ML20087G376

Proposed Tech Specs,Incorporating Recommendations of GL 93-05 Re DGs SR Into Plant,Unit 3 TS

ML20087G376
Person / Time
Site:	Millstone
Issue date:	03/28/1995
From:	NORTHEAST NUCLEAR ENERGY CO.
To:
Shared Package
ML20087G374	List: B15168, Submits Suppl to Amend Request on 941209 Re TS SR for DG at Plant ML20087G376
References
GL-93-05, GL-93-5, NUDOCS 9504040190
Download: ML20087G376 (11)

Text

g'.'

c Docket No. 50-423 B15168 p

i Attachment 1 Millstone Nuclear Power Station, Unit No. 3 Proposed Revision to Technical Specifications Diesel Generator Surveillance Requirements ,

March 1995 950404o190 950328 PDR ADOCK 05000423 PDR p

3/4.8 ELECTRICAL POWER SYSTEMS I 3/4.8.1 A.C. SOURCES OPERATING LIMITING COMITION FOR OPERATION _

3.8.1.1 As a minimum, the following A.C. electrical power sources shall be OPERABLE:

a. Two physically independent circuits between the offsite transmission network and the onsite Class IE Distribution System, and I

b. Two separate and independent diesel generators, each with:

1) A separate day tank containing a minimum volume of 278 gallons i of fuel,

2) A separate Fuel Storage System containing a minimum volume of ,

32,760 gallons of fuel,

3) A separate fuel transfer pump,

4) Lubricating oil storage containing a minimum total volume of  ;

280 gallons of lubricating oil, and

5) Capability to transfer lubricating oil from storage to the diesel generator unit. ,

APPLICABILITY: N0 DES 1, 2, 3, and 4. l ACTION:

a. With one offsite circuit inoperable, demonstrate the OPERABILITY of the remaining A.C. source by performing Surveillance Requirement 4.8.1.1.1.a within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> and at least once per 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> thereafter.

Restore the offsite circuit to OPERABLE status within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and COLD SHUTDOWN  ;

within the following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />,

b. With one diesel generator inoperable, demonstrate the OPERABILITY of  !

the A.C. offsite sources by performing Surveillance Requirement 4.8.1.1.1.a within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> and at least once per 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> thereafter; demonstrate the OPERABILITY of the remaining OPERABLE diesel generator by performing Surveillance Requirement 4.8.1.1.2.a.5 within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> *; restore the diesel generator to OPERABLE status within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and in l COLD SHUTDOWN within the following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />.

• The OPERABILITY of the remaining diesel generator need not be verified if the diesel l

generator became inoperable due to

)

i' (1) Preplanned preventive maintenance or testing, (2) An inoperable support system with no potential common mode failure for the remaining diesel generator, or ,

(3) An independently testable component with no potential common mode failure for l the remaining diesel generator.

l l

NILLSTONE - UNIT 3 3/4 8-1 Amendment No. # , # ,

0292

ELECTRICAL POWER SYSTEMS

' LIMITING ColWITION FOR OPERATION ACTION (continued)

c. With one offsite circuit and one diesel generator inoperable, ,

demonstrate the OPERABILITY of the remaining offsite A.C. source by  :

performing Surveillance Requirement 4.8.1.1.1.a within one hour and at least once per 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> thereafter; demonstrate the OPERABILITY of the remaining OPERABLE diesel generator by performing Surveillance  :

Requirement 4.8.1.1.2.a.5 within 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> *; restore one of the inoperable sources to OPERABLE status within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> or be in'at' least HOT STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and in COLD SHUTDOWN ,

within the fo11owing 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />. Restore the other A.C. power source (offsite circuit or diesel generator) to OPERABLE status in accordance with the provisions of Section 3.8.1.1 Action Statement a or b, as appropriate with the time requirement of that Action .

Statement' based on the time of initial loss of the remaining ,

F inoperable A.C. power source. A successful test of diesel generator t OPERABILITY per Surveillance Requirement 4.8.1.1.2.a.5 performed i under this Action Statement for an 0PERABLE diesel generator or a i restored to OPERABLE diesel generator satisfies the diesel generator test requirement of Action Statement b. l

d. With one diesel generator inoperable, in addition to ACTION b or c above, verify that:

l

1. All required systems, subsystems, trains, components, and ,

devices that depend on the remaining OPERABLE diesel generator as a source of emergency power are also OPERABLE, and

2. When in MODE 1, 2, or 3, the steam-driven auxiliary feedwater pump is OPERABLE. '

i If these conditions are not satisfied within 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br />, be in at least. l HOT STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />,

e. With two of the required offsite A.C. circuits inoperable, restore one of the inoperable offsite sources to OPERABLE status within 24 ,

hours or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />.

Following restoration of one offsite source, follow Action Statement a with the time requirement of that Action Statement based on the time of initial loss of the remaining inoperable offsite A.C.

circuit.

• The OPERABILITY of the remaining diesel generator need not be verified if the diesel generator became inoperable due to:

(1) Preplanned preventive maintenance or testing, (2) An inoperable support system with no potential common mode failure for the remaining diesel generator, or {

(3) An independently testable component with no potential common mode failure for 1 the remaining diesel generator. J l

Amendment No. JJ,  ;

N.ILLSTONE n - UNIT 3 3/4 8-2 1 l

'1

., ~. . - . . ..- - - , .. --

v 1 .,

ELECTRICAL POWER SYSTEMS

. LIMITING CONDITION FOR OPERATION J

.i ACTION fcontinuedi

f. With two of the above required diesel generators inoperable, demon- i

- strate the OPERABILITY of two offsite A.C. circuits by performing l Surveillance Requirement 4.8.1.1.1.a within one hour and at least i once per 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> thereafter restore one of the inoperable diesel l generators to OPERABLE status within 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> or be in at least H0T '

STAE8Y within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />. Following restoration of one diesel generator unit, follow Action Statement b with the time requirement of that 4 Action. Statement based on the time of initial-loss of the remaining inoperable diesel generator. A successful test of diesel generator OPERABILITY per Surveillance Requirement 4.8.1.1.2.a.5 performed ,

under this Action Statement for.a restored to OPERABLE diesel generator satisfies the diesel generator test requirement of Action a Statement b.

SURVEILLANCE REQUIREMENTS f 4.8.1.1.1 Each of the above required independent circuits between the offsite j transmission networX and the Onsite Class IE Distribution System shall be.

a. Determined 0PERABLE at least once per 7 days by verifying correct  !

breaker alignments, indicated power availability, and' s

b. Demonstrated 0PERABLE at least once per 18 months during shutdown by transferring (manually and automatically) unit power supply from the '

normal circuit to the alternate circuit.

4.8.1.1.2 Each diesel generator shall be demonstrated 0PERABLE:* l

a. In accordance with the frequency specified in Table 4.8-1 on a i STAGGERED TEST BASIS by: ,

1 Verifying the fuel level in the day tank, 2 Verifying the fuel level in the fuel storage tank, 3 Verifying the fuel transfer pump starts and transfers fuel from the storage system to the day tank, *

4) Verifying the lubricating oil inventory in storage,

5) Verifying the diesel starts from standby conditions and achieves generator voltage and frequency at 4160 2 420 volts and 60 1 0.8 Hz. The diesel generator shall be started for this test by using one of the following signals: .

a) Manual, or I

• All planned starts for the purpose of these surveillances may be preceded by an engine prelube period.

MILLSTONE - UNIT 3 3/4 8-3 Amendment No. JP, M. i 0292 l

1 - _ _ _ -

i ELECTRICAL POWER SYSTEMS ,

.5URVEILLANCE REQUIRENENTS (Continued) {

b) Simulated loss-of-offsite power. by itself, or c) Simulated loss-of-offsite power in conjunction with an ESF i Actuation test. signal, or  :

d) An ESF Actuation test signal by itself. .

6) Verifying the generator is synchronized and gradually loaded in accordance with the manufacturer's recommendations to greater ,

than or equal to 4986 kW and operates with a load greater than or equal to 4986 kW for at least 60 minutes, and  :

7) Verifying the diesel generator is aligned to provide standby  :

power to the associated emergency busses.

b. At least once per 184 days, verify that the diesel generator starts and attains generator voltage and frequency of 4160 i420 volts and 60 0.8 Hz within 11 seconds after the start signal. The generator shall be synchronized to the associated emergency bus, loaded to greater than ,

or equal to 4986 kW in accordance with the manufacturer's recommendations, and operate with a load greater than or equal to 4986 kW'for at least 60 minutes. - The diesel generator shall be started for this. test using one of the signals in Surveillance Requirement-4.8.1.1.2.a.5. This test, if it is performed so it coincides with the testing required by surveillance Requirement 4.8.1.1.2.a.5, may also serve to concurrently meet those requirements as well. ,

i

c. At least once per 31 days and after each operation of the diesel where the period of operation was greater than or equal to I hour by checking for and removing accumulated water from the day tanks '

d. At least once per 31 days by checking for and removing accumulated water from the fuel oil storage tanks;

e. By sampling new fuel oil in accordance with ASTN-D4057 prior to .

addition to storage tanks and:

l 1) By verifying in accordance with the tests specified in ASTM-L D975-81 prior to addition to the storage tanks that the sample L

has:

a) An API Gravity of within 0.3 degrees at 60*F, or a specific gravity of within 0.0016 at 60/60*F, when ,

compared to the supplier's certificate, or an absolute specific gravity at 60/60*F of greater than or equal to 0.83 but less than or equal to 0.89, or an API. gravity of greater than or equal to 27 degrees but less than or equal to 39 degrees; l

Mll.LSTONE - UNIT 3 3/4 8-4 Amendment No. J. JJ, on:

~ , , - -

r ~k ,

.: ELECTRICAL POWER SYSTEMS e

~ SURVEILLANCE REQUIRENENTS (Continued) {

i b) A' kinematic viscosity at 40*C of greater than or equal to  :

1.9 centistokes, but less than or equal.to 4.1 centistokes  !

(alternatively, Saybolt viscosity, SUS at 100*F; of greater ,

than or equal to 32.6, but not less than or equal to 40.1). if gravity was not determined by comparison with  !

the supplier's certification; o c) A flash point equal to or greater than 125*F; and

]

d) A clear and-bright appearance with proper. color when ->

tested in accordance with ASTM-D4176-82. i

2) By verifying within 30 days of obtaining the sample that the other properties specified in Table 1 of ASTM-D975-81 are met -

when tested in accordance with ASTM-D975-81 except that the .

analysis for sulfur may be performed in accordance with ASTM- l D1552-79, ASTM-D2622-82 or ASTM-D4294-83. ,

f. At least once every 31 days by obtaining a sample of fuel oil in accordance with ASTM-D2276-78, and verifying.that total particulate contamination is less than 10 mg/ liter when checked in accordance ,

with ASTM-D2276-78, Method A;

~

g. At least.once per.18 months, during shutdown, by:

1) Subjecting the diesel to an inspection in accordance with  :

procedures prepared in conjunction with its manufacturer's recommendations for this class of standby service; Verifying the generator capability to reject a load of greater -

~

2) )

than or equal to 595 kW while maintaining voltage-at 4160 420 ,

volts and frequency at 60 1 3 Hz, t

3) Verifying the generator capability to reject a load of 4986 kW without tripping. The generator' voltage shall not exceed 4784 volts during and following the load rejection; -

4) Simulating a loss-of-offsite power by itself, and:

a) Verifying deenergization of the emergency busses and load shedding from the emergency busses, and-b) Verifying the diesel starts from standby conditions on the auto-start signal,_ energizes the emergency busses with permanently connected loads within 11 seconds, energizes the auto-connected shutdown loads through the load sequencer and operates for greater than or equal to 5 l minutes while its generator is loaded with the shutdown i loads. After energization, the steady-state voltage and frequency of the emergency busses shall be maintained at l 4160 1 420 volts and 60 0.8 Hz during this test. j MILLSTONE - UNIT 3 3/4 8-5 Amendment No. J. # , M , 77. J M om

u; ,

i L. ELECTRICAL POWER SYSTEMS

' SURVEILLANCE REQUIRENENTS (Continued)

5) Verifying that on.an ESF Actuation test signal, 'without loss- of-- 4 offsite power, the diesel generator sta'rts from standby .

conditions on the auto-start- signal and operates on standby for l greater than or equal to_5 minutes. The generator voltage and  ;

frequency shall be 4160 1 420 volts and'60 0.8 Hz'within 11'  ;

seconds after the auto-start signal; the steady-state generator voltage and frequency shall be maintained within these limits .

during this test; 1

6) Simulating a loss-of-offsite power in conjunction with an ESF:

Actuation test signal, and:

a) Verifying deenergization of the emergency busses and load shedding from the emergency busses; b) Verifying the diesel starts from standby conditions on the. l auto-start signal, energizes the emergency busses with permanently connected loads within 11 seconds, energizes the auto-connected emergency (accident) loads through the load sequencer and operates for greater than or equal to 5-minutes while its generator is loaded with the. emergency -

loads. After energization, the' steady-state. voltage and frequency of the emergency busses shall be maintained at 4160 1 420 volts and 60 1 0.8 Hz during this test; and ,

c) Verifying that all automatic diesel generator trips, except '

engine overspeed, lube oil pressure low (2 of 3 logic) and generator differential, are automatically bypassed upon ,

loss of voltage on the emergency bus concurrent with a Safety Injection Actuation signal.  !

7) Verifying the diesel generator operates for at least 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

During the first 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> of this test, the diesel generator shall i be loaded to greater than or equal to 5485 kW and during the .

remaining 22 hours2.546296e-4 days <br />0.00611 hours <br />3.637566e-5 weeks <br />8.371e-6 months <br /> of this test, the diesel generator shall be loaded to greater than or equal to 4986 kW. The generator voltage and frequency shall be 4160 1 420 volts and 6010.8 Hz within 11 seconds after the start signal; the. steady-state generator voltage and frequency shall be maintained within these limits during this test ~.* Within 5 minutes after completing this 24-hour test, perform Specification 4.8.1.1.2.a.5);** ,

• Diesel generator loadings may include gr jual loading as recommended by the manufacturer.

• • If Surveillance Requirement 4.8.1.1.2.a.5) is not satisfactorily completed, it is l not necessary to repeat the preceding 24-hour test. Instead, the diesel generator 7 may be operated at 4986 kW for 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> or until operating temperature has l stabilized.  :

NILLSTONE - UNIT 3 3/48-6 Amendment No. JP, JJ, un  ;

. . - ~ . - . ~ - . . . -. . . -.

,.8 .t ELECTRICAL POWER SYSTEMS .j g y SUR'VEILLANCE REQUIREMENTS-(Continued) f

8) Verifying that- the auto-connected loads to each diesel >

generator do not exceed the 2000-hour rating of 5335 kW;  :

9). Verifying th'a diesel generator's capability t'o: r a) Synchronize with the offsite power source while'the >

generator is. loaded.with its emergency loads upon a simulated restoration of offsite power,  ;

l b)' Transfer its loads to the offsite power source, and .!

c) Be restored to its standby status.

10) Verifying that with the diesel generator operating in a test mode, connected to its bus, a simulated Safety Injection signal ,

overrides the test mode by: (1) returning the diesel generator '

to standby operation, and (2). automatically energizing the emergency loads with offsite power; t

11) Verifying that the fue1 ~ transfer pump transfers fuel from each -  ;

fuel storage tank to the day tank of each diesel via'the installed cross-connection lines;

, 12) Verifying that the automatic load sequence timer is OPERABLE.  !

with the interval between each load block within i 10% of its design interval; and

13) Verifying that the following diesel generator lockout features-prevent diesel generator starting:~

a) Engine overspeed, i b) Lube oil pressure low (2 of 3 logic),

c) Generator differential, and ,

d) Emergency stop.

2

h. At least once per 10 years or after any modifications which could '

affect diesel generator interdependence by starting both diesel '

generators simultaneously, during shutdown, and verifying that both diesel generators achieve generator voltage and frequency at ,

4160 i 420 volts and 6010.8 Hz in less than or equal to 11 seconds; and

i. At least once per 10 years by:

1

1) Draining each fuel oil storage tank, removing the accumulated l sediment and cleaning the tank using a sodium hypochlorite  :

solution, and j MILLSTONE - UNIT 3 3/4 8-7 Amendment No. S , 77, J M ,

ones

3/4.8 ELECTRICAL POWER SYSTEMS l

~ BASES I l

3/4.8.1. 3/4.8.2. and 3/4.8.3 A.C. SOURCES. D.C. SOURCES. and ONSITE POWER I DISTRIBUTION The OPERABILITY of the A.C. and D.C. power sources and associated distribu-tion systems during operation ensures that sufficient power will be available to supply the safety-related equipment required for: (1) the safe shutdown of the facility, and (2) the mitigation and control of accident conditions within the facility.. The minimum specified independent and redundant A.C. and D.C.

power sources and distribution systems satisfy the requirements of General Design .

Criterion 17 of Appendix A to 10 CFR Part 50. i The ACTION requirements specified for the levels of degradation of the '

power sources provide restriction upon continued facility operation commensurate with the level of degradation. The OPERABILITY of the power sources are consistent with the initial condition assumptions of the safety analyses and  ;

are based upon maintaining at least one redundant set of onsite A.C. and D.C.

power sources and associated distribution systems OPERABLE during accident conditions coincident with an assumed loss-of-offsite power and single failure of the other onsite A.C. source. The A.C. and D.C. source allowable out-of-service times are based on Regulatory Guide 1.93, " Availability of Electrical Power Sources," December 1974. When one diesel generator is inoperable, there ,

is an additional ACTION requirement to verify that all required systems, subsystems, trains, components and devices, that depend on the remaining OPERABLE diesel generator as a source of emergency power, are also OPERABLE, r and that the steam-driven auxiliary feedwater pump is OPERABLE. This require-ment is intended to provide assurance that a loss-of-offsite power event will not result in a complete loss of safety function of critical systems during the period one of the diesel generators is inoperable. The term, verify, as used in this context means to administrative 1y check by examining logs or other information to determine if certain components are out-of-service for maintenance or other reasons. It does not mean to perform the Surveillance Requirements needed to demonstrate the OPERABILITY of the component.

Action Statement 'b' Required Action Statement 'b' provides an allowance to avoid unnecessary testing of the other operable diesel generator. If it can be determined that the cause of the inoperable diesel generator does not exist on the OPERABLE diesel generator, Surveillance Requirement 4.8.1.1.2.a.5 does not have to be performed.

If the cause of inoperability exists on the other OPERABLE diesel generator, the other OPERABLE diesel generator would be declared inoperable upon discovery and ACTION Statement 'f' would be entered and appropriate actions will be completed per ACTION Statement 'f'. Once the failure is repaired, the common cause failure no longer exists, and the required ACTION 'b' will be satisfied. If the cause of the initial inoperable diesel generator can not be confirmed not to exist on the remaining diesel generator, performance of Surveillance Requirement 4.8.1.1.2.a.5 (within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> of entering' ACTION Statement 'b') suffices to provide assurance of continued OPERABILITY of the other diesel generator.

In the event the inoperable diesel generator is restored to OPERABLE status prior to determination of the cause of the inoperability of the diesel NILLSTONE - UNIT 3 8 3/4 8-1 Amendment No.

0346

l 1

3/4.8 ELECTRICAL POWER SYSTEMS

' BASES generator, NNEC0 will continue to evaluate the common cause possibility. This continued evaluation, however, is no longer under the 24 hour2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> constraint imposed while in ACTION Statement 'b'.

According to Generic Letter 84-15, 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> is reasonable to confirm that the l OPERABLE diesel generator is not affected by the same problem as the inoperable diesel generator.

Action Statement 'c' Required ACTION Statement 'c' provides an allowance to avoid unnecessary testing of the other OPERABLE diesel generator. If it can be determined that the cause of the inoperable diesel generator does not exist on the operable diesel generator, Surveillance Requirement 4.8.1.1.2.a.5 does not have to be performed. If the cause of inoperability exists on the other OPERABLE diesel generator, the other OPERABLE diesel generator would be declared inoperable upon discovery and ACTION Statement 'f' would be entered and appropriate actions will be completed per ACTION Statement 'f'. Once the failure is repaired, the common cause failure no longer exists, and the required ACTION

'c' will be satisfied. If the cause of the initial inoperable diesel generator can not be confirmed not to exist on the remaining diesel generator, performance of Surveillance Requirement 4.8.1.1.2.a.5 (within 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> of entering ACTION Statement 'c') suffices to provide assurance of continued OPERABILITY of the other diesel generator.

In the event, the inoperable diesel generator is restored to operable status prior to determination of the cause of the inoperability of the diesel generator, NNEC0 will continue to evaluate the common cause possibility. This continued evaluation, however, is no longer under eight hours constraint imposed while in ACTION Statement 'c'.

The OPERABILITY of the minimum specified A.C. and D.C. power sources and associated distribution systems during shutdown and refueling ensures that:

(1) the facility can be maintained in the shutdown or refueling condition for extended time periods, and (2) sufficient instrumentation and control capa-bility is available for monitoring and maintaining the unit status.

The Surveillance Requirements for demonstrating the OPERABILITY of the diesel generators are in accordance with the recommendations of Regulatory Guides 1.9, " Selection of Diesel Generator Set Capacity for Standby Power Supplies," March 10,1971; 1.108, " Periodic Testing of Diesel Generator Units

! Used as Onsite Electric Power Systems at Nuclear Power Plants," Revision 1, August 1977; and 1.137, " Fuel-011 Systems for Standby Diesel Generators,"

Revision 1, October 1979.

MILLSTONE - UNIT 3 8 3/4 8-la Amendment No.

0346

N 3/4.8 ELECTRICAL POWER SYSTEMS I v

BASES 3/4.8.1. 3/4.8.2. and 3/4.8.3 A.C. SOURCES. D.C. SOURCES. and ONSITE POWER DISTRIBUTION Technical Specifications 3.8.1.1.b.1 and 3.8.1.2.b.1 require a minimum volume  ;

of 278 gallons be contained in each of the diesel generator day tanks. This  !

capacity ensures that a minimum usable volume of 189 gallons is available to permit operation of each of the diesel generators' for approximately 27 minutes with the diesel generators loaded to the 2,000 hour0 days <br />0 hours <br />0 weeks <br />0 months <br /> rating of 5335 kW.- The shutoff level for the (two) fuel oil transfer pumps is 493 gallons (413 gallons usable volume) which corresponds to approximately 60 minutes of engine operation at the 2,000 hour0 days <br />0 hours <br />0 weeks <br />0 months <br /> rating. The first pump has a make-up setpoint of 372 gallons (284 gallons usable volume) which corresponds to approximately 42 minutes of operation at the 2,000 hour0 days <br />0 hours <br />0 weeks <br />0 months <br /> rating. The 278 gallon day tank low level value corresponds to the auto make-up setpoint of the second pump and is therefore the lowest value of fuel oil with auto make-up capability. Loss of the two redundant pumps would cause day tank level to drop below the minimum value.

Technical Specifications 3.8.1.1.b.2 and 3.8.1.2.b.2 require a minimum volume of 32,760 gallons be contained in each of the diesel generator's fuel storage systems. This capacity ensures that a minimum usable volume (29,180 gallons) is available to permit operation of each of the diesel generators for approximately three days with the diesel generators loaded to the 2,000 hour0 days <br />0 hours <br />0 weeks <br />0 months <br />  ;

rating of 5335 kW. The ability to cross-tie the diesel generator fuel oil supply tanks ensures that one diesel generator may operate up to approximately six days. Additional fuel oil can be supplied to the site within twenty-four hours after contacting a fuel oil supplier.

I b

l l

r MILLSTONE - UNIT 3 ODW B 3/4 8-lb Amendment No. J/

r

- -- --