ML20082Q313
| ML20082Q313 | |
| Person / Time | |
|---|---|
| Site: | Cooper |
| Issue date: | 12/02/1983 |
| From: | NEBRASKA PUBLIC POWER DISTRICT |
| To: | |
| Shared Package | |
| ML20082Q292 | List: |
| References | |
| TAC-42418, NUDOCS 8312120113 | |
| Download: ML20082Q313 (27) | |
Text
-
SAFETY LIMITS LIMITING SAFETY SYSTEM SETTINGS
~
4 S
1.1~ FUEL CLADDING INTEGRITY 2.1 FUEL CLADDING INTEGRITY Applicability E
- I 78"**
"E" The Safety Li'aits established to apply to trip settings of the instru-preserve the fuel cladding integrit7 ments and devices which are provided apply to those variables which to prevent the fuel cladding integ-monitor the fuel' thermal behavior, rity Safety Limits from being exceeded.
Objective Objective E *'*~
The objective of the Safety Limits "I
78***
E8
- is to establish limits below which level f the process variables at j
the integrity of the fuel cladding which automatic protective action is preserved.
is initiated to prevent the fuel claMng integdty Safety Mmus Action from being exceeded.
If a Safety Limit is exceeded, the Specifications reactor shall be in at least hot shutdown within 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br />.
A.
Trip Settings Specifications The limiting safety system trip settings shall be as specified A.
Reactor Pressure >800 psia and below:
Core Flow >10% of Rated 1.
Neutron Flux Trip Settings The existence of a minimum critical a.
APRM Flux Scram Trip pover ratio (MCPR) less than 1.07 Setting (Run Mode) for two recirculation loop operation (1.08 for single-loop operation When the Mode Switch is in the<
greater than 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />), shall con-RUN position, the APRM flux i
stitute violation of "he fuel clad-scram trip setting shall be:
ding integrity safety.
~
- B.
Core Thermal Power Limit (Reactor Pressure <800 psia and/or Core where:
Flow <10%)
S = Setting in percent of When the reactor pressure is <800 rated thermal power psia or core flow is less than 10%
(2381 MWt) or rated, the core thermal power i
shall not exceed 25% of rated W = Two-loop recirculation ll thermal power.
flow rate in percent of
,I.
rated (rated loop recirc-l C.
Power Transient ulttion flow rate is that recirculation flow rate To ensure that the Safety Limit which provides 100%
established in Specification 1.1.A coreflow at 100% power) and 1.1.B is not exceeded, each AW = Difference between two-i required scram shall be initiated by loop and single-loop its expected scram signal. The effective drive flow at Safety Limit shall be assumed to be the same core flow.
This exceeded when scram is accomplished factor is applied for by a means other than the expected single loop operation scram signal.
greater than 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.
g 8312120113 931202 PDR ADOCK 05000298 P
PDR.-
SAFETY LIMITS LIMITING SAFETY SYSTEM SETTINGS s
- 1.1 (Cont'd) 2.1. A.1.
(Cont'd)
D.
Cold Shutdown AW = 0 for two recirculation loop operation'and I
Whenever the reactor is in single loop operation the cold shutdown condition less than 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.
with irradiated. fuel in the reactor _ vessel, the water a.
In the event of operation with a level shall not be less than maximum-fraction of limiting power 18.tn. above the top of the densityL(MFLPD) greater enan the normal active fuel zone (top fractien of rated power (FRP),
of active fuel is defined in the setting shall be modified as Figure 2.1.1).
folicws:
S 3,~(0.66 W + 54% - 0.66 AW)
- where, FRP = fraction of rated thermal
~
power (2381 MWt)
MFLPD = maximum fraction of limiting.
power density where the limiting power density is 18.5 KW/ft for 7x7 fuel and 13.4 KW/ft for 8x8 fuel.
The ratio of FRP to MFLPD shall be set equal to 1.0 unless the actual operating values is less than the design value of 1.0, in which case the actual operating value will be used.
For no combination of loop recirculation flow rate and core thermal power shall the APRM flux scram trip setting be allowed to exceed 120% of rated thermal power, b.
APRM Flux Scram Trip Setting (Refuel or Start and Hot j
Standby Mode)
[
When the reactor mode switch is
~
in the REFUEL or STARTUP posi-tion, the APRM scram shall be set at less than or equal to 15% of rated power.
c.
IRM The IRM flux scram setting shall I_
be j,120/125 of scale.
~.
._._ _. _ _,.. _. _. _ _.. ~
SAFETY LIMITS LIMITING SAFETY SYSTEM SETTINGS
-l 2.1. A.1 (Cont'd) d.
APRM Rod Block Trip Setting The APRM rod block trip
^i setting shall be:
S 1 0.66 W + 42%
.66 AW l
RB where:
=
c setting in S RB percent of rated thermal power (2381 MWt)
W
= Loop recirculation flow rate in percent of rated (rated loop recirculation flow rate is that recirculation flow rate which provides 100%
coreflow at 100% power)
W and AW are defined in Specifi-cation 2.1.A.1.a.
In the event of operation with a maximum fraction of limiting power density (MFLPD) greater than the fraction of rated power (FRP), the setting shall be modified as follows:
SRB -( *
~
- MFLPD.g
- where, FRP = fraction of rated thermal power (2381 MWt)
MFLPD - maximum fraction of limiting power density where the limiting power density is 18.5 KW/ft for 7x7 fuel and 13.4 KW/ft for 8x8 fuel.
The ratio of FRP to MFLPD shall be set equal to 1.0 unless the actual operating value is less than the design value of 1.0, in which case the actual operating value will be used.
2.
Reactor Water Low Level Scram and Isolation Trip Setting (except MSIV)
> +12.5 in. on vessel level instruments.
1.1 Bermos e
O Fuel Cladding Integrity s
A.
Fuel Cladding Integrity Limit at Reactor Pressure >800 psia and Core Flow >10% of Rated The fuel cladding integrity safety limit is set such that no fuel damage is calculated to occur if the limit is not violated.
Since the parameters which result in fuel damage are not directly observable during reactor operation the thermal and hydraulic conditions
~
resulting.in a departure from nucleate boiling have been used to mark the beginning of the region where fuel damage could occur. Although it is recognized that a departure from nucleate boiling would not necessarily result in damage to BWR fuel rods, the critical power at which boiling transition is calculated to occur has been adopted as a convenient limit. However, the uncertainties in monitoring the core operating state and in the procedure used to calculate the critical power result in an uncertainty in the value of the critical power. Therefore, the fuel claddiag integrity safety limit is defined as the critical power ratio in the limiting fuel assembly for which more than 99.9% of th. fuel rods in the core are expected to avoid boiling transition considering the power distribution within the core and all uncertainties.
The Safety Limit MCPR is generically determined in Reference 1 for two recirculacion loop operation. This safety limit MCPR is increased by 0.01 for single-loop operation for~a period greater than 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> as discussed in Reference 2.
B.
Core Thermal Power Limit (Reactor Pressure < 800 psia or Core Flow < 10% of Rated)
The use of the GEXL correlation is not valid for the critical power calculations at pressures below 800 psia or core flows less than 10%
~
of rated.
Therefore, the fuel cladding integrity safety limit is
_ protected by limiting the core thermal power.
At pressures below 800 psia, the core elevation pressure drop (0 power, l
0 flow) is greater than 4.56 psi. At low power and all flows this i
pressure differential is maintained in the bypass region of the core.
I Since the. pressure drop in the bypass region is essentially all elevation head, the core pressure drop at low power and all flows will alwags be greater than 4.56 psi.. Analyses show that with a flow of 28 x 10 lbs/hr bundle flow, bundle pressure drop is nearly independent of bundle power and has a value of 3.5 psi.
Thus,thegundleflowwith a 4.56 psi driving head will be greater than 28 x 10 lbs/hr irrespective of total core flow and independent of bundle power for the range of bundle powers of concern.
Full scale ATLAS test data taken at pressures l
from 14.7 psia to 800 psia indicate that the fuel assembly critical
-power at this flow is approximately 3.35 MWt.
With the design peaking j
factors this corresponds to a core thermal power of more than 50%. Thus, l
.a core thermal power limit of 25% for reactor pressures below 800 psi or core flow less than 10% is conservative.
l l
5,
~
1.1 Benons (Cont'd) s.
C.
Power Transien',
Plant safety analyses have shown that the scrams caused by exceeding any safety setting will assure that the Safety Limit of Specification 1.lA or 1.lB will not be exceeded. Scram times are checked periodically to assure the insertion times are adequate. The thermal power transient resulting when a scram io accomplished other than by the expected scram signal (e.g., scram from neutron flux following closure of the main turbine stop valves) does not necessarily cause fuel damage. However, for this specification a Safety Limit violation will be assumed when a scram is only accomplished by means of a backup feature of the plant design, The concept of not approaching a Safety Limit provided scram signals are operable is supported by the extensive plant safety analysis.
The computer provided with Cooper has a sequence annunciation program which will indicate the sequence in which events such as scram APRM trip initiation, pressure scram initiation, etc. occur. This program also indicates when the scram setpoint is cleared. This will provide information on how long a scram condition exists and thus provide some measure of the energy added during a transient. Thus, computer information normally will be available for analyzing scrams; however, if the computer information should not be available for any scram analysis, Specification 1.1.C will be relied on to determine if a Safety Limit has been violated.
D.
Reactor Water Level (Shutdown Condition)
During periods when the reactor is shutdown, consideration must also be given to water level requirements due to the effect of decay heat.
If reactor water level should drop below the tcp of the active fuel during this time, the ability to cool the core is reduced.
This reduction in core cooling capability could lead to elevated cladding temperatures and clad perforation. The core can be cooled sufficiently should the water level be reduced to two-thirds the core height.
Establishment of the safety limit at 18 inches above the top of the fuel provides adequate margin.
References for 1.1 Bases 1.
" Generic Reload Fuel Application," NEDE-240ll-P (most current approved submittal).
2.
" Cooper Nuclear Station Single-Loop Operation," NED0-24258, May,1980.
l i
[ <
"LEFT BLANK INTENTIONALLY"
-13, 14, 15, 16-l
2.1 -Bases
The abnormal operational transients applicable to operation of the CNS U
Unit have been analyzed throughout the spectrum of planned operating con-ditions up to 105% of rated steam flow. The analyses were based.upon
~
plant operation in accordance with Reference 3.
In addition, 2381 MWe is the licensed maximum power level of CNS, and this represents the maximum steady-state power which shall not knowingly be exceeded.
j The transient analyses performed each reload are given in Reference 1.
Models and model conservatisms are also described in this reference. As discussed in Refer-3
~
ence 2, the core wide transient analyses for one recirculation pump operation is conservatively bounded by two-loop operation analyses and the flow-dependent rod block and scram setpoint equations are adjusted for one-pump operation.
A.
Trip Settings The bases for individual trip settings are discussed in the following paragraphs.
i 1.
Neutron Flux Trip Settings 1
a.
APRM Flux Scram Trip Setting (Run Mode)
The average power range monitoring (APRM) system, which is calibrated using heat balance data taken during steady state conditions, reads in percent of rated thermal power (2381 MWt).
Because fission chambers provide the basic input signals, the APRM system responds directly to average neutron flux. During transients, the instanta-l neous rate of heat transfer from the fuel (reactor thermal l
power) is less than the instantaneous neutron flux due to the time constant of the fuel. Therefore, during abnormal
-operational transients, the. thermal power of the fuel will be less than that indicated by the neutron flux at the scram setting. Analyses demonstrate that with a 120% scram trip setting, none of the abnormal operational transients analyzed violate the fuel Safety Limit and there is a substantial margin from fuel damage. Therefore, the use of flow referenced scram trip provides even additional margin.
1 1
4 e
,. _ _. _.. ~ -, _ _ _ _ _. _. _.,. -... -
2.1. Brans
(Cont'd)
~
An increase in the APRM scram trip setting would decrease the margin present before the fuel cladding integrity Safety Limit is reached.
The APRM scram trip setting was determined by an analysis of margins required to provide a reasonable range for maneuvering during operation.
Reducing this operating margin would increase the frequency of spurious scrams which have an adverse effect on reactor safety because of the resulting thermal stresses.
Thus, the APRM scram trip setting was se-lected because it provides adequate margin for the fuel cladding integ-rity Safety Limit yet allows operating margin that reduces the possi-bility of unnecessary scrams.
The scram trip setting must be adjusted to ensure that the LHGR transient peak is not increased for any combination of maximum fraction of limiting power density (MFLPD) and reactor core thermal power. The scram setting is adjusted in accordance with the formula in Specification 2.1. A.1.a. when i
the MFLPD is greater than the fraction of rated power (FRP). This adjust-ment may be accomplished by increasing the APRM gain and thus reducing the slope and intercept point of the flow referenced APRM High Flux Scram Curve by the reciprocal of the APRM gain change.
Analyses of the limiting transients show that no scram adjustment is required to assure MCPR above the safety limit when the transient is initiated from the operating MCPR limit.
b.
APRM Flux Scram Trip Setting (Refuel or Start & Hot Standby Mode)
For operation in the startup mode while the reactor is at low pressure, the APRM scram setting of 15 percent of rated power provides adequate thermal margin between the setpoint and the safety limit. 25 percent of rated. The margin is adequate to accomodate anticipated maneuvers associated with power plant startup.
Effects of increasing pressure at zero or low void content are minor, cold water from sources avail-able during startup is not much colder than that already in the system, temperature coefficients are small, and control rod patterns are con-strained to be uniform by operating procedure backed up by the rod worth minimizer, and the rod sequences control system.
Worth of indivi-dual rods is very low in a uniform rod pattern. Thus, of all possible sources of reactivity input, uniform control rod withdrawal is the most probable cause of significant power rise.
Because the flux distribution associated with uniform rod withdrawals does not involve high local peaks, and because several rods must be moved to change power by a significant percentage of rated power, the rate of power rise is very slow. Gen-erally, the heat flux is in near equilibrium with the fission rate.
In an assumed uniform rod withdrawal approach to the scram level, the rate of power rise is no more than 5 percent of rated power per minute, and the APRM system would be more than adequate to assure a scram before the power could exceed the safety limit. The 15 percent APRM scram remains active until the mode switch is placed in the RUN position.
This change can occur when reactor pressure is greater than Specifi-cation 2.1.A.6.
_ -~ _.,
2.1 Bsess (Cont'd) i c.
IRM Flux Scram Trip Setting The IRM system consists of 8 chambers, 4 in each of the reactor protec-tion system logic channels.
The IRM is a 5-decade instrument which cov-
.l ers the range of power level between that covered by the SRM and the J'
APRM. The 5 decades are covered by the IRM by means of a range switch and the 5 decades are broken down into 10 ranges, each being one-half of-a decade in size.
The IRM scram trip setting of 120 divisions is active in each range of the IRM.
For example, if the instrument were
~
on range 1, the scram setting would be 120 divisions for that range; l
likewise, if.the instrument were on range 5, the scram would be 120 divisions on that range. Thus, as the IRM is ranged up to accommodate the increase in power level, the scram trip setting is also ranged up.
The most significant sources of reactivity change during the power in-crease are due to control rod withdrawal.
For in-sequence control rod withdrawal, the rate of change.of power is slow enough due to the phys-ical limitation of withdrawing control rods, that heat flux is in equi-librium with the neutron flux and an IRM scram would result in a reac-tor shutdown well before any Safety Limit is exceeded.
i l
In order to ensure that the IRM provided adequate protection against the single rod withdrawal error, a range of rod withdrawal accidents was analyzed. This analysis included starting the accident at various power levels. The most severe case involves an initial condition in
. which the reactor is just suberitical and the IRM system is not yet on scale. This condition exists at quarter rod density. Additional conserva-tism was taken in this analysis by assuming that the IRM channel clos-est to the withdrawn rod is by-passed. The resules )f this analysis show that the reactor is scrammed and peak power iuited to one percent of rated power, thus maintaining MCPR above the McPR fuel cladding i
integrity safety limit.
Based on the above analysis, the IRM provides protection against local control rod withdrawal errors and continuous withdrawal of control rods in sequence and provides backup protection i
for the APRM.
i d.
APRM Rod Block Trip Setting.
Reactor power level may be varied by moving control rods or by varying I
the recirculation flow rate. The APRM system provides a control rod block which is dependent on recirculation flow rate to limit rod withdrawal, thus protecting against a MCPR of less than the MCPR fuel cladding integrity safety limit. The flow variable trip setting provides substantial' margin from fuel damage, assuming a steady-state operation at the trip setting, over the entire recirculation flow range. The margin to the Safety Limit increases as-the flow decreases for the specified trip setting versus flow relationship; therefore the worst case MCPR which could occur during steady-state operation is at 108% of rated thermal power because of the APRM rod block trip setting. The actual power distri-bution in the core is established by specified control rod sequences and is monitored continuously by the in-core LPRM system. As with the APRM scram trip se'tting, the APRM rod block trip setting is adjusted i
downward if the maximum fraction of limiting power density exceeds the fraction of rated power, thus preserving the APRM rod block safety mar-gin. As with the scram setting, this may be accomplished by adjusting the APRM gain.
2.1 B7sgot (Cont'd)
S 2.
Reactor Water Low Level Scram and Isolation Trip Setting (except MSIV)
The set point for low level scram is above the bottom of the separator skirt. This level has been used in transient analyses dealing with coolant inventory decrease.
The results reported in SAR Subsection l-14.5 show that scram at this level adequately protects the fuel and the pressure barrier, because MCPR remains well above the MCPR fuel cladding integrity limit in all cases, and system pressure does not reach the safety valve settings.
The scram setting is approximately 25 in, below the normal operating range and is thus adequate to avoid spurious scrams.
3.
Turbine Stop Valve Closure Scram Trip Setting The turbine stop valve closure scram trip anticipates the pressure, neutron flux and heat flux increase that could result from rapid closure of the turbine stop valves. With a scram trip setting of
<10 percent of valve closure from full open, the resultant increase in surface heat flux is limited such that MCPR remains above the MCPR fuel cladding integrity limit even during the worst case transient that assumes the turbine bypass is closed. This scram is bypassed when turbine steam flow is below 30% of rated, as measured by turbine first stage pressure.
4.
Turbine Control Valve Fast Closure Scram Trip Setting The turbine control valve fast closure scram anticipates the pressure, neutron flux, and heat flux increase that could result from fast closure of the turbine control valves due to load rejection exceeding the capability of the bypass valves. The reactor protection system initiates a scram when fast closure of the control valves is initiated by the loss of turbine control oil pressure as sensed by pressure switches. This setting and the fact that control valve closure time is approximately twice as long as that for the stop valves means that resulting transients, while similar, are less severe than for stop valve closure. No significant change in MCPR occurs. Relevant transient analyses are presented in Paragraph 14.5.1.1 of the Safety Analysis l
Report.
i s
T v
4
?
~
7
2.1 Bases
(Cont'd) 5.
Main Steam Line Isolation Valve closure on Low Pressure I
The low pressure isolation of the main steam lines (Specifi-cation 2.1.A.6) was provided to protect against rapid reactor depressurization.
B.
Reactor Water Level Trip Settings Which Initiate Core Standby
~
Cooling System (CSCS) i The core standby cooling subsystems are designed to provide suf-ficient cooling to the core to dissipate the energy associated with the. loss-of-coolant accident and to limit fuel clad temperature, to assure that core geometry remains intact and to limit any clad i
metal-water reaction to less than 1%.
To accomplish their intended function, the capacity of each Core Standby Cooling System component was established based on the reactor low water level scram set point. To lower the set point of the low water level scram would increase the capacity requirement for each of the CSCS components.
Thus, the reactor vessel low water level scram was set low enough to i
permit margin for operation, yet will not be set lower because of CSCS capacity requirements.
The design for the CSCS components to meet the above guidelines was dependent upon three previously set parameters:
The maximum break size, low water level scram set point And the CSCS initiation set point. To lower the set point for initiation of the CSCS may lead to a decrease in effective core cooling. To raise the CSCS initia-tion set point would be in a safe direction, but it would reduce the margin established to prevent actuation of the CSCS during normal operation or during normally expected transients.
4 Transient and accident analyses reported in Section 14 of the Safety l
Analyses Report demonstrate that these conditions result in adequate safety margins for the fuel.
C.
References for 2.1 Bases 1.
" Generic Reload Fuel Application," NEDE-24011-P, (most current approved submittal).
2.
" Cooper Nuclear Station Single-Loop Operation," NED0-24258, May 1980.
3.
" Supplemental Reload Licensing Submittal for Cooper Nuclear Station Unit 1,"
(applicable reload document).
4.
Safety Analysis Report (Section XIV).
l i
6 p
e 4
"LEFT BLANK INTENTIONALLY" l
- ~- -
COOPER NUCLEAR STATION TABLE 3.1.1 REACTOR PROTECTION SYSTEM INSTRUMENTATION REQUIREMENTS Minimum Number Action Required Applicability Conditions of Operable When Equipment Reactor Protection Mode Switch Position Trip Level Channels Per Operability is System Trip Function Shutdown Startup Refuel Run Setting Trip Systems (l? Not Assured (1)
Mode Switch in Shutdown X(7)
X X
X 1
A Manual Scram X(7)
X X
X 1
A IRM (17)
X(7)
X X
(5) 1 120/125 of in-3 A
liigh Flux dicated scale Inoperative X
X (5) 3 A
APRM (17)
X < (0.66W+54%-0.66AW) FRP 2
A or C l
liigh Flux (Flow biased)
~ (14)(19)
MFLPD liigh Flux X(7)
X(9)
X(9)
(16) 1 15% Rated Power A or C Inoperative X(9)
X(9)
X (13) 2 A or C Downscale (11)
X(12) > 2.5% of indi-2 A or C cated scale liigh Reactor Pressure X(9)
X(10)
X 1 1045 psig 2
A NBI-PS-55 A,B.C. & D liigh Drywell Pressure X(9)(8) X(8)
X 1 2 psig 2
A or D PC-PS-12 A,B,C, & D Reactor Low Water Level X
X X
>+ 12.5 in. indi-2 A or D NBI-LIS-101 A,B,C, & D
_ cated level Scram Discharge Instrument Volume X
X(2)
X
< 92 inches 3 (18)
A liigh Water Level CRD-LS-231 A & B CRD-LS-234 A & B CRD-LT-231 C & D CRD-LT-234 C & D p
i
11 Tha APRM downscals trip function is only active whsn the reactor moda switch is in run.
12.
The APRM downscale trip is automatically bypassed when the mode switch is not in RUN.
I 13.
An APRM will be considered inoperable if there are less than 2 LPRM inputs per level or there is less than 11 operable LPRM detectors to an APRM.
14.
W is the recirculation flow in percent of rated flow.
2 15.
This note deleted.
16.
The 15% APRM scram is bypassed in the RUN mode.
17.
The APRM and IRM instrument channels function in both the Reactor Protection System and Reactor Manual Control System (Control Rod Withdraw Block, Section 3.2.C.).
A failure of one channel will affect both of these systems.
l 18.
The minimum number operable associated with the Scram Discharge Instrument Volume are three instruments pcr Scram Discharge Instrument Volume and i
three level cevices per RPS channel.
19.
AW is the difference between two-loop and single-loop effective drive flow and is used for single recirculation loop operation for periods greater than 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.
AWa0 for two recirculation loop operation and single loop operation less than 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.
l-I-
i
~
t i
i. -. -.
LIMITING CONDITIONS FOR OPERATION SURVEILLANCE REQUIREMENTS
~~
3.1 BASES (Cont'd.)
4.1 BASES (Cont'd.)
there is proper overlap in the neu-For the APRM system, drift of tron monitoring system functions and e'lectronic apparatus is not thus, that adequate coverage is pro-the only consideration in deter-vided for all ranges of reactor oper-mining a calibration frequency.
ation.
Change in power distribution and loss of chamber sensitivity dictate a calibration every seven days. Cal-
~
ibration on this frequency assures plant operation at or below thermal limits.
A comparison of Tables 4.1.1 and 4.1.2 indicates that two instrument channels have not been included in the latter table. These are: mode switch in shut-down and manual scram. All of the de-vices or sensors associated with these scram functions are simple on-off switches and, hence, calibration during operation is not applicable.
B.
The MFLPD is checked once per day to determine if the APRM scram requires adjustment. This will nor-mally be done by checking the LPRM readings. Only a small number of control rods are moved daily and thus the MFLPD is not expected to change significantly and thus a daily check of the MFLPD is adequate.
The sensitivity of LPRM detectors de-creases with exposure to neutron flux at a slow and approximately constant rate.
This is compensated for in the APRM system by calibrating once a week using a heat balance data and by cali-brating individual LPRM's every six weeks of power operation above 20%
of rated power.
It is highly improbable that in actual operation with MFLPD < FRP that MCPR will be as low as the MCPR fuel cladding integrity safety limit.
Usually with power densities of this magnitude the peak occurs low in the core in a low quality region where the initial heat 1
4 -
COOPER NUCLEAR STATION TABLE 3.2.C CONTROL ROD WITHDRAWAL BLOCK INSTRUMENTATION Minimum Number of Function Trip Level Setting Operable Instrument Channels / Trip System (5)
APRM Upscale (Flow Bias)
< (0.66W + 42% - 0.66 AW) FRP (2)(13) 2(1)
APRM Upscale (Startup)
< 12%
MFLPD 2(1)
APRM Downscale (9) 1 2.5%
2(1)
APRM Inoperative (10b) 2(1)
RBM Upscale-(Flow Bias)
< (0.66W + 40%) (2) 1 1
I RBM Downscale (9) 1 2.5%
i l
RBM Inoperative (10c) 1 i
IRM Upscale (8)
< 108/125 of Full Scale 3(1)
I IRM Downscale (3)(8)
> 2.5%
3(1)
IRM Detector Not Full In (8) 3(1)
IRM Inoperative (8)
(10a) 3(1)
SRM Upscale (8)
< 1 x 10 Counts /Second 1(1) (6)
SRM Detector Not Full In (4)(8)
(> 100 cps) 1(1) (6)
SRM Inoperative (8)
(10a) 1(1)(6)
Flow Bias Comparator
< 10% Difference In Recirc. Flows 1
Flow Bias Upscale /Inop.
< 110% Recire. Flow 1
SRM Downscale (8)(7)
> 3 Counts /Second (11) 1(1)(6)
SDV Water Level High
< 46 inches 1(12)
CRD-231E, 234E se e
NOTES FOR TABLE 3.2.C (Continund) b.
APRM-(1) Mode switch not in operate (2) Less than 11 LPRM inputs (3)
Circuit boards not in circuit c.
RBM (1) Mode switch not in operate (2) Circuit boards not in circuit (3)
RBM fails to null (4) Less than required number of LPRM inputs for rod selected 11.
During spiral unloading / reloading, the SRM count rate will be below 3 cps for some period of time.
See Specification 3.10.B.
12.
With the number of OPERABLE channels less than required by the Minimum Number of Operable Instrument Channels / Trip System requirements, place the inoperable channel in the tripped condition within one hour.
13.
AW is the difference between two-loop and single-loop effective drive flow and is used for single recirculation loop operation for periods greater than 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.
AW=0 for two recirculation loop operation and single loop operation less than 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.
l l
r l
l I
t
-62a-
~
LIMITING CONDITIONS FOR OPERATION SURUEILLANCE REQUIREMENTS 2
3.3.C (Cont'd.)
4.3.C (Cont'd.)
3.
The maximum scram insertion time for 90% insertion of any operable control rod shall not exceed 7.00 seconds.
D.
Reactivity Anomalies D.
Reactivity Anomalies At a specific steady state base condi-During the startup test program and tion of the resctor actual control rod startup following refueling outages, inventory will be periodically com-the critical rod configurations will pared to a normalized computer pre-be compared to the expected configura-diction of the inventory.
If the tions at selected operating conditions.
difference between observed and pre-These comparisons will be used as base dicted rod inventory reaches the data for reactivity monitoring during equivalent of 1% ak reactivity, the subsequent power operation through-reactor will be shut down until the out the fuel cycle. At specific power cause has been determined and correc-operating conditions, the critical rod tive actions have been taken as configuration will be compared to the 4
appropriate.
configuration expected based upon ap-propriately corrected past data. This E.
Recirculatior Pumps comparison will be made at least every l 1.
A recirculation pump shall not be started while the reactor is in natural circulation flow and reactor power is greater than 1% of rated thermal power.
2.
With one recirculation loop out of service for greater than 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> the reactor shall not be operated at a rated thermal power greater than 50%.
3.
With extended one pump operation G.
Scram Discharge Volume (greater than 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />), observe l
APRM flux and core plate delta P 1.
The scram discharge volume (SDV) noise fluctuations at a rated thermal vent and drain valves shall be power of j,40% and determine average cycled and verified open at least peak to peak fluctuations. Operation once every 31 days and prior to at up to 50% of rated thermal power reactor start-up.
l is permitted provided the average peak to peak fluctuations do not 2.
The SDV vent and drain valves shall exceed those previously determined be verified to close within 30 sec-at f,40% power by more than 50%.
onds after receipt of a signal for control rod scram once per refuelin; Restrictions cycle.
i-F.
If Specifications 3.3.A through D 3.
SDV vent and drain valve operabil-above cannot be met, an orderly ity shall be verified following shutdown shall be initiated and the any maintenance or modification to reactor shall be in the Shutdown any portion (electrical or mechan-condition within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.
ical) of the SDV which may affect the operation of the vent and drain valves.
-3.3 (nd 4.3 BASES:
(Cont'd)
~
the control rod motion is estimated to actually begin. 'However, 200 milliseconds is conservatively assumed for this time interval in the. transient analyses and'this is also included in the allowable scram a
insertion times of Specification 3.3.C.
The time to deenergize the pilot ivalve scram solenoid is measured during the calibration tests required by
. Specification 4.1.
D..
Reactivity Anomalies During each. fuel cycle excess operative reactivity varies as fuel depletes and as any burnable poison in supplementary control is burned.
The magni-tude.of this excess reactivity may be inferred from the critical rod con-figuration.. As fuel burnup progresses, anomalous behavior in the excess reactivity may be detected by comparison of the critical rod pattern at selected base states'to the predicted rod inventory at that state.
Power operating base conditions provide the most sensitive and directly inter-pretable data relative to core, reactivity.
Furthermore, using power operating base conditions permits frequent reactivity comparisons.
Requiring a reactivity comparison at the specified frequency assures that a comparison will be made before the core reactivity change exceeds 1% Ak.
Deviations in core reactivity greater than 1% Ak are not expected and require thorough evaluation.
One percent reactivity limit is con-
- sidered safe since an insertion of the reactivity into the core would not lead to transients exceeding design conditions of the reactor system.
-E.
Recirculation Pumps Until analyses are submitted for review and approval by the NRC which prove.that recirculation pump startup from natural circulation does not cause a reactivity insertion transient in excess of the most severe coolant flow increase currently analyzed, Specification 3.3.E.1 prevents starting l-recirculation pumps while the reactor is in natural circulation above 1%
of rated thermal power.
Specifications 3.3.E.2 and 3 were imposed based upon single loop operation experience at Browns Ferry 1 in 1978.
Since the noise levels at CNS may vary from other BWR's, Specification 3.3.E.3 was written to allow CNS to determine plant specific operating margins for flux noise and core plate delta P noise based upon arbitrary conservatisms acceptable to the.NRC staff.
G.-
To ensure the Scram Discharge Volume (SDV) does not fill with water, the vent.and drain valves shall be verified open at least once every 31 days.
This is co preclude establishing a water inventory, which if sufficiently large, could result in slow scram times or only a partial control rod
-insertion.
.The vent and drain valves shut on a scram signal thus providing a contained volume (SDV) capable of receiving the full volume of water discharged by the control rod drives at any reactor vessel pressure.
-Following a scram the SDV is discharged into the reactor building drain system.
' REFERENCES l.
- Licensing Topical Report GE-BWR Generic Reload Fuel Application, NEDE-24011-P,
.(most' current approved submittal).
'2.
" Supplemental Reload Licensing Submittal for Cooper Nuclear Station Unit 1,"
(applicable reload document).
-103-
IMITING CONDITIONS FOR OPERATION SURVEILLANCE REQUIREMENTS
~
3.6.E Jet Pumps 4.6.E.
Jet Pumps 1
Whenever the' reactor is in the start-l 1.
Whenever there is recirculation flow up or run modes, all jet pumps shall with the reactor in the startup or be operable.
If it is determined run modes, jet pump operability shall that a jet pump is inoperable, or be checked daily by verifying that the if two or more jet pump flow in-following conditions do not occur sim-struments failures occur and cannot ultaneously:
be corrected within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />, an orderly shutdown shall be initiated a.
The recirculation pump flow differs and the reactor shall be in a Cold by more than 15% from the established Shutdown Condition within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.
speed flow characteristics.
b.
The indicated value of core flow rate varies from the value derived from loop flow measurements by more than 10%.
c.
The diffuser to lower plenum differentia pressure reading on an individual jet pump varies from the mean of all jet pump differential pressures by more than 10%.
F.
Jet Pump Flow Mismatch F.
Jet Pump Flow Mismatch 1.
Deleted.
1.
Deleted.
2.
Following one-pump operation, the dis-l charge valve of the low speed pump may not be opened unless the speed of the faster pump is equal to or less than 50% of its rated speed.
i I
G.
Structural Integrity lG.
Structural Integrity i
The structural integrity of the pri-The nondestructive inspections listed mary system boundary shall be main-l in Table 4.6.1 shall be performed as tained at the level required to i
specified. The results obtained from assure safe operation throughout compliance with this specification the life of the station.
The reactor I
will be evaluated after 5 years shall be maintained in a Cold Shut-l and the conclusions of this evaluation down condition until each indication will be reviewed with the NRC.
of a defect has been investigated and f
evaluated.
I h
i t
l
-137-
3.6.E & 4.6.E EASES (Cont'd) jet pump body; however, the converse is not true. The lack of any substantial stress in the jet pump body makes failure impossible without an initial nozzle riser system failure.
F.
Jet Pump Flow Mismatch 4
I.
t T
i Requiring the discharge valve of the lower speed loop to remain closed until the speed of faster pump is equal to or less than 50% of its rated speed provides assurance when going from one to two pump operation that excessive vibration of the jet pump risers will not occur.
G.
Structural Integrity A preservice inspection of accessible components listed in Table 4.6.1 will be conducted before initial fuel loading to assure the system is free of gross defects and as a reference base for later inspections. Construction orien-tated nondestructive testing is being conducted as systems are fabricated to assure-applicable code requirements are met.
Prior to operation, the pri-mary system boundary will be free of gross defects.
In addition, the facility has-been designed such that gross defects should not occur throughout the life of the station. The inspection program given in Table 4.6.1 is based on-the i
' requirements of Section IS-242: Table IS-251, Components, Parts and Methods of Examination, and Table IS-251, Examinaticn Categories, all of Section XI I
of the 1970 ASME Boiler and Pressure Vessel Code, except where accessibility i
for inspection was not provided. The. initial program was revised to update L
to the summer 1972 Addendum Table IS-261. Modifications were made to vessel L
nozzle insulation and nozzle blockout removable shielding deaigns with the intent to make:the inspection areas more accessible by reducing the personnel i
i radiation exposure required for inspection utilizing available-equipment.
B I
The inspection program and the modifications described above were developed j-
-151-
_. - _ _ _.. ~, - - _ _.. - -.- _ __.
LIMITING CONDITIONS FOR OPERATION SURVEILLANCE REQUIREMENTS 3.11 FUEL RODS 4.11 FUEL RODS
_ Applicability Applicability The Limiting Conditions for Operation The Surveillance Requirements apply associated with the fuel rods apply t to the parameters which monitor the those parameters which monitor the fuel fuel rod operating conditions.
rod operating conditions.
Objective Objective The Objective of the Limiting Condi-The Objective of the Surveillance tions for Operation is to assure the Requirements is to specify the type performance of the fuel rods.
and frequency of surveillance to be Specifications applied to the fuel rods, t.
A.
Average Planar Linear Heat Specifications I
Generation Race (APLHCR) r During steady state power opera-A.
Average Planar Linear Heat tion, the APLHGR for each type of Generation Rate (APLHGR) fuel as a function of average planar exposure shall not exceed The APLHGR for each type of fuel the limiting value shown in Figure as a function of average planar 3.11-1 for two recir::ulation loop.
exposure shall be determined For single-loop operation greater daily during reactor operation than 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />, the values in these at > 25% rated therma'l power.
curves are reduced by 0.84 for 7x7 fuel 0.86 for 8x8 fuel, 0.77 for 8x8R fuel and 0.77 for P8x8R fuel.
If.at any time during steady state operation it is' determined by normal surveillance that the limiting value for APLHGR is being exceeded action shall be initiated within 15 minutes to restore operation to within the prescribed limits.
If the APLHGR is not' returned to within the prescribed limits within two (2) hours, the reactor shall be brought to the Cold Shutdown condition within 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br />. Surveillance and corres-ponding action shall continue until the prescribed limits are again being met.
B.
Linear Heat Generation Rate (LHCR)
B.
Linear Heat Generation Rate (LHCRd The LHGR as a function of core During steady state power opera-height shall be checked daily tion, the linear heat generation during reactor operation at > 25%
rate (LHGR) of any rod in any fuel rated thermal power, assembly at any axial location shall not exceed the maximum allow-
-able LHGR as calculated by the following equation:
max 5 LHGRd [1 - (( P/P) (L/LT)})
- 'E" LHGR
~
d (AP/P)*** = Maxi:num power spiking penalty =
N
-M@~,-,__
l LIMITING CONDITIONS FOR OPERATION SURVEILLANCE REOUIREMENTS LT = Total core length - 12 feet L = Axial position above bottom of core G = 18.5 kW/ft for 7x7 fuel bundles
= 13.4 kW/ft for 8x8 fuel bundles N = 0.038 for 7x7 fuel bundles
= 0.0 for 8x8 fuel bundles If at any time during steady state operation it is determined by nor-mal surveillance that the limiting value for thCR is being exceeded action shall then be initiated to restore operation to within'the prescribed limits.
Surveillance and ccrresponding action shall continue until the prescribed lim-its are again being met.
C.
Minimum Critical Power Ratio (MCPR)
C.
Minimum Critical Power Ratio (MCPR)
During steady state power opera-MCPR shall be determined daily tion the MCPR for each type of fuel during reactor power operation at rated power and flow shall not be at > 25% rated thermal power lower than the limiting value shown and following any change in in Figure 3.11-2 for two recircula-power level or distribution that tion loop operation.
If, at any would cause operation with a time during steady state oper-limiting control rod pattern as ation it is determined by normal described in the bases for Spec-surveillance that the limiting ification 3.3.B.S.
value for MCPR is being exceeded, action shall then be initiated within 15 minutes to restore oper-ation to within.the prescribed limits.
If the steady state MCPR is not returned to within the pre-scribed limits within two (2) hours, the reactor shall be brought to the Cold Shutdown con-diticn within 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br />.
Surveil-lance and corresponding action shall continue until the pre-scribed limits are again being met.
For core flows other than rated the MCPR shall be the operating limit at rated flow times K,
f where K is as shown in Figure g
3.11-3 l
For one recirculation loop oper-ation greater than 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> the MCPR limits at rated flow are 0.01 higher than the comparable two-loop values.
-212-
~
3.11 BASES A.
Average Planar Linear Heat Generation Rate (APLHCR)
This specification assures that the peak cladding temperature following the postulated design basis loss-of-coolant accident will not exceed the limit specified in the 10CFR50, Appendix K.
The peak cladding temperature following a postulated loss-of-coolant accident is primarily a function of the average heat generation rate of all the rods of a fuel assembly at any axial location and is only dependent secondarily on the rod to rod power distribution within an assembly.
Since expected local variations in power distribution within a fuel assembly affect the calculated peak clad temperature by less than
+ 20 F relative to the peak temperature for a typical fuel design, the limit on the average linear heat generation rate is sufficient to assure that calculated temperatures are within the 10CFR50 Appendix K limit.
The limiting value for APLHGR is shown in Figure 3.11-1.
B.
Linear Heat Generation Rate (LHGR)
This specification assures that the linear heat generation rate in any rod is less than the design linear heat generation if fuel pellet densi-fication is postulated. The power spike penalty specified is based on the analysis presented in Section 5 of Reference 1 and assumes a linearly increasing variation in axial gaps between core bottom and top, and assures with a 95% confidence, that no more than one fuel rod exceeds the design linear heat generation rate due to power spiking. The LHCR as a function of core height shall be checked daily during reactor operation at > 25% power.co determine if fuel burnup, or control rod movement has caused changes in power distribution.
For LHCR to be a limiting value below 25% rated thermal power, the MTPF would have to be greater than 10 which is precluded by a considerable margin when employing any permissible control rod pattern.
Pellet densification power spiking in 8x8 fuel has been accounted for in the safety analysis presented in Reference 2; thus l
no. adjustment to the LHGR limit for densification effects is required for 8x8 fuels.
l l
t O
l
-214-
~
3.11 Berne:
(Cont'd) 2 C.
Minimum Critical Power Ratio (MCPR)
The required operating limit MCPR's at steady state operating conditions as specified in Specification 3.11C a're derived from the established fuel
~
cladding integrity Safety Limit and an analysis of abnormal operational transients (Reference 2).
For any abnormal operating transient analysis evaluation with the initial condition of the reactor being at the steady state operating limit it is required that the resulting MCPR does not i
decrease below the Safety Limit MCPR at any time during the transient assuming instrument trip setting given in Specification 2.1.
i To assure that the fuel cladding integrity Safety Limit is not exceeded during any anticipated abnormal operational transient, the more limiting transients have been analyzed to determine which result in the largest reduction in critical power ratio (CPR).
The models used in the transient analyses are discussed in Reference 1.
The purpose of the K factor is to define operating limits at other than g
i rated flow conditions. At less than 100% flow, the required MCPR is the product of the operating limit MCPR and the K factor.
Specifically, the g
K factor provides the required thermal margin to protect against a flow g
' increase transient. The most limiting transient initiated from less than rated flow conditions is the recirculation pump speed up caused by a motor-generator speed control failure.
i For operation in the automatic flow control mode, the K,d the most limiting factors assure
+
that the operating limit MCPR will not be violated shoul transient occur at less than rated flow.
In the manual flow control mode, the K factors assure that the Safety Limit MCPR will not be vie-f laced for the same postulated transient event.
a J
k e
-214a-4
3.11 Brnant (Cont'd) s The K factor curves shown in Figure 3.11-3 were developed generically g
which are applicable to all BWR/2, BWR/3, and BWR/4 reactors.
The K factorswerederivedusingtheflowcontrollinecorrespondingtoraked thermal power at rated core flow as described in Reference 1.
lj The K, factors shown in. Figure 3.11-3, are conservative for Cooper opern-tion Because the operating limit MCPR's are greater than the original 1.20 operating limit MCPR used for the generic derivation of K.g D.
Thermal-hydraulic Stability The calculations, regarding reactor core stability, presented in Reference 2 show that the reactor is in compliance with the ultimate performance criteria, including the most responsive condition at natural circulation and rod block power.
However, to preclude the possibility of operation under conditions which could result in reactor core instability, the NRC requested the incorporation of a specification limit.
The power level specified results in a decay ratio (X /X ) which is 2 n significantly less than the ultimate stability limit of I.O.
References for Bases 3.11 1.
Licensing Topical Report, General Electric Boiling Water Reactor, Generic Reload Fuel Application, (NEDE-24011-P), (most current approved submittal).
2.~
" Supplemental, Reload Licensing Submittal for Cooper Nuclear Station Unit 1," (applicable reload document).
I l
l r
l
~
e l
-214b-
I 4.11 Bc?xas s
A&B. Average and Local LHCR The LHGR shall be checked daily to determine if fuel burnup, or control rod movement has caused changes in power distribution.
~
Since changes due to burnup are slow, and only a few control rods are moved daily, a daily check of power distribution is adequate.
C.
Minimum Critical Power Ratio (MCPR) - (Surveillance Requirement)
At core thermal power levels less than or equal to 25%, the reactor will be operating at-less than or equal to minimum recirculation pump speed and the moderator void content will be very small.
For all designated control rod patterns which may be employed at this point, operating plant experience indicated that the resulting MCPR value is in excess of requirements by a considerable margin. With this low void content, any inadvertent core flow increase would only place operation in a more conservative mode relative to MCPR. During initial start-up testing of the plant, a MCs evaluation was made at 25% thermal power level with minimum recirculation pump speed.
The MCPR margin was thus demonstrated auch that subsequenc MCPR evaluation below this power level was shown to be unnecessary. The daily requirement for calculating MCPR above 25% rated thermal power is sufficient since power distribution shifts are very slow when there have not been significant power or control rod changes. The requirement for calculating MCPR when a limiting control rod pattern is approached ensures that MCPR uill be known following a change in power or power shape (regardless of magnitude) that could place operation at a thermal limit.
-214c-
-