Commission (NRC), in satisfaction of its severe accident safety requirements, is requiring for new reactor designs, such as the System 80+, among other things, the evaluation of Design Alternatives (DAs) to reduce the radiological risk from a severe accident by preventing substantial core damage (i.e., preventing a severe accident) or by limiting releases from the containment in the event that substantial core damage occurs (i.e. , mitigating the impacts of a severe accident). The Commission's severe accident safety requirements for new reactor designs are set forth in 10 CFR Part 52, S52. 47 (a) (1) (ii) , (iv) and (v) . Paragraph 52.47 (a) (1) (ii) references the Commission's Three Mile Island safety requirements in S50.34(f). Paragraph

52. 4 7 (a) (1) (iv) concerns the treatment of unresolved safety issues and generic safety issues. Paragraph 52.47 (a) (1) (v) requires the performance of a design-specific Probabilistic Risk Assessment (PRA) . The Commission's Severe Accident Policy Statement elaborates what the Commission is requiring for new designs. The Commission's Safety Goal Policy Statement

• sets goals and objectives for determining an acceptable level of radiological risk.

As part of its application for certification of the_ System 80+ design, ABB-CE has prepared a Standard Safety Analysis Report - Design Certification (System 80+ CESSAR-DCW). Chapter 19 of the System 80+ CESSAR-DC, "Probabilistic Risk Assessment", demonstrates how the System 80+ design meets the Commission's severe accident-safety requirements and policies. In particular, Chapter 19 includes: (1) Identification of the dominant severe accident sequences and associated source terms for the System 80+ design, (2) Descriptions of modifications that have been made to the System 80+ design, based on the results of the Probabilistic Risk Assessment (PRA), to prevent or mitigate severe accidents and reduce the risk of a severe accident, (3) Bases for concluding that "all reasonable steps (have been taken) to reduce the chances of occurrence of a severe accident involving substantial damage to the reactor core and to mitigate the consequences of such an accident should one occur," (Severe Accident Policy Statement, 50 Fed. Reg. 32,139), and 1-

 .- .        .-                    -             -   --   .  -~    - .         . - . . -.

(4) Bases for concluding that System 80+ meets the Commission's safety goals and objectives as set forth in the Safety Goal Policy Statement. l Consequently, the conclusions are drawn in Chapter 19 that further ' modifications to the System 80+ design to reduce severe accident risk are not warranted. The National Environmental Policy Act 1 (NEPA) requires the consideration of reasonable alternatives to  ! proposed major Federal actions significantly af fecting the quality R of the human environment, including alternatives to mitigate the l impacts of the proposed action. In 1989, a Federal Court of Appeals J determined that NEPA required consideration of certain Design Alternatives; .namely, Severe Accident Mitigation ~ Design i Alternatives (SAMDAs) . (Limerick Ecoloav Action v. NRC, 869 F.2d i 719, 3rd Cir.1989) . The court indicated that "[SAMDAs] are, as the name suggests, possible plant design modifications that are intended not to prevent an accident, but to lessen the severity of the impact of an accident should one occur" (Id. at 731) . The court rejected the use of a policy statement as an acceptable basis for closing out NEPA consideration of SAMDAs in a licensing proceeding, because, among other things, it was not a rulemaking (Id. at 739) . Subsequent to the Limerick decision, the NRC issued Supplemental Final Environmental Impact Statements for the Limerick and Comanche Peak facilities that considered whether there were any cost-effective SAMDAs that should be added to these facilities ("NEPA/SAMDA FES Supplements"). On the basis of.the evaluations in the supplements (called "NEPA/SAMDA evaluations"), the NRC determined that further modifications would not be cost-effective and were not necessary in order to satisfy the mandates of NEPA. In recognition of the Limeric}; decision, the Commission is requiring NEPA consideration in 10 CFR Part 52 licensing of whether there are cost-effective SAMDAs that should be added to-a new reactor design to reduce severe accident risk. While this consideration could be done later on a facility-specific basis for each combined license application under Subpart C to 10 CFR Part 52, the Commission has decided that . maintenance of -design standardization will be enhanced if this is done on a generic basis for each standard design in conjunction with design certification (SECY-91-229*) . That is, the Commission has decided to resolve the NEPA/SAMDA question through rulemaking at the time of certification in a so-called unitary proceeding, rather than in the context of later licensing proceedings. Recently, the NRC Staff expanded the definition of SAMDAs to encompass Design Alternatives to prevent severe accidents, as well as mitigate them*. By doing so, the Staff makes the set of SAMDAs considered under NEPA the same as the set of DAs to prevent-or mitigate severe accidents considered in satisfaction of the Commission's severe accident requirements and policies. ,

                                           -2  -

_m _. . . _ .. . _ _ . _ i l 1.2 Purpose l The purpose of this technical support document is to provide a basis for determining the status of severe accident closure under NEPA for the System 80+ design. The document supports a determination, which could be codified in a manner similar to the format of the Waste Confidence Rule (10 CFR S 51.23), as proposed amendments to 10 CFR Part 51. These amendments would provide that: (1) For the System 80+ design all reasonable steps have been taken to reduce the occurrence of a severe accident  : involving substantial damage to the core and to mitigate l the consequences of such an accident should one occur.  ; Additionally, all reasonable steps were taken to reduce i the radiological environmental impacts from normal j reactor operations, including expected operational i occurrences, to As Low As Reasonably Achievable ( ALARA) . 2 (See Appendix 19A of the System 80+ CESSAR-DC), (2) No further cost-effective SAMDAs to the System 80+ design have been identified to mitigate the consequences of or i prevent a severe accident involving substantial damage to the core, and (3) No further evaluation of severe accidents for the System l 80+ design, including SAMDAs to the design, is required -l in any environmental report, environmental assessment, environmental impact statement or other environmental analysis prepared in connection with issuance of a combined license for a nuclear power plant' referencing the System 80+ design. The evaluation presented in this document is modeled after that found in the NEPA/SAMDA Final Environmental Statement (FES) Supplements for the LimerickW and Comanche - PeakA facilities. Additional information concerning the radiological risk from severe accidents for the System 80+ design presented in this document is based on Chapter 19 of the System 80+ CESSAR-DC and Appendix 19A to CESSAR-DC, 1.3 Description of Technical Support Document Section 2.0 of this report provides an overview of the radiological risks from nuclear power plants and evaluations of SAMDAs under NEPA. Section 3.0 provides a NEPA/SAMDA evaluation of the radiological risks from normal operations and severe accidents for the System 80+ design. Chapter 4.0 presents the discussion and results of the cost-ef fectiveness evaluation of the potential SAMDA modifications. Section 5.0 presents the summary and conclusions, and references are included in Section 6.0. 2.0 EVALUATIONS OF RADIOLOGICAL RISK FROM NUCLEAR POWER PLANTS 2.1 Evaluation of SAMDAs under NEPA and Limerick Ecology Action Limerick Ecoloav Action stands for two propositions. First, NEPA requires explicit consideration of SAMDAs unless the Commission makes a finding that the severe accidents being mitigated are remote and speculative. Second, the Commission may not make this finding and dispose of NEPA consideration of SAMDAs by means of a policy statement. The purpose of evaluating SAMDAs under NEPA is to assure that all reasonable means have been considered to mitigate the impacts of severe accidents that are not remote and speculative. As discussed above, the Commission has indicated that it will resolve the NEPA/SAMDA issue for a new reactor design in the same proceeding, called a unitary proceeding, in which it certifies that design. The Commission's Severe Accident and Safety Goal policy statements require the Commission to make certain findings about each new e reactor design. For evolutionary designs, of which the System 80+ - is one, this must be done by the Staff in conjunction with issuance of Final Design Approval (FDA) and by the Commission in conjunction with design certification. First, the Commission must find that an evolutionary plant meets the safety goals and objectives; i.e., that the radiological risk from operating an evolutionary plant will be acceptable, meaning that any further reduction in risk will not be substantial. Second, the Commission must find that all reasonable means have been taken to reduce severe eccident risk in the evolutionary plant design. As part of the basic for making this finding, the cost-effectiveness of risk reduction alternatives of a preventive or mitigative nature must be evaluated. Chapter 19 of the System 80+ CESSAR-DC demonstrates that these findings can be made for the System 80+ design. Given the nature and findings of these severe accident and safety goal evaluations, ABB-CE believes that a sufficient basis exists for finding by rule that further consideration of severe accidents, including evaluation of SAMDAs pursuant to NEPA, is neither necessary nor reasonable. 2.2 Cost / benefit Standard for NEPA Evaluation of SAMDAs The Limerick decision interpreted NEPA to require evaluation of ) SAMDAs for their risk reduction potential. In implementing the court's decision, the NRC considered the cost-effectiveness of each candidate SAMDA in mitigating the impact of a severe accident, using the $1,000 per person-rem averted standard. This standard is a surrogate for all offsite consequences. 1 The basic approach in this study is to rank the SAMDAs in terms of  ; their cost-effectiveness in mitigating the impact of a severe  !

                                  -4   -

1 accident. The criterion applied is the $1,000 per person-rem averted standard, which is what the Commission has historically used in distinguishing among, and ranking, Design Alternatives, including SAMDAs. The Commission has used this standard in the context of both safety and NEPA analyses. For example, in the context of safety analysis, the standard has been used to perform evaluations associated with implementation of 10 CFR Part 50, Appendix I; the Safety Goal Policy Statement; the Severe Accident Policy Statement; and S 50.34 (f) requirements. In the context of environmental analysis, it has been used in the Limerick and Comanche Peak NEPA/SAMDA FES Supplements" and in NUREG-14370 As indicated above, the Commission is preparing a Generic Environmental Impact Statement for License Renewal of Nuclear Plants. The draft statement, NUREG-1437, makes clear that the use of this standard in the evaluation of severe accident risk reduction alternatives, which include SAMDAs, is acceptable (see NUREG-1437, p. 5-108). Additionally, Appendix I determinations are used to satisfy NEPA requirements with respect to radiological impacts from normal operations. On the basis of these considerations, the cost / benefit ratio of

        $1,000 per person-rem averted is viewed as an acceptable standard for the purposes of evaluating SAMDAs under NEPA.

2.3 Socio-Economic Risks for Severe Accidents As discussed above in Section 2.2, the Commission uses the

        $1,000/ person-rem averted standard as a surrogate for all offsite consequences W However, Environmental Impact Statements (EIS) for nuclear power plants provide separate, general discussions of the socio-economic risks from severe accidents. In keeping with this precedent, ABB-CE is providing a general discussion of socio-economic risks for the System 80+ design, based in large measure on the discussion of such risks in NUREG-1437.

The term "socio-economic risk from a severe accident" means the probability of a severe accident multiplied by the socio-economic impacts of a severe accident. "Socio-economic impacts," in turn, relate to offsite costs. The offsite costs considered in . NUREG-1437 are: Evacuation costs Value of crops or milk contaminated and condemned Costs of decontaminating property where practical Indirect costs due to the loss of the use of property or incomes derived therefrom (including interdiction to prevent human injury), and Impacts in wider regional markets and on sources of supply outside the contaminated area.

NUREG-1437 estimated the socio-economic risks from severe- , accidents. The estimates were based on 27 FESS for nuclear power plants that contain analyses considering the probabilities and consequences of severe accidents. For these plants, the offsite costs were estimated to be as high as $6 billion to $8 billion -dollars for severe accidents with a probability of once in one million operating years of occurring. Higher costs were estimated for severe accidents with much lower probabilities. The projected cost of adverse health effects from deaths and illnesses were estimated to average about 10-20% of offsite mitigation costs and were not included in the $6-$8 billion dollar estimate. Another source of costs, which NUREG-1437 indicated could reach into the billions of dollars, was costs associated with the termination of economic activities in a contaminated area, which would create adverse economic impacts in wider regional markets and sources of supplies outside the contaminated area. The predicted conditional land contamination was estimated to be small (10 acres / year at most). NUREG-1437 provides the bases for concluding that the socio-economic risks from severe accidents are predicted to be small and the residual impacts of severe accidents so minor that detailed consideration of mitigation alternatives is not warranted (56 Fed. Reg. 47,016, 47,019, 47,034-35, September 17, 1991). i l I 3.0 RADIOLOGICAL RISK FROM NORMAL OPERATIONS AND SEVERE ACCIDENTS IN PLANTS OF SYSTEM 80+ DESIGN 3.1 Radiological Risk from Normal Operations of a System 80+ Plant Sections 50.34a and 50.36a of 10 CFR Part 50 require, in effect, that nuclear power reactors be designed and operated to keep levels of radioactive materials in gaseous and liquid effluents during normal operations, including expected operational occurrences, "As Low As Reasonably Achievable (ALARA)". Compliance with the guidelines in Appendix I to 10 CFR Part 50 is deemed a conclusive showing of compliance with these ALARA requirements. In addition to specifying numerical limits, Appendix I also requires an applicant to include in the radwaste system "all items of reasonably demonstrated technology that, when added to the system sequentially and in order of diminishing cost / benefit return, can, for a favorable cost / benefit ratio, affect reductions in dose to the population reasonably expected to be within 50 miles of the reactor." The standard to be used in making this assessment is the cost / benefit ratio of $1,000 per person-rem averted. The System 80+ design complies with the guidance of Appendix I, as documented in Chapter 12 of the System 80+ CESSAR-DC. Consequently, further consideration of alternatives to reduce the radiological risks from normal operation of a plant of System 80+ design is not , warranted in order to satisfy NEPA. Moreover, the radiological  ; impacts from normal operation of a System 80+ standard plant are environmentally insignificant. Non-radiological impacts from operation of a System 80+ plant include those from' the site-specific circulating system that j removes heat from the reactor (e.g. , cooling towers, cooling lakes, 2 etc.), intake systems for the water in the circulating systems, discharge systems for the water in the circulating system, biocide treatment in circulating water to prevent fouling by organisms, chemical waste treatment and disposal, sanitary waste treatment system, and electrical transmission facilities. Each of these systems is part of that portion of the System 80+ design that is not being certified because it is site-specific, although it may 1 interface with the certified portion. It may be appropriate to  : consider DAs for non-radiological systems under NEPA. However, the choice of alternative will not have an effect on that portion of l the System 80+ design that is being certified. 3.2 Severe Accidents in Plants of System 80+ Design Chapter 19 of the System 80+ CESSAR-DC, "Probabilistic Risk l Assessment," establishes that the Commission's severe . accident I safety requirements have been met for the System 80+ design, including treatment of internal and external events, uncertainties, , performance of sensitivity studies, and support of conclusions by appropriate deterministic analyses and the evaluations required by 5 l 1 l

l l 1

                                                                         ]

10 CFR 550.34 (f) . It also establishes that the Commission's safety goals have been met. Specifically, the following topics were addressed in Chapter 19: (1) Consideration of the contributions of internal events (Section  ; 19.4), Shutdown events (Section 19.8) and external events (Section 19.7) to severe accident risks, including a seismic risk analysis based on the application of the seismic margins methodology (Section 19.7.5), (2) Identification of the System 80+ dominant accident sequences, (3) Identification of severe accident risk . reduction features which were included in the System 80+ design to achieve accident prevention and mitigation (Section 19.15.1), and (4) Consideration of additional modifications, evaluated in accordance with S50.34 (f) (1) (Appendix 19A). Appendix 19A of CESSAR-DC presents the bases for concluding that further modifications to the System 80+ design are not warranted in order to reduce the risk of a severe accident through the addition of design features to prevent or mitigate a severe accident. Chapter 19 of CESSAR-DC addresses how the goals of the Severe Accident Policy Statement have been met for plants of System 80+ design. These goals include: Prevention of core damage, Frevention of early containment failure for dominant accident sequences, Evaluation of the effects of hydrogen generation, Heat removal to reduce the - probability of containment failure, Prevention of hydrogen deflagratior. and detonation

• Offsite dose, and Containment conditional failure probability.

Specific conclusions concerning severe accidents for the System 80+ design based on the Chapter 19 evaluations are as follows: (1) Core Damace Frecuency. The System 80+ total core damage frequency, including the scoping values for fire and flood, was determined to be 2.8E-6 per reactor year (Table 19.15.4-2 ). (2) Conditional Containment Failure Probability. The conditional containment failure probability was shown to be 0.02 (Section 19.12.2.3). This is significantly below the goal of 0.1, (3) Probability of Larae Offsite Dose. The probability of exceeding a whole body dose of 25 rem at a distance of one-I I half mile from the System 80+ design site boundary was I determined to be less than 5.3E-8 per reactor year (Section 19.13), and (4) Residual Radiolocical Risk. Residual radiological risk from severe accidents in plants of System 80+ design is summarized in Table 19A.4-3 of Appendix 19A of CESSAR-DC. The cumulative exposure risk to the population within 50 miles of the plant of System 80+ design site boundary is approximately 16.9 1 person-rem for an assumed plant life of 60 years.  ; 3.3 Dominan't Severe Accident Sequences for Plants of System 80+ Dr, sign In performing the Probabilistic Risk Assessment (PRA) for the i System 80+ design, many severe accident sequences were identified and evaluated . For each sequence, the analysis identified an initiating event and traced _the accident's progression to its end. j For sequences involving core damage, conditional containment  ! failure probabilities and offsite consequences.were estimated. The  ; accident scenarios were binned according to radiological release (source term) parameters, and twenty-three release classes were , defined and quantified. The dominant cases in terms of offsite i risk are containment bypass sequences. Table 19A.4-1 of Appendix l 19A of CESSAR-DC defines the release classes. The complete l radiological consequence analysis of the dominant sequences can be found in Section 19.11 of CESSAR-DC. ABB-CE believes that the severe accident analysis in Chapter 19 of j CESSAR-DC provides a sufficient basis for the Commission to find i that System 80+ core damage sequences that are not dominant can be  ! deemed remote and speculative. 3.4 Overall Conclusions from Chapter 19 of CESSAR-DC l The specific conclusions about severe accident risk discussed above ' l support the overall conclusion that the environmental impacts of severe accidents for plants of System 80+ design represent a low risk to the population and to the environment. For the System 80+ design, all reasonable steps have been taken to reduce the occurrence of a severe accident involving substantial damage to the . core and to mitigate the consequences of such an accident should ' one occur. No further cost-effective modifications to the system 80+ design have been identified to reduce the risk from a severe accident involving substantial damage to the core. No further evaluation of severe accidents for the System 80+ design is required to demonstrate compliance with the Commission's severe accident requirements or its policy or safety goals. 4.0 COST / BENEFIT EVALUATION OF SAMDAS FOR PLANTS OF SYSTEM 80+ DESIGN Appendix 19A of the System 80+ CESSAR-DC considered whether the System 80+ design should be modified in order to prevent or mitigate the consequences of a severe accident in satisfaction of the NRC's severe accident requirements in 10 CFR Parts 50 & 52 and the Severe Accident Policy Statement. The cost / benefit evaluation of SAMDAs to plants of System 80+ design used the expanded definition of SAMDAs set forth in NUREG-1437, i.e., DAs that could prevent and/or mitigate the consequences nf a severe accident. 4.1 Cost / Benefit Standard for Evaluation of System 80+ SAMDAs As discussed in Section 2.2 above, the cost / benefit ratio of $1,000 per person-rem averted is viewed by the NRC and the nuclear industry as an acceptable standard for the purposes of evaluating SAMDAs under NEPA. This standard was used as a surrogate for all of fsite costs in the cost / benefit evaluation of SAMDAs to plants of System 80+ design. Averted Onsite costs (AOCs) were incorporated 1 for SAMDAs that were at least partially preventive in nature. Onsite costs resulting from a severe accident include replacement  ; power, onsite cleanup costs, and economic loss of the facility. The 1 equation used to determine the cost / benefit ratio is: Cost / Benefit = [ cost of SAMDA - (60v

• AOC/vil Ratio ($/per.-rem) 60y
• reduction in-person-rem /y A plant lifetime of 60 years was assumed to maximize the reduction in residual risk. This equation neglects any additional costs associated with the maintenance and testing of the additional DAs.

It also neglects the time effect on the cost of capital. Assessments of AOCs are provided for information only. It is ABB-CE's position that the NRC is not required to account for these costs. The Design Alternative evaluation followed the format and procedure used by the NRC in evaluating DAs for LimerickW. The-DAs were evaluated in terms of cost / benefit where the cost of the additional equipment is compared with the savings in terms of a reduced exposure risk to the general population in person-rems per year. The risk of the base System 80+ design is described in Section 19.15 of CESSAR-DC. 4.2 Risk Reduction Risk (person-rem / year) in this analysis is the product of the frequency of core damage for each type of accident (events /y) times the consequence of the accident (person-rem / event) . The total risk is the sum of the risks from all types of accidents. For each DA, I the reduction in total risk is the difference between the risk of the base System 80+ design and the risk with the DA added. Risk is defined as the product of frequency and consequence. The l frequency of core damage for various accident sequences are ' calculated. These sequences are then grouped (" binned") into release classes depending on the timing of the accident and the conditions of the core, vessel, containment, and release characteristics for the sequence. Each DA is evaluated in terms of , l how it might affect each release class. 'For this analysis it is assumed that each DA is perfect, that is, if ins'alled it eliminates all failures associated with the systems for which it is designed to be an alternative or addition. This implies that each DA is also tied to perfect support systems. This is a conservative < upper limit approach since it overestimates the benefits associated with any design addition. If a DA is cost beneficial using this , screening approach, then a more detailed analysis could be ' performed. The DAs can be divided into two groups. One group prevents core damage and the other group protects the containment or reduces the releases. For the DAs that prevent core damage, the frequency of l affected release classes was decreased based on the sequences that i were binned and the risk reduction was calculated. For example, an Alternative Pressurizer Auxiliary Spray (DA B3) is assumed to , eliminate all core melt risk of a Steam Generator Tube Rupture I (SGTR) by always getting the plant depressurized and into shutdown I cooling. Therefore, the frequency of core damage for the Plant Damage States (PDSs) with failure to cooldown aggressively was reduced to zero and a risk reduction was calculated. Some DAs protect the containment or reduce the amount of radioactive material that is released in an accident. These DAs reduce the consequences of the accident and, therefore, reduce the , risk (risk = frequency x consequence). Using the S80SOR, a j modified version of the ZISOR Code, the consequence in terms of  ; dose to the general population is calculated for the ALWR site. j The ALWR site was described in the May 1989 version of the KAGM and 1 was to represent 80% of the potential sites. The site was an existing site in South Carolina with the population increased to l represent most potential sites". For DAs that prevent containment failure, the releases were assumed to be reduced to zero, and the risk was reevaluated. 4.3 Cost Estimates l In order to evaluate the effectiveness of the DAs, the benefits were compared to the costs of the DAs. Conservatively low cost estimates were made for each potential modification. These costs represent the incremental costs that would be incurred in incorporating the alternative in a new plant. The cost estimate for each of the modifications is given where the modification is , discussed. j I

. . . . - . . - ~ - . .- . The cost estimates were intentionally biased on the low side, but all known or reasonably expected costs were accounted for in order that a reasonable assessment of the minimum cost would be obtained. Actual plant costs are expected to be higher than indicated in this evaluation. All costs for the DAs are in 1993 U.S. dollars. The analysis presented here conservatively neglects any annual costs associated with the operation of the DAs. These DAs would have to be tested and maintained at regular intervals. Regular training would also be required. In a more detailed analysis, such costs would be converted to an annual cost and be used to reduce the annual benefits. 4.4 Averted Onsite Cost For the plant modifications that reduced the Core Damage Frequency (CDF), the annual benefit was increased by an amount proportioned to the present worth of the reduction in risk of Averted Onsite Costs (AOCs) and dose reduction to the general public. Modifications that reduced the probability of containment failure, or reduced the amount of fission products leaving the site, were assumed to have no significant AOC reduction. AOC included replacement power costs, direct accident costs (including cleanup) , and the economic loss of the plant. Credit is given for property and replacement-power insurance. Evaluation of the AOC includes the following considerations:

1) The replacement power costs used ($386,000/ day) is a replacement power cost for the Palo Verde Reactor (a System 80 plant) averaged for 1993 as predicted by ANLa2) ,

This cost is applied for a three-year period because it is assumed that the utility will contract with another producer prior to expiration of that period for power at a comparable cost as that incurred for the nuclear plant. Currently, Independent Power Producers (IPPs) can build new facilities in approximatelly 12 months and IPP capacity and energy rates are competitive relative to nuclear plant rates. Therefore, a three-year replacement power period is a reasonable assumption. Replacement power costs are estimated at $423 Million (M) per year but will be partially offset by total replacement power insurance of $365MG3) .

2) Direct accident costs, including cleanup costs, were assumed to be $2 Billion (B). This is partially offset by the p23,m.rimary

       $1.625B         Most and new,excess large nuclear-property insurance plants and publicly       of owned plants carry the maximum amount of coverage.              The NRC requires the plant owners to carry over $1B of private coverage.

I i 1

3) The economic value of the facility at the time of the accident was calculated assuming that the initial plant invested cost was $1.4B based on DOE cost guidelines. It is also assumed that a straight line depreciation value is used over a twenty-year period and the accident is equally probable during any year in the plant's sixty year life. The economic value of the plant averages

        $233M and is assumed lost,           The inclusion of both the        j value of the plant and its output (replacement power) is              )

conservatively exaggerate the size of the AOC. 1 The total AOC is estimated at $666M. This figure neglects the credits for premature decommissioning insurance and/or elimination of annual capital expenditures. Such credits would further reduce the AOC. 4.5 Cost Benefit Comparison As described in Section 4.2, the benefit of a DA is a risk reduction, which was evaluated in terms of reduced exposure of the general population (in units of person-rem /y). The cost of additional equipment is in dollars, a one-time initial capital cost. To compare these two numbers, a common measure must be used. In this analysis, the risk reduction was converted to a single capital benefit which can be directly compared with the capital-cost. The benefits of a particular DA were defined as the risk reduction to the general public. offsite factors evaluated were limited to whole body dose to the general public. Consistent with the standard used by the NRC to evaluate radiological impacts, health and economic effects costs were evaluated based on a value of

 $1,000 per offsite person-rem averted" due to the design modification.

The offsite costs for other items, such as relocation of local residents, elimination of land use and decontamination of ' contaminated land are considered as part of the $1000/ person-rem figure. Economic losses, replacement power costs and direct accident costs incurred by the plant owner are not considered-in this evaluation. 4.6 PRA Release Classes In assessing the risk reduction of each DA, the potential for each DA to reduce the frequency of occurrence or the consequence of each Release Class (RC) is assessed. To do this, an understanding of-each RC is required. In Section 19.12 of CESSAR-DC, the containment event analysis describes the possible accident pathways in a Containment Event Tree (CET). This CET was developed so that each end point of an accident sequence uniquely specified the mode of containment

d failure and the status of the various phenomena which have the potential to affect the source term characteristics. Therefore, each of the accident end points is a distinct release class. A release class (RC) can be fully characterized by the-following parameters: A) Its frequency of occurrence, B) the-isotopic content and magnitude of the release, C) the energy of the release, D) the time of the release, E) the duration of the release, and F) the location of the release. The RC frequency is determined directly from the cumulative frequency for its rapective Containment Event Tree end point. The location of the release was assigned as follows:

1) For overpressure containment failure RCs, the release was assumed to occur at the top of the containment building. This is at an elevation of 52.8 meters above grade,

2) For containment bypass RCs init1 ' ed by an interf acing systems LOCA and for containment melt-tarough RCs, the release from containment occurs in the region of the auxiliary building located below the containment sphere. The actual release to the environment occurs at grade level, and

3) For all other RCs, the releases are assumed to occur at grade level.

S80SOR analyses were used to determine the isotopic content and magnitude of the source term and the time of the release. In general, releases were calculated for a period of 24 hours from the time of containment failure or from the time of vessel failure for containment bypass and containment isolation failure RCs. Table 4-1 presents a brief description for each release class with i a frequency greater than or equal to 1.0E-10. This table is used I to identify the effect of mitigation equipment (more details of l cach RC is given in Section 19.12.3). Table 4-2 gives the mapping 2 of each PDS into each release class. Also given in this table are  ! the mapping of the Core Damage Frequency (CDF) sequences.into the l PDSs. In addition, the description of each sequence and the sequence CDF is also presented. This table is used to reduce each RC frequency (column 2 of Table 4-2) for preventative DAs. The sequence CDF (last column of Table 4-2) was used to calculate the risk reduction associated with DAs that prevent core damage. It was assumed that any preventive DA would completely eliminate l the sequence that the DA would address. For example, a Safety Injection DA would reduce the RC1.1E by 55%. Safety Injection System (SIS) failure appears in five of the sequences with a total 1 I

                                                                          ., ~- l

sequence frequency of 6.63E-7. The sum of all the sequences 1 contributing to RC1.1E is 1.21E-6 and, therefore, the DA is assumed l to reduce this RC by 55% (6.63E-7/1.21E-6). Each release class is i evaluated in this manner for each preventive DA. l l Table 4-3 gives the ranking of the release classes in terms of risk l to the general population (mr/y). It also gives the base l frequency, and population dose for each RC that is used in the risk ' reduction analysis. The first three sequences are associated with  ! Steam Generator Tube Ruptures (SGTRs). This table, in conjuction with the previous two tables, was used in selecting the DAs because i it highlights the importance of the failure modes. Table 4-4 gives l the ranking of the Level I sequences in terms of CDF. This table  ; is useful for selecting DAs for preventing core damage. l l Each release class was evaluated for total person-rem exposure  ! using MACCSUD. Table 4-3 gave the initiating frequency, and total  ! person-rem dose for the twenty-three release classes with initiating frequencies greater than 1.0E-10. The lifetime doses were calculated for people within 50 miles of the site and assumes the evacuation strategy used in NUREG-11500M. The risk for each release class is the product of frequency (events / year) times the total person-rem exposure per event. This product gives person rem per year and is a measure of risk. The total risk of the dominant

                                                                     )

release classes is 0.135 person-rem /y. These results are for the ALWR site which is representative of most of the current U.S. sites"*. l Table 4-1 summarizes the accident characteristics for each release class. These are the dominant sequences of the binned accidents. For each DA, the release class was reviewed assuming that the DA  : worked perfectly (failure rate = 0.0). This means that each DA had  ! perfect support systems, power supplies and heat sinks. In l addition, for each DA, no other failure modes were considered when i the DA was employed. For example, when the Pressurizer Auxiliary Spray DA is employed to ensure that the primary coolant pressure can be decreased to enter SCS operation, the Shutdown Cooling j System (SCS) is assumed always to work. This represents an upper j limit scoping analysis and maximizes the benefit of each DA. If a 1 DA is cost beneficial in this analysis, then a more detailed I analysis addressing the actual failure rate of the DA can be undertaken. ' 4.7 Design Alternatives i l Potential modifications to the System 80+ design were derived from 1 a survey of the dominant failure modes shown in Table 4-1 through Table 4-4. Others were suggested by the PRA or the design engineering staff. Some of the DAs were suggested by a foreign utility interested in System 80+ design. . Table 4-5 gives the DAs considered and shows how they were treated. I l l

l l The risk reduction values of twenty-seven DAs were quantified. These were selected based on the SAMDAs for the Limerick plant *, Comanche Peak SAMDAO, NUREG/CR-4920", GI-163*, and a review of the 1 dominant failure modes for the System 80+ plant. In addition,  ! suggestions from ABB-CE personnel with technical expertise in I containment response were employed. Design Alternatives from earlier plant studies were also considered. ) The Design Alternatives can be divided into five groups (see Table I 4-6). The first four groups prevent core damage by: A) Increase primary and secondary boundary integrity, B) Increase decay heat removal reliability, C) Improved electrical power reliability, and D) General reduction of CDP. l l The fifth group protects the containment or reduces the releases: E) Reduce Radioactive Releases. For the DA that prevents core damage, the frequency of affected release classes is reduced by the fraction that the sequence contributes to the RC, and the total risk reduction is calculated. This group includes the high capacity Safety Injection System l (SIS), improved DC Battery and Emergency Feedwater System (EFWS), Anticipated Transients Without Scram (ATWS) Pressure Relief Valves, improved Pressurizer Auxiliary Spray,_ improved Primary Depressurization System, and alternative RCP Seal Cooling System. At the beginning of the design process, it was recognized that steam generator integrity was important to safety and plant economics. The risk of a SGTR in the System 80+ design is two orders of magnitude below current plants, but SGTR-nevertheless represents over half the offsite risk. System 80+ is designed to prevent Main Steam Safety Valve (MSSV) actuation following SGTR, as described below, and also includes new or enhanced features for the prevention of SGTRs. Features to prevent SGTRs include: Steam generator tubes made of thermally treated Inconel 690, which has favorable corrosion resistance properties including superior resistance to primary and secondary stress corrosion cracking, A deaerator in the condensate /feedwater system for removal of i oxygen, Condensate system with full flow condensate polisher to remove dissolved and suspended impurities,

I

                                                                      -l l

Main condenser with provisions for early detection of tube i leaks, and segmented design permitting repair of leaks while operating at reduced power, Steam, feedwater and condensate generator blowdown system and i steam generator secondary side recirculation system for chemistry control during wet layup, and N-16 monitors to provide early detection and an opportunity to shutdown prior to SGTR. The response to Unresolved Safety Issue A-4 (Chapter 20 of CESSAR-DC) further describes design features to assure steam generator (SG) tube integrity. New or enhanced System 80+ features which ' help to mitigate SGTRs include: Larger steam generator secondary volume, Larger pressurizer, Four train Safety Injection System, Four train Emergency Feedwater System, Electrical system upgrades including alternate AC combustion turbine and 8-hour batteries, Safety Depressurization and Vent System, Component Cooling Water System upgrade to four 100% capacity pumps and heat exchangers, , Highly reliable Turbine Bypass System, discharging all steam to condenser, not partially to atmosphere as in earlier designs, Radiation monitors on the steam lines, and N-16 monitors for the steam generators. The System 80+ design meets the Electric Power Research Institute's (EPRI's) ALWR requirement of preventing MSSV actuation following a SGTR. A reactor trip on high SG water level, actuation of the Turbine Bypass System and controlled depressurization of the RCS using the Reactor Coolant Gas Vent System (RCGVS) limit secondary side pressure below the MSSV setpoint. The turbine bypass valves discharge steam to the main condenser, which minimizes the radioactive release to the environment. The intent of the EPRI Advanced Light Water Reactor Utility Requirement Document (ALWR URDM) was to meet the above requirement on a best-estimate basis (i.e., credit for operator action and use of control-grade equipment is acceptable) to provide an effective and economical design.

l l l l 1 The consequences of a SGTR with Loss of Offsite Power (LOOP) where the containment is bypassed due to malfunction of an Atmospheric 1 Dump Valve (ADV) has been analyzed and presented in Section 19.15.6.3.3 of CESSAR-DC. The analysis simulated a-double-ended break of one SG tube and calculated the worst-case releases for an SGTR event with LOOP and a stuck open ADV on the affected steam i generator. The analysis contained conservative assumptions regarding atmospheric dispersion factors, initial RCS and SG activity levels, and iodine spiking. Mitigating operator actions i based on the approved ABB-CE Emergency Procedure Guidelines (EPGs) , CEN-152, were sinulated. The analysis s howed that no fuel failures were expected for this event. The ADV on the affected SG was assumed to stick open when the l operator tried to reseat the ADV to isolate the affected SG. After  ; 30 minutes of steaming through the stuck-open ADV, the operator i isolated this path by closing the ADV block valve. However, the leak of RCS liquid through the tube break continues for the duration of the analysis (8 hours) due to the conservative nature l of the analysis models. In order to avoid overfilling the SG, the l operator periodically steams from the affected SG per the EPGs.  ! This additional steaming increased the total radiation dose. The total releases are well within regulatory limits. An additional analysis was performed that looked at SGTRs that are beyond design bases (27) . This analysis looks at failure of up to five tubes in a SG concurrent with a stuck open MSSV. The analysis credits the Turbine Bypass Control System and shows that the y operator has thirty minutes to take action before the MSSVs lift. l This analysis also evaluated eleven design changes including; i automatic bypass of Main Steam Isolation Signal (MSIS) on high SG level, automatic initiation of Auxiliary Pressurizer Spray, and automatic opening of the Reactor Coolant Gas Vent System (RCGVS) valves. The referenced report contains a technical discussion of the advantages and disadvantages of each modification and concluded that none of them are worth including in the design. It was recognized that the SGTR event represented a significant fraction of the offsite risk and, therefore, DAs were selected specifically to address these sequences. These DAs include the Alternative Pressuriz.er Auxiliary Spray, Ideal 100% SG inspection, MSSV and ADV Scrubbing, Alternative SIS, and Diesel SIS Pump. The last two DAs address failure to inject for RC4.30E. DA B8 specifically addresses refilling the Refueling Water Storage Tank (RWST) during a SGTR. Secondary side guard pipes (DA A6) are also evaluated.  ;

I l I A. INCREASE PRIMARY AND SECONDARY BOUNDARY INTEGRITY i This group of Design Alternatives were grouped because they address primary or secondary coolant boundary integrity. Al RCP SEAL COOLING The System 80+ employs a type of Reactor Coolant Pump (RCP) seal which can withstand a loss of cooling and not result in a LOCA. This type of seal design has been employed in the operating ABB-CE plants and experience has shown that the seals do not fail when seal cooling is lost". The reliability of the reactor coolant pump seal cooling could be improved by adding a small dedicated positive displacement pump for diverse seal injection. This design addition will provide additional diversity for RCP seal cooling and provide a seal cooling system that is not dependent on CCW. Such a RCP seal cooling pump has been added to the System 80+ plant as a result of NRC's questions on testing of the RCP seals and, therefore, a cost / benefit analysis is not needed. < A2 100% 3G INSPECTION Inspection of 100% of the tubes in a steam generator is not really a DA but is a maintenance practice. Inspection was selected because it has reasonable costs, and can be executed with a management decision. This DA was introduced to specifically address a SGTR, which is the initiating event for the largest three  ! RCs. The analysis assumes that all SGTRs are eliminated. This reduces the risk due to a SGTR in the System 80+ design for six RCs (Table 4-7) . Using a $1,000 per averted person-rem and a levelized cost rate of 16.6%, such a system would be cost beneficial if it cost less than $941. The increased cost of performing eddy current testing on 100% of the steam generator tubes compared to a 20% random inspection of the steam generator tubes is $1.5 million per refueling outage. Assuming an eighteen month refueling, this would cost $1.0M/y, or be equivalent to a capital cost of $5.59M. A3 N-16 MONITORS N-16 monitors have been added to the System 80+ design. Their purpose is to assist the operators in identifying SGTR events. They also helps prevent SGTR by offering an alternative method on detecting a leaking tube before rupture occurs. This DA was not quantified since it has been included in the design. A4 INCREASE SECONDARY SIDE PRESSURE Upgrading the design pressure of the secondary system, including the MSSVs, to 1500 psia from the current 1200 psia was considered > early in the System 80+ design process. It was determined that an increased design pressure would not significantly reduce the

 ..   ._         .      _    .      -  ~

1 probability of containment bypass and release to the environment during a SGTR event. During a SGTR with loss of offsite power, the condenser is not available for plant cooldown. The decay heat of the core and the stored energy in components are released to the atmosphere via the MSSVs, then via the ADVs. The steaming will continue until reaching Shutdown Cooling System (SCS) entry conditions. The total heat to be removed (or the total steam release) is only slightly reduced by increasing the secondary design pressure and MSSV setpoints. Hence, using conservative safety analysis assumptions and methods, the overall radiation release would be essentially unchanged. During a SGTR with offsite power available, the operator will act to mitigate this event according to the _ Emergency Procedures Guidelines, using both control grade and safety grade equipment, if required. Therefore, for a "real-world" scenario, an increased design pressure would not significantly decrease the likelihood of lifting the MSSVs. There are several technical disadvantages of increasing the secondary system design pressure to 1500 psia:

1. Steam generator weight would increase by up to 100 tons each.

The added weight would increase containment heat sinks and increase thermal stresses on the steam generator shell and main steam piping. These factors would likely impact the volume and arrangement of the containment. The additional weight would also increase the handling difficulties during fabrication;

2. The RCS support system would need to be redesigned and/or reevaluated to accommodate the increased loads. Any contribution to containment sizing must also be assessed;

3. For decreased heat removal events, RCS temperature and pressure would rise to a higher value than in current plants.

Pressurizer safety valve actuation would be more likely;

4. Unless the entire steam system and turbine are upgraded to 1500 psia, a second set of secondary side relief valves would be required dovnstream of the Main Steam Isolation valves (MSIVs) to protect the low pressure portion of the steam system; and

5. Feedwater systems would have to be compatible with the higher design pressure. Increasing secondary design pressure would require a major redesign effort and increase design complexity,which are not consistent with the evolutionary ALWR design goals.

In summary, including an upgrade to the secondary side design pressure was considered from design considerations. Based on this review, this DA poses serious design drawbacks with limited benefits. A cost benefit analysis was not performed for this DA because very limited benefits were expected for extensive costs. AS PASSIVE SECONDARY SIDE COOLERS Secondary heat rejection for System 80+ has been considered at the conceptual level . Passive secondary heat rejection was included in the conceptual design for SIR, a much smaller plant. The passive secondary heat rejection concept that is often discussed consists of an elevated condenser designed to full secondary side pressures. The heat sink for this condenser can be either water or air. If the heat sink is water, there is an elevated water tank that supplies water to the condenser and water is allowed to boil to the atmosphere. Use of air in natural circulation results in a large increase of the surface area of the condenser but it has the potential of continuous long term operation without support. The water tank concept requires a periodic refill. The base system is relatively simple. However, several supporting functions are required to initiate the system. Isolation of the affected steam generator will be required, otherwise one must assume the entire cooling loop will go water solid with pressures equal to RCS pressure. An alternative is to have a continuous drain system that maintains a suitable free surface in the steam generator. This requires coordination with the RCS makeup system. Control of cooldown rates is expected to be required, adding additional complexity. Heat rejection capacity suf ficient to avoid early releases is expected to result in excessive cooldown rates later. While simple in concept, the implementation of secondary closed loop cooling is expected to require major changes in the plant structures. A workable system will be more complex than the conceptual presentations being offered. Because of the redundancies in the current System 80+ design, and the potential high cost of this DA, this DA was not further studied.  ! j A6 SECONDARY SIDE GUARD PIPES The secondary side guard pipe was proposed to address a Main Steam Line Break (MSLB) outside containment. This event is postulated to l trigger multiple steam generator tube failures which could then result in a core melt because of depletion of coolant inventory. This sequence also bypasses the containment. The guard pipe would extend from the containment to the MSIVs and would be designed to prevent depressurization, given a MSLB in the specific aection of pipe. MSLB represented 0.5% of the CDF for System 80+. It was assumed that this DA would halve the risk associated with Interfacing Systems LOCAs (RCS.1E) and halve the risk associated with all steam line break sequences because it is assumed that half

of the lengths of main steam lines are guarded. Table 4-8' quantifies the risk reduction value of this DA. Using a $1000 per averted person-rem and a levelized capital cost of 16.6%, such a modification would.te cost beneficial if it cost less than $4.40. The cost for the guard pipes was taken from GI-16304 and adjusted for the different number and size. The original estimate of $1.1M was for a four loop plant. Since the System 80+ has four steam lines leaving the two SGs, this estimate was used for the DA analysis. The final cost of $1,100,000 was used in this analysis. This cost neglects the increased inspection and maintenance cost of the main steam lines because they are no longer accessible. A7 M TOMATIC OVERPRESSURE PROTECTION ABB-CE conducted an extensive evaluation of the System 80+ standard design to respond to Interfacing System LOCA (ISLOCA) challenges to address the (NRC) Staff concerns raised in SECY-90-016 and SECY-93-087. ABB-CE and the Staff worked closely in the development of an acceptance criteria and performance of a system-by-system evaluation of ISLOCA challenges. The evaluation was documented in art ABB-CE special report, which has been incorporated as Appendix SE in CESSAR-DC. Table 2-1 of Appendix SE summarizes the ~ design changes made to achieve ISLOCA responses acceptable to the Staff. Section 4 of Appendix SE presents the evaluation of DAs and rationale for the selected design approach for each potential ISLOCA pathway. Section 5 of Appendix SE presents the Nuplex 80+ indication and control availability requirements supporting ISLOCA detection and diagnosis. Since this issue has been designated by the Staff as technically resolved, no further evaluation or reporting will be provided. A8 DIGITAL LBLOCA PROTECTION The likelihood of Plant Protection System (PPS) or Engineered Safety Feature (ESP) component system failure has been made extremely low through redundancy, hardware qualification, and a ' rigorous quality assurance program which has been reviewed by the NRC (Section 7.2.1.1.2.5). Large Break LOCAs represent only 6.6% of the CDF, and steam line breaks represent 0.5% of the CDP. These events are not major contributors to offsite risk because they tend to be inside the containment. Therefore, only minor benefits in terms of public risk would be expected. The Large Break LOCA I (LBLOCA) and steam line break within containment events can be ) assured through operator action in response to symptoms of l precursor leakage (Leak Before Break, LBB). The instrumentation j available to detect the leakage includes: Acoustic leak monitoring system alarm and trending, Containment Temperature Level, Containment Radiation, and

offsite power from 0.081 to 0.031M, a 38% improvement. In terms of risk reduction benefits, this DA reduces the risk of two RCs (Table 4-10) and would have an equivalent capital value of $4. Increasing the current battery size to accommodate a 12-hour duty cycle for station blackout loads rather than an 8-hour duty cycle would require more plates per cell (minimum of 25% increase). Preliminary estimates show that the existing 8-hour duty cycle requires a large number of plates per cell (assuming 60 cell battery). Therefore, a 25% increase in plates per cell may exceed the number of plates that can be placed in a typical cell and may not be possible. However, if cells are a"ailable in sufficient size, they would be larger per cell and wou'.d require an additional mounting rack, which would require, at a minimum, 1.5 times existing battery building space. The more likely scenario would require another 60-cell battery or two 58-cell batteries connected in parallel. Thus, the required space would be 2 times existing space. The cost of this modification would be in excess of

   $300,000.

B3 ALTERNATIVE PRESSURIZER AUXILIARY SPRAY This DA was introduced to specifically address a SGTR, which is the j initiating event for the largest three RCs. The analysis assumes that during a SGTR, the auxiliary spray will always depressurize the primary system to the SCS operation mode with sufficient speed and the SCS will always remove decay heat. This reduces the risk i due to a SGTR in the System 80+ design for six RCs (Table 4-11). Using a $1,000 per averted person-rem and a levelized cost rate of , 16.6%, such a system would be cost beneficial if it cost less than j

   $807.                                                                                        '

Designing a perfect Pressurizer Auxiliary Spray System is not possible. However, increased reliability and diversity can be obtained by increasing the redundancy and diversity of the pressurizer spray valves and providing a diverse positive displacement charging pump that is powered from a diverse power source. The reliability of the SCS can be improved by providing a diverse shutdown cooling pump with a diverse power source and providing a diverse heat sink. The cost for the additional , compon .*ts, piping, power supplies, instrumentation and building l Volume is estimated to exceed $5 million. I B4 ALTERNAT_IVE HIGH PRESSURE SAFETY INJECTION The System 80+ design has a very reliable four train Safety Injection System to begin with. The high pressure Safety Injection DA assumes that all sequences with SIS failures can be eliminated (Table 4-12). This DA would have to cost less than $500 to be cost beneficial. As shown in Table 19.6.3.6-5 of the PRA, the dominant failure mode (80% of the total for small break LOCA) is common cause failure of the four check valves or four motor operated isolation valves. The Alternative SIS would have eight additional

        .       .. .            - .                         ~   - -         -.- .

Containment Humidity. Nuplex 80+ makes possible tracking of leakage within containment and correlation of multiple symptoms. In addition to increased costs and complexity of additional trips and ESF actuation paths, the additional trips could decrease plant availability and increase the potential for equipment challenge (false actuation leading to transients) for a negligible improvement in plant safety. Because of the small public risk associated with the LBBLOCA and the sophistication of the current protection system, this DA was not further considered. B. INCREASE DECAY HEAT REMOVAL stELIABILITY This group of Design Alternatives has been grouped together as improved decay heat removal reliability. The SIS and Safety Depressurization System (SDS) were grouped here because of their feed and bleed capability. b B1 ALTERNATIVE DC BATTERIES AND EFWS This DA addresses the release classes where emergency feedwater is lost af ter battery depletion during a station blackout. The System 80+ design already has an improved battery system that will carry the DC loads for 8 hours. However, there are still accident sequences where the batteries are depleted and emergency feedwater is lost leading to core damage. The improved DC batteries and EFWS DA is assumed to have the capability to remove decay heat using batteries and the turbine-driven feedwater pump for whatever time period that is required (without any failures). This DA prevents core damage and, therefore, removes two of the release ulaccca (Table 4-9). Using a $1000 per averted person / rem and a levelized cost rate of 16.6%, such a system would be cost beneficial if it cost less than $11. Design of a battery system with unlimited capacity is not possible. . However, to increase the existing battery capacity for the EFWS. pumps from the current System 80+ design capacity of 8 hours to 72 hours will require 9 times the number of current battery cells and thuc approximately 9 times the space for building storage. The increased building space will also increase the Heating, Ventilation and Air Conditioning (HVAC) requirements. The cost for the extra battery cells, building volume and increased- HVAC requirements is estimated to exceed $2 million. In the Comanche Peak SAMDA, additional batteries were estimated to cost between

   $1.3M and $3M.

B2 12-{ LOUR BATTERIES The DA described in Section 19A.B1 is for an ideal battery system. This DA is for a specific and technically realistic DA of using a ' battery system that would maintain load for twelve hours. Such an improvement would decrease the probability of failure to restore 1

l l l valves, each one with piping to parallel the existing valves. The l estimated cost for this modification is $2.2M. It is assumed that  ; these valves are not subject to common cause failures. Testing and l maintenance has not been ccnsidered. B5 ALTERNATIVE RCS DEPRESSURIZATION The System 80+ design has motor-operated relief valves (MORVs) that permit residual heat removal using the valves and SIS pumps in a " feed and bleed" mode of operation. This DA models a perfect MORV system that permits the primary coolant . system to be quickly depressurized so that the SIS pumps are effective in getting_ coolant into the core and removing decay heat. This DA eliminates all sequences in Table 4-2 where the Safety Depressurization System (SDS) or bleed fails. The risk reduction, shown in Table 4-13, is worth $85 in capital to be cost beneficial. Designing a perfect SDS is not possible. However, increased reliability and diversity of the system can be obtained by

                                                ~

increasing the redundancy of the safety depressurization valves and/or providing valves that are diverse. Providing the additional valves, piping and instrumentation is estimated to exceed $500,000. In the Comanche Peak SAMDA, an Alternate Depressurization System was estimated to cost between $1.9M and $3.7M. B6 DIESEL SI Pumps (21 The System 80+ design has a very reliable four train Safety Injection System (SIS) to begin with. The high pressure Safety Injection DA (DA B4, Table 4-12) assumes that all sequences with SIS failures can be eliminated. This DA is more specific. It assumes that two of the motor-driven SIS pumps are replaced with diesel pumps. This reduces common cause failures of all four pumps and also reduces the risk of station blackout. Using the failure , rates and common cause dependencies in Reference 9, the reliability of the SIS would be increased by a factor of 60. Station blackout was assumed to be eliminated. Table 4-14 shows that nineteen RCs ' are reduced with a risk worth of $83.79/y. This DA would be cost beneficial in terms of offsite risk reduction if it could be installed for less than $502 in capital. This modification would require replacing the electric motors on two of the safety injection pumps with diesel engines. The diesel  ; engines will also require additional support systems and additional building volume to house the diesel drives and support systems compared to electric motor drives. The cost of this modification , would be in excess of $2 million. .; B7 ALTERNATIVE STARTUP FEEDWATER SYSTEM 1 The Startup Feedwater System introduces the feedwater upstream of j the main feedwater control valves and is assumed to be unavailable i for transients such as loss of feedwater. The Alternative Startup I

                                                                                                      .l

Feedwater System would be available as a backup to the EFWS. It is assumed to eliminate the sequences in Table 4-2 where the EFWS fails. This reduces the risk of thirteen RCs (Table 4-15) and would be cost beneficial if it could be installed for a cost under

      $533. The System 80+ Startup Feedwater System has been modified such that it can be utilized as a back up to the Emergency Feedwater System. The System 80+ startup feedwater pumps are powered from the Combustion Turbine such that they are available on a Loss of Offsite Power event. The Condensate Storage Tank provides the water source for the startup feedwater pumps. Since the Startup Feedwater System is a non-safety grade system, the water from the startup feedwater pump is supplied upstream of the main feedwater isolation valves. Should the transient cause the main feedwater isolation valves to close on a Main Steam Isolation Signal (MSIS),

the signal can be bypassed and the valves reopened. The instrument air compressors are also powered from the Combustion Turbine. Therefore, they will be available to provide the air source for reopening the main feedwater isolation valves. Since this DA is included in the System 80+ design, no cost benefit analysis is necessary. B8 EXTENDED REFUELING WATER STORAGE TANK SOURCE In the important SGTR sequences (RC4.36L), the Refueling Water Storage Tank (RWST) source depletes as a makeup source. .This DA consists of a ground level tank of borated water, and a pump and piping to pump the water to the RWST. It is assumed that the supply of water is sufficient to permit corrective actions before it also is exhausted. This DA is assumed to eliminate RC4.36L (Table 4-16). Using a $1,000 per averted person-rem and a levelized cost rate of 16.6%, such a system would be cost beneficial if it cost less than $198. A detailed design for the extended RWST source has not been performed but it would require a ground level tank of borated water and a pump and piping to pump the water to the elevated RWST together with an instrumentation and control system. This is estimated to cost in excess of $1 Million. , C. IMPROVED ELECTRICAL POWER RELIABILITY This group of Design Alternatives addresses the station blackout scenario. Battery depletion was considered under improved decay heat removal because it was assumed to enable longer operation of the steam-driven emergency feedwater trains. Cl THIRD DIESEL GENERAJ_O_P3 The System 80+ plant is designed to have two Diesel Generators (DGs), a Combustion Turbine and two independent switchyards. Many plants are using a third DG as a swing unit or during a refueling when one DG is out for maintenance. This DA was selected to address the risk reduction of installing an additional unit. It was assumed that the unit was affected by common cause failure and had a conditional f ailure rate * (y) of 0.76/d given that the other

• DGs had failed. This reduced the risk of the two RCs for station blackout by 24% (Table 4-17). Using a $1,000 per averted person-rem and a levelized cost rate of 16.6%, such a system would be cost beneficial if it cost less than $3.

Addition of a third diesel generator to lower the probability of station blackout would require the addition of a 6.4 MW diesel generator, its associated support systems, additional component cooling water piping to and from the diesel generator cooling water heat exchanger, an addition of a swing bus, additional cabling for connecting the diesel generator to the Electrical Distribution System, an additional diesel generator building to house the diesel, an additional fuel oil storage tank and storage tank structure, and additional HVAC systems for the diesel generator building and fuel oil storage tank structure. A stody conducted for Duke Power Company's McGuire Nuclear Station estimates the cost of adding a similar swing diesel to be in excess of $75 Million. This McGuire study investigated the cost that othcr utilities incurred in installing additional diesel generators. Pennsylvania Power and Light installed a swing diesel at their Susquehanna plant. This job was originally bid at $30 Million; however, final installation ended up costing $130 Million. Northern States Power added additional diesel generators at the Prairie Island site. The initial bid for the project was $60 Million; however, the final price was around $78 Million. The cost estimate for an additional diesel was $18.4M to $19M in the Comanche Peak SAMDA. For this analysis the additional diesel will be estimated to cost $25 million. C2 TORNADO-PROTECTION FOR COMBUSTION TURBINE The PDSs in Table 4-2 with the designator "TRND" are for tornados and it was assumed that offsite power was lost and the Combustion Turbine was not available. For these sequences, it was assumed that the DA completely protected the Combustion Turbine and it was available to supply AC with a failure rateM of 0.025/d. This reduced the risk of two RCs (Table 4-18) and would be cost beneficial if it could be installed for less than $10. The cost of this DA was estimated at over $3M and includes protection of the Combustion Turbine, fuel tank, and tunneling for cooling line. The cost could be as high as $4M depending on tunneling distances. C3 FUEL CELLS In addition, alternative battery types to the traditional lead battery were investigated. Alternative battery types sucn as lithium or zinc are not commercially available in the necessary sizes to provide the capacity required by System 80+. Fuel cells are available in the size required for System 80+; 'however, they are not proven technologies in nuclear station applications and are not available as Class 1E equipment. In addition, the use of fuel I

cells presents the problem of heat generation since a typical fuel cell will operate at a temperature of 300 to 1000 C. HVAC systems would have to be capable of removing the heat. Also, a safety related fuel delivery and exhaust system would be required for each battery. Since fuel cells use combustible materials such as hydrogen or methane, their presence would increase the risk of fires in the plant. Design, development and installation of this type of fuel cell system would cost well over $2 million more than a conventional lead acid battery arrangement. This.DA addresses the release classes where emergency feedwater is lost af ter battery depletion during a station blackout. This DA is assumed to have the capability to remove decay heat using the turbine-driven feedwater pump for whatever time period that is required (without any failures). This DA prevents core damaga and therefore removes two of the release classes (same as Alternative DC Batteries and EFWS, Table 4-9). Using a $1,000 per averted , person-rem and a levelized cost rate of 16.6%, such a system would , be cost beneficial if it cost less than $11. C4 HOOKUP FOR PORTABLE GENERATORS Instead of increasing the battery capacity for the turbine-driven EFW pump train, portable generators could be brought in and hooked up for continued operation of the turbine-driven EFW pump train ) after the batceries are depleted. This would require temporary ' hookup connections so that the portable generators could be I connected in a timely manner. These temporary hook up connections would need to be located in an area that was easily accessible for installing the portable generators and would have to be located in an appropriate environment for running the generators during station blackout conditions. The cost of adding these temporary hookup connections, including the cabling to an appropriate location for hookup, would be in excess of $10,000. The System 80+ design includes numerous means of supplying feedwater to.the steam generators. It has main feedwater runback, automatic actuation of the startup feedwater train, four emergency feedwater trains (two motor-driven and two steam-driven). The electric trains are supported by two diesel generators and a standby AC source (Combustion Turbine) in addition to the two sources of offsite power. In addition, the design has the capability to remove decay heat by a feed and bleed process using-one of four safety injection pumps. Because of the redundancy in feedwater and feed and bleed capability, the use of the diesel-driven fire pump as an alternate feedwater source was not quantified because of the small risk reduction capability. ] The DA addresses the release classes where emergency feedwater is lost after battery depletion during a station blackout. This DA prevents core damage and, therefore, removes two of the release classes (same as Alternative DC Batteries and EFWS, Table 4-9) and would be cost beneficial if it cost less than $11.

D. ATWS AND EXTERNAL EVENTS, REDUCTION OF CDF This group of Design Alternatives consists of ATWS prevention or mitigation alternatives and protection of some external events.  ! D1 ALTERNATIVE ATWS PRESSURE RELIEF VALVES This DA was selected because the System 80+ design uses an advanced digital Plant Protection System that has raised much interest. It consists of a system of relief valves that can prevent any equipment damage from a primary coolant pressure spike in an ATWS accident sequence. This DA is assumed to eliminate all the ATWS core damage sequences. ATWS does not show up as a dominant PDS but represents 3% of the CDF. Therefore, the risk of all release classes from transients was reduced by 3% (Table 4-19). Using a

    $1,000 per averted person-rem and a levelized cost rate of 16.6%,

such a system would be cost beneficial if it cost less than $6.

                                                                                      'l To implement this DA, the safety relief valve sizes and discharge piping size would need to be increased.                  It may also require        l additional safety relief valves and thus additional safety relief                   l valve discharge piping and supports.         In addition, the size and possibly the number of       safety valve nozzles on top of the                     i pressurizer would need to be increased.         The cost of this DA is              1 estimated to exceed $1 million.

D2 ATWS INJECTION SYSTEM An " ink" injection system was proposed for the planned federal  ! heavy water New Production Reactor as a shutdown system diverse l from the mechanical rods. Also, a foreign utility also showed some interest in this concept. Therefore, this DA was selected for evaluation. In terms of risk reduction benefits, this DA has the same advantage as the ATWS pressure relief valves (Table 4-19) and would have an equivalent capital value of less than $6. For estimating the cost of this DA, it was assumed that the RCP seal cooling pump could be used with existing sources of boron and existing piping and valves. The cost of this DA is $300,000 and is associated with the instrumentation and control system to activate the pump and align it. D3 DIVERSE PPS This DA was selected because the Systec 80+ design uses an advanced digital Plant Protection System. A foreign utility also inquired about this DA. In this analysis, it was assumed that the redundant PPS eliminated all ATWS. The System 80+ has an Alternate Protection System (APS) in order to meet the ATWS rule. The APS contains an alternate ' scram system and a Diverse Emergency ) . Feedwater Actuation System (DEFAS). The DA considered here is a third, diverse PPS to resolve Instrumentation and Control (I&C) diversity concerns. This DA has the same risk reduction as the ATWS pressure relief valves (see Table 4-19), and using a $1,000 per averted person-rem and a levelized cost rate of 16.6%, such a system would be cost beneficial if it cost less than $6. The cost of a diverse PPS was estimated to be $3,000,000. D4 SEISMIC CAPABILITY The System 80+ Plant is designed for a Safe Shutdown Earthquake (SSE) of 0.3g acceleration. The Seismic Margins Analysis (Section 19.7.5 of CESSAR-DC) addresses the margins associated with the seismic design and demonstrates that the plant High Confidence of Low Probability of Failure (HCLPF) value is 0.6g acceleration. Therefore, there is a 95% confidence that existing equipment has less than a 5% probability of failure at twice the SSE level. To meet this stringent design goal, the containment design and SG support design may be modified. Recent Nuclear Regulatory Commission policy decisions state that ALWRs need to demonstrate a HCLPF of only 0.5g. The seismic capability is considered adequate for the System 80+ design and no additional changes are considered. D5 FIRE AND FLOOD CAPABILITY The System 80+ Plant is designed with four quadrants, two in each of two divisions with permanent barriers between the divisions. Also, sources of flooding were reduced in the annex building and drains were specifically designed to reduce flooding potential. These design features are described in Sections 9.5 (Fire Protection) and 3.4 (Flood Design) of CESSAR-DC. This capability is considered adequate for the System 80+ design and no additional changes are considered for fire and flood. E. DESIGN ALTERNATIVES TO REDUCE RADIOACTIVE RELEASES The fifth group of Design Alternatives is the alternatives that were selected to protect the containment or reduce the release fractions. For the DAs that protect the containment, the releases are set to zero and then the risk is reevaluated. These DAs include the improved containment sprays, filtered vent, concrete composition, reactor vessel exterior cooling, and H2 igniters. El ALTERNATIVE CONTAINMENT SPRAY An Alternative Containment Spray System is assumed to prevent the high pressure containment failures caused by slow steam pressurization (RC2.2M) and to eliminate the sequences where scrubbing does not occur. This system is assumed to have a perfect power supply and heat sink and work in all release classes where the containment is challenged regardless of the sequence of events or equipment failures that led to core damage and containment challenge. These assumptions overestimate the benefits of this DA. This DA also reduces the releases in all the release classes where no scrubbing of fission products was initially predicted. This DA reduces the risk of six of the release classes (Table 4-20) . Using

a risk conversion factor of $1,000 per person-rem, this DA would i have an annual value of $7.27/y. The annual benefit of the DA l could be converted to a capital benefit using the levelized capital cost rate of 16.6% developed in Table 19A.3-1 of Appendix 19A of CESSAR-DC. The ideal Containment Spray System would be cost beneficial if it could be installed for less than $44 and have no i maintenance and testing costs. Any annual operating costs would i have to be subtracted from the annual risk reduction benefits. l The above analysis assumes that the system is completely successful l in terminating the accident by protecting the containment. The capital benefit is inversely proportional to the reliability of the system. For example, if the design had a conditional reliability of 0.5 in these accident sequences, then the DA would have to cost l less than $22 to be cost effective. l Estimating the cost to design and build a perfect Containment Spray System is not realistically possible. However, one option would be to provide piping from the containment spray header to the exterior of the Nuclear Annex for a temporary hook-up of a skid-mounted pump or fire truck should all containment spray and shutdown cooling i pumps be unavailable. The cost of the additional Class 2 piping, pipe supports, valves, onsite pump or fire truck with the required  ; pumping capacity and pump head and building to store the fire truck is estimated to exceed $1.5 million. This design modification has been included in the design. j E2 FILTERED VENT (CONTAINMENT) The Filtered Vent DA prevents all slow high pressure containment failures and therefore reduces the doses in RC2.2M (Table 4-21). Using a value of $1,000 per person-rem avoided, this DA has a , benefit of $0.53/y. Using a levelized capital cost rate of 16.6%, I a system with a capital cost of $3 would just be cost effective. 1 The cost estimates for a Filtered Vent System ranges from $2.8 l Million to $25 Million. IDCOR Technical Report 19.1, July 1983, l estimated a cost of $25M for larger systems than our design and l sized to handle ATWS. In the Advanced Boiling Water Reactor (ABWR) SAMDA, a cost of $3M was quoted. This is probably a smaller design taking credit for scrubbing in the BWR suppression pool. The Comanche Peak SAMDA estimated the cost from $15M to $22.3M and  ; the Limerick SAMDA gives a range from $2.8M to $11.3M. The System ' 80+ design estimate of $10M is for a non-ATWS sized, fully Category l I facility and is bounded by the previous estimates. E3 ALTERNATIVE CONCRETE COMPOSITION j l The containment building for System 80+ uses a spherical containment with rooms below it that are part of the nuclear annex building. It is assumed that in accident sequences where l corium/ concrete interaction are not stopped, containment failure I

would lead to releases through the nuclear annex building. This DA assumes that an ideal concrete composition could be developed that prevents basemat melt-through. This would eliminate seven RCs where basemat melt-through is modeled (Table 4-22). Using a

   $1,000 per averted person-rem and a levelized cost rate of 16.6%,

such a system would be cost beneficial if it cost less than $29. An advanced concrete composition to prevent corium/ concrete interaction is not currently available. However, additional concrete could be added to increase the time before containment failure would occur. Currently, additional concrete can not be added to the reactor cavity, since there would be an interference with the incore instrumentation tubes which exit the bottom of the reactor vessel. In order to add an additional two feet of concrete the Nuclear Steam Supply System (NSSS) would have to be raised by two feet to avoid interference with the incore instrumentation tubes. Raising the NSSS would also require the crane wall height to be increased by two. feet in order to have adequate clearance to lift the reactor head and service other NSSS components. In order to increase the crane wall height the containment diameter would have to be increased by approximately two feet in order to avoid an interference between the crane wall and containment vessel and to allow adequate space for spray coverage. An increase in containment diameter may also require an increase in containment plate thickness. An increase in containment plate thickness will require post-weld heat treatment for the construction of the containment vessel since the current thickness is at the limit allowed by the ASME Code before post-weld heat treatment is required. An increase in containment diameter will also require an increase in the diameter of the concrete shield building. The added cost for an additional two feet of concrete in the reactor cavity floor is relatively small. However, the added cost of additional steel for the increased containment diameter and thickness, post-weld heat treatment required for the increased containment plate thickness, additional concrete and rebar for the increase in crane wall height, and shield building diameter is estimated to exceed $5 million. Because the dominant risks are associated with containment bypass events, the risk reduction associated with the additional thickness of the containment was not quantified. In events where no decay heat removal is available, the containment failure would still be postulated. E4 REACTOR VESSEL EXTERIOR COOLING A reactor vessel exterior cooling system is assumed to prevent vessel melt-through and subsequent basemat attack or steam explosions. This DA reduces the consequences of eleven RCs (Table 4-23). Using a $1,000 per averted person-rem and a levelized cost rate of 16.6%, such a system would be cost beneficial if it cost less than $185. The current arrangement for the In-Containment Refueling Water Storage Tank (IRWST) will not allow wetting of the reactor vessel. The elevation of the IRWST was selected to ensure that wetting of the vessel would not occur should the holdup volume and cavity flood valves inadvertently open during power operation. This will prevent thermal shock of the vessel. However, water can be induced into the reactor cavity for exterior vessel cooling from external sources such as the Boric Acid Tank which provides a makeup source to the IRWST or by inducing water through the temporary hookup on the containment spray line discussed in DA El above and cost $1.5M. However, to utilize this option it must first be demonstrated that the reactor vessel will not breach due to thermal shock of the vessel from the cold water. The analysis to demonstrate this is estimated to cost $1M. This is based on the FERC prudence hearings for Yankee Atomic Electric Co. where it was reported that demonstration of vessel integrity would be a " multi-million dollar cost"". The total cost would be $2.5 M. Assuming that such a design modification was licensable, and assuming an inadvertent wetting of the reactor vessel during power, and no actual failures occurred, the event would require extensive testing and inspection before the plant would be permitted to startup. Such costs and additional economic risks have not been quantified but it is believed that these economic risks would far outweigh any advantage of vessel flooding. E5 ALTERNATIVE H2 IGNITERS Ideal hydrogen (H2) igniters would prevent release classes associated with containment failures from hydrogen burns or explc,aions . The System 80+ design has two different hydrogen control systems as described in Section 6.2.5 of CESSAR-DC. The Containment Hydrogen Recombiner System (CHRS) is designed to control the H2 concentrations in the containment following a LOCA. The CHRS prevents the concentration of hydrogen from reaching the lower flammability limit of 4% by _ volume in air or steam-air mixtures. During a degraded core accident, hydrogen will be produced at a greater rate than that of a design basis LOCA. The Hydrogen Mitigation System (HMS) is designed to accommodate the hydrogen produced from 100% fuel clad metal-water reaction and limit tha average hydrogen concentration in-the containment to a 10% for a degraded core accident. The HMS consists of 80 Glow Plug Igniters distributed throughout the containment. Their placement is based on a detailed assessment of the flow paths to fully cover all of the containment. Section 19.11.4.1.3 of CESSAR-DC discussed hydrogen igniters in severe accidents. System 80+ already has a degraded core H2 control system and only two release classes (RC2.1E-and 2.2E) have containment failure from hydrogen burning. This DA reduces the risk of these RCs (Table 4-24). Such ' l a system would have to cost less than $6 to be cost beneficial. Providing perfect hydrogen igniters which-have no probability of I failure is not possible. However, the reliability of the hydrogen igniters could be improved by either providing dedicated batteries for the existing design (Glow Plug Igniters) or by providing 1 I

catalytic hydrogen recombiners which do not require a power source. Since catalytic hydrogen recombiners are not fully developed, possible failure modes, including common cause failure modes, are not known. Therefore, they are not being selected for the System 80+ design at this time. The addition of dedicated batteries for the hydrogen igniters along with the additional equipment such as battery chargers and invertor and the additional building space to store this equipment is estimated to exceed $1 million. In the Comanche Peak SAMDA, additional batteries were estimated to cost between $1.3M and $3M and an ignition system was estimated to cost $5.8M to $8M. E6 PASSIVE AUTOCATALYTIC RECOMBINERS (PARS) Passive Autocatalytic Recombiners (PARS) are arrays of a palladium catalyst that will combine molecular hydrogen and oxygen gases into tra.tet . These units are currently in the development stage and have not been used in existing U.S. plants. They have a low conversion efficiency and, therefore, would have to be used in combination with existing H2 igniters. The advantage of the PARS is that they require no electrical power and, therefore, would operate during a station blackout. The success of the PARS to prevent a H2 burn would depend on the speed of the production and release of the H2. For this analysis, it was conservatively assumed that the PARS worked perfectly and, therefore, would prevent release _ classes associated with containment failures from hydrogen burns or explosions. The System 80+ design already has H2 igniters with redundant power backup via either DGs, batteries, or Combustion Turbine. Therefore, only two release classes (RC2.1E and 2.2E) have containment failure from hydrogen burning. This DA reduces the risk of these RCs (Table 4-24, Alternative H2 Igniters). Such a system would have to cost less than $5 to be cost beneficial. EPRIG

• has been developing PARS technology and estimates that 40 units would be needed for large dry containments. EPRI estimates  ;

the units would cost $19,000 each, and the cost for the PARS in ( System 80+ would be $760,000. This costs neglects any annual costs  ; of cleaning, inspection and testing. Also, both NRC and the l Advisory Committee on Reactor Safeguards (ACRS) have expressed concern about the expected relctive slow response time of the PARS. l l E7 MSSV AND ADV SCRUBBING The discharges of the Main Steam Safety Valves (MSSVs) and Atmospheric Dump Valves (ADVs) could be scrubbed by routing the dischargen through a structure with a water spray condense the steam and remove most of the fission products. This DA was , introducea to specifically address a SGTR, where isolation fails j (the largest three RCs) . Table 4-25 gives the risk reduction of i this DA. The risk reduction is worth $922 dollars in capital to be. cost benefic.1al.

This modification would require building a structure over the valve discharges and installing a header system to distribute water. In addition, a pump, piping, water supply and instrumentation and drain system would be needed. Conceptually, this system is similar to a Containment Spray System for which a cost estimate of $9.5M was given in the Commanche Peak SAMDA analysis, and that cost estimate will be used in this analysis. E8 ALTERNATIVE CONTAINMENT MONITORING SYSTEM The alternative containment monitoring system was selected to address the RCs where containment bypass is predicted. It does not address a SGTR, where failure to isolate _the SG is predicted. This DA is assumed to eliminate tha containment bypass RC4.8E and the Interfacing Systems LOCA RC5.1E (Table 4-26). Using a $1,000 per averted person-rem and a levelized cost rate of 16.6%, such a system would be cost beneficial if it cost less than $10. This modification would require the addition of a redundant and diverse limit switch to each containment isolation valve, and the addition of control and fiber optic cabling to the plant computer. The cost of this modification would be in excess of $1 million. In the Comanche Peak SAMDA, an alternative bypass instrumentation system was estimated to cost $2.7M. E9 CAVITY COOLING The Cavity Cooling DA uses the existing SCS heat exchangers in the IRWST to cool the reactor vessel cavity under natural circulation. It uses existing piping and equipment but only increases the size of the pipes to ensure that natural circulation is effective. In the upper limit as modeled here, this DA assumes the existing SCS equipment always works and it is assumed to eliminate vessel failure, steam explosions and concrete interactions. It has the same advantages and risk reduction worth as the reactor vessel cooling system (DA E4, Table 4-23) but has a lower capital cost because it uses existing equipment. This modification would be cost beneficial if the cost was less than $197. This modification would require increasing the size of the existing  ! cavity flood lines and performing analysis that there is adequate 1 mixing between the reactor cavity and IRWST. The cost of this modification would be in excess of $50,000. In the Comanche Peak SAMDA, an Alternative Cavity Flooding System was estimated to cost between $1.2M and $2.3M. E10 VENTING THE MSSV IN CONTAINMENT System 80+ design does not divert MSSV steam releases back to the containment. While such a system would reduce radiological releases to the environment for selected accident scenarios, such a system does not significantly reduce public risk and does carry

several disadvantages. It should be noted that this feature does not eliminate releases to the environment. The technical disadvantages of the MSSV-containment steam return system are summarized below for two hypothetical systems. In the first system, the steam is simply returned to the containment atmosphere. In the second system, the steam is discharged into the IRWST where it would be condensed. Direct discharge of MSSV into containment has several serious disadvantages:

1. The secondary system return will place an additional loading burden on the containment and restrict plant operators in responding to accidents when containment sprays are unavailable. This could lead to the addition of a containment vent to address those concerns which in itself introduces another means of inadvertent containment bypass;

2. Any condensed steam discharge will drain to the- IRWST, '

diluting the boron concentration. A minimum IRWST boron concentration for safety injection is necessary for mitigating LOCA and non-LOCA events; and

3. The release to containment atmosphere has the potential to cause personal injury.

An MSSV return system directed to the IRWST has similar drawbacks to Items 1 and 2 described above and poses the additional  ! complication that discharge of steam flows typical of the MSSVs may ' produce excessive loadings within the IRWST. ) Either return path would require a major redesign effort and increase design complexity, each of which is not consistent with evolutionary ALWR goals. Also, this provision will not eliminate radiological releases to the environment from a SGTR. In summary, including a MSSV discharge return to the containment'- was evaluated in design considerations. Based on this review, this DA poses serious design drawbacks. ABB-CE does not believe that the secondary steam should be piped and vented inside containment. These events are characterized as Anticipated Operational occurrence (AOO) events, and filling the containment _with steam during these events would-be both' damaging to the equipment and , dangerous to operators. A cost / benefit analysis was not performed for this DA because as it would require an assessment of equipment degradation, injuries, and loss of plant availability after i secondary side venting into containment.  ! Eli HYDROGEN PURGE LINE An existing System 80+ design feature that could be utilized in venting the containment is the hydrogen purge vent. System-80+ is

equipped with two 3-inch diameter hydrogen purge vents which can be used for purposes of containment venting. This design feature is shown in Figure 6.2.5-1 of CESSAR-DC. The vents are intended for use in post-LOCA conditions for diverting hydrogen to the secondary containment (annulus), should the hydrogen recombiners be inoperative. The Annulus Ventilation System then collects and filters the secondary containment atmosphere before release. An analysis of the potential application of the venting capabilities of the hydrogen purge piping was performed using the MAAP computer code. This analysis conservatively simulated hydrogen-purge as a 0.049 ft2 equivalent area opening in the containment. A hypothetical accident management strategy was considered in which the hydrogen purge system is used to vent containment when the containment pressure reaches 80 psia. This will enable to maintain the containment pressure well below the containment failure threshold. Since there are four AC electric motor-operated valves in series on each division that must be opened to purge the containment, and since the Annulus Ventilation System requires AC power for operation, this feature can not be credited for mitigating severe accidents resulting from a complete loss of AC power. This DA has already been included in the System 80+ design and no cost benefit analysis is necessary. E12 WATER COOLED RUBBLE BED The purpose of the water cooled rubble bed is to achieve a coolable debris bed below the vessel and remove decay heat. This DA consists of a floodable rubble bed in the bottom of the vessel cavity. The rubble bed would be kept dry until the corium had penetrated into it, thus minimizing the potential for steam explosion. This DA would have the same risk reduction potential as the ideal, Alternative concrete Composition (DA E3). This DA would eliminate seven RCs where basemat melt-through is modeled (see Table 4-22). Using a $1,000 per averted person-rem and a levelized cost rate of 16.6%, such a system would be cost beneficial if it cost less than $29. The cost of the water cooled rubble bed is estimated

• to be between

       $35.5 and $38.5 Million. Another source"4 estimated the cost to be                                         ;
       $18.8 Million.            Neither source included the cost of actually~                                    !

developing the system. Periodic testing and maintenance of the l device which could be significant. For this analysis, the lower  ! cost of $18.8M was used.  ! E13 REFB_ACTORY LINED CRUCIBLE The purpose of the refractory lined crucible is to achieve a coolable debris bed below the vessel and remove decay heat. This DA consists of a ceramic lined crucible with cooling located in the

1 vessel cavity. This DA would have the same risk reduction l potential as the ideal, Alternative Concrete Composition (DA E3). This DA would eliminate seven RCs where basemat melt-through is modeled (Table 4-22). Using a $1,000 per averted person-rem and a levelized cost rate of 16.6%, such a system would be cost beneficial if it cost less than $29. The cost of the water cooled rubble bed is estimated

• to be between

            $108 and $119 Million. Another source" estimated the cost to be
            $18.8 Million.        Neither source included the cost of actually developing the system.             Periodic testing and maintenance of the device which could be significant. For this analysis, the lower cost of $108M was used.

I E14 VACUUM BUILDING j ABB-CE developed a conceptual design for a vacuum building which was designed to reduce emissions from severe accidents and is described in Reference 21. The cost was estimated as $30 M in 1983. A separate IDCOR sponsored study (IDCOR Technical Report  : 19.1, July,1983) also estimated the cost to be $30M (approximately l

            $42M in 1993 dollars). Because of the high costs, and because most           I of the significant releases are bypass events for which the vacuum           !

building would not help, this DA was not quantified.  ; EIS RI.J_ BED CONTAINMENT i A ribbed containment was considered to address increased capacity against potential failure of the containment from buckling during a seismic event ' coupled with an inadvertent actuation of the containment spray. This conservative combination of events would lead to a vacuum in containment and increase the potential for buckling. However, the free standing unreinforced containment design meets or exceeds all design criteria for this design basis-event. Also, the probability of simultaneous occurrence of maximum seismic excitation and maximum negative pressure is exceedingly low. The cost of this DA is in the tens of millions of dollars because the ribs complicate manufacturing and construction and would require field heat treating. Given that this DA has a high cost and no appreciable benefit, it was not further quantified.

                                                             -.            .                              ~                                .

TABLE 4-1

SUMMARY

DESCRIPTION OF SYSTEM 80+ RELEASE CLASSES Release Release Class Definition Class RC1.1E Early core melt, intact containment, annulus filtering, Core damage less than 8 hrs RC1.1M Mid core melt, intact containment, annulus filtering, Core damage 8 to 24 hrs RC2.1E Early core melt, late containment failure, in-vessel scrubbing, no vaporization or revaporization releases, core damage less than 8 hrs, H2 burn RC2.2E Early core melt, in-vessel scrubbing, no vaporization releases, revaporization releases, releases scrubbed, late containment failure, H2 burn RC2.4E Early core melt, late containment failure, in-vessel scrubbing, vaporization releases, no revaporization releases, releases scrubbed, basemat melt-thru RC2.5E Early core melt, late containment failure, in-vessel scrubbing, vaporization releases, no revaporization releases, releases not scrubbed, basemat melt-thru RC2.6E Early core melt, late containment failure, , in-vessel scrubbing, vaporization releases and revaporization releases, releases scrubbed, basemat melt-thru RC2.7E Early core melt, late containment failure, , in-vessel scrubbing, vaporization releases and revaporization releases, revaporization releases scrubbed, vaporization releases not scrubbed, basemat melt-thru RC2.2M Mid core melt, late containment failure, in-vessel scrubbing, no vaporization releases, revaporization releases, releases scrubbed, CSS fails, steam explosion RC2.5M Mid core melt, late containment failure, in-vessel scrubbing, vaporization releases, no revaporization releases, releases not scrubbed, Basemat melt-thru t

TABLE 4-1

SUMMARY

DESCRIPTION OF SYSTEM 80+ RELEASE CLASSES Release Release Class Definition Class RC2.6M Mid core melt, late containment failure, in-vessel scrubbing, vaporization releases and revaporization releases, releases scrubbed, basemat melt-thru 1 RC2.7M Mid core melt, late containment failure, in-vessel scrubbing, vaporization releases and revaporization releases, revaporization releases scrubbed, vaporization releases not scrubbed, basemat melt-thru RC3.1E Early core melt, early containment failure, in-vessel scrubbing, no vaporization or revaporization releases, steam explosion RC3.2E Early core melt, early containment failure, in-vessel scrubbing, no vaporization release, revaporization releases, releases scrubbed, steam explosion RC3.4E Early core melt, early containment failure, in-vessel scrubbing, vaporization release, no revap releases, releases scrubbed, steam explosion RC3.6E Early core melt, early containment failure, in-vessel scrubbing, vaporization release, revaporization releases, releases scrubbed,. steam explosion RC3.2M Mid core melt, early containment failure, in-vessel scrubbing, no vaporization release, revap. releases, releases scrubbed, CSS failed, steam explosion RC3.6M Mid core melt, early containment failure, in-vessel scrubbing, vaporization release, revap. releases, releases scrubbed, CSS failed, , steam explosion RC4.22E Early core melt (SGTR), in-vessel scrubbing, vaporization releases, no revaporization releases, releases scrubbed, isolation failure

              .         . .      =.    - . . -             .                        .-        -. .. - -

c i TABLE 4-1

SUMMARY

DESCRIPTION OF SYSTEM 80+ RELEASE CLASSES Release Release Class Definition Class RC4.8E Early core melt, isolation failure, in-vessel scrubbing, vaporization releases, revaporization releases, vaporization releases scrubbed, revaporization releases not scrubbed RC4.30E Early core melt (SGTR), isolation failure, in-vessel scrubbing, vaporization releases, revaporization releases, releases scrubbed RC4.36L Late core melt (SGTR), isolation failure, in-vessel scrubbing, vaporization releases, revaporization releases, releases not scrubbed RC5.1E Early core melt, containment bypass, vaporization releases, releases scrubbed / attenuated in auxiliary building

                                             -_             ,      ,     _        -- .      -  ~.          . .      .- . - - .      , - . . _ _ _

F TABLE 4-2 MAPPING SEQUENCES INTO RELEASE CLASSES RC RC FREQ PDS SEQ DESCRII' LION SEQ FREQ RCl.1E 1.36E4 PDS235 LSSB-9A (LSSB)(Safety injection OK)(Failure to 1.8E-09 Deliver Feedwater) (Safety  : Depressurization for Bleed Fails) LOFW-9A (LOFW)(Emergency Feedwater Fails) 3.7E-07 (Safety Depressurization for Bleed Fails) TOTil-9A (Other Transients) (Feedwater Fails) 1.9E-09 (Safety Depressurization Fails) LOOP-9A (LOOP)(Failure to Deliver Emergency 3.3 E-09 Feedwater) (Safety Depressurization for Bleed Fails) PDS184 SGTR-16A (SGTR) (Safety Injection Fails) 1.3 E-08 (Aggressive Cooldown OK) (SCS Injection Fails) SGTR-17A (SGTR) (Injection Fails) (Aggressive 2.5E-07 Secondary Cooldown Fails) PDS3 LL-3A (LLOCA) (SITS Inject OK) (Safety 1.0E-07 Injection Fails) LL-4A (LLOCA) (SITS Fail to Inject) 4.4E-09 VR-A (Vessel Rupture) -1.0E-07 PDS85 ML2-3A (Medium LOCA 2) (Safety injection 1.5 E-07 Fails) PDS201 SL-11 A (SLOCA) (Safety Injection Fails) 1.5E-07 (Aggressive Cooldown Fails) RCl.lM 3. 83 E-7 PDS148 LOFW-4E (LOFW)(Emergency Feedwater OK) 1.5E-09 (Long-Term Decay Heat Removal Fails) (Bked OK) (Safety injection for Feed Fails) TOTil-4E (Other Transients) (Deliver Feedwater 2.3 E-09 OK) (Long-Term Decay lleat Removal Fails)(Safety injection for Feed Fails) TRND-4E (Tornado) (PSV Reseats) (EFWS OK) 2.2E-07 (LTDllR Fails) (Bleed OK) (Feed Fails) PDS136 LOFW-4A (LOFW)(Emergency Feedwater OK) 3.2E-08 (Long-Term Decay 11 eat Removal Fails) (Bleed OK) (Safety injection for Feed Fails) TOTil-4A (C:her Transients) (Deliver Feedwater OK)(Long-Term Decay IIeat Removal 6.3E-08 Fails) (Safety Injection for Feed Fails) TRND-4A (Tornado)(PSV Reseats)(EFW OK) 2.0E-08 (LTDflR Fails) (Bleed OK) (Feed Fails)

. - .~ .. . -- - .. i I l TABLE 4-2 hfAPPING SEQUENCES INTO RELEASE CLASSES RC RC FREQ PDS SEQ DESCRIPTION SEQ l FREQ RC2.1E 3.44E-9 PDS3 LL-3A (LLOCA) (SITS Inject OK) (Safety 1.0E-07 Injection Fails) LL-4A (LLOCA) (SITS Fail to Inject) 4.4E-09 VR-A (Vessel Rupture) 1.0E-07 PDS235 LSSB-9A (' SSB) (Safety Injection OK) (Failure 1.8E-09 to Deliver Feedwater) (Safety Depressurization for Bleed Fails) LOFW-9A (LOFW)(Emergency Feedwater Fails) 3.7E-07 (Safety Depressurization for Bleed Fails) TOTil-9A (Other Transients) (Feedwater Fails) 2.9E-09 (Safety Depressurization Fails) LOOP-9A (LOOP)(Failure to Deliver Emergency 3.3 E-09 Feedwater) (Safety Depressurization for Bleed Fails) RC2.2E 3.31 E-9 PDS201 SL-11 A (SLOCA) (Safety Injection Fails) 1.5 E-07 (Aggressive Cooldown Fails) PDS235 LSSB-9A (LSSB) (Safety Injection OK) (Failure 1.8E-09 to Deliver Feedwater) (Safety Depressurization for Bleed Fails) LOFW-9A (LOFW)(Emergency Feedwater Fails) 3.7E-07 (Safety Depressurization for Bleed Fails) TOTII-9A (Other Transients) (Feedwater Fails) 1.9E-09 (Safety Depressurization Fails) LOOP-9A (LOOP) (Failure to Deliver Emergency 3.3 E-09 Feedwater) (Safety Depressurization for Bleed Fails) RC2.4E 3.76E-8 PDS233 LOFW-9B (LOFW)(Emergency Feedwater Fails) 4.6E-07 (Safety Depressurization for Bleed Fails) PDS83 ML2-3B (Medium LOCA 2) (Safety injection 7.4 E-09 Fails) PDS18 ML1-3B (Medium LOCA I) (Safety Injection 6.6E-09 Fails) PDS3 LL 3A (LLOCA) (SITS Inject OK) (Safety In- 1.0E-07 jection Fails) LL-4A (LLOCA) (SITS Fail to Inject) 4.4 E-09 VR-A (Vessel Rupture) 1.0E-07 PDS1 LL-3B (LLOCA) (SITS Inject OK) (Safety I.1E-07 Injection Fails)

TABLE 4-2 -l 1 MAPFING SEQUENCES INTO RELEASE CLASSES I RC RC FREQ FDS SEQ DESCRII'rION SEQ FREQ l RC2.5E 2. 84E-8 PDS241 LOFW-9F (LOFW)(Emergency Feedwater Fails) 4.3E-08 l (Safety Depressurization for Bleed Fails) RC2.6E 3.33E-8 PDS181 SGTR-17B (SGTR) (Injection Fails) (Aggressive 1.3E-08 Secondary Cooldown Fails) PDS199 SL-11B (SLOCA) (Safety Injection Fails) (Ag- 8.2E-09 gressive Cooldown Fails) PDS233 LOFW-9B (LOFW) (Emerger.cy Feedwater Fails) 1.9E-08 (Safety Depressurization for Bleed Fails) RC2.7E 1.62E-8 PDS241 LOFW-9F (LOFW)(Emergency Feedwater Fails) 4.3E-08 (Safety Depressurization for Bleed Fails) RC2.2M 4.05E-9 PDS148 LOFW-4 E (LOFW)(Emergency Feedwater OK) 1.5E-09 (Long-Term Decay lleat Removal Fails) (Bleed OK) (Safety injection for Feed Fails) TOTil-4E (Other Transients) (Deliver Feedwater 2.3 E-09 OK) (Long-Term Decay Heat Removal Fails) (Safety Injection for Feed Fails) TRND-4E (Tornado) (PSV Reseats) (EFW OK) 2.2 E-07 (LTDilR Fails) (Bleed OK) (Feed Fails) PDS136 LOFW-4A (LOFW)(Emergency Feedwater OK) 3.2E-08 (Long-Term Decay Heat Removal Fails) (Bleed OK) (Safety Injection for

• Feed Fails)

TOTH-4A (Other Transients) (Deliver Feedwater 6.3E-08

• OK) (Long-Term Decay lleat Removal Fails)(Safety Injection for Feed Fails)

TRND-1A (Tornado)(PSV Rescats)(EFW OK) 2.0E 08 (LTDilR Fails) (Bleed OK) (Feed Fails) i RC2.5 M 3.95E-9 PDS242 SBOBD-F (Station Blackout with Battery 3.4E-09 Depletion) TRND-SBF (Tornado) (Station Blackout with 2.9E-09 Battery Depletion) RC2.6M 9.08 E-9 PDS134 LOFW-48 (LOFW)(Emergency Feedwater OK) 1.9E-09 (Long-Term Decay Ileat Removal Fails) (Bleed OK) (Safety Injection for Feed Fails) 5

                                                   '-r-               -

l l TABLE 4-2 MAPPING SEQUENCES INTO RELEASE CLASSES RC RC FREQ PDS SEQ DESCRIITION SEQ FREQ TOTH-48 (Other Transients) (Deliver Feedwater 3.0E-09 OK) (Long-Term Decay Heat Removal Fails)(Safety injection for Feed Fails) PDS148 LOFW-4E (LOFW)(Emergency Feedwater OK) 1.5E-09 (Long-Term Decay Heat Removal , Fails) (Bleed OK) (Safety injection for } Feed Fails) j TOTH-4E (Other Transients) (Deliver Feedwater 2.3E-09 OK) (Long-Term Decay Heat Removal Fails) (Safety injection for Feed Fails) TRND-4E (Tornado) (PSV Rescats) (EFW OK) 2.2E-07 (LTDHR Fails) (Bleed OK) (Feed Fails) RC2.7M 1.22E-8 PDS145 TRND-4F (Tornado)(PSV Rescats)(EFW OK) 1.0E-08 (LTDHR Fails) (Bleed OK) (Feed Fails) PDS241 SBOBD-F (Station Blackout with Battery 3.4E-09 Depletion) TRND-SBF (Tornado) (Station Blackout with 2.9E-09 Battery Depletion) RC3. lE 4.64 E-9 PDS235 LSSB-9A (LSSB) (Safety Injection OK) Failure to 1.8E-09 Deliver Feedwater) (Safety De-pressurization for Bleed Fails) LOFW-9A (LOFW)(Emergency Feedwater Fails) 3.7 E-07 (Safety Depressurization for Bleed Fails) TOTH-9A (Other Transients) (Feedwater Fails) 1.9E-09 (Safety Depressurization Fails) LOOP-9A (LOOP)(Failure to Deliver Emergency 3.3E-09 Feedwater) (Safety Depressurization for Bleed Fails) PDS85 M L2-3 A (Medium LOCA 2) (Safety Injection 1.5E-07 Fails) PDS3 LL-3A (LLOCA) (SITS Inject OK) (Safety in- 1.0E-07 jection Fails) LL-4A (LLOCA) (SITS Fail to inject) 4.4E-09 VR-A (Vessel Rupture) 1.0E-07 RC3.2E 3.16E-9 PDS184 - SGTR-16A (SGTR) (Safety Injection Fails) 1.3 E-08 (Aggressive Cooldown OK) (SCS Injection Fails) r SGTR-17A (SGTR) (Sdely injection Fails) 2.5 E-07 (Aggressive Secondary Cooldown Fails)

n l 1 TABLE 4-2 l MAPPING SEQUENCES LNTO RELEASE CLASSES l RC RC FREQ PDS SEQ DESCRIPTION SEQ FREQ PDS235 LSSB-9A (LSSB) (Safety Injection OK) (Failure 1. 8E-09 to Deliver Feedwater) (Safety Depressurization for Bleed Fails) LOFW-9A (LOFW)(Emergency Feedwater Fails) 3.7E-07 (Safety Depressurization for Bleed Fails) TOTil-9A (Other Transients) (Feedw.ter Fails) L9E-09 (Safety Depressurization Fails) LOOP-9A (LOOP) (Failure to Deliver Emergency 3.3E-09 Feedwater) (Safety Depressurization for l Bleed Fails) RC3.4E 6.52E-9 PDS235 LSSB-9A (LSSB) (Safety injection OK) (Failure 1.8E-09 to Deliver Feedwater) (Safety Depressurization for Bleed Fails) LOFW-9A (LOFW)(Emergency Feedwater Fails) 3.7E-07 . (Safety Depressurization for Bleed Fails) TOTH-9A (Other Transients) (Feedwater Fails) 1.9E-09 l (Safety Depressurization Fails) l LOOP-9A (LOOP) (Failure to Deliver Emergency 3.3E-09 l Feedwater) (Safety Depressurization for i Bleed Fails) PDS20 M Ll-3 A (Medium LOCA 1) (Safety Injection 1.3E-07 Fails) PDS3 LL-3A (LLOCA) (SITS Inject OK) (Safety In- 1.0E-07 jection Fails) LL-4A (LLOCA) (SITS Fail to Inject) 4.4 E-09 VR-A (Vessel Rupture) 1.0E-07 PDS85 ML2-3A (Medium LOCA 2) (Safety Injection 1.5E-07 Fails) RC3.6E 3.21 E-9 PDS184 SGTR-16 A (SGTR) (Safety Injection Fails) (Ag-gressive Cooldown OK) (RilR Injection 1.3E-08 Fails) SGTR-17 A (SGTR) (Injection Fails) (Aggressive 2.5 E-07 , Secondary Cooldown Fails) j PDS235 LSSB-9A (LSSB) (Safety injection OK) (Failure 1.8 E-09 to Deliver Feedwater) (Safety Depressurization for Bleed Fails) LOFW-9A (LOFW)(Emergency Feedwater Fails) 3.7 E-07 (Safety Depressurization for Bleed Fails) TOTil-9A (Other Transients) (Feedwater Fails) 1.9E-09 (Safety Depressurization Fails) TAILLE 4-2 MAFFING SEQUENCES INTO RELEASE CLASSES RC RC FREQ FDS SEQ DESCRIITION SEQ FREQ LOOP-9A (LOOP)(Failure to Deliver Emergency 3.3 E-09 Feedwater) (Safety Depressurization for Bleed Fails) RC3.2M 1.82 E-9 PDS148 LOFW-4E (LOFW)(Emergency Feedwater OK) 1.5E-09 (Imng-Term Decay lleat Removal Fails) (Bleed OK) (Safety Injection for Feed Fails) TOTII-4E (Other Transients) (Deliver Feedwater 2.3E49 OK) (Long-Term Decay lleat Removal Fails) (Safety Injection for Feed Fails) TRND-4E (Tornado) (PSV Rescats) (EFW OK) 2.2E-07 (LTDlIR Fails) (Bleed OK) (Feed Fails) PDS136 LOFW-4A (LOFW) (Emergency Feedwater OK) 3.2E-08 (Long-Term Decay IIeat Removal -  ! Fails) (Bleed OK) (Safety Injection for Feed Fails) TOTil-4A (Other Transients) (Deliver Feedwater 6.3E48 OK) (Long-Term Decay lleat Removal ' Fails)(Safety Injection for Feed Fails) l TRND-4A (Tornado)(PSV Rescats)(EFW OK) 2.0E-08 l (LTDilR Fails) (Bleed OK) (Feed Fails) RC3.6M 1.83 E-9 PDS148 LOFW-4E (LOFW)(Emergency Feedwater OK) 1.5E-09 (Long-Term Decay Heat Removal Fails) (Bleed OK) (Safety Injection for i Feed Fails) TOTH-4E (Other Transients) (Deliver Feedwater 2.3 E-09 i OK)(Long-Term Decay Heat Removal Fails)(Safety Injection for Feed Fails) TRND-4E (Tornado) (PSV Reseats) (EFW OK) 2.2E-07 (LTDHR Fails) (Bleed OK) (Feed Fails) PDS136 LOFW-4A (LOFW)(Emergency Feedwater OK) 3.2E-08 (Long-Term Decay Heat Removal I Fails) (Bleed OK) (Safety injection for l Feed Fails) TOTil-4 A (Other Transients) (Deliver Feedwater 6.3E-08 OK) (Long-Term Decay Heat Removal Fails) (Safety Injection for Feed Fails) TRND-4A (Tomado) (PSV Reseats) (EFW OK) 2.0E-08 (1,TDilk Fails) (Bleed OK) (Feed  ! l Fails) I i _v _ .-, . - .a . ,m . . , ,

TABLE 4-2 MAPPING SEQUENCES INTO RELEASE CLASSES RC RC FREQ PDS SEQ DESCRil'flON SEQ FREQ RC4.22E 5.99E-9 PDS184 SGTR-16 A (SGTR) (Safety lnjection Fails) 1.3E-08 (Aggressive Cooldown OK) (RHR Injection Fails) SGTR-17A (SGTR) (Injection Fails) (Aggressive 2.5 E-07 Secondary Cooldown Fails) RC4.8E 1.06E-9 PDS235 LSSB-9A (LSSB) (Safety injection OK) (Failure 1.8E49 to Deliver Feedwater) (Safety l Depressurization for Bleed Fails LOFW-9A (LOFW)(Emergency Feedwater Fails) 3.7E-07 (Safety Depressurization for Bleed Fails) TOTH-9A (Other Transients) (Feedwater Fails) 1.9E-09 (Safety Depressurization Fails) LOOP-9A (LOOP) (Failure to Deliver Emergency 3.3E-09 Feedwater) (Safety Depressurization for Bleed Fails) PDS20 ML1-3 A (Medium LOCA 1) (Safety injection 1.3E-07 Fails) , PDS3 LL-3A (LLOCA) (SITS inject OK) (Safety In- 1.0E-07 jection Fails) LL-4A (LLOCA) (SITS Fails to inject) 4.4E-09 VR-A (Vessel Rupture) 1.0E-07 , PDS85 M L2-3 A (Medium LOCA 2) (Safety Injection 1.5 E-07 i Fails) RC4.30E 6.55 E-9 PDS184 SGTR-16A (SGTR) (Safety Injection Fails) 1.3 E-08 (Aggressive Cooldown OK) (RHR Injection Fails) SGTR-17A (SGTR) (Injection Fails) (Aggressive 2.5E-07 Secondary Cooldown Fails) PDSI81 SGTR-17B (SGTR) (Injection Fails) (Aggressive 1.3E-08 Secondary Cooldown Fails) L RC4.36L 3.08E-8 PDS194 SGTR-9F (SGTR) (Safety Injection OK) (Deliver 3. lE-08 l Feedwater OK)(RCS Pressure Control Fails) (SG not Isolated) Failure to Refill IRWST) RCS.l E 5.10E-10 ISLOCA (Failure of Check & Isolation Valves in 5. l E-10 One SCS Line) i Frequency for Core Damage (Level 1) l l l

F i TAllLE 4-3 RANKING OF RELEASE CLASSES BY Offsite RISK Release Frequency Mean Dose Dose Risk Rank C_ lass Events /v mr/ event mr/v 1 RC4.36'L 3.08E OS 5.90E + 06 1.82E-01 2 RC4.30E 6.55E-09 5.07E + 06 3.32E-02 - 3 RC4.22E 5.99E-09 5.24 E + 06 3.14E 02 4 RC3.4E 6.52E-09 1.20E + 06 7. 82E-03 5 RC3.lE 4.64E-09 1.02E + 06 4.73E-03 6 RC3.2E 3.16E-09 1.32E + 06 4.17E-03 7 RC3.6E 3.21 E-09 1.27E + 06 4.08E-03 8 RC3.6M 1.83E-09 1.97E + 06 3.61E-03 9 RC3.2M 1.82E-09 1.81E + 06 3.29E-03 10 RC2.7M 1.22E-08 1.38E + 05 1.68E-03 11 RC5.lE 5.10E-10 2.87E + 06 1.46E-03 12 RC2.4E 3.76E-08 2.38E + 04 8.95E-04 13 RC2.6E 3.33E-08 2.35E + 04 7.83E-04 14 RC2.5E 2.84 E-08 2.35E + 04 6.67E-04 15 RC2.2M 4.05E-09 1.31 E + 05 5.31E-04 16 RC2.1E 3.44E-09 1.37E + 05 4.71 E-04 17 RC2.2E 3.31 E-09 1.37E +05 4.53E-04 18 RC2.7E I .62E-08 2.35E + 04 3.81 E-04 I 19 RC2.6M 9.08E-09 3.02E + 04 2.74E-04 20 RC4.8E 1.06 E-09 1.86E + 05 1.97E-04 21 RC2.5M 3.95 E-09 4.73 E + 04 1.87E-04 l 22 RCl.lE 1.36E-06 1.19E + 02 1.62E-04 l 23 RCl.1M 3.83 E-07 1.09 E + 02 4.17E-05 SUM = 1.96E-06 2.82E-01 l l 1 1 l I l-  !

TABLE 4-4 RANKING OF SEQUENCES BY CORE DAMAGE FREQUENCY (CDF) SEQUENCE CDF CODE SEQUENCE EV/ YEAR LOFW-9 (LOFW)(Emergency Feedwater Fails)(SDS for Bleed Fails) 4.4E-7 SGTR-17 (SGTR) (Injection Fails) (Aggressive Secondary Cooldown Fails) 2.7E-7 SL-11 (SLOCA) (Safety injection Fails) (Aggressive Cooldown Fails) 1.6E-7 M L2-3 (Medium LOCA 2) (Safety injection Fails) 1.6E-7 M L1-3 (Medium LOCA 1) (Safety injection Fails) 1.4E-7 LL-3 (LLOCA) (SITS inject OK) (Safety Injection Fails) 1.1E-7 VR Vessel Rupture 1.0E-7 TOTII-4 (Other Transients) (Deliver Feedwater OK) (Long-Term Decay Heat 6.9E-8 Removal Fails)(SIS for Feed Fails) ATWS-29 (ATWS) (Adverse MTC) 4.7E-8 LOFW-4 . (LOFW) (Emergency Feedwater OK) (Long-Term DHR Fails) (Bleeti 3.6E-8 OK)(SIS for Feed Fails) SGTR-9 (SGTR) (Safety Injection OK) (EFW OK)(Unisolable Leak in 3.1 E-8 Ruptured SG) (Failure to Refill IRWST) TOTH-12 (TOTH) (PSV Fails to Reseat) (S1 injection Fails) 2.7E-8 SBO Station Blackout with Battery Depletion 2. l E-8 LOFW-8 (LOFW)(Emergency Feedwater Fails)(Bleed OK) (Safety Injection 2.lE-8 for Feed Fails) SGTR-16 (SGTR) (Safety Injection Fails) (Aggressive Cooldown OK) (RHR 1.5 E-8 l Injection Falls) j SL-10 (SLOCA) (Safety injection Fails) (Aggressive Cooldown)(RHR 9.0E-9  ; Injection Fails) l SL-4 (SLOCA) (Safety injection OK) (Deliver Feedwater OK) (Long-Term 8.9 E-9 i Decay Heat Removal Fails)(SDS Fails) TOTil-5 (Other Transients) (Deliver Feedwater OK) (Long-Term Decay Heat 6.9E-9 Removal Fails) (SDS Fails) SGTR-12 (SGTR) (Safety injection OK) (Feedwater Fails) (SDS - Bleed Fails) 6.9E 9 LOFW-5 (LOFW)(Emergency Feedwater OK)(Long-Term DHR Fails)(SDS 5.1 E-9 fe: Bleed Fails) LL-4 (LLOCA) (SITS Fail to Iriject) 4.7E-9 LOOP-9 (LOOP)(Failure to Deliver Emergency Feedwater) (SDS for Blee 3.9E-9 Fails) , LHV-5 (LHVAC)(Deliver Feedwater OK)(Long-Term Decay Heat Removal 4.0E-9 l Fails)(SDS for Bleed Fail) ATWS-9 (ATWS) (PSVs Open & Reclose OK) (No Consequential SGTR) 2.9E-9 l (Deliver Feedwater OK) (Failure to Borate by Charging Pumps) (Safety Depressurization Fails) TOTH-9 (Other Transients)(Feedwater Fails)(Safety Depressurization Fails) 2.3 E-9 LSSB-9 (LSSB) (Safety injection OK) (EFW Failure) (Safety Depressurization 2.lE-9 for Bleed Fails) l

    .. .-     .-              .      .        .         . _ ~   _ - . _ -    -_

TAILLE 4-5 DESIGN ALTERNATIVES CONSIDERED DESIGN AI,TERNATIVE CATEGORY *

1. LARGER PRESSURIZER I

2. LARGER STEAM GENERATORS 1

3. HIGH-PRESSURE SHUTDOWN COOLING SYSTEM (SCS) 1

4. FUNCTIONALLY INTERCilANGEABLE SCS AND 1 CONTAINMENT SPRAY SYSTEM (CSS) PUMPS

5. MULTIPLE INDEPENDENT CONNECTIONS TO THE GRID 1

6. TURBINE-GENERATOR RUNBACK CAPABILITY l

7. DEDICATED STARTUP FEEDWATER SYSTEM 1 S. IMPROVED CONTROL ROOM DESIGN 1

9. IMPROVED NORM ALLY OPERATING COMPONENT COOLING 1 WATER SYSTEM (CCWS)/ STATION SERVICE WATER SYSTEM (SSWS)

10. FOUR TRAIN SAFETY INJECTION SYSTEM (SIS) WITH DIRECT 1 VESSEL INJECTION

11. SAFETY DEPRESSURIZATION SYSTEM (SDS) 1

12. FOUR TRAIN EMERGENCY FEEDWATER SYSTEM i

13. TWO EMERGENCY DIESEL GENERATORS AND A STANDBY I

                 'ALTERN ATE AC SOURCE (COMBUSTION TURBINE)

14. SIX VITAL BATI'ERIES I 51 -

TABLE 4-5 DESIGN ALTERNATIVES CONSIDERED DESIGN ALTERNATIVE CATEGORE

15. IMPROVED CONTROL ROOM DESIGN 1

16. CROSS-CONNECTED CSS AND SCS TRAINS I r l

17. IMPROVED CONTROL ROOM DESIGN 1

18. LARGE SPIIERICAL CONTAINMENT 1

19. REACTOR CAVITY DESIGNED FOR CORIUM 1 DISENTRAINMENT

20. REACTOR CAVITY DESIGNED FOR DEBRIS COOLABILITY 1

21. IRWST AND SDS INTERCONNECTED 1

22. liYDROGEN MITIGATION SYSTEM 1

23. ALTERNATIVE CONTAINMENT SPRAY 2

24. FILTERED VENT 2

25. ALTERNATIVE DC BATTERIES AND EFWS 2

26. RCP SEAL COOLING  !

27. ALTERNATIVE PRESSURIZER AUXlLIARY SPRAY 2

28. ALTERNATIVE ATWS PRESSURE RELIEF VALVES 2

      '9. ALTERNATIVE CONCRETE COMPOSITION                   2

30. REACTOR VESSEL EXTERIOR COOLING 2 I 31. ALTERNATIVE 112 IGNITERS ^ 2

32. ALTERNATIVE lilGli PRESSURE SAFETY INJECTION 2

      .13. ALTERNATIVE RCS DEPRESSURIZATION                   2

34. 100% SG INSPECTION 2

35. MSSV SCRUBBING 2 A

TABLE 4-5 DESIGN ALTERNATIVES CONSIDERED DESIGN ALTERNATIVE CATEGORY *

36. TIIIRD DIESEL GENERATOR 2

38. BORON INJECTION SYSTEM (ATWS) 2

39. DIVERSE PPS 2

40. ALTERNATIVE CONTAINMENT MONITORING SYSTEM 2 VALVES

41. ALTERNATIVE CAVITY COOLING 2

42. 12.110UR BATTERIES 2

43. TORNADO PROTECTION FOR COMBUSTION TURBINE 2

44. DIESEL S1 PUMPS (2) 2

45. ALTERNATIVE STARTUP FEEDWATER SYSTEM 2

46. VACUUM BUILDING 3

47. RIBBED CONTAINMENT 3

48. EXTENDED RWST SOURCE 2

49. N-16 MONITOR 1

50. INCREASE SECONDARY SIDE PRESSURE 3

51. PASSIVE SECONDARY SIDE COOLERS 3

52. VENTING MSSV TO CONTAINMENT 3 53 SECONDARY SIDE GUARD PIPES 2

54. PASSIVE AUTOCATALYTIC RECOMBINERS (PARS) 2

55. IIYDROGEN PURGE LINE - 1

56. FUEL CELLS 2

57. IlOOKUP FOR PORTABLE GENERATOR 2

58. WATER COOLED RUBBLE BED 2

l TAE'LE 4-5 DESIGN ALTERNATIVES CONSIDERED , I DESIGN ALTERNATIVE CATEGORT

59. REFRACTORY LINED CRUCIBLE 2

60. AUTOM ATIC OVERPRESSURE PROTECTION 3

61. DIGITAL LBLOCA PROTECTION 3

61. SEISMIC CAPABILITY 3

63. FIRE AND FLOOD CAPABILITY -3 l

• Category: 1 Modification is applicable to the System 80+ and already incorporated in the design. No further evaluation is needed.  ;

2 Modification was quantified in this report and not included in the System 80+. 3 Modification was not quantified because of high costs or small benefits. l l l l l 1 4

l TABLE 4-6 j I DESIGN ALTERNATIVES EVALUATED i NUMllER DESIGN ALTERNATIVE A: INCREASE PRIM ARY AND SECONDARY BOUNDARY INTEGRITY Al RCP SEAL COOLING l A2 100% SG INSPECTION A3 N-16 MONITOR A4 INCREASE SECONDARY SIDE PRESSURE A5 PASSIVE SECONDARY SIDE COOLERS q A6 SECONDARY SIDE GUARD PIPES l A7 AUTOMATIC OVERPRESSURE PROTECTION  ; A8 DIGITAL LBLOCA PROTECTION 1 B: INCREASE DECAY llEAT REMOVAL RELIABILITY B1 ALTERNATIVE DC BATTERIES AND EFWS 1 B2 12 IlOUR BATTERIES l B3 ALTERNATIVE PRESSURIZER AUXILIARY SPRAY i B4 ALTERNATIVE li1Gil PRESSURE SAFETY INJECTION B5 ALTERNATIVE RCS DEPRESSURIZATION B6 DIESEL S1 PUMPS (2) B7 ALTERNATIVE STARTUP FEEDWATER SYSTEM B8 EXTENDED RWST SOURCE C: IMPROVE ELECTRICAL POWER RELIABILITY Cl TillRD DIESEL GENERATOR C2 TORNADO PROTECTION FOR COMBUSTION TURBINE C3 FUEL CELLS C4 IiOOKUP FOR PORTABLE GENERATOR D: ATWS AND EXTERNAL EVENTS D'1 ALTERNATIVE ATWS PRESSURE RELIEF VALVES D2 ATWS INJECTION SYSTEM D3 DIVERSE PPS D4 SEISMIC CAPABILITY D5 FIRE AND FLOOD CAPABILITY  !

               -    .=     -                 -       _  -      --

TAllLE 4-6 I DESIGN ALTERNATIVES EVALUATED NUMilER DESIGN ALTERNATIVE E: REDUCE RADIOACTIVE RELEASES El ALTERNATIVE CONTAINMENT SPRAY E2 FILTERED VENT (CONTAINMENT) E3 ALTERNATIVE CONCRETE COMPOSITION E4 REACTOR VESSEL EXTERIOR COOLING E5 ALTERNATIVE 112 IGNITERS E6 PASSIVE AUTOCATALYTIC RECOMBINERS (PARS) E7 MSSV AND ADV SCRUBBING E8 ALTERNATIVE CONTAINMENT MONITORING SYSTEM

                                                                    ]

E9 CAVITY COOLING  ; E10 VENTING MSSV TO CONTAINMENT l Eli IlYDROGEN PURGE LINE E12 WATER COOLED RUBBLE BED I E13 REFRACTORY LINED CRUCIBLE I E14 VACUUM BUILDING l EI5 RIBBED CONTAINMENT  ! l I

TABLE ,7 RISK REDUCTION EVALUATION (INCLUDING AOC) FOR A2,100% SG INSPECTION Benefit MR Risk Release Frequency Mean Dose Dose Risk fract. Savings CDF l fmitm Events /v mr/ event nLrly reduct. $f.y Reduction RCl.lE 1.36E-06 1.19E + 02 1.62E-04 0.21 $0.03 2.86E-07 RC1.IM 3.83E-07 1.09E + 02 4.17E-05 0.00 $0.00 0 RC2.1E 3.44 E-09 1.37E + 05 4.71 E-04 0.00 $0.00 0 RC2.2E 3.31 E-09 1.37E + 05 4.53E-04 0,00 $0.00 0 RC2.4E 3.76E-08 2.38E + 04 8.94E-04 0.00 $0.00 0 RC2.5E 2.84E-08 2.35 E + 04 6.67E-04 0.00 $0.00 0 RC2.6E 3.33E-08 2.35E + 04 7.83E-04 0.00 $0.00 0 RC2.7E 1.62E-08 2.35E + 04 3.81 E-04 0.00 $0.00 0 RC2.2M 4.05 E-09 1.31E + 05 5.31 E-04 0.00 $0.00 0 RC2.5M 3.95E-09 4.73E + 04 1.87 E-04 0.00 $0.00 0 RC2.6M 9.08E-09 3.02E + 04 2.74E-04 0.00 $0.00 0 RC2.7M l .2.2E-08 1.38E + 05 1.68E-03 0.00 $0.00 0 RC3. l E 4.64 E-09 1.02E + 06 4.73E-03 0.00 $0.00 0 RC3.2E 3.16E-09 1.32 E + 06 4.17E-03 0.38 $1.58 1.20E-09 RC3.4E 6.52E-09 1.20E + 06 7.82E-03 0.00 $0.00 0 RC3.6E 3.21 E-09 1.27E + 06 4.08E-03 0.38 $1.55 1.22E-09 RC3.2M 1.82E-09 1.81E + 06 3.26E-03 0.00 $0.00 0 RC3.6M 1.83 E-09 1.97E + 06 3.61E-03 0.00 $0.00 0 RC4.22E 5.99E-09 5.24 E + 06 3.13 E-02 1.00 $31.38 5.99E-09 RC4.8E 1.06E-09 1.86E + 05 1.97E-04 0.00 $0.00 0 RC4.30E 6.55E-09 5.07E + 06 3.32 E-02 1.00 $33.16 6.55E-09 RC4.36L 3.08E-08 5.90E + 06 8.84E-02 1.00 $88.40 3.08E-08 RC5.1E 5.10E-10 2.87E + 06 1.46E-03 0.00 $0.00 0 ) SUM 1.96E.4)6 1.89E-01 $156.15 3.33E-07 ) i 1 AOC ($) 6.66E+ 8 AOC RISK REDUCTION $203.82 MR RISK REDUCTION $156.15 TOTAL RISK REDUCTION $359.97 i

I TABLE 4-8 RISK REDUCTION EVALUATION (INCLUDING AOC) FOR A6, SECONDARY SIDE GUARD PIPES Benefit MR Risk Release Frequency Mean Dose Dose Risk fract. Savings CDF Class Events /v mr/ event mr/v reduct. b Reduction RCI.lE 1.36E-06 1.19E + 02 1.62E-04 0.001 $0.00 1.36E-09 RCl.lM 3.83 E-07 1.09E + 02 4.17 E-05 0.00 $0.00 0 RC2. l E 3.44 E-09 1.37E + 05 4.71 E-04 0.002 $0.00 6.88E-12 RC2.2E 3.31 E-09 1.37E + 05 4.53 E-04 0.002 $0.00 6.62E-12 l l RC2.4E 3.76E-08 2.38E + 04 8.94E-04 0.00 $0.00 0 i RC2.5 E 2.84 E-08 2.35E + 04 6.67E-04 0.00 $0.00 0 RC2.6E 3.33E-08 2.35 E + 04 7.83 E-04 0.00 $0.00 0 RC2.7E 1.62E-08 2.35 E + 04 3.81 E-04 0.00 $0.00 0 RC2.2M 4.05 E-09 1.31 E + 05 5.31E-04 0.00 $0.00 0 RC2.5M 3.95 E-09 4.73 E + 04 1. 87E-04 0.00 $0.00 0 RC2.6M 9.08E-09 3.02E + 04 2.74E-04 0.00 $0.00 0 RC2.7 M 1.22E-08 1.38E + 05 1.68E-03 0.00 $0.00 0 RC3. lE 4.64E-09 1.02E + 06 4.73 E-03 0.001 $0.00 4.64E-12 RC3.2E 3.16E-09 1.32E + 06 4.17E-03 0.001 $0.00 3.16E-12 RC3.4E 6.52E.09 1.20E + 06 7.82E-03 0.001 $0.00 6.52E-12 RC3.6E 3.2] E-09 1.27E + 06 4.08E-03 0.001 $0.00 3.21E-12 RC3.2M 1.82E-09 1.81 E + 06 3.26E-03 0.00 $0.00 0 RC3.6M 1.83 E-09 1.97E + 06 3.6 ] E-03 0.00 $0.00 0 RC4.22E 5.99E-09 5.24 E + 06 3.13E-02 0.00 $0.00 0 RC4.8E 1.06E-09 1.86E + 05 1.97E-04 0.00 $0.00 0 RC4.30E 6.55E-09 5.07E + 06 3.32E-02 0.00 $0.00 0 RC4.36L 3.08E-08 5.90E + 06 8.84E-02 0.00 $0.00 0 RC5. lE 5.10E-10 2.87E4 06 1.46E-03 0.50 $0.73 2.30E-10 SUM 1.96E-06 1.89E-01 $0.73 1.62E-09 AOC ($) 6.66E+ 08 AOC RISK REDUCTION $1.08 MR RISK REDUCTION $0.73 TOTAL RISK REDUCTION $1.81 i TABLE 4-9 , l RISK REDUCTION EVALUATION (INCLUDING AOC) FOR  ! B 1, ALTERNATIVE DC BATTERIES AND EFWB Benefit MR Risk Release Frequency Mean Dose Dose Risk fract. Savings CDF Class Events /v Inr/evtni mEh Erdh $/h Rededion RCl.lE 1.36E-06 1.19E + 02 1.62E-M 0.00 $0.00 0 RCl.lM 3.83 E-07 1.09E + 02 4.17E-05 0.00 $0.00 0 RC2.1E 3.44E-09 1.37E + 05 4.71 E-04 0.00 $0.00 0 RC2.2E 3.31 E-09 1.37E + 05 4.53 E-04 0.00 $0.00 0 RC2.4E 3.76E-08 2.38E + 04 8.94 E-04 0.00 $0.00 0 RC2.5E 2.84E-08 2.35E + 04 6.67EJ)4 0.00 $0.00 0 RC2.6E 3.33E-08 2.35 E + 04 7. 83 E-04 0.00 $0.00 0 , RC2.7E 1.62E-08 2.35E + M 3.8 t E-04 0.00 $0.00 0 RC2.2M 4.05E 09 1.31 E + 05 5.31E-04 0.00 $0.00 0 RC2.5M 3.95E-09 4.73E + 04 1. 87E-04 1.00 $0.19 3.95E-09 RC2.6M 9.08E-09 3.02E + 04 2.74E-04 0.00 $0.00 0 RC2.7M 1.22 E-08 1.38 E + 05 1.68E-03 1.00 $1.68 1.22E-08 RC3.1 E 4.64E-09 1.02E + 06 4.73 E-03 0.00 $0.00 0 RC3.2E 3.16E-09 1.32E + 06 4.17E-03 0.00 $0.00 0 RC3.4E 6.52E-09 1.20E + 06 7.82E-03 0.09 $0.00 0 RC3.6E 3.21 E-09 1.27E + 06 4.08E-03 0.00 $0.00 0 RC3.2M 1.82E-09 1.81 E + 06 3.26E-03 0.00 $0.00 0 RC3.6M 1.83 E-09 1.97E + 06 3.61E-03 0.00 $0.00 0 RC4.22E 5.99E49 5.24E + 06 3.13E-02 0.00 $0.00 0 RC4.8E 1.06E-09 1.868 + 05 1.97E-04 0.00 $0.00 0 RC4.30E 6.55 E-09 5.07E + 06 3.32E-02 0.00 $0.00 0 RC4.36L 3.08E-08 5.90E 4 06 8.84 E-02 0.00 $0.00 0 RC5. lE 5.10E-10 2.87E + 06 1.46E-03 0.00 $0.00 0 SUM 1.96E-06 1.89E-01 $1.87 1.62E-08 AOC ($) 6.66E+ 08 AOC RISK REDUCTION $10.76 MR RISK REDUCTION $1.87 TOTAL, RISK REDUCTION $12.63

                                                                                                                             ^

TABLE 4-10 l RISK REDUCTION EVALUATION (INCLUDING AOC) FOR l B2, 12-HOUR BATTERIES l Benefit MR Risk Release Frequency Mean Dose Dose Risk fract. Savings CDF Class Events /v mr/ event mr/v reduct, $ly Reduction ] RCl.lE 1.36E-06 1.19E + 02 1.62E-04 0.00 $0.00 0 RCl.1M 3.83E-07 1.09E + 02 4.17E-05 0.00 $0.00 0 RC2. lE 3.44E-09 1.37E + 05 4.71E-04 0.00 $0.00 0 RC2.2E 3.31E-09 1.37E + 05 4.53E-04 0.00 $0.00 0 RC2.4E 3.76E-08 2.38E4 04 8.94 E-04 0.00 $0.00 0 RC2.5E 2.84E-08 2.35E + 04 6.67E41 0.00 $0.00 0 RC2.6E 3.33E-08 2.35E + 04 7.83E-04 0.00 $0.00 0 RC2.7E 1.62E-08 2.35 E + 04 3.81 E-04 0.00 $0.00 0 RC2.2M 4.05E-09 1.31 E + 05 5.31 E-04 0.00 $0.00 0 RC2.5M 3.95E-09 4.73E + 04 1.87E-04 0.38 $0.07 1.50E-09 RC2.6M 9.08 E-09 3.02E + 04 2.74 E-04 0.00 $0.00 0 RC2.7M 1.22E-08 1.38E + 05 1.68 E-03 0.38 $0.64 4.64 E-09 RC3.lE 4.64 E-09 1.02E + 06 4.73 E-03 0.00 $0.00 0 RC3.2E 3.16E-09 1.32E + 06 4,17E-03 0.00 $0.00 0 RC3.4E 6.52E-09 1.20E + 06 7. 82E-03 0.00 $0.00 0 RC3.6E 3.21 E-09 1.27E + 06 4.08E-03 0.00 $0.00 0 RC3.2M 1.82E-09 1.81 E + 06 3.26E-03 0.00 $0.00 0 RC3.6M 1.83E-09 1.97E + 06 3.61E-03 0.00 $0.00 0 RC4.22E 5.99E-09 5.24E + 06 3. I3 E-02 0.00 $0.00 0 RC4.8E 1.06E-09 1.86E + 05 1.97E-04 0.00 $0.00 0 RC4.30E 6.55E-09 5.07E + 06 3.32E-02 0.00 $0.00 0 RC4.36L 3.08E-08 5.90E + 06 8.84 E-02 0.00 $0.00 0 RC5. lE 5.10E-10 2.87 E + 06 1.46E-03 0.00 $0.00 0 SUM 1.96E-06 1.89E-01 $0.71 6.14E-09 AOC ($) 6.66E+ 08 AOC RISK REDUCTION $4.09 MR RISK REDUCTION $0.71 TOTAL RISK REDUCTION $4.80

TABLE 4-11 RISK REDUCTION EVALUATION (INCLUDING AOC) FOR B3, ALTERNATIVE PRESSURIZER AUXILIARY SPRAY Benefit MF. Risk Release Frequency Mean Dose Dose Risk fract. Savings CDF Class Events /v mr/ event mr/v reduct. $!r Reduction RCI. l E 1.36E46 1.19E + 02 1.62E-04 0.21 $0.03 2.86E-07 RCl.lM 3.83E-07 1.09E + 02 4.17 E-05 0.00 $0.00 0 RC2.1E 3.44 E-09 1.37E + 05 4.71 E-04 0.00 $0.00 0 RC2.2E 3.31 E-09 1.37E + 05 4.53 E-04 0.00 $0.00 0 RC2.4E 3.76E-08 2.38E + 04 8.94E-04 0.00 $0.00 0 RC2.5E 2. 84E-08 2.35 E + 04 6.67E-04 0.00 $0.00 0 RC2.6E 3.33E-08 2.35 E + 04 7.83 E-04 0.00 $0.00 0 RC2.7E 1.62E-08 2.35 E + 04 3.81 E-04 0.00 $0.00 0 RC2.2M 4.05E-09 1.31 E + 05 5.31E-04 0.00 $0.00 0 RC2.5M 3.95E-09 4.73 E + 04 1.87 E-04 0.00 $0.00 0 RC2.6M 9.08E49 3.02E + 04 2.74E-04 0.00 $0.00 0 RC2.7M 1.22E-08 1.38E + 05 1.68E-03 0.00 $0.00 0 RC3. lE 4.64E-09 1.02E + 06 4.73E-03 0.00 $0.00 0 RC3.2E 3.16E-09 1.32E + 06 4.17E-03 0.36 $1.50 1.14 E-09 RC3.4E 6.52E-09 1.20E + 06 7.82E-03 0.00 $0.00 0 RC3.6E 3.21 E-09 1.27E + 06 4.08E-03 0.36 $1.47 1.16E-09 RC3.2M 1.82E-09 1.8 t E + 06 3.26E-03 0.00 $0.00 0 RC3.6M 1.83E-09 1.97E + 06 3.61 E-03 0.00 $0.00 0 RC4.22E 5.99 E-09 5.24E + 06 3. I3 E-02 0.95 $29,83 5.69E-09 RC4.8E 1.06E-09 1.86E + 05 1.97E-04 0.00 $0.00 0 RC4.30E 6.55 E-09 5.07E + 06 3.32E-02 0.97 $32.21 6.35E-09 RC4.36L 3.08E-08 5.90E + 06 8.84 E-02 C.78 $68.95 2.40E-08 RC5. lE 5.10E-10 2.87E + 06 1.46E-03 0.00 $0.00 0 SUM 1.96E-06 1.89E-01 $133.99 3.24E-07 AOC ($) 6.66E+ 08 AOC RISK REDUCTION $202.59 MR RISK REDUCTION $133.99. l TOTAL RISK REDUCTION $336.58

                                                                                                 ~I l

l

I-TABLE 4-12 RISK REDUCTION EVALUATION (INCLUDING AOC) FOR B4, ALTERNATIVE HIGH PRESSURE SAFETY INJECTION Benefil MR Risk Release Frequency Mean Dose Dose Risk fract. Savings CDF Q;135 Events /v mr/ event mr/v reduct. $!y Reductinn RCI.lE 1.36E-06 1.19E + 02 1.62E-04 0.55 $0.09 7.488-07 RCI.lM 3.83E47 1.09E + 02 4.17E-05 1.00 $0.04 3.83 E-07 RC2.lE 3.44 E-09 1.37E + 05 4.71 E-04 0.16 $0.08 5.55E-10 RC2.2E 3.31 E-09 1.37E + 05 4.53E-04 0.38 $0.17 1.26E-09 RC2,4E 3.76E-08 2.38 E + 04 8.94 E-04 0.48 $0.43 1.80E-08 RC2.5E 2.84E-08 2.35 E + 04 6.67E-04 0.00 $0.00 0 RC2.6E 3.33E-08 2.35 E + 04 7.83 E-04 0.48 $0.33 1.60E-08 RC2.7E 1.62E-08 2.35E + 04 3. 81 E-04 0.00 $0.00 0 RC2.2M 4.05E-09 1.31 E + 05 5.31E-04 1.00 $0.53 4.05E-09 RC2.5M 3.95E-09 4.73 E + 04 1.87E-04 0.00 $0.00 0 RC2.6M 9.08E-09 3.02E + 04 2.74 E-04 l.00 $0.27 9.08E-09 RC2.7M 1.22E-08 1.38E + 05 1.68E-03 0.87 $1.46 1.06E-08 RC3.1E 4.64 E-09 1.02E + 06 4.73E-03 0.32 $1.51 1.49E-09 RC3.2E 3.16E-09 1.32 E + 06 4.17E-03 0.38 $1.58 1.20E-09 RC3.4E 6.52E-09 1.20E + 06 7.82E-03 0.42 $3.28 2,74E-09 RC3.6E 3.2 i E-09 1.27 E + 06 4.08E-03 0.38 $1.55 1.22E-09 RC3.2M 1.82E-09 1.81 E + 06 3,26E-03 1.00 $3.29 1.82E-09 RC3.6M 1.83E 1.97 E + 06 3.61E-03 1.00 $3.61 1.83 E-09 RC4.22E 5.99E-09 5.24 E + 06 3.13E-02 1.00 $31.38 5.99E-09 RC4.8E I .06E-09 1.86E + 05 1.97E-04 0.42 $0.08 4.45E-10 RC4.30E 6.55 E-09 5.07E + 06 3.32E-02 1.00 $33.16 6.55E-09 RC4.36L 3.08E-08 5.90E + 06 8.84E-02 0.00 $0.00 0 ) RC5.lE 5.10E-10 2.87E + 06 1.46E-03 0.00 $0.00 0 l SUM 1.96E-06 1.89E-01 $82.94 1.21E-06 l AOC ($) 6.66E+ 08  ; AOC RISK REDUCTION $807.19 MR RISK REDUCTION $82.94 TOTAL RISK REDUCTION $890.13 l l TABLE 4-13 I RISK REDUCTION EVALUATION (INCLUDING AOC) FOR B5, ALTERNATIVE RCS DESPRESSURIZATION  ; Benefit MR Risk  ! Release Frequency Mean Dose Dose Risk fract. Savings CDF Clan Events /.y mr/ event UlrLy reduct. $/.y Reduction RCl.lE 1.36E-06 1.19 E + 02 1.62E-04 0.36 $0.06 4.90E-07 RCl.1M 3.83E-07 1.09E r02 4.17E-05 0.00 $0.00 0 RC2. lE 3.44E-09 1.37E + 05 4.71E-04 0.69 $0.33 2.37E-09 RC2.2E 3.31E-09 1.37 E + 05 4.53 E-04 0.75 $0.34 2.48E-09 RC2.4E 3.76E-08 2.38E + 04 8.94E-04 0.42 $0.38 1.58E-08 RC2.5E 2.84 E-08 2.35 E + 04 6.67E-04 1.00 $0.67 2.84E 08 RC2.6E 3.33E-08 2.35 E + 04 7.83 E-04 0.52 $0.41 1.73E-08 RC2.7E 1.62E-08 2.35 E + 04 3.81 E-04 1.00 $0.38 1.62E-08 RC2.2M 4.05E-09 1.31 E + 05 5.31 E-04 0.00 $0.00 0 RC2.5M 3.95E-09 4.73 E + 04 1.87E-04 0.00 $0.00 0 RC2.6M 9.08E-09 3.02E + 04 2.74E-04 0.00 $0.00 0 RC2.7M 1.22E-08 1.38 E + 05 1.68 E-03 0.00 $0.00 0 RC3. l E 4.64 E-09 1.02 E + 06 4.73 E-03 0.56 $2.65 2.59E-09 RC3.2E 3.16E-09 1.32 E + 06 4.17E-03 0.62 $2.58 1.96 E-09 RC3.4E 6.52E-09 1.20E + 06 7.52 E-03 0.48 $3.75 3.13E-09 RC3.6E 3.21 E-09 1.27E + 06 4.08E-03 0.62 $2.53 1.99E-09 RC3.2M 1.82E-09 1.81 E + 06 3.26E-03 0.00 $0.00 0 RC3.6M 1.83 E-09 1.97E + 06 3.61 E-03 0.00 $0.00 0 RC4.22E 5.99E-09 5.24E + 06 3.13E-02 0.00 $0.00 0 RC4.8E 1.06E-09 1.86E + 05 1.97E-04 0.48 $0.10 5.09E-10 RC4.30E 6.55E-09 5.07E + 06 3.32E-02 0.00 $0.00 0 RC4.36L 3.08E-08 5.90E + 06 8 84E-02 0.00 $0.00 0 RC5.l E 5.10E-10 2.87E + 06 1.46E-03 0.00 $0.00 0 SUM 1.96E-06 1.89E-01 $14.18 5.83E-7 AOC ($) 6.66E+ 08 AOC RISK REDUCTION $388.04 MR RISK REDUCTION $14.18 TOTAL RISK REDUCTION $402.22 TABLE 4-14 RISK REDUCTION EVALUATION (INCLUDING AOC) FOR B6, DIESEL SI PUMPS (2) Benefit MR Risk Release Frequency Mean Dose Dose Risk fract. Savings CDF Class Ennts/v mr/ event mr/v reduct, b Reduction RCl.lE 1.36E-06 1.19 E + 02 1.62E 04 0.55 $0.09 7.48E-07 RCI.lM 3.83E-07 1.09E + 02 4.17E-05 1.00 $0.04 3.83E-07 RC2. l E 3.44E-09 1.37E + 05 4.71E-04 0.16 $0.08 5.50E-10 RC2.2E 3.31 E-09 1.37E + 05 4.53E-04 0.38 $0.17 1.26E-09 RC2.4E 3.76E-08 2.38 E + 04 8.94 E-04 0.48 $0.43 1.80E-08 RC2.5E 2.84 E-08 2.35 E + 04 6.67E44 0.00 $0.00 0 RC2.6E 3.33E-08 2.35E + 04 7.83E-04 0.48 $0.38 1.60E-08 MC2.7E 1.62E-08 2.35E + 04 3.81E-04 0.00 $0.00 0 RC2.2M 4.05E-09 1.31 E + 05 5.31 E-04 1.00 $0.53 4.05E-09 RC2.5M 3.95E49 4.73 E + 04 1.87E-04 1.00 $0.19 3.95E-09 RC2.6M 9.08E-09 3.02E + 04 2.74E48 1.00 $0.27 9.08E-09 RC2.7M 1.22E-08 1.38E + 05 1.68E-03 1.00 $1.68 1.22E-08 RC3.l E 4.64 E-09 1.02E + 06 4.73E-03 0.32 $1.51 1.49 E-09 RC3.2E 3.16E-09 1.32E 4 06 4.17E-03 0.38 $1.58 1.20E-09 RC3.4E 6.52E-09 1.20E + 06 7.82E.03 0.42 $3.28 2.74E-09 RC3.6E 3.21E-09 1.27 E + 06 4.08E-03 0.38 $1.55 1.22E-09 RC3.2M 1.82E-09 1.81 E + 06 3.26E-03 1.00 $3.29 1,82E-09 RC3.6M 1.83 E-09 1.97E + 06 3.6 ] E-03 1.00 $3.61 1.83 E-09 RC4.22E 5.99E-09 5.24E + 06 3.13 E-02 1.00 $31.33 5.99 E-09 , RC4.8E 1.06E-09 1.86E + 05 1.97E-04 0.42 $0.08 4.45E-10 RC4.30E 6.55E-09 5.07E + 06 3.32E-02 1.00 $33.21 6.55E-09 RC4.36L 3.08E-08 5.90E + 06 - 8.84 E-02 0.00 $0.00 0 RC5.lE 5.10E-10 2.87E + 06 1.46E-03 0.00 $0.00 0 SUM 1.96E-06 1.89E-01 $83.35 1.22E-06 AOC ($) 6.66E+ 08 AOC RISK REDUCTION $810.87 MR RISK REDUCTION $83.35 TOTAL, RISK REDUCTION $894.22 l

                                                                                                                           'i

1 l TABLE 4-15 RISK REDUCTION EVALUATION FOR B7, ALTERNATIVE STARTUP FEEDWATER SYSTEM Benefit Release Frequency Meim Dose Dose Risk fract. Savings Class Events /v mr/ event mr/v reducta $/v RCI. lE 1.36E-06 1.19E + 02 1.62E-04 0.36 $ 0.06 RCl.IM 3.83 E-07 1.09E + 02 4.17E-05 0.00 $ 0.00 RC2. lE 3.44E-09 1.37E + 05 4.71 E-04 0.69 $ 0.33 RC2.2E 3.31E-09 1.37E + 05 4.53 E-04 0.75 $0.34 RC2.4E 3.76E-08 2.38E + 04 8.94 E-04 0.42 $0.38 RC2.5 E 2.84E-08 2.35 E + 04 6.67E-04 1.00 $ 0.67 RC2.6E 3.33 E-08 2.35E + 04 7.83 E-04 0.52 $ 0.41 RC2.7E 1.62E-08 2.35 E + 04 3. 81 E-04 0.00 $ 0.00 RC2.2M 4.05 E-09 1.31E + 05 5.31E-04 0.00 $ 0.00 RC2.5M 3.95E-09 4.73 E + 04 1.87E-04 0.00 $0.00 RC2.6M 9.08E-09 3.02 E + 04 2.74 E-04 0.00 $0.00 RC2.7M 1.22E-08 1.38E + 05 1.68E-03 0.56 $ 0.94 RC3. lE 4.64 E-09 1.02E + 06 4.73E-03 0.62 $ 2.93 RC3.2E 3.16E-09 1.32E + 06 4.17E-03 0.48 $ 2.00 RC3.4 E 6.52E-09 1.20E + 06 7.82E-03 0.62 $4.85 RC3.6E 3.21 E-09 1.27E + 06 4.08E-03 0.75 $ 3.06 RC3.2M 1.82E-09 1.81E + 06 3.29E-03 0.75 $ 2.47 , RC3.6M 1.83 E-09 1.97E + 06 3.61 E-03 0.00 $ 0.00 $ RC4.22E 5.99E-09 5.24 E + 06 3.14E-02 0.48 $15.07 RC4.8E 1.06E-09 1.86E + 05 1.97E-04 0.00 $ 0.00 RC4.30E 6.55E-09 5.07E + 06 3.32E-02 0.00 $ 0.00 RC4.36L 3.08E-08 5.90E + 06 8.84 E-02 0.00 $ 0.00 RC5. lE 5.10E-10 2.87E + 06 1.46E-03 0.00 $0.00 SUM 1.96E-06 1.89E-01 $33.51 l l i i I i

TABLE 4-16 RISK REDUCTION EVALUATION (INCLUDING AOC) FOR B8, EXTENDED RWST SOURCE Henefit MR Risk Release Frequency Mean Dose Dose Risk fract. Savings CDF Class Events /v mr/ event mr/v reduct, $/(y Reduction RCl.!E 1.36E-06 1.19E + 02 1.62E-04 0.00 $0.00 0 RCl.lM 3.83E-07 1.09E + 02 4.17E-05 0.00 $0.00 0 RC2.1E 3.44E-09 1.37E +05 4.71 E-04 0.00 $0.00 0 RC2.2E 3.31 E-09 1.37E + 05 4.53E41 0.00 $0.03 0 RC2.4E 3.76E-08 2.38 E + 04 8.94E-04 0.00 50.00 0 RC2.5E 2.84 E-08 2.35 E + 04 6.67E-04 0.00 $0.00 0 RC2.6E 3.33E-08 2.35 E + 04 7.83E-04 0.00 $0.C0 0 RC2.7E 1.62E-08 2.35 E + 04 3.81 E-04 0.00 $0.00 0 RC2.2M 4.05E-09 1.31 E + 05 5.31 E-04 0.00 $0.00 0 RC2.5M 3.95E-09 4.73 E + 04 1.87E41 0.00 $0.00 0 RC2.6M 9.08E-09 3.02E + 04 2.74E41 0.00 $0.00 0 RC2.7M l .22 E-08 1.38E + 05 1.68E-03 0.00 $0.00 0 RC3.1 E 4.64E-09 1.02E + 06 4.73E-03 0.00 $0.00 0 RC3.2E 3.16E-09 1.32E + 06 4.17E-03 0.00 $0.00 0 RC3.4E 6.52E-09 1.20E + 06 7.82E-03 0.00 $0.00 0 RC3.6E 3.21E-09 1.27E + 06 4.08E.03 0.00 $0.00 0 RC3.2M 1.82E-09 1.81E + 06 3.26E-03 0.00 $0.00 0 RC3.6M 1.83E-09 1.97E + 06 3.61E-03 0.00 $0.00 0 RC4.22E 5.99E-09 5.24E + 06 3. I3 E-02 0.00 $0.00 0 RC4.8E 1.06E-09 1.86E + 05 1.97E-04 0.00 $0.00 0 RC4.30E 6.55E-09 5.07 E + 06 3.32E-02 0.00 $0.00 0 RC4.36L 3.08E-08 5.90E + 06 8.84E-02 1.00 $88.40 3.08E-08 RC5. lE 5.10E-10 2.87E + 06 1.46E-03 0.00 $0.00 0 SUM 1.96E-06 1.89E-01 $88.40 3.08E-08 AOC ($) 6.66E+ 08 AOC RISK REDUCTION $ 3.70 MR RISK REDUCTION $88.40 TOTAL RISK REDUCTION $ 92.10

TABLE 4-17 RISK REDUCTION EVALUATION (INCLUDING AOC) FOR C1, THIRD DIESEL GENERATOR Benefit MR Risk Release Frequency Mean Dose Dose Risk fract. Savings CDF Gass F. vents /v mr/ event mr/v reduct. $!y Rrdgetion , RCI.lE 1.36E-06 1.19E + 02 1.62E-04 0.00 $0.00 0 RC1.IM 3.83 E-07 1.09E + O2 4.17E-05 0.00 $0.00 0 RC2. l E 3.44E-09 1.37E + 05 4.71 E-04 0.00 $0.00 0 RC2.2E 3.31E-09 1.37E + 05 4.53E-04 0.00 $0.00 0 RC2.4E 3.76E-08 2.38E + 04 8.94E-04 0.00 $0.00 0 RC2.5E 2. 84E-08 2.35 E + 04 6.67E-04 0.00 $0.00 0 RC2.6E 3.33E-08 2.35 E + 04 7.83 E-04 0.00 $0.00 0 RC2.7E 1.62E-08 2.35 E + 04 3. 81 E-04 0.00 $0.00 0 RC2.2M 4.05E-09 1.31 E + 05 5.31E-04 0.00 $0.00 0 RC2.5M 3.95E-09 4.73 E + 04 1.87E-04 0.24 $0.04 9.4SE-10 RC2.6M 9.08E-09 3.02E + 04 2.74 E-04 0.00 $0.00 0 RC2.7M 1.22E-08 1.38E + 05 1.68 E-03 0.24 $0.40 2.93E-09 l RC3. lE 4.64E-09 1.02E + 06 4.73E-03 0.00 $0.00 0 RC3.2E 3. I6 E-09 1.32E + 06 4. I7E-03 0.00 $0.00 0  ! RC3.4E 6.52E-09 1.20E + 06 7.82E-03 0.00 $0.00 0 l RC3.6E 3.21 E-09 1.27E + 06 4.0SE-03 0.00 $0.00 0 RC3.2M 1.82E-09 1.81 E + 06 3.26E-03 0.00 $0.00 0 l RC3.6M 1.83E-09 1.97E + 06 3.61 E-03 0.00 $0.00 0 RC4.22E .5.99E-09 5.24 E + 06 3.13 E-02 0.00 $0.00 0 RC4.8E 1.06E-09 1.86E + 05 1.97E-04 0.00 $0.00 0 RC4.30E 6.55E-09 5.07E + 06 3.32E-02 0.00 $0.00 0 RC4.36L 3.08E-08 5.90E + 06 8.84 E-02 0.00 $0.00 0 RC5.1E 5.10E-10 2.87E + 06 1.46E-03 0.00 $0.00 0 SUM 1.96E-06 1.89E-01 $0.45 3.88E-09 AOC ($) 6.66E+ 08 AOC RISK REDUCTION $2.58 MR RISK REDUCTION $0.45 TOTAL RISK REDUCTION $3.03 TABLE 4-18 RISK REDUCTION EVALUATION (INCLUDING AOC) FOR C2, TORNADO-PROTECTION FOR COMBUSTION TURBINE Benefit MR Risk Release Frequency Mean Dose Dose Risk fract. Savings CDF Class Events /v mr/ event nirly reduct. $!.y Reduction RCI.lE 1.36E-06 1.19E + 02 1.62E-04 0.00 $0.00 0 RCl.lM 3.83 E-07 1.09E + 02 4.17E-05 0.00 $0.00 0 RC2.1E 3.44E-09 1.37E + 05 4.71E-04 0.00 $0.00 0 RC2.2E 3.31 E-09 1.37E + 05 4.53E 04 0.00 $0.00 0 RC2.4E 3.76E-08 2.38E + 04 8.94 E-04 0.00 $0.00 0 RC2.5E 2.84E-08 2.35E + 04 6.67E-04 0.00 $0.00 0 RC2.6E 3.33E-08 2.35 E + 04 7.83 E-04 0.00 $0.00 0 RC2.7E 1.62E-08 2.35 E + 04 3.81 E-04 0.CJ $0.00 0 RC2.2M 4.05E-09 1.31 E + 05 5.31 E-04 0.00 $0.00 0 RC2.5M 3.95E-09 4.73 E + 04 1.87 E-04 0.43 $0.08 1.70E-09 RC2.6M 9.08E-09 3.02E + 04 2.74E-04 0.00 $0.00 0 RC2.7M 1.22E-08 1.38 E + 05 1.68E-03 0.90 $1.52 1.10E48 RC3.l E 4.64 E-09 1.02E + 06 4.73E-03 0.00 $0.00 0 RC3.2E 3.16E-09 1.32E + 06 4.17E-03 0.00 $0.00 0 RC3.4E 6.52E-09 1.20E + 06 7.82E43 0.00 $0.00 0 RC3.6E 3.21 E-09 1.27E + 06 4.08E-03 0.00 $0.00 0 RC3.2M 1.82E-09 1.81 E + 06 3.26E-03 0.00 $0.00 0 RC3.6M 1. 83 E-09 1.9'7 E + 06 3.61E-03 0.00 $0.00 0 RC4.22E 5.99E-09 5.24E + 06 3.13 E-02 0.00 $0.00 0 RC4.8E 1.06E49 1.86E + 05 1.97E-04 0.00 $0.00 0 l RC4.30E 6.55E-09 5.07E + 06 3.32E-02 0.00 $0.00 0 i RC4.36L 3.08E-08 5.90E + 06 8.84 E-02 0.00 $0.00 0 l RC5.lE 5.10E-10 2.87E + 06 1.46E-03 0.00 $0.00 0  ; 1 SUM 1.96E-06 1.89E-01 $1.60 1.27E-08 l AOC ($) 6.66E+ 08 l AOC RISK REDUCTION $8.44 l MR RISK REDUCTION $1.60 TOTAL RISK REDUCTION $10.04

l TABLE 4-19 RISK REDUCTION EVALUATION (INCLUDING AOC) FOR D1, ALTERNATIVE ATWS PRESSURE RELIEF VALVES Benefit MR Risk Release Frequency Mean Dose Dose Risk fract. Savings CDF Gas ErrnLs!.y mr/ event mr/v rsdyst,. $ly Reduction RCl.lE 1.36 E-06 1.19E + 02 1.62E-04 0.03 $0.00 4.08E-08 RCI.1M 3.83 E-07 1.09 E + 02 4.17E-05 0.03 $0.00 1.15E-08 RC2. l E 3.44E-09 1.37E + 05 4.71 E-04 0.03 $0.01 1.03E-10 RC2,2E 3.31E-09 1.37E + 05 4.53 E-04 0.03 $0.01 9.93E-11 RC2.4E 3.76E-08 2.38E + 04 8.94E-04 0.03 $0.03 1.13E-09 RC2.5 E 2.84E-08 2.35 E + 04 6.67E-04 0.03 $0.02 8.52E-10 RC2.6E 3.33E-08 2.35 E + 04 7.83 E-04 0.03 $0.02 1.00E-09 RC2.7E 1.62E-08 2.35 E + 04 3.81 E-04 0.00 $0.00 .O RC2.2M 4.05 E-09 1.31 E + 05 5.31 E-04 0.03 $0.02 1.22E-10 RC2.5M 3,95 E-09 4.73 E + 04 1.87E-04 0.00 $0.00 0 RC2.6M 9.08E-09 3.02E + 04 2.74E-04 0.03 $0.01 2.72E-10 RC2.7M 1.22E-08 1.38E + 05 1.68E-03 0.00 $0.00 0 RC3.lE 4.64 E-09 1.02E + 06 4.73E-03 0.03 $0.14 1.39E-10 RC3.2E 3.16E-09 1.32E + 06 4.17E-03 0.03 $0.13 9.48E-11 RC3.4E 6.52E-09 1.20E + 06 7.82E-03 0.03 $0.24 1.96E-10 RC3.6E 3.21E-09 1.27E + 06 4.08E-03 0.03 $0.12 9.63 E-I l RC3.2M 1.82E-09 1. 81 E + 06 3.26E-03 0.03 $0.10 5.46E-Il RC3.6M 1.83 E-09 1.97E + 06 3.61E-03 0.03 $0.11 5.49E-11 RC4.22E 5.99E-09 5.24E + 06 3.13E-02 0.00 $0.00 0 RC4.8E 1.06E-09 1,86E + 05 1.97E-04 0.03 $0.01 3.18E-11 RC4.30E 6.55 E-09 5.07 E + 06 3.32E-02 0.00 $0.00 0 RC4.36L 3.08E-08 5.90E + 06 8.84E-02 0.00 $0.00 0 RC5. l E 5.10E-10 2.87E + 06 1.46 E-03 0.00 $0.00 0 SUM 1.96E-06 1.89E-0I $0.97 5.65E-08 AOC ($) 6.66E+ 08 AOC RISK REDUCTION $37.63 MR RISK REDUCTION $0.97 TOTAL RISK REDUCTION $38.60 l i 1

                                                                                   \

TABLE 4-20 RISK REDUCTION EVALUATION FOR E1, ALTERNATIVE CONTAINMENT SPRAY lienefit Release Frequency Mean Dose Dose Risk fract. Smings Class Events /v mr/ event mr/v m!sth $/v RC1.1E 1.36E-06 1.19E + 02 1.62E-04 0.00 $0.00 RCI.lM 3.83 E-07 1.09 E + 02 4.17E45 0.00 $0.00 RC2.l E 3.44E49 1.37E + 05 4.71 E-04 0.00 $0.00 RC2.2E 3.31 E-09 1.37E + 05 4.53 E-04 0.00 $0.00 RC2.4E 3.76E-08 2.38 E + 04 8.94 E-04 0.00 $0.00 RC2.5E 2.84E-08 2.35 E + 04 6.67E-04 0.05 '$0.03 RC2.6E 3.33E-08 2.35 E + M 7.83E-M 0.00 $0.00 RC2.7E 1.62E-08 2.35 E + 04 3.81 E-04 0.00 $0.00 RC2.2M 4.05 E-09 1.31E + 05 5.31 E-04 1.00 $0.53 RC2.5M 3.95E-09 4.73 E + 04 1.87E-04 0.36 $0.07 RC2.6M 9.08E49 3,02E 4 04 2.74 E-04 0.00 $0.00 RC2.7M 1.22E-08 1.38E + 05 1.68E43 0.78 $1.31 RC3. lE 4.64E-09 1.02E + 06 4.73 E-03 0.00 $0.00 RC3.2E 3.16E-09 1.32E + 06 4.17E-03 0.00 $0.00 RC3.4E 6.52E-09 1.20E + 06 7. 82 E-03 0.00 $0.00 RC3.6E 3.21E-09 1.27E + 06 4.08 E-03 0.00 $0.00 RC3.2M 1.82E-09 1.81 E + 06 3.29E-03 0.78 $2.57 RC3.6M 1.83E49 1.97E + 06 3.61E-03 0.78 $2.82 RC4.22E 5.99E-09 5.24E4 06 3.14E-02 0.00 $n.00 RC4.8E 1.00E-09 1.86E + 05 1.97E44 0.00 $0.00 RC4.30E 6.55E-09 5.07E + 06 3.32E-02 0.00 $0.00 RC4.36L 3.08E-08 5.90E + 06 8.84 E-02 0.00 $0.00 RC5. l E 5.10E-10 2.87E + 05 1.46E-03 0.00 $0.00 SUM 1.96E-06 1.89E-0I $7.35 a

                            - ?O -

b TABLE 4-21 RISK REDUCTION EVALUATION FOR E2, FILTERED VENT (CONTAINMENT) Benefit Release Frequency Mean Dose Dose Risk fract. Savings Class Events /v mr/ event mr/v reduch _j/1 _ RCI.lE 1.36E-06 1.19E + 02 1.62E-04 0.00 $0.00 RC1.IM 3.83 E-07 1.09E + O2 4. I7E-05 0.00 $0.00 RC2.lE 3.44E-09 1.37E + 05 4.71 E-04 0.00 $0.00 RC2.2E 3.31E-09 1.37E + 05 4.53 E-04 0.00 $0.00 RC2.4E 3.76E-08 2.38E + 04 8.94 E-04 0.00 $0.00 RC2.5 E 2.84E-08 2.35E + 04 6.67 E-04 0.00 $0.00 RC2.6E 3.33E-08 2.35 E + 04 7.83 E-04 0.00 $0.00 RC2.7E 1.62E-08 2.35 E + 04 3.81 E-0 4 0.00 $0.00 RC2.2M 4.05E-09 1.3 ] E + 05 5.31E-04 1.00 $0.53 RC2.5M 3.95 E-09 4.73E + 04 1.87E-04 0.00 $0.00 l RC2.6M 9.08E 09 3.02E + 04 2.74E-04 0.00 $0.00 RC2.7M 1.22E-08 1.38E + 05 1.68E-03 0.00 $0.00 RC3. lE 4.64E-09 1.02E + 06 4.73E-03 0.00 $0.00 l RC3.2E 3.16E-09 1.32E + 06 4.17E-03 0.00 $0.00 RC3.4E 6.52E-09 1.20E + 06 7.82E-03 0.00 $0.00 j RC3.6E 3.21 E-09 1.27E + 06 4.08E-03 0.00 $0.00  ; RC3.2M 1.82E-09 1.81 E + 06 3.29E-03 0.00 $0.00 RC3.6M 1. 83 E-09 1.97E +06 3.61E-03 0.00 $0.00 RC4.22E 5.99E-09 5.24 E + 06 3.14 E-02 0.00 $0 00 RC4.8 E 1.06E-09 1.86 E + 05 1.97E-04 0.00 $0.00 RC4.30E 6.55E-09 5.07E + 06 3.32E-02 0.00 $0.00 'I RC4.36L 3.08E-08 5.90E +06 8.84E-02 0.00 $0.00 I RC5. lE 5.10E-10 2.87E + 06 1.46E-03 0.00 $0.00 SUM 1.96E-06 1.89E-01 $0.53 TABLE 4-22 RISK REDUCTION EVALUATION FOR E3, ALTERNATIVE CONCRETE COMPOSITION Benent Release Frequency Mean Dose Dose Risk fract. Savings Class Events /v mr/ event mr/v reduct. $/v RCI.lE 1.36E-06 1.19E + 02 1.62E-04 0.00 $0.00 RC1.lM 3.83E47 1.09E + 02 4.17E-05 0.00 $0.00 RC2.1E 3.44E-09 1.37E + 05 4.71E-04 0.00 $0.00 RC2.2E 3.31 E-09 1.37E + 05 4.53 E-04 0.00 $0.00 RC2.4E 3.76E-08 2.38E + 04 8.94 E-04 1.00 $0.89 RC2.5E 2.84 E-08 2.35E + 04 6.67E-04 1.00 $0.67 RC2.6E 3.33E-08 2.35 E + 04 7.83E-04 1.00 $0.78 RC2.7E 1.62E-08 2.35 E +04 3.81E-04 1.00 $0.38 < RC2.2M 4.05E-09 1.31 E + 05 5.31 E-04 0.00 $0.00 RC2.5M 3.95 E-09 4.73 E + 04 1.87E-04 1.00 $0.19 RC2.6M 9.08E-09 3.02E + 04 2.74 E-04 1.00 $0.27 RC2. /M 1.22E-08 1.38E + 05 1.68 E-03 1.00 $1.68 RC3. lE 4.64E-09 1.02E + 06 4.73E-03 0.00 $0.00 RC3.2E 3.16E-09 1.32E + 06 4.17E-03 0.00 $0.00 RC3.4E 6.52E-09 1.20E + 06 7.82E-03 0.00 $0.00 RC3.6E 3.21E-09 1.27E + 06 4.08E-03 0.00 $0.00 RC3.2M 1.82E-09 1.81 E + 06 3.29E-03 0.00 $0.00 RC3.6M 1.83 E-09 1.97E + 06 3.61E-03 0.00 $0.00 RC4.22E 5.99E-09 5.24E + 06 3.14E-02 0.00 $0.00 - RC4.8E 1.06E49 1.86 E + 05 1.97E-04 0.00 $0.00 RC4.30E 6.55E-09 5.07 E + 06 3.32E-02 0.00 $0.00 RC4.36L 3.08E-08 5.90E + 06 8.84 E-02 0.00 $0.00 RC5. l E 5.10E-10 2.87 E + 06 1.46E-03 0.00 $0.00 SUM 1.96E-06 1.89E-01 $4.86 l i TABLE 4-23 RISK REDUCTION EVALUATION FOR E4, REACTOR VESSEL EXTERIOR COOLING Benefit Release Frequency Mean Dose Dose Risk fract. redu& Sasings l Class Events /y mr/ event mr/v $/v ) RCl.lE 1.36E-06 1.19E + 02 1.62E-04 0.00 $0.00 RC1.1M 3.83E-07 1.09E + 02 4.17E-05 0.00 $0.00 RC2.1E 3.44 E-09 1.37E + 05 4.71 E-04 0.00 $0.00 RC2.2E 3.31E-09 1.37E + 05 4.53 E-04 0.00 $0.00 RC2.4E 3.76E-08 2.38E + 04 8.94E-04 1.00 $0.89 RC2.5E 2.84E-08 2.35 E + 04 6.67E-04 1.00 $0.67 RC2.6E 3.33E-08 2.35 E + 04 7.83 E-04 1.00 $0.78 RC2.7E 1.62E-08 2.35E + 04 3.81 E-04 1.00 $0.38 RC2.2M 4.05 E-09 1.3 ] E + 05 5.31E-04 0.00 $0.00 RC2.5M 3.95E-09 4.73E + 04 1.87E-04 0.00 $0.00 RC2.6M 9.08E-09 3.02E + 04 2.74 E-04 1.00 $0.27 RC2.7M 1.22E-08 1.38E + 05 1.68 E-03 0.00 $0.00 RC3. !E 4.64E-09 1.02E + 06 4.73E-03 1.00 $4.73 RC3.2E 3.16E-09 1.32 E + 06 4.17 E-03 1.00 $4.17 RC3.4E 6.52E-09 1.20E + 06 7.82E-03 1.00 $7.82 RC3.6E 3.21 E-09 1.27E + 06 4.08E-03 1.00 $4.08 RC3.2M 1.82E-09 1.81 E + 06 3.29E-03 1.00 $3.29 RC3.6M 1.83E-09 1.97E + 06 3.61 E-03 1.00 $3.61 RC4.22E 5.99E4)9 5.24E 4 06 3.14E-02 ' O.00 $0.00 RC4.8E 1.06E-09 1.86E + 05 1.97E-04 0.00 $0.00 RC4.30E 6.55E-09 5.07E + 06 3.32E-02 0.00 $0.00 RC4.36L 3.08E-08 5.90E + 06 8.84E-02 0.00 $0.00 RC5.1E 5.1OE-10 2 87F + 06 1.46E-03 0.00 ' $0.00 SUM 1.96E-06 1.89E-01 $30.69 i TABLE 4-24 RISK REDUCTION EVALUATION FOR ES, ALTERNATIVE H2 IGNITERS Benefit Release Frequency Mean Dose Dose Risk fract reduct. Savings Class Events /v mr/ event mr/v $/v RCI.lE 1.36E-06 1.19E + 02 1.62E-04 0.00 $0.00 RC1.IM 3.83 E-07 1.09 E + O2 4. I7 E.05 0.00 $0.00 RC2.1 E 3.44E-09 1.37 E + 05 4.71 E-04 1.00 $0.47 RC2.2E 3.31 E-09 1.37E + 05 4.53E-04 1.00 $0.45 RC2.4E 3.76E-08 2.38E + 04 8.94E-04 0.00 $0.00 RC2.5E 2.84E-08 2.35 E + 04 6.67E-04 0.00 $0.00 RC2.6E 3.33E-08 2.35 E + 04 7.83E-04 0.00 $0.00 RC2.7E 1.62E-08 2.35E + 04 3.81 E-04 0.00 $0.00 RC2.2M 4.05 E-09 1.31 E + 05 5.31E-04 0.00 $0.00 RC2.5M 3.95E-09 4.73 E + 04 1.87E-04 0.00 $0.00 RC2.6M 9.08E-09 3.02E4 M 2.74E-04 0.00 $0.00 RC2.7M 1.22 E-08 1.38E + 05 1.68E-03 0.00 $0.00 RC3. lE 4.64E49 1.02E + 06 4.73 E-03 0.00 $0.00 RC3.2E 3.16E-09 1.32E + 06 4.17 E-03 0.00 $0.00 RC3.4 E 6.52E-09 1.20E + 06 7.82 E-03 0.00 $0.00 RC3.6E 3.21 E-09 1.27E + 06 4.08E-03 0.00 $0.00 , RC3.2M 1.82E-09 1. S I E + 06 3.29E-03 0.00 $0.00 RC3.6M 1.83 E-09 1.97E + 06 3.61 E-03 0.00 $0.00 RC4.22E 5.99E-09 5.24 E + 06 3.14 E-02 0.00 $0.00 RC4.8E 1.06E-09 1. 86 E + 05 1.97E-04 0.00 $0.00 RC4.30E 6.55E-09 5.07E + 06 3.32E-02 0.00 $0.00 RC4.36L 3.08E-08 5.90E 4 06 8.84E-02 0.00 $0.00 RC5. l E 5.10E-10 2.87 E + 06 1.46E-03 0.00 $0.00 SUM 1.9t;E-06 1.89E-01 $0.92 J TABLE 4-25 RISK REDUCTION EVALUATION FOR E7, MSSV AND ADV BCRUBBING BeneEt Release Frequency Mean Dose Dose Risk fract. m!urL Savings Class Events /v mr/esent mr/v $/v RCLIE 1.36E-06 1.19E + 02 1.62E-04 0.00 $ 0.00 RC1.1M 3.83E-07 1.09E + 02 4.17E-05 0.00 $ 0.00 RC2.1E 3.44E-04 1.37E + 05 4.7 ] E-04 0.00 $0.00 RC2.2E 3.31E-09 1.37 E + 05 4.53 E-04 0.00 $ 0.00 RC2.4E 3.76E-08 2.38E + 04 8.94E-04 0.00 $0.00 RC2.5 E 2.84E-08 2.35 E + 04 6.67E-04 0.00 $ 0.00 RC2.6E 3.33E-08 2.35 E + 04 7.83E-04 0.00 $0.00 RC2.7E 1.62E-08 2.35E + 04 3.81E-04 0.00 $0.00 RC2.2M 4.05E-09 1.31 E + 05 5.31 E-04 0.00 $ 0.00 RC2.5 M 3.95E-09 4.73 E + 04 1.87E-04 0.00 $ 0.00 , RC2.6M 9.08E-09 3.02E + 04 2.74E-04 0.00 $ 0.00 RC2.7M 1.22E-08 1.38E + 05 1.68E-03 0.00 $ 0.00 RC3. lE 4.64 E-09 1.02E + 06 4.73E-03 0.00 $0.00 RC3.2E 3.16E-09 1.32E + 06 4.17E-03 0.00 $0.00 RC3.4E 6.52E-09 1.20E + 06 7.82E-03 0.00 $ 0.00 RC3.6E 3.21E-09 1.27E + 06 4.08E-03 0.00 $0.00 RC3.2M 1.82E-09 1.81E + 06 3.29E-03 0.00 $0.00 RC3.6M 1. 83 E-09 1.97E + 06 3.61 E-03 0.00 $0.00 RC4.22E 5.99E-09 5.24 E + 06 3.14E-02 1.00 $31.38 i RC4.8E 1.06E-09 1.86E + 05 1.97E-04 0.00 $ 0.00 RC4.30E 6.55E-09 5.07E + 06 3.32E-02 1.00 $33.21 RC4.36L 3.08E-08 5.90E + 06 8. 84 E-02 1.00 $88.40 , RC5. l E 5.10E-10 2.87E + 06 1.46E4)3 0.00 $0.00 SUM 1.96E-06 1.89E-01 $152.99 l l TABLE 4-26 RISK REDUCTION EVALUATION (INCLUDING AOC) FOR E8, ALTERNATIVE CONTAINMENT MONITORING SYSTEM Benefit MR Risk Release Frequency Mean Dose Dose Risk fract. Sasin;:s CDF . Class Events /v mr/ event mr/v redugh $ly Reductjort RC1.1 E 1.36E-06 1.19E + 02 1.62E-04 0.00 $0.00 0 RCl.lM 3.83 E-07 1.09E + 02 4.17E-05 0.00 $0.00 0 RC2.1E 3.44 E-09 1.37E + 05 4.71E-04 - 0.00 $0.(0 0 RC2.2E 3.31E49 1.37E + 05 4.53E-04 0.00 $0.00 0 stC2.4E 3.76E-08 2.38E + 04 8.94E-04 0.00 $0.00 0 RC2.5E 2.84E-08 2.35E + 04 6.67E44 0.00 $0.00 0 RC2.6E 3.33E-08 2.35E + 04 7.83E-04 0.00 $0.00 0 RC2.7E 1.62E-08 2.35E + 04 3.81 E-04 0.00 $0.00 0 RC2.2M 4.05E49 1.31 E + 05 5.31 E-04 0.00 $0.00 0 RC2.5M 3.95E-09 4.73 E + 04 1.87E-04 0.00 $0.00 0 RC2.6M 9.08E49 3.02E + 04 2.74 E-04 0.00 $0.00 0 RC2.7M 1.22E-08 1.38E + 05 1.68E-03 0.00 $0.00 0 RC3.1E 4.64E-09 1.02E + 06 4.73E-03 0.00 $0.00 0 RC3.2E 3.16E-09 1.32E + 06 4.17E-03 0.00 $0.00 0 RC3.4 E 6.52E-09 1.20E + 06 7.82E-03 0.00 $0.00 0 RC3.6E 3.21E-09 1.27 E + 06 4.08E-03 0.00 $0.00 0 RC3.2M 1. 82E-09 1.81 E + 06 3.26E-03 0.00 $0.00 0 RC3.6M 1.83 E-09 1.97E + 06 3.61 E-03 0.00 $0.00 0 RC4.22E 5.99E49 5.24E + 06 3.13E-02 0.00 $0.00 0 RC4.8E 1.06E-09 1.86E + 05 1.97E41 1.00 $0.20 1.06E-09 RC4.30E 6.55 E-09 5.07E + 06 3.32E-02 0.00 $0.00 0 RC4.36L 3.08E-08 5.90E + 06 8.84 E-02 0.00 $0.00 0 RC5. l E 5.10E-10 2.87E + 06 1.46E-03 1.00 $ 1.46 5.10E-10 SUM 1.96E-06 1.89E-01 $1.66 1.57E-09 AOC ($) 6.66E+ 08 AOC RISK REDUCTION $1.09 MR RISK REDUCTION $1.66 TOTAL RISK REDUCTION $2.75 I 1 l 1 I

          -     .     ~ _ .     .   ..            -     .   -- -   . .-

5.0

SUMMARY

AND CONCLUSIONS The System 80+ design is an evolutionary Advanced Light Water Reactor (ALWR) design with improved design features to reduce the risk of core damage and mitigate the consequences if core damage should occur. The design process was integrated with the PRA to ensure that the risk was very low and distributed over all of the safety related systems (i.e., no single system carries a disproportional responsibility for plant safety). The design ensured that no single accident sequence dominated the plant risk and the lessons learned from previous PRAs were addressed. Sixty-three Design Alternatives were considered and the expected risk reduction from twenty-seven of those alternatives were quantified. These were selected based on the DAs evaluated for the Limerick plant * , comanche PeakO, NUREG/CR-4920"h, GI-16300, and the results from the System 80+ PRA performed by ABB-CE. The DAs were selected to address the sequences that either have the largest risk to the public or sequences that have high CDF. The analysis used a bounding technique. It was assumed that each DA worked perfectly and completely eliminated the accident sequences that the DA was to address. This approach maximizes the benefits associated with each DA. The benefits were the reduction in risk in terms of whole body person-rems per year received by the total population around the ALWR site. Consistent with the standard used by NRC to evaluate offsite impacts, health and economic effect costs were evaluated based on a value of $1000 per offsite person-rem averted. Table 5-1 summarizes the results of the DA quantification including AOC. The second column is a capital cost estimate for the given DAs. The third column is the annual risk reduction to the Combined License (CL) applicant for each DA for dose risk to the general population using in person-rem / year reduction. The ) next column gives the AOC savings and the cost per person rem is i given in the last column. J The System 80+ plant was designed to meet the stringent design j goals in the EPRI ALWR Utility Requirements DocumentM. The System 80+ design has a core damage frequency approximately two orders of magnitude lower than existing plants. The analysis presented ) in this report conservatively estimated the benefits of the DAs by assuming that they would work perfectly to eliminate the type of accident they are designed to address and would require no maintenance or testing. Because of the small initial risk associated with the System 80+ design, none of the DAs was found to be cost beneficial. Therefore, after evaluating a reasonable and comprehensive set of candidate SAMDAs relevant to the System 80+ design in terms of i costs, averted onsite costs and potential benefits using a ' screening criterion of $1,000 per person-rem averted, it was l concluded that none of the SAMDAs was cost effective. Given the  !

                                       -~. .        .. -.   -  .-     .   . .

low residual risk profile of the System 80+ design, SAMDAs cannot reasonably be incorporated in a cost effective manner. On the basis'of the foregoing analysis, further incorporation of SAMDAs into the System 80+ design is not warranted. No further screening of SAMDAs is needed and no - further SAMDAs need be incorporated into the System 80+ design in satisfaction of NEPA. i f

i TABLE 5-1 NEPA COST BENEFIT ANALYSIS FOR SYSTEM 80+  ; DESIGN CAPITAL PERSON-REM AOC SAVINGS COST / BENEFIT ALTERNATIVE COST REDUCTION ($/Y) RATIO (P-REM /Y) ($/ PERSON-REM) A2 100% SG' INSPECTION $1,500,000 0.10038 $203.82 $247,023 A6 ' SECONDARY SIDE GUARD PIPES $1,100,000 0.00073 $1.08 $25,112,676 B1 ALT. DC BATTERY AND EFWS $2,000,000 0.00187 $10.76 $17,819,558 . B2 12-HOUR BATTERIES $300,000 0.00071 $4.09 $7,036,493 - B3 ALT. PRESSURIZER AUX SPRAY $5,000,000 0.09044 $202.59 $919,181 B4 ALT. HPSI $2,200,000 0.08338 $807.19 $430,073 B5 ALT. RCS DEPRESSURIZATION $500,000 0.01514 $388.04 $524,788 B6 DIESEL SI PUMPS (2) $2,000,000 0.08379 $810.87 $388,143 B8 EXTENDED RWST SOURCE $1,000,000 0.0328 $3.70 $508,017 C1 THIRD DIESEL GENERATOR $25,000,000 0.00045 $2.58 $925,920,'193 C2 TORNADO-PROTECTION AAC $3,000,000 0.0016 $8.44 $31,244,725 C3 FUEL CELLS $2,000,000 0.00187 $10.76 $17,819,558 C4 HOOKUP FOR PORTABLE GENERATR $10,000 0.00187 $10.76 $83,373 D1 ALT. ATWS RELIEF VALVES $1,000,000 0.00102 $37.63 $16,302,977 D2 ATWS INJECTION SYSTEM $300,000 0.00102 $37.63 $4,865,069 , D3 DIVERSE PPS SYSTEM $3,000,000 0.00102 $37.63 $48,982,716 El ALT. CONTAINMENT SPRAY $1,500,000 0.00727 $0.00 $3,438,790 E2 FILTERED VENT (CONTAINMENT) $10,000,000 0.00053 $0.00 $314,465,409

E3 ALT. CONCRETE COMPOSITION $5,000,000 0.00487 $0.00 $17,111,567 E4 RV EXTERIOR COOLING $2,500,000 0.03264 $0.00 $1,276,552 E5 ALT. H2 IGNITERS $1,000,000 0.00075 $0.00 $22,222,222 E6 PASSIVE AUTOCA. REC. (PARS) $760,000 0.00075 $0.00 $16,888.889 E7 MSSV AND ADV SCRUBBING $9,500,000 0.0973 $0.00 $1,627,270 E8 ALT. CONT. MON. SYS. $1,000,000 0.00167 $1.09 $9,979,387 E9 CAVITY COOLING $50,000 0.03264 $0.00 $25,531 E12 WATER COOLED RUBBLE BED $18,800,000 0.00487 $0.00 $64,339,493 l

E13 REFRACTORY LINED CRUCIBLE $108,000,000 0.00487 $0.00 $369,609,856 . l i I. ,-____x_-______:______-___-_______ .__ - . . . .

7

6.0 REFERENCES

1. 50FR37138, Policy Statement on Severe Reactor Accidents Regarding Future Designs and Existing Plants, August, 1985.

2. NUREG -14 37 , " Generic Environmental Impact Statement for Licen:le Renewal of Nuclear Plants," Draft for Comment.

3. 50FR30028, Safety Goals for the Operations of Nuclear Power Plants; Policy Statement, August 1986.

4. CESSAR-DC, " Combustion Engineering Standard Safety Analysis Report - Design Certification," Amendment V, April 29, 1994.

5. SECY-91-229, " Severe Accident Mitigation Design Alternatives for Certified Standard Design," July 31, 1991.

6. Varga , S . A. , " Supplement to the Final Environmental Statement

     - Limerick Generating Station, Units 1 and 2," Docket nos.

50-352/353, August 16, 1989.

7. Memorandum from A. C. Thadani, et al, to C. I. Grimes,

     " Supplement to the Final Environmental Statement - Comanche Peak Generating Station, Units 1 and 2," October 23, 1989.

8. SECY-89-102, " Implementation of Safety Goal Policy," March 30, 1989.

9. " Advanced Light Water Reactor Utility Requirements Document,"

Volume II, ALWR Evolutionary Plant, Chapter 1, Appendix A, PRA Key Assumptions and Groundrules, Revision 3, EPRI, November 1991,

10. Hedrick, G.E., Duke Power, Letter to Sugnet, W.R., EPRI, "ALWR PRA hoy Assumptions and Groundrules (KAG) Reference i Site CRAC2 Input Files and Narrative Duke File: ASI-1407,"  ;

April 17, 1989.

11. Memorandum from W. J. Dircks to the Commission, " Bases for Quantification of Offsite Costs," October 23, 1985.

12. NUREG/CR-4691, "MELCOR Accident Consequence Code System (MACCS) - User's Guide," Prepared for U.S. Nuclear . Regulatory l

Commission by Sandia National laboratories, February 1990.

13. NUREG-1150, " Severe Accident Risks : An Assessment for Five US Nuclear Power Plants," January 1991.

14. NUREG/CR-3908, " Survey of.the State of Art in Mitigation Systems," Prepared for U.S. Nuclear Regulatory Commission by R&D Associates, December 1985.

                                            - 80            -

15. NUREG/CR-4920, " Assessment of Severe Accident Prevention and Mitigation Features: PWR, Large Dry Containment Design,"

July 1988.

16. Memorandum from C. J._Heltemes to F. P. Gillespie, "3I-163, Multiple Steam Generator Tube Leakage," September 2f, 1992.

17. Letter from Brinkman, C., ABB-CE, to NRC, " System 8)+ Steam Generator Tube Rupture Report," LD-93-145, October 5, 1993.

18. CEN-408, " Generic Issue - 23, Evaluation of the Reactor Pump Seal Integrity Issue," Combustion Engineering Inc.,

September, 1991.

19. "FERC Staff Recommends Allowing Recovery of Most Yankee  ;

Costs," Nucleonics Week, September 9, 1993, Page 2.

20. "Quantification of Passive Autocatalytic Recombiners for Combustible Gas Control in ALWR Containments," EPRI ALWR Program, April 8, 1993.

1

                                                                                 ~

21. West, John, et. al, " Conceptual Design of a Post Accident Vacuum Containment System," ANS Transactions, Washington, D.C., November 1984.

22. Nucleonics Week, December 3, 1992, Page 13.

23. " Nuclear Insurance Newsletter," Johnson & Higgins Inc., ,

January, 1990 (90-1).

24. " Nuclear Insurance Newsletter," Johnson & Higgins Inc.,

July, 1990 (90-2).  : l I

                                                                                'l l

81..- _ _ ~._ , ._. . ._}}