Text

Proposed Tech Specs Re Operational Safety Instrumentation
	ML20064E285
Person / Time
Site:	Three Mile Island
Issue date:	03/02/1994
From:	; GENERAL PUBLIC UTILITIES CORP.
To:	;
Shared Package
ML20064E245	List: ML20064E242; ML20064E274; ML20064E285;
References
	NUDOCS 9403140234
	Download: ML20064E285 (11)
	v • d • e

,_ _. . _ _ _ _ _. _ . .- _ _ . _.. . . _ _

3.5 INSTRUMENTATION SYSTEMS 3t5.1 OPERATIONAL SAFETY INSTRUMENTATION Applicability Applies to unit instrumentation and control systems.

Objective To delineate.the conditions of the unit instrumentation and safety circuits necessary to assure reactor safoty.

Specifications 3.5.1.1 The reactor shall not be in a startup mode or in a critical state unless the requirements of Table 3.5-1, Column "A" and "B" are met, except as provided in Table 3.5-1, Column'"C". Specification 3.0.1 applies.

The key operated channel bypass switch associated with each reactor.

3.5.1.2 protection channel may be used to lock the reactor trip module in the untripped state as indicated by a light. Only one channel shall be locked in this untripped state at any one time. Unit operation at rated power shall be permitted to continue with Table 3.5-1, Column "A". Only one channel bypass key shall be kept in the control room.

3.5.1.3 In the event the number of protection channels operable falls below the limit given under Table 3.5-1, Column "A", operation shall be limited as specified in Column "C". Specification 3.0.1 applies.

3.5.1.4 The key operated shutdown bypass switch associated with each reactor protection channel shall not be used during reactor power operation (except for required maintenance or testing).

3.5.1.5 During START-UP when the intermediate range instruments come on scale, the overlap between the intermediate range and the source range instrumentation shall not be less than one decade.

3.5.1.6 During START-UP, HOT STANDBY or POWER OPERATION, in the event that a control rod drive trip breaker is inoperable, within one hour place the breaker in trip. Specification 3.0.1 applies.

3.5.1.7 During START-UP, HOT STANDBY or POWER OPERATION, in the event that one of the control rod drive trip breaker diverse trip features (shunt trip or undervoltage trip attachment) is inoperable:

a. Restore to OPERABLE status within 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months or

b. Within one additional hour place the breaker in trip.

i Specification 3.0.1 applies.

[

9403140234 DR 9403o2

p ADOCK 05000289 m" 37 PDR *

, Amendment No. SE, 9S, J7) i

l 3.5.1.7.1 Power may be restored through-the breaker with the failed trip l feature for up to two hours for surveillance testing per T.S. l 4.1.1.

.]

3 5.1.8

. During STARTUP, HOT STANDBT or POWER OPERATION, in the event that y one of the two regulating control rod power SCR electronic trips:is ;

inoperable, within one hour: -l l a. Place the inoperable SCR electronic trip in the tripped i condition or

b. Remove the power supplied to the associated SCRs. i Specification 3.0.1 applies. -l l

L 3.5.1.8.1 Power may be restored through the SCRs with the failed electronic ,

trip for up to two hours for surveillance testing per T.S. 4.1.1. 1 3.5.1.9 The reactor shall not be in the Startup mode or in a critical state l unless both HSPS actuation logic trains associated with the j Functional units listed in Table 3.5-1 are operable except as l provided in Table 3.5-1,0. l 3.5.1.9.1 With one HSPS ar.tuation logic train inoperable, restore the train l to OPERABLE or place the inoperable device in an actuated state within 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months or be in HOT SHUTDOWN within the next 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months .

With both HSPS actuation logic trains inoperable, restore one train to OPERABLE within 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months or be in HOT SHUTDOWN within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months .

Bases l

Every reasonable effort will be made to maintain all safety instrumentation in j operation. The reactor trip, on loss of feedwater may be bypassed below 7%

reactor power. The bypass is automatically removed when reactor power is raised above 7%. The reactor trip, on turbine trip, may be bypassed below 45%

reactor power (Reference 1). The safety feature actuation system must have l two analog channels functioning correctly prior to startup.

The anticipatory reactor trips on loss of feedwater pumps and turbine trip have been added to reduce the number of challenges to the safety valves and power operated relief valve but have not been credited in the safety analyses.

Operation at rated power is permitted as long as the systems have at least the redundancy requirements of Column "B" (Table 3.5-1). This is in agreement with redundancy and single failure criteria of IEEE 279 as described in FSAR Section 7.

There are four reactor protection channels. Normal trip logic is two out of four. Minimum required trip logic is one out of two.

3-27a Amendment No. J2), J2%, JJE, J57,

N .

~

'13F TABLE 3.5-1 g

t i

t INSTRUMENTS OPERATING CONDITIONS -

[

E-Ei Functional Unit (A) (B) (C)

Minimum Operable Minimum Degree Operator Action if Conditions '

, ?%

Channels of Redundancy of Column A and B Cannot be Met t

j$ A. Reactor Protection System

{j 1. Manual pushbutton 1 0 (a)

2. Power range instrument channel 2 1 (a)

3. Intermediate range instrument 1 0 (a) (b) channels

4. Source range instrument channels 1. 0 (a) (c)

5. Reactor coolant temperature 2 1 (a) g instrument channels

$ 6. (Deleted) -- -- ----

7. Flux / imbalance / flow 2 1 (a)

8. Reactor coolant pressure

a. High reactor coolant pressure 2 1 (a) instrument channels

, b. Low reactor coolant pressure 2 1 (a) instrument channels .

e 8

e

97 ' TABLE 3.5-1 (Cont'd) 2 .

.i INSTRUMENTS OPERATING CONDITIONS . .

2 c

F Functional Unit (A) (B) (C)

Minimum Operable Minimum Degree Operator Action if Conditions g; Channels of Redundancy of Column A and B Cannot Be Met

f A. Reactor Protection System (cont'd)

, q 0: 9. Power / number of pumps 2 1 (a) 2" instrument channels ,

, h!' 10. High reactor building 2 1 (a) pressure channels ,

(a) Restore the conditions of Column (A) and Column (B) within one hour or place the unit in HOT SHUTDOWN within f an additional 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months .

$ (b) When 2 of 4 power range instrument channels are greater than 10 percent full power, intermediate range j instrumentation is not required. .i (c) When 1 of 2 intermediate range instrument channels is greater than 10-" amps, or 2 of 4 power range ;

instrument channels are greater than 10 percent full power, source range instrumentation is not required.

I i

5 i

I

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ . _ _ _ _ _ _ _ _ _ _ _ _ _ . _ _ - _ . ~ . _ . _ _ _ . . ,. - ~ . __ . - _ __ . _ _ _ _

2 TABLE 3.5-1 (Cont'd)

. INSTRUMENTS OPERATING CONDITIONS -

A F Functional Unit (A) (B) (C)

Minimum Operable Minimum Degree Operator Action if Conditions i Channels of Redundancy of Column A and B Cannot Be Met B. Other Reactor Trips

1. Loss of Feedwater (c) 2 1 (a) r

2. Turbine Trip (c) 2 1 (b) l (a) Restore the conditions of Column (A) and Column (B) within one hour or reduce indicated reactor power to less than 7% within an additional 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months .

(b) Restore the conditions of Column (A) and Column (B) within one hour or reduce indicated reactor power to less ,

u, than 45% within an additional 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months . 1 Es r (c) Trip may be defeated during low power physics tests.

s?

i

.[

jr ' TABLE 3.5-1 .(Cont'd) I

.g

& INSTRUMENTS OPERATING CONDITIONS -

5 !

A if Functional Unit (A) (B) (C)

Mininum Operable Minimum Degree Operator Action if Conditions

0 Channels of Redundancy of Column A and B Cannot Be Met. 1 -;

C. Engineered Safety Features i

Makeup and Purification -;

1.

System (high pressure injection. mode) l

a. Reactor Coolant Pressure 2 1(b) (a)

Instrument Channels ;

b. Reactor Building 4 psig 2 1(b) -(a)

Instrument Channels :

c. Manual Pushbutton 2 N/A (g)

(also actuates low Pressure .

T Injection) 'i II !

2 Decay Heat System (low t pressure injection mode)

a. Reactor Coolant Pressure 2 1(b) (a)

Instrument Channels t

b. Reactor Building 4 psig 2 1(b) (a)

Instrument Channels i

c. Reactor Coolant Pressure 1 0 Open circuit breaker at MCC D.H. ' Valve Interlock for DH-VI or DH-V2 with the ;

Bistable affected valve'in the closed position within 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months or maintain R.C. pressure less than :

350 psig. [

7

{

TABLE 3.5-1 (Cont'd) -.

INSTRUMENTS OPERATING CONDITIONS

-?

5 Functional Unit (A) (B) (C) ;

Minimum Operable Minimum Degree sperator Action if Conditions s

Channels of Redundancy ofColumnAandBCannotBeMet'l i

I y C. Engineered Safety Features (cont'd) ;

N

3. Reactor Building Isolation and ;

. Cooling System

a. Reactor Bldg. 4 psig 2 1(b) (a)

Instrument Channel ,

b. Manual Pushbuttons

~

i. 4 psig feature 2 N/A (g) -f

ii. 30 psig feature 2 N/A (9)

c. RPS Trip 2 1(b) (a) ;

[ d. Reactor Building 30 psig 2 1 (c) :

~ pressure switches

e. RCS Pressure less than 1600 psig 2 1(b) (a) l f. Reactor Building Purge Line 1 0 (f)

Isolation (AHV-1A and AHV-10)~High Radiation I 4. Reactor Building Spray System

a. Reactor Building 30 psig 2 1 (d) j pressure switches

. b. Spray Pump Manual Switches- 2 N/A (g)

5. 4.16KV ES Bus Undervoltage Relays !

a. Degraded Grid Voltage Relays 2 1 (e)

b. Loss of Voltage Relay . 2. 1_ (e)

T

_ __________.__l'________________________m. _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ i _ _ _ _ _ _ _ _ _ _ _ . __ _ _ . _ _ _______e-

--__ _ _ _ . . v ._

l j[ TABLE 3.5-1 (Cont'd)

= .

INSTRUHENTS OPERATING CONDITIONS

[

s .

[C. Engineered Safety Features (cont'd)

~

O y

(a) Restore the conditions of Column (A) and Column (B) within one hour or place the reactor in HOT SHUTDOWN .

== within an additional 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and COLD SHUTDOWN within the following 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .

. j$ (b) The minimum degree of redundancy may be reduced to 0 up to 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months for surveillance testing.

l (j (c) The Operability requirement is two out of three pressure switches in each train, with a minimum degree of redundancy of one, in each train.

1. If the minimum conditions are not met on one train, restore the function to OPERABLE within 48 hours5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months , or place the reactor in HOT SHUTDOWN within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months .

4

2. If the minimum conditions are not met on either train, then place the reactor in HOT SHUTDOWN in 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months .

(d) The Operability requirement is two out of three pressure switches in each train, with a minimum degree of l y redundancy of one, in each train.

1. If the minimum conditions are not met on one train, restore the function to OPERABLE within 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months , or place the reactor in HOT SHUTDOWN within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months .

2. If the minimum conditions are not met on either train, then place the reactor in HOT SHUTDOWN in 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months '

and COLD SHUTDOWN within the following 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .

(e) If a relay fails in the untripped state, it shall be placed in a tripped state within 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months to obtain a -

degree of redundancy of 1. The relay may be removed from the tripped state for up to 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months for functional testing pursuant to Table 4.1-1.

(f) Discontinue. Reactor Building purging and close AHV-1A, 1B, 1C, and ID within eight hours. -;

i

____.______________________._________.__________c_ ___m _____ _ . _ m _ __ , _ _. ____ ._m_____

l! . ;! , f i' . :! i:if i > ;I}!t' , ! ,. .

i! [ !.

.e b

i n

o h t t i

n w i

a s T r u O t t H a .

h t n c s i a

e E r L o n B t o A c _

R a e E e r P r u O t e a o h e t t f

h e d c c e t a i i l f w p i s

.c n e e e p h h s t t .

s e e ,r h r eu t o l o t bh S r s a N o e r4 O f r e2 I p T h , og

)

I c e nn d D t l ii

' N i b .

w t O w as eo n C s rr rl o eu al C G n po o

( N o oh ef I i n r T t i6 ue 1 A a th R u st at 5 E t i x e P c e fn 3 O a nn i i th E S l ae at L T a rh hi B N u tt t w A E n T M a en rN U m ni oW R oh fO T e t D S h ni sT N

I t ow eU hH r hN cS o cW t f tO iD

) i D wL d s wT sO

' i sU C t H n n t nS od o n o in c e i T t a

( m tO a e aH us s r u t r e i t n cu .

r u q

ci ao u a h t e e l a r l b a6 e a u F y ur nn t no ai y i a m t

e l

i msr hW N

f b eu tO .

a a . h o oD S rE th bT eL U d pB f2 fH e OA I7 I S .

r R e eE e hP . .

n TO 1 2 i

g )

n g E (

C r

3g1g% z*. ,,;; 7NC$I

' ,. I il l ;! < 4i > f! , 3 !i! l 4

37 TABLE 3.5-1 (Cont'd) 2 -

Et INSTRUMENTS OPERATING CONDITIONS i

8 r+

F Functional Unit (A) (B) (C)

Minimum Operable Minimum Degree Operator Action if Conditions Channels of Redundancy of Column A and B Cannot Be Met ]

D. Heat Sink Protection System

1. EFW Auto Initiation

a. Loss of both Feedwater pumps N/A(b) N/A(b) (a)

b. Loss of all RC Pumps N/A(b) N/A(b) (a)

c. OfSG A low Level 2 1 (a)

d. OTSG B Low Level 2 1 (a)

e. High Reactor Building Pressure 2 1 (a)

2. MFW Isolation

a. OTSG A low Pressure 2 1 (a)

b. OTSG B Low Pressure 2 1 (a)

3. EFW Level Control w a. OTSG A Level Control N/A(b) N/A(b) (a)

b. OTSG B Level Control N/A(b) N/A(b) (a)

(a) Restore the conditions of Column (A) and Column (B) within 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months , or place the unit in HOT SHUTDOWN within the next 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months .

(b) Operability requirements are specified in Section 3.5.1.9.

g TABLE 4.1-1 (Cont'd)

, o .

h CHANNEL DESCRIPTION CHECK TEST CALIB" ATE REMARKS E -

" 19. Reactor Building Emergency g Cooling and Isolation System Analog Channels -

4 w

? a. Reactor Building S(1) M(1) F (1) When CONTAINMENT INTEGRITY is required.

4 psig Channels

- b. RCS Pressure 1600 psig S(1) M(1) NA (1) When RCS Pressure > 1300 psig.

l 3 c. RPS Trip S(1) M(1) NA (1) When CONTAINMENT I E 6RITY is required.

y d. Reactor Bldg. 30 psig S(1) M(1) F (1) When CONTAINMENT 11dEGRITY is required. ',

l m pressure switches I

! E e. Reactor Bldg. Purge W(1) M(1) F (1) When CONTAINMENT INTEGRITY is required.

Line High Radiation q (AH-V-1A/D) y f. Line Break Isolation W(1) M(1) R (1) When CONTAINMENT INTEGRITY is required.

Si_gnal (ICCW & NSCCW)

20. Reactor Building Spray NA Q NA -l System Logic Channel

, 21. Reactor Building Spray NA M F [

5, 30 psig pressure switches ! t

22. Pressurizer Temperature S NA R Channels ,

t

23. Control Rod Absolute Position S(1) NA R (1) Check with Relative Position Indicator.

i

24. Control Rod Relative Position S(l) NA .R (1) Check with Absolute Position Indicator.

25. Core Flooding Tanks

a. Pressure Channels S(1) NA F (1) When Reactor Coolant system pressure is greater than 700 psig.

b. Level Channels S(1). :NA F i

26. Pressurizer Level Channels S NA R i

- _ _ - - - _ _ - .. . - _ .-, . _

ML20064E285

Text

Navigation menu

Search