ML20140B167
| ML20140B167 | |
| Person / Time | |
|---|---|
| Site: | Waterford  |
| Issue date: | 06/03/1997 |
| From: | ENTERGY OPERATIONS, INC. |
| To: | |
| Shared Package | |
| ML20140B163 | List: |
| References | |
| NUDOCS 9706060065 | |
| Download: ML20140B167 (10) | |
Text
4 NPF-38-198 ATTACHMENT A l
i I
9706060065 970603 PDR ADOCK 05000382' P
POR
t TABLE 3.3-3 (Continued)
M ENGINEEREO SAFETY FEATURES ACTUATION SYSTEM INSTRUMENTATION l
4:
MINIMUM
~
TOTAL NO.
CHANNELS CHANNELS APPLICABLE FUNCTIONAL UNIT OF CHANNELS TO TRIP OPERA 8LE pmDES ACTION j
c 4.
MAIN STEAM LINE ISOLATION i
w a.
Manual (Trip 2 sets of I set of 2 sets of 1,2,3 16 I
Buttons) 2 per steam 2 per steam 2 per operat-generator generator ing steam t
generator j
b.
Steam Generator 4/ steam 2/ steam 3/ steam 1, 2, 3 13*, 14*
Pressure - Low generator generator generator c.
Containment Pressure -
4 2
3 1,2,3 13*, 14*
l High
,1 d.
Automatic Actuation 4
"2 3
1,2,3 12 i
a;*
Logic
[
M 5.
SAFETY IMJECTION SYSTEM SUNP RECIRCULATION (RAS).
a.
Manual RAS (Trip
~
Buttons) 2 1
2 1,2,3,4 12 b.
Refueling Water Storage Pool - Low 4
2 3
1,2,3,4 13*, 14*
l c.
Automatic Actuation Logic 4
2 3
1,2,3,4 12 6.
LOSS OF POWER (LOV)
}
a.
4.16 kV Emergency Bus li Undervoltage (Loss
[
of Voltage) 3/ bus 3/ bus 3/ bus 1, 2, 3 17, 18 b.
480 V Emergency Bus l {
[
Undervoltage (Loss of Voltage) 3/ bus
.3/ bus 3/ bus 1, 2, 3 17, 18 c.
4.16 kV Emergency f
ll Bus Undervoltage l
(Degraded Voltage) 3/ bus
,3/ bus 3/ bus 1, 2, 3 17, 18 l
l
TABLE 3.3-3 (Continued)
TABLE NOTATION ACTION 18 -
With more than one channel inoperable, or if the inoperable i
channel cannot be placed in the trip (D.C. Relay energized) j condition, declare the associated Emergency Diesel Generator inoperable and take the ACTION required by Specification 3.8.1.1.
The surveillance requirements of Table 4.3-2 are waived for all channels while this action requirement is in effect.
l l
}
i i
I f
1 1
i i
i WATERFORD - UNIT 3 3/4 3-18a Amendment No.47
__ -.y.
3/4.3' INSTRUMENTATION BASES l-3/4.3.1 and 3/4.3.2 REACTOR PROTECTIVE AND ENGINEERED SAFETY FEATURES ACTUATION SYSTEMS INSTRUMENTATION The OPERABILITY of the Reactor Protective and Engineered Safety Features Actuation Systems instrumentation and bypasses ensures that (1) the associated Engineered Safety Features Actuation action and/or reactor trip will be initiated when the parameter monitored by each channel or combination thereof reaches its setpoint, (2) the specified coincidence logic is maintained, (3) sufficient redundancy is maintained to permit a channel to be out of service for testing or maintenance, and 4 capability is available from diverse para (me)ters. sufficient system functional The OPERABILITY of these systems is required to provide the overall reliability, redundancy, and diversity assumed available in the facility design for the protection and mitigation of accident and transient conditions.
The integrated operation of each of these systems is consistent with the assumptions used in the safety analyses.
.The redundancy design of the Control Element Assembly Calculators (CEAC) provides reactor protection in the event one or both CEACs become inoperable.
If one CEAC is in test or inoperable, verification of CEA position is performed at least every 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br />.
If the second CEAC fails, the CPCs will use DNBR and LPD penalty factors to restrict reactor operation to some maximum fraction of RATED THERMAL POWER.
If this maximum fraction is exceeded, a reactor trip will occur.
The Surveillance Requirements specified for these systems ensure that the overall system functional capability is maintained comparable to the original design standards. The periodic surveillance tests performed at the minimum frequencies are' sufficient to demonstrate this capability.
The quarterly fre-quency for the channel functional tests for these systems comes from the analyses presented in topical report CEN-327: RPS/ESFAS Extended Test Interval Evaluation, as supplemented.
RPS\\ESFAS Trip Setpoints values are determined by means of an explicit setpoint calculation analysis. A Total Loop Uncertainty (TLU) is calculated for each RPS/ESFAS instrument channel.
The Trip Setpoint is then determined by adding or subtracting the TLU from the Analytical Limit (add TLU for decreasing process value; subtract TLU for increasing process value). The Allowable-Value_is determined by adding an allowance between the Trip Setpoint and theiAnalytical LimiMo account for RPS/ESFAS cabinet Periodic Test Errors (PTE) which are present during a CHANNEL FUNCTIONAL TEST.
PTE combines the RPS/ESFAS cabinet reference accuracy, calibration equipment errors (M&TE), and RPS/ESFAS cabinet bistable Drift.
Periodic testing assures that actual setpoints are within their Allowable Values. A channel is inoperable if its actual setpoint is not within its Allowable Value and corrective action must be taken. Operation with a trip set less conservative than its setpoint, but within its specified ALLOWABLE VALUE is acceptable on'the basis that the i
difference between each trip Setpoint and the ALLOWABLE VALUE is equal to or L
less than the Periodic Test Error allowance assumed for each trip in the j
safety analyses.
WATERFORD - UNIT 3 8 3/4 3-1 Amendment No. 69,113
- ~. -.-
\\
3/4.3 INSTRUMENTATION BASES (Cont'd) 3/4.3.1 and 3/4.3.2 REACTOR PROTECTIVE AND ENGINEERED SAFETY FEATU ACTUATION SYSTEMS INSTRUMENTATION The measurement of response time at the specified frequencies provides assurance that the protective and ESF action function associated with each channel is completed within the time limit assumed in the safety analyses.
No credit was taken in the analyses for those channels with response times indicated as not applicable.
Response time may be demonstrated by any series of sequential, overlapping, or total channel test measurements provided that such tests demonstrate the total channel response time as defined.
Sensor response time verification may be demonstrated by either 1) in place, onsite, or offsite test measurements or (2) utilizing replaceme(nt sensors with certified re times.
4 WATERFORD - UNIT 3 B 3/4 3-la Amendment No.113
I 1
9 l
4 4
1 l
1 NPF-38-198 1
l ATTACHMENT B 1
i
TABLE 3.3-3 (Continued)
ENGINEERED SAFETY FEATURES ACTUATION SYSTEM INSTRUMENTATION MINIMUM TOTAL NO.
CHANNELS CHANNELS APPLICABLE FUNCTIONAL UNITS OF CHANNELS TO TRIP OPERABLE MODES ACTION 4.
MAIN $
- EAM LINE ISOLATION a.
Maaal(Trip 2 sets of 1 set of 2 sets of 1,2,3 16 Buttons) 2 per steam 2 per steam 2 per operat-generator generator ing steam generator b.
Steam Generator 4/ steam 2/ steam 3/ steam 1,2,3 13 *,14*
Pressure - Low generator generator generator c.
Containment Pressure -
4 2
3 1,2,3 13 *,14' High d.
Automatic Actuation 4
2 3
1,2,3 12 Logic 5.
SAFETY INJECTION SYSTEM SUMP RECIRCULATION (RAS) a.
Manual RAS (Trip Buttons) 2 1
2 1,2,3,4 12 b.
Refueling Water Storage Pool-Low 4
2 3
1,2,3,4 19*,20 l
c.
Automatic Actuation Logic 4
2 3
1,2,3,4 12 6.
LOSS OF POWER (LOV) a.
4.16 kV Emergency Bus Undervoltage (Loss of Voltage) 3/ bus 3/ bus 3/ bus 1,2,3 17,18 b.
480 V Emergency Bus Undervoltage (Loss ofVoltage) 3/ bus 3/ bus 3/ bus 1,2,3 17,18 c.
4.16 kV Emergency Bus Under-voltage (Degraded Voltage) 3/ bus 3/ bus 3fous 1,2,3 17,18 WATERFORD - UNIT 3 3/4 3-15 AMENDMENT NO. 4%
=.
I TABLE 3.3-3 (Continued)
TABLE NOTATION ACTION 18 - With more than one channel inoperable, or if the inoperable channel cannot be placed in the trip (D.C. Relay energized) condition, declare the associated Emergency Diesel Generator inoperable and take the ACTION required by Specification 3.8.1.1. The surveillance requirements of Table 4.3-2 are waived for all channels while this action requirement is in effect.
ACTION 19 -
With the number of channels OPERABLE one less than the Total Number of Channels, STARTUP and/or POWER OPERATION may continue in the other applicable MODE (S) provided the inoperable channel is placed in the bypassed or tripped condition within 1 9
hour. If the inoperable channelis to remain in the bypassed condition, the desirability of maintaining this channelin the bypassed condition shall be documented by the Plant Operations Review Committee in accordance with plant administrative procedures. The channel shall be returned to OPERABLE status no later than prior to entry into the 1
applicable MODE (S) following the next COLD SHUTDOWN. If a channelis required to be placed in the tripped condition comply with ACTION 20b.
ACTION 20 - With the number of channels OPERABLE one less than the Minimum Channels OPERABLE requirement, operation in the applicable MODES may continue provided the following conditions are satisfied:
a.
Verify that one of the inoperable channels has been bypassed and place the other inoperable channelin the tripped condition within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br />.
b.
Restore at least one of the inoperable channels to OPERABLE status within 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> or be in at least HOT STANDBY within 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />. Subsequent operation in the applicable MODES may continue if one channel is restored to OPERABLE status and the provisions of ACTION 19 are satisfied.
WATERFORD - UNIT 3 3/4 3-18a AMENDMENT NO. 43
3/4.3 INSTRUMENTATION BASES 3/4.3.1 and 3/4.3.2 REACTOR PROTECTIVE AND ENGINEERED SAFETY FEATURES ACTUATION SYSTEMS INSTRUMENTATION The OPERABILITY of the Reactor Protective and Engineered Safety Features Actuation Systems instrumentation and bypasses ensures that (1) the associated Engineered Safety Features Actuation action and/or reactor trip will be initiated when the parameter monitored by each channel or combination thereof reaches its setpoint, (2) the specified coincidence logic is maintained, (3) sufficient redundancy is maintained to permit a channel to be out of service for testing or maintenance, and (4) sufficient system functional capability is available from diverse parameters.
The OPERABILITY of these systems is required to provide the overall reliability, redundancy, and diversity assumed available in the facility design for the protection and mitigation of accident and transient conditions. The integrated operation of each of these systems is consistent with the assumptions used in the safety analyses.
The redundancy design of the Control Element Assembly Calculators (CEAC) provides reactor protection in the event one or both CEACs become inoperable. If one CEAC is in test or inoperable, verification of CEA position is performed at least every 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br />. If the second CEAC fails, the CPCs will use DNBR and LPD penalty factors to restrict reactor operation to some maximum fraction of RATED THERMAL POWER. If this maximum fraction is exceeded, a reactor trip will occur.
Table 3.3-3 ACTION 19 allows for continued operation in the applicable MODES with one of the Refueling Water Storage Pool (RWSP) - Low channels inoperable provided the channel is placed in the bypass condition within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br />. The inoperable channel must be restored to OPERABLE status prior to entering MODE 4 following the next MODE 5 entry. With one of the RWSP - Low channels inoperable and in bypass, and testing or repairs is necessary on one of the remaining channels, ACTION 20 must be entered.
Table 3.3-3 ACTION 20 allows for continued operation in the applicable MODES with two of the RWSP - Low channels inoperable provided that one of the inoperable channels is bypassed and the other inoperable channel is placed in the tripped condition within one hour.
One of the inoperable RWSP - Low channels must be restored to OPERABLE status within 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> to allow removal of the channel from the tripped condition. The allowed time is acceptable because operating experience has demonstrated the low probability of the following sequence of events occurring: the need to place one RWSP - Low channel in the tripped condition while another RWSP - Low channel is in bypass, the receipt of a valid Safety injection Actuatior Signa! Actuation, and a coincident failure of one of the two remaining C PERABLE RWSP - Low channels. These conditions could cause the Emergency Core Cooling System and Containment Spray System suctions to be supplied from the Safety injection System Sump prematurely due to containment pressure being higher than RWSP outlet pressure and loss of the Low Pressure Safety injection Systems.
When one of the inoperable channels is restored to OPERABLE status, subsequent operation in the applicable MODES may continue in accordance with the provisions of ACTION 19.
I l
WATERFORD - UNIT 3 B 3/4 3-1 AMENDMENT NO.113
INSTRUMENTATION BASES (Cont'd) 3/4.3.1 and 3/4.3.2 REACTOR PROTECTIVE AND ENGINEERED SAFETY FEATURES ACTUATION SYSTEMS INSTRUMENTATION ACTION 10 is annotated with an asterisk to allow the changing of MODES even though one channelis bypassed. MODE changes with this configuration are allowed, to permit maintenance and testing on the inoperable channel. In this configuration, the protection system is in a two-out-of-three logic, and the probability of a random failure affecting two of the OPERABLE channels is remote. ACTION 20 does not have this annotation as a single failure could cause the Emergency Core Cooling System and Containment Spray System suctions to be supplied from the Safety injection System Sump prematurely and loss of the Low Pressure Safety injection Systems.
The Surveillance Requirements specified for these systems ensure that the overall system functional capability is maintained comparableio the original design standards. The periodic surveillance tests performed at the minimum frequencies are sufficient to demonstrate this capability.
The quarterly frequency for the channel functional tests for these systems comes from the analyses presented in top! cal report CEN-327 RPS/ESFAS Extended Test Interval Evaluation, as supplemented.
RPS/ESFAS Trip Setpoints values are determined by means of an explicit setpcint calculation analysis. A totalloop uncetainty (TLU) is calwlated for e ach RPS/ESFAS instrument channel. The Trip
(
setpoint is then determined by adding or subtracting the TLU from the Analytical Limit (add TLU for
\\
decreasing process value; subtract TLU for increasing process value). The Allowable Value is determined by adding an allowance between the Trip Setpoint and the Analytical Limit to account for RPS/ESFAS cabinet Periodic Test Errors (PTE) which are present during a CHANNEL FUNCTIONAL TEST. PTE combines RPS/ESFAS cabinet reference accuracy, calibration equipment errors (M&TE), and RPS/ESFAS cabinet bistable Drift. Periodic testing assures that actual setpoints are within their Allowable i
Values. A channelis inoperable if its actual setpoint is not within its Allowabie Value and corrective action must be taken. Operation with a trip set less conservative than its Trip Setpoint but within its specified Allowable Value is acceptable on the basis that the differenct oetween each Trip Setpoint and the Allowable Value is equal to or less than the Periodic Test Ecor allowance assumed for each trip in the safety analyses.
The measurement of response time at the specified frequencies provides assurance that the protective and ESF action function associated with each channel is completed within the time limit assumed in the safety analyses. No credit was taken in the aralyses for those channels with response times indicated as not applicable.
Response time may be demonstrated by any series of sequential, overlapping, or total channel test measurements provided that such tests demonstrate the total channel response time as defined.
Sensor response time verification may be demonstrated by either (l) in place, onsite, or offsite test measurements or (2) utilizing replacement sensors with certified response times.
I WATERFORD - UNIT 3 B 3/4 3-1a i
J