ML20107N026

Amend 175 to License DPR-46,changing TSs to Verify Redundant DG Is Operable Upon Loss of One DG & Incorporating Provision to Allow Modified Start of DG

ML20107N026
Person / Time
Site:	Cooper
Issue date:	04/29/1996
From:	Wigginton D NRC (Affiliation Not Assigned)
To:
Shared Package
ML20107N029	List: ML20107N026 ML20107N031
References
NUDOCS 9605010262
Download: ML20107N026 (14)

Text

. -..

c arc UNITED STATES j

j NUCLEAR REGULATORY COMMISSION WASHINGTON D.C. seteHopi

. \\...../

NEBRASKA PUBLIC POWER DISTRICT I

DOCKET NO. 50-298 COOPER NUCLEAR STATION AMENDMENT TO FACILITY OPERATING LICENSE i

Amendment No. 175 l

License No. DPR-46 i

1.

The Nuclear Regulatory Comission (the Comission) has found that:

l A.

The application for atendment by Nebraska Public Power District (the licensee) dated May 5, 1995, as supplemented by letters dated j

July 14, 1995, and March 5, 1996, complies with the standards and requirements of the Atomic Energy Act of 1954, as amended (the Act),

1 and the Comission's rules aid regulations set forth in 10 CFR l

Chapter I; B.

The facility will operate in conformity with the application, the provisions of the Act, and the rules and regulations of the Comission; i

C.

There is reasonable assurance:

(i) that the activities authorized j

by this amendment can be conducted without endangering the health and safety of the public, and (ii) that such activities will be j

conducted in compliance with the Comission's regulations; D.

The issuance of this license amendment will not be inimical to the i

common defense and security or to the health and safety of the public; and E.

The issuance of this amendment is in accordance with 10 CFR Part 51 of the Comission's regulations and all applicable requirements have been satisfied.

j I

i 4

9605010262 960429 PDR ADOCK 05000298 P

PDR 2

.t.

2.

Accordingly, the license is amended by changes to the Technical Specifi-cations as indicated in the attachment to this license amendment and Paragraph 2.C.(2) of Facility Operating License No. DPR-46 is hereby amended to read as follows:

2.

Technical Soecifications The Technical Specifications contained in Appendix A, as revised through Amendment No.175, are hereby incorporated in the license.

The licensee shall operate the facility in accordance with the Technical Specifications.

3.

The license amendment is effective as of its < fate of issuance.

FOR THE NUCLEAR REGULATORY COMMISSION A

1 David L..

ghnton,SeniorProjectManager Project Directorate IV-1 Division of Reactor Projects III/IV Office of Nuclear Reactor Regulation

Attachment:

Changes to the Technical Specifications Date of Issuance: April 29, 1996 i

\\

ATTACHMENT TO LICENSE AMENDMENT NO. 175 FACILITY OPERATING LICENSE NO. DPR-46 DOCKET NO. 50-298 l

Replace the following pages of the Appendix A Technical Specifications with l

the enclosed pages. The revised pages are identified by Amendment number and contain vertical lines indicating the area of change.

l REMOVE PAGES INSERT PAGES l

120 12.0 121 121 128 128 131 131 192 132 193 193 193a 193a 199 199 200 200 201 201 202 202 l

l l

4

LIMITING CONDITIONS FOR OPERATION SURVEILIANCE REQUIREMENTS 3.5.E' (cont'd) 4.5.E (cont'd) j 2.

From -and after the date that one 2.

When it is determined that one valve valve in the Automatic Depressuriza-of the ADS is inoperable, the ADS tion System is made or found to be actuation logic for the other ADS inoperable for any reason, continued valves shall be demonstrated to be reactor operation is permissible operable innsediately. In addition, only during the succeeding seven the HPCI System shall be verified to days unless such valve is sooner be operable immediately.

made operable, provided that during l

such seven days the HPCI System is i

operable.

3.

With the surveillance requirements of 4.6.D.5 not performed at the required intervals due to reactor i

shutdown, a reactor startup may be conducted provided the appropriate surveillance is performed within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> of achieving 113 psig reactor steam pressure.

4.

If the requirements of 3.5.E.1 or 3.5.E.2 cannot be met, an orderly l

shutdown shall be initiated and the reactor pressure shall be reduced to at least 113 psig within 24' hours.

i 1

F.

Minimum Low Pressure Coolina and F.

Minimum Low Pressure Cooline and Diesel Generator Availability Diesel Generator Availability 1.

During any period when one diesel 1.

When it is determined that one generator is inoperable, continued diesel generator is inoperable, the reactor operation is permissible following requirements shall be met.

only during the succeeding seven days unless such diesel generator is a.

Immediately and daily sooner made operable, provided that thereafter, the redundant the operable diesel generator and diesel generator shall be its associated LPCI, Core Spray, and verified to be OPERABLE.

RHR Gervice Water subsystems are

operable, the requirements of b.

Immediately and daily 4.5.F.1 and the remaining thereafter, the

LPCI, Core requirements of 3.9. A.1 are met. If Spray, and RHR Service Water l

these requirements cannot be met, subsystems associated with the the requirements of 3.5.F.2 shall be OPERABLE diesel generator met.

shall be verified to be

operable, c.

Within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> determine OPERABLE diesel generator is i

not inoperable due to common l

cause

failure, or perform Surveillance 4.9.A.2.a.l.

d.

Within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> and every 72 i

hours thereafter, the OPERABLE l

diesel generator shall be I

demonstrated to be OPERABLE if the inoperable diesel generator is not sooner declared OPERABLE.

Amendment No. 35,95,145,152,175

-120-

1 LIMITING CONDITIONS FOR OPERATION SURVEILIANCE REQUIREMENTS 3.5.F (cont'd.)

4.5.F (cont'd.)

2.

During any period when both diesel generators are inoperable, continued reactor operation is permissible l

only during the succeeding 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> unless one diesel generator is sooner made operable, provided that l

both LPCI subsystems, both Core l

Spray subsystems, and both RHR l

Eervice Water subsystems are l

operable and the remaining requirements of 3.9. A.1 are met. If this requirement cannot be met, an l

orderly shutdown shall be initiated and the reactor placed in the hot standby condition within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />, j

and in the cold shutdown condition within 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br />.

3.

Any combination of inoperable components in the LPCI, RHR Service Water, and Core Spray systems shall i

not defeat the capability of the I

remaining operable co.mponents to fulfill the cooling functions.

4.

When irradiated fuel is in the reactor vessel and the reactor is in the Cold Shutdown Condition, both core spray subsystems, both LPCI subsystems, and both RHR Service Water subsystems may be inoperable, provided no work is being done which has the potential for draining the reactor vessel.

Refueling requirements are as specified in Specification 3.10.F.

5.

With irradiated fuel in the reactor

vessel, one control rod drive housing may be open while the suppression chamber is completely l

drained provided that:

a.

The reactor vessel head is removed.

b.

The spent fuel pool gates are open and the fuel pool water level is maintained at a level 2 33 feet.

l c.

The condensate transfer system is operable and a l

minimum of 230,000 gallons of water is in the condensate storage tank.

l Amendment No. 38,97,152,175

-121-

1 i

i 3.5 MSJJ (cent'd) of service. ' Specification 3.5.F.4 provides that should this occur, no work will be performed on the primary system which could lead to draining the vessel. This work would include work on certain control rod drive components and recirculation system.

Thus, the specification precludes the events which could require core cooling.

Specification 3.5.F.5 recognizes that, concurrent with control rod drive maintenance during the refueling outage, it may be'necessary to drain the suppression chamber for maintenance or for the inspection required by Specification 4.7.A.2.h.

In this case, if excessive control rod housing leakage occurred, three levels of protection against loss of core cooling would exist. First, a special flange would be used to stop the leak.

Second, sufficient inventory of water is maintained to provide, under worst case leak conditions, approximately 60 minutes of core cooling while attempts to secure the leak are made. This inventory includes water in the reactor well, spent fuel pool, and condensate storage tank.

If a leak should occur, manually operated valves in the condensate transfer system can be opened to supply either the Core Spray System or the spent fuel pcol.

Third, aufficient inventory of water is l

maintained to permit the water which has drained from the vessel to fill the torus to a level above the Core Spray and 1.PCI suction strainers. These systems could then recycle the water to the vessel.

Since the system cannot be pressurized during refueling, the potential need for core flooding only exists and the specified combination of the Core Spray or the LPCI subsystems can provide this.

The remaining requiremects of 3.9 A.1 ensures that highly reliable and diverse power sources remain with one diesel generator inoperable. It is necessary to verify that the required off-site sources are available and capable of supplying power to the j

emergency buses, and that loss of voltage and undervoltage relay circuits associated with the emergency buses are operable.

For a detailed explanation of' the 4.5.F.1 requirements see the BASES Section 4.5 on page 131 of these Technical Specifications.

This specification also provides for the highly unlikely case that both diesel generators are found to be inoperable. With two Diesel Generators (DCs) inoperable, there are no remaining standby AC sources.

Thus, with an as,sumed loss of offsite electrical power, there are no standby AC sources available to power the minimum required ESF functions.

Since offsite electrical power is the only source of AC power for the majority of ESF ' equipment at this level of degradation, the risk associated with continued operation for a very short time could be less than that associated with an immediate controlled shutdown.

Since any inadvertent unit generator trip could result in a total loss of offsite AC power, however, the time allowed for continued operation is severely restricted. The intent here is to avoid the risk associated with an immediate controlled shutdown and to minimize the risk associated with this level of degradation.

According to Regulatory Guide 1.93, with both DCs inoperable, operation may continue for a period that should not exceed 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br />.

If the Diesel Generators cannot be restored to OPERABLE status within the 2 hour2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> completion time, the unit must be brought to a MODE in which the LCO does not apply.

l To achieve this status, the unit must be in the HOT STANDBY CONDITION within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />, and in the COLD CG:iDITION within 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br />. The allowed completion times are reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems. This will be accomplished while the two off-site sources of power required by Specification 3.9.A.1 are available.

C.

Maintenance of Filled Discharme Pioe If the discharge piping of the Core Spray, LPCI, HPCI, and RCIC systems are not filled, a water hammer can develop in this piping when the pump and/or pumps are started.

If a water hammer were to occur at the time at which the system were

(

required, the system would still perform its design functions. However, to minimize l

damage to the discharge piping and to ensure added margin in the operation of these I

systems, this Technical Specification requires the discharge lines to be filled whenever the system is in an operable condition.

Amendment No. 57,97,152,153,175

- 12'8 -

l

4.5 BASES Core and Containment Coolina Systems Surveillance Freauencigg The testing intervals for the core and containment cooling systems are based on j

industry practice, quantitative reliability analysis, judgement and practicality.

The core cooling systems have not been designed to be fully testable during i

operation. For example, in the case of the HPCI Systom, automatic initiation during j

power operation would result in pumping cold water 8 ato the reactor vessel, which is 4

not desirable.

Complete ADS testing during power operation causes.an undesirable j

loss-of-coolant inventory. To increase the avai? ability of the core and containment i

cooling systems, the components which make up the system; i.e.,

instrumentation, i

pumps, valves, etc., are tested frequently.

T' a pumps and motor operated injection valves are also tested each month to assure thnr operability. A simulated automatic

]

actuation test once each cycle combined w!th frequent tests of the pumps and injection valves is deemed to be adequate teiting of these systems.

1 When components and subsystems are out-of-service, overall core and containment j

cooling reliability is maintained by ved.fying the operability of the remaining l

equipment.

For routine out-of-service per'.ods caused by preventative maintenance, etc., the operability of other systems end cocoonents will be verified as given in the Technical Specifications. However, if a failure or design deficiency caused by outage, then a demonstration of operability may be needed to assure that a generic problem does not exist.

For example, if an out-of-service period were caused by j

failure of a pump to deliver rated espacity due to a design deficiency, the other j

pumps of this type might be subjected to a flow rate test.

Verification of operability consists of verifying that the surveillance is current, and that other available informatilon does not indicate inoperability.

i i

The requirements of 4.5.F.1, assure that adequate core cooling equipment associated with the OPERABLE diesel generator is available.

This requirement provides confidence that diesel generator inoperabilities are investigated for common cause failures, regardless of how long the diesel generator inoperability exists.

The requirements of 4.5.F.1, provides an allowance to avoid unnecessary testing of l

OPERABLE diesel generators. If it can be determined that the cause of the inoperable diesel generator does not exist on the OPERABLE diesel generator, then Surveillance Requirement 4.9.A.2.a.1, does not have to be performed.

If the cause of i

inoperability exists on the other diesel generator, they are both declared inoperable and LCO 3.5.F.2 is entered. Once the failure is repaired, a common cause failure no

{

longer exists, the required action of 3.5.F.2 is satisfied.

If the cause of the i

initial inoperable diesel generator cannot be confirmed not to exist on the OPERABLE l

diesel generator, performance of Surveillance Requirement 4.9. A.2.a.1 suffices to provide assurance of continued OPERABILITY of that diesel generator.

The completion time of 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> for common cause is intended to allow the operator 1

time to evaluate any common failure failures.

The LCO completion times of 7 days for one inoperable diesel generator, 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> for demonstrating the redundant diesel generator, and 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> for two inoperable diesel j

generators, begins on the discovery (declaration) that an inoperable diesel 1

generator (s) exists. This information is provided to ensure that consistency among operator 9 is utilized concerning the entrance and completion of Surveillance Requirement 4.5.F.1.

l Demonstration of the diesel generator to be OPERABLE can be achieved by the j

performance of Surveillance Requirement 4.9. A.2.a.1, or 4.). A.2.a.2.

Amendment No. 15,166,152,175

-131-

LIMITING CONDITIONS FOR OPERATION SURVEILLANCE REOUIREMENTS 3.9.B 4.9 A.

(cont'd)

B.

Oneration with Inonerable Eauinment Whenever the reactor is in Run Mode or Startup Mode with the reactor not in a Cold Condition, the availabil-ity of electric power shall be as specified in 3.9.A.1, except as specified in 3.9.B.1.

1.

Incomina Power c.

From and after the date incoming power is not available from a 4

startup or emergency transformer, continued reactor operation is i

permissibis under this condition for l

seven days. During this period, the 3

two diesel generators and associated j

l critical buses must be verified to i

be operable, b.

From and after the date that incoming power is not available from both start-up and emergency j

transformers (i.e.,

both failed),

l continued operation is permissible, i

only during the succeeding 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> unless one power source is sooner made operable, provided the two diesel generators and associated critical buses are verified to be

operable, and all core and containment cooling systems are operable.

If this requirement j

cannot be met, an orderly shutdown shall be initiated and the reactor i

placed in the cold shutdown condition within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

i I

Amendment No. S0, S2,82,10':,122,156,175

-192-

LIMITING CONDITIONS FOR OPERATION SURVEITlANCE RROUTRFRFETS 3.9.B (cant'd.)

4.9.A (cont'd.)

2.

Diesel Generators 2.

Diesel Generatort a.

From and after the date that one of a.

1.

Each diesel generator shall be the diesel generators or an started manually and loaded to associated critical bus is made or not less than 50% of rated found to be inoperable for any load for no less than 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> reason, continued reactor operation once each month to demonstrate is permissible in accordance with operational readiness.

A Specification 3.5.F.1 if the modified DG start involving remaining requirements of idling and gradual Specification 3.9. A.1 are satisfied, acceleration to synchronous speed may be used as b.

From and after the date that both recommended by the diesel generators are made or found aanufaeturer.

This to be inaperable for any reason, Surveillance Requirement may continued reactor operation is be preceded with an engine permissible only during the prelube period prior to succeeding 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> in accordance starting and followed by j

a with Specification 3.5.F.2 if the warmup period prior to l

remaining requirements of loading.

Specification 3.9. A.1 are satisfied.

When modified start procedures c.

From and after the date that one of are not

used, the

time, l

the diesel generators or associated

voltage, and frequency

)

l critical buses and either the requirements of 4.9.A.2.a.2 i

emergency or startup transformer must be met.

The performance power source are made or found to be of Surveillance Requirement inoperable for any reason, continued 4.9.A.2.a.2 satisfies this reactor operation is permissible Surveillance Requirement.

only during the succeeding 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> unless such diesel generator or During this monthly generator power source is sooner made test the diesel generator

operable, provided the other starting air compressor shall l

off-site source, startup transformer be checked for operation and or emergency transformer is its abilit to recharge air available and capable of receivers. y The operation of automatically supplyin the fuel oil transfer pumps 4160V critical buses, g power to the l

and fuel oil day tank level switches shall be d.

From and after the date that the demonstrated.

diesel fuel oil particulate concentration level defined in 2.

Each diesel generator shall be Surveillance Requirement 4.9.A.2.d started manually and loaded to cannot be met, restore the diesel not less than 50% of rated fuel oil total particulate load for no less than 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> concentration to within the every six months to acceptable limits within 7 days, or demonstrate operational declare the associated Diesel readiness.

Generator inoperable.

During this generator test the e.

From and after the date that the new diesel generator starting air diesel fuel oil properties defined compressor shall be checked in Surveillance Requirement for operation and its ability 4.9.A.2.e.2 cannot be met, restore to recharge air receivers.

i the stored diesel fuel oil The operation of the fuel oil properties to within acceptable transfer pumps and fuel oil limits within 30 days, or declare day tank level switches shall the associated Diesel Generator be demonstrated and the diesel inoperable, starting time to reach rated voltage and frequency shall be logged.

This Surveillance l

Requirement may be preceded l

with an engine prelube period prior to starting.

The performance of this Surveillance Requirement i

satisfies the requirements 4.9.A.2 a.l.

r Amendment No. 95,1M,115,122,155,175

-193-

LIMITING CONDITIONS FOR OPERATION SURVEILIANCE REQUIREMENTS 3.9.B (cont'd.)

4.9.A (cont'd.)

b.

Once every 18 months the condition under which the diesel generator is required will be simulated and a test conducted to demonstrate that it will start and accept the emergency load within the specified time sequence. The results shall be logged.

c.

Once a month the quantity of diesel fuel available shall be logged, d.

At least once per month the particulate concentration level'of the Diesel Fuel Oil Storage Tanks shall be determined in accordance with ASTM D2276-1989, Method A.

The total particulate concentration in the diesel fuel oil storage tanks, shall have a limit of less than 10 mg/ liter when checked in accordance with ASTM-D2276-1989, Method A.

e.

New fuel oil sampling will be performed in accordance with ASTM-D4057-1989 within 30 days upon delivery. Fuel oil testing will be performed in accordance with the following:

1.

By verifying in accordance with the tests specified in ASTM-D975-1989a prior

,to addition to the storage tanks that the sample has:

'a)

An API Gravity of within O.3 degrees at 60*F, or a specific gravity of within 0.0016 at 60/60'F, s

Amendment No. 175

-193a-l

3.9 BASES l

Tlie general objective of this Specification is to assure an adequate source of electsical power to operate the auxiliaries during plant operation, to operate facilities to cool and lubricate the plant during shutdown and to operate the engineered safeguards following the accident.

There are three sources of ac j

electrical energy available; namely, the startup transformer, the emergency transformer and two diesel generators. The de supply is required for switch gear and engineered safety feature systems.

This supply consists of two 125V DC and two i

250V DC batteries and their related chargers.

Specification 3.9. A states the i

required availability of ac and de power; i.e.,

active off-site ac sources and the j

required amount of on site ac and de sources.

Auxiliary power for CNS is supplied from the startup transformer and the normal transformer.

Both of these transformers are sized to carry 100% of the station auxiliary load. The emergency transformer is about one third the size of these two transformers and is equal in size to both emergency diesel generators.

l The startup transformer and the emergency transformers are the offsite power sources.

Their voltage is monitored by undervoltage relays which provide low voltage l

protection for the emergency buses.

Whenever the voltage setpoint and time delay limit for the undervoltage relays have been exceeded, the emergency buses are i

automatically disconnected from the offsite power source.

I If the startup or emergency transformer is lost, the unit can continue to operate 1

since the unit auxiliary transformer is in service, and the emergency or startup transformer and the diesels are available.

If both the startup and emergency transformers become inoperable, the power level must be reduced to a value where by the unit can safely reject the load and continue to supply auxiliary electric power to the station.

In the normal mode of operation, the startup and emergency transformers are energized and two diesel generators are operable. One diesel generator may be allowed out of service based on the availability of power from the startup transformer and the fact that one diesel generator carries sufficient engineered safeguards equipment to cover all line breaks.

With the startup transformer and one diesel generator out of l service, the off site transmission line corresponding to the emergency transformer must be available. Upon the loss of one on-site and one off-site power source, power would be available from the other immediate off-site power source and the two operable on site diesels to carry sufficient engineered safeguards equipment to cover all breaks.

In addition to these two power sources, removal of the Isolated Phase Bus " quick" disconnect links would allow backfeed of power through the main transformer to the unit auxiliary transformer and provide power to carry the full station auxiliary load.

The time required to perform this operation is comparable to the time the reactor could remain on RCIC operation before controlled depressurization need be initiated.

'TheconditiondefinedinSpecification3.9.B.2.disenteredasaresultoffailurol to meet the acceptance criterion for particulates. Normally, trending of particulate levels allows sufficient time to correct high particulate levels prior to reaching the limit of acceptability. Poor sampling procedures (bottom sampling), contaminated sampling equipment, and errors in laboratory analysis can produce failures that do not follow a trend. Since the presence of particulate does not mean failure of the fuel to burn properly in the diesel engine, the particulate concentration is unlikely to change significantly between Surveillance Frequency intervals, and proper engine performance has been recently demonstrated (within 1 month), it is prudent to allow a seven day period for corrective action prior to declaring the associated DC inoperable. The 7 day completion time allows for further evaluation, resampling, and re-analysis of the DC fuel oil.

Amendment No. 62,1^5,122,120,156,15 5,175 -199-

3.9 M (cont'd)

TheconditiondefinedinSpecification3.9.B.2.eisenteredasaresultoffailurel to meet the acceptance criteria for new diesel fuel properties. A period of 30 days is allowed for restoring the stored diesel fuel oil properties. This period provides sufficient time to test the stored fuel oil to determine that the new fuel oil, when mixed with previously stored fuel oil, remains acceptable, or to restore the stored fuel oil properties.

This restoration may involve feed and bleed procedures, filtering, or a combination of these procedures.

Even if a DG start and load was required during this time interval and the fuel properties were outside the limits, l

there is high likelihood that the DG would still be capable of performing its l

intended function.

The D.C. Power Systems allowable out-of-service time is based on NRC Regulatory Guide 1.93, " Availability of Electrical Power Sources."

The two-hour limit to restore battery operability minimizes reactor operation while in a degraded condition.

4.9 M The monthly test of the diesel generator is conducted to check for equipment failures i

and deterioration.

Testing is conducted up to equilibrium operating conditions to demonstrate proper operation at these conditions.

The diesel generator will be manually started,. synchronized and connected to the bus and load picked up.

The diesel generator should be loaded to at least 50% of rated load to prevent fouling of the engine..It is expected that the diesel generator will be run for at least two hours. Diesel generator experience at other generating stations indicates that the testing frequency is adequate and provides a high reliability of operation should the system be required.

l Surveillance Requirements 4.9. A.2.a.1 and 4.9. A.2.a.2 help to ensure the availability j

of the standby electrical power supply to mitigate Design Basis Accidents and l'

transients and maintain the unit in a safe shutdown condition. Testing is conducted up to equilibrium operating conditions to demonstrate proper operation at these conditions.

The diesel generator will be manually started, synchronized and connected to the bus and load picked up.

The diesel generator should be loaded to i

at least 50% of rated load to prevent fouling of the engine. It is expected that the diesel generator will be run for at least two hours.

l To minimize the wear on moving parts that do not get lubricated when the engine is not running, Surveillance Requirements 4.9. A.2.a.1 and 4.9. A.2.a.2 allows for a engine prelube period.

In addition, 4.9. A.2.a.1 allows a warmup period prior to loading as an additional measure to minimize wear.

For the purposes of this testing, the DGs are started from standby conditions.

Standby conditions for a DG sean that the diesel engine coolant and oil are being continuously circulated and temperature is being maintained consistent with manufacturer recomumendations.

l In order to reduce the stress and wear on the diesel engines, some manufacturers l

recommend a modified start in which the starting speed of DGs is limited, warmup is limited to this lower speed, and the DGs are gradually accelerated to synchronous i

l speed prior to loading. This is the intent of 4,9.A.2.a.1.

Each diesel generator has two air compressors and two air receivers for starting.

l It is expected that the air compressors will run only infrequently. During the l

monthly check of the diesel generator, each receiver in each set of receivers will be drawn down below the point at which the corresponding compressor automatically

[

starts to check operation and the ability of the compressors to recharge the l

receivers.

Diesel fuel oil degradation during long term storage shows up as an increase in l

particulate, mostly due to oxidation. The presence of particulate does not mean that the diesel fuel oil will not burn properly in the diesel engine. The particulate can Amendment No. 80,S2,95,104,156,155,175

-200-

4.9 RASES (cont'd) 1 cause fouling of filters and fuel oil injection equipment, however, which can cause engine failure.

Particulate concentrations shall be determined in accordance with ASTM D2276-1989, Method A.

The frequency of this test takes into consideration fuel oil degradation trends that indicate that particulate concentration is unlikely to change significantly between frequency intervals.

l The tests for diesel fuel oil properties defined in Surveillance Requirement (SR) 4.9 A.2.e.1 are a means of determining whether new diesel fuel oil is of theappropriate grade and has not been contaminated with substances that would have an immediate detrimental impact on diesel engine combustion.

If results from the test defined in SR 4.9. A.2.e.1 are within acceptable limits, the diesel fuel oil may be added to the storage tanks without concern for contaminating the entire volume of l

diesel fuel oil in the storage tanks.

These tests are to be conducted prior to adding the new diesel fuel oil to the storage tanks, but in no case is the time between receipt of new diesel fuel oil and conducting the tests to exceed on month.

Within one month following the initial new diesel fuel oil sample (SR 4.9.A.2.e.1),

the new diesel fuel oil is analyzed to establish that the remaining fuel oil properties defined in SR 4.9.A.2.e.2 are met when tested in accordance with ASTM-D975-1989a.

The one month period is acceptable because the diesel fuel oil properties of interest (SR 4.9. A.2.e.2), even if they were not within stated limits, would not have an immediate effect on Diesel Generator operation. This surveillance ensures the continued availability of high quality diesel fuel oil for the Diesel Generators.

Microbiological fouling is a major cause of diesel fuel oil degradation. There are numerous bacteria that can grow in diesel fuel oil storage tanks and cause fouling, but all must have a water environment in order to survive. Frequent checking for and removal of accumulated water minimizes fouling and provides data regarding the water tight integrity of the fuel oil system.

This is the most effective means of controlling microbiological fouling.

In addition, it eliminates the potential for water entrainment in the fuel oil during DG operation. Water may come from any of several sources, including condensation, ground water, rain water, contaminated fuel oil, and from breakdown of the fuel oil bacteria. This surveillance requirement is for preventive maintenance.

The presence of water does not necessarily represent failure of this SR, provided the accumulated water is removed.

If the presence of water is detected by Surveillance Requirement 4.9. A.2.f, the removal of water to the extent practical from the diesel fuel oil day tanks must be accomplished within two days of the discovery of the water.

If the presence of water detected by Surveillance Requirement 4.9. A.2.g is greater than a nominal value of four inches from the bottom of the diesel fuel oil storage tanks, then a maximum of seven days is allowed for removal of the water.

The nominal four inch value is a function of the water that can be practically removed from the diesel fuel oil storage tanks.

The diesel generator fuel consumption rate at full load is approximately 275 gallons per hour.

Thus, the monthly load test of the diesel generators will test the operation and the ability of the fuel oil transfer pumps to refill the day tank and will check the operation of these pumps from the emergency source.

The test of the diesel generator during the refueling outage will be more comprehensive in that it will functionally test the system; i.e, it will check diesel generator starting and closure of diesel generator breaker and sequencing of load on the diesel generator.

The diesel generator will be started by simulation of a loss-of-coolant accident. In addition, an undervoltage condition will be imposed to simulate a loss of off-site power.

Periodic tests between refueling outages verify the ability of the diesel generator to run at full load and the core and containment cooling pumps to deliver full flow.

Periodic testing of the various components, plus a functional test once a cycle, is sufficient to maintain adequate reliability.

Amendment No. 80,10':,154,155,175 201-

i i

4.9 R&EEE (cont'd)

I 1

When it is determined that some auxiliary electrical equipment is out of service, the increased surveillance required in Section 4.5.F is deemed adequate to provide i

assurance that the remaining equipment will be operable.

i The surveillance requirements for demonstrating the OPERABILITY of the unit batteries are in accordance with the recommendations of NRC Regulatory Guide 1.129, "Mainte-2 nance Testing and Replacement of Large Laad Storage Batteries for Nuclear

]

Powerplants," dated February 1978 and IEEE Std 450-1987, "IEEE Recommended Practice for Maintenance, Testing, and Replacement of Large Lead Storage Batteries for j

Generating Stations and Substations."

i i

Once each operating cycle, during shutdown, either a service test or performance discharge;is performed on the 125 V and the 250 V batteries. The performance dis-i charge test is performed in lieu of the service test when a battery shows signs of degradation. Degradation is *ndicated when battery capacity drops more than 10% of rated capacity from its average on previous performance tests, or is below 90% of the manufacturer's rating.

Replacement criteria for 125V and 250V station batteries is 580% capacity factor and the maximum time for replacement should be one (1) year. This will assure that the

]

remaining battery capacity is adequate to meet load requirements.

\\

i Verifying average electrolyte temperature above the minimum for which the battery was sized, total battery terminal voltage on float charge, connection resistance values

~

and the performance of battery service and discharge tests ensures the effectiveness of the charging system, the ability of the battery to handle high discharge rates and-compares the battery capacity at that time with the rated capacity.

a Due to the physical configuration of the CNS batteries, two different inter-cell I

connaction resistance values are surveilled.

Each division of the 125V and 250V batteries are configured into two racks, coupled with inter-rack connectors. There-fore, separate resistance values are provided for both the inter-cell (copper bar type) and inter-rack (cable type) connectors to demonstrate acceptability of battery connection resistance.

Table 3.9.1 specifies the normal limits for each designated pilot cell and each connected cell for electrolyte level, float voltage and specific gravity. The limits for the designated pilot cells ensure that their float voltage and specific gravity are characteristic of a charged cell with adequate capacity, and ensures the OPERABILITY and capability of the battery.

Operation with a battery cell's parameter outside the normal limit but within the allowable value specified in Table 3.9.1 is permitted for up to 7 days. During this 7-day period:

(1) the allowable values for electrolyte level ensures no physical damage to the plates with an adequate electron transfer capability; (2) the allowable value for the average specific gravity of all the cells, not more than 0.020 below the manufacturer's recommended full charge specific gravity, ensures that the decrease in rating will be less than the safety margin provided in sizing; (3) the allowable value for an individual cell's specific gravity ensures that an individual cell's specific gravity will not be more than 0.020 below the average specific gravity of all connected cells and that the overall capability of the battery will be maintained within an acceptable limit; and (4) the allowable value for an indivi-dual cell's float voltage, greater than 2.10 volts, ensures the battery's capability to perform its design function.

The Reactor Protection System (RPS) is equipped with a seismically qualified, Class 1E power monitoring system.

This system consists of eight Electrical Pro-tection Assemblies (EPA) which isolate the power sources from the RPS if the input voltage and frequency are not within limits sper.ified for safe system operation.

Isolation of RPS power causes that RPS division co fail safe.

Amendment No. 80,10t,156,155,175 202-