Text

Proposed Tech Specs,Extending Operation W/One Plant Protection Sys Channel in Bypass
	ML20056D310
Person / Time
Site:	Arkansas Nuclear
Issue date:	07/22/1993
From:	; ENTERGY OPERATIONS, INC.
To:	;
Shared Package
ML20056D308	List: 2CAN079303, Application for Amend to License NPF-6,extending Operation W/One Plant Protection Sys Channel in Bypass; ML20056D310; ML20056D311;
References
	NUDOCS 9308110393
	Download: ML20056D310 (54)
	v • d • e

..

s.

t ATTACHMENT 1 IQ 2CAN079301 PROPOSED TECHNICAL SPECIFICATION AND RESPECTIVE SAFETY ANALYSES IN THE MATTER OF AMENDING LICENSE NO. NPF-6 ENTERGY OPERATIONS, INC.

ARKANSAS NUCLEAR ONE, UNIT TWO DOCKET NO. 50-368 t

i l

'T O

t 9308110393 930722 k-PDR ADOCK 05000368

$i P

ppa p

Attachment I to 2CAN079303 Page1of1I I

INTRODUCTION The proposed change to the Arkansas Nuclear One Unit 2 (ANO-2) Technical Specifications-allows plant operation at full power with one Plant Protection System (PPS) channel in bypass for greater than the presently allowed 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months . In cases of channel component failure where the component cannot readily be repaired or replaced within 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months , the proposed technical specifications allow a channel to remain in bypass until the next cold shutdown. In addition, 8-i certain editorial changes have been incorporated in order to maintain consistency between tables and to clarify the intent of the technical specifications.

The proposed technical specifications allow the four channel Reactor Protection System (RPS) and Engineered Safety Features Actuation System (ESFAS) to operate, during full power conditions, with one channel in bypass or trip longer than 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months per the following conditions:

A.

When a protection channel of a given process variable becomes inoperable for greater than 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months , the defective channel may be placed in the bypassed condition until the next regularly scheduled Plant Safety Committee (PSC) meeting.

B.

The PSC will review the situation and document theirjudgment concerning prolonged operation in bypass, channel trip, and/or repair. The goal is to repair the inoperable channel and return it to service as quickly as practicable.

C.

Any inoperable protection channel must be repaired and restored to an operable state prior to startup from the first cold shutdown operational mode following channel malfunction.

The proposed technical specifications provide the benefit of avoiding unscheduled plant shutdown and possibly plant cooldown in order to repair or replace components which are not accessible or repairable during plant operation at power. The proposed technical specifications also reduce the likelihood of an inadvertent actuation of the PPS where a failed channel is placed in trip, as is required by the present ANO-2 Technical Specifications.

The following are examples of failures that could involve extended operation with a channel in bypass:

A.

Failure of an excore neutron detector.

B.

Failure of a Thot RTD.

C.

Failure of a Tcold RTD.

D.

Failure of a pressurizer pressure sensor.

O E.

Failure of a steam generator level sensor.

i

'i Attachment I to 2CAN079303 Page 2 of11 F.

Failure of a steam generator pressure sensor.

G.

Failure of an RCP speed sensor.

H.

Failure of a containment pressure sensor.

I I.

Other channel component failures where the component cannot be readily repaired or replaced.

BACKGROUND Although designed as a 2-out-of-3 logic system, the ANO-2 Plant Protection System (PPS) was built and installed as a 2-out-of-4 logic system, the intent being to have one channel as an installed spare. ANO-2 was the first Combustion Engineering (C-E) plant with an improved PPS design. Being the first ofits kind, the necessary reviews and approvals were not completed prior to its licensing, and it was licensed as a 2-out-of-4 PPS logic plant, with limited (48 hour5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months ) operation allowed in the 2-out-of-3 mode. All seven subsequent C-E designed units were licensed for essentially unlimited 2-out-of-3 logic mode operation. These later plants relied on much of the work done by ANO-2 for their licensing basis.

To place a PPS channel in bypass requires the operator to press a button on the PPS panel.

O Other PPS functional units dependent on the same input channel must also be bypassed, although in several cases one button serves more than one functional unit. Actuating a trip channel bypass closes a relay contact in parallel with the bistable relay contacts for the three affected matrix relay ladders associated with a trip in that channel of the PPS. Visual indication of a bypassed channel is provided on the PPS panelin the Control Room. This effectively removes the affected PPS channel, leaving the PPS in a 2-out-of-3 logic in the bypassed parameter.

It is convenient to have the capability to bypass a channel for the performance of surveillance i

tests. Placing an operable channelin bypass for testing reduces the possibility of an inadvertent actuation due to the testing. If an inoperable channel has been bypassed, it must first be placed in the tripped condition before another channel can be placed in bypass for testing.

1 The benefits of being able to leave a channelin bypass are fourfold: First, having to place a PPS channel in trip (1-out-of-3 logic mode) presents a greater potential for an inadvertent -

PPS actuation. Second, some failures are in inaccessible locations necessitating a plant shutdown to repair. Third, on the rare occasion where two channels of a functional unit become inoperable, the ability to place one in trip and one in bypass (1-out-of-2 logic mode) until repairs are completed may eliminate the need for an unplanned forced shutdown of the unit. Fourth, the ability to operate with 2-out-of-3 logic mode enables the plant to better plan O

repairs, and eliminates the need to rush them, particularly on weekends and other times when the normal work staff may not be available.

1

Attachment I to

-2CAN079303

+

Page 3 of11 O

The attached ANO engineering report,' 93-R-2003-01, Rev. 2, " Analysis Allowing Extended Operation with One PPS Channel in Bypass", contains the detailed justifications for this proposed amendment. The report presents the following information:

1.

Introductiom contains the background, history, description of the proposed use, and the acceptance criteria for the application ofindefinite bypass to one 0

channel of the PPS.

2.

Descrintions: describes the PPS, the bypass circuitry, and the various PPS power circuits.

3.

Analysis: provides the detailed justifications for the acceptability of operation -

with the PPS in a 2-out-of-3 logic mode. Specifically this section addresses the functional redundancy for each PPS functional unit, and its relationship to the accident analysis; the effects of a high energy line break with a PPS channelin bypass; the physical separation of PPS process measurement channels, both inside and outside containment; and the independence and electrical fault isolation of the Vital buses.

4.

Documentation Chances: presents the changes to the Safety Analysis Report (SAR) and Technical Specifications necessary to support this amendment. A O

revision to the SAR PPS Failure Modes and EfTects Analysis is presented, as well as detailed discussion of the changes to the Technical Specifications.

5.

Supportina Information: compares the ANO-2 PPS to that for San Onofre Nuclear Generation Station Units 2 and 3, another C-E unit which is licensed for use with the 2-out-of-3 logic mode.

6.

==

Conclusion:==

summarizes the findings of this study.

7.

References:

summarizes references used in this study.

Several Appendices present information supporting the main report, or produced during its development.

DISCUSSION OF CHANGE i

As discussed in Section 4.4 of the Repon, three types of changes to the technical specifications are proposed. These are:

1.

Those changes related to operation of the RPS and ESFAS as a 2-out-of 3 logic. These include proposed ACTIONS 2 and 3 for the RPS and proposed ACTIONS 10 and 11 for the ESFAS, as well as the supporting changes proposed to the Administrative Controls and Bases. These four ACTIONS

l

^

li Attachment I to 2CAN079303 Page 4 of11 also specify the associated Functional Units which receive input from a 5.

common process measurement circuit and may be affected by the failure of that process measurement circuit. ACTIONS 3 and 11 relate to operation with two channels inoperable, effectively placing the PPS in a 1-out-of-2 logic mode.

For these two ACTIONS, a one-hour completion time (to place one inoperable channelin bypass and the second in trip)is appropriate.

t 2.

Those changes incorporating improvements to make the technical specifications more correct and easier for the operator to understand and use.-

These are consistent with industry efforts to improve technical specifications.

These changes are primarily the logic related changes to Functional Unit 12 (p.

3/4 3-3) for the RPS, and Inserts A and B to Table 3.3-3 for the ESFAS. In

)

the case of the ESFAS Actuation Logic, there has been an extension of the j

time to complete the Required Action from I hour to 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months ; this is consistent with the time allowed by ACTION 9 for the Manual (Trip Buttons),

and is less than the 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months generally allowed for repair of the actuated ESF equipment. The Bases also contain a description clarifying what constitutes a failure of one channel of the matrix logic, which is consistent with industry efforts to improve technical specifications.

3.

Editorial changes for increased clarity, which are consistent with industry efforts to improve technical specifications. These include a new ACTION 8 O

for the Manual RPS Trip in Modes 3,4, and 5 with the trip breakers closed, which does not vary the requirements from what is presently specified. Also, in the Table column labeled " Applicable Modes," the phrase "and *" has been changed to "3 *,4*, and 5*" for clarity (with the exception of Functional Unit 3 of Table 4.3-1, for which this would not be appropriate).

The proposed changes are consistent with industry efforts to improve technical specifications and make them user-friendly.

The following section discustes the change to allow extended plant operation with one PPS channel in prolonged bypass, ia., in 2-out-of-3 logic.

The acceptability of the proposeu change to the Arkansas Nuclear One Unit 2 Technical Specifications, to allow extended plant operation with one PPS channel in prolonged bypass, is evaluated and justified in the attached engineering report. The criteria which must be satisfied to ensure that three channels are sufIicient for plant protection are taken from the letter from R. A. Clark (NRC) to W. Cavanaugh (ANO) dated March 31,1982, and are reproduced below. Note that the Figure I referred to in the following discussion is the

" Reactor Protection System Simplified Functional Diagram" found in Section 3.7 of the attached report and ANO-2 SAR Figure 7.2-5.

l l0

Attachment I to 2CAN079303 Page 5 of 11 Criteria for 2-out-of-3 Logic Operation 1.

Hieh Enerzy Line Break The protection system should be reviewedfor the effects ofhigh energy line breaks. Each licensee must analy:e the protection system to verify that high energy line ha:ards in coincidence with the bypass ofa channel will not I-negate the minimum acceptable redundancy required by IEEE Std. 279-1971.

~

11 should be noted that credit is not to be takenfor the " fail-safe" mode of the channels affected by high energy line breaks.

2.

Sinzie Failure in Combination with Prolonged Bvvass There may be cases where the prolonged bypass of a specific protection

\\

channel in combination with a singlefailure mightjeopardi:e plant protection (i.e., channels remaining will not sufpciently detect associated transients and accidents without causing unacceptable consequences such as core damage, etc.) The licensee should review the accident analyses (i.e., rod drop accident, rod ejection, etc.) to verify that the bypass of a specificprotection channelin coincidence with a singlefailure of a redundant will not prevent requiredprotectionfor any transient or accident.

3.

ChannelIndependence Thefourprotection channels must be reviewedforphysicalindependence.

Each licensee should conprm that thefourprotection channels as installed meet the physicalindependence criteria ofRegidatory Guide 1.75.

4.

Independence of the VitalBuses Eachplant must be reviewedfor independence of the vital buses. The Combustion Engineering (CE) reactor protection system (IU'S) is made up of four (4) protection channelsfor each trip parameter. Each parameter channel consists of bistable relays and associated contacts which are arrangedinto six logic ANDS (AB, AC, AD, BC, BD, CD matrices) which represent allpossible coincidences of two combinations (e.g., combinations of 2-out-of-4 logic).

Each logic matrix ispowered by two offour Class 1E independent 120 Vac vital buses as shown in Figure 1. This arrangement may challenge the isolation and hence independence of the redundcmt ac vitalpower buses. It is typical oflicensees using the CE design to assure that the independence of these buses is maintained through the use ofqualifiedisolators.

Attachment I to 2CAN079303 Page 6 of11

\\

Licensees desiring to use the Technical Specifications ofEnclosure 1 should O

confirm that tests and analyses have been performed to demonstrate independence of the redundant vital buses. The tests andsupporting information shouldinclude:

a)

The use of a plant-specific mock-up representing one protection logic matrix system (i.e., two matrix power supplies, each with its own v

simulated 120 Vac vital bus supply, matrix relays, bistable power supplies, bistable trip units, andisolation circuitry),

b)

The application ofsurges (internal and external transient voltages) andfaults (including continuous phase-to-phase short-circuits, phase-to-ground short circuits and the application of continuous external high voltages) to the simulated 120 Vac vital bus wpplyingpower to an associated matrixpower supply, c)

Application of the surges andfaults between each matrixpower supply input conductor and ground (common mode) and across (line-to-line) the matrix power supply input conductors (transverse mode),

d)

Monitoring the redundant simulated 120 Vac vital bus supplying power to its matrix power supply to measure any effect as a result of application of thefaults or surges on the other bus, e)

Acceptance criteriaforperturbations which would be allowed witHn the redumhmt vital bus without interfering with anyprotection system

actions, f)

Justification that thefaults and surges used during the testing exceed the maximum worst-casefailures which could occur within the protection systems circuits.

S.

Logic Matrix Circuitry Failure Due to a Vital Bus Single Failure Each plant must be reviewed to assure that, with a channelin bypass, a single failure of a vital bus will not prevent the protection systemfrom performing itsprotectivefunction.

As stated in item 4 above, the CE reactor protection systemforms six logic matrices (AB, AC, AD, BC, BD, and CD)from allpossible coincidences of two combinations of thefourprotection channel bistables and associated contacts. Due to the vital bus arrangement a singlefailure ofa vital bus coincident with the bypass of a channel couldprevent the requiredprotective function of the RPS.

1 F

- to 2CAN079303 Page 7 of 11 Looking at Figure 1, assume that a channel A tripparameter is bypassed.

This results in negating the AB, AC and AD logic matrices protective functions. This now leaves the BC, BD and CD logic matricesfor protection.

However, as shown infigure 1, these remaining matrices are being supplied by a common vital bus. It can now be postulated that a singlefailure (fault, surge, etc.) within the common vital bus system mightpropagate through the i

logic matrixpower supplies into the matrix circuitry. This could thereby cause afailure (welding of contacts) of the remaining logic matrices such that the requiredprotectivefunction cannot be performed Licensees desiring to use the l'echnical Specifications ofEnclosure 1 should confirm that sufficient tests and analyses have been performed to assure that with a channel bypassed, a vital bus singlefailure will not negate the required protectivefunction. The tests andsupporting information shouldinclude 1

a)

The use of a plant-specific mock-up representing one protection logic matrix system (i.e., two matrix power supplies, each with its own simulated 120 Vac vital bus supply, matrix relays, bistable power supplies, bistable trip units, andisolation circuitry),

b)

The application ofsurges (internal and external transient voltage.s) andfaults (including continuous phase-to-phase short circuits, phase-to-ground short-circuits and the application of continuous external high voltages) to the simulated 120 Vac vital bus supplyingpower to an associated matrixpower supply, 1

c)

The application ofsurges andfcmits between each matrixpower supply input conductor and ground (common mode) and across (line-to-line) the matrixpower supply input conductors (transverse mode),

d)

Monitoring the auctioneered matrix power supply output to measure any effect on the logic matrix circuitry as a result of application of the faults or surges, i

e)

Verification that during and after the application of the surges and faults, the protection circuits willperform theirprotective actions.

f)

Justification that thefmdts and surges used during the testing exceed the maximum worst-casefailures which could occur within the protection systems circuits.

O e

r--

.g, w

m r---

,,w wv.

r

-m-r e-e

Attachment I to 2CAN079303 Page 8 of 11 pd The attached engineering report addresses these criteria in detail; see specifically Section 3.0.

This analysis demonstrates that:

A high energy line break in coincidence with the bypass of a PPS channel will 1.

not negate the minimum acceptable redundancy required by IEEE Std. 279-1971, with no credit taken for the fail safe mode of the affected channels l

l r

l 2.

Assuming one channel in bypass and a second channel subject to a single failure, the PPS will provide the protection assumed in the accident analysis.

l The affected events were reanalyzed for Cycle 10 in support of a TS amendment to allow operation at reduced pressurizer pressure. These reanalyses included the PPS bypass assumption.

3.

As-built, the four protection channels meet the physical separation criteria of NRC Regulatory Guide (RG) 1.75, Rev. 2, with exceptions justified in accordance with the Regulatory Guide. The cable routing for the Control Element Assembly (CEA) position indication channels has beenjustified as an appropriate exception to RG 1.75.

4.

A fault and surge qualification test program conducted on the ANO-2 PPS demonstrates that the maximum credible de and ac faults and surges applied to the inputs of selected PPS power supplies do not propagate through the redundant power supply to the second vital bus.

The acceptability of the separation of vital bus power feeds to the PPS, and the separation between the inverter input and output power circuits is demonstrated. This demonstrates the adequacy of the independence of the four vital buses given that there are only two batteries supplying their emergency power source.

l 5.

The fault and surge qualification test program also demonstrates that, with a channel in bypass, there is no credible single failure of a vital bus that will affect the six Matrix Trip Relays in such a manner that the actuation of the PPS is jeopardized.

The analysis demonstrates that, while operating in a 2-out-of-3 logic mode, the functional redundancy of the PPS is one. For any design bases event, with the occurrence of any postulated single failure (e.g., failure of a battery), the PPS will provide the protection assumed in the accident analysis. The analysis also assures that bypass of more than one channel ofinterrelated functional units is prevented either by interchannel electrical interlocks, or by the administrative controls contained in the proposed Technical Specifications.

Therefore, it is concluded that operation of ANO-2 in accordance with the proposed change will not prevent the PPS from performing its functions as assumed in the accident analysis.

Attachment I to i

2CAN079303 Page 9 of 11

(~}

DETERMINATION OF NO SIGNIFICANT IIAZARDS CONSIDERATION v

An evaluation of the proposed change has been performed in accordance with 10CFR50.91(a)(1) regarding no significant hazards considerations using the standards in 10CFR50.92(c). A discussion of these standards as they relate to this amendment request follows:

r Criterion 1 - Does Not Involve a Significant Increase in the Probability or Consequences of an Accident Previously Evaluated.

Operation of the ANO-2 PPS in a 2-out-of-3 logic mode has no effect on the probability of any accidents previously evaluated as it has no impact on the causes ofinitiating events in the plant. The proposed change reduces the probability ofinadvertent actuations of the PPS due to an inoperable channel being placed in the tripped condition.

Operation of the ANO-2 PPS in a 2-out-of-3 logic mode has no effect on the consequences of an event previously evaluated since, with one channel of each functional unit in bypass, the PPS maintains a functional redundancy of one. This ensures protective system actuation in accordance with the assumptions of the accident analysis. The accident analysis has accounted for those events that might have an effect on the PPS due to the geometry of the plant or the installed sensors, and demonstrated acceptable results in such a case, assuming a single failure. A review of the high energy line break analysis has confirmed that there are no O

events that would atTect a sensor or channel required to mitigate the consequences of a break in that location.

Based on results of these evaluations, extended operation with one PPS channel in bypass will not involve a significant increase in the probability or consequences of an accident previously evaluated.

Operation of the ANO-2 PPS with an inoperable channel ofInitiation Logic is allowed by the present ANO-2 Technical Specifications and is not affected by the proposed change. The one-hour Completion Time is consistent with that for the RPS Manual Trip. Operation with an inoperable channel of RPS hiatrix Logic is not addressed by the current Technical Specifications and Limiting Condition for Operation (LCO) 3.0.3 applies. Including a new Action for RPS hiatrix Logic, with a 48. hour restoration time is consistent with industry efforts to improve technical specifications and will not change the operation of the plant m such a manner as to significantly affect the probability or consequences of an accident previously analyzed. The probability of a random failure in a second hiatrix Logic channel during any given 48-hour period is low, and is offset by the decreased risk from avoiding a forced shutdown on short notice.

j Operation of the ESFAS with a failed channel ofInitiation, hiatrix, or Actuation Logic is not addressed by the current ANO-2 Technical Specifications and LCO 3.0.3 applies. Addition of requirements for the ESFAS Logic with a 48-hour restoration time is consistent with industry v

efforts to improve technical specifications and will not change the operation of the plant in

Attachment i to 2CAN079303 Page 10 of11

-l i

such a manner as to significantly affect the probability or consequences of an accident 1

O previously analyzed. The probability of a random failure in a second ESFAS channel during m

any given 48-hour period is low, and is offset by the decreased risk from avoiding a forced shutdown on short notice.

The proposed editorial changes will have no effect on plant operation and therefore will not involve a significant increase in the probability or consequences of an accident previously 7

evaluated.

Therefore, this change does n91 involve a significant increase in the probability or l

consequences of an accident previously evaluated.

Criterion 2-Does Not Create the Possibility of a New or Different Kind of Accident from any Previously Evaluated.

J The only way the proposed change could alter the course of an event would be by the PPS failing to actuate when required. The attached analysis demonstrates that the PPS maintains a functional redundancy of one when operating in a 2-out-of-3 logic mode, thus the PPS will not fail in this manner. Therefore the attached analysis demonstrates that there is no possibility of this change creating the possibility of a new or different kind of accident.

Based on results of these evaluations, extended operation with one PPS channelin bypass will O'

not create the possibility of a new or different kind of accident from any accident previously evaluated.

The RPS Matrix Logic is not addressed in the current ANO-2 Technical Specification, nor is (any of) the ESFAS Logic. The proposed change clarifies ACTIONS in accordance with the Technical Specifications for recent Combustion Engineering-designed plants (e.g., Palo Verde) and is consistent with industry efforts to improve technical specifications. No new method of operating the plant is created by this proposed change to add these new requirements to the RPS and ESFAS Logic; the only change being to allow operation with an inoperable channel of Logic for slightly longer than is currently permitted. Therefore, addition of the new specifications for the RPS and ESFAS Logic will not create the possibility of a new or different kind of accident from any previously evaluated.

The proposed editorial changes will have no effect on plant operation and therefore will nct create the possibility of a new or difTerent kind of accident from any accident previously evaluated.

Therefore, this change does net create the possibility of a new or different kind of accident from any previously evaluated.

O

Attachment I to 2CAN079303 Page 11 of 11 Criterion 3 - Does Not Involve a Significant Reduction in the Margin of Safety.

The ANO-2 PPS was originally designed as a 2-out-of-3 logic system with an additional channel as an installed spare. However, the plant was originally licensed as a 2-out-of-4 PPS logic plant.' The proposed change provides thejustification for allowing operation in a 2-out-of-3 logic mode. Review of the design and installation of the PPS has demonstrated that, while operating in a 2-out-of-3 logic mode, the functional redundancy of the PPS is one. For s

any design bases event, with the occurrence of any postulated single failure, the PPS will provide the protection assumed in the accident analysis. Therefore, there is no significant ieduction in a margin of safety due to the proposed change to allow operation in a 2-out-of-3 logic mode.

Operation of the ANO-2 PPS with a more detailed breakout of the portions of the PPS logic will not result in any closer approach to the acceptance criteria by the consequences of any anticipated operational occurrence or accident previously evaluated. Therefore, there is no decrease in the margin of safety due to the proposed change.

The proposed editorial changes will have no effect on plant operation and therefore will not involve a significant reduction in a margin of safety.

Therefore, this change does nglinvolve a significant reduction in the margin of safety.

Based upon the reasoning presented above and the previous discussion of the amendment request, Entergy Operations has determined that the requested change does Ett involve a significant hazards consideration.

O

4 O

P t-i t

PROPOSED TECHNICAL SPECIFICATION CHANGES Arkansas Nuclear One Unit 2 3/4 3-2 and 3/4 3-3 3/4 3-5 through 3/4-5c 3/43-7 3

i 3/4 3-11 through 3/4 3-15 B 3/4 3-la 6-7 O

i A

O O

O

ment circuit that affects multiple functional units inoperable or in test, bypass or trip all associated functional units as listed below.

Er.nc.e s s Me a s u remen t Clr_tttLt Funct1onal_Upit RvnAsse.d

1. Containment Pressure - NR Containment Pressure - High (RPS)
Containment Pressure - High (ESFAS)
Containment Pressure High High (ESFAS)
2. Steam Generator 1 Pressure Steam Generator 1 Pressure - Low Steam Generator 1 AP (EFAS 1)
Steam Generator 2 AP (EFAS 2)
3. Steam Generator 2 Pressure Steam Generator 2 Pressure
Low Steam Generator 1 AP (EFAS 1)
Steam Generator 2 AP (EFAS 2)
4. Steam Generator 1 Level Steam Generator 1 Level Low Steam Generator 1 Level High Steam Generator 1 AP (EFAS 1)
5. Steam Generator 2 Level Steam Generator 2 Level Low O
Steam Generator 2 Level - High Steam Generator 2 AP (EFAS 2)
ARKANSAS - UNIT 2 3/4 3-14 Amendment No. 444 l
IABIF 3.3 3 (Continued)
TABlF NOTATION s
ACTION 11 With the number of' channels.0PERABLE one less than tne Minimum Channels OPERABLE requirement, STARTUP and/or POWER OPERATION may continue provided tne following conoitions are satisfied:
a.
Verify that one of the inoperable channels has been bypassed and place the other inoperable channel in the tripped condition within 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months , and.
p b.
All functional units affected by the bypassed / tripped channel shall also be placed in the bypassed / tripped condition as listed below:
Process Measurement Circuit Functional Unit Bypassed / Tripped:
1. Containment Pressure - NR Containment Pressure - High (RPS)
Containment. Pressure - High'(ESFAS)
Containment Pressure - High-High' (ESFAS)
2. Steam Generator 1 Pressure Steam Generator 1 Pressure - Low l
Steam Generator 1 AP (EFAS 1)
Steam Gererator 2 AP (EFAS 2)
3. Steam Generator 2 Pressure Steam Generator 2 Pressure - Low O
Steam Generator 1 AP (EFAS'1)
Steam Generator 2 AP (EFAS 2)
4. Steam Generator 1 Level Steam Generator 1 Level - Low Steam Generator 1 Level - High Steam Generator 1 oP-(EFAS ~1)
5. Steam Generator 2 Level Steam Generator 2 Level - Low Steam Generator 2 Level '- High Steam Generator 2 AP (EFAS 2)
STARTbr and/or POWER OPERATION may continue until the performance of the next required CHANNEL FUNCTIONAL TEST.
Subsequent STARTUP.
and/or POWER OPERATION may continue if one channel is restored to OPERABLE status and the provisions of ACTION 10 are satisfied.-
1 ACTION 12 - With the number of OPERABLE channels one less than the Minimum Channels OPERABLE, restore the inoperable channel to OPERABLE status within 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months .
ACTION 13 - With the number of OPERABLE channels one less than the Total Number of Channels, restore the inoperable channel to OPERABLE' status within 48. hours or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SHUTDOWN within the following 30 O-hours: however, one channel may be bypassed for up to I hour for surveillance testing provided the~other channel is OPERABLE.
ARKANSAS - UNIT 2 3/4 3 15
' Amendment No.
v r
T W
' [i.
3/4.3 INSTRUMENTATION
'. V BASES Ic ic is designed.for operation as a Plant Protective System (PPS) s 2-out-of-3 logic, although normally it is operated in a 2-out-of-4
mode, t-The RPS Logic consists of everything downstream of the bistable alays and upstream of the Reactor Trip Circuit Breakers.
The RPS Logic is divided into two parts., Matrix Logic, and Initiation Logic.
Failures of individual bistables and their relays are considered measurement channel failures.
The ESFAS Logic consists of everything downstream of the bistable relays and upstream of the subgroup relays. The ESFAS Logic is divided into three parts, Matrix Logic, Inf tiation Logic, and Actuation Logic.
Failures of individual bistebles and their relays are considered measurement channel failures.
Matrix Logic refers to the matrix power supplies, trip channel bypass contacts and interconnecting matrix wiring between bistable relay cards, up to, but not including the matrix relays.
Matrix contacts on the bistable relay cards are excluded from the Matrix Logic definition since they are addressed as part of the measurement channel.
Initiation Logic consists of the trip path power source, matrix relays and their associated contacts, all interconnecting wiring, and the initiation relays (including contacts).
t ESFAS Actuation Logic consists of all circuitrj btused within the Auxiliary Relay Cabinets ( ARCS) used to house the ESF Function:
excluding the subgroup relays, and interconntctir
' ring to the initiation relay contacts mounted in the PPS ce e
For the purposes of this LCO, de energization of ;.. t.r
' matrix power supplies due to a single failure, such as loss of a vital instrument bus, is to be treated as a single matrix channel failure, providing the affected matrix relays de-energize as designed to produce a half-trip.
Although each of the six matrices within an-ESFAS Function (e.g., SIAS, MSIS. CSAS, etc.) uses separate power supplies, the matrices for the different ESFAS Functions share power supplies.
Thus, f ailure of a matrix power supply may force entry into the Condition specified for each of the associated ESFAS Functional Units.
j L
l j
1 ARKANSAS - UNIT 2 B 3/4 3-la Amendment No.
i
,-r
ADMINISTRATIVE CONTROLS f.
Review of all REPORTABLE EVENTS.
O) l g.'
Review of facility operations to detect potential nuclear safety g_,
hazards.
h.
Performance of special reviews, investigations or analyses, and reports thereon as requested by the Plant Manager, ANO-2, General Manager, Plant Operations or the Safety Review Committee.
8 1.
Review of the Plant Security Plan and submittal of recommended changes to the General Manager, Plant Operations and the Safety Review Committee.
j.
Review of the Emergency Plan and submittal of recommended changes to the General Manager, Plant Operations and Safety Review Committee.
k.
Review of changes to the Offsite Dose Calculation Manual and Process Control Program.
1.
Review of changes to the Fire Protection Program and submittal of recommended changes to the General Manager, Plant Operations and Safety Review Committee.
m.
Review of proposed procedures and changes to procedures which involve an unreviewed safety question as defined in 10CFR50.59.
n.
Review and documentation of judgment concerning extended operation i
O' (longer than 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months ) with a PPS trip. channel in bypass.
Review-shall determine whether to leave the trip channel in bypass, place the channel in trip, and/or repair the defective channel.
AUTHORITY 6.5.1.8 The Plant Safety Committee shall:
a.
Recommend in writing their approval or disapproval of items considered under 6.5.1.6(a) through (d) above.
b.
Render determinations in writing with regard to whether or not each item considered under 6.5.1.6(a) through (e) above constitutes an unreviewed safety question.
c.
Provide written notification within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months to the Vice President, Operations ANO and the Safety Review Committee of
)
disagreement between the PSC and the Plant Manager, ANO-2 or
'l the General Manager, Plant Operations: however, the General j
Manager, Plant Operations shall have responsibility for i
resolution of such disagreements pursuant to 6.1.1 above.
RECORDS 6.5.1.9 The Plant Safety Committee shall maintain written minutes of each PSC meeting that, at a minimum, document the results of all.PSC activities O*
performed under the responsibility and authority provisions of these l
technical specifications.
Copies shall be provided to the Plant Manager, ANO 2, General Manager, Plant Operations and Chairman of the Safety Review Committee.
ARKANSAS - UNIT 2 6-7 Amendment No. 6.44,36,64,60, 43,86,94,G8,144,444,4M 444 j
. ~,..-
l 0
i t-
-)
MARKUP OF CURRENT ANO-2 TECHNICAL SPECIFICATIONS '
.l Arkansas Nuclear One Unit 2 i
I 3/4 3-2 and 3/4 3-3 3/4 3-5 and 3/4-5a I
3/43-7
" ' ~ " * " * " ' ~ ' '
O B 3/4 3-1
[
6-7 t
k e
i F
i O
i
O O
O J'
TABl_F 3.3-1 RFACTOR PROTECTIVE INSTRUMENTATION MINIMUM TOTAL NO.
CHANNELS CHANNELS APPLICABLE FUNCTIONAL UNIT OF CHANNEtS TO TRIP _
OPERAELE MODES ACTION 1.
Manual Reactor Trip 2 sets of 2 1 set of 2 2 sets of 2 1, 2 W 45 2 seLs_of 2
_1_ set _of 2 2 se_ts_of 2 3* 4* 5*
8 2.
-Linear Power Level - High 4
2 3
1, 2 2J l
3.
Logarithmic Power Level-High a.
Startup and Opec +t4ns_*
4 2(a)(d) 3 2 ah3*m4*. 5* 2J b.
Shutdown 4
0 2
3,4,5 af 4.
Pressurizer Pressure - High 4
2 3
1, 2 2J l
r 5.
Pressurizer Pressure - Low 4
2(b) 3
1. 2 and A 3* 4* 5*
2J l
6.
Containment Pressure'- High 4
2 3
1, 2 2J l
7.
Steam Generator Pressure - Low 4/SG 2/SG 3/S3 1, 2 WJ *.4 *.5
2J l
8.
Steam Generator Level - Low 4/SG 2/SG 3/SG
1. 2 2d l
9.
Local Power Density - High 4
2(c)(d) 3
1. 2 2d l
ARKANSAS - UNIT 2 3/4 3-2' Amendment No. 64. M4
'l 4:
m-ev
,+~l<
m
+4 k--
w=t t-e e
ne e w
O O
O
>=
i TABIF 3.3-1 (Continued)
RFACTOR PROTECTIVE INSTRUMENTATION MINIMUM TOTAL NO.
CHANNELS CHANNELS APPLICABLE FUNCTIONAL UNIT OF CHANNELS TO TRIP OPERABLE MODFS ACTION
10. DNBR - Low 4
2(c)(d).
3
1. 2 2J l'
11. Steam Generator Level - High 4/SG 2/SG 3/SG 1.2 2J
- l
12. Reactor Protection System 4
3 4
1, 2 and
4 l
i Logic A. Matrix Lc,gic 6-1 3
1.2 1
6 1
3 3*.4*.5*
8 B_
IniLi.ation Logic 4
2 4
1.2 5
4 2
4 3*.4*
5*
8 13 Reactor Trip Breakers 4(f) 2 4
1. 2 and 1 54 4(f) 2 4
3*.4*.5*
8
14. Core Protection Calculators 4
2(c)(d) 3
1. 2 2 1 2and-6 l
15. CEA Calculators 2
1 2(e)
1. 2 6.25 and S l
i r
. ARKANSAS - UNIT 2 3/4 3-3 Amendment No. 34, 434 l
m s-7
$c
+er>
-w--
r-P 1<
T-e y
_. ~
IABLE 3.3-1 (Continuedl ACTION STATEMENIS Replace. wilttnew_ACIION_ Land _ACIl0fL3
~/4TJois.f~
WTFTEb756c?~R~0sE44BLE chaneels-on0 1 e ss-than-the-Total
umber of Channel:, ST^RTUP and/0- POWE R-ORESAT404-may proceed prov44ed-the follow 4*g sond444ent a r e c a t4+f4e4+
er
-The-4noperablewhannel 1: pl aced-$n-etther-the--bypused or-.tr4pped-cond&t i e n e i t h i n - I h o u r For the-purposes of tc: ting-and maintenanser-the-inoperab4e-shannel-may be bypassed for up to AS Scure frem time of-in&t444 1000 of OPERABILITY: however, the incper-at'l e channel c h a l ' t h e n b e e i t h e r nestore d t o O P E4A&t-E-stat-us-oe pl a c ed in-the-tr i pped cond i t i o n.
b-r 41 thin ene hcer, al' fanst4ena4-logie-un-i t c nese4ving an input #
c~' t he ! noperable-channe4-are al sc - placed-49 the came condition ( e i t her-bypane d o r t r i pped, a s applicable) at that-requ& red by a bove-f4+--the 4neperable ch ane&r c,.
The M! n! mum Chennels-GAERA&6E-requirement-4s-met +
however, one add &t4en44-shanne4-may-be-bypused for up t o 18 hou r; ah !!e-peeforming-test-s-and-m44ntenanse-on t h a t c h a nnel-pr-ov i d e d t h e o t her--Snoperable-shannel is plued ! n t h e t r i ppe d-sond4-t4ony ACTION A3 -
With the number of channels OPERABLE one less than required l
i by the Minimum Channels OPERABLE requirement, verify compliance with the SHUTDOWN MARGIN requirements of Specification 3.1.1.1 or 3.1.1.2, as applicable, within I hour and at least once per 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months thereaf ter.
ACTION h4 -
With the number of channels OPERABLE one less than required by the Minimum Channels OPERABLE requirement, place the_teactor t.r_ip breaker Lof_the_ inoperable channel in the tripped condition j
within 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months or be in HOT STANDBY within 6 hour6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months s: however, y
one channel may be bypassed for up to 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months for surveillance testing per Specification 4.3.1.1.1.
ACTION g6 -
a.
With one CEAC inoperable, operation may continue for up' l
to 7 days provided that at least once per 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months , each CEA is verified to be within 7 inches (indicated position) or all other CEAs in its group.
After 7 1
1 days, operation may continue provided that ACTION #5.b l.
is met.
s ARKANSAS - UNIT 2 3/4 3-5 Amendment No. 49 l
TABLE 3.3 1 (Continuedl ACTION STATEMENTS b.
With both CEACs inoperable, operation may continue provided that:
8' 1.
Within 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months the margin required by i
Specification 3.2.4.b (COLSS in service) or Specification 3.2.4.d (COLSS out of service) is satisfied.
2.
Within 4 hour4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months s:
a)
All full length and part length CEA groups.
are withdrawn to and' subsequently maintained at the " Full Out" position, except during surveillance testing pursuant to the-requirements of Specification 4.1.3.1.2 or for control when CEA group 6 may be inserted no further than 127.5 inches withdrawn.
b)
The "RSPT/CEAC Inoperable" addressable constant in the CPCs is set to both CEACs inoperable.
O c)
The Control Element Drive Mechanism Control System (CEDMCS) is placed in and subsequently maintained in the "0FF" mode except during CEA motion permitted by a) above, when the CEDMCS may be operated in either the " Manual Group" or " Manual Individual" mode.
3.
At least once per 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months , all full length and part length CEAs are verified fully withdrawn, except as permitted by 2. a) above, then verify at least once per 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months that the inserted CEAs are aligned within 7 inches (indicated position) of all other CEAs in their group.
ACTION Z6 -
With three or more auto restarts of one non-bypassed l
[
calculator during a 12-hour interval, demonstrate calculator
-OPERABILITY by performing a CHANNEL FUNCTIONAL TEST within the next 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .
inserf._new_ACTl0tLB O
ARKANSAS - UNIT 2 3/4 3-Sa Amendment No. e4,49,79-
]
~
IABLE 4.3 1 BEACTOR PROTECTION INSTRUMENTATION SURVEILLANCE REOUIREMENTS i
CHANNEL MODES IN WHICH I
CHANNEL CHANNEL FUNCTIONAL
. SURVEILLANCE i
FUNCTIONAL UNIT CHECK CAtIBRATION TESTS REOUIRED
'l 1.
Manual Reactor Trip N.A.
N.A.
S/U(1)
N.A.
I 1
2.
Linear Power Level - High 5
0(2,4),
M 1, 2 M(3,4),
i 0(4)
]
3.
Logarithmic Power Level - High 5
R(4)
M and S/U
.1, 2, 3, 4,.5 I
(1) and
1 4.
Pressurizer Pressure - High-S R
M
1. 2 5.
Pressurizer Pressure - Low S
R M
1, 2 and 2 3*.4*.5*
6.
Containment Pressure - High S
R M
l ', 2 7.
Steam Generator Pressure Low S
R M
1, 2 and A 2*A*.5*
8.
Steam Generator Level - Low S
R M
1, 2 9.
Local Power Density - High S
O(2,4),
M R(6) 1, 2 R(4,5) i 10.
DNBR - Low S
S(7),
M R(6),
-1, 2
0(2,4),
M(8),
R(4,5) i 11.
Steam Generator Level High S
R M
1, 2 12.
Reactor Protection System Logic N.A.
N.A.
M 1, 2 and 2 3*.4*.5*
13.
Reactor Trip Breakers N.A.
N.A.
M 1, 2 and 2 J
d* JL_*
14.
Core Protection Calculators S. W(9)
D(2,4)
M, R(6),
1, 2 R(4,5) 15.
CEA Calculators S
R M, R(6),
1, 2
.1
' ARKANSAS.. UNIT 2 3/4 3-7 Amendment No. 34, 3G, 47 l
s
.' ~
~~"
0 TABlF 3.3-3 ENGINEERED SAFETY FEATURE ACTUATION SYSTFM INSTRUMENTATION MINIMUM TOTAL NO.
CHANNELS CHANNELS APPLICABLE FUNCTIONAt' UNIT OF CHANNELS TO TRIP OPERABLE MODES ACTION 1.
SAFETY INJECTION (SIAS) a
_ Manual (Trip Buttons) 2 sets of 2 1 set of 2 2 sets of 2 1.2.3.4 28 l
b.
Containment Pressure -
High 4
2 3
1,2,3 10.119 l
c.
Pressurizer Pressure -
Low 4
2 3
1,'2, 3(a) 10.119 InserL_A 2.
CONTAINMENT SPRAY (CSAS) a.
Manual (Trip Buttons) 2 sets of 2.
I set of 2 2 sets of 2 1,2,3,4 28 l
b.
Containment Pressure --
High - High 4
2(b) 3
.1,
2. 3 10,11 Insert _B 3.
CONTAINMENT ISOLATION (CIAS) a.
Manual (Trip Buttons) 2 sets of 2 1 set of 2 2 sets of 2 1.2.3,4 28 l
b.
. Containment Pressure -
High 4
2 3-1.2,3 10.119 laserLB i
4 ARKANSAS - UNIT 2
-3/4 3-11 Amendment No. 434 l
t m mm
-m m
. r v
O O
O TABLE 3.3-3 (Continuedl FNGINEERED SAFETY FFATURE ACTUATION SYSTEM INSTRUMENTATION MINIMUM l
TOTAL NO.
CHANNELS CHANNELS APPLICABLE EURCTIONAt UNIT OF CHANNELS TO TRIP OPERABLE MQDES ACTION l
4.
MAIN STEAM AND FEEDWATER ISOLATION (MSIS) a.
Manual (Trip Buttons) 2 sets of 2 1 set of 2 2 sets of 2 1,2,3,4 28 l
b.
Steam Generator 4/ steam 2/ steam 3/ steam 1, 2, 3 10.119 l
Pressure - Low generator generator generator Insert _B 5.
CONTAINMENT COOLING (CCAS) a.
Manual (Trip Buttons) 2 sets of 2 1 set of 2 2 sets of 2 1,2,3.4 28 l
b.
Containment Pressure -
High 4
2 3
1,2,3 10.119 l
c.
Pressurizer Pressure -
Low 4
2 3
1, 2, 3(a)
IIL119 insert _A 6.
RECIRCULATION (RAS) a.
Manual (TRIP Buttons)(c) 2 sets of 2 1 set of 2 2 sets of 2 1.2,3,4 28 per train per train per train b.
Refueling Water Tank - Low 4
2 3
1,2,3 10.119 Insert _B ARKANSAS
-UNIT 2 3/4 3-12 Amendment No. 434 l
O O
O
(.
i TABtE 3.3-3 (Continued) 4 ENGINFFRFD SAFFTY FFATURF ACTUATION SYSTEM INSTRUMFNTATION i
l MINIMUM TOTAL NO.
CHANNELS CHANNELS APPLICABLE I
FUNCTIONAL UNIT OF CHANNELS TO TRIP QPERABLE MODES ACTION i
7.
LOSS OF POWER a.
<4.16 kv Emergency Bus Undervoltage (Loss of Voltage) 2/ Bus 1/ Bus 2/ Bus
1. 2. 3 28 l
b.
460 volt Emergency Bus Undervoltage (Degraded Voltage) 1/ Bus 1/ Bus 1/ Bus
1. 2. 3 18 l
8.
EMERGENCY FEEDWATER (EFAS) a.
Manual (Trip Buttons) 2-sets of 2 1 set of 2 2 sets of 2 1, 2. 3. 4 28 l
per S/G per S/G per S/G b.
SG Level and Pressure (A/B) - Low and AP (A/B) - High 4/SG 2/SG 3/SG
1. 2. 3. 4 10.119 l
c.
SG Level (A/B) - Low and No S/G Pressure -
Low Trip (A/B) 4/SG 2/SG 3/SG 1,2,3.4 10.119 insert C 4
f ARKANSAS - UNIT 2 3/4 3-13 Amendment No. 134 l
7 m
~
~
q.-
_.-4
TA81_F 3.3-3 (Continuedl TABtE NOTATION V
- (a)
Trip function may be bypassed in this MODE when pressurizer pressure is below 400 psia; bypass shall be automatically removed when pressurizer pressure is 2 500 psia.
(b)
An SIAS signal is first necessary to enable CSAS logic, P
(c)
Remote manual not provided for RAS.
These are local manuals at each j
ESF auxiliary relay cabinet.
ACTION STATFMENTS ACTION 98 -
With the number of OPERABLE channels one less than the l
Total Number of Channels.. restore the inoperable channel - to OPERABLE status within 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months .
_ Replace with new_AC110fL10_anLACILQtLil ACTION 9 -
With the number of OPERABLE channe'
^0 10 : than the T0t:1 Number Of Channels, operation may pecced provided the f 0110 eing condi t!0n: cre-saMsf4ed+
+1 The !noper+ble-sh+nnel it placed in either the bypec:Od Or tripped condit!On within I hour.
For the purp0:00 Of test 4ng-end mai^tenanc0, the i^0perable shannel may be byp+ ced for up to 48 hcug # rom time Of i-itial 100 of OPERABILITY; 50teever, the 4w4bie ch+nnel chal' then be either rettered to OMRABLE statu or placed '- the tripped cond!!!0n.
l by Witbi One Scu:, al' functional logic cr t r-ec e i v i n g i
an nput #rce the inoperable channel are also placed i
i n t h e :: me c o n d i t i o n ( ^ i t h en-by p e c d O r-t<4pped r-44 app 44c4b10)
that required by :. Obcvc f0r the inoperable channel er The "'-imum Ch:nnel: O P E4AB14--equ4 r em ^ n t 10 meta-h 0.e e v ew,-sn e a d d i t i o n a l c h a n n e l may-be-by pa s s e d f o r up to 18 hour2.083333e-4 days 0.005 hours 2.97619e-5 weeks 6.849e-6 months "h!!c performi g tect: :nd mainten+nse-on the-cA nnel provided the other i-Operable channel-4s the tripped condit10nv placed i n l
l i
)
l 1
li
)
1 il J
ARKANSAS - UNIT 2 3/4 3-14 Amendment No. M4 l
q l
l l
l i
~
s..
TABLE 3.3-3 (Continued 1 4
TABLE t10lATf011 79.T. f n. kt i. n.
U. 4 t. h.
+ k.a.
n. s.i r. n.. h n e ^ #.
A D E D,.A. D. t C l.' h. dn.. n n. i. e. ^ n n.
1. ^ e r.
+bs A t*
v
.TTu T. m *..m,
u. nm.. u m.., m<
r. u..s.n..n. e l..,.
m. r m r.s + 4, m.n,,, sy-proc + e.a r mm.4.a.e4 n
n.
4h. n.
i n. m n e. g h 1. m
,, L..s.n. g m 1
4. -
n1
<n
+ h.. n e..sgaa
-,a n.s e r m. a.
.m.n a 4444 h
..r
.s.n. A. + k. a.
hA. 4,.n. ggggn. n. a. l..e
n. D E.D,.A.g C.
y. e a m.. a n.. &.
4.., Agg i4.m car va n l. e. k. t.tn 1
h. a t i r.,
a n..
.s a a. l. +. 4, n. n..a l.
e. h...s n. n. a. l.m...s o --ha
&a.
j
^
s w y y s.... a.
v.
n, m ~. a.
4n + u.. +. 4. y-.. n a.
n -. a. 4. +. 4.
., <-.,.- +-..,
u~n y...
y
.y k, n. a.m e e
. a.c4 s c u. n i.1 1..s ge n.
e. n. e &. 4. n.,,s C. n a.4. # 4, e.s t. I. a..n. A.1.0 1
1..
4 p
nne r.
r Insett_new_ ACTI.0N 12 artd_.ACl10L13 1
I r
L
~
ARKANSAS - UNIT 2 3/4 3-15 AmendmenLNo.
l-
'I t'
3/4.3 INSTRUMENTATION BASES l
i 3/4.3.1 and 3/4.3.2 PROTECTIVE AND ENGINEERED SAFETY FEATURES (ESF)
INSTRUMENTATION The OPERABILITY of the protective and ESF instrumentation systems and bypasses ensure that 1) the associated ESF action and/or reactor trip will be initiated when the parameter monitored by each channel or combination thereof reaches its setpoint, 2) the specified coincidence logic is maintained. 3) sufficient redundancy is maintained to permit a channel to be out of service for testing or maintenance, and 4) sufficient system functional capability is available for protective and ESF purposes from diverse parameters.
The OPERABILITY of these systems is required to provide'the overall reliability, redundancy and diversity assumed available in the f acility design for the protection and mitigation of accident and transient conditions.
The integrated operation of each of these systems is consistent with the assumptions used in the accident analyses.
The surveillance requirements specified for these systems ensure that the overall system functional capability is maintained comparable to the original design standards.
The periodic surveillance tests performed at the minimum frequencies are sufficient to demonstrate this capability.
The measurement of response time at the specified frequencies provides assurance that the protective and ESF action function associated with each channel is completed within the time limit assumed in the accident analyses.
No credit was taken in the analyses for those channels with response times indicated as not applicable.
Response time may be demonstrated by any series of sequential, overlapping or total channel test measurements provided that such tests i
demonstrate the total channel response time as defined, Sensor response time verification may be demonstrated by either 1) in place, onsite or offsite test measurements or 2) utilizing replacement sensors with certified response times.
j RTO response time is defined as the time interval required for the l;
RTO output to achieve 63.2% of its total change when subjected to a step change in RTO temperature.
The RTO response time for the Core Protection Calculator System (CPCS) is expressed as an effective time constant.
For hot leg temperatures, the effective time constant for a given CPC channel is defined as the mean time constant for averaged pairs of hot leg RTO inputs to the channel.
This is done because the CPCS utilizes the mean l.
hot leg temperature in its calculations.
The maximum hot leg effective time constant allowable for use in the CPCS is 13.0 seconds.
For cold leg temperatures, the effective time constant to be used in Figure 3.3-1 is the maximum time constant of the two cold leg RTO inputs for a given channel.
The CPCS utilizes the more conservative cold leg temperature in the various ONBR and LPD calculations.
The maximum cold leg effective time constant allowable for use in the CPCS is 13.0 seconds.
InserL addition _to_ Bases ARKANSAS - UNIT 2 8 3/4 3 1 Amendment No. 33,79 l
ADMINISTRATIVE CONTROLS f.
Review of all REPORTABLE EVENTS.
O g.
Review of f acility operations to detect potential nuclear safety hazards.
h.
Performance of special reviews, investigations or analyses, and reports thereon as requested by the Plant Manager, ANO 2, General Manager Plant Operations or the Safety Review Committee.
.j r
1.
Review of the Plant Security Plan and submittal of recommended i
changes to the General Manager, Plant Operations and the Safety Review Committee.
J.
Review of the Emergency Plan and submittal of recommended changes to the General Manager, Plant Operations and Safety Review Committee, k.
Review of changes to the Offsite Dose Calculation Manual and Process Control Program.
1.
Review of changes to the Fire Protection Program and submittal of recommended changes to the General Manager, Plant Operations and Safety Review Committee.
m.
Review of proposed procedures and changes to procedures which involve an unreviewed safety question as defined in 10CFR50.59.
Insert new_fL.51L11 AUTHORITY l
6.5.1.8 The Plant Safety Committee shall:
a.
Recommend in writing their approval or disapproval of. items i
considered under 6.5.1.6(a) through (d) above.
b.
Render determinations in writing with regard to whether or not each item considered under 6.5.1.6(a) through (e) above constitutes an unreviewed safety question, c.
Provide written notification within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months to the Vice President, Operations ANO and the Safety Review Committee of j
disagreement between'the PSC and the Plant Manager, ANO-2 or the General Manager, Plant Operations: however, the General Manager, Plant Operations shall have responsibility for resolution of such disagreements pursuant to 6.1.1 above.
RECORDS 6.5.1.9 The Plant safety Committee shall maintain written minutes of each' PSC meeting that, at a minimum, document the results of all PSC activities performed under the responsibility and authority provisions of these technical specifications.
Copies shall be provided to the Plant Manager, ANO-2, General Manager, Plant Operations and Chairman of the Safety Review I
Committee.
ARKANSAS UNIT 2 67 Amendment No. 6,14.36,63,60, 74,85,94,98,444,119,433 444
(TABLE 3.3-1 ~ ACTION STATEHENTS)
ACTION 2 - With the number of channels OPERABLE one less than the Total Number O
of Channels, STARTUP and/or POWER OPERATION may continue provided the inoperable channel is placed in the bypassed or tripped condition within 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months .
If the inoperable channel is bypassed for greater than 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months , the desirability of maintaining this channel in the bypassed condition shall be reviewed at the next regularly scheduled PSC meeting in accordance with Specification 6.5.1.7.n.
The channel shall be returned to OPERABLE status prior to startup following the p
next COLD SHUT 00WN.
With a channel process measurement circuit that affects multiple functional units inoperable or in test, bypass or trip all associated functional units as listed below.
Ec.c.cass Mea sutement Ci rcui t Funct tonal Uni t By.p.alle.d 4
1.
Linear Power Linear Power Level - High (Subchannel or Linear)
Local Power Density - High DNBR - Low Log Power Level High*
2.
Pressurizer Pressure - NR Pressurizer Pressure High Local Power Density -High DNBR Low 3.
Containment Pressure - NR Containment Pressure High (RPS)
O Containment Pressure High (ESFAS)
Containment Pressure - High-High (ESFAS) 4.
Steam Generator 1 Pressure Steam Generator 1 Pressure Low Steam Generator 1 AP (EFAS 1)
Steam Generator 2 AP (EFAS 2) 5.
Steam Generator 2 Pressure Steam Generator 2 Pressure Low Steam Generator 1 AP (EFAS 1)
Steam Generator 2 AP (EFAS 2) 6.
Steam Generator 1 Level Steam Generator 1 Level Low Steam Generator 1 Level - High 1
Steam Generator 1 AP (EFAS 1) 7.
Steam Generator 2 Level Steam Generator 2 Level Low Steam Generator 2 Level - High Steam Generator 2 AP (EFAS 2)-
8.
Core Protection Calculator Local Power Dens'ity - High DNBR - Low
Only for failure common to'both linear power and log power.
._ m _...
(TABLE 3.3 1 ACTION STATEMENTS)
(
ACTION 3 - With.the number of channels OPERABLE one less than the Minimum Channels OPERABLE requirement, STARTUP and/or POWER OPERATION may continue provided the following conditions are-satisfied:
a.
Verify that one of the inoperable channels has been bypassed and place the other inoperable channel in tne tripped condition within 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months , and 4
b.
All functional units affected by the bypassed / tripped channel shall also be placed in the bypassed / tripped condition as listed below:
Process Measurement Circuit Eunctional Uni t-Bygtssed/ Tripped 1.
Linear Power Linear Power Level - High (Subchannel or Linear) local Power Density - High-DNBR - Low Log Power Level - High**
2.
Pressurizer Pressure - NR Pressurizer Pressure High-Local Power Density -High' DNBR - Low 3.
Containment Pressure - NR Containment Pressure High (RPS)
Containment Pressure - High (ESFAS)
Containment Pressure - High-High (ESFAS) 4.
Steam Generator 1 Pressure Steam Generator 1 Pressure - Low Steam Generator 1 AP (EFAS-1)
Steam Generator 2 AP (EFAS 2) 5.
Steam Generator 2 Pressure Steam Generator 2 Pressure - Low Steam Generator 1 AP-(EFAS 1)
Steam Generator.2 AP (EFAS 2) 6.
Steam Generator 1 Level Steam Generator 1 Level - Low Steam Generator 1 Level - High Steam Generator 1 AP (EFAS 1)
Only for failure or activities common to both linear power and log power.
4
ACTION 3 (Continued)
O 7.
Steam Generator 2 Level Steam Generator 2 Level - Low Steam Generator 2 Level - High Steam Generator 2 AP (EFAS 2) 8.
Core Protection Calculator Local Power Density - High DNBR Low t-STARTUP and/or POWER OPERATION may continue until the performance of the next required CHANNEL FUNCTIONAL TEST.
Subsequent STARTUP and/or POWER OPERATION may continue if one channel is restored to OPERABLE-status and the provisions of ACTION 2 are satisfied.
(TABLE 3.3-1. ACTION STATEMENTS)
ACTION 8 - With the number of OPERABLE channels one less than the Minimum Channels OPERABLE requirement restore the inoperable channel to OPERABLE status within 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months or open the affected reactor 1 trip breakers within the next hour.
The trip breakers associated with the inoperable channel may be closed for up to I hour for surveillance testing per Speci fication 4.3.1.1.
1 i
i r
i I
O O
O (TABLE 3.3-3)
INSERT A d.
ESFAS Logic 1.
Matrix Logic 6
1 3
1,2,3 12 2.
Initiation Logic 4
2 4
1,2,3,4 9-e.
Automatic Actuation Logic 2
1 2
1.2.3.4 13 INSERT B c.
ESFAS Logic l '.
Matrix Logic 6
1 3
1.2.3 12 2.
Initiation Logic 4
2 4
1,2,3,4 9
d.
Automatic Actuation Logic 2
1 2
1,2,3,4 13 i
INSERT C d.
ESFAS Logic 1.
Matrix Logic 6
1 3
1,2,3,4 12 2.
Initiation Logic 4
2 4
1.2.3.4 9
f e,
-Automatic Actuation Logic 2
' l 2
-1,2,3,4 13 t
I k
b i.
m..s.
___...____m_____________.,__._._._________i___.__._._.____.____.__.____mm____m m
m -
.. ~. ~
-~
(TABLE 3.3-3. ACTION STATEMENTS)
ACTION 10 - With the number of channels OPERABLE one less than the Total O
Number of Channels, STARTUP and/or POWER OPERATION may continue provided the inoperable chann'l is placed in the bypassed or tripped e
condition within 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months .
If the inoperable channel is bypassed for greater than 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months , the desirability of maintaining this channel in the bypassed condition shall be reviewed at the next regularly scheduled PSC meeting in accordance with Specification 6 5.1.7.n.
The channel shall be returned to OPERABLE status prior to startup following the next COLD SHUT 00WN.
With a channel process measurement circuit that affects multiple functional units inoperable or in test, bypass or trip all associated functional units as listed below.
Process Measurement Circuit Functional Unit Bygassed 1.
Containment Pressure NR Containment Pressure - High (RPS)
Containment Pressure - High (ESFAS)
Containment Pressure
.High-High (ESFAS) 2.
Steam Generator 1 Pressure Steam Generator 1 Pressure - Low Steam Generator 1 AP (EFAS 1)
Steam Generator 2 AP (EFAS 2)
O 3.
Steam Generator 2 Pressure Steam Generator 2 Pressure.
Low Steam Generator 1 AP (EFAS 1)
Steam Generator 2 AP (EFAS 2) 4.
Steam Generator 1 Level Steam Generator 1 Level - Low Steam Generator 1 Level - High Steam Generator 1 AP (EFAS 1) 1 5.
Steam Generator 2 Level Steam Generator 2 Level Low Steam Generator 2 Level - High Steam Generator 2 AP (EFAS 2)
J O
(TABLE 3.3-3, ACTION STATEMENTS)
()
ACTION 11 - With the number of channels OPERABLE one less than the Minimum Channels OPERABLE requirement, STARTUP and/or POWER OPERATION may continue provided the following conditions are satisfied:
a.
Verify that one of the inoperable channels has been bypassed and place the other inoperable channel in the tripped condition I
within 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months , and P
b.
All functional units affected by the bypassed / tripped channel shall also be placed in the bypassed / tripped condition as listed below:
Process Measurement Circuit Functional Unit Byoassed/ Tripped 1.
Containment Pressure - NR Containment Pressure High (RPS)
Containment Pressure -High (ESFAS)-
Containment Pressure High-High (ESFAS) 2.
Steam Generator 1 Pressure Steam Generator 1 Pressure - Low Steam Generator 1 AP (EFAS 1)
Steam Generator 2 AP (EFAS 2) 3.
Steam Generator 2 Pressure Steam Generator 2 Pressure Low Steam Generator 1 AP (EFAS 1)
Steam Generator 2 AP (EFAS 2) 4.
Steam Generator 1 Level Steam Generator 1 Level - Low Steam Generator 1 Level - High Steam Generator i AP (EFAS 1) 5.
Steam Generator 2 Level Steam Generator 2 Level - Low Steam Generator 2 Level - High Steam Generator 2 AP (EFAS 2) i STARTUP and/or POWER OPERATION may continue until the performance of the next required CHANNEL FUNCTIONAL TEST.
Subsequent STARTUP and/or POWER OPERATION may continue if one channel is restored to OPERABLE status and the provisions of ACTION 10 are satisfied.
O
(TABLE 3.3-3.-ACTION STATEMENTS)
O ACTION 12 With the number of OPERABLE channels one less than the Minimum Channels OPERABLE, restore the inoperable channel to OPERABLE status within 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SHUT 00WN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months .
O ACTION 13 - With the number of OPERABLE channels one less than the Total Number of Channels, restore the inoperable channel to OPERABLE status within.
48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SHUTDOWN within the following 30 hour3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months s:
however, one channel may be bypassed for up to 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months for surveillance testing provided the other channel is OPERABLE.
i 6.5.1.7. add the following:
n.
Review and documentation of judgment concerning extended operation (longer than 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months ) with a PPS trip channel in bypass.
Review shall determine whether to leave the trip channel in bypass, place the channel in trip, and/or repair the defective channel.
O Bases: add to 3/4.3.1 and 3/4.3.2 PROTECTIVE AND ENGINEERED SAFETY FEATURES (ESF)-
INSTRUMENTATION, page B 3/4 3-1:
Plant Protective System (PPS) logic is designed for operation as a 2-out-of-3 logic, although normally it is operated in a 2-out of-4 mode.
The RPS Logic consists of everything downstream of the bistable relays and upstream of the Reactor Trip Circuit Breakers.
The RPS Logic is divided into two parts, Matrix Logic, and Initiation Logic.
Failures of individual bistables and their relays are considered measurement channel failures.
The ESFAS Logic consists of everything downstream of the bistable relays and upstream of the subgroup relays.
The ESFAh Logic is divided into three parts, Matrix Logic, Initiation Logic, and Actuation Logic.
Failures of individual bistables and their relays are considered measurement channel failures.
Matrix Logic refers to the matrix power supplies, trip channel bypass contacts, and interconnecting matrix wiring between bistable relay cards, up to, but not including the matrix relays.
Matrix contacts on 'i*
bistable relay. cards are excluded f rom the Matrix Logic definition since they are addressed as part of the measurement channel.
f
.,--.m
1 Initiation Logic consists of the trip path power source, matrix relays and their associated contacts, all interconnecting wiring, and the initiation O
relays (including contacts).
ESFAS Actuation Logic consists of.all circuitry housed within the Auxiliary Relay Cabinets (ARCS) used to house the ESF Function: excluding the subgroup relays, and interconnecting wiring to the initiation relay contacts mounted in the PPS cabinet.
I For the purposes of this LCO, de-energization of up to three matrix power supplies due to a single failure, such as loss of a vital instrument bus, is to be treated as a single matrix channel failure, providing the affected matrix relays de energize as designed to produce a half-trip.
Although each of the six matrices within an ESFAS Function (e.g., SIAS, MSIS, CSAS, etc.) uses separate power supplies., the matrices for-the different ESFAS Functions share power supplies.
Thus,. failure of-a matrix power supply may force entry into the Condition specified for each of the associated ESFAS Functional Units.
i O
l O
f l-
^
ATTACHMENT 2 IQ 2CAN079303 Engineering Report No. 93 R-2003-01 f
4 l
s
O eENTERGY ARKANSAS NUCLEAR ONE O
ENGINEERING REPORT DATA SHEET Report No.:93-R-2003-01 Unit:
2 Category:'
O Report
Title:
Analysis Allowino Extended Operation With One PPS System (s):CEAC,CPC,ES,PPS.RPS.2D
)
, Channel in Bvoass Topic (s): LBAS,EESP.REAN.DBAA El' v.
Component No(s).:
2C23 Plt Area:
Bldg.
e Room Wall Coordinates:
Abstract (Include Purpose /Results):
PURPOSE:
To iustify an amendment to the Technical Snecifications which will allow an RPS or ESFAS channel to remain in bvoass for an-extended period of time.
RESULTS:
An RPS or ESFAS channel may remain in bvoass for an extended period of time.
l Rev No.:
0 Pages Revised and/or Added:added 1 thru 257.A1-1 thru A1-112.A2-1 thru A2-7.
A3-1 thru A3-5. B-1 thru B-32.C1-1 thru C1-5,C2-1 thru C2-5.C3-1.C3-2.C4-*1 l
thru C4-4.C5-1 thru C5-3.C6-1.C7-1 thru C7-3,D-1 thru D-4,E-1 thru E-11, F-1 thru F-54.G-1 thru G-41 Purpose of Revision:
Initial Issue of ABB/CE Document No. 6370-ICE-3316 Rev. 00 l
Initiating Documents Resulting Document (s)
Key-Design Input Docs.
EAR 91-606 92-R-2029-01 6370-ICE-3316' Supersedes Report (s):
,'l By: ABB/CE
/
/
Rvw'd: Vincent S.
Bond
/
// 2[f3 Chk'd. ABB/CE
/
/
App'd: Thomas W.
Ott
/TWO / 2-16*93 (Print Name) (Initials)(Date)
(Print Name) (Initials)(Date)
Check if Additional Revisions:
/
l
AeENTERGY ARKANSAS NUCLEAR ONE O
ENGINEERING REPORT DATA SHEET (Cont.)
Engineering Report No.:
93-R-2003-01 Unit:
2 Rev No.:
1 Pages Revised and/or Added:
See attached list.
Purpose of Revision:
ANO Revisions Initiating Documents Resulting Document (s)
Key Design Input Docs.
Supersedes Report (s):
By: Vincent S.
Bond
/
/3/9h.3 Rvw'd:
/
/
Chk ' d. 4t Lif STAotte,
/6
/ g'/14/17 App'd: Thomas W.
Ott
/ho
/4143 (Print Name) (Initials)(Date)
(Print Name) (Initials)(Date)
Rev No.:
2
.hA5( Omes 34.8b Z/2.22Ol33.243.2hl@
Pa?ltibvisedand/orAdded:
es b
anedit t; Ii
~
Purpose of Revision: ~7319dda thrrhdDf SI)bmtlftal 4b Yr NRC. A@entliX 6 hAS befA sum 1 tide $
hu, AWO letter 2CAN.619M, '\\.
I
~
~
l
~
Initiating Documents Resulting Document (s)
Key Design Input Docs.
2CANp79Ms Supersedes Report (s):
By: Y[HCEA bt
/ [lb
/ 6//7M5 Rvw'd:
/
/
Chk'd. ALuF 5dotC(2
/K
/U/zj/4y App'd:Tr.en.o h n H-
/ho / L 23 el)
(Print Name) (Initials)(Date)
(Print Name) (Initials)(Date)
Check if Additional-Revisions:
i A(J EXISTING PAGES REVISED FOR ENGINEERING REPORT 93-R-2003-01, REV.1:
4,5,6,7, 9,11,13,14,19,21,22,35,37,43,46,48,62,64,70,71,78,79,80, 82,109,139,150,155,168,173,177,182,184,186,188,190,191,193,194, 196,198,200,206,210,214,216,217,219,222,236,238,239,240,241,242, 243,244,246,248,249,250,251,252,254,257, A1-17, A1-18, A1-20, A1-97, A1-99, Appendix A-3 page i, A3-1, A3-2, A3-3, A3-4, A3-5, B-1, B-2, B-4, B-6, B-7, B-8, B-13, B-29, B-30, B-32, C1-5, Appendix C-5 page i, D-2, D-3, G-1, G-2, G-3, G-6, G-17, G-23, G-24, G-26, G-27, G-29, G-30, G-31, G-33, G-34, G-38, G-39.
PAGES ADDED FOR ENGINEERING REPORT 93-R-2003-01, REV.1:
B-32a, B-32b, B-32c, B-32d, B-32e.
NOTE:
Portions of this Report have been reprinted. Due to the use of a
Q different printer from that used originally, textual positions may U
have changed, but do not constitute actual revisions.
& ntergy ENTERGY OPERATIONS INCORPORATED-E operations ARKANSAS NUCLEAR ONE 20 or 20
~
0 i
i
)
i 1
ENGINEERING REPORT FOR ARKANSAS NUCLEAR ONE RUSSELLVILLE, ARKANSAS O
i 2
(e/l7/93 A NO M I3 ION 5
$b 8
%0 I
3lfl13 RNO PSVIStoNS V16 i
O 2/12/9 3 INITIAL ISSUE
/M/CE A66/C6_
Two NO.
DATE REVISIONS BY CH'E
-APPR.
ANALYSIS ALLOMNG EXTENDED OPERATION 93-R-2OO3-01 O
mu MTH ONE PPS CHANNEL IN BYPASS anoxr a s u v.
FORM NO.
HEV.
.i FORM TITLE:
5010. s 0
FNGTHrFR1NG REPORT COVER SHEET j
r
- m
. -

ML20056D310

Text

References:

Title:

Navigation menu

Search