ML20079G789
| ML20079G789 | |
| Person / Time | |
|---|---|
| Site: | Harris  |
| Issue date: | 10/21/1982 |
| From: | Rubenstein L Office of Nuclear Reactor Regulation |
| To: | Novak T Office of Nuclear Reactor Regulation |
| Shared Package | |
| ML20079F427 | List:
|
| References | |
| FOIA-84-35 NUDOCS 8211090035 | |
| Download: ML20079G789 (2) | |
Text
_m_n_.
m
.e s.: :_.=..:
--o.
m.
- v m.e.v w -.. +
.y u
,i no 2407
~
g/
o UNITED STATES g
g NUCLEAR REGULATOAY COMMISSION
% 4 V/jj ng wash mGTON, D. C. 20555 7* * "
- OCT 211S32 HDiORANDUM FOR:
T. M. Novak, Assistant Director for Licensing Division of Licensing FRON:
L. S. Rubenstein Assistant Director for Core and Plant Systems Division of Systems Integration
SUBJECT:
SHEARON HARRIS DRAFT SAFETY EVALUATION REPORT I
Plant Name:
Shearon Harris Units 1 & 2 Docket Numbers:
50-400, 50-401
~
Licensing Stage:
Operating License Responsible Branch:
Licensing Branch Number 3 Project Managar:
E. Licitra DSI Review Branch:
Core Performance Branch Review Status:
Two Confirmatory Issues in Section 4.2 Three Open Issues in Section 4.2 Two Open Issues in Section 4.4 The Core Perfonnance Branch has prepared the enclosed SER input of Sections 4.2, 4.3, 4.4, 15.4.1, 15.4.2, 15.4.3,.15.4.7, and 15.4.8 on the Shearon Harris FSAR.
The confimatory issue and open issues are identified as follows:
Confimatory Issue 1
Resolution of the use of irradiation-strengthened Zircaloy yield strengths (seeParagraphs4.2.1.1and4.2.3.1).
2.
Confimation that the predicted cladding collapse time exceeds the expecteo lifetime of the fuel (see Paragraph 4.2.3.2).
Open Issues 1.
A determination that the fuel assembly mechanical response to seismic and LOCA fcrces meets the requirements of NUREG-0609, Appendix E (see Paragraph'4.2.3.3).,
2.
A description of plans for on-line fuel system monitoring (see Paragraph 4.2.4 2).
3.
A description of plans for post-irradiation poolside surveillance of fuel (see Paragraph 4.2.4.3).
Copy. Has Been Sent to PDR W 1 L 0 j 0 8 3 6 f,-
.. ~ -
w
7_-
9 h
T. M. Novak 2-4.
The applicant must evaluate.the loose parts monitoring system to be installed at the Shearon Harris Units for confonnance with Regulatory Guide 1.133 and_ provide a commitment to supply a final design report on the LPMS.(Section 4.4).
5.
-Provide the itemized documentation required by Item II.F.2 of NUREG-0737 (Section 4.4).
)*
L. S. Ru nstein Assistant Director for Core and Plant Systems Division of Systems Integration.
Enclosure:
~
As stated cc:-
R. Mattson D. Eisenhut A. Schwencer E. Licitra T. Kadambi B. Sheron a
9 6
\\
_.-wm,,._
gm.
.j
_ sm.
-]
- e 4.2 Fuel Design The Shearon Harris fuel assembly described in the FSAR is a 17x17 array of fuel rods having a diameter of 0.374 in. This design will be referred to as the 4
Standard Fuel Assembly (SFA) in the following paragraphs.
Section 4.2 of the FSAR presents the design bases for the SFA.
For the Westinghouse analysis, plant design conditions are divided into four categories of operation that are consistent with traditional industry classification
( ANSI Standards-N18.2-1973 and N-212-1974): Condition I is Nomal Operation, Condition II is Incidents of Moderate Frequency, Condition III is Infrequent
. Incidents, and Condition IV is Limiting Faults.
Fuel damage is then related to these conditions of operation, which are coupled to the fuel design bases and design limits. The subsections of the design bases section address topics sisch as (a) cladding, (b) fuel material. (c) fuel rod perfomance, (d) spacer grids, (e) fuel assemblies, (f) reactivity control and burnable poisons (" core components"), and (g) testing, irradiation, and surveillance.
Thus, as part of the discussion of the cladding design bases, material and mechanical pro-perties, stress-strain limits, vibration and fatigue, and chemical properties are also presented. A similar approach is taken for the other major subtopics.
l/
The staff review and safety evaluation will foll'ow SRP Section 4.2.
The objectives of this fuel system safety review are to provide assurance that (a) the fuel system is not damaged as a result of nomal operation and antici-pated operational occurrences, (b) fuel system damage is never so. severe as to l
p event control rod insertion when it is required, (c) the number of fuel rod failures is not underestimated for postulated accidents, and (d) coolability is always maintained.
"Not damaged" is defined as meaning that fuel rods do not fail, that fuel system dimensions remain within operational tolerances, and that functional capabilities are not reduced below those assumed in the safety analysis.
This objective implements GDC 10 and the design limits that accomplish this are called specified acceptable fuel design limits (SAFDLs).
" Fuel rod failure" means that the fuel rod leaks and that the first fission 4
4 m
~r-w r. r,-,
--m
, _, m :
--wwmm>
product barrier (the cladding) has, therefore, been breached. Fuel rod failures mus.t be accounted for in the dose analysis required by 10 CFR Part 100 for i
postulated accidents.
"Coolability," which is sometimes temed "coolable geometry," means, in general, that the fuel assembly retains its rod-bundle geometrical configuration with adequate coolant channeling to permit removal of residual heat after a severe accident. The general requirements to maintain control rod insertability and core coolability appear repeatedly in the General Design Criteria (GDC 27, and 35).
Specific coolability requiret;ents for the loss-of-coolant accidents are given in 10 CFR Part 50.46.
To meet the above-stated objectives of the fuel system review, the following specific areas are critically examined:
(a) design bases, (b) description and design drawings, (c) design evaluation, and (d) testing, inspection, and sur-veillance plans.
In assessing the adequacy of the design [ several items involving operating experience, prototype testing, and analytical predictions are weighed in terms of specific acceptance criteria for fuel system damage, fuel rod failure, and fuel coolability.
Recently Westinghouse developed an improved fuel assembly design, which is described in WCAP-9500 and is called Optimized Fuel Assembly (OFA). WCAP-9500 was approved by NRC (Rubenstein 1981).
The OFA design also consists of a 17x17 array of fuel rods having a diameter of 0.360 in., which is somewhat smaller than the standard assembly. Because the fomat of WCAP-9500 followed Regulatory Guide 1.70, some of the fuel design bases and design limits for the OFA were not presented in WCAP-9500 in-a form that pemitted cross-checking with the acceptable criteria provided in Section 4.2 of the SRP. Therefora several questions were issued (Rubensteiri, August 8,1930) to clarify the design bases and limits.
Responses to those questions are contained in letters from Westinghouse (Anderson, August 15, 1980 and April 21,1981). These responses are applicable to the Standard Assembly as well (Petrick, September 9,1981).
Re'erence to these questions and answers will be made at several places in the review that follows.
4.2.1 Design Bases Design bases for the safety analysis address fuel system damage mechanisms and suggest. limiting values for important parameters such that damage will be 4.2 - 2
.--,---,n,
...-n-n-
--n...,-----
- ~,.
r
w - www -
-v :
w-8
.s limited to scceptable levels. For convenience, acceptance criteria for these design limits are grouped into three categories in the Standard Review Plcn:
(i) fuel system damage criteria, which are most applicable to nomal operation (W plant Condition I), including anticipated operational occurrences (W plant Condition II), (b) fuel rod failure criteria, which apply to normal operation (W plant Condition I), anticipated operational occurrences (W plant Condition II),
and accidents (W plant Conditions III and IV), and (c) fuel coolability criteria, which apply to accidents (W plant Conditions III and IV).
4 4.2.1.1 Fuel System Damage Criteria
.The following par & graphs discuss the HRC staff's evaluation of the design bases and corresponding design limits for the damage mechanisms listed in the SRP.
These design limits along with certain criteria that define failure (see Section 4.2.1.2 of this SER) constitute the SAFDLs required by GDC 10. The design limits in this section sh'ould not be exceeded during nomal operation including anticipated operational occurrences.
(1)
Cladding Desian Stress The des lgn basis for fuel rod cladding. stress as given in the response to 0 231.2* is that the fuel system will not be damaged due to excessive fuel rod cladding stresses. The design limit for fuel rod cladding stress under Condition I and II modes of operation is that the volume-averaned effective stress calculated with the von Mises equation, considering interference due to unifom cylindrical pellet-to-cladding contact (caused by pellet themal expansion and swelling, unifom cladding creep, and fuel rod / coolant system pressure differences), is less than the Zircaloy 0.2 percent offset yield stress as affected by temperature and irradiation. This is a traditional limit consistent with previous Westinghouse design practice and is, therefore, acceptable without further comment except with respect to the credit that is taken by Westinghcuse for irradiation-induced strengthening.
4
- All questions and responses referred to in this manner will be found in the correspondence cited above.
4.2 - 3
. ~.
~
-,__c
__ - n -
- -a _
w- ~ -
=.a w
- a.cn The NRC does not routinely grant credit for irradiation-induced strengthening of the cladding, although the Standard Review Plan does not specifically preclude such practice. Moreover, in a response to an NRC question on the Westinghouse topical report on fuel material properties WCAP-9179, it was stated. that no credit is taken for irradiation strengthening of Zircaloy. This restriction was subsequently'a condition of approval (Thomas, 5eptember 29, 1982) in the WCAP-9179 SER.
j Because current staff understanding is that typical design cladding stresses i
under Condition I and II modes of operation are significantly below the 0.2 percent offset yield stress, the difference between irradiated and unirradiated i
values may be unimportant in this application.
However, we are unable to make
' that determination. Hence, this issue is considered confirmatory and Ehe' applicant should either justify the particular applicatidn'6f. irradiated
.Zircaloy yield strength or discontinue use of this credit.
(2)
Cladding Design Strain With regard to cladding strain, a design limit for fuel. rod cladding plastic tensile creep (due to unifom cladding creep and unifom cylindrical fuel pellet swelling and themal expansion) of less than 1 percent from the unirra-diated condition is given in response ~to Q 231.2.
Furthemore, the total tensile strain transient limit (due to unifom cylindrical pellet themal expansion during the transient) is stated to be.less than 1 percent from the pretransient value. While the staff has not explicitly reviewed the supporting l
data for nomal operation (Condition I), that value appears to be consistent with past practice (no numerical value for nomal operation cladding strain is provided.as an acceptance criterion in the Standard Review Plan), and thus there is reasonable assurance that 1 percent total plastic creep strain is an acceptable desigr. limit for nomal operation, including Condition I power changes (load following).
For transient-induced defomation, 'the Standard Review Plan indicates that 1 percent uniform cladding strain is an acceptable damage limic that should. preclude some types of pellet / cladding interaction (PCI) failures. Such a limit, however, while consistent with past practice, should not be construed to be a broadly applicable PCI damage limit because there is ample evidence (Tokar, November 14,1979) that PCI failures can occur e
4.2 - 4
a m.ww mw_..
__ t..e w
._c..
c L. 7.% _
n.
s at less than 1 percent uniform cladding strain. Westinghouse has indicated in response to staff question 231.24 that 1 percent plastic strain from the pretransient value is not meant to serve as a broadly applicable PCI criterion.
Nevertheless, the staff finds the 1 percent cladding transient plastic strain criterion to be an acceptable design limit for the type of application indicated in.SRP Section 4.2.
For fuel assembly structural design, Westinghouse set design limits on stresses and defonnations due to various nonoperational, operational, and accident loads. As indicated in the FSAR, the stress categories and strength theory presented in Section III of the ASitE Code are used as a general guide. This 1.s consistent with acceptance criterion II. A.1(2) of SRP Section 4.2 and is acceptable.
~
(3)
Strain Faticue The strain fatigue criteria given in response to 0 231.2 are the same as those
. described in SRP Section 4.2, viz., a safety factor of 2 on stress amplitude or of 20 on the number cycles and are, therefore, acceptable.
n (4)
Fretting Wear While the Standard Review Plan does not provide' numerical bounding-value acceptance criteria for fretting wear, it does stipulate that the allowable fretting wear should be stated in the safety aralyis report and that the stress and fatigue limits should presume the existence of this wear.
From the response to Q 231.5, it can.be seen that the Westinghouse design basi _s for fretting wear is that fuel rods shall not fail during Condition I and II events.
Furthermore, Westinghouse does not use an explicit fretting wear limit in their stress and fatigue analysis for fuel rods. However, Westinghouse does use a value (' proprietary) of wall thickness as a. general guide in evaluating cladding i,mperfections, including fretting wear.
Cladding imperfections including fretting wear are thus considered in the stress and fatigue-analysis, albeit in a very qualitative, nonrigorous manner.
In view of the apparently small effects of these defects and large stress and fatigue margins (see Section 4.2.3.1(A) of this Safety Evaluation Report), this design method is acceptable.
4.2 - 5
?. g -
-- ~m -n x.e n The design basis for guide thimble tubes is treated differently by Westinghouse, as described in the response to 0 231.41.
The.. design basis is that the thinning of the' guide thimble tube walls should not result in the failure of the fuel assembly structural integrity or functionability of the guida thimble tubes.
~
-The staff finds this to be an acceptable design basis.
~
With regard to a design limit for guide thimble tube wear, Westinghouse has determined from stress analyses that the most limiting load on the fuel assembly
. structure is that which might occur during a fuel handling accident. For the analysis of this accide.nt, Westinghouse uses a design criterion of 6 g.
This design limit is therefore used for degraded guide thimble tubes and has been previously accepted for Westinghouse fuels.
(5)
Oxidation and Crud Buildup The SFA design basis for cladding lixidation and crud buildup ~ is that the increase in cladding temperature d9e to cladding o'idation and crud buildup is x
not excessive (see Overheating of Cladding, below).
1 Section 4.2 of the Standard Review Plan identifies cladding oxidation and crud buildup as' potential fuel system damage mechanisms. Because of the increased themal resistance of these layers, there is an increased potential for elevated temperature within the fuel as well as the cladding.
Because the effect of oxidation and crud layers on fuel and cladding temperature is a function of sev2ral different parameters (such as heat flux and thermal-hydraulic boundary.
conditions), a design limit on' oxide or crud layer thickness does not, per se, preclude fuel damage as a result of these layers. Rather, it is necessary that the5e layers be app'ropriately considered in other temperature-related fuel system damage and failure' analyses.. This is, indeed, the approach taken by Westinghouse in the design'of the Standard Fuel Assembly.
The staff finds this approach acceptable.
~
(6) - Ro'd = Bowina' Fuel rod bowing is a ph'enomenon that alters the pitch dimensions between adjacent fuel rods.
Bowing affects local n'uclear power peaking and the local
,&e 4.2 - 6
~
~
n
. a.
_ w m __.,. e
-~mw.
~w e
heat transfer to the coolant.
Rather than placing design limits on the amount of bowing that is permitted, the effects of bowing are included in the safety analysis. This is consistent with the Standard Review Plan and is acceptable.
The methods used for predicting the degree of rod bowing are evaluated in Section 4.2.3.1(6), and the impact of the resulting bow magnitude is evaluated in Sections 4.3 and 4.4 (7)
Axial Growth In the SFA design the, core components requiring axial-dimensional analyses are the control rods, neutron source rods, burnable poison rods, fuel rods, and
~ fuel assemblies (thimble plugging rods are omitted because they are short and s
~
not axial-growth limited). The axial growth of the first three of these components is primarily dependent upon the behavior of poison, source, or
' spacer pellets and their 304 stainless-steel cladding.
The growth of the latter two is mainly governed by the behavior of fuel pellets, Zircaloy-4 cladding, and Zircaloy-4 guide thimble tubes.
~
The Westinghouse design bases for core component rods are that (a) dimensic stability and cladding integrity are maintained during Condition I and II events and (b) these components do not interfere with shutdown during Condition III and IV events.
Westinghouse does not, per. se, have design limits on the axial growth of their control, source, and burnable poison rods.
However, allowances are made to accommodate (a) pellet swelling 'due to gas production and (b) relative themal
~
expansion between the stainless-stee1 cladding and the encapsulated material.
Westinghouse does not account for irradiation growth of the stainless-steel cladding and has cited experiments (Foster and Strain, October 1974) as justifi-cation for the insignificance of irradiation growth of stainless-steel at PWR oprating conditions.
For the Zircaloy cladding and fuel assembly components, the axial-dimensional behavior is governed by creep (due to mechanical or hydraulic loading) a. !
irradiation growth. The critical tolerances that require controlling are 4.2 - 7 1-..
. --g
.s
-e.~
(a) the spacing between the fuel rods and the fuel assembly (shoulder gap) and (b) the spacing between the fuel assemblies and the core internals. Failure to adequately design for the fomer may' result in fuel rod bowing, and for the latter may result in collapse of the holddown springs. With regard to inadequ-ately designed shoulder gaps; problems have been reported (Schenk, October 1973; Kuffer and Lutz,1973; and FSAR of R. E. Ginna Unit 1,1972) in foreign (Obrigheim and Beznau) and domestic (Ginna) plants that have necessitated pre-discharge modifications to fuel assemblies.
With. regard to a design basis for shoulder gap spacing, Westinghouse stated in the responses to 0 231.2, 231.8, 231.25, and 231.40 that interference is
. precluded by having clearance between the fuel rod end and the top and' bottom nozzles. The design clearance accommodates the differences,in growth, fabricatica tolerances, and the differences in thennal expansion between the fuel cladding and the thimble tubes. Westinghouse does not have specific limits on growth, but does provide a gap spacing that is equal to or greater than a percentage (the specific value is proprietary) of the fuel rod length. The percentage value used by Westinghouse provides gap spacings that are similar to those employed in other fuel vendor designs.
With regard to fuel assembly growth, Westinghouse has a design basis that there shall be no axial interference between the fuel assembly and upper and lower core plates caused by temperature or irradiation. As a design limit, Westinghouse provides a ninimum gap (proprietary value that is a fraction of the fuel assembly length) between the fuel assembly and the reactor internals.-
The above design bases and limits dealing with axial growth are acceptable.
(8)
Fuel and Poison Rod Pressure For Condition I and II events, the mechanical design basis for core component rods described in the FSAR is that dimensional stability and cladding integrity are maintained. A necessary corollary of this design basis is that the driving force, rod internal pressure, is never so great as to result in loss of dimensional stability and cladding integrity.
i 4.2 - 8 i-
3mams n.w
.s Section 4.2 of the Standard Review Plan identifies rod internal pressure as a.
potential fuel system damage mechanism.
In this sense, damage is defined as an increased potential.for elevated temperatures within the rod as well as an increased potential for cladding failure.
Although.the Standard Review Plan mentions only fuel and burnable poison rods, the mechanism also applier to control rods, neutron source rods, and other core component rods.
Because rod internal pressure is a driving force for, rather than a direct mechanism of, fuel system damage, it is not necessary that a damage limit be specified.
It is only necessary that the phenomenon be appropriately considered in other fuel system damage and fuel failure analyses.
In other words, rod internal pressure must be cons'idered in calculating the temperature of the rod internals, cladding defonnation, and cladding bursting.
s In order to simplify the analysis of fuel system damage due to excessive rod
' nternal pressure, the Standard Review Plan states that rod internal gas i
pressure should remain below the noniinal system pressure during nonnal operFtioil
'unless otherwise justified. Westinghouse has elected to justify limits other than that ~.avided in the Standard Review Plan.
For the fuei ois, revised internal rod pressure criteria as described in an approved topical report (WCAP-8963) were used in the FSAR.
Briefly stated, these criteria allow the fuel rod internal pressure to exceed the system pressure under certain conditions:
(a) the internal pressure is limited such that the fuel-to-cladding gap does not increase durinp steady-state operation, and (b) ' extensive departure from nucleate boiling (DNR) propagation does not occur for postulated transients and accidents.
These criteria have been previously approved and remain accepi;able.
For nonfueled rods, the rod internal pressure is limited such that the mechanical design limits, discussed in Section 4.2.1.5 of the FSAR, are not exceeded for Condition I and II events. This implies a stress limit of 2/3 of the material l
yield stress and a strain limit of 1 percent..These limits are unchanged from previously approved Nestinghouse fuel designs and remain acceptable for this FSAR.
4.2 - 9 L-
- -s7
= wm=mWWa
- - n.a (9)
Assembly Liftoff
- The Standard Review Plan calls for the fuel assembly holddown capability 1
(gravity and springs) to exceed worst-case hydraulic loads for normal operation, whien includes anticipated operational occurrences. The SFA design basis provides for positive holddown for Condition I, but allows momentary liftoff during one Condition II event. This design basis is acceptable provided that it can be shown that the affected fuel assemblies will reseat properly without damage and without other adverse effects during the event. The ability of the affected fuel assemblies to satisfy this provision will be discussed in paragraph 4.2.3.1.
s (10)
Control Material Leaching 7
The Standard Review Plan and General Design Criteria require that control rod reactivity be maintained.
Control rod reactivity can sometimes be lost by leaching of certain poison materials if the control rod cladding has been breached. The mechanical design basis for the control rods is stated in tne
~
FSAR to be consistent with the loading conditions of Section III of the AS1E Code. Thus, the design basis for the SFA control rods is to maintain' cladding integrity; because cladding integrity would ensure that reactivity is maintained, this design basis might appear to be acceptable.
However, under some circum-stances, unexpected' breaches might go undetected, so the staff does not nomally accept control rod cladding integrity as a sufficient design basis.
A discussion will be presented under Design Evaluation, paragraph 4.2.3.1, that shows that adequate surveillance will be provided to ensure maintenance of reactivity.
4.2.1.2 Fuel Rod Failure Criteria The NRC staff's evaluation of fuel rod failure threshold for the failure mechanisms listed in the SRP is presented in the following paragraphs.
When these failure thresholds are applied to nomal or transient operation, they are used as limits (and hence SAFDLs), since fuel failures under those conditions should not occur (according to the traditional conservative interpretation of GDC 10)'
When these thresholds are applied to accident analyses,. the number of 4.2 - 10
7
_e ma.c..-w
-ww w w m h t'
..cm 1
.m fuel failures must be detemined for input to the radiological dose calculations required by 10 CFR 100. The basis or reason for establishing these failure thresholds is thus predetemined, and only the threshold values are reviewed below.
(1)
Internal Hydriding Hydriding as a cladding failure mechanism is precluded by controlling the level of moisture and other hydrogenous impurities during fabrication. As described in the revised response to Q 231.6, the moisture levels in the uranium. dioxide fuel are limited by Westinghouse to less than or equal to
, 20 ppm. This specification is compatible with the ASiti specification for sintered.urenium dioxide pellets, which allows 2 g hydrogen per gram of uranium (2 ppm), and they are the same as the limits provided in the Standard
' Review Plan; they are therefore acceptable.
-(2)
Cladding Collapse If axial gaps in the fuel pellet column were to occur due to densification, the cladding would have the potential of collapsing into a gap (flattening).
Because of the large local strains that would result from collapse, the cladding
- is assumed to fail. As indicated in the FSAR and responses to Q 231.2, 231.9 and 231.34, it is a Westinghouse design basis that cladding collapse is precluded during the fuel rod dasign lifetime. This design basis is the same as that in the Standard Review Plan and is therefore acceptable.
(3)
Overheating of Cladding The design basis as given in the FSAR for the prevention of fuel failures due to overheating is that there will be at least 95 percent probability that departure from nucleate boiling (DNB) will not occur on the limiting fuel rods during nomal operation or any transient conditions arising from faults of moderate frequency (Condition I and II events) at a 95 percent confidence level. This design basis is consistent with the themal margin criterion of
~SRP Section 4.2 and is, thus, acceptable. The specific DNBR limits and methods of analysis are reviewed in Section 4.4.
4.2 - 11
.%_o 7
-- w--%
- - am l
(4)_
Overheating of Fuel Pellets As a second method of avoiding cladding failure due to overheating, Westing-house avoids centerline fuel pellet melting as a design basis..This design
' basis 'is the same as given in the Standard Review Plan and is thus acceptable.
The design limit corresponding to the design basis given above is that, during modes of operation associated with Condition I and Condition II events, there is at least a 95 percent probability that the peak kW/ft fuel rod will not exceed the UO melting temperature. This design limit is an acceptable repre-2 sentation of the design basis given previously.
(5)
Pellet / Cladding Interaction
' As. indicated in SRP Section 4.2, there are no generally applicable criteria for PCI failure.
However, two acceptance criteria of limited application are
~
presented in the SRP for PCI:
(a) less than 1 percent transient-induced clad-ding strain and (b) no c;:nterline fuel melting.
The response to Q 231.2 indicates that the 1 percent cladding plastic strain lim'it is met for the SFA design, and as stated in Section 4.2.1.2 of the FSAR, th,e SFA design ensures that UO centerline melting will not occur through selection of a calculated 2
fuel centerline temperature of 4700*F as an overpower limit. Thus the SFA design basis and limits agree with the only existing licensing criteria for PCI.
(6)
Cladding Ruoture In the L'OCA analysis for SFA-designed plants, an empirical model is used to predict the occurrence of cladding rupture. The failure temperature is expressed as a function of differential pressure across the cladding wall. There are no specific design limits associated with cladding rupture, and the rupture model is a portion of the ECCS evaluation model, which is documented in WCAP-8301 and WCAP-8302.
4.2 - 12
-.A-e.
r
- + -,
ew~~,
w
-,-,,e-r-4
--e
--rrn,,w,-~w
,,---.-,-we-,--,,e-w--,---e-w
.,-r-,---w-
p._., _
u i_x..mx v. a. w w.; c:...w: u.
__.w.,. gg,;,.
_.m
.i j
j 4.2.1.3 Fuel Coolability Criterf a For major accidents in which severe fuel damage might occur, core coolability must be maintained as required by several GDCs (e.g., GDC 27 and 35). The following paragraphs discuss the staff's evaluation of limits that will assure that coolability is maintained for the severe damage mechanisms listed in Section 4.2 of the SRP.
(1)
Fracmentation of Embrittled Claddina For LOCA analysis, Whstinghouse uses the acceptance criteria of 2200*F on peak cladding temperature and 17 percent on maximum cladding ox.idation as prescribed by 10 CFR 50.46.
'For events other than the LOCA, the NRC staff does not have separately estab-1ished temperature or exidation criteria.
Yet it is clear that for short-tenn events such as locked rotor, the 2200*F peak cladding temperature and 17 percent oxidation LOCA criteria are not really meaningful, because the temperature history for such an event is much shorter than that of a LOCA.
For events such as locked rotor, therefore, Westinghouse uses a unique peak-cladding-I temperature (PCT) criterion of 2700*F.
The Westinghouse 2700'F PCT limit was selected taking into consideration the short time (a few seconds) that the fuel is calculated to be in DtlB for a locked-rotor type event and the fact that the PCT and total metal-water reaction at the fuel hot spot would not be expected to impact fuel coolable geometry.
^
While this limit has been used by Westingho'use for several years, the basis for the limit has only recently been reviewed.
However, a recent assessment (Van Houten, February 23,1981) of the available experimental infonnation r
indicates that fuel rod cladding will, indeed, retain its rod-like geometry after exposure to short-tenn (a few seconds) peak cladding temperature of 2700*F.
That conclusion is based on four Japanese reports (Shiozawa, March 1979; Hoshi, tiay 1980; JAERI-M-9011, September 1980; and Fukishiro, October 1980) that describe experimental results for reactor test programs reported since 1979. The steff, therefore, concludes that there is reasonable assurance that the 2700'F PCT limit for short-term events such as locked rotor is an acceptable coolability limit for the Westinghouse SFA design.
4.2 - 13
w v--
mv
-a.akmua. u It should be noted that staff acceptance of the 2700*F PCT limit for fuel rod coolability is currently restric'ed to undercooling events such as locked rotor. For overpower events such as control rod e,iection, which involve a pellet-to-cladding mechanical interaction, the staff has not determined the applicability of a PCT limit and currently uses a fuel rod enthalpy criterion of 280 cal /g for coolability of a rod-ejection accident.
(2)
Violent Expulsion of Fuel Material The design bases that there should be little or no possibility of fuel dispersal in the coolant, gross lattice distortion, or severe shock waves are given in Section 15.4.8.1.2 and are equivalent to those in the Scandard Review P.1_an.
s The design limits given in the FSAR are:
(a)
Average fuel pellet enthalpy at the hot spot will be below 225 cal /g for
~
unf rradiated fuel and 200 cal /g for irradiated fuel.
(b)
Average cladding temperature at the hot spot will be below the temperature at which cladding embrittlement may be expected (2700*F).
(c)
Peak reactor coolant pressure will be less than that which could cause pressures to exceed the faulted condition stress limits.
(d)
Fuel melting will be limited to less than 10 percent of the fuel volume at the hot spot even if the average fuel pellet enthalpy is below the limits above.
These limits are more conservative than the single 280 cal /g ifmit given in Regulatory Guide 1.77, they have been previously approved in the review of WCAP-7588, and they remain acceptable.
(3)
Claddino Balloonino and Flow Blockaoe In the,LOCA analyses for SFA-designed plants, empirical models are used to predict the degree of cladding circumferential strain and assembly flow blockage 4.2 - 14 Q
- w ~ -x c-
- n r m m..- --
~2
<- / p.
w..
ZKG:
p_.
w -. :. >
.s.
at the time of hot-rod and hot-assembly burst. These models are each expressed as functions of differential pressure across the cladding wall. There are no 1
specific design limits u ociated with ballooning and blockage, and the balloon-i ing and blockage models are portions of the ECCS evaluation model, which is documented in WCAP-8301 and WCAP-8302.
(4)
Structural Damage from External Forces 1
, Section 4.2.3.5 of the FSAR states that the fuel essembly will maintain a geometry that is capable of being cooled under the worst case accident Condition IV event an'd that no interference between control rods and thimble
. tubes will occur during a safe shutdown earthquake. This.is equivalent to the design basis as presented in the Standard Review Plan and is therefore acceptable.
4 2.2 Description and Design Drawings.:_
The description of fuel system components, including the fuel rods, bottom and top nozzles, guide and instrument thimble tubes, grid assemblies, rod cluster control assemblies, burnable poison rods, neutron sources, and thimble plugs,
/
is contained in the FSAR Section 4.2.2.
In addition, in Table' 4.3-1 numerical values rre provided for various core component parameters. While each parameter listed in SRP subsection 4.2.2 is not provided in the FSAR, enough information is provided in sufficient detail to provide a reasonably accurate representation of the SFA design and this infomation is thus acceptable.
4.2.3 Design Evaluation Design bases and limits were presented and discussed in SER Section 4.2.1.
In this section we review W methods of demonstrati:1g that the SFA fuel design meets the design criteria that have been established. This SER subsection will, therefore, correspond to subsection 4.2.1 of the SER point by ' point. The methods of demonstrating that the design criteria hwe been met include operating experience, prototype testing, and analytical predictions.
4.2 - 15
y-
- w. m.uw, waw 4.2.3.1 Fuel System Damage Evaluation The following paragraphs discuss the NRC staff's evaluation of the ability of the SFA fuel to meet the fuel system damage criteria described in Section 4.2.1.l.
Those criteria apply only to nomal operation and anticipated trans-1ents.
(1)
Cladding Design Stress As indicated in the response to Q 231.2, Westinghouse used its Performance-Analysis and Design (PAD) code to analyze cladding stress (WCAP-8720). That
^
. code has been reviewed and found acce'ptable (Stolz, February 9, 1979).
Typical calculated design values for cladding effective stress pro'vided in respo.ise to Q 231.2 are stated to be considerably below t$e~0.2 percent offset
' yi. eld stress design limit.
However, as discussed in Section 4.2.1.1(1), there is a discrepancy in that credit has been taken for irradiation-induced strengthening and this is contradictory to a restriction on the approved Westinghouse topical report WCAP-9179.
Hence, this issue is considered confirmatory.
(2)
Cladding Design Strain The NRC-approved Westinghouse fuel performance code (PAD) was used in the strain analysis, as indicated in the respcase to Q. 231.2. Typical design values of steady-state and transient creep strain, as cal:ulated by that code, are found to be below the 1 percent strain criterion.
Hence, the staff con-cludes that the SFA cladding strain desigri limits have ber:n met.
(3)
Strain Fatigue As indicated in the response to Q 231.2, Westinghouse used their approved PAD code for the strain range and strain fatigue life usage analysis.
Experimental data (proprietary) obtained from Westinghouse testing programs were used to derive the Westinghouse Zircaloy fatigue design curve, according to the response to Q 231.4.
For a-given ' strain range, the number of fatigue cycles is less 4.2 - 16 s
y
.a wn <-
m_.-
w 2 wug;;:a._.i =.3:.sw;.;K x
than that required for failure, considering a minimum safety tactor of 2 on stress amplitude or a minimum safety factor of 20 on the number of cycles, (the fatigue usage factor is less than 1.0).
And the computations were per-formed with an approved code. Therefore, the staff concludes that the SFA fatigue design basis has been met.
(4)
Frettino Wear With regard to the Westinghouse fretting analysis of the fuel cladding, the staff concludes the following:
'.(a)
The out-of-pile flow tests and analyses (WCAP-9401) to detennine the magnitude of fretting wear that is anticipated for the OFA design have been previously reviewed and found acceptable (Rubenstein, April 23,1981).
These analyses are also acceptably conservative for SFA applications.
(b)
LUR operating experience demonstrates that the number of fretting-induced fuel failures is insignificant.
(c)
There should be only a,small dependence of cladding stresses on fretting wear because this type of wear is local at grid-contact locations and relatively shallow in depth.
(d)
The built-in conservatisms (that is, safety factors of 2 on the stress amplitudes and 20 on the number of cycles) in the strain fatigue analysis as well as the calculated margin to fatigue life limit adequately offset the effect of fretting wear degradation.
Therefore, the staff concludes t' hat the SFA, fuel rods will perfonn adequately with respect to fretting wear.
Fretting wear has also been observed on the inner surfaces of guide thimble tubes where the fully withdrawn control rods reside. Significant wear is limited to the relatively soft Zircaloy-4 guide thimble tubes because the Inconel or stainless steel control rod claddings are relatively wear-resistant.
The extent of the wear is both time-dependent and plant-dependent and has, in some non-Westinghouse cases', extended completely through the guide thimble tube wall.
9 4.2 - 17
=
+_-mmu
=: w a Westinghouse has predicted that an SFA can operate under a rod cluster c0ntrol assembly (RCCA) for a period of time (proprietary) that exceeds the amount of rodded time expected with current 3-cycl.e fuel" schemes before fretting wear degradation would result in exceeding the present margin to the 6 g load criter. ion.for the fuel handling accident. However, the NRC required several applicants to perfom a surveillance program because of the uncertainties in predicting wear rates for the standard 17x17 fuel assembly design. The objective of this program was to demonstrate that there was no occurrence of
, hole fomation in rodded guide thimble tubes, thus providing some confidence that scrammability is ensured. These applicants formed an owners' group, which has submitted a generic report (Leasburg, March 1,1982) that provides post-irradiation examination results on guide thimble tube wear in the Westing-
' house 17x17 fuel assembly design.
Based on this report, the staff has con-cluded.(Rubenstein, April 19,1982) that the Westinghouse 17x17 fuel assembly design is resistant to guide thimble tube wear.
=
(5)
Oxidation and Crud Buildup In the FSAR, there is no explicit discussion of cladding. oxidation, hydriding, and crud buildup. The applicable models for c'. adding oxidation and crud
- /
buildup are discussed in the supporting documentation (Salvatori, January 4, 1973) for the Westinghouse. fuel perfomance code PAD-3.1. These models were
.previously approved. by the NRC staff. A new temperature-dependent cladding oxidation model is also presented in WCAP-9379. Because the temperature-independent model in PAD-3.1 is conservative with respect to the approved model 'in WCAP-9179, the staff continues to find the older models applicable.
These medels affect the cladding to-coolant heat transfer coefficient and the temperature drop across the cladding wall. Mechanical properties and analyses of the cladding a're not significantly impacted by oxide and crud buildup.
On the basis of the Westinghouse discussion (Anderson, January 12,1981)ofthe impact of cladding hydriding on fuel perfomance, and or. previous staff review of the oxidation and crud buildup models, the staff concludes that these effects have been adequately accounted for in the Standard Fuel Design.
i 4.2 - 18
~ _. -
wswu
- : 2.6a u.: :.u ; m
-(6)
Rod Bowing The flRC has previously approved (iteyer,.itarch 5,.1978) the rod bowing correlation (Anderson, April 19,1978) that was used by the applicant.
(7)
Axial Growth Relative to the discussion above (4.2.1) on stainless steel growth, the staff is aware of supporting infomation (Bloom, April 1972, and Appleby, April 1972) that was not cited by Westinghouse, but which also implies that irradi-ation growth of stainless steel should not.be significant at the temperatures and fluences that are associated with PWR operation.
Furt.hemore, because the staff is unaware of any operating experience that indicates axial-growth-related problems in Westinghouse flSSS plants, the shff concludes ' hat Westinghouse t
has made sufficient accommodations for control, source, and burnable poison rod axial rod growth in their tiSSS designs.
The Westinghouse analysis of shoulder gap spacing for the SFA has found that interference will not occur until achieving burnups beyond traditional values.
The staff, therefore, finds that the required shoulder gap spacing has been t
reasonably accommodated. However, for extended burnup a'pplications, the
. adequacy of the spacing should be reverified.
Furthemore, because stress-free irradiation growth of zirconium-bearing alloys is sensitive to texture (preferred cystallographic orientation) and retained cold work, which, in turn, are strongly dependent on the specific fabrication techniques that are employed during component production, reverification of the design shoulder gap should be perfomed if Westinghouse current fabrication specifications are significantly altered.
i rinally, the staff finds the Westinghouse analysis of fuel assembly growth to be acceptable. However, as stated in the above discussion on shoulder gap spacing, reverification of the fuel assembly growth should be perfomed if significant changes are made in the Westinghouse current fabrication techniques.
j i
4.2 - 19
~.wmw.--
w.
n--
'=A
.q 1
\\
(8).
Fuel and Poison Rod Pressure The analysis of fuel rod internal p: essure for the Standard Fuel Design is described in an approved topical report, WCAP-8963-A. The evaluation relies on the Westinghouse PAD-3.3 fuel performance code, which has also been apprcved (Stolz, February 9,1979) by the staff.
The analysis of nonfueled rod internal pressure for the SFA is generally based on Section III, Article NG-3000, of the AStiE Code. Control rod, neutron source rod, an'd burnable poison rod cladding is 10 percent cold-worked 304
~ stainless steel, which is not covered by the Code. Westinghouse therefore s
defines as the stress limit an intensity value Sm equal to ' /3 of the material 2
yield stress. The yield for this material occurs at about 62,000 psi. A strain limit of 1 percent also applies to the cladding.
Predicted maximum vilues of rod internal pressure have been provided in an answer to NRC question
'O ~231.2.and they are well below those imposed by the cladding stress and strain limits.
The staff concludes that there is adequate wrance that nonfueled core component rods can operate safety during Conditions I and II modes of operation even though maximum internal rod pressure may exceed system pressure because appropriate stress and strain limits are met.
(9)
Asseiably liftof' In response to the staff's question on this topic, Westinghouse has confimed that momentary liftoff will occur only during a turbine overspeed. Westing-here has further found that (a) proper reseating will occur af ter momentary linoff, (b) damage to adjacent assemblies.will not occur even if one assembly is fully lifted and the adjacent ones remain seated, and (c) no ill con-sequences of momentary liftoff are expected. The staff concludes, therefore, that fuel assembly liftoff has been adequately addressed for the SFA design.
d 4.2 - 20
_ gLLw;u.
u,,2 - x.~- - -w, -
ai;;; a x
=.
- . n a
J (10) Control Material 1.eaching While the design basis for the SFA control rods' is to maintain cladding integrity, and while the probability of control rod cladding failures appears to be 'quite low, the staff has considered the corrosion behavior of the Shearon Harris control material and concludes that a breach in the cladding should not result in serious consequences because the Ag-In-Cd absorber material is relatively inert.
4.2.3.2 Fuel Rod Failure Evaluatiort The following paragraphs discuss the staff's evaluation of. (a) the abil.ity of the SFA fuel to operate without failure during nomal operation and antici-
. pated transients', and (b) the accounting for fuel rod failures in the applicant's
' accident analysis. The fuel rod failure criteria described in Section 4.2.1.2 were used for this evaluation.
(1)
Internal Hydriding
~
Westinghouse has used moisture and hydrogen control limits in the manufacture of earlier' fuel types and has found that typical end-of-life cladding hydrogen levels are less than 100 ppm -- a level below which hydride blister fomation is not anticipated in fuel cladding.
The staff therefore concludes that reasonable evidence has been provided that hydriding as a fuel failure mechanism will not be significant in the SFA.
(2).
Cladding Collapse l
In calculating the time at which cladding collapse will occur, Westinghouse uses the generic nethods described in WCAP-8377, which is approved (Stello, January 14,1975) for licensing applications.
Inputs to the analysis include cladding ovality, helium prepressurization, free volume of the fuel rod, and limiting power histories.
4 4.2 - 21 l
i
mn ?
=- -
- . w y
- a ~_ - :. ;.: : _
.%w.:.:
Westinghouse adjusts the fuel rod pressure so that cladding collapse will not occur at a residence time that is less than the desaa lifetime.
Consequently, the staff expects that cladding collapse will not occur, but confimation should be provided by the applicant by showing that the calculated cladding collapse time for Shearon Harris using WCAP-8377 methods is more than the expected lifetime of the fuel.
(3)
Overheating of Cladding As-stated in SRP Section 4.2, adequate cooling is assumed to exist when the thennal, margin criter' ion to limit the departure from nuclear boiling (DNB) or
. boiling transition in the core is satisfied. The method employed to meet the
' DNB design basis is reviewed in Section 4.4 and will not be discussed here.
-(4)
Overheating of Fuel Pellets The design evaluation of the fuel centerline melt limit is perfomed with the Westinghouse fuel perfomance code, PAD-3.3 (WCAP-8720). This code, which has been approved by the NRC (Stolz, February 9,1979), is also used to calculate initial conditions for transients and accidents described in Chaptar 15 of the Standard Review Plan (see paragraph 4.2.3.3(1) below for further comments on PAD-3.3).
In applying the PAD-3.3 code to the centerline melting analysis, the melting temperature of the U0 is assumed to be 5081*F unirradiated and is decreased 2
i by 58*F per 10,000 itud/t.
This relation has been almost universally adopted by the industry and has been accepted by the NRC staff in the past. The expressions for themal conductivity and gap conductance, described in Section 4.4.2.11 of the FSAR, are unchanged from that originally described in the PAD code. The staff considers it unnecessary to further review these models.
In order to avoid using the PAD code to calculate a continuous set of burnup-dependent conditions ^necessary to cause centerline melt, Westinghouse has performed the calculation for a single case. This was done by assuming a UO2 4.2 - 22
- uns, m.-
-u w.r s.:.n
- w :ye-ca.:n:.w
. melting temperature of 4701*F, which corresponds to the melting temperature at 65,000 mwd /t, and melting occurred at a linear power rating of approximately 21 kW/ft. The limiting local power for the worst Condition II transient, boron dilution with automatic rod control, is less than or equal to 18 kW/ft for Westinghouse plants with.17x17 fuel. Thus, the centerlin.e melt criterion is satisfied in an acceptable manner.
(5)
Pellet / Cladding Interaction The only two PCI criteria in current use in licensing (1 percent cladding strain and no fuel melting), while not broadly applicable, are easily satisfied. As noted in the discussion of the cladding str.ess and straf.n s
evaluation, Westinghouse uses an approved code (PAD) to calculate creep strain, and the values calculated by that code are found to be below the 1 percent strain criterion. And, as indicated in the discussion on overheating failures, the no-centerline-melt criterion is satisfied based on an analysis (described in Chapter 15.4.6) of the baron dilution event, which is analyzed with an approved code. Therefore, the two existing licensing criteria for PCI have been satisfied.
In addition to the SRP-type treatment of PCI, however, r'esponses to 0 231.23 and FSAR Section 4.2.3.3(a) address PCI from the standpoint of its effect on fatigue life. Thus, PCI produces cyclic stresses and strains that can affect-fatigue life of the cladding.
Furthermore, gradual compressive creep of the cladding onto the fuel pellet occurs due to the differential pressure exerted on the fuel rod by the coolant. Westinghouse contends that, by using prepres-surized f:Jel rods, the rate of cladding creep is reduced, thus delaying the time at which fuel-to-cladding contact first occurs. The staff agrees that fuel rod prepressurization should improve PCI resistance, albeit in a presently unquantified amount.
In conclusion, Westinghouse has used approved methods to demonstrate that the present PCI acceptance criteria have been met.
4.2 - 23
u p w m
a;
.wa.a.,,_
1%
(6)
Cladding Rupture Although a revised cladding rupture temperature correlation has recently been approved (Miller, December 1,1981) as an integral part of the 1981 ECCS evaluation model, we previously concluded (NUREG-0630) that the old correlation in the earlier ECCS evaluation model was non-conservative over some regions of applicability. To compensate for this deficiency, supplemental calculations have been required for each plant application that uses the earlier Westinghouse ECCS, evaluation model. Since the Shearon Harris analysis was done with this earlier modc1, supplemental calculations were provided to demonstrate that Shearon Harris would ' conform to the ECCS acceptance criteria of 10 CFR 50.46 if the NRC staff cladding rupture temperature correlation.(NUREG-0630) was substituted for the Westinghouse model contained in WCAP-8301.
This requirement for supplemental ECCS calculations is the same as the present requirement made for all operating license applications and all ECCS reanalyse's of operating reactors (Eisenhut November 9,1979, and Denton November 26,1979).
The supplemental calculations for Shearon Harris are evaluated *in Section 4.2.3.3(3). The overall impact of cladding rupture on the response of the SFA design to the loss-of-coolant accident is evaluated in Section 15.6.5 and not
/
reviewed further in this s:ction.
4.2.3.3 Fuel Coolability Evaluation The following paragraphs discuss the staff's evaluation of the ability of the SFA fuel to meet the fuel coolability criteria described in Section 4.2.1.3.
Those criteria apply to postulated accidents.
(1)
Fraomentation of Embrittled Cladding l
The primary degrading effect of a significant degree of cladding oxidation is embrittlement of the cladding.
Such embrittled cladding will have a reduced ductility and resistance to fragmentation. The most severe occurrence of such embrittlement is during a LOCA. The overall effects of cladding embrittlement on the SFA design for the loss-of-coolant accident are analyzed in Section.
15.6.5 and are not reviewed further in this section.
4.2 - 24
.L
p._
--ac.w
- a:
u
.av----<w,-.
W L/
2 lkwu One of the most significant analytical methods that is used to provide input to the analysis in Section 15.6.5 is the steady-state fuel performance. code, which.is reviewed in Section 4.2.
This' code provides fuel pellet temperatures (stored energy) and fuel rod gas inventories for the ECCS evaluation model as prescr'ibed by Appendix r. to 10 CFR 50.
The code accounts for fuel thermal conductivity, fuel densification, gap conductance, fuel swelling, cladding creep, and other phenomena that affect the initial stored enargy.
Westinghouse uses a relatively new fuel performance code called PAD-3.3 (WCAP-8720). This new Westinghouse code was approved with' four restrictions as described in the staff's safety evaluation (Stolz, February 9,1979).
Three of those restrictions dealt with numerical limits and have been met.
s The fourth restriction related to the use of the PAD-3.3 code for the analysis of fission gas release from UO for power-increasing conditions during nonnal 2
operation. This restriction applied to the SFA.
However, Westinghouse pre-pared and submitted a detailed analysis (Anderson, October 22,1979) of this restriction in an Addendum to WCAP-8720. We have completed our review and issued (Rubenstein, June 30,1982) a safety evaluation of the Addendum.
In that evaluation, we concluded that the fourth restriction on the use of the PAD-3.3 code is unnecessary. As a result, we find the analysis described for the SFA acceptable as docketed for all cycles of operation.
At-this time, the staff can therefore state that for the first cycle operation at full power, the restriction for PAD-3.3 is not significant and the analyses presented in the FSAR are acceptable. The staff anticipates completion of its review of the Westinghouse evaluation prior to the attainment of extended burnup at the Shearon Harris plant.
For non-LOCA events, the locked rotor accident (one-pump seizure with three loops operating) is the most severe undercooling event that is analyzed. This event is analyzed in Secticn 15.3.3 of the FSAR, where it is found that the peak cladding temperature is 2250*F, which is well below the 2700*F design
- 1. ni t.
The analysis of this event is reviewed in Section 15.3.3 of this report, but it is' clear that the SFA meets the non-LOCA peak cladding temperature design limit.
4.2 - 25
x.,.
m _ -..
g
,..;. _ w u
- .3. y,_ u
~
i in (2)
Violent Expulsion of Fuel Material The analysis that demonstrates that the design limits are met for this event for the SFA is presented in Section 15.4.8 of the FSAR and is reviewed in that section of *.ae report.
(3) fladding Balloonkng and Flow Blocka:;e Revised cladding rupture temperature, strain, and assenbly flow blockage correlations have recently been approved (Miller, Dacember 1,1981) as integral parts of the'1981 ECCS evaluation model. We had previously concluded
.(NUREG-0630) that these correlations were non-conservative.over some regions of applicability in the earlier ECCS evaluation model. To compensate for these deficiencies, supplemental calculations have been required for each plant application that uses the earlier Westinghouse ECCS evaluation model.
Since the Shearon Harris analysis was done with this earlier model, supple-mental calculations were provided to demonstrate that Shearon Harris would confom to the ECCS acceptance criteria of 10 CFR 50.46 if the NRC staff cladding rupture temperature, strair., and assembly flow blockage correlations (NUREG-0530) were substituted for the Westinghouse models contained in WCAP-
- 8301 and WCAP-8302.
The applicant's calculation responses to Q 490.2 and 440.101 also accounted for a non-conservatism identified (Anderson, November 16,1979) by Westing-house in their February,1978 ECCS evaluation mcdel, which used a. fast-heatup-rate rupture-temperature correlation for slow transient analyses.
Based on an Fg of 2.11 the applicant's submittal ~ assessed the combined impact of this calculational error and the NUREG-0630 correlations to be worth 855'F peak cladding temperature above that previously calculated.
Subsequently, Westinghouse calculated that a reduction in total ' peaking factar F of 0.157 would offset the portion of the 855'F increase in peak cladding g
tempeature that exceeded 2200*F. However, Westinghouse also identified a margin in F available through the use of UHI themohydraulic model improvements g
that are generically approved for the Shearon Harris type of 3-loop plant.
This margin is worth 0.15 in F.
g 4.2 - 26 4
w
+
uw-s :,-
2 m ~~
- - '.. a.s; ~xm._ : ' ~ ~. c
^
4 6
Consequently, an F reduction of only 0.01 is required for Shearon Harris, :nd q
th applicant's Technical Specifications should reflect a new F of 2.10. We, g
therefore, concluded that the applicant.has satisfied our concerns related to the swelling and rupture issue.
The overall impact of cladding ballooning and assembly flow blockage models on the responses of the SFA design to the loss-of-coolant accident is evaluated in Section 15.6.5 and is not reviewed further in this section.
(4)
Structural Damage from External Forces Section 4.2.3.5 of the FSAR refers to WCAP-8236 for this a.nalysis. The. staff
' has reviewed and approved another report (WCAP-9401) which essentially augments the infonnation presented in WCAP-8236 because botih WCAP reports apply to similar assemblies.
For the Shearon Harris application, however, the applicant must demonstrate compliance with Appendix A of SRE.Section 4.2.
The applicant-may make reference to WCAP-8236 and WCAP-9401 to accomplish this.
4.2.4 Testing, Inspection, and Surveillan:e Plans 4.2.4.1 Testing and Inspection of New Fuel As required by SRP Section 4.2, testing and inspection plans for new fuel should include verification of significant fuel. design parameters.
While details of the. manufacturer's testing and inspection programs should be docu-mented in quality control reports, the programs for onsite inspection of new fuel and control assemblies after they have been delivered to the plant shound also be described in the FSAR.
The Shearon Harris FSAR discussion of the Westinghouse quality control program addresses fuel system components and parts, pellets, rod inspection, assemblies, process control, and so forth.
Fuel system component inspection depends on the component parts and includes dimensions, visual appearance, audits of test 4.2 - 27 i
. --s ( " L.W
% C % *v i
~.idh6 ' N - G m
.i reports, material certification, and nondestructive examinations.
Pellet inspections, for example, are perfomed for dimensional characteristics such as diameter, density, length, and squareness of ends.
Fuel rod, control rod, burnable poison, and source rod inspection reportedly consist of nondestructive examination techniques such as leak testing, weld inspection, and dimensional measurement:.
Process control procedures are described in detail.
In addition, Westinghouse states in FSAR Section 4.2.4.4 that if any tests and inspections are to be perfonned by others on behalf of Westinghouse, Westinghouse will review and approve the quality control procedures, inspection plans, and so forth, to ensure tha,t they are equivalent to the description provided in WCAP-95.00 and are perfomed properly to meet all Westinghouse requirements.
The staff concludes, based on the information provided in FSAR Section 4.2.4 and the commitment by Westinghouse to ensure the acceptability of any tests and inspections perfonned by others on behalf of Westinghouse, that the fuel testing and inspection program for new fuel is acceptable.
4.2.4.2 Online Fuel Failure Monitoring The applicant should provide on-line fuel rod failure detection methods.
These are needed to satisfy the guidelines described in paragraph II.D.2 of the SRP.
4 4.2.4.3 Post-irradiation Surveillance A commitment to do visual e.v. amination of some discharged fuel assemblies from i
each refueling has not be2n made by the applicant. This is needed to satisfy
.the. guidelines described in paragraph II.O.3 of the SRP regarding the need for post-irradiation surveillance.
4.2.5 Evaluatien Findings The following have not yet been provided for by the applicant.
.(1)
Resolution of the use of irradiation strengthened Z,f rcaloy yield strengths (see Paragraphs 4.2.1.1(1) and 4.2.3.1(1)).
4.2 - 28
..... ~. - -
p:
.z w
~.;.aa 1 - um r m '- nw. - w-u: u.;ws -z e~,wcS (2) confimation that the predicted cladding collapse time exceeds the expected lifetime of the fuel (see Paragraph 4.2.3.2(2)).
.(3)
.A detemination that the fuel assembly mechanical response to seismic and LOCA forces meets the guidelines of Appendix A of SRP Section 4.2 (see paragraph 4.2".3.3(4))
(4)
A description of plans for on-line fuel system moaitoring (see paragraph 4.2.4.2).
(5)
A description of plans for post-irradiation poolside surveillance of fuel (see paragraph 4.2.4.3).
.When the above are provided, the staff will conclude that the Shearon Harris fuel has been designed so that (a) the fuel system will not be damaged as a result of nomal operation and anticipated operational occurrences, (b) fuel damage during postulated accidents would not be severe enough to prevent control rod insertion when it is required, and (c) core.coolability will always be maintained, even after severe postulated accidents, and thereby meets the.related requirements of 10 CFR Part 50.46; 10 CFR Part 50, Appendix A; GDC 10, 27 and 35; 10 CFR Part 50, Appendix K; and 10 CFR Part 100. - This conclusion it based on the following:
_1)
The applicant has provided sufficient evidence that these design
(
objectives will be met based on operating experience, prototype testing, and analytical predictions. Those analytical predictions dealing with structural response, control rod ejection, and fuel densification'have been perfomed in accordance with (1) the guidelines of Regulatury Guide 1.77, and methods that the staff has reviewed and found to be acceptable alternatives to Regulatory Guides 1.60 and 1.126, and (b) the guidelines for " Evaluation of Fuel Assembly Structural Response to Externally Aeplied Forces" in Appendix A to SRP Section 4.2.
4.2 - 29
.m, w.w
,a.u n w.
~ _ _. _
- x.w.1._.
=,
u...
j (2)
The applicant' has provided for testing and inspection of the fuel to ensure that it is within design tolerances at the time of core loadings. The applicant has made a commitment to perfom on-line fuel failure monitoring and post-irradiation ' surveillance to detect anomalies or confim that the fuel has perfonned as expected.
The staff concludes that the applicant has described methods of adequately predicting fuel rod failures during postulated accidents so that radio-activity released are not underestimated and thereby-meets the related requirements of 10 C'FR Part 100.
In meeting these requirements, the
. applicant has (a) used the fission product release assumptions of Regulatory
' - Guides 1.4,1.25, and 1.77, and (b) performed the analysis for fuel rod failures' for the rod ejection accident in accordance with the guidelines
. of Regulatory Guide 1.77.
bn the basis of its review, the staff concludes, ba~t the' applicant's fuel
~
systen design has met all the requirements of the applicable regulations, regulatory guides, and current regulatory positions.
e 4
e e
9 4
4.2 - 30
7
-._ g va x M G ruk x:,n~ :.a x K G
4.2 REFERENCES
Anderson, T. M., Westinghouse, Letter to J. R. Miller, USNRC, " Responses to
. Request Number 3 for Additional information on WCAP-9500, NRC letter from J. R. Miller to T. M. Anderson, August 15, 1980," dated January 12, 1981.
Anderson, T. M., Westinghouse, Letter to J. R. Miller, USNRC, " Responses to j
Questions on WCAP-9500, Section 4.2, Resulting from NRC/ Westinghouse Meeting on March 18, 1981," dated April 21, 1981.
l Anderson, T. M., Westinghouse. Letter to J. F. Stolz, USNRC, " Fuel Rod Bowing,"
dated April 19, 1978.
Anderson, T. M., Westinghouse, Letter to D. G. Eisenhut, USNRC, Number NS-TMA-2163, dated November 16, 1979.
i Anderson, T. M., Westinghouse, Letter to J. F. Stolz, USNRC, Number NS-TMA-2410, dated October 22, 1979.
~
Appleby, W.
K., et al., " Fluence and Temperature Dependence of Void Formation in Highly Irradiated Stainless Steels," p.156, Radiation-Induced Voids in Metals, USAEC Proceedings of the 1977 International Conference held at Albany, New York, June 9-11, 1971 (April 1972).
i Bloom E. E., " Nucleation and Growth of Voids in Stainless Steels During Far:-
Neutron Irradiation," p.1, Radiation-Induced Voids in Metals, USAEC Proces.
s 1
of the 1977 International Conference held at Albany, New York, June 9-11,
'.1.
(April 1972).
Denton, H., USNRC, Memorandum to Commissioners, " Potential Deficiencies in ECCS Evaluation Models," dated November 26, 1979.
i Eisenhut, D. G., USHRC, Memorandum to all Operating Light Water Reactors, dated November 9,1979.
i
' Final Safety Analysis Report of Robert Emmett Ginna Nuclear Power Plant Unit 1, Rochester Gas and Electric Corporation, USNRC Docket Number 50-244, 103, dated 1972.
J Foster, J.
P., and R. V. Strain, " Empirical Swelling Equations for Solution-Annealed Type 304 Stainless Steel," Nuclear Technolooy, Vol. 24, p. 93 (October 1974).
Fukishiro, T., et al., "The Influence of Coolant Flow on Fuel Behavior Under Reactivity Initiated Accident Conditions," JAERI Report JAERI-M-9104, October l
1980.
- Hoshi, T., et al., " Fuel Failure Behavior of PCI-Remedy Fuels Under Reactivity Initiated Accident. Conditions," JAERI Report JAERI-M-8836, May 1980.
" Semiannual Program Report on the NSRR Experiments - July to December 1979,"
JAERI Report JAERI-M-9011, September 1980.
4.2 - 31
7-7-
m,y
.._.~._m...
.s.
Kuffer, K., and H. R. Lutz, " Experience of Commercial Power Plant Operation in Switzerland, "Fifth Foratom Conference, Florence, Italy (1973).
Leasburg, R. H., VEPC0; Letter to H. R. Denton, USNRC, " Fuel Assembly Guide Thimble Tube Wear Examination Report," dated March.1,1982.
Meyer, R. O., IJSNRC, Memorandum to D. F. Ross, " Revised Coefficients for Interim
. Rod Bowing Analysis," dated March 2,1978.
Miller, J., USNRC, Letter to E. ' Rahe, Westinghouse, December 1,1981.
- Petrick, N., SNUPPS, Letter to H. Denton, USNRC, dated August 31 and September 9, 1981.
Powers, D., A., and Ri 0. Meyer, " Cladding Swelling and Rupture Models for LOCA Analysi's," USNRC Report NUREG-0630, April 1980.
' Rubenstein, L. S., USNRC, Letter to R. L. Tedesco, " Safety Evaluation Report on WCAP-9500," dated May 15, 1981.
. Rubenstein, L. S., USNRC, Memorandum to R. L. Tedesco, " Review of Westing-house Optimized Fuel Assembly Topical Report (TAR-5254)," dated August 8,1980.
Rubenstein, L. S., USNRC, Memorandum to R. L. Tedesco, " Review of Topical Report WCAP-9401," dated April 23, 1981.
Rubenstein, L. S., USNRC, Memorandum to T. Novak, " Resolution of the Westinghouse Guide Thimble Tube Wear Issue," April 19, 1982.
/
Rubenstein, L. S., USNRC Memorandum to R. L. Tedesco," Safety Evaluation of WCAP-8720 Addendum 1", dated June 30, 1982.
Salvatori, R., Westinghouse, Letter to D. Knuth, USNRC, " Core Coolant and Rod Surface Temperature," dated January 4,1973.
Schenk, H., " Experience from Fuel Perfomance at XWO," International Atomic Energy Agency Report Number SM-178-15, dated October 1973.
Shiozawa, S., et al., " Evaluation on Oxidation of Zircaloy-4 Cladding During Rapid Transient in NSRR Experiments," JAERI Report JAERI-M-8187, March 1979.
Stello, V., USNRC, Memorandum to R. DeYoung, " Evaluation of Westinghouse Report WCAP-8377,- Reviced Clad Flattening Model," dated January 14, 1975.
l Stolz, J.
F., USNRC, Letter to T. M. Anderson, Westinghoust
" Safety Evaluation of WCAP-8720," dated February 9, 1979.
. Thomas, C., USNRC, Letter to E. Rahe, Westinghouse, dated September 29, 1982.
Tokar, M., USNRC, " Report to ACRS Concerning NRR Efforts on Pellet / Cladding Interaction," dated November 14, 1979.
t 4.2 - 32
,.,..-,. --.~---=
._w m,_ _ _ _
.s __..
8 Van Houten, R., USNRC, Memorandum to N. Tokar,. " Demonstrated Survivability of Zircaloy Cladding After Brief Exposure to Temperatures of 1775'X and Above,"
dated February 23, 1981.
Vassallo, D. B., USNRC, Letter to C. Eiche1dinger, Westinghouse dated May 30, 1975.
O 4
/
4 W
4.2 - 33
io..
- - - acmra
-~,
c-,
., y
.).
d.
7,
~
~
7: l W
e
? q,.,. '.6
(.~
s 1 %,
I' S j-s.
3:
h ;.s;
.J V
.q e
m 4.3 ' Nuclear Dosi_qn
. 'j
'l.
r "Q
, The'She' aron Parris;'Unitsql and 2 power plants have a reactor core consisting of: 1d[ fuel assemb1ies of the Westinghouse 17x17 design.
The core has a i
design 14=t' output'of 2775 themal Negawatts and is essentially identical to the Vigil C. Summer reactor and other recent Westinghouse 3 loop reactors.
- WeJhave revieved th2 nuclear design of the Shearon Harris Units 1 and 2 reactors.
s 0 Our review wis) based W infomation contained in the Final Safety Analysis
~
Report (FSAR), amendments thereto, and the referenced topical reports.
Our review was conducted in accordance with the guidelines provided by the Standard Review Plan, Tedtion 4.3.
+
~
4;.3.1'iDesignBases
' Design bases are presented which comply with the applicable General Design Criteria. Acceptable fuel design limits are specified (GDC 10), a negative prompt feedback coefficient is specified (GDC 11) and tendency toward divergent operition (power oscillation) is not pemitted (GDC 12).
Design bases are' presented which require a control and monitoring system (GDC 13) which autor.atically initiates a rapid reactivity insertion to prevent exceedidg.-fuel design limits in nomal operation or anticipated transients (GDC 20). The control system is required to be designed so that a single l
malfunction or single operator error will cause no violation of fuel design I
e limits (GDC 25).
A reactor coolant boration system is provided which is l
l capable of bringing the reactor to cold shutdown conditions (GDC 26) and the control system is required to control reactivity changes during accident
. conditions when combined with the engineered safety features (GDC 27).
- Resetivity accident conditions are required to be limited so that no damage to the reactor coolant system boundary occurs (GDC 28).
~
We. find the design bases presented in the FSAR to be acceptable.
4 m
e -,.
..-----,-w-
,,,,,-%-,.----*------,-+,--....r-w-~-
5 4.3.2 Design Description The FSAR contains the description of the first cycle fuel loading which consists of three different enrichments and has a first cycle length of approximately one year. The enrichment distribution, burnable poison
, distribution, soluble poison concentration and higher isotope (actinide)
~
content as a function of core exposure are presented. Values presented for the delayed aeutron fraction and prompt neutron life-time at beginning and end of cycle are consistent with those nomally used and are accept-able.
Power Distribution
~
The design bases affecting power distribution are:
The peaking factor in the core will not be greater than 2.32 during nomal operation of full power in order to meet the initial con-ditions assumed in the loss of coolant accident analysis.
Under normal conditions (including maximum overpower) the peak fuel power will not produce fuel centerline melting.
The core will' not operate during nomal operation or anticipated operational occurrences, with a power distribution that will cause l
the departure from nucleate boiling ratio to fall below 1.3 (W-3 correlation with modified spacer factor).
The applicant has described the manner in which the core will be operated and I
power distribution monitored so as to assure that these limits are met. The core will be operated in the Constan. Axial Offset Control (CAOC) mode which
-has been'shown to result in peaking factors less than 2.32 for botii constant power and load following operation.
The applicant has elected to use an improved load follow package, developed by Westinghouse, in Shearon Harris l
Units 1 a~nd 2.
1 4.3 - 2 I
~
.m CAOC is described in WCAP-8385 (Proprietary) and WCAP-8403 (non-Proprietary),
" Power Distribution Control and Load Following Procedures." This report contains methodology for operation with and without part length control rods.
The former mode allows better return to power capability than the latter. Use of part length rods has been withdrawn from Westinghouse reactors. The improved load follow strategy provides a return to power capability during operation without part length rods comparable to the level previously obtain-able from operation with part length rods.
- The improved load fol. low strategy involves a redesigned control rod bank and modified overlap that' allows greater reactivity insertion than the former
<!esign bank within the constraints of a widened, asymmetric CAOC band. The control bank has been changed from eight to four rods. The four rods removed from _ the control bank have been redesigned as a shutdown bank, thus maintaining
(There are also an extra four rods assigned to a shutdown bank, compared to other Westinghouse three loop reactors.~)l-The CAOC band has
-been changed from 15 to +3,-12 AI (delta flux difference). The greater inserted reactivity is available for return to power capability upon control rod with-drawal. Another element in the load follow strategy is the use of moderator temperature reductions to augment return to power capability.
The temperature reduction adds reactivity during rapid return to power through the inherently negative moderator temperature coefficient.
The analysis used to calculate the maximum peaking factor which can occur using the improved strategy expands the set in the CAOC topical report to 18 calculational cases.
However, with the redesigned control bank, maneuvers resulting in greater control rod insertion 'or a longer duration become f
operatiorially practical but tend to become slightly more Ifmiting in terms of total peaking factors. Therefore, simulated load follow maneuvers which return AI to the target value (and thereby reduce control rod insertion) have been replaced by load follow strategies wh'ich maintain the deeper rod insertion.
As a result of our evaluation, we agree with Westinghouse's conclusion that substitution of these~ more conservative cases will maintain the limiting nature of the 18 case load following analysis.
4.3 - 3 w
wew r-w.r
.--.,m
--m.-
-,w r
,,,.=,3
The analysis performed by Westinghouse indicated that the peaking factor limit could not be met at BOL of Cycle 1 due to the wide I band.
This resulted in limiting the width of the band for the first 20% of the cycle typically, and until 3,000 MWD /MTU burnup for Shearon Harris Units 1 and 2 to the value of
)
- 5%d11. This 5% a6I is the value previously justified by the CAOC analysis.
These features will De incorporated in the Shearon Harris Technical Specific-ations.
l We conclude, for the reasons stated above, that the improved load follow package will continue to prevent the peaking factor limit from being exceeded in normal operation of the power plant, and therefore is acceptable.
Two types of instrunentation systems are provided to monitor core power distrib'ution. Excore detectors are used to monitor core power, axial effset and. azimuthal tilt, and movable incore detectors permit detailed power distributions to be measured.
These systems are used in operating reactors supplied by Westinghouse and we find their use acceptable for Shearon Harris.
Reactivity Coefficients
/
The reactivity coefficients are expressions of the effect on core reactivity
~
of changes in such core conditions as power, fuel and moderator temperature, moderator density, and boron concentration. These coefficients vary with fuel' burnup and power level. The applicant has presented values of the coefficients in the FSAR and has evaluated the uncertainties of these values. We have reviewed the calculated values of reactivity coefficients and have concluded that.ttley adequately represent the full range of expected values. We have reviewed 'the reactivity coefficients used in the transient and accident analyses and concl'ude that they conservatively bound the expected values, including uncertainties. Further, moderator and power Doppler coefficients along with boron worth are measured as part of the startup physics testing to assure that actual values are within those used in these analyses.
G 4.3 - 4 a
y to
' at 4
Control i
To allow for changes in reactivity due to reactor heatup, load following, and fuel burnup with consequent fission product buf1 dup, a significant amount of excess reactivity is built into the core. The excess reactivity is controlled by a combination of full length control rods and soluble boron.
Soluble boron is used to control changes due to:
Moderator density and temperature changes from ambient to operating temperatures.
Equilibrium xenon and samarium buildup.
~.
Fuel depletion and fission product buildup - that portion not controled by lumped burnacle poison.
. Transient xenon resulting from load following.
Control rods are used to control reactivity change due to:
/
Moderator reactivity changes from hot zero to full power.
Fuel temperature changes (Doppler reactivity changes).
Burnable poison rods placed in some fuel assemblies are used for radial flux shaping and to control part of the reactivity change due to fuel depletion and fission product buildup.
The applicant has provided data to show that adequate control exists to satisfy the above requirements with enough additional control rod worth to provide a hot shutdown effective multiplication factor less than the design basis value of 0.9823 during initial and equilibritsa fuel cycles with the most reactive control rod stuck out of the core.
In addition, the chemical and volume control system will be capable of shutting down the reactor by adding soluble boron and maintaining it shut down in the cold, xenon free condition at any time in co' e life.
These two systems satisfy the requirements of r
4.3 - 5
= ___
e o
Comparisons have been made between calculated and measured control rod bank worth in operating reactors and in critical experiments. These comparisons lead to the conclusion that bank worths may be calculated to within approxi-
.mately ten percent.
In addition bank worth mcasurements are performed as part of the startup test program to assure that conservative values have been used in safety analyses.
l Based on these comparisons, we conclude that the applicant has made suitably conservative asse'ssments of reactivity control requirements and that adequate control rod worths have been provided to assure shutdown capability.
' Control Rod Patterns and peactivity Worths The control rods are divided into two categories - shutdown rods and regulating rods.
The shutdown rods are always completely out of tha core when the reactor is at operating c2nditions. Core power changes are made with regulating rods which are nearly out of the core when it is operating at full power. Regulating rod insertion will be controlled by power-dependent insertion limits required in the Technical Specifications to assure that:
There is sufficient negative reactivity available to pennit rapid shutdown of the reactor with adequate margin.
The worth of a control rod that might be ejected is not greater than that which has been shown to have acceptable consequences in the safety analyses.
We have reviewed the calculated rod worths and the uncertainties in these worths, and conclude that rapid shutdown capabili*,y exists at all times in core life assuming the most reactive control rod assembly is stuckout of the core.
4.3 - 6
'l
N Stability The stability of the Shearon Harris Units 1 and 2 cores to xenon induced spatial oscillations is discussed in the FSAR.
The overall negative reactivity (power) coefficient provides assurance that the reactor will be stable against total power oscillation. The applicant also concluded that sustained radial or azimuthal. xenon oscillations are not possible. This conclusion is based on measurements on an operating reactor of the same dimensions which showed stability against these oscillations. We concur with this conclusion.
This core is predicted to be unstable with respect to axial xenon oscillations
' lafter about 12000 Megawatt days per ton of exposure. The applicant has acceptably shown that axial oscillations may be controlled by the regulating rods to prevent reaching any fuel damage limits.
Criticality of Fuel Assemblies Criticality of fuel assemblies outside the reactor is precluded by adequate design of fuel transfer and storage facilities. The applicant presents infonnation on calculational techniques and ass.umptions used to assure that criticality is avoided. We have reviewed this 'information and the criteria which will be employed and find them to be acceptable.
Vessel Irradiation Values are presented for the neutron flux in various energy ranges at mid-height of the pressure vessel inner boundary.
Core flux shapes calculated by standard design methods are input to a transport theory calculation (Sn) which results in a neutron flux of 2.9 x 1010 neutrons per square centimeter per 6
second having energy greater than 10 electron-volts at the inner vessel 19 bounda ry. This results in a fluence of-2.9 x 10 neutrons per square centi-meter for a forty year vessel life with an 80 percent use factor.
The methods used for these calculations are state of the art, and we conclude that accept-able analytical procedures have been used to calculate the vessel fluence.
-The Materials Engineering Branch will review the requirements for surveillance programs and the pressure-temperature limits for operation.
l 4.3 - 7 l.
l
~
4.3.3 Analytical Httheds The applicant has described the ccmputer programs and calculational techniques
)
used to obtain the nuclear characteristics of the reactor design. Tne calcul-ations. consist of three distinct types, which are perfomed in sequence:
determination of effective fuel temperatures, generation of macroscopic few-group parameters, and space-depende'nt few-group diffusion calculations. The-programs used (e.g., LASER, TWINKLE, LEOPARD, TURTLE and PANDA) have been applied as part of the applications for most earlier Westinghouse designed nuclear plant facilities and the predicted results have been compared with measured characteristics obtained during many startup tests for first cycle and reload cores. These results have validated the ability of these methods
' to predict experimental results. We, therefore, conclude 'that these me'th'ods are acceptable for use in calculating the nuclear characte~istics of the r
Shearon Harris Units 1 and 2.
4.3.4 Summary of Evaluation Findings The Shearon Harris nuclear design was reviewed according. to Section 4.3 of the
~
Standard Review Plan (NUREG-0800). All areas of review and review procedures from that.section have been followed either for this reactor or for previour similar reactors (e.g., Summer) or for Topical Report reviews.
The applicant has described the computer programs and calculational techniques used to predict the nuclear characteristics of the reactor design and has provided examples to demonstrate the ability of the analyses to predict reactivity and physics characteristics of the Shearon Herris Units 1 and 2 plants..
To allow for changes of reactivity due to reactor heatup, changes in operating conditions, fuel burnup, and fission product buildup, a significant amount of excess reactivity is designed into the core. The applicant has provided sub-stantial infomation relating to core reactivity balances for the first cycle and has showri that means have been incorporated into the design to control e
9 4.3 - 8 r
-..---.b,-.4.-1
.r
-_,w_.--.-
,.--.-.-_,,-.+--.-,.--.,.-.----me-.ww w,,.,...%.w--,-c-m,
-,, - -. - -,.r,w-,
v.,-~.e..
o
=.
excess reactivity at all times. The applicant has shown that sufficient con-trol rod worth is available to ma'ke the reactor subcritical with an effective multiplication factor no greater than 0.9823 in the hot condition at any time during the cycle with the most reactive control rod stuck in the fully with-drawn position.
On the basis of our review, we conclude that the applicant's assessment of reactivity control requirements over the first core cycle is suitably conservative, and that adequate negative worth has been provided by the control system to assure shutdown capability. Reactivity control require-ments will be reviewed for additional cycles as this infomation becomes availabe. We also c'onclude that nuclear design bases, features, and limits have been established in confonnance with the requirenents of General Design -
Criteria 10, 11, 12, 13, 20, 25, 26, 27, and 28.
s This conclusion is based on the fol_ lowing:
'I.
The applicant has met the requirements of GDC 11 with respect to prompt inherent nuclear feedback characteristics in the power operating range by:
Calcul'ating a negative Doppler coefficient of reactivity, and a.
b.
Using calculational methods that have been found acceptable.
The staff has reviewed the Doppler reactivity coefficients in this case and found them to be suitably conservative.
2.
The applicant has met the requirements of GDC 12 with respect to power oscillations which could result in conditions exceeding specified acceptable fuel design limits by:
a.
Showing that such power oscillations are not possible and/or can be easily detected and thereby remedied, and b.
Using calculational methods that have been found acceptable.
4.3 - 9
.,--.w--
.y.
-,,. - <,---.--,,,---.--.----v-,y,-
,,..,-..,-..,,,*e,-,,,.
-..,v, 4,,.--,-w---,,-
,-w,-.=
3.
The applicent has met the requirenents of GDC 13 with respect to provisions of instrumentation and controls to monitor variables and systens that can_ affect the fission process by:
a.
Providing instrumentation and systems to monitor the core power distribution, control rod positions and patterns, and other process variables such as temperature and pressure, and b.
Providing suitable alarms and/or control room indications for these monitored variables.
4.
The applicant has met the requiremen'ts of GDC 26 wit,h respect to provision of two independent reactivity control systens of
- different designs by:
a.
Having a system that can reliably control anticipated operational occurrences,
^
b.
Having a system that can hold the core subcritical under cold conditions, and
.l c.-
Having a system that can control planned, normal power changes.
5.
The applicant has met the requirements of-GDC 27 with respect to reactivity control systems that have a conbined capability in conjunction with poison addition by the emergency core cooling system of reliably controlling reactivity changes under postulated accident conditions by:
a.
Providing a movable control rod system and a liquid poison system, and b.
Performing calculations to demonstrate that the core has sufficient shutdown margin with the highest-worth stuck rod.
9 4.3 - 10
e
^
6.
The applicant has met the requirements of GDC 28 with respect to 4
postulated reactivity accidents by (reviewed under Section 15.4.8):
a.
Meeting the regulatory position in Regulatory Guide 1.77, b.
Meeting the criteria on the capability to cool the core, and c.
Using calculational methods that have been found acceptable for reactivity insertion accidents.
7.
The appl.icant has met the requirements of GDC 10, 20, and 25 with respect to specified acceptable fuel design limits by providing analyses demonstrating:
That normal operation, including,the effects of anticipated a.
operational occurrences, have met fuel design criteria, b.
That the automatic initiation of the reactivity control system
~
assures that fuel design crit:"1 are not exceeded as a result of anticipated operational occe
.:es and assures the automatic f
operation of systems and compcr.e us important to safety under accider.t conditions, and c.
That no single malfunction of the reactivity centrol system causes violation of the fuel design limits.
e e
4 o
4.3 - 11
.m
,,..-,,___r-,,..-__u-,,,__+._.,.y,.
6 REFERENCES D. F. Ross (NRC), Memorandum to D. B. Vassallo) " Review of Topical Report WCAP-8846," August 26, 1977.
WCAP-8385, T. Merita, et al., " Power Distribution Control and Load Follow Procedure, September 1974.
WCAP-8846, " Hybrid B C Absorber Control Rod Evaluation Report,"
4 September 1976.
s a
'"E-8 D
t 4.3 - 12
- l-*
y' Y
6
'm 4.4 Thermal-Hydraulic Desian 4.4.1 Thermal-Hydraulic Design Bases The principal thermal-hydraulic design basis for the Shearon Harris Units 1 and 2 cores is the avoidance of thermal-hydraulic induced fuel damage during normal steady-state operation and anticipated operational transients.
In order to satisfy the design basis, design analysis is performed and design limits are established based on the criteria in the subsections which follow.
4.4.1.1 Departur From Nucleate Boiling The margin to departure from nucleate boiling at any point in the core is expressed in terms of the departure fran nuciceta boiling ratio (DNBR). The 0iNBR is defined as the ratio of the heat flux required to produce departure from nucleate boiling at the calculated local conditions to the actual local
- heat flux.
a The thermal-hydraulic design basis in the SHNPP FSAR Section 4.4.1.1 for the DNBR is as follows:
"There will be at least a 95 percent probability that departure from nuclear boiling (DNB) will not occur on the limiting fuel rods during noraml operation, operational transients, or during transient conditions arising from faults of moderate frequency (ANS Condition I andII events), at a 95 percent confidence level.
Historically this has been conservatively met by adhering to the following thennal design basis: the~re must' be at least a 95 percent probability that the' minimum departure from nucleate boiling ratio (DNBR) of the limiting power rod during ANS Condition I and II events is greater than or equal to the DNBR limit of the DNB correlation being used. The DNBR limit for the correlation is established based on the variance of the correlation such that there is a l
95 percent probability with 95 percent confidence that DNB will not occur when the calculated DNBR is at the DNBR limit.
For SHNPP, a minimum DNBR of 1.30 was used."
f k
, ~... -.. _.. -.
4.4.1.2 Fuel Temoerature The fuel temperature basis is given in Section~4.4.1.3 of the FSAR as follows:
During. modes of operation associated with ANS Condition I and ANS Condition II events, there is at least a 95 percent probability at the 95 percent confidence 1evel that the peak W/ft fuel rods will' not exceed the UO melting temperature.
2 The melting temperature of unirradiated UO is taken as 5080*F, (Ref. 4.4.1-1),
2 and decreasing 58'F per 10,000 MWD /tiTU.
By precluding UO melting, the fuel 2
geometry is preserved and possible adverse effects of molten UO on the cladding 2
are eliminated. To preclude center melting and as a basis for overpower protection system setpoints, a calculated centerline fuel temperature of
' 4700*F has been selected as the overpower limit.. This provide; adfficient margin.for uncertainties in the thermal evaluations as described in Section 4.4.2.9.1."
This design basis is evaluated in Section 4.2.3.2(4) of this Safety Evaluation Report 4.4.1.3 Core Flow Design Basis A minimum of 93.9 percent of the themal flow rate passes through the fuel rod region of the core and is effective for fuel rod cooling. Coolant flow through the thimble tubes as well as the leakage from the core barrel-baffle region into the core are not considered effective for heat renoval<.
Core' cooling evaluations are based on the thennal flow rate (minimum flow) entering.the reactor vessel.
A maximum of 6.1 percent of this value is allowed as bypass flow. This includes rod cluster control guide thimble cooling flow, head cooling flow, baffle leakage, and leakage to the vessel outlet nozzle.
4.4.1.2 Hydrodyr.amic Stability The hydrod'ynamic stability design basis in the SHNPP FSAR Section 4.4.1.4 is as fo'llows:
4.4 - 2
.s
" Modes of operation assoicated with ANS Condition I and II events shall not lead to hydrodynamic instability."
4.4.2 Themal-Hydraulic Design Methodology 4.4.2.1 Themal-Hydraulic Comparison The thennal-hydraulic design of SHNPP is similar to that of V. C. Summer Units 1 and 2, which have been approved for licensing, and to North Anna Units 1 and 2, whichrare operating units.
Values of critical design para-meters for the three reactor designs are compared in Table 1.
There is no change in design criteria for SHNPP, the reactor is design'ed to a minimum DNBR of 1.30 using W-3, as well as no fuel centerline melting during nomal oper-ation, operational transients and faults of moderate frequency.
T'he themal-hydraulic parameters for SHNPP are very similar to V.l.' Summer which supports the acceptability of the SHNPP themal-hydraulic design. The
~
staff has also reviewed the differences in flow and inlet temperature bet' ween SHNPP and the operating North Anna units and have found these differences in flow and inlet temperatures are consistent with the difference in minimum DNBR.
4.4.2.2 Departure from Nucleate Boiling DNBRs are calculated by using the W-3 critical heat flux correlation. The THINC-IV computer code (Ref.1) is used to,detemine the flow distribution in the core,and the local conditions in the hot channel for use in the DNB correlation.
l Westinghouse has perfomed a test program,(Ref. 2) on the 17x17 fuel assembly.
A correction factor was developed to adopt the W-3 correlation to 17x17 assemblies with top split mixing vane grids referred to as "R" grids. The SHNP'P design includes a conservative multiplier ("R" grid DNB correlation) of
.865 for all DNB analyses.
1 4.4 - 3
The test results indicate that a reactor core using this geometry may operate with a minimum DNBR of 1.28 and satisfy the design criterion. However, a minimum DNBR of 1.30 is used for SHNPP.-
The design value of 6.1% bypass flow is based on calculations performed using drawing tolerances in the worst direction and accounting for uncertainties in pressure drops. These calculations show the core bypass flow to be no greater than the design value.
These calculations use experimental deta from a series of 1/7 scale hydraulic reactor mod 1 tests where core flow distributions and pressure drops were measured.
~
The staff has reviewed the 6.1% bypass flow design basis an'd has found it to be consistent and conservative relative to previously approved designs and to have been properly included in determining the minimum DNBR and is therefore acceptable to the staff.
The staff finds the use of a 1.30 minimum DNBR as described in Section 4.4.2 of the SHNPP to be acceptable.
.l 4.4.3 Design Abnormalities 4.4.3.1 Fuel Rod Bowing A significant parameter that influences the thermal-hydraulic design is rod-to-rod bowing within fuel assemblies.
The staff has developed interim criteria for evaluating the effects of rod bow on DNB for application to the Westinghouse standard 17x17 fuel assembly.
The resultant reduction in DNBR due to rod bow is given by:
4 9
4.4 - 4
-1
-Q l
l Burnup DNBR Reduction (Mwo/MTU)
(s) 0 0-3500 0
5000 0
-10000 2.15 15000 4.64 20000 6.74 25000 8.59 30000 10.27-35000 13.07 40000 19.09
' The appropriate provisions should be incorporated into the' Technical Specifications.. The applicant should also insert into the basis of the Technical Specifications any generic or plant specific margin that may be
'u. sed to offset the reduction in 'DNBR due to rod bowing, and reference the
. source and staff approval of each generic margin. With these requirements satisified by the applicant, the staff concludes that they have adequately accommodated the. reductions listed above.
/
4.4.3.2 Crud Deposition Crud deposition in the core and an associated change in core pressure drop have been observed in some PWRs.
In response to a staff question concerning crud deposition the licensee responded:
"There has been no case reported to Westinghouse of significant flow reduction in a relatively short period of time due to buildup of crud on the fuel rods of any Westinghouse plant. Additionally, there has been no report to Westing-house of a significant flow reduction in a relatively short period of time at any Westinghouse plant."
The staff does not agree with implication that crud deposition can not happen at a Westinghouse plant.- However, the staff finds tne flow measurement 4.4 - 5
v technique as described for SHNPP is sufficient to detect a crud buildup if this should occur. Therefore, SHNPP technical specifications should require that the RCS flow is monitored every 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />..
4.4.4.6 Hydrodynamic Stability In steady-state, two phase, heated flow in parallel channels, the potential for hydrodynamic instability exists. The applicant prcvided the following information it: the FSAR to support the contention that the SHNPP core is thermal hydraulically stab'le.
" Boiling flows may be susceptible to themohydrodynamic instabilities. These instabilities are undesirable in reactors since they may c'ause a change' in
~
thennohydraulic conditions that may lead to a reduction in the DNB heat flux relative to that observed during a steady flow condition or to undesired
~
fo'rced vibrations of core components. Therefore, a thermohydraulic.d,esign criterion was developed which states that modes of operation under ANS Condition I and II events shall not lead to thermohydrodynamic instabilities.
Two specific types of flow instabilities are considered.for Westinghouse PWR operation. These are the Ledinegg, or flow excursion type of static instability,
- /
and the density wave type of dynamic instability.
A'Ledinegg instability involves a sudden change in flow rate from one steady state to another. This instability occurs when.the slope of the reactor coolant system pressure drop-flow rate curve (6aP/6G internal) becomes algebraically smaller than the loop supply (pump head) pressure drop-flow rato' curve (6aP/6G external). The criterion for stability is thus 6aP/6G internal
>6aP/6G. external. The Westinghouse reactor coolant pump head curve has a negative slope (6aP/6G cxternal<0) whereas the reactor coolant system pressure drop flow curve has a positive slope (6aP/6G internal >0) over the ANS Condition I and ANS Condition II operational ranges. Thus, the Ledinegg instability will not occur.
4.4 - 6 1b'
.s A simple method has been developed by Ishii (Reference 3) for parallel closed channel systems to evaluate whether a givcn condition is stable with respect to the density wave type of dynamic instability.- This method has been used to assess the stability of typical Westinghouse reactor design including Virgil C.
Summer, under ANS Condition I anc II operation. The results indicate that a large margin to density wave instability exists, e.g., increases on the order of 200 percent of rated reactor power would be required for the predicted inception of th:s type of instability.
The application of the method of Ishii to Westinghouse reactor designs is conservative due to the parallel open channel feature of Westinghouse PWR cores. 'For such cores, there is little resistance to lateral flow leaving
' the flow channels of high power density to lower power density c.hannels.
This coupling with cooler channels has led to the opinion that an open channel configuration is more stable than the above closed channel analysis
'under the same boundary conditions.
Flow stability tests (Ref. 4) have been
. conducted where the closed channel systems were shown to be less stable than when the same channels were cross connected at several locations. The cross
~
~
connections were such that the resistance to channel to channel cross flow and enthalpy perturbations would be greater than that which would exist in a PWR core which has a relatively low resistance to cross flow.
Flow instabilties which have been observed have occurred almost exclusively in closed channel systems operating at low pressure relative to the Westinghouse PWR operating pressures.
Kao, liorgan, and Parker (Ref. 5) analyzed parallel closed channel stablity experiments simulating a reactor core flow. These experiments were conducted at pressures up to 2200 psia.
The results showed that for. flow and power levels typical of power reactor conditions, no flow oscillations could be induced above 1200 psia.
Additional evidence that flow instabilities do not adversely affect thermal margin is provided by the data from the rod bundle DNB tests. Many Westing-housa rod bundles have been tesled over wide ranges of operating conditions with no eviJence or prenature DNB or of incensistent data which might be indic3tiveofflowinstabilitiesintherodbundle.
4.4 - 7
..--ae-
-,...e,-
In summary, it is concluded that themohydrodynamic instabilities will not occur under ANS Condition I and II modes of operation for Westinghouse PWR reactor designs.
A larg'e power margin, greater than doubling rated power, exists to predicted inception of such instabilities. Analysis :tas been perfomed which shows that minor plant to plant differences in Westinghouse reactor designs such as fuel assembly arrays, cors power to flow ratios, fue' assembly length, etc. will not result in g-oss deterioration of the above power margins."
The staff is presently conducting a generic study of the hydrodynamic stability characteristics of pressurized water reactors.
Limitations to the themal-hydraulic design resulting from the staff study kill be compensated by appropr-iate operating restrictions if necessary; however, no operating restrictions
.are anticipated.
In the interim, the staff concludes that past operating experience, flow stability experiments, and the inherent themal-hydraulic characteristics of Westinghouse pressurized water reactors provide a basis for accepting the SHNPP stability evaluation for issuance of an operating license.
4.4.6.4 Loose Parts Monitoring Systems In response to a staff question asking for a description of the Loose Parts Monitoring System (LPMS), the licensee responded that the question was answered in FSAR Anendment 2 in Section 4.4.6.4.
The description of the loose parts monitoring system in the FSAR is not sufficient. The staff requires the applicant to evaluate the system for confomailce to Regulatory Guide 1.133; and commit to supply a report describing operation of the system hardware and implementation of the loose parts detection program. A samp'ie table of contents for this report is given in Figure 1.0.-
N-1 Pump Operation In response to staff question 492.3 CP&L stated that it does not intend to pursue N-1 loop operation as a licensing basis for SHNPP at this time.
4.4 - 8 l
~
.s Hence, operation at. power with less than four pumps operating will not be permitted. The staff will require that the technical specifications include appropriate provisions to ensure that these types of operation are prohibited.
THI-Action Plan NUREG-0737 Item II.F.2 The licensee has not yet supplied the iten-by-item responses to the documentation required by NUREG-0737. This documentation must be received, reviewed and approved prior 'to the licensing of SHNPP.
Conclusion and Summa y
~
~
'The thermal-hydraulic design of the core for SHNPP has been reviewed The scope of our review included the design basis and the steady-state analysis of the core thermal-hydraulic perfonnance. The acceptance criteria used as the basis of our evaluation are set forth in the Standard Review Plan (SRP)?'
NUREG-0800, in Section 4.4, " Thermal and Hydraulic Design." The review con-centrated on the difference between the proposed design and those designs that
~
have been previously reviewed and found acceptable by the staff.
Based on our review, the staff concludes that the thermal-hydraulic design of the initial core of SHNPP is acceptable, provided satisfactory resolution is obtained for the following items identified in this draft SER:
1.
The applicant must evaluate the loose parts monitoring system for con-formance to Regulatory Guide 1.133; a,nd commit to supply a report de. scribing operation of the system hardware and implementation of the loose parts detection program. A sample table of contents for this report is given in Figure 1.
2.
The applicant iaust submit item-by-item responses to the documentation required by NUREG-0737.
9 4.4 - 9
\\
t j
TABLE 1.0 THERMAL AND HYDRAULIC COMPARISON TABLE North Anna Design Pararr.eters Shearon Harris V. C. Summer Units 1 & 2 Reactor core heat output (Mwt) 2775 2775 2775 System pressure, minimum steady state (psia) 2220 2220 2220
' Miminum DNBR at nominal design conditions Typical flow channel 1.98 1.98 2.15 Thimble (cold wall) flow channel 1.68 1.68 1.77 Minimum DNBR for design transients 1.30 1.30 1.30 DN8 correlation "R" (W-3 with modified Spacer Factors)
Coolant Flow Total thennal flow rate 6
(10 1 b,hr. )
109.1 109.6 105.2 Coolant Temperature Nominal inlet (F) 556.0 556.0 546.8 Heat Transfer Active heat transfer, surface area (ft.2) 48.600 48,600 48,600 4.4 - 10
t TABLE 1.0 Con't THERMAL AND HYDRAULIC CONFARISON TABLE North Anna Design Parameters Shearon Harris V. C Summer Units 1 & 2 Heat Transfer-
~
Average heat flux (Btu /hr.-ft.2) 189,800 189,800 109,800 9
Average linear p;wer (kW/ft) 5.44 5.44 5.45 Peak linear power for normal operation (kt;/ft) 12.6 12.6 13.6 4.4 - 11
+
SECTION
4.4 REFERENCES
1.
,Shefcheck, J., " Application of the THINC Program to PUR Design,"
WCAP-7359-L (Proprieta'ry), August 1959 and WCAP-7838, January 1972.
2.
Motley, F. E., Wenzel, A. H. and Cadek, F. F., " Critical Heat Flux Testing of 17x17 Fuel Assembly Geometry with 22-Inch Grid Spacing,"
WCAP-8536 (Proprietary),' May 1975 and WCAP-8537, May 1975.
3.
Saha, P.,
Ishii, M., and Zube, N., "An Experimental Investigation of the Thermally Induced Flow Oscillations in. Two-Phase Systems," '
J.
Psat Transfer, November 1976.
4; S. Kakac, T. N. Veziroglu, K. Akye:lu, O. Berkol, " Sustained and.
Transient Boiling Flow Instabilities in a Cross-Connected Four-Parrallel-Channel Upflow System," Proc. of 5th International Heat Tranrfer Conference, Tokyo, September 3-7, 1974.,
5.
H. E. m, C. D. Morgan, and W. B. Parker, " Prediction of Flow Osciliation in Reactor Core Channel," Trans. ANS, Vol. 16, 1973, pp. 212-213.
9 4.4 - 12
-E
W"
=
m _...:,
2 7~ ~
(
l 1-FIGURE 1
_ SAMPLE TABLE OF Conae m 100SE PART'utitu ON PROGRAM. DESCRIPTION I.
Systen Descriptien A.
Scale piping diagram showing LPM sensor locations.
B.
Sensor specifications (t;rpe, manuf!cturer.'sensitMty, temperature rating, etc. >.
C.
SensormountingdetailsLdrawingandprocedurs).
D.
and specifications). Preamp 11fier or line driver-(type, manufacturer E.
Functional description of LPMS.
1.
Theory of operation, detection lo Data recorder specifications (No.gic, alam display.
2.
recording, frequency ran of channels, length of -
recording is initiated).ge, and conditions under which II. ' Operational Procedures
.A.
~ System Calibration Procedures a-M' 1.
Initial and subsequent calibrations.
2.
Functional check. as defined in R.G.1.133 3.
Channel check, as defined in R.E.1.133 B.
Plant Operator Instructions for Use of LPMS 1.
Procedures for routine operation 2.
procedures to be used following indicaticin of a
_ loose part Method to confim existence of loose part a.
b.
Method to diagnose a loose part (size and location)
III.' Licensee Experience with LPMS A.
Loose parts detected by LPMSFalse alarms (frequency of occurre B.
C.
Loose parts not detected by LPMS D.
System availability; causes for downtima IV.
Evaluation for confomance to R.E.1.133 R.
Loose Part Detection Program 1.
Description of deviations 2.
Description of program modifications 3.
Justification for remaining deviations B.
Loose Part Detection System 1.
Description of deviations 2.
Description of'needed modifications to the equipment or installation 3.
Cost / benefit evaluation of considered modifications (cost in dollars and occupational exposure) 4.
Plans for upgrade or backfit.
ev~-
e
,,e
,,---,,m
-e--*-,-.,-.--c-
,w---,-w-w--
..-w-
..~.-,m.,.y.-.
-,.....---,c.
.w..=+=.=
. =-- - - - -=ev.--ww.,
15.4.1 Uncontrolled Rod Cluster Control Assembly (Rod) Bank Withdrawal From Zero power Conditions Discussion The consequences of an uncontrolled rod cluster gontrol assembly bank withdrawal at zero power have been analyzed. Such a transient can be caused by a failure of the reactor control or rod control systems. The analysis assumed a conservatively small (in absolute magnitude) negative Doppler coefficiert and a positive moderator coefficient. Further, hot zero power initial conditions with the reactor just critical are chosen
, because they are known to maximize th'e calculated consequences. The reactivity insertion rate' is assumed to be equivalent to the simultaneous withdrawal of the two highest worth banks at maximum speed (45 inches per
.mir)utes).
Reactor trip is assumed to occur on the low setting of the power range neutron flux channel at 35 percent of full power (a ten percent uncertainty has been added to the setpoint value). The maximu:n heat flux is inuch less than the full power value and average fuel temperature increases to a value lower than the nomina ~1 full power value. Tne minimum DNBR at all times remains above the limiting value of 1.30.
Evaluation Findings, We have reviewed this event according to the Standard Review Plan (NUREG-0800)
L Section 15.4.1.
The possibilities for single failures of the reactor control system which could result in uncontrolled withdrawal of control rods under low power start-up conditions have been reviewed. The scope of the review has included investi-gations of initial conditions and control rod reactivity worths, the course y
w, - - +-.
.-,c-
--nr,.g a-
,-m.g,.
..,..e_
-,.,.ge--
,,.,-.-,.,,...m-,.,n,
,,m.-
.---,,-,,.cee-,---
_we,-,,,,
~
of the resulting transients or steady-state conditions, and the instrument response to the transient or power maldistribution. The methods used to detemine the peak fuel rod response, and the input into the analysis, such as power' distributions ani! reactivity feedback effects due to moderatcr and fuel temperature changes, have been examined.
s We conclude that the requirements of General Design Criteria 10, 20, and 25
- have been met. This conclusion is based on the following:
The applicant..has met the requirement of GDC 10 that 'the specified acceptable fuel. design limits are not exceeded, GDC 20 that the reactivity control systems
,are astomacically initiated so that specified acceptable fuel design limits
^
' are not exceeded [and GDC 25 that single malfunctions in the reactivity control system will not cause;the specified acceptable fuel design limits to be exceeded.
'.These requirements have been met by comparing the resulting extreme operating
- conditions and response for the ' fuel (i.e., fuel duty) with the acceptance..
. criteria. for fuel damage (e.g., critical heat flux, fuel temperatures, and clad strain limits should not be exceeded), to assure that fuel red failure will be precluded for this event. The basis for acceptance in.the staff
~
- revic41 is. that the applicant's analyses of the maximum transients for single C error cer. trol r' od withdrawal from a-suberitical or low-power condition have y
. been confimed, that the analytical methods and' input data are reasonably conservative and that specified acceptable fuel design limits will not be exceeded.-
I5.4.h' Uncontrolled Rod Cluster Control Assembly (Rod) Bank Withdrawal at Power L'
P-Discussion l
p LThe consequences of uncontrolled withdrawal of a rod bank in the power operating range have been analyzed. The effect of such an event is an increase in coolant temperature (due to the core-turbine power nismatch) p which must be terminated prior to exceeding fuel design limits.
15.4 - 2 i
.-,.y_
,_,_.r._...-
..,-._..-_.,,,..,_w.
w,,.
c
...m.m,.
_.mw.,
.,-.m....,
. =...
The analysis is performed as a function of reactivity insertion rates, reactivity feedback coefficients, and core power level.
Protection is
. provided by the high neutron flux trip..the overtenperature T and over-power T trips, and pressurizer pressure and pressurizer water level trips. In no case does the departure fran nucleate boiling ratio fall below 1.30.
Adequate fuel cooling is therefnre maintained.
The maximum heat flux reached including uncertainties does not exceed 118 percent of full power, thus pre-cluding fuel centerline melting.
i Evaluation Findings We have reviewed this event according to Section 15.4.2 of, the Standard. Review Plan (NUREG-0800).
.The possibilities for single failures of the reactor control system which could result in uncontrolled withdrawal of control rods beyond normal limits under. power operation conditions have been reviewed. The scope of the review has included investigations of possible initial conditions and the range of reactivity insertions, the course of the resulting trans'ients and the instrumentation response to the transient. The methods used to determine the
/
peak fuel rod response, and the input into the analysis,'such as power distri-butions, rod reactivities, and reactivity feedback effects of moderator and fuel tr9perature changes, have been examined.
We conclude that the requirements of General Design Criteria 10, 20, and 25 have been met. This conclusion is based on the following:
The applicant has met the requirements of GDC 10 that the specified acceptable fuel design limits are not exceeded, GDC 20 that the reactivity control systems are automatically initiated so that specified acceptable fuel design limits are not exceeded, and GDC 25 that single malfunctions in the reactivity control system will not cause the specified acceptable fuel design limits to be exceeded.
These requirements have been met by conparing the resulting extreme operating conditions and response for the fuel (i.e., fuel duty) with the ac:eptance 15.4 - 3
L...
e e
/x-criteria,for fuel damage (e.'g., critical heat flux, fuel temperatures and clad
' strain limits should not be exceeded), to assure that fuel rod failure will be precluded for this event. The basis for acceptance in the staff review is that the applicant's analysis of maximum transients for single error control rod malfunctions have been confimed, the analytical methods and input data are reasonably conservative and that specified, acceptable fuel design limits will not be exceeded.
15.4.3 Rod Cluster Control Assembly Halfunctions Diseussion
' Rod cluster control assembly misalignment incidents including a dropped full length assembly, a dropped full length bank, a misaligned full length assembly
.and the withdrawal of a single assembly while operating at power have been analyzed by the applicant. Misa'11gned rods are detectable by: (1) asymmetric
. power distributiens sensed by excore nuclear instrumentation or core exit thermocouples,- (2) rod deviation alarm, and (3) rod position indicators.. A deviation of a rod from its bank by about 15. inches or twice the resolution of the rod position indicator will not cause power distribution to exceed design I/
limits.
Additional surveillance will be required to assure rod alignment if one or more rod position channels are out of service.
In the event of a dropped assembly or group of assemblies the reactor will typically scram on a neutron flux negative rate trip, and analysis. indicates that themal limits will not be exceeded for the event.
If the rod locations are such that the reactor does not scram, however, the automatic controller may return the reactor to full power and with a single failure the control could result in a power overshoot.
It is anticipated that a detailed analysis will show that if this occurs themal limits will not be exceeded.
- However, that analysis has not been approved as yet and it is thus assumed that departure;from nucleate boiling could occur. The staff has accepted an interim position for operating reactors which consists of a restriction on s
15.4 - 4
~w
,v.
--w,--,-,-m, n-,-e
.a e -
,,n-,,--,
n,,---,--,
-ew, s-
,,m-
-v--,
-mm-,-,en.~,,,
,e,---
,-1,
f I
operations abova ninety percent power such that either the reactor is in manual control or rods are required to be cut greater than 215 steps. This restriction will be applied to Shearon Harris Units 1 and 2.
With this restriction thermal limits will not be exceeded.
Approval of the analysis will r'esult in removing the restriction.
I For cases where a group is inserted to its insertion limit with a single rod in the group stuck in the fully withdrawn position analysis indicates that departure from nucleate boiling will not occur. We have reviewed the calculated estimates of the expected reactivity and power distribution changes that accompany postulated misalignments of representative assemblies.
We have concluded that the values used in this analysis conservatively bound the expected values including calculational uncertainties.
The inadvertent withdrawal of a single assembly requires multiple failures in the control system, multiple operator errors or deliberate operator actions combined with a single failure of the control system. As a result the single assembly withdrawal is classified as an infrequent occurrence.
The resulting transient is similar to that due to a bank' withdrawal but the increased peaking ft: tor may cause departure from nucleate boiling to occur in the region surrounding the withdrawal assembly.
Less than five percent of the rods in the core experience departure from nucleate boiling ~for such a transient.
Evaluation Findinos We have reviewed this event according to Sectico 15.4.3 of the Standard Review Plan (NUREG-0800).
The possibilities for single failures of the reactor control system which could result-in a movement or malposition of control rods beyond normal limits have been reviewed.
The scope of the review has included investig-ations of possible rod malposition configurations, the course of the 4
15.4 - 5 2
~~~u e...
r%
resulting transients or steady-state conditions, and the instrumentation response to the transient or power maldistribution. The methods used to determine the peak fuel rod response, and the input to that analysis, such as power distribution changes, rod reactivities, and reactivity feedback effects due to ederator 'and fuel temperature changes, have been examined.
We conclude that the requirements of General Design Criteria 10, 20, and 25 have been met. This conclusion is based on the following:
The applicant has met the requirements of GDC 10 that the specified acceptable fuel design limits are not exceeded, GDC 20 that the reactivity control systems
, are automatically initiated so that specified acceptable fuel design limtis are.
not exceeded, and GDC 25 that singla malfunctions in the reactivity control system will not cause the specified acceptable fuel design limits to be exceeded.
These requirements have been met, by comparing the resulting extreme operating conditions and response for the fuel (i.e., fuel duty) with the acceptance criteria for fuel damage (e.g., critical heat flux, fuel temperatures and clad strain limits should not be exceeded), to assure that fuel rod failure will be precluded for this event. The basis for acceptance in the staff review is that maximum configurations and transients for single error control rod malfunctions
' have been analyzed, that the analysis methods and input data are resonaoly conservative and that specified acceptable fuel design limtis will not be exceeded.
15.4.7 Inadvertent Loading of a Fuel Assembly into Inoroper Position Discussion Strict administrative controls in the form of previously approved established l
procedures and startup testing.are followed during fuel loadings to prevent operation.with a fuel assembly in an improper location or a misloaded burnable poison assembly.
Nevertheless, an analysis of the consequences of a loading i
error has been perfomed.
I l
15.4 - 6
-~
---... -.. - - -........ -. -. -..