Text

Proposed Tech Specs,Allowing Single Outage of Up to 14 Days for Each EDG Once Every 18 Months
	ML20092A248
Person / Time
Site:	North Anna
Issue date:	09/01/1995
From:	; VIRGINIA POWER (VIRGINIA ELECTRIC & POWER CO.)
To:	;
Shared Package
ML20092A247	List: ML20092A242; ML20092A248; ML20092A261;
References
	NUDOCS 9509080281
	Download: ML20092A248 (34)
	v • d • e

1.0 DEFINITIONS (Continued)

ENGINEERED SAFFTY FEATURE RESPONSE TIME 1.12 The ENGINEERED SAFETY FEATURE RESPONSE TIME shall be that time interval from when the monitored parameter exceeds its ESF actuation setpoint at the channel sensor until the ESF equipment is capable of performing its safety function (i.e., the valves travel to their required positions, pump discharge pressures reach their required values, etc.). Times shall include emergency diesel generator starting and sequence loading delays where applicable.

l FREOUENCY NOTATION 1.13 The FREQUENCY NOTATION specified for the performance of Surveillance Requirements shall correspond to the intervals defined in Table 1.2.

FULLY WITHDRAWN 1.13a The control bank FULLY WITilDRAWN position shall be within the interval of 225 to 229 steps withdrawn, inclusive. Definition of the FULLY WITilDRAWN position for each specific cycle shall be documented in the rod insertion limit operator curve.

GASEOUS R ADWASTE TREATMENT SYSTEM 1.14 A GASEOUS RADWASTE TREATMENT SYSTEM is the system designed and installed to reduce radioactive gaseous effluents by collecting primary coolant system offgases from the primary system and providing for delay or holdup for the purpose of reducing the total radioactivity prior to release to the environment. The system is composed of the waste gas decay tanks, regenerative heat exchanger, waste gas charcoal filters, process vent blowers, waste gas surge tanks and waste gas diaphragm compressor.

IDENTIFIED LEAKAGE 1.15 IDENTIFIED LEAKAGE shall be:

Leakage (except CONTROLLED LEAKAGE) into closed systems, such as pump a.

seal or valve packing leaks that are captured and conducted to a sump or collecting tank, or b.

Leakage into the containment atmosphere from sources that are both specifically located and known either not to interfere with the operation of leakage detection systems or not to be PRESSURE BOUNDARY LEAK AGE, or c.

Reactor coolant system leakage through a steam generator to the secondary system.

MEMBER (S) OF Tile PUBLIC i

1.16 MEMBER (S) OF Tile PUBLIC shall include all individuals who by virtue of their 4

occupational status have no formal association with the plant. This category shall include non-employees of the licensee who are permitted to use portions of the site for recreational, occupational, or other purposes not associated with plant functions. This category shall not include non-employees such as vending machine servicemen or postmen who, as part of their formaljob function, occasionally enter an area that is controlled by the licensee for purposes of protection of individuals from exposure to radiation and radioactive materials.

NORTil ANNA - UNIT I l-3 Amendment No. 46,19,116. !N, 9509080281 950901 PDR ADOCK 05000338

.P.

PDR

. ~-..-

3/_43 ELECTRICAL POWER SYSTEMS 4

3/4,8,1 A.C. SOURCES OPERATING I

LIMITING CONDITION FOR OPERATION 3.8.1.1 As a minimum, the following A.C. electrical power sources shall be OPERABLE:

3 i

Two physically independent circuits between the offsite transmission network and l

a.

the onsite Class IE distribution system, and b.

Two separate and independent emergency diesel generators (EDGs):

l

1. Each with a separate day tank containing a minimum of 750 gallons of fuel, and

2. A fuel storage system consisting of two underground storage tanks each containing a minimum of 45,000 gallons of fuel (This is a shared system with Unit 2), and

3. A separate fuel transfer system.

APPLICABILITY:

MODES 1,2,3 and 4 ACTION:

With one offsite circuit of 3.8.1.1.a inoperable, demonstrate the OPERABILITY j

a.

of the remaining A.C. sources by performing Surveillance Requirement 4.8.1.1.1.a within I hour and at least once per 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months thereafter. Restore the offsite circuit to OPERABLE status within 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and COLD SilUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months .

b.

With one EDG of 3.8.1.1.b inoperable, demonstrate the OPERABILITY of the offsite A.C. power sources by performing Surveillance Requirement 4.8.1.1.1.a within I hour and at least once per 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months thereafter. If the EDG is inoperable due to any cause other than an inoperable support system, an independently testable component, or preplanned preventive maintenance or testing, demonstrate the OPERABILITY of the remaining OPERABLE EDG by performing Surveillance Requirement 4.8.1.1.2.a.4 within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months *, unless the absence of any potential common mode failure for the remaining EDG is demonstrated. In addition, l.

Restore the EDG to OPERABLE status within 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months or be in at least 110T STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months , or l

)

1 1

I This action is required to be completed regardless of when the inoperable EDG is restored to OPERABILITY.

NORTil ANNA - UNIT 1 3/4 8-1 Amendment No. 83,!28,184,

ELECTRICAL POWER SYSTEMS LIMITING CONDITION FOR OPERATION ACTION: (Continued) 2.

If the EDG is inoperable for the performance of Surveillance Requirement 4.8.1.1.2.f, restore the EDG to OPERABLE status within 14 days or be in at least IIOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SliUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months . This action can only be applied once every 18 months for each EDG, and Within 14 days prior to declaring an EDG inoperable for the performance of Surveillance Requirement 4.8.1.1.2.f, demonstrate that the AAC DG is OPERABLE, and if the AAC DG becomes inoperable during the performance of Surveillance Requirement 4.8.1.1.2.f, restore the AAC DG to OPERABLE status within 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months or be in at least IIOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD S11UTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months , and If either of the opposite unit's EDGs become inoperable during the performance of Surveillance Requirement 4.8.1.1.2.f, restore the opposite unit's EDGs to OPERABLE status within 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months or place this unit in at least IIOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SilUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months , and The provisions of Specification 3.0.4 are not applicable.

With one offsite circuit and one EDG inoperable, demonstrate the OPERABILITY c.

of the remaining A.C. sources by performing Surveillance Requirement 4.8.1.1.1.a within one hour and at least once per 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months thereafter; and if the EDG became inoperable due to any cause other than an inoperable support system, an independently testable component, or preplanned preventative maintenance or testing, demonstrate the OPERABILITY of the remaining OPERABLE EDG by performing Surveillance Requirement 4.8.1.1.2.a.4 within 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months *, unless the absence of any potential common mode failure for the remaining EDG is l

demonstrated. Restore one of the inoperable sources to OPERABLE status within 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months or be in at least IIOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SilUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months . Restore the other A.C. power source (offsite circuit or EDG) to OPERABLE status in accordance with the provisions of l

Section 3.8.1.1 Action Statement a or b, as appropriate with the time requirement of that Action Statement based on the time ofinitial loss of the remaining inoperable A.C. power source.

d.

With two of the required offsite A.C. circuits inoperable, restore one of the inoperable offsite sources to OPERABLE status within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months or be in at least ilOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months . Following restoration of one offsite source, follow Action Statement a with the time requirement of that Action Statement based on the time of initial loss of the remaining inoperable offsite A.C.

circuit.

This action is required to be completed regardless of when the inoperable EDG is restored to OPERABILITY.

NORTil ANNA - UNIT I 3/4 8-2 Amendment No. W484,

i ELECTRICAL POWER SYSTEMS LIMITING CONDITION FOR OPERATION i

ACTION: (Continuedl;.

With two of the above required EDGs inoperable, demonstrate the OPERABILITY e.

4 of two offsite A.C. circuits by performing Surveillance Requirement 4.8.1.1.1.a 4

within one hour and at least once per 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months thereafter; restore one of the inoperable EDGs to OPERABLE status within 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months . Following restoration of one EDG, follow Action Statement b l

with the time requirement of that Action Statement based on the time ofinitial loss

[

]

of the remaining inoperable EDG.

j f.

With one underground fuel oil storage tank of 3.8.1.1.b.2 inoperable for the i

performance of Surveillance Requirement 4.8.1.1.4 or for tank repairs:

1. Verify 45,000 gallons of fuel is available in the operable underground fuel oil storage tank at least once per 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months , 1

2. Verify a minimum of 100,000 gallons of fuel is maintained in the above ground j

main fuel oil storage tank at least once per 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months ,

3. Verify an available source of fuel oil and transportation to supply 50,000 gallons of fuel in less than a 48 hour5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months period, and

4. Restore the storage tank to OPERABLE status within 7 days or place both Units l

in at least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and COLD SHUTDOWN j

within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months .

4 i

j i

1 5

i 1

NORTil ANNA - UNIT I 3/4 8-2a Amendment No. 428, i

l i

1 l

ELECTRICAL POWER SYSTEMS SURVEILLANCE REQUIREMENTS j

l 4.8.1.1.1 Each of the above required physically independent circuits between the offsite transmission network and the onsite Class iE distribution system shall be.

l Determined OPERABLE at least once per 7 days by verifying correct breaker i

a.

alignment indicating power availability.

j b.

Demonstrated OPERABLE at least once per 18 months during shutdown by l

manually transferring the onsite Class lE power supply from the normal circuit to f

]

the alternate circuit.

4.8.1.1.2 Each emergency diesel generator (EDG) shall be demonstrated OPERABLE:

l l

i a.

In accordance with the frequency specified in Table 4.8.2 on a STAGGERED i

TEST BASIS by:

l l

1. Verifying the fuel level in the day tank.

Verifying the fuel level in the fuel storage tank.

j

3. Verifying the fuel transfer pump can be started and transfers fuel from the l

l storage system to the day tank.

a t

4. Verifying the EDO can start ** and gradually accelerate to synchronous speed l

1 (900 rpm) with generator voltage and frequency at 4160 420 volts and 60 q

1.2 liz. Subsequently, verifying the generator is synchronized, gradually j

loaded ** to an indicated 2500-2600 kw*** and operates for a least 60 minutes.

l

5. Verifying the EDG is aligned to provide standby power to the associated

[

j emergency busses.

l l

b.

At least once per 92 days by verifying that a sample of diesel fuel from the fuel f

j' storage tank is within the acceptable limits specified in Table 1 of ASTM D975-74 l

w hen checked for viscosity, water and sediment.

f i

l i

5 This test shall be conducted in accordance with the manufacturer's recommendations regarding engine prelube and warmup procedures, and as applicable regarding loading recommendations.

]

- - This band is meant as guidance to avoid routine overloading of the engine. Loads in excess l

of this band for special testing under direct monitoring of the manufacturer or momentary 1

variations due to changing bus loads shall not invalidate the test.

i NORTil ANNA - UNIT 1 3/4 8-3 Amendment No. U,

ELECTRICAL POWER SYSTEMS SURVEILLANCE REQUIREMENTS 4.8.1.1.2 (Continued) c.

At least once per 184 days, the EDG shall be started ** and accelerated to at least l

900 rpm in less than or equal to 10 seconds. The generator voltage and frequency shall be 4160 420 volts and 60 1.2 Hz within 10 seconds after the start signal.

The EDG shall be manually synchronized to its appropriate emergency bus, l

gradually loaded ** to an indicated 2500 to 2600 kw* **, and operated for at least 60 minutes. The EDG shall be started for this test by using one of the following j

signals on a rotating test basis:

a)

Simulated loss of offsite power by itself.

b)

Simulated loss of offsite power in conjunction with an ESF actuation test signal.

c)

An ESF actuation test signal by itself.

This test, if it is performed so it coincides with the testing required by Surveillance Requirement 4.8.1.1.2.a.4, may also serve to concurrently meet those requirements as well.

d.

At least once per 18 months during shutdown by:

1.

Verifying that, on rejection of a load of greater than or equal to 610 kw, the l

voltage and frequency are maintained with 4160 420 volts and 60 1.2 H z.

2.

Verifying that the load sequencing timers are OPERABLE with times l

within the tolerances shown in Table 4.8-l.

This test shall be conducted in accordance with the manufacturer's recommendations regarding engine prelube and warmup procedures, and as applicable regarding loading recommendations.

- - This band is meant as guidance to avoid routine overloading of the engine. Loads in excess of this band for special testing under direct monitoring of the manufacturer or momentary variations due to changing bus loads shall not invalidate the test.

NORTH ANNA - UNIT 1 3/4 8-3a Amendment No. 8h484, i

ELECTRICAL POWER SYSTEMS SURVEILLANCE REQUIREMENTS 4.8.1.1.2 (Continued) 3.

Simulating a loss of offsite power by itself, and:

l Verifying de-energization of the emergency busses and load shedding a.

from the emergency busses.

b. Verifying the EDG starts ** on the auto-start signal, energizes the l

emergency busses with' permanently connected loads within 10 seconds, energizes the auto-connected shutdown loads through the sequencing timers and operates for greater than or equal to 5 minutes while its generator is loaded with the shutdown loads. After energization of these loads, the steady state voltage and frequency shall be maintained at 4160 1420 volts and 60i 1.2 Hz.

4.

Verifying that on an ESF actuation test signal (without loss of offsite power) the EDG starts *

on the auto-start signal and operates on standby for greater than or equal to 5 minutes.

5.

Simulating a loss of offsite power in conjunction with an ESF actuation test l

signal, and a.

Verifying de-energization of the emergency busses and load shedding from the emergency busses.

b. Verifying the EDO starts ** on the auto-start signal, energizes the l

emergency busses with permanently connected loads within 10 seconds, energizes the auto-connected emergency (accident) loads through the sequencing timers and operates for greater than or equal to 5 minutes and maintains the steady state voltage and frequency at 4160 i420 volts and 60 i 1.2 liz.

c.

Verifying that all EDG trips, except engine overspeed, generator l

differential and breaker overcurrent are automatically bypassed upon loss of voltage on the emergency bus and/or a safety injection actuation signal.

6.

Verifying the EDG operates ** for at least 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months . During the first 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months of this test, the EDG shall be loaded to an indicated target value of 2950 kw (between 2900-3000 kw)* ** and during the remaining 22 hours2.546296e-4 days 0.00611 hours 3.637566e-5 weeks 8.371e-6 months of this test, the EDG shall be loaded to an indicated 2500-2600 kw***.

This test shall be conducted in accordance with the manufacturer's recommendations regarding engine prelube and warmup procedures, and as applicable regarding loading recommendations.

This band is meant as guidance to avoid routine overloading of the engine. Loads in excess of this band for special testing under direct monitoring of the manufacturer or momentary variations due to changing bus loads shall not invalidate the test.

1 NORTil ANNA - UNIT I 3/4 8 3b Amendment No. 83,

)

ELECTRICAL POWER SYSTEMS SURVEILLANCE REQUIREMENTS 4.8.1.1.2 (Continued) 7.

Verifying that the auto-connected loads to each EDG do not exceed the l

2000 hour0.0231 days 0.556 hours 0.00331 weeks 7.61e-4 months rating of 3000 kw.

8.

Verifying the EDG's capability to:

a) Synchronize with the offsite power source while the EDG is loaded with its emergency loads upon a simulated restoration of offsite power, b) Transfer its loads to the offsite power source, and c) Proceed through its shutdown sequence.

9.

Verifying that the following EDG lockout features prevent EDG starting l

only when required:

a) Remote Local Selection Switch b) Emergency Stop Switch 10.

Verifying the EDG's hot restart capability by:

a) Operating the EDG** loaded to an indicated 2500 to 2600 kw*** for 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months or until operating temperatures have stabilized, and b) Within 5 minutes of shutdown verify the EDG can be started ** and l

accelerated to at least 900 rpm in less than or equal to 10 seconds. The generator voltage and frequency shall be 41601420 volts and 60 i 1.2 Hz within 10 seconds after the start signal.

At least once per 10 years or after any modifications which could affect EDG e.

interdependence by starting ** both EDGs simultaneously, during shutdown, and verifying that both EDGs accelerate to at least 900 rpm in less than or equal to 10 seconds.

f.

Once per 18 months during any mode of operation, by subjecting each EDG to a preventive maintenance inspection in accordance with maintenance procedures appropriate for diesels used for this class of standby service.

This test shall be conducted in accordance with the manufacturer's recommendations regarding engine prelube and warmup procedures. and as applicable regarding loading recommendations.

- - This band is meant as guidance to avoid routine overloading of the engine. Loads in excess of this band for special testing under direct monitoring of the manufacturer or momentary variations due to changing bus loads shall not invalidate the test.

NORTil ANNA - UNIT 1 3/4 8-3c Amendment No. M.1 M,184.

1 i

ELECTWCAL POWER SYSTEh1S SURVEILLANCE REQUIREMENTS 4.8.1.1.3 Each emergency diesel generator 125-volt battery bank and charger shall be l

demonstrated OPERABLE:

a.

At least once per 7 days by verifying that:

1.

The parameters in Table 4.8-3 meet Category A limits and 2.

The total battery tenninal voltage is greater than or equal to 129 volts on a float charge.

b.

At least once per 92 days and within 7 days after a battery discharge where the battery terminal voltage decreased below 110 volts or battery overcharge above 150 volts, by verifying that:

1.

The parameters in Table 4.8-3 meet Category B limits and 2.

There is no visible corrosion at either terminals or connectors, or the connection resistance of these items is less than 150 x 10 to the minus 6 ohms.

c.

At least once per 18 months, by verifying that:

1.

The cells, cell plates and battery racks show no visual indication of physical damage or abnormal deterioration.

2.

The cell-to-cell and terminal connections are clean, tight and coated with anti-corrosion material.

3.

The resistance of each cell-to-cell and tenninal connection is less than or equal to 150 x 10-6 ohms.

4.

The battery charger will supply at least 10 amperes at 125 volts for at least 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months .

d.

At least once per 60 months, during shutdown, by verifying that the battery capacity is at least 80'7e of the manufacturer's rating when subjected to a performance discharge test.

c.

At Icast once per 18 months, during shutdown, perform a performance discharge test of battery capacity if the battery shows signs of degradation or has reached 857c of its ervice life expected for the application. Degradation is indicated when the tntir.ry capacity drops more than 107c of rated capacity from its average from previous performance discharge tests, or is below 907c of the manufacturer's rating.

i NORTil ANNA - UNIT I 3/4 8-4 Amendment No. G,47.

ELECTRICAL POWER SYSTEMS i

Table 4.8-2 l

EMERGENCY DIESEL GENERATOR TEST SCHEDULE l

' Number of Failures in Number of Failures in Last 20 Valid Tests

Last 100 Valid Tests

Test Frequency 51 s4 Once per 31 days 2 2**

25 Once per 7 days 4

i Criteria for determining number of failures and number of valid tests shall be in accordance with Regulatory Position C.2.e of Regulatory Guide 1.108, but determined on a per 2

i emergency diesel generator basis.

l For the purposes of determining required test frequency, the previous test failure count may be reduced to zero if a complete diesel overhaul to like-new conditions is completed, provided that the overhaul including appropriate post-maintenance operation and testing, is specifically approved by the manufacturer and if acceptable reliability has been n

4 j

demonstrated. The reliability criterion shall be the successful completion of 14 consecutive tests in a single series. Ten of these tests shall be in accordance with Surveillance Requirement 4.8.1.1.2.a.4; four tests, in accordance with Surveillance Requirement 4.8.1.1.2.c. If this criterion is not satisfied during the first series of tests, any alternate c

criterion to be used to transvalue the failure count to zero requires NRC approval.

f The associated test frequency shall be maintained until seven consecutive failure frec demands have been performed and the number of failures in the last 20 valid demands has r

been reduced to one.

J

)

1 4

4 l,

t NORTil ANNA - UNIT I 3/4 8-4c Amendment No. F4.

ELECTRICAL POWER SYSTEMS SURVEILLANCE REQUIREMENTS 4.8.1.1.4 For each underground EDG fuel oil storage tank perform the following at least once per l

10 years:

1.

Drain each fuel oil storage tank 2.

Remove sediment from each fuel oil storage tank 3.

Inspect each fuel oil storage tank for integrity 4.

Clean each fuel oil storage tank.

)

NORT11 ANNA - UNIT l' 3/4 8-4d Amendment No.128

ELECTRICAL POWER SYSTEMS I

SHUTDOWN LIMITING CONDITION FOR OPERATION 3.8.1.2 As a minimum, one of the following trains of A.C. electrical power sources shall be OPERABLE:

a.

One circuit between the offsite transmission network and the onsite Class lE i

distribution system, and b.

One emergency diesel generator with:

l

1. A day tank containing a minimum volume of 750 gallons of fuel;

2. A fuel storage system consisting of two underground storage tanks each 1

containing a minimum volume of 45,000 gallons of fuel (This is a shared system with Unit 2), and

3. A fuel transfer system.

l 2

offL.lCABILITY:

i a.

Modes 5 and 6 b.

During movement of irradiated fuel assemblies or loads over irradiated fuel assemblies when no fuel assemblies are in the reactor vessel.

A_CTION:

i a.

With less than the above minimum required A.C. electrical power sources i

OPERABLE, immediately suspend all operations involving CORE ALTERATIONS, positive reactivity changes, movement of irradiated fuel assemblies, and movement ofloads over irradiated fuel assemblies until the i

minimum required A.C. electrical power sources are restored to OPERABLE status.

l b.

With one underground fuel oil storage tank of 3.8.1.2.b.2 inoperable for the

]

performance of Surveillance Requirement 4.8.1.1.4 or for tank repairs:

1. Verify 45,000 gallons of fuel is available in the operable underground fuel oil storage tank at least once per 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months .

2. Verify a minimum of 100,000 gallons of fuel oil is maintained in the above ground main fuel oil storage tank at least once per 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months ,

3. Verify an available source of fuel oil and transportation to supply 50.000 gallons of fuel in less than a 48 hour5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months period, and 4.

Restore the storage tank to OPERABLE status within 7 days or place both Units in at least IlOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months , and perform ACTION a. above.

SURVEILLANCE REQUIREMENTS 4.8.1.2 The above required A.C. electrical power sources shall be demonstrated OPERABLE by the performance of each of the Surveillance Requirements of 4.8.1.1.1,4.8.1.1.2,4.8.1. l.3, and 4.8.1.1.4.

NORTil ANNA - UNIT 1 3/4 8-5 Amendment No. 44,83, ! 28, !M, i

l l

APPLICABILITY BASES i

3.0.5 This specification delineates what additional conditions must be satisfied to permit operation to continue, consistent with the ACTION statements for power sources, when a normal or emergency power source is not OPERABLE. It specifically prohibits operation when one division is inoperable because its normal or emergency power source is inoperable and a system, subsystem, train, component or device in another division is inoperable for another reason.

The provisions of this specification permit the ACTION statements associated with individual systems, subsystems, trains, components, or devices to be consistent with the ACTION statements of the associated electrical power source. It allows operation to be governed by the time limits of the ACTION statement associated with the Limiting Condition for Operation for the normal or emergency power source, not the individual ACTION statements for each system, subsystem, train, component or device that is determined to be inoperable solely because of the inoperability of its normal or emergency power source.

For example, Specification 3.8.1.1 requires in part that two emergency diesel generators be OPERABLE. The ACTION statement provides for an out-of-service time when one emergency l

diesel generator is not OPERABLE. If the definition of OPERABLE were applied without consideration of Specification 3.0.5, all systems, subsystems, trains, components and devices supplied by the inoperable emergency power source would also be inoperable. This would dictate invoking the applicable ACTION statements for each of the applicable Limiting Conditions for Operation. However, the provisions of Specification 3.0.5 permit the time limits for continued operation to be consistent with the ACTION statement for the inoperable emergency diesel generator instead, provided the other specified conditions are satisfied. In this case, this would mean that the corresponding normal power source must be OPERABLE, and all redundant systems, subsystems, trains, components, and devices must be OPERABLE, or otherwise satisfy Specification 3.0.5 (i.e., be capable of performing their design function and have at least one normal or one emergency power source OPERABLE). If they are not satisfied, shutdown is required in accordance with this specification.

As a further example, Specification 3.8.1.1 requires in part that two physically independent j

circuits between the offsite transmission network and the onsite Class lE distribution system be OPERABLE. The ACTION statement provides a 24-hour out-of-service time when both required offsite circuits are not OPERABLE If the definition of OPERABLE were applied without consideration of Specification 3.0.5, all systems, subsystems, trains, components and devices supplied by the inoperable normal power source, both of the offsite circuits, would also be inoperable. This would dictate invoking the applicable NORTil ANNA - UNIT l B 3/4 0-2 Amendment No. 44

3/4.1 REACTIVITY CONTROL SYSTEMS BASES 3/4.1.1.4 MODERATOR TEMPER ATURE COEFFICIENT (MTC) (Continued) conditions other than those explicitly stated will require extrapolation to those conditions in order to permit an accurate comparison.

The most negative MTC value was obtained by incrementally correcting the MTC used in the FSAR analyses to nominal operating conditions. These corrections involved adding the incremental change in the MTC associated with a core condition of Bank D inserted to an all rods withdrawn condition and an incremental change in MTC to account for measurement uncertainty at RATED TilERM AL POWER conditions. These corrections result in the End of Cycle (EOC)

MTC limit. The 300 ppm surveillance limit MTC value represents a conservative value (with corrections for burnup and soluble boron) at a core condition of 300 ppm equilibrium boron concentration and is obtained by making these corrections to the EOC MTC limit.

Once the equilibrium boron concentration falls below about 60 ppm, dilution operations take an extended amount of time and reliable MTC measurements become more difficult to obtain due to the potential for fluctuating core conditions over the test interval. For this reason, MTC measurements may be suspended provided the measured MTC value at an equilibrium full power boron concentration s 60 ppm is less negative than the 60 ppm surveillance limit. The difference between this value and the EOC-MTC limit conservatively bounds the maximum credible change in MTC between the 60 ppm equilibrium boron concentration (all rods withdrawn, RATED TilERM AL POWER conditions) and the licensed end-of-cycle, including the effect of boron concentration, burnup, and end-of-cycle coastdown.

The surveillance requirements for measurement of the MTC at the beginning and near the end of each fuel cycle are adequate to confirm that the MTC remains within its limits since this coefficient changes slowly due principally to the reduction in RCS boron concentration associated with fuel burnup.

3/4.1.1.5 MINIMUM TEMPER ATURE FOR CRITICALITY This specification ensures that the reactor will not be made critical with the Reactor Coolant Systent average temperature less than 54 i F. This limitation is required to ensure 1) the moderator temperature coefficient is within its analyzed temperature range,2) the protective instrumentation is within its normal operating range, and 3) the P-12 interlock is above its setpoir.t and 4) compliance with Appendix G to 10 CFR Part 50 (see Bases 3/4.4.9).

3/4.1.2 BOR ATION SYSTEMS The boron injection system ensures that negative reactivity control is available during each mode of facility operation. The components required to perform this function include 1) borated water sources,2) charging pumps,3) separate flow paths,4) boric acid transfer pumps,5) associated heat tracing systems, and 6) an emergency power supply from OPERABLE emergency l

diesel generators.

NORTil ANNA - UNIT I B 3/4 1-2 Amendment No. W142, ! 4-7.

446,

3/4.8 ELECTRICAL POWER SYSTEMS BASES 3/4.8.1 and 3/4.8.2 AC. and D.C. POWER SOURCES AND DISTRIBUTION The OPERABILITY of the A.C. and D.C. power sources and associated distribution systems during operation ensures that sufficient power will be available to supply the safety related equipment required for 1) the safe shutdown of the facility and 2) the mitigation and control of accident conditions within the facility. The minimum specified independent and redundant A.C.

and D.C. power sources and distribution systems satisfy the requirements of General Design Criteria 17 of Appendix "A" to 10 CFR 50.

The ACTION requirements specified for the levels of degradation of the power sources provide restriction upon continued facility operation commensurate with the level of degradation.

The OPERABILITY of the power sources are consistent with the initial condition assumptions of the accident analyses and are based upon maintaining at least one of each of the onsite A.C. and D.C. power sources and associated distribution systems OPERABLE during accident conditions coincident with an assumed loss of offsite power and single failure of the other onsite A.C. source.

The fourteen day outage permitted once each 18 months per EDG for performance of a preventive maintenance inspection during power operation has been shown to have no significant impact on core damage frequency, providing the Alternate A.C. Diesel Generator (AAC DG) is OPERABLE as defined in administratively controlled station documents. Removal of other components from service during this time shall be governed by administrative procedure, if the AAC DG is inoperable during the fourteen day period of EDG inspection, the OPERABILITY of the remaining EDG need not be demonstrated since the AAC DG was designed and purchased according to specifications which adequately insure that common cause failure is not likely.

When one EDG is inoperable due to the fourteen day preventive maintenance inspection the three other EDGs and the AAC DG are required to be OPERABLE. The AAC DG is ensured OPERABLE by action statement b for Technical Specification 3.8.1.1. The other EDG on the i

same unit is ensured OPERABLE by action statement b for Technical Specification 3.8.1.1. The opposite unit's EDGs are ensured OPERABLE by action statement b for Technical Specification 3.8.l.1.

i The ACTION requirements specified in Modes 5 and 6 address the condition where sufficient power is unavailable to recover from postulated events (i.e., fuel handling accident).

l Implementation of the ACTION requirements shall not preclude completion of actions to establish a safe conservative plant condition. Completion of the requirements will prevent the occurrence of postulated events for which mitigating actions would be required.

NORTil ANNA - UNIT 1 B 3/4 8-1 Amendment No. 33,97.156

=

3/4.8 IiLECTRICAL POWER SYSTEMS BASES 3/4.8.1 and 3/4.8.2 A.C. and D.C. POWER SOURCES AND DISTRIBUTION (Continued)

The OPERABILITY of the minimum specified A.C. and D.C. power sources and associated distribution systems during shutdown and refueling ensures that 1) the facility can be maintained in the shutdown or refueling condition for extended time periods,2) sufficient instrumentation and i

control capability is available for monitoring and maintaining the unit status, and 3) sufficient power is available for systems necessary to recover from postulated events in these MODES, e.g.,

i a fuel handling accident.

The Surveillance Requirements for demonstrating the OPERABILITY of the Emergency Diesel Generators are in accordance with the recommendations of Regulatory Guide 1.9 " Selection of Diesel Generator Set Capacity for Standby Power Supplies," March 10,1971, and 1.108

" Periodic Testing of Diesel Generator Units Used as Onsite Electric Power Systems at Nuclear Power Plants" Revision 1 August 1977, as modified by Amendment No. 83 issued August 22, 1986.

The Surveillance Requirements for demonstrating the OPERABILITY of the Emergency Diesel Generator batteries and the Station batteries are based on the recommendations of Regulatory Guide 1.129," Maintenance, Testing and Replacement of Large Lead Storage Batteries for Nuclear Power Plants," February 1978, and IEEE Std 450-1980,"lEEE Recommended Practice for Maintenance, Testing, and Replacement of Large Lead Storage Batteries for Generating Stations and Substations," as modified by Amendment No. 97 issued March 25,1988.

t 1

l 4

1 i

NORTil ANNA - UNIT I B 3/4 8-2 Amendment No.

1

1.0 DEFINITIONS (Continued)

ENGINEERED SAFETY FEATURE RESPONSE TIME 1.12 The ENGINEERED SAFETY FEATURE RESPONSE TIME shall be that time interval j

from when the monitored parameter exceeds its ESF actuation setpoint at the channel sensor until the ESF equipment is capable of performing its safety function (i.e., the valves travel to their required positions, pump discharge pressures reach their required values, etc.). Times shall include emergency diesel generator starting and sequence loading delays where applicable.

l FREOUENCY NOTATION 1.13 The FREQUENCY NOTATION specified for the performance of Surveillance Requirements shall correspond to the intervals defined in Table 1.2.

1 FULLY WITilDRAWN 1.13a The control bank FULLY WITIIDRAWN position shall be within the interval of 225 to 229 steps withdrawn, inclusive. Definition of the FULLY WITHDRAWN position for each specific cycle shall be documented in the rod insertion limit operator curve.

GASEOUS RADWASTE TREATMENT SYSTEM 1.14 A GASEOUS RADWASTE TREATMENT SYSTEM is the system designed and installed to reduce radioactive gaseous effluents by collecting primary coolant system offgases from the primary system and providing for delay or holdup for the purpose of reducing the total radioactivity prior to release to the environment. The system is composed of the waste gas decay tanks, regenerative heat exchanger, waste gas charcoal filters, process vent blowers, waste gas surge tanks 4

and waste gas diaphragm compressor.

IDENTIFIED LEAKAGE 4

I.15 IDENTIFIED LEAKAGE shall be:

Leakage (except CONTROLLED LEAKAGE) into closed systems, such as pump a.

seal or valve packing leaks that are captured and conducted to a sump or collecting tank, or b.

Leakage into the containment atmosphere from sources that are both specifically located and known either not to interfere with the operation of leakage detection systems or not to be PRESSURE BOUNDARY LEAKAGE, or c.

Reactor coolant system leakage through a steam generator to the secondary system.

MEMBER (S) OF THE PUBLIC 1

1.16 MEMBER (S) OF Tile PUBLIC shall include all individuals who by virtue of their occupational status have no formal association with the plant. This category shall include non-employees of the licensee who are permitted to use portions of the site for recreational, occupational, or other purposes not associated with plant functions. This category shall nnt include non-employees such as vending machine servicemen or postman w ho, as part of their formaljob function, occasionally enter an area that is controlled by the licensee for purposes of protection of individuals from exposure to radiation and radioactive materials.

NORTil ANNA - UNIT 2 1-3 Amendment No. MWOA-4,

i a

a 3/4.8 ELECTRICAL POWER SYSTEMS i

.A.C. SOURCES 3/4.8.1 3

OPERATING j

LIMITING CONDITION FOR OPERATION I

1 3.8.1.1 As a minimum, the following A.C. electrical power sources shall be OPERABLE:

l a.

Two physically independent circuits between the offsite transmission network and the onsite Class 1E distribution system, and i

b.

Two separate and independent emergency diesel generators (EDGs):

l

l. Each with a separate day tank containing a minimum of 750 gallons of fuel, and l-

2. A fuel storage system consisting of two underground storage tanks each containing a minimum of 45,000 gallons of fuel (This is a shared system with Unit 1), and i

l

3. A separate fuel transfer system.

j APPLICABILITY:

MODES 1,2,3 and 4.

ACTION:

f With one offsite circuit of 3.8.1.1.a inoperable, demonstrate the OPERABILITY of a.

the remaining A.C. sources by performing Surveillance Requirement 4.8.1.1.1.a within I hour and at least once per 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months thereafter. Restore the offsite circuit to l

l OPERABLE status within 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months or be in at least IlOT STANDBY within the I

next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months .

l l

b.

With one EDG of 3.8.1.1.b inoperable, demonstrate the OPERABILITY of the j

offsite A.C. power sources by performing Surveillance Requirement 4.8.1.1.1.a j

i within I hour and at least once per 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months thereafter. If the EDG is inoperable due

{

to any cause other than an inoperable support system, an independently testable j

component, or preplanned preventive maintenance or testing, demonstrate the OPERABILITY of the remaining OPERABLE EDG by performing Surveillance Requirement 4.8.1.1.2.a.4 within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months *, unless the absence of any potential common mode failure for the remaining EDG is demonstrated. In addition.

{

1.

Restore the EDG to OPERABLE status within 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months or be in at least iiOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SilUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months , or l

l i

i j

This action is required to be completed regardless of when the inoperable EDG is 4

restored to OPERABILITY.

4 NORTil ANNA - UNIT 2 3/4 8-1 Amendment No. 48, ! ! 2,165,

,.. -. ~

1 l

ELECTRICAL POWER SYSTEMS LIMITING CONDITION FOR OPERATION ACTION: (Continued) 2.

If the EDG is inoperable for the performance of Surveillance Requirement 4.8.1.1.2.f restore the EDG to OPERABLE status within 14 days or be in at least liOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months . This action can only be applied once every 18 months for each EDG, and Within 14 days prior to declaring an EDG inoperable for the performance of Surveillance Requirement 4.8.1.1.2.f, demonstrate that the AAC DG is OPERABLE, and If the AAC DG becomes inoperable during the performance of Surveillance Requirement 4.8.1.1.2.f, restore the AAC DG to OPERABLE status within 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months or be in at least ilOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SliUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months , and i

If either of the opposite unit's EDGs become inoperable during the perfonnance of Surveillance Requirement 4.8.1.1.2.f, restore the opposite unit's EDGs to OPERABLE status within 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months or place this unit in at least ilOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months , and The provisions of Specification 3.0.4 are not applicable.

c.

With one offsite circuit and one EDG inoperable, demonstrate the OPERABILITY of the remaining A.C. sources by performing Surveillance Requirement 4.8.1.1.1.a within one hour and at least once per 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months thereafter; and if the EDG became inoperable due to any cause other than an inoperable support system, an independently testable component, or preplanned preventative maintenance or testing, demonstrate the OPERABILITY of the remaining OPERABLE EDG by performing Surveillance Requirement 4.8.1.1.2.a.4 within 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months *, unless the absence of any potential common mode failure for the remaining EDG is l

demonstrated. Restore one of the inoperable sources to OPERABLE status within 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months or be in at least IlOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SliUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months . Restore the other A.C. power source (ofisite circuit or EDG) to OPERABLE status in accordance with the provisions of l

Section 3.8.1.1 Action Statement a or b, as appropriate with the time requirement of that Action Statement based on the time of initial loss of the remaining inoperable A.C. power source.

d.

With two of the required offsite A.C. circuits inoperable, restore one of the inoperable offsite sources to OPERABLE status within 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months or be in at least ilOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months . Following restoration of one offsite source, follow Action Statement a with the time requirement of that Action Statement based on the time of initial loss of the remaining inoperable offsite A.C.

circuit.

This action is required to be completed regardless of w hen the inoperable EDG is restored to OPERABILITY.

NORTil ANNA - UNIT 2 3/4 8-2 Amendment No. 48-70A65,

ELECTRICAL POWER SYSTEMS LIMITING CONDITION FOR OPERATION ACTION:(Continued):

With two of the above required EDGs inoperabic, demonstrate the OPERABILITY e.

of twc, offsite A.C. circuits by performing Surveillance Requirement 4.8.1.1.1.a within one hour anti at least once per 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months thereafter; restore one of the inoperable EDGs to OPERABLE status within 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months . Following restoration of one EDG, follow Action Statement b with the time requirement of that Action Statement based on the time ofinitialloss of the remaining inoperable EDG.

f.

With one underground fuel oil storage tank of 3.8.1.1.b.2 inoperable for the performance of Surveillance Requirement 4.8.1.1.4 or for tank repairs:

1. Verify 45,000 gallons of fuel is available in the operable underground fuel oil storage tank at least once per 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months ,

2. Verify a minimum of 100,000 gallons of fuel is maintained in the above ground main fuel oil storage tank at least once per 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months ,

3. Verify an available source of fuel oil and transportation to supply 50,000 gallons of fuel in less than a 48 hour5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months period, and

4. Restore the storage tank to OPERABLE status within 7 days or place both Units in at least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months .

NORTil ANNA - UNIT 2 3/4 8-2a Amendment No. 442,

l ELECTRICAL POWER SYSTEMS 5

SURVEILLANCE REQUIREMENTS l

1 4.8,1.1.1 Each of the above required physically independent circuits between the offsite l

a 1

transmission network and the onsite Class lE distribution system shall be:

i Determined OPERABLE at least once per 7 days by verifying correct breaker a.

i alignment indicating power availability.

i b.

Demonstrated OPERABLE at least once per 18 months during shutdown by

[

q manually transferring the onsite Class lE power supply from the normal circuit to the alternate circuit.

i 4.8.1.1.2 Each emergency diesel generator (EDG) shall be demonstrated OPERABLE:

l a

i j

a.

In accordance with the frequency specified in Table 4.8.2 on a STAGGERED I

TEST B ASIS by:

i 4

l

1. Verifying the fuel level in the day tank.

2. Verifying the fuellevel in the fuel storage tank.

1

3. Verifying the fuel transfer pump can be started and transfers fuel from the storage system to the day tank.

l

4. Verifying the EDG can start ** and gradually accelerate to synchronous speed l

l (900 rpm) with generator voltage and frequency at 4160 420 volts and 60 i

]

1.2 liz. Subsequently, verifying the generator is synchronized, gradually loaded ** to an indicated 2500-2600 kw*** and operates for a least 60 minutes.

3

5. Verifying the EDG is aligned to provide standby power to the associated j

i emergency busses.

b.

At least once per 92 days by verifying that a sample of diesel fuel from the fuel storage tank obtained as a DRAIN sample in accordance with ASTM-D270-65, is i

within the acceptable limits specified in Table 1 of ASTM D975-74 when checked I

for viscosity, water and sediment.

e.

At least once per 184 days, the EDG shall be started ** and accelerated to at least l

900 rpm in less than or equal to 10 seconds. The generator voltage and frequency shall be 41601420 volts and 60 i 1.2 llz within 10 seconds after the start signal.

i This test shall be conducted in accordance with the manufacturer's recommendations 1

regarding engine prelube and warmup procedures, and as applicable regarding loading recommendations.

- - This band is meant as guidance to avoid routine overloading of the engine. Loads in excess

)

of this band for special testing under direct monitoring of the manufacturer or momentary j

variations due to changing bus loads shall not invalidate the test.

i 4

~

NORTil ANNA - UNIT 2 3/4 8-3 Amendment No. 48,

ELECTRICAL POWER SYSTEMS SURVEILLANCE REQUIREMENTS 4.8.1.1.2 (Continued)

The EDG shall be manually synchronized to its appropriate emergency bus, l

gradually loaded ** to an indicated 2500 to 2600 kw***, and operated for at least 60 minutes. The EDG shall be started for this test by using one of the following l

signals on a rotating test basis:

a)

Simulated loss of offsite power by itself.

b)

Simulated loss of offsite power in conjunction with an ESF actuation test signal.

c)

An ESF actuation test signal by itself.

This test, if it is performed so it coincides with the testing required by Surveillance Requirement 4.8.1.1.2.a.4, may also serve to concurrently meet those requirements as well.

d.

At least once per 18 months during shutdown by:

1.

Verifying that, on rejection of a load of greater than or equal to 610 kw, the l

voltage and frequency are maintained with 4160 420 volts and 60 i 1.2 Ifz.

2.

Verifying that the load sequencing timers are OPERABLE with times l

within the tolerances shown in Table 4.8-l.

3.

Simulating a loss of offsite power by itself, and:

l a) Verifying de-energization of the emergency busses and load shedding from the emergency busses.

b) Verifying the EDG starts ** on the auto-start signal, energizes the l

emergency busses with permanently connected loads within 10 seconds, energizes the auto-connected shutdown loads through the sequencing timers and operates for greater than or equal to 5 minutes while its generator is loaded with the shutdown loads. After energization of these loads, the steady state voltage and frequency shall be maintained at 4160 420 volts and 60 1.2117.

This test shall be conducted in accordance with the manufacturer's recommendations regarding engine prelube and warmup procedures, and as applicable regarding loadin; recommendations.

This band is meant as guidance to avoid routine overloading of the engine. Loads in excess of this band for special testing under direct monitoring of the manufacturer or momentary variations due to changing bus loads shall not invalidate the test.

NORTil ANNA - UNIT 2 3/4 8-4 Amendment No. 70A65,

ELECTRICAL POWER SYSTEMS SURVEILLANCE REQUIREMENTS 4.8.1.1.2 (Continued) 4.

Verifying that on an ESF actuation test signal (without loss of offsite power) the EDG starts *

on the auto-start signal and operates on standby for greater than or equal to 5 minutes.

5.

Simulating a loss of offsite power in conjunction with an ESF actuation test l

signal, and a) Verifying de-energization of the emergency busses and load shedding from the emergency busses.

b) Verifying the EDG starts ** on the auto-start signal, energizes the l

emergency busses with permanently connected loads within 10 seconds, energizes the auto-connected emergency (accident) loads through the sequencing timers and operates for greater than or equal to 5 minutes and maintains the steady state voltage and frequency at 41601420 volts and 60 i 1.2 Hz.

c) Verifying that all EDG trips, except engine overspeed, generator l

differential and breaker overcurrent are automatically bypassed upon loss of voltage on the emergency bus and/or a safety injection actuation signal.

6.

Verifying the EDG operates ** for at least 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months . During the first 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months of this test, the EDG shall be loaded to an indicated target value of 2950 kw (between 2900-3000 kw)*** and during the remaining 22 hours2.546296e-4 days 0.00611 hours 3.637566e-5 weeks 8.371e-6 months of this test, 1

the EDG shall be loaded to an indicated 2500-2600 kw***

7.

Verifying that the auto-connected loads to each EDG do not exceed the 2000 hour0.0231 days 0.556 hours 0.00331 weeks 7.61e-4 months rating of 3000 kw.

8.

Verifying the EDG's capability to:

a) Synchronize with the offsite power source while the EDG is loaded with 1

its emergency loads upon a simulated restoration of offsite power, b) Transfer its loads to the offsite power source, and c) Proceed through its shutdown sequence.

This test shall be conducted in accordance with the manufacturer's recommendations regarding engine prelube and warmup procedures, and as applicable regarding loading recommendations.

** This band is meant as guidance to avoid routine overloading of the engine. Loads in excess of this band for special testing under direct monitoring of the manufacturer or momentary variations due to changing bus loads shall not invalidate the test.

NORTil ANNA - UNIT 2 3/4 8-5 Amendment No.42A8d65,

~_

ELECTRICAL POWER SYSTEMS SURVEILLANCE REQUIREMENTS 4.8.1.1.2 (Continued) 9.

Verifying that the following EDG lockout features prevent EDG starting l

only when required:

a) Remote Local Selection Switch b) Emergency Stop Switch 10.

Verifying the EDG's hot restart capability by:

a) Operating the EDG** loaded to an indicated 2500 to 2600 kw*** for 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months or until operating temperatures have stabilized, and b) Within 5 minutes of shutdown verify the EDG can be started ** and l

accelerated to at least 900 rpm in less than or equal to 10 seconds. The generator voltage and frequency shall be 41601420 volts and 60 i 1.2 IIz within 10 seconds after the start signal.

e.

At least once per 10 years or after any modifications which could affect EDG interdependence by starting ** both EDGs simultaneously, during shutdown, and verifying that both EDGs accelerate to at least 900 rpm in less than or equal to 10 4

seconds.

f.

Once per 18 months during any mode of operation, by subjecting each EDG to a preventive maintenance inspection in accordance with maintenance procedures i

appropriate for diesels used for this class of standby service.

4.8.1.1.3 Each emergency diesel generator 125-volt battery bank and charger shall be demonstrated OPERABLE:

1 a.

At least once per 7 days by verifying that:

1.

The parameters in Table 4.8-3 meet Category A limits and 2.

The total battery terminal voltage is 2129 volts on a float charge.

J i

l This test shall be conducted in accordance with the manufacturer's recommendations regarding engine prelube and warmup procedures, and as applicable regarding loading recommendations.

*

This band is meant as guidance to avoid routine overloading of the engine. Loads in excess of this band for special testing under direct monitoring of the manufacturer or momentary variations due to changing bus loads shall not invalidate the test.

NORTil ANN A - UNIT 2 3/48-6 Amendment No. 18,81,16.5,

ELECTRICAL POWER SYSTEMS SURVEILLANCE REQUIREMENTS 4.8.1.1.3 (continued) b.

At least once per 92 days and within 7 days after a battery discharge where the battery terminal voltage decreased below 110 volts or battery overcharge above 150 volts, by verifying that:

1.

The parameters in Table 4.8-3 meet Category B limits and 2.

There is no visible corrosion at either terminals or connectors, or the connection resistance of these items is less than 150 x 10 to the minus 6 ohms.

c.

At least once per 18 months by verifying that:

1.

The cells, cell plates and battery racks show no visual indication of physical damage or abnormal deterioration.

2.

The cell-to-cell and terminal connections are clean, tight and coated with anti-corrosion material.

3.

The resistance of each cell-to-cell and terminal connection is less than or 4

equal to 150 x 10 ohms.

4.

The battery charger will supply at least ten amperes at 125 volts for at least 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months .

d.

At least once per 60 months, during shutdown, by verifying that the battery capacity is at least 809c of the manufacturer's rating when subjected to a performance discharge test.

At least once per 18 months, during shutdown, perform a performance discharge e.

test of battery capacity if the battery shows signs of degradation or has reached 857c of its service life expected for the application. Degradation is indicated when the battery capacity drops more than 10% of rated capacity from its average from previous performance discharge tests, or is below 907c of the manufacturer's rating.

4.8.1.1.4 For each underground EDG fuel oil storage tank perform the following at least once l

per 10 years:

1.

Drain each fuel oil storage tank 2.

Remove sediment from each fuel oil storage tar K 3.

Inspect each fuel oil storage tank for integrity 4.

Clean each fuel oil storage tank NORTil ANNA - UNIT 2 3/4 8-6a Amendment No.17, "', F i, ! 12,

Iable 4.8-2 EMERGENCY DIESELDENERATOR TEST SCHEDULE l

Number of Failures in Number of Failures in Last 20 Valid Tests

Last 100 Valid Tests

Test Freauency sI s4 Once per 31 days 2 2**

25 Once per 7 days Criteria for determining number of failures and number of valid tests shall be in accordance with Regulatory Position C.2.e of Regulatory Guide 1.108, but determined on a per emergency diesel generator basis.

For the purposes of determining required test frequency, the previous test failure count may be reduced to zero if a complete diesel overhaul to like-new conditions is completed, provided that the overhaul including appropriate post-maintenance operation and testing, is specifically approved by the manufacturer and if acceptable reliability has been demonstrated. The reliability criterion shall be the successful completion of 14 consecutive tests in a single series. Ten of these tests shall be in accordance with Surveillance Requirement 4.8.1.1.2.a.4; four tests, in accordance with Surveillance Requirement 4.8.1.1.2.c. If this criterion is not satisfied during the first series of tests, any alternate criterion to be used to transvalue the failure count to zero requires NRC approval.

The associated test frequency shall be maintained until seven consecutive failure free demands have been performed imd the number of failures in the last 20 valid demands has been reduced to one.

NORTil ANNA - UNIT 2 3/4 8-9 Amendment No. 48,

i i

4 ELECTRICAL POWER SYSTEMS l

SHUTDOWN i

i l

LIMITING CONDITION FOR OPERATION l

3.8.1.2 -

As a minimum, one of the following trains of A.C. electrical power sources shall be f

OPERABLE:

a.

One circuit between the offsite transmission network and the onsite Class lE q

j distribution system, and I

b.

One emergency diesel generator with:

l 3

1. A day tank containing a minimum volume of 750 gallons of fuel; i

2. A fuel storage system consisting of two underground storage tanks each i

i cont aining a minimum volume of 45,000 gallons of fuel (This is a shared system with Unit 1), and 4

3. A fuel transfer system.

l APPLICABILITY:

a.

Modes 5 and 6 b.

During movement of irradiated fuel assemblies or loads over irradiated fuel assemblies when no fuel assemblies are in the reactor vessel.

f ACTION:

l i

a.

With less than the above minimum required A.C. electrical power sources i

OPERABLE, immediately suspend all operations involving CORE ALTERATIONS, positive reactivity changes, movement of irradiated fuel assemblies, and movement of loads over irradiated fuel assemblies until the j

minimum required A.C. electrical power sources are restored to OPERABLE status.

b.

With one underground fuel oil storage tank of 3.8.1.2.b.2 inoperable for the l

performance of Surveillance Requirement 4.8.1.1.4 or for tank repairs:

1. Verify 45,000 gallons of fuel is available in the operable underground fuel oil j

storage tank at least once per 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months .

2. Verify a minimum of 100,000 gallons of fuel oil is maintained in the above j

ground main fuel oil storage tank at least once per 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months ,

3. Verify an available source of fuel oil and transportation to supply 50,000 gallons of fuel in less than a 48 hour5.555556e-4 days 0.0133 hours 7.936508e-5 weeks 1.8264e-5 months period, and j

4. Restore the storage tank to OPERABLE status within 7 days or place both Units i

in at least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and COLD SilUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months , and perform ACTION a. above.

i SURVEILLANCE REQUIREMENTS I

4.8.l.2 The above required A.C. electrical power sources shall be demonstrated OPERABLE by the performance of each of the Surveillance Requirements of 4.8.1.1.1. 4.8.1.1.2,4.8.1.l.3, and j

4.8,1,1.4.

i' NORTH ANNA - UNIT 2 3/4 8-10 Amendment No. 48,70. I 12,138, i

-w--

3

,m-m y-

-i-

-m-w

- ~-

I APPLICABILITY

?

BASES I

l 3.0.5 This specification delineates what additional conditions must be satisfied to permit i

operation to continue, consistent with the ACTION statements for power sources, when a normal l

or emergency power source is not OPERABLE. It specifically prohibits operation when one j

division is inoperable because its normal or emergency power source is inoperable and a system, i

subsystem, train, component or device in another division is inoperable for another reason.

The provisions of this specification permit the ACTION statements associated with individual systems, subsystems, trains, components, or devices to be consistent with the ACTION f

statements of the associated electrical power source. It allows operation to be governed by the time i

limits of the ACTION statement associated with the Limiting Condition for Operation for the normal or emergency power source, not the individual ACTION statements for each system, l

subsystem, train, component or device that is determined to be inoperable solely because of the inoperability of its normal or emergency power source.

For example, Specification 3.8.1.1 requires in part that two emergency diesel generators be OPERABLE. The ACTION statement provides for an out-of-service time when one emergency l

diesel generator is not OPERABLE. If the definition of OPERABLE were applied without 2

consideration of Specification 3.0.5, all systems, subsystems, trains, components and devices l

supplied by the inoperable emergency power source would also be inoperable. This would dictate j

invoking the applicable ACTION statements for each of the applicable Limiting Conditions for Operation. Ilowever, the provisions of Specification 3.0.5 permit the time limits for continued l

operation to be consistent with the ACTION statement for the inoperable emergency diesel j

generator instead, provided the other specified conditions are satisfied. In this case, this would mean that the corresponding normal power source must be OPERABLE, and all redundant j

systems, subsystems, trains, components, and devices must be OPERABLE, or otherwise satisfy i

Specification 3.0.5 (i.e., be capable of performing their design function and have at least one

{

normal or one emergency power source OPERABLE). If they are not satisfied, shutdown is j

required in accordance with this specification.

As a further example, Specification 3.8.1.1 requires in part that two physically independent circuits between the offsite transmission network and the onsite Class IE distribution system be

{

OPERABLE. The ACTION statement provides a 24-hour out-of-service time when both required offsite circuits are not OPERABLE. If the definition of OPERABLE were applied without j

consideration of Specification 3.0.5, all systems, subsystems, trains, components and devices

]

supplied by the inoperable normal power source, both of the offsite circuits, would also be inoperable. This would dictate invoking the applicable ACTION statements for each of the applicable LCOs. Ilowever, the provisions of Specification 3.0.5 permit the time limits for continued operation to be NORTil ANNA - UNIT 2 B 3/4 0-2 Amendment No.

REACTIVITY CONTROL SYSTEMS BASES 1

1 3/4,1.2 BORATION SYSTEMS The baron injection system ensures that negative reactivity control is available during each mode of facility operation. The components required to perform this function include 1) borated water sources,2) charging pumps,3) separate flow paths,4) boric acid transfer pumps,5) associated heat tracing systems, and 6) an emergency power supply from OPERABLE emergency l

diesel generators.

l With the RCS average temperature above 200 F, a minimum of two boron injection flow l

paths are required to ensure single f unctional capability in the event an assumed failure renders one l

of the flow paths inoperable. The boration capability of either flow path is sufficient to provide a SilUTDOWN M ARGIN from expected operation conditions of 1.77% delta k/k after xenon decay and cooldown to 200 F. The maximum expected boration capability requirement occurs at EOL

{

from full power equilibrium xenon conditions and requires 6000 gallons of 12,950 ppm borated j

- water from the boric acid storage tanks or 54,200 gallons of 2300 ppm borated water from the refueling water storage tank.

With the RCS temperature below 200 F, one injection system is acceptable without single failure consideration on the basis of the stable reactivity condition of the reactor and the additional r

l restrictions prohibiting CORE ALTERATIONS and positive reactivity change in the event the

~

single injection system becomes inoperable.

The limitation for a maximum of one centrifugal charging pump to be OPERABLE and the Surveillance Requirement to verify all charging pumps except the required OPERABLE pump to i

be inoperable below 270"F provides assurance that a mass addition pressure transient can be relieved by the operation of a single PORV.

The boron capability required below 200 F is sufficient to provide a SilUTDOWN M ARGIN of 1.77% delta k/k after zenon decay and cooldown from 200 F to 140'F. This condition l

requires either 1378 gallons of I 2,950 ppm borated water from the boric acid storage tanks or 3400 gallons of 2300 ppm borated water from the refueling water storage tank.

4 b

I i

1.

t i

I l

NORTil ANNA - UNIT 2 8 3/4 1-3 Amendment No. Md&449d-70, 1

3/4.8 El.ECTRICAL POWER SYSTEMS BASES 3/4.8.1 and 3/4.8.2 A.C. and D.C. POWER SOURCES AND DISTRIBUTION The OPERABILITY of the A.C. and D.C. power sources and associated distribution systems during operation ensures that sufficient power will be available to supply the safety related l

equipment required for 1) the safe shutdown of the facility and 2) the mitigation and control of accident conditions within the facility. The minimum specified independent and redundant A.C.

and D.C. power sources and distribution systems satisfy the requirements of General Design Criteria 17 of Appendix "A" to 10 CFR 50.

The ACTION requirements specified for the levels of degradation of the power sources provide restriction upon continued facility operation commensurate with the level of degradation.

The OPERABILITY of the power sources are consistent with the initial condition assumptions of 1

the accident analyses and are based upon maintaining at least one of each of the onsite A.C. and D.C. power sources and associated distribution systems OPERABLE during accident conditions 4

coincident with an assumed loss of offsite power and single failure of the other onsite A.C. source.

The ACTION requirements specified in Modes 5 and 6 address the condition where sufficient power is unavailable to recover from postulated events (i.e., fuel handling accident).

Implementation of the ACTION requirements shall not preclude completion of actions to establish

~

a safe conservative plant condition. Completion of the requirements will prevent the occurrence of postulated events for which mitigating actions would be required.

The fourteen day outage permitted once each 18 months per EDG for performance of a preventive maintenance inspection during power operation has been shown to have no significant impact on core damage frequency, providing the Alternate A.C. Diesel Generator ( AAC DG)is OPERABLE as defined in administratively controlled station documents. Removal of other components from service during this time shall be governed by administrative procedure.

If the AAC DG is inoperable during the fourteen day period of EDG inspection, the OPERABILITY of the remaining EDG need not be demonstrated since the AAC DG was designed and purchased according to specifications which adequately insure that common cause failure is not likely.

When one EDG is inoperable due to the fourteen day preventive maintenance inspection the three other EDGs and the AAC DG are required to be OPERABLE. The AAC DG is ensured OPERABLE by action statement b for Technical Specification 3.8.1.1. The other EDG on the same unit is ensured OPERABLE by action statement b for Technical Specification 3.8.1.1. The j

opposite unit's EDGs are ensured OPER ABLE by action statement b for Technical Specification j

3.8.1.1.

The OPERABILITY of the minimum specified A.C. and D.C. power sources and associated distribution sptems during shutdown and refueling ensures that 1) the facility can be NORTil ANNA - UNIT 2 B 3/4 8-1 Amendment No.1R. S t. !#.

3/4.8 ELECTRICAL POWER SYSTEMS BASES maintained in the shutdown or refueling condition for extended time periods,2) sufficient instrumentation and control capability is available for monitoring and maintaining the unit status, and 3) sufficient power is available for systems necessary to recover from postulated events in these MODES, e.g., a fuel handling accident.

i The Surveillance Requirements for demonstrating the OPERABILITY of the Emergency Diesel Generators are in accordance with the recommendations of Regulatory Guide 1.9 " Selection of Diesel Generator Set Capacity for Standby Power Supplies," March 10,1971,and 1.108

" Periodic Testing of Diesel Generator Units Used as Onsite Electric Power Systems at Nuclear Power Plants" Revision I, August 1977, as modified by Amendment No. 48 issued August 22, 1986.

The Surveillance Requirements for demonstrating the OPERABILITY of the Emergency Diesel Generator batteries and the Station batteries are based on the recommendations of Regulatory Guide 1.129," Maintenance, Testing and Replacement of Large Lead Storage Batteries for Nuclear Power Plants," February 1978, and IEEE Std 450-1980,"lEEE Recommended Practice for Maintenance, Testing, and Replacement of Large Lead Storage Batteries for Generating Stations and Substations," as modified by Amendment No. 84 issued March 25,1988.

Containment electrical penetration and penetration conductors are protected by either de-energizing circuits not required during reactor operation or by demonstrating the OPERABILITY of primary and backup overcurrent protection circuit breakers during period surveillance.

The surveillance frequency applicable to molded case circuit breakers and/or buses provides assurance of breaker and/or fuse reliability by testing at least one representative sample of each manufacturer's brand of circuit breaker and/or fuse. Each manufacturer's molded case circuit breakers and/or fuses are grouped into representative samples which are then tested on a rotating basis to ensure that all breakers and/or fuses are tested. If a wide variety exists within any manufacturer's brand of molded case circuit breakers and/or fuses,it is necessary to divide that manufacturer's breakers and/or fuses into groups and treat each group as a separate type of breaker or fuse for surveillance purposes.

The OPERABILITY of the motor-operated valves thermal and overload protection and/or bypass devices ensures that these devices will not present safety-related valves from performing their function. The Surveillance Requirements for demonstrating the OPERABILITY of these devices are in accordance with Regulatory Guide 1.106," Thermal Overload Protection for Electric Motors on Motor-Operated Valves," Revision 1, March 1977.

NORTil ANNA - UNIT 2 B 3/4 8-2 Amendment No 4M Significant Hazards Consideration

Sianificant Hazards Consideration Virginia Electric and Power Company (Virginia Power) proposes to change the North Anna Units 1 and 2 Technical Specifications to allow a single outage, up to fourteen (14) days, for each emergency diesel generator (EDG), once every eighteen (18) months. The purpose of the outage is the performance of a preventive maintenance inspection, appropriate for diesels used for this class of standby service, which requires disassembly of the EDG. Currently this maintenance inspection is performed during refueling outages. The proposed changes permit this maintenance inspection to be performed during Modes 1 to 4 in addition to the current allowance during Modes 5 or 6.

A probabilistic safety analysis (PSA) has been performed which demonstrates that a fourteen (14) day maintenance inspection outage, once every eighteen (18) months for each EDG, results in no significant change in core damage frequency assuming adequate compensatory measures are in place. The compensatory measures include requirements that the other EDGs, off-site power supply, and the alternate A.C. diesel (AAC DG) be operable during the preventive maintenance inspection outage.

The effect of the proposed change has been calculated to be an increase in core damage frequency of approximately 1E-6 per year, which is not considered to be a significant change (i.e., an acceptable change in risk, or a non-risk significant change) from the baseline core damage frequency of 4.1E-5.

Virginia Electric and Power Company has reviewed the proposed Technical Specifications changes against the criteria of 10 CFR 50.92 and has concluded that the changes do not pose a significant hazards consideration. Specifically, operation of North Anna Power Station in accordance with the Technical Specifications changes will not:

a.

involve a significant increase in the probability or consequences of an accident previously evaluated. The probabilistic safety analysis (PSA) demonstrates that the increase in core damage frequency due to performing the EDG maintenance inspection over a fourteen day period once every 18 months is not significant as long as the AAC DG is operable to act as a source of emergency power to replace the EDG. The period of time during which the EDG is unavailable is short enough to limit the impact of using the manually operated AAC DG as a replacement for the automatically operated EDG.

b.

create the possibility of a new or different kind of accident from any accident previously evaluated. The proposed Technical Specifications changes only 1

modify the operability of an EDG for a limited and defined period of time. The UFSAR accidents are analyzed assuming that the EDG is the worst single failure.

This assumption is more severe than the proposed Technical Specifications changes which replaces the EDG with the AAC DG, Similarly,

i the PSA performed to evaluate the proposed Technical Specifications changes considered all of the initiating events defined for the PSA performed for the Individual Plant Examination. No new initiators were defined as a result of a review of the PSA model. Therefore, it is concluded that no new or different kind of accident from any previously evaluated has been created.

c.

The proposed Technical Specifications changes do not result in a reduction in margin of safety as defined in the basis for any Technical Specifications. The PSA was performed to evaluate the concept of a one time outage. The results of the analyses show no significant change in the core damage frequency. As described above the proposed Technical Specifications changes only modify the operability of an EDG for a limited and defined period of time. Thus, operation with slightly increased EDG unavailability due to maintenance, and the AAC DG operable is acceptable.

Virginia Electric and Power Company concludes that the activities associated with these proposed Technical Specifications changes satisfy the no significant hazards consideration criteria of 10 CFR 50.92 and, accordingly, a no significant hazards consideration finding is justified.

-

ML20092A248

Text

Navigation menu

Search