ML20044D806

From kanterella
Jump to navigation Jump to search
Proposed TS 3/4.3.3.5, Remote Shutdown Instrumentation
ML20044D806
Person / Time
Site: Diablo Canyon  Pacific Gas & Electric icon.png
Issue date: 05/07/1993
From:
PACIFIC GAS & ELECTRIC CO.
To:
Shared Package
ML16342A106 List:
References
NUDOCS 9305200321
Download: ML20044D806 (10)


Text

. _ _ _ _

19.E LIMITING CONDITIONS FOR OPERATION AND SURVEILLANCE REQUIREMENTS SECTION h

3/4. 3 INSTRUMENTATION (continued)

TABLE 3.3-4 ENGINEERED SAFETY FEATURES ACTUATION SYST M IH5Tr.UMENTATION TRIP 5ETPDIN75..........................

3/4 3-33 ENGINEEREDSAFETY'FEATURESRESPON5.EThMES.......;....

TABLE 3.3-5 3/4 3-38 TABLE 4.3-2 ENGINEERED 5AFETY FEATURES ACTUATION SYSTEM

~

I NSTR UMENTATI ON S UR VEI L MNCE REQUIREMENTS................

3/4 3-32 3/4.3.3 MONITORING INSTRUMENTATION Radiation Monitoring for Plant 0perattens................

3/4 3-36 TABLE 3.3-6 RADIATION MONITORING INSTRUMENTATION FOR P e

OPERATIONS...................................LANT 3/4 3-37 TAILE 4.3-3 RADIATION MONITORING INSTRUMENTATION FOR PLANT CPERATIONS SURVEILLANCE REQUIREMENTS.....................

3/4 3-39 Mo v a b l e Inc ore De te ctors.................................

3/4 3-40 Seismic Instrumentation....................&.............

3/4 3-41 TAELE 3.5-7 SEISMIC MONITORING INSTRUMENTATION....................

3/4 3-42 TABLE 4.3-4 SEISMIC MONITORING INSTRUMENTATION

$URVEILLANCE REQUIREMENTS................................

3/4 3-43 Meteorological Instrumentstion...........................

3/4 3-44 TAELE 3.3-8 METEOROLOGICAL MONITORING INSTRUMENTATION.............3/4 3-45 TABLE 4.3-5 METEOROLOGICAL MONITORING INSTRUMENTATION $URVEILLANCE REQUIREMENT 3........................... d... w....

Remote Shutdown Instrumentation......(....[........g 3/4 3-45 cor w 3/4 3-47 TABLE 3.3-9 REMOTE SHUTDOWN MONITORING INSTRUMENTATION...........

3/4 3-48 TABLE 4.3-6 REMOTE $NUTDOWN MONITORING INSTRUMENTATION 5uRvea aNeE AEQUInEnENr5................................

3/4 3-4, Accident Monitoring Ins truinentation......................

3/4 3-50 TABLE 3.3-10 ACCIDENT MONITORING INSTRUMENTATION..................

3/4 3-52 TABLE 4.3-7 ACCIDENT MONITORING INSTRUMENTATION SURVEILLANCE REQUIREMENTS................................

3/4 3-53 DIABLO CANYON - UNITS 1 & 3 WI 9305200321 930507 PDR ADDCK 05000275 P

PDR

1 INSTRUMENTATION

' REMOTE SHUTDOWN INSTRUMENTATION LIMITING CONDITION FOR OPERATION 1

strume tatio k M shown in 3.3.3.5 The remote shutdown moni rin Table 3.'3-9 shall be OPERABL d

d

',59 r fc o

l APPLICABILITY: MODES 1, 2 and 3.

l ACTION:

I a.

of OPE L

te hu own ni ri c nn 1s n he in' um harylels/DP 1

re i nts of Jab 3

I tar th in erakle%anin dej((ex),t 1s t OPE LE ta%s itb ays or t w $E,e r A in OT H,

wi rs.

/

3

- b.

The provisions of Specification 3.0.4 are.not applicable.

l C.

Se. ew +e-em+3 A4 Ac4 on h cdIosed for euk a.

k N A cf-io n M Table L T -ci.

j 4

s l

l l

SURVEILLANCE REQUIREMENTS l

4.3.3.5@achremoteshutdownmonitoringinstrumentationchannelshallbe i

l demonstrated OPERABLE by performance of'the CHANNEL CHECK and CHANNEL CALIBRATION at the frequencies shown in Table 4.3-6.

I u.ts.1 v a,f) e a y i,a co s a e, % a w co,+rg

+ranfer 5Mck is ca pc.11e_ of ge m*,n 4ke inh nded fw ^ c+io n d leAIt once.- everg 18 mon % 5.

y DIABLO CANYON - UNITS 1 & 2 3/4 3-47 l

INSERT A With less than the minimum required Function (s) of lable 3.3-9 operable, restore the inoperable Function (s) to OPERABLE status within 30 days or be in HOT SHUTDOWN within the next 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />, F

i I

f l

l l

R E o v iREb uuyg5R OF TABLE 3.3-9 t e N ro ELS i

REMOTE SHUTDOWN MONITORI E INSTRUMENTATION

[

INSTRUMENT 8~CONTfl0L FUNrJiod READO / corer 12cc e

r u_

LOCATION

^^

j

'O LE

1. Reactor. Trip Breaker Indication Reactor Trip Breaker 2/ trip breaker
2. Pressurizer Pressure Hot Shutdown Panel 1
3. Pressurizer Level Hot Shutdown Panel 1
4. Steam Generator Pressure Hot Shutdown Panel 1/sts. gen.
5. Steam Generator Wide Range Water Hot Shutdown Panel 1/stm. gen.

Level

6. Condensate Storage Tank Water Hot Shutdown Panel 1

Level

7. Auxiliary clow Hot Shutdown Panel 1/sta. gen.

butdo P

1 /

8.

Charging Flow Hot Shutdown Panel 1

~

m V

c 9kloop1TemperatureIndication Dedicated Shutdown Panel Hot and Cold l

7Q Leg Temperature i

Indication l

10.

Auxiliary Feedwater Flow Control AtW Pump, and Associated Valves Hot Shutdown Panel any 2 of 3 AFW Transfer Switches 4 kV Switchgear pumps 11.

Charging Flow Control Centrifugal Charging Pump Hot Shutdown Panel 2 of 2 pumps Transfer Switch 4 kV Switchgear 12.

Component Cooling Water Control Component Cooling Water Pump Hot Shutdown Panel any 2 of 3 CCW Transfer Switch 4 kV Switchgear pumps 13.

Auxiliary Saltwater Control Auxiliary Saltwater Pump Hot Shutdce. Danel 2 of 2 pumps Transfer Switch 4 kV Switchgear l

14.

Emergency Diesel Generator Control g

EDG Start EDG Local Control Panel 3 of 3 EDGs

~

l

/

w'/

DIABLO CANYON - UNIT.% 1 & 2 3/4 3 48 I N SE RT

f-TABLE 3.3-6 l

k l

l REMOTE SHUTDOWN MONXTORING XNSTRUMENTATXON l

.5URVEILLANCE REQUIREMENTS CHANNEL CHANNEL j

l INSTRcMENT CHECK CALIBRATION l

~

t 1.

Reactor Trip Breaker Indication N. A.

N. A.

2.

Pressurizer P'ressur'e M

R 1

l 3.-

Pressurizer Level M

R 4.

Steam Generator Vice Range Water Level M R

j 5.

Steam Generator Pressure M

R 5.

Concensate Storage Tank Water Level M

R 7.

Auxiliar~y Feecwater Flow M

R 8,

Charging Flow M

R L

w-~

~

9.ftsLoo p i Te m pe ru+ w e N ; m u n M

R

./

l

%W m

I t

\\

t

~

I i

i i

P l

EI' ELD CANYCN - UNITS 1 & 2 3/4 3-49 l'

~

j INSTRUMENTATION

.r

~

BASES 3/4.3.3.3 SEISMIC INSTRUMENTATION The OPERABILITY of the seismic instrumentation ensures that sufficient capability is available to promptly detemine the magnitude of a seismic event and evaluate the response of those features important to safety. This capability is required to permit comparison of the measured response to that used in the design basis for the facility to determine if plant shutdown is required pur-svant to Appendix A of 10 CFR Part 100.

The instrumentation is consistent with the recommendations of Regulatory Guide 1.12. " Instrumentation for Earthquakes."

j 3/4.3.3.4 METEOROLOGICAL INSTRUMENTATION The OPERABILITY of the met:eorological instrumentation ensures that sufficient i

meteorological data is available for estimating potential radiation doses to i

the public as a result of routine or accidental release of radioactive materials This capability is required to evaluate the need for to the atmosphere.

initiating protective measures to protect the health and safety of the public f

and is consistent with the recomendations of Regulatory Guide 1.23. "Onsite Meteorological Programs " February 1972.

)

3/4.3.3.5 REMOTE SHUTDOWN INSTRUMENTATION v

~

m.

p ThV0PER [LITY eVthe ote s d

ns nta n en s tha ufft,cient pabilit[is ilable to pe it sh6tdown nd ma enance f H0 f

a locations 0utsj/e of 7

a con room. This

/ST%BYofthef lity,f st a is capability is quired /in the efenyc,ontr T roospffabitahl ity i

/c'ons%entw h Gen,a/a1 Desid Cpiter 9 oJ/10 CFR Pfart 50 l

j J

A s

INSEtt 1 8

3/4.3.3.6 ACCIDENT MONITORING INSTRUMENTATION j

The OPERABILITY of the accident monitoring instrumentation ensures that l

sufficient information is available on selected plant parameters to monitor and assess these variables following an accident., The normal plant instrument j

This i

channels specified are suitable for use as post-accident instruments.

l capability is consistent with the recommendations of Regulatory Guide 1.97, Revision 3, " Instrumentation for Light-Water-Cooled Nuclear Power Plants to i

Assess Plant Conditions During and Following an Accident," May 1983, and j

NUREG-0737, " Clarification of TMI Action Plan Requirements," November 1980.

l 3/4.3.3.7 CHLORINE DETECTION $YSTEMS The OPERABILITY of the Chlorine Detection System ensures that sufficient capability is available to promptly detect and initiate protective action in I

the event of an accidental chlorine release. This capability is required to protect control room personnel and is consistent with the recommendations of '

l Regulatory Guide 1.95, " Protection of Nuclear Power Plant Control Room Opereten Against an Accidental Chlorine Release," February 1975.

j DIABLO CANYON - UNITS 1&2 8 3/4 3-3 1

4 i

p j

l INSERT B BACKGROUND The Remote Shutdown Instrumentation and Controls provide the control room operator with sufficient instrumentation and controls to place and maintain the unit in a safe shutdown condition from a location other than the control room. This capability is necessary to protect against the possibility that the control room becomes inaccessible. A safe shutdown condition is defined as MODE 3.

With the unit in MODE 3, the Auxiliary feedwater (AFW) System and the steam generator (SG) safety valves can be used to remove core decay heat and meet all safety requirements. The long term supply of water for the AFW System allows extended operation in MODE 3 from outside the control room until such a time that either control is transferred back to the control room or a j

cooldown is initiated.

In the event that the control room becomes inaccessible, the operators can establish control at the remote shutdown panel (hot shutdown panel), and place and maintain the unit in MODE 3.

Not all controls and necessary transfer switches are located at the hot shutdown panel. Some controls and transfer switches will have to be operated locally at the switchgear, motor control panels, or other local stations. The unit automatically reaches i

MODE 3 following a unit shutdown and can be maintained safely in MODE 3 for an extended period of time.

{

The OPERABILITY of the remote shutdown control and instrumentation

[

functions ensures there is sufficient information available on selected unit parameters to place and maintain A unit in MODF 3 should the control room j

become inaccessible.

l l

l l

APPLICABLE SAFETY ANALYSES The Remote Shutdown Instrumentation and Controls provides equipment at i

appropriate locations outside the control room with a capability to promptly l

shut down and maintain the unit in a safe condition in MODE 3.

The criteria governing the design and specific system requirements of the Remote Shutdown Instrumentation and Controls are located in 10 CFR 50, Appendix A, GDC 19.

LC0 The Remote Shutdown Instrumentation and Controls LC0 provides the OPERABILITY requirements of the instrumentation and controls necessary to place and maintain the unit in MODE 3 from a location other than the control l

room. The instrumentation and controls required are listed in Table 3.3-9 in the accompanying LCO.

The controls, instrumentation, and transfer switches are required for:

Reactor trip indication; RCS pressure control; Decay heat removal via the AFW System and the SG safety valves;

RCS inventory control via charging flow; and Safety support systems for the above functions, including auxiliary saltwater, component cooling water, and emergency diesel generators.

A remote shutdown Function is OPERABLE if all required instrument and j

control channels for that function listed in Table 3.3-9 are OPERABLE.

The remote shutdown instrument and control circuits covered by this LCO i

do not need to be energized to be considered OPERABLE.

This LCO is intended to ensure the instruments and control circuits will be OPERABLE if unit conditions require that a remote shutdown be performed.

i APPLICABILITY The Remote Shutdown Instrumentation and Controls LC0 is applicable in I

MODES 1, 2, and 3.

This is required so that the unit can be placed and maintained in MODE 3 for an extended period of time from a location other than the control room until either control is transferred back to the control room or a cooldown is initiated. This LCO is not applicable in MODE 4, 5, or 6.

In these MODES, the facility is already subcritical and in a condition of i

reduced RCS onergy. Under these conditions, considerable time is available to l

restore necessary instrument control functions if control room instruments or controls become unavailable.

ACTIONS Action a.

Action a. addresses the situation where one or more required Functions (instrument or control) of the Remote Shutdown Instrumentation and Controls are inoperable. This includes any Function listed in Table 3.3-9, as well as the control and transfer switches.

i The Required Action (Action a.) is to restore the required Function to OPERABLE status within 30 days. The Allowed Outage Time (A0T) is based on operating experience and the low probability of an event that would require evacuation of the control room.

f If the Required Action and associated A0T of Action a is not met, the t

unit must be brought to a MODE in which the LC0 does not apply. To achieve this status, the unit must be brought to MODE 4 within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />. The A0Ts are reasonable, based on operating experience, to reach the required unit conditions from full power conditions in an orderly manner and without challenging unit systems.

Action b.

Action b. excludes the MODE change restriction of TS 3.0.4.

This 6

exception allows entry into an applicable MODE while relying on the ACTIONS even though the ACTIONS may eventually require a unit shutdown. This exception is acceptable due to the low probability of an event requiring remote shutdown and because the equipment can generally be repaired during operation without significant risk of spurious trip.

f

Action c.

Action c. has been added to the ACTIONS to clarify the application of A0T rul es. Separate Condition entry is allowed for each Function listed on l

Table 3.3-9.

The A0T(s) of the inoperable channel (s) of a function will be tracked separately for each Function starting from the time the Condition was l

entered for that Function.

SURVEILLANCE REQUIREMENTS SR 4.3.3.5.1 Performance of the CHANNEL CHECK once every 31 days ensures that a gross failure of instrumentation has not occurred. A CHANNEL CHECK is a comparison of the parameter indicated on one channel to a similar parameter on other channels.

It is based on the assumption that instrument channels monitoring the same parameter should read approximately the same value.

Significant deviations between the two instrument channels could be an indication of l

excessive instrument drift in one of the channels or of something even more i

serious. CHANNEL CHECK will detect gross channel failure; thus, it is key to verifying that the instrumentation continues to operate properly between each CHANNEL CALIBRATION.

Agreement criteria are determined by the unit staff based on a combination of the channel instrument uncertainties, including indication and readability.

If the channels are within the match criteria, it is an i

indication that the channels are OPERABLE.

If the channels are normally off scale during times when Surveillance is required, the CHANNEL CHECK will verify only that they are off scale in the same direction. Offscale low current loop channels are verified to be reading at the bottom of the range and not failed downscale.

The Frequency of 31 days is based upon operating experience which i

demonstrates that channel failure is rare.

CHANNEL CALIBRATION is a complete check of the instrument loop and the sensor. The test verifies that the channel responds to measured parameters with the necessary range and accuracy.

The Frequency of 18 months is based upon operating experience and i

consistency with the typical industry refueling cycle.

SR 4.3.3.5.2 SR 4.3.3.5.2 verifies each required Remote Shutdown Instrumentation and Controls control circuit and transfer switch performs the intended function.

This verification is performed from the hot shutdown panel and at other locations for certain control transfer switches, as appropriate. This will ensure that if the control room becomes inaccessible, the unit can be placed and maintained in MODE 3 from the hot shutdown panel and the local control stations. The 18 month Frequency based on the need to perform this Surveillance under the conditions that apply during a plant outage and the potential for an unplanned transient if the Surveillance were performed with the reactor at power.

(However, this Surveillance is not required to be performed only during a unit outage.) Operating experience demonstrates that remote shutdown control channels usually pass the Surveillance test when performed at the 18 month Frequency.

l -

1 NOTE: A surveillance of the reactor trip breaker OPERABILITY is not required as part of the SURVEILLANCE REQUIREMENT for 4.3.3.5.2 since a TRIP ACTUATING DEVICE OPERATIONAL TEST of the reactor trip breakers is performed as part of the SURVEILLANCE REQUIREMENT for TS 3/4.3.1 (See Table 4.3-1 Item 21 and Note 10).

REFERENCES 1.

10 CFR 50, Appendix A, GDC 19.

1

?

i t

L k

i i

l 1

l l