ML20031C914

From kanterella
Jump to navigation Jump to search
Forwards Safety Evaluation on SEP Topic VIII-2, Onsite Emergency Power Sys. Recommends Mods to Gas Turbine Generator Protective Interlocks & Annunicator Sys.Need for Mods Will Be Made During Integrated Safety Assessment
ML20031C914
Person / Time
Site: Millstone 
Issue date: 09/30/1981
From: Crutchfield D
Office of Nuclear Reactor Regulation
To: Counsil W
NORTHEAST NUCLEAR ENERGY CO.
References
TASK-08-02, TASK-8-2, TASK-RR LSO5-81-09-079, LSO5-81-9-79, NUDOCS 8110090124
Download: ML20031C914 (5)


Text

(

~

w-atou

. %;q

]g 4

UNITED STATES o,$

+

E NUCLEAR REGULATORY COMMISSION Pg E

WASHINGTON, D. C. 20555 k9

[

September 30, 1981 Docket No. 50-245 LS05-81-09 "79 7_l1197/

9 etC[p'f%

d0

@. 3 u.0 0 7 Mr. W. G. Counsil. Vice President 8 og' -

fo Nuclear Engineering and Operations

.."D'M.

'\\

Northeast Nuclear Energy Company c

'I Post Office Box 270

'\\

s Hartford.. Connecticut 06101 c. ',

s y/

y'f-

Dear Mr. Counsil:

'x f '

SUBJECT:

SEP TOPIC VIII-2, ONSITE EMERGENCY POWER SYSTEMS - DIESEL GENERATOR, SAFETY EVALUATION FOR MILLSTONE UNIT 1 The enclosed staff safety evaluation is based on contractor's documents that have been made available to you previously. This document supports the findings of the staff safety evaluation of Topic VIII-2 and recom-mends modifications to the gas turbine generator protective interlocks.

ha also propose modifications to the turbine annunciator system.

The need to actually implement these changes will be determined during the integrated safety assessment. This topic assessment may be revised in the future if your facility design is changed or if NRC criteria re-lating to this topic are modificd before the integrated assessment is completed.

Sincerely, Dennis M. Crutchfield, Chief Operating Reactors Branch No. 5 Division of Licensing 5

$60

Enclosure:

5 As stated cc w/ enclosure:

ADD $

g. ilLC *"fO See next page 8110090124 5

D D 45E PDR ADOCK 0 pga P

h l ORBi5 k M~ DIS :DL 5EPBD 0RB#5 oroco

...S

. WRussell.

JSheaO fruic'hf fedi d G M nas c oll:bl R

ann sunswo M..,,,,

~

[5f' "pg/81"

'9/g'/g1 9f)p/81" "g7 yg1" 81 t nc ronu ais oa sa mcu e.ma OFFICIAL RECORD COPY

.o

MILLSTONE 1 5

Dockst Na. 50-245 Mr. W. G. Counsil

~

cc William H. Cuddy, Esquire Connecticut Energy Agency Day, Berry & Howard ATTN:

Assistant Director Ccunselors at Law Research and Policy One Constitution Plaza Development Hartford, Connecticut 06103 Department of Planning and Energy Policy Natural Resources Defense Council 20 Grand Street 91715th Street, N. W.

Hartford, Connecticut 06106 Washington, D. C.

20005 Northeast Nuclear Energy Company ATTN: Superintendent Millstone Plant P. O. Box 128 Waterford, Connecticut 06385 Mr. Richard T. Laudenat Manager, Generation Facilities Licensing Northeast Utilities Service Company P. O. Box 270 Hartford, Connecticut 06101 Resident Inspector c/o U. S. NRC P. O. Box Drawer KK Niantic. Connecticut 06357 Waterford Public Library Rope Ferry Road, Route 156 Waterford, Connecticut 06385 First Selectman of the Town of Waterford Hall of Records 200 Boston Post Road 4

Waterford, " 'ecticut 06385 John F. Opena Systems Superintendent Northeast Utilities Service Company P. O. Box 270 an_

Hartford... Con.necticut. 06101 U. S. Environmental Protection Agency Region 1 Office ATTN: EIS C0ORDINATOR JFK Federal Building Boston, Massachusetts 02203

e TOPIC: VIII-2, ONSITE EMERGENCY POWER SYSTEMS - DIESEL GENERATOR i

I.

Introduction

~

!)fesel generators, which provide emergency standby power for safe reactor shutdown in the event of total loss of offsite power, have experienced a significant number of failures. The failures to date have been attributed to a variety of causes, including failure of the air startup, fuel oil, and combustion air systems.

In some instances, the malfunctions were due.

to lockout.

The information available to the control room operator to indicate the operational status of the diese.1 generator was imprecise and could lead to misinterpretation. This was caused by the sharing of a single annunciator station by alarms that indicate conditions that render a diesel generator unable to respond to an. automatic emergency start signal and alarms that only indicate a warning of abnormal, but no disabling, conditions. Another cause was the wording on an annunciator window which did not specifically say that the diesel generator was inoperable (i.e.,

unable at the time to respond to an automatic emergency start signal) when in fact it was inoperable for that purpose.

The review included the reliability, protective interlocks, fuel oit quality, and testing of diesel generators to assure that the diesel generator meets the avail-ability requirements for providing emergency standby power to the engineered sufety features.

II.

Review Criteria

(

The review criteria are presented for Section 8.3.-1 in Table 8-1 of the Standard Review Plan.

III.

Related Safety Topics and Interfs:es The scope of review for this topic was limited to avoid duplication of effort since some aspects of the review were performed under related topics.

Related topics and the subject matter are identified below.

Each of the related topic reports contain the acceptance criteria and review guidance for its subject matter.

III-12 Environmental Qualification VI-7.C.1 Independence of Onsite Power VIII-1.A Degraded Grid

, XVII Fuel Oil Quality Assurance There are no safety topics that are dependent in the present topic informa-tion for their completion.

=_

l

b

- 2,,

IV.

Review Guidelines The review guidelines are presented in Section 8.3.1 of the Standard Review Plan.

V.

Evaluation The concern with regard to annunciators was pursued as a generic is-sue.

The staff safety evaluation for Millstone 1 concluded that in order to provide the operator with accurate, complete and timely in-formation pertinent to the status of the diesel generators, as re-quired by IEEE Std. 279-1971, the following corrective actions are required:

1.

Disabling and non-disabling conditions, currently alarmed at a common annunciator station, should be separated and annunciated at separate annunciator points.

2.

The wording on the annunciator for disabling conditions should sepcifically state that the diesel generator is unavailable for an automatic energency start, be letter dated May 12, 1978, the licensee agreed to make suitable modi; ! cations to the annunciator. The gas turbine was not consider-l ed in this earlier review.

Also, as a result of the work done by the University of Dayton, a generic program for implementing most of the recommendations for re-l liability enhancement that are contained in the University of Dayton 1

report is being conducted by NRC. This latter program will also de-termine the adequacy of the diesel generator testing program on a case-by-case basis and institute any necessary changes, i

The question of fuel oil quality was addressed on a generic basis in l

January 1980, by letters to all licensees.

The letters required that l

licensees ine. lade fuel oil in their Quality Assurance program. The Quality Msurance program is addressed in Topic XVII. Until comple-l tion of Topic XVII, the periodic testing of the diesels is considered to be an adequate interim method for assuring acceptable quality in the' fuel oil stored on site.

l Beyond these efforts, EG&G Report OlllJ, " Emergency Generators" pre-

!E sents a technical evaluation of the diesel generator protective in-terlocks and load capability at Millstone 1 against present licensing criteria. The report notes that the diesel-generator protective trips are in agreement with current NRC guidelines. The report also points out that the gas generator protective trips do not appear to comply with the intent of current licensing criteria.

e:.

a

->3

~~.

In discussions with the staff and our contractor, the licensee has stated that the turbine and its controls are aircraft equipnent of proven reliability and, therefore, it was not wise to change the interlock systems. The staff, noting that failure to start inci-dents in aircraft that are sitting on the ground are seldom of any consequence, is not satisfied by the degree to which such quality may reduce the likelihood of a failure to re-start in flight (and the widely different compressor conditions present in flight) nor the consequences of a failure to provide emergency power when re-quired.

VI.

Conclusion,

I The staff concludes that the diesel generator protective interlocks are in conformance with the Branch Technical Position ICSB-17 (PSB).

The staff proposes that the gas turbine generator protective inter-locks be brought into conformance with the Branch Technical Posi-tion ICSB-17 and that the turbine annunciator be modified to satisfy the requirements of Paragraph 4.20 of IEEE-Std. 279-1 971.

e y

  • m m

l e.

- - --