Text

Proposed Tech Specs,Revising Section 3/4.8.1 Re Electrical Power Sys
	ML20042E483
Person / Time
Site:	Millstone
Issue date:	03/31/1990
From:	; NORTHEAST NUCLEAR ENERGY CO.
To:	;
Shared Package
ML20042E482	List: ML20042E481; ML20042E483;
References
	B13410, NUDOCS 9004230199
	Download: ML20042E483 (36)
	v • d • e

-_ _

l- ,- ,-.

Docket No; 50-423-813410 i

Attachment 1 Millstone Nuclear Power Station, Unit No. 3

. Proposed Revision to Technical Specifications-3/4.8.1' Electrical Power Systems

, s March 1990 9004230199 DR 900328?

p ADOCM 0 W 23 PNU I

h INDEX 1

LIMITING CONDITIONS FOR OPERATION AND SURVEILLANCE RE0VIREMENTS SECTION g 3/4.8 ELECTRICAL POWER SYSTEMS ,

t 3/4.8.1 A.C. SOURCES ,

I Op e r a t i n g . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . -. 13/ 4 8 - 1 TABLE 4.8-1 DIESEL GENERATOR TEST SCHEDULE ........................ '3/4 8 Shutdown ............-..................................... 3/4 8 l 3/4.8.2 D.C. SOURCES Operating ....................................-............ _3/4 8-11 ,

1 1

TABLE 4.8-2a BATTERY SURVEILLANCE REQUIREMENTS ..................-.... '3/4 8-13 TABLE 4.8-2b BATTERY CHARGER CAPACITY ............................. 3/4 8-14 Shutdown ................................................. 3/4 8-15 3/4.8.3 ONSITE POWER DISTRIBUTION Operating ............ ................................... 3/4 8-16 Shutdown ................................................. 3/4 8 181 3/4-8.4 ELECTRICAL EQUIPMENT PROTECTIVE DEVICES' Containment Penetration Conductor Overcurrent Protective Devices ....................................... 3/4 8-19, Motor-0perated Valves Thermal Overload Protection . . . . . . . . - 3/4 8 Motor-0perated Valves Thermal Overload Protection <

r Not Bypassed ............................................. _3/4'8-22 i r

A. C. Circuits Inside Containment ........................ 3/4 8-23 '

i 3/4.9 REFUELING OPERATIONS 3/4.9.1 BORON CONCENTRATION ...................................... 3/4 9-1 I 3/4.9.2 INSTRUMENTATION ........................................... 3/4 9-2 3/4.9.3 ' DECAY TIME ............................................... 3/4 9-3 3 3/4.9.4 CONTAINMENT BUILDING PENETRATIONS ........................ 3/4f9-4 3/4.9.5 COMMUNICATIONS ........................................... 3/4 9-5 MILLSTONE - UNIT 3 xi I

i

+ , - - -

3/4.8 ELECTRICAL POWER SYSTEMS 3/4.8.1' A.C. SOURCES- .

OPERATING LIMITING CONDITION FOR OPERATION 3.8.1.1 As a minimum, the following A.C.- electrical power sources shall'be OPERABLE: '

a. Two physically independent circuits between the offsite transcission network and the onsite Class IE Distribution System, and

b. Two separate and independent diesel generators, each with:

1) A separate day tank containing a' minimum volume of 205 gallons of fuel,

2) A separate fuel Storage System containing a minimum volume of.

32,760 gallons of fuel,. ;

3) A separate-fuel transfer pump,

4) Lubricating oil storage containing a minimum total volume of 280 gallons of lubricating oil, and

5) Capability to transfer lubricating oil from storage to-the diesel generator unit.

APPLICABILITY: MODES 1, 2, 3, and 4.

ACTION:

a. With one offsite circuit inoperable, demonstrate the OPERABILITY of the remaining A.C. sources by performing Surveillance Requirement 4.8.1.1.1.a within I hour and at'least once per 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months _thereafter.

If either diesel generator has not.been successfully tested within ;

the past 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months , demonstrate its OPERABILITY by performing Surveillance Requirement 4.8.1.1.2.a.5 separately for each such diesel generator within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months . Restore the'offsite circuit to <

OPERABLE status within 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and COLD SHUTDOWN within the following 30- hours.

b. With one diesel generator inoperable, demonstrate the OPERABILITY of~

the A.C. offsite sources by performing Surveillance Requi'rement 4.8.1.1.1.a within I hour and at least once per 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months thereafter; and if the diesel generator became inoperable.due to any cause other than preplanned )reventative maintenance or testing, demonstrate the OPERABILITY of tie remaining OPERABLE diesel ~ generator by performing Surveillance Requirement 4.8.1.1.2.a.5 within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months *; restore the diesel generator to OPERABLE status within 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months or be in=at least HOT STANDBY within the next'6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months .

This test is required to be completed-regardless of when the inoperable diesel generator is restored to OPERABILITY. ,

MILLSTONE - UNIT 3 3/4 8-1

\

E1ECTRICAL POWER SYSTEMS' LIMITING CONDITION FOR OPERATION j i

ACTION (continued) 0 4

c. With one offsite circuit and one diesel generator inoperable,-

demonstrate the OPERABILITY of the remaining A.C.- sources by performing Surveillance Requirement 4.8.1.1.1.a within one hour and .

at least once per 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months thereafter; and=if.the diesel generator '

became inoperable due to any cause other than preplanned ;

preventative maintenance or testing,. demonstrate the OPERABILITY of the remaining OPERABLE diesel generator by performing Surveillance Requirement 4.8.1.1.2.a.5 within 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months *; restore one of the inoperable sources to OPERABLE status within'12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months or be in at least HOT STANDBY within the next 6 hour6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months s-and in COLD SHVTDOWN

within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months . Restore the other A.C. power. source (offsite circuit or diesel generator) to OPERABLE status in '

accordance with.the provisions of Section 3.8.1.1 Action Statement a or b, as a)propriate with the time requirement of that- Action -

Statement )ased on the time of initial loss of the remaining inoperable A.C. power source. A successful test of diesel generator '

OPERABILITY per Surveillance Requirement-4.8.1.1.2.a.5. performed .

under this Action Statement for an OPERABLE diesel generator or a '

restored to OPERABLE diesel generator satisfies the diesel generator test requirement of Action Statement a or b.

d. With one diesel: generator inoperable, in addition to ACTION b or c above, verify that:

1. All required systems, subsystems, trains, components, and j devices that depend on the remaining 0PERABLE diesol generator

as a source of emergency power are also OPERABLE, and:

2. When in MODE 1, 2, or 3, the steam-driven, auxiliary.feedwater pump is OPERABLE.

~

If these conditions are not satisfied within~ 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months , be in at least HOT' STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD.SHVTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months . ;

e. With two of the required offsite A.C. circuits inoperable demon-s strate the OPERABILITY of two diesel generators by sequentially performing Surveillance Requirement 4.8.1.1.2.a.5 on both diesel generators within 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months , unless the diesel generators are already .

operating; restore one of the inoperable offsite sources to OPERABLE i status within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months or be~1n at least HOT STANDBY within the next 1 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months . Following restoration of one offsite source, follow Action. ;

Statement a with the time requirement of that Action Statement based '

on the time of initial loss of the remaining inoperable offsite A.C.

circuit. A successful test (s) of diesel: generator OPERABILITY per Surveillance Requirement 4.8.1.1.2.a.5 performed under this Action

. Statement for the OPERABLE diesel generators satisfies the diesel

( generator test requirement of. Action Statement a- .

This test is required to be completed regardless of when the inoperable diesel generator is restored to OPERABILITY.

\

MILLSTONE - UNIT 3 3/4 8-2 >

, .- 1

. E'LECTRICAL POWER SYSTEMS LIMITING CONDITION FOR OPERATION i

ACTION (continued) e

f. With two-of the above required diesel generators inoperable, demon-strate the OPERABILITY of two offsite A.C. circuits by performing Surveillance Requirement 4.8.1.1.1.a within one hour and at,least once per 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months thereafter; restore one of the inoperable diesel- 3 generators to OPERABLE status within 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months ~or be in at'least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months . Following restoration of one diesel generator unit, follow Action Statement b with the time requirement of that Action Statement based on the time of initial loss of the remaining .

inoperable diesel generator. A successful test of diesel generator :L OPERABILITY per Surveillance Requirement-4.8.1.1.2.a.5 performed-under this Action Statement for a restored to OPERABLE diesel .

generator satisfies the diesel generator test requirement of Action Statement b. 1 F

SURVEILLANCE RE0VIREMENTS

[

-. s 4.8.1.1.1 Each'of the above required independent circuits between the offsite e transmission network and the Onsite Class IE Distribution _ System shall be:

L

a. Determined OPERABLE at least once per 7 days by verifying correct breaker alignments, indicated power availability, and-

b. Demonstrated OPERABLE at least once per 18 months during shutdown by transferring (manually and automatically)- unit power supply from the normal circuit to the alternate circuit.

4.8.1.1.2 Each diesel generator shall be demonstrated 0,PERABLE: ,

a. In accordance with the frequency specified in Table 4.8-~1 on a STAGGERED TEST BASIS by:* .

1) Verifying the fuel level in the day tank, f

2) Verifying the fuel level in the fuel storage. tank,

3) Verifying the fuel transfer pump starts and transfers fuel from .

the storage system to the day tank, l

4) Verifying the lubricating oil inventory in storage,

5) Verifying the diesel starts from ambient condition and gradu- ,

ally accelerates to at least 508 rpm with generator voltage and a frequency at 4160 420 volts and 60 0.8 Hz. The diesel generator shall be started for this test by using one of the following signals:

a) Manual, or Testing shall be conducted in accordance with the manufacturer's recom-mendattans regarding engine prelube and warmup procedures, and as appli-cable regarding loading requirements.

MILLSTONE - UNIT 3 3/4 8-3

.- YLECTRICAL POWER SYSTEMS y SURVEILLANCE REOUIREMENTS (continued)

L 4

b) Simulated loss-of-offsite power by itself, or h c) Simulated loss-of-offsite power in conjunction with an ESF i Actuation test signal, or __

d) An ESF Actuation test signal by itself. J

6) Verifying the generator is synchronized and' gradually loaded to .

an indicated 4500-4700 kW** and operates'for at least 60 l minutes, and Verifying the diesel generator is aligned to provide standby i 7) power to the' associated emergency busses.

b. At least once per 184 days the diesel generator shall be. started * -

and accelerated to at least 508 rpm in less than or equal-to 11 seconds. The generator voltage and. frequency shall be 4160'. .. l 420 volts and.6010.8 Hz within 11 seconds after the start signal. !

The generator shall be synchronized to the' associated. emergency bus,. "

loaded to an indicated 4500-4700 kW** in less than or equal:to 60 seconds, and operate for at least 60 minutes. The. diesel generator 1 shall be started for this test using one of the signals in .

Surveillance Requirement 4.8.1.1.2.a.5. This test, if it-is performed so it coincides with the testing required by Surveillance '

Requirement 4.8.1.1.2.a.5, may. also serve to concurrently meet those requirements as well.:

I

c. At least once per 31 days and after each operation of the diesel.

where the period of operation was greater than or equal to I hour by; 7 checking for and removing accumulated water from the day . tank; ,

t

d. At least once per 31 days by checking for and ' removing accumulated l- !

water from the fuel oil storage: tanks;

! e. By sampling new fuel oil in accordance with ASTM-D4057 prior. to l

l addition to storage tanks and: j

! 1) By verifying in accordance with-the tests specified in ASTM- !

l D975-81 prior to addition to-the storage tanks _'that the' sample has: '

l- a) An API Pavity of within 0.3 degrees at 600F, or a speci-l fic gravity of within 0.0016 at 60/600F, when. compared to

the supplier's certificate, or an absolute specific l

Testing shall be conducted in accordance with the manufacturer's recom-mendations regarding engine prelube and warmup procedures, and as appli-cable regarding loading requirements.

- This band is meant as guidance to avoid routine overloading of, the engine. Loads in excess of this band for special testing under direct monitoring of the manufacturer or momentary variations due to changing ,

bus load shall not invalidate the test. 1 MILLSTONE - UNIT 3 3/4'8-4 x

_ _ ~

. 'l

, ELECTRICAL POWER SYSTEMS 4 I

SURVEILLANCE REQUIREMENTS (continued) i gravity at 60/600F of greater than or equal' to 0.83 but - !

less than or equal to 0.89, or. an API gravity of greater ;

than or equal to 27 ~ degrees but less than or equal to L 39 degrees; ,

b). A kinematic viscosity at 400Cof greater than or equal to 1.9 centistokes, but:lessLthan or equal to 4.1 centistokes-(alternatively, Saybolt Viscosity, SUS .at 1000F of greater j i than or equal to 32.6, but not less.than or' equal to l

- 40.1), if gravity was.not determined by comparison with the-supplier's certification;- j c) A flash point equal ~ to or greatbr than 1250F.;; and: J d) A clear and bright appearance with proper. color when [

tested in accordance with ASTM-04176-82. !

2) By verifying within 30 days of obtaining the. sample that the other properties specified in Table 1 of ASTM-D975-81~ are: met = 1 when tested in accordance with ASTM-0975-81-except that the analysis for sul. fur may be performed in accordance with ASTM - t D1552-79, ASTM-D2622-82,. or ASTM-D4294-83. '

f. At least once every 31 days by obtaining a sample of fuel oil in accordance with ASTM-02276-78, and verifyin'g that total particulate contamination is less than 10 mg/ liter when checked in accordance ,

with ASTM-D2276-78, Method A; '

g. At least once per '18 months, during shutdown,' by:-

l. 1) Subjecting the diesel to-an inspection 'in accordance.with l procedures prepared in conjunction with itsimanufacturer's' '

recommendations for this class- of standby service;*

2) Verifying the generator capability to reject a load of greater than or equal to 595 kW while maintaining voltage at 4160 420 volts and frequency at 60 3 Hz;

3) Verifying the generator capability to reject a -load' of 4986 kW ,

I- without tripping. The generator voltage shall.not exceed 4784 L volts during and following the load rejection; .

l

4) Simulating a loss-of-offsite- power by itself, . and:

l a) Verifying -deenergization of the emergency. busses and load. i shedding from.the emergency busses, and l

The provisions of Specification 4.0.6 are applicable.

I MILLSTONE - UNIT 3 3/4 8-5

1 i .. j

-. E'LECTRICAL POWER SYSTEMS ~

-1 SURVEILLANCE REQUIREMENTS (continued) 4

.{

b) Verifying the diesel starts on the auto-start signal.

energizes the emergency busses with permanently connected loads within 11 seconds, energizes the auto-connected . 3 shutdown loads through the load sequencer and~ operates for 1 greater than or equal to 5 minutes while its generator is- I loaded with the shutdown loads.. After energization, .the: -

steady-state voltage and frequency of the emergency busses ,

shall be maintained at 4160 1,420 volts and 60:i 0;8 Hz during this test.- .

5) Verifying that on an ESF Actuation test signal, with'out loss -

of-offsite power, the diesel generator starts on- the: auto-start '

signal and operates on standby for greater than or equal to.5 minutes. The generator voltage and frequency shall be 4160 -,

420 volts and 60 0.8 Hz within 11 seconds after the auto-start signal; the steady-state generator' voltage.and frequency:

shall be maintained within these limits during this-test; !

1

6) Simulating a loss-of-offsite power in conjunction with an ESF '

Actuation test signal, and: -l a) Verifying deenergization of the emergency busses and load; shedding from the emergency-busses;- ,

b) Verifying' the diesel starts on the auto-start -signal, energizes the emergency busses with 3ermanently connected loads within 11 seconds, energizes tie auto-connected i emergency (accident) loads through the load sequencer .and operates for greater than or equal to 5 minutes while its 4 generator is loaded with the emergency loads. After -

. energization, the steady-state voltage-and frequency of the emergency busses shall be maintalned.at 4160 420 .

volts and 60 0.8 Hz during this test;?and-c) Verifying that all automatic diesel generator. trips',. ,

except engine overspeed, lube oil pressure low -(2 of 3 J logic) and generator differential, are automatically ~l bypassed upon loss of~ voltage on the. emergency bus concur-- '

rent with a Safety Injection Actuation: signal.

7) Verifying the diesel generator operates for at least 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months . .

During the first 2-hours of this test,:the diesel generator i shall be loaded to an indicated target value of 5100LkW- .

~

(between 5000 - 5200 kW) and during the remaining'22 hours2.546296e-4 days 0.00611 hours 3.637566e-5 weeks 8.371e-6 months of-this test, the diesel generator shall be loaded to an indicated S value of 4500 to 4700 kW.** The generator voltage and frequen-This band is meant as guidance to avoid routine overloading of the, i engine. Loads in excess of this band for special testing under direct monitoring of the manufacturer or momentary variations due to changing.

bus loads shall not invalidate the test.

L MILLSTONE - UNIT 3 3/4 8-6 f - - . - - - - - , . - - . _ , - , _

,. ]

e .

E[ECTRICALPOWERSYSTEMS SURVEILLANCE RE0b1REMENTS (continued) ,

cy shall= be 4160 420-volts and 60 0.8 Hz within 11 seconds after. the start signal;: the steady-state generator voltage and frequency shall be maintained within these limits during this test. Within 5 minutes after completing:this 24-hour test, -

perform Specification 4.8.1.1.2.g.6)b);*

Verifying that the. auto-connected loads. to each diesel. genera - U 8) l tor do not. exceed the 2000-hour rating of 5335 kW; 1.

9) Verifying the diesel generator's capability to:

r a) Synchronize with the.offsite power: source.while the-generator is loaded with its emergency' loads upon a

. simulated restoration of offsite power, b)- Transfer its loads. to the offsite power source, and1

. 1 c) Be restored to its standby status.- ;

10) Verifying that with the diesel generator operating in a test" mode, connected to its bus, a simulated Safety Injection- signal overrides the test mode by: (1) ~ returning the diesel generator to standby operation, and (2) automatically energizing the emergency loads with offsite power;.

r

11) Verifying that the fuel transfer pump transfers fuel from each fuel storage tank to the day tank of each diesel via the installed cross-connection lines; l 12) Verifying that the automatic load = sequence timer is:0PERABLE with the interval between each load block within 10% of its design-interval; and-l 13) Verifying that'the following diesel-generator lockout features-l prevent diesel generator starting: '

a) Engine overspeed, ,

1 l j b) Lube oil pressure low (2 of 3 logic),-

c) Generator differential, and d) Emergency stop.

If Surveillance Requirement.4.8.1.1.2.g.6)b) is not' satisfactorily completed, it is not necessary to repeat the-preceeding 24-hour test.

Instead, the diesel generator may.be operated at an indicated 4500-4700

-kW for 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months or until operating temperature has stabilized.-

l MILLSTONE - UNIT 3 3/4 8-7 x _. . ._. .. _

. ELECTRICAL POWER SYSTEMS; SURVEILLANCE REQUIREMENTS (Continued)-

1

h. At least. once per l'0 years or after any modifications which could-affect diesel generator-interdependence by starting both diesel generators simultaneously, during shutdown, and. verifying that both-diesel generators accelerate to at least 508 rpm in less than or.

cqual.to 11 seconds; and -

1. At least once per 10 years by: l- ~

1) Draining each fuel oil storage' tank, removing the accumulated sediment and cleaning the tank using a sodium hypochlorite ,

solution,-and

2) Performing a pressure test of.those portions of the' diesel fuel-oil system designed to Section III, subsection ND of-the ASME-Code at a test pressure equal to 110% of. the system design. ;

pressure.

4.8.1.1.3 -Recorts - All diesel generator failures,ivalid or.nonvalid,. I shall be reported.to the Commission in a.Special Report pursuant to S)ecification 6.9.2 within 30 days. ' Reports of-diesel generator. failures s1all include the information recommended in Regulatory Position C.3.b of Regulatory Guide 1.108, Revision 1 August 1977. If the number-of '

failures in the last 100 valid tests (on a-per Diesel Generator basis) is- '

greater than or equal to 7, the report shall be supplemented-to . include the additional information recommended in Regulatory Position C'.3.b;of-Regulatory Guide 1.108, Revision 1, August- 1977. _;

i l

i

' o

^

'I l MILLSTONE - UNIT 3 3/4 8-8 o

. t-

^~

. Tabl e ' 4. 8-l' I- .

J DIESEL GENERATOR TEST SCHEDULE i

.j

~

Number of Failures in Number of Failures in .

l Last 20 Valid Tests

Last 100 Valid Tests

Test Freauency o

51 11 4 Once per 31 days.

1 2** 25 Once per 7_ days

' Criteria for determining number' of failures and ' number:of valid tests. -

shall be in accordance with Regulatory ~ Position C.2.e of Regulatory Guide; 1.108, but. determined on a per diesel-generator basis. ,

For the purposes of determining the required test frequency,_the previous test failure count may be reduced to:zero.if a complete dieselioverhaul'to like-new conditions is completed, provided that the overhaul including-appropriate post-maintenance operation and testing, is specifically ,

') approved by the manufacturer Andaif acceptable: reliability has been. '

demonstrated. The reliability criterion shall'be the s,uccessful comple-tion of 14 consecutive tests in a single series. : Ten of these tests shall be in accordance with Surveillance Requirement 4.8.1.1.2.a.5, four tests in accordance with Surveillance Requirement 4.8.1.1.2.b. If this criterion is not satisfied during the first series.of tests, _ any alternate -

criterion-to be.used to transvalue the- failure. count to zero requires NRC _

approval.

The associated test frequency shall be maintained until seven consecutive-failure free demands have been performed and the number of failures in the '

last 20 valid demands has been reduced to.one. !

4 l

r l

i MILLSTONE - UNIT 3 3/4 8 ;' ,

I

. ELECTRICAL POWER SYSTEMS' A. C. SOURCES ,

SHVTDOWN r LIMITING CONDITION FOR OPERATION l

t 3.8.1.2 As a minimum, the following A. C. electrical power sources shall be ,

OPERABLE:

a. Once circuit between the offsite transmission network and the Onsite Class IE Distribution System, and :

l l

l: b. One diesel generator with: .l 1)- A' day tank containing a minimum volume of 205 gallons of. fuel, i

2) A fuel storage system containing' a minimum volume of 32,760 gallons of fuel, !

l

3) A fuel transfer pump, l

4) Lubricating oil storage containing a minimum total volume of'

280 gallons of lubricating oil, and l

5) Capability to transfer lubricating' oil from storage to the diesel generator unit. .

APPLICABILITY: MODES 5 and 6.

ACTION: -l With less than the above minimum required A. C.. electrical power sources OPERABLE, immediately suspend all operations involving CQRE ALTERATIONS, positive reacti'eity changes, movement of irradiated fuel, or crane operation l with loads over the fuel storage pool, and within 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months , depressurize and vent the Reactor Coolant System through.a greater than or equal to 5.4' square inch vent. In addition, when in MODE 5 with the reactor coolant loops not filled, or in MODE 6 with the water level less than 23 feet above the reactor vessel flange, immediately initiate corrective action to restore the required sources to OPERABLE status as soon as possible.

SVRVEILLANCE RE0VIREMENTS 4.8.1.2 The above required A.C. electrical power sources shall be demonstrat-ed OPERABLE by the performance of each of the requirements of Specifications i 4.8.1.1.1, 4.8.1.1.2- (except for Specification 4.8.1.1.2a.6), and 4.8.1.1.3.

MILLSTONE - UNIT 3 3/4 8-10

i i

. E'LECTRICAL POWER SYSTEMS' i

'3/4.8.2 D.C. SOURCES i OPERATING LIMITING CONDITION FOR OPERATION 3.8.2.1 As a minimum, the following D.C. electrical sources shall be OPERABLE: +

a. 125-volt Battery Bank 301A-1 and an associated full capacity charger,

b. 125-volt Battery Bank 301A-2 and an associated full capacity charger,

c. 125-volt Battery Bank 3018-1 and an associated full capacity charger, and ;

d. 125-volt Battery Bank 3018-2 and an associated full capacity l charger. !

APPLICABILITY: MODES 1, 2, 3, and 4.

ACTION:

a. With either Battery Bank 301A-1 or 3018-1, and/or one of the i required full capacity chargers ino)erable,. restore the.. inoperable battery bank-and/or full capacity c1arger to OPERABLE status within 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months .

b. With either Battery Bank 301A-2 or 3018-2 inoperable, and/or one of the required full capacity chargers inoperable restore the inoper-able battery bank to OPERABLE status within 24, hours or be in.at least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SHUTDOWN within the following-30 hours.

SURVEILLANCE RE0VIREMENTS 1- 4.8.2.1 Each 125-volt battery bank and charger shall be demonstrated OPERABLE:

, a. At least one per 7 days by verifying that:

1) The parameters in Table 4.8-2a meet the Category- A limits, and

2) The total battery terminal voltage is greater than or. equal' to 129 volts on- float charge.

MILLSTONE - UNIT 3 3/4 8-11 1 i

+ #

,' ELECTRICAL POWER SYSTEMS SVRVEILLANCE REOUIREMENTS (continued)

b. At least once per 92 days-and within 7' days after a battery discharge with battery terminal voltage below 110 volts, or battery; overcharge with battery terminal voltage above 150 volts, by verifying that:

.1) The parameters in Table 4.8-2a meet the Category B limits, !

2) There is no visible corrosion at either terminals or connectors, or the connection resistance of these-items is less than 150 x 10 5 ohm, and

3) The average electrolyte temperature of six cor.nected cells is above 60'F.

c. At least once per.18 months by verify that:

1) The cells, cell plates, and battery racks show no visual indication of physical damage or abnormal deterioration,.

2) The cell-to-cell and terminal connections are clean, tight,'and coated with anticorrosion material,

3) The resistance of each cell-to-coll and terminal connection is less than or equal to 150 x 10 5 ohm, and i

4) Each battery charger will supply at least the amperage indicated in. Table 4.8-2b at 12b volts for at least 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .- -

d. At least once per 18 months, during shutdown, by verifying that the battery capacity is adequate to supply and maintain in OPERABLE-status all of the actual or simulated emergency loads 'for the design duty cycle when the battery is subjected to a battery service test;

e. At least once per 60 months; during shutdown, by verifying th'at the - j battery capacity is at least 80% of the manufacturer!s rating when subjected to a performance discharge test. Once per-60-month interval this performance discharge test may be performed in lieu of the battery service test required by Specification 4.8.2.ld.; and

f. At least once per 18 months, during' shutdown, by giving performance discharge tests of battery capacity to any battery that shows signs of degradation or has reached 85% of th'e service life expected for i the application. Degradation is indicated when the battery '

drops more than 10% of rated capacity from its average on pr. evious capacity performance tests, or is below-90% of the manufacturer's rating.. l.

l I

1 MILLSTONE - UNIT 3 3/4 8-12

. .J

[,

. TABLE 4.8-2a j BATTERY SURVEILLANCE RE0VIREMENTS CATEGORYA(I) CATEGORYB(2)-

i PARAMETER LIMITS FOR EACH LIMITS FOR EACH ALLOWABLE (3)

DESIGNATED PILOT CONNECTED CELL 'VALUE FOR EACH i CELL CONNECTED CELL Electrolyte > Minimum level > Minimum level Above. top of:

Level indication mark, indication mark plates. and ..

and < %" above and < \" above not overflowing ,

maximum level maximum level indication mark indication mark-

i Float Voltage 1 2.13 volts 2 2.13 volts (6) > 2,07 volts I

- i' Not'more than '

0.020 below the Specifi average of-all i Gravity {4) 2 1.195 connected cells 2 1.20055)

Average of. all. Average of all connected cells connect

>.1.205 21.195gcells TABLE NOTATIONS- ,

(1) For any Category A parameter (s) outside the limit (s) shown, the battery may be considered OPERABLE provided that within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months all the Category.

B measurements are taken and found to-be within their allowable values, '

and provided all Category A and B parameter (s) are restored to within ~

limits within the next 6 days.

4 (2) For any Category B parameter (s) outside the limit (s) shown,-the battery t may be considered OPERABLE provided that the Category B parameters are within their allowable values and provided the Category B parameter (s) are restored to within limits within 7. days.

3 (3) Any Category B parameter not within its allowable value indicates an i inoperable battery.

(4) Corrected for electrolyte temperature and level.

(5) Or battery charging current is less than 2 amps when on charge.

(6) Corrected for' average electrolyte temperature.

r MILLSTONE - UNIT 3 3/4 8-13

t-l' *

' TABLE 4.8-2b 1- ;

, BATTERY CHARGER CAPACITY.,

CHARGER AMPERAGE 301A-1 200 301A-2 50 301A-3 200 3018 200. ;

$ 301B-2

\' 50 3018-3 200 1

s

't 4

l 1

r I

a t

j .i i4 l

9 h

MILLSTONE'- UNIT 3 3/48-14 .

I

. ELECTRICAL POWER SYSTEMS D. C. SOURC_ES SHUTDOWN LIMITING CONDITION FOR OPERATION 3.8.7.2 As a minimum, one 125-volt battery bank and-its associated full-capacity charger shall be OPERABLE.

APPLICABILITY: MODES 5.and 6.

ACTION: ;

With the required battery bank and/or full-capacity charger inoperable, immediately suspend all operations involving CORE ALTERATIONS, positive reactivity changes, or movement of irradiated fuel; initiate corrective action to restore the required battery bank and full-capacity charger to OPERABLE status as soon as possible, and within 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months , depressurize and vent the Reactor Coolant System through a 5.4 square inch vent.

SURVEILLANCE REQUIREMENTS 4.8.2.2 The above required 125-volt battery bank and full-capacity charger shall be demonstrated OPERABLE in accordance with Specification 4.8.2.1.

i o

l MILLSTONE - UNIT 3 3/4 8-15

V . .

i 1

.E'LECTRICAL POWER SYSTEMS 3/4.8.3 ONSITE POWER DISTRIBUTION OPERATING l . , ,

LIMITING CONDITION FOR OPERATION 3.8.3.1 The following electrical busses shall be. energized in the specified manner: ,

a. Train A A.C. Emergency Busses consisting of:-

1) 4160-Volt Emergency Bus #34C, and

2) 480-Volt Emergency Bus #32R, 32S, 32T, and 32Y.

b. Train B A.C. Emergency Busses consisting of:

i 1)- 4160-Volt Emergency Bus #34D, and

l. 2) 480-Volt Emergency Bus #32U, 32V, 32W, and 32X.

c. 120-Volt A.C. Vital Bus #VIAC-1 energized from. its associated inverter connected to D.C. Bus #301A-1*, ;

l

d. 120-Volt A.C. Vital Bus #VIAC-2 energized from its associated inverter connected to D.C. Bus #3018-1*,

e. 120-Volt A.C. Vital' Bus #VIAC-3 energized.from its associated inverter connected to D.C. Bus #301A-2*,

f. 120-Volt A.C. Vital Bus #VIAC-4 energized from its asscciated inverter connected to D.C. Bus #3018-2*,

g. 125-Volt D.C. Bus #301A-1 energized from Battery Bank #301A-1,

, h. 125-Volt D.C. Bus #301A-2 energized.froin Battery Bank #301A-2,

i. 125-Volt D.C. Bus #3018-1 energized from Battery Bank #3018-1, and

j. 125-Volt D.C. Bus #3018-2 energized from Battery Bank #301B-2.

APPLICABILITY: MODES 1, 2, 3, and 4.

ACTION:

a. With one of the required trains of:-A.C. emergency busses not fully energized, reenergize the division within 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SHUTDOWN W .nin the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months ,

b. With one A.C. vital' bus either not energized from its associated'

inverter, or with the inverter not connected to its associated D.C. -

l bus: (1) reenergize the A.C. vital bus within 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months or'be in at least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SHUTDOWN Two inverters may be disconnected from their D.C. bus for up to 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months as necessary, for the_ purpose of performing an equalizing charge on their associated battery bank provided: (1) their vital busses are energized, and (2) the vital busses associated with the other battery bank are .

energized from their associated inverters and connected-to their associated D.C. bus, MILLSTONE - UNIT 3 3/4 8-16 3

EL'ECTRICAL-POWER SYSTEMS' LIMITING CONDITION FOR OPERATION ACTION (Continued) within the following 30-hour ~s; and (2) reenergize the A.C. vital bus from its associated inverter connected to its associated D.C. bus within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months . .;

c. With one D.C. bus not energized from its associated battery bank, t reenergize the D.C. bus from its associated battery bank within-2 ;

hours or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SHUTDOWN within the following~30 hours.

SURVEILLANCE RE0VIREMENTS r 4.8.3.1 The specified busses shall be determined energized in the required manner at least once per 7 days by verifying correct breaker alignment and-indicated voltage on the busses. .

t c

J MILLSTONE - UNIT 3 3/4 8-17 \

n-

.- ELECTRICAL POWER SYSTEMS ONSITE POWER DISTRIBUTION ,

/

SHUTDOWN .

LIMITING CONDITION FOR OPERATION 3.8.3.2 As a minimum, the following electrical busses shall be energized in the specified manner:

a. One train of A.C. emorgency busses consisting of one 4160-volt and four 480-volt A.C. emergency busses,

b. Two 120-volt A.C. vital busses energized from their associated inverters connected.to their respective D.C. busses, and

c. Two 125-volt D.C. busses energized from their associated battery banks, .

APPLICABILITY: MODES 5 and 6.

ACTION:

With any of the above required electrical busses not. energized in the required manner, immediately suspend all operations involving CORE ALTERATIONS, posi- ,

tive reactivity changes, or movement of irradiated fuel, initiate corrective' _l action to energize the required electrical busses in the specified manner as soon as possible, and within 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months , depressurize and vent the RCS through at least a 5.4 square inch vent.

SURVElllANCE RE0VIREMENTS 4.8.3.2 The specified busses shall be determined energiged in-the required manner at least once per 7 days by verifying correct breaker alignment and indicated voltage on the busses.

I i

i 3

I MILLSTONE - UNIT 3 i 3/4 8-18 i I l

j >

C D

.. ELECTRICAL POWER SYSTEMS q 3/4.8.4 ELECTRICAL E0VIPMENT PROTECTIVE DEVICES CONTAINMENT PENETRATION CONDUCTOR OVERCURRENT PROTECTIVE DEVICES L LIMITING CONDITION FOR,0PERATION ,

~

3.8.4.1 All containment penetration conductor overcurrent protective-devices shall be OPERABLE. ,

APPLICABILITY: MODES 1, 2, 3, and 4.

ACTION:

With one or more_of the containment penetration conductor overcurrent protec-tive device (s) inoperable:

a. Restore the protective device (s) to OPERABLE status or deenergize-the circuit (s) by tripping the associated backup circuit breaker.or racking out or removing the. inoperable circuit breaker within;72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months , '

declare the affected system or component inoperable, and verify the-backup circuit breaker to be tripped or the inoperable circuit breaker racked out or removed at least once per-7 days'thereafter; the provisions .

of Specification 3.0.4 are not applicable to overcurrent devices in circuits which have their backup circuit breakers tripped, their inoperable circuit ~ breakers racked out, 'or removed, or

b. Be in at least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD l SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months .

SURVEILLANCE RE0VIREMENTS ,

4.8.4.1 All containment penetration conductor overcurrent protective devices shall be demonstrated OPERABLE:

a. At least once per 18 months:

, 1) By verifying that the medium voltage (4-15 kV) circuit breakers are-OPERABLE by selecting, on a rotating basis, at least 10% of the circuit breakers of each voltage level, and performing-the following:

a) A CHANNEL CALIBRATION of the associated protective relays, b) An integrated. system functional test which-includes simulated automatic actuation of the system and. verifying that each relay and associated' circuit breakers and control circuits' function as designed, and MILLSTONE - UNIT 3 3/4 8-19'

~

, . o

. tLECTRICAL POWER SYSTEMS

-SURVEILLANCE REOUIREMENTS (Continued) i

\

c) For each circuit breaker found. inoperable during these. '

functional tests, an additional representative sample of- at least 10% of all the circuit breakers.of the inoperable type- !

shall also be functionally. tested until no more failures are found or all circuit breakers of that type have been :

functionally tested.

'2) By selecting and functionally testing a representative sample of at least 10% of each type of lower voltage circuit' breakers. Circuit I breakers selected for functional testing shall be selected on a rotating basis.

r Testing of air circuit breakers shall consist 1 of injecting a current with a value equal to 300% of the pickup of the long-time:

delay trip element and 150% of the pickup of the short-time delay :

trip element, and verifying that the circuit breaker operates within the time delay band width for that current specified:by the

' manufacturer. The instantaneous element shall be tested by'-

injecting a current equal toJ 20% of the pickup value of the element and verifying that the circuit breaker trips instantaneously with. no intentional time delay.

Molded case circuit breakers and unitized starters-(a' frame size of 250 amps or less shall be tested for long time delay at 300% as-described above,)and-in addition tested for the instantaneous by injection a current .value which falls within_ +40% -(of the- upper limit) and -25% (of the lower limit) of the' manufacturers t instantaneous trip current range and verifying the breaker trips .

instantaneously with no intentional time delay.- For those molded -

case circuit breakers / unitized starters'used in 480V circuits, if single pole instantaneous test results, fall outside these l

tolerances, additional instantaneous testing shall be conducted.

using two poles in series,. including-A-8, B-C'and~C-A phase-combinations.

All combination test results shall fall within the specified tolercnces, a

Circuit breakers found inoperable during functional testing .shall' be-restored to OPERABLE status prior to resuming operation.3 For each circuit breaker. found inoperable during these functional. tests, an additional representative sample of at least 10% of all the circuit ,~

breakers of the inoperable type shall also be functionally tested until no more type have beenfailures are found functionally tested,or all circuit breakers of'that b.

At least once per 60 months by subjecting each circuit breaker to an !

inspection and preventive maintenance in accordance with' procedures prepared in conjunction with its manufacturer's recommendations. .

'I

. + . .

. E'LECTRICAL POWER SYSTEMS MOTOR-0PERATED VALVES THERMAL-0VERLOAD PROTECTION l LIMITING CONDITION FOR OPERATION

l L -3.8.4.2.1 Each thermal overload protection bypassed only under accident I conditions for safety-related motor-operated valves shall'be bypassed by.'an -

OPERABLE bypass device integral with the motor starter.

APPLICABILITY: Whenever the motor-operated valve is required to be OPERABLE. -

ACTION:

With the thermal overload protection for one or more of the above required . .

valves not. bypassed under conditions for which it- is designed to be bypassed, restore the inoperable device or provide a means to bypass the thermal 3 overload within 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months , or declare the affected valve (s) inoperable and apply the appropriate ACTION Statement (s) of the affected-system (s).

SURVEILLANCE RE0VIREMENTS l

4.8.4.2.1 The thermal overload protection for the above required valves shall be verified to be-bypassed by the appropriate accident signal (s).by performance of a TRIP ACTUATION DEVICE OPERATIONAL TEST of the bypass circuitry during COLD SHUTDOWN or REFUELING at-least once per 18 months.

i e

- ILLSTONE - UNIT 3 3/4 8-21 i

.L

q

. ELECTRICAL POWER SYSTEMS- l M010R-OPERATED VALVES THERMAL OVERLOAD PROTECTION NOT BYPASSEO l LIMITING CONDITION FOR OPERATION I

3.8.4.2.2 Each thermal overload protection not bypassed under-accident conditions.for safety-related motor-operated. valves shall be OPERABLE. )

APPLICABILITY: Whenever the motor-operated valve is required to be OPERABLE. (

ACTION:

~

With the thermal overload protection for one or more of the-above required-valves inoperable, bypass the inoperable thermal overload within 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months ; .

restore the inoperable thermal overload to OPERABLE status within 30 days or- .

declare the affected valve (s) inoperable and apply the appropriate. ACTION n statement (s) for the affected system (s).

SURVEILLANCE RE0VIREMENTS

't 4.8.4.2.2 The thermal overload protection for the above required valves shall be demonstrated OPERABLE at least once per 18 months and following maintenance on the motor starter by the performance of CHANNEL CALIBRATION of a representative sample of at least 25% of all thermal overloads for the above required valves.

I f

l t

I k

l i

-l l

f

-l l

l i MILLSTONE - UNIT 3 3/4 8-22

o .. .- _,

.. ELECTRICAL POWER SYSTEMS ;

A.C. CIRCUITS INSIDE CONTAINMENT- f LIMITING CONDITION FOR OPERATION '

3.8.4.3 At least the A.C. circuits for the following valves inside contain- [

ment shall be de-energized: ;

Device Number- Valve ;

3SIL*MV8808A Accumulator Is01ation . [

3SIL*MV88088 Accumulator Isolation ;

3SIL*MV8808C Accumulator Isolation l 3SIL*MV8808D Accumulator Isolation APPLICABILITY: MODES 1, 2, 3, and 4 ACTION: ,

t With any of the above required circuits energized, trip the associated circuit- :

breaker (s) within 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months .

SVRVElllANCE RE0VIREMENTS {

4.8.4.3 Each of the A.C. circuits for the above listed. valves shall. be deter-mined to be de-energized at least once per 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months

by verifying that the ,

associated circuit breakers are in the tripped condition. !

t I

s l.

i l

!~ ,

. *Except at least once per 31 days if locked, sealed or otherwise secured in "

( the tripped condition. .

l i

MILLSTONE - UNIT 3 3/4 8-23 ,

l ,

Docket No. 50 4tl !

B13410 :

i l

1 1

Attachment 2 r Millstone Nuclear Power Station, Unit No. 3- i 3/4.8.1 Electrical Power Systems i a

Description of Individual Proposed Changes to Technical Specifications and

Discussion on Significant Hazards Consideration ,

l '

l March 1990

O w 0 U.S. Nuclear Regulatory Commission B13410/ Attachment 2/Page 1 Technical Specification Section 3/4.8.1 ilm+dcal Power Systems Northeast Nuclear Energy Company (NNECO) is hereby proposing a set of tech-nical specification changes that would accomplish the following general t objectives. First, for routine testing and ACTION statement tests, fast starts (11 seconds) and fast loadings (60-second) would be deleted, except for once per 6 months and during the 18 month (refueling) tests. Second, the accelerated frequency for routine test (based upon accumulated number of test failures) would be changed to reduce the amount of accelerated testing by basing such testing on a reliability goal of.0.95 per Emergency Diesel Genera-tor (D/G)ld tests wou be reduced. Third, for NNECO Further, ACTIONbelieves statement thattests, the number instrumentation of Emergency D/G inaccu-racies and meter reading errors can contribute significantly to inadvertent 3

ovuload conditions. NNECO has therefore proposed to reduce the specified load and value to ensure than operations at the upper limit of the uncertainty value do not result in exceeding the engine ratings and to specify a nonopen ended operating band for such tests. To accomplish the. objective of reducing emergency D/G testing, NNECO has proposed a large number of changes (Attachment 1) to the Technical Specifications which are in accordance with the intent of guidance provided by the NRC in Generic Letter 84-15. In the following paragraphs, these proposed changes are discussed in the order they occur in the Technical Specifications.

1. Section 3.8.1.1 ACTION a Descriotion of Chanae The proposed ACTION Statement 'a' provides the actions to be taken with one off-site circuit of the required AC electrical power sources inop-erable. The actions required when one D/G is inoperable are being separated from this action statement and incorporated into an individual ACTION statement (proposed Technical Specification Section 3.8.1.1, ACTIONb).

The performance of Surveillance Requirement 4.8.1.1.2.a 5, demonstration of D/G operability, will be done once within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months of declaring the off-site circuit inoperable unless previously tested within the past 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months . The existing requirement is to perform Surveillance 4.8.1.1.2.a.5 within one hour and at least once per 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months thereafter regardless of the time at which the last test was performed.

Justification for Chanae The reason for performing D/G operability tests following the loss of one off-site circuit is to ensure that the backup power source will be available and capable of starting as designed. The present action statement requires verification of D/G starting within one hour and then

\

. + + ,

1 U.S. Nuclear Regulatory Commission -

B13410/ Attachment 2/Page 2 r

once every eight hours thereafter. Demonstration of D/G starting capa- [

bility within one hour of a loss of an off-site power source and subse-quent testing every eight hours thereafter is both excessive and unwar- ,

ranted, and contradicts manufacturer recommendations tnat the D/Gs be tested with a maximum frequency of once per ? days, !

Performing D/G operability tests following the loss of one offsite circuit is to verify the availability of a backup power source. The 0/Gs ,

are designed and are intended to be standby power sources. The present !

Technical Specifications require that both D/Gs be tested initially ;

within the first hour and every 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months thereafter, regardless of how ,

recently a test has been successfully completed, in a 72-hour period, an ,

initial test within I hour and a follow up test every 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months thereafter ;

results in a total of nine D/G tests. This contradicts manufacturer recommendations that the D/Gs be tested with a maximum frequeracy of once .

per 7 days and introduces accelerated D/G wear.. However, it is under-stood that when an offsite power source is lost, D/G availability becomes more essential and the D/Gs should be tested if they have not been successfully tested in the past 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months . If a D/G has been successfully tested in the past 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months , an additional test provides little further assurance of D/G availability than what was provided in the previous '

successful test. D/G testing within the initial 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months will, in t addition to providing assurance of starting capability, also provide additional time for inspection and prelube and other warmup procedures recommended by the manufacturer to minimize the mechanical stress and wear on the D/Gs. Furthermore, 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months permits sequential testing of the D/Gs rather than the simultaneous testing of both.

Repetitive testing increases the likelihood of a D/G failure rather than !

providing continued assurance of starting capability especially since

loss of an offsite source does not directly imply a failure of the D/Gs.

I Based on the above, the tests required for one inoperable D/G are being separated from this action statement. ;

2. Section 3.8.1.1 ACTION b ,

Descriotion of Chance The proposed ACTION statement 'b' provides the appropriate responses when declaring one emergency D/G inoperable. The performance of surveillance -

requirement 4.8.1.1.2.a.5, demonstration of diesel' operability, will be done once within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months to demonstrate the operability of the remaining D/G. This test is required to be performed regardless of when the .

inoperable D/G is restored to operability. However, the remaining ,

operable D/G need not be challenged if the D/G had been rendered inoper-able due to preplanned maintenance or surveillance testing.

U.S. Nuclear Regulatory Commission B13410/ Attachment 2/Page 3 l

Justification for Chance -

The reason for performing a D/G cperability test following the -loss of l the other diesel is to ensure that the remaining diesel will be available and capable of starting as designed. Specifically, an operability test.

of the remaining diesel provides assurance that the remaining operable !

diesel is not subject to the same failure (i.e., common mode failure). '

Rather than relying on previous surveillance testing, operability testing within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months is proposed consistent with the guidance provided in- +

Generic Letter 84-15. The proposed change does not require the operable

D/G to be challenged if the inoperable D/G was rendered inoperable due to :

preplanned maintenance or surveillance testing. This demonstration of ,

operability is consistent with the North Anna, Unit No. 2 Technical l Specifications.

Repetitive operability testing every 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months following the initial I confirmation of diesel availability is unwarranted and counterproductive.

Fast starts contribute to premature engine wear and as such repetitive ;

operability tests within the 72 hour8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months action statement are counterproduc- 1 tive to continued assurance of starting capability. To be consistent ;

with the philosophy of reducing excessive testing and thereby enhancing i

. diesel reliability, only one operability start is proposed as confirma- !

tion of the remaining diesel's availability. Testin l provides timely assurance of starting capability wh.gilewithin 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months providing the additional time for inspection prior to testing.

3. Section 3.8.1.1 ACTION c l Description of Chanae '

t The proposed ACTION statement 'c' provides the appropriate responses when declaring one offsite circuit and one D/G inoperable. In the existing i Technical Specification this is action statement 'b'. Surveillance requirement 4.8.1.1.2.a.5 will be performed to demonstrate the operabil- '

ity of the remaining D/G within 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months of declaring one D/G inoperable.

The existing requirement is to perform 4.8.1.1.2.a.5 within one hour and at least once per 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months thereafter.

Justification for Chanae Performing a D/G operability test within 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months of declaring an offsite source and a D/G inoperable provides adequate assurance of the availabil-ity of the remaining D/G while eliminating unnecessary starts. Since the allowable outage period for this action is 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months , follow-up D/G starts -

are not applicable. A successful D/G operability test performed pursuant to this action also satisfies the subsequent requirement to verify D/G operability within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months under ACTION 's' or 'b', Additionally, the performance of the test within 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months provides the requisite assurance while also providing the time for inspection prior to the test.

i

t U.S. Nuclear Regulatory Commission B13410/ Attachment 2/Page 4

4. ly, tion 3.8.1.1 ACTION d Descriotion of Chu n This ACTION statement covers the responses in addition to ACTION 'b' or

'c' when declaring one D/G inoperable. In the existing technical speci-fications this is action 'c'. There are no substantive changes to this action, therefore, no justification is provided.

5. ig. tion 3.8.1.1 ACTION e Descriotion of Chance This ACTION statement covers the appropriate responses when two offsite power circuits are declared inoperable. The demonstration of diesel operability will be done within 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months by sequentially performing surveillance 4.8.1.1.2.a.5 on both diesels.

Justification for Chance The proposed change is consistent with those changes made from ACTION statements 'a', and 'c' above.

'a', loss of an offsiteAs noted in the discussion' for

'b',

ACTION statement circuit does not suggest that either diesel has become less reliable than noted by its previous surveillance test. Given the significance of losing both offsite circuits, one operability test per diesel within 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months provides adequate assurance of diesel reliability. This change is also consistent with the guidance provided in General Letter 84-15.,

6. Section 3.8.1.1 ACTION f Description of Chance This ACTION statement covers the appropriate responses when declaring both D/Gs inoperable. With two D/Gs inoperable, the operability of two offsite once per AC8 circuits must be demonstrated within one hour and at least hours thereafter. One D/G must be restored to operable within 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months or shutdown procedures are initiated. Once one D/G is restored to operable, the requirements of ACTION statement 'b' are followed with the applicable time requirements of that ACTION statement.

Justification for Chance The proposed change is the same as existing Technical Specification 3.8.1.1.e. The only difference in the proposed change is the use of distinct ACTION statements based on the number of D/Gs inoperable (either oneorboth).

. . . , f U.S. Nuclear Regulatory Connission l B13410/ Attachment 2/Page 5 i 9

7. Surveillance 4.8.1.1.2.a.5 and 6 and Surveillance 4.8.1.1.2.o.7 Descriotion of Chance .

The proposed surveillance requirements cover the starting of the diesel and the parameters that must be met during D/G start up testing. The existing Technical Specifications require the diesel to accelerate to at '

least 508 rpm, 4160 420 volts and 60 0.8 Hz within 11 seconds 6fter the start signal. The D/G loading requirements in the existing Technical Specifications require verification that the generator is synchronized, loaded to greater than or equal to 4986 kW in less than or equal to o 60 seconds, and operates for at least 60 minutes. The proposed changes modify the test requirements to permit more gradual starting and gradual '

loading of the D/G during routine surveillance (once per 31 days) and ,

ACTION statement operability testing. The surveillance requirement 4.8.1.1.2.a.6 has been modified to specify error bands in loading the D/G :

in lieu of the present requirement to load the D/G greater than or equal ~ ;

to a given value. For continuous load rating, the value specified is 4500-4700 kW (continuous duty rating accounting for instrumentation inaccuracies). According to the existing Technical Specification Section 4.8.1.1.2.g.7, a 24-hour load run is required, the first 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months of which are at the 110% value and the next 22 hours2.546296e-4 days 0.00611 hours 3.637566e-5 weeks 8.371e-6 months are at the 100% (continuous duty) load value; specifically, at greater than or equal to 5485 kW and i greater than or equal.to 4986 kW. NNECO proposes that the required loads for the 18 month load run be an indicated target value of 5100 kW (between 5000-5200 kW) and an indicated value of 4500-4700 kW, respec-tively.

Justification for Chance To reduce wear and minimize the severity of thermal transients on the D/Gs, the manufacturer has recommended increasing the start time and gradually loading the diesels any time a D/G is routinely tested.

Reaching rated speed and voltage in the presently specified 11 seconds is based on the FSAR analysis assumptions for a design basis loss of coolant accident (LOCA) concurrent with a loss of offsite power. Requiring the :

0/G to be routinely tested to design base conditions is excessive and unwarranted. First, the design base verification test is performed every eighteen months besides the present routine surveillance test requirement and consistent with Generic Letter 8415, proposed surveillance require-ment 4.8.1.1.2.b has been added to' require semiannual verification o.f the FSAR specified 11 second start. NNEC0 believes that semiannual testing to verify design base capability is adequate given the severity of the test on the D/Gs.

Diesel reliability is not determined by fast starts of the diesel. -

Rather, the assurance of continued and reliable diesel performance is provided by trending critical parameters while the diesel is loaded and after those parameters have stabilized following the start. The design

. . , - -v --a ~ - - . . - - .

.,,,.e. .,.w..., - -. - ,. - -

U.S. Nuclear Regulatory Commission B13410/ Attachment 2/Page 6 capability of the air start system would be etnfirmed semiannually, but routine surveillance testing without fast starting would still be !

adequate to establish trends in starting times whi:h would be indicative ,

of a need to initiate subsequent preventative mal.ntenance activities. !

NNECO believes that open-ended language " greater than or equal to" has l the potential.for routine overloading of the D/Gs. Specifying an upper !

limit would eliminate this potential. The proposed changes specify a loading which accounts for instrument error ( 5.2%) by lowering the '

specified loading to ensure the upper value does not exceed the continu- ,

ous. rating or 110% of the continuous rating. Additionally, the proposed .

changes take into account operational control capabilities and human factor characteristics of the meter by proving a 100 kW operating band consistent with the 200 kW meter graduation (meter span of 8000 kW). ;

For the 4986 kW continuous load rating, the proposed specified load is l determined as follows:

Instrument E'rror (meter span of 8000 kW) is.0.052 x 8000 - 416 kW. Using ,

i400 kW for calculating surveillance requirement loading limits upper limit 4986 - 400 kW 4586 kW, therefore, the upper limit - 4600 kW.

Applying the operational band of 100 kW, the control band is

~

4500 4700kW. The resultant span in actual load may then be from 4100 kW to 5100 kW which corresponds to 82.2 to 102.3% of the 4986 kW continuous rating.

For the 110% of continuous load rating (5485 kW), t,he proposed specified load is determined as follows:

Instrument error same as above - 416kW. Using 400 kW for calculating surveillance requirement loading limits, upper limit = 5485 -

400 -

5085 kW.

Selecting 5100 kW as an upper limit and applying an operational band of 100 kW results in a control band of 5000 5200 kW. The resultant span in actual load may be from 4600kW to 5600kW which corresponds to 92.2% to 112.3% of the 4986 kW continuous duty.

It is for the above reasons as well as to minimize the degradation'to the .

diesels that the manufacturer has specifically recommended gradual starting and loading as well as maintaining load for at least 60 minutes.

8. Surveillance 4.8.1.1.2.b ,

Description of Chance -

This new surveillance test covers the semi-annual requirement to perform '

an 11 second start (508 rpm, 4160 i 420 volts, 60 0.8 Hz)'from ambient .

U.S. Nuclear Regulatory Commission i 813410/ Attachment 2/Page 7 ,

conditions and a 60 second loading to an indicated 4500 4700 KW and -

operate for at least 60 minutes.

Justification _for Chanae This surveillance requirement encompasses the same requirements of the I existing Specification 4.8.1.1.2.a.5 and 4.8.1.1.2.a.6 with the exception of reducing the surveillance interval. i This surveillance requirement has been added to verify diesel capability to perform during a design basis accident condition. :

9. Surveillance 4.8.1.1.2.e.2 l

Description of Chance The proposed change adds ASTM Test D4294-83 as an acceptable method for '

determining, sulfur content in the emergency D/G fuel oil. '

Justification for Chance The addition of this new method for determining the sulfur content -

provides an improvement over the other test methods currently listed in the technical specifications.

10. Table 4.8-1 and Section 4.8.1.1.3 Description of Chance This table adaresses D/G surveillance testing frequency. The existing '

, technical specification testing frequency is based on the number of valid failures experienced in the last 100 valid tests per Regulatory Guide 1.108, Revision 1. The proposed technical specification testing frequen-cy is based on a matrix of the number of valid failures in the last 20 and 100 valid tests on a per diesel basis.

In addition, the proposed change provides for a restart in counting failures provided successful corrective actions have been implemented.

Justification for Chance The existing Technical Specifications; for the D/Gs require accelerated testing based on past failures per Regulatory Guide 1.108, Revision 1.

This test schedule is based on a reactor unit basis rather than on a D/G basis. The test frequency proceeds !from 31 days for one failure to 3 days for four or more failures. '

The proposed change to Table 4.8-1 ! is consistent with the gaidance provided in Generic Letter 84 15 with the exception that a transvaluation t

(

l

e ~ o ,

U.S. Nuclear Regulatory Comission f B13410/ Attachment 2/Page 8 i

in number of failures is permitted following a complete diesel overhaul -

and successful post maintenance operation and testing, and if _ acceptable i reliability has been demonstrated. The reliability criterion shall be '

the successful completion of 14 consecutive tests in a single series.

The concept of transvaluation is included to encourage corrective' actions which enhance reliability rather than maintain a punitive testing sched- !

ule following corrective actions which is counterproductive to diesel i reliability. The 100 valid test criteria has also been revised to reflect the Generic Letter 84-15 concept of reliability goals. Specifi- l cally, five failures or more in the last 100 tests per diesel require increased surveillance to ensure the minimum desired level (i.e.,.95) for diesel reliability is maintained. With less than that, monthly testing per manufacturers recommendations is specified. ;

The proposed change is based on a per diesel rather than per reactor !

basis consistent with the guidance provided in Generic Letter 84-15. ;

Modifying the specification to a per diesel basis addresses individual ,

diesel reliability and enhances overall reliability by requiring remedial actions only on D/Gs which are experiencing failures. !

11. SECTION 3.8.2.1. ACTION B -

The proposed ACTION statement 'b' clarifies battery charger requirements -

by tying the associated full capacity charger to its associated battery.

The proposed ACTION 'b' is identical to the existing ACTION 'a'.

Justification for Chance ,

The proposed change is the same as existing ACTION statement 'a'. It is appropriate to have consistent action statements for both the battery and its associated battery charger since without the battery charger, the battery would shortly enter its action statement. -

Other Chances Several other changes (footnote to Specification 4.8.1.1.2.g.7, Section 4.8.1.1.3) are being made. which are strictly editorial in nature (i.e.,

renumbering of sections, rewording to achieve consistency in technical spec.ifications,etc.)

In addition, several pages are being renumbered so that the pages left blank by a previous amendment' can be removed from the Technical Specifi-cations.

Sionificant Hazards Consideration NNECO has reviewed the proposed changes in accordance with 10CFR50.92 and has concluded that the changes do not involve a significant hazards

o .. e ,

- U.S. Nuclear Regulatory. Comission B13410/ Attachment 2/Page 9 consideration. The basis for this conclusion is that the three criteria of 10CFR50.92(c) are not compromised. The proposed changes do not involvo a significant hazards consideration because the changes would not:

1. Involve a significant increase in the probability or consequences of an accident previously analyzed. The proposed changes to the ACTION state-ments will decrease the wear on the D/Gs by reducing the number . of required starts. This will also allow adequate time for the completion of all manufacturer recommended D/G engine prelube and warmup procedures.

The proposed changes to routine (frequency other than 184 days or 18 months) load testing requirements will decrease the wear on the D/Gs by reducing load frequency and timing requirements. Modifying starting and loading requirements consistent with the manufacturer's recommenda-tions is intended to enhance diesel reliability b conditions which can lead to premature failures. y Thisminimizing severeserve change would test to enhance overall safety. The proposed change that adds 184-day testing requirements has been included to encompass the fast loading to the continuous duty rating requirement being deleted from routine testing.

This reduced frequency for fast start, full load testing avoids subject-ing the D/Gs to severe thermal transients, which result from fast loading, on a routine basis. D/G operation in accordance with manufac-turer recommendations will reduce unnecessary engine stress and wear, while potentially improving overall D/G reliability and availability.

The changes to the D/G testing schedule will minimize unnecessary D/G testing while maintaining the reliability levels recommended in GL 84-15.

The proposed testing schedule adequately assures continued D/G' reliabil-ity without maintaining a punitive testing schedule following effective corrective action. '

The proposed change to Surveillance Requirement 4.8.1.1.2.e.2 provides for improved detection of sulfur in the D/G fuel oil ~ supply, and thus reduces the probability of diesel failure due to fuel oil quality problems.

Although the proposed change to Section 3.8.2.1.b provides an action statement that would allow the associated charger to be inoperable for 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months it will not impact system operability. This proposed action is identical to action 3.8.2.1.a. It is appropriate to have the same action statement for both the batteries and chargers because without the charger, the battery would shortly enter its action statement.

Since the above proposed changes serve to enhante overall safety, these- !

changes do not increase the probability or consequences of any accident previously analyzed.

2. Create the possibility of a new or different kind of accident .from any previously analyzed. The proposed changes do not alter the method of operating the plant. The changes do not introduce any new failure modes.

4

b

, w

,..o

- U.S Nuclear Regulatory Commission B13410/ Attachment 2/Page 10 The proposed changes affect testing frequency, starting and loading practices only and have no impact on any accident analysis. The proposed changes provide assurance that the 0/Gs will be able to power their respective safety systems if required.

The proposed changes to Section 4.8.1.1.2.e.2, improved sulfur detection <

method, and section 3.8.2.1.b, battery charger restoration, do not impact DC power system operability. There are.. no new failure modes associated with these changes. Additionally, the changes do - not modify plant response to the' point where it can be considered a new accident.

The proposed changes do not impact the performance of any safety system.

For these reasons, the changes do not create the possibility of a new or different kind of accident.

3. Involve a significant reduction in the margin of safety. The proposed changes in the testing requirements do not affect the capability of the diesels to. perform their function. The purpose of the changes is to increase the overall D/G reliability.

The proposed change to Section 4.8.1.1.2.e.2 provides an improved method to detect sulfur in the D/G fuel oil supply and has no impact on the consequences of any accident previously analyzed.

The proposed change to Section 3.8.2.1.b clarifies battery. charger requirements by tying the associated full capacity charger to its asso-ciated battery and it is identical to existing action statement 'a'. The change does not impact any protective boundary and does not affect the consequences of any accident previously analyzed. '

' The proposed changes do not impact the consequences of any design basis event. There is no direct impact on any of the protective boundaries..

For these reasons, the changes do not involve a reduction in the margin of safety.

Summary '

The proposed changes revise the existing Millstone' Unit No. 3 Technical Specification requirements concerning emergency diesel generator testing.

These changes are in accordance with the intent of guidance provided in Generic Letter 84-15 and manufacturer's recommendations. NNECO believes that the proposed changes should serve - to increase overall- D/G reliability and longevity. Based on the above discussion, NNEC0 has concluded the-proposed amendment does not adversely affect or endanger the health or safety of the public. In summary, the proposed changes do not involve a significant hazards !

consideration.

ML20042E483

Text

Navigation menu

Search