ML20053B218
| ML20053B218 | |
| Person / Time | |
|---|---|
| Site: | Crane  |
| Issue date: | 05/10/1982 |
| From: | Harold Denton Office of Nuclear Reactor Regulation |
| To: | GENERAL PUBLIC UTILITIES CORP. |
| Shared Package | |
| ML20053B219 | List: |
| References | |
| NUDOCS 8205280186 | |
| Download: ML20053B218 (29) | |
Text
7590-01 UilITED STATES ttUCLEAR REGULATORY COMISSION In the !'.atter of
)
)
GENERAL PUBLIC UTILITIES
)
Docket No. 50-289 NUCLEAR CORPORATION
)
(Three Mile Island Nuclear
)
Station, Unit No. 1)
)
EXEMPTION 1.
The General Public Utilities liuclear Corporation (the licensee) and three co-owners are the holders of Facility Operating Licent.e flo. DPR-50 which authorizes operation of the Three Mile Island Nuclear Station, Unit flo.1 (Tlil-1 ).
This license provides, among other thin 0s, that it is subject to all rules, regulations and Orders of the Commission now or here-af ter in ef fect.
The facility comprises a pressurized water reactor at the licensee's site located in Dauphin County, Penrsylvania.
II.
On !!ovember 19, 1980, the Comnission published a revised Section 10 CFR 50.48 and a new Appendix R to 10 CFR 50 regarding fire protection features of nuclear power plants (45 FR 76602).
The revised Section 50.48 and Appendix R becane effective on February 17, 1981.
Section 50.43(c) established the schedules for satisfying the provisions of Appendix R.
Section III of Appendix R contains 15 subsections, lettered A through 0, each of which specifies requirements for a particular aspect of the firr protection features at a nuclear pcwer plant.
One of these 15 subsections, Il!.G, is the subject of this Exemption.
Subsection III.G specifies detailed requirements for fire protection of the equipment used for safe shutdown by means of separation and b$rriers (III.G.2).
If the requirer:ents for separation ind barriers could U 2 0 5 2 8 0 l % y
TMI-l ~
7590-01 not be net in an area, al,ternative safe shutdown capability, independent of that area and equipment in that area, was required (III.G.3).
'Section 50.4S(c) required completion of all modifications to meet the provisions of Appendix R within a specified time from the effective date of this fire protection rule, February 17, 1981, except for modifications to pro-vide alternative sa#e shutdown capability.
These latter modifications (III.G.3) require fiRC review and approval.
Hence, Section 50.40(c) requires their completion within a certain time af ter ilRC approval.
The date for submittal of design descriptions of any modifications to provide alternative safe shut-down capability was specified as March 19, 1981.
By letter dated March 19, 1981, as supplemented August 17, 1981, Decerber 15, 1981, and April 15, 1982', the licensee requested exemptions from 10 CFR 50.48(c) with respect to the requirements of Section III.G of Appendix R as follo is:
(1) Extend fmn March 19, 1981, to October 1,1982, the date for submittal of plans and schedules to achieve compliance with III.G.2 required by 550.40(c)(5);
(2) Extend from March 19, 1981, to October 1,1982, the date for filing additional exemptions from Sec' tion III.,G pursuant to 550.12(a) and 550.48(c)(6);
s.-
(3)
Exten,d from March 19, 1981, to October 1,1982, the date for submittal of desrign descriptions of alternative or dedicated shutdown systens to corply with Section III.G.?, if such are necessary; (4) Extend from February 17, 1981, to October 1,1982, the date fmm which the installation schedules established in 550.48(c)(2) and (3) are calculated; and (5) Exemption from additional fire suppression system protection as required by Section III.G.2 where redundant safe shutdown equipment is located in the same fire area / zone, Exemption (5) above is under review by the ilRC staff, and we have requested i
that the licensee provide additional infomation to support that exemption reques t.
Hence, the request for Exemption (5) is not being addressed by this l
Exemption.
. 7590-01 T '.1 - 1 With regard to 'the other exemption requests, when this fire protec-ti,on rule was approved by the Commission, it was understood that the time required for each licensee to reexamine those previously-approv?t.1 configura-tions at its plant to determine whether they meet the requirements of Section III.G of Appendix R to 10 CFR 50 was not well known aad would vary depending upon the degree of confomance.
For each item of nonconformance that was found, c fire hazards analysis had to be performed to determine whether the existing configuration provided sufficient fire protection.
If it did, a basis had to be formulated for an exemption request.
If it did not, modifications to either meet the requirements of Appendix R or to pro-vide sone other acceptable configuration, that could be justified for an exemption, had to be designed. Where fire protection f eatures alone could not ensure protection of safe shutdown capability, alternative safe shut-down capability had to be designed as required by Section III.G.3 of Appendix R.
Depending upon the extensiveness and number of the areas involved, the time required for this reexamination, reanalysis and redesign could vary from a few nonths to a year or more.
The Commission decided, however, to require one, short-term date for all licensees in the interest of ensurirg a best-effort',' expedited conpletion of conpliance with the fire protection rule, recognizing that there would be a number of lictasees who coold not meet these time restraints but who could then request appropriate relief through the exemption pracess.
Licensees for 44 of the 72 plants to which Appendix R applies (plants with an operating licer.se issued prior to January 1,1979) have requested such schedular relief.
The licensees for the remaining 28 plants made submittals to meet the schedu2 ar requi rer.ents of 50.48(c). All of these submittals, however, were deficient in sore respects.
In general, much of the information requested
' TM I-T 4-4, 7590-01 i
in a generic letter (C1-12.) dated February 20, 1981, to the licensees of ali 72 plants, was not provided.
Therefore, additional time is being used to co.?plete those subnittals also.
- III, Prior to the issuance of Appendix R, TMI-l had been reviewed against the criteria of Appendix A to the Branch Technical Position 9.5-1 (DTP 9.5-1).
The BTP 9.5-1 was developed to resolve the lessons learned from the fire at Browns Ferry fluclear Plant.
It is broader in scope than Appendix R, formed the nucleus of the criteria developed further in Appendix R and in its present, revised form constitutes the section of the Standard Review Plan used for the review of applications for construction permits and operating licenses of new pla nts.
The review was completed by the NRC staff and its fire protection consultants and a Fire Protection Safety Evaluation (FPSER) was issued.
Several items remained unresolved.
Further discourse between the licensee and the NRC staff resulted in resolution of these items as docunented in five supplements to the FPSER.
The FPSEP ?nd its supplements supported the issuance l
of amendments to the operating license of TMI-l which required modifications to be made to plant physical features, systems, and administrative controls to t
meet the criteria ~ of Appendix A to BTP 9.5-1.
All of these nodifications with the exception of five items which are related to safe shutdown (Section III.G) have been completed.
Therefore, TMI-l has been upgraded to o high degree of 1 Three liile Island Unit tio.1 - Operating License No. DPR-50
/cendment I;o. 44 supported by FPSER issued Septenber 19, 1978 Amendment f!o. 50 supported by Supplement 1 to FPSER issued March 16, 1979 Supplement 2 to FPSER issued April 14, 1979 Supplement 3 to FPSER issued July 21, 1980 Supplement 4 to FPSER issued September 19, 1980 Supplement 5 to FFSER issued November 19, 1980
TMI-1 7590-01 fire protection already.
With respect to itens related to safe shutdown, wit.h the issuance of Appendix R, an extensive reanalysis of the Fire Hazards a
, Analysis for TMI-l was undertaken and is still in progress.
GPU Nuclear with contractor support is applying a significant effort to complete the reassessnent and determine modifications which may be necessary to conform with Section III.G.
The additional time requested will alio,t time to quantify in deteil the plant specific changes needed to comply with Section III.G.
We note also that TMI-1 has not operated since early 1979 due to the July 2,1979 Commission Order and, in any case, there will be no plant opera-tion before October 1,1982.
Thus, the licensee concludes that the delays requested impose no additional risk to the public.
Based on the above considerations, we find that the licensee has com-pleted a substantial part of the fire protectir features at TMI-l in con-forr:ance with the requireaants of the fire protection rule and is applying significant effort to complete the reassessment of any remaining modifications which might be necessary for s trict conformance with Section III.G, However, the Comission has decided to grant an extension for areas 1) through 4) above only until.)uly 1,1982.
It is our position that an ext'ension until July 1,- N'B2, provides sufficient time for licensees to complete the reassess-ment required and redesign.of modi fications, if required.
Since all but a few licenr.ees have either indicated submittal dates prior to July 1,1982, or have already nade their subnittals, we cannot conclude that sufficient effort has been applied by the licensee towards meeting the requirements of 10 CFR 50.48(c) and Appendix R.
Accordingly, we find that because of the already-completed upgrading of this facili.ty and since TM1-1 is not operating, there is no undue risk to the health and safety of the public caused by delay -of this reassessment until July 1,1982. Therefore, an exemption should be
TMI-l 7590-01 grante a to allow such time for completion.
However, because we have found i most submittals of this reanalysis to date from other licensees have not been complete; that is, not all of the information requested by generic letter 81-12 dated February 20, 1981, was provided, we are adding a condition to this Exemption that requires all such information to be submitted by the date granted.
IV.
Accordingly, the Comnission has detemined that, pursuant to 10 CFR 50.12, an exemption is authorized by law and will not endanger life or property or the connon defense and security and is otherwise in the public interest and hereby grants the following exemptions with respect to the requirements of Section III.G of Appendix R to 10 CFR 50:
(1)
The date, March 19, 1981, for subnittal of plans and schedules to achieve corpliance as required by s50.43(c)(5) is extended to July 1,1982; (2)
The date, March 19, 1981, for filing exemption requests pursuant to 850.43(c)(6) which includes a tolling provision is extended to July 1, 1932; (3) The date, March 19, 1981, for submittal of design descriptions of alter-native or dedicated shutdown systems to comply with Section III.G.3 as required by S50.48(c)(5) is extended to July 1, 1982; and (4)
Thelate, February 17, 1931, fron which the installation schedules i
established in 550,4S(c)(2) and (3) are calculated, is extended to July 1, 1932; Provided the following conditions are met:
l 1)
Requests for exenption pursuant to g50.48(c)(6) must include:
a)
A r.oncise statement of the extent of the exemption; b) A concise description of the proposed alternative design features related to assuring post-fire shutdown capability; and r
c) A sound techniccl basis that justifies the proposed alternative in i
terms of protection afforded to post-fire shutdewn capability, l
degree of enhancement in fire safety by full compliance with III.G j
requirements, or the detriment to plant safety incurred by full l
compliance with III.G.
A simple statement that the feature l
TMI-! 7590-01 for which the exemption is reques ted was previously approved by the staff is not sufficient.
A simple assertion that in the '
licensee's judgnent the feature for which the exemption is requested is adequate fire protection is not ?ufficient.
- 2) The design descriptions of alternative or dedicated shutdcun systems to comply with Section III.G.3, as required by 650.48(c)(5) shall include a point-by-point response to each item in Section 8 of to generic letter 81-12 dated February 20,1981, and to each iten in Enclosure 2 to generic letter 81-12 dated February 20, 1981.
If the licensee does not neet the above conditions, the licensee will be found in violation of 10 CFR 50.48(c) even though the submittal may be nade within the time limit granted by the Exenption.
If such a violation occurs, inposition of a civil penalty will be considered under Section 234 of the Atonic Enery Act, as amended.
Such a violation will be a continuing one beginning with the date set in the Exemption for submittal and terminating when all inadequacies are corrected.
A delay in the detemination of inadequacy by the NRC staff, caused by the workloed associated with reviewing all of the submittals falling due near the same time, will not relieve the licensce of the responsibility for completeness of the submittal, nor will such delay cause any peaalty that nay be imposed to be mitigated.
T(e NRC staff has determined that the granting of this Exenption will not result in any significant environmental impact and that pursuant to 10 CFR 51.5(d)(4) an cnvironmental inpact statement or negative declaration and environmental impact appraisal need not be prepared in connection with this action.
FOR THE UUCLEAR REGULATORY COMMISSION MNY Harold R. Denton, Director Office of Nuclear Reac. tor Regul ation Dated at Bethesda, Maryland th is '0th day of "3y 1952.
Enclosure'2 c
CLARIFICATION OF GEilERIC LETTER On February 20, 1981, generic letter 81-12 was forwarded to all reactor licensees with plants licensed prior to January 1, 1979. The letter restated the require-ment of Section 50.48 to 10 CFR Part 50 that each licensee would be required to reassess areas of the plant where cables or equipment including associated non-safety circuits of redundant trains of systems necessary to achieve and maintain hot shutdown conditions are located to determine whether the require-ments of Section III.G.2 of Apperdix R to 10 CFR 50 were satisfied. Additionally, and Enclosure 2 of the generic letter requested additional infomation concerning those areas of the plant requiring alternative shutdown capability. Section 8 of Enclosure 1 requested information for the systems, equipment and procedures of alternative shutdown capability and Enclosure 2 defined associated circuits and requested information concerning associated circuits for those areas requiring alternative shutdown.
In our review of licensee submittals and meetings with licensees, it has become apparent that the request for information should be clarified since a lack of clarity could result in the submission of either insufficient or e,cessive x
i information. Thus, the staff has rewritten Section 8 of Enclosure 1 and of the February 20, 1981 generic letter. Additionally, further clarification of the definition of associated circuits has been provided to aid in the reassessments to determine compliance with the requirements of Sections III.G.2 and III.G.3 of Appendix R.
In developing this= rewrite we have consi red the comment of the Nuclear Utility Fire Protection Group.
The attached rewri:. of the Enclosures contains no new requirements but merely attempts to clarify the request for additional information.
~ Licen' ees who have not responded to the February 20, 1981 generic letter, s
may choose to respond to the enclosed request for information. Since the enclosed request for information is not new, but merely clarification of our previous letter, responding to it should not delay any submittals in progress that are based upon February 20, 1981 letter. Licensees whose response to the February 20, 1981 letter, has been found incomplete resulting in staff identifications of a major unresolved item (14e., associated circuits),
may choose to respond to pertinent sections of the enclosed request for infor-mation in order to close open items (i.e., open item for. assoc'iated circuits, use rewrite of Enclosure 2).
If additional clarification is needed, please contact the staff Project llanager for your plant.
i I
' to REWRITE OF SECTION 8 REQUEST FOR ADDITIONAL,INFORMATION The following is a rewrite of the staff's request for additional information concerning design modification to meet the requirenents of Section III'.G.3 of
~
Appendix P..
The following contains no new requests but is merely a rewording of Section 8 of Enclosure 1 of the February 20, 1981 generic letter.
1.
Identify those areas of the plant that will not meet the requirements of Section III.G.2 of Appendix R and, thus alternative shutdown will be provide'd, or an exemption from the requirements of Section III.G.2 of Appendix R will be provided. Additionally provide a statement that all other areas of the plant are or will be in compliance with Section III.G.2 of Appendix R.
For each of those fire areas of the plant requiring an alternative shutdown system (s) provide a complete set of responses to the following requests for each fire area:
a.
List the system (s) or portions thereof used to provide the shutdown capability with the loss of offsite power.
b.
For those systems identified in "la" for which alternative or dedicated shutdown capability must be provided, list the equipment and components of the normal shutdown system in the fire area and identif9 the functions of the circuits of the normal shutdown system in the fire area (power to what equipment, control of what components and instrumentation).
Describe the system (s) or portions thereof used to provide the alternative shutdown capabilf ty for the fire area and provide a table that lists the equipment and components of the alternative shutdown system for the fire area.
S
. For each alternative system identify the function of the new circuits being provided.
Identify the location (fire zone) of the alternative shutdown equipment and/or circuits that bypass the fire area and verify that the alternative shutdown equipment and/or circuits are separated from the fire area in accordance with Section III.G.2.
c.
Provide drawings of the alternative shutdown system (s) which highlight any connections to the normal shutdown systems (P& ids for p1p1ng ana components, elementary wiring diagrams of electrical cabling).
Show the electrical location of all breakers for power cables, and isolation devices for control and instrumentation circuits for the alternative shutdown systems for that fire area.
d.
Verify that changes to safety systems will not degrade safety systems; (e.g., new isolation switches and control switches should meet design criteria and standards in the FSAR for electrical equipment in the system that the switch is to be installed; cabinets that the switches are to be mounted in should also meet the same criteria (FSAR) as other safety related cabinets and panels; to avoid inadvertent isolation from the l
control room, the isolation switches should be keylocked or alarmed in the control rocm if in the " local" or " isolated" position; periodic checks should be made to verify that the switch is in the proper position for normal operation; and a single transfer switch or other new device should r.ot be a source of a failure which causes loss of reaunaant safety *-
s.ys tems ).
er Verify that licensee procedures have been or will, be develo' ed which describe the p
tasks to be performed to effect the shutdown method.
Provide a summary of these procedures outlining operator actions.
I
s 1
i f..
Verify that the manpower required to perform the shutdown functio'ns using r
the procedurc: of et as well as to provide fire brigade members to fight the-fire is available as required by the fire brigade technical speci-i fications.
1 l
9 Provide a commitment to perform adequate acceptance tests of the alter-native shutdown capability.
These tests should verify that:
equipment i
operates from the local control station when the transfer or isolation switch is placed in the " local" position and that the equipment cannot be i
operated from the control room; and that equipment operates from~ the j
control room but cannot be operated at the local control station when the transfer isolation switch is in the " remote" position.
h.
Provide Technical Specifications of the surveillance requirements and i
limiting conditions for operation for that equipment not already covered by existing Technical Specifications.
For example, if new 4
f isolation and control switches are added to a shutdown system, the existing Technical S pcification surveillance requirements should be supplemented to verify system / equipment functions from the alternate shutdown station at testing intervals consistent with the guidelines of Regulatory Guide 1.22 and IEEE 338. Credit may be taken for other existing tests using group overlap test concepts.
ee **
I
,. - -. -. ~..
- -- -.- -. ~. -..
4
- i. For new equipment comprising the alternative shutdown capability, verify that the systems available are adequate to perform the necessary shut-down function. The functions required should be based on previous analyses, if possible (e.g., in the FSAR), such as a loss of normal ac power or shutdown on Group i isola,, tion (BWR).
The equipment required for the alternative capability should be the same or equivalent to that relied on in the above analysis.
j, Verify. that repair procedures for cold shutdown systems are developed and material for repairs is maintained on site.
Provide a summary of these procedures and a: list of the material needed for repairs.
9 e
O l
i O
e
,,.-c-.-,,
. - -n
f, to SAFE SHUTDOWN CAPABILITY The following discusses the requirements for. protecting redundant and/or alternative equipment needed for safe shutdown in the event of a fire. The requirements of Appendix R address hot shutdown equipment which must be free of fire damage.
The followlng requirements also apply to cold s,hutdown
~
equipment if the licensee elects to demonstrate that tiie.equipnent.is to be free of. fir,e. damage. Appendlx R does allow.rejairable damage to cold shutdown (Lufoment.
Us'ing the requirements of Sections III.G and III.L of Appendix R, the capa-bility'to achieve hot shutdown must exist given a fire in any area of the plant in conjunction with a loss of offsite power for 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />.
Section III.G of Appendix R provides four methods for ensuring that the hot shutdown capa-bility is protected from fires.
The first three options as defined in Section III.G.2 provides methods for protection from fires of equipment needed for hot shutdown:
1.
Redundant systems including cables, equipment, and associated circuits may be separated by a three-hour fire rated barrier; or, 2.
Redundant systems including cables, equipment and associated circuits may be separated by a horizontal distance of more than 20 feet with no inter-vening combustibles.
In addition, fire detection and an automatic fire suppression system are required; or, 3.
Redundant systems including cables, equipment and associated circuits may by enclosed by a one-hour fire rated barrier.
In addition, fire detectors and an automatic fire suppression system are required.
_2_
The last option as defined by Section III.G.3 provides an alternative shutdown capability to the redundant trains damaged by a fire.
4.
Alternative shutdown equipment must be independent of the cables, equip-ment and associated circuits of the redundant systems d?maged by the fire.
Associated Circuits of Concern The following discussion provides A) a definition of associated circuits for Appendix R consideration, B) the guidelines for protecting the safe' shutdown capability from the fire-induced failures of associated circuits and C) the in-formation required by the staff to review associated circuits. The definition of associated circuits has not changed from the February 20, 1981 generic letter; but is merely clarified.
It is important to note that our interest is only with those circuit (cables) whose fire-induced failure could effect shutdown.
The guidelines for protecting the safe shutdown capability from the fire-induced failures of associated circuits are not requirements. These guidelines should be used only as guidancs when needed. These guidelines do not limit the alter-natives available to the licensee for protecting the shutdown capability.
All proposed methods for protection of the shutdown capability from fire-induced failures will be evaluated by the staff for acceptability..
A.
Our concern is that circuits within the fire area,will, receive fire damage which can affect shutdown capability and thereby prevent post-fire safe shutdown. Associated Circuits
- of Concern are defined as those cables (safety Irelated, non-safety related, Class 1E, and non-Class lE) that:
- The definition for associated circuits is not exactly the same as the definition presented in IEEE-384-1977.
I 1.
Have a physical separation less than that required by Section III.G.2 of Appendix R,.and; 2.
Have one of the following:.
a common power source with the shutdown equipment (redundant or a.
alternative) and the power source is not electrically protected from the circuit of concerp by coordinated breakers, fuses, or similar devices (see diagram 2a), or b.
a connection to circuits of equipment whose spurious operation would adversely affect the shutdown capability (e.g., RHR/RCS isolation valves, ADS valves, PORVs, steam generator atmospheric dump valves, instrumentation, steam bypass, etc.) (see diagram 2b), or a common enclosure (e.g., raceway, panel, junction) with the shutdown c.
cables (redundant and alternative) and, (1) are not electrically protected by circuit breakers, fuses or simi-lar devices, or (2) will allow propagation of the fire into the common enclosure, (see diagram 2c).
O
^ "'
EXAMPLES OF ASSOCIATED CIRCUITS OF CONCERN Ff 8e. Axe a i
i FIRE AREA FIRE BBO 3
s 1
s i
\\
i s
s
\\
\\
El
\\
ll N
\\
i.
)
\\
o' s
}
- s1 l
.N 1
s
\\
\\
Gl g
i
\\
l 41 N
i g
y 3
\\
k k
\\
d
\\
s N
'f l
\\ j S
\\
l
\\
'd
\\
s N
F N
\\
j
\\
\\
b-N l j h
wl F
W
\\
<l
'F
\\
El s
\\
N I it N'
Q
\\
l
\\\\NNNkNN NNNNNINNN h\\'N\\\\ \\\\ Y
~~
l coanos l
l Euctosage E p p e,f a,,e sp ulens The area barriers shown above meet B-sus the appropriate sub-paragraphs (a-f) f *' & c A i/ fe d of section III.G-2 of Appendix R.
skwldoen i
Diagram 2A Diagram 2B Diagram 2C O
I
. B.
The following guidelines are for protecting the shutdown capability from fire-induced failures of circuits (cables) in the fire area. The guidance provided below for interrupting devices applies only to new devices installed to provide electrical isolation of associated circuits of concern, or as part of the alternative or dedicated shutdown system. The shutdown capability may be protected from the adverse effect of damage to associated circuits of concern by the following methods:
1.
Provide protection between the associated circuits of concern and the shutdown circuits as per Section II~I.G.2 of Appendix R, or For a comon power source case of associated circuit:
d 2.
a.
Provide load fuse / breaker (interrupting devices) to feeder fuse / breaker coordination to prevent loss of the redundant or alternative shutdown power source. To ensure that the following coordination criteria are met the 'forlowing should apply:
(1) The associated circuit of concern interrupting devices (breakers or fuses) time-overcurrent trip characteristic for all circuits faults should cause the interrupting device to interrupt the fault current prior to initiation i
of a trip of any upstream interrupting device which will cause a loss of the common power source,
,(2) The power source shall supply t'he necessary fault current for sufficient time to ensure the proper coordination without loss of function of the shutdown loads.
,s
. f, o
c.
The acceptability of a particular interrupting device is considered demonstrated if the following criteria are met:
(1) The interrupting device design shall be factory tested to verify overcurrent protection as designed in accordance with the applicable UL, ANSI, or NEMA standards.
(ii)
For low and medium voltage switchgear (480 V and above) circuit breaker / protective relay periodic testing shall demonstrate that the overall coordination scheme remains within the limits specified in the design criteria. This testing may be performed as a series of overlapping tests.
(iii) Molded case circuit breakers shall peridically be manually exercised and inspected to insure ease of operation. On a rotating refueling outage basis a sample of these breakers i
j shall be tested to determine that breaker drift is within that' allowed by the design criteria.
Breaken;should be tested in accordance with an accepted QC testing methodology such as MIL STD 10 5 D.
(iv)
Fuses when used as interrupting devices do not require l
periodic testing, due to their stability, lack of drift, I
and high rel n bility. Administrative controls must insure that replacement fuses with ratings other than those
~~
selected for proper coordinating are not accidentally used.
b.
For circuits of equipment and/or components whose spurious operation would affect the capability to safely shutdown:
(1) provide a means to isolate the equipment and/or components from the fire area prior to the fire (i.e., remove power cables, open circuit breakers); or (2) provide electrical isolation that prevents spurious operation.
Potential isolation devices include breakers, fuses, ampli-fiers, control switches, current XFRS, fiber ~ optic couplers, relays and transducers; or (3) provide a means to detect spurious operations and then proce-dures to defeat the maloperation of equipment (i.e., closure of the block valve if PORV spuriously operates, opening of the breakers to remove spurious operation of safety injection);
For common enclosure cases of associated circuits:
c.
(1) provide appropriate measures to prevent propagation of the fire; and (2) provide electrical protection (i.e., breakers, fuses or similar devices)
We recognize that there are different approaches which may be used to C.
reach the same objective of determining the interaction of associated circuits with shutdown systems. One approach is to start with the fire area, identify what is in the fire area, and' determine the interaction between what is in the fire area and the shutdown systems which are outside the fire area. We have entitled this approach, "The Fire Area Approach." A second approach which we have named "The Systems Approach" would be to define the shutdown systems around a fire area and then determine
. ~.,
o
.. i those circuits that are located in the fire area that are associated with the shutdown system. We have prepared two sets of requests for infor. nation, one for each approach. The licensee may choose to respond to either set of requests depending on the approach selected by the licensee.
FIRE AREA APPROACH 1.
For each fire area where an alternative or dedicated shutdown method, in accordance with Section III.G.3 of Appendix R is provided, the following information is required to demonstrate that associated circuits will not prevent operation or cause maloperation of the alternative or dedicated shutdown method:
a.
Provide a table that lists all the power cables in the fire area that connect to the same power supply of the. alternative or dedicated shutdown method and the function of each power cable listed (i.e., power for RHR pump).
b.
Provide a table that lists all the cables in the fire area that were considered for possible spurious operation which would adversely affect shutdown and the function of each cable listed.
l c.
Provide a table that lists all the cables in the fire area that share a common enclosure with circuits of the alternative or dedicated shutdown systems and the function of each cable listed.
d.
Show that fire-induced failures (hot shorts, open circuits or shorts to ground) of each of the cables listed in a; b, and c will not prevent operation or cause maloperation of the alternative or dedicated shutdown method.
e.
For each cable listed in a, b and c where new electrical isolation has been provided or modification to existir.g electrical isolation has been made, provide detailed electrical schematic drawings that show how each cable is isolated from the fire area.
SYSTEMS APPROACH 1.
For each area where an alternative or dedicated shutdown method, in accordar:e with Section III.G.3 of Appendix R is provided, the following information is required to demonstrate that associated circuits will not prevent operation or cause maloperation of the alternative or dedicated shutdown method:
a.
Describe the methodology used to assess the potential of associated circuit adversly affecting the alternative or dedicated shutdown.
The description of the methodology should include the methods used to identify the circuits which share a common power supply or a common enclosure with the alternative or dedicated shutdown system and the circuits whose spurious operation would affect shutdown. Additionally, the description should include the methods used to identify if these circuits are associated circuits of concern due to their location in the fire area, b.
Provide a table that lists all associated circuits of concern located in the fire area.
c.
Show that fire-induced failures (hot shorts, open circuits or shorts to ground) of each of the cables listed in b will not prevent operation or cause maloperation of the alternative or dedicated shutdown method.
i
- d.
For each cable listed in b where new electrical isolation has been provided, provide detailed electrical schematic drawings that show how each cable is isolated from the fire area.
e.
Provide a location at the site or other offices where all the tables and drawings generated by this metho'dology approac_h for the associated circuits review may be audited to verify,the information provided above.
HIGH-LOW PRESSURE INTERFACE For either approach chosen the following concern dealing with high-low.
pressure interface should be addressed.
2.
The residual heat removal system is generally a low pressure system that interfaces with the high pressure primary coolant system. To preclude a LOCA through this interface, we requi.re compliance with the recommendations of Branch Technical Position RSB 5-1.
Thus, the interface most likely consists of two redundant and independent motor operated valves. These two motor operated valves and their associdted cables may be subject to a single f. ire hazard.
It is our concern that this single fire could cause the two valves to open resulting in a tire initiated LOCA through the high-low pressure system interface. To assure that this interface and other high-low pressure interfaces are adequately protected from the effects of a single fire, we require the following information:
a.
Identify each high-low pressure interface that uses redundant electrically controlled dev' ices'(such as two series motor operated valves) to isolate or preclude rupture of any primary coolant boundary.
10 -
b.
For each set of redundant valves i~dentified in a., verify the redundant cabling (power and control) have adequate physical separation as required by Section III.G.2 of Appendix R.
i c.
For each case where adequate sop: ration is r.ct previded, shm: thct fire induced failures (hot short, open circuits or short to ground) of the cables will not cause maloperation and result in a LOCA.
O e
hN 8
.a
CRI ERIA FOR EVAL'UATING EXEMPTIONS TO SECTION III G OF APPENDIX R OF 10 CFR PART 50 Paragraph 50.48 Fire Protection of 10 CFR Part 50 requires that all nuclear power plants licensed prior to January 1,1979 satisfy the requirements of Section III.G of Appendix R to 10 CFR Part 50.
It also requires that alternative fire protection configurations, previously approved by an SER be reexamined for compliance with the requirements of Section III.G.
Section III.G is related to fire protection features for ensuring that systems and associated circuits used to achieve and maintain safe shutdown are free of fire damage.
Fire prot 6ction configurations must either meet the specific require-ments of Section III.G or an alternative fire protection configuration must be justified by a fire hazard analysis.
The general criteria for accepting an alternative fire protection configur-ations are the following:
The alternative assures that one train of equipment necessary to achieve hot shutdown from either the control room or emergency control stations is free of fire damage.
The alternative assures that fire damage t.o at least one train of equipment necessary to achieve cold shutdown is limited spch that it can be repaired within a reasonable time (minor repairs with components stored on-site).
g Fire retardant coatings are not used as fire barriers.
i Modifications required to meet Section III.G would not enhance fire protection safety above that provided by either existing or proposed alternatives.
L l
Modifications required to meet Section III.G would be detrimental to overall facility safety.
Because of the broad spectrum of potential configurations for which exemptions may be. requested, specific criteria that account for all of the parameters that are important to fire protection and consistent with safety requirements of all plant-unique configurations have not been l
developed.
However, our evaluations of deviations from these require-ments in our previous reviews and in the request's for III.G exemptions received to date have identified some recurring configurations for which specific criteria have been developed.
.Section III.G.2 accepts three methods of fire protection.
A passive 3-hour fire barrier should be used where possible.
Where a fixed barrier cannot be installed, an automatic suppression system in combination with a fire barrier or a separation distance free of combustibles is used if the configurations of systems to be protected and in-situ combustibles are such that there is reasonable assurance that the protected systems will survive.
If this latter condition is not met, alternative shutdown capa-bility is required and a fixed suppression system installed in the fire area of c,oncern, if it contains a large concentration of cable:;.
It is essential to remember that these alternative requirements are not deemed to be equivalent.
However, they provide adequate protection for those configurations in which they are accepted.
Wheri the fire protection features of each fire area are evaluated, the whole system of such features must be kept in perspective. The defense-in-depth principle of fire protection programs is aimed at achieving an adequate balance between the different features.
Strengthening any one can compensate in some measure for weaknesses, known or unknown in others.
The adequacy of fire protection for any particular plant safety system or a ea is determined by analysis of the effects of postulated fire relative to maintaining the ability to safely shutdown the plant and minimize radio-active releases to the environment in the event of a fire. During thes,e evaluations it is necessary to consider the two-edged nature of fire protection features recognized in General Design Criterion 3 namely, fire protection should be provided consistent with other safety considerations.
An evaluation must be made for each fire area for which an exemption is requested. During these evaluations, the staff considers the following parameters:
f A.
Area Description walls, floor, and ceil-ng construction cailing height room volume ventilation
- congestion B.
Safe Shutdown Capability number of redundant systems in area whether or not system or equiment is-required for hot shutdown type of equipment / cables involved repair time for cold shutdown equipant within this area separation between redundant components and in-situ concentration of combustibles alternative shutdown capability 1
e..
+
C.
Fire Hazard Analysis type and configuration of combustibles in area quantity of combustibles ease of ignition and propagation heat release rate potential transient and installed combustibles suppression damage to equipment whether the area is continuously manned traffic through the area accessibility of the area D.
Fire Protection Existing or Committed fire detection s.' stems fire extinguishing systems
- ho,se station / extinguisher radiant heat shields A specific description of the fire protection features of the configuration is required to justify the compensating features of the alternative. Low I
fire loading is not a sufficient basis for granting an exemption in areas where there are cables.
If necessary, a team of. experts, including a fire protection engineer, I
will visit the site to determine the existing circumstances. This visual f
inspection is also considered in the review process.
i The majority of the III.G exemption requests received to date are bejng I
denied because they lack specificity. Licensees have not identified l
the extent of the exemption requested, have not provided a technical basis For the request and/or have not provided a specific description of the alternative. We expect to receive requests for exemption of the following nature:
1.
Fix'ed fire barriers less than 3-hour rating.
2.
Fire barrier without an automatic fire suppression system.
3.
Less than 20 feet separation of cables with fire propagation retardants (e.g., coatings, blankets, covered trays) and an automatic suppression system.
l 4.
For large open areas with few components to be protected and few in-situ l
combustibles, no automatic suppression system with separation as in Item 3 above.
5.
No fixed suppression in the contr'o1 room.
l 9
1
. ~... '.
- 6.
No fixed suppression in areas without a large concentration of cables for which alternative shutdown capability has been provided.
Our fire research test program is conducting tests to provide information that will be useful to determine the boundary of acceptable conditions for fire protection configurations which do not include a fire rated barrier.
Based on deviations recently approved, specific criteria for certain recurring configurations are as follows:
Fire Barrier Less than Three Hours This barrier is a wall, floor, ceiling or an enclosure which separates one fire area from another.
Exemptions may be granted for a lower rating (e.g., one hour or two hou'rs) where the fire loading is no more than 1/2 of the barrier rating. The fire rating of the barrier shall be no less than one hour.
Exemptions may be granted for a fixed barrier with a lower fix rating supplemented by a water curtain.
l An Automatic Suppression System With Either One Hour Fire Barrier or l
20-Foot Separation l
This barrier is an enclosure which separates those portions of one division which are within 20 feet of the redundant division.
The suppressant may be water or gas.
l Exemptions may be granted for configurations of redundant systems which
'have compensating features.
For example:
A.
Separation distances less than 20 feet may be deemed acceptable where:
1.
Fire propagation retardants (i.e., cable coatings, covered trays, conduits, or mineral wool blankets) assur0 that fire propagation through in-situ combustibles will not occur or will be delayed l
sufficiently to ensure adequate time for detection and' suppression.
l 2.
Distance above a floor level e.xposure fire and below ceiling assures that redundant systems will not be simultaneously subject to an unacceptable temperature or heat flux.
l B.
The ommission of an automatic suppression system may be deemed acceptable where:
1.
Distance above a floor level exposure fire and below ceiling assures that redundant systems wil' not be simultaneously subject to an unacceptable temperature v.- heat flux.
L
s
( ',
a 5-
.2.
The fire area is required to be manned continuously by the provisions in the Technical Specifications.
e 4
l l
l l
l e
esm L
,