ML20129H159
| ML20129H159 | |
| Person / Time | |
|---|---|
| Site: | Crystal River  |
| Issue date: | 09/27/1996 |
| From: | FLORIDA POWER CORP. |
| To: | |
| Shared Package | |
| ML20129G944 | List: |
| References | |
| NUDOCS 9610080029 | |
| Download: ML20129H159 (32) | |
Text
_..
ATTACHNENTS 5, 6 AND 7 REVISED TECHNICAL SPECIFICATION AND BASES PAGES 9610080029 960927 ADOCK 05000302 PDR PDR e
i
4 1
PAM Instrumenation i
3.3.17 i
Table 3.3.17-1 (page 1 of 1)
Post Accident Monitoring Instrunentation 4
j j
1 CONDITIONS 1
REFERENCED FROM FUNCTION REQUIRED CHANNELS REQUIRED ACTION D.1 4
1 1.
Wide Range Neutron Flux 2
E i
2.
RCS Hot Leg Temperature 2
E i
3.
RCS Pressure (Wide Range) 2 E
4.
Reactor Coolant Inventory 2
F 5.
Borated Water Storage Tank Level 2
E
{
6.
High Pressure Injection Flow 2 per injection line E
7.
Containment Sg Water Level (Flood Level) 2 E
8.
Contairunent Pressure (Expected Post Accident 2
E Range) 3 1
9.
Containment Pressure (Wide Range) 2 E
j 10. Containment Isolation Valve Position 2 per penetration (a)(b)
E
- 11. Containment Area Radiation (High Range) 2 F
- 12. Containment Hydrogen concentration 2
E
- 13. Pressurizer Level 2
E j
- 14. Steam Generator Water Level (Start up Range) 2 per OTSG E
- 15. Steam Generator Water Level (Operating Range) 2 per OTSG E
- 16. Steam Generator Pressure 2 per OTSG E
l
- 17. Emergency Feedwater Tank Level 2
E
- 18. Core Exit Tenperature (Backup) 3 por core quadrant E
l
l
- 20. Low Pressure Injection Flow 2
E
- 21. Dearees of $ 4 cooling 2
E j
l 1
(a) Only one position indication is required for penetrations with one Control Room indicator.
(b) - Not required for isolation valves whose associated penetration is bolated by at least one closed and deactivated automatic valve, closed manual valve, blind flange, or check valve with flow through the valve secured.
j a
J Crystal River Unit 3 3.3-41 Amendment No.
't -
LC0 The following list is a discussion of the specified (continued) instrument Functions listed in Table 3.3.17-1.
1.
Wide Ranae Neutron Flux Two wide-range neutron flux monitors are provided for post-accident r +ctivity monitoring over the entire range of expetit conditions.
Each monitor provides indication ovec she range of 10~8 to 100% log rated power covering
.se source, intermediate, and power ranges.
Each monitor utilizes a fission chamber neutron detector to provide redundant main control board indication. A single channel provides recorded information in the control room. The control room indication of neutron flux is considered one of the primary indications used by the operator following an accident.
Following an event the neutron flux is monitored for reactivity control. The operator ensures that the reactor trips as necessary and that emergency boration is initiated if required.
Since the operator relies upon this indication in order to take specified manual action, the variable is included in this LC0.
Therefore, the LC0 deals specifically with this portion of the string.
j i
2.
Reactor Coolant System (RCS) Hot Lea Temperature i
Two wide range resistance temperature detectors (RTD's), one per loop, provide indication of reactor coolant system hot leg temperature (T,) over the range of 120* to 920*F.
Each T measurement provides an input to a control room indicator. Channel B is also recorded in the control room.
Since the operator l
relies on the control room indication following an accident, the LCO deals specifically with this portion of the string.
T, is a Type A variable on which the operator bases manual actions required for event mitigation for which no automatic controls are provided. This tempercture mes urement provides input 10 the inedequete core cccling instrumentetion which is used to verify the (continued)
Crystal River Unit 3 B 3.3-126 Amendment No.
i 6
PAM Instrumentation B 3.3.17 BASES LC0 2.
Reactor Coolant System (RCS) Hot Leo Temperature (continued) exi;tence of, er to take action; t0 cnsure the rc toratica cf subccoling margin.
Specifically, ;
4e : cf adequate-subcccling margin during a :::11 l
break LOCA require the operatcr to trip the reacter ccclant pump; (RCP':), ensure high cr Icw pre;;ure injectica, and raise the steam generatcr level; tc the ECC level.
Once subcccling :rgin is rc:tcred, the cperatcr is instructed to rc: tart t le;;t one RCP :nd i
t-brcttic injectica ficw to maintain ; pecified degrec ef subcccling. Ancther manu:1 actica b;;cd on Ta feMews Following a steam generator tube rupture,r-4the affected steam generator is to be isolated only after T, falls below the saturation temperature corresponding to the pressure setpoint of the main steam safety valves.
For event monitoring once the RCP's are tripped, T, is used along with the core exit temperatures and RCS cold leg temperature to measure the temperature rise across the core for verification of core cooling.
3.
RCS Pressure (Wide Rance)
RCS pressure is measured by pressure transmitters with a span of 0-3000 psig.
Redundant monitoring capability is provided by two trains of instrumentation. Control room and remote shutdown panel indications are provided. The subcccling margin monitcr con als display reactor coolant prc::ure upon demand. The control room indications are the primary indications used by the operator during an accident.
Therefore, the LC0 deals specifically with this portion of the instrument string.
J RCS pressure is a Type A variable because the operator uses this indication to adjust parameters such as steam generator (OTSG) level or pressure in order to monitor and maintain a controlled cooldown of the RCS following a steam generator tube rupture or small break LOCA.
In addition, HPI flow is throttled based (continued)
Crystal River Unit 3 '
B 3.3-127 Amendment No.
i
PAM Instrumentation B 3.3.17 BASES LC0 7.
Containment Sump Water Level (Flood level)
(continued) displayed in the control room on edgewise level indicators. Channel A and B sump flood level indication are recorded in the associated 'A' and 'B' EFIC Rooms.
Each instrument encompasses a range of 0-10 feet above the sump and provides information to the operator related to gross leakage in the Reactor Building.
This leakage may be indication of degradation in the reactor coolant pressure boundary (RCPB) which would require further investigation and action. These instruments are not assumed to provide information required by the operator to take a mitigation action specified in the accident analysis.
As such, they are not Type A variables.
However, the monitors are deemed risk significant (Category 1) and are included within the LC0 based upon this consideration.
8,9. Containment Pressure ( t rrow Excected Post Accident' l
Ranee and Wide Ranael 1
The containment pressure variable is monitor _e_d_by two i
ranges of pressure indication. Nanew Expec.ted post:
accidentLLrange(-10to6070psig)andwidera'n'ge~(O' to 200 psig) pressure indication each provide two i
channels of pressure indication.
Channel A and B wide range containment pressure are recorded in the associatec' 'A' and 'B' EFIC Rooms. The low range is required in order to ensure instrumentation of the necessary accuracy is available to monitor conditions in the RB during DBAs. The wide range instrument was required by Regulatory Guide 1.97 to be capable of monitoring pressures over the range of atmospheric to three times containment design pressure (approximately 165 psig). Thus, it was intended to monitor the RB in the event of an accident not bounded by the plant safety analysis (i.e., a Severe Accident).
These instruments are not assumed to provide information required by the operator to take a mitigation action specified in the accident analysis.
(continued)
Crystal River Unit 3 8 3.3-131 Amendment No.
I
I PAM Instrumentation B 3.3.17 BASES LC0 18.
Core Exit Temperature (Backuol (continued) following a steam generator tube rupture or small break LOCA.
Operator actions to maintain a controlled cooldown, such as adjusting OTSG level or pressure, would be prompted by this indication. 4*-ed4M4e&r the care exit ther ccouple: provide input to the subcccling = rgin =cnitor, which i
- Type A variable.
The subcccling margin =cnitor take: the average of the five highest CET: for cach cf the ICCM train:.
Twc channel; cc ure that
!ngle fcilure-uill not di :ble the ability to determine the representative ccre exit temperature.
19.
Emeraency Feedwater Flow EFW Flow instrumentation is provided to monitor operation of decay heat removal via the OTSGs.
The EFW injection flow to each OTSG (2 channels per OTSG, one associated with each EFW injection line is determined from a differential pressure meas)urement calibrated to a span of 0 gpm to 1000 gpm.
Each differential pressure transmitter provides an input to a control room indicator and the plant computer.
EFW Flow is used by the operator to determine the need to throttle flow during accident or transient conditions to prevent the EFW pumps from operating in runout conditions or from causing excessive RCS cooldown rates when low decay heat levels are present.
EFW Flow is also used by the operator to verify that the EFW System is delivering the correct flow to each OTSG. However, the primary indication of this function is provided by 0TSG level.
These instruments are not assumed to provide information required by the operator to take a mitigation action specified in the safety analysis.
As such, they are not Type A variables. However, the monitors are deemed risk significant (Category 1) and are included within the LC0 based upon this consideration.
(continued)
Crystal River Unit 3 B 3.3-138 Amendment No.
~
PAM Instrumentation B 3.3.17 4
BASES LCO The following list is a discussion of the specified 1
(continued) instrument Functions listed in Table 3.3.17-1.
i l
1.
Wide Ranae Neutron Flux Two wide-range neutron flux monitors are provided for post-accident reactivity monitoring over the entire range of expected conditions.
Each monitor provides indication over the range of 10~8 to 100% log rated power covering the source, intermediate, and power ranges.
Each monitor utilizes a fission chamber neutron detector to provide redundant main control board indication. A single channel provides recorded i
information in the control room. The control room indication of neutron flux is considered one of the primary indications used by the operator following an accident.
Following an event the neutron flux is monitored for reactivity control. The operator ensures that the reactor trips as necesv and that emergency boration is initiated if requin Since the operator relies upon this indication in order to take specified manual action, the variable is included in this LC0.
Therefore, the LC0 deals specifically with this portion of the string.
]
2.
Reactor Coolant System (RCS) Hot Lea Temperature i
Two wide range resistance temperature detectors (RID's), one per loop, provide indication of reactor coolant system hot leg temperature (T,) over the range of 120' to 920*F.
Each T measurement provides an input to a control room i,ndicator. Channel B is also recorded in the control room. Since the operator relies on the control room indication following an accident, the LCO deals specifically with this pcrtion of the string.
T, is a Type A variable on which the operator bases manual actions required for event mitigation for which no automatic controls are provided.
Following a steam l generator tube rupture, the affected steam generator is to be isolated only after T, falls below the saturation temperature corresponding to the pressure (continued)
Crystal River Unit 3 8 3.3-126 Amendment No.
1 i
PAM Instrumentation B 3.3.17 I
BASES LC0 2.
Reactor Coolant System (RCS) Hot Lea Temperature (continued) l setpoint of the main steam safety valves. For event
)
monitoring once the RCP's are tripped, T, is used along with the core exit temperatures and RCS cold leg temperature to measure the temperature rise across the core for verification of core cooling.
1 3.
RCS Pressure (Wide Ranae) j RCS pressure is measured by pressure transmitters with a span of 0-3000 psig. Redundant monitoring 1
capability is provided by two trains of instrumentation. Control room and remote shutdown panel indications are provided.
The control room l
indications are the primary indications used by the t
j operator during an accident. Therefore, the LC0 deals specifically with this portion of the instrument string.
RCS pressure is a Type A variable because the operator uses this indication to adjust parameters such as steam generator (OTSG) level or pressure in order to monitor and maintain a controlled cooldown of the RCS following a steam generator tube rupture or small i
break LOCA.
In addition, HPI flow is throttled based l
\\
(continued)
Crystal River Unit 3 B 3.3-127 Amendment No.
l
PAM Instrumentation l*
B 3.3.17 l
l BASES l
l LC0 7.
Containment Sumo Water level (Flood Level)
(continued) 1 displayed in the control room on edgewise level indicators. Channel A and B sump flood level indication are recorded in the associated ' A' and 'B' i
EFIC Rooms.
Each instrument encompasses a range of l
0-10 feet above the sump and provides information to the operator related to gross leakage in the Reactor Building. This leakage may be indication of degradation in the reactor coolant pressure boundary (RCPB) which would require further investigation and action. These instruments are not assumed to provide information required by the operator to take a l
mitigation action specified in the accident analysis.
l As such, they are not Type A variables.
However, the monitors are deemed risk significant (Category 1) and are included within the LC0 based upon this f
consideration.
l 8,9 Containment Pressure (Expected Post-Accident and Wide l
Ranae) l The containment pressure variable is monitored by two ranges of pressure indication.
Expected post-accident range (-10 to 70 psig) and wide range (0 to 200 psig) pressure indication each provide two channels of pressure indication.
Channel A and B wide range containment pressure are recorded in the associated
' A' and 'B' EFIC Rooms. The low range is required in order to ensure instrumentation of the necessary accuracy is available to monitor conditions in the RB during DBAs. The wide range instrument was required by Regulatory Guide 1.97 to be capable of monitoring pressures over the range of atmospheric to three times containment design pressure (approximately 165 psig).
Thus, it was intended to monitor the RB in the event of an accident not bounded by the plant safety analysis (i.e., a Severe Accident).
f These instruments are not assumed to provide information required by the operator to take a mitigation action specified in the accident analysis.
(continued) 4 f
Crystal River Unit 3 B 3.3-131 Amendment No.
s
PAM Instrumentation
~
B 3.3.17 i
BASES LC0
- 18. Core Exit Temperature (Backuo)
(continued) l following a steam generator tube rupture or small break LOCA. Operator actions to maintain a controlled cooldown, such as adjusting OTSG level or pressure, would be prompted by this indication.
l
- 19. Emeraency Feedwater Flow EFW Flow instrumentation is provided to monitor operation of decay heat removal via the OTSGs.
The EFW injection flow to each OTSG (2 channels per OTSG, one associated with each EFW injection line) is i
determined from a differential pressure measurement calibrated to a span of 0 gpm to 1000 gpm.
Each differential pressure transmitter provides an input to a control room indicator and the plant computer.
EFW Flow is used by the operator to determine the need to throttle flow during accident or transient conditions to prevent the EFW pumps from operating in runout conditions or from causing excessive RCS cooldown rates when low decay heat levels are present.
EFW Flow is also used by the operator to verify that the EFW System is delivering the correct flow to each OTSG. However, the primary indication of this function is provided by OTSG level.
These instruments are not assumed to provide information required by the operator to take a mitigation action specified in the safety analysis.
As such, they are not Type A variables. However, the monitors are deemed risk significant (Category 1) and are included within the LC0 based upon this consideration.
- 20. Low Pressure in.iection Flow Low pressure injection flow instrumentation is provided to monitor flow to the RCS following a large break LOCA.
It is also used to monitor LPI flow during piggy back operation following a small break LOCA. The low pressure injection flow to the reactor (2 channels, one associated with each LPI injection (continued)
Crystal River Unit 3 8 3.3-138 Amendment No.
a
PDI Instrumentation B 3.3.17 BASES LC0
- 20. Low Pressure Iniection Flow (continued) line) is determined from a differential pressure measurement calibrated to a span of 0 gpm to 5000 gpm.
The LPI flow indication is used by the operator to throttle the flow to s 2000 gpm prior to switching the pump suction from the BWST to the RB sump. This assures adequate net positive suction head (NPSH) is maintained to the pump. The indication is also used to verify LPI flow to the reactor as a prerequisite to termination of HPI flow.
Since low pressure injection flow is a Type A variable on which the operator bases manud actions required i
for event mitigation for which no automatic controls are provided, it has been included in this LCO.
- 21. Dearees of Subcoolina Two channels of subcooling margin with inputs from RCS hot leg temperature (Ts), core exit temperature, and RCS pressure are provided. Multiple core exit temperatures are auctioneered with only the highest temperature being input to the monitor.
These two channels of subcooling margin are backed up by either of two indications of subcocling margin based on similar inputs through the Safety Parameter Display System (SPDS). At least one SPDS channel must be i
available to provide this backup.
The T, inputs to the subcooling margin monitors and SPDS operate over a range of 150 to 920*F. The core exit temperature inputs operate over a range of 150 to 2000*F and 150 to 2500*F for the subcooling margin monitors and SPDS, respectively.
RCS pressure inputs operate over a range of 200 to 2500 psig.
The subcooling margin monitors are used to verify the existence of, or to take actions to ensure the restoration of subcooling margin.
Specifically, a loss of adequate subcooling margin during a LOCA requires the operator to trip the reactor coolant pumps (RCP's), to ensure high or low pressure injection, and raise the steam generator levels to the inadequate core cooling level.
Once subcooling margin is restored, the operator is instructed to restart at (continued)
Crystal River Unit 3 B 3.3-138a Amendment No.
PAM Instrumentation B 3.3.17 1
BASES LC0
- 21. Dearees of Subcoolina (continued) i least one RCP and throttle injection flow to maintain I
a specified degree of subcooling.
Since degrees of subcooling is a Type A variable on which the operator bases manual actions required for event mitigation for which no automatic controls are provided, it has been i
included in this LCO.
i i
t l
i i
i l
l l
l i
(continued) i f.
I l
Crystal River Unit 3 B 3.3-138b Amendment No.
l li i.
i
U. S. Nuclear Regulatory Commission 3F0996-05 Page 1 of 10 EVALUATION OF SAFETY PARANETER DISPLAY SYSTEN AGAINST DESIGN CRITERIA 0F REGULATORY GUIDE 1.97 FOR USE AS A SUBC00 LING MARGIN MONITOR Introduction Florida Power Corporation (FPC) is conducting an in-depth review of the Emergency OperatingProcedure(E0P's). As part of this review, it was determined that the use of " degrees of subcooling" in the E0P's was consistent with a Reg. Guide 1.97 Type A variable. FPC had previously specified " degrees of subcooling" as a Reg.
Guide 1.97 Type B variable. Due to the way the variable is used in the E0P's, it should be listed as a Type A variable.
Reg. Guide 1.97 specifies that instrumentation that monitors Type A variables should be designed to Category 1 criteria.
The design guidance in Reg. Guide 1.97 for Category 1 devices is equivalent to safety related devices. Many of the components associated with the current subcooling indication are non-safety related.
An evaluation of the monitors' design was performed and the impact of the non-safety related devices was assessed.
From this evaluation, it was concluded that the major impact on plant safety was from the core exit thermocouples which are input to the monitors. These thermocouples are not environmentally qualified.
As a compensatory measure, a modification was made to the plant hfety Parameter Display System (SPDS). Core exit thermocouple inputs were added to the pressures and temperatures already part of the system and programuing was added to calculate subcooling margin. Alarms were included in the programming to alert operators when the subcooling margin does not meet minimum specified values. The SPDS displays are used to display the subcooling margin in several different formats including full screen when an alarm occurs. The control room operators have been trained on the use of the new system. All of the inputs used by SPDS to calculate subcooling margin are environmentally qualified.
These interim enhancements were completed prior to startup from the Spring 1996 Refuel 10 outage and are described in our July 8,1996 letter to the NRC (3F0796-03).
As a follow-up to the interim SPDS modification, FPC has evaluated alternatives for a permanent modification to upgrade the subcooling margin monitors.
Alternatives from "do nothing" to installation of a fully qualified, safety related system were evaluated and discussed. The emphasis of the decision making process was on making changes that produced the greatest safety enhancement for the resources expended. Input from the Operations Department weighed heavily in the decision-making process. The operators have been very favorably impressed with the man-machine interface provided by the SPDS display. As a result, for the permanent resolution to this issue, FPC has decided to modify the SPDS a second time to enhance its reliability and gain further compliance with the design recommendations of Regulatory Guide 1.97 for Category 1 instruments. This report describes the current configuration of the SPDS relative to the Reg. Guide 1.97 design recommendations and also the planned enhancements. The enhancements will be installed during Refuel 11, currently scheduled for the Spring of 1998.
i i
U. S. Nuclear Regulatory Commission 3F0996-05 Page 2 of 10 General The subcooling margin monitoring instrumentation at Crystal River 3 (CR-3) is comprised of two trains of instruments, each with inputs as described below. The instrument string configurations are depicted graphically on the three figures included as Attachment 9 to this submittal.
Each train of subcooling margin monitoring instrumentation has the following inputs:
Two Reactor Coolant System (RCS) hot leg temperature signals Two RCS pressure wide range signals Two RCS pressure narrow range signals Eight incore thermocouple signals Two of the hot leg temperature signals. one for each monitor, originate at RC-4A-TE1 (Train A) and RC-48-TE4 (Train B) and go to separate remote shutdown auxiliary cabinets in the respective 4160 volt engineered safeguards switchgear room These signals are fully qualified up to this point.
From there they go into the non-nuclear instrumentation (NNI) cabinets in the main control room and to the SPDS where the subcooling margin calculation is performed.
This information is displayed on the SPDS displays mounted above the main control board.
The other two hot leg temperature signals, one for each monitor, originate at RC-4B-TE1 (Train A) and RC-4A-TE4 (Train B) and go directly to separate NNI cabinets in the main control room and from there to the SPDS. The components associated with these signals, which are located in a harsh environment, are qualified to the requirements of 10 CFR 50.49.
Two wide range RCS pressure signals feed both trains of the subcooling margin monitor. They originate at RC-3A-PT3 and RC-38-PT3 and go to separate engineered safeguards cabinets in the main control room. These signals are fully qualified up to this point.
From there they go to the SPDS where they are used in subcooling margin calculations when RCS pressure is greater than 600 psig.
The "A" side narrow range RCS pressure signal feeds both trains of the subcooling aargin monitor.
It originates at RC-147-PT and goes to the "A" remote shutdown a1xiliary cabinet in the "A" 4160 volt engineered safeguards switchgear rocm.
TLis signal is fully qualified up to this point. From there it goes to the SPDS where it is used in subcooling margin calculations when RCS pressure is below 600 prig.
As part of the enhancement to the subcooling margin instrumentation feeding the SPDS, a redundant, "B" side narrow range pressure signal will be provided to both trains of the subcooling margin monitor. This narrow range RCS pr essure signal will originate at RC-148-PT, and go to the "B" remote shutdown auailiary cabinet in the "B" 4160 volt engineered safeguards switchgear room.
The signal will be fully qualified up to this point.
From there it will go to the SPDS where it will be used in subcooling margin calculations when RCS pressure is below 600 psig.
J.
t I
U. S. Nuclear Regulatory Commission 3F0996-05
- l.
Page 3 of 10 The sixteen incore thermocouple signals go into the Reactor Coolant Inventory and j
Tracking System (RCITS) cabinets in the control complex.
At this point, eight of the sixteen signals go to one subcooling margin monitor and the other eight 1
i go to the other monitor.
These signals are fully qualified up to this point.
j The signals go from the RCITS cabinets to the SPDS, eight to each train, where i
they are auctioneered in software so that the highest reading incore temperature l
is used in the subcooling margin calculation.
i I
i SPECIFIC CRITERIA FROM REGULATORY GUIDE 1.97 i
l 1.
Equipment Qualification Environmental Qualification j
RG Recommendation 4
i The instrumentation should be qualified in accordance with Regulatory Guide 1.89,
" Qualification of Class lE Equipment for Nuclear Power Plants," and the methodology described in NUREG-0588, " Interim Staff Position on Environmental j
Qualification of Safety-Related Electrical Equipment."
l
-Instrumentation whose ranges are required to extend beyond those ranges calculated in the most severe design basis accident event for a given variable l
should be qualified using the guidance provided in paragraph 6.3.6 of ANS-4.5.
j Qualification applies to the complete instrumentation channel from sensor to display where the display is a direct-indicating meter or recording device.
If
}
the instrumentation channel signal is to be used in a computer-based display, recording, or diagnostic program, qualification applies from the sensor up to and i
including the channel isolation device.
i Dearee of Compliance - Full (Subseauent to Modifications) l All equipment used for subcooling margin monitoring which is located in a harsh environment has been reviewed. The sensing devices for core exit temperature, wide range RCS pressure, RCS hot leg temperature and associated cables, connections, and building penetrations are all qualified to the requirements of j
10 CFR 50.49. Presently the "A" side narrow range RCS pressure sensing device, cables, connections and penetrations are qualified to the requirements of 10 CFR i
50.49. Following enhancements to the SPDS subcooling margin instrumentation, the "B" side narrow range RCS pressure signal will be qualified to these requirements 1
as well.
i i
i
W U. S. Nuclear Regulatory Commission 3F0996-05 Page 4 of 10 Equipment Qualification (continued)
Seismic Qualification RG Recommendation The seismic portion of qualification should be in accordance with Regulatory 4
Guide 1.100, " Seismic Qualification of Electric Equipment for Nuclear Power i
Plants."
Instrumentation should continue to read within the required accuracy following, but not necessarily during, a safe shutdown earthquake.
Dearee of Compliance - Partial 4
The safety related portions of the system are all seismically designed in accordance with the CR-3 seismic licensing basis.
This includes the RCITS cabinets, which are equally qualified.
The remote shutdown auxiliary cabinets i
and NNI cabinets have been evaluated as part of the resolution of USI A-46. The remote shutdown auxiliary cabinets were determined to be seismically adequate.
Two of the four NNI cabinets were determined to be seismically adequate.
The remaining two cabinets are not bolted together and were therefore classified as outliers. This deficiency will be corrected in accordance with FPC's USI A-46 l
outlier resolution program.
\\
The "A" and "B" SPDS multiplexers and multiplexer servers are not seismically qualified but are housed in seismically qualified cabinets. The SPDS computers and displays are not seismically qualified but are either supported seismically, seismically restrained from becoming missiles, or housed in seismically qualified cabinets. All major components necessary for the operation of the system will be physically restrained to prevent motion and minimize the probability of damage during a seismic event.
Justification for Deviation The p
.t is located in a very low seismic risk regio 1.
The probability that a i
seismic event will occur and damage this equipment is very low. In the unlikely event damage does occur as a result of a seismic event, corrective actions will be initiated to restore the equipment in accordance with the actions required by the technical specifications.
2.
Redundancy RG Recommendation No single failure within either the accident monitoring instrumentation, its auxiliary supporting features, or its power sources concurrent with the failures that are a condition or result of a specific accident should prevent the operators from being presented the information necessary for them to determine the shfety status of the plant and to bring the plant to and maintain it in a safe condition following that accident. Where failure of one accident-monitoring channel results in information ambiguity (that is, the redundant displays disagree) that could lead operators to defeat or fail to accomplish a required safety function, additional information should be provided to allow the operators
. - - - _ ~
- ~ _
U. S. Nuclear Regulatory Commission 3F0996-05 Page 5 of 10 to deduce the actual conditions in the plant.
This may be accomplished by providing additional independent channels of information of the same variable (addition of an identical channel) or by providing an independent channel to monitor a different variable that bears a known relationship to the multiple channels (addition of a diverse channel). Redundant or diverse channels should be electrically independent and physically separated from each other and from equipment not classified important to safety in accordance with Regulatory Cuide 1.75, " Physical Independence of Electric Systems," up to and including any isolation device. Within each redundant division of a safety system, redundant monitoring channels are not needed except for steam generator level instrumentation in two-loop plants.
Dearee of Compliance - Full (Subseauent to Modification)
In the final configuration, two independent channels of subcooling margin information are provided.
The two channels will be electrically independent.
No single active component failure can result in the loss of both channels.
In the event of failure one of the channels resulting in ambiguous information, diverse subcooling margin information is available from the use of steam tables using fully qualified and redundant pressure and temperature indications.
3.
Power Source RG Recommendation The instrumentatior hould be energized from station standby power sources as provided in Regulatory Guide 1.32, " Criteria for Safety-Related Electrical Power Systems for Nuclear Power Plants," and should be backed up by batteries where momentary interruotion is not tolerable.
i Dearee of Compliance - Full (Subseauent to Modification)
In the final configuration, the AC power for the redundant channels will be i
supplied from independent, safety related inverters backed up by the station standby pow 9r sources (emergency diesel generators). The DC for the inverters is from independent, safety related station batteries. The AC power supply for the NNI cabinets is from these same sources and is also auctioneered with redundant supplies (VBDP-1 and VBDP-7) fed from non-safety related regulated instrument buses. One of these supplies (VBDP-7) is powered by an inverter with AC and DC power from non-safety related :upplies.
4.
Channel Availability RG Recommendation The instrumentation channel should be available prior to an accident except as provided in paragraph 4.11, " Exception," as defined in IEEE Std 279-1971,
" Criteria for Protection Systems for Nuclear Power Generating Stations," or as specified in the technical specifications.
I I
4 U. S. Nuclear Regulatory Commission 3F0996-05 l
Page 6 of 10 Dearee of Compliance - Full I
FPC is proposing a technical specification change to add the subcooling margin monitors to Technical Specification LC0 3.3.17, Post-Accident Monitoring
^
Instrumentation.
The Required Actions for one or two channels inoperable are j
delineated in the technical specifications.
J 5.
Quality Assurance RG Recommendation The recommendations of the following regulatory guides pertaining to quality assurance should be followed:
a j
Regulatory Guide 1.28 " Quality Assurance Program Requirements (Design and 1
Construction)"
i i
Regulatory Guide 1.30 " Quality Assurance Requirements for the Installation, (Safety Guide 30)
Inspection, and Testing of Instrumentation and Electric Equipment" Regulatory Guide 1.38 " Quality Assurance Requirements for Packing, Shipping, Receiving, Storage, and Handling of Items for Water-Cooled Nuclear Power Plants" Regulatory Guide 1.58 " Qualification of Nuclear Power Plant Inspection, j
Examination, and Testing Personnel" e
Regulatory Guide 1.64 " Quality Assurance Requirements for the Design of Nuclear Power Plants" i
Regulatory Guide 1.74 " Quality Assurance Terms and Definitions" Regulatory Guide 1.88 " Collection, Storage, and Maintenance of Nuclear Power 4
Plant Quality Assurance Records" Regulatory Guide 1.123 "(.ality Assurance Requirements for Control of j
Procurement of Items and Services for' Nuclear Power Plants" Regulatory Guide 1.144 " Auditing of Quality Assurance Programs for Nuclear Power Plants" Regulatory Guide 1.146 " Qualification of Quality Assurance Program Audit Perc ?nnel for Nuclear Power Plants" Reference to the above regulatory guides (except Regulatory Guides 1.30 and 1.38) is being made pending issuance of a revision to Regulatory Guide 1.28 that is under development (Task RS 002-5) and that will endorse ANSI /ASME NQA-1-1979.
" Quality Assurance Program Requirements for Nuclear Power Plants."
U. S. Nuclear Regulatory Commission 3F0996-05 Page 7 of 10 Dearee of Compliance - Partial The safety related portions of the system have been qualified in accordance with the FPC Quality Assurance Program which complies with the requirements of 10 CFR 50, Appendix B and has been approved by the NRC. FPC has committed to all of the Regulatory Guides listed above except for Regulatory Guide 1.28.
FPC's commitment to this guidance is documented and clarified in Table 1-3 of the CR-3 Final Safety Analysis Report (FSAR).
Commitments related to Regulatory Guide 1.28 are contained in FPC's commitment to Regulatory Guide 1.33 and through FPC's I
compliance with 10 CFR 50, Appendix B.
The recommendation is fully met for these components.
The two RCS pressure channels (narrow range and wide range) are safety related up through an isolation device in the engineered safeguards cabinets. One of the RCS hot leg temperature channels is safety related up through an isolation device in a remote shutdown auxiliary cabinet. All 16 incore temperature channels (8 per SPDS train) are safety related through the Reactor Coolant Inventory &
Tracking (RCITS) cabinets.
The remainder of the components are non-safety related, but satisfy the quality assurance recommendations of Reg. Guide 1.97 for Category 2 variables.
Justification for Deviation The human factors advantages of this personal computer-based system more than outweigh the loss of quality resulting from a lack of 10 CFR 50, Appendix B qualification for all equipment.
The equipment is continually in service and monitored for proper operation by control room operators. Any malfunction will be promptly detected. There will be a high degree of confidence that the system will function when called upon to do so. Since the SPDS functions continuously, virtually all failures will be "self-annunciating" and corrective actions can be initiated before the system is needed to respond to an event.
t 6.
Display and Recording RG Recommendation Continuous real-time display should be provided.
The indication may be on a dial, digital display, CRT, or stripchart recorder. Recording of instrumentation readout information should be provided for at least one redundant channel.
If direct and immediate trend or transient information is essential for operator information or action, the recording should be continuously available on redundant dedicated recorders. Otherwise, it may be continuously updated, stored in computer memory, and displayed on demand. Intermittent displays such as data loggers and scanning recorders may be used if no significant transient response information is likely to be lost by such devices.
l
i l
l.
l U. S. Nuclear Regulatory Commission l
Page 8 of 10 Dearee of Compliance - Full (Subseauent to Modification)
C, ntinuous real-time display is provided on two redundant SPDS displays.
Recording of subcooling margin is done at one second intervals and stored in i
computer memory.
In the final configuration, this information will have the capability to be displayed in trend format.
\\
7.
Range RG Recommendation If two or more instruments are needed to cover a particular range, overlapping of instrument span should be provided.
If the required range of monitoring instrumentation results in a loss of instrumentation sensitivity in the normal operating range separate instruments should be used.
Dearee of Comoliance - Full Reg. Guide 1.97, Table 3, recommends a range of 200*F subcooling to 35'F j
superheat. The SPDS range exceeds this recommendation.
8.
Equipment Identification RG Recommendation Types A, B, and C instruments designated as Categories 1 and 2 should be l
specifically identified with a common designation on the control panels so that the operator can easily discern that they are intended for use under accident conditions.
Dearee of Comoliance - Full The SPDS displays will be labeled as Reg. Guide 1.97 instruments on the main control board.
9.
Interfaces i
RG Recommendation The transmission of signals for other use should be through isolation devices j
that are designed as part of the monitoring instrumentation and that meet the provisions of this document.
Dearee of Comoliance - None j
Where signals are fed from safety related systems for use by the subcooling margin monitors, isolation devices are provided to protect the safety related systems from faults in the SPDS. No isolation devices are provided to protect i
signals to the SPDS from faults in other safety or non-safety related components.
i
U. S. Nuclear Regulatory Commission 3F0996-05 Page 9 of.10 l
Justification for Deviation l
Since this system is in operation and displays continuously, any malfunction caused by components connected to the system will be promptly detected by the plant operators.
Prompt corrective actions can be taken to restore the equipment. Failure of interconnected components during an event has a very low j
probability. Also, since the system is redundant, failure of a single channel will not cause a loss of function.
- 3.
Servicing, Testing, and Calibration RG Recommendation Servicing, testing, and calibration programs should be specified to maintain the capability of the monitoring instrumentation. If the required interval between testing is less than the normal time interval between plant shutdowns, a capability for testing during power operation should be provided.
Whenever means for removing channels from service are included in the design, the design should facilitate administrative control of the access to such removal means.
The design should facilitate administrative control of access to all setpoint adjustments, module calibration adjustments, and test points.
Periodic checking, testing, calibration, and calibration verification should be 4
in accordance with the applicable portions of Regulatory Guide 1.118, " Periodic Testing of Electric Power and Protection Systems," pertaining to testing of instrument channels.
(Note:
Response time testing not usually needed.)
The location of the isolation device should be such that it would be accessible for maintenance during accident conditions.
Dearee of Compliance - Full i
The subcooling margin monitors' design and FPC's program for calibrating and maintaining them complies with all of the above recommendations.
In addition, i
the post-accident monitoring instrumentation technical specification Surveillance Requirements require a CHANNEL CHECK every 31 days and a CHANNEL CALIBRATION every 24 months.
- 11. Human Factors RG Recommendation 4
4 The instrumentation should be designed to facilitate the recognition, location, replacement, repair, or adjustment of malfunctioning components or modules.
The monitoring instrumentation design should minimize the development of conditions that would cause meters, annunciators, recorders, alarms, etc., to
O U. S. Nuclear Regulatory Commission j
Page 10 of 10 give anomalous indications potentially confusing to the operator. Human factors analysis should be used in determining type and location of displays.
To the extent practicable, the same instruments should be used for accident monitoring as are used for the normal operations of the plant to enable the operators to use, during accident situations, instruments with which they are most familiar.
Dearee of Compliance - Full Subcooling margin is displayed on the SPDS displays mounted above the main control board. Real time indication of subcooling margin is the most desirable method of monitoring the variable from a human factors perspective. Operators will be trained to use the SPDS displays as the primary means of determining subcooling margin.
Providing subcooling margin data on the SPDS displays provides unique flexibility in the presentation of information to the operator:
Subcooling margin is automatically calculated from incore temperatures when o
SPDS determines no reactor coolant pumps e e running.
The SPDS display indicates if subcooling margin is being calculated from hot o
leg temperature or incore temperature.
o in the event of an a'iarm, subcooling margin information is enlarged to cover the entire display. The display colors change to white characters on a red background with the characters being as large as possible and still display the margin.
A timer starts, in the event of an alarm, to aid the operators in determining o
how long adequate subcooling margin has been lost.
This is useful in determining the need to trip all reactor coolant pumps within two minutes of the loss of adequate subcooling margin.
- 12. Direct Measurement RG Recommendation To the extent practicable, monitoring instrumentation inputs should be from sensors that directly measure the desired variables.
An indirect measurement should be made only when it can be shown by analysis to provide unambiguous information.
Dearee of Comoliance - Full Subcooling margin is not directly measurable.
However the temperature and pressure that determine the degree of subcooling are measured directly.
f
^ ~ $ " "' " ' - -
- Reactor Bldg l Control Complex 108 ft. El.
l Control Complex 124 ft. El l Control Complex 145 fL El.
I NSR and Non-EQ RC-4 B-1TI RC-4 B-MV/V3 RC-4B-EB3
Envir. Qualified (EQ) l lIoop "B" Th NSR NSR Safety Related (and EQ IItC-40-TE1 I loop ~B" Th loop "B" Th l
l l loop "B" Th j !
NSR i
.NSR EQ-N/A
'EQ-N/ A EQ-N/A r primary sensor) l' l EQ-Y
{NNI gi
{
l NNI Cab 4 [f NNI Cab 4 [X NNI Cab 5 [X NNI-X Power is from l
X i
8 RC-4 A-IBl RC-4 A-MV/V3 l RC-4A-TY5 Vital Bus 3C or Inst.
e HC-4A-TEI l
RC-4 A-TY1-1 RC-4 A-TYl-3 l
loop " A" Th toop "A" Th Bus 3A (auto. transfer)
Inop
- A" Th l
Icop "A" Th goop A* Th toop "A" Th NSR NSR NSR SR SR ^
SR l
EQ-N/A EQ-N/A EQ-N/A EQ-Y EQ-N/A EQ-N/A e
Vital Bus 3A l
NNI Cab 4 [f NNI Cab 4 [f NNI Cab 4 [f
{
Vital Bus 3A Vital Bus 3A i
e e
RC-3 A-PT3 l
l RC-3A-JX3 RC-3 A-PY3 To "B" Side l
" A" Press
- A" Press
- SPDS Display "A' WR Press SR SR l
SR l
EQ-N/ A EQ-N/A E4-Y I
{
{
l Vital Bus 3A Vital Bus 3A,
A" SPDS Vital Bus 3A RC-3B-J X3 RC PY3
- ftal Bus Display A* SPDS V
RC-3B-PT3 "B" Press "B" Press i
"B' WR Press I
SR SR IE Vital Bus SR EQ-N/A EQ-N/A e
EQ-Y Vital Bus 3D l
l Vital Bus 3D Vital Bus 3D l
e RC-147-PT '
l RC-147-P Y1 RC-147-PY2 l
From "B" Side SPDS Display "A' m Press l
" A" LR Press "A' M Press l
SR SR i
SR EQ-Y EQ-N/A EQ-N/A l
I Vital Bus 3A l
Vital Bus 3A Vital Bus 3A i
l l
1 RC-148-PT I
RC-148-P Y1 RC-148-PY2 l
NNI X Power Supply "B* LR Press t
"B" LR Press "B" m Press l
SR
""=' SR SR i
EQ-Y l
EQ-N/A EQ-N/ A l
u____________________________---
Vital Bus 3B l
Vital Bus 3B Vital Bus 3B l
l VBDP.g VBXS-2A VBDP-5 l
l RC-165K-TYI RC-165K-TY2 y
p w.,.
art Incore Temp.
Incore Temp.
RC-165C-TY1 RC-165C-TY2 l
l 4
e SR SR Incore Temp incore Temp.
i
[.
l Vital Bes 3B Vital Bus 3B SR SR To 118vac R
Eo l
Vital Bus 3B Vital Bus 3B j
24 vde Field loads 24 vde hgapg f
RC-163A-TYi RC-165A-T Y2
_RC-iS51-TY1 RC-1651-TY2 i
'j l
Incore Temp.
Incore Temp SR Incore Temp.
Incore Temp.
l iM - 9 L-T E SR Ij l
Vital Bus 3B Vital Bus 3B SR 6-SR FR & EO Vital Bus 38 l Vital Bus 3B m_ g g g
"& D I
f RC-165F-TY1 RC-165F-TY2 4
l incore Temp.
Incore Temp RC-165 E-TY1 RC-165E-TY2 l
-24wie Bus l
e iM-9H-R SR SR Incore Temp Incore Temp.
e l CR A FQ ll l
Vital Bug 3B Vital Bus 3B SR SR I
l Vital Bus 3B Vital Bus 3B l
i
=
iM-wM-g l;
l RC-165L-TY1 RC-1651rTY2 FR tr EQ 1
iw _ at,- g ll l
Incore Temp.
Incore Temp RC-165M -TY1 RC-165M-TY2
+
e l FR
- EQ SR Incore Temp Incore Temp.
l SR
+24vde Bus
.l e
Vital Bus 3B Vital Bus 3B SR SR Vital Bus 3B Vital Bus 3B i
l -4[g j,
?
I i
i
SPDS TS AT Train "B"
^t + -" 'a--a Reactor Bldg l Control Complex 108 ft. El.
l Control Complex 124 ft El.
l Control Complex 145 ft. El.
l NSR and Non-EQ e
i
[ItC-4A-TE47 l
RC-4A-TT4 RC-4 A-WV/V4 RC-4A-EB3
Envir. Qualified (EQ) j loop "A* Th j l l
l -NSR loop A" Th loop " A" Th loop " A' Th NSR NSR Safety Related (and EQ
. N3R i
l l
EQ-N/A EQ-N/A EQ-N/A for primary sensor) lEQ-Y
{NNI
{;;
l NNI Cab 6 [y NNI Cab 6 [y NNI Cab 6 [F Wi-Y P bh
_7 (f, BIT E)
RC-48-TY4-1 RC-48-TY4-;
I l
RC-4 B-IB4 RC-4 B-MV/V4 RC-4B-TY5 y
RC-4B-TE4 loop ~B' Th loop ~B" Th Loop "A" Th with auto ^ sfer Icop "B' Th l
Loop ~B' Th loop B" Th l
e FNSR NSR NSR SR SR SR l
EQ-N/A ER-N/A EQ-N/A EQ-Y l
EQ-N/A EQ-N/A e
Vital Bus 3B l
Vital Bus 3B Vital Bus 3B l
l NNI Cab 7 Q NNI Cab 7 p NNI Cab 6 y i
e RC-3 A-J X3 RC-3 A-PY3 RC-3 A-PT3 l
l "A" Press To "A" Side
" A' Press "A" Press
.~
- SPDS Display SR SR j
SR l
EQ-N/A EQ-N/A EQ-Y
.B" SPDS Vital Bus 3A Vital Bus 3A Vits! Bus 3A l
l e
Computer i
e l
RC-38-JX3 RC P Y3 IE Vital Bus "B' SPDS
~B' Press I
~B' Press "B" Press Display RC PT3 SR SR SR IE Vital Bus EQ-Y j
l l
EQ-N/A EQ-N/A Vital Bus 3D l
l l
Vital Bus 3D Vital Bus 3D i
i HC-147-PT l
RC-147-P Y1 RC-147-PY2 I
" A' NR Press
' A' NR Press
" A" NR Press l
From "A" Side SPDS Display SR "l-SR SR i
j EQ-N/ A EQ-N/A EQ-Y Vital Bus 3A l
Vital Bus 3A Vital Bus 3A I
I HC-148-PT l
RC-14 8-PY1 RC-14 E-PY2 l
l
'B' NR Press B NR Press
~B' NR Press SR E
SR SR EQ-Y l
EQ-N/A EQ-N/A l
NNI Y Power Supply i
Vital Bus 3B l
Vital Bus 3B Vital Bus 3B l
VBDP-6 VBXS-4 A VBDP-7 RC-1650-T Y1 RC-1658-TY2 h
incore Temp Incore Temp-RC-165D-TY1 RC-165D-TY2 MWorm Alt SR SR Incore Temp.
Incore Temp.
l n-n-1E ll Vital Bus 3B Vital Bus 3B SR SR l
Qf iu a to Vital Bus 3B Vital Bus 3B l
To 118vac IFRAFQ le I
RC-165G-T Y1 RC-165G-TY2 l
24 vde Field leads 24 vde gy_g_g Incore Temp RC-165H-TY1 RC-165 H-TY2 l
,l l
Incore Temp.
"*U I
f l
V tal Bus 3B V al Bus 3B R
R Vital Bus 3B Vital Bus 3B w,
[ g-awgE j,
l l
RC-165J-TY1 RC-165J-TY2 Qf Incore Temp-RC-165N-TY1 RC-165N-TY2 1W-6c-TE incore Temp.
lM & M l.
SR SR Incore Temp Incore Temp.
I
- g# "
l Vital Bus 3B Vital Bus 3B SR SR l
Igy_g_g Vital Bus 3B Vital Bus 3B l
=R & rg
.l RC-1650- T Y1 RC-1650-TY2 l
Aucuormer !
l g_ g_ g j.
gg Incore Temp.
Incore Temp-RC-165P-TY1 RC-165P-TY2 l
a to l "N - A A-TE V at Bus 3B al Bus 3B R
R I
Vital Bus 3B Vital Bus 3B l
+24vde Bus
'f
[
O' 4
o Attachment to 3F0996-05 9
i 4B Incores g4A Incores (B" 1E Vital Bus A" 1E Vital Bus Control Room i
(A" 1E Vital Bus g3A Backup 2A Primary 2B Primary 3B Backup f'B" 1E Vital Bus (B" IE Vital Bus A" 1E Vital Bus Network "A" Ethernet Hub connection "B" Ethernet Hub
" A" 1E Vital Bus
~~~
"B" 1E Vital Bus i
i
" A" Mux Server "B" Mux Server "A" 1E Vital Bus "B" 1E Vital Bus EFIC Room "A" Intelligent Nhnec ion "B"
Intelligent Ethernet Hub Ethernet Hub
" A" 1E Vital Bus "B" 1E Vital Bus Main "A" SPDS Display "B" SPDS Display Control
" A" 1E Vital Bus "B" 1E Vital Bus Board SPDS TSAT Configuration
.-~... -. _
P i
5 PAM Instrumenation 3.3.17 Table 3.3.171 (page 1 of 1)
Post Accident Mo71toring Instrumentation t
CONDITIONS REFERENCED FROM FUNCTION REQUIRED CHANNELS REQUIRED ACTION D.1 1.
Wide Range Neutron Flux 2
E 2.
RCS Hot Leg Tenperature 2
E 3.
RCS Pressure (Wide Range) 2 E
4 Reactor Coolant Inventory 2
F t
I 5.
Borated Water Storage Tank Level 2
E 6.
High Pressure injection Flow 2 per injection line E
7.
Contairvnent Stmp Water Levet (Flood Level) 2 E
I 8.
Containment Pressure (Expected Post-Accident 2
E Range) 9.
Containment Pressure (Wide Range) 2 E
10. Containment Isolation Valve Position 2 per penetration (s)(b)
E l
- 11. Containment Area Radiation (High Range) 2 F
- 12. Contairvnent Hydrogen Concentration 2
E
- 13. Pressurizer Lr il 2
E 14 Steam Genera r Water Level (Start up Range) 2 per OTSG E
[
Steam Gener..or Water Level (Operating Range) 2 per OTSG E
15.
e
- 16. Steam Gens,for Pressure 2 p r OTSG E
l
]
- 17. Emergency Feedwater Tank Level 2
E
- 18. Core Exit Teaperature (Backup) 3 per core quadrant E
g
l
- 20. Low Pressure injection Flow 2
E
- 21. Degrees of $dsooting 2
E (a) only one position indication is required for penetrations with one Control Room indicator.
(b) Not required for isolation valves whose associated penetration is isolated by at least one closed and deactivated automatic valve, closed manual valve, blind flange, or check valve with flow through the valve secured.
r 1
Crystal River Unit 3 3.3-41 Amendment No.
l
1 PAM Instrumentation B 3.3.17 BASES LC0 The following list is a discussion of the specified (continued) instrument functions listed in Table 3.3.17-1.
1 1.
Wide Ranae Neutron Flux Two wide-range neutron flux moritors are provided for post-accident reactivity monitoring over the entire i
range of expected conditions.
Each monitor provides indication over the range of 10'8 to 100% log rated
}
power covering the source, intermediate, and power ranges.
Each monitor utilizes a fission chamber neutron detector to provide redundant main control board indication. A single channel provides rocorded information in the control room.
The control room indication of neutron flux is considered one of the 1
primary indications used by the operator following an accident.
Following an event the neutron flux is monitored for reactivity control. The operator i
ensures that the reactor trips as necessary and that I
emergency boration is initiated if required.
Since l
the operator relies upon this indication in order to take specified manual action, the variable is included l
i in this LCO. Therefore, the LC0 deals specifically with this portion of the string.
2.
Reactor Coolant System (RCS) Hot Lea Temperature iwo wide range resistance temperature detectors (RTD's), one per loop, provide indication of reactor coolant system hot leg temperature (T ) over the range of 120' to 920*F. Each T measuremenf provides an inputtoacontrolroomiYidicator. Channel B is also recorded in the control room.
Since the operator relies on the control room indication following an accident, the LCO deals specifically with this portion of the string.
T, is a Type A variable on which the operator bases manual actions required for event mitigation for which no automatic controls are provided.
Following a steam l generator tube rupture, the affected steam generator is to be isolated only after T, falls below the saturation temperature corresponding to the pressure l
(continued)
Crystal River Unit 3 8 3.3-126 Amendment No.
\\
e PAM Instrumentation B 3.3.17 BASES LC0 2.
Reactor Coolant System (RCS) Hot Leo Temperature (continued) setpoint of the main steam safety valves.
For event monitoring once the RCP's are tripped, T, is used along with the core exit temperatures and RCS cold leg 3
l temperature to measure the temperature rise across the core for verification of core cooling.
i 3.
RCS Pressure (Wide Ranae)
RCS pressure is measured by pressure transmitters with a span of 0-3000 psig. Redundant monitoring i
capability is provided by two trains of instrumentation.
Control room and remote shutdown panel indications are provided. The control room l
indications are the primary indications used by the operator during an accident. Therefore, the LCO deals specifically with this portion of the instrument string.
RCS pressure is a Type A variable because the operator uses this indication to adjust parameters such as steam generator (OTSG) level or pressure in order to monitor and maintain a controlled cooldown of the RCS following a steam generator tube rupture or small break LOCA.
In addition, HPI flow is throttled based I
(continued)
Crystal River Unit 3 B 3.3-127 Amendment No.
J i
J
l I
PAM Instrumentation B 3.3_17 I
i BASES LCO 7.
Containment Sumo Water level (Flood level)
(continued) displayed in the control room on edgewise level l
indicators. Channel A and B sump flood level indication are recorded in the associated 'A' and 'B' l
EFIC Rooms.
Each instrument encompasses a range of l
0-10 feet above the sump and provides information to the operator related to gross leakage in the Reactor Building. This leakage may be indication of degradation in the reactor coolant pressure boundary (RCPB) which would require further investigation and action.
These instruments are not assumed to provide information required by the operator to take a mitigation action specified in the accident analysis.
l l
As such, they are not Type A variables. However, the monitors are deemed risk significant (Category 1) and are included within the LC0 based upon this consideration.
l 8,9 Containment Pressuie (Expected Post-Accident and Wide Ranael The containment pressure variable is monitored by two l
ranges of pressure indication.
Expected post-accident l
range (-10 to 70 psig) and wide range (0 to 200 psig) pressure indication each provide two channels of l
pressure indication.
Channel A and B wide range l
containment pressure are recorded in the associated l
'A' and 'B' EFIC Rooms. The low range is required in order to ensure instrumentation of the necessary l
accuracy is available to monitor conditions in the RB l
during DBAs. The wide range instrument was required by Regulatory Guide 1.97 to be capable of monitoring pressures over the range of atmospheric to three times containment design pressure (approximately 165 psig).
l Thus, it was intended to monitor the RB in the event l
of an accident not bounded by the plant safety I
analysis (i.e., a Severe Accident).
l l
These instruments are not assumed to provide l
information required by the operator to take a mitigation action specified in the accident analysis.
(continued)
Crystal River Unit 3 B 3.3-131 Amendment No.
PAM Instrumentation B 3.3.17 3
BASES LC0
- 18. Core Exit Temperature (Backuo)
(continued) following a steam generator tube rupture or small break LOCA.
Operator actions to maintain a controlled cooldown, such as adjusting OTSG level or pressure, would be prompted by this indication.
l
- 19. Emeraency Feedwater Flow EFW Flow instrumentation is provided to monitor operation of decay heat removal via the OTSGs.
The EFW injection flow to each 0TSG (2 channels per OTSG, one associated with each EFW injection line) is determined from a differential pressurc measurement calibrated to a span of 0 gpm to 1000 gpm.
Each differential pressure transmitter provides an input to a control room indicator and the plant computer.
EFW Flow is used by the operator to determine the need to throttle flow during accident or transient conditions to prevent the EFW pumps from operating in runout conditions or from causing excessive RCS cooldown rates when low decay heat levels are present.
EFW Flow is also used by the operator to verify that the EFW System is delivering the correct flow to each OTSG. However, the primary indication of this function is provided by OTSG level.
These instruments are not assumed to provide information required by the operator to take a mitigation action specified in the safety analysis.
As such, they are not Type A variables. However, the monitors are deemed risk significant (Category 1) and are included within the LC0 based upon this consideration.
- 20. Low Pressure in.iection Flow Iow pressure injection flow instrumentatior, is provided to monitor flow to the RCS following a large break LOCA.
It is also used to monitor LPI flow during piggy back operation following a small break LOCA. The low pressure injection flow to the reactor (2 channels, one associated with each LPI injection (continued)
Crystal River Unit 3 8 3.3-138 Amendment No.
I
-. = - -... - - - -..
PAM Instrumentation B 3.3.17 4
BASES LC0
- 20. Low Pressure in.iection Flow (continued) line) is determined from a differential pressure measurement calibrated to a span of 0 gpm to 5000 gpm.
The LPI flow indication is used by the operator to throttle the flow to s 2000 gpm prior to switching the pump suction from the BWST to the RB sump. This i
assures adequate net positive suction head (NPSH) is maintained to the pump.
The indication is also used to verify LPI flow to the reactor as a prerequisite to termination of HPI flow.
Since low pressure injection flow is a Type A variable on which the operator bases manual actions required for event mitigation for which no automatic controls are provided, it has been included in this LCO.
21 pearees of Subcoolina Two channels of subcooling margin with inputs from RCS hot leg temperature (Ts), core exit temperature, and RCS pressure are provided.
Multiple core exit temperatures are auctioneered with only the highest
' temperature being input to the monitor. -These two channels of subcooling margin are backed up by either of two indications of subcooling margin based on similar inputs through the Safety Parameter Display System (SPDS). At least one SPDS channel must be available to provide this backup. The T, inputs to the subcooling margin monitors and SPDS operate over a i
range of 150 to 920'F. The core exit temperature inputs operate over a range of 150 to 2000*F and 150 to 2500*F for the subccoling margin monitors and SPDS, respectively.
RCS pressure inputs operate over a range of 200 to 2500 psig.
The subcooling margin monitors are used to verify the existence of, or to take actions to ensure the restoration of subcooling margin. Specifically, a
)
loss of adequate subcooling margin during a LOCA j
requires the operator to trip the reactor coolant pumps (RCP's), to ensure high or low pressure injection, and raise the steam generator levels to the inadequate core cooling level.
Once subcooling margin is restored, the operator is instructed to restart at (continued)
Crystal River Unit 3 B 3.3-138a Amendment No.
PAM Instrumentation B 3.3.17 BASES LCO
- 21. Dearees of Subcoolina (continued) least one RCP and throttle injection flow to maintain a specified degree of subcooling.
Since degrees of subcooling is a Type A variable on which the operator bases manual actions required for event mitigation for which no automatic controls are provided, it has been included in this LCO.
t (continued)
Crystal River Unit 3 8 3.3-138b Amendment No.
l