ML20147A519

Final ASP Analysis - Crystal River (LER 302-89-025)

ML20147A519
Person / Time
Site:	Crystal River
Issue date:	05/26/2020
From:	Christopher Hunter NRC/RES/DRA/PRB
To:
Littlejohn J (301) 415-0428
References
LER 1989-025-00
Download: ML20147A519 (8)

Text

B-81 ACCIDENT SEQUENCE PRECURSOR PROGRAM EVENT ANALYSIS LER No:

Event

Description:

Date of Event:

Plant:

302/89-025 Loss of offsite power in hot shutdown with one DG unavailable and degraded emergency feedwater June 29, 1989 Crystal River 3 Summary An electric fault in the 230-ky switchyard caused the circuit breakers to the Crystal River 3 startup transformer to open, resulting in the interruption of normal offsite power to the engineered safeguards (ES) buses 3A and 3B. The plant was in hot shutdown, cooling down to perform maintenance on one of the two diesel generators. Emergency power to 3A ES bus was provided by the 3A diesel generator (DG). Backup power was supplied to 3B ES bus within 2 min by manually lining up the Unit 1 and 2 startup transformer.

The motor-driven emergency feedwater pump had to be manually started once the diesel generator repowered bus 3A. Approximately 1.25 h after the event, operators restored power to the plant via the startup transformer. The conditional core damage probability estimated for this event is 6.3 x 10-5. The relative significance of this event compared with other postulated events at Crystal River 3 is shown below.

LER 302/89-025 1E-7 1E-6 1E-5 1E-4 1E-3 1E-2 Trip 1360 hAFW J LoJ L30hE L L precursor cutoff NM L36 FE Event Description On June 29, 1989, Crystal River 3 was in hot shutdown for maintenance on DG 3B. An electrical storm in the area is believed to have caused an electric fault in the 230-ky switchyard, causing an interruption in the power supply to the startup transformer. DG 3A automatically started and reenergized the 3A 4160-V engineered safeguards (ES) bus.

B-82 Because of the unavailability of DG 3B, bus 3B was not initially repowered. Two minutes after the loss of power the Crystal River Unit 1 and 2 startup transformer was lined up to power the 3B 4160-V ES bus. As a result of the loss of power to the startup transformer, the three operating reactor coolant pumps tripped off, the operating main feedwater pump tripped off, the condenser circulating water pumps tripped off, and one of a group of control rods that were being held withdrawn to provide trippable reactivity inserted into the reactor. The loss of the condenser circulating water pumps caused a loss of vacuum in the main condenser and eliminated the condenser as a heat sink. This forced the operators to relieve steam from the steam generators to atmosphere. The operators manually started the motor-driven EFW pump and manually controlled the feedwater flow and steam generator fill rates during the event. Approximately 1.25 h after the interruption, the Crystal River 3 startup transformer was returned to service and used to power plant loads.

Additional Event-Related Information Crystal River 3's normal offsite source of power to ES buses 3A and 3B is from the 230-kV switchyard (five possible sources) stepped down through the Unit 3 startup transformer. Alternate offsite power to the, ES buses is from the Unit 3 auxiliary transformer supplied by the Unit 3 main generator. Backup offsite power to the ES Buses is from the Units 1 and 2 startup transformer. DGs 3A and 3B supply emergency power to the ES buses in the event that all other sources of power are lost. In this event, the plant was in hot shutdown, and the main generator was separated from the grid. Thus, the alternate source of power to the ES buses was unavailable. The event began with the interruption of the normal source of offsite power to the ES buses. Since DG 3B was out of service for maintenance, power was initially unavailable on bus 3B. The backup source of power for 3B ES bus was manually lined up, which took -2 min.

According to the FSAR there are five automatic initiating signals for the EFW system:

(1) all four reactor coolant pumps tripped; (2) both main feed pumps tripped and reactor power is greater than 20%; (3) low level in either steam generator, (4) low pressure in either steam generator; or (5) SI actuation on both A and B ESAS channels. There is not enough information in this LER to establish whether an automatic initiation signal for EFW existed.

However, LER 302/89-023 describes a loss of offsite power one-half month earlier during which the motor-driven EFW pump failed to automatically start because of two faulty relays. That LER notes that one of the faulty relays was not discovered until sometime after the plant had been returned to power.

B-83 ASP Modeling Assumptions and Approach This event has been modeled as a plant-centered loss of offsite power with one diesel generator unavailable and the motor-driven EFW pump initially unavailable. Two calculations were performed to estimate a core damage probability for the event. In the first calculation, DG 3B and the motor-driven EFW pump were assumed to be unavailable. In the second, power to the ES bus 3B was assumed available. The probability of not recovering AC power to bus 3B via the Unit 1 and 2 startup transformer was assumed to be 0.1, and the two core damage probability estimates were normalized by this value to develop an overall estimate.

Analysis Results The conditional probability of severe core damage for this event is 6.3 x 10-5. The dominant core damage sequence involves successful emergency power with failure of EFW and feed and bleed. This sequence is highlighted on the following event tree. Note that if neither the AC bus nor the EFW train are assumed to be failed, then the core damage probability for the event is estimated to be 1.3 x 10-5.

B-84 F 1PORV/ IPORV VISA 1LOOP RTILOOP EP 1AFW SR V SRy IA EPREC IHIPI HPR POZRV IJ Ij CHALL RESEAT LOGA (LONG)

IOPEN SEO END NO STATE OK OK 41 CO 42 COD OK OK 43 CD (1) 44 CD 45 CD OK 46 CO 47 CO 48 CO OK 49 CO 50 CO OK 51 CO 52 CO 53 CO OK 54 CO 55 CO 40 ATWS (1) OK far Class D Dominant core damage sequence for LER 302/89-025

B-85 CONDITIONAL CORE DAMAGE PROBABILITY CALCULATIONS 302/89-025 LOOP in hot shutdown with one DG 005 and degraded EFW 06/29/89 Crystal River 3 Event Identifier:

Event

Description:

Event Date:

Plant:

INITIATING EVENT NOR-RECOVERABLE INITIATING EVENT PROBABILITIES LOOP 1.5E-01 SEQUENCE CONDITIONAL PROBABILITY SUNS End State/Initiator CD LOOP Total ATWS LOOP Total SEQUENCE CONDITIONAL PROBABILITIES (PROBABILITY ORDER)

Probability

3. IE-04 3.1E-04

0. OE+00 0.OE+00 55 54 45 53 44 49 50 Sequence LOOP -rt/loop EMERG.POWER afw/emerg.power LOOP -rt/loop EMERG.POWER -afw/emerg.power -porv.or.srv.chall-SEAL.LOCA EP.REC LOOP -rt/loop -EMERG.POWER AFW NPI(F/B)

LOOP -rt/ioop EMERG.POWER -afw/emerg.power -porv.or.srv.chali SEAL.LOCA EP.REC(SL)

LOOP -rt/loop -EMERG.POWER AFW -NPI(F/B) NPR/-HPI LOOP -rt/ioop EMERG.POWER -afw/emerg.power porv.or.srv.chall-porv.or.srv.reseat/emerg.power -SEAL.LOCA EP.REC LOOP -rt/loop EMERG.POWER -afw/emerg.power porv.or.srv.chall porv.or. srv. reseat/erserg.power End State Prob N Rec-CD CD CD CD CD CD CD 1.2E-04 4.1E-02 9.7E-05 1.2E-01 3.4E-05 3.2E-02 2.6E-05 1.2E-01

2. OE-05

8. 4E-06 5.4E-06

3. 9E-02 1.2E-01 1.2E-01 non-recovery credit for edited case SEQUENCE CONDITIONAL PROBABILITIES (SEQUENCE ORDER)

Sequence End State Prob 44 45 49 50 53 54 55 LOOP -rt/loop -ENERG.POWER AFW -NPI(F/B)

HPR/-NPI LOOP -rt/loop, -ENERG.POWER AEW BPI(F/B)

LOOP -rt/loop EMERG.POWER -afw/einerg.power porv.or.srv.chall-porv.or.srv.reseat/emerg.power -SEAL.LOCA EP.REC LOOP -rt/loop EMERG.PONER -afw/emerg.power porv.or.srv.chall porv.or.srv. reseat/emerg.power LOOP -it/loop EMERG.POWER -afw/emerg.power

-porv.or.srv.chall SEAL.LOCA EP.REC(SL)

LOOP -rt/loop EMERG.POWER -afw/emerg.power -porv.or.srv.chall-SEAL.LOCA EP.REC LOOP -it/loop E!4ERG.POWER afw/emerg.power CD CD CD CD CD CD CD 2.OE-05 3.4E-05

8. 4E-06 5.4E-06 N Rec**

3. 9E-02 3.2E-02 1.2E-01

1. 2E-01 2.6E-05 1.2E-01 9.7E-05 1.2E-01 1_2E-04 4_1E-02

-* non-recovery credit for edited case SEQUENCE MODEL:

BRANCH MODEL:

PROBABILITY FILE:

No Recovery Limit c: \\asp\\1989\\pwrdseal.cmp c: \\asp\\l989\\crystal3.sll c:\\asp\\1989\\pwr~bs~ll.pro Event Identifier: 302/89-025

B-86 BRANCH FREOUEMCIES/PROBABILITIES Branch System Mon-Recov Opr Fail trans LOOP Branch Model:

TNITOR Initiator Freq:

loca rt rt/ loop EMER. POWER Branch Model:

l.OF.2 Train 1 Cond Prob:

Train 2 Cond Prob:

AFW Branch Model:

l.OF.2+ser Train 1 Cond Prob:

Train 2 Cond Prob:

Serial Component Prob:

afw/emerg.power mfw porv.or.srv.chall porv.or.srv. reseat porv.or.srv. reseat/erserg.power SEAL.LOCA Branch Model:

l.OF.l Train 1 Cond Prob:

EP.REC (SL)

Branch Model:

1.OF.1 Train 1 Cond Prob:

EP.REC Branch Model:

1.OF.1 Train 1 Cond Prob:

HPI Branch Model:

l.OF.3 Train 1 Cond Prob:

Train 2 Cond Prob:

Train 3 Cond Prob:

HPI (F/B)

Branch Model:

1.OF.3+opr Train 1 Cond Prob:

Train 2 Cond Prob:

Train 3 Cond Prob:

HPR/-HPI Branch Model:

1.OF.2+opr Train 1 Cond Prob:

Train 2 Cond Prob:

3. 9E-04 1.eE-05 > l.8E-05 1.8E-05 2..4E-06 2.8E-04 O.OE+OO 2.9E-03 > 5.7E-02 5.OE-02 > Failed

5. 7E-02 1.3E-03 > 5.OE-02 2.OE-02 > Failed 5.OE-02 2.8BE-04

5. OE-02 2.OE-O1

8. OE-02

1. OE-02

1. OE-02 6.OE-02 > 1.5E-02 6.OE-02 > 1.5E-02 7..6E-01 > 2.8E-01 7.6E-01 > 2.8E-01 3.1E-01 > 1.6E-02 3.lE-01 > 1.6E-02 3.OE-04 > 1.00-02

1. OE-02 1.00-01 > Unavailable 3.OE-0l > Unavailable 3.0E-04 > 1.00-02

1. OE-02 1.00-01 > Unavailable 3.OE-0l > Unavailable 1.5E-04 > l.OE-02

1. OE-02 1.5E-02 > Unavailable

1. 00+00 3.3E-01 > 1.5E-01 4.3E-01 1.2E-01

1. OE+00

8. 00-01

2. 6E-01 3.4E-01 3.4E-01 1.00+00 1.1lE-02

1. 00+00

1. 00+00

1. 0E+00 1.0E+00 8.4E-01 8.4 E-01 1.00E+00 1.00-02 1.00-03

• branch model file

• • forced Minarick 06-15-1990 10:40:05 Event Identifier: 302/89-025

B-87 CONDITIONAL CORE DAMAGE PROBABILITY CALCULATIONS 302/89-025 LOOP in hot shutdown with one DG 00S (caic 2) 06/29/89 Crystal River 3 Event Identifier:

Event

Description:

Event Date:

Plant:

INITIATING EVENT NON-RECOVERABLE INITIATING EVENT PROBABILITIES LOOP SEQUENCE CONDITIONAL PROBABILITY SUMS 1.5E-01 End State/Initiator Probability CD LOOP Total ATWS LOOP Total SEQUENCE CONDITIONAL PROBABILITIES (PROBABILITY ORDER) 3.5E-05 3.5SE-O5

0. OE+00

0. OE+00 Sequence End State Prob N Rec-*

45 55 54 44 53 LOOP -rt/loop -emerg.power AFW hpi(f/b)

LOOP -rt/loop emerg.power afw/emerg.power LOOP -rt/loop emerg.power -afw/emerg.power -porv.or.srv.chail -

SEAL.LOCA EP.REC LOOP -rt/loop -emerg.power AFW -hpi(f/b) hpr/-hpi LOOP -rt/loop emerg.power -afw/emerg.power -porv.or.srv.chall SEAL.LOCA EP.REC(SL)

CD CD CD CD CD 2.OE-05 3.3E-02 5.8E-06 4.lE-02 4.9E-06 1.2E-01 2.2E-06 3.9E-02 1.3E-06 1.2E-01 non-recovery credit for edited case SEQUENCE CONDITIONAL PROBABILITIES (SEQUENCE ORDER)

Sequence End State Prob N Rec**

44 45 53 54 55 LOOP -rt/loop -emerg.power AFW -hpi(f/b) hpr/-hpi LOOP -rt/loop -emerg.power AFW hpilf/b)

LOOP -rt/loop emerg.power -afw/emerg.power -porv.or.srv.chall SEAL.LDCA EP.REC(SL)

LOOP -rt/loop emerg.power -afw/emerg.power -porv.or.srv.chall -

SEAL.LOCA EP.REC LOOP -rt/loop emerg.power afw/emerg.power CD CD CD CD CD 2.2E-06 3.9E-02 2.OE-05 3.3E-02 1.3E-06 1.2E-01 4.9E-06 1.2E-01 5.8E-06 4.1E-02

-* non-recovery credit for edited case SEQUENCE MODEL:

BRANCH MODEL:

PROBABILITY FILE:

c: \\asp\\1989\\pwrdseal.cmp c: \\asp\\1989\\crystal3.sll c: \\asp\\1989\\pwr bs~ll.pro No Recovery Limit BRANCH FREQUENCIES/PROBABILITIES Branch trans LOOP Branch Model:

INITOR Event Identifier: 302/89-025 System Non-Recov Opr Fail

3. 9E-04 1.8E-05 > 1.8E-05

1. OE+00 3.3E-01 > 1.5E-01

B-88 Initiator Freq:

loca rt rt/ loop emerg. power AFW Branch Model:

l.OF.2-4ser Train 1 Cond Prob:

Train 2 Cond Prob:

Serial Component Prob:

afw/emerg.power mfw porv.or.srv.chall porv.or.srv. reseat porv.or.srv.reseat/emerg.power SEAL. LOCA Branch Model:

l.OF.1 Train 1 Cond Prob:

EP.REC (SL)

Branch Model:

l.OF.1 Train I Cond Prob:

EP. REC Branch Model:

1.OF.l Train I Cond Prob:

hpi hpi (f/b) hpr/-hpi 1.8E-05 2.4E-06 2.8E-04 0.004-00 2.9E-03 1.3E-03 > 5.0E-02 2.0E-02 > Failed 5.00-02 2.8E-04 5.00-02 2.OE-01 8.OE-02

1. OE-02 1.0 E-02 6.OE-02 > 1.5E-02 6.00-02 > 1.5E-02 7.6E-01 > 2.8E-01 7.6E-01 > 2.8E-01 3.1E-01 > 1.60-02 3.1E-01 > 1.6E-02 3.00-04 3.00-04 1.5E-04 4.30-01 1.20-01 1.00+/-00 8. 00-01

2. 60-01 3.4E0-01 3.40-01

1. 00+00 1.10-02 1.00+00 1.00+00 1.00+00 1.00+00 8.40-01 8.40-01 1.00+00

1. 0 -02 1.00E-03 branch model file

• • forced Minarick 06-15-1990 10:46:26 Event Identifier: 302/89-025