ML20127M425

From kanterella
Jump to navigation Jump to search
Plant Designer Operational Support Info Plan for ABB-C-E Sys 80+
ML20127M425
Person / Time
Site: 05200002
Issue date: 01/31/1993
From:
ABB COMBUSTION ENGINEERING NUCLEAR FUEL (FORMERLY, ASEA BROWN BOVERI, INC.
To:
Shared Package
ML20127M408 List:
References
PROC-930131, NUDOCS 9301280202
Download: ML20127M425 (565)


Text

{{#Wiki_filter:__ _ _. . _ . _ _ . . _ _ _ _ _ _ . _ _ _ _ . _ . . . _ _ _ . . _ _ . _ . _ . - . _ _ . _ _ _ . _ . _ . - _ . . 7___ _ 4 , J i  : 4 4 $ 4 1 i PREUMINARY 1 h

i F

4 t PLANT DESIONER'S 4 OPERATIONAL SUPPORT INFORMATION PLAN For the ABB CE SYSTEM 80+" 4 January 1993 . ABECE SWIEM 80+ 9301280202 930118' PDR ADOCK 05200002 A PDR

                                                                                                       , c.                ,.--....._:._.;.
                                                                                                                                                              ~ . . . . . , . . . . . - . _ - . - . . ,

l } i } i N .IMitMBX l PIANT DESIGNER'S i OPERATIONAL SUPPORT INFORMATION (OSI) PIAN For the ABH CE SYSTEM 80+" l , I ! PURPOSE } . I 1 This plan describes the System 80+ plant designer's program for developing operational support information in a time phased fashion from design through construction to plant j operations and conveying this information to a plant owner / operator. l SCOPE l The plant designer's OSI Plan specifies the categories ofinformation to be developed during the appropriate phases of design, procurement, construction, startup, and initial operation. It also identifies a hierarchial structure of the information that will be developed. The ) elements of the OSI with its information hierarchy are shown in Figure 1. ! The information hierarchy includes: l l PLANS- Plans are the highest level documents. They establish goals and objectives for i the development and implementation of an activity. A plan also outlines a ! time phased sequence to be followed to successfully implement a program. ! GUIDES - Guides provide specific design information, requirements and bases necessary

for implementing a designated portion or aspect of plant operations.

l GUIDELINES Guidelines provide the equipment specific sequences, actions, or guidance f necessary to execute a process, perform a function, or manipulate equipment

in accordance with the intentions of the designer and within the bounds of the
design bases. These form the basis for development of detailed procedures.

! PROCEDURES --Procedures are the actual step-by-step instructior.s that implement l procedure guidelines in an integrated fashion for a specific application. L Procedures are the terminallevel documents in the OSI program and are the end product developed and used by the owner / operator. - j Elements of the OSI are expected to be developed to suppon design certification of the l System 80+ plant. Other elements _would be developed during the detailed design process L which may run concurrently with and continue after design certification.' Additional i 1 -1 . ABB42 SEEM 80+ l e

       , - . . . , . , . _ . . , , ,      . - ,      , _ , . . ,        .,,c, _ . , ~ . - . _ _ . ,        , , , ,    -m . - _ ~ . . . - .    . . . , , - - - . . , . . . . - - . . - . . . . . . _ . - - , , , ,

PREIJMINARY f elements would be developed only after an operator applicant files a license application. In general, each element of the OSI would be updated, as required, as the detailed design progresses, equipment and components are speciFed, and as-built information becomes available. The plant designer's OSI is consistent with and complements the infonnation provided in regulatory documents, industry standards, and general guidance used by a plant i owner / operator to develop and execute an acceptable plant operations program. The OSI is based on guidance provided in the NPOC Strategic Plan and documents issued by INPO, i i NUMARC, and EPRI. The OSI program does not specify the scope or content of a plant owner / operator's operations program. It does, however, insure that the plant designer's guidance and insights, as well as, operational constraints of the design are transferred to the l plant owner / operator. OSI PROGRAM The plant designer's OSI program spans the period from initial design of the System 80+ plant to initial operation. l Early in the design process, higher level and less detailed information is required to relate the design bases to operational require' 1ents. Plan and guide level documents developed by the designers are sufficient to supp st this requirement. Guidelines are Senerally developed later in the detailed engineering design phase and are completed when equipment specifications, system parameters, and plant arrangernents are essentially final. . ! Detailed procedures are prepared by the plant owner / operator during the construction and l preoperational phases. The detailed procedures must include the guidance, insights, and operational constraints provided by the plant designer. Each OSI category identified in Figure 1 has as its basis a plan that describes information to be provided and interfaces to other plans, programs, or operations related elements. The topical elements presently identified to be part of each information plan are outlined in i Appendices A through F. The content and format of the guides, procedure guidelines and procedures developed as part of the OSI program will be based on the guidance provided in regulatory directives and industry standards. This will include the development of writer's guides in those areas where they are appropriate and/or are required. 2- ABIKE SYSTEM 80+ i I i-t

PREI.IMINARY ECilEDUIE

 'Ihc initial plan for each category of OSI is expected to be developed prior to Final Design Approval (FDA). The plans will subsequently be updated, as required. Specific time flames for development of information for each element will reflect the need for the information.

l l l l l

                                                                                              ]

3- ABIRT, SWIM 80+

PREI,IMINARJ APPEND _IX_A f PLANT DESIGNER'S CONSTRUcrION INFORMATION PIAN FOR TIIE SYSTEM 80+ Tonical Oittlhtt AREAS ADDRESSED

1. Equipment Delivery, Receipt, Acceptance and Storage
2. Code Compliance (including code stamps)
3. Component and System Installations
4. Walkdowns
5. Construction Verification
6. System Turnover To Startup Engineering
7. Preventive Maintenance During Construction
8. Field Modifications
  • ITAAC Considerations
  • Equipment Failures
  • Spare Parts Qualification
  • Standardization Preservation
9. Equipment Protection Program
10. Surveillances and Inspections During Construction
11. Spare Parts Program
  - A                                                          ABBCE SYSint 80+

PREIJMINARY APPENDIX A (Continued) PIANT DESIGNER'S CONSTRUCTION INFORMATION PIAN FOR THE SYSTEM 80+ Interfaces e Plant Information System (Plant Design Data Base)

  • Adverse Systems Interactions (ASI) e Vendor Documents for Equipment l

s k i f I i i l 1 i i i i l I i i i l i-l I

       - A                                                              Assa snmtM m+ .

l i - --. .- . . . . . _ . - ._ . - -

PREIJMINARY APPENDIX B PIANT DESIGNER'S SECURITY INFORMATION PIAN

  • FOR Tile SYSTEM 80+

Tonical Outline AREAS ADDRESSED

1. Physical Arrangements.
  • Protected Area Access
  • Design Provisions for Physical Security e Equipment Separation .
  • Security Zones e Detection ard Alarm Systems
2. Secured Electrical Power
3. Site Communications
4. Security Illumination
5. Qualification Testing of Facilities Interfaces
  • Site Emergency Planning
  • Surveillance, inspections and Maintenance of Security Systems
  • Security Training
  • PRA Insights to Security
  • Security related information may have restricted distribution.
.A3                                                                    ABB CE SE*IM 80+
                                                                               ,m_ a____

1 l r i PRf:IJMINARY f. i ! APPENDIX C i ! t PIANT DESIGNER'S

STARTUP INFORMATION PIAN ,

FOR THE SYSTEM 80+ e i s Toolcal Outline P AREAS ADDRESSED

1. Startup Phases
  • Turnover From Construction i e Pre requisite Testing i e Pre operational Testing
e Fuel Load i

e Post Fuel Load Testing i e Turnover to Operations i l 2. Regulatory Requirements with Cont.aitments

  • Commitments Made in Response to Regulatory Review l

l 3. Industry Standards e Provisions For Code Inspections l 4 Division of Responsibilities For Startup ,

5. Conduct of Testing
  • Test Results Review and Approval e Modifications

!

  • Field, Design and Temporary Modifications
  • Equipment Failures o Adverse System Interactions (ASI)

.

  • Surveillance, Inspection and Maintenance ,

l e ITAAC Considerations ! - A-4 AB5G SWIM 80+ 1

                                                  ,         ,,..,e---    -
                                                                             -e  e      -   ~  - . . - , . . . , -- - -              - , , e r nr,.,.-- ,--

1 i j I l PRE!JMINARY J APPENDIX C (Continued)

PLANT DESIGNER'S i STARTUP INFORMATION PLAN FOR THE SYSTEM 80+

i j AREAS ADDRESSED

6. Testing Sequences
7. Test Guides, Guidelines, and Procedures
I

, o Component Testing e Integrated System Testing , o Pre Service Inspection (PSI)

8. Special Test Equipment

! Interfaces 1 !

  • Operating Procedures l e Maintenance Procedures i e Technical Specifications i e Control Room Simulator i e Plant Information System (Plant Design Data Base) j- e PRA Insights e Design Reliability Assurance Program (DRAP) e Operational Reliability Assurance Program (ORAF) l i

J t t 1 4 A

                              -A5                                                                   ,

ABBG SnM 80+ l

  . . . . . . _ -        . _ - - _ . _    _ - - _ .      - ~  .

i i i 4 fgf_JJMINARY i i APPENDIX D 4 , PIANT DESIGNER'S

OPERATIONS INFORMATION PIAN l FOR THE SYSTEM 80+

1 i I i ! Toolcal Outline j i  ! i l' AREAS ADDRESSED l 1. Staffing Analysis e Shift Staffing < e Operating Crew Staffing 1 .

  • Main Control Room Staffing
  • Remote Shutdown Panel Staffing ,
2. Operating Guides, Guidelines and Procedures

$ e Normal Operations l e Shutdown Operations e Abnormal Operations e Emergency Operations , o Severe Accident Evolutions e Surveillances

  • Administrative Interfaces
  • Adverse System Interactions
  • ITAAC Considerations e Technical Specifications
  • Training and Control Room Simulator e Human Factors Program Plan e Plant Information System (Plant Design Data Base) o PRA Insights e Plant Designer's Operational Guidance, Insights, and Constraints-

. - A ABB-CE SMEM 80+ j

  . . - .       _ .     .     .          _ = _ _ _ - _ - . -           . . - . .      .-     .    . . - - _ _ . -                               - - - -

4 ~ IRFLIMINARY 1 APPENDIX E l PIANT DESIGNER'S i MAINTENANCE INFORMATION PIAN 4 FOR THE SYSTEM 80+ Toolcal On11Lqt l 4 I i

AREAS ADDRESSED
1. Staffing Analysis e Shift Staffing -

e Operating Crew Staffing e Main Control Room Staffing .

  • Remote Shutdown Panel Staffing
2. Maintenance Guides, Guidelines and Procedures
  • In Service Inspections
  • Surveillance and Inspections
e Preventive Maintenance
o Corrective Maintenance

- 3. Equipment Manuals

4. Conduct of Maintenance l
  • Design Modifications i e Equipment Failures l e Spare Parts l- e Temporary Modifications
5. Special Tools and Equipment List
6. Material Receipt, inspection, Handling and Storage of Components and Parts.
7. Lubricants and Preservatives
                    . A                                                                                            ABBC SWIEM 80+
          -v vr                 g- r r ,                      v -

y- y- --e, new w -- = - , - - - < -- prrw y= n --

PRFJJMINARY APPENDIX E (Continued) PLANT DESIGNER'S MAINTENANCE INFORMATION PIAN FOR TIIE SYSTEM 80+

8. Outage Management Insights Interfaces e Reliability Centered Maintenance (Reliability Assurance Program) e ALARA Program o Training (including Component Mockups, as applicable) e Technical Specifications e Plant Infonnation System (iiant Design Data Base)
  • Design Reliability Assurance Program (DRAP) o Operational Reliability Assurance Program (ORAP) e Human Factors Program Plan i 'l 5

l i i 1

 - A                                                              ABECE SnMt 80+

l, PREIJMINARY a APPENDIX F t PLANT DESIGNER'S i TRAINING INFORMATION PIAN

FOR THE SYSTEM 80+

4 Toolcal Outline i ) AREAS ADDRESSlH1 1 . 1. Training Guides, Guidelines, and Procedures o Operations Staff

e Maintenance Staff
,                                    o Startup Staff                                                                                     .

l

  • Technical Support Staff

, 2. Training Aids and Facilities i e Training Areas

e Control Room Simulator
e Component and System Mockups
3. Training Staff l
4. Simulator Verification Program 5, Training Materials
  • Vendor Manuals o System Descriptions Interfaces
  • Interfaces To All Aspects of Plant Startup and Operations e Plant Information System (Plant Design Data Base) 1
             - A                                                                                       ABB CE SYFIEM 80+
                                                   -,e--                                                 . v.,e     m--          * "+
  . - .- - -~ . - . . -                                   .. .. -- ~. .-.. --...              - -...-.          - .--.~..- - - - .- -- ..-.. -.                               . . - . - - - . . -             . .

4 FIGURE 1 1 PROCESS FOR DEVELOPMENT QE , i DPERATIONAL SUPPORT INFORMATION i , BASES FOR OSI PROGRAM

                                                                                                                                                                         . Funcdonal Requiremerits OSI PROGRAM PLAN                                                    = C-gaSystem Descdpions e Operations and Maintenance Characteristics e Relialility Assessments
                                                                                                                                                                         = Pnkablinic Rhk Amessnew (FRA)
                                                                                                                                                                         . Performance Testing'
I I I I I I ,

CONSTRUCTION TEST OPERATING MAINTENANCE TRAINING SECURITY INFORMATION IFFORMATION . INFORMATION . INFORMATION PROGRAM INFORMATION . PLAN 1 PIAN PIAN PIAN INFORMATION. PLAN PIAN

                  - DESIGN -

CERTIFICATION' CONSTRUCriON TEST ' OPERATING MAINTENANCE TRAINING SECURITY

                                                                 . GUD7?T             GUIDES                   GUIDES                                GUIDES      PROGRAM                             GUIDES GUIDES J

FIRST-OF-A-KIND l ENGINEERING

  • CONSTRUCTION TEST OPERATING - MAINTENANCE PIANT

. INSTAL 1ATION . PROCEDURE PROCEDURE PROCEDURE SPECIFIC GUIDELINES ' GUIDELINES GUIDELINES GUIDELINES TRAINING PROGRAM l GUIDELINES 2 I l CONSTRUCIION AND i START-UP PHASE

  • CONSTRUCTION ~ DETAILED PIANP PLANT TRAINING SECURITY i
                                                          ~ INSTALIATION               TEST                   SPECIFIC                               SPECIFIC   MATERIALS                          PROCEDURES
;                                                           PROCEDURES .         . PROCEDURES               OPERATIONS                            MAINTENANCE  & SIMUIATOR

' PROCEDURES PROCEDURES VALIDATION PROCEDURES

  • APPROXIMATE PHASE WIIEN INFORMATION WOULD BE DEVELOPED i -- - - - - - - - - - _ - - - - - - _ - - - -

l i ATTACHMENT 4 SYSTEM 80+ EMERGENCY PROCEDURE GUIDELINES

  . . . - - -           . - - . - . - - - - - . -               - - - - - - - - ..--.- . - - - . - _ - -                               . - . - - - .... - - ~. - . ~ -

I i

              ' DESIGN ' DIFFERENCES IN SYSTEMS                                            DESIGN DIFFERENCES THAT AFFECT THE EPGs OR COMPONENTS SAFETY' INJECTION SYSTEM (SIS)'                                            THE SIS CONSISTS OF FOUR HIGH PRESSURE PUMPS WITH HIGHER SHUTOFF HEAD, (ALL' HIGH                       PRESSURE    NO          LOW               FLOW AND DIRECT VESSEL INJECTION. THESE PUMPS TAKE SUCTION ON IRWST PRESSURE PUMPS, IN CONTAINMENT                                              HENCE NO SWITCHING TO CONTAINMENT SUMPS IS REQUIRED. SINCE THERE ARE       _l
REFUELING i WATER STORAGE TANK) NO LPSI PUMPS, MO SWITCHING OF SUCTIONS, THE OPERATOR DOES NOT HAVE  !

(IRWST). TO VERIFY THE . FOLIDWING: RAS HAS OCCURRED, LPSI PUMPS HAVE SHUTDOWN AND PROPER HPSI PUMP FIDW DURING RECIRCULATION.

                                                                                                                                                                       -1 DUAL CONTAINMENT AND ANNULUS                                                IF CONTAINMENT SPRAY IS ACTUATED (OR CONTAINMENT PRESSURE IS ABOVE THE VENT SYSTEM.                                                                SETPOINT) THF OPERATOR MUST VERIFY THE ANNULUS VENT SYSTEM IS

- ENERGIZED AND OPERATING PROPERLY. , SAFETY DEPRESSURIZATION SYSTEM THE RDVs PROVIDE FEED AND BLEED COOLING CAPABILITIES. THE 9YSTEM WHEN f (SDS) CONSISTS OF RAPID INITIATED WILL QUICKLY REDUCE RCS ' PRESSURE SUCH THAT SAFETY INJECTION DEPRESSURIZATION VALVES (RDV) PUMPS CAN BE USED TO PROVIDE DECAY HEAT REMOVAL. CONTROL ROOM OPERATOR AND REACTOR COOLANT ' GASEOUS ACTION HAS BEEN ADCYD TO ENSURE THE RDVs ARE OPERATED ONLY WHEN I VENT SYSTEM.(RCGVS).- . JUSTIFIED. THE OPERATOR MUST INITIATE COOLING TO THE IRWST DURING THE l FEED' AND BLEED OPERATIONS. THE RCGVS IS USED THE SAME AS IN THE SYSTEM < 80 DESIGN.

                ?sLTERNATE AC SOURCE                                                        PROVIDE HELP DURING LOSS OF 'OFFSITE ' POWER (LOOP) AND STATION BLACKOUT (SDO) . THE OPERATOR ENSURES THE AAC STARTS AFTER A LOOP AND ENERGIZES THE PERMANENT NON-SAFETY BUSES.      IF EMERGENCY DIESEL FAILS TO START, THE OPERATOR CAN MANUALLY REALIGN THE AAC TO SUPPLY POWER TO ONE PERMANENT NON-SAFETY BUS AND ONE DIVISION OF VITAL AC BUSES.
              ' HYDROGEN IGNITORS                                                        . OPERATOR MUST ENERGIZE THE HYDROGEN IGNITORS WHENEVER CONTAINMENT            l
                                                                                          . HYDROGEN MONITORS INDICATE H2 CONCENTRATION IS ABOVE THE SETPOINT. THE IGNITORS GIVE A CONTROLLED SMAL'. BURN IN CONTAINMENT INSTEAD OF A           i LARGE BURN THAT CAN CHALLANGE CONTAINMENT DESIGN PRESSURE.                   I
                                                                                                                                                                       .I

! CONTAINMENT SPRAY'. THE OPERATOR MUST VERIFY 'CS PUMPS START ON ' SIAS. IF CONTAINMENT l ! PRESSURE IS BELOW THE SETPOINT THE OPERATOR MUST VERIFY THE SPRAY  ! [ HEADER ISOLATION VALVES ARE CIDSED. IF PRESSURE EXCEEDS SETPOINT THE-OPERATOR MUST VERIFY THE SPRAY HEADER VELVES ARE OPEN-

DESIGN, DIFFERENCES THAT.DO NOT.. USES TWO CENTRIFUGAL CHARGING PUMPS EACH HAS A HIGHER FIDW RATE THUS *
.              ' IMPACT EPGs OR OPERATOR ACTIONS                                            HIGHER TOTAL CHARGING FLOW. A LARGER PRESSURIZER TO RCS RATIO TO HELP
;                DIRECTLY                                                                   DURING TRANSIENTt.. A LARGER STEAM GENERATOR TO PROVIDE MORE SECONDARY MASS.TO HELP IN FEEDWATER. TRANSIENTS.

2

       . - -               - - .      .. .   .     .       . = . - . - .     - .          -.       .      .             .          ~ -

i J

                                               $5'
  • N of kc.bir rr e Update

{.SbnPTAs)asof10:30_EDTJuly_15, 1991: ]  ; i ' t i- ^ INSTRUCTIO*d STEP CONTINGENCY. STEP l' 1. VERIFY that all of'the 1.1 IF any Instruction ! following-criteria are Step 1: criteria _are-satisfied:- NOT verified,: THEN TRIP - the rMetor- ,

a. All-CEAs are fully inserted manually.

I, OR E Only'one CEA is NOT 1.2 IF' Instruction ' i fully inserted, Step.1. criteria-

                                                                                     ~

are satisfied, ! b. Reactor power is lowering, THEN-GO TO-

c. Reactor startup rate is '/

j negative. 1.J OPEN Reactor Trip l 1,-breakers locally. 4

1. A - IF Instruction

{ 7 Step 1-criteria

!                                                                                    ' are satisfied,._

A ce % Qtog g., - THEN GO TO Instruction l Step 2.. [ l. 3 f%uwd\y T,'(=h x e4e.%r 7 4 5,m j h *.tw v p. h p o b % io 1./ OPEN all CEA Motor ( Generator Input i 5 y shm To og><v N. w cede and output-breakers.-

                           \(% % Gev<,s%c a# p r

( t o.shto y" 1 9 IFtInstruction

9 Step -1 criteria:

are satisfied, ,

                  . l . 'i. f 4' Tu rhe ti.w sn y )
     ~
                                                                                     - THEN GO TO Instruction
c. ,ih ris as %rt, NA ' . Step 2. ,
                           ~
                          - Ul tf M C o To Lst<^ti'N                         1.7' INITIATE Emergency, S n.p A ,-                                        9 Boration.-

1.8 GO-TO Instruction-10 Step;'2. ( (GUIDELINE CONTINUED)' l 4 4 i r- y . = - - - - - ,e--,r,- < e, ,.

CONTINGENCY STEP INSTRUCTION STEP 2.1 TRIP the main turbine,

2. VERIFY that the main j

turbine tripped. 3.1 OPEN the generator

3. VERIFY that the generator output breakers.

output breakers are open, 4.1 IP at least:

4. VERIFY that:

Non-safety load Non-safety load 4.16 KV Bus X 4.16 KV bus X is energized. is energized AND OR Non-safety load Non-safety load 4.16 KV bus Y is energized. 4.16 KV Bus Y is energized, J THEN GO TO Instruction Step 5. 4 2 INFORM CRS that the event is complicated by l a Loss of offsite I Power. 4.3 GO TO Instruction Step 5. 5.1 IF at least:

5. VERIFY that:

Permanent Non-safety Permanent Non-Safety Load 4.16 KV bus X is Load 4.16 KV bus X energized i is energized OR AND Permanent Non- safety i Permanent Non-Safety Load 4.16 KV bus Y is Load 4.16 KV bus Y energized, is energized. THEN GO TO Instruction Step 6. 5.2 INFOP11 CRS of status of Permanent Non-safety 4.16 KV buses. 5.3 GU T6 CohElhdjeMcy" Step 6.1. (GUIDELINE CONTINUED)

INSTRUCTION BTEP CONTINGENCY BTEP

6. VERIFY that: 6.1 IF:

Safety Load Division I Safety Load Division I energized via Permanent is energized, Non-Safety Bus X, AND AND Safety Load Division II Safety Load Division II is energized, energized via Permanent Non-safety Bus Y. THEN NOTE which Division (s) is/are powered by Emergency Diesel Generator (s), s 6.2 IF: Safety Load Division I is HQI energized AND Safety Load Division II-is EQI energized, THEN INITIATE actions to energize Safety Load Division I or Safety Load Division II from Alternate AC power supply 6.3 IF at least: Safety Load Division I is HQI energized OR Safety Load Division II is EQI energized, THEN INITIATE actions to investigate cause of lack of power to affected safety load division. 6.4 GO TO Instruction Step 7. i l l (GUIDELINE CONTINUED) i 1 4 l

  - - . - . - . -. . - -          - -. - - - . .     -  -                   =  . ..~ .                   . . . .     - - . = - ..                          - .                        _ -. --

i 4 i s INSTRUCTION STEP CONTINGENCY STEP 4 7. VERIFY that: 7.1 IF at least

  • 4 l, 480V Safety Bus A 480V Safety Bus A and j is energized 480V Safety Bus C are
AND energized 480V Safety Bus B OR -

l 3- is energized 480V Safety Bus B and AND 480V Safety Bus D are i 480V Safety Bus C energized, j is energized THEN GO TO Instruction

                                                                                                                                         ~

j AND

480V Safety.BusLD Step 8.

j is energized. l 7.2 NOTIFY CRS of the lack i of minimum required l invertor power. l 7.3 CHECK the voltage and l i

                                                                                                           - amperage readings on station batteries l                                                                                                             that are directly j

2 supplying vital DC power. l-i ' 7.4 GO TO Instruction Step 8. i i

                                                                                          . 8.1 TAKE manual control'
8. VERIFY that all1of the i following Inventory-Centrol of the Pzr Level i Criteria are satisfied: Control Systcm..

4

a. Indicated Pressurizer level 8.2LINITIATE attempts to
is in band of (Note A), restore and maintain
                                                                                                            - indicated Pzr level
b. Indicated Pressurizer-level within-limits of ,

is trending.toward band of (Note B).- (Note B), 8.3 GO TO Instruction i c.-Indicated Subcooled Margin Step 9.

is at least (Note C).

1 4 (GUIDELINE CONTINUED)- 4 s d p- - w m-t _ y ,,,. ,--- - -%e-,- ,, m,ww-%,w.ww,. ,,,,..p.,4,,,,ew ,w,,- 4.,e, .,m w we a 9w.,y c..-

_ __ . _ . _ _ . _ . - . _ . _ . . . . _ _ - . _ . _ _ . . ~ . _ _ _ _ _ . _ . _ . _ - _ . _ . _ i- , c I a i i i j INSTRUCTION STEP . CONTINGENCY STEP J-i 9. VERIFY that all of'the 9.1 IF indicated'Pzr l following Pressurc Control pressure.is. .

Criteria are satisfied
greater than (NOTE F),- .

THEN GO TO Contingency = i a. Indicated Wide Range ._ Step 9.6. r Pzr Pressure between (Note D), i 9.2 IF indicated Pzr

b. Indicated Narrow Range .

pressure is 1 Pzr Pressure between (Note D}, (Note G) OR:less,- I THEN VERIFY presence of

c. Indicated Wide Range SIAS annunciators.

j Pzr Pressure trending ! towards (Note E), 9.3 IF SIAS annunciators = s NOT actuated, j- d. Indicated-Narrow Range THEN manually INITIATE Pzr' Pressure trending SIAS. j towards-(Note E). t 9'.4 IF-indicated Pzr [ i pressure is (Note H) OR less, ) 'THEN ENSURE that at ! least-one RCP in each i loop;is tripped.. l '9.5-GO TO-Instruction ! Step 10. { '9.6 INITIATE: manual: control !- of.Pzr spray and-heater ! systems. i . r 9.7 ATTEMPT to restore andL i maintain ~ indicated Pzr L pressure within limits-j of (Note'E).- , i o I 9.8-;GO TO Instruction-  ! Step-10.

                                                                                                                                                                   ~

u l l (GUIDELINE CONTINUED)- i t 1-L -

                                                                                                                                 ....n....    . -.- ._ - c,. . ~ w

1 i CONTINGENCY STEP INSTRUCTION STEP i- 10.1 .IF. indicated Margin is less Subcooled than f 10. VERIFY that all of thefollowing core heat (Noteremoval C), conditions exist: THEN GO TO Instruction Step 11.

  1. a. At least one RCP is operating, 10.2 VERIFY indicated l T(cold) lowering.

is stable or

b. The indicated difference i between T(hot) and T(cold) i is equal to or less than 10.3 VERIFY difference

! (Note I), between indicated l T(hot) and is indicated less than. i c. Indicated Subcooled Margin T(cold) l is at least (Note C). (Note J). 10.4 VERIFY difference i ~ between indicated T(hot) and Representative CET is i less than (Note K). 4 ! 10.5 GO TO Instruction ~ Step 11, 9 ! 1 ! 11.1 ENSURE EFAS l

11. VERIFY each S/G's level actuated.

l greater than (Note M}. j 11.2-GO'TO Instruction Step 12. 1 1 l 12.1 ENSURE EFAS

12. VERIFY that at'least one actuated.

r Main Feedwater train or at- ) least one Emergency Feedwaterj 12.2 GO.TO Instruction - i train.is supplying at least Step _13. i -. one steam generator. l' 1 s' l

                                                    - (GUIDELINE. CONTINUED) w        -w<- - -                                   er ~ - ,    ,, ,-       w-ww,r---n- , w--y e ,,e

k i j J ,$ CONTINGENCY STEP ! INSTRUCTION STEP ~ 13.1 CONTROL manual

13. VERIFY Main Feed Water and-f and S/GS/G #2 levels #1 level equal -Auxiliary j FeedwaterJSystems.

1 to or less than-(Note N). } 13.2 INITIATE restoring i bothESteam Generator i levels to between I (Note M) and l-i

'                                                                                                                      (Note O).                                               f.

s

13.3 GO TO Instruction Step 14.

i

  • f 14.1 IF vacuum onimain VERIFY T-average is less condenser is l

14. than (Note P) AND'S/G maintained, (. pressures less than- THEN OPERATC Steam (Note R). . Bypass Control l System to maintain- ,' lT-average between i (Note _S). i 1 14;2 IF vacuum on main

condenser is NOT maintained, f

i THEN manually 4 OPERATE each Steam Generator's-l -Atmospheric Dump i . Valves-: ( ADVs) E to l- maintain T-average { between-(Note S). 14.31GO TO Instruction i

                                                                                                                             . Step ' 15. .

1. e i i $~ 4 l h

                                                                                          .(GUIDELINE CONTINUED) e

_a .-- - . _. . - - ._...___--__.._._._.a_... ...__v._.--

i I INSTRUCTION STEP CONTINGENCY BTEP ,' 15. VERIFY T-average is 15.1 ENSURE SBCS valves , Greater than (Note T) are closed. 2 OR operator-controlled l S/G steaming is in 15.2 ENSURE ADVs are ' 4 progress. closed. 15.3 ENSURE Reheater isolation valves ' are closed. 1 15,4 IF both S/G levels are stable OR ' lowering, i THEN GO TO Instruction Step 16. 15.5 STOP all Main Feed Pumps.

      ~

15.6 INITIATE restoring both S/G 1evels ' to between (Note M) and { Note O). i 15.7 GO TO Ins'.ruction Step 16.

16. VERIFY each S/G's 16.1 ENSURE Main Stean

( i pressure greater than Isolation Signal (Note U). (MSIS) ac..at.ud. l 16.2 GO TO Inhiruction . Step 17. l l-l' {' l l l i (GUIDELINE CONTINUED) l l I r

a 1 4 CONTINGENCY STEP INSTRUCTION STEP 17.1 IF SIAS NOT

17. VERIFY Containment actuated,
<      Pressure is less than                                  THEN initiate SIAS

' 2.7 psig. 17.2 ENSURE CIAS actuated. 7.7 ENSURE at least t one Containment Spray Pump , Status Light (CSP-1 OR CSP-2) is ON. 17.# ENSURE Annulus I ' f Ventilation System is actuated. 17 7' ENSURE at least l I 4. three of four Containment Recirculation Cooling Units in operation. 17.( IF Containment 7 Pressure is less than (Note W) on three or more channels, , THEN GO TO s Instruction Step 18.

                                          - s' i                                                       7.7 ENSURE CSAS 3 actuated.

(Contingency Steps Continued) (GUIDELINE CONTINUED) 4

                               ,,               ,,e--   ..+ru      ,e-r. ,- ,,,,n4, - m.r,-w.  -
                                                                                                 ** e yrv     a +-wr--         n-4

I l l i i e 1 l

                                                                     'l INSTRUCTION STEP                        CONTINGENCY STEP        I 17 8 VERIFY that at
least one Containment Spray ]

train-has flow I equal to or  ; greater than-(viote X). (F-338 OR F-348) 1 17.9 GO TO Instruction Step 18. f -g

18. VERIFY indicated 18.1 ENSURE CIAS
Containment Area actuated.

Radiation Lc.vels

are less than (Note Y). 18.2 GO TO Instruction Step 19.
19. VERIFY that all 19.1 NOTIFY Control Secondary Plant Room Supervisor Radiation Monitors are of which i not in alarm condition. Secondary Plant radiation monitors are in alarm condition.

f

19.2 GO TO Instruction l Step 20.

l l

20. VERIFY that Containment 20.1 ENSURE at least .
Average Temperature three of four
is less than or Containment equal to 100F. Recirculation l Cooling Units
are in operation, l

i 20.2 GO TO Instruction Step 21. t 1 (GUIDELINE CONTINUED) l

a CONTINGENCY STEP INSTRUCTION STEP 21.1 Steps IF Instruction 1 through

21. CHECK that all safety function criteria of 20 have been Instruction Steps reviewed, 1 through 20 THEN GO TO are satisfied. Instruction Step 23.

21.2 Steps IF Instruction 1 through , , 20 have not all been reviewed, THEN GO TO Instruction Step 1. 4 1 22. GO TO Reactor Trip Recovery EPC.

23. IDENTIFY appropriate follow-on EPG. (Refer to Attachment 1, Diagnostic Aid Flow Chart.)
24. GO TO ider tified follow-on EPG.

(END OF GUIDELINE STEPS) i l l l t I

ALWR EPG NOTES (Updated as of 11:45 AM, July 15, 1991) Note A: This indicated pressurizer level band fully considers the inherent inaccuracies of the instruments at normal hot standby conditions. The lower limit is the minimum indication that

"    demonstrates that there is an actual subcooled liquid volume in the Pressurizer. The upper limit is the maximum level where operators can still have confidence that normal pressurizer operation is effective rather than solid plant pressure control.

Note B: This indicated pressurizer level band is that band the automatic ope ratit.. . of the Pressurizer Level Control System is designed to restore and maintain from hot standby conditions to 100% power operation. The lower limit is designed to ensure that all of the pressurizer heater wells are covered by subcooled liquid. Note C: This indicated subcooled margin is based on maintaining at least some degree of subcooled conditions at all points in the RCS-at or below the reactor vessel's hot leg nozzles. Note D: This indicated Pzr pressure band following a reactor trip reflects a plant response that does not result in an automatic SIAS and does not result in the lifting of any primary pressure relief

valves. The values provided take inherent instrument inaccuracies at hot standby conditions into consideration. CESSAR

^ Table 7.3-5 shows a nominal SIAS setpoint of pressurizer pressure at 182S psia. (This table also shows that during primary cooldown following reactor trip tht this stpoint can be manually lowered as primary pressure is deliberately reduced. During plant startup, this setpoint is automatically raised as primary pressure is deliberately increased. ) CESSAR Section XXXXX states the lowest primary safety relief valve setpoint is XXXXX. , Note E: This indicated Pzr pressure band is that expected from the design response of the automatic Pressurizer Pressure Control System response immediately following a reactor trip from 100% power conditions. As such it includes the range of pressures that are expected from 100% power to hot standby conditions. Note F: This is the nominal Safety Injection Actuation Setpoint. This value is specified as 1825 psia in CESSAR DC Table 7.3-5, Amendment I, December 21, 1990. This setpoint should already include compensation for inherent instrument inaccuracies and conservative estimates of inntrument inaccuracies resulting from post-trip harsh containment atmospheric conditions. l l

1 i ALWR EPG NOTES (continued): Pg. 2 Note G: Reactor Coolant Pump Trip 2/ Leave 2 Pzr pressure setpoint where first two pumps are tripped. (More information needs to be added to this note.) Note I: The expected difference in indicated values of T(hot) and T(cold) during continued fotced circulation conditions at hot standby conditions that immediately follow a reactor trip from 100%

power conditions.

Note J: The maximum acceptable difference in T(hot) and T(cold) during natural circulation conditions. As natural circulation is being established, the operation of the Steam Bypass Control System and secondary relief valves should prevent T(cold) from rising. At the same time T(hot) rises to the point that the density difference across the primary side of the steam generators creates a gravity driven primary flow cycle. In the process of establishing this-driving force, T(hot) should by design not have to rise at a rate ' or specific temperature any greater than those that result in a maximum change in primary pressure that can be controlled by the pressurizer without the use of normal pressurizer spray. This in turn results in reducing possible challenges to the primary pressure relief safety valves. Note K: This is the maximum expected difference between indicated

loop T(hot) values and the Representative CET value provided by the plant computer during forced circulation conditions. It serves as a confirmation that normal post-trip forced circulation in the PCS is occurring.

Note M: This is the nominal Emergency Feedwater Actuation Setpoint. This value is specified ac XXXX in CESSAR DC Section XXXX. This setpoint already includes compensation for inherent instrument inaccuracies and conservative estimates of instrument inaccuracies resulting from post-trip harsh containment atmospheric conditions. Note N: This is the S/G level discussed in CESSAR DC Section XXXXX that reLults in automatically stopping Emergency Feedwater flow to either steam generator. This indicated setpoint includes corrections for inherent instrument inaccure'cies and conservative estimates of the instrument inaccuracies resulting from post-trip harsh containment conditions. Monitoring this lcvel helps prevent excessive moisture carryover into main steam ' lines and main steam control valves (Main Steam Isolation Valves and Atmospheric Dump Valves and the upstream isolation valves for the Atmospheric Dump Valves.)

i l 1

                                                                                    )

ALWR EPG NOTES (continued): Pg. 3 i Note 0: This is the indicated steam generator downcomer level that the Main Feedwater Control System is designed to maintain at 100% power operations. When inherent instrument inaccuracies and the 1 3 conservative estimates of instrument inaccuracies resulting from harsh containment conditions are fully considered, this indicated value insures that the entire steam generator tube bundle is submerged in at least saturated liquid phase and assures that levels are not so high as to result in excessive moisture carryover. Note P: This is the highest indicated value of T-average (computed ' f rom indicated T(hot) and T(cold) that is expected by de.,ign during the automatic post-trip response of the Steam Bypass Control System. This is a value that should result in preventing any of the secondary or primary relief valves from lifting. Note R: This value is the saturated secondary steam pressure . corresponding to that resulting from automatic SBCS operation when T-average is a'c the highest expected value during design. operation of the SBCS. Note S: This is the indicated range of calculated T-average expected during design operation of the automatic Steam Bypass Control System immediately following a reactor trip from 100% power conditions. I Note T: This is the lowest indicated value of T-average (computed from indicated T(hot) and T(cold) that is expected by design du-ing

the automatic post-trip response of the Steam Bypass control System. This is a value that should result in preventing any l unnecessaq( actuation of the Main Steam Isolation Signal as a l

> result of SBCS automatic operation. This indicated value should be high enough to allow operators to have sufficient reaction time to at least attempt manual SBCS control before a MSIS occurs. l 1, l Note U: This is the nominal Main Steam Isolation Signal Setpoint. Th".s value is specified as XXXX in CESSAR DC Section XXXX. This setpoint already includes compensation for inherent instrument inaccuracies and conservative estimates of instrument inaccuracies resulting from post-trip harsh containment atmospheric conditions.

                                                                    --oc g.  .m_,4

ALWR EPG NOTES (continued): Pg. 4 Note V: CESSAR DC Table 7.2-4, Amendment I, December 21, 1990 i provides a nominal high containment pressure setpoint for an RPS reactor trip signal of 2.7 psig. This infers that the normal Containment cooling and recirculation systems are designed to maintain indicated Containment pressure at or below 2.7 psig during power operation (and hot standby and therefor uncomplicated post-trip conditions). This value should include a compensatory factor i for normal post-trip instrument inaccuracies. , CESSAR DC Table 7.3-5, Amendment I, December 21, 1990 also shows that indicated containment pressure signals of 2.7 psig or greater thould result in automatic SIAS (and therefore CIAS) as well. Note W: This is the nominal Containment Spray Actuation Signal Setpoint. This value is specified as XXXX in CESSAR DC Section XXXX. This setpoint already includes compensation for inherent instrument inaccuracies and conservative estimates of instrument-inaccuracies resulting from post-trip harsh containment atmospheric conditions. If this indicated containment pressure has not been reached on at least two of four channels, then automatic containment spray flow is not designed to occur. Note X: This is an indicated Containment spray flow rate that i demonstrates that at least the minimum design base flow rate of 5000 gpm actually exists when containment spray flow is required. This value should include a factor to compensate for the inherent inaccuracies of the flow instrument. This value is discussed in CESSAR DC Table 6.5-1, Amendment I, December 21, 1990. Note Y: CESSAR DC Section XXXXX describes this as the Containment . Area Radiation Level setpoint that results in automatic isolation of select containment isolation valves as described in CESSAR DC Section XXXXX. CESSAR DC Section 6.2.4.3 states:

       " In addition, penetrations which provide an open path between the containment and the outside containment envirionment are isolated on high containment radiation as well as CIAS."

4

i l ALWR EPG NOTES (continued): Pg. 4 Note Z: This is the expected maximum containment average temperature during the plant's response to an uncomplicated reactor trip. This value is based upon it being described as the maximum containment temperature resulting from proper operation of normal containment cooling and recirculation systems during power operations. See CESSAR DC Section 9.4.6.1, Amendment I, December 21, 1990. This section states in part:

                               "The containment recirculation cooling subsystem is designed to maintain the average containment air temperature between 60F and 110F during normal plant operation with three of four cooling units operating and one in standby..."

l l l l l { t l

                ..y -

ATTACHMENT 2 i

                           )

8

1 i I i l DIAGNOSTIC FLOWCHART j POSTTRP SAEDMTE ACTIONS COMPLETE i 1 4 REACTMTY NO POWER No SAFETY FUNCTm AVAILABLE TO CEA p.7 (880) MET 7 INOCATIONS7

                                                \

! M YES 1r IWLEM!NT 1f r I EOP 8 (FRP) 2 -J r I , TA N AT LEAST ONE NO AT LEAST NO AUXLIARIE3 \ W ? FAFETY FUNCTION ONE VTTAL #(V BW > 125V DC BUS Ti%lN > EOP4 (F7t') ENER3!2ED7 ENERGCED7 MET 7 I i YES YES YES l ! if. lf I CONSIDER CONSIDER EOP4 (FRP) EOP 7 (SBO) I ( )f t

                               ,                    )            g                J                >

r- ' Mm .. g i

l DIAGNOSTIC FLOWCHART A Y _,, , emen so , so m = CensoeR i SAFE'sY FUPCDON PRESSURE LESS COND ON M8 EOP4 (LOCA) y THAN 300 PGA7 g ust i WS YES YES CONSOER ECP4 (SGTM) lI y - II SS

  • Consoen suscowNa LEss pgg THAN 3dr M
                                   /
                                  ;-                                  v EOP4 (LOCA)                                      ,

t r m

                                  ,       m e

_ s' l w an l. l

1 J j DIAGNOSTIC FLOWCHART i B s 1 f HEA

           \   VAL NO          AT L N       M      CONstOCR                      m ONE S,0 HAS                                         e               ,

i SAFETY K N EOP 3 (LCM) MET 7 FEED FLOW 7 l l I WS 4 YES 7 i MD NO AT LEAST NO AT LE.AST ONE NO THPPED DUE TO ONE RCP EV VITAL SUS l fMf4lNQ1 ENERGrZED7 y YES [YES WS Y-

                                         -                     f                        -)(

CCESIDER CONSIDER ! Y EOP 2 (LOOP) EOP 7 (380) I Y

                         )                                                                    r r                         m RCS            NO -

! Se bD OR NO 8N SU8COOUNG LESS 7 , ; COND OFFGAS EOP4 (ESDE)

                                               ?HAN 37 F7
e v
                            "'                    lf **

V CONSIDER CONSIDER EOP4 (SGTR) EC#4 (LOCA) l c.

                         ~f                        f                                 ,           >

lf l 00 TO C

4 I DIAGNOSTIC FLOWCHART C 1 CONT EPN m ETTHER ' m PR N ER NO SAFETY FUNCTON g p 5 PRESS OR LEVEL 3 W3 YEB yea ccmoeR ECP4 (LW f

                                                                                      )f' SU           GSS DE)

THAN 30' F7 I

                                                '        g      '

WS (

                                                                        .s .        J I

CCNSIDER EOP 5 (LOCA) l 1 - AT LEAST ONE NO COML)ER 4KV VITAL BU3 gop,y($go) ENERGtZEDT

                              )I        Y YES CONSIDER EOP 2 (LOOP) ]

1f J

                    -        a      -   >  -        ,             ,

[ V 00TO D

DIAGNOSTIC FLOWCHART D

          -.         .     =.            .           =.             .       _
                       > = = ->                    ==,-                     --         j
        .E' @/,                                                                             t YES
  • If ll CONSOER AT LEAST ONE NO 3 4KV VITAL BUS I ,;^

EOP4 (SOM 5"5 ' if i] ves Y i If h c.S. c-ma b EOP 2 f OOP) EOP-7 (SBO) 3r y E

                                                                                     -   21 c      >

glj 7  ! !I 1 0 Au. no e m NPuMFRT 84= - EvEm ===S POssa.si

                                             >    .0,4 (,Rg3                               h urtt                                                                        4j f

y* 1r*

          .numen         ""=d"c"5
          " Arm 2n,       M""

4 ,l l

     .                 COMBUSTION ENGINEERING                   TITLE REACTOR TRIP RECOVERY EMERGENCY PROCEDURE GUIDELINES                          Page       of     Revision
  • i REACTOR TRIP RECOVERY GUIDELINE
          )

Prepared by COMBUF :^ M "CIICERI M NC, . Act:3e c-t - . . J. O rc u p - ABB C.om%usTroN CNCD:mtrwc Ivc, RT 41 g4gg  := , 23 i

COMBUSTION ENGINEERING TITLE REACTOR TRIP RECOVERY EMERGENCY PROCEDURE

   )                            GUIDELINES                                              Page 2 _ , , -

1 Revision # P_URPOSE This guideline provides the operator actions which must be accomplished subsequent to a relatively uncomplicated reactor trip. The actions in this guideline are necessary to ensure that the plant is placed in a stable, safe conditior. The goal of the guideline is to safely establish the plant in a mode 3 condition (hot standby) while minimizing any radiological releases to the environment. If necessary, the RCS may be cooled and depressurized. ENTRY CONDITIONS

1. The Standard Post Trip Actions have been performed a,3p
2. Plant conditions indicate that an uncomplicated reactor trip has occurred.
     )

EXIT CONDITIONS

l. The diagnosis of an uncomplicated reactor trip is nc^ confirmed E
2. Any of the Reactor Trip Safety Function Status Check acceptance criteria are not satisfied .
 .                                                            E
3. The Reactor Trip Recovery EPG has accomplished its purpose by satisfying M of the following:
a. All Safety Function Status Check acceptance criteria are being satisfied.
b. RCS conditions are being controlled and maintained in a mode 3 or 4 condition (hot standby or hot shutdown).
c. An appropriate procedure to implement has been provided and administrative 1y approved.

RT 42 b - - - w; 2 l

t COMBUSTION ENGINEERING TITLE REACTOR Trip RECOVERY l 3 EMERGENCY PROCEDURE GUIDELINES , page.3.__ of to Revision M ESTRUCTIONS CONTINGENCY ACTIONS

1. Ensun Standard Post 1.

Trip Actions performed. ,

                              *2. Confirm diagnosis of                                           2.                       Rediagnose event and uncomplicated Reactor Trip                                                               exit to appropriate by verifying Safety Function                                                             Optimal Recovery Guideline Status Check acceptance                                                                 or to Functional Recovery criteria are satisfied.                                                                  Guideline.
3. Verify pressurizer level is: 3. Manually operate charging a.go to 7o] and letdown to restore ana and maintain pressurizer
                                  -b. trendihto       o   to l$c%                                                        levelf1&Jto.300"[
                                                                                                                                    .30's   LM
                )      -h4 4 4       Verify pressurizer press'ure is:                                4.                      Manually operate pressurizer
a. fR60 to MO heaters and spray to Ciao 5gndsiaf control RCS pressure:

q b. trending to 2225 to 2300 psia y a. 2225 to 2300 psia ang

c. within the Post Accident P-T ag limits of Figure 4-1. b. within the post Accident P-T limits of Figure 4-1.
                       /' t   5. Verify turbine bypass system                                      5.                    E condenser vacuum is lost,
                    /# ~           'is controlling RCS T,y,                                                                  turbine bypass system is
                                    $25 to 535'FJ.          ,                                                                unavailable, or the MSIVs are closed, Then use the atmospheric dump valves to controlRCST,y,{525to 535'FJ
  • Step Perfonned Continuously RT 4-3 G-R ^ . 0;

i i COMBUSTION ENGINEERING TITLE REACTOR TRIP RECOVERY EMERGENCY PROCEDURE

  .)                               GUIDELINES                                 page   4 of to Revision 4 INSTRUCTIONS                                   CONTINGENCY ACTIONS
6. Ensure at least one 6.

, steam generator has level being maintained or restored in the normal band using 4

        ,,(                       u
              ,.      fmain,sfe  r P,py pr-=     y_sm.vseucy yf ,-

M " ahl fec A w d.v. f

7. Evaluate the need for a 7.

plant cooldown based on:

a. plant status
b. auxiliary systems availability
c. cpndensate inventory.

I

8. E a plant cooldown is necessary, 8.a. Maintain the plant in a
    )                 Then exit this guideline and                       stabilized condition, implement the appropriate                       j    s         n                      ,

plant cooldown procedure. b / Exi t to'fappkria'tf sp a n,d , pro- , , I

                                                              ,          cedufeds,direcgedby{Piant s
                                                                      . Te'ttmical Supportcent'er). /

When the steps of the Reactor Trip Recovery Guideline are complete, the pl' ant should be in a condition where all of the SFSC acceptance criteria are satisfied, and the entry conditions of an appropriate procedure are satisfied. In most casas, the plant will be maintained in hot standby or directed to be cooled down to mode 4 or 5 condition. E_Np

   )

RT '4

                                                           ,-                       .LE.tW :  -%:. C T-

COMBUSTION ENGINEERING TITLE REACTOR TRIP RECOVERY EMERGENCY PROCEDURE I GUIDELINES Page 5 of 2 Revision W SUPPLEMENTARY INFORMATION I This section contains items which should be considered when implementing EPGs and preparing plant specific E0Ps. The items should be implemented as precautions, cautions, notes, or in the E0P training program.

1. Pressurizer level should be closely monitored since it normally decreases to, or near, the_ pressurizer heater cutoff level following a reactor trip'(Reference 15[1). # *"  !

CoM'utin fyg Nuclee Gyl **7(8'/*rf rkem wly iptem(1980', to 7e~ ' b/'*Cd skQ ofec An, ' l C&-I.1L8. Cwbutw Cr's vy, WhdWs cr ' ] 2. All available indications should be used to aid in evaluating plant conditions since the accident may cause irregularities.in a particular instrument reading. Instrumentation readings must be corroborated when

                  '         one or more confirmatory indications are available (References 15.24).

c, ne, . < con "rm -x u nn w r se sw tw ty wr ~<l SLt-;w. 41.e -a^ M'est, vs. sr.le~ key ler'*, C. ~ uus, J.rl, n n.

3. A plant cooldown and entry into shutdown cooling.(if necessary) should be
        )                   conducted prior to depleting the condensate storage.

4 4 During all phases of the cooldown, RCS temperature and pressure should be monitored to avoid exceeding a cooldown rate greater than Technical Specification limitations.

5. Do not place systems in " manual" unless misoperation in " automatic" is ,

_. apparent. Systems placed in "panual"-must be checked frequently to ensure pe e. proper operation Reference 15.34). ') p,stous cmo), s c zw/ H) - * *ll') . v.s . Ms,1.

r. sos or rm.L.A*+t* //~ Aytw% ,,

ty h tm %.Mr.ni Wa u bf t~' b. 4

6. If the initial cocidown rate exceeds Technical Specification Limits, then
there may be a potential for pressurized thermal. shock (PTS) of the reactor vessei (Reference 15.8). Post accident pressure / temperature shouldbemaintainedwYhinthelimitsofFigure4-1.

dm J :ti., Ery% A yo.4 i/ f1'),

  • hm*w 74 -#l fA *' A

c4 - N/JD - 19 6 Le v. c, C anTHr.> Grf, am s ,i W. </ter, c 7. s

        )

RT 4-5 CQL442 % . 203 -

i j d i- COMBUSTION ENGINEERING TITLE -  ! i REACTOR TRIP RECOVERY EMERGENCY PROCEDURE - i 1 GUIDELINES p g.._L Of 12. Revision 03 l l

1. -

h FIGURE 4-1 TYPICAL POST ACCIDENT PRESSURE TEMPERATURE LIMITS (2) j 2500 - I g i i i 7 2400 2300. LOWEST SERVICE

                                                                                                                                                        '/

l 1000F/ HOUR .i TEMP % COOLDOWN / i

                                                                                                                                                    /

i

                             ~

2000 - NOTE 1 / ., i Q f r~, l l 5 (200*F) [

                 \,                  E,                                                                                            -Y

! - E 1500 -

                                                                                                                                     /                                                              -

! 3 /

;                       d            0
                        ):           E                                                                                       /

! 5 /

u /

l $1000 / RCP NPSH ., a '. gu/ t A ' E

a.  :/
                                                                                                            /

l p%W j (200F] fw' j C arc l.

                                                                                          . 7.       SHUTDOWN                                                        (0c)                                                  ,

4 500 - [ COOLING _ a . { l ( l l 0 f 100 200 300. . 400 500 600 , RCS TEMPERATUR E, 'F l 4 ' NOTES:(1f THIS CURVE SUPERSEDES THE 100'F/ HOUR COOLDOWN CURVE ANYTIME THE RCS HAS EXPERIENCED AN UNCONTROLLED COOLDOWN i WHICH CAUSES RCS TEMPERATURE TO GO BELOW 5000F

                     +

l - (2) THESE CURVES MUST bE ADJUSTED FOR INSTRUMENT INACCURAClES i . 1 [ . RT 4-6 CEN-152 Rev. 03 f _ _ . - , . - a -.-= = ,, .w , ,+..,,e-..es-w mg . , - , ._m,-w-g_ym,g .w -.ser n - a - e - + ,wm n - yn+y,wv-,y g,qvy. .v. g r,e y

COMBUSTION ENGINEERING TITLE REACTOR. TRIP RECOVERY EMERGENCY PROCEDURE

GUIDELINES Page 7 of 20 Revision +3 l SAFETY T'JNCTION STATUS CHECK i

l Safety Function Acceptance Criteria l

1. Reactivity Control 1.a. Reactor power decreasing 4

anc

b. [ Negative b rtup Rate [

and

c. No more than 1 CEA bottom light not lit or borated per Tech Specs.

1 4 4

2. Nintenance of Vital Auxiliaries 2.a. Mein turbine tripped (AC and DC Power) _and
b. Generator output breakers open
and gg.m , F
c. At least one I[4.16kV) i AC D is available cI. At lusrcue 133 kv m'l *"*- H lla kv 4,.4t_4ea,a_one non it:) [s . g AV.]

i hloN s'a.hTy bo w& bwe PmmewT g tg3/ g.,M. ET ncn_e et t:1 (1 16 l Neu sd.Ty bus an Nanakk . Mj % bu3-ert evailab4b'

                                                                ~

and k-=d -er Yd9-C e b i kV.a.sT O N t hiviS \ctJ o f VWa\ Qo y g c, d .. ,_. ___.a. -, a....<  ! h *

                                                                                                               ' T."

(" (bo% c,byy.)g ,,A tb4 SMslow 1..A c ,#<

       }      wg e                     .g,                           i}     CC C0 tr;l POW 0 r-

' (A n c.l. -and--

                                                                    -ii) 'h; Operation O' It 10:&t f, AT leasTone diss\ow of V,h\ uf VDC.                        .en: 1pn ..1 t   .,! t:1.gg

{ 60 eksuud 5

  • 5 * #

EftT#00I Ch200 I' papereE~ b e - E F t '

o. r e_

i RT 47 J6!st3L . _,u_,,,03 i

COMBUSTION ENGINEERING TITLE REACTOR TRIP RECOVERY

  .,      EMERGENCY PROCEDURE GUIDELINES                               Page 8      of 2     Revision
  • 4 SAFETY FUNCTION STATUS CHECK  !

4 Safety Function Acceptance Criteria i

3. RCS Inventory Control ho'6fo7ad I 3.a. Pressurizer level is g h e- N 5:2 l 21!2 4

s b. Charging and letdown are l restoring pressurizer level to n i

c. The RCS is least[20'Fg subcooled 4

d.[oreactorvesselvoidingas indicatedbytheRVLMS/ 1 j 4. RCS Pressure Control 4.a. Pressurizer pressure is: hjY///,kN i) o psiaf fy((ff.h 11)trendingto[2225to 2300 psia}' and -

b. Pressurizer heaters and spray are controlling pressure within P-T limits of Figure 4-1.

4 i RT 4-8 - En .;& _ C2

COMBUST!ON ENGINEERING TITLE I EMERGENCY PROCED'URE GUIDELINES Page3 4 of lo Revision d - SAFETY FUNCTION STATUS CHECK kJipun

Safety Function Acceptance Criteria ,Ti - Tc e T 5.a. Tg-T cis less thad 10*F 'f.t-

} 5. Core Heat Removal fL\.. ft a_nd C $,, '

b. The RCS is at least 20'%

subcooled.

                                                                                                        ~
                                                                                                                 .)
                                                                                                           ,r      !
6. RCS Heat Removal 6.a. At least one SG has level: l, i) within normal level band J with feedwater available to 4 maintain level or ii) being restored by feedwater Flow ouL \nc.,ea s\y9 Lsuet .
  )

and , b. RCS T,y, i[f525to535'F[ . 7. Containment Isolation 7.a. Coltainment pressure less than hl.S pi [ ,,l.F PSTej] ___.'and ' b. o containment area radiation monitor larmin[ and

c. No steam plant acti, dy-ehrms.

rad:n%w moviTorJ Arc Akym t,rv$

RT 49 C ;5?%, ,13 d

I { 1 COMBUSTION ENGINEERING TITLE l REACTOR TRIP RECOVERY EMERGENCY PROCEDURE

 )

GUIDELINES Page to of-lo Revision

  • SAFETY FUNCTION STATUS CHECK Safety Function Acceptance Criteria
8. Containment Temperature & 8.a. Containment-temperature less than Pressure Control

{-(120'f.) and

b. Containment pressure less than 1.E P;4 s C .12- 1
                                                                                   'ja t -p

[ /.3"h 8) i

9. Containment Combustible Gus 9.a. Containment temperature less than Control

[120'F[ en

b. Containment pressure less than
 )                                                    htiRVN 42-                  i-> ')

C\nsQ RT 4-10 OE" "2 A. 03

4 COMBUSTION ENGINEERING TITLE Loss OF ALL EMERGENCY PROCEDURE

GUIDELINES Page 1 of 3' Revision 7 '

i i i l l j LOSS OF ALL FEE 0 WATER RECOVERY GU10ELINE i s a I J Prepared by COMBUST!nN FNCfNEED!NC, j C, 4+ k - f (-i- ; d m "r;;p 4 LOAF a.1 c/ L its u .v 61

COMBUSTION ENGINEERING TITLE Loss of ALL

FEED),ATER RECOVERY EMERGENCY PROCEDURE
GUIDELINES

__, . -xe Page 2 og 31 gevision ,3_ Purpose 1 l This guideline provides operatcr actions which must be accomplished in the e, ent of a Loss of All Feedwater (LGAF). The actions in this guideline are i necessary to ensure the plant is placed in a stable, safe condition. The goal of this guideline is to safely establish the plant in a condition which will 4 allow the implementation of an appropriate existing procedure: shutdown cooling, hot standby, or hot shutdown; or a procedure provided by the (plant Technical Support Center or the Plant Operations Review Connittee]. Radiological releases to the environment will be minimized and adequate core cooling will be maintained by following this guideline. This guideline provides technical information to be used by the utilitie: in developing a plant specific procedure. a l Entry Conditions

1. The Standard Post Trip Actions have been perfonned 3

a, nd ] 2. Plant conditions indicate that a Loss of All Feedwater event has occurred. Any one, or more, of the following may be present, i j a. Decreasing steam generator water level or low level alarm, i b. Main feedwater pump trip alann, j c. Low main feedwater pump flow (possible high fiow for a feedwater line break).

d. Low m in feedwater pump suction pressure.
           -e.   [0ther ph-t spui'iw apswaa , in m c--here].

i i 2 i LOAF 8-2 C[ET;*-+4W

l l COMBUSTION ENGINEERING. TITLE Lo$s of Alt FEE 0 WATER REC 0VEPv

EMERGENCY PROCEDURE GUIDELINES Page 3 of 31_ Revision 8 Exit Conditions
1. The diagnosis of a loss of All Feedwater event is not confirued.-

E

2. The feedwater line break is not isolable from the steam generator.

E

3. Any of the Loss of All Feedwater Safety function Status Check acceptance criteria are not satisfied.

E 4 The Loss of All Feedwater EPG has accomplished its purpose by' satisfying A_LL of the following:

a. All of the Safety Function Status Check acceptance criteria are being satisfied.
b. P.CS conditions are being controlled and maintained in hot standby, hot shutdown, or cold shutdown,
c. An appropriate, approved procedure to. implement exists or has been approved by the [ Plant Technical Support Center or the Plant OperationsReviewCommittee].

d 1 4 i i 4 n' LOAF 8-3 r ru - - m e;:- 3

COMBUSTION ENGINEERING TITLE LOSS OF ALL l FEEDWATER RECOVERY EMERGENCY PROCEDURE GUIDELINES Page 4 of .3L Revision * - INSTRUCTIONS CONTINGENCY ACTIONS , 1

1. Ensure Standard Post Trip Actions 1. l per fonned.
  *2. Confinn diagnosis of Loss of All        2. Rediag;og event and exit Feedwater by verifying Safety.            to either appropriate Function Status Check acceptance          Optimal Recovery Guideline criteria are satisfied.                    or to the Functional Recovery Guideline.
3. Trip all RCPs. 3.
4. M a feedwater line break is suspected. 4 H the feedwater line break Then isolate the break and continue is M isolable from the with the actions of this guideline, steam generator, Then exit this guideline and imple-ment the Excess Stean Demand Event Optimal Recovery Guideline,
  *5. Attemottorestore(main)pA    d/or-       5.

gjgy[feodwatersystemsto operation. , i i

  • Step Performed Continuously.

1 i 4

                                                                      ^

LOAF 8-4 CFr :~2

                                                                        -   03 I

4

1 COMBUSTION ENGINEERING TITLE toss of Att FEE 0 WATER RECOVERY EMERGENCY PROCEDURE 4 GOIDELINES Page 5 of 31 Revision 8 INSTRUCTIONS CONTINGENCY ACTIONS

         *6.      If feedwater to at least o.ne steam       6. If feedwater has been re-generetor has NOT been restored,              stored to at least one Then perform steps 7 through 9.               steam generator, Then go to step 10.

I f+' ty W9

7. H { maingor auxili;ry$ feedwater has . 7.

NOT been restored, Then do the following: . a. isolate steam generator blowdown, j secondary sampling, and any non-vital steam discharge agg

b. contin actions p

to restore (main,[or auxiliary} feedwater, emerwey

8. fDepressurizethesteamgenerator(s) 8, in order to establish an' alternate, low pressure feedwater source.to at

, least one steam generator . 4 i s

  • Step Performed Continuously ,

4 4 4 h LOAF 8-5 l; L i?2 ^c.= T ~ i

COMBUSTION ENGINEERING TITLE LOSS OF ALL FEEDWATER RECOVERY EMERGENCY PROCEDURE GUIDELINES Page 6 of 31 Revision 88 INSTRUCTIONS CONTINGENCY ACTIONS

'9. Verify adequate RCS heat removal via 9.

thE steam generators by:

a. fatleastonesteamgeneratorhas a. f M both SG wide range

} wide range level greater than or levels are less than f equalto15%$, [15'} Then implement the d FRG and initiate eme+- s b. RCS Tc temperatures are stable R . ., ;; n ;ci,...;(DCS ] ordecreasing{. and Core Heat Removal successpathHR-4}f. S.E ] b. [HRCSTctemperatures j increase [5'F}or greater, Then implerect i the FRG and initiate ! re:: ' ' ;b ;;;'i,; (RCS and Core Heat Removal success path HR-4(( 5 l' s 4 I

  • Step Perfonned Continuously 4

+ LOAF .8-6 C:' '.:: ~. %.

   ,e s 4 A-- . 4m_    _--M.fa         wA- _ -      2 J.A+ . -  .A  .*M     -a.A - - 4 da A3_4h,  -4
                                                                                                   ,,,_ .- x 4.am.A,J  1A.s .g..a--.A-'    . S i

COMBUSTION ENGINEERING- TITLE Loss 0F ALL ~l FEEDWATEP RECOVERY EMERGENCY PROCEDURE GUIDELINES Page 7 of 31 Revision *  ; CONTINGENCY ACTIONS ESTRUCTIONS 1

10. { H feedwater is restorad, Then 10. )

p0rf0- th f0ll0ain; 16 pi sve1Tt steem generate 'eed -ing damage: I 2 If SC '.;;ti, leucl ja couve Eng f#ed ring. Thea :tep -edand:rt-feedwater namne raetnre SG_ { 10;:1, :nd maintain le.cl in i the nam:1 le el Lendr b J'4nd4cated:te:rgeaer' tor watar 1 eve! f: b;10.; the feed rtng. The" de th feli c.i eg i)

                                                                             ~

StDP isdundant feedratt- . rm ane and 14m4t feedgatar j fl0a 70te tc, 150 Sp'" p07-affae+ad Etetr generator e until an i n r.. e a_ m_ e_ in a_ ( r_. IGxgl hat heen ektert3d, i Or until contintiotte, feed. 4 water finu +n the $G h35 . been maints4nnd (c #i g minucca. 97 Modulate feedwater flow rate as necessary to restore

;                                              and maintain SG water level inthenormallevelband}.
  • Step Perfonned Cont (nuously 4

LOAF 8-7 Cr 12W M3

4 COMBUSTION ENGINEENNG TITLE LOSS OF ALL FEEDWATER RECOVERY . EMERGENCY PROCEDURE

GUl0ELINES Page 8 of 32 Revision 8 IN37RUCT10NS C0flTINGENCY ACTIONS J 1
11. Ensure automatic or manual control 11, g condenser vacuum is lost of the turbine bypass system is or the turbine oypass maintaining RCS T,y, < [545'F). system is not available.

Then operate atmospheric dump valves to_ control ) RCS T,y, < [545'F).

              *12. Ensure the available condensate                12,

) inventory is adequate per Figures 8-3 and 8 a.

              *13. Verify charging and letdown are                13, g nually corarol charging i

automstically maintaining or and letdown to restore / ! restoring pressurizer level maintain pressurizer level i [J!ito245). [ g to 3iT"?

                                 7c%                                          7 o *4 l

i i. k i 1- , i t 1 i

  • Step Performed Continuously t

l LOAF 8-8 -C.F H ... , , , 33

d

;              COMBUSTION ENGINEERING                        TITLE      LOSS OF ALL FEEDWATER REC 0VERv EMERGENCY PROCEDURE GUIDELINES                           Page    9 M 31 Revistor) *

~ INSTRUCTIONS CONTINGENCY ACTIONS

      *14   Ensure pressurizer heaters end           14. y RCS subcooling. greater
spray are n.aintaining or restoring than P-T limits or cooldown pressurizer pressure within the rategreaterthan(100*F/

limits of Figure 8-1. Hr), Then do the followiag as appropriate:

a. stop the cooldewn,

! b. manually control pressurizer j

spray to restore and maintain pressure within the limits of Figure 8-1,
c. attempt to maintain the 1

plant in a stable i pressure-temperature

configuration or ,

continue to coolde,cq l within the limits of i Figure 8-1,

d. M overpressurization due to 1FSI/ charging flow, Then throttle 'or i secure flow (refer to stop 19)'and manually control letcown to restore and maintain-pressurizer pressure within the limits of Figure 8-1.
  • Step Performed Continuously LOAF 8-9 CEP .:: 1 03

l ) TITLE COMBUSTION ENGINEERING gF a EMERGENCY PROCEDURE GUIDELINES page to of 31 Revision # i INSTRUCTIONS CONTINGENCY ACTIONS 4 *15. Verify natural circulation finw 15. Ensure proper control of in at least one loop by E of steam generator feeding j the following: and steaming (refer to

a. loop AT (Tg -T c ) less than steps 10 and '1) and RCS nomal full power aT, inventory and pressure l
b. hot and cold leg temperatures control (refer to steps

~ constant or decreasing, 13 and 14). c, RCS subcooling is at least (20'F]

d. no abnormal difference
[ greater than 10'F] between ,

TH RTDsand(CoreExit Thermocouples).

            *16. Evaluate the need and desirability     16. If RCP operation Ng of restarting RCPs. Consider the             desired Then go to following:                                   step 21.
a. adequacy of RCS and core heat removal using natural
circulation, b, existing RCS pressure and .

temperatures,

c. the need for main pressur-

, izer spray capability,

d. thedurationof[CCW}

interruption-t, RCPs,

e. RCP seal staging pressures and temperatures.
  • Step Perfomed Continuously LOAF 8-10 CEH ;;; ~. 03

COMBUSTION ENGINEERING TITLE Loss 0F Al,L  ; FEE 0 WATER RECOVERY EMERGENCY PROCEDURE

GUIDELINES . Page il of ll. Revision
  • INSTRUCTIONS CONTINGENCY ACTIONS
        *17. Determine whether RCP restart                      17.j,fRCPrestartcriteria criteria are met by ALL of the                          NOT satisfied. Then following:                                              go to step 21.

i

a. electrical power is avail-able to the [RCP bus),
b. RCP auxiliaries f[f M }t b t , C ' N 3' to maintain { seal injection?,

$ bearing, and motor cooling are operating, and there-are no j high temperature alarms on the selected RCPs, j c. at least one steam generator

]                   is available for removing
heat from the RCS (ability for feed and steam flow),

, d. pressurgzgerlevelisgreater than[2M"]andnotdecreasing,

e. RCSsubcoolingatleast[20*F]

e basedon[averageCETltemp-

erature (Figure 8-1),

)' f. [other criteria satisfied per fiCP operating instructions]. - 4 4 i

  • Step Performed Continuously
't a

2 1 LOAF 8-11 ^' C-Z^.

COMBUSTION ENGINEER!NG TITLE LOSS OF AL'. FEEDWA'ER RECCVERY EMERGENCY PROCEDURE GUIDELINES _ Page 12 of 3' Revision

  • 1hSTkoCTIONS CONTINGENCY ACTIONS i *18. If RCP restart desired and restart 18. Go to step 21, criteria satisfied, Then do the following:
a. start all available charging pumps. I' pressure less than
,                  [1300 psia), Then MPS! pumps I

may be operated,

b. start one RCP in each loop,
c. lensure proper RCP operation by monitoring RCP amperage andNPSHf,
d. operate charging (and JFSI) d pumps until pressurizer level greaterthan((dh']andSIS termination criteria met
(Refer to step 19).

4 i

  • Step .or: formed Continuously LOAF 8 12 cr ',;:_ 2,vr :0 4

COMBUSTION ENGINEERING- TITLE LOSS OF ALL i FEEDWATER REC 0VEP.y EMERGENCY PROCEDURE GUIDELINES page 13 of 31 Revision +>- INSTRUCTIONS CONTINGENCY ACTIONS i

        *19. E !FSI pumps are operating, Then         19. Continue MPSI pump                  ;

they may be throttled or stopped, operation.  ; one pump at a time, if Ay of the following are satisfied:

a. RCS subcooling at least

[20'F]basedonhverageCETk l temperature (Figure 8-1),

b. pressur,igerlevelisgreater than[14B")andnotdecreasing,
c. at least one SG available 4 for RCS heat removal (ability for feed and steam flow).
d. ktheRVLMSindicatesaminimum level at the top of the hot legnozzles[.
        *20. H criteria of step 19 cannot be           20.

maintained after MSI pumps throttled or stopped, Then 95! pumps must be restarted and full W SI flow restored.

21. Evaluate the need for a plant - 21.

cooldown based on:

a. plant status,
b. auxiliary systems availability,
c. condensate inventory (refer to Figures 8-3 and 8-4).
  • Step Perfortned Continuously LOAF 8-13 CGA T.. . .- C .'

J COMBUSTION ENGINEERING TITLE toss cr Att EMERGENCY PROCEDURE

GUIDELINES Page 14 of 31 Revision $_

INSTRUCTIONS CONTINGENCY ACTIONS

22. E a plant cooldown is desired. 22. a. Maintain the plant in a Then perfom steps 23 through 28. stabilized condition, i

j b. Exit to appropriate !- procedure as directed by(PlantTechnical l SupportCenter). f I *23. Borate the RCS to maintain 23. j shutdown margin in accor-2 dance with Technical Specifi-cations. i i 24 Comence an orderly plant cool- 24 f down, using forced or natural circulation, in accordance with 1 Technical Specifications. Reduce RCS temperatures by the f following:

a. If the condenser is available, i Then cooldown using the turbine bypass system, i 9.C
b. E the condenser or turbine
bypass system g i available.

Then cooldown using the atmospheric dump valve (s).

  • Step Performed Continuously J

LOAF '8-14 &nC': 0;- 1

COMBUSTION ENGINEERING TITLE tcSs 0F Att FEf0tlATER RECOVEP.Y E'tERGENCY PROCEDURE . GUIDELINES Page 15 of 31 Revision 4 INSTRUCTIONS CONTINGENCY ACTIONS

25. Bypass or lower the automatic 25, initiationsetpointsof[MSIS, CIAS, 2 , and SIAS] as the cooldown and depressurization proceed.
                 *26.                 If pressurizer pressure reaches           26.

h psia), Then isolate, vert or drain the safety injection tanks (SITS).

                  *27.                finitiate low temperature over-           27, pressurization protection (LTOP) at Tc $N'F {.
                   *28.               When the following SCS entry             *28. E the RCS fails to depres-conditions are estab1fshed:gg                 surize, Then a void should
a. pressurizer level > [ TOC'] and be suspected, cor.stant or increasing, voiding in the RCS may
b. RCSsubcooling>[20'F], be indicated by any of
c. RCSpressure<[Npsia], the following indica-F], tions, parameter
d. RCSHT 2[
e. [ctt.ccphnty::ific-critecie changes, or trends:

incrtP. crc],- 1) letdown flow Then exit this guideline and initiate greater than SCSoperationper[ operating charging flow, instructions]. (Continued On Next Page)

  • Step Perfonned Continuously t0AF 8-15 C "L 'J2 ' - - +3

COMBUSTION ENGINEERING TITLE - LOSS or Att FEE 0 WATER RECOVERY EMERGENCY PROCEDURE GUIDELINES Page 16 of 31 Revision *$ INSTRUCTIONS C0hTINGENCY ACTIONS i f 18. *28 (Cont'd) l 11) pressurizer level  ; increasing signi- l ficantly more i than expected while operating pressurizer spray, ] iii) {the RVLMS indi-i cates that void-ing is present in the reactor l vessell, iv) (HJTCunheated 4 thermocouple j temperature indi-cates saturated conditions in the l reactor vessel upperhead), i Wr incit a- - , sie.sh M (Continued On Next Page) }

  • Step Perfonned Continuously T

LOAF - 8-16 [FN  :- M 3

COMBUSTION ENGINEERING L0s5 0F ALL TITLEr ,EE0 WATER RECOV EMERGENCY PROCEDURE' GUIDELINES Page 17 of 31 Revision E_

,                       INSTRUCTIONS                                0 C_0t!TINGENCY    ACTIONS J

j 28. *28. (Cont'd)

b. E voiding inhibits RCS depressurization to SCS entry pressure, Then attempt to eliminate q the voiding by:
!                                                                     i) verify letdown is isolated, 3 D.$
;                                                                   ii) stop the deoress-j                                                                           urization, e.D.$

lii) pressurize and depressurize the RCS within the

limits of Figure j 8-1 by operating j pressurizer heat-a ers and spray or JESI and charging
pumps. Monitor pressurizer-level fan'd-theRVLMSl

( for trending RCS ! inventory.

  • St ' Perfortned Continuously . (Continued On Next Page)

LOAF 8-17 .GE h i T. o . O

COMBUSTION ENGINEERING TITI.E LOSS OF ALL FEIOWATER P.ECOVERY EMERGENCY PROCEDURE GUIDELINES page 18 of 31 Revision V INSTRUCTIONS CONTINGENCY ACTIONS

28. *28.(Cont'd)
c. H depressurization of the RCS to the SCS entry pressure is still not possible, aj void-ing is suspected to exist in the steam generator tubes, Ihen attempt to eliminate the voidirg by:
1) cool the suspected steam generator (by steeming and/or blowdown, and feeding) to con-dense the steam generat:r tite void,
                                                                    *. D.$

ii) monitor pressur-izer level for trending RCS inventory. (Continued On Next Page)

  • Step Perfonned Continuously LOAF 8-18 CE3-;3I ^..,0-

COMBUSTION ENGINEERING TITLE toS$ or Att FEEDWATER PEC0VERY EMERGENCY PROCEDURE - GUIDELINES Page 19 of 2) Revision

  • INSTPUCTIONS CONT!NGCNCY ACTIONS
28. *28. (Cont'd)
d. Ifdepressurizationof the RCS to the Sf5 ertry pressure is still not possible. Then attempt to eliminate the voiding by:
1) operate the fpressurizervent orthe{ reactor vessel head vent
                                                                                                                        , to clear trapped non-condensible gases.

I in$ ii) monitor pressur-1rerlevel[and/- ortheRVLMSIfor trendir.; of RCS inventory.

e. Centinue attempts to establish SCS entry conditions, or exit this guideline and ini-tiate an appropriate procedure as directed by(PlantTechnical SupportCenter).
  • Step Performed Continuously L.

LOAF 8-19 Tu. Of+5" 03 ]

)

i i COMBUSTION ENGINEERING TITLE Loss or Att FEEDWATER RECOVERY j EMERGENCY PROCEDURE

;                                                                          GUIDELINES                                                           Page 2o of 32 Revision ?_ _
ine Loss of All Feedwater Recovery Guideline has accomplished its purpose if

} RCS conditions are bing controlled in hot standby, hot shutdown, or cold shutdown with all of the sFSC acceptance criteria satisfied, and the entry , conditions of an appropriate, approved procedure are satisfied.  ; 1 EE 1 ) .1 i i 1 4 1 4 4 5 1 LOAF 8-20 C r .'. " * ;- 43

I COMBUSTION ENGINEERING TITLE toss or att i FEECWATER RECOVI: V i EMERGENCY PROCEDURE  ; 4 GUIDELINES Page 22 of lL Revision * ) SUPPLEMENTARY INFORMATION

i This section contains items which should be considered when implementing EPGs

'l and preparing plant specific E0Ps. The items should be implemented as preceu-tions, cautions, notes or in the E0P training program.  ; i ! 1. The operator should not add feedwater to a dry steam generator if anotter

steam generator still contains water. Re-establish feedwater only to t*e j steam generator that is not dry. If both steam generators become dry, refill only one steam generator to reinitiate core cooling.

4 1 2. During all phases of the cooldown, monitor RCS temperature and pressure l l to avoid exceeding a cooldown rate greater than Technical Specification Limitations. ,

3. Do not place system in " manual" unless misoperation in " automatic" is l apparent. Systems placed in " manual" must be checked frequently to ensure proper operation. (Reference 15.34)

] ! 4, All available indications should be used to aid ir evaluating plant j conditions since the accident may cause irregularities in a particular instrument reading. Instrument readings must be corroborated when one er more confirmatory indications are available (Reference 15.24), a

5. If the initial cooldown rate exceeds Technical Specification Limits,

, there may be a potential for pressurized thermal shock (PTS) of the l reactor vessel (Reference 10.8). Post Accident Pressure / Temperature l Limits of (Figure 8-1) should be maintained. .

6. Solid water operation of the pressurizer should be avcided unless (20'F7 of subcooling cannot be maintained-in the RCS (Figure 8-1). If the PCS is solid, closely monitor any makeup or draining and any system heatup P
cooldown to avoid any unfavorable rapid pressure excursions.
LOAF 8-21 C =is ; - E - -
  -,               --                                                                                                    ,      ,m~ E- r. . .-, - . - - - . #

COMBUSTION ENGINEERING TITLE tcSS OF Att FEr0 WATER RECOVERY EMERGENCY PROCEDURE i GUIDELINES Page 22 or 3i a vision p

7. Minimize the number of cycles of pressurizer auxiitary spray whenever the temperature differential between the spray water and the pressurizer is greaterthan[200'F)inordertominimizetheincreaseinthespray nozzle themal stress accurr11ation factor. Every such cycle must be recorded in accordance with Technical Specification Limitations (Reference 15.10 & 15.25).
                             .      Monit         quen   tar  para ters s ce a           sus J                                  P          s ma   urst he t     ru         e di   .)

2 9. Natural circulation flow cannot be verified until the RCPs have stopped i coasting down after being tripped.

10. During natural circulation, verification of an RCS temperature response to a plant change cannot be accomplished until approximately 5 to 15

. minutes following the action due to increased loop cycle times (Reference , 15.11).

11. Af ter the required shutdown boron concentration is attained in the RCS, makeup water added to the RCS during the cooldown should be at least equal to the RCS boren concentration to prevent any dilutien of RCS boren l

concentration.

12. Once the pressurizer cooldown has begun, pressurizer level indication -

decalibration will occur. The indication on the nomal pressurizer level indication will begin to deviate from the true pressurizer water level. The operator should use correction curves to find the true pressurizer level. A cold calibrated pressurizer level indication is also available 1 for lower pressurizer temperatures. LOAF- B-22 CN

                                     . ~ > ,                                           +.-y-,, -~e                         my     . - - , ~ q,,,~-m , ,m,-   ,---

1

^

1

 !                                !                          COMBUSTION ENGINEERING                                TITLE    LOSS OF ALL
                                   .                                                                                     FEE 0 WATER RECOVERY EMERGENCY PROCEDURE GUIDELINES                               Page 23 of 32 Revision *

( - - .-

i E 'r, i ., void cxists in the reactor vessel and RCPs are not operating, the t Evt.N5 provides an accurate indication of reactor vessel liquid inventory.

When a void exists in the reactor vessel and RCPs are operating, it is i not possible to obtain an accurate reactor vessel liquid level indication j due to the effect of the RCP induced pressure head on the RYLMS. 1Pe frdiceted M ai alt: 2 4 'f": for diffarant AVLMS dei y' .acc these d l tHW n Infonnation concerning reactor vessel liquid inventory trending may still be discerned. The operator is cautioned not to rely solely on the RVLMS indication when RCPs are operating. j 14 The operator should continuously nonitor for the presence of RCS voiding i and take steps to eliminate voiding any time voiding causes heat removal or inventory control safety functions to begin to be threatened. Void j elimination should be started soon enough to ensure heat refaoval and inventory control are not lost. 4

15. It is desirable to have all electrical equipment available in order to
most effectively mitigate and recover from a Less of All Feedwater event.

i Therefore, if any vital AC or DC bus is de-energized, operators should attempt to restore power to the vital AC or vital DC bus (es). This

;                                                      action is taken even though the loss of one vital AC or DC bus will not

] prevent the operators from performing all necessary actions in the loss of All Feadwater ORG. l i j LOAF 8 23 hE ' a . ^h

                           , ,,-a    , - , - , < , ,          ,                      , ,a --.       e                             4  , - - - , - . - . , - , - - - - - -

COMBUSTION ENGINEERING TITLE toss or att FEE 0 WATER RECOVERY EMERGENCY PROCEDURE GUIDELINES Page 24 of 3i a,yision ,, r j FIGURE 8-1 TYPICAL POST ACCIDENT PRESSURE TEMPERATURE LIMITS (2) j i 2500 - i i [ 2400 - LOWEST SERVICE [ 2300 -, 1000F/ HOUR / , $*h TEMP % COOLDOWN

                                /                                                                                    I
                            )   /      2000  -                                                    NOTE 1            /                               .

Yt O

                          \4l 0                                                                                   [

0

                                    $                                                    (200            F] [

2 Y

e 1500 -
                                                                                                         /                                           -

. H /

E /

5 / u / goon RCP NPSH

                                                                                      /

s I (200F]

                                                                           !    SHUTDOWN                                             [00) 500                         j/   [ COOLING s

0 100 200 300 400 500 600 RCSTEMPERATURE,OF 0 NOTES (1) THIS CURVE SUPERSEDES THE 100 F/ HOUR COOLDOWN CURVE ANYTIME THE RCS HAS EXPERIENCED AN UNCONTROLLED COOLDOWN WHICH CAUSES RCS TEMPERATURE TO GO BELOW S000F (2) THESE CURVES MUST BE ADJUSTED FOR INSTRUMENT INACCURACl,ES 8-24  ::" if . , 21 t,0AF

1 COMBUSTION ENGINEERING TITLE toss or Att FEE 0 WATER RECOVERY EMERGENCY PROCEDURE GUIDELINES page is of 31 Revision er flGURE 8 2 III , TYPICAL ACCEPTABLE $15 Ft.OW vs RC$ PRES $URE '

;                                                                                        INJECTION M00E423                                              i j                                       2300             i     ,        ,        ,     ,       ,        ,     ,     ,   ,    ,  ,         i l

1200 . 1 21H . . 2000 ,. .

                                                               $1A$

1700 . NOTE (3) lege . . 1600 . .

                                     , 1400      -                --                --                   ---------%

E i i1300 p

                                     =

U 1300 , E a: 1100 . 4

                                     $1000 Q

w 000 . / E 000 .

                                                                             ~.

100 . . M . . 606' .- . 400 . , . I 300 . ,-' . f gg, ,, ,

                                                                             ~.

100 - 200 400 600 000 1000 1200 1400 1000 1000 2000 2200 2400 2500 FLOW GPM NOTES: (1) SEE IMPLEMENT Afl0N SECTION FOR DEVELOPMENT OF PLANT SPECIFIC CURVE

                                               . (2) FOR HOT AND COLO LEO IMJECTION MODE.THE LPSI PUMP 1 ARE NOT REQUIRED TO IE OPERATINO.THE HP$l PUMP FLOW l$ OlVIDED EQUALLY
IEtwtEN THE HOT AND COLO LEOS (3) BELOW SI AS PRESSURE.$AF ETY INJECTION SYSTEM ($18) PUMPS WILL BE OPERATINO IUT THERE WILL 8t NO INJECTION FLOW UNTil $YSTEM PRES $URE F ALLS SELOW THE SHUT 0FF HE A0 0F ANY $15 PUMP LOAF 8 25 C M4 1 03

COMBUSTION ENGINEERING TITLE L0ss Or ALL , i EMERGENCY PROCEDURE l GUIDELINES Pase u of " Revision z-FIGURE 8 3

;                                                                           TYPICAL FEEDWATER CAPACITY VER$US T!PE REMAINING
;                                                                                    UNTIL $ HUT 00WN COOLING REQUIRED
                                                                  @0         ,        ,          ,          ,            ,          ,          ,

360 -

320 - -

i l 280 - - I 3 9

                                                                                                           /
                                                              !+ 240  -
                                                                                                         ,o                                              .
,                                                               5                                      '

i - - k200 S D [ x

                                                                                          /y 1

l iso - - S 120 . . so . i M ~ - I i e I e I 1 0 4 8 12 16 20 .24 28 32 TIME REMAINING UNTIL SHUTDOWN 4 COOLING REQUIRED (HRS)

          's LOAF                                         8 26                             e ::~ ^. 20

COMBUSTION ENGINEERING TITLE Loss or Au ' FEE 0 WATER RECOVERY

                                                                                                                                                                                                          -' i EMERGENCY PROCEDURE
GUIDELINES Page_24 or 31 g,y;, ion ,

i FIGURE 8 4 TYP] cal. FEE 0 WATER REQUIRED FOR $ENSIBLE HEAT REMOYAL T COLO(REQUIRED)VSTCOLD (!N!TIAL) l i 4

                                               @     ~

3 4

                                      ;                                                                                                                                                               ~
                                                     ~

TOOLD REQUIRED = 300'F j ,' 5

s 3600F S

a: 3 20 400*F q U 10 - 4608F _ j . l g 1 I I g 520 480 440 400 300 320 280 540 INITIAL TCOW(*FI I 1 8 27 C " '.;: ^ - F 1.0AF

    - , - -.                       -     - . . . . -       __-_r                   -                _,                                                       .                    ._

~ COMBUSTION ENGINEERING TITLE toss or 4tt FEE 0 WATER RECOVERY EMERGENCY PROCEDURE j GUIDELINES page 2e. of n. Revision m  ; SAFETY FUNCTICN STATUS CHECK a Safety Function Accectance Criteria

1. Reactivity Control 1.a. Pesctor power decreasing a n,d, 1

, b.(NegativeStartupRatej l *- ".1 i c. Not more than 1 CEA bottom light not lit or borated per Tech Specs.

2. Maintenance of Vital Auxiliaries 2.a. Main turbine tripped (AC and DC Fower) and .
b. Generator output breakers open 4

' and ge,; c y '

c. At least one[ vital

[4.16kV: AC e r is available ,. ' L*$ y.,tst "

d. At least one se e n of elec.

4 trical DC power is available . for: i) DC control power and ii) The opgigof at least onek?0voltvitalAC 3 instrument channel. 4 LOAF 8 28 :GCi : "... :2 i

             -_   . _ ~ _ . .        - _ , - - .            _   .                 ._.   . . _ ,                    _        ,           - , _ ,                -
                                                                                                                                                                          .-. e - ,
  . . . _.       .      .~          .         _

4 COMBUSTION ENGikEERING TITLE Loss OF Att

!                                                                               FEEDWATER RECOVERY EMERGENCY PROCEDURE l                             GUIDELINES                                   Page 29 of 31 Revision #

SAFETY FUNCTION STATUS CHECK j Safety Function Acceptance Criteria 1

3. RCS inventory Control 3.a. Cnarging and letdown are maintainingorrestgirg g.,

pressurizer level (M to E") I and l b.TheRCSisatleast(20*F] subcooled and 4 2 c.kTheRVLMSindibesthecore iscovered{. 4 RCS Pressure Control 4 Pressuriter heaters and spray are maintaining or restoring

pressuriter pressure within the Post Accident P-T limits of Figure 8 1.

S. Core Heat Removal 5. TH RTD(andaverageCoreExit Thermocouple)temperaturesless than(600'F). LOAF 8-29 CE t' '. : " ; 0 3-J

               ,           e              - -                                   .--

COMBUSTION ENGINEERING TITLE Loss of ALL FEEDWATER RECOVERY EMERGENCY PROCEDURE GUIDELINES page 30 of 31 Revision

  • SAFETY FUNCTION STATUS CHECK Safety Function Acceptance Criteria
6. RCS Heat Removal 6.a. RCS T,y, is c (M]

and

b. 1) fAtI t one steam generator has wide range level > 15%,

and ii) RCS T temperatures are e stableordecreasincl.

7. Containtnent Isolation 7.a. Lontainment pressure less than

[1.5psig) a2d

b. {No contairenent area radiation monitors alaming[

a, n,g

c. No steam plant activity monitors alaming.

I LOAF 8-30 Cl.s+ n : 1 M-- l 1

1 I i COMBUSTION ENGINEERING TITLE LOS$ OF ALL (EEDWATER REC 0 VERT ] EMERGENCY PROCEDURE GUIDELINES Page 32 of 32 Revision .2L._ , j SAFETY FUNCTION STATUS CHECK i SafetyFunctg Acceptance Criteria l i 8. Containment Temperature and 8.a. Containment temperature less than 1 Pressure Control [120'F] 3D$

b. Containment pressure less than

) '

'                                                                                                                     (1.5psig].
9. Containment Combustible 9.a. Containment temperature less than 4

! Gas Control (120'F) anj

b. Containment pressure less than l
                                                                                                                  [1.5psig].

l l 4 l' 4 4 l LOAF e.31 GE M -:, ^2

           --       .--,+,,,,,,...n~s,---,    ,---,,e
                                                          .,,,,~,x.,           ,,r.4,m    ,,.v--,,,,-e,_,,      ,      .-r--- .s-,.m.m  -        --

vv -- -n-, , -

i , 1 i 1 1 i s Attachment 1 provides a plan addressing the requirements of Element 8 of the itRC HFE Program Review Model (PRM). Attachment 2 documents the bases for the System Description for Control Complex Information System for Nuplex 80+. It is provided to meet the commitments of the September 10, 11, 1992 human factors meeting. i Attachments 3 and 4 provide information which should allow closure of Element 7 of the NRC HfE PRM. Per agreement with the llRC Attachment 4 is a markup of existing EPGs to reflect the System 80+ design. 1

Attachment 5 provides responses to the following DSER Open items:

I 18.5.1 1 . 18 ~ ' ! 18.o 1 18.8.1-1

;                       18.8.1-3
!                        18.8.1-4 18.8.1-5 18.8.2 18.9 1 18.9 2 18.10 l

i i I d a l

                                                                                                                                                               -l l

l 4

                                                            . . . - --. . - - - - , , . - . . - , . . , - -           .               . s - ----. - - _-,-

t.q ATTACHMENT 1 HUMAN FACTORS ENGINEERING VERIFICATION AND VAllDATION PLAN NPX80 IC-VP790 03

i HUMAN FACTORS ENGINEERING VERIFICATION AND VALIDATION PLAN FOR NUPLEX 80+ NPX80-IC-VP790-03 Revision 00 ABB COMBUSTION ENGINEERING, INC. Nuclear Power Windsor, Connecticut 06095-0500 Issue Dat<*

RECORD OF REVISIONG NO. DATE PAGES PREPARED BY APPROVALS INVOLVED 00 ALL l NPX80-IC-VP790-03 Rev 00 2

TABLE OF CONTENTS gjetion Title Pace RECORD OF REVISIONS . . . . . . . . . . . . . . . . . . . . . 2 1.0 PURPOSE . . . . . . . . . . . . . . . . . . . . . . . . 6 2.0 BCOPE . . . . . . . . . . . . . . . . . . . . . . . . . 7

3.0 REFERENCES

               . . . . . . . . . . . . . . . . . . . . . . .                                                                                8 4.0 . DEFINITION 1                . . . . . . . . . . . . . . . . . . . . . .                                                                              9   e 5.0 NAMA9EKENT_OF V67                    . . . . . . . . . . . . . . . . . . .                                                                            11 5.1 V&V PLAN REVISIONS . . . .                         . . . . . . . . . . . . .                                                              11 5.2 EVALUATION OF V&V RESULT 8                                   . . . . . . . . . . . . .                                                    11 5.3 V&V REPORT STRUCTURE AND                     CONTENT . . . . . . . . . .                                                                  11 5.4 MANAGEMENT REVIEW                   . . . .       . . . . . . . . . . . . .                                                               11 6.0-V&V TA8K MET 6                                                                . . . . . . . . . . .                                                  12 6.1 AVAILABILITY ANALYSIS AND AVAILABILITY VERIFICATION                                                                                       12 6.1.1        Entpose          . . .. . . . . . . . . .. . . . .                                                                         12 6.1.2        Esp,33- . . . . . . . . . . . . . . . . . . .                                                                              12 6.1.3        Resources            . . . . . . . . . . . . . .. . . .                                                                    13 6.1.4        Nothodoloav              . . . . . . . . . . . . . . . .                                                                   13 6.1.5        Criteria . . . . . . . . . . . . . . . . . .                                                                               14 6.2 SUITABILITY ANALYSIS . . . . . . . . . . . . . . . .                                                                                      16 6.2.1        Purpose          . . . . . . . . . . . . . . . . . .                                                                       16 6.2.2        Scope         . . . . . . . . . . . . . . . . . . .                                                                        16 6.2.3        Resources            . . . . . . . . . .. . . . . . .                                                                      17 6.2.4        Nethodology              . . . . . . . . . . . . . . . .                                                                   17 6.2.5        Criteria . . . . . . . . . . . . . . . . . .                                                                               18 6.3 VALIDATION . . . -. . . . . . . . . . . . . . . . . .                                                                                      18 6.3.1        EMrpose           . . . . . . . . . . . . . . . . . .                                                                       18 6.3.2        Scope         . . . . . . . . . . . . . . . . . . .                                                                         18 6.3.3        Resources             . . . . . . . . . . . . . . . . .                                                                     19 6.3.4        Methodoloav               . . . . . . . . . . . . . . . .                                                                   19 6.3.4.1 General Description                                   . .. . . . . . . . . . .                                                   19 6.3.4.2 Plant Accident, Abnormal, Normal, and HBI.

and I6C Equipment Failure Operating sequences . . . . . . . . . . . . . . .. . 21 6.3.5 Criteria . . .. . . . . .. . . . . . . . . 22 7.0 BCHEDULE & MILESTONES . . . . . . . . . . . . - . . . . .. 27 7.1 AVAILABILITY ANALYSIS & AVAILABILITY VERIFICATION SCHEDULE & MILESTONES . . . . . . .- . . . . . . . . 27~ 7.2 SUITABILITY VERIFICATION SCHEDULE & MILE 8 TONES . . . 29 7.3 VALIDATION SCHEDULE & NILESTONES .. . . . . . . . . 31 8.0 NTE V6V ADNINISTRATIVE PROCEDURES . . . . . . . . 1 . . 33 S.1 FINDINGS REPORTING-E RESOLUTION POLICY , .. . . . . 33 NPX80^.'C-VP790-03 Rev 00 3

l j i l TABLE OF CONTENTS Rection Title EggA

!                       #s2 "'ASK ITERATION POLICY                      . . . . . . . . . . . . . . .                         33
;                       8.3 CONTROL PROCEDURES . . . . . . . . . . . .                              . . . . .                 33 4                        8.4 flDIDELINES, PRACTICES, & CONVENTIONS                                     . . . . . . . .         33 i

APPENJ!IX_& NUPLEE 80+ QEjIGN TEAM _ EVALUATION . . . . . . A-1 LIST OF FIGURES 1 4

,              Figure 7 1            AVAILABILITY ANALYSIS & VERIFICATION PROCESS                                          . 28             '.
Figure ?.3 SUITABILITY VERIFICATION-PROCE85 . . . . . . . 30

] Figure 7.3 ALIDATION PROCESS . . . . . . . . . . . . . . . 32 i i 4 I ll i l 4 I j I NFX80-IC-VP790-03 Rev 00 4 m_-

ABBREVIATIONS ABB-CE Asea Brown Boveri - Combustion Engineering ATWS Anticipated Transients Without scram CCS Component Control System CFR Code of Federal Regulations CRT Cathode Ray Tube CSAS Containment Spray Actuation Signal DIAS Discrete Indication & Alarm System DPS Data Processing System-EFAS Emergency Feedwater Actuation Signal EPG Emergency Procedure Guidelines ESDE Excess Steam Demand Event ESF-CCS Engineered Safety Features Component Control System FTA Function & Task Analysis HFE Human Factors Engineering HRA Human Reliability Assessment HSI Human-Systems Interface I&C Instrumentation and Control I&Cs Indications, Controls, and Alarms IPSO Integrated Process Status Overview LOAF Loss of all Feedwater LOCA Loss of Coolant Accident MCR Main Control Room MSIS Main Steam Isolation Signal PGICR Procedure Guideline Information & Control Requirements PRA Probable Risk Assessment RCS Reactor Coolant System RSA Remote Shutdown Area RSP Remote Shutdown Panel RSR- Remote Shutdown Room SGTR Steam Generator Tube Rupture SIAS Safety Injection Actuation Signal TOI Tracking-of-Open-Issues (database) VAC Volts Alternating Current VDC Volts Direct Current V&V Verification and validation NPX80-IC-VP790-03 Rev 00 5

1.0 PSEPOSE The Human Factors Engineering (HFE) Verification and Validation (V&V) Plan for Nuplex 80+ describes how the HFE V&V is managed, adminictered, and performed. Additionally, the V&V analysis criteria, methodology, required resources x (e.g. Emergency Procedure Guidelines, normal and abnormal optrating sequences, I&C design requirements, HSI hardware including a full scope simulated mockup, etc.), schedule for activities, and milestones are provided. Specifically, the HFE V&V Plan meets the design process requirements and criteria for availability verification, suitability verification, and validation of the ensemble as defined in Sections A-3.6, A-3.7, and A-3.7 of the HFE Program Plan (Reference 1). The HFE V&V Plan addresses the requirements of Element 8, , Human Factors Verification and Validation of the draft NRC Program Review Model (Reference 3). The intent of the criteria in Element 8 have been met. This includes: 1) the design commitment of thoroughly evaluating the HSI as an integrated system using HFE evaluation procedures, guidelines, standards, and principles, 2) Inspection / Test / Analysis including the following: method for implementing HFE V&V, documentation of analyses and findings, and review by the Nuplex 80+ Design Team, 3) Design Acceptance criteria including the following: 1) General Criteria, 2) Implementation Plan, 3) Analysis Results Report, and 4) Huplex 80+ Design Team Evaluation Report. HPX80-IC-VP790-03 Rev 00 6

i' i i i 1 2 . 0 g g.Q 1 3 l , I The HFE V&V plan applies to all Human System Interface (HSI) l

in the Main Control Room (MCR), Remote Shutdown Area (RSA) l l and those control stations specified in the Emergency j i Procedure Guidelines (EPG). V&V in not performed on t
procedures nor the HSI and procedure ensemble. This is j performed as a-col Applicant task. ,

1 i I 1 1 ! l t  ! b, i I i i ? ) ' ,i, i f 1- . I i i i l i. 1-i- 1-1 i i ,l ... t . l b 4

                                                                                                                                                                     ,I 4,

a i

                           ~NPX80-IC-VP790-03 Rev 00                                                                                                           .7.
   --a.._..            ._.~.-: ---                 --   -.~,4           ,   .--.
                                                                             -   , , . - - - - . . .  -.m.~,._..._c-J.~.a.,--._,.J.-.,---.~__;..
                                                                                                                                                 . ~ , _ . - -     .

i, 1 1

3.0 PEFERENCES
1. Human Factors Procram Plan for the System 80+ (TM) Standard i Plant DesiaD, NPX80-IC-DP790-01, Revision 01, December 15, 1992.
2. Guidelines for Control Room Desian Reviews, NUREG-0700, U.S.

Nuclear Regulatory Commission, 1981. i 3. HFE Procram Review Model and Accootance Criteria for Evolutionary Reactors, Draft, U.S. Nuclear Regulatory Commission, 1992. ! 4. Nuolex 80+ Verification Analysis Report, NPX80-TE-790-01, Revision 2, December 1989. j , , S. Simulator Performance Measures. Final Report, CE-NPSD-514, j Task 572, Combustion Engineering, Inc., December, 1988. I

6. Human Factors Encinserina Standards, Guidelines, and Bases
for System 80+,-NPX80-IC-DR-791-02, (Draft).
,                    7. Office of the Federal Register (1992).                         Code of Federal-i                          Reculations. Title 10. Chapter I - Nuclear Reculatory j                          Commission (10 CFR Parts 0-199).
8. Detailed Control Room Desian Review Sucolemgntal Report, San

~ Onofre Nuclear Generating Station, Units 2 & 3, Volumes 1 & 2, SCE Document No. M37328, January 1986.

9. Standard Review Plan, NUREG-0800, U.S. Nuclear Regulatory Commission, Revision 1, 1984.
10. AdvancqdJdgnan-System Interface Desian Review Guideline, 1 NUREG/CR-5908, Draft, 1992.

! 11. Computer Generated Displav System Guidelines (Vol 1 ant 21, j EPRI NP-3701, Electric Power Institute, 1984. i

12. IEEE Guide to Evaluation of Man-Machine Performance 3D Nuclear Power Generatina Station Control Rooms and Other
Perioheries, IEEE Std 845-1988, IEEE, 1988.

4 l 13. Desian for Control Rooms of Nuclear Power Plants, IEC 964, Bureau Central de la Commission Electrotrotechnique Internationale, 1989. 4 d i NPX80-IC-VP790-03 Rev 00 8

4.0 DXIJEITIONS Availability - Verification of task performance capability such that the necessary indications and controls to accomplish a defined set of tasks (e.g., emergency operating procedures) are afforded in a specified work area (e.g., a control rooru), per Section 3.2.2 and 3.7.2 of NUREG-0700 (Reference 2). Features - HCR console annunciators, displays and controls are implemented using Video Display Unit (VDU) devices and backlit component control switches on each control console panel. The following applications are standardized Human-System Interface (HSI). features that utilize consistent operating conventions at Nuplex 80+ control panelst DPS Display Hierarchy DIAS Alarm Tile Displays DIAS Dedicated Parameter Displays DIAS Hultiple Parameter Displays CCS Process Controller Displays CCS Switch Configurations HFE Soecialists - Individuals with credentials in the area of Human Factors Engineering equivalent to 1) at least two years of successful graduate-level study of applicable subjects, plus a year of related design experience; or 2) five years of related design experience; 3) or any evenly proportioned combination of 1) and 2). Human Factors Enaineerina (HFE) - The application of Human Factors Principles and methods to practical engineering and design problems; as distinguished from research and theoretical development. Human-System Interface (HSI) - The operator's point of use of a controlled system in terms of indication and control; with particular emphasis on its organization, and the resulting human performance-related constraints. Indication and control Features - General denotation for information output (i.e., from plant systems to humsn operator) and action input (i.e., from human operator to plant systems) features of the HSI systems, respectively, without regard for specific implementation. operations Experts - Currently or formerly licensed reactor operators with operating experience on similar plants. NPX80-IC-VP790-03 Rev 00 9

Procedure Guideline Informatlyn & Control Reauirements (PGICR) - A summarization of the procedure-based parametric requirements for display and control variables identified by the PTA. Summaries are sorted from the PTA data base for each variable. For example, characteristics for

  " pressurizer pressure" are summarized for each distinct gross function where pressurizer pressure is used.

Characteristics include the following areas: device type, range, accuracy, and units. Resoonsible Manaaement structure - The organizational and management structure responsible for the directior, and integration of HFE in the design of the proposed plant. Suitability - Verificatior of task performance capability such that the HSI design items are individually acceptable (i.e., are Usable, or suitable for their intended use) in terms of applicable HFE Design Guidance, per Section 3.2.2 and 3.7.2 of NUREG-0700 (Reference 2). System I&c Inventory - This inventory includes instrumentation characteristics (e.g. device type, range, accuracy, units, etc.) for all instrunentation, controls, and alarms needed (from the system design engineers _ perspective). This inventory is generated by the individual system cognizant engineers. Ucable - Operable, maintainable, testable, inspectable, efficient, effective, etc.; i.e., sufficient to support the operator's specified tasks. Verification - Availability and Suitability analyses; part of the design process (along with validation) by which HSI design sufficiency is confirmed (per Section 3.7 of Reference 2). Validation - Evaluation of the dynamic operating ensemble demonstrating trained operators' ability to successfully perform their anticipated (i.e., procedural) role in the afforded task environment (i.e., the control room design) under anticipated operating conditions (the Validation scenarios). Part of the design process (along with Verification) by which the HSI design sufficiency is confirmed (per Section 3.8 of Reference 2). NPX80-IC-VP790-03 Rev 00 10

i t 5.0 MANAGEMENT _OF__V6V The Responsible Management Structure of HFE V&V is i j integrated into the Human System Interface (HSI) design l i process as described in Reference 1. The responsible i management structure will be responsible for the following:

1. the development of the HFE V&V Plan;
2. the implementation of the HFE V&V Plan; 3
3. the final disposition and resolution of all findings j identified during the V&V activities.

5.1 V&V PLAN REVISIONS Revisions to the HFE V&V Plan are administratively controlled. 5.2 EVALUATION OF V&V RESULTS Findings and associated resolutions identified during the j V&V tasks, as exemplified in Reference 4 will be itemized i and documented in its associated V&V report. The V&V report will be sent to the Nuplex B0+ design team for review and a comment. The Responsible Hanagement Structure of HFE V&V j will ensure that all comments are resolved. . 5.3 V&V REPORT STRUCTURE AJD CONTENT ! V&V analysis reports shall be structured in accordance with i ABB-CE internal oocumentation format requirements. The HFE V&V analysis reports shall include sections or appendices containing the following information: purpose, scope, references, resources used during the analysis, analysis 4 methodology, analysis criteria and metrics, completed analysis checklists or data sheets, recommendations, f resolutions, and a list of discrepancies entered into the Tracking-of-Open-Issues (TOI) database. 5.4 MANAGEMENT REVIEW i . The ABB-CE document review and comment process and document . distribution process ensure that the results of the HFE V&V activities are received, reviewed and commented on by the Nuplex 80+ design team. An internal procedure described in j Reference 1 requires all human factors and man-machine 1 interface documents for Nuplex 80+, including V&V documents, to be distributed in accordance ABB-CE internal distribution requirements. i NPX80-IC-VP790-03 Rev 00 11 e- ,e----- - - - v - - _ .. _ , , , , , -,y m,-,,,,-,--,,,-,,-.m ,-,,.,-wr_,_,,,,,-,.-.,,,m . , , _ - ,

I a i' 6.0 YEV TASK METHODOLOGY AND CRITERIA 4 6.1 AVAILABILITY ANALYSIS AND AVAIT. ABILITY VERIFICATION 4 6.1.1 EMEP15_t l The purpose of availability analysis and availability verification is to

1. to ensure operator tasks can accomplished with available HSI information and controls; ,

j 2. to ensure that EPG tasks and critical tasks l identified in the Probable Risk Assessment (PRA) can l be accomplished with the fixed location MCR HSI

alone;
3. to ensure that all federally mandated-I&C features 1

are included in the MCR and RSR. Availability analysis and availability verification takes part in two phases (see Figure 7.1): i The ourpose of Phase 1 (Availability Analysis) is to . 4 assure that the comp 1ste set of the following three ! types of requirements are included in the System I&C - i Requirements (as defined in section 4.0): 1) Procedure Guideline Information & Control Requirements (PGICR) (as ^ defined in Section 4.0) as specified in the Functional Task Analysis, 2) Federally mandated indication and control requirements, and 3) the minimum inventory of i fixed location alarms, controls, and indications necessary to carry out the Emergency Procedure Guidelines (EPG) or critical tasks identified in the PRA. The ournose of Phasc 2 (Availability Verificaticr' i: to compare the as-designed HSI to the checklist produced by the Phase 1 analysis. this includes:

1. verifying and documenting that all System I&C Inventory are available in the HLI, design; 4
2. identifying candidate HSI indications or controis-4 for removal or relocation.

6.1.2 Scope i Phase 1 (Availability Analysis)'will be performed as a single task and compares the System I&C Inventory for the panels in the Main Control Room (MCR), Remote Shutdown Area (RSA), and those control stations NPX80-IC-VP790-03 Rev 00 12 4

l l specified in the EPG to the following: 1) Federally mandated requirements, 2) Procedure Guideline Information & Control Requirements (from FTA), and 3) minimum set of fixed location alarms, controls, and indications needed to complete the EPGs and critical tasks identified in the PRA. Phase 2 (Availability Verification) will be performed on the liSI for all of the panels in the MCR, RSA and those control panels specified in the Emergency Procedure Guidelines (EPG) usir- the availability checklist developed in phase 1. 6.1.3 Resources The fo}1owing resources will be available: individual panel design reports containing the MCR and RSA data bsse inventory elements. The MCR inventory elements used for the verification shall include device type, units, and range, scale precision, and e.ccuracy in a data base; PGICR will come from the PTA;- minimum inventory of fixed location alarms, controls, and indications carry out the EPGs defined in CESSAR-DC; System I&C Inventory will come from a controlled System 80+ project document or data base; a qualified HFE specialist will be available to direct and review the analysis. 6.1.4 Methodoloav As exemplified in Reference 4 the following methodology is used: PHASE 1 METHODOLOGY (AVAILABILITY ANALYSIS) The following takes' place (see Figure 7.1):

1) A list of all Federally mandated Indication and Control requirements in 10CRF50.34 will be compiled based on criteria in Section 6.1.5. Each Indication and Control.from the compiled list will be confirmed to be in the System I&C Inventory;
2) A list of all fired location alarms, controls, and indications required to complete the EFGs will be NPX80-IC-VP790-03 Rev 00 13

used. Each Indication and Control from the compiled list will confirmed to be in the System I&C Inventory;

3) The FTA produces a list of PGICR. This PGICR will be confirmed to be in the System I&C Inventory.

The comparisons will be reviewed to identify instrumentation that may be necessary for the above requirements but were not included in the System I&C Inventory. System I&C Inventory findings and resolution are sent to the System I&C Inventory for final resolution. When the System I&C Inventory includes all three types of requirements, an availability checklist is developed to be used in phase 2, availability verification. Whnn all required HSI are included in the System I&C Inventory, an availability checklist will be generated. The requirements-to-inventory mapping, findings, explanations (if necessary), resolution, and final availability checklist will become part of the availability analysis report. EHASE 2 METHODOLOGY (AVAILABILITY VERIFICATIONi The availability checklist will be used to evaluate The MCR, RSA, and those control stations specified in the EPG HSI (as defined in the panel design reports) for completeness. Discrepancies between the design HSI and the availability checklist will be formally evaluated and resolved. This analysis will identify findings such as missing required panel HSI, and 2) unnecessary panel HSI. The findings and a resolution will be documented. Any resulting changes to the design will be sent to the TOI data base for eventual inclusion in the HSI panel report (s). The process will be repeated until the HSI panel designs match the availability checklist. The findings, explanation (if necessary), and resolution will become a part of the availability verification report. 6.1.5 Criteria Phase 1 Availability Analysis Criteria

1. All of the required Federally mandated Indication and Control features listed below are included in the System I&C Inventory:

a) Integrated display of safety parameter indications; 10 CFR 50.34 (f) (2) (iv) . I l NPX80-IC-VP790-03 Rev 00 14

l 4 ) j- b) Indication of the Bypassed.and Inoperable Status of Safety Systems; 10 CFR j 50. 34 (f) (2) (v) . 4 c) Indication of relief and safety valve

position; 10 CFR 50.34 (f) (2) (xi) .

i , d) Indication of auxiliary feedwater system flow; 10 CFR 50.34 (f) (2) (xii) . e) Control of auxiliary feedwater system initiation; 10 CFR 50.34 - (f) (2) (xii) .

f) Indication of containment pressure; 10 CFR 3 50.34 (f) (2) (xvii) .

i- . g) Indication of containment water level; 10 CFR 50.34 (f) (2) (xvii) , j h) Indication of containment hydrogen i concentration; 10- CFR- 50.34 (f) (2) (xvii) . b i) Indication of containment (high level)'

radiation intensity; 10 CFR
                                        -50. 34 (f) (2) (xvii) .

y j) Indication of noble gas effluents at-

potential accident release points; 10 CFR

! 50. 34 (f) (2)'(xvii) .. i k) Indication of inadequate core. cooling; 10 l - CFR 50.34 (f) (2) (xviii) .

l) Post-Accident Monitoring Indications; 10 CFR

{ 50. 34 (f) (2 ) (xix) .1 , m) Indication of in-plant radiation and j- . airborne activity; 10 CFR , 50. 34 (f) (2) (xxvii) ; J l 2. All-of.the= fixed: location alarms,-controls, and 4 4

                             . indications ~ identified in CESSAR-DC-needed to complete the EPGs'and. perform critical. tasks =                       ,

l identified in the PRA are included and-. identified'in j -the System I&C Inventory.as a: fixed-location alarm; 4 control or indication;

3. All of the PGICR' identified in the FTAJare. included F in the System I&C Inventory; l
4. System I&C Inventory.

1 -l NPX80-IC-VP790-03~Rev 00' 15 l

! Phase 2 Availability Verification Criteria

1. All System I&C Inventory items with appropriate characteristics are found on HSI designs; j

j 2. There are no HSI that have no operational basis. ! 6.2 SUITABILITY ANALYSIS l 6.2.1 Eurp_e.33 I Suitability analysis addresses the issue of whether the l form and arrangement of'HSI indications and controls supports operator task accomplishment._ It roughly spans-l the gap between the' questions of "is the needed i information, and only the needed information, present?" 3 (Availability) and "does the design, in terms of actual operators, using the full control room,-the actual procedures, the real plant dynamics, etc. actually work together as a whole?" (Validation). Suitability therefore-overlaps somewhat with both these areas of evaluative effort.- The suitability analysis is performed using two different approaches, 1) a top-down

approach, and 2) a bottom-up. approach.

, The " top-down" approach attempts to evaluate the

appropriateness of the design selections in the context
of the big picture. This view considers the overall system design, the nature of real-world operator tasks, and the integration of the parts of-the man-machine interface into a coherent and easily used whole.

The " bottom-up" approach uses the control room design j review guidelines found in NUREG 0700 (Reference 2)-and j the HFE Standards, Guidelines and Bases'(Reference 6) as ', a set of accepted and' established criteria. . These ~ , criteria are particularly useful_for identifying _ l individual item discrepancies, such as inadequate Jetter sizes or lighting : levels,- where genuine specifications j exist.

,                 There is substantial but not complete overlap between the results of the two methods. This is to be expected,_

, because they both are directed towards the same system-and overall goals; it also indicates that the two approaches together are more complete than either one alone. i f.2.2 Scope 't Suitability analysis will be performed on all HSI features'in the MCR, RSA and those control stations NPX80-IC-VP790-03 Rev 00 16' ) 4

s ) i i A2 COMBUSTION ENGINEERINGM S S Et. TITLE ' L0ss OF COOLANT ACCIDENT RECOVERY i

EMERGENCY PROCEDURE  ;

GUIDELINES Page 2 of 54 Revision D ) i l 4 4 l 1 .i 4 LOSS OF COOLANT ACCIDENT i i RECOVERY GUIDELINE i l b . 1 l 3 i l 4 1 i i

Prepared by .

Mb-COMBUSTION ENGINEERING, INC.

                                                                           -fer the f I C-ncr Croup-t i

1 4 2 4 5-1 CE!' S Is; . OF , LOCA i i l

  .. .- ~- . - -              .--               .        .        _ _ - _ .    .       .-                  --      .  -

, ABB-COMBUSTION ENGINEERING syssee TITLE Loss-or Coolant-ACCIDENT RECOVERY EMERGENCY PROCEDURE j GUIDELINES Page 2 of 54 g, vision 'pg PURFOSE This guideline provides operator actions.which must be accomplished in the ! event of a Loss of Coolant Accident (LOCA). The actions in this guideline are necessary to ensure that the plant is placed in a stable, safe condition. The , goals of this guideline are te mitigate the eftects of a LOCA, to isolate the . break, and.if this is not possible, to establish either long term core cooling-I using the safety injection system or core cooling using the shutdown cooling system. This guideline achieves this gosi while maintaining adequate core I cooling and minimizing radiological releases to the environment. This a j guideline provides technical infonnation to be used by utilities in developing 4 a plant specific procedure. ENTRY CONDITION, . j

1. The Standard Post Trip Actions have been performed l- and l 2. Plant conditions indicate that a Loss of Coolant Accident has occurred.

Any one or more of the following may be present: i

a. Pressurizer level low (for a break in the pressurizer, the level may I

behigh). g g ,, g, 4 yh ht g,a 5'ig . b. Safety injection system (515) actuated automaticallyf yCSFAS.

c. Increase in containment pressure, temperature.' radiation, humidity-and t sump level,
d. -Figh :;ur ;h tark 1:";el, temperature. : p : tu-e ~C.RvJST 'TJAP i
e. [0ther pl = t speci'i; 3 pter , "
erthere.)

kreswmte.< - pt ewa, 4-E hms i Jsca h % d vo'id g

                      $     lo55 of subc.ooM                 %         g dc h_d hj- Iuhmole.d koga 4,b.

4 LOCA 5-2 iCO: Z: N , . 0 3 --

S' ABB -c0MBUSTION ENGINEER!NG W5 80-t TITLE g Cg EMERGENCY PROCEDURE-GUIDELINES Page 3 of 54 Revision 1 EXIT CONDITIONS

1. The diagnosis of a (oss of Coolant Accident is not confirmed.

2.C $ 2. Any of_ the loss of Coolant Accident Safety function Status Check acceptance criteria are not satisfied, or j 3. The loss of Coolant Accident EPG has accomplished its purpose by satisfying A3 of the following: ]

a. All Safety Function Status Check acceptance criteria are being satisfied.
b. Shutdewn Cooling System Entry Conditions are satisfied, or the break j has been isolated, or the RCS is in long term core cooling.
c. An appropriate, approved procedure to implement exists or has been approved by the [ Plant' Technical Suphort Center or the Plant i Operations Review Comittee).

4 i e J 4 LOCA 5-3: - C D: ::: "c . i

i i l ABB- COMBUSTION ENGINEERING Sysso+ TITLE LOSS OF COOLANT ACCIDENT RECOVERY  :

EMERGENCY PROCEDURE 4

GUIDELINES Page 4 , of 54 Revision M INSTRUCTIONS CONTINGENCY ACTIONS

1. Ensure Standard Post Trip Actions 1.

performed, i i

  • 2. Confirm diagnosis of Loss of Coolant -2. Rediaonose event and exit i Accident by: to either appropriate j a. verifying Safety function Status Optimal Recovery Guideline 1 Check acceptanse criteria are or to the Functional satisfied, Recovery Guideline.

and b referring to the Break Identifi- ] cation Chart (Figure 5-2), and - c.[samplingbothsteamgenerators i for activitygwoq ,Jh-. s. rW sy,% , f * *~ ** s ~r.s.~.riur. nw {

  • 3. If pressurizer pressure decreases to
3. If pressurizer pressure ts2s oc cochm+ pre asre.

4 or below [Wpsi a), lr: v:r i fy ;r. -- dgeases to or below AON2bitk M 9*'S f "" [ N psia) and an SIAS has j ven% ari S t As and Ct A5 65 NOT been initiated-l Ac. b & d . automatically, Then nianually initiate an S!AS. l 14' Cneht.sm+ yte.ssare M c %se.s "to .d

                                                                 \e_qs+ Q."1psg 465 L                                                                 g C.t As 65 od W I

w % A d b % % \\ l w h e h e. o C\As. 4

  • Step Performed Continuously

~ LOCA S -CD M "r " 3-

ABO,- COMBUSTION ENGINEERING Sp so+- TITLE LOSS OF COOLANT ACCIDENT RECOVERY EMERGENCY PROCEDURE GUIDELINES Page 5 of 54 Revision M l INSTRUCTIONS CONTINGENCY ACTIONS l

  • 4. Ensure maximum safety injection and 4. E safety injection

. charging flow to the RCS by'the and charging flow M following: maximized, Then do the a, start idle SIS pumps and verify following as necessary: ] j SIS flow in accordance with a. ensure electircal power Figure 5-3, to valves and pumps and b, ensure correct SIS b, start idle charging pumps 8 valve lineup, "C "5 5* e t c. ensure operation of i necessary auxiliary j systems, i

5. M pressuri g pressure decreases to 5. Continue RCP operation, less than [4GGG psia] following an '

SIAS, Then ensure all four RCPs are tripped.

  • 6. [ Verify RCP cperating limits are 6. [ Trip the RCP(s) which do l satisfied]. not satisfy RCP operating limits].

i

7. Record ihe time of day. 7.

d i 4.

  • Step Performed Continuously 4

l

                                      . LOCA                                     5-5                          -CEP 152 "r:    03

i 3-A8e,-COMEJSTION ENGINEERING 598o+ TITLE LOSS OF COOLANT ACCIDENT RECOVERY EMERGENCY PROCEDURE GUIDELINES Page 6 of 54 Revision Y INSTRUCTIONS- CONTINGENCY ACTIONS 4

8. Attempt to isolate the LOCA by 8.

performing the following:

a. [ M g ssgrizer pressure is less a. L p 2492 psia, Then ensure the cJvi.s, i chac the areclosed), -_.m,4-
                                                                                "         ^
b. verify letdown line is isolated, g.V. manually isolate let-
!                                                                                 down,
c. verify sample lines are isolated, &r, manually isolate sample lines, d.[verifynoleakageintoCCWsystem - c4. [g RCS to CCW 1eak is by CCW radiation monitor NOT alarm- evident, Then attenpt to locate and isolate
  -                    ing and no abnormal increase in CCW__

surgetanklevel], _ l e a k) ca.n cl Y"'f 'P'*k Rc.f ' 5 ! e. there are other pospHrT ' g, ig  %(h source leaka 1. hat can be pqp,f dep ressue tdod i a., rapidly a e .. . > isolated, Vedve.s . [ ' T . w rt that infor.ation i e). c g, cAn%,di meda4c. ce.nc 4er y oo\ce 3 As v e k e.s .

            .9. Verify LOCA NOT occurring _outside of                 9. -H LOCK 6+ occurring outside
containment by the following
of containment, Then do the
a. auxiliary building radiation alarms following: ,

NOT alarming, a. attempt to locate and

b. no unexplained increase in auxiliary isolate leak, building sump levels, b. isolate.the auxiliary
c. . % une s ph e.d mc.r eco e. M- building _per[ plant-
i <;ab s p he.c e- sep \*V t h . specific instructions),

i ..3

                                                                             .g tostepA j

e,Ne.5%)oseclca ort. c p se} dep re.s swe i s Se vdve5

        -g. ge,.Q re.aekes c A A sas ,Jes* 'r a\* es arc c \os tN
  • Step Performed Continuously-i LOCA S-6 -CN C % 03-3-
                                       , ,-                . - , - ..         ,                 --       ~     -,- , .,

a TITLE LOSS OF COOLANT ABB bOMBUSTION ENGINEERING SYS &+ ACCIDENT RECOVERY ! EMERGENCY PROCEDURE l GUIDELINES Page 7 of 54 Revision .E i INSTRUCTIONS CONTINGENCY ACTIONS' /

                 *10. H containment pre sufe                         greater                 10. Ensure normal containment than or equal to - . . ,, Then                                               equipment cooling / air ensure the following:                                                        recirculation systems operating.

j a. containment isolation is actuated a. M containment isole-automatically [fkni.-5Wi:- tion does not occur f automatically or all 4 csthed of en:ur" ...qate 4 cant # - ivo inscrted containment isolation M [r m & EsF pc mea. valves are not in their accident positions, a n.$ l b, all available containment ret. ire..dchon ko Then manually initiate i

r 3 ..q ie. ;;;b:-r-operating containment isolaticn- .

$ dr th; c;rg:ng m:' , [ plant specific method i

and of manual containment 3

e normal containma isolation insertion l j equipment cov a r recir- here). ! cul ' .. ystems are opera 1 v. 4

                  *11'. If containment pressure is less than                                  11,

[.3.0 psi + I:$$NN.g3,Thencontainment!: D . ' E may be , m. m -m ~,..., m. i gu r; tic:L _ 5hr.J e. ne.c.csse.,1, e i.

  • Step Performed Continuously i

' LOCA' S-7'- --CO. 1:: N. C:

                                   --                                                       -+vy  w,,       n-w -- w rw+mnm -.+s,-      +  --   p n. pw

e ~_, l I ABS-COMBUSTION ENGINEERING 345 Bo+ TITLE LOSS OF C00usi-ACCIDENT RECOVEP,Y

EMERGENCY P.ROCEDURE GUIDELINES Page 8- of 54 Revision .$
INSTRUCT 10t
5 . CONTINGENCY ACTIONS
12. M containment pressure is greater 12. q, 4 g{ q4& _

l than or equal to C2fbest;d, Then do j a the following: O'6 P' *3 N

a ensure containment spray actuation, b

- b. ensure adequate containment j temperature-pressure control by one of the following: all i) :: lar tve-a containment tect 5 and

                                       .1.., em\.3   unting y .rc.  +5 cain- re.

6 c .m . r u .; rA

                                        /

i atleasttwocontainment)4 y coole , operating ' dhe j emergency mo .nd at least one con nment spre ader- ' vering at least';b5R gp. or-1 iii) two containment spray headers , j' delivering at' least M gpm],@ #b ' and I

c. ' ts which utilire e . a -

hydrogen r " rs should take steps ave the rec , ners e available and aligned to se].

                    ~

C. Tak oc: hoc 4. e\c4c.e. esb ad c. ,

                      &b eve, e.e, r %.c.o & ^ v s to S e r v i c. e.
                    ,     \f %           CL \        C.      C%ft'         r' @ L               -

i

  • Step performedContinuously 6 . N E.r 83 cu % Q ve.nh\shi .5yS h e,m mityST'W o " M

v w h w. TysN M O ore-ro.h3 l LOCA 5-8 .C N ::: "a OL 1 e

    ..r      -_                           ,w      ,       ,         .c.,.      m.-   . . . - -      e     -       --       i
                                                                                             's 4

ABB-COMBUSTION ENGINEERING S15 80+ TITLE LOSS OF COOLANT ACCIDENT RECOVERY EMERGENCY PROCEDURE j GUIDELINES Page 9 of 54 Revision M 4 , INSTRUCTIONS CONTINGENCY ACTIONS

*13. E containment spray system is operat- 13. Continue containment spray ing and containment pressure is less system operation, t'han M , Then containment spray j may be terminated. Upon termination the CSS must be aligned and reset for-automatic operation [or manual i restart)f And da- ^ ^^M s WMc bod Sj gte.- secw e.cl .
         *14. Place the hydrogen monitors in service            14.

l *15. Verify containment hydrogen concentra- 15. Operate hydrogen

tion is less than [0,5%). recombiners until contain.

ment hydrogen concentration is less than [0.5%). a l

         *16. Monitor containment radiation-level              16.            containment radiat p

'- and provide input to [ Plant Technical levels high g Support Center) for evaluating the- operate t odt Removal impact ofpotential environmental S y m]. ! releases. f *17. M the [ Plant Technical Support 17. ! Center) has reviewed and recommended I hydrogen purge system-operation, N k e. NIhkE0[sn rec.c b.a c qs+e%(@$) system in accordance with [ plant specificoperatinginstruction).

  • Step Performed Continuously LOCA .5 JP M 2 '" - 02

] _ m . . - - _ _ , . J

    - - - -             - . -           .  - ~ - -         - -         -.        _              .--.

ABB> COMBUSTION ENGINEERING Sys So+ TITLE LOSS.Or COOLANT

                                                                                   ^' * " "' *

. EMERGENCY PROCEDURE 3 GUIDELINES Page 2 of 5' Revision _.,1 lNSTRUCTIONS CONTINGENCY ACTIONS

  • 18.When[ Plant-TechnicalSupportCenter] 18.

has reviewed and recommended term-

ination of hydrogen purge, Then
terminate' operation of the hydrogen
purge system.

I ! 19, If the LOCA NOT isolated, Then 19. If the LOCA has been perform steps 20 through 42. isolated, Then perfonn - steps 43 through 61. 20.'If the LOCA has NOT been isolated, 20. 3 Then perform a rapid cooldown to

a. SCS entry conditions at a rate within

] Technical Specification.L.,imits by (listed in preferred order):

a. H the condenser is available.

[ Then cooldown using the turbine-bypass system, E I

b. H the condenser or turbine bypass system E available, Then cooldown using the i atmospheric dump valves.

i *21.' Maintain steam generator' levels in 21. 2 the normal band th oighout the cool-down using (main,p<r o = gee.1w.-J feedwater.

  • Step Performed Continuously LOCA 5-10 +;ii-15; 6 e i
s J
                                                                                                        .j h'

ABb-COMBUSTION ENGINEERING Sys &+' TITLE LOSS OF COOLANT ACCIDENT RECOVERY EMERGENCY PROCEDl!'E

GUIDELINES Page 12 of _S.i Revision )

INSTRUCTION _S , CONllNGENCYACTIONS

            *22. Ensure the available condensate                         22.                                                        ,

l inventory is adequate per Figures

>                  5-4 and.5-5.

j '23. When pressurizer leve1 1s greater 23. Continue to operate all j than or equal to k ]7 , Then ensure :available charging and

charging and letdown, and the 515 515 pumps for maximum l (unless SIS termination criteria available flow. ,

i met) are being operated to main-tain pressurizer level [her44t"). l 4 I c to '7 0'l.

24. Deoressurize the RCS to < W ctg 24
by using the following
Hoo PMS-l a. pressurizer spray.

E

b. control of charging and letdown.

1-

c. operating / throttling l

pumps e

d. ug,o recac.Mo r C o o\4d <

i Scc v w+ 515 " 1 I i A j

  • Step Performed Continuously 1

i i S-11 -CCL H2 N n' LOCA k

                                                                                                - . .        . . . _ . 1, . ,

4L ', ABB-COMBUSTION ENGINEERING 445 Bot TITLE LOSS OF COOLANT ACCIDENT RECOVERY L EMERGENCY PROCED.URE GUIDELINES Page 2 of 54 Revision ] 4 ) INSTRUCTIONS CONTINGENCY ACTIONS f *25. Maintain RCS pressure within the Post *25.1,f RCS subcooling Accident P-T limits of Figure 5-1. greater than P-T limits or cooldown rate greater than' [100'F/Hr.),Thendothe I following as-appropriate:

                                                                            -a,   stop the cooldown

! b, depressurize the' plant using(mainorauxiliksge

                                                                                             . .- ruado, c,w ary) spray to restore V and maintain pressur-1                                                                                   izer pressure within-I                                                                                  the Post Accident P-T limits of Figure 5-1.

f *

c. attempt to' maintain the plant in a stable pressure-temperature
4) - configuration or con-

! tinue to cooldown i 4 within the limits of f Figure 5-1. A d.Ifoverpgurization .

                                                                                -duetoy2:834 charging j                                                                                   flow, Then throttle or j                                                                                   secure flow (refer to j                                                                                  step 31 and manually              ;

control letdown to restore and maintain pressurizer ^ pressur_e within the limitszof Figure 5-1. ! -* Step Performed Continuously LOCA 5-12  % -152 Eev. 03 -

4 f ABB - COMBUSTION ENGINEERINGYS SBot TITLE LOSS or COOLANT ACCIDENT RECOVERY

EMERGENCY PROCEDURE

{ GUIDELINES Page 23 of M Revision W 9 i INSTRUCTIONS CONTINGENCY ACTIONS i *26. If RCPs are NOT operating, Then 26 a. If RCP operation E I evaluate the need and desirability desired Then go to f of restarting RCPs, Considct the step 29. following: E

                                                                                                                       'I
a. adequacy of RCS and core heat b. If at least one RCP removal using natural is operating in each

{ j circulation, loop, then go to step

b. existing RCS pressure'and 31, temperatures, j c. the need for main pressurizer spray capability, d,thedurationof[CCW) inter-ruption to RCPs,
e. RCP seal staging pres,sures

. and temperatures. 1 8 4 1 1 4 4 i

  • Step Per' formed Contiavously LOCA -S-13 -COm:0N M

i

i. ,

+ ABB- c0MBUSTION ENGINEERING 5156t TITl.E g Cg EMERGENCY PROCED.URE -- GUIDELINES Page 24 of 54 Revision I 4 INSTRUCTIONS CONTINGENCY ACTIONS i

                *27. Determine whether RCP restart               27. Go to step 29.

criteria are met by M of the

following

3

a. electrical power is available I tothe[RCPbus),

j' - b. RCP auxiliaries ([CCW)) to main-tain [ seal injection), bearing, j and motor cooling are operating, l and there are no high temperature , alarms on the selected RCPs, 3

c. at least one steam generator is available for removing heat from.

the RCS (ability for feed and I steam flow),

d. prggurizer level i_s greater than j [ M and not decreasing, '
e. RCS subcooling at least [20'F]

! basedon[averageCET] temper-ature (Figure 5-1), { f.[othercriteriasatisfiedperRCP operatinginstructions). 4 4

  • Step Performed Ccntinuously
       .                                                                                          I LOCA                                    5-14                    -C:n:E?o~ 03 4

ABB, - COMBUSTION ENGINEERING S15 sop TITLE Loss of COOLANT ACCIDENT RECOVERY EMERGENCY PROCEDURE GUIDELINES Page 15 of 54 Revision X INSTRUCTIONS CONTINGENCY ACTIONS

28. Go to step 29.
   *28. H RCP restart desired and restart criteria satisfied, Then do the following:
a. start all available charging pumps. M pressure less than

[1/00 psia), Then M1 pumps may be operated,

b. start one RCP in each loop,
c. [ ensure proper RCP amperage and NPSH], g d.operatecharging(andD%Qpumps until pressurizer level greater than [ ' Q.mWf1L,s u u ;e tien eMteria % Refer to step 31).
    *29. H no RCP3 are operating, Then verify                                                                                                                                 29. Ensure proper control of natural circulation flow in at least                                                                                                                                    steam generator steaming one loop by AM of the following:                                                                                                                                        and feeding (refer to steps
a. loop AT(T g - T C) less than normal 20 and 21) and RCS inven-full power cT, tory and pressure control *
b. bot and cold leg temperatures (refer to steps 23 and 24).

constant or decreasing,

c. RCS subcooling at least [20*F] based on [ average CET] temeprature,
d. no abnormal difference [ greater than10*F]betweenT gRTDs and

[ average CET] temperature.

  • Step Performed Continuously LOCA 5-15 -C E h - M : ~.. 03  ;

i l l

TITLE L0ss OF c0OLANT-ABB-COMBUSTION ENGINEERINC 5156-t-. ACCIDENT RECOVERY EMERGENCY. PROCED.URE GUIDELINES Page 26 of 54 Revisien .3 : ' INSTRUCTIONS- ' CONTINGENCY AC/10N$

                     '30. H no RCPs are opera' ting and                      30.

singie-phase natural circulation i can g be tri;.intained, Then break flow and two-phase natural circula-t'on can maintain the heat removal process, The operator should ensure the following:

a all available Mag
pumps-
                                               -- . a- 515 flow per Figure 5-3, and
b. steam generator steaming.and a feeding are properly controlled (refer to steps 20 and 21), '

and c.[averageCET) temperature.is less 4han superheated. 3-j

  • Step Performed Continuousl/

3 i LOCA 5-16 -CO,- E: *: 0?- 4

                                                                          -%  er

4 l AP;B-c0MBUSTION ENGINEERING SYS8o+ TITLE LOSS OF COOLANT ACCIDENT. RECOVERY l EMERGENCY PROCEDURE  ! L GUIDEuNES Page 17 of 54 Revision > ,? I i INSTRUCTIONS CONTINGENCY ACTIONS pumps are operating, Then they 31. Continue _ pump:

                                       '31. M o                                                  may be throttled or stopped, one pump.                            operation, at a time, if ALL of the-following are satisfied:

a.RCSsubcoolingatleast(20*F)_ basedon(averageCET) temperature { 4 (Figure 5-1), j b.pregrizerlevelisgreaterthan.

                                                         -[ii@")a1dnotdecreasing,
c. at least one steam generator is l

available for removing heat from l

                                                         -the RCS (ability for feed and steam flow),

d.[theRVLMSindicatesaminimumicvel atthetopofthehotlegno221es). I '32. D urizer pressure is greate + n 32. Cent LPSI pump [200 psia)an . r ,- , hen any operation v recircu-y* 3 51 pumps may e 6 ,. d. on has occurred. i

                                        *M. M the criteria of step 31 M cannot Kr e
  • be maintained after SIS pumps throttled or-stopped, Then appropriate SIS pumps must be restarted and full SIS flow N

$ restored. + 4 4

  • Step Performed Continuously _

d 1-LOCA S-17 C ," 1;: "r S 1, - n i

  . ~ _ _     .                                            .         -    _             _

s i MI6-COMBUSTION ENGINEERING 515 8m TITLE Loss OF CootANT ACCIDENT RECOVERY EMERGENCY PROCEDURE

GUIDELINES Page 18 of 54 Revision g INSTRUCTIONS CONTINGENCY ACTIONS runn,nc3 and. are =

3f,[1_fthechargingpumpsare4aking t 3f, e suction from a concentrated boron % ] f source.1 Thy realign suction to a o 15 : t . other suitable sourceh/6T within one hour after the start of e% %Irc 4 we,c.d. E r

thelossofCoolantAccident]. Cohaa.d o f ernho n Tn- c.ns~~+ FJ d4 W<Au W ms %v. Ccbas-U
          *3 . Monitor [-rch;lin; wets t;nk (N'T)-]                    3 , Maintain CAWr] level level and verify #E f+ N Y h sump                          greater th M 0%] by levhNcr'e#Ns'as a                      el                     replenishment from avail-
  • S' decreases. able sources.
          *3 , l_f break is inside containment &                       3         breakisinsidecontai[
                -[RWT] -1 Q              ], Then.-vefffy                    men'(and recirculatio does                         i LPSI pumps               antbee ircula-                    E oc rwhen(R             level                 ,.

i nitiated, <[10%), en s p LPSI 4 g g g ggfT pumps, manu initiate recircul on otely or L eNe.\ j S p ill cVe e OC C urs locall with one , S_ train Mow n4 ho\dvP Vo\e at time,[andclose WT E nk -b de_ TR.WST. tiet valves to the SIS , , a R p \e.4. u k % <-. ~I RWs~r M m ava,s\u\. (<_ S owr c.e.S . 1 i

  • Ste;, Perfonned Continuously I

LOCA 5-18 C % 1:2 Rev. G3 4

                                                                                          -i l
                                                                                            )

AE8- COMBUSTION ENGINEERING Sys so+ TITLE LOSS OF COOLANT l ACCIDENT RECOVERY EMERGENCY PROCEDURE .

  .                      GUIDELINES                         Page 2S of 54 Revision T

{ INSTRUCTIONS CONTINGENCY ACTIONS

      *K.                   owg[30              mp    k, a .       HPSI flow <[30 gpy)
           .du.rlarretTiTu'la t1o i.                          per    ump during /

recirctR tion, hen 4 turn off o/ charging pump at tim ntil l HPSI lowg[30gp,, per 1 p "P .

                                                             . a,,nf
b. h minimum HPSI flow /

b ot met with'sil l charging pumps off, Then turn b(f one HPSI pump at,a' tim'e ntil ! HPSI , #10w 3[30 g yrpump. N 34 31,

      )6". Bypass or lower the automatic              S6.
initiation setpoint of [MSIS) as the cooldown and depressurization i

3h, proceed. Wa

      *3/ When u            r epressure u e,reaches
                         %presswe.s.c pressurizer
                                           ~ . 4peu.are

_ 3 renek[625 pom] rdige Y [4ooWu psia], Then isolate, vent or

drain the safety injection _ tanks

, (SITS).

_
  • Step Perf6rmed Continuously LOCA 5-19 - C D: 152 kv 'E--

ABS- COMBUSTION ENGINEERING 9{58ct TITLE LOSS OF COOLANT ACCIDENT RECOVERY EMERGENCY PROCEDURE GUIDELINES Page 20 of 54 Revision J INSTRUCTIONS CONTINGENCY ACTIONS

        *k.[Initiatelowtemperatureover-                       N.

pressurization protection at T e 2y.St[]. h t g *) 4/.At[2-4 hours)afterstartofLOCA, 4f. $ both SG wide range M at least one steam generator is levels are <15%, The:i available for RCS heat removal, implement the FRG and Then do the following: initiate crx - U n;gh-a. direckstpblishsimultaneoushotand s e.9e.1 A c h [RCS and Lore Heat N injection (unless SCS RemovalSuccessPathHR-4)} operation can be established or before the [4 hour] time limit), [H RCS T temperature in-a_n n d creases S*F, or greater

b. maintain steem generator. heat Then implement the FRG and removal and continue RCS cool- inftiate c:a; P ; 25.i-down (refer to steps 20 and 21). cee4seg (RCS and Core Heat
                         -                                          Removal Success Path HR-Al).
  • Stop Performed Continuously LOCA S-20 C:t 'J: %, CO i 1

v TITLE toss or COOLANT AEA-COMBUSTION ENGINEERING SW so+ ^""'"* EMERGENCY PROCEDURE GUIDELINES Page _?.L of _E Revision N INSTRUCTIONS CONTINGENCY ACTIONS

            *df.WhenthefollowingSCSentry                              4f.IfSCSentryconditions can NOT be established, conditionsareestablisgad:

a, pressurizer level >[3 8.,) and then do the following as constant or increasing, appropriate:

b. RCS subcooling I [20*F], a. maintain natural
c. RCS pressure f [L%f*izt], %0 Psia circulation (refer to
d. RCSg T I C%Kup,, 36 cT steps 29 and 30),
e. RCS activity levei within [ plant b. maintain simultaneous specificlimits], hot and cold leg
f. [other plant-specific criteria injection (refer to inserthern], step 4 D),

a Then exit this guideilne and initiate c. ineintain recirculation SCSoperationper[ operating (refertosteph), instruction]. Include en special d. H the RCS fails to precautions or procedure modifications depressurize and from the [ Plant Technical Support voiding is suspected, Center or Plant Operations Review Then moaitor for voids Committee]. by the following indi-cations, parameter changes, or trends: i) letdown flow greater than charging flow, ii) pressurizer level increasing signi-ficantly more than expected while operating pressurizer spray iii) [the RVLMS indi-

  • Step Performed Continuously (Continued On Next Page)

LOCA S-21 =::t '.:: ";,  :

AE8-COMBUSTION ENGINEERING 515 ao+ TITLE L0ss OF C00LANT ACCIDENT RECOVERY ' EMERGENCY PROCEDURE GUIDELINES Page 22 or s4 geyision , y ,,. INSTRUCTIONS CONTINGENCY ACTIONS

                                                                                                   *4 f.(Cont'd) 4f.

cates that void-ing is preserit in the reactor vessel), iv)(HJTCunheated thermocouple temperature indi-cates saturated conditions in the reactor vessel-

                                                                                          -                        upper head),

v) -[other indica-tions insert s aere),

e. H voicing inhibits RCS depressurization to SC5 entry. pressure, Then attempt to eliminate the voiding by:

i) verify letdown is isolated.

                                                                                                            -ii) stop.the depres-surization lii) pressurize and depressurize the RCS within the limits of Figure
  • Step;PerformedContinuously (Continued On Next Page) l l

1 i LOCA 5-22  ::h-Z: T. c . 03-y y , ,w, n -.i,v. ,2

i

,                                                                                         s
 .      Aea-COMBUSTION ENGINEERING Sy5 eo + TITLE                         LOSS OF COOLANT-
ACCIDENT RECOVERY i EMERGENCY PROCEDURE l GUIDELINES Page 23 - of 5' Revision d i

l- INSTRUCTIONS' CONTINGENCY ACTIONS s g l 47 -*4/.(Cont'd) 5-1 by operating pressurizer heat-ers and spray or HPSI and charging pumps. Monitor l pressurizer level [andtheRVLMS) l for trending of RCS inventory. f, g depressurization of ,

                         ,                                  the RCS to the SCS entry pressure is still
  • not possible, and void-ing is suspected to exist in the steam gen-
                                                           .erator tubes, Then attempt to eliminate the voiding by:

i) cool the suspect-ed steam genera-tor (by. steaming and/or blowdown, and feeding) to condense the steam generator

tube void,.
                                                                        -and
     ' Step Perfomed Continuously                       (Continued On LNext Page)

LOCA' 5-23 . C C' M2 ^: OL

AMCOMBUSTION ENGINEERING 5pso, TITLC L0ss OF COOLANT ACCIDENT RECOVERY EMERGENCY PROCEDURE GUIDELINES Page 24 of 54 Revision) INSTRUCTIONS CONTINGENCY ACTIONS

     \

4/, '4/.(Cont'd) ii) monitor pressur-izer level for

  -*                                                                                               tending RCS inventory.

g,J_fdepressurizationcf f the RCS to the SCS entry pressure is still not possible, then , attempt to eliminate the-voiding by:

1) operate the

[pressurizervent orthe) reactor vessel head vent

                                                                                                  -to clear trapped non-condensible.

gases, and ii) monitor pressuri-zer level [and/or . the RVLMS) for trending of RCS inventory.

  • Step Performed Continuously 4

LOCA 24 - - ::,. J: T c. C;

a ABB-COMBUSTION ENGINEERING 5pso t- TITLE LOSS OF COOLANT ACCIDENT REC 0vrj_y EMERGENCY PROCEDURE < GUIDELINES Page 26 of $4 Revision 1 INSTRUCTIONS 'ONTINGENCY

                                                                          .            ACTIONS v                                               s 47.IfLOCAisisolated,Thenper.                     47 fonn steps 44 though 61.

3 ST. . . J S r_

  • f 4/. 1_fj$4f pumps are operating, Then they 4/. Continue M , pump raay be throttled or stopped, one pump operation, at a time, if Ag of the folicwing are.

satisfied: . a.RCSsubcoolingatleast(20'F) basedon(averageCf.7) temperature (Figure 5 1),

b. nressurizer level is greater than N (JM 9 and not decreasing,
c. at least one steam generator is available for removing heat from '

theRCS(abilityfor}eedand steamficw),

d. [the AYLMS indicates a minimum -

level at the top of the het leg nozzles). 4 5. _ ssurizer pressure is Te'r - 45. hnn,-44!g than [200 psn M n ntrolled, . nee n ion. Then eting LPS pu Q

                      .N"       '
                 ' Step Performed Continuously
                                             ^

LOCA 5-25 -Ct d i n Fu . 00 - b iiiiig-

AF:& COMBUSTION ENGINEERING S45 So+ TITLE L0ss 0F COOLANT ACCIDENT RECOVEP,Y EMERGENCY PROCEDURE GUIDELINES Page.2L of 54 Revision J INSTRUCTIONS CONTINGENCY ACTIONS

  '4). M criteria of step 4 (41116 cannot be               4 f.

maintained af ter $!$ pumps throttled or stopped, Then appropriate $15 pumps mustberestyedandfull515 flow restored.

                           $ ove. A 9 c        t>
  *tf. Control charging'and letdown, and t%p               4    g RCS subcooling of at (unless $15 termination criteria met)                  least [20'F) can N,0_T T

be g to restore and maintain pressuriter maintained, Then [.'#.:*) rnay level [-4-4W4P). be exceeded to restore RCS U U$c '78 subcooling.

4. Depressurize the RCS '.o < [300 psia) ' Af.

by using the following:

a. pressurizer spray, E
b. control of charging and letdown E S _T'
c. operating / throttling ,bM4- pumps ,

or

  • eq vokss$ ( wCker toot %st go w+ sW%
    *5tep Per' formed Continuously at LOCA                                      5 26                       ::" F 2 '       %

1 1 i l 1 - - - i ~ TITLE L0$$ OF COOLANT i ABB-COMBUSTION ENGINEERING 5tsEb+ ' ACCIDENT RECOVERY i EMERGENCY PROCEDURE l GUIDELINES Page " of 5' Revision - ) 4 INSTRUCTIONS CONTING1N1YACTIONS l 7  ? 2 *4/. Maintain pressurizer pressure within of. RCS subecoling greater then - . the Post Accident P-T limits of P.T limits or cooldown rete I ! Figure L 1 by greaterthan(200'F/Hr), i i Then do the following as appropriate:

a. stop the cooldown f

i b, depressurire the plant ' a j using[mainorauxili-l g arylspraytorestore foM gubf and maintain pressu- j W as I o5e

                                                                    'o\s # Q rizerthepressure                 within J-                                                                     y $9                   Post Accident P T
sen 2 limits of Figure 5-1. l
                                                                             ~'
c. attempt to maintain'the l-plant in a stable pres-j sure-temperature con- ,

!' " figuratinn or continue to cooldown within the limits of Figure 5-1. l j d. if overpr suriration e

                                                                                                          charging due to                            .
                                                                                                                                  +

j{ flow, Then throttle or i . secure flow (refer to I stepd)andmanually I

i. control letdewn to

' restore and maintain pressurizer pressure , 4, within the limits of Figure 5-1. i . .

  • Step Performed Continuously 1

i LOCA 15-27 .-c[ii. ;;; T. e O' 4 e w, w e,w -m -m m g-- * * ' v 4 '*" = #*

AevcOMBUSTION ENGINEERING SYS &i r TITLE LO$$ OF COOLANT ACCIDENT RECOVERY EMERGENCY PROCEDURE j GUIDELINES Page 28 of 5_.i Revision )

                                                                                                                                                                   - r 1NSTRUCT10NS                                                CONTINGENCY ACTIONS                  I NY                                                             %
                                                        *$0. Maintain steam generator levels                           !th in the nomal band, using (mair.
                                                                                                      ,  ff*r4 orauili;g-)feedwater.
                                                               - emigenci wi 41                       -
                                                       +M. rnsure the available condensate                             M.

inventory is adequate per Figures e 5-4 and 5-5.

                                                       '5/.BoratetheRCStomaintainshutdown                              $f.

margin in-accordance with Technical

                                                             $pecifications, in.g Prevent boren dilution by pressurizer outsurgebythefollowing(listedin                        '

preferredorder): a, borate the entire RCS (including the mass in the pressurizer) to cold shutdown conditions. . E vf oadd\< b.use[mainorauxiliary)'Aprayte g increase and maintain pressurizer boronconcentrationwithin(50 ' ppm)ofRCSboronconcentration.. l l l l

  • Step Performed Continuously l

l. LOCA 5 28 4t" nrRo. 0.b

              , _ . . _ . _             .._.;.._-_.z__                 . - . _.
                                                                                          .._,_.a-#.._             .___.-.m.-._o..=..              .-,,_-m. ..u-__

4 i, 1 4 1 ABEL-COMBUSTION ENGINEERING 5p so.,. TITLE Lo$$ OF COOLANT ACCIDENT RECOVfRY i a EMERGENCY PROCEDURE l GUIDELINES page 29 of 54 Revision K lh5TRUCT10NS CONTINGINCY ACTIONS 1 s 1 1 5/. Perform a controlled cooldown in 57 l accordance with Technical Specifi. cations by (listed in preferred , ) crder): i a. turbine bypass system t

i. .o. r .

l b. atmospheric dump valves. ] t- - t. . . j *$/.IfRCPsareNOToperating,_Then 5/. a. E RCP operation NOT

-evaluate the need and desirability desired, Then go to of restarting RCPs. Consider the step $7. ,

following: or - ) j a adequacy of RCS and core heat b. M at least one RCP j removal using natural

  • is operating in each j circulation, loop, Then 90 to step f b. existing RCS pressure and 58.

tempera, teres, l

c. the need for main pressurizer
spray capability, l

d.thedurationof.[CCW) inter. l ruption to RCPs, , l' e. RCP seal staging pressures and temperatures. i- -

  • Step Perforred Continuously-l _ -

LOCA 5 29' -CD :52 5 ^: - i l c i

l ABS-COMBUSTION ENGINEERING 51s so+ TITLE Loss or COOLAN

                                                                                                                                                     ##' ' '"' " "T "'

EMERGENCY PROCEDURE GUIDELINES Page 30 of 58 Revision) INSTRUCTIONS CONTINGENCY ACTIONS

                            'ff. Detem ne whether RCP restart criteria $!.Gotostep                                                                                                     -I are met by y of the following;                                                                                                                     l
a. electrical power is av611able to j the(RCPbus), . l b.RCPauxitiaries([CCW))tomaintain

[sealinjection), bearing,andmotor cooling are operating, and there are no high temperature alarms on the selected RCPs,

c. at least one steam generator is i available for removing heat from ,

the RCS (ability for feed and - steam flow).

d. pr,e,s,surizer
                                                    ,               level is greater than (I+&") and not decreasing, e.RCSsubcoolingatleast[20*F)                                                                                                                 ',

! based)n[averageCET) temperature (Figure 5-1), f.[othercriteriasatisfiedperRCP operatinginstructions). l l-i y l

  • Step Perfomed Continuously LOCA 5 30 - C:P ? oae n1 -

l -t t 4

   = - -,w. ,, . - , -   em.--,4%+,#-       , .-      ,,.y-  .,,e.<   .,, ,  _,,.m..,   ,  ,,,,4      ..              , , , . , . .
                                                                                                                                        ,,ym     ,             ,.,,,,s,..,  , _ . - . ,

i i i t i ABSCOMBUSTION ENGINEERING sysso+ TITLE L0ss Or COOLANT i ACCIDENT RECOVERY EMERGENCY PROCEDURE GUIDELINES Page 32 of 54 Revision J l t t INSTRUCTIONS CONTINGENCY ACTIONS

  • S[.j,fRCPrestartdesiredandrestart SkGotostep'[

! criteria satisfied, Then do the following:  ! l a.Startallavailablechargingpumps. i If pre vre less than (1/00 psia), Then )- pumps may be operated. l 1 b. start one RCP in each loop, l c.[ensureproperRCPoperationby } monitoring RCP emperage dNPSH),- j d. operate charging (and jiNf) pumps .l I until prest,urizer level greater i than[lkf(andHPSItermination criteria met. Refertostep4f). l ' e 3

  • Sf<.ynoRCPsareoperating.Thenverify ST Ensure proper control of

! natural circulation flow in at least RCS inventory and pressu j- one 1.oop by M of the following: control (refer to steps [re 2 a. loop iT(T H - T ) less than normal and 4b and steem generator C full power AT, feeding and steaming (refer

b. hot and cold leg temperatures tostepshand5f).

constant or decreasing, } c,RCSsubcoolingatleast(20'f) i basedon[averageCET) temperature, j d.noabnormaldifference(greater l than10'F)betweenT RTDs g and 4 [averageCETtemperature). i-

               ' Step Performed Continuously

^ ' 2 LOCA - 5 31 _C W G ned 4 e E g +--+w- ~ y, --wae--m v n~-- - -.w--n-,w--w, ,r--en--,--+m. , - - - -- r-- rc e e-s- s-we. m r, <

ABB-COMBUSTION ENGINEERING 51580+ TITLE LOSS OF COOLANT ACCIDENT RECOVERY EMERGENCY PROCEDURE GUIDELINES Page 32 of 54 noyigion p CONTINCENCY ACTIONS j JNSTRUCTIONS Sf. Bypass _orlowerthaautomatic Sp'. initiationsetpointsof[MSIS.CIAS, 9mS.andSIAS)asthecooldownand depressurization proceed. 9 7 i 'S7. If pressurizer pressure reaches fg. I hIpsia),Thenisolate,ventor drain the safety injection tanks (Slis).

  • [ Initiate low temperature over. 'e pressurizationprotection(LTOP)at T

c <3'F). w

  • k.WhenthefollowingSCSentry *h.JftheRCSfailsto conditions are established: g depressurize, Then a void a pressufi zer level > [MC) and should be suspected.

constant or increasing, a. voiding in the RCS may b.RCSsubcooling1(20*F). be indicated by any of

c. RCS pressure < ( U psia], the_following indica-
d. RCS TH<[ F), tions, parameter e,RCSactivitylevelwithin[ plant changes, or trends:  ;

specificlimits), f.[otherplant-specificcriteria inserthere) 1 hen exit this guideline and initiate (Continued On Next Page) SCSnperationper[operatin0 instruction). Include any special precautions or

     -(Continued On Next Page)                                                       '

' Step Performed Continuously LOCA S-32 - C L" ' R 6 , C 3

i N  : I ABB-COMBUSTION ENGINEERING qs 43o, TITLE g'gCg EMERGENCY PROCEDURE g GUIDELINES Page 38 of 54 Revision A 1 INSTRUCTIONS CONTINGENCY ACTIONS d 44,(Cont'd) 4. procedure modifications from the ft Md (Plant Technical Suppert Center or PlantOperationsReviewCommittee). 1)letdownflow , greater than J charging flow, ii)pressuriterlevel increasing signi-ficantly more than expected

                                                                       ,                                                                                              while operating pressurizer spray, iii)[theRVLMSindi-cates that void-l-

ing is present in the reactor-vessel), iv)-[HJTCunheated thermocouple , temperature indi-cates-saturated conditions in the reactor vessel-upperhead), ' v)[otherindica-tions insert i here).- ,

                                            ' Step Performed Continuously                                                                            (Continued On Next Page) t LOCA                                                                                5-33                             -- C P ::             ;,cv, c:-
      - - _ , , , , . . . . - - . -.-_ ~ . , _ - , - - . . . . . . , . . . . . . . - . .          . _ . < - _ . . ~ . . . _ , , _           - ._.,,,,1,      . . . ,             . , - - -       . - , . . , , . - . , . . .

ABB-COMBUSTION ENGINEERING syg g+ TITLE LOSS Or Co0LANT ACCIDENT RECOVERY EMERGENCY PROCEDURE GUIDELINES Page 38 of 54 Revision.2 INSTRUCTIONS CONTINGENCY ACTIONS (Cont'd)

b. If_ voiding inhibits RCS depressurization to SCS entry pressure. 1 hen
                                                                                                            , attempt to eliminate the voiding by:
1) verify letdown is isolated, a!Ld ii)stopthedepres-surization.,

a_np i iii) pressurize and

                                                                                              '                        depressurire the RCS within the                 ,

limits of Figure 5-1 by operating pressurizer heaters and spray or 13551 and charging pumps, i Monitor pres-4

  • Step Perfornied Continuously (Continued On Next Page) l .

l LOCA '5-34 C" M ? D~ *?-

1 ( l l i ABB'-COMBUSTION ENGINEERING sys e, TITLE LOSS or Co0LANT ACCIDENT RECOVERY i EMERGENCY PROCEDURE j GUIDELINES Page 21.of !8 Revision._.bi 1 ) 1 j I INSTRUCTIONS CONTING(NCY ACTIONS f * (Cont'd) "] l { surizer level [andtheRVLMS) for trending of , i RCS inventory.

c. If depressuritation of

) thelRCStotheSCS j entry pressure is still

not possible, and voiding'is suspected to-
l. ,

exist in the steam gen. erator tubes, Then 4 attempt to elininate the voiding by: i) cool the suspect-- , j - ed steam genera. [ ter (by steaming and/or blowdown. ' and feeding) to condense'the . steam generator

                                                                                                 ' tube void, y_                       i
11) monitor pressur-12er level for trending RCS inventory.
                               " Step Performed Continuously                         (Continued On Next Page)
                                                                                                                              .1 LOCA                                     5-35                                       OL
                                                                                              -C:t 'MN=

7 . .- - - - -. 1 1 1

                                                                               ~,

Am-c0MBUSTION ENGINEERING SYS6bt TITLE LOSS OF COOLANT ACCIDENT RECOVERY i EMERGENCY PROCEDURE ] GUIDELINES Page 36 of 54 Revision _.X. INSTRUCTIONS CONTINGENCY ACTIONS (? s'7

pf. *)r. (Cont'd)
;                                                        d,jfdepressurizationof
}                                                            the RCS to the SCS i*

entry pressure is still i not possible, Then j attempt to eliminate j the voiding by: I i) operate the [ pressurizer +>ent ) i orthe) reactor i vessel head vent 3 to clear trapped 4 6 non-condensible j- gases, 1"$ ii) monitor pressuri-zerIcvel[and/or

                                                                  -the RVLMS) for trending of RCS inventory.            ,

1 4 i N

  • Step Performed Continuously I

i i s LOCA S-36 C D' ' E ? e e., n2

1 i l AB8-COMBUSTION ENGINEERING S3s g+ TITLE toss or COOLANT

                                                                                                                                            ^" ' ' " ' " ' ' "

[ EMERGENCY PROCEDURE GUIDELINES Page 9 of 5d Revision ._.h l i s ,'t j The LOCA Guideline has accomplished its purpose if the plant is in a condition ! where all of the Safety function Status Check acceptance criteria are being ) satisfied, and the RCS is either in long term core cooling (i.e., recirculation through the $15), the break has been isolated, or SCS entry conditions are satisfied. Further recovery actions must be identified by thc [PlantTechnicalSupportCenter). END , j 1 N f l i-i 1 4 i j i P T LOCA $.37 -C;' F ? ": 03-O e m + -. ,.-- ..~ . ,. .y ,.h,. . . - , . . ., , -.,-,,.--sy y c.-3

                                                                                               ~

AG6 COMBUSTION ENGINEERING S35 g+ TITLE Loss or COOLANT ACCIDENT RECOVERY EMERGENCY PROCEDURE GUIDELINES page 38 of 5' Revision ._)

    $UPPLE M IARY INFORMATION This section contains items which should be considered when implementing EFGs and preparing plant specific E0Ps. The items should be implemented 65 preceu-tions, cautions, notes, or in the E0P training progrem.
1. During all phases of the cooldown, monitor RC$ temperature and pressure to avoid exceeding a maxinum cooldown rate greater than Technical Speci-fication Lirnitations.
2. Do not place systems in "rnanual" unless misoperation in " automatic" is apparent. Systems placed in " manual" must be checked frequently to ensure proper operation (Reference 15.34).
3. All available indications should be used to aid in the evaluation of plant conditions since the accident may cause irregularities in a partic-uler instrument reading. Instrument readings must be corroborated when one or rno're confirmatory indications are available (References 15.24),

4 If there is a high radioactivity level in the reactor coolant system, then circulation of this fluid through the SCS or th av result in , high area radioactivity readingssubs in the

; ,7

[-au:pkcre.e The C,VCSbi'di g .co* activity level of the RCS should be determined prior to initiating SCS or letdown flow (Reference 15.12).

5. ror small breaks in the RCS where the steam generators are important for heat removal, one steam generator must be used for this purpnse even if primary to secondary leaks are detected. Use the unaffected steam generator, or the least affected steam generator, if both have primary to secondary leaks (Reference 15.9).

LOCA 5-38 C O: M2 ^: i

i i i 5* i ABB. COMBUSTION ENGINEERING Sys ec+ TITLE gr Cgt i l i EMERGENCY PROCEDURE .

GUIDELINES Page 39 of 58 Revision.2 !

t~ 1 ! [f o p e wh. = c f **k c on .. . 4 e e s. d m(

                                                                                                                                           <  W w 6 ea m s n e - d
                                                           %6 fe4   ve. W 6 4 1 raw bg e premHure',                                         h1,c   Juu4*4Wdk Or - 3. y.r. u.g
6. tor-4oJtd be ceut!cned age.n.f.e.ru t 4+th9 4Mt-e:enve44c44e-+hev44-not h t4:r unlesHA-49te e tic "AS--i!---re-59 *' '

l -quir+d a nd ! a edequate c Mteia~ert 59"'" isvet eritt! (4adic!t4" e' !O" j V de cratei" ea+ L . l

i j 7. If the initial cooldown rate exceeds Technical Specification Limits, then j
there may be a potential for pressurized therinal shock (PTS) of the

! reactor vessel. Post Accident Pressure / Temperature Limits should be I maintained within the limits of figure 5-1 (Reference 15.8). .l l l 8. Minimize the number of . auxiliary spray cycles whenever the temperature , j differential between the spray water and the pressurizer is greater thah , [200*F]inordertominimizetheincreaseinthespraynozzlethermal l I stress accumulation factor. Everysuchcyclemustberecordedinaccord-l ance with Technical Specification Limitations (References 15.10&15.25). ' l l 9. High cordainment temperature conditions may adversely impact the accuracy i ofinstrumentswhosetransmittersarelocatedinsidecontainment.(e.g., pressurizer level and pressure, steam generator pressure and level. RCS loop RTDs) and may irnpact the continued availability nf equipment located , l in containment. .

10. Verification of an RCS temperature response to a plant change during natural circulation cannot be accomplished until approximately [5 to 15) minutes following the action due to increased loop c,scle times j (References 15.11 & 15.12).
11. Solid water operation of the pressurizer should be avoided unless [20'f]

of subcooling cannot be maintained in the RCS-(figure 5-1). If the RCS - j is solid, closely monitor any makeup or draining, and any system heatup-or cooldown, to avoid any unfavorable rapid pressure excursions. l 4 l. LOCA 5-39 -C ui-i 2 "; 9

'l ABS, - COMBUSTION ENGINEERING 5% ax TITLE gF C f gp EMERGENCY PROCEDURE

GUIDELINES page 40 of 54 Revision ._$

I k

12. Hot leg and cold leg RTD temperature indication may be influenced by j

] charging pump or SIS injection water temperatures. Use multiple RTD I indications (and/orCETindications)fortemperaturewheninjectionis j occurring (Reference 15.11). I , 13. During the process of establishing entry conditions (RCS pressure and temperature) for SCS operation, it may be necessary to eliminate or l reduce the site of the steam void in the reactor head. Ensure sufficient I condennte availability to continue steam generator heat removal until I the RCS pressure and temperature are reduced sufficien'tly, and SCS i operation is accomplished (Reference 15.11). j 14 When a void exists in the reactor vessel, and RCPs are not operating, the l RVLMS provides an accurate indication of Feactor *;essel liquid . inventory. 1  % 1 When a void exists in the reactor vessel, and RCPs are operating, it is not possible to obtain an accurato reactor vessel liquid level indication I due to the effect of the RCP induced pressure-head on the RVLMS. The.

                                                                      ~

4 44c a sd.a v e4 2 W . " ^=T 7 ' - -Tomea6e,e swj++ torrs . Infonnation concerning reactor vessel liquid inventory trending may still be discerned. However, the operator is cautioned not to rely solely on the RYLMS indication when RCPs are operating (Reference 15.15)f cud du uwe-. Oh M%s 8 kevel 'M(Me n 1

                                       't f cr % d a W e .
15. The operator should continuously monitor for the presence of RCS voiding
and take steps to eliminate voiding any time voiding causes'the heat ,

j removal, or inventory control, safety functions to begin to be threatened. Void elimination should be started soon enough to ensure N heat removal and inventory control are not lost (Reference 15.14).

16. For those plangs which use the Containment Sgy Sgtem (C$$) ,M %d C. reb 5PMJo?-$*. M T W p$ p p ;ffm p g $ g v g CSS l may be desirable in the event of an iodine-buildup in containment.

Since iodine may be released to the containment atmosphere at various i LOCA 5-40 -fu- G b.P a

                                                - - , . , . . - .                   ,e- .,     ,,,uw      , . , . - . , - . , .

AB&- COMBUSTION ENGINEERING '535 so+ TITLE Loss or CootAni EMERGENCY PROCEDURE

                                                                                                                               ^"*"'"'*

GUIDELINES __ Page 11. of 58 Revision 'M l l times following event initiation, (e.g., released directly frsm the core I to a large LOCA, reevolved from iodine plated out on containment

                                                                                                                                                          )

surfaces; or released during reactor vessel venting to the containment) and since the CSS is activated automatically on containment pressure, its actuation may not correspond to the time of peak c .inment iodine levels (ifitisactuatedatall). The CSS may be run to reduce  ! containment airborne iodine to acceptable or minimum levels unless the following indicate otherwise: A t'IbJhT, MT or rweb coJoy sap 4 *DE #FN/ (1. If there were a leak in%%4teeet tika ; ump ..:t:E h e , it mightstney m.%y ' be more desirable to leave the iodine atmospherically suspended.

2. If sump water is highly radioactive, it may not be desirable to circulateitoutsidethecontainment.)

I

                                                        --{hr -these-4M4-efr4*9-Q&444ne            r -&t :y be n:c::::ry toMher 4ac4+4&e--
                                                        --+vmp-water-pA(hoyond-that-achieved by tritodh;r phnphete-4*-tWg).
                                                         -to increase long.ts m (f hours.. post.LOCA) 4odine ratantier in the-sump,
                                                         .An4tur.nau method-of-addiag e pu buf fer (typicelly todium hydrnride) it 4y-estat44 thin 9-a - f! owpa th "4th the "harnina cu m 1,     For those plants which use charcoal filters in the containment fan coolers for iodine removal, operation of the filtered fan units may be desirable in the j                                                          event of an iodine buildup in containment.

VAw&S

17. Small breaks located at the top of the pressurizer (e.g., stuck open404 or safety relief valve) will result in flashing and steam production in the reactor vessel and hot legs. This steam will flow towards the break through the pressurizer surge line and oppose the draining of the pressurizer liquid. Thus, the liquid level.in the pressurizer may increase or exhibit erratic behavior due to.the competing steam-water

! counter current flow condition._ A similar behavior may be observed if l the break is in the surge line. i LoCA 5-41 -C C U M k; 03 - l

                                     , , , . - ~ . - -            . , , - , . .      , -                                            .    . . -  ,-
                                                                                                                                                                             )

Asa-coususTioN ENGINEERING S3s so, TITLE Loss or C00Lui

                                                                                                                                              ^ " " ' "'
  • EMERGENCY PROCEDURE GUIDELINES p.g. 42 og sa g ,y;, ion y i j

l l l

18. Operation of any equipment in the containment building when containment '
                                                                     ~

hydrogen'concentrt. tion 1(4%)shouldconsiderthepossibilityofhydrogen ignition (Reference 1$ 16). Consideration should be given to the following:

a. The importance to safety of equipment operation,
b. The urgency of equipment operation, )
c. The use of alternative equipment located outside containment,
d. The current hydrogen level and the anticipated time to reduce H2*(4%]'
19. [Any cautions provided by the hydrogen recombiner vendor concerning operation of the recombiner with a degraded containment environment shouldbeinsertedhere). '
20. Measured containment hydrogen typically represents a value of hydrogen in "

units of percent by volume of dry air. The measured hydrogen will typically,. indicate higher than the. actual containment' hydrogen for a steam / air mixture inside containment. The indicated value-should, therefore, be corrected to account for any steam / air mixture inside containment (Reference 15.16). -

21. Combustion Engineering plants are designed with redundant electrical- ~

equipment. Therefore, the loss of one vital AC or DC bus will not prevent the opdrators from performing the actions of this guideline.- However, it is desirable to have a complete.. complement of electrical equipment to mitigate and to' recover-from an event. Therefore, the-operators should attempt to restore electrical power to any lost l vital AC or vital DC bus (es), tnya.it= n L 22, Ouring e ' H

                                                                           , at least eacXS! pump-should.be operating;at all time $ unless )('51 termination criteria are met.

LOCA- 5-42 -Gy. i SE '; '-er-,,--e v y- .- - - + - , w -muu s -r+ ey n ,+-e- --A y> r,e w w.--,,w-+ -rw.-e- -- ,e *rwr- m.m.,e,r-,ue-et--r- ~,+++-,-,%, -- , - .

TITLE Loss or Coot.wT ABS COMBUSTION ENGINEERING S15 904- ACCID (NT RECOVERY EMERGENCY PROCEDURE GUIDELINES Page '3 of 54 Revisl0n $ y ~~- FIGURE S-1 _ TYPICAL POST ACC ENT PRESSURE TEMPERATURE LIMITS (2)

   ~

2500 ' 3 3

                                                                           /    8 2400  -       LOWEST                                              f 2300  -

SERVICE 1000F/ HOUR / TEMP % 'COOLDOWN

                                                                        /

2M - NOT E 1 / D

                                                                    /

0 4 [200 F) ! N Y iis00 -

                                                              /                               -

B . / e / e / 0 /

      @$g       _
                                                    /

RCP NPSH y B /

                                                                                     '(20 0F)
                                            ! SHUTDOWN                              (001 gno    ,
                                         / / COOLING                                          _

s 0 100 200 300 400 500 600 RCS T EMPER ATUR E. F NOTES:(1) THIS CURVE SUPERSEDES THE 100 F/ HOUR COOLDOWN CURVE ANYTIME THE RCS HAS EXPERIENCED AN UNCONTROLLED COOLDOWN WHICH CAUSES RCS TEMPER ATURE TO GO BELOW 5000F (2) THESE CURVES MUST BE ADJUSTED FOR INSTRUMENT INACCURACIES

      -                                                                                               r---

LoCA 5-43

TITLE toss or CootA,n ffe COMBUSTION ENGINEERING i 9s eo+ ACCIDENT RECOVEP~v EMERGENCY PROCEDURE . GUIDELINES Page dd of .14. ReviSlon ,' flGURE 5-? BR EAK IDENTIFICATION CH ART i PRESSURIZE,R LEVEL CHANGING AND PRESSURIZER PRESSURE RAPIDLY DECRE ASING

                                                                                  # INSERT SUBCOOLING INCREASING OR ONE
                                                               "                     OR BOTH SGslNDICATE PRESSURE LOW YES                        .           NO oMAY BE SLOW IN THE CAS OF SMALL BRE AK LOCA lf CONTAINMENT OR STUCK OP E N 'O RV y                                             -v EXC ESS ST E AM                                  '

PRIMARY DEMAND EVENT SIDE (ESDE) BREAK P P YEe ONT AINM EN NO YES ONT AINME NT NO PRESSURE PRE SSUR E INCREASING INC R E ASING 0 r a yre ACTIVITY IN NO ST E AM P L ANT v v v v v ESDE IN ESDE OUT OF LOC A INSIDE SGTR UT SID CON T AINMENT CONT AINMENT CONT AINM ENT CONT AINM ENT i1 LOCA 5 44 =t as- M : O.

j_ _ _ . . . _ _ _ . _ _ . . _ . _ . . _ _ . _ _ _ _ _. _ _ _ . _ . _ _ _ . . _ _ . _ t A8B COMBUSTION ENGINEERING TySBo+ TITLE Loss Of COOLANT I ACCIDENT REC 0VERf

EMERGENCY PROCEDURE i GUIDEUNES _ -

Page e of 5' Revision.h!'. l i ( i Lf.lGURE 5 1.J- Ill j TYPICAL ACCEPTABLE SIS FLOW vs RC$ f RES.$URE - i INJECTION M00E(2) ,

                                        . 23C0                                 .         .         i    .     .         .            i       .    .     .      i            e
                                                                                                                                                                                .                                        t i                                              2200          ,.

1 2100 - } l 2000 . ,

'                                                                                                                                                                                                   I INO           ~                                                                                                                                                           f

, .f.l.A$ 1800 - i  ! l . 1700 . NOT I (3) ! 1660 . / t 1600 . l

                                          ,.1600            c------------                                                                        ---                       -%

1 2  : I g1100 . j n L i I N 1200 . f I i < g ' g1100 f a w

                                                                                                                                                                                .           t
                                          @1900 M:M g                  .                                                                                                                   .

i a- , 600 . 100 . ! 600 i 500 . ) 400 i' 300 .

                                                                                                                                                                                 ~

200 . i d )- 100 .. f I t' ' ' ~' i ' i i i 1 O 200 400 800 800 1000 1200 1400 1000 1800 2000 2200 2400 2600-f L OW, G PM i I NOTis: lH Stt lMPtiMENT ATl0N SECT 10N f 0A DEVELOPMENT OF PL ANT SPECIFIC CURVE

                                                    .           (2) FOR HDT AND COLO L10 INJECTION M001.THE LPSIPUMP$ ARE NOT

" - REQUIRtu TO BE OPERATING.THE HPSI PUMP FLOW 13 Olvl0tD LOUAltY - 8tTWEENTHE HDT AND COLO t!GS i (2) 8tLOW 51A$ PRES $URL. $AFITY INJECT 10N SYSTIM t$1SI PUMPS WILL 81 OPER ATING IUT THERE Witt Rt N0 INJiCTION f LOW UNTIL $YSTEM FRl!$URf'

                                             %                       i Att$ etLOW THE SHUT 0F F Hi A0 Of ANY $ll PUMP                                                                ~

i LOCA 5-45) I 1

      --.....+--.Mmerm~,mve- .-rer-.r.. 4    ve,    =,ww,            --       --.-rv.-       -m-.4                  -,-, ,- -, . , , * - '              w r,      v.--,,,,~w,     v  -    -r--.     +.-*vr-v   v'e s
                                                                                                                                            ~,

TITLE Loss or COOLANT A6B@MBUSTION ENGINEERING SYSoo+ ACCIDENT RECOVERY EMERGENCY PROCEDURE GUIDELINES Page_d.E.of 54 Revision M hlGURE5-4) TYPICAL FEEDWATER CAPACITY VERSUS TIME 'lNill SHUTDOWN CDOLING REQUIRED 1'

          @0                   ,                            i                          i                            i         i           i i

u-320 . 280 - i 200 =

                                                                                       /                .

U 200 - 9  % 5

         =
         !a 100     _                /+                                                                          *                                     -

5 120 _ 80 - m - 1 1 1 1 1 I t 1 4 8 12 16 20 24 28 32 0 TIME REMAINING UNTil SHUTDOWN COOLING REQUIRED (HRL) 5-46 .eE+-41? Pev. 03 LOCA

Asg. COMBUSTION ENGINEERING 5% eo +. TITLE goygC00gp EMERGENCY PROCEDURE GUIDELINES Page 47 of 54 Revision 2C ; {f!GURE5-5) TYPICAL FEEDWATER REQUIRED FOR SENSIBLE HEAT REMOYAL TCOLD(REQUIRED)Y5TCOLD (lNITIAU 7 50 i i  ! I I I I l t 40 i ~3

3 -
                          'o
                                                                                                                                                   ~

30 - TCOLD REQUIRED - 3000F i 3500F g

                                                                                                                                                   ~

cM - g 400*F  ; ! t

                            " to    _                   45tPF                                                                                      -

4 g i f 1 1 520 480 440' 400 360 320 28'

560 l [ INITI AL TCOLDI II l -

s LOCA. 5-47 CE" T

  • 4
              ,   . =..        .          .                 - - -       -

l ABB-COMBUSTION ENGINEERING 59 so+ TITLE Lo$s or COOLANT ACCIDENT RECOVERY i EMERGENCY PROCEDURE ! GUIDELINES p.g. 48 of s4 n vision ,._3 1 J I j SAFETY FUNCTION STATUS CHECK 1 ) Safety Function Acceptance Criteria. j- 1. Reactivity Control .1.a. Reactor power decreasing 3 and j b.fNegativebrtup.Ratef s

c. Not more than 1 CEA bottom light not lit or borated per Tech

{ Spect. l 4 l l

2. MaintenanceofVitalAuxfliaries -2.a. Main turbine tripped j_ (AC and DC Power) ,a_n d 4
b. Generator output breakers l cpen and j c. At least one .rs4e4 cbv; mon crF VtM l [4.16 kv) AC W is 4

available . div'ts'i.n 1

d. At leatit one M of elec-
'trical DC power is available i for

l i) DC control power and- ] ii) Tge optQ %hera C, on of at least oney 20 vo t vital AC.

                                                                                                                                                            ' instrument channel.

1

1. ,
,                                                        t.0CA                                                                   5-48                                                   4 :' ::: L . 0;"

i :-

J 4 v Asa-COMBUSTION ENGINEERING Si 5, Bot TITLE Loss of c00LANT 4 ACC1 DENT RECOVERY EMERGENCY PROCEDURE i GUIDELINES Page 49 of 5' Revision k 1 4 1

  • j $AFETY FUNCTION STATUS CHECK 4 i
!                                                      Safety Function                                                            Acceptance Criteria
3. n RCS]nventqCy_.Lont rol- 3.a.,I[LOCAis o ak .. Thin"
ensure
1) charging and letdown, and
515 flow (per Figure 5 3) f maintaining or restori g .

pressurizer level [M-ttr 707,W] (unless SlS termina. tion criteria met') and

i ti) theRCSisatleast[20*F] '

subcooled

and i iii) (the RYLMS indicates thet***' 85

{ 1 fk'lrt d'%Mf" , E 2 b. If LOCA NOT isolated, ,T,hy f ensure: ,; _.,

i) allavailableeggjng l pumps are operating and.the l SIS pumps are injecting l water into the RCS per Figure 5-3, and
                                                                                                                        -ii) (the RVLMS indicates -the L.Mit ALA c'W_ **M *a_ l,, .

l. LOCA 5-49 --C D; 4 5 2 f.v . A s -aw+-r w-- m---- .me-.- ,y~.- , eg e , -,yw a-v e * + . , -- +A y.- -

ABS-COMBUSTION ENGINEERING 5% Bo t TITLE LOSS OF COOLANT i EMERGENCY PROCEDURE GUIDELINES Page 5 of 51 Revisien2 ! 1 l l SAFET" *" . ION STATUS CHECK Safety Function Acceptance Criteria

4. ACS Fressure Control 4.a. Pressurizer heaters and spray,  ;

or charging pumps and SIS pumps, i are maintaining or restoring

                                                     . pressurizer pressure within the        i limits of figure 5-1.

E

b. all available charging pumps are-operatingandthe$15 pump (s)are injecting water into the RCS per Ffgure5-3.(unlessSIS terminationcriteriaaremet).
5. Core Heat Removal 5.- T g RTOand[everageCET[

temperatures-less than super-heated. 4 P G -- L OC A 5-50 CEF " 1. v . U.i

i AB6 - COMBUSTION ENGINEERING P S > eo+ TITLE Loss or COOLANT

                                                                                                                                                                ^"' '"' "
  • l EMERGENCY PROCEDURE GUIDELINES Page 51 of 11 RevisionU i

] 1 i

SAFETY FUNCTION STAT'JS CHECK l i

j Safety function Acceptance Criteria , i i j 6 RC$ Heat Removal 6.a.[Atleastonesteamgeneratorhas [ widelevelf15%] s and b RCS T temperatures are stable or c decreasingl 4 l 4 4 LOCA 5-51 4"M "-M- ,

        ,  m-,e'->s-ve-    --m.        v     i--r      ,        -,-,-,,-s             ,e,-m..    -
                                                                                                       ,-w-w-   -,,n-,-,v-r-,.            ..,w,,---,e--m-      --sg             .w.   -
w. ., .-

i ABB -COMBUSTION ENGINEERING so so+ TITLE Loss of C EMERGENCY PROCEDURE "*

                                                                                                                  #"' '"' ootAni l                                             GUIDELINES Page S? of 54 Revision 1

s

                                                     . SAFETY FUNCTION STATUS CHECK i

Safety Function Acceptance Criteria e , 7. Containment isolation i I, 7 a. No steam plant activity monitors 1 alarming i d b. f 1) Contaigmentpressurelest than[ h)

                                                                     .,                                  or                 **
  • ii) - ClAS present or manually initiated aj i c.
1) [No containment area radia.

tionmonitorsalarming) or ii) C]AS present or manually initiated 1 i LOCA l-

                                                               '5-52                                 - :" ;;; N ., 03 -

AE8- COMBUSTION ENGINEERING 5p act TITLE Loss or COOLANT ACCIDENT RECOVERY EMERGENCY PROCEDURE j GUIDELINES Page 53 of 54 Revision J SAFETY FUNCTION STATUS CHECK Safety runction Acceptance Critet B. Containment Temperature 8.a. 1) Containment temperature less

                                                     & Pressure Control than[240*F]

and ii) Containment, pressure less than ]

                                                                     "M                         \' S             i ent cooiing sys te,#
                                                                                                  \s i     perating in one of the roll        g configurations

[i)T e fan coole / in the emer y moct ii) At least gfancoolers in th emerge y mode and at ast one con ainment ray header celive ing at . least 1500 gpm h ti+) Two conta ment spray headers eacn delivering at least

                                                                                                          .15Cegpm].

(Gooo A e.ed bWh %)o#5yer,e 5 is cy.,J.uy w M h A n d a gror=r< C ") rsk LOCA 5-53 COU1 : ": M _ 3 l

4 ABB-COMBUSTION ENGINEERING TITLE 5980+ toss or EMERGENCY PROCEDURE ^" * "'co0LANT """' GUIDELINES Page 54 of Si Revision __ ___

SAFETY FUNCTION STATUS CHECK --

I Safety function i A: J '*gnce Criteris' ._ 4 9. I Containment Combustible Gas

Control 9,a. Hydrogen' concentration less then 4 [0,5%).
                                                                              .o r.

! b. i i) [Allavailablehydrogen I recombiners energized] i and i 11) Hydrogen concentration less e than[4:], , -or

c. Hydrogenhyb, ystem operating i in accordance with [ plant i

j specific operating instructions), I' I

j. . ,

I i q. i i l 4 . LOCA ! 5-54 ^

                                                                               -CE" 15: ';        0'
I

COMBUSTION ENGINEERING TITLE STEAM GENERATOR

EMERGENCY PROCEDURE
  )            GUIDELINES                                Page 1 -   of  35 RevisionEf i

STEAM GENERATOR TUBE RUPTURE REC 0VERY GUIDELINE a ! ) i Prepared by I two. .e, , m, m e , m ,- n , u g h- , C-- fr- ~ " qu o I 't 4 i

   )

SGTR 6-1 %t.L.cz=-*wrM

i I COMBUSTION ENGINEERING TITLE STEAM GENERATOR TUBE RUPTURE REC 0VERY EMERGENCY PROCEDURE GUIDELINES Page 2 og as Revision s PURPOSE i 1 This guidelire provides operator actions which must be accomplished in the event of a Steam Generator Tube Rupture (SGTR). The actions in this guideline are necessary to ensure that the plant is placed in a stable, safe condition. The goal of the guideline is to safely establish Shutdown Cooling System entry conditions while minimizing radiological releases to the environment and

maintaining adequate core cooling. This guideline provides technical infomation to be used by utilities in developing a plant specific procedure.

ENTRY CONDITIONS

1. The Standard Post Trip Actions have been performed.

] 1 and

2. Plant conditions indicate that a steam generator tube rupture has

, occurred. Any one or more of the following may be present: l a. Air ejector high activity alam,

b. Steam generator blowdown high activity alam.

, c. High activity and conductivity in steam generatnr liquid sample,

d. Increasing steam generator level.
        -e .  [Other-phnt--spec +f4c-spp toms , - i ns e r t4ere r}--                         ,

4 i e SGTR 6-2 -CO' Z:'WNM

COMBUSTION ENGINEERING TITLE STEAM GENERATOR , TUBE RUPTURE RECOVERY  ! ~ EMERGENCY PROCEDURE GUIDELINES Page 3 of 35 Revision 83' EXIT CONDITIONS l

1. The diagnosis of a Steam Generator Tube Rupture event is not confinned.

E

2. Any of the Steam Generator Tube Rupture Safety function Status Check l acceptance criteria are not satisfied.

E q 3. The Steam Generator Tube Rupture EPG has accomplished its purpose by 2 satisfying ALL of the following: a, All Safety Function Status Check acceptance criteria are being satisfied.

b. Shutdown Cooling System entry conditions have been established. '
   )       c. An appropriate, approved procedure to implement exists or has been approved by the [ Plant Technical Support Center or the Plant
Operations Review Committee].

1 l ( 4

   )

^ SGTR 6-3 -CE" M Rev M

i COMBUSTION ENGINEERING TITLE STEAM GENERATOR EMERGENCY PROCEDURE GUIDELINES Page 4 of 35 Revision F INSTRUCTIONS CONTINGENCY ACTIONS

1. Ensure Standard Post Trip' 1.
Actions perfomed.
  • 2. Confim diagnosis of a Steam 2. Rediagnose event and exit l

Generator Tube Rupture by: to either appropriate

a. verifying Safety Function Optimal Recovery Guideline l Status Check acceptance or to the Functional criteria are satisfied, Recovery Guideline, and i
b. referring to the Break Identification Chart -

(Figure 6-2),

and
 )
c. { sampling both steam generators for activity}.un~ra
  • 5**f'"5 5 7-m
  • 3. H pressurizer ressure decreases 3. E pressurizer pressure toorbelow[1 psia],Then de}rejsestyrbelow

! verify an SIAS is actuated. [1600 psia),an SIAS has NOT been initiated

  • automatically, Then manually initiate an SIAS.

4

  • Step Performed Continuously i

SGTR 6-4 4EN-1$2Mev .4-

I l COMBUSTION ENGINEERING TITLE STEAM GENERATOR EMERGENCY PROCEDURE

   )

GUIDELINES Page 5 of 35 Revision M INSTRUCTIONS CONTINGENCY ACTIONS

  • 4. Ensure maximum safety injection 4 I_f, f safety injection and and charging flow to the RCS by: charging flow NOT maximized, Then do the
a. start idle SIS pumps and following as necessary:

1 verify SIS flow in accordance with Figure 6-3, a. ensure electrical i power to valves and and pumps, l b. ensure correct SIS

b. start idle charging pumps valve lineup,
c. ensure operation of necessary auxiliary systems.

1

  • 5. H pressurizer pressure 5. Continue RCP operation, pecresestolessthan 9

[ b psia] following an SIAS, Then ensure two of four RCPs l are tripped.(in opposite loops). I i

  • 6. fVerifyRCPoperatinglimitsare 6. { Trip the RCP(s) which do satisfiedf. not satisfy RCP operating limits}.
   )
  • Step Performed Continuously SGTR 6-5  %" " 2 "r: n3

COMBUSTION ENGINEERING TITLE STEAM GENERATOR TUBE RUPTURE RECOVERY EMERGENCY PROCEDURE GUIDELINES Page 6 of 35 Revision N INSTRUCTIONS CONTINGENCY ACTIONS

7. Verify RCS hot leg temperature is less 7. Cooldown the RCS to a hot than [525'F) in order to minimize the leg temperature of less possibility of lif ting steam generator than [525'F] by (listed in safeties after isolating a steam orderofpreference):

generator, a, operation of the tur-bine bypass system, E

b. E the condenser or

' turbine bypass system

                                    -                         not available, Then by operation of the atmospheric dump
  )

valve (s).

8. Maintain steam generator level (s) in 8.
                                        , .srtup the normal band using (main or
                                        ^

emersency} an444an feedwater. I

9. Determine which steam generator has 9.

the tube rupture by performing the following:

a. sample steam generators for activity,
b. (monitor main steam piping for activityf,
c. monitor steam generator levels, i --d . [other@ntapecific liidica t ivus ,

ittsert-here3 SGTR 6-6 -EEN-M2 Rev, 43-

COMBUSTION ENGINEERING TITLE STEAM GENERATOR TUBE RUPTURE REC 0VERY J EMERGENCY PROCEDURE ' GUIDELINES Page 7 of 35 Revision or INSTRUCTIONS CONTINGENCY ACTIONS 1

10. When RCS hot leg temperature is less 10.

than [525'F], Then isolate the steam generator with the higher activity, i higher radiation levels, or increasing j water level by perfonning the following: a, close the MSIV, a. locally close MSIV,

b. verify closed, or close the MSIV b. locally close MSIV by-I bypass valve, pass valve,
c. [Raisethesetpointforthe c. fMaintaintheaffected associated ADV to[950 psia] SGpressures[950 psia]
;                                                                        by:

i) manual operation of the associated ADV ii) local operation of theassociatedADVJ

d. close the main feedwater isolation d. locally close main valve, feedwater isolation valve, ggy amep$

l e. {close the auxU.iary feedwater e. flocally close MW iso-isolation valve (s) including the lation valve (s) and steam driven pump steam supply steam driven pump steem valve associated with the steam supplyvalvej, generatorbeingisolated),

f. isolate steam generator blowdown, f. locally isolate SG blow-down,
g. close vents, drains, exhausts, and 9 locally isolate vents, i bleedoffs from the steam system, drains, exhausts, and
              - h.- [etherW-speci fic items-tnsert-bleedoffs.
                     -here) .
,        SGTR                                          6-7                      CEJ4-152-Revr03 -

( COMBUSTION ENGINEERING TITLE STEAM GENERATOR  ! EMERGENCY PROCEDURE . GUIDELINES Page 8 of as Revision # INSTRUCTIONS CONTINGENCY ACTIONS

!         11. Verify the most affected steam              11, 1_f the wrong steam gener-4 generator is isolated by checking               ator was isolated. Then l

the following: unisolate that steam gener-

a. activity levels, ator and isolate the most
b. radiation levels, affected steam generator
c. possible steam generator level per step 10.
increase.
         *12. Decrease and control RCS pressure           12.

by using main or auxiliary spray, operation of charging agd letdown,

      .)         or throttling of .MP91 pumps (refer to step 15), in order to control pressurizer pressure within the following criteria:
a. lessthan[1000 psia],

and b, approximately equal to isolated steam generator pressure (150 psi). 4

  • Step Performed-Continuously SGTR 6-8 -CE"-152 Cev. 03
                              ~

l l COMBUSTION ENGINEERING TITLE STEAM GENERATOR l TUBE RUPTURE RECOVERY EMERGENCY PROCEDURE ' GUIDELINES Page a of - 25 Revision af_-. INSTRUCTIONS CONTINGENCY ACTIONS

     *13. Maintain the RCS within the accept-     13. If RCS subcooling greater able Post Accident Pressure-Temperature     than P-T limits or cooldown limits of Figure 6-1 by the following:       rate greater than
a, controlling RCS heat removal via [100*F/Hr),Thendothe the unisolated steam generator, following as appropriate

and a. stop the cooldown,

b. control of RCS pressure b, depressurize the plant (refer to step 12). using[mainor auxiliary) spray to restore and maintain i

pressurizer pressure within the Post Acci-i

   }                                                          dent P-T limits of Figure 6-1,
c. attempt to maintain the plant in a stable pressure-temperature configuration or continue to cooldown within the limits of Figure 6-1,
d. If overprgurization
                                         .                    due to Hit *I/ charging flow, Then throttle-or secure flow (refer to step 15) and manually control let-down to restore / main-tain pressure within the P-T limits of Figure 6-1.
      *Steo Performed Continuously tr.To                                  en                     ersia c o  n-. n'

COMBUSTION ENGINEERING TITLE STEAM GENERATOR TUBE RUPTURE RECOVERY EMERGENCY PROCEDURE GUIDELINES Page to of 35 Revision # INSTRUCTIONS CONTINGENCY ACTIONS

    *14   Maintain the isolated steam generator 14. Restore the isolated steam level within the indicated range          generator level to the by the following:                         indicated range by the
a. periodic draining to the { radio- following:

activewastesystem[ a. drainingtothe(radio- ~

b. dump steam from the affected activewastesystem) steam generator to the condenser. b. reduce RCS pressure below the isolated steem generator pressure.
                                                   -c.    [jf-t4mc and circum -
  )

stances-permit, Then-4sta4 snubbee-ptoning-

                                                         . par--plant-4pec4 f4+-
                                                        .pra edure @

4 i t

     $GTR                                  6-10                  CE4-452- Rev na

COMBUSTION ENGINEERING TITLE STEAM GENERATOR TUBE RUPTURE REC 0VERY EMERGENCY PROCEDURE i GUIDELINES Page 22 of 3 5 Revision # INSTRUCTIONS CONTINGENCY ACTIONS 5d ns

     *15. If188H pumps are operating, Then they     15. Continue 4P44 pump nay be throttled or stopped, one pump           operation.

at a time, if ALL of the following are 4 satisfied: j a. RCS subcooling at least [20'F] based on [ average CET] temperature (Figure 6-1),

b. pgegs,gizer level is greater than
                   .[-10C9 and not decreasing,
c. the unisolated steam generator is aveilable for removing heat from the RCS (ability for feed and.

steam flow).

d. {theRVLMSindicatesaminimumlevel atthetopofthehotlegnozzles).
                                                 ~
f15. H P essur4
er peaunen it greatar than 16.rantinue4PS-Ipuhp (2OO-ps and-cedir+Medr--Then-any ' ppent4A ,

opSndna LDSI pumns ==y be stopped.-- Ib ff

      *}T. E criteria of step 15 am er cannot be     JT.

4 maintained af ter SIS pumps throttled or i stopped Then appropriate SIS pumps must be restarted and full SIS flow restored. b

  • Step Perfomed Continuously
      .w i k                                    6-11                 -CfN-152 -Rev.

COMBUSTION ENGINEERING TITLE STEAM GENERATOR TUBE RUPTURE RECOVERY EMERGENCY PROCEDURE GUIDELINES Page 12 of 35 Revision M INSTRUCTIONS CONTINGENCY ACTIONS 87 /7

        *M. _Controlchargingand_ letdown,and                                                                 j#, H RCS subcooling of at p

M (unless H EI termination least[20*F]canNOTbe criteria met) to restore and maintained,Then[24h] maintain pressurizer level may be exceeded to restore

              .{354c P S*].                                                                                           RCS subcooling.

[Io2c 70 $*] 18 /2

        *M. H RCPs are NOT operating, Then                                                                    Pf. a . H RCP operation NOT evaluate the need and desirability                                                                            desired, Then go to of restarting RCPs. Consider the                                                                              step K.

following: SI

a. udequacy of RCS and core heat re- E
 )

moval using natural circulation,

b. existing RCS pressure and b. E at least one RCP temperatures, operating in each loop,
c. the need for main pressurizer Then go to step M.

spray capability, #

d. the duration of (CCW) interrup-tion to RCPs,
e. RCP seal staging pressures and temperatures.
  • Step Performed Continuously SGTR 6-12 C{ii-152 . Re v . 03 ,

COMBUSTION ENGINEERING TITLE STEAM GENERATOR EMERGENCY PROCEDURE GUIDELINES Page 23 of 35 Revision # INSTRUCTIONS CONTINGENCY ACTIONS ii 87 11

  • 20'.
    . Determine whether RCP restart criteria    M . Go to step 27.
are met by ALL of the following
a. electrical power is available to theJRCPbus},

, b. RCPauxiliaries(JCCWJ)tomaintain (sealinjection), bearing,andmotor cooling are operating, and there - are no high temperature alams on the selected RCPs, 4

c. the unisolated steam generator is -

i available for removing heat from the RCS (ability for feed and steam flow),

d. pregurizerlevelisgreaterthan

[240*]andnotdecreasing,

e. RCSsubcoolingatleast[20'F]

i based on [ average CET) temperature (Figure 6-1),

f. fother criteria satisfied per RCP 4

operating instructionsf. 4 i

  • Step PerforTned Continuously.

SGTR 6-13 4CN-152 hv. - OP

  /

COMBUSTION ENGINEERING TITLE STEAM GENERATOR TUBE RUPTURE RECOVERY EMERGENCY PROCEDURE

GUIDELINES Page 24 of 35 Revision #

INSTRUCTIONS CONTINGENCY ACTIONS 4

         %c                                             so                    zl
        *21'. H RCP restart desired and restart         M . Go to step 22 criteria satisfied, Then do the following:
a. start all available charging gu s q Mpressuregssthan 1" psia), Then Misrl pumps may be operated,
b. start one RCP in each loop,

{ c, .{ ensure proper RCP operation by monitoringRCPamperagegndNPSHj,

d. operate charging (and 9tfr!) pumps
      )            untilpgssurizerlevelgreater then[400)andSIStermination criteria met. (Refer to step 15).

51 z)

        *22. H no RCPs are operating, Then verify      2?. Ensure proper control of natural circulation flow in at least          steam generat:,r steaming one loop by ALL of the following:

efer to

a. loop AT(Tg - TC ) less than normal andfeging({h),andRCS steps 24 and 2 full power AT, pressure and inventory l b. hot and cold leg temperatures (refer to steps 12 and 18).

constant or decreasing, '7

c. RCS subcooling at least [20*F]

based on faverage CET) tempersture,

d. noabnormaldifference[ greater than10'F]betweenT H sTDs r and (Core Exit Thennocouples).
  • Step Perfonned Continuously SGTR 6-14 CEii-152 Rev. 03
                                    .J      --                                            - - -
   /

I COMBUSTION ENGINEERING TITLE STEAM GENERATOR I TUBE RUPTURE RECOVERY

     )

EMERGENCY PROCEDURE

                                                                                                \

GUIDELINES Page 25 of 35 Revision #

                                                                                                ]

I INSTRUCTIONS CONTINGENCY ACTIONS o st

23. Sample the RCS periodically for 23.

radioactivity and boron concentration. Calculate and add sufficient boron to i the RCS to raise the entire RCS (including the pressurizer) to the shutdown margin required by Technical Specifications.

) 23
24. Perform controlled plant cooldown, ,24 using forced or natural circulation, '

in accordance with Tecnnical

     }        Specifications. Reduce RCS tempera-

, tures by the following: 4

a. H the condenser is available.

Then cooldown using the turbine bypass system, Ef

b. H the condenser or turbine bypass system NOT available. Then cooldown using the unisolated steam generator atmospheric dump valve.

'l W W

       *25'. Maintain unisolated steam generator      25.

levelinthenormalbgd4hrgughgu,t the cooldown using fmain,or ata44kary) feedwater. i

     }
  • Step Perfonned Continuously SGTR 6-15 {D! 152 Rev. 03

i COMBUSTION ENGINEERING TITLE STEAM GENERATOR TUBE RJTURE RECOVERY y EMERGENCY PROCEDURE - GUIDELINES Page is og as Revision d 4 INSTRUCTIONS CONTINGENCY ACTIONS i 25 25 , *26. Ensure the available condensate 26. inventory is adequate per Figures M and 9-t. l d 5'9 0* 16 i 2T. Cool and depressurize the isolated 27. steam generator as the cooldown proceeds by one of the following methods: ,Starhr a.- feed an leedusing[ main,or .' emer . , aux 4 ry feedwater and blowdown,

b. steaming the isolated steam l ) generator to the condenser (if available) or to atmosphere,
             --c.---{other plent overffic NthTdr-ksert-here3 d                                              27 4       *28.
        ,      Samole the condensate and other con-    28.
necting systems, including turbine building sumps, for activity.

2F 2e ! *29. Monitorthe[turbineandauxiliary) 29. H radiation monitor read-building ventilation radiation ings are excessive, Then monitors and any other applicable take corrective actions in radiation monitors. accordance with Technical Specifications.

     )
  • Step Perfonned Continuously SGTR 6-16 -CEN-152 Rev. uJ

COMBUSTION ENGINEERING TITLE STEAM GENERATOR EMERGENCY PROCEDURE GUIDELINES Page 17 of 35 Revision #f INSTRUCTIONS CONTINGENCY ACTIONS 4 2 27 6

30. Bypass or lower the automatic initia- 30.

tionsetpointsofJMSIS,CIAS, CMS, andSIASJasthecooldownanddepressur-ization proceed. -

& pressstater presset rea des C Mf rif ) , re h n M %{et my

l *31'. 3 H rressurizer pressure reaches 31. 4 [M6 psia), Then isolate, vent or drain the safety injection tanks (SITS). 3: )I *32. [Initiatelowtemperatureoverpressuri- G E. zation protection (LTOP) at T *F]. c 3t n *3 3', When the following SCS entry *33, H the RCS fails to depres-conditions are established,: g surize, Then a void maf a, pressurizer level > [ WO*] and be suspected, constant or increasing, a. voiding in the RCS may
b. RCSsubcooling>[20*F], be indicated by any of .
c. RCS pressure < [ E psia], the following indica-
d. RCS T H 1 [ re-F], tions, parameter g [other-plant spec 44c-criterta- changes, or trends:
.inserthereh i) letdown flow Then exit this guideline and initiate greater than SCS operation per [ operating charging flow, instructions].
  • Step Perfonned Continuously (Continued On Next Page)
SGTR 6-17 M EN-152- Rev. G3 - COMBOSTION ENGINEERING TITLESTEAM GENERATOR s TUBE RUPTURE' RECOVERY EMERGENCY PROCEDURE GUIDELINES Page 18 of 35 Revision # INSTRUCTIONS CONTINGENCY ACTIONS 31 32 E. *H. (Cont'd) ii) pressurizer level increasing signi-ficantly more than expected while operating pressurizer spray, iii) (theRVLMSindi-cates that void-ing is present in ') the reactor vessel), iv) {HJTC unheated thennocouple temperature indi-cates' saturated conditions in the reactor vessel upperheadJ, x) [nther-indica-- .tions insert' MTt]. (ContinuedOnNextPage)
  • Step Perfonned Continuously SGTR 6-18 -CEii-152 Kev. 03 ~
i COMBUSTION ENGINEERING TITLE STEAM GENERATOR TUBE RUPTURE RECOVERY EMERGENCY PROCEDURE ' I GUIDELINES Page 19 of 35 Revision d INSTRUCTIONS CONTINGENCY ACTIONS 4 TL 31 j .33. *J3: (Cont'd)
b. If voiding inhibits RCS depressurization to SCS entry pressure, Then
attempt to eliminate the voiding by:
i) verify letdown is isolated, and ii) stop the depres-surization, and ) iii) pressurize and depressurize the RCS within the limits of Figure l 6-1 by operating pressurizer heat-ers and spray or W SI and charging pumps. Monitor pressurizer level (andtheRVLMSJ for trending of RCS inventory.
  • Step Perfomed Continuously (Continued on Next Page)
SGTR 6-19 TES152 - Rev e -03, 4 COMBUSTION ENGINEERING TITLE STEAM GENERATOR ' TUBE RUPTURE RECOVERY EMERGENCY PROCEDURE GUIDELINES Page 20 of 3s Revision # 1 INSTRUCTIONS CONTINGENCY ACTIONS s l 32 31
31. *E . (Cont'd)
'l
c. H depressuri:.ation of the RCS to the SCS entry pressure is still not possible, and void-ing is suspected to exist in the steam gen-erator tubes, Then attempt to eliminate the voiding by:
i) cool the suspect- ) ed steam genera-tor (by steaming and/or blowdown, and feeding) to condense the steam generator , tube void, -and ii) monitor pressur-izer level for trending RCS inventory. (Continued on Next Page)
  • Step Perfomed Continuously SGTR 6-20 -CCN-152 Rev. 05
COMBUSTION ENGINEERING TITLE STEAM GENERATOR TUBE RUPTURE REC 0VERY EMERGENCY PROCEDURE ) GUIDELINES . Page 21 of as Revision d INSTRUCTIONS CONTINGENCY ACTIONS 3 w
33. *33'. (Cont'd)
d. H depressurization of the RCS to the SCS entry pressure is still not possible, Then attempt to eliminate the voiding by:
- i) operate the (p'~essurizer vent or the'] reactor vessel head vent } to clear trapped non-condensible Sases, and ii) monitor pressuri-zerlevel{and/or theRVLMS[for trending of RCS inventory,
e. Continue attempts to establish SCS entry corditions, or exit this guideline and initiate an appropriate procedure as directed b,t [ Plant Technical SJpportCente-].
  • Step Perfomed Continuously B
SGTR 6-21 -CEn-152 Rev; O P I COMBUSTION ENGINEERING TITLESTEAM GENERATOR l l TUBE RUPTURE REC 0VERY EMERGENCY PROCEDURE . 1 GUIDELINES Page 22 of as RevisionX i I l The Steam Cenerator Tube Rupture Recovery Guideline has accomplished its purpose if the ,ost affected steam generator has been isolated and cooled, shutdown cooling system entry conditions have been established, and all SFSC acceptance criteria are being satisfied. END ) l 3 e ) SGTR 6-22 EEF-152 Rev. n, ~ COMBUSTION ENGINEERING TITLE STEAM GENERATOR EMERGENCY PROCEDURE GUIDELINES Page 23 of 35 Revision d i SUPPLEMENTARY INF0kMAT!0N This section contains items which should be considered when implementing EPGs and preparing plant specific EOFs. The items should be implemented as precau-tions, cautions, notes, or in the E0P training program.
1. To minimize the unmonitored release of radioactivity, use of the atmos-pheric steam dump valves en the affected steam generator should be minimized.
f ^
2. To reduce the release of potentially radioactive s.,
steam from turbine eme er shr%p driven pump exhausts, moter driven aux -or maingfeedwater pumps , should be used. If the motor driven pumps are not available, steam from the intact 5 team generator should be used to drive the turbine driven auxiliary feed pump. .onrpcy-l 3. During all phases of the cooldown, RCS temperature and pressure should be
monitored to avoid exceeding a maximum cooldown rate greater than Tech-nical Specification Limitations.
4. Automatic feedwater modulation may mask the expected steam generattsr level increase due to a steam generator tube rupture.
1
5. If the faulted steam generator has been isolated and the cooldown is
proceeding via natural circulation, an inverted AT (i.e., Tcgreater than
. TH ) may be observed in the idle loop. This is due to a small amount of reverse heat transfer in the isolated steam generator and will have no effect on natural circulation flow in the intact steam generator (Reference 15,11). g 6. Do not place systems in " manual" unless misoperation in " automatic" is ./ apparent. Systems placed in " manual" must be checked frequently to ensure proper operation. (Reference 15.34) SGTR 6-23 -C01-152 Revr G3 COMBUSTION ENGINEERING TITLESTEAM GENERATOR EMERGENCY PROCEDURE GUIDELINES Page 24 of 3s Revision #
7. All available indication should be used to aid in diagnosing the event since the accident may cause irregularities in a particular instrument reading. Instrument readings must be corroborated when one or more confimatory indications are available (Reference 15.24).
8. If the initial cooldown rate exceeds Technical Specification Limits, there may be a potential for pressurized themal shock (PTS) of the reactor vessel (Reference 15.8). Post-Accident Pressure / Temperature Limits of Figure 6-1 should be maintained.
9. Solidwateroperationofthepressurizershouldbeavoidedunless[20'F]
of subcoolina cannot be maintained in the RCS (Figure 6-1). - If the RCS is solid, closely monitor any makeup or draining and any system heatup or cooldown to avoid any unfavorable rapid pressure excursions. )
10. Minimize the number of cycles or pressurizer auxiliary spray whenever the temperature differential between the spray water and the pressurizer is greater than [200*F] in order to minimize the increase in the spray nozzle themal stress accumulation factor. Every such cycle must be recorded in accordance with Technical Specification Limitations.
11. If restarting reactor coolant pumps, consideration should be given to choosing pump combinations which will maximize pressurizer spray flow.
D- [3tonttor--quench-tank-parameter 4-s4nce-any-sustained-operat-ion-of-the - ECRV5my-burst-the tank %-rupture-disc 3r-13: The operator should continuously monitor for the presence of RCS voiding it and take steps to eliminate voiding any time voiding causes heat removal or inventory control safety functions to begin to be threatened. Void elimination should be started soon enough to ensure heat removal and inventory control are not lost (Reference 15.14). SGTR 6-24 4EN-152 4ew OL-- COMBUSTION ENGINEERING TITLE TEAMS GENERATOR , EMERGENCY PROCEDURE  ? GUIDELINES Page.lt of 35 Revision # ,14 *. When a void exists in the reactor vessel, and RCPs are not operating, the O RVLMS provides an accurate indication of reactor vessel liquid inventory. When a void exists in the reactor vessel, and RCPs are operating, it is not possible to obtain an accurate reactor vessel liquid level indication due to the effect of the RCP induced pressure head on the RVLMS (Reference 15.15). .The NJkahu Jevei-aiw-eiliwivad ffe cM "VLMS
design
under these conditicas. Information concerning reactor vessel liquid inventory trending may still be discerned. However, the operator is cautioned not to rely solely on the RVLMS indication when RCPs are operating.
,15 . It is desirable to have all electrical equipment available in order to most effectively mitigate and recover from a steam generator tube rupture ) event. Therefore, if any vital AC or DC bus is de-energized, operators should attempt to restore power to the lost bus (es). This action is ) t: ken even though the loss of one vital AC or DC bus will not prevent the operators from perfonning all necessary actions in the . Steam Generator Tube Rupture ORG. )6. Operators should be aware of the status of CCW supply to the RCPs and, if lt CCW has been isolated, should restore CCW if possible and desired. This is particularly true for plants which receive a CIAS for a low pressurizer pressure condition. +7. The operator should take all steps possible to_ minimize the possibility /5 of opening main steam safeties on the isolated SG. These steps include; ensuring RCS HT is below [525)*F, ensuring RCS pressure is below [1000 psia], and taking steps to avoid filling the isolated SG. These actions-minimize the possibility of opening the main steam safety valve (s) with a_ resultant uncontrolled release of radioactivity to_the environment. SGTR- 6-25 -CEtM52 Rev. 03~ COMBUSTION ENGINEERING TITLE STEAM GENERATOR l EMERGENCY PROCEDURE GUIDELINES Page 26 of 35 Revision d
l
18. When restarting RCPs, it is preferable to first start an RCP in the loop with the operating SG, This will avoid the confusion which could occur from a temporary reversal of TH and Te inaications in the operating loop and allow for slower mixing of inventory from the isolated loor..
19. When indicated SG water level is excessively high (200Q or greater) the l
po:,sibility of valve damage and uncontrolled radioactive releases from direct water relief through the ADVs should be considered before steaming the affected steam generator.
20. If there is a conflict between isolating a SG and maintaining adequate heat removal, then mainta.in RCS heat removal via the least affected SG.
At least one SG should always be available _for heat removal, if at all ) possible. 4 l t t ] , -CEN-152 Rev. 03 - SGTR 6-26 ^ COMBUSTION ENGINEERING TN STEAM GENERATOR EMERGENCY PROCEDURE """"""E"""" GUIDELINES Page 27 o,as g,yi, ion s FIGURE 6-1 TYPICAL POST ACCIDENT PRESSURE TEMPERATURE LIMITS (2) 2500 - i i i f 2400 2300 LOWEST SERVICE jogoF/ HOUR f TEMP % COOLDOWN / / 2000 - NOTE 1 / I ,, c.. .,- 5 [200 F) ! 0 E 1 i1s00 - / - B / ) E / 5 / u / $ 1000 - / RCP NPSH g ,,,  !" / / '[20 0F)  ! [00) 500 COOLING j/ [ SHUTDOWN s 0 ' ' ' 100 200 300 400 500 600 RCS T EMPERATUR E, OF 0 NOTES:(1) THIS CURVE SUPERSEDES THE 100 F/ HOUR COOLDOWN CURVE ANYTIME THE RCS HAS EXPERIENCED AN UNCONTROLLED COOLDOWN WHICH CAUSES RCS TEMPERATURE TO GO BELOW 5000F (2) THESE CURVES MUST BE ADJUSTED FOR INSTRUMENT INACCURACl,ES SGTR 6-27 4E" 152 R0" 03- COMBUSTION ENGINEERING TITLE STEM GENERMOR " """uRE Rme IMERGENCY PROCEDURE i GUIDELINES Page .2_8, of3s g,yi,,,ny FIGURE 6-2 BREAK IDENTIFICATION CHART PRESSURIZER t.EVEL CHANGING AND  ; PRESSURIZER PRESSURE RAPIDLY DECREASING # INSERT SUBCOOLING INCREASING OR ONE OR BOTH SGs INDICATE PRESSURE LOW +MAY DECREASE SLIGHTLY YES P + AFTER TRIP g oMAY BE SLOW IN THE CASE OF SMALL BREAK LOCA IN CONTAINMENT OR STUCK OPEN PORV 1r ir EXCESS ST E AM PRIMARY DEMAND EVENT SIDE (ESDE) BREAK ) 1r 1r YE ONT AINM EN NO YES ONTAINMEN NO PRESSURE PRESSURE INCREASING INCREASING 0 1 y ACTIVITY IN NO STEAM PLANT = i i i 1r 1r 1r  ! ir _1 r ESDE IN ESDE OUT OF - LOCA INSIDE SGTR TSID CONTAINMENT. CONTAINMENT CONTAINMENT CONTAINMENT SGTR 6-28 W-iS2 --Rev3 03 - COMBUSTION ENGINEERING TN STEAM GENERATOR W BE RU MURE R M W EMERGENCY PROCEDURE , GUIDELINES Page 2' of 35 Revision # FIGURE 6 3 TYPICAL ACCEPTABLE SIS FLOW n RCS PRESSURE III INJECTION MODEI23 l 2300 i i . . . . . . . . i i i i 1200 . . l
21H .. .
j 2000 . . . 1000 . . g,gg 1800 . . 1700 - . NOTE (3) 1600 - - i 1500 . . i , 1400 i,.------------------% 2 g1300 - - a k 61200 E ) . 1100 g l d : D, ,  ; ec . $1000 - / -
n. -
g 000 . . 000 . . 100 . - m j 400 . 300 . k . m . D ' 100 . - 0 i t ' i i i i i ' ' = ' i 200 400 000 000 1000 1200 1400 1000 1800 2000 2200 2400 2600 F LOW, GPM NOTES: (1) $EE IMPLEMENTATION SECTION FOR DEVFLOPMENT OF PL ANT $PECIFIC CURVE (2) FOR HOT AND COLO LEG INJECTION MODE,THE LPSI PUMPS ARE NOT REQUIRED TO GE OPER ATING.THE HPSI PUMP FLOW 15 OlVIDED EQUALLY SETWEEN THE HOT AND COLO LEGS (3) IELOW SIAS PRES $URE, SAF ETY INJECTION SYSTEM ($lt) PUMPS WILL BE OPERATING GUT THERE WILL DE N0 INJECTION FLOW UNTil SYSTEM PRES $URE
  • F ALLS lELOW THE SHUT 0FF HE AD OF ANY $l$ PUMP SGTR 6 29 '01-152, Revr 03- -
COMBUSTION ENGINEERING TITLE 37tgg ogsgag7ag M E RUMURE RECOVERY EMERGENCY PROCEDURE GUIDELINES Page of'5 Revision FIGURE 6-4 TYPICAL FEEDWATER CAPACITY vs TIME REMAINING UNTIL SHUTDOWN COOLING REQUIRED i i i e i i i 300 . 320 . 290 - - i 7 240 . ,o / 6. t Q200 D = lis0 c - /+
  • _
120 - 80 - - 4 40 - - t 1  : 1 i i 1 0 4 8 12 16 20 24 28 32 TIME REMAINING UNTil SHUTOOWN COOLING REQUIRED (HRS) SGTR 6-30 -GEM 42-Revr . _ . . . . . . . . . . . . . . _ . _ . . . . . . . . . . _ _ . COMBUSTION ENGINEERING TITLE STEAM GENERATOR EMERGENCY PROCEDURE ) GUIDELINES Page 31. Of35 Revision #3 FIGURE 6-5 TYPICAL FEEDWATER REQUIRED FOR SENSIBLE HEAT REMOVAL TCOLD (REQUIRED) vs TCOLD (INITIAL) i l 50 , , , , , , M - . 2 s n 8 ~ ~ 0 4 ) TCOLD REQUIRED = 300 F s @ 360'F z
gm -
q 400'F e " 10 - 4600F , i i i i g - l 560 520 480 440 400 360 320 280 INITIAL TCO W ( FI SGTR 6-31 . CCN-D2 Rev. 03 = COMBUSTION ENGINEERING TITLE STEAM GENERATOR TUBE RUPTURE RECOVERY EMERGENCY PROCEDURE GUIDELINES Page 32 of 35 Revision # SAFETY FUNCTION STATUS CHECK Safety function Acceptance Criteria
1. Reactivity Control 1.a. Reactor power decreasing and b fNegative Startup Rate) and
c. No more than 1 CEA bottom light not lit or borated per Tech Specs.
) 2. Maintenance of Vital Auxiliaries 2.a. Mcin turbine tripped (ACandDCPower) and
b. Generator output breakers open
c. At least on v"YfaY .16 kv]
AC M -is available divisim
d. At least one tf4 Fin of electrical DC power is available for:
1) DC control power and 11)Thgogat,ionofatleast one 120 volt vital AC instrument channel.
) i l SGTR 6-32 -tfii-152 iteVM3~ l COMBUSTION ENGINEERING TITLE STEAM GENERATOR TUBE RUPTURE RECOVERY EMERGENCY PROCEDURE GUIDELINES Page 33 of 35 Revision # SAFETY FUNCTION STATUS CHECK Safety Function Acceptance Criteria to 7 7o.)
3. RCS Inventory Control 3,a, H pressurizer level is [ & to 3M"),Then:
1) charging and letdown, and
$15 (unless SIS temination criteria are met), are maintaining or restoring pressurizer level and ii)theRCSisatleast[20'F) ) subcooled and the RVLMS indicates the L<ve\ is iii){Ml$iI$$d$df"" a
b. E gr4ssurizer level is less than
[N").Then: i) all available charging pumps are operating and the SIS pump (s) are injecting water into the RCS per Figure 6-3, and ii) fthe RVLMS indicates the levt is cNMO*d.MyU*** ) SGTR 6-33 -EEM-152-ftev;-ON COMBUSTION ENGINEERING TITLESTEM GENERATOR t EMERGENCY PROCEDURE GUIDELINES Page.lt of 35 Revision W SAFETY FUNCTION STATUS CHECK i Safety Function Acceptance' Criteria 4 RCS Pressure Control 4.a. Pressurizer heaters and spray, or charging and letdown, or SIS l pumps (unless SIS temination ' criteria met) are maintaining or restoring pressurizer pressure within the limits of" Figure 6-1. f or
b. all available charging pumps are
] operating and the $15 pump (s) are injecting' water into the RCS per Figure 6-3 (unless SIS } temination criteria are met), f ,- 5. Core Heat Removal S. Tg RTD fand average Core Exit Thermocouple 3'temperaturesless j than[600'F].
6. RCS Heat Removal 6.a. The unisolated steam generator
, has level:
1) within the nomal level band with feedwater available to maintain level 4
or ii) being restored b feedwater we t t we l flow p _. w e+ m yp z &' a n.d.
b. RCSHT islessthan[S2S'F) a.nd J c. RCS temperature is controlled oy turbine bypass system or ADVs.
SGTR 6-34 -CCL 102 Pev A3- COMBUSTION ENGINEERING TITLE STEAM GENERATOR TUBE RUPTURE REC 0VERY EMERGENCY PROCEDURE GUIDELINES page 35 of 35 Revision # SAFETY FUNCTION STATUS CHECK , Safety Function Acceptance Criteria
7. Containment isolation 7.a. Containment pressure less than
[1.5psig] and
b. {No containment area radiation monitorsalarming),
and
c. No abnomal increase in containment sump levels.
8. Containment Temperature and 8.a. Containment temperature less than
) Pressure Control [120*F) and
b. Containment pressure less than
[1.5psig)
9. Containment Combustible 9.a. Containment temperature less than ,
Gas Control (120'F) and
b. Containment pressure less than
[1.5psig). ) SGTR 6-35 -C4M5Hev. Ob I COMBUSTION ENGINEERING TITLE Loss of errs!Tt POWER EMERGENCY PROCEDURE I GUIDELINES Page _L of 30 Revision .92._ LOSS OF 0FFSITE POWER RECOVERY GUIDELINE i Prepared by FA COMBUSTION ENGINEERING, INC, s ' . . , ;Le (J ? -._ . - _ - - = \ t.00P 91 q qg- n,,a3 COMBUSTION ENGINEERING TITLE L0ss Or errstvE pewER RECOVERY GUIDELINE EMERGENCY PROCEDURE I GUIDELINES page 2 of 30 Revision 03 PURPOSE This guideline provides the operator actions which should be accomplished in the event of a loss Of Offsite Power (LOOP). LOOP is defined as loss of Preferred Switchyard I and Loss of Preferred i Switchyard 11 and the Main Turbine Generator f ails to ' runback" and maintain the hotel loads or is no on-line, included are the actions required to mitigate the loss of forced circulation. The actions in 'e this guideline are necessary to ensure that the plant is placed in a stable, safe condition. The goal of this guideline is to safely ,' establish plant conditions allowing implementation of a normal operating procedure for cold shutdown, hot standby, or hot 4 shutdown. This guideline is designed to meet this objective while minimizing any radiological release to the environment and maintaining adequate core cooling. This guideline provides technical information to be used by the utilities in developing a plant specific procedure. ENTRY CONDITIONS , I
1. The standard Post Trip Actions have been perfomed a!Ld 2.a. Plant conditions indicate that a Loss of Offsite Power has occurred. Any one or more of the following may be present:
i) $iransfomer alams s ii) 7 Breaker alarms [ f iii) j0ieselgeneratorsautomaticallystarting iv) /RCP trouble alarms)f v) JCondenser vacuum alams[ t 'h$d* I$$b)
b. A station blackout event has occurred, and at least one[ , vital [4.16 AC buw has been restored.
t ,, 25. , 'c%1O"Wural circu,lation_it tchttttE375TRC$ heat removal $ / W5JI]Tus is energTzTo - . \ LOOP 92 CE % a, . 3 l l i 4 COMBUSTION ENGINEERING TITLE LOSS OF OrFSITE POWER RECOVERY GUIDEL!NE EMERGENCY PROCEDURE i  !. GUIDELINES page 3 of so Revision 03 Ex!T CONDITIONS ! l
1. The diagnosis of a Loss of Offsite Power is not confimed E
2. The diagnosis indicates that in addition to the Loss of Offsite Power, a break in the primary or secondary system, or a loss of all feedwater has occurred h E
 ! 3. Novital[4.16kV)ACbusesenergized.
, ir or 4 Novital(125V)DCbusesenergized.
0E. 3
5. Any of the loss of Offsite Power Safety Function Status Check acceptance criteria are not satisfi,ed E
6. The Loss of Offsite Power guideline has accomplished.its purpose by i
satisfying A_LL of the followin g A
a. at least one non-vital (fcG kV) electrical AC bus is energized j b. all Safety Function Status Check acceptance criteria are being satisfied
c. RCS conditions are being controlled and maintained in hot standby.
4 hot shutdown, or cold shutdown. '
d. an appropriate crocedure, which has been approved by the [ Plant l
Technical-SupportCenterorthePlantOperationsReviewCommittee]. can be implemented, i 1 8 a \ LOOP 9-3' ~hsi L. 03 -w t-
  • wc,v v .,..--r w ,w ..=
4 COMBUSTION ENGINEERING TITLE LOSS cf 0FFSITE PCVER RECOVERY GU!OELINE EMERGENCY PROCEDURE GUIDELINES Page 4 of .31. Revision 03 i INSTRUCTIONS CONT!NGENCY ACTIONS
1. Ensure Standard Post Trip Actions 1.
perfonned. *2. Confinn diagnops of Loss of Offsite 2. Rediagnose event and Power (LOOP) M verify W Safety exit to either appro-Function Status Check acceptance priate Optimal Recovery criteria are satisfied. Guideline or to func-tional Recovery Guideline, p - T
3. Veri f y vital 4.16 kV AC f. If no vital 4.16 kV AC powered components are ,y buses are energized then available by the Verify at least one following: permenant non-safety bus  :
is energized from the AAC
a. at least one vital and attempt to energize 4.16 kV AC v sin one vital -AC division p
has been energized from the permenant non-  ; and  : safety bus, if no vital
b. loads ll' vital have 4.16 AC division or non- -
been proper 1y vital 13.8/4.16 kV AC sequenced onto their buses are energized- thpn respective vital exit this guideline d 4.16 kV AC buses. . _ ea_*/thrinetnactivevital 1.15 ly }uL.4,"" l. / ., Y s Step Performed Continuously LOOP. 9-4 C-EN<t$t=fteys;:1tt, COMBUSTION ENGINEERING TITLE toss or orrstit powtR RECOVERY Gul0ELINE EMERGENCY PROCEDURE I GUIDELINES Page s of 30 Revision 0? INSTRUCTIONS CONTINGENCY ACTIONS \
4. Ensure at least one 4. Exit this guideline and .
Division of Vital 125 VDC implement the Functional Distribution centers Recovery Guideline. ' energized, including both the channelized and m Division load conter and At least one Division of Vital 120 VAC Distribution centers energized, including ' both, the channelized and l the Division load center. ( "
5. Ensure that a11 5. Op49 a r f'dP* h U "
appropriate breakers on the de-energized buses _ (4.16kV and 13.8 kV) are l open ( list the breakers here).
6. Verify RCP seal cooling. 6. 11 RCP seal cooling has been lost Ihn.D restore ,
RCP seal cooling by the ' following:
a. RCP controlled bleedoff is unisolated,
b. the non-critical ccw ,
loop is unisolated, c.. establish seal I injection. i 1 <- ..s --.~ J 1 COMBUSTION ENGINEERING TITLE ' ossorOris~!EPOWER RECOVERY GUl0ELINE .< EMERGEN,0Y PROCEDURE l GUIDELINES Page .1 of 3 Revision 03 1 i lHSTRUCTIONS 20NTINGENCY ACTIONS 4 4 * (, Ensure at least one steam generator has the following: )[.
a. level being restored or maintained
.i in the nomal band, , Y and b.[mainorfE g E feedwater flow j capability. , **b a c. pressure control by one of the ] following (listed in preferred order): ) 1) turbine bypass system ii) atmospheric dump valves
iii) main steam safety valves i '/
*p. Ensure RCS inventory control is being maintained by the following: [.
a. the pressurizer level control i system is maintaining or 'restoring pressurizerlevel(1%-te~#Mm l b.RCSsubcoolingatleast(20'F)
+ basedona[averageCET) temperature (Figure 9 1). ! d u o ab.se c.TtheRYLMSindicatesthecere  !! ca"e :?}'. A b m g. Step Perfomed Continuously ( LOOP 9-6 rCCL15?WW e ,,m-- -. ,- ,e -g-- - - - - g,y-- -e eo- em . i l COMBUSTION ENGINEERING TITLE Loss er 0FFs!TE PcwEP
RECOVERY GUIDELINE EMERGENCY PROCEDURE ll GUIDELINES Page L of.2.9. Revision 13 1
INSTRUCTIONS COPITINGENCY ACTIONS  ; i c ' i *[6. Ensure the pressurizer heaters *f0. H RCS subcooling greater 1 and spray are maintsining or than P-T limits or restoring pressurizer pressure within cooldown rate greater than the limits of(Figure 91) (100*F/hr),Thendothe following as appropriate: } 4, stop the cooldown,
b. depressurize the plant 1
using P e n t auxil-iaryf spray to restore and maintain pressurizer 1 i pressure within the Post Accident P-T limits of(Figure 9-h, c, attempt to maintain the 3 plant in a stable pres- ,- sure-temperature config-uration or continue to cooldown within the limits of(Figure 9-f, d, if overpressurization due to WSI/ charging flow. Then throttle or secureflow(referto > step 16) and manually control letdown to re-store and maintain pres-surizer pressure within 4 the limits ofQigure 9-f). Step Performed Continuously ( LOOP 9 T '.%: is , . v5 4 . . - . , , ~ , i COMBUSTION ENGINEERING TITLE LOS$ OF 0FFS!TE POWER RECOVERY GUIDELINE EMERGENCY PROCEDURE GUIDELINES Page 8.L. of .LO. Revision 02 INSTRUCTIONS CONTINGENCY ACTIONS *1f.Attempttorestoreoffsite 1[ AC power. I l . n ry., qr~ r, , < s ~. *g r te r - "N
  • W sr At Lus & am Aty,,, m a s, .
*K.Whenoffsitepoweravailab'le. Continue efforts to 'E , Thy restore AC power to ** restore offsite power. plant distribution and station loads per (operating instructions). 3- t- 'Q.Evaluatetheneedanddesirabilityof 1[.a. LfRCPoperationNE f 13 restarting RCPs. Consider the O^ desired, Then go to following: step .
a. adequacy of RCS and core heat removal using natural circulation,
b. existing RCS pressure and t. y :t '::st one PCP O temperatures, openting in nG Lg,
c. the need for main pressurizer spray Then 90 te 54ep-44.
capability, d.thedurationof[CCW) interruption to RCPs,
e. RCP seal staging pressures and temperatures.
I Step Perfonned Continuously ( LOOP 9-8 -CEM -- 152 ";y .. aL i COMBUSTION ENGINEERING TITLE Loss or errs!TE potER RECOVERY GUIDELINE EMERGENCY PROCEDURE GUIDELINES Page '> of 30 Revision 03 INSTRUCTIONS CONTINGENCY ACTIONS *1. Detemine whether RCP restart criteria 1. GotostepIf. . are met by A_L1 of the following: I 11
a. electrical power is available to the[RCPbus),
b.RCPauxiliaries([CCW))tomaintain (sealinjection), bearing,and motor ng are operating, and there i .o high temperature alams .1 the selected RCPs,
c. at least one steam generator is availe'le for removing heat from the RCS (ability for feed and steam i flow),
d pressurizer level is greater than [g If not decreasing, e.RCSsubcoolingatleast(20*F) basedon[averageCET) temperature (Figure 9-1), f.[othercriteriasatisfied'per"CP operating instructions]. ' T Step Perfomed Continuously ~ l LOOP 99 - 0 3-1 n t ., 02 , COMBUSTION ENGINEERING TITLE LOSS OF 0Fr$1fE POWER RECOVERY GUIDELINE EMERGENCY PROCEDURE I 4 GUIDELINES Page 20 of 3 Revision 03 l l INSTRUCTIONS QNTINGENCYACTIONS f *1f.!_fRCPrestartdesiredandrestart Go to step 1 J 15 criteria satisfied, Then do the # ' following:
a. Start all available charning pumps.
If pressure less than psia), ) ] Then NPS! pumps may be operated, l
b. start one RCP in each loop, c.[ensureproperRCPoperationby
) monitoringRCPamperageandNPSH],
d. operate charging (and # St) pumps
until pressurizer level gre6ter '
than EW ] (and ($1 termination , criterYInet. RefertostepIf). i Step Perfonned Continuously ( i LOOP 9 10 SEN-l&2==A m t3 4 s -,~.-e,-e m ~ w , m ,w,,~ ,-e. ,o,> . , ~ -- - . ~ r. COMBUSTION ENGINEERING TITLE LOSS or orrStTE PewtR RECOVERY GU!0ELINE EMERGENCY PROCEDURE ( GUIDELINES Page t' of 30 Revision 03 1NSTRUCT!ONS CONTINGENCY ACTIONS *1 M fSI pumps are operating, Then 1 Continue 1F51 pump they may be throttled or stopped, one D operation, pump at a time, if All., of the following are satisfied:
a. RCSsubcoolingatleast[20'F) basedon(averageCET) temperature (Figure 9-1),
b. prgurizerlevelisgreaterthan
[ t1Nr" and not decreasing,
c. a$ea)stonesteamgeneratoris available for removing heat from th? '
RCS (ability for feed and steam flow)
d. (theRVLMSindicatesaminimum I
level at the top of the hot leg nozzles). *1 . E criteria of step cannot be 1
7. maintained after WS! pumps throttled '
or stopped, Then $51 pumps must be restarted. 3 Step Perfomed Continuously t \ l LOOP 9-11 C- 5th03 -ew ,--e -- , - -- g- w - - - - -w rw m-+ -- my e -- r COMBUSTION ENGINEERING TITLE L0ss or Orts!TE power RECOVERY GUIDELINE 7 EMERGENCY PROCEDURE GUIDELINES p.g. L2, or 30 Revision 03 INSTRUCTIONS CONTINGENCY ACTIONS . t 9 *1f.IfnoRCPsareoperating,Then 17 Ensure proper control of 4 verify natura' circulation flow in at #' steam generator feeding least one 100 .y g of the following: and steaming (refer to
a. loop AT (Tg - T g) less than normal step f) and RCS inventory '
full power AT, and pressure control (refer
b. hot and cold leg temperatures tostepsbandh),
constant or decreasing, c.RCSsubcoolingatleast(20'F) basedon(averageCET) temperature, d no abnormal difference [preater than 10'F) between T gRTDs and (averageCET) temperature. 9 1/. Evaluate the need for a plant y 17 d' cooldown based on:
a. plant status,
b. auxiliary systems availability,
c. condensate inventory (refer to Figures 9-3 and 9-4),
cl.Gr.T.J 4e7,ue,- A Mf-5;NPw'Y ' & 4 ts. 1f, a plant cooldown is desired, & a. Maintain the plant in A o-Then continue with the actions of this ##' a stabilized condition, guideline, g
b. Exit to appropriate procedure as directed by(PlantTechnical SupportCenter).
Step Performed Continuously k - LOOP 9-12 ree in av43 COMBUSTION ENGINE 6HitiG TITLE LOSS or OrFSITE PCLER RECOVERY rru!DELINE  ; f EMERGENCY PROCEDURE GUIDELINES Page 13 of 30 Revision 03 INSTRt.'CTIONS CONTINGENCY ACTIONS *2f.a.BoratetheRCStomaintainshutdown d. ) A'. margin in accordance with Technical L '. I Specifications. and i
b. Prevent boron dilution by pressurizer 1
outsurgebythefollowing(listedin f preferredorder):
1) borate to raise the entire RCS (including the mass in the pressurizer)tocoldshutdowri 4 conditions, a
gr  ; ii) use [ main or auxiliary) spray to increase and maintain pressurizer boronconcentrationwithin[50 ppm] of RCS boron concentration. PerforTn a controlled cooldown in . D
  • accordance with Technical Specifi- "* .
cations. Reduce RCS temperatures . utiltzing = ry i a [ main -. [or -",7,f feedwater. .a.n_
b. steam generator steaming via 4
(listedinpreferredorder): 1)turbinebypasssystem . l ii)atmosphericdumpvalves. 4 Step Perfomed Continuously
l LOOP 9-13 -CCGisi M~
COMBUSTION ENGINEERING TITLE toss Or OrrsitE P0'.ER l RECOVERY GUl0ELINE EMERGENCY PROCEDURE l f GUIDELINES Page l8 of 30 Revision 03 !NSTRUCTIONS CONTINGENCY ACTIONS Ensure pressurizer pressure is being E RCS subcooling greater t> maintained within the limits of d than P-T limits or ' Figure 9-1 during cooldown,ty .:Nel cooldown rate greater g erg <nn nr nr.cenrize- he r re 'ad than(ICO'F/hr],Thendo .spg the following as appropriate:
4. Stop the cooldown
b. depressurize the plant using(mainorauxi-liary)spraytorestore and maintain pressurtzer pre.*"re within the Post Accident P-T limits of Figure 9-1.
c. attempt to maintain the plant in a stable pressure-temperature configuration or con-tinue to cooldown with-in the limits of Figure '
9-1.
d. E overpressurizatin due to #/SI/chstging flow. '
Then tr.*ottle or secu flow (refer to step ) v. and manually control letdown to restore and maintain pressurizer pressure withiti the limits of Figure 9-1. Step Performed Continuously \ LOOP 9-14 441edg, S J3 . COMBUSTION ENGINEERING TITLE LOSS OF 0FF$1TE P0kER RECOVERY GUIDELINE I EMERGENCY PROCEDURE , GUIDELINES Page 25 of 30 Revision 03 INSTRUCTIONS 1 CONTINGENCY ACTIONS . Maintain pressurizer level ( h to . 2T M during cooldown by operation of: *
a. charging and letdown, or l
b. V S! pumps i
*h.Ensuretheavailablecondensate . i I *I "' inventory is adequate per Figures 9 3 and 9 4 4 4
d. Bypass or lower the automatic h initiationsetpointsof(MS!S.CIAS,
  • 1 I
-tatL and SIAS) as the cooldown and depressurization proceed. . If essurizer pressure reaches .17 M psia),Thenisolate,ventor 400 Y drain the safety injection tanks (SITS). -l . (initiate low temperature over- . .ly, pressurization protection (LTOP) at AYe T E e 1 !P6'F). 3I7 -5 Step Perfonned Continuously \ LOOP 9-15 CA-M? ^ . 03 4 4 COMBUSTION ENGINEERING TITLE Loss or Orr$!Tt PowtR RECOVERY GUIDEllNE j ( EMERGENCY PROCEDURE j GUIDELINES Page 26 of ' Revision 03 INSTRUCTIONS CONTINGtktY ACTIONS j *29. When the following SCS entry *29. If the RCS fails to conditions are established: depressurire, Then a void  ;
a. pressurizer level >h) and should be suspected.
l 1 constant or increasing, a. Voiding in the RCS may b,RCSsubcooling>[20'F), be indicated by any of
c. RCS pressur 3(I00Y), the following
! d. RCS T 'F), g g( indications, parameter I e (etbre n1*nt-teac Mic-w4ter4+ changes, or trends: hsem), 1) letdown flow Then exit this guideline and initiate greater than %Soperationper(operating charging flow,
  • instructions). ii) pressurizer level
' increasing i
significantly more than expected while operating pressurizer spray, tii)[theRVLMS indicates that voiding is present t in the reactor ' vessel), t 4 Step Performed Continuously (ContinuedonNextPage) (- LOOP 9-16 tt&wM3 , ,.,r w- - ,---w r , ..--n v. .,- , , - - .- y - ~ n , COMBUSTION ENGINEERING TITLE Loss or orrst E re ER RECOVERY GU10EL!NE EMERGENCY PROCEDURE GUIDELINES page " of 30 Revision #3 INSTRUCTIONS CONTINGENCY ACTIONS 2f, *[(Cont'd)
6. M.
iv)(HJTCunheated thermocouple temperature indicates saturated conditions in the reactor vessel upperhead), vi (ether-h44 eat 4ees 6:rt-hero},
b. M voiding inhibits RCS depressurization to SCS entry pressure.
Then attempt to elimi-nate the voiding by: i) verify letdown is isolated, Lng , ii) stop the depres-surization, Lng l l
  • Step Performed Continuously (Continued on Next Page)
LOOP 9-17 cr= u n3 - COMBUSTION ENGINEERING TITLE toss or 0FFs!TE PCLER EMERGENCY PROCEDURE GUIDELINES Page 18 of 30 Revision 03 INSTPUCTIONS CONTINGENCY ACTIONS 2* 'f(Cont'd) 11 1% iii) pressurire and depressurire the RCS within the limits of rigure 9-1 by operating pressurizer heaters and spray or HPSI and charging pumps. Monitor pressur-iter level (andtheRVLMS) for trending of RCS inventory.
c. M depre::urization of '
the RCS to the SC5 entry pressure is still not possible, and voiding is suspected to exist in the steam generator tubes, Then attempt to eliminate the voiding by: Step Perfonned Continuously (ContinuedOnNextPage) LOOP 9-18 erug g,3 COMBUSTION ENGINEERING TITLE L0sS or errs!TE pcLER RECOVERY 0U10ELINE j EMERGENCY PROCEDURE GUIDELINES p.g. 29 of 30 Revision 03 I INSTRUCTIONS CONTINGENCY ACTIONS A9, . (Cont'd) D.
1) cool the suspected steam generator (by steaming and/or blowdown, and feeding) to condense the sttam generator tube void, and.
11)nonitorpressurizer i level for trending RCS inventory,
d. I,f depressurization of the PCS to the SCS entry pressure is still not possible. Then attempt to eliminate the voiding by:
i)operatethe(pres-surizer vent or the] reactor vessel head vent to clear trapped non-conden-sible gases, a,nd Step Performed Continuously ( LOOP 9-19 CT: ^;; av. 03 - COMBUSTION ENGINEERING TITLE Loss or Orrs!TE POVER REC 0VERY GUIDELINE ' EMERGENCY PROCEDURE GUIDELINES Page 20 of 30 Revision 03 INSTRUCTIONS CONTINGENCY ACTIONS (Cont'd) L$ M. ii) monitor pressurizer level [and/or the PVLMS)fortrending of P.CS inventory,
e. Continue attempts to es-tablich SCS entry con-ditions, or exit this guideline and initiate ,
an appropriate procedure asdirectedby[ Plant Technical Support Center). The Loss of Offsite Power Recovery Guideline has accomplished it purpose if RCS conditions are beino controlled in hot standby, hot shutdown, or cold shutdown, all of the SFSC acceptance criteria are being satisfied, and the entry conditions of an appropriate procedure are satisfied, p(D
  • Step Perfomed Continuously LOOP 9-20 CE ur -sev. 03 I l
COMBUSTION ENGINEERING TITLE LOSS OF OFFS TE POWER RECOVERY GUIDELINE ( EMERGENCY PROCEDURE GUIDELINES Page 21 of 30 Revision 03 SUPPLEMENTARYINFORMATig This section contains items which should be considered when implementing EPGs and preparing plant specific E0Ps. The items should be implemented as precautions, cautions, notes, or in the E0P training program.
1. Natural circulation flow cannot be verified until the RCPs havs arctped coasting down after being tripped.
2. During natural circulation, verification of an RCS temperature response to a plant change cannot be accomplished until approximately 5 to 15 minutes following the action due to increased loop cycle times (Reference 15.11).
3. [If possible, interruption of the c mponent cooling water to the reactor coolant pump seals should not exceed U minutes. Extended loss of CCW flow may make inspection of the seals necessary).
4 After the required shutdown boron concentration is attained in the RCS, makeup water added to the RCS during the cooldown should be at least equal to the RCS boron concentration to prevent any dilution of RCS boron concentration.
5. Once the pressurizer cooldown has begun, pressurizer level indmtion decalibration will occur. The indication on the normal pressurizer level indication will begin to deviate from the true pressurizer level. The operator should use correction curves to find the true pressurizer water level. A cold calibrated pressurizer level indication is also available for lower pressurizer temperatures.
6. Minimize the number of cycles of pressurizer auxiliary spray whenever the temperature differential between the spray water and the pressurizer is greater than [200*F] in order to minimize the increase in the spray cozzle thermal stress accumulation factor. Every such cycle must be LOOP -
9-21 C'" -- 4 : ; uJ l 4 i COMBUSTION ENGINEERING TITLE LOSS Or OrrSrTE POWER RECOVERY GUIDELINE EMERGENCY PROCEDURE GUIDELINES Page 22 of 30 a. vision c3 3 recorded in accordance with Technical Specification Limitations (Reference 15.10 & 15.25), a
7. If cooling down by natural circulation with an isolated steam generator, an inverted AT (i.e.. T ehigher than T H) might be observed in the idle loop. This is due to a small amount of reverse heat transfer in the
! isolated steam generator and will have no affect on natural circulation i flow'in the intact steam generator (Reference 15.11). 1 l 8. All available indications should be used to aid in evaluating plant ! conditions since the accident may cause irregularities in a particular ) instrument reading. Instrument readings should be corroborated when one i or more confinnatory indications are available (Reference 15.24).-
9. When a void exists in the reactor vessel and RCPs are not operating, the l RVLMS provides an accurate indication of reactor vessel liquid inventory, j ( '
When a void exists in the reactor vessel and RCPs are operating, it is-not possible to obtain an accurate reactor vessel liquid level-indication f due to the effect of the RCP induced pressure head on the RVLMS (Reference 15.15). The indicated level also differs for different RVLMS designs under these conditions. Infonnation concerning reactor vessel liquid inventory trending may still be discerned. The operator is cautioned not to rely solely on the RVLMS indication when RCPs are . l operating.
10. The operator should continuously monitor for the presence of RCS voiding and take steps to eliminate voiding any time voiding causes heat removal l or inventory control safety functions to begin to be threatened. Void elimination should be started soon enough to ensure heat removal and
inventory control are not lost-(Reference 15.14).
2
11. Hot-leg end cold leg RTD temperature indication may be influenced by SIS i injection water temperatures. UsemultipleRTOindications[and/orCET indications)fortemperaturewheninjectionisoccurring..
's LOOP 9-22 9=w ver COMBUSTION ENGINEERING TITLE Loss oF OFFS 1TE P WER REC VED MEUNE EMERGENCY PROCEDURE GUIDELINES Page 23 of 30 Revision 03 # q0 FIGURE 9-1 t) f',4 TYPICAL POS" ACCIDENT PRESSURE TEMPERATURE LIMITS (2)
m. , ,
2400 - LOWEST SERVICE jogoF/ HOUR [ 2300 _ TEMP % COOLDOWN / / 2000 - NOTE 1 / / 5 0 (200 F) [ E . Y $ 1500 - ' / - $ / < E / 5 / 3 /
D 1000 - RCP NPSH
/ _ $ / i E / 0 j (20 F)  ! SHUTDOWN [00) ' 500 - j/ [ COOLING _ s 0 . 100 200 300 400 500 600 RCS T EMPER ATUR E, *F 0 NOTES:(1).THIS CURVE SUPERSEDES THE 100 F/ HOUR COOLDOWN CURVE ANYTIME THE RCS HAS EXPERIENCED AN UNCONTROLLED COOL 9:1WN WHICH CAUSES RCS TEMPERATURE TO GO BELOW 5000F (2) THESE CURVES MUST BE ADJUSTED FOR INSTRUMENT INACCURAClES k j LOOP 9-23 (ER:wg Jtey__c3 5 0 COMBUSTION ENGINEERING TITLE- LOSS OF OFFSITE i . EMERGENCY PROCEDURE ""'"""'""""E ! GUIDELINES p.g. 24 of so Revision 03 i FIGURE 9-2 TYPICAL ACCEPTABLE SIS FLOW n RCS PRESSUREIII INJECTION MODEt21 2300 . . . . i e i e i i . .  !!00 - - i 2100 - g - 2000 Q* p 4 s g js) . 1900 - ~ STAS 1100 . 1700 - 1800 - NOT E (3) '
is00 . .
i j , 1400 -___-___-______% ! E { p1300 s = ' j 61200- .. e \ e 1100 . C I - $1000 , . j ses, . 800 - 700 - 000 . t / 600' , j . M . . , ,/ _ 1
m -
100 - i, .
0 , , , /, , , m . , ,
200 400 800 500 1000 1200 1400 16 % 1800 2000 2200 2400 2600 F LOW, GPM NOTES: (1) SEE IMPLEMENTATION SECTION FOR DEVELOPMENT OF PLANT SPECIFIC CURVE (2) FOR HOT AND COLO LEG INJECTION MODE.THE LPSI PUMPS ARE NOT REQUlhE0 TO BF OPERATING.THE HPSI PUMP FLOW IS DIVIDED EQUALLY BETWEEN THE HOT AND COLO. LEGS j (3) BELOW STAS PRESSURE. SAFETY INJECTION SYSTEM (SIS) PUMPSWILL IE .(- OPERATING OUT THERE WILL BE NO INJECTION FLOW UNTIL SYSTEM PRESSURE FALLS BELOWTHE SHUT 0FF HEAD OF ANY $15 PUMP - LOOP. 9-24 CE" ' M K 03 i COMBUSTON ENGINEERING ' TITLE Loss oF OFFS 1TE EMERGENCY PROCEDURE ( GUIDELINES p.g. 2s - of 30 a. vision _03 FIGURE 9 3 TYPICAL FEEDWATER CAPACITY vs TIME REMAINING UNTil SHUTDOWN COOLING REQUIRED 400 , , , , , , , 360 - 320 280 - ~.I e 240 - ,o . 5 1 tl: y NO - S - D' [ s gis0 _ /e
  • _
e i 120 , 80 - 40 - .. 1 I e I e I t 0 4 8 12 16 20 24 28 32 TIME REMAINING UNTil SHUTDOWN COOLING REQUIRED (HRS) k - LOOP 9-25 h77-03 i l COMBUSTION ENGINEERING TfrLE LOSS OF OFFS 1TE EMERGENCY PROCEDURE I GUIDELINES page _21 or 30 n. vision 03 FIGURE 9-4 TYPICAL FEEDWATER REQUIRED FOR SENSIBLE HEAT REMOVAL TCOLD (R EQUIRED) vs TCOLD (INITIAL) 50 i i i i i 40 U "o ~ 0 ~ ( TCOLD REQUIRED = 300 F E $ 3500F c: c: 20 - dF 10 - 4500F f f I t t 560 520 480 440 400 360 320 286 INITI AL TCOLD( F) I ~ LOOP 9-26 CEN:T52 Rev". 03 l, COMBUSTION ENGINEERING TITLE LOSS OF OFFSITE POWER REC 0VERY GUIDELINE t EMERGENCY PROCEDURE GUIDELINES page 27 og 30 gevision 33 SAFETY FUNCTION STATUS CHECK Safety Function Acceptance Criteria
1. Reactivity Control 1. a. Reactor power de-creasing E$
b.[NegativeStartupRate]
6. n__,f C. Not more than 1 CEA bottom light not lit or borated per Tech Specs.
2. Maintenance of Vital Auxiliaries 2. a. Main turbine tripped (AC and DC power) af
' b. Generator output breakers open and Div'1
c. At least one etah 'icrJ
[4.16kV]ACbusn$[' available and
d. At lea one D of electrical DC power is available for:
i) DC control power and ti)Theoperattogofaj least onegl20 volt vital AC instrument channel. ( l LOOP 9-27 Su-wdCTT l COMBUSTION ENGINEERING TITLE toS$ of 0FFSITE POWER , EMERGENCY PROCEDURE GUIDELINES Page 28 of 30 Revision 03 SAFETY FUNCTION STATUS CHECK Safety Function Acceptance Criteria
3. RCS Inventory Control 3. a. Charging and letdown are maintaining or restorig pressgizer level (Sttotit!")
^ng
b. RCS subcooling is at least(20'F] based on[averageCET]
temperature B.!*$ c.[TheRVLPSindicates i the core ast u a a w m h r4, cover +d). 4 RCS Pressure Control 4 Pressuri7er heaters and [mainorauxiliary] spray are maintaining or restoring pressurizer pressure within the limits . of Figure 9-1. LOOP 9-28 mf 't r ;,.,. ;; COMBUSTION ENGINEERING TITLE toss OF 0FFSITE poser EMERGENCY PROCEDURE ( GUIDELINES Page_;l of E Revision 33 l SAFETY FUNCTION STATUS CHECK Safety Function Acceptance Criteria
5. Core Heat Removal 5. a. RCS subcooling is at least[20'F]basedon
[averageCET.1 temperature. 0.ng
b. The RCS loop aT in the operating steam generator is:
1) less than the full power aT (if all RCPs are off)
E ii) less than [10'F] (if any RCPs are "unning)
6. RCS Heat Removal 6. At least one steam generator has level:
a. within the normal bandwith[maino a N d h f feedwater available to maintain level E
b. being restored by
[ main [r  : ih feedwater flow greater than [450 gpm]. LOOP 9-29 a GEnd;2 n _n1 COMBUSTION ENGINEERING TITLE L0ss 0F OFFSITE PChER RECOVERY GUIDELINE ' EMERGENCY PROCEDURE GdlDELINES Page 30 of 30 Revision 03 SAFETY FUNCTION STATUS CHECK Safety Function Acceptance Criteria
7. Containment Isolation 7. a. Containment pressure less than [1.5 psig]
d  ;
b. [No containment area radiation monitors alarming]
a.,9f
c. No process radiation ala rms a,ng
d. No steam plant activity i.
monitors alarming.
8. Containment Temperature & Pressure 8. a. Containment temperature Control less than [120'F]
ang
b. Containment pressure lessthan[1.5psig].
9. Containment Combustible Gas 9. a. Containment temperature Control less than [120'F]
nng
b. Containment pressure lessthan[1.5psig].
LOOP 9-30 __ f5" 1 M nW2 i M81JSJJON ENGINEERING TITLE STAT 10N BLACKOUT ""'"'"""'S () NMERGENCY PROCEDURE GUIDELINES Page 2 of 20 Revision c2 2 i
STATION BLACKOUT PEC0VERY GUIDELINE i
t i 1 i ( l f I Prepared by ass COMBUSTION ENGINEERING. INC.
fer-tte F-E 0'
!':::: CROUP l
-( SB 10-1 C M Rc., G3 i COMBUSTION ENGINEERING TITLE STATION BLACKOUT RECOVERY GUIDELINES l EMERGENCY PROCEDURE GUIDELINES , Page 2 of 20 g,yision 03 PURPOSE This guideline provides the operator actions which should be accomplished in the event of a Station Blackout. The actions in this guideline are necessary to ensure that the plant is placed in a stable, safe condition. The goals of this guideline are to restore the availability of a full complement of vital components (and if possible, non-vital components), and to safely establish 4 the entry conditions of a nomal operating procedure for hot standby, or hot shutdown, or a procedure provided by the [ Plant Technical Support Center or i Plant Operations Review Comittee). This guideline is designed to meet this objective while minimizing any radiological release to the environment and maintaining adequate core cooling. This guideline provides technical 3 infonnation to be used by the utilities in developing a plant specific procedure. i ENTRY CONDITIONS
1. The Standard Post Trip Actions have been performed, i
MLd 2. Plant conditions indicate that a Station Blackout electrical emergency has occurred. Any one or more of the following may be present: ~
a. [ Loss of control room lighting) b, Extensive loss of various indications-c.
[ Equipment " loss of power" alarm (s)) g
d. Tripped breaker indications on the [6<9 and 4.16 kV) buses
e. Extensive loss of [ component) power available indications
( SB 10-2 C9Pd2 Rev.-03 COMBUSTION ENGINEElilNG TITLE STATION BLACK 0UT "'"""'"*'5 EMERGENCY PROCEDURE ( GUIDELINES Page 3 of 20 Revision 03 EXIT CONDITIONS
1. Any of the Station Blackout Safety Function Status Check acceptance criteria are not satisfied.
E 2. The Station Blackout guideline has accomplished its purpose by satisfying ALL of the following: ~ 4,9 *E a. Wi at least one3vital [4.16 kV) electrical AC buschas been restored,
b. all Safety Function status check acceptance criteria are being satisfied,
c. an appropriate procedure, which has been provided and approved by the [ Plant Technical Support Center or the Plant Operations Review Comittee], can be implemented.
l \ SB 10-3 m I TITLE STATION BLACK 0UT COMBUSTION ENGINEERING """*'""'S EMERGENCY PROCEDURE GUIDELINES Page - 4 of 20 gevisi33 03 INSTRUCTIONS CONTINGENCY ACTIONS
1. Ensure Standard Post Trip Actions 1.
performed. *C. 2. Rediacnose event and exit to Confinn diagnosis of Station Blackout >y verify)g Safety either appropriate Optimal Function Status Check acceptance Recovery Guidelin6 or to criteria are satisfied. Functional Recovery Guideline. *3. Ensure at least one steam generator 3. has the following: a, level being restored or maintained in the nomel band [ and b h 3 5 Ny'Yeed flow capability and
c. pressure control by one of the following (listed in preferred order):
i) atmospheric dump valves ii) main steam safety valves
4. Ensure all appropriate breakers on 4.
de-energized buses and 4.16 kV) are open. .[ List breakers here].-
  • Step Perfonned Continuously 4
( SB 10-4 crn_15? oe yS COMBUSTION ENGINEERING TITLE STATION BLACK 0UT RECOVERY GUIDEllNES ~ EMERGENCY PROCEDURE GUIDELINES Page 5 of 20 Revision 03 INSTRUCTIONS CONTINGENCY ACTIONS d
*5 .
fACpowerayailablefromdiesel 5. Continue efforts to make generator (shor[alternatefsourced, AC power available, j Then do the following (in the order indicated):
a. restore power to at least one Alvtiw a f
, vital [4.16 kV) AC busoin , I accordancewith[ operating instructions] and
b. (if possible) restore power to at least one non-vital [NkV]
AC bus in accordance with i [operatinginstructions]  ; and I
c. Go to ster 11.
*6. Open the fcllowing DC supply 6. breakers: [plantspecificlist)
  • Step Performed Continuously
 ;- SB 10-5 CEN-152 Rev. 03 L ==o - COMBUSTION ENGINEERING TITLE STATION BLACK 0UT REC 0VERY GUIDELINES EMERGENCY PROCEDURE GUIDELINES Page'6 of 20 Revision 03 INSTRUCTIONS CONTINGENCY ACTIONS j
7. Minimize RCS leakage by ensuring ALL 7.
4 of the following: , a, letdown isolation valves closed, ! b. SCS RCS suction valves closed, 2 c. RCP controlled bleedoff line isolation valve closed, , , d. RCS charging line isolation j valves closed,
e. RCS sample line(s) isolation valve I f, h (s) closed,rYD?EMYiicitems_t.o p
1444tt]. I j *8. Verify natural circulation flow 8. Ensure proper control of 1 in at least one loop by AM of steam generator feeding and the following: steaming (refer to step 3)
a. loop AT (Tg - Tc ) less than normal full power AT,
b. hot and cold leg temperatures constant or decreasing, c.RCSsubcoolingatleast[20*F]
I based on [ average CET] temper-a tu re , d, No abnormal difference [ greater than 10*F] between T HRTOs and , [ Core Exit Thermocouples]. i
  • Step Perfonned Continuously SB 10-6 - CC W p .edi:b
COMBUSTION ENGINEERING TITLE STATION BLACK 0UT REC 0VERY GUIDELINES EMERGENCY PROCEDURE GUIDELINES Page 7 of 20 Revision 03 INSTRUCTIONS CONTINGENCY ACTIONS *9. Maintain [20-50*F]subcooling,br* 9. H subcooling can NOT be on [ average CET] temperature, . maintained, Then continue operation of k@Nr[feedwater to at RCS heat removal using two-least one steam generator and steaming phase natural circulation. via atmospheric dump valve (s). Ensure the following: 1 a.steamgenerato[ feeding and steaming are prop-I erly controlled (refer to step 3), 4 and , b. [ average CET] -
temperature is less than superheated.
( ! 10. Bypass or lower the automatic 10. initiation setpoints of [MSIS, CIAS, C+43, and SIAS] as the cooldown and depressurization proceed. i i k 1
  • Step Performed Continuously SB 10-7 CyM 1
i l COMBUSTION ENGINEERING TITLE STATION BLACK 0UT - REC 0VERY GUIDELINES EMERGENCY PROCEDURE l I' GUIDELINES Page 8 of 20 Revision 03 l i INSTRUCTIONS CONTINGENCY ACTIONS .,s
  • Y
*11. When at least one ital [4.16 kV] AC 11. H no vital [4.16 kV] AC bus has been re-energized, Then: bus is energized, Then a, ensure that vital [4.16 kV, 480V, continue with the actions 4 and 120/208V] AC power is being of steps 5 through 10. supplied to at least the minimum required vital equipment. , [Listequipmenthere.] j and b, ensure that vital [125V] DC power is being supplied by at least one battery charger to: . I i) restore station battery capacity and ii) power vital [125V] DC loads, i
12. Borate the RCS as necessary to main- 12.
tain shutdown margin in accordance 1 with Technical Specifications.
*13. Ensure adequate RCS inventory control 13. H adequate RCS inventory by the following: control N0T0 established,
a. automatic or manual operation of then ensure all available 4
chargingandletdowntocogi charging pumps operating pressurizer level [35 to ], and SIS pumps injecting
and water into the RCS per b.RCSsubcoolingatleast[20*F] Figure 10-2.
basedon[averageCET] temperature (Figure 10-1), and us<l i> d.M M
c. [the RVLMS indicates the occe M 7eM
  • Step Perfornled Continuously SB 10-8 - C Eii-i x Rev. 43
COMBUSTION ENGINEERING TITLE STATION BLACK 0UT RECOVERY GUIDELINES EMERGENCY PROCEDURE GUIDELINES Page 9 of 20 Revision 03 INSTRUCTIONS CONTINGENCY ACTIONS *14. Restore and maintain pressurizer *14. M RCS subcooling greater pressure within the P-T limits of that P-T limits or cooldown Figure 10-1 by one of the following rategreaterthan[100*F/hr], methods: then do the following as appropriate:
a. automatic or manual operation of a. step the cooldown, the pressurizer heaters and aux.il- b. depressurize the plant iary spray, using auxiliary spray or to restore and maintain
b. manual operation of charging pressurizer pressure and/or fSI pumps ,
within the Post Accident P-T limits of Figure 10-1,
c. attempt to maintain the plant in a stable pressure-temperature configuration or continue to cooldown within the limits of Figure 10-1,
d. E overpressurization due to (SI/ charging l flow,Thienthrottleor secure (SI (refer to j step 15) or charging i flow and manually control letdown to restore and maintain pressurizer pressure within the i
limits of Figure 10-1.
  • Step Performed Continuously SB 10-9 TEN '"' P r> " - n ,
4 COMBUSTION ENGINEERING TITLE STATION BLACK 0VT REC 0VERY GUIDELINES EMERGENCY PROCEDURE GUIDELINES Page 10 of 20 Revision 03 INSTRUCTIONS CONTINGENCY ACTIONS 1 i
*15. H f)fSI pumps are operating, 15. ContinueRfSIpump Then they may be' throttled or operation.
stopped, one pump at a time, if ALL of following are satisfied: 4 a.RCSsubcoolingatleast[20'F] based on [ average CET] tempera-  ; ture (Figure 10-1), b pressurizer level is Neater than[k]andnotdecreasing,
c. at least one steam generator is
! available for removing heat from , the RCS (ability for feed and steam flow), d, [the RVLMS indicates a minimum 4 level at the top of the hot leg nozzles).
16. --H-presittrizer pressure i3 16. Cotttinue VShppmp of_e]a-1 rea than[200 psia)and '
tion. controlled Then ,y:operftin('N LPSI pumppsfy'be stopped. - / N N ~. g)(. E criteria of step 15 ehyd cannot 17. maintained after SIS pumps throttled j or stopped, Then appropriate SIS pumps must be restarted and full SIS flow restored.
  • Step Performed Continuously
 ? - 2, I SB 10-10 eEN 15? De v . 43- i COMBUSTION ENGINEERING TITLE STATION BLACK 0UT RECOVERY GUIDELINES EMERGENCY PROCEDURE f GUIDELINES Page 11 of to Revision 03 l INSTRUCTIONS CONTINGENCY ACTIONS py, [ Ensure cooling systems (Salt Water, 18. Site Service Water, Component cooling Water)restoredinaccordancewith applicable operating instructions]. j d'45(. Ensure proper operation of the 19. l following:
a. containment ventilation fan coolers, and b control room [HVAC] or [ emergency airconditioning),
and
c. applicable building [HVAC] systems.
4 { N* K. g en the Station Blackout exit con- 20. ditions are satisfied, Then exit this guideline and implement either the Loss of Offsite Power recovery guideline g an appropriate procedure as the [ Technical Support Center] directs. The Station Blackout Recovery Guideline has accomplished its purpose if RCS conditions are being controlled in hot standby or hot shutdown, all of the SFSC acceptance criteria are being satisfied, and the entry conditions of an , appropriate procedure are satisfied. END
  • Step Performed Continuously SB 10-11 p01
4 I COMBUSTION ENGINEERING TITLESTATION BLACK 0UT REC 0VERY GUIDELINES ( EMERGENCY PROCEDURE GUIDF. LINES Page 12 of 2o Revision e SUPPLEMENTARYINFORMATIO! l This section contains items which should be considered when implementing EPGs ] and preparing plant specific E0Ps. The items should be implemented as 4 precautic7s, cautions, notes, or in the E0P training program. i 1. Natural circulation flow cannot be verified until the pCPs have stopped coasting down after being tripped.- 4 {- 2. During natural circulation, verification of an RCS temperature response to a plant change cannot be accomplished until approximately 5 to 15 ] minutes following the action due to increased loop cycle times (Reference
15.11).
3. After the required shutdown baron concentration is attained in the RCS, s
, makeup water added to the RCS during the cooldown should,be at least 1 \ equal to the RCS boron concentration to prevent any dilution of RCS boron 4 concentration. j 4 Once the pressurizer cooldown has begun, pressurizer level indication decalibration will occur. The indication on the normal pressurizer level indication will begin to deviate from the true pressurizer level. The operator should use correction curves to find the true pressurizer water level. A cold calibrated pressurizer level indication is also avai'able for lower pressurizer temperatures.
5. -Minimize the number of cycles of pressurizer auxiliary spray whenever the temperature differential between thu spray water and the pressurizer is.
greater than [200'F] in order to minimize the increase in the spray nozzle thermal stress accumulation factor.- Every such cycle must be recorded in accordance with Technical Specification Limitations (References 15.10 & 15.25). SB 10-12 OEpts2 % 43 w - *- r y COMBUSTION ENGINEERING TITLE STATION BLACKOUT RECOVERY GUIDELINES , EMERGENCY PROCEDURE GUIDELINES Page 13 of 20 g,yision
6. If cooling down by natural circulation with an isolated steam generator, an inverted aT (i.e.. T chigher than T )g may be observed in the idle loop. This is due to a small amount of reverse heat transfer in the isolated steam generator and will have no affect on natural circulation flow in the intact steam generator (Reference 15.11).
7 All available indications should be used to aid in evaluating plant conditions since the accident may cause irregularities in a particular instrument reading. Instrument readings should be corroborated when one or more confirmatory indications are available (References 15.24).
8. When a-void exists in the reactor vessel and RCPs are not operating, the RVLMS provides an accurate indication of reactor vessel licuid inventory.
When a void exists in the reactor vessel and RCPs are operating, it is not possible to obtain an accurate reactor vessel liquid level indication due to the effect of the RCP induced pressure head on the RVLMS 5 (Reference 15.15). Tha ine'ir "ed 1cid ;1;c d'"c-t 'cr d%rer; 1,#5 desi m ua t c - "M :. Information concerning reactor vessel licuid inventory trending may still be discerned. The operator is cautioned not to rely solely on the RVLMS indication when RCPs are coerating.
9.  !
The operator should continuously monitor for the presence of RCS voiding ) and take steps to eliminate voiding any time voiding causes heat removal or inventory control safety functions to begin to be threatened. Void elimination should be started soon enough to ensure heat removal and inventory control are not lost (Reference 15.14).
10. Sustained operation of DC power equipment M essential tc maintaining the deliberate cooldown jeopardizes the duration of battery availability.
A list of the DC loads which are essential for control and monitoring of the plant should be developed on a plant specific basis with the intent of extending battery availability. Consideration should be given to those loads which are absolutely necessary. ( SB 10-13 (M ^" . 0 3 s COMBUSTION ENGINEERING TITLE SUTION BLACK 0UT RECOVERY GUIDELINES
, EMERGENCY PROCEDURE GUIDELINES page 14 of 20 g,yision - 0
, 11. Injection of borated water from the Safety injection Tanks will not occur i l until pressurizer pressure is less than the nitrogen cover gas pressure. ~ 1 i i
12. Hot leg and cold leg RTD temperature indication may be influenced by S!$
injection water temperatures. Use multiple RTO indications [and/or CET indications]fortemperaturewheninjectionisoccurring, t,
13. A station blackout will result in the loss of numerous indications and control functions. It is important that the operators be aware of the affects of a station blackout on all indications and controls, i
14. Plant personnel should be prepared for the possibility of inadequate lighting in access areas and equipment rooms.
1 1 I 4 J 4 d-4 1 i 4 e 4 1 I -SB 10-14 OCIL.!E 2 *:: 2 4 .. -- , .-v- ,, , , , - 910(82Z2)/cf 15 , 1 TITLE station 814ckou j COMBUSTION ENGINEERING Recovery Guidelines  ; r EMERGENCY PROCEDURE GUIDELINES Page 11. Of 22_ ReviSiCn .03 . Figure 10-1
TYPICAL POST ACCIDENT PRESSURE TEMPERATURE LIMITS (2) i 2500 - i i f a 2400 - LOWEST [
SERVICE jogoF/ HOUR 2300 TEMP % COOLDOWN /
/
2000 NOTE 1 / N I l 90 f / b}; $ [200 0 F) ! (, E Y N(b / E 1500 - / - ! c' $ / E / 4 ( 5. / t:f ' / $ goon RCP NPSH _, / a / E ' / (200F] j  ! [00) COOLING j/ [ SHUT 00WN _ 500 - , l 4 0 100 200 300 400 500 600 I RCSTEMPERATURE,. F 0 NOTES:(1) THIS CURVE SUPERSEDES THE 100 F/ HOUR COOLDOWN CURVE ANYTIME THE RCS HAS EXPERIENCED AN UNCONTROLLED COOLDOWN l WHICH CAUSES RCS TEMPERATURE TO GO BELOW 500 F (2) THESE CURVES MUST BE ADJUSTED FOR INSTRUMENT INACCURACl.ES i. SB- 10-15 csr" m ' - . 03 COMBUSTION ENGINEERING TITLE station Blackout EMERGENCY PROCEDURE / GUIDELINES Pagela of Ln Revision 03 Figure 10-2 TYPICAL ACCEPTABLE SIS FLOW vs RCS PRESSUREllI INJECTION MODE (2) 230'J g . , , , . i i i i . . . 2200 - - 2100 - 2000 . . ~ " SIAS 1800 . 1700 - - NOTE (3) 1600 - 1500 . , 1400 c-- -_____________ , E g' 1?00 F , d' - a f-U,1200 fl ,d j - 1100 - 2 \ g1800 - u E. a M . ,/ 700 . 800 - N 500 . N 40s - 308 . 294 - 100 - / . 8 e i e i s , , ,  ; e , , 200 400 800 800 1000 1200 1400 1600 1800 2000 2200 2400 2500 F LOW, GPM NOTES: (1) SEE IMPLEMENTATION SECTION FOR DEVELOPMENT OF PLANT SPECIFIC CURVE (2) FOR POT AND COLO LEG INJECTION MODE.THE LPSI PUMPS ARE NOT REQUIRED TO SE OPERATING.THE HPSI PUMP FLOWIS OlV10E0 EQUALLY SETWEEN THE HOT AND COLO LEGS (3) 8ELOW SIAS PRESSURE SAFETY INJECTION SYSTEM (SIS) PUMPS WILL BE OPERATIN' SUT THERE WILL SE NO INJECTION FLOW UNTit SYSTEM PRES $URE F ALLS 8ELOW THE SHUT 0FF HE A0 0F ANY SIS PUMP l SB 10-16 4EN- M b 3 M 4 1 COMBUSTION ENGINEERING TITLE STATION BLACK 0UT. RECOVERY GUIDELINES EMERGENCY PROCEDURE , GUIDELINES- page 17 of 20 Revision C i SAFETY FUNCTION STATUS CHECK Safety Function Acceptance Criteria '
1. Reactivity Control 1. a. Reactor power decreasing l
d b [ Negative Startup Rate)
c. Not more han 1 CEA bottom light not lit or borated per Tech Specs.
i
2. Maintenance of Vital Auxiliaries
2. a. Main turbine tripped (AC and DC power) '
and i, b. Generator output 3- breakers open
divaiad
c. At least one t win of electrical DC power is available for:
a
1) DC control power and ii) The operatio g ,P
-at-leastoneI20 4 volt vital AC !j instrument channel. f l ( SB 10-17 CEL;:: Ec J COMBUSTION ENGINEERING TITLE STAT!ON ELACK0UT RECOVERY GUIDELINES EMERGENCY PROCEDURE - GUIDELINES Page 18 of 20 Revision -- SAFETY FUNCTION STATUS CHECK Safety Function L,1ptanceCriteria
3. RCS Inventory Control 3. a. H RCS subcooling is atleast(20'F) based on[averageCET) temperature Then; i) pressgrizer1ggel 7
is [h te K]. and ii) [the RVLMS ,g indicates the etre b- ed) ' E
b. H pressurizer level g islessthan((["),Then:
1) [averageCET1 temperature is less than super-heated, and -
11) (theRVLMSindi-catesthecoMrs 84tgoWe s, I
SB 10-1E CIii R:  ?~* COMBUSTION ENGINEERING TITLE STATION BLACK 0UT EMERGENCY PROCEDURE GUIDELINES page 2' of 20 Revision C \ $AFETYFUNCTIONJTATUSCHECK l Safety Function Acceptance Criteria 4 RCS Pressure Control 4. a. Pressurizer heaters and auxiliary spray, or charging pumps and $15 pumps are maintaining or restor 19 pressurizer pressure within the limits of Figure 10-1. Or b.(averageCET) temperature is less than superheated. (  ! Core Heat Removal S. [AverageCET) temperature is less than superheated.
6. RCS Heat Removal 6. At least one steam generator has level: ,
a. within the nonnal band with
$ N E [ [eedwater available to maintain level-or
b. being reNored by 4 W [r f feeJwa r flow E MY7
(- SB 10-19 TEN.flisc:sfassGE!S e w w '* COMBUSTION ENGINEERING TITLE STATION BLACK 0Vi RECOVEP,Y GU10ELINES EMERGENCY PROCEDURE ( GUIDELINES Page 20 of 20 Revision I $AFETY FUNCTION $TATUS CHECK Safety Function Acceptance Criteria
7. Containment isolation 7. a. Containment pressure less than(1.5psig) 1"j.
b. [No containment area radiatier.
monitors alaming? L*$
c. No process radiation alarms a,,!1(
d. No steam plant activity
, monitors alaming.
8. Containment temperature & Pressure 8. a. Containment temperature
( Control lessthan(120'F) 103.
b. Containment pressure less than(1.5psig).
9. Containment Combustible Gas 9. a. Containment temperature Control lessthan(120'F) .
. ing
b. Containment pressure less than(1.5psig).
SB
  • 10 W j
pu muumminqqmm pmui mu qumii qmmi -i ii u assim mmanianss mm -m.h-whi.i.i.. . . - . . . . . . . . . . - -.......m.. . . . . . -E' II *' I 'I ' 'IPI Ehmuliq uM TITLE iXCESS STEAM DEMAND !l /{b6 COMBUSTION ENGINEERING EVENT RECOVEPY l EMERGENCY PROCEDURE . ) GUIDELINES Page.l of .2ft. Revision .gL_ EXCESS STEAM DEMAND I,ylfj] RECOVERY GUIDELINE ) Prepared by A 61) COMBUSTION ENGINEERING, INC. - iv , Gr I' -C C 0,,ner: Cr^"p _ 1 ) . i ESDE-7-1 QN-43 [- l, i. L TITLE EXCESySTEAMOEMAND  ! COMBUSTION ENGINEERING EVEN" RECOVERY j EMERGENCY PROCEDURE ' GUIDELINES Page ? of 38 Revision " 7 3 PURPOSE This guideline provides operator actions which must be accomplished in the event of an Excess Stecm Demand Event (ESDE). The actions in this guideline l are necessary to ensure the plant is placed in a safe, stable condition. The , l goal of the guideline is to safely establish the plant in a condition which will allow the implementation of an sopropriate existing procedure: shutdown-cooling, hot standby, or hot shutdown, if the break has been isolatedg. re-- l  ! Peeedu re-prov i ded+y -t h e - { P l an t 4@ 4M1-Suppo+6enterWlant 4pera tions l I 9eV4ew4omitteek Radiological releases to the environment will be minimized and adequate core cooling will be maintained by following this guideline, f )j -i > This guideline provides technical information to be used by the utilities in developing a plant specific procedure. t ! ENTRY CONDITIONS 2  ; 1. The Standard Post Trip Actions have been performed.
' and
~
2. Plant conditions indicate that an Excess Steam Demand Event has occurred.
i Any one or more of the ftflowing may be present:  !
a. Loud noise indicative of a high energy iteam line break, i
b. Decreasing RCS average temperature caused by the increased RCS heat j removal.
c. Increase in feedwater flow until main feedwater isolation valves are
> closed on MS!S.
d. Possible increase in containment temperature, pressure, humidity, and sump level.
l ' - -e .M0their^piant-spec +fic symptbins,'TnserTherT7:- 4 7-2 CI^ 22 a u 63w ESDE 1 wo. ~ , ~ . . , .,s-y.,, .,_-,.,,,...._,,,,g.,.y., - - , , . _ , , ,, _ , _ .,, , , . _ ,,.w,7,,._,.y..,...w, .,_,,_.,..___.e _ . . . . , , , , , _ , , , , _ , , _ . , , 1 i COMBUSTION ENGINEERING TITLE EXCESS STEAM DEF.AND EVENT RECOVERY  ! EMERGENCY PROCEDURE i 4 ) GUIDELINES Page - 3 of 38 Revision # l Ex!T CONDITIONS
1. The diagnosis of an Excess Steam Demand Event is not confirmed.
2T. 1 2. Any of the Excess Steam Demand Event Safety Function Status Check ! acceptance criteria are not satisfied. or
3. The Excess Steam Demand Event EPG has accomplished its purpose by .
l satisfying ALL of the following: l a. All Safety function Status Check acceptance criteria are being I satisfied, i i ' RCS conditions are being controlled and maintained in hot,$tandby, ~ b. hot shutdown, or cold shutdown. , l c. An appropriate, approved procedure to implement exists or has been f approved,by%e-{Plent. Technical support Center or the Plant 4 i fperat4cns ReviewJ.cmmittee]. f _ - g, o k. f i i 9 i k ESDE 7-3 P *?~*e N - t  ;,, +, w., w .-es ,. an-, - , ~n-- , - - - - , , , , , , , . - . , ,e n, - ,,n,--- -r,+ TITLE EXCESS STEAM DEMAND COMBUSTION ENGINEERING EVENT RECOVERY I EMERGENCY PROCEDURE ) of 38 Revision # - GUIDELINES Page 4 1 INSTRUCTIONS CONTINGENCY ACTIONS e t
1. Ensure Standard Post Trip 1.
j Actions performed. Confim diagnosis of an Excess 2. Rediagnose event and exit
  • 2.
Steam Demand Event by: to either appropriate
a. verifying Safety Function Optimal Recovery Guideline
] or to the Functinnal i Status Check acceptance criteria are satisfied, Recovery Guideline, a _and
b. referring to the Break ,
l _ Identification Chart g y g Q /y f., Joyf (Figure 7 2), ,5 tem ps,wr-s.from ee/mt fam//d/ l g / - ~ . --
c. {+ampling-both -steam-generators-for activity);
i i
3. If pressurizer pressure decreases 3. If pressurizer pressure to or below [ W psia), Then here es to or below 4
verify an SIAS is actuated. [ psia]andaSlAS has NOT been initiated , automatically, Then manually = initiate an S!AS. i e 4
  • Step Performed Continuously ESDE 7-4 ,
u*-C ~L i. 0 3 ~ - 5 , r nr--- , v-~--m, w c - . - - - c -em_,+m.- . _--+ ,,v,,,, -e n--,,---.-.--,s- .yae - , , I COMBUSTION ENGINEERING TITLE ExCtss sitAM DEMAND EMERGENCY PROCEDURE i GUIDELINES Page 5 of 1 Revision JtL_ l INSTRUCTIONS CONTINGENCY ACTIONS I *4 Ensure maximum safety injection 4. If safety injection and j charging flow NOT j and charging flow to the RCS maximited. Then do the l by the following:
a. start idle $15 pumps following as necessary:
and verify 515 flow in a. ensure electrical accordance with Figure 7-3, power to valves-and pumps, a_nd
b. start idle charging pumps. b. ensure correct SIS valve lineup,
c. ensure operation of necessary auxiliery systems.
Continue RCP operation. )
  • 5. if,pressurizerpressure 5.
d g ases to less than ( N psia) following an 51AS, Then ensure two of four RCPs are tripped (in opposite loops).
  • 6. (Verify RCP operating limits are 6. (TriptheRCP(s)whichdo not satisfy RCP operating satisfied).
limits]. . ' Step Performed Continuously 7 I.E '.;; L 03 ESDE TITLE ExrESS STEAM DEMAND COMBUSTION ENGINEERING EVENT RECOVERY EMERGENCY PROCEDURE ) GUIDELINES Page 6 of 38 Revision
  • CONTINGENCY ACTIONS INSTRUCTIONS Determine the affected SG (or most 7.
7. affected SG) by comparison of the following:
a. SG steam pressures,
b. RCS cold leg temperatures,
c. SG 1evels.
8. Go to Step 9.
8. M Excess ' Steam Demand Event stopped due to MSIS, Then go to step 11.
9. Isolate the most affected steam 9.
generator by perfoming the ) following: close the M51V, a. locally close MSIV, a.
b. verify closed, or close the b. locally close MSIV MSIV bypass valve, bypass valve,
c. close, or verify closed the c.[locallycloseADV(s)J.
atmospheric dump valve (s) and aligntothemanualmode[.
d. close the main feedwater d. locally close main isolation valve, feedwater isolation V*** [;*fy 5MfM cperyn'7 e.flocally close m N4ar.y.
e. [close theg4u444trf *feedwater feedwater isolation isolationvalve)',
valve /,
f. close vents, drains, exhausts f. locally close vents, and bleedoffs, drains, exhausts.,and bl eedof f s . --
,,,9,--{4thr phmic-- ivu ; itt HDr ~+nsert%r+] .-
  • Step Performed Continuously ESDE _7-6 (L-m-a.._03"
COMBUSTION ENGINEERING TITLE EXCESS STEAM DE' AND EVENT RECOVERY EMERGENCY PROCEDURE ) GUIDELINES page 7 of 38 a,yision e INSTRUCTIONS CONTINGENCY ACTIONS 4
10. Verify the correct steam generator 10.If,thewrongsteam is isolated by checking the following: generator was isolated,
a. $G steam pressures, Then unisolate that steam
b. RCS cold leg temperatures, generator and isolate the  !
most affected steam j
c. SG levels, generator per step 9.
*11. Maintain unisolated steam generator 11. levelinthenormalbandusing(main, forauxiliefy]feedwater. swhP - trneopss) *12. Stabilize RCS temperature by controlled 12. steaming of the unisolated SG using the ) following (listed in preferred order):
a. turbine bypass system.
92
b. atmospheric dump valve (s).
4 1 1 4
  • Step Performed Continuously 4
ESDE- 77- 6 4 ,,.,g -.,n--,+ , - = - - . - - - ~ , - . . - _ ,,,n-,n . . . - . - . . - - . . - - - COMBUSTION ENGINEERING TITLE EXCESS STEAM DE N ND EVENT RECOVERY EMERGENCY PROCEDURE ' GUIDELINES Page 8 of 38 Revision " INSTRUCTIONS CONT:NGENCY ACTIONS *13. Iff $51 pumps are operating Then 13. Continue $1 pump they may be throttled or stopped, one operation. pump at a time, if M of the following are satisfied:
a. RCS subcooling at least (20'F]
basedon[averageCET) temperature (Figure 7-1),
b. prep,urizer level is greater than
[Jyld and not decressing,
c. at least one steam generator is
- available for removing heat from the RCS (ability for feed and steam flow). ) d. /the RVLMS indicates a minimum level at the top of the hot leg nozzle s)'. , *14 pressurizer pressure i greater , Id[ContipueLPSIp'p I t#an(200 psia]and ntrolled, [ ration. \_ Then any operati LPSI pumps ay be C g stopped. . ~ . .
  • Step Perfomed Continuously 7-8 C ' ^ ' m ^4 '
. ESDE i 1 I COMBUSTION ENGINEERING TITLE EXCESS STEAM DEMAND EVENT REC 0VEP.Y EMERGENCY PROCEDURE I i GUIDELINES Page 9 of 38 Revision M INSTRUCTIONS CONTINGENCY ACTIONS *)3I If,fcriteria of step 13 annot be M)(, 1 +7 e maintained after 515 pumps throttled 4 or stopped Then appropriate SIS pumps must be restarted and full SIS flow restored. *[ When pressuri23r level is greater than [ M pres grizer level less f ip or equal to [37), Then ensure charging /9~ than [M, Then continue ] and letdown, and the SIS (unless $15 to operate all available termination criteria met) are being charging and SIS pumps for operated to maintain pressurizer level maximum available flow, i ( PJ to 24S) . tu - 7o y, l l
  • Step Performed Continuously ESDE 7-9 EM' re . S
l COMBUSTION ENGINEERING TITLE EXCESS STEAM DEMAND EMERGENCY PROCEDURE ) GUIDELINES Page 12 of 28 Revision <>< INSTRUCTIONS CONTINGENCY ACTIONS * [ Maintain the RCS within the acceptable
  • W. , H RCS subcooling greater
')/[ Post Accident Pressure-Temperature /6 thanP-T limits or cooldown limits of Figure 7 1 by the following: rategreaterthan[100*F
a. pressurizer heaters and (main /hr]Thendothefollowing or auxiliary) spray, as appropriate:
or a. stop the cooldown, ,
b. charging and letdown, b. depressurize the RCS 2.C using[mainor
c. throttling of g S1 pumps. auxiliaryspray) to restore and maintain pressurizer pressure within the limits of Figure 7-1,
) c. attempt to maintain the plant in a stable pressure-temperature configuration or continue to cooldown within the limits of Figure 7-1, ,
d. E over pressurization is due to F SI/ charging flow Then throttle or secure flow (refer to step 13) and manually control letdown to restore and maintain i
pressurizer pressure . within the li; nits of Figure 7-1.
  • Step Perfonned Continuously.
ESDE 7 _J= 4. . 2. COMBUSTION ENGINEERING TITLE EXCESS STEAM DEM ND EVENT RECOVERY EMERGENCY PROCEDURE GUIDELINES Page 11 of 38 Revision +* INSTRUCTIONS CONTINGENCY ACTIONS M I ll *)d. M containment pressure is greater )CIEnsurenormalcontainmsnt than or equal to [4 psig], Then ensure equipment cooling air / the following: recirculation systems operating.
a. containment isolation is actuated a. M containment automatically [-pla&4 pet-444c isclation does not
-c.ethod-of- cm.,u ri ng containment- occur automatically -4to 4 44cn inurtedher4), or all containment and isolation values are
b. all available containment emergency not in their accident fan coolers operatirg in the positions, Then emergency mode, manually initiate and containment isolation
) c. all availab normai containment -{+hnt4pecifit-method equipment cooling and air of manuaLcontaiment-recirculation systens are . tsolatinn 4aserted operating. here]. /, IV.Econtainmentpressureislessthan 19. [3.0psig],Thencontainment emergency cooling fans may be shifted to nomal configuration.
  • Step Perfomed Continuously.
I ESDE l-11 HK ~ =++p i i COMBUSTION ENGINEERING TITLE EXCESS STCAM DEFAND EVENT RECOVERY EMERGENCY PROCEDURE , I GUIDELINES Page i2 of 3c novision m  : INSTRUCTIONS CONTINGENCY ACTIONS , f 'I * . ,l_f, containment pressure is greater . than or equal to [10 psig) Then do the following:
a. ensure containment spray system actuation, a,,n,L
b. place the hydrogen monitors in service and continuously monitor containment hydrogen, f-. e m#r e. A Wkl UwT 8 YSN "
evea e N *t. TkI. r ,n . d r, . ensure adequate containment es.O L temperature-pressure control by one of the following: ) pi,i) atleastkhreecontainment ] fan coolers operating in the energency mode, or ii) at lea(tw$ containment fan coolers operating in the emergency mode a,nd n at least one containment spray header .deliveringatleastd500gpmQ or tii) two containment kray headers deliveringatleast(500gpm), and, -d, Feets hid utilize external hydrogen recombiners %eedt take ' steps to have the recombiners made availableandalignedforusef. )
  • Step Performed Continuously.
ESDE 7-12 Gr= 1sz W3 i COMBUSTION ENGINEERING TITLE ExCtss SitAM otnND , EVENT RECOVERY EMERGENCY PROCEDURE i ) GUIDELINES Page 13 of 38 Revision ** INSTRUCTION $ CONTINGENCY ACTIONS 2O N
  • Iff containment spray system is Continue containment spray operating and containment pressure system operation, i islessthan(7psig],Thencontainment j spray may be terminated. Upon l
i termination the CSS must be aligned and resetforautomaticoperation(or f j manualrestart) , q u,L, g,gt s ys n m ,.] gg t.w 6 < e s u v ut . . M the containment hydrogen . concentration is greater than or equalto(0.5%),Thenoperatethe , j hydrogen recombiners. A '2.L ).L . M containment hydrogen concentration [. islessthan(0.5*.),Thenterminate operation of hydrogen recombiners. M. 4 f 2
  • Step Performed Continuously.
ESDE 7 13 A -;._ -r 02 l i COMBUSTION ENGINEERING TITLE EXCESS STEAM DEN ND l EVENT RECOVERY i l EMERGENCY PROCEDURE i ) GUIDELINES Page 18 - of 38 Revision e ,
l I
INSTRUCTIONS CONTINGENCY ACTIONS #} 4 13 j Np(. H RCPs are NOT operating, Then  %.a.MRCPoperationN_0T 0 4 evaluate the need and desirability of desired, Then go restarting RCPs. Consider the to step 2T. 4 following:
a. adequacy of RCS and core o,r heat removal using natural circulation, b. !f fat least one RCP is l operating in each loop,
.) b. existing RCS pressure and temperatures, Thengothestep%[ A
c. the need for main pressuri:er spray capability, '
d. the duration of pCWp' interruption
] N to RCPs, P.CP seal staging pressures and ) e. temperatures. d } j 1 W i
  • Step Performed Continuously.
ESDE 7-14 CNN " _ n' 3 TITLE cxCEss SitAM otMAND COMBUSTION ENGINEERING EVENT RECOVERY { EMERGENCY PROCEDURE i ) GUIDELINES iPage15 of 38 Revision
  • INSTRUCTIONS C0hTINGENCY ACTIONS b V 2y f
)
  • Determine whether RCP restart .f4 tostep%.
criteria are met by ALL of the following: } a. electrical power is available tothe(RCPbus), ] ,
b. RCP auxiliaries ([CCW]) to maintain
 ; [sealinjection)', bearing,and motor cooling are operating, and there are no high temperature alarms on the selected RCPs,
c. the unisolated steam generator is available for removing' heat from
'1 the RCS (ability for feed and steam flow), l' } d. prgssurizer level is greater than [ W ) and not decreasing, i
e. RCSsubcoolingatleast[20'F]
basedon[averageCE temperature (Figure 7-1), 4
f. [other criteria satisfied per RCP operating instructions
  • Step Perfonned Continuously.
7-15 h 1 ' r--- " 3 E50E . - . . ~ , ., - , . + , _ .,.m .m.. - .-. . - . . , . . - ,m. - - - _ . - - . . - - - - _ - - - _ - _ - _ - _ . = _ - . - i TITLE EXCESS STEAM DEMAND COMBUSTION ENGINEERING EVENT RECOVERY EMERGENCY PROCEDURE , ) GUIDELINES Page 26 of 38 Revision W-INSTRUCTIONS CONTINGENCY ACTIONS Af Af *h M RCP restart desired and restart K.Gotostep[M criteria satisfied. Then do the following:
a. start all available charging pumps. M pressure less than
[1300 psia),ThenIIP,SIpumps may be operated,
b. start one RCP in each loop,
c. (ensureproperRCPoperationby monitoringRCPamperageandNPSH),
d. operate chirging (and EFSI) pumps and letdown to maintai,r), .
pressurizer level ( h to W ). Operate *8hl pumps until $15 ) termination criteria met. (Refer to step 13). Y[ 7-(. H no RCPs are operating, Then verify K. Ensure proper control of *)f natural circulation flow in at steam generator feedirg least one loop by All of the following: and steaming (refer to - steps 11 and 12) and RCS
a. loopAT(TH - T g) less than normal full power AT, inventory and pressure.
b. hot and cold leg temperatures control (refer to steps i
constant or decreasing, )( and M). ! c. RCSsubcoolingatleast[20'F) T M basedon[averageCETftemperature (Figure 7-1),
d. noabnormaldifference(greater than10'F)betweenT RTDs g and average CET temperature.
  • Step Phrfonned . Continuously.
ESDE 7-16 C G ^. f N _ G L= .-..,e < + - - - + - - - - v-,n ,v-- ,.------e,- ,, . , - , . , - , , ,-m---- ,e r .-m- .n-.- l 4
COMBUSTION ENGINEERING TITLE EXCESS STEAM DEMAND l EVENT RECOVERY l EMERGENCY PROCEDURE
) GUIDELINES Page 17 of 38 Revision # 1 INSTRUCTIONS CONTINGENCY ACTIONS 17 27 l  % Evaluate the need for a plant )(f. l l cooldown based on:
a. plant status, l
b. auxiliary systems availability, j
i c. condensate inventory (refer to j Figures 7 4 and 7-5). Lb 2.} E a plant cooldown is desired, h[.a.Maintaintheplantin f K. a stabilized condition, l Then continue with the actions of this guideline, d ' b. Exit to appropriate procedure, es 41rected .__ by p nt Jechnica4 g ) Lipnnrt4tntinr$7 1
  • Step performed Continuously.
} ESDE 7 17  ::: .- m . +;c l COMBUSTION ENGINEERING TITLE EXCESS STEAM otMAND EVENT RECOVERY EMERGENCY PROCEDURE ) GUIDELINES Page 18 of 38 Revision !$. INSTRUCTIONS CONTINGENCY ACTIONS l Tjz L9 *p. a . Borate the RCS to maintain shutdown W . margin in accordance with j Technical Specifications, yd i
b. Prevent boron dilution by pressu- i riter cetturge by the following l (listed in preferred order):
i) borate to raise the entire RCS (including the mass in thepressurizer)tocold shutdown conditions, or
11) use(mainorauxiliary] spray
) to increase and maintain pressurizer boron concentration within[SOppm)ofRCSboron concentration. 50 $o Perform a controlled cooldown, using X, )I. forced or natural circulation, in accordance with Technical Specifi-cations. Reduce RCS temperatures by:
a. E the condenser is available, ,
Then cooldown using the turbine - bypass system. 9.C
b. E'thecondenserorturbinebypass system NOT available. Then cooldown .
using the unisolated SG ADV.
  • Step Perfomed Continuously.
7-18 Cc" . 07 ESDE o,s.. l
TITLE EXCESS STEAM DEMAND COMBUSTION ENGINEERING EVENT RECOVERY l EMERGENCY PROCEDURE GUIDELINES Page 19 of -
38 Revision #
)
l, CONTINGENCY ACTIONS INSTRUCTIONS 4 $I 3I i l *g. Control charging and letdown,  %. If RCS subcooling of at f least(20'F)canNOTbe andMSI(unlessSIStermination maintained, Then M I') criteria met) to restore and may be exceeded to restore l naintain ,p,ressurizer level RCS subcooling. ! ($ to b ]. L $t({. *% Ensure RCS conditions are K.l_fRCSsubcoolinggreater  ! d being maintained within the g than P-T limits or cooldown limits of Figure 7-1 during rategreaterthan(100*F cooldown by: /Hr), Then do the following manual operation of pressurizer as appropriate: a. heaters and spray, a. stop the cooldown,
b. depressurize the plant of l '} operation of charging / letdown, using(mainor b.
or auxiliary)sprayto throttling of $1 pumps (refer restore and r'aintain c. " to step 13). pressurizer pressure , within the Post [i ' Accident P.TLlimits of ' Figure 7-1,
c. attempt to maintain the plant in.a stable pressure-temperature 4
configuration or continue to cooldown
within the limits of Figure 7-1, (ContinuedOnNextPage)
  • Step Performed Continuously.
! 1 7-19 u C- tM3 - ESDE 4 COMBUSTION ENGINEERING TITLE EXCESS STEAM DEMAND EVENT REC 0VERY EMERGENCY PROCEDURE ) GUIDELINES Page 20 of 38 gevision _ s _  ! l 1 INSTRUCTIONS CONTINGENCY ACTIONS f " .. . :; ^ f
d. !_f,overpressurization duetoQSl/ charging ,
flow, Then_ throttle I or secure flow (refer tn step 13) and manually control letdown to restere and maintain pressurizer pressure withir. the limits of Figure 7-1. N b] )  % Maintain unisolated SG 1evel N, in the normal band throughout thecooldownusing/ main,$ne avv444ery[feedwater. 9 )f v c . .y .8 t > T . Ensure the available condensate K )F inventory is adequate per Figures d 7-4 and 7-5. if l  % Bypass or lower the automatic )(. I initiation setpoints of [MSIS, CIAS, fMtS, and SIAS] as the cooldown and depressurization proceed.
  • Step Performed Continuously.
) ESDE 7-20  : "" ^ ^ ^ ~ "M -- +$ m y - n serw+4 * -+-ts -'-v'i. 9 y yw - y ---* '- - + w< ,- TITLE EXCESS 57EAM DEMAND COMBUSTION ENGINEERING EVENT RECOVERY EMERGENCY PROCEDURE ' I GUIDELINES Page 21 of 38 Revision # INSTpVCTIONS CONTINGENCY ACTIONS *)f If pressurizer pressure reaches g. tg kpsia], Then isolate, vent or N drain the safety injection tanks (SITS). . Ilnitiate low temperature ever- k pressurigion protection (LTOP) at T < 358 ' f ) . When the following SCS ent*y . M the RCS fails to conditions are established: depressurize, Then a void a, pressurizer level > (. 3 should be suspected. and constant or increasing, a. voiding the RCS may be RCS subcooling > [20'F), indicated by any of ') b. RCS pressure < [ M psia), the following c.
d. RCS T g < [NF], indications, Ar---{4that__A14nt-+pec1fie criterta parameter changes,
--tTrsert neiT)w or trends: Then exit this guideline and 1) letdown flow greater initiat9 SCS operation per than charging flow, [operatinginstructions), ii) pressurizer level increasing significantly more than expected while operating pressurizer spray, iiigeRVLMSindicates that voiding is present j in the reactor vessel , f
  • Step Performed Continuously (Continued On Next Page)
ESDE 7-21 C{" " ' ' "r -  % TITLE EXCESS STEAM DEf'AND COMBUSTION ENGINEERING * " '
  • EMERGENCY PROCEDURE
) GUIDELINES Page ?? of 38 Revision 4 CONT!NGENCY ACT10N5 INSTRUCTIONS
39. . 139.-(Co W d)~
iv) tiJTC unheated thermo. couple temperature indicates saturated ronditions in the reactor vessel upper-heah,' 4- [other indicatiotis ,_._ insert hue}-
b. M voiding inhibits RCS depressurization to -
SCS entry pressure, Then attempt to ) eliminate the voiding by: i) verify letdown is isolated, a.2.$ ii) stop the depressuri-zation, a_nf
  • Step Performed Continuously ESDE 7-22 W ^ r- 3
COMBUSTION ENGINEERING TITLE EXCESS STEAfi DEMAND EVENT RECOVERY EMERGENCY PROCEDURE ) GUIDELMES Page ?3 of 38 Revision ._4L. INSTRUCTIONS C0tiTINGENCY ACTIONS )(/ curs W iii)pressurire and depressurize the RCS within the limits of Figure 7-1 by operating pressurizer heaters and spray or fPSIandcharging pumps. Monitor pressurizer level [and theRVLPS[fortrending of RCS inventory. ) c. ,l_f, f depressurization of the RCS to the SCS entry pressure is still not possible. Then attempt to eliminate , the voiding by: i) operate the . [pressurizervent or the[ reactor vessel head vent to clear trapped non'-condensible gases, a n,,d
  • Step Perfonned Continuously ESDE 7-23 LY- 03 .
l ~ - .-, .- - . . . . . . COMBUSTION ENGINEERING TITLE Excess s !AM DEMAND EVENT REC VERY EMERGENCY PROCEDURE I GUIDELINES Page 24 of 38 Revision W INSTRUCTIONS CONTINGENCY ACTIONS / ll/ ii) monitor pressurizer leve1[and/orthe RVLMSgfortrendingof RCS inventory.
d. Continue attempts to establish SCS entry condition, or exit this guideline and initiate an appropriate procedure, et44 reded
-by-{Pl ent Technica l- -%pportJ. enter) . ) The Excess Steam Demand Event Recovery Guideline has accomplished its purpose if all of the SFSC acceptance criteria being satisfied, RCS conditions are being controlled in hot standby, hot shutdown, or cold shutdown, and the entry conditions of an appropriate procedure are satisfied. .E,ND
  • Step Perfonned Continuously.
) - l tsDt n24 wwu: l l i. l l COMBUSTION ENGINEERING TITLE EXCESS STEAM OfPAND -
' EVENT RECOVERY EMERGENCY PROCEDURE i ) GUIDELINES Page - 2s of 3e Revision ** 1 l
l SUPPLEMENTARY INFORMATION This section contains items which should be considered when implementing EPGs and preparing plant specific E0Ps. The items should be implemented as precautions, cautions or notes or in the E0P training program.
I 1. Lengthy operation of the containment spray system may jeopardize the operati9n of equipment which would be desirable later in the event.
f Early consideration should be given to termination of spray operation. y g. yg, , i
2. During all phases of cooldown, monitor RCS' tereperature and pressure to
' avoid exceeding a maximum cooldown rate greater than Technical Specification Limitations.
3. Do not place systems in " manual" unless misoperation in automatic is apparent. Systems placed in " manual" must be checked frecuently to
) ensureproperoperation.(eference15.34)S 4 All available indications should be used to aid in diagnosing the event ' since the accident may cause irregularities in a particular instrument reading. Instrument readings must be corroborated when ene or more confirmatory indications are available ference 1 )
5. If the initial cooldown rate exceeds Technical-Specification Limits, there may be a potential for ~
surized thermal shock (PTS) of the Post Accident Pressure / Temperature reactor vesselhrence 15.8) Limits of Figure 7-1 should be maintained.
6. Solidwateroperationofthepressurizershouldbeavoidedunless(20*F) of subcooling cannot be maintained in the RCS (Figure 7-1), if the RCS is solid.. closely monitor any makeup or draining and any system heatup or cooldown to avoid any unfavorable rapid pressure excursions.
E5DE 7-25 6 E L . ^3 -, . ,.,-- - - .,.- . ,,-7 ,,-,.,..y --, . , , , , y-,--4 ,-m., TITLE EXCESS STEAM DEMAND COMBUSTION ENGINEERING EVENT RECOVERY EMERGENCY PROCEDURE ) GUIDELINES Page 26 of 38 Revision 85'
7. Minimize the number of cycles or pressuriter auxiliary spray whenever the temperature differential between the sprag water and the pressurizer is gretter than [200*F) in order to minimize the increase in the spray nozzle thermal stress accumulation factor. Every such cycle must be recorded in
..cordance with Technical Specification Linitations herence 15.10 ang? b _S. -{44eniteMuench- tanLpar2me.tersaince any sustained-eperation of the.. PSVs mray-tmrst-the -tank's rupture . disc.) When a void exists in the reactor vessel, and RCPs are not operating, the / RVLMS provides an accurate indication of reactoi vessel liquid inventory. ^ When a void exists in the reactor vessel, sad RCPs are operating, it is not possible to obtain an accurate reactor vessel liquid level indication due to the effect of the RCP induced pressure head on the RVLMS. The indicated level also differs for different RVLMS designs under these conditions. Infonnation concerning reactor vessel liquid inventory trending may still be discerned. However, the operator is cautioned not to rely solely on the RVLMS indication when RCPs are operatin C %. The operator should continuously monitor for the presence of RCS voiding and take steps to eliminate voiding any time voiding causes the hest removal or inventory control safety functions to begin to be threatened. Void elimination should be started soon enough to ensure heat removal and inventory control are not lost (6ference 15.14h /Og, Reducing containment temperature will reduce hydrogen production-from corrosion due to the reaction of containment building metal (especially aluminum and zinc) and boric acid (containment spray). This is a temperature dependent reaction. (l . [Any cautions provided by the hydrogen recombiner vendor concerning operation of the recombiner with a degraded containment environment should be inserted here]. } ESDE 7-26 @~.Mr- 03 COMBUSTION ENGINEERING TITLE EXCESS STEAM DEMAND EVENT PEC0VERY EMERGENCY PROCEDURE I GUIDELINES Page 27 of 3e Revision
  • Q3. Operation of .sny equipment in the containment building when containment hydrogen concentratio 4 [4%] should consider the possibility of hydrogen ignition (eference15.3)2Considerationshouldbegiventothefollowing:
a. The importance to safety of equipment operation
b. The urgency of equipment operation
c. The use of alternative equipment located outside containment
d. The current hydrogen level and the anticipated time to reduce Hg 3 [4%].
3 J4I Measured containment hydrogen typically represents a value of hydrogen in units of percent by volume of dry air. The measured hydrogen will typically indicate higher than the actual containment hydrogen for a steam / air mixture inside containment. The indicated value should, therefore,becorrectedltaccountforanysteamIairmixtureinside ) containment (efcre i. [ % f if there is a conflict between maintaining adequate core cooling and complying with the pressure / temperature limits of Figure 7.1, then maintaining of adequate core cooling will be given the higher priority. Subcooling of 20'F hs precedence over PTS considerations, j(Ad Combustion Engineering plants are designed with redundant electrical - equipment. Therefore the loss of one vital AC or DC bus will not prevent the operators-from perfonning the actions of this guideline. However, it is desirable to have a complete complemed of electrical equipment to mitigate and recover from an event. Therefore, the operators should-attempt to restore electrical power to vital AC or vital DC bus (es). / [ If there is a conflict between isolating a SG a'nd maintaining adequate heat removal, then maintain RCS heat removal via the least affected SG. At least one SG should always be available for heat removal, if at all possible. ^ ESDE 7-27 Chm .~,. k TITLE - tnt 33 37t;n COMBUSTION ENGINEERING '""'""'"" - EMERGENCY PROCEDURE .Page 3 of 33 Revision meP_. ) GUIDELINES FIGLKE 7-1 t5 ivPICAL POST ACC:0ENT Or.E55URE-TEPPERATURE LIF 2500E 1 i i j i 2400 - LOWEST f 2300 -. _ SERVICE ino op, HOUR / TEMP N COOLDOWN i I f 2000 - NOTE 1)/ 11 i / 0 (200 F)  ! S Y 2 / $ 1500 - 8 / / \ 5 o / e 5 / \h } ,$r 1000 - / RCP NPSH / w  ; [200 Fl (00)  ! SHUTDOWN . 500- y / COOLING , /' 1 J 400 500 600 0 300 100 200 RCSTEMPERATURE, F NOTES:(1) THIS C 'E SUPERSEDr.S THE 100 F/ HOUR COOLDOWN CURVE ' ANYTi oE THE RCS HAS EXPERIENCED AN UNCONTROLLE WHICH CAUSES RCSTEMPERATURE TO GO BELOW 500 F (2) THESE CURVES MUST BE ADJUSTED FOR INSTRUME uo -11 7-28 FSDE TITLE Excess STEAM COMBUSTION ENGINEERING '" " ' " " ' ' " " EMERGENCY PROCEDURE ) GUIDELINES Page 29 of 38 Revision _.fr_ FIGURE 7-2 BREAK IDENTIFICATION CHART PRESSURl7.ER LEVEL CHANGING AND PRESSURIZER PRESSURE RAPIDLY DECREASING I INSERT SUBCOOLING INCREASING OR ONE OR BOTH SGsIfiDICATE LO'(c f,0/4 PRESSURE LOW YES . NO oMAY BE SLOW IN THE CASE J ' OF SMALL BREAK LOCA iN CONTAINMENT OR STUCK 2 OPEN PORV , 3r EXCESS STEAM PRIMARY
SIDE DEMAND EVENT i BREAK j (ESDE) 1r d 9r ONTAINMEN YES ONTAINMENT NO YE NO PRESSURE PRESSURE INCREASING INCREASING 0 r
y ACTIVITY IN NO. i STEAM PLANT i i ir sr 3r sr 1r , SB LOCA - ESDE IN ESDE OUT OF LOC A INSIDE CONTAINMENT CONTAINMENT CONTAINMENT CONTAl MENT EsDE 7-29 ea ' 6.0 T - e w a y 4 i TITLE Excess stEu COMBUSTION ENGINEERING CEPAtlD EVE!!T RECOVERY EMERGENCY PROCEDURE i GUIDELINES Page 30 of 38 Revision * ' i, FIGUPE-7 3 IU j TYPICAL ACCEPT ABLE SISl2)FLOW vs RCS PRESSURE I i' INJECTION MODE , , , , 2300 , , 2200 . 2100 . 2000 - 1900 3 3 . 1800 _ l . {, 1 1700 . 1 NOTEth _ 1 1600 - 1500 _ y 1400 e 4 S ~ 1 ~ f1300 m 61200 c: - $1100 )vY M / 4' h'. , ) h1000-n / 900 . i y gr+ .. . \c + 800 y3 . 700 . 600 . j _ 1 ' 500 - ~ 400 - . 1 ~ ~ i i-300 ~ g , , , - '", s 200 --( _ / - 100 - i i .4 e ' ' ' ' ' e i i _ 0 200 400 600 800 1000 1200 1400 1600 1800 2000 2200- 2400 2600-FLOW,GPM E N TES: (1) SEEiMPLEMENT ATION SECTION FOR DEVELOPM  !- (2) FOR HOT AND COLO LEG INJECTION MODE,THE ? BETWEEN THE HDT AND COLO LEGS 1= , (3)F ALLS BELOW SI AS PRESSURE.SAF ETY BELOW THE SHUT 0FF HEAD OF ANY SIS PUMP 7 30 m.A _ ESDE COMBUSTION ENGINEERING. TITLE ftf En :-- - mwm Er;T ::::n:. EMERGENCY PROCEDURE GUIDELINES Page 21 of 23 Revision # 3 FIGUoE 7 r i ' ?YP! CAL TEICHATEP C/FAC:TY VERSU! !PE t'NT't S-UT00wh 3 CCCLlHG CEOU;PEC 400 , , , , , i i l 360 - 320 - i i 280 - C 4 . 240 - 9 3 . N+ < N O * !200 - / , ) y s 4-Vw Vx s- p >s @ - i.  % ( 4 160 - c U b $ 0 i h.. 6 i - 120 - T i 80 - d 4o .- 1 t t t t t I t 4 8 12 16 20- 24 2B 32 < 0 TIME REM AINING UNTIL SHUTDOWN COOLING REQUIREC (HRSl' 7-31 O '." ^ _  ; ESDE t - _ . . , y ,. TITLE g Lm. .s .3.. - COMBUSTION ENGINEERING " " "'" 'E"" EMERGENCY PROCEDURE ) GUIDELINES Page.r of IL Revision
  • FIGUFE -E
'YPICAL TEECWATER REtti. RED =0P SP:S;3LE HEAT. PE0'IAL T OW RED; '.1 T COLD #' } . COLD i 3 ' ' 50 e i 8 4 4 40 - ~3 a C
  • m
- ~ 0 30 TCOLD REQUIRED = 300 F - 5 350 F ) g c - e 20 ] - 4000F ry V 3 h 4500F \ 10 J J 1 I t I 1 400 360 320 28C 520 480 440 560 INITI AL TCOLO( F) . 1 4 . ~ 7-32 C E irww , . . 03 ESDE COMBUSTION ENGINEERING TITLE EXCESS STEAM CD*:'c EVENT RECOVEDY EMERGENCY PROCEDURE ) GUIDELINES- Page 33 of 38 Revision 3._ , i I SAFETY FUNCTION STATUS CHECK I Safety Function Acceptance Criteria
1. Reactivity Control 1.a. Reactor power decreasing and
b. Negative rtup Rate a
c. Not more than_1 CEA bottom light
not lit or borated per Tech Specs.
2. Maintenance of Vital Auxiliaries 2.a.-Main turbine tripped
, (AC and DC Power) and
b. Generator output breakers open' kwnF
c. At least one v talg d
[4.16kVJAChasisavailable [t /w on b.* U * *f O N l* Y' ' ~' ~~~ ~ d *.
d. At least one rain of e ectrical dt3rrf4MM u A d he.dedid3 DC power i availabi for:
ntA ck.<*sl u.J TH Ac"li"lN "*N' 1) DC coy (troi power ,/ '
p*,r he r e s uj . t e .! .
M 11) Te /operatiop of at ' leas) one120volgvitalAC instrument channel. G 11+ km)1'ent.bp4fe c4 V.N (&'dl 4 : s +>. b utim u., h . 5 en sjit es!l bc% d'*wi u.I ist b(wif,en lo.) aa, n< s r b e' e'nny:td 7-33 CCiC ~; - * ' ESDE COMBUSTION ENGINEERING TITLE EXCESS STEAM DEMAND EVEN1 RECOVEPY EMERGENCY PROCEDURE GUIDELINES Page 34- of 38 Revision ** SAFETY FUNCTION STATUS CHECK Safety Function Acceptance Criteria
3. RCS Inventory Control 3.a. If pressurizer level is r .ml e
. < ,U a + L15 to 249)b A'<. ' / fe% 5 #4 ' i) charging and letdown, and SIS (unless SIS termination criteria met) are main-taining or restoring pressurizer level and ii) the RCS is at least [20*F] subcooled / IeII../.gl' and k ' a...s v.<. k vp k cA ns ' ) , / . 3, iii) ,s.. &[the , RVLMS - <. hey. s.hSp; o %tte indicates s *: thel = A is .L 7 95
b. If oressurizer level is less than M Then:
i) all available charging pumps
areoperatingandtheSig pump (s)areinjectingwater '
into the RCS per Figure 7-3. - / '. N' ti) the RVLMS ndicates._t$el,et is ale - LM .s ; J. u. )l  ! _. _ e_ M.,*?M_ w . _ . . ,*4. _, . ) ESDE 7-34 En . . ; ~ COMBUSTION ENGINEERING TITLE EXCESS STEAM DEMMC~ EVENT RECOVERY EMERGENCY PROCEDURE , ) GUIDELINES: Page 35 of 38 Revision
  • SAFETY FUNCTION STATUS CHECK Safety Function Acceptance Criteria 4, RCS Pressure Control 4.a. Pressurizer heaters and spray, or charging and letdown, or SIS pumps (unless SIS termination criteria met) are maintaining er
restoring pressurizer pressure-
, within the limits of Figure 7-1, 5 9.E
b. All available charging pumps are opbrating and the SIS pump (s) are
, injecting water into the RCS per Figure f-3 (unless SIS termination criteria are met), 5, Core Heat Removal 5.a. T HRTD [and averace Core Exit Thermocouple] temperatures lessthan[600*F], a_p.g 3
b. The RCS is at least [20*F]
subcooled. i ESDE 7-35 H-- - 'c ' - COMBUSTION ENGINEERING TITLE EXCESS STEAM DEMAND EMERGENCY PROCEDURE 1 GUIDELINES Page 36 of 38 Revision # SAFETY FUNCTION STATUS CHECK Safety Function Acceptance Criteria
6. RCS Heat Removel 6.a. The unisolated steem generator has level:
i) within the normal level band with feedwater available to maintain level or ii) being restored by feedwater +/ - u, . O ter-thq464-sp) i
b. RCS T,y, is less than [545'F].
7. Containment Isolation 7.a. i) Containment pressure less than [f}psig [ #
or
11) CIAS present or mar.ually initiated, f
and . b. No contai nt area radiation monitors alarming- 7 ' m a!!,d, l c. No steam plant cet!"ity Cr' tom ._:1:~<ng e rpJ;eh trur 41 mt nke/g. ): ESDE 7-36 w _ t . ^3 COMBUSTION ENGINEERING TITLE EXCESS STEAM DEMND EVEr:~ RECOVERY EMERGENCY PROCEDURE ) GUIDELINES Page 37 of 38 Revision
  • SAFETY FUNCTION STATUS CHECK Safety function Acceptance Criteria
8. Containment Temperature and 8.a. 1) Containment temperature less Pressure Control than[240'F]
and ii) Containment pressure less than[10psig] 9.C
b. The containment cooling system is operating in one of the following configurations:
l a~A 4,.mwW s Fss e * ~"J ,I Ng' p . Three ruy.A 9, uW hl. #) fan coolers in the gj emergency mode g g) At least two fan coolers in the emergency mode and at least one containment spray header delivering at leasthS00gpm] or ) Two containment spray headers each delivcring
  • atleash00gph
( b ~. 0 ESDE 7-37 C h l::  ; 1 COMBUSTION ENGINEERING TITLE EXCESS STEAM OEn NO EVENT RECOVERY , EMERGENCY PROCEDURE ) GUIDELINES Page 38 of 38 Revision *5 SAFETY FUNCTION STATUS CHECK Safetv Function AcceDtance Criteria
9. Containment Combustible 9.a. Containment sprays have g been Gas Control actuated or
b. Hydrogen c centration less s 3gW ' than [0.511 h,Ow e p<cd **
  • AM ##~^ re . i) [all available hydrogen j_ g g ,L
- recombiners are energized] and
11) hydrogen concentration is e
lessthan[4%). 4 1 1 4 i 1 1 4 ESDE 7-38 " " ' " 1 . 53 '~ COMBUSTION ENGINEERING TITLE FUNCTIONAL j RECOVERY GUIDELINE 4 EMERGENCY PROCEDURE GUIDELINES Page 1 of to Revision 03 ! I l i l t FUNCTIONAL REC 0VERY GUIDELINE , .I Prepared by /) Sf) COMBUSTION ENGINEERING INC. A cr^ ~ e=p s . FRG 11-1 6 COMBUSTION ENGINEERING TITLE FUNCTIONAL RECOVERY GUIDELINE EMERGENCY PROCEDURE GUIDELINES Page 2 og 10 Revision 03 PURPOSE This guideline provides operator actions for events in which a diagnosis is not possible, or for which emergency guidance is not available. The actions of this guideline are necessary to ensure that the plant is placed in a stable, safe condition. This guideline provides technical infomation to be used in developing a plant specific Functional Recovery Procedure. ENTRY CONDITIONS
1. The Standard Post Trip Actions have been perfomed and
2. Any of the following conditions may be present:
a. A reactor trip, and unusual concurrent symptoms, with no immediately apparent diagnosis or cause,
b. Any condition, or pattern of symptoms, for which abnomal or emergency guidance cannot be identified.
c. Actions taken in an Optimal Recovery Guideline are not satisfying the acceptance criteria in the Safety Function Status Check.
EXIT CONDITIONS
1. The acceptance criteria for all success paths in use are being satisfied.
and
2. An appropriate, approved procedure to implement exists or has been approved,by +ha [Dian+ NhM"1 %ppeet Cente- or the ohnt Op;r:tions kevicu Cerittee)) for wR.
FRG 11-2 CCG ^~; .- D.1 COMBUSTION ENGINEERING TITLE FUNCTIONAL EMERGENCY PROCEDURE GUIDELINES Page.2- of 10 Revision 03 FUNCTIONAL REC 0VERY GUIDELINE ENTRY PROCEDURE INSTRUCTIONS CONTINGENCY ACTIONS
1. Ensure Standard Post Trip Actions 1. 'O' ' b- A ' '"'i" d '
performed. A
2. Ifpressurizerpressuredecreases 2. Continue RCP operation, to less than /1300 psiaf following an SIAS, Then ensure all RCPs are tripped.
D A w ius ad mh l eve _h M $.t
3. / S m W both steam generators h 3.
acti"itypfe..w ca lia suplag.
4. Place the hydrogen monitors in 4 service.
2
5. Confinn the status of each 5.
safety function using the Safety Function Status Check by identi-fying success path (s) currently in use for each safety function i and then checking the appropiate acceptance criteria,
  • Step Performed Continuously FRG 11-3 CE b . 43
1 COMBUSTION ENGINEERING TITLE FUNCTIONAL REC 0VERY GUIDELINE EMERGENCY PROCEDURE GUIDELINES Page 4 of 10 Revision 03 INSTRUCTIONS CONTINGENCY ACTIONS
  • 6 Verify all safety functions are 6. Identify plant resources or being satisfied, or identify success patils, which can be those in jeopardy, by comparing used to fulfill each safety control board parameters to the function that is not being acceptance criteria of the Safety satisfied. Refer to the Function Status Check. Resource Assessment Trees.
(Figures 11-8 through 11-15).
  • 7 If All Safety Function Status 7. If ary Safety Function Check acceptance criteria are Sta'eus Check acceptance satisfied, Then perfom . criteria-NOT satisfied, appropriate OPERATOR ACTIONS for Dendothefollowingin e
all success paths in use. t! 2 order listed:
a. perfom OPERATOR ACTIONS for those success-paths wiinse acceptance criteria are Not satisfied and_
b. perfom appropriate OPERATOR AC710NS for all success paths in use.
  • Step Perfomed Continuously FRG 11-4 Cf.thiS2=tev -03 l
i COMBUSTION ENGINEERING TITLE FUNCTIONAL RECOVERY GUIDELINE EMERGENCY PROCEDURE GUIDELINES Page 5 of lo Revision 03 INSTRUCTIONS CONTINGENCY ACTIONS *8. Implement the Long Ter::: Actions 8. Continue perfonning the when the following conditions are actions of this guideline, met:
a. appropriate OPERATOR ACTIONS for all success paths in use have been performed.
and
b. All Safety Function Status Check acceptance criteria are being satisfied.
M
  • Step Perfonned Continuously FRG 11-5 C M Js
. TITLE FUNCTIONAL COMBUSTION ENGINEERING """"'""E EMERGENCY PROCEDURE GUIDELINES Page 6 of to Revision 03 FIGURE 11-1 TYPICAL POST ACCICENT PRESSURE TEMPERATURE LIMITS ( i 4 2500 - I e 7 2400 - LOWEST f 2300 .- SERVICE TEMP % jogoF/ HOUR COOLDOWN / / 2000 - - NOT E 1 / _ t
/ )
5 0 [200 F]  ! Y 4 U. $ 1500 - / - H / / E / 5
u /
RCP NPSH $jogo _ / 3 / [200F]  ! SHUTDOWN [00] ,
  1. COOLING _
500 - s Y.1 J P;E ( - 0 100 200 ) ' 300 400 500 600 )W 4 RCS T EMP ERATUR E, *F 7 g 0 NOTES:(1) THIS CURVE SUPERSEDES THE 100 F/ HOUR COOLDOWN CURVE ANYTIME THE RCS HAS EXPERIENCED AN UNCONTROLLED COOLDOWN WHICH CAUSES RCS TEMPERATURE TO GO BELOW 500 F (2) THESE CURVES MUST BE ADJUSTED FOR INSTRUMENT INACCURACIE FRG 11 6 --GEM E. 7 0; - COMBUSTION ENGINEERING TN FUNCTIONAL RE EM M RINE EMERGENCY PROCEDURE GUIDELINES page 7 of to Revision .30 FIGURE 11-2 BREAK IDENTIFICATION CHART PRESSURIZER LEVEL CHANGING AND PRESSURIZER PRESSURE RAPIDLY DECREASING # INSERT SUBCOOLING INCREASING OR ONE , OR BOTH SGslNDICATE Livl woj,t PRES 5URE LOW YES y oMAY BE SLOW IN THE CASE OF SMALL BREAK LOCA IN i CONTAINMENT OR STUCK OPEN PORV 1r 1r - EXCESS STEAM PRIMARY DEMAND EVENT SIDE , (ESD E) BREAK r r YE NTAINM EN NO YES ONTAINMEN NO PRESSURE PRESSUR E INCREASING INCREASING 0 . y ACTIVITY IN NO STEAM PLANT 1r 1r 1r 1r 1r ESDE IN ESDE OUT OF ^ LOC A INSID E CONTAINM ENT CONTAINMENT CONTAINMENT SGTR OUTS E CONT AINM ENT FRG 11-7 Jffid57 M* M 3 COMBUSTION ENGINEERING TITLE FUNCTIONAL RK WM GNUNE EMERGENCY PROCEDURE GUIDELINES Page 8 of . 31 Revision 03 FIGURE 11-3 llI TYPICAL ACCEPTABLE SIS FLOW vs RCS PRES $URE ' INJECTION MODE (2) . . . . . . . i 2300 i . . . . 2200 - 2100 - 2000 - ~ IE ~ SIAS 1800 - J 1700 - NOT E (3) i 1800 - 1500 - 3 1400 c------------------ C nim
n B,m .,
K \ 1180 - 4 #w W -
u. , cw m cmM -
 ! ime . N: g g w. L 3 3 3-1
f
~ e,s p il e d eb . b ~
see .
.,  ; ,,.t, , 2, 4 pg, 700 - gL,,(q s - l see - A e s i n s p + M "{"' - 500 - see - s 300 - i tee - tu - g i , e i i , i iw i s e i 200 400 800 800 1000 1200 1400 1600 1800 2000 2200 2400 2600 F LOW. G PM NOTES: (1) SEE IMPLEMENTATION SECTION FOR DEVELOPMENT OF PLANT SPECIFIC CURVE
(2) FOR HDT AND COLO LEG INJECTION MODE.THE LPSI PUMPS ARE NOT REQUIRED TO BE OPERATING.THE HPSI PUMP FLOW IS OlV10E0 EQUALLY BETWEEN THE HOT AND COLO LEGS .
(3) SELOW SlAS PRESSURE, SAFETY INJECTION SYSTEM (SIS) PUMPS WILL BE OPERATING BUT THERE WILL BE NO INJECTION FLOW UNTIL SYSTEM PRESSURE FALLS BELOW THE SHUT 0FF HEAD OF ANY Sls PUMP FRG 11-8 C M Lv. 02- TITLE FUNCTIONAL COMBUSTION ENGINEERING l RECOVERY GUIDELINE EMERGENCY PROCEDURE l GUIDELINES Page 9 - o f -.2 . Revision 03 FIGURE 11-4 TYPICAL FEEDWATER CAPACITY VERSUS TIME REMAINING UNTIL SHUT 00hw COOLING REQUIRED i 400 , , , , , , , 360 _ 320 - 280 - 2 . b g 240 - p !y200 A - / 6 - 5 E180 - m u. 120 - 80 - 40 _ 1 I t t I I l 0- 4 8 12 16 20 24 28 32 TIME REMAINING UNTIL SHUTDOWN COOLING REQUIRED (HRS) FRG 11-9 CiWu . 03- TITLE COMBUSTION ENGINEERING FUNCTIONAL RECOWRY GUIDEUNE EMERGENCY PROCEDURE GUIDELINES page to of __1cRevision e FIGURE 11-5 TYPICAL FEE 0 WATER REQUIRED FOR SENSIBLE HEAT REMOVAL TCOLD (REQUIRED) VS TCOLD(INITIAQ 50 40 - _ 3 ~< s - "a w . ~ ~ 0 Teoto REQUIRED = 300 F E h 3600F a: a: 20 - _ WF g , m 10 - _ d I t N , i 560 52 400 360 320 280 ig(OF) ,, FRG 11-10 C W A Rev.J I COMBUSTION ENGINEERING TITLE FUNCTIONAL RECOVERY GUIDELINE-EMERGENCY PROCEDURE GUIDELINES _ Page 1 of 13 Revision 03 SAFETY FUNCTION STATUS CHECK Safety Function Associated Resource Tree
1. REACTIVITY CONTROL -------------------------------- Tree A Success Path Currently In Use Acceptance Criteria RC-1: CEA Insertion a. Not more than 1 CEA bottom light not lit and reactor power decreasing E
b. Reactor power less than
[10-(X)$]andconstantor decreasing, n hb)M. RC-2: Boration,Using CVCS a. Boron addition rate greater c(Ac5 th {'O ;;;] and reactor power decreasing E
b. Reactor power less than
[10'I*}%] and constant or i decreasing E
c. Adequate shutdown margin ,,
established per Technical Specifications and reactor power constant or decreasing. ^ FRG 11-19 MK A m- E- COMBUSTION ENGINEERING TITLE FUNCTIONAL REC 0VERY GUIDELINE EMERGENCY PROCEDURE GUIDELINES Page 2 of 13 Revision 03 SAFETY FUNCTION STATUS CHECK Safety Function Associated Resource Tree
1. REACTIVITY CONTROL (Cont'd) ------------------------- Tree A Success Path Currently In Use Acceptance Criteria At Itat 2 si 4 Sr tus~s cI*hv*'*
m.n. ~ t> ., t i n (tu ear Ap'* % 88 3-RC-3: Boration Using SIS w'F k a. Borer additi:' rate greater than J \euM 1L o t 4 Sis te d e s E40-9fe] and reactor power Desg de.1ws.ed it it c 5 decreasing E
b. Reactor power less than
[10~I*)%] and constant or de-creasing E
c. Adecuate shutdown margin established per Technical Specifications and reactor power constant or decreasing.
RC-4: CEA Drive Down a. Not more than 1 CEA bottom light not lit and reactor power decreasing E
b. Reactor power less than
[10*(*)%] and constant or de-creasing FRG 11-20 T4plST %TC; COMBUSTION ENGINEERING TITLE FUNCTIONAL EMERGENCY PROCEDURE GUIDELINES Page 3 of 13 Revision 03 SAFETY FUNCTION STATUS CHECK Safety Function A sociated Resource Tree
2. MAINTENANCE OF VITAL AUXILIARIES III------ 7 --------- Tree B-1 and B-2.
(AC & DC POWER) 2.1 MAINTENANCE OF VITAL AC POWER Success Path Currently In Use Wj g # Acceptance Criteria MVAC-1: [Ste. tup] Transfonners . At least one "it;' 13 o4 i f 4 ,ti, u s/ 0" " ""' bus is energized. j (MVAC-V: Emergency Diesel Generators y h ,L a l w' 't h A MVAC1: { Unit T, om,rv%'ElTo"dfe",7 0,c4 QJh r3 i ra e r.e-<- pvac 3 &G4r. 9 (L w p s, % ,y w a kt - s 56 # MVAC-f: f5ewnbioni AG ,% a/"w.,luher d AC 2.2 MAINTENANCE OF VITAL D POWER Success Path Currently In use Acceptance Criteria y ivD m o^ MVDC-1: Battery Charger / a. At least one e e&n d C Station batter es power is available % WL 4 g i) DC contr,ol power kr + M w c%%nas, D'"' S' Y an d. *be ii) The cperaticn cf :t gg leeat One 120 volt ' vital AC instrument t channels ond.iht- IhV'"*^ ', j ) 8vrh A C p o~" Io #h c,s .,o ,, < l s e.nn fwe dW*S'c' ve&al t 2.o I (1) NOTE Maintenance of Vital AC and Maintenance ce ntst'S
o. Vital DC. ' must Vesbe'T AC D 'S satisfied in order to satisfy Maintenance of Vital Auxiliaries.
4 FRG 11-21 =1 M .1 d N 1 q SAFETY FUNCTION STATUS CHECK Safety Function ' Associated Resource Tree
2. MAINTENANCE OF VITAL AUXILIARIES ------- Tree B-1.eT:tb B-2 av / d3 .
(AC and DC Power) (1) 2.1 MAINTENANCE OF VITAL AC POWER Success Path Currently in Use Acceptance Criteria r Osn %.a.m r**-+ W {w At least one Dg.ital p eV MVAC-1: Unit Main Transformers e/t. a. Ma 4 C,tav h 4.16 KV ints is MVEC-2: Molu Parbine through-tmit Auv414ary Trarernemor_ MVAC-3: Reserve Auxiliary Transformer MVAC-4: Emergency Diesel Generator MVAC-5: Alternate AC Source 2.2 MAINTENANCE OF VITAL AC I&C POWER MVCP-1: Battery charger / Station battery a. At least one Division via Autostatic inverters. 'of vital 120 VAC - distributior)6 enters MVCP-2: Feed from 1E 480 VAC bus via ergizedj ,b ludi71tf Voltage Regulator XFMR. channelized and cf e Division load center m t.bc. h 7d 2.3 MAINTENANCE OF VITAL DC POWER MVDC-1: Battery Chargers from-1E a. At least one Division 480 VAC MCC. of' vital'125 VDC distributio enters MVDC-2: 125 DC Battery e rgized' oth chakn_in_l" elsi-eeddin; and-g y Ene-Division load centerm d be Ewynd-(1). Maintenance of Vital AC, Vital AC I&C,'and-Vital (DC must be-satisfied in order to satisfy Maintenance of Auxiliaries. F COMBUSTION ENGINEERING TITLE FUNCTIONAL EMERGENCY PROCEDURE GUIDELINES Page 4 of 13 Revision _ 03 SAFETY FUNCTION !TATUS CHCCK Safety Function Associated Resource Tree
3. RCS INV ENTORY CONTROL -------.---------------------- Tree C Success Path Currently In Use Acceptance Criteria IC-1: CVCS a. Pressuriz level is -  % 1* GDo 270.0 2 a:::u}. a n d cce
  • 4 aa a_n
b. TheRCSisatleast[20'F[
subcooled, and
c. [TheRVLMS dicates the 'c' M *'" ^*
x. ~ 3 covered .
and d, M d" ^ ' " '"*' '"*PII' Ckurs ~s (W~< IC-2: SIS a. All available charging pumpsareoperatingandtheSI/ pump (s) are injecting water into the RCS per Figure 11-3 (unless 51/ termination criteria met ee-RAS h;; ;,.... nf), and-
b. heRVLMS5dicatesthe'e*M '~
edd?N. f
  • If the RCS is'in a solid condition for pressure control, then the limit of 289*
[c 4 "] may be exceeded. FRG 11-22 terc M a COMBUSTION ENGINEERING TITLE FUNCTIONAL RECOVERY GUIDELINE EMERGENCY PROCEDURE GUIDELINES page 5 of 13 nevision 03 SAFETY FUNCTION STATUS CHECK Safety Function Associated Resource Tree 4 RCS PRESSURE CONTROL ----------------------------- - Tree D Success Path Currently in Use Acceptance Criteria PC-1: Pressurizer Heaters and a. Pressurizer presse e is Spray, WiL C # 6f-) O ~ < within the Post Accident P-T limits of Figure 11-1. P 2: CVd5 a. P ssurizer pressure isj kithi yePostAccidentP-T/imits -/of Figure L1-1. / PC-J: 515 a. All available charging pumps are - operating and the SIS pumps are injecting water into the RCS per Figure 11-3 (unless SIS terminationcriteriamet)4rRt4 bes-ouwwee- , FRG 11-23 CEMOSht . . U7 COMBUSTION ENGINEERING TITLE FUNCTIONAL kJ.0VERY GUIDELINE EMERGENCY PROCEDURE i GUIDELINES Pase 1 of 23 Revision 07 SAFETY FUNCTION STATUS CHECK i Safety Function Associated Resource Tree I 4 RCS PRESSURE CONTROL (Cont'd) .-..................... Tree 0 i 4
Success Path i Currently in Use Acceptance Criterja a  ;
3 PC.): Forced Circulation with a. Pressurizer pressure is within Controlled Steaming the Post Accident P.T limits of Figure 11 1. s 4 . PC.$: Natural Circulation with
a. Pressurizer pressure is within i Controlled Steaming the Post Accident P.T limits of figure 11 1, Pc. 5 Sstel y De 7,,,,,,,,,4 s Q u p l tM (bt A'ec. A t P.T I,m.43
' of f hr p e. Il l PC-61-{PORVs] -. ror +Mw4re pre:sure-(u v
-4) 1+n-tAar 2350 ps4a-and roaster,-or decrees 4ag.
~~T!$ D 1 D --Ac+44ent ' -T 1 imi t s - e f- ' Figure,ji-
b. Pres su ret <c pen succ. M lua raa< a k door <a luel, f
= -- . FRG 11 24- f.5W83d=vhec::9?- COMBUSTION ENGINEERING TITLE FUNCTIONAL RECOVERY GUIDELINE  ; EMERGENCY PROCEDURE l GUIDELINES page 7 of 13 Revision 03  : ) SAFETY FUNCTION STATUS CHECK j l Safety function Associated Resource Tree
5. RCS AND C0P.E HEAT REMOVAL ........................... Tree E i
Success Path j Currently In Use Acceptance Criteria j HR-1: Forced Circulation, a. At least one SG has level: , No SIS Operation 1) within the nortnal level band with feedwater available to 4 maintain the level or 1 11) being restored by a { feedwater flowggr. cat e ther- [150 gpi-).w.% luelswuV.3 ang .
b. l'H . Tc is less than /10*F/ and not increasing a_ n_,d, ,44$?;3 a~ 3,$ap
c. T,y,islessthan/'AS*Ffandnot .
increasing *= ! and
d. TheRCSisSleast/20'F) subcooledby-{T gsN. I M and e.-/horeactorvesselvoidingas indicatedbytheRVLMS/. .
l l FRG 11_-25 tt9 M t!--Re T X J_ - , _ _ , ~ _ _ I l COMBUSTION ENGINEERING TITLE FUNCTIONAL RECOVERY GUIDELINE EMERGENCY PROCEDURE GUIDELINES Page 8 of 13 Revision 03 1 SAFETY FUNCTION STATUS CHECK Safety fur.ction Associated Resource Tree S. RCS AND CORE HEAT REMOVAL (Cont'd) ....--------------- 1 ree E Success Path Currently In Use Acceptance Criteria HR-2: Natural Circulation, a. At least one SG has level: No SIS Operation i) within the nomal level band with feedwater available to maintain the level or ii) being restored by a feedwater flow gre:ter w h t W H pm}: ItueIi W M ing. '"$ $7* G
b. Tg-T less than {40'13 and not c
increasino and gy g,g
c. T3y, is less than {SC*i] and not increasing 3D$
d. The RCS is at least [20*F7 subcooledJbyaverageCET7 ,,
and
e. No abnomal difference {wicoter thei.IG"T]'vetween[T RTOs g and CETs/.
FRG 11-26 Ch gc kff COMBUSTION ENGINEERING TITLE FUNCTIONAL , EMERGENCY PROCEDURE GUIDELINES Page 9 of 1L Revision 03 SAFETY FUNCTION STATUS CHECK  ; Safety Function Associated Resource Tree j 5. RCS AND CORE HEAT REMOVAL (Cont'd) ------------------- Tree E 4 a l i
Success Path
~ currently in Use Acceptance Criteria
HR-3
SG Heat Sink with a. At least one SG has level:
l S!S Operating i) within the nonnal level cand with feedwater available to , maintain the level or ii) being restored by a g i feedwaterflow9fike.[$eri N r359 7 3,jun.Wng and
b. [AverageCb7temperatureless than superheated 4
c. All available charging pumps are operating and the SIS pump are injecting water into the RCS per Figure 11-3 (unless SIS termination criteria met)+e-AAS hat e vnerad). ,,
f i FRG. 11-27 MGfe -w -+ i COMBUSTION ENGINEERING TITLE FUNCTIONAL i RECOVERY GUIDELINE  ! EMERGENCY PROCEDURE GUIDELINES Page 2 of 23 Revision 03 i l SAFETY FUNCTION STATUS CHECK Safety Function Associated Resource Tree S. RCSANDCOREHEATREMOVAL(Cont'd)-------.-----------TreeE l l Success Path j _ Currently In Use Acceptance Criteria HR-4: [h -Though a. { Average CET]/t emperature less -00c1174 than superheated and .. b. All available charging pumps are operating and the SIS pump (s) are injecting water into the RCS per i Figure 11-3 (unless SIS termination criteria met. M has Occitrred1. i and ' c. Pressurizer pressure is less than 1200 M e lor decreasing. i G PM
d. M lea k o ne. k s% o f (~
w,,,,_,,s._ ,, su ,, - a d a . HR-5: Shutdown Cooling System a. Normal SCS Parameters Exist i I e , FRG 11-28 et1Gt1NeET COMBUSTION ENGINEERING TITLE rVNCT10NAL RECOVERY GUIDELINE EMERGENCY PROCEDURE GUIDELINES page 12 of _12 Revision 0 SAFETY FUNCTION STATUS CHECK  ! Safety Function Associated Resource Tree
6. CONTAINMENT ISOLATION .......-----............----- Tree F
. Success Path Currently in Use Acceptance Criteria Cl.1: Automatic / Manual Isolation a. 1) No steam plant activity alams 4 and ii) fNocontainmentradiation alams) and iii) Containment pressure less than [' p!9)[2 -]! rsig E j b. Each containment penetration not i required to be open has an isolation valve closed. 4 N FRG 11 29 ef%d5J g%4EB$' 1 i COMBUSTK)N ENGINEERING TITLE FUNCTIONAL RECOVERY GUIDELINE EMERGENCY PROCEDURE ,
GUIDELINES Page 22 of 13 Revision 03' SAFETY FUNCTION STATUS CHECK 1
i Safety Function Associated Resource Tree
7. CONTAINMENT TEMPERATURE ---------------- ---------- Tree G
& PRESSURE CONTROL 1 Success Path Currently In Use Acceptance Criteria CTPC-1: Containment Fans a. Containment temperature less than 1 (NormalMode) (180*F) 1 a_gf ,
b. Containment pressure less than
[1.5psig]. CTPC-2: Containment Fans a, ,fAtleasthhree)containmentfan (Emergency Mode) coolers operating in the emergency mode agf
b. Contain.nent temperature and pressure constant or decreasing.
CTPC-3: Containment Spray a. i) [Atleasthw3 containment l fan coolers operating in emergency mode a,nd at least one containment spray header th500gpm) , or
11) [Twocontainmentsprayheaders 1E500gpm],
and
b. Containment temperature and pressurecogantordecreasing.
g < Ay,. A s 95 A-s m e wu,:wA .u A %bs emer , oeanh FRG 11-30 N.?ff , - - . , - - - ---w,. 1252j(8287)/mc-31 COMBUSTION ENGINEERING TITLE FUNCTIONAL
EMERGENCY PROCEDURE l GUIDELINES Page " of -_u Revision ._ 01 4
I SAFETY FUNCTION STATUS CHECK Safety Function Associated Resource Tree
8. CONTAINMENT COMBUSTIBLE --------------------------- Tree H GAS CONTROL i
i Success Path Currently in Use Acceptance Criteria . Cu a rs - u v r CCGC-1: Rau4*e/ Hydrogen a. Hydrogen concentration less Recombinerp3$ dr.^ than(0.5%) 4 tydra p Myk 5 M" l or
b. 1) [All Nailable hydrogen '76'"5 ^^$
recombinersareenergizedf
and ii) Hydrogen concentration is M 4 (.-2.4_ 4 94,1.pk $p w f CCGC-2: Hydrogen Purge System a. Hydrogen purge system operating inaccordancewith(plant specific operating instructions).
 % * 'M ' j C i) C ~~ M s v j 4.. a J ; L Ait 1 W 'e c-qhp j ig 1- a s  : a.-L-41_. a L ,,oh u uww t-FRG 11-31 M M ,e:03 i I COMBUSTION ENGINEERING TITLE FUNCTIONAL RECOVERY GUIDELINE EMERGENCY PROCEDURE ,, GUIDELINES Page 2 of 18 Revision 03 5 4 SAFETY FUNC110N: Reactivity Control 4 SUCCESS PATH: CEA Insertion; RC-1 RESOURCE TREE: Tree A ! INSTRUCTIONS CONTINGENCY ACTIONS 1
1. Maintain RCS temperature constant 1.
4 (if possible), until reactivity control is established, in order j to prevent power increases following the initial transient. ps4 CE
on
2. Insert CEAs into the core by3the 2.
f0ll0M",h g bow wi' pea 2.
a. 0 prc33 eli manual C4A trip 0 dck
w. <rs , . . i un
%d . 6. iy . . _ _ 2 Q [j r ri.. 4 b, De,n e r g i z e a i i C E A d e ; , e iuv ie r m ow.\l y r<4* N n 0.< # u w $% ,.t % .w n ,c
21
re. _aia%.lf Mf P*4 Lt t,~ s p,. a6viaf,
d. [0ther ple'rit sp;cific rathods, I ir.3erthere). .
l C' ocaw h RTf! T,'ig civ M t b v k,,g L wlty A. spew tw A:.la.J cvd Q c.iv Swt r% eak.ry ht.Ily r crbNc3 e Abin ts, s RC-1 9 FRG 11-57 jai 8t' M COMBUSTION ENGINEERING TITLE FUNCTIONAL RECOVERY GU10ELINE EMERGENCY PROCEDURE GUIDELINES Page _2.,_ or is Revision 03 Acceptance Criteria for Success Path RC-1:
1. Reactivity Control is satisfied if:
a. Not more than 1 CEA bottom light not lit
. and reactor power decreasing , t  !
b. ReactorpowerINsthan[10'  %)andconstantordecreasing,
2. E above criteria NOT satisfied, Then go to next appropriate Reactivity Control success path.
3. H above criteria satisfied. Then go to next safety function in jeopardy.
4 H acceptance criteria for All safety functions are being satisfied, Then go to long Term Actions af ter perfonning appropriate operator actions for all success paths in use. s RC-1 FRG 11-58 fl! W < $3' I COMBUSTION ENGINEERING TITLE FUNCTIONAL REC 0VERY GUIDELINE EMERGENCY PROCEDURE ! GUIDELINES page 3 of 18 Revision 03 a ! SUPPLEMENTARY INFORMATION: RC-1 4 This section contains items which should be considered when implementing EPGs
and preparing plant specific E0Ps. The items should be implemented as precau-
tions, cautions, notes, or in the E0P training prcgram.
, 1. All available indications should be used to aid in an evaluation of plant conditions since the accident may cause irregularities in a particular instrument reading. Instrument readings must be corroborated when one or more confinnatory indications are available (Reference 15.24).
2. It may not be possible to control other safety functions if reactivity control is in jeopardy. .
3. Changes in RCS temperature affecting reactivity must be minimized until a shutdown margin per Technical Specification Limits is achieved in order to prevent core restart.
i 4 After iequired shutdown boron concentration is attained in the RCS, makeup water added to the RCS should be at least the same boron concen-tration as in the RCS to prevent RCS dilution. i
5. Main or auxiliary pressurizer spray should be used as necessary to equalize the pressurizer and RCS loop water boron concentration as a
. change is made to the RCS boron concentration. If pressurizer spray is not available, RCS boron concentration should be increased. This avoids an RCS dilution below minimum shutdown requirements caused later by a possible pressurizer outsurge. '
6. Solid water operation of the pressurizer may make it difficult to control RCSpressureandthereforeshouldbeavoidedunless[20*Ffofsubcooling cannot be maintained in the RCS (Figure 11-1). If the RCS is solid, .
closely monitor any makeup or draining and any system heatup or cooldown to avoid any rapid pressure excursions. RC-1 FRG 11 .4rf5M M- COMBUSTION ENGINEERING TITLE FUNCTIONAL RECOVERY GUIDELINE EMERGENCY PROCEDURE , GUIDELINES page 4 of J.8. Revision 03 i  ; 7. If an initial cooldown rate exceeds Technical Specification Limits. there may be a potential for pressurized thermal shock (PTS) of the reactor vessel (Reference 15.8), unless Post Accident Pressure / Temperature limits are maintained (Figure 11-1). 1 J j I i i 4 4 e s 4 RC-1 FRG , 11-60 . Gibe $F--1EE:6 9 . ?rt i COMBUSTION ENGINEERING TITLE FUNCTIONAL j RECOVERY GUIDELINE l EMERGENCY PROCEDURE i  ; GUIDELINES Page 5 - of 18 Revision 03 SAFETY FUNCTION: Reactivity Control SUCCESS PATH: Boration using CVCS; RC 2 RESOURCE TREE: Tree A I > INSTRUCTIONS CONTINGENCY ACTIONS i
1. Maintain RCS temperature constant 1.
(ifpossible),untilreactivity control is established, in order , to prevent power increases following 1
the initial transient.
2. Comence maximum boration using the 2.
CVCS to achieve shutdown margin in accordance with Technical Specifica. I tion Limits.- Perform the following:
a. Align all available charging pumps 2, ^'i; 21' :v:11:ble totakeasuctionfromthe/ boric cher>;i g pu p: to take
, acid M tanks using either a--suctier 're- the [RWT gravity feed or the boric acid er Opent fuel peel u 4 ag i makeuppumps[. gr:v'ty feed]. . b. Charge to the RCS using the normal b. jf the n: :1 ch:*9 *9 4 charging path, p:th E ;v f1:b1 , 'hcr. Ch:rge to th: RCS si: the HPS: h;;dcr.
c. Manually operate charging and letdown to mainja.ip pressurizer V6 T* 1* tL2 --.e-- - ----- se level m w 6,s ;.
d, Opa b 4 bv.h.4 u ft mi46 - w s n ot h ~ t w gie h t Te. is Schieved* RC-2 1)atiy (col d* *W (Onl enue borabba to etwch u ct m a 64 w ie* L.0 M skw4 dC* A ma i h M . FRG 11-61 -MM4bf~~Ess;:43 .. , ,--.,,,,,-le. , , - - - , . - ~ . , , - , , . . - . ,. COMBUSTION ENGINEERING TITLE FUNCTIONAL RECOVERY GV!DELINE EMERGENCY PROCEDURE i GUIDELINES Page 6 of 28 Revision 03 I Acceptance Criteria for Success Path RC 2: 1  ! 1. Reactivity Control is satisfied if:
a. Boron addition rate greater than [-C ; ] /80 y 1 and reactor power decreasing.
i or
b. Reactor power ins than [10  %)andconstantordecreasing E
j c. Adequate shutdown margin established per Technical  ! Specifications and reactor power constant or decreasing. j 2. If above criteria NOT satisfied, Then go to next appropriate Reactivity - Control success path. 1
3. M above criteria satisfied, Then go to next safety function in jeopardy.  !
4 4 E acceptance criteria for Q safety functions are being satisfied, Then go to Long Tem Actions af ter perfoming appropriate operator actions for all success paths in use. . 4 RC-2 I-i FRG 11-62 JjdsZZ-- b4 r COMBUSTION ENGINEERING TITLE FUNCTIONAL EMERGENCY PROCEDURE GUIDELINES Page 7 of 18 Revision 03 SUPPLEMENTARY INFORMATION: RC-2 This section contains items which should be considered when implementing EPGs and preparing plant specific E0Ps. The items should be implemented as precau-tions, cautions, notes, or in the E0P training program.
1. Changes in RCS temperature affecting reactivity must be minimized until a shutdown margin per Technical Specification Limits is achieved in order to prevent core restart.
2. After a shutdown boron concentration is attained in the RCS, makeup water added to the RCS should be of at least the same boron concentration in l the RCS in order to prevent RCS dilution.
3. Main, or auxiliary, pressurizer spray should be used as necessary to equalize the pressurizer and RCS loop water boron concentration as a change is made to the RCS boron concentration. If pressurizer' spray is not available, RCS boron concentration should be increased. This avoids an RCS dilution below minimum requirements caused later by a possible pressurtzer outsurge.
4. All available indications should be used to aid in an evaluation of plant conditions since the accident may cause irregularities in a particular ,
instrument reading. Instrument readings must be corroborated when one or more confinnatory indications are available (Reference 15.24).
5. It may not be possible to control other safety functions if reactivity control is in jeopardy. ,
6. Solid water operation of the pressurizer may make it difficult to control RCS pressure and therefore should be avoided unless [20'F/ of subcooling cannot be' maintained in the RCS (Figure 11-1). If the RCS is solid, closely monitor any makeup or draining and any system heatup or cooldown in order to avoid rapid pressure excursions.
RC-2 FRG 11-63 y X 03 _- - - -. . = _ _ _ _ . - . - . _ _ - _ . . . _ _ _ . - - - _ - - . . _- J COMBUSTION ENGINEERING TITLE FUNCTIONAL ' RECOVERY Gulpr INE EMERGENCY PROCEDURE - l GUIDELINES Page 8 of L8_ Revision M - 7. Continuously monitor RCS temperature and pressure to avoid exceeding a heat removal rate greater than Technical Specification Limitations. If l ] the heat removal rate exceeds Technical Specification Limits, there may l  ! be a potential for pressurized thennal shock (PTS) of the reactor vessel (Reference 15.8) unless Post Accident Pressure / Temperature Limits are i maintained (Figure 11-1). l
8. Charging from the concentrated boron source should not continue past [1 I hour] af ter event initiation unless reouired for reactivity control.  ;
I This is to preclude boron precipitation in the core. Suction should be shifted to the lower concentration source. 1 I f h f I t s 4 4 RC-2 FRG 11-64 CQ] Em G; 4 J COMBUSTION ENGINEERING TITLE FUNCTIONAL RECOVERY GUIDELINE EMERGENCY PROCEDURE GUIDELINES Page 9 of 28 Revision 03 l l j l SAFETY FUNCTION: Reactivity Control 1 SUCCESS PATH: Boration using SIS; RC-3 RESOURCE TREE: Tree A i  ! INSTRUC110NS CONTINGENCY ACTIONS ,
1. Maintain RCS temperature constant 1.  !
(if possible), until reactivity
control is established, in order to prevent power increases following the initial transient.
i /tt5 piinj *2. M pressurizer pressure $ p/lS00 pig 2. Iff ggsr}zerpressure E containment pressure 1[(' psigJ,j2. ! y [_E00 p 4e} g containment . ! Then verify an SIAS is actuated, pressure 1 O nig}'and an SIAS has g been initiated automatically, Then manually initiate an SIAS. *3. Ensure maximum safety injection 3. E safety injection and and charging flow to the RCS by charging flow ng maxiinized, the following: Then do the following as necessary:
a. start idle SIS pumps and a ensure electrical power verify SIS flow in accordance to valves and pumps, i
with Figure 11-3 b. ensure correct SIS valve and lineup, b start idle charging pumps. c. ensure operation of necessary auxiliary systems
  • Step Performed Continuously RC-3
) FRG 11-65 Cah%t:12v. ~ COMBUSTK)N ENGINEERING TITLE FUNCTIONAL RECOVERY GUIDELINE EMERGENCY PROCEDURE GUIDELINES page 10 of 18 Revision 03 1 INSTRUCTIONS CONTINGENCY ACTIONS E ! *4. If high RCS pressure is preventing 4. SIS pump injection of boric acid, Then attempt to cooldown/depres-surire to obtain adequate $15 flow (Refer to the Pressure Control and HeatRemovalsuccesspathsinuse). l *S. If the SIS is operating. Then the S. Continue SIS operation. SIS may be throttled or stopped, one pump at a time, if A3 of the following are satisfied: I a. Reactor power less than (10'  %) and constant or decreasing, or , i Adequate shutdown margin established per Technical Specifications and reactor power constant or decreasing, and b.RCSsubcoolingatleast/20'F/ based on [ average CET) tempera- . ture(Figure 11-1), agd
c. pre,s rizer level greater than
r. 0 s and not decreasing, and
d. at least one steam generator is available for removing heat from the RCS (ability for feed and steam flow).
(Continuedonnextpage) FRG 11-66' 3:::: mv---O'3 ' , COMBUSTION ENGINEERING TITLE FUNCTIONAL RECOVERY GUIDEllNE EMERGENCY PROCEDURE GUIDELINES Page li of 18 Revision 03 INSTRUCTIONS CONTINGENCY ACTIONS
5. (Cont'd) i and e.[theRVLMS dicates a minimum level at the top of the hot  !
Ieg nozzles .
  • 6. M criteria of step 5 can NOT O be 6.
maintained after $15 pumps throttled or stopped. Then appropriate SIS pumps must be restarted and full $15 flow restored. .
  • Step Performed Continuously RC-3 t-FRG 11-67 S&fretSTdo . A ~
i 1 l ~ COMBUSTION ENGINEERING TITLE rVNCTIONAL EMERGENCY PROCEDURE GUIDELINES Page 12 of 18 Revision - 03 Acceptance Criteria for Success Path RC-3:
1. Reactivity Control is satisfied if:
a. Boron addition rate is greater than-{40 vem)hlo je,~)
and reactor power is decreasing of
b. Reactorpower1[lessthan[10~  %]andconstantordecreasing 9L
c. Adequate shutdown margin established per Technical Specifications and reactor power constant or decreasing.
2. M,abovecriteriaNOTsatisfied,ThengotonextappropriateReactivity Control success path. .
3. M above criteria satisfied. Then go to next safety function in jeopardy.
4 M acceptance criteria for All safety functions are being satisfied, Then go to Long Term Actions af ter perfoming appropriate operator actions for all success paths in use. RC-3 FRG 11-68 g 462- h e COMBUSTION ENGINEERING TITLE FUNCTIONAL EMERGENCY PROCEDURE GUIDELINES Page 11 of - 12 Revision 03 SUPPLEMENTARY INFORMATION! RC-3 j This section contains items which should be considered when implementing EPGs j and preparing specific E0Ps. The items should be implemented as precautions, cautions, notes, or in the E0P training program.  ! l  ! 1. All available indications should be used to aid in evaluation of plant l conditions since the accident may cause irregularities in a particular instrument reading. Instrument readings must be corroborated when one or more continnatory indications are available (Reference 15.24). Hot and I ) cold leg RTDs may be influenced by the cooler $15 injection and should be checked against each other. 4
2. It may not be possible to control other safety functions if reactivity control is in jeopardy.
1 4
3. Do not place system in " manual" unless misoperation in " automatic" is
] apparent. Systems placed in " manual" must be checked frequently to ensure proper operation (Reference 15.24). 4 Continuously monitor RCS temperature and pressure to avoid exceeding a i heat removal rate greater than Technical Specification Limitations. If , the heat removal rate exceeds Technical Specification Limits, there may be a potential for pressurized thennal shock (PTS) of the reactor vessel ] (Reference 15.8) unless Post Accident Pressure / Temperature Limits are maintained (Figure 11-1). i i
5. Solid water operation of the pressurizer may make is difficult to control 1
RCSpressureandthereforeshouldbeavoidedunlessf0'F[ofsubcooling cannot be maintained in the RCS (Figure 11-1). If the RCS is solid, closely monitor any makeup or draining and any system heatup or cooldown to avoid liny unfavorabis rapid pressure excursion. RC-3 i FRG 11-69 M .15 L 4 ,< W COMBUSTION ENGINEERING TITLE FUNCTIONAL RECOVERY GUIDELINE EMERGENCY PROCEDURE GUIDELINES Page 2' of 28 Revision - 03 ^
6. Changes in RCS temperature affecting reactivity must be minimized until a shutdown margin per Technical Specification L1mits is achieved in order to prevent core restart.
7. Main or auxiliary pressurizer spray should be used as necessary to equalize the pressurizer and RCS loop water boron concentration as a change is made to the RCS boron concentration. If pressurizer spray is not available, RCS boron concentration should be increased. This avoids 4 an RCS dilution below minimum shutdown requirements by a possible pres-i surizer outsurge. I
8. After a shutdown boron concentration is attained in the PCS, makeup water added to the RCS shoald be at least the same boron concentration as the RCS to preveht kCS Jilution.
e  % e RC-3 FRG 11-70 A2 POST.-<454 4 - - ~-% . __ COMBUSTK)N ENGINEERING TITLE FUNCTIONAL REC 0VERY GUIDELINE EMERGENCY PROCEDURE GUIDELINES page 15 of L8 Revision 03 SAFETY FUNCTION: Reactivity Control SUCCESS PATH: CEA Orive Down; RC-4 RESOURCE TREE: Tree A INSTRUCTIONS CONTINGENCY ACTIONS
1. Maintain RCS temperature constant 1.
(if possible), until reactivity control is established, in order to prevent power increases following the initial transient.
2. ire-energizeCEAdrive 2.
mechanisms and attempt to manually ] ' , ) drive CEAs into the core using the j nomal rod motion controls). j s RC-4 FRG 11-71 Sitid5MM ____________m___.__._______ __ -_.-_.-.-. - -_ __ i COMBUSTION ENGINEERING TITLE FUNCTIONAL EMERGENCY PROCEDURE GUIDELINES Page 26 of 18 Revision 03 Acceptance Criteria for Success Path RC-4:
1. Reactivity Control is satisfied if:
a. Not more than 1 CEA bottom light is not lit and reactor power is decreasing or
b. ReactorPowerisles[than[10"  %)andconstantordecreasing
2. If above criteria NOT satisfied, Then go to CONTINUING ACTIONS FOR REACTIVITY CONTROL.
3. E above criteria satisfied Then go to next safety function in jeopardy.
4 H acceptance criteria for M safety functions are being satisfied, Then go to Long Tenn Actions after perfonning appropriate operator actions for all success paths in use. 4  % 0 4 RC-4 FRG 11-72 Canie d W.J5 I COMBUSTION ENGINEERING TITLE FUNCTIONAL EMERGENCY PROCEDURE GUIDELINES page 17 of is Revision 03 SUPPLEMENTARY INFORMATION: RC-4 i This section contains items which should be considered when implementing EPGs i and preparing p1a'nt specific E0Ps. The items should be implemented as precau. , tions, cautions, notes, or in the E0P training program.
1. All available indications should be used te aid in evaluation of plant conditions since the accident may cause irregularities in a particular
^ instrument reading. Instrument readings must be corroborated when one or more confirmatory indications are available (Reference 15.24).
2. It may not be possible to control other safety functions if reactivity control is in jeopardy.
i e 1 4 , RC-4 FRG 11-73 ,.W4## COMBUSTON ENGINEERING TITLE FUNCTIONAL EMERGENCY PROCEDURE , GUIDELINES Page 28 of 18 Revision 03 CONTINUING ACTIONS FOR REACTIVITY CONTROL  ! M the acceptance criteria are NOT met, Then reactivity control is still its  ! jeopardy. THE OPERATOR SHOULD NOT LEAVE REACTIVITY CONTROL UNill THIS SAFETY FUNCTION IS FULFILLEO. If necessary, the operator may pursue other urgent safety functions but must continue to atte4npt to establish reactivity control using the following: I
a. Energize or restore other vital auxiliaries to necessary components on j'l the reactivity control success paths, i
b. Attempt manual operation of inoperative valvas,
c. If high RCS pressure prevents S!S injection of boric acid, then the pressure and heat removal sections should be referenced and an attempt made to lower plant pressure to pennit SIS, pump injection of boric acid.
Consideration should be given to the effect on RCS subcooling and core cooling which such an action will cause.  % + FRG 11-74 CEN-152 Rev. 03 COMBUSTION ENGINEERING TITLE FUNCTIONAL RECOVERY GUIDELINE EMERGENCY PROCEDURE < GUIDELINES Page 1 of 12. Revision 03 I SAFETY FUNCTION: Ma .t Ao ig SUCCESS PATH: hjntena. pre,,ofVitalACPower s ec hp3 Transformer: MVAC-1 RESOURCE TREE: Tree B.1 INSTRUCTIONS CONTINGENCY ACTIONS
Unit thauuting
1. Veriff that the [44e M 1. Realign the offsite grid to
, transformers have electrical provide power to the {ttrtup) 004 AC power available from a r- Ao.uan3 trans fonners . #c972 '[ e,y [ rom i~ht Hun h c o t e'a. io v" i
2. If electrical AC power is 2.
1 - po;+no uay -If electrical AC power is t A..u a43 . un
available from the 6
tutup] not available from the { trtup-] ,
transformers, Then restore transfonners, Then 90 to the electricalyowertoatleast next appropriate Maintenance of
onefvital [4.16kV) bus 4n- Vital AC Power success path.
6444r4ance "ith the -[ plant s pect(44-oper4t449-4*struc-i M ens 3 by clos.n 4 g, g ' P C f f f 'sr $ L 'k p p s breskeeS3 c4ecie,nefgiting the, v i t A L 0.s s V i ct i h e. G y ra p rin ka 4 8 (* k- V  % ,. m c., n e n t pen. St le 6 3 b.4 5 . s 't , MVAC-1 1 FRG 11 91 CEN-152 Rev. 03 s f COMBUSTION ENGINEERING TITLE FUNCTIONAL RECOVERY GUIDELINE EMERGENCY PROCEDURE ---- GUIDELINES Page 2 of 13 Revision
  • ACCEPTANCE CRITERIA FOR SUCCESS PATH MVAC-1:
1. Maintenance of Vital AC Power is satisfied if:
gu n @
  • Atleastonevital/4.16KV/4eeisenergized.
3
2. If above criterion NOT satisfied. Then go to Naintenance of Vital AC Power success path MVAC-2.
Ac I(C. 'ad
3. If above criterion satisfied AND Maintenance of Vital 0C Power satisfied, t
Then go to next safety function in jeopardy. 4 M acceptance eriteria for A_LL L safety functions are being satisfied, Then go to LONG TERM 'CTIONS after performing appropriate operator actions for all success paths in use 3 MVAC-1 FRG 11-92 r"' n - 41- 1 1 COMBUSTION ENGINEERING TITLE FUNClIONAL RECOVERY SUIDELINE EMERGENCY PROCEDURE GUIDELINES Page.l of U. Revision 2L. . SUPPLEMENTARY INFORMATION: MVAC-1 This section contains items which should be considered when implementing EPGs and preparing plant specific E0Ps. The items should be implemented as precautions, cautions, notes, or in the E0P training program.
1. Do not place systems in " manual" unless misoperation in " automatic" is J apparent. Systems placed in " manual" must be checked frequently to
, ensure proper operation (Reference 15.34).
2. All available indications should be used to aid in evaluation of plant conditions since the accident may cause irregularities in a particular instrument reading. Instrument readings must be corroborated when one or more confirmatory indications are available (Reference 15.24).
V
3. Ifonlyenehp:w ital AC bws- has beer, restored, the acceptance criteria for Maintenance of Vital AC Power will be met and the operators should proceed to the next safety function in jeopardy. However,-efforts to restore the seceM-M hnd the non-vital busest should be j continued in order to increase the availability of plant systems and components.
4 Dorio) nu mmg ap culien Unil A e.u.we3 Fransktmers e e. The Am 6 e n, t  % 4e c i t w pp i . ed c) the Hasn C)eneew k.c . , m e,g cenUnwe b s.ppl 3 these. 4-m e io. m e r s fe d o u.> m3
o. rwn bw , o c i ke5 me 3 b e. app i,a d fn.m offs.h. powe.c.
b. T.m f uu h em a l $asdc.bne does ne t un side e o Icn3tc bm Spa.ce., d aif b 4 M ^ %'j E a u SGoem d E bOf re h r t e, o f t h e. 3 repici ce ment o f o. f c iled t r n s form e e.
MVAC-1 FRG 11-93 gen-IN : G COMBUSTION ENGINEERING TITLE FUNCTIONAL REC 0VEM GUl0ELINE EMERGENCY PROCEDURE l GUIDELINES page 4 of u. Revision.2L 3 SAFETY FUNCTION: Maintenance of Vital AC Power SUCCESS PATH: Emergency Diesel Generators: MVAC-f 3 RESOURCE TREE: Tree B-1 4 INSTRUCTIONS CONTINGENCY ACTIONS i 1. Verify that the emergency 1. Detennine and correct the 4 diesel generators have cause of the diesel failure been started. @ start diesel generator (s) atle W ene '26* " ' ' ' "
2. Ensure3emergency diesel 2. R We- g ,"," g c < ,
, generator (si operating in ,p ne s,$w , 9. The n stiet accordancewith[ plant ct . , s e ) Secru4c< N.Su i specific operating' MV O C -8 ed M V ' ' 2- ' instructionsJ. k ptW
3. Ensure at least ones vital 3. If diesel generators N_0T
[4.16KV/basisenergized capablgo_fjnergizing at least by associated diesel onef ital /4.16 KV7 M, Then generator. go to next appropriate Maintenance of Vital AC Power i success path 3 MVAC -4 4 4 5 HVAC-2'3 FRG 11-94 Ge+r'"W 4 + -- w - I COMBUSTION ENGINEERING TITLE FUNCTIONAL REC VEM WI RINE EMERGENCY PROCEDURE GUIDELINES page s of u. Revision W ACCEPTANCE CRITERIA FOR SUCCESS PATH MVAC-
1. Maintenance of Vital AC Power is satisfied if:
,ps 'E Atleastone((italf4,16KVfMisenergized
2. E above criterion NOT satisfied, Then go to next appropriate Maintenance of vital AC Power success path MVAC-J.4 gc, Dcond
3. E above criterion satisfied AND Maintenance of Vital DC 3 Power See 1
satisfied, Then 90 to next safety function in jeopardy.
4. E acceptance criteria for AM safety functions are being satisfied.
Then go to LONG TERM ACTIONS after perfonning appropriate oper6 tor ' actions for all success naths in use. t MVAC-f3 FRG 11-95 O' f @ =tS2 R. COMBUSTION ENGINEERING TITLE FUNCTIONAL REC VERY MRD;E EMERGENCY PROCEDURE GUIDELINES Page 6 of 11 Revision
  • SUPPLEMENTARY INFORMATION: MVAC-2 3 i
This section contains items which should be considered when implementing EPGs and preparing plant specific E0Ps. The items should be implemented as precautions, cautions, notes, or in the E0P training program.
1. Do not place systems in " manual" unless misoperation in " automatic" is apparent. Systems placed in " manual" must be checked frequently to ensure proper operation (Reference 15.34).
2. All available indications should be used to aid in evaluation of plant conditions since the accident may cause irregularities in a particular instrument reading. Instrument readings must be corroborated when one or more confirmatory indications are available (Reference 15.24).
3. pnW E If only onegvital AC h s has been restored, the acceptance criteria for l Maintenance of Vital AC Power will be met and the operators should proceed to the next safety function in jeopardy. However, efforts to restore the M vital 4wdand 4he non-vital buses [ should be continued in order to increase the availability of plant systems and components. 4, R e e m b i ' A m3 615 v oc. co.*c i p u . .- mm3 h om ssw eg te n ilow >&ac t m3 a che we i S ce a ruk. . A ke &c M vat -i aea M V OC - 2 . MVAC-7.3 FRG 11-96 C "-152 P =" M COMBUSTION ENGINEERING TITLE FUNCTIONAL RECOVERY GUIDELINE EMERGENCY PROCEDURE GUIDELINES Page 7 of 12 Revision ** SAFETY FUNCTION: Maintenance of Vital AC Power SUCCESS PATH-. b. r . W. ,. .- . . . . . f. ... . "N. . .; . t. E. I. E. "MV)C-J . RESOURCE TREE: Tree B-1 m INSTRUCTIONS CONTINGENCY ACTIONS
1. Restore electric power to at 1. If this mode of operation p .
least one,pvital 4.16 KVJ hus Ny available, Then 90 to by p0rfe r'ng [pl:M speci'i 'daintenance of Vital AC 4perat4ng instruction: for : u r.i t P4wer-success-path"VAC=h-tr:ntf050r b 0kf00h. f 10 bin $ T.e s+ c t h e n Step 2 w ppro p ri t< br e ac$ to energ.1<. T h C. per ma n 4 ni 4 . t ts AV Gw6 f30n. Swie 4 3 A. ,. .a a 3 ( com tne Re 3e,-se Tac,nsfe, ree. Ibn e t c s c. b r e u t.< r y ne. - c, p re. , > r s a h. b o. cg i te. t h e. v i t e t 4 . l i.
  • V bas Ico m t h e, Pe r m -n e ni pe a. sa( c.43 4 . i L. W ows- pw& ' w
^L . T[ he Per m a n e n 4 Man.surey 2. Tf pne,~ l0 % s'n k l A le d
4. i t, x v bus cannoF be eaeegt'd h b not a. vcu lq ble (re.n i h e hu v e. A w n u a d. 3 from +ho. T2ex e Trans b e.e., tg c lo se Mc A w xi u a a y T c. u s c-<.,e s e e ,
a f pro pri al< b ec a t.e b e n erbi t *. E* neias te *
  • f-3o to M a s n ke n n ut
.We- V. icd 4 ;L v,v b di cedly of \)tkl AC Pe e r , (com % =. 'R e s e c < e. A e s a n.3 S w. e.ss pu+h MVAC-3. Tm hena c. MV AC-g 2. FRG 11 97 CS '.:? ^ -. 0: .- ----__--.__.-__--_.--_-_.---.-____-------..__-_--...____.--._____.--___-_--._._--.-------_--__~---w i i COMBUSTION ENGINEERING TITLE rum *can REC YEU UI ELINE EMERGENCY PROCEDURE GUIDELINES Page 8 of 11. Revision -# ACCEPTANCE CRITERIA FOR SUCCESS PATH: MVAC-J2
1. Maintenance of Vital AC Power is satisfied if:
.,1& ' Atleastonefital 4.16 KVf bys is energized.
2. If above criterion NOT satisfied, Then go to Maintenance of Vital. AC PowersuccesspathMVAC-[.3
} At Ist an A.
3. If above criterion satisfied AND Maintenance of Vital 3DC Power satisfied,
, Then 90 to next safety function in jeopardy. 4 M acceptance criteria for M safety functions are being satisfied, Then go to LONG TERM ACTIONS after performing appropriate operator actions for all success paths in use, i i e MVAC-J2 FRG 11-98 't o , . :e M COMBUSTION ENGINEERING TITLE FUNCTIONAL-REC VERY GUIDELINE EMERGENCY PROCEDURE GUIDELINES page a of -.u. Revision # SUPPLEMENTARY INFORMTION- MVAC-3/. This section contains items which should be considered when implementing EPGs and preparing plant specific E0Ps. The items should be implemented as precautions, cautions, notes, or in the E0P training program,
1. Do not place systems in " manual" unless misoperation in " automatic" is apparent. Systems placed in " manual" must be checked frequently to ensure proper operation (Reference 15.34).
2. All available indications should be used to aid in evaluation of plant conditions since the accident may cause irregularities in a particular instrument reading. Instrument readings must be corroborated when one or more confirmatory indications are available (Reference 15.24).
Ase eb
3. If only onehital AC bus has been restored, the acceptance criteria for
, Maintenance of Vital AC Power ~will be met and the operators should proceed to the next safety function in jeopardy. However, efforts to restore the M vital bus-(and the non-vital buses)'should be continued in order to increase the availability of plant systems and components. 1 J 1 MVAC-? 2. FRG 11-99 IEN W 4 eE.~3M- l COMBUSTION ENGINEERING TITLE FUNCTIONAL REC VERY GUI ELINE EMERGENCY PROCEDURE
GUIDELINES page to of 13 Revision E
SAFETY FUNCTION
Maintenance of Vital AC Power Ac So rte SUCCESS PATH: 4,Second: tar %tg hnt ".C]:
MVAC-4 4 RESOURCE TREE: Tree B-1 INSTRUCTIONS CONTINGENCY ACTIONS
1. Verify that AC power is available 1. Oc to C ntinuing A 44 ens-for from Eth Occcad phnt], the. ca.hr"k Mehtemmcc cf Vital AG AC 58*t' c a wS *
 % Detersiae_ o f A t h rin u k A C S o
  • r ' *
(ia ,, 4r., sic. et . 1 hu
2. Restore ele @ cp power to at 4r ger e fhe pec,bl< m least oryev ital J4.16 KVJ has by a n A s t e- e t the AAC par' ~ 4nc [nlen+ spect'ic operating S :,.cs . ,
I"Itr"ctic" 'er te<0nd phnt f.C
4. ib (v feed}. ci ne rgiting e n e N, ~ .a M 2
  • Ac 4' L4 ^ 9 A'*^'
u.n- 5 M)Jun;a) F <i (, Ag , 64 then enge ,b.g % \/i tw l . j 4.8 b r V % (< c m the Q,L[ AC Po <- . . Perm nent tha. EM 3 3 5. s f i i i MVAC-4 FRG 11-100 CC't C e. C3 COMBUSTION ENGINEERING TITLE FUNCTIONAL EMERGENCY PROCEDURE ""'"'""""' GUIDELINES Page 11 of 13 Revision.P_ ACCEPTANCE CRITERIA FOR SUCCESS PATH: MVAC-4
1. Maintenance of Vital AC Power is satisfied if:
i,9 F At least one[) ital [4.16 KVf barr is energized.
2. If above criterion NOT satisfied, Then go to CONTINUING ACTIONS FOR MAINTENANCE OF VITAL AC POWER.
3. If above criterion satisfied AND Maintenance of Vital DC Power satisfied, Then go to next safety function in jeopardy.
1 4 E acceptance criteria for AM safety functions are being satisfied, Then go to LONG TERM ACTIONS af ter performing appropriate , operator ' actions for all success paths in use. l f MVAC-4 FRG 11-101 =Op m O Z 3 COMBUSTION ENGINEER 1NG TITLE , FUNCTIONAL RECOVERY GUIDELINE EMERGENCY PROCEDURE ( GUIDELINES Page " of 12. Revision e SUPPLEMENTARY INFORMATION: MVAC-4 1 This section contains items which should be considerea < hen implementing EPGs and preparing plant specific E0Ps. The items should be implemented as precautions, cautions, notes, or in the E0P training program.
1. Do not place systems in " manual" unless misoperation in " automatic" is apparent. Systems placed in " manual" must be checked frequently to ensure proper operation (Reference 15.34).
2. All available indications should be used to aid in evaluation of plant conditions since the accident may cause irregularities in a particular instrument reading. Instrument readings must be corroborated when one or more confinnatory indications are available (Reference 15.24).
.gou4
3. If only one[ ital AC [4.16 KV] bws has been restored, the acceptance I
criteria for Maintenance of Vital AC Power will be met and the operators should proceed to the fiext safety function in jeopardy. However, efforts , cihte to restore the seecme vital -bes-fand 4he- non-vital busest should be l continued in order to increase the availability of plant systems and l components. I
4. T h e. A l h e n J c. A c. 5 - cu is d e s.g r,, a fc swt u t hin twc m i n d 's of Lo64 of Ec + <- Io N s'a fc - U
 ! s h e-i d na.J e %& i c w i l3 re ca e.c.g u.e_ ih4 4. i t kV Pecn a.u n t m L. t< tg Lse 1; ,.ep. ,ect, u .s ang ~ lsa A fe u. en e. <_ tt. . d ney n ta ben o f A k t/.kl 4 . i (o KV bwses mst b e. d o n e, vn a. nw.a.1 1 3 5 i% A Huna k A C So -.- c <. i3 s s u c1 b cu cb Ic' d 5 os %o% Pec w e nT Mes- Sc fr13 bas <s. II one DivNen e f ble 1 3 b u.3ea n% be e.nec i u d. , 4 he. bus hcwc lt, d ern<d e Pe rm no n + iJon - Sn b43 he. ShE.d.. MVAC-4 FRG 11-102 -GEREir=fm.03 COMBUSTION ENGINEERING TITLE FUNCTIONAL EMERGENCY PROCEDURE " "U GUI RINE GUIDELINES Page 3 of 13 Revision M CONTINUING ACTIONS FOR MAINTENANCE OF VITAL AC POWER If the acceptance criteria are Ng met, Then Maintenance of vital AC Power is still in jeopardy. The operator must continue to attempt to establish a source of vital AC electrical power while pursuing other jeopardized safety  ; functions. 1 4 1 e a 1 If I
FRG 11-103- __ E ~.
. 2 " C4 l
COMBUSTION ENGINEERING TITLE FUNCTIONAL EMERGENCY PROCEDURE RECOVERY GUIDELINE GUIDELINES Page 1 of 5 Revision E A C. I s c. l SAFETY FUNCTION: Maintenance of Vital M Power ge SUCCESS PATH: Battery Chargers / Station Batteries: MVOC-1 1 v 4 Awk 5*4* c L 6Ca CE d0YA' 'NUFC I C, ee r/5 Ip **
1. Verify that at least one [12; velt]- 1. Fnw re_that,at least 4 4 D.v.s. e v.bl D sv *DCb$3as electrical-96 power
[426-401Q-C0bu: hes e i available from the associate ( vee + e4ectrica! nc-powen availabi.r i OG-bettery-charger. A*h it"I from the station battery.
  • T_ n g s - k e s .
a n 4.c y'n< d. be h ei s % u., L A g/,h l D C. , a, Oc pc.#u Ic W ta#*"k N gg, g %q ce,3kes V'u m he su rp h d ' ' W '* & p h 5' J e.~.~ussu kt km bu % 'cb"'9'#5 b.d+<.e.' e s , ( s Trs e $ c ." 96%wr< b . S l "M d P" *
  • P P ' ' b I
%nMA wa4d < r J. +-La_ 4rans b w id> ont e e rn o r cC' t k v M
u. cc. a v uh
  • W s- N i2o v Ac. cb sks W M ^-
Q ,, W b w , \/.n c. (_e M S o.re_ _ pt u < d , n.w w a w ~ <~~ w b ' * (Arc o., ( j g% A o ,. M ,  ?"P r<vcf- I tiV00 ( FRG 11-114 T" 1 " - " 43 l I COMBUSTION ENGINEERING TITLE FUNCTIONAL REC 0VEM GUIDRINE EMERGENCY PROCEDURE ( GUIDELINES Page 2 of 5 Revision # .i - Mc.P ACCEPTANCE CRITERIA FOR SUCCESS PATH: %Hb.1 p s to en<. 7 c- ,r 5 O
1. Maintenance of Vital 96 Power is satisfied if:
W C*
  • k '* k
(% W A Jl + n n e.- lao n ' t> * 'k
p. v . , , ,; - %ct enes is4 d L n.
g At least one M ain nf aintMeni nc onme 15-3y3$1eb'e fo + i 43 nr I, Op.ub.e . J /ib t 12D ^ ' , corrt @ wer gg 4g gg _a_nd_. cL %eb eC % %vasica M) Th Operatien Of- at--itest Uns- z Ogr. h 4 D.v. sics 120 volt v4 t!! AC-- instrument channch= c c. ~ e > " e I 5 " ' " * " no n c. D i
2. If above criterion NOT satisfied, Then go to C4NTINUING ACTIONS FOR-MaI" TEM ^NCE OF "!-TE--DC -POUQr M V C P - 2 g qua,egwccorvirci' oc A'W S S d "I'.d, 3 .- I,.f above criterion satisfied A,ND Maintenance of Vital AC Power satisfied, j
Then go to next safety function in jeopardy.
4. If acceptance criteria for M safety functions are being satisfied, Then l go to LONG TERM ACTIONS after performing appropriate operator actions for all success paths in use.
v t sv cf' i MVes-1 FRG 11-115 eW_ m =mc 02 COMBUSTION ENGINEERING TITLE FUNCTIONAL RECOM U GUl m INE EMERGENCY PROCEDURE GUIDELINES Page 3 of 6 Revision W Mcf SUPPLEMENTARY INFORMATION: -MVGG-1 i l This section contains items which should be considered when implementing EPGs and preparing plant specific E0Ps. The items should be implemented as precautions, cautions, notes, or in the E0P training program.
1. Do not place systems in " manual" unless misoperation in " automatic" is apparent. Systems placed in " manual" must be checked frequently to ensure proper operation (Reference 15.34).
2. All available indications should be used to aid in evaluation of plant conditions since the accident may cause irregularities in a particular
, instrument reading. Instrument readings must be ' corroborated when one or more confirmatory indications are available (Reference 15.24), w % p eac. s 4 c u w< b k o w .e k s. 4 s i pg d
3. If[only one sitol a a:;...s a4a+ been restored, the acceptance criteria for t
' A C T sc. Maintenance of Vital 46 Power will be met and the operators should 4 proceed avtorem., the next u nsafety
e. v function i %t n. ins,.w jeop Nard es. However, efforts to restore3the earnna vital hun (and tha non eitel bu5ed should be l continued in order to increase the availability of plant systems and components.
f A p .t . c ! 4 Since the battery chargers are powered by the vit AC buses, if vital AC
power is available, the station batteries should supply electric DC power to the vital station DC loads - If a prolonged loss of vital AC occurs, the sustained operation of essential DC power equipment becomes more critical . Therefwe, bettery current ch uld be m
nitored te u4atze-the-du"tica e' batter-y evaiiaoliity. # f # "'" " " "' 6 /c h v e 61
%o V Ar l oa.d c.e.n kh b u.t h e_ o.s so cia M b (M eg"Owry .- 6 5 - c_ca s Me# Po *'a n a,3 N s to m. t u t - d: W Wi o'i 2.not ovring deth: W[r:t f D0 min.] or a loss of vital AL,, se ...engel e. d - a"+e-et4e "ea of vital station DC *1nade will be mad-4 ed to-c,e tc.c Wom he 4 To n c bu s . - i realign-the on-:ite di:tributien far-eieet14 cal-AC-power; g,cpa MV0G-+
FRG 11-116 CEN-152 _Rev M 3
\ l COMBUSTION ENGINEERING TITLE FUNCTIONAI. EMERGENCY PROCEDURE RECOVERY GUIDELINE GUIDELINES Page 1 of 5 Revision E A c rsc. J SAFETY FUNCTION: Mainten'ance of Vital -06 Power u n e - 2. SUCCESS PATH: Battery Charggr3/ Station Dettwies-: MVOC-P RESOURCE TREE: Trer. B-2 " ^ ' ' ' " " h "'^ " " M l INSTRUCTIONS CONTINGENCY ACTIONS M v. me g %3c, y y d,sk.b.Wa%U 6 kt *g g ,, ,,1 g m o e < , u n n te & *4 k a-
1. Verify that,at least one [w.s,e.e.125 vslt-] n 1. rnwra + hat-atg least one Dis.s.c..
N+ electrical-DC- power [125 volt] DC bus h available.from the associated-vitet electrical -.00 power _avat.lable-DC battery ch?"09"- from the-station-battery. +t ca . M ,- 33 auc A ble (c o M 4n u gited.  ;  % ugc,;L a 12.s v oc d'i:d r41" cc d u u,a -+ 4 Ak Swh mueb t his S $4Eere c tg 4% p.* e k r ' d I S t. a c. e b . 'Ed one br more ** - dec b b s cemb5 " ce nd l C ncepic cl. Cru,w w (%SWc E* k' , h c < -44 cl6 c4 h.6 CEv14.c b ) 0 ct, h* s fure.A % +ka a ss o c i L d. 450 VA c. Vi k b u, v i a. b.e bw w% w askeswiu , Eswr<_ pow $5 M 4I(c.ht4 N o m -$ M o f s o c d.le A 4 To V Ac v.M bu 3 >% V CP- Q ' N ( FRG 11 114 . C*L I E Pg .--4 L COMBUSTION ENGINEERING TITLE FUNCTIONAL EMERGENCY PROCEDURE RECOVEU GUIDELINE
( GUIDELINES Page 2 of 5 Revision W g e c t'-t 4
ACCEPTANCE CRITERIA FOR SUCCESS PATH: MVOC,4 - s t ep v w I
  • c -
1. Maintenance of Vital 90 Power is satisfied if:
i A ls 1-s r< e. s u o va c. o s na s 1 ak e hes 4c & le d onA b ;vis,.e.a wa. e n a ry s 't< a fro m a . +w&A su.c. b ~ W s c c Fru., G, w rs 1 .At-+eas-t One-trein of eieete4ce 00 "cwcr is evenal4e for: f) hP ^^nt' 61 ^swer  ;' ()g6,,, , c . . L 1 t w A ' r%~3 sh n m dc.naab ,g - or % biv si e fi) N cperstica afat-4ees+-one eM -.120_xcit_ vital Ar inctromont channel, e r>gf W o t Dwn o*- 3 ,m.s s4 usqal n 2.o a A s, p +r.
2. H above criterion N_0T0 satisfied. Then go to CONTINUING ACTIONS FOR MAINTENANCE OF VITAL DC POWER.
g %& u .c g g , w i o c. P.,., ,\ w D, 3 .- E above criterion satisfiedj A3 Maintenance of Vital AC_ Power satisfied, Then go to next safety function in jeopardy. 1
4. f 1_f acceptince criteria for ALL safety functions are being satisfied, Then 4
go to LONL TERM ACTIONS after perfoming appropriate operator actions for j all succes; paths in use. 1 t HJc P 2 -MVfMM-FRG 11-115 FN y w_A3- COMBUSTION ENGINEERING TITLE FUNCTIONAL EMERGENCY PROCEDURE RECOVERY GUIDELINE ( GUIDELINES Page 3 of 5 Revision M ' sa c. 0 - t_ SUPPLEMENTARY INFORMATION: MVDE-t-i This section contains items which should be considered when implementing EPGs and preparing plant specific E0Ps. The items should be implemented as precautions, cautions, notes, or in the E0P training program. 4
1. Do not place systems in " manual" unless misoperation in " automatic" is apparent. Systems placed in " manual" must be checked frequently to f ensure proper operation (Reference 15.34).
2. All available indications should be used to aid in evaluation of plant conditions since the accident may cause irregularities in a particular instrument reading. Instrument readings must be corroborated when one or more confirmatory indications are available (Reference 15.24). '
wec ,1o ac_ Af de w 6 boa cem Q a (a ene Divisico La-c
3. If 3cnly en: "it:1 OC Abe hn been restored, the acceptance criteria for
( c r u-Maintenance of Vital-06 Power will be met and the operators should 1 proceedt{the xt ge,tg ggio,r igjpgy, wg, efforts to restore,th wnn2 vital hus (and the non sit:1 buscs) should be continued in order to increase the availability of plant systems and components.
4. SinceKhebatterychargersarepoeredbythevitalACbuses,ifvitalAC power is vailable, the station atteries should supply electric DC power to the vital tation DC loads. If a prolonged loss of vital AC occurs, the sustained op ation of es .ntial DC power equipment becomes more critical. Therefor batter current should be monitored to maximize the duration of battery ava ab lity.
a. During the first [3 min. of a loss of vital AC, the manual and automatic use of v tal stati DC' loads will be maximized to:
1. realign the n-site distribution r electrical AC power; gVC P-2--
fiVCC4 - FRG 11-116 WA152-b.10 > l l l COMBUSTION ENGINEERING TITLE FUNCTIONAL ' EMERGENCY PROCEDURE RECOVEM GUIDELINE GUIDELINES Page 5 of 5 P.evision ae Ac Ist CONTINUING ACTIONS FOR MAINTENANCE OF VITAL @ POWER AcIm M the acceptance criteria are NOT met, Then Maintenance of Vital @E Power is still in jeopardy. The operfg musgegntinue to attempt to establish a source of Vital DC Power,while pursuing other jeopardized safety functions. Restoration of Vital AC Power may be necessary in order to make the battery chargers available) ed t ce s h b li s k ~~( po-w w ^ G y b^ < i , 2 ( l 4 l k. FRG 11-118 GC152=-* -'f 3 COMBUSTION ENGINEERING TITLE FUNCTIONAL EMERGENCY PROCEDURE RECOVERY GUIDELINE GUIDELINES Page 2 of 5 Revision E 4 SAFETY FUNCTION: Maintenance of Vital DC Power . SUCCESS PATH: Battery Charger:/Stethn ?:tterh MVOC-1 RESOURCE TREE: TreeB-3 1 INSTRUCTIONS CONTINGENCY ACTIONS
p. v. S. e. 3 c (
1. Verifythatatleastone[125voltf 1. Ehure that at leas one D s.nen of DC bn.has electrical DC power
[125D DC / has
available from the associated vital electrical power available DC battery chargers, from the _teti^ tery. afsc.c.ubd L ii - -4 DwH< rt e s .
u. Pc4 L < e.. ,s Lw eeq ~v 3 e a c.h dnFr.b tico cen ke d'i o w O'1 (c.n i k c m ba d f eg Ch w r t *~ .
b. One_ t u re<t. u d As 9 e.b Jic,
~ j { c c .s w .- c t- n be s.- p p h e d tb .w N D . s n . c .s G dcq c ucqv-
v. u ihe D v . s . c ., ch s & c. b. hon cuke e TM D i v . u c ., cli d e b h e.'
c a n ' s ,- cu n 6 .e. Supplied , f r o .w N o f i h2 c h e e b tt d bANC] CM c. 4 W c.A. tYb c k w e e \ s z e A d s s &< k h ch c.ede r . MVDC-1 FRG 11-114 CD -iff 9_ej g , 2 COMBUSTION ENGINEERING TITLE FUNCTIONAL EMERGENCY PROCEDURE RECOVERY GUIDELINE GUIDELINES page e of s Revision 0 ACCEPTANCE CRITERIA FOR SUCCESS PATH: MVDC-1
1. Maintenance of Vital DC Power is satisfied if:
p sv.sso n ng v o e-At least one 4+ain of o-kctricst-BG Power is available for: i) DC control power and
11) The operation of at k;.;t une-120 volt vital AC instr =er.t channel.104
2. If above criterion NOT satisfied, Then go to 4-ONTINUING ACTIONS-f0R-1 MA+NTENANCC OF-VtTAt-tet0WER; svDC-L
3. If above criterion satisfied AND Maintenance of Vital AC Power s:tisfied, Then 90 to next safety function in jeopardy.
\ 4 If acceptance criteria for AA safety functions are being satisfied, Then go to LONG TERM ACTIONS after performing appropriate operator actions for  ; all success paths in use. I t s \ ed N j thu_n_ cu-o o d. A G 315 V O C- ch 36 b de c a te ,.s -u u .st yyd-MVDC-1 FRG 11-115 CCt: ::: Q g M 3 COMBUSTION ENGINEERING TITLE FUNCTIONAL EMERGENCY PROCEDURE RECOVERY GUIDELINE GUIDELINES Page 3 of 5 Revision of , SUPPLEMENTARY INFORMATION: MVDC-1 , This section contains items which should be considered when implementing EPGs i and preparing plant specific E0Ps. The items should be implemented as precautions, cautions, notes, or in the E0P training p;ogram.
1. Do not place systems in " manual" unless misoperation in " automatic" is
apparent. Systems placed in " manual" must be checked frequently to ensure proper operation (Reference 15.34).
4
2. All available indications should be used to aid in evaluation of plant conditions since the accident may cause irregularities in a particular instrument reading. Instrument readings must be corroborated vben one or more <onfirmatory indications are available (Reference 15.24).
D.v m on
3. If only one vital DC tnrs has been restored, the acceptance criteria for Maintenance of Vital DC Power will be met and the operators should proceed to the next safety function in jeopardy. However, efforts to
^ restore the second vital W (Y[d the non-vite M usesh should be continued in order to increase the availability of plant systems and components. [
4. Since the battery chargers are powered by the vita sC buses, if vital AC power is available, the station batteries should ' supply electric DC power to the vital station DC loads. If a prolonged loss of vital AC occurs, tDIuEa'ilfePokratNn f e$sIEtial'Y)$ power equipment becomes more critical. Therefore, battery current should be monitored to maximize the duration of battery availability, sk .s
a. During the first {30 y'" ] of a loss of vital AC, the manual and automatic use of vital station DC loads will be maximized to:
i. realign the on-site distribution for electrical AC power; MVDC-1 FRG 11-116 CEii 15faiier. 03-
COMBUSTION ENGINEERING TITLE FUNCTIONAL EMERGENCY PROCEDURE RNW WI RINE GUIDELINES Page 4 of 5 Revision M' ii. provide electrical power to instrumentation and control equipment to monitor and control the plants parameters. iii. provide electrical power to control DC loads required to re-establish emergency electrical AC power. However, the use of the batteries during this period should be coordinated to minimize peak currents and to extend the duration of
battery availability. Non-essential DC loads should be removed from the DC distribution by opening the loads' supply breakers.
c .t gr ea d olg corre &.1 s
b. If the loss of vital AC powercc::d [20 -h] the continued use of 4
vital station DC loads should be minimized, but not restricted, to: 4
1. provide only a minimum of instrumentation and control equipment to monitor and control the plants parameters.
The use of the batteries for an electrical emergency should be reduced to a minimum. Extending the duration of the battery _ availability for the purpose of maintaining the safety functions is the primary objective for its continued use,
c. A c Ne 1:, re s w ee. v ,si A c p o n e , a n ct s.p gl y of V. led D C_ pe w e 4 c,% W k W.c che.c p c.s Shodd be. cm4i,we.J. <_ve n if A Aec.<fbee Ce 14e m of Hvoc-7. ismd.
MVDC-1 FRG 11-117 NM2 "^- ^3 COMBUSTION ENGINEERING TITLE FUNCTIONAL RECOVERY GUIDELINE EMERGENCY PROCEDURE GUIDELINES page 1 of 5 Revision .4__ SAFETY FUNCTION: Maintenance of Vital DC Power SUCCESS PATH: Bat *ary chargers / Station Batteries: MVOC'k. RESOURCE TREE: Tree B-3 INSTRUCTIONS CONTINGENCY ACTIONS p,r.sc oE
1. Verify that at least one f125-vekt 1. run - th;; at ic ,3t 0, r -
VOC h s has electrical DC power [425 volt] DC but 5:5-available from the associated vital alact-ical DC power-4va444ble DC battery,chme y eN bui hele 5 frem the static h ry.- x, 0- y e .3fe,s pntg D a ( ce/>4c n e c c.Wiw e C " c' ' o+ b c "' y ww clin r i b A c.s c % C- ' C6 ' ' ""' % **5 (cc.w ih cws be iie eg " &"* % ^ 't af oPbc3te.-fchrpe. U.% t DC. P.>~ e c , b O n e ch n a d t. e a di d ri b di o a c.u 4ce ca n be 3 p g i.id f,t:. .w  % h w . r . c.n k1 t e ry v u t k e. D/m.w a , s vr , 6 %.s cc. sw . e , Tk b . s . s . c .n A,3 be b 4 c..s ce n ke cm. d< w po t .ot k c.a e c. c( % C.wa. m._t . 2.e a L,a thei ,5 v i u, + M (L usebsol di s w i b h ce A. ,
d. , Ta kt o c.be,n A5 cc (2.t < c 4, b rwin e' m. s. e it . et ci s A butic.cErs h ex 4 nel Lauery liG .
MVDC 't FRG 11-114 'M M52 aD I l COMBUSTION ENGINEERING TITLE FUNCTIONAL RE W EM GUIDELINE EMERGENCY PROCEDURE GUIDELINES Page 2 of s a vision .;,i;a_ ACCEPTANCE CRITERIA FOR SUCCESS DATH: MVDC-J2
1. Maintenance of Vital DC Power is satisfied if:
4 %Yk %b hh h At least one An4n of efeetefea4-06 Power is available for:
1) DC control power a_!Ld ii) The operation of =t least one 120 volt vital AC instrumerit channel. Ic.n h .
2. J_fabovecriterionNOTsatisfied,ThengotoCONTINUINGACTIONSFOR MAINTENANCE OF VITAL DC POWER.
a 3 .- If above criterion satisfied AND Maintenance of Vital AC Power satisfied, Then go to next safety function in jeopardy. 4
4. H acceptance criteria for ALL safety functions are being satisfied, Then go to LONG TERM ACTIONS after performing appropriate operator actions for
~ all success paths in use. 4 l To km %. 0. r s,on om i k k lo , a ll Shr44 A Ssoudd ils va c- ch54v,b d so ce M S me u l be e yiea . 4 i MVOC *L FRG 11-115 C' @ n1 COMBUSTION ENGINEERING TITLE FUNCTIONAL REC 0VERY GUIDELINE EMERGENCY PROCEDURE GUIDELINES page 2._ of s Revision .H_. SUPPLEMENTARY INFORMATION: MVDC-1 This section contains items which should be considered when implementing EPGs and preparing plant specific E0Ps. The items should be implemented as precautions, cautions, notes, or in the E0P training program.
1. Do not place systems in " manual" unless misoperation in " automatic" is apparent. Systems placed in " manual" must be checked frequently to ensure proper operation (Reference 15.34).
2. All available indications should be used to aid in evaluation of plant conditions since the accident may cause irregularities in a particular instrument reading. Instrument readings must be corroborated when one or more confirmatory indications are available (Reference 15.24).
i p;m.a
3. If only one vital DC-btts has been restored, the acceptance criteria for Maintenance of Vital DC Power will be met and the operators should proceed to the next safety function in jeopardy. However, efforts to I
restorethesecondvitalhN*Tn2tha acn tit:1 buscs) should be continued in order to increase the availability of plant systems and components. .ug
4. Since the battery chargers are powered by the vit AC buses, if vital AC -
power is available, the station batteries should supply electric DC power to the vital station DC loads. If a prolonged loss of vital AC occurs,  % 3 s. 3 +i 34 a m be t u s w t wgthes,ustaTnedoperationofessentia'DCpowerequipmentbecomesmore critical. Therefore, battery current should be monitored to maximize the duration of battery availability. M es
a. During the first fSC .....] of a loss of vital AC, the manual and automatic use of vital station DC loads will be maximized to:
1. realign the on-site Ulstribution for electrical AC power; MVDC'l.
4 FRG 11-116 C-h -e-03 i a , COMBUSTION ENGINEERING TITLE FuscitoNet RECOVERY GU10ELINE EMERGENCY PROCEDURE GUIDELINES Page 4 of 5 Revision M ii. provide electrical power to instrumentation and control equipment to monitor and control the plants parameters. ) iii. provide electrical power to control DC loads required to re-establish emergency electrical AC power. However, the use of the batteries during this period should be coordinated to minimize peak currents and to extend the duration of battery availability. Non-essential DC loads should be removed from 1 the DC distribution by opening the loads' supply breakers. c o ~
  • b * * *0 ' \3 a.-r4 M
b. If the loss of vital AC power excccds [20 min.] the continued use of vital station DC loads should be minimized, but not restricted, to:
1. provide only a minimum of instrumentation and control equipment to monitor and control the plants parameters.
] The use of the batteries for an electrical emergency should be reduced to a minimum. Extending the duration of the battery 1 availability for the purpose of maintaining the safety functions is the primary objective for its continued use. C. A bcn lo re s l<, re v .% I AC p n e , , cu n g s _ p p ig e. G  % kt D C- p o w e.e Oc, .w W . b a. % c. k e g e..c r sLc bt b e. coa-, m e d 4.v e n if & Acte _p L c4 Ce lad- ed M V oc -L 's *d < a MVOC'f 4 d FRG 11-117 .cE;;C a20- COMBUSTION ENGINEERING TITLE Fua0m EMERGENCY PROCEDURE RECOVERY GUIDELINE GUIDELINES Page 5 of 5 Revision ** CONTINUING ACTIONS FOR MAINTENANCE OF VITAL DC POWER jf the acceptance criteria are NOT met, Then Maintenance of Vital DC Power is still in jeopardy. The operator must continue to attempt to establish a source of Vital DC Power while pursuing other jeopardized safety functions. l Restoration of Vital AC Power may be necessary in order to make the battery chargers available. R e s4mh m o C viid 4T o V A c. po w mg l m - te_ 14 pus.s.bte b w g i u. o n e. ec m o r e. a so v A c. Itc.c.,4 h , s i c ,s Asw bwhc, c< b ke s d i ce d-43 , v i c-Sko dow^ -fr e she s es g r e ct u r. t a g lo c. d c es fl4 "E6'"" ' ha % 5 p k+s. T l l 9 FRG 11.I18 -GEE n c R - COMBUSTION ENGINEERING TITLE FUNCTIONAL. RECORRY W10RINE EMERGENCY PROCEDURE GUIDELINES page 1 of to Revision
  • SAFETY FUNCTION: RCS Inventory Control SUCCESS PATH: CVCS; IC-1 RESOURCE TREE: Tree C INSTRUCTIONS CONTINGENCY ACTIONS
1. Verify charging and letdown are 1. Manually control charging and operating automatically to main- letdown to maintain or restore tain or restore pressurizer level nressurizer level -{46-to-34&M.k- rA%
so4o ' _;gsg i @o 70%) to 701o
2. Verify adequate suction source (s) 2. Replenish source (s) or switch exists for charging pump opera- charging pump suction as necessary tion. Available sources include k to maintain charging capability, VCT,Yoric keid htorage~fankf spent funi 15 avu to W h nn,1.
4:(( ans qui *3--*(Wek N Vti . - *t rw.ai
3. If high pressurizer level condi- 3.
tion appears to be caused by ex-cessive RCS voiding, Then refer to RCS and Core Heat Removal su'ccess path HR-2 (Natural Circu- < 1ation. No SIS Oneration) for void elimination procedure.
4. If S l A s i s in ib l e d, oJ I c> v o il a.bl e, cu t s p e p s 5 % )4 de o.t p b p ~p 4o h 4. I ts un4ll rw le y h.uule.d , d % h 6 u@ W Ic.wsT.
IC-1 FRG 11 123 , -CtMit? N4 l COMBUSTION ENGINEERING TITLE FUNCTIONAL REC VERY WI RINE EMERGENCY PROCEDURE GUIDELINES Page e of to Revision M ACCEPTANCE CRITERIA FOR SUCCESS PATH IC-1:
1. RC$ Inventory Control is satisfied if:
17 1r ?) %oc !. M /u
a. Pressurizer level is -{-3%N0^3*
and
b. The RCS is at least [20*Ff subcooled and
c. ,hheRVLMS dicatesthe'Co7E08Mf.
2. If above criteria NOT satisfied Then go to RCS Inventory Control success pathIC-2($15).
3. H above criteria satisfied Then go to next safety function in jeopardy, 4 M accepttnce criteria for ALL safety functions are being satisfied, Then go to LONG TERM ACTIONSfe ,a_f,t_er perfonning appropriate operator actions for all success paths in use.
*lf the RCS is in a solid condition for pressure control, then the limit of [245"] v.ay be exceeded. W lo 10 1 FRG 11-124 C M 2 "-fi=43 l COMBUSTK)N ENGINEERING TITLE FUNCTIONAL EMERGENCY PROCEDURE "" W R M y! ELINE GUIDELINES Page- L of 20 Revision # SUPPLEMENTARY INFORMATION: IC-1 This section contains items which should be considered when implementing EPGs and preparing plant specific E0Ps. The items should be implemented as precau-tions, cautiens, notes, or in the E0P training program.
1. Solid water operation of the pressurizer may make it difficult to control RCS pressure, and therefore should be avoided unless /20*FJ of subcooling cannot be maintained in the RCS (Ficure 11-1). If the RCS is solid, i closely monitor any makeup or dr .mng and any system heatup or cooldown to avoid any unfavorable rapid pressure excursions.
2. All available indications should be used to aid in evaluating plant conditions since the accident may cause irregularities in a particular instrument reading. Instrument readings must be corroborated when one or more confirmatory indications are available (Reference 15.24),
3. Do not place system in " manual" unless misoperation in " automatic" is apparent. Systems placed in " manual" must be checked frequently to ensure proper operation (Reference 15.34).
,4 '. The oper or should befautioned ag st prematurely / initiating an RA$. Yhe operator should rify that RWJ 1evel has rea hed [10%] and that the ) con /inmentsump r/ circulation, hissadequate)fdfdforSISsube manual a(tion should no lon before sh taken unless'pi 'i an auto-matic RAS is required. Mg. Steam plant radiation alanns usually indicate a steam generator tube leak which may result in lost of RCS inventory. J'. Char ing from the co entrated boron s urce should not cjo nuepast[1 hoyr]afterevent itiation unless equiredforreact)titycontrol.- }Ms is to prec de boron precip tion. Charging pump suction sho d be / shif ted to the lower concentrat{on source. / / 10-1 FRG 11-125 CCLW2 - - 03 COMBUSTK)N ENGINEERING TITLE FUNCTIONAL  ! EMERGENCY PROCEDURE "C " " M LINE j GUIDELINES Page 4 of 10 Revision E f/. Indications of high RCS inventory may be caused by the displacement of ! water from voided areas of the RCS. Operators must be aware of this and understand that operation of letdown in this situation may lower RCS pressure and, subsequently, increase RCS voiding. g% When a void exists in the reactor vessel, and RCPs are not operating, the RVLMS provides an accurate indication of reactor vessel liquid inventory. When a void exists in the reactor vessel, and RCPs are operating, it is not possible to obtain an accurate reactor vessel liquid level indication
due to the effect of the RCP induced pressure head on u,e RYLMS. it.e i
) 4dicated21eveLalsodiffers #m d"famt DYLWS dedgns vnja ihele ! 4enditions; Information concerning reactor vessel liquid inventory trending may still be discerned. However, the operator is cwtioned not to rely solely on the RVLMS indication when RCPs are operating . (Reference 15.15). /M The operator should continuously monitor for the presence of RCS voiding 1 and take steps to eliminate voiding any time void bg causes the heat removal or inventory control safety functions to begin to be threatened.
Void elimination should be started soon enough to ensure heat removal and inventory control are not lost (Reference 15.14).
f i i k IC-1 t 4 FRG 11-126 CEN O2--A c. 03 y . - - . , - . . , e --.-,y- . .-.,n _ y COMBUSTON ENGINEERING TITLE FUNCTIONAL RECOMRY WIDELINE EMERGENCY PROCEDURE GUIDELINES Page 6 of -.10 Revision
  • SAFETY FUNCTION: RCS Inventory Control SUCCESS PATH: 515; IC-2 RESOURCE TREE: Tree C INSTRUCTIONS CONTINGENCY ACTIONS
*1. res rizer pressure 1. l_f, f pressurizer pressure i fMO& 153 5 f-J00 gir] or containment psialgcontainmentpressure pressure [ psig], Then verify 3 k psigf and an SIAS has g an SIAS actuated. been initiated automatically, Then manually initiate an S!AS. *2.Ifp4essurizerpressure 2. Continue RCP operation, if p.pss et ^""' [f00psialfollowinganSIAS, 'S Y ' J " I"* Then ensure all RCPs are tripped. i *3. Ensure maximum safety injection 3. If safety injection and charging and charging flow to the RCS by flow N_0T maximized, Then do the the following: following as necessary: a.startidleSifpumpsand a ensure electrical power verifySifflowinaccordance to valves and pumps, with Figure 11-3, bensurecorrectS!fvalve
b. start idle charging pumps lineup,
c. ensure operation of neces-
~ sary auxiliary systems,
  • Step Performed Continuously.
IC-2 FRG 11-127 U "-~' " D"v 03 i l COMBUSTION ENGINEERING TITLE FUNCTIONAL
EMERGENCY PROCEDURE Rn un cui0ttiNo GUIDELINES Page 6 of 2o Revision E l
i' INSTRUCTION _S CONTINGENCY ACTIONS *4 E high RCS pressure is 4. i preventingadequateS!$ flow, Then attempt to cooldown/ j depressurire to obtain l adequateSifFlow. (Refer 1 to the Prassure Control
and Heat Removal success paths is use),
i . *S. If H851 pumps are operating, S. Continue W S! pump operation. ] Then they may be throttled or , stopped, one pump at a time, if
AM of the following are satisfied:
a.RCSsubcoolingatleast[20'F[ basedon[averageCETftempera-ture (Figure 11-1), b, pressu z level is greater than [.. ; and not decreasing,
c. at least one steam generator is available for removing heat 4 from the RCS (ability for feed
)' and steam flow). d.[theRVLMSindicatesaminimum level at the top of the hot leg nozzlesf. 1 *6. f LPSI p ps are o rating,Thdn 6. Co nue Ipum[ ope .ip. they ma be stopp ifpress/izerf press e is gr erthan[360ps)[] and ontrolled * 'FRG 11-128 0Dl-i f C 3 i l COMBUSTK)N ENGINEERING TITLE FUNCTIONAL RECO W GUIDELINE EMERGENCY PROCEDURE i GUIDELINES page 7 of 10 Revision.E j INSTRUCTIONS CONTINGENCY ACTIONS (*/. l.,f, the criteria of steps 5 er-fr 7. cannotbemaintainedafter$!$ pumps throttled or stopped, j ThenappropriateS!/pumpsmust be restarted and ftrM-31/ flow .l restored. IAw3I g gg A } *jif. Verify C EtTWsht-+ temp 8. Maintain M level greater than J v01 'r.Cr0:00; 0; ' J^' 5 7 /10%/byreplenishmentfrom
! j a v e l W rn a c c e , I8 '"* d* '& * * * # available sources.
m e ,s % i ,, s . *9. If an RCS break is inside 9. If an RC break s insid containme t i ntainment / and k le el and nd r gulatindoesN;Toccur 4 3'[10%), Then verify i when lev 1 <[10%] Then u - /r" ?s stoppel-end re rculation IM nnmn% anually i itiate initiath, irculati n (remot or local y) with one ) f train f t a time [and close Y outlet v41ves to e$15).
*10. Ensure #S1 ow 3 [30 m) 10. H F SI flow <[309.)per ump per pump ddring recire ation, durin recircula on Th turn off one chargi pump a a tim u til HPSI fl w 1(30g ]per
pump. H m nimum HP I flow still not et with all ch ging, pumps o ,Then rn off one $1 pump a time ntil H ! f1pw 1[3 pm]per mp.
4
  • Step Perfonned Continuously.
IC-2 FRG 11-129 C C N E'-**Q3 4 k i COMBUSTION ENGINEERING TITLE rVNCTIONAL RECOMM GUIDRINE EMERGENCY PROCEDURE , GUIDELINES Page JL. of -.11 Revision .JIL. Acceptance Criteria For Success Path IC-2:
1. RCS Inventory Control is satisfied if
a. All available charging pumps are operating and the S!S pump (s) ,
4 are injecting water into the RCS per Figure 11-3 (unless S15 i termination criteria are met er-RAG-he; ecturrd), and
b. [The RVLMS indicates the N /$ N Y M f'
2. If above criteria NOT satisfied, Then go to CONTINUING ACTIONS FOR RCS I INVENTORY CONTROL.
) . I 3. Iff above criteria satisfied, Then go to next safety function in jeopardy. ! 4 If, acceptance criteria for M safety functions are being satisfied, Then j go to LONG TERM ACTIONS after performing appropriate operator actions for all success paths in use. e C. U^k h ek M s.n f w uQ w k. t JJ.- C. x , _ k A 2o 'F p u c c G g. m r < u. dw- eswl M w ol . l g,"O m is no d not .J ucr<uM th p re g., me gee l.ev4.t wW o p tw4sp s peq. IC-2 FRG 11-130 T M2 5 " , , - e. - _ . , . , . . . COMBUSTION ENGINEERING TITLE FUNCfl0NAL REMU M ELINE EMERGENCY PROCEDURE GUIDELINES Page 9 of lo Revision P SUPPLEMENTARY thFORMATION: IC-2 This section contains items which should be considered when implementing EPGs and preparing plant specific E0Ps. The items should be implemented as precau-tions, cautions, notes, or in the E0P training program.
1. Solid water operation of the pressurizer may make it difficult to control RCSpressure,andthereforeshouldbeavoidedunloss[20'F[ofsubcooling cannot be maintained in the RCS (Figure 11 1). If the RCS is solid, closely nonitor any makeup or draining and any system heatup or cooldown 1
to avoid any unfavorable rapid pressure excursions.
2. All available indications should be used to aid in evaluating plant conditions since the accident may cause irregularities in a particular instrument reading. Instrument readings must be corroborated when one or more confimatory indications are available (Reference 15.24). Hot and cold leg RTDs may be influenced by cold $15 injection and should be checked against each other,
3. Do not place system in " manual" unless misoperation in " automatic" is apparent. Systems placed in " manual" must be checked frequently to ensure proper operation (Reference 15.34).
4 The eratorshofldbecautiondagainstpre[t"relyinitiaknganRAS. i Th operator s ould verify t t RWT level is reached [10 and that he ontainment ump has adequ e fluid for 5 suction be re shiftir to p recircula on. This ma9dal action sho ld not be take unless an uto-matic RA is required. 4 f. Steam plant radiation alarms usually indicate a steam generator tube leak which may result in loss of RCS inventory, Durin / recirculation at least ne HPSI p sho be operafingMt al/I tim unless HPS! t rmination criteria e met. IC 2 FRG 11-131 CO ' O "^" S - i l COMBUSTION ENGINEERING TITLE FUNCTIONAL EMERGENCY PROCEDURE Rtc nu curottiNt
GUIDELINES Page_.19. of 10 Revision 08 CONTINUING ACTIONS FOR iNVtNTORY CONTROL
-i i E the acetptance criteria are Ng met, Then RCS Inventory Control is still in i jeopardy. The operator must continue to attempt to establish RCS Inventory I Control while pursuing other jeopardized safety functions. Evaluate further actions using the following: I a) Rate of change of inventory and potential for damage to the RCS t,) The urgency of other jeopardized safety functions c) The feasibility of restoring function to a success path by: i i) restoring the vital auxiliaries necessary to operate components or systems irs the success paths l 11) manual operation of valves , ] iii) use of alternate components to implement a success path. l iv) depressurizing/ cooling the RCS to increase or establish PF5! flow. W-4acreese er e3tcbli5h LpS: fIc. ,--er, in-4n-axtreme cas%--to-eWw
%a N to dischacge.
1 1 ] j 1 i FRG 11-132 CEytt 5 At ,T-e w -w c- ,- -
  • 1 l COMBUSTK)N ENGINEERING Tm.E FUNCTIO M
MC WRY GUI EUNE EMERGENCY PROCEDURE _
GUIDELINES Pase 2 of 'o Revision M j SAFETY FUNCTION: RCS Pressure Control i SUCCESS PATH: Pressurizer Heaters and Spray; PC-1 l RESOURCE TREE: Tree D d v 1 A cA 5 i , i l 1 INSTRUCTIONS CONTINGENCY ACTION _S *1. Lerify pressurizer heaters and *1. !_f f pressurizer pressure outside the j [ main or auxiliary) spray are nonnal band is desired or the P.T
automatically maintaining limits of Figure 11-1 are violated.
I pressurizer pressure within the Then do the following as appropriate: 1 Post Accident P-T limits of a. manually control pressurizer , Figure 11-1.,s,n cH5 in heaters and spray to restore n o r rn al opernhon . and maintain pressurizer pressure within the Post Acci-  ; dent P-T limits of Figure 11-1. 1
b. attempt to maintain the plant in a stable pressure-temperature
 ; configuration or continue to cooldown within the limits of Figure 11 1 (refer to the RCS and Core Heat Removal success pathbeingimplemented).
2. Y* rd) C g6 ing a4 k b n e t. L A , m c. de,j g, ,, g o /c t<Mg cA hmdic.Ily M ewm km )ddoj 4, m , , , gore
*' (*% 'e p re , ., ., , , u, ,, Q trt' m eter l<eti 30 m s o h . ' hoi. 60 %
3. V* % nJe p k sweben 1; u e o. b) A Reebd 5.utc4) or 5W T V'd be hgia p e p g
  • e g 4Q,-
Crm vcr s o sur $cteu s a s ne cemry IS ~. % cuay,3 es p bu (; fg
  • Step Performed Continuously PC-1 FRG 11-145 Cwasi  :-73 3 s
i ,, -+w, ..w.. - , , , . . , - _ . - _ - - , - - - - - - . , .- , - , - - - - , r ----e.. COMBUSTK)N ENGINEERING TITLE FUNC?l0NAL REC VERY WI ELINE EMERGENCY PROCEDURE GUIDELINES pager 4 of.ic.R. vision 2 , RCS Pressure Control SAF(TYFUNCTION: SUCCES PATH: CVCS; PC-2 RESOURCE E: Tree D INSTRUCTIONS CONTINGENCY ACTIONS
1. Verify charging an t wn are 1. Manually contrakt ng and operatingoutbItically letdo ,wn t [ maintain or restore p
maintgin or restore pressurizer 1 [petsurizer level W# f35-to745"). ^ # /vei.{-35-to-24&13 ge 4 c. L, c % s
2. Verify adequate Sucti i,o- source (s) 2.'4eplenish source (sPditch exist for c)afhng p p opera- cha(gin p suction as necessary tion. rces include t . ntain charging gapability.
VCT-((/'failable boric acid torage tanks, s ' pont--fve6 nd-RWT-3 p/. E at least [20*F) subcooling , I', ' cannot be maintained, Thy at-tempt to take the pressurizer solid to establish RCS pressure control. Manually control charging and letdown to restore and maintain pressurizer pres- ' sure to within the Post Accident P-T limits of Figure 11-1.
  • Step Perfonned Continuously TC-2
'FRG 11-J W CEm & b dt ys 03-e , e- COMBUSTON ENGINEERING TITLE rVNCTIONAL EMERGENCY PROCEDURE R K M W I ELINE GUIDELINES p.g. s or 40 n. vision w INSTRUCTIONS CONTINGENCY ACTIONS 9' g*/.EtheP-TlimitsofFigure11-1 p. are violated. Then do the follow-ing as appropriate:
a. attempt to maintain the plant  !
in a stable pressure-temperature configuration or continue to cooldown within the limits of Figure 11-1.
b. !_f,overpressurization due to excessive charging flow. Then throttle or secure charging and manually control letdown to ,
restore and maintain pressure . within the limits of Figure 11-1. 1 i ?
  • Step Performed Continuously j
PC-?. . . - - ___= _. - - - . . . . . - - . - . . . - - COMBUSTION ENGINEERING TITLE ruNCTIONn EMERGENCY PROCEDURE RMM WI ELINE GUIDELINES p.g. 2 or 40 g,yi, ion,g Acceptance Criteria for Success Path PC-1:
1. RCS Pressure Control is satisfied if:
Pressurizer pressure is within the Post Accident P-T Ifmits of Figure 11-1.
2. If above criterion NOTT satisfied, Then go to next appropriate RCS Pressure Control success path.
3. Jff above criterion satisfied Then go to next safety function in jeopardy.
4 If acceptance criteria for & safety functions are being sa,tisfied, Then go to LONG TERM ACTIONS af ter perfonning appropriate operator actions for all success paths in use. l l PC-1 FRG 11-146 03 Cf*' ".42 3 l e - w ----w-,r,v-- w-e+ w w e a TITLE COMBUST)ON ENGINEERING FUNCTIONAL REC m y cuintist EMERGENCY PROCEDURE ,
GUIDELINES page 3 of 40 Revision #
) SUPPLEMENTARY INFORMATION: PC-1 l This section contains items which should be considered when implementing EPGs j and preparing plant specific E0Ps. The items should be implemented as precau-tions, cautions, notes, or in the E0P training program. i
1. Continuously monitor RCS temperature and pressure to avoid exceeding a heat removal rate greater than Technical Specification Limitations. If the heat removal rate exceeds Technical Specification Limits, there may I
be a potential for pressurized thermal shock (PTS) of the reactor vessel 3 (Reference 15.8)unlessPostAccidentPressure/TemperatureLimitsare maintained (Figure ;1-1). l If there is a conflict between maintaining adequate core cooling and )1 complying with the pressure / temperature limits of Figure 11-1, then maintaining adequate core cooling will be given'the higher priority. . Subcooling of 20'F has precedence over PTS con'siderations, b
2. All available indications should be used to aid in evaluation of plant conditions since the accident may cause irregularities in a particular instrument reading. Instrument readings must be corroborated when one or i
more confirmatory indications are available (Reference 15.24), i
3. Solid water operation of the pressurizer may make it difficult to control RCS pressure and, therefore, should be avoided unless [20'F] of subcool-ingcannotbemaintainedintheRCS(Figure 11-1). If the RCS is solid, closely monitor any makeup or draining, and any system heatup or cool-down, to avoid any unfavorable rapid pressure excursions..
a 4 PC-1 1 4 FRG 11-147 CEp03 - 4 ,r- - 4 T COMBUSTION ENGINEERING TITLE ruNCTIONAL EMERGENCY PROCEDURE """ @! El!NE ,_ , GUIDELINES p.g. s of i.o n.vi,lon e ., 2 Acceptance Criteria for Success Path PC-2: I
1. RCS Pressure Control is satisfied if: '
] Pressurizer pressure is within the Post Accident P-T limits of Figure 11-1. / / ] 2. E above criterion N_0T satisfied Then 90 to next appropriate RCS Pressure Control success path. I
3. E above criterion satisfie . Then go to next safety function in
 ! jeopardy. 4 If,acceptcnce f criteria or ,A_Lj., safety functions are being satisfied, Then go to LONG TERN ACTION after perfonning appropriate operator actions for all success paths in se. , j e i. PC-2 FRG 11-150 CEM- m = h .--G3 t r - - , - * - fe COMBUSTION ENGINEERING TITLE FUNCT!0NAL EMERGENCY PROCEDURE REC HH WI ELINE , GUIDELINES Page L of 40 Revision 25 SUPPLEMENTARY INFORMATION: PC-2 This section contains items which should be considered whe'n implementing EPGs and preparing plant specific E0Ps. The items should be.' implemented as precau-tions, cautions, notes, or in the E0P training program.
1. Do not place systems in " manual" unless misope' ration in " automatic" is
^ apparent. Systems placed in " manual" must be checked frequently to ensure proper operation (Reference 15.34)/
2. All available indications should be used to aid in evaluation of plant conditions since the accident may cause irregularities in a particular instrument reading. Instrument readjngs must be corroborated when one or more confirmatory indications are ada11able (Reference 15.24),
3. Continuous 1 f monitor RCS temperafure and pressur,e to avoid exceeding a heat removal rate greater than, Technical Specification Limitations. If the heat temoval rate exceeds /fechnical Specification limits, there may be a potential for pressurize'd thermal shock (PTS) of the reactor vessel (Reference 15.8) unless Post Accident Pressure / Temperature Limits are maintained (Figure 11-1)./
/ Ifthereisaconflictpetweenmaintainingadeountecorecoolingand complying with the prepsure/ temperature limits of Figure 11-1, then maintaining adequate pore cooling will be given the higher priority. Subcooling of 20'F h 's precedence over PTS considerations,
4. Solid water operation of the pressurizer may make it difficult to enntrol RCS pressure and,[herefore, should be avoided unless [20*F] of subcool-ing cannot be ma tained in the RCS (Figure 11-1). If the RCS is solid, closely monitor ny makeup or draining, and any system heatup or cool-down, to avoid ny unfavorable rapid pressure excursions.
) PC-2 l FRG 11-151 y" ' . 03 l } COMBUSTK)N ENGINEERING TITLE ' FUNCTIONE EMERGENCY PROCEDURE RECOVERY GUIDELINE GUIDELINES p.g. 8 of a n.vi, ion f SAFETY FUNCTION: RCS Pressure Control SUCCESS PATH: SIS;PC-g2. 4 RESOURCE TREE: Tree D , INSTRUCTIONS CONTINGENCY ACTIONS i //25 i *1. E ressurizer pressure 1. Lf pressurizer pressure 3 [-1600 f[ psia) or containment psia) E containment pressure 1 pressure 3[d'psig), Then verify kpsig]andanS!AShasNEbeen
an SIAS actuated.
1 initiated automatically, Then manually initiate an S!AS.
*2. If pressurizer pressure 2. Continue RCP operation.
j h psia [ following an $1AS, Then ensure all RCPs are tri,pped. *3. Ensure maximum safety injectic 3. E safety injection and charging i and chargino flow to the RCS cy flow Ng maximized, Then do the
the following: following as necessary:
a. start S!S pumps and verify a. -ensure electrical power to .
S!S flow in accordance with valves and pumps, Figure 11-3. b. ensure correct SIS valve i yd lineup,
b. start idle charging pumps. c. ensure operation of necessary auxiliary systems, i
  • Step Performed Continuously.
PC-/ 2. 4 FRG 11-152 OE4M52 6 . - 0 3 -- -, , , - . , , - , , , - - , ,n, ,~--a- , , - , 1 l i j COMBUSTION ENGINEERING TITLE ' FusCTIONAL EMERGENCY PROCEDURE a m a cuiottruC l l- ! i . GUIDELINES Page 9 of ao Revision M i !NSTRUCTIONS CONTINGtNCY ACTIONS 1 i '4. g SPSI pumps are operating, 4. Continue 11f 51 pump operation. Then they may be throttled or stopped, one pump at a tiene, if 1 ALL of the following are satisfied:  ; j a.RCSsubcoolingatleast(20'F] l basedon(averageCET] temper- { ature (Figure 11-1),
b. pressurizer. level is greater than[M]andnotdecreasing, j c) at least.one steam generator ,
! is available for removing heat 4 j from the RCS (sbility for feed , ! and steam flow), I d)(theRVLMSindicatesaminimum  ! l level at the top of the hot leg 1 nozzles]. Q i / . *S. ! LPSIpumpspreoperatpg,Then'5. p CodinueLPSI mp oper ion, j hey may be Itopped if ressurizer / . pressure is/ greater . n(200 psia] l and controlled. > l i 6 .
*g. E the criteria of step; 4 ec E5 i
cannot be maintained after 5!S ! pumps throttled or stopped. I Then appropriate S!S pumps must be restarted and full SIS flow restored. e  ?
  • Step performed Continuously.
i PC7 34 i . , FRG 11-153 SENH3f 7*u d - t h ~~ - . . . ,.-._.~..;_..u. _ . . _ . . _ ._. _._ . _ , _ - . . . . . _ _ . , . . -.._ _ .-. _ _. _ . _ _ , , _ _ , _ m . . . - . . ,_ l COMBUSTK)N ENGINEERING TITLE FUNCTIONAL EMERGENCY PROCEDURE R N M W! ELINE GUIDELINES page to of to Revision Jit_ D INSTRUCTIONS CONTINGENCY ACTIONS lo~ . G. */ . E at least [20'F) subcooling I'. cannot be maintained, Then attempt to take the pressurizer solid to establish RCS pressure control. Manually control SIS- l pumps (and letdown, if ap-propriate) to restore and maintain pressurizer pressure .j within the Post Accident P-T limits of Figure 11-1. 3 n */ . E the P-T limits of Figure 11 1 A are violated, Then do the fol-lowing as appropriate:
a. attempt to maintain the plant in a stable pressure-tempera-ture configuration or contin-ue to cooldown within the limits of Figure 11-1.
b. E overpressurization due to excessive WS! flow, Then throttle or stop SPSI pumps (refertostep4)andmanually control-letdown to-restore and maintain pressure within the limits of Figure 11-1.
  • Step Performed Continuously.
PCdL FRG 11-154 0C12_.6 01 l l 1 COMBUSTION ENGINEERING TITLE rVNCTIONAL RK WH W! ELINE EMERGENCY PROCEDURE GUIDELINES Page 11 of 40 Revision E INSTRUCTIONS CONTINGENCY ACTIONS 11tw s T* IRwT *{. Veri fy conta4eent-sump level 4e- , 9. Maintain-[RWT-] level greater unses-es-(SWT)-level- e t '""b"M than(10%)byrepienishmentfrom daunte s , o bv4 ma~e I4 <l- available sources. *10. f an RCS brea i! s inside c n- 10. If an R $ break ip'inside ontain-tainment and RWT] level (10%), ment d recirculation d s NOT Thenverif[LPSIpumps opped and occ,vrwhen(R leve1<(10% A recircul/tioninitiated. Then stop LP) pumps 4 manual 1 initiate recircula on (remp'te orlocally)withoneSl$frain 7 at a tiene, [and'close Rui outlet valvestotheSIS). l / / / IW rix ) /*)1'. Ensure NPSIJiow 3D0gpm/]11.per,/ ' !_f,)fS1410w <[.30gpm) per' pump f ovep during retircylation. during recirculation, Then turn f 7 off one charging pump at a time /until HPSI flow 3(kgpm) per pump. Q minimum 7 51 flow ,,/ still not met with all charging pumps of f,' T' hen turn off one[$1 pump at a time until HPS! flow 1[kpm]perpump3o pop _.cdicg pa~cc
  • Step Perfonned Continuously.
PC-f2-FRG 11-155 @!?:d? COMBUSTION ENGINEERING TITLE FUNCTIONAL EMERGENCY PROCEDURE a m n e trNo GUIDELINES p.g. 12 og ao n. vision , Acceptance Criteria For Success Path PC- i
1. RCS Pressure Control is satisfied if:
A14-evailabirrharging-pumpsara_optratingJind lthe $15 pump (s) are injecting water into the RCS per Figure 11-3 (unless SIS temination criteria are met ee-RAS 4as4ecurred).
2. Jff,above criterion M Satisfied. Then go to next appropriate RCS Pressure Control success path.
3. E above criterion satisfied. Then 90 to next safety function in jeopardy.
4 H acceptance criteria for AJL safety functions are being satisfied. Then go to LONG TERM ACTIONS dty performing appropriate operator actions for all success paths in use. I PCgA FRG 11-156 CE": 9;J r COMBUSTK)N ENGINEERING TITLE FUNCTIONE RR HRY W ELINE EMERGENCY PROCEDURE  ! GUIDELINES p.g. _.t3. og a o n,yigion _ ,, SUPPLEMENTARY INFORMATION: PC-[?-- This section contains items which should be considered when implementing EPGs and preparing plant specific E0Ps. The items should be implemented as precau-tions, cautions, notes, or in the E0P training program.
1. Do not place system in " manual" unless misoperation in "autmati." is apparent. Systems placed in " manual" must be checked frequently to ensure proper operation (Reference 15.34).
2. All available indications should be used to aid in the evaluation of plant conditions since the accident may cause irregularities in a partic-ular instrument reading. Instrument ieadings must be corroborated when one or more confirmatory indications are available (Reference 15.24).
Hot and cold leg RTDs may be influenced by the cooler $15 injection and should be checked against each other,
3. Continuously monitor RCS temperature and pressure to avoid exceeding a heat removal rate greater than Technical Specification Limitations. If the heat removal rate exceeds Technical Lpecification Limits, there may be a potential for pressurized thennal shock (PTS) of the reactor vessel (Reference 15.8) unless Post Accident Pressure / Temperature Limits are maintained (Figure 11-1).
If there is a conflict between maintaining adequate core cooling and complying with the pressure / temperature limits of Figure 11-1, then maintaining adequate core cooling will be given the higher priority. Subcooling of 20'F has precedence over PTS considerations, PC-k FRG 11-157 CNDM l l l COMBUST)0N ENGINEERING TITLE rVNCTIONAL EMERGENCY PROCEDURE "C nn autottist GUIDELINES Pase 28 of 80 Revision E 4 Solid water operation of the pressurizer may make it difficult to control RCS pressure and therefore should be avoided unlessM0'F7 of subcooling cannot be maintained in the RCS, If the RCS is solid, closely monitor any makeup or drairiing and any system heatup or cooldown to avoid any unfavorable rapid pressure excursions. Theoperforshoul/dbecaution4againstprmaturely itiatijnganRAS) / The o rator sho d also ch containme sump lev to veryy adentfa'te su- ion for SIS prior o shifting o recircu tion. [4. DurifQecirculatiop, at least'one #S1 pump should be operating at all timesjnless WSI temination [riteria are[et. d 4 PC./ 7-FRG 11 158 t!" P :-J3 mu nnemarmlmmm'i p'insipi i ' Ii ii i i' , , i i i . sq gu gi iism COMBUSTON ENGINEERING TITLE FUNCTIONAL EMERGENCY PROCEDURE RU MRY @! ELINE GUIDELINES page is of so Revision e SAFETY FUNCT!0N: RCS Pressure Control SUCCESS PATH: Forced Circulation with Controlled Steaming; PCjd3 RESOURCE TREE: Tree 0 INSTRUCTIONS CONTINGENCY ACTIONS *1. Borate the plant as necessary, 1. while cooling down, in order to maintain shutdown margin per Technical Specification Limits (refer to RC-2 and RC-3).
2. Allow pressurizer level to lower 2.
(maintaining level NI ) while cooling down noNe[to aid the depressurization.
3. Perform a controlled cooldown/ 3. M the condenser or turbine bypass depressurization in accordance system E available, Then cooldown with Technical Specifications via the atmospheric dump valve (s),
by operation of the turbine bypass system. i l t
  • Step Perfortned Continuously.
PCr4'I FRG 11-159 C M - h =C3 - , , - . - , , - . - - - . . - y ,. I l COMBUSTION ENGINEERING TITLE rVNCTIONAL REC MH WI RINE EMERGENCY PROCEDURE
GUIDELINES Page 16 of .12. Revision #
INSTRUCTIONS CONTINGENCY ACTIONS rnain, AH. r, a nd eme y m3 *4.[Ensureadecuatesteamgener- '4 J,f fm64n-and-an444eey} feed-ator inventory and-prevent-SG water are lost, Then do the f**d ring d = ge by operating following:
g. +f nfor-auxi444ry feedwater in a. stop all RCPs, M'f l accordance with the following: b. isolate SG blowoown, secondary
(. Jf-Wwater4 eve 1Js-a sampling, and any non-vital Va bed ring ,The stop steam discharge, g f u g g,.,,, redu f nt eldwater pumps, c. attempt to restore-[= & ad/ee-andpst ,Y & t & SG awithry)feedwaterb5km~ fel in the nnal band. d.fttempttoestablishanalter-W-ff-4*d4eeted eval is nate, low pressure feedwater the feed-r4o9r-Then - sourcetoatleastoneSG)( l . do-th UHowing: ,/ i M 4op\r+dundant-feedwater pumps ynd--limitfeMwTier f4ow--ra e te-150 gpa.per aHected y Gni.il-en-increas,... ,,at-been--observe \~ ... ntil cont [nuous-f etet-fiw to'-the-%-has4ee ,na1n. /= 4ned for-f4ve-mine es-- - k)#)modulatefeedwaterflow rate as necessary to ,psm., .... enintain SG water level in the nonnal levelband[.
  • Step perfortned corttinuously.
PCJ'.5 FRG 11-160 .ptpt$e==aer:d!l'2 COMBUSTION ENGINEERING TITLE FUNCTIONAL EMERGENCY PROCEDURE "" "" WI EL INE GUIDELINES Page " of do Revision E INSTRUCTIONS CONTINGENCY ACTIONS
5. Ensure the available condensate 5.
Inventory is adequate per Figure 11-4 and 11-5. *6. yerih e adequate RCS pressure 6. cortrol via the steam generators by:
a. [at least one steam generator a.@bothSGwiderangelevels[15[
has wide range level ga d M ft5'j2

10*F)betweenT HRTDs ) and[CETs). *2. ivaluate the need and desira- 2. H RCP operation g desired, bility of restarting RCPs. Then go to step 8. Consider the following: '

a. adequacy of RCS and core heat removal using natural
] circulation,
b. existing RCS pressure and temperatures,
c. the need for main pressurizer i spray capability, (Continued On Next Page)
  • Step Perfomed Continuously.
PC-)f FRG 11-1M CC F ;- -r:4 b COMBUSTION ENGINEERING TITLE FUNCTIONAL. EMERGENCY PROCEDURE REC 0WW GUIDELINE GUIDELINES Page- ti. of a0 n vision A INSTRUCTIONS CONTINGENCY ACTIONS *2. (Cont'd) 2. , d the duration of [CCW] inter- { ruption to RCPs,
e. RCP seal staging pressures and temperatures.
*3. Determine whether RCP restart 3. If RCP restart criteria NOT criteria are met by Ajll of the satisfied. Then go to step 8.- following: 1 a electrical power is available a to the [RCP bus]. ~ I b.RCPauxiliariesf4GC"4[)to - maintain [ seal injection [. bearing, and motor cooling are operating, and there are no e temperature alams on the
selected RCPs.
{ c. at least one SG is available for removing heat from the RCS (ability for feed and steam j flow). . d. pressurizer level is greater ' c.s*c than [2SP] and not decreas-f ing,
e. RCS subcooling at least 120*Ff.
I based on[ average CET[ tem-perature (Figure 11-1),
f. [other criteria satisfied per RCPoperatinginstructions].
  • Step Perfonned Continuously PC-J'9 FRG 11-167 CE M&M3 4
COMBUSTION ENGINEERING TITLE FUNCTIONAL EMERGENCY PROCEDURE REWED WIDEUNE GUIDELINES page 21.of 4o Revision M INSTRUCTIONS CONTINGENCY ACTIONS *4. M RCP restart desired and 4. Go to step 8. restart criteria satisfied, Then do the following:
a. St+rt ei; availabie cnarging 6"5*eo O /"" * " ("r , *d A P ' ** f ' " '
a ,, n greeJu 4% 4 .. n pres 5EPe-less-th e g 4,, g j , , ,, . 6 Fww- re p a v e A b 36''* ( M CO ;si d , ' k n "?Si p = ps- o.u c h i so, p gs gc5 gressa e y ILeopsk nay h opuistad, eptdc
b. s, tart one RCP in each loop, c.hsureproperRCPoperation by monitoring RCP amperage and -
A*s NPSH/,c.J nit (Ne ov ddle SCP andic
d. operate charging (and l#S!)
- pumps until pressurizer level greater than [ k and $ 51 termination criteria met (refer to step 5). *5. H 4 51 pumps are operating, Then 5. Continue MI pump operation, they may be throttled or stopped, one pump at a time, if M of the following are satisfied: a.RCSsubcoolingatleast/20'F/ I basedonJaverageCET/ tempera-1 ture (Figure 11-1), b, pressurizer level is greater 13 % than [ter'] and not decreasing,
c. at least one steam generator is available for removing heat l from the RCS (ability for feed and steam flow).
l (Continued On Next Pape)
  • Step Performed Continuoutli PC-ji'f FRG 11-168 C1'?r:I",;Z Ted
l
COMBUSTON ENGINEERING TITLE FUNCTIONAL EMERGENCY PROCEDURE RENW MRINE GUIDELINES i Page 25. of .u- Revision a* l
INSTRUCTIONS CONTINGENCY ACTIONS I
*5. (Cont'd) 5. d.ftheRVLMSindicatesaminimum level at the top of the hot leg nozzles [. 4 *6. E the criteria of step 5 cannot 6. ! be maintained after GSI pumps throttled or stopped Then 4 51 j pumps must be restarted and full #51 flow restored. '7. If at least one RCP has been re- 7. Continue with the actions of ! started in a loop with SG feed this success path. $ and steam flow capability, Then go to PC-h, Forced Circulation with Controlled Steaming. i *8. Borate the plant as necessary 8. j while cooling down in order to maintain shutdown margin per Technical Specification limits (refer to RC-2 and RC-3).
9. Allow pressurizer leyel_to.._1_ower 9.
~ (maintaininglevel Ttd 95b - while cooling down to rn 4 oQ order to aid the depressurization. j
  • Step Performed Continuously PC-g4 FRG 11-169 CEM 'd M l
COMBUSTION ENGINEERING TITLE ruam EMERGENCY PROCEDURE "MH GUMINE GUIDELINES Page M of 40 Revision op INSTRUCTIONS CONTINGENCY ACTIONS
10. Perform a controlled cooldown/ 10. H the condenser or turbine bypass depressurization in accordance system M available, Then cooldown with Technical Specifications- via the atmospheric dump valve (s).
by operation of the turbine bypass system. *11. Ensure adequate steam gener- *11. H [- 9 aad au444ery3 feedwater 6 ator inventory and picveni-$G .are lost, Then do the following: feed-dag damage. by operating a. stop all RCPs, ~ ' main pf c f [ eedwTte'r[in b. isolate SG blowdown, secondary accordance with the following: sampling, and any non-vital Q 50 -etc R evel i; ebuve steam discharge, evyec $ t$e' feed via0 Th M c.attempttorestorefmainf,a,nd/or redundant-4eeewatems , DI4 Nary [feedwater. 1md kestorehMte4n SG d.Jattempt'toestablishanalter-level in the nomal bahd. nate, low pressure feedwater source to at least one SG); b.sif indicated SG level jiblobthefeedring,Then do e ollowin h[ i)st r undantffedwater pump and'lhnit feedwater flow ra e to 250gpm per ' affected $ntilan increase p G 1evel has been observed, or until continuous feedw er flow 1 to the SC has been in-tai,ned for five minut . %ntinued On knt "ege)-
  • Step Perfomed Continuously, s
a FRG 11.170 CE a R .N 1 COMBUSTON ENGINEERING TITLE FUNCTIONAL R M E M G R ELINE EMERGENCY PROCEDURE GUIDELINES Page " of.10 Rovision s? INSTRUCTIONS CONTINGENCY ACTIONS *11. (Cont'd) 11. kpfmodulate feedwater flow rate as necessary to egutcro-and maintain SG water level in the normal levelband[ *12. Ensure the available condensate 12. inventory is adequate per figure 11-4 and 11-5. *13. Verify adequate RCS pressure 13. control via the steam genera-tors by:
a. at least one steam generator a.hbothSGwiderangelevels haswiderangelevelh15%] E15%] Then initiate cWhrough-ceoL&eg (success path HR-4 ,and aj implement success path PC 'J .
b. RCS-T teroperatures are stable g or decreasing /.
b. H RCS Tctemperatures increase ,
[5* hor greater, Then initiate __^act- W cuf % (success path HR-4) and implement suc-cesspathPCh].
  • Step Performid Continuously.
PC-If FRG- 11-171 NC2 'e N COMBUSTION ENGINEERING TITLE FUNCTIONAL EMERGENCY PROCEDURE RECOM M GUIDELINE i GUIDELINES Page 28 of 40 Revision E INSTRUCTIONS CONTINGENCY ACTIONS *14. Verify pressurizer pressure *14 H 2CS subcooling greater than l is being maintained within P-T' limits or cooldown rate the Post Accident P-T limits greaterthan[100'F/Hr),Thendo of Figure 11-1. the following as appropriate: a stop the cooldown
b. depressurize the plant using 4
/mainorauxiliary[sprayto restore and maintain pres-surizer pressure within the Post Accident P-T limits of
Figure 11-1.
l c. attempt to maintair the plant 1 in a stable pressure-tempera- .ture configuration or continue to cooldown within the limits 4 of Figure 11-1.
d. If overpressurization due to M/ charging flow Then throttle s or secure flow (refer 4
to DC-)) step 4) and manually control letdown to restore
and maintain pressurizer
 ; pressure within 'the limits
of Figure 11-1.
i 4
  • Step Perfomed Continuously.
PC-5 FRG 11-172 O -l h ^ --C3 i COMBUSTION ENGINEERING TITLE FUNCTIONAL RECOVERY GUIDELINE EMERGENCY PROCEDURE GUIDELINES Page 29 of 40 a vision ,e INSTRUCTIONS CON 11NGENCY ACTIONS *15. H the RCS fails to depressurize, 15. Then a void should be suspected,
a. voiding in the RCS may be in-dicated by any of the following indications, parameter changes, or trends:
5 i) letdown flow greater than charging flow,
11) pressurizer level increas-ing significantly more than expected while operating pressurizer spray, iii)/theRVLMSindicatesthat voiding is present in the reactorvessel[,
iv) HJTC unheated thermo-couple temperature indi-cates saturated condi-tions in the reactor vesselupperhead[, v) [ ether 9dicatient insert _ 4ere].
b. E voiding inhibits RCS de-pressurization and depressur-ization is desired. Then at-tetnpt to eliminate the voiding by:
1) verify letdown is isolated, ang (ContinuedOnNextPage)
  • S'ep Performed Continuously.
PC-fb FRG 11-173 h . . .m 0 3 - 4 COMBUSTION ENGINEERING TITLE rVNCTIONAL EMERGENCY PROCEDURE RECOVERY GUIDELINE GUIDELINES Page R of 10. Revision
  • INSTRUCTIONS CONTINGENCY ACTIONS
*15.(Cont'd) 15,
11) stop the depressur-ization, i 10d iii) pressurize and depres-surize the RCS within the limits of Figure 11-1 by operating pressurizer heaters and spray or AfSI and charging pumps.
Monitor pressurizer level -
fandthaRVLMSffor, trending RCS inventory,
c. M depressurization of the RCS is still not possible, and voiding is suspected to exist in the steam generator tubes, '
Then attempt to eliminate the voiding by: i) cool the suspected steam generator [bysteaming , and/or blowdown, and , feeding)' to condense the steam generator tube void, (Continued On Next Page) Step Performed Cor.tinuously. PC//$ FRG 11-174 -CC: 152 Ts . . 53 3 i l l 1 COMBUSTION ENGINEERING TITLE l FUNCTIONAL EMERGENCY PROCEDURE REC VEM WORINE GUIDELINES paga u of 40 Revision
  • 4 4
INSTRUCTIONS CONTINGENCY ACTIONS  ! J *15. (Cont'd) 15. ii) monitor pressurizer level 4 for trending RCS in-ventory.
d. If depressurization of the RCS is still not possible. Then
attempt to eliminate the voiding by
i) [ operate the pressurizer vent or the reactor ves-sel head vent to clear 4 trapped non-condensible - gasep[. a_nd ii) monitor pressurizer level and/ortheRVLMS)'for trending of RCS inventory. ~ i i l I 0
  • Step Performed Continuously.
PC-yk FRG 11-175 :N '.:: L . 03 i 1 COMBUSTION ENGINEERING TITLE FUNCT10NAL-  ! RECOVERY GUIDELINE EMERGENCY PROCEDURE _ GUIDELINES page 32 of ao a. vision . Acceptance Criteria for Success Path PC-5:
1. RCS Pressure Control is satisfied if:
4 Pressurizer pressure is within the Post Accident P-T limits of Figure 11-1.
2. If above criterion NOT satisfied, Then go to next appropriate RCS Pressure Control success path.
1 ! 3. If above criterion satisfied. Then go to next safety function in jeopardy.
4. If acceptance criteria for ALL safety functions are being sati:fied, Then
, go to LONG TERM ACTIONS after performing appropriate operator actions for all success paths in use. PC-4~ FRG 11-476 rru ,+-a x , u _ .a3 _ 1 l COMBUSTION ENGINEERING TITLE FUNCTIONAL REWERY GUIDEUNE EMERGENCY PROCEDURE GUIDELINES page 33 of 40 Revision
  • SUPPLEMENTARY INFORMATION: PC-[f i This section contains items which should be considered when imp,lementing EPGs
and preparing plant specific E0Ps. the items should be implemented as precau-l tions, cautions, notes, or in the E0P training program.
)
1. Do not place sy: " .ns in " manual" unless misoperation in " automatic" is apparent. Systems placed in " manual" must be checked frequently to ensure proper operation (Reference 15.34).
4
2. All available indications should be used to aid in the evaluation of plant conditions since the accident may cause irregularities in a partic-ular instrument reading. Instrument readings must be corroborated when one or more confirmatory indications are available (Reference ?5.24).
3. Continuously monitor RCS temperature and pressure to avoid exceeding a heat removal rate greater than Technical Specification Limitations, if the heat removal rate exceeds Technical Specification Limits, there may be a potential for pressurized thermal shock (PTS) of the reactor vessel (Reference 15.8), unless Post-Accident Pressure / Temperature Limits are maintained (Figure 11-1;.
t If there is a conflict between maintaining adequate core cooling and i complying with the pressure / temperature limits of Figure 11-1, then - maintaining adequate core cooling will be given the higher priority. Subcooling of 20*F has precedence over PTS considerations. 4 Solid water operation of the pressurizer may make it difficult to control RCS pressure and therefore should be avoided unless [20'F[ of subcooling cannot be maintained in the RCS (Figure 11-1). If the RCS is solid, closely monitor any makeup or draining, and any system heatup or cool-4 down, to avoid any unfavorable pressure excursions. PC-h FRG 11-177 rW N 'W' COMBUSTION ENGINEERING TITLE FUNCTIONAL EMERGENCY PROCEDURE REWW MEUNE-GUIDEL!NES Page. M. of 80 Revision #
5. Natural circulation flo'w should not be verified until the RCPs have stopped coasting down after being tripped.
6. Verification of temperature responses to a plant change cannot be accomp-lished until approximatelyh to 15)inutes following the action due to increased loop cycle times during natural circulation (Reference 15.11).
7. When RCS heat removal is conducted by natural circulation with an iso-lated steam generator, an inverted AT (i.e., Tc higher than T h) may be observed in the idle loop. This is due to a small amount of reverse heat transfer in the isolated steam generator and will have no affect on natural circulation flow in the operating steam generator loop (Reference 15.11).
8. The operator should not add feedwater to a dry steam generator if another steam generator still contains water. Re-establish feedwater only to the steam generator that is not dry. If both steam generators become dry, refill only one steam generator to reinitiate core cooling.
9. When a void exists in the reactor vessel, and RCPs are not operating, the RVLMS provides an accurate indication of reactor vessel liquid inventory.
When a void exists in the reactor vessel, and RCPs are operating, it is not possible to obtain an accurate reactor vessel liquid level indication due to the effect of the RCP induced pressure head on the RVLMS. The- . g -+4 n,;; ; m m fwa w e n. e ~."_m 4:47 d7 ec= ce di % . Infonnation concerning reactor vessel liquid inventory trending may still be discerned. However,* operators are cautioned not to
rely solely on the RVLMS indication when RCPs are operating (Ref. 15.15).
10. The operator should continuously monitor for the presence of RCS voiding and take steps to eliminate voiding any time voiding causes the heat-removal or inventory control safety functions to begin to be threatened.
Void elimination should be started soon enough to ensure heat removal and
inventory control are not lost (Reference 15.14). PC FRG 11-178 { Emf 2 " A-^3
.. .. .- . - -. - - -. , - . - . . . . . . . _ - . - _~- i a 4 l SAFETY FUNCTION: RCS Pressure Control i j SUCCESS PATH: Safety Depressurization System; PC-5 RESOURCE TREE: Tree D ! NOTE i i This success path should only be:used
in the case other' success paths have.
, failed to establish adequate-RCS pressure I control and heat removsl.- Use of this j path will result in high-levels of radio-I active contamination of the IRWST, and 3 possible elevation of the radiation levels l within containment and adjacent-_to the IRWST outside containment. This success path should be used'in conjunction with RCS and Core Heat Removal, 0---- T -' "^^n2 HR-4.
INSTRUCTIONS CONTINGENCY ACTIONS 3
*1. Open steam dumps or 1.-11 valves do not open atmospheric dumps as from the Control Room, required to use steaming locally open the valves.
of.any residual SG
inventory to reduce 8
RCS temperature-and j pressure to maximize SI pump flow. ! *2 Ensure all RCPs are 2. If the RCPs are still . 1 stopped. operating, but no SG ! feedwater inventory is
j. availablu, stop the j operating RCPs.
! *3. OReD one.or.two-Rapid 3. Depressurization gate-i valves. l *4.- Slowly open one or.two- 4. REpid Depressurization a bleed valves.- i f 4 PC-5. f . ~ . . -.. - - .- - , . . - . . - - . . - . . . . . . . . . - . . -- . ( i ! INSTRUCTIONS CONTINGENCY ACTIONS i *S. Ensure that there are 5. If there are not two SI
two SI pumps injecting,g g ,) pumps injecting into the
! into the W of' RCS for each-bleed valve . the RCS for each bleed opened, either: j- valve opened in Step 2. ! a. Start additional SI 1 pumps,. l 1 OR. i
b. Close bleed valves-1 until additional SI pumps
! can be placed in operation. ! *6.- Monitor pressurizer level j and pressure and RCS.. . temperature and adjust bleed I throttle position as required i to establish and maintain i desired RCS pressure or-PZR . level, and pressure within Post Accident P-T limits of j Figure 11-1. } *7. Establish cooling to the IRWST 4 as required, per applicable procedure. *8. When conditions will allow initiation of RCS Pressure. Control, and RCS and Core Heat Removal by another success path:
a. Establish steady state pressure conditions.
b. Close the Rapid Depressurization.
bleed valves.
c. Stop the operating SI pumps.
d. Initiate RCS and Core heat 8.d If,the use of the removal by the selected success path, selected success path is'not
= e. Close the Rapid Depressurization- successful, reenter gate valves, heat removal per HR-4, and RCS
f. Secure cooling.to the IRWST Pressure Control when no longer required. per PC-5.
PC-5 ._________m _ _ . _ . . _ _ . _ . _ ... __ , , _ , , .- . .. a ,.. _ . ,.. _ i COMBUSTION ENGINEERING TITLE FUNCTIONAL RECOVERY GUIDELINE EMERGENCY PROCEDURE.
I GUIDELINES page 37 of 4o Revision E
.r i Acceptance Criteria for Success Path PC-y:
1. RCS Pressure Control is satisfied if:
Psg ~t y 3< peg ,s A uea
a. L p rc 0 ", L 1 'scr pii350rc i; 1000 tha" 2340 ptft and ennstant or decreasing ,
and
b. pressurizer pressure is within the Post Accident P-T limits of Figure 11-1f.II
2. If above criteria NE satisfied, Then go to CONTINUING ACTIONS FOR RCS
! PRESSURE CONTROL.
3. I above criteria satisfied, Then go to next safety function in jeopardy, s
4. If acceptance criteria for ALL safety functions are being satisfied,- Then t
go to LONG TERM ACTIONS after perfonning appropriate operator actions for ~ all success paths in use. I t i 5D$ 'cl e f r4 mritdEco (1)RCS subcocling >f20*Ff is NOT applicable when [PCPJ!s] are open. PC-(9 +  ; FRG 11-181 C? M1 - 4 COMBUSTION ENGINEERING TITLE FUNCTIONAL RECOVERY GUIDELINE EMERGENCY PROCEDURE
GUIDELINES Page 38 of do Revision 87 SUPPLEMENTARY INFORMATION: PC-f3 d
This section contains items which should be considered when implementing EPGs and preparing plant specific E0Ps. The items should be implemeated as precau-tions, cautions, notes, or in the E0P training program. }
1. Do not place a system in " manual" unless misoperation in " automatic" is apparent. Systems placed in " manual" must be checked frequently to ensure proper operation (Reference 15.34).
2. All available indications should be used to aid in evaluation of plant conditions since the accident may cause irregularities in a particular instrument reading. Instrument readings must be corroborated when one or more confirmatory indications are available (Reference 15.24).
1
3. Solid water operation of the pressurizer may make it difficult to control j RCSpressureandthereforeshouldbeavoidedunless/20"F?'ofsubcooling cannot be maintained in the RCS (Figure 11-1). If the RCS is solid,-
2 closely monitor any makeup or draining and any system heatup or cooldown to avoid any unfavorable pressure excursions. 4 Continuously monitor RCS temperature and pressure to avoid exceeding a heat removal rate greater than Technical Specification Limitations. If the heat removal rate exceeds Technical Specification Limits, there may be a potential for pressurized thennal shock (PTS) of the reactor vessel (Reference 15.8) unless Post Accident Pressure /Temierature Limits are i maintained (Figure 11-1). PC-f(f 5 FRG 11-182 4 EMS ^ L. 03 COMBUSTION ENGINEERING TITLE FUNCTIONAL RECOVERY GU10ELINE EMERGENCY PROCEDURE GUIDELINES Page " of 40 Revision .m__ If there is a conflict between maintaining adequate core cooling and complying with the pressura/ temperature limits of Figure 11-1, then maintaining of adequate core cooling will be given the higher priority. Subcooling of 20*F has precedence over PTS considerations, r e tusi ten par'%*
5. /Monitorcench+ankparameterssinceanysustainedoperationofthe PORVs m y bur;t the M ak's r"pture # scvh 6. k. % h u s e a b ^
s g .o cm -ema %~ L e s,
  • I P w 5 T~.
PC-6 FRG 11-183 4L':15T203 l COMBUSTION ENGINEERING TITLE FUNCTIONAL RECOVERY GUIDELINE EMERGENCY PROCEDURE GUIDELINES Page ao of 40 Revision M CONTINUING ACTIONS FOR RCS PRESSURE CONTROL If the acceptance criteria are not satisfied, then RCS Pressure Control is still in jeopardy. The operator must continue to attempt to establish RCS Pressure Control while pursuing other jeopardized safety functions. Evaluate further actions based on the following considerations: a) Rate of change of pressure and potential for damage to the RCS, b) The urgency of other jeopardized safety functions, c) The feasibility of restoring function to a success path by: i) restoring the vital auxiliaries necessary to operate components or systems in the success paths ii) manual operation of valves iii) use of alternate components to implement'a success path iv) depressurizing/ cooling the RCS to increase or establish SIS flow. I FRG 11-184 CEP152 - Revr-43 COMBUSDON ENGINEERING UTLE FUNCTIONAL RECOVERY GUIDELINE EMERGENCY PROCEDURE GUIDELINES p.g. _L.of 69 Revision
  • SAFETY FUNCTION: RCS and Core Heat Removal SUCCESS PATH: Forced Circulation, No S!S Operation; HR-1 RESOURCE TREE: Tree E a INSTRUCTIONS C_0,NTINGENCY ACTIONS
*1. Borate the plant as necessary 1. while cooling down in order to maintain shutdown margin per Technical Specification limits (refer to RC-2 and RC-3). Allow pressurizer level ,to loweg 2. (maintaininglevel to 70 70 while cooling down n brder to aid the depressurization.
3. Perfom a controlled cooldown 3. H the condenser or turbine in accordance with Technical bypass system NE available, Specifications by operation of Then cooldown via the atmospheric
.. b ._ .t Atd dump valve (s). the twb4ne bypass system. *4. Ensure pressurizer pressure *4 H RCS.subcooling greater than is being maintained within P-T limits or cooldown rate . the Post Accident P-T limits of greater than [100*F/Hr], Then do Figure 11-1. the the following as appropriate:
a. stop the cooldown,
b. manually control pressurizer spray to restore and maintain pressurizer pressure within the limits of Figure 11-1, (ContinuedOnNextPage)
  • Step Perfomed Continuously HR-1 FRG 11-218 'ux-43rN G3
COMBUSTION ENGINEERING TITLE FUNCTIONAL RECOVERY GUIDELINE EMERGENCY PROCEDURE GUIDELINES p.g. 2 og.19. Revision # INSTRUCTIONS CONTINGENCY ACTIONS 4 *4 (Cont'd)
c. attempt to maintain the plant in a stable pressure-temperature configuration or continue to cooldown within the limits of Figure 11-1,
d. M overpressurization due to charging flow, Then throttle or secure flow and manually control letdown to restore and maintain pressurizer pressure within the limits of Figure 11-1.
5. H indications of steam 5. If NOT, Then go to step 14 generator tube leakage Then go to step 6.
6. Verify RCS hot leg temperature 6. Cooldown the RCS to a hot leg islessthan[525'F]inorder temperatureof'.essthan[525'F),
to minimize the possibility of (refer to step 3). lifting SG safeties after 4 isolating a SG. Step Performed Continuously HR-1 FRG 11-219 CtE-152de. 03 coMBUSTON ENGINEERkG TITLE runCT:osa EMERGENCY PROCEDURE """"'""* GUIDELINES p.g. 3 of 69 a. vision se f INSTRUCTIONS CONTINGENCY ACTIONS \
7. Determine which SG has the tube 7.
leakage by performitig the following: j u,I,b.q[j
a. sample SGs[for activity,
b. [ monitor main steam piping for activity /,
c. monitor steam generator levels, cL [nthar-plant Stie~Bfic indicat4 ens,.47tsert 1 eri:].
8. When RCS hot lag temperature is 8.
less than (525'F], T_ hen isolate the steam generator with the higher attivity, higher radiation levels, or increasing water level by performing the fM1owing:
a. close the MSIV, a. locally close MSIV,
b. verify closed, or close the b. locally close MSIV bypass MSIV bypass valve, valve,
c. [ raise the setpoint for the c./MaintaintheaffectedSG ,
associated ADV toh50 psid, pressured 950ps12by: i) Manual operation of the ' associated ADV
11) local operation of the associatedADV[
(Continued On Next Page) (Continued On Next Page)
  • Step Perfonned Continuously HR-1 FRG 11-220, Cfitd P M 4
COMBUSTION ENGINEERING TN FUNCTIONAL. EMERGENCY PROCEDURE RE EM M NE GUIDELINES p.g. 4 _or 69 a. vision
  • INSTRUCTIONS CONTINGENCY ACTIONS
8. (Cont'd) 8. (Cont'd)
d. close the main feedwater d. locally close main feed-isolation valve, waterisolationvalvg
e. fclose the ad ka he'gq e.[locallyYloYhisolation feedwater isolation valve (s) and steam driven pump valve (s) including the i steamsupplyvalve)',
steam driven pump steam supply-valve associated with the steam generator beingisolatedT,
f. isolate steam generator f. locally isolate SG blowdown, blowdown, g, close vents, drains, g. locally isolate vents, exhausts, and bleedoffs drains, exhausts, and from the steam system and bleedoffs.
turbine building sumps, ' H m het p_13nt specifi % insar4-herek
9. Verify the correct SG is 9. .I_f the wrong SG was isolated, isolated by checking the Then unisolate that SG and following: enichte thtt SG and isolate
a. SG samples for activity and the affected SG per step 8.
radiation levels,
b. possible SG level increase.
  • Step Perfonned Continuously HR-1 FRG 11-221 09 + 7 ; A 3' l
COMBUSTION ENGINEERING TITLE FuNCTIONn REC VERY GUIDELINE EMERGENCY PROCEDURE GUIDELINES p.g. s of 69 n. vision u INSTRUCTIONS CONTINGENCY ACTIONS
10. Decrease and control RCS 10, pressurebyusing4[O3[g gp A aur414 e y spray,'or operation am of charging and letdown to maintain pressurizer pressure within the following criteria:
a. lessthan(1000 psia]
a,Lnd
b. approximately equal to isolated SG pressure
(+ 50 psi), and c, within the P-T limits of Figure 11-1 (refer to step 4).
11. Maintain the isolated steam 11. Restore the isolated steam generator level within the generator level to the indicated indicated rarige by the rangebythefollevig following: a. draining. to the Gedicsciive
a. f.e.riodicdrainingt.othe e system [ ov du.mr> Nd
  • bh
.n m w _ ... a --fr4dioactin as,te system /. condenser, and b. reduce RCS pressure below
b. dump steam from the affected the isolated steam generator steam generator to the pressure, condenser. mt--
c.[if,iime and circunoton;c: -- pe m4t, Then in3toli snubber
p. inning pei pleut speciric orneedorec}.
  • Step Performed Continuously HR-1 FRG 11-222 t%51'nh4 l
COMBUSTION ENGINEERING TITLE FUNCTIONAL RECOVERY GU!DELINE EMERGENCY PROCEDURE GUIDELINES p.g. e of 69 a. vision m INSTRUCTIONS CONTINGENCY ACTIONS *12. Sample the condensate and other 12. connecting systems, including turbine building sumps, for < activity. *13. Monitor [turbineandauxiliary) 13. If,radiationmonitorreadings building ventilation radiation are excessive, Then take monitors and any other applicable corrective actions in radiation monitors, accordance with Technical Specifications. *14. H indications of excessive 14 If NOT, Then go to step 20. steam demand, Then go to step 15.
15. Detemine the affected SG 15.
(cr most affected SG) by comparison of the following: 5 a. SG steam pressures,
b. RCS cold leg temperatures, c.
SG levels. '
16. E excessive steam demand 16. Go to step 17.
stopped due to MSIS, Then go to . step 20. HR-1 FRG 11-223 M *"2 COMBUSTION ENGINEERING TITLE FUNCTIONAL. REC VED WI EUNE EMERGENCY PROCEDURE GUIDELINES pege 7 of_69 Revisiori
  • INSTRUCTIONS CONTINGENCY ACTIONS
17. Isolate the most affected steam 17.
generator by perfonning the following:
a. close the MSIV, a. locally close MSIV,
b. verify closed, or close the b. locally close MSIV bypass MSIV bypass valve, valve, c./close,orverifyclosed c / locally close ADV(s)[,
the atmospheric dump valves (s) and align to the manualmodeJ.
d. close the main feedwater d. locally close main feedwater isolation valve, isolation valve,
e. Jclose the 'annusy feeb,at r e. [ locally close aM11TII-y~. -
isolationvalve], feedwater_isolationvalve],
f. close vents, drains, exhausts f. locally close vents, drains, and bleedoffs, exhausts, and bleedoffs.
1 [other_.phnt-speci fic i tems firstrt~fieR
18. Verify the correct SG is 18. If the wrona SG was isolated, Then isolated by checking the unisolate that SG and isolate the following: most affected SG per step 17. ,
a. SG steam pressures,
b. RCS cold leg temperatures,
c. SG levels.
  • Step Perfonned Continuously HR-1 FRG 11-224 CE2' 152- % 63
COMBUSTION ENGINEERING TITI E FUNCTION 4 RK WRY GU RINE EMERGENCY PROCEDURE -, GUIDELINES Page 8 of 69 Revision es INSTRUCTIONS CONTINCENCY ACTIONS a
19. Stabilize RCS temperature 19.
by controlled steaming of the unisolated SG using the following (listed in preferred order :
a. ,
ypass , system or
b. atmospheric dump valve (s).
*20. Ensure the available conden- 20. sate inventory is adequate per Figures 11-4 and 11-5. .s t \ *21. Maintain SG levels (or 21. H [meh-and aux 114ary-} fee.dwater Si y h unisolated SG level) in the are lost, Then do .he following: nonnal band using / main or 6fady e a. stop all RCPs, avv414_ary7feedwater, b. isolate SG blowdown, secondary 0 *"7] sampling, and any non-vital steam discharge, , ,
c. attempt to restore [ main ard/or
_ aux 11 %y-} feedwatersy%. d. [attempttoestablishan , alternate, low pressure- fe,edwater source to at least one SCy).
  • Step Perfenned Continuously HR-1 FRG 11-225 @- 23 l
^ COMBUSTION ENGINEERING TfTLE FUNCTIO R EMERGENCY PROCEDURE RECOW H GUIDEU "E GUIDELINES Page 9 of 69 Revision
  • INSTRUCTIONS CONTINGENCY ACTIONS
*22. Verify adequate RCS heat 22. removal via the SGs by: a. [atleastoneSGhaswide a. fgbothSGwiderangelevels rangelevel>{5%]. bre (15% Then go to RCS and and Core Heat Removal success path
b. temperatures HR-4 :-d ' 't'ete
[RCST e arestableordecreasingf. -rJ-:m;. u-  ? a; ;). - E b,/MRCST c terr? era tures increase 5'F or greater, Then - go to RCS and Core Heat Removal r<- -ass path HR-4 Wald4M,e ody e u;5 ::;;;)'. i , .i HR-1 FRG 11-226 'O:W S--M - . _ - _ - - - - -----.--o COMBUSTION ENGINEERING TITLE FUNCT10NAL-RECOVERY GUIDELINE EMERGENCY PROCEDURE GUIDELINES p.g. 10 of .a. a. vision
  • INSTRUCTIONS CONTINGENCY ACTIONS o<u or<~ns-
*23. [Lf mai or :a444uy feedwater"I'les 23. af4s restored, Then 40-the fel!0 win; te pr4 vent SG feed riag d: mage 4
a. " SG e- n i
%e.w-.ater1sve th - T- B en-etop- A. . V_11_- f 5 <1 gg , A 4u
r. ant-feet --pumpSr pa r t $p. Mig fe:torcAlevel, en 64 r-i m , ,, G - l e e l n. 6 ,e no al-band, 6 M. A. \ k '40
! b. -IT SuMaturhi it bricw - bd#"" N , the-f*: grin 97-Th[-do the u s.n 34 - ferMtsTtM / itsa<^ g ,7_; 4-}-etop-red / N ed t-feedwater-pumps er.d mit-feedwater
flow ret.c U 150 p per-affeet I \
SG u tit an incre se--in SG 1evelJs , observed, vr u n i, ' l - ) co 4aucui icedwat r-1 tow ! t e-SG-has-been lettined Ter five l W -ft) dulate feedwatepflow rate neces y to restore. j and maing SG water level in the normal b d[.
  • Step Perfonned Continuously HR-1
-FRG 11-227 CE' 'f? -v v3 13MBUSTON ENGINEERING TITLE FUNCTIONE RECOMRY GUIDELINE EMERGENCY PROCEDURE
GUIDELINES p.g. 11 of 69 R.visio,i w ACCEPTANCE CRITERIA FOR SUCCESS PATH HR-1
9
1. RCS and Core Heat Remcval is satisfied if:
I
a. At least one SG (or the unisolated SG) has level:
 ; i) within the normal level band with feedwater available to maintain level. Of n.4 lwL..aem: ii) being restored by feedwater flow ^ [150 gp4 d J b. TH-T c",10*FJ,andnotincreasing i .nr d
c. T,y, <[5458F]andnotincreasing a_n_g,
d. RCSsubcooling.3/20*Ffby/T gRTDsj
, and e, fNoreactorvesselvbingasindicatedbytheRVLMSf.
2. M above criteria NOT satisfied, Then go to next appropriate RCS and Core Heat Removal success path.
l
3. M above criteria satisfied, Then go to next safety function in jeopardy.
4 M acceptance criteria for ALL safety functions are being satisfied, Then go to LONG TERM ACTIONS after perfonning appropriate operator actions for all success paths in use. HR-1 FRG 11-228 QM +4W,03 COMBUSTION ENGINEERING TITLE FUNCTIONAL RECMERY GUIORINE 4 EMERGENCY PROCEDURE GUIDELINES - Page 22 of 69 Revision 03 SUPPLEMENTARY INFORMATION: HR-1 This section contains items which should be considered when implementing EPGs
and preparing plant specific E0Ps. The items should be implemented as precautions, cautions, notes, or in the E0P training program.
1. Do not place system in " manual" unless misoperation in " automatic" is apparent. Systems placed in " manual" must be checked frequently to ensure proper operation (Reference 15.34).
2. All available indications should be used to aid in the evaluation of plant conditions since the accident may cause irregularities in a 4
particular instrument reading. Instrument readings must be corroborated when one or more confirmatory indications are available (Reference 15.24).
3. Continuously monitor RCS temperature and pressure to avoid exceeding a heat removal rate greater than Technical Specification Limitations. If the heat removal rate exceeds Technical Specification Limits, there may be a potential for pressurized thennal shock (PTS) of the reactor vessel (Reference 15.8), unless Post Accident Pressure / Temperature Limits are maintained (Figure 11-1).
4 If there is a conflict between maintaining adequate core cooling and . complying with the pressure / temperature limits of Figure 11-1, then i maintaining of adequate core cooling will be given the higher priority. Subcooling of 20*F has precedence over PTS considerations. , 5. Solid water operation of the pressurizer may make it difficult to control RCS pressure and therefore should be avoided unless[20'F7of subcooling j cannot be maintained in the RCS (Figure 11-1). If the RCS is solid, closely monitor any makeup or draining and any system heatup or cooldown to avoid any unfavorable pressure excursions. HR-1 FRG 11-229 CEN-152 Rev. 03 COMBUSTION ENGINEERING ' TITLE FUNCTIONAL EMERGENCY PROCEDURE RECOVERY GUIDELINE GUIDELINES Page 11 of 69 Revision E 6. The operator should not add feedwater to a dry steam generator if an steam generator still contains water. j Re-establish feedwater only to the steam generator that is P.ot dry. If both steam generators become d then refill only one steam generator to reinitiate core cooling. 7 If there is a conflict between isolating a SG (e.g., due to indications of steam generator tube leakage or excessive steam demand) and maintaining adequate heat removal, then maintain RCS heat removal vi least affected SG. At least one SG should always be available for heat 1 removal if at all possible. I s f a 4 I i l l . HR-1 i i FRG ~11-230 i ! CCN I *, COMBUSTION ENGINEERING ' TITLE EMERGENCY PROCEDURE P FUNCTIONAL - RECOVEM GUIDRINE GUIDELINES 1 Page lt of 39 SAFETY FUNCTION: Revision *" SUCCESS PATH: RCS and Core Heat Removal RESOURCE TREE: Natural Circulation, No SIS Operatio n; HR-2 Tree E INSTRUCTIONS ' *1. CONTINGENCY ACTIONS Verify natural circulation flow 1. in at least one loop by ALL of Ensure proper control of steam the following:
a. generator feeding and steaming, loop ai (TH-Tc ) less than and RCS inventory and pressure.
b. nonna%H powesT[W* hot and cold leg temperatures constant or decreasing, c. RCS subcooling at least (20*F[ based on { average CET[ , tempera ture, 1 d. I no abnormal difference (>10*F) betweengTRTDs and(CETs/. *2. Evaluate the need and ( 2. desirability of restarting RCPs . If RCP operation NOT desired, h Consider the following: T_ hen go to step 8. a. adequacy of RCS and r. ore j 4 heat removal using natural circulation, - b. existing RCS pressure and tempera tures, c. the need for main pressu-izer spray capability, d. the duration of-{.CCW3 colgg \40.ite interruption to RCPs, e. RCP seal staging pressures and temperatures. i
  • , .
  • Step Performed Continuously FRG HR-2 11-231 C@t' WK C3 ,
1 COMBUSTION ENGINEERING TITLE FUNCTIONAL RECOVERY GUIDELINE EMERGENCY PROCEDURE 4 GUIDELINES p.g. ts. of 69 Revision M INSTRUCTIONS CONTINGENCY ACTIONS 1 '3. Determine whether RCP restart 3. If RCP restart criteria NOT criteria are met by M of satisfied, Ther, go-60 step 8. the following:
a. electrical power is avail-
~ " able to the [RCP bus),
b. RCPauxiliariesi{CC@ t tomaintainJseal injection),bearingand motor cooling are operating, and there are no high temperature alanns on the selected RCPs,
c. at least one steam generator is available for removing heat from the RCS (ability for feed and steam flow),
d. pressurizer level is
' greaterthan[k]and not decreasing,
e. RCS subcooling at least-f20*Fpbasedont{ average CET) temperature (Figure ,
4 11-1), f. /other criteria satisfied per RCP operating instructions [.
  • Step Perfonned Continuously HR-2 4
FRG 11-232 CEE-162-Revv=03 COMBUSTION ENGINEERING TITLE FUNCTIONAL RECOVERY GUIDELINE
EMERGENCY PROCEDURE GUIDELINES Page 16 of 69 Revisfori 6-INSTRUCTIONS CONTINGENCY ACTIONS
'4 H RCP restart desired and 4. Go to step 8. l restart criteria satisfied, Then do the following:
a. Start 9H-eve 44able r % e, gc,  %, 56 un u u,l.u, e gr3 p m f s , u , ,15] p ~ r~* i 5 charging pam y pf,%,, , . , de in s emo N pressuro lass than 9eet L h- ryint
  • l'
- 'I [1300 psla h Ihen HPSI E b er$ Q pumptr-eay-be4perated. * "" ' U O"D is [* f"
b. start one RCP in each loop,
c. [ensureproperRCP operation by monitoring RCPamperageandNPSHJ,6fj [
! d. operate charging (and F/SI) pumpsuntilpressurge,rg") level greater than [ hrs (and)tSI tennination criteria met, Refer to step 5). *S. H W S! pumps are operating, 5. Continue ((S1pumpoperation. Then they may be throttled or stopped, one pump at a time, if ALL of the following are satisfied: i
a. RCS subcooling at least
[20*F)basedonfaverage CET) temperature (Figure 11-1), (ContinuedOnNextPage)
  • Step Performed Continuously HR-2 FRG 11-233 C G id i h 5=C3
U COMBUSTION ENGINEERING TITLE FUNCTIONAL PEC0VERY GUIDELINE EMERGENCY PROCEDURE GUIDELINES PaES 17 of 69 Revision
  • _
INSTRUCTIONS CONT'NGENCY ACTIONS , *5. (Cont'd) 5.
b. press ,1,zgr level is greater than and not decreasing, 4
c. at least one steam generator is available for removing heat from the RCS (ability for feed and steam flow),
d. ftheRVLMSindicatesaminimum level at the top of the hot legnozzlesf.
*6. Jfcriteriaofstep5cannotbe 6. maintained after $5I pumps throttled or stopped, Then $51 pumps must be restarted and full WS! flow restored. f f *7. IfatleastoneRCPhasbeen 7. Continue with the actions of restarted in a loop with a SG this success path, having feed and steam flow capability, Then go to HR-1, Forced Circulation, No SIS Operation. l r
  • Step Performed Continuously HR-2 FRG 11-234 J t* +tr Rw_Ql.
COMBUSTION ENGINEERING TIT 1.E FUNCTIONAL RE W EM GUI E INE EMERGENCY PROCEDURE GUIDELINES Page 18 of 69 Revision
  • INSTRUCTIONS CONTINGENCY ACTIONS
*8, Borate to plant as necassary 8. while cooling down in order to maintain shutdown margin per Technical Specification limits (refer to RC-2 and RC-3).
9. Allow pressurizer level to lower 9.
l (maintaininglevel L-tiSP " o while cooling down n order r.?o&7 to aid the depressurization.
10. Perform a controlled cooldown 10. M the condenser or turbine in accordance with Technical bypass system NE available, Then Specifications by operation of cooldown via the atmospheric dump the turbine bypass system. valve (s).
, *11, Ensure pressurizer pressure *11. H RCS subcooling greater than i is being maintained within the P-T limits or cooldown rate Post Accident P-T limits of greater than [100'F/Hr], Then do l Figure 11-1, the following as appropriate: a, stop the cooldown,
b. manually control pressurizer ,
spray to restore and maintain pressurizer pressure within the limits of Figure 11-1, (Continued On Next Page) I
  • Step Perfortnea Continuously HR-2 k
FPS 11-235 W XM COMBUSTION ENGINEERING TITLE FUNCTIONAL REC W M M INE EMERGENCY PROCEDURE GUIDELINES p g.19 of 69 a. vision .r3 INSTRUCTIONS CONTINGENCY ACTIONS
11. *11. (Cont'd)
c. attempt to maintain the plant in a stable pressure-temperature configuration or continue to cooldown within the. limits of i
Figure 11-1, I d. E overpressurization due to 4 charging flow, Then throttle or secure flow and manually control letdown to restore and maintain pressurizer-press'ure within the limits of Figure 11-1. *12. M indications of steam generator 12. If NOT, Then go to step 21. tube leakage, Then 90 to step 13.
13. Verify RCS hot leg temperature 13. Cooldown the RCS to a hot leg i is less than [525'F] in order to temperatureoflessthan[525'Fl.
minimize the possibility of (refer to step 10). lifting SG safeties after isolating a SG. , d i i
  • Step Perfonned Continuously HR-2 FRG 11-236 C M"%+A3 3
COMBUSTION ENGINEERING TITLE FUNCTIONAL RECOVERY GUI!;ELINE EMERGENCY PROCEDURE GUIDELINES p. :._22. of .51. R. vision _fra A INSTRUCTIONS CONTINGENCY ACTIONS 14 Determine which SG has the tube 14. leakage by perfonning the following: y % r.rm s er l-)
a. sample SGs j for activity,
b. /monitormainsteampiping 4 foractivity[,
c. monitor steam generator levels, dM4ther- "la n+ "4 indwtiens.Mmer2 hese},
15. When RCS hot leg temperature is 15.
less than [525'F], Then isolate I 4 the steam generator with the higher activity, higher radiation ] levels, or increasing water level 4 by perfonning the following:
a. close the MS!V, a. locally close MSIV, b, verify closed, or close the locally close MSIV by-b.
MS!V bypass valve, pass valve,
c. [raisethesetpointforthe c. [ Maintain the affected SG
associatedADVto[950 psia], pressured 50pshby
.
1) manual operation of the associated ADV ii) local operation of the associated ADV]
(Continued On Next Page) (Continued On.Next Page)
  • Step perfonned Continuously HR-2 FRG 11-237 -0EN % c E 3 -
COMBUSTION ENGINEERING TITLE FUNcT!oNAL EMERGENCY PROCEDURE WW MRINE GUIDELINES p.g. 21 og _6, a vision a 4 INSTRUCTIONS CONTINGENCY ACTIONS
15. (Cont'd) 15. (Cont'd)
d. close the main feedwater d. locally close main feed-i isolation valve, water isolation valve, l e. fciose thi d EAI$IE ., ' ' e. [ locally close A M Tso W '
feedwater isolation valve (s) lation valve (s) and steam including the steam driven driven pump steam supply pump steam supply valve valve), assocfated with the steam generatorbeingisolated[, s f. isolate steam generator f. locally isolate SG blow-blowdown, down.
g. close vents, drains, exhausts, g. locally isolate vents, drains, and bleedoffs from the steam erhs"sts, and bleedoffs. I system and turbine building sumps, I h; [ ether p hnt spect'fc .Lem -
insert imrd.
16. Verify the correct SG is isolated 16. E the wrong SG was isolated by checking ,the,fo},lowJng,;g Then unisolate that SG and
a. SG samples, for activity and isolate the affected SG per -
radiation levels, step 15. b, possible SG level increase. I I ,c
  • Step Performed Continuously HR-2 FRG 11-238 TdL32 5:43 i
, . . - . . . , ~ . l COMBUSTK)N ENGINEERING TITLE FUNCT:0NAL Rtc veny cuiott se EMERGENCY PROCEDURE GUIDELINES Page 22 of 69 Revision
  • d INSTRUCTIONS CONTINGENCY ACTIONS
17. Decrease and control RCS 17.
pressure by using main or auxiliary spray, or operation of charging and letdown to maintain pressurizer pressure within the following criteria: l a. lessthan[1000 psia] 3D.$ i b. approximately equal to isolated SG pressure 3 (+ 50 psi). [ d
c. within'the P-T limits of Figure 11-1 (refer to l step 11). .
*18. Maintain the isolated steam 18, Restore the isolated steam , generator level within the generator level to the indicated indicated range by the rangebythefollow{ng:, , g y , following: a. draining ',o the bedicactivc
a. Periodic draining to the iu . ws .n ms.s y.~.4 wette system)'c' d-*P Q E"
-Eradieecth: este system). y b condenser, . and b. reduce RCS pressure below b, dump steam from the affected the isolated steam generator steam generator to the pressure,
condenser. ._aad-.
t [J# time and cirenmtinets pM t, Then--ins t: : "Abee pinnia; per p':nt--. W c pro: dur::]-
  • Step Perfc.med Continuously HR-2 FRG 11-239 C'E :MF
COMBUSTION ENGINEERING TITLE FUNCTIONR j REC WRY GUI EUNE j EMERGENCY PROCEDURE GUIDELINES p.g._21 of 69 Revision .ditL INSYRUCTIONS CONTINGENCY ACi!ONS *19. Sample the condensate and other 19. connecting systems, including turbine building sumps, for activity, i l *20. Monitor [ turbine and auxiliary] 20. H radiation monitor readings building ventilation radiation are excessive, Then take
monitors and any other applicable corrective actions in accordance radiation monitors, with Technical Specifications.
21. H indications of excessive 21. If NOT, Then go to step 27.
steam demand, Then 90 to step 22.
22. Detennine the affected SG 22.
, (ormostaffectedSG)by comparison of the following:
a. SG steam pressures,
b. RCS cold leg temperatures,
c. SG levels.
23. E excessive steam demand 23. Go to step 24. -
, stopped due to MSIS, Then go to step 27. 1
  • Step Performed Continuously HR-2 FRG 11-240 IE '.5: ^;. 03
CCMBUSTION ENGINEERING TITLE ruscTIONAL "CMM GUI ELINE EMERGENCY PROCEDURE GUIDELINES Page 24 of f1 Revision:G!t._ INSTRUCTIONS CONTINGENCY ACTIONS < 24 Isolate the most affected 24 steam generator by perfoming , the following: a, close the MSIV, a, locally close MSIV,
b. verify closed, or close b. locally close MSIV bypass the MSIV bypass valve, valve, c.[close,orverifyclosed c. [ locally close ADV(s)],
the atmospheric dump valve (s) and align to the manualmode/,
d. close the main feedwater d. locally close main feedwater isolation valve, ., g * # isolation valve,
e. [close the a N N ary feedwater T e. [locallyclose-aeONE isolationvalve/, feedwater isolation valvep f, close vents, drains, exhausts f. locally close vents, drains, and bleedoffs, exhausts, and bleedoffs.
l g. [other plant specific items inserthere].
25. Verify the correct SG is 25. I,f the wrong SG was isolated,
, isolated by checking the Then unisolate that SG and following: isolate the most affected SG -
a. SG steam pressures, per step 24.
b. RCS cold leg temperatures,
c. SG levels.
1
26. Stabilize RCS temperature by 26.
, controlled steaming of the unisolated SG using the following (listedinpreferredorder): (Continued on next page) HR-2 FRG 11-241 /W;"~ECLJ COMBUSTK)N ENGINEERING TITLE FUNCTION 4 EMERGENCY PROCEDURE GUIDELINES Page 3.1 of 69 Revision W INSTRUCTIONS CONTINGENCY ACTIONS
26. (Cont'd)
a. turbine bypass system or
b. atmospheric dump valve (s).
*27. Ensure the available condensate 27. inventory is adequate per Figures 11-4 and 11-5. *28. Maintain SG levels (or unisolated *28. If [eettr ana aux 1 Mecy}- feedwater is SG level) in the nomal band an lost, Then do the following: using {4a4n-+ratix444ary).o.g mW a. stop all RCPs, feedwater/ s h , b. isolate SG blowdown, 3 secondary sampling, and any non-vital steam discharge, C. attempttorestoreimala and/ci ou ilier y feedwater,
d. [attempttoestablishan alternate, low pressure feedwater source to 'at least oneSG/.
*29. y_eri ft adequate RCS heat removal 29. via the SGs by:
a. a. II_f fboth SG wide range levels
[at least one SG has wide range level S51], are[15%, Then,go to RCS and and Core Heat Removal success path
b. RCS T temperatures c
HR-4 M *-'t h t: :::: t"e u ? - arestableordecreasingf. 47
  • Step Performed Continuously HR-2 FRG 11-242 C" "' " J3 1
COMBUSTION ENGINEERING TITI E FUNCTIONE REC W H GUI EU NE EMERGENCY PROCEDURE l GUIDELINES Page 26 og _69 Revisiori 03 I ) INSTRUCTIONS CONTINGENCY ACTIONS *29. 29. (Cont'd) 9L l
b. [HRCST temperatures i increase 'F)orgreater,Then go to RCS and Core Heat Removal success path HR-4 and
, 1-2t'M_.;--th..;h;;;!'.[. *30. H ea!" ar auxi' f ary- feedwat r 30.
i restored, Then.do_.the owing -te prevent-SG-fee *3c, I f f,,a es,tu i
  • r
  • A
  • A '-
N g pp. loce. 59 les tl k
a. h,fsnwater l a vel-4 s bove aQ,
, b feed _r4n9T-Then-7 top v d feedwater* r k 1AsW " ' res1rionit re/ SG level. Pd - ia+=4n 6g tvw i nk i n SG 'e\tel ifHhe (i uaa i Talid , s/q b.etin th
b. .E SC-ha+arlau ' is below ngml ban d, the-fee u\ i i ng , un/en~do7he" fol4ew  :
1) stan hedn ant ' 4eedwater
\ peps en tilitt reeawater ' \ finw roto-MS-gpm-per , affect 'E ent41-an tacu ase t I v^' irLSG is OL>ervea, or'- a until enn non"e #:06:ter h 'G iia. Drin
maiJ tatiied re, five minuw
) .t4-) mo ulate fee ater flow r te as neces fry to rester - 4 maintain SG water level 1 n the nonnal bandf.
  • Step Performed Continuously HP -2 FRG 11-243 CUi '5: R 03
i COMBUSTION ENGINEERING TITLE rusCT!oNAL
EMERGENCY PROCEDURE "E***'""'
GUIDELINES Page 22. of .1L Revision
  • INSTRUCTIONS CONTINGENCY ACTIONS 1
*31. M the RCS fails to 31. depressurize, Then a void should be suspected.
a. voiding in the RCS may be indicated by any of the following indication.,
parameter changes, or trends: i) letdown flow greater than I charging flow,
11) pressurizer level increasing signi-ficantly more than expected while operating pressurizer spray, iii)[theRVLMSindicatesthat voidir.g is present in the reactorvessell, iv)[HJTCunheated thermocouple temperature i
indicates saturated conditions in the reactor vessclupperheadf, . %therindications-4nsert kreh-(Continued On Next Page) 4
  • Step Performed Continuously HR-2 4
FRG 11-244 CL J~ 2 " : 33" COMBUSTION ENGINEERING TITLE FUNCTIONAL RECOVERY GUl0ELINE EMERGENCY PROCEDURE __ GUIDELINES p.se 28 of 69 Revision fEL. J INSTRUCTIONS CONTINGENCY ACTIONS *31. (Cont'd) 31. I
b. If, voiding inhibits RCS ,
depressurization and depressurization is desired,
Then attempt to eliminate the voiding by
i) verify letdown is i isolatad, and ii) stop the depressurization,
~ 3.n_,f iii) pressurize and depres-surize the RCS within the limits of Figure 11-1 by operating pressurizer heatersandsprayor$SI and charging pumps. Monitor pressurizer level d'andtheRVLMSlfor trending RCS inventory. (Continued On Next Page) -
  • Step Performed Continuously HR FRG 11-245 CN:4 ^ r.~14
k COMBUSTION ENGINEERING TITLE ruaCT!nNAL RECOM U WIDRINE EMERGENCY PROCEDURE GUIDELINES Page 22. of 69 Revision $* INSTRUCTIONS CONTINGENCY ACTIONS *31. (Cont'd) 31.
c. H depressurization of the RCS is still not possible.
a_nd n voiding is suspected to exist in the steam generator 'Jbes, Then 6ttempt to eliminate the voiding by:
1) cool the suspected steam generator (by steaming '
and/or blowdown, and, feeding) to condense the . steam generator tube void, ii) monitor pressurizer level for trending RCS inventory. i d. If depressurization of the RCS
is still not possible, Then attempt to eliminate the voiding by:
l i) operatethekpressurizer vent or thf reactor vessel head vent to clear trapped , non-condensible gases, a,nd ii)monitorpressurizee level l (hnd/ortheRVLMSffor trending of RCS inventory.
  • Step Performed Centinuously HR-2 FRG 11-246 CC '.'^ Z . C3
j COMBUSTON ENGINEERING TITi.E FUNCTIONAL e EMERGENCY PROCEDURE E M GUI ELINE GUIDELINES Page.J1 of .19 Revision W ACCEPTANCE CRITERIA FOR SUCCESS PATH HR 2:
1. RCS and Core Heat Removal is satisfied if:
a. At least one SG (or the unisolated SG) has level:
1) within the normal level band with feedwater available to maintain level, or eg (,yj ,, ,,,c,
  • g ,
ii) being restored by feedwater flow s [FnOp]
b. T -T H c
< (JCSy;-)andnotincreasing y gg.g and-
c. T,,, < 45AFf] and not increasing and
d. RCS st.bcoolitig 1,f 20*F[ty [averaga CET) temperature, and e.
Noabnormaldifference[>10*F)betweenT kTDs g and J/CETs). [
2. If above criteria NOT satisfied, Thy go to next appropriate RCE and Core Heat Removal success path.
3. _If_ above criteria satisfied, h 90 to next safety function in jeopardv.
4 If, acceptance criteris for AM safety functions are being satisfied, Then - go to 1.0NG TERM ACTIONS pfter perfoming appropriate operator acticns for-all success paths in use. h i HR-2 FRG 11-247 C,p-15: 77.~ 93 i j COMBUSTX)5 ENGINEERING TITLE FUNCTIONAL REC HM W1 EUNE EMERGENCY PROCEDURE , GUIDELINES p.g...tt or sp g , vision , _ ! l $UPPLEMENTARY INFORMATION: HR.2 j This section contains items which should be considered when implementing EPGs and preparing plant specific E0Ps. The items should be implemented as precautions, cautions, notes, or in the E0P training program, j j l
1. Natural circulation flow should not be verified until the RCps have l
] stopped coasting down after being tripped. i
2. Verification of temperature responses to a plant change cannot be
) accomplisheduntilapproximately3to15minut@followingtheactiondue to increased loop cycle times during natural circulation (Reference  ! 15.11).
3. Continuously monitor RCS temperature and pressure to avoid exceeding a 4
heat removal rate greater than Technical Specification Limitations. If 4 the heat removal rate exceeds Technical Specification Limits, there may l be a potential for pressurized thennal shock (PTS) of the reactor vessel J (Reference 15.8), unless Post-Accident Pressure / Temperature limits are , maintained (Figure 11-1). l 4 If there is a conflict between maintaining adequate core cooling and
complying with the pressure / temperature limits of Figure 11-1, then
maintaining of adequate core cooling will be given the higher priority.
Subcooling of 20'F has precedence over PTS considerations.
5. If cooling down by natural circulation with an isolated steam generator, I
and an inverted AT (i.e.. Tehigher that T )h may be observed in the idle loop. This is due to a small amount of reverse heat transfer in the isolated steam generator and will have no affect on natural circulation flow in the operating steam generator loop (Reference 15.11). l HR.2 f i FRG 11-248 - m e ev.cO3 i COMBUSTK)N ENGINEERING TITLE rVNCTIONAL ' RR W M M L NE - EMERGENCY PROCEDURE _ GUIDELINES p.g. 3r or j.t n. vision .,
6. All available indications should be used to aid in the evaluatien of plant conditions since the accident may cause irregularities in a particular instrument reading. Instrument readings must be corroborated when one or more confirmatory indications are available (Refer. 15.24).
4
7. Solid water operation of the pressurizer may make it difficult to control RCSpressureandthereforeshouldbeavoidadunless/20'F)'ofsubcooling cannot be maintained in the RCS (Figure 11-1). If the RCS is solid, closely monitor any makeup or drainage and any system heatup or cooldown to avoid any unfavorable pressure excursions.
8. When a void exists in the reactor vessel, and RCPs are not opertting, the 4
RVLMS provides an accurate indication of reactor vessel liquid inventory.  !. hen a void exists in the reactor vessel, and RCPs are operating, it is not possible to obtain an accurate reactor vessel liquid level indication due to the effect of the RCP induced pressure head on the RVLMS (Reference 15.15). The,L-Jivaatee levei u se P fei3 h vm a f f ei ent+vtHS  !" 4 m mdar tW rrdit4ee. Information concerning reactor vessel liquid inventory trending may still be discerned. However, operators are cautioned not to rely solely on the RVLMS indication when RCPs are
operating,
, 9. The operator should continuously monitor for the presence of RCS voiding and take steps to eliminate voiding any time voiding causes the heat removal or inventory control safety functions to begin to be threatened. Votd elimination should be started soon enough to ensure heat removal and inventory control are not lost (Reference 15.14).
10. If there is a conflict between isolating a SG (e.g., due to indications of steam generator tube leakage or excessive steam demand) and maintaining adequate heat removal, then maintain RCS heat removal via the least affected SG. At least one SG should always be available for heat remova'1, if at all oossible.
- HR-2 FRG 11-249  :::. FA hv . Ob i COMBUSTION ENGINEERING TITLE ] FUNCT!0NAL l EMERGENCY PROCEDURE RND WI ELINE l GUIDELINES Pase n of 52. Revision e_. j SAFETY FUNCil0N: RCS and Core Heat Removal i SUCCESS PATH: SG Heat Sink with SIS Operating; HR-3 i RESOURCE TREE: Tree E INSTRUCTIONS CONTINr,ENCY ACTIONS is2T *1. If pressurizer pressure 1. If pressurizer pressure < (440 bpsia)or, containment hia)gcontainmentpressure3
pres >ure 3 (A*p'sig), Then [ sig) and an $1AS has g been j verify an SIAS actuated. initiated automatically. Then manually initiate an SIAS.
] *2. Ifgr,tysurizerpressure 2. Conting RCP operation, ki309 psia],Thenensure ,, all RCPs tripped. a *3. Ensure maximum safety injection H safety injection and charging 3. and charging flow to the RCS by flow E maximized. Then do the the following: following as necessary: j a. start idle $15 pumps and a, ensure electrical power to verify $15 flow in accordance valves and pumps, with Figure 11-3, b. ensure correct 515 valve ,a,,n d lineup, i b. Start idle charging pumps, c. ensure' operation of , l necessary auxiliary systems. i
  • Step Performed Continuously i
HR-3 l 1 -FRG 11-250 G ai=444:8Ff43- , . _ = . . - _ . - -_ . ._ _ . _ _ . - - - COMBUSTION ENGINEERING TITLE rVNCTIONAL "" "" GNU NE EMERGENCY PROCEDURE GUIDELINES p.g. 23. of t.o n. vision.et_ INSTRUCTIONS CONTINGENCY ACTIONS, , 1
4. M high RCS pressure is 4 preventing adequate 515 flow.
Then attempt to cooldown/ depressurize to obtain adequate $15 flow (refer to step 9 and the Pressure Control success path in use). 'S. E all RCPs are stopped. Then S. Ensure proper control of steam verify natural circulation flow generator feeding and steaming, , in at least one loop by M of and RCS inventory and pressure.  ; the following
a. loop AT (T -T ) less than 57 %
H c ~ 4 nomePfuH-power 47,
b. hot and cold leg temperatures constant or decreasing,
c. RCS subcooling at least
[20'F7 based on daverage CETf temperature,
d. no abnormal difference
[greaterthan10*F)between T H RTDsand[CoreExit . ThennocouplesJ.
  • Step Performed Continuously HR-3 FRG 11-251 ctbl52-fbesM)3-4
,y - - , , - COMBUSTON ENGINEERING Td FUNCTIONAL  ; EMERGENCY PROCEDURE """ "*""E GUIDELINES page 35 of 69 Revision
  • l 1
1 INSTRUCT!0NS CONTINGENCY ACTIONS i '6. Ifsinglephasenatural 6. circuldtion can NOT be maintained Then (break flow
and) two phase natural
 ; circulation can maintain the heat removal process. The j operator should ensure the ' following:
a. all available charging l pumps are operating and 515 pumps are injectino water into the RCS per Figure 11-3, ang
~
b. SG steaming and feeding l are properly controlled, and c,.faverage Tftemperature
 ; is less than superheated. *7. Borate the plant as necessary 7 while cooling down in order to . maintain shutdown margin per Technical Specification limits , (refertoRC-2andRC3).
8. Allow pressurizer level,to, lower 8.
(maintaining level ' ; W in"H while cooling down or e ib aid the depressurization.
  • Step Perfortned Continuously HR-3 4
FRG. 11-252 CNi^'i'; 01 i m.. . , , _ . , . . _ _ . . . _, . . _ . , , __ , l i COMBUSTK)N ENGINEERING TITLE rVNCTION4 ' M C MPJ W1 EU NE EMERGENCY PROCEDURE l GUIDELINES Pass- M. of .51 Revision Y INSTRUCTIONS CONTINGENCY SCTIONS 1 i i sk - a4 '/ . L. Perfom a centro 11ed cooldown 9. M the condetiser or -twMne bypass ! in accordance with Technical system E available $n cooldown l Specifications by operation of via the atmospheric dump valve (s), the turbine bypass system. l *10. Ensure pressurizer pressure i is being maintained within the 10. H RCS subcooling greater than  ; Post Accident P-T limits of P-T limits or cooldown rate  ; l Figure 11 1. greaterthan(100*F/Hr),Thendo l j the following as appropriate: 1
4. stop the cooldown,
b. manually concr01 pressurizer and spray to restore and maintain presturizer pressure within the limits of Figure 11-1,
c. attempt to maintain the olant
! in a stable pressure- ) temperature configuration or 4 continue to cooldown within
the limits of Figure 11-1,
d. If overpressurization due to I #lFa!orchargingflow,Then throttle or secure flow (refertostep30)and manually control letdown to restore and maintain pressurizer pressure withir the limits of Figure 11-1.
  • Step Perfomed Continuously HR-3 i
FRG 11-253 Of*4'?-'"T. 0 3-i , , - - , _ , , - , - , , . = . . , - , - - - . . - - - - m.-, > -+- + -- l l COMBUSTION ENGINFERING TITLE FUNCTIONAL EMERGENCY PROCEDURE "'""'" "E 1 GUIDELINES p.g. 37 of 69 R. vision # INSTRUCT 10NS CONTINGENCY ACTIONS .; 11. E indications of steam 11. If NOT, Then go to step 20. generator tube leakage Then 90 to step 12.
12. Verify RCS hot leg temperature 12. Cooldown the OCS to a hot leg islessthan(525'dinorder temperature of less than [525'F]
l to minimite the possibility of (refer to step 9). lifting SG safeties after isolating a SG.
12. Determine which SG has the tube 13.
leakage by performing the following: ,, 6 3v w T"B '
a. sample SGs,for activity,
b. [monitoimainsteampiping foractivityf,
c. conitor steam generator levels, Mather--plant-s pee 4 ff t-JMket6sT-inser4-herp i
  • Step Performed Continuously HR-3  !
{ FRG 11-254 .C&&MidtaL73- +- ,,-m-a - - , - - ,,,m" - - - COMBUSTON ENGINEERING TITLE rVNC710NAL """6"""' EMERGENCY PROCEDURE  ; GUIDELINES p 3 g . 38 of ,i t a . visio n m INSTRUCTIONS CONTINGENCY ACTIONS 1 14 When RCS hot leg temperature is 14 less than [525'F) Then isolate the steam generator with the higher activity, higher radiation levels, or increasing water level by a performing the following:
a. close the MSIV, s. locally close HSIV,
b. verify closed, or close the b. locally close MSIV bypass M51V bypass valve, volve,
c. Jraisethesetpointforthe c. [maintaintheaffectedSG associatedADVto[950 psia), pressure 1 950 psia by:
1) manual operation of the associated ADV ii) local operation of the associatedADV],
d. close the main feedwater d. locally close main feldwater
 ! isolation valve, o;* 1 isolation valve,
e. [close 44MNryNe water e. 11ocally c15eY[ k$1t1on i isolation valve (s) including valve (s) and steam driven pump the steam driven pump steam steamsupplyvalve,I, supply valve associated with the steam generator being isolated),
f. isolate steam generator blowdown, f. lect.11y isolate SG blowdown.
g. Close vents, drains, exhausts, g. locally isolate vents, drains, and bleedoffs from the steam exhausts, and bleedoffs.
system and turbine building sumps, h_ (otherg hnt-spectftv-ttems Vurt harQ
  • Step performed Continuously HR-3 FRG 11-255 4EE- T M A 3-
COMBUSTK)N ENGINEERING YlTLE FUNCTIONAL EMERGENCY PROCEDURE "C"" MML INF l 4 GUIDELINES p .g. to. of ;JL R .visio n * . INSTRUCTIONS CONTINGENCY ACTIONS 3 , 15. Verify the correct SG is 15. If the wrong SG was isolated. . 1solated by checking the Then unisolate that SG and i following: isolate the affected $G per
4. SG samples for activity step 14, i and radiation levels, j b. possible SG 1evel
increase.
16. Decrease and control RCS 16.
pressure by using main or 3J ,( ~ 7" ' ""'
  • b '("'
auxiliary spray,'or operatiori of charging and letdown to l maintain pressurizer pressure - within the following criteria: l a. lessthan[1000 psia)  ! in,g
b. approximately equal to isolated SG pressure
(+ 50 psi), j a!1g ! c. within the P T limits of Figure 11-1 (refer to step 10). 4 4
  • Step Performed Continuously HR-3 i
i FRG 11-256 CCN I P "~ ^' \ i COMBUSTK)N ENGINEERING TITLE rusCT!oNn EMERGENCY PROCEDURE UC WM MINC GUIDELINES p.g. 4o of _69 a.v!, ion + t INSTRUCTIONS CONTINGENCY ACTIONS
17. Maintain the isolated stearn 17. Restore the isolated steam l generator level within the generator level to the indicated
indicated range by the range by the following
L,Lu.o " 5 N following: a. draining to the fr444ac44ve
a. r
,.iedic .. ..d. . raining m . . ,,to-tthe .  % E ystem) i 446ethe-weste system /. b. reduce RCS pressure below g the isolated steam generator
b. dump steam from the affected pressure, steam generator to the end condenser, c.-[],t!~eend-circuntances pe it, Then i n e t
  • 11._ s nubber-i aineing-pe*-phot-specific ~
.nracedwed *18, Sample the condensate and 18. other connecting systems, including turbine building sumps, for activity. *19. Monitor /turbineand 19. M radiation monitor readings auxiliary)' building ventilation are excessive Then take radiation monitors and any corrective actions in accordance
  • other applicable radiation with Technical Specifications, monitors, e
20. If indications of excessive 20. If NOT, Then go to step 26.
steam demand, Then go to step 21.
  • Step Perfonned Continuously HR-3 I
, FRG 11 257 CiR;"#rt T , R _ , , , . _ . . , . - . _ . _ _ _ _ _,.y. . , _ , _ COMBUSTK)N ENGINEERING TITLE FUNCTIONAL EMERGENCY PROCEDURE RMMW ELINE GUIDELINES p.g. 41 of 69 a. vision e INSTRUCTIONS CONTINGENCY ACTIONS
21. Determine the affected SG 21.
(or most affected SG) by comparison of the following:
a. SG steam pressures,
b. RCS cold leg temperatures.
c. SG 1evels.
22. If excessive steam demand 22. Go to step 23.
stopped due to MSIS. Then go 4 to step 26. 23, Isolate the most affected 23. steam generator by performing the following:
a. close the MS!Y, a. locally close MS!V.
b. verify closed, or close the b. locally close MSIV bypass MS!V bypass valve, valve, c.[close,orverifyclosedthe c glocally close ADV(s p',
atmospheric dump valvG(s) and aligntothemanualmode[.
d. Close the main feedwater d. locally close main feedwater isolation valve,
e. lose the r W;.e m rr e.
isolation valve. & . w e y ~ y. ocally close & 2 ;L. eedwater isolation valvef,gevefeedwater y isolation valvef,
f. close vents, drains, exhausts f. locally close vents, drains and bleedoffs, exhausts, and bleedoffs.
v. [vinerpiantspes:Ticit:::
.interi. nere).
  • Step Performed Continuously ,
HR-3 FRG 11-258 in = C E J.% l l COMBUSTION ENGINEERING TifLE FUNCTIONE EMERGENCY PROCEDURE -REC 3M M RINE GUIDELINES p.g. tz.of.it R.viion m._ INSTRUCTIONS CONTINGENCY ACTIONS 24 Verify the correct SG is 24. E the wrong SG was isolated, isolated by checking the Then unisolate that SG and following: isolate the most affected SG
a. SG steam pressures, per step 23.
b. RCS cold leg temperatures,
c. SG 1evels.
25. Stabilire RCS temperature 25. l by controlled steaming of the unisolated SG using the following.(listedinpreferred  !
order):
a. turbine bypass system 9.C b, atmosphericdumpvalve(s).
*26. Ensure the available condensate 26, inventory is adequate per Figures 11-4 and 11-5. *27.MaintainSG1evels(orunisolated *27. H [ :' nd :- "4 feedwater34 4 -
SG 1evel) in the normal band using are Icst. Then do the following: ,
[-i  :='": , F feedwaterq5kr . a. trip all RCPs o] usMk ,
b. 1solate SG blowdown, secondary sampling, and any non-vital steam discharge,
c. attempttorestore:{susin eM/;;:.Mier/]feedwater, (ContinuedOnNextPage)
^
  • Step Perfonned Continuously l
HR-3 FRG 11-259 , Jew-M2Je , 03 1 E ,_ . . , . _ _ , .7.y.. y... ,, . - . . _ . _ _ , _ . 7 .g..y., , , ,..my CGMBUSTK)N ENGINEERING TITLE rusCTIONAL E M Y W1 ELINE EMERGENCY PROCEDURE ,, GUIDELINES Page 83 of Ji. Revision *; INSTRUCTIONS CONTINGENCY ACTIONS '27 27. (Cont'd)
d. [attempttoestablishan
) alternate, low pressure feedwater source to at least *28. Verify adequate RCS heat 28. removal via the SGs by: a.[atleastoneSGhas a. k both SG wide range levels wide range leve1 { 15%), are"<15}ThengotoRCS and and Core Heat Removal success
b. gRCST temperatures are path HR.4 and  : . ;, t e c
stableordecreasingf. nr " ;.;5 :;-: n;7 l E
b. {M RCS T etemperatures increaseh' hor greater, Then 90 to RCS an3 Core Heat Removal success path HR.4 enemp33 00.00-thTr.,0jh-000 % .
*29. H : ' cr :.-. ' i 7 ,feedwater 29. is restored, Then e>4eie f ':ii ; y . . m.. . :: ':;d r_iz,y ,
o. ed<-e
*/ ' * $6.j le% l 4 tQ f- / ru w.d bud b liockfd bdhN) no '4 .> ,4 -*Tv  % . ,A s s c} 7 ~~ (to n t i nu/ .ed On Next Page) l.e.v e ( i n f La *Ste,p Performed Continuously HR.3  ; FRG 11 260 C'. N COMBUSTION ENGINEERING TITLE FUNCTIONAL "" " "" " ' N E EMERGENCY PROCEDURE GUIDELINES Pase d' of 69 Revision .E_. l INSTRUCTIONS C0FTINGENCY ACTIONS l 1 i  ! '29. (Cont'd) 29.  ! . H $G War lav44-4 4 the- feed -intr 4 hen-  ! he-fvHviring: 1,-ste r+dundsid fee eter ps-end-44mtt-f edW3ter f -rete-to-150 ypm per s ted-Strttn 4 an l increue-4 4evet-i s-1 observS4,-4r until ' oont4Mttoh eedveter-fiVw-t44he 4 s4een Jn44ntirine fst-five' l minutis y \ i$f, modulate feedwa er flow / rate s necessar to res pui c andmaintag5G water level in the nohal ' ndf. \ *30.!_($51pumpsareoperating, 30.Continueh!pumpoperation. Then they may be throttled or stopped, one pump at a time, if ALL of the following are satisfied:
a. RCS 5"' cooling at least f20%basedonTaverage CET) ternperature (Figure 11-1),
  • Step Performed Continuously HR.3
, FRG 11-261 CC D 115@3 _.---mi- - _ - - - . y _ y v v , . y- n- - - v
l 1
I I TITLE COMBUSTK)N ENGINEERING roNCitoNat l l EMERGENCY PROCEDURE UC M D @! ELINE l GUIDELINES Pase '.1 of 6' Revision d INSTRUCTIONS CONTINGENCY ACTIONS j b. pressurizer level is greaterthan[100")and not decreasing,
c. at least one steam I generator is available for l
) ' removing heat from the RCS (ability for feed and steam l flow). d.ftheRVLMSindicatesa minimum level at the top of thehotlegnozzles[. *2 M' 51 mps' re ope [ing, hed Jr. Not[nar LP5 no t / hey be stop d if p ssuri r - j pr ater han [2 , psia} s[re a nd,/ ntroll $30. M the criteria of stepf 30 om AY. cannot be maintained after SIS l pumps throttled or stopped. Then ! appropriate $15 pumps must be i restarted and full SIS flow ' restored. 4
  • Step Perfonned Continuously HR 3 FRG 11-262 C C L R t.J-
1 COMBUSTON ENGINEERING TITLE FUNCTIONAL "" ""' "' * !"E EMERGENCY PROCEDURE GUIDELINES p.g._qi of to. a. vision w INSTRUCTIONS CONTING(NCY ACTIONS '3L v *43. Evaluate the need and 3/. M RCP operation g desired, desirability of restarting Then go to step 3 RCPs. Consider the following: , a. adequacy of RCS and core heat removal using natural j circulation.
b. existing RCS pressure and temperatures,
c. the need for main pres.
surAizer spray capability. ,.
d. the duration of W icol[^g W b inde ruption to RCPs,
e. RCP seal staging prestures and temperatures.
33 ) ' *)4. Detemine whether RCP restart 3)t . If RCP restart criteria NOT criteria are met by All of the satisfied.Thengotostep3f.6 following:
a. electrical power is available to the [RCP bus) Cat h. y
b. RCP auxiliaries M to maistainfsealinjectick,
  • bearing, and motor cooling are operating, and there are no high temperature alanns on the selected RCPs,
c. at least one steam generator is available for removing heat from the RCS (ability for feed and steam flow).
(Continued on Next Page)
  • Step Performed Continuously HR-3 FRG 11-263 KH-152 4 6
, - , ~ . - , - - .. - - - - , - -a --- m,,_L_.---- A-A--4 a- ---+4- E-- -n A -- -A,- - -_AI--- -m - - - ,2 - 6 - - - - A a: i -_ COMBUSTION ENGINEERING TITLE FUNCTIONAL EMERGENCY PROCEDURE u C n u autort Nr . GUIDELINES p.g. av or 69 g,vi, ion ,.,g INSTRUCTIONS CONT!NGtNCY ACTIONS C 'X. (Cont'd) 3.
d. press rizer evel is greater
 ; than nd not i decreasing,
e. RCS subcooling at least f f20'F[basedon[ average CF.TJ temperature (Figure 11-1),
f. (other criteria satisfied
, per RCP operating instruc. tions). 4 E RCP restart desired and 3f.Gotostep restart criteria satisfied, Then do the following:
a. vtact-e44-eva(4ablu,ha rging E^5 '* 'M S 7'% *' t (
^ b*^ "" W pmF&r- _lf,-peenure lesrthan 8 7' a [M04ps4*3r-Then-//GI-pumps may 4 e-4perated. "']l' N 4 ' {,,)u)atc5rr cr, f'kd 8" ' ' b, start one RCP in each loop, , c. [ ensure proper RCP operation i by monitoring RCP amperage and NPS$,c.sq pew om.UL' L'(hdafos.
d. operate charging (and # 51) i pumps until ess zer level greater than and M !
termination criteria met (refer to stip 30). Step Performed continuously HR-3 t s FRG 11 264 CO-1% EvvcG3~ -+- .w -. , - - - , - y - - , ,-,, .-c- n -, - - COMBUSTK)N ENGINEERING Tm.E rVN;TinNAL EMERGENCY PROCEDURE """G*"'"' GUIDELINES Page 88 of 69 Revision #- INSTRUCTIONS CONTINGENCY ACTIONS 'b l&HST f l&l91~ *)( Moni tor {T;'.;' ' y .;_..L Vs. Maintain-lautt level greater than M 1evel and verify 1/:u. s f (10%) by replenishment from e m p level '-- :::n available sources. 4;[nuil' cie<<r u L>.;'.e-d; e I. m .A 6 nei . ~ .' . ~ * ~ 4 t. ?"t e re*hu. 7/ l break /insid ontai. 37.fl ~ break is nsid .contal eh n and WT).e 1 3(10 / nd recir,d atior) d M cu. hnv 'fy LPS ump st ed wh ( 1' ) le 4 3(10% K Then andhIcircu tion' init'ia t . sto7p ' I pumps, aphally itiate recircu ion (re70 ly or 1 dy) w) one I 5 train at time. (and los Rhutletvakesto the $15 . b o c. 9c ,1 a ra *38.Ensyre/.WS! po/w 3 (p) /38. M W S! flow <[ , )perpump , pir pump,4uring recirculation, during recirculation. Then' turn off / / ' one charging pump at a time until , i JWS1 flow 3[ per pump. M ' minimum 1851 flow still not met / with all charging pumps off, Then  ! uynt off one 1FS! pump at a time until'jfS! flow 3 M per pump. .
  • Step Perfomed Continuously HR-3 FRG 11-265 6fith.1"*""=* '
_m_____.__._______ COMBUSTION ENGINEERING TITLE FUNCTIONAL EMERGENCY PROCEDURE att un en Nr GUIDELINES Page 89 of 69 Revision e5 !NSTRUCTIONS CONTINGENCY ACTIONS (,
99. M the RCS fails to depressurize, 31.
Then a void should be suspected.
a. voiding in the RCS m&y be indicated by any of the following indications, parameter changes, or trends i) letdown flow greater than charging flow, 11)pressurizerlevel increasing significantly more than expected while operating pressurizer spray. .
iii)[the RVLMS indicates that voiding is present in the reactorvesse1[, iv)fHJTCunheated thennocouple temperature indicates saturated conditions in the reactor vesselupperheadf. v) (other indications insert i here). , b. E voiding inhibits RCS l depressurization when depressurization desired, Then attempt to eliminate i the voiding by: (ContinuedOnNextPage) *$tep Performed Continuously HR-3 l FRG 11-266 %ttNt*?M+4L 4 1 ,, ~ _ - . _ . _ . COMBUSTON ENGINEERING TITLE rVNCTfDNAL , EMERGENCY PROCEDURE Rtc vte urotuut I GUIDELINES Pase- 12 of - f a. Revision .AL INSTRUCTIONS CONTINGENCY ACTIONS
99. (Cont'd)
L 3p; 4 1 i) verify letdown is isolated. A.$ j 11) stop the depressurization. ang iii) pressurire and depressuriza 'he RCS within the limits of Figure 11-1 by operating pretsurizer heaters and spray or,APS! and charging pumps. Monitor pressurizer level [dndtheRVLMSJfor trending RCS inventory.
c. If depressurization of the RCS is still not possible.
Endn voiding is suspected to exist in the steam generator tubes, Then attempt to eliminate the voiding by: l i) cool the suspected steam generator (by steaming , i and/or blowdown, and feeding) to condense the ! steam generator tube void, and ~ (ContinuedOnNextPage)
  • Step Performed Continuously HR-3 FRG 11-267 C Eh 1 " N . M3 -
d e i ~_ , . . , , . . _ , , . I COMBUSTK)N ENGINEERING TITLE ruNcitoNAL UC HH WI ELINE EMERGENCY PROCEDURE GUIDELINES Page.iL of fl. Revision 4 INSTRUCTIONS CONTINGENCY ACTIONS Y/ , t i *)9.(Cont'd) 3/.
11) monitor pressuriter level for trending RC5 inventory.
d. If, depressurization of the
RCS is still not possible,
, Then attempt to eliminate l' the voiding by: i)operatethefpressurizer ventortheJreactor vessel head vent to clear trapped non-condensible ] , gases, a,,p,p ii) monitor pressuriter level [and/ortheRYLMSJfor trending of RCS inventory. i
  • Step Perfonned Continuously HR-3 i
FRG 11-268 K~~SN COMBUSTION ENGINEERING TITLE FUNCT!0NAL i EMERGENCY PROCEDURE RND W! ELME l GUIDELINES Page " of .it. Revision * , ACCEPTANCE CRITERIA FOR SUCCESS PATH HR.3
1. RCS and Core Heat Removal is satisfied if:
s
a. At least one SG (or the unisolated SG) has level:
1) within the nonnal level band with feedwater available to maintain level
 ; E pa le ., e l e s .^ o e *3
11) being restored by feedwater flow I '. : : , r.
i g d
b. (Average CETT temperature less than superheatertf.
g } c. All available charging pumps are operating and the $15 pumps are injecting water into the RCS per Figure 113 (unless S!S termination criteria met - ^^^ ---~").
2. If above criteria NOT satisfied. Then go to next appropriate RCS and Core Heat Removal success path.
3. !_ff above criteria satisfied, Then go to next safety function in jeopardy, 4 M acceptance criteria for AL_L, safety functions are being satisfied,
! Then go to LONG TEPfi ACTIONS after perfonning appropriate operator actions for all success paths in use. 1 l HR-3 FRG 11-269 L'2. .Ci- h .. C4 COMBUSTION ENGINEERING TITLE FUNCTIONAL 1 EMERGENCY PROCEDURE RNH WI ELht GUIDELINES Page H of _M. Revision mL $UPPLEMENTARY INFORMATION: HR 3: This section contains items which should be considered when implementing EPGs and preparing plant specific E0Ps. The items should be implemented as precautions, cautions, notes, or in the E0P training program.
1. Do not place system in " manual unless misoperation in " automatic" is apparent. Systems placed in ' manual" must be checked frequently to ensure proper operation (Reference 15.34).
2. All available indications should be used to aid in evaluation of plant conditions since the accident may cause irregularities in a particular instrument reading. Instrument readings must be corroborated when one or more confirmatory indications are available (Reference 15.24). Hot and i cold leg RTDs may be influenced by the cold $15 injection and should be l
checked against each other. ,
3. Solid water operation of the pressurizer may make it difficult to control RCSpressureandthereforeshouldbeavoidedunlessf0'Ffofsubcooling I
cannot be maintained in the RCS. If the RCS is solid, closely monitor any makeup or draining and any system heatup or cooldown to avoid any unfavorable pressure excursions. 4 If there is a conflict between maintaining adequate core cooling and . complying with the pressure / temperature limits of Figure 11 1, then maintaining of adequate core cooling will be given the higher priority. Subcooling of 20"F has precedence ver PTS considerations. i M TheopedtarW;pbeciut ied agai i, picmature bittating an DM_ The_o tor- 1had1d chack chnta. lame -4Wmp44 val + . easure- equat suct.ea for-t -SM-bei e4witcM te ..circu'd4en saw 1 a en cheu!_ aet be t ken-unles -automat 54s-r quired.- HR 3 FRG 11-270 ~CEwatse nv J C0MBUSTION ENGINEERING TITLE ruNCT!odl EMERGENCY PROCEDURE RNHW ELINE . GUIDELINES p.g. 9 or 69 g,yi, ion  : i 6/. When a void exists in the reactor vessel, and RCPs are not operating, the RVLMS provides an accurate indication of reactor vessel liquid inventory, j When a void exists in the reactor vessel, and RCPs are operating. It is not possible to obtain an accurate reactor vessel liquid level indication due to the effect of the RCP induced pressure head on the RYLHS disi m -: r- d i ' ^o m k H3 ^ ^ (Reference 15.15). Tra '- h Wu ^ - - _ - a. . .; . a  ;.c 7 .'---  :-dtti;--. Infortnation concerning reactor vessel
itquid inventory trending can still be discerned. However, operators are cautioned not to rely solely on the RVLMS indication when RCPs are
, operating. o (, f. The operator should continuously monitor for the presence of RCS voiding and take steps to eliminate voiding any time voiding causes the heat removal or inventory control safety functions to begin to be threatened. Void elimination should be started soon enough to ensure heat removal and inventory control are not lost (Referenge 15.14).
7,2.70urps recircujation, at least oneySI pump should be operating at all l # '
timei unless %! ta'miration~ criteria-are met. < 7
ff; if there is a conflict between isolating a SG (e.g., due to indications of steam generator tube leakage or excessive steam demand) and maintaining adequate heat removal, then maintain RCS heat removal via the least affected $3. At least one SG should always be available for heat 4
q removal, if at all possible, HR-3 j FRG 11-271 fgfU.R a . 03 1 l 4 i ) i l [ SAFETY FUNCTION: RCS and Core Heat Removal SUCCESS PATH: #r - : x . _ _ ,1 :__l' ;; HR-4 I i } RESOURCE TREE: Tree E , i i NOTE i . ?
This success path should only be used j in the-case other success paths have j failed to establish adequate RCS pressure l control and heat removal. Use of this '
path will result in-high levels of radio-- { . active contamination of'theLIRWST, and { possible elevation of the radiation levels d within containment and adjacent to the , i IRWST outside containment. This success ' , path should be used in conjunction with RCS i Pressure Control, Safety Depressurization System; PC-5. INSTRUCTIONS CONTINGENCY ACTIONS *1. Open steam dumps or 1. 11 valves do not open j atmospheric dumps as from the control Room, ! required to use steaming locally coen the valves. i of any residual SG i inventory to reduce RCS temperature and
pressure to maximize
SI pump flow.
l l *2 Engang all RCPs are 2 11 the'RCPs are still ~' i stopped. operating, but no SG l feedwater inventory is . i available, stop the i operating RCPs. l l *3. Open one or two Rapid 3. [ Depressurization gate. j valves. i *4. Slow 1v-egan one or two 4. Rapid Depressuritation 4 bleed valves. i - e i HR-4 7 l. 4- . ,-,_.___.-__....--...-.,m..v.g.--,_  %,,, ,, , . ~ . . - , , .-- INSTRUCTIONS CONTINGENCY ACTIONS *5. Ensure that there are 5. If there are not two SI two SI pumps injectin gos,1,y pumps injecting into the into the e-l' ' .. - RCS for each bleed valve the RCS for each bleed opened, either: valve opened in Stop 2. pumps, OR
b. Close ole,ed valves until additional SI pumps can be placed in operation.
*6. Monitor pressurizer level and pretsure and RCS temperature and adjust bleed throttle position as required to establish and maintain desired RCS temperature or - cooldown rate within the Post Accident P-T limits of Figure 11-1. *7. Establish cooling to the IRWST as required, per applicable procedure. *8. When conditions will allow initiation of RCS and Core Heat Removal by another success path:
a. Establish steady state pressure ,
conditions.
b. Close the Rapid Depressurization bleed valves.
c. Etna the operating SI pumps,
d. Initiate RCS and Core heat 8.d 11 the use of the removal by the selected success path, selected success path is not
e. Close the Rapid Depressurization successful, reenter gate valves. heat removal per HR-4.
f. Secure cooling to the IRWST when no longer required.
HR-4 4 j ACCEPTANCE CRITERIA FOR SUCCESS PATH HR-41
1. RCS and Core Heat Removal is satisfied ift )
 ; a. Average CET temperature is less than superheat;  ; And
b. SIS pumps are operating and supplying water to the RCS per Figure 11-3.
1 DDd J c. RCS temperature and pressure are controlled within the Post Accident P-T limits of Figure 11-1. i d. RCS and Core Heat Removal is established per HR-2, HR-3, or HR-5. I
2. H the above criteria are not satisfied, Then re-evaluate the
< availability of success paths HR-1, 2, 3, or 5, and refer to CONTINUING ACTIC"S FOR RCS AND CORE HEAT REMOVAL. - j 3. H the above criteria are satisfied, Then go to the next safety function in jeopardy. ) 4. H the acceptance criteria for ALL safety functions are being satisfied, ThaD go to LONG TERM ACTIONS after performing appropriate operator actins for all success paths-in use. l i i HR-4 i 4 ,. ., . --, - _ _. ,_ = -.rm._ COMBUSTION ENGINEERING TITLE gyc73gygt EMERGENCY PROCEDURE """ " ! N E i GUIDELINES Page._6J. of 69 Revision .dk 2 _S_UPPLEFENTARY INFORMATION: HR.4 This section contains items which should be considered when implementing EPGs and preparing plant specific E0Ps. The items should be implemented as precautinns, cautions, notes, or in the E0P training program.
1. Do not place system in " manual" unless misoperation in " automatic" is apparent. Systems placed in " manual' must be checked frequently to ensureproperoperation(Reference 13.34).
i
2. All available indications should be uted to aid in evalvation of plant
conditions since the accident may cause irregularities in a particular instrument reading. Instrument readings must be corroborated when one or more confinnatory indications are available (Reference 15.24). Hot and cold leg RTDs may be influenced by the col'd SIS injection and should be checked against each other.
3. Solid water operation of the pressurizer may make it difficult to control RCS pressure and therefore should be avoided unless [20*FIof subcooling cannot be maintaineo in,the RCS. If the RCS is solid, closely monitor any makeup or draining and any system heatup or cooldown to avoid any unfavorable pressure excursions.
The perator/ ould be c tioned aga nst p emat rely hi iatin an A$.
  • T o at[rsho ch .k co ain .t s level nsure uat i s etion the 515 fore switc ng to ec culat on. i r (
act n houl tb tak unie s an omatic is req d. ing irculajtion,,4geast ne I pumpphould Ae operg41-sT1 's leis % Id erm tion riter s'are slet. b HR-4 4 _ FRG 11-278 =CCN LM03 COMBUSTION ENGINEERING TITLE FUNCTIONAL EMERGENCY PROCEDURE RECOVERY Gul0ELINE GUIDELINES Pag. 62 of _s, n. vision a SAFETY FUNCTION: RCS and Core Heat Removal SUCCESS PATH: $hutdown Cooling System; HR-S RESOURCE TREE: Tree E INSTRUCTIONS CONTINGENCY ACTIONS *l. If surizer pressure reaches 1. psia],Thenisolate, vent or drain the sa.uif injection h tanks (SITS). ) *2. { Initiate low temperature over- 2. pressurizationprotection(LTOP) at T c5 F]. 3t? . *3. When the following criteria *3. If the RCS fails to depressurize, are met, Then initiate shutdown Then a void should be suspected, cooling system (SCS) operation per a. voiding in the RCS may be (plant-specificinstructions]: indicated by any cf the
a. pr g izer level following indications,
[ and constant or parameter changes, or trends:
increasinn, 1) letdown flow greater than
b. RCSsubcoolingg20'Ff, charging flow,
c. pressuri.zer pressure 11) pressurizer level 1[ Mil], ,,, increasing significantly
d. RCS HT 1 -{400 j,. m re than expected while
e. RCS activity levels within operating pressurizer
[ plant-specificlimits], s pray, . -f. [0thcr phr.t-:pccific - iii)[theRVLMSindicatesthat evi+="ia. 4"see+ ha*e]. voiding is present in the reactorvessel[. (Continued On Next Page)-
  • Step Perfgrmed Continuously HR-5 i
FRG 11-279 CS 15t%F.43 1 1 COMBUSTION ENGINEERING TITLE rusCit0NAL RECOVERY Gul0ELINE EMERGENCY PROCEDURE - GUIDELINES Page 63 of 69 Revistori e INSTRUCTIONS CONTINGENCY ACTIONS
3. *3. (Cont'd) iv)hJTCunheated thennoccuple temperature indicates saturated conditions in the reactor i
vesselupperhead$, vi [ ether 4nd4c+tions Hnsert 4 M
b. Iff voiding inhibits-RCS depressurization to SCS entry pressure, Then attempt to eliminate the voiding by:
1) verify letdown is isolated, a,,nd ii) stop the deprCssurization, a,.gd, (Continued On Next Page)
  • Step Perfomed Continu9usly HR-5 FRG 11-280 CEM 'TJ3M3
J COMBUSTION ENGINEERING TITLE FUNCTIONAL REC VERY GUI ELINE EMERGENCY PROCEDURE GUIDELINES page 64 of 69 Revision
  • INSTRUCTIONS CONTINGENCY ACTIONS
3. *3. (Cont'd) iii) pressurize and depressurize the RCS within the limits of Figure 11-1 by operating pressurizer heaters and spray or 9 51 and charging i
pumps. - Monitor pressurizerlevel[andthe RVLMS[fortrendingRCS inventory.
c. If depressurization of the RCS to the SCS entry pressure is still not possible, and voiding is suspected to exist in the steam generator tubes, i Then attempt to eliminate'the voiding by
i) cool the suspected steam 7 generator (by steaming . and/or blowdown, and feeding) to condense the l steam generator' tube void, and ii)monitorpressurizerlevel for trending RCS inventory. (ContinuedOnNextPage)
  • Step Perfortne'd Continuously HR-5 FRG 11-281 i8dE- - 93
COMBUSTION ENGINEERING TITLE FUNCTIONAL ' REC VERY UI ELINE EMERGENCY PROCEDURE GUIDELINES Page 65 of 69 Revision
  • INSTRUCTIONS CONTINGENCY ACTIONS
3. *3. (Cont'd)
d. l_f,depressurization f of the
RCS to the SCS entry pressure is still not possible Then attempt to eliminate the voiding by
1)operatethe[ pressurizer ventorthe[reactorvessel head vent to clear trapped non-condensible gases, Bng 11)monitorpressurizerlevel [and/ortheRVLMSJfor trending of RCS inventory. i
  • Step Perfonned Continuously HR-5
FRG 11-282 CEL ir " M
COMBUSTION ENGINEERING TITLE FUNCTIONAL RECOM M GUIDEl!NE EMERGENCY PROCEDURE GUIDELINES Page 66 of 69 Revision *e ACCEPTANCE CRITERIA FOR SUCCESS PATH HR-5: 4
1. RCS and Core Heat Removal is satisfied if:
i Normal Shutdown Cooling System parameters exist, i 2. If above criteria NOT satisfied, Then re-evaluate feasibility of SCS operation and consider implementing success paths HR-1, 2, 3 or 4. Refer to CONTINUING ACTIONS FOR RCS AND CORE HEAT REMOVAL.-
3. If above criterion satisfied, Then go to next safety function in jeopardy.
4 f acceptance criteria for AM safety functions are being satisfied, Then go to LONG TERM ACTIONS after performing appropriate operator actions for all success paths in use. , HR-5 FRG 11-283 LEwa u-nev-03 COMBUSTION ENGINEERING TITLE FUNCTIONAL RECOVERY GUIDELINE-EMERGENCY PROCEDURE GUIDELINES Page 67 of 69 Revision
  • SUPPLEMENTARY INFORMATION: HR-5:
This section contains items which should be considered when implementing EPGs and preparing plant specific E0Ps. The items should be implemented as precautions, cautions, notes, or in the E0P training program.
1. Do not place system in " manual unless risoperation in " automatic" is apparent. Systems placed in "manu11" must be checked frequently to j ensure proper operation (Referm 15.34).
2, All available indications should be used to aid in evaluation of plant-conditions since the accident may cause irregularities in a particular i instrument reading. Instrument readings must be corroborated when one or more confinnatory indications are available (Reference 15.24). Hot and cold leg KTDs may be influenced by the cold SIS injection and should be checked against each other, ,
3. Solid water operation of the pressurizer may make it difficult to control RCS pressure and therefore should be avoided unless[0*F7 of subcooling cannot be maintained in the RCS, If the RCS is solid, closely monitor 1
any makeup or draining and any system heatup or cooldown to avoid any unfavorable pressure excursions. , er .o r oul be aution d gain pre atu initiat- an AS. i
f. The h operate. should ck cont n nt sump vel o e sure eq t p IS efo s tching circu ion.
ma al ionffrth action could not taken ess an a t tic RAS 1 r quir When a void exists in the reactor vessel, and RCPs are not operating, the 7 4-/i. RVLMS provides an eccurate indication of reactor vessel liquid inventory. When a void exists in the reactor vessel, and RCPs are operating, it is not possible to obtain an accurate reactor vessel liquid level indication HR-5 FRG 11-284 DNE 03 l COMBUSTION ENGINEERING TITLE FUNCTIONAL RECOVERY W DELINE EMERGENCY PROCEDURE GUIDELINES Page 68 of 69 Revislori M due to the effect of the RCP induced pressure head on the RVLMS (Reference 15.15). TA: 'r.dic;;;d ic.ei e13e J;Tfcra from diffcrer.t ^viH5 h e'cm u d r there co-d4+ien . Information concerning reactor vessel liquid inventory trending may still be discerned. However, operators are cautioned not to rely solely on the RVLMS indication when RCPs are operating.
6. The operator should continuously monitor for the presence of RCS voiding j and take steps to eliminate voiding any time voiding causes the heat removal or inventory control safety functions to begin to be threatened.
Void elimination 'should be started soon enough to ensure heat removal and l ~ inventory control are not lost (Reference 15.14). 4 1 I HR-5 FRG 11-285 CP' M2 "rv.T COMBUSTION ENGINEERING TITLE FUNCTIONAL RECOVERY GUIDELINE EMERGENCY PROCEDURE GUIDELINES page 69 of 69 Revision * , CONTINUING ACTIONS FOR RCS AND CORE HEAT REMOVAL
1. If the RCS and Core Heat Removal safety function is still in jeopardy, then the operator must pursue the RCS and Core Heat Removal safety function and other jeopardized safety functions simultaneously. If the PSI estmaEG8F pumps are delivering flow to the RCS per Figure 11-3.
then the operator should evaluate the need and feasibility of transferring additional heat through the steam generators by:
a. restori.9 the vital auxiliaries necessary to feed one or both steam generators
b. using alternate means (e.g., fire water pumps, non-grade A condensate, etc.) to feed the SGs
c. alternate means of operating steam dumps or turbine bypass valves or other steam outlets.
2. If the $$Sd@#SI pumps are not delivering adequate flow to the RCS, then the operator should evaluate ways of implementing one of the RCS and core heat removal success paths by considering:
a. restoring necessary vital auxiliaries (control air, electrical, diesel generator, etc.) to regain needed components or subsystems
b. manual operation of failed remotely operable valves
c. alternate sources of water for SG or RCS makeup
d. alternate means of steam discharge from the steam generators.
e. depressurizing/ cooling the RCS to increase or establish @tI<d,L/SI fl ow.
FRG 11-286 CE#:t$ L Q 3
COMBUSTION ENGINEERING TITLE FUNCTIONAL RECOVERY GUIDELINE EMERGENCY PROCEDURE GUIDELINES Page i of 4 nevision .e_
SAFETY-FUNCTION: Containment isolation SUCCESS PATH: Automatic / Manual isolation; Cl.1 RESOURCE TREE: Tree F INSTRUCTIONS CONTINGENCY ACTIONS *1. If containment pressure is greater 1. If containment isolation does banorequaltokpsig)orpres- bT occur automatically or all surizer pr sure is less than or containment isolation valves are
equal to [ psia), Thy verify N_0T in their accident positions, i containment isolation is actuated Then manually initiate contain-
$ automatically [ plant-specific mentisolation[ plant-specific
method of ensuring adequate con- method of manual containment tainmentisolationinsertedhere]. isolationinserted,here].
*2. If activity is detected in the 2. steam plant, Then identify and iso ~ late the leaking steam genarotor. (Refer to HR-1, 2 or fiasappropriateforguidanceon identifying and isolating the SG and maintaining adequate RCS heat removal), i i
  • Step Performed Continuously Cl-1 FRG 11-360 G -isih
COMBUSTION ENGINEERING TITLE FUNCTIONAL RECOVERY GUIDELINE EMEttGENCY PROCEDURE GUIDELINES' page_L of 4 Revision .fc._ ACCEPTANCE CRITiF.iA FOR SUCCESS PATH CI-1:
1. Containment isolation is satisfied if:
a. 1) No steam plant activity or alams
]
and
, ii)fNo containment radiation alarmsf iii) Containment pr ure less than
=
f
b. Each containment penetrat hn not required to be open has an isolation valve closed.
2. M above criteria NOT satisfied. Then go to CONTINUING ACTIONS FOR
! CONTAINMENT ISOLATION, .
3. E above criteria satisfied, Then go to next safety function in jeopardy, i
l 4 E acceptance for ALL safety functions are being satisfied, Then 90 to LONG TEidt ACTIONS af ter perfoming appropriate operator actions for all
success paths in use.
4 Cl-1 FRG 11-361 CLu nc , 4 t COMBUSTION ENGINEERING TITLE FUNCTIONAL RECOVERY GUIDELINE EMERGENCY PROCEDURE GUIDELINES Page 3 of 4 Revision EL. 4 SUPPLEMENTARY INFORMATION: Cl-1 This sections contains items which should be considered when implementing EPGs and preparing plant specific E0Ps. The items should be implemented as precautions, cautions, notes, or in the E0P training program, t j 1. The closing of some containment isolation valves may cause the isolation 3 of vital auxiliaries (i.e., instrument air for valve opening / closing. 3 component cooling water to the RCPs or SCS, sampling, nitrogen supply, letdown, blowdown) which could lead to equipment damage.
2. Local radioactivity levels should be determined before attempting any local manual valve closure. Appropriate precautions should be taken if high radiation levels exist.
1 1 i Cl-1 . FRG 11-362 CEE : J E:;. t COMBUSTION ENGINEERING TITLE FUNCTIONAL RECOM MDRINE EMERGENCY PROCEDURE GUIDELINES Page d of 4 Revision
  • CONTINUING ACTIONS FOR CONTAINMENT ISOLATION t
M the acceptance criteria are NOT met, Then containment isolation is still in jeopardy, The operator must continue to attempt to e. tablish Containment Isolation while pursuing other jeopsrdized safety functions. Evaluate further actions using the following: , a. The urgency of other safety functions in jeopardy.
b. The risk to plant personnel and the public of leaving certain containment penetrations unisolated.
c. The feasibility of isolating the containment penetration (s) by alternate methods.
f } 4 FRG 11-363 G9=:ne c.44 COMBUSTION ENGINEERING TITLE FUNCTIONAL RECOVERY GUIDELINE EMERGENCY PROCEDURE GUIDELINES _ Page 1 of it Revision
  • SAFETY FUNCTION: Containment Temperature and Pressure Control SUCCESS PATH: Containment Fans (Normal Mode); CTPC-1 RESOURCE TREE: Tree G INSTRUCTIONS CONTINGENCY ACTIONS j
*l. Verify that [three] containment 1. Manually start all available fan cooler units are operating in containment fan coolers in the the normal mode, normal mode. 1 *2. Ensure containment fan coolers are 2. operating in accordance with - [ plant-specificoperating instructions). 4 h 4
  • Step Performed Continuously CTPC-1 FRG 11-368 CC lif.__E=v. 03
COMBUSTION ENGINEERING TITLE FUNCTIONR RECOVERY GUIDELINE . EMERGENCY PROCEDURE GUIDELINES Page 2 of 11 Revision
  • ACCEPTANCE CRITERIA FOR SilCCESS FATH CTPC-1;
1. Containment Temperature and Pressure Control is satisfied if:
4
a. Containmenttemperatureislessthan[180*F]
and Containmentpressureislessthan[1.5psig) b.
2. If above criteria NOT satisfied, Then go to next appropriate Containment Temperature and Pressure Control success path.
, 3. if above criteria satisfied, Then go to next saf3ty function in jeopardy. 4 ,1f acceptance for AM safety functions are being satisfied Then go to LONG TEPM ACTIONS after performing appropriate operator actions for all success paths in use. i CTPC-1 1 1 l FRG 11-369 GE M E R%=H I COMBUSTION ENGINEERING TITLE FUNCTIONAL i RECOVERY GUIDELINE EMERGENCY PROCEDURE GUIDELINES page 3 of _n. Revision
  • SUPPLEMENTARY INFORMATION: CTPC-1 This sections contains items which should be considered when implementing EPGs and preparing plant specific E0Ps. The items should be implemented as precautions, cautions, notes, or in the E0P training program.
1. During some events, the containment fan coolers may be required to operate in the emergency mode even though the containment temperature and pressure are not increasing. [This will occur during events which generate a CIAS on low pressurizer pressure, but do not include an inside containmentbreak.]
I 2. Re-alignment of the containment cooling system to the nortnal operating mode should not be made without giving careful consideration to the possibility that the containment temperature or pressure may increase at l a later time. This is especially important for those events which are undiagnosed. 1 t 4 CTPC-1 FRG 11-370 C N -=N COMBUSTION ENGINEERING TITLE FUNCTIONAL EMERGENCY PROCEDURE GUIDELINES Page 4 of 11 Revision M SAFETY FUNCTION: Containment Temperature and Pressure Control SUCCESS PATH: Containment fans (Emergency Mode); CTPC-2 RESOURCE TREE: Tree G INSTRUCTIONS CONTINGENCY ACTIONS 5 *1. If containment pr r i greater 1. Manually start all available than or equal to ,_ ,,, Then containment fan coolers in the verify [atleastthree] emergency mode, containment fan coolers are operating in the emergency mode. *2. Ensure containment fan coolers are 2. operating in accordance with [ plant-specificoperating - instructions]. *3. If con ainment pressure is less 3. than psig],Thencontainment fan coolers may be shifted to normal configuration, i . i i i a
  • Step Performed Continuously CTPC-2 FRG 11-371 t ta2+52 Rev . -
l COMBUSTION ENGINEERING TITLE FUNC710NAL EMERGENCY PROCEDURE GUIDELINES Page 5 of _1L Revision te ACCEPTANCE CRITERIA FOR SUCCESS PATH CTPC-2:
1. Containment Temperature and Pressure Control is satisfied if:
a. [At least three] containment fan coolers operating in the emergency mode 4
b. Containment temperature and pressure are constant or
 ! decreasing, i
2. If above criteria NOT satisfied, Then go to next appropriate Containment Temperature and Pressure Control success path,
3. H above criteria satisfied, Then go to next safety function in jeopardy, 4 E acceptance criteria for M safety functions are being satisfied, Then go to LONG TERM ACTIONS after perfonning appropriate operator actions for all success paths in use, 4
CTPC-2 i FRG 11-372 Chi a v.13 COMBUSTION ENGINEERING TITLE . FUNCT10NAL RECOVERY GUIDEllNE EMERGENCY PROCEDURE ,, GUIDELINES Page 6 of 11 Revision 88 j SUPPLEMENTARY INFORMATION: CTPC-2 i This sections contains items which should be considered when implementing EPGs and preparing plant specific E0Ps. The items should be implemented as precautions, cautions, notes, or in the E0P training program. ,
1. For those plants which use charcoal filters in the containment fan coolers for iodine removal, operation of the filtered fan units may be desirable in the event of an iodine buildup in containment.
2. A CCAS may be manually initiated at containment pressure less than the CCAS setpoint, This would be appropriate if the containment pressure were increasing, or if the fan coolers were inoperable in the normal mode. .
4 CTPC-2 FRG 11-373 CEa 2sc RJ7 ~"1 l COMBUSTION ENGlHEERING TITLE FUNCTIONAL EMERGENCY PROCEDURE GUIDELINES Page 7 of 12 Revisiond SAFETY FUNCTION: Containment Temperature and Pressure Contrni SUCCESS PATH: Containment Spray; CTPC-3
RESOURCE TREE
Tree G INSTRUCTIONS CONT:NGENCY ACTIONS s *l.
H containment pryss rggreater 1. than or equal to ' . . Then do the following:
a. verify containment spray a. manually actuate containment actuation, spray, u i n. ^ % k i
a, nLd v'e d Sg3Ag,,
i b. ensure adequate containment temperature-pressure control by one of the following: l i) gat least [two) containment fan coolers operating in the emergency mv a and at least one containment spray header delivering at leasth500 gpm] 9Lr ii) two containment spray headers delivering at leastQ500 gpm], 'Il'i b e,w lgs veA i 5 ) SM ts c( tr OT .
  • Step Performed Continuously CTPC-3 FRG 11-374 CGrisE e W
COMBUSTION ENGINEERING TITLE FUNCTIONAL RECOVERY GUIDELINE EMERGENCY PROCEDURE GUIDELINES Page A of 11 Re vision .ed_. 4 INSTRUCTIONS CONTINGENCY ACTIONS ., *2. If containment spray system is 2. Continue containment spray I operating and containment pressure system operation. is less than [7 psig], Then con-tainment spray may be terminated. Upon termination the CSS must be
aligned and reset for automatic operation [or manual restart].
D Ccksnwl Spr is T & c m ss A d , k er n, m (-t a n nw h,. 3, vo.~+. l , )
  • Step Performed Continuously CTPC-3 FRG 11-375 JN i . 01
i COMBUSTION ENGINEERING TITLE FUNCTIONAL " " " '"E EMERGENCY PROCEDURE GUIDELINES Page 9 of 12 Revision M ACCEPTANCE CRITERIA FOR SUCCESS PATH CTPC-3: t
1. Containment Temperature and Pressure Control is satisfied if:
a. 1) At least two containment fan coolers operating in the emergency mode and at least one containment spray header delivering at least 1500gpm]
  • or
11) [Two containment spray headers delivering at least(500 gpm]
and j
b. Containment temperature and pressure constant or decreasing.
c Ann t s van t s.1 s h m s p ,r e-{ syy ,
2. If abose criteria NOT satisfied, Then go to CONTINUING ACTIONS FOR CONTAINMENT TEMPERATURE AND PRESSURE CONTROL.
i
3. H above criteria satisfied, Then go to next safety function in jeopardy.
^ 4 M acceptance criteria for M safety functions are being satisfied, Then i go to LONG TERM ACTIONS after performing appropriate operator actions for all success paths in use, a 4 CTPC-3 FRG 11-376 c "' " ^ L 2 43--- e l 4 COMBUSTION ENelNEERING TITLE FUNCTIONAL RECOVERY GUIDELINE EMERGENCY PROCEDURE GUIDELINES page to of 11 Revision & SUPPLEMENTARY INFORMATION: CTPC-3 This sections contains items which should be considered when implementing EPGs and preparing plant specific E0Ps. The items should be implemented as 4 precautions, cautions, notes, or in the E0P training program.
1. For those plants which use the containment spray system (CSS) in conjunction with the iodine removal system (IRS), operation of the CSS may be desirable in the event of an iodine buildup in containment.
Since iodine may be released to the containment atmosphere at various times following event initiations (e.g., released directly from the core in a large LOCA; reevolved from iodine plated out on containment surfaces; or released during reactor vessel venting to the containment) and since the CSS is activated automatically on containment pressure, its actuation may not' correspond to the time of peak containment iodine levels (if it is actuated at all). The CSS may be run to reduce containment airborne iodine to acceptable or minimum levels unless the following indicate otherwise: fl. If there were a leak in containment below sump water level, it might be more desirable to leave the iodine atmospherically suspended.
2. If sump water is highly radioactive, it may not be desirable to circulate it outside the containment.
For ose .S's using h r92ine, it ay be ne essary t further crease s water pH eyond that chieved by ri odium hos at inthys.p/ t crease ong- erm (4. ou post-LOCA iodine r ntion 'te sur An alt te method f dding a H buf er pica y dium y ox de) is by estab11 hing a fl th with th c arging ps.) CTPC-3 I l FRG 11-377 C9.,MO L 03 Y COMBUSTION ENGINEERING TITLE FUNCTIONAL EMERGENCY PROCEDURE GUIDELINES Page-.11. of 11 Revision
  • CONTINUING ACTIONS FOR CONTAINMENT TEMPERATURE AND PRESSURE CONTROL J
M the Containment Temperature and Pressure Control safety function is NOT satisfied, Then the operator must continue to attempt to establish Containment Temperature and Pressure Control while pursuing other jeopardized safety
functions. Evaluate further actions based on the following:
a. Rate of change of containment temperature and pressure, and potential for damage to the containment,
b. The urgency of other jeopardized safety functions.
. c. The feasibility of restoring function to a success path by: i) restoring the vital auxiliaries necessary to operate components or systems in the success paths ii) manual operation of valves 11l) use of alternate components to implement a success path. i s l 1 FRG 11-378 CM ecm3 COMBUSTION ENGINEERING TITLE FUNCTIONAL EMERGENCY PROCEDilRE RECOVERY GUIDELINE GUIDELINES Page 1 of 9 Revision .1E_ SAFETY FUNCTION: Containment Combustible Gas Control .~a 4 W SUCCESS PATH: q.u.. re s 3 s/ u eHydrogen Recombiners; CCGC-1 RESOURCE TREE: Tree H INSTRUCTIONS CONTINGENCY ACTIONS *1. Ensure containment hydrogen 1. 4 monitors operating in accordance with[ plant-specificoperating instructions].
2. [Ensurehydrogenrecombinersare 2.
availableandalignedforuse{.
3. Ensure all available containment 3.
air recirculation systems are operating: h.containmentdomeair recirculation system,
b. CEDM cooling system, l c. reactor vessel cavity cooling
  • system,]
d [nthae n' e a+ e pe!'i :t . rc freuh ti; ':y:t a;]._
  • Step Performed Continuously CCGC-1 FRG 11-387 A C" 1:: " -M
COMBUSTION ENGINEERING TITLE FUNCTIONAL RECOVERY GUIDELINE EMERGENCY PROCEDURE i GUIDELINES Page 2 of 9 Revision 8 INSTRUCTIONS CONTINGENCY ACTIONS
*4. Verify containment hydrogen y. Operate hydrogen recombiners and iyh, concentrationislessthan[0.5%]. until containment hydrogen con-  !
centration is less than [0.5%]. l l i
I l
.4 4
  • Step Perfonned Continuously CCGC-1 {
FRG 11-388 CC '. ; ^ 2 - , 42 - COMBUSTION ENGINEERING TITLE FUNCTIONAL RECOVERY GUIDELINE EMERGENCY PROCEDURE GUIDELINES Page 3 of 9 Revision
  • ACCEPTANCE CRITERIA FOR SUCCESS PATH: CCGC-1
1. Containment Combustible Gas Control is satisfied if:
a. Hydrogen concentration is less than (0.5%) j o_r a x, uka b.1)(Allavailablehydrogenrecombiners[areenergizedf and i 11) Hydrogen concentration is less than [4%].
2. E above criteria E satisfied, Then go to Containment Combustible Gas Control success path CCGC-2 (Hydrogen Purge System).
3. E above criteria satisfied, Then go to next safety function in jeopardy.
4 E acceptance criteria for AM safety functions are being satisfied, Then t go to LONG TERM ACTIONS after performing appropriate operator actions for all success paths in use. 4 4 CCGC-1 FRG 11-389 EM~h J3- COMBUSTION ENGINEERING TITLE FUNCTIONAL RECOVERY GUIDELINE EMERGENCY PROCEDURE GUIDELINES Page 4 of 9 Revision .dd_. SUPPLEMENTARY INFORMATION: CCGC-1 This section contains items which should be considered when implementing EPGs and preparing plant specific E0PS. The items should be implemented as pre-cautions, cautions, notes, or in the E0P training program.
1. Operation of any equipment in the containment building when containment
~ hydrogen concentration > [4%] should consider the possibility of hydrogen , ignition (Refer. 15.16). Consideration should be given to the following:
a. The importance to safety of equipment operation
b. The urgency of equipment operation
c. The use of alternative equipment located outside containment
d. The current hydrogen level and the anticipated time to reduce,H 2 #
[4%].
2. The containment fan coolers should be operating in the emergency mode in l order to satirfy the Containment Temperature and Pressure Control function. The fan coolers will also aid in the Combustible Gas Control function by
1) mixing the containment atmosphere, which reduces the possibility of local hydrogcn pockets forming, and, 2) reducing the ,
containment temperature, which decreases the amount of hydrogen generated by the corrosion of aluminum and zinc materials. ,
3. [Any cautions provided by the hydrogen recombiner vendor concerning
, operation of the recombiners with a degraded containment environment should be inserted here].
4. Measured containment hydrogen typically represents a value of hydrogen in units of percent by volume of dry air. The measured hydrogen will typically indicate higher than the actual containment hydrogen for a steam / air. mixture inside containment. The indicated value should, therefore, be corrected to account for any steam / air mixture inside containment (Reference 15.16). CCGC-1
~ FRG 11-390 CE" 152 "r n3, 1 N COMBUSTION ENGINEERING TITLE FUNCTIONE RECOVERY GUIDELINE EMERGENCY PROCEDURE . GUIDELINES Page s of 9 Revision
  • SAFETY FUNCTION: (,ontair. ment Combustible Gas Control SUCCESS PATH: Hydrogen Purge System; CCGC-2 RESOURCE TREE: Tree H INSTRUCTIONS CONTINGENCY ACTIONS
*1. Ensure containment hydrogen 1. monitors operating in accordance with [ plant-specific operating instructions]. 4 2. Ensure all available containment 2. air recirculation systems are , crerating: a, containment dome air recirculation system
b. CEDM cooling system,
c. reactor vessel cavity cooling 4
system,
d. ,[otherplant-specificair recirculation systems].
*3. Monitor containment radiatica 3. fH tontfir cr.'2radia*ienfagi level and provide input to [ Plant ar!hi Tha, enar - / Technical Support Center) for bi o =[1 S tem'f{ ! evaluating the impact of potential environmental releases.
  • Step Perfomed Continuously CCGC-2 FRG 11-391 A 2^ "; . . C L
I COMi.KJSTION ENGINEERING TITLE rVNCTIONAL REC W RY M ELINE EMERGENCY PROCEDURE GUIDELINES p.g. 6 or 9 n, vision y INSTRUCTIONS CONTINGENCY ACTIONS '4 M the [ Plant Technical Support 4. Center)liasreviewedandrecom-mended purge system operation. _Then operate the hydrogen purge systeminaccordancewith(plant specificoperatinginstruction). *S. When(PlantTechnicalSupport 5. Center)hasreviewedandrecom-mended temination of hydrogen purge, Then teminate oper(tion of the hydrogen purge system. i l l-l I
  • Step Perfomed Continuously CCGC-2 l
l FRG 11-392 4 E " ". Z t . '1L. i - . . - - - . . - ,n - ,-..,,--,,nr , - . - , .n , , - - , .--n-, ~,-.
COMBUSTION ENGINEERING TITLE r0NCTIONAL EMERGENCY PROCEDURE " "" GUI ELINE GUIDELINES Page 7 of .JL. Revision
  • ACCEPTANCE CRITERIA FOR $UCCESS PATH: CCGC-2:
I 1. Containment Combustible Gas Control is satisfied if: 1 The hydrogen purge system is operating in accordance with (plant-specificoperatinginstructions). i 2. If above criterion NOT satisfied. Then go to CONTINUING ACTIONS FOR
CONTAINMENT COMBUSTIDLE GAS CONTROL.
3. E above criterion satisfied. _Then go to next safety function ir.
jeopardy 1 4 E acceptance criteria for ALL safety functions are being satisfied, Then ) go to i.0NG TERM ACTIONS after performing appropriate operator actions for all success paths in use. i s CCGC-2 FRG 11-393 5tyti%ak w - 3 .c . , - _ - - . - 4 COMBUSTK)N ENGINEERING TITLE FUNCTIONAL EMERGENCY PROCEDURE * " " " ' " i GUIDELINES p.g. s.t. of 9 a. vision u { SUPPLEMENTARY INFORMATION: CCGC-2 l This section contains items which should be considered when implementing EPGs and preparing plant specific E0PS. The items should be implemented as pre- ) cautions, cautions, notes, or in the E0P training program. 1
1. Operation of any equipment in the containment building when containment .
, hydrogen concentration 3 [4%) should consider the possibility of hydrogen ignition (Refer. 15.16). Consideration should be given to the following:
a. The importance to safety of equipment operation
b. The urgency nf equipment operation
c. The use of alternative equipment located outside containment
d. The current hydrogen level and the anticipated time to reduce Hp<
[4%].
2. The containment fan coolers should be operating in the emergency mode in
order to satisfy the Containment Temperature and pressure Control function. The fan coolers will also aid in the Combustible Gas Control function by
1)mixingthecontainmentatmosphere,whichreducesthe possibility of local hydrogen pockets fortning, and, 2) reducing the containment temperature, which decreases the amount of hydrogen generated by the corrosion of aluminum and zine materials.
3. (Any cautions provided by the hydrogen recombiner vendor concerning
operation of the recombiners with a degraded containment environment shouldbeinsertedhere).
4 Measured containment hydrogen typically represents a value of hydrogen in units of percent by volume of dry air. The measured hydrogen will typically indicate higher than the actual containment hydrogen for a steam / air tnixture inside containment. The indicated value should, therefore, be corrected to account for any steam / air mixture inside ' containment (Reference 15.16). CCGC-2 i FRG 11-394 45G52Eiter.-03 TITLE rVNCT10N Al, COMBUSTION ENGINEERING MWW GUI EUNE EMERGENCY PROCEDURE GUIDELINES Page 9 -of 9 Revision d CONTINUING ACTIONS FOR CONTAINMENT COMBUSTIBLE GAS CONTROL If the Containment Combustible Gas Control safety function is Ng satisfied, then the operator must attempt to satisfy other jeopardized safety functions and continue pursuing this safety function based on these considerations:
a. Rate of change of containment hydrogen concentration, and potential for hydrogen burn
b. The urgency of other jeopardized safety functions
c. The feasibility of restoring function to a success path by restoring vital auxiliaries necessary to operate systems or components in the success paths.
AT-1. 11 395 CEN46R1dy:J3 FRG LONG TERM ACTIONS ) Since the FRG may be implemented in the course of a variety of different events, which may or may not be diagnosed, the long tem actions strategy must be flexible. Since the detailed course of actions to be taken will depent on thenatureoftheevent(s),considerablerelianceon(theTechnicalSupport Center] for guidance is used in the Long Tem Actions. The basic strategy is as follows: Continuously perfom the FRG Safety Function Status Check and ensure acceptance criteria remain satisfied. Detemine if a plant cooldown is urgent. Maintain the ability to perform a plant cooldown. If necessary, cooldown and implement shutdown cooling. Continuously attempt to diagnose the event. *1. Compare plant indications against the acceptance criteria of the FRG Safety Function Status Check for the success paths currently in use for each safety function. M any success paths do not meet the acceptance criteria, Then go to the appropriate resource assessment tree to fulfill the jeopardized safety function. *2. Determine present plant status. This entails the identification of the following: , a. PresentRCSconditions(inventory, temperature, pressure, radioactivity levels, etc.)
b. Success paths in use for fulfilling each safety function-
c. Adequacy of core cooling
d. Plant area radiation levels
e. Rates of radioactivity release to the environment.
  • Step Performed Continuously N
FRG 11-406 CEN 152 Rev.-03 l _.. _ _ _ J _- --_ . _ - - - - ._ _.-- . . - - _ ~ . _ - - _ - . - . _ - ) l t 1 '3. If a specific event (e.g.,1.0CA, SGTR, LOAF, eM can bt identified, Then further guidance for casualty management may be found ;n an Optimal Recovery Guideline (ORG).
4. Do NOT discontinue implementing a success path unless another equivalent i path has been verified ready for irnplementation.
i ) j +5. Determine whether a cooldown to cold shutdown is necessary. Consider the , following: i 3
a. Rate of release of radioactivity to the environment, g a high rate of release to the environment exists, Then a cooldown should be initiated. If possible, dump steam to the condenser rather than to j the atmosphere.
j b. Available condensate inventory and ability to replenish inventory. E the available inventory approaches the inventory requirement for a cooldown (detennined using Figures 11-4 and 11-5), And the inventory is decreasing (due to insufficient condensate makeup),  ; Then a cooldown must be initiated.
c. Continued availability of vital auxiliaries required for a cooldown.
I E a loss of any vital auxiliaries may be anticipated, Then a cooldown should be initiated. Consider:
1) electric power supplies
i i )compressedairsupplies iii)[otherplantspecificauxiliaries] ,
d. Ability to make required repairs. E a cooldown is necessary to
make repairs, Then a cooldown should be initiated. If the plant can
! be maintained in a stable condition, and a cooldown is not required l imediately (considering (a), (b) and-(c), above)..Then the operator I [or technical support center) may decide to delay the initiation of the cooldown. 1
  • Step Performed Continuously 1 t' A )
FRG 11-407 CEN 152 Rev. 03 ....-.,m.., , , . _ . . . . . , , . ,,__.r,.,, .y ..,> _ 1 ) *6. Determine whether a cooldoun is feasible. Consider the following:
a. Failed equipment, or conditions, which may prevent or inhibit a cooldown (e.g., loss of all pressurizer sprays, inability to dump stesm). H repairs to required equipment are not feasible Then if possible, bring the plant to conditions allowing the repairs.
b. Avail'.ble condensate inventory. M insufficient inventory is available (determined using Figures 11-4 and 11-5), Then attempt to increase the inventory or obtain additional sources of feedwater.
c. RCS voiding. H voiding inhibits RCS depressurization to SCS entry pressure, Then an attempt at eliminating the voiding should be made.
Voiding in the RCS may be indicated by any of the following indications, parameter changes, or trends: i) letdown flow greater than charging flow. C ii) pressurizer level increasing significantly greater than expected while operating pressurizer spray, iii)[the RVLMS indicates that voiding is present in the reactor vesse1[, iv) [other indications insert here]. *7. If voiding should be eliminated. Then proceed as follows:
a. verify letdown is isolated,
b. stop the depressurization,
c. pressurize and depressurize the RCS within the limits of Figure 11-1 by operating pressurizer heaters and spray (preferred method) or M SI and charging pumps (alternative method). Monitor pressurizer level [and the RVLMS[for trending of RCS inventory.
  • Step performed Continuously
( FRG 11-408 CEN 152 Rev. 03 d. if indications of unacceptable RCS voiding continue, and voiding is ( ' suspectedtoexistinthe(isolated)steamgeneratortubes.then cool the (isolated) steam generator (by steaming or blowdown, and/or feeding) to condense the steam generator tube bundle void. Monitor pressurizer level for trending of RCS inventory.
8. If,f a cooldown is to be performed, Then guidance from [the technical support center] may be required. Standard cooldown methods may require i
modification due to the nature of the event. Lfacooldownisnotrequired, _Then continue to maintain the safety functions until guidance is provided by [the Plant Technical Support Center) or an approved procedure can be implemented.  ; *9. If the following criteria cre met,g shutdown cooling may be initiated
per SCS operating instructions
i a. 3% ' RCS T g iscooleddowntoatleast[400'g
b. The RCS is depressurized to at least [400 psia)
c. The RCS is at least /20'F)'subcool
d. Pressurizer level is greater than g]andnotdecreasing
e. RCSactivitylevelwithin[appropriatelimits) f>.---{0ther-p1 ant -spec i f ic criteria , J nserLhere) .--
1 /
  • Step Performed Continuously FRG '
11-409 CEN 152 Rev. 03 ,- . .~ . . J- as_s4-- _A-o-,.4.J.- a ~ m A2-. .. ~ , - + w+, J-AL p. p.ss , ,- - - - - -An wL m2susw M - r,,.pnKni4u >1,4 ++. Lw,,_,sa wJ>AkJ. ,s -.+n s sn.An, , .&.m- .-1, -44.- -,. aa,., 4 F .l ATTACHMENT 5
CHAPTER 18 DSER OPEN ITEM RESPONSES I
t 3 4 l l ~5 y... , -, e-. -, 7- , , , , . ,, ',. ' ~ . , , -n ,- ,->, . -___.____._.___.______7  ! t i  ? J  : i i . i I [ DSER Open item-18.5.1-1 The applicant should identify the source of human factors requirements used as - a basis for System 80+. j
Author: Human Factors Assessment Branch  ;
i ABB-CE Response j The sources of human factors design requirements that have; been used in the i i System 80+ design process have been documented in various submittals to NRC. 'I l Appendix A to'the Heman Factors Program Plan for the System 80+ Standard Plant ' i Design (letter LD-92120, dated December 18,1992) states the. human factors j recuirements imposed on each element of the process. Specific references to the j Coce of Federal Regulations and NRC guidance, such as that provided in NUREG-0737 i and NVREG 0700, are provided. Section A.I.6 provides a complete set of sources 4 for the design requirements, d Requirements derived from a review of operating experience, including reference sources, were provided in the Operating Experience Review for_ System 80+- MMI i Design via letter LD 92120, dated December 18 1992. This: document also - j documented how this design guidance was implemented in- the design itself:to i provide traceability. The Nuplex 80+ Advanced Control Complex Design 1 Bases , . document, transmitted via letter- LD 982102, -dated - September 23,1992, also I provided bases for human factors aspects of the Nuplex 80+ design.. The Human Factors Engineering Standards, Guidelines and Bases for' System 80+ j (letter LD 92-069, dated May 22,1992,) provides the human factors criteria on , which the System 80+ MMI design is based. .This document identifies the sources i for individual standards and guidelines including references for all criteria.- i The System Description for Control Complex 'Information System for Nuplex 80+ '
(letter LD 92-065, dated May 8,1992) provides specific implementati_on in
. standard Nuplex 80+ MMI design features'of the requirements developed in the - preceding documents. A corresponding design bases document (attached) provides
the bases for MMI characteristics selectec.
l Information and Controls characteristics were generated- by = the System 80+ Functional Task Analysis and verified in the availability analysis of the Nuplex ' 80+ Verification Analysis Report (both submitted via letter LD-92 065,-dated - May 8,1992). These documents provide traceability of task requirements for the:
RCS panel example throughout the design process, A suitability verification l- analysis evaluated.whether the resultant- MMI -features of. the design process t . acceptably supported operator- task accomplishment. Similar task analysis;and
- verification methodologies (attached with revisions to address NRC comments) will < be.used for the: remainder of the design. The Verification and Validation plan-
for Nuplex 80+ (attached) defines testable- criteria for evaluation of the implementation of the design requirements into the design.
I -iy -- we ye c ,,,Er h -y- g " -4 v - ----.E -nve i-Wr at t-m- w+m+'--I--'a'"'r'F w -go em-r w E+-
  • m -s w M e se +e +'7,e- - wsne e w - m r--t&rr=-r
4 i i i l The traceability and verification and validation of the Huplex 80+ human factors j design requirements should be adequately addressed with the submittals referenced ! in this response. t I 4 l 1 i 1, i a i f i __ _ __ . __ _ _ . _ _ . ._-_ _ _. ~ ._ . _ _ _ . _ _ - _ _ _ _ l ,i , s. 4 i ! Open Item 18.7-1 , i This open' item regards various concerns with the System 80+ task analysis. 1 Author: Human Factors Assessment Branch c ABB-CE Response
The System 80+ task analysis methodology has been revised to address NRC concerns identified in this open item. A revised Section 18.5 of CESSAR DC is attached
incorporating the modifications. 1his revision will be formally submitted -in Amendment L of CESSAR-DC.
t Position descriptions for. control room personnel have no impact on the task i analysis -and are not provided as part of _ the task analysis.- Position or job ~ j descriptions are primarily an operations and training requirements concern (" Job Analysis") for a COL applicant. It is assumed that the control room' complement 'l meets NRC staffing requirements and individuals are NRC . qualified. Further j refinement in the form of position descriptions is not needed for task analysis or HS1 design purposes, h Tasks relating to maintenance work order tracking and tagout are not considerod i . in the task analysis because these tasks will not be performed in the controlling , j workspace and have no impact on the control room HSI design. A separate facility i i to support maintenance work tag out is provided adjacent to the main control room in the System 80+ design. Work order and tag out tracking will be controlled by~ ! COL applicant administrative procedures. Nuplex 80+ HSI (both controls and ' monitoring systems) continuously display.the status of tagged-out coniponents as a " unavailable" based on manually input data. Data-input will not be required by , i the operators in--the controlling workspace but by other personnel in the MCR. 4 Data Processing System success l path monitoring algorithms determine the impact-  !
of unavailable components on safety and non-safety success paths and respond to i resulting unavailability conditions with alarms, i
2 r f a .a a--. w- s. . ,,.w.y - . . . , , , . ..u-,- .m.v., y- ny -- y , . . - , , ,.,-e,. , p -- -.+*-r*- 4- e+' -- ae er 4 J l i , 1 i i i 18.5 FUb'CTIONAL TASK ANALYSIS 1 Functional Task Analysis (FTA) is performed for the System 80+ plant as a formal _part of the Huplex 80+ ACC design process and Human Factors program Plan (HFPP) . FTA is a means to ensure that necessary operator tasks can be successfully performed. The-FTA , approach functionally decomposes the physical plant and its operations so that procedural tasks and decision processing can I be analyzed independent of - particular hardware implementations. The completed FTA provides the following analytic results'for the design: I A. Procedure Guideline-based Information and Controls Requirements (PGICRs) for the control room human-system l i interfaco;
9. Operator task loading evaluations identify high workload-situations for subsequent resolutions C. Data ' on information and control usage by operators that
supports the arrangement of physical components on .the
, control panels.
The FTA methodology is based.on the approach of References 1 and
. 2; dete.ils are provided in Section 18.5.1. 18.5.1. METHOD 4 4 The System 80+ FTA is based ' on the methodology .used for the Combustion Engineering- Owners Group (CEOG) Generic Operator Information and control Requirements Review (References _1 and 2). This approach, developed and utilized to support the formal-review of existing control-rooms, has been modified to support a-I design. process for the- Nuplex 80+ ACC, particularly by incorporation- of workload- measures and criteria. The' FTA.
methodology is presented in Jix major steps
A. Establish' assumptions and bases B.. Review input and design documentation , C. - Establish _ task decomposition and. data ~ framework' t Amend ent I 18.5-1 Dec ber 21, 1990 <-f 'M '  ?
  • we -+-Ye- - ~m- ' "
l I D. Esttblish loading criteria E. Perrorm analyson F. Document results and cone'tusions Details on each of these steps are provided in the remainder of > Section 18.5.1. 18.5.1.1 Assumptions and Bases The assumptions on which the FTA is based are specified as i follows: A. Evolutionary Design-The System 80+ design activities are being conducted to produce the next generation of i Combustion. Engineering's nuclear power plant. It is an evolutionary enhancement of a proven design - System 80. The functions and features - of tl.a combustion Engineering System 80+ design are incremental rev wlons to this proven design, incorporating technological 1 improvements and operating- experience through .a systematic design process. ) B. Operator's Role ! As -a corollary of Assumption A, Huplex 80+[is .. an . advanced I&C -implementation' of . existing MMI functions. Changes. to , the operators' role, and.the tasks: required to-perform-that-i role in support or operations, are minimal. :Where changes have occurred, they. aim to '1) resolve known problems, 2)' retain. successful aspects of existing control rooms, and 3) avoid new problems. j C. PGICRs. 1 Procedure Guideline-based .Information and.- Control. ' Requirements resulting from the FTA will;be afforded by the systems-based instrument and controls inventory and'.will' be verified ' to ~ be . .available in the . control room, per HFPP requirements. I Amend tI 18.5-2 Dece er.21, 1990i t. i T j .i a D. Event Sequences I i Event sequences are representative examples of normal, j abnormal, and emergency operating scenarios. Event i sequences are generic cases based on the combined operator requirements of expected plant responses and proceduralized
operating strategies (i.e., excluding complex interactions, error propagation, and sabotage.) The analysis of garnic l casen provides adequate data for the FTA's evaluation cf j operator workload and behavioral requirements. Selected' event sequences are specified in Section 18.5.1.5.1; these
. sequences will be incorporated in validation activities per HFPP requirements. j E. Level of Detail 4 Event sequences are detailed by evaluating the necessary.
  • operator tasks per the applicable procedure guidelines
(e.g., Reference 5) along a time line. Event sequences identify decision points and basic decisions, but do not pursue variations of these basic decisions into multiple L
e contingencies. F. Simple Additivity The FTA will consider task elements to be additive and serially processed, unless otherwise noted. No general consideration is given to complex interactions of steps or personnel in the FTA. Formal evaluation of interactions i will occur as part of human factors Validation activities. i j G. Physical and Mental Workload Regarding workload, the main- concern in' the FTA is with mental tasks in control center activities. The associated l physical tasks are within the capabilities of. the 5th percentile-female operator. Exceptions to this assumption, i such as might occur for a : locally performed task, are documented in the data. > H. Workload and Human Error The FTA evaluates operator workload as a comparison _.of the time available for a task, and the--time required to. perform it. Loadings which ' violate the acceptability criteria ~ (see-
Section 18.5.1.4) . are considered error-likely situations to be documented and resolved.
Amend n I 18.5-3 Dece er 21, 1990 z_-- . . _ _ _ _ . _ l i, i 1 I. Staffing i The FTA considers staffing to be a form of workload capacity. Consistent with the concern for excessive workload, staffing is confiervatively assumed to be at the design basis minimum level specified for each event sequence. However, staffing level will. not impact tha analysis unless a detailed evaluation (per criterion B of 18.5.1.4) is mado. I . 18.5.1.2 Input and De_sion Documentation Review System 80+ . includes design enhancements and improvements to j address experience gained from earlier plant designs, criteria ' provided by the Advanced Light Water Reactor (ALWR) Requirement Document, and guidance-from the NRC's Severe Accident Policy.and Standardization Rule. Documentation for the system 80+ design has been reviewed - to identify the plant processes, 3 configurations, and modes of operation. supported. by system descriptions,_ 4 In particular, CESSAR-DC, technical specifications, and training materials for System 8 0, -
provides the baseline for - describing the operating role of the i revised systems in System 80+ and extrapolating their operations for revised procedure guidelines and the FTh. A' list of-these basic purposes of the plant systems and configurations is maintained as part of the System 80+ FTA data base.
i 18.5.1.3 Task Decomposition and Data Framework The following hierarchical structure was used as the framework to decompose event sequences-into componentst I) Gross functions / subfunction-A) Task 1)-Element Each of these levels is detailed as-follows. 18.5.1.3.1- Gross Function / subfunction. Level Gross functions are . high level statements of the operator's general purpose in . performing a related: set of - tusks. They specify a basic. operating goal. (e.g., " Maintain RCS Heat-Removal") from the operator's perspective. Each gross function (or subfunction) statement represents one or more tasks with a R single main purpose, and may be comprised in different situations Amend nt I-18.5-4_ Dece er' 21', 1990 6 by different sets of tasks. Functions appear witnin. sequences in a generic order of performance, per vendor operating procedure , guidelines. Subfunctions are identified if a gross function has multiple purposes; otherwise, the two levels of description are  ; similar. 18.5.1.3.2 Task Level This level analyzes operator behaviors in terms of a generic, closed-loop information processing model. It utilizes a simple , but comprehensive data framework that can accomodate a large variety of specific tasks. The model views a task as falling into one of four basic categories: A. Input (Perception) - Collect or obtain needed information. B. Erocese (cognition) - Evaluate, plan, calculate, decide (etc.) on a result or course of action based on collected or otherwise known information.
c. Output (Action) - Perform the act or manipulation specified.
D. Feedback - Monitor the results of output actions and transmit the results back to the input; this either verifies-success or cues further processing and corrective action. Tasks in a sequence . tend to _ cycle .through these categories, although well-designed and skillfully--performed tasks do not-necessarily show four distinct components. The benefit-of this framework is that it directs the analyst's attention to the necessary components of deliberate, rule-based (i.e., procedural) behavior (Reference 6). - A single task ic expressed by a task statement. A task statement includes two basic parts, which are 1) a verb from the defined verb taxonomy (listed in'the PrA data base), and-2) the.obiect of the verb, (a parameter, component, etc.) For examples - Collect Pressurizer Pressure (verb)- (object) These task statements then serve as the centerpiece around which the remaining task niement data are organized and documented. , .Amendm nt I 18.5-5 Dece er 21, 1990 r 18.5.1 3.3 Element Level The element level of this analysis specifies critical details that may be associated with each task statement. These data complete the FTA picture of task behavioral requirements; i.e., of how the task must be performed. The additional data includes , A) Cues - cues are conditions, prompts, alerts, or . similar items directing that the task statement should be executed. (A typical default cue.for a task statement is its' position within a procedure sequence.) B) criteria - criteria are qualitative _ or quantitative values or limits which are necessary references for correct evaluation'or exection of the-task statement. c) Time Allowed - The time allowed is ' the - period of time required, as assumed by_ the analysis,- for the execution of the - multiple elements comprising .the task . statement.- The initial screening value of time allowed to perform each taek statement is one minute (see Section 18.5.1.4). D) Location - Location is the place or position at which the task is expected to be performed. E) Remarks - Remarks accommodate extra notations, as well as infrequent or miscellaneous task requirement data -(e.g. , tools, references, physical strength or' limitations,ietc.)- Elements are the lowest level of the FTA decomposition. An example of a task-element data form . is .shown in Table 18. 5-1. Additional analyses of- the data performed as part of - the FT A -(i . e . , information and- controla requirements, . and time profile / workload -evaluations) are described in sections 10.5.1.5.2 and_18.5.1.5.3. Amend nt.I 18.5-6 Dece er-. 211: 1990 ' I 6i lt!'.)I; ,! t iI ,! ? .i,! ,,!t<!-LiI!;Ille> r *!r ' 1 4 ~ m s - c k r a , m e n
: R e e ,
t g . a a D P , n - o _ i t a _ c o _ L d e er ,. mi i u , Tq , e R m . r . a o i F + r 1 e a - t t 5 i a y D r , 8 1 c t n E e  % L m B e A t l T c E e j k b s O a , T . l ,- . y b r e V e u
C n
o . i  : t n c o
n i #
e u t /t c . F c kn n n se am e s u u s f Te q o b l e r u .E S G S - a bt .M - 131!!i3 4i j4' j ,  ;' s i ,; 7!1ii- ) ,i ,1 < a i!LJlN l i J q i $ 18.5.1.4 pondina criteria Workload is evaluated on the basis of comparisons between estimates of time available for, and time required by, the elements of a task. Time criteria are as follows: , A. A conservative criterion based on ANS 58.8 (Reference 8) provides a minimum of one minute for each required mal.ual i manipulation (i.e., task element). This is - an initial- ) screening criterion to identify potentially excessive j- loadings.- B. If task requirements exceed- the limits of the screening , criterion in A) above, a more detailed evaluation of the i human 7erformance requirements may be provided, based on a cognitwe processing model presented- in Reference 7. Each 4 such evaluation details necessary assumptions about' human and equipment performance (e.g., see Tables 18.5.1-2. 18.5.1-3, and 18. 5.1-4) which are combined to evaluate the
  • 4 available and required time intervals.
, Failure to meet both criteria A . and B above -indicates tho' need 4 for further design assessment and formal resolution. Such findings are entered into the Tracking Open Items (TOI) database, per the requirements of the HFPP. 18.5.1.5 Analyses 18.5.1.5.1 Scope > The following event sequences comprise a representative cross section of operations-- for the Nuplex 80+ control room FTA, , including all Emergency Procedure Guidelines ~(Reference 5) - A. Startup with Steady State and Transient Power operations 4 B. Shutdown with Shutdown Decay Heat Removal C. Design Basis Shutdown from the Remote Shutdown Area D. 'Mid-loop Operations and Refuelling- . E. Reactor Trip and Recovery F. Loss-of: iolant-Accident-G. Steam t. er
  • rator Tube Rupture Amend nt I 18.5-8 Dece er 21, 1990
--,< y , - -- e- y +a.y , - - , - - e  ! j 11 . Excess Steam Demand ~ I. Loss of Feedwater J. Loss of Offsite Power K. Station Blackout L. Anticipated Transient Without Scram M. Design Basis Failures of DPS and DIAS 11 . Selected Abnormal Operating Procedures 1 O. Selected Tech Spec Surveillances 18.S.1.5.2 Information and Control Requirements The evaluation of PGICRs summarizes the procedure-based parametric requirements for display and control variables identified by the FTA. Summaries are sorted from the FTA database for each variable. For example, characteristics for ' pressurizer pressure' are summarized for each distinct gross function where pressurizer pressure is utilized. Characteristics include the following areas: A. Device typo A recommendation for display / control type for each variable is provided. These recommendations are based on the FTA results, operating experience, human performance characteristics, and human factors guidance. B. Range The required upper and lower value limits for the variable as required for operations. This range is determined by evaluation of transient performance figures. C. Accuracy The instrument accuracy required for each variable based on operator need and transient performance figures is provided. D. Units The recommended unit of measure for each variable .is provided.- These recommendations are based on historical operation,1 records. 4 Amend nt I 19;.E 18.5.1.5.3 Time Proflie/' orkload Evaluation , The event sequences identified in Section 18.5.1.1 are analyzed and reviewed by experts in plant operations. Event time profiles are then plotted on time lines and sectioned into discrete evaluation intervals (to minimize unnecessary calculation, fewer activities may be summed within longer intervals.) Process time estimates are derived by evaluating data from specific event profiles, based on operator experience and process transient response models. Tae time profile evaluation considers: A) The time into the event sequence at which the operator is ) expected to be queued to perform the tasks in an interval B) The time available to perform the tasks in the interval (i.e., plant process constraints) C) The time required to perform the tasks in the interval (i.e., human performance constraints) D) Whether time required exceeds time available for specified task intervals criteria for time required to perform tasks are 'specified in Section 18.5.1.4. 18.5.1.5.4 Identification of Overload Situations and Recommendations If time required exceeds time available per criterion A of Section 18.5.1.4, then task loading is a concern. In such cases, the task sequence is reevaluated incorporating -more refined timing assumptions per Criterion B - (see Section 18.5.3.7 for example calculations) . If this detailed evaluation continues to-show that more time is required than is available for operator action, the-issue is identified in the results, and must receive r'ormal assensment and resolution per the design process and HFPP. 18.5.1.6' Results Documentation The- functional task analysis data are stored on a Personal Computer database system to allow manipulation and ; updating of information. -A description and examples of the data are.provided in Section 18.5.2. Amen ent I-18.5-10 'Dec ber 21, 1990- C TilIS PAGE INTENTIONALLY BLANK Amendment-I ' 18.5-11 December 21, 1990. l CESSAR inMenion l! ) TABLE 18.5.1-2 f
PARAMETER ACCESS TIME CRITERIA FOR SPECJJJ.9 1 UABDWARE IMPLEMENTATION METHODS d
i l Hardware Minimum Access Time Recuired i Discrete continuous display 1 second (estimated time for physical
movement and visual orientation)43)
) CRT displays (access through menu levels) j 0.9 seconds
  • level 1menuacc7gy+ choice j
i-(touchtarggrt decision rt a level 2 menu access 1.9 seconds * (touch target rt + choice i decision rt) x2 ! level 3 menu access 2.8 seconds
  • l (touch target rt 4 choice
decision rt) x3
! , E NOTES: a. Orientation time is an estimate- of the average i time it may take an operator to . physically and visually orient himself to parameter locations on the MCC.
b. Touch target reaction time (rt) is an estimate of the time necessary to physically move hand to and press. a target. This is estimated by.Fitt's law assuming ' distance' = 2 feet and ' target size' =. 1 inch.
c. Choice decision reaction time (rt) is an estimate i of the time necessary to cognitively choose a menu
, option. This is estimated.by Hick's law assuming
n=7 and Ic=157.
  • Orientation time (1 second) must be added to access time ~ if operator must move between' 2' or l more CRTs.
Amendment E . December 30, 1988 fsh". . W! h h k R ICATION  ! TABLE 18.5.1-3 HUKAN PROCESSOR COGNITIVE MODEL { I CHOICE REACTION TIME: User has to make a choice between
  • I responses.
Reaction' Times I H = 240 macc Where H = log 2 (n+1) (Hick's Law) , and n=2 I c = 150 (0-157)' (Correction Factor) The following variables apply to remaining equations: sP = = perceptual systemprocessprocesscycle cycletime time s cognitive system , s,= motor system process cycle time (X-X) indicates the (fast man - slow man) cycle time range PHYSICAL MATCHES: User compares a stimulus to some code contained in working memory. Reaction Times s p + 2(scI " m  ; = 100 [50-200] + 2x(70(25-170]) + 70 (30-100) ' = 310 (130-640) usec E ! NAME MATCHES: User compares a stimulus to some code in i long term memory. Reaction Time: s p + 3(sg ) + s, , { = 100 (50-200 + 3x(70(25-170)) + 70L(30-100) { = 380 (155-810) usec 3 i CLASS MATCHES: User compares aL stimulus to multiple codes in long-term memory.. l - Reaction Time: s p + 4(sc ) + s, 1 = 100 (50-200] + 4x(70(25-170]) + 70 (30-100) = 450 (180-980) usec-l- .) t- . ' Amendment E- ,0 December 30, 1988-3 -- i - - - , . y . , , . , . . _ , , , y- , . , _ ,e.. ,_,.,..wr. .. - , .. , ..,g. 3 -__%- _ l CESSAR%nnne.m - i i , . , t j i I I&BLE 18.5.1-4 COGNITIVE DECIRJON TIME %SSIGNMENT CRITEBIA 4 1 Decision Tvoe criteria for Assianment j Choice Reaction: 1. Determine end of scale or out of range, , (248 msec) e.g., CEAs in bottom position, a j 2. Observe for open/close or , active /non-active.
3. Observe for existence of signal,~e.g.
j- existence of flow. ! Physical Match: 1. Determine rate of change over a short , (310 msec) -period of time. Match one value with the immediately 1 2. !i following parameter.
3. Confirm actions by parameter value
' check. r e I flame Match:' 1. Compare a parameter value,with a value - , (380 msec) in memory as a result of training, I mental recording, e.g. observe for adequate value. ' E + I 2. Determine rate of change over long j' periods of time which requires'the { operator to store discrete observations i in long term memory,-e.g., maintain RCs i temperature. \
3. Mentally record value for.later use.
l Class' Match: 1. ' Compare value-to the expected-parameter (450 msec) value.for that plant situation. i < 2. Observe - for abnormal changes. L 1 NOTE: Eutinate for calculation time and complex decisions-i that could not be reduced to simple decisions have been -
estimated by operations experts. -
l ) @ p "" g g Amendment E iO,Q l December 30, 1986 4 i I 18.5.2 RESULTS The following sections provide an example of typical FTA results for System 80+. This represents a preliminary application of the methodology. The example incorporates specific RCS panel design details, and evaluates an event sequence (reactor trip) of significant interest from a workload perspective. Other panel , details required by this sequence have been incorporated in the database model as interim design assumptions. When completed, j event sequences of the FTA database will incorporate all specified in Section 18 5.1.5.1, and equivalent panel design ' details for all systems required in those sequences. 18.5.2.1 System 80+ System Functions As described in Section 18.5.1.2, a System 80+ documentation review generated a list of basic functions and system purposes for System 80+. These were compiled as part of the task analysis database for the systems listed in Table 18.5.2-1. An example of a system functions description is provided in Table 18.5.2-2 for the RCS. Additionally, a significant amount of information was consolidated for major System 80+ components. This is illustrated by Table 18.5.2-3 for some RCS components. 18.5.2.2 9J,.o. ss Functions b_,y_.]DLen For the events in Section 18.5.1.5.1 event sequences are partitioned by gross function and subfunction. These are stored in the FTA database. Table 18.5.2-4 provides an example of this high-level functional analysis structure for a reactor trip event. Other events may have significantly more gross functions and subfunctions; for example, the Loss-of-Coolant-Accident (IOCA) event has a total of 56 gross functions with over 100 subfunctions. 18.5.2.3 Task List by Event Sequence The next level breakdown results in individual operator tasks being identified for each function in an event sequence. This includes a reference to the system functions identified in Section 18. 5. 2.1. Table 18.5.2-5 lists the task statements for the reactor trip event. Amendr.nt E l( - h Dece er 30, 1988 18.5.2.4 Tsuk Elements by Gross Function and Task The next level of decomposition identifies elements within tasks. This specifies information to be observed or manipulated in order to perform the required actions. At this level of detail, required parameter variables are identified. Table 18.5.2-6 illustrates the task element information developed for the reactor trip event. This listing also -displays task statements by system and system function. Table 18. 5. 2-7 characterize the use of these information elements as a direct precursor to specifying the related information and controls requirements. 1s.5.2.5 a yerameter Usace The task analysis data base was sorted to identify all uses of a ~ given parameter in the event sequences considered. This allows the information characteristics required for a variety of observations to be grouped by major gross function prompts in order to consolidate the information requirements. Table 18.5.2-8 lists - the parameters analyzed for the RCS. As an example of the results of this effort, Table 18.5.2-9 is a
partial listing of parameter uses for pressurizer pressure. The remaining uses for pressurizer pressure and the uses for other i parameters are stored in the task analysis data base.
) 18.5.2.6 Information and control Reuuirements i l The final PTA activity related to determining PGICRs was to consolidate the characteristics required for the major prompts 4 for each parameter. These characteristics are then used in the panel design activities discussed in Section 18.7. As an example, Table 18.5.2-10 identifies the major' operator prompts i for pressurizer pressure. Table 18.5.2-11 gives the characteristics required for. these prompts and a rationale for r each. Similar sets- of information were developed for the
remaining task analysis parameters and stored in the task analysis data base.
18.5.2.7 Event Sequence Time Profil_t A time profile for the reactor trip event is provided as an example in Table 18.5.2-12. This- example -was selected based on its relatively high workload peaks and low design basis workload resources (i.e., sing)e operator in _ tho ' control room). Time assessment data for the sequence's task elements were generated. The resulting time - profile identifies the time into the event Amend nt E {, y Dece er 30, 1988- that each parameter must be observed, the time . allotment for-related decisions to be made, and the estimated processing time based on the model in Table 18.5.1-3. , 18.5.2.8 Evaluation of Reactor Trio Example The Reactor Trip evaluation indicated excessive' loading during minute o to minute 2 of the event. This is consistent with the general notion -that there is an intense rush ( activity occurring with any sudden transition of plant operat...g status. According to the detailed cognitive model, during this interval the operator has - sufficient time only to physically' orient himsnif to - a discreto -continuous display (1 second) or step through 1 menu selection without a physical move to another panel (0.9 seconds). Parameter access through,2 menu levels requires at least - 1. 9 seco_nds plus 1 second if movement- is' required between panels, exceeding the average. time available. Thus, while the overall Nuplex 80+ information_ scheme was sufficient, opportunities for design improvement were identified. To accomodate the need to perform-multiple, predetermined status checks in a short period of time, the recommendation was made to collect these parameters in a single, readily accessible' display location, and format them for rapid verification. These_ findings are entered in: the TOI database. In addition, the1 display hierarchy was revised to significantly reduce the frequency of interactions required for display access. No cognitive overload situations were identified during remaining-portions of this event sequence according to the criteria of~this analysis. The operator can perceive, make decisions, and access all necessary information within the time required.- 18.5.2.9 Independent Data Review In' dependent v erational review ~of the FTA showed a high degree of concurrence with the generated- data. Reviewers _ identified-discrepancies k saz'.y 1 to 2 percent- of the data. These discrepancies wn + r6 solved and appropriate changes incorporatt:d. Amend nt E kr Dece er 30,.1988- , - - _ ~ _ I TABLE 18.5.2-1 SYSTEN 80+ SYSTEM FUNCTION DESCRIPTIONS- , The following terms are used in the data-tables of Section 18.S. ACC. Advanced Control Complex AIR Compressed Air'and Gas Systems ATWS Abnormal. Transient Without Scram AUXSTM Auxiliary Steam System BLDG Building BRS Boron Recycling System CCW Component Cooling Water CRDS Control Rod Drive System CGC Combustible Gas Control CLRT Containment Leakage Rate Testing CNTMT Containment COND Condensate Storage Systen
CSS Containment Spray System CVCS Chemical and Volume control System EFW Emergency Feedwater System FCS Feedwater and. condensate System FDRAIN Equipment'and Floor Drainage System FHS Fuel Handling. System - ,
i FUEL CoreLand Fuel' t HVAC Heating, Ventilation and-Air Conditioning. -IRWST In-Containment Refueling. Water-Storage Tank -
IWSS In-Containment-Water Storage System 2
-MSS Main / Extraction Steam Systes i MUPS Makeup and Purification System , M '3 Pressurizer Level Control System iOk Pre'ssure Operated Relief ~ Valve FPCE Pressurizer Pressure Control System PF' ' Process Sampling System PZR Pressurizer-RCP Reactor. Coolant Pump RCS Reactor Coolant System RVI- Reactor Pressure Vessel-& Internals RX Reactor Syr, tem < SCAS Secondary Chemical Addition-System SCS: Shutdown Cooling System SDS Safety Depressurization System SFW Startup Feedwater. System. SG Steam Generating System SI _ Safety-Injection System H SIT; Safety Injection Tank TG- Turbine Generator Amendment K-7 October-30, 1992 ~ i k '. . ~. CESSARna bou i TMLE 18.5.2-2 FCS SYSTEM PURPOSES AND BASIC FUNCTIONS
1. Transport hot primary coolant from the reactor vessel to the steam generator and transport cooled primary coolant from the steam generator to the reactor vessel.
2. During normal operation and upset conditions, maintain a high integrity boundary for the primary coolant which prevents leaks to the containment atmosphere.
3. During normal operation and upset conditions, maintain pressure in the primary coolant system within specified limits for all anticipated reactor coolant transients, without dependence on pressure relief devices. Maintenance of system pressure is accomplished in the pressuricer.
4. Provide forced circulation for primary coolant.
5. Support natural circulation sufficient to remove decay heat from the reactor.
E
6. Provide overpressure protection.
7. In conjunction with the reactor system, assure that there is only one steam / water interface during normal operations, and that this steam / water interface is located in the pressurizer.
8. Following severe accidents, provide for high point venting of hydrogen and other non-condensible gases.
,h-f Amendment E December 30, 198. CESSAR nainemou o i TABLE 18.5.2-3 GENERAL-SYSTEM 80+ COMPONENT DATA t Comaonent Design & Operating Data 4 ~~C [SSAR-DC CESSAR-F Component (Sys 80+) (Sys 80) i ' E i Reactor Vessel -Total core heat output (MWt) 3,800 3,800 Design pressure (psia) 2,500 2,500 Primary system pressure-(psia) 2,250 2,250 RCS inlet temperature (*F) . 558 568 j. RCS cutlet temperature (*F) 615 621 445,600 lI
Design minimum RCS flow rate (gpm) 445,600 2 Steam Generator
! Number of units 2 2 i Primary Side t
Design pressure (psia) 2,500 -2,500 Design temperature (*F) 650 650 l 2,250 i Operating pressure (psia) 2,250 Inlet temperature (*F) 615.8 621 I
- Outlet temperature (*F) 558 564.5 i Secondary Side s .. E Design pressure (psia) 1,200 1,270 i f Design temperature (*F) 570 575
Full- Load Steam Pressure (psia) 1,000- 1,070 4- Full Load Steam Temperature (*F) 545 553-- l1-Zero Load Steam Pressure (psia) 1,100 1,170 6 6
1. Total . Steam Flow per gen. (1b/h) 8.56x10 9.59x10 4 Full load steam quality (%) 99.75 99.'75.
Feedwater temperature, full 450 -450 power (*F) . Pressurizer 3 E
Internal free volume (ft ) 2,400 1,800
~ Design pressure (psia) 2,500 2,500 Design temperature (*F) 700- 700 - . Operating pressure (psia) -2,250 2,250 F Operating temperature (*F) 653 - 653
Vessel height (ft) 54 42 ,
Volume / Power- ratio . 0.629 -0.472 l Pressurizer /RCS volume ratio 0.194 0.147 l i Amendment I l ' December 21, 1990 , .<h- - - . . -- - .- . . (hh L RT FICATION l TABLt 18.5.? 4 (Sheet 1 of 2) RfACTOP TRIP C#0SS FUNC110NS AND SUBFUACTIONS Cross Functions / Subfunctions erief Description of ooerations 1.00 Standard Post T rip Actions. Specific set cf operator responses to ensure att " safety functionsd have been checked. Established a consistent baseline for emergencies. 1.01 Ensure Reactor Shutdewn. Check for indications for reactor shutdown and follow up to ensure CEAs are t;ottemed. 1.02 Ensure plant electrical power Trip turoine generator and align plant electrical power to a evaltable. source of power. Either of f site through
  • formers or dieset generators.
1.03 Control RCS inventory. Check level to ensure automatic control capabilities are controlling pressuriter level. 1.04 control RCS pressure. Check pressure to ensure automatic pressure controt features are controlling RCS pressure. E 1.05 Control core heat removal. Check for operation of RCPs. 1.06 Control RCS heat removal. Check SG parameters for steaming and feeding to exist or the capability to steam and feed a SG. 1.07 Maintain containment integrity. Check containment atmosphere for si0ns that additional containment integrity measures may need to be taken. 1.08 Controt containment atmosphere. Check containment atmosphere for signs that additional containment cooling measures may need to be taket.. 1.09 Control containment combustible Check for the presence of combustible gases in containment, gases. 2.00 Diagnosis of event. Evaluate information collected during SPTA to determine event. 3.00 Ensure SPTA performed. Confirm Standard Post Trip Actions have been performed. 4.00 Confirm diagnosis of event. Evaluate information collected to confirm SPTA and determine event. s 5.00 control RCS inventory. Control pressurizer level within indicating range, fg p' Amendment E I Ve Q December 30, 1988 1 . . !- CESSAR M Lmo i i 4 TABLE 18.5.2 5-(Sheet 1 of 3) f4 i i REACT 0e TRIP TA$r iiSTING l .. task Derived from f- System function ! ($vstem 8 Function W) I ' Gross Function / Subfunctions Task Statement i i 1.00 Standard Post Trip Actions._ Ref er to #1.01 to 1.09. .I Cot tect NI trif ormation. RX-1 l 1.01 Ensure Reector Shutdown. Cottect CIA position information. CEA 4-l Rx 4 - 'r Evaluate information. g 1.02 Ensure plant electrical power Collect TG output information. ELEC l' Collect bus feeder information. ELEC-j available.
  • ' Evaluate information.- ELEC e
Collect diesel generatorioutput. ELEC' } information. Evaluate need for diesel. ELEC-f. Start dieset. ELEC li 1.03 Control RCS Inventory. Cottect Par parameter information. P2R 1, 2, 4 E ~ !- Cottect CVCS flow to and from RCS, CVCS 1, it Evaluate demands for CVCS flows. CVCS 1. 11 l f i 1.04 Control RCS pressure._ Cotteet RCS pressure information. =RCS 3 Evaluate against control limits. .P2R 5, 6 -control core heat removat. -Cottect RCP information. -RCS 1 . 1.05 Decide if RCPL-are operating. - R C S 1 -- f-I- F 1.06 Control- RCS heat removat. Cottect SG parameter information. 'SC 3,'5, 6 !' Cottect MSS flow information. MS$ 4', 5,- 6 Cotteet FCS flow information. FCS 1 f i-Decide SG avaltability for heat RCS 1 i~ -removat.' i 1.07 ' Maintain containment integrity. Cotteet containment parameter CN1MT 1-j. -information. . .
Decide if isolation is-required. CNTNT-1
!~ 1.06- . Control containment atmosphere. -Collect containment parameter.. .CNTNT 1.. l Information.
l. Decide if additional cooling'is -
CSS l ' 4 needed, t i ? lh[ - Amendment E' December'-30,<1988 /UTO , .. .-.a, . . , - . .  :..-, . , :-. , : : , , . . , , . . , CESSARnubio TAsti 18.5.?,i (Cont'd) (Sheet 2 of 3) Ri.A C T OR TRIP TA$r tisitwc fask Derived from System Funct ien Gross function / Subfunctions Yesk Statement firstem & Function e) 1.09 Control containment combustible Collect Containment H2 parameter CCC 3 gases, information. Decide if H2 esitts. CGC 3 2.00 Diagnosis of event. Review collected info si.01 to 1.09. Decide event. 3.00 Ensure SPTA performed. Review collected information #1.01 to 1.09. Decide if SPTA performed. CDP Perform outstanding actions. 4.00 Confirm diagnosis of event. Review collected information r1.01 to 1.09 Decide event diagnosis is cc.ifirmed. 5.00 Control RCS inventory. Collect Par parameter information. P2R 1,2,4 E Collect CVCS flow to and f rom RCS. CVCS 1, 11 Evaluate demand for CVCS flows. CVCS 1, 11 6.00 Control RCS pressure. Collect RCS pressure information. RCS 3 Evaluate against control limits. P2R 5, 6 7.00 Control RCS heat removal. Collect MSS flow information. MSS 5, 6 Collect SG pressure information. SG 1 Crtlect RCS temperature information. RCS 1 Control TBS rate of steaming. MS$ 5 8.00 Maintain SG inventory. Collect SG parameter inforration. SG 3, 4 Collect MS$ flow information. MSS 4, 5, 6 Evaluate demand for SG makeup. SG 3 Decide rate of feeding SG. SG 3 Decide method of feeding steam SG 3 generator. Refer to either #8.01 or 8.02. 8.01 Control Nain Feedwater to SGs. Control main feedwater flow to SG. FCS 1 Collect FCS flow Information. FCS 1 Evaluate against demand for SG SG 3 makeup. l , '13 Amendment E December 30, 1988 CESSAR 8!! Gem:n TABtf 18.5.? 5 (Cont'd) (Sheet 3 of 3) PfACTOs TRIP tASr LISTIhG Task Derived from System function Cross Function / Subfunctions task Statement (System S function e) 8.02 Control emergency feedwater to SGs. Control emergency feedwater to SG. EFW 1 Collect emergency feedwater flow EFW 1 information. Evaluate against demand for SG SG 3 rna k e up. 9.00 Evaluate need for a cooldown. Refer te 89.01 to 9.02. 9.01 Ensure condensate reserves Cottect condensate reserve parameter MuPS 1, 2 adequate, info. Evaluate parameters against RCS 1/SG 3 specified limits. Decide adequacy of reserve. E 9.02 Control RCS pressure. Cottect RCS pressure information. RCS 3 Evaluate against control limits. PZR 5, 6 10.00 Maintain RCS parameters, teier to #10.01 to 10.03. 10.01 Control RCS inventory. Cottect Par parameter information. P2R 1,2,4 Cotteet CVCS flow to and from RCS. CVCS 1, 11 Evrtrate demands for CVCS flows. CVCS 1, 22 10.02 Control RCS pressure. Cottect RCS pressure information. RCS 3 Evaluate against control Limits. PZR 5, 6 10.03 Monitor RCS parameters for forced Cottect RCP parameter information. RCS 4 Cire. Cottect RCS parameter information. RCS 1 Evaluate against specified limits RCS 4 f or ops. f , Amendment E December 30, 1988 ? i CESSAR ni%ma i I a .~ TAstt 18.5.2 6 ( I -- (Sheet 1 of 4) REAcf08 TRIP TASK ELEMENT LISilWG l Cross Task Derived from (Collect) 1ask Elements ' Funct. System function Parameters to observe. l No. Subfunctions Task Statement (System & Function 8) (f or det ail see AppendIn E) k 1.00 Standard Post Refer to #1.01 to 1.09. 1 Trip Actions. i Rx 1. CEA position
1.01 Ensure seactor Cottect N1 information.
i Shutdown. Collect CEA position information. CEA 4 CEA position Evaluate information. RX 4 Reactor'pover (N1)- f ! Startup rate-(N1) 1.02 Ensure plant Cotteet TG output information ELEC 13.8 kV services bus feeder ! -electrical Collect bus. feeder information. ELEC 'DG output breaker  ; j power. Evaluate information. ELEC ,DG output breaker- ~ 4 avaltable. Collect dieset generator output ELEC 00 output frequency- , information. f OC output voltage Evaluate need for dieset. ELEC I- Start diesel. ELEC turbine generator breaker g -position I- Turbine trip-t Charging flow ~ 1.03 Control RCS Collect Par parameter information. P2R 1, 2, 4 Inventory. Collect CvCS flow to and from RCS. CVCS 1,-11 Letdown flow-I Evaluate demands for CVCS flows. CVCS 1, 11 'PLCS setpoint.tevet j _Pressuriter Levet . Pressurizer level- {' 8 RCS.subcooling . Time. 1-1.04 ' Control RCS . Collect RCS pressure information. -RCS 3 PPCS setpoint pressure
pressure. Evaluate against control Limits. PZR 5, 6 Pressur(ter,. pressure-Pressuriter pressure Time
~~ 1.05 .'ontrol C core Cottact RCP information. -RCS 1- RCP Amperes-Decide if RCPs are operating. ~ heat removal. RCS RCP speed 4 RCS cold leg temperature. RCS. hot Leg. temperature - 1 5 1 s Amendment-E December 30,-1988
d. . - ..;s #. .-. _, . , _.-.-_,_.._,w..... . . - . . . . . _ , . . , _ ,
1 F .CESSAR Minm x i l i #  ? d ' :-) , T Aett 18.5.P-6 (Cont 8d) 3 (Sheet 2 of 4) i
  • PEACTOR TRIP TA$r ElfMENT LISTfWG f
I Gross Task Derived from (Collect)' Task Elements Funct. -System function Parameters to observe j No. Subfunettons task Statement (System 8 Function 8) (for detett see Aeoendix f) 1.06 Control RCS Collect SG parameter information. $G 3, 5, 6 Emergency'feedwater flow-4 heat removai. Collect Mss flow information. Mss 4, 5, 6 Main feed flow , Collect FCS flow atmosphere. FCS.1 Main feedpump speed' Decide SG aval' l ability for heat- RCS 1 Main feedwater flow-f _ ~ Main steam flow y removal. -RCS average temperature j Steam generator level l Steam generator pressure I . i- 1.07 Maintain totlect: containment parameter CNTMT:1  :: Containment - area radiation .
containment information. . .
r integrity. Decide if isolation is required. .CNTMT'1 Containment pressure 4 . Steam plant radiation -Containment pressure' E 1.08 Control Collect containment parameter CNTMT 1- { conteinmenti information. atmosphere Decide if additional cooling-is CSS 1- Containment temperature-lL needed. .1.09 Control Collect Containment H2 parameter .CGC-3  : Containment pressure I containment information.
combustible Decide if H2 exists. -CGC 3' containment temperature gases.
g '2.00 Diagnosis Review cettected info #1.01 to' containment pressure- { of event. 1.09.- Containment temperature-
  • Decide event. -Pressuriser levet
! Pressuriser pressure i = Steam generator level i . . . 3.00- Ensure SPTA - Review collected information. performed. #1.0 to 1.09. D'ecide if SPTA performed. CDP l Perform outstanding actions. p i i Ae:s-ZL Amendment 1E i' December 30,.1988 _ I b -4 L CESSAR !!n% mon b t 1 l- ~ e TABLE 18.5.2 6 (Cont'd) i i (Sheet 3 of 4) PE AC10e TelP T A$r ELErtN_f LISTIWG - 4 i Gross Task Derived from (Collect) Task Elements Funct. System Function' Pacameters to observe: No. Subfunctions Tesk Statement (System & Function #1 (for detait see Appendia E) 4.00 Confirm Review collected information diagnosis #1.0 t o 1.09. of event. Decide event diagnosis is confirmed. f i . ! 5.00 Control RCS Cottect Par parameter information. P2R 1, 2, 4 Pressurizer level $ inventory. -follect CVCS flow to and from RCS. CVCS 1, 11 } Evaluate demand for CVCS flows. CVCS 1, 11. I _ Pressurizer pressure , 6.00 Control RCS Collect RCS pressure.Information. RCS 3-i pressure. Evaluate against control limits. PZR 5, 6 4 MSS 5,'6 . Main steam flow . E l 7.00 control RCS Cotteet MSS flow information. i heat removat. Collect SG pressure-information.- SG 1 RCS average temperature l Cottect RCS temperature information. RCS 1 -Steam Generator pressure Control TBS rate of steaming. MSS 5 Turbine 1st stage steam pressure - e i~ .. > 8.00 Maintain SG Cottect SG parameter information. SG3,4 Steam Generator'tevel inventory. Cottect MSS flow information. . MSS 4, 5, 6 - . I Evaluate demand for SG makeup. SG 3 Decide rate of feeding SG. SG 3 j~ Decide method of feeding steam - SG 3  ; generator.. Refer to either 88.01 or 8.02.
8.01 -Control Main Control main feedwater flow to SG. FCS 1 . Main feedwater flow E-Feedwater to Cottect FCS flow information. FCS 1 SGs. -Evaluate against demand for SG SG 3 makeup.
i 8.02- Control emer* Control emergency f eedwater to SG. EFW 1 ' Emergency feedwater' flow gency f eedwater Cot tect emer$ency f eedwater flow EFW 1 1 to SGs information. .s Evaluate against demand for SG. SG 3 i -. makeup. t i {, d -. ' Amendment-E--  ! [ ~ December 30, 1988. i 4 CESSARLnu biOr ( 1AstE 18.5.2-6 (Cont'd). (Sheet 4 of 4)- ,i . PEAct0R TelP TASK ELEMEWt LISTfNG f l Gross task Derived from (Cottect) Task tiements i Parameters to observe Funct. System Function i 'Tosk Statement (System & Funetton #) (f or' detall see Appendir E) No. ' Subfunctions I 9.00 Evaluate need Refer to #9.01 to 9.02. for a cooldown. { t J MUPS 1, 2 Condensate storage' tank Cottect condensate reserve
j. . 9.01 Ensure parameter-info. Levet j condensate reserves Evaluate parameters against RCS 1/SG 3 I RW1 - ( eve t adequate. speelffed timits.
Decide adequacy of reserve. Cottect RCS pressure information. RCS 3 Pressurfter heater power i' -9.02' Control RCS pressure. Evaluate against control limits. P2R 5, 6~ Pressurizer pressure Pressurizer pressureL 10.00 Maintain RCS Refer to #10.01 to 10.03, parameters. 4 Cottect PIr parameter information. P2R 1,'2, 4 Pressuriser levet _10.01 Control RCS inventory. Collect CVCS flow to and from RCS. CVCS 14 1.1 ; E' i Evaluate demands for CVCS flows. CVCS-1, 22 - 1 10.02 Control RCS- Cottect RCS pressure.information. RCS 3 ' Pressurizer pressure i pressire. Evaluate against control, limits. P2R 5, 6-t- Collect'RCP porameter information. RCS 4 RCP speed l 10.03 Monitor RCS _ parameters- Cottect RCS parameter information. RCS .1 RCS cold leg temperature [ RCS hot leg temperature: for. Forced Evaluate against specified limits. RCS_4
-Cire, for ops, f
i L ~ Amendment EE
December:30,jl988-
i L CESSARnabiu i 1 i TA9tE 18.5.2 I s
  • ($heet 1 of.5) 3 REACTOR TRIP CottECT INF00 MAT 10N.
1
  • Gross
! Function No. Parameter to Obsg ve Observation to Make t i 1.01 CCA position Observe to determine position of CEA in core / fuel. I 1.01 CEA position . Observe for CEA bottomed position. j I e i 1.01 deactor Power (WI) Observe nuclear instrumentation for decay I ] value (indication that reactor is shutting down). 4 f-1.01 Startup Rate (NI) Observe nuclear instrumentation for negative rate of change. ( l' 1.02 13.8 kV services Bus-feeder Observe for closed breaker. 1.02 DG output breaker If DG is off. observe for open position. E 4 1.02 DG output breaker if UG is running and 13.8 kV service bus is without power, observe for closed position. lI 1.02 DG output frequency if DG is started, observe f or output I voltage, l. a l 1.02 Turbine generator Observe for open indication of-TG output i j .- breaker position breaker. I 1.02 ' Turbine trip Observe for indication of Turbine Trip.- activated. II Observe for PLC$. demanded flow, j 1.03 Charging flow; i-I- 1.03 Letdown fIow Observe for PLCS. demanded fIow.~. 1-1.03 -  : PLCS setpoint level - Observe for comparison to pressurizer. tevet and expected transient demand for setpoint, , ~ -Pressuriter level-- Observe to determine rate of inventory -1.03 ' change. !- ' 1.03 ' Pressuriter level Observejfor PLC$ demanded Levet. }> . . I - ~ Amendment E. - - - . December 30, 19881 e - _ . . . _ . . _ , _ _ _ _ . . _ , _ , , - , ~ , - , . , , , r LCESSAR1!nh ms j ' ) [ TAstt 18.5.2 7 (Cont'd) i- (sheet 2 of 5) I REACTot TRIP CotttCT INF0eMAfl0N 4 Cress i Function No. Paremeter to Observe Observation to Make h 1.03 RCS subcooling observe-for indications that subcoolins'- ] exists. , 1.03 Time. Observe to determine " rate of change". l 1.04 PPCS setpoint. pressure Observe for comparison to pressuriter ~ pressure. I 1.04 Pressuriter pressure Observe-for PPC$ demanded pressure. f-l Pressurizer pressure Observe to determine' rate of change, E. h 1.04 i \ 1.04 Time Observe to determine'arate of change". ( h' -1.05 RCP Amperes observe for trend of current to determine . If _ RCPs.are operating (an analog value
f. ~ method).
i f 1.05 RCP speed Observe to determine' if RCPs' are- , operating (an alternate - digital value method). {-_ 1.05 RCS cold leg temperature observe to determine delta T between hot l and cold _teg temperatures for the same l' t oop .- ~ 1.05 RCs hot leg temperature- observe to determine detta T' between hot - l and cold leg temperatures for the same tcop._ 1.06 Emergency feedwater flow- If' actuated, observe for flow ts, restore
$G tevel to normal' band while NOT-
_ overcooling RCS,- 1.06- Mair. feed flow observe for reactor trip override (Rio) response (a bypass.controtting flow is '-
l. expected).
, 1.06' Main feedpump speed observe speed decrease. I h. ~ - *: ^=eaa eat O- LDecember 21,. 1990' CESSAR rCsicu CCRTIFICATION T ABL E 18.5.2 7 (Cont 'd) (Sheet 3 of 5) PEACTOD 1dlP COLLFCT INFORMAT_LOE Gross function ho Paremeter to Observe observation to Nahe 1.06 Main f eedwater flow observe for fWCS demanded flow to restore SG Level without overcoolitig the RC5. 1.06 Main steam flow observe for 185 demanded flow. 1.06 RCS average temperature Observe for value being maintained. 1.06 Steam Generator level Observe for existence of level. 1.06 steam Generator pressure observe for pressure above operating pressure but below SG safety relief Iimits. 1.07 Containment area radiation Obser ve f or detection of radiation ibove normal levels, 1.07 Containment pressure observe for existence of pressure above normat containment atmosphere. E 1.07 Steam plant radiation observe for detection of radiation. 1.08 Containment pressure Observe for value above normat. 1.08 Containment temperature observe for value above normat. 1.09 Containment pressure observe for vetue above normat. 1.09 Containment temperature Observe for value above normat. 2.00 Containment pressure Observe for normat containment atmospheric conditions. 2.00 containment temperature observe for normat containment atmospheric ctanditions. s 2.00 Pressurizer level observe for transient recovered by PLCS. 2.00 Pressurizer pressure Observe for transient recovered by PPCS. v Amendment E December 30, 1988 CESSAR !!ahm 18 9t t 18,5.2 7 (Cont 'd) (Sheet 4 of 5) REACTOR 1 RIP COLLECT IWF08?ftf0N Gross function We, Parameter to Observe Observat(en to ke6e steam Generator (evet observe for transient recovered by FvCS. 2.00 Pressurizer tevet observe for transient recovered by PLC$. 5.00 Pressuriter pressure Observe for transient recovered by PPCs. 6.00 E 7.00 Main steam ttow Observe for small (<5% amount of steam flow). 7.00 RCS average temperature 7.00 Steam Generator pressure 7.00 Turbine 1st stage steam pressure steam generator level Observe for transient recovered by 8.00 FWCS to normat level. 8.01 Main feedwater flow Observe for FWCS demanded flow. Emergency f eedwater flow If actuated, observe for flow to 8.02 restore SG tevet to normal band while NOT overcooling RCS. Emergency feedwater tank Observe to (mentally) record value for 9.01 I calculation of reserves availability. 9.01 IRWST levei observe to (mentat ty) record value for calculation of reserves avaltability 9.02 Pressurizer heater power Observe for ON/0FF conditions as PPCS E demands. Pressuriter pressure Observe for changes in pressure not 9.02 normat to PPCS control. , 9.02 Pressurizer pressure Observe for value to make assessment of pressure condition required to make any repairs ~ Amendment I December 21, 1990 CESS AR !!Mncni:s TA9tf 12.5.2-7 (Cont'd) (sheet 5 of 5) REAt109 ftl M 0tttCT IWFORMATIOW Cross Function No. Parameter t o Observe Et. servat t en t o Mak e Observe for constant inventory. 10.01 Fressurizer Level Pressurizer pressure Observe for constant pressure. 10.00 E 10.03 RCP speed observe to determine if RCFs are operating. 10.03 FCs cold leg temperature observe to determine detta 1 between hot and cold leg temperatures for the same loop. 10.03 RCS het leg temperature observe to determine detta 1 between hot and cold teg temperatures for the same icop. s 4 Amendment E 1
  • December 30, 1988
4 4 CESSAR !!ninema _ i TABLE 18.5.2-8 4 2 U ST OF AJALYZED RCS PARAMETERS'  ! Parameter. J 3 Pressurizer Level Pressurizer Pressure j Pressurizer Spray Flow j A RCP 1A Differential Pressure RCP'IB Differential' Pressure i RCP 2A Differential Pressure {. RCP 2B Differential Pressure 'RCP 1A_ Speed l RCP-1B Speed RCP 2A Speed RCP-2B Speed l
RCP Amperes l RCP Bleedoff Flow E RCP Motor Temperature l RCP Operating Status RCP Seal State Pressure (s)
RCP Seal Stage Temperatures i- 'RCS Average Temperature i RCS Boron Concentration - RCS-Cold Leg. Temperature RCS Hot Leg-Temperature RCS Subcooling
Reactor. Vessel. Level l.
I 4 4 i . Amendment E Y , December.-30, 1988 u 3 - L CESSARiinL mw 3 TABLE 18.5,2 9 i' (Sheet 1 of 3) i PRES $UptZte PRfssupt PARAMfff t U$f 5 i i Event Observation to kale " Gross imet ion No. 6.00 sG1R observe pressure and rate of pressure decrease to (1300 psia or required uorst case event $1 and RCP setpoints). 1
-23.02 LotA 1 observe for value ac tose" to hot standby.
i 18.03- SGit observe to (mentat ty) record RCS pressure. f- . I 33.03 LOCA 1 i 4 24.00 SGit observe for decreasing pressure.
31.00 scit observe to record RCS pressure below Sif isolation setpoint.
i l 22.02 LOCA 1 Observe for decreasing value. l 10.02 Ra Trip observe for constant pressure, f 9.02 Rx trip observe for value to make assessnent of pressure condition a recpired to make any repairs. E-6.00 Ra trip Observe for transient recovered by PPC$. j- 2.00 SGTR -- Ooserve pressure decreasing at rate greater than heater capacity can makeup (i.e., " noticeable rate"). ~ I 1.04 Am Trip observe to determine rate of change.. l- . 17.01 SGTR Observe to (mentally) record RCS pressure. i 21.00 -LOCA 1' ' observ'e to determine rate of change. l $ 29.00 ~ LOCA 1 observe 'for dropping pressure, f- ?-  ! d 6 i i~ t . t ..% -
o.
Amendment E; _ L' December 30- '1988-4 4 - ~ . . -w > ~ - - - , , . , - , y v s ne- , , . , , . . - e .-,w 4 . L a  ; CESSAR ?!nbiss ' 4 i e - 7- .(- i 4 TAptf 18.5.7 9 (Cont'd) a -- i . t E. j (Sheet 2 of 3) . I PRftstelfft, PRESSURE PARAMEfft lff$ , b Cross F metton No. E vent Observation to Wale $CTR ~ Observe f or value to copre with P 1- Limits. 3 25.01 i LOCA 1 0bserve for value to calculate core subcooling. ! 29 01 4 a LOCA.1 Observe to determine rate of change. , 21.00-2 . - ~ Observe for.value at or below specific pressure during ! '36.00 LOCA 1 depressurlastion and cooldown. Ra trip ' observe for changes in pressure not normat to PPCS controt. 9.02 I i t-1.04 SGTR- Observe to determine rate of change. l E 33.02 LOCA 1 Observe for value at or atme specified pressure during
  • depressritation, i
1- . observe for transient recovered by PPCS. ! 2.00 Rx Trip 25.02 LOCA 1 Observe to detect excessive rate of change. 4 1 22.01 'toCA 1 . Observe for value to conpare with P T timits, i 3 37,00 LOCA t- Observe for changes in pressure that are LESS than espected. i "Rx Trip observe for PPCS demanded pressure. 't.04  ; 20.00 LOCA 1 Observe to (mentally) record value for assessment of charging flow to RCS. i: I -~ 8.02 SGTR Observe for coriparison to RCP operating limits, i g-i ~. }. 1 I Amendment-E -] -December ~3 0_, _ 1988~ i, m, ,e-.-- y 6. . - e.- , un,- , y ,nnnmvs o } CESSAR !!n%uiu ,i 4 T ABtf 18.5.2 9 (Cont'd) (Sheet 3 of 3) 1- , Ut$SOtllER P9f S$URE PARAMEff R (f$f$ Cross F metion No. E vent observation to Make i 1 22.05 LOCA 1 Observe for value to conpare to HPSI header pressure. 4 n-2 25.01 LOCA 1 Observe for value. 19.04 SG1R Observe for pressure being maintained, j 21.01' LOCA 1 Observe to ecopare to HPSI header pressure. ] 1 17,03 Scia observe for a decreasire pressure. s 1 - 23.03 LOCA 1 C6 serve for rate of change, t
34.00 LOCA 1 Observe' for value at or above spe-
ific pressure daring depressurlastion and cooldown, l
i i- 24.04 LOCA 1 Observe for value for calculation of s h ooting. . E i , 34.03 SGit Observe to confirm changes in pressure due to initiated l actions, t 4 I i t. 4 I 4 4 1 i-  % 3. 4.. i 5 a
  • Amendment E
,- h ~ . December 30,.1908- -l l CESSAR1!nk m. i-i } 3 . taott 18,5.2 10 t + 4 PAR Awff f P St> MARY FOR PRES $t*17f 8 PRf $$LSE t 4 1 $UMMARY Of USACE 1 j Orerator Prcrotj A t t oc at ton Notes
  • j .:
i Relief. Valve Open Aut aut ic s Mi Press Deviation Automatic 4 Normal Pressure Autcmatic Lo Press Deviation Aut omatic i a j $1 Stock Enable - Virdow tJ Actuate SI AS Block for Cooldown , l 1 A d' j St Actuation Automatic frip RCPs 12/L2 -EOP 5trategy 1-1 RCP Restart Pressure Permit on increasing Pressure !- E j 1 rip att RCPS On Decreasing Pressure . l } i- ~ Isolate $1T During Controlled Cooldown only.on Decreasing Pressure { 4 1 . l Unisolate LTDP On Decreasing Tenperature During Controlled . . SCS Entry ~ Cooldown & Depressurtration i W i 4 ' i i ..
i. -
4 i-i- !~ i 7 Amendment E t - b'. , December 30:, - 1988 - . ,- -, - , m . . , . . , . . . _ . . . . _ _ . . . ,,,...-....,_,....,_,,,.,;,,,._,.-.....,..,.a_,,_, CESSARnaince TABtf 18.5.2 11 (Sheet 1 of 7) PRESSUR12fR PRESSURE CHARACTEPISTICS GROSS FUNCil0N PROMPT $1 Actuation Tyre Characteristics Rationale Display Status A pressure point is needed to determine that $1 actuation is necessary for 10P events with a loss of pressure / inventory control. The operator uses this to verify actuation of bl. If proper actuation has not occurred this information prompts manual actuation. Range Actuate SI/Off See rationale for status above, E Accuracy N/A Display accuracy for a statug 10 ambibuous therefore no requirement is specified. l r Units on/0ff Units for an operator prempt or annunciator (on/off represents no specific unit requirements). l l t l l l l l 1 Amendment E December 30, 1988 CESSAR nairlCATISH taste 18.5.2 11 (Cont'd) ($heet 2 of 7) P R E 5 5Up l ? E R PRESSURE CHARACTEt1STICS CROSS FUNC110W PROMP1 RCP Trip 4 lyne Characteristics Rationale Display Status A pres *ure point is needed to determine when to implement the trip 2/ leave 2 RCP operating strategy for E00 events with a toss of pressure / inventory control (also f or trip 4 when below ECP operating limits). E Range trip RCPs/Off See rationate for status above. Accuracy W/A Display accuracy for a status is ambiguous therefore no requirement is specified. Units On/Off Units f or an operator prempt or annunciator (on/off represents no specific unit requirements). ~ Amendment E December 30, 1988 CESSARHnLms TABit 18.5.2-11 (Cont'd) (Sheet 3 of 7) Ef$$UR17tp PPESSUPE CHARACTEP,$ilC$ GROSS FUNCTION PROMPT Pressure Temperature Tech Spec Limitations pationate Type Cherecteristics Value A value is needed to assess the parameter to Display compare with P T limitations. Range 485 to 2485 These high and tow values are consistent with the pressure constraints of the P T curve supplied with C-E plants. Accuracy + or 100 Typical P.T graph resolution. Comparison $ E can be made assuming a display accuracy not significantly greater than the reading resolution (60 80) psi. Units psig Units for a pressurized fluid system operated at elevated temperatures. PSIG are appropriate units to determine subcooling of a systen's fluid. Units of PSIG are consistent with pressure instrumentation throughout the plant. l Amendment I ) _ December 21, 1990 [ {V o I CESSAR 8!!Lmu .- w. taste 18.$.2 11 (Cont'd) ($heet 4 of 7) PRES $URI?ER PRES $UeE CHARsCTERISTICS CROSS FUNCil0N PROMPT RHR Operation (Shutdown teoling System Operation) Type Characteristics Rationate Display Value , A value is needed to assess the parameter with the constraints or limits of RHR operation. Range O to 885 The high value is the minimum pressure for SDC entry (system 80+). The low is a minimum to monitor refueling operation- :nt ry. (approx. atmospheric) E Accuracy + or 15 To be able to determine if depressurized or if change in pressure has occurred to approach LTOF. tJni ts psig Units for a pressurized fluid syst o operated at elevated temperatures. PSIG are the appropriate units to determine subcooling of a system's fluid. Units of PSIC are consistent wit,i pressure instrumentation throughout the plant. r , h-k Amendmelit E December 30, 1988 r . L 4 CESSAR En!%ma I' J e  ! TABLE 18.5.2 11 (Cont'd) j + (theet 5 of 7) , u { PRESSURITER PRESSURE CHARACTEtistlCS e i GROSS FUNCTION PROMPT i. ! Standard Post Trip Actions I s= Tvoe Characteristics Rationale alsplay Trend A pressure trend supports diagnostics and j assessment of plant transient conditions. 1 , l i Low ranges' below s!-tank pressure (LOCA large j Range 485 2485 5 break). High range: safety or PORV relief setpoint (ATWS/LOCA)- t 4 Accuracy + or - 100- Based on transient. rates of pressure ( 600 psi / min ! (LOCA);. 650 psi / min (SGTR); and 400 psi / min (RT) and the application accuracy for dicanostics is l_ l not as important as the ability to determine the d- parameter's characteristic trend or-changes. i j Units psig Units 'for a pressurized fluid system operated at j elevated temperatures. P$lG are the appropriate j un.ts to determine subcooling of a system's~ fluid.
Units of PSIG.are consistent with pressure-instrumentation throughout the plant.
~ 1 i I t i-4 s . Amendment ~E ' f v- b-December- 30, 1988-d ..w . , ry,e. -.w q , , . . , - - . , , -.y y y - , , , -,,<,-n,. 1' e ! CESSAR Smhion , .l . W TAett 18.5.2 11 (Cont'd) i-j (Sheet 6 of 7) l PPf$$UR12ER PPES$URE CHARAcittISTIrs-t CRo$$ Ft'NCTION PROMP1. 4 4
i. Margin of Subcocting I Rationale fvoe Charseteristics A value is needed to assess the parameter.as-Display .value compared witn. saturation conditions. 'The Intent 1-is to ens;re eubcooled liquid is available to
[ transfer mass (ftuid mass) for heat removat. Range 0 1985 .T .is approx. 615'F.which corresponds to approx. 1I85psigasahighsaturationpressureuithout j- pressurizer control'(LOCA, SGTR, etc.) to Hi Pzr Pressures of approx. 2385 psig (HI relief pressure). i - (' -4. A tow T' is approx. 500'F which corresponds to b i~ approx. 665 psig an' assumed low for LOCA & SGTR. From normat operating pressure this'ylcids a I. margin of pressure equivalent to approx. 1585 psig. ' MSLB approx. 400'F and'235 psig or 1985 psig-- ' subcooled.  ;. Accuracy + or 70 To be able to determine if subcooling exists or does 4 not exist in the fluid remaining. Assume the ! . retations' ' 7 pst/*F and + or .- 10*F. 1 1 I 4-2 4 a - f-h, . [ - k - -Amendment'E - December 30, 1988: - . . ,.= . . . . . , ., . ! CESSAR !!!!%mo 1Atti__it 5,2 11 (Cont'd) (Steet 7 of 7) l'etituel2tt Fttitust twatsjttelstitt CR0$$ fuhC110N t t 041 L Margin of Subconting (Cont 8d) T yr'e therpetteistics _ ttlienste Units psig Use of units need to be consistent with the nornial subcocted piessures of pressure (i.e., pressurised subcooled system et high temperatures using psig). Amendment E h, - [ December 30, 1988 f CESSAR in!%ui. 1 I 1sett 18.5.2 12 ($heet 1 cf 3) . t Ptstice 181P 11ME PROFILt L 11pe into Ilme oitoteent Processing kJter of Cor rect ion for infonhation lines Control fattor Strettpr event (minutes) (esec) Actions -. - (sec) (lenent No. (mirmites) Parameter to Observe 0.50 380 1.0 1.01 0.00 Ct A posit ton 0.50 248 ' O.5 1.01 0.00 CtA position 0.50 450(4) 2.5 i 1.01 0.00 teactor Power (hl) 0.50 310(4) 2.5 1.01- 0.00 5tartto Bete (Wl) ee 0.50 248 1.0 1 02 0.00 turbire Generator Breaker Position 0.50 248 L0 1.02 0.00- turbire irIp 11pe 0.00* 380 14
  • 03
. 0.00 0.00 380 LO  ; -1,04 0.00 line 150 380 1.0 t 1.04 0.00 Pressurtser Pressure BCP Asperts 0.00 310*450 W 1.05 -0.00 e. 0.00 450*450(2) 1.5 1.06 0.00 teergency f e@ater (tow M 0.00 Main feedpsip $ reed 0.00 248(3) 1.06 [ 0.00 380(2) 1.5 7.00 0.00- RCS Aversee Tenperature 0.00 380(2) .1.5 7.00 0.00 stese cereretor Pressure turbine 1st stege steam Pressure 0.00 380 ,1.0 7.00 0.00 e. -2.00 248 1.0 -E' 1.07 0.14 Conteittent Pressure o. 2.00 248 0.5 1.08 0.14 Contatreent Pressure 2.00 248 0.$ 1.08 0 14 Contelnnent Pressure I es 2.00 248- 0.5 1,09 0.14 Conteinment Pressure 2.00 248 0.5 1.09 0.14 Contaltwent Pressure es-f1,5 2.00 0.14 Contaltwent Pressure '2.00 242 2.00 - 248 0.5 2.00 0.14 Conteircent Pressure - , .248(2) 1,5 1.02 0.50 13.8 kV services Bus feeder 0.50 0.50 248(2) 1.5 1.02 0.50- Oc cutpst greater 1.5 - 0.50 OG cutput tren;ency - 1.50 380(2) 1.02 i 1.50 380(2) 1.5 1.02 0.50. DC Ostput voltsee.
  • A 0.00 value indlistes that the time cortstraint for that etenent is indeterminable or does not eniat. these are incitx1ed in the cognitive loading calculations. .
Amendment'E-h, I i i  ; 1
CESSARnubau 1
I rg l 4 b i l 1 Aptt iB A F 12 (Cont'd) i (sheet 2 of 3) { I I PE AC108191P 11Nf PP0rilf 1, 1 tine into Ilme atiotnent Processing W W *r of tu rection ior informatton 11 pes Cont ret f oc tor . j $trategy evtet (minutes) (psec) Acticns (sec) Elwent bo. (einutes) Paran=ter to (Ostrve ' l e. I 0.50 310+450 1.9  : 1.03 a.50 etts setfeint level 1 e. 2.00 310*(3sec cate)" 1.0 ! 2.00 0.50 Pressursler Pressure 10.00 310*(2sec calc)(2) 1.5 l 2.00 0.$0 Steam Generatoe Level
ee 2.$0 248(4) 2.5 1.05 0.60 sCP Steed
) att Cold tes tenperature 2.50 310*(.5s cate)(4) 2.5 1.05 0.60 l 1.5 i 1.05 0.60 st$ Hot leg lenterature 2.50 310*(.5s cate)(2) es CharsIng itow 0.05 380 1.0 1.03 1.00 0.50 380 1.0 j 1.03 1.00 Letdown fIow ee j PPC$ setpoint Pressure 0.50 310 1.0 1.04 1.00 Main feed flow 0.50 380(2) 1.5 1.06 1.00 1.06 1.00 Main feedwater itow 0.50 450(2) 1.t steam Generator Level 0.50 24B(2) 1.5 ! 1.06 1.00 1.00 Steam Generator Pressure 0.50 3 80(2) 1.5 , f 1.06
ee Steam Ptont Radiation 0.50 248 1.0
! 1.07 1.00 j e* E-1.0 i 1.04 1.20 Pressurlier Pressure 0.50 310 ee 1.33- Pressuriser Level 2.50 380. 1.0
1.03 I 1.33 Pressurtser Level 2.50 310 0.5 1.03 ee i- 450 0.5 2.50
~ 2.00 1.33 Pressuriser Level l t se 1.50 DG Cutput 6 reeker 1.50- 380(2) 1.5 ! 1.02 1 ee aCs sutcooling 1.50 248 1.0 i 1.03 1.50 1.06 2.00 Main steam flow 0.50 380(4)- -2.5 ~ Pressuriser Level 6.50 310 1.0
5.00 2.00 i
!- ** 3 seconds is added to account f or operator calculations not prevlously considered in the analysis, i' [~ , L/ Amendment E
  • Q- -l- December 30,fl988'
* - -,y--,mrw+-r,-rs T---+= - w^ y c we yr---*v-- - + - - v*=- -,r----= - > + * , + - t ev++ e--, y c- v--vM-rw 3 CESSAR !m%mou , 1 -. . i I i c 1Attt 18.$.7 12 (Cont'd) i ($heet 3 of 3) Pt AC108 1pt> tfut Pe0Fitt 11pe into flee atlet w nt Processing N#ter _ of Correttir for information lines Control factor Strategy event , (mirutes) (psec) Actions (sec ) (lenent No. (minutes) Parameter to Observe 0.50 380(2) 1.5 1.06' 2.50 PCs Average 1merature 0.50 310 1.0 6.00 2.50 Pressurlier Pressure _j 2.00 248 1.0 1.07 3.00 Contairvent Area Radiation 10.00 380(4) 2.5 7.00 3.50 Main Steam Ftow RCP 5 peed 10.00 748(4) 23 10.03 3.50 RCS Cold leg icoperature 10.00 310.(.bs calc)(4)  ?.5 10.03 3.50 t0.00 310.(.5s eatc)(2) 1.5 10.03 3.50 aCs uet teg temperature 2.00 380 1.0 9.02 7.60 Pressurlier heater Power 2.00 310 1.0 9.02 7.60 Pressuriser Pressure 2.00 450 0.5 [ 9.02 7.60 Pressurl er Pressure 5.00 310(2) 1.5 8.00 10.00 Steam Generator Levet E  : 0.50 380(2) 1.5 8.01 10.00 Main feedwater Ftow . 450 380(2) 1,5 8.02 10.00 Energency f ee& ster flow 2.50 Condensate storage Tank tevet 15.00 310 (.5s calc)(2) 1.5 V.01'- 20.00 15.00 310+(.5s cate) 1.0 9.01 20.00 levi tevet , 10.00' 310 'l.0 10.01 20.00 Pressurlier Levet 10.00 310 1.0 10.02 20.00 Pressurlier Pressure - l-i a i-A1nendment E f ~ [ - December 30, :1988 ' i rw e v w-- owe we em---nevnev a w- *+7v t,' v +ru w v M- r+Mv=--+e + F+ e + % e r- er- e e~
  • e+ 4 =-~+w-e +we-r=-++-=e-r-r--s=--=--wer- ==r w- = - c e e vW--m-~srwm -a *v -
e -"vrec-3--p==-rw l 1 i i j 18.5.3 CONPARISON WITH EXPERIENCE-BASED INSTRUMENTATION j REQUIREMENTS I l Experience-based instrumentation and controls information was l utilized as part of the panel design process. These data were } obtained independently of the functional task analysis and I utilized in conjunction with the analytical results. This 4 process is described in Section 18.7.3.2. i A list of experience-based instrumentation information was i developed to augment the information requirements identified in the functional task analysis. The analytical approach provides 4 information requirements for both normal and accident event i sequences. For accident sequences, little or no actual 1 experience-based information is available other than from l  ! simulation codes. However, for normal sequences (e.g., startup, i load transients) = a significant source of data is provided by
reviewing the instrumentation used in existing plants. Operators
use this instrumentation regularly and control room design
! reviews have been performed to assure that it is properly human i factor engineered. All information requirements relating to  ! surveillance testing and maintenance activities were generated from experience-based data. The information requirements obtained from both methods, functional task analysis and experience, were_ cross checked to optimize the quality of the information requirements generated for Nuplex 80+. As an example of the results of this effort, a final list of RCS information requirements is provided in Section 18.7.3.2.1. These were generated during the panel layout process described in detail in Section 18.7.3. f Similarly, the controls required for_the Nuplex 80+ control room ! are also generated by a combination of functional task analysis 3 and experience-based data. processes and components needing j control are identified by System 80+ mechanical systems
designers. The primary process and component controls identified
were essentially the' same as for previous plants with a few exceptions for system design changes. Thus, the . analysis of control requirements was' taken from previous functional task analysis efforts based on References _1 and 2. The control requirements were then verified to be correct for System 80+ and revised where system changes dictated it.
1 The experience-based data with respect to controls was . initially-used to form the basis for the. man-machine-allocation and degree-of automation in the_Nuplex 80+ ACC. It also provided input to ' . selection control types and establishing control system designs. Amend nt E .h - hh Dece er 30, :1988 . .. - - - = As with the functional task analysis data, the experience-based control data is modified to accommodate specific System 80+ process and component designs. The generic Huplex 80+ implementation methods for controls requirements are described in Section 18.7.1. Specific examples pertaining to' the RCS are provided in Section 18.7. 3 and 18.7.3.2.2, respectively. The functional task analysis allocation evaluation then confirms the acceptability of the Huplex 80+ design. I i i e J b %E-50 l FEFERENCES_F.oR sECTION 18.5
1. " Generic Operator Information and controls Requirements Review Based on Combustion Engineering Emergency Procedure Guidelines," Combustion Engineering, Inc., CE-NPSD-299, July 1985.
2. "C-E Owners Group Generic Information and Control Characteristics Review," Combustion Engineering, _Inc., '
1 CEN-307, August 1985. l
3. " Task Analysis of Nuclear Power Plant Control Room Crews,"
USNRC, NUREG/CR-3371,-1983.- )
4. " Human Factors Guide for Nuclear Power Plant Control Room _
Development," EPRI, NP-3659, August 1984.
5. " Combustion Engineering. Emergency Procedure Guidelines,"- 1 Combustion Engineering, Inc., CEN-152, Rev. 3,'1987.
6. "Information Processing and Human Interaction,"
J. Rasmussen, North-Hollandt NY 1986.
7. "The Psychology of Human-computer Interection," S. Card, T. Moran, A. Newell, Lawrence Erlbaumt NH, 1983.-
8. " Time Response Design Criteria for Safety-related Operator Action," American National Standards Institute, ANS 58.8-1984.
1 !E.6 E - 6 4 i DSER Open item 18.8-1 The applicant does not address how the results of the human engineering systems analyses were applied to the selection and/or design of the System 80+ control room, control panels, software, and hardware. Author: Human Factors Assessment Branch AB8/CENP Response: System 80+ is an-evolutionary upgrade of a successful, proven design. Changes in plant function-are few, and have been made to improve performance or mitigate known problems. Many of these improvements reflect the results of operating experience and industry studies in a variety of disciplines, including (but not limitea to) human-factors. However, a formal human factors systems analysis was not the starting point for the design _ of the System 80+ HSI. - Instead, the design basis assumes that the existing System 80 operator's role is one of the successful components of a successful, prover, system. Then, various conceots for the control room were considered through an interdisciplinary design process that evaluated the requirements, expected costs and benefits, and commercial risks of a variety of approaches to the_HSI. The Nuplex 80+ Advanced Control Complex is the result, and is formally documented in CESSAR-DC. In the Nuplex 80+ design process, specific human factors and human factors-related studies and analyses are applied where appropriate (i.e., necessary or cost-effective). This has already included task analysis, HS1 mockups, manning estimates for System 80+, habitability studies, and availability and suitability analyses (i.e., Verification), in addition, reports have been provided explaining the system's design bases (" Control Complex Information System Bases for Nuplex 80+"), its incorporation of operating experience " Operating Experience Review for System 80+ MMI Design, NPX80-IC-RR790 01), and(allocation of functions (" Human Factors Evaluation and Allocation of System 80+ Functions"). Finally, additional verk is planned in the areas of task analysis, availability suitability analyses, and Validation. Additional details are provided for specific aspects of the design, as follows. Control Room-As described in CESSAR DC Section 18.6, the functional / technical desigr, requirements were established for configuration. A design to meet ..those-requirements :was developed. Evaluation for mobility and usability provided preliminary confirmation of design acceptability Validation activities will. confirm that the design meets these requirements. HFE is applied to HS! inside-and outside the main control room as described in ABB-CE's response to DSER open item 20.2-29, Issue HF1.3.4a regarding. local control stations. 7 Control Panels Anthropometric studies, as described in CESSAR DC, Section 18.6 demonstrated visibility, and reach sufficiency for the 5th percentile female to the 95th percentile male. Hardware
1. Switches and CRTs are extensive used in the industry and human factors was not involved in their selection.
2. Flat Panel hardware evaluation is described in LD 91-033, RAI 620.2.
This response indicates that many factors contributed to the selection of this technology, including diversity, seismic qualification, selectability, reliability, maintainability, capability for dynamic graphic displays, usability, and standardization of - hardware. However,- during the selection process, human engineering focused on verification that the hardware selection was sufficient and provided the required functionality to meet MMI interface needs in the proposed Nuplex 80+ applications.
3. The Nuplex 80+ MM!s were prototyped for each hardware selection and the whole MMI device hardware design evaluated in the suitability analyses which is the docketed. report Nuplex 80+ Verification Analysis Report, NPX80 TE790 01, Section 11, Part C. This suitability analysis verified that MMI design is acceptable, we believe that this is adequate.
~ Software - The actual software programming design process is being reviewed for acceptability by the NRC 1&C branch. Human factors is not extensively involved. The functional design of most software programs has either been tested (e.g. docketed reports from Halden Research Institute on Critical function Monitoring, Success Path Monitoring, and Integrated Process Status Overview) or has been validated by extensive operating experience -(e.g. Core Operating Limit Supervisory System (COLSS), DPS Application Programs). ABB CE has addressed all of the criteria specified in Element 6 relative to this open item in the HS! design process by judicious application of human factors - The information in this response addresses the issues for this HS! related open item. . . . _ . - . _ .- - - . - - . ~ - _ _ 8-DSER Ooen Item 18.8.1.1 Shape Codina Used To Prioritize Alarms The applicant should provide corroboration concerning the shape coding scheme chosen for the alarm system. Studies or emairical data as described in the HFE Program R: view Model and NUREG 0700, should be provided that demonstrate that the concept of salience, as hnplemented, is an effective form of alarm shape cooing. This may be acceptabic if results of the data analysis support the significant differences observed among the priority levels and that saliency is indeed the distinguishing characteristic. AUTHOR: Human Factors Assessment Branch ABB/CENP Response: The Nuplex 80+ alarm system uses the following codes on component or parameter descriptors (CRT only) or Alarm Tiles to transmit alarm information: Unacknow' edaed New Alarms - fast flashing, and bright yellow; Unacknow' edaed Cleared Alarms - slow flash, dark yellow; Acknowledaed Existina Alarms - no flash, saturated dull yellow; No Alarm / Reset - No Code (e.g. normal descriptor or alarm tile). These codes distinguish among alarm states, and apply to all alarm priorities. The Nuplex 80+ alarm system uses the following shape codes on descriptors or alarm tiles to distinguish among the three alarm priorities: Priority I reverse video; Priority 2 box; Priority 3 brackets. These codes distinguish among alarm priorities and apply to all alarm states. Section 8.2 of the System Description for Control Complex Information System for Nuplex 80+ illustrates these codes. In DSER Open Item 18.8.1.4 it is noted that unacknowledged new alarm tiles or descriptors have a larger border around the reverse video, box, or brackets than an unacknowledged cleared or acknowledged oxisting alarm tiles or descriptors. The two borders defined around an alarm tile or descriptor are not a code intended for operator discrimination, only an enhancement to increase the subjective brightness and improve salience of the different alarm state representations. NUREG-0700 indicates that color, position, shape or symbolic coding are acceptable methods to code priorities. This recommendation does not take into account all features available with advanced I&C technologies (e.g. luminance). Although color is best for search activities, using 7 or more colors in computer generated displays can cause degraded performance. Different colors were not used for different priorities because this limited the number of colors available for other purposes and using one color (yellow) for alarms reduced search time 4 .g. i for the existence of alarms (more important information then than alarm priority). Position coding was not feasible. NUREG 0700 indicated that shape is an acceptable coding mechanism and was thus chosen. Section 11.403 of the
Engineering Data Compendium Human Perception and Performance indicates that search time for a shape is slower than search time for a color however, combining color (used to identify alarms) and shape (used to distinguish priorities ) as used in Nuplex 80+ together should provide a shorter search time than either
, alone (via redundancy gain). Section 11.205 of the Engineering Data Compendium Human Perception and Performance indicates that increasing brightness (luminance) can shorten search time significantly. The reverse video and bright yeilow i (filled box) used by priority 1 alarms is considerably brighter (the entire alarm l tile or descriptor is illuminated during the on part of the duty cycle) than the box for priority 2 and the brackets for priority 3 unacknowledged alarms. This increase in brightness shortens search time and achieves the desired effect to i bring priority I unacknowledged alarms to the operators attention first and ! priority 2 alarms to his attention before priority three alarms. Based on these criteria, no empirical studies are necessary. In addition, ABB-CE 3 did some informal confirmatory prototyping of this scheme and evaluated it for adequacy in the suitability analysis. It was determined that alarm states and Sriorities are readily distinguished. Further confirmation of this approach will se provided during validation. ] 4 * = , .-wy e - _m_____. ._ - _ _ _ . _ _ _ _ _ _ . . _ - _ _ . _ _ _ . - l. 1
1 i
l i i; DSER Open Item 18.8.1.3 Elash Codina of Alarms l The HFE literature does not support using two different duty cycles to distinguish between the two different alarms. The staff needs additional  ; information documenting that. operators can effectively recognize the redundancy of the flash coding with the color and shape codes used in the alarm system. l ! Author: Human Factors Assessment Branch 1-  ! ! ARB/CENP Responses j MIL-STD-14720, Section 5.15.3.3.2 indicates that flash coding with no more than two fla9' rates (cycle /sec. rate at which the alarm turns on and off, e.g. 4 . 4 c.ycles/sec.) can be used to get the user's attention. Guidance in other .  ! literature -(e.g. NUREG 0700) recommends a duty cycle of approximately equal on/offtime. The cited references did not provide any specific reasons for the approximately equal on/off times recommended. However, in general, duty cycles often vary from this recommendation to accomplish specific display functions j (e.g.strobelights,sequencedlights,etc.). In Nuplex 80+ duty cycle is not used as a code for operator discrimination. l- Instead, different on/off duty cycles are a functional enhancement. Operators
are not required to distinguish between duty cycles, per se; rather, the use of different duty cycles permits operators to unambiguously read multiple superimposed tile states.
4 4 s * -.. w .- --.uwr-r ,,e--,-e- -, yv, u .- ...,,ce,-. e. ,.-w.-,, ,m.,- . , . , - _ _ - ,,...-,m,..,..y y- , . ' " w r V -w'm+ -~rwe-'*-f7*****" I 11 DSER Open item 18.8.1.4 Size codino of Alarms i The staff is not clear why the applicant uses size coding in the System 80+ alarms, nor how the applicant applied the standard in the Huplex 80+ design. The staff needs additional information about this coding method and its relationship
to color, shape and flash.
l Author: Human Factors Assessment Branch ABB/CENP Response Size is not used as an alarm code for Nuplex 80+. The code used for all alarms 4 is the yellow color and rectangular shape. Different shades of yellow (bright yellow, dark yellow, and saturated dull yellow) are used to distinguish alarm states. Distinctly different rectangular shapes (reverse video fill, perimeter solid, corner brackets) are used to code alarm priorities (1, 2, and 3). l Unacknowledged alarm tiles or descriptors have a larger border (1erger size) around the reverse video, box, or brackets than an unacknowledged cleared or . acknowledged existing alarm tiles or descriptors. The two borders defined around an alarm tile or descriptor are not a code, only an enhancement to increase brightness and salience of the coding between the different shades of yellow used l to distinguish unacknowledged new slarms (most important) from unacknowledged i cleared and acknowledged existing alarm hues. t 1 s - , y -~ pjER Open Item 18.8.1.5 Ouantity and Types of Information Encoded in the Control Room
1) The applicant should also provide empirical data or- other means of cemonstration of that operators can sffectively utilize the 27 properties and parameters encoded, the 15 colors, and the 10 shape / symbol : odes under normal, abnormal, and emergency operations and under all modos of plant operation.
2) The applicant should send a complete matrix, detailing all the information coding methods used in the control room.
Author: Human factors Assessment Branch 4 ABB/CENP Response: Alarm and information processing by operators is context dependent. The 1) context specific use (e.g. reading data, processing alarms, determining equipment status, etc.) of the Nuplex 80+ codes reduces the number of codes that require discrimination in a given situation (e.g. normal operation, post trip, etc.) to a manageable set. The Nuplex 80+ alarm and information codns are provided in the attached table (Nuplex 80+ Coding Matrix). The operator is not required to process the 15 shape, 8 color, 5 color intensity, 2 flash rate, and 2 switch position codes simultaneously. For example, if an al arm occurs, the Nuplex 80+ information system performs the following: 1) alerts operator by an audible tone, 2) directs his or her search by flashing bright yellow tiles on functionally organized alarm tiles or CRT menu selections on CRf pagos,
3) directs his or her attention with context specific messages and directory information on the CRT, and 4) confirms a cleared alarm by an audible tone and slow flash in dark yellow. When in the alarm context the
' operator is processing alarm code information, not equipment status, data or other miscellaneous codes. Therefore, only the codes associated with alarms are applicable. Other examples of context dependent use of codes are : 1) the 5 direction shapes are used only to show trend parameter information, the 2 switch position codes are uniquely used to show equipment or position status on only process controllers and switches, and are used only with the
3) the equipment / component status codes equipment / component navigation aids on the CRTs and process controllers.
Many equipment status, data, and miscellaneous codes are aids to the operator, adding beneficial redund:ncy to already unambiguous displays rather than adding an additional information processing burden. In addition, the Emergency Procedure Guidelines are written to simplify operator actions to tasks that require discrimination of only the most important information (e.g. on/off codes, dynamic data codes) and not require the operator to process alarms, or perform detailed diagnostic activities to which many of the codes are applicable. 13-HFE ha: verified the adequacy of the presen codes through suitability analysis. Validation of the collective appl cation of the codes will be performed later in the design process to c< nfirm that the operator can acceptably use the coding scheme as par. of the HSI. Additional, empirical data showing that operators can effectively utilize the properties and parameters encoded, all colors, and the shape / symbol codes under normal, abnormal, and emergency operations and under all modes of plant operation is not required.
2) Nuplex 80+ uses the following types of codes:
i Shape Codes - Problem Sha)e (1 Code) -- Equipment Direction /Slapes (S Codes) Component Status (3 Codes) - Alarm & Operator Aid Shapes (4 Codes) - Target Select Shapes (2 Codes) 4 Color Codes - Colors (8 Colors) Note: colors such as tan, black, and dark brown are not color codes, they are used as background colors or other non coded information to achieve consistency. Color intensity (Hues) Codes - Text (2 Codes) - Alarm & Operator Aid Status (3 Codes) fjash Rate Codes - Alarm Status (2 Codes) Switch Position Codes (Relative to Fach Other) - Position Codes (2) contains a complete The matrix following 3 pages of all control room (Nuplex 80+ Coding coding. Matrix) Notes are provi ded to correlate the codes to the MMI devices they are used on. i i 4 4 Y fi !! f i - ' I l ,' )in :: ' t , 12 1 I 11: '  !{ 8 l s
l. -
= 3 a It e E it b l- . e Lt I " l' 5 k lt s i i - E - $5 - f* O g 6 = I  : .- a - h II . 8 o Ill in n:t. - kg' . i { I - p: j i - i s i i: I sli - l II' i l u l u. I .g k '- .8 r' t e. hf I!s EE 0" .E E i  ! 7- -t 3 a e gi h i 1 i 1 1 1 1 11 11 1 5-i I r$ ' i i i 1 3 i= (( l :~i { , .:j b-M oD __, __ n _. _ - __ 4 !l ll H eg i I 9 ia es - I 1' -- g d I:5 g 12 -- [ 1 I.  !! p 112 ~ t  !! ~ 3 a ge as as i I ((r __ h ) s. t g t I .n " a h s t i , e *  ! l2 5 5 t . E 10 -- y l  ;= .a v g i n i j s g tg 13!1 o s. - t g + t \!E
1 1
J a I lE! 5 __ s l i* n. 3 fl?  ; ~ ---
hn i t i , e
-- ,I g "" g g .,-E O [ l {ns , . 20 n< - 'j{ g, t , \ h.. li . s,i ~~' ~1 GD I !8 11 i: i .i p - '-
1 1 1; y
s-l n,j ,' ,i s i t $ ' i [. :  :: l [ 1 g I I ~% I I I 5 l Jh e-
s
- . ~ . . . it m til b n . i. 1 h .$ ) 6 WS 115 I v , 1: I  ! '{ 11:  ! l 1; 1 g, . i* a i g, . E ,t t - . 1 1 A 2 t \t "
i. i. b e  !
k ~ 11 . e 1  :: f 5  : e' n ft " I in. k s Ill 9:= E < 115 - a {t I s a li k-  ! ~ 5[ - $\t . t 1 - ., i.h a I  ;* e-I - ,s - $ <g IE' e k kb 4{, 5k t kI r- '25 ) '1 \* * ' a l lg s gs 65 Ea $$ ile 31 { s i I *! II a s- -o i e o r g E *
  • tj5- et E
} ns .- B1 = x. h _______-----J s 17-4 DSER Open Item 18.8.2 Additional HS! Information Reauired for Staff Review The applicant should address the following: .
1) Human engineering justifications for the control panel profiles, control panel arrangement in the control room, the selection of the control  ;
devices, the selection of the display devices, the alarm scheme, the interactive display hierarchy, and the number of colors, shapes, and  ! patterns used to convey information in the control room. i I Results of System 80+ specific studies or analyses that determined the  :
2)  ?
quantitative and qualitative thresholds of " adequate" rather than "not - adequate" human performance for:
a. IPS0
b. alarm scheme and alarm acknowledgement
c. readability of alarm text-and tiles from all operator positions in the control room
d. display hierarchy and navigation scheme used for CRTs
e. number of colors and shades used on displays l
f. types and amount of information encoded in the control room as well as the encoding techniques used
g. audio and tactile feedback for controls, controllers, and other devices
h. auditable documentation of the design process that support the human performance aspects of the reduction in the quantity of data presented to the operator
1. impact of the human performance of the differences between breadth of information in System 80 and System 50+ control rooms i
j. qu:litative and cuantitative criteria that identify when the operator is receivLng "enough" rather than "too many" or "too few" ,
alarms and displays -k. auditable documentation to track the data /information -that was lost / gained between System 80 and System 80+ control room designs
1. effects -(positive and negative) on operator- performance of the changes,- individually _and collectively, between System 80 and System 80+.
AUTHOR: Human Factors Assessment Branch ABB/CENP ReSDonse:
1) Human engineering justifications for- th'e features identified in item 1-
- are: Control Panel Profiles Human engineering bases for the panel profiles is provided in the Human Factors Engineering Standards, Guidelines .- and Bases For System 80+ -(Section 7.6.2 and 7.6.4 within the bases section). The resultant design-l i l for the two console profiles is provided in CESSAR DC Section 18.6.5.7, Console Profiles. Control Panel Arranaement in the Control Room Human engineering justification including development of the functional requirements for control panel arrangement in the control room is provided i in the following CESSAR-DC Sections: 18.6.4 (Candidate Configuration i Evaluation), and 18.6.5 (Nuplex 80+ Control Room Configuration). The l configuration will be subsequently validated in the HFE verification and , validation process. Selection of the Control and Display Devicci The ABB CE responses to DSER Open item 18.81 of this document and RAI 620.2 provide human engineering justification for the selection of control devices. The acceptability of these selections has subsequently been confirmed in the suitability verification analysis using the prototyped Nuplex 80+ functional designs. Alarm Scheme The System Description for Control Complex information System for Nuplex 80+, Section 8.0 provides a complete description of the alarm scheme. This description includes human engineering justification for the characteristics and methods used to achieve the everall alarm scheme. The ! alarm scheme conforms to the HFE Standards Guidelines and Bases for Nuplex 80+. A suitability analysis established that the alarm capabilities, t including the overall scheme support the actual performance of alarm tasks. The results of the alarm suitability analysis is contained in the
Nuplex 80+ Verification Analysis Report, Revision 2, NPX-TE790 01, December, 1989, Part C (Suitability Analysis), Section B.4 (Alarms).
Interactive Display Hierarchy The System Description for Control Complex Information System for Nuplex 80+, Section 3.0 (Nuplex 80+ Control Room Information Overview) provides a complete description of the interactive display hierarchy. A suitability analysis established that the information capabilities of the display hierarchy supported actual performance of specific operator tasks, including the adequacy and appropriateness of'the organization, content and access methods. The results of the suitability analysis is contained in the Nuplex 80+ Verification Analysis Report, Revision 2, NPX-TE790 01, December,1989 Part C (Suitabiiity Analysis). I _ . . - . , , - . . - . . ...-..7 ,, . _ - . - . -- 19-Number of Colors. Shapes and Patterns to Convey information in the Control 89.93 The ABB CE response to DSER Open item 18.8.1.5 of this docuinent and the Human Factors Engineering Standards, Guidelines and Bases For System 80+ (Section 2.3 with accompanying bases) provides human engineering justification 'or the nlection of the number of colors, shapes and patterns used convey information in the control room.
2) Re'sults of System 80+ specific studies or analyses that determined the quantitative and qualitative thresholds of " adequate" rather than "not adequate" human performance for the following is provided below:
Finsi validation of the sum of the various HS1 features afforded by both the main control room and the remote shutdown area will confirm that a usable operating ensemble that supports the successful accomplishment of__ the operator's_ functional role and specific tasks under dynamic, real-time conditions. The specific criteria cefining " adequate" and "not adecuate" human performance for the ensemble are provided as part of the valication program,
a. IPSO The Halden Reactor Project IPS0 reports document the evaluation of the usefulness of a large overview display. The criteria used to evaluate the usefulness of IPS0 in terms of human performance is contained in the following Halden reports:
- Gertman, D., et al . , Integrated Process Status Overview (IPS0): Status Report, OECD Halden Reactor Project, HWR-158, April 1986. - Reiersen, C., et al., further Evaluation Exercises with the Integrated Process Status Overview IPSO, HWR-184, April 1987. These reports provide a_ bases for' inclusion of the IPS0 into .the Nuplex 80+ MMI. Final validation of the sum of the various HS1 features (including.- IPS0) afforded by both the main contro1~ room and the-remote shutdown area will confirm that a usable operating ensemble that supports the successful accomplishment of the operator's- functional role and-specific tasks under dynamic, real-time conditions. 4 i 20-
b. Alarm scheme and al :m acknowledaement The Nuplex 80+ Verification Analysis Report, Revision 2, NPX TE790 01, December, 1989, Part C (Sultability Analysis), Section B.4 (Alarm Systems) provides the criteria used to verify acceptability of the alarm features from a useability standpoint.- Validation will demonstrate their effectiveness as part of the ensemble.
c. Readability of alarm text and tiles from all operator positions i.n the control room The following report provides the criteria used to verify the readability of alarm text and tiles from all operator positions in the control room:
- Human factors Engineering Standards, Guidelines and Bases for System 80+ (Bases, Sections 2.5 (Equipment Labels, and 5.3.1 (AnnunciatorTileMatrices)
d. Display hierarchy and naviaation scheme used for CRTs The following reports provide the criteria used to verify acceptability of the display hierarchy and navigation scheme features (e.g. menu and navigation, alarm lists and alarm features) used for CRTs:
- Human Factors Engineering Standards, Guidelines and Bases for System 80+ (Section 4.1 and accompanying bases); - Nuplex 80+ Verification Analysis Report, Revision 2, NPX-TE790 01, December,1989, Section B.2, DPS System. Final validation of the sum of the various HSI features (including the display hierarchy and navigation scheme used for CRTs) afforded by both the main control room and tne remote shutdown area will confirm the useability of the operating ensemble. Specifcially, that it supports the successful accomplishment of the operator's functional role and specific tasks under dynamit., real-time conditions. The criteria used to evaluate human performance for the usefulness of this ensemble are provided as part of the HfE V&V plan,
e. Number of c_glors and shades used on displays The following reports provide the criteria used to . verify the acceptability of the number _ of colors and shades used on displays:
,- i., . -- 21-l P i q - Human Factors Engineering Standards, Guidelines and Bases for System 80+ (Bases. Sections 2.3.2.3.a (Color Coding for) Control Panels and Associated Displays, and 3.4 (Video Display Units). - System Description for Control Complex Information System for Nuplex 80+, Appendix A (Color definitions in RGB values). 4 - Nuplex 80+ Verification Analysis Report, Revision 2 NPX-TE790-01, December, 1989, Section B.2, DPS System. Final validation of the sum of the various HS! features (including 4 the number of colors and different hues (shades) of colors used for ] CRTs) afforded by both the main control room and the remote shutdown 1 area will confirm that the operating ensemble supports the  ; successful accomplishment of the operator's functional role and  ! specific tasks under dynamic, real time conditions. The criteria to j l evaluate human performance for the usefulness of the ensemble are + provided as part of the HFE V&V plan.
f. Types and amount of information encoded in ,be control room as well as the encoding techniaues used The following report provides the criteria used to verify the suitability of the types and amount of information encoded in the
' control room as well as the encoding techniques for the information, alarm and control system features: - Nuplex 80+ Verification Analysis Report, Revision 2, NPX-TE790-01, December,1989, Part C (Suitability Analysis) Final validation of the sum of the various HSI features (including the types and amount of information encoded in the control room as well as the encoding techniques used) afforded by both the main 4 control room and the remote shutdown area will confirm that the operating ensemble supports the successful accomplishment of the operator's functional role and specific tasks under dynamic, real. time conditions. The criteria to evaluate human performance for the usefulness of the ensemble are provided as part of the HFE V&V plan.
g. Audible and tactile feedback for controls, controllers, and ottler stevices The Human Factors Engineering Standards, Guidelines and Bases for i
system 80+ (Bases, Section 3.2 (Switch Devices) and the Nuplex 80+
Verification Analysis Report, Revision 2, NPX-TE790-01, . December, 1989, Part C (Suitability Analysis) provide the criteria used to verify suitability of the tactile feedback characteristics for push buttons, the only control device type requiring tactile feedback in the control room. No audio feedback is used in Huplex 80+,
i j j 22-4 l I h. Auditable documentation of the desion process that support the human Derformance asDect$ Of the redudtion in the cuantity of data l Dresented to the oDerator l The Operating Experience Review for System 80+ MI Design, NPX !C. I RR790 01, Revision 00, identified and provided Nuplex 80+ guidance for human performance problems related to the reduction in the  ; quantity of data presented to the operator (e.g. Section 3.1.5 (Excessive Number / Density of Alarms During. Disturbances) Section I i The function & Task for Nuplex 1 j 3.3.2 (Aggregation of Plant Data)d 80+, January 30, 1909 provide RCS information and controls j requirements for developing the overall man machine interface in the  ; 1 control room. This confirmed the operator's need for concise, i validated information rather than data from all- process sensor ! channels for most tasks. This was accomplished in Nuplex 80+ by j reduction in the quantity of data presented to the operator. The
System Description for Control Complex information System for Nuplex i 80+, Section 3.2 (Information Processing) describes how inioimation
is presented to the control room operator in a cleac and concise
, manner. The Nuplex 80+ Verification Analysis Report, Revision 2, NPX-TE790 01, December,1989, Parts A and B (Availability Analysis) j demonstrated that needed information was indeed there, final , validation of the sum of the various HS1 features (including those t
designed for the reduction in the quantity of data presented to the
o)erator) afforded by both the main control room-and the remote ,
i slutdown area will confirm that the operating ensemble supports the
successful- accomplishment of the operator's functional role and specific tasks under dynamic, real-time conditions. The criteria to evaluate acceptability of the quantity of data presented to operators is provided in the HFE V&V plan.
i Impact of the human performance of the differences between breadth l . ! - of information in System 80 and System 80+ control rooms I There.is no difference between breadth of ;nfoi.aation in System 80 and System 80+ control rooms (they are similar PWRs with a similar i number if sensors, components and controls contained in the control - room). The difference between the two is the display ' methods ' (Nuplex 80+ uses CRT - selectable pages and DIAS fixed location indicators) used in the MI. The Nuplex 80+ M1 contains' the same-
information and the same functions for operator use as the System 80 -
l MI . . Availability verification (similar- to _ the _ RCS panel availability analysis) will confirm this. for all control- room panels. Final validation of .the sum of the various HSI. features (including the breadth of information in the control room) afforded
by both the main control . room and the' remote shutdown area will confirm that the operating ensemble supports the successful
! accomplishment of the operator's functional role and specific i l i 1 wp9.yy--.y ~_e,. y m. -.yv ,em --,,,,,__,c, .. _ g,yemm--.m  %. ,,,,m3-. --%g -e._,.- .pe+. s,,- tasks under dynamic, real time conditions. Validation criteria for human performance for the usefulness of the ensemble are provided as part of the HFE V&V plan. J. Qualitative and cuantitative criteria that identify when the operator is reseivina "enouah" rather than "too many" or "too f ew" alarms and displays Early in the design process an informal scoping analysis was completed to demonstrate the effec'iveness of the alarm methodology in reducing alarms. Final validation of the sum of the various HS1 features (including the quantity of alarms and displays) afforded by both the main control room and the remote shutdown area will confirm that the operating ensemble supports the successful accomplishment of the operator's functional role under dynamic, real time conditions. The criteria to evaluate human performance for the usefulness of the alarms and displays are provided as part of the HFE V&V plan.
k. Auditable documentation to track the data /information that was lost /cained between System 80 and System 80+ control room desians There are no r'equirements in the Nuplex 80+ design process to track data /information that was lost / gained between System 80 and System 80+ control room designs. Availability verification (similar to the RCS panel availability analysis) will confirm adequate data /information for performance of control room tasks for all control room panels.
1. Effects (positive and neaative) on operator performance of the chanoes. individually and collec_ lively, between System 80 and System 80+.
Comparison to a System 80 baseline is not possible (System 80 baseline data is unavailable) nor deemed necessary. Evaluations of the adequacy of Nuplex 80+ regarding operator performance is being conducted as part of the validation and verification program. 24-Open item 18.9.1-1 This open item regards various concerns with the System 80+ Operational Support Information Program. Author: Human factors Assessment Branch ABB CE Response The Plan esigners Operational Support Information Plan for the ABB System 80+ (attached) responds to NRC requests for additional information regarding System 804 operational support information and should allow closure of these open item concerns. With respect to the use of OSI in verification and validation of System 80+, it is not expected that OSI will be used in human factors verification (see attached HFE Verification and Validation Plan for Nuplex 80+). Procedure guidelines will be developed in a phased approach according to the OSIP to supaort human factors validation. Similarly sufficient training will be provided tirough the OSIP to support validation. 2 i 1 Open item 18.9.2-1 1 The applicant should submit the System 80+ Emergency Procedure Guidelines and differences between them and the current NRC approved CEN 152, Revision 3. EPGs.  ! Author: Human Factors Assessment Branch ABB-CE Resoonse . A set of System 80+ Emergenc Procedure Technical Guidelines (attached have been provided in the form of mar ups to existing generic EPGs. These should resolve NRC requests for System 80+ specific EPGs. i 4 T Open Ltem 18.10-1 This open item regards various staff concerns with human factors verification and validation. Author: Human factors Assessment Branch ABB-CE Response The *lluman factors Engineering Verification and Validation Plan for Nuplex 80+" (attached) provides methodology and criteria for availability and suitability verification and for validation of the Nuplex 80+ MMI ensemble. This information addresses the verification and validation concerns of this open item. DLH/kr DLH276.wp \ (.I t i gr 9w-y -- or = T eew,er y-4 + --r- -- we-'iwa--- y-yw -rt i y}}