ML20083N574

From kanterella
Jump to navigation Jump to search
Forwards Remaining Final Draft Responses to Instrumentation & Control Sys Branch Questions Per 821005 Request.Responses Reflect Results of Info Exchange Meetings W/Nrc
ML20083N574
Person / Time
Site: 05000447
Issue date: 01/31/1983
From: Sherwood G
GENERAL ELECTRIC CO.
To: Eisenhut D
Office of Nuclear Reactor Regulation
References
JNF-005-83, JNF-5-83, MFN-017-83, MFN-17-83, NUDOCS 8302020023
Download: ML20083N574 (25)


Text

{{#Wiki_filter:. - _ - _ _ G E N E R A L h; E LE CTRIC NUCLEAR POWER SYSTEMS DIVISION GENERAL ELECTRIC COMPANY.175 CURTNER AVE., SAN JOSE, CAUFORNIA 95125 MFN. 017-83 MC 682, (408) 925-5040 JNF =. 005-83 January 31, 1983 U.S. Nuclear Regulatory Commission Office of Nuclear Reactor Regulation Washington, D.C. 20555 Attention: Mr. D.G. Eisenhut, Director Division of Licensing

SUBJECT:

IN THE MATTER OF 238 NUCLEAR ISLAND GENERAL ELECTRIC STANDARD SAFETY ANALYSIS REPORT (GESSAR II) DOCKET NO. STN 50-447 Attached please find the remaining final draft responses to the Instrumentation and Control Systems Branch (ICSB) questions in the Commission's October 5,1982 request for additional information. These responses reflect the NRC/GE information exchanga meetings held in Bethesda October 14 & 15, 1982; San Jose December 7-9, 1982; and again in Bethesda January 11-13, 1983. This transmittal contains the last three responses for the 421-series as promised in our previous submittal dated January 28, 1983. They are 421.16, 22 and 32. Sincerely, Glenn G. Sherwoo, Manager Nuclear Safety & Licensing Operation Attachments M.J. Virgilio, NRC cc: D.C. Scaletti, NRC _I L.S. Gifford, GE-Bethesda (Without Attachments) g F.J. Miraglia (Without Attachments) g;oO> C.0. Thomas (Without Attachments) U R.M. Ketchel (Without Attachments) 83C2020023 830131 PDR ADOCK 05000447 A PDR

I of [ 421.16 QUESTION ( Identify any "first-of-a-kind" instruments used in, or providing i inputs to, safety-related systems. Include any microprocessors, multiplexers or computer systems which are used in, or interface with, safety-related systems. l 421.16

RESPONSE

The GESSAR II design incorporates the Solid State Safety System which fundamentally replaces relays with solid-state devices. All hardware components for GESSAR II are identical with those used in the Clinton plant, and also with those planned for TVA, Skagit, Black Fox and Allen's Creek. Therefore GESSAR II, of itself, does not have any first-of-a-kind equipment. However, these solid-state plant designs employ three basic types of devices which are new compared with Grand Gulf, Perry, Riverbend and previous BWR's. These are listed and discussed as follows: 1. The logic itself is solid-state as mentioned above. Functionally, this logic performs the same (i.e. has the same Boolean expressions) as other BWR 6 relay plants .for all safety-related systems except the RPS. Solid-state i RPS utilizes "2-out-of-4" channels to scram as compared / with "1-out-of-2 twice" for relay plants. \\f The self-test feature is unique with the solid-state logic. 2. This feature is described in conjunction with protection 7.1.2.1.6 of system in-service testability in subsection GESSAR II. Analog trip modules (ATM's) replace the more conventional 3. Analog Comparitor Units (ACU's) for solid-state plants. Functionally, both types of trip units serve the same purpose, but ATM's are designed to interface with the self-test feature. The following information is added at the request of the NRC 7 9, 1982: after reviewing 421.16 at the GE/NRC meeting December The PRA fault trees assume a 2.4 hour repair time for instrument failures based on the self-test feature applied to solid state instruments. This is somewhat less than values used in previous PRA's (16 WASH 1400), but in no cases does it significantly affect the results. The PRA is a realistic assessment which accounts for all available systems regardless of design classiification. Availability of these systems within the context of various failure modes is accounted for in the analysis. [

2 4 r F (MA '

PR A F T~ 421.16 RESPONSE (centinued) The following additional information is provided at the NRC's request following the ICSB review meeting in Bethesda, January 11-13, 1983. Safety Grade Application of Microprocessors MN ntrol The Rod Pattern Contro11 era, )which is a subsystem of the Rod and Information System (RC&IS, is the only design based safety grade applica+. ion gf microprocessors and multipexers. RPC is two I divisional,*Montains safety related components with the logic hardwired. It is not site programmable. The programs can only be modified by engineering approved changes to and replacement of i electronic circuit cards. l The Rod Position Information Systems (RPIS), which is also a subset of RC&IS, while not required, is designed in a similar fashion to the RPC. It is also a 2 divisional system with safety-related components. the RPC and RPIS are separated from non-safety related portions of the RC&IS via isolators. Manual Scram of RPS The manual scram for GESSAR II shares the common logic with the auto scram at the trip logic level. There is a way to scram independent of the NSPS logic by manually tripping at the local panel the breakers protecting both A & B solenoids for a given group of rods. The scram methods for GESSAR II are basically consistent with those employed on the Clinton design. i The self test system has the following characteristics, capabilities, & design configurations with respect to specific questions from the January 11 & 22, 1983 meeting in Bethesda, MD. A general description is presented in GESSAR II, Section 7.1.2.1.6. Simulations Test of Two Divisions i The self test system, during the normal testing cycle, will send a test pattern to another division so that the inter-divisional communication path can be verified. This test is under a master / slave arrangement, with the division under test being the Master. During this test, the functional logic in one channel of two different divisions may be tested simultaneously. This test, however, will be under the same timing control (less than 1 msec.) as the other tes.ts and so cannot cause or prevent a trip. 7 l Pulse duration The maximum time a functional input can see a test pulse is controlled by three different and independent means. First, the software generates timing pulses, as shown on the timing sheets provided as handouts during the self-test presentation. The gating pulses are I __ =,.

91I Is A HP" "** f Uvpb QM FT 345 Pulse ' duration - (continued) about 1 msec maximum duration. There is a separate timing circuit in each self test division which is hard wired and is checked against a different crystal clock than the normal self test timing elements. The self test timing is checked against this hard wired timer and a difference would be reported as a self test internal test failure. The final pulse limiting circuitry exists on the functional logic cards. is treated as part of the functional logic, and consists of a capacitor / resistor circuit which only permits a test signal to appear on a functional input for approximately 1 msec. The unlikely failure of this highly reliable component could be detected during plant shutdown by special testing. However, the self test remains single failure

< oof with regard to pulse limiting even given the failure of these components.

Response Time Testing The self test system will report any deviation in the (,utput of a logic string from its expected state. Logic strings are tested end-to-end (NSPS input device to output device) with the same maximum timing constraints (less than 1 msec). Therefore, the maximum propagation delay (response time) through any logic channel in the NSPS will always be less than 1 msec or the self test system will report a logic fault. This constitutes a response time test of the logic components every hour. Responses of external elements such as - transmitters and motors would be testable as normally required. Fault Alarm The self test system will provide ar. alarm on a logic fault or an internal self test fault by means of a window annunciator on the main control panel. These alarms are independent of diagnostic failure information available through the process computer interface. Trip Setpoints The recommended frequency of the trip setpoint check of the ATMs is one month. This recomendation will be conveyed to the applicant through technical specification inputs. t -ww-g-,--ww-


w 7-p rwy--, -

-w. --wy --wye--ww-, -wwwe+-g---eve egeyi.y-gr- - mm w y-www-y-mwwp w e- -- w, w e r wrg--Tww ,y,--+-+e-aw-www --,,-v%-i-w-- -ww------ e-v-w ri------e-

El.u gesrome (cdrad l=tgAL psAFr 't 4 5 Reliability & Qualification The self test s'ysten is comprized of highly reliable, consnercially proven components. Solid state logic elements and other components are purchased MIL 3rade to insure maximum reliability. All boards are fully test before being installed in the self test system. During NSPS panel qualification tt its, the self test system is exercised before and after the seismic tests to ensare operability. Latchina Circuits The NSPS latching circuits, composed of a resistor / capacitor network,are designed with an approximate minimum time delay of 20 ms. Since the maximum self test pulse duration.is 1 ms, there is no dangerof the test latching a circuit. The exact time de'.ay of the latching circuits is determined during the individual card tests prior to installation in the NSPS panels. Special testing during plant shutdown could reverify the timing of these latching circuits. Software Verification The self-test system to be provided on GES$AR plants will have its sof tware designed in accordance with G.E.'s Software Engineering Manual. This manual was submitted in draf t form for NRC staff review and will be formally submitted after receipt of NRC comments. Manual and Aur.omatic Mode Circuit Sharing The NSPS is designed as all previous G.E. BWR designs, to maintain independance I between automatic and manual functions as much as practical. .g I N e - ~ -.

y y.ta RES!!!CS (Cnfik*eN) ^ f jflA L l?R A FT' 5 '$ 5 Manual and Automatic Mode Circuit Sharing (Continued) Sharing of manual and automatic' functions through load drivers is done in some cases such as the RPS scram function. The justification for this is that no cammon mode failure can be postulated that would hot short these lhad drivers on more than one channel, since the design complies fully with RG 1.75 separation criteria. In addition, load driver circuits are designed to handle any known type of electrical disturbance on their output. Over-voltage pro-tection is provided to handle approximately an order of magnitude more that the expected voltage, and current capabilities are many times that which is required. O ~ e l =

QUESTION [g L in Section 7.2.1.1.F.2 cf our FSAR, ytu indicate that the reacter system mode switch is 421.22 used for protective functions, restrictive interlocks and refueling equipment movement.. (7.2.1). Discuss how this mode switch is incorporated into the overall design so that the single failure criterion and separation requirements are satisfied. Use detailed drawings and schematics as appropriate. t, T ^

RESPONSE

The Resctor Protection System (RPS) mode switch provides bypasses and interlocks associated with various plant operation modes: run,. start-up and hot standby, refuel and shutdown. The mode switch has four contact blocks, each physically separated within compart-mental barriers. 5 witch action for each contact block is provided by a non. metal shaft. p. ._ } e Tho' contacts within each block (Bank A,8,C,0) perform intertecking functions within ,C 3 .7...

  • U their associated division (1,2,3,4) respectively.The contact block designated to Div. h is located closest to the rotation stop (or front of switch) and the other blocks follow in'- f order (i.e., 2,3,4 away from switch front).

The operation of the switch is under strict procedural control; therefore, ths' ope when switching modes, is checking the plant's condition through indications provided* ~ . *.J. it display computer and performance monitoring computer);.' gy ,l M.gy..,., (status lites, annunc a ors,. Discrepenciesd between;these d p. ,?gOk 7g.M. ;} #8tl.fY.the operator th' t the inode has,not changed ;--- - a 8 ~. ~ ....,p. %.' *, a :.* : c t.- The display computer monitors each position of the mode switch. 5pecific annunciators Jf . ~.. .e provide Indication such as " modo sw in shutdown" within each division and " mode svr not in run" within each division. 5everal annunciators and status lights are interlocked i such that before a tripped condition from NMS,W, RPS channels are indicated, the mode switch has to be in 'run' position. %4. Because of the interlocking'd;visionallogics of the Reactor Protection System, failurs of contact blocks will not prevent normal protective action of the safety system (scram)y.3

h. The modo switch, as incorporated into this system meets design requirements of separation and redundancy.E ".- Je. T.v;=.uun 5yn=>> l. e

&-8 * - ey.+.- with *=. 6 -- g;,,.. ;,;,,,,,,,,, 7, ;, e* ; ;:,;d ;.......; ;,;,. e. 9:.: rt k M,4;f a- : 't!:t: 9 8'-h -- *~* kM is

  • -!;.T'-

?:t' *-8; 7 f:f!: _;.,: iv...l,.....! ;;d 't- - h trip avstem.. j Solid state logie is effectively a miadruple trip system. Solid state is 2 out of 4 at the instrument channel level and ess6ntially 2 out of y- [)/) f 4 at the divisional level. At least two input chainels for any process and at least two divisions =ust be tr@ ped to initiate a scram. Each [ contact block is dedicated to only one datision. Mode switch initiated ol'f# scram function bypasses are implemented at the division level. At least three divisions muat be bypassed to bypass a safety function. i 1 e I --gb. me m

421.224 QUESTION Perfom a FMEA for a postulated break in the reactor mode switch. The break is to be postulated for a one position at a time switch movement upwards or downwards. Only functional inouts need be can91dared. Positions between noneal positions need not be con-sidered. e RESPON5E The attached Mode Switch Functional Matrix is fomatted to illus. trate which functions are normally perfomed in each of the four operating modes (switch positions). Each switch Bank corresponds to one logie channal. It should be noted that most functions re-4 quire four Bank channels but some require only two. The attached FMEA tables illustrata the postulated break locations and show which functions are imposed or bypassed for each break location when the Mode Switch is. moved upward or downward to a different mode position. The only break locations of concem are between Banks A and B (Banks B,C,D potentially malfunction) and between B and C (Banks A and B function normally but C and D potentially malfunction). A bretsk between C and D causes potential malfunctions in only one Bank channel and one channel alone cannot degrade safety or initiate any 4etion. As' shown on the FMEA a ffectsa description, there are no effects e which degrade plant safety. There are esses where an undesireable trip would occur or rod motion is prohibited. These events would only affect availsbility and not plant safety. l O Q a

l M oOE.6WF(M W W 'M " 3" ' ~ - EAHK C BAtlk 9

  • yt B/ Nil A 8/WK 8 Nlh tlA i

% Pl$ Cot-)U M TS'/NO HI11 ~I 1 g p g pp,,c,'p,

2. ANN
  • MCf'C /&P g

,,.p. g 43 g.,, }, 1

g. /M.*!.C w! $.'i S'/PS $N' I

.i. E.?A t* s' * * :.c T2. c.w-: s n.' esrv 6 YPs so. ~ . 4. FCYF*>rs. L'$Hf '.EGAC-l e nto fror tNo J' I D/S Q MrAf$ TZ'tblO .h y 'l. .p5-Ed6 cy?2 P W s ) 8.717'

  • CCAt adt/T3 fcyatt' W

. PC cHy Gil hi Got 'A'

1. DE ENk GP 2. !$Y $2L 'A' 9.N ENir CpP I FSV Sct.'S',9 1

Bs rou A SAmE AG tsen : l j) IoJPs ECCETitcM LITr ort

  • SAM!! AS BANK 'A'

.s A r~s t AS y/ 9 e I. 4f 1. sol 'A' L tYd o ff II. 4f l' sol ' B' LITg oFF tr. k f '2. So s. 'E' L a Ti It. 41'l J eL '/ ' L I TG o f'f b $9Y tidh VLV SOL'S* C5 Ek ir br/ t> H/p I , $ D V l$eL CV faL'A

  • 0s**(J l sy

~ 11, /Hd *1%$4 Y:,fgC/H'IHD 4 EYfS MilY CLOS'YA 9 W S A b O W $ A!45 A$ ' 8 APE & SAMG AS 84HK's. I lt~l. Sff? CHWI.(1) TA f if. frsfit F*c C rop 8404K .) J

4. Bfri ta M SL ft$$ ~1*2 J

t HlA glA N/A I. plS lcrif H005 JHO

  • j
3. lHTLQyl GPV 81f3 $t' 4 Spp,g p g y,g 4.Eff.A S.m V HI t.yL TK

, ~ 3 p pg p s gpp,e p \\ S. para.>. vil HitY RyPS S W ^'lA @lfS l16iV 4Los 'fR $ S A ClG A? 8 A.N" W N I4. S afifes/RGVL. Pus 1: $AMG E $ 9hu IT'8f 6.CH Whill.T L _, f f*3 CCD6WLW f $AME AS 88 test A J l9. Ipit.Il ,, )

.4. Sifs ta HsL PR$G ft, g

N/A 1 pl/4 I. CIS.'a n P M 0 9 5 lH O ' ** A' S. I N TLK * / N 61Y 13ff3 S W lA-l'f7 .A I' y'10 - '& N 'l 14.Bff5 MSIf Clos TK $ h6,"

16. Ju TLG[ ap cc.

$AME A S Bane'A' U ~in i 1. eyre wi. c n -re 17.sw WN" l'{.S m g i tg. y rox Roo giocx 11 ~2 Mb ,Q w/M 19.ta r:.x .) M.byPS to MILP/4 TK 29 J t ? n.' Q

l. PlV CoHf MCPSlHP-N/A

.5 9

16. le/ TAX M// RAdC q

t9.11f$ 'HetS TM.' AH& l l S. 20.-/g TLK fost. Snfewe/ o) 2I.~tti TLil 70K '/RH T2 ' W5 0 WA A ' 3# N it *tfS t.PA TR' AHil SAM 6 AS BAHE P Y gg].yjfiti p'oK 'S r4,%2 M TC' PicnaN conPtuo t.t.pn Y t.se f*0 K IR&TRAd d FErr r~' l.!~rt GA

i o

TTP* TPANCIEnt' 7BSf PANCL -- til16Cs/ lSC ?' LOT MA!! YA/VG [ SIJL HS'. $T/C1'c.lf& lh f sfAdp CY AHwL; CEPL HI wATCR LGVGL. (S t M ori co He': FtreformeWC cons!UTGR 1 l'IS Cont: p/Srtof confuf6g gggg: rop ACft@ carafr'et, c/& 'l ~ MP5 : Mrpt.$ CG F*tJ61 tr r Tle : ies 7:- c a o c < ggri: e '%r %r 'brZone.4;, 5DV : SCRAt% OrsccMuc votuMG 1

j UNLESS OTHERWISE SPECIFIED USE THE FOLLOWING:-

  • '" mveo APPLIED PRACTICES SURFACES

'0""" cts on wac-nice l ractioxs cremts l J t t 8/?End TVl'E L snuroown--+ errurL Effl FuNcTl0UL

  1. t'*l*
  • t

/~hl "(4 OAl gg pgpffp $f, 4, DZ NMM f let Sdt 8;[sb (st) W Ab + 'YNW W +15 by13-ve.!,e A!n:s. -(is)~ffa 4/ bok B, c b ' we w i Af6 a PEFan-+ su 4 U.S En l')? SPV puNcrious c6 //m - (4).) R e w ath p 3,tj, ; i g f u gey Q 0,reraOc $r ?O IT;C).b b hi",$ a N8) f

  • sin Met * ~A/(, b tv.e a reta. n hkn ~;>

nu m a r..> o,ev n aur A/J 4t:arv j ~ - 04./ + 2. g e gi,, v i ~ D8 # I St) (WS --+- IPVY Erra ,(/m (s-)Opcas) 7b n YuHc71o n ((4)(t1) NY 'W 4 s:py d 2i L ' (tsTAt.NEk 94;& >./A ope +d"' W n a 5ew1. gy smgrg. 7 + +V b C3 a se,4,a ww@'*A'" N 6*) i (z!) oa st 2-. Mis m m - ws, A/tn.t.. Ca) l 3 4 97- .2p, 2/, 22, 25 k jera,CG,e,4s %*~ h (21) 3Ma c, c, D e }8e n L Suf flS.' JTMT vt f B6 s7&snj . Psv: P/kT tk M vfl /S + O S c* M ' pufwycoArvp?t ehWLl RfAC f// 4fOff/t f.(vfl Dyf3 13yf90 I?Acc l I?w /)c'ited cof7qaL CAf twittuics s RCFL l Rffthr. s terW "TK -rs,a i sov scA an oncu m s vaiv M { j en. oe, n.m enarro. v or \\

Qv l TITLE m u c= succe 3. a=ous [j'{ e co=, oa s rct s= me. FIRST MADE FOR n 1 =~.m-i 2 7 g t <r {p=' A' B C. D A & $ w en't.4 > 2i & n a w < A Q p

i. w a k a A -- L A. M 4

~,.4a.9 jsta - no sm) & N

  • dis (C NP.A1608 l N D

./ ')'f ;/yk. e,. lr,eif.tcY! l3 ,l,,,4, a,,,,Q.4 a//.nk 4 SS*** '(m) INTLK W/SDV CfPS Jy r 4 4 6f93 SOY 11iLYL T/? 5 iNTLk' WlNJSW gytM.sd M 4 P&'m )10W,conP '49C Ann Tretp tuo '. :s 4.tn a &y.z. w ol k w og fluo,s w 9 _ Q. 1tb l4 7 vis coste ??t% Te two %' k. fwd +4 y 77,p,,e,g,,,c,m

N W * $ & M ctf30 & Q!j,

1 QE-EdC s.;p/ p1V Sesg ;) b R!3 Rs367 l'W1 UTC cn n is e in, r, r<a ag RA e s, t tt.'h C. roeL-II GPi SOL'A ' LITE G s ' y "p w < g u s 0,1. M m e 0.a m % e a c4 2. 4. sus, o 6 soe s j, I?. SOV /SQL VLV SQL'// fg.g'Y ' p "g "p' ls & son. as +r-2 M* sis. s s3 ft/N RfAC'/?SCMsl(Hp .' ~ jf. ffSW (Qs 7(f sw Ndr I*'* Rw,o A nu.,& lC IN kr f?EGL Plof L Ilo iff 7LK 41/RACC - C' i

ac ; Q / & ' m
  • l $ M ~nl" Se 17 fdfM RitbuL(t) Tg r

_ M o-r em.sdd & ,l d **$ I$ 8y!1 NMS T4 Gh)M s : 7 *6A-AH 7~ Am M A 's' l'l INH 4' fot /200 13toq A Ad-:75U+H5 20 /NTM fee Sa p w4f 1 .s+eud2 /Skjw:_h^^Y h Ll/Nng$NIVfog ifA q og og c4*q' ~ H.e.at.4 TR REV1 slONS PRINTS TO i 2 L IN n k Got Metign fT$Q, & }tsoiLw4.k M

  • p. h%

tit fYR "W 6elwa i 21 IWng rA M7trxy MA sT' uit aal 7Tp; thwwn rar ori u eye to >tsi.kr rrc ? ren.s w o w : mietre11arra caowra La htSt. tes TK : L m Mst sk LkPm - ~74~ seADE SY APPaovata ..-....--..-..... DEPT LOCAT10= C0=t m wg L l g ,,o, i I I

f ~ i UNLESS OTHEl'iWISE SPECIFIED USE THE FOLLOWING: APPLIED PRACTICES SURFACES YottnactS ca **c==' j FAACTiomS DECIMALS v/ 1 + MEAX TVPE 1 n) His A - Puu ueeexs in w..# ~ 4, (yt) /~"##'"# Z g.gg fGW W M 24 24 23 lew5Al y (2 ) 3,, g g,9 ~ i ..m. r susz c.* em s !!D 'C - s,c, p. h wt4fl v* t.4M a t9 A-*n O {li)n A%d Aj + tLi$ n erst & Q fQAs ki i v-a. O,&+ u ase _ (s>fn).(2a) -di VdesuvdrQ w s,I % J y,v he, j ra y m aarsve 6.s s m s.

  1. 1y owdIf a i Tx.y'ed%'*

DN N y g s A 6, cdD-m REF0EL g sukHs n e rce y .h sw N t> u i PtIsw*

  • t c. <Ao o~rsa uasrews eL4%t.

ww t & z.. a-s -QQf.3bVc IINCa!McTG n Aq m Xf_ u ns & 6& B;C.>O.s e_= pir a Q 4* G4 64 a-~h. 8 4 4 W &cwif .SHuTDO WN +-- JPffuTL w e p e c.r - fy y RmiusD:-

  • n s-p d--s ae&

tv o ust .h w.8 4.m n lJ~cowrcs3*s A.ans.. W + k.s-u ($ " ' 4 8Js 8,C,Rs tt) I4.esr ~ k 'Q _-it j is 6 J B. A W Anj$'d di e d b (ra dd i easet ~ .' lPSV: Pit *T scappy ygt/g SulHS,' XM ut' f Mir s?Mdf + p s ce M : ptsfuy coMerrt eh WL,' R$dC f// 4f$ffff (( vfl 07/3 nyraa (?gcc.

  • t?oo ec7toa correct. cm leri<

twstewcc RffL l Rfft/ft. I sov scAest onwnts outw* ...,m.... 1 6 e .._ -_-., _ m,,-,_ - -

G E n E n n 6 g 6 s a. is o tuo o cox, en sagt, S.,,,, R,Ef' TITLE nu casions 1 w cuts i co o om satti sa no. FIRST MADE FOR -- ~ : m,4 s 2 y r <r fswl Q & liffflol[N & Q= k 6 C D f 4Qs 44M i &7,7fo,a.'pu / k U u f ) Abe p. 51)M C.Tl0N ? ! !! W lM SY A~ ed '# g 8 m n~J 3 'iNTLK W/5DV t? FPS 1W I j .t.Sf4 au & M W8 Y # - "k.Y 4 4-QyPS SOV 11i LYL. TR 5' lh/TL)( W/AIS/V BytM.sd fe PCR /10W. COMP '#TM_. Aum miP INO ys...% r* slt. qu l & S $ 5'+~ W S ~ 7 '15S cott! RPi TR INp ~t-g YTP RDC RUTO schy

  • fUK-SWGsLP/(SVSat/)

c RP3 RES67 fFen L/76 oH m!d. kwe 40 & $* A. " gl Gft SQL'A' L/TE c.wp I$ g?_ SDV /SQL VLV Set.*f/ og.cg > &dr alm w&W o MY,. G # M 4Gec */z.sc M A in o J+ yyrS MSV CleS Te 004.

    • Mar /t3 Q Anysy sC IN7UC Ert. Fler i4 Itsng RKc.

Yh l By N$ T A 4 b I 9 INT 4' fat Rap titocq '20 INng PQ SSTyoW4 h &ldNN Alb /st, 7~W.- Ab f .I$q gg A A. WA.4'o REVi ilONS PRINTS TO r 2 2. INnt F44 M4 /f,h Y gy f 1 pg sr M4AIT UTE osi T T P ; y w )t y T T6ff f9ff 5 L 4 O y PJ lo M L et rtt f4AAod W4fl P 64 H ?n fi g fys h'tft/t C g 4 N N t2 i aos av

m. oms

__________________om. r .o. + -o. co...-, ,t i l .I L

~ " ' " ' * ", UNLESS OTHERWISE SPECIFIED USE THE FOLLOWING:- l APPLIED PRACTICES SURFACES tottnacts om **camte F1ACT:0XS DECIMALS ) + + 4 anent rytt 2. ~ 9p-l wo,n> c RErveu ~ rvems Ra nsr e D I 4 s e,'s f i o f e d i O&l -l*W' k rn o m

Nns, O# w. u

+ thconscrop,c 74,7,,sh e & 4/,,_g (,gyque g LL ks C nd D g_; Pfft)EL su ' Efra n, ara,~ > (f_f; ~ R.er*mtD 4 3,q a tt M dyS WW-M' 4 t*~k o m (/swxscrai0 ym. (._ .~.. ~- - y_. z- ...q.. rp-A ~ ewe SU4Ws ~ PUM ru ncrio us uoue T!v om persmsg ., iQ 17 ja,a. D... Ih - ojns:w h &~h'6 4 9 _,gy 'd w ise Ukcourt.cs@ * ?p,2, n w3 A,ha--{*][.u %,a s e 4 M 21, gap ~ 2s 5 2 pas n V'_ ~ ' I 5U$HS ' 37MT Ut f htT s7Atof PsV: Pti*T hcanst VHLf6 "l ~ pscopre : pjpay coyoit gh WL l /?f A C f/} 4/$ ff /f L ( Vfl. ~ + ayn isyfsss I?Acc.,* f?co ec7tod congal. cay JWit< twicewer RCFL l Rffy(1. rw n -ra io i sav s scnen onuants outuM 3 , PP cos-P r? 743 PRtNTRO BN U CA l

w l j "y TITLE ico i ce : cce su A3, mio s b } [ anaus coat on s ccr su mo. FIRST MADE FOR o i = _ ~, _ _. Beret Tyn+ # 2 7 9 'TS, b A, 3 c D 4 Tksr Pavet. C4y dig. O Ormene sartry - Si.r, &h w 4# & h&s c.d D e m 3%)C.IloN oh t w c, oe rov us ' sap @( tiFPtcT A s.t.. w I

  • dis W.NO2IND er. wwOsm \\s. tpft swateL Fw.M %.

2 Ofth M6PE IN ~' ~ v 3 INT 1.ic W/SDV.GlPS 1y W-NY 4 By SOV til Lfi. Tff ? 5. INTL k' W,IstS/V Gy:M sul fe PCR )109.conP 'ADC. Aum TRIP JND saan inc.we. u aythsco su u c.4 p. Wa m 7 vis cone R6 TR IN9 (W Wk $$Y 5 TTP Af$C AUTO SClity ~ o u eu-u m m., . m % n%.<c. 1 n-m e est set 4 b R!S RsS67 fra!! UTC on II GPl SQL '/9' U TE O cp It SOV tsol. VLV Sat'sf Og.g4 a / / ~ 63 J//N RW 'fr. sc#ss ing J+.SVE! MSW Clas T4' ~ ps sw sa >~ u wa sCINnnWll?EFLPier ? Ito IlynX W/RACd ,% l-b y cax n.f) de f y v) L d~J-' :a:= E E 7 SYlS A'U"' (') T'i h,eu w w.s5{b;'tas.eo.!el r.'sv.s /0 19 8y?3 N4S Til' GM4 O jifd SO1el. /J J :.. 4.w #4 " Ataa 2. I 1 iNI4' f0f NUD '3L0(< I-be y &sI aaolabl. -f*r s$een L.eha to INng pit SripoWy L g '?; 2,l/NTL(MM i(A R Ot Mlas co'n' / = p, w ek ncecens a $1 9n d e o e w-o Tb P adr.smi M l as REVI HONS PRINTS TO .r i ie & fr &lut* & lAYt$d d+1 > 0 .'rt{Yt ea$h$ / p 21 I/OLT Fat MITf?KT fed A *T U ff.a AI TTP ' 1Aw)/f*7 TfD* /Wft ?4 0yP5l0ML90TR a f6A. Aod Or*fl f64fOffGficudtit CU4N7f/2 ' Lo pst PM Tr : In., ya % La % ~7s' i MADE ST arr,,v,aL3 isSWEO / 3 fr, tocatio-co r s ccr s. i i 1 .v _..n_

= UNLESS OTHERWISE SPECIFIED USE THE FOLLOWIN APPLIED PRACTICES SURFACES 'otna= cts om =ac. / , m...

m. _

/ 1 t B l?E n d T V i'E R 60* "

  • AU kire

^ E'ere

hp>1g

/$m ~ t sn o + u, > ,x p a u of ~ d ~/ key o f + # A !r' ff-4 gyg p,y. .Tq i P j tC INM Wl[?ECL Pis)7 l& IH11.K 4lli?MC ,;.) p%Er (b 0 A.p,L y u /.cr'./Rt-I 7 Sf95 R@L (7) 7R Q33Q&, &f M */f I 9 8 f/3 N,4 5 Tff G h )M 'V i 1 i N Tlg' f~o f R ap /)t a cq 20 IN TLK f*if.S$7yaWy [ 2.l/NTig*fM ik R Ot @! cg%# j y L/p~/upl&gg/ dcd n/$ m Lf m s gg ,aw e e/J w REVI i10NS PRINTS TO S ~ .E L IHn< l'ot. ster ju ) J Aladk m n y -J J v' ffu M M" *** **0'"U \\ l 21 Ilpl{ P4 fG7t?KT l M4AorLaTSed 77P,* yw)/fd7 Tiff 99*fL. 24 OyPJ Le MSLPR Ttt teow cw: tw eisehewn cu Mra MaoE SY Appmovats \\ ________________oPr f Locatio= ce=t om sacer sn =o. f i l l J

g-e ~ a UNLESS OTHERWISE SPECIFIED USE THE FOLLOWING:- { APPLIED PRACTICES SURFACES TOttMNCES ON Maces *NED l FftACTIONS DECIMALS / + + i + BRSA< TYl'E 3 QtUTDOWN--+= RffUFL fy m &< vs s fe7AmrJL

  • g 9,n. & L_ Q W

E'I# ~ h /J D cob +

0ne m acciE Q p-L y n d f l

.6 o ~ }. b R E S ufL. & S U (H.S W. ?)4*sts W 3, 4. ANo tY nmsig o r e n.at9 V e' F. R. f5$ w ks (5, c,o 't i ([rireaueEqqD h I (, Ib.1.uw.AO V C F rt ~ ~ B~wns 0,c.,D SU(N.5--+- RU+/ l'~rMcv':V5 Rer4wu' e y,, g,9 34 n. . a 3 J J ./ eu.m ac h.n.rswk. 13 ossty (JacssecrE.o l + g R o, s. I, 2 2., 'lL 3 ' N oramnvc ie a n a ~ w.s eco l Ane M V-i $ufflS "' prMT Ut f MtT s'i/Mdf PSV A'uT 3ckM VML4 ~ a 4 escorte : ptjfw coAM?ff th WL ' MAC llI W0f" SOY' a Racc

  • 17ao echad CofregL CAf nyf3 13yM m

W14tocg RCfL l RfMt. Sov scai u ontu mE velo'M r/ w. I ,,...... n.u. m.m.,,, u m g I s

T = =.w m u ri a. g g L g b g yg g b TITLE ce,, c= sacet ,,, y, ! ta m s ca, o...cre i.. FIRST MADE FOR DeFA( TyPf + 2 I r v, ,4 r, c qwM,Jl!f'^ h k 2- +3G " T'5 O , a, ~ wM by WNC.TjoN 1 1

  • D13 %Ni'.%DG IND 2

ht9h iLioPE IN 3 INTLK W/SDV t] FPS SV 4-ByP3 SOV til LYL T/? S INTLif W/MS/V' GYPS SW' 4 PCR )10W. con? 'Woot. Ave mtp 180 7 C)S CobfP RP3 TR lh!9 [f TTP RfAC AU1D SCinp' 1 QE-SWC tir/ P3V Sci /) b R!.S RCSG7 /Va!! L/TS oN Il GPl SoWA' L/TE cy:s I?. SDV l$ol. VLV Set'// Oc.q s3 ft/N RTec */t. ScAnsi fnp ~ )+ PS MSW CleS T& oc s~ me-i~ tean A,w.o sC IN7UC WlREfl Plot 14 //rn# it//fdCC I713ffs RJHUL (9) TR l l9 81/3 N4S TR AM4 i 11 1T. h ' fo4' 000 /JLocq t 20 INT 4' f*q S$79W4 2.l/Nng AW eh R et met c4%' TR4NN REVI il0NS PRINTS TO l! E t. INu< fat Mg )gp TR f50 M*Althekwg ~ t1 IN11Y fct W7/tKT PedAor a16 aA) 77P,* TeuJit/7 Tf17 fB>ft-L4 0yPJ Le MSLM rft tenani w: tweireAanti cuMre I lo/4SL ft: Te: M /!,a. 5%m L: : //a m u % ) seact av appelovagg \\ DN H


OtPT I

LOCAflom C08tf ar 9setET ses 40 i p l I i

a, l UNLESS OTHERWISE SPECIFIED USE THE FOLLOWING I APPLIED PRACTICES SURFACES Tottmits om *xam F8&CTIONS C(CMat,a + + 4 BREA< Tvi'E 3 SU f hse N t**t Eun c tt ** h $ p)7 c ~ Ofret C lido kd 2.0,2.f, i t TS 2 o p./- op g lu.pim vivu p.ra, now y O.C,0 W-/er7Y or NConAMC7s0 *s a <. n, is 2.s Reus.n s o o a 0 9ct. A.T s vC W eg. f3 /* hf K Q okk.y Pf/7AFLi SV f5 tw.c.n ow s (EThlftED _ ( C. snot' W ttoC Fst. 0% %c0 3 l 5 ()hceppiGCTf.b. 3,9 Aw u 15" RCM A' A OPtr9.a TnvG p e rt. GaukJ f3,C D 3 SHt/TDWN & I?ffdFL fuw e.Tt e s RerxiNFb _ g ir i u omrtv tr p n. m x o + lbicuncrED

  • qs *a a, w u a i

oPtahvivC Fort. DaLk D 1 DanV-I 3$HS,' prMT Ut f StT 57Maj PS V: PiuT fckM VfLis + oscan ' agwy ceAnta enwi. R4;;c 91 riersit trert 01/3 isyters Racc.* eco ec7tos congat. cA9 wit < IWWwc( ffCFL l Rt:fi/61. sov scan ontw.ws vuivM 3 FF 800-F (7 743 PRINTRO IN U C A. sww--- = m - mo ws_ or ee w - mn m w ww - ~e-we==* s w w en

  • m~%#^^***** ' ' ' * * " ' ' *
  • L -----

~

---__ _ m .o. GENER AL @ ELECTRIC come em swett s w. REW TITLE N$ sons g aKGLES FIRST MADE FOR ecut on satti su no. I 2 7 r <r k A '- S C D I lf. f 8,C_ ofe.tc lc P r~of'er l/ hoy og IC, C./swn e /fO C*a.n n o f b y r 1's elf" n N C.T IO N 1rf n/<

a. r1 y a c.ft e r),

.g3 i ' 2 Molt Mope IN 3 INTLK W/SDV GjPS SW 4-6y/S SOY tti LYL T/? s lhtTL)( w/41sW gyps.sJ fe PCg $100.conP '4Dc Aum TRIP IND 7 DLs CaMr g6 TR IND ~ $ TTP Af$c AUm SCing ~~ =195-EdG Gr/ PSV. sot /) l I 6 R!.S RsS67 fwt L/76 ca ~ II Gfi SOLW L/15 c.y:s I? SQV /SQL VLV SK*// Ot 64 s3 ftVN f4A' c */t. Scesst (Np I*kW b55sWa iCI^11LglVlffffl.flg7 14 ItrTLK 'V/RACC I7 rdyPS Rot 10L (1) TR I9 87/3 N4S TR eMM I 1 I N T y fo4 000 /Jtocq 20 INnN PQ SSTVo*W M !!A M Ot en! CU%' 2.l/NTL(#NN TR 1 REV1 il0NS PRINTS TO E%. IN H K fot.StafitA TftPVRM*Althehten l - 21 IWit{ Yet.PDitKT l FM.%T U TE est l TTPl 74wJit/T TffT /Wst. Le 0yPJ Le MLPll T!! reps w a v : teretrehamn cu mre APPROVALS MAOL SV \\ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ ocer tocAnon cent as sacrv F sn no lt i l I i 1

I ~ F p. h,f*? '" ~'d '77 Mf b ( I3:3 ' -/ QUESTION E 3P a. Based on our review, it appears the the proposed logi.c I (, 421.32 for manual initiation for several ESP systems is interlocked with permissive logic from vario,us sensors. In some cases, it appears that the permissive logic is dependenc on the same sensors as those used for auto-matic initiation of the system. Our position on this matter is 'that the capability to manually initiate 1 each safety system should be independent of the permissive logic, the sensors and the circuitry used for automatic initiation of that system. (Refer to Section 4.17 of IEEE Std. 279). Identify each safety system which is ' interlocked in a manner similar to that described above. Provide proposed modifications or justification for the present design. In this regard, manual control of actuated devices at the motor control center (MCC) h,as been typically Our review of drawings provided in previous designs. I-960 A through M indicates that this feature has not i Provide your been provided for your proposed design. rationale for not providing local control at the MCC's. b{SI 32 AESU"K ($ge atTacised 3 pasea) i t i ~ ~ ~ - a* --,,,m.

n Ftf!AL MA FT'

RESPONSE

QUESTION 421.32 ESF Manual Initiseion The ESF systems meet IEEE 279, paragraph 4.17, since each individual system manual initiation. Two of the ESF systems and subsystem has provisions for (MS-JLCS and the shutdown cooling mode of RHR) are manually initiseed and have A third system, CRVICS, is initiated automatically no automatic initiation. as well as, manually; however, there are no interlocks involved in nianual 1 operation. ECCS subsystems (HPCS, LPCS, LPCI, and ADS) and the containment spray The four mode of RHR share cosmon interlocks between the automatic and manual initiatio modes. This arrangement is acceptable for several reasons. The individual subsystems of ECCS are not required to meet theThe EC 1. single failure criterion. of its subsystems inoperative. The two loops of the containment spray mode are completely separate 2. and no single failure could prevent operation of both loops. All cansors, transmitters, and trip units used in permissive logic for 3. systaa initiators are Class 1E and are completely qualified for their In addition, the testability features of the design application. permit frequent checks during normal operation to verify operability. I. ECCS LPCS and LPCI (Loop A) The LPCS and LPCI (Loop A) subsystendare initiated automatically by a LOCA signal (low reactor water level and/or high d,rywell pressure) or by a single system-level remote manual switch.* In either mode, two interlocks, apply: 1. Power availability on pump motor bus ** Reactor pressure below set point (applies to injection valves only: 2. 1 of 2 twice logic) *** The LPCS and LPCI (Loop A) subsystems can be initiated individually by use of In this mode, the individual remote manual switches for each valve and pump. injection valves cannot be opened unless either of two pressure permissives is present.- Reactor pressure below set point (same sensors as for system level 1. initiation: 1 of 2 twice logic)** ~ Pressure at each injection valve below set point (2 out of 2 log'ic; 5 2. No sensors are shared between LPCS and LPCI-A.) e . l e oe e -e e e-e .e. e.. e -- amun- -, _j

awn t(ee & b FIMA v QR A FT' ^ ~ n .y I. ECCS (Coot.)~ LPCS and LPCI (LOOP A) Ona initiation logic circuit is used for both LPCS and LPCI(A).

    • Separate " power available" sensor for each subsystem.
    • 4 One pressure permissive circuit applies to both subsystems l

LPCI Loops B and C No sensors are shared between Identical with LPCS and LPCI (Loep A) preceding. LPCI (B&C) and LPCS/LPCI(A). ADS The ADS function is initiated automatically by a LOCA signal (Iow reactor water level and/or high drywell pressure) or by system-levd remote manual switches. the LPCS In either case, the ADS valves are prevented from opening unless In addition, each individual pump, or one of the three LPCI pumps, is running. ADS valve can opened ranually without restrictions. HPCS The HPCS subsystem is initiated automatically by a LOCA signal (low reactor watsr level in a 1 out of 2 twice logic arrangement.o_r_ high drywell pressure in 1 out of In addition, the 2 twice logic)or manually by a system level armed pushbutton. subsystem can be placed in operation by use of an individual remote manual switch In all three initiation modes, the injection valve for each valve and the pump. is interlocked closed by high water level (level 8) in a 2 out of 2 logic If the valve is open, hgh water level (level 8) will cause it to arrangement. ,2l;, % g.-2 4 (47N})

  1. V a

2 e% a,a d< w% y~.e,. u.c,.n %w:a, a m a.,n m. 2r ,n.+-,p +%=.g=. m. -w p n m *~d @.tc= yrm@.n &. 4 au.* n< 4 ~ *m C '1 4,.,,,,y a ma p s r _r D [LS AT_Mi t AIM g,g p< r Wh ^ Y (L 2 JNtilkh gg iu aw X 4mg

  • e arc ~4 a.a, u =a.

-e w a ~ s w m *- - e n- - - - > e - - - ~ ~ - =e--

RCSfM05(C'Gf?"Hk C j ftA L pgA W y 9.l*$ 2 II. Conteinment Spr y Modo (RHR1 The containment spray mode (two loops) is placed in operation by opening injection Each valves E12-F028A and E12-F028B when LPCI loops A and B are in operation. The loops of the two loops has its own separate initiation logic and power supply. are identical except that loop B has a 90 second delay time in the automatic in-itiation logic. Each. containment spray loop is initiated automatically by high cont inment pressure (1 out of 2 logic) with permissives from high drywell pressure (1 out of 2) and a system manual initiation. (The LOCA signal is from the same LOCA signal or LPCI l sensors used in LPCI(A) or LPCI(B) automatic initiation.) M The injection Each loop may also be initiated manually by an armed pushbutton switch. valve is prevented from opening unless high drywell pressure is present (1 out of 2 The sensors are the same ones used in the automatic mode high-drywell-logic). pressure permissive. Each containment spray injection valve can be opened individually (by separate remote manual switches) if valve E12-F027A or E12-F027B is closed. /k }.ay ^ Ap-l- a uC.,y,. y as 1 ' '. '+y w ~ ~. 4 A tses /L Pcz - M gg s a w. A 4 At do, Mp & A .:..e y 3 LPcE p::& y.vuR1 /b OMQLecAgy g-M* 1 ~ l 1 -}}