ML20080K244

FCS Unit 1 Simulation Facility Performance Testing Rept

ML20080K244
Person / Time
Site:	Fort Calhoun
Issue date:	02/13/1995
From:	OMAHA PUBLIC POWER DISTRICT
To:
Shared Package
ML20080K242	List: LIC-95-0045, Forwards FCS Unit 1 Simulation Facility Performance Testing Rept, Per 10CFR55.45(b)(5)(ii) ML20080K244
References
NUDOCS 9502280460
Download: ML20080K244 (149)

Text

{{#Wiki_filter:. x x LIC-95-0045 ENCLOSURE FORT CALHOUN STATION UNIT NO.1 SIMULATION FACILITY PERFORMANCE TESTING REPORT 1 EB822egggggggg;g,, i PDR p

l& y .} Table of Contents i l .l GeneralInformation page 3 i Uncorrected Test Failures page 4 Performance Testing Completed page 6 'i Testing Program Changes page 142 Testing Program 1995-1998 page 145 i ' Abbreviations and Acronyms page 149 l t i i 1 2

,' t i L

4_

n.4 1 i i i i Omaha Public Power District l Fort Calhoun Station Simulator Certification Renewal Submittal Ownet Omaha Public Power District f i Operator Omaha Public Power District 'l .i Manufacturet Westinghouse Electric Corporation l i Reference Plant: Fort Calhoun Station, Unit 1 NSSS Vendor: Combustion Engineering I i Turbine Generator Vendor: General Electric .[ l Rating: 1500 MWth Date Available for Training: June 16,1990 o Initial Certification Date: February 13,1991 l l h -{ f i e I i l f I 3 I i i

j

4 1

\\ ) P i '. } i I f i i t I f 1 i Uncorrected Test Failures 1 1 t t ) e i 4 8 i } t i 1 ? I I f I 4 2

~^ J4 Os L [L._ The Certification program for the Fort Calhoun Station Simulator provides for the periodic i performance of Certification Tests. Tests are performed either once per year, once per four. ) L years, or at special frequencies. The results of these tests are reviewed by a subject matter l expert (SME) who places the test into one of three possible categories. 1. Category 1 l Test Completed satisfactorily l 2. Category 2 Test Completed with deficiencies requiring correction, but not significant enough to impact test objectives 3. Category 3 Test Failed. Complete retest required No tests are currently classified as Category 3; therefore, there are no uncorrected test i failures requiring plans for remedy of failures. Some tests are classified as category 2 and j are being addressed in accordance with the normal work planning and tracking system. l [ i l i r i j 5

4 4 I b Performance Testing Completed I A s t 1 ? l 6 l l 1

4L 4 f Test Number: 14.3.3 y i Test Name: VERIFICATION OF SPARE COMPUTER TIME

== Description:== This test verifies that the simulator is capable of running with enough spare duty cycle to provide real time simulation. l'nitial Conditions: BOL,100% Power, Equilibrium Xenon Test Precis: Simulator duty cycle was measured for steady state and severe transient conditions. The first test initializes into 100% power conditions, Emergency Response Facil ties (ERF) computer operating and no non-real time tasks active. The test was run for 15 minutes, i Peak and steady state values for duty cycle were collected. l The next two tests were multiple malfunction tests MM-1 and MM-3, j which were selected as worst case, expending a maximum of l calculation time, thus ensuring any less severe scenarios would not exceed spare time limits. i Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-19857 No l i 1 I l l .1 7 i j

g y. Test Number 14,4.4 Test Name: ELECTF ?.:AL BUS TESTS

== Description:== This test verifies that the simulated plant electrical bus loads are [ connected to the correct bus.- l t Initial Cenditions: BOL,100% Power, Equilibrium Xenon Test Precis: The simulated Electrical Distribution System was verified correct by the ' f fo!!owing methods. A database inspection was performed, and it was s sified that all bus loads were connected to the correct bus. l The simulator was then run, each bus in turn deenergized, and it was verified that the components supplied by that bus deenergized by spot checking the loads. j Any Uncorrected Test Failures? No j Did this test reveal any exception to ANSI /ANS-3.5-19857 No i i r h I i I i i r 8

4 Test Number 14.4.5 Test Name: PLANT AIR TESTS

== Description:== This test verifies that simulated air supplied components are connected to the correct air header. j Initial Conditions: BOL,100% Power, Equilibrium Xenon Test Precis: Simulated air system loads were verified correct by the following methods. A database inspection was performed, and it was verified that all air loads were connected to the correct header. The simulator was then run, each air header was in tum depressurized and it was verified that the components supplied by that header went to their failed positions by spot checking the loads. Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-1985? No i 9

4 4 Test Number: 14.5.1.1.1 Test Name: REACTOR COOLANT SYSTEM TESTING

== Description:== To verify that operator conducted surveillance testing can be performed on the reactor coolant system (RCS), the following surveillances were performed: Pressurizer levelinstruments PORV block valves operation Low temperature-over pressure (LTOP) system RCS leak rate test Subcooled margin monitor Initial Conditions: BOL,100% Power, Equilibrium Xenon Test Precis: The pressurizer level instruments surveillance tests the pressurizer level control channels. By varying the pressurizer level transmitter signals, a check of the entire level control system was performed including all charging pump and pressurizer heater on and off signals, and all associated alarms. The power operated relief valve (PORV) block valve test stroked each PORVs block valve, and verified the proper operation and position indication of the valves. The low temperature-over pressure (LTOP) test was conducted by verifying the logic circuit indicators were enabled and the appropriate annunciators actuated. The RCS leak rate testing used the appropriate plant procedures to perform a water inventory balance. The subcooled margin monitor surveillance tested the A & B subcooled margin monitors and the A & B qualified safety parameter display system (QSPDS) calculations of P, T, oe The results of the above surveillances showed the simulator capable of performing within the acceptance criteria of the Fort Calhoun Station surveillance procedures for the RCS. Simulator Response Assessment: Plant procedures and best estimate Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-1985? No 10

, 1:: 4 I l Test Number: 14.5.1.1.4. 'j Test Name: CHEMICAL AND VOLUME CONTROL SYSTEM TESTING } t [: i

== Description:== To verify that operator conducted surveillance testing can be { performed on the chemical and volume control system (CVCS) 4 Initial Conditions: BOL,100% Power, Equilibrium Xenon I Test Precis: Various CVCS containment isolation, safety related and non-safety f related valves were stroked and compared to Fort Calhoun Station Unit-1 stroke time criteria. Various CVCS pumps were operated during the performance of surveillance tests, and their performance compared to the acceptance criteria of the tests performed. j The results of the above surveillance showed the simulator capable of performing within the acceptance criteria of the Fort Calhoun Station t inservice surveillance test for the CVCS. 1 Simulater Response Assessment: Plant data and best estimate j Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-19857 No l l i f I i i ? I i I i 11 j

O + Test Number: 14.5.1.1.5 Test Name: SAFETY INJECTION SYSTEM TESTING

== Description:== To verify that operator conducted surveillance testing can be performed on the safety injection system (SIS), The following surveillances were performed: Safety injection valves in-service testing Safety injection / containment spray pumps and valves Shutdown cooling valve interlock test initial Conditions: BOL,100% Power, Equilibrium Xenon BOL, Cold Shutdown, RCS drained Test Precis: For the safety injection valves in-service test, category A, B, and C safety related safety injection valves were stroked to verify operability. Valve stroke times were verified to be within the allowable band. The safety injection / containment spray pumps and valves test was performed. Safety related valves were time stroked to verify operability. High and low pressure safety injection pump inservice inspections were performed on all safety injection pumps. Safety injection tank check valve test was performed The shutdown cooling (SDC) valve Interlock test was performed. SDC suction valve controls, annunciators, automatic actions and overrides were tested and verified to actuate in response to varying the pressure transmitter inputs. The results of the above surveillances showed the simulator capable of performing within the acceptance criteria of the Fort Calhoun Station surveillance testing for the safety injection system. Simulator Response Assessment: Plant data and best estimate Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-19857 No 12

O r Test Number: 14.5.1.1.6 Test Name: COMPONENT COOLING WATER SYSTEM TESTING

== Description:== To verify that operator conducted surveillance testing can be performed on the component cooling water (CCW) system, the CCW pump inservice test surveillance was performed. Initial Conditions: BOL,100% Power, Equilibrium Xenon Test Precis: Each component cooling water pump was run for five minutes, then suction and discharge pressure, and indicated pump flow rate were recorded. Total pump head was calculated, and compared to head versus flow pump curve for that pump. The results of the above surveillance showed the simulator capable of performing within the acceptance criteria of the Fort Calhoun Station inservice surveillance test for the component cooling water system. Simulator Response Assessment: Plant data and best estimate Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-19857 No l 13

y - 1

4 A

Test Number .14.5.1.1.16 l Test Name: AUXILIARY FEEDWATER SYSTEM TESTING l 1

== Description:== To verify that operator conducted surveillance testing can be i performed on the auxiliary feedwater (AFW) system, the following i surveillances were performed: i .t Auxiliary feedwater pumps inservice inspection Automatic initiation of auxiliary feedwater Initial Conditions: BOL,100% Power, Equilibrium Xenon BOL,' Cold Shutdown, RCS Drained Test Precis: Auxiliary feedwater motor driven pump FW-6 and turbine driven pump FW-10 were run for an inservice inspection. Steam generators RC-2A and RC-28, auxiliary feedwater initiation and override logic testing was performed. Logic matrices were then tested. In each matrix, the actuation alarm, emergency safeguards feature indicating lamp and matrix actuation relays were verified to actuate and reset. Functional testing verified auxiliary feedwater valves opening, pump l starts, and auxiliary feedwater flow to the steam generators. 3 Emergency safeguards features actuation system logic lamps and ' annunciators were verified to actuate. Operator overrides and reset of -l the initiation were verified. I The results of the above surveillances showed the simulator capable of performing within the acceptance criteria of the Fort Calhoun Station i surveillance testing for the auxiliary feedwater system. Simulator Response Assessment: Plant data and best estimate Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-1985? No l v t p 14

4~ o Test Number: 14.5.1.1.17 Test Name: RAW WATER SYSTEM TESTING

== Description:== To verify that operator conducted surveillance testing can be performod on the raw water system (RWS), the following surveillances were performed: Raw water system valve actuation Raw water valves inservice testing initial Conditions: BOL,100% Power Test Precis: The raw water system valve actuation test was performed. This test verified the ability to isolate any portion of the raw water system from the control room. The raw water valves inservice quarterly test was performed. The raw water inservice pump monthly test was performed. Pump differential pressures, currents and check valve operabilities were verified. The results of the above surveillances showed the simulator capable of performing within the acceptance criteria of the Fort Calhoun Station surveillance testing for the raw water system. Simulator Response Assessment: Plant data and best estimate Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-1985-19857 No 15

v '!O

q

'j I Test Number: '14.5.1.2.1 Test Name: REACTOR CORE TESTING

== Description:== To verify that operator conducted surveillance testing can be performed on the reactor core, the reactivity anomalies surveillance was performed. Initial Conditions:. BOL,100% Power, Equdibrium Xenon Test Precis: This test analyzed for reactivity deviations by performing a reactivity .l balance. j .1 The results of the above survei!!ances showed the simulator capable of performing within the acceptance criteria of the Fort Calhoun Station surveillance testing for the reactor core. Simulator Response Assessment: Plant data and best estimate Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-1985-19857 No l .I i 'l i 16

c. 2U W, c M

) m 6 / Test Number: 14.5.1;2.2 q

Test Name:

' CONTROL ROD DRIVE SYSTEM TESTING j g 1

== Description:== To verify that operator conducted surveillance testing can be j performed on the control rod drive mechanism (CRDM) system, the following surveillances were performed. -l

j Control element assemblies Secondary CEA position indicating, interlocks, alarms, and

~ display system 1 1 Initial Conditions: BOL, RCS Hot Shutdown, Borated Test Precis: The control element assemblies test verified CEA drive cystem l interlocks, and alarms. The regulating group withdrawal prohibit,- shutdown group insertion permissive, and regulating group upper and ll lower sequential permissives, were tested for trippable and non-J trippable CEAs. The reactor protection system high power and high I startup rate pre-trip rod withdrawal prohibit was tested. A reactor trip test was performed to verify all full length CEAs inserted. The manual individual exercise of CEAs was performed by inserting and i withdrawing each regulating group and shutdown CEA 6 inches. Secondary CEA position indicating, interlocks, alarms, and' display system testing was performed. Single CEA deviation, regulating group withdrawal prohibit, shutdown group insertion permissive, group out of - i sequence, and overlap, permissives, annunciators and setpoints were tested. i i The results of the above surveillances showed the simulator capable of. performing within the acceptance criteria of the Fort Calhoun Station surveillance testing for the CRDM System. l Simulator Response Assessment: Plant data and best estimate l Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /AlJS-3.5-1985-19857 No i i r { 17

A -O. Test Number: 14.5.1.2.5 Test Name: CONTAINMENT VENTILATION SYSTEM TESTING

== Description:== To verify that operator conducted surveillance testing can be performed on the containment ventilation system, the following surveillances were performed: j Containment air cooling and filtering system Containment hydrogen monitors Ventilating air valves inservice testing initial Conditions: BOL,100% Power, Equilibrium. Xenon Test Precis: Containment air cooling units were run, with the operational check of cooling unit dampers performed. Fan current and damper stroke times were ratisfactory. Containment hydrogen monitors were placed in service. Containment pressure relief valves were time stroked shut, and closing times were verified to be within the allowable band. Containment radiation monitor isolation valves were time stroked shut and closing times were verified to be within the allowable band. Simulator Response Assessment: Plant data and best estimate Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-1985-19857 No i i 18

/dl 6

);

y;; Test Number: 14.5.1.2.9 Test Name: DIESEL GENERATING SYSTEM TESTING

== Description:== To verify that operator conducted surveillance testing can be i performed on the diesel generating system, the diesel start and diesel fuel oil transfer pump surveillance was performed. Initial Conditions: BOL,100% Power, Equilibrium Xenon . Test Precis: The emergency diesel generators' responses to auto start signals were tested. The operation of the diesel fuel oil transfer pumps was tested. The results of the above surveillances showed the simulator capable of performing within the acceptance criteria of the Fort Calhoun Station - surveillance testing for the emergency diesel generator system. Simulator Response Assessment: Plant data and best estimate Any Uncorrected Test Failures? N0 r Did this test reveal any exception to ANSl/ANS-3.5-1985-19857 No 19

f. J4; Test Number: - 14.5.1.2.10 Test Name: INPLANT ELECTRICAL DISTRIBUTION SYSTEM TESTING

== Description:== To verify that operator conducted surveillance testing can be performed on the inplant electrical distribution system, the following o surveillances were performed: 13.8 KV emergency power - DC transfer switches initial Conditions: BOL Cold Shutdown, RCS drained Test Precis: This test verified that 13.8 KV emergency power was capable of performing its design function fellowing the simultaneous loss of 345 KV, and 161 KV, off-site AC power and the failure of both on-site diesel generators (i.e., limited station blackout). DC transfer switch testing verified the proper transfer from the normal to emergency power supply for transferable inplant 125 vde control busses. The results of the above surveillances showed the simulator capable of performing within the acceptance criteria of the Fort Calhoun Station surveillance testing for the inplant electrical distribution system. Simulator Response Assessment: Plant data and best estimate Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-1985-19857 No i 20 I

04 + Test Number: 14.5.1.2.13 Test Name: DIESEL GENERATOR SEQUENCER TESTING

== Description:== To verify that operator conducted surveillance testing can be performed on the D.G. sequencers, the automatic load sequencers surveillance was performed. Initial Conditions: BOL,100% Power, Equilibrium Xenon Test Precis: This test verified the AC and DC engineered safeguards sequencer circuits and time setpoints. The ERF computer was used to capture the timer times for the equipment receiving a timer operate signal. Actuation signal times were verified to be within the allowable band. The results of the above surveillances showed the simulator capable of performing within the acceptance criteria of the Fort Calhoun Station surveillance testing for the D.G sequencers. Simulator Response Assessment: Plant data and best estimate Any Uncorrected Test Failures?: No Did this test reveal any exception to ANSI /ANS-3.5-1985-19857 No 21

fo{ X r Test Number:~ 14.5.1.2.15 Test Name: - REACTOR PROTECTIVE SYSTEM TESTING

== Description:== To verify that operator conducted surveillance testing can be l performed on the reactor protective system (RPS), the following i surveillances were performed: RPS normal operation RPS thermal margin / low pressure /T,,,, Reactor coolant flow l Thermal margin / low pressure channels i High pressurizer pressure channels Steam generator level channels l Steam generator pressure channels High containment pressure channels - Turbine loss of load channels l Manual trip channels RPS logic units Axial power distribution channels initial Conditions: BOL,100% Power, Equilibrium Xenon BOL, RCS Hot Shutdown, Borated BOL, Cold Shutdown, RCS Drained Test Precis: Reactor protective system normal operation performed a switch l alignment and lamp illumination verification, j The thermal margin / Low pressure /T., channel check and calibration, was performed. This test ensured the four RPS channels T.,,,were in the allowable band. The reactor coolant low glow, alarm and trip channel check was performed. This test verified the four RPS channels' RCS low flow pre-1 trip and trip logic actions, and annunciator setpoints for four pump operation to be in the allowable band. The thermal margin / Low pressure channels, alarm and trip channel check and calibration, was performed. ? Calculations using 6T power, nuclear power, T,.,,,,,, intemal tilt, and I correction factors, were performed for each channel. Testing verified the four RPS channels' thermal margin pre-trip and trip logic actions, and annunciator setpoints to be in the allowable band.- 1 \\ 22

of A The high pressurizer pressure channels, alarm and trip channel check, was performed. This test verified the four RPS channels' high pressurizer pressure pre-trip and trip logic actions, and annunciator setpoints to be in the allowable band. The steam generator level channels, alarm and trip channel check, was performed. This test verified the four RPS channels for each steam generator's level low pre-trip and trip logic actions, and I annunciator setpoints to be in the allowable band. The steam generator pressure channels, alarm and trip channel check, was performed. This test verified the four RPS channels for each steam generator's pressure and asymmetric steam generator low pre-j trip and trip logic actions, and annunciator setpoints to be in the allowable band. j The turbine loss of load channels, shutdown alarm and trip channel check, was performed. This test verified that with the turbine off line, the four RPS channels' turbine loss of load trip logic actions, subsequent trip, and annunciations, occurred at 15% nuclear power. The high containment pressure channels, alarm and trip channel check, was performed. This test verified the four RPS channels for high containment pressure trip logic actions, and annunciation. The manual trip channels, shutdown alarm and trip channel check, was performed. The RPS logic units, operation of logic networks and clutch power contactors, was performed. RPS power supplies were tested for nominal voltage, current and ground indications. Each trip unit for each matrix coincidence trip logic combination was tested to actuate. Each matrix trip circuit was in turn, tasted to trip each matrix relay, its clutch power supply, load contactor and actuate indicating lamps. The axial power distribution channels, alarm and trip channel check and calibration was performed. This test verified the high power trip and also verified the four RPS channel's internal and external axial power distribution, pre-trip and trip logic actions, and annunciator setpoints to be in the allowable band. The results of the above surveillances showed the simulator capable of performing within the acceptance criteria of the Fort Calhoun Station surveillance testing for the reactor protective system. 23 l l l

p of a Simulator Response Assessment: Plant data and best estimate Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-19857 No 24

y ^ ~ gD i A - v e Test Number:' 14.5.1.2.16 9 Test Name: ENGINEERED SAFEGUARDS SYSTEMS TESTING l Description. -To verify that ope,ator conducted surveillance testing can be performed on the engineered safeguards system (ESF), the following ; surveillances were performed 1 Pressurizer pressure low signal Safety injection actuation' l Containment pressure high signal Containment spray logic - . Safety injection refueling water tank (SIRWT) low level ' signal Steam generatorlow pressure signal i Recirculation actuation logic ) Offsite power low system j ) Initial Conditions: BOL,100% Power, Equilibrium Xenon BOL, Cold Shutdown, RCS Drained Test Precis: The pressurizer pressure low signal (PPLS), alarm and trip channel check, was performed. This test verified the four RPS channels' pressurizer pressure low trip actions, indications and reset setpoints to be in the allowable band. The PPLS and blocking logic calibration refueling test was performed. This test was a functional check of the integrated ESF signals and resulting equipment actuation signals initiated by low pressurizer pressure transmitter signals. The PPLS block (override) actuation and annunciators were verified operable.- 1 The safety injection actuation signal test was performed. This test was a functional check of the train A integrated ESF signals and resulting equipment actuation signals. Train A PPLS, CPHS, SIAS, CIAS, VIAS lockout relays, containment isolation valves and ERF computer printouts were verified to actuate. Tha containment pressure high signal (CPHS), operation check was performed. The CPHS matrix logic was verified to deenergize by actuating pressure switch pairs. The CPHS calibration refueling surveillance was performed. This test was a functional check of the train A CPHS signal and resultant relay actuation signals initiated by high containment pressure transmitter inputs. CPHS, SIAS, CIAS, and VIAS relays were verified to actuate. 25 ww w -r,v,

f:j } The containment spray logic signal train A test was performed as a sub test of the safety injection actuation Test. This test verified the operability of the PPLS and CSAS relays. The containment spray actuation test was performed. PPLS, CPHS, SlAS, CIAS, VIAS lockout relays, breakers, and containment isolation valves were verified to actuate. The safety injection refueling water tank (SIRWT) low level signal monthly channel check was performed. The matrix lamps were verified to deenergize by failing SIRWT level bistables. The SIRWT low level signal refueling surveillance was performed. This test was a functional check of the train A SIRWT low level circuitry and resulting relay actuation signals initiated by SIRWI level bistables. Matrix lamps and STLS relays were verified to actuate. The steam generator low pressure signal (SGLS), indication and trip channel check was performed. This test verified the four RPS channels' cteam generator pressure low trip actions, indications and reset setpoints to be in the allowable band. The SGLS and blocking logic calibration refueling test was performed. This test was a functional check of the ESF train A signals and resulting equipment actuation signals initiated by low steam generator pressure transmitter signals. SGLS alarm, lockout relays and valve actuations were verified to occur. The SGLS Block (override) and attendant annunciators were verified to be operable during each actuation. The recirculation actuation logic (RAS) channel check was performed as a sub test of the safety injection actuation Test. This test verified the operability of the RAS relays, overrides, matrix lamps and isolation valves. The RAS logic and switch refueling test was performed. CPHS, SIAS, CIAS, VIAS, STLS and RAS lockout relays, breakers, and containment isolation valves were verified to actuate. The offsite power low system (OPLS) channel check was performed. This test verified the individual operability of OPLS annunciators, matrix relay and sequencer indications for incoming transformers, busses and switchgear. The OPLS matrix refueling check was performed. This test was a functional check of OPLS matrix signals and resulting breaker actuations, crossties, load shed and equipment actuation signals initiated by test switch operation. The results of the above surveillances showed the simulator capable of performing within the acceptance criteria of the Fort Calhoun Station surveillance testing for the engineered safeguards system. 26

-V1 4 s' gs. 3.. (l)M ' ' M., i /1 ' f Simulator Response Assessment: Plant data and best estimate ' Did this test reveal any exception to ANSI /ANS-3.5-19857 No j w 9 ) I i I f f ) ? l l 5 f l ? k i i i l ? 6 l ? h o 27 1 h w -p., ,.n , w ~+

61 J Test Number: 14.5.1.2.17 Test Name: NUCLEAR INSTRUMENTATION SYSTEM TESTING

== Description:== To verify that operator conducted surveillance testing can be parformed on the nuclear instrumentation system (NIS), the following surveillances were performed: Power range safety channels Wide range logarithmic channels Rod drop indication initial Conditions: BOL,100% Power, Equilibrium Xenon BOL, Cold Shutdown, RCS Drained Test Precis: The power range safety channels adjustment check and calibration was performed. This test compared plant computer calculated core power to RPS delta T and nuclear instrumentation power, and recalibrated those powers to calculated power as required. The power range safety channels monthly test was performed for each channel. Variable over power pre-trip and trip setpoints were verified with respect to linear and detta T power. Linear power upper and lower sub channels, linear power pre-trip and trip were verified. The wide range logarithmic channels functional check was performed. The high DPM (start up rate of change) pre-trip and trip functions were verified to actuate The rod drop indication check was performed. The results of the above surveillances showed the simulator capable of performing within the acceptance criteria of the Fort Calhoun Station surveillance testing for the nuclear instrumentation system. Simulator Response Assessment: Plant data and best estimate Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-19857 No l 28 s

c'1 .A Test Number: 14.5.1.2.18 Test Name: INCORE NUCLEAR INSTRUMENTATION TESTING

== Description:== To verify that operator conducted surveillance testing can be performed on incore instrumentation, the core exit thermocouples surveillance was performed. Initial Conditions: BOL,100% Power, Equilibrium Xenon Test Precis: The core exit thermocouple (CET), channel check was performed. This test verified minimum OSPDS channel A & B valid quadrant CET operability criteria. The results of the above surveillance showed the simulator capable of performing within the acceptance criteria of the Fort Calhoun Station surveillance testing for the incore nuclear instrumentation system. Simulator Response Assessment: Plant data and best estimate Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-19857 No 29

2l f

l i Test Number: 14.5.2.1 i Test Name: ROD WORTH TESTS -i

== Description:== This test verifies that the control rod worths match the reference plant Technical Data Book values. j initial Conditions: BOL, reactor critical at approximately 1 MW, below point of adding heat l MOL, reactor critical at approximately 1 MW, below point of adding l heat o EOL, reactor critical at approximately 1 MW, below point of adding heat -l Test Precis: All models are frozen with the exception of RFLUX2, RAUXIL, RXCTAH and NIS. j The rod worths for each regulating group were determined by inserting each group and compensating for the reactivity insertion by dilution to maintain criticality. The data collected were plotted using the same axis as the curves in j the Technical Data Book, and the curves were compared. l The shutdown groups were measured in the same way, but the curves were not generated, as there are no curves in the Technical Data Book with which to compare. Total group worths were compared to the Technical Data Book specifications. j Simulator Response Assessment: Plant procedures and best estimate l Any Uncorrected Test Failures? No . Did this test reveal any exceptica to ANSI /ANS-3.5-1985? No l f t I f i 30 l

4E a

l . Test Number: 14.5.2.2 1 Test Name: BORON WORTH TESTS

== Description:== This test verifies that the boron worths match the reference plant 7 Technical Data Book values. i Initial Conditions: BOL, reactor critical at approximately 1 MW, below point of adding heat MOL, reactor critical at approximately 1 MW, below point of adding j heat EOL, reactor critical at approximately_1 MW, below point of adding heat Test Precis: All models'are frozen with the exception of RFLUX2, RAUXIL, RXCTAH and NIS, l The boron worths for each core age were determined by running the l i program CORETEST, which was developed by Westinghouse Electric Inc. for use during factory acceptance testing of the Fort Calhoun Simulator. The results of coRETEST were compared to the technical data book values. Simulator Response Assessment: Plant procedures and best estimate l Any Uncorrected Test Failures? No i Did this test reveal any exception to ANS!/ANS-3.5-19857 No i l 1 31

-j k I I Test Number: 14.5.2.3 . Test Name: ISOTHERMAL TEMPERATURE COEFFICIENT

== Description:== This test verifies that the isothermal temperature coefficient (lTC) matches the reference plant Technical Data Book value. Initial Conditions: BOL, reactor critical at approximately 1 MW, below point of adding heat Test Precis: All models are frozen with the exception of RELux2, and RXCTAH. f The core inlet and outlet enthalpies were then set to their initial conditions plus 2 btullbm and the resultant change in core reactivity. i was observed. The reactivity change divided by the enthalpy change (directly convertible to a temperature change of 1.6

• F) results in the isothermal temperature coefficient.

I Simulator Response Assessment: Plant Procedures and Best Estimate Any Uncorrected Test Failures? No l Did this test reveal any exception to ANSI /ANS-3.5-19857 No l i I l i l 1 l f e 32 l t o

k o s L Test Number. 14.5.2.4 Test Name: POWER COEFFICIENT TEST

== Description:== This test verifies that the power coefficient matches the reference plant Technical Data Book value. initial Conditions: BOL,100% Power, Equilibrium Xenon Test Precis: All models are frozen with the exception of RFLUX2, NIS and RXCTAH. Boron concentration is held constant as poweris decreased by control rod insertion. The core inlet and outlet enthalpies are maintained at the proper values manually as power is reduced. When 10% power is reached, the rod worth curves are used to compute the total reactivity inserted to determine the power defect. The result is compared to the Technical Data Book values. Simulator Response Assessment: Plant procedures and best estimate Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-19857 No 33

'L o i l Test Number: 14.5.2.5' } f Test Name: XENON TESTS

== Description:== This test verifies that the Xenon concentration matches the reference plant Technical Data Book values. Initial Conditions: BOL,100% Power Equilibrium Xenon-BOL,80% Power Equilibrium Xenon j BOL,50% Power Equilibrium Xenon i BOL,30% Power Equilibrium Xenon MOL,100% Power Equilibrium Xenon i MOL,80% Power Equilibrium Xenon MOL,50% Power Equilibrium Xenon l MOL,30% Power Equilibrium Xenon EOL,100% Power Equilibrium Xenon EOL,80% Power Equilibrium Xenon EOL,55% Power Equilibrium Xenon Test Precis: The simulator was initialized into each initial condition listed and the [ Xenon concentration was compared to the Technical Data Book. The simulator was tripped from 100% power MOL and Xenon plotted for 48 hours run time. The data collected were plotted and compared to the Technical Data Book curve. l A Xenon oscillation was initiated by dropping and then recovering a control rod. It was then verified that the Xenon oscillation produced could be damped by the use of control rods. Simulator Response Assessment: Plant procedures and best estimate l Any Uncorrected Test Failures? No i Did this test reveal any exception to ANSI /ANS-3.5-19857 No l l i 34 n A

r~ l ,, V .i -Test Number: 14.5.2.6 Test Name: ESTIMATED CRITICAL POSITION TESTS

== Description:== This test verifies that the estimated critical positions could be predicted ) within the tolerance of the Technical Data Book. 1 i Initial Conditions: BOL,100% Power Equilibrium Xenon ] MOL,100% Power Equilibrium Xenon EOL,100% Power Equilibrium Xenon ) ? Test Precis: The simulator was initialized into each initial condition listed, tripped ) and restarted after calculating an Estimated Critical Conditions Worksheet. The results of the worksheets and simulator performance j were compared to the Technical Data Book. 1 Simulator Response Assessment: Plant procedures and best estimate Any Uncorrected Test Failures? No j Did this test reveal any exception to ANSI /ANS-3.5-1985? No J 35

id f,( Test Number: 14.5.3.1 4 ^ Test Name: NORMAL OPERATIONS TEST -i

== Description:== This test verifies the simulator capable of simulating real time plant operations of Fort Calhoun Station Unit 1. Initial Conditions: BOL,100% Power, Equilibrium Xenon Test Precis: This test was performed with operating procedures and operating Instructions, using local operator actions (LOAs), where appropriate, and non-applicable plant specific tasks (notifications, approvals, manual valve lineups, etc.) annotated as not applicable (N/A).' The test was begun with a normal station shutdown to refueling conditions. Boration rates and amounts were verified to be consistent with plant references and operator experience. Following shutdown cooling (SDC) initiation, a subsequent cooldown and drain down of the pressurizer to mid-loop conditions was conducted. i Pressurizer refill and bubble formation were completed. Pressurizer heatup rate and bubble formation were verified to be consistent with operator experience. j A plant heatup to normal operating pressure and temperature (NOP & NOT) was performed. Reactor coolant pump heat was used and verified to be consistent with plant data, and operator experience. A dilution to reactor criticality was performed with dilution rate and amounts verified to be consistent with plant references and operator experience. Nuclear instrumentation response to the dilution and l criticality was also verified to be consistent with operator expenence. The point of adding heat response was verified to be consistent with plant references and operator experience. Turbine warm-up and 1 synchronization were performed. The rate of condenser vacuum rise. i was verified to be consistent with the vacuum pump (0) in service. The main turbine warm up and roll was verified to be consistent with plant references and operator experience. An increase in power to 100% was conducted and the feedwater pump capacity was verified to be consistent with plant references and operator experience. j 36 l

50^ 4 i Simulator Response Assessment: Plant data and best estimate Any Uncorrected Test Failures? No i Did this test reveal any exception to ANSI /ANS-3.5-19857 No i 4 37

gi b

f f

i i Test Number: 14.5.3.2.1 . Test Name: STEADY STATE DRIFT TEST AT 100% POWER

== Description:== This test verified the simulator computed values _for 100% power were .i stable and met ANSl/ANS-3.5-1985 specifications. Initial Conditions: BOL,100% Power, Equilibrium Xenon. i Test Precis: This test was performed by initializing into a 100% power steady state l configuration, with controls in automatic, and acquiring data every ^ three (3) minutes for one hour. 1 Personnel monitored plant parameters on the instructor control CRT, on the control boards and on the simulator ERF. Following the test, captured data were examined for deviations. i i Simulator Response Assessment: Plant Data l Any Uncorrected Test Failures? No i Did this test reveal any exception to ANS!/ANS-3.5-19857 No l 1 t { i i i l i i 'i 38 i i

je .A 4 i i Test Number: 14.5.3.2.2 + i Test Name: STEADY STATE DRIFT TEST AT 80% POWER

== Description:== This test verified the simulator computed values for 80% power were l stable and met ANSI /ANS-3.5-1985 specifications. l initial Conditions: BOL,80% Power, Equilibrium Xenon i Test Precis: This test was performed by initializing into an 80% power steady state configuration, with controls in automatic, and acquiring data every l three (3) minutes for one hour, i Personnel monitored plant parameters on the instructor control CRT, on the control boards and on the simulator ERF. Following the test, captured data were examined for deviations. Simulator Response Assessment: Plant Data i' Any Uncorrected Test Failures? No Did this test reveal any exception to ANSl/ANS-3.5-19857 No l I I i l b 4 l I I i 39

l Test Number 14.5.3.2.3 Test Name: STEADY STATE DRIFT TEST AT 55% POWER

== Description:== This test verified the simulator computed values for 55% power were stable and met ANSI /ANS-3.5-1985 specifications. Initial Conditions: BOL,55% Power, Equilibrium Xenon Test Precis: This test was performed by initializing into a 55% power steady state configuration, with controls in automatic, and acquiring data every three (3) minutes for one hour. Personnel monitored plant parameters on the instructor control CRT, on the control boards and on the simulator ERF. Following the test, captured data were examined for deviations. Simulator Response Assessment: Plant Data Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-19857 No 40

J c Test Number 14.5.3.2.4 Test Name: STEADY STATE DRIFT TEST AT 30% POWER

== Description:== This test verified the simulator computed values for 30% power were stable and met ANSI /ANS-3.5-1985 specifications. Initial Conditions: BOL,30% Power, Equilibrium Xenon Test Precis: This test was performed by initializing into a 30% power steady state configuration, with contiols in automatic, and acquiring data every three (3) minutes for one hour. Personnel monitored plant parameters on the instructor control CRT, on the control boards and on the simulator ERF. Following the test, captured data were examined for deviations. Simulator Response Assessment: Plant Data Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-1985? No 1 41

7,k

C r

i Test Number: 14.5.3.3.1 Test Name: STEADY STATE ACCURACY TEST AT 100% POWER

== Description:== This test verified the simulator computed values and meter indications for 100% power conditions. The testing ensured critical and non critical parameters were accurate, and within tolerance when compared to Fort Calhoun Station Unit 1 at full power. Principal mass and energy balance calculations were performed during this test. l Initial Conditions: BOL,100% Power, Equilibrium Xenon Test Precis: This test was performed by initializing into a 100% power steady state I configuration, with the controls in automatic. Steam flow was then adjusted to the values given as baseline data. Main condenser r vacuum, circulating water temperature, and power factor were adjusted as required to maintain the baseline value. The plant was allowed to stabilize, then computer as well as control board instrument data collection was performed. Personnel performed the following mass and energy balances: i Indication of reactor power based on delta T Reactor power based on steam flow Core thermal power calculation i Reactor coolant system leak rate calculation i Simulator Response Assessment: Plant data and best estimate { Any Uncorrected Test Failures? No i Did this test reveal any exception to ANSI /ANS-3.5-19857 No 42

~ ~ ~ p Test Number: 14.5.3.3.2 Test Name: STEADY STATE ACCURACY TEST AT 80% FOWER l

== Description:== This test verified the simulator computed values and meter indications for 80% power conditions. The testing ensured critical and non critical parameters were accurate, and within tolerance when compared to Fort Calhoun Station Unit 1 at 80% of full power. Principal mass and energy balance calculations were performed during this test. i Initial Conditions: BOL,80% Power, Equilibrium Xenon i Test Precis: This test was performed by initializing into a 80% power steady state configuration, with the controls in automatic. Steam flow was then adjusted to the values given as baseline data. Main condenser vacuum, circulating water temperature, and power factor were adjusted. i as required to maintain the baseline value. The plant was allowed to stabilize, then computer as well ss control board instrument data collection was performed. i Personnel performed the following mass and energy balances: l Indication of reactor power based on delta T Reactor power based on steam flow Core thermal power calculation Reactor coolant system leak rate calculation Simulator Response Assessment: Plant data and best estimate i Any Uncorrected Test Failures? -No Did this test reveal any exception to ANSI /ANS-3.5-19857 No i i I 1 i I 43 i I

,I -J J Test Number 14.5.3.3.3 Test Name: STEADY STATE ACCURACY TEST AT 55% POWER

== Description:== This test verified the simulator computed values and meter indications for 55% power conditions. The testing ensured critical and non critical parameters were accurate, and within tolerance when compared to Fort Calhoun Station Unit 1 at 55% of full power. Principal mass and energy balance calculations were performed during this test. Initial Conditions: BOL,55% Power, Equilibrium Xenon Test Precis: This test was performed by initializing into a 55% power steady state configuration, with the controls in automatic. Steam flow was then adjusted to the values given as baseline data. Main condenser vacuum, circulating water temperature, and power factor were adjusted as required to maintain the baseline value. The plant was allowed to stabilize, then computer as well as control board instrument data collection was performed. Personnel performed the following mass and energy balances: Indication of Reactor power Based on delta T Reactor power Based on steam Flow Core thermal power Calculation Reactor Coolant system leak Rate Calculation Simulator Response Assessment: Plant data and best estimate Any Uncorrected Test Failures? No Did this test revesi any exception to ANSilANS-3.5-19857 No 4 1 i l 1 44

,t ,s Test Number 14.5.3.3.4 Test Name: STEADY STATE ACCURACY TEST AT 30% POWER

== Description:== This test verifies the simulator computed values and meter indications for 30% power conditions. The testing ensured critical and non critical parameters were accurate, and within tolerance when compared to Fort Calhoun Station Unit 1 at 30% of full power. Principal mass and energy balance calculations were performed during this test. Initial Conditions: BOL,30% Power, Equilibrium Xenon Test Precis: This test was performed by initializing into a 30% power steady state configuration, with the controls in automatic. Steam flow was then adjusted to the values given as baseline data. Main condenser vacuum, circulating water temperature, and power factor were adjusted as required to maintain the baseline value. The plant was allowed to stabilize, then computer as well as contrcl boarJ instrument data collection was performed. Personnel performed the following mass and energy balances: Indication of reactor power based on delta T Reactor power based on steam flow Core thermal power Calculation Reactor coolant system leak rate calculation Simulator Response Assessment: Plant data and best estimate i Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-1985? No 4 j 45

l ;, L .;s Test Number. 14.5.4.1 Test Name: MAXIMUM RATE POWER RAMP

== Description:== This test verified the ability of the simulator to respond to a maximum rate down power in a realistic fashion. Initial Conditions: BOL,100% Power, Equilibrium Xenon Test Precis: The test was performed by initializing into 100% power conditions, with the following systems in automatic: Pressurizerlevel control Pressurizer pressure control Letdown temperature control Volume control tank inlet control Steam generatorlevel controls Steam dump and turbine bypass system control l Data collection was initiated, then in accordance with AOP-5, a rapid load reduction to 20% power was performed at a 10% per minute ramp. Manual control of control rods, letdown pressure and main turbine control valves were the only manipulations performed. Testing resulted in the reactor still critical, with no safety valves lifted, and in 10 minutes plant parameter trends were stabilizing. Simulator Response Assessment: Best Estimate Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-19857 No 46

i .,6 C-Test Number 14.5.4.2 Test Name: MAIN TURBINE STOP AND CONTROL VALVE TEST

== Description:== This test verified the ability of the simulator to respond to main turbine stop, intermediate and control valve testing in a realistic fashion. Initial Conditions: BOL,100% Power, Equilibrium Xenon Test Precis: The test was performed by initializing into 100% power conditions, with the following systems in automatic: Pressurizer level control Pressurizer pressure control Letdown temperature control Volume control tank inlet control Steam generator level controls Steam dump and turbine bypass system control Data collection was initiated, then in accordance with OI-ST-10, testing of the main turbine stop valves was performed. Data collection was again initiated, then in accordance with OI-ST-10, testing of the main turbine intermediate valves was performed. Testing continued with data collecticn, and then in accordance with Ol-ST-10, tests of the main turbine intermediate valves IV-1 through 4 were performed. Testing showed the integrated plant response to be realistic, self dampening and that station procedures could be used. Simulator Response Assessment: Plant data and best estimate Any Uncorrected Test Failures? No Did this test reveal any exception to ANSl/ANS-3.5-1985? No I 47

I .,1 j i Test Number. 14.5.4.3 i . Test Name: INADVERTENT BORATION/ DILUTION TEST

== Description:== This test verified the ability of the simulator to respond to a dilution and boration event at full power in a realistic fashion. Initial. Conditions: BOL,100% Power, Equilibrium Xenon Test Precis: The test was performed by initializing into a 100% power configuration, with the following conditions: CEAs fully withdrawn f' Pressurizerlevel controlin auto Pressurizer pressure control in auto i CVCS in normal operation Steam generator level controls in auto Steam dump and turbine bypass system control in auto j Data collection was initiated, then a continuous dilution was initiated by aligning demineralized water to the charging pump suctions and starting an additional two charging pumps. A reactor trip on thermal margin / Low pressure (TM/LP) or variable high f i power trip was verified to occur. Then the dilution was secured and the plant allowed to stabilize. i The test continued following reinitialization to 100% power, and the initiation of data collection. A continuous boration was initiated by l starting both boric acid pumps, aligning the discharge to the charging l pump suctions and starting an additional two charging pumps. l A reactor trip on thermal margin / Low pressure (TM/LP) was verified to occur. Then the boration was secured and the plant was allowed to stabilize. l Testing showed the plant response to be realistic. i Simulator Response Assessment: Best Estimate Any Uncorrected Test Failures? No Did this test reveal any exception to ANSl/ANS-3.5-1985? No i J 48 l

r gr ,t' Test Number 14.5.4.4 Test Name-REACTOR TRIP AND RECOVERY TEST

== Description:== This test verified the ability of the simulator to perform a reactor trip and subsequent restart in a realistic fashion. Initial Conditions: BOL,80% Power, Equilibrium Xenon t Test Precis: The test was performed by initializing into 80% of full rated power conditions, with the following systems in automatic: Pressurizer level control Pressurizer pressure control Letdown temperature control Volume control tank inlet control Steam generator level controls Steam dump and bypass system control Data collection was begun, and the reactor trip pushbutton was depressed, initiating the transient. Operator control manipulations were i performed to model as closely as possible the Fort Calhoun Station trip transient data being used. Following plant stat >ilization, simulator data and Fort Calhoun Station trip data were compared. Using operating procedures, the reactor was started up and returned to nominal full power conditions. Simulator Response Assessment: Plant data and Best Estimate Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-19857 No 49

.~ ' )$7 -;g ' Test Number. 14.5.4.5-Test Name: DROPPED ROD TEST

== Description:== This test verified the ability of the simulator to respond to a single dropped control element assembly (CEA) in a realistic fashion. i Initial Conditions: BOL,100% Power, Equilibrium Xenon Test Precis: The test was performed by initializing into 100% full rated power - conditions, with the following systems in automatic: Pressurizerlevel control Pressurizer pressure control 1 Letdown temperature control Volume control tank inlet control Steam generatorlevel controls Steam dump and bypass system control Data collection was initiated, and CEA 40 was dropped. Changes such - as lowered nuclear instrumentation readings in the affected quadrant, core power shift, with lowered reactor coolant system temperatures were verified to occur. Following plant stabilization, data analysis showed the plant response to be realistic. Simulator Response Assessment: Best Estimate { Any Uncorrected Test Failures? No l Did this test reveal any exception to ANSI /ANS-3.5-19857 No t f I t t I i t 50 i b

L 4 4_ ' Test Number ~ 14.5.4.6 Test Name: MANUAL REACTOR TRIP TEST i

== Description:== This test verified the ability of the simulator to conform to a baseline ' manual reactor trip in a realistic fashion. Initial Conditions: BOL,100% Power, Equilibrium Xenon Test Precis: The test was performed by initializing into 100% power conditions, with systems verified to be in normal full power configuration. A five minute i stability check was performed. Data collection was begun, and the '- reactor trip pushbutton was depressed, initiating the transient. Other than manualletdown pressure control, no operator control manipulations were performed. Hot standby conditions were verified maintained in automatic, and following stabilization, testing was concluded. Simulator data were then analyzed to verify acceptance criteria. Simulator Response Assessment: Plant data and Best Estimate Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-19857 No I k i 51 l i 6

p; 3,4 '.f i

f Test Number-14.5.4,7 m Test Name: SIMULTANEOUS TRIP OF MAIN FEEDWATER PUMPS TEST l

Description:

This test verified the ability of the simulator to conform to a baseline simultaneous trip of all feedwater pumps in a realistic fashion. l Initial Conditions: BOL,100% Power, Equilibrium Xenon -l t Test Precis: The test was performed by initializing into 100% power conditions, with I '^ systems verified to be in normal full power configuration. A five minute j stability check was performed. Data collection was begun, and the. t main feedwater pumps were tripped simultaneously, initiating the 3 transient. t i Other than manual letdown pressure control, no operator control manipulations were performed. Uncomplicated reactor trip criteria were verified maintained in automatic, and following trend stabilization, l testing was concluded. Simulator data were then analyzed to j determine if the acceptance criteria were met. Simulator Response Assessment: Best Estimate Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-19857 No I i l I t { 'I i ~! i ) 52 i

,/ J Test Number 14.5.4.8 Test Name: SIMULTANEOUS CLOSURE OF MAIN STEAM ISOLATION VALVES TEST

== Description:== This test verified the ability of the simulator to conform to a baseline simultaneous closure of main steam isolation valves in a realistic fashion. Initial Conditions: BOL,100% Power, Equilibrium Xenon Test Precis: The test was performed by initializing into 100% power conditions, with systems verified to be in normal full power configuration. A five minute stability check was performed. Data collection was begun, and the main steam isolation valves (MSIVs) were manually shut simultaneously, initiating the transient. Other than manual letdown pressure control, no operator control manipulations were performed. Uncomplicated reactor trip criteria were verified maintained in automatic, and following trend stabilization, testing was concluded. Simulator data were then analyzed to determine if the acceptance criteria were met. Simulator Response Assessment: Best Estimate Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-19857 No 53

) ~ _.,8 .}. Test Number: 14.5.4.9 l - Test Name: SIMULTANEOUS TRIP OF ALL RCPs TEST

== Description:== This test verified the ability of the simulator to conform to a baseline simultaneous trip of all reactor coolant pumps in a realistic fashion. Initial Conditions: BOL,100% Power, Equilibrium Xenon Test Precis: The test was performed by initializing into 100% power conditions, with systems verified to be in normal full power configuration. A five minute stability check was performed. Data collection was begun, the reactor coolant pumps were then tripped simultaneously, initiating the transient. Other than manualletdown pressure control, no operator control manipulations were performed. Uncomplicated reactor trip criteria were verified maintained in automatic, and following trend stabilization, testing was concluded. Simulator data were then analyzed to determine if the acceptance criteria were met. Simulator Response Assessment: Best Estimate Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-19857 No P 1 I 54

3.s .) Test Number 14.5.4.10 Test Name: TRIP ANY RCP TEST

== Description:== This test verified the ability of the simulator to conform to a baseline trip of any single reactor coolant pump in a lealistic fashion. Initial Conditions: BOL,100% Power, Equilibrium Xenon I-Test Precis: The test was performed by initializing into 100% power conditions, with systems verified to be in normal full power configuration. A five minute stability check was performed. Data collection was begun, and one reactor coolant pump was tripped initiating the transient. Other than manual letdown pressure control, no operator control manipulations were performed. Uncomplicated reactor trip criteria were verified maintained in automatic, and following trend stabilization, testing was concluded. Simulator data were then analyzed to determine if the acceptance criteria were met. Simulator Response Assessment: Best Estimate Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-19857 No 55

.I s .c Test Number: 14.5.4.11 Test Name: LOSS OF LOAD TEST

== Description:== This test verified the ability of the simulator to conform to a baseline main turbine trip in a realistic fashion. Initial Conditions: BOL,55% Power, Equilibrium Xenon Test Precis: The test was performed by initializing into 55% power conditions, with systems verified to be in a normal configuration. A five minute stability check was performed. Data collection was begJn, and the main turbine was manually tripped, initiating the transient. Other than manual letdown pressure control, no operator control manipulations were performed. Uncomplicated reactor trip criteria were verified maintained in automatic, and following trend stabilization, testing was concluded. Simulator data were then analyzed to determine if the acceptance criteria were met. Simulator Response Assessment: Plant data and Best Estimate i Any Uncorrected Test Failures? No ANSI /ANS-3.5-1985 Test Exception: TRANSIENT TEST (APPENDIX B) B.2.2(6) TEST EXCEPTION i An exception to ANSI /ANS-3.5-1985 is taken for this test, due to Fort Calhoun Station Unit 1 plant configuration and operation. Fort Calhoun Station system design criteria stipulate the automatic actuation of a turbine trip-unit trip interlock at 15% power. Station procedures require main generator synchronization at 12% power. Load is then applied to avoid a gerierator reverse power trip. Loading and its subsequent feedwater heater extraction steam load combine to raise power to above the level at which the loss of load trip is bypassed. Therefore, for the Fort Calhoun Station simulator, testing for main turbine trip (maximum power level which does not result in an immediate reactor trip) is riot performed, as there is no power level at which this test is applicable. 56

I l e o e Test Number: 14.5.4.12 Test Name: MAXIMUM RATE POWER RAMP TEST

== Description:== This test verified the ability of the simulator to conform to a baseline maximum rate power ramp in a realistic fashion. Initial Conditions: BOL,100% Power, Equilibrium Xenon Test Precis: The test was performed by initializing into 100% power conditions, with systems verified to be in normal full power configuration. A five minute stability check was performed. Data collection was begun, and secondary load was rapidly lowered to 75% power, initiating the transient. Following a five minute stabilization, power was rapidly returned to 100% power. Operator control manipulations were performed. Normal full power conditions were verified, and following trend stabilization, testing was concluded. Simulator data were then analyzed to determine if the acceptance criteria were met. Simulator Response Assessment: Best Estimate Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-19857 No 57

7 ye ,) Test Number: 14.5.4.13 Test Name: LOCA WITH LOSS OF ALL OFFSITE POWER TEST

== Description:== This test verified the ability of the simulator to conform to a baseline maximum size reactor coolant system rupture combined with a loss of all offsite power in a realistic fashion. Initial Conditions: BOL,100% Power, Equilibrium Xenon Test Precis: The test was performed by initializing into 100% power conditions, with systems verified to be in normal full power configuration. A five minute stability check was performed. Data collection was begun, and the simulator set to simultaneously insert a maximum size LOCA with a concurrent totalloss of offsite power. No operator control manipulations were performed. Safety functions status checks were verified, and following stabilization, testing was concluded. The simulator data were then analyzed to determine if the acceptance criteria were met. Simulator Response Assessment: Best Estimate Any Uncorrected Test Failure.s? No Did this test reveal any exception to ANSI /ANS-3.5-19857 No 58 i

-....y )e- _-, l. I . Test Number: 14.5.4.14 i p .L Test Name: EXCESS STEAM DEMAND TEST l

== Description:== This test verified the ability of the simulator to conform to a baseline maximum size unisolable main steam line rupture in a realistic fashion. l Initial Conditions: BOL,100% Power, Equilibrium Xenon Test Precis: The test was performed by initializing into 100% power conditions, with systems verified to be in normal full power configuration. A five minute i stability check was performed. Data collection was begun, and the simulator set to insert a maximum sized unisolable steam line rupture. j No operator control manipulations were performed. Safety functions i status check was verified satisfied, and following trend stabilization, j testing was concluded. The simulator data were then analyzed to determine if the acceptance criteria were met. i Simulator Response Assessment: Best Estimate Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-19857 No 4 f \\ I i I 59 1---st

m- .I i Test Number 14.5.4.15 Test Name: SLOW RCS DEPRESSURIZATION TO SATURATION, NO HPSI TEST

== Description:== This test verified the ability of the simulator to conform to a baseline slow primary system depressurization to saturated conditions using a pressurizer relief valve stuck open with actuation of high pressure ECCS inhibited, in a realistic fashion. Initial Conditions: BOL,100% Power, Equilibrium Xenon Test Precis: The test was performed by initializing into 100% power conditions, with systems verified to be in normal full power configuration. A five minute stability check was performed. All high pressure safety injection and non-running charging pumps were disabled, and data collection was begun. Reactor coolant pumps were tripped in accordance with plant procedures, with no other operator control manipulations performed. Safety functions status check was verified challenged, and following trend stabilization, testing was concluded. The simulator data were then analyzed to determine if the acceptance criteria were met. Simulator Response Assessment: Best Estimate Any Uncorrecied 'fest Failures? No l Did this test reveal any exception to ANSI /ANS-3.5-19857 No i i 60

um 3 g o: ,w Test Number. 14.5.5.1.4 Malfunction identifier: AFW4 Test

Description:

Emergency feedwater storage tank leak. A variable size leak occurs on the discharge line upstream of FW-339. Initial Conditions: 100% Power, BOL Ootions Available: Options Used: Magnitude 0-100% Magnitude 100% 100% = 8" Line Break Ramp Time 0-3600 s Ramp Time O s Delay Tirne 0-3600 s DelayTime o s Mode Direct Direct / Remote / Conditional Test Precis: Following malfunction actuation, observed: auxiliary feedwater storage tank level decreased continuously. LCV-1173 opens to fill tank from condensate system; LCV-1190 opens to make up to condenser from condensate storage tank; condensate storage tank ' level low, auxiliary feedwater tank high-low, auxiliary feeowater tank low, emergency feedwater storage tank low-low alarms annunciate; LCV-1189 opens to fill auxiliary feedwater tank from demineralized water; waste disposal system malfunction alarm; spent regenerant tank overflows. Operator starts demineralized water pumps and secures makeup to the auxiliary feedwater storage tank, then verifies' sump level returns to normal after tank empties. Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS 3.57 No A 61

u ,o

o * +

i Test Number: 14.5.5.1.5 l Test

Description:

Auxiliary Feedwater Activation Relay Failure

i Malfunction identifier

AFW5 ' Test

Description:

Auxiliary feedwater activation relay failure 'l Initial Conditions: 100% Power, BOL L Options Available: Options Used: 1 Selection A, B, C, D Selection A Energized /Deenergized Energized j Ramp Time 0-3600 s Ramp Time O s Delay Time 0-3600 s Delay Time O s Mode Direct Direct / Remote / Conditional j Test Parameters Monitored: None Test Precis: Following malfunction actuation, observed: the correct cha inel matrix actuation relay light illuminated, along with the associated -) auxiliary feedwater system steam generator channel actuated alarm. Auxiliary feedwater feed valves opened and the auxiliary - -i feedwater pumps started (both electric and steam driven). Verified auxiliary feedwater flow to both steam generators. Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-19857 No 62

l go: ,.i. Test Number. 14.5.5.2.2 Malfunction Identifier: .CAS2 l l Test

Description:

Service air system leak A variable size leak occurs on the selected f service air line(s). ^ Initial Conditions: 100% Power, BOL 'Octions AvailablE Options Usedi Selection A, B, C Selection A Magnitude 0-100% Magnitude 100 Ramp Time 0-3600 s Ramp Time 0 s Delay Time 0-3600 s Delay Time O s Mode Direct f Direct / Remote / Conditional-Test Parameters Monitored: None Test Precis: Following malfunction actuation, observe; plant air pressure drop, standby compressor starts, air pressure low alarms actuate, at 80 i psig service air header isolation valve PCV-1753 closes, instrument air pressure stabilizes; services air pressure fluctuates with PCV-1753. Operator isolates leak by closing manual isolation valve,' then j verifies that pressure stabilizes. t Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-19857 No 63

Pjo-- i - Test Number:- 14.5.5.2.3 Malfunction Identifier: CAS3 ? Test Descriptioni instrument air loop leak. A variable size leak occurs on the selected I instrument air loop (s). Initial Conditions: 100% Power, BOL Options Available: Ootions Used: t Selection A, B, C Se'ection B t Delay Time 0-3600 s Delay Time O s Mode Direct i Direct / Remote / Conditional f Test Parameters Monitored: None i Test Precis: Following malfunction actuation, observe: air header pressure drops, standby compressor starts, air pressure low alarms actuate, operator isolates leak by closing isolation valve, then verifies that - pressure recovers and stabilizes. { Any Uncorrected Test Failures? No Did this test reveal any exception to ANSl/ANS-3.5-1985? No t i i t i t 64 T 4 p

6* 9s Test Number: 14.5.5.2.4 Malfunction identifier CAS4 Test

Description:

Instrument air riser leak. A variable size leak occurs on the selected instrument air riser (s). Initial Conditions: 100% Power, BOL Ootions Available: Options Used: Selection A-J Selection A Delay Time 0-3600 s Delay Time O s Mode Direct Direct / Remote / Conditional Test Parameters Monitored: None Test Precis: Following malfunction actuation, observe: air riser pressure drops, standby compressor starts, air pressure low alarms actuate, operator isolates leak by closing manual isolation valve, then verifies that pressure recovers and stabilizes. Any Uncorrected Test Failures? No Did this test reveal any exception to ANSl/ANS-3.5-19857 No l 65 l )

s. g 3 v- .. o 4 I 6 ~ \\ Test Number:: 14.5.5.3.4-Malfunction Identifier; CCW4 i - Test

Description:

Component cooling water (CCW) pump discharge header leak. A i variable size leak occurs on the component cooling water pump discharge header. l Initial Conditions: 100% Power, BOL Options Available: Ootions Used: Magnitude 0-100% Magnitude: 100% 100% = 16" Line Break l Ramp Time 0-3600s Ramp Time: 60 s i i Delay Time 0-3600 s Delay Time: 0 s i Mode D Direct / Remote / Conditional Test Parameters Monitored: CCW system pressure CCW system flow CCW surge tank level Reactor coolant pump seal and tube oil temperatures l Waste disposal system tank level alarms Test Precis: Following malfunction actuation, observed: component cooling water system pressure dropped, flow increased, surge tank level alarms actuated as level decreased, auto make-up system initiated filling surge tank. Components cooled by the component cooling I water system showed flow decreases and temperature increases. Waste disposal system showed an increase in inventory due to the leakage. Raw water backup cooling was initiated to the components supplied and a temperature decrease was observed as the raw water cooling was placed in service. Any Uncorrected Test Failures? No Did this test reveal any exception to ANSl/ANS-3.5-19857 No L 66 l

gy

.,o - i L j i~ - Test Number. 14.5.5.3.5' i l Malfunction Identifier: CCW5 .i i . Test

Description:

Component cooling water heat exchanger tube leak. Tube failure .l l occurs to a se!ectable degree in the selected heat exchanger, i Initial Conditions: .100% Power, BOL Options Available: Ootions Used: j Selection A, B, C, D Selected: A l l l Magnitude 0 - 100% Magnitude 100% l l .j Test Parameters Monitored: CCW system flow ( CCW surge tank level l Test Precis: Following malfunction actuation, observed: component cooling water system pressure dropped, flow increased, surge tank level alarms actuated as level decreased, auto make-up system initiated filling. Components cooled by the component cooling water system showed flow decreases and temperature increases. i l Any Uncorrected Test Failures? No l Did this test reveal any exception to ANSI /ANS-3.5-19857 No j j 1 l l l j s 67 l l

y

y

, y 3

I l . Test Number: 14.5.5.4.1 i Malfunction Identifier:' CND1 i r Test

Description:

Loss of main condenser vacuum. Air leakage into the condenser j causes pressure to rise. i Initial Conditions: 100% Power, BOL l 4 Ootions Available: Options Used: t Magnitude 0-100% Magnitude 100% 100% = Vac Bkr Open Ramp Time 0-3600 s Ramp Time O s f Delay Time 0-3600 s Delay Time O s Mode Direct Direct / Remote / Conditional Test Parameters Monitored: Condensers A and B pressures Condensers exhaust hood temperatures Reactor power Generator megawatts Test Precis: Following malfunction actuation, observed: condenser A vacuum decreases faster than condenser B vacuum; standby vacuum pump starts with attendant alarm annunciation; exhaust high pressure alarms annunciate; exhaust hood temperature rises, generator output decreases, reactor trips approximately 15 minutes after malfunction actuation. t Any Uncorrected Test Failures? No i Did this test reveal any exception to ANSl/ANS-3.5-19857 No l I I 68 ) l

io 1

Test Number: 14.5.5.4.4 i Malfunction Identifier: CND4 Test

Description:

Condensate pump bearing failure. The selected condensate pump (s) experiences bearing failure. Initial Conditions: 100% Power, BOL Ootions Available - Options Used: Selection A, B, C Selection A Magnitude 0-100% Magnitude 100% Ramp Time 0-3600 s Ramp Time O s Delay Time 0-3600 s Delay Time O s Mode Direct Direct / Remote / Conditional Test Parameters Monitored: Condensate pump A discharge pressure Condensate pump FW-2A current Test Precis: Following malfunction actuation, observe: condensate pump A current rises sharply, then decreases to 0 after pump seizes; pump trips with attendant overload trip alarm; discharge pressure decreases to 0; standby condensate pump starts normally. Any Uncorrected Test Failures? No j Did this test reveal any exception to ANSI /ANS-3.5-19857 No 69

t

, e

? I ' Test Number: 14.5.5.4.5-Malfunction identifier: CNDS Test

Description:

Condensate cooler tube leak. Tube failure occurs to a selectable j degree in the condensate cooler, i i Initial Conditions: 100% Power, BOL l Ootions Available: Ootions Used: i Magnitude 0-100 Magnitude 100% 100% = 10% of Tubes -{ Ramp Time 0-3600 s Ramp Time 0 s { Delay Time 0-3600 s Delay Time O s Mode Direct Direct / Remote / Conditional j Test Parameters Monitored: Condenser hotwelllevel Condensate storage tank level Condensate cooler outlet header temperature Stator cooler inlet temperature 'i Test Precis: Following malfunction actuation, observed: condensate storage l tank level decreased, and heat exchanger temperature l irregularities on stator coolers and hydrogen coolers. Operator i isolates and bypasses condensate cooler, then verifies that stator i and hydrogen cooler temperatures stabilize at higher values. l 1 Any Uncorrected Test Failures? No Did this test reveal any exception to ANSl/ANS-3.5-19857 No I i l 4 70 l i

y ro.., ,s ye - t .y i Test Number: 14.5.5.4.8 l Malfunction identifier CND8 Test

Description:

Hotwell level control failure. The hotwell level controller fails to a f selectable setpoint. .l Initial Conditions: 100% Power, BOL, Ootions Available: Ootions Used: i t l Selection 0-48" Selection 48" i Ramp Time 0-3600 s Ramp Time O s Delay Time 0-3600 s Delay Time 0 s Mode Direct Direct / Remote / Conditional t Test Parameters Monitored: Condenser hotwelllevel i Condensate storage tank level { Test Precis: Following malfunction actuation, observed: hotwelllevelincrease, i high level alarm annunciation level indication stabilized at 48", condensate storage tank level decreased. j i Any Uncorrected Test Failures? No l Did this test reveal any exception to ANSI /ANS-3.5-1985? No l l i j 71

p y ,c Test Number: 14.5.5.6.3 Malfunction Identifier CRD3 Test

Description:

Failure of individual rod raise relay. The selected relay fails to the state selected. Initial Conditions: 100% Power, BOL Options Available: Qotions Used: Selection 1-41 Selection 1 Magnitude D, E Magnitude E Deenergized/ Energized Ramp Time Ramp Time O Delay Time 0-3600 s Delay Time 60 s Mode Direct Direct / Remote / Conditional Test Parameters Monitored: None Test Precis: Following malfunction actuation, observe group 4 rod 1 outward motion. Operator attempts to insert rods in manual group and manual individual modes and observes: rod deviation alarms, a rod block signal, and the withdraw lights for group 4 remain on. Rod outward motion stops when mode switch is taken to off. Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-19857 No 72

gh,@, [ Test Number:- 14.5.5.6.4 Malfunction Identifier: CRD4-Test

Description:

Failure of individual rod lower relay. The selected relay fails to the state selected. Initial Conditions: 100% Power, BOL Ootions Available; Ootions Used: ' Selection 1-41 , Selection 1 Magnitude D, E Magnitude D - Deenergized/ Energized Ramp Time RampTime 0 Delay Time 0-3600 s Delay Time O s Mode Direct Direct / Remote / Conditional Test Parameters Monitored: None Test Precis: Following malfunction actuation, insert group 4 rods and observe: group 4 lower lights on, rod 1 position indication not changing, .l group 4 rods (except rod 1) inserting. l Operator selects manual Individual on rod mode selector switch j and verifies that rod 1 will not insert. Operator verifies normal outward motion of rod 1 l l Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-19857 No ] l l i 1 73 ~

g su.

1 ,y J Test Number- '14.5.5.6.5 i Malfunction Identifier: CRDS Test

Description:

Stuck rod. The selected rod sticks and does not move; it may be trippable. Initial Conditions: 100% Power, BOL 1 Options Available: Ootions Used: l Selection A-J Selection A 1 Magnitude T, U Magnitude U ~ Trippable/Untrippable 7 Ramp Time Ramp Time 0 [ Delay Time 0-3600 s Delay Time O s 6 Mode Direct Direct / Remote / Conditional Test Parameters Monitored: None l Test Precis: Following malfunction actuation, select manualindividual on rod I mode selector switch, group 4 on rod group selector switch and rod i 1 on rod selector switch, then attempt to move rod 1 with the in-Hold-Out switch. Verify that rod 1 does not move. Operator trips the reactor and observes: rod 1 does not insert, reactor power decreases normally, rod position deviation low, low-l low, and reed switch alarms annunciate. r { Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-19857 No i i I 74 l l n

m u a,9 Test Number: 14.5.5.6.6 Malfunction Identifier: CRD6 Test

Description:

Rod clutch failure. The se!ected rod falls into the core or fails to trip. l Initial Conditions: 100% Power, BOL Options Available: Ootions Used: T Selection 1-41 Selection 39 L Magnitude D, E Magnitude D Deenergized/ Energized Ramp Time Ramp Time 0 l Delay Time 0-3600 s Delay Time 60 s Mode Direct Direct / Remote / Conditional i Test Parameters Monitored: Linear range lower detector (A) Linear range lower detector (B) Linear range lower detector (C) Linear range lower detector (D) Linear range upper detector (A) Linear range upper detector (B) Linear range upper detector (C) Linear range upper detector (D) Test Precin: Following nialfunction actuation, observe: rod drop alarms (2), rod indication shov, dropped rod, power dependent insertion limit group 4 alarms, flux decreases most on channel nearest dropped rod, and least on channel furthest from dropped rod.. Operator observes lower flux near the dropped rod on the flux map on ERF computer. Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-19857 No 75

t OPPD Test Number: 14.5.5.6.7 Malfunction Identifier: CRD7 l r Test

Description:

Failure of clutch power supply. The selected power supply (ies) fails. Initial Conditions: 100% power, BOL t Options Available: Ootions Used: i l Selection A-D Selection A l Delay Time 0-3600 s Delay Time 60 s Mode Direct Direct / Remote / Conditional Test Parameters Monitored: None Test Precis: Following malfunction actuation, observe: clutch #1 power supply current decreases to 0, DC power on light extinguishes, clutch #2 power supply current increases. Operator then clears malfunction and observes: clutch power supply currents return to normal and DC power on light illuminates. Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-19857 No { r 76

y- ' ic: . Test Number 14.5.5.6.8 .l ] Malfunction Identifier: CRD8 .. Test

Description:

Rod ejection. The selected control element assembly (CEA) is ejected from the reactor vessel. j Initial Conditions: 30% Power, BOL i Options Available: Options Used: - Selection 1-41 Selection 1 l Magnitude 0-100% Magnitude 100% 100% = 2.75" Diameter Hole Ramp Time Ramp Time O s } Delay Time 0-3600 s Delay Time O Mode Direct Direct / Remote / Conditional Test Parameters Monitored: Pressurizer level i Linear range lower + upper detectors RCS global pressure Containment sump level Containment pressure Containment air particulate activity Containment air noble gas activity Fuel transfer canal area monitor Containment operating floor area monitor Containment air temperature. Containment dew point Test Precis: Following malfunction actuation, observed: reactor coolant system temperature increases indicative of positive reactivity addition, power dependent insertion limit group 4 and rod deviation alarms; pressurizer level decreases with channel X & Y alarms; reactor coolant system pressure drops with channel X & Y alarms; letdown goes to maximum; charging pumps start; containment sump level, temperature, dew point, pressure, and radiation levels rise; reactor trip, SIAS, Operator refers to EOP-3. 4 1 Any Uncorrected Test Failures? No 1 Did this test reveal any exception to ANSI /ANS-3,5-19857 No i 77

' v-ps*: .\\ f. l Test Number: 14.5.5.7.9 Malfunction identifier CVC9 i LTest

Description:

Charging line leak outside containment. A variable size leak occurs l between the charging pump discharge header and FT-236. l Initial Conditions: 100% Power, BOL f Options Available: Options Used: Magnitude 0-100% Magnitude 100% 100% = 2" Line Break Ramp Time 0-3600 s Ramp Time O s i Delay Time 0-3600 s Delay Time O s Mode Direct Direct / Remote / Conditional Test Parameters Monitored: Spent regenerant tank level Stack air particulate radiation monitor l Stack gas radiation monitor i Charging flow l Pressurizer level Volume control tank level '[ SIRWT level .l Regenerative heat exchanger letdown outlet j temperature i Charging temperature Letdown heat exchanger outlet temperature Test Precis: Following malfunction actuation, observe: volume control tank level decreases; charging flow-related alarms annunciate; standby l charging pumps start, discharge pressure decreases; volume control tank auto makeup starts; pressurizer level and pressure decrease; volume control tank low, and low-low level alarms annunciate and charging pump suction switches to the SIRWT; when volume control tank isolates, its level rises; waste disposal j system malfunction alarm annunciates; letdown temperature rises, j alarms and TCV-202 closes; CRHS and VIAS actuate, main stack and process area monitor alarms annunciate. I Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-19857 No l I t 78

go ' 'g e - t c i l w i i L4 . Test Number: 14.5.5.8.2 .i . Malfunction Identifier: CWS2 i Test

Description:

Main condenser tube leak. The failure occurs to a selectable . degree in the selected bundle (s), initial Conditions: 100% Power i

i Ootions Av'ailable:

Ootions Used: l i Selection A-D. Selection A Magnitude 0-100% Magnitude 100% 100% = 10% Of The Tubes j i Ramp Time 0-3600 s Ramp Time 0 l Delay Time 0-3600 s Delay' Time 0 Mode Direct l Direct / Remote / Conditional i Test Parameters Monitored: None Test Precis: Following malfunction actuation, observe: condenser A outlet j pressure decreases and hotwell level rises, hotwell high level. j alarm; condensate storage tank level rises; generator megawatts decrease with no rod movement or other operator actions. Any Uncorrected Test Failures? No i Did this test reveal any exception to ANSI /ANS-3.5-1985? No l 1 79

. v 1

C-id 3 1 J Test Number: 14.5.5.9.2 Malfunction identifier: DSG2 . Test

Description:

Diesel generator fuel transfer pumps discharga leak. A variable size leak occurs on the selected diesel's fuel transfer pumps' discharge. t. Initial Conditions: 100% Power, BOL Options Available: Ootions Used: Selection A,8 Selection A Magnitude 0-100% Magnitude 100 100% = 1" Line Break Ramp Time 0-3600 s Ramp Time O s Delay Time 0-3600 s Delay Time 0 s Mode Direct i Direct / Remote / Conditional Test Parameters Monitored: None Test Precis: Following malfunction actuation observe: fuel oil level in 300 gallon tank decreases, level rises in spent regenerant tank due to floor drain inflow. Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-19857 No ) l i 80

+,. y. rg es ,e i 4 i ' Test Number: : l 14.5.5.9.8 i Malfunction' identifier: DSG8 Test

Description:

Diesel generator failure to start. The selected diesel generator cranks but fails to stad. Initial Conditions: 100% Power, BOL Ootions Available: Ootions Used: Selection A,8 Selection A' - . Delay Time 0-3600 s Delay Time O s i Mode Direct Direct / Remote / Conditional Test Parameters Monitored: None i Test Precis: Following malfunction actuation, operator attempts to start DG-1 with emergency pushbutton and observes: start status light 4 illuminates, then the diesel start fail and trouble alarms annunciate; the engine stopped status light illuminates. I Operator attempts to start diesel until starting air is exhausted. Any Uncorrected Test Failures? No Did this test reveal any exception to ANSl/ANS-3.5-19857 No t-t f P f i .l 81 i i l t

m.. v7 i f _C ' 3: .. g l i ( - 14.5.5.11.1 Test Number: .r Malfunction identifier: EDS1 Test

Description:

4160 VAC bus fault. The selected bus (ses) is lost due to a single phase to ground fault on the bus. Initial Conditions: 100% Power, BOL " ' ions Available: Options Used: Selection A-D Selection C Delay Time 0-3600 s Delay Time O s Mode Direct l Direct / Remote / Conditional Test Parameters Monitored: Breaker T18-3B ammeter Breaker T18-3C ammeter i Transformer T1 A3 current i Bus 183A voltage Bus 1838 voltage Bus 183C voltage Transformer T1 A3 secondary wattage 4160V bus 1 A3 voltage Test Precis: Following malfunction actuation, observe: DG-1 start, breaker 1 A33 trip and lockout, 86/1 A33 alarm; lockout relay supervision tripped, diesel auto start demand, breaker off auto alarms; bus 1 A3 voltage goes to 0; 4160 bus ground alarm comes in then clears; bus 1 A3 - low voltage and breaker auto trip alarms; transformer lockout relay 86-1 A3-TFB picks up alarms; 4160 V bus 1 A3 feeder auto trip,480 V bus low voltage, breaker off auto, Diesel auto start demand alarms annunciate; 4160/480 V transformer voltages and currents j go to 0; 4160V and 480V breakers trip with attendant alarms; I power lost to busses 1 A3,1C3A,183A-D,183A-4A & 183C-4C; reactor trip with low flow alarm. Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-19857 No i 82 i i

df l[ i ? t Test Number. 14.5.5.11.2 M Malfunction Identifier. EDS2 L F Test

Description:

480 VAC bus fault. The selected bus (ses) is lost due to a single phase to ground fault on the bus on phase 2. ~ Initial Conditions: 100% Power, BOL l Options Available: Ootions Used: Selection A-l Selection A Delay Time 0-3600 s Delay Time O s i Mode Direct Direct / Remote / Conditional f Test Parameters Monitored: None f Test Precis: Following actuation, observe sequential 480V bus alarms followed by respective breaker tripping,-then phase current and voltage go .to 0. Selected 480V load breakers trip open (charging pump, ventilation, and other operating loads on bus). Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-19857 No i 'l i i 83

g_ v n q Test Number: 14.5.5.11.3 Malfunction Identifier EDS3 Test

Description:

125 VDC bus fault. The selected bus (ses) is lost due to a short on the bus. Initial Conditions: 100% Power, BOL Options Available Options Used: Selection A,8 Selection A Ramp Time 0-3600 s Ramp Time O s Delay Time 0-3600 s Delay Time O s Mode Direct Direct / Remote / Conditional Test Paramet Monitored: Battery 1 ammeter 125V DC charger 1 ammeter 125V DC bus #1 voltmeter Test Precis: i:ollowing malfunction actuation, observe DC Bus #1 ground alarm. After approximately 15 seconds observe: DC bus 1 ground light illuminates, battery charger feeder trips, output current goes to 0; output current goes to maximum; bus current goes to 0; inverter A, C & 1 trouble, DC bus 1 low voltage, panel Al-41 A undervoltage, 125 VDC Euxiliary supply not available-D2 alarms; r.ormal source 125 VDC, t,ettery #1 (Normal) 125 VDC, DC distribution panel 1 lights out; powcr loss to 125 VDC loads and control power. Any Uncorrected Test Failures? No Did this test reveal any exception to ANS!/ANS-3.5-1985? No 84

W X. #g- ._ g,. 1 f Test Number:. 14.5.5.11.4 ~ Malfunction Identifier: EDS4 Test

Description:

120 VAC instrument bus fault. The selected bus (ses) is lost due to j single phase to ground fault on the bus. i l -- Initial Conditions: 100% Power l Options Available: Ootions Used: + Selection A-F Selection A .i Ramp Time 0-3600 s Ramp Time O s Delay Time 0-3600 s Delay Time 300 s j Mode Direct Direct / Remote / Conditional 'l Test Parameters Monitored: 120V AC inverter ammeter 120V AC bus A voltmeter l Test Precis: Following malfunction actuation, observe bus ground light goes i bright. After approximately five minutes observe: bus feeder breaker trips, inver+9r output current pegs high, then goes to 0, bus l voltage goes to 0, bw voltage alarm annunciates, and loss of power to associated loads is experienced. l t Any Uncorrected Test Failures? No i Did this test reveal any exception to ANSI /ANS-3.5-19857 No I -I l l } i i 85 j

=.. - ~ o.

. d

. gs. 'l i 'f Test Number:: 14.5.5.11.6 i Malfunction Identifier: EDS6-j F l . Test

Description:

480 VAC supply transformer fault. The selected 4160/480 VAC supply transformer is lost due to a single-phase to ground fault. i Iratial Conditions: 100% Power Options Available; Ootions Used: i i Selection A-F Selection A Ramp Time 0-3600 s Ramp Time O s 1 l Delay Time 0-3600 s Delay Time O s Mode Direct j Direct / Remote / Conditional q Test Parameters Monitored: Transformer T1B-3A current j i Test Precis: Following malfunction actuation, observe: transformer high winding. i temperature alarm is received, transformer feeder breaker trips, transformer output voltage and current go to zero with associated alarms, and power is lost to loads supplied. -i Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-19857 No - 'f t i l i i 86 ,n,,,, --e - - - - s .,, - - - - -., -,, - ~ - - - - -

0 1 2 c Test Number: 14.5.5.11.11 ^ Malfunction Identifier-EDS11 Test

Description:

Switchyard line fault. A single phase to ground fault occurs on phase A of the selected line. initial Conditions: 100% Power, BOL Options Available: Options Used: Selection A, B, C Selection C Delay Time 0-3600 s Delay Time O s Mode Direct Direct / Remote / Conditional Test Parameters Monitored: None Test Precis: Following malfunction actuation, observe: relay 87161 picks up causing lockout relay supervision tripped alarm; relay 86-161 trip with 161 KV alarm; relays 86-1 & 2/T1 A-3 trip and DG-1 starts at idle, relays 86-1/T1 A-4 & -2/T1 A-4 trip, with DG-2 starting at idle and breakers 1 A13 & 1 A24 close with alarms; transformers T1 A-4 & -3 watts, current, and voltage go to 0; T1 A-1 & -2 wattage and current rise. i Any Uncorrected Test Failures? No 1 Did this test reveal any exception to ANSI /ANS 3.5-1985? No i 87

c. o f Test Number. 14.5.5.11.12 Malfunction identifier. EDS12 j Test

Description:

Switchyard breaker fault. The selected breaker contacts weld shut or the selected breaker trip mechanism activates. Initial Conditions: 100% Power, BOL Options Available: Ootions Used: Selection A, B, C Selection A Magnitude O, C Magnitude O Open, Fails To Open Delay Time 0-3600 s Delay Time O s Mode Direct Direct / Remote / Conditional Test Parameters Monitored: None Test Precis: Following malfunction actuation, observe breaker 3451-4 opens i with alarm. Operator opens breaker 3451-4 control switch and observes that alarm clears. Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-19857 No l l 1 88 j i i

a n s. a.. u . go (, i Test Number: 14.5.5.12.1 ' Malfunction identifier: EHC1 Test

Description:

Electrohydraulic fluid system leak. A variable size leak occurs on i the electrohydraulic fluid accumulator inlet line. 1 Initial Conditions: 100% Power i Options Available: Options Used: l Magnitude 0-100% Magnitude 100 100% = Double Ended Shear i Ramp Time 0-3600 s Ramp Time 60 s Delay Time 0-3600 s Delay Time O s Mode Direct Direct / Remote / Conditional Test Parameters Monitored: Hydraulic fluid levelin reservoir Fluid actuator system (FAS) fluid pressure Hydraulic fluid pump A Hydraulic fluid pump B Test Precis: Following malfunction actuation, observe: electrohydraulic control fluid pressure decreases, current rises, standby pump starts with alarm and pressure decreases more slowly; hydraulic oil press low, hydraulic power unit fluid level high-low alarms; turbine and reactor trip; EHC mechanical, emergency lights illuminate, hydraulic fluid - i pressure light goes out; all turbine stop, control and combined intercept valves close. After 5-10 minutes, observe hydraulic fluid pressure pump A & B stopped alarms. l Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-19857 No 4 h i 89

,o r .o Test Number: 14.5.5.12.6 Malfunction identifier EHC6 Test

Description:

Load limit potentiometer failure. The load limit potentiometer's output fails to change in the selected deadband. Initial Conditions: 50% Power Options Available: Ootions Used: Magnitude 0-5% Magnitude 5% Magnitude is % of potentiometer range Ramp Time 0-3600 s Ramp Time O s Delay Time 0-3600 s Delay Time O s Mode Direct Direct / Remote / Conditional Test Parameters Monitored: None Test Precis: Following actuation, operator slowly raises load with the load limiter and observes erratic potentiometer behavior. After load is raised past deadband selected; observe smooth potentiometer operation. Then lower load and observed erratic potentiometer operation when deadband is reached again. Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-19857 No L 90

,y-r e Test Number: 14.5.5.13.1 Malfunction Identifier: ESF1 Test

Description:

Steam generator low pressure logic matrix failure. The logic matrix for the selected train (s) fails to the selected condition (s). Initial Conditions: 100% Power, EOL t Options Available: Options Used: Selection A, B Selection A 7 Magnitude T F Magnitude T T= On (ACT), F=Off t Delay Time 0-3600 s Delay Time 0 s Mode Direct Direct / Remote / Conditional Test Parameters Monitored: None i Test Precis: Following malfunction actuation, observe indications of SGLS & SGIS actuation; reactor trips, reactor coolant system temperature response tracks main steam safety valve cycling, pressurizer level response follows T., (program setpoint), pressurizer pressure and level alarms annunciate. Feedwater controller level alarms annunciate, steam generator pressures rise, steam generator levels decrease, steam generator feedwater and steam flows go to 0, feedwater pump discharge pressure rises and suction flow I decreases, feedwater recirculation valves open. Condensate pumps discharge low flow alarms annunciate. Observe the l following: reactor coolant system temperature and pressure stabilize at temperature corresponding to main steam safety valve setpoints, steam generator levels decrease, auxiliary feedwater actuation system actuation with appropriate alarms and actions. l Observe proper auxiliary feedwater flow to steam generators. Verify propar cycling of auxiliary feedwater valves and attendant alarms as steam generator levels vary between actuation and reset setpoints. Any Uncorrected Test Failures? No Did this test reveal ay exception to ANSl/ANS-3.5-1985? No ) 91 ) i l

[ e: o Test Number 14.5.5.13.2 Malfunction Identifier. ESF2 Test

Description:

Containment high pressure logic matrix failure. The logic matrix for the selected train (s) fails to the selected condition (s). Initial Conditions: 100% Power, BOL U Ootions available: Ootions Used: Selection A, B Selection A Magnitude T, F Magnitude T T= On (ACT), F=Off Delay Time 0-3600 s Delay Time O Mode Direct Direct / Remote / Conditional Test Parameters Monitored: None Test Precis: Following malfunction actuation, observe: CPHS, S!AS, and 480V load shed actuate with associated alarms and indications; SGIS actuates with associated valve closures and alarm annunciation; reactor trip alarms. Diesel generators start, load sequencers S1-1 & S2-2 actuate with associated alarm annunciation; CIAS and VIAS actuate with associated alarms. Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-19857 No 92

8 .o o Test Number 14.5.5.13.5 Malfunction identifier: ESF5 Test

Description:

Pressurizer low pressure logic matrix failure. The logic matrix for the selected train (s) fails to the selected condition (s). Initial Conditions: 100% Power, BOL Options Available: Options Used: Selection A, B Selection A Magnitude T, F Magnitude T T= On (ACT), F=Off Delay Time 0-3600 s Delay Time O s Mode Direct Direct / Remote / Conditional Test Parameters Monitored: None Test Precis: Following malfunction actuation, observe: PPLS actuates with associated alarm annunciation; SlAS, diesel generator start, and CIAS signals received, sequencers S1-1 and S2-2 actuate. Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-19857 No 93

e o-o Test Number: 14.5.5.13.10 Malfunction identifier: ESF10 Test

Description:

Safety injection actuation signal failure. The actuation signal for the selected train (s) fails to the selected condition (s). Initial Conditions: 100% Power, BOL Options Availab_le; Options Used: Selection A, B Selection A Magnitude T, F Magnitude T T= On (ACT), F=Off Delay Time 0-3600 s Delay Time O s Mode Direct Direct / Remote / Conditional Test Parameters Monitored: None Test Precis: Following malfunction actuation, observe: SIAS will actuate with annunciation on panels Al-30A/B and the ERF. Valves will go to their accident positions,480V load shed will initiate and emergency boration will commence. SIAS actuation will also cause VIAS actuation. I Any Uncorrected Test Failures? No Did this test reveal any exception to ANSl/ANS-3.5-19857 N f i i 94

pt

f. -

' Test Number: 14.5.5.13.12 i Malfunction Identifier: ESF12 Test

Description:

OPLS logic matrix failure. The logic matrix for the selected train (s). fails to the selected condition (s). i Initial Conditions: 100% Power, BOL Options Available: Options Used: Selection A,8 Selection A i Magnitude T, F Magnitude T' T = On (ACT), F=Off Delay Time 0-3600 s Delay Time O s Mode Direct Direct / Remote / Conditional Test Parameters Monitored: None Test Precis: Following malfunction actuation, observe: 86A/OPLS trips with alarm; breakers 1 A13 & 1 A33 trip, DG-1 starts and accelerates to 900 rpm, bus 1 A3 load sheds; breakers 1 A24 & 1 A44 trip, DG-2 i starts and accelerates to 900 rpm, bus 1 A4 load sheds; supply t breakers to MCC-3B2, -383, -3C-4C-1 deenergize; associated i loads trip. Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-19857 No f i f ? Y 95 i

0 (9 ,y u .l Test Number: 14.5.5.14.2 Malfunction identifier: FDW2 Test

Description:

Main feedwater header leak. A variable size leak occurs on the l main feodwater header. i Initial Conditions: 50% Power Ootions Available: Ootions Used: j i Magnitude 0-100% Magnitude 50% 100% = 18" Diameter Break Ramp Time 0-3600 s Ramp Time 600 s. Delay Time 0-3600 s Delay Time O s l i Mode Direct t Direct / Remote / Conditional Test Parameters Monitored: Main feedwater pump (s) suction flow Main feedwater pump (s) discharge pressure t Steam generator levels Main feedwater header flows Test Precis: Following actuation, observe: heater 6 A/B outlet, feedwater pump discharge pressures decrease; feedwater pump suctiori flow rises; steam generator feedwater flows and levels decrease; feedwater control steam generator low alarms annunciate, turbine building sump high level alarms annunciate, reactor trip. i l' Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-19857 No l I i f i I 96

i .jo. .fe. i l Test Number: 14.5.5.14.3 i Malfunction Identifier: FDW3 Test

Description:

Main feedwater line leak upstream of the flow control valve. A I variable size leak occurs on the selected feed line(s) between the l flow element and the flow control valve. Initial Conditions: 100% Power, BOL i Ootions Available: Ootions Used: Selection A, B Selection A j Magnitude 0-100% Magnitude 10% i 100% = 16" Diameter Break j Ramp Time 0-3600 s Ramp Time 0 s Delay Time 0-3600 s Delay Time O s Mode Direct Direct / Remote / Conditional l Test Parameters Monitored: Steam generator levels l i Main feedwater flows Feedwater regulating valves' positions i Test Precis: Following malfunction actuation, observe: steam generator RC-2A feedwater flow rises, level decreases, feedwater regulating valve A l position increases, low level alarm annunciates, steam generator B j level decreases slower than steam generator A, steam generator A low level causes reactor trip; Any Uncorrected Test Failures? No i Did this test reveal any exception to ANSI /ANS-3.5-19857 No j i i l 97 w .-m.- e tv r

p Test Number: 14.5.5.14.5 Malfunction Identifier: FDW5 Test

Description:

Main feedwater line leak inside containment. A variable size leak occurs on the selected feed line(s) downstream of the check valve. Initial Conditions: 100% Power, BOL Options Available: Options Used: Selection A, B Selection A Magnitude 0-100% Magnitude 100% 100% = 16" Diameter Break Ramp Time 0-3600 s Ramp Time O s Delay Time 0-3600 s Delay Time 0 s Mode Direct Direct / Remote / Conditional Test Parameters Monitored: Steam generator steam /feedwater flows A steam generator level / pressure RCS pressure and temperatures Containment pressure and sump level Test Precis: Following malfunction actuation, observe: steam generator feedwater flow rises, steam generator RC-2A pressure & level decrease; steam generator RC-2A low level alarm annunciates; reactor trips; steam generator low level, low pressure channel pre-trip & trip alarms annunciate. steam generator 2A steam flow, pressure and level decrease to 0 and SGIS actuates as steam generator boils dry. Containment sump high level alarm annunciates. RCS temperature & pressure, and pressurizer level decrease; SIAS actuates at 1600 psia. Containment high pressure alarms annunciate and CPHS actuates. Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-19857 No 98

_o

.s e t ' Test Number: 14.5.5.16.1 ~ Malfunction Identifier: FWH1 i Test

Description:

Feedwater heater tube leak. Tube failure occurs to a selectable degree in the selected heater (s). l l Initial Conditions: 100% Power, BOL i Options Available: . Ootions Used: l i Selection A-L - Selection. K (6A) l l Magnitude 0-100% Magnitude' 100% 100% = 10% Of Tubes Ramp Time 0-3600 s Ramp Time 0 s Delay Time 0-3600 s Delay Time O s .t Mode Direct Direct / Remote / Conditional Test Parameters Monitored: Steam generator transmitted levels (NR) Condenser steam pressure Gross generator electrical power output (MW) Heater 6A level control Heater SA level control i Second stage extraction pressure j Heater 6A drain temperature. Test Precis: Following malfunction actuation, observe: heater BA level and extraction pressure rising, drain temperature decreases; heater SA level rises rapidly; steam generator level decreasing and feedwater flow rising; hotwell level rising, heater 6A extraction valve closes, and condenser vacuum decreasing due to 6A high level dump; i standby vacuum pumps start; heater 6A high-low level alarm; generator megawatts decrease. Any Uncorrected Test Failures? No i Did this test reveal any exception to ANSI /ANS-3.5-19857 No 99

.}c c ge h-t Test Number. - 14.5.5.17.1 Malfunction identifier GEN 1 Test

Description:

Voltage regulator failure. The voltage regulator changes the output voltage to the setpoint selected. Initial Conditions 100% Power Ootions Available: Ootions Used: Selection A, B Selection A A= Auto Regulator, B=Manua! Magnitude 80-120% Magnitude 120% 100% = Rated Voltage Ramp Time 0-3600 s Ramp Time 60 s f Delay Time 0-3600 s Delay Time O s Mode Direct Direct / Remote / Conditional Test Parameters Monitored: Generator field ammeter Power factor meter Generator output imaginary power (MVARS) Main generator current Generator field voltage meter Test Precis: Following malfunction actuation, observe: generator picks up more reactive load; leading power factor rises; voltage regulator transfer voltage rises; field current and voltage, and generator output current rise with field overvoltage alarm. After 10 seconds, voltage regulator trips to manual mode with alarm; parameters effected retum to pre-malfunction conditions, except the voltage regulator transfer volt meter. Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-19857 No + l 100

C C - g i l Test Number. 14.5.5.17.4 Malfunction Identifier: GEN 4 Test

Description:

Field breaker failure. The field breaker fails to the position selected. Initial Conditions: Approximately 12% reactor power, turbine at 1800 RPM Options available: Options Used: Magnitude O, C Magnitude O Open, Closed Delay Time 0-3600 s Delay Time O Mode Direct Direct / Remote / Conditional Test Parameters Monitored: None Test Precis: Following malfunction actuation, operator starts up generator and observes: field breaker does not close, field breaker mismatch light i illuminates, and exciter field breaker tripped alarm annunciates. Operator returns field breaker control switch to OFF and observes that above alarms and indications retum to normal. Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-19857 No [ 101

-C1 , 4.. Test Number-14.5.5.18.1 . Malfunction Identifier MSS 1 l Test

Description:

Main steam line leak inside containment. A variable size leak occurs on the selected steam line inside containment. i - Initial Conditions: 100% Power, BOL l Options Available: Options Used: 1 Selection A,8 Selection A Magnitude 0-100% Magnitude 100% 100% = 28" Diameter Break Ramp Time 0-3600 s Ramp Time 60 s Delay Time 0-3600 s Delay Time 0 s i Mode Direct Direct / Remote / Conditional Test Parameters Monitored: Steam generator wide range levels Total containment pressure i RCS global pressure Steam generator steam pressures j Containment temperature Wide range cold leg temperatures Wide range hot leg temperatures Auxiliary feedwater flows to steam generators l Feedwater flows to steam generators l Steam line flows to main steam header Test Precis: Following malfunction actuation, observe: steam generator RC-2A steam pressure drops, steam temperature and flow decrease; RC-2B, main steam, and turbine first stage pressure and temperature decrease; steam generator levels and RCS temperature decrease; l T,/T,, deviation alarms annunciate; RCS pressure decreases with alarms; pressurizer heaters energize; letdown flow decreases to minimum; pressurizer level channel X & Y alarms; steam generator i low level alarms; containment pressure rises with alarms; reactor trips, CPHS, SlAS, VIAS, CIAS, SGLS, AFWS all actuate with alarms, actions, and indications; containment sump level rises with l' attendant alarms. Following AFWS, operator verifies no auxiliary feedwater flow to steam generator RC-2A; RC-28 level recovers, RC-2B pressure rises to main steam safety valve setpoint. j i 102 i e i ~

f.~ . gi i Any Uncorrected Test Failures? No i Did this test reveal any exception to ANSI /ANS-3.5-19857 No i f r i i l i l 103

,e gii l Test Number 14.5.5.18.3 Malfunction identifier. MSS 3 Test

Description:

Main steam line leak outside containment (non-isolable). A variab!e size leak occurs on the selected steam line outside of containment. Initial Conditions: 100% Power, BOL Options Available: Options Used: Selection A. B Selection A Magnitude 0-100% Magnitude 100 100% = 28" Diameter Break Ramp Time 0-3600 s Ramp Time 600 s Delay Time 0-3600 s Delay Time O s Mode Direct Direct / Remote / Conditional Test Parameters Monitored: Steam generator pressures and levels RCS temperatures and pressure Charging and letdown system pressures and flows Test Precis: Following malfunction actuation, observe: steam generator RC-2A i steam pressure, temperature, and flow decrease; RC-28 pressure and temperature decrease, flow rises; main steam and turbine first stage pressure decrease; RC-2A level swells, then decreases with low level alarm; RC-2B level, RCS temperature and pressure l decrease; T,,,/T, deviation and pressurizer pressure channel X & Y alarms; pressurizer backup heaters energize; TM/LP pre-trip and trip, subcooled margin low, high power pre-trip and trip alarms; reactor trip; pressurizer Si signal low-low alarms; PPLS actuation, and ERF indications; pressurizer level drops, letdown flow goes to minimum, high-low channel X & Y alarms, standby charging pumps start; volume control tank level decreases with suction switch over to SIRWT, VCT low-low level alarms; pressurizer low-low channel X & Y alarms, backup heaters de-energize; SIAS, VIAS, CIAS, SGLS, j and AFWS actuations with actions and alarms; auxiliary feedwater flow to RC-2B; reactor coolant pumps cavitate; pressurizer and RC-l 2B levels recover; RC-28 pressure rises to main steam safety valve 1 setpoint. Operator stops reactor coolant pumps when cavitation is observed 104

i .o Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-19857 No j i t i P k e L r s 3 I I i 1 105 J

ia:

si I

[ Test Number: 14.5.5.18.5 i t Malfunction Identifier: MSSS i Test

Description:

Main steam isolation valve (MSIV) failure. The selected MSIV(s) fails closed. } f Initial Conditions: 100% Power, BOL-i Qptions Available: Ootions Used: -l Selection A, B Selection A l l ' Delay Time 0-3600 s Delay Time O s i Mode Direct Direct / Remote / Conditional Test Parameters Monitored: None i Test Precis: Following malfunction actuation, observe: steam generator RC-2A - i steam pressure increases; reactor coolant system temperatures .[ increase due to loss of heat sink. Pressurizer pressure and level increase, pressurizer spray valves open. Reactor trip due to ASGT. l Any Uncorrected Test Failures? No j Did this test reveal any exception to ANSl/ANS-3.5-19857 No { ? i i i f i i 106

.~ = . i' - .o A Test Number: 14.5.5.18.6 Malfunction Identifier: MSS 6 i Test

Description:

Main steam line to turbine driven auxiliary feedwater pump (TDAFWP) leak. A variable size leak occurs on the selected line(s) l supplying the TDAFWP between the stop valve & check valve. initial Conditions: 100% Power, BOL Options Available: Options Used: Selection A, B Selection A Magnitude 0-100% Magnitude 100 100% = 2" Diameter Break i Ramp Time 0-3600 s Ramp Time O s i Delay Time 0-3600 s Delay Time 0 s Mode Direct Direct / Remote / Conditional i Test Parameters Monitored: None Test Precis: Following malfunction actuation, observe the FW-10 red light on and the auxiliary oil pump stops, when steam driven pump is supplied from unaffected steam line. Operator closes HC-1045B and observes FW-10 red light off, recirculation valves open, FW-10 running alarm clears, recirculation flow = 0. (pump stops). Operator opens HC-10458, resets trip latch and YCV-1045, then observes: t FW-10 red light on then off, recirculation valve opens, FW-10 running alarm. Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-1985? No [ 107 f .e e-. r-w

. ;y h: p . Test Number: 14.5.5'18.7 -l -Malfunction Identifier: MSS 7 i ) Test

Description:

Main steam header leak. A variable size leak occurs on the common main steam header. 1 Initial Conditions: 100% Power, BOL l Options Available: Ootions Used: Magnitude 0-100% Magnitude 10% 100% = 36" Diameter Break Ramp Time 0-3600 s Ramp Time 600 s l Delay Time 0-3600 s Delay Time 0 s Mode Direct Direct / Remote / Conditional l Test Parameters Monitored: RCS pressure Generator megawatts l Steam generator steam flows 'i Test Precis: Following malfunction actuation, observe steam generator and l main steam header pressures decrease. Generator megawatts-decrease, RCS cold leg temperatures decrease as steam generator steam flows increase. Turbine building sump level increases. RCS T decreases, reactor power increases. Condensate storage tank level decreases. Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-19857 No I ( b 108 b -m.~ _.,-4

?L. g g2. Test Number: 14.5.5.19.2 Malfunction Identifier: NIS2 Test

Description:

Wide range power supply failure. The selected power supply for the selected channel (s) fails. Initial Conditions: Cold Shutdown Conditions, BOL Options Available: Options Used: Selected Channel A-H Selected Channel: A Delay Time 0-3600 s Delay Time O s l Mode Direct Direct / Remote / Conditional Test Parameters Monitored: None Test, 'recis: Selected drawer power on light goes out, allindications go to zero, high voltage meter goes to zero, nuclear instrumentation channel inoperative annunciator alarms, extended range circuit deenergizes. Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-19857 No 109

~. ,l: j b Test Number: 14.5.5.19.7 Malfunction Identifier NIS7 1 Test

Description:

Power range power supply failure. The high voltage power supply. for the selected channel (s) fails. Initial Conditions: 100% Power, BOL { Ootions Available: Options Used: Selection A-F Selection E Delay Time 0-3600 s Delay Time 60 s Mode Direct Direct / Remote / Conditional Test Parameters Monitored: None Test Precis: Following malfunction actuation, observe: high voltage detector meter fails to 0, bistable trip light illuminates, nuclear instrumentation channel inoperative alarm, upper and lower power level meters fail to 0, rod drop bistable trip with alarms, level 1 trip light goes out, power on light remains lit. Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-19857 No I l } e ? ) ) 110

.j' :

f8 Test Number

14.5.5.20.4 Malfunction Identifier: PRS 4 Test

Description:

Pressurizer steam space leak. A variable size leak occurs from the-upper head of the pressurizer. Initial Conditions: 100% Power, BOL - f Ootions Available: Ootions Used: Magnitude 0-100% Magnitude 100 - 100% = 8" Diameter Hole Ramp Time 0-3600 s Ramp Time 60 s Delay Time 0-3600 s Delay Time O s Mode Direct Direct / Remote / Conditional Test Parameters Monitored: Containment pressure RCS global pressure Test Precis: Following malfunction actuation, observe: pressurizer pressure decreases, level increases, backup heaters energize; charging flow, containment pressure, temperature, activity, dew point, and sump level rise. Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-19857 No t 111

J l .-Test Number: 14.5.5.20.5 j - Malfunction Identifier-PRSS-Test

Description:

Pressurizer power operated relief valve (PORV) failure. The j selected PORV(S) fails to the position selected. j i ~ Initial Conditions: 100% Power, BOL -l 1 Options Available: Options Used: Selection A, B Selection A Fail Position 0-100% Magnitude 100% Ramp Time 0-3600 s Ramp Time 60 s Delay Time 0-3600 s Delay Time 0 s Mode Direct ^ Direct / Remote / Conditional l Test Parameters Monitored: Total containment pressure l RCS global pressure Pressurizer level l Pressurizer quench tank level Pressurizer quench tank pressure j Containment temperature Test Precis: Following malfunction actuation, observe: acoustic monitor and alarm indicate PORV is open; pressurizer pressure decreases; l PORV discharge temperature rises and alarm annunciates; pressurizer goes " solid" and depressurization rate rises, high-low -l level channel X & Y TM/LP pre-trip, and subcooled margin low alarms annunciate; reactor trips on TM/LP with alarms; pressurizer -I low-low pressure alarms; PPLS actuates; pressurizer quench tank pressure, temperature and level rise with attendant alarms, rupture [ disc blows at 75 psig with rapid pressure drop; containment pressure, dew point, temperature, activity and sump level rise. Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-19857 No j i I 112 I i I

]?: y 'I i I i i Test Number: - 14.5.5.20.9 Malfunction Identifier PRS 9 ~i Test

Description:

Pressurizer level instrumen'.ation tap leak. A variable size leak on j the pressurizer instrument tap. l ' initial Conditions: 100% Power, BOL l Options Available: Options Used: .l Selection' A-D . Selection A _ j Magnitude 0-100% Magnitude 20% f 100% = 1" Diameter Hole Ramp Time 0-3600 s Ramp Time 60 s Delay Time 0-3600 s Delay Time 0 s Mode Direct l 7 Direct / Remote / Conditional Test Parameters Monitored: RCS global pressure Pressurizer pressure t Test Precis: Following malfunction actuation, observe: pressurizer pressure-decreases to lower limit, low-low pressure alarms, channel A TM/LP trip with (3) alarms, PPLS matrix lights change state. Operator bypasses trip unit and verifies yellow light on. Any Uncorrected Test Failures? No } Did this test reveal any exception to ANSl/ANS-3.5-19857 No l l I { .t i 113

,e 4 Test Number 14.5.5.21.1 Malfunction Identifier: RCP1 Test

Description:

Reactor coolant pump (RCP) iube oil cooler leak. A variable size leak occurs between component cooling water and the lube oil systems of the selected reactor coolant pump upper tube oil cooler. Initial Conditions: 100% Power, BOL Options Available: Options Used: Selection A-D Selection A Magnitude 0-100% Magnitude 100% 100% = 10% of tubes Ramp Time 0-3600 s Ramp Time 60 s Delay Time 0-3600 s Delay Time O s Mode Direct Direct / Remote / Conditional Test Parameters Monitored: RCP upper oil reservoir level RCP speed RCP lower thrust bearing temperature RCP upper thrust bearing temperature RCP upper bearing temperature Lube oil cooler flow RCP reverse flow switch Vibration Test Precis: Following malfunction actuation, lube oil leaks into the component cooling water system. Observe: component cooling water from RCP-3A lube oil cooler high temperature alarm; lube oil flow and reservoir level decrease with attendant alarms; reactor coolant pump bearing temperatures rise; lube oil levels fluctuate; reactor coolant pump high vibration alarm; reactor coolant pump trips with attendant alarm; reactor trip. Any Uncorrected Test Failures? No Did this test reveal any exception to ANSl/ANS-3.5-19857 No 114

af

o i

i i Test Number: ' 14.5.5.21.3 j Malfunction Identifier: RCP3 Test

Description:

Reactor coolant pump (RCP) guide bearing failure. The selected .l bearing (s) fails.- Initial Conditions: 100% Power, BOL E Ootions Available: Ootions Used: 3 Selection A-H Selection B Magnitude 0-100% Magnitude 100% l Ramp Time 0-3600 s Ramp Time 60 s i Delay Time 0-3600 s Delay Time O s Mode Direct Direct / Remote / Conditional j Test Parameters Monitored: RCP speed (RPM) RCP upper guide bearing temperature l RCP current i RCP vibration ia l Test Precis: Following malfunction actuation, observe: RCP-3A upper guide ) bearing temperature rises with attendant alarm, RCP-3A high vibration alarm, pump seizes. Reactor trips due to low RCS flow. j i Any Uncorrected Test Failures? No { Did this test reveal any exception to ANSI /ANS-3.5-1985? No j 1 I 115 l

,r f. Test Number: 14.5.5.21.9 Malfunction Identifier: RCP9 Test

Description:

Reactor coolant pump (RCP) lower seal failure. The lower seal on the selected RCP(s) fails. Initial Conditions: 100% Power, BOL Options Available: Options Used: Selection A-D Selection A Magnitude 0-100% Magnitude 100% 100% = Complete Seal Fail Ramp Time 0-3600 s Ramp Time 60 s Delay Time 0-3600 s Delay Time O s Mode Direct Direct / Remote / Conditional Test Parameters Monitored: RC-3A controlled bleed-off pressure RC-3A middle seal pressure RC-3A upper seal pressure RC-3A seal bleedoff temperature RCP 3A main header flow Test Precis: Following malfunction actuation, observe: RCP-3A middle seat inlet pressure rises from 1400 to 2100 psia with attendant ERF alarm; upper seal inlet and outlet pressures and seal bleedoff flow may rise, seal leakage high flow alarm annunciates. Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-19857 No 116

,e ;. ge' t t -i e j E Test Number;' 14.5.5.22.1-l Malfunction Identifier: RCS1 'l Test

Description:

RCS loop leak. A variable size leak occurs on the selected RCS l loop (s).- Initial Conditions: 100% Power, BOL Ootions Available: Ootions Used: I Selection A-H Selection C l Magnitude 0-100% Magnitude 10% 100% = Line Diameter Ramp Time 0-3600 s Ramp Time O s Delay Time 0-3600 s Delay Time O s l Mode Direct Direct / Remote / Conditional l l Test Parameters Monitored: Reactor vessel mixture level HPSI flow indication l P essun vel SI-6AB/C/D levelIndication i SIRWT level Pressurizer pressure Wide range containment pressure Containment air temperature Core exit thermocouple i Test Precis: Following mr.itunction actuation, observe: RCS pressure drops rapidly with losv pressure channel X & Y alarms; TM/LP pre-trip and subcooled ma gin low alarms; reactor trips on TM/LP with attendant l alarms and indications. Operator verifies reactor trip response, then observes: (4) pressurizer low-low pressure alarms; PPLS actuation with attendant alarms and actions; pressurizer level drops rapidly l with channel X & Y alarms, reactor vessel decreases; pressurizer backup heaters de-energize; containment pressure rises with attendant alarms; CPHS actuation with attendant actions and alarms; reactor coolant pumps cavitate; safety injection tanks inject i with attendant alarms; containment activity rises and CRHS actuates with attendant alarms and actions; SIAS, VIAS, CIAS, CSAS, SGIS actuate with attendant alarms and actions; j 117 l h J

nf,* ,0 ) .) l containment sump / water level rises with attendant alarms; containment dew point rises; HPSI/LPSI pressure and flows; ' j containment spray flow causes containment pressure decrease; SIRWT level decreases with alarms and actions; RAS actuates with alarms and actions. + i Any Uncorrected Test Failures? No j Did this test reveal any exception to ANSI /ANS-3.5-1985? No i 118

e' f Test Number: 14.5.5.22.3 Malfunction Identifier: RCS3 Test

Description:

Fuel failure. Fuel rods fait causing the reactor coolant system activity to increase. Initial Conditions: 100% Power, BOL Options Available: Ootions Used: Magnitude 0-2% Magnitude 2% Ramp Time 0-3600 s Ramp Time 60 s Delay Time 0-3600 s Delay Time Mode Direct Direct / Remote / Conditional Test Parameters Monitored: CCW header radiation monitor Test Precis: Following malfunction actuation, observe rising RCS activity. Operator inserts a letdown heat exchanger tube leak and observes that the component cooling water radiation monitor signal rises rapidly and process radiation high alarm annunciates. Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-1985? No 119

.)

• o Test Number:

14.5.5.24.1 Malfunction Identifier: RPS1 Test

Description:

Failure of interposing relay. The selected interposing relay (s) fails to the position selected. Initial Conditions: 100% Power, BOL Options Available: Options Used: Selection A-D Selection A Magnitude D, E ivlagnitude D Deenergized, Energized Ramp Time Ramp Time 0 s Delay Time 0-3600 s Delay Time O Mode Direct Direct / Remote / Conditional Test Parameters Monitored: None Test Precis: Following malfunction actuation, observe that the interposing relays de-energize causing a half-trip as indicated by: control power ground, PS1 & PS3 AC trouble, AC on, and DC on lights extinguish; M1 coit voltage goes to 0, trip channel 1 light comes on; output ammeters for PS1 & PS3 decrease, output current meters for PS2 & PS4 rise. Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-1985? No 120

o. '

. J* ' .) Test Number. 14.5.5.24.2 .l [ Malfunction identifier: -RPS2 -Test Descriptionf Reactor protection system (RPS) power supply failure. The l selected ladder logic power supply (ies) fails. j - Initial Conditions: 100% Power, BOL l Options Available: Ootions Used: 'j Selection A-L Selection A Ramp Time Ramp Time 0 s Delay Time 0-3600 s Delay Time Mode Direct 1 Direct / Remote / Conditional l l Test Parameters Monitored: None f Test Precis: Following malfunction actuation, observe: power supply light on RPS power supply drawer goes out, AB-1 & -2 matrix relays de- - energize and status lights go out, a half-trip will occur with attendant indications. l t Operator performs surveillance test on high pressurizer pressure channels for selected channel, but does not bypass trip unit; and - observes TU-8A trip 2 & 3 lights illuminate, but trip 1 light does not. i Any Uncorrected Test Failures? .No l i Did this test reveal any exception to ANSI /ANS-3.5-19857 No f I i I -l 121 I

~. O ~ ') i f t 1 i . Test Number. 14.5.5.24.3. j Malfunction Identifier: RPS3 fl Test

Description:

Failure of axial power distribution (APD) positive limit calculator. - The selected axial power distribution positive limit calculator fails. i l Initial Conditions: 100% Power, BOL l ? Ootions Available: Ootions Used: i Selection A-L Selection A l Selected Output Range Selected 50% 50-150% of Normal Output i } Ramp Time Ramp Time 0 s l Delay Time 0-3600 s Delay Time L 't i Mode Direct Direct / Remote / Conditional I Test Parameters Monitored: None Test Precis: Following malfunction actuation, observe: APD positive limit meter '[ decreases by selected output range. Operator places the meter input selector switch to the positive limit position and verifies that l RPS voltmeter reads the same as the value selected for the malfunction. i Any Uncorrected Test Failures? No 3 Did this test reveal any exception to ANSI /ANS-3.5-1985? No f i i 1 122

o

P Test Number-14.5.5.25.2 Malfunction identifier:

RRS2 Test

Description:

Main feedwater master controller failure. The steam generator level input for the selected master level controller (s) fails to the selected value. Initial Conditions: 100% Power, BOL Qotions Available: Options Used: Selection A, B Selection A Magnitude 0-100% Magnitude 50 Percent of Input Value Ramp Time Ramp Time 0 s Delay Time 0-3600 s Delay Time Mode Direct Direct / Remote / Conditional Test Parameters Monitored: None Test Precis: Following malfunction actuation, observe: main feedwater controller output responds in the proper direction based upon the difference in the magnitude selected and the steam generator level (original input signal). Operator switches selected controller to manual and raises steam generator level while observing low level alarm clears. Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-19857 No 123

~ o' j 3e i Test Number. 14.5.5.25.7 Malfunction identifier: RRS7 Test

Description:

Steam dump quick opening solenoid valve failure. The quick opening solenoid valve fails to the position selected. t initial Conditions: 100% Power, BOL Options Available: Options Used: Selection A-E Selection A Magnitude D, E Magnitude E Deenergized, Energized Delay Time 0-3600 s Delay Time Mode Direct Direct / Remote / Conditional Test Parameters Monitored: None Test Precis: Following malfunction actuation, observe: TCV-909-1 red light on; TCV-909-2,-3,-4 green lights on; steam generators RC-2A and RC-28 steam flows and levels rise; reactor to turbine power mismatch as nuclear power rises and turbine power decreases. Operator closes air to solenoid for TCV-909-1 and observes: green indication light on, RC-2A and RC-2B steam flows decrease, reactor to turbine power mismatch disappears, generator megawatts retum to normal. Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-19857 No 124

~ 4 o:. .jo : i Test Number: 14.5.5.26.3 Malfunction identifier: RWS3 ' Test

Description:

- Raw water supply line break. A variable size leak occurs on the I selected raw water line downstream of the flow element. initial Conditions:- 100% Power, BOL Ootions Available: Ootions Used: Selection A,8 Selection A Magnitude 0-100% Magnitude 100% 100% = 16" Pipe Break Ramp Time 0-3600 s Ramp Time 60 s Delay Time 0-3600 s Delay Time O s t Mode Direct Direct / Remote / Conditional l Test Parameters Monitored: CCW heat exchanger temperatures l Raw water system pressure Letdown heat exchanger outlet temperature Containment cooler outlet temperatures Raw water system header flows Test Precis: Following malfunction actuation, observe: raw water supply flow rises, supply header low pressure alarm annunciates, component cooling water heat exchanger outlet temperature rises, raw water supply pressure decreases, raw water-cooled loads heat up, waste disposal trouble alarm annunciates. i Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-19857 No Y -l 125 I i

,N so I Test Number: 14.5.5.27.2 Malfunction Identifier: SDC2 Test

Description:

Shutdown cooling heat exchanger inlet header leak. A variable size leak occurs on the shutdown cooling heat exchangers' inlet header l between Sl-169 & SI-170. initial Conditions: COLD S/D, BOL Options Available: Options Used: Magnitude 0-100% Magnitude 100% 100% = 12" pipe break Ramp Time 0-3600 s Ramp Time 60 s Delay Time 0-3600 s Delay Time O s Mode Direct Direct / Remote / Conditional Test Parameters Monitored: Shutdown cooling flow Pressurizer level RCS temperatures RCS pressure Test Precis: Following malfunction actuation, observe: shutdown cooling flow and pressure, and pressurizer level decrease; waste disposal system Malfunction alarm; CRHS, and VIAS actuation with attendant alarms and indications; high activity and radiation levels and alarms; RCS temperature rises; pressurizer pressure and temperature decrease along saturation curve. Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-1985? No 126 i l 1

.,0 go Test Number: 14.5.5.30.1 Malfunction identifier:' SGN1 Test

Description:

Steam generator tube rupture. Tube failure occurs to a selectable degree in the selected steam generator (s). Initial Conditions: 100% Power, BOL Ootions Available; Ootions Used: Selection A,8 Selection A Magnitude 0-100% Magnitude 10% 100% = 10 tubes Ramp Time 0-3600 s Ramp Time O s Delay Time 0-3600 s Delay Time O s Mode Direct Direct / Remote / Conditional Test Parameters Monitored: Steam generator feedwater flows Steam generator A wide range level Pressurizer wide range pressure Steam generator wide range pressures RCS global pressure Steam generator A pressure in level reference leg Condenser off gas radiation RCS hot leg temperature VCT level wide range hot leg temperature Test Precis: Following malfunction actuation, observe: pressurizer level and pressure decrease, backup heaters energize; high-low, then low-Iow channel X & Y level alarms annunciate, backup heaters trip, pressurizer off-normal channel X & Y alarms; condenser off-gas radiation rises; letdown flow stops; steam generator RC-2A level and pressure rise, feedwater flow decreases; RC-2A high level alarm; reactor trip; steam generator blow down monitor alarms; PPLS, SlAS, CIAS, and VIAS actuate with alarms and indications; pressurizer level rises due to safety injection flow, then backup heaters energize, RCS pressure rises to 1300 psia where leak flow and SI flow are balanced. i 127

7 0 4 Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-19857 No I 128

,f' 30-Test Number: 14.5.5.30.2 Malfunction Identifier: SGN2 Test

Description:

Reference leg leak. A variable size leak occurs at the top of the selected reference leg (s). Initial Conditions: 100% Power, BOL Options Available: Options Used: Selection A-D Selection A Magnitude 0-100% Magnitude 100% 100% = 3/8"line break Ramp Time 0-3600 s Ramp Time 60 s Delay Time 0-3600 s Delay Time O s Mode Direct Direct / Remote / Conditional Test Parameters Monitored: None Test Precis: Following malfunction actuation, observe: Steam generator RC-2A control channel level indicator level rises, feedwater regulating valve closes, reducing flow; RC-2A actual level decreases with low level alarm; RC-2A pressure drops with attendant alarms and channel A ASGT trip; containment dew point and sump level rise. Operator manually controls RC-2A level, bypasses steam generator pressure trip A, observes bypass alarm annunciates and low pressure trip alarm and trip lights clear; channel A ASGT trip lights remain on. Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-1985? No 129

9 i Test Number: 14.5.5.31.5 Malfunction identifier. SIS 5 Test

Description:

Safety injection tank gas space leak. A variable size leak occurs from the gas space of the selected tank (s). Initial Conditions: 100% Power, BOL Options Available: Options Use_d_; Selection A-D Selection A Magnitude 0-100% Magnitude 100% 100% = 1" Diameter Hole Ramp Time 0-3600 s Ramp Time 60 s Delay Time 0-3600 s Delay Time O s Mode Direct Direct / Remote / Conditional Test Parameters Monitored: Safety injection tank pressure Safety injection tank level Containment pressure Test Precis: Following malfunction actuation, observe: Si tank 6A pressure drops SI-6A high-low pressure, then at 243 psig SI-6A low pressure alarms annunciate. Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-19857 No 130

s iTest Numb'er; '14.5.5.32.3 Malfunction Identifier: GEN 6 Test

Description:

Stator cooling water pump suction line leak. A variable size leak occurs on the suction line of the selected stator cooling water pump (s) downstream of the isolation valve. ' initial Conditions: 100% Power, BOL Options Available: Options Used: Selection A and/or B Selection used: A-Magnitude 0-100% Magnitude 100% 100% = Double ended shear .of suction piping Ramp Time 0-3600 s Ramp Time 60 s Delay Time 0-3600 s Delay Time O s Mode Direct Direct / Remote / Conditional Test Parameters Monitored: Stator cooling inlet temperature Stator cooling outlet temperature Stator winding temperatures Stator cooling water pressure Turbine building sump level - Test Precis: Following malfunction actuation, observe: stator cooling system flow and pressure decrease, standby pump starts with associated alarms, standby pump trips and approximately 70 seconds later, turbine trips, followed by reactor trip. Turbine building sump level increases, generator stator winding temperatures increase. Any Uncorrected Test Failures? No Did this test reveal any exception to ANS!/ANS-3.5-19857 No 131

o l

~ Test Number;- 14.5.5.33.1 [ f Malfunction Identifier TUR1 i 1 Test

Description:

. Main turbine lube oil reservoir leak. A variable size leak occurs at l the base of the main turbine tube oil reservoir. l 6 Initial Conditions: 100% Power Ootions available: Ootions Used: Magnitude 0-100% Magnitude 100% 1 100% = 1" Line Break j Ramp Time 0-3600 s Ramp Time 0 j Delay Time 0-3600 s DelayTime O Mode Direct Direct / Remote / Conditional l t i Test Parameters Monitored: None Test Precis: Following malfunction actuation, observe: bearing oil pressure decreasing, turbine oil tank level high-low and bearing oil pressure low alarms; motor suction, emergency bearing, and turning gear oil pumps running with attendant alarms; after oil tank empties, oil pumps cavitate, then trip with attendant alarms; turbine vibration j alarm and trip; turbine coasts down quickly -l.i Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-19857 No I i l 132

F~~U .a I

o i

Test Number. 14.5.5.33.5 l i Malfunction Identifier: TUR5 l Test

Description:

Main turbine high vibrationcThe selected bearing experiences .l excessive vibration of the magnitude selected. -l'! ' Initial Conditions: 100% Power, BOL -l I Options Available: Options Used: Selection A-J Selection C l l Magnitude 0-20 mils , Magnitude 10m. l Ramp Time 0-3600 s Ramp Time 900 s j Delay Time 0-3600 s Delay Time O s i Mode Direct -l Direet/ Remote / Conditional ~l Test Parameters Monitored: Bearings 1 through 6 vibrations Bearings 1 through 6 oil outlet temperatures i Test Precis: Following malfunction actuation, observe: turbine vibration alarm.- -l annunciates as vibration readings rise on bearings (highest to i lowest) 3,2,4, 5,1, and 6; turbine trip when vibration is greater i than 10 mits; vibration decrease except through resonance speeds. I Any Uncorrected Test Failures? No-i Did this test reveal any exception to ANSI /ANS-3.5-19857 No j i i 1 f 1 l I 133 i i l 5

'~~TJ Test Number. 14.5.5.33.6 Malfunction Identifier: TUR6 Test

Description:

Turning gear failure. The turning gear fails to engage when needed. Initial Conditions: Any condition that has the main turbine rotating at greater than 300 rpm Options Available: Ootions Used: Delay Time 0-3600 s Delay Time O Mode Direct Direct / Remote /Conditiona! Test Parameters Monitored: None Test Precis: Following malfunction actuation, operator follows Ol-ST-3. Turbine Generator Shutdown, observes bearing oil pressure stable and the tuming gear oil pump starts. At 200 rpm, operator starts bearing lift pumps and observes listed normal indications. At 0 rpm, operator. - observes turning gear not started, then attempts manual start. Turning gear stopped or disengaged alarm annunciates Plant is recovered when operator clears malfunction,' starts turning. gear motor and observes alarm clears. Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-19857 No 134

~ '. J e c Test Number: 14.5.5.34.2 Malfunction Identifier: WDS2 Test

Description:

Gas decay tank leak. A variable size leak occurs on gas decay tank B. Initial Conditions: 100% Power, BOL Options Available: Options Used: Magnitude 0-100% Magnitude 100 100% = 1.5" diameter hole Ramp Time 0-3600 s Ramp Time 60 s Delay Time 0-3600 s Delay Time O s Mode Direct Direct / Remote / Conditional Test Parameters Monitored: Stack gas iodine monitor Stack gas air particulate monitor Waste gas decay tank pressure Test Precis: Following maifunction actuation, observe: high activity indicated in the main stack with alarms, CRHS and VIAS actuations with actions and alarms; process monitor meters and recorders indicate high; stack monitor alarms and indications; corridor area monitors read high; tank WD-29B pressure decreased. After isolating tank and compressor rooms, observe radiation readings decrease. Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-19857 No l 135 l i

y. w i a 5

j g

j i f Test Number: .14.5.5.35.1 Malfunction identifier: MM-1 Test

Description:

Loss of coolant accident with loss of off-site power and ene' diesel [ generator failure. Multiple malfunction Initial Conditions: 100% Power, BOL -l /" Malfunctions used Malfunction Selections i RCS Loop Leak 14% Magnitude,10 second ramp time j Diesel Fail to start A selected -l l Switchyard Line Faults A, B and C conditional upon i Reactor Trip j i Test Parameters Monitored: Pressurizer pressure Steam generator pressures l' Reactor vessellevel Core exit thermocouple temperatures RCS temperatures HPSI and LPSI flows l Safety injection tank levels Auxiliary feedwater flows RCS subcooling j .t Test Precis: Upon activation of the RCS loop leak malfunction, the loss of offsite l power occurs, reactor coolant pumps trip, main feedwater pumps trip, a bubble forms in the reactor vessel head, the RCS hot legs reach saturation conditions. The secondary safety valves lift, SlAS 1 is actuated, the pressurizer empties, one diesel generator does not start, HPSI flow initiates via one train, the core uncovers, then is reflooded. l Any Uncorrected Test Failures? No 7 Did this test reveal any exception to ANSI /ANS-3.5-19857 No I t i I 136

y to, .o : Test Number: 14.5.5.35.2 Malfunction identifier: MM-2 Test

Description:

Inadvertent opening of a pressurizer pilot operated relief valve (PORV) with a loss of offsite power and one diesel generator failure. multiple malfunction initial Conditions: 100% Power, BOL Malfunctions used Malfunction Selections Global Failure of PORV 100% Open Diesel Fail to start A selected Switchyard Line Faults A, B and C conditional upon reactor trip Test Parameters Monitored: Pressurizer pressure Steam generator pressures Reactor vessellevel Core exit thermocouple temperatures RCS temperatures HPSI and LPSI flows Safety injection tank levels Auxiliary feedwater flows RCS subcooling Test Precis: Upon activation of the global failure for the PORV, the reactor trips. on low RCS pressure, a loss of offsite power occurs, reactor coolant pumps trip, main feedwater pumps trip, a bubble forms in the reactor vessel head, the RCS hot legs reach saturation conditions. SIAS is actuated, one diesel generator does not start, HPSI flow initiates via one train, steam flows out of the PORV and the core remains covered for the duration of the event. Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-19857 No 137 t I I )

.~ o a-t y-; I 4 Test Number: 14.5.5.35.3 Malfunction Identifier: MM-3 Test

Description:

Inadvertent opening of a pressurizer pilot operated relief valve; (PORV) with a loss of all feedwater, offsite power, one HPSI pump, and one ECCS train. Multiple malfunction ~ - Initial Conditions: 100% Power, BOL Malfunctions used Malfunction Selections t Failure of PORV 100% Open,60 second ramp time Failure of ALL Feedwater Pumps Conditional upon failure of - PORV Failure of 2 of 3 HPSI Pumps Failure to start Failure of one ECCS Train Malfunctions ESF-1 through to actuate 13 Switchyard Line Faults A, B and C conditional upon Reactor Trip Test Parameters Monitored: _ Pressurizer pressure Steam generator pressures Reactor vessellevel Core exit thermocouple temperatures RCS temperatures HPSI and LPSI flows Safety injection tank levels Auxiliary feedwater flows RCS subcooling i Test Precis: Upon activation of the loss of the main feedwater pumps, the 1 reactor trips on low steam generator level, followed by the loss of all off-site power. All reactor coolant pumps trip, secondary safety valves open, SIAS actuates on the one remaining operable train. A bubble forms in the reactor vessel head, the RCS hot legs approach saturation conditions. i Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-19857 No 138

x -d, 9 Test Number: 14.5.5.35.4 Malfunction identifier: MM-4 Test

Description:

Loss of all feedwater, offsite power, one HPSI pump, and one ECCS train. Multiple malfunction Initial Conditicas: 100% Power, BOL Malfunctions used Malfunction Selections Failure of ALL Feedwater Pumps Direct activation Failure of 1 HPSI Pump Failure to start Failure of one entire Malfunctions ESF-1 through ECCS Train to actuate 13 Switchyard Line Faults A, B and C conditional upon reactor trip Test Parameters Monitored: Pressurizer pressure Steam generator pressures Reactor vessellevel Core exit thermocouple temperatures RCS temperatures HPSI and LPSI flows Safety injection tank levels Auxiliary feedwater flows RCS subcooling Test Precis: Upon activation of the main feedwater pumps trips, all feedwater flow is lost, and the steam generator levels decrease rapidly, causing a reactor trip on low steam generator level. The loss of all off-site power causes all reactor coolant pumps to trip. Secondary safety valves open to control steam generator pressure. Natural circulation is established, and the vessellevel does not decrease to allow bubble formation. RCS temperatures do not reach saturation conditions. Due to the inventory in the steam generators, the RCS temperatures remain fairly stable for an extended period of time. Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-1985? No i 139

Test Number: 14.5.5.35.5 Malfunction Identifier: MM-5 Test

Description:

Loss of coolant accident (LOCA) with one steam generator isolated, a loss of offsite power, and one diesel generator failure. Multiple malfunction. Initial Conditions: 100% Power, BOL Malfunctions used Malfunction Selections RCS Loop Leak RCS1C,2.75% Magnitude, 10 sec ramp Failure of MSIV Fail Closed upon RCS Leak for A Steam Generator actuation Failure of Auxiliary FW valve Fail Closed for B" Steam Generator Switchyard Line Faults A, B and C conditional upon Reactor Trip Diesel Generator 1 Failure Fail to start Failure of all Charging Pumps Fail to start /run Test Parameters Monitored: Pressurizer pressure Steam generator pressures Reactor Vessellevel Core exit thermocouple temperatures RCS temperatures HPSI and LPSI flows Safety injection tank levels Auxiliary feedwater flows RCS subcooling Test Precis: Upon activation of the LOCA, the main steam isolation valve for B steam generator closes, the secondary safety valves open on B steam generator, the reactor trips, followed by a loss of all off-site power, loss of all reactor coolant pumps, all main feedwater pumps, SIAS actuation and the formation of a bubble in the reactor vessel head. HPSI initiates, the pressurizer empties, but the core is not { uncovered. 4 140

r' 27: ,o-i Any Uncorrected Test Failures? No Did this test reveal any exception to ANSI /ANS-3.5-1985? No e i P P r t r r p 5 I [ ( f I t 141 i l - + -,

e o i l l Testing Program Changes ) l i i r 1 i t I i f I ) l t a f 142

7 e o a Changes to the performance testing program for the second four-year interval as compared to the first four.yearinterval are as follows. The following tests were deleted from the certification testing program for the listed reasons: 14.4.4 Electrical Bus Test 14.4.5 Air System Test The above two tests were deleted because they are handler tests that were developed for the factory acceptance testing program prior to simulator shipment from the vendor. Changes to the configuration of the simulator are handled through the maintenance and modification process, making the performance of these tests redundant to the maintenance and modification process. 14.5.1.2.1 Reactor Core 14.5.1.2.18 incore Nuclear Instrumentation System 14.5.2.1 Rod Worth Test 14.5.2.2 Boron Worth Test 14.5.2.3 Isothermal Moderator Temp. Coefficient Test 14.5.2.4 Power Coefficient Test 14.5.2.5 Xenon Test The aN /e core tests were deleted because they are not needed to meet the requirenients of ANSl/ANS-3.5-1985 3.1.1 (9). These tests do not use installed instrumentation. They are performed once per core update by the software engineer responsible for the core model to ensure the data from the simulator matches the reference plant Technical Data Book. 14.5.3.2.2 Steady State Drift @ 80% 14.5.3.2.3 Steady State Drift @ 50% 14.5.3.2.4 Steady State Drift @ 30% The above Steady State Drift tests are not required by ANSI /ANS-3.5-1985. They were part of the original factory acceptance test plan. 14.5.4.1 Maximum Rate Power Ramp This test was redundant to test 14.5.4.12 14.5.4.2 Main Turbine Stop and Control Valve Testing 14.5.5.12.1 EHC Fluid System Leak on Accumulator The above tests are not required by ANSI /ANS-3.5-1985. They were part of the original factory acceptance test plan. 143

) o o 1 14.5.5.2.2 Service Air System Leak The above test was eliminated because it is redundant to 14.5.5.2.3 and 14.5.5.2.4 14.5.5.21.9 Reactor Coolant Pump Lower Seal failure 14.5.5.32.3 Stator Cooling Water Pump Suction Line Leak 14.5.5.33.1 Main Turbine Lube Oil Reservoir Leak 14.5.5.33.6 Turning Gear Failure 14.5.5.34.2 Gas decay Tank Leak 14.5.5.4.4 Condensate Pump Bearing Failure 14.5.5.9.2 Diesel Generator Fuel Transfer Pump Discharge Leak i 14.5.4.3 Inadvertent Boration Dilution The above tests are not required by ANSI /ANS-3.5-1985. They were part of the original factory acceptance test plan. a 144 l l

o i f I i 5 Testing Program 1995 - 1998 f I L h i I i t l i 1 1 i 145

O 1 !. O - -e- 6 { L The performance test schedule for the next four-year interval is as follows. Note that Cycle 1 refers to tests due in the first year of the four year testing program ( i.e.,1995), Cycle 2 refers to 1996, and so forth. "All" refers to tests due each year of the four year program. There are currently 101 Test procedures in the Certification Testing Program. Test No. Test Title Cycle 14.3.3 Verification of Spare Computer Time All l 14.5.3.1 Normal Operations Test ' All 14.5.3.2.1 Steady State Drift @ 100% All l 14.5.3.3.1 Steady State Accuracy 100% All 14.5.3.3.2 Steady State Accuracy 80% All 14.5.3.3.3 Steady State Accuracy 50% All 14.5.3.3.4 Steady State Accuracy 30% All 14.5.4.10 Trip Any RCP Test All 14.5.4.11 Loss Of Load All 14.5.4.12 Maximum Rate Power Ramp (100-75-100) All l 14.5.4.13 LOCA With Loss of All Offsite Power All i 14.5.4.14 Excess Steam Demand All 14.5.4.15 Slow RCS Depress To Sat - No HPSI All 14.5.4.4 Reactor Trip and Recovery All 14.5.4.5 Dropped Rod All 14.5.4.6 Reactor Trip Test All 14.5.4.7 Simultaneous Trip of MFW Pumps Test All 14.5.4.8 Simultaneous Closure of MSIVs Test All 14.5.4.9 Simultaneous Trip of All RCPs Test All 14.5.1.1.16 Auxiliary Feedwater System 1 14.5.1.1.6 Component Cooling Water 1 14.5.1.2.10 Inplant Electrical Distribution 1 i 14.5.1.2.15 Reactor Protection System 1 14.5.1.2.9 Diesel Generator 1 14.5.5.1.4 Emergency Feedwater Storage Tank Leak 1 14.5.5.1.5 Auxiliary Feedwater Activation Relay Failure 1 14.5.5.11.1 4160 VAC Bus Fault 1 14.5.5.11.11 Switchyard Line Fault 1 14.5.5.11.12 Switchyard Breaker Fault 1 14.5.5.11.2 480 VAC Bus Fault 1 i 14.5.5.11.3 125 VDC Bus Fault 1 l 14.5.5.11.4 120 VAC Instrument Bus Failure 1 l 14.5.5.11.6 480 VAC Supply Transformer Fault 1 14.5.5.24.1 Failure of Interposing Relay 1 14.5.5.24.2 RPS Power Supply Failure 1 { 14.5.5.24.3 Failure of APD Positive Limit Calculator 1 i 14.5.5.25.2 Main Feedwater Master Controller Failure 1 14.5.5.25.7 Steam Dump Ouick Opening Solenoid Failure 1 l 14.5.5.3.4 CCW Pump Discharge Header Leak 1 14.5.5.3.5 CCW Heat Exchanger Tube Leak 1 14.5.5.9.8 Diesel Generator Failure to Start 1 I 146 \\ m _ ~. -,

n "p- . + l Test No. Test Title Cycle ( [ 14.5.1.1.1 Reactor Coolant System-2 14.5.1.1.17 Raw Water System 2 14.5.1.1.4 Chemica: and Volume Control 2 14.5.2.6 ECP Test 2 [ 14.5.5.16.1 Feedwater Heater Tube Leak 2 j 14.5.5.19.2 Wide Range Power Supply Failure 2 i 14.5.5.20.4 Pressurizer Steam Space Leak 2 14.5.5.20.5 Pressurizer PORV Failure 2 l 14.5.5.20.9' Pressurizer Level Instrumentation Failure 2 14.5.5.21.1 RCP Lube Oil Cooler Leak 2 1 14.5.5.21.3 RCP Guide Bearing Failure 2 14.5.5.22.1 RCS Loop Leak 2 14.5.5.22.3 Fuel Failure 2 { 14.5.5.26.3 Raw Water Supply Line Break 2 14.5.5.7.9 Charging Line Leak Outside Containment 2 i 14.5.5.8.2 Main Condenser Tube Leak 2-14.5.1.1.5 Safety injection System 3 14.5.3.2.13 D-G Sequencer 3 l 14.5.1.2.16 Engineered Safeguards System 3 14.5.5.13.1 SGLS Logic Matrix Failure 3 14.5.5.13.10 STAS Logic Actuation Signal Failure 3 14.5.5.13.12 OPLS Logic Matrix Failure 3 14.5.5.13.2 CPHS Logic Matrix Failure 3 14.5.5.13.5 PPLS Logic Matrix Failure 3 t 14.5.5.18.1 Main Steam Line Break inside Containment 3 l 14.5.5.18.3 Main Steam Line Break outside Containment 3 14.5.5.18.5 Main Steam Line isolation Valve Failure 3 14.5.5.18.6 Main Steam Line to AFW Pump Leak 3 i 14.5.5.18.7 Main Steam Header Leak 3 t 14.5.5.2.3 Instrument Air Loop Leak 3 [ 14.5.5.2.4 Instrument Air Riser Leak 3 14.5.5.27.2 Shutdown Cooling Heat Exchanger Inlet Header Leak 3 14.5.5.30.1 Tube Rupture 3 14.5.5.31.5 Safety injection Tank Gas Space Leak 3 14.5.5.35.1 LOCA + Loss of Offsite Power & 1 D/G Failure 3 l 14.5.5.35.2 Inadvertent PORV Open w/ LOP & 1 D/G Failure 3 i 14.5.5.35.3 Inadv. PORV Open/LOFW/ Loss of 1 HPSI/1 ECCS Train 3 l 14.5.5.35.4 LOFW/ LOP /1 HPSI Pump & 1 ECCS Train 3 l 14.5.5.35.5 LOCA + 1 S/G isol/ LOP, and 1 D/G Fail 3 14.5.1.2.17 Nuclear instrumentation System 4 l 14.5.1.2.2 Control Rod Drive System 4 14.5.1.2.5 Containment 4 14.5.5.12.6 Load Limit Potentiometer Failure 4 14.5.5.14.2 Main Feedwater Header Leak 4 i 14.5.5.14.3 Main Feedline Leak Upstream of the FCV 4 i 147 .~w -r1

m- .n .n, t i i Ipst No. Test Title Cycle l I 14.5.5.14.5 Main Feedline Leak inside Containment 4 14.5.5.17.1 . Voltage Regulator Failure 4 14.5.5.17.4 Field Breaker failure 4 14.5.5.19.7 Power range Power Supply Failure 4 ( 14.5.5.30.2 Reference Leg Leak 4 14.5.5.33.5 Main Turbine High Vibration 4 l 14.5.5.4.1 Loss of Main CondenserVacuum 4 i 14.5.5.4.5 Condensate Cooler Tube Leak 4 { 14.5.5.4.8 Hotwell Level Control Failure 4 14.5.5.6.3-Failure of Individual Rod Raise Relay 4 l 14.5.5.6.4 Failure of Individual Rod Lower Relay 4 j 14.5.5.6.5 Stuck Rod 4 i 14.5.5.6.6 Dropped Rod 4 14.5.5.6.7. Failure of Clutch Fower Supply 4 l { 14.5.5.6.8 CRDM Ejection 4 t i i i 148

jd 1 , ABBREVIATIONS & ACRONYMS ' 7 AFAS-Auxiliary feedwater actuation signal Auxiliary feedwater 'AFW. Abnormal operating procedure AOP APD Axial power distribution ASGT Asymmetric steam generator trip f ASI - Axial shape index l BOL Beginning of (core) life -i CCW Component cooling water j! CEA Control element assembly CIAS Containment isolation actuation signal CPHS Containment pressure high signal j CRHS Containment radiation high signal j CSAS Containment spray actuation signal j DG Diesel generator l ECCS Emergency core cooling system j EOL End of (core) life EOP Emergency operating procedure ERF Emergency response facility HCV Hand control valve HPSI High pressure safety injection. LCV Level control valve LOA Local operator action LPSI Low pressure safety injection MOL Middle of (core) life MSSV Main steam safety valve MVAR Mega volt-ampere reactive MW Megawatt 01 Operating instruction OP Operating procedure l PCV Pressure control valve PORV Power operated relief valve PPLS Pressurizer pressure low signal RAS Recirculation sctuation signal RCP Reactor coolant pump RCS Reactor coolant system RPS Reactor protection system SDBP Steam dump and (turbine) bypass system SDC Shutdown cooling -SG Steam generator SGIS Steam generator isolation signal SGLS Steam generator low (pressure) signal l SI Safety injection l SIAS Safety injection actuation signal SIRWT-Safety injection refueling water storage tank STLS Storage tank (SIRWT) low (level) signal .TCV Temperature control valve TM/LP Thermal margin / low pressure TU (RPS) Trip unit VCT-Volume control tank VIAS Ventilation isolation actuation signal l .I 149 .}}