ML20135H313
| ML20135H313 | |
| Person / Time | |
|---|---|
| Site: | Quad Cities  |
| Issue date: | 05/14/2020 |
| From: | Christopher Hunter NRC/RES/DRA/PRB |
| To: | |
| Littlejohn J (301) 415-0428 | |
| References | |
| LER 1992-002-00, LER 1992-004-00 | |
| Download: ML20135H313 (9) | |
Text
B-40 B.8 LER Number 254/92-004 and 254/92-002 Event
Description:
Reactor Trip With HPCI and One Safety Relief Valve Unavailable Date of Event:
February 7, 1992 Plant:
Quad Cities 1 B.8.1 Summary Quad Cities 1 was at 100% power when a spurious Group 1 isolation signal resulted in main steam isolation valve (MSIV) closure and a reactor trip. One. safety-relief valve (SRV) failed to open for pressure control. Feedwater (FW) was manually isolated and reactor core isolation cooling (RCIC) was used for makeup.
High-pressure coolant injection (HPCI) was out of service for maintenance and unavailable during the event. The conditional probability of subsequent core damage estimated for the event is 6.9 x 101. The relative significance of the event, compared to other postulated events at Quad Cities 1, is shown in Fig. B.9.
ILER 254/9-004 & -002 1E-7 1E-6 Td w c precursor cutoff...
1E-5 1E-3 1E-2 360 h EP 360 h HPCI LOOP
+RCIC Fig. B.9. Relative event significance of LER 254/92-004 and -002 compared with other potential events at Qaud Cities 1.
B.8.2 Event Description With the plant at 100% power on February 7, 1992, a spurious signal in the main steam line high flow circuitry resulted in the generation of a Group 1 isolation signal which closed the MSIVs. The reactor feed pumps did not auto-trip as expected at +48 inches, so FW was isolated by closing valves in the A LER NO: 254/92-004 and -002
B-41 feedwater line and manually tripping the B feedwater pump.
The investigation following the event indicated that the failure-to-isolate was caused by calibration errors, and that FW would have isolated had reactor vessel (RV) level continued to increase. Level and pressure were controlled by manually initiating RCIC and manually opening the B safety-relief valve. Following the initial use of the B valve, an attempt was made to use the C valve; however, this valve failed tb open.
On the day preceding ihis event (February 6, 1992, 10CFR50.72 Report No. 22754), while testing the remote HPCI trip function, HPCI stop valve H01-2317 had failed in the open position. HPCI had been declared inoperable, the stop valve had been isolated, and was disassembled at the time of the reactor trip (LER 254/92-002).
B.8.3 Additional Event-Related Information In addition to HPCI and RCIC, Quad Cities can utilize a Safe Shutdown Makeup Pump (SSMP) to provide high pressure makeup in the event of a loss of feedwater (FW). The pump is motor driven and is capable of supplying 400 gpm at essentially all reactor pressures. The pump and associated valves can be operated from the control room. Utilization of the SSMP requires opening a test return valve, starting the pump, opening the injection valve, and closing the test return valve. The SSMP would be used if both HPCI and RCIC were to fail.
Four electromatic and one Target Rock relief valve are available for depressurization at Quad Cities 1.
The test history for these valves is shown in Table B.6. Based on maintenance demands, and assuming for the purposes of this analysis that the results for the five valves can be grouped, a failure-to-open probability of 0.056 and a failure-to-close probability of 0.013 is estimated.
Table B.6. Quad Cities I Safety Relief Valve Demand History for LER 254/92-004 Valve nl~tr TAyMv A
A F
020073 Initial Startup s
s a
a s
080073 Routine s
a s
s s
020074 Routine s
s s
s s
070074 Poat Maint a
8 s
s s
010075 Routine s
a 3
a s
070075 Routine a
a a
a s
010376 Routine a
s a
s s
050076 Post Maint a
s s
s 110776 Post Maint s
a 032077 Routine a
a fto s
s 051077 Post Maint a
a a
s a
102977 Routine a
as a
a 111677 Scram fto 111677(?)
Post Maint a
LER NO: 254/92-004 and -002
B-42 Table B.6. Ouad Cities 1 Safety Relief Valve Demand History for LER 254/92-004 Valve flntp2 Ay-e A
D 020578 021378 042478 042678 102678 022779 051179 091479 092079 122079 051180 051180(?)
083180 083 180(?)
122080 030381 052281 052581 112081 052882 122282 031183 031583 092283 030584 081784 021685 091385 010786 040586 111686 030287 122387 122887 060088 120088 041789 Routine(?)
Post Maint Routine(?)
Post Maint Routine Post Maint Routine Routine(?)
Post Maint Routine(?)
Routine Post Maint Post Maint Post Maint Post Maint Routine Routine Post Maint Routine Routine Post Maint Routine Routine Post Maint Post Maint Routine Post Maint HPC I mop Routine Routine 0
8 9fib S
S s
S s
8 s
SI 1 S
fto 8
S S
8 S
8 S
8 S
S S
S s
Re 9
fto S
8 ftc 8
S S
S S
S S
S S
S S
S S
S S
S S
S S
S 8
S S
S S
S fto S
S 8
8 S8 S
S S
S S
S S
S fto S
S 8
S ftc LER NO: 254/92-004 and -002
B-43 Table B.6. Quad Cities 1 Safety Relief Valve Demand History for LER 254/92-004 Valve 041889 Post Maint a
s s
090989
?s s
s a
031390 Post Maint s
a a
s s
081190
?
s 0
fto s
s 081790 Post Maint a
042691 Post Maint a
a s
s s
102791 Routine s
fto a
a' 112491 Post Maint s
s 020792 Scram a
fto 021992 Post Maint 9
s a
s s
Non post-maint fto 0
3 4
0 2
Non post-maint ftc 0
1 0
1 0
Non post-maint demands 32 34 32 31 31 p(fto) = 9/160 = 0.056 P(fe- =- 9/lfi = 0 013 s: successful operation fto: failed to open ftc: failed to close
- 1.
Taking credit for a stuck-open relief valve for ADS would be optimistic for situations in which the valve is partially open.
- 2.
Only months and years were provided by the utility for dates indicated as MMOOYY.
Based on the Quad Cities final safety analysis report (FSAR), operability of three of the five safety relief valves is required for automatic depressurization system (ADS) success. In the event of a stuck-open relief valve, two of the remaining four valves must operate. Thermal-hydraulic analyses performed in support of the Individual Plant Examination (IPE) indicate that RCIC or the SSMP, in addition to HPCI and FW, can provide sufficient makeup to prevent core damage in the event of a single stuck-open relief valve (the potential use of RCIC for this function has been confirmed at other plants).
B.8.4 Modeling Assumptions The event has been modeled as a reactor trip with MSIV closure (loss of power conversion systems
[PCSI). Because of the way that feedwater was isolated, it was assumed to be nominally available (the LER NO: 254/92-004 and -002
B-44 failure probability for FW was not modified in the analysis). HPCI was modeled as unavailable and nonrecoverable.
The probability of a stuck-open relief valve was estimated to be 0.013. At Quad Cities, normal practice appears to involve the manual opening of one relief valve to control pressure following a scram.
Therefore, only one valve could fail to close during most transients.
The failure probability for ADS was estimated based on the single relief valve failure-to-open probability (0.056) discussed above and the common cause #-factors listed in NUREG/CR-4550, Analysis of Core Damage Frequency: Internal Events Methodology, Vol. 1, Rev. 1, January 1990, pp 6-13 and 6-14.
These #-factors are 0.22 (two relief valves fail to open), 0.15 (three valves), and 0.12 (four valves). The three-out-of-five success criteria described above was utilized for ADS. This criteria is consistent with that utilized in the NUREG 1150 ananlysis of Peach Bottom (NUREG/CR-4550, Analysis of Core Damage Frequency: Peach Bottom, Unit 2, Internal Events, Vol. 4, Rev. 1, August 1989).
For sequences in which three of five valves must operate for success (three of five valves must fail to fail ADS), the ADS failure probability is estimated as p(ADS) = p(independent failures) + p(dependent failures) + p(incorrect operator actions associated with depressurization) = C(5,3) x P3 + P0 3 +
p(opr) - 10 x (0.056)Y + (0.056) x 0.15 + 0.01 - 0.020.
For sequences in which two of four valves must open (sequences involving a stuck open relief valve, three of four valves must fail in order to fail ADS), p(ADS) - C(4,3) x p1,3 + p10 3 + p(opr) 4 x (0.056)3 + 0.056 x 0.15 + 0.01 - 0.019.
For this event, the C relief valve failed to open. The ADS failure probability is estimated to be p(ADS I 3 valves required and one failed) - C(4,2) x P12 + P# 2 + p(opr) = 0.041, and p(ADS 1 2 valves required and one failed) - C(4,3) X p13 + P*1#3 + p(opr) = 0.019.
The calculations were performed using a branch probability for ADS of 0.041.
Probabilities for sequences involving a stuck-open relief valve and ADS challenge were modified to reflect an ADS failure probability of 0.019.
The SSMP was considered the primary backup for HPCI and RCIC in the analysis. Since the pump can be operated from the control room, it was assumed that no effort would be made to recover RCIC before using the SSMP (HPCI was unavailable during the event). Two motor-operated valves plus the pump itself must be remote-manually operated for SSMP success. A failure probability of 0.04 was estimated, based on the nominal failure probabilities used in the ASP program (0.01 for pumps and motor-operated valves) and an assumed operator error probability of 0.01. This operator error probability is typically used for failure to utilize the CRD pumps for reactor pressure vessel makeup following HPCI and RCIC failure (see Appendix A, Sect. A.3.2, BWR Nonspecific Reactor Trip, and Table A. 14). At Quad Cities, however, the operators are directed to use the CRD pumps only if HPCI, RCIC and the SSMP all fail.
The probability assumed in the analysis for failure to use the CRD system following failure of HPCI, RCIC and the SSMP was 0.12 (see Appendix A, Sect. A. 1).
LER NO: 254/92-004 and -002
B-45 To' address the potential use of RCIC or the SSMPto provide core cooling in the event of a'single stuck-open relief valve, the conditional probabilities for sequences involving a stuck-open relief valve with FW and HPCI failure (sequences 23 - 28) were muliplied by p(2 or more RVs open I one RV open) + p(RCIC)
- P(SSMP).
Since only one RV is manually opened at Quad Cities for most transients, p(2 or more RVs open I one RV open) -
- 0.
Sequences with successful relief valve closure and FW, HPCI and RCIC 'failure (sequences 14 - 20 and 32 - 38) were similarly modified to include failure of the SSMP by multiplying their failure probabilities by p(SSMP).
Modifications to the sequence conditional probabilities indicated on the Conditional Core Damage Probability Calculation sheets to reflect the above considerations follow:
Sequence p(RCIC) p(SSMP) p(ADS) 14 - 20 included 0.04 23 - 28 0.042 0.04 0.019 32 - 38 included 0.04 For the dominant sequences shown on the calculation sheets, the above modifications result in 'the following revised conditional probabilities:
calculation sheet revised probability probability sequence 28 5.2 x 10.
4.1 x 10.8 sequence 20 2.1 x 10.5 8.4 x 10C sequence 11 4.9 x 10-4.9 x 10I The overall conditional probability estimated for the event is 6.9 X 10-.
B.8.5 Analysis Results The estimated conditional probability calculated for this event is 6.9 x 10.
The dominant sequence associated with the event, shown on the event tree in Fig. B. 10, involves failure of long-term core cooling following successful scram and failure of continued PCS operation, SRV challenge and successful reseat, and successful FW. Note that the core damage probabilities shown on the calculation sheets have been revised as described above.
LER NO: 254/92-004 and -002
B-46 Fig. B.10.
Dominant core damage sequence for LER 254/92-004.
LER NO: 254/92-004 and -002
B-47 LER NO: 254/92-004 and -002
B-48 LER NO: 254/92-004 and -002