Text

Amend 136 to License NPF-49 Relocating Applicable Requirements of Spec 3.6.3 for MSIVs to Spec 3.7.1.5, Main Steam Line Isolation Valves
	ML20137S631
Person / Time
Site:	Millstone
Issue date:	04/10/1997
From:	Mckee P; NRC (Affiliation Not Assigned)
To:	;
Shared Package
ML20137S637	List: ML20137S631; ML20137S640;
References
	NUDOCS 9704150200
	Download: ML20137S631 (31)
	v • d • e

Oce:oq)

UNITED STATES p*

?

g j

NUCLEAR REGULATORY COMMISSION

%*****/p WA$rifNGTON, D.C. 20555 4 001

.p NORTHEAST NUCLEAR ENERGY COMPANY. ET AL.

DOCKET NO. 50-423 MILLSTONE NUCLEAR POWER STATION. UNIT NO. 3 AMENDMENT TO FACILITY OPERATING LICENSE Amendment No. 136 License No. NPF-49 1.

The Nuclear Regulatory Comission (the Comission) has found that:

A.

The applications for amendment by Northeast Nuclear Energy Company, et al. (the licensee) dated June 20, 1995, as supplemented August 30, 1995, and January 17, 1996, comply with the standards and requirements of the Atomic Energy Act of 1954, as amended (the Act), and the Commission's rules and regulations set forth in 10 CFR Chapter I; B.

The facility will operate in conformity with the applications, the provisions of the Act, and the rules and regulations of the Commission; C.

There is reasonable assurance (i) that the activities authorized by this amendment can be' conducted without endangering the health and safety of the public, and (ii) that such activities will be conducted in compliance with the Commission's regulations; D.

The issuance of this amendment will not be inimical to the common defense and security or to the health and safety of the public; and E.

The issuance of this amendment is in accordance with 10 CFR Part 51 of the Commission's regulations and all applicable requirements have been satisfied.

i i

I I

l 1

9704150200 970410 7

PDR ADOCK 05000423 P

ppa

4 r :

2.

Accordingly, the license is amended by changes to' the Technical

Specifications and License Condition 2.C.(4) as indicated in the attachment to this license amendment, and paragraphs 2.C.(2) and 2.C.(4) of Facility Operating License No. NPF-49 are hereby amended to read as follows:

(2)

Technical' Soecifications i

4 The Technical Specifications contained in Appendix A, as revised through Amendment No.136, and the Environmental Protection Plan contained in Appendix B, both of which are attached hereto are hereby incorporated in the license. The licensee shall operate the facility in accordance with the Technical Specifications and the Environmental Protection Plan.

(4)

Deleted i

3.

This license amendment is effective as of the date of its issuance, to

~

be implemented within 60 days of issuance.

FOR THE NUCLEAR REGULATORY COMMISSION l

j o

Phillip F. 'NcKee Deputy Director for Licensing j:

Special Projects Office l

Office of Nuclear Reactor Regulation

^

Attachments: 1. Changes to the Technical Specifications

2. Change to License Condition Date of Issuance: April 10, 1997 4

l

-a-

-~

ATTACHMENT TO LICENSE AMENDMENT NO. 136 j

FACILITY OPERATING LICENSE NO. NPF-49 DOCKET NO. 50-423 1

Replace the following pages of the Appendix A, Technical Specifications, with the attached pages. The revised pages are identified by amendment number and contain vertical lines indicating the areas of change.

Remove lastr_t xiv xiv xv xv 3/4 6-15 3/4 6-15 3/4 7-9 3/4 7-9 B 3/4 7-3 B 3/4 7-3 B 3/4 7-4 B 3/4 7-4 B 3/4 7-5 B 3/4 7-5 B 3/4 7-6 B 3/4 7-6 B 3/4 7-7 B 3/4 7-7 B 3/4 7-8 B 3/4 7-8 B 3/4 7-9 B 3/4 7-9 l

B 3/4 7-10 i

B 3/4 7-11 B 3/4 7-12 B 3/4 7-13 B 3/4 7-14 1

B 3/4 7-15 B 3/4 7-16 B 3/4 7-17 B 3/4 7-18 B 3/4 7-19 B 3/4 7-20 B 3/4 7-21 B 3/4 7-22 B 3/4 7-23 B 3/4 7-24 B 3/4 7-25 Replace the following page of Operating License No. NPF-49, with the attached page.

Remove Insert 4

3 3

i i

S BASES SECTION f%(if TABLE B 3/4.4-1 REACTOR VESSEL FRACTURE TOUGHNESS PROPERTIES

.. B 3/4 4-9 FIGURE B 3/4.4 FAST NEUTRON FLUENCE (E>1MeV) AS A FUNCTION OF FULL POWER SERVICE LIFE................. B 3/4 4-10 3/4.4.10 STRUCTURAL INTEGRITY.................. B 3/4 4-15 3/4.4.11 REACTOR COOLANT SYSTEM VENTS.............. B 3/4 4-15 i

3/45 EMERGENCY CORE COOLING SYSTEMS 3/4.5.1 ACCUMULATORS

...................... B 3/4 5-1 3/4.5.2 and 3/4.5.3 ECCS SUBSYSTEMS............... B 3/4 5-1 3/4.5.4 REFUELING WATER STORAGE TANK.............. B 3/4 5-2 3/4.5.5 pH TRIS 0DIUM PHOSPHATE STORAGE BASKETS......... B 3/4 5-3 3/4.6 CONTAINMENT SYSTEMS 3/4.6.1 PRIMARY CONTAINMENT................... B 3/4 6-1 3/4.6.2 DEPRESSURIZATION AND COOLING SYSTEMS.......... B 3/4 6-2 3/4.6.3 CONTAINMENT ISOLATION VALVES.............. B 3/4 6-3 i

3/4.6.4 COMBUSTIBLE GAS CONTROL................. B 3/4 6-3 3/4.6.5 SUBATMOSPHERIC PRESSURE CONTROL SYSTEM......... B 3/4 6-3b 3/4.6.6 SECONDARY CONTAINMENT.................. B 3/4 6-4 3/4.7 PLANT SYSTEMS 3/4.7.1 TURBINE CYCLE...................... B 3/4 7-1 3/4.7.2 STEAM GENERATOR PRESSURE / TEMPERATURE LIMITATION..... B 3/4 7-7 3/4.7.3 REACTOR PLANT COMPONENT COOLING WATER SYSTEM...... B 3/4 7-7 3/4.7.4 SERVICE WATER SYSTEM.................. B 3/4 7-7 i

3/4.7.5 ULTIMATE HEAT SINK................... B 3/4 7-8 3/4.7.6 FLOOD PROTECTION.................... B 3/4 7-10 3/4.7.7 CONTROL ROOM EMERGENCY VENTILATION SYSTEM........ B 3/4 7-10 3/4.7.8 CONTROL ROOM ENVELOPE PRESSURIZATION SYSTEM....... B 3/4 7-17 3/4.7.9 AUXILIARY BUILDING FILTER SYSTEM............ B 3/4 7-23 3/4.7.10 SNUBBERS........................ B 3/4 7-23 MILLSTONE - UNIT 3 xiv Amendment No. JJ, 77, JJJ, JJJ,136 0510

IEEEK BASES 1

4 l

4:

~

SECTION PAK j

' 3/4.7.11 SEALED SOURCE-CONTAMINATION

........ B 3/4 7-25 l' i

3/4.7.12 DELETED o

DELETED 3/4.7.13, b

3/4.'7.14 AREA TEMPERATURE MONITORING,.............. B 3/4 7-2'5. l I

3/4.8 ELECTRICAL POWER SYSTEMS 3/4.8.1, 3/4.8.2, and 3/4.8.3 A.C. SOURCES, D.C. SOURCES, AND ONSITE POWER DISTRIBUTION

............. B 3/4 8-1 3/4.8.4, ELECTRICAL EQUIPMENT PROTECTIVE DEVICES.........

B 3/4 8-3 3

3/4,9 REFUELING OPERATIONS 3/4.9.1 BORON CONCENTRAT10N...................

B 3/4 9-1 i

3/4.9.2 INSTRUMENTATION..................... B 3/4 9-1 3/4.9.3-DECAY TIME B 3/4 9-1 l

. 3/4.9.4 CONTAINMENT BUILDING PENETRATIONS............

B 3/4 9-1 3/4.9.5 C0fetDNICATIONS B 3/4 9-1 I

3/4.9.6 REFUELING MACHINE....................

B 3/4 9-2 l

3/4.9.7 CRANE TRAVEL - SPENT FUEL STORAGE AREAS.........

B 3/4 9-2 3/4.9.8 RESIDUAL HEAT REMOVAL AND COOLANT CIRCULATION......

B 3/4 9-2 3/4.9.9 CONTAINMENT PURGE AND EXHAUST ISOLATION SYSTEM

.B 3/4 9-7 3/4.9.10 and 3/4.9.11 WATER LEVEL - REACTOR VESSEL AND I

STORAGE POOL B 3/4 9-8 3/4.9.12 FUEL BUILDING EXHAUST FILTER SYSTEM...........

B 3/4 9-8 4

3/4.9.13 SPENT FUEL POOL - REACTIVITY B 3/4 9-8 j

l 3/4.9.14 SPENT FUEL POOL - STORAGE PATTERN............

B 3/4 9-8 3/4.10 SPECIAL TEST EXCEPTIONS i

3/4.10.1 SHUTDOWN MARGIN..................... B 3/4 10-1 3/4.10.2 GROUP HEIGHT, INSERTION, AND POWER DISTRIBUTION LIMITS

. B 3/4 10-1 i

3/4.10.3 PHYSICS TESTS...................... B 3/4 10-1

)

3/4.10.4 REACTOR COOLANT LOOPS.................. B 3/4 10-1 3/4.'10.5 POSITION INDICATION SYSTEM - SHUTDOWN.......... B 3/4 10-1 t

l 1

NILLSTONE'- UNIT 3 xy Amendment No. pp, pp, Jpp, 177. JJp, 136

- este.-

n

)

- - - a

CONTAllBIENT SYSTEMS

(

3/4.6.3 CONTAllBIENT IS0LATION VALVES i*

l LIMITING ColWITION FOR OPERATION 3.6.3 The containment isolation valves shall be OPERABLE

with isolation times l

. lass than or equal to the required isolation times.

APPLICABILITY: NODES I, 2, 3, and'4.

AfJ.lGN:

j With one or more of the isolation valve (s) inoperable, maintain at least one isolation valve OPERABLE in each affected penetration that is open and:

a.

Restore the inoperable valve (s) to OPERABLE status within 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months , or i

b.

Isolate each affected penetration within 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months by use of at least one deactivated automatic valve secured in the isolation position, J'

or 3

c.

Isolate each affected penetration within 4 hours4.62963e-5 days 0.00111 hours 6.613757e-6 weeks 1.522e-6 months by use of at least j

one closed manual valve or blind flange; or i

4 d.

Be in at least H0T STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD i

SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months .

SURVEILLANCE REQUIREMENTS

{

4.6.3.1 Each isolation valve shall be demonstrated OPERABLE prior to returning the valve to service after maintenance, repair, or replacement work is performed on the valve or its associated actuator, control, or power circuit by performance of a cycling test and verification of isolation time.

4.6.3.2 Each isolation valve shall be demonstrated OPERABLE during the COLD SHUTDOWN or REFUELING MODE at least once per 18 months by:

a.

Verifying that on a Phase 'A' Isolation test signal, each Phase "A" l

1 solation valve actuates to its isolation position, b.

Verifying that on a Phase "B" Isolation test signal, each Phase "B" isolation valve actuates to its isolation position, and c.

Verifying that on a Containment High Radiation test signal, each purge supply and exhaust isolation valve actuates to its isolation position.

1 4.6.3.3 The isolation time of each power-operated or automatic valve shall be determined to be within its limit when tested pursuant to Specification 4.0.5.

The provisions of this Specification are not applicable for main steam line isolation valves.

However, provisions of Specification 3.7.1.5 are applicable for main steam i

line isolation valves.

NILLSTONE - UNIT 3 3/4 6-15 Amendment No. JJ, J7, 77,

=

77, 136

1 i

PLANT SYSTEMS MAIN STEAN LINE ]$0LATION VALVES 4

l LIMITING COM ITION FOR OPERATION 3.7.1.5 Each main steam line isolation valve (MSIV) shall be OPERA 8LE.

APPLICABILITY:

MODE 1 J

l l

MODES 2, 3, and 4, except when all MSIVs are closed and deactivated.

ACTION:

MODE 1:

With one MSIV inoperable, POWER OPERATION may continue provided the inoperable valve is restored to OPERABLE status within 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months ; otherwise q

be in MODE 2 within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months i

4 MODES 2, 3, and 4:

With one or more MSIVs inoperable, subsequent operation in MODE 2, or 3, or 4 may proceed provided the inoperable isolation valve (s) are closed in 3

8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months and verified closed once per 7 days. Otherwise, be in HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months . Separate condition entry is allowed for each MSIV.

SURVEILLANCE REQUIRDIENTS i

4.7.1.5.1 Each MSIV shall be demonstrated OPERABLE

by verifying full closure within 10 seconds on an actual or simulated actuation signal in MODES 1, 2, and l 3 when tested pursuant to Specification 4.0.5.

The provisions of Specification 4.0.4 are not applicable for entry into MODE 3.

4.7.1.5.2 Each MSIV shall be demonstrated OPERABLE by verifying full closure within 120 seconds on an actual or simulated actuation signal in MODE 4 when tested pursuant to Specification 4.0.5.

The provisions of Specification 4.0.4 are not applicable for entry into MODE 4.

~

i 4

i

If the closure time of the MSIV is less than 10 seconds when verified in accordance with Specification 4.7.1.5.2, then the operability demonstration of 1

the MSIV in MODES 1, 2, or 3 is not required per Specification 4.7.1.5.1.

MILLSTONE - UNIT 3 3/4 7-9 Amendment No. JJ, pp, JJJ 136 ones

4 PLAIK SYSTEMS 4'..

BASES 3/4.7.1.5 MAIN STEAM LINE ISOLATION VALVES BACKGROUND-I The main steam line isolation valves (MSIVs) isolate steam flow from the i

secondary side of the steam generators following a high energy line break

.(HELB). MSIV closure terminates flow from the unaffected (intact) steam generators.

One MSIV is. located in each main steam line outside, but close to, containment. The MSIVs are downstream from the main steam safety valves (MSSVs) and auxiliary feedwater (AFW) pump turbine steam supply, to prevent MSSV and AFW isolation from the steam generators by MSIV closure.

Closing the j'

MSIVs isolates each steam generator from the others, and isolates the turbine, Steam Bypass System, and other auxiliary steam s.upplies from the steam

~

generators.

l The MSIVs close on a main steam isolation signal generated by low steam generator pressure, high containment pressure, or steam line pressure negative rate (high). The MSIVs fail closed on loss of control or actuation power.

i 1

Each MSIV has an MSIV bypass valve. Although these bypass valves are normally 4

closed, they receive the same emergency closure signal as do their associated MSIVs. The MSIVs may also be actuated manually.

A description of the MSIVs is found in the FSAR, Section 10.3.

APPLICABLE SAFETY ANALYSIS i

[

The design basis of the MSIVs is established by the containment analysis for the large steam line break (SLB) inside containment, discussed in the FSAR, Section 6.2.

It is also affected by the accident analysis of the SLB events l

presented in the FSAR, Section 15.1.5.

The design precludes the blowdown of I

more than one steam generator, assuming a single active component failure j

(e.g., the failure of one MSIV to close on demand).

The limiting temperature case for the containment analysis is the SLB inside containment ~, with a loss of offsite power following turbine trip, and failure of the MSIV on the affected steam generator to close. At hot zero power, the steam generator inventory and temperature are at their maximum, maximizing the analyzed mass and energy release to the containment. Due to reverse flow and failure of the MSIV to close, the additional mass and energy in the steam headers downstream from the other MSIV contribute to the total release. With the most reactive rod cluster control assembly assumed stuck in the fully i

. withdrawn position, there is an increased possibility that the core will become critical.and return to power. The reactor is ultimately shut down by the boric acid injection delivered by the Emergency Core Cooling System.

. MILLSTONE -.18 TIT 3-8 3/4 7-3 Amendment No. JJ7,136

- om I

i

~

. - - ~ _,

PLANT SYSTEMS BASES 3/4.7.1.5 MAIN STEAM LINE ISOLATION VALVES (continued)

The accident analysis compares several different SLB events against different acceptance criteria. The large SLB outside containment upstream of the MSIVs is limiting for offsite dose, although a break in this short section of main steam header has a very low probability. The large SLB upstream of the MSIV at hot zero power is the limiting case for a post trip return to power. The analysis includes scenarios with offsite power available and with a loss of offsite power following turbine trip. With offsite power available, the reactor coolant pumps continue to circulate coolant through the steam generators, maximizing the Reactor Coolant System cooldown.

With a loss of offsite power, the response of mitigating systems is delayed.

Significant single failures considered include failure of an MSIV to close.

The MSIVs serve only a safety function and remain open during power operation.

These valves operate under the following situations:

a.

An HELB inside containment.

In order to maximize the mass and energy release into containment, the analysis assumes that the MSIV in the affected steam generator remains open.

For this accident scenario, steam is discharged into containment from all steam generators until the remaining MSIVs close. After MSIV closure, steam is discharged into containment only from the affected steam generator and from the residual steam in the main steam header downstream of the closed MSIVs in the unaffected loops. Closure of the MSIVs isolates the break-from the unaffected steam generators.

b.

A break outside of containment and upstream from the MSIVs is not a containment pressurization concern.

The uncontrolled blowdown of more than one steam generator must be prevented to limit the potential for uncontrolled RCS cooldown and positive reactivity addition.

Closure of the MSIVs isolates the break and limits the blowdown to a single steam generator, c.

A break downstream of the MSIVs will be isolated by the closure of the MSIVs.

o.

Following a steam generator tube rupture, closure of the MSIVs isolates the ruptured steam generator from the intact steam generators.

In addition to minimizing radiological releases, this enables the operator to maintain the pressure of the steam generator with the ruptured tube below the MSSV setpoints, a necessary step toward isolating the flow through the rupture.

e.

The MSIVs are also utilized during other events, such as a feedwater line break.

This event is less limiting so far as MSIV OPERABILITY is concerned.

MILLSTONE - UNIT 3 B 3/4 7-4 Amendment No. JJJ.136 0609 I

w

PLANT SYSTEMS BASE $

3/4.7.1.5 MAIN STEAM LINE ISOLATION VALVES (continued) i This LCO requires that four MSIVs in the steam lines be OPERABLE. The MSIVs are considered OPERABLE when the isolation times are within limits, and they close on an isolation actuation signal.

This LCO provides assurance that the MSIVs will perform their design safety

-function to mitigate the consequences of accidents that could result in offsite exposures comparable to the 10CFR100 limits or the NRC Staff approved licensing basis.

APPLICABILITY The MSIVs must be OPERABLE in MODE 1 and in MODES 2 and 3, except when closed and deactivated when there is significant mass and energy in the RCS and steam generators. When the MSIVs are closed, they are already performing the safety function.

In MODE 4, even though steam generator energy is low, the MSIVs must be operable in MODE 4 except when closed and deactivated.

In MODE 5 or 6, the steam generators do not contain much energy because their temperature is below the boiling point of water; therefore, the MSIVs are not required for isolation of potential high energy secondary system pipe breaks in these MODES.

ACTIONS MODE 1 With one MSIV inoperable in MODE 1, action must be taken to restore OPERABLE status within 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months .

Some repairs to the MSIV can be made with the unit hot. The 8 hour9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months Completion Time is reasonable, considering the low j

prcbability of an accident occurring during this time period that would j

require a closure of the MSIVs.

i The 8 hour9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months Completion Time is greater than that normally allowed for containment isolation valves because the MSIVs are valves that isolate a i

closed system penetrating containment. These valves differ from other containment isolation valves in that the closed system provides a passive barrier for containment isolation.

MILLSTONE - UNIT 3 B 3/4 7-5 Amendment No. 177, 136 i

osos i

~

PLANT SYSTEMS BASES 3/4.7.1.5 MAIN STEAM LINE ISOLATION VALVES (continued)

If the MSIV cannot be restored to OPERABLE status within 8 hours9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months , the plant must be placed in a MODE in which the LC0 does not apply.

To achieve this status, the unit must be placed in MODE 2 within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months . The Completion Times are reasonable, based on operating experience, to reach MODE 2 and to close the MSIVs in an orderly manner and without challenging plant systems.

MODES 2. 3. and 4 Since the MSIVs are required to be OPERABLE in MODES 2, 3, and 4, the inoperable MSIVs may either be restored to OPERABLE status or closed. When closed, the MSIVs are already in the position required by the assumptions in the safety analysis.

The 8 hour9.259259e-5 days 0.00222 hours 1.322751e-5 weeks 3.044e-6 months Completion, Time is consistent with that allowed in Mode 1.

For inoperable MSIVs that cannot be restored to OPERABLE status within the specified Completion Time, but are closed, the inoperable MSIVs must be verified on a periodic basis to be closed. This is necessary to ensure that the assumptions in the safety analysis remain valid. The 7 day verification time is reasonable, based on engineering judgment, in view of MSIV status indications available in the control room, and other administrative controls, to ensure that these valves are in the closed position.

If the MSIVs cannot be restored to OPERABLE status or are not closed within the associated Completion Time, the unit must be placed in a MODE in which the LCO does not apply.

To achieve this status, the unit must be placed at least in MODE 3 within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months , and in MODE 5 within the next 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months .

The allowed Completion Times are reasonable, based on operating experience, to reach the required unit conditions from MODE 2 conditions in an orderly manner and without challenging unit systems. The Action Statement is modified by a note indicating that st.parate condition entry is allowed for each MSIV.

SURVEILLANCE REQUIREMENTS 4.7.1.5.1 This surveillance verifies that MSIV closure time is less than 10 seconds on an actual or simulated actuation signal in MODES 1, 2, and 3 when tested pursuant to Specification 4.0.5.

A simulated signal is defined as any of the following engineered safety features actuation system instrumentation functional units per Technical Specification Table 4.3-2:

4.a.1) manual initiation, individual, 4.a.2) manual initiation, system, 4.c.

containment pressure high-2, 4.d. steam line pressure low, and 4.e. steam line pressure - negative rate high. The MSIV closure time is assumed in the accident analyses.

This surveillance is normally performed upon returning the plant to operation following a refueling outage.

The test is conducted in MODE 3 with the plant at suitable (appropriate) conditions (e.g., pressure and temperature).

This surveillance requirement is modified by an exception which allows a delay of testing until MODE 3, to establish conditions consistent with those under which the acceptance criterion was generated.

This exception MILLSTONE - UNIT 3 8 3/4 7-6 Amendment No. Jyp,136 osoe

PLANT SYSTEMS BASES SURVEILLANCE REQUIREMENTS (continued) to Specification 4.0.4 would also allow the MSIVs to be cycled to demonstrate l

post repair OPERABILITY. Action requirements shall not apply until OPERABILITY has been verified.

In addition, if the closure time of the MSIV is less than 10 seconds when verified in accordance with specification 4.7.1.5.2, the OPERABILITY demonstration of the MSIV in MODES 1, 2, or 3 is not required per Specification 4.7.1.5.1.

4.7.1.5.2 This surveillance verifies that MSIV closure time is less than i

120 seconds on an actual or simulated actuation signal in MODE 4 when tested pursuant to Specification 4.0.5.

A simulated signal is defined as any of the 4

following engineered safety features actuation system instrumentation functional units per Technical Specification Table 4.3-2: 4.a.I) manual initiation, individual, 4.a.2) manual initiation, system, 4.c. containment pressure high-2, 4.d. steam line pressure low, and 4.e. steam line pressure -

negative rate high. This MSIV closure time is assumed in the analyses. This surveillance is normally performed upon returning the plant to operation following a refueling outage. The test is conducted in MODE 4 with the plant at suitable (appropriate) conditions (e.g., pressure and temperature). This surveillance requirement is modified by an exception which allows a delay of testing until MODE 4, to establish conditions consistent with those under which the acceptance criterion was generated. This exception to Specification 4.0.4 would also allow the MSIVs to be cycled to demonstrate post repair OPERABILITY. Action requirements shall not apply until OPERABILITY has been verified.

3/4.7.2 STEAM GENERATOR PRESSURE / TEMPERATURE LIMITATION The limitation on steam generator pressure and temperature ensures that the pressure-induced stresses in the steam generators do not exceed the maximum allowable fracture toughness stress limits. The limitations of 70*F and 200 psig are based on a steam generator RTuor of 60*F and are sufficient to prevent brittle fracture.

3/4.7.3 REACTOR PLANT COMPONENT COOLING WATER SYSTEM The OPERABILITY of the Reactor Plant Component Cooling Water System ensures that sufficient cooling capacity is available for continued operation of safety related equipment during normal and accident conditions.

The redundant cooling capacity of this system, assuming a single failure, is consistent with the assumptions used in the safety analyses.

3/4.7.4 SERVICE WATER SYSTEM The OPERABILITY of the Service Water System ensures that sufficient cooling capacity is available for continued operation of safety-related equip-ment during normal and accident conditions. The redundant cooling capacity of this system, assuming a single failure, is consistent with the assumptions used in the safety analyses.

MILLSTONE - UNIT 3 8 3/4 7-7 Amendment No. 136 osoo

...- - -....--= - -..

E M SYSTEMS

~

BASES 1

3/4.7.5 ULTIMATE HEAT SINK BACKGROUND 1

The ultimate heat sink (UHS) for Millstone Unit No. 3 is Long Island Sound.

It serves as a heat sink for both safety and nonsafety-related cooling systems.

Sensible heat is discharged to the UHS via the service water and circulating water systems.

The UHS is required to be OPERABLE and is considered OPERABLE if the' average water temperature is less than or equal to 75'F. The limitation on the UHS l

temperature ensures that cooling water at or less than the design temperature (75'F) is available to either (1) provide normal cooldown of the facility or (2) mitigate the effects of accident conditions within acceptable limits.

It is

)

based on providing a 30-day cooling water supply to safety-related equiment l

4 without exceeding its design basis temperature and is consistent with tie recosmondations of Regulatory Guide 1.27, " Ultimate Heat Sink for Nuclear

)

Plants," March 1974.

1 The Circulating Water System has six condenser inlet waterboxes, each contains a temperature measurement device. The average UHS temperature is normally obtained from the plant process computer by averaging the six Circulating Water System condenser inlet waterbox temperature measurements. Given potential condenser j

waterbox temperature instrumentation failure (s), or that a waterbox is not i

operating or a process computer failure, other methods may be used to determine i

the average UHS temperature.

For example, if one condenser waterbox instrument has failed, the average UHS temperature may be based on five condenser inlet waterbox temperature measurements.

For the purposes of determining average UHS l

temperature, if condenser waterbox inlet temperature is used, the average should be based on no less than 3 measurements.

If the process computer condenser waterbox inlet temperature average is based on less than three measurements, the average 1s automatically flagged to users as potentially in error.

Using local i

Service Water System temperature instruments (two or more) is an acceptable l

alternative for determining average UHS temperature.

L It has been concluded that using the average of multiple condenser waterbox inlet 3

temperature measurements is sufficiently representative of the UHS temperature to assure OPERABILITY of the UHS. The only exception to this conclusion is when a condenser thermal backwash evolution is being conducted.

During this evolution, there is a potential for significant intake structure temperature stratification.

Therefore, during condenser thermal backwashing evolutions, the average UHS temperature shall be monitored by temperature instruments in the service water system to assure OPERABILITY of the UHS.

APPLICABILITY 4

In MODES 1, 2, 3, AND 4, the L'HS is required to support the OPERABILITY of the equipment serviced by the UHS and required to be OPERABLE in these MODES.

i MILL 5 TONE - UNIT 3 8 3/4 7-8 Amendment No.136 f

w r-,-

3

.,m-v

.w w-

I PLANT SYSTEMS BASES j

ACTION STATEMENT When the UHS temperature is above 75'F, the Action Statement for the LCO requires that the UHS temperature be monitored for 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months , and the plant be placed in at

^

least HOT STANDBY within the next six hours and in COLD SHUTDOWN within the.

following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months in the event the UHS temperature does not drop below 75'F t

during the 12-hour monitoring period.

I The 12-hour interval is based on operating experience related to trending of the parameter variations during the applicable modes. During this period, the UHS temperature will be monitored on an increased frequency.

If the trend shows 4

improvement, and if the trend of the UHS temperature gives reasonable '

expectations that the temperature will decrease below 75'F during the 12 hour1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months monitoring period, the UHS temperature will be continued to be monitored during i

the remaining portion of the 12-hour period. However, if it becomes apparent that the UHS temperature will remain above 75'F throughout the 12-hour monitoring period, conservative action regarding compliance with the Action Statement should be taken.

4 t

An evaluation was conducted to qualify the risk significance of various Chapter 15 initiating events and earthquakes during periods of elevated UHS temperature.

It concluded that a seismic event was not credible for the time periods with elevated UHS temperature.

l

~

With respect to the service' water loads, the limiting Condition II and III i

Chapter 15 event initiators are those that add additional heat loads to the service water system. A loss of offsite power event is limiting because of the added loads due to the diesel generator and the residual heat removal heat exchanger. A steam generator tube rupture event is limiting because of the addition of the safety injection and diesel generator loads without isolation of i

the turbine plant component cooling water loads (no loss of offsite power or containment depressurization actuation signal). Although the risk significance l

of a Condition IV accident occurring during the period of elevated UHS temperature is considered to be negligibly small compared to that of Condition II and III events, a Loss of Coolant Accident with or without a LOP was also i

evaluated. These scenarios have been evaluated trith the additional consideration of a single failure. The evaluation investigated whether or not these events i

could be resolved with an elevated UHS temperature.

It was determined that.

Millstone Unit No. 3 could recover from these events, even with an elevated temperature of 77'F.

This evaluation provides the basis for the action statement requirement to place the plant in HOT STANDBY with six hours and in COLD SHUTDOWN within the next 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months , if the UHS temperature goes above 77'F during the 12-hour monitoring period.

MILLSTONE - UNIT 3 B 3/4 7-9 Amendment No.136 osoe

PL/Wff SYSTDis BASES SURVEILLANCE REQUIREMENTS For the surveillance requirements, the UHS temperature is measured at the locations described in the LC0 write-ep provided in this section.

l Surveillance Requirement 4.7.5.a verifies that the UHS is capable of providing a i

30-day cooling water supply to safety-related equipment without exceeding its design basis temperature. The 24-hour frequency is based on operating experience related to trending of the parameter variations during the applicable modes.

This surveillance requirement verifies that the average water temperature of the UHS is less than or equal to 75'F.

Surveillance Requirement 4.7.5.b requires that the UHS temperature be monitored on an increased frequency whenever the UHS temperature is greater than 70*F during the applicable modes.

The intent of this Surveillance Requirement is to increase the awareness of plant personnel regarding UHS temperature trends above 70'F. The frequency is based on operating experience related to trending of the 4

i parameter variations during the applicable modes.

3/4.7.6 FLOOD PROTECTION l

The limitation on flood protection ensures that the service water pump cubicle watertight doors will be closed before the water level reaches the j

critical elevation of 14.5 feet Mean Sea Level.

Elevation 14.5 feet MSL is the level at which external flood waters could enter the service water pump cubicle.

i 3/4.7.7 CONTROL ROOM EMERGENCY VENTILATION SYSTEM BACKGR0 LNG j

The control room emergency ventilation system provides a protected environment i

from which operators can control the unit following an uncontrolled release of radioactivity. Additionally, the system provides temperature control for the control room during normal and post-accident operations.

1 The control room emergency ventilation system is comprised of the control room emergency air filtration system and a temperature control system.

i The control room emergency air filtration system consists of two redundant systems that recirculate and filter the control room air.

Each control room emergency air filtration system consists of a moisture separator, electric heater, prefilter, upstream high efficiency particulate air (HEPA) filter, 4

charcoal adsorber, downstream HEPA filter, and fan. Additionally, ductwork, valves or dampers, and instrumentation form part of the system.

Normal Doeration A pcrtion of the control room emergency ventilation system is required to operate during normal operations to ensure the temperature of the control room is maintained at or below 95'F.

MILLSTONE - UNIT 3 8 3/4 7-10 Amendment No.136

.,v

PLANT SYSTEMS BASES

)

3/4.7.7 ' CONTROL R00M EMERcFNCY VENTILATION SYSTEM (Continued)

RACK 8ROUM (Continued) j Post Accident Operation The control room emergency ventilation system is required to operate during post-accident operations to ensure the temperature of the control room is maintained and to ensure the control room will remain habitable during and following accident conditions.

4 The following sequence of events occurs upon receipt of a control building

. isolation (CBI) signal or a signal indicating high radiation in the air supply i

- duct to the control room envelope.

1.

The control room boundary is isolated to prevent outside air from entering the control rons to prevent the operators from being exposed to the radiological conditions that may exist outside the control room. The 4

analysis for a loss of coolant accident assumes that the highest releases 4

i occur in the first hour after a loss of coolant accident, j

2.

After 60 seconds, the control room envelope pressurizes to 1/8 inch water gauge by the control room emergency pressurization system. This action provides a continuous purge of the control room envelope and prevents 1

inleakage from the outside environment. Technical Specification 3/4.7.8 provides the requirements for the control room envelope pressurization system.

3.

Control room pressurization continues for the first hour.

)

4.

After one hour, the control room emergency ventilation system will be placed in service in either the 100% recirculation mode (isolated from the outside L

environment) or filtered pressurization mode (outside air is diverted through the filters to the control room envelope to maintain a positive 1

pressure). The mode of service for the filtration will be based on the l

radiological conditions that exist outside the control room.

To run the control room emergency air filtration system in the filtered pressurization mode, the air supply line must be manually opened.

j APPLICABLE SAFETY ANALYSIS The OPERABILITY of the Control Room Emergency Ventilation System ensures that:

(1) the ambient air temperature does not exceed the allowable temperature for continuous-duty rating for the equipment and instrumentation cooled by this system, and (2) the control room will remain habitable for operations personnel during and following all credible accident conditions. The OPERABILITY of this system in conjunction with control room-design provisions is based on limiting I

the radiation exposure to personnel occupying the control room to 5 rems or less whole body, or its equivalent for the duration of the accident. This limitation is consistent'with the requirements of General Design Criterion 19 of Appendix A, j

10 CFR Part 50.

NILLSTONE - UNIT 3 B 3/4 7-11 Amendment No.136 osee

]

1

PbuffSYSTENS BASES l

i 3/4.7.7 CONTROL ROOM EMERRENCY VENTILATION SYSTEM (Continued)

LINITING C0lWITION FOR OPERATION Two independent control room emergency air filtration systems are required to be operable to ensure that at least one is available in the event the other system is disabled.

A control room emergency air filtration' system is OPERABLE when the associated:

1 a.

Fan is OPERABLE; b.

HEPA filters and charcoal adsorbers are not excessively restricting flow and are capable of performing their filtration functions; and c.

moisture separator, heater, ductwork, valves, and dampers are OPERABLE, and air circulation can be maintained.

The integrity of the control room boundary (i.e., walls, floors, ceilings, ductwork, and access doors) is covered by LIMITING CONDITION OF OPERATION (LCO) 3.7.8.

APPLICABILITY In N0 DES 1, 2, 3, 4, 5, and 6.

ACTIONS Modes 1. 2. 3. and 4 With one control room emergency air filtration system inoperable, action must be taken to restore the inoperable system to an OPERABLE status within 4

j 7 days.

In this condition, the remaining control room emergency air filtration system is adequate to perform the control room protection function. However, the overall reliability is reduced because a single failure in the OPERABLE train could result in a loss of the control room emergency air filtration system 4

function. The 7-day completion time is based on the low probability of a DBA i

occurring during this time period, and the ability of the remaining train to j

provide the required capability.

If the inoperable train cannot be restored to an OPERABLE status within 7 days, the unit must be placed in at least HOT STANDBY within the next 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and within COLD SHUTDOWN within the following 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months . These completion times are reasonable, based on operating experience, to reach the required unit conditions from full power conditions in an orderly manner and without challenging unit systems.

MILLSTONE - UNIT 3 53/47-12 Amendment No.136 once a-

~

r

l PLANT SYSTENS BASES i

3/4.7.7 CONTROL ROOM EMERGENCY VENTILATION SYSTEM (Continued)

ACTIONS (Continued)

Nodes 5 and 6 a.

With one control room emergency air filtration system inoperable, action sest be taken to restore the inoperable system to an OPERABLE status within 7 days, or to initiate and maintain operation of the remaining OPERABLE control room emergency air filtration system in the recirculation mode.

Initiating and maintaining operation of the OPERABLE train in the recirculation mode ensures:

(1) operability of the train will not be compromised by a failure of the automatic actuation logic; and (ii) active failures will be readily detected.

i b.

With both control room emergency air filtration systems inoperable, or with j

the train required by ACTION 'a' not capable of being powered by an OPERABLE emergency power source, actions must be taken to suspend all operations involving CORE ALTERATIONS or positive reactivity changes. This action places the unit in a condition that minimizes risk. This action does not preclude the movement of fuel to a safe position.

SURVEILLANCE REQUIRENENTS 4.7.7.a The control room environment should be checked periodically to ensure that the control room temperature control system is functioning properly.

Verifying i

that the control room air temperature is less than or equal to 95*F at least once per 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months is sufficient.

It is not necessary to cycle the control room i

ventilation chillers. The control room is manned during operations covered by j

the technical specifications. Typically, temperature aberrations will be readily apparent.

4.7.7.b Standby systems should be checked periodically to ensure that they function properly. As the environment and normal operating conditions on this system are not too severe, testing the trains once every 31 days on a STAGGERED TEST BASIS provides an adequate check of this system. This surveillance requirement verifies a system flow rate of 1,120 cfm i 20%. Additionally, the system is required to operate for at least 10 continuous hours with the heaters energized.

These operations are sufficient to reduce the buildup of moisture on the adsorbers and HEPA filters due to the humidity in the ambient air.

NILLSTONE - UNIT 3 8 3/4 7-13 Amendment No.136 osos

PLANT SYSTEMS i

BASES 3/4.7.7 CONTROL ROOM EMERCENCY VENTILATION SYSTEM (Continued) i SURVEILLANCERE0UIREMENTS(Continued) 4.7.7.c The performance of the control room emergency filtration systems should be I

checked periodically by verifying the HEPA filter efficiency, charcoal adsorber efficiency, minimum flow rate, and the physical properties of the activated charcoal. The frequency is at least once per REFUELING INTERVAL or (1) after any structural maintenance on the HEPA filter or charcoal adsorber housings, or (2) following painting, fire, or chemical release in any ventilation zone 1

communicating with the system.

ANSI N510-1980 will be used as a procedural guide for surveillance testing.

4.7.7.c.1 J

i This surveillance verifies that the system satisfies the in-place penetration and bypass leakage testing acceptance criterion of less than 0.05% in i

accordance with Regulatory Position C.5.a. C.5.c, and C.5.d of Regulatory Guide 1.52, Revision 2, March 1978, while operating the system at a flow rate of 1,120 cfm 1 20%. ANSI N510-1980 is used in lieu of ANSI N510-1975 referenced in the regulatory guide.

1 4.7.7.c.2 This surveillance requires that a representative carbon sample be obtained in accordance with Regulatory Position C.6.b of Regulatory Guide 1.52, l

Revision 2, March 1978 and that a laboratory analysis verify that the representative carbon sample meets the criteria of Regulatory Position C.6.a of Regulatory Guide 1.52, Revision 2, March 1978 (Ref.1) and MP3 UFSAR, Table 1.8-i 1, NRC Regulatory Guide 1.52 (Ref. 2), for a methyl iodide penetration of less than 0.175%. The laboratory analysis is required to be performed within 31 days after removal of the sample. ANSI N510-1980 is used in lieu of ANSI N510-1975 4

referenced 'in Revision 2 of Regulatory Guide 1.52.

)

i,7.7.c.3 i

l This surveillance verifies that a system flow rate of 1,120 cfm i 20%,

i during system operation when testing in accordance with ANSI N510-1980.

l 4.7.7.d

- After 720 hours0.00833 days 0.2 hours 0.00119 weeks 2.7396e-4 months of charcoal adsorber operation, a representative carbon sample must be obtained in accordance with Regulatory Position C.6 b of Regulatory Guide 1.52, Revision 2, March 1978, and a laboratory analysis must verify that the representative carbon sample meets the criteria of Regulatory

}

position C.6.a of Regulatory Guide 1.52, Revision 2, March 1978, for a methyl MILLSTONE - UNIT 3 B 3/4 7-14 Amendment No.136 4

-,--~

o m

~.... _ _ _ _ ~ _ _ -

w

~

PLANT SYSTEMS RASES 3/4.7.7 CONTROL ROOM EMERGENCY VENTILATION SYSTEM (Continued)

SURVEILLANCERE0UIREMENTS(Continued) iodide penetration of less than 0.175%.

The laboratory analysis is required to i

be performed within 31 days, after removal of the sample.

ANSI N510-1980 is used in lieu of ANSI N510-1975 referenced in Revision 2 of Regulatory Guide 1.52.

1 The maximum surveillance interval is 900 hours0.0104 days 0.25 hours 0.00149 weeks 3.4245e-4 months , per Surveillance Requirement 4.0.2.

The 720 hours0.00833 days 0.2 hours 0.00119 weeks 2.7396e-4 months of operation requirement originates from Nuclear Regulatory Guide 1.52, Table 2, Note C.

This testing ensures that the charcoal adsorbency capacity has not degraded below acceptable limits as well as providing trending data.

4.7.7.e.1 This surveillance verifies that the pressure drop across the combined HEPA filters and charcoal adsorbers banks at less than 6.75 inches water gauge when the system is operated at a flow rate of 1,120 cfm i 20%.

The frequency is at

{

1 east once per REFUELING INTERVAL.

3 l

j 4.7.7 Q i

This surveillance verifies that the system maintains the control room at a positive pressure of greater than or equal to 1/8 inch water gauge at less than or equal to a pressurization flow of 230 cfm relative to adjacent areas during system operation.

The frequency is at least once per REFUELING ' INTERVAL.

I The intent of this surveillance is to verify the ability of the control room emergency air filtration system to maintain a positive pressure while running in the filtered pressurization mode. This capability is independent from the requirements regarding the control room pressurization system contained in 4

Technical Specification 3/4.7.8.

1 MILLSTONE - UNIT 3 B 3/4 7-15 Amendment No.136 osoe 4

-m,..

,-.-.-m,o.--

c

1 P[.ANTSYSTEMS i*

BASES 3/4.7.7 CONTROL ROOM EMERGENCY VENTILATION SYSTEM (Continued)

[

SURVEILLANCE RE0UIRENENTS (Continued)

During the first hour, the control room pressurization system creates and maintains the positive pressure in the control room. This capability is verified by Surveillance Requirement 4.7.8.C, independent of Surveillance Requirement 4.7.7.e.2.

Furthermore, ACTIONS A.2 and B.1 of Limiting Condition for Operation 3.7.8 requires that an OPERABLE control room emergency air filtration system be initiated and maintained in the recirculation mode following both control room envelope pressurization systems becoming inoperable (e.g., a breech in the control room envelope). Running the control room air filtration system in the j

recirculation mode with the control room emergency pressurization inoperable would prohibit the ability to create and maintain a positive pressure in the control room envelope, because no source of air would be available to pressurize i

i the control room envelope. A CBI signal will automatically align an operating filtration system into the recirculation mode of operation due to the isolation j

of the air supply line to the filter.

After the first hour of an event with the potential for a radiological release, the control room emergency ventilation system will be placed in service i

in either the recirculation mode (isolated from the outside environment) or l

filtered pressurization mode (outside air is diverted through the filters to the control room envelope to maintain a positive pressure).

The mode of service for the control room emergency air filtration ' system will be based on the radiological conditions that exist outside the control room. Alignment to the filtered pressurization mode requires manual operator action to open the air j

supply line.

1 4.7.7.e.3 i

This surveillance verifies that the heaters can dissipate 9.4 1 1 kW when tested in accordance with ANSI N510-1980.

The frcquency is at least once per REFUELING INTERVAL.

i L

4.7.7.f i

Following the complete or partial replacement of a HEPA filter bank, the operability of the cleanup system should be confirmed. This is accomplished by verifying that the cleanup system satisfies the in-place penetration and bypass leakage testing acceptance criterion of less than 0.05% in accordance with ANSI i

N510-1980 for a D0P test aerosol while operating the system at a flow rate of 1,120 cfm i 20%.

i d

1 i

MILLSTONE - UNIT 3 8 3/4 7-16 Amendment No.136

PLAKI SYSTEMS

- BASES 3/4.7.7 CONTROL ROOM EMERGENCY VENTILATION SYSTEM (Continued)

SURVEILLANCE REQUIREMENTS (Continued) 4.7.7.o Following the complete or partial replacement of a charcoal adsorber bank, the operability of the cleanup system should be confirmed. This is accomplished by verifying that the cleanup system satisfied the in~ place penetration and bypass leakage testing acceptance criterion of less than 0.05% in accordance with ANSI N510-1980 for a halogenated hydrocarbon refrigerant test gas while operating the system at a flow of 1,120 cfm i 20%.

References:

(1) Nuclear Regulatory Guide 1.52, Revision 2 (2) NP3 UFSAR, Table 1.8-1, NRC Regulatory Guide 1.52 (3) NRC Generic Letter 91-04 3/4.7.8 CONTROL ROOM ENVELOPE PRESSURIZATION SYSTEM BACKGROUND The control room envelope pressurizatior system provides a protected environment from which operators can control the unit following an uncontrolled release of radioactivity.

The control room envelope pressurization system consists of two banks of air bottles with its associated piping, instrumentation, and controls.

Each bank is capable of providing the control room area with one-hour of air following any event with the potential for radioactive releases.

Normal Ooeration 4

During normal operations, the control room envelope pressurization system is required to be on standby.

Post Accident Operation The control room envelope pressurization system is required to operate during post-accident operations to ensure the control room will remain habitable during and following accident conditions.

The sequence of events which occurs upon receipt of a control building isolation (CBI) signal or a signal indicating high radiation in the air supply duct to the control room envelope is described in Bases Section 3/4.7.7.

MILLSTONE - UNIT 3 B 3/4 7-17 Amendment No. 136 0609

h PLANT SYSTEMS BASES 3/4.7.8 CONTROL ROOM ENVELOPE PRESSURIZATION SYSTEM (Continued)

APPLICABLE $AFETY ANALYSIS The OPERABILITY of the control room envelope pressurization system ensures that:

(1) breathable air is supplied to the control room, instrumentation rack 1

room, and computer room, and (2) a positive pressure is created and maintained within the control room envelope during control building isolation for the first hour following any event with the potential for radioactive releases.

Each system is capable of providing an adequate air supply to the control room for one hour follcuing an initiation of a control building isolation signal.

After one hour, operation of the control room emergency ventilation system would be initiated.

LIMITING CONDITION FOR OPERATION Two independent control room envelope pressurization systems are required to l

be operable to ensure that at least one is available in the event the other system is disabled.

A control room envelope pressurization system is OPERABLE when the associated:

a.

air storage bottles are OPERABLE; and b.

piping and valves are OPERABLE.

3 In addition, the integrity of the control room boundary (i.e., walls, floors, ceilings, ductwork, and access doors) must be maintained.

j APPLICABILITY In N0 DES 1, 2, 3, 4, 5, and 6.

4 ACTIONS a.

With one control room envelope pressurization system inoperable, action must be taken either:

(1) to restore the inoperable system to an OPERABLE status within 7 days, or (2) to initiate and maintain operation of an OPERABLE control room emergency air filtration system in the recirculation rse, or i

(3) to place the unit in HOT STANDBY within six hours and COLD SKoTDOWN within the next 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months and suspend all operations involving CORE ALTERATIONS or positive reactivity changes.

For ACTION 3.7.8.a.1, the remaining control room envelope pressurization system is adequate to perform the control room protection function.

However, the overall reliability is reduced because a single failure in i

MILLSTONE - UNIT 3 8 3/4 7-18 Amendment No.136 i

0508 i

PLANT SYSTEMS RASES 3/4.7.8 CONTROL ROOM ENVELOPE PRESSURIZATION SYSTEM (Continued)

ACTIONS (Continued) the OPERABLE train could result in a loss of the control room envelope pressurization system. The 7-day completion time is based on the low

, probability of a design basis accident occurring during this time period and the ability of the remaining train to provide'the required capability.

For ACTION 3.7.8.a.2, initiating and maintaining operation of an OPERABLE train of the control room emergency air filtration system in the recirculation mode ensures that (1) any inleakage, as a result of loss pressurization, will be filtered from the initiation of the event, and (ii) active failures of that train will be readily detected.

To meet the requirements of this action statement, the control room emergency air filtration system could be manually placed in either the 100% recirculation m6de or the recirculation with makeup air mode. The recirculation with makeup air mode is used to refresh the control room air supply. While in the recirculation with makeup air mode, if a CBI signal is received, the fresh air makeup would be automatically isolated and the filters aligned to the 100% recirculation mode.

4 For ACTION 3.7.8.a.3, the completion times for the unit to be placed in HOT STANDBY and COLD SHUTDOWN are reasonable. They are based on operating 4

experience, and they permit the unit to be placed in the required conditions from full power conditions in an orderly manner and without challenging unit systems.

Stud tensioning may continue in MODE 6 and a MODE change to MODE 5 is permitted with a control room envelope pressurization system inoperable (Reference 1).

)

b.

With both control room envelope pressurization systems inoperable, action must be initiated within one hour to restore one inoperable system to an 1

OPERABLE status and either (1) initiate and maintain operation of an OPERABLE control room emergency air filtration system in the recirculation mode, or (2) place the unit in HOT STANDBY within six hours and COLD SHUTDOWN within the next 30 hours3.472222e-4 days 0.00833 hours 4.960317e-5 weeks 1.1415e-5 months and suspend all operations involving CORE ALTERATIONS or positive reactivity changes.

The rationale for ACTIONS 3.7.8.b.1 and 3.7.8.b.2 are the same as those-for ACTIONS 3.7.8.a.2 and 3.7.8.a.3, respectively.

i Solely due to inoperability of both trains of the control room envelope pressurization system, the conditions and required actions assigned with LCO 3.7.7 are not required to be entered.

r 4

I NILLSTONE - UNIT 3 B 3/4 7-19 Amendment No.136 i

otos

PbufTSYSTEMS l

BASES 3/4.7.8 CONTROL ROOM ENVELOPE PRESSURIZATION SYSTEM (Continued)

ACTIONS (Continued)

ACTIONS a.2 and b.1 of Limiting Condition for Operation 3.7.8 require that an OPERABLE control room emergency filtration system be placed in the recirculation mode. Under normal plant conditions to meet this requirement, the system would be placed in service in the recirculation with makeup air.

This makeup air is used to refresh the control room envelope.

In the event of a design basis accident (including control building isolation), with the filtration system operating in the recirculation with makeup air mode, the makeup air is automatically isolated and the filtration system goes into a 100% recirculation mode. Although no positive pressure is maintained in this alignment, it ensures that unfilterable noble gases are not forced into the envelope. The recirculation mode ensures that radiciodines introduced to the envelope are continuously filtered out. After one hour, the filters could be manually placed in the pressurization mode if radiological conditions permit.

SURVEILLANCE REQUIRENENTS i

4.7.8.a This surveillance requires verification that the air bottles are properly pressurized. Verifying + hat the air bottles are pressurized to greater than or equal to 2200 psig will ensure that a control room envelope pressurization system will be capable of supplying the required flow rate. The frequency of the surveillance is at least once per 7 days.

It is based on engineering judgment and has been shown to be appropriate through operating experience.

4 4.7.8.b l

This surveillance requires verification of the correct position of ekch valve (manual, power operated, or automatic) in the control room envelope pressurization system flow path.

It helps ensure that the control room envelope pressurization system is capable of performing its intended safety function by verifying that an appropriate flow path will exist. The surveillance applies to those valves that could be mispositioned. This surveillance does not apply to valves that have been locked, sealed, or secured in position, because these positions are verified prior to locking, sealing, or securing.

The frequency of the surveillance is at least once per 31 days on a STAGGERED TEST BASIS.

It is based on engineering judgment and has been shown to be appropriate through operating experience.

NIL cho LSTONE - UNIT 3 3 3/4 7-20 Amendment No.136

l*

PLANT SYSTEMS i-sasEs t

3/4.7.8

' CONTROL ROOM ENVELOPE PRESSURIZATION SYSTEM-(Continued)

SURVEILLANCE REQUIREMENTS (Continued) 4.7.8.c 1

The performance of the control room envelope pressurization system should be checked periodically. The frequency is at least once per REFUEL TNG INTERVAL and following any major alteration of the control room envelope pressure boundary.

A major alteration is'a change to the control room envelope pressure boundary that:

(1) results in a breach greater than analyzed for acceptable pressurization And requires nonroutine work evolutions to restosc the boundary.

A nonroutine work evolution is one which makes it difficult to determine As-Found and As-Left conditions.

Examples of routine work evolution include:

(1) opening and closing a door, and (2) repairing cable and pipe penetrations because the

- repairs are conducted in accordance with procedures and are verified via inspections.

For these two exacples, there is a high level of assurance that the 4

boundary is restored to the Ap Found condition.

i This surveillance requires at least once per REFUELING INTERVAL or following a major alteration of the control room envelope pressure boundary by:

l Verifying the control room envelope is isolated in response to a Control Building Isolation Test signal, Verifying, after a 60 secono time delay following a Control Building Isolation Test signal. the control room envelope pressurizas to greater than or equal to 0.12510. h water gauge relative to outside atmosphere; and Verifying the positive pressure of Technical Specification 4.7.8.c.2 is maintained for greater than or equal to 60 minutes.

Changes in conditions outside the control room envelope cause pressure spikes which are reflected on the differential pressure indicator, 3HVC-PDI 113.

Pressure spikes or fluctuations which result in the differential pressure momentarily dropped below the 0.125 inch water gauge acceptance criteria are acceptable providing the following conditions are met:

l 1.

Differential pressure remains positive at all times.

2.

Differential pressure is only transitorily below the acceptance criteria.

3.

Differential pressure returns to a value above the acceptance criteria, MILLSTONE - UNIT 3 8 3/4 7-21 Amendment No.136 1

L.

a_L

\\

PLANT SYSTEMS BASES 3/4.7.8 CONTROL ROON ENVELOPE PRESSURIZATION SYSTEM (Continued)

SURVEILLANCE REQUIREMENTS (Continued)

The control room envelope pressurization system design basis criteria is set at 2 0.125 inch water gauge criteria to account for wind effects, thermal column effects, and barometric pressure changes.

Pressurizing the control room envelope of 0.125 inch water gauge above the initial atmospheric pressure ensures it will remain at a positive pressure-during subsequent changes.in outside conditions over the next 60 minutes. Since the surveillance requirement is verified by actual reference to outside pressure, allowances are provided for differential pressure fluctuations caused by external forces.

The 0.125 inch water gauge acceptance criteria provides the margin for these fluctuations. This meets the requirements of Regulatory Guide 1.78 and NUREG-800, Section 6.4 and is consistent with the assumptions in the Control Room Operator DBA dose calculation.

4.7.8.c.1 This surveillance verifies that the control room envelope is isolated following a control building isolation (CBI) test signal.

4.7.8.c.2 This surveillance verifies that the control room envelope pressurizes to greater than or equal to 1/8 inch water gauge, relative to the outside atmosphere, after 60 seconds following receipt of a CBI test signal.

4.7.8.c.3 This surveillance verifies that t.he positive pressure developed in accordance with Surveillance Requirement 4.7.8.c.2 is maintained for greater than or equal to 60 minutes. This capability is independent from the requirements regarding the control room emergency filtration system contained in Technical Specification 3/4.7.7. Also, following the first hour, the control room emergency ventilation system is responsible for ensuring that the control room envelope remains habitable.

References:

(1) NRC Routine Inspection Report 50-423/87-33, dated February 10, 1988.

(2) NRC Generic Letter 91-04.

i MILLSTONE - UNIT 3 E 3/4 7-22 Amendment No. 136 osoe l

PLANT SYSTEMS

.Ases 3/4.7.9 AUXILIARY BUILDING FILTER SYSTEM The OPERABILITY of the Auxiliary Building Filter System ensures that radioactive materials leaking from the equipment within the charging pump, component cooling water pump and heat exchanger areas following a LOCA are filtered prior to reaching the environment. The charging pump / reactor plant component cooling water pump ventilation system must be operational to ensure operability of the auxiliary building filter system and the supplementary leak i

I collection and release system. Operation of the system with the heaters operating for at least 10 continuous hours in a 31-day period is sufficient to i

reduce the buildup of moisture on the adsorbers and HEPA filters. The. operation a

of this system and the resultant effect on offsite dosage calculations was i

assumed in the safety analyses. ANSI N510-1980 will be used as a procedural guide for surveillance testing.

4 3/4.7.10 SNUBBERS i

All snubbers are required OPERABLE to ensure that the structural integrity of the Reactor Coolant System and all other safety-related systems is main-tained during and following a seismic or other event initiating dynamic loads.

For the purpose of declaring the affected system OPERABLE with the inoperable i

i snubber (s), an engineering evaluation may be performed, in accordance with 4

Section 50.59 of 10 CFR Part 50.

Snubbers are classified and grouped by design and manufacturer but not by size.

Snubbers of the same manufacturer but having different internal mechanisms are classified as different types.

Tc.' example, mechanical snubbers utilizing the same design features of the 2-kip, 10-kip and 100-kip capacity manufactured by Company "A" are of the same type. The same design mechanical snubbers manufactured by Company "B" for the purposes of this Technical Specification would be of a different type, as would hydraulic snubbers from either manufacturer.

A list of individual snubbers with detailed information of snubber location and size and of system affected shall be available at the plant in accordance with Section 50.71(c) of 10 CFR Part 50. The accessibility of each snubber j

shall be determined and approved by the Plant Operations Review Committee. The i

determination shall be based upon the existing radiation levels and the i

expected time to perform a visual inspection in each snubber location as well as other factors associated with accessibility during plant operations (e.g.,

i i

r MILLSTONE - UNIT.3 B 3/4 7-23 Amendment No. 77, JJJ,136 1

osoe

\\

i

l PLA N SYSTEMS BASES 3/4.7.10 SNUBBERS (Continued) 1 temperature, atmosphere, location, etc.), and the recommendations of Regulatory Guides 8.8 and 8.10.

The addition or deletion of any hydraulic or mechanical snubber shall' be made in accordance with Section 50.59 of 10 CFR Part 50.

1 The visual inspection frequency is based upon maintaining a constant level of snubber protection to each safety-related system during an earthquake or severe transient. Therefore, the required inspection interval varies l

inversely with the observed snubber failures on a given system and is determined by the number of inoperable snubbers found during an inspection of each system.

j In order to establish the inspection frequency for each type of snubber on asafety-related system, it was assumed that the frequency of snubber failures 4

1 and initiating events is constant with time and that the failure of any snubber on that system could cause the system to be unprotected and to result in failure during an assumed initiating event.

Inspections performed before that interval has elapsed may be used as a new reference point to determine the next inspection. However, the results of such early inspections performed before the original required time interval has elapsed (nominal time less 25%) may not be used to lengthen the required inspection interval. Any inspection whose results require a shorter inspection interval will override the previous i

schedule.

The acceptance criteria are to be used in the visual inspection to I

determine OPERABILITY of the snubbers.

For example, if a fluid port of a hydraulic snubber is found to be uncovered, the snubber shall be declared j

inoperable and shall not be determined OPERABLE via functional testing.

To provide assurance of snubber functional reliability, one of three

{

' functional testing methods is used with the stated acceptance criteria:

1.

Functionally test 10% of a type of snubber with an additional 5%

l tested for each functional testing failure, or i

2.

Functionally test a sample size and determine sample acceptance or l

rejection using Figure 4.7-1, or 3.

Functionally test a representative sample size and determine sample acceptance or rejection using the stated equation.

Figure 4.7-1 was developed using "Wald's Sequential Probability Ratio Plan" as described in " Quality Control and. Industrial Statistics" by Acheson J. Duncan.

Permanent or other exemptions from the surveillance program for individual snubbers may be granted by the Commission if a justifiable basis for exemption is presented and, if applicable, snubber life destructive testing was performed to' qualify the snubbers for the applicable design conditions at either the com-pletion of their fabrication or at a subsequent date.

Snubbers so exempted 5

d NILLSTONE - UNIT 3 5 3/4 7-24 Amendment Nos. JJ, J7, JJJ,136 asse

,,-.-e r--n,

~ -.,

a

+ ----, - - -

i PLANT SYSTEMS BASES 3/4.7.10 SNUBBERS (Continued)

]

shall be listed in the list of individual snubbers indicating the extent of the exemptions.

The service life of a snubber is established via manufacturer input and information through consideration of the snubber service conditions and associated installation and maintenance rec.ords (newly installed snubbers, seal replaced, spring replaced, in high radiation area, in high temperature area, etc.). The requirement to monitor the snubber service life is included to ensure that the snubbers periodically undergo a performance evaluation in view of their age and operating conditions. These records will provide statistical 4

bases for future consideration of snubber service life.

I 3/4.7.11 SEALED SOURCE CONTAMINATION l

The limitations on removable contamination for sources requiring leak testing, including alpha emitters, is based on 10 CFR 70.39(a)(3) limits for plutonium. This limitation will ensure that leakage from Byproduct, Source, and i

j Special Nuclear Materiai' sources will not exceed allowable intake values.

Sealed sources are classified into three groups according to their use, with Surveillance Requirements commensurate with the probability of damage to a source in that group. Those sources which are frequently handled are required to be tested more often than those which are not. Sealed sources which are continuously enclosed within a shielded mechanism (i.e., sealed sources within d

radiation monitoring or boron measuring devices) are considered to be stored and need not be tested tinless they are removed from the shielded mechanism.

l 3/4.7.14 AREA TEMPERATURE MONITORING

)

The area temperature limitations ensure that safety-related equipment will not.be subjected to temperatures in excess of their environmental qualification temperatures.

Exposure to excessive temperatures may degrade equipment and can cause a loss of its OPERABILITY. The temperature limits include an allowance i

for instrument error of 2.2*F.

1-I t

a NILLSTONE - UNIT 3 8 3/4 7-25 Amendment Nos. pp, pp, Jpp, JJ) 136 c

esce I

l

,a (Next Page is 8)

(3) NNECO, pursuant to the Act and 10 CFR Parts 30, 40, and 70 to receive, possess, and use at any time any byproduct, source and i

i special nuclear material as sealed neutron sources for reactor j

startup, sealed sources for reactor instrumentation and radiation monitoring equipment calibration, and as fission detectors 'in-amounts as required:

(4) NNEC0, pursuant to the Act and 10 CFR Parts 30, 40, and 70 to receive, possess, and use in amounts as required any byproduct, source, or special nuclear material. without restriction to chemical or physical fors, for sample analysis or instrument calibration or associated with radioactive apparatus or components; and (5) NNEC0, pursuant to the Act and 10 CFR Parts 30, 40, and 70 to possess, but not separate, such byproduct and special nuclear i

j materials as may be produced by the operations of the facility.

i c.

This license shall be deemed to contain and is subject to the conditions specified in the Commission's regulations set forth in 10 CFR Chapter I 1

and is subject to all applicable provision of the Act and to the rules, regulations, and orders of the Commission now or hereafter in effect; and is subject to the additional conditions specified or incorporated below:

(1) Maximum Power Level Northeast Nuclear Energy Company is authorized to operate the facility at reactor core power levels not in excess of 3411 megawatts thermal (100 percent rated power) in accordance with the i

conditions specified herein.

l (2) Technical Snecifications f

The technical specifications contained in Appendix A revised through Amendment No.

, and the Environmental Protection Plan contained in Appendix B, both of which are attached

hereto, are hereby incorporated into this license.

Northeast Nuclear Energy Company shall operate the facility in accordance with the Technical j

Specifications and the Environmental Protection Plan.

(3) DELETED (4) DELETED l

Amendment No. ff, $5, S(,136 f

l

, ~.

. -.. - - -.. -.. -..

ML20137S631

Text

References:

References:

Navigation menu

Search