ML20058L381
| ML20058L381 | |
| Person / Time | |
|---|---|
| Site: | 05200002 |
| Issue date: | 12/07/1993 |
| From: | Wambach T Office of Nuclear Reactor Regulation |
| To: | Brinkman C ABB COMBUSTION ENGINEERING NUCLEAR FUEL (FORMERLY |
| References | |
| NUDOCS 9312160300 | |
| Download: ML20058L381 (193) | |
Text
{{#Wiki_filter:E Aecember 7,1993 @ Docket No. 52-002 Mr. C. B. Brir.kman, Acting Director L Nuclear Systems Licensing i Combustion Engineering, Inc. 1000 Prospect Hill Road z Windsor, Connecticut 06095-0500 ; 5
Dear Mr. Brinkman:
SUBJECT:
C0"MENTS ON TECHNICAL SPECIFICATIONS (TS) FOR SYSTEM 80+ [ The Nuclear Regulatory Commission (NRC) staff has reviewed the Systea 80+ TS that were revised and submitted to the NRC in letters dated October 11 and 27, 1993. The staff's comments are shown on the markup copy of the affected TS {} provided as Enclosures I through 5. [ Since your submittals of October 11 and 27, 1993, were marked-up copies of the ; TS, our marked comments also appear with your comments. If this results in ; confusion as to the source of the markups, contact the appropriate reviewer. ! The reviewers are-i Enclosure 1, Sections 3.8 and 83.8 Om Chopra ; Enclosure 2, Section B3.10.6 Charles Thomas
- Enclosure 3, Sections 3.8.4.7 and 3.8.4.8 0m Chopra i Enclosurr: 4, Sections 3.6.6 and 3.10.5 and Bases for 3.6.1, 3.6.3, and 3.6.6 Michael Snodderly [
Enclosure 5, Sections 4.2 end 4.3 Larry Kopp Please provide responses to these comments no later than two weeks from your y receipt of this letter to allow us to maintain our review schedule. g This affgcts nine or fewer respondents, and therefore, is not subject to _ review by 1he Office of Management and Budget under P.L. 96-511. E Sincerely, _,_2 i= OfI9?nel915Fid5;;- Thomas V. Wambach, Project Manager h 149021 Standardization Project Directorate ; Associate Directorate for Advanced Reactors E 9312160300 931207 _ and License Renewal r PDR 4 ADOCK 0520 p 2 Office of Nuclear Reactor Regulation j
Enclosures:
As stated D I cc w/ enclosures: E See next page [
=-
DISTRIBUTION: E Docket File t PDST R/F DCrutchfield WTravers k RBot:hardt PDR PShea TWambach MXFranovich SMagruder JMoore, 15B18 WDean, 17G21 ACRS (11), w/o enclosures KShembarger RArchitzel g 4 0FC: LA:PDST PMTS6 R SC:PDST:ADAR $ NAME: PShea TWambach:tz RArchitzel \ ; DATE: 12/r//3 12/7/93 12/7/93 E 0FFICIAL RECORD COPY: CETSIE.TVW N E H E CEM &t83P17 : B
, _E
1 ABB-Combustion Engineering, Inc. Docket No. 52-002 cc: Mr. C. B. Brinkman, Acting Director Nuclear Systems Licensing ABB-Cotbustion Engineering, Inc. 1000 Prospect Hill Road Windsor, Connecticut 06095-0500 Mr. C. B. Brinkman, Kanager Washington Nuclear Operations ABB-Combustion Engineering, Inc. 12300 Twinbrook Parkway, Suite 330 Rockville, Maryland 20852 Mr. Stan Ritterbusch Nuclear Licensing ABB-Combustion Engineering 1090 Prospect Hill Road Post Office Box 500 Windsor, Connecticut 06095-0500 Mr. Sterling Franks I U.S. Department of Energy NE-42 Washington, D.C. 20585 Mr. Steve Goldberg Budget Examiner 725 17th Street, N.W. Washington, D.C. 20503 Mr. Raymond Ng 1776 Eye Street, N.W. Suite 300 Washington, D.C. 20006 Joseph R. Egan, Esquire Shaw, Pittman, Potts & Trowbridge 2300 N Street, N.W. Washington, D.C. 20037-1128 Mr. Regis A. Matzie, Vice President Nuclear Systems Development ABB-Combustion Engineering, Inc. 1000 Prospect Hill Rohd Post Office Box 500 Windsor, Connecticut 06095-0500 Mr. Victor G. Snell, Director Safety and Licensing AECL Technolegies 9210 Corporate Boulevard Suite 410 9 Rockville, Maryland 20B50
CESSAR EEFt icar n Enclosure 1 16.11 3.8 ELECTRICAL POWER SY5frEMS 16.11.1 3.8.1 AC SOURCES - OPERATING
~
AC Sources - Operatang t 3.8.1 3.8 ELECTRICAL POWER SYSTEMS 3.8.1 AC Sources - Operatine LCO 3.8.1 The following AC Electrical Power Sources shall be OPERABLE. (Ned ,,
- s. Two ,~.._'_ : circuits between the offsite transmission network and <
" E . : : onsite Class 1E AC/stribution4sicagand tAs. 8 b.
, Two diesel generators.(Ms) M cap a[gyg Ms.M*r/rh 9 oc 4 knnid *$ L ooitin. C/sse /d Ac 7.'s%'Lt.',4 S y srean .
APPLICABILITY: M DES 1. 2,3 AND 4. C. A- etw slic., bo et d Atyr&A C tA S @CY %
- A #
ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. One % required) A.! Perform SR 3.8.1q for A 1 hour offsite circuit ( - _ ' ' .huiredj.. . _.- inoperable, orga4gg ,q,%, M om. -
, ,,, y,,,,,
g thereafter Itd e A.2 r....... .i; required featurgg) e '- - _ _ :._ L 24 hours from,, $lfe g wk discovery of E ,-- gg 4eem with no offsite power '^ ,j OPEftW9t:E 4.pdle 3 sic '-~~c'-~ g,.* 6A idormaakle .* hs.d. e 42,3 ~t etys= W q of redundant, feature (s) m regdAnd ( A.3 ~ Restore [requirdoffsite 72 hours circuit to OPERABLE status. m (continued) tedened4 t re g W s4 d L4.;no,,,
%s A4, d:swe .. t (ca 5 .f festone(s) I,s U 6/**ahle .
I
-f SYSTEM 80+ 3.8-1
. g' ' ..
J. Amendment K I6.11-1 October 30,1992
.e 2. - CESSAR iininem. AC Sources '10perstag 7- -3.8.1 ACTIONS (continued) CONDITION REQUIRED ACTION COMPLETION TIME NOTE Required Action B.3.1 or B.3.2 shall be completed if this Condition is enterri B. One[ require (b B.1 Perform SR 3.8.1.1 for tic j [ require]d offsite circuit)
! bout h moperable. I opmg M Oooe per 8 hours 3 shoreafter 6ka **yk*A r - _ . . .:: .,_.. : .
4 hours from dmoovery p p.c Q b3 A e'dep 44 assocatetwitk1br of * ; " ' ^ _ G dJ6d
*.O x ,a,/, g ic 3L. .r .'4 s ^"E"'"'lfi .- - omeurrent
- with kofea4Wy o.epsnAsiEr - " -
' of ec /,W4af '
ttJs.ed d reg ;A*J N* hd M ,f:,y - ast k h () is .hpaehls. M ,. B.3.1 b( 89 Deternsne OPERABLE diesel hours e is not inoperable due to common cause failure. DE s.3 1 Perform SR 3.8.1.2 for (24) 4Htt OPERABLE W . % bours D dr M B.4 Restore g..seJ) h
,:.2:_ i 72 hours ~
.ssae, seer to OPERABLE g
status. b k b(cootmuod)4:u q 4 w% 4. A ~d-u.m . a 3 SYSTEM 80+ 3.8-2 Amendment K 16.11-2 October 3D,1992
e m. . ._ CESSAREinkr ~ ~'M
~
= -
AC Sa'urces"Oi$ rating 3.8.1
. . . . . u ova - - Jes -.*
/, m. 1.-
p'-b ' ACTIONS (continued) / \ /
.p Y CONDITION , k REQUIRED ACT10N COMPET10N TIME K. One(required)ffsite k.1 Restore requifffsite circuits 12 hours D. circuit inoperable. to OPERABG status."
AND 9A One[requidb k.2 Restore [T'Ef 'M 12 hours
;-- - inoperable. gamesesse to OPERABM se tus. -
13 Two[requtrodh El Restors one(required 2h E. =eersiors E- ; -- - to OPERABG mopeable. status. N C.A Two[ required)ffsite kl m ,,featur$) required 12 hours froen g,,g;4,,, c seM9 circuits inoperable. hery of ,- aAss 44 ad ,J.sf ref.as4 . 4L ,,, , .L,'L*g .4 ggg f* *tM is **det***INL ** __-__-,- ' 'e r JM n Am.4 CcM) k2 Re. tore one requirhoffsite 24 hours
.ir.uit to O rERAnu si.su F. Required Acticas F.1 Be in MODE 3. 6 hours and associated Completion Times of AND Conditionsg c,p
#.sheeegh E not' '
F.2 Be in MODE 5. 36 hours l G. Three or more G.1 Enter LCO 3.0.3 Immodanisly [requiro{ AC Power Sources i opereMe. t g sp% t_ c o we.y e,
^] '3 ._ _ _
a
>. .ote .
A, e i , fer cs .- , /
- & .a. oa :
gs: __: c . . ser
., . . .a SYSTEM 80+ 515' -
%- - - - ~ , .. . . . . . Amendmeed Q 16.11-3 June 30,1993
~
1 . . _ .
. .. v ... , . . . .
4
..q#+. . e GMA :t 6 fy Is.u-5 db 7G - - - - - - - - - - - .-
M Odk "g Lco aj., , ~ xkg ta,;, p-D f - A ab AE 3. a stat 4 - g, Ac 2 p u n -b n W. J' *
~.
it
- sgg;
CESSAR =CF~.TIFICAfleeg >= *~., ',= t AC Sourass F - :;
- d. 3.8.1 SURVEILLANCE REQUIREMENTS i SURVEILLANCE FREQUENCY SR 3.8.1.1 Verify correct breaker ali t indicated power 7 days svallability for each ui fisite circuits.
SR 3.8.1.2 NOTES
- 1. Performance of SR 3.8.1.Xsetasfies this surveillance. 7
- 2. All 2.
prelube r------
; = _
8""'"
~
"I H ' f j f.//..w/ h A.
(L
..... , n., e a ,'~. ~~[4/;,j, 1:4.4 3' J '~' ~ s S sism t
* *' M~ N 34,
--+r: --i s idling
- s-+2 =
=g ;m, sed ,,,.se ,. %i.u a f-A~ -
the time, voltage, and frestosecy toleranoss specified in SR 3.8.1.g must be aust. , ( s;6 D:r1. n each ^y-- - starts from standby
. As specified by condition and achieves % steady sense Table 3.8.1-1 voltage r! '., -y.
1 ":P . 2 (3744Ivolts and s(4576) volts, and A [requency 2 (58.5] Hz and s (61.2f Hz. (ro... n)
.I
- qt 7- "\
SYSTEM 80+ 3.8-4 / v Amendment I 16.11 4 . December 21,1990
~
CESSAR E!'Ahri. ,
- 4. tw az. se. M % resoAJ q W i ..aMa g 4,ti JOtr d AJ. a 5.ctesskel re d e w .c . h Ed. 4.Y.t.7 M ';
of SA L b. n.l . AC Sources - Operatsag
$3.8.1
'. :-I e-SURVEILLANCE REQUIREMENTS (continued) 1 SURVEILLANCE FREQUENCY SR 3.8.1.3 --)4 NOTES
- 1. -D:_: m....iw loadings may include gradual y loading as recommended by the manufacturer.
14&AA4,
- 2. Momentary transients outside the load W ' CC W do not invalidate this test. I YA
- 3. t'This surveillance shall be conducted on only m --
- $6 one 9 'pk . ... at a time.
Vudy D::: r._;. each diesel generator is synchronized,4JJ As specified by loaded, and operates for 2 60 minutes at a load k , Table 3.8.1-1 , 15957] kW and s [6255] kW, , . IK SR 3.8.1.4 ' 'a . f, p _ __ _ .
. , .. . .,: ... . . , _. . . . ;;. ; ; - ^; - ? ! '_, .
(.1re esecardi $ II O YS- _,_ SR 3.8.1.17 - NOTE T All diesel generator starts may be preceded by ( ": .: ,.; an engine prelube period.
- 2. T '.i : " .; ? ': 0..n . ;" ... Q .. ..-
6-. 7 i n . ,...J y', ";R .". co,e,,
..) n .!;.
k Y
-Oc.u .cr yY ' _ . each i_: .......- starts from standby condition and achieves i f-!b - __; ..: .. r '
jf( g r_7. ;in s[20hondsgy v - Jr. g[ohage 2 [3744) volts and s [4576] volts,
)C /requency hh8.hz and s 61.2)z.
L (contmuod) Ver $ j go d day bw f , Lg ,g Q} c.. u o 1 [noa pit.a a 4.1 .n. t.. .
.pf w SYSTEM 80+ 3.8-5 i Amendment K 16.11-5 October 30,1992
httneaf de foye lC ff-K c , St. 3.r.i.s CAuu de sad n- =. Au . lat. J '3t[ hp whc G.- e.A Av taw [4 A ep p moded O(. W
- se s . r. s. t,. Vert 4 %Su\ '.\ ke b e q ite 3 "$11' %s f ofer4tes t, [a.t..*uk -]y +ask.e fact 4 L G.= n e )e % y s) 6 '
~
h h bL[uJaj=u.,Al
+.4 .
. 'st
,+ r,
- C E S S A R E Oincu at J
l l C l 1 AC Sources - Operstag j 3.8.1 i J l SURVEILI ANCE REQUIREMENTS (continued) i SURVEILLANCE FREQUENCY
" ' ~
SR 3.8.1.% - NOT'i : 1 1. This surveillance shall not be performed in ! MODEj i or 2. )
- 2. Credit may be taken for unplanned events ,
which satisfy this - !"---- St. l 7.$ l Ye.h
'--1 '
C& MW ' [ automatic $nanual] transfer of W [18 months] l 5*#u f . ia ? .... . _, ;; from thebrmaWeircust to each'aQ,;ts dk.rddt.{ required offsite circuit," S' _x 1. ,, ...'; . 'O i
- - i m nes , ,
$ T
, SR 3.8.1.1 0;.YVN Y.. ........ each d:n_P;Gr". ;:- "-, ejects a load of [182months]
#/ **b's
*- PfW A [** 0 ..
s
- a. Following load rejection, the frequency is s
[63] Hz. (') Y. WithirQ),econds following load rejection, the i l C. frequency is 2 58.8 Hz and s 61.2 HC1p& !
- g. Within()honds following load rejection, the 6 voltage is 2 [3744] volts and s [4576] voltsj m.Jd
" 9 SR 3.8.15 NOTE'5' so 1. This surveillance shall not be performed in l MODEf 1.r2,0. 4 m C.
" ~
i Naarb v m 1, n o m t' tridand~voltage t - N e L Ec 5 [18 months] is maintained svolts M.J - does during and flowing a K load rejection of 2 [5957] kW and s [6255] kW. l (contmuod) (r.M q lpr. des:cJ g7 I q udf lAJJe.1 eacM s Ot .wWrfg % TL. SYSTEM 80+ 3.8-6 ( Amendment K 16.11-6 October 30,1992
4rr= ~f A /g st //-G i do7Es___ ___ l f i
- t. % su a e;l]Aace. skall a,f k p,{nad . -s
- sa Adob5 i er Z.
- 3. Ys *$*
mAf N hAlCed br f Ugj4dde 4G+ pf;sfy 6:s ued s SA. . 1 j 9 I
- i 1
4 a i i W e 1 4 1 l' l l
/*
l i j 5 4 Y 1 d
CESSAR E!'Wnemon i 1 i l AC Sourcas - Operating 3.8.1
,. 4] e
. SURVEILLANCE REQUIREMENTS (continued) I ) SURVEILLANCE FREQUENCY 9 SR 3.8.1./ U l. All #--dr--'- NOTES starts may be preceded by 1 a., s y- s prelube - ::f m: m:---- f:f 4 i- l
-....r.- W ter k 4 . l
- 2. This surveillance shall not be performed in a /* MODE) I, 2, 3, +end4. oc t. S l bdd eosMS hak C.e.J *( 7._...g%_ _h(cra dar ow/
4
- 3. . . , , . . . _
+.
_ frr r c:' :- :: d.. ; ^_: _m q 7 4., 3g ,
- - .u.7. c.; ; . ' 2.".2.'...----,._.,:
{;[g caac.tonL se P- rn._ on4.simuisted loss of offsite power [18 ameths) , signal:
- a. De-coergization of emergency buses,'
- b. Ioad shedding from emergency buses;and DG
- c. D ---? ;--- - automatically starts from standby condition and:
- 1. sifnergizes permanently connected {
loads in s[20'heconds,
- 2. /nergizes auto-:-:- =+1 shutdown loads through the load sequencer,
- 3. faintains steady state voltage k
[3744] volts and s [4576) volts,
- 4. jaintains stead state frequency k 3 L58.8)z and s 61.2)z, and
- 5. fupplies permanently-coenected and d
auto-connect loads for k [5] minutes. 4hddom ; $ (continued)
?
a
.-p SYSTEM $0+ 3.87 Amendment I 16.11-7 December 21,1990
CESSAR HEL". car . e . ! x i 1 1 ' l '
- AC Sources ,Operatag l i
4 J.8.1 j 4. - SURVEILLANCE REQUIREMENTS (continued) SURVEILLANCE FREQUENCY , f I SR 3.8.1.W -NOTE 4 ! 1 12. j, Agg n
- __.-- starts may be preceded by e-' **5;d'
~
lube %' fer:e5 ~, ~ f J 2. This survei!Iance shall not be performed in j MODE l 1,.0. 2. 4 . ' '. oc 7. . ) C, hr*4ti le #*I8*8M8 NdI j 3. ^ ;; cd
; . _f ,4......f4R4 .. g -- -
- v. _ m : g[,J ,gy, l
.: r~..a ~ .. r .
- _ _ L ,,,, ; <
1 q _. . ! ? t .. . . . .i t t _. r_
-_ tr __. - - - - . ---r--,-
i --- - 4 c 1. ' # { ? WM] i D h' odasimulatedXEngineered Safety l ~ ^' ' x : l Features (ESFX actuation signal - : '. f.':,.' ' -
,,^- 53MMHiRED-TESP i a'.'.: ; r S A SIS mesh
- )q chf'
- .Q.sr . . _ suto-starts from standby ( i l
1 condition and: i
, - -3>
2 1c / " -'r: - '" ;: ! = ; ..:^-
=-- '- a-M a 3:?g ..:, J, m
. .. ~ . . .
j _. r k b. 2. ".d.'..'. _ _ -, 2 !? ? ": -_T! z , n u. . . - < sn - - > - _ s - - i ....m.... ..a a...:.. .__. g g ,,,:n . c.
- 6 p 4 es 4 ,s.
i XJ. Permanently-connected loads remam energiand ! from the offsite power system; and
- X. e . Emergency loads are l
connected through load sequence $to the the% auto- l i 2 offsite power system. j l g, (*****"*d) I., 6 [2. } .ss< JJ s 4 h e c x 8 - 6 A s4 t 4 1
.kse'.w) te g as;.k.e m g . t [r w t] ( aJL !
1 N 1k) V) y g, w s D.) ss.a4 .44.e ad.Jaat 441
.L.cy) tests, nikMes gb ve,. q t W.h1 4 SYSTEM 80+
gj iht.2pE
- 3*I'I 4
- Amendment I l . 16.114 December 21,1990 2
CESSAR nutrico. AC Sources ' Operating 3.s.1 l A SURVEILLANCE REQUIREMENTS (continued) SURVEILLANCE FREQUENCY SR 3.8.1.; . IS a. Engine Overspeed; g,, J; ~' (continued) b. Generator Differential "
- c. Low low Lube Oil Pressure *, as4
- d. Generator Voltage-Controlled Overcurrent.
SR 3.8.1. 14 NOTE S
- 1. f Momentary transients outside the load senes u d p ., f=f.e c95 do not invalidate this test.
- 2. This surveillance shall not be performed in
,3, Moog i,2. ' ' ~he z.
v y , A .~ u %a. each f.'r_.
.... _: grates for k 24 [18 months)
,. . L _ . .- W 'M ~ NO4
" ~ ~ ^ ~ '
F.e r.[G L..rs ,
- j'.S'I ** ""' ' I'"II k*#' l*s M 4Ls nm.h's of N fest
- b. goaded = [59571,sj M2 kW.
kW and s [6255]
'"c.; t . --- ' :-- ?? i::: ;f :b ~
h SR 3.8.1. If - NOTES
- 1. This surveillance shall be performed within 5 minutes of shutting down the diesel generator l after the dig generator has operated 2 [2]
l boursjg5 p957] kW and s [6255] kW.f lK
- 2. f All d: 'DG-
--- - starts may be proceded by 4.4 ap*=/c prelube - x . r ~ '-f L, ^_
m %:: -f_. Piried. l y 4 Momentary transients outside ihr. load range I do not invalidate this test. (continued) be Mes E eq44eJ
, 3. Cn u m m gn.ks $$ feb5r Yo's -
f 4 k SYSTEM 80+ 3.5 12 Amendment K 16.11-12 October 30,1992
C "i.@ E S A R "CEaTIFICATION
''+"-* ~~~'
2 i *'".'" y .. AC Sources - Operatag 3.8.1 A+, . gy , SURVEILI.ANCE REQUIREMENTS (continued) ~ W >~
- l. SURVE!!. LANCE f ,, FREQUENCY
. V Ty W SR 3.8.1. If Dr er:- r.. each # - ' ;: --__ starts and actueves, [18 months]
(continued') i E:k i; "^* 7 - ' '. ii n s(20Mj h /oltage ;P. [3744] volts and S [4576] volts, and Wp /requency (58.8)z and shl.3Hr ) SR 3.8.1. If, NOTE i -
- 1. This surveillance shall not be performed in ' ' ~
l
.L .. . MODEA 1, 2, 3. +bc f _er+.*e'f. S N/N Ml q Cesh.'k.b.mu fL'O *b'fnA f iL.EA-r: ::.....a cach 4_: ;: ._:. !- "- ": [18 month ]
- a. Synchronizeswith offsite power source while loaded with emergency loads upon an - - ' =
simulated restoration of offsite power;
- b. Transfesloads to offsite sourcept and
- c. Retur4to ready to load operation, i SR 3.8.1. t7 NOTEC ~" !
- 1. This survei!!ance sha!! not be pedormed in 2u Ne '
ga e ud/Lwe)
,,p;te g qysm w.n' -
- ~ ... with .-. ge..:::^ : operating a test _
[18 months] mode and connected to its bus, an actual or simulated ESF7 actuation signal overrides the test mode by:
- a. Returning #-- Y;---- -- to ready to load operatio(and
- f. Automatically energizing the emergency loads with offsite power.]
j J (contmuod) 6 K: - SYSTEM 80+ 3.8 13 4 k . i Amendment I . 16.11-13 December 21,1990
. CESSAR WW.cara - I 1 AC Sources - Operating j 3.8.1 SURVEILLANCE REQUIREMENTS (continued) < SURVE!LLANCE FREQUENCY 15-
- (
3.8.1.14 tinued) Before the last load step, simulate loss of offsite power and demonstrate:
/
- a. De-energization of emergency buses,
- Imd shedding from emergency ,
! D4 I j c. 0:- ' ; __ ar from ready ond condition: 1 i l Energizes pe Lly-connected loads, 4
- 2. er auto-connected emergency t I through the lead sequencer, i /t.
2^'-
- 3. x endy state voltage
- 2 [3744] v ts and s [4576] volts, dw'de*h
- 4. h steady t frequency k
@8.8]Hz and shl. z,and 1
- 5. Supplies permanently-conn and auto connected loads for 2 [
minutes. t # % I 8.1.k /
~
S - NOTES
^r A : 2: :,-- % E j
; '".',,.,. __. 'y _ _.. , _
-, W ^
y,4^ a' % :y 4 j % ). This sun !! not be performed in MOD .-2,.,,' . '. . ,- 2..
, 8 lf., % h f_"' h '$ Y' N j
c'.';,Z_T_",~_'Z'.""~ U % _ Jet *rhTfJ,Jg.
- m.;,,.2 ;;;grr; z ; w N
(contmuod) i. SYSTEM 80+ 3.89 t-Amendment 1 16.11-9 December 21,1990
f I ! CESSARrd5%m :~ ; t f 1 . j L I i i j AC Sources -9penting
- 4 ;
l j SURVEILLANCE REQUIREMENTS (continued) h..).8.1 7' Mr l l SURVEILIJJifE y dd .,- , \FREQUENCV ; S .8.1.% N'k : x$ sismulated [ Engineered Safety (con ~ und) g Features (ESF)] actuation, signal % I/ edMa - T vus
/ '
j (pA sf% <*4- *f
- 1 i s. + /chieves voi a:J744] is and 1"7 ,.0. ,
! s[4576]y st # -- ' aAer auto- / ('"" **d 8' (j, y-
- b. ( es f y (58.8): and sshl.)
- H s aber autostart and dung ;" -
l 1 test. i 1
- c. rates for 5] minutest l
i ! Permanently-connec remain emergiand l from the offsite power s and i . ! e. Emer8ency loads are energiand [ - l ! connected through the load sequencer the 3 offsite power system. I g* N j SR 3.8.1.VI w NOTES j
- 3 5.t.d I'l 1.
All "-- ' ;-- - starts may be proceded by % 4aj '4s, j , prelubeg:- - f r- ---
- .memmisaaneepr;eJ.
6 l 2. This surveillance shall not beforised in j MODE (1,2. 3. Amo4. er y. ! 3' N'bM_hMh, Wbc/ m MT4
',1 : M 'V7 Ws .sf.
~
l iE n_-2 : .m i r: '"- - - .:: r. ' . J _ . r - , - ) (conteued) I I i .. _+_
- SYSTEM 80+ 3.8-10 7 . g.,
l Amendment I t J 16.11-10 December 21,1990 t i i
! CESSAR EElificuca l J AC Sources - Opershog
; 3.8.1 ;
.. $ l SURVEILLANCE REQUIREMENTS (continued) i
- SURVEILLANCf y efg/ y FREQUENCY SR 3.8.th 2 simulated loss of offsite power [18 anooths] .
4 (continued) signal in conjunction with g simulated [ESF) actuation , signal: w a:fes] er- l
- a. De-coergization of emergency buses,- f
- b. f Load shedding from emergency buses
- and.
(s- ! c. ni,e, g=- - automatically starts frosa l standby condition and: ' ) i j 1. Mergizes lyrmanently ra=W !
, loads in s,20hd-
- 2. /nergizes auto connected emergency loads load sequencer, bhyoup
- 3. chieves steady state voltage 2
/[3744] volts and s [4576] volts, a
4. [(chieves steady state frequency 2 58.8)z and (61.2)z. aj;
- 5. [upplies permanently connected and j 4 auto-connected emergency loads for l
) k [5] minutes. i SR 3.8.1./I - NOTES j
- 1. This surveillance shall not be performed in
. 2. MODEt I ^ ' ' ^ %ek ce-2:+ 2lE Mu 4e pb4.Wr/ ' rrNh^- ->'eens each M i x wwy
! ,&-r-^ws .se. tripfase.
automatic t5 1 g ,_ [18 months) - L bypassed on a flimulated loss of voltage signal on the emergency bus concurrent with an actual or simulated . XESFfactuation signal) except: (continued) r f SYSTEM 80+ 3.8 11 Amendment I 16.11-11 December 21,1990 4
~
- CESSAR ES%u.. .
L i k j AC Sources - Operatnag J .3.8.1 j ") SURVEILLANCE REQUIREMENTS (continued) t-SURVEILLANCE FREQUENCY SR 3.8.1. F NOTE
- 1. This surveillance shall not be performed in i 4
. MODE $ l. 2. 3 or 4. ,
- Cred}
3.T ~Mma ::E'y k dake.3 d l cacds M
- - ef . e saf 4.uc/
- 2. -
g,.,f. q;, gg , e- = L _ === :! ':' - - ^ 22; ' . / ,
~
! a. . ..;;... - .:: - . f f " r ~---- i_ j 1 "O ' ' interval between ock is 68 month]s , 1 within i [10% of design icterval] for each emergency @JJ slefM) , J ' load sequencer. l
; SR 3.8.1.~.
1.0 - N NOTE w . All !? : .m... ..m starts may be proceded by peelebs
/,je /,f, pgd, . , p. . . . , - - - 3 2 y , _ __* m_-
- i ,
y_ o ,,, ., u.t r _ __. ; 7 - _ . 7 .x_. . 3
. i-^i ---
- f
- : - . ..: .. a.: '. 4 __, 10 yes.s
\fer.'h,pdr e4A actitres, h 1[Eo) h/sf af37fwhen started simultaneously from l /r. foltage 2 [3744] volts and 5 [% volts, i udg s
K [requency 2[58.hz and s(61.hz. i e i i a
.k.
/'
4 q SYSTEM 80+ 3.8-14
~
j Amendment K j 16.11 14 October 30,1992
]
4
- CESSAR E!'4inCATIM ~
l 1 t l J AC Sources -
._ 3 8.1 1
s TABLE 3.8.1 1 I DIESEL GENERATOR TEST SCHEDULE i NUMBER F FAILURES IN LAST , ALID TESTSm FREQUENCY 5 once days i 2 At once
, -=
i NOTET-(1) C ' na for determinipg number of failures and valid tests shall be in accordance with egulatory Pos' C.2.e of Regulato uide 1.108, R 'on 1, where number of tests and f ' res is determined on .r diesel g basis. For ' test ule, only valid tests of this ducted after OL issuance th mputation of the *
- I be included for valid
/
/ **
i?' " k u ', w.y --n oc --m-- l unta seven "=- - vc mmm sw --- - -- h' : ' - ~ [1~ I. .d das -
~
mi v6 s'assus a un aus aunt du vanu -------- saam d i ' - : f :: - r E. !l 3 Sl Af Je w T m as pt u y
> 't 1 4 A*J +<a- ta 7%.e i r(a)
Criteria for determining number of failures and valid tests shall be i
\j accordance with Regulatory Position C.2.1 of Regulatory Guide 19 Revision per DG basis.3, where the number of tests and failures' .,
is determined on (b) 4 This test frequency shall be maintained until seven consecutive failur i free starts performed. W from 4M standby e-t r*+' conditions and load and run tests have been
"- 9 +a y " :'t'n, MA+= t"; !.0, ".n'..iM If,; ) , v i-subsequent to the[7 failure free 5
tests, I or more additional failures occur, such that there are again 4 or more failures in the last 25 tests, the testing interval shall again be reduced failure free tests have as been noted above and maintained until 7 consecutive perforined. '
)
Amendment I 16.11-15 December 21,1990
^
CESSAR Enlificarca - i b AC SourcesTOperstag 3.8.1
' ,'; y i
TABLE 3.8.1-2 ADDITIONAL RELTABILTTY ACTIONS ! NO. OF FAILURES NO. OF FAILURES IN , IN LAST 20 VALID LAST 100 VALID ACHON ' TESTS TESTS 3 7 Within 14 days prepare and maintain i a report for NRC audit describing tha _. i diesel generator reliability improvement program implemented at the si,ts. 1 11 Declare the diesel generator l 1e. Perform a requalificaten I i program for the affected diesel I V, gen tor. I
- 3 e m s.
e l i ,
'9p.;
3 SYSTEM 80+ 3.8-16 Amendment I 16.11-16 December 21,1990
=__
d v j i i CESSAREm%.no - i 4 16.11.2 3.8.2 AC SOURCES - SHUIDOWN l AC Comossi- Sbondown J
- 3.8.2
! 3.8 ELECTRICAL POWER SYSTEMS ~ i 3.8.2 AC Sources - Shutdown js .
\
l LCO 3.8.2 The following AC,*Electncal Power Sources aball hs OPERABLE: l oe$nt.Lj ! a. ircuit between the offsite transsainsion network and the onsite Class ' 5 C"-- -' f* IEgdstribution4stess'4 ! a esisatown Q :ra4 % O s.V,
- WsV.LQ 7 Sgsk~ -% %lal l b. ) * -A ons diesel, Ll .4 u li e/-
ws:/e %In) cws it9 e.k. 9:er .%t:g: yRg& s. . ii b'.eu ,44&L 1 :o 1.1,Io , ! C Awfowe/1/c WMlf!il e.At r.tvi cad to pg,,' - =
- APPLICABILITY
- MODES 5 and 6, during snov - ofirradiated fuel g g.d is -
l NOTE Refer to LCO 3.10.6 (Reduced RCS laventory Operat.ons - AC Power Availabdity) for applicability N # 0, J,d'8 l . j of AC power sources during reduced inventory operations. A*t**% N &&5 1,- ACTIONS
$Q CONDITION REQUIRED ACTION COMPLET10N TIME A.
A'/ Suspeed CORE W%y% Fh4 j !l 'M One er-seese required (i T - . T u --- x_,-.__ 1.1 ALTERATIONS. f==adama,1y cf.u=4, d y Iso A G.
- / .44 m .
t dd'"' y_ we*wv-A.2.1 Suspeed headling ofinadssted !==a w y ! -,, ,,, ue . f i, ...- 6,:. . i M 1 l A./ Mtim ac&ms 84'supond i m y-L.I. oPerstacas with a potential for 1~ j draining tbs reactor vessel, 4 cop 64ve). I M , ! '.E4'8.dr. M.J 4 l A.E guspeed operations involving fema &asely -! j 2M positive reactivity additions. j i, g . l AT Initie action to restore 1- "",
.2.5 reque T- a i:_ __ to ..
i OPERABLE steemsMin h i % t o W To 8 4 M 'O 448( Eg kaa l
, g gg smKat:.
- 0 HsM' /*
- ett,<Y l SYSTEM 30+ ' 3.8-17 1(s.
i WQ 16.11-17 June 30,1993
- Air.cM 4 /g<_, K.fi-M Ap/
l l
=- ,
.Ar,a
-_ _..e
.m...a w_
t.. av t h=. a-. . A:s;.2 J. *M'd - @ g . t ,. c l 1 ua a r.b*w.F * ..
- s <. sat c. l ata A , . 4.,- 'J' .y l
1 t 9 ec4tc. C.a A as + 1 % .ik d A $ .as 3
.(,c Ac ):w.,a s ,_y , L co 's.v.,e e
~ ..p ........ --. --
l A.i.z %%. offect<J <<yb1 bho) T d:d l3 i aM y %+<. W #w:Mk i\ 'a,pJ,Ie . + = ? . ,,!:= !!- gra a J; ' a
;.1 .! ' spw J ns, S7/.#- lv,:.:i:k .3ra r 6
l\ .=- U=- r ;.I-; / ,b d,.y'., . 51 ET 1 n.
.D. . ,-
l b i
- C3. i. i t u -S s ..,-+ '
N Ohh C3YM "I6 OfOk N4h {%d j
%9g % k auw .
Ess .t% W)) !
/
8
--~~._._.____, _
w l 1 l l l i l
Ag 6 8y K.It-17 $ z._ . t i t
..d
.-- r -
- A . C, ' r gi J & Li JosuJ CDRE.
"E 7 k.i A3
- {an.pA,a,, . rwxn.as < g. !
"'g~- +
- y ur maas..t ba< =;
A4b
~
g~e _. /
- 8.2. Lse.4 -.= xt J L t A.l z i k.a.d ;4t a 4 .A '
i wss. we.w. i ' i I 1 44D . 6.s Ti.t'Ja. %+.~ 4 r J:J.1 5 ;
- s pad onAVs .
I i i Adb ! uk:.a 1 s.9 1s:4: sis %= k L LA l 3 l sasnd spukaas, sduld'43 posALJe. j raut.'a +y 4L$an } M> 8# T ;hi ac2.".4 h J.44g i 4 t.Osee u . n.ei j M UI % M fdateel g i w b + DfstA$ ? i Ct. tos . - 9 12 W t & i
- 1 I
1 _ - , . -m--, 3 -g w m m-s- >-r- me-+v*"--> e e-' *-7--' *
~ ^ ' w an.w wNs0 CEOTIFicAT60~I v
1 AC Sowess - Shutdown
.. " ,a 3 a E a .s.2
* ~
~
1
* )
. e-
~
SURVEILLMCE REQUIRDIDfTS SURVEILLMCE FREQUENCY SR 3.811 For ac sources required to be OPERA 8LE, the In accordance following SRs are required to be met: with applicable SRs SR 3.8.1.1 SR 3.8.1.5 SR 3.8.1.11. 4R 3.5.1.2 SR 3.8.1.6 SR 3.8.1.15
*SR 3.8.1.3 SR 3.8.1.7 SR 3.8.1.16 SR 3.8.1.4 SR 3.8.1.9 SR 3.8.1.18 ~
SR 3.8.1.10 l l
*0nly required when more than the minimum AC sources of L5 D.S.A are l available but at least once every six months.
1 p .
.3.T. l ll , i . . (.t1 M
~ ~
- 34. 3.fr. f.K f DL . t .It] n.e -scenwn sc 2.r.t. sg
& 4c w & Ad < dl M, g ,
g : ,. ; ~
. L co 3.r.<,
.5 n . d gl Weyf S fIM A l '"-
u g.e. n - yf y I i 4 SYSTEM s0+ 3.s.Is s l Amendment K 16.11-18 October 38,1992
-%. ,g, ,
- ,m.. n ,
d'* E"C C A B CE"1GN W Ein G & F% K1 CERTartCATSON i i l 4 i j i 16.11.3 3.8.3 DIESEL FUEL'RND. LUBRICATING OIL, Mb vi4A.T m AsA l j t i ! Diesel Fuef-end Labe Oil, ed .N r.r .y , q 3.8.3 A; ' ! % ,4 r' l 3.8 ELECTRICAL POWER SYSTEMS i 3.8.3 Diesel Fue Lubricatine Oil, ul Stas:T."** O- . 6 re 6 1.4 .:1, . J sbil ~. a- W.a U
- h l l LCO 3.8.3 Thepdiesel fuel oi[ subsystem shall .d. .. be.f"' -Qh'"*if
- 2 h - ->j - -j w: !
,e
.t. t_.
__. 'or och required "-- ' ;--- - p c, j We i ! APPLICABILITY: When associated "-- ' . _-_ - is required to be OPERABLE. 1 r i ess/t a
,4 ACTIONS 2
a OTE. i CONDmON REQUIRED ACTION COMPLETION TIME dM A. T J :.. : > H ;^j A.1 * --*-- A ' '- ! E ty l _' 44eus.
)
w 2:_ _ ~i-3 - ;E: =__-f;^ 't- ya f ,r ' < '- n= w :~~~; ;;" b ;;. b=;b_ u._ - ') g ;g., g e .2.isud i
- to asL.a L.as. .
). B.
~_.y...m ., , .
B.1 Restore M*._*'), *das sl"7 ,m____ 3., j E p...'Je fv. - .:. J ; !"j e O" ",'."'.I H 4eoo i
' - --b _~. . .seneur.$ s*.tl.:s !! M t.
l C. r ' '- '
!S^^^l C.1 *- . _
^
r' ' ' L- ='- gr -9%oses I i'
.b M ;; ".:.=. _':
- i:: =0;_ '- e 55.^^^; . 2: _ . 7 .t p !
.c~....
- samhw R tv
-id.\ pl.;( '!%
fa%tdn 4 lLvd% Ma i sferea D. L 'm, m s vii kv-n,y D.1 Restore .2.~ fysl-- oil er N 4eurr-
% .-.wr gt, :-- - ,n , Q ,o g ;,(;,;j,, m 3a j,,, ,.
4 E' " ' - ' - - - ' E'1 "w.* s'-' tr -- u t.. A, - e ' l ;,h _'3} 'l, [ ::.'"- R.k3R H *WM.u-l
= M -4.a==.to t Jrs] rsig. ! T. T J ~ ; m.wme T.: ": ._' ' _._', -l_ * -Segleys j --..__,,y em........ . ....L i
- _ _ c. _ .4.u l
- n .q: "-%
(continued) SYSTEM 80+ 3.8-19 . . i. .- 1 Amendment Q 16.11-19 June 30,1993
- -- w- - - *T
.c . _ , ._ _
- k1\M h . 4lb
- II~ 11 l
- i 1 I l . . . . . . . . . . . Ao7E -
l l S fu& C=44%.4 u0) h 4.*1 Gr c'5kQGr
. . _ iD[ft_ _ __
. ~%Y-1 i l i
i 4
.I 4
l A. D .c *. %G. w K. . M e J g ol g 4 li > h_25,7-] g 4 .by M. l
/ !
i - l
! 'B . Ek v w. D4s Uk M e2 A -f- 4 [*] 34 l l ua > E*=1 p.
2 J ' ~ l, 4 C. On a wu bcn -b M l l f y h .f.f w JL to
& .//. dad Af.ef .
kewtimas. e'J ai" I ! I 4 4 ! l
- o. EL. - m m .:/ '
l w fi- of-l E1C % b j % h a.c / "f.a l' O U D f } ! 3y . i r, y 4 LW l E. w n. Ns Ud s& ,gese l jc'w+ 4 [22.s] f,,) a 3 [i,,g' y, ),g ,
. l l
C E= r e6 *eMn51oCERTIFICATION cE. - t i . l ! Diesel Fuel and Labe Oil 3.8.3 l 2}
- 1 l ACI'lONS (continued) ,
' l l CONDITION REQUIRED ACI' ION COMPLET10N'I1ME 4
- 4. Required Actiongand 0.1 Declare associated doesd 66 Ins-wimaany i F associated Completion 7 'e inoperable.
i Tind not met. 1 e*= l
- l Orie os wev$6s QW ' !
Diesel fuel oil,lde *l, - l 4
. A sobsysiem . ,<m e s %: 4m - -
l
- i
! /I..W for reasons other than Conditions A, B, C, j D.)',orK.E. 4 J l SURVEILLANCE REQUIREMENTS ( . SURVEII. LANCE FREQUENCY 4
.. .. .a.,
,,__.t.
___t 1._, 2..,_,
.- l
!- ___ .__m__ r,an.m. . ._ _ .. _ _ a ,__. i i SR 3.8.3.X 1 31 days ] Verify gallons ofeach fuel. fuel storage tank Est, contains
** k 19Ptet4] ,
SR3.8.3.Y2 Verify lubricating oil inventory is k [500] gallons. 31 days ] .,_ ., -_t __._, _ _
. .. ._ . , ,___ i g SR 3.8.3MS . - . . , -- - ,_ _.,,.....,, =- =i - -- ..-,r-S**.
_"__,____Xt._~ or - r.i-
~r
*:u -M . w :- m 1
j S".3.".3.5 0 _ 2- '.' ^ ^* '_9 , , b ^f - --' ' * ^ ^ ' ^ - ' " " EE^ II E :
. . _ __o ...,...,. -- . .-, , _ , , _ .
j ,um===,-----_-.- _ _ _ _ - . _ , 1 -4eamster-- r -. d 9R-944,+- a wim r = - -- in -.4 '. .*h j SR 3.3.3X .O ... K days _n .. . .. I _ --_ _m_ _ ___ _ s.uu. 7g_,__ h i N. l O Yere'$y cAc4 OG- Mon sTelf receiver f l /4rseer., [s 2 {rzs] rs.} . Qc- ' 3.8 20 Y'- SYSTEM 80+ i Amendment Q M.11-20 June 30,1993 3'f i
*--w+ *
, ;lf% . -a - ,y:: ~y,;
6&scL -5 h / 4 W.Ii-zo sas.u.ss y,3 p 29 -tL ra aenJuee
.atah 4 o'4 ar.}ut) 64aq ~ 'u-H & b:as.)
- u aL,4 a44 p.sar..+.,. .
uJC., L N L n. %y~. Wd f4 02 : day P<y-- . i l i l l l I
.g 4.
m l
- CES5ARn2&n e -
Diese! Poet ned I.mbe Oil 6 .. 3.8.3 o.. . SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUBNCY I l m_..,____, , .
. . ..... . . - - _ . . . - . . - - - - - - - - . . - , . . . . .n -1 n ,,, a. ., r. .a _ .:.. - _
- m -
[31] days SR 3.8.3/f,I .. storage tank. Check for and remove accumulated water from eac m____,... .u , . ..-
... .~..., -
__v_ .-. . -_ g, ,g ,,,5,,r. ,a_ ., _._ , ._____ ._..__e.-._..e,._ _ _ _ _ _.-_i a.- SR 3.8.3.')0 4 For[ fuel =hy* = *el@., Morap be :10 years
- a. Drain ensk fuel A . " . eil;
- b. Remove the sediment -
' = h "-- ^^-'
/
and l c. Clean the esosaga tank. l i , I l l i i l l l 1 l l l M.- p. y SYSTEM 80+ 3.5-21 h . , Amendment E l 16.11-21 Grober 30,1992 l l
- . __. . _ - . , - . _ _ - . _ . - - ~ _ _
CESSAR EnM?. car. a , 1 1 l 16.11.4 3.8.4 DC SOURCES - OPERATING A DC soure.: - opersone j- 3.E.4
- l
's 3.8 ELECTRICAL POWER SYSTEMS .
I 3.8.4 DC Sources - Oteratine i Y )C aEufelsh y YsafsT A
- LCO 3.8.4 L'/7 P '" > M P
- ur S L Division I and Division 24 hall be i OPERABLE.
J APPLICABILITY: MODES 1,2,3, and 4 h t ACTIONS { i CONDITION REQUIRED ACHON COMPLETION TIME l A. One DCM A1 C_ & r- ' ' ; 9 2 hours , n__=.-_.'_. dmasons%staarsurm l MW kl+yst &, ;;- 4.
.ec-e.r,
^
k, u.
,ws,n,
- _ao----. ~ *pwa44 .
duC/W < O l bNf%m. $ l B. Two C'N B.1 Restore one DCNNY 2 hours g, .M inoperable. g%.as OPERAB,LE status. j C. Required Action and w<e C.1 - .in-MODE Be - .a 3..) _
~
6 hours
- associated Completion 1
Time of Condition A M or B not met l 4 C.2 Be in MODE 5. 36 hours i, n
- SURVEILLANCE REQUIREMENTS
- SURVEILLANCE FREQUENCY i SR 3.8.4.1 Verify the battery terminal voltage 2 [129] volts on 7 days i float charge.
(contanueO j Y. SYSTEM 80+ 3.8-22 Amendment Q 16.11-22 June 30,1993 r m r v---
- h e -2 4
& <T .
e OAA. - / W 4/Ap g g l "
'6t*VA &N Vg"L
- s enn ze ~q s ;Ln a.
2- *2 (7 .
-~w n lk v- w
_ f, . O. .n fy >
- - u - - , % vs - - w .
] M Aoy-= bks ~w A . l l
-- _ l
- r
- Aab i
1
- 3. 2. bosa. k b N' W $=- 84 l w ggs t J9w tL 4-l s p-A be wat-f.-L. m ey w a
wd -J == & _? A !E 1ds ! apskl< 45 9 % . 0 l . o- n=- _. .- _- - s : W-aM ' ' ' 4wv m -v n - , =-
- u _ _ _
j - . . _ --;-- 1 t J c, f
?
4 J J
- -- - .-a.-. e- ,.<,e.
i ! CESSARUnbr -
^
I l I i i 1 DC Sources - Operatang i J 3.8.4 SURVEll. LANCE REQUIREMENTS l SURVEILI.ANCE FREQUENCY ! 4 l . SR 3.8.4.2 Verify no visible corrosion at terminals and connectors. 92 days l l ____ O l Vedfy the connection resistancehf '"- ' - ' 4 bdays
-gean - - y ,g,'?!^El} F I
J R 3.8.4.3 y Kenfy the cells, cell platei E 'baitory racks show no D(emonths)( 3 r virual indication of physical damage or aboonnal {ig,] ] deterioration. , , , _ , ,, h wa mi*t Trwr Geow**, i j SR 3.8.4.4 Feri celhtopeelt and ternunal connections are I cleary ight, !..~ d ....'i -.. ' and coated with y]snonthsy ist , anti-corrosion material. ! SR 3.8.4.5 Verify connection resistance MeeH4cmdhund I W moothsF
-....m_.m... ; llf"E 9 4-! [ss]
l i SR 3.8.4.6 NOTES j
- l. This surveillance shall not be performed in MODEp 1,2,3 or 4.
I 2. Credit may be taken for unplanned events which satisfy this mm-h 5$.. Y$
-P- e r y' each battery charger will supply k [400] [18 months]
amperes at 2 [125] volts for 2 [8] bours. i f0s6.0f**ekc}heNsaeVe,saagsas, (***'W ( > t Gt-s ow] Le ldsmsL toassdrs.Js, , 4 tDr.c4s'JL.l led:er e.and.;,as, <4 l l Q [st-5 s%Q Le tu ; ant coadedlee s~ . , i 1 i i 1
- l 4
i V I h. t SYSTEM 80+ 3.8-23 - k 1 a Amendment I 16.11-23 December 21,1990 l __ _ __. D
CESSAR EnMicar... ', 9 DC Sources - Operating y 3.8.4
'k SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY
~
SR 3.8.4.7 - NOTE
- 1. SR 3.8.4.8 may be performed in lieu of SR 3.8.4.7 once per 60 months.
- 2. His surveillance shall not be performed in f MODE ( 1, 2, 3 or 4.
- 3. Credit may be taken for unplanned events which satisfy this ;.c '"-- :.52..
"YereIy ^ battery capacity is adequate[18tomonths]
supply, sad maintain in OPERABLE status, the required emergency ' loads for the design duty cyclep when subjected to a battery service iest. SR 3.8.4.8 NOTE l
- 1. !
His surveillance shall not be performed in MOD % 1,2,3 or 4. '
- 2. Credit may be taken for unplanned events which satisfy this = "" -- S 2.. .
I YCtr'$ -Y f(*
'- battery capacity is :2: [ME] of the 60 months I manufacturer's rating when subjected to a performance discharge test.
1R-A4D_
. NOTE -
Only applicable when battery shows degradataan or has reached [855] of the expected life.
". 5 7 - ' ' CQ : _
iZ -nds g
,.g- :
1E SYSTEM 80+ 3.8 24 Amendment K I6.11-24 October 30,1992
i i CESSAR E!ahm. -
. +- .
J l . 16.11.5 3.8.5 DC SOURCES - SHtTIDOWN l 5 4 oC Sowess - mwdo 3.8.5 i 4.~ 3.8 ELECTRICAL POWER SYSTEMS ji j 3.8.5 DC Sources - Shutdown VC- Jk)<$ p.uw d &W
'"-d N P-e h-}- S N 2.x :: c'"; "' 'e ~ U k O f 4 4 6l.2 6 s ys**r f 4 LCO 3.8.5 197 -
=.e m = .=.-
.s(6My.s': ::.a ,_._ y
.a$ G L&O 3 M /*, "
&c.414. seJe !
m,1,. uria spte- .rurs..w.
- fs- (s)
APPLICABILITY: MODES 5 and 6. during snovessant ofirr=&atad fuel ===a=&liaa . l i j ,- NOTE Refer to LCO 3.10.6 (Reduced RCS Inventory Operation - AC Pome Availability) for apphenbality j cf AC power sources during reduced inventory operatsons. t < ACTIONS ! CONDITION ,, c)}EgUIRED ACI1ON COMPLETION TIME n., --
.n er
- A. ,_lE - - T! A.1 Suspeed CORE f==a&analy ha A*I ALTERATIONS. o 3
. . . . . - . - . _ {
Da e mers O
- i Y A pc. *twnd cv n ett-
! j A.LZ Suspend handhas ofirr.Ame d immaana.ly AMy fuelp Asse.a.4//cs
& ?, /
/ M l A r Alr- . A+ htiate action to(suspend T==a&anasy i A 1..) operations with a potential for drauung the reactor vessel.
? O 7 " & fe acf. W i;. j AA guspend operations involving immeAainly j 2 4 positive reactivity additions. j i A qsf ) M ' f A.F- Initiate action t I--a&mi+1y , Af required DC .'g? W j[ s@pT_ ' to OPERABLE j status. 9
% 4 .
i SYSTEM 80+ 3.8 25 d Amendment Q l 16.11-25 June 30,1193 i
- I I
- w4 9 ;p.u-y - . -. .
\
_ MM ^ i
. , . ,=..--
=.m
~ .
_ S,m A w, ssi
- - na ass, - -
i
/n, f ,' & -
~ _
p
? RD 9,M
% e -
- , x
; , {, ) ,
$fG 7
./__- #, -
Oll. j d 1 i t* 4 4 J 1 4 1 i ! l i ) 1 I d l e 2 1 l i 1 i J l 1 i r' 8 i 1 4 ;
CESSAR Enthr. ,_2 ' 1' O DC Sowces -$bukken
~
,-r; - . 3.8.5
;p SURVEILLANCE REQUIREMENTS ',
SURVEILLANCE FREQUENCY SR 3.8.5.1 b.'e.m 5R 3.&.4.i L :. 0" 3.0.'.O. ,' ~. ." 6 .To 4 ce(4acc oV( F* r- DC s. or~<e s <<geh.ad k Le 0 4A44f.E , &R 5 i 4 i %=sk .yple'ob le s g ,
-r -
,L C :.;.".?
A 4;> tt.a:.,,, sA c au
- s. _+- .0 c-pM :
a s. r. 4.1 u 3.r.e.y u z s.v.1 i set. 3. t. V.L gg 2.r. y. C y y,y,y,y, u s . t. 4. s u 3. V. v. L. :_. j i 4 i l
' * - - - . ./ p73 . ---
Y S $ 4A. Mh Y
'4L ff .
- sr.v. , a u.e , a
- SK3 . Y. f. -
e l l 1 d ) 4 4 l j 6 d i
.) . g
.k4
- SYSTEM 80+ 3.8 26 3 '
?
Amendment E 16.11-26 October 30,1992
i CESSAR Enn!'.cm: N ^ ^ ~ i i i i 16.11.6 3.8.6 BATTERY CELL PARAMETERS i Battery Ceu Parametere < q , s.s.s i .g'. . i 3.8 ELECTRICAL POWER SYSTEMS W j i 3.8.6 Battery Cell Parameters i fr TIL. ),*6a., / e / }&.'s,.e J $64s ! LCO 3.8.6 -M L..- -_.Mttery cell parametersiebell be within 4emeen. LG ofeA 3 Qsg YeGe3!.W. i APPLICABILITY: When eseociated DC Power-Soeroes ars required to be OPERABIE j 44sh'sistjens.w d j - - i \ QCTIONS p i CONDITION REQUIRED ACTION COMP 12110N TD(E l A. One or more eeHow . a. 1 Verify the pilot cells *IS] Ihour j .e -=s.e betteries electrolyi. i.v.I and naet i N ! voltage meet Table 3.8.61 - T. 1 3.;.0,4. Category C M values.
- ush .un. or menn.
h %19 9 eN 6 p- O
*sa# s wa A.2 Verify bettery cell parameters 24 hours , /,b,'/s , meet Table 3.8.6-1 Cesagory C alluumate values.
i 1 M i l A.3 Restore bettery cell parameters 31 days i to Category A and B limits of Table 3.8.61. 1 (coetmees) i i u 1 : l k . . . . . . . . - g er s . . . . . . . . . . , , - - . I 4 _ 1 l Sepuna. C,24p any is aum/ de ~st inMay . 1 4 1 J J X
- j l
l SYSTEM 30+ 3.5 27
* :s#
i 1 l Amendment I 16.11-27 Deeember 21,1990 1
. _. .. _ _i
C E S S A R ;!Siricar - - ~ ;- i l 3 j Battery CatlParameters
.8 -3.8.6
-ep,,i-ACTIONS (continued) I
! CONDITION REQUIRED ACTION COMPLETION TIME ! s .. 1 . B. Required Actions and B.1 Declare associated DG-Power Immediately associated Completion S"-- E_,,. 2 5. 64gery ' j Timegnot met. ' .pf 4 #c., of- W% b
- M ; -
l j %. u np *Nerks 6 .dk _ l , l fverage electrolyte ' temperature of the ' re/res<d/M cells ,
, t
- i t '.. . vi T....
.0.' : - 4 E6.] *F. , I E
e .r~ar indcas a.% eac -a,<c Any battery cell v,. parametegrw within Category C .::v-.1
% j values.
l SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY { SR 3.8.6.1 Verify battery cell parameters meet Table 3.8.61 7 days Category A limits.
- SR 3.8.6.2 Verify battery cell parameters meet Table 3.8.6-1 92 days Category B limits.
M h /ithin 24 hours aher a battery discharge of C s' {l10] volts. M S
-(, .. -y.(00818ag i
j %' t
' ' ~
SYSTEM 80+ 3.8-28 Amendment 1 4 16.11-28 December 21,1990
CESSAR E!'Wficuca , j Battery Cell Parameters 3.8.6 i SURVEILLANCE REQUIREMENTS (continued) s SURVEILLANCE FREQUENCY SR 3.8.6.2 (continued) Carte Mithin 24 hours after , a battery cvercharge ! ] >)' {150 volts] SR 3.8.6.3 Verify the average electrolyte temperature ofi p:- 92 days ce!!s is 3,[60]'F. WeseMis l J lK l 1 ) ! 1 I i 1 I I 1:: SYSTEM 80+ 3.8-20 I^ Amendment K 16.11-29 October 30,1992
l . CESSAR*2'Mun - i Bettery Cell Parneseus 4 . 3.8.6
. } ->
_? TABLE 3.8.61 BATTERY ELECTROLYTE REOUIREMENTS CATEGORY A: CATEGORY 3: CATEGORY C: Units for each Uniits for each ADowable vales for Parameter designated pilot cell h cou each commected est Electrolyte' > Minimumlevel > Minismumlevel Above top of pleens, Lesel indication mark, and . indication smark, and s and not overflowing s 1/4' above mani <- t/4" above ==n=== 1 level indication sna# level indication emel6N Float Voltage 2 [2.13] volts *f a [2.13] voks M > [2.07] vehs Specific k [1.2006 k [1.195# Not amore thes . Gravity" d [0.020] below h
****'C* M (
,,ns 4llE-- Atin A- cf ." - _
^
Average of all
- "- E ':.00'T h sens k [1.195]s NOTES
- s. It.raccegid/c, i: :_.:_z ' for e 4g electrolyte6el 4 e.,/
,.e,rg e esm k spd' dNawa:= ear 4*@ eged j pm==4d 4 ' e's **4e.- '? j.
- b. Corrected for electrol *" I ? 4 rear,
.ue s,% m wsa ls <7o'sure and g. L c,*ed e a 4g ~ n + uma.yasJ, AM
- c. Or, battery charging current is < [ ampereston float charge. N:6 it w erd
- MC i 4
e.oly k *) n o eelm*=. *?
) hs
' _.. ^ x h :: ._;_:..' ut ' ^^ , ' ,y, Q a.
Ae% M4_ a ":; , _ -d_ { nm, A-.- ' y .. ., SYSTEM 80+ 3.8-30 Asnerwinnent I 16.11-30 Decernbar 21,1990 _ -. _ _ _ _.......___.__......_.._m
i Inverters-Operating 3.8.7 j 3.8 ELECTRICAL POWER SYSTEMS t-
&( g()
3.8.7 Inverters-Operating d LCO 3.8.7 b:4.2 I The required !=i.
- and Tr.in :
b ss:.J 2. 'h _ inverters shall be j;, OPERABLE. l l ikt.h'.*.'*.# NOTE--------------------------.. ' [OneAtme) inverter)Q'may be disconnected from [its/therr) ) associated DC bus for s 24 hours to perform an equalizing charge on [itsitheir] associated 9 Meli]" battery, provided: . a. The associated AC vital bus (es) [isisse} energized from l [its/t#s**] [ Class 1E] constant voltage source ;
,.transfonner[s]; and t ; b. All other AC vital buses for both trains are energized j from their associated OPERABLE inverters.
l - _
- APPLICABILITY
- MODES 1, 2, 3, and 4.
- ACTIONS i
3 CONDITION REQUIRED ACTION COMPLETION TIME i A. One(required] A.1 Power AC vital bus 2 hours l
- inverterf i noperable. fromits[ Class 1E] l 4, constant voltage source transformer.
- -~
i AllE l i
- A.2 Restore inverter to 24 hours l OPERABLE status.
1
- B. Required Action and B.1 Be in MODE 3. 6 hours associated Completion Time not met. 6112 B.2 Se in MODE 5. 36 hours i
A-l CEOG STS 3.8-35 Rev. O, 09/28/92
- * , *l s
.i Inverters-0perating l 3.8.7 l SURVEILLANCE REQUIREMENTS SURVEILLANCE {aEQUENCY l 1 ~ SR 3.8.7.1 Verify correct inverter voltage, 7 dayT.e N f [ frequency ] and alignment to required AC j 1
~
j vital buses. p 1 i r 3 1 i i i I i .. l 4 i-CEOG STS 3.8-36 Rev. O, 09/28/92
j Inverters-Shutdown i 3.8.8 3 3.8 ELECTRICAL POWER SYSTEMS q 3.8.8 inverters-Shutdown i LCO 3.8.8 Inverter (s) shall be OPERA 8LE to support the onstth Class IE i AC vital bus electrical power distribution subsystem (s) required by LCO 3.8.10. "Distribu', ion Systems-Shutdown.' i 3 -1 . APPLICABILITY: MODES S and 6, j During movement of irradiated fuel assemblics. i !, ACTIONS 4
- CONDITION '" REQUIRED ACTION COMPLETION TIME j A. One or more [ required] A.1 Declare affected Immediately 1 inverters inoperable. recuired feature (s) i M *- int erableMettvat hi 4edk coe[heu a Wre4 w$
4 - j E (g N tcas, ter 6A 'wfH M v'N#4 MWl.5) l A.2.1 Suspend CORE !amediately i i I ALTERATIONS. 1 E A.2.2 Suspend movement of Inmediately irradiated fuel assemblies. i M ..- 1 A.2.3 Initiate action to Ismediately j suspend operations i with a potential for ! draining the reactor vessel. .- . E i, (continued)' i e t' + , 4
- CEOG STS 3.8-37 Rev. O, 09/28/92 4
1 - J
, l 5 % ,A*
Inv2rters-Shutdown ! 3.8.8 i ACTIONS i CONDITION REQUIRED ACTION COMPLETION TIME i A. (continued) A.2.4 Initiate action to rnh3: lausediately l suspend operations + involving positive $ j reactivity additions. " l - 6!!D A.2.5 Initiate action to launediately t i restore required inverters to OPERABLE { status.
- .- 1' 1
i i
- SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY
{ SR 3.8.8.1 Verify correct inverter voltage, 7 days [ frequency,) and alignments to required AC
- vital buses.
J 4 n-d 2 l 4 v l
; a CEOG STs 3.8-38
- Rev. 0, 09/28/92 Y
, . _ . ..--,,.,,w- - - - -
C E S S A R E Bine m .= r ,-
. i l
4 16.11 7 3.8 DISTRIBUTION SYSTEMS - OPERATING Distribution Syskes - Operasang ,
; 3.87 T J 7 .I 3.7 ELECTRICAL POWER SYSTEMS ,
3.8. Distribution Systems - Ooeratinn gyg 4(, M L , .leM<M l LCO 3.8. Division I and Division d[owerpistribution ' sball be OPERABLE. N NOTE ' - [Two may be disconnected from their associated DC or s 24 hours to perio equalizing charge on associated bat , providing:
- a. ,. Associated AC vi are from their [ Class 1E] caamw voltage source transfo
- b. ACv' for the other battery banks 'and from their ,
isted inveners connected to their DC buses.
)
APPLICABILITY: MODES 1,2,3, and 4. 1 I ACTIONS l CONDITION REQUIRED ACTION COMPLETION TIME A. A.1 Restore ;- k-
) Houn. I hases N AdeM *g g sw, 4515b
- NM -
h, Me es fr ~ d *t"cr y \
- ef fa.* lor 16 ommf Lj%
A2 r---- . ." , u r -- (epmars seduedsat1erfeatures
--' M% .- ": iC buserwrrePERattdir 9 .
MIR A k-de<.w\t- .A4-l C.ft<M..sobqtb., *---- . _;;:d AC S h { sa oreralJc . t te4PERABbEHaness. (continued)
.]
w SYSTEM 80+ 3.8 31 .v i ! Amendment I l 16.11-31 December 21,1990 1 1
QwC*iFC&AF%DK1otsiGN - CERTIFICATION Ta. l l Distribution Systems - Operating Q 3.87T
, , , a ..
ACTIONS (continued) '4 CONDITIQW , REQUIRED ACTION. COMPLETION TIME B. One AC vital bus B.1 AC vital bus b 2 hours i inoperable. + 1 (C' !E! :4 Asib esarree- 4 off.AA64.L h e,rg h /fsge efHt-W e4 fe. M keast Lco
.. G.; M., /.C . .:.J L L -:-' ' _ _
- > N
%. Required Actionsend A.1 Be in MODE 3. 6 hours D. associated Completion D.
Timet J Cm.J.a_ AEQ . -hee B not met. p K.2 Be in MODE 5. 36 hours 4 SURVEILLANCE REQUIREMENTS i SURVEILLANCE FREQUENCY ! i SR 3.8. 1 Verify ~ correct breaker aligaments and voltage to the 7 days ; ) frequired)AC;and DC ";c Dir.":"rr 'y-"r 4 l pn 3.5.fl4- -Vediy w. 2AC vital bus ' 7-- :, d " ' 'a & 3 9; ]
-He- afed<;c41 pa.re JMcAdio4 s4g(14 r.
i
> C. A <- ' dc C.i Rat.rYet.ct<;c4 2 L.rs elecirkat gewer po.4er 4; Ciri.b h .* g 4;5 M b.+i.4 4 q sekgdc = b -
i 18ofMIC. 444 Ofs gat.s. (ta%s . a vs & A -
.f .fa h re 4 w t 1co i
a
+.
SYSTEM 80+ 3.8 32 ' .k Amendment K
, 16.11-32 October 30,1992
~ ~
- CESSAR in@,c r "
- i. . . -
x-n i ! lD 10 ' 1 16.11 4 3.8.T DIFIRIBUTION SYSTEMS - SHUIVOWN 4 j Distribuuan Symeas ,shadown l
- ,i ' '; 3.s.ro l 3.8 ELECTRICAL POWER SYSTEMS "}- - JY
~
3.8. Distribution Systems - Shutdown gg g M ie LCO 3.8.y The % C..i,_y gS:_:_d E D'_2/owerpistribution _p p. ' All he uswu.
,- - OL i c"- r_ _: ,_. ,. s c,. w==
iw ypet egeye.awY ovfahd i N UdMAM . APPLICABILITY: MODES 5 and 6, dunag asovement of irr=A=w fuel ====M== l 7 NOTE Refer to LCO 3.10.6 (Reduced RCS Inventory Operations - AC Power Availability) for applumbility ; L of AC power sources dunng reduced inventory operatsoas. l ACTIONS }.\ h , ! CONDITION [,, . REQUIRED ACI10N COMPLETION TIME A. " 7 M p:.--; A.k' Suspend CORE Imma& mealy
" ^
i - , ALTERATIONS. l tk w wra-noer.af
- e 4C M/k A.2.L Suspend headline of irradiated f===&an=1y g,Q fueV Asm4idu .
4;hL% m
' A.I IInitiate actaos,'td[suspeed !===&=8aly
- 25 oper.tions wiib a poi net for
! draining the reactor vessel. i 7 hte. ac$lia'6 A.t opershoes involvsag f===&andy ! 2.*f positive reactivity additions. 4 1, S j A.)' Initiate acteos)to ressort launedamealy
- J# required p
- . - - l t Ac,3c,
- m .h -
^
*~ W AC in-so.dat<*saf, 1
. .g n ,__ 5 j SYSTEM 80+ W.8-3 ~~T' ' m % t' ' v
- D M44sLe Af k , ^-
l AJ. 4 .b. dt,.,c.4 %,% q 16.11-33 June 30,1993 i
,- . - - . . - - - . . , , , - , , , , ,m ,
' .- .se &m i ~ gitE',h' "w..
i
/ - ..% ._y 1 c4 M L P, u. .h4;.' un i
' KT if 7 '
i Yu L+s4Y kk Y h" asms
~
=c fr +
f 4 4 s) a ( A . -
'k .
.1 i 1 i k
~.
.?. ,?Q.
k S.b st Y d.a.o r_~ A_ A_s_r ?- f)
& hw __j :O 0 .
i COGN Yi So U a a. l j ur a I i L l l l I l l l e _. E
. f.; g.
- CESSARin?ir...r.. _
(. Distribution Sysseems - Simadown y 3.8.[fo
~ .f.
t
- SURVEILLANCE PEQUIREMENTS SURVEILLANCE ,
FREQUENCY 7 days SR 3.8./1 77 ".. i. - - . :.: ". ; ;d = L;.7.2j. to vu g ca a d <r s a j A ; a udky. + <<@ As be., a e au w ano y aux a.yra. . , l i I l l l
-y s SYSTEM 80+ 3.8-34 '2 (
Amendment K l 16.11-34 October 30,1992
, CESSAR En&", car.. 3 .
I
- l l
16.13.2 3.10.6 REDUCED RCS INVENTORY OPERATIONS - AC POWER AVAILABILITY Reduced RCS Inventory Operations - AC Power Availability i i u 2 3.10.6 l j
,, }Q~ \
3.10 REDUCED RCS INVENTORY OPERATIONS Y' is
- 3.10.6 Reduced RCS Inventory Operations - AC Power Availability Y
- , LCO 3.10.6 he following AC Electrical Power Sources shall be OPERABLE.
- a. One qualified circuit between the offsite transmission i 1 netw6rk capable of supplying both trains of the onsite IE i
m Class requiredIE ac electrical by_LCO power distribution 3.8.10. "Di-tribution Systeme N subsystea(s)
+^- - W p97 1 l
) b. Tw~olesel gene'rators (DGs)* capable of supplying two h'(yY trains of the onsite Class IE ac electrical power dis- - ;; -
l
- .3 required by LCO 3.8.10.
tribution subsystes(s) Ritrs associated with the two DGs ~ ~'l 2 ~ t c. Automatic load seque l 1
/ capable of sequencing onto the DGs as a minimum, the gm :
i
. arudsup us orts:sLstems for continued operation of the oss--.
necessarEnzmrz:tmmr 1 vves p uutzt wd a-
- AND MODE u.6p%DUCED RCS INVENTORY d
ACTIONS 4 CONDmON
$l _ . ' _ _ _f430UIRED AC3M COMPLETION TIME A. One required qualified A.1 Initiate action to offsite circuit inop- Immediately restore required off-
' erable or incapable of site power circuit to 1 supplying both trains of the onsite Class IE ac electrical power .pe%OPERABLE A c44Wstatus g@ss p distribution subsys-Alm m tes(s). A.2 Declare affected re- 8 hours quired features with no offsi.to powe.r ava. h J Re combustion turbine can replace one Diesel Generator provided the combustion turbine has been demonstratM to be operational within the past seven (7) days. i 1 9 Continued) SYSTEM 80+ 3.10-12 'b./ Amendment Q it.2. a June 30,1993
e
- g- . _ _ _._
11able inoperaTe and - - _ - . ^~- i
' ~
. , '. enter applicable Con-i -ditions and Required i Actions of the LCOs ;
j' .- ,r for the inoperable $ j required features. g
- l i
- y :
---. -...n w ;
1 g l A.2.1 Suspend CORE 8 hours j
+
ALTERATIONS.
~i+ . l I ! ! M 1 4
A.2.2 Suspend movement of 8 hours i i irradiated fuel .. assemblies,$w , j ! ,____2_
- l
#h. .
~
l M l i A.2.3 Initiate action to 8 hours - suspend :;_. ."'_,:- m n-; r- .---- -- :- j .......... .. ......r , 'mp ~ voegshgDPDRVs). joWe c<chis .h du m ! e % w sing.e, .. g ~ tkm ! ( m e k% e d.4 br4y }#M t e action to spagg&oly -
- of s i 0 ,
1 i su o ' l f al equi M ESF ses. l , l ' (continued) ' i I I l t ! [ P&R,08/31/93-d j
$BWRTS 4 ,
M/u i . . M w e -.. ,, , , , d i l
AQ 4 0ures d h ,* ; REQUIRED ACTION ap goN
~
Immediately sere required 8.1 Declare the DG of an ' ar inoperable load se- * { l or its associated quencer inoperable. ' l ad sequencer inoper-bla. . E l Immediately B.2 Initiate action to l
' restore required DG to OPERABLE status. ! M 8 hours B.? Declare affected re-quired feature (s) supported by the in-operable DG inoper-able and enter Appli-I J cable Conditions and Required Actions of the LCOs for the in-operable required ,
feature (s). l OR i ty, t = ue.aq 5+& nWex rs h A9 se p wove 4of . g I gyva.W p ,pM'9,'
.I . 1 -
I g IwiHc4 4c.A A ls l [ MW oP.brtv3 &ke% l
^
) % Imthk uhi~r15
- y
{ %H M~ AvArs$ w w g u.uW~. 1 Rh~ ve m
, @t/
@ 4 p,\
9* q 1 I
\ - - ____
i j i Ac S:urces-Shutdown 3.8.Y I CONDITION REQUIRED ACTION COMPLETION TIME
- r , .
} c. Two or more required c.) Declare the DG of an Immediately l ac sources or DG load inoperable load i j sequencers inoperable. sequencer inoperable. M i C.2 Declare affected Ismediately i required feature (s) ! normally supported by j the inoperable ac ! sources inoperable and enter applicable i Conditions and { Required Actions of ! the LCOs for the i inoperable required j feature (s). 1 i E l/r. i
! s
/
C.3 Initiate action to restore required ac sources to OPERA 8LE Ismediately status. SURVEILLANCE REQUIREMENTS 3 i SURVEILLANCE FREQUENCY 2 SR 3.8.J<1 For ac sources required to be OPERA 8LE, the In accordance following SRs are required to be met: with applicable j SRs SR 3.8.1.1 SR 3.8.1.5 SR 3.8.1.11.
- SR 3.6.1.2 SR 3.8.1.6 SR 3.8.1.15 j
*SR 3.8.1.3 SR 3.8.1.7 SR 3.8.1.16 i SR 3.8.1.4 SR 3.8.1.8 SR 3.8.1.18 j
SR 3.8.1.9 SR 3.8.1.10 2 j %)yrequiredwhenmorethantheminimumACsourcesofLCO1.8gare available but at least once every si:: months. i a ,
?
{ 7,~ ft t l 1 j I f
,....__._-..,I
CESSAR Enli"icATION * '" " ~ ! m { \ JU 1 Reduced RCS Inventory Operations - AC Power Availability
?, 3.10.6 4.;,.
\ .r ACTIONS-(Continued)
CONDIh10N REQUIRED ACTION COMPLETION 11ME C. Requireb iesel C.1 Perform S.R. 3.8.1.1 [1 hour] then every 12 generato operable, bours I AND t9 L j'erator j
\
~# C.2 Restore required diesepl [12 hours]
4 to OPERABLE starv. a'
<" D.
, Required Actionh, B D.1 Raise RCS lev /> [EL-117'0*] [6 hours]
or C not met within required Completih j Time. \ ' SURVEILLANCE REQUIRE NTS SURVEILLANCE 4
\ FREQUENCY i SR 3.10.6.1 Verify diesel generat- perability per 3.8.1.2, 3.8.1.4, As specified by j 3.8.1.5,3.8.1.9 and .1.18. applicable SR's I
/
1
/ R
/ i i l l *
,/
/
/
i ,
/
. /
/ \
\
\
i j i s
+48 SYSTEM 80+ 3.10 13 Amendment K 16.13-13 October 30,1992
CESSAR MSincare. l - l 16.13.2 3.10.7 REDUCED RCS INVENTORY OPERATIONS - DC DISTRIBUTION Reduced RCS Inventory Operations - DC Distniunaa 5 3.10 REDUCED RCS INVENTORY OPERATIONS
.h'vu.
T 3.10.7 l 3.10.7 Rebeed RCS Inventory Operations - DC Dien%ution System LCO 3.10.7 1h following DC Electrical Power Sources shall be PERABLE
- a. One Division of the DC Distribution Syste coinciding with the OPERABLE Di Generatorj ;Emut", d k, Power is avai ble to the divisi i
IA )
\
A s) ' 125&& 120 VAC Distribution Centers. l APPLICABILIT(: MODE 5 RED ED RCS VENTORY wik i AND MODE 6 REDUCE INVENTORY a < ACIlONS CONDITION [ REQUIREDkCTION COMPLETION TIME A. Required DC/ower [4imrs] pivision inope.A.1 Restore to OPEhLE Status' abl,-[. N B. Opposite divisio[ B.1 Restore to OPERABib [12 hours] distribution fepten inoperable. / l \ (Continued) a SYSTEM 80+ 3.10 14 ? Amendmet K 16.13-14 October 30,1992
*4 .,%
~ " ~
CESSAR EH!%,ri. - 2- _ Reduced RCS Inventory Operations - DC Distribubon
- 3.10.7 a: ?... :. e ACTIQNS (Continued) M N /
CONDITION REQUIRED ACTIO?f AOMPLET10N TD4E C. Regtah Action A or C.1 Raise RCS level to [6 hours]
. B uot mht within > [EL .117'0*]
required Coyletion Time. N SURVEILIANCE REQUI NTS SURVEII. LANCE \ [ FREQUENCY SR 3.10.7.1 Perform S.R. 3.8.4.1 hh 3.8IB on the OPERABLE Per 3.8.4,1 through division of the DC Distribut$a. System 3.8.4.8/requsacy ( / 's, N K l i 1 V
~
.y . x SYSTEM 80+ 3.10-15 Amendment K 16.13 15 Odober 30,1992
CESSAR Eni% rc,t I 16A.13.6 B 3.10 6 REDUCED RCS INVENTORY OPERATIONS - AC POWER AVAILABILITY Reduced RCS Inventory Operations - AC Power Availability
**f B 3.10.6 1
B 3.10 REDUCED RCS INVENTORY OPERATIONS B 3.10.6 Reduced RCS Invectory Oper3tions - AC Power Availability ] BASES
- BACKGROUND AC/ower must be available to a cestam degree of reliability since deca .
removal capability must be maintamed. AC power includes both to the Class IE distribution system and the diesel generators. l APPLICABLE During reduced gCS inventory operations, decay heat fmm the reactor must ! l SAFETY be removed. hiTw power is required for operating the %uidownkling ANALYSIS /ystem. The LCO requirements will maintain an adequate margin for the operability of the AC power sources (Ref.1). gua4j4M fol+S1tb \ LCO ne LCO Sdest requires that two 3%' sources of AC power to each I division supplying the Class IE distribution system shall be operable. A ] diesel generator in each division must also be operable. However, one diese! I generator may be replaced by the combustion turbine ifits operation has been i verified in the past seven (7) days. I l APPIJCABILITY This LCO is applicable in MODE 5 and MODE 6 wi'h reduced RCS inventory. He required AC power sources provide assuran:.= that decay heat removal systems are available to maintain heat removal capability. ACTIONS A.1 and A.2 , [ With one source of AC power to either division inoperable SR 3.8.1.1 (Ref.
- 2) must be performed within one hour and subsequently every 12 hours mAer.
The inoperable damsaan must be restored to operable status within 30 hours. c l+ M t t M p o < M & Ce-
/CWC With one source ofrAC power to each division inoperable either division must be restored to two operable sources within 12 hours.
4 i w>
,4 (continued)
SYSTEM 80+ B 3.10-20 Amendment Q 16A.13-20 June 30,1993,
CESSAR EKWncar... . 1 1 1 4 Reduced RCS Inventory Operations - AC Power
- Availability 1 B 3.10.6 3
c4s-BASES
- ACTIONS C.1 and C.2 (continued)
If the required diesel generator is moperable, SR 3.8.1.1 must be performed
. within[one] hour and subsequently every 12 hours after. Also the requtred diesel generator must be restored to operable status withinh2b.
1 4 D.d 1 If the required Actions A, B, or C are not met within the completion time ! then the RCS level must be raised to >%117'.0*], *Ihis wi!! place the plant in a more conservative position with respect to the safety analysis. SURVEILLANCE SR 3.10.6.1 REQUIREMENTS Verification of diesel generator operability per SR's 3.8.1.2, 3.8.1.4, 3.8.1.5,3.8.1.9 and 3.8.1.18 (Ref.1) ensures that power will be available C during design basis events and for shutdown cooling requirenware, REFERENCES 1. CESSAR-DC, Appendix 19.8A, Shutdown Risk Evaluation Report, Section 2.4.3. 1
- 2. CESSAR-DC, Section 16.11.1.
l i K e v c $ SYSTEM 80+ B 3.10-21 Amendment O 16A.13-21 May 1,1993
CESSAR Ennnen. * ~ f k 16A.13.7 B 3.10.7 REDUCED RCS INVENTORY OPERATIONS - DC DISTRIBUTION SYSTEM Reduced RCS Inventory Operations - DC Distnhtson System e B 3.10.7 i B 3.10 REDUCED RCS INVENTORY OPERATIONS j B 3.10.7 Reduced RCS Inventory Operations - DC Distribution System BASES I BACKGROUND ne DC distribution systems provide pow to the diesel generators. De DC power sources are required in order the removal of decay heat is not i l significantly affected. f APPUCABLE During reduced RCS inven ry operations, there are design basis ace.idents
~
SAFETY for which DC power is med to be available. De DC power sources are ANALYSIS required for the mir ation of potential accidents (Ref.1). De 140 requtrements ensu 'that the DC power sources are available in case of a . design basis LCO ne LCO requires that one division of the DC distribution system coinciding with the operable diesel generator is required to be operable. It is alsc34 equired that power is available to the opposite division 125 VDC and 120 VAC distribution centers. nese requirements ensure that DC power is ' av table for the mitigation of design basis accidenta. APPUCABILITY nis LCO is applicable in MODE 5 and MODE 6 with reduced RCS inventory. The required fDC distribution system provides assurance that decay heat removal systems are available to maintain heat removal capability.
' i 1
ACTIONS AJ With a required DC power division inoperable the restoration of the division I l must be completed within[fourjbours. I With the opposite division distribution centers inoperable, restoration must be completed withi[lfhours. N r s g, l y
- j. (<=hmd)
.A SYSTEM 80+ B 3.10-22 .
Arnendsnent Q l
. 16A.13-22 June 30,1993 l
l
CESSARMR m. .. r ! 1 l l l Reduced RCS Inventory Operations - DC,Distohition System ,
"1 3 3.10.7 l
*.;.:df .2_+
BASES V i ACTIONS Q l l (continued) If the required Actions A or B have been met (thin the ! l completion time, then the RCS level be raised to >LEL-117' 0' within ' Oi)murs. This action willplace unit in a more conservative position with respect to the safety analysi 1 SURVEILLANCE SR 3.10.7.1.
~ ~ ~ ~
Perfo of SR's 3.8.4.1 through 3.8.4.8 in the [equency speci5ed in Ref. 2 necessary so that DC power can be made available for the miti non of design basis accidents. j i REFERENCES 1. CEOG RSTS Criteria Application Vol.1, Table 21. ; 4 2. CESSAR DC, Section 16.11.4 .
' l l
l l l l l l l l
- s, g'
1 SYSTEM 80+ B 3.10-23 Amendment O 16A.13-23 May 1,1993 1
r N)~ j p/ - a t 11/9/93 l Note To: bk'?k IT bE (8 Ipb b From: Angela T. Chu, OTSB j
-r Attached are sections of comments on technical. specifications-(TS) section' i 5 from ABB-CE dated November 3, H3 (see enclosure of,the cover letter). - >
These sections are based on the la.est OTSB list of " Technical Branch' . Review Responsibilities" (see enclosure of the list). Please forward these TS sections to your reviewer for review,. and return - l your marked up comments to me by Novemb?r 30, 1993. A memoraandum from C.I. Grimes to you will soon follow. l l l l l I l l l 'l l 1 1 I l l l l l' 1
CESSARania mn Reponmg Requirements 5.9 5.9.1.7 RCS PRESSURE AND TEMPERATURE LIMITS REPORT (PTLR)(continued) temperature limits including the heatup and cooldown rates shall be those previously reviewed and approved by the NRC in [ Topical Repon(s), number, title, date, and NRC staff approval document, or staff safety evaluation repon for a plant specific methodology by NRC letter and date]. De reactor vessel pressure and temperature limits, including those for heatup and cooldown rates, shall be determined so that all applicable limits (e.g., bestup sad limits, cooldown limits, and inservice leak and hydrostatic testing limits) of the analysis are met. The PTLR, including revisions or supplements thereto, shall be provided upon issuance
- for each reactor vessel fluency period.
i ~ 5.9.2 Srecial Renorts
~
ISpecial Reports may be required covering inspection, test, and maintenance activities. These special repons are determined on an individual basis for each unit and their preparation and submittal are designated in the Technical Specifications.
]
Special Repons shall be submitted in accordance with 10 CFR 50.4 within the time period specified for each repon. He following Special Repons shall be submitted: K a. In the event an ECCS is actuated and injects water into t5e RCS in MODE 1,or 2,v 3, a Special Repon shall be prepared and submitted within 90 days describing the circumstances of the actuation and the total accumulated actuation cycles to date. The current value of the usage factor for each affected safety injection nozzle shall be provided in this Special Repon whenever as value exceeds 0.70: r b.
'ndividual emergency diesel generator (EDG) experiepeca 4-or fri6re valid
\
g..
. failures in cl21ast-25 demands, these failurea,and anfEon valid failures
\ expenenced by that EDG irithat time penod shall be reponed within 30 days.
Repons on EDG failures sh'all include the information recommended in Regulatory Guide,1,9. Revision 3. Regulatory Position C.S. o'r existingJgtlatory Gv de MDB reponing requirement; and
- / .N.. '
(continued) SYSTEM 80+ 5.0-35 Amendment K 16.15-35 October 30,1992
___ = . CESSAR EMMi'.co of "I l _ l 16A.11 B 3J ELECTRICAL POWER SYSTEMS l 16A.11.1 B 3.8.1 AC SOURCES - OPERATING ! AC Operenes ! 1 ~ B 3.8.1 i i B 3.8 ELECTRICAL POWER SYSTEMS i j B 3.8.1 AC Sources - Oner=Han g4 BASES
,. BACKGROUND The ACPower Sources consist of the offsite power sources (preferred l (U.:4. t J:.b1 -J sad the easite standby power sou cas' As required by'Deneral Demga L..a 3.-.sm). Criterios 17 (Ref.1), the design of the AC fower Jystem provides i N, '- + and rad =d==ey to ensure as available sauros of power to es ;
, Engineered safety Feature (ESP) systems. l The Division 1 and 2 cy;te Cgsee IE AC Distribution System is devided into j redundant load groupe%o'Eist loss or any os.s , soup will not prevent as minimum anfety functions from being performed. Each ess.efeedundestde- @[/ -,
*: '.. _;: bas aa===c+- to two preferred (offsies) power supplies and to l s single diesel generator.
a fad ranAmt trannentense lines supply offeits power to Preferred SwBechyards ! & II. Preferred Switchyard I feeds the Unit Main Transfo6mers (UMTs) i
, , Prefened Switchyard II feeds the Reserve Auxiliary Transfonases
! r ' 'A ' t (RATS). The UMT, transforms 230 kV to 24 kV,'_ : ;'_ :S "_ _ '."Oc l s 24 kV is fed to two Unit Amiliary Treasformers (UAT). Thess UATs e[.>9 f g 4,, ovide , owe, to .ei, res,ecove es, te s.it b,es,,w d W y[,.). r y .1be UATs provide 13.8 kV ' 'c;; x1 : and 4.16 kV forpsimasy j
- u-distreutio Eg, ATs provide the normal preferred souros of power to the 4360 vok -
t g giv
'4 / W[
l
,. s.ay busses. UA1TX) Provides the power to Division 1 emergency lf h g b and UNITY 1 provides the power ao Division 2 emergency huessa.
f' ' l .eY[/j'j / ackup offsite power for either or both the emergency busess is provided j -# '# through the RATS. If offsite power is not available, the emergency busses l j y, 4 , .re oppised from asir rapactive diessi go.oraior, (Do). poi .,phes j
,. #*f # p p Power to Division 1 emergency busses and DG2 supplies power to Division
, " ya ,, u M. y g g2 emergency busses.
] q<[ p;.Yh}f'.},3
# f 'N s
r ,'/,
,ff If power were lost frasa either UAT, undervoltage relays would seems this l condition. The electrical system would eben attempt to transfer to the backup
,/j/
.y- -
'..y's f #
- V ,/ .
prefened power source (the associated RA1). The transfer to the ===aaimaad l \ y ? ;:f * , .j-a- , &n i GJ [ (continued) I7 SYSTEM 30+ B3.8-1 Amendment O 16A.11-1 May 1,1993 c I
i CESSARiMMem. i - i l i 1 i ! J l j AC Sources - Operating i B 3.8.1 i BASES 4 ? BACKGROUND (continued) RAT will occur on the permanent non-safety bus affected. A successful transfer will preclude the automatic start of the associated diesel generator. a b"(l[O, G p# .) If power is not available from the backup preferred source, h 2 h.ethe' V DG ; j automatically used to power the associated emergency busses. De DGs start pj i automatically on a Safety Injection Actuation Signal (SIAS) or on a loss of y. .c f <2 ] voltage (LOV) on the respective emergency busses. Even though the .. i are started on SIAS, they will not power the emergency buseos unless both - l preferred offsite sources of power are unavailable. %e DG automatically 1 ties to its busses on a LOV condition on that bus with offsite power ' i unavailable. l In accordance with Regulatory Guide 1.9 (Ref. 2), diesel ,;r A. I and 2 } have [6023] kW continuous and [6626] kW two-hour load retsags. l 3 De diesel generators are rated at 4160 volts, three phase,60 Hr., and are capable of attaining rated frequency and voltage within twenty seconds sher
- receipt of a start signal (Ref. 3).
A I j De ESF systems which are powered from divisional power sources are listed - in Reference 4. 9 . . .-@l Y' we [', APPLICABLE De initial conditions of design basis transient and socident analyses in PSAft l , SAFETY Chapters 67-_ _ _. _ , . _ and 15fA-1" - ^ ^d,s, assume d ANALYSES ESF systems are OPERABLE. De AC power System is designed to provies { sufficient capacity, capability, redundancy, and reliability to meure the l svailability of necessary power to ESF systems so that the fuel, Reactor 'l l j Coolant System, and cochinmant design limits are not exceeded. Dese j design limits are discussed in more detail in the Bases for LCO Sections 3.2
- (Power Distribution Limits), 3.4 (Reactor Coolant System), and 3.6
- (Containment Systems).
i i i t j (continued) i SYSTEM BO+ B3.8-2 i
- Amendment O
! 16A.11-2 May 1,1993
l CESSARHEice l AC Sources - Operating B 3.8.1 - BASES APPLICABLE in general, the safety analysis considered offsite power to be available to ESF SAFETY equipment following event initiation. Offsite power is not considered to be ANALYSES safety-related. A loss of offsite power (LOOP) alone is an analyzed event (continued) 7 [since it presents a challengh to the plant's safety features and would result in a total loss of AC power if the diesel geoerators failed to start. ne OPERABILITY of an offsite AC source is not explicitly required by the safety analyses. The;rfore, the need for two independent offsite power circuits was not derived from the safety analysis, since events postulating failure of offsite power considered a complete loss of 230kv power. Such events disable both offsite circuits. he requirement for two offsite circuits I was derived from the design criteria (Ref.1) and standards incorporated into the plant design, which required redundant, independent offsite power sources. i ne OPERABILITY of the power sources is consistent with the initial l assumptions of the accident analyses and design requirements and is bawd . l upon maintaining at least one of the AC and DC rower I,ourms - g gw l associated distribution systems OPERABLE during accident conditions in the I event of (1) an assumed loss of all offsite or all onsite AC power, and (2) a / single failure.@9 ^- M' r tar 4C .1>.eavv .utisk 6.*k as 3 ,[ WM Pd.ey .b%ek uf:..I LCO Two phpd p'j dq-i: circuits (Ref. 7) betw :a the offsite transmission l ( j. network and the onsite Class IE Distribution System, and the two
,P
- , g/ independent diesel generators (Ref. 6) ensure availability of the required power to shutdown the reactor and maintain
- i,nA gsafe shutdo
',.) F after an anticipated operational occu or 1 postulated design basis
',] , ',g r ( ~, - -.. accident (DB A).
g
. *e F g'
,. f' 4-
, 'Ile two circuits from offsite are ..; :.;.3 n; h %ysically independeatXsuch
'_ q , that a single cotr.ponent far (e.g., breaker trip) will not cause both power q , .
. gqources to be lost to one or more 4160 volt emergency buses. Rus, a
*Q,- -, ,,T ,, $,4 )Hysically independent circuit consists of one incoming line to
.f,, ;",, ,.' p(Preferred ,, Switchyard Interface T) switchyard, a circuit path (including
,,*p r < ,t breakers and disconnects) to one energized UAT (X or Y), and a circuit path from the energized UAT to the associated 4160 volt emergency buses. A physically independent circuit also consists of the incoming line to the Preferred Switchyard Interface D, a circuit path (including breakers and
.u
L' (cor:tinued) SYSTEM 80+ B3.8-3 Amendment O 16A.11-3 May 1,1993
CESSAR E!'Lacum J ] AC Sources - Operating B 3.8.1 B ASES LCO . disconnects) to the one energized RAT (Division I or II), and a circuit path (continued) , 3 k 5 from that energized RAT to its 4160 volt emergency busea.7Amb, *- e Q
.r I
% - ff-Inoperable AC sources (which are designed do not to receive power fromnecessarily that source) unless result (Lcompon in inoperable specifically 7 '- l ..** directed by Required Actions (refer to LCO 3.0.7). [
l I . . J ~, h** Jr l .b Certain diesel generator support systems are addressed in other LCOs. -
- N i
During inoperabilities in these support systems, moperable diesel generators do not necessarily result unless specifically directed by Requimd Actions. [ ${ S This is in accordance with LCO 3.0.7. N Y kY f cu ; ..aj I),I ' r. APPLICABILITY he AO Power Sources are required to be OPERABLE in MODES 1,2,3 f and 4 to ensure that: p;p j 1. Acceptable fuel design limits and reactor coolant pressure boundary 3 limits are not exmdad as a result of anticipated operational occurrences or abnormal trans tents, and
}k(%
,g (r
{, r , CdCl,46tLITY (y T' i
- 2. Adequate core cooling is provided, and containment 9%j and -
other vital functions are maintained in the event of a postulated DBA. 3'h r% AC Power Source requirements for MODES 5 and 6 are addressed in LCO !} ! ! 3.8.2,'AC Sources - Shutdown
- F*
Pb ACTIONS rating expenence mdicates that the availability of a typical offsite so j;; p is her than that of a typical standby AC supply (Ref. 8). Dus risk is e 3 evalua terms of availability, the risk associated wi loss of an OI j offsite power rce (the source with the higher av ity) would appear Y ^ to be more severe the risk associated wi loss of a standby AC supply (the source with lower avai! ' sty). However, this apparent difference in severity is offset b inability considerations: that is, the j time required to detect and res an lable offsite source is generally l much less than that requi detect and resto unavailable standby AC supply. Based ese considerations, a gene etion between operating ctions associated with the loss of an offsite so those sons associated with the loss of a standby AC supply is not wanan (continued) SYSTEM 80+ B3.8-4 Amendment O 16A.11-4 May 1,1993
t ! CESSAR HE" sum. ! 1 1 .t s I i ! 1 i
- i
! AC Sources - Operating .
- p[ A2 M i- - B 3.8.1 - j l
t BASES /
$V 9 /' u , .
V 1 '- 2
\;
j f ;A -[f ' ' " i a ACTIONS '
, A. l . A.2. and A.3 ;
~
(continued) . l With one of the required offsite circuits inoperable, sufficient offsite power .; { is available from the other required offsite circuit to ensure that the unit can i j be maintained in a safe shutdown condition following a design basis transient ! j or accident. Even failure of the remaining required offsite circuit will not l i jeopardize a safe shutdown of the unit because of the redundant standby . l l diesel generator. However, since system reliability is degraded below the , , ensure a highly reliable isowei~so siiie remains, it isj necessary r[t LCO requirements, a time limit on continued operation is i-_,: To lol 4 1 r ' O T '.*"Mjo.. of- _,,.:.. the remaining required
- o- offsite circuit on a more frequent basis j - ,
1
.p h* '8M) ; ne specific list of features encompassed by Required Action A.2.is provided ' l e p.,,:. E 6- in Reference 8. Dese features are those which are designed with ' redundant f ;
- - e tA g fy 7 yn r . safety-related Completion Time divisions. allowance Single division for this Required Action systems is limited toare not included. Since thl 24 hours,- 3 , _ those systems with allowed Completion Times a to 24 hours for both ! j divisions inoperable are not included as required features to be checked.j l [lequired Action A.2,' which only applies if the division cannot be poWiimd, { { from an offsite source, is intended to provide assurance that an event with a i r i- , j ' coincident single failure of the associated diesel generator will not result in a I' "
- a complete loss of safety function of critical systems..The term
- ensure," as . , ..
I used in Required Action A.2, allows for an administrative check by .l j examining logs or other information, to determine if certain features are out -j of service for maintenance or other reasons. It does not require umque , ~ performance of the Surveillance Requirements needed to dennonstrate . ' OPERABILITY of the feature.' lDe Completion Time is intended to allow .- ! the operator time to evaluate and repair any discovered inoperabilities. His { ' j Completion Time also allows for an exception to the normal
- time zero* for j beginning the allowed outage time ' clock *. In this Required Action, the.
j Completion Time only begins on discovery that both 1) the division has no t i offsite power supplying its loads, and 2) a required feature on the other i division is inoperable. If at anytime dyrisig the existence of this Condition ~ i- (one offsite circuit inoperable) airequiriWI feature subsequently becomes-l (inoperable, this Completion Time would begis6 to be trocked. p r
, i- : r:_ t . '-H o. --j--- g ; y;-- - .a.:-- L - - "[3he. __
1
$r p :' * ' Mj c' - m - - . . . . . . ....... ;-;,-.. v' -; .
- y _ ! ;-- --- e.
- .-a; t= a: .. in . s- or t--4:- or e - -_ ,,
i ,N i ' (continued)'
/
i { SYSTEM 80+ B3.8-5 l Amendment I ~ 16A.11-5 December 21,'1990 - I.
-yr* m --.--,-.-we + A
I w g Id y it.4.it-s J L
. Since the Required Action only specifies "perfom," a failure of SR 3.8.1.1 acceptance #4 criteria does not result in a Required Action not met.
However, if a second required circuit fails SR 3.8.1.1, the second offsite circuit is inoperable, and Condition C, for two offsite circuits inoperable, is entered. l l t ( f N . According to Regulatory Guide 1.g3 (Ref.r5), operation may - p/ continue in Condition A for a period that should not exceed A# 7 72 hours. With one offsite circuit inoperable, the reliability of the offsite system is degraded, and the . f potential for a loss of offsite power is increased, with I attendant potential for a challenge to the unit safety t6 systems. In this Condition, however, the remaining OPERABLE offsite circuit and DGs are adequate to supply electrical power to the onsite g1Egistribution System.", l The 72 hour Completion Time takes into account the capacity
- and capability of the remaining AC sources, a reasonable time for repairs, and the low probability of a DBA occurring during this period.
[ t ,1 ' 0
< -4 k, , c.
p j;, .;,,
.-f e '
,z M
%.o Y.v6 ':;f) , l
[ To ensure a highly reliable power source remains with an inoperable DG, it is necessary to verify the availability of l the offsite circuits on a more frequent basis. Since the
- t c, g Required Action only specifies "perfom," a failure of l SR 3.8.1.1 acceptance criteria does not result in a Required Action being not met. However, if a circuit fails to pass SR 3.8.1.1, it is inoperable. Upon offsite circuit inoperability, additional Conditions and Required Actions must then be ente 7d.
CESSARELbmn i AC Sources - Operating l B 3.8.1 l 4 BASES ACTIONS A.I. A.2. and A.3 (continued) (continued) o the loss of redundancy in the offsite power sources, silure ; in the o C Power System could result in p ete loss of offsite I LUt E 4 power. Therefore, uired Action tricts continued operation. In i gjg accordance with Regulatory a period &at should goafceed 72 hours.
.93 (Ref. 8), operation may continue for urce is not restored within
- 72 hours, to led shutdown must be initiated per tions F.1
- f. ,' T -
x ,, 8.I t . B.1. B.2. B.3.1. B.3.2. and B.4 ; j , .. j
, Wnh ong diesel d generator inoperable, sufficient AC Power Sour in g',5 f r J se ,, + C >, available to ensure safe shutdown of the unit in t o a transient or !
accident without a single failure. therefore safely continue , h di for a short period o e availability of the r sources is M-ve ' c 4.cf 7, _._ .s A* ** The specific list of features encompassed by Required Action B.2 is provided ,em s ei in Reference 8. These features are those which are designed with redundant safety related divisions. Single division systems are not included. Since the Completion Time allowance for this Required Action is limited to four hours, those systems with allowed Completion Times a: four hours for both j divisions inoperable are not included as required features to be checked. ;
~ Required Action B.2 is intended to provide assurance that a loss of offsite l
, power, during the period that a diesel generator is inoperable, will not result ;
j; ' in a complete loss c; 4fety function of critical systems. The term
- ensure,* l
, as used in Required Action B.2, allows for an administrative check by l
! examining logs or other information, to determine if certain features are out of service for maintenance or other reasons. It does not require unique l performance of the Surveillance Requirements needed to demonstrate l OPERABIIITY of the feature. The Completion Time is intended to allow the operator time to evaluate and repair any discovered inoperabilities. This Completion Time also allows for an exception to the normal
- time zero* for beginning the allowed outage time ' clock.* In this Required Action, the Completion Time only begins on discovery that both 1) an inoperable diesel generator exists, and 2) a required feature on the other division is inoperable, i If at any time during the existence of this Condition (one diesel g wrator inoperable) a required feature subsequently becomes inoperable, this (continued)
SYSTEM 80+ B3,8-6 Amendment I 16 A.11-6 December 21,1990
i L CESSAR innfcam,. I
- i. ;
1 l- i i ! 8 i !. v e 1
.j l . AC Sources - Operating - l
- B 3.8.1 1 1 i
{ BASES l 4 ACTIONS B.I. B.2. B.3.1. B.3.2. and B.4 (continued) , j (continued) . . I
- Completion Time would begin to be tracked. The Completion Time is based j j on engineering judgment taking into consideration the probability of a loss i
- of offsite power occurring while the other Division 1. or 2 diesel generator l is inoperable. This is comparable to, but less severe than, Condition D (both ,
i diesel generators inoperable) and therefore has a comparable, but less : i restrictive, Completion Tirne. 3'.s :a.8 D P . uired Action B.3.1 provides an allowance to avoid unnecessary j
@ . d < t. /)
- the ERABLE diesel generator. If it can be determined that se of i i the in rable diesel generator does not exist on the OP LE diesel . !
generator, 3.8.1.2 (diesel generator start) does not to be performed. If the cause o perability exists on the other di generator, the second : j diesel generator w d be declaredinoperable discovery of the condition ! i and Condition D wo be entered. the failure is repaired and the : + common mode failure no ger exi , Required Action B.3.1 is satisfied. .
- If the cause of the initialin diesel generator cannot be confirmed to !
not exist on the remaining d' i nerator, performance of SR 3.8.1.2 will; i suffice to provide assu e of und OPERABILITY of that diesel generator. l l Per Gene ' tier 8415 (Ref. 9), eight hours is a .able time to confirm , j that OPERABLE diesel generator is not affected he same problem as inoperable diesel generator. l %t E > l j ired Action B.4 revricts continued operation to 72 hours in i j/ with Re ory Guide 1.93 (Ref. 8). If the inoperable di generator is ! not restored wi bours, a controlled shutdown be initiated per Required Actions F.1 ' j Condition B is modified by a N ic 'res performance of Required ? Action B.3.1 or B.3.2 if ition B is entered. of the potential for } common cause fa' , Required Action B.3.1 or B.3.2 completed
- when one I generator becomes inoperable even if it is to OP LE status in less than eight hours.
(continued) a 1 4 i
- SYSTEM 80+ B3.87 4
j Amendment I - i 16A.11-7 December 21,1990
LLJ k & M.an i n I
' Discovering one required DG inoperable coincident with one j or more inoperable required support or supported features, l or beth, that are associated with the OPERABLE DG, results i
in starting the Completion Time for the Required Action. Four hours from the discovery of these events existing ) concurrently, is acceptable because it minimizes risk while i allowing time for restoration before subjecting the unit to ! transients associated with shutdown. In this Condition, the remaining OPERABLE DG and offsite circuits are adequate to supply electrical power to the i onsite Class 1E Distribution System. Thus, on a component l basis, single failure protection for the required feature's function may have been lost; however, function has not been ;
' lost. The 4 hour Completion Time takes into account the j OPERABILITY of the redundant counterpart to the inoperable )
required feature. Additionally, the 4 hour Completion Time i takes into account the capacity and capability of the i i remaining AC sources, a. reasonable timedfor repairs, and the l 48 4 low probability of a DBA occurring during thisgeriod. ( /
- r The Note in Conditien 8 requires that Required Action B.3.1 or B.3.2 must be completed if Condition 8 is entered. The intent is that all DG inoperabilities must be investigated for common cause failures regardless of how long the DG inoperability persists.
i Required Action B.3.1 provides an allowance to avoid unnecessary testing of OPERABLE DGs. If it can be determined that the cause of the inoperable DG does not , exist on the OPERABLE DG, SR 3.8.1.2 does not have to be ! perfomed. i If the cause of inoperability exists on other l
- DG(s), the other DG(s) would be declared inoperable upon '
} discovery and Condition E of LCD 3.8.1 would be entered. Once the failure is repaired, the consson cause failure no i longer exists and Required Action 8.3.1 is satisfied. If
- the cause of the initial inoperable DG cannot be confimed not to exist on the remaining DG(s), perfomance of SR 3.8.1.2 suffices to provide assurance of continued OPERABILITY of that DG.
j[ 7 According to Generic Letter 84-15 (Ref W ) [24] hours is f' affected by the same problem as the inopera(ble DG. reasonable k 1
Catut4 /> ly a 4 ll-7
'N $
According to Regulatory Guide 1.93 (RefA1Q, operation may centinue in Condition B for a period tnat should not exceed - 72 hours. In Condition 8. the remaining OPERABLE DG and offsite circuits are adequate to supply electrical power to the
,y E onsite Class 1E Distribution System. The 72 hour Completion Time takes into account the capacity and capability of the remaining AC sources, a reasonable time for repairs, and the low probability of a DBA occurring during this period.
The second Completion Time for Required Action B.4 establishes a limit on the maximum time allowed for any combination of required AC power sources to be inoperable during any single contiguous occurrence pf failing to meet
)
the LCO. If Condition 3 is entered white, for; < nstance, an , offsite circuit is inoperable and that circuit i s subsequently returned OPERABLE, the LCO may already have been not met for up to 72 hours. This could lead to a total of 144 hours, since initial failure to meet the LCO, to restore the DG. At this time, an offsite circuit could again become inoperable, the DG restored OPERA 8LE, and an additional 72 hours (for a total of 9 days) allowed prior to complete restoration of the LCO. The 6 day Completion Time provides a limit on time allowed in a specified condition after discovery of failure to meet the LCO. This limit is ( considered reasonable for situations in which Conditions A and B are entered concurrently. The 'A!Q" connector between the 72 hour and 6 day Completion Times means that both Completion Times apply simultaneously, and the more restrictive Completion Time must be met.
/44 .. ( [L , 2. % Ce,9 44 N ~7 M ,F-CC3 r a M ' vW a,t w /~. w v.c.s +m"[n
& w
- a.nL % ~,i,i LL J c c u-n s 0W fN' M m
- i^
%%) ,, a u & (k~.L6 a w Md i
C E S S A R iE nnen t,. l AC Sources - Operating B 3.8.1 BASES 4Y y y / c T 5 v[ ' . ;sY ' ACTIONS kIand0.2 r( jg/W r** 1 (continued) D , p't hl In Condition D, individual redundancy is lost in both the offsite power j system and the onsite Division I or 2 AC Power System. However, since 87 power system redundancy is provided by two diverse sources of power, the reliability1Eofg(he Condition power loss of both systems required offsite in this Condition circuits). His differencemay in appear higher tha reliability is offset by the susceptibility to a single bus or switching failure. /1, M u'- 7u,of L,. p this
" "*> power W # U -' system configurat
,, w e ,.+.. r T 4. % e ,4) , s c# pa k k * % *** e #f M .
e_%m w e 4 w La w L he's ;dW ** " ;e%'%fnd During the time this+, Condition ekists (one ite circuit dnd one diesel generator inoperable), Condition A and B also exid concurrently. He Required Actions and associated Completion Times for these Conditions also apply from time of entry into each individual Condition. His will continue to provide common mode failure considerations for the inoperable diesel generator, cross-divisional feature OPERABILITY considerations, and provide the appropriate time limit for continued operation while repairs are being attempted. Per Regulatory Guide 1.93 (Ref. ), with the available offsite and standby J,. g.4 b b AC Power Sources each one less than the LCO, operation may continueTor 12 hours.) If either an offsite or a standby AC source is restored to OPERABLE status within 12 hours, operation may continue for 72 hours from the time of the initial loss of the remaining inoperable source (consistent with the loss of one AC source in Condition A or B). If neither an offsite' source nor a standby source is restored within the 12 hours, or, if either the inoperable diesel generator or the inoperable circuit is not restored within 72 hours ofits initial inoperability in accordance with Condition A or B (which may occur, in some cases, prior ao the 12-hour allowance), a controlled shutdown must be initiated per Required Actions F.1 and F.2. (continued) SYSTEM 80+ B3.8-8 Amendment I 16A.ll-8 December 21,1990
'\
l l CESSAR M5F#imin l AC Sources Operating B 3.8.1 BASES E. ACTIONS -fL1 (continued) With two required diesel generators inoperable, insufficient standby AC Power Sources are available to power the minimum required ESF functions. Since the offsite power system is the only source of AC power for this level of degradation, the risk associated with continued operation for a very short time could be less than that associated with an immediate controlled shutdown (i.e, the immediate shutdown could cause grid instability which could result in total loss of AC power). However, since any inadvertent generator trip could also result in total loss of AC power, the time allowed for continued operation is severely restricted. 'Ihe intent here is not only to avoid the risk associated with an immediate controlled shutdown but also to minimize the risk associated with this level of degradation.hDuring the time this condition exists (both diesel generators inoperable), Condition B also exists concurrently for each of the inope:3ble diesel generators independently. The Required Actions and associated Completion Times apply as discussed l previously. This will continue to provide common mode failure
- considerations, cross divisional feature OPERABILITY and provide the
, appropriate time limit for continued operation while repairs are being ! attempted. Per Regulatory Guide 1.93 (Ref. 8), with the available standby AC electrical supplies two less than the LCO, operation may continue for a period that should not exceed two hours. One of the required diesel generators must be restored within these two hours. Operation may then continue in accordance with the loss of one diesel generator in Condition B. If no standby AC supply is restored within two hours, or, if either inoperable diesel generator is not restored within 72 hours of its initial inoperability in accordance with Condition B (which may occur, in some cases, prior to the two-hour allowance), a controlled shutdown must be initiated per Required Actions F.1 and F.2. C. C. 1L1 andT 2 l With both of the required offsite circuits inoperable, sufficient standby AC / 4 J 'M Power Sources are available to maintain the unit in a safe shutdown condition
. , " in the event of a design basis transient or accident. However, since AC A I ha l
, 1' f. Power System reliability is degraded below the LCO requirements, a time
( limit on continued operation is imposed. C'f ,
, o . . i 3. -
*',,e
, (continued)
SYSTEM 80+ B3.5-9 Amendment I 16A.11-9 December 21,1990
l I CESSAR EL"icuen 2 l I t AC Sources - Operating i ! B 3.8.1
, BASES j t.. C..
ACTIONS 'ILI and k 2 (contmuod) (continued) C. ne specific list of features encompassed by Required Action \.1 is provided l in Reference B. Rese features are those which are designed with redundant safety-related divisions. Single division systems are not included. Since the
- Completion Time allowance for this Required Action is limited to 12 hours,
, those systems with allowed Completion Times it 12 hours for both divisions inoperable are not included as required features to be checked. ,ne j
- requirement is intended to provide assurance should a coincident single
' failure of a diesel ge6erator occur during the period with two offsite circuits j inoperable, a complete loss of safety function of critic 4lgystems will not resultyThe term
- ensure,' as used in Required Action Lt, allows for an administrative check by examining logs or other information, to determine if 3 certain features are out of service for maintenance or other reasons. It does not require unique performance of the Surveillance Requirements needed to ,
demonstrate OPERABILITY of the feature. [The Completion Time is j intended to allow the operator time to evaluate and repair any discovered : inoperabihties. His Completion Time also allows for an exception to the I normal
- time zero* for beginning the allowed outage time " clock *. In this Required Action the Completion Time only begins on discovery that 1) both 1 offsite circuits are inoperable, and 2) a required feature on the other division - ---- . 4 is inoperable. If at any time during the existence of this Condition (both "C[W,g i offsite circuits inoperable) a required feature subsequently becomes y 6 '. g F Q ,
inoperable, this Completion Time would begin to be tracked.VThe j $ g j Completion Time is based on engineering judgment taking into consideration g [3r, ,,yt,I p . l the probability of an event concurrent with a single failure of a diesel , /" L / , l generator occurnng (on the division opposite to the inoperable feature) while /V two offsite circuits are inoperable. During u time this Condition exists l (both offsite circuits inoperable), Condition A also exists concurrently for j j each of the inoperable offsite circuits independently. De Required Actions ! and associated Completion Times apply as discussed previously, his may result in more restrictive requirements for restoration and/or cross-divisional feature OPERABILITY checks. 7 L - In a^C .'M with Regulatory Guide 1.93 (Ref. 8), with the available offsite ACdrower Sources two less than required by the LCO, operation may continue for 24 hours.' One offsite e surce must be restored within 24 hours. Operation may then continue in accordance with the loss of one offsite source i in Condition A. If no offsite circuit is restored within 24 hours, or, if either
/
h& C>k:E f: So f n. tvI!~~ I l
+MHsi .,in ~
G.. M SYSTEM 80+ B3.8-10 Arnendment I ! 16A.II 10 December 21,1990
- CESSAR ML"uren AC Sources - Operating B 3.8.1 i BASES c C.
ACTIONS f.1 and i 2 (continued) ] (contmued) , inoperable offsite circuit is not restored within 72 hours of its initial g' } p+g +
- inoperability in accordance with Condition A (which may occur, in some f5 cases, prior to the 24-hour allowance), a controlled shutdown must be
- l initiated per Required Actions F.1 and F.2.
{
" $< Mr.
, : ""- ; ,p' J'I c, 4
$j I
$~ ) ft. '
'"*?'
e .sg J%&JGWwd=O sthaced in a MODE in which the LCc5 does not apply if the 3
'ikX-Q j , J /,. 9 Required Actions and associated Completion Times cannot be met. His is 3 .[ g done by placing the plant in at least MODE 3 in six hours and in MODE 5 p,t,
, in 36 hours. He allowed Completion Times are reasonable based on operating experience to reach the required MODES from full power without / challenging plant systems. i
, /, 4.1 j With three or more required AC sources inoperable, insufficient AC sources
- remain available to ensure safe shutdown of the unit in the event ofed
- transient or accident with any additional single failure.h n-~n-d ^ ^
p .i..a , .it,m.9; 7 .n ~, e , ~ ,: - : s .y -..: _ g r g n %g .
'1- ~f E id i Of '= r= L rp . Immediately is used u an F,
% b administrative means of not allowing any extension of the LCO 3.0.3
[ p ;p - shutdown requirements. r I ti i SURVEILLANCE REQUIREMENTS ne AC Power Sources are designed to permit inspection and testing of all important areas and features, especially those which have a standby function,
-f7*
E,O , in accordance with General Design Criteria 18 (Ref.10)? Periodic
~~ g ~?
h 4 component tests are supplemented by extensise" functional tests during refueling outages (under simulated s'cident c conditions). Tbe Surveillance Requirements for demonstrating the OPERABILITY of the os.sel generators M-{ g-j are in accordance with the recommendations of Regulatory Gaide 1.9 (Ref. , 7),1.108 (Ref.J1). and 1.137 (Ref. A2). ...
% . .%I u, c ES$N ;; ,e} }
' 1 /0 e *a (continued) c t p
/ aC +'d ci~0, $1T* l,6 DC I (bf,),
If( -- CT5 fY SYSTEM 80+ B3.6-l! ! 2
.I
.J.,
w j2 t'- Amendment I \ k. - ' 16A.11 11 December 21,1990
CESSAR E5G" ice i l AC Sources - Operating B 3.8.1 BASES I SURVEILLANCE S't 3.8.1.1 REQUIREMENTS 1 (continued) his Surveillance Requirement assures proper circuit continuity for the offsite I AC power supply to distnbution network and availability'of offsite AC power. The breaker alignment verifies that each breaker is in its correct position to ensure distribution buses and loads are connected to their preferred power source and independence of offsite circuits is maintained. The seven-day Frequency is adequate since breaker position is not likely to change without the ope tor being aware ofit, hJ tuu sn k J%sJ gE % & re f f*** . SR 3.8.1.2 and SR 3 8.1 T *) 71 nese surveillances help to ensure the availability of the standby power supply to mitigate design basis transients and accidents and snaintain the unit-
'. 4 f * .1 L .:+- F 'p' in sare shui 6own conditions. . .'or the purpose or this testingNdiesel 5' * @ -E generators shall be started from standby conditions. Standby conditions in this case sneans the diesel engine coolant and oil are being continuously circulated and temperature maintained consistent with manufacturer recommendations. ~. ,L c 1 G 'A e SR 3.8.1.)1 requires,ii>d #n a 184-day Frequency, f . /the 0 '"diesel
- g standby conditions' and achieve required voltage and frequency within 20 '
seconds. %e 204econd requirement supports the assumptions i,o ge design basis loss of coolant accident (LOCA) analysis (Ref. 3 The twenty-second start requirement is not applicabic to SR 3.8.1.2 which s performed on a 31-day Frequency. [, gg ,,g4, git %>.-
..a.s.- m n,, g -
-The normal 31-day Frequency for SR 3.8.1.2 (see Diesel Generator Test Schedu is consistent with Regulatory Guide 4.iei (Rei. i t). The 184-day 5 / /5,/, t)
-Frcqu .y for SR 3.8A$7 a reduction in cold testing consistent with ,
Frequencies provide adequate assurunce ',2
,N ;, A C U). Generic generator1etter 84-15 ,
of diesel OP IllTYEEile miisihiiing degradation resulting - (' from testing. Generator is qualified to be adjustable for va ' ' starting in accordance w ufacturer's reco - as for slow starts. The govemor variable speed featu automatically bypassed on emergency starts allowing the - enerator to sta -h rated speed and voltage withi uired 20 sec sods. (continued) SYSTEM 80+ B3.8 12 Amendment I 16A.II-12 December 21,1990
j - t }- To minimize the wear on moving parts that do not get " ;,,7f p lubricated when the engine.is not running, these SRs are : modified by a Note (Note 2 for SR 3.8.1.2) to indicate that ! 1 all DG starts for these Surveillances may be preceded by an l engine prelube period and followed by a warmup period prior ; ! to loading by an engine prelube period. 1 i J i i (< In order to reduce stress and wear on diesel engines, some \ j manufacturers recommend a modified start in which the - i starting speed of DGs is limited, warmup is limited to this ! a 3,,3. g lower speed, and the DGs are gradually accelerated to , synchronous speed prior to loading. This is the intent of ' Note 3, which is only applicable when such modified start procecures are recommended by the manufacturer. J 1 < i i, i If a modified start is not used, ! 10 second start requirement of SR 3.8.1.7 applies. l . T Ib i Since SR 3.8.1.7 requires a 10 second start, it is more . restrictive than SR 3.8.1.2. and it may be performed in lieu : of SR 3.8.1.2. This is the intent of Note l' of .SR 3.8.1.2. i I l 4 1 4 l 1 J v m
! CESSAR Hnineno,. AC Sources - Operating B 3.8.1 ,' i BASES ,
'I SURVEILLANCE SR 3.8.12 and SR 3.8.1.((continued) ,
REQUIREMENTS (continued) Sqveral Notes modify the performance of SRs 3.8.1.2 and 3.8.1.5. l' N permits an engine prelube period prior to diesel generator start' to mini 'a wear on moving parts which are not lubricated unless ngine is operatin his Note pertains to SR 3.8.1.2 and SR 3.8.1 . Another Note d modifies S .8.1.2 to allow idling and gradual a cration to minimia mechanical stre and wear on the engine. If warmup procedures are .
. not used, the time. Itage, and frequene erances of SR 3.8.1.5 must be met when perfonning 3.8.1.2. other Note modifies SR 3.8.1.2 by allowing performance of S .5 to satisfy performance of SR 3.8.1.2. . Since SR 3.8.1.5 does n ow e warmup and does require 20-secord starting, it is mor trictive than SR .l.2 and it may be performed in lieu of SR .l.2. Another Note es SR 3.8.1.5 to require perfont a of SR 3.8.1.3 (diesel generator I after performance of S .1.5, unless SR 3.8.1.5 is being performed as requ by SR 3.8.1.2.
SR 3.8.1.3 This surveillance s that the diesel generators are capable of synchronizing and accepting :t the equivalent of the maximum expected accident loads. De 60-minute run time for the diesel generator (required by p5[,,953' ie Ref. I1)is to stabilim the engine temperature. his will ensure that cooling g,j v ' k" [,I and lubrication are adequate for extended periods of operation while
?
minimizing the time that the diesel generator is connected to the (,ffsite powge Source-
, g ,, , y , / -/ , he normal 31. day Frequency for this drveillance (see Diesel denerator Test i
Schedule) is consistent with Regulatory Guide 1JOII(RefAt)- , .M
$ y, u.- 'l 6 pt m his /urveillance is modified by 5 Ndif The first N/ allows gradual ,e (manual) loading as recommended by the manufacturer to minimin stress and ' a'#
k)(M6' 4 wear on the diesel engine (Ref. 9). (ne second N allows momentary M transients due to chan ing bus loads to not invali te the test.@ third / i~
,,.. M' G
' f'y Np/fequires that this urveillance be conducted on only one diesel8enerator at a time. This will avoid a total loss of AC power due to a common cause '/<V,j-j#
- +
failure in the offsite circuits or a perturbation on the grid. Acr( f 37.j,gry ,f. j* e P re re on. Ta mulu vt fr rerfu<~adce d jus.re. lc seuesf[.,( %. S7aef Nsf frecaJ. -tt ,(continued) lcs $ lv ucl.f wll:.fnky p{s w ee. SYSTEM 80+ B3.813
; Amendment I 16A.11-13 December 21,1990
l u, CESSAR 'slaincuia , 9 i AC Sources - Operating B 3.8.1 BASES l SURVEILLANCE SR 3.8.1.4 REQUIREMENTS To./7 I l (continue is surveillance verifies that without the aid of the compressor, suDifient air s rapacity for diesel generator engine start is available. e system , design requi .nt provides for five engine starts for es r receiver (Ref. 13). However, on ne start is assumed for all y analyses. Requiring an air pressure 2: ig provides adequate margin to the diesel generator engine start outs. e 31-day Frequency is based on 5Ls.v.i.E I. uA 7 engineering judgme and industry-accep ractice and has been 3t s .. 6 . I. /- x- demonstrated uate for maintaining diesel generat rt capability. This i
, g Surve' ce Requirement is not intended to allow routine ope n below the '
5[ * ign air capacity represented by [180] psig. SR 3.8.1 W Transfer of each 4160 volt emergency bus power supply from the nonnal preferred offsite circuit to the backup prefened offsite circuit demonstrates 1_ the OPERABILITY _of the backup circuit distribution network to feed the j shutdown loads. ThtFrequency of the[rveillance is based on engineering l l judgment taking into consideration the plant conditions required to perfonn ' the surveillar.cc, and is intended to be consistent with ex ted fuel cycle m'+~ .b"
. c %"'> "
l l
)len ths. &h_..a pp ;n,,J ufww et W-fa C/Tn-.. ?A a .$. x. . . . . . . r.a.u ~9.~ - .Lnhs* tJg 1 .
l *
.a ~ .
.c
- Ri's p,rveillance is modified by two Notes.w.;. .~,%e first Note prohibits l
performance of this%rveillance in MODES 1 or 2. Performance of this i surveillance could result in perturbations to the electrical distribution system and cause a challenge to continued steady-state operation in MODES I and
- 2. Therefore, thisfarveillance must be performed in MODES 3,4,5, or 6.
The second 'ote allows credit to be taken for unplanned events in MODRS ia- satisfy this Surveillance Requirement. SR 3.8.1.\ 'l The diesel generators are provided with an engine overspeed trip to prevent damage to the engine. Recovery from the transient caused by the loss of a large load could cause diesel engine ovyrspeed which, if excessive, might result in a tnp of the engine. This Arveillance dem6nstrates 'the diesel generator load response characteristics and capability to reject tSc) largest (continued) SYSTEM 80+ B3.8-14 ,,
~ Amendment I 16A.11-14 December 21, I990
WM -6 16 A.6st i This SR provides verification that the level of fuel oil in the day tank [and engine mounted tank) is at or above the level at which fuel oil is automatically added. The level ( is expressed as an equivalent volume in gallons, and is T*T I selected to ensure adequate fuel oil for a minimum of 1 hour ., of DG operation at full load plus 10%. The 31 day Frequency is adequate to assure that a sufficient ( supply of fuel oil is available, since low level alams are i \ provided and unit operators would be aware of any large uses of fuel oil during this period. i j SR 3.8.1.5 1 i Microbiological fouling is a major cause of fuel oil j degradation. There are numerous bacteria that can grow in j
! fuel oil and cause fouling, but all must have a water ;
environment in order to survive. Removal of water from the ! fuel oil day [and engine mounted] tanks once every (31] days eliminates the necessary environment for bacterial survival. This is the most effective meens of controlling pg microbiological fouling. In addition, it eliminates the i potential for water entrainment in the fuel oil during DG cperation. Water may come from any of several sources, i including condensation, ground water, rain water, I contaminated fuel oil, and from breakdown of the fuel oil by l
- bacteria. Frequent checking for and removal of accumulated i water minimizes fouling and provides data regarding the j watertight integrity of the fuel oil system. The
! Surveillance Frequencies are established by Regulatory ,jfU i Guide 1.137 (Ref. g This SR i_s_for-prevent,ive- -Jj maintenance. The presence of water does not necessarily represent failure of this SR provided the accumulated water ; is removed during the performance of this Surveillance. ' J d l
h kN (6 4 ll-14 St. 3. t. t. J. b This Surveillance demonstrates that each required fuel oil transfer pump operates and transfers fuel oil .from its ' { associated storage tank to its associate / day tank. This is required to support continuous operation of stendby power , sources. This Surveillance provides assurance that the fuel 1 i oil transfer pump is OPERABLE. the fuel oil piping system is i intact, the fuel delivery piping is not obstructed, and the M controls and control systems for automatic fuel transfer systems are OPERABLE. r The frequency for this SR is variable, depending on individual system design, with up to a [92] day interval. j i The [92) day Frequency corresponds to the testing (fk, ,, requirements for pumps],0hitaines_i;;_thiASMi_.C m , - ' /,.
- Sectier ?! (Sf.12); however, the design of fuel transfer -d". '. # . g.,,
systems is such that pumps will operate automatically or 4 must be started manually in order to maintain an adequate g , .r j volume of fuel oil in the day [and engine mounted] tanks i during or following DG testing. In such a case, a 31 day Frequency is appropriate. Since proper operation of fuel transfer systems is an inherent part of DG OPERABILITY, the Frequency of this SR should be modified to reflect i _ ndividual designs. q _ 9 i 5 3. T. I.'1 .
}wf L-d v s J ,, I
/
% sa s. r. i. 2 -
i
.. t, , S .,- . i i
4 t 5
CESSAR W L mt l 1 J AC Sources - Operating B 3.8.1 BASES 9 4 SURVEILLANCE SR 3.8.1.1(continued) REQUIREMENTS (continued) single load without exceeding predetermmed voltage and frequency limits, 4 which maintains a specified margin to the overspeed trip. ne largest single - load on the emergency buses corresponds to a Component Cooling Water i-y Pump (1250 BHP,1037kW) (Ref. 4). As required by IEEE-308 (Ref. i _ the load rejection test is acceptable if the increase in the speed of the diesel does not exceed 75% of the difference between nominal speed and the
. overspeed trip setpoint, or 15% above nominal, whichever is lower. His,
,,. represents 63 Hr., equivalent to 75 % of the difference between nominal speed
.' ? p'd the overspeed trip setpoint.
<* . -tC s \
'# ./ 'fhe time, voltage, and frequency tolerances specified 9 in 5R ...
J ', i f 3 1
- 'i fe e are derived from Regulatory Guide 1.9 (Ref. )bmmendations 3 9
4 * " p' .
- s ')g, ' 4.S. L'ffor respons_e during load sequence intervals.j ne vo
~
. / ' *( ?
specified are consistent with the jes, igd rsge of the equipment powered by 6 F-
~
4 '
' , the diesel generator. SR 3,8.1.I. correspoop to the maximum frequency
,y s g , excursion while SR 3.8.1.f.b and SR 3.8.11.c are steady state voltage and
. - .'( .s a frequency values that the system must recover to following load rejection. ,
'8' He 18-month Frequency is consistent with the recommendations of )
Regulatory Guide 1.108 (Ref. )f). 9 pg g 9~_._..~...,.. -- SR 3.8.1 A lo his/urveillance demonstrates the diesel generator capability to reject a full load without overspeed tripping or exceeding the predetermmed voltage j limits. He generator full load rejection magoccur due to a system fault or l inadvertent breaker tripping. His 4urveillance verifies proper engine-generator load-response under the simulated test conditions. His test will simulate the loss of the total enaa-ad loads that the diesel generator will experience following a full load rejection and verify that the diesel generator will not trip upon loss of the load. Rose acceptance criteria provide for diesel generator damage protection. While the diesel generator is not expected to experience this transient during an event and continue to be available, this response will assure the diesel generator is not degraded for future applicationsy De 18-month Frequency la consistent with the recommendations of Regulatory Guide 1.108 (Ref.11) (expected fuel cycle lengths). ,
. .. <w a r . . . . .;L. . . g 1,J., f u ;,- <,~~,q & *.r>'
g, g, 7 ,
,,,aI ~ ,tabA,*i t (continued) i l SYSTEM 80+ B3.8 15 .
Amendment O 16A.11-15 May 1,1993
GM4 L / , g g. a a J 16 I In order to ensure that the DG is tested under load conditions that are as close to design basis conditions as possible, testing must be performed using a. power factor s (0.9] . This power factor is chosen to be representative of the actual desi would experience. gn basis inductive loading that the DG Te h This SR is modified by two Notes. The renon for Note 1 is ' that during operation with the reactor critical, perforlmance of this SR could cause perturbations to the electrical , distribution systems that could challenge continued steady ' state operation and, as a result, unit safety systems. Note 2 acknowledges that credit may be taken for unplanned events that satisfy this SR. [ In order to ensure thr' the DG is tested under loed conditions that are as close to design basis conditions as possible, testing must be performed usinii a power factor s [0.9) . This power factor is chosen to be representative , of the actual desi i would experience. gn basis. .,inductive loading that the DG .
,,, ,, ,,;q g ace M. As-f ,$ 5a f ( sh b l',Y j,][ 0[~ _
l
'This SR is modified by two Notes. The reason for ote 1 is that during operation with the reactor critical, performance of this SR could cause perturbation to the electrical distribution systems that could challenge continued steady state operation and, as a result, unit safety systems. '
Note 2 acknowledges that credit may be taken for unpla.nned events that satisfy this SR. ; i 1
- CESSAR Einbio,. ~
l l AC Sources - Operating B 3.8.1 BASES i l0 SURVEll. LANCE SR 3.8.1.4 (continued) , REQUIREMENTS I (continued) rveillance is modified by one Note. %e Note pro ~ ormance ! of this - in MODES 1, 2, 3. 4 . erformance of this L"g j 4 surveillance could resu rturba ' e electrical distribution system j and cause a challenge u y-state operation in MODES 1 and expose unn nsk in Modes 2,3,4 fore, this surveillance ; i m3st performed in MODE 5, or when no fuel is m tor vessel. l
' l SR 3.8.1111 g.L t . 4 7 l
As required by Regulatory Guide 1.108 (Ref. .My, this 9 [ 9 , eillance demonstrates the as-designed operation of the standby power sources during loss of the preferred offsite power source. His test verifies all actions encountered from the loss of offsite power including shedding of the non- ) essential loads and energization of the emergency buses and respective loads l from the diesel generator. It further demonstrates the capability of the diesel I I generator to automatically achieve the required voltage and frequency within the specified time.
- ne diesel generator automatic start time of'8 seconds is derived from
! requirements of the accident analysis to respond to a design basis large break LOCA. He minimum steady state output voltage o 3744) volts is 90% of , the nominal 4160 volt output voltage. His value, whi is specified in ANSI CS4.1 1982, allows for voltage drop down to the termmals of 4000 volt rated e motors whose minimum operating voltage is specified as 90% or 3600 volts. It also allows for voltage drops to motors and other equipment down through the 120 volt level where minimum operating voltage is also usually specified ! as 90% of nameplate rating. He specified maximum steady state output voltage o volts is equal to the maximum operating voltage specified for 4000 volt rated motors (+ 10% of motor nameplate rating of 4000 volts). It ensures that for a lightlyloaded distribution system the voltage at the ternunals of 4000 volt motors will be no more than the maximum rated operating voltages.
)
1 (continued) SYSTEM 80+ B3.8-16 Amendment O 16A.11-16 May 1,1993
1 4 CESSAR Enum.
~
l l I l l i i AC Sources - Operating l j B 3.8.1 i j BASES l il SURVEILLANCE SR 3.8.1.i(continued)
- REQUIREMENTS 6 .
] j (continued) The specified minimum and maximum steady state output frequecy of the diesel generator is 58.8 Hz and 61.2 Hz, respectively. ' Ibis is equal to pif'",[k - l' y, t >M' t 25 of the 60 Hz sominal frequency and' is derived from the recommendations given in Regulatory Guide 1.9 (Ref. 2) that the frequency T Jt i should be restored to within 2 % of nominal following a load sequence step. The surveillance should be continued for a rainimum of five minutes in order g/ j . l to demonstrate all starting transients have decayed and stability has been l i achieved. i For the purpose of this test, the diesel generators shall be started from standby conditions. Standby conditions in this case means the diesel engme q coolant and oil are being continuously circulated and temperature maintained , consistent with manufacturer.pcommandations. j g q.A.w pmwy. 7 d The Frequencyis consistant sith,the recommandam of Regulatory Guide . 1.108 (Ref.11)7 and takes into consideration plant conditions required to < I perform the surveillance, and is intended to be consistant with expected fuel l
~ ~ ~ ~ ~
l cycle lengths. w __ This surveillance is modb by three Notes. The first Note permits as p# I i engine pre!ube period $rior to diesel generator startag to minimize wear on. moving parts which are not lubricated unless the engine is operating. The! Jp. g# , second Note prohibits performance of this surveillance in MODES 1,2,3.en\- _ - ' ? 4 or-fr.. Performance of this fhrveillance requires' that offsite power be
- removed from the 4160V emergency buses which will perturb the electrical i distribution system and could challenge safety-related equipment. %erefort
- ;
3 3 s ~. m. _ - 9 g ,-- ' i M O Z s - A a n d b b i
'Mr d ' . M %
e-- - - *a " ~ '- The third" A'.!r: 7.;. .--l-
. q_:4-l. l. -- -. -
- i on h mefasesel -.b 3
p .;,.. Q( sw/M y ibt mo% e.--h 1L.t s*/.cf's 1k. s St.. i SR 3.8.00 !>- 1 I This surveillance demonstrates that the diesel generator automatically starts, . 2 and achieves the required voltage and frequency within the specified time ((E) / J , seconds) froatthe design basis activation signal. (It further demonstsstes that i during a LO'OP event, the diesel generator load sequences restast equipment j f l
%d
- )c v , :
l (continued) 4 SYSTEM 80+ B3.8-17
- Amendment O I
! 16A.11-17 May 1,1993
j CESSAR !!.Wicui: d i l i l J . I i l AC Sources - Operatag B 3.8.1 . l
, BASES l 3
i t%-
- SURVEILLANCE SR 3.8.1.10 (continued) l REQUUIREMENTS (continued) that was deenergized as a result of the LOOP. The five-minute pened provides sufficient time to demonstrate stability. The basis for the time, b"' p j voltage, and frequency tolerancos specified in this surveillance are discussed in the Bases for SR 3.8.1.1L,ll . } M,.yl3 - . ,
i i y$ ev'* !
'l
~
f For the purpose of this test, the diese! generators shall be started from ./ /' l standby conditions. Standby conditions in this case means the diesel engine -c l J coolant and oil are being continuously circulated and temperature maintained 1'N 34 consistent with manu recommead=eions. M/$ *>'I i l The Frequenew[ rveillance the w is based ce engineerug judgment taking T Yh?e, i into consideration thMet conditions required to perform the surveillenop uCh " i and is intended
- to be consistent with expected fuel cycle learths. W
.c 4 .. u d.,vh w c we*%1 ro t.n.ea r.uwm o , f , v% Ws n. % & $4 as . ' A"'f 'N j 'T1us ifurveillance is modifie%d by Notes. ret 14ote permits en - 6 *@, -
l engine prelube period prior to diesel generator starting to minimias '* /~ ' wear j moving parts which are not lubricated unless the engine is operating. The second Note prohibits performance of this surveillance in MODES tr4r+, Z. .
-t = 0. Performance of this surveillance --- d- the - *: *- 5
. C"g Ls sa- p4erV us g.. .- g g a.....w.. y ,, g. .. -y.- 9.- 7 .- l 4 % JetR4 J dal,A.~ eu .ro, -- '? rd could challenge continued steady-state operatsoas.
- p. At- m.- x, n . - :n---- i g.- " :- rg = e- a ;_-
1 inineb =r'~ - ' The third g6te,aHowesonalibration of indivsdual
._...:--_.._3 .-
L ; ,-. n.. Y be furs
+ r C4.24 L f Af any(;
t' j SR 3.8.1.M Se**/.=ml eae/stu u (/ R.i i/. j i j ce demonstrates that the diesel generator automa ly starts and achieves the Itage and frequency within afied time (20 seconds) from the design basis 'on si { signal) and operates l , for 2: five minutes. The five-minu provides sufficient time to j 1 demonstrate stability. The or the ti , Itage, and frequency 1 tolerances specified ~ surveillance are discussed in Bases for SR 3.8.1.9. SR 3 . 1.d and SR 3.8.1.11.e ensure that permanes y= -- ^I -- l loads mergency loads are energized from the offsite power sM oo . ; F signal without loss of offsite power. 1 4 u i (continued) I SYSTEM 80+ B3.8-18 i j Amendment O 16A.11-18 May 1,1993 4
- e," +-
CESSAR n'nnemm I I i 4 i l i AC Sources - Operstmg , B 3.8.1 1 BASES j l SURVEILLANCE SR 3.8.1.11 (continued) i REQUIREMENTS l
- (continued) F the purpose of this test, the diesel generators shall be startel from/ i j stand y conditions. Standby conditions in this case maans the diesel en[me j
- coolant and oil are being continuously circulated and temperature maintamed consistent with ufacturer recommandations. /
4 The Frequency of the surveillance g is based on enginee ' / 4 into consideration the plant conditions required to rform the survedlance 4 and is intended to be consistent with expected cycle lengths. I This surveillance is modified by otes. De first Note permits an engine prelube period prior to diesel rator startmg to minimise went on moving parts dich are not lub ' tod the engine is operating. De second Note prohibits perior of this eillance in MODES 1, 2, 3,
- 4, or 6. Performance this surveillance uires that certam Safety Injection (SIS) funct' be disabled (e.g., to eat injection into the
- reactor vessel) g could challenge continued -state operations. l Ther-fore, thireurveillance must be perfermed in MODE r when no fuel i is in the tor vessel. The third note allows recalibrati f individual
- sequ timers to suffice for retest requirements. This reduces r on the j di generators.
SR 3.8.1.W 19 l In the event of a design basis accident coincident with a loss of offsite power (LOOP), the diesel generators are required to 'supply the necessary power to ! ESF Systems so that the fuel, Reactor Coolant System, and containmant j design limits are not exceeded. ;
. This survei!!ance demonstrates the diesel generator operstion as discussed in I the Bases for SR 3.8.1.11 during a LOOP actuation test signal in conjunction
- "M witn an Est actuation signaw (The Frequencyfis consistent with the
~
*kF~ %')
- recommandations of Regulatory Guide 1.108 (Ref. Mand takes into l consideration plant conditions required to perform the hr-andis._
intended to be consistent with expected fuel cycle lengths. l
. In lieu of actual demonstration of cor.. *ction and loading of loads, testing that adequately
! sht .c *he capability of the DG system to perform these ! funtt: a.. is acceptable. This testing may include any 4 series of sequential, overlapping, or total steps so that the entire connection and loading sequence is verified. B3.8-19 l S%M 80+
2' Amendment O I6A.11-19 May 1,1993
j CESSARankm. 1 j i 4 l 1 2 l > l AC Sources . Operating i B 3.s.1 ; i ! , BASES
- 19 M3 A u, p 4m .--A.4-w i SURVEILLANCE SR 3.8.1.12 (continued) gL 3, W j REQUIREMEh'TS W 4 (continued) ' Ibis str,t ilbec is mopie'd by three Notes. The first Note permits an i engine prekin priodtrior to diesel generator starting to minimize wear on 3
j j h.l [ d' . ., $ , movia.3 v.ru which an: not lubricated unless the engine is operating. The secon6 Nete. prohibits performance of this surveillance ir. MODES 1,2, 3.e e F' 4 ee.+.. Performance of this surveillance requires that offsite power be
- j. removed from the 4160V emergency buses which will perturb the electrical i distribution systrm and could challenge continued steady-state operation and l safety-related equipment. f.'s, xM !!! ' :^ : z . . . -
.2 ;., L.-
3 f f r":f ' : . u ,= --" : ,:-t: '._
- .= ^- . '). 7 .Jm.. J
, _.._2..._. _-.u g ;,, = = , ,y ,,,g,___-__
- *eseek 'Ibe thirdfoie _'L-. . '
- L.... .'; J...J 4 m ;._. .-
.se r z ;; ; . - .n- .n.:. ..y ___- y ,3 _ ; _- .u i f r '.; r m ' - %L - _ u.. . y J L 41 .._ g - -
4 I " ' SR 3.8.1.13 , , ,jys <.
- p. wqr s..v . + j 1 's sutveillance demonstrates that diesel generator non-c protectivYe Ka-i 'ons (e.g. high jacket water temperature) are bypassed as a result of anO i" /,,.-ESF actuation test signal. It also verifies that critical protective Tusciians g
g\ldf~ , tengine overspeed, generator differential curvest, generator voltage controlled l l ,,,.t.' l y' J;,'{;? ',overcurrent,_and substantial damage lowtolube
~
&e'disel oil generator pressure) unit.trip Thethe dieseltrips non-critical generator are to avert I '
bypassed during DBAs and provide an alarm on an abnormal engine condition. This provides the operator with sufficient time to react appropriately. The diesel generator availability to mitigste the DBA is more
- critical than protecting the engine against minor problems that are mot j i==tiately detrimental to emergency operation of the diesel generator.
[ The 18-month Frequen y-k -- -"r" -:1 9 -:- r '= ' -- S ! f u , - _ - - _. . d;i;; MODE' 5 "- r au t i- eh, =are - ' 4 and is based on engineenng judgment taking into consideration plant l I conditions required to perform the surveillance, and is intended to be4s ""*~'* j ' A4 ( ! consistent with en w....s. ~. P,*cled . i,fuel- t ,lengtba. ?#;, .3..J .ya r1n
/F o Id,1. .,.-< <-.y
<M:<,.
nse . 5 m.s,s A.-vv w e._.n.g r .g$ I e ut a o es 4 < y h % p e~ + t. & ,- n-d l
- ) Tliisfurvei!!an.ce is smodified by est Note. This Note protubits performance '
1 l j of this surveillance in MODES If ', 3, 4 or W. Performance of this ! surveillance results in diesel generator inoperability and could challenge i i safety-related equipment. Er':r, S;;. c- m :- S , '.._ 'i j -MODE f :: 1tx :: Ed i: :- S . J~ ' Joft 2 l l 6 dqse,de h as % f g, J h La ls.]g i fue ,,p is,,,,aj ' l ruwts w f .sehls fLh12., '
/
(contioned) ! i i SYSTEM 80+ B3.8 20 i J i Amendmait O j 16A.ll-20 May 1,1993 i
i ! CESSARE!Sh met i i l i l ? 1 i 1 I i l ' AC Sources - Operatag i j B 3.8.1 j 4 l l BASES .I j SURVEILLANCE SR 3,B.1.14 g 1, A * ($i j ! REQUIREMENTS r 7' j (continued) Regulatory Guide 1.108 (Ref. JQ, requires de-aastration coce per 18 . 1 months that the diesel generators can start and run continuously at full load : ! capability for an interval of not less than 24 hours, of whiebMbours ase et_ h2,- 2 1, load equivaleciEthe two hour rating of the diesel. De diesel starts for th
^
g ; surveillance can be performed either from cold, standby or bot conditions. l ne Frequency is consistent with the reco==aadations of Regulatory Guide j 1.108 (Ref.11), and takes into cocaideration plant conditions required to ' perform the surveillance and is intended to be consistent with expected fuel # / ~' .
O e'- 4 #
t cycle lengths. % F.7. Ju -} /L **4' m o $" "" **F."f 4~*/i '~a - Q* /* ? o * , x yr c +; ini<. .t. 42. ,v., r- w c o' r . s- ' ! 3 e load band is provided to avoid routine overloading diesel i gene Routine overloading may result in more uent teardown l bWI O mspections rdance with vendor reco==eadat in order to ==laemia j diesel generator ILITY. This surveillance is ' modifi Notes. De first Note allows
- momentary transients due to gin loads to not invalidate the test.
- he waad Note prohib' rformance of eillance in MODES 1,2,
- 3, 4 or 6, since ' results in a loss of
- the diesel
} generator site power for an extended period of time. 's increases i the ri f a loss of all AC power. Derefore, this surveil be l ormed in MODE 5 or when no fuel is in the reactor vessel. l 1 i SR 3.8.1.15 l l His surveillance demonstrates that the diesel engiac can restart from a bot 4 condition and achieve the required voltage and frequency within 20 =arands. 1 ne 20 second time is derived from the requirements of the accident analysis - j to respond to a design basis larp break LOCA De bases for the voltage j and frequency tolerances are discussed in the Bases for SR 3.8.1.% ti. 'j f t i 1 l a 4 l (continued) ! SYSTEM 80+ B3.8-21 l Amendment O l 16A.ll-21 May I,1993
kM-T -fu [ (6 M/f- 7-( 4 , In order to ensure that the DG is tested under load conditions that are as close to design conditions as possible, testing must be performed using a power factor of s (0.9) . This power factor is chosen to be representative of the actual desi 3 would experience. gn basis inductive loading that the DG The load band is provided to avoid routine overloading of the DG. Routine >overlo& ding may i result in more frequent teardown inspections in)accordance t9 with vender recomendations in crder to maintain DG OPERABILITY.
/'
I ' This Surveillance is modified by three Notes. Note I states i that momentary transients due t'o changing bus loads do not invalidate this test. S'ailarly, momentary power factor 4 1 transients above the power factor limit will not invalidate the test. The reason for Note 2 is that during operation f with the reactor critical, perforinance of this Surveillance could cause perturbations to the electrical distribution systems that could challenge continued steady state ' i operation and, as a result, unit safety systems. Note 3 . acknowledges that credit may be taken for unplanned events that satisfy this SR. , j j, g _ ,u d. N +
, pi; j ' . 5 f, ..-J .' - fv7","
, q. , 4 S. w. d .^<
r s G f /* T Mi' - f Qj * *j;'$', ,. , 2,..t & Ohb " " " '~~ ' ' l.';Ui].,?.D h 4 & e/1~ - i i e n 1 4 J
i 1
- CESS AR HL"tmt.t.
1 1 ). AC Sources - Operatag _ _ _ ,B 3.8. m -
/
( J ' #). I, ,j' ' F' BASES .m' a7 JM w.m.m'cci g M.e'b : '?;F I (ynr , SURVEll LANCE SR 3,8.1.15 (continued)
- REQUIREMENTS b &,s. F ',
trates the diesel gen tor capabilitYto' respoed to 1 (continued) His furveillance de accident signals 'le hot, such as subsequent to shutdown from normal Jurveillancesj De load band is provided to avoid routine overlanding of the diesel _generatorgouttne overloads may result in moreTroquent leerd@trs
)
[ inspections in accordance with vendor _recommandations in order to main _tain
~
i (dieselRenerator OPERABILL the recommendations oibgulatory Guide 1.108 [.(Ref.hg)r /#
-Tliis)urveliance is modified by? wee Notes. He first Note requires this ** i l 4rveillance be performed within five minutes of shutting down the diesel %': t #* -
i egenerator after it has operated for 2:..two hours at fully _ loaded ~=d% g, % v b. ,,
)jne two-hour time limids based on the manufacturer's recommandation Tor I '
rP' J p >M7 ,
*' achieving bot conditions. He second Note permits an engine prelube period I e Ov'p ' ' h"C' i
g b; J , .4
; ,f ' ;.
rior to diesel generator starting to minimim wear on moving parts which are lubricated unless the engine is operating. m E !.L[Clows J s f ,j.s hg c { G, f k'. ,r ( q . , , , j f' \r", / c g
- momentary transients due to changmg ous 15Es to not invahdate the test
< /
h,, p '
,}
' ', o..J < SR 3.8.1.16 p d ,5N g A,(N .
a N< ~ c.
' r"j
} j As required by Regulatory Guide 1.108.(Ref. H), this surveillance assures .
' ,, C i that the manual synchronintion and(manual load transfer from the diesel
,. generator to the offsite power source can be made and the diesel generator l - Q' can be returned to ready-to-load status when offsite power is restored. It also ensures that the auto-start logic is reset to allow the diesel generator to reload
- if a subsequent loss of offsite power occurs De diesel generator is considered to be in Mady-to-loadVstatus when the diesel generator is at l rated speed and voltage, the output breaker is opes and can receive an auto-
- close signal on bus undervoltage, and the load sequence timers are reset. ^
d hf ~ 08 V ne Frequency is consistent with the recommandations of Regulatory Guide y j 1.108 (Ref. H) and takes into consideration plant conditions required to t i perform the surv illance. 2.a.L')> f.n
.l 4
(continued) SYSTEM 80+ B3.8-22 Amendment I 16A.11-22 December 21,1990
-mm v w-m,,.
d i CESSAR H%ficue,t J j ' i i 1 i 1 l AC Sources - Operating - . ] B 3.8.1 BASES SURVEILLANCE SR 3.8.1.16 (continued) REQUIREMENTS
- (coctinued) y rveillance is modified by one Note. N Note prohibits perfornience
- of this sur$ in MODES 1,2,3,4 or 6priormance of this j () test, the offsite circuit remov m service and switching may
] result in a loss of power to t emergency bus. This would i challenge contin -state operation and lenge safery-related
- systems. ore, this surveillance must be perfo E 5 or .
j no fuel is in the reactor vessel. ! SR 3.8.1.17 j Demonstration of the test mode override ensurus that the diesel generator availability under accident conditions will not be compromised as the result
- of testing. Interlocks to the LOCA sensing circuits cause the diesel generator ,
to automatically reset to ready-to-load operation if a LOCA actuation signal ' is received during operation in the test mode. Ready-to-load operation is i defined as the diesel generator runmng at rated speed and voltage with the
; diesel generator output breaker open. These provisions for aplomatic 1
switchover are required by IEEE 308 (Ref.14)} /t1 L 1.M 2 /* t) MMk } l.108 requency is consistent with the recommandations of Regulatory Guide
. II) and takes into consideration plant conditions to perform the ' lance, and is intended to be consistent wi ted fuel cycle lengths.
4 This surveillance is modified by 's Note prohibits performance
- of this surveillance in MODES , , 6. Performance of this test has trical distribution the potential toperturb m challenging continued steady-state ope This test also requires disabhn rtain SIS functmas (e.g., to eat injection into the reactor vesse!). brefo 's test snust ormed in MODE 5 or when no fuel is in the reactor v .
l 1 SR 3.8.1.18 O} ft*1,x.5'; 1 As required by Regulatory Guide 1.108 (Ref. M),#each diesel generator is required to demonstrate proper operation for the DBA loading sequence to ensure that voltage and frequency are maintained within the required limits. Under accident conditions, prior to connecting the diesel generators to their 3 appropriate bus, all loads are shed except load center feeders and those motor I (continued) SYSTEM 80+ B3.8-23 Amendmesit O May 1,1993 4 16A.11-23
BAA~r
- Ap n.4.u-2s This SR is modified by two Notes. The reason for Note 1 is that perfoming the Surveillance would remove a required An offsite circuit from service, perturb the electrical i M J l' distribution system, and challenge safety systems. Note 2
, acknowledges that credit may be taken for unplanned events that satisfy this SR. . i l 1 The requirement to automatically ener ize the emergency loads with offsite power is essential y identical to that 'of l SR 3.8.1.12. The intent in the requirement associated with SR 3.8.1.17.b is to show that the emergency loading was not affected by the DG operation in test mode. In lieu of . actual demonstration of connection and loading of loads, i testing that adequately shows the capability of the i emergency loads to perfom these functions is acceptable. l This testing may include any series of sequential, ! a overlapping, or total steps so that the entire connection 4 and loading sequence is verified. l 1
' i
.; The [18 month) Frequency is consistent with the recomendations of Regulatory Guide 1.108 (Ref. 9), i paragraph 2.a.(8); takes into consideration unit conditions required to perfom the Surveillance; and is intended to be t consistent with expected fuel cycle lengths. This SR is modified by two Notes. The reason for Note 1 is that performing the Surveillance would remove a required offsite circuit from service, perturb the electrical distribution system, and challenge safety systems. Note 2
' acknowledges that credit may be taken for unplanned events
_ that satisfy this SR. _ ! i i ! j i i 1 4
, i CESSAR nairimi:,8 i i ! d I 1' AC Sources - Operating l 3 3.8.1 -i d BASES l i l SURVEILLANCE 1R 3.8.1.18 (continued) REQUIREMENTS (continued) control centers which feed Class IE loads (referred to as pennanently-l ! connected loads). Upon reachist 90%. rated voltage and frequency, the- i I diesel generaton are then -:---- - ^-' to their respective bus. Imeds are then ' sequentially connected to the bus by the automatic load sequencer. ne sequencing logic. controls the permissive and starting signals to motor , i breakers so as to prevent overloading the diesel generators due to high motor l l" str., ting currents. De 10% load sequence time interval tolerance ensures sufficient time exists for the diesel generator to restore frequency and voltage tions regarding / j prior to applying ESF equipment time delaystheare next load and not violated. that safety Reference analysis/ assump/ pid summary of the automatic loading of ESF buses. # __ _ = i ._rn~e mu r. '-__ :- ;;;' 3 __ _ ___t__ ;;. ,
. ' 1. a +- -.:: T = i .- -y ,_
j e4 T p ~ .n . f e u *} .4 - 'y)
! The Frequenc/is consistent with the recommendations of Regulatory Guide y .'
1.108 (Ref.1f0 End takes into consideration plant conditions required to ) j perform the)Iarveillance and is intended to be consistent with expected fuel cycle lengths. ] nis farveillance is modified by two Notes. ne first Note prohibits j performance of this /urveillance in MODES 1. 2, 3, or 4. Perfonnance of j this test requires the inoperability of certam ESF equipment and has the 1 j potential to perturb the electrical distribution system which would challenge l continued steady-state operation.- T ic:. "E: 'd " S p '::: ' E Mens 5r-t= = M i:i: - - - - - ne second F-- "- -. . l -
- - 'M '% f_ '= ^ :^' ,. _. ;_ _. _T_ _" _ . _ '; . . k . - ^ . {-.
^;. \
. n. _ . . . -.-. -
_ . _ _ . . w,j , y a v Q SR 3.8.1. g 2 D s'$ eds M ad.',G L*, SL his[rveillance demonstrates that the diesel generator starting _',- '-- = has not been compromised. Also, thishilance demonstrates that each l= engine can achieve proper speed within the specified time when the diesel j generators are started simultaneously. De ten-year Frequency is Mm j with the recommendations of Regulatory Guide 1.108 (Ref, and
.;I ,
Regulatory Gade 1.137 p (Ref.12)) (9' g , } , f , } f:1,/ U 1 (coctinued) SYSTEM 80+ B3.5-24 l Amendment O i May 1,1993 16A.11 i
, . ._m., - . . . , , - . _, r
CESSAR !!M?tum.t l I i ! - AC Sources - Operating
- a 3.8.1 i
BASES 2 l 4 l i SUAVEILLANCE SR 3.8.17'(c. ontinued) I l l REQUIREMENTS C^ l- (continued) This heillance is modified by a Note which allows an engdprelube l period prior to diesel generator starting to minimise wear on smoving ppris which are not lubricated unless the engine is operstag.7 g s W , _ , -A (c. . Diesel Generator Test Schedule I p, I, t "
&- r' 2 ' '
j The diesel generator test schedule (Table 3.8.1-1)/ ' Ibe ' i recommendations of Revision 3 to Regulatory G" d. [ The { purpose of this test schedule is to provide timely test data to establish a ~ j confidence level associated with the goal to maintain diesel generator '1 reliability above 0.95 per demnod . . , Regulatory Guide on di generator unit abould , l leasty every 31 days. Whenever a di '1 { exper%c+2 - or more valid failures in p lastM , the time ,/ ^ /,A between tests is to seven days. Tao failures ' mands is a s ((/ I i failure rate of 0 , the threshold of e diesel generator U l l performance, mod bence be an early tion of degradation of the ,. 1 ! reliability of a diesel 3 tor. o , wheyidered in the liphs of a long history of tests, fait last 2p demneds sosy only be a ] statistically probable dist ' son of events. Increasing the test ! frequency will allow a more timely accumu of additional test data ' )
, ;' upon which to judgeset of the reliability of the I geoerator. The' l inc .
frequency must be maintamed until seven %ve failure j f
.p have been performed. ,, . , .
l , 9 m _w - l ',-.
' p, {l g/,, Regulatory Guide 1.108 (Ref.11) esfines the diesel generator unit as s
j fy Ng s W, . ' , , , ystem k(,'0 i , consisting up to the supply, fuel oil of the lyengine, ion air system,generator, cooling water system, lubricating oil system, ,./ J
~
i ..'- ,, r J F
, 4 p)r's starting energy sources, auto start controls, sonousi controls, N coerstor breaker looperabilities'of diesel generators caused by failures of b,. and the die
- 3 ,1. ,
.(,,,.s/,.
't, fi
- ' . .H uiposot that are not part of the defined diesel generator unit are
~
3 v ! g ,.' ('; tegorized as invalid failures (o accordance with Regulatory Guide 1.108 g i d'.h,Q('>since the failure would age have prevented the diese r# i
^
i' .Ih)[,,*k.i f * $;4q*jjbrveillance
' performing /equency of fbe diesel generator th its intended safety function. As such, they do not impact Ild I
l
- . as 0. .
.g .
s<.- w . 2' &r.s
. -e
! ['3/,$,\ g" .>g ,V s , ! [ '# (continued) l 7l$p% YSTEM 80+ [ B3.8 25 ' Amendment O
- 16A.11-25 May 1,1993 i
CESSAR Enn"icuc. l l . ? AC Sources - Operating B 3.8.1 BASES g c f f 5* o f f FdJA r
,REFfiOENCES 1. General Design Criteria 17,
- Electric Power Systems."
f 2. Regulatory Guide 1.9,
- Selection, Design, and Qualification of
_% Diesel Generator Units Used as Onsite Electric Power Systems at y Nuclear Power Plants," Revision 3 (DBMT) [' 7*
/ \
( '
,,i, f c;-
'3. CESSAR-DC, Section 8.3.1.1.4.
(( CESSAR-DC Tables 8.3.1-2, and 8.3.1-3. l l' l*, g; 4. bde tes l 4 t-c 4,,- F ' AS. 5:: rn n=, :: C : ... Tw. , 5=emem on T: -t !
, f ! ',) L ,
y.,,.M' Sgn -*% ! .;r-~-* re u& re.. Rs.,*, T1;_., c ,g, -
- 1. =.-
l . 6. CESSAR-DC, Section 8.3.1.4.
- 7. CESSAR-DC, Section 8.3.1.2.1.
y.8 Regulatory Guide 1.93,
- Availability of Electric Power Sources,"
December 1974.
- 9. Generic letter 84-15, " Proposed Staff Actions to improve and ,
i Maintain Diesel Generator Reliability " July 2,1984.
)
- 10. 10 CFR 50, General Design Criteria 18, *Inspectioc, ad Testing of Electric Power Systems."
,1 1. Regulatory Guide 1.108,
- Periodic Testing of Diesel Generstor Units Used as On-site Electric Power Systems at Nuclear Power Plants,* August 1977.
- 12. Regulatory Guide 1.137,
- Fuel Oil Systems for Standby Diesel Generators,* October 1979.
- 13. CESSAR-DC. Sv. tion 9.5.6.3.
a
- 14. IEEE-308 1978, *lEEE Standard Criteria for Class 1E Power Systems for Nuclear Power Generating Stations."
J
- o .
/
J k SYSTEM 80+ R3.8-26 Amendment O 16A.11-26 , May 1,1993 4
9 CESSARHincu-D 16A.11.2 B 3.8.2 AC SOURCES - SIIUTDOWN AC Sources - Shutdown B 3.8.2 , l . B 3.8 ELECTRICAL POWER SYSTEMS B 3.8.2 AC Sources - Shutdown BASES $ BACKGROUND A desenption of offsite and onsite AC Power Sources is provided in the Bases for LCO 3.8.1,' AC Sources - Operating /' l APPLICABLE MODES 1, 2, 3, and 4, the requirement to have two independent o te SAFETY y po r sources and two independent onsite standby power sources sesel ANALYSES I genera rs) OPERABLE is consistent with the initial assumpti s of the accident alyses and the design requirements and is upon (1) l maintaining least one of the AC and the corresponding D wer sources and associated istribution systems OPERABLE during ident conditions in the event of(1 assumed loss of all offsite or all ite AC power, and (2) a single failure the other AC source. In MO S S and 6, the design 4 D i basis accident (DBA) mptions of an accident A) coincident with a hWD loss of offsite or onsite A power and a single ailure are not required to be met. The requirement to ha one independ t offsite power source and one independent onsite standby po r source PEPABLE is adequate to assure power is available, in MODES 5 d6 when handling irradiated fuel, to systems required to recover from inadvertent draindown of the reactor vessel or a fuel handling acciden e 2). De OPERABILITY of th minimum ified AC and DC (one offsite power source and one site standby pow source) power sources and
- associated distribution stems during shutdow d refueling ensures that(1) the facility can be intained in the shutdown r refueling condition for extended time riods, and (2) sufficient inst tation and control capability is allable for monitoring and maintainin the unit status. He
- CESSAR- only addresses bounding analyses, such th a specific design basis is ot always stated for operation in MODES 5 an . Tbc safety analy s assumptions for a design basis event may not be licable to o tion in MODES 5 and 6.
J
')
(continued) SYSTEM 80+ B3.8-27 . Amendment O . 16A.11-27 May I,1993
l l M -fu IQ,(f.27 i l l j l The OPERABILITY of the minimum AC sources during MODES 5 and 6 ensures that: 4
- a. The unit can be maintained in the shutdown or refueling condition for extended periods; ;
i
- b. Sufficient instrumentation and control capability is
- available for monitoring and maintaining the unit l status; and 4 l c.
i Adequate AC electrical power is provided to mitigate i events postulated during shutdown, such as an inadvertent draindown of the vessel or a fuel handling accident. 13 In general, when the unit is shut down, the Technical I
\
Specifications requirements ensure that the unit has the ; i capability to mitigate the consequences of postulated accidents. However, assuming a single failure and !
' concurrent loss of all offsite or all onsite power is not .
l required. The rationale for this is based on the fact that many Design Basis Accidents (DBAs), which are analyzed in ' MODES 1, 2, 3, and 4, have no specific analyses in MODES 5 and 6. Worst case bounding events are deemed not credible i in MODES 5 and 6 because the energy contained within the l reactor pressure boundary, reactor coolant temperature and 3 pressure, and the corresponding stresses result in the I , probabilities of occurrence being significantly reduced or eliminated, and in minimal consequences. These deviations from OBA analysis assumptions and design requirements during ' l shutdown conditions are allowed by the LCO for required ' systems. During MODES 1, 2, 3, and 4, various devjation's from the analysis assumptions and design requirements are, allowed i within the Required Actions. This allowance is/in i b 4 i
AC Srurces-Shutdown B 3.8.2 BASES f
/ ), a A. //- 24 APPLICABLE recognition that certain testing and maintenance activities SAFETY ANALYSES bust be conducted provided an acceptable level of risk is 4
(continued) not exceeded. During MODES 5 and 6, perfomance of a significant number of required testing and maintenance activities is also required. In MODES 5 and 6, the activities are generally planned and administratively controlled. Relaxations from MODE 1, 2, 3, and 4 LCO requirements are acceptable during shutdown modes based on:
- a. The fact that time in an outage is limited. This is a risk prudent goal as well as a utility economic consideration.
- b. Requiring appropriate compensatory measures for certain conditions. These may include administrative controls, reliance on systems that do not necessarily meet typical design requirements applied to systems credited in operating MODE analyses, or both,
- c. Prudent utility consideration of the risk associated with multiple activities that could affect multiple systems.
- d. Maintaining, to the extent ractical, the ability to ..
' perform required functions even if not meeting i H0DE 1, 2, 3, and 4 OPERABILITY requirements) with !
systems assumed to function during an event. { In the event of an accident during shutdown, this LCO ensures the capability to support systems necessary to avoid ' imediate difficulty, assuming either a loss of all offsite power or a loss of all onsite diesel generator (DG) power. The AC sources satisfy Criterion 3 of the NRC Policy
; Statement.
I J
OEd~t L l& A4,ll .29 i i , One offsite circuit capable of supplying the onsite Class 1E power distribution subsystem (s) of LC0 3.8.10. " Distribution ' F9 7
) Systems-Shutdown," ensures that all required loads are powered from offsite power. An OPERABLE DG, associated with a distribution system train required to be OPERABLE by :
LCO 3.8.10, ensures a diverse power souN!e is available to provide electrical power support assuming a lois) of the j offsite circuit. Together, OPERABILITY of the required N offsite circuit and DG ensures the availability of sufficient AC sources to operate the unit in a safe manner and to mitigate the consequences of postulated events during shutdown (e.g., fuel handling accidents and reactor vessel - draindown). The qualified offsite circuit must be capable of maintaining rated frequency and voltage, and accepting required loads during an accident, while connected to the Engineered Safety Feature (ESF) bus (es). Qualified offsite circuits are those that are described in the fSAR and are part of the licensing basis for the unit. C o nu -6 '
' ,f W t?,.T*% r p ., , ,
s
; . ,. r: v 'N The DG must be capable of starting, accelerating to rated speed and voltage, connecting to its respective ESF bus.on t
detectionofbusundervoltage,andaccepting)requiredloads. Thissequencemustbeaccomplishedwithin(10 seconds. The
/ DG must be capable of accepting required loads within the g assumed loading sequence intervals, and must continue to operate until offsite power can be restored to the ESF N buses. These capabilities are required to be met from a variety of initial conditions such as DG in standby with the engine hot. DG in standby at ambient conditions, and DG i
operating in a parallel test mode. Proper sequencing of loads, including tripping of nonessential loads, is a required function for DG OPERABILITY.
" e Odc W y p ,-s,y3;hC ,J: <p * . mh<'m ty&1~i4 0'T.*W f- Q:* y M ll4,_j
,,,:.e,diopv s
spr s . . . n. .. h . - 3p c , j ; ; ., . Y . G < t ga &,.-
* ; o, - ,
. . . p u, (,A r1 5- m' \
d Ya: LZfo -
'l
,s f p e ,9 bt f f r
. r .,i t -
c<. M W' - ' tp A **'( W s,
,; C , .14 .
.o, a
Ch55AN ct3Picari:n ' S AC Sources - Shutdown B 3.8.2 BASES LCO Le <' ~ ^MDES 5 and 6 and when handling irradicted fuel *,' one W
' - - x 4 tween the offsite transmission n -
an the onsite Class IE Power Distn'biution4 stem and ependent onsite standby ] power source are required to be 's ensures the availability of sufficient power to er from postulated events in 6 and when handling irradiated fuel (e.g., fuel handling accident, reactor vesse dpind6wn). 1 Inoperable AC Sources do not necessarily result in inoperable components ] (which are designed to receive power from that source) unless specifically
, , dire:ted by Required Actions (refer to LCO 3.0.7).
x.rT U > j Certain diesel generator support systems are addressed in other LCOs. i During inopersbilities in these support systems, inoperable diesel generators do not necessarily result unless specifically directed by Required Actions (refer to LCO 3.0.7). ! 1 APPLICABILITY The AC power sources that are required to be OPERABLE in MODES 5 and 6 and when handling irradiated fuel,.provides assurance that: 6i l I a.,,re n , n ,< .:ae Mic'c s l
- l. w /dequate coolant inventory makeup w,available for the irradiated I fuel,.in the core in case of an inadvertent draindown of the reactor I vesseT,""'US I
- 2. Systems needed to mitigate a fuel handling accident are available,
-end- )
'l Instrumentation and control capability is available for monitoring and i maintaining the unit in a cold shutdown or refueling condition.
AC power
~
requirements for MODES 1,2,3, and 4 are addressed in LCO 3.8.1. AC Sources - Operating." 3, Systems necessary to mitigate the effects of events that can leat! to core damage during shutdown are available; and
)
1 (continued) SYSTEM 80+ B3.8-28 Amendment I 16A.11-28 December 21,1990
CESSARn h io. An offsite circuit would be censidered inoperable if it were not available to cne required ESF train. Alth! ugh two trains are required by LCO 3.8.10 the remaining train with 'h y offsite power avaliabie =ar be ca9 bie of supportine sufficient required' features to allow continuation of CORE ! ALTERATIONS, fuel movement, and/or operations with a potential for draining the reactor vessel. By the allowance of the option to declare required features inoperable, with no offsite power available, appropriate restrictions will be 8 * **~8h"*d "" implemented in accordance with the affected required B 3.8.2 1 features LCO's ACTIONS. , . made3 i ACTIONS A.1n A 1 A 2 iA2 l - ht V +
'ith less than the required AC sources OPERABLE, such that only/one o ' e circuit or one onsite standby power source is OPE - ,the availa 'ty of AC power is degraded and the plant is more tible to ,
situations 'ch may lead to complete loss of AC power. If applicable, C ALTERA110NS and handling of ' disted fuel must be immediately ed. Suspension of these activ' nes shall not preclude completion of mov of a component to a fe position. Also, if applicable, actions must be :sted immediate! suspend operations with i a potential to drain the reactor Iand sequent potential for fission product release. Also,if applicable, etio must be initiatedimmediately to suspend any operations involving posiu reactivity additions. Actions must continue until the operations are . Dese actions preclude the occurrence of the postulated even . 1 D The requirement to immadi aly initiate action to ore the required AC sources to OPERABLE tus is to be continued til restoration of the I i i required AC sources is mpleted. His is to minimize e time the plant is ' in this degraded co tion of potentially (or actually) not ing capable of recovering from e postulated fuel handling accidents or or vessel , draindows ev . 4 e ne Co etion Times are based on engineering judgment g into i consid tion that a time of as short a duratioa as is practical sh d be l
' ed while ensuring that the activities are suspended in a contro i
er. 4 A.21. A.2.2, A.2. % A.1 9, A.2.f, 4.1, 6, E, 6. 3,64 a 6.r hrd 5
- SURVEILLANCE s rovided for SR 3.8.1.1, SR 3.5.1.2, SR
. , SR 3.8.1.5, REQUIREMENTS 4 SR 3.8.1.9, an .1.18 in the B
- O 3.8.1,"AC Sources -
Opersting,are applicable. ormance of the other Surveillance , Requirements of LCO 3 C Sources - ing, are not required to be performed in 5 and 6 and when handling i fuel as their Ls-d" X perio a may adversely affect the reliability of the o y ired j RABLE diesel generator. 2 J 1 (continued) SYSTEM 80+ B3.829 s Amendment I 16A.11-29 December 21,1990
pg g j l 1 i i A.2.1. A.2.2. A.2.3. A.2.4 A . 2. 5. B . I . B. 2. B . 3. B. A . and B.5 . j With the offsite circuit not available to all required I trains, the option would still exist to declare all required features inoperable. Since this option may involve undesired administrative efforts, the allowance for ; sufficiently conservative actions is made. With the 1 required DG inoperable, the minimum required diversity of AC power sources is not available. It is, therefore, required i to suspend CORE ALTERATIONS, movement of irradiated fuel assemblies, any activities that could potentially result in inadvertent draining of the reactor vessel, and operations ' involving positive reactivity additions which would exceed limits specified in LCD 3.1.2 or LCO 3.1.9. The Required Action to suspend positive reactivity additions does not i preclude actions to maintain or increase reactor vessel inventory provided the required SDM is maintained. fW Suspension of these activities does not preclude completion i
- of actions to establish a safe conservative condition.
These actions minimize the probability or the occurrence of postulated events. It is further required to imediately initiate action to restore the required AC sources and to j continue this action until restoration is accomplished in 1 4 order systems. to provide the necessary AC power to the unit safety 1 Notwithstanding perfomance of the conservative Required
- Actions, the unit is still without sufficient AC power .
- sources to operate in a safe manner. Therefore, action must be initiated to restore the minimum required AC power * ,
4 sources and continue until the LCO requirements are ! restored. 4 1 i The Completion Time of imediately is consistent with the required times for actions requiring prompt attention. The restoration of the required AC electrical power sources should be completed as quickly as possible in order to
- minimize the time during which the unit safety systems may be without sufficient power.
3 Pursuant to LCO 3.0.6, the Distribution System's ACTIONS are ) not entered even if all AC sources to it re inoperable j i resulting in de-energization. Therefor ' the Required )
- Actions of Condition A are modified by a Note to' indicate s
l that when Condition A is entered with no AC power to'one ESF bus, the ACTIONS for LCO 3.8.10 must be imediately entered. This Note allows Condition A to provide requirements for the loss of the offsite circuit, whether or not a train de-energized. is : s LCO 3.8.10 provides the appropriate ;
- - restrictions for the situation involving a de-energized train, i
1
& fhkl} ,2G SR 3.8.2.1 SR 3.8.2.1 requires the SRs from LCO 3.8.1 that are necessary for ensuring the OPERABILITY of the AC sources in other than MODES 1, 2, 3, and 4. SR 3.8.1.17 is not required to be met because the required OPERABLE DG(s) is not required to undergo periods of being synchronized to the.
offsite circuit. SR 3.8.1.20 is excepted because starting independence is not required with DG(s) that are not
-1 required to be OPERABLE.
l This SR is modified by a Note. The reason for the Note is to preclude requiring the OPERABLE DG(s) from being paralleled with the offsite power network or otherwise rendered inoperable. With limited AC Sources available, a single event could compromise both the required circuit and l the DG. It is the intent that these SRs must still be c.pable of being met, but actual performance is not required during periods when the DG is required to be OPERABLE. . Refer to the corresponding Bases for LCO 3.8.1 for a ' discussion of each SR. I l 1
.l
v-I CESSAR E!Sincuiza e: I AC Sources - Shutdown ! B 3.1.2 4 i BASES REFERENCES 4 morandum. Dennis M. Crutchfield to Dis ~ tion,
Subject:
Technical Specifications OPERABIUTY equirements, dated l
! Ju ,1985. !
I
- 2. CESSAR-D , tion 15.1 '
- 3. 52 FR 3788, 'm Policy Statement on Technical Specificatio mprovements Nuclear Power Reactors,-
Feb ,1987. j 4 RC Generic Letter No. 88-17, Loss of est Removal. October 17, 1988. i I
.I a
e z i l t
)
/
SYSTEM 80+ O B3.8-30 1
~ Amendment I 16A.11-30 December 21,1990
k i J ! l CESSAR im?,cui:,8 l i l l : i ' i 16A.11.3 B 3.8.3 DIESEL FUEg4ND LUBRICATING OILj AAb STAF-T eM % I t j Diesel Fuel,4m(Imbricating Oil,4 -O Efj i 8 3.8.3 & i B 3.8 ELECTRICAL POWER SYSTEMS i i B 3.8.3 Diesel Fuelend Lubricatine Oil c A Sbh C l l / / v i i BASES ,i i 4
- BACKGROUND Jr 1 ;;;- ar e um,6; r ,___.v__ j i _l i) ." a vii swrmge, h ruel ou siwster capadusties, anc J) n- ou - , ,, (, !
1
==
' ' 2. g l
. M (,;pn'gW ,
Each diesel generator is provided with a storage tank having a fuel mpac'
- CI !
sufficient to operate that diesel for a period of seven days while the generator is supplying maximum post-acci&et load demand g.< *"fj , 1). The J
- maximum load demand is calculated using the assumpfion t;mt two diesel
- generators are available. This onsite fuel capacity is sufficient to operate abe l
j j diesel generator for longer than the time it would take to repleniab the ancite j + supply from outside sources. j 4 i 1000] gallon day tack is provided for each diesel. Each day
/ is
-3WT T a fuel l 3 -
in a separate room in the diesel generator building and
; capacity approximately four hours of full load operation ef.1). Fuel j oilis transfe i
from the storage tanks to the day tank b gravity feed. l During operation of diesel generator, fuel oil driven by the diesel !' engine receive fuel grei -fed from the day and provide fuel to the diesel engine fuel manifol leve! s mounted on the day tank j sutomatically open and close the transfer valve. 4 l
'Ibe level of the fuel supply in sto tank is indicated in the control l room. In addition, alarms, locally the control room, annunciate i
Iow level and high lev the associated day . l I in the unlikely t of a failure in one of the supply , the associesed I i day tank to evel alarm annunciates when the fuel oil g in the tank provi pproximately two hours of full load operation, tb lowing the ope r to take corrective action to prevent the loss of the d' . i Fuel oil is transferred from storage tank to day tank by , 4 l d either of two transfer pumps associated with each storage ' tank. Redundancy of pumps and piping precludes the failure s of one pump, or the rupture of any pipe, valve, or tank to V ~.
- result in the loss of more than one j 0i f Ai! oa;id
- t:-u , # ,y
. r7. :d pipir; er; bceted . ;rgpowe -
4
- SYSTEM 80+ B3.8-31 4
2 Amendment O 16A.1131 May 1,1993
1 CESSAR !!Mrtm.o Each DG has an air start system with adequate capacity for . F-~~ five successive start attempts on the DG withoutl recharging l f i the air start receiver (s). ') { i f Diesel FuelyI.mbncatag OilM Stuty !
- R 3.8.3 g t BASES l 4 ;
BACKGROUND For proper operation of the' diesel generators, it is necessary to (continued) ensure the proper quality of the fuel oil. Regulatory Guide 1.137 (Ref. 2) lli
- addresses the reco==aaded fuel oil practices as supplemented by ANSI l N195-1976 (Ref. 3). De fuel oil properties governed by these Surveillance i 1 Requirements are the water and sediment content, the ha*=='ic viscosity,
) specific gravity (or API gravity), and impurity level. ! I
- ne diesel generator lubrication system is designed to provide sufficaset >
lubication to permit proper operation ofits associated diesel generator under , all loading conditions. De system is required to circulate the lobe oil to the . [ diesel engine working surfaces providesand oil toto theremove excess at best generated by friction during operation.[he system engios surfaces a specified temperature during the Iceg anticipated periods of standby duty. ! l Each engine oil sump is of adequate size to contain all the oil in the engine j ! lube oil system and has an inventory capable of supporting a minimum I ! running time of three days._.nis provides sufficient supply to allow the =
- operator to replenish lube oil from storage facilities onsite. De onsite i j storage in addition to the engine oil sump is sufficient to ensure seven days I !
Q continuous operation.
.MQt j l ?
APPLICABLE
. pi 3cv l he initial conditions of designi basis transient and accidentpyses is l SAFETY CESSAR DC Chapters 6. Engineered Safety Features, and IS, Accident j ANALYSES Analyses, assume ESF systems are OPERABLE. De diesel generators are
! designed to provide sufficient capacity, capability, redundancy and reliability } to ensure the availability of necessary power to ESF systems so that fuel,
- Reactor Coolant System, and contman-mt design limits are not enceeded j nese limits are discussed in more detail in the Bases for 140 Sections 3.2 l
! (Power Distribution Limits), 3.4 (Reactor Coolant System), and 3.6 1 (Containment Systems). I pk 0 408 L5 l ne diesel fuel oil" ya " lubricating oil $rovide the necessary supply
- to support operatik of the diesel generators. ,d (4/ ,l..i 3 j d L #c Pd,9 % k t' i
i i 1
- (continued)
SYSTEM 80+ B3.8-32 Amendment O l 16A.11-32 May 1,1993 __ ______ __ - _ .- . _ _ . ~ , _. , . , . _ _ _ - _ _ , _ . . _ , , _ _ . , _ . _ , ,
P f CESSAR nni"lCATION i Diesel Fuel j and Lubricating Oilg .L-t-: 3 i B 3.8.3 o i BASES ~ LCO Ld E 4 lubricating onfuel oil subsystem is required to be OPERABL available to ensure availab' sufficient the required AC power to shutdown the r and main in a safe condition after an anticipated operational occunerj stulated design basis accident. Diesel fuel oil and oil not within lirmts not necessarily result in inopera .omponents i aless specifically directed by uirei Actions (ref LCO 3.0.7). APPLICABILITY 4 fuel oil subsystem is required to be OPERABLE flicient lubricating oil sup ;Mt be en e associated diesel generator is required t LE (refer to LCGM' ' Wrces - Operatin O 3.8.2, AC Sources - Shutdown). 4 ACTIONS AJ_ the fuel oil level in the day tank low, insufficient oil is available to satis e design basis requirement of supporti o hours of continuous operation. ver, if the day tank I is between [450] and [900] gallons, sufficient 's availabl support approximately one hour of , y continuous diesel generator a short time (one ho is allow tion at fullload conditions. Consequently, estore the fuel level. This one-hour l Completion T is acceptable given w probability of a diesel start require during this time period and the a tic start of the storage , l ransfer pump on low-level.
; f r/ / ~;
M L1 s' With el oil transfer capability inoperable, sufficient fuel oil is available in the day . port two bours ofcontinuous d' - generator operation. Consequently, a sbo (one bour) i wed to restore the transfer capability. His one-hour Time is acceptable given the low probability of a diesel s uring 's time period. Additionally, this , condition is only wed to exist on diesel generator at a time. nerefore, diesel generator will still r full fuel oil transfer capa . (continued) SYSTEM 80+ B3.533 i Amendment I 16A.11-33 December 21,1990
i l MM y lb4.(( '5% i
- 'jg+ 1 i
! 'l LCO Stored diesel fuel oil is required to have sufficient supply for 7 days of full load operation. It is also required to i meet specific standards for quality. Additionally, i 1 sufficient lubricating oil supply must be available to ensure the capability to operate at full load for 7 days, l This requirement, in conjunction with an ability to obtain replacement supplies within 7 days, supports the , j s availability of DGs required to shut down the reactor and to maintain it in a safe condition for an anticipated : i operational occurrence (A00) or a postulated DBA with loss j j of offsite power. DG day tank fuel requirements, as well as ! 7 transfer capability from the storage tank.to the day tank, , are addressed in LCO 3.8.1, "AC Sources-Operating," and ; LCO 3.8.2, ' AC Sources-Shutdown." i 1 The starting air system is required to have a minimum i i capacity for five successive DG start attempts without 1 recharging the air start receivers. j APPLICABILITY The AC sources (LC0 3.8.1 and LCO 3.8.2) are required to { ensure the availability of the required power to shut down
- the reactor and maintain it in a safe shutdown condition after an A00 or a postulated DBA. Since/ stored l diesel fuel i oil, lube oil, and starting air subsystems suppo LCO 3.8.1 and LCO 3.8.2, stored diesel fuel oil, lube oil nd starting.
L j air are required to be within limits when the associated DG) j 4 is required to be OPERABLE. i i l I ! 1 i f I .i .i e
d4y .: c, d Mr.ll - 3 3 1 i:1 ' i In this Condition, the 7 day fuel oil supply for a DG is not available. However, the Condition is restricted to fuel' oil , level reductions, that maintain at least a 6 day supply. These circumstances may be caused by events = such as full load operation required after an inadvertent start while at e 4
' minimum required level; or feed and bleed operations, which
' may be nacessitated by increasing particulate levels or any - i numce" of other oil quality degradations. This restriction l allows sufficient time for obtaining the reouisite l replacement volume and performing the analyses required 4
- r priot to addition of fuel oil to the tank. A period of j 1 . .s- 48 hours is considered sufficient to. complete restoration of l ,
the required level prior to declaring the DG inoperable. l M'M 's s This period is acceptable based on the remaining capacity . x (> 6 days), the fact that procedures will be initiated. to ! s obtain replenishment,' and the low probability. of an event ; during this brief period. : 1 ! 1 L.1 With lube oil inventory <[500] gal, sufficient lubricating ) oil to support 7 days of continuous DG operation at full ; 4 lead concitions may not be available. However, the J Condition is restricted to lube oil volume reductions that ' maintain at least a 6 day supply. This restriction allows. i ' sufficient time to obtain the requisite replacement volume. 3 A period of 48 hours is considered sufficient to complete : restoration of the required volume prior to declaring the DG inoperable. This period is acceptable based on the , remaining capacity (> 6 days), the low rate of usage, the fact that procedures will be initiated to obtain ! i s s__ replenishment, and the low probability of an event during
- this brief period.
i 1 a 4 4 4 4
/
(g(kh IQ , K h. ll 3 Y s--( 3 r LJ g This Condition is entered as result of_a failure to meet the acceptance criterion of Sn . o . a .; ."homally, tre ncing g,pgk ' of particulate levels allows sufficient time to correct high particulate levels prior to reaching the limit of acceptability. Poor sample procedures (bottom sampling), contaminated sampling equipment, and errors in _ laboratory analysis can produce failures that do not follow a trend. Since the presence of particulates does not mean failure of the fuel oil to burn properly in the diesel engine, and particulate concentration is unlikely to change significantly between Surveillance Frequency intervals, and proper engine perfomance has been recently demonstrated (within 31 days), it is prudent to allow a brief period prior to declaring the associated DG inoperable. The 7 day Completion Time allows for further evaluation, resampling, and re-analysis of the DG fuel oil. i
)
j na () , With the neNuel oil properties defined in the Bases for d SR 3.8.3.'Onot within the required limits, a period of 30 days is' allowed for restoring the stored fuel oil-i l 3 properties. This period provides sufficient time to test 'j the stored fuel oil to detemine that the ner fuel oil, when ! mixed with previously stored fuel oil, remains acceptable, ! or restore the stored fuel oil properties. This restoration may involve feed and bleed procedures, filtering, or, combinations of these procedi ns. Even if a DG start and load was required during this time interval and the fuel oil properties were outside limits, there is a high likelihood ; that the DG would still be capable of perfoming its , intended function. . i With starting air receiver pressure < [225] psig, sufficient- ! capacity for five successive DG start attempts does not ' exist. However, as long as the receiver pressure is 1
> [125] psig, there is adequate capacity for at least one i start attempt, and the DG can be considered OPERABLE while j the air receiver pressure is restored to the required limit. i A period of 48 hours is considered sufficient tolcomplete restoration to the required pressure prior to deciaring the DG inoperable. This period is acceptable based en the remaining air start capacity, the fact that most DG starts are accomplished on the first attempt, and the low probability of an event during this brief period.
fd With a Required Action and associated Completion Time not l met, or one or more DGs with diesel fuel oil or lube oil not i within limits for reasons other than addressed by Conditions A through E, the associated DG may be incapable of perfoming its intended function and must be imediately declared inoperable.
-n- -,v -
- CESSAR USinum,e i
d
)
i l i l 4 1 Diesel Fuelgbricating Oil, d STY-) ' B 3.8.3 4 B ASES f.J ACTIONS (contmued) w level in one or more fael oil storage tanks indicates the design basis require of supponing seven days of contin operation may not be able to be satis However,if the stor level is between [25,000] and [55,000] gallons, ient available to suppon approximately three days of continuous die crator operation at full load conditions. Consequently, a penod 4 hours is a - to restore the fuellevel. his-24-hour Completi ime is acceptable given elihood that additional j fuel could ovided from offsite or transferred betw torage tanks as neces in the unlikely occurrence of a loss of offsite power event during
- i. time period.
a Pl i 1 With ' eating inventory less than [ ] gallons, suff u ricating oil to
~
k, 1-7 suppon seven f continuous diesel or operation at full load , t conditions may not be av ever, a limited tirne (24 hours) is I provided to restore the lu ing on ory because of the relatively low rate of usage skelihood that additional s can be provided from offsite , I U With the new fuel oil properties defined in the Bases R 3.8.3.5 not within the ' ed limits, a period of 14 days is ed to restore the stored fuel oil properties. rovides sufficien to retest the fuel oil sample to confirm that the initial esul re valid, test the stored fuel oil to L h determine that the new fuel, wh with previously stored fuel, remains .
- acceptable, and/or restore e stored fue rties. This restoration may j
, involve feed-and-b! procedures, filtering, or binations of these and ; other procedur Even if a diesel generator start an d was required ! during this interval and the fuel oil properties were outside limits, there is a hi likelihood that the diesel generator would still be capable of I performing its intended function. . (continued) j l l SYSTEM 80+ B3.8-34 ; i i I l Amendment I 16A.11-34 December 21,1990 I i J
l 3 1 CESSARn'Memw i l l i l i I l Diesel Fuel j and Lubricating j Oil s ffrad.'y- , B 3.8.3 ft.t< 1 BASES l ACTIONS Ed l (continued) , W iculate contamination testing portion of the diesel fuel oi g ] program, a pen days is provided to restore the properties to b A within limits. This test demo the sculate in stored fuel are { 66 less than 10 mg/ liter. Fuel oil w' pa oncentrations exceeding ' j the 10 mg/ liter wil et diesel generator performanc long term I basis; the , 30-day Completion Time will not adversely affect ! l 4 stor reliability and is acceptable. 1 2.1
'th the Required Actions and associated Completion Times , or the j diesel stem inoperable for reasons addressed by e
Conditions A through F, ted d' generator may be incapable of performing its intended t be immediately declared (
, inoperable. 'Ihe R ctions of LCO 3.8.1, rees - Operating, I or LCO 3. . C Sources - Shutdown, as applicable, m be foi '
! SURVEILLANCE SR 3.8.3.1 l REQUIREMENTS
> "r . f "t d 2-1. h '. nah L'. 4 '
-y,.,
,. m.i
{_ mag *. i i a on nano at me co .-. iv s ;. . e: '_; ; 1. e,=' 6 5 S f r:' g _ ..iv, (p' i. i). The 31-day Frequency is
. viivii ;o ;
adequate to ensure a sufficient fuelee$yly is available since operators should be aware of large uses during this period and low-level alarms are provided. k -L *k c~;= q h iz:i u. a..g.uu....g 3.ig l (continued) r 2 ( This SR provides verification that there is an adequate
) inventory of fuel oil in the storage tanks to support each ue DG's operation for 7 days at full load. The 7 day period is
) sufficient time to place the unit in a safe shutdown condition and to bring in replenishment fuel from an offsite
~ ' ,, ? Sv. 7 1,,l ' ,
. e
' dda g g
*wny, 4w,,.
{, g, .l .N,,.c us 4 n 4 4 e 7
.e. d 4 ~ Y- s< e f'M .I , ,,
r y . .' ~ . , - ae, , ,
. .) Wf ""' WN N *' \ SYSTEM 80+ *,<.;*t' B3.8 35 1
Arnendment I 16A.11-35 December 21,1990
l CESSAR Heincano,. 7 t . Implicit in this SR is the requirement to verify
) the capability to transfer the lube oil from its stcrage location to the DG, when the DG lube oiliump d6es r ot hold j adequate inventory for 7 days of full load oper'apion without j the level reaching the manufacturer recommended minimum level.
Diesel Fuel and Lubricating Oil j B 3.8.3 BASES SURVEILLANCE $1L3 8.3.2 j REQUIREMENTS j , (continued) The verificatio ch diesel engine fuel storage tank demonstrates ; that sufficient fuel is as ble to sustain at I ven days of full load i operation for the diesel generat ef. 's time period is sufficient to ) place the unit in a safe shutdow its rovides enough time to bring l in replenishment fuel an offsite location. e 31-day Frequency is j based on en nog judgment and is sufficient to en diesel fuel ril I avai y since operators should be aware of large uses during ri6 3. j i SR 3.8.3Y A I i ! , This surveillance ensures that sufficient lubricating oil inventory is available l to support at least seven days of full load operation for the diesel generator. i
- ne > *1 vallons requirement is W on the diesel generator manufacturer's consumption values for the run-time of the diesel.V A 31-day Frequency is adequate to ensure a sufficient lubricating oil supply is onsite since diese!
4 generator starts and run times are closely monitored by the plant staff. / ,* kl l ' . SR 3.8.3Y3 i 3 The tpsts listed below are a means of deternumng whether or not new fuelgd ntaminated with substances which would have an immediate,
@detnmental impact on diesel engine combustion / operatio i these tests are within acceptable limits, the fuel may be added to the storage
~ tanks without concern for contaminating the entire volume of fuel in the storage tanks? The tests, limits, and applicable ASTM standards are as follows:
.J
- a. Sample new fuel in accordance with AS "'
8 ). .,.
- b. Verify in accordance with tests specified in A 7 l'that H the sample has an absolute specific gravity at 60/60 of 2 0.g3 T>s s
f W
,7, {,;7) but s 0.89 or an API gravity at 60*F of 2 27* but s 39*, a kinematic viscosity at 40*C of 2 1.9 centistokes but s 4.1 centistokes, and a flash point 2125*F.
ihese testi Ere~to be conducted prior to adding the "~"~N)
> new fuel to the storage tank (s), but in no case is the time between receipt of ~
new fuel and conductino the tests to exceed 31 days. SYSTEM 80+ B3.8-36 - Arnendment I 16A.11-36 December 21,1990
. i i
i CESSAR iMUicam,. : l . \ Diesel Fuelend Lubricating Oilg
/
f/~Lp B 3.8.3 g ] BASES ! 2 i I SURVEILLANCE SR 3.8.3X (continued) REQUIREMENTS (continued) c. Verify the new fuel has a clear and bright appearance with proper N 7 , (/k k color when tested in accordance with ASTM D4176-(86). ! These tests are required to be performed within 31 days prior to adding fuel l ! to the storage tanks. He Frequency is established by Regulatory Guide . 1.137 (Ref. 2). Failure to meet any of the above limits is cause to ject the ; new fuel, but does not constitute a diesel generato/ OPERABILITY rn i since the fuel is not added to the storage tanks. L i gg w-1 Within 31 days following the initial new fuel oil sample, this surveillance is ;
- performed to establish that the other properties specifial in Table 1 of ASTM ;
D975-(82) are met for new fuel when tested in accordance with ASTM D975- l
'~
l j- '(82), esept that the analysis for sulfur may be performed in accordance with l { 'n ,. . - XSTM D1522-(13) or ASTM D2622-(82). .ne required surveillance - l
', ~
Prequericy for sampling the fuel oil is based on engineering judgrnent takmg, l L into consideration the likelihood of a change in fuel oil parameters. 'j 3 ; ~ L"'t @h, 4 ~I3. [{Nt< Sn 3 .y & w,ExY/N a.. m4 EA x n- @= a : 9-" Ml '* k
~
[% $ g m+rw & a die 4 s** himveillance is an integral part of a comprehensive prbgramf'Dto[ */ '4 8 ensur
' 1 i
- avails of high quality fuel oil for the diesel generators at all times.' By
- testing for pa late on a 31 day basis, information regarding the cond' ,
of stored fuel can ined and trended. Fuel oil degradation nglong !
- term storage shows up as increase in particulate, due to oxidation.
l The presence of particulate does of mean the fuel oi not burn properly in a diesel engine. However, the pa ulate use fouling of filters and fuel injection equipment which can ca ine failure. If particulate is removed from stored fuel by cire ~ g it Ihr filters (other than diesel engine filters), the fuel restored to acce condition, and its storage life extended ~ mitely. By obtaining and trendin rticulate data, it is possible termine when stored fuel cleanup will be ry. H is - can be e well before the maximum allowable particulate concent is ed. (continued) SYSTEM 80+ B3.8-37 l Amendment I 16 A 11.1l7 December 21.1990
Is l (g % a., is4. H - 4
' Fuel oil degradation during long tem storage shows up as an increase in particulate, due mostly to oxidation. The i presence of particulate does not mean the fuel oil will not burn properly in a diesel engine. The particulate can cause fouling of filters and fuel oil injection equipment, 1 however, which can cause engine failure. i j p/T Particulate concentrations should be determineLin ._/
accordance with ASTN 02276-[f t ],Q.th;; * (":'.Ji> This 4 - method involves a gravimetric detemination of total particulate concentration in the fuel oil and has a limit of , 10 mg/1. It is acceptable to obtain a field sample for i i subsequent laboratory testing in lieu of field testing, gpr - i {F:- the:: d::ig : i: .:.idi Gew 6vssi noivu svul v i l. A m uin.d in ma er :;r; int:r;;anacted te,,i , ,ec; tea; . must be enaddar0d Sad ??!??d 00$0retely.) The Frequency of this test takes into consideration fuel. oil degradation trends that indicate that particulate ] concentration is unlikely to change significantly between
- Frequency intervals.
i i i I I .l SR 3.8.3.a {' This Surveillance ensures that, without the aid of the is available. refill compressor, sufficient air start capacity for each DG i minimum ofdefined [A start cycle is [five)b engine start cycles without recharging measured in tems of time (y the DG vendor, but usually is l seconds or cranking).or engine crankingspeed.) { The pressure specified in this)SR is i d l intended starts to reflect the can be accomplished. lowest value at which the (five] k I ! , The 31 day Frequency takes into account the capacity, capability, redundancy, and diversity of the AC sources and
\ alams, to alert the operator to below normal air startother pressure.
4 i N
C E S S A R EElincu a I Diesel Fucij ga4 Lubncating Oil, s~L SM B 3.8.3 C , BASES SURVEf!. LANCE ~SR-M ' REQUIREMENTS (continued) 'culate concentrations should be determmed in accordanMASTM D2274 , thod A. This method involves a grav' ne determination of total particulate tration in the fuel and limit of 10mg/ liter. It is acceptable to obtain a m ple fo sequent lab testing in lieu of r field testing. In the case (s) whe stored fuel volume is contained in two or more interconnee ,each must be considered and tested separately. The F ency of the surveill based on engineering judgment sto consideration the ease of perfo the test and the like ' of a change in particulate concentrations. F SR 3.8 3Xr 4 C
- e
- a Microbiological fouling is a major cause of fuel oil degradation. There are numerous bacteria which can grow in fuel oil and cause fouling, but all must have a water environment in order to survive. Removal of water from fuel day tanks and storage tanks once perDildays wiH-eliminate 5the necessary f
environment for survival. This is the most effective means of controlling i
/ 0,bjM h ~mii~r6bTologi$1 fouling. In addition, it will eliminate the potent entrainment in the fuel oil during diesel generator operation. ;
Water may come from any of several sources including condensation, ground water, rain water, contaminated fuel, and from breakdown of the fuel by i bacteria. Frequent checking for and removal of accumula_ted water will i minimize fouling as well as providing data regarding fuel system water tight integrity. TheJurveillance Frequencies are established by Regulatory Guide i 1.137 (Ref. 2).%.*5 5 p. ,3 /se w.c p,*d,Na ..f, - we.7A rea u - 4 m fu nise < weerinW ru< asea f-h.%,, ,( h:< .fa ym. M & sw ./ WJ ic*"'i"***) aga,, ;, awd L< 9 pifo " .I h. Z,,,hca. l l l l SYSTEM 80+ B3.8-38 Amendrnent I 16A.11-38 December 21,1990
l CESSAR Eininemen Diesel Fup Lubrienting Oil M .f4</3- ; B 3.8.3 pv ; BASES i SURVEILI ANCE '5R 3.8.3.9 , REQUIREMENTS (continued) This surveill monstrates that each required fuel oil seensfe/ r valve l- , operates and transfers a its associated storage mii80 its a-=M . day tank. This is required to seven days ' continuous operation of the
- standby power sources. This sufwanHa vides assurance that the fuel transfer pump is OPE , there is no e blocking the fuel supply line, and fuel supply line is intact. The Frequency co abe Insemce Testing requirments of pumps ME .
XI. SR 3.8.3.kf (p The draining of the fuel oil in the storage tanks, removal of accumulated
=
sediment, and tank clennmg is required at ten-year intervals by -
. gJ ,
. 3. , Guide 1.137 IRef.-3). This is required to perform the ASME on XI ( /4 ,'f )> l
, examinations of the tanks. To preclude the introduction of surfactants in the ,
{' f,',g C ' fuel system, the cleaning should be accomplished using sodium hypochlorite ; solutions or their equivalset rather than soap or detergents.j ;
\
1 REFERENCES 1. CESSAR-DC,$ection 9.5.4.2. i f, 9 2. Regulatory Guide 1.137, ' Fuel Oil Systems for Standby Diesel sr a.I+ < 7, Generators," October 1979, a rts
'u f. ^ o '
g
. 0)d -[. ,,3 L S.
SI N1951976,
- Fuel Oil Systems for Standby Diesel
, , ; olg
> ' . l : -: 0. *41 ' p
- q' Generators," Appendix B.
(, n ' f .,' ' ~( t' 'g'rl ' ' 4.
. 52 D 't' fat NRC fa'* im Poliev te-e. -aa' an Tar & te!
, , 9 ' ; ,' t ' , . ,, g e $~*--9 ! ,,..,..= = for Nucisar ; v-w R aura, 7.L,-,
[ *g :, ' 4'Ca pv W
,pV j .)( h# ^ .. This SR is for preventative }
(, maintenance. The presence of sediment does not necessarily '
? represent a failure of this SR provided that accumulated ;
sediment is removed during performance of the Surveillance. ! ( 1
. \
l SYSTEM 80+ B3.539 l Amendment O
~
CESSARan% m l l i . 16A.II.4 B 3.8.4 DC SOURCES - OPERATING i l DC Sourass - Operating ' S 3.8.4 B 3.8 ELECI'IUCAL POWER SYSTEMS B 3.8.4 DC Sources - Operatine f BASES l BACKGROUND The Class IE DC Power System provides control power for she AC emergency power system. It also provides both motive and control power to selected safety-related equipment and provides circuit breaker control power for the 600 volts and lower AC distribution system. The DC Power sysaem i is also the source of power for she vital instrumsstation buses via inverters. . . f six DC subsystems conform to the indep,sedence and redundancy g,( @irements of Regulatory Guide 1.6 (Ref. f),'1EEE-308 (Ref. @, aj requ
', 'f . The six battenes are: 3 ) M / u t,-ri ;
Geners! Design Criteria 17 (Ref.[I
, 2- 6" R i Dmsson I Division 11
'w_gi g 3,,,, f j Division I Bauery DivisionII Battery ;
Channel A Battery Channel B Battery ! tha=1 C Battery th==t D Bauery ! Each DC subsystem is energiand by a dedicated 125 volt battery and l associated 125 volt battery charger. Each battery is exclusively associated l with a single 125 volt DC bus and each bettery charger is supplied by its l ' l associated AC load group K. Each of the six DC subsystems is made up of the following: l A [120-cell lead calcium battery] rated at [1650] Ah for eight hours ; to [210] volts at 77'F, A static battery charger rated at [400] amps with 0.5% voltage regulation with an AC supply variation of 105 in voltage and 55 in frequency, and associated switchboards and distribution panels. However, in order to fulfill the battery capacity criteria: 'to supply one division battery's loads and one channel of loads," the batteries may be cross-f (continued) SYSTEM 80+ B3.840 Amendment O 16A.11-40 May 1,1993 l . ., - _
- l l CESSAR n%ncim,t DC Sources - Operating I
B 3.8.4 i BASES i BACKGROUND tied to allow coping strategies tc be implemented in accordance with the (continued) capacity sizing. Additionally,the batteries provide a Station Blackout (SBO) l coping capability which, assuming manual load shedding or the use of load management programs, exceeds two hours, and as a minimum, permits operating the instrumentation and control loads associated with the turbine-l driven emergency feed water pumps for 8 hours. l Battery operating voltage is 125 volts and each battery has adequate storage Cry M n 'M l v supply-the division battery and one channel of loads for two hours pthout
~
recharging (Ref. 4). Capacity is adequate for all lo'ss of coolant accide91 .,y (l OCA) con 'tions or any other emergency shutdown. *M M j*,,, ,, 6 cr.-
, g, a.,,te u.4,1' -th Fseer,c. Q Es) ,N q Each 125[v61t DC Class IE battery is separately housed in a ventilated room ;j l i
apart from its charger and distribution center. Each subsystem is located in ""*"g* an area separated physically and electrically from other subsystems to ensure [ { that a single failure in one subsystem does not cause failure in the redundant ,MN ' subsystem. In normal alignment, there is no sharms between redundant , pn fq@ O Class IE subsystems such as batteries, battery chargers, or distribution ( q f 3, f 1 ' panels. Class IE batteries of the same division may be cross-tied together for j accident coping (SBO) and/or LCO purposes, All batteries are sized to produce required capacity at 80% of natneplate rating, corresponding to warranted capacity at endef-life cycles and the- l'15 9> 9 . 100% design demand. Battery size is based cp 100@f requiro~il capacity, and after selection of an available commerciaI'liiittery, resulis in a battery - 9 %' ,9 capacity in excess of 125% pf required capacity. The voltage design limit is
, ,5 [ ] volts per cell whictrt6 responds to a total minimum voltage output of[ ]
~
l volts pet battery bank Qj.y.,y,,ug q g gg 6-* ,, , ,b,,,++g yy,;,u.q,e
- 6. .M
;,_, AAs. ,
A f,e r m t e~y a n,r g , . , Each battery charger has ample power.odtput capseny for the steady-state operation of connected loads required during normal operation while at the ! same time maintaining its battery bank fully charged. Each battery charger l has sufficient capacity to restore the battery bank from the design minimum charge to 9.jl5 of its fully charged state in [12] bours while supplying normal steady-stat (Toads,(Ref. 4). C ; b:n ..'d V Ct%G f
- 1 (continued)
SYSTEM 80+ B3.8-41 Amendment Q 16A.11-41 June 30,1993
CESSARMRimioit l l l l DC Sources - Operating B 3.8.4 BASES l APPLICABLE The initial conditions of design basis transient and accident analyses in SAFETY CESSAR-DC. Chapters 6 Engineering Safety Features, and 15, Accident ANALYSES Analyses, assume Engineered Saf ty Features (ESF) systems are OPERABLE. The DC/ower fyeten(probides normal and emergency DC power for the diesel generators, emergency auxiliaries, and for control and switching during all MODES of operation. The OPERABILITY of the% l power sources is consistent with the initial assumptions of the accident analyses which are based upon maintaining the required DC power sources and associated distribution systems OPERABLE during accideoj conditions # # in the event of (1) an assumed loss of offsitehwg and (2) single failure. f#4
-m Dc e s - , s,h,4 fo/r a S af A F'.
/.4,y ruk rdd.
xn c-LCO %-* Division I and 2 DC h. lJM-,- are reqmrod d& to be OPERABLE to j ensure availability of the required power to sh'utdown the reactor and ACh ! paticipated operational occurren or maintain it in abasis a postulated design safeaccidesit'. condition after.g7 L6as of any one of the DC power , subsystems dos not prevent the minimum safety function from being j performed.sEach DCJa be is considered OPERABLE if the 125 l l
.II41./y ly fa- volt battery associated battery charger satisfy the applicable Surveillance Requirements.
W. ,
. i .p-
. * ,H
;U' s
/Inope'abler DC sources do not necessarily result in inoperable components f'(,
t. unless specifically
' electrolyte directed parameter limits relationshipby Required to the OPERABILITY Actions (refer to LCO 3.0.7).
of DC sources
;. ,.L- ." ,C ' 4' { .(-is covered by LCO 3.8.6, Battery Cell Parameters. During periods when l
'. r . WJ', battery cell parameters are not within limits, DC sources are not necessarily l I
('.;',4- inoperable unless specifically directed by the Required Actions of LCO 3.8.6, , j
,l( Battery Cell Parameters. L .e e h wis LCO 3.0.7. -
p'
)'
(continued) SYSTEM 8e- B3.842 Amendment O 16A.11-42 May 1,1993
1 < i i d CESSAR HSiftcut:t. ' l A 1 i ! i i DC Sources - Operating l B 3.8.4 i . BASES i sb&d aL APPLICABILITY De DCf Power SouMM are required to be OPERABLE in MODES 1,2,3,
- and 4 e ;;_ di p--. ' '. . . - - "-- --f
- . to ensure safe plant !
j operation and to ensure that: j 1. Acceptable fuel design limits and reactor coolant pressure boundary limits are not exceeded as a result of anticipated operational occurrences or abnormal transients; and
- 2. Adequate core cooling is provided, and containment integrity and '
i ' other vital functions are maintained in the event of a postulated DBA. i DC power requirements for MODES 5 and 6 are addressed in the Bases for }. LCO 3.8.5f DC Sources - Shutdown." i -. ACTIONS A.1 AM M #' ' l V g DC. JuM W :- ^ y ' -- - Y . j With one of the sixfbetterms inoperable C ' *:: : ? . ,, C :A
- +-- c's--- , c !
- :7j, p.vf:::: 3;r;;j, - ';r _,, ____ z #
4 g, j ; 9 r;r:7j) -- o-. t
- g -L..;., =_ ; =u m . -u...
- -_ g t 7j g ,y, g 1
reaks.p h A
-- "-M k a- y -h- ;r W..;2e, the bettery cross-tiet may be utilized ) /,' I l J to allow the remaining two operable 9d"-- ' '-" '.x to power the loads 6,
- & 1,,a of the inoperable power source and fulfill the SBO coping capability. His d,$! 'i i J ' g~
is possible since each battery is sized to provide the one division batteryY i
/* / v *4 /c 3 loads and one channel ofloads. Hus, the two remaining operable batteries may power me 4efumet battery's loads while it is being restored to CAAh77 r;:st;:::y. His design feature abould be utilized with the intent of restormg
'~;-
/
[6 i'( . - the inoperable component:1r-seen-ee pn'. L:e -..: N hours. H '12. b i E.1 & 0 L y i duf*'d.[ ,.4 , With two of the required DC^/ower Seud, e,g # inoperable ( g . '_- ; "- 4
) s.... : ~ :y - :ur t...
p s....,y w u: tl. .y 4 7 .a y.)9 4' y' l ggA ,f 4r I
.:.a a.._, " '-":r:s). the remaimag DC7- -"
capacity to support a safe shutdown and to mitigste an accident condition.
' ve the
~
F(,f,. rd J.* However, since a subsequent worst case single failure would result in the loss of the 125 volt Class 1E battery system. continued power operation should -
. rI i da not exceed two hours. The two-hour Completion Time is based on-C h[,3 ",$ j":
+
WgFI 4 (continued) e,8 i SYSTEM 80+ B3.8 43 - 4 Amendment O j 16A.11-43 May 1,1993 ~
.m. ,
4 _,. % - - , .y _ . , . _ _ , , . , , ,
! CESSAR HSincan..t 1 i j DC Sources - Operstag s 3.s.4 l 1 i BASES C i ACriONS Regulatory Guide 1.93 (Ref.h. and engineeringjudgment considering the j (continued) number of available systems and the time required to reasonably complete the i Required Actions. ,yy -
- I C.1 and C.2 ,
m ir ( ___ - x y i j1" The plant must be placed in a MODE in which the LCO does not apply if the ' h ( M.c I A
- ( 'l 4 d' UF M 7 I'~~ DC N Su- cannot be restored to OPERABLE status in the associated Completion Time. This is done by placing the plant in at least MODE 3 in f g% Ier' fi ,
l
- i six bours and in MODE 5 in 36 hours. The allowed Completion Times are /
d' p n.,. p L ,
'f reasonable based on operating experience to reach the required MODES from
'} \ full power without challanging plant systems.
8i" I, I , nra [m, i i b u tt
) -{ .g% -
.r.w % w-
*'h SURVEILLANCE SR 3.8.4.1
! v REQUIREMENTS i['q h f Verifying battery termmal voltage while on float charge for the 125/250 volt Class 1E battery hel;5 ensure the e ectiveness of the charring system and the - d ability of the bettery. to perform atended function. Float charge is the #
- ls j condition dere the charger is supplying the continuous charge required to i { l' , overcome the internal losses of a battery (or battery cell) sad maintain the
' } '3 () battery (or battery cell) in a fully charged state.tThe seven day Frequency v- is consistent with the manufacturers' recommendations and IEEE 450 (Ref. 4. /
- L--J g f(r). Tu &c-- y : ' " = x.;':- :5;M; --? ' 'r j - ., :s .
- l/ -+ --_9 : : 'k- + x sex . ,_. : +.:.. & , me _ !
g A- : ; .t- ..usek, m uk~.a,sr. t-7 h g __a- _7-1 i "stShas; j z [ ._.g6M M YV SR 3.8.4.2 y ,y i ,I
/hs*
isualinspectionfbf the battery cells and connections or measurement of6P provide an indication of the
/#g[,g F g (2 P i^
;Q' .I/ 'If r%istance of each imE'and terminal connecti physical damage or abnormal deterioration whi could.potentially degrade r , W >
g L" , i ba:tery performance.Nection resistance valus ka ceiling value I l
, r i ~
'y/ f' '. i .
f' established by the battery manufacturer.basedTm' calculations taking into M consideration the physical configuration of the batteriesp 92
.x.
/,q'd.
.+*'
id . t t
/ / ,, ~ ' ' Frequency is .sunicienHos-detecting rtrends : efin th*=J h,d.Je'h'
"' y c3istitiona
- .. j j %anypsoblemas. A more complete '
tionis performed in'coejunction with M j .c( the preventive maintenance program ducted during refueling outages. W.t01M' f.p!'t
=
- i y *y Q,,. .:. . v w
- e ._ . , -
e* j.gw ' "'t' (continued) SYSTEM 80+ B3.8 44 , a Amendment O l 16A.1144 May 1,1993 i_ __- -_ - _ _ _ - - . - . . .
f 4 i l CESSAR !!L".mt:. J N I l t : 1 ( DC Sources - Operating - s ' B 3.8.4 ! BASES t ! SURVEILLANCE SR 3 8.4.3 i REQUIREME!GS l (continued) Visual inspection of the battery cells, cell plates, and battery rocks provide - Mg i en indication of physical damage or h-- -' ' - ~ j potentially degrade battery performanos. .F He [lis ;:orstma c,.a iM which % j .coingmeenney';-- ^4nd:;: '- * , ; - ^issuflielestitidsmet 7p F.(tJ.h 3 _ bane,ywr.dauo.er; ; _+esis . ^ _ h & ,,,,,r ^
- , umpiedpster -ga4 -.-
s
.atherm . f.3 y yL ; ^., .: ; ; . . ,. i.
, rJ,de ,t Ve -*0-w#
Jw. f wi . '
- SR 3.8.4.4 and 3.8.4.5 _
M,. casa?p.,
~~ ,,. . -8j, F
! ,,, 4A l Visual inspections and vesstance measurensets iG-tocaD ofund dbs~g su% , r . ' serminal connections provide an indication of physical damage or aboonmal
.g.,p-.%4leterioration which could indicate degraded battery performanos.
. :,4 De anti-:
1, .i 79 : corrosion matenal is used to help ensure good electrical ca===ehr== and to . - i -
, reduce terminal deterioration. De visual inspection for conoeion is not d A, t' d
- Q ;,.u.! <n-i
{
}'. , . , ' ,
..P
'g.' c].. 'p( . 'hnie.ded io - removai and ins, set i under esci ienninai -p connection resistanos ~^ 1 : -iling 'value establiaWby ds v %.,#Z"Yr... #'
i V ; -/y'f- 6 ' >[a ../' 'peanufacturer configuration of based on calculations the battenes. -month [Frequency s into consider. is W 2a' tion ytg N en physical ~"
#'J, r .t-v w st ,e,p- . .
_>___.._._u__. .L m yggf.&ra , s ., , s __._-___,_m-.w._2.-._ ______a- _, .- _ -
. m.
,; ~ 01 i \,
...~
i: "- "i : ' :.' e ^ ;: E _, - = : 4 - - - - - . l_e g;,p- \ (4./A).. , l, l l ;# E ,. 8 '"L:SR 3.8.4.6 f .; ~"
' * 'i
- M.
l
! ?' '
. r '[. l.. y $'$.' egulatory Guide ) 1.32 (Ref. , requires that the battery % ,.s J
% ,",'. ' ] ,,. ,
! . . ' . . - .j . .p'.D j'y on the largest comb' demands of the various steady state loads and
; y. .
l :
~, t'gg ,} c'l Abe charging capacity to restore the battery from the design minimum charge 'h
- ,. 4 ( ,.i ' . e - state toDHkef the fully charged state, i..7.r ;iive of the status of the unit
- 1. ' :
'[ .J during which these demands occur. De minimum required amperes and
.gf ,. , J .d,,...
' ., < ' 3.1.4.7)4 ,5 De Fmquency.ie4ased cm en,=+ g j /._;-and indusesy duration ensures that the DC load requirements can be'antisfied (refer to SR j
g,.
-e-p' d,gh]1*-
q ;-d ;-9 n-1-. ;:
.--- ";tionstoquired teperfonsibe test,
- ,. R[end is intended to be consistent with expected fuel cycle lengths.
'\
k . g , ' ' . *K * *t 21 o. 3.~ n *- t}s> [ m, , i i sr ' $(4.'.J'7p 9'#,' (p performance f,h' Dis surveillance is(modified y tuTo Notes. De first Note prohibits of this surveillance in MODES 1,2,3, or 4. Performance of o "# .' g l . this test requires the associated DC Division to be inoperable during the test. !
- Q' t y".,.,.
Derefore, this test must be perfonned in MODES 5 or 6. De asocod Note l . 1 q 5 p%r' 3*: a
~
. (continued) i' SYSTEM 80+ B3.8-45 i 'l Amendment I -
16A.1145 Decernber 21,1990 ,4 4 _, , _ . + ~ . - , . - - - .
J. . 4 C E S S A R En Wic m .t. i 1 ) I 1 I l i
\
i DC Sources - Operating , B 3.8.4 e 1
- I tv :
- BASES 8
SURVEILLANCE allows credit to be taken for unplanned events ' "^* * , * $' ! REQUIREMENTS satisfy this Surveillance Requirement.
,f * . (' i.d d.) *jM. f[( / l 2
(continued) jw p s . 'e s $ As( g aj e 3I4A j
- . ' '.j. -
p ;
' , II ' ~M .
f b =i=~rics.
/ @ulatory Guide 1.32(Ref.g
;1IE 4, '0 (hf@) :' E*-~& :-* ': 4aceed[18]
i
'4 ,.,, s
, F' f. g f I ,tnanths. A battery service test is a special capacity test to demonstrate the testi n arc ~d ---
g ;] p.
',. /p- -
capability of the battery to meet the system analyzed response requirements.( I
, i ,,p -
'E Reference Jd,~~"- S % d G. N - yg t'h;,
a.- w x n
'This surveillance is anodified by three notes. The # first Note allo l
{( s per 60-month performance of SR 3.8.4.8 in lieu of SR 3.8.4.7. 'liis is y h*** ' $. -.- k'/ i I
- k$ allowed since SR 3.8.4.8 represents a more severe test of battery capacity 4 than SR 3.8.4.7. The second Note prohibits performance of this surveillance q
" q
' - ]t in MODES 1,2,3, or 4. Performance of this test requires the associated .
DC Division to be inoperable during the test. Therefore, this test must be { %,f (, ( g '** performed in MODES 5 or 6. The third Note allows credit to be taken for unplanned events h MODE' ' 9 1 ~ d wheek satisfy this Surveillance ..
, # "' /(Q . .y ;
4 * %st- '<w ? PM i f.# M av -
- Requirement.
N 'l - - gag,y*..e" 'q d. s, . G ' h,.. 9 .) t SR 3.8.4.8 _._
- s. ,
tt Q y. ig y[60-t. ii ,3 ) q f IEEE-450 (Ref. recommends a performance test for each month intervals. A battery performance test is a capacity test of the p- ,[v#l,
,'"[ .'f ,.M l (y f in the 'as found* condition, after beinz in service, to detect any change in capacity as deternuned by the new battery --et-- test.HIEEE-485 (Re g e -
*U '# ',.
l v i
}[ g j }4) recommends that the battery abould be replaced ifits capacity is below 80% of the manufacturer's rating. A capacity of 80% ahows the battery rate \ %4 of deterioration is increasing even if there is le capacity to meet the lead 4 requirements. 'Ibe acceptance criteria for this veillance specifies *aeve O7.]
l j -eastrw6 we'jt% capacity based on the extension of the Frecyency for SR 1 3.8.4.7 from the IEEE 450 recommandation of[12],18Mths. months to r4 n. g .m . IEEE-450 (Ref. f) recommends it, h : ":.;, e f c. 60,-pppth Frequencyp e r
- 4 a performance discharge test should be performed every4Fmonths for any battery that shows signs of degradation or has reached 85 % of the service life
- expected of the application. Degradation is indicated when the battery capacity drops more than 10% of rated capacity from its average on previous performance tests, or is below 90% of the manufacturer's rating.
(continued) SYSTEM 80+ B3.8-46 Amendment I J 16A.11-46 December 21,1990 i
+
i l CESSAR HL",cunn ) i 1 DC Sources - Operating B 3.8.4 BASES SURVEILLANCE SR 3.8.4.8 (continued) ; REQUIREMENTS m. . ,4 Q ygf 6 - Fra (continued) The Frequencies are consistent with the%;t . in R:r': :.j .; d: ' 120 ; (Ref. )f.d . ; --.5 :-" 'a "'t ' :r ': i; i:u-i des. ' "- . - This surveillance is modined by two Notes. ne Erst Note prohibits penvrmance of this surveillance in MODES 1,2,3, or 4. Performance of this test requires the associated DC Division to be inoperable during the test. , nerefore, this test must be performed in MODES S or 6. He second Note ; allows credit to be taken for unplanned events b !'007: 1, 2, 3, y, 4- i me ch satisfy this Surveillance Requirement. 1 4L4 , i REFERENCES
- 1. Regulatory Guide 1.6, ' Independence Between Redundant Standby -
(Onsite) Power Sources and Between heir Distribution Systems," ! March 10,1971.
?I
,2. IEEE-308 1974, 'IEEE Standard Criteria for Class IE Power Systems for Nuclear Power Generating Stations."
y a >s
- 3. 10 CFR 50,' General Design Criteria 17,
- Electric Power Systems.*
c s .- i
- 4. CESSAR-DC, b..a As. :8.3.$t-t-r ;,,'?
' ' ' ' y 7 '. C ' ' ,.
. .- 5. 52 - F" 37*", !;"O * ... Tvi,9 Sm. -, on i m..
_nd::. ! .,,. u== f.i !!- '= Toa;s "r're, F:5. g v, n.. I _CESE?.= DC, ?"- ?3.2.2.! OfN
. 5. ~' /I i.C. Regulatory Guide 1.93, ' Availability of Electric Power Sources,*
December 1974.
/* I?
h.'I, IEEE-4501990' 'IEEE Recommended Practice for Maintenance i Testing and Replacement of Large Lead Storage Batteries for Generating Stations and Subsystems.* l (continued) SYSTEM 80+ B3.8-47 Amendment I 16A.II-47 December 21,1990
CESSAR E!nincuim i e i 4 1 DC Sources - Operating B 3.8.4 ' J B ASES l REFERENCES (continued) Kf Regulatory Guide 1.32, " Criteria for Safety-Related Electric Power Systems for Nuclear Power Plants,' February 1977. l
- 10. Cr<cADE,T:15S.3.2' ' W t
l
- Jf.7 IEEE-4851983, Recommended Practices for Sizing Large Lad
- Storage Batteries for Generating Stations and Substations." June,
[ 1983. 4 i 2 l i j i I i l l 4 , l l i l SYSTEM 80+ B3,3 48 1 Amendment I 16A31-4 December 21,1990
f CESSAR nninc- : I 16A.11.5 B 3.8.5 DC SOURCES SIIUTDOWN DC Sources - Shutdown ; B 3.8.5 : B 3.8 ELECTRICAL POWER SYSTEMS B.3.S.5 pc Sources - Shutdown BASES BACKGROUND A description of the DC Power Sources is provided in the Bases for LCO 3.8.4, DC Sources - Operating" APPLICkBLE IWODES
- 1, 2, 3, and 4, the requirement to have two :d;:-fg DC -
SAFETY fowe . O. . ...a.. OPERABLE is consistent with the initial assumptions ANALYSES of the acci analyses and the design requirements andM based upon: maintaining at I ne of the AC and the correspondin'g DC Power Sources and associated distributi stems OPERAB during accident conditions in the event of(1) an assu of all site or all onsite AC power, and (2) a single failure of the other AC source. In MODES 5 and 6, the design basis accident (DBA mptions loss of coolant accident D f (LOCA) coincident with oss of offsite or onsite wer and a single failure are not rep to be met. Herefore, the require to have one DC Power S ce Division OPERABLE is adequate to assure eris available ' MODES 5 and 6 and when handling irradiated fuel to systeA [ regy to recover from an inadvertent draindown of the reactor vessel or a
,Kel handling accident (Ref.1).
The OPERABILITY of the minimum specified AC-ed DC Power Sources p 4f;l jus y ( 4 a d ~~;-' d i n":= ge:= J.. ... .:. ;dm c. r.d .,f.,:.. 3 wou. ' 4 g g that: (1)Ie can be maintained in the shutdown or refueling condition for catended time periods,*aad (2)/ifficient instrumentation and ,, control capability is available for monitoring and maintaining the unit status; M -
.(Ref-f,- ne CESSAR-DC only addresses boundir.g analyses, such that a
- Y specific design basis is not always stated for operation in MODES 5 and 6.
, ,j..<g,[
.h 3,, f - p p.m s N P The initial conditjens of Design _ Basis Accider.t (DBA) and transient analyses in the W Chapter X6F Psi. U ana 5'* 6 Chapter 'ilSt (hf. 2), assume that Engineered Safety Feature (ESF) systems are OPERABLE. The DC electrical power system provides normal and emergency DC electrical power for the .
) DGs, emergency auxiliaries, and control and switching during all MODES of operation.
The OPERABILITY of the DC subsystems is consistent with the b , initial assumptions of the accident analyses and the F t requirements for the supported systems' OPERABILITY. , SYSTEhkO4 R Amendment I 16A.11-49 December 21,1990
CESSAR ESMnce l O DC Sources - Shutdown i B 3.8.5 BASES a.n, klic 5 , LCO In MODES 5 and 6 and when handling irradiated fuel l one DC Power Source i .L , 1 Division is required to be OPERABLE. This ensures the availability of , cf ! sufficient power to recover from postulated events in MODES 5 and 6 and ; p.-*,3." l when handling irradiated fuel (e.g., fuel handling accidenty reactor vessel ;" 5.j f ', draindown). . s . .f. ,f.f- ! A description of OPERABILITY requirements for the DC Power Source l Division is provided in the Bases of LCO 3.8.4,*DC Sources - Operating. l ne electrolyte parameter limits relationship to the OPERABILITY of DC sources is dictated by LCO 3.8.6,' Battery Cell Parameters? O .s.; r..A mt.. t . .. y ,-.it _. ... , y. g, . .: ,t : i : _:,, :.g;g; p,C du I --r! n:ndiu y.cni, omtece ener*G-afiu ,8' ;;tn> ' j, ., g g ig g g- , LCO 3.E 6, P r"- y C:!! P:=- :::=. Eb i; i: := + .= ; "'. LOO 3.^.7. - APPLICABILITY De DC Power Sources required to be OPERABLE in MODES 5 and 6 and
- when handling irradiated fuel,-
- x: =fE!:- p: :- = n_.e that: !
m e=6/,ea pwe.7s. eu + a'e- i uled tdfe F'N.%[dequate coolant inventory makeupMvailable for the irradiated fue(in the core in case of an inadvertent draindown of the reactor vessel;
^""'#"
,,:ul Ehee s
- 2. '
Systests needed to mitigate a fuel handling accident are available,*
-*ad-l
# 3-K4 Instrumentation and control capability is available for momtonng and maintaining the unit in a cold shutdown or refueling condition.
DC power requirements for MODES 1,2, 3, and 4 are addressed in LCO 3.8.4,'DC Sources - Operating!'
---+ 3-Required features necessary to mitigate the effects of events that can lead to core damage during shutdown are available; and
~
7
'TL l A pf a A :t:iqh m.J .' ke,l OtTs., Ws. '-
rJoTL c.\e_<4 tb- oped.<- h t,) p bhd edut.-d s ~ << c eno;uneat A . .h Ant SYSTEM 80+ hai:ut fwB3.8-50 5 ) llE DUC Eb dcs L v(47 d f . Amendrnent I
- 16A.11-50 December 21,1990
CESSAR E!'JAcucu DC Sources - Shutdown B 3.8.5 BASES 4.2. t , A .2.2., A ,3. 5, A. 2 d u.f A .2. f ACTIONS A . l . fl ^ ' ^'.-JA3 D 'ith less than the required DC Power Sources OPERABLE, no DC po r is ailable to recover from postulated events in MODES 5 and 6 and en han g irradiated fuelm4/.*u. 1 If applica e, CORE ALTERATIONS and handling ofirrad' ed fuel must { be immedia suspended. Suspension of these activities all not preclude f completion o vement of a component to a saf position. Also, if applicable, actio must be initiated immediately to pend operations with a potential to drain reactor vessel to minimi the probability of a vessel [,JsuI draindown and subseg nt potential for fiss' n product release. Also, if
~ applicable, actions must initiated i . ately to suspend any operations DO involving positive reactivity ddition Actions must continue until the operations are suspended. A tions preclude the occurrence of the postulated events.
D The requirement to immed' tely initiate tion to restore the required DC sources to OPERABLE tatus is to be co 'nued until restoration of the I required DC Power S rces is completed. ni s to minimize the time the plant is in this d raded condition of potential (or actually) not being , capable of recov ring from the postulated fuel handh accidents or reactor vessel draind 3 event. l ne pletion Times are based on engineering judgmen ing into cons' eration that a time of as short a duration as is practical ould be ified while ensuring that the activities are suspended in a co rolled er.
$(L 3.Y.1i SURVEILLANCE ne-Bases provided/Er SR 3.8.4.1 through SR 3.8.4.8 in the REQUIREMENTS the Bases for LCO 3.8.4,'DC Sources - Operating"are applicable.
,,7gg*,.h*
I F SYSTEM 80+ B3.8-51 Amendment I
. 16A.1151 December 21,1990
4 0$4 f ( l i A fl. f l , t 4 t if two are required per LCO 3.8.10, the remaining
! L:>c./ -traw with DC power available may be capable of supporting sufficient systems to allow continuation of CORE ALTERATIONS, fuel movement, and operations with a potential for draining the reactor vessel. By allowing the option to declare required features inoperable with the associated DC power source (s) inoperable, appropriate restrictions will be implemented in accordance with the affect 4d req 6 ired-features LCO ACTIONS. In many instances, this option may l
involve undesired administrative efforts. Therefore, the allowance for sufficiently conservative actions is made (i.e., to suspend CORE ALTERATIONS, movement of irradiated fuel assemblies, any activities that could result in ! inadvertent draining of the reactor vessel, and operations involving positive reactivity additions). The Required
+ Action to suspend positive reactivity additions does not preclude actions to maintain or increase reactor vessel inventory, provided the required SDM is maintained.
Suspension of these activitter shall not preclude completion of actions to establish a safe conservative condition. These actions minimize probability of the ocr.orrence of postulated events. It is further required to immediately ' initiate action to restore the required DC electrical power subsystems and to continue this action until restoration is accomplished in order to provide the necessary DC electrical power to the unit safety systems. Notwithstanding perfomance of the above conserv+tive '. Required Actions, the unit is still without sufficient DC power sources to operate in a safe manner. There fore, 1 action must be initiated to restore the minimum required DC power sources and continued until the LCO requirements are restored. The Completion Time of imediately is consistent with the required times for actions requiring prompt attention. The restoration of the required DC electrical power subsystems should be completed as quickly as possible in order to j minimize the time during which the unit safety systems may be without sufficient power. I
m CESSAR 2ali"lCATl!N i l 1 O l i DC Sources - Shutdown
- B 3.8.5 i BASES
/ l REFERENCES
, j?C __ S'h...a
-d=E
*d ..T~M ~' S,---iE =::: = fr C;..bu m ea Eag.a . m s-Water neactors, Nunt.u-vetz, neviuvo 3, and -
Cv? 84f~4.f f $ Di.s5nW i ',',
- l f ' ,e i s. '
[ 2. Nyg u - r.-& e,r;;;;M g w p u.ep;. b:: ,,32;;;;; _ - T:.o..a: gr.mi. ..MERABtMTY Rz=: xthedy-
-Br+980- l qi
- 3. o rn uss, unc 5::sm ro:. , si.t. _i uo Tam. ; -
]
Sen~;- e#. m rv, s s ao o ,, f.oma,, - i 6 !9??-- < i 3 i 1 ,J , 4 i i l SYSTEM 80+ B3.8-52 Amendment I * . 16A.11-52 December 21,1990 ,,
+1_
CESSAR E!5Mcamu 4 16 A.l l .6 B 3.8.6 BATTERY CELL PARAMETERS Battery Cell Parameters B ! 8.6 B 3.8 ELECTRICAL POWER SYSTEMS B 3.8.6 Batten Cell Parameters j BASES ; BACKGROUND LCO 3.8.6, Battery Cell Parameters, utilizes Table 3.8.6-1 to delineate the limits on electrolyte level, float voltage, and specific gravity for the DC Power Source batteries. A discussion of these batteries and their
, OPERABILITY requirements are provided in the Bases for LCO 3.8.4, DC Sources - Operating, and LCO 3.8.5, DC Sources - Shutdown. Within this table, Category A defines the limits for each designated pilot cell and Category B does the same for each connected cell.
The Category A limits for the designated pilot cell's float voltage 2 2.13 , g. y r~ volts and a specific gravity of 21.200(0.015 below the manufacturer's fully charged nominal specific gravity) or a battery charging current that had stabilized at a low value) is characteristic of a charged cell with adequate capacity. The limits on electrolyte level ensures no physical damage to the plates occurs and adequate electron transfer capability is maintained in the . event of transient conditions. The Category B limits for each connected cell's float voltage and specific gravity 2 2.13 volts and a specific gravity of 2 1.195 (0.020 below the manufacturer's fully charged nominal specific gravity with an average specific , j. j gravity of all the connected cells 2 1.205 (0.010 below the manufacturer's fully charged nominal specific gravity) ensures the OPERABILITY and k-capability of the battery. The limits on electrolyte level ensure no physical damage to the plates occurs and adequate electron transfer capability is maintained in the event of transient conditions.
'Ihe limits are based upon manufacturer's recommended values W to , f ,.4 5 '
ensure the OPERABILITY and capability of the batten. The specific gravity limits assure a manufacturer's recommended fully charged nominal specific #I gravity of 1.215. Specific gravity must be corrected for electrolyte temperature and level, and the float voltage limits may be corrected for average electrolyte temperature. These Notes provide for correction of the measured values in accordance with manufacturer's recommendations when the values reflect transient conditions as opposed to battery capacity. (continued) SYSTEM 80+ B3.8-53 Amendment I 16A.11-53 December 21,1990
CESSAR s'L"icm:n O Battery Cell Parameters B 3.8.6 BASES BACKGROUND Category C defines allowable values of electrolyte level, float voltage, and . (continued) specific gravity of each connected cell. These values represent degraded #" c/ battery conditions. However, operatio is permitted when Category C limits are met since sufficient capacity nists to perform the intended function. 6 Dese values are discussed in more detailin the Actions section of this Bases.
, APPLICABLE The initial conditions of deJ ps i basis transient and accident analyses in SAFETY CESSAR-DC Chapters 6, Engineering Safety Features, and 15, Accident ANALYSES +j Analyses, assume all (nggrp Safety Features (ESP) systems are OPERABLE. De DClpower systems provide normal and emergency DC y AD power for* emergency auxiliaries j and 1m control and switching durint all MODES of operation. The OPERABILITY of the r '="~h .b consistent with the initial assumptions of the accident analyses and is based bc. sAyba 9
T ou dL d h upon maintaining'DC power sources and associated distribution systems OPERABLE during accident conditions in the event of(1)/n assumed loss M e d (d'e y a e of,offsitepweLand a a .(2).s d:.dia.;.x: u ,. -single failure. j LCO g WE T P wer Sources are required to be OPE s ensure y 74 availability o. 'e+eq(red power to shutdown th . r and maintain it in j 4 i a safe condition after an an. . . onal occurrence or a postulated 4 EE 4 design basis accident. cell par not within limits do not
]l necessarily r dir inoperable DC sources (batten y Required Actions (refer to LCO 3.0.7).
ss specifically APPLICABILITY ectrol te must be within the limits of Tabl 4en the associated DC Power o OPERABLE (refer to Applicability diseu e ases for LCO , rees - Operating,
.5, DC Sources - Shutdown).
The battery cell parameters are required solely for the 4 support of the associated DC electrical power subsystems. Therefore, battery electrolyte is only recuired when the DC power source is required to be OPEP.ABLE. Refer to the Applicability discussion in the Bases for LCO 3.8.4 and LCO 3.8.5. SYSTEM 80+ B3.8-54
' Amendment I
, 16A.11-54 December 21,1990
l Y /bk. ll- Sf . i l l t g Battery cell parameters must remain within acceptable limits , ,T to ensure availability of the required DC power to shut down the reactor and maintain it in a safe condition after an ' ff anticipated operational occurrence or a postulated 08A. ; Electrolyte limits are conservatively established, allowing , continued DC electrical system function even with Category A ' and B limits not met. > ! ! 4~ . ~ ,. o ,...;, . fc 5,.~% , a W f '* * "'
+W p. (- .,f***'
,2~ ~,"4~
?n1"lg,- ? ,f:Lchpy :, A,14sy:.4 c v ,~; " ^ ~ ,
7 s u
m .'t a :.,. , ~" Q.
.j g ,; ( p p o w+ c r- #
v a ,'. [>. he 'nt.<,2 , t
, *3 .7.J .
I i h f a T F l 1
CESSAR EL5 film 2 1 i I 2 ! Battery Cell Parameters
- {
B 3.8.6 : i BASES ACTIONS A. I . A.2. and A.3 # I
,s pf s '
P Operation with one or more cells in one or more batteries within limits (i.e., Category A limits not met, or Category B limits not met. or Category A and B limits not met), but within the allowable va f - (Category C limits are met) specified in Table 3.8.61/iipernutted since sufficient capacity exists to perform the intended function. *lhe pilot ce 7-
, a s,.h.,:
clectrolyte level and float voltage are required to be verified to meet the / g ' Category C allowable values within one hour (Required Action A.I). This check will provide a quick indication li>Tthe status of the remainder of the s M .# l battery cells. One hour provides time to inspect the electrolpe level and to - s confirm the float voltage of theM pilot cells. Ar =4,/he Completion '/ ? ' , ! Time is based on engineering judgment taking into consideration the time ,.9 e j. ;h I required to perform the Required Action. I b ', ' l Verification that the Category C allowable values are met for all cells j (Required Action A.2) will ensure that during the time to restore the i parameters to the Category A and B limits that the battery will still be capable of performing its intended function. Twenty four hours are provided' I to complete Required Action A.2 because specific gravity measurements must ,
^
I be obtained for each connected cell. As such, the Completion Time is based . p on erigineering judgment taking into consideration the time required to perform the Required Action and the assurance provided by Required Action '
/ y' A.1 that the battery cell parameters are not severely degraded.
[ d' tch / js l Continued operation is only permitted for 31 days before batte cell - 1 parameters must be restored to within Category A and B limits. P'
,g d, 4 fi l ,
)
(1)
- p y the allowable values for electrolyte level (above the top of the plates and not overflowing), ensures no physical damage to the plates with an adequate electron transfer capability-h gyps p* t gd d'
' t rA (continued) ph . '[f h,[ s (1.j / 'p'
- reo 4' o
- p.Q 4* )*f ps.t. -
s 6 I SYSTEM 80+ B3.855 Amendment I 16A.11-55 December 21,1990
e i CESSAR EE5&"ic mx i l O l Battery Cell Parameters l B 3.8.6 : BASES ACTIONS A. I. A.2. and A.3 (continued) ; (continued) i (2) the allowable value for the average specific gravity of all the ce!!s 2 [1.195 [0.020] below the manufacturer's recommended fully
; charged nominal specific gravity], or a battery charging current that had stabilized at less than (2) amperes on a float charge) is the 4
manufacturer's recommendation and ensures that the decrease in capacity will be less than the margin provided in sizing; 4 (3) the allowable value for an individual cell's specific gravity [0.020] below the average of all the connected cells) ensures that an individual cell's specific gravity will not be [0.040] below the manufacturer's fully charged nominal specific gravity. This is the value recommended by the manufacturer to ensure the overall capability of the battery will be maintained within an acceptable 4 limit; and (4) the allowable value for an individual cell's float voltage [> 2.07] volts) ensures the battery's capability to perform its design function. The 31 day Completion Time is based on engineering judgment taking into consideration that while battery capacity is degraded, sufficient capacity exists to perform the intended function and allow time to fully restore the battery - cell parameters to normal limits. i 1 1 When any battery parameter is outside the Category C allowable value, ' sufficient capacity to supply the maximum expected load requirements is not assured and Condition B would be entered. (continued) I 3 N SYSTEM 80+ B3.8-56 Amendment I i .. 16A.11-56 December 21,1990
.n
i CESSAR HSiacui:,. 9 I !I a 4 Battery Cell Parameters j B 3.8.6 1 I BASES i l i ACTIONS B.J l (continued) .i
- 4 appropriate parameters in Table 3.8.61 cannot be met ' rdance l of Condition A, j M erd with the ' red Actions le and associated values are not Completion met, isted battery must be .
- pp or Category C declared inoperable im and uired Actions of LCO 3.8.4, DC Sources - Operating" or LCO C Sources- Shutdown','followed as appropriate. The bat t also be inoperable if the average J electrolyte tem . -e of the pilot cells is less imits of SR 3.8.6.3.
Below mperature, the battery's capability may nohne einfficient to i the design basis load profile. 1 SURVEILLANCE SR 3.8.6.1
, REQUIREMENTS
% -weillance is consistent with the recommendations (R,d.
"Is g d ^
l f), which states that the- d meet Category A limits t g on a regularly rval. Frequency for this ; surv is consistent with the guidance of IEEE-3 . . !
- 2- j SR 3.8.6.2 1 4 )
surveillance is consistent with the recommendations of IEEE-45 f. l j 3),wiu - that the battery be demonstrated to meet ry B limits !
~~~~Y on a guarterly addition, within 24 ho a battery discharge i belov{l10] volts or a battery harge 50 olts, the battery must be - i
, demonstrated to meet Category 's one-time 24-hour surveillance ,
- verifies that no signi degradation o tiery occurred as a !
l consequence of ischarge or overcharge. *ne 24 h ment is judged acceptable given the seven day periodic check of the Category 1 ts. l l i I l (continued) . SYSTEM 80+ B3.8-57 Amendment I 16A.11-57 December 21,1990
i
- x. /fko l/ A l
l I With one or more batteries with one or more battery cell i parameters outside the Category C Allowable Value for any ! connected cell, sufficient capacity to supply the maximum !
~J. expected load requirement is not assured and the l ,/ 4 pp f corresponding DC electrical power subsystem must be declared ,
inoperable. Ad6 Monally, other potentially extreme l conditions, such a not completing the Required Actions of Condition A within the required Completion Time or average electrolyte temperature of representative cells falling below 60*F, are also cause for immediately declaring the associated DC electrical power subsystem inoperable. , l i I l SR 3.8.6.1 3 /
/
This SR verifies that Cate consistent with IEEE-450 (gory Ref.fT), / battery which cell parameters recommends regular are l battery inspections (at least one per month) including voltage, specific gravity, and electrolyte temperature of wt pilot cells.
'G r
SR 3.8.6.2 $ l V \ The quarterly inspection of spe ific gravity and voltage is ; consistent with IEEE-450 (RefJ . In addition, within ! 24 hours of a battery discharge < (110] V or a battery i overcharge * [150) V, the battery must be demonstrated to i meet Category B limits. This inspection is also consistent ~ I with IEEE-450 (Ref.lf), which recossmends special inspections ! following a severe discharge or overcharge, to ensure that no significant degradation of the battery occurs as a ! consequence of such~ discharge or overchargs. !
~
3
CESSAREEl%ue. O Battery Cell Par =md-s B 3.8.6 BASES SURVEILLANCE SR 3.8.6.3 REQUIREMENTS (continued) 's surveillance is consistent with the recommendations of IEEE-4 (Ref, h 3)w tes that the battery average electrolyte temperatu on is. While higher than normal quarte ting temperatures increase battery ca, elevated tempera so increase internal self-discharge, lower cell voltag r a giv ge voltage, and shorten overall battery life. Lower than normal . ratures have the opposite effects and act to inhibit or reduce
- tiety Normal battery operating temperatures are to 90*F with a recom ambient operating temperature o F. This surveillance ensures that the rage electrolyte l tempers remain within an acceptab!c operating range. 'ts were es ished based on manufa;turer's reco=M-' ions.
I d 8 le- S 9 t *I
--/( 6 M G4H d cJtfe J /el-- h REFERENCES 1. (; m ^4.o.L:2.;;M p -- : v.' ).
. 2. 52 FR ??ne unr fornim ws:ry S+-e----. = 7. _ _ _ y Sp:F.d= !+ :----* h Y"--- ?c = ?m , Ta. _.j
--6, iro n 1.l. IEEE-4501980, 'IEEE Recommended Practice for Maintenance, Testing, and Replacement of Large Lead Storage Batteries for Generating Stations and Substations.*
l Jt.2 IEEE-3081978, 'IEEE Standard Criteria for Class IE Power l Systems for Nuclear Power Generating Stations.* 2'
~ - - -
/-
{ This Surveillance verification that the average temperature
*/ is consistent with a
) of representative reconrnendation cells is >(Ref.!
of IEEE-450 [60]M, which states that the _g temperature of electrolytes in representative cells should be determined on a quarterly basis.
\ Lower than normal temperatures act to inhibit or reduce battery capacity. This SR ensures that the operating temperatures remain within an acceptable operating range.
This limit is based on manufacturer recomendations. SYSTEM 80+ B3.8-58 O Amendment Q 16A.11-58 June 30,1993 1
W 4 l Table 3.8.6 1 l l I This table delineates the limits on electrolyte level, float l voltage, and specific gravity for three different categories. The meaning of each category is discussed below. Category A defines the normal parameter limit for each i designated pilot cell in each battery. The cells selected )
,/ as pilot cells are those whose temperature, voltage and ;
electrolyte specific gravity approximate the state of charge g of the entire battery. 3 The Category A limits specified for el$ctrolyte level are l based on manufacturer recomendations'and are consistent with the guidance in IEEE-450 (Ref.I'T), with the extra : Is inch allowance ~ above the high water level indication for ! operating margin to account for temperatures and charge ! effects. In addition to this allowance, footnote a to 1 Table 3.8.6-1 permits the electrolyte level to be above the ! specified maximum level during equalizing charge, provided it is not overflowing. These limits ensure that the plates ! suffer no physical damage, and that adequate electron transfer capability is maintained in the event of transient conditions. IEEE-450 (Ref. V level readings should be mad e l3) recommends that electrolyte been at float charge for at le)ast only 72after the battery has hours. 3 W l The Category A limit specifie[for float voltage is a 2.13 Y per cell. This value is based on a recomendation of IEEE-450 (Ref.t' , which states that prolonged operation of cells < 2.13 Y an reduce the life experJancy of cells. 3 i I j l I i l l. I
dgb i t/"VTFfR s ! SURVEILLANCE Table 3.8.6-1 (continued) i REQUIREMENTS l The Category A limit specified for specific gravity for each l pilot cell is a [1.200] (0.015 below the manufacturer fully
- charged nominal specific gravity or a battery charging i i current that had stabilized at a low value). This value is )
characteristic of a charged cell with adequate capacity. l According to IEEE-450 (Ref. 3), the specific gravity ' readings are based on a temperature of 77'F (25'C). The specific gravity readings are corrected for actual electrolyte temperature and level. For each 3*F (1.67'C) 4 above 77'F (25'C) 1 point (0.001) is added to the reading; 1 point is subtracted for each 3'T below 77'F. The specific gravity of the electrolyte in a cell increases with a loss ' of water due to electrolysis or evaporation. Footnote b to Table 3.8.6-1 requires the above centioned correction for , electrolyte level and temperature, with the exception that level correction is not required when battery charging
- current is < [2] amps on float charge. This current provides, in general, an indication of overall battery condition.
- Because of specific gravity gradients that are produced during the recharging process, delays of several days may occur while waiting for the specific gravity to stabilize.
A stabilized charger current is an acceptable alternative to specific gravity measurement for determining the state of charge of the designated pilot cell. This phenomenon is
, discussed in IEEE-450 (Ref. 3). Footnote c to Table 3.8.6-1 allows the float charge current to be used as an alternate to specific gravity for up to [7 6ays) following a battery equalizing recharge.
. Category 8 defines the normal parameter limits for each connected cell. The ters ' connected cell' excludes any i battery cell that may be jumpered out. The Category B limits specified for electrolyte level and ficat voltage are the same as those specified for Category A , and have been discussed above. The Category 8 limit ! specified for specific gravity for each connected cell is a [1.195] (0.020 below the manufacturer fully charged, nominal specific gravity) with the average of all connected cells > [1.205) (0.010 below the manufacturerifully charged, 4 nominal specific gravity). These values are ba' sed on (continued) C 5 3 -6 v. g 0 /2 / l 4
+a- a'7 T
-[
\
hate Ce e s ) 4 E
- SURVEILLANCE Table 3.8.6-1 (continued) l l REQUIREMENTS l manufacturer's recomendations. The minimum specific l l gravity value required for each cell ensures that the !
effects of a highly charged or newly installed cell.willlnot ' mask overall degradation of the battery. Footnote b to i Table 3.8.6-1 requires correction of specific gravity for ,, i electrolyte temperature and level. This. level correction is j , not required when battery charging current is < [2] amps on r i float charge. ! ! Category C defines the Allowable Values for each connected ! ! cell. These values, although reduced, provide assurance l that sufficient capacity exists to perform the intended function and maintain a margin of safety. When any battery
- parameter is outside the Category C Allowable Value, the i assurance of sufficient capacity described above no longer
- exists and the battery must be declared inoperable.
! l
- The Category C Allowable Yalues specified for electrolyte 1
- level (above the top of the plates and not overflowing) j i ensure that the phtes suffer no physical damage and. i 8
maintain adequate electron transfer capability. The ! Category C Allowable Value for float voltage is based on l' ! IEEE-450 (Ref. 3), which states that a cell voltage of- ! 2.07 Y or below, under float conditions and not caused by i elevated temperature of the cell, indicates internal cell
- problems and may require cell replacement. ;
, , The Cate a [1.195fory C Allowable is based Value of recomendations on manufacturer everage specific ravity-0.020 , below the manufacturer recomended fully charged, nominal l specific gravity). In addition to that liuit, it is
- required that the specific gravity for each connected cell i must be no less than 0.020 below the average of all connected cells. This limit ensures that the effect of a
- highly charged or new cell does not mask overall degradation i of the battery. The footnotes to Table 3.8.6-1 are 1 applicable to Category A, 8, and C specific gravity. 1 i _ n _ _ n
[^-fg , j S M -D \ .
) i' REFERE CES 1. . 5A.]haptr[6.
, }
i 2. J5A Chaper[15. ,.
'. /
- L 3. IEEE- 50 1980). ,
j. k ., i
- - v i
CEOG STS B 3.8-67 Rev.- 0, 09/28/92 i
l Inverters-Operating l B 3.8.7 l B 3.8 ELECTRICAL POWER SYSTEMS j B 3.8.7 Inverters-Operating BASES BACKGROUND The inverters are the preferred source of power for the AC , vital buses because of the stability and reliability they I achieve in being powered from the 120 VDC battery source. The function of the inverter is to convert DC electrical power to AC electrical power, thus providing an uninterruptible power source for the instrumentation and controls for the Reactor Protective System (RPS) and the Engineered Safety Feature Actuation System (ESFAS). Specific details on inverters and their operating , characteristics are found in theM Chapter 48f (Ref.1). , CCs w bc, l APPLICABLE The initial conditions of Desig_n Basis Accident (DBA) and SAFETY ANALYSES transient analyses in the M. Chapter ff4 (Ref. 2) anp CEssatt-bc. Chapter MSt (Ref. 3), assume Engineered Safety Feature systems are OPERABLE. The DC to AC inverters are designed to provide the required capacity, capability, redundancy, and reliability to ensure the availability of necessary power to the RPS and ESFAS instrumentation and controls so that the fuel, Reactor Coolant System, and containment design limits are not exceeded. These limits are discussed in mae detail in the Bases for Section 3.2, Power Distribution Limits; Section 3.4, Reactor Coolant System (RCS); and Section 3.6, Containment Systems. e The OPERABILITY of the inverters is consistent with the 1 initial assumptions of the accident analyses and _is based on meeting the design basis of the unit. This includes j maintaining required AC vital buses OPERABLE during accident conditions in the event of:
- a. An assumed loss of all offsite AC electrical power or all onsite AC electrical power; and
- b. A worst case single failure.
Inverters are a part of the distribution system, and as such, satisfy Criterion 3 of the NRC Policy Statement. l
']
(continued) l CEOG STS B 3.8-68 Rev. O, 09/28/92 l
~
a -m - 0 l i Inverters-Operating : B 3.8.7 i i BASES (continued) l I LCO The inverters ensure the availability of AC electrical power ' i for the systems instrumentation-required to shut down the , i reactor and maintain it in a safe condition after an ' i anticipated operational occurrence (A00) or a postulated i ! DBA. ) Maintaining the required inverters OPERABLE ensures that the redundancy incorporated into the design of the RPS and I;SFAS l 3 -instrumentation and controls is maintained. The fewe sa>e M,_ p3r bid.u J battery powered invertersM(t= p t=in)]- ensure an ;
- uninterruptible supply of AC electrical power to the AC i 4
vital buses even if the 4.16 kV safety buses are i
- de-energized.
9 OPERABLE inverters require the . associated AC vital bus to be
; powered by the inverter, which has the correct DC voltage
, ([120] V) applied from a battery to the inverter input, and
- inverter output AC voltage and frequency within tolerances. 1 This LCO is modified by a Note that allows 3.ie/iw] ode-inverters to be disconnected from a O-r ;; battery for i
s 24 hours, if the vital bus (es) is powered from a l JClass 1EK constant voltage transfonner during the period l and all other inverters are operable. This a lows an battery.Ifvoltage the i i equalizing) inverter (s were charge notto be placed onthe disconnected, oneresulting l condition might damage the inverter (s). These provisions ! minimize the loss of equipment that would occur in the event ! of a loss of offsite power. The 24 hour time period for the allowance minimizes the time during which a loss of:offsite 1 power could result in the loss of equipment energized from the affected AC vital bus while taking into consideration the time required to perform an' equalizing charge on the battery bank. When utilizing the allowance, if one or more i of the provisions is not met (e.g., 24 hour time period :
- exceeded), LCO 3.0.3 must be entered timmediately.
l ' The intent of this Note is to limit the number of inverters that may be disconnected. Only those inverters associated i with the single battery undergoing an equalizing charge may be disconnected. All other inverters must be aligned to ! their associated batteries, regardless of the number of ! inverters or unit design. J. ; F t i / (continued) CEOG STS B 3.8 69 Rev. O, 09/28/92 1 b - 4
- - < , ,,n, - , ,
^ l 1 1 1 l 1 Inverters-Operating l B 3.8.7 i 4 j EASES (centinuec) i i 1 i APPLICABILITY The inverters are required to be OPERABLE in MODES 1, 2, 3, and 4 to ensure that: j a. Acceptable fuel design limits and reactor coolant a pressure boundary limits are not exceeded as a result i of A00s or abnormal transients; and
; b. Adequate core cooling is provided, and containment 3 OPERABILITY and other vital functions are maintained 1 in the event of. a postulated DBA.
Inverter requirements for MODES 5 and 6 are covered in the y Bases for LCO 3.8.8, " Inverters-Shutdown." 1 ] j A.1 d-m A.Z_Qj _
~
[A ppt w g N. i ACTIONS V
, _ (.k, *M'h*
- d Action A.1 is modified by a Note { 'I 4r o*,
l enter the LCO 3.8.9, "Distribu e conditions ired Actions ates of to (,jf 'j. eas-Operating," when . 1' +f { Condition A i ed with vital bus de-energized." f-[p[ j This s the vital bus is returne in 2 hours. PERABLE status 5 J ' Required Action A.1 allows 24 hours to fix the inoperable inverter and return it to service. The 24 hour limit is based upon engineering judgment, taking into consideration the time required to repair an inverter and the additional ! , risk to which the unit is exposed because of the-inverter inoperability. This has to be balanced against the risk of an imediate shutdown, along with the potential challenges 1 to safety systems such a shutdown eight entail. When the AC vital bus is powered from its constant voltage source, it is ! relying upon interruptible AC electrical power sources 1-I (offsite and onsite). - The uninterruptible, battery backed inverter source to the AC vital buses is the preferred source for powering instrumentation trip setpoint devices, i j B.1 and 8.2 If the inoperable devices or components cannot be restored-to OPERABLE status within the required Completion Time, the
' unit must be brought to a MODE in which the LCO idoes not apply. To achieve this status, the unit. must bd brought to (continued) 4 j CEOG STS B 3.8-70 Rev. O, 09/28/92 i
! i i Inverters--Operating l 8 3.8.7 s l l l BASES i l ! 1 l ACTIONS B.1 and B.2 (continued) -l 1 d at least MODE 3 within 6 hours and to NODE 5 within 36 hours. The allowed Completion Times are reasonable, based on operating experience, to reach the required unit conditions from full power conditions in an orderly manner and without challenging unit systems. SURVEILLANCE SR 3.8.7.1 REQUIREMENTS This Surveillance verifies that the inverters are functioning properly with all required circuit breakers closed and AC vital buses energized from the inverter. The verification of proper voltage and frequency output ensures that the required power is readily available for the , instrumentation of the RPS and ESFAS connected to the AC i vital buses. The 7 day frequency takes into account the redundant capability of the inverters and other indications-available in the control room that alert the operator to inverter malfunctions. Cuss -OC-REFERENCES 1. - TSAR, Chapter X8)f. crsut.6c
- 2. -f5AR, Chapter J67 ,)'
- Cwet+c
- 3. .56AR, Chapter M.46~,'d
~ l i J
').
l l CEOG STS 8 3.8-71 Rev. O, 09/28/92
t Inverters--Shutdown B 3.B.8 5 3.8 ELECTRICAL POWER SYSTEMS B 3.B.5 Inverters --Shutdown BASES
~~
' BACKGROUND A description of the inverters is provided in ::: Bases for LCO 3.8.7, " Inverters--Operating." APPLICABLE SAFETY ANALYSES The initial conditions of Design Basis Accident (DBA) and ""~" transient analyses in the-FSAR," Chapter f6) (Ref.1) and i Chapter X15) (Ref. 2), assume Engineered Safety Feature - systems are OPERABLE. The DC to AC inverters are designed to provide the required capacity, capability.. redundancy, and reliability to ensure the availability of necessary power to the Reactor Protective System and Engineered Safety l Features Actuation System instrumentation and contrcIs so ; that the fuel, Reactor Coolant System, and containment design limits are not exceeded. , The OPERABILITY of the inverters is consistent-with the ' initial assumptions of the accident analyses and the > 1 requirements for the supported systems' OPERABILITY. ! The OPERABILITY of the minimum inverters to each AC vital i bus during MODES 5 and 6 ensures that:. a. The unit can be maintained in the shutdown or
, refueling condition for extended periods; -
- b. Sufficient instrumentation and control capability is available for monitoring-and maintaining the unit status; and
- c. Adequate power is available to mitigate events i,
postulated during shutdown, such'as an inadvertent draindown of the vessel or a fuel handling accident. The inverters were previously identified as part of the distribution system and, as such,-satisfy Criterion 3 of-the NRC Policy Statement. N ' l
']
(continued) CEOG STS B 3.8-72 ' Rev. O, 09/28/92
.sw,-. -e- ~
- - . , - ,,--,i,-,-w.-.,.- y y, e .,m,w-y , -p +4--a,
, . - , p cy-w
l
- 1 inverters-Shutdorn j B 3.8.8
! SASES (continue'd) l LCO The inverters ensure the availability of electrical power for the instrumentation for systems required to shut down i the reactor and maintain it in a safe condition after an
- anticipated operational occurrence or a postulated DBA. The {
; battery powered inverters provide uninterruptible supply of- !
1 AC electrical power to the AC vital buses even if the j , 4.16 kV safety buses are de-energized. OPERABILITY of the j i inverters requires that the vital bus be powered by the ' i inverter. This ensures the availability of sufficient i inverter power sources to operate the unit in a safe manner i j and to mitigate the consequences of postulated events during ' ! shutdown (e.g., fuel handling accidents and inadvertent ! reactor vessel draindown). l 3 APPLICABILITY The inverters required to be OPERABLE in MODES 5 and 6 i
- during movement of irradiated fuel assemblies provide l l assurance that:
1 i 4
- a. Systems to provide adequate coolant inventory makeup are available for the irradiated fuel in the core in !
case of an inadvertent draindown of the reactor l vessel; I l b. Systems needed to mitigate a fuel handling accident j are available; i c. Systems necessary to mitigate the effects of events-q that can lead to core damage during shutdown are I available; and j u i . d. Instrumentation and control capability is available . i ' for monitoring and maintaining the unit in a cold ' shutdown condition or refueling condition. Inverter requirements for MODES 1, 2, 3, and 4 are covered , , in LCO 3.8.7. j 4 ACTIONS A.1, a.2.1. A.2.2. A.2.3. A.2.4. and A.2.5 l ehh;as 1' If two 4mewrs are required by LCO 3.8.10. " Distribution ! Systems-Shutdown," the remaining OPERABLE inverters may be ; capable of supporting sufficient requireti features to alluw
']
J (continued) < CEOG STS B 3.8-73 Rev. O, 09/1PJ92 i 1
Inverters-Shutdown B 3.8.8 BASES ACTIONS A.I. A.2.1. A.2.2. A.2.3. A.2.4. and A.2.5 (continued) continuation of CORE ALTERATIONS, fuel movement, operations with a potential for draining the reactor vessel, and operations with a potential for positive reactivity additions. The Required Action to suspend positive reactivity additions does not preclude actions to maintain or increase reactor vessel inventory, provided the required SDM is maintained. By the allowance of the option to declare required features inoperable with the associated inverter (s) inoperable, appropriate restrictions will be implemented in accordance with the affected required features LCOs' Required ACTIONS. In many instances, this option may involve undesired administrative efforts. Therefore, the allowance for sufficiently conservative actions is made (i.e., to suspend CORE ALTERATIONS, movement of irradiated fuel assemblies, activities that could potentially result in inadvertent draining of. the reactor vessel, and operations involving positive reactivity additions). Suspension of these activities shall not preclude completion of actions to establish a safe conservative condition. These actions minimize the probability of the occurrence of postulated events. It is further required to inrnediately initiate action to restore the required inverters and to I continue this action until restoration is accomplished in - l order to provide the necessary inverter power to the unit safety systems. l o Notwithstanding perfomance of the above conservative Required Actions, the unit is still without sufficient AC . vital power sources to operate in a safe manner. Tharefore, action must be initiated to restore the minimum required AC vital power sources and continue until the LCO requirements are restored. The Completion Time of insnediately is consistent with the required times for actions requiring prompt attention. The restoration of the required inverters should be completed as quickly as possible in order to minimize the time the unit- ! safety systems may be without power or powered from a .1 , constant voltage source transfomer. l l
) :
l o . 1 I i (continued) CEOG STS B 3.8-74 Rev. O, C9/28/91 i l l
l Inverters-Shutdown B 3.8.8
. i SASES (continued)
SURVEILLANCE SR 3.8.8.1 REQUIREMENTS This Surveillance verifies that the inverters are functioning properly with all required circuit breakers closed and AC vital buses energized from the inverter. The - verification of proper voltage and frequency output ensures i that the required power is readily available for the l instrumentation connected to the AC vital buses. The 7 day > Frequency takes into account the redundant capability of the inverters and other indications available in the control ! room that alert the operator to inverter malfunctions. CESS 44.-OC REFERENCES 1. -4AR,Chapterg67 . (csw -6C
- 2. MAR, Chapter (16 i
a t I l l l
' l
,. l I i CEOG STS B 3.8-75 Rev. O, 09/28/92 i
l . CESSAR ELam,. l 1 1 4 q ] 16 A.11.7 B 3.8.7 DISTRIBUTION SYSTEMS - OPERATING ! Distribution Systems - Operating B 3.8R$ , B 3.8 ELECTRICAL POWER SYSTEMS B 3.8.Y Distnbution Svstems - Operatine l BASES ~ BACKGROUND De piimary distribution of the onsite AC Power Distribution System g' 4160 volts. There are two 4160 volt emergency buses. These buses are 9 ' Ig located in separate rooms in the diesel building and supply power to essential g1 */,Q
'I 4 loads required during planned operations and during abnormal operational transients and accidents. Power is distributed to the 4160 volt buses from the M / '
offsite power sources as described in the Bases for LCO 3.8.1" AC Sources - Operating.* Control power for the 4160 volt breakers is supplied from the 5 f h v)t *
,. i Class IE batteries as described in the Bases for LCO 3.8.4,'DC Sources -{ r Operating." (h" :(.
] ' g The secondary plant distribution is at 480 volts. The 480 volt distribution t system includes load centers [ ). Load centers [ ] are normally supplied l h ;from 4160 volt buses [ ), respectively, through their own transformers. l ,.- ~ne 480 volt load centers are located in separate rooms in the control
- j- / building. Control power for the 480 volt breakers is supplied from the Class 1E batteries as described in the Bases for LCO 3.8.4,'DC Sources -
l Operating.- f 1eV,7 The safety-related 480 volt AC motor control centers are fed from load centers [ ). He 120 volt AC vital buses are arranged inffohr' load groups I and are normally powered from their 125 volt DC switchboards, respectively
. / via the associated DC/AC inverter. De alternate power supply for the vital i
,., 3 2 / buses is a Class IE constant voltage source powered from the same Division as the associated inverter. The Division 1 constant voltage source is powered from 480 volt rnotor control center (MCC) [ ] and supplies load group [ ]
vital buses. Similarly, MCC [ ] (0...e.m. 2) supplies load group [ ] vital buses, w h . : 2,. d d; sted .t.a.4 csa.ic e r 41 C. he 123 volt DC load groups 1 S=;i ' M'W2. . c ;...:y-normally* s-powered from their battery charger. The battery chargers are powered from their Divisional 480 volt MCC. A loss of AC power or (continued) SYSTEM 80+ B 3.8-59 I Amendment I-16A.11-59 December 21,1990
CESSAREMbia t j ' . t i i Distribution Systems - Operating ] B3.8.M BASES 1 BACKGROUND failure of the battery charger places the associated battery in service to supply (continued) its 125 volt DC switchboard. 9 The list of all required distribution buses is located in Table B 3.8.%1. ! jcefO c f ,(tf' \ APPLICABLE 1he initial conditions of design basis transient and accident analysps in SAFETY CESSAR-DC Chapters 6, Engineering Safety Features, and 15,%ccident ., .. . ANALYSES Analyses, assume Engineered Safety Features (ESF). systems are .7 0 ' OPERABLE. The AC and DCT1ectrical Power Distribution Systems are Af hf&.-a designed to providelifficient capacity, capability, redundancy and reliability , to ensure the availability of necessary power to ESF systems so that the fuel, Reactor Coolant System, and containment design limits are not exrW.
- These limits are discussed in more detail in the Bases for LCO sections 3.2 (Power Distnbution Limits), 3.4 (Reactor Coolant System), and 3.6 (Containment Systems).
~
yc,.jc,1..jeCe. g j,,,e g d r The OPERABILITY of the' Power Distribution Systems is consistent with the initial assumptions of the accident analyses and are based upon maintaining at least one of the onsite AC and DC power sources and associated distribution systems OPERABLE during accident conditions in the event of (1) an assumed loss of all offsite power or all onsite AC power, and (2) a c.n 1 c 44-j single failure.ef A vam AC m DC vmw.
% J .m , . ,e . . . e.:4 t :. re o.a i s s K r.i.. 2. u t y g Q p c i. ins % elut*" q ,
LCO The Power Distribution System Divisions listed in Table B3.8/.1 ensure , the availability of AC and-GC power for the systems required to shutdown - the reactor and maintain it in a safe condition a anticipated operational
- A C *g
~~
- :,) ' occurrence'or a postulated design basis accide D C,
- .and-DC Power Distribution Systems are required towo Divisions be OPERABLE. of the AC,h#{d @ "
grs a r,nl k <k nw
; Maintaining two Divisions of AC,c.d OC Power Distribution Systems ; ! OPERABLE ensures that the redundancy incorporated into the design of ESF is not defeated. Either Division of the distribution system is capable of ,
providing the necessary electrical power to its corresponding ESF Division. Therefore, a single failure within any system or within the electrical distribution systems will not prevent safe shutdown of the plant. ; i , (continued) ; , / SYSTEM 80+ B 3.8 60 Amendment I 16A.11-60 December 21,1990
CESSAR H5nncu,2 I 1 1 Distribution Systems - Operating B 3.8.d
,. m BASES . #. I'M^" #
~
p g , c t- < W LCO OPERABILITY is met, as it agies to AC And j DC Distribution Systems, j (continued) provided the associated bgMtEn' ergized to its proper voltage. De AC vital p < b'us is OPERMA when it is powered from its associated inverter and DC
- . , . U, d*4 bus at proper voltaEe [and frequency). pplyi ; 'b Af' vhnt ' 7;;,,,.
tr-4 1; C:se :E ;;;.; ;.: veig; ~ . .. ovi r- 3.i LL fei w ;;d;.tg 1; AC -- 7 * *, N f .c '
. Pc = Dh:. .L= . Spm Division to oc GFERABLE cur as aim u y-l
,r* "':7- 1; LCO. k df 9 -~ !E Pb d=;! 2;....L,.nvu emsetr r, / ' , , H i m - E . a 2_...L _ ..,y...J im J,,n an,u vo ,,....
OPEPJ.E!L". 'Y. l Inoperable distribution systems do not necessarily result in inoperable , Y y. , / l components unless directed by Required Actions. , ., '., j , _ /g,L, h p.,/
- t. ** *.'
qis LCO is modified by a note allowing two inverters to be disconnected g, *- / . .% frorAtheir associated DC buses for s;24 hours. His allowance is provided p t. g to per'f6wn an equalizing charge on the associated batte,rr!Ianks. During an M equalizing charge, the resulting voltage conditiorpnay damage equipment [ energized from thesassociated vital buses. Disc 6nnecting the two inverters is allowed provided tlbassociated vital buseIsre energized from their Class IE constant voltage sourhstransformeIand the AC vital buses for other battery banks are energized fro (be associated inverters connected to their DC buses. These provisions mim[mize the loss of equipment occur in the event of a loss'of offsite $wer. He 24-hour time period for the allowance mininsris the time during wluha loss of offsite power could result in the lostefequipment energized from theMected AC vital bus while taking into consideration the time required to perforin'an equalizing charge on the bsit'tery bank. When utilizing the allowance, if o'nes or more of the provisions is not met (e.g., 24-hour time period exceedsdgetc.). the . f aisociated vital bus must be declared inoperable. N APPLICABILITY The AC and DC Power Distribution Systems are required to be OPERABLE in MODES 1,2,3, and 4 to ensure that:
- 1. Acceptable fuel design limits and reactor coolant pressure boundary linuts are not exceeded as a result of anticipated operational occurrences or abnormal transients; and (continued)
SYSTEM 80+ B 3.8-61 Amendment I 16A.11-61 December 21,1990
i 1 CESSARn'hia \ j . i l 1 1 i Distribution Systems - Operating B3.8.1i i l BASES APPLICABILITY 2. Adequate core cooling is provided, and containment integrity and (contmued) other vital functions are maintained in the event of a postulated i DBA. AC and DC power distribution system requirements for MODES 5 and 6 are covered in the Bases for LCO 3.8.)," Distribution Systems - Shutdown." to l ACTIONS A . L --- ~ MrH Kth one or more required buses, except AC vital buses, in one dj sion inopc{able, the remaining Power Distribution System Division is capable of supportmg the minimum safety functions manuary to shutdown th'e urut and 1 A, M -
~
maintain in a safe shutdown condition, assuming no pingle failure. However, th verall reliability is reduced because a sing failure in the , ! remaining division of the Power Distribution Systemeould result in the . l minimum requiredbF functions not being supported. Derefore, the I I required DC buses mus't'be restored to OPERABLE' status within two hours and the AC buses must be resitored to OPERABLE status within eight hours. He two-hour Completion TiAfor DC buses is' consistent with Reference 2. He eight-hour Completion Timhs based on' industry-accepted practice and engineering judgment taking into'eqnsideration the number of available l cystems and the time required to reasonably complete the Required Actions.
/ \ .
He specific list of features encompassed by Required Action A.2 is provided i in Reference 2. These features are those whichire designed with redundant safety related divisions. Single' division systems s're not included. Since the l Completion Time allowance /or this Required Action'rtlimited to two hours, I those systems with allowed' Completion Times 2 two ho'urs for both division inoperable are not inclided as required features to be ch'ecked. Required ; Action A.2 is intend 5d to provide assurance that a loss of 6ffsite power, l during the period that an AC bus is inoperable, will not result in'a complete loss of safety function of a critical system. De term
- ensure," ashsed in Required Action A.2, allows for an administrative check by cammining' or other irformation to determme if certain features are for out-of-service (ogs maintenan'ce or other reasons. It does not require unique performance of the l Surveillance Requirements needed to demonstrate OPERABILITY of the i l feature. De Completion Time is intended to allow the operator time to (continued)
SYSTEM 80+ B 3.842 Amendment I 16A,11-62 December 21,1990 (
l A #f-v- =_.w- 7L I /44.//- b L l l A c1 ,
.i I
With one or more required AC buses load centers, motor i j jj,., _ control centers, or distribution panels, except AC vital ' j buses, in one'-tMw incperable, the remaining AC electrical . . - power distribution subsystem in the other 4ee4Wis capable ""~ ,
- i of supporting the minimum safety functions necessary to shut l
{ down the reactor and maintain it in a safe shut'down ' i condition, assuming no single failure.. The overall I I reliability is reduced, however, because a single failure in , the remaining power distribution subsystems could result in j ? the minimum required ESF functions not being supported. : Therefore, the required AC. buses, load centers, motor i ! control centers, and distribution panels must be restored to ; OPERABLE status within 8 hours. . 4
- 84M Condition A worst scenario is one..traw without AC power i
j l (i.e., no offsite power to the 44 Wand the associated 4gMr inoperable). In this condition, the. unit is more vulnerable : to a complete loss of AC power. =It is, therefore. l ! imperative that the unit operator's attention be focused on ' i minimizing the potential for loss of. power to the remaining i train by stabilizing the unit,'and on restoring power to the affected train. The 8 hour time limit before requiring a !
- unit shutdown in this condition is acceptable because.of
} a. The potential for decreased safety if the unit operator's attention is diverted from the evaluations - l and actions necessary to restore power to the affected i train, to the actions associated with taking the unit J to shutdown within this time limit; and A
- b. The potential for an event in conjunction with a l
! single failure of a redundant component in the< train-with AC power. 1 The second Completion Time for Required Action A.1 establishes a limit on the maximum time allowed for any-I comoination of required distribution subsystems to be { inoperable during any single contiguous occurrence of failing to meet the LCO. If Condition A is entered while, i for instance, a DC bus is inoperable,and subsequently ' restored OPERABLE, the LCO may already have been not met for up to 2 hours. 'This could lead to a total of 10 hours,- since initial failure of the LCO, to restore the AC i distribution system. At this time, a DC circuit could again become inoperable, and AC distribution.rtstored OPERABLE. l This could continue indefinitely. i The Completion Time allows for an exception to the nonnal'
- . " time zero' for beginning the allowed outage- time ' clock."
j This will result in establishing the ' tide zero" at the time n i the LCO was initially not met, instead of the time Condition A was entered. The 16 hour Completion Time is an acceptable limitation on this potential to fail to meet the
- LCO indefinitely.
f 4
,a m -
, e- ,, 4 m - - -- , - - e -
i CESSAREH Liu l l i i 1 i I Distribution Systems - Operating i B 3.8J'i l BASES ACTIONS A.1. ," t - ' i L(continued) (continued) evaluate and repair any discovered inoperabilities. This Compt n Time a a ws for an exception to the normal
- time zero* ginning the allowed ou time *elock.* In this Required Acti e Completion Time only begins on i ery that both (1) an ino e AC bus exists, and (2) a required fearure on the er division ' operable. If at any time during the existence of this Condition bus is inoperabic) a required feature subsequently becomes inope ,this mpletion Time would begin to be tracked. Tbe Completio ame is hated on eering iudgment taking into J
consideration the bility of a loss of offsite r occurring in this condition, the y resulting in a loss of function of this feature. Hisis compara to both diesel generators inoperable and, therefore, a comparable Cope' tion Time is established. 1 B.1 sad-B-F . I 4 With one AC vital bus inoperlible, the remaining OPERABLE AC vital buses are capable of supporting the minimum safety functions necessary to shutdon the unit and maintain it in the safe shutdown condition. However, overall reliability is reduced since an additional single failure could result in ; the minimum required ESF functions not being supported. Herefore, the required AC vital bus must be powered from its alternate Class IE constant voltage source transformer within two hours. "'!:ib 21 k~.-e. 'h ^.C .._;
, kn. . 9 - e g te cornAntc e
* - n3 :==:: 0,.; y,y,_,g pc; ;j [;- .L- af Went hus will remain ADFD ADY p g-bg ; ky (
-cfE 6 evwer. Tne M ouus Cvusyinmu Tbx a bn;,' 0; :sga.a... g
( jndy:-: ::li .; b : ::=Mentic; t; y et.L;I;h ef e iv.; vi eff.;a yo,. i T.cun aug dwoug duz ums yw avd, :h; T" ' nr mvailmkle ryttemt andek, te wuusd iv w.:b!y rerp!m the "q"!d .^.;;; ens. C.l oud C.2 l %@t must be placed in a MODE in which the. ply if the
- , , Required Actio sociated Compledmes are not met. His is done hjC by placing the plant in at 3 in six hours and in MODE 5 in 36 hours. The allowed f.emp etion Times nable based on operating experience,so-Teia h the required MODES r without chaUenging plant systems.
. [) . . r pr. *
~ r
-.g s w ;
,. e (continued)
SYSTEM 80+ B 3.8-63 Amendment I. 16A.11-63 December 21,1990
G - g & lt/}.ll-f 3 ' I Condition P *cpresents one AC vital bus without power; potentially both the DC source and the associatcd AC source i are nonfunctioning. In this situation, the unit is ) { significantly more vulnerable to a complete loss of'all ; i-
"' ~i noninterruptible power. It is, therefore, imperative that !
i
- the operater's attention focus on stabilizing the unit, j minimizing the potential for loss of power to the remaining i vital buses, and restoring power to the affected vital bus.
j -
. - i j
This 2 hour limit is more conservative than Completion Times i allowed for the vast majority of components that are without l adequate vital AC power. Taking exception to LCD 3.0.2 for j l components without adequate vital AC power, which would have -l l the Required Action Completion Times shorter than 2 hours if 1 j declared inoperable, is acceptable because of: a a. The potential- for decreased safety by requiring a , i change in unit conditions -(i.e., requiring a shutdown) i and not allowing stable operations to ' continue; j 1 b. The potential for decreased safety by requiring entry. ! into numerous Applicable Conditions and Required , j Actions for components without adequate vital AC power ! j and not providing sufficient time for the operators to i perform the necessary evaluations and actions for-j restoring power to the affected trd4; and i diheiod - o . j c. The potential for an event 'in conjunction with a j 4 single failure of a redundant component. l The 2 hour Completion Time takes into account the importance i to safety of restoring the AC vital bus to OPERABLE status, j the redundant capability afforded by the other OPERABLE. ; vital buses, and the low probability-of a DBA occurring j during this period. 3 g i The second Completion Time for Required Action B.1
- establishes a limit on the maximum allowed for any ;
comoination of required distribution subsystems to be
- i inoperable during any single contiguous occurrence of
- i failing to meet the LCO. If Condition 8 is entered while.
l for instance, an AC bus is inoperable and subsequently 1 returned OPERABLE, the LCO may already have been not met for l i i up to 8 hours. This could lead to a total of 10 hours, l 3 since initial failure of the LCO, to restore the vital bus- ; i distribution system. At this time, an AC-train could again '! become inoperable, and vital bus distribution restored-i OPERABLE. This could continue indefinitely. i
) This Completion Time allows for an' exception to the nomal !
" time zero" for beginning the allowed outage time clock.'
4 This will result in establishing the " time zero" at- the time - the LCO was initially net met, instead of the time-l Condition B was entered. The 16 hour Completion Time is an ' acceptable limitation on this potential to fail to meet the } 2 LCO indefinitely. 2 i d 4
. . _ . , n.., . . . , .
gj j -, 7 Ib 5. H- fr S ' i l e
- C.,:,,1 l J Ml,/ !
i With DC bus (es) in one teau inoperable, the remaining DC electrical power distribution subsystems are capable of i supporting the minimum safety functions necessary to shut -l down the reactor and maintain it in a safe shutdown ' i condition, assuming no single failure. The overall i reliability is reduced, however, because a single failure in j the remaining DC electrical power distribution subsystem i ~ could result in the minimus required ESF functions not being supported. Therefore, the [ required) DC buses must be ! i restored to OPERABLE status within 2 hours. ; I J ]' Conditien C represents one N[without adequate DC power; potentially both with the battery significantly degraceo ano the associated charger nonfunctioning. In this situation, ( the unit is significantly more vulnerable to a complete loss of all DC power. It is, therefore, imperative that the operator's attention focus on stabilizing the unit, minimizing the potential for loss of power to the remaining 1 trains and restoring power to the affected wa+n,dian..a. This 2 hour limit is more conservative than Completien Times allowed for the vast majority of components which would be without power. Taking exception to LCO 3.0.2 for components without adequate DC power, which would have Required Action Completion Times shorter than 2 hours, is acceptable because of: ) , a. The potential for decreased safety by. requiring a ' change in unit conditions while allowing stable opera (tions to continue;i.e., requiring a shutccwn 1 b. a The potential for decreased safety by requiring entry into numerous applicable Conditions and Required Actions for components without DC power and not providing sufficient time for the operators to perform the necessary evaluations and actions for restorino power to the affected4r-a+*; and 4 cha t,4 !'
- c. The potential for an event in conjunction with a single failure of a redundant component.
! The 2 hour Completion Time for DC buses is consistent with ' Regulatory Guide 1.93 (Ref.M I
- p e The second Completion Time for Required Action C.1 i
establishes a limit on the maximum time allowed for any combination of required distribution subsystems to be inoperable during any single contiguous occurrence of failing to meet the LCO. If Condition C is entered while, for instance, an AC bus is -inoperable and subsequently returned OPERABLE, the LCO may already have been not met for j up to 8 hours. This could lead to a total of 10 hours, since initial failure of the LCO, to restore the DC distribution system. At this time, an Af kan could again chis;u _ _ _ _ _ - - - _ _ - _ _ - - - ,-_ - g
t . j !
.L A~? !. f: Q ffd//-^f 3 J
i i [21 (continued) ! i become inoperable, and DC distribution restored OPERABLE. This could continue indefinitely. ; This Completion Time allows for an exception to the normal l
" time. zero" for beginning the allowed outage time " clock." ;
This will result in establishing the " time zero" at the time ; the LCO was initially not met, instead of the time ! Condition C was entered. The 16 hour Completion Time is an : acceptable limitation on this potential to fail'to meet the
~
LCO indefinitely. D.1 and 0.2 If the inoperable distribution subsystem cannot be restored to OPERABLE status within the requirec Completion Time, the unit must be brought to a MODE. in which the LCO does not. apply. To achieve this status, the unit must be-brought to-at least MODE 3 within 6 hours and to MODE 5 within 36 hours. The allowed Completion Times are reasonable, based on operating experience, to reach the required unit conditions from full power conditions in an orderly manner and without challenging unit systems. 1 I I l 4 l 1 l
CESSAR USince Distnbution Systems - Operating l B3.8.X') BASES i
'j p# #
SURVEILLANCE SR 3.8Il i REQUIREMENTS D C ,an} s t v ' / ("# 1 i This[rveillance verifies that the ACg.DCPower Distribution Systems are , functioning properly with all the desired circuit breakers closed and the buses ; energized from normal power. The verification of proper voltage availability on the buses ensures that the required power is readily available for motive as well as control functions for critical system loads connected to these buses. N Oc rc= ey F 7 y i: hd :: =;bui;;;d;22. rf L+ y rem,A , ,.-,;-. #m- mog 2; a; __ __f;;,;;,; rq.,, j :: p;7(;;-- 2; :;;;, _
.k. .. .. nr y,<n : ; k. .... . A .h !a:!a::f ;;i J._, gs A .,...m
;;; r--e cemene
~; i ER 3.8.7.2
, This surveillance sen i the inverters are functi operly, ensuring that the frequency on the AC vita thin limits. The seven-day Frequency is based on en g judgment . g the unit conditions ,
. required to e test, the case of performing t, and the 1 lik of a change in the system component status. 1 a REFERENCES ! 52-FR-+7tt$KL Interim Poliff 5thu; ;- Trbia! Spii;on I l
- _ !=pu.caa;a for N.alcor P
- ct Rac:ct:, Fd=a ',1967.
I
?. : , Regulatory Guide 1.93, " Availability of Electric Power Sources *, December 1974 J
( The 7 day Frequency takes into account the redundant capability of the AC, DC, and AC vital bus electrical power distribution subsystems, and other N indications available in the control room that alert the operator to subsystem malfunctions.
.~.- - - - .
c ,, i (v r ~ ~ > > h: u :.<y.f [ L } z : C .' :. - ' O .%,,,. ! . . [ t Q
', ,% [' . l. 9 Q Gl; I4 2 j s SYSTEM 80+ B 3.8-64 .
i I Amendment I ! 16A.11-64 December 21,1990
f l CESSAR n! Gem:n i i i i a
,i i ,
i i 4 Distnbution Systems - Operating B 3.8.1 T BASES t
' '1 Table B 3.8.7-1 i
/ - ; ELA 'I POWER DISTRIBUTION SYSTEM 5' u '
l hM" .y ! TYPE . VOLTAGE DIVISION 1 DIVISION 2 p s. F. , AC Emergency 4160 VAC b l [] [] $1
, Buses i '7,t 0 480 VAC [] [] g [ '
44., 1 DC Buses [ ] from battery 125 VDC [ ] from battery .
,y g#
[ ] from charger [ ] [ ] from charger [ ] 1 I ( [ ] from battery [ ] from battery ) 2 1 [ ] from charger [ ] [ ] from charger [ ] i AC Vital Buses 120 VAC [ ] from invener [ ] from invener [ ] from invener [ ] [ ] from invener [ ] I-t 4 l a SYSTEM 80+ B 3.8-65 ~ Amendment I 16A.11-65 December 21,1990
CESSARMSinc-
;C IC 16 A.11.li B 3.81 DISTRIBUTION SYSTDIS - SHUTDOWN I l
Distnbution Systems - Shutdown
)j B3.8.4ID
- B 3.8 ELECTRICAL POWER SYSTEMS j
.it B.3.8.tk Distribution Systems - Shutdown B ASES BACKGROUND A description of thed N"' AC y ,JDistribution Power VH W LW& Systems is provided in the Bases for LCO 3.Sk," Distribution Systems - Operating."
l 9 APPLICABLE MODES 1,2,3, and 4, the requirement to have two AC'and DC Power , SAFETY Di 'bution Systems OPERABLE is consistent with the initial assumptions ; ANALYSES ofth ccident analyses and the design requirements and are based u 3 maintain at least one of the AC and the corresponding DC power rees q and associat distribution systems OPERABLE during accident cpaditions ji in the event of) an assumed loss of all offsite or all onsite ACpower, and (2) a single failure f the other AC or DC source. In MODES'S and 6, the j .,-/ design basis acciden DBA) assumptions of a loss of coolant accident (LOCA) coincident wit loss of offsite or onsite AC power and a single ; failure are not required t met. Therefore, the requ'irement to have one , AC and DC Power Distribut n System OPERABli is adequate to assure power is available in MODES d 6 and wbedandling irradiated fuel to a systems required to recover from inadvertent draindown of the reactor a vessel or a fuel handling accident (R 1)/ The OPERABILITY of the minimums / ' ed i AC and DC power sources and associated distnbution systerns'dunng shtdown and refueling ensures that (1) the facility can be maintained in the shuMown or refueling condition for extended time periods.,and (2) sufficient in'strumentation and control ; ) capability is available for,rrionitoring and maintainin'gghe unit status (Ref. 2). The CESSAR-DC onl[ addresses bounding analyses,ssuch that a specific design basis is no[Mways stated for operation in MODES 5 and 6. The safety analysis assumptions for a design basis event may notsbe applicable to
- operation in !(ODES 5 and 6.
/ I Distribution Systems - Shutdown satisfies the requirements oASelection Criteria 3 of the NRC Interim Policy Statement as documented in Rhference
,f \
i
/ !
(continued) j l l SYSTEM 80+ B 3.8-66 Amendment I 16A.11-66 December 21,1990 1 i
l Qg (f' 73 g /b k<N~bb ' l APPLICABLE The initial conditions of Desi n Basis Accident and I SAFETY ANALYSES transient analyses in the- ' ' Chapter ,{6F (Ref.1) and I UN# Chapter 415) (Ref. 2), assume. Engineered Safety feature 1 (ESF) systems are OPERABLE. The AC, DC, and AC vital bus i electrical power distribution systems are designed to ! provide sufficient capacity, capability, redundancy, and ' reliability to ensure the availability of necessary power to ESF systems so that the fuel, Reactor Coolant System, and containment design limits are not exceeded. - The OPERABILITY of the AC, DC, and AC vital bus electrical power distribution system is consistent with the initial I assumptions of the accident analyses and the requirements for the supported systems' OPERASILITY. l The OPERABILIJY of the minimum AC, DC, and AC vital bus ' electrical power distribution subsystems during MODES 5 : and 6 ensures that: I
- a. The unit can be maintained in the shutdown or refueling conditi.', I;r extended periods;
- b. Sufficient instrumentation and control capability is available for monitoring and maintaining the unit i status; and
- c. Adequate power is provided to mitigate events postulated during shutdown, such as an inadvertent draindown of the vessel or a fuel handling accident. !
The AC and DC electrical power distribution systems satisfy Criterion 3 of the NRC Policy Statement, j i I i r _ .c. _ , .- 7 . w..
CESSAR nai?icuis+ : l
. \
I I Distnbution Systems - Shutdown i B 3.8.)'s o ] BASES I I LCO h0 DES 5 and 6 and when handling irradiated fuel, and
; DC P'ohr istnbution System Divisions is require be OPERABLE.
i , Q, nis ensures vailability of sufficient powes.cfrecover from postulated b' events in MODES 6 and when hantfling irradiated fuel (e.g., fuel handling accident, reactor v id own). Inoperable distnbutio stems do no essarily result in inoperable ", l components unl e rected by Required Action fer to LCO 3.0.7). For
. components ered from buses not listed in Table .7-1, LCO 3.0.7 i does n low an exception to the definition of OPERABIL and any of 1 j gbuses deenergized would result in all affected components in ble.
7 s - APPLICABILITY De AC and DCdfower pistribution - IL meo - required to be res OPERABLE sufficient power to in MODES ensure that: 5 and 6,and when handling us , irradiated fuelp/ f.ch % I~d - l ] f 1. ( Adequate coolant inventory makeup is available for the irradiated fuel in the core in case of an inadvertent draindown of the reactor vessel; 4 .
- 2. Systems needed to mitigate a fuel hand!mg accident are available, !
and
~
1.. Instrumentation and control capability is available for monitoring i Eg Qind maintaining theg.JJW unit in a cold shutdown or refueling condition gt .LJ.J y - # AC-end-DCfower gDistribution Sywe4s requirements for MODES 1,2,3, ff i ~ ~ and 4 are addressed in LCO 3.8.7,' Distribution Systems - Operating. )' T 4.2.i, t..?.2 A. 2. 5 A. 2 f 4 A.i. - A . I . A 2. ', 3. A A . u, .d A 3 , A . L - ACTIONS
, Wit o an the required AC or DC,P,owg1Da4nbatio Division ju OPERABLE, no A an i available to recover from postulated eventsjgNO and 6 and when handling a (continued)
._.- c. Systems necessary to mitigate the effects of events that can lead to core damage during shutdown are 4
available; and
\ SYSTEM SO+ B 3.847 k
Amendment I 16A.11-67 December 21,1990 i
arr;d J f jdp g,y. g 67 l I t Various ccmbinations of subsystems, equipment, and com;onents are required OPERABLE by other LCOs, depending'on the specific unit condition. - Implicit in those requirements is the required OPERABILITY of necessary support required features. This. LCO explicitly requires energiration of the portions of the electrical disttibution system necessary to ) support OPERABILITY of required systems, equipment and. l components--all specifically addressed in each LCO and L implicitly required via the definition of OPERABILITY. ,
}
Maintaining these portions of the distribution system ! energized ensures the availability of sufficient power to , operatt the unit in a safe manner to mitigate the I i consequences fuel handlin of postulated events during shutdown (e.g., draincown). g accidents and inadvertent reactor vessel i l 1 l
--"a,+, -- m m
_ , f-
, .jl 1 ;- -{ v & '"A !
pistributirn Systesse-5>. stews - Q ' J' % 5' WLQ AASEE ;(centjocec) I ACTENS A.l. a.2.1. A.2.2. A.2.3. A.2.4 A.2.5. and A.2.6 Although redundant required features may require redundant trains of electrical power distribution subsystems to be i OPERABLE, one DPERABLE distribution subsystem train may be capable of supporting sufficient required features to allow continuation of CORE ALTERATIONS, fuel movement, and operations with a potential for draining the _ reactor vessel. By allowing the option to declare required features associated with an inoperable distribution subsystem i inoperable, appropriate restrictions are implemented in I accordance with the affected distribution subsystems LCO's i Recuired Actions. In many instances, this option may l involve undesired administrative efforts. Therefore, the l allowance for sufficiently conservative actions is made j (i.e., to suspend CORE ALTERATIONS, movement of irradiated fuel assemblies, any activities that could result in inadvertent draining of the reactor vessel, and operations involving positive reactivity additions). Suspension of these activities shall not preclude completion of actions to establish a safe conservative condition. These actions minimize the probability of the occurrence of postulated events. It is further required to imediately , initiate action to restore the required AC and DC electrical power distribution subsystems and to continue this action until restoration is accomplished in order to provide the necessary power to the unit safety systems. Notwithstanding performance of the above conservative Required Actions, a required shutdown cooling (SDC) subsystem may be inoperable. In this case, these Required Actions of Condition A do not adequately address the concerns relating to coolant circulation and heat removal. Pursuant to LCO 3.0.6, the SDC ACTIONS would not be entered. Therefore, the Required Actions of Condition A direct declaring SDC inoperable, which results in taking the appropriate SDC actions. The Completion Time of imediately is consistent with the required times for actions requiring prompt attention. The restoration of the required distribution subsystems should be completed as quickly as possible in order to minimize the time the unit safety systems may be without power. ico%C CEDG STSY ' A Ys .y1[l3@#v' M 9/28 2
CESSARu!Mem . [ IXstribution Systems - Shutdown l B 3.8.8 i I BASES ACTIONS \ A.I. A.2. A.3. A.4. and A.5 (continued) (continued) \ If app (cable, CORE ALTERATIONS and handling of irradiated fuel must l be immediately suspended. Suspension of these activities shall not preclude ! completion'of movement of a component to a safe position. Also,if applicable, actions must be initiated immediately to suspend operations with l a potential to draiNne reactor vessel and subsequest' potential for fission ! product release. Also,hpplicable, actions must)tfinitiated immediately to suspend any operations inv'olving positive reactifity additions. Actions must continue until the operati onsh suspended. These actions preclude the occurrence of the postulated evenh / l The requirement to immediately inidate ac ' so to restore the required AC and DC Power Distribution Systems to OPERAM.E status is to be continued until restoration is comp'leted. Tuis is to mininihe the time the plant is in this degraded conditiorr of potentially (or actually'heot being capable of recovering from the postulated fuel handling accidelitsor reactor vessel draindown event,' \ The Comple/ tion Times are based on engineering judgment -ing into consideration that a time of as short a duration as is practical shkd be specrfied while ensuring that the activities arm suspended in a controlled manner.
/
W Mf7& SURVEILLANCE T bbpmud ' RMtn the Bases for LCO REQUIREMENTS 3yJEstabot!5iiTy'sie'ms - Operitmgr.arupplicable. c r.ssu.- oc y C.Mersc. G REFERENCES 1. Studerd Tnni spg re,;- N C=bzdc ; 0, .a 4 Dr"m@d w 'se P.=::or:;, NUREG.0212, " .. mu 3, Dm.m Met-y NR" Louss: rum, Dennis M. Crutchid w Daiubuimu, Subri.
-T=b.i=! Sp=i&st!= OPEP) 7!LIN bqu= r*- tid ? !y e-1995.
1.1 CESSAR-DC, Chapter 15. (continued) SYSTEM B0+ B 3.848 Amendment I 16A.11-68 December 21,1990
4 i - . Distribut.ipSystems-Shutdown f-
, L/ j j @ .W.If i
BASE 5'-ftentibet)'- ' SURVEILLANCE SR 3.8.10.1 REN:'REMENTS This Surveillance verifies that the AC, DC, an'd AC vital bus ! ) electrical power distribution system is functioning - properly, with all the buses energized. The verification of
- proper voltage availability on the buses ensures that the 3
required power is readily available for motive as well as
- control functions for critical system loads' connected to these buses. The 7 day Frequency takes into account the redundant. capability of the electrical power distribution subsystems, and other indications available in the control ,
room that alert the operator to subsystem malfunctions. 4 REFEREN E5 i1
/I 45ARj Cha er [6] .,/
[
- l 7
[/
. FS haptey ).
E
~
i ; I i 4 ! i ' \ l i a 4
)
l
.CEOGl5TS 8 849 v -
.Re'v 79 89RQ<9 W
- v
*- m
.- CESSAR EMiricariu t J Distribution Systems - Shutdown B 3.8 A /0 i BASES l REFERENCES 4. 32 FR i466, nac intenm Policy Statement on Techmcal (continued) K.wi C"':c L.+. .- a sur Nuctear 7v- . L a rs,
- E -.,;,1967. 6 1
+ )
J 4 ( I. f I 4
. ( ! !a i
J SYSTEM 80+ B 3.8-69 Amendment I 16A.11-69 December 21,1990 a-
i CESSAR n!snCAMN Enclosure 2 l l 1 16A.13.6 B 3.10.6 REDUCED RCS INVENTORY OPERATIONS - AC POWER AVAILABILITY i Reduced RCS Inventory Operations - AC Power Availability l B 3.10.6 ; l B 3.10 REDUCED RCS INVENTORY OPERATIONS l B 3.10.6 Reduced RCS Invectory Operations - AC Power Avsilability l BASES l
/
BACKGROUND AC/ower must be available to a certain degree of reliability since decay f~fI_ y removal capability must be maintained. AC power includes both the - "~~ i to the Class IE distribution system and the diesel generators. pd /, APPLICABLE During reduced CS inventory operations, decay heat from the reactor must i SAFETY be removed. Eie(eww power is required for operating the %utdownM ANALYSIS /ystem. The LCO requirements will maintain an adequate margin for the operability of the AC power sources (Ref.1). Ad /j Qt gaa4&af ob%b (M LCO The LCO 3=40st requires that two 6W=t sourcy of AC power to each division supplying the Class IE distribution system shall be operable. - A diesel generator in each division must also be operable. However, one diesel generator may be replaced by the combustion turbine ifits operation has been verified in the past seven (7) days. jgdg APPLICABILITY This LCO is applicable in MODE 5 and MODE 6 with reduced RCS inventory. He required AC power sources provide assurance that decay beat removal systems are available to maintain heat removal capability. l ACTIONS 61 and A.2 (N }\ With one source of AC power to either division inopersble, SR 3.8.1.1 (Ref.
- 2) must be performed within one hour and subsequently every 12 hours after.
o 9 g *(s The inoperable dwann must be restored to operable status within 30 hours. ' f u cnw ee-a 9w 9+
/ o n te With one source ofPAC power to each division inoperable either division must g#*
be restored to two operable sources within 12 hours. 4 (continued) SYSTEM 80+ B 3.10-20 Amendment Q 16A.13-20 June 30,1993
a CESSAR E!'Jibcu ( Reduced RCS Inventory Operations - AC Power Availability B 3.10.6 BASES ACTIONS C.1 and C.2 (continued) l If the required diesel generator is inoperable, SR 3.8.1.1 must be performed within[one] hour and subsequently every 12 hours after. Also the required diesel generator must be restored to operable status within[12}ours. DL1 If the required Actions A, B, or C are not met within the completion time then the RCS level must be raised to DEL 117'-0*]. This will place the j l plant in a more conservative position with respect to the safety analysis. SURVE h NCE SR 3.10.6.1 REQU1REMENTS Verification of diesel generator operability per SR's 3.8.1.2, 3.8.1.4, 3.8.1.5,3.8.1.9, and 3.8.1.18 (Ref.1) ensures that power will be available during design basis events and for shutdown cooling requirements. f 1 REFERENCES 1. CESSAR-DC, Appendix 19.8A, Shutdown Risk Evaluation Report, 1 Section 2.4.3.
- 2. CESSAR-DC, Section 16.11.1. i l
l l (# ) I N} B 3.10-21 SYSTEM 80+ l l Amendment O l 16 A.13-21 May 1,1993
L i ; 4* i I 4 l hp/ / y Backaround ;
.\
[ AC power must be available to a certain degree of reliability since j decay heat removal capability must be maintained. AC power includes -! [ both the offsite sources to the class'IE distribution system and the-l diesel generators. The electrical distribution system provides;the :) 2 4 necessary redundancy, flexibility, and diversity to reduce the - 1 i likelihood of losing decay heat removal due to a loss of electrical i i power. The _ features of the design, the Technical Specifications, and' l i the procedure guidance allow shutdown' activities within certain limits q { and provide operational guidance for system flexibility and assurance- ! j that a. loss of the decay heat removal is extremely _ unlikely.' .; e a i l Acolicable Safety Analysis' j,p II i The OPERABILITY of the minimum AC. sources'during MODE 5 and MODE 6 with water level in the refueling cavity [117'.0] above the
- l. reactor pressor vessel flange ensures that:
j a. The unit can be maintained in the shutdown or refueling-t condition for extended periods; 1 l b. Sufficient instrumentation and control capability is available for monitoring and maintaining the unit status;-'and,
- c. Adequate AC electrical power is provided to mitigate events l postulated during shutdown, such as an inadvertent' drain down' of the vessel, loss of decay heat removal, or a fuel handling j accident.
l In general, when the unit is shutdown the Technical Specification
- (TS) requirements ensure that the unit has the capability.to i mitigate the consequences of postulated accidents. However,-
- assuming a single failure and concurrent loss of-all offsite'or i l loss of all onsite power is not required. The rational'for this
- is based on the fact that many Design Basis Accidents (DBAs) that i
are analyzed in MODES 1,2,3 and 4 have no specific analyses in MODES 5 and 6. Worst case bonding events are deemed not credible in MODES 5 and 6 because the energy contained within.the reactor pressure boundary, reactor coolant temperature'and pressure, and the corresponding stresses result in the' probabilities of j occurrence significantly reduced or eliminated, and minimal consequences. These deviations from DBA analyses assumptions and i i design requirements during shutdown conditions are allowed-by the j LCO for required systems. ; 1 i)uring MODES I,2,3 and 4, various deviations from the analysis i j assumptions and design requirements are allowed within the ' i i ACTIONS. This allowance is in recognition that certain testing and maintenance activities must be conducted provided an ] acceptable level of risk is not exceeded. During MODES 5 and 6, 4 j
? l I performance of a significant number of required testing and maintenance activities is also required. In MODES 5 and 6,'the I activities. are generally planned and administrative 1y controlled. l Relaxations from typical MODE 1,2,3, and 4 LC0 requirements are acceptable during shutdown MODES based on:
- a. The fact .nat time in an outage is limited. -This is a risk prudent goal as well as utility economic consideration.
- b. Requiring appropriate compensatory measures for certain conditions. These may include administrative controls, reliance on systems that do not necessarily meet typical .
design requirements applied to systems credited in operating MODE analyses, or both,
- c. Prudent utility consideration of the risk associated with-multiple activities that could affect multiple systems.
- d. Maintaining, to the extent practical, the ability to perforin required functions (even if not meeting' MODES 1,2,3 and 4-OPERABILITY requirements) with systems assumed to function during an event.
In the event of an accident during shutdown, this LCO ensures the
- capability of supporting systems necessary to avoid-immediate difficulty, assuming either a loss of all offsite power or a loss l of all onsite (diesel. generator (DG)) power.
The AC sources satisfy Criterion 3 of the NRC Policy Statement. Electrical power sources need to be carefully managed during shutdown operations to maintain a _ desired level of. safety._ This is especially true during reduced inventory operations. : Reduced inventory requires heightened awareness to manage the risks of maintaining an electrical-source to the Class IE buses and of insuring an alternate source of - power is available. The potential for a complete loss of decay heat' removal due to the loss of electrical power is lowered when the l electrical supply requirements for shutdown modes and reduced--inventory l are managed properly. i The management and operation of these electrical sources will be guided j by Technical Specifications for shutdown operations and reduced inventory. The operation ~of the electrical distribution system during shutdown modes and reduced inventory can be guided by procedures for normal alignments and for aligning alternate electrical sources ..if normal sources are interrupted. i i The electrical distribution system design will_ provide flexibility-and' redundancy to allow for the management of competing priorities during i shutdown. These competing priorities include the need to perform maintenance on electrical system equipment versus the need to have electrical sources available to provide power to the Class IE buses. The issue regarding vulnerability during shutdown modes. to a loss of i _ - .;. _.n_ _ _ _ .. . . . . . .
t . i i decay heat. removal (DHR) is resolved by the design features for the Shutdown Cooling System (SCS), instrumentation and controls, electrical power distribution system, new technical specifications and procedure , guidance. These features demonstrate the reduced potential for significant radiological releases from fuel cladding failure due to postulated events and radiological releases from a loss nf DHR due to t loss of SCS events. In particular, features of the SCS and electrical distribution system provide the necessary redundancy, flexibility and diversity to significantly reduce the likelihood of losing DHR. 4 1 The electrical distrit,dtion system provides a diverse sources of power ,
- to the Class IE buses during shutdown modes and reduced inventory in the '
i reactor coolant system and provides redundancy and flexibility to insure re-energizing the Class lE buses if power is interrupted. The LCO requirements will maintain an adequate margin for the operability of the
- AC power sources (Ref.1).
l l
- One offsite circuit capable of supplying onsite Class IE power distribution subsystem (s) of LCO 3.8.10, " Distribution Systems-
. Shutdown," ensures that all required loads on Division 1 and
- Division 11 are powered from offsite power. Two OPERABLE DGs available in standby to supply electrical power to required
- OPERABLE features via the associated Engineered Safety Features
, (ESF) buses that are required to be OPERABLE by LCO 3.8.10, ensures a diverse power source is available, assuming a loss of the offsite circuit. Together, OPERABILITY of the required offsite circuit and DGs ensures the availability of sufficient AC i sources to operate the plant in a safe manner and to mitigate the ' consequences of postulated events during shutdown (e.g., fuel handling accidents, reactor vessel drain down, and loss of decay heat removal). C The qualified offsite circui must be capable of maintaining rated i frequency and voltage whil connected to ESF buses, and of accepting required loads ring an accident. The qualified offsite circuit is eithe the normal or alternate preferred power i circuits to the AC Elec ical Power Distribution System that are described in the CESSAR and are part of the licensing bases for
- the plant. The normal preferred circuit consists of the switching i
stations breaker to the main transformers, the generator breaker, ! the disconnect links to the unit auxiliary transformers, and the circuit path from the offsite transmission network to all of the , 4.160 kv ESF buses required by LCO 3.8.10 including feeder a breakers at the 4.160 kV ESF buses. The alternate preferred circuit consists of the switching station breaker to the reserve , transformer and the circuit path from the offsite' transmission network to all the 4.160 kv ESF buses required by LCO 3.8.10 d including feeder breakers at the 4.160 kv ESF buses. The LCO requires that two independent sources of AC power to each division supplying the Class IE distributic system shall be l
i* l . 1 i operable. .This is accomplished by providing two independent l divisions of AC Electrical Power. Each division has two 4.160 kv 3 i j Safety Buses with three sources of electrical power. 1 Each required DG must be capable of starting, accelerating to ! rated speed and voltage, and connecting to its respective ESF bus ! ! on detection of bus undervoltage, and accepting required loads. ! j This sequence must be accomplished within 20 seconds. Each DG 1 must also be capable of accepting required loads within the I j assumed loading sequence. intervals, and must continue to operate ' i until offsite power can be restored to the ESF buses. These
- capabilities are required to be met from a variety of initial j conditions such as
- DG in standby with the engine hot, DG in i j standby with the engine at ambient conditions, and DG operating in !
parallel test mode. jl l Proper sequencing of loads, including tripping of nonessential ' i loads, is a required function for DG OPERABILITY. [In addition, l proper sequencer operation is an integral part.of.offsite circuit OPERABILITY if its inoperability in any way impacts on the ability ] to start and maintain energized any loads required OPERABLE by LCO' s 3.8.10.] I; During a shutdown condition, it-is acceptable for a single offsite j power circuit to supply all required divisions of electrical 4 power. 2 d 1
! As described in Applicable Safety Analyses, in the event of an l j accident during shutdown, the TSs are designed to maintain the i i plant in a condition such that, even with a single failure,:the l l, plant will not be in immediate difficulty.
l The normal source of power to the Safety Buses has three sources of !
- electrical power. The three sources are
- (1) Normal - The division I l related Unit Auxiliary Transformer (UAT) being powered from Switchyard Interface I through the Unit Main Transformer (UMT), (2) Alternate - The j
division related Reserve Transformer being served from Switchyard i Interface II, and (3) Emergency Diesel Generators which are backed-up by the Combustion Turbine. One diesel generator may be replaced by the i; combustion turbine if its operation has~ been verified in the past seven (7) days. .
; i i Therefore, the Class IE Safety Buses have the potential to be fed from j four different ultimate sources during shutdown modes and reduced {,
; inventory operations. These sources are: i
; 1. Switchyard Interface I,
- 2. Switchyard Interface II,
. 3. Diesel Generator, and
- 4. Combustion Turbine. i This distribution system provides the flexibility to perform shutdown !
activities on one source of power to a division 4.16 kv Safety Bus and' still maintain other diverse sources of reliable electrical power to the 4 4
4.16 kv Safety Bus. Aeolicability This LCO is applicable in Mode 5 and Mode 6 with reduced RCS inventory. The required AC power sources provide assurance that decay heat removal systems are available to maintain heat removal capability. The LCO provides minimum acceptable electrical distribution alignments. Guidance is also provided by procedure to the operation staff to insure i available source alignments are identified whenever shutdown activities '
- are in progress. Additional procedural guidance is provided for .
4 aligning any available source (s) to the Safety Bus (es) if power to the ' bus (es) is interrupted. : The AC sources required to be OPERABLE in MODE 5 and MODE 6 with l water level in the refueling cavity [117'.0) above the reactor i j pressure vessel flange provides assurance that. ;
- a. Systems are available to provide adequate coolant inventory makeup to maintain irradiated fuel in the core covered with ;
coolant in case of an inadvertent drain down of the reactor ! , vessel; j
- b. Systems needed to mitigate a fuel handling accident are available; l
- ' c. Systems necessary to mitigate the effects of events that can lead to core damage during shutdown are available; 3
- d. Instrumentation and control capability is available for i
- shutdown condition or refueling condition; and
- e. Systems are available to remove decay heat from the irradiated ;
fuel in the core. I
- 1 The AC power requirements for MODES 1,2,3, and 4 are covered in
- LCO 3.8.1; and for MODES 5 and 6 with the water level in the !
l refueling cavity [117'.0) above the reactor pressure vessel i flange, in LCO 3.8.2. A l 1 0 't
Enclosure 3
,/ DC Sources-Operating 3.8.4 SURVEILLANCE REQUIREMENTS (continued)
SURVEILLANCE FREQUENCY
')
1 SR 3.8.4.7 -------------------NOTES------------------- l
- 1. The: modified perfonniace7 discharge l
testijniSR;;3.8.4.8 maylbelerformed in lieu of the2serviceitesttin45R 3.8.4.7
~
once per 60 months. " ~ ~~"~~^
- 2. This Surveillance shall not be performed in MODE'1, 2, 3, or 4.
However, credit may be taken for unplanned events that satisfy this SR. ___________________________________________ l 24 months 'l Verify battery capacity is adequate to supply, and maintain in OPERABLE status, the required emergency loads for the design duty cycle when subjected to a battery service test. (continued) CONCURRENCE 1 OTSB CIGrimes W 4 12/01/93 l EELB CHBerlinger 2/01/93 i l i Crystal River Unit 3 3.8-19 Final Draft 12/01/93 i
DC' Sources-Operating 3.8.4 i i l SURVEILLANCE REQUIREMENTS (continued) FREQUENCY' SURVEILLANCE i SR 3.9.4.8 -------------------NOTE------------------in , This Surveillance shall not be-performed l MODE 1, 2, 3, or 4. However, credit may be taken for unplanned events that satisfy- , this SR. y 60 months t
-Verify battery capacity is 2 80% of the manufacturer'sratingwhensubj[ectedtoa disch gQ 7 performance Performance.(
_djichargetest[g3siedjfjsd agps36st. 12 months when battery shows , degradation or . 'l has reached 85% of the expected ! life with capacity < 100% of; . manufacturer's ! rating' I
- m. l 24 months when ,
battery has. -i reached 85% of l the expected life with 1 capacity 1 100% !
- of. :
manufacturer's rating r Crystal River Unit 3 3.8-20 Final Uraft 12/01/93. 1
i DC Sources-Operating B 3.8.4 l BASES SURVEILLANCE SR 3.8.4.7 (continued) REQUIREMENTS requirements (battery duty cycle) of the DC electrical power system. The discharge rate and test length correspond to. the design duty cycle requirements specified in Reference 12. The 24 month Frequency meets the. intent of the recommendations of Regulatory Guide'1.32 (Ref.10) and Regulatory Guide 1.129 (Ref.11), which state that the battery service test should be performed during refueling operations, or at some other outage. f This SR is modified by two Notes. Note 1 allows the I performance of SR 3.".4." t: i: t:k= r:dit f;r h lk; Of
;:r S r;;in; SR 2.".i.7. ":==r,' SR !.".t.7 nrifh: art:5 i
?
b:ttery :ttrit t:: ::t d:-:::tr:t:d by SR 3.".i.". Therchr:, thi: ::b:tituti= i: li it:d t th: SO :=th (1 25%) Tr:;;=:y ;rti= f S" 2.".i.*. Thh ::i: tit tin b
- = pt:bh i= : = : SR 3.".t." r:pr= =t:, i: ;= =:1 - --
- =r:
t::t :f 5:tt=" u =ite th= SR 3.".t.7. Sain,dtfig '
#f65abci%MMt$$1Esf[a[fidigiedtjince per160[monWsj i
-ThFoodiffi Esis
,7c3gg,,gg,ar j
. - ~
pg,g j,tsif.H.. idT_d_sti.. ! pgg s . . ~ g duty g ,
'~~~~~
g},1cyclej{. g H$ usgg m- _p,og ths servleei 5 ~irafsd oneistatteist@imai e i
'1" sthsI 3
batteliy/& pan l
-w
~~
it the;# rfWeentes st! ~
'~
~i Vfe$that3forIim battefyrterminallid3 tag ~e ~
performanceldischarp]i@seesRHsihaegettist!%uldfr foMtWandtf16diperfs aboveithefaintensibatteryEtsruthilNeltagesipecifiedRinitEE batteryllurvicsstesq forgtholdsstisale htime M a11ti3 hat Ofithelservjce. _ stj Vikas 1 = ;g J X;.:isittsr~iic~apaitti 1 ..: i l $@bb4rtidorationilead and(s. (ssul *~y ' j ofthh!4eelft ^
. _ - l- $ $tlet $ 4htsswill.~~ t14hi periodisM itgpj@[lidt;f ._
~
9mista%@5@ i bilfojde [_ E M hdt.tf6Ws}{er (continued) Crystal River Unit 3 B 3.8-46 Final Draft 12/01/93
i-
- DC Sources-Operating i B 3.8.4 i
BASES i SURVEILLANCE SR 3.8.4.7 (continued) ! REQUIREMENTS
~
t'he 'isodi ffWiiiiREfisin~iisITBlidiiii5fisiIiiiiiil~d Widsnt i Ea1
- totthoselsp.aciffedjferialserv]ce s testf"~ ~'~ ~ ~
e
- 1The reason for Note 2 is that performing the Surveillance
! would perturb the electrical distribution system and i challenge safety systems. However, Note 2 acknowledges that 1 ] should an unplanned event occur in MODES 1, 2, 3, or 4,
- that following verification that the acceptance criteria of the SR are met,.the event can be credited as a successful l
performance of this SR. i SR 3.8.4.8 A battery performanceM$iliiIsjii test' is a test of the constant current capaEity 6T a'~ battery to detect any change
- in the capacity determined by the acceptance test. The l performance test is normally done in the as-found condition i after the battery has been in service for a period of time.
The test is intended to determine overall battery ' degradation due to age and usage. i i Ni .. II30 M R j iMthei- i$ttery; performance i discha.l.m.. l .l 1schargertesthis ! acceDtaEj- - l i enl 4 gy .m. --
~
gi,l,,,gqg,yit,hii^~~^^
,,gggyj
- SR63^8[4kWil@l ~1,resentsjeflSR2318[417
- atitheiiM!Biser i
! The acceptance criteria for this Surveillance are consistent ! with IEEE-450 (Ref. 9) and IEEE-485 (Ref. 5). These
- references recommend that consideration be given to
- replacing the battery if its capacity is below 80% of the
, manufacturer rating. A capacity of 80% is an indication that the battery rate of deterioration is potentially increasing, even if there is still ample capacity to meet i the design load requirements.
~
l The Frequency for this test is 60 months, or more frequently-as the battery approaches the end of its expected life, or other signs of degradation are present. A 12 month Frequency is established if the battery shows. degradation or i (continued) i i Crystal River Unit 3 B 3.8-47 Final Draft 12/01/93
i i
- DC Sources-Operating ;
I 'B 3.8.4 j e > BASES ! SURVEILLANCE SR 3.8.4.8 (continued) ! i REQUIREMENTS l 1 1 has reached 85% of its expected life with capacity < 100% of '
- manufacturer's rating. Degradation is indicated, according i
- to IEEE-450 (Ref. 9), when the battery capacity drops by l mora than 10% relative to its capacity.on the previous -
- performance test or when it is below the manufacturer rating. A 24 month Frequency is established when the !
i battery reaches 85% of the expected life, but the capacity. 1 is still 2,100% of the manufacturer's rating. These I Frequencies are consistent with the recommendations in IEEE-450 (Ref. 9). i This SR is modified by a Note indicating the SR'should not be performed in MODES 1, 2, 3, or 4 since performing the Surveillance would perturb the electrical distribution
+ system and challenge safety systems. However, the Note
- acknowledges that'should an unplanned event occur in MODES i 1, 2, 3, or 4, that following verification that the acceptance criteria of the'.SR are met, the event can be ~ credited as a successful performance of this'SR. i 1 i REFERENCES 1. 10 CFR 50, Appendix A, GDC 17. l 2. Regulatory Guide 1.6, March 10, 1971. j , e
- 3. Proposed IEEE-308, dated 1969.
)
'l
{ 4. FSAR, Chapter 8. ;
- 5. IEEE-485-1983, June 1983.
i ) 6. FSAR, Chapter 6. i j 7. FSAR, Chapter 14. j 8. Regulatory Guide 1.93, December'1974. I i l i
- (continued)
Crystal River Unit 3 8 3.8-48 Final Draft 12/01/93 i
Enclosure 4 CESSAR nnfac.rca , Containen==ent B 3.6.1 1 BASES APPUCABLE 'Ibe acceptance criteria applied to accidental releases of radioactive material SAFETY ANALYSES to the environment are given in terms of total radiation does received by a member of the general public who remains at the exclusion ares 'e^y for two hours following onset of the postulated fission product release. The limits established in Reference I are a whole body dose of 25 Rem or a 300 Rem dose to the thyroid from iodine exposure, or both. Cri4 n.n
% htainment OPERABI::Ihatisfies 1: .:; :n -- -- ;'P'- 2 C..
3 of the NRC ineenePolicy Statement 6. y ,y -
-7 l LCO The n'ainmmt OPERABLE LCO requires the ensts6ce of a leek ti con inment structu .
I provisions this LCO are implemented by ring:
- ADD I45tStf E
( 1. inment I ge rate are within imits. l
- 2. tructural integrity of theentcontainm/ is maints' .
I
/ provide assu Theyres imp mented to meet the abeve require tlytt the containment will perform its' designed safetyfifaction to mitigateMw _ l nsequences d accidents which could result in offsNe exposures co le i gto the Referydce 2 limits. -
APPLICABILITY In MODES 1, 2, 3, and 4, a DBA could cause a release of radioactive \
;nt, 1 matenal 4e- contamment. In MODES 5 and 6, the probability and . !
consequences of these events are reduced because of the Reactor Coolant System OtCS) oressure and temr+ erure limitations of '" MODES ein. MOO" ', .t: M:fR; ;ridr.; x; mfurd. The requirements for containment during MODE 6 refueling operations are addressed in LCO JJ,}$ntainment Penetrations.#[j A
$' '&& Ad A'p'R/g QJM 4 S./9 Se v v ~
(Qrdoft. , contairme.rd ks rd required he be. l M ^ YODC 6 No premt & eT reclicac[we,, enaderial $ren conia,onnt, (continued) SYSTEM 80+ B3.6-3 Amendment I 16A.9 3 December 21,1990
.- , , _ . s - -
- ._ _m -
CESSAR E!!Lria i 1 I ( ! l Contain -=-e Isolation valves B 3.6.3 BASES I APPLICABLE The low purge va:ves are capable of closing under accident conditions. SAFETY ANALYSES Therefore, they are allowed to be open for limited periods during power (continued) operation. The ptamment/ solation [alves M :: - - - ^ N. C satisfy the-Cdia ion m x;r-" "'i Z 0 ir 3 of the NRC Inteseen Policy Statement es-2:n- t : "i: 4. LCO Containenanthlationhves formh of the contaia'nant boundary. The fontammentJGolationfalve safety function is related to control of offsies radiation exposures resulting from a DBA. '1%is LCO addressesfontaian===t (olation /alve structural integrity, stroke time,and fentain-tFurge y'alvo
) leakage.)N other pontaineaantJ6olation falve leakage rates are a by LCO 3.6.1,* Containment,"under Type C testing.
D
/ ~
The 'dered OPERABLE when their tainenant Isolhon V5 are isola on times are witha limits and s y isolate on teolation actuation sigd!. & Con inenaat Purge V vos have diff OPERAB refuirements. [24-inch] purge tamed closed
- A00 inktgr :5 urge valves C resilient seals m/alves must be ust meet special enk raie is.
6 The valves vered by this L are listed with ir asaoesated e times in the Sys m 80+ CESS ign Certifi on (Ref. 2). This sting also indicates, one valves as opened /cl on an intermi is under (admmMrative j_ controls. This LCO provides assurance that the (hemin naat pgefalves will perform their desigEed safety nction to mitigate the fu/[nolatio [ consequences of accidents that could result in offsite exposure comparable to the Reference 3 limits. APPLICABILITY [In MODES 1, 2, 3 and 4, a DBA could cause a release of radMye
/ material to contamraaat. However, in MODES 5 and 6 the probability and
[ consequences of these events are reduced due to the pressure and temperature limitations of these MODES. Therefore, the [ontaiannant/solationfalves j ( are not required to be OPERABLE and thefurge y"lves a are not required to . / be sealed closed in MODE 5. In MODE 6. fuel handling evolutions are T Y N $N5/W)l~~ 13 : ,, -p _ & .s fr o w a / M '+,, z ia c.
~
~ ' ' ' "
i
~
(continued) l SYSTEM 80+ B3.6-17 Amendment I 16A.9-17 December 21,1990
- .s.
CESSAR !!E"icamn ; A, 16.9.6 3.6.6 CONTAINMENT SPRAY SYSTEMS Containment Spray Systeam 3.6.6 3.6 CONTAINMENT SYSTEMS 3.6.6 cm'ai-t Serav Sv *-- l LCO 3.6.6 Two Costanart==t Spray divisions shall be OPERABLE. APPLICABILITY: MODES 1,2,3 and 4. # l
+ABB .r1x 4: h s & p'unreM*jON ctWG : n ,,a. 7 iA '
.X(w A e(m. '
, h*3 .
~ #*A '
J ^ CONDITION REQUIRED AC110N COMPLETION TIME A. One Contauunst Spray A.1 Restore Containmast 72 hours division inoperable. Spray division to OPERABLE status. B. Required Action and B.1 Be in MODE 3. 6 hours ' associated Conspletion Tu' ne of Condition A not inst. 3 B.2 Be in MODE 5. 84 hours C. Two Cosimia==at Spray C.1 Enter LEO 3.0.3. i===A=n=Iy divisions inoperable. SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.6.6.1 Verify encg %tainmant/' ptsy manual, power 31 days opers pr automatic valve in the flowpath that is act locked, sealed,or otherwme secured in positioegi s in its correct position. SR 3.6.6 73 ? D-a each.detauuneet/ pray pump band- In wh with
=,.,,,____._m_ - -
the Inservice {denmeM.fs n[recot.it Jd4 &;b8aI 1 . - --- - 1 Testing
. A .Il . Program bL s . G . G .~2. Ver & cesfd,ta,ewt sp.ey hy;9 is 3
l.,ll sf shrier f, R [ }y ( l SYSTEM 80+ wat ,; L u.4:s~<-r 3.6-12 pay W.r; 1 Amendment K 16.S.12 Odober 30,1992
l CESSARE!SA m m Contaia'amat Spray System l
' B 3.6.6 BASES )
l LCO During a DBA, one division of Conf => ament Spray is required to snaintain ! containment peak pressure and temperature below design limits. To ensure these requirements are met, two Containment Spray divisions must be OPERABLE during normal operations. This ensures minimum coolSg requirements are met if a DBA then occurs concurrently with a loss of offsite Imer. jNaa APPLICABILITY In MODES 1,2, 3 and 4, a DBA could cause a release of radi e (- material to containa-at and an increase in fontammant pressure temperatgureoperation of the Contaian=at Spray divi _si , , t sty and consequences or sucn an event am Monn < and fDare reduced due to the pressure and temperature limitations dthese MODES. g The Containment Spray System is not required to be OPERABLE in MNe (S and 6 e p:3 :n 1- h ;-:-:j;f: 2 -- ^
, . J ,
D~ nACTIONS M & }&a^* Aate M w m .4 % h ! p 1 R M -fharm swa cwyM MW - i n
% Q Jd/r m 4c4wath*f my m M WR
' With%n'egntainmentpray divisioninopersNc. Inc moperablefontamamat
_/ -- pray division must be restored to OPERABLE status within 72 hours. In ! p,.cej [adh(this condition, the remaining OPERABLE cooling division is adequate t
/fg perform the fontainment pooling and)odine removal function. However, the overall reliability is reduced because a single failure in the OPERABLE pM SSC*
h*M divisions could result in no Containment cooling and no iodine removal s capability. The 72-bour Completion Time is based on the iodine removal b} function and is consistent with other Engineered Safety Feature Systems' g Completion Times for loss of one redundant division. J f B.1 and B.2 y Q ,n, g c d nyent e g Sn.sson W (o be cas h 4. cPt2Alti elMar wdk.n 4ke. re ired e plant must be placed in a MODE in which the LCO does not apply 44bs. g o eveetM__' -r Sp..j d:v.;.; .; e: . w.2 e O'C'4L; ._. gg citin :h; u..;d C .L:; T. 4":2:i:;;;;g':;'.;.d by pk ,g A plant-in at leasFMOCC : -.iluo .6 iwua, and m mvue a wittun 54 hours. TL; el; hv... .::a J e . ' LIOOE " .. .. L ;._ L ; c;~..: ,g ;;p.-:-- ::> i ":n . 2: p-m sek~a h 't- ;; ; (continued) SYSTEM 80+ B3.6-37 Amendment I 16A.9 37 December 21,1990
CESSAR En9carim 16.13.5 3.10.'S REDUCED RCS INVENTORY OPERATIONS - CONTAINMENT INTEGRITY Reduced RCS Inventory Operations - Containment Integrity 3.10.5 3.10 REDUCED RCS INVENTORY OPERATIONS 3.10.5 Reduced RCS Inventory Onerations - Containment intecrity l LCO 3.10.5 The containment building penetrations shall be in the following status: K -I I l a. 'the equipment hatch closed and held in place by [a minimum of four bolts.] l I
- b. One door in each airlock closed.
l c. Each penetration providing direct access from the containment atmosphere to the
- outside atmosphere is either
l
- 1. Closed by an isolation valve, blind flange, manual valve, water, or equivalent, or
- 2. Exhausting through OPERABLE Reactor Building Containment Purge Exhaust A. s System HEPA filters and charcoal absorbers, and is capable of being closed by ,
an OPERABLE Containment Purge and Exhaust isolation System.
.'APPLICABILITY: MODE 5 REDUCED 'RCS INVENTORYy > (h A$MQ *- f g$L, ,\ N W# h AND fAAA1 AMb l # l ey21 ^ * & .r c?A%G-MODE EDUCED RCS INVENTORY gg qg
[' , gggg . ' ACTIONS
'%._ V CONDITION REQUIRED ACTION COMPLETION TIME A. One or more A.I Restore gontainment penetration [6 hours]
containment to required status. penetrations not in the required status. B. Required Action and B.1 Restore RCS level to [6 hours] Completion Time not > [EL - 117*0*]. met. SYSTEM 80+ 3.10 10 Amendment K 16.13-10 October 30,1992
i 4 Centainment--Shutdown 3.6.X 3.6 CONTAINMENT SYSTEMS , i 3.6.X Containment--Shutdown l LCO 3.6.X Containment shall be OPERABLE unless: I a. At least [one) steam generator with a. water level of at i least [ ] FT. and a steam generator secondary vent of at least [ ] Sq. Inches are available for removal of j decay heat via natural circulation without Ac power. , QB f b. Core decay heat level is < [13)*MWtand Reactor y Coolant System Temperature is < [100]*F i , APPLICABILITY: MODE 5 i ! i l , I( a i i 4 h . l This value has been computed based on the heat addition over a 1 hour period needed to raise the average temperature of water and structural mass in the l RCS to the saturation temperature corresponding to atmospheric pressure 4 assumming RCS water level is at a mid-loop condition. The I hour period
; corresponds to a typical time in which a PWR containment can be closed.
l 1 i MODEL STS for CE Plants i Attachment 3 to GL-92-XX d 3 . . . , , , , ,,y., -,-m,,,. -.m, , w
~
Ccntainment--Rafu3iing3.6.Y t 3.6 CONTAINMENT SYSTEMS 3.6.Y Containment--Refueling LCO 3.6.Y Containment shall be OPERABLE unless Core decay heat level is < [13]* MWt and Reactor Coolant System Temperature is < [100]*F APPLICABILITY: MODE 6 with water level in the refueling cavity < 23 feet above the reactor pressure vessel flange i 1 !
- This value has been computed based on the heat addition over a I hour period
) needed to raise the average temperature of water and structural mass in the RCS to the saturation temperature corresponding to atmospheric pressure !' assumming RCS water level is at a mid-loop condition. The I hour period 1 corresponds to a typical time in which a PWR containment can be closed. MODEL STS for CE Plants Attachment 3 to GL-92-XX l I
Enci m ure 5 CESS AR inlincui2 16.14 4.0 DESIGN FEATURES 16.14'1 . 4.1 SITE , Design Features 4.0 4.1 SITE 4.1.1 Site and Exclusion Ares Boundaries ne site and exclusion area boundaries [shall be as described or as shown in Figure 4.1 1). 4.1.2 Low Perutation Zone (LPZ) ne LPZ [shall be as described or as shown in Figure 4.12). 4.2 REACTOR CORE 4.2.1 Fuel Assemblies f evi.,,. 1.The rea
' gall cor.tain [241]
e,n.y ...J fuel rods withfuel assemblies. an initial composition Each assembly of natural shall consist or slightly ennched uraninen of a matrix of as fuel material. I.imited substitutions of zirconium a!!oy or stainless stee! ,
*y 6 l filler rods for fuel rods, in accordance with approved applicatjuns of fuel rod K
p configurations, may be used. Fuel assemblies shall be limited to those fuel designs that have been analyzed with applicable NRC staff approved codes and methods and shown by M [-a tests or analyses to comply with all fuel safety design bases. A limited number oflead test assemblies that have not completed representative testing may be placed in nonlimiting core d*I regions. 4.2.2 iControl Rodl Assemblies ne reactor core shall contain (95) control element assemblies (CEAs). De control material shall be (silver indium cadmium, boron carbide, or hafnium metal] as approved by
' the NRC.
SYSTEM 80+ 4.0 1 Amendment K 16.14-1 October 30,1992
l CESSARn h na I l i , 16.14.3 4.3 FUEL STORAGE Design Features 4.0 4.3 FUEL STORAGE l 4.3.1 Criticality K 4.3.1.1 7he spent fuel storage racks are designed and shall be maintained with: l
- a. Fuel assemblies having a maximum U-235 enrichment of [5.0) weight i
percent. l
- b. K. s 0.95 if fully flooded with unborated water, which includes an t allowance for uncertainties as described in [Section 9.1 of the Jf5AR];
[c. A norrunal [9.78] inch center to center distance between .;..;; :_::_ I \
--r's - . d. " b' L .g L . - a, ,,. . :h "'5 ". =. .e g.w. , :.
[ fuel nuemblies placed in [the high density fuel storage racks];) l (d. A nommal [9.78) inch center to center distance between a . ::. - y.7,u a,6 ~,, a;;,,g ne ,,,,a ;;; . .p m%
#g T, ~
y p,g im fuel assemblies placed in [the low density fuel storage racks);] y [e. New or partially spent fuel assemblies with a discharge bumup in the '
*seceptable range
- of Figure [3.7.20-1] may be allowed unrestricted q g tvd storage in [either] fuel storage rack)(s); and]
'#V) 5t
# y )} [f. New or partially spent fuel assemblies with 's discharge bumup in the Ab " unacceptable rante* of Figure [3.7.20-1} will be s:ored in compliance Movs th
[K54R. approV4prqu Li q Co ifiyri'. kt . .- tS / ' 8 4.3.1.2 The new fuel storage racks are designed and shall be maintained with: ) u a. i Fuel assemblies having a maximum U 235 enrichment of [5.0} weight percent; b. K,, s0.95 if fully flooded with unborated water, which includes an l allowance for uncertainties as desenbod in (Section 9.1 of the XSAR]; c. K ,50.9B if moderated by aqueous foam, which includes an allowance for uncertainties as desenbed in {ection 9.1 of the M; and 54t
- d. )
l A norrunal[9.78) inch center to center distance between m,7sA u.;.s ~ti tia;.g m...- = p, , a n :n;; 7; j 6 e'- r - ": l fuel assemblies placed in the storage racks. l SYSTEM 80+ 4.0-4 Amendment K ' 16.14-4 October 30,1992 l}}