ML20069G835

Proposed Tech Specs Eliminating Excessive & Unnecessary Testing of Standby Diesel Generators

ML20069G835
Person / Time
Site:	South Texas
Issue date:	06/06/1994
From:	HOUSTON LIGHTING & POWER CO.
To:
Shared Package
ML20069G828	List: ML20069G835 ST-HL-AE-4736, Application for Amends to Licenses NPF-76 & NPF-80,revising TS 3.8.1.1 by Eliminating Excessive & Unnecessary Testing of Standby Diesel Generators
References
NUDOCS 9406100181
Download: ML20069G835 (27)

Text

<

3/4.8 ELECTRICAL POWER SYSTEMS 3/4.8.1 A.C. SOURCES OPERATING LIM].IINGIORDIUDN FOR OPERA _UQN

3. 8.1.1 As a minimum, the following A.C. electrical power sources shall be OPERABLE:

a.

Two physically independent circuits between the offsite transmission networkandtheonsiteClassIEDistributionSystemyand b.

Three separate and independent standby diesel generators, each with a separate fuel tank containing a minimum volume of 60,500 gallons of fuel.

APPLICABILITY:

MODES 1, 2, 3, and 4.

ACTION:

With one offsite circuit of the above-required A.C. electrical power a.

sources inoperable, demonstrate the OPERABILITY of the remaining A.C.

sources by performing Surveillance Requirement 4.8.1.1.1.a within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> and at least once per 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> thereafter. Dcmonstrate the-4PERABILITY cf ceeh-stendby dicsc1 generatcr that hss not been suc-cessfe!!y t'ested "ithin tac pact 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> by performing Surveillance i

Requirement 1.8.1.1.2.a.2) for-each-such standby dic:cl generater,

- separately, uithin 21 Scure., in at least HOT SHUTDOWN within the Restore the offsite circuit to OPERABLE status within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> or be next 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> and in COLD SHUTDOWN within the following 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

b.

With a standby diesel generator inoperable, demonstrate the OPERABILITY of the above-required A.C. offsite sources by performing nJ46 d r Surveillance Requirement 4.8.1.1.1.a within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> and at least once per 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> thereafter.

If the standby diesel generator became in-M if8 C H #N operable due to any cause other than+preplannned preventive main-r?

tenance or testing, demonstrate the OPERABILITY of the remaining OPERABLE standby diesel generators by performing Surveillance Require-ps ster ment 4.8.1.1.2.a.2); sad.for each such standby diesel generator p g pco mA separatelyrwithin 24-hourspt Restore the inoperable standby diesel O

generator to OPERABLE status within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> or be in at least HOT g

SHUTDOWN within the next 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> and in COLD SHUTDOWN within the following 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

,r d e aboe-repulred Ac e/ccf ma l #0w a With on.e offsite circuit and.wa rc esone standby diesel generator-ef the above-c.

required A.C. c1cc4rical pcV er ccurces inoperable, demonstrate the OPERABILITY of the remaining A.C. sources by performing Specifica-tion 4.8.1.1.la. within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> and at least once per 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> there-af ter; and if the standby diesel generator became inoperable due to

-Mhit-test is required-to-be-completed regardless of when the inoperable standby

--diesel generatee-4+-restered-te4PERABRHE i

A*4ess-of-ene-13-8-kV-61andby-bus-to-4-1fr ki' EST bus Mnt t.vutt+ttttes-less 0f 000 c f4si4+-source.

Foss-of-two-13-B-tV-Standby-busses to 4.10 ki' [ST bus lin00

-om stitu tes-Joss-of-t wo-o f f si te-sou cec s.

SOUTH TEXA$ - UNITS 1 & 2 3/4 8-1 9406100101 940606 PDR ADOCK 05000490 PDR P

1 l

i I

ATTACHMENT A.

1 an inoperable support system, an independently testable component, or 1

i ATTACHMENT B.

unless it can be demonstrated there is no common mode failure for the remaining diesel generator (s).

f i

h i

l 5

?

l 1

i 3

l 4

t

'I I

TSC-94\\94-140.001

o ELECTRICAL POWER SYSTEMS LIMLUNG_CONDLUON QR_0PERATION ACTION (Continued)

Jfl I any cause other than3 preplanned preventive maintenance or testing, 4 7ta c H 'H f

• T demonstrate the OPERABILITY of the remaining OPERABLE standby diesel M

generators by performing Surveillance Requirement 4.8.1.1.2a.2) within 8 hour9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br />sW; restore at least one of the inoperable sources to OPERABLE status within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> or be in at least HOT STANDBY within the next 5(g 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />.

Restore scum (g at least two of fsite circuits and three standby diesel generators to OPERABLE status within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> from the time of initial loss or be O

in at least HOT STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />.

d.

With one standby diesel generator inoperable in addition to ACTION b.

or c. above, verify that:

1.

All required systems, subsystems, trains, components, and de-vices that depend on the remaining OPERABLE diesel generator as a source of emergency power are also OPERABLE, and 2.

When in MODE 1, 2, or 3, the steam-driven auxiliary feedwater r

pump is OPERABLE.

If these conditions are not satisfied within 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> be in at least HOT STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />.

e.

With two of the above required offsite A.C. circuits inoperable,

--demonst+ ate-the OPERABILITY of-three standby diesel gencrctors-by

--performimf-the-requiremcat+-of Specificat-ica 4.0.1.1.2c.2) within heurs unless the stendby dicsc1 gcacrators crc circady opercting; restore at least one of the inoperable offsite sources to OPERABLE status within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />. With only one of fsite source restored, restore at least two offsite circuits to OPERABLE status within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> from time of initial loss or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />.

f.

With two or three of the above required standby diesel generators inoperable, demonstrate the OPERABILITY of two offsite A.C. circuits j

by performing the requirements of Specification 4.8.1.1.la. within i

1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> and at least once per 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> thereaf ter; restore at least two standby diesel generators to OPERABLE status within 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />.

Restore at least three standby diesel generators to OPERABLE status within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> from time of initial loss or be in least HOT STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and in COLD SHUTOOWN within the following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />.

Whis4est-4s-required 40-be-completed-regerdless-of-when-the-ineperetA c emdby

-d imhrnera te r-i s-res tored -to4PH! AB i tW/-

SOUlH If XA5 - UNITS 1 & 2 3/4 8-2 i

ATTACHMENT C c.

Maintain properties of new and stored fuel oil in accordance with the Fuel Oil Monitoring Program.

d.

Deleted I

i t

i i

i h

i i

i f

i I

I i

L i

TSC-94 \\ 94 - 14 0. 001

.~

i ELECTRICAL POWER SYSTEMS St!RVf1LLMELBEQUIREMEHIS 4.8.1.1.1 Each of the above required independent circuits between the offsite transmission network and the Onsite Class IE Distribution System shall be:

Determined OPERABLE at least once per 7 days by verifying correct a.

breaker alignments, indicated power availability, and b.

Demonstrated OPERABLE at least once per 18 months during shutdown by transferring the unit power supply from the normal circuit to each of the alternate circuits.

4.8.1.1.2 Each standby diesel generator shall be demonstrated OPERABLE: (2)

In accordance with the frequency specified in Table 4.8-1 on a a.

STAGGERED TEST BASIS by:

1)

Verifying the fuel level in its associated fuel tank, 2)

Verifying the diesel starts from ambient condition and accele-rates to 600 rpm (nominal) in less than or equal to 10 seconds.*G)

The generator voltage and frequency shall be 4160 + 416 volts and 60 + 1.2 Hz within 10 second Thedieselgeneratorshallbestbs*afterthestart"~ signal.

ed for this test by using one of the following signals:

a)

Manual, or b)

Simulated loss-of offsite power by itself, or c)

Simulated loss-of-offsite power in conjunction with a Safety Injection test signal, or d)

A Safety Injection test signal by itself.

3)

Verifying the generator is synchronized, loaded to greater than (d(N

,fooo+r equal to 5500 kW in-less-than-or-eque4--to-10 minutes *, and operateswithaloadggOtee-than-oe-equal to 5500 kW for at least 60 minutes, and 5000 4)

Verifying the standby diesel generator is aligned to provide standby power to the associated emergency busses.

^These-diesel-generetoe-sterts-from-embient-conditicas shall be perfermed 0"'y ence-per-184-days-in-these-sveve444ence-tests-and-ell-ether engine starts for

-the-purpose-of-this-wevei44ence-testingshall be preceded by an engine prelvbe-

-peried-and/or-ethee-varmup-procedures-such-asgradual-leeding-(H50 sec) rcce -

-mended 4y-timnufactueee-so-that-the-mechanicel-stres s and wear en the

-diesel-engine-4+--einieized-SOUTH TEXAS - UNilS 1 & 2 3/4 8-3

ELECTRICAL POWER SYSTEMS S MRVll11 AltCE_ R E Q U LB E MBLT11 Cop t i n uafD b.

At least once per 31 days and after each operation of the diesel where the period of operation was greater than or equal to 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> by checking ivr 2nd removing accumulated water from its associated fuel tank;

' nyn n TTAC H m 6N T Bg sampling new fuel oil in accordance (with ASTM-04057 prior to i

-e---

add' tion to storage tanks and:

1)

B verifying in accordance with the tests specified in x

ASTM, 975-81 prior to addition to the storage tanks th the sample as:

N a)

An API Gravity of within 0.3 degrees at 60, or a specific gravity f within 0.0016 at 60/60 F, whey compared to the supplier' certificate, or an absolut specific gravity at 60/60 F of greater than or equal to 3 but less than or equal to 0.89,N r an API gravity p greater than or equal to 27 degrees but lb s than or equ 1 to 39 degrees; b)

A kinematic viscosithat 4%

of greater than or equal to 1.9 centistokes, but lesythan or equal to 4.1 centistokes if gravity was not detefniined by comparison with the supplier's certification; c)

A flash point u'al to or greate than 125 F; and l

d)

Aclearanf ht appearance wi qper color when tested in accor,dence with ASTM-04176-82.

2)

Byverijfingwithin30daysofobtainingthesaglethatthe otherp.opertiesspecifiedinTable1ofASTH-097511 are met whe tested in accordance with ASTM-D975-81 except t' hat the ysisforsulfurmaybeperformedinaccordancewit{

a STM-D1552-79, ASTM-D2622-82, or ASTM-D4294-83.

7 6-A east once every 31 days by obtaining a sample of f

~

accordanc

'th-ASTti_D 276-78, and enifyi a total particulate contaminat Jon* Jeste-t

'mgA4te n checked in accordance i

~ with-ASTfG-2276-78, Method A; At least once per 18 months, during shutdown, by:

e.

1)

Subjecting the diesel to an inspection in accordance with procedures prepared in conjunction with its manufacturer's recommendations for this class of standby service; 2)

Verifying the generator capability to reject a load of greater (4)[f) than or equal to 785.3 kW while maintaining voltage at 4160 1 416 volts and frequency at 60 1 4.5 Hz; SOUTH TEXAS - UNITS 1 & 2 3/4 8-4

l r

ELECTRICAL POWER SYSTEMS S! LEE I L LMC E R E 0 VI.REliE NT S_LCo n t i n u e d )

3)

Verifying the generator capability to reject a load of Pl)[.6.)

5500 kW without tripping. The generator voltage shall not exceed 5262 volts during and following the load rejection; 4)

Simulating a loss-of-offsite power by itself, and:

a)

Verifying deenergization of.the ESF busses and load shedding from the ESF busses, and b)

Verifying the diesel starts on the auto-start signal within 10 seconds, energizes the auto-connected shutdown loads through the load sequencer and operates for greater than or equal to 5 minutes while its generator is loaded with the shutdown loads.

After energization, the steady-state voltage and frequency of the ESF busses shall be maintained at 4160 1 416 volts and 6011.2 Hz during this test.

5)

Verifying that on a Safety Injection test signal, without loss-of-offsite power, the diesel generator starts on the auto-start signal and operates on standby for greater than or equal to 5 minutes.

The generator voltage and frequency shall be 4160 + 416 volts and 60 + 1.2 liz within 10 seconds after the auto-start ~

signal; the steady-state generator voltage and frequency shall be maintained within these limits during this test; 6)

Simulating a loss-of-offsite power in conjunction with a Safety Injection test signal, and:

a)

Verifying deenergization of the ESF busses and load shedding from the ESF busses; b)

Verifying the diesel starts on the auto-start signal with-in 10 seconds, energizes the auto-connected ESF (accident) loads through the load sequencer and operates for greater than or equal to 5 minutes while its generator is loaded with the ESF loads.

After energization, the steady-state voltage and frequency of the ESF busses shall be maintained at 4160 + 416 volts and 6011.2 fiz during this test; and c)

Verifying that all automatic diesel generator trips, except engine overspeed, generator differential, and low lube oil pressure are automatically bypassed upon loss of voltage on the ESF bus concurrent with a Safety Injection Actuation signal.

7)

Verifying the standby diesel generator operates for at least (NM 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

During the first 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> of this test, the diesel SOUTH TEXAS - UNITS 1 & 2 3/4 8-5

]

t i

l ELECTRICAL POWER SYSTEMS SMRV[l H ANC E_ R E QUIR [htEUIS;lC ontin ue d )

d~ 7 00 t o (o O30 k lO Go) generator shall be loaded to 9 eater-t4+an er equal to 5035 "#

and during the remaining 22 hours2.546296e-4 days <br />0.00611 hours <br />3.637566e-5 weeks <br />8.371e-6 months <br /> o thig test the diesel generator'shall be loaded to-gmatcpMar er eq,ual to 5500 kW.(6) c

- The gener-ater voltage--and-f+equency chall be 1150 " 115 volte

] $ [,3

-.and 60 L1,-2-11 -witMn-104ec+nds-aftee-timet 3ignal;. the 2

gg Within 5 minutes af ter com [t,ozi steady state generater voltage and frequency shall be-ma $tained

,,, d

-w+th-tMc limits during this test.

pleting this 24-hour testa fa st 5+oet deperformpSpecification 4.S.1.1.2e.0)b),

4. 9. i. f. Ja. A ( 7) 8)

Verifying that the auto-connected loads to each standby diesel generator do not exceed the 2000-hour rating of 5935 kW; 9)

Verifying the standby diesel generator's capability to:

a)

Synchronize with the offsite power source while the generator is loaded with its ESF loads upon a simulated restoration of offsite power, b)

Transfer its loads to the offsite power source, and c)

Be restored to its standby status.

10) Verifying that with the standby diesel generator operating in a (8) test mode, connected to its bus, a simulated Safety Injection signal overrides the test mode by: (1) returning the diesel gen-erator to standby operation, and (2) automatically energizing the ESF loads with offsite power;

11) Verifying that the automatic load sequence timer is OPERABLE with the first scquenced load verified to be loaded between 1.0 second and 1.6 seconds, and all other load blocks within 110% of its design interval;

12) Verifying that the standby diesel generator emergency stop lock-out feature prevents diesel generator starting; and

• 11-futurJQoad conditions exceed the 2000-hour rating (5935 kW) of 5 kk i

^^If Specification 4.8.1.1.2eJb)4., ot satis ac

'4 leted, it is not necessary to repeatJefeceding 24-hour test.

Instead, t

'esel generatopnw1)foperated at 5500 LW for 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> or until operating tempera

.l w slabilized.

SOU T H T E X A5 - (Hil 15 1 & 2 3/4 8-6

m ATTACHMENT D SPECIFICATION NOTATIONS (1)

Loss of one 13.8 kV Standby Bus to 4.16 kV ESF bus line constitutes loss of one offsite source.

Loss of two 13.8 kV Standby busses to 4.16 hV ESF bus lines constitutes loss of two offsite sources.

(2)

All diesel generator starts for the purpose of these surveillances may be preceded by a prelube period.

(3)

A diesel generator start in less than or equal to 10 seconds (fast start) shall be performed every 184 days.

All other diesel generator starts for the purpose of this surveillance may be modified starts involving reduced. fuel (load limit) and/or idling and gradual acceleration to synchronous speed.

(4)

Generator loading may be accomplished in accordance with vendor recommendations, including a warmup period prior to loading.

(5)

The diesel generator start for this surveillance may be a modified start (see SR 4.8.1.1.2a.2))

(6)

Momentary transients outside this load range due to changing conditions on the grid shall not invalidate the test.

(7)

If Specification 4.8.1.1.2a.2) is not satisfactorily completed, it is not necessary to repeat the preceding 24-hour test.

Instead, the standby diesel generator may be operated at 5000-5500 kW for a. minimum of 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> or until. operating temperature has stabilized.

(8)

Criteria for determining number of failures and number of valid tests shall be in accordance with Regulatory Position C.2.e of f

Regulatory Guide 1.108, but determined on a per diesel generator basis.

e For the purpose of determining the required test frequency, the previous test failure count may be reduced to zero if a complete diesel overhaul to like-new condition is completed, provided that the' overhaul, including appropriate post-maintenance operation and testing, is-specifically approved by the manufacturer and if acceptable reliability has been demonstrated.

The reliability criterion shall be the successful completion of 14 consecutive tests in a single series.

Ten of these tests shall be in accordance with:the routine Surveillance Requirements 4.8.1.1.2a.2 and 4.8.1 1.2a.3

- and four tests in accordance with the 184-day testing requirement of Surveillance Requirements 4.8.1.1.2a.2 and 4.8.1.1.2a.3.

If:this criterion is not satisfied during the first series of tests, any alternate criterion to be used to i

transvalue the failure count to zero requires NRC approval.

(9)

The associated test frequency shall be maintained until seven J

consecutive failure free demands have been performed and the number of failures in the last 20 valid demands has been 1

reduced to one.

N h$

$*140.001 e

e.e

.w--a w

w c

w

-yr

=

j i

Table 4.8-1 DIESEL GENERATOR TEST SCHEDULE NUMBER OF FAILURES IN NUMBER OF FAILURES IN LAST 20 VALID TESTSMF) LAST 100 VALID TESTS *-(B) TEST FREQUENCY

$1 54 Once per 31 days 1 2**(7) 25 Once per 7 days JN S[R f ATfnCHMENT O

• N 'teria for determining number of failures and number of valid tests shpW be 1 ccordance with Regulatory Position C.2.e of Regulatory Guide MD8, butdetemQedonaperdieselgeneratorbasis.

For the purp determining the required test frequen revious test failure count may qucedtozeroifacompletedis overhaul to like-new i

condition is completed, prqvided that the overhau including appropriate post-maintenance operation and testing, is spfc1 ically approved by the manu-facturer and if acceptable relDia i ity ha3Afeen demonstrated.

The reliability criterion shall be the successful coo dion of 14 consecutive tests in a at al 4 in accordance with the routine single series. Ten of these test Surveillance Requirements 4.8.

.2.a.2 an(d 441.1.2.a.3 and four tests in accordance with the 184-day-t sting requirement tf Surveillance Requirements

4. 8.1.1. 2. a. 2 and 4. 8.1A. 2. a. 3.

If this criterion is not satisfied during the first series of ttists, any alternate criterion to bh(ed to transvalue the f ailure count'To zero requires NRC approval.

X~

• • The associa,ted test f requency shall be maintained until seven conse'cutjve failure free demands have been perforn.ed and the number of failures in The s 16sI 20 valid cemat@. has been reduced to one.

SOUlH if XM.

U,;1 y

.1 n-g i

m.

l

-i ATTACHMENT E i)

Diesel Fuel Oil Testina Procram A diesel fuel oil testing program to implement required testing of both new fuel oil and stored fuel oil shall be established.

The program shall include sampling and testing requirements, and acceptance' criteria, all based on applicable ASTM Standards.

The purpose of the program is to establish the following:

a.

Acceptability of new fuel oil for use prior to addition to storage tanks by determining that the fuel oil has:

1.

an API gravity or absolute specific gravity within limits, 2.

a flash point and kinematic viscosity within limits for ASTM 2D fuel oil, and 3.

a clear and bright appearance with proper color; b.

Other properties for ASTM 2D fuel oil are within limits within 30 days following sampling and addition to storage tanks; and c.

Total particulate concentration of fuel oil is s 10 mg/l when tested every 31 days using a test method based on ASTM D-2276.

i r

t i

t l

i Tsc.94\\94 140.001.

n

-e ve-

~ - - -

+ - - - - -

o ADMittlSTRATIVE CONTROLS PROCEDURES At10 PROGRAMS (Continued) l

10) Limitations on the annual dose or dose commitment to any MEMBER OF THE PUBLIC due to releases of radioactivity and to radiation from uranium fuel cycle sources conforming to 40 CFR Part 190.

h)

Radioloaical Environmental Monitorina Proaram A program shall be provided to monitor the radiation and radio-nuclides in the environs of the plant. The program shall provide (1) representative measurements of radioactivity in the. highest potential exposure pathways, and (2) verification of the accuracy of the effluent monitoring program and modeling of environmental exposure pathways. The program shall (1) be contained in the ODCM, (2) conform to the guidance of Appendix I to 10 CFR Part 50, and (3) include the following:

1)

Monitoring, sampling, analysis, and reporting of radiation and radionuclides in the environment in accordance with the methodology and parameters in the ODCM, 2)

A Land Use Census to ensure that changes in the use of areas at and beyond the SITE B0Vf4DARY are identified and that modifica-tions to the monitoring program are made if required by the results of this census, and 3)

Participation in a Interlaboratory Comparison Program to ensure that independent checks on the precision and accuracy of the measurements of radioactive materials in environmental sample matrices are performed as part of the quality assurance program for environmental monitoring.

.TN S 6R T~

nTTAcHsita7 g 6.9 REPORTING RE0VIREMENTS ROUTINE REPORTS 6.9.1 In addition to the applicable reporting requirements of Title 10, Code of Federal. Regulations, the following reports shall be submitted to the Regional Administrator of the Regional Office of the NRC unless otherwise noted.

STARTUP REPORT 6.9.1.1 A summary report of plant startup and-power escalation testing shall be submitted following:

(1) receipt of an Operating License, (2) amendment to the license involving a planned increase in power level, (3) installation of fuel that has a different design or has been manufactured by a different fuel supplier, and (4) modifications that may have significantly altered the nuclear, thermal, or hydraulic performance of the unit.

The Startup Report shall address each of the tests identified in the Final Safety Analysis Report and shall include a description of the measured values of the operating conditions or characteristics obtained during the test SOUTH TEXAS - UNITS 1 & 2 6-18 Unit 1 - Amendment No. 47, 57 Unit 2 - Amendment No. 36, 46

~,

= _.

.~. - -..

e I

i i

i t

k i

ATTACHMENT 4 PROPOSED TECHNICAL SPECIFICATION BASES CHANGES i

f e

e i

8 h

I i

i TSC-94\\94-140.001

- i

]

's J

v e-s----

y ry m

s l

Attachment F Page 1 of 13 I

ATTACHMENT F BACKGROUND The unit Class 1E AC Electrical Power Distribution System AC sources consist of the offsite power sources (preferred power sources, normal and alternate (s), and the onsite standby power sources (Train A,

Train B and Train C diesel generators (DGs).

As required by 10 CFR 50, Appendix A, GDC 17, the design of the AC electrical power system provides independence and redundancy to ensure an available i

source of power to the Engineered Safety Feature (ESF) systems.

The onsite Class 1E AC Distribution System is divided into redundant load groups (trains) so that the loss of any one group does not prevent the minimum safety functions from being performed.

Each train has connections to two preferred offsite power sources and a single DG.

Offsite power is transmitted to the plant switchyard ac 345 kV by multiple circuits on four separate rights-of-way.

The two unit standby transformers are energized from separate buses in the switchyard via independent feeders.

Each standby transformer has the capacity to supply the Class 1E loads of both units.

In normal operation, the Class 1E loads of each unit can be supplied by the j

standby transformers and/or its auxiliary unit transformer.

In the event of a loss of power from its normal source that unit's Class 1E l'

loads are manually transferred to the unit's auxiliary transformer or to the standby transformers.

l In the event of a loss of preferred power, the ESF electrical loads are automatically connected to the DGs in sufficient time to provide for safe reactor shutdown and to mitigate the consequences of a Design Basis Accident (DBA) such as a loss of coolant accident (LOCA).

Ratings for Train A, Train B and Train C DGs satisfy the

(

requirements of Regulatory Guide 1.108.

The continuous service rating of each DG is 5500 kW with 10% overload permissible for up to 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> in any 24 hour2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> period.

Refer to UFSAR Chapter 8 for a more complete description.

APPLICABLE SAFETY ANALYSES The initial conditions of DBA and transient analyses in the FSAR, Chapter 6 and Chapter 15, assume ESF systems are OPERABLE.

The AC electrical power sources are designed to provide sufficient capacity, capability, redundancy, and reliability to ensure the availability of necessary power to ESF systems so that the fuel, Reactor Coolant System (RCS), and containment design limits are not exceeded.

TSC-94\\94-140.001 F

i

.~

e L

Attachment F f

Page 2 of 13 The OPERABILITY of the AC electrical power sources is consistent with the initial assumptions of the Accident analyses and is based upon meeting the design basis of the unit.

This results in maintaining at least one train of the onsite or offsite AC sources OPERABLE during Accident conditions in the event of:

a.

An assumed loss of all offsite power or all onsite AC power; and b.

A worst case single failure.

' licy Statement.

The AC sources satisfy Criterion 3 of

'P' LCO Two qualified circuits between the offsite transmission network and the onsite Class 1E Electrical Power System and separate and independent DGs for each train ensure availability of the required f

power to shut down the reactor and maintain in a safe shutdown condition after an anticipated operational occurrence (AOO) or a j

postulated DBA.

t Qualified offsite circuits are those that are described in the FSAR and are part of the licensing basis for the unit.

[

Each offsite circuit must be capable of maintaining rated frequency and voltage, and accepting required loads during an accident, while connected to the ESF buses.

Each DG must be capable of starting, accelerating to rated speed and voltage, and connecting to its respective ESF bus on detection of bus undervoltage.

This will be accomplished within [10] seconds.

Each DG must also be capable of accepting required loads within the assumed loading sequence intervals, and continue to operate until offsite power can be restored to the ESF buses.

These capabilities are required to be met from a variety of initial conditions such as DG in standby with the engine hot, DG in standby with the engine at ambient conditions, and DG operating in parallel test mode.

I The AC sources in one train must be separate and independent (to the extent possible) of the AC sources in the.other train.

For the DGs, separation and independence are complete.

t i

TSC.94\\94 140.001 1

n.

--= _

Attachment F Page 3 of 13 i

APPLICABILITY The AC sources are required to be OPERABLE in MODES 1, 2,

3, and 4 to ensure that:

a.

Acceptable fuel design limits and reactor coolant pressure i

boundary limits are not exceeded as a result of AOos or j

abnormal transients; and b.

Adequate core cooling is provided and containment OPERABILITY t

and other vital functions are maintained in the event of a postulated DBA.

The AC power requirements for MODES 5 and 6 are covered in LCO 3.8.2, "AC Sources-Shutdown."

3.8.1.1 Action a.

To ensure a highly reliable power source remains with one offsite circuit inoperable, it is necessary to verify the OPERABILITY of the remaining required offsite circuit on a more frequent basis.

However, if a second required circuit fails 4.8.1.1.1.a, the second offsite circuit is inoperable, and Action e, for two offsite circuits inoperable, is entered.

TS 3.8.1.1 Action b.

l To ensure a highly reliable power source remains with one diesel generator inoperable, it is necessary to verify the OPERABILITY of "Do remaining required offsite circuit on a more frequent basis.

Havever, if a second required circuit fails 4.8.1.1.1.a, the second

fiaite circuit is inoperable, and Action c, for one offsite circuit and one diesel generator inoperable, is entered.

Action b provides an allowance to avoid unnecessary testing of OPERABLE diesel generators.

If it can.be determined that the cause of the inoperable diesel generator does not exist on the OPERABLE diesel generators, is an independently testable component or an inoperable support system, surveillance requirement 4.8.1 1.2.a.2 does not have to be performed.

TS 3.8.1.1 Action c.

To ensure a highly reliable power source remains with one offsite circuit and one diesel generator inoperable, it is necessary to verify the OPERABILITY of the remaining required offsite circuit on' a more frequent basis.

However, if a second required circuit fails 4.8.1.1.1.a, the second offsite circuit is inoperable.

Action c provides an allowance to avoid unnecessary testing of CPERABLE diesel generators.

If it can be determined that the cause of.the t

inoperable diesel generator does not exist on the OPERABLE diesel generators, is an independently testable component or an inoperable support system, surveillance requirement 4.8.1.1.2.a.2 does not have to be performed.

~

-94\\H-140.001

{

=_

t Attachment F Page 4 of 13 5

TS 3.8.1.1 Action d.

t Provides assurance that a loss of offsite power, during the period that a diesel generator is inoperable, does not result in a complete loss of safety function of critical systems.

In this condition the remaining OPERABLE diesel generators and offsite circuits are adequate to supply electrical power to the onsite Class 1E Distribution System.

Thus, on a component basis single failure protection for the required feature's function may be lost; however, function has not been lost.

Additionally, the completion time takes into account the capacity and capability of the remaining AC sources, and the low probability of a DBA occurring during the

{

period.

TS 3.8.1.1 Action e.

Operation may continue for a period that should not exceed 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

This level of degradation means that the offsite electrical power system does not have the capability to effect a safe shutdown and to mitigate the effects of an accident; however, the onsite AC sources have not been degraded.

This level of degradation generally corresponds to a total loss of the immediately accessible offsite power sources.

With both of the required offsite circuits inoperable, sufficient onsite AC sources are available to maintain the unit in a safe shutdown condition in the event of a DBA or transient.

TS 3.8.1.1 Action f.

With two or three of the standby diesel generators inoperable, there is insufficient or no remaining standby AC sources.

Thus, with an assumed loss of offsite electrical power, insufficient standby AC sources are available to power the minimum required ESF functions.

Since the offsite electrical power system is the only source of AC power for this level of degradation, the risk associated with continued operation for a very short time could be less than that associated with an immediate controlled shutdown (the immediate shutdown could cause grid instability, which could result in a total loss of AC power).

Since any inadvertent generator trip could also result in a total loss of offsite AC power, however, the time allowed for continued operation is severely restricted.

The intent here is to avoid the risk associated with tn immediate controlled i

shutdown and to minimize the risk associated with this level of j

degradation.

Surveillance Reauirements The AC sources are designed to permit inspection and testing of all.

important areas and features, eepecially those that have a standby function, in accordance with 10 CFR 50, Appendix A, GDC

'9.

Periodic component tests are supplemented by extensive i.ctional tests during refueling outages (under simulated accident TSC 94\\94-140.001

Attachment F Page 5 of 13 conditions).

The Technical Specification Surveillance Requirements i

(SRs) for demonstrating the OPERABILITY of the standby diesel generators are in accordance with the recommendations of Regulatory Guide 1.108, Regulatory Guide 1.137, as addressed in the FSAR and NUREG 1431.

i Where the SRs discussed herein specify voltage and frequency tolerances, the following is applicable.

The minimum steady state output voltage of 3744 is 90% of the nominal 4160 V output voltage.

This value, which is specified in ANSI C84.1, allows for voltage drop to the terminals of 4000 V motors whoes minimum operating voltage is specified as 90% or 3600 V.

It also allows for voltage drops to motors and other equipment down through the 120 V level where minimum operating voltage si also usually specified as 90% of 3

name plate rating.

The specified maximum steady state output voltage of-4576 V is less than the maximum operating voltage of 4756 specified for 4000 V motors.

It ensures that for a lightly loaded j

distribution system, the voltage at the terminals of 4000 V motors is less than the maximum rated operating voltages.

The specified i

minimum and maximum frequencies of the standby diesel generators are j

58.8 Hz and 61.2 Hz, respectively.

These values are equal to plus or minus 2% of the 60 Hz nominal frequency and are derived from the j

recommendations given in Regulatory Guide 1.108 and NUREG 1431.

l l

SR 4.8.1.1.1.a t

This SR ensures proper circuit continuity for the offsite AC electrical power supply to the onsite distribution network and availability of offsite AC electrical power.

The breaker alignment verifies that each breaker is in its correct position to ensure that l

distribution buses and loads are connected to their preferred power source, and that appropriate independence of offsite circuits is j

maintained.

The 7 day Frequency is adequate since breaker position is not likely to change without the operator being aware of it and j

because its status is displayed in the control room.

SR 4.8.1.1.1.b l

Transfer of each 4.16 kV ESF bus power supply from the normal l

offsite circuit to the alternate offsite circuit demonstrates the i

OPERABILITY of the alternate circuit distribution network to power the shutdown loads.

The 18 month Frequency of the Surveillance is based on engineering judgment, taking into consideration the unit conditions required to perform the Surveillance, and is intended _to e

be consistent with expected fuel cycle lengths.

Operating i

experience has shown that the components usually pass the SR when performed at the 18 month Frequency. Therefore, the Frequency was concluded to be acceptable from a reliability standpoint.

nc-94\\94-140.001 i

f'

~_

=

t a

Attachment F Page 6 of 13 SR 4.8.1.1.2.a.1 This SR provides verification that the level of fuel oil in the fuel tank is at or above the required level.

SR 4.8.1.1.2.a.2 This SR helps to ensure the availability of the standby electrical power supply to mitigate DBAs and transients and to maintain the unit in a safe shutdown condition.

To minimize the wear on moving parts that do not get lubricated when the engine is not running, these SRs are modified by a Note (Note 2) to indicate that all DG starts for these Surveillances may be preceded by an engine prelube period and followed by a warmup period prior to loading.

For purposes of this testing, the DGs are started from standby conditions.

Standby condition for a DG mean that the diesel engine coolant and oil are being continuously circulated and temperature is i

being maintained consistent with manufacturer recommendations.

In order to reduce stress and wear on diesel engines, some manufactures recommend a modified start in which the starting speed l

of DGs is limited, warmup is limited to this lower speed, and the l

DGs are gradually accelerated to synchronous speed prior to loading.

These start procedures are the intent of Note 3, which is only l

applicable when such modified start procedures are recommended by the manufacturer.

Once per 184 days the DG starts from standby conditions and achieves required voltage and frequency within 10 seconds.

The 10 second start requirement supports the assumptions of the design basis LOCA analysis in the FSAR.

The 10 second start requirement is not applicable (see Note 3) when i

a modified start procedure as described above is used.

]

I The normal 31 day Frequency for SR 3.8.1.2 (see Table 4.8-1,

" Diesel Generator Test Schedule, in the accompanying LCO) 1c consistent with Regulatory Guide 1.108.

The 184 day Frequency in Note 3 is a j

reduction in cold testing consistent with Generic Letter 84-15.

j These Frequencies provide. adequate assurance of DG OPERABILITY, while minimizing degradation resulting from testing.

TSC 94\\94-140.001

a - t t Attachment F Page 7 of 13 SR 4. 8. 3.1. 2. a. 3 This Surveillance verifies that the DGs are capable of synchronizing with the offsite electrical system and accepting loads greater than or equal to the equivalent of the maximum expected accident loads, i

A minimum run time of 60 minutes is required to stabilize engine temperature, while minimizing the time that the DG is connected to the offsite source.

The load band is provided to avoid routine overloading of the DG.

Routine overloading may result in more frequent teardown inspections in accordance with vendor recommendations in-order to maintain DG OPERABILITY.

'l This SR is modified by two Notes.

Note 4 indicates that diesel engine runs for this Surveillance may include gradual loading, as recommended by the manufacturer, so that mechanical stress and wear on the diesel engine are minimized.

Note 6 states that momentary i

transients, because of changing bus loads, do not invalidate this test.

A successful DG start must precede this test to credit satisfactory j

performance.

j f

SR 4.8.1.1.2.b Microbiological fouling is a major cause of fuel oil degradation.

There are numerous bacteria that can grow in fuel oil and cause' fouling, but all must have a water environment in order to survive.

Removal of water from the fuel oil. tanks once every 31 days eliminates the necessary environment for bacterial survival.

This is the most effective means of controlling microbiological fouling.

l In addition, it eliminates the potential for water entrainment in the fuel oil during DG operation.

Water may come from any of i

several sources, including condensation, ground water, rain water, contaminated fuel oil, and breakdown of the fuel oil by bacteria.

Frequent checking for and removal of accumulated water minimizes fouling and provides data regarding the watertight integrity of the fuel oil system.

The Surveillance Frequencies are established by Regulatory Guide 1.137.

This SR is for preventative maintenance.

l The presence of water does not necessarily represent failure of the SR, provided the accumulated water is removed during the performance of this Surveillance.

i SR 4.8.1'.1.2.c l

The requirements will be controlled and administered by the Diesel Fuel Oil Testing Program located in section 6.8.3 of Administrative Controls.

TSC-94\\94-140,001

t /

9 Attachment F Page 8 of 13 SR 4.8.1.1.2.e.1 i

This inspection is conducted each refueling to ensure unexpected degradation is discovered.

SR 4.8.1.1.2.e.2 Each DG is provided with an engine overspeed trip to prevent damage to the engine.

Recovery from the transient caused by the loss of a large load could cause diesel engine overspeed, which, if excessive, might result in a trip of the engine.

This Surveillance demonstrates the DG load response characteristics and capability to reject the largest single load (785.3 kW).without exceeding predetermined voltage and frequency.

The 18 month Frequency is consistent with the recommendation of Regulatory Guide 1.108.

This SR is modified by two Notes.

Note 4 indicates that diesel engine runs for this Surveillance may include gradual loading, as recommended by the manufacturer, so that mechanical stress and wear on the diesel engine are minimized.

Note 5 allows the diesel start for this surveillance to be a modified start as stated in SR

[

4.8.1.1.2.a.2.

t SR 4.8.1.1.2.e.3 This Surveillance demonstrates the DG capability to reject a full i

load without overspeed tripping or exceeding the-predetermined voltage limits.

The DG full load rejection may occur because of a system fault or inadvertent breaker tripping.

This surveillance ensures proper engine generator load response under the simulated test conditions.

This test simulates the loss of the total connected load that the DG experiences following a full load rejection and verifies that the DG does not trip upon loss of the load.

These acceptance criteria provide for DG damage protection.

l While the DG is not expected to experience this transient during an I

event and continues to be available, this response ensures that the i

DG is not degraded for future application, including reconnection to the bus if the trip initiator can be corrected or isolated.

The 18 month Frequency is consistent with the recommendation of i

Regulatory Guide 1.108 and is intended to be consistent with

[

expected fuel cycle lengths.

This SR is modified by two Notes.

Note 4 indicates that diesel j

engine runs for this Surveillance may include gradual loading, as recommended by the manufacturer, so that mechanical stress and wear l

on the diesel engine are minimized.

Note 5 allows the diesel start

[

for this surveillance to be a modified start as stated in SR l

4.8.1.1.2.a.2.

L l

l TSC-94\\94-140,001 l

-m

/

l l

Attachment F.

Page 9 of 13 l

SR 4.8.1.1.2.e.4

{

As required by Regulatory Guide 1.108 (Ref.9), paragraph 2.a. (1),

this Surveillance demonstrates the as designed operation of the standby power sources during loss of the offsite source.

This test j

verifies all actions encountered from the loss of offsite power, including shedding of the nonessential loads and energization of the

.i emergency buses and respective loads from the DG.

It further i

demonstrates the capability of the DG to automatically achieve the required voltage and frequency within the specified time.

The DG autostart time of 10 seconds is derived from requirements of the accident analysis to respond to a design basis large break LOCA.

l The frequency should be restored to within 2% of nominal following a i

load sequence step.

The Surveillance should be continued for a minimum of 5 minutes in order to demonstrate that all starting transients have decayed and stability is achieved.

The requirement to verify the connection and power supply of permanent and autoconnected loads is intended to satisfactorily show j

the relationship of these loads to the DG loading logic.

In certain circumstances, many of these loads cannot actually be connected or loaded without undue hardship or potential for undesired operation.

For instance, Emergency Core Cooling Systems (ECCS) injection valves are not desired to be stroked open, or high pressure injection systems are not capable of being operated at full flow, or residual heat removal (RHR) systems performing a decay heat removal function l

are not desired to be realigned to the ECCS mode of operation.

In lieu of actual demonstration of connection and loading of loads, testing that adequately shows the capability of the DG systems to perform these functions is acceptable.

This testing may include any series of sequential, overlapping, or total steps so that the entire connection and loading sequence is verified.

The Frequency of 18 months is consistent with the recommendations of Regulatory Guide 1.108, paragraph 2.a. (1), takes into consideration

)

unit conditions require to perform the surveillance, and is intended to be consistent with expected fuel cycle lengths.

I SR'4.8.1.1.2.e.5 This. Surveillance demonstrates that the DG automatically starts and achieves the required voltage and frequency within the specified time (10 seconds) from the design basis actuation signal (LOCA signal) and operates a 5 minutes.

The 5 minute period provides sufficient time to demonstrate stability.

The Frequency of 18 months takes into consideration unit conditions required to perform the Surveillance and is intended to be consistent with the expected fuel cycle lengths.

nc., w.au.u1 i

t j

Attachment F Page 10 of 13 SR 4.8.1.1.2.e.6 In the event of a DBA coincident with a loss of offsite power, the DGs are required to supply the necessary power to ESF systems so that the fuel, RCS, and containment design limits are not exceeded.

This Surveillance demonstrates the DG operation, during a loss of l

offsite power actuation test signal in conjunction with an ESF actuation signal.

In lieu of actual demonstration of connection and loading of loads, testing that adequately shows capability of the DG e

system to perform these functions is acceptable.

This testing may include any series of sequential, overlapping, or total steps so that the entire connection and loading sequence is verified.

This surveillance also demonstrates that DG noncritical protective function (e.g.,

high jacket water temperature) are bypassed on a loss of voltage signal concurrent with an ESF actuation test signal, and critical protective functions (engine overspeed, generator differential current, and low lube oil pressure) are operable.

The noncritical trips are bypassed during DBAs and provide an alarm on an abnormal engine condition.

This alarm provides the operator with sufficient time to react appropriately.

The DG availability to mitigate the DBA is more critical than protection the engine against minor problems that are not immediately detrimental to emergency operation of the DG.

I The Frequency of 18 months takes into consideration unit conditions required to perform the Surveillance and is intended to be consistent with an expected fuel cycle length of 18 months.

Operating experience has shown that these components usually pass the SR when performed at the 18 month Frequency.

Therefore, the l

Frequency was concluded to be acceptable from a reliability-standpoint.

SR 4.8.1.1.2.e.7 Regulatory Guide 1.108, paragraph 2.a. (3), requires demonstration ence per 18 months that the DGs can start and run continuously at full load capability for an interval of not less than 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />, a2 hours of which is at a load equivalent to 110% of the continuous duty rating and the remainder of the time at a load equivalent to the continuous duty rating of the DG.

The DG starts for this Surveillance can be performed either from standby or hot conditions.

This Surveillance also demonstrates that the diesel engine can restart from a hot condition, such as subsequent to shutdown from normal Surveillances, and achieve the required voltage and frequency within 10 seconds.

The 10 second time is derived from the requirements of the accident analysis to respond to a design basis large break LOCA.

The 18 month Frequency is consistent with the recommendation of Regulatory Guide 1.108, paragraph 2.a. (5).

TSC-94\\94-340.001

I a b r Attachment F Page 11 of 13 recommendation of Regulatory Guide 1.108, paragraph 2.a. (5).

The load band is provided to avoid routine overloading of the DG.

Routine overloading may result in more frequent teardown inspections in accordance with vendor recommendations in order to maintain DG OPERABILITY.

The 18 month Frequency is consistent with the recommendations of Regulatory Guide 1.108, paragraph 2.a. (3), takes into consideration unit conditions required to perform the Surveillance, and is intended to be consistent with expected fuel cycle lengths.

This SR is modified by three Notes.

Note 4 indicates that diesel engine runs for this Surveillance may include gradual loading, as recommended by the manufacturer, so that mechanical stress and wear on the diesel engine are minimized.

Note 5 allows the diesel start for this surveillance to be a modified start as stated in SR 4.8.1.1.2.a.2.

Note 6 states that momentary transients, because of i

changing bus loads, do not invalidate this test.

SR 4.8.1.1.2.e.8 This SR it used to verify that the loads for the diesel do not exceed th, 2000 hour0.0231 days <br />0.556 hours <br />0.00331 weeks <br />7.61e-4 months <br /> rating approved by Cooper.

SR 4.8.1.1.2.e.9 As required by Regulatory Guide 1.108, paragraph 2.a. (6), this Surveillance ensures that the manual synchronization and automatic load transfer from the DG to the offsite source can be made and the DG can be returned to ready to load status when offsite power is restored.

It also ensures that the autostart logic is reset to allow the DG to reload if a subsequent loss of offsite power occurs.

The DG is considered to be in ready to load status when the DG is at rated speed and voltage, the output breaker is open and can receive and autoclose signal on bus undervoltage, and the load sequence times are reset.

i The Frequency of 18 months is consistent with the recommendations of Regulatory Guide 1.108, paragraph 2.a. (6), and takes into consideration unit conditions required to perform the Surveillance.

SR 4.8.1.1.2.e.10 Demonstration of the test mode override ensures that the DG availability under accident conditions will not be compromised as a result of testing and the DG will automatically reset to ready to load operation if a LOCA actuation signal is received during operation in the test mode.

Ready to load operation is defined as the DG running at rated speed and voltage with the DG output breaker open.

These provisions for automatic switchover are required by IEEE-308, paragraph 6.2.6(2).

uc-u r n - u c. c n

to h!.

]1 h

(;

Attachment F Q*;

Page 12 of 13 The intent in the requirement is to show that the emergency loading

~

was not affected by the DG operation in test mode.

In lieu of actual demonstration of connection and loading of loads, testing that adequately shows the capability of the emergency loads to perform these functions is acceptable.

This testing may include any I

series of sequential, overlapping, or total steps so that the entire connection and loading sequence is verified.

The 18 month Frequency is consistent with the recommendation of

)

Regulatory Guide 1.108, paragraph 2.a.(8), takes into consideration unit conditions required to perform the Surveillance, and is intended to be consistent with expected fuel cycle lengths.

SR 4.8.1.1.2.e.11 As required by Regulatory Guide 1.108, paragraph 2.a. (2), each DG is required to demonstrate proper operation for the DBA loading sequence to ensure that voltage and frequency are maintained within the required limits.

Under accident conditions, prior to connecting the DGs to their respective buses, all loads are shed except load center feeders and those motor control centers that power Class 1E loads (referred to as " permanently connected" loads).

Upon reaching 90% of rated voltage and frequency, the DGs are then connected to their respective buses.

Loads are then sequentially connected to the bus by the automatic load sequencer.

This sequencing logic controls the permissive and starting signals to motor breakers to prevent overloading of the DGs due to high motor starting currents.

The 10% load sequence time interval tolerance ensures that sufficient time exists for the DG to restore frequency and voltage prior to applying the next load and that safety analysis assumptions regarding ESF equipment time delays are not violated.

The Frequency of 18 months is consistent with the recommendation of Regulatory Guide 1.108, paragraph 2.a. (2), takes into consideration unit conditions required to perform the Survaillance, and is intended to be consistent with expected fuel cycle leng'im.

SR 4.8.1.1.2.e.12 This SR verifies that the diesel will not start when the emergency stop lockout feature is tripped.

This prevents any further damage to the diesel engine or generator.

SR 4.8.1.1.2.e.13 This SR verifies the requirements of Branch Technical Position PSB-1 that the load shedding scheme automatically prevents load shedding during the sequencing of the emergency loads to the bus.

It also 2

verifies the reinstatement of the load shedding feature upon j

completica of the load sequencing action.

uc.uu -2 c cn i

no 9 s

Attachment F Page 13 of 13 SR 4.8.1.1.2.f This Surveillance demonstrates that the DG starting independence has not been compromised.

Also, this Surveillance demonstrates that each engine can achieve proper speed within the specified time when the DGs are started simultaneously.

The 10 year Frequency is consistent with the recommendations of Regulatory Guide 1.108, paragraph 2.b, and Regulatory Guide 1.137, paragraph C.2.f.

SR 4.8.1.1.2.0 This SR provided assurance that any accumulation of sediment over time or the normal wear on the system has not degraded the diesels.

l TSC 94 \\ 94 -14 0. C ol

e e.

9 3/4.8 ELECTRICAL POWER SYSTEMS

-pASE5 3/4.8.1, 3/4.8.2, and 3/4.8.3 A.C. SOURCES, D.C. SOURCES, and ONSITE POWER DISTRIBUTION The OPERABILITY of the A.C. and D.C power sources and associated distribu-tion systems during operation ensures that sufficient power will be available to supply the safety-releted equipment required for:

(1) the safe shutdown of the facility, and (2) the mitigation and control of accident conditions within the facility. The minimum specified independent and redundant A.C. and D.C.

power sources and distribution systems satisfy the requirements of General Design Criterion 17 of Appendix A to 10 CFR Part 50.

The ACTION requirements specified for the levels of degradation of the power sources provide restriction upon continued facility operation commensurate with the level of degradation.

The OPERABILITY of the power sources are consistent with the initial condition assumptions of the safety analyses and are based upon maintaining at least two redundant sets of onsite A.C. and D.C.

power sources and associated distribution systems OPERABLE during accident conditions coincident with an assumed loss-of-offsite power and single failure of the other onsite A.C. source. The A.C. and D.C. source allowable out-of-service times are based on Regulatory Guide 1.93, " Availability of Electrical Power Sources," December 1974. Shea-one standby-diesebgenerater is inoperab%

-ther# 4s-an-additionaLACHOM-requirement te verify that aM--required systems,

.-sutsystem&r-. trains, c-omponents-and-devices -that-depend-on the rc af ning OPEPELE r

-standby-diesel-generators-as-a-seurco of emergency-power, are also OPERABEE,

-and-that-the-steam-4r-iven-auxil4ary-feedwater pump-it OPEMBLE. This-require-ment is-intended-to prov4de-assur-ance-that-a-loss-of-ef4 site-pewer event will

-not-result-in : complete-loss of cafety-function of critical cyctem; during-

-t he-pe r4 ed-one-e f-the-standby-di esebgen erato rt it i noperable. The term, verify, as used in this context means to administratively check by examining logs or other information to determine if certain components are out-of-service for maintenance or other reasons.

It does not mean to perform the Surveillance Requirements needed to demonstrate the OPERABILITY of the component.

Tsts i e r A rincHm/nr p The OPERABILITY of the minimum specified A.C. and D.C. power sources and associated distribution systems during shutdown and refueling ensures that:

(1) the facility can be maintained in the shutdown or refueling condition for extended time periods, and (2) sufficient instrumentation and control capa-bility is available for monitoring and maintaining the unit status.

The Surveillance Requirements for demonstrating the OPERABILITY of the diesel generators are in accordance with the recommendations of Regulatory Guides 1.9, " Selection of Diesel Generator Set Capacity for Standby Power Supplies," Revision 2, December 1979; 1.108, " Periodic Testing of Diesel Generator Units Used as Onsite Electric Power Systems at Huclear Power Plants,"

Revision 1, August 1977; and ASTM 0975-81, ASTM D1552-79, ASTM D2622-82, ASTM U m i-87, and ASTM D2276-78. The standby diesel generators auxiliary systems are designed to circulate warm oil and water through the diesel while the diesel is not running, to preclude cold ambient starts.

For the purposes of i

surveillance testing, ambient conditions are considered to be the hot pre-J lube condition.

SOUTH TEXAS - UNITS 1 & 2 B 3/4 8-1

- - -