ML20086S322

From kanterella
Jump to navigation Jump to search
Rev 4 to WCAP-10992, W Setpoint Methodology for Protection Systems,Millstone Nuclear Power Station Unit 3 24 Month Fuel Cycle Evaluation
ML20086S322
Person / Time
Site: Millstone Dominion icon.png
Issue date: 06/30/1995
From: Reagan J, Tuley C, Tamera Williams
WESTINGHOUSE ELECTRIC COMPANY, DIV OF CBS CORP.
To:
Shared Package
ML19325F631 List:
References
WCAP-10992, WCAP-10992-R04, WCAP-10992-R4, NUDOCS 9508010179
Download: ML20086S322 (98)


Text

. - - _ _ _ _ - _ _ _ _ _ - _ _

WESTINGHOUSE NON-PROPRIETARY CLASS 3 WCAP-10992  ;

Rev. 4

?

WESTINGHOUSE SETPOINT METHODOLOGY FOR PROTECTION SYSTEMS MTI YRTONE NUCLEAR POWER STATION UNIT 3 24 MONTH FUEL CYCLE EVALUATION l'

June 1995

)

T. P. Williams J. R. Reagan C. R. Tuley

- WESTINGHOUSE ELECTRIC CORPORATION Nuclear Technology Division P. O. Box 355 Pittsburgh, Pennsylvania 15230-0355 e 1995 Westinghouse Electric Corporation All Rights Reserved 9500010179 950726 PDR ADOCK 05000423 P PDR

FOREWORD The Westinghouse Protection System Setpoint Study provides a basis for the Reactor Protection System, and Engineered Safety Features Actuation System values contained in the l Technical Specifications. This report contains the results associated with implementation of the Technical Specifications as well as recommended Trip Setpoints.

I

! l e

I i

I t

e

(

TABLE OF CONTENTS Section Title Page

1.0 INTRODUCTION

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 l l

1.1 References / Standards . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2 l

l 2.0 COMBINATION OF UNCERTAINTY COMPONENTS ............... 3 l l  !

2.1 Methodology . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 {

2.2 Sensor Allowances .................................. 5  !

, 2.3 Rack Allowances ................................... 7

)

2.4 Process Allowances . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8 l l

2.5 Measurement and Test Equipment Accuracy . . . . . . . . . . . . . . . . . . . 9 l 2.6 References / Standards . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10

. 3.0 PROTPITION SYSTEM SETPOINT METHODOLOGY . . . . . . . . . . . . . . . I1 3.1 Margin Calculation .................................11 3.2 Definitions For Protection System Setpoint Tolerances . . . . . . . . . . . . 12 3.3 Cross Reference - SAMA PMC 20.1-1973 and ANSI /ISA-S51.1-1979 . . 21 l 3.4 References / Standards . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22 4.0 APPLICATION OF THE SETPOINT METHODOLOGY . . . . . . . . . . . . . . 64

. 4.1 Uncertainty Calculation Basic Assumptions / Premises . . . . . . . . . . . . . 64 4.2 Sensor / Transmitter Operability Determination Program and Criteria . . . 66 4.3 Process Rack Operability Determination Program and Criteria . . . . . . . 68 4.4 Application to the Plant Technical Specifications . . . . . . . . . . . . . . . 69 4.5 References / Standards . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70 APPENDIX A SAMPLE hmJRTONE UNIT 3 SETPOINT TECHNICAL SPECIFICATIONS A-1 iii

[

LIST OF TABLES l Table Title Page i

TABLE 3-1 POWER RANGE, NEUTRON FLUX - LOW & HIGH . . . . . . . . 23 f TABLE 3-2 POWER RANGE, NEUTRON FLUX - HIGH N-1 l LOOP OPERATION . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24 ,

i POWER RANGE, NEUTRON FLUX HIGH POSITIVE TABLE 3-3 AND NEGATIVE RATE . . . . . . . . . . . . . . . . . . . . . . . . . . . 25 i

TABLE 3-4 + INTERMEDIATE RANGE NEUTRON FLUX . . . . . . . . . . . . . . 26 TABLE 3-5 SOURCE RANGE NEUTRON FLUX . . . . . . . . . . . . . . . . . . . 27 . .

TABLE 3-6 OVERTEMPERATURE AT (CORE BURNDOWN EFFECTS) (N LOOP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28 TABLE 3-7 OVERPOWER AT (CORE BURNDOWN EFFECTS) (N .

LOOP) ......................................30 TABLE 3-8 OVERTEMPERATURE AT (CORE BURNDO"/N ,

EFFECTS) (N-1 LOOP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32 i TABLE 3-9 OVERPOWER AT (CORE BURNDOWN EFFECTS)

(N-1 LOOP) ...................................34  ;

TABLE 3-10 PRESSURIZER PRESSURE - LOW & HIGH (ROSEMOUNT 1154 TRANSMIII2.K ANALYZED FOR FUTURE OPERATIONS) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36  !

TABLE 3-11 PRESSURIZER PRESSURE - SI .

(ROSEMOUNT 1154 TRANSMrITER ANALYZED FOR FUTURE

~

OPERATIONS) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37  !

TABLE 3-12 PRESSURIZER WATER LEVEL - HIGH (VERITRAK TRANSMITTER) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38 i TABLE 3-13 PRESSURIZER WATER LEVEL - HIGH (ROSEMOUNT TRANSMITTER) . . . . . . . . . . . . . . . . . . . . . . 39

)

iv i

h t

i i

LIST OF TABLES i Table Title Page l

TABLE 3-14 STEAM GENERATOR WATER LEVEL - LOW-LOW l (FLB) (ROSEMOUNT 1154 TRANSMITTER i ANALYZED OFR FUTURE OPERATIONS) ............... 40 TABLE 3-15 STEAM GENERATOR WATER LEVEL - LOW-LOW (LONF) (ROSEMOUNT 1154 TRANSMTITER

~

ANALYZED FOR FUTURE OPERATIONS) ............... 42 1 1

TABLE 3-16 STEAM GENERATOR WATER LEVEL - HIGH-HIGH j I

(ROSEMOUNT 1154 TRANSMTITER ANALYZED FOR FUTURE OPERATIONS) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44 l

TABLE 3-17 REACTOR COOLANT PUMP UNDERSPEED .............. 46 TABLE 3-18 CONTAINMENT PRESSURE - HIGH 1, HIGH 2,

. HIGH 3 (ROSEMOUNT TRANSMTITER) . . . . . . . . . . . . . . . . 47 TABLE 3-19 STEAMLINE PRESSURE - LOW SI (ROSEMOUNT TRANSMrITER) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48 TABLE 3-20 NEGATIVE STEAM PRESSURE RATE - HIGH . . . . . . . . . . . . 49 TABLE 3-21 RCS LOW FLOW (N LOOP) (ROSEMOUNT TRANSMrITER) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50 TABLE 3-22 RCS LOW FLOW (N-1 LOOP) (ROSEMOUNT

. TRANSMTITER) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51 TABLE 3-23 TAVG, LOW AND LOW-LOW . . . . . . . . . . . . . . . . . . . . . . . 52 TABLE 3-24 REACTOR PROTECTION SYSTEM / ENGINEERED SAFETY FEATURES ACTUATION SYSTEM CHANNEL UNCERTAINTY ALLOWANCES . . . . . . . . . . . . . . 54 TABLE 3-25 OVERTEMPERATURE AT CALCULATIONS .............. 56 I

TABLE 3-26 OVERPOWER AT CALCULATIONS . . . . . . . . . . . . . . . . . . . 59  !

V

LIST OF TABLES Table Title Page TABLE 3-27 AP MEASUREMENTS EXPRESSED IN FLOW UNITS . . . . . . . . 61 TABLE 4-1 WESTINGHOUSE PROTECTION SYSTEM STS SETPOINT INPUTS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71 APPENDIX A SAMPLE MTI.TSTONE UNIT 3 SETPOINT TECHNICAL SPECIFICATIONS A-1 O

6 e

9 9

e Vi

~

1.0 INTRODUCTION

. In Generic 1.etter 91-04,N the NRC has noted that uncenainty calculations should be ,

performed in a manner which results in values at a high probability and a high confidence level. The implication being a requirement for a more statistically rigorous calculation. In addition, Generic Letter 91-18mc larifies the NRC's definition of operability. In response to these documents, Westinghouse has modified the basic uncenainty algorithm. To address the requirements for a definitive basis for drift, explicit calculations were made to determine appropriate values for the transmitters and process racks.

. The basic Westinghouse approach to an uncertainty calculation is to achieve an understanding of the plant instrumentation calibration and operability verification processes. The uncenainty algorithm resulting from this understanding can be function specific, i.e., is very likely different for two functions if their calibration or operability determination processes are different. Effon is expended in determination of what parameters are dependent statistically or functionally. Those parameters that are determined to be independent are treated accordingly. This allows the use of a Square-Root-Sum-Of-The- Squares (SRSS) summation of the various components. A direct benefit of the use of this technique is increased margin in the total allowance. For those parameters determined to be dependent, appropriate (conservative) summation techniques are utilized. An explanation of the overall approach is provided in Section 2.0.

Section 3.0 provides a description, or definition, of each of the various components, to allow a clear understanding of the methodology. Also provided is a detailed example of each setpoint margin calculation demonstrating the methodology and noting how each parameter value is utilized. In all cases, margin exists between the summation and the total allowance.

I i

Section 4.0 provides a description of the methodology utilized in the determination of the Millstone Unit 3 Technical Specifications and an explanation of the relationship between a -

trip setpoint and an operability verification. An Appendix is provided noting a recommended set of Technical Specifications using the plant specific data and the revised Westinghouse approach that reflects the plant specific operability verification process.

1.1 References / Standards

[1] Generic Letter 91-04,1991, " Changes in Technical Specification Surveillance Intervals to Accommodate a 24 Month Fuel Cycle.

[2] Generic Later 91-18,1991, "Information to Licensees Regarding Two NRC Inspection Manual Sections on Resolution of Degraded and Nonconforming Conditions and on Operability.

l l -

t l

2 1

2.0 COMBINATION OF UNCERTAINTY COMPONENTS i

. 2.1 Methodology The methodology used to combine the uncenainty components for a channel is an appropriate combination of those groups which are statistically and functionally i@nt. Those uncertainties which are not independent are appmpriately treated (or conservatively treated by arithmetic summation) and then systematically combined with the independent terms.

The basic methodology used is the SRSS technique which has been utilized in other

, Westinghouse reports. 'Ihis technique, or others of a similar nature, has been used in WCAP-10395HI and WCAP-8567r21. WCAP-8567 is approved by the NRC noting acceptability of statistical techniques for the application requested. Also, various ANSI, American Nuclear Society, and Instrument Society of America standards approve the use of t

probabilistic and statistical techniques in determining safety-related setpoints'dl. The basic methodology used in this report is essentially the same as that noted in an ISA paper presented in 1992l83 The relationship between the uncertainty components and the calculated uncertainty for a channel is noted in Eq. 2.1, CSA = ((PMA)* + (PEA)' + (SMTE + SD)* + (SMTE + SCA)* + (SPE)* +

(STE)* + (SRA)' + (RMTE + RD)* + (RMTE + RCA)* + (RMTE +

RCSA)* + (RTE)*}"' + EA + BIAS (Eq. 2.1) e 3

where: _

CSA = Channel Statistical Allowance .

PMA = Process Measurement Accuracy PEA = Primary Element Accuracy SMTE = Sensor Measurement and Test Equipment Accuracy SD = Sensor Drift SCA = Sensor Calibration Accuracy SPE = Sensor Pressure Effects .

STE = Sensor Temperature Effects SRA = Sensor Reference Accuracy ,

RMTE = Rack Measurement and Test Equipment Accuracy RD = Rack Drift RCA = Rack Calibration Accuracy RCSA = Rack Comparator Setting Accuracy RTE = Rack Temperature Effects .

EA = Environmental Allowance BIAS =One directional, known magnitude As can be seen in the equation, drift and calibration accuracy allowances are treated as dependent parameters with the measurement and test equipment uncertainties. The environmental allowance is not necessarily considered dependent with all other parameters, but as an additional degree of conservatism is added to the statistical sum. Bias terms are one directional with a known magnitude and are added to the statistical sum. The calibration -

terms are treated in the same radical based on the Generic letter 91-04163 requirement for general trending. Millstone Unit 3 has identified that trending will be performed. This results in a net reduction of the CSA magnitude (over that which would be determined if trending was not performed).

4 4

l l

2.2 Sensor Allowances i

. i

. Six parameters are considemd to be sensor allowances: SCA, SRA, SMTE, SD, STE, and SPE (see Table 3-24). Of these parameters, three are considered to be independent (SRA, STE and SPE), and three are considemd dependent with at least one other term (SCA, SMTE and SD). SRA is the manufacturer's reference accuracy that is achievable by the device. ,

This term is introduced to address repeatability and hysteresis concems when only performing a single pass calibration, i.e., one up and one down.rsi STE and SPE are considered to be independent due to the manner in which the instmmentation is checked; i.e.,

the instrumentation is calibrated and drift determined under conditions in which pressure and .

temperature are assumed constant. An example of this would be as follows. Assume a sensor is placed in some position in the containment during a refueling outage. After placement, an instmment technician calibrates the sensor. This calibration is performed at ambient pressure and temperature conditions. Some time later with the plant shutdown, an

+

instmment technician checks for sensor drift. Using the same technique as for calibrating the sensor, the technician determines if the sensor has drifted. The conditions under which this determination is made are again ambient pressure and temperature. The temperature and pressure should be essentially the same at both measurements and thus should have no significant impact on the drift determinstion and are, therefore, independent of the drift allowance. For this evaluation, transmitter "as left i n found" data was evaluated to project a 30 month drift and process rack "as left / as found" data was evaluated for a 3 month drift for all channels noted in this document.

SCA, SMTE and SD are considered to be dependent for the same reason that STE and SPE are considered independent; i.e., due to the manner in which the instrumentation is checked.

Instrumentation calibration techniques use the same process as determining instrument drift.

That is, the end result of the two is the same. When calibrating a sensor, the sensor output is checked to determine if it is accurately representing the input. The same is performed for

, a detennination of the sensor drift. The "as left / as found" data are recorded to determine whether the sensor has performed its intended function in the past and will it continue to s

perform this function for future cycles as specified by the manufacturer's specifications.

5 P

The transmitter "as left / as found" data were evaluated for population normality and outliers and a 30 month uncertainty determined at a 95% probability and a 95% confidence level. A similar evaluation was performed for the process racks for a 3 month uncertainty. .

'Ihe statistically derived calibration accuracy and drift values (for 30 months or 3 months, as appropriate) were combined with the measurement and test equipment accuracy term to form the dependent relationships. A hypothetical example of the impact of this treatment for a level transmitter is (sensor parameters only):

- - +a,c SCA =

SRA =

SMTE = .

SPE =

STE =

SD =

e excerpting the sensor portion of Equation 2.1 results in;

((SMTE + SCA)* + (SMTE + SD)* + (SPE)* + (STE)* + (SM) }"'

- or -

[ ]** ' = 2.0%

Assuming no dependencies for any of the parameters results in the following:

{(SCA)* + (SMTE)* + (SD)* + (SPE)* + (STE)* + (SM)*}"* (Eq. 2.2)

- or - ,

[ ]** ' = 1.5 %

Thus it can be seen that the approach represented by Equation 2.1, which accounts for .

dependent parameters, results in a more conservative summation of the allowances.

6

i I

2.3 . Rack Allowances i

. Five parameters, as noted by Table 3-24, are considered to be rack allowances: RCA,  !

RMTE, RCSA, RTE, and RD. 'Ihree of these parameters (RCA, RMTE, and RD) are i considered to be dependent for much the same reason outlined for sensors in Section 2.2. j When calibrating or determining drift in the racks for a specific , channel, tim processes are performed at essentially constant temperature; i.e., ambient temperature (which is reasonably controlled). Because of this, the RTE parameter is considered to be independent of any -

- factors for calibration or drift. However, the same cannot be said for the other rack parameters. As noted in Section 2.2, when calibrating or determining drift for a channel, the same end result is desired; that is, the point at which the bistable changes state. For this evaluation, "as left / as found" data was evaluated to project a calibration uncertainty, rack drift and a comparator setting accuracy based on the 3 month surveillance interval requirement for each channel. Based on this logic, these factors have been conservatively summed to form several intW-nt groupings (see Equation 2.1). The impact of this approach (formation of iaWnt groups based on dependent components) is significant.

For the hypothetical example of a level transmitter channel, using the same approach outlined l in Equations 2.1 and 2.2 results in the following:

+a,e RCA =

RMTE =

RCSA = ,

RTE =

RD =

excerpting the rack portion of Equation 2.1 results in;  !

. {(RMTE + RCA)* + (RMTE + RCSA)* +(RMTE + RD)* + (RTE)*}"

- or -  !

[ ]** ' = 1.5%

7

I Assuming no dependencies for any of the parameters yields the following less conservative results; e I

((RCA)* + (RMTE)* + (RCSA)* + (RD)* + (RTE)*)"* (Eq. 2.3)

- or -

[ ]* = 1.3% ,

Thus, the use of Equation 2.1 is conservative for rack effects and for sensor effects.

Therefore, accounting for dependencies in the treatment of these allowances provides a conservative result. ,

2.4 Process Allowances Finally, the PMA and PEA parameters are considered to be independent of both sensor and .

rack parameters. PMA provides allowances for the non-instrument related effects; e.g.,

neutron flux, calorimetric power uncertainty assumptions, fluid density changes, and temperature statification assumptions. PMA may consist of more than one indapandent uncertainty allowance. PEA accounts for uncertainties due to metering devices, such as elbows, venturis, and orifice plates. Thus, these parameters have been factored into Equation 2.1 as independent quantities. It should be noted that treatment as an independent parameter does not preclude detennination that a PMA or PEA term should be treated as a ,

bias. If that is determined appropriate, Equation 2.1 would be modified such that the affected term would be treated by arithmetic summation as deemed necessary. -

O e5 8

i 2.5 - Measurement and Test Equipment Accuracy

- Based on information from Northeast Nuclear Energy Company (NNECO), it was concluded that the equipment used for calibration and functional testing of the transmitters and racks

  • does not meet SAMA Standard PMC 20.1-1973m with regards to allowed exclusion fmm the calculation. This implies that test equipment without an accuracy of 10% or less of the calibration accuracy is required to be included in the uncertainty calculations of Equations 2.1, and 3.1. NNECO procedures were reviewed to determine the appropriate uncertainty for each function evaluated. These M&TE uncertainties wem included in the calculations, as seen on the tables included in this report.

e k

e e

l l

6 9

l

2.6 References / Standards .

[1] Grigsby, J. M., Spier, E. M., Tuley, C. R., " Statistical Evaluation of LOCA Heat .

r Source Uncertainty," WCAP-10395 (Proprietary), WCAP-10396 (Non-Pmprietary),

November 1983.

[2] Chelemer, H., Boman, L. H., and Sharp, D. R., " Improved Thermal Design Procedure," WCAP-8567 (Proprietary), WCAP-8568 (Non-Pmprietary), July,1975.

[3] ANSI /ANS Standard 58.4-1979, " Criteria for Technical Specifications for Nuclear Power Stations."

[4] ISA Standard S67.04,1994, "Setpoints for Nuclear Safety-Related Instrumentation Used in Nuclear Power Plants."

[5] Tuley, C. R., Williams, T. P., "The Significance of Verifying the SAMA PMC 20.1-1973 Defined Reference Accuracy for the Westinghouse Setpoint Methodology,"  ;

Instrumentation, Controls and Automation in the Power Industry, Vol. 35, Proceedings of the Thirty-Fifth Power Instrumentation Symposium (2"d Annual .

ISA/EPRI Joint Controls and Automation Conference), Kansas City, Mo., June, 1992, p. 497.

[6] Generic letter 91-04,1991, " Changes in Technical Specification Surveillance Intervals to Accommodate a 24 Month Fuel Cycle."

[7] Scientific Apparatus Manufacturers Association, Standard PMC 20.1-1973. " Process Measurement and Control Terminology."

9 0

e 10

3.0 PROTECTION SYSTEM SETPOINT METHODOLOGY

. 3.1 Margin Calculation As noted in Section 2.0, Westinghouse utilizes the square root of the sum of the squares for summation of the various components of the channel uncertainty. 'Ihis approach is valid where no dependency is present. Arithmetic summation is a conservative treatment when a dependency between two or more parameters exists. The equation used to detennine the l margin, and thus the acceptability of the parameter values used, is:

Margin = TA - ((PMA)* + (PEA)* + (SMTE + SCA)* + (SMTE + SD)*

+ (SPE)* + (STE)* + (SRA)* + (RMTE + RCA)* + (RMTE +

RCSA)* + (RMTE + RD)* + (RTE)*}"* - EA - BIAS (Eq. 3.1) where:

TA = Total Allowance (which is defm' ed as) Safety Analysis Limit - Nominal Trip Setpoint, and all other parameters are as defined for Equation 2.1. ,

This equation is appropriate when trending of transmitter calibration and drift and process mck calibration and drift values is taking place. Using Equation 2.1, Equation 3.1 may be a

simplified to:

Margin = TA - CSA (Eq. 3.2)

Tables 3-1 through 3-23 provide individual component uncertainties and CSA calculations for the protection functions noted in Tables 2.2-1 and 3.3-4 of the Millstone Unit 3 Technical Specifications. Table 3-24 provides a summary of the Reactor Protection System /

Engineered Safety Features Actuation System Channel Uncertainty Allowances for Millstone Unit 3 and includes Safety Analysis and Technical Specification values, Total Allowance and ,

11

I Margin. Westinghouse typically repons values in these tables to one decimal place using the conventional technique of rounding down values less than 0.05 and rounding up values greater than or equal to 0.05. Parameters reponed in Tables 3-1 throw;h 3-24 as "0.0" have -

been identified as having a value of s 0.04. Parameters reponed as "0" or " " in the tables are not applicable (i.e., have no value) for that channel.

3.2 Definitions For Protection Systen Sdpoint Tolerances To insure a clear understanding of the channel uncenainty values used in this repon, the following definitions are noted:

n As Found The condition in which a transmitter, process rack module or process instrument loop ,

is found after a period of operation. For example, after a period of operation, a transmitter was found to deviate from the ideal condition by -0.5% span. This would be the "as found" condition.

n As Left The condition in which a tansmitter, process rack module or process instrument loop ,

is left after calibration or bistable trip setpoint verification. This condition is typically better than the calibration accuracy for that piece of equipment. For example, the -

permitted calibration accuracy for a transmitter is i0.5% of span, while the worst

. measured deviation from the ideal condition after calibration is +0.1 % span. In this instance, if the calibration was stopped at this point (i.e., no additional effons were .

made to decrease the deviation) the "as left" error would be +0.1 % span.

12

h i

i i

e Channel r

. The sensing and process equipment, i.e., transmitter to bistable, for one input to the t

voting logic of a protection function. Westinghouse designs protection functions with voting logic made up of multiple clannels, e.g. 2/4 Steam Generator I2 vel -

Low-Iow channels must have two bistables in the tripped condition for a Reactor Trip  ;

to be initiated. -

a Channel Statistical Allowance (CSA)

The combination of the various channel uncertainties via SRSS. It includes both instrument (sensor and process rack) uncertainties and non-instmment related effects l (Process Measurement Accuracy). This parameter is compared with the Total Allowance for determination of instrument channel margin.

t a Environmental Allowance (EA)

The change in a process signal (transmitter or process rack output) due to adverse environmental conditions from a limiting accident condition. Typically this value is determined from a conservative set of enveloping conditions and may represent the following:

9 a) temperature effects on a transmitter,

. b) radiation effects on a transmitter, c) seismic effects on a transmitter, .

d) temperature effects on a level transmitter reference leg,

, e) temperature effects on signal cable insulation, and i f) seismic effects on piecess racks.

13

{

a Margin .

i The calculated differene: (in % instrument span) between the Total Allowance and the .l Channel Statistical Allowance. l e Nominal Trip Setpoint (NTS)

A bistable trip setpoint in plant Technical Specifications or plant administrative [

procedures. His value is the nominal value to which the bistable is set, as accurately l as reasonably achievable. ,

m Normalization The process of establishing a relationship, or link, between a process parameter and an instrument channel. This is in contrast with a calibration process. A calibration ,

i process is performed with independent known values, i.e., a bistable is calibrated to .

change state when a specific voltage is reached. This voltage corresponds to a process parameter magnitude with the relationship established through the scaling process. A normalization process typically involves an indirect measurement, e.g.,  !

determination of Steam Flow via the Ap drop across a flow restrictor. The flow ,

coefficient is not known for this condition, effectively an orifice, therefore a mass balance between Feedwater Flow and Steam Flow can be made. With the Feedwater .

Flow known through measurement via the venturi, the Steam Flow is normalized.

m Process Imop (Instrument Process loop)

De process equipment for a single channel of a protection function. .

i

  • i 9

14

. . . . = . . - - - _ . - . _. .

[

a Process Measurement Accuracy (PMA) ,

t

. Allowance for non-instrument related effects which have a direct bearing on the  :

accuracy of an instrument channel's reading, e.g., temperature stratification in a large [

diameter pipe, fluid density in a pipe or vessel.

I e Primary Element Accuracy (PEA)

Uncertainty due to the use of a metering device, e.g., venturi, orifice, or elbow.

Typically, this is a calculated or measured accuracy for the device.

m Process Racks i

The analog modules downstream of the transmitter or sensing de,vice, which condition a signal and act upon it prior to input to a voting logic system. For Westinghouse process systems, this includes all the equipment contained in the process equipment cabinets, e.g., conversion resistor, transmitter power supply, R/E, lead / lag, rate, lag

\

functions, function generator, summator, control / protection isolator, and bistable for analog functions. The go/no go signal generated by the bistable is the output of the last module in the analog process rack instrument loop and is the input to the voting l

logic.

m R/E Resistance (R) to voltage (E) wnversion module. The RTD output (change in resistance as a function of temperature) is converted to a process loop working

. parameter (voltage) by this analog module.

l 15

t a Rack Calibration Accuracy (RCA) .

The reference (calibration) accuracy, as defined by SAMA Standard PMC 20.1-1973m ,

for a process loop string. Inherent in this definition is the verification of the m

following under a reference set of conditions; 1) conformity ,2) hysteresis m and

3) repeatabilityldi. The Westinghouse definition of a process loop includes all modules  :

in a specific channel. Also it is assumed that the individual modules are calibrated to a particular tolerance and that the process loop as a string is verified to be calibrated to a specific tolerance. The tolerance for the string is typically less than the arithmetic sum or SRSS of the individual module tolerances. This forces calibration .

of the process loop without a systematic bias in the individual module calibrations, i.e., as left values for individual modules must be compensating in sign and magnitude.

For an analog channel, an individual module is typically calibrated to within [

]+'d, with the entire process loop typically calibrated to within [ ]+. -

u Rack Comparator Setting Accuracy (RCSA)

The reference (calibration) accuracy, as defined by SAMA Standard PMC 20.1-1973m, of the instmment loop comparator (bistable). Inherent in this definition is the verification of repeatabilityId! under a reference set of conditions. For a single .

input bistable (fixed setpoint) the typical calibration tolerance is [ ]+'d.

This assumes that comparator nonlinearities are compensated by the setpoint. For a .

dual input bistable (floating setpoint) the typical calibration tolerance is [

]+'d. This allows for nonlinearities between the two inputs. In many plants calibration of the bistable is included as an integral part of the rack calibration, i.e., ,

string calibration.

16 c

L

a Rack Drift (RD) l 4 The change in input-output relationship over a period of time at reference conditions, j i

c.g., at constant temperatum. A typical allowance value assumed for this parameter is 1.0% span for analog channels. An example of RD is: for an "as found" value l

of -0.5 % span and an "as left" value of +0.1 % span, the magnitude of the drift would be {(-0.5) - (+0.1) = -0.6% span} in the negative direction. For this evaluation, a maximum surveillance interval of 3 months was assumed when projecting drift allowance, as noted in the unceitainty tables.  !

l m Rack Measurement & Test Equipment Accuracy (RMTE) ,

l The accuracy of the test equipment (typically a transmitter simulator, voltage or current power supply, and DVM) used to calibrate a process loop in the racks. When the magnitude of RMTE meets the requirements of SAMA PMC 20.1-1973I51it is l

~

considered an integral part of RCA. Magnitudes in excess of the 10:1 limit are explicitly included in Westinghouse calculations.

m Rack Temperature Effects (RTE)

Change in input-output relationship for the process rack module string due to a change in the ambient environmental conditions (temperature, humidity, voltage and frequency) from the reference calibration conditions. It has been determined that

. temperature is the most significant, with the other parameters being second order effects. For process instrumentation, a value of [ ]+'d is used for analog channel temperature effects. It is assumed that calibration is perfonned at a nominal

, ambient temperature of +70 *F with an upper extreme of +120 *F (+50 *F AT) and a lower extreme of +40 *F.

17

r l

l I

l l

l u Range The upper and lower limits of the operating region for a device, e.g., for a .

Pressurizer Pressure transmitter,1700 to 2500 psig, for Steam Generator levu, appmximately 120.8 to 31.5 inches of water column. This is not necessarily the calibrated span of the device, although quite often the two are close. For further information see SAMA PMC 20.1-1973W.

m Safety Analysis Limit (SAL)

The parameter value assumed in a tmnsient analysis or other plant operating limit at which a reactor trip or actuation function is initiated, a Sensor Calibration Accuracy (SCA)

The calibration accuracy for a Sensor or tansmitter as defined by the Millstone Unit 3 calibation procedures. For transmitters, this accuracy is typically [

]+*' as defined by NNECO Procedures. Utilizing Westinghouse recommendations for RTD cross-calibration, this accuracy is typically [ ]+

for the Hot and Cold Leg RTDs.

m Sensor Drift (SD) .

The change in input-output relationship over a period of time at reference calibation .

conditions, e.g., at constant temperature. An example of SD is: for an "as found" value of +0.5% span and an "as left" value of +0.1% span, the magnitude of the drift would be {(+0.5) - (+0.1) = +0.4% span} in the positive direction. For this .

evaluation, a maximum surveillance interval of 30 months was assumed when projecting drift allowance with exceptions as noted in the uncertainty tables.

18

1 1

l a Sensor Measurement & Test Equipment Accuracy (SMTE) l

- The accuracy of the test equipment (typically a high accuracy local readout gauge and DVM) used to calibrate a sensor or transmitter in the field or in a calibration laboratory. When the magnitude of SMTE meets the requirements of SAMA PMC 20.1-1973D1it is considered an integral part of SCA. Magnitudes in excess of the 10:1 limit are explicitly included in Westinghouse calculations.

a Sensor Pressure Effects (SPE)

The change in input-output relationship due to a change in the static head pressure from the calibration conditions or the accuracy to which a correction factor is introduced for the difference between calibration and operating conditions for a Ap transmitter.

l m Sensor Temperature Effects (STE) l The change in input-output relationship due to a change in the ambient environmental conditions (temperature, humidity, voltage and frequency) from the reference calibration conditions. It has been determined that temperature is the most significant, with the other parameters being second order effects. It is assumed that calibration is performed at a nominal ambient temperature of +70 'F with an upper extreme of +120 'F and a lower extreme of +40 'F.

l e Sensor Reference Accuracy i

, The reference accuracy that is achievable by the device as specified in the I 1

manufacturers specification sheets. Reference (calibration) accuracy for a sensor or transmitter as defined by SAMA Standard PMC 20.1-1973"1 Inherent in this l

19

---__.----__--J

definition is the verification of the following under a reference set of conditions; 1)

Hl . This term is introduced into the -

conformity:1, r

2) hysteresis DI and 3) repeatability uncertainty calculation to address repeatability concems when only performing a .

calibration, i.e., one up and one down or repeatability and hysteresis when performing a single pass calibration in only one direction.

m Span The region for which a device is calibrated and verified to be operable, e.g., for a Pressurizer Pressure transmitter, 800 psi, for Steam Generator Level, approximately 89.3 inches of water column. For Pressurizer Pressure, considerable suppression of the zero is exhibited.

m SRSS Square root of the sum of the squares, i.e.,

c = /(a)2 + (b)2 .(c)2 as approved for use in setpoint calculations by ISA Standard S67.04-1994r71, a Total Allowance (TA)

The calculated difference between the Safety Analysis Limit and the Nominal Trip ,

Setpoint (SAL - NTS) in % instrument span. Two examples of the calculation of TA are:

i e

e 20

m Steam GeneratorLevel-Low-Low SAL 0% LVL

- NTS - 18% LVL TA 18% LVL i

If the instrument span = 100% LVL, then TA = (18% lewl) * (100% span) = 18.0% span (100% lewl) a Pressurizer Pressure - Low Trip i

SAL 1860 psia i NTS - 1900 psia TA 40 psia If the instrument span = 800 psi, then TA 7 (40P5lu) * (100% span) , 5,gg ,,,,

(800 psia) j 3.3 Cross Reference - SAMA 1%iC 20.1-1973 and ANSI /ISA-S51.1-1979 SAMA Standard PMC 20.1-1973, " Process Measurement & Control Terminology" is no longer in print and thus is unavailable from SAMA. It has been replaced by ANSI /ISA S51.1-1979, " Process Instrumentation Tenninology" and is available from the Instrument Society of America. Noted below is a cross reference listing of equivalent definitions

. between the two standants for terms used in this document. Even though the SAMA standani is no longer available, Westinghouse prefers and continues to use the SAMA

~

definitions.

21

SAMA ISA Accumcy Rating'1l Reference Accuracy"1 Conformityr2j Conformity, independent'l .

Hysteresis"1 Hystensis" 1 l

Repeatability'1 Repeatabilityl "I Test Cycle"I Calibration Cyclenzi Test Procedums#1 Test Procedumsn2i l

Range'1 RangeD 'l 3.4 References / Standards

[1] Scientific Apparatus Makers Association Standard PMC 20.1-1973, " Process Measumment & Control Tenninology", p 4,1973.

[2] Ibid, p 5.

[3] Ibid, p 19.

[4] Ibid, p 28.

[5] Ibid, p 36.

[6] Ibid, p 27.

[7] Instmment Society of America Standard S67.04-1994, "Setpoints for Nuclear Safety-Related Instrumentation", p ? 8,1994

[8] Instrument Society of America Standard S51.1-1979, " Process Instrumentation Terminology", p 6,1979. .

[9] Ibid, p 8.

[10] Ibid, p 20. .

[11] Ibid, p 27.

[12] Ibid, p 33.

[13] Ibid, p 25. ,

22

TABLE 3-1 ,

POWER RANGE, NEUTRON FLUX - LOW & HIGH

~

Parameter Allowance * ,

Process Measurement Accuracy 3...e 3....

Primary Element Accuracy Sensor Calibration Accuracy

[ 3 ...e Measurement & Test Equipment Accuracy

[ 3 .. . .

Sensor Pressure Effects Sensor Temperature Effects

[ 3...c Sensor Drift

[ 3 .. . .

Environmental Allowance Bias Rack Calibration Rack Accuracy Measurement & Test Equipmen+ Accuracy Comparator Rack Temperature Effect Rack Drift Tag No.'s - N41, N42, N43, N44 In percent span (120% RTP)

Channel Statistical Allowance =

. . ...e 23

TABLE 3-2 i POWER RANGE, NEUTRON FLUX - HIGH N-1 LOOP OPERATION ,

Parameter Allowance *

. . ...e Process Measurement Accuracy 3 .. . . ,

3 .. . .

Primary Element Accuracy Sensor Calibration Accuracy

[ ]+..e ,

Measurement & Test Equipment Accuracy

[ ]+..e ,

Sensor Pressure Effects Sensor Temperature Effects

[ ] + .e Sensor Drift

[ 3 .. .. .

Environmental Allowance -

Bias Rack Calibration Rack Accuracy Measurement & Test Equipment Accuracy Comparator Rack Temperature Effect Rack Drift Tag No.'s - N41, N42, N3, N44 In percent span (120% RTP)

Channel Statistical Allowance = ,

n 24

TABLE 3-3 POWER RANGE, NEUTRON FLUX HIGH POSITIVE AND NEGATIVE RATE

~

Parameter Allowance *

. . +s.c Process Measurement Accuracy

[

}+a.c Primary Element Accuracy l 1

Sensor Calibration Accuracy l

[  ;

3+..e Measurenent & Test Equipment Accuracy

. Sensor Pressure Effects Sensor Temperature Effects

[

3 +..c Sensor Drift b

3 4..c Environmental Allowance Bias Rack Calibration Rack Accuracy Measurement & Test Equipment Accuracy Comparator Rack Temperature Effect Rack Drift Tag No.'s - N41, N42, N43, N44 In percent span (120% RTP)

Channel Statistical Allowance = +*.c

TABLE 3-4 INTERMEDIATE RANGE NEUTRON FLUX Parameter Allowance

  • 4..c Process Measurement Accuracy

[

3+...

Primary Element Accuracy Sensor Calibration Accuracy

[ 3 .. . .

Measurement & Test Equipment Accuracy Sensor Pressure Effects .

Sensor Temperature Effects

[ 3+..c Sensor Drift

[ 3...e Environmental Allowance ,

Bias 'I Rack Calibration Rack Accuracy Measurement & Test Equipment Accuracy Comparator Rack Temperature Effect Rack Drift .

Tag No.'s - N35, N36 .

In percent span (120% RTP)

Channel Statistical Allowance = l

+ ..e ,

l

. l l

l 26 l

TABLE 3-5 SOURCE RANGE NEUTRON FLUX Parameter Allowance * -

, + .C Process Measurement Accuracy

[

3 .. . .

Primary Element Accuracy Sensor Calibration Accuracy

[ 3 .. ..

Measurement & Test Equipment Accuracy

. Sensor Pressure Effects Sensor Temperature Effects

[ 3 + .e Sensor Drift

[ 3 .. . .

Environmental Allowance Bias Rack Calibration Rack Accuracy ,

Measurement & Test Equipment Accuracy Comparator i l

Rack Temperature Effect Rack Drift Tag No.'s - N31, N32 ,

In percent span (10' cps) l Channel Statistical Allowance =

+ .e p

27

T

' TABLE 3-6 OVERTEMPERATURE AT (CORE BURNDOWN EFFECTS) (N LOOP)

(Rosemount Model 1154 transmitter for Pressurizer Pressure) '

Assumes re-normalization of AT,, T", and T' Parameter Allowance * ,

. . +..e Process Measurement Accuracy

.. . 3 "

. 3 .. ..

3 .. . .

3....

3.... -

3....

Primary Element Accuracy .

Sensor Calibration Accuracy 3...c 3....

Sensor Reference Accuracy -

[ 3....

Measurement & Test Equipment Accuracy

[ 3 .. .

Sensor Pressure Effects Sensor Temperat.ure Effects

[ 3 + .c Sensor Drift l "

3 .. . .

Environmental Allowance -

- l' ...e 3

Rack Calibration Accurac.y

. 3. ..

3 .. ..

. 3....

. 3 . ... -

r

- 3....

3 .. ..

m n 28 l

TABLE 3-6 (continued)

OVERTEMPERATURE AT (CORE BURNDOWN EFFECTS) (N LOOP)

, (Rosemount Model 1154 transmitter for Pressurizer Pressure)  !

Assumes re-normalization of AT,, T", and T'

. Parameter Allowance *

. . +..c M!asurement&TestEqu,ipmentAccuracy

- )....

3,...

- 34..c 3....

Comp (aratorIncluded in string calibration)

. Rack Temperature Effect Rack Drift

- 3....

- 3....

- 3....

3...e Tag Numbers - TE411A, TE411B, PT455, N41 TE421A, TE421B, PT456, N42 l

In percent AT span (AT - 90.3*F; Tavg - 100*F; Pressure - 800 psi; i Power - 150% RTP; AI - 260% AI; 90.3*F span = 150% power) l Channel Statistical Allowance =

. ...e

  • a 29

TABLE 3-7 OVERPOWER AT (CORE BURNDOWN EFFECTS) (N LOOP)

Assumes re-normalization of AT,, T", and T' ,

Parameter Allowance

  • Process Measurement Accuracy ,,,,

3....

3...c 3...c 3+..c 3....

Primary Element Accuracy Sen or Calibration Accuracy ,,,,

Measurement & Test Equipment Accuracy Sensor Pressure Effects Sensor Temperature Effects .

Sensor Drift

[ 3 .. ..

Environmental..

g .cAllowance 3

Rack Calibration Accura.c.y.c 3

3 .. ..

3 .. . .

3 .. ..

Measurement & Test E.qu.ipment Accuracy

' 3 ..

- 3...c 3...c Comparator (Includedinstringcalibration)

Rack Temperature Effect Rack Drift -

3....

3....

Tag Numbers - TE411A, TE411B, TE431A, TE431B, TE421A, TE421B, TE441A, TE441B In percent AT span (AT - 90.3*F; Tavg - 100*F; Power - 150% RTP; 90.3*F span = 150% power) i 30 9

f TABLE'3-7 (continued)

~ OVERPOWER AT (CORE BURNDOWN EFFECTS) (N LOOP) .

Assumes re-normalization of AT,, 7", and T' Channel Statistical Allowance = ,

+ 4,C n

O 9

m O

i l

e i

9

)

31 I

TABLE 3-8 OVERTEMPERATURE AT (CORE BURNDOWN EFFECTS) (N-1 LOOP)

(Rosemount Model 1154 transmitter for Pressurizer Pressure) '

Assumes re-normalization of AT,, T", and T' Parameter Allowance * .

. ...e Process Measurement Accuracy

, . ,,, 3 "

- 3...e 3...e

- 3...e

- 3 ... ,

3....

Primary Element Accuracy .

Sensor Calibration Accuracy

- 3...e 3...c Sensor Reference Accuracy -

[ ]...c Measurement & Te.s.t. Equipment Accuracy

[ 3 Sensor Pressure Effects Sensor Temper.a.ture Effects

[ 3 Sensor Drift 3 "

Environmental Allowance -

. 3 * ,,,

Rack Calibration Accuracy

- 3.3..c 3 .. .e

3 .. .. ,

- 3....

3 .. ..

e 32

\

TABLE 3-8 (continued)

OVERTEMPERATURE AT (CORE BURNDOWN EFFECTS) (N-1 LOOP)

' (Rosemount Model 1154 transmitter for Pressurizer Pressure)

Assumes re-normalization of AT,, T", and T'

. Parameter Allowance

  • _ . +..c Measurement &TestEqu,ipentAccuracy

- 3 .. . .

- 3....

- 3 .. . .

3 .. . .

. Comparator (Includedinstringcalibration)

. Rack Temperature Effect Rack Drift

- 3...e

- 3 .. . .

- 3....

3....

Tag Numbers - TE411A, TE411B, PT455, N41 TE421A, TE4218, PT456, N42 In percent AT span (AT - 87.0*F; Tavg - 100*F; Pressure - 800 psi; Power - 150% RTP; AI - 260% AI; 87.0*F span = 150% power)

Channel Statistical Allowance =

e e

9 m a 33

~

TABLE 3-9 OVERPOWER AT (CORE BURNDOWN EFFECTS) (N-1 LOOP)

Assumes re-normalization of AT,, T", and T' ,

Parameter Allowance

  • Process Measurement Accuracy

. 3...e 3....

3 .. . . l 3....

3 .. . .

Primary Element Accuracy Sen or Calibration Accuracy ,,,,

Measurement & Test Equipment Accuracy Sensor Pressure Effects Sensor Temperature Effects Sen or Drift ,,,,

Environmental...eAllowance

[ 3 Rack Calibration Accurac.y.c 3

- 3...e

. 3 .. . .

3....

Measurement & Test E,quipment Accuracy

. 3...c 3 .. . .

Com arator Included in string calibration)

Rack Temperature Effect Rack Drift .

- 3...e 3....

Tag Numbers - TE411A, TE411B, TE431A, TE431B, TE421A, TE421B, TE441A, TE441B In percent AT span (AT - 87.0*F; Tavg - 100*F; Power - 150% RTP; 87.0*F span = 150% power) 34

TABLE 3-9 (continued)

OVERPOWER AT (Core Burndown Effects) (N-1 LOOP)

Assumes re-normalization of AT,, T", and T' Channel Statistical Allowance =

. .s.c i

g S

I 4

O e

35

TABLE 3-10 PRESSURIZER PRESSURE - LOW & HIGH (ROSEMOUNT1154 TRANSMITTER)

Parameter Allowance

  • 4a c Process Measurement Accuracy Primary Element Accuracy Sensor Calibration Accuracy Sensor Reference Accuracy Measurerent & Test Equipment Accuracy Sensor Pressure Effects Sensor Temperature Effects .

Sensor Drift (30 months)

Environmental Allowance

! Bias -

[

t

] + .e Rack Calibration Rack Accuracy Measurenent & Test Equipment Accuracy Comparator String Calibrated Rack Temperature Effect Rack Drift Tag No.'s - PT457, PT458 In percent span (800 psia) .

Channel Statistical Allowance =

l 6 4a.c l

l t

36

TABLE 3-11' PRESSURIZER PRESSURE - SI

. (ROSEM0UNT1154 TRANSMITTER)

Parameter Allowance *

+ .c Process Measurement Accuracy Primary Element Accuracy ,

Sensor Calibration Accuracy Sensor Reference Accuracy Measurement & Test Equipment Accuracy Sensor Pressure Effects

. Sensor Temperature Effects Included in EA term Sensor Drift (30 months)

Environmental Allowance 3' ..,, l

)

Bias

[ 3...e l

Rack Calibration Rack Accuracy Measurement & Test Equipment Accuracy Comparator String Calibrated Rack Temperature Effect Rack Drift Tag No.'s - PT457, PT458 l

In percent span (800 psia)

Channel Statistical Allowance =

. +..e e

n 37

- TABLE 3-12 PRESSURIZER WATER LEVEL - HIGH (VERITRAK TRANSMITTER)

Parameter Allowance *

. . ...e ,

Process Measurement Accuracy .

.e c Primary Element Accuracy .

Sensor Calibration Accuracy Sensor Reference Accuracy Measurement & Test Equipment Accuracy .

Sensor Pressure Effects Sensor Temperature Effects Sensor Drift (30 months)

Environmental Allowance ,

i Bias E* .

3...e Rack Calibration Rack Accuracy Measurement & Test Equipment Accuracy Comparator String Calibrated Rack Temperature Effect Rack Drift .

Tag No.'s - LT-459 In percent span (100%)

Channel Statistical Allowance =

. . ...e ,

38

L TABLE 3-13 PRESSURIZER WATER LEVEL - HIGH (ROSEMOUNT TRANSMITTER)

Farameter Allowance * -

. . +a.c Process Measurement Accuracy .

' ' *a,e Primary Element Accuracy Sensor Calibration Accuracy Sensor Reference Accuracy

, Measurenent & Test Equipment Accuracy ,

-Sensor Pressure Effects Sensor Temperature Effects 1

Sensor Drift (30 months) l Environmental Allowance Bias >

].,,,3""

Rack Calibration Rack Accuracy Measurement & Test Equipment Accuracy Comparator String Calibrated Rack Temperature Effect Rack Drift Tag No.'s - LT-460, LT-461 In percent span (100%)

Channel Statistical Allowance =

. . +a.c e

  • a 39

TABLE 3-14 STEAM GENERATOR WATER LEVEL - LOW-LOW (FLB)

(ROSEMOUNT 1154 TRANSMITTER ANALYZED FOR FUTURE OPERATIONS) .

Parameter Allowance *

...c Process Measurement Accuracy .

3 .. . .

3 .. . .

Primary Element Accuracy Sensor Calibration Accuracy .

Sensor Reference Accuracy Measurement & Test Equipment Accuracy .

Sensor Pressure Effects Sensor Temperature Effects Included in EA term .

Sensor Drift (30 months) l .

Environmental Allowance l '

3...e 3...3...e Bias

[ 3...e Rack Calibration Rack Accuracy Measurement & Test Equipment Accuracy Comparator String Calibrated Rack Temperature Effect Rack Drift . .

Ta9 No.'s - LT517, LT518, LT519 LT527, LT528, LT529 .

LT537, LT538, LT539 LT547, LT548, LT549 LT551, LT552, LT553 .

l LT554 1

In percent span (100%)

40 1

I 1

TABLE 3-14 (continued)

STEAM GENERATOR WATER LEVEL LOW-LOW (FLB)

, (ROSEMOUNT1154TRANSMITTERANALYZEDFORFUTUREOPERATIONS)

. Channel Statistical Allowance =

+ ..e  !

f

~

. i I

T b

es

.e 41

TABLE 3-15 STEAM GENERATOR WATER LEVEL - LOW-LOW (LONF)

(ROSEMOUNT 1154 TRANSMITTER ANALYZED FOR FUTURE OPERATIONS) ,

Parameter Allowance

  • Process Measurement Accuracy ,

t...c 7..e y...

Primary Element Accuracy Sensor Calibration Accuracy Sensor Reference Accuracy .

Measurement & Test Equipment Accuracy Sensor Pressure Effects Sensor Temperature Effects Sensor Drift (30 months) .

Environmental Allowance Bias

[ p...

Rack Calibration Rack Accuracy Measurement & Test Equipment Accuracy Comparator String Calibrated Rack Temperature Effect Rack Drift -

Tag No.'s - LT517, LT518, LT519 ,

LT527, LT528, LT529 LT537, LT538, LT539  !

LT547, LT548, LT549 LT551, LT552, LT553 LT554 .

In percent span (100%) .i 42 l

TABLE 3-15 (continued)

STEAM GENERATOR WATER LEVEL LOW-LOW (LONF)

, (ROSEMOUNT 1154 TRANSMITTER ANALYZED FOR FUTURE OPERATIONS)

. Channel Statistical Allowance =

. ...e l

l 1

i l

i.

l O

e e

l' j' 43

TABLE 3-16 STEAM GENERATOR WATER LEVEL - HIGH-HIGH (ROSEMOUNT1154TRANSMITTERANALYZEDFORFUTUREOPERATIONS) ,

Parameter Allowance *

+ ..c Process Measurement Accuracy ,

...e 3...c 3 .. . .

Primary Element Accuracy Sensor Calibration Accuracy .

Sensor Reference Accuracy Measurement & Test Equipment Accuracy .

Sensor Pressure Effects Sensor Temperature Effects Sensor Drift (30 months)

Environmental Allowance .

Bi'{ 3...e Rack Calibration Rack Accuracy Measurement & Test Equipment Accuracy Comparator String Calibrated Rack Temperature Effect .

Rack Drift Tag No.'s - LT517, LT518, LT519 LT527, LT528, LT529 LT537, LT538, LT539 LT547, LT548, LT549 LT551, LT552, LT553 LT554 .

In percent span (100%)

44

k TABLE 3-16 (continued)

STEAM GENERATOR WATER LEVEL HIGH-HIGH

, (ROSEMOUNT 1154 TRANSMITTER ANALYZED FOR FUTURE OPERATIONS)

T Channel Statistical Allowance = -

+ 4,C 4

e 4

1 i

1 I

e 9

45

TABLE 3-17 REACTOR COOLANT PUMP UNDERSPEED Allowance

  • Parameter

. . +a.c ,

Process Measurement Accuracy Primary Element Accuracy Sensor Calibration Accuracy Sensor Reference Accuracy Measurement & Test Equipment Accuracy Sensor Pressure Effects .

Sensor Temperature Effects

' Sensor Drift (30 months)

Environmental Allowance Bias ,

Rack Calibration Rack Accuracy

  • Measurement & Test Equipment Accuracy Comparator String Calibrated Rack Temperature Effect Rack Drift Tag No.'s - SE495, SE496, SE497, SE498 In percent span (81.013 - 106.329% RNS)

Channel Statistical Allowance = ,

+ .c e

9 m

46

TABLE 3-18 CONTAINMENT PRESSURE - HIGH 1, HIGH 2, HIGH 3 (ROSEMOUNT TRANSMITTER)

Parameter Allowance'

. . + .e

~

Process Measurement Accuracy

^

Primary Element Accuracy Sensor Calibration Accuracy Sensor Reference Accuracy Measurement & Test Equipment Accuracy

. Sensor Pressure Effects Sensor Temperature Effects Sensor Drift (30 months)

Environmental Allowance Bias

[ ] +a.c Rack Calibration Rack Accuracy Measurement & Test Equipment Accuracy Comparator String Calibrated Rack Temperature Effect Rack Drift

)

l Tag No.'s - PT934, PT935, PT936. PT937 In percent span (60 psia) l l

l Channel Statistical Allowance =

+ ..e r e 1

e 47 l

l

I i

TABLE 3-19' STEAMLINE PRESSURE - LOW SI (ROSEMOUNT TRANSMITTER)

Parameter Allowance * -

i

+ .e Process Measurement Accuracy Primary Element Accuracy Sensor Calibration Accuracy Sensor Reference Accuracy Measurement & Test Equipment Accuracy Sensor Pressure Effects .

Sensor Temperature Effects Sensor Drift (30 months)

Environmental Allowance Bias

. 3****

Rack Calibration Rack Accuracy Measurement & Test Equipment Accuracy Comparator String Calibrated Rack Temperature Effect Rack Drift Tag No.'s - PT514, PT515, PT516 PT524, PT525, PT526 -

PT534, PT535, PT536 PT544, PT545, PT546 .

In percent span (1300 psig)

Channel Statistical Allowance - ,,,

e o

48

TABLE 3-20 NEGATIVE STEAM PRESSURE RATE - HIGH ,

I Parameter Allowance * [

. . ...e  !

~

Process Measurement Accuracy Primary Element Accuracy

^

l Sensor Calibration Accuracy ,

[

3...e i

. . Measurement & Test Equipment Accuracy Sensor Pressure Effects  ;

~

Sensor Temperature Effects  :

[  ;

3....

Sensor Drift

[ t 3....

!* Environmental Allowance  !

l Rack Calibration Rack Accuracy Measurement & Test Equipnent Accuracy Comparator Rack Temperature Effect Rack Drift Tag No.'s - PT514 PT515, PT516 PT524, PT525, PT526 PT534, PT535, PT536 PT544, PT545, PT546 In percent span (1300 PSIG)

Channel Statistical Allowance =

. . ...c t 0

. e 49

TABLE 3-21' RCS LOW FLOW (N LOOP) (ROSEMOUNT TRANSMITTER)

Parameter Allowance * ,,

Process Measurement Accuracy .

- 3'

]+..e Primary Element Accuracy

[ ]...e Sensor Calibration Accuracy

[ ]+..e Sensor Reference Accuracy [ ]****

Measurement & Test Equipment Accuracy

[ ]+..e Sensor Pressure Effects

[ ]+..e Sensor Temperature Effects

[ ]+..c Sensor Drift (30 months)[ ] ** '

Environmental Allowance Bias [ ] **

  • Rack Calibration Rack Accuracy [ ] **
  • Measurement & Test Equipment Accuracy [ ] **
  • Comparator l String Calibrated Rack Temperature Effect [ ] * .

Rack Drift [ ] **

  • Tag No,'s - FT414, FT415, FT416, FT424, FT425, FT426 FT434, FT435, FT436, FT444, FT445, FT446 l

l In percent span (120% flow)

Channel Statistical Allowance =

+ ..e i ,

50

TABLE 3-22 RCS LOW FLOW (N-1 LOOP) (ROSEMOUNT TRANSMITTER)

Parameter Allowance

  • Process Measurement Accuracy ,

- 3 .. . .

3....

Primary Element Accuracy

[ 3+..c Sensor Calibration Accuracy

[ 3 ... .

Sensor Reference Accuracy [ ] ** *

  • Measurement & Test Equipment Accuracy

[ 3+..e Sensor Pressure Effects

[ 3....

Sensor Temperature Effects

[ 3 ...e Sensor Drift (30 months)[ ]"'

Environmental Allowance Bias [ ]"'

Rack Calibration i Rack Accuracy [ ]"'

Measurement & Test Equipment Accuracy [ ] **

  • l Comparator String Calibrated Rack Temperature Effect [ ]"'

Rack Drift [ ]"'

l Tag No. 's - FT414, FT415. FT416, FT424, FT425, FT426 FT434, FT435, FT436, FT444, FT445, FT446 In percent span (120% flow)

Channel Statistical Allowance =

e e

p a 51 l

TABLE 3-23 TAVG, LOW AND LOW-LOW Parameter Allowance *

. e.e

~

Process Measurement Accuracy (hot leg streaming)(pmaTh)

Beta (hot leg streaming stability-introduced on the loss of a hot leg RTD)

Primary Element Accuracy Sensor Calibration Accuracy (scartd)

Sensor Reference Accuracy (srartd)

Measurenent & Test Equipment Accuracy (smte) .

Sensor Pressure Effects Sensor Temperature Effects Sensor Drift (30 months) (sdrtd)

Environmental Allowance Bias t p..e .

Rack Calibration Accuracy Tavg (tcal)

R/I (rical)

Alpha (accuracy of hot leg streaming bias on the loss of a hot leg RTD)

Measurement & Test Equipment Accuracy Tavg (tmte)

R/I (rimte)

Comparator String Calibrated Rack Temperature Effect (trte) .

Rack Drift (trd) .

Tag No.'s - TE411, TE421, TE431, TE441 In percent span (100 *F)

+ Number of hot leg RTDs used .

++ Number of cold leg RTDs used 52 i

. I i

i i

TABLE 3-23 (continued)  !

TAVG, LOW AND LOW, LOW {

i i

, srtd = (smtertd + sdrtd)' + (scartd + smtertd): + srartdr =- 0.9  ;

r1 = (rimte + rird) + (rical + rimte)' = 0.2 track = (tmte + trd)' + trte' + (tcal + tmte): + alphat , 1.0 Channel Statistical-Allowance = l I

. ...e ;

i l

l i

f l

?

l I

i e

I l

i 53  :

%g j

1-;

l REACTOR PROTECTION SYS11 ACTUATION SYSTEM ( . .

MILL $

SENSOR

]

1 2 3 4 5 6

]

MEASUREMENT PROCESS PRIMARY & TEST PROTECTION CHANNEL MEASUREMENT ELEMENT CAUBRATION REFERENCE EQUIPMENT PRESSURE TEFS]

ACCURACY ACCURACY ACCURACY ACCURACY ACCURACY EFFECTS (1) (1) (1) (1) (1) (1) 1 POWER RANGE, NEUTRON FLUX HIGH SETPONT 2 POWE.R RANGE, NELKRON FLUX . LOW SETPONT j 3 POWER RANGE, NEUTf0N Fi.UX . HIGH SETPONT (N 1 LOOP) 'l 4 POWER RANGE, NEUTRCN FLMX

  • HIGH POSITNE & EGATIVE RATE ]

6 NTERMEDIATE RANGE, NEUTRON FLUX ]

5 SOURCE RANGE, NEUTRON FUJX ]

7 OVERTEMPERATURE AT AT CHAPNEL NLOOP)

TAVG CHAftIEL PRESSURIZER PRESSURE CHAPNEL f(AI) CHAPNEL g 8 OVERPOWER AT AT CHAPNEL

]

erme)

Teve CHANNEL 9 OVERTEMPERATURE AT P+1 LOOP) to OVERPOWER AT N1 LOOP) _j 11 PRESSURIZER PRESSURE . LOW, REACTOR TRIP (R08EMCrJNT 11M XMITTER) ]

R 12 PRES $URLZER PRESSURE . hot REACTOR TRIP (ROSEMOLNT 1tM XM11TER) 13 PRESSURIZER WATER LEVEL . HKlH (VERITRAK XM!TTER) 14 PRESSURlZER WATER LEVEL . HIGH (ROSEMOLNT XWTTER) ~

16 LOSS OF FLDW lN LOOP) (ROSEMOLNT XMITTER) 16 (ROSEMOUNT XMl1TER)

R LOSS OF FLOW lN-1 LOOP) 17 STE.AM GENERATOR WATER LEVEL . LOW 4DW W FLB (ROSEMOUNT 1tu XMrrTER) o ts : TEAM GENERATOR WATER LEVEL LOW 4.0W W LONF (ROSEMOUNT 11H XMITTER) ]

19 REACTOR COQUINT PUW UNDERSPEED ]

20 PRESSURIZER PRESSURE LOW . El (ROSEMOUNT 11M XMITIER) ]

21 STEAENE PRESSURE . LDW (ROSEWANT XMITTER) 22 CONTANetNT PRESSURE HIGH t (ROSEMOUNT XMfrTER) 4 D CONTANdENT PRESSURE HKlH 2 (ROSEMOLNT KWTTER) <

N CONTAINMENT PRESSURE HKlH S (ROSEMOLNT XWITER) 25 NeGATWE STuM PRESSURE RATE. aH d 25 STEAM OENERATOR W ATER LEVEL . HIGH+1KlH (ROSEMOLNT 1154 XWTTER) ]

27 TAVG LOW 8 LOW 10W

- ]a l

  1. CTES:
1. ALL VALUES N PERCENT OF SPAN. 9. [ T" 17. ,
t. AS NOTED N TABLE ISS4 OF THE FSAfL 10. l T" 18. '.

1 A8 NOTED N TABLES til AND SS4 OF THE PLANT TECHNEAL SPECIFCATIONS. t1, [ T" 19. {

4- I T" 12. I T" 20. *

5. NOT USED N SAFETY ANALYSIS. 13. l T"

& AS NOTED N F10URE tSA) 815AtA OF THE FSAR 14. l T" 21. '

T. AS ICTED N TABLE til, NOTE 1 OF THE PLANT TECHNICAL SPECIFICATIONS. 15.[ F 22. ,

8 AS NOTED M TABLE 221. NOTE 2 OF THE PLANT TECHNICAL SPECFEAtl0NS. 16. NCORE / EXCORE f(a4 COMPARISON AS NOTED N TABLE 411 OF THE PUNT TECFMCAL SPECIFEATIONS.

R

l PAGE$4

[E 344 a CAGE $5

$ ENGINEERED SAFETY FEATURES WNEL ERROR ALLOWANCES N4E UNIT 3 NSTRUMENT RACK 4 9 to 11 12 13 14 15 16 17 18 19 MEASUREMENT

( ENVIRON. & TEST COMPARATOR SAFETY tOMNAL CHMOE.

MTURE MENTAL CAUBRATION EQUIPMENT SETTNG T EMPER ATURE ANALYSIS TRIP TOTAL STATE! CAL 3 79 DRIFT ALLOWANCE ACCURACY ACCURACY ACCURACY EFFECTS DRIFT LNff SETPOINT ALLOWANCE ALLOWANCE WARG8d

') (1) (1) (1) (1) (1) (1) (1) (2) (3) (1) (1) (1) 118% RTP 109% RTP T3 1 36% RTP 25% RTP 83 2 89% RTP 80% RTP 73 3 (5) ED% RTP - 4 (5) 25% RTP - 5 (5) 1DE+05 CPS - 6 FUNCTl0N(6) FLNCT10N(7) 10D 7 FUNCT10N(6) FUNCTION (8) 43 8 FLNCT10N(6) FUNCTION (7) 104 9 FUNCT10N(6) FUNCT10N(8) 4A 10 1860 PSIA 1900 PSIA SA 11 2425 PSIA 236 PSIA Sh 12 (5) 89% SPAN - 13 (5) 89% SPAN - 14 85% DESIGN 90% DESIGN 42 15 85% DESIGN 90% DESIGN 42 is 0% SPAN 18.1% SPAN 18.1 Y 10% SPAN 18.1% SPAN 8.1 18 434% $ PAN 451% 5 PAN 1.7 19 1700 PSIA 1892.3 PSIA 24D 2D 420 PSG 6684 PSG 18.4 21 19 7 PSIA 17.7 PSIA 3.3 22 19.7 PSnA 17.7 PSIA SJ 23 24 i PS6A 22.7 PSIA 3.3 24

~ ~

(5) 100 PSG - 25 i 96% SPAN 803% SPAN 15 4 25

~~

j l5) 554' F t 563' F - 27 ni ANSTEC r

e

a. : r r APERTURE r '$ i r
26. NSULATION RESISTANCE DEGRADATION. TREATED AS A BIAS CARD r ni r r ai r r ai r Also Avalia.c le on F Aperture Card
  • l r H

c 5 oBo\0/79- '

TABLE 3-25 OVERTEMPERATURE'AT CALCULATIONS (Rosemount 1154 Transmitter for Pressurizer Pressure) a The equation for Overtemperature AT: l s

l 1 1 ,

AT(1(1+ +Tf)t,5) (1 + Tf) s AT 2(1 o {K,+-Tf) K (1 + tJ) (T (1 + Tf)- T') + K (P - P 3

Ki(nominal) = 1.20 Technical Specification value K (max) 3 =[ ] ** **

Kr

= 0.02456/*F K3 = 0.001311/ psi

, Vessel AT = 60.2 *F (N Loop)

Vessel AT = 58.0 *F (N-1 Loop)

AI gain =

1.98% RTP/% AI s Full power AT calculation:

! AT span = '

AT span = l a Process Measurement Accuracy Calculations:

..e

[ 3

[ 3 ...

[ ]...e

[ 3...e

. Presumes nonnalization of AT, and T' to as found full power indicated values.

56

I t

TABLE 3-25 (continued)

OVERTEMPERATURE AT CALCULATIONS -

(Rosemount 1154 Transmitter for Pressurizer Pressure) -

AI - Incore / Excore Mismatch -

, . +a.c AI - Incore Map Delta-I .,,,

r l

\

m Pressure Channel Uncertainties

. . +..e Gain =

, . soc*

SCA =

SRA =  !-

SMTE =

STE =

SD = ~ i 9

l =

RCA l

RMTE = <

RD = -

l 57

TABLE 3-25 (continued) '

OVERTEMPERATURE AT CALCULATIONS

, (Rosemount 1154 Transmitter for Pressurizer Pressure)

- e AI Channel Uncertainties

,...e Gain =

. ...e i

RCA =

RMTE =

RD =

4 l

e Total Allowance

. . ...e Same result for N-1 Loop i

[

. I i

58  !

I I TABLE 3-26 l

OVERPOWER AT CALCULATIONS e The equation for Overpower AT: .

AT '

(1 + T2

8) (I + TE) s oAT (K, 3- K((1 + TE)) (I6 + T 8)T - KgR e I + T 8) - T'1 -f2 (Al) I K. (nominal) = 1.09 Technical Specification value K, (max) =

[ ]

  • K3 = 0.0 for decreasing average temperature ,

K3 = 0.02 for increasing average temperature (sec/*F)

K.

= 0.0018/*F .

Vessel AT = 60.2 'F (NLoop)

Vessel AT = 58.0 *F (N-1 Loop) s Full power AT calculation:

AT span = [ ] '* '

AT span = [ ] '* *

  • a Process Measurement Accuracy Calculations:

[ 3...e

[ 3 .. . . .

[ 3...e

[ 3 .. ..

Presumes normalization of AT, and T" to as found full power indicated values.

59

TABLE 3-26 (Continued)

OVERPOWER AT CALCULATIONS a Total Allowance

. ...e

    • Same results for N-1 Loop e

G

=

G

I TABLE 3-27 AP MEASUREMENTS EXPRESSED IN FLOW UNITS The AP accuracy expressed as percent of span of the transmitter applies ,

throughout the measured span, i.e., *1.5% of 100 inches AP = *1.5 inches anywhere in the span. Because Fr = f(AP) the same cannot be said for flow accuracies. When it is more convenient to express the accuracy of a transmitter in flow terms, the following method is used:

(Fy)2 = APy where N = Nominal Flow .

2F)F, = BAP, BAP" Eq. 3-27.1 thus BF" = 2F y

Error at a point (not in percent) is:

BF" = BAP" = BAP" Eq. 3-27.2 Fy 2(F,)2 2hPy and

    1. " = I#"N Eq. 3-27.3 AP , ( F ,)2 where max = maximum flow and the transmitter AP error is:

BAP" Eq. 3-27.4 AP,(100) = percent error in Full Scale AP (% c FS AP) 6 61

therefore:

' % c FS AP' '

-2 BF, = #~n 100 ' % e FS AP F_ Eq. 3-27.5

=

Fy 2

(2)(100) _ Fy 7"

2AP"" F

_=_

Error in flow units is:

2 E A = Eq. 3-27.6 BF" = F" Fy

_ (2)(100) _ _ _

Error in percent nominal flow is:

2 BF, ,

' % e FS AP' F ,, gq, 3_g7,7 F, -

2 -

F, .

Error in percent full span is:

2 BF, Fu ~ % e FS AP' F ,,

(100)

F,,(100) = Fy F_ _ (2)(100) ,

Eq. 3-27.8

% e FS AP F ,,

2 -

Fy Equation 3-27.8 is used to express errors in percent full span in this document.

O 62

This page intentionally left blank -

e e

S 63

WESTINGHOUSE PROPRIETARY CLASS 2C 4.0 APPLICATION OF THE SETPOINT METHODOLOGY 4.1 Uncertainty Calculation Basic Assumptions / Premises The equations noted in Sections 2 and 3 have several basic premises which were determined by a systematic review of the calibration and drift determination procedures utilized at Millstone Unit 3 and statistical evaluations of "as left" and "as found" data for the RPS/ESPAS functions noted in Tables 3-1 thmugh 3-24:

1) the instrument technicians make masonable attempts to achieve the Nominal Trip Setpoint as an "as left" condition at the start of each process rack's surveillance interval,
2) the instrument technicians make masonable attempts to achieve a nominal "as left" condition at the start of each sensor / transmitter's surveillance interval,
3) the process rack drift is evaluated (probability distribution function characteristics and drift magnitude) over multiple surveillance intervals,
4) the sensor / transmitter drift is trended over the fuel cycle and evaluated (probability distribution function characteristics and drift magnitude) over multiple fuel cycles,
5) the pmcess rack calibration accuracy is evaluated (probability distribution function characteristics and drift magnitude) over multiple surveillance intervals,
6) the sensor / transmitter calibration accuracy is evaluated (probability distribution function characteristics and drift magnitude) over multiple surveillance intervals, I

c :\wordperrdocs\milleton\rpsweap.neu 64 i

7) the process racks (with the exception of the bistables) are calibrated using a one up (or one down) pass utilizing multiple calibration points (minimum 4 points and for ,

many functions - 5 points, as recommended by ISA51.lDI).

8) the sensor / transmitters are calibrated using a one up (or one down) pass utilizing multiple calibration points (minimum 4 points and for many functions - 5 points, as recommended by ISA51.1121),

It should be noted for (1) and (2) that it is not necessary for the instrument technician to recalibrate a device or channel if the "as left" condition is not exactly at the nominal condition but is within the plus or minus of nominal "as left" procedural tolerance. As noted ,

above, the uncertainty calculations assume that the "as left" tolerance (conservative and non-conservative direction) is satisfied on a reasonable, statistical basis, not that the nominal condition is satisfied exactly. Westinghouse has statistically evaluated the "as left" condition for the RPS/ESFAS process rack channels and sensor / transmitters for Millstone Unit 3 over multiple calibration cycles. This evaluation determined that the SCA and RCA parameter .

values noted in Tables 3-1 through 3-24 were satisfied on at least a 95 % probability / 95 %

confidence level basis. For those instances where non-conservative biases in calibration were noted, the biases were factored into the uncertainty calculations. Calibration biases for sensor / transmitters were considered as non-conservative since sensor / transmitter signals are used for both control and protection and could be considered significant for control purposes.

It is therefore necessary for the plant to periodically reverify the continued validity of these results. This prevents the institution of non-conservative biases due to a procedural basis .

without the plant staff's knowledge and appropriate treatment.

In summary, a sensor / transmitter or a process rack channel is considered to be " calibrated" when the two-sided "as left" calibration procedural tolerance is satisfied. An instrument technician may determine to recalibrate if near the extremes of the "as left" procedural -

tolemnce, but it is not required. Recalibration is explicitly required any time the "as found" condition of the device or channel is outside of the "as left" procedural tolerance. A device or channel may not be left outside the "as left" tolerance without declaring the channel 65

" inoperable" and appropriate action taken. Thus an "as left" tolerance may be considered as an outer limit for the purposes of calibation and instrument uncenainty calculations.

As pan of this effon, drift data ("as found" "as left") for the sensor / transmitters and the process racks were evaluated. Multiple surveillance intervals were evaluated to determine the appropriate values for drift for a surveillance interval of 30 months (for sensor / transmitters) and 3 months (for analog process rack modules). This evaluation determined that the SD and RD parameter values noted in Tables 3-1 through 3-24 were satisfied on a 95 % probability / 95 % confidence level basis for the projected surveillance intervals. Generic Letter 91-04m requires that drift be tracked or trended on a periodic basis. The equations used in Sections 2 and 3, assume that drift data is evaluated for continuation of the validity of the basic characteristics determined by the Westinghouse evaluation. This assumption has a significant beneficial effect on the basic uncenainty equations utilized, i.e., it results in a reduction in the CSA magnitude.

. 4.2 Sensor / Transmitter Operability Determination Program and Criteria As a result of the review of the plant procedures, the equations noted in Sections 2 and 3 are significantly different from those used in previous Westinghouse uncertainty calculations.

One aspect of the equations easily noted is the significance of the calibration process, i.e., it is treated as statistically independent of the drift determination. Another aspect is that if drift and calibration are independent processes, then the determination of equipment operability is

. changed, i.e., it is not the arithmetic sum of the two uncenainties. Millstone Unit 3 and Westinghouse have agreed upon a set of criteria that may be used for equipment operability determination which are controlled by plant procedures and processes, as opposed to the plant Technical Specifications. The principle criterion for sensor / transmitter operability, as a first pass parameter, is drift ("as found" "as left") determined to be within SD, where SD is the 95/95 drift value determined for that specific device, e.g., a Pressurizer Pressure transmitter. This would require the instrument technician to record both the "as left" and "as found" conditions and perform a calculation in the field. 'Ihis field calculation has been determined to be impracticable at this time since it would require having the "as left" value 66

for that device at the time of drift determination and becomes a records availability / control problem. An altemative is the use of a fixed magnitude, two-sided "as found" tolerance ,

about the nominal value. It was agreed that a reasonable value for this tolerance is SMTE +

SD, whem SD is again the 95/95 drift value and SMTE is as defined in the uncertainty calculations and identified in the Millstone Unit 3 procedures reviewed by Westinghouse.

The value of this sum is explicitly noted for each RPS/ESFAS function in Table 4-1 of this document. 'Ihis criterion can then be incorporated into plant, function specific calibration and drift procedures as the defined "as found" tolerance about the desired, nominal value.

~

A second criterion .is the ability to calibrate the sensor / transmitter within the two-sided "as left" tolerance. If the Mce drift is found outside the SMTE + SD (or "as found") ,

criterion, the drift characteristics may be evaluated incorporating the previous experience for that specific device. The response time characteristics may also be evaluated on a qualitative and if necessary, a quantitative basis. It has also been agreed by Millstone Unit 3 and Westinghouse that monitoring the sensor / transmitter response with the average of it's peer devices, utilizing data available online, periodically over the entire cycle is an additional .

check on operability. This additional check provides a reasonable substitute for the use of a relative SD term (as recommended in the Westinghouse paper presented at the ISA/EPRI conference of June,19941'!). When an appropriate acceptance criterion is utilized, it then allows the use of SMTE + SD as a first pass operability criterion. The acceptance criterion agreed upon between Westinghouse and Millstone Unit 3 is a relative deviation of i0.5 %

l span from the beginning of cycle difference value. A relative shift of this magnitude has been determined to be an appropriate indication of device drift warranting further .

investigation..

It is believed that the Millstone Unit 3 systematic sensor / transmitter program of drift and calibration review is acceptable as a set of first pass criteria. More elaborate evaluation and more frequent online monitoring may be included, as necessary, if the drift is found to be -

excessive or the device is found difficult to calibrate. To provide additional confidence in

.r the evaluation process, Millstone Unit 3 has agreed to utilize a function indication match criterion at the beginning of each cycle to determine the acceptability of the calibration 67

process for the transmitter and that portion of the channel encompassed through the indicator.

Based on the above, it is believed that the total program pmposed for Millstone Unit 3 will provide a more comprehensive evaluation of operability than a simple determination of an acceptable "as found".

4.3 Process Rack Operability Determination Pr,..m and Criteria A similar program to that described for sensor / transmitters has been determined for the process racks. However, since the surveillance interval for the process racks is significantly -

shorter than the sensor / transmitter (3 months vs 30 months) and the process racks are i accessible at power, the program does not have to be as comprehensive. De parameter of most interest as a first pass operability criterion is drift ("as found" "as left") found to be within RD, where RD is the 95/95 drift value determined for that channel. However, this has the same difficulties as the drift determination for a sensor / transmitter, i.e., records of the "as left" condition must be available for field use in a calculation with the same records

. availability / control problems. A similar alternative may be used for the process racks as was agreed upon for the sensor / transmitter; a fixed magnitude, two-sided "as found" tolerance ,

about the nominal trip setpoint. It was agreed that a reasonable value for this tolerance is RMTE + RD, where RD is the 95/95 drift value and RMTE is as defined in the uncertainty calculations and identified in the Millstone Unit 3 procedures reviewed by Westinghouse.

l This is explicitly noted for each RPS/ESFAS function in Table 4-1 of this document. This

. criterion can then be incorporated into plant, function specific calibration and drift '

. procedures as the defined "as found" tolerance about the Nominal Trip Setpoint.

A second criterion is the ability to calibrate the process rack channel within the two-sided "as

! left" tolerance. If the channel drift is found outside the RMTE + RD (or "as found")

criterion, the drift characteristics may be evaluated incorporating the previous experience for that specific channel. De response time characteristics for the channel (or individual process rack module) may also be evaluated on a qualitative and if necessary, a quantitative basis.

There is not as much information to be gained by evaluating channel to average of peer channels utilizing control board or process computer indication due to the difference in 68

uncertainty significance, i.e., the uncertainty associated with a control board indicator is significantly larger than the uncertainty associated with a trip bistable. Therefore channel to ,

channel or average of channels ccmparison is not expected to provide significant indication of operability of the process racks in any way other than in a gross manner. Thus no 'i recommendations have been mrde in performing this process for the racks. (It should be noted that this type of compauson is considered beneficial for transmitters and is included for that purpose in Section 4.2 b,' Millstone Unit 3 and Westinghouse).

It is believed that the Millstore Unit 3 systematic program of drift and calibration review proposed for the process racks 1 acceptable as a set of first pass criteria. More elaborate ,

evaluation and monitoring may be. 'ncluded, as necessary, if the drift is found to be excessive .

or the channel is found difficult to calibrate. Based on the above, it is believed that the total process rack program proposed for Millstone Unit 3 will provide a more comprehensive evaluation of operability than a simple determination of an acceptable "as found".

4.4 Application to the Plant Technical Specifications .

The first pass operability criteria noted for the process racks in Section 4.3 are based on a statistical evaluation of the performance of the installed hardware. Thus the values can change if the Measurement and Test Equipment is changed, or the procedures used in the surveillance process are changed significantly and particularly if the process rack modules themselves are changed, e.g., from pure analog to a mixture of analog and ASIC (Application Specific Integrated Circuit) modules. Derefore, the operability criteria are not .

expected to be static. In fact they are expected to change as the characteristics of the

~

equipment change. This does not imply that the criteria can increase due to increasingly poor performance of the equipment over time. But rather just the opposite, as new and better equipment and processes are instituted, the operability criteria magnitudes would be expected to decrease to reflect the increased capabilities of the replacement equipment. -

Sections 4.2 and 4.3 are basically consistent with the recommendations of the Westinghouse paper presented at the June,1994, ISA/EPRI conference in Orlando, FlW. D erefore, i

69

, - - -- - r -- , --- - - - - - - - - - - - - - - _ . - - - - - - -

consistent with this paper, Westinghouse recommends revision of Specification 2.2.1, Limiting Safety System Settings - Reactor Trip Sys'em Instrumentation Setpoints",

Specification 3.3.2, " Engineered Safety Features Actuation System Instmmentation -  !

~

Limiting Condition for Operation", Table 2.2-1 " Reactor Trip System Instmmentation t Setpoints" and Table 3.3-4, " Engineered Safety Features Actuation System Instrumentation Trip Setpoints". Appendix A provides the Westinghouse recommendations for revision of these two specifications and tables. Table 3-24 (Column 16) and Table 4-1 of this document provide the recommended Nominal Trip Setpoint for each RPS/ESFAS protection function, which was utilized in the Westinghouse uncenainty calculations and determined to be acceptable for use. Table 4-1 also notes the first pass operability criteria for each RPS/ESFAS protection function sensor / transmitter and process rack channel, specific to each input for multiple input functions, which should be placed in the plant procedures and maintained under plant administrative control. 'Ihis is consistent with the bases sections for the two specifications provided in Appendix A. In addition, the plant operability 9

determination processes described in Sections 4.2 and 4.3 are consistent with the ISA paperMI

. and the bases sections for the two specifications provided in Appendix A.

4.5 References / Standards

[1] Instrument Society of America Standard S51.1-1979, " Process Instrumentation Terminology", p 33,1979.

[2] Ibid l

[3] Generic I.etter 91-04,1991, " Changes in Technical Specification Surveillance Intervals to Accommodate a 24 month Fuel Cycle."

[4] Tuley, C. R., Williams, T. P., "The Allowable Value in the Westinghouse Setpoint ,

Methodology - Fact or Fiction?," presented at the Thiny-Seventh Power Instrumentation Symposium (4* Annual ISA/EPRI Joint Controls and Automation

. Conference), Orlando, Fl., June,1994.

[5] Ibid i [6] Ibid 70

- PAaE rt TABLE 4-1 WESTINGHOUSE PROTECTION SYSTEM STS SETPOINT INPUTS MILLSTONE UNIT 3 PROTECTION CHAPfsEL SEP60R RACK MSTRUMENT NOWGAL OPERABUTY OPER480TY SPAN TMF 4

(13) (19) SETPONT 1 POWER RANGE, NEUTRON FLUR . IGGH SETPomi -

04% SPAN tag % Rfp 1 tes% RTP 2 POWER MANE. IEUTROM FLUE LOW SETPOWT - 04% SPAN 12W% RTP 39% RTP 2

, 3 POWER RANGE, EUTROM FLUM + 64GH SETPORT M1 LOOP) -

04% SPAN 125% R1P gr% RTP 3 4 80WER RANGE. EUTROM FLUX HG4 POSITWE a NEGATWE RATE 44% SPAN 12W% RTP 59% RTP 4 1

5 MTERREDIATE RANE. NEUTRON FLUX - 04% SPAN 120% RIP 25% RTP 5 l 4 SOURCE RANGE. MEUTROM FLUX 04% SPAN 1 OEeet CPS 1 005(PS 8 7 OVERTENDTRATUE AT ai CHAf8EL 84% SPAN

- (11) ll) FUNCTIONiel . 7 P LOOP)

TAM CHANEL - (1t) 04% SPAN PESSURIZER PRESSUPE CHA8pEL (R0!EWXMT 1154) 20% SPAN (10) 01% WAN 1[Afl CHANEL - 04% SPAN 8 OVERPOWER af AT CHANEL - 01) 94% SPAN (3) FUNC110N(7) 8 PLOOP)

Tag CHANEL - 01) 04% SPAN 9 OVERTEISTRATURE AT AT CHANIEL - 01) 04% SPAN 14) FUNCTIONte) 9 K1 LOOP)

TAVG CHANNEL - (11) 04% SPAN j PRESSURIZER PRESSURE CHANNEL (R0!EnADUNT 1154) 20% SPAN 00) 01% SPAN 4A!) CHANNEL -

04% SPAN 10 OVEfr0WER AT aiCHANNEL - (11) O 4% SPAN 5) FUNCTION (7) te l M1 LOOP) '

l l )

Tag CHANNEL - 01) e 4% SPAN 11 PRESSURIZER PRESSUIE - LOW. REACTOR TRIP (ROSEldOUNT tile MestTER) 13% SPAN 02% SPAN 800 PSI 1980 PSIA 11

?

l 12 PRESSURIZER PRESSIIRE - HIGH. REACTOR TRIP (ROSEndOUNT 1954 XteTTER) 13% SPAN 02% SPAN Ost PSI 2SIE PSIA 12 13 PRESSURIZER WATER LEVEL + N10H (VERITRAK RnSTTER) 10% SPAN 02% SPAN 100% SPAN Ort SPAN 13 14 PRESSURIZER WATER LEVEL.HIGH 14% SPAN (R0!Eh10VNT NISTTER) 02% SPAN 100% SPAN 85% SPAN 14 '

t t

i l

v a a t i s s i m i s t i -

l8gm i i i i s s s a s e s i 11 g

s g la rr t i r t i n e r e c e

$.a s a a n n  ! = = = s n B 55 E g g 88 0

- - e w

  • 11 5 rr t

$ s a-le t i t 1  : 1 1 : 1 1  : 1  !! i e

=e 8

=

s s s s s s s s s s e s 88

: . ef '

ars n'

_as

+e uJa:g =ys s s s a s s s s s s -e t as o o a

g l

a g ngb gg- gge a a a , a a a a a a a as., ,g,g __r gg .g= s s s  ! ! ! s s ! 5 W5 a a e a a E_E o

[ E E F E E E E E E m E E E E E E E E E 8 E E E I E E R R E 8 i l l  ! ! ! ! !

!* t i l 1 1 1 1 1 1

, I I I

e g 1 le 5 e I i

= 5 . . . i a E  ! E s g I I l '

!!* 5! I 1 I I I I ! !5 i  !

g a r g r r r i a E E

l5 e g .

i n 3 5 I l l i i 3 i 5.S.= B t. .e t,  :

i e ! s lr ! H H H ! ! ! u ! h!!al .!52 BnHI i

, , . , , . . . . . . .

  • gev as.2,

, as.2

, a,s .2, i

1

4 APPENDIX A SAMPLE MILLSTONE UNIT 3 SETPOINT TECHNICAL SPECIFICATIONS .

e e

9 e

I A-1

I i

SAFETY LIMITS AND LIMITING SAFETY SYSTEM SETTINGS l l

2.2 LIMITING SAFETY SYSTEM SETTINGS l

I REACTOR TRIP' SYSTEM INSTRUMENTATION SETPOINTS 2.2.1 The Reactor Trip System Instrumentation Channel and Interlock Chanr.el shall be OPERABLE and their Nominal Trip Setpoint set consistent with the Nominal Trip Setpoint values shown in Table 2.2-1.

APPLICABILITY: As shown for each channel in Table 3.3-1. ,

f ACTION:

, a. With a Reactor Trip System Instrumentation Channel or Interlock Channel Nominal Trip Setpoint inconsistent with the value shown in the Nominal Trip Setpoint column, adjust the Setpoint consistent with the Nominal Trip Setpoint value.

b. With a Reactor Trip System Instrumentation Channel or Interlock

. Channel found to be inoperable, declare the channel inoperable anc apply the applicable ACTION statement requirement of Specification 1 3.3.1 until the channel is restored to OPERABLE status and its ,

Setpoint adjusted consistent with the Nominal Trip Setpoint value.

9 9

i e

e A-2

TABLE 2.2-1 REACTOR TRIP SYSTEM INSTRUMENTATION TRIP SETPOINTS Functional Unit Nominal Trio Setooint

1. Manual Reactor Trip N.A.
2. Power Range, Neutron Flux, ,

High Setpoint

1) Four Loops Operating 109 percent of RTP*
2) Three Loops Operating 80 percent of RTP*

Low Setpoint 25 percent of RTP*

3. Power Range, Neutron Flux, 5 percent of RTP* with a High Positive Rate time constant 2 2 seconds ,
4. Power Range, Neutron Flux, 5 percent of RTP* with a High Negative Rate time constant E 2 seconds ,
5. Intermediate Range, 25 percent of RTP*

Neutron Flux

6. Source Range, Neutron Flux 10*5 cps
7. Overtemperature AT
a. Four Loops Operating 1 Channels I, II See note 1 2 Channels III, IV See note 1
b. Three Loops Operating 1 Channels I, II See note 1 2 Channels III, IV See note 1
8. Overpower AT See note 2
9. Pressurizer Pressure - Low 1900 psia .
10. Pressurizer Pressure - High 2385 psig
11. Pressurizer Water Level - High 89 percent of instrument span
12. Reactor Coolant Flow - Low 90 percent of loop design flow ** .

RTP - Rated Thermal Power '

    • Minimum Measured Flow Per Loop = 96,870 gpm (Four Loops Operating);

101,066 gpm (Three Loops Operating) j I

A-3

TABLE 2.2-1 (Continued)

REACTOR TRIP SYSTEM INSTRUMENTATION TRIP SETPOINTS Functional Unit Nominal Trio Setooint

13. Steam Generator Water 18.1 percent of narrow Level . Low-Low range instrument span
14. General Warning Alarm N.A.
15. Low Shaft Speed - Reactor 92.5% of RNS Coolant Pumps
16. Turbine Trip
a. Low Fluid Oil Pressure 500 psig
b. Turbine Stop Valve Closure 1 percent open
17. Safety Injection Input N.A.

from ESF

. 18. Reactor Trip System Interlocks

a. Internediate Range 1 x 10-8 amps Neutron Flux, P-6

. b. Low Power Reactor Trips Block, P-7

1. P-10 input (Note 3) 11 percent of RTP*
2. P-13 input 10 percent RTP* Turbine Impulse Pressure Equivalent
c. Power Range Neutron Flux, P-8
1) Four Loops Operating 37.5 percent of RTP*

l 2) Three Loops Operating 37.5 percent of RTP*

l l d. Power Range Neutron 51 percent of RTP*

Flux, P-9

e. Power Range Neutron 9 percent of RTP Flux, P-10 (Note 4)
19. Reactor Trip Breakers N.A.

l

20. Automatic Trip and Interlock N.A. I Logic
21. Three Loop Operation N.A.

Bypass Circuitry RTP - Rated Thermal Power A-4

TABLE 2.2-1 (Centinued)

TABLE NOTATION NOTE 1: OVERTEMPERATURE AT i

1+rS 1+rS (1+rSI (1 + r 5) 5 ATg {K i- K2 3

(1 + r 53} (1+#S6 3

-I l Where: AT '= Measured AT by Reactor Coolant System Instrumentation; l 1+r31 1+r32

lead-lag compensator on measured AT r,r

g 2 Time constants utilized in the lead-lag controller for AT, r1 = 8 secs., r2 = 3 secs.

I 1+rS3

= Lag compensator on measured AT r

3

= Time constant utilized in the lag compensator for AT, r 3= 0 secs.

AT, = Loop specific Indicated AT at RATED THERMAL POWER; Kg (nominal) = 1.20 (Four Loops Operating), 1.20 (Three Loops Operating)

K2 (nominal) = 0.02456 1+r54 1+r35 The function generated by the lead-lag compensator for T,yg dynamic compensation; r,r =

4 5 Time constants utilized in the lead-lag compensator for T ,yg r 4= 20 secs., r 5= 4 secs.

T = Average temperature, "F I =

1+r36 Lag compensator on measured T,yg r =

6 Time constant utilized in the measured T,yg lag compensator, r6 = 0 secs.

A-5

TABLE 2.2'i (Continued)

TABLE NOTATION (Continued)

NOTE 1: (continued)

T' s 587.1*F (Nominal Loop specific Indicated T,,, at RATED THERMAL POWER)

K3 (nominal) = 0.001311/ psi P = Pressurizer pressure, psia P' = 2250 psia (Nominal RCS operating pressure)

S = Laplace transfonn operator, sec-';

and f (aI) is a function of the indicated difference between top and bottom detectors of the power range neutron ion i

chambers; with gains to be selected based on measured instrument response during plant startup tests such that:

(1) for q, - q, between -26 percent and +3 percent, f (AI) i = 0 (where q, and q, are percent RATED THERMAL POWER in the top and bottom halves of the core respectively, and q, + q, is total THERMAL POWER in percent of RATED THERMAL POWER); ,

(2) for each percent that the magnitude of (q, - q,) exceeds -26 percent, the AT trip setpoint shall be automatically reduced by 3.55 percent of its value at RATED THERMAL POWER; and (3) for each percent that the magnitude of (q, - q,) exceeds +3 percent, the AT Trip Setpoint shall be automatically reduced by 1.98 percent of its value at RATED THERMAL POWER.

l l

l A-6

TABLE 2.2-1 (Continued)

TABLE NOTATION (Continued)

NOTE 2: OVERPOWER AT 1+r53 I I 4 5 Il r 75) (1 + r 63} 0 1

(I + '65 2 Where: AT = As defined in Note 1 1+rS3 1+r32

= As defined in Note 1 r,r g 2

= As defined in Note 1 I

1+r33 As defined in Note 1 r

3

As defined in Note 1 AT, = As defined in Note 1 K. (nominal) = 1.09 K3 (nominal)

0.02/*F for increasing average temperature and 0 for decreasing average temperature rS7 =

1+r57 The function generated by the rate-lag compensator for T ,ygdynamic compensation

=

r 7 Time constants utilized in the rate-lag compensator for T,yg, r 7 = 10 secs.

l I 1+r36

= As defined in Note 1 r

6

= As defined in Note 1 A-7

_.....m_. . . . . . . . _ s.,. ~

TABLE 2.2-1 (Continued)

TABLE NOTATION (Continued)

NOTE'2: (continued) i K. (nominal) =

0.00180/*F for T > T" and K. = 0 for T 5 T" l

T = As defincd in Note 1 T" s 587.1*F Nominal loop specific Indicated T.,, at RATED THERMAL POWER S = As defined in Note 1 f,(AI) = 0 for all AI NOTE 3: Setpoint is for increasing power.

NOTE 4: Setpoint is for decreasing power.

t 9

b A-8

r l

M LIMITING SAFETY SYSTEM SETTINGS HA21 2.2.1 REACTOR TRIP SYSTEM INSTRUMENTATION SETPOINTS

~

i l The Reactor Trip Setpoint Limits specified in Table 2.2-1 are the nominal values at which the reactor trips are set for each functional unit. The Nominal Trip Setpoints are considered the Limiting Safety System Settings as identified in 10CFR50.36 and have been selected to ensure that the core and l Reactor Coolant System are prevented from exceeding their safety limits during I normal o>eration and design basis anticipated operational occurrences and to assist tle Engineered Safety Features Actuation System in mitigating the consequences of accidents. The Setpoint for a Reactor Trip System or interlock function is considered to be consistent with the nominal value when the measured "as left" Setpoint is within the administrative 1y controlled (*) ~

I band identified as the calibration tolerance.

i Maintenance and Test Equipment accuracy is administrative 1y controlled by ,

l plant procedures and is included in the plant uncertainty calculations as defined in WCAP-10991. Operability determinations are based on the use of Maintenance and Test Equipment that conforms with the accuracy used in the plant uncertainty calculation. Maintenance and Test Egoipment should be i consistent with the requirements of ANSI / ISA 51.1-1979 or the most accurate practicable. .

l The administrative 1y controlled limit for operability of a device is determined by device drift being less than the value required for the -

l surveillance interval. In the event the device exceeds the administrative 1y controlled limit, operability of the device may be evaluated by other device performance characteristics, e.g., comparison to historical device drift data, calibration characteristics, response characteristics and short term drift characteristics. A device (RTD, relay, transmitter, process rack module, etc.), whose "as found" value is in excess of the calibration tolerance, but within the operability criteria (administratively controlled limit), is considered operable but must be recalibrated such that the "as left" value is within the two sided (*) calibration tolerance. Plant procedures set l administrative limits ("as left" and "as found" criteria) to control the determination of operability by setting minimum standards based on the methodology in WCAP-10991 and the uncertainty values included in the .

determination of the Nominal Trip Setpoint, and allow the use of other device characteristics to evaluate operability. REPORTABLE EVENTS are identified when the minimum number of channels required to be operable are not met. -

The methodology, as defined in WCAP-10991 to derive the Nominal Trip Setpoints, is based upon combining all of the uncertainties in the channels.

Inherent in the determination of the Nominal Trip Setpoints are the magnitudes of these channel uncertainties. Sensors and other instrumentation utilized in '

these channels should be capable of operating within the allowances of these uncertainty magnitudes. Occasional drift in excess of the allowance may be determined to be acceptable based on the other device performance ~

characteristics.

A-9

LIMITING SAFETY SYSTEM SETTINGS BASES 2.2.1 REACTOR TRIP SYSTEM INSTRUMENTATION SETPOINTS (Continued)

Device drift in excess of the allowance that is more than occasional, may be indicative of more serious problems and would warrant further investigation.

The various reactor trip circuits automatically open the reactor trip breakers whenever a condition monitored by the Reactor Trip System reaches a preset or calculated level. In addition to redundant channels and trains, the design approach provides a Reactor Trip System functional diversity. The functional capability at the specified trip setting is required for those anticipatory or diverse reactor trips for which no direct credit was assumed in the safety analysis to enhance the overall reliability of the Reactor Trip System. The Reactor Trip System initiates a turbine trip signal whenever reactor trip is initiated. This prevents the reactivity insertion that would otherwise result from excessive Reactor Coolant System cooldown and thus avoids unnecessary actuation of the Engineered Safety Features Actuation System.

. I I

l l

l l

l A-10

I INSTRUMENTATION 3/4.3.2 ENGINEERED SAFETY FEATURES ACTUATION SYSTEM INSTRUMENTATION LIMITING CONDITION FOR OPERATION 3.3.2 The Engineered Safety Features Actuation System (ESFAS) instrumentation channels and interlocks shown in Table 3.3-3 shall be OPERABLE and their Nominal Trip Setpoints set consistent with the values shown in the Nominal Trip Setpoint column of Table 3.3-4.

APPLICABILITY: As shown in Table 3.3-3.

ACTION: ,

a. With an ESFAS Instrumentation Channel or Interlock Channel Nominal Trip Setpoint inconsistent with the value shown in the Nominal Trip Setpoint column, adjust the Setpoint consistent with the Nominal Trip Setpoint value.
b. With an ESFAS Instrumentation Channel or Interlock Channel found to be inoperable declare the channel inoperable and apply the applicable ACTION statement requirements of Table 3.3-3 until the channel is -

restored to OPERABLE status and its Setpoint adjusted consistent with the Nominal Trip Setpoint value.

N t

A-ll

INSTRUMENTATION SURVEILLANCE REQUIREMENTS 4.3.2.1 Each ESFAS instrumentation channel and interlock and the automatic actuation logic and relays shall be demonstrated OPERABLE by the perfonnance of the ESFAS Instrumentation Surveillance Requirements specified in Table 4.3-2.

4.3.2.2 The ENGINEERED SAFETY FEATURES RESPONSE TIME

  • of each ESFAS function shall be demonstrated to be within the limit at least once per 18 months. Each test shall include at least one train such that both trains are tested at least once per 36 months and one channel (to include input relays to both trains) per function such that all channels are tested at least once per N times 18 months where N is the total number of redundant channels in a specific ESFAS function as shown in the " Total No. of Channels" column of Table 3.3-3.

l l

1 A-12 l

TABLE 3.3-4 ENGINEERED SAFETY FEATURES ACTUATION SYSTEM INSTRUMENTATION TRIP SETPOINTS Functional Unit Nominal Trio Setooint

1. Safety Injection (Reactor Trip, Feedwater Isolation, Control Building Isolation (Manual Initiation Only),StartDiesel Generators, and Service Water)
a. Manual Initiation N.A.
b. Automatic Actuation Logic N.A.
c. Containment Pressure - High-1 3.0 psig
d. Pressurizer Pressure - Low
1) Channels I and II 1877.3 psig ,
2) Channels III and IV 1877.3 psig
e. Steamline Pressure - Low 658.6 psig*
2. Containment Spray (CDA)
a. Manual Initiation N.A.
b. Automatic Actuation Logic N.A. .

and Actuation Relays

c. Containment Pressure - High-3 8.0 psig
3. Containment Isolation
a. Phase "A" Isolation
1) Manual Initiation N.A.
2) Automatic Actuation Logic N.A.

and Actuation Relays .

3) Safety Injection See Item 1 above for all Safety injection Trip Setpoints. .
b. Phase "B" Isolation
1) Manual Initiation N.A.
2) Automatic Actuation Logic N.A. -

and Actuation Relays

~

3) Containment Pressure - 8.0 psig High-3 i

A-13

TABLE 3.3-4 (Continued) l ENGINEERED SAFETY FEATURES ACTUATION SYSTEM INSTRUMENTATION TRIP SETPOINTS Functional Unit Nominal Trio setooint

4. Steam Line Isolation ,
a. Manual Initiation N.A.
b. Automatic Actuation Logic N.A.

and Actuation Relays {

c. Containment Pressure - High-2 3.0 psig -
d. Steamline Pressure - Low 658.6 psig*
e. Steam Line Pressure - 100 psi **

Negative Rate - High ,

5. . Turbine Trip and Feedwater Isolation
a. Automatic Actuation Logic N.A.

Actuation Relays

b. Steam Generator Water 80.45 percent of f Level--High-High (P-14) narrow range j

. instrument span r

c. Safety Injection Actuation See Item 1 above for all Logic Safety Injection Trip Setpoints.
d. Tavg Low Coincident with <

Reactor Trip (P-4)  !

1) Four Loops Operating 564*F l
2) Three Loops Operating 564*F-
6. Auxiliary Feedwater

. a. Manual Initiation N.A.

b. Automatic Actuation Logic N.A.
  • and Actuation Relays  ;
c. Steam Generator Water Level--Low-Low
1) Start Motor- 18.1 percent of Driven Pumps narrow range instrument span A-14

TABLE 3.3-4 (Continued)

ENGINEERED SAFETY FEATURES ACTUATION SYSTEM INSTRUMENTATION TRIP SETPOINTS Functional Unit Nominal Trio Setooint

6. Auxiliary Feedwater (continued) ,
2) Start Turbine- 18.1 percent of Driven Pumps narrow range instrument span
d. Safety lojection See Item 1 above for all Safety Injection Trip Setpoints.
e. Loss of Offsite Power 2800V Start Motor-Driven Pumps
f. Containment Depressurization See Item 2 above for all CDA Actuation (CDA) Start Trip Setpoints. ,

Motor-Driven Pumps

7. Control Building Isolation .
a. Manual Actuation N.A.
b. Manual Safety Injection Actuation N.A.
c. Automatic Actuation Logic N.A.

and Actuation Relays 4

d. Containment Pressure -- 3.0 psig High-1
e. Control Building Inlet 1.5 x 10~5,pci/cc Ventilation Radiation
8. Loss of Power
a. 4 kV Bus Undervoltage ***

(Loss of Voltage)

b. 4 kV Bus Undervoltage ***

(Grid Degraded Voltage)

9. Engineered Safety Features .

Actuation System Interlocks

a. Pressurizer Pressure, P-11 1985 psig -
b. Low-Low Tavg, P-12 553*F
c. Reactor Trip, P-4 N.A.
10. Emergency Generator Load Sequencer N.A.

'i l

1 A-15 o

TABLE 3.3-4 (Continued)

TABLE NOTATIONS e

Time constants utilized in the lead-lag controller for Steam Line Pressure-Low are r3 2 50 seconds and r, s 5 seconds. CHANNEL CALIBRATION shall ensure that these time constants are adjusted to these values.

    • ' The time constant utilized in the rate-lag controller for Steam Line Pressure - Negative Rate - High is less than or equal to 50 seconds.

CHANNEL CALIBRATION shall ensure that this time constant is adjusted to ,

this value.

      • To be provided by plant.

0 4

e a

i Y

A-16

~ -. - . - - . _ - . - -

5 3.4.3 INSTRUMENTATION ,

BASES t

3/4.3.1 and 3/4.3.2 REACTOR TRIP SYSTEM INSTRUMENTATION AND ENGINEERED SAFETY FEATURES ACTUATION SYSTEM INSTRUMENTATION ,

The OPERABILITY of the Reactor Trip System and the Engineered Safety Features i

Actuation System instrumentation and interlocks ensures that: (1) the.

associated action and/or Reactor trip will be initiated when the parameter monitored by each channel or combination thereof reaches its setpoint, (2) the specified coincidence logic is maintained, (3) sufficient redundancy is '

maintained to pennit a channel to be out of service for testing or maintenance, and,(4) sufficient system functional capability is available from i diverse parameters.

The OPERABILITY of these systems is required to provide the overall reliability, redundancy, and diversity assumed available in the facility design for the protection and mitigation of accident and transient-conditions. ,7 The. integrated operation of each of these systems is consistent with the assumptions used in the safety analyses. The Surveillance Requirements specified for these systems ensure that the overall system functional capability is maintained comparable to the original design standards. The periodic surveillance tests perfonned at the minimum frequencies are sufficient to demonstrate this capability. .

The Engineered Safety Features Actuation System Nominal Trip Setpoints -

specified in Table 3.3-4 are the nominal values at which the bistables are set

  • for each functional unit. The Nominal Trip Setpoints are considered the Limiting Safety System Settings as identified in 10CFR50.36 and have been selected to mitigate the consequences of accidents. A Setpoint is considered  :

to be consistent with the nominal value when the measured "as left" Setpoint is within the administrative 1y controlled (i) band identified as the i calibration tolerance.

Maintenance and Test Equipment accuracy is administrative 1y controlled by i plant procedures and is included in the plant uncertainty calculations as defined in WCAP-10991. Operability detenninations are based on the use of Maintenance and Test Equipment that conforms with the accuracy used in the plant uncertainty calculation. Maintenance and Test Equipment should be .

consistent with the requirements of ANSI / ISA 51.1-1979 or the most accurate  :

practicable. ,

The administrative 1y controlled limit for operability of a device is determined by device drift being less than the value required for the .

surveillance interval.. In the event the device exceeds the administrative 1y  ;

controlled limit, operability of the device may be evaluated by other device performance characteristics, e.g., comparison to historical device drift data, -:

calibration characteristics, response characteristics and short term drift ,

characteristics. A device (RTD, relay, transmitter, process rack module, i etc.), whose "as found" value is in excess of the calibration tolerance, but ,

within the operability criteria (administratively controlled limit), is considered operable but must be recalibrated such that the "as left" value is -

1 A-17 i

-:- . .- ~ ,-. ,., , _ ~ . - , .

l INSTRUMENTATION BASES

. 3/4.3.1 and 3/4.3.2 REACTOR TRIP SYSTEM INSTRUMENTATION AND ENGINEERED SAFETY

?

FEATURES ACTUATION SYSTEM INSTRUMENTATION (continued) within the two sided (*) calibration tolerance. Plant procedures set administrative limits ("as left" and "as found" criteria) to control the determination of operability by setting minimum standards based on the methodology in WCAP-10991 and the uncertainty values included in the determination of the Nominal Trip Setpoint, and allow the use of other device characteristics to evaluate operability. REPORTABLE EVENTS are identified when the minimum number of channels required to be operable are not met.

The methodology, as defined in WCAP-10991 to derive the Nominal Trip Setpoints, is based upon combining all of the uncertainties in the channels.

Inherent in the determination of the Nominal Trip Setpoints are the magnitudes of these channel uncertainties. Sensors and other instrumentation utilized in these channels should be capable of operating within the allowances of these uncertainty magnitudes. Occasional drift in excess of the allowance may be determined to be acceptable based on the other device perforrance characteristics. Device drift in excess of the allowance that is more than

, occasional, may be indicative of more serious problems and would warrant further investigation.

5 O

A-18

_ - - _ __ . ._