Text

Proposed Tech Specs Revising TS 3.8.1, AC Sources - Operating & Applicable Bases to More Clearly Reflect Safety Analysis & Testing Conditions
	ML20141B448
Person / Time
Site:	San Onofre
Issue date:	06/18/1997
From:	; SOUTHERN CALIFORNIA EDISON CO.
To:	;
Shared Package
ML20141B435	List: ML20141B431; ML20141B442; ML20141B448;
References
	NUDOCS 9706240020
	Download: ML20141B448 (142)
	v • d • e

_ . . . .

1 NPF-10/15-478 ,

ATTACHMENT "A" (Existing Specifications and Bases)

Unit 2 l

9706240020 970618 "*

PDR ADOCK 05000361 P PDR L.

l l

AC Sources-0perating i 3.8.1

^

1 SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.8.1.2 -------------------NOTES--------------..---

1. Performance of SR 3.8.1.7 satisfies this SR.

2. All DG starts may be preceded by an engine prelube period and followed by i a warmup period prior to loading.

3. A modified DG start involving idling and gradual acceleration to synchronous speed may be used for this SR as recommended by the manufacturer.

When modified start procedures are not !

used, the time, voltage, and frequency tolerances of SR 3.8.1.7 must be met.

Verify each DG starts from standby As specified in conditions and achieves steady state Table 3.8.1-1 voltage a 3924 V and s 4796 V, and frequency a 58.8 Hz and 5 61.2 Hz.

(continued)

SAN ON0FRE--UNIT 2 3.8-5 Amendment No. 127

AC Sources-Operating 3.8.1 i SURVEILLANCE FREQUENCY e

] SR 3.8.1.7 -------------------NOTE-------------------- ;

i

' All DG starts may be preceded by an engine '

prelube period.

i- Verify each DG starts from standby -

i 184 days I i

condition and achieves, in 5 10 seconds, voltage a 3924 V and 5 4796 V, and frequency a 58.8 Hz and s 61.2 Hz.

L j SR 3.8.1.8 -------------------NOTE------------------

4 Credit may be taken for unplanned events i that satisfy this SR.

4 i

j Verify automatic and manual transfer of AC 24 months l

power sources from the normal offsite circuit to each alternate required offsite l circuit.

i i

(cont'inued) f i 1

1 i

1 1

i 4

.i i

J l

i 4

j SAN ON0FRE--UNIT 2 3.8-7 Amendment No. 127

~ , ,

AC Sources-Operating 3.8.1 SURVEILLANCE FREQUENCY SR 3.8.1.9 -------------------NOTE-------------------

Credit may be taken for unplanned events that satisfy this SR.

Verify each DG, when operating with design 24 months basis kW loading and maximum kVAR loading permitted during testing, rejects a load a 682 kW, and:

a. Following load rejection, the frequency is s 66.75 Hz;-

b. Within 4 seconds following load rejection, the voltage is a 3924 V and s 4796 V; and

c. Within 4 seconds following load

~

rejection, the frequency is a 58.8 Hz

, and 5 61.2 Hz.

SR 3.8.1.10 -------------------NOTE------------------- I Credit may be taken for unplanned events that satisfy this SR.

Verify each DG, when operating with design 24 months basis kW loading and maximum kVAR loading permitted during testing, does not trip and voltage is maintained 5 5450 V during and ;

following a load rejection of a 4450 kW and 5 4700 kW.

(continued)

SAN ON0FRE--UNIT 2 3.8-8 Amendment No. 127

AC Sources-Operating 3.8.1 SURVE1LLANCE FREQUENCY SR 3.8.1.11 -------------------NOTES-------------------

1. All DG starts may be preceded by an engine prelube period.

2. Credit may be taken for unplanned events that satisfy this SR.

Verify on an actual or simulated loss of 24 months offsite power signal:

a. De-energization of emergency buses;

b. Load shedding from emergency buses;

c. DG auto-starts from standby condition and:

1. energizes permanently connected loads in s 10 seconds,

2. maintains steady state voltage a 3924 V and 5 4796 V,

3. maintains steady state frequency a 58.8 Hz and s 61.2 Hz, and

4. supplies permanently connected loads for a 5 minutes.

(continued) l I

l l

SAN ONOFRE--UNIT 2 3.8-9 Amendment No. 127

AC Sources-Operating 4

3.8.1 SURVEILLANCE FREQUENCY SR 3.8.1.12 -------------------NOTES-------------------

1. All DG starts may be preceded by an engine prelube period.

2. Credit may be taken for unplanned i

j events that satisfy this SR.

Verify on an actual or simulated Engineered 24 months i Safety Feature (ESF) actuation signal each DG auto-starts from. standby condition and:

i a. In s 10 seconds after auto-start and during tests, achieves voltage

! a 3924 V and s 4796 V; i I

4

b. In 5 10 seconds after auto-start and l during tests, achieves frequency 3 a 58.8 Hz and s 61.2 Hz; and

c. Operates for a 5 minutes.

s l

1' SR 3.8.1.13 -------------------NOTE-------------------

1 Credit may be taken for unplanned events

that satisfy this SR.

I Verify each DG automatic trip is bypassed 24 months i

on actual or simulated loss of voltage signal on the emergency bus concurrent with an actual or simulated ESF actuation signal except:

a. Engine overspeed;

b. Generator differential current; and

c. Low-low lube oil pressure.

(continued)

SAN ON0FRE--UNIT 2 3.8-10 Amendment No. 127

_ _.__.._ _ .m _ m .-.. _ _ _ _ _ _ _ _ _ . . _ _ . . _ _ _ . . _ . _ . _ _ . . _ _

l AC Sources-Operating l 3.8.1 l .

t SURVEILLANCE FREQUENCY SR 3.8.1.14 ----

NOTES-------------------

1. Momentary transients outside the load and power factor ranges do not invalidate this test.

2. Credit may be taken for unplanned events that satisfy this SR.

........................................... I I

Verify each DG, when operating with the 24 months maximum kVAR loading-permitted during testing, operates for a 24 hour2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months s:

1

a. For a 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months loaded a 4935 kW and !

s 5170 kW; and

b. For the remaining hours of the test !

loaded a 4450 kW and s 4700 kW. '

i l

! SR 3.8.1.15 -------------------NOTES-------------------

1 1. This Surveillance shall be performed within 5 minutes of shutting down the j DG after the DG has operated a 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months loaded a 4450 kW and 5 4700 kW.

Momentary transients outside of load range do not invalidate this test.

2. All DG starts may be preceded by an engine prelube period.

Verify each DG starts and achieves, in 24 months 5 10 seconds, voltage a 3924 V and 5 4796 V, and frequency a 58.8 Hz and 5 61.2 Hz; and operates a 5 minutes.

(continued)

SAN ON0FRE--UNIT 2 3.8-11 Amendment No. 127

. - . .- - - - . - - - ~ - . ~ . . . . _ ._.. . . . ... .. - - -.

AC Sources-Operating 3.8.1 SURVEILLANCE FREQUENCY SR 3.8.1.16 -------------------NOTE--------------------

Credit may be taken for unplanned events that satisfy this SR.

Verify each DG: 24 months i

j a. Synchronizes with offsite power source while loaded with emergency loads upon a simulated restoration of offsite power;

b. Transfers loads to offsite power

source; and

! c.

Returns to ready-to-load operation.

i l

SR 3.8.1.17 -------------------NOTE--------------------

' Credit may be taken for unplanned' events that satisfy this SR.

Verify, with a DG operating in test mode 24 months and connected to its bus, an actual or ,

l simulated ESF actuation signal overrides the test mode by:

a. Returning DG to ready-to-load operation; and

b. Automatically energizing the emergency loads from offsite power.

l (continued) i l

! SAN ON0FRE--UNIT 2 3.8-12 Amendment No. 127 l

AC Sources-Operating 3.8.1 1

SURVEILLANCE FREQUENCY SR 3.8.1.19 -------------------NOTES---------------- --

L 1. All DG starts may be preceded by an i

engine-prelube period.

2. Credit may be taken for unplanned events that satisfy this SR.

Verify on an actual or simulated loss of 24 months offsite power signal in conjunction with an actual or simulated..ESF actuation signal:

a. De-energization of emergency buses;

b. Load shedding from emergency buses;

c. OG auto-starts from standby condition and:

1. energizes permanently connected loads in s 10 seconds;

2. energizes auto-connected emergency loads through the programmed time interval load sequence;

3. achieves steady state voltage 2 3924 V and 5 4796 V;

4. achieves steady state frequency a 58.8 Hz and 5 61.2 Hz; and

5. supplies permanently connected and auto-connected emergency loads for a 5 minutes.

(continued)

SAN ON0FRE--UNIT 2 3.8-14 Amendment No. 127

i AC Sources-Operating 3.8.1 l

l SURVEILLANCE FREQUENCY l

SR 3.8.1.20 -------------------NOTE--------------------

l All DG starts may be preceded by an engine prelube period.

Verify, when started simultaneously from

! 10 years standby condition, each DG achieves, in s 10 seconds, voltage a 3924 V and 5 4796 V, and frequency a 58.8 Hz and l 5 61.2 Hz.

1 l

l SAN ON0FRE--UNIT 2 3.8-15 Amendment No. 127

i AC Sources-Operating 8 3.8.1

! B 3.8 ELECTRICAL POWER SYSTEMS B 3.8.1 AC Sources-Operating BASES BACKGROUND

! The Class 1E Electrical Power Distribution System AC sources consist of the offsite power sources (preferred or normal power sources and alternate (s)), and the onsite standby power sources (Train A and Train 8 diesel generators (DGs)).

As required by 10 CFR 50, Appendix A, GDC 17 (Ref.1), the design of the AC electrical power system provides independence and redundancy to ensure an available source of power to the Engineered Safety Feature (ESF) systems.

The onsite Class IE AC Distribution System is divided into redundant load groups (trains) so that the loss of any one group does not prevent the minimum safety functions from being performed. Each train has connections to two preferred offsite power sources and a single DG.

One source of offsite power (Offsite circuit #1) for each unit is normally provided through Reserve Auxiliary transformers XR1 and XR2 for the specific unit. XR1 feeds one 4.16 KV ESF bus (Train A) A04 and XR2 feeds the other 4.16 KV ESF bus (Train B) A06 of the onsite Class lE AC distribution system for each unit. The second source of offsite power (Offsite circuit #2) is provided by the other unit's Reserve Auxiliary Transformers XR1 and XR2 through the train oriented 4.16 KV ESF bus crossties between the two units. In addition, each class IE Switchgear can be connected to a third offsite power source via the Unit Auxiliary Transformers by manually removing the link in the isolated phase bus between the Main Generator and the Main transformer of the non-operating Unit and racking-in the 4.16 KV circuit breaker which is normally left racked-out (withdrawn) into the fully equipped cubicle connected to the Unit Auxiliary transformer of the same Unit.

An offsite circuit includes all breakers, transformers, switches, interrupting devices, cabling, and controls required to transmit power from the offsite transmission network to the onsite Class 1E ESF bus or buses.

Certain required unit loads are returned to service in a predetermined sequence in arder to prevent overloading the transformer supplying offsite power to the onsite Class IE (continued)

I SAN ONOFRE--UNIT 2 B 3.8-1 Amendment No. 127

l AC Sources-Operating i- -

B 3.8.1 <

i BASES BACKGROUND Distribution System. Within 77 seconds after the initiating I (continued) signal is received, all automatic and permanently connected lords needed to recover the unit or maintain it in a safe l condition are returned to service via the programmed time interval load sequence.

The onsite standby power source for each 4.16 kV ESF bus is 1 a dedicated DG. DGs G002 and G003 are dedicated to ESF buses A04 and A06, respectively. A DG starts automatically i on a safety injection actuation signal (SIAS) (i.e., low l pressurizer pressure or high containment pressure signals) !

l or on an ESF bus degraded voltage or undervoltage signal.

After the DG has started, it will automatically tie to its respective bus after offsite power is tripped as a consequence of ESF bus undervoltage or degraded voltage, independent of or coincident with an SIAS signal. The DGs will also start and operate in the standby mode without tying to the ESF bus on an SIAS alone. Following the trip of offsite power, an undervoltage signal strips nonpermanent loads from the ESF bus. When the DG is tied to the ESF bus, loads are then sequentially connected to its respective ESF bus by the programmed time interval load sequence. The sequencing logic controls the permissive and starting signals to motor breakers to prevent overloading the DG by automatic load application.

l In the event of a loss of preferred power, the ESF electrical loads are automatically connected to the DGs in sufficient time to provide for safe reactor shutdown and to mitigate the consequences of a Design Basis Accident (DBA) such as a loss of coolant accident (LOCA).

Certain required unit loads are returned to service in a ;

predetermined sequence in order to prevent overloading the DG in the process. Within 77 seconds after the initiating signal is received, all loads needed to recover the unit or maintain it in a safe condition are returned to service.

l Ratings for Train A and Train 8 DGs satisfy the requirements of Regulatory Guide 1.9 (Ref. 3). The continuous service rating of each DG is 4700 kW with 10% overload permissible for up to 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months in any 24 hour2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months period. However, for standby class of service like the San Onofre DGs the manufacturer allows specific overload values up to 116.1% of continuous duty rating based on the total hours the DG is i

(continued)

SAN ON0FRE--UNIT 2 B 3.8-2 Amendment No. 127

__ _ _ . _ _ _ _ _ _ . _ . _ _ . _ _ _ _ _ . _ . _ _ _ _ . _ _ _ .___... _ ~ _

l AC Sources-Operating B 3.8.1 BASES BACKGROUND operated per year. The ESF loads that are powered from the (continued) 4.16 kV ESF buses are listed in Reference 2.

APPLICABLE . The initial conditions of DBA and transient analyses in the SAFETY ANALYSES UFSAR, Chapter 6 (Ref. 4) and Chapter 15 (Ref. 5), assume ESF systems are OPERABLE. The AC electrical power sources are designed to provide sufficient capacity, capability, redundancy, and reliability to ensure the availability of necessary power to ESF systems so that the fuel, Reactor Coolant System (RCS), and containment design limits are not

! exceeded. These limits are discussed in more detail in the Bases for Section 3.2, Power Distribution Limits; Section 3.4, Reactor Coolant System (RCS); and Section 3.6, Containment Systems.

The OPERABILITY of the AC electrical power sources is consistent with the initial assumptions of the accident .

analyses and is based upon meeting the design basis of the unit. This results in maintaining at least one train of the

! onsite or offsite AC sources OPERABLE during accident conditions in the event of:

a. An assumed loss of all offsite power or all onsite AC power; and

b. A worst case single failure. I t

The AC sources satisfy Criterion 3 of NRC Policy Statement.

LC0 Two qualified circuits between the offsite transmission network and the onsite Class 1E Electrical Power Distribution System and separate and independent DGs for each train ensure availability of the required power to shut down the reactor and maintain it in a safe shutdown condition after an anticipated operational occurrence (A00) or a postulated DBA.

Qualified offsite circuits are those that are described in the UFSAR and &rn part of the licensing basis for the unit.

l- ,

1 l

l l

i (continued) i SAN ONOFRE--UNIT 2 B 3.8-3 Amendment No. 127

AC Sources-0perating B 3.8.1 BASES LC0 Each offsite circuit must be capable of maintaining rated (continued) frequency and voltage, and accepting required loads during an accident, while connected to the ESF buses.

One source of offsite power (Offsite circuit #1) for each unit is normally provided through Reserve Auxiliary Transformers XR1 and XR2 for the specific unit. XR1 feeds one 4.16 KV ESF bus (Train A) A04 and XR2 feeds the other 4.16 KV ESF bus (Train 8) A06 of the onsite Class 1E AC distribution system for each unit. The second source of offsite power (Offsite circuit #2) is provided by the other unit's Reserve Auxiliary Transfo' rmers XR1 and XR2 through the train oriented 4.16 KV'ESF bus crossties between the two units. In addition, each class lE Switchgear can be connected to a third offsite power source via the Unit Auxiliary Transformers by manually removing the link in the isolated phase bus between the Main Generator and the Main transforner of the non-operating Unit and racking-in the 4.16 KV circuit breaker which is normally left racked-out (withdrawn) into the fully equipped cubicle connected to the Unit Auxiliary transformer of the same Unit.

Each DG must be capable of starting, accelerating to rated speed and voltage, and connecting to its respective ESF bus on detection of bus undervoltage. This will be accomplished within 10 seconds. Each DG must also be capable of

' accepting required loads within the assumed loading sequence intervals, and continue to operate until offsite power can be restored to the ESF buses. These capabilities are required to be met from a variety of initial conditions such -

as: DG in standby with the engine hot, DG in standby with the engine at ambient conditions, and DG operating in a parallel test mode. A DG is considered already operating if the DG voltage is a 3924 and s 4796 volts and the frequency is a 58.8 and 5 61.2 Hz.

Proper sequencing of loads, including tripping of nonessential loads, is a required function for DG OPERABILITY.

The AC sources in one train must be separate and independent (to the extent possible) of the AC sources in the other train. For the DGs, separation and independence are complete.

i (continued)

SAN ON0FRE--UNIT 2 B 3.8-4 Amendment No. 127

AC Sources-Operating 8 3.8.1 BASES LC0 ;

For the offsite AC sources, separation and independence are (continued) to the extent practical. A circuit may be connected to more l than one ESF bus, with fast transfer capability to the other i j

circuit OPERABLE, and not violate separation criteria.

APPLICABILITY The AC sources and associated automatic load sequence timers are required to be OPERABLE in MODES 1, 2, 3. and 4 to ensure that:

1

a. Acceptable fuel design limits and reactor coolant pressure boundary limits are not exceeded as a result of A00s or abnormal transients; and

b. Adequate core cooling is provided and containment OPERABILITY and other vital functions are maintained i in the event of a postulated DBA. I The AC power requirements for MODES 5 and 6 are covered in LCO 3.8.2, "AC Sources -Shutdown."

ACTIONS A.1 To ensure a highly reliable power source remains with the one offsite circuit inoperable, it is necessary to verify the OPERABILITY of the remaining required offsite circuit on a more frequent basis. Since the Required Action only specifies " perform," a failure of SR 3.8.1.1 acceptance criteria does not result in a Required Action not met.

However, if a second required circuit fails SR 3.8.1.1, the second offsite circuit is inoperable, and Condition C, for two offsite circuits inoperable, is entered.

A,J.

According to Regulatory Guide 1.93 (Ref. 6), operation may continue in Condition A for a period that should not exceed 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months . With one offsite circuit inoperable, the reliability of the offsite system is degraded, and the potenti11 for a loss of offsite power is increased, with attendant potential for a challenge to the unit safety (continued)

SAN ON0FRE--UNIT 2 B 3.8-5 Amendment No. 127

a AC Sources-Operating j ..

B 3.8.1

) BASES 1

SURVEILLANCE Where the SRs discussed herein specify voltage and frequency REQUIREMENTS tolerances, the following is applicable. The minimum steady i

(continued) state output voltage of 3924 V is 90% of the nominal 4360 V ,

output voltage. This value, which is consistent with ANSI C84.1-1982 (Ref.11), allows for voltage drop to the

{

terminals of 4000 V motors whose minimum operating voltage j

is specified as 90% or 3600 V. It also allows for voltage drops to motors and other equipment down through the 120 V i

level where minimum operating voltage is also usually specified as 80% of name plate rating. The specified 4

maximum steady state output voltage of 4796 V allows for the maximum operating- voltage specified for 4000 V motors. It ensures that for a lightly loaded distribution system, the voltage at the terminals of 4000 V motors is no more than i the maximum rated operating voltages. The specified minimum i and maximum frequencies of the DG are 58.8 Hz and-61.2 Hz, '

respectively. These values are equal to 2% of the 60 Hz nominal frequency and are derived from the recommendations given in Regulatory Guide 1.9 (Ref. 3).

SR 3.8.1.1 This SR assures proper circuit continuity for the offsite AC electrical power supply to the onsite distribution network and availability of offsite AC electrical power. The breaker alignment verifies that each breaker is in its correct position to ensure that distribution buses and loads are connected to their preferred power source, and that appropriate independence of offsite circuits is maintained.

The 7 day Frequency is adequate since breaker position is not likely to change without the operator being aware of it and because its status is displayed in the control room.

SR 3.8.1.2 and SR 3.8.1.7-These SRs help to ensure the availability of the standby electrical power supply to mitigate DBAs and transients and to maintain the unit in a safe shutdown condition.

To minimize the wear on moving parts that do not get lubricated when the engine is not running, these SRs are modified by a Note (Note 2 for SR 3.8.1.2) to indicate that all DG starts for these Surveillances may be preceded by an (continued)

SAN ON0FRE--UNIT 2 B 3.8-14 Amendment No. 127

i AC Sources-Operating B 3.8.1

%SES SURVEILLANCE SR 3.8.1.2 and SR 3.8.1.7 REQUIREMENTS (continued) i engine prelube period and followed by a warmup period prior to loading. l For the purposes of SR 3.8.1.2 and SR 3.8.1.7 testing, the DGs are started from standby conditions. Standby conditions for a DG mean the diesel engine coolant. and oil are being continuously circulated and temperature is being maintained consistent with manufacturer recommendations.

In order to reduce stress and wear on diesel engines, the DG manufacturer recommends a modified start in which the starting speed of DGs is limited, warmup is limited to this lower speed, and the DGs are gradually accelerated to synchronous speed prior to loading. This is the intent of I Note 3.

SR 3.8.1.7 requires that, at a 184 day Frequency, the DG starts from standby conditions and achieves required voltage and frequency within 10 seconds. The 10 second start requirement supports the assumptions of the design basis LOCA analysis in the UFSAR, Chapter 15 (Ref. 5).

The 10 second start requirement is not applicable to SR 3.8.1.2 (see Note 3) when a modified start procedure as described above is used.

Since SR 3.8.1.7 requires a 10 second start, it is more .

restrictive than SR 3.8.1.2 and it may be performed in lieu l of SR 3.8.1.2. This is the intent of Note 1 of SR 3.8.1.2.

The norm 1131 day Frequency for SR 3.8.1.2 (see Table 3.8.1-1, " Diesel Generator Test Schedule," in the accompanying LC0) and the 184 day Frequency for SR 3.8.1.7 are consistent with Regulatory Guide 1.9 (Ref. 3). These Frequencies provide adequate assurance of DG OPERABILITY, while r'inimizing degradation resulting from testing.

SR 3.8.1.3 This Surveillance verifies that the DGs are capable of synchronizing with the offsite electrical system and accepting loads greater than or equal to the equivalent of (continued)

SAN ON0FRE--UNIT 2 8 3.8-15 Amendment No. 127

l l

AC Sources-0perating 8 3.8.1 BASES l

1 i

SURVEILLANCE SR 3.8.1.3 (continued)

REQUIREMENTS the maximum expected accident loads listed in Reference 2.

l A minimum run time of 60 minutes is required to stabilize l

engine temperatures, while minimizing the time that the DG l is connected to the offsite source.

Although no power factor requirements are established by this SR, the DG is normally operated at a power factor between 0.8 lagging and 1.0. The 0.8 value is the design rating of the machine, while 1.0 is an operational limitation to ensure circulating currents are minimized.

The normal 31 day Frequency for this Surveillance (Table 3.8.1-1) is consistent with Regulatory Guide 1.9 (Ref. 3).

This SR is modified by four Notes. Note 1 indicates that diesel engine runs for this Surveillance may include gradual loading, as recommended by the manufacturer, so that mechanical stress and wear on the diesel engine are minimized. Note 2 states that momentary transients because of changing bus loads do not invalidate this test.

Similarly, momentary power factor transients above the limit '

will not invalidate the test. Note 3 indicates that this l Surveillance should be conducted on only one DG at a time in order to avoid common cause failures that might result from offsite circuit or grid perturbations. Note 4 stipulates a prerequisite requirement for performance of this SR. A successful DG start must precede this test to credit satisfactory performance.

SR 3.8.1.4 This SR provides verification that the level of fuel oil in the day tank is at or above the level selected to ensure adequate fuel oil for a minimum of 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months of DG operation at full load plus 10%. The level is expressed as an equivalent volume in inches. The 30 inch level corresponds to 355.1 gallons of fuel oil including instrument uncertainties.

The 31 day Frequency is adequate to assure that a sufficient supply of fuel oil is available, since low level alarms are (continued) 1 SAN ON0FRE--UNIT 2 B 3.8-16 Amendment No. 127

~ . .---- .--- . - . _ - - . - . - . . - - - -

AC Sources-Operating B 3.8.1 '

$ BASES SVRVEILLANCE SR 3.8.1.4 (continued)

REQUIREMENTS )

provided and unit operators would be aware of any large uses of fuel oil during this period.

SR 3.8.1.5 b, .

Microbiological fouling is a major cause of fuel oil

degradation. There are numerous microorganisms that can grey in fuel oil and cause fouling, but all must have a

' water environment in order to survive. Removal of water from the fuel oil day tanks once every 31 days eliminates the necessary environment for microbial survival in the day tanks. This is the most effective means of controlling microbiological fouling. In addition, it eliminates the 4

i potential for water entrainment in the fuel oil during DG l operation. Water may come from any of several sources, I including condensation, ground water, rain water, f

contaminated fuel oil, and from breakdown of the fuel oil by microorganisms. Frequent checking for and removal of accumulated water minimizes fouling and provides data j

regarding the watertight integrity of the fuel oil system. 1 The Surveillance Frequencies are established by Regulatory Guide 1.137 (Ref.10) . This SR is for preventive

maintenance. The presence of water does not necessarily

( represent failure of this SR provided the accumulated water is removed during the performance of this Surveillance.

b

SR 3.8.1.6 4

i This Surveillance demonstrates that each required fuel oil transfer pump operates and transfers fuel oil from its associated storage tank to its associated day tank. This is required to support continuous operation of standby power sources. This Surveillance provides assurance that the fuel oil transfer pump is OPERABLE, the fuel oil piping system is 4

intact, the fuel delivery piping is not obstructed, and the controls and control systems for automatic fuel transfer l systems are OPERABLE. !

The design of fuel transfer systems is such that pumps will .

operate automatically or must be started manually in order i (continued) l SAN ON0FRE--UNIT 2 8 3.8-17 Amendment No. 127

.1

_ _ , - .. ._ . . - - = - - -

AC Sources-Operating j B 3.8.1 l

BASES SURVEILLANCE SR 3.8.1.6 (continued)

REQUIREMENTS to maintain an adequate volume of fuel oil in the day tanks during or following DG testing. In such a case, a 31 day '

Frequency is appropriate.

! SR 3.8.1.7 See SR 3.8.1.2.

SR 3.8.1.8 Transfer of each 4.16 kV ESF bus power supply from the normal offsite circuit to the alternate offsite circuit demonstrates the OPERABILITY of the alternate circuit distribution network to power the shutdown loads. The 24 roonth Frequency of the Surveillance is based on engineering judgment, taking into consideration the unit conditions required to perform the Surveillance, and is intended to be consistent with expected fuel cycle lengths.

Operating experience has shown that these components usually pass the SR when performed at the 24 month Frequency.

Therefore, the Frecuency was concluded to be acceptable from !

a reliability stancpoint.

This SR is modified by a Note which acknowledges that credit may be taken for unplanned events that satisfy this SR.

SR 3.8.1.9 Each DG is >rovided with an engine overspeed trip to prevent '

damage to tie engine. Re::overy from the transient caused by the loss of a large load could cause diesel engine overspeed, which, if excessive, might result in a trip of the engine. This Surveillance demonstrates the DG load response characteristics and capability to reject the largest single load without exceeding prr'etermined voltage and frequency and while maintaining a specified margin to the overspeed trip. For this unit, the sirgle load for each DG is the Auxiliary Feedwater pump and its horsepower rating is 800 HP. As required by IEEE-308 (Ref. 13), the load rejection test is acceptable if the increase in diesel speed does not exceed 75% of the difference between synchronous (continued) l SAN ON0FRE--UNIT 2 B 2.8-18 Amendment No. 127

1 AC Sources-0perating B 3.8.1 I

BASES i

SURVEILLANCE SR 3.8.1.9 (continued)

REQUIREMENTS speed and the overspeed trip setpoint, or 15% above !

synchronous speed, whichever is lower.

The time, voltage, and frequency tolerances specified in i this SR are derived from Regulatory Guide 1.9 (Ref. 3) I recommendations for response during load sequince intervals.

The 4 seconds specified is equal to 80% of a typical l 5 second load sequence interval associated with sequencing

i of the largest load. The voltage and frequency specified i

! are consistent with the design range of the equipment 1 l

powered by the DG, SR 3.8.1.9.a corresponds to the maximum '

t frequency excursion, while SR 3.8.1.9.b and SR 3.8.1.9.c are 4 l steady state voltage and frequency values to which the system must recover following load rejection. The 24 month Frequency is consistent with the recommendation of l

Regulatory Guide 1.9 (Ref. 3),

i In order to ensure that the DG is tested under load conditions that are as close to design basis conditions as l possible, testing is performed using design basis kW loading l l and maximum kVAR loading permitted dvring testing. These i loadings represent the inductive loading that the DG would ;

experience to the extent practicable and is consistent with !

the intent of Regulatory Guide 1.9 (Ref. 3).

This SR is modified by a Note which acknowledges that credit may be taken for unplanned events that satisfy this SR.

SR 3.8.1.10 This Surveillance demonstrates the DG capability to reject a load equal to 94.5% to 100% of its continuous rating without overspeed tripping or exceeding the predetermined voltage limits. The DC full load rejection may occur because of a system fault or inadvertent breaker tripping. This Surveillance ensures proper engine generator load response under the simulated test conditions. This test simulates the loss of the total connected load that the DG experiences following a full load rejection and verifies that the DG will not trip upon loss of the load. These acceptance criteria provide DG damage protection. While the DG is not expected to experience this transient during an event and (continued)

I l

SAN ON0FRE--UNIT 2 B 3.8-19 Amendment No. 127

I i

AC Sources-Operating 8 3.8.1 BASES i

SURVEILLANCE SR 3.8.1.10 (continued)

REQUIREMENTS continues to be available, this response ensures that the DG is not degraded for future application, including reconnection to the bus if the trip initiator can be corrected or isolated. These loads and limits are

, consistent with Regulatory Guide 1.9 (Ref. 3). In order to i

ensure that the DG is tested under load conditions that are as close to design basis conditions as possible, testing is performed using design basis kW loading and maximum kVAR loading permitted during testing. These loadings represent a

the inductive loading that the DG would experience to the extent practicable and is consistent with the intent of Regulatory Guide 1.9 (Ref. 3).

1 The 24 month Frequency is consistent with the recommendation j of Regulatory Guide 1.9 (Ref. 3) and is intended to be

{ consistent with expected fuel cycle lengths.

4 a

' This SR is modified by a Note which acknowledges that credit may be taken for unplanned events that satisfy this SR.

SR 3.8.1.11 As required by Regulatory Guide 1.9 (Ref. 3), this j Surveillance demonstrates the as designed operation of the standby power sources during loss of the offsite source.

This test verifies all actions encountered from the loss of offsite power, including shedding of the nonessential loads and energization of the emergency buses and respective loads from the DG. It further demonstrates the capability of the i DG to automatically achieve the required voltage and frequency within the specified time.

The DG auto-start time of 10 seconds is derived from requirements of the accident analysis to respond to a design basis large break LOCA. The frequency should be restored to within 2% of nominal following a load sequence step. The Surveillance should be continued for a minimum of 5 minutes in order to demonstrate that all starting transients have decayed and stability has been achieved.

The requirement to verify the connection and power supply of permanent loads is intended to satisfactorily show the (continued)

SAN ON0FRE--UNIT 2 B 3.8-20 Amendment No. 127

AC Sources-Operating B 3.8.1 BASES SURVEILLANCE SR 3.8.1.11 (continued)

REQUIREMENTS relationship of these loads to the DG loading logic. In certain circumstances, many of these loads cannot actually be connected or loaded without undue hardship or potential for undesired operation.

For instance, Emergency Core Cooling Systems (ECCS) injection valves are not desired to be stroked open, high pressure injection systems are not capable of being operated at full flow, or shutdown cooling (SDC) systems performing a decay heat removal function are not desired to be realigned to the ECCS mode of operation. In lieu of actual demonstration of connection and loading of loads, testing that adequately shows the capability of the DG system to perform these functions is acceptable. This testing may include any series of sequential, overlapoing, or total steps so that the entire connection and loading sequence is verified.

The Frequency of 24 months is consistent with the recommendations of Regulatory Guide 1.9 (Ref. 3), takes into consideration unit conditions required to perform the Surveillance, and is intended to be consistent with expected fuel cycle lengths.

This SR is modified by two Notes. The reason for Note 1 is to minimize wear and tear on the DGs during testing. For the purpose of this testing, the DGs must be started from standby conditions, that is, with the engine coolant and oil continuously circulated and temperature maintained consistent with manufacturer recommendations. Note 2 acknowledges that credit may be taken for unplanned events that satisfy this SR.

SR 3.8.1.12 This Surveillance demonstrates that the DG automatically starts and achieves the required voltage and frequency within the specified time (10 seconds) from the design basis actuation signal and operates for 2: 5 minutes. The 5 minute period provides sufficient time to demonstrate stability.

(continued)

SAN ONOFRE--UNIT 2 B 3.8-21 Amendment No. 127

AC Sources -0perating B 3.8.1 BASES SURVEILLANCE SR 3.8.1.12 (continued)

REQUIREMENTS The Frequency of 24 months is consistent with Regulatory Guide 1.9 (Ref. 3), takes'into consideration unit conditions required to perform the Surveillance, and is intended to be consistent with the ex)ected fuel cycle lengths. Operating experience has shown tlat these components usually pass the !

SR when performed at the 24 month Frequency. Therefore, the Frequency was concluded to be acceptable from a reliability standpoint.

This SR is modified by two Notes. The reason for Note 1 is '

to minimize wear'and tear on the DGs during testing. For the purpose of this testing, the DGs must be started from standby conditions, that is, with the engine coolant and oil continuously circulated and temperature maintained consistent with manufacturer recommendations. Note 2 acknowledges that credit may be taken for unplanned events that satisfy this SR.

SR 3.8.1.13 This Surveillance demonstrates that DG noncritical protective functions (e.g., high jacket water temperature) are bypassed on a loss of voltage signal concurrent with an ESF actuation test signal in accordance with Reference 3.

The critical protective functions (engine overspeed, generator differential current, and low-low lube oil pressure), which trip the DG to avert substantial damage to the DG unit, are not bypassed. The noncritical trips are bypassed during DBAs and provide an alarm on an abnormal engine condition. This alarm provides the operator with .

sufficient time to react appropriately. The DG availability to mitigate the DBA is more critical than protecting the )

engine against minor problems that are not immediately detrimental to emergency operation of the DG, {

The 24 month Frequency is based on engineering judgment, taking into consideration unit conditions required to perform the Surveillance, and is intended to be consistent with ex)ected fuel cycle lengths. Operating experience has shown tlat these components usually pass the SR when performed at the 24 month Frequency. Therefore, the Frequency was concluded to be acceptable from a reliability standpoint.

(continued) l SAN ON0FRE--UNIT 2 B 3.8-22 Amendment No. 127 12/21/96 j

t AC Sources-0perating l 8 3.8.1 ;

I BASES i

SVRVEILLANCE SR 3.8.1.13 (continued)

REQUIREMENTS i

The SR is modified by a Note which acknowledges that credit i may be taken for unplanned events that satisfy this SR.

i SR 3.8.1.14 Regulatory Guide 1.9 (Ref. 3), requires demonstration once i per refueling outage that the DGs can start and run continuously at full load capability for an interval of not less than 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months , a 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months of which is at load equivalent to 105% to 110% of the continuous duty rating and the remainder of the time at a load equivalent to 90% to 100% of {

1 the continuous duty rating of the DG. The DG starts for l this Surveillance can be performed either from standby or l-hot conditions. The provisions for prelubricating and warmup, discussed in SR 3.8.1.2, and for gradual loading, discussed in SR 3.8.1.3, are applicable to this SR.

. In order to ensure that the DG is tested under load conditions that are as close to design conditions as j possible, testing is performed using the maximum kVAR 1 i loading permitted during testing. This loading represents the inductive loading that the DG would experience and is consistent with Regulatory Guide 1.9 (Ref. 3). The load band is provided to avoid routine overloading of the DG.

routine overloading may result in more frequent teardown inspections in accordance with vendor recommendations in order to maintain DG OPERABILITY.

The 24 month Frequency is consistent with the recommendations of Regulatory Guide 1.9, (Ref. 3), takes into consideration unit conditions required to perform the Surveillance, and is intended to be consistent with expected fuel cycle lengths.

This Surveillance is modified by two Notes. Note 1 states that momentary transients due to changing bus loads do not invalidate this test. Similarly, momentary power factor transients above the power factor limit will not invalidate the test. Note 2 acknowledges that credit may be taken for unplanned events that satisfy this SR.

1 (continued) l l

SAN ON0FRE--UNIT 2 8 3.8-23 Amendment No. 127 l

l

_ -. - - .. . .. .- - - .- - . , . . ~ -

l l AC Sources-Operating l

'B 3.8.1 BASES i

SURVEILLANCE SR 3.8.1.15 REQUIREMENTS (continued) This Surveillance demonstrates that the diesel engine can 1

restart from a hot condition, such as subsequent to shutdown- '

from normal Surveillances, and achieve the required voltage and frequency within 10 seconds. The 10 second time is derived from the requirements of the accident analysis to respond to a design basis large break LOCA. The 24 month i

Frequency is consistent with the recommendations of Regulatory Guide 1.9 (Ref. 3) and is intended to be consistent with expected fuel cycle lengths.

This SR is modified by two Notes. Note 1 ensures that the l

test is performed with the diesel sufficiently hot. The load band is provided to avoid routine overloading of the DG. Routine overloads may result in more frequent teardown inspections in accordance with vendor recommendations in order to maintain DG OPERABILITY. The requirement that the

' diesel has operated for at least 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months at full load conditions prior to performance of this Surveillance is based on manufacturer recommendations for achieving hot conditions. Momentary transients due to changing bus loads

- do not invalidate this test. Note 2 allows all DG starts to be preceded by an engine prelube period to minimize wear and tear on the diesel during testing SR 3.8.1.16 As required by Regulatory Guide 1.9 (Ref. 3), this Surveillance ensures synchronization and automatic load transfer from the DG to the offsite source can be made and l that the DG can be returned to ready to load operation when offsite power is restored. Ready to load operation is defined as the DG running at rated speed and voltage with the DG output breaker open. By design, the LOVS logic will have been previously reset thus allow /SDVS/DGVSS ing the DG to reload if a subsequent loss of offsite power or degraded voltage condition occurs. The LOVS/SDVS/DGVSS signal will strip the bus, reset the load sequence timers, close the DG output breaker, and permit resequencing of the ESF loads if an ESF actuation signal is present.

The Frequency of 24 months is consistent with the consideration unit conditions required to perfor)m therecommenda Surveillance, and is intended to be consistent with expected fuel cycle lengths.

(continued) 1 SAN ON0FRE--UNIT 2 B 3.8-24 Amendment No. 127 1/13/1997

AC Sources-Operating -

B 3.8.1 BASES-SURVEILLANCE SR 3.8.1.}6 (continued) ;

REQUIREMENTS .

' This SR is modified by a Note which acknowledges that credit may be taken for unplanned ' events that satisfy this SR.

SR 3.8.1.17 l Demonstration of the test mode override ensures that the DG l

availability under accident conditions will not be j compromised as the result of testing and the DG will 1 automatically reset to ready to load operation if an SIAS is received during operation in the test mode. Ready to load i

operation is defined as the DG running at rated speed and voltage with the DG output breaker open. These provisions ;

for automatic switchover are required by IEEE-308 (Ref. 13), {

paragraph 6.2.6(2) and Regulatory Guide 1.9 (Ref. 3). '

The requirement to automatically energize the emergency loads with offsite power is essentially identical to that of.

, SR 3.8.1.12. The intent in the requirement associated with q

SR 3.8.1.17.b is to show that the emergency loading was not .

affected by the DG' operation in test mode. In lieu of I actual demonstration of connection and loading of loads, .

testing that adequately shows the capability of the )

emergency . loads to perform these functions is acceptable. 1 This testing may include any series of sequential, overlapping, or total steps so that the entire connection and loading sequence is verified.

The 24 month Frequency is consistent with the recommendations of Regulatory Guide 1.9 (Ref. 3), takes into consideration unit conditions required to perform the l Surveillance, and is intended to be consistent with expected l fuel cycle lengths. I This SR is modified by a Note which acknowledges that credit ;

may be taken for unplanned events that satisfy this SR. 1 (continued) i SAN ON0FRE--UNIT 2 B 3.8-25 Amendment No. 127 May 2, 1997 I

l

' AC Sources -0perating B 3.8.1

)

BASES 4

SURVEILLANCE SR 3.8.1.18

REQUIREMENTS 3

(continued) As required by Regulatory Guide 1.108 (Ref. 9),

paragraph 2.a.(2), each DG is required to demonstrate proper i

operation for the DBA loading sequence to ensure that i

i voltage and frequency are maintained within the required limits. Under accident conditions, prior to connecting the l DGs to their respective buses, all loads are shed except i load center feeders and those motor control centers that power Class 1E loads (referred to as " permanently connected" l

loads). Upon reaching 90% of rated voltage and frequency, i

the DGs are then connected to their res3ective buses. Loads i

are then sequentially connected to the aus by the programmed ;

time interval load sequence. The sequencing logic controls I the permissive and starting signals to motor breakers to prevent overloading of the DGs due to high motor starting l currents. The 10% load sequence start time tolerance i I ensures that sufficient time exists for the DG to restore I frequency and voltage prior to applying the next load and that safety analysis assumptions regarding ESF equipment time delays are not violated. Reference 2 provides.a

, summary of the automatic loading of ESF buses.

l For the Containment Emergency Cooling Units only, the sequenced time is the actual start time of the Component 3 Cooling Water pumps plus 5 0.5 seconds. The tolerance is

based on a design interval of 5 seconds.

4 The Frequency of 24 months is consistent with the i recommendations of Regulatory Guide 1.108 (Ref. 9),

i paragraph 2.a.(2); takes into consideration unit conditions i

required to perform the Surveillance; and is intended to be consistent with expected fuel cycle lengths.

This SR is modified by a Note which acknowledges that credit i may be taken for unplanned events that satisfy this SR. l i

SR 3.8.1.19 j

In the event of a DBA coincident with a loss of offsite l power, the DGs are required to supply the necessary power to !

ESF systems so that the fuel, RCS, and containment design j limits are not exceeded.

l This Surveillance demonstrates the DG operation, as

, discussed in the Bases for SR 3.8.1.11, during a loss of offsite power actuation test signal in conjunction with an ESF actuation signal (SIAS). In lieu of actual (continued)

SAN ON0FRE--UNIT 2 B 3.8-26 Amendment No. 127 01/30/97

l i

AC Sources-Operating B 3.8.1 BASES SURVEILLANCE SR 3.8.1.19 (continued)

REQUIREMENTS demonstration of connection and loading of loads, testing that adequately shows the capability of the DG system to l

perform these functions is acceptable. This testing may include any series of sequential, overlapping, or total steps so that the entire connection and loading sequence is verified.

The Frequency of 24 months takes into consideration unit conditions required to perform the Surveillance and is intended to be consistent with an expected fuel cycle length of 24 months.

This SR is modified by two Notes. The reason for Note 1 is to minimize wear and tear on the DGs during testing. For the purpose of this testing, the DGs must be started from standby conditions, that is, with the engine coolant and oil continuously circulated and temperature maintained consistent with manufacturer recommendations for DGs.

Note 2 acknowledges that credit may be taken for unplanned events that satisfy this SR.

SR 3.8.1.20 This Surveillance demonstrates that the DG starting independence has not been compromised. Also, this Surveillance demonstrates that each engine can achieve proper speed within the specified time when the DGs are started simultaneously.

The 10 year Frequency is consistent with the recommendations of Regulatory Guide 1.108 (Ref. 9), paragraph 2.b,

' Regulatory Guide 1.137 (Ref. 10), paragraph C.2.f, and Regulatory Guide 1.9 (Ref. 3).

This SR is modified by a Note. The reason for the Note is to minimize wear on the DG during testing. For the purpose of this testing, the DGs must be started from standby conditions, that is, with the engine coolant and oil continuously circulated, and temperature maintained consistent with manufacturer recommendations.

(continued)

SAN ON0FRE--UNIT 2 B 3.8-27 Amendment No. 127

i AC Sources-0perating l -

B 3.8.1 BASES l

SURVEILLANCE Diesel Generator Test Schedule REQUIREMENTS i

(continued) The DG test schedule (Table 3.8.1-1) implements the J recommendations of Revision 3 to Regulatory Guide 1.9 (Ref. 3). The purpose of this test schedule is to provide j timely test data to establish a confidence level associated i with the goal to maintain DG reliability above 0.95 per 3 demand.

[ According to Regulatory Guide 1.9, Revision 3 (Ref. 3), each DG unit should be tested at least once every 31 days.

According to Draft Regulatory Guide DG-1021 (Ref. 14) and 10 CFR 50.63(a)(3)(ii) (Ref. 15), whenever'a DG has j- experienced 4 or more valid failures in the last 25 valid tests, the maximum time between tests is reduced to 7 days.

Four failures in 25 valid tests is a failure rate of 0.16, j or the threshold of acceptable DG performance, and hence may be an early indication of the degradation of DG reliability.

When considered in the light of a long history of tests, however, 4 failures in the last 25 valid tests may only be a

~ statistically probable distribution of random events.

Increasing the test Frequency will allow for a more timely 1

accumulation of additional test data upon which to base

!. Judgment of the reliability of the DG. The increased test Frequency must be maintained until seven consecutive, l failure free tests have been performed.

j The Frequency for accelerated testing is 7 days, but no less i than 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months . Therefore, the interval between tests should j be no less than 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months , and no more than 7 days. A 2

', successful test at an interval of less than 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months should

be considered an invalid test and not count towards the seven consecutive failure free starts. A test interval in j excess of 7 days constitutes a failure to meet the SRs.

REFERENCES 1. 10 CFR 50, Appendix A, GDC 17.

j 2. UFSAR, Chapter 8.

j 3. Regulatory Guide 1.9, Rev. 3.

4. UFSAR, Chapter 6.

1 (continued) i 1

1

SAN ON0FRE--UNIT 2 8 3.8-28 Amendment No. 127 1

l

AC Sources-Operating 8 3.8.1 BASES REFERENCES 5. UFSAR, Chapter 15.

l (continued)

6. Regulatory Guide 1.93, Rev. O.

7. Generic Letter 84-15.

8. 10 CFR 50, Appendix A, GDC 18.

9. Regulatory Guide 1.108, Rev.1.

10. Regulatory Guide 1.137, Rev. 1.

l 11. ANSI C84.1-1982.

12. ASME, Boiler and Pressure Vessel Code,Section XI.

l 13. IEEE Standard 308-1978.

14. Draft' Regulatory Guide DG-1021, April 1992.

, 15. 10 CFR 50.63(a)(3)(ii) as published in Federal Register Vol. 57, No. 77 page 14517, April 21, 1992.

l l

SAN ON0FRE--UNIT 2 B 3.8-29 Amendment No. 127

l l

NPF-10/15-478 ATTACHMENT "B" (Existing Specifications and Bases)

Unit 3 1

1 I

l

AC Sources-0perating 3.8.1 SURVEILLANCE REQUIREMENTS 1

SURVEILLANCE FREQUENCY SR 3.8.1.1 -------------------NOTES-------------------

1. Buses 2A04 and 2D1 are required when unit crosstie breaker 2A0416 is used to provide a source of AC power.

2. Buses 2A06 and 202 are required when unit crosstie breaker 2A0603 is used to provide a source of AC power.

Verify correct breaker alignment and power 7 days availability for each required offsite circuit.

(continued)

SAN ON0FRE--UNIT 3 3.8-4 Amendment No. 116

AC Sources-0perating i 3.8.1 SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY i=

l SR 3.8.1.2 -------------------NOTES-------------------

1. Performance of SR 3.8.1.7 satisfies this SR.

0

2. All DG starts may be preceded by an i engine prelube period and followed by

a warmup period prior to loading.

i 3. A modified DG start involving idling i and gradual acceleration to

synchronous speed may be used for this SR as recommended by the manufacturer.

When modified start procedures are not used, the time, voltage, and frequency tolerances of.SR 3.8.1.7 must be met.

l __ ....._______________...__..__________.__

Verify each DG starts from standby As specified in conditions and achieves steady state Table 3.8.1-1 voltage a 3924 V and 5 4796 V, and frequency a 58.8 Hz and s 61.2 Hz.

(continued) l SAN ON0FRE--UNIT 3 3.8-5 Amendment No. 116

I t

i AC Sources-Operating 3.8.1 SURVEILLANCE FREQUENCY SR 3.8.1.7 -------------------NOTE--------------------

All DG starts may be preceded by an engine prelube period.

Verity each DG starts from standby 184 days condition and achieves, in 5 10 seconds, voltage a 3924 V and s 4796 V, and frequency a 58.8 Hz and 5 61.2 Hz.

SR 3.8.1.8 -------------------NOTE------------------

Credit may be taken for unplanned events that satisfy this SR. !

Verify automatic and manual transfer of AC 24 months power sources from the normal offsite circuit to each alternate required offsite circuit.

l (continued) l t

l SAN ONOFRE--UNIT 3 3.8-7 Amendment No. 116

AC Sources-Operating 3.8.1 l

SURVEILLANCE FREQUENCY l

SR 3.8.1.9 -------------------NOTE-------------------

Credit may be taken for unplanned events i that satisfy this SR.

..... ............ ....................... l l

Verify each DG, when operating with design 24 months l basis kW loading and maximum kVAR loading !

permitted during testing, rejects a load !

a 682 kW, and: I

a. Following load-rejection, the i frequency is 5 66.75 Hz;

b. Within 4 seconds following load rejection, the voltage is a 3924 V and 5 4796 V; and ;

1

c. Within 4 seconds following load 1

rejection, the frequency is a 58.8 Hz and 5 61.2 Hz.

l l

1 l

SR 3.8.1.10 -------------------NOTE-------------------

Credit may be taken for unplanned events that satisfy this SR.

...... ................................... l Verify each DG, when operating with design 24 months l basis kW loading and maximum kVAR loading permitted during testing, does not trip and voltage is maintained s 5450 V during and following a load rejection of a 4450 kW and 5 4700 kW.

(continued) l l

SAN ON0FRE--UNIT 3 3.8-8 Amendment No. 116 l

l AC Sources -0perating 3.8.1 l

SURVEILLANCE FREQUENCY SR 3.8.1.11 -------------------NOTES-------------------

1. All DG starts may be preceded by an engine prelube period.

2. Credit may be taken for unplanned events that satisfy this SR.

Verify on an actual or simulated loss of 24 months offsite power signal:

a. De-energization of emergency buses;

b. Load shedding from emergency buses;

c. DG auto-starts from standby condition and:

1. energizes permanently connected loads in 5 10 seconds,

2. maintains steady state voltage 2 3924 V and 5 4796 V,

3. maintains steady state frequency a 58.8 Hz and 5 61.2 Hz, and

4. supplies permanently connected loads for a 5 minutes.

(continued)

! SAN ON0FRE--UNIT 3 3.8-9 Amendment No. 116

AC Sources-0perating 3.8.1 SURVEILLANCE FREQUENCY SR 3.8.1.12 -------------------NOTES-------------------

1. All DG starts may be preceded by an engine prelube period.

2. Credit may be taken for unplanned events that satisfy this SR.

Verify on an actual or simulated Engineered 24 months Safety Feature (ESF) actuation signal each DG auto-starts from-standby condition and:

a. In s 10 seconds after auto-start and during tests, achieves voltage a 3924 V and 5 4796 V;

b. In s 10 seconds after auto-start and during tests, achieves frequency a 58.8 Hz and 5 61.2 Hz; and

c. Operates for a 5 minutes.

SR 3.8.1.13 -------------------NOTE-------------------

Credit may be taken for unplanned events that satisfy this SR.

Verify each DG automatic trip is bypassed 24 months on actual or simulated loss of voltage signal on the emergency bus concurrent with an actual or simulated ESF actuation signal except:

a. Engine overspeed;

b. Generator differential current; and

c. Low-low lube oil pressure.

(continued)

SAN ON0FRE--UNIT 3 3.8-10 Amendment No. 116

l AC Sources-0perating 3.8.1 l

SURVEILLANCE FREQUENCY SR 3.8.1.14@ -------------------NOTES-------------------

1. Momentary transients outside the load and power factor ranges 'ch) not invalidate this test. .

l

2. Credit may be taken for unplanned 1 events that satisfy this SR.

Verify each DG, when operating with the 24 months maximum kVAR loading permitted during testing, operates for a 24 hour2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months s:

a. For a 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months loaded a 4935 kW and s 5170 kW; and j

b. For the remaining hours of the test 1 loaded a 4450 kW and s 4700 kW. l I

SR 3.8.1.15# -------------------NOTES-------------------

1. This Surveillance shall be performed within 5 minutes of shutting down the DG after the DG has operated a 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months loaded a 4450 kW and 5 4700 kW.

Momentary transients outside of load range do not invalidate this test.

2. All DG starts may be preceded by an engine prelube period.

Verify each DG starts and achieves, in 24 months 5 10 seconds, voltage a 3924 V and s 4796 V, and frequency a 58.8 Hz and 5 61.2 Hz; and operates a 5 minutes.

(continued)

SAN ON0FRE--UNIT 3 3.8 11 Amendment No. 446,125

_ _ _ _ . ._ .. . . . _ _ _ _ _ . _ _ _ _. _ .. _ _ _ _ _ _ . _ . _m _ _ . . _ .

AC Sources-0perating 3.8.1 i

SURVEILLANCE RE0VIREMENTS (continued)

! 'O This SR is not applicable until the next tut scheduled to

{ occur during the Unit 3 Cycle 9 refueling mge. Until that j time the following SR is applicable:

Verify the diesel generator operates for at least 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months .

i

' During the first 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months of this test, the diesel generator shall be loaded to greater than or equal to 5170 kw and during the remaining 22 hours2.546296e-4 days 0.00611 hours 3.637566e-5 weeks 8.371e-6 months of this test, the diesel generator shall be loaded to greater than or equal to 4700 kw. The generator voltage and frequency shall be 4360 436 volts and 60 2 1.2 Hz after the start

signal; the steady state generator voltage and frequency shall be maintained at 4360 436 volts and 60 + 1.2

/ -0.3 Hz for the first 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months of this test and 4360 1 436 volts an 6011.2 Hz during the-remaining 22 hours2.546296e-4 days 0.00611 hours 3.637566e-5 weeks 8.371e-6 months of this test.

The engine start for the purpose of this surveillance test may b,e preceded by an engine prelube period and/or other warmup procedures recommended by the manufacturer so that mechanical stress and wear on the engine is minimized.

This SR is not applicable until the next test scheduled to occur during the Unit 3 Cycle 9 Refueling Outage. Until that l time the following SR is applicable:

Within 5 minutes after completing the 24-hour test, simulate a l loss of offsite power by itself, and verify the diesel starts on the auto-start signal, energizes the emergency busses with permanently connected loads within 10 seconds and operates for greater than or equal to 5 minutes while its generator is loaded with the permanently connected loads. After energization, the steady state voltage and frequency of the emergency busses shall be maintained at 4360 436 volts and 60 1.2 Hz d' u ring this test.

l l

l

! t l

f SAN ON0FRE--UNIT 3 3.8-11a Amendment No. 125 l

l l

I -- , . __ __ - _ _

l.

AC Sources-Operating 3.8.1 4

SURVEILLANCE FREQUENCY 4

! SR 3.8.1.16 -------------------NOTE--------------------

l Credit may be taken for unplanned events j

r that satisfy this SR.

, Verify each DG: 24 months i

a. Synchronizes with offsite power source I

while loaded with emergency loads upon a simulated restoration of offsite power;

b. Transfers loads to offsite power l 1

source; and

c. Returns to ready-to-load operation.

1 SR 3.8.1.17 -------------------NOTE--------------------

Credit may be taken for unplanned events that ' satisfy this SR.

Verify, with a DG operating in test mode 24 months and connected to its bus, an actual or simulated ESF actuation signal overrides the test mode by:

a. Returning DG to ready-to-load operation; and

b. Automatically energizing the emergency loads from offsite power.

(continued)

SAN ON0FRE--UNIT 3 3.8-12 Amendment No. 446,125

i j

' AC Sources-0perating 3.8.1 l

SURVEILLANCE FREQUENCY l

SR 3.8.1.19 -------------------NOTES-------------------

1. All DG starts may be preceded by an engine prelube period.

2. Credit may be taken for unplanned events that satisfy this SR.

Verify on an actual or simulated loss of 24 months offsite power signal in conjunction with an actual or simulated -ESF actuation signal:

a. De-energization of emergency buses;

b. Load shedding from emergency buses;

c. DG auto-starts from standby condition and:

1. energizes permanently connected loads in s 10 seconds; l 2. energizes auto-connected emergency loads through the programmed time interval load sequence;

3. achieves steady state voltage a 3924 V and s 4796 V;

4. achieves steady state frequency a 58.8 Hz and s 61.2 Hz; and

5. supplies permanently connected and auto-connected emergency loads for a 5 minutes.

(continued) l l

l l

SAN ON0FRE--UNIT 3 3.8-14 Am.andment No. 116 l

l l

- AC Sources-Operating l 3.8.1

1 SURVEILLANCE FREQUENCY o

i

! SR 3.8.1.20 -------------------NOTE--------------------

l i

All DG starts may be preceded by an engine i prelube period.

1 ______....___________...__________.........

e

' Verify, when started simultaneously from 10 years j

standby condition, each DG achieves,.in 4

5 10 seconds, voltage t 3924 V and 1 5 4796 V, and frequency a 58.8 Hz and )

5 61.2 Hz. 1 1

1 t i I

? 1 4

1 1

i.

4 i

}

1 a

a s

i

(

4 i

i i

1 l SAN ON0FRE--UNIT 3 3.8-15 Amendment No. 116 1

, - , - - a

_ . .. . . - - - - . - - - _ - _ _ _ ~ - . - - - .- . -

1'--

AC Sources-Operating 1

B 3.8.1 i

j B 3.8 ELECTRICAL POWER SYSTEMS l

! B 3.8.1 AC Sources-0perating l BASES BACKGROUND The Class 1E Electrical Power Distribution System AC sources consist of the offsite power sources (preferred or normal power sources and alternate (s)), and the onsite standby power sources (Train A and . Train 8 diesel generators (DGs)).

As required by 10 CFR 50, Appendix A, GDC 17 (Ref. 1), the design of the AC electrical power system provides independence and redundancy to ensure an available source of power to the Engineered Safety Feature (ESF) systems.

The onsite Class IE AC Distribution System is divided into redundant load groups (trains) so that the loss of any one group does not prevent the minimum safety functions from being performed. Each train has connections to two preferred offsite power sources and a single DG.

One source of offsite power (Offsite circuit #1) for each unit is normally provided through Reserve Auxiliary

. transformers XR1 and XR2 for the specific unit. XR1 feeds one 4.16 KV ESF bus (Train A) A04 and XR2 feeds the other 4.16 KV ESF bus (Train B) A06 of the onsite Class IE AC distribution system for each unit. The second source of offsite power (Offsite circuit #2) is provided by the other unit's Reserve Auxiliary Transformers XR1 and XR2 through l the train oriented 4.16 KV ESF bus crossties between the two '

units. In addition, each class IE Switchgear can be connected to a third offsite power source via the Unit .

Auxiliary Transformers by manually removing the link in the !

isolated phase bus between the Main Generator and the Main transformer of the non-operating Unit and racking-in the 4.16 KV circuit breaker which is normally left racked-out (withdrawn) into the fully equipped cubicle connected to the Unit Auxiliary transformer of the same Unit.

An offsite circuit includes all breakers, transformers, switches, interrupting devices, cabling, and controls required to transmit power from the offsite transmission network to the onsite Class 1E ESF bus or buses.

Certain required unit loads are returned to service in a prer'atermined sequence in order to prevent overloading the transformer supplying offsite power to the onsite Class IE l

[

(continued) i SAN ON0FRE--UNIT 3 8 3.8-1 Amendment No. 116

AC Sources-Operating B 3.8.1 BASES BACKGROUND Distribution System. Within 77 seconds after the initiating (continued) signal is received, all automatic and permanently connected ,

loads needed to recover the unit or maintain it in a safe l condition are returned to service via the programmed time l interval load sequence.

1 The onsite standby power source for each 4.16 kV ESF bus is a dedicated DG. DGs G002 and G003 are dedicated to ESF l

' buses A04 and A06, respectively. A DG starts automatically on a safety injection actuation signal (SIAS) (i.e., low pressurizer pressure or high containment pressure signals) or on an ESF bus degraded voltage or undervoltage signal.

After the DG has started, it will automatically tie to its respective bus after offsite power is tripped as a consequence of ESF bus undervoltage or degraded voltage, independent of or coincident with an SIAS signal. The DGs !

will also start and operate in the standby mode without i 4

tying to the ESF bus on an SIAS alone. Following the trip )

of offsite power, an undervoltage signal strips nonpermanent j loads from the ESF bus. When the DG is tied to the ESF bus, 1 loads are then sequentially connected to its respective ESF l bus by the programmed time interval load sequence. The l sequencing logic controls the permissive and starting signals to motor breakers to prevent overloading the DG by automatic load application. 1 In the event of a loss of preferred power, the ESF electrical loads are automatically connected to the DGs in sufficient time to provide for safe reactor shutdown and to mitigate the consequences of a Design Basis Accident (DBA) such as a loss of coolant accident (LOCA).

Certain required unit loads are returned to service in a predetermined sequence in order to prevent overloading the DG in the process. Within 77 seconds after the initiating signal is received, all loads needed to recover the unit or maintain it in a safe condition are returned to service.

Ratings for Train A and Train B DGs satisfy the requirements of Regulatory Guide 1.9 (Ref. 3). The continuous service rating of each DG is 4700 kW with 10% overload permissible for up to 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months in any 24 hour2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months period. However, for standby class of service like the San Onofre DGs the manufacturer allows specific overload values up to 116.1% of continuous duty rating based on the total hours the DG is (continued)

SAN ON0FRE--UNIT 3 B 3.8-2 Amendment No. 116

AC Sources-Operating

, B 3.8.1 JBASES BACKGROUND operated per year. The ESF loads that are powered from the (continued) 4.16 kV ESF buses are listed in Reference 2.

I APPLICABLE The initial conditions of DBA and transient analyses in the i SAFETY ANALYSES UFSAR, Chapter 6 (Ref. 4) and Chapter 15 (Ref. 5), assume ESF systems are OPERABLE. The AC electrical power sources are designed to provide sufficient capacity, capability, j

redundancy, and reliability to ensure the availability of

' necessary power to ESF systems so that the fuel, Reactor Coolant System (RCS), and containment design limits are not exceeded. These limits are discussed in more detail in the Bases for Section 3.2, Power Distribution Limits; Section 3.4, Reactor Coolant System (RCS); and Section 3.6, Containment Systems.

! The OPERABILITY of the AC electrical power sources is 4 consistent with the initial assumptions of the accident i analyses and is based upon meeting the design basis of the

! unit. This results in maintaininc at least one train of the

onsite or offsite AC sources OPEFABLE during accident i

conditions in the event of:

! a. An assumed loss of all offsite power or all onsite AC

] power; and l b. A worst case single failure.

l The AC sources satisfy Criterion 3 of NRC Policy Statement.

i 4

LC0 Two qualified circuits between the offsite transmission network and the onsite Class 1E Electrical Power Distribution System and separate and independent cgs for i each train ensure availebility of the required power to shut down the reactor and maintain it in a safe shutdown condition after an anticipated operational occurrence (A00) or a postulated DBA.

Qualified offsite circuits are those that are described in the UFSAR and are part of the licensing basis for the unit.

(continued)

SAN ON0FRE--UNIT 3 8 3.8 3 Amendment No. 116

~ _ _ _ _ . _ _ _ . . . _ . _ - _ .___. ___ _ . .. _. . _. __

AC Sources-Operating B 3.8.1 BASES l

LC0 Each offsite circuit must be capable of maintaining rated (continued) frequency and voltage, and accepting required loads during i an accident, while connected to the ESF buses.

1

I One source of offsite power (Offsita circuit #1) for each {

unit is normally provided through Reserve Auxiliary l Transformers XR1 and XR2 for the specific unit. XR1 feeds '

one 4.16 KV ESF bus (Train A) A04 and XR2 feeds the other 4.16 KV ESF bus (Train B) A06 of the onsite Class IE AC

distribution system for each unit. The second source of t

offsite power (Offsite circuit #2) is provided by the other

unit's Reserve Auxiliary Transformers XR1 and XR2 through i the units. train oriented 4.16 KV ESF bus crossties between the two In addition, each class IE Switchgear can be 1

connected to a third offsite power source via the Unit 3

i Auxiliary Transformers by manually removing the link in the isolated phase bus between the Main Generator and'the Main transformer of the non-operating Unit and racking-in the 4.16 KV circuit breaker which is normally left racked-out (withdrawn) into the fully equipped cubicle connected to the

, Unit Auxiliary transformer of the same Unit.

4 Each DG must be capable of starting, accelerating to rated speed and voltage, and connecting to its respective ESF bus on detection of bus undervoltage. This will be accomplished within 10 seconds. Each DG must also be capable of accepting required loads within the assumed loading sequence intervals, and continue to operate until offsite power can be restored to the ESF buses. These capabilities are l l

required to be met from a variety of initial conditions such '

! as: DG in standby with the engine hot, DG in standby with i

the engine at ambient conditions, and DG operating in a parallel test mode. A DG is considered already operating if the DG voltage is a 3924 and s 4796 volts and the frequency i

is a 58.8 and 5 61.2 Hz.

i Proper sequercing of loads, including tripping of nonessential loads, is a required function for DG OPERABILITY.

The AC sources in one train must be separate and independent (to the extent possible) of the AC sources in the other train. For the DGs, separation and independence are ;

complete.

(continued)

SAN ONOFRE--UNIT 3 B 3.8-4 Amendment No. 116

AC Sources-Operating

B 3.8.1 BASES LC0 For the offsite AC sources, separation and independence are (continued) to the extent practical. A circuit may be connected to more than one ESF bus, with fast trana: Fer capability to the other

circuit OPERABLE, and not' violate separation criteria.

~

! l 4

APPLICABILITY The AC sources and associated automatic load seque:1ce timers are required to be OPERABLE in MODES 1, 2, 3, and 4 to ensure that:

a. Acceptable fuel design limits and reactor coolant pressure boundary limits are not exceeded as a result i

of A00s or abnormal transients; and

b. Adequate core cooling is provided and containment OPERABILITY and other vital functions are maintained in the event of a postulated DBA.

The AC power requirements for MODES 5 and 6 are covered in

! LC0 3.8.2, "AC Sources - Shutdown."

1

(

l l ACTIONS A.1 1

q To ensure a highly reliable power source remains with the i

one offsite circuit inoperable, it is necessary to verify the OPERABILITY of the remaining required offsite circuit on a more frequent basis. Since the Required Action only specifies " perform," a failure of SR 3.8.1.1 acceptance criteria does not result in a Required Action not met.

However, if a second required circuit fails SR 3.8.1.1, the second offsite circuit is inoperable, and Condition C, for two offsite circuits inoperable, is entered.

A.2 4

According to Regulatory Guide 1.93 (Ref. 6), operation may continue in Condition A for a period that should not exceed 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months . With one offsite circuit inoperable, the reliability of- the offsite system is degraded, and the potential for a loss of offsite power is increased, with attendant pctential for a challenge to the unit safety (continued)

SAN ON0FRE--UNIT 3 B 3.8-5 Amendment No. 116

AC Sources-Operating l B 3.8.1 A

BASES 1

1 SURVEILLANCE Where the SRs discussed herein specify voltage and frequency i REQUIREMENTS tolerances, the following is applicable. The minimum steady (continued) state output voltage of 3924 V is 90% of the nominal 4360 V i l

output voltage. This value, which is consistent with l t

ANSI C84.1-1982 (Ref.11), allows for voltage drop to the terminals of 4000 V motors whose minimum operating voltage

! is specified as 90% or 3600 V. It also allows for voltage drops to motors and other equipment down through the 120 V level where minimum operating voltage is also usually specified as 80% of name plate rating. The specified maximum steady state output voltage of 4796 V allows for the j maximum operating voltage specified for 4000 V motors. It ensures that for a lightly loaded distribution systea, tFa

voltage at the terminals of 4000 V motors is no more that the maximum rated operating voltages. The specified mivmum and maximum frequencies of the DG are 58.8 Hz and 61.2 Hz, respectively. These values are equal to 2% of the 60 Hz

, nominal frequency and are derived from the recommendations l given in Regulatory Guide 1.9 (Ref. 3).

SR 3.8.1.1 This SR assures proper circuit continuity for the offsite AC electrical power supply to the onsite distribution network and availability of offsite AC electrical power. The breaker alignment verifies that each breaker is in its correct position to etc re that distribution buses and loads are connected to their preferred power source, and that appropriate independence of offsite circuits is maintained.

The 7 day Frequency is adequate since breaker position is not likely to change without the operator being aware of it and because its status is displayed in the control room.

SR 3.8.1.2 and SR 3.8.1.7 These SRs help to ensure the availability of the standby electrical power supply to mitigate DBAs and transients and to maintain the unit in a safe shutdown condition. 1 To minimize the wear on moving parts that do not get ,

lubricated when the engine is not running, these SRs are l modified by a Note (Note 2 for SR 3.8.1.2) to indicate that l all DG starts for these Surveillances may be preceded by an (continued)

SAN ON0FRE--UNIT 3 8 3.8-14 Amendment No. 116 l

l

AC Sources-Operating B 3.8.1 BASES SURVEILLANCE SR 3.8.1.2 and SR 3.8.1.7 (continued)

REQUIREMENTS engine prelube period and followed by a warmup period prior to loading.

For the purposes of SR 3.8.1.2 and SR 3.8.1.7 testing, the DGs are started from standby conditions. Standby conditions for a DG mean the diesel engine coolant and oil are being continuously circulated and temperature is being maintained consistent with manufacturer recommendations.

In order to reduce stress and wear on diesel engines, the DG manufacturer recommends a modified start in which the starting speed of DGs is limited, warmup is limited to this lower speed, and the DGs are gradually accelerated to synchronous speed prior to loading. This is the intent of Note 3.

SR 3.8.1.7 requires that, at a 184 day Frequency, the DG starts from standby conditions and achieves required voltage and frequency within 10 seconds. The 10 second start requirement supports the assumptions of the design basis LOCA analysis in the UFSAR, Chapter 15 (Ref. 5).

The 10 second start requirement is not applicable to SP, 3.8.1.2 (see Note 3) when a modified start procedure as described above is used.

Since SR 3.8.1.7 requires a 10 second start, it is more restrictive than SR 3.8.1.2 and it may be performed in lieu of SR 3.8.1.2. This is the intent of Note 1 of SR 3.8.1.2.

The normal 31 day Frequency for SR 3.8.1.2 (see Table 3.8.1-1, " Diesel Generator Test Schedule," in the accompanying LC0) and the 184 day Frequency for SR 3.8.1.7 are consistent with Regulatory Guide 1.9 (Ref. 3). These Frequencies provide adequate assurance of DG OPERABILITY, while minimizing degradation resulting from testing.

SR 3.8.1.3 This Surveillance verifies that the DGs are capable of synchronizing with the offsite electrical system and accepting loads greater than or equal to the equivalent of (continued)

DAN ON0FRE--UNIT 3 8 3.8-15 Amendment No. 116

AC Sources-Operating B 3.8.1 BASES SURVEILLANCE SR 3.8.1.3 (continued)

REQUIREMENTS l the maximum expected accident loads listed in Reference 2.

A minimum run time of 60 minutes is required to stabilize

engine temperatures, while minimizing the time that the DG l

is connected to the offsite source.

Although no power factor requirements are established by this SR, the DG is normally operated at a power factor between 0.8 lagging and 1.0. The 0.8 value is the design rating of the machine, while 1.0 is an operational i j limitation to ensure circulating currents are minimized. i The normal 31 day Frequency for this Surveillance

(Table 3.8.1-1) is consistent with Regulatory Guide 1.9 (Ref. 3).

This SR is modified by four Notes. Note 1 indicates that ;

l diesel engine runs for this Surveillance may include gradual !

j loading, as recommended by the manufacturer, so that mechanical stress and wear on the diesel engine are ,

minimized. Note 2 states that momentary transients because i of changing bus loads do not invalidate this test. j Similarly, momentary power factor transients above the limit will not invalidate the test. Note 3 indicates that this Surveillance should be conducted on only one DG at a time in order to avoid common cause failures that might result from offsite circuit or grid perturbations. Note 4 stipulates a prerequisite requirement for performance of this SR. A l successful DG start must precede this test to credit satisfactory performance.

\

SR 3.8.1.4 This SR provides verification that the level of fuel oil in the day tank is at or above the level selected to ensure adequate fuel oil for a minimum of 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months of DG operation at full load plus 10%. The level is expressed as an equivalent volume in inches. The 30 inch level corresponds to 355.1 gallons of fuel oil including instrument uncertainties.

The 31 day Frequency is adequate to assure that a sufficient supply of fuel oil is available, since low level alarms are (continead) 2 SAN ONOFRE--UNIT 3 8 3.8-16 Amendment No. 116

AC Sources-Operating ;

B 3.8.1 {

BASES l

l SVRVEILLANCE SR 3.8.1.4 (continued)

REQUIREMENTS l provided and unit operators would be aware of any large uses i of fuel oil during this period. j SR 3.8.1.5 i

Microbiological fouling is a major cause of fuel oil degrcdation. There are numerous microorganisms that can grow in fuel oil and cause fouling, but all must have a j

water environmentsin order to survive. Removal of water l from the fuel oil day tanks once every 31 days eliminates the necessary environment for microbial survival in the day I tanks. This is the most effective means of controlling microbiological fouling. In addition, it eliminates the potential for water entrainment in the fuel oil during DG ,

operation. Water may come from any of several sources, l including condensation, ground water, rain water, contaminated fuel oil, and from breakdown of the fuel oil by l microorganisms. Frequent checking for and removal of '

accumulated water minimizes fouling and provides data regarding the watertight integrity of the fuel oil system. l The Surveillance Frequencies are established by Regulatory Guide 1.137 (Ref. 10). This SR is for preventive maintenance. The presence of water does not necessarily represent failure of this SR provided the accumulated water is removed during the performance of this Surveillance.

SR 3.8.1.6 This Surveillance demonstrates that each required fuel oil transfer pump operates and transfers fuel oil from its associated storage tank to its associated day tank. This is required to support continuous operation of standby power sources. This Surveillance provides assurance that the fuel oil transfer pump is OPERABLE, the fuel oil piping system is intact, the fuel delivery piping is not obstructed, and the controls and control systems for automatic fuel transfer systems are OPERABLE.

The design of fuel transfer systems is such that pumps will operate automatically or .ust be started manually in order (continued)

SAN ON0FRE--UNIT 3 8 3.8-17 Amendment No. 116

- . ~ . . . _ . - - - - . - . _ _ - - _ - - . . - _ - . - . - - - - - _ -

= . -

1 1

AC Sources-Operating

} B 3.8.1 4,

j BASES SURVEILLANCE SR 3.8.1.6 (continued)

REQUIREMENTS to maintain an adequate volume of fuel oil in the day tanks during or following DG testing. In such a case, a 31 day l

Frequency is appropriate.

SR 3.8.1.7 See SR 3.8.1.2. I i, I 1

S' SR 3.8.1.8 Transfer of each 4.16 kV ESF bus power supply from the i normal offsite circuit to the alternate offsite circuit '

demonstrates the OPERABILITY of the alternate circuit

distribution network to power the shutdown loads. The 24 month Frequency of the Surveillance is based on

engineering judgment, taking into consideration the unit cond,tions required to perform the Surveillance, and is i

intended to be consistent with expected fuel cycle lengths. I i

' Operating experience has shown that these components usually pass the SR when performed at the 24 month Frequency Therefore, the Frecuency was concluded to be acceptable from l

a reliability stancpoint.

This SR is modified by a Note which acknowledges that credit 4

may be taken for unplanned events that satisfy this SR.

i j SR 3.8.1.9 Each DG is 3rovided with an engine overspeed trip to prevent damage to tie engine. Recovery from the transient caused by the loss of a large load could cause diesel tr,gine

! overspeed, which, if excessive, might result in a trip of 2

the engine. This Surveillance demonstrates the DG load response characteristics and capability to reject the s

largest single load without exceeding predetermined voltage and frequency and while raaintaining a specified margin to the overspeed trip. For this unit, tr.e single load for each DG is the Auxiliary Feedwater pump and its horse)ower rating is 800 HP. As required by IEEE-308 (Ref.13), tie load rejection test is acceptable if the increase in diesel speed does not exceed 75% of the difference between synchronous 1

4 (continued) i SAN ON0FRE--UNIT 3 B 3.8-18 Amendment No. 116

AC Sources-0perating B 3.8.1 BASES SURVEILLANCE SR 3.8.1.9 (continued)

REQUIREMENTS speed and the overspeed trip setpoint, or 15% above synchronous speed, whichever is lower.

I The time, voltage, and frequency tolerances specified in i this SR are derived from Regulatory Guide 1.9 (Ref. 3) l recommendations for response during load sequence intervals.

The 4 seconds specified is equal to 80% of a typical 5 second load sequence interval associated with sequencing I of the largest load. The voltage and frequency specified are consistent with the design range of the equipment powered by the DG. SR 3.8.1.9.a corresponds to the maximum frequency excursion, while SR 3.8.1.9.b and SR 3.8.1.9.c are steady state voltage and frequency values to which the system must recover following load rejection. The 24 month Frequency is consistent with the recommendation of Regulatory Guide 1.9 (Ref. 3).

1 In order to ensure that the DG is tested under load I conditions that are as close to design basis conditions as possible, testing is performed using design basis kW loading i and maximum kVAR loading permitted during testing. These loadings represent the inductive loading that the DG would experience to the extent practicable and is consistent with the intent of Regulatory Guide 1.9 (Ref. 3).

This SR is modified by a Note which acknowledges that credit may be taken for unplanned events that satisfy this SR.

SR 3.8.1.10 This Surveillance demonstrates the DG capability to reject a load equal to 94.5% to 100% of its continuous rating without overspeed tripping or exceeding the predetermined voltage limits. The DG full load rejection may occur because of a system fault or inadvertent breaker tripping. This Surveillance ensures proper engine generator load response under the simulated test conditions. This test simulates the loss of the total connected load that the DG experiences following a full load rejection and verifies that the DG will not trip upon loss of the load. These acceptance crit.eria provide DG damage protection. While the DG is not expceted to experience this transient during an event and (continued)

SAN ON0FRE--UNIT 3 8 3.8-19 Amendment No. 116

i !

L AC Sources-Operating B 3.8.1 BASES SURVEILLANCE SR 3.8.1.10 (continued)

REQUIREMENTS 4

continues to be available, this response ensures that the DG

.is not degraded for future application, including reconnection to .the bus if the trip initiator can be corrected or isolated. These loads and limits are 4

consistent with Regulatory Guide 1.9 (Ref. 3). In order to ensure that the DG is tested under load conditions that are l

1

' as close to design basis conditions as possible, testing is performed using design basis kW loading and maximum kVAR i

' loading permitted during testing. These loadings represent the inductive. loading that the DG would experience to the !

i extent practicable and is consistent with the intent of i Regulatory Guide 1.9 (Ref. 3).

i The 24 month Frequency is consistent with the recommendation i of Regulatory Guide 1.9 (Ref. 3) and is intended to be consistent with expected fuel cycle lengths.

This SR is modified by a Note'which acknowledges that credit I may be taken for unplanned events that satisfy this SR. l SR 3.8.1.11 As required by Regulatory Guide 1.9 (Ref. 3), this Surveillance demonstrates the as designed operation of the standby power sources during loss of the offsite source.

This test verifies all actions encountered from the loss of offsite power, including shedding of the nonessential loads and energization of the emergency buses and respective loads from the DG. It further demonstrates the capability of the

DG to automatically achieve the required voltage and frequency within the specified time.

4 2

The DG auto-start time of 10 seconds is derived from requirements of the accident analysis to respond to a design basis large break LOCA. The frequency should be restored to within 2% of nominal following a load sequence step. The

" Surveillance should be continued for a minimum of 5 minutes in order to demonstrate that all starting transients have decayed and stability has been achieved.

The requirement to verify the connection and power supply of permanent loads is intended to satisfactorily show the (continued) i SAN ON0FRE--UNIT 3 8 3.8-20 Amendment No. 116

-.. - . . - - - . . . - ~ _ _ _ - - _ . _ . _ . - . - . ___. .. ..- .

AC Sources-Operating 4

i B 3.8.1 BASES SURVEILLANCE SR 3.8.1.11 (continued)

REQUIREMENTS j relationship of these loads to the DG loading logic. In a

certain circumstances, many of these loads cannot actually l be connected or loaded without undue hardship or potential

for undesired operation.

For instance, Emergency Core Cooling Systems (ECCS)

' injection valves are not desired to be stroked open, high pressure injection systems are not capable of being operated at full flow, or shutdown cooling (SDC) systems performing a decay heat removal function are not desired to be realigned to the ECCS mode of operation. In lieu of actual demonstration of connection and loading of loads, testing that adequately shows the capability of the DG system to perform these functions is acceptable. This testing may include any series of sequential, overlapping, or total steps so that the entire connection als loading sequence is verified.

The Frequency of 24 months is consistent with the recommendations of Regulatory Guide 1.9 (Ref. 3), takes'into consideration unit conditions required to perform the Surveillance, and is intended to be consistent with expected fuel cycle lengths.

This SR is modified by two Notes. The reason for Note 1 is to minimize wear and tear on the DGs during testing. For the purpose of this testing, the DGs must be started from standby conditions, that is, with the engine coolant and oil continuously circulated and temperature maintained consistent with manufacturer recommendations. Note 2 acknowledges that credit may be taken for unplanned events that satisfy this SR.

SR 3.8.1.12 This Surveillance demonstrates that the DG automatically starts and achieves the required voltage and frequency within the specified time (10 seconds) from the design basis actuation signal and operates for a 5 minutes. The 5 minute period provides sufficient time to demonstrate stability.

(continued)

SAN ON0FRE--UNIT 3 8 3.8-21 Amendment No. 116

AC Sources-Operating B 3.8.1 BASES SURVEILLANCE SR 3.8.1.12 (continued)

REQUIREMENTS The Frequency of 24 months is consistent with Regulatory Guide 1.9 (Ref. 3), takes into consideration unit conditions required to perform the Surveillance, and is intended to be consistent with the expected fuel cycle lengths. Operating experience has shown that these components usually pass the SR when performed at the 24 month Frequency. Therefore, the Frequency was concluded to be acceptable from a reliability standpoint.

This SR is modified by two Notes. The reason for Note 1 is to minimize wear'a'nd tear on the DGs during testing. For the purpose of this testing, the DGs must be started from standby conditions, that is, with the engine coolant and oil continuously circulated and temperature maintained consistent with manufacturer recommendations. Note 2 acknowledges that credit may be taken for unplanned events that satisfy this SR.

SR 3.8.1.13 This Surveillance demonstrates that DG noncritical protective functions (e.g., high jacket water temperature) are bypassed on a loss of voltage signal concurrent with an ESF actuation test signal in accordance with Reference 3.

The critical protective functions (engine overspeed, generator differential current, and low-low lube oil pressure), which trip the DG to avert substantial damage to the DG unit, are not bypassed. The noncritical trips are bypassed during DBAs and provide an alarm on an abnormal engine condition. This alarm provides the operator with sufficient time to react appropriately. The DG availability to mitigate the DBA is more critical than protecting the engine against minor problems that are not immediately detrimental to emergency operation of the DG.

The 24 month Frequency is based on engineering judgment, taking into consideration unit conditions required to perform the Surveillance, and is intended to be consistent with ex)ected fuel cycle lengths. Operating experience has shown tlat these components usually pass the SR when performed at the 24 month Frequency. Therefore, the Frequency was concluded to be acceptable from a reliability standpoint.

(continued)

SAN ON0FRE--UNIT 3 8 3.8-22 Amendment No. 116 12/21/96

AC Sources -Operating ,

8 3.8.1 l BASES 1

SURVEILLANCE SR 3.8.1.13 (continued)

REQUIREMENTS The SR is modified by a Note which acknowledges that credit may be taken for unplanned events that satisfy this SR.

SR 3.8.1.14 Regulatory Guide 1.9 (Ref. 3), requires demonstration once per refueling outage that the DGs can start and run continuously at full load capability for an interval of not less than 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months , a 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months of which is at load equivalent to 105% to 110% of the continuous duty rating and the !

remainder of the time at a load equivalent to 90% to 100% of !

the continuous duty rating of the DG. The DG starts for this Surveillance can be performed either from standby or hot conditions. The provisions for prelubricating and warmup, discussed in SR 3.8.1.2, and for gradual loading.

discussed in SR 3.8.1.3, are applicable to this SR.

In order to ensure that the DG is tested under load conditions that are as close to design conditions as possible, testing is performed using the maximum kVAR loading permitted during testing. This loading represents the inductive loading that the DG would exoerience and is consistent with Regulatory Guide 1.9 (Ref. 3). The load i band is provided to avoid routine overloading of the DG. '

routine overloading may result in more frequent teardown inspections in accordance with vendor recommendations in order to maintain DG OPERABILITY.

The 24 month Frequency is consistent with the recommendations of Regulatory Guide 1.9, (Ref. 3), takes l into consideration unit conditions required to perform the Surveillance, and is intended to be consistent with expected fuel cycle lengths.

This Surveillance is modified by two Notes. Note 1 states that momentary transients due to changing bus loads do not invalidate this test. Similarly, momentary power factor transients above the power factor limit will not invalidate the test. Note 2 acknowledges that credit may be taken for unplanned events that satisfy this SR.

4 (continued)

SAN ON0FRE--UNIT 3 8 3.8-23 Amendment No. 116 9

AC Sources-Operating B 3.8.1 )

BASES l

SURVEILLANCE SR 3.8.1.15 REQUIREMENTS (continued) This Surveillance demonstrates that the diesel engine can restart from a hot condition, such as subsequent to shutdown from normal Surveillances, and achieve the required voltage and frequency within 10 seconds. The 10 second time is derived from the requirements of the accident analysis to respond to a design basis large break LOCA. The 24 month Frequency is consistent with the recommendations of Regulatory Guide 1.9 (Ref. 3) and is intended to be consistent with expected fuel cycle lengths. l This SR is modified by two Notes. Note 1 ensures that the test is performed with the diesel sufficiently hot. The load band is provided to avoid routine overloadina of the DG. Routine overloads may result in more frequent teardown inspections in accordance with vendor recommendations in i order to maintain DG OPERABILITY. The requirement that the '

diesel has overated for at least 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months at full load conditions prier to performance of this Surveillance is based on manufacturer recommendations for achieving hot conditions. Momintary transients due to changing bus loads l do not invalidate this test. Note 2 allows all DG starts to '

be preceded by an engine prelube period to minimize wear and tear on the diesel during testing SR 3.8.1.16 As required by P.egalatory Guide 1.9 (Ref. 3), this Surveillance ensures synchronization and automatic load transfer from the DG to the offsite source can be made and that the DG can be returned to ready to load operation when offsite power is testored. Ready to load operation is defined as the DG running at rated speed and voltage with the DG output breake open. By design, the LOVS/SDVS/DGVSS logic will have been previously reset thus allowing the DG to reload if a subsequent loss of offsite power or degraded voltage condition occurs. The LOVS/SDVS/DGVSS signal will strip the bus, reset the load sequence timers, close the DG output breaker, and permit resequencing of the ESF loads if an ESF actuation signal is present.

The Frequency of 24 months is consistent with the recommendations of Regulatory Guide 1.9 (Ref. 3), takes into consideration unit conditions required to perform the (continued)

SAN ON0FRE--UNIT 3 B 3.8-24 Amendment No. 116 1/13/1997

4 AC Sources-Operating B 3.8.1 BASES i

SURVEILLANCE SR 3.8.1.16 (continued)

REQUIREMENTS This SR is modified by a Note which acknowledges that credit may be taken for unplanned events that satisfy this SR.

I SR 3.8.1.17 Demonstration of the test mode override ensures that the DG availability under accident conditions will not be compromised as the result of testing and the DG will i

automatically reset to ready to load operation if an SIAS is received curing operation in the test mode. Ready to load operation is defined as the DG running at rated speed and voltage with the DG output breaker open. These provisions for automatic switchover are required by IEEE-308 (Ref.13),

paragraph 6.2.6(2) and Regulatory Guide 1.9 (Ref. 3).

The requirement to automatically energize the emergency loads with offsite power is essentially identical to that of SR 3.8.1.12. The intent in the requirement associated with SR 3.8.1.17.b is to show that the emergency loading was not affected by the OG operation in test mode. In lieu of actual demonstration of connection and loading of loads, testing that adequately shows the capability of the emergency loads to perform these functions is acceptable.

This testing may include any series of sequential, overlapping, or total steps so that the entire connection and loading sequence is verified.

The 24 month Frequency is consistent with the recommendations of Regulatory Guide 1.9 (Ref. 3), takes into consideration unit conditions required to perform the

' Surveillance, and is intended to be consistent with expected fuel cycle lengths.

4 This SR is modified by a Note which acknowledges that credit may be taken for unplanned events that satisfy this SR.

(continued)

SAN ON0FRE--UNIT 3 8 3.8-25 Amendment No. 116 May 2, 1997

AC Sources-Operating 8 3.8.1 l BASES SURVEILLANCE SR 3.8.1.18 REQUIREMENTS (continued) As required by Regulatory Guide 1.108 (Ref. 9),

paragraph 2.a.(2), each DG is required to demonstrate proper operation for the DBA loading sequence to ensure that !

voltage and frequency are maintained within the required l limits. Under accident conditions, prior to connecting the l DGs to their respective buses, all loads are shed except load center feeders and those motor control centers that power Class 1E loads (referred to as " permanently connected' loads). Upon reaching 90% of rated voltage and frequency, the DGs are then connected to their res3ective buses. Loads are then sequentially connected to the aus by the programmed time interval load sequence. The sequencing logic controls the permissive and starting signals to motor breakers to prevent overloading of the DGs due to high motor starting currents. The 10% load sequence start time tolerance ensures that sufficient time exists for the DG to restore frequency and voltage prior to applying the next load and that safety analysis assumptions regarding ESF ecuipment time delays are not violated. Reference 2 provices a summary of the automatic loading of ESF buses.

For the Containment Emergency Cooling Units only, the sequenced time is the actual start time of the Component Cooling Water pumps plus 5 0.5 seconds. The tolerance is based on a design interval of 5 seconds.

The Frequency of 24 months is consistent with the recommendations of Regulatory Guide 1.108 (Ref. 9),

paragraph 2.a.(2); takes into consideration unit conditions required to perform the Surveillance; and is intended to be consistent with expected fuel cycle lengths.

This SR is modified by a Note which acknowledges that credit may be taken for unplanned events that satisfy this SR.

SR 3.8.1.19 In the event of a DBA coincident with a loss of offsite power, the DGs are required to supply the necessary power to ESF systems so that the fuel, RCS, and containment design limits are not exceeded.

This Surveillance demonstrates the DG operation, as discussed in the Bases for SR 3.8.1.11, during a loss of offsite power actuation test signal in conjunction with an ESF actuation signal (SIAS). In lieu of actual (continued)

SAN ON0FRE--UNIT 3 8 3.8-26 Amendment No. 116 01/30/97

{

l AC Sources-0perating B 3.8.1 BASES I SURVEILLANCE SR 3.8.1.19 (continued)

REQUIREMENTS demonstration of connection and loading of loads, testing that adequately shows the capability of the DG system to perform these functions is acceptable. This testing may include any series of sequential, overlapping, or total steps so that the entire connection and loading sequence is

-verified.

The Frequency of 24 months takes into consideration unit conditions required to perform the Surveillance and is intended to be consistent with an expected fuel cycle length of 24 months.

This SR is modified by two Notes. The reason for Note 1 is to minimize wear and tear on the DGs during test'.ng. For the purpose of this testing, the DGs must be started from standby conditions, that is, with the engine coolant and oil continuously circulated and temperature maintained consistent with> manufacturer recommendations for DGs.

, Note 2 acknowledges that credit may be taken for unplanned events that satisfy this SR.

SR 3.8.1.20 This Surveillance demonstrates that the DG starting independence has not been compromised. Also, this Surveillance demonstrates that each engine can achieve proper speed within the specified time when the DGs are started simultaneously.

The 10 year Frequency is consistent with the recommendations of Regulatory Guide 1.108 (Ref. 9), paragraph 2.b, Regulatory Guide 1.137 (Ref.10), paragraph C.2.f, and Regulatory Guide 1.9 (Ref. 3).

This SR is modified by a Note. The reason for the Note is to minimize wear on the DG during testing. For the purpose of this testing, the DGs must be started from standby conditions, that is, with the er.gine coolant and oil continuously circulated, and temperature maintained consistent with manufacturer recommendations.

(continued)

SAN ON0FRE--UNIT 3 8 3.8-27 Amendment No. 116

AC Sources-Operating

i. B 3.8.1 i BASES l

\

SURVEILLANCE Diesel Generator Test Schedule )

REQUIREMENTS (continued) The DG test schedule (Table 3.8.1-1) implements the recommendations of Revision 3 to Regulatory Guide 1.9 (Ref. 3) . The purpose of this test schedule is to provide timely test data to establish a confidence level associated l with the goal to maintain DG reliability above 0.95 per demand.

According to Regulatory Guide 1.9, Revision 3 (Ref. 3), each DG unit should be tested at least once every 31 days.

According to Draft Regulatory Guide DG-1021 (Ref.14) and 1 i

10 CFR 50.63(a)(3)(ii) (Ref. 15), whenever a DG has experienced 4 or more valid failures in the last 25 valid tests, the maximum time between tests is reduced to 7 days.

Four failures in 25 valid tests is a failure rate of 0.16, or the threshold of acceptable DG performance, and hence may be an early indication of the degradation of DG reliability. !

When considered in the light of a long history of tests, however, 4 failures in the last 25 valid tests may only be a statistically probable distribution of random events.

Increasing the test Frequency will allow for a more timely accumulation of additional test data upon which to base judgment of the reliability of the DG. The increased test Frequency must be maintained until seven consecutive, failure free tests have been performed.

The Frequency for accelerated testing is 7 days, but no less than 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months . Therefore, the interval between tests should be no less than 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months , and no more than 7 days. A successful test at an interval of less than 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months should be considered an invalid test and not count towards the seven consecutive failure free starts. A test interval in excess of 7 days constitutes a failure to meet the SRs.

REFERENCES 1. 10 CFR 50, Appendix A, GDC 17,

2. UFSAR, Chapter 8.

3. Regulatory Guide 1.9, Rev. 3.

4. UFSAR, Chapter 6.

(continued) i SAN ON0FRE--UNIT 3 8 3.8-28 Amendment No. 116

. _ . . , - - =

1 AC Sources-0perating B 3.8.1 BASES REFERENCES 5. UFSAR, Chapter 15.

(continued)

6. Regulatory Guide 1.93, Rev. O.

7. Generic Letter 84-15.

1

8. 10 CFR 50, Appendix A, GDC 18. l l

9. Regulatory Guide 1.108, Rev. 1. !

10. Regulatory Guide 1.137, Rev. 1.

11. ANSI C84.1-1982. l

12. ASME, Boiler and Pressure Vessel Code,Section XI.

13. IEEE Standard 308-1978.

14. Draft Regulatory Guide DG-1021, April 1992.

15. 10 CFR 50.63(a)(3)(ii) as published in Federal Register Vol. 57, No. 77 page 14517, April 21, 1992.

SAN ON0FRE--UNIT 3 B 3.8-29 Amendment No. 116

NPF-10/15-478 1

l l

l J

l l

l ATTACHMENT "C" (Proposed Specifications and Bases)

Unit 2 l

l l

AC Sources-Operating 3.8.1 SURVEILLANCE REQUIREMENTS (continued)

SVRVEILLANCE FREQUENCY l 1

l SR 3.8.1.2 -------------------NOTES-------------------

1. Performance of SR 3.8.1.7 satisfies this SR.

2. All DG starts may be preceded by an engine prelube period and followed by a warmup period prior to loading.

3. A modified DG start involving idling and gradual acceleration to synchroncus ritie~d speed may be used for this SR as"re' commended by the manufacturer. When modified start ,

procedures are not used, the time, l voltage, and frequency tolerances of SR 3.8.1.7 must be met.

l

, Verify each DG starts from standby As specified in conditionsandachievesj Table 3.8.1-1 a?

"' sSteady state voltage t 1924 4297,V ~~

aKd547964576Vr]and b_77.5..~Iiid ~s '61!2 'Hz .Stiady'stIIe

"' frequency a 58 8 59I7 Hz (continued)

SAN ON0FRE--UNIT 2 3.8-5 Amendment No. 4 N

1 i

AC Sources-Operating l

3.8.1 l

SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY SR 3.8.1.7 ------------------NOTES--------------------

17

'~" All DG starts may be preceded by an engine prelube period.

~W'3 2 C Fs'd i tTmiy;bEtik66l fo p :un pl anited l ' Gents ;thati sitisfy;this SR.'~ ~~" 184 days l

.. ... C '.".*. W . L'.'. T.. r :2 .~.T r it.'.~.*. . .... ... .

Vcrify cach DC start; frcm standby c-enditica :nd achieves, in r 10 cccends, vcitage ' 2021 V :nd r 1705 V, and frequency ? 58.8 H: and r 61.2 Hz.

1 Ve71fyTei'ch'DG'stiFti fr66'stihdby

" ~ ~ ' ~~~ !

bondit.. ion and:

~ ._. '

F.'~'VIhW'9~.4 c._secand_iTib..h. a ~i sf. e'sTol tigd.

a .42_97!Vi t

~~ mm _andsfrequency 2:' 59.7 Hz;..

1 b .' :"Mii h ta iWs #s t eadfist a t e7 vol t aid

~~T4297 - !.V_! s nd_ l~s ! 4576.i V ; la nd,^"

. . _ . . _ . . . _ I

'"~qMai_nt_ains:st._dy.

c . i. ea ,_ tat,e as tfr_e_qu.____f enc 4 hT5n. 7 'Hi.?. .i.n.'d.Es

61222?Hi. f" ~~ "

SR 3.8.1.8 -------------------NOTE------------------

Credit may be taken for unplanned events that satisfy this SR.

Verify automatic and manual transfer of AC 24 months power sources from the normal offsite circuit to each alternate required offsite circuit.

(continued) t i SAN ON0FRE--UNIT 2 3.8-7 Amendment No. 4N

AC Sources-Operating 3.8.1 '

SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY SR 3.8.1.9 -------------------NOTE-------------------

Credit may be taken for unplanned events that satisfy this SR.

Verify each DG, when operating with design 24 months basis kW loading and maximum kVAR loading permitted during testing, rejects a load a 682 kW, and:

a. Following load rejection, the frequency is s 66.75 Hz;

b. Within 4 seconds following load rejection, the voltage is a 3924 V and 5 4796 V; and 1

c. Within 4 seconds following load rejection, the frequency is a 58.8 Hz and 5 61.2 Hz.

SR 3.8.1.10 -------------------NOTE-------------------

Credit may be taken for unplanned events that satisfy this SR.

Verify each DG, when Eohdett5djtbTitEblis 24 months ihyarallellwith'~6ff5ite owe 6 p e r s t'i riig li t h ~dsi pi b n pIk"ya n d ~~ '155 ding and maximum kVM leading permitted during testing, dec: not trip and vcitage is maintained 5 5450 V induct'iviloadingLthat i 6 f f s i tiVoiseK cbnd i t'16n s7 pevmi ti~d uF i 6s" add I foll6 wing ~a~16ad~rsjiction~6f't"4450 kW and 5 4700 kWi

a. ?Does=not trip;Tand b; ' Voltage _i's maintained ~s 5450;V.

(continued) I l

SAN ONOFRE--UNIT 2 3.8-8 Amendment No. 4N ;

i

AC Sources-Operating 3.8.1 SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY SR 3.8.1.11 -------------------NOTES------------------- !

1. All DG starts may be preceded by an I engine prelube period.

2. Credit may be taken for unplanned events that satisfy this 3R.

Verify on an actual or simulated loss of 24 months offsite power. signal:

a. De-energization of emergency buses;

b. Load shedding from emergency buses;

c. DG autt-starts from standby condition and:

1. - energizes permanently connected loads iWd!fssetRthT[4716kVEbus UEd6Woltig'd'/Fdlif'lohib~in"~

s*10 secondsr j

2. maintains steady state voltage a 3934 4297, V and 5 47-96 45]76 Vf

3. maintains steady state frequency a68r85977Hzand561.2Hzd and

~~"

4. supplies permanently connected loads for a 5 minutes.

(continued) ;

SAN ON0FRE--UNIT 2 3.8-9 Amendment No. 4N

AC Sources-Operating 3.8.1 I

1 SURVEILLANCE REQUIREMENTS (continued) !

l SURVEILLANCE FREQUENCY SR 3.8.1.12 -------------------NOTES-------------------

1. All DG starts may be preceded by an engine prelube period.

2. Credit may be taken for unplanned events that satisfy this SR. 1 Verify on :n actua' cr :imu'ated Enginecred 24 months e .,c.

. . .- +,.,, e .,+,

.m reee o _, . m . ,s ..... --+..,u.-.. . . . - u....

, . . , , - , u, DC cute starts frc= :tandby conditica and:

l l

. In 5 10 Occc;;d: after aute start and during s

tc:ts, achievc: voltage

$nOA- , 11 .s . . A e- ,A 9, h. c 19 i

b. In r 10 ccend: after aute : tart and '

during EO tc:t , achieve: frequency S

vv.Ow i sU,a. , A u..u e C9 vT".*9 w s U. 6 3 .%=A .sw

c. Operate for 2 5 minutes.

Ver.ify.7,on;an,actuaDore simulated SIAS,2each.

.DG.$ut6_?st' art si.. f. r.6.ifst aid b'y'. bo nd i.t i a_nf_And. i.

a.y.y v n"yI F v&

9y4;second*m

w sr achievestvoltage t

"^ r4.~297AV

~- ~ an.d 'fregileic.yX.59.7!H~z;"

~ .n .---.

bF"Miihti^i 5sTitsidfIstit~eT@l tTg5

~~~~ n1429.

m 7_5Vd.ahd w 's;45765Vf. ~' ~"

bETMiiiitiin~sTst adyTitstsifrhqiiedcy,

~t.359.7,t

~ - Hz ,and 5an6 7..2 EHz; 4and ^^

di 70iisFitss';f6FE15'niiisfe~i?

=$. ** w h. eu 6.4 (continued)

SAN ON0FRE--UNIT 2 3.8-10 Amendment No. 4N

l l

AC Sources-Operating 3.8.1 SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY SR 3.8.1.13 -------------------NOTE-------------------

Credit may be taken for unplanned events that satisfy this SR. i l

l 1 Verify each DG automatic trip is bypassed 24 months on actual or simulated lo:: cf vcitage l l cignal en the c crgency bu: concurrent with

n ;ctual er ;imulated ESF ;ctu;tien signci SIA,S except:

L a. Engine overspeed;

b. Generator differential current; and

c. Low-low lube oil pressure.

(continued)

SAN ON0FRE--UNIT 2 3.8-11 Amendment No. 447

I 1

AC Sources-Operating 3.8.1 1

1 SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY l CR 3.8.1.14 -------------------NOTES-------------------

1. Momentary transients outside the load .

l and power factor ranges does not I invalidate this test.

l

2. Credit may be taken for unplanned events that satisfy this SR.

1 Verify each DG, when c6nNEct~ed[t5"itEbbs 24 months i d~Jurill el Tw i th"o f fs i te Tpower.. and '

~

'obiratirig with~the'taxid0f kVAR ^ inductive loading permitted during testing"thit""'"

df fs~i t~e sp~o~weiW6~nd i t'i 65's'Ve r~m i t , 6 peYa t e s fo N 2 O o 0 F s ' ~ '"' '"' ~ ~~' ~~ ~

a. For a 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months loaded a 4935 kW and 5 5170 kW; and

b. For the remaining hours of the test loaded a 4450 kW and 5 4700 kW.

(continued)

SAN ON0FRE--UNIT 2 3.8-12 Amendment No. 447

AC Sources-Operating i

3.8.1 SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY 1

SR 3.8.1.15 -------------------NOTES-------------------

l 1. This Surveillance shal1 ~ be performed 2

within 5 minutes of shutting down the DG after the DG has operated a 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months l loaded a 4450 kW and 5 4700 kW. i Momentary transients outside of the l 1

load range do not invalidate this ~

, test. .

l

2. All DG starts may be preceded by an engine prelube period.

Verify cach DC start; and achicycc, in 5 le 24 months

ccend , vcitage 2 3924 V and s 4705 V, and frequency a 50.8 Hz and s 51.2 H ; and epcrate: a 5 mintuc .

l Verifeeajch;DG; star.ts"and~

a.7"NInT 9.741secondsFhch'isVniiVoltads

'a ; 4,2971

- ~Vs

. an.d 4fr_e'quency-.-'t 59.7; Hz; ~

bTO Mii htii di~itisdFs t~5tEV51 t'a~g s

~a;4297!V.-ian.d tsl.45_76_3V_;

""" ~ ~'

E'. O Mai htii hi~s~tisdfistit'el fr^equiridi Hzc: -and s_ i H z; an.d " '

"~~ tJ 59.7;<..

- ;61:2,w . . -

d; O-

.~ .peratisT..forV.~5;~niihiites!

~ - -

(continued) 4 r

SAN ON0FRE--UNIT 2 3.8-13 Amendment No. 124

. . - . -. . . - - - - . . - . . ~. . ... . .- .

AC Sources-Operating j 3.8.1 1

i I

SURVEILLANCE REQUIREMENTS (continued) '

SURVEILLANCE FREQUENCY SR 3.8.1.16 -------------------NOTE-------------------- !

Credit may be taken for unplanned events l that satisfy this SR.

Verify each DG: 24 months ,

1

a. Sy n c h r c n i zes I sTHpa bi di~o fibe~i ni synchF6dizedfiith'Uffsits'iioWE'ricurce whi1ET6a'dsd with emergency loads upon a simulated restoration of offsite power; I

b. Transfers loads to offsite power ;

source; and j

c. Returns to ready-to-load operation l~

wi t_h ?.

1?. r"_ 5tWdy"st a..ts.Nol t' age _ ' Ei4_2_9_7?V_7and.

..~.;~

l 2:~~"iteadySstatd7fre~qu~ enc 9f"R59~THi

~

^'" ~ " "~

"and

~- 4_6112 '.H.~z~;ii.a.~nd

~~

3jZit,h e]DG gu t piiti brE a kyrl6piej .

(continued)

SAN ON0FRE--UNIT 2 3.8-14 Amendment No. 4 W

i i

l

' AC Sources Operating 3.8.1 SURVEILLANCE REQUIREMENTS (continued)

SVRVEILLANCE FREQUENCY SR 3.8.1.17 -------------------NOTE--------------------

Credit may be taken for unplanned events that satisfy this SR.

l Verify, with a DG operating in test mode 24 months and connected to its bus in parallil~with g 6ffiTtiTjioWsF, an actual 6r s'iiiiGlit'd'd ESF TdTdt'iin~Bijnal SIAS overrides the test mode by: ~:

a. Returning thi DG to ready-to-load operationf.c.s ith?~a IT ~5 tiidiTs t ite~Vbl tage~ s ~4297 ' V 7and

'"~

s,45-.76- tV ;- !

2 P s'tii~di'Ttat F frequency'F 59:7}Hi

~ ~

, _and c s-u,61.' 21 Hz; '.', an.$ ~ ~~ ~~ '"

l 3 R thijDGlobtpUt?;bfii, ykdg6,;and

b. Automatically energizing the emergency !

loads from offsite power. l SR 3.8.1.18 -------------------NOTE-------------------

Credit may L taken for unplanned events that satisfy this SR.

Verify interval between each sequenced load 24 months block is within 10% of design interval for each emergency and shutdown load programmed time interval load sequence.

(continued)

SAN ON0FRE--UNIT 2 1 8-15 Amendment No. 4 N

AC Sources-Operating 3.8.1 SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY SR 3.8.1.19 -------------------NOTES-------------------

1. All DG starts may be preceded by an engine prelube period.

2. Credit may be taken for unplanned events that satisfy this SR.

Verify on an actual or simulated loss of 24 months offsite power signal in conjunction with en actual or simulated ESF actuation signali:

a. De-energization of emergency buses;

b. Load shedding from emergency buses;

c. DG auto-starts from standby condition and:

l. energizes permanently connected loads hiid:r,isetijthET4!16 ~

UiidsW61talyFiepy]8jg?kVibUsin

$ 10 seconds;

' 2. energizes auto-connected emergency loads through the programmed time interval load sequence;

3. achieves steady state voltage 2 3924 g97, V and 5 47-96 4y6,V;

4. achieves steady state frequency a 584 59] Hz and 5 61.2 Hz; and

5. supplies permanently connected and auto-connected emergency loads for a 5 minutes.

3 L

(continued) l SAN ON0FRE--UNIT 2 3.8-16 Amendment No. 4 N

i AC Sources-0perating i 3.8.1 I

SURVEILLANCE REQUIREMENTS (continued) 3 SURVEILLANCE FREQUENCY l 4

i SR 3.8.1.20 -------------------NOTE--------------------

All DG starts may be preceded by an engine prelube period. j Verify, when : tarted imult necu ly from 10 years standby condition, cach DC achieves, s., s 10 second:, voltage 2 2024 V and s $705 V, and frcquency ? 58.8 H: and c... ,. u.zy.

Veri ffTwhihiit4 Ftsd ~s initil tine 6uili' froni' s_tandby~conditio6,

.. .~- Eesch'DG.i.

In;sl94 seconds,7achieveifvoltage a.v'-"h a 4297 ~1.- .Via.n'd

~ -.

.f.requency'a%59.7JHz ~

b'.E "/ Mii rit ii 6s'i t sidi~s t'it hTv'51 tigi

-~~h f4297 . {V

- ~ ind

- - 75

- .'4576_V;a ...r.id.

7h ~ ~~

CMiihtiiss~iteidy7stits' fre

"~T 59/7! -

Hdahd 876112 >. Hz f'~quenci'

~. .m L

i SAN ON0FRE--UNIT 2 3.8-17 Amendment No. 4 N 1

AC Sources-0perating B 3.8.1 8 3.8 ELECTRICAL POWER SYSTEMS

, B 3.8.1 AC Sources-Operating BASES

. BACKGROUND The Class 1E Electrical Power Distribution System AC sources consist of the offsite power sources (normal preferred er normc1 and alternate ~ preferred power sources and citernct (h)),~an~d~the"chsite" standby (onsi_te)' power sources (Train A and Train B Diesel Generators (DGs)). As required by 10 CFR 50, Appendix A, GDC 17 (Ref.1), the design of the AC electrical power system provides independence and redundancy to ensure an available source of power to the i Engineered Safety Feature (ESF) systems.

The onsite Class 1E AC Distribution System is divided into redundant load groups (trains) so that the loss of any one group does not prevent the minimum safety functions from being performed. Each train has connections to two preferred joffsitel power sources and a single DG.

source One-Iri M6 des [1?thF6ughT4,7the of Offsite"p'cwce"(Offsite~ nofma1'preferredTpoweF,is circuit'#1) for~'each^ unit normclly provided through Reserve Auxiliary Transformers XR1 and XR2 for the specific unit. XR1 feeds one 4.16 kV ESF bus (Train A) A04 and XR2 feeds the other 4.16 kV ESF bus (Train B) A06 of the onsite Class 1E AC distribution system for each unit. The ccond ilteFnatsTiraferrid?p6weh source of offsite pcwcr (Offsite circuit"#2) is provided by the otherunit'sReserveAuxiliaryTransformersXR1andXR2Fo(

thbTother bnit's1UnitrAuiiliary~ Transformer'XVI through'the

~

train oriented 4:16"kV'ESF' bus ~ cross'-: ties'bdtween the two units. The 4E16'kV?ESFiburhlignmbntiin"the~6thdr~ unit determineswhichitransformer(s); serve'slasthel alternate preferred powerJsource.; JIfithei4.16:kV ESB bus rin the othef unitJis aligned to;the'Reseh e' Auxiliary. Transformer (XR1 or

~

XR2)' 4 then that' transformer 71s.;the ' required; alternate ^ ~ ~

preferred p'ower"sourcef SIf the~4'16'kV ESF bus in the 6ther unitf.is aligned toitheLUdit Auxiliary; Transformer -(XU1),'

then;that transformerii,s(the requjred 2 alternate; preferred power-source.

~

In cddition,-In~ Modes _'5Tand 6,Ewhen^the1 main generator'is not'

~

operating l each C1 ass"1E'Switchgear'c'an~be' connected'to^a~

third e-ffsite preferred power source via the Unit Auxiliary Transformers by~~ m'anually removing the links in the isolated i phase bus between the Main Generator and the Main j I

(contir.ued)

SAN ON0FRE--UNIT 2 B 3.8-1 Amendmeat No. 127 l 1

l. l 1

l AC Sources-0perating l 8 3.8.1 1 l

! BASES l

)

l BACKGROUND transformer of the non-ope:ating (Modes 5'and'6 Ounit and l l

(continued) closing racking in the 4.16 kV circuit breaker w)'hich is !

normal,y left--eacked cut (W.4hdrawn) into the fully c ui: ped cubicleconnectedtotheUnitAuxiliarytransformeroft1e {

l same unit. Inithis' alignment,Ethe' Unit' Auxiliary Transformer (XU1)l serves ,as tthe -required normal : preferred , i power' source of. the. unit and the. alternate preferred power;

' ~~ "

I l sourcefortheESFbu((es)Lin~thelotherunit( !

An offsite circuit includes all breakers, transformen. 1 switches, interrupting devices, cabling, and controis required to transmit power'from the offsite transmission l network to the onsite Class IE E5F bus or buses.

~

During 'a Safety'Injectio~n ~ Actuation %CSIAS), certain required un4 ESF'lcads"a're" ret w m 4-le , w ?ee connected to the"ESF ~ buses in"a predetermined se.;uence M-erder~tc ~ ~ ' ' '

p'r event' cverloading the transfernc+-+4thms Offsite P0wer to the ensite Clas: 1E Di st ribut ice-Sys tem. Within 77 seconds after the 4n!ti; ting Mgna;-4s-n ee4*ed SIAS, all automatic ad permanently conne.:ted loads neaded to recover the unit or maintain it in a safe condition are returned to i placed'in service via the progr;=cd ti=c intervcl lead '

ScQUcnce.

The ens 4te standby (onsite) power source for each 4.16 kV ESF bus is a dedicated'DG'.' ~ DGs G002 and G003 are dedicated to ESF buses A04 and A06, respectively. A DG starts automatically on a ;fety injection actuation ;ignal (SIAS)

SIAS (i.e., low pressurizer pressure or high containment pres'sure signals) or on an ESF bus degraded voltage or undervoltage signal. After the DG has started, it will automatically Me conn'e'ct to its respective bus after the offsitepowersupplybreakefistrip'edasaconsequenceof ESF bus undervoltage~oFdegraded vohage, independent of or coincident with an SIAS signal. The DGs will also start and operate in the standby mode without tying to the ESF bus on an SIAS alone. Following the trip of offsite power, an undervoltage signal strips nengmanent selected loads from the ESF bus _. When the DG is tied to the'ESF' bus, the permanently connected-loads are energized. _If one or more l ESF actuation ' signals are present, ESF. loads are' then l sequentially connected to 44e their' respective ESF bus by I the programmed time interval load' sequence. The sequencing logic controls the permissive and starting signals to motor breakers to prevent overloading the DG by automatic load application.

l (continued) l SAN ON0FRE--UNIT 2 B 3.8-2 Amendment No. 127

. _ - _ . - _ - . - = _ _ - . ... - .- , -. . . - .

AC Sources-Operating l B 3.8.1 i l

i. BASES. I l

BACKGROUND In the event of a loss of preferred power in conjunctiori (continued) with*on'e~hrTmore ESF actuation ~sigiils, the'ESF~electr'ical ,

loads ~are~ automatically ~ conn'ected to the DGs in sufficient I time to provide for safe reactor shutdown and to mitigate the consequences of a Design Basis Accident (DBA) such as a loss of coolant accident (LOCA).

Certain required unit load: are returned tc service in ;

predetermined scquence in order to prevent overleading the DC in the procc::. Within 77 second: after the initiating s49 El i; rcccived, all lead; needed to recover the unit cr m;intain it in :sfc condition are returned tc :crvice.

Ratings for Train A and Train B DGs satisfy the requirements of Regulatory Guide 1.9 (Ref. 3). Tha continuous service rating of each DG is 4700 kW with 10% werload permissible for up to 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months in any 24 hour2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months period. However, for ;

standby class of service like the San Onofre DGs the ;

manufacturer allows specific overload values up to 116.1% of continuous duty rating based on the total hours the DG is 1 operated per year. The ESF loads that are powered from the ,

4.16 kV ESF buses are listed in Reference 2. l APPLICABLE The initial conditions of DBA and transient analyses in the SAFETY ANALYSES UFSAR, Chapter 6 (Ref. 4) and Chapter 15 (Ref. 5), assume ;

ESF systems are OPERABLE. The AC electrical power sources ~

are designed to provide sufficient capacity, capability, redundancy, and reliability to ensure the availability of necessary power to ESF systems so that the fuel, Reactor Coolant System (RCS), and containment design limits are not exceeded. These limits are discussed in more detail in the Bases for Section 3.2, Power Distribution Limits; Section 3.4, Reactor Coolant System (RCS); and Section 3.6, Containment Systems.

The OPERABILITY of the AC electrical power sources is consistent with the initial assumptions of the accident analyses and is based upon meeting the design basis of the unit. This results in maintaining at least one train of the onsite or offsite AC sources OPERABLE during accident conditions in the event of:

a. An assumed loss of all offsite power or all onsite AC power; and l (continued)

SAN ON0FRE--UNIT 2 B 3.8-3 Amendment No. 127

. _ . _ _ _ _ . _ _ __ _.. _ _ _ _ _ _ . _ . ._ _ __ .~..-_ _ _

l AC Sources-0perating ,

B 3.8.1 i

BASES

! APPLICABLE b. A worst case single failure.

SAFETY ANALYSES

-(continued) The AC sources satisfy Criterion 3 of NRC Policy Statement.

LC0 Two qualified circuits between the offsite transmission network and the onsite Class 1E Electrical Power Distribution System and separate and independent DGs for each train ensure availability of the required power to shut-down the reactor and maintain it in a safe shutdown condition after an Anticipated Operational Occurrence (A00) or a postulated DBA.*

Qualified offsite circuits are those that are described in the UFSAR and are part of the licensing basis for the unit.

Re'qu i red ~ 'o f fs i t e"ci rcili t s"'hFe'! t ho s e < c i rc u i t s~ t h at~ ifs credited andireg3 i redjoje Operable;per LC0 3.8.lf Each required offsite circuit must be capable of maintaining ea+ed freq6sicy and voltage with~in.'sp cifisd' limits, and accepting required loads during~an~ accident 7 while^ connected to the ESF buses.

One-In:Modss717thVough747"thelndrmallprsfe Wed7p'6weh source !

c f O f fd i t d ")cir ' (0 f f s i t'e *c i rdb i t"# 1 ) "foFe^ach" un i t"i s nor=lly provided through Reserve Auxiliary Transformers XR1 i and XR2 for the specific unit. XR1 feeds one 4.16 kV ESF '

bus (Train A) A04 and XR2 feeds the other 4.16 kV ESF bus (Train B) A06 of the onsite Class 1E AC distribution system for each unit. The cc=d alternat~e*p'r6fdrfsd'p of Offsite pc=r (Offsite cifcuit #2)is"pfcVid , owe d~bklrjthe source other unit's Reserve Auxiliary Transformers XR1 and XR2b or the"otherTunit'siUnit~ Auxiliary Transformsf XVI through~the' tFain'orientsd"4:16'kV"ESF^bbs ' cross'-ties'betw'een the two units. Ths~416'kV?ESF biis'aligninent'inTthi~oth Unit determines which transformer (s) serves'as;.the alternate

~

preferredipowertsource h SIfithe.4'-16:-kV:ESFDbus inzthelother unit'is aligned *tolth " Reserve' Auxiliarf Transformer (XR1 oh XR2), .then Lthathtransformer:is. the required l alternate preferred power, source. 'Iffthe 4.16 kV ESFLbus'in th'elother" unit is; aligned to th'e! Unit Auxiliary TransformerJ(XU1),^

then that* transformer;is the' required alternate preferred power source, f

(continued)

{

l SAN ONOFRE--UNIT 2 B 3.8-4 Amendment No. 127

AC Sources-0perating B 3.8.1 BASES LC0 h .;ddition, In Modes 5 and 6, when the main generatofLis (continued) notioperating, each C1 ass IE Switchgear' can 'be~ co~nnected "to a' third'e % Me preferred power source via the Unit Auxiliary Transformers'by manually removing the links in the isolated phase bus between the Main Generator and the Main transformer of the non-operating (Modes"5 and"6) Uunit and closing rccking in the 4.16 kV circuit ~ breaker'which is ac?milly left rccked cut (withdrcwn) :nto the fully equipped eubicle connected-to the Unit Auxiliary transformer of the same unit. In this~ alignment,jthe UnitJAuxiliary Transformer (XVI)fserves asithe required normal preferred power" source.of the unit {and_the' alternate preferred power, source for the ESF bus (es) in the other unit Each DG must be capable of starting, accelerating to at-ed speed within specified~ frequency and voltage limits, and connecting'to its"re5pective'ESF bus on detection'of bus undervoltage, and resettiriglthe 4.16~kV bus undervoltage )

relay logic, in;1ess"than;or e' qual to 10 seconds.~ "This will bciccobplished withiFIO icconds. "Each DG must also be capable of accepting required loads within the assumed loading sequence intervals, and continue to operate until I offsite power can be restored to the ESF buses. These '

capabilities are required to be met from a variety of initial conditions such as: DG in standby with the engine hot, DG in standby with the engine at ambient conditions, and DG operating in a parallel test mode. A DG is l considered already operating if the DG voltage is a 3924 4297 and 5 4796 4576 volts and the frequency is a 68r8 59;7 and's 61.2 Hz.

Proper sequencing of loads, including tripping of nonessential loads onlaiSIAS, is a required function for DG

"' ~ ^

OPERABILITY.

The AC sources in one train must be separate and independent (to the extent possible) of the AC sources in the other train. For the DGs, separation and independence are complete.

For the offsite AC sources, separation and independence are to the extent practical. A circuit may be connected to more than one ESF bus, with Ast--transfer capability to the other circuit OPERABLE, and not violate ESF bus separation criteria.

(continued)

SAN ON0FRE--UNIT 2 B 3.8-5 Amendment No. 127

AC Sources -Operating B 3.8.1 BASES I

APPLICABILITY The AC sources and associated automatic load sequence timers are required to be OPERABLE in MODES 1, 2, 3, and 4 to ensure that:

a. Acceptable fuel design limits and reactor coolant pressure boundary limits are not exceeded as a result of A00s or abnormal transients; and

b. Adequate core cooling is provided and containment !

OPERABILITY and other vital functions are maintained in the event of a postulated DBA.

The AC power requirements for MODES 5 and 6 are covered in LC0 3.8.2, "AC Sources - Shutdown."

ACTIONS Ad To ensure a highly reliable power source remains with the one offsite circuit inoperable, it is necessary to verify the OPERABILITY of the remaining required offsite circuit on a more frequent basis. Since the Required Action only specifies " perform," a failure of SR 3.8.1.1 acceptance criteria does not result in a Required Action not met.

I However, if a second required circuit fails SR 3.8.1.1, the second offsite circuit is inoperable, and Condition C, for two offsite circuits inoperable, is entered.

A.2 According to Regulatory Guide 1.93 (Ref. 6), operation may continue in Condition A for a period that should not exceed 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months . With one offsite circuit inoperable, the reliability of the offsite system is degraded, and the potential for a loss of offsite power is increased, with attendant potential for a challenge to the unit safety (continued)

SAN ON0FRE--UNIT 2 B 3.8-6 Amendment No. 127

AC Sources-Operating B 3.8.1 BASES i

SURVEILLANCE Where the SRs discussed herein specify voltage and frequency REQUIREMENTS tolerances, the following is applicable. The minimum steady (continued) state output voltage of M24 4297 V is 90% cf the nominal 4350 V cutput vcltre above the maximum reset voltage of the 4.16 ~kV bus undervoYtage relays (Ref. SR 3.3.7). Achieving a voltage at or above 4297 V ensures that the LOVS/SDVS/DGVSS relay logic will reset allowing sequencing of the ESF loads on to the ESF bus if one or more ESF actuation signals is present. This vehe minimum voltage limit, which is consistent with ANSI C84.1-1982 (Ref. 11),

allcw: fee is above the allowed voltage drop to the i

terminals of 4000.4160 V motors whose minimum steady state l operating voltage is ipccified :: 90% cr 2600 3744 V (90% of 4160 V). M al:c allcw: for vcitage drop: This minimum voltage requirement also ensures that adequate voltage is provided to motors'and other equipment down through the 120 V level where minimum cperating vcitage 10 01:0 usually ;

specified :: 80% cf name plat: rating. The specified maximum steady state output voltage of 4796 4576 V allcw:

for th maximum Operating scitage :ccified for '000 V l metcrs. It ensures that, for a ligitly loaded distribution '

system, the voltage at the terminals of 4000 4160 V motors is no more than the maximum veted allowable steady state operating voltages (110% of 4160V). The specified mininium ;

and maximum frequencies of'the DG are WB 59.7 Hz and_. ;

61.2 Hz, respectively. Th :: ;;lue: arc equal ~tc The uppef fre~qiaency ' limit is ecual to + 2% of the 60 Hz nominal frequency and isare derivec from the recommendations given in Regulatory Guide 1.9 (Ref. 3). The lower frequency limit is7e~cual to - 0.'5% of the 60 Hz nominal frequency and is '

i basec on maintaining acceptable high pressure safety ~ 1 injection system performance as assumed in th,e accident analyses. ,

~

During a DG' surveillance test', steady state DG voltage of 4297 to 4576 volts and steady state frequency of 59.7 to 61.2 Hz shall be verified. For the lower voltage and frequency limits, the Total Loop Uncertainty (TLU) of the measurement device (Reference Calculation E4C-098) shall be considered.

SR 3.8.1.1 This SR assures proper circuit continuity for the offsite AC electrical power supply to the onsite distribution network and availability of offsite AC electrical power. The l breaker alignment verifies that each breaker is in its l

correct position to ensure that distribution buses and loads l

(continued) 1 SAN ON0FRE--UNIT 2 B 3.8-14 Amendment No. 127 i

l I

=- . _ - _ . -. . .. _ - . - - - . .

AC Sources -Operating l B 3.8.1 t

BASES SURVEILLANCE SR 3.8.1.1 (continued)

REQUIREMENTS l are connected to their preferred power source, and that appropriate independence of availability of independent 1 offsite circuits is maintained. 'The 7 day Frequency is l adequate since breaker position is not likely to change 1 without the operator being aware of it and because its status is displayed in the control room.

SR 3.8.1.2 and SR 3.8.1.7 These SRs help to' ensure the availability of the standby electrical power supply to mitigate DBAs and transients and to maintain the unit in a safe shutdown condition.

To minimize the wear on moving parts that do not get lubricated when the engine is not running, the:c SR cre DG' start's"ma~ y 'be~ preceded by a'n e~ngine prelube period. i SRi 3.8.1.2 :is modified by'WNotes 2 and 31Netc 2 for SR 3 0.'l:2)'to indicate that all ^DG' starts for Mese Surveillancc: SR 3.'8.1:2 may be preceded by an engine prelube period'and follo'wed by a warmup period prior to

~~loadin TheT DG imanu fattiiFe r i ecommends a " mod i fi ed ~(sl ow)'

stapt?g.(whinipossible);in whichTtheistarting speed of,the'DG i skl imi ted ,5 wa rmup : i s El imi ted ito}th i sb l owe r ss peed ,- land ithe '

DG uis"sraduallyL acceldrated :toirated ? speed ! prior, to41oadingy SR'3:8.117Jis m6dified by' Note"1:to indicate ~ that all DG ~'~

starts forg {3.8S g.,7 m'ayjbg g ceged by anleng1,ne_prelp e peniidj For the purposes of SR 3.8.1.2 and SR 3.8.1.7 testing, the DGs are started from standby conditions. Standby conditions for a DG mean the diesel engine coolant and oil are being continuously circulated and temperature is being maintained consistent with manufacturer recommendations.

In Order to reduce strc : and wear en dic:cl engine:, the DC manufacturer rcccmmend: a mcdified start in .;hich the starting speed of DC: i limited, ;;rmup is limited to tMs lcwcr : peed, and the DC: cre gradually accelcrated to synchronce speed prior to loading. This is the intent of Note 3.

SR 3.8.1.7 requires that, at : 184-day Frequency, the DG starts from standby conditions and achieves required voltage and frequency within M 9.4 seconds without DG breaker l

1 closure. The M 9.4 second start requirement supper 4s i

! (continued)

SAN ON0FRE--UNIT 2 B 3.8-15 Amendment No. 127

AC Sources-Operating B 3.8.1 l

BASES i

SURVEILLANCE SR 3.8.1.2 and SR 3.8.1.7 (continued)

REQUIREMENTS ~~

e'nsures that'the'DG meets the ;;;umption: cf the design basis LOCA~ analysis' assumptions in the UFSAR, Cha-ter IS (Ref. 5 , that..the.DG starts, . accelerates .to within the specifie)d'freqitency;and. voltage limits; connects to the 4.16kV ESF? bus, and resets the ESF. bus undervoltage relay

' ~~

logic within 101 seconds:of a SIAS., '- ~' ~ ~ ' ~

The M 9 4 second start requirement is not ap licable to SR 3.8.1.2as(:::

procedure Mote 3 when is described)above a modified used. Since (slow start R 3.8.1.7 requires a M 9.4 second start, it is more restrictive than SR 3.8.1.2 and'it may be performed in lieu of SR 3.8.1.2.

This is the intent of Note 1 of SR 3.8.1.2.

SR 3.8.l'.7iis- modified by Note"2 which1 acknowledge that credit;may be_taken'for unplanned events ~that satisfy this SR.

The normal 31 da Table 3.8.1-1, "yDiesel Frequency for SRTest Generator 3.8.1.2 (see in the Schedule,"

accompanying LC0) and the 184 day Frequenc are consistent with Regulatory Guide 1.9 (y Ref.for3)SR . 3.8.1.7 These Ffrequencies provide adequate assurance of DG OPERABILITY, while minimizing degradation resulting from testing.

SR 3.8.1.3 This Surveillance verifies that the DGs are capable of synchronizing with the offsite electrical system and accepting loads greater than or equal to the equivalent of the maximum expected accident loads listed in Reference 2.

This capability is Werified'by performing a' load ~ test between 90 to 100Lof ratedLload,Nfor:an interval 'of not less:than 60 minutes, consistent with the' requirements of Regulatory. Guide 1.9 The lower. load' limit of '

4450 kW isl94.7% of e DG th(Ref.'3).

continuous rating : . Th'e 94.7%' limit is based on design' basis loading a(4700 nd inclukW) des instrument uncertainty Instrument. uncertainty is not' applied to the uplus ppermargin.

1oadilimiti A~ minimum run" time of '60 ' minutes ~is requi' red 'to' stabilize engine temperatures, while minimizing the time that the DG is connected to the offsite source.

Although no power factor requirements are established by this SR, the DC is normally Operated at a powcr facter between 0.8 laggi g and 1.0. The 0.8 value is the de:ign rating of--the mac,anc, while 1.0 i: an Operational (continued)

SAN ON0FRE--UNIT 2 8 3.8-16 Amendment No. 127

l l

AC Sources-Operating B 3.8.1 BASES SURVEILLANCE SR 3.8.1.3 (continued)

REQUIREMENTS limitation to en:ure circulating current: are minimized.

the surveillance is performed with DG kVAR output that l

offsite power system conditions pcrmit during testing without exceeding equipment' ratings (i.e., without creating _

an overvoltage condition on the ESF buses, over excitation ~

i

' condition on the ESF buses, over excitation condition in the' generator, or overloading the DG main feeder). The kVAR loading requirement.during~this test is met, and the equipment ratings are not exceeded, when the DG kVAR~ output' i is; increased such.'that: ,

a'. ~kVAR i's't 3000 and 5 3200 of

b. -the excitation current is m'3'8 Al and 5 4.0 A or

c. 7the ESF bus voltage is'a 4530 Vand54g50Vor' 2

d. DG feeder current is 2 -730. A' and 's 750 A i

This method of establishing kVAR loading ensures that, iri addition to verifying the load carrying capability (kW) of the diesel engine, the reactive power (kVAR) and voltage regulation capability of the generator is verified to the extent practicable, consistent with .the recommendations of Regulatory Guide 1.9 (Ref. -3) and' Information Notice 91-13

' ^ ~^ - ~ ' ~ ~ '

(Ref(16)ff The normal 31 day Frequency for this Surveillance (Table 3.8.1-1) is consistent with Regulatory Guide 1.9 (Ref. 3).

This SR is modified by four Notes. Note 1 indicates that diesel engine runs for this Surveillance may include gradual loading, as recommended by the manufacturer, so that mechanical stress and wear on the diesel engine are minimized. Note 2 states that momentary DG load, transients i

because of changing bu: loads do not invalidate this test.

Similarly, mcmentary :cwcr facter transient: above the limit l Will not invalidate tw test. Note 3 indicates that this 1

Until performance of the next test subsequent to the approval of PCN-478, the lower limit of 3.8A does not apply.

2 Until performance of the next test subsequent to the approval of PCN-478, the lower limit is 4450 V.

3 Not applicable until performance of the next test subsequent to the approval of PCN-478.

(continued)

SAN ON0FRE--UNIT 2 B 3.8-17 Amendment No. 127 l

l l

l AC Sources-Operating l

B 3.8.1 i

BASES l

SURVEILLANCE SR 3.8.1.3 (continued) l REQUIREMENTS l

l Surveillance should be conducted on only one DG at a time in I order to avoid common cause failures that might result from offsite circuit or grid perturbations. Note 4stigulatesa prcrcquisite requirement fcr performence cf this Sm. A that a successful DG start must precede this test to credit ~~'

satisfactory performance.

SR 3.8.1.4 This SR provides verification that the level of fuel oil in i

the day tank is at or above the level selected to ensure 4 adeguate fuel oil for a minimum of I hour of DG operation at I full load plus 10%. The level is expressed as an equivalent volume in inches. The 30 inch level-includes instrument uncertaintiesTand corresponds to the minimum re 355'.~1 gallons of fuel oil including instrumen. quirement of uncert. int!cs.

The31dayFrequencyisade!ble uate to assure that a sufficient supply of fuel oil is avail since low level alarms are -

providedandunitoperatorswouldbeawareofanylargeuses of fuel oil during this period.

SR 3.8.1.5 Microbiological fouling is a major cause of fuel oil degradation. There are numerous microorganisms that can grow in fuel oil and cause fouling bu water environment in order to survive.t all must Removal have a of water from the fuel oil day tanks once every 31 days eliminates the necessary environment for microbial survival in the day tanks. This is the most effective means of controlling microbiological fouling. In addition, it eliminates the potential for water entrainment in the fuel oil during DG operation. Water may come from any of several sources, including condensation, ground water, rain water, contaminated fuel oil, and from breakdown of the fuel oil by microorganisms. Frequent checking for and removal of accumulated water minimizes fouling and provides data regarding the watertight integrity of the fuel oil system.

l The Surveillance Frequencies are established by Regulatory l Guide 1.137 This SR is for preventive maintenance.(Ref. 10). of water does not necessarily The presence represent failure of this SR provided the accumulated water is removed during the performance of this Surveillance.

l.

(continued)

SAN ON0FRE--UNIT 2 B 3.8-18 Amendment No. 127

l. -. .. -. - - . - . . . .- . . .-

AC Sources-Operating B 3.8.1 BASES SURVEILLANCE SR 3.8.1.6 REQUIREMENTS (continued) This Surveillance demonstrates that foF each OPERABLE'DGEat least.one required fuel oil transfer pump operates' and~ ~~'

transfers fuel oil from its associated storage tank to its associated day tank. This is required to support continuous operation of ths standby power sources. This Surveillance provides assuran'ce that %e at;1 east ~one fuel oil transfer i pump is OPERABLE, the fuel oil piping' system is intact, the '

fuel delivery piping is not obstructed, and the controls and control systems for cutemctic the fuel transfer systems are

"~

OPERABLE.

]

The design of the fuel transfer systems is such that one pumps will operat'e automatically, en-est whileithe~other pump can be started manually in'crder to Either puinp will maintain an adequate volume 6lf fuel oil in~the~ day tanks ~ l during cr fcllowing CC tc ting. In such a case, a 31 day Frequency is appropriate.

SR 3.8.1.7 1

See SR 3.8.1.2.

SR 3.8.1.8 Transfer of each 4.16 kV ESF bus power supply from the normal offsite circuit to the alternate offsite circuit demonstrates the OPERABILITY of the alternate' circuit distribution network to power the shutdown loads. The 24 month Frequency of the Surveillance is based on engineering judgment, taking into consideration the unit conditions required to perform the Surveillance, and is intended to be consistent with expected fuel cycle lengths.

Operating experience has shown that these components usually pass the SR when performed at the 24 month Frequency.

Therefore, the Frequency was concluded to be acceptable from a reliability standpoint.

This SR is modified by a Note which acknowledges that credit may be taken for unplanned events that satisfy this SR.

l (continued) i SAN ON0FRE--UNIT 2 B 3.8-19 Amendment No. 127

AC Sources-Operating l B 3.8.1 1 BASES l I

SURVEILLANCE SR 3.8.1.9 REQUIREMENTS (continued) Each DG is 3rovided with an engine overspeed trip to prevent damage to tie engine. Recovery from the transient caused by the loss of a large load could cause diesel engine i overspeed, which, if excessive, might result in a trip of :

the engine. This Surveillance demonstrates the DG load I response characteristics and capability to reject the '

largest single load without exceeding predetermined voltage l and frequency and while maintaining a specified margin to '

the overspeed trip. For this unit, the single load for each DG is the Auxiliary Feedwater pump and its horsepower rating is 800 HP. As required by IEEE-308 (Ref. 13 , the load rejection test is acceptable if the increase)in diesel speed !

l does not exceed 75% of the difference between synchronous speed and the overspeed trip setpoint, or 15% above synchronous speed, whichever is lower.

The time, voltage, and frequency tolerances specified in l this SR are derived from Regulatory Guide 1.9 recommendations for response during load sequenc(Ref.

e intervals.3) ,

The 4 seconds specified is equal to 80% of a typical l 5 second load sequence interval associated with sequencing {

of the largest load. The voltage and frequency specified are consistent with the design range of the equipment powered by the DG. SR 3.8.1.9.a corresponds to the maximum frequency excursion, while SR 3.8.1.9.b and SR 3.8.1.9.c are steady state voltage and frequency values to which the system must recover following load rejection. The 24 month Frequency is consistent with the recommendation of Regulatory Guide 1.9 (Ref. 3).

In order'to ensure that the DG is tested under load conditions that are as close to design basis conditions as possible, testing is performed using design basis kW loading and maximum kVAR loading permitted during testing. These loadings represent the inductive loading that the DG would experience to the extent practicable and is consistent with the intent of Regulatory Guide 1.9 (Ref. 3).

This SR is modified by a Note which acknowledges that credit may be taken for unplanned events that satisfy this SR.

l l

(continued) l SAN ON0FRE--UNIT 2 B 3.8-20 Amendment No. 127

. - ~. -. - - - .. - .. - -

l AC Sources-Operating B 3.8.1 BASES SURVEILLANCE SR 3.8.1.10 REQUIREMENTS l (continued) This Surveillance demonstrates the DG capability to reject a load equal to 944% 90% to 100% of its continuous rating '

without overspeed tripp'ing or exceeding the predetermined voltage limits. The lower load limitiof24450 kW"is:94.7% of the"DG continuous' rating (4700'kW).' The 94.7% limit.is~

based on design; basis. loading and includes instrument ~

uncertainty; plus ' margin.' Instrument uncertain.tyLisKnot

^^'

app]ied. to. the upper;10ad limitj The DG full load rejection may occur because of a system fault e6 inadvertent breaker tripping or a'SIAS received d0 ring' surveillance testing. This Surveillance ensures proper' engine and~ gen'erator load response under the simulated test ~ conditions. This test simulates the loss of the total connected load that the DG experiences following a full load rejection and verifies that the DG will not trip upon loss of the load. The~ voltage transient 11imit of 5450 V~isE125% of'~ rated voltage;(4360 V). 'These a'cc'eptance criteria' provide"DG^ damage' protection.'~ While the DG is not expected to experience this transient during an event and continues to be available, this response ensures that the DG is not degraded for future applicationt (e gTV including

~

reconnection to the bus if the trip initiator"can be corrected or isolated). These loads and limits are ;

consistent with Regulatory Guide 1.9 (Ref. 3). !

In order tc ensure that the The DG is tested under inductive load conditions that are as close to design basis conditions as possible, testing. ; Testing is performed using design b :i: kW loading and" maxim 0m^kVAR icading permitted during testing. The:c leading: reprc ent the inductive leading that the DC would ex;crience to the extent practicable and is censistent .;ith tic intent of Regulatory Cuide 1.9 (Ref.

3t with DG kVAR output th~at1offsite. power: system ~ conditions permit during' testing without' exceeding' equipment ratings (i.e.,.without creatingian;overvoltage condition on;the ESF buses, over excitation conditioniin1the generator,.or overloading .the DG mainifeeder). lThe kVAR, loading ^

requirement during'this' test is' met,.and.the1 equipment ratings are no.t exceeded,.when the.DG kVAR. output is

~~~

increased'such'that:~

l

(

i i

(continued) ,

l SAN ON0FRE--UNIT 2 B 3.8-21 Amendment No. 127 l

AC Sources-Operating B 3.8.1 i

l BASES SURVEILLANCE SR 3.8.1.10 (continued)

REQUIREMENTS a '. kVAR0is s 3000*an'd 5 3200 of

b. the excitation current is a 3.8 Al and 5 4.0 A or c .1 .the ESF bus voltage is a 45302 V.and s 4550 V or

d. DGffeedercurrentisa730Aands750A,3 This' method 6f'establishirig~kVAR; loading en~sures that, iri

~

addition to verifying' the full load rejection capability '

(kW) of th.e diesel engine, the reactive power rejection' capability (kVAR) of. the generator is verified to the extent practicable,'consisteilt'with the recommendations of ~ ~ '

Regulatory Guide 1.9 (Ref. 3) ~ and Information' Notice 91-13,

~

(Reff]Q){

~

The 24 month Frequency is consistent with the recommendation of Regulatory Guide 1.9 (Ref 3) and is intended to be consistent with expected fuel cycle lengths.

This SR is modified by a Note which acknowledges that credit may be taken for unplanned events that satisfy this SR.

SR 3.8.1.11 As required by Regulatory Guide 1.9 (Ref. 3), this Surveillance demonstrates the as designed operation of the standby power sources during loss of the offsite source.

This test verifies all actions encountered from the loss of offsite power, including shedding of the ncnc::catici se,lected loads and energizati rc pective permanently connecon of thefrom

=crgency the DG.bu::: TheAnd ted loads phrminently connected loads ~are the' Class'1E'480 V "'

Loadcenters and MCCs. Ittis recognized that certain consequential loads may also start following a loss of offsite power and therefore it is important to demonstrate' I

'Until performance' of'th'e next test subsequent to the approval of PCN-478, the lower limit of 3.8A does not apply.

2 Until performance of the next test ' subsequent to the approval of PCN-478, the lower limit is 4450 V.

3 Not applicable until performance of the next test subsequent to the approval of PCN-478.

l i

(continued)

I l

SAN ON0FRE--UNIT 2 B 3.8-22 Amendment No. 127

-_. ~- --- - - . _ - . _ - . - . - . _ - . . .. - .. . .

AC Sources-0perating B 3.8.1 l

'8ASES SURVEILLANCE SR 3.8.1.11 (continued)

REQUIREMENTS that the~ DG. operates properly with these' ioads.~ The consequential loads are sequenced on the DG following a LOVS with the'.same time delays as for a LOVS with a SIAS. ;

Therefore, the ability of the DG to operate with the~

consequential loads is appropriately demonstrated by the existing Surveillance Requirement simulating a loss of offsite power in combination with a SIAS (Surveillance Requirement 3.8.1.19). Since there are no auto-connected shutdown loads, the Regulatory Guide 1.9 (Ref. 3)-' ' '

requirements.for sequencing of auto-connected _ shutdown loads do not apply (Ref.17). M This surveillance further demonstrates the capability of the DG to automatically achieve the required voltage and frequency, to close the DG i outpiut breaker and connect'to the"ESF bus,'and to reset the !

4.16 kV bus undervoltage relay logic within' the specified time.

~

The DG auto-start and undeRioltage relay logic reset time of 2 10 seconds is derived from requirements of the accident analysis to respond to a design basis large break LOCA. The frequency should be restored to within 2*', of nominal the specified rangs following a load scqucnce stcp energizatiori of the ' permanently 'connected loads'. The Surveillance should be co'ntinued'for a minimum" of 5 minutes in order to demonstrate that all starting transients have decayed and stability has been achieved.

The requirement to verify the connection and power supply of permanent loads is intended to satisfactorily show the relationship of these loads to the DG loading logic. In certain circumstances, many of these loads cannot actually be connected or loaded without undue hardship or potential for undesired operation. For instance, Emergency Core Cooling Systems (ECCS) injection valves are not desired to be stroked open, high pressure injection systems are not capable of being operated at full flow, or shutdown cooling (SDC) systems performing a decay heat removal function are not desired to be realigned to the ECCS mode of operation.

In lieu of actual demonstration of shedding, connection, and loading of loads, overlap testing that adequately shows the capability of the DG system to perform these functions is

, acceptable. This testing may include any s'eries of sequential, overlapping, or total steps so that the entire

(continued)

SAN ON0FRE--UNIT 2 B 3.8-23 Amendment No. 127 l

AC Sources-Operating B 3.8.1 BASES SURVEILLANCE SR 3.8.1.11 (continued)

REQUIREMENTS connection and leading sequence of load shedding and reene'rgization of permanently connected loads is verified.

The Frequency of 24 months is consistent with the recommendations of Regulatory Guide 1.9 (Ref. 3), takes into consideration unit conditions required to perform the Surveillance, and is intended to be consistent with expected fuel cycle lengths.

This SR is modified by two Notes. The reason for Note 1 is to minimize wear and tear on the DGs during testing. For the purpose of this testing, the DGs must be started from standby conditions, that is, with the engine coolant and oil continuously circulated and temperature maintained consistent with manufacturer recommendations. Note 2 acknowledges that credit may be taken for unplanned events that satisfy this SR.

SR 3.8.1.12 This Surveillance demonstrates that aftsrla'SIAS, the DG automatically starts and achieves the required voltage and frequency within the specified time (10 ccccad:) frc the design basis-estuation signal and operates for a 5 minutes.

Thel 9?493Ebild ~5thft7fe@ ires htiensUfesithitith'e7DG ~nibets'

~"

the ;desia i; basis 'LOCAianalysis' assumption?that?the 'DG' starts,'eccslerates to within The 'specified frequency and. voltage limits,1 connects to the 4.16 kV ESF. bus, and resets:theLESEnbus 'undervoltage relay-logic within '

~

10 sec'onds.of~a SIAS.'^~The'5 minute period'provides sufficient ^ time' to' de'monstrate stability.

The Frequency of 24 months is consistent with Regulatory Guide 1.9 (Ref. 3), takes into consideration unit conditions required to perform the Surveillance, and is intended to be consistent with the expected fuel cycle lengths. Operating experience has shown that these components usually pass the SR when performed at the 24 month Frequency. Therefore, the Frequency was concluded to be acceptable from a reliability standpoint.

l This SR is modified by two Notes. The reason for Note 1 is to minimize wear and tear on the DGs during testing. For (continued)

SAN ONOFRE--UNIT 2 B 3.8-24 Amendment No. 127

l AC Sources-Operating B 3.8.1 BASES l

I SVRVEILLANCE SR 3.8.1.12 (continued)

REQUIREMENTS the purpose of this testing, the DGs must be started from '

standby conditions, that is, with the engine coolant and oil continuously circulated and temperature maintained consistent with manufacturer recommendations. Note 2 l acknowledges that credit may be taken for unplanned events that satisfy this SR.

SR 3.8.1.13 .

This Surveillance demonstrates that DG noncritical protective functions (e.g., high jacket water temperature) are bypassed on a lo:: cf voltcg: :!gncl concurrent with cn ESF cctution tc:t signcl in ccccrdence with Reference 2 SIAS '

in~accordarice sith' Regulatory Guide ~1:9"(Ref.~ 3) . The critical protective functions (engine'overspeed, generator differential current, and low-low lube oil pressure), which trip the DG to avert substantial damage to the DG unit, are not bypassed. The noncritical trips are bypassed during DBAs and' provide an alarm on an abnormal engine condition.

This alarm provides the operator with sufficient time to react appropriately tolpreRntdiiiiiyelt' orth ~e"DG. The DG availability to mitig'ste'thb'DBA~is mo'e~c~ritic'al r thanprotecting the engine against minor problems that are not immediately detrimental to emergency operation of the DG.

Te's ting 'to'sstisfy~this~stirveill ance~rsquiFeinint' hiay includs sny;serieslofsequential, thatEtheen_tirejnoncr,iticp' overlapping,5or)totalstepsso itr,ip;byp_assfunct'io';is"~

n vegified) .

a The 24 month Frequency is based on engineering judgment, taking into consideration unit conditions required to perform the Surveillance, and is intended to be consistent with expected fuel cycle lengths. Operating experience has shown that these components usually pass the SR when performed at the 24 month Frequency. Therefore, the Frequency was concluded to be acceptable from a reliability standpoint. The SR is modified by a Note which acknowledges that credit may be taken for unplanned events that satisfy this SR.

(continued)

SAN ON0FRE--UNIT 2 B 3.8-25 Amendment No. 127

AC Sources-Operating B 3.8.1 BASES SURVEILLANCE SR 3.8.1.14 i REQUIREMENTS l

, (continued) Regulatory Guide 1.9 (Ref. 3), requires demonstration once l l per refueling outage that the DGs can start and run I continuously at full load capability for an interval of not l less than 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months , a 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months of which is at load equivalent 1 to 105% to 110% of the continuous duty rating and the remainder of the time at a load equivalent to 90% to 100% of the continuous duty rating of the DG. For the'22: hour duration,ithe. loser load? limit'of 4450:'kW is?94.7% of th'e DG '

continuousirating:(4700ikW). 2The 94.7%; limit:is" based on' :

design' basis' loading andlincludes' instFument' uncertainty ~ !

plus margin.1 Instrumentuncertainty,is!not' app ~liedito'thje

~~

100%,105%jor'110%; load;1,imits'," ^ ~ ~ ^ .

Yhisrtest'is perfofmed lithTthe~DG?donsected~toltheToffsite I power supply. .In' this; alignment.DG frequency is ' controlled l byLtheoffsite power supply,"and the operator'has minimal' ;

control;over DGioutputuvoltage. Therefore;; specific DG l vol tage' and ' freq0'ency: requirements l as* recommended 'by~ " l RegulatoryjGuide,19;(Ref.23)LdoJnotfapplyf ~ ' "

1 The DG starts for this Surveillance can be performed either from standby or hot conditions. The provisions for prelubricating and warmup, discussed in SR 3.8.1.2, and for gradual loading, discussed in SR 3.8.1.3, are applicable to this SR.

I u -_m+- .u,'

- - ,_m

^ ThE DG is tested under inductiv's l load conditions that are as eldse to design conditions ~as' possible, tc ting'.7Teiting is performed using the maximum kVAR loading permitted'ddring tc ting. This loading repeesent the inductive leading that the DC wou'd '

experience and is consistentwith Regulatory Cuid: ' 9 (Ref. .

l 3).withDG'kVAR-foQtput?thatloffsite?pownrisystsm~ conditions permit d0 ring. testing without exceAding equipment. ratings (i_.e.,.without creating an overvoltage. condition'on the ESF buses, over excitation: condition'in the generator,ior

, overloading;the DG main feedbr)! lTheikVAR loading' l requirement during this test'is met, Sand the. equipment ratings are not exceeded, when-the-DG kVAR. output is~

increased such that:

a. kVAR is a 3000 and 5 3200 or i

i l

l (continued)

SAN ONOFRE--UNIT 2 B 3.8-26 Amendment No. 127

l AC Sources-Operating l 8 3.8.1 l I

l BASES SURVEILLANCE SR 3.8.1.14 (continued) !

REQUIREMENTS b .' the' excitation cdtrent~is a 3.8 Al and's 4.0 A or l

c. the ESF bus voltage is a 45302 V and 5 4550 V or

d. !

DGfeedercurrent-isa730Aand5750Aj This' niethod 'of 'e'stablishing kVAR loading ens'u res that, ~iri addition ~to verifying the_ load carrying capability (kW) of the diesel engine, the_rea'ctive power (kVAR)'and voitage '

regulation capability of the generator is verified to ths extent practicable, consistent with the recommendations of Regulatory Guide 1.9 (Ref.' 3) and Information Notice' 91-13

~'~~~~ ' ~ ^ ^~

(Ref.16)/~

The kW load band iri th's SR is provided to avoid routine overloading of the~ DG.'%t4e Routins overloading may l result in more frequent teardown inspections in accordance '

with vendor recommendations in order to maintain DG OPERABILITY.

The 24 month Frequency is consistent with the recommendations of Regulatory Guide 1.9, (Ref. 3), takes into consideration unit conditions required to perform the Surveillance, and is intended to be consistent with expected fuel cycle lengths.

l This Surveillance is modified by two Notes. Note 1 states that momentary DG;1 bid transients due to changing bu: leads do not invalidate'this' test. Gimihrly, m0m:ntary pc;;cr facter transient: above the pcv;cr facter limit-will not invalidate the test, Note 2 acknowledges that credit may be taken for unplanned events that satisfy this SR.

l' Until performance'of the~next test subsequent to the approval of PCN-478, the lower limit of 3.8A does not apply.

2 Until performance of the next test subsequent to the approval l of PCN-478, the lower limit is 4450 V.

l 3 Not applicable until performance of the next test subsequent to the approval of PCN-478.

(continued)

SAN ONOFRE--UNIT 2 B 3.8-27 Amendment No. 127

l AC Sources-Operating 8 3.8.1 BASES SURVEILLANCE SR 3.8.1.15 REQUIREMENTS (continued) This Surveillance demonstrates that the diesel engine can restart from a hot condition, such as subsequent to shutdown .

from normal Surveillances, and achieve the required voltage {

and frequency within M 9.4 seconds. The M 9.4 second time '

is derived from the requirements of the accident analysis to respond to a design basis large break LOCA. The LOCA i analysisas'sumes that the'DG starts, accelerates to withid

~

the specified frequency and voltage limits, connects to the ;

4.16 kV.ESF--bus, and resets the ESF bus undervoltage relay" I logic within 10 seconds of a SIASc ~ ~

The 24 month Frequency is consistent with the recommendations of Regulatory Guide 1.9 (Ref. 3) and is intended to be consistent with expected fuel cycle lengths.

This SR is modified by two Notes. Note 1 ensures that the test is performed with the diesel sufficiently hot. The load band is provided to avoid routine overloading of the DG. Routine overloads may result in more frequent teardown inspections in accordance with vendor recommendations in order to maintain DG OPERABILITY. The requirement that the diesel has operated for at least 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months at full load conditions prior to performance of this Surveillance is based on manufacturer recommendations for achieving hot conditions. Momentary DG load transients due to changing bu: loads do not invalidate ~this test. Note 2 allows all DG starts to be preceded by an engine prelube period to minimize wear and tear on the diesel during testing.

SR 3.8.1.16

- As required by Regulatory Guide 1.9 (Ref. 3), this Surveillance ensures manual synchronization and automatic load transfer from the DG to the offsite source can be made and that the DG can be returned to ready to load operation when offsite power is restored. Ready to load operation is defined as the DG running e4-+ated speed within the specified frequency and voltage limits, with the DG output breaker open."' If this test is performed with a SIAS present, the load transfer occurs when the offsite power i breaker is manually closed, and the SIAS causes the DG i

output breaker to open. If this test is performed without a SIAS present, the load transfer occurs when the offsite (continued) l SAN ON0FRE--UNIT 2 B 3.8-28 Amendment No. 127 l

l AC Sources-Operating 8 3.8.1 I l

BASES '

SURVEILLANCE SR 3.8.1.16 (continued) !

REQUIREMENTS p'oWer' bre~akeFTs'inanually closed,~ and the DG output breaker ,

is manually opened. By' design, the LOVS/SDVS/DGVSS logic will have been' previously reset thus allowing the DG to l; reload if a subsequent loss of offsite power or degraded l voltage condition occurs. The LOVS/SDVS/DGVSS signal will l

strip the bus, reset the load sequence timers, close the DG '

outpu; breaker, and permit resequencing of the ESF loads if i an E.tF actuation signal is present.

The .3requency of 24 months is consistent with the I recommendations of Regulatory Guide 1.9 (Ref. 3), takes into l consideration unit conditions required to perform the Surveillance, and is intended to be consistent with expected fuel cycle lengths. 1 1

This SR is modified by a Note which acknowledges that credit j may be taken for unplanned events that satisfy this SR. I SR 3.8.1.17 FoFXthis ' Surveillance 7the"DG'isiin test ~ mode"When'it~is l running,- connected to it's bus,..and in parallel .with offsite l power 'Ded6nistration'of ~the~ test mode override ~en~sureis "

~

that:" l l

l 1)~" the DG availability under accident conditions will not be compromised as the result of testing with~thb~DG connected;to its' bus_;in parallel with_ of_fsj,te,p,ower,,

and 2)

~

the DG will automatically reset return ~~ "

to ready to I load operation,' -

l l

if an SIAS is received during operation in the test mode.

Ready to load operation is defined as the DG running e+

~

rated pccd within the specified frequenc limits, with the DG output breaker open. y These and voltage provisions for automatic ;'.,itchever are required by IEEE-308 (Ref.13),

paragraph 6.2.6(2) and Regulatory Guide 1.9 (Ref. 3).

The requirement tc automatically cacr-ize the cmcr^cnc" loads with offsite pcwcr i: c;;cntially identical !c tbat of SR 3.S.1.12. The intent in the requirement to automatically l energize the emer l

with SR 3.8.1.17.gency b is to loads with the show that offsite power associated emergency loading was (continued) l SAN ON0FRE--UNIT 2 B 3.8-29 Amendment No. 127 May 2, 1997

AC Sources-Operating l

B 3.8.1 BASES l

SURVEILLANCE SR 3.8.1.17 (continued)

REQUIREMENTS not affected by %e DG operation in the test mode in' parallel 'with offsite power. In lieu of actual

~

demonstration of' connection and loading of loads, testing that adequately shows the capability of the emergency loads to perform these functions is acceptable. This testing may include any series of sequential overlapping, or total steps so that the entire connection and loading sequence is verified.

The 24 month Frequency is consistent with the consideration unit conditions required to perfor)m therecommenda Surveillance, and is intended to be consistent with expected fuel cycle lengths.

This SR is modified by a Note which acknowledges that credit may be taken for unplanned events that satisfy this SR.

SR 3.8.1.18 As required paragraph by(Regulatory 2.a. 2 Guide 1.108 (Ref. 9),

operation for the),DBA loading sequence to ensure thateach DG voltage and frequency are maintained within the required limits. Under accident conditions prior to connecting the DGs to their respective buses, all, loads are shed except load center feeders and those motor control centers that power Class lE loads (referred to as " permanently connected" loads). Upon reaching 90% of rated voltage and frequency, the DGs are then connected to their respective buses. Loads are then sequentially connected to the bus by the programmed time interval load sequence. The sequencing logic controls the permissive and starting signals to motor breakers to prevent overl ndina of the DGs due to high motor starting currents. The 10%' load se g ence start time tolerance ensures that sufficient time exists icr the DG to restore frequency and voltage prior to applying the next load and that safety analysis assumptions regarding ESF equipment time delays are not violated. Reference 2 provides a summary of the automatic loading of ESF buses.

' For the Containment Emergency Cooling Units only, the sequenced time is the actual start time of the Component Cooling Water pumps plus 5 0.5 seconds. The tolerance is based on a design interval of 5 seconds.

The Frequency of 24 months is consistent with the recommendations of Regulatory Guide 1.108 (Ref. 9),

paragraph 2.a.(2); takes into consideration unit conoitions (continued)

SAN ONOFRE--UNIT 2 B 3.8-30 Amendment No. 127 l

l

.. _. .._ __ _ . - _ _ _ ~_ _ _. _ _ _ _ _ . _ _ _ _ _ _ ~_ .

I AC Sources-Operating B 3.8.1 BASES SURVEILLANCE SR 3.8.1.18 (continued)

REQUIREMENTS required to perform the Surveillance; and is intended to be i consistent with expected fuel cycle lengths.

l l

This SR is modified by a Note which acknowledges that credit ;

may be taken for unplanned events that satisfy this SR. l SR 3.(5.1.19 In the event of a DBA coincident with a loss of offsite power, the DGs are required to supply the necessary power to ESF systems so that the fuel, RCS, and containment design limits are not exceeded.

This Surveillance demonstrates the DG operation, as discussed in the Bases for SR 3.8.1.11, during : 10 : cf effsite powcr actuation tc t signal in conjunction with an l ESF actuation ignal (SIAS) aniactual or' simulated fldis ~of 6ffsite"p6wbr31gnal?(LOVS/DGVSS/SDVS) in conjunction;with actua'l orisimulated'ESF(actuation signalsL(SIAS, CCAS, CSAS? I EFASfl,"and EFASf 2)b Multiple?ESFisctuation ~ signals sare~

1nitiated toisimul,atejdst' case DG! load"se~quencing~" '

cong,ili,onsj l

In lieu of actual demonstration of sheddin loading of loads, testing that adeqQate19'gi connection,'

shows the and capability of the DG system to perform these functions is acceptable. This testing may include any series of

( sequential, overlapping, or total steps so that the entire i Is.dfshedding, connection,'andloadingsequenceisverified.

The Frequency of 24 months takes into consideration unit conditions required to perform the Surveillance and is intended to be consistent with an expected fuel cycle length l of 24 months.

l This SR is modified by two Notes. The reason for Note 1 is l to minimize wear and tear on the DGs during testing. For i

the purpose of this testing, the DGs must be started from standby conditions, that is, with the engine coolant and oil continuously circulated and temperature maintained consistent with manufacturer recommendations for DGs.

Note 2 acknowledges that credit may be taken for unplanned events that satisfy this SR.

{ (continued)

SAN ON0FRE--UNIT 2 B 3.8-31 Amendment No. 127

1 AC Sources-0perating l .

B 3.8.1 <

l !

l BASES

_ l SURVEILLANCE SR 3.8.1.20 .

, REQUIREMENTS I

l (continued) This Surveillance demonstrates that the DG starting i independence has not been compromised. AHc, this This Surveillance demonstrates that each engine can achieve' I proper speed within the specified time when the DGs are started simultaneously. l The 10 year Frequency is consistent with the recommendations of Regulatory Guide 1.108 (Ref. 9), paragraph 2.b, Regulatory Guide 1.137 (Ref.10), paragraph C.2.f, and Regulatory Guide 1.9 (Ref. 3).

This SR is modified by a Note. The reason for the Note is to minimize wear on the DG during testing. For the purpose of this testing, the DGs must be started from standby conditions, that is, with the engine coolant and oil !

continuously circulated, and temperature maintained consistent with manufacturer recommendations.

Diesel Generator Test Schedule The DG test schedule (Table 3.8.1-1) implements the recommendations of Revision 3 to Regulatory Guide 1.9 (Ref. 3). The purpose of this test schedule is to provide timely test data to establish a confidence level associated with the goal to maintain DG reliability above 0.95 per demand.

According to Regulatory Guide 1.9, Revision 3 (Ref. 3), each DG unit should be tested at least once every 31 days.

According to Draft Regulatory Guide DG-1021 (Ref.14) and 10 CFR 50.63(a)(3)(ii) (Ref.15), whenever a DG has experienced 4 or more valid failures in the last 25 valid tests, the maximum time between tests is reduced to 7 days.

Four failures in 25 valid tests is a failure rate of 0.16, or the threshold of acceptable DG performance, and hence may be an early indication of the degradation of DG reliability.

When considered in the light of a long history of tests, hc',:cycr,4 failures in the last 25 valid tests may only be a statistically probable distribution of random events.

Increasing the test Frequency will allow for a more timely accumulation of additional test data upon which to base judgment of the reliability of the DG. The increased test Frequency must be' maintained until seven consecutive, i failure free tests have been performed.

i (continued)

SAN ONOFRE--UNIT 2 B 3.8-32 Amendment No. 127

. . _ , . . _ _ _ . _ _ . _ _ _ , _ _ _ _ _ _ _ . . . ~._ . _ _ . _ _ _ _ _ _ _ .

AC Sources-Operating 8 3.8.1 BASES i

l SURVEILLANCE Diesel Generator Test Schedule (continued)

REQUIREMENTS The Frequency for accelerated testing is 7 days, but no less than 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months . Therefore the interval between tests should be no less than 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months ,,and no more than 7 days. A successful test at an interval of less than 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months should be considered an invalid test and not count towards'the seven consecutive failure free starts. A test interval in excess of 7 days constitutes a failure to meet the SRs.

REFERENCES 1. 10 CFR 50, Appendix A, GDC 17.

2. UFSAR, Chapter 8.

3. Regulatory Guide 1.9, Rev. 3.

4. UFSAR, Chapter 6.

5. UFSAR, Chapter 15.

6. Regulatory Guide 1.93, Rev. O.

7. Generic Letter 84-15.

8, 10 CFR 50, Appendix A, GDC 18.

9. Regulatory Guide 1.108, Rev. 1.

10. Regulatory Guide 1.137, Rev. 1.

11. ANSI C84.1-1982,

12. ASME, Boiler and Pressure Vessel Code,Section XI.

13. IEEE Standard 308-1978.

14. Draft Regulatory Guide DG-1021, April 1992.

15. 10 CFR 50.63 a)(3)(ii) as published in Federal Register Vol(. 57, No. 77 page 14517, April 21,1992.

Iriformation ' Notic~e;91713, t Inade 1,62]EmergencyDieselGene;eators'.'~guateDTesti,n'go(

17. 'LettsFifrom SCE to~ths'NRC' dated'May 5,71995, subject Docket Nos. 50-361 and 50-362,: Diesel Generator Loading' San Onofre Nuclear Generating ' Station Units 2 and 3.

SAN ON0FRE--UNIT 2 B 3.8-32a Amendment No. 127

NPF-10/15-478 l l

l l

1 l

l l

ATTACHMENT "D" 1 (Proposed Specifications and Bases)

Unit 3 l

l l

i l

l l

1 i

I i

i i

i AC Sources-Operating 3.8.1 i SURVEILLANCE REQUIREMENTS l' l 4

SURVEILLANCE FREQUENCY

?

I SR 3.8.1.1 -------------------NOTES--- '---------------

1. Buses 2A04 and 201 are required when unit crosstie breaker 2A0016 2A0417,is used to provide a source of AC power. l i 2. Buses 2A06 and 202 are re l l

unitcrosstiebreaker2A0!uiredwhen 03 2A0619 is

used to provide a source of AC'powe'r.

Verify correct breaker alignment and power 7 days availability for each required offsite

circuit.

i.

i i

I t 1 i

i (continued) l.

e 4

1.

1

, i SAN ON0FRE--UNIT 3 3.8-4 Amendment No. +16

AC Sources-Operating 3.8.1 SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY SR 3.8.1.2 -------------------NOTES-------------------

1. Performance of SR 3.8.1.7 satisfies this SR.

2. All DG starts may be preceded by an engine prelube period and followed by a warmup period prior to loading.

3. A modified DG start involving idling and gradual acceleration to sync..rtncus rated speed may be used for this SR as recommended by the manufacturer. When modified start procedures are not used, the time, voltage, and frequency tolerances of SR 3.8.1.7 must be met.

Verify each DG starts from standby As specified in conditions and achieves:; Table 3.8.1-1 i?

~^^

sSteady state voltage t 1924 4297 "'"

V and 5 4796 4576, Vr; and

~

b~.~T"'~St'eTdf~ stats frequency a 684 59.~7. Hz and's~61:2"Hz. ~~"

(continued)

SAN ON0FRE--UNIT 3 3.8-5 Amendment No. 146

\

i AC Sources-Operating 1 3.8.1 1

SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY

\

SR 3.8.1.7 ------------------NOTES--------------------

17

~' All DG starts may-be preceded by an engine prelube period.

~~

e unplaiii1ed i 2 ~~Cr'~dit"~miy~ bie~tikedTf6~r;iSRr- 184 days i

". . .^. ."even t s'h th at i s at i s fy l t h i s

....................... = ~:2.......... 1 l

Verify c;ch DC start; from :t;ndby condition :nd achievc;, in 5 10 seconds, l voltage 2 392i V :nd 5 4705 V, and i frequency ? 58.S Hz :nd 5 51.2 Hz.

V rify7eTh7DGHtirtTTfrom?stiiidbf ' ~~

_d con'i.tionM 6.d:" ~

EDInT~9~.~4Tfecoiidi,"Ich~iiT/is Voltage

~~tj.4. 2.97CV.ian.d ;fr.equency;t--

n

.59 ,7_. Hz ;"

MiiiitiinTritiT~d yTstite volti "

b D"m&wn.wr

""~

a(~4297::V2andis14576)V;#an

= - *wwsu,.A >

f {i "Q~ qHi'iii'tiiEiTstiiidFZititsIfrequeriEf m'.59:7tHztand!sy61.2'HzT" SR 3.8.1.8 ---------

NOTE------------------

Credit ma be taken for unplanned events that sati fy this SR. ,

Verify automatic and manual transfer of AC 24 months power sources from the normal offsite circuit to each alternate required offsite circuit.

(continued)

I l

SAN ON0FRE--UNIT 3 3.8-7 Amendment No. 4 %

- - . .-~.. ---. ~ . - . . .. . - -. . . - . _ _ . . - . . - _ - . .

AC Sources-Operating 3.8.1 2

SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY

SR 3.8.1.9 -------------------NOTE------------------- -

Credit may be taken for unplanned events I l that satisfy this SR. I 4

Verify each DG, when operating with design 24 months basis kW loading and maximum kVAR loading permitted during testing, rejects a load a 682 kW, and:

4

a. Following load. rejection, the frequency is s 66.75 Hz;

b. Within 4 seconds following load rejection, the voltage is e 3924 V and l 5 4796 V; and i l 1

c. Within 4 seconds following load i

rejection, the frequency is e 58.8 Hz l and 5 61.2 Hz. '

l SR 3.8.1.10 --- -----

NOTE-------------------

Credit ma be taken for unplanned events that sati fy this SR.

j ..._______.........___________............

when connecti~d?tEitFblis 24 months Verify ifyarilleach 6peratin TTiitDG,hT6ffsitegoWer?and~~

maximum ["AP.ic;dingpermittedduringwith' design bas , "k'd~10dding tc tin r,ct tri ;r.d volt: c i-

int g, doc::ned 5 5?50 V i$diiEtWe715adihijith~ht o f fsii tit 6WEhid6n'd i t i o nsi p"e rmi t ;'~d u r i n g ~ and f611bWi'1 'a' loa'd'rejecti6n of 2 4450 kW and 5 4700 k Ji

'a7 D~oesinottFipT.isiid b~.7.

~ .-

F ,i i'in~a'i- iiti_i 6Ed T. ..~ 5450

_i"i.V61.tii.s. - ~ V .'

. :. a (continued)

SAN ON0FRE--UNIT 3 3.8-8 Amendment No. -146

.~ -. ._ __ . _ _ _ _ _ . . ~ . _ . . _ _ . . . _ . _ _ . . . _ _ _ _ _ _ .

4 4

AC Sources-Operating 3.8.1

, SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY SR 3.8.1.11 -------------------NOTES-------------------

] 1. All DG starts may be preceded by an engine pr" lube period.

j 2. Credit may be taken for unplanned events that satisfy this SR.

i Verify or an actual or simulated loss of 24 months offsite power signal:

} a. De-energization of emergency buses;

b. Load shedding from emergency buses; i

c. DG auto-starts from standby condition

j. and:

t t 1. energizes permanently connected j

loads andirEsitiithe 24.16kV;bsi Qde'yoltage{[@$Jfg}g'i'n" 5 10 secondsTI

2. maintains steady state voltage

{ 2 3924 .4297,V and s 4796 45 6 Vr~1

! 3. maintains steady state frequency 2 58 8 5977 ^ Hz and 5 61.2 Hzrf j and

4. supplies permanently connected loads for 2 5 minutes.

4 a

(continued) i 4

4 l

4 SAN ON0FRE--UNIT 3 3.8-9 Amendment No. 446 1

. 1 4

AC Sources-Operating

3.8.1 SVRVEILLANCE F.EQUIREMENTS (continued) l SVRVEILLANCE FREQUENCY 1

SR 3.8.1.12 -------------------NOTES------------------- ;

1. All DG starts may be preceded by an l

engine prelube period.

l i 2. Credit may be taken for unplanned events that satisfy this SR. )

Vcrify on an actual or simulated Enginecred 24 months e.,c._+.,.r,_.,+..,_.,. rec .--+...,+u.. _,,

. . r.e,,s . ... . - .u. 3 . . . . ..., u. .

OC aute : tart; frc Otar.dby c+ndition and.

! :. Ir, r 10 seccrd: after aute start and during tests, achieve: vcitage

, e~n u. o. ,_a -

. . . - .~ 4,,ne.,

b. In r 10 cccend: after aute start and during tests, , ,_; <

achievc: frequcacy a eo.o

~ . u. . . . . . e ,

u...,,. ...a.

c. Operate: for 2 5 minutesr ViFi;fy ?o rilanzactifil io rds iiiGl it~e~d !S I AS i"Es ch l D G_liu tEi t sr t s'i. f.r'6.m_?s t a nd by!c d5 d i _ti 6 h. : a n d ,i"

.a.rce u 3529,.,43seco . t

__I.n,4297;t ..

V an.d .fre.nd,s.,r.

c .~ -

c achieves -

tv,ol_a.ge.

- . ~, _ v. . _quen y;aJ.59.-7<Hz.;..

b_W,M..iiWtli di*it. i.atnt'e7 d. f?ifi,V ;1. .V. 51 t_ age

_ En4297 V.<andis24576 am - and.a c].HMii nt si d siit~eidf7itit'ETfi e q~u e n cf 2259.

w.

.~ 7,:'.H.z s. and 3. ,6112

- v -

Q9 g a Hz T~ ~~

d '.~550jie

~u - ritiFfoFE"5

- ~ ~ .Tni~hiiti.ss7 -

(continued)

SAN ON0FRE--UNIT 3 3.8-10 Amendment No. -146

AC Sources-Operating 3.8.1 SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY I 4

4 SR 3.8.1.13 -------------------NOTE-------------------

Credit may be taken for unplanned events that satisfy this SR. l 2

Verify each DG automatic trip is bypassed 24 months on actual or simulated les: cf voltage sign:1 cn the c crgency bu: concurrent with

n actual cr simulated ESF actuation sign:1 SIAS

~a except: .

a. Engine overspeed; l 4

b. Generator differential current; and

c. Low-low lube oil pressure.

4 SR 3.8.1.14@ -------------------NOTES-------------------

1. Momentary transients outside the load and powcr facter ranges dosi ^"

not invalidate this test.

2. Credit may be taken for unplanned events that satisfy this SR.

Verify each DG, when connecfEd{t'67itiTbus 24 months iii~p a r?al l el !Wi t hT6f fsi t'ei p6we rh a nd """

' ps ri tin'g '#i t h ~t hEiYi! E?Im k"AR ~i h'dGefi vs o

loading 6ffsit'el,ppermitted durj_ng tc ting'that~

owr ~~c o n d i~fi o n s liiFiiii t , o p e'r a t e s

' ' ' ' ~ ~

79 . t M hon -'

a. For a 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months loaded a 4935 kW and s 5170 kW; and

b. For the remaining hours of the test loaded a 4450 kW and 5 4700 kW.

(continued)

SAN ON0FRE--UNIT 3 3.8-11 Amendment No. 115,125

.- . - . - - -_- - - . _ - - _ . ~ _ ~ - --- -. . . - - - - - , .

AC Sources-Operating 3.8.1 ftnu v r fstwt uAr kit'f" siw w D Eni t ? D EMEkf 7 0 isuvvariw' 6 vi e /isviiw

,. e + 4 s -ii, iumw Av \,

l h

w 7.is si

,. Yb wo

, -o+

is siv w

, - as 1 d , , k ) m wyys iwwwsw us w s :

iI-+

4.sw w

m somw mu& h-,.+

wwww s u a

s .w w

& A isw a

w A.. 4-m +Le 5 n

' O(o wus i.m uu a iisy wesw # vi 1 4 +v v vj t' o wm 1,w m e i wawwi mc.m14-m m,+,mm. 11 + 41 +L,6 i

+ 4-m +km iisy vuwupw vi s v i * *isuv fm11 mi 4 -m en 4, ,- 14,,kl u i uiw wisw avs avnimy vn is wyya iwwwaw.

u ilm m 4 f o +Le A4m,m1 ,+mm e m m m , + ,, , cmm ,+ 14,,+

wws i sj wiaw wsuswi m-mm. wwvi yunw SA Leism, fbim4-m vywa wwws ivi uw swusw wT iivu s s.

wus

+La f4m,+ 6 L ,u i m mr +L4, +m,+ +km A4m,m1 mm-mm,+mm s isy wisw i is sw i. siv u s s vs wasis wwsu, view wswwwa yw eiw a w wvs ek 11 km im,AmA em amm,+mm +L,- +m t176 sisu s a ww svuwww sv ys wwwwi usiuis vs em m e . . ,1 f, o -A J.m4-m w3uui wv was v nn us su wun soy

+km =m-,4-4-m oo km... +L4, +m,.+ mm-mm,+mm wiew i winu s u s s iiy 66 isv u s s e c. win i s wwsw, v

+Le A 4 m ,. m 1 ,L,11 wi w wiwswi ywiswi w w vi I

km ww 1m%AAA &m ama,+m +L,- mm om..1 &m f,.. The ma--m,+mm saiu s v l

ivuwww vv ye wu w wi wiiuis vs wo A1 ',7 vv A A nn. i on16,mm .A C .L,1 w3uum issu y wiew s uwva i f-e m . m - - i , km ASfA A ASC .. alee -A vviwugw usiv

+La ,4,m&+

y u w s . wg s s . u .1 ww i >wvv - Tsv .ms ws wow vv CA - A 9 l_f ,

1. w i r a.

. n ia +La ,+m,Ao ,+,+m am-mm,+mm 14,mm ,A wusw swus = s s4 yis m mu ,1 a ,.

iwi ..

sme m . wisw awwuwj wwwww ywisui uwvi ivivuyw uisu o ,L,11 km , 4, sivuis

- + , 4wu. ,,wwA ,+ ASen A - ASc omi +, -A cn 1 r i w y u w ii wj sivu tea +Lm ww inu cam,+

,wvv rw w vviws wisw vv a

s 4 .os.

l f

/

n.S v w s u s.

t_1, i vs wiiw o L ,s .

i is av w inv u s s vs

. m , oc +L4, w ei e s

&m,+

wwww us su

,A AScn

,wvv A-ASc Twv i,m1+, -- fn A U, vvs ws us s vv - 1.on. A1.m4-m +Le mm , 4-4-m 09 La.u, at + k t ,.

4 su wui s isy waiw e wusu a i s i s e y 6. 6 sivua s vs wai s s l

M7 J

+TLe e-m4 . , + , + cm. SLm m c+L4, sow way i siw s wus w sv, vow m...

y u ., yesw m ,. mvs wuss ,. ui 1 1 , ,. m +m,.+

. . .,. wm 4isuoww wwsw so isuj i km -mmemAmA Lo -- m--4 . m m m 1. L . -mm4mA , A /mm m&Laa ww yiwwwwww uj usi w isy s iiw yiwsuww ywi svu u s iuf v i wwiivi o,--.i-nuiniuy

-uneaA..mm, m m ,. m ~ A A L., +Lm -,-.c.,+,x ,m +L,+ -a,L- 4-,1 yiwwwuu ws i w w vuun;. i s u w u uj wiew niu s i u s u w w o i v i su visu w niw w ii ui s i v u i

,+mme, %-A +La swa was usiu nw ui

.. -- m m4-m to ~4 4-4 mA vii viiw wisy s isw is au s s i i ni n a ww .

.u, TL4, en 4, -+ ,- 14,,kle . . + 41 iaiis wss is isv v

+L. -mv6 +,s,.+ - L m Ai >1 m A em wyyiiwuwaw uiswi i wisw ownw wwsw swiswwwaww wv mooi A..u4=, +La fl4+

wwwui wun S com1m o n a ci . m 14 -m th+,mm ( f + 41 +L,+

+ 4 .- m +km a siy wisw vis s w w wjwsw s owsuwi e siy vuvuyw. viu v i i vis uV w- nw wiiw fallmo4-. en 4. , - - - 1 4 ,. , L i m .

ivi i v n i isy wn s uyyiiwwwiw.

t.14 + L 4 - c -4 4~, ,ctm mm- 1m&4-m +L. oA km,,m So,+ .4 .1,4m ,

n a wie v ia w ni s iiu w w w us wws w viny a w w s e i y view 1 sivu s wwww, s sinua w ww u i m,, et ett,4+m ...m Lo 4 + ,. m i ,A ivss vi vi i weww yvnwi uj s wwwa c, a us su .,.wimssj m i c .waiw $La AJm,m1 wivs% i

,+ ,m+,

wwus ws

+Lm ...+m ,+,m4 mm vis wisw uwwv ssus v

-mm-,---+1o 4m s e y siu e ,1, m-mm-4,m, vaiw a ys4ws

+Lm wisw winw m-mm.

mm-mo y w s i wy wwwwws L..,,m, .

ni 4+L was mm---,.+mA im,A, o4+L4. in o m ,. m A , --A m m ,+m, Emm yw e usuiswia w s j w viis s w w w w w man,+m 4L,- avuus nawasiss av w w w viiu s uisw vyviuwww avi yuwwwwi weiusi vs mm em.i1 +m C ..+m, . .L41m 4+, mm au,+mm 4, w3uus vu w ni i s s u w w s es a s i sw 1m,A A i4+k awa yweiwiuwvi is avuwwu +km -am -m-+1o mm - m ,. + m A 1m,A, AC+mm n a wo wiew y w e inuis wai w e j w v.u s w w w w w evuws. sie wwa mund ,+ 4m- 4Le +m,A, ,.+,+m ..m1+,mm c m m ,, . m , o at +km O iw i s

y s s. u w a v i s , view swwuwj swwww vviwuyw u s iw

,A i s w 3u wiewy vi viiw m m m m , . a - ,. o L..,.,m,. ,. L ,1 1 km m4 +,4-mA om1+,

wusw a ;; w i s wj wussws sisui ww inw s i v u i s iw u

,+ ASco uw Twvv A ASc

,ww vvi w..,

%A fA u s iw vv d.,, o t_f A minn +L4, &m,4 4 .e i i s. uua e asy wisis uws%

C A h! /MfAEDE f lhl T T S I wrui viiv a ssw vi s a a w S.vO w

11, 44u Amm A-m-+

s uuwievnsw ie w kl m .

siv 1SC ass

=

AC Sources-0perating 3.8.1 SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY ,

SR 3.8.1.15# -------------------NOTES-------------------

1. !

This Surveillance shall be performed l within 5 minutes of shutting down the !

DG after the DG has operated a 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months l loaded a 4450 kW and r 4700 kW.

1 Momentary transients outside of th"s l load range do not invalidate this' I test. l l

2. All DG starts may be preceded by an engine prelube period. {

Verify cach DC start: and achieves, in 5 10 24 months ccends, voltagc h 2024 V and r 4705 V, and frequency a 50.0 H: and E 51.2 H:; and l cperate: 2 5 mintuc . '

T VeFi

- r.m fia~e_ach.m.._ DGTithr_ts."_iddi.

i5h16VeiWolticji h7 7415

' ' ' ' a' 2.v 97 Ma. . .

V1V

.a 9'.47sec6nd5

/sde req . u%w w.ke a.n.,d f.w.h

=w Euency!EiS937cHz;"

4 m,.,W. dw wr -J bC Mii ntii niTsteadyTs t atFJ61 t'a~ge

~~ " m14297 - - -VK-and 4576 5: .. _tVi' ~ ~

cMMii n t'a i hsTs tia'dyrs t at E "ffe qUb'n'cy, '

"~"

a+ ! 59,.7! H..z* and

- .~?5361r2,lHz;!and~~

_d L_E _0._p e -c- r_'a.t e s i fo M.~m75 ?m_i~rih ti_s?

(continued)

SAN ON0FRE--UNIT 3 3.8-12 Amendment No. F1h445

AC Sources-0perating 3.8.1 SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE- FREQUENCY SR 3.8.1.16 -------------------NOTE--------------------

Credit may be taken for unplanned events that satisfy this SR.

1 1

Verify each DG: 24 months

a. Synchronize: I57 dip'Eb1fe76Kbsihy sy~nchfohiied With offsite~'p'oW6v ource l whi16~1oid6d with emergency loads upon a simulated restoration of offsite power;

b. Transfers loads to offsite power source; and

c. Returns to ready-to-load operation'l" SIM3 17_".?s 24576! V ; ^ ""~ ~ ~ ^itiidyIstati~v01 tage T4297? V siiid

~ ~ ~ ~ ^ ~ ~ "

~ _.2... ~

2 :'"Is tiidf?;3 tatelf re4tiedcyis E 59 ?7f Hi

"'~" "and X.61 m .. 2._sHz.m;? _and.~~ " ~ " ^^

3' tii--u

~~T- " DFohtpUt! bViake F bpbi.i.

m.- .

(continued) i SAN ON0FRE--UNIT 3 3.8-13 Amendment No. 4 M

__ _ . _ . . . . _ . _ _ . . . . . - . . . _ _ . . . . - . . ~ . . . . . _ _ . . . _ _ . . _ _ _ _ _ . _ _ _ _ _

AC Sources-0perating !

3.8.1 l l

SURVEILLANCE REQUIREMENTS (continued) l SURVEILLANCE FREQUENCY SR 3.8.1.17 -------------------NOTE--------------------

Credit may be taken for unplanned events j that satisfy this SR.

l Verify, with a DG operating in test mode 24 months and connected to its bus in~piFallsl ~with offsite,p,0wep, an actual or' simulated ESF dEt&5 tion 'iijn:1 SIAS overrides the test

^ ~ ~ ' i mode by:

a. Returning thd DG to ready-to-load operationBwith,? .

IT"'7st~sidjT'sti~tiVolt~afeT4297 V and 2.* Fiteidy7 tat ~f^ frequency % 59!7:Hf

~~ hda~~. Ts f61 ~ 2. Hz ;'and -

^ ' ' ~'" ~ '~

the 3_?.%m'm~DG[65tpUtIbFeiksF7i~e5; and P

b. Automatically energizing the emergency loads from offsite power.

SR 3.8.1.18 -------------------NOTE-------------------

Credit may be taken for. unplanned events that satisfy this SR.

Verify interval between each sequenced load 24 months block is within 10% of design interval for each emergency and shutdown load programmed time interval load sequence.

(continued) l SAN ON0FRE--UNIT 3 3.8-14 Amendment No. 4 M

_ . _ - . _ _ _ _ ._ . . . _ _ _.~ __ __ _ _ . _ . _ . . . . _ _ . . . .. . . _ _ _ _ _ _ _

i AC Sources-0perating j 3.8.1 i

SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY

! SR 3.8.1.19 -------------------NOTES-------------------

1. All DG starts may be preceded by an

engine prelube period.

2. Credit may be taken for unplanned events that satisfy this SR.

1

Verify on an actual or simulated loss of 24 months i

offsite power signal in conjunction with en l' actual or simulated ESF actuation signals:

l

, a. De-energization of emergency buses;

b. Load shedding from emergency buses; i

c. DG auto-starts from standby condition and:

1

1. energizes permanently connected loads siiblrhese~tVthe3716~kVibbs liide s 10[vo1tagejelsbloj{c'i'n~^~

seconds;

) 2. energizes auto-connected emergency loads through the programmed time interval load 4 sequenca;

, 3. achieves steady state voltage

a 3924 4297, V and s 4M6 f5,7J V;

4. achieves steady state frequency a5Br85?.7Hzand561.2Hz;and

5. supplies permanently connected and auto-connected emergency loads for a 5 minutes.

(continued)

SAN ON0FRE--UNIT 3 3.8-15 Amendment No. 4%

AC Sources-Operating 3.8.1 SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY SR 3.8.1.20 -------------------NOTE--------------------

All DG starts may be preceded by an engine prelube period.

Verify when : tarted :imultanceu:ly frc= 10 years standby ccndition, cach DC achieves, in s 10 :ccends, voltag ? 3921 V :nd s 1795 V, and frc:;utncy 2 50.8 lt and

-e e.1

. 9. U. . .

Vd r fff;~shihs tirtdd Ts'i mDi tiniblis i f~from s t a n d b_y , c'o n~d i t i o n ,1 e a c h i DG r.~~~^~~' "'~

a....._In f 9.4

~~^h?_4297: arid EVlfrdquesi!9W5917.

,ssco6ds ,lichieVes;yo~

tHz;' l tagd :

bI"IMiihtiids7stiadf stit'eTrolt~icj"i

~ i "a~-.- ^4297 V and 5 4576iV;Tand ~^

1 9 .

c e;i Ma i ~n t.~'i a n s : s te ady3 s t_a t. e frequ^^ency 1

~ O 5977;HOa_ndis)6122.?H.ai

. ~ ~ . - m _.

SAN ON0FRE--UNIT 3 3.8-16 Amendment No. 4%

. _ . - - . . . - . ~ . . ~ . . - - - - . . - - - - - - - . _ - - . - . - . _ .

AC Sources-Operating B 3.8.1 l- B 3.8 ELECTRICAL POWER SYSTEMS B 3.8.1 AC Sources-0perating l

BASES BACKGROUND The Class 1E Electrical Power Distribution System AC sources consist of the offsite power sources norniil preferred er esma &ndiditEFnhte7p"refdWdd power s(ou'rcss and citerneth(3))' ~and"the 5EitFstandby (onsit#) power sources (Train A and Train B Diesel Generators (DGs'))~. As required by 10 CFR 50, Appendis A, GDC 17 (Ref.1), the design of the AC electrical power system provides independence and redundancy to ensure an available source of power to the Engineered Safety Feature (ESF) systems.

The onsite Class 1E AC Distribution System is divided into redundant load groups (trains) so that the loss of any one group does not prevent the minimum safety functions from being performed. Each train has connections to two preferred (offsite),powersourcesandasingleDG.

source Gee-I Of cffditc r[: ~pcWdF~(Offs'ite" Modss ; I Fth r00gh ' 4,9 t for~e'ach circ 0it'#1) h e Tho rmil uriit' 5 pFs fdfred " pbks nor=lly provided through Reserve Auxiliary Transformers XR1 and XR2 for the specific unit. XR1 feeds one 4.16 kV ESF bus (Train A) A04 and XR2 feeds the other 4.16 kV ESF bus (Train B) A06 of the onsite Class 1E AC distribution system for each unit. The seeend iltepnatE" pref 6FFed~iibWif source of cffcite pc=r (Offsite circuit *#2)"isTr39fddd~bj the other unit's Reserve Auxiliary Transformers XR1 and XR2 Fdf th'eTotheFlunit's" Unit?AlixiliirylTrsnsfoFmerjXU1 through the train"opiented'4?l6'kV'ESF bus ~ cross-ties ~betwden the two units. The74'.'167kV!ESE! bus 7hliphrhintrin?thE 6th6Fisnit d tirmiiies which: transformer (s)iservesiastthelalternite preferred;powsrSou'rce'..OIfsthel4:16JkV,ESFbus(inItheother unittis::aligneditoitheiReserve:AuxiliaryxTransformer?(XR1,or

~

XR2) _

hthen (thatitransformepRi preferred;powercsource.. ;IfJ the)4.16 kV sj the ESF ?buslinithe requi red jo "al ternate [^1 uni t 91 s 3 al igned 5 to fthe' Urii tTAi xil i arfiTransfornierl (XU1)","

~

t hen f t h at l t ra n s forme rbi shthe}eq u'i red ; al t e rn a telp re fe rred powerqsource.

In cddition,In' Modest 5 an~d;6,1when the mainigenerat6r'islnot operating, each Clas's'~1E'Switchgear~can~ be~ connected"to~a third 'dffsite preferred power source via the Unit Auxiliary Transformers by" manually removing the links in the isolated phase bus between the Main Generator and the Main l (continued)

I SAN ONOFRE--UNIT 3 B 3.8-1 Amendment No. 116

. .. . . .- _ - - . . = - - - _ . - . _ - - - - . . - - - . . _ . . - . .

' AC Sources-0perating B 3.8.1 i

BASES 1

I. BACKGROUND transformer of the non-operating (Modes"5'Tand"6) Uunit and

' (continued) closingrckinginthe4.16kVcircuitbreakerNhichis normal .y left racked cut (withdr=) into the fully equipped transformer of the cubicle same unit.connectedIri;this? alignments:theto the Unit-Auxiliary Un'it Auxiliary Trans_formerf(XVI)< serves as the required normal:pFeferred power' source of the; unit and the alternate preferred powed "

s _ource-for

.~ - the.ES _F' bus (es)~in'the

.- ~ otherJunit.c y

An offsite circuit includes all breakers, transformers,

! switches, interrupting devices, cabling, and controls i required to transmit power from the offsite transmission i network to the onsite Class lE ESF bus or buses. '

) During~ a Safety Irijection ActuationlSignali(SIAS), certain ,

c the":ESFbuses'in'[apredeterminedsequenceincrderto~ required tm '

picvent~cv'crlcading the transformer supplying effsite pcwee 40 the On;ite Clas IE Di tribution System. Within 77 seconds after the 4nitiating signal is received SIAS, all

?

automatic and permanently connected loads needed to rec'over the unit or maintain it in a safe condition are returned tc j- placedfif] service via the programmed time interva' ic;d

q::::c.

4 The ensite standby (onsite)'powersourceforeach4.16kV

ESF bus is a dedicated'DG.'DGs G002 and G003 are dedicated i

to ESF buses A04 and A06, respectively. A DG starts l automatically on a ;fety injection actuation sign:1 (S!AS)

SIA.S (i.e., low pressurizer pressure or high containment pressure signals) or on an ESF bus degraded voltage or

undervoltage signal . After the DG has started, it will automatically W Eonn'ect to its respective bus after the

offsite power supply; breaker is tripped as a consequence"of

ESF bus undervoltage'or"degfaded voltage, independent of or

, coincident with an SIAS signal. The DGs will also start and operate in the standby mode without tying to the ESF bus on

' an SIAS alone. Following the trip of offsite power, an undervoltage signal strips ncnpermanent selected loads from

the ESF bus. When the DG is tied to theESF" bus', the i

permanently: connected loads -are energized.~ 'If'one or more ESF1 actuation' signals are present, ESF loads"are~then

sequentially connected to W their' respective ESF bus by the programmed time interval loa'd sequence. The sequencing logic controls the permissive and starting signals to motor l breakers to prevent overloading the DG by automatic load application.

i

(continued) 4

. SAN ON0FRE--UNIT 3 8 3.8-2 Amendment No. 116 1

1 l

AC Sources-Operating 8 3.8.1 l

1 BASES i BACKGROUND In the event of a loss of preferred power in conjunction' (continued) with'one'o'r~more ESF actuation signals', the ESF electrical ~

loads 'are ~ automatically connected to the DGs in sufficient time to provide for safe reactor shutdown and to mitigate the consequences of a Design Basis Accident (DBA) such as a loss of coolant accident (LOCA).

Certain required unit lead; are returned tc service in a predetermined :c DC in the procc quence

. Withinin 77 crder second to prevent afterevericading the initiating the l cignal is rcccived, all lead; necded tc rcccver the unit ce

intain it in ; ;f condition arc returned to :crvice.

Ratings for Train A and Train B DGs satisfy the requirements l

of Regulatory Guide 1.9 (Ref. 3). The continuous service rating of each DG is 4700 kW with 10% overload permissible for up to 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months in any 24 hour2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months period. However, for standby class of service like the San Onofre DGs the manufacturer allows specific overload values up to 116.1% of I

continuous duty rating based on the total hours the DG is l operated per year. The ESF loads that are powered from the 4.16 kV ESF buses are listed in Reference 2.

1 APPLICABLE The initial conditions of DBA and transient analyses in the SAFETY ANALYSES UFSAR, Chapter 6 (Ref. 4) and Chapter 15 (Ref. 5), assume ESF systems are OPERABLE. The AC electrical power sources l are designed to provide sufficient capacity, capability, redundancy, and reliability to ensure the availability of necessary power to ESF systems so that the fuel, Reactor Coolant System (RCS), and containment design limits are not exceeded. These limits are discussed in more detail in the Bases for Section 3.2, Power Distribution Limits; Section 3.4, Reactor Coolant System (RCS); and Section 3.6, Containment Systems.

The OPERABILITY of the AC electrical power sources is consistent with the initial assumptions of the accident analyses and is based upon meeting the design basis of the unit. This results in maintaining at least one train of the onsite or offsite AC sources OPERABLE during accident conditions in the event of:

a. An assumed loss of all offsite power or all onsite AC power; and

! (continued)

SAN ONOFRE--UNIT 3 B 3.8-3 Amendment No. 116 1

4 AC Sources-0perating B 3.8.1

BASES l

APPLICABLE b. A worst case single failure.

SAFETY ANALYSES (continued) The AC sources satisfy Criterion 3 of NRC Policy Statement.

I LC0 Two qualified circuits between the offsite transmission network and the onsite Class 1E Electrical Power Distribution System and separate and independent DGs for each train ensure availability of the required power to shut i down the reactor and maintain it in a safe shutdown condition after an. Anticipated Operational Occurrence (A00) 1 or a postulated DBA.'

3 Qualified offsite circuits are those that are described in

the UFSAR and are part of the licensing basis for the unit.

Re'q'uired'offsite' circuits ari those %ircuits that are

~

I

cgdited and required to bel perable,per 0 LC0 3.8.1.

! Each Pequired offsite circuit must be capable of maintaining eated~frequ~ency and voltage withinLspecified limits, and accepting required loads during^an accident, while' connected

) to the ESF buses.

t n One-In M6 des 111through4,"tNF"noFnial r 'pr~bfeFFEd'poWef source

! cf offsitd'pcWcF"(Offs'itMinfiiit"#1) ~for'each' unit 'is

! nor=lly provided through Reserve Auxiliary Transformers XR1 l

, and XR2 for the specific unit. XR1 feeds one 4.16 kV ESF bus (Train A) A04 and XR2 feeds the other 4.16 kV ESF bus (Train B) A06 of the onsite Class 1E AC distribution system i

for each unit. The seccad alternate preferred power source cf cffsite power (Offsite circuit"#2) is'previded by the other unit's Reserve Auxiliary Transformers XR1 and XR2,~or i the' othef un~it's~ Unit: Auiiliary:Tran~sf6rinbr"XU1 through ths

~

~~

train ~ oriented'4 16 kV ESF b'U's~cros~s. ties'b~etween the two l units. Th~E74716TkV'ESFTbGFalicjhinentiinTthe~otheF unit

! determines 1which transformer (s)1 serv'es as the alternate

preferred power sosrcel cIf(the '4'.16i kV ESF;busdn the otheF unitLis: aligned.to~the Reserve Auxiliary 3 Transformer.(XRl'or i

XR2),Jthen that transformer is.the required alternate' preferred power source..'If-the'4.16 kV ESF~ bus in the'other unitEis aligned'to'the' Unit Auxiliary Transformer ~(XU1),

then.that transformer is' the: required. alternate preferred power source.

(continued)

SAN ON0FRE--UNIT 3 B 3.8-4 Amendment No. 116 i

AC Sources-0perating -

B 3.8.1 .

BASES LC0 In cdditien, In Modes 5 and 6, when the' main generator 71s (continued) 56tTope~ratiny, each Class lE Switchgear 'c'a'n"be"co'n~nected~to

~

a third'eff ite prsferfid power source via.the Unit Auxiliary Transformdffby manually removing the links in the j isolated phase bus between the Main Generator and the Main transformer of the noa-operating (Modes-5Tand76) Udnit and cl6 sing rocking in the 4.16 kV circsit breaker which is hd Milly left rocked cut (withdrcun) int: the fully equipped cubicle connected to the Unit Auxiliary transformer of the

, same unit. In 7 th i s :al i g nmbn t Et hei Un i t 7 Aux i l i a'ry

! Tr'ansfor~mef'(XUl)Eserves:as'the requiredJnormal prefeFred ~

power source ofithe'Unittand th : alternate ' preferred: power

~ ' ' ' ~ '

sourcsforithe'ESF) bus (es)Linit,h'eJtherunit; o l

Each DG must be capable of starting, accelerating to Mted i

speed within ?specif.ied frequency and voltage limits, sed connecting"to^its'respsctive"ESF bus on detect'i6n'of bus

~~

thel 4?l6'kV busiuride601 tags undervoltage,[and; resetting"F; equal PelayllogicFin.lessithan:o to: ~ " This bill 10 seconds lic'ccediplished %! thin 10 :Eccad:: 'Ea'ch'DG indst' also be capable of accepting required loads within the assumed l loading sequence intervals, and continue to operate until offsite power can be restored to the ESF buses. These capabilities are required to be met from a variety of initial conditions such as: DG in standby with the engine hot, DG in standby with the engine at ambient conditions,

! and DG operating in a parallel test mode. A DG is l considered already operating if the DG voltage is a 3924 4297 and 5 4796 ~'4576 volts and the frequency is a 58r8 59'.~7 ~~

and's 61.2 Hz.

, Proper sequencing of loads, including tripping of nonessential loads ont a*SIAS, is a required function for DG OPERABILITY.

l The AC sources in one train must be separate and independent (to the extent possible) of the AC sources in the other train. For the DGs, separation and independence are complete.

For the offsite AC sources, separation and independence are to the extent practical. A circuit may be connected to more than one ESF bus, with fvA--transfer capability to the other circuit OPEPABLE, and not violate ESF_. bus separation criteria.

l (continued) l l

SAN ON0FRE--UNIT 3 8 3.8-5 Amendment No. 116 l

AC Sources-Operating i B 3.8.1 l I BASES APPLICABILITY The AC sources _and associated automatic load sequence timers are required to be OPERABLE in MODES 1, 2, 3, and 4 to .

ensure that: I

a. Acceptable fuel design limits and reactor coolant !

pressure boundary limits are not exceeded as a result of A00s or abnormal transients; and l l

b. Adequate core cooling is provided and containment l

OPERABILITY and other vital functions are maintained l in the event of a postulated DBA. '

i The AC power requirements for MODES 5 and 6 are covered in LC0 3.8.2, "AC Sources - Shutdown." l l l l

ACTIONS A.1 To ensure a highly reliable power source remains with the !

one offsite circuit inoperable, it is necessary to verify.

the OPERABILITY of the remaining required offsite circuit on i a more frequent basis. Since the Required Action only l

. specifies " perform," a failure of SR 3.8.1.1 acceptance l criteria does not result in a Required Action not met.

However, if a second required circuit fails SR 3.8.1.1, the second offsite circuit is inoperable, and Condition C, for two offsite circuits inoperable, is entered.

M According to Regulatory Guide 1.93 (Ref. 6), operation may continue in Condition A for a period that should not exceed 72 hours8.333333e-4 days 0.02 hours 1.190476e-4 weeks 2.7396e-5 months . With one offsite circuit inoperable, the reliability of the offsite system is degraded, and the potential for a loss of offsite power is increased, with attendant potential for a challenge to the unit safety l

l (continued) i SAN ONOFRE--UNIT 3 8 3.8-6 Amendment No. 116 l

AC Sources-0perating 8 3.8.1 BASES SURVEILLANCE i Where the SRs discussed herein specify voltage and frequi icy i REQUIREMENTS tolerances, the following is applicable. The minimum steady l (continued) state output voltage of 3924 4297 V is 90% of the acminal l 4360 V cutput voltre above' the maximum reset voltage of the 4.16 kV bus undervoitage relays (Ref. SR 3.3.7). Achieving a voltage at or above 4297 V ensures that the LOVS/SDVS/DGVSS relay logic will reset allowing sequencing' of the ESF loads on to the ESF bus if one or more ESF actuation signals is present. 'This vahe minimum voltage limit, which is consistent with ANSI C84.1-1982 (Ref. 11),

~

"c= for is' ~above' the allowed voltage drop to the terminals of 4000 4160 V motors whose minimum steady state operating voltage' is specified: 00% cr 3600 3744 V (90% of 4160 V). It abc allow for voltage drops This minimum voltage requirement also ensures that adequate voltage is provided to motors and other equipment down through the 120 V' level where minimum cperating voltage B che usually specified :: 80% cf namc phte raMeg. The specified maximum steady state output voltage of 4796 4576 V eMews Mr the ==imum operating voltage pecified for 1000 V ,

j motor;. It ensures that, for a li htly loaded distribution '

system, the voltage at the termina s of 4000 4160 V motors I is no more than the maximum rated allowable steady state; j operating voltages (110% of 4160V). The specified minimum and maximum frequencies of the DG are 684 59.7. Hz and 61.2 Hz, respectively. Thc c ;;he: cre equal to The upper frequency limit is equal to + 2% of the 60 Hz nominal frequency and~isere derived from the recommendations given in Regulator The lower _ frequency limit is"eiual t'o'y- Guide 0.5% of1.9 the(Ref.

60 Hz3).

nominal 1 frequency and is '

basec on maintaining acceptable high~ pressure safety injection system performance as assumed in the accident analyses.

During a' DG surveillance test, steady state DG voltage of 4297 to 4576 volts and steady state frequency of 59.7 to 61.2 Hz shall be verified. For the lower voltage and frequency limits, the Total Loop Uncertainty (TLU) of the measurement device (Reference Calculation E4C-098) shall be considered.-

SR 3.8.1.1 This SR assures proper circuit continuity for the offsite AC electrical power supply to the onsite distribution network and availability of offsite AC electrical power. The breaker alignment verifies that each breaker is in its correct position to ensure that distribution buses and loads (continued)

SAN ON0FRE--UNIT 3 8 3.8-14 Amendment No. 116

AC Sources-Operating i

B 3.8.1 l BASES l

l SURVEILLANCE SR 3.8.1.1 (continued) 1 REQUIREMENTS are connected to their preferred power source, and that appropriate independence of a9ailability of independent offsite circuits is maintained. The 7 day Frequency is t i

i adequate since breaker position is not likely to change without the o erator being aware of it and because its status is dis layed in the control room.

SR 3.8.1.2 and SR 3.8.1.7 These SRs help to" ensure the availability of the standby electrical power supply to mitigate DBAs and transients and '

to maintain the unit in a safe shutdown condition.

1 To minimize the wear on moving parts that do not get j lubricated when the engine is not running, thc:c SRs,we DG starts"may be'pFeEedE~dabyTn ingiiie1Felubeperidd. j SR;3 8.~1:2 is' modified'by~ a' Notes-2 and 3"(Mct: 2 for SP,'3.S:1.2)^t'o indicate that all'DG~ starts for G ese ~

Surveillance: SR 3.85172 may be preceded by an engine !

prelube period "and foll6wed by a warmup period prior to i loading. Thi'DG'd5hfactu' fird reEonhehds a" modified l(slos)'

stirtE(when p6ssible)fintwhich]theTstartingLspeed-'ofithe DG i s il imi tsd,j warmup?i s sl imi ted Atolthi sil owe r)s peed ,iand sth e" DG(isYgraduall lachelerated Ltdirated is seed (pr,1or;toilo'ading~.

SR 3:8.li7;isVmodifie'd b~y Ndtel l?to7indic~atejthat allf DG~ ~h startsifor/SR --. 3.8.1.-7-mayibe9prec,edediby

- - =-

an engine prelubs - ~

For the purposes of SR 3.8.1.2 and SR 3.8.1.7 testing, the DGs are started from standby conditions. Sta'ndby conditions for a DG mean the diesel engine coolant and oil are being continuously circulated and temperature is being maintained consistent with manufacturer recommendations.

In crder tc reduce strc : and .; car en dic:cl engine:, the DC

nufacturcr rccc :end: : =cdified t:rt in which -ee tarting speed of DC: i: limited, warmup i: limited to thl:

i lcwer speed, and the DC: are gradually accelerated tw synchrencus speed pricr tc loading. This is the~ktent of Nct: 3.

SR 3.8.1.7 requires that, at : 184 day Frequency, the DG starts from standby conditions and achieves required voltage and frequency within M 9.4 seconds without'DG breaker closure. The M 9.4 second start requirement cupports j

(continued)

SAN ON0FRE--UNIT 3 8 3.8-15 Amendment No. 116

l I

AC Sources-Operating B 3.8.1 l BASES SURVEILLANCE SR 3.8.1.2 and SR 3.8.1.7 (continued) )

REQUIREMENTS ~

ensures' that"thi-DG ideetsithe ;;;umption: cf the design I basis'LOCA' analysis" assumptions ^~in the UFSAR, Chapter 15 l

(~Ref. 5), that'the DG. starts,cace'elerates-to within the specified' frequency a~nd voltage' limits, connects _to'the~

4.16kV'ESF bus,:and res'ts2the e ESFbus'undervoltagelrelay l logicgithin;10;seconjsofa_SIASj .

l The M 9.4 second start requirement is not applicable to SR 3.8.1.2 (:cc Netc 3) when a modified (slow) start procedure as described above is used.

~

Since'SR 3.8.1.7 requires a M 914 second start, it is more restrictive than SR 3.8.1.2 and'it' may be performed in lieu of SR 3.8.1.2.

This is the intent of Note 1 of SR 3.8.1.2.

SR '3.8.1.7l i s ~ mo~dified' by; Note" 2 fwhich'ackriowl edge that credit g

.may be. taken for.unpla.n.ned events that sa.tisfy w.this~

.- ~ ~ ~ ~ , - ..- - - . - - . ~ -

l The normal 31 day Frequency for SR 3.8.1.2 (see Table 3.8.1-1, " Diesel Generator Test Schedule," in the accompanying LC0) and the 184 day Frequency for SR 3.8.1.7 i are consistent with Regulatory Guide 1.9 (Ref. 3). These l Frequencies provide adequate assurance of DG OPERABILITY, l while minimizing degradation resulting from testing.

SR 3.8.1.3 This Surveillance verifies that the DGs are capable of synchronizing with the offsite electrical system and accepting loads greater than or ecual to the equivalent of the maximum expected accident loacs listed in Reference 2.

Th~isicaphbility'isiverified~ by performing between 90 to= 100%:ofJrated41oadJ forinterval an;fiload7 test _~ t of no less'than 60'minutesF consistent with the~ requirements of Regulatory Guide 1.9 (Ref. 3). The lower load limit of 4450;kW is194'.7% of-the DG; continuous rating 1(4700;kW) W The 94^.7%~1imit is ba~ sed'on' design ibasis11oading 'and ! includes instrument uncertainty slus margin.- Instrument' uncertainty is' not applied to the uppertload limit. ~ A" minimum run" time of 60 minutes ~is' required to'" stabilize engine temperatures, I while minimizing the time that the DG is connected to the offsite source.

Although no power factor requirements are established by l this SR, the DC i; normally operated at a power facter (continued) l SAN ON0FRE--VNIT 3 8 3.8-16 Amendment No. 116

AC Sources-Operating 8 3.8.1 BASES l

SVRVEILLANCE SR 3.8.1.3 (continued)

REQUIREMENTS bete:cen 0.8 1;ggi g and 1.0. The 0.0 value is the de !gn rating of the mac,,,nc :hile 1.0 i; :n operational limitation tc ensure c,irculatin current: arc minimiced.

the"surveillanceisperformedwithDGkVARoutputthat l

offsite power system conditions permit during testing _

without exceeding equipment ratings (i.e., without creating,'

an overvoltage condition on the ESF buses, over excitation-condition on the ESF buses, over excitation condition in the generator, _ or overloading the DG main feeder). The. kVAR ' '

loading requirement during this test is met, and the1 -

equipment ratings.are not exceeded, when the DG kVAR output is. increased such that:

'- ~~

- - . .a a .' kVAR is a 3000'and 5 3200 or .

b. the= excitation current-is t 3.8 A and s 4.0 A or

c. Ethe ESF bus voltage is a 4530 V and s 4550 V or~ ~

d .' DG feeder current is a 730 A and 5 750 A ThiiFTieth~o~d 6f establishing' kVAR lo'ading ensures' that, in addition to verifying the load carrying capability (kW) of the. diesel' engine the reactive power (kVAR) and voltage regulation ~capabilit extent practicable, y of the generator is . verified to theconsistent with the Regulatory Guide 1.9 -(Ref. ' 3) and -Information Notice 91-13 (Ref. 16);.F ~ ' ' ~ ~ " - - ~ ,

~ ~ ~ ~ ' ~ ~

.~..4 !

The normal 31 day Frequency for this Surveillance (Table 3.8.1-1) is consistent with Regulatory Guide 1.9 (Ref. 3). i This SR is modified by four Notes. Note 1 indicates that diesel engine runs for this Surveillance may include gradual I loading, as recommended by the manufacturer, so that mechanical stress and wear on the diesel engine are minimized. Note 2 states that momentary DG load transients beesucc of chang ng bu: leads do not invalidate this test.

i Simil;rly, momentary cvcr factor transient above the limit w4-ll not invalidate tbc ; test Note 3 indicates that this Surveillance should be conducted on only one DG at a time in order to avoid common cause failures that might result from ,

offsite circuitrequirc=nt prcrcquisite or grid perturbations.

for perfer=nce Note of thi 4stigulatese l Sm. A that ;

a successful DG start must precede this test to credit satisfactory performance.

l l l (continued)

SAN ONOFRE--UNIT 3 8 3.8-17 Amendment No. 116

AC Sources-Operating B 3.8.1 BASES l

i l SURVEILLANCE SR 3.8.1.4 !

i REQUIREMENTS l

I (continued) This SR provides verification that the level of fuel oil in the day tank is at or above the level selected to ensure adequate fuel oil for a minimum of 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months of DG operation at l full load plus 10%. The level is expressed as an equivalent i

volume in inches. The 30 inch level includes ~ instrume'nt~

l uncertai'nties~and corresponds to the. minimum re l 355.llalloris"of' fuel oil inc'uding ~in:tr0bcht"quirement of"

~ ~ ' ~

uncertcintics.

The 31 day Frequency is adequate to assure that a sufficient supply of fuel oil is available, since low level alarms are provided and unit operators would be aware of any large uses of fuel oil during this period.

SR 3.8.1.5 Microbiological fouling is a major cause of fuel oil degradation. There are numerous microorganisms that can grow in fuel oil and cause fouling, but all must have a )

j water environment in order to survive. Removal of water from the fuel oil day tanks once every 31 days eliminates the necessary environment for microbial survival in the day -

tanks. This is the most effective means of controlling microbiological fouling. In addition, it eliminates the potential fon water entrainment in the fuel oil during DG operation. Water may come from any of several sources, including condensation, ground water, rain water, contaminated fuel oil, and from breakdown of the fuel oil by microorganisms. Frequent checking for and removal of accumulated water minimizes fouling and provides data regarding the watertight integrity of the fuel oil system. 4 The Surveillance Frequencies are established by Regulatory !

Guide 1.137 (Ref. 10). This SR is for preventive l maintenance. The presence of water does not necessarily l represent failure of this SR provided the accumulated water is removed during the performance of this Surveillance.

i SR 3.8.1.6 This Surveillance demonstrates that for each OPERABLE DG at '

least one required fuel oil transfer pump operates'and transfers fuel oil from its associated storage tank to its (continued)

SAN ON0FRE--UNIT 3 8 3.8-18 Amendment No. 116

l' AC Sources-Operating B 3.8.1 BASES SURVEILLANCE SR 3.8.1.6 (continued)

REQUIREMENTS associated day tank. This is required to support continuous operation of the standby power sources. This Surveillance provides assurance that %e atTleast:ond fuel oil transfer pump is OPERABLE, the fuel oil' piping' system is intact - the fueldeliverypipingisnotobstructed,andthecontroisand control s l

OPERABLE.ystems for eutematic *^ the fuel transfer systems are The design of th's fuel transfer systems is such that fini pumps will operate automatically, er must whilelthe other pump'Ean be started manually. in crder to Either pump will maintain an adequate volume of fuel oil in the ~ day ~ tanks'-"

l during er follow,ing DC testing. In such a case, a 31 day Frequency is appropriate.

SR 3.8.1.7 See SR 3.8.1.2.

SR 3.8.1.8 Transfer of each 4.16 kV ESF bus power supply from the normal offsite circbit to the alternate offsite circuit demonstrates the OPERABILITY of the alternate circuit distribution network to power the shutdown loads. The 24 month Frequency of the Surveillance is based on engineering judgment, taking into consideration the unit and is conditions intended to required to perform be consistent with expected the Surveillance,le fuel cyc lengths.

Operating experience has shown that these components usually pass the SR when performed at the 24 month Frequency Therefore the Frequency was concluded to be acceptable from areliabilitystandpoint.

This SR is modified by a Note which acknowledges that credit may be taken for unplanned events that satisfy this SR.

SR 3.8.1.9 Each DG is provided with an engine overspeed trip to prevent damage to the engine. Recovery from the transient caused by the loss of a lar overspeed, which,ge load could cause diesel engineif excessive, mig the engine. This Surveillance demonstrates the DG load

' response characteristics and capability to reject the largest single load without exceeding predetermined voltage l and frequency and while maintaining a specified margin to l

l (continued)

SAN ONOFRE--UNIT 3 B 3.8-19 Amendment No. 116

l AC Sources-0perating '

B 3.8.1 BASES '

SURVEILLANCE SR 3.8.1.9 (continued)

REQUIREMENTS the overspeed trip. For this unit, the single load for each l DG is the Auxiliary Feedwater pump and its horse)ower rating ;

is 800 HP. As required by IEEE-308 (Ref.13 , t1e load rejection test is acceptable if the increase)in diesel speed i does not exceed 75% of the difference between synchronous speed and the overspeed trip setpoint, or 15% above synchronous speed, whichever is lower.

The time, voltage, and frequency tolerances specified in this SR are derived from Regulatory Guide 1.9 Ref.-3) l recommendations for response during load sequenc(e intervals.

The 4 seconds specified is equal to 80% of a typical 5 second load' sequence interval associated with sequencing l of the largest load. The voltage and frequency specified

! are consistent with the design range of the equipment l powered by the OG. SR 3.8.1.9.a corresponds to the maximum '

frequency excursion, while SR 3.8.1.9.b and SR 3.8.1.9.c are steady state voltage and frequency values to which the systen must recover following load rejection. The 24 month F*equency is consistent with the recommendation of Regulatory Guide 1.9 (Ref. 3).

In order to ensure that the DG is tested under load l

conditions that are as close to design basis conditions as l possible, testing is performed using design basis kW loading '

and maximum kVAR loading permitted during testing. These loadings represent the inductive loading that the DG would experience to the extent practicable and is consistent with the intent of Regulatory Guide 1.9 (Ref. 3).

This SR is modified by a Note which acknowledges that credit may be taken for unplanned events that satisfy this SR.

SR 3.8.1.10 This Surveillance demonstrates the DG capability to reject a load equal to %5% 90% to 100% of its continuous rating without overspeed tripping or exceeding the predetermined voltage limits. The11 owe ril oad Jimi t i of: 4450 t kr i s ? 94 ;7% :'o f the' DG~continuou~s rating '(4700 .? Thel 94.7%11imit is"~~'

based on design basis ~ loa:1ing 'and ;kW) includes Jinstrument ~ '

uncertainty plus margin. EInstrument uncertainty'_is:not" "' '

applied :to the. uppeg load;1,imitl.;

l (continued)

SAN ON0FRE--UNIT 3 8 3.8-20 Amendment No. 116

k AC Sources-Operating B 3.8.1 BASES

! l

, SURVEILLANCE SR 3.8.1.10 (continued)

REQUIREMENTS The DG full load rejection may occur because of a system :

fault ee' inadvertent breaker tripping or'a'SIAS. received I during 'su,rveillance testing. This Surveillance ensures' '

4 proper engine'and'generstor load response under the i

' simulated test" conditions. This test simulates the loss of l the total connected load that the DG experiences following a 4 full load rejection and verifies that the DG will not trip '

upon loss of the load. Ths~ volta 5450 V-is 125% of rated voltage-(ge transient <limitlof. .

criteria' provide DG damage ~ protection: 4360 V)While the DG is not'These" accep expected to experience this transient during an event and continues to be available, this response ensures that the DG i

is not degraded for future applicationt '

reconnectiontothebusifthetripinit(e.g., iator~can including be corrected or isolated). These loads and limits are consistent with Regulatory Guide 1.9 (Ref. 3).

1 In crdcr tc ensure that the The DG is tested under inductive i

load conditions that are as close to design basis conditions I as possible testin-?MTsstingisperformedusin-desin I b00,0 kWlc5dingan3::

ximuniVM .cading crmitled dufimj The:c Ic; din testin!c.

that t DC would ex g reprc;cnttheindEctivelecding i iscensistentwithtEcriencetotheextentpracticableand c intent of Regulatory Cuide 1.9 'Ref.

i R with DG^kVAR'outputithatxoffsite powerisysthm Eonditions !

i ermitduring:testin{n:withoutexceedingeggmentiratings-1.'e ,:without creat g :anEovervoltage: con ionion'the ESF ;

4 uses,: over excitation < condition in? the' generator, or~

' the.DG main: feeder overloading'during;this4 requirement test 41s).bThe kVAR11oading' met,"and'the equipment ^

i c ratings are~ not'exceededVwhen;the ~ ' " ' ~ " " ~ DG:kVAR ~ "' " outp"uttis in.c.reased.such

- - - - - - - that:

ai ikVAR is a!3000Tand:s:3200 or b;

the' excitation currentLisit-3.87A~and T 4.~0'A'oi c'.; ?the ESF bus / voltage;is!m 4530. Viand 5~4550 V or^j q

d.- 1DGifeeder

~

j

, n cur.re _ntzis 21730?

. _ ~ . . Aran.dL.5 750/A,- '

i This t method ofx est'ablishing' kVAR loading erisures that,1in i addi ti on 4to > ve ri fyi ng ttheiful l ll oad ' rej ecti oni capabil i ty

(kW) of the die'sel! engine,1the1 reactive pcwer rejection '

7

capabilityL(k)*AR)istent nracticable, cons with the recomnendations of: of the: generator i kegulatory Guide'~"'~~~~~~~~ l.9:(Ref. 3) and(Information' Notice 91-13 j (Ref. 16) .~ ~

~

I 4

{ (continued) i SAN ON0FRE--UNIT 3 8 3.8-21 Amendment No. 116 i

AC Sources-Operating B 3.8.1 BASES l

l SURVEILLANCE SR 3.8.1.10 (continued)

REQUIREMENTS The 24 month Frequency is consistent with the recommendation of Regulatory Guide 1.9 (Ref. 3) and is intended to be consistent with expected fuel cycle lengths. '

This SR is modified by a Note which acknowledges that credit may be taken for unplanned events that satisfy this SR.

i SR 3.8.1.11 1

As required by Regulatory Guide 1.9 (Ref. 3), tcis Surveillance demonstrates the as designec operation of the standby power sources during loss of the offsite source.

This test verifies all actions encountered from the loss of offsite power, including shedding of Mc ncnc :catial selectid, loads and energization of the =crgency bu:c: gnd rc;pect;ve permanently. connect ~ed loads from the DG. The

~

peFminently, connected 1oadslare 'th'e 'Cl a~s's' 1E ~480 ~V '

Loadcentersland MCCs. :It Lis; recognized that certairi -

consequential floads'nfa'y offsite' p6werlind tth'erefore iit Lis'al so'stirt /following Limportanti to .demonst ' all ossf 6f; fats th'at(the:DGjokeeatef prope~rlysith3these':loids'c, :The consequenti al 416 ads 7 y are ' sequenced sn itheI DG;foll owinfi~ LOVS l with"the?iame]timedelaislasjforJiiLOVS;withiaiSIASij'~'~~

Thebsf6re,Ythe .' ability; of[the' DG 'td? operate' withN the conseq0entialfloadsiissappropriately} demon ~stFitedtby?ths exi s ti hb ?Surve i l l ance" Requ i remin tis i mul a'ti ngi^a il o s s 'Wf~

offs'it pBWiiFlin?combinati66 Tith'a'SIAS (Surveillance Requirement'3.8.1.19). ?Sincf there are no' auto-connected ~

shutd6Wn% loads,ithe~' Regulatorf Guide 51;9 J(RefC3)"^~~~ '

'requiF5hientSfor sequencing?ofjauto; connected; shut'd6wnlloads do riotiapplyj(Ref. l17) .~WThis is~ubveillance^furtheF" ' '

dim 6hstPates the"cip' ability of th~E'0G~td"aUtsmatically achieve the required vcitage and frequency,'to closd the DG output ~ breaker;and connedt.t61the:ESF bus,'can~d'to reset the 4'c16:kV._bdi*und.

g ._ ._. ~ .N,oltage ri_ lay;1od_ic'within th'e specifi d '

(continued)

SAN ON0FRE--UNIT 3 B 3.8-22 Amendment No. 116

1 l

l AC Sources-Operating l B 3.8.1 '

BASES 1 l

l SURVEILLANCE SR 3.8.1.11 (continued)

REQUIREMENTS j

The DG auto-start and undervoltage' relay logic reset time of '

l 10 seconds is derived from~ requirements of the accident analysis to respond to a design basis large break LOCA. The frequency should be restored to within 2" cf nominal the specified~ra'ngs following a lead cquence :tcp energization' of;the permanently connect'ed loids'. The Surveillance ~should be7.'ontinued 'for a" minimum ~of'5~ini'nutes in order to -

demonstrate that all starting transients have decayed and stability has been achieved.

The requirement to verify the connection and power supply of permanent loads is intended to satisfactorily show the relationship of these loads to the DG loading logic. In certain circumstances, many of these loads cannot actually be connected or loaded without undue hardship or potential for undesired operation. For instance, Emergency Core 1 I

Cooling Systems (ECCS) injection valves are not desired to be stroked open, high pressure injection systems are not capable of being operated at full flow, or shutdown cooling (SDC) systems performing a decay heat removal function are not desired to be realigned to the ECCS mode of operation.

In lieu of actual demonstration of shedding l connection,' and loading of loads, overlap testing th~at"1dequ'ately shows "the 1 capability of the DG'sy' stem to perform these functions is acceptable. This testing may include any series of sequential, overlapping, or total steps so that the entire 00EE;;tiOC 00$ lcading sequence 6fiload 'shidding'a~n d reenergifation of permanently ' connected loads is verified.

The Frequency of 24 months is consistent with the recommendations of Regulatory Guide 1.9 (Ref. 3), takes into consideration unit conditions required to perform the Surveillance, and is intended to be consistent with expected fuel cycle lengths.

This SR is modified by two Notes. The reason for Note 1 is to minimize wear and tear on tFe DGs during testing. For the purpose of this testing. the DGs must be started from standby conditions, that is, with the engine coolant and oil continuously circulated and temperature maintained consistent with manufacturer recommendations. Note 2 acknowledges that credit may be taken for unplanned events that satisfy this SR.

(continued)

SAN ONOFRE--UNIT 3 8 3.8-23 Amendment No. 116

AC Sources-Ops rating 3 3.E.1 BASES SURVEILLANCE SR 3.8.1.12 REQUIREMENTS (continued) This Surveillance demonstrates that after a SIAS, the DG automatically starts and achieves the~ required" voltage and frequency within the specified time (10 seconde) frcm the design ba:!: actuation signal and operates for a 5 minutes.

Thd!9.4~'econd' s start'requir'ement" ensures'that'the DG' meets' the design? basis-LOCAranalysisiassumption,' that1the DG' starts,1 accelerates to within Lthe:specified frequency '

'and voltage limits, connects to the~4.16 kV ESF: bus,- nd resets'the ESF bus;undervoltage' relay' logic within~ ~ ' ~ '

10fseconds of a SIAS. "The~5' minute' period' provide's sufficient" time"to~ demonstrate stability.

The Frequency of 24 months is consistent with Regulatory Guide 1.9 (Ref. 3), takes into consideration unit conditions required to perform the Surveillance, and is intended to be consistent with the expected fuel cycle lengths. Operating experience has shown that these components usually pass the SR when performed at the 24 month Frequency. Therefore, the Frequency was concluded to be acceptable from a reliability standpoint.

This SR is modified by two Notes. The reason for Note 1 is to minimize wear and tear on the DGs during testing. For the purpose of this testing, the DGs must be started from standby conditions, that is, with the engine coolant and oil continuously circulated and temperature maintained consistent with manufacturer recommendations. Note 2 acknowledges that credit may be taken for unplanned events that satisfy this SR.

SR 3.8.1.13 This Surveillance demonstrates that DG noncritical protective functions (e.g., high jacket water temperature) are bypassed on a hc: cf voltage signal concurrent . tith an ESF actution test signal in accordance .;ith Reference 3 SIAS in"a'ccordan'ce~ with Reg ~ulatory Guide 71.9"(Ref. '3). The critical protective functions"(engine overspeed, generator differential current, and low-low lube oil pressure), which trip the DG to avert substantial damage to the DG unit, are not bypassed. The noncritical trips are bypassed during DBAs and provide an alarm on an abnormal engine condition.

This alarm provides the operator with sufficient time to react appropriately to prevent da~ mage to the DG. The DG f

availability to mitigate ~the DBA is more~ critical than 1

(continued)

SAN ON0FRE--UNIT 3 8 3.8-24 Amendment No. 116

i AC Sources-Operating B 3.8.1 BASES f l SURVEILLANCE SR 3.8.1.13 (continued)

REQUIREMENTS protecting the engine against minor problems that are not '

immediately detrimental to emergency operation of the DG.

Teit~ini~to"sitis'fy this"suFv~eillanice requirement may inclu~ds j any series .of sequential, overlap aing,- or; total. steps so-~ 1 that th'e' entire noncritical ~~~p tfi )ypass

. '~ ~ ~ ~function is

.t

~ "

verified l.f~~~ ~ "~" ~

l The 24 month Frequency is based on engineering judgment, I 4

taking into consideration unit conditions required to i perform the Surveillance, and is intended to be consistent l with expected fuel cycle lengths. Operating experience has j shown that these components usually performed at the 24 month Frequency.Therefore, pass the SR thewhen Frequency was concluded to be acceptable from a reliability standpoint. The SR is modified by a Note which acknowledges that credit may be taken for unplanned events that satisfy this SR.

l l

l SR 3.8.1.14 Regulatory Guide 1.9 (Ref. 3), requires demonstration once per refueling outage that the DGs can start and run continuously at full load capability for an interval of not less than 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months , a 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months of which is at load equivalent I to 105% to 110% of the continuous duty rating and the '

remainder of the time at a load equivalent to 90% to 100% of the continuous duty rating of the DG. ForTth'e' 22 'houd duration,'the lower ~ load limitTof 4450 kW is 94.7% of the" DG '

continuous ' rating 1(4700 kW). 4The194.7% limit uis bas' ed pn' design. basis: loading and inclu'destinstrumentiuncertainty' plus~ marginP ' Instrument imcertainty ;is notiapplied Lto the

~'~ " '~~' ~" ~'

lgg%j,p 5% g 110% load 1imitsf ThisTtdst'is" performed!with7the DG ionnected t'o theloffsite powerls'u pplyO Inithislaligriment DG)frequencf fii~ controlled by.the offsite power supply,"and the !

operator has minimal ~

control"over DG output voltage. Therefore, specific ~ DG' '

voltage'and' frequency requirements as recommended by ~'

Regulatory Guide 1.9 (Ref. 3) do not apply.

The DG starts for this Surveillance can be performed either from standby or hot conditions. The provisions for prelubricating and warmup, discussed in SR 3.8.1.2, and for (continued)

SAN ON0FRE--UNIT 3 B 3.8-25 Amendment No. 116

i

AC Sources-Operating B 3.8.1

. BASES 1

i SURVEILLANCE SR 3.8.1.14 (continued) l REQUIREMENTS gradual loading, discussed in SR 3.8.1.3, are applicable to this SR.

In crder to ensure that the The DG is tested under inductiv'e

! load conditions that are as clo'se to design conditions ~as" '

possible, tc; ting? .' Testing is performed using the maximum kVAR leading permitted'ddHng tc; ting. Thi: ,cading

' reprc ent; the inductive leading that the DC would cxperience end is ccasi; tent with Reguhtcr 3}. with"DG"kVARTo.utpUt"that~offsite power ly Cuide 1.0 (Ref.

cystemlonditions 4

' permit"during'testingLwithout exceeding equipment rating's" "

(i;e.,0withoutscreating1an overvoltage condition on the;ESF i

buses,'over' excitation conditionlin the generatordor ~ ~~ ~

i overloading ?the DG main feedert. The kVAR loading' '

requirement during(this itestLis met, and the equipment 4

ratings;areinot' exceeded,~when the DG_kVAR.

' ~ " ' ' "~^~~~"'

output-is'

in_cr_ eased /such that:"'- '

t a@ ;kVARris%Q000Tand13200 Tori

b. <Lthelexcithtien current-isht3.8^A~andW4.0?Alog

c. lthe ESF bus: voltage is~t 4530 Vland/5'4550:V-or' d _.Cs.~. DG' feederm cu_rr_ent is T 73_0_'A,_and 5m 750 A'~

This method fof istablishing kVARl loading ~ ensures 7that, Tin additionato'verifyinf theiload ' carrying capability-(kW) of

, theidiesel engine, theFreactive power (kVAR).and voltage ~

regulation ~capabilityfof theLgenerator isiverifiedito;the

extent practicable,~consiste'nt?with;the recommendations-~of Regulatory; Guide 1.9~(Ref.'3)"s ' " ' "

and Information.'"Notice

~~ - '

91213

' ' ~ ~

, (RefM.16) 2 The kW load band in"thT SR is provided to avoid routine overloading of the' DG. ~rcutinc Routine overloading may result in more frequent teardown" inspections in accordance

^ with vendor recommendations in order to maintain DG OPERABILITY.

i The 24 month Frequency is consistent with the 1 recommendations of Regulatory Guide 1.9, (Ref. 3), takes into consideration unit conditions required to perform the

Surveillance, and is intended to be consistent with expected fuel cycle lengths.

This Surveillance is modified by two Notes. Note 1 states that momentary DG.' load transients due to changing bus loads do not invalidate this test. Simihrly, mcmentary powcr -

(continued)

SAN ON0FRE--UNIT 3 B 3.8-26 Amendment No. 116

_ . _ . . _ . _ _ _ . _ _ _ _ . _ . _ _ _.. - _._ - .m . _ . _ _ _ . _ _ . . _ _ - _s k

AC Sources-Operating B 3.8.1 BASES i

1 SURVEILLANCE SR 3.8.1.14 (continued)

REQUIREMENTS facter trancient: abcvc the pcwcr facter limit will net i

invalidate the test. Note 2 acknowledges that credit may be c l taken for unplanned events that satisfy this SR. 1 i l

! SR 3.8.1.15 i

i This Surveillance demonstrates that the diesel engine can restart from a hot condition, such as subsequent to shutdown from normal Surveillances, and achieve the required voltage and frequency within M 974 seconds. The M 9.4 second time i

is derived from the requirdments of the accident, analysis to respond to a design basis large_ break LOCA._._TheTLOCA i

analysis Tai ~sse~s that' thelDG starts,accele' r ates. to withiii

~

4 ~

the ~ s )ecified ;fre 4.16 & ESF bus,'andLresets quency andivoltage limits, the ESF bus connects relay undervoltage to ths' j

1ogic wi, thin,110 seconds of,a SIAS.t ~

~ ~ ~ ~

The 24 month Frequency is consistent with the recommendations of Regulatory Guide 1.9 (Ref. 3) and is intended to be consistent with expected fuel cycle lengths.

This SR is modified by two Notes. Note 1 ensures that the test is performed with the diesel sufficiently hot. The load band is provided to avoid routine overloading of the i

DG. Routine overloads may result in more frequent teardewn i inspections in accordance with vendor recommendations in order to maintain DG OPERABILITY. The requirement that the i diesel has operated for at least 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months at full load i conditions ' prior to performance of this Surveillance is

based on manufacturer recommendations for achieving hot conditions. Momentary DGiloid transients due tc chcngi'r bus loads do not invalidatith'is test. Note 2allowsalYDG starts to be preceded by an engine prelube period to minimize wear and tear on the diesel during testing.

SR 3.8.1.16 As required by Regulatory Guide 1.9 (Ref. 3), this Surveillance ensures manual synchronization and autcmatic load transfer from the DG to the offsite source can be made and that the DG can be returned to ready to load operation when offsite power is restored. Ready to load operation is defined as the DG running at rcted speed within the specified frequency and voltage limits, with the DG output (continued)

SAN ON0FRE--UNIT 3 8 3.8-27 Amendment No. 116

AC Sources-0perating B 3.8.1 BASES SURVEILLANCE SR 3.8.1.16 (continued)

REQUIREMENTS breaker open. Ifithis te'stlis"perfo~rmed 'with~a' SIAS ifesentif the ~1oad transfer occurs:when the offsite power ~

areakercis : man'ually; closed,; and~ theiSIAS causes the- DG ' ~

output breaker to open. JIf this test is' performed without a SIAS present, the loa'd transfer occurs;whenithe offsite power breaker is;manuallyiclosed, ~and the DGl output: breake(

is? manually opened. 'By design',' the 'LOVS/SDVS/DGVSS logic" will have been previously reset thus allowing the DG to reload if a subsequent loss of offsite power or degraded voltage condition. occurs. The LOVS/SDVS/DGVSS signal will strip the bus, reset the load sequence timers, close the DG output breaker, and permit resequencing of the ESF loads if an ESF actuation signal is present.

The Frequency of 24 months is consistent with the recommendations of Regulatory Guide 1.9 (Ref. 3), takes into consideration unit conditions required to perform the Surveillance', Sand L is intended!to be" consistent withiexpectsd

" ~ ~ " ~ " -

fue1 cyclejengths;

^

This SR is modified by a Note which acknowledges that credit may be taken for unplanned events that satisfy this SR.

SR 3.8.1.17 FoVthis; Surveillance, theTDG!is..'initestTmodefwhen~ itiis

~

runni'ng,iconnected-to~ itstbus, ?and?in parallel withioffsite power. Demonstration ~~of the^ test ~ mode ' override' ensures that:~

1) the DG availability under accident conditions will not be compromised as the result of testing with'the:DG connected to ~-its'

' ' ~ busliri"p~arallel ~with"offsite power,'

and" ~ ~ ~ " " ~~ " "~'" ^~^~

2). the DG will automatically ese return to ready to loadoperation) if an SIAS is received during operation in the test mode.

Ready to load operation is defined as the DG running d rated speed within'the'specified. frequency and voltage limits, with the DG output breaker open. These provisions for~;utomatic switchever are required by.IEEE-308 (Ref. 13),

paragraph 6.2.6(2) and Regulatory Guide 1.9 (Ref. 3).

(continued)

SAN ON0FRE--UNIT 3 8 3.8-28 Amendment No. 116 May 2, 1997

4 AC Sources-Operating

B 3.8.1 i

BASES

}

I SURVEILLANCE SR 3.8.1.17 (continued)

REQUIREMENTS Thercqu4rementtocutomcticcilycncr-izethecmcre(enc" b cd; with offsit cwcrisc;;cnticl!yidenticcl c tbt of

.' SR 3.8.1.12. TheiIitentintherequirementtoautomatically l energize the emer with SR 3.8;1.17'.gency b is to loads show ~with that theoffsite power' associated emergency loading was" not affected by % e DG operation in the test mode in" parallel with offsite lower.

i In lieu of actual demonstration 'of connection and loadino of loads, testing

' that adequately shows the capability of the emergency loads to perform these functions is acceptable, This testing may include any series of sequential overlapping, or total steps so that the entire connection and loading sequence is verified.

The 24 month Frequency is consistent with the recommendations of Regulatory Guide 1.9 consideration unit conditions required to(Ref. 3), the perform takes into Surveillance, and is intended to be consistent with expected fuel cycle lengths.

This SR is modified by a Note which acknowledges that credit may be taken for unpianned events that satisfy this SR.

SR 3.8.1.18 As required2.a.

paragraph by(Regulatory 2 Guide 1.108 (Ref. 9),

operation for the),DBA loading sequence to ensure thateach DG is re voltage and frequency are maintained within the required limits. Under accident conditions prior to connecting the DGs to their respective buses, all, loads are shed except load center feeders and those motor control centers that power Class lE loads (referred to as "pern.unently connected" loads). Upon reaching 90% of rated voltage and frequency the DGs are then connected to their respective buses. Loads are then sequentially connected to the bus by the programmed time interval load sequence. The sequencing logic controls the permissive and starting signals to motor breakers to prevent overloading of the DGs due to high motor starting currents. The 10% load sequence start time tolerance ensures that sufficient time exists for the DG to restore frequency and voltage prior to applying the next load and that safety analysis assumptions regarding ESF equipment time delays are not violated. Reference 2 provides a summary of the automatic loading of ESF buses.

For the Containment Emergency Cooling Units only, the sequenced time is the actual start time of the Component Cooling Water pumps plus 5 0.5 seconds. The tolerance is based on a design interval of 5 seconds.

(r.ontinued)

SAN ON0FRE--UNIT 3 8 3.8-29 Amendment No. 116

AC Sources-Operating B 3.8.1 BASES i

SURVEILLANCE SR 3.8.1.18 (continued) 1

~

REQUIREMENTS The Frequency of 24 months is consistent with the 4

recommendations of Regulatory Guide 1.108 paragraph 2.a.(2); takes into consideration (Ref. unit 9),

conditions i

required to perform the Surveillance; and is intended to be l consistent with expected fuel cycle lengths. I This SR is modified by a Note which acknowledges that credit may be taken for unplanned events that satisfy this SR.

SR 3.8.1.19 In the event of a DBA coincident with a loss of offsite power, the DGs are required to supply the necessary power to ESF systems so that the fuel, RCS, and containment design limits are not exceeded.

This Surveillance demonstrates the DG operation, as discussed in the cca .- --.._ Bases fo.r -+a_,

,-+..,+4-- SR 3.8.,1.11, 4- --

during a les:-4.cf 4..--+4-- u ,-

!I$$5u555$b. Eih55515I55I anlAtuai"o'~hEnUi$teU~5$sS"of r in' conjunction with offsite1p~oseEsignaliLOVSI'DGVSS/SDVS) actualyorFsimulated ESF. actuation -signa ls !(SIAS EFAS-1 initiateditoWandrEFAS-2)te simula ~ ~ ~ " worst' case"DG> load sequencing" ~

cgnditions?

~ ~ ' ~

In lieu of actual demonstration of shbddihg? connection l and loading of loads, testing that adequately shows the "

capability of the DG system to perform these functions is acceptable. This testin

{

sequential overlapping,g ormay total include steps so any series that of the entire i

load (shedd,ng, connection,j and loading sequence is verified.

The Frequency of 24 months takes into consideration unit conditions required to perform the Surveillance and is intended to be consistent with an expected fuel cycle length of 24 months.

This SR is modified by two Notes. The reason for Note 1 is to minimize wear and tear on the DGs during testing. For the purpose of this testing, the DGs must be started from standby conditions, that is, with the engine coolant and oil continuously circulated and temperature maintained consistent with manufacturer recommendations for DGs.

Note 2 acknowledges that credit may be taken for unplanned avents that satisfy this SR.

(continued)

SAN ON0FRE--UNIT 3 B 3.8-30 Amendment No. 116

1

AC Sources-Operating B 3.8.1

! +.

BASES I

SURVEILLANCE SR 3.8.1.20 REQUIREMENTS i (continued) This Surveillance demonstrates that the DG starting independence has not been compromised. M-se r-tM+ Th'i s

$ Surveillance demonstrates that each engine can achieve' proper speed within the specified time when the DGs are j started simultaneously.

The 10 year Frequency is consistent with the recommendations of Regulatory Guide 1.108 (Ref. 9), paragraph 2.b, Regulatory Guide 1.137 (Ref. 10), paragraph C.2.f, and Regulatory Guide 1.9 (Ref. 3).

This SR is modified b a Note. The reason for the Note is tominimizewearontfeDGduringtesting. For the purpose j of this testing, the DGs must be started from standby i conditions that is, with the engine coolant and oil

! continuouslycirculated,andtemperaturemaintained

consistent with manufacturer recommendations.

a i Diesel Generator Test Schedule l implements the The DG test schedule recommendations (Table of Revision 3 to 3.8.1-1)

Regu latory Guide 1.9 i

(Ref. 3) . The purpose of this test schedule is to provide i

timely test data to establish a confidence level associated with the goal to maintain DG reliability above 0.95 per

demand According to Regulatory Guide 1.9, Revision 3 (Ref. 3), each DG unit should According to Draft be tested at Regulatory least Guide once every(31 DG-1021 Ref. 14 days.

experienced 10 CFR 50.63(a) 4 or(3)(ii) (Ref. 15), whenever a DG has more valid failures in the last 25 valid tests, the maximum time between tests is reduced to 7 days.

Four failures in 25 valid tests is a failure rate of 0.16, or the threshold of acceptable DG performance, and hence may be an early indication of the degradation of DG reliability. j When considered in the light of a long history of tests, I hcwcVer,4 failures in the last 25 valid tests may only be a j statistically probable distribution of random events. j Increasing the test Frequency will allow for a more timely accumulation of additional test data-upon which to base ;

judgment of the reliability of the DG. The increased test Frequency must be maintained until seven consecutive, failure free tests have been performed. j (continued) i SAN ON0FRE--UNIT 3 8 3.8-31 Amendment No. 116 l

, - . - . _ - . . . - . - - _ - ~ . - . . . _ . _ - . . - . - - . . . _ . -

I 1

1 AC Sources-0perating B 3.8.1 BASES SURVEILLANCE Diesel Generator Test Schedule (continued) i REQUIREMENTS

! The Frequency for accelerated testing is 7 days, but no less l

than 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months . Therefore the interval between tests should be no less than 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months ,,and no more than 7 days. A successful test at an interval of less than 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months should be considered an invalid test and not count towards the l seven consecutive failure free starts. A test interval in i excess of 7 days constitutes a failure to meet the SRs.

i REFERENCES 1. 10 CFR 50, Appendix A, GDC 17.

2. UFSAR, Chapter 8.

l 3. Regulatory Guide 1.9, Rev. 3. ,

4. UFSAR, Chapter 6.

5. UFSAR, Chapter 15,

6. Regulatory Guide 1.93, Rev. O.

l

7. Generic Letter 84-15.

8. 10 CFR 50, Appendix A, GDC 18.

1

9. Regulatory Guide 1.108, Rev. 1. I

10. Regulatory Guide 1.137, Rev. 1.