ML20148C615
| ML20148C615 | |
| Person / Time | |
|---|---|
| Site: | Maine Yankee |
| Issue date: | 05/16/1997 |
| From: | Callan L NRC OFFICE OF THE EXECUTIVE DIRECTOR FOR OPERATIONS (EDO) |
| To: | Christine K AFFILIATION NOT ASSIGNED |
| Shared Package | |
| ML20148C622 | List: |
| References | |
| NUDOCS 9705270111 | |
| Download: ML20148C615 (8) | |
Text
_ _ _
S-34f pn era y
1 UNITED STATES g
j NUCLEAR REGULATORY COMMISSION WASHINGTON, D.C. 20555-0001
- ,o May 16, 1997 Ms. Kris L. Christine P.O. Box 12 Alna, Maine 04535
Dear Ms. Christine:
In a letter dated April 14,1997, Senator Susan M. Collins wrote Chairman Shirley Ann Jackson regarding your concerns about the safety of the Maine Yankee Atomic Power Station and the adequacy of the IOC's oversight of that facility as it relates to tne NRC's independent Safety Assessment Tt e.m (ISAT) inspection. Senato. Collins requested that the NRC provide you with related documents that "would normally be released to the public" in an effort to promote your confidence that the issues prompting your concerns are open for the public to examine. Specifically, you requested "any and all documen-tation related to the ISAT of Maine Yankee including individual reports, draft ISAT reports, dissenting opinions, meeting notes, communication between Chairman Jackson and the ISAT, and any other information in the possession of the NRC re.lating to the ISAT."
Please be advised that we have contacted all members of that ISAT in an effort to provide you with applicable documents, in response to the Senator's request, we are therefore providing you herewith the above-mentioned records currently available from the Office for Analysis and Evaluation of Operational Data, which are or would normally be released to the public. The staff believes that these records are a complete response to your request. However, if additional records promulgated by the ISAT become available, we will forward them to you.
In accordance with the Senator's request, we are providing you the following documents:
Appendix A is a list of all the documents we are enclosing in their entirety which will be made publicly available or are already in the NRC Public Document Room. Appendix B is a list of all the documents we are enclosing that have been partially redacted in accordance with Exemption 6 of the Freedom of Information Act to delete information, the disclosure of which would constitute a clearly unwarranted invasion of personal privacy (e.g., social security numbers). These documents will also be placed in the NRC Public Document Room.
Y 4
NRcFII.Egymyggggy 2300G7 I
9705270111 970516 PDR ADOCK 05000309 H
ppg I
L m
=-..
.?
Ms. K. Christine <
In addition, please note that the staff sent some documents to the licensee for a proprietary / confidential review pursuant to Exemption 4 of the Freedom of Information Act. Upon receipt of the licensee's response, we will forward to you the releasable portions of those documents, as well as place the documents in the Public Document Room.
I trust the above is responsive to your concerns.
Sincerely, Original Signed by L J. Callan L. Joseph Callan Executive Director for Operations
Enclosures:
1.
Appendix A - Documents that are publicly available I
2.
Appendix B - Documents partially redacted (Exemption 6/FOIA) cc:
The Honorable Susan M. Collins United States Senate Washington, DC 20510-1904 Distribution (w/o enct):
File Center (w/ enc 1)
Public (w/ enc 1)
EDO R/F (97-282)
AEOD R/F 1RD R/F EJordan HThompson PNorry JBlaha SBurns HMiller, RI DDorman SMcKelvin (AEOD 97-51)
MGCrutchley RConte, RI 1
DISK / DOCUMENT NAME: A:\\DEllB\\GT97282
- SEE PREVIOUS CONCURRENCES To r:ctive a copy of this document, indicate in the box:
"C" = Copy w/o attachment, "E" = Copy w/ attachment, "N" = Noj:ppy,
Ndkh OFC MA:AEOD E
IRD:AEOD D:lRD:AEOD N
D:AEOD hk
-K N bh V NAME CSiegel:mgc PJPrescott FJCongel DFRoss DATE 05/14/97*
05/14/97*
05/14/97*
05d79N 05697 OFC DEDO f /g EDOg ELJohfb[
LJCbah NAME 05/y97 05/b7/97 DATE f
OFFICIAL RECORD COPY (0 Buw, tn DF.R. To re I
db '} M f ugim%
WR l
)
I 1
)
/
Ms. K. Christine /
j.
/
l l
Enclosures:
/
1.
Appendix A - Documents that are publicly available i
i l
2.
Appendix B - Documents partially redacted (Exemption 6/FOlA)
I cc:
The Honorable Susan M. Collins United States Senate Washington, DC 20510-1904 Distribution (w/o encl):
File Center Public EDO R/F (97-282) i AEOD R/F IRD R/F EJordan l
HThompson PNorry JBlaha I
SBurns HMiller, RI DDorman l
SMcKelvin (AEOD 97-51)
MGCrutchley RConte, RI l
DISK / DOCUMENT NAME: p:\\DEllB\\GT97282 To rzczive a copy of this documpnt, indicate in the box: "C" = Copy w/o attachment, "E" = Cony w/at3acfkpent, "N" = No copy OFC MA:AEOD /, b IRD:AEOD D:lRD:AEOD h
D:A OGC CSiegel:rr)gcb PJPrescott M FJCongel f[j OFRh '
KCyr NAME DATE 05/M/97 05/g97 05/)i97
/k OEh97 05/ /97 OFC DEDd EDO NAME Eldordan LJCallan DATE
..d5/ /97 05/ /97 OFFICIAL RECORD COPY l
i i
APPENDIX A Documents that are Publicly Available 1.
INDEPENDENT SAFETY ASSESSMENT OF MAINE YANKEE ATOMIC POWER COMPANY, prepared by the U.S. Nuclear Regulatory Commission, dated October I
1996.
I 2.
Letter to Charles D. Frizzle from Edward L. Jordan, dated July 17,1996--
INDEPENDENT SAFETY ASSESSMENT TEAM ENTRANCE MEETING.
3.
Letter to Charles D. Frizzle from Edward L. Jordan, dated August 1,1996 --
TECHNICAL REVIEW OF PRELIMINARY RESULTS OF AFW/EFW RELIABILITY ASSESSMENT.
4.
Letter to Ellis W. Merschoff from Uldis Vanags, dated October 10,1996--
COMMENTS PERTAINING TO THE PROCESS OF THE INDEPENDENT SAFETY ASSESSMENT OF MAINE YANKEE.
5.
Letter to Forrest J. Remick from Edward L. Jordan, dated July 9,1996.
6.
Note to ISAT Functional Area Leaders from Ellis Merschoff, dated June 28,1996--
ISAT GUIDANCE.
I 7.
Letter to Peter J. Wiley from Edward L. Jordan, dated June 18,1996.
1 8.
Note to Peter J. Wiley from Ola B. West, dated October 16,1996-- OFFICE AND MAILING ADDRESSES OF THE ISA TEAM MEMBERS.
9.
Memorandum to Richard W. Cooper from Ellis W. Merschoff, dated October 17, 1996 -INSPECTION PROGRAM CREDIT FOR THE INDEPENDENT SAFETY ASSESSMENT AT MAINE YANKEE.
10.
Memorandum to Ronald L. Lloyd from Edward L. Jordan, dated October 17,1996--
PARTICIPATION ON THE MAINE YANKEE INDEPENDENT SAFETY ASSESSMENT TEAM.
11.
Letter to Charles D. Frizzle from Edward L. Jordan, dated September 11,1996.
12.
Memorandum of Understanding for David Decrow, dated June 27,1996; for Uldis Vanags, dated June 25,1996; for Patrick J. Dostie, dated June 25,1996, 13.
OVERVIEW OF THE MAINE YANKEE INDEPENDENT SAFETY ASSESSMENT LICENSEE BRIEFING, dated June 20,1996, 9
I 14.
Letter to Peter J. Wiley from Ellis W. Merschoff, dated July 3,1996.
i
. 15.
Letter to Charles D. Frizzle from Richard W. Cooper, dated November 20,1996--
NRC INTEGRATED INSPECTION REPORT 50-309/96-09.
16.
Letter to Charles D. Frizzle frem James T. Wiggins, dated September 20,1996 -
MAINE YANKEE SPECIAL INSPECTION REPORT 50-309/96-10.
j l
17.
Letter to Charles D. Frizzle from Richard W. Cooper, dated November 20,1996--
NRC SPECIAL INSPECTION REPORT 50-309/96-11.
18.
Letter to Charles D. Frizzle from Richard W. Cooper, dated February 11,1997 --
NRC INTEGRATED INSPECTION REPORT 50-309/96-16.
19.
Letter to Richard Conte from Harold M. Hagopian, dated October 18,1996 -- NRC PUBLIC MEETING REGARDING MAINE YANKEE, OCTOBER 10,1996.
20.
Commission Paper, dated February 18,1997-- RESPONSE TO OlG EVENT INQUIRY 96-04S REGARDING MAINE YANKEE.
21.
Letter to Chairman Shirley A. Jackson from Charles D. Frizzle, dated December 10, 1996 -- INDEPENDENT SAFETY ASSESSMENT.
22.
Memorandum to L. Joseph Callan from Samuel J. Collins, dated April 17,1997 --
STAFF ACTIONS RESULTING FROM THE INDEPENDENT SAFETY ASSESSMENT OF THE MAINE YANKEE ATOMIC POWER STATION.
23.
System Training Manual - Chapter 28 " Emergency / Auxiliary Feedwater System."
24.
Technical Information Related to Probalistic Risk Assessment.
25.
System Training Mariual-Chapter 6 " Emergency Core Cooling System."
26.
System Training Manual-Chapter 34 " Diesel Generators, & Appendix "R" Diesel
& Electrical Distribution System."
27.
Maine Yankee Telephone Listing.
l 28.
Letter to John Wilcynski from Frank J. Congel, dated August 23,1996 - NRC PROJECT ENTITLED, " TECHNICAL ASSISTANCE TO SUPPORT AN INDEPENDENT SAFETY ASSESSMENT: ANALYTIC CODE SUPPORT," JOB CODE J8226.
29.
Confidentiality Agreements.
30.
Facsimile to Norm Lauben, NRC from Mary Timmers/ Harold Sullivan, Los Alamos National Labortory, dated September 19,1996-- INDEPENDENT REVIEW OF YANKEE ATOMIC ELECTRIC COMPANY NON-LOSS-OF-COOLANT ACCIDENT SAFETY ANALYSIS.
l l
l l 31.
Letter to Norman Lauben, NRC from Lothar T. Wolf, University of Maryland, dated September 16,1996-- LMITCO PURCHASE ORDER NUMBER C90-176102 APPENDIX - A, STATEMENT OF WORK.
32.
Letter to Jim Wolf from Marvin J. Thurgood, dated September 22,1996.
33.
Letter to all Operating Reactor Licensees, dated February 8,1983 -- LICENSEE QUALIFICATION FOR PERFORMING SAFETY ANALYSES IN SUPPORT OF LICENSING ACTIONS (Generic Letter No. 83-11).
34.
Sections from the Final Safety Analysis Reports.
I l
1 i
\\
\\
l l
d
1 l
l APPENDlX B Documents Partiaily Redacted (Exemption 6/ Freedom of Information Act) 1.
Memorandum to Thomas L. Harrison from Edward L. Jordan, dated June 13,1996
-- ACCESS TO RADIOLOGICAL, VITAL, AND PROJECTED AREAS.
l 2.
Memorandum to Richard A. Dopp from Frank J. Congel, dated June 25,1996--
REQUEST FOR GENERAL, TEMPORARY UNESCORTED ACCESS TO BUILDINGS OWFN AND TWFN.
3.
Memorandum to Raymond J. Brady from Frank J. Congel, dated June 26,1996--
l STANDARD BACKGROUND CHECK WAIVER.
l 4.
Memorandum to Richard A. Dopp from Frank J. Congel, dated June 25,1996--
l REQUEST FOR EXTENSION OF GENERAL, TEMPORARY UNESCORTED ACCESS TO BUILDINGS OWFN AND TWFN FOR CYRll J. CRANE AND GEORGE Y. CHA.
l S.
Memorandum to Richard A. Dopp from Frank J. Congel, dated July 30,1996 -
REQUEST FOR GENERAL, TEMPORARY UNESCORTED ACCESS TO BUILDING TWFN FOR FORREST J. REMICK.
6.
Memorandum to Richard A. Dopp from Frank J. Congel, dated July 3,1990 --
l REQUEST FOR GENERAL, TEMPORARY UNESCORTED ACCESS TO BUILDINGS OWFN AND TWFN.
l 7.
Memorandum to Thomas L. Harrison from Edward L. Jordan, dated June 13,1996 l
-- ACCESS TO RADIOLOGICAL, VITAL, AND PROTECTED AREAS.
8.
Independent Government Cost Estimates.
9.
Contractor Resumes.
10.
Elements of Cost Schedule for WAS-Field Work Proposal and Work for others Estimates.
11.
Letter to Jim Lake, Idaho National Engineering Laboratory from Frank J. Congel, dated June 26,1996 - NEW NRC PROJECT ENTITLED, " TECHNICAL ASSISTANCE TO SUPPORT AN INDEPENDENT SAFETY ASSESSMENT: ANALYTICAL CODE SUPPORT," JOB CODE J8226.
i l
l t
I 8
ii 4
APPENDIX A I
i
_, __j
pR Qfegj
't United States
(
O i
i Nuclear Regulatory Commission
%...../
INDEPENDENT SAFETY ASSESSMENT OF MAINEYANKEE ATOMIC POWER COMPANY
- ~ '.c gER*h?yi M
.. 2 ';. ;;; -
m.
g'cOAr%.-4 LV '- wm
._w -
em
.~
~ ~ ~
. s: = w....w, v:;.,rg-2
_s r.,.
..p
-s
. p.6: %.= #.
gag,e
.. -m s,g.
- . -, p..m
. c, -
w, g.ex
.; p.
q#w.a T
-as 31 3 4 7,_g
-;-3
..- f-
.=
--e
.,.s 3;
Jedh[
^
p.
. g!
4 s-
~
- &y., -
._ a
~
.__,'%.a w
,-... ~.-
g*.?"'
.A'".
i..n y',. ! +.,
s, J ' ;,,
w-.
October 1996 9
r 0
6 o
Licensee:
Maine Yankee Atomic Power Company Facility:
Maine Yankee Atomic Power Station Location:
Wiscasset, Maine Docket No:
50-309 Onsite Evaluation Period:
July 15-26, 1996, and August 12-23, 1996 Team Manager:
Edward L. Jordan Team Leader:
Ellis W. Merschoff Administrative Assistant:
Ola B. West Team Members:
Larry Bell John R. Boardman Russell L. Bywater, Jr.
i Harold O. Christensen i
George M. Hausman John V. Kauffman Kriss M. Kennedy G. Norman Lauben Ronald L. Lioyd Alan L. Madison Thomas 0. Martin Peter J. Prescott Jack E. Rosenthal State Representatives:
David Decrow Patrick Dostie Uldis Vanags Contractors:
George Cha Robert Christie Cyril crane Brian Haagensen Michael Shlyamberg Leonard Ward lo!7!96 Submitted By:
Ellis W. Merschoff, T eader Date Approved By:
YA
/
5 Edwaril L ordan, Team Manager Date
0 t
TABLE OF CONTENTS EXECUTIVE
SUMMARY
v
1.0 INTRODUCTION
1 1.1 Background..........................
I 1.2 Scope and Objectives.....................
I 1.3 Methodology 2
1.4 Facility Description.....................
3 1.5 Organization.........................
3 2.0 CONFORMANCE TO DESIGN AND LICENSING BASIS 4
2.1 Transient and Accident Safety Analyses 4
2.1.1. Analytic Code Support 4
2.1.2 SER Conditions Satisfied But Not Documented 8
2.1.3 Control Element Assembly Drop Transient........
8 2.1.4 Main Steam Line Rupture................
10 2.1.5 Lack Of A Documented Process To Demonstrate Code 13 Capability 2.2 Design Review Of Selected Systems 13 2.2.1 High-Pressure-Safety Injection (HPSI) System 1?
2.2.1.1 HPSI System Description 13 2.2.1.2 Flow Testing.................
13 2.2.1.3 Throttle Valve Settings 15 2.2.1.4 CS System Support to the HPSI System 15 2.2.2 Service Water / Component Cooling Water 17 2.2.2.1 System Description..............
18 1
2.2.2.2 Availability of Seawater Flow Into the Service Water Intake Structure........
18 2.2.2.3 Service Water Pump NPSH 18 2.2.2.4 Circulating Water Pump House Flooding 18 2.2.2.5 Residual Heat Removal (RHR) Heat Exchanger Thermal Transient................
18 2.2.2.6 SW and PCCW/SCCW Integrated Operation 19 2.3 Electrical and Instrument and Controls............
?'
2.3.1 115 kV Offsite Power Lines..............
21 2.3.2 Degraded Grid Undervoltage Relay Calibration Tolerance Band 23 2.3.3 Electrical Protection, Coordination, and Cable Sel ec t i on.......................
23 2.3.4 125 Volt dc Vital Station Batteries 24 2.3.5 Emergency Diesel Generator Electrical Loading 24 2.3.6 Electrical Calculations 25 2.3.7 Inadequacies in Ventilation Systems 25 2.3.7.1 Protected Switchgear Room Ventilation 26 2.3.7.2 Spray Building Ventilation Deficiencies 28 2.3.8 Procedure for Cross-Connecting DC Buses 29 j
2.3.9 Environmental Qualification (EQ) Program.......
29 l
2.3.9.1 EQ Submergence................
29 2.3.9.2 EQ/RG 1.97 Instrument Qualification 30 il b
0 2.3.9.3 Backlog Of EQ Items 30 2.4 FSAR Inconsistencies.....................
31 2.4.1 Spent Fuel Pool Heat Exchanger Rating 31 2.4.2 Atmospheric Steam Dump Rated For 2.5 Percent Power..
32 j
3.0 ASSESSMENT
OF OPERATIONAL SAFETY..................
33 3.1 Operations Assessment 33 3.1.1 Problem Identification / Problem Resolution 33 3.1.1.1 Operator Workarounds and Com Actions............pensatory 33 3.1.1.2 Control Room Staffing 34 3.1.2 Quality Of Operations 35 3.1.2.1 Control Room Observations 35 3.1.2.2 Safety Systems Wal kdowns...........
35 3.1.2.3 Management Oversight of Operations......
36 3.1.2.4 Risk Management 36 3.1.2.5 Operability Determinations..........
36 1
3.1.2.6 Technical Specification Interpretations 37 3.1.2.7 Post-Trip Reviews 38 3.1.3 Programs And Procedures 38 3.1.3.1 Emergency Operating Procedures........
38 3.1.3.c Configuration Controls............
39 i
3.1.3.3 Restart Readiness Program 40 3.1.3.4 Operations Performance Assessment Program 40 3.1.4 Plant Support 40 3.1.4.1 Fire Protection Program 40 3.1.4.2 Training Program...............
41 i
3.1.4.3 Radiation Protection Program.........
41 3.2 Maintenance And Testing Assessment..............
42 3.2.1 Equipment Performance..............
42 3.2.1.1 Equipment Perfonnance of Auxiliary Feedwater, Emergency Feedwater, High Pressure Safety i
Injection, and Emergency Diesel Generators 42 3.2.1.2 Equipment Performance Demonstrated Through Pump and Valve Testing 45 3.2.1.3 Containment Performance Demonstrated Through 10 CFR 50 Appendix J Leak Rate Testing..................
45 3.2.1.4 Equipment Problems Trending Upwards....
45 3.2.1.5 Plant Walkdown Observations 46 3.2.2 Problem Identification And Resolution......
47 3.2.3 Quality of Maintenance 48 3.2.4 Testing Weaknesses 49 3.2.5 Maintenance Work Order Control 53 3.2.5.1 Use Of Probabilistic Risk Assessment Methodologies...............
54 3.2.5.2 Work Planning And Tracking 54 3.3 Engineering Assessment 55 3.3.1 Identification And Resolution Of Problems.......
55 3.3.2 Engineering Programs 56 iii
)
l l
3.3.2.1 Engineering Modifications And Tem l
Modifications........... porary 57 l
3.3.2.2 Erosion / Corrosion (E/C) Program 57 3.3.2.3 Service Water Operational Performance Inspection 58 3.3.3 Design-Basis Information...............
58 l
3.3.4 Quality Of Engineering 59 l
4.0 SELF ASSESSMENT, CORRECTIVE ACTIONS, PLANNING, AND RESOURCES....
61 l
4.1 Self Assessment 61 4.2 Corrective Actions 64 i
l 4.2.1 Probl em Eval uation..................
64 4.2.2 Problem Resolution..................
65 4.3 Planning And Resources....................
66 i
l 4.3.1 Plans 66 4.3.2 Economic Environment..
67 4.3.3 Results Of Resource Constraints 68
5.0 CONCLUSION
S............................
70 l
5.1 Licensing And Design-Basis 70 i
5.2 Operati onal Safety......................
70 l
5.2.1 Operations......................
70 l
5.2.2 Maintenance And Testing 70 l
5.2.3 Engineering 71 5.3 Root Causes Of Significant Findings 71 1
5.3.1 Root Cause 1:
Economic Pressure...........
71 l
5.3.2 Root Cause 2:
Problem Identification 71 6.0 REGULATORY ISSUES.........................
73 i
6.1 Analytic Code Validation...................
73 6.2 Compliance With Safety Evaluation Reports 73 6.3 Licensing Reviews For Power U 73 Safety Guide 1....... prates 6.4 74 l
6.5 Inspection Program.....................
74 7.0 EXIT MEETINGS........................
75 l
APPENDICES 76 f
iv
EXECUTIVE
SUMMARY
=
Background===
In December 1995, the Union of Concerned Scientists forwarded anonymous allegations to the State of Maine, and the State submitted the allegations to the NRC. The allegations were that Yankee Atomic Electric Company knowingly performed inadequate analyses to support an increase in the rated thermal power at which Maine Yankee Atomic Power Station (MYAPS) may operate. After performing a technical review, the NRC Office of Nuclear Reactor Regulation (NRR) issued a confirmatory order on January 3,1996, limiting power operation at the plant to the original licensed power level of 2440 MWt.
The NRC Office of the Inspector General (0IG) completed an inquiry into this allegation on May 8, 1996.
OIG established that MYAPS had experienced problems with, and made modifications to, the RELAP/5YA computer code which was used in the emergency core cooling analysis for a small-break loss-of-a coolant accident.
OIG also reported weaknesses in the NRC review and followup activities which contributed to NRC failure to detect these deficiencies.
In response to these findings, as well as to respond to concerns by the Governor of Maine about the safety and the effectiveness of regulatory oversight of MYAPS, the NRC Chairman initiated an independent safety assessment of MYAPS.
This assessment was to be perfomed by a team comprised of staff who were independent of any recent or significant regulatory oversight responsibility for MYAPS. Additionally, the assessment was to be coordinated with the State of Maine to facilitate participation by State representatives consistent with the Commission's policy on cooperation with States at commercial nuclear power plants (57 FR 6462, February 25,1992).
Licensing and Design-Basis l
Maine Yankee was in general conformance with its licensing-basis although significant items of non-conformance were identified. The licensing-basis was understood by the licensee but lacked specificity, contained inconsistencies, and had not been well maintained.
The use of analytic codes for safety analyses was very good.
Cycle specitic core performance analyses were excellent. More complicated, less frequently performed safety analyses contained weaknesses, but the analyses were found to be acceptable based on compensating margin.
Conditions of use specified in the safety evaluation reports were found to be satisfied, but not documented.
The quality and availability of design-basis information was good overall.
Despite uncorrected and previously undiscovered design problems, the design-basis and compensatory measures adequately supported plant operation at a power level of 2440 MWt.
However, the team could not conclude, and the licensee did not demonstrate, that at a power of 2700 MWt the design-basis assured adequate NPSH for the containment spray pumps and the heat removal capability of the component cooling water system in the event of a loss-of-coolant accident.
v J
l l
Operations Performance in the area of operations was very good, with strengths noted in the areas of operator performance during routine and transient operating conditions; shift turnovers and pre-evolution briefs; use of risk information to assure safe operations; and the involvement of management in day-to-day operations. Weaknesses were noted in the area of "workarounds" and compensatory measures which unnecessarily burdened the operators or complicated their response to transient conditions. Additionally, log keeping practices and post-trip reviews lacked rigor.
Maintenance and Testing Performance in the area of maintenance was good overall however, testing was l
weak. The results of the review of equipment reliability for the auxiliary feedwater, emergency feedwater, high pressure safety injection, and emergency diesel generator systems showed mixed equipment performance.
Strengths were noted in the areas of knowledge and use of risk methodologies for planning, prioritizing, and scheduling work; the control and limited us~e of temporary sealants; and a motivated and dedicated work force.
Although material condition was considered good overall, a number of significant material condition deficiencies were noted as was a decline in material condition l
following the 1995 steam generator tubing outage.
Inadequacies in the scope of testing programs were identified, as were weaknesses in the rigor with which testing was performed and in the evaluation of testing results to demonstrate functionality of safety equipment.
A lack of a questioning atti.tude and stressed resources resulted in the use of poor surveillance procedures and ineffective evaluation of surveillance test data.
Engineering The quality of engineering work was mixed but considered good overall.
Strengths were noted in the capability and experience of the engineering staff, day-to-day engineering support of maintenance and operations, in the quality of most calculations, and in the routine use and application of analytic codes.
However, engineering was stressed by a shortage of resources, and there was a tendency to accept existing conditions.
Specific weaknesses were noted with inconsistent identification and resolution of problems, inadequate testing, and work on some calculations and analytic codes.
Self Assessment and Corrective Actions l
Wev sesses were identified in the areas of problem identification and l
resolution.
While licensee self-assessments were generally good, they l
occasionally failed to identify weaknesses or incorrectly characterized the l
significance of the findings. Additionally, some corrective actions were not timely and others were ineffective, leading to repetitive problems.
Licensee planning was generally effective, although some weaknesses were found in the overall implementation of improvement plans.
Some economic pressures resulted in limitations on resources, which impaired the licensee's ability to complete vi l
i l
l improvement projects that affected plant safety.
Equipment problems were not resolved and improvement programs were not effectively implemented because the licensee perceived them to be of low safety significance.
Root Causes and Overall Conclusions While overall performance at Maine Yankee was adequate for operation, a number of deficiencies were identified by the team in each of the areas assessed.
These deficiencies, which included weak identification and resolution of l
problems; weak scope, rigor, and evaluation of testing; and declining material condition stemmed from two closely related root causes.
These root causes were (1) economic pressure to be a low-cost energy producer has limited available resources to address corrective actions and some plant improvement upgrades and (2) there is a lack of a questioning culture which has resulted j
in the failure to identify or promptly correct significant problems in areas perceived by management to be of low safety significance.
The economic pressures discussed in Section 4.3 resulted in limitations on resources and interfered with the licensee' ability to complete projects and other efforts that would improve plant safety and testing activities.
Examples include the failure to adequately test safety related components (Section 3.2.4); the long-standing deficient design conditions, such as the undersized atmospheric steam dump valve (Sections 3.1.3.1 and 3.3.1) and environmental qualification issues (Section 2.3.9); and the lack of effective improvement programs, such as the design basis reconstitution program (Sections 3.3.3 and 4.3.3).
These and other examples discussed in the report illustrate the licensee's willingness to accept existing conditions, many of which became operator workarounds (Section 3.1.1.1).
Examples of issues which illustrate complacency and the failure to identify or promptly correct significant problems, include previously undiscovered deficient conditions of the service water and auxiliary feedwater water systems (Section 3.2 2); inadequacies in ventilation systems (Section 2.3.7);
post-trip reviews which lacked rigor and completeness (Section 3.1.2.7);
emergency operating procedures that may not adequately address an inadequate core cooling event and a steam generator tube rupture under certain conditions (Section 3.1.3.1); lack of a questioning attitude during test performance and evaluation that was not conducive to discovering equipment problems, but rather to accepting equipment performance (Sections 2.2.1, 3.2.2, 3.2.4); and licensee self-assessments that occasionally failed to identify weaknesses, or incorrectly characterized the significance of findings (Section 4.1).
In addition, some corrective actions were not timely and others were ineffective, leading to repetitive problems (Section 4.2).
t i
i vii a
l
?
i
1.0 INTRODUCTION
l
1.1 Background
In December 1995, the Union of Concerned Scientists forwarded anonymous allegations to the State of Maine, and the State submitted the allegations to the NRC.
The allegations were that Yankee Atomic Electric Company knowingly performed inadequate analyses to support an increase in the rated thermal power at which Maine Yankee Atomic Power Station (MYAPS) may operate. After performing a technical review, the NRC Office of Nuclear Reactor Regulation (NRR) issued a confirmatory order on January 3, 1996, limiting power operation at the plant to the original licensed power level of 2440 MWt.
The NRC Office of the Inspector General (OIG) completed an inquiry into this allegation on May 8, 1996.
OIG established that MYAPS had experienced problems with, and made modifications to, the RELAP/5YA computer code which was used in the emergency core cooling analysis for a small-break loss-of-coolant accident.
The problems and subsequent modifications were not reported to the NRC as is required and the code was not used in accordance with the Safety Evaluation Report and with the Three Mile Island Action Plan Item II.K.3.3.1.
OIG also reported weaknesses in the NRC review and followup activities which contributed to NRC failure to detect these deficiencies.
The RELAP issue raised a question of whether similar problems existed in other areas.
In order to address this question, as well as to respond to concerns by the Governor of Maine about the safety and the effectiveness of regulatory oversight of Maine Yankee, the NRC Chaiman initiated an independent safety assessment of MYAPS. This assessment was to be performed by a team comprised of staff who were independent of any recent or significant regulatory oversight responsibility for Maine Yankee. Additionally, the assessment was to be coordinated with the State of Maine to facilitate participation by State representatives consistent with the Commission's policy on cooperation with States at commercial nuclear power plants (57 FR 6462, February 25, 1992).
The RELAP issue was the subject of a separate NRC investigation and was not considered part of this assessment.
1.2 Scope and Objectives On May 31, 1996, the staff was directed to perform an independent evaluation of Maine Yankee's safety performance. The overall goals of the independent safety assessment were to:
(1) independently assess tP.; conformance of MYAPS to its design and licensing bases including appropriate reviews at the site and corporate offices; (2) independently assess operational safety performance giving risk perspectives where appropriate; (3) evaluate the effectiveness of licensee self-assessments, corrective actions, and improvement plans; (4) i determine the root cause(s) of safety-significant findings and draw conclusions on overall performance.
1 l
J
_. _ _ _ _ ~. _. _ _ -.. _ _ _ _ _ _ _ _. _ _. _.. _ _ _ _..
I 1.3 Methodology The Independent Safety Assessment (ISA) team comprised 25 members: 16 NRC members, 3 State of Maine members, and 6 contractors.
The team was organized with five functional area leaders reporting to a team leader.
The team leader reported to the team manager who reported directly to the NRC Chairman.
The ISA team members were independent of both the NRC Region I office and NRR. The team devoted several weeks to preparation that included team meetings and briefings-by the staffs from Region I, NRR, the Office for Analysis and i
Evaluation of Operational Data (AE00), the Office of Investigations and OIG.
On July 15, 1996, the team began a two-week evaluation at the facility, including the corporate office and the Yankee Atomic Electric Company offices.
The team returned to Maine Yankee on August 12, 1996, for an additional two weeks of evaluation. The representatives from the team met daily with their licensee counterparts to discuss team findings.
In addition to the State of Maine's participation in the assessment, the State had a two-member process team observe at key assessment milestones.
The process team provided the State with an assessment of the ISA relative to its fairness, balance, and objectivity.
The State also had a special five-member citizen's review team periodically briefed on the ISA team status.
The citizen's review team provided the State advice on and interpretations of the ISA team process and findings.
An indepth assessment was conducted in the areas of plant operations, maintenance, testing, engineering, analytic code support, and self-assessment and corrective actions.
The assessment consisted of interviews; system walkdowns; extended control room observations; system reviews of service water, high pressure safety injection, and emergency diesel generators; program, process, and procedure reviews; and analytic code reviews.
In addition, an extensive reliability analysis of auxiliay feedwater, emergency feedwater, high pressure injection, and emergency diesel generator systems was i
performed.
Emphasis was placed on identifying both licensee strengths and performance weaknesses.
The assessment relied on the existing NRC benchmark for assessing performance utilized in the NRC Systematic Assessment of Licensee Performance Program (SALP).
Specifically:
Superior performance is defined as follows:
e Licensee attention and involvement have been properly focused on safety and resulted in a superior level of safety performance.
Licensee programs and procedures have provided effective controls. The licensee's self-assessnent efforts have been effective in the identification of emergent issues.
Corrective actions are technically sound, comprehensive, and thorough.
Recurring problems are eliminated and resolution of issues is timely.
Root cause analyses are thorough.
2
e Good performance is defined as follows:
Licensee attention and involvement are normally well focused and resulted in a good level of safety performance.
Licensee programs and procedures normally provide the necessary control of activities, but deficiencies may exist. The licensee's self-assessments are normally good, although issues may escape identification.
Corrective actions are usually effective, although some may not be complete. Root cause analyses are normally thorough.
Acceptable performance is defined as follows:
Licensee attention and involvement have resulted in an acceptable level of safety performance.
However, licensee performance may exhibit one or more of the following characteristics.
Licensee programs and procedures have not provided sufficient control of activities in important areas.
The licensee's self-assessment effort's may not occur until after a potential problem becomes apparent.
A clear understanding of the safety implications of significant issues may not have been demonstrated.
Numerous minor issues combine to indicate that the licensee's corrective action is not thorough.
Root cause analyses do not probe deeply enough, resulting in the im.omplete resolution of issues, j
One area of this assessment, review of the use and application of analytic codes, is not typically reviewed as part of the NRC regulatory process.
Consequently, a panel of acknowledged experts in the area of code development and phenomenology were assembled and provided a critical review of the findings and observations of the ISA team in this' area.
1.4 Facility Description The Maine Yankee Atomic Power Station is located in the tidewater area on Bailey Point Road in Wiscasset, Maine. The plant is a Combustion Engineering pressurized-water reactor. The facility was constructed by Stone & Webster, which also served as the architectural engineer.
The full power operating license was issued on June 29, 1973.
1.5 Organization The Maine Yankee Atomic Power Station is owned and operated by the Maine Yankee Atomic Power Company.
The chart, Appendix B, illustrates the Maine Yankee organizational structure for management and support of the Maine Yankee Atomic Power Station.
l 3
1-I i
]
2.0 -CONFORMANCE TO DESIGN AND. LICENSING BASIS l
I This section describes the conformance of Maine Yankee to its design and licensing-basis.
Significant aspects of the design of Maine Yankee were based 1.
on handling " worst case" situations such as a postulated rupture of a main j
steam line or a large break of. reactor coolant system piping along with i
j~
additional assumptions, such as, the failure of mitigating equipment coincident with a loss of offsite power. This approach establishes the deterministic licensing basis.
This deterministic approach along with 1
4 conservative design, effective maintenance, and thorough testing provides an 1
inherent margin of safety and defense-in-depth to cope with actual transients and accidents that may occur.
To confirm plant conformance to the licensing basis, the team reviewed i
j transient and accident analyses (see Section 2.1), and equipment design issues-(see Sections 2.2 and 2.3). Discrepancies between actual operations, safety
~
analyses, design features and capability, and descriptive and numerical values i
contained in the Final Safety Analyses Report (FSAR) are summarized in
)
j Section 2.4.
1 2.1 Transient and Accident Safety Analyses 1
l Cycle-specific core performance analyses, such as the Control Element Assembly j
(CEA) drop transient described below, were excellent.
l l
l More complicated, less frequently performed systems safety analyses contained weaknesses, such as those associated with the steam line rupture accident, but F
the analyses were found to be acceptable based on compensating margin.
1 Overall, use of analytic codes for safety analyses was very good. SER 3
conditions were found to be satisfied but not documented. Code validation was j
mixed: excellent for physics and fuel codes, while weak for systems codes.
i
?
2.1.1. Analytic Code Support 1
The team evaluated the analytic code support provided by Yankee Atomic Electric' Company (YAEC) for Maine Yankee Atomic Power Company (MYAPrn) to I
assure that Maine Yankee was operated within the bounds of the safety j
analyses.
This assessment was performed by reviewing the YAEC process for l
conducting non-LOCA safety analyses described in Chapter 14 of the FSAR, and an indepth review of two specific safety analyses: the.CEA drop transient and the steam line rupture accident. Selection of the dropped CEA transient for in-depth review provided a structured means to examine many of the codes used by YAEC while selection of the steam line rupture analysis for review provided i
a forum for reviewing a dynamic accident analyzed with a complex systems code.
The overall review included:
(1) identification of the design-basis analyses for postulated accidents and anticipated operational occurrences, (2) identification of codes, methods, and limitations, based on the team's review of topical reports and NRC safety evaluation reports (SERs), (3) an assessment of how limitations, restrictions, and boundary conditions are reflected in the i
safety analyses. Central to the assessment was the verification that I
conditions of approval contained in NRC SERs had been satisfied in the safety 4
g-<--
, --+
. ~, - - -
--~v.--
v
l i
analyses. The ISA team also specifically examined code validation using guidance contained in Generic Letter (GL) 83-11, " Licensee Qualification for Performing Safety Analyses in Support of Licensing Actions," February 8, 1983.
All analytic codes used for the current fuel cycle (Cycle 15) reference analyses, and a matrix of codes and transient and accident analysos applications are shown in Tables 1 and 2, respectively.
Analytic methods are listed in Maine Yankee Technical Specification 5.14.2 and in the Core Performance Analyses Report for Cycle 15 (YAEC 1907, Revision 2), which' is also Appendix D of the FSAR. As indicated in Table 1, " Maine Yankee Analytical Codes for Fuel Cycle 15", most SERs contained conditions of approval. Table 2, Codes Used for Key Transients, shows the application of the codes and methods to specific transient and accident analyses.
l f
?
I l
I i
4 i
l 5
Table 1 NAINE YANKEE ANALYTIC CODES FOR FUEL CYCLE 15 CODE NAME FUNCTION NO. Of SER C0WITIONS" CASMO-3G Physics 1
SIMULATE-3 Physics 2
STAR Physics - Space / Time 2
FROSSTEY-2 Fuel Performance 4
COBRA-IIIC Generic Core and Fuel Hydraulic II" COBRA-IIIC Plant Core and Fuel Hydraulic 0
Specific YAEC-1 CHF Critical Heat Flux Correlation 2
SCU Statistical Uncertainties Applied 0
to Thermal Margin Setpoints RETRAN 02 Mod 2 System Thermal Hydraulic 39 Generic RETRAN 02 Mod 2 System Thermal Hydraulic 0
Plant Specific BIRP Reactivity Balance O
CHIC-XIN Integrated Single Channel Fuel, O
T/H, Physics GEMINI-II System Thermal Hydraulic 5
"' SER conditions are limitati::r.s, application restrictions, and verification and validation issues within which the code and application are judged acceptable to the staff.
" Conditions for COBRA-IIIC Generic are imposed by the author and are described in the Topical Report BNWL-1695.
6 w.-
~
Table 2 Codes Used for Key Transients TRANSIENT'"
FROSSTEY-2 GEMINI-II COBRA-IIIC RPS YAEC-1 SCU HAND RETRAN 02 CHICKEN /
SETPOINT CHF CALC M00 2 STAR CEA DROP X
X X
X X
X CEA WITHDRAWAL X
X X
X X
X BORON DILUTION X
LOSS OF FLOW X
X X
X X
X SEIZED ROTOR X
X X
X X
X EXCESS LOAD X
X X
X X
X LOSS OF LOAD X
X X
X X
X LOSS OF X
X X
X X
X FEE 0 WATER MAIN STEAM X
LINE RUPTURE CEA EJECTION X
TUBE RUPTURE
'" CASMO-3G and SIMULATE-3 are used to prepare input for all the transient calculations t
7
. -.. -. =
2.1.2 SER Conditions Satisfied But Not Documented The ISA team found that YAEC calculations of transients and accidents conformed to all applicable SER conditions. In some cases SER conditions were explicit and readily verified. In other cases SER conditions were requests to provide justification for certain models, the selection of correlations, and inputs. In these cases the ISA team reviewed the conditions within the context of the code application.
YAEC did not have a written process to document how safety analyses conformed to SER conditions. Some conditions were clearly known, considered, and used by i
YAEC. Other conditions could not be shown to be satisfied until additional analyses, assessments, and sensitivity studies, were accomplished in response to ISA requests.
This new work demonstrated that all SER conditions had been satisfied, although the disposition of some issues required reliance on the known conservatisms in specific accident analyses.
2.1.3 Control Element Assembly Drop Transient The CEA drop transient analysis which used many of the YAEC codes and methods, was performed in an excellent manner.
The CEA drop was one of the 10 non-LOCA transients normally reanalyzed for each cycle. The following set of NRC-approved codes and methods was used:
CASM0-3G/ TABLES-3, SIMULATE-3, FROSSTEY-2, GEMINI-II, COBRA-IIIC (YAEC-1 DNB),
Reactor Protective System (RPS) setpoint methodology, and Statistical Combination of Uncertainties (SCU).
Predicted fuel bundle and fuel rod power distributions were obtained from the physics code SIMULATE-3, which in turn used neutron cross sections from CASM0-3G. An ISA team review of predicted and measured fuel bundle power distributions showed excellent agreement over several fuel cycles.
FROSSTEY-2 was a steady-state fuel performance code used to calculate margin to fuel centerline melt using bounding values from a large number of fuel rod powers and power shapes.
The FROSSTEY-2 SER review was perfonned by the authors of its predecessor code, GAPCON-THERMAL.
There were numwous iterations between YAEC and the reviewers, and substantive modifications to the code resulted.
The two SER conditions on FROSSTEY-2 were straightforward:
(1) a local burnup limit of 60,000 mwd /MTU and (2) the inclusion of fuel manufacturing uncertainties.
The local burnup limit was administratively controlled at Maine Yankee, and manufacturing tolerances were accounted for in the statistical combination of uncertainties.
For code validation, FROSSTEY-2 was compared to a significant PWR fuels data base.
Probability / confidence limits of 95/95 for centerline melt temperature were used which included code and input uncertainties and were a function of fuel burnup.
Fuel performance calculations considered the multiple fuel types and multiple projected burnup histories, and were excellent overall.
GEMINI-II was a simplified systems code used to predict changes in reactor coolant system (RCS) pressure and core inlet temperature associated with the CEA drop transient.
YAEC used the minimum RCS pressure calculated with 8
1 1
GEMINI-II for the COBRA-IIIC subchannel analysis which was a conservative 1
assumption. Since the GEMINI calculated transient temperatures were less than maximum core inlet temperatures contained in the plant Technical l
Specifications (TS), the TS value was used in the COBRA subchannel analyses, l
again a conservative assumption.
GEMINI-II contained a very simplified l
treatment of reactor coolant and secondary systems.
The RCS was modeled as l
four lumped volumes where fluid mass was constant and subcooled, and the l
secondary system was modeled as a single saturated volume. The pressurizer j
model contains two regions in which equations for mass and energy were solved.
Interfacial heat transfer in the pressurizer was zero.
Steam-to-wall heat transfer was not modeled. There was a point kinetics model of the core.
An energy balance was performed by the code.
Benchmarking of the code was minimal.
Despite its simplicity, the mild thermal-hydraulic transient associated with the CEA drop transient (i.e., small changes in reactor power, l
pressure, and temperature) was not a challenge to the modeling approach in GEMINI-II, and was acceptable for this application.
COBRA-IIIC was a multiple channel core fluid behavior and departure from nucleate boiling (DNB) analysis code, which was used twice in the YAEC methodology for DNB.
COBRA-IIIC was first used to model a one-eighth symmetric core section using vendor-supplied fuel assembly flow resistances to determine an inlet flow penalty to be used in subchannel DNB analyses.
The l
penalty was determined conservatively from bundle-sized hydraulic parameters and power factors.
Next, COBRA-IIIC subchannel analyses were performed to determine individual subchannel DNB limits.
This was done for a collection of adjacent pins and sub-channels that had a high probability of reaching DNB.
This analysis used the most limiting of a large number of fuel pin power levels and axial power profiles using conservative values for inlet flow, inlet temperature, and system pressure.
The YAEC-I DNB correlation used by YAEC in the second COBRA-IIIC analyses discussed above was developed from a substantial number of experiments at Columbia University using I4XI4 fuel simulators of the exact geometry originally used in Maine Yankee.
The data, the COBRA code, the correlation, and associated biases and statistical combination of uncertainties were a matched set used to establish a minimum DNB.
The ISA team discussed the YAEC application of COBRA III-C with the code authors.
In BNWL-1695', the author of the original COBRA code, stated that all II user-selected correlations should be justified.
One of the COBRA IIIC authors told the ISA team that the selections of correlations by YAEC were reasonable as long as the selections remained constant for the application as well as for the development of the DNBR correlation. This was the correct procedure and was followed by YAEC.
The Cycle 15 core consisted of a mixture of Combustion Engineering, Siemens, l
and Westinghouse fuel.
Fuel procurement specifications were used to assure
'D. S. Rowe, " COBRA III C: A Digital Computer Program for Steady State and Transient Thermal - Hydraudic Analysis of Rod Bundle Nuclear Fuel Elements, " March 1973, Battelle, Pacific Northwest Laboratories 9
l l
that minimal geometric differences affecting DNBR would exist among different fuels within the same reload.
YAEC has also required vendor flow testing to assure that appropriate flow resistances were applied in the one-eighth core analyses for determining flow penalties.
Overall the CEA drop analyses performed by YAEC for Maine Yankee was found to be excellent for the following reasons:
(1)
Power distributions were found to be accurate and uncertainties treated appropriately.
2 (2)-
The GEMINI analysis was applied in a conservative manner for the CEA drop transient.
a (3)
The fuel centerline melt analyses using FROSSTEY-2 with uncertainties was found to be conservative.
(4)
The consistent application of the Columbia University DNB tests, the COBRA-IIIC code, the YAEC-1 correlation, and the statistical combination of uncertainties was appropriate.
(5)
Careful fuel procurement specifications and application e.- inlet flow penalties provided confidence that DNB analyses with mixed cores is done appropriately.
2.1.4 Main Steam Line Rupture Although weaknesses were found, the main steam line rupture analysis was found to be acceptable due.to compensating conservatisms.
YAEC used the RETRAN 02 MOD 2 and Boron Injection RETRAN Post-processor (BIRP) codes for analyses of the main steam line rupture (MSLR) event for Cycle 15.
RETRAN 02 MOD 2 was used to simulate the primary and secondary system thermal-hydraulic responses following an MSLR.
BIRP was used to calculate the reactivity. feedback associated with the steam line rupture and consequential primary system cooldown.
YAEC performed calculations for a spectrum of MSLR cases for Cycle 9 including cases at hot full power (HFP) and zero power, for a range of postulated equipment failures. For Cycle 11, the calculation for the bounding HFP case was repeated and was the reference for the current Cycle 15 analyses.
For Cycle 15, only reactivity effects were recalculated.
RETRAN 02 MOD 2 was a one-dimensional thermal-hydraulic computer program intended for use in analyzing the consequences of operational transients in light water reactors. The code solved the equations of continuity, energy, and momentum to simulate the primary and secondary fluid temperature and pressure.
The code contained an equilibrium formulation with non-equilibrium conditions modeled in the pressurizer and reactor vessel upper head.
Core heat transfer was simulated with a one-dimensional heat-conduction model in which the boiling curve was employed to treat the convective heat transfer between the fluid and the fuel rods.
Point kinetics were used to compute core power.
A 10
4 bubble rise model was employed to treat two-phase flow and phase separation effects.
This code was provided through the. Electric Power Research Institute (EPRI) and has an extensive user group.
i The Boron Injection RETRAN Post-processor (BIRP) was a separate code used to evaluate the reactivity feedback effects to determine the potential for a return to criticality during the MSLR.
It used RETRAN 02 MOD 2 thermal-hydraulic results as input.
BIRP was used to calculate the soluble boron l
concentration due to safety injection during the steam line rupture, as well as the overall reactivity balance.
i The NRC issued an SER on the use of RETRAN 02 MOD 2 and BIRP on October 2, 1985, with no SER conditions for the Maine Yankee plant-specific analyses.
J However, a generic SER with 39 SER conditions was issued on September 4, 1984, 1
regarding the use of RETRAN 02 MOD 2.
The ISA team reviewed these conditions
{
within the context of the MSLR application to Maine Yankee.
Nine conditions l
did not apply to PWRs. Another 22 conditior.s were explicitly met because of l
the modeling approach and application to the MSLR.
The remaining eight i
conditions all involve modeling and validation and are subject to interpretation.
On the basis of sensitivity studies performed by YAEC and compensating conservatism in the MSLR analyses described below, the ISA team concluded that these conoitions had been satisfactorily addressed.
During the assessment, the team found'a number of errors and inconsistencies.
YAEC performed several sensitivity studies to quantify the issues for the team.
Following is a discussion of the more substantive issues.
l (1)
The pressurizer and reactor vessel upper-head.F.
interfacial heat-transfer 2
coefficient was assumed to be 1000 Btu /hr-ft_
This coefficient was non-physical and inconsistent with the test data in the literature such l
as the Massachusetts Institute of Technology (MIT) pressurizer data.
l Use of this coefficient is incorrect; however, MSLR results were unaffected by this assumption since it is a depressurization event.
(2)
There was a lack of RETRAN 02 MOD 2 benchmarking against separate-effects and integral and plant data; for example, MIT pressurizer data,
-Shippingport plant data, Loss of Fluid Test (LOFT) loss-of-load test, and MSLR integral tests.
(3)
Liquid flow ' spikes were observed in steam line break flow, violating the model assumption that only pure steam exits the break to maximize the cooldown.
This demonstrated that an error existed in the bubble-rise model in the code.
However, the overall cooldown was unaffected by these spikes.
11 j
l l
(4)
A possible non-conservative omission in the RETRAN 02 MOD 2 enthalpy i
transport model was found.
The work term (PV) in the total energy equation was intentionally omitted as a simplification to the code.
c This omission could produce enthalpies exiting the core and. steam generators that were too high, thereby decreasing the cooldown rate. The evaluation of the effect of this term indicates a less-than-5 *F variation in the steam generator and core exit temperatures.
1 i
)
i (5)
There were no justifications or sensitivity studies for the assumed i
fluid mixing in the.RCS. Use of scaled flow data to justify modeling of the reactor vessel lower plenum and upper plenum as single nodes was inappropriate since the data did not include the asymmetric temperatures r
reflective of the MSLR event.
Subsequent sensitivity studies performed 4
by YAEC for the ISA team showed that although the initial cooldown i
progresses at a faster rate early in the transient when a split core rather than a single channel was modeled, the minimum temperature achjeved during the MSLR did not change.
j (6)
An inadvertent switch in secondary-side heat transfer from nucleate boiling to transition boiling and forced convection to steam was noted i
i in the hot zero power analyses.
YAEC corrected this error and the new-results showed that the full-power MSLR analyses remained limiting.
j However the hot zero power cases were very close to the limiting full power case.
The MSLR analysis was judged to be bounding because the modeling of the heat removal from the secondary side of the steam generator resulted in an excessively low RCS temperature. The conservatively low predicted temperature was supported by the following conservatisms and supporting analyses:
(1)
In the calculation, the heat extraction by the secondary side was not degraded as the secondary level decreased.
The full heat removal capability was assumed untii all of the secondary liquid was boiled off.
(2)
Comparisons of the YAEC secondary-side modeling approach to an MSLR test at the LDBI* test facility showed that the YAEC approach consemH"ely under-predicted the test data.
While the LOBI test cannot be directly used to quantify the conservatism of the MSLR calculation due to scaling and modeling issues, simulation of the
- W test' with RETRAN 02 MOD 2 qualitatively demonstrated the cou n.-vatism.
' LOBI, Loop Blowdown Investigation Facility 5" Pretest Predictions for a LOBI-MOD 2 Large Steam Line Break" by P.
Lightfoot, J. Burchley, J. Rogers.
Procedings to the 5th International RETRAN Conference EPRI NP-5781-SR April 1988 12
2.1.5 Lack Of A Documented Process To Demonstrate Code Capability YAEC did not have a documented process in place to identify and rank key phenomena for each of the transients and accidents in the safety analyses report and in turn identify needed code validation and parametric study efforts.
Some codes, such as the physics and DNB codes, were found to have extensive validation to actual plant measurements and experimental data respectively.
In contrast, the ISA team found that there was overreliance on industry. RETRAN validation efforts, and that validation of RETRAN for the MSLR accident at YAEC was weak.
During the ISA, YAEC initiated the writing of a
" Methods Overview Manual" which was intended to address these issues.
2.2 Design Review Of Selected Systems The ISA team conducted an in-depth design review of: (1) the high-pressure-safety injection (HPSI) system; (2) service water, which included the service water (SW) system, the primary component cooling water (PCCW) system, and the secondary component cooling water (SCCW) system; and (3) the electrical system, particularly as it pertained to HPSI and SW. This design review consisted of an evaluation of the ability of these systems, as modified, m intained, tested, and operated by the licensee, to perform their intended safety functions through an in-depth review of the work of the various engineering disciplines (mechanical, electrical, instrument and controls).
2.2.1 High-Pressure-Safety Injection (HPSI) System As a result of the ISA team's finding that the circuitry of one of the containment spray pumps (P-61S) and the recirculation actuation system (RAS) manual switch was not periodically tested, the licensee discovered that HPSI pump P-14A would not have actuated automatically after a loss-of-coolant accident (LOCA) with offsite power available. The ability of the containment spray (CS) system to provide a reliable supply of water to HPSI pump suction during the recirculation phase of a LOCA was not adequately demonstrated for plant operation at power levels above 2440 MWt due to the potential for CS pump cavitation. With these exceptions, the ISA team found that the HPSI system would have functioned as intended; however, other weaknesses were noted with testing.
2.2.1.1 HPSI System Description The HPSI system, the low pressure safety-injection (LPSI) system, and the CS system were the subsystems of the emergency core cooling system (ECCS). The HPSI system consisted of three pumps and associated valves, instrumentation, and piping.
One pump was normally operating as a charging pump, a second pump was aligned for standby operation, and the third pump was available as a l
spare. Upon a safety injection actuation signal (SIAS), ECCS pump suction l
would be automatically aligned to the refueling water storage tank (RWST).
i Following injection of approximately 200,000 gallons from the RWST, the ECCS would go into the recirculation phase, the HPSI system would realign to take suction from the discharge of the CS pumps, the CS pumps would take suction from the containment sump, and the LPSI pumps would be stopped.
13
4 2.2.1.2 Flow Testing j
The HPSI system showed little-to-no margin in performance, particularly when operating at maximum flow conditions.
The operating point for the HPSI pumps i
under these conditior,s was beyond the design information supplied by the pump manufacturer.
The acceptability of the operation of these pumps under these conditions was established by licensee tests. These tests may have shown some degree of cavitation and an uncertain, but likely very small, margin.
These limiting conditions would exist only in the low probability event of a large break LOCA.
l The HPSI system was set up to operate under maximum flow conditions (approximately 800 gpm) at an operating point approximately 60 gpm beyond l
maximum flow on the pump curve provided by the pump manufacturer.
Flow and net positive suction head (NPSH) data from the pump manufacturer were not available for this operating point. The licensee based the acceptability of the system on testing done on site in 1972 and 1993. The ISA team reviewed i
the results of these tests in detail and concludea that, although in the engineering judgment of both the ISA team and the licensee that the HPSI system was operable, the tests lacked rigor.
f Preoperational HPSI pump runout tests were conducted in July 1972, and flow values were recorded up to 805 gpm with limited documentation of pump conditions and system lineup.
However, the corresponding RWST tank and temperature were approximately 70,000 gallons and 105* F, and the tests were run after the HPSI flow to the three loops was balanced. The licensee later changed the minimum RWST level prior to sump recirculation to approximately 100,000 gallons, resulting in several additional feet of NPSH available to the pumps.
Additional HPSI pump testing at high flow conditions was done in 1993 following adjustments performed on the loop throttle valves.
Regarding this testing, NRC Inspection Report 50-309/93-22, dated October 25, 1993, stated, During a dynamic test of motor operated valve (MOV) HSI-M-41, what appeared to be runout conditions were observed at high pressure safety injection (HPSI) Pump P-14A.
The pump was noisy and with a flow measured at 796 gpm (not including the recirculation flow) the pressure was less than 390 psig.
Upon further testing, the pump noise was still present when total flow was 800 gpm.
While pump vibration and temperature remained normal, the licensee was unable to determine that initial pump cavitation was not occurring.
On the basis of the concerns of the ISA team regarding these tests (adequacy of documentation and instrumentation) and in order to provide additional assurance of the proper operation of the system, the licensee plans a future test of the HPSI pumps in a technically rigorous manner to fully demonstrate the available margin.
14
I 2.2.1.3 Throttle Valve Settings HPSI flow control into the reactor coolant system (RCS) was controlled by three throttle valves per train that were set with a tolerance that may be too high.
The ISA team was concerned with the critical nature of the setup of these throttle valves because unintended variations of as little as 20 gpm could result in some cavitation, if flow was too high, or not meeting design flow values assumed in the LOCA analysis, if flow was too low.
The position of the HPSI throttle valves (3-inch globe valves) was being controlled by the licensee within a tolerance of 1/16 inch based on full flow testing done in 1993. During this testing, the throttle position of these valves was established and mechanical stops were set. The licensee stated that tolerance on the position of these valves was based on using a ruler to measure how far the stem moved.
In 1994 the licensee began to use a digital micrometer that mecsured stem position of these valves to within.001 inch.
The licensee did not have specific test data to evaluate the impact of this tolerance or a specific coefficient of flow (Cv) value for the throttle valves that could be used to calcelate the impact of the tolerances on HPSI delivery fl ow.
Estimates using a licensee supplied Cv that may be typical for this type of valve concluded that this tolerance band could cause a flow variation of more than 20 gpm per valve.
Actual flow through the HPSI throttle valves was measured each refueling cycle by Procedure 3.1.15.3, "ECCS Operational Pump Flow and Check Valve Testing."
Flow measurements to each loop were measured and evaluated to ensure an adequate amount of total flow to the RCS and to ensure an acceptable flow distribution among the three loop injection points to account for the possibility that, in an accident, the flow through one loop may bypass the core by going out the break. Although this test could not be used to definitively evaluate the settings of the throttle valves under full flow conditions (essentially no reactor coolant system back pressure), it did provide a realistic appraisal of system performance and would indicate a gross mis-adjustment of the throttle valve settings. The ISA team reviewed the results of the last performance of this test, as it pertained to the HPSI system, in November 1995, and found them acceptable.
The planned HPSI flow testing to verify pump conditions at high flow will also f
enable the licensee to reset the position of these valves using a more precise i
tolerance to ensure that required flow is met and runout conditions are not exceeded. The licensee plans to include the resetting of these valves to a more precise tolerance as part of that flow testing.
l 2.2.1.4 CS System Support to the HPSI System The ability of the CS system to provide a reliable supply of water during the
)
recirculation phase of a LOCA was not adequately demonstrated for operation at l
power levels above 2440 MWt due to CS pump cavitational concerns. These 15
conditions would exist only in the low probability event of a large break i
LOCA.
Maine Yankee was licensed to pre-1971 general design criteria (GDC) in Appendix A to 10 CFR Part 50.
These criteria were provided in Appendix A of the Maine Yankee FSAR.
FSAR Criterion 44 provided requirements for ECCS and stated in part, "The performance of each emergency core cooling system shall be evaluated conservatively in each area of uncertainty." The ISA team reviewed. current and historical design calculations to evaluate if net positive suction head available (NPSH,) for the CS pumps during the recirculation phase was derived with the appropriate conservatism required by Criterion 44.
The licensee asserted, and the ISA team found no evidence to contradict, that Maine Yankee was not comitted to the requirements of Regulatory Guide 1.1, formerly Safety Guide 1, dated November 2,1970', which stated in part that
" Emergency core cooling and containment heat removal systems should be designed so that adequate NPSH is provided to system pumps assuming maximum expected temperatures of pump fluids and no increase in containment pressure from that present prior to postulated loss of coolant accidents." The licensee assumed a less conservative CS pump NPSH, taking credit for accident induced containment pressure to demonstrate that NPSH, was greater than or equal to the net positive suction head required (NPSH,).
The original NPSH calculation (MYC-272, Revision 2,"NPSH Study, Containment Spray Pumps"), assumed a sump temperature of 190 "F and zero containment over-pressure, although the maximum sump temperature was predicted to be significantly in excess of 212 'F.
The licensee recognized the need to improve the quality of this analysis and began reanalyzing CS pump NPSH in 1995.
The current design basis NPSH calculation (MYC-1804, Revision 0, " Containment Spray Pump NPSH") established a time-dependent correlation between the NPSH, and NPSH, based on transient LOCA containment pressure and temperatures.
This calculation showed an NPSH, of 15.3 feet and a positive margin of NPSH of less than 1 foot. A very sophisticated multi-node RELAP/ MOD 3 model wac "e u
- o calculate blowdown mass and energy to the containment. A very simple one node code (CONTEMPT-LT28) used this information as an input to calculate the i
containment pressure and sump temperature required for determining NPSH( This 1
analysis also assumed an initial power level of 2700 MWt. During the ISA the licensee provided information from the pump manufacturer which indicated that 4
the pumps in question could be expected to operate for up to 15 minutes without dmage with an NPSH, of 11.4 feet at 3700-3900 gpm.
The following weaknesses were identified in this analysis.
l l
'" Net Positive Suction Head for Emergency Core Cooling and Containment
-Heat Removal System Pumps" 16
(1)
The precision of the analytic technique and the sensitivity of the analysis to containment sump temperature.
The team's evaluation of the results (NPSH, values) indicated that a change in sump temperature of only 1 *F would change the result by about I foot. NPSH, was calculated based on iteration between the two computer codes described above, that have an unknown degree of uncertainty for this type of analysis.
l In particular, CONTEMPT-LT28 has options intended to bound the extent of mixing between the containment atmosphere and the break effluent, since a single node cannot address this phenomenon.
Also, no validation for this type of analysis was presented. Given the uncertainty in the codes, the iteration scheme, and the sensitivity of the final product of this calculation, the ISA team questioned the validity of this calculational approach and the specific l
modeling assumptions used.
(2) Incorrect calculation of bounding CS pump suction head losses.
i j
The suction pipe friction losses were developed for pump P-61A in calculation MYC-272, Revision 4, "CS Pump Suction Losses During RAS." Assumption two of this calculation stated that the suction piping arrangements to pumps P-61S and P-61B were virtually identical to pump P-61A.
Therefore, this calculation l
was assumed to bound the worst-case condition for all three pumps.
The ISA team determined that the suction piping arrangement for pump P-61S would result in higher suction piping frictional losses than those calculated for pump P-61A. As a result of the ISA team's concern, the licensee performed an evaluation that confirmed an increase of suction pipe friction losses from 4.5 feet to approximately 5.3 feet.
l l
(3) Use of a hot fluid temperature correction factor.
The licensee took credit for reduction of the NPSH, requirements due to the increased sump temperature.
This phenomenon was described in the Hydraulic l
Institute Standards. The ISA team viewed the use of the NPSH, correction for this application as an example of a non-conservative assumption.
The Hydraulic Institute Standards (currently American National Standard fer Centrifugal Pumps, ANSI /HI 1.1-1.5-1994) provided limitations and precautions l
for use of the NPSH, temperature reduction, including considerations of entrained air or other gases present in the liquid and consideration of the l
susceptibility of the suction system to transient changes in temperature and l
absolute pressure. The ISA team considered that both of these limitations i
merited consideration because the sump water may not be sufficiently deareated and the CS pump would be undergoing a significant temperature transient near l
the time of minimum availability of NPSH.
However, the calculation was silent on applicability of these limitations.
Following the assessment, the licensee conducted additional analysis to support plant operation at up to 2440 MWt.
After reviewing this information, the ISA team concluded that it was appropriate to consider these pumps operable at power levels up to 2440 MWt.
17
g 2.2.2 Service Water / Component Cooling Water The ISA team concluded that the support systems, service water and component cooling water, designed to remove decay heat and heat generated by individual components were capable of performing their design function up to the presently authorized power of 2440 MWt.
i 2.2.2.1
System Description
The service water (SW) system was comprised of four SW pumps (housed in the i
circulating water pump house), four heat exchangers (two each for primary component cooling water (PCCW) and secondary component cooling water (SCCW),
and interconnecting piping and valves.
The PCCW and SCCW heat exchangers consisted of two pairs of heat exchangers, an older and smaller one and a newer and relatively larger one (by approximately 20 percent), in each pair.
The newer heat exchangers had titanium tubes and the older one had copper-t nickel tubes.
The SW system provided the ultimate heat sink for cooling of plant equipment. The system provided safety and non-safety functions by pumping seawater through the PCCW and SCCW heat exchangers.
The PCCW and SCCW systems performed an integrated function with the service water system in cooling plant equipment and removing decay heat.
Each 1
l subsystem consisted of two pumps, the heat exchangers described above, and a flow distribution piping network.
These subsystems absorbed heat from individual component coolers and from the residual heat removal (RHR) heat exchangers (one per train), which represented the major post-accident heat load in removal of heat from the containment bui1 ding.
2.2.2.2 Availability of Seawater Flow Into the Service Water Intake Structure i
i
. A bottom contour map based on a 1994 survey of the area near the circulating water pump house showed relatively open access to the Back River and ultimately to the Atlantic Ocean.
Therefore, an ample water supply was i
assured to the SW system.
2.2.2.3 Service Water Pump NPSH i
=
{
The service water pumps had sufficient margin of submergence over the range of 4
operating tide levels.
In the installed configuration, the pump inlet flanges were at an elevation of 1
-14 feet 6 inches, and all pumps were shop tested to a water level of 2 feet 6 inches above the pump inlet.
The water level at minimum submergence would i
therefore be at elevation -12 feet. A review of tidal records from 1989 to present (except 1995 when the plant was not operating) showed that elevation
-7 feet (with small variations) was the low tide level.
l 2.2.2.4 Circulating Water Pur House Flooding Adequate provisions were in place to mitigate the impact of flooding in the circulating water pump house. These provisions included level alarms, header 18
pressure switches that provided information if the headers failed, check valves to prevent drain back, and a 7-1/2 feet seismic wall that separated the circulating water pumps from flooding the SW space.
In the event of flooding, the operators had sufficient information and time to locate the problem and isolate it before damaging the SW pump motors.
2.2.2.5 Residual Heat Removal (RHR) Heat Exchanger Thermal Transient The ISA team found that, with the plant operating at 2700 MWt, the most limiting design-basis thermal transient, shifting to recirculation during a LOCA, on the RHR heat exchangers was beyond their design specification and had not been analyzed.
The consideration of this thermal transient, apparently not explicitly addressed in conjunction with the power upgrade to 2700 MWt, was considered a weakness. Once again, these limiting conditions would exist only in the low probability event of a large break LOCA.
The maximum heat transfer rate, according to the RHR heat exchanger vendor, was approximately 120 MBtu/hr during a transient of 10 seconds; the heat exchanger could sustain 50 cycles of this transient. The power upgrade to 2700 MWt increased the maximum containment sump temperature to 255 'F, which resulted in a LOCA heat transfer rate of 137 MBtu/hr (calculation MYC-1742, Revision 1). A fatigue analysis of the heat exchangers at the higher thermal threshold was not performed; therefore some assurance was needed that the alternating stresses for the various subassemblies of the heat exchanger would not exceed their limits.
As a result of the ISA team's inquiry, the licensee investigated the impact of the higher thermal threshold. The original transient analysis calculation was no longer available. However, the vendor was able to provide a stress report for a heat exchanger of similar design and materials. The ISA team reviewed this information and concluded that these heat exchangers could be considered operable at the higher thermal values resulting from plant operation at 2700 MWt.
2.2.2.6 SW and PCCW/SCCW Integrated Operation Calculations demonstrating the design margin of the SW, SCCW, and PCCW systems (PCCW and SCCW will be referred to as the component cooling water (CCW) systems) showed essentially no margin for the CCW systems in their ability to perform their safety-related functions. The component inlet temperature of the CCW system loads was set at 118 'F, which appeared to be the maximum temperature for assuring adequate heat removal from system loads under accident conditions.
By the use of calculations, all of the available margin was transferred to the SW system to optimize operational flexibility. The limiting conditions of this analysis would be significant only in the low probability event of a large break LOCA.
The ISA team was concerned with this approach to operation of the-SW and CCW systems because of the lack of margin in the CCW supporting calculations and the material condition of the system (heat exchanger bypass valves). Despite these non-conservatisms, the ISA team concluded that it was appropriate to 19
I l
consider the PCCW/SCCW systems operable at power levels up to 2440 MWt.
The ISA team was unable to conclude, and the licensee did not demonstrate, that these heat removal systems would perfom adequately under design-basis t
l accident conditions' originating from a power level of 2700 MWt.
L l
On the basis of this integrated heat removal analysis, an engineering l
directive had been provided to ensure the SW system would be operated within certain limits.
However, the operating limitations provided in the l
engineering directive were not bounded by the licensing c9immitments.
Section 9.4.1 of the FSAR stated, "The component cooling water system heat balance was perfomed in 1990... demonstrating adequate capacity for design basis post-LOCA conditions assuming a service water inlet temperature of 80 *F for CCW heat.exchangers E-4B and E-5A, and 90 'F for CCW heat exchangers E-4A and E-58."
The engineering directive restricted the maximum SW temperature to 70.2 *F for E-4B and E-5A (the older Cu-Ni units), and 78.5 'F for E-4A and E-5B (the newer titanium units). On the basis of the licensee's analysis, the
[
CCW systems would not support plant operation up to the SW temperature values in the FSAR.
l
. Integrated operation of SW and PCCW/SCCW was non-conservatively analyzed due to:
l 1.
CCW and RHR Heat Exchanger Fouling and Testing Fouling factors used for the CCW and RHR heat exchangers were not appropriately. conservative given the lack of reliable testing done to confirm l
the assumed values.
j l
The ISA team's review of heat exchanger test results and test practices identified that the test prog;un was still being developed, and there was not enough reliable test results to support use of the fouling values used in the l
l licensee's design calculations.
L The ISA team had the following specific concerns with the licensee's heat exchanger testing program:
(a)
Instrument uncertainty was not accounted for in determining the fouliag J
values.
(b)
The installed locations for the flow measuring devices were less than optimum to assure accuracy, and the flow measuring devices were not calibrated for their specific application or adjusted for the actual 1
pipe wall thickness.
(c)
Heat exchanger tubes were cleaned on a periodic basis; however, there was no requirement to do performance testing just before the heat exchanger cleaning, thus the maximum fouling value was not being monitored.
l l
(d)-
The lack of surface mounted thermocouples made the measured temperatures j
susceptible to potential streaming.
20 i'
l 2.
Maximum CCW Heat Load The ISA team's review of calculation MYC-1742, Revision 1, found that the CCW heat loads were modeled as one major load (RHR) and one auxiliary load that 1
represented all other CCW loads.
The RHR heat exchanger load was based on a maximum containment sump temperature, 255 'F, as determined in calculation MYC-1740, Revision 1.
The remaining loads were lumped as a single 10 Mbtu/hr load. This value was developed as a sum of the emergency diesel generator (EDG) load, control room chiller, and other unidentified loads.
The ISA team questioned the basis for the 10 Mbtu/hr value, since in the case of the PCCW system, the heat load included the spent fuel pool (SFP) heat exchanger, which had a design load of 9 Mbtu/hr (prior to re-racking), and each emergency diesel heat exchanger, which had a load estimated at 5 Mbtu/hr.
For the SFP load, the licensee assumed that the total load on the PCCW heat exchanger would not exceed the analyzed valve based on an assumption of initial SFP temperature of 110' F.
3.
Flow Diversion l
Temperature control for the PCCW and SCCW systems was accomplished by adjustment of the bypass flow around the heat exchangers (shell side). There was only one air operator per system that operated both the inlet valve and the bypass valve. The calculations assumed that during a design-basis l
accident the bypass valve would be fully closed and the inlet valve would be fully open, thus maximizing flow through the heat exchanger.
If the bypass valves did not go to their safety related positions, the heat transfer l
capability of the heat exchangers could be significantly degraded.
In 1995 the licensee discovered that the CCW heat exchanger bypass valve, PCC-T-20, was open about 11' following an attempt to align it to its safety related position, closed.
At the time, Maine Yankee was in an outage and an inmediate operability determination was not required; however, the reportability determination had not yet been completed at the time of the ISA.
The ISA team found no calibration procedures for these valves, the controllers were not of the " fail safe" design, no procedures were found that tested l
a3ility of these valves to perform their safety related function, and the mtintenance history of these valves identified 11 completed maintenance work orders (W0s) for these valves in the last five years. On December 26, 1995, maintenance work order (WO) 95-3194 was initiated which identified that the linkage between CCW heat exchanger bypass and inlet valves, PCC-T-20 and i
PCC-T-19, was misaligned. This WO was open at the time of assessment and scheduled for completion during the 1997 refueling outage.
WO 93-04459-00, completed on January 1, 1996, (PCCW), and WO 96-01785-00, completed August 9, l
1996, (SCCW), did not demonstrate whether these valves would perform their l
safety related function.
WO 96-01785-00 stated that a positioner failure l
appeared to be similar to PCC-T-20 and recommended to " watch as loads get l
added". WO 93-04459-00 had a recomendation to " rebuild /recal entire l
controller" in the event that controller continued to malfunction.
21 1
~,
On the basis of the ISA team's concerns, the licensee performed a test on the PCCW temperature control valve after the team left the site.
This test was l
reported as successfully demonstrating the operation of this valve.
2.3 Electrical and Instrtment and Controls The team found that the capability of the electrical system and instrument and control equipment to be generally robust and capable of performing their design function.
Significant exceptions were noted with environmental J
qualification of components and ventilation systems.
2.3.1 115 kV Offsite Power Lines The 115 kV offsite power lines were not independently capable of supplying the plant auxiliary power system under certain conditions.
In FSAR Section 8.2.3, the licensee stated that either of the incoming lines is independently capable of supplying the plant auxiliary power system.
In FSAR Criterion 39,
" Emergency Power for Engineered Safeguard Features" (FSAR, Vol III, Appendix A), the licensee stated, " alternate power systems shall be provided and designed with adequate independence, redundancy, and capacity to permit 4
i functioning required of engineered safety features.
As a minimum, the onsite and offsite system shall each independently provide this capability assuming a 1
single failure of a single active component in each power system."
The station had two incoming 115 kV lines, and the main generator was connected to a 345 kV line; all were interconnected to the New England area
]
l i
transmission network.
The main generator was connected to the 345 kV switchyard.
Startup and standby (reserve) offsite power was provided by the 115 kV switchyard (which used two incoming lines, Surowiec and Mason) through j
reserve station service transformers X14 and X16. Under heavy loading conditions, a capacitor bank was used to compensate for and reduce the reactive voltage drop on the Surowiec line.
In 1995 Central Maine Power (CMP) completed an update of its studies of the l
115 kV system to verify that the system remained capable of supporting Maine Yankee licensing requirements. As a result of the CMP studies, the licensee t
found that the electrical sysi.em analyses in calculation MYC-430, Revision 3,
" Auxiliary Power System Voltage Study," failed to consider the effect of a motor-driven main feedwater pump (MDFW) automatic start following fast transfer of plant loads to the 115 kV offsite reserve power system.
l The CMP voltage study for the " full" 115 kV system, both Surowiec (Section 69) l and Mason (Section 207) lines, indicated that the system could support fast l
transfer of plant loads and subsequent start of a MDFW pump.
However, the voltage study for the Surowiec line only (Section 69) indicated that the 115 kV system was inadequate for the MDFW pump start.
The study confirmed that the Surowiec line voltage would not recover (after a fast transfer, a safety-injection actuation signal, and subsequent MDFW pump auto-start) within i
the allotted 5-second reset time interval of the degraded grid undervoltage relay to prevent offsite reserve power from being disconnected and automatic i
start and loading of the EDGs.
The ISA team concluded that this situation l
(i.e., the limited capability of the Surowiec line) was contrary to the design 22
\\
and licensing-basis presented in the FSAR which stated that either of the 115 kV lines was independently capable of supplying the plant auxiliary power system.
As stated in a letter to the NRC dated July 19, 1996, the licensee became aware of this issue as a result of a 1995 CMP update of its studies of the 115 kV system.
In response tc the ISA team's concerns in this area, the licensee stated that the 345 kV offsite system would serve as an alternate source of reserve power. The 345 kV system can be back-fed from the main transformer through the normal station service transformers to provide station power to the onsite 4160 Volt auxiliary power system. The licensee considered this circuit to be a delayed access circuit which could be completed in approximately six hours with disconnection of the main generator links. The Maine Yankee Technical Specifications, Section 3.12, " Station Service Power,"
l required one 115 kV incoming line to be in service when the plant was at power. _ Therefore, a Technical Specification Interpretation dated January 12, 1996, was initiated to require that when 115 kV was in standby or was supplying plant loads, and either MDFW pump was in the automatic mode, then the Surowiec line (Section 69) was considered inoperable.
The ISA team did not consider the licensee's position that the 345 kV system back-feed operation, compseted within six hours, was an acceptable basis for i
compliance with the FSAR and Maine Yankee Design Criterion 39. However, the ISA team considered this situation to be of low safety significance considering the historical stability of the grid, the existence of two independent reserve power transformers (X14 and X16), and the limited conditions (heavy loading and automatic start of MDFW pump) under which the Suroweic line would be unavailable.
2.3.2 Degraded Grid Undervoltage Relay Calibration Tolerance Band The ISA team found that the calibration tolerance band for the degraded grid undervoltage relays may result in a setting that could cause a premature transfer of loads from offsite power to the emergency diesel generators (EDGs) following a LOCA. As a result of recently updated CMP voltage studies, the licensee was in the process of revising the electrical system analyses in calculation MYC-430 (Auxiliary Power System Voltage Study, Revision 3, May 14, 1990). As a result of these analyses, a vulnerability was found in the onsite auxiliary power system because the upper limit of the calibration tolerance band specified for the reset setpoint of the degraded grid undervoltage relays
- was set too high (95.5 percent of rated bus Voltage.) Under worst-case conditions these relays set at the specified upper limit of the tolerance band could cause premature transfer of loads from the 115 kV offsite reserve power system to the EDGs. This could have created a situation that would be contrary to FSAR Section 8.2.3, which required the offsite reserve power system to be capable of supplying the plant auxiliary power system.
In response to this issue the licensee stated the following: (1) A CMP grid lead of 1,366 MW assumed in the full system base case is unlikely; however, Maina Yankee would again notify CMP to bring the Maine Yankee capacitor bank and Surowiec Transformer Auto Boost into service at grid loads greater than 23 w.
1,300 MW. (2) CMP would be asked to perform a system analysis based on a grid loading of 1,300 MW and the results would be used to verify an adequate system voltage to reset the ongraded grid undervoltage relay (3) The full system base case would be eliminated from calculation MYC-430 and replaced with a new case which is based on the grid at a 1,300 MW load. (4) The calibration tolerance band of the degraded grid undervoltage relay would be reduced.
The ISA team agreed with the licensee that the potential for the as-found settings of these relays to cause a premature transfer of loads to the EDGs was unlikelycand considered their planned actions acceptable.
2.3.3 Electrical Protection, Coordination, and Cable Selection The ISA team reviewed the specifications, drawings, calculations, protection scheme, cable data, motor data, protective relay setting criteria, relay settings, calibration records, and coordination for the 4,160 Volt at and 480 Volt ac emergency buses, with particular emphasis on motor and bus protection associated with the HPSI, EFW and SW systems.
In addition, selected motor and MOV feeder cables were reviewed for electrical equipment loading, cable sizing, cable routing, tray and conduit fill, and ampacity derating for these systems.
Overall, the ISA team found that electrical protection and coordination calculations were good, protective relay setting criteria was consistent with industry standards and practice, protective relay calibration records were good, cable sizing was robust, ampacity derating was appropriate, and tray and conduit fill was acceptable.
However, some minor discrepancies and errors were found (see Section 2.3.6).
2.3.4 125 Volt de Vital Station Batteries The ISA team concluded that the battery capacity was robust, and that all vital station batteries had a capacity greater than 110 percent of the needed capacity.
2.3.5 Emergency Diesel Generator i.lectrical Loading Although the EDGs were assessed non-conservatively, their capacity was sufficient.
The onsite emergency ac power system consisted of two independent and redundant 4,160 Volt, 2,850 kW (2,000 br/yr rating) EDGs.
The ISA team reviewed calculation MYC-107, " Emergency Diesel Generator Loading," Revision 4, which evaluated the loading of equipment onto each EDG.
The ISA team found that calculation MYC-107 was not well documented, EDG loading was assessed non-conservatively because all required loads were not included in the calculation, and the loading profile was inconsistent with FSAR ano design requirements.
The ISA team concluded, however, that the EDGs were able to start and carry all required loads, including the additional loads found by the ISA team and not included in the calculation.
The ISA team noted the following problems with the evaluation of EDG loading in calculation MYC-107:
(1)
Cable power losses in the 4-kV and 480 Volt ac systems were not incorporated into the calculation.
This additional load was estimated to be in the range of 30 to 40 kW.
24 l
l l
l i
(2)
The loading profile was inconsistent with FSAR and design requirements.
On the basis of FSAR Section 8.3.2-and the elementary system drawings, CS pump P-61A and PCCW pump P-9A automatically start 10 seconds after l
closure of the EDG 1A circuit breakers when EDG 1A starts in response to l
a SIAS.
Contrary to this, the EDG-1A loading profile in calculation MYC-107 showed these pumps loading at 20 seconds with EFW pump P-25C.
In response, the licensee stated that FSAR Discrepancy 25 (June 19, 1996) was initiated to identify and resolve the discrepancy in the power demand for the loading steps; however, this specific problem was not l
noted in this document. The ISA' team judged that this discrepancy would l
not-have an adverse' impact on the EDG operability.
[
(3)
There was a lack of. documentation in the calculation to support motor loads.
This was'a minor weakness in the calculation.
(4)
Pump motor loading was non-conservative.
LPSI pump loading in calculation MYC-107 was identified as 336 kW; however, the loading value at runout would be'364 kW.
The EFW pump loading was also based on a l
nominal value of 378 kW rather than on the runout value of 441 kW.
l (5)
Control air compressor manual start, required by procedure ECA-0.2,
" Loss of All ac Power Recovery, SI Required," was not incorporated into the calculation. The licensee stated that the additional electrical load would be a cycling' load of 24.5 kW for an unloaded compressor and 71 kW for a loaded compressor.
(6)
MOV replacements were not accounted for in the EDG loading calculation in that operators and motors for 14 MOVs were replaced under the MOV Upgrade Program, but the motor horsepower' changes were not included in a
the electrical one-line drawings and tracked as required by Procedure 17-227, " Electrical Distribution System Load Tracking,"
)
Revision 1.
Although the load changes were mostly a decrease of a few horsepower, this was an example of a weakness in configuration control.
j l
In response to the ISA team's concerns in this area, the licensee prepared a j
preliminary revision to calculation MYC-107 which showed that the loading on EDG-1B (worst-case) increased from 2,629 kW to 2,842 kW (a 213 kW increase),
1 still below the 2,000 hour0 days <br />0 hours <br />0 weeks <br />0 months <br /> / year rating limit of 2,850 kW.
2.3.6 Electrical Calculations Despite the deficiencies noted with the EDG loading calculation and several other relatively minor weaknesses, electrical calculations were very detailed, comprehensive, and rigorous.
Calculations ~ prepared since 1993 were better J
thcumented and more sophisticated than earlier calculations.
However, the following additional calculational problems were noted:
(1)
Incorrect motor data were used for setting the HPSI pump motor protective relays in calculation MYC-1559, in that the incorrect locked rotor current was used. The error was in the conservative direction and 25
motor protection was still maintained; tnerefore, this issue Iad no adverse impact on plant safety.
(2)
Incorrect cable data were used in the coordination curve for the EFW pump P-25C motor in calculation MYC-1559.
This error was in the conservative direction and motor protection was still maintained; therefore,- this issue had no adverse impact on plant safety.
(3)
Cable data and cable damage curves were omitted from calculation MYC-1063, "480 Volt. Circuit Breaker Coordination," Revision 5, where curves did not identify the feeder cable size and did not incorporate the cable damage plot on the coordination curve to demonstrate that the i
cable was protected consistent with industry practice.
The lack of cable data and cable damage plots had no adverse impact on plant safety l
t because cable sizing was conservative.
2.3.7 Inadequacies in Ventilation Systems Although the licensee had previously identified inadequacies in the i
ventilation systems used to support safety-related electrical equipment, the.
ISA team found additional significant inadequacies in the design of these ventilation systems.
2.3.7.1 Protected Switchgear Room Ventilation Deficiencies were noted in the design of the protected switchgear room ventilation system. The licensee was aware of, and actively correcting, some of these' deficiencies. As a result of the ISA team's inquiries additional vulnerabilities were identified.
The net effect of these recently identified problems could be significant, possibly contributing from.1 percent to up to 3
1 10 percent additional probability of core damage.
The battery and protected switchgear rooms were located in the turbine building and serviced by a r.afety-related ventilation system.
The equipment for this ventilation system was located in the turbine building and consisted of motor-operated air supply and exhaust dampers, supply fan FN-31 (powered from train A 480 Volt emergency motor control center (MCC) 7A), a motor-operated recirculation damper, and' exhaust fan FN-32 (powered from train B 480 Volt emergency MCC-8A).
This ventilation system supported the operation of the plant's safety-related batteries, inverters, and MCCs.
In FSAR Section 8.3.3, the licensee described the lack of redundancy for this ventilation system (single supply and single exhaust fans) and specified operator actions required to mitigate the consequences of a single fan failure.
As part of the Individual Plant Examination - External Events (IPEEE) effort, the licensee recently evaluated the turbine building spectrum of steam line breaks.
It was recognized that following a high-energy line break (HELB),
operator action may be required to manually ventilate the protected switchgear room. On the basis of calculations, assuming that the ventilation fans were not running, the licensee concluded that the steam ingress into the protected 26
switchgear room was not significant, and the hich-temperature alarm in the room would signal operators to open doors and set up portable fans.
Despite the licensee's work to mitigate the effects of a potential HELB in the i
turbine building, the licensee did not fully consider the impact of a LOCA or HELB event on the protected switchgear room ventilation system.
The ISA team found that the licensee had no calculations or analyses which evaluated the consequences of a supply or exhaust fan failure coincident with a LOCA or HELB i
under worst-case electrical loading. Although the licensee had prepared calculation NYC-1570, " Protected Switchgear Room, Protected Cable Tray Room &
Battery Rooms 1-4 Temperatures," Revision 0, to address the transient temperature in the safety-related electrical areas for various scenarios, the ISA team found that the calculation did not address various fan failure modes.
Further, the ISA team found that no emergency power source was available to i
power portable fans during a design-basis event which may include loss of normal ac power. Therefore, the compensatory operator actions to open doors and set up portable fans described in the FSAR and the licensee's analyses were not technically supported.
The original licensing-basis assumption for HELB inside the turbine building was for a break of a very large steam line that would result in enough damage to the turbine buildin5 that the effects of the line break would be rapidly mitigated by the failure of the building walls.
However, the licensee recently concluded that the limiting HELB event was a smaller size break that would leave the turbine building intact, causing the harmful effects of the steam to be felt for a longer period of time. As a result of this finding by the licensee (before the ISA), compensatory measures were implemented to keep enough openings in the turbine building to mitigate the effects of a more limiting break.
In response to the ISA team's concerns, the licensee performed an additional analysis for calculation MYC-1570, taking into account all failure scenarios for the protected switchgear room ventilation system, including the scenario in which one fan (supply or exhaust) was assumed to fail. Air flow measurements for the ventilation system and switchgear room under various fan configurations were also taken.
Based on the results of this analysis, the following actions were taken by the licensee:
(1)
The supply and exhaust dampers were blocked open and the recirculation damper was blocked closed under Work Order 96-02589-00, " Reposition Dampers," Revision 1.
(2)
Design Basis Screen (DBS)96-006 (" Turbine Building MSLB Environment,"
Revision 3) was issued which concluded that the worst-case failure mode would be failure of a supply fan while the exhaust fan continued to run, resulting in the ingress of steam into the protected switchgear room which would be unacceptable. The heat load from switchgear and equipment was reduced by approximately 30 percent to eliminate unnecessary conservatism.
The results of revised calculation MYC-1570 showed that the HELB scenario bounded the LOCA scenario and resulted in a heat buildup in the switchgear room which would require an operator to 27 1
_m__
1 l
block open doors and set up portable fans within 15 to 30 minutes
)
following the event to limit room temperatures to 135 'F.
(3)
An emergency stop switch was installed in the control room under Work Order 96-02824-00 to allow an operator to trip the exhaust fan to limit ingress of steam into the switchgear room during a HELB event in the turbine building.
(4)
A temporary change was made to Procedure A0P-2-7, " Excess Steam Demand,"
Revision 16, to provide guidance to the operator for establishing protected switchgear room cooling following a turbine building HELB event.
(5)
A 350-foot power cord was provided to allow operators to plug into an EDG-backed power source (120-V ac vital power) for portable ventilation fans.
A long-term, permanent modification was ' intended to install receptacles in the protected switchgear room which would be powered from EDG-backed emergency buses.MCC-7A and MCC-8A.
(6)
The current HELB evaluation. covered.sumer conditions only; the licensee I
was formulating plans to resolve this issue for winter conditions.
2.3.7.2 Spray Building Ventilation Deficiencies Deficiencies were noted in the design of the spray building ventilation system. The 1-icensee'was aware.of, and actively correcting, one of these deficiencies.
The ISA team identified a separate deficiency that had the potential to effect the performance of the CS and LPSI systems.
The spray building houses the CS pumps and LPSI pumps. The ventilation system for this building consisted of a supply unit (HV-7),- two safety-related exhaust fans (FN 34A and FN-44B), and associated dampers and ducts. HV-7 comprised a heating coil, fan, and Tilter.
The licensee had experienced occasions in which ventilation flow through HV-7 had been restricted due to ice buildup on the external surface of the unit in the winter months and from leakage from the heating coil causing iw w build up on the filter portion of this unit.
Such situations were significant because there was a potential to impact the CS and LPSI pumps, which required adequate ventilation (removal of motor heat) in order to continue to run. The licensee recognized this problem and was in the process of implementing a design change to reconfigure the HV-7 supply unit to solve the existing design problems.
The ISA team reviewed the licensee's plans to improve this design and found them acceptable.
As part of the review of this issue, the ISA team looked at the integrated operation of the spray building ventilation system and found that there were i
pneumatically positioned dampers (VP-A-56 and VP-A-57) on the suction side of the safety-related exhaust fans.
Since the damper's air supply was non-safety-related, and considering the design of the dampers, there would be a l
reasonable potential for the dampers to close under accident conditions, 28 r
1 thereby rendering this safety-related ventilation system inoperable.
On the basis of this concern, the licensee prepared DBS96-051 and mechanically blocked open dampers VP-A-56 and VP-A-57.
l After the ISA team identified this issue, the licensee informed the ISA team that the desirability of blocking cpen these dampers had been raised in 1991 by a staff person from YAEC in a memorandum dated February 20, 1991, with the subject, " Minimum Ventilation Requirements for the Containment Spray Pump Area." This memorandum contained a specific recommendation to block open dampers VP-A-56 and VP-A-57 because, "If the controller fails, it could cause the inlet vanes for both fans to close, causing a reduction in the output of the system."- The ISA team found no evidence that this issue had been entered into a corrective action system or was being tracked by the licensee.
This was an example of the licensee's failure to take appropriate action to address a plant problem.
Although the plans and progress to resolve the problems with HV-7 were considered positive, the ISA team considered the licensee's performance weak in regard to the lack of followup of the identification of the damper concerns from 1991 and also weak in that the recent focus on the problems with this ventilation system did not result in identifying a vulnerability with dampers VP-A-56 and VP-A-57.
2.3.8 Procedure for Cross-Connecting DC Buses Plant Procedure 1-22-2 " AC and DC vital Bus Operation," allowed crors-connecting redundant 125-Volt de vital buses for up to 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> during j
plant operation, contrary to FSAR Appendix A, Criterion 39, " Emergency Power j
for Engineered Safety Features," which stated, " Alternate power systems shall be provided and designed with adequate independency, redundancy and capacity, and testability to permit the functioning required of the engineered safety features.
As a minimum, the onsite and the offsite power system shall each, independently provide this capacity assuming a failure of a single active component in each power system."
The ISA team found no instance when these buses had been cross-connected and.
in response to the ISA team's concerns, the licensee stated that no occurrences of cross-connecting 125-Volt de vital buses were documented after 1982, but cross-connection could have occurred before this period.
The licensee stated that this procedure was intended to be used only in limited conditions with due consideration given to overall plant risk.
However, as a result of discussions with the ISA team, Procedure 1-22-2 would be revised to limit cross-tieing of dc buses to Condition 5 or lower (i.e.,
plant not at power) for maintenance activities.
2.3.9 Environmental Qualification (EQ) Program The ISA team found that the licensee was not meeting 10 CFR 50.49 requirements in that there were certain electrical components that were not qualified for their expected environment following a design basis event.
There were concerns in three separate areas: submergence inside containment, 29 l
EQ/ Regulatory Guide (RG) 1.97 instrument qualification, and backlog of EQ items.
The ISA team also noted that there was no assigned staff engineer with primary responsibility in'this area.
)
2.3.9.1 EQ Submergence As a result of a concern by the.ISA team about EQ component elevations being i
below submergence level, the licensee conducted a walkdown on July 24, 1996, of reactor containment that revealed 30 components outside of Maine Yankee's design basis.
These components were found to be installed below the maximum submergence level of 1.7 feet inside containment and were not environmentally qualified for the installed location.
The EQ Program worksheets and EQ
' database did not reflect the actual component elevations.
The EQ components affected were distributed into three groups: containment isolation valve position indication;- all channels of steam generator level (wide range and narrow range) indication; and primary inventory trend system level indication.
Submergence levels for the EQ components ranged from 1/2 inch to 31 1/4 inches below the maximum submergence level of 1.7 feet.
The EQ submergence problem was reported to the NRC in license.: event report (LER)96-026 dated August 22, 1996.
The licensee's EQ submittal dated October 31, 1980, and the NRC's safety evaluation report (SER) dated June 1, 1981, identified approximately seven plant components that were below the submergence level that needed to be removed or replaced to meet the EQ rule.
As a result of the ISA team's inquiry, the licensee identified 30 components below the submergence level.
Several of these components, such as HCV-257, HCV-271, and TV-3501, were the same components that were identified as below the submergence level in the licensee's 1980 submittal and the NRC's SER.
2.3.9.2 EQ/RG 1.97 Instrument Qualification
'The assumptions used to established EQ requirements for emergency feedwater (EFW) flow instrumentation were found by the ISA team to be inconsistent with Emergency Operating Procedure (EOP) E-1, " Loss of Primary or Secondary Coolant," operational requirements in that, under design-basis accident conditions, the use of the EFW flow instruments may not have been available.
The EQ worksheets for EFW flow transmitters FIT-1201A, FIT-1201B and FIT-1201C stated that EQ for these instruments during LOCA conditions was not required per YAEC memorandum, MYP 93-0293, Revision 2; however, E0P E-1, Step 3.a, required the operator to ensure minimum FW flow for decay heat removal.
In MYP 93-0293, the licensee stated that steam generator level was an acceptable means of verification of EFW flow when referenced in the E0Ps. However, without qualified EFW flow transmitters, E0P E-1 requirements may not be able to be accomplished in those situations (large break LOCA) where minimum EFW flow is required to ensure heat sink availability.
During these situations, EFW flow instrumentation would be required until steam generator level exceeded the specified level limits.
30
Since the EFW flow transmitters would be exposed to a harsh radiation environment during a LOCA (MYP 93-0293), the EFW flow instrumentation may need to be environmentally qualified.
The licensee stated that evaluation of this issue was under way as part of a revision to DBS 96-41. This revision would add an action item to provide a detailed review of the radiation dose at the instrument location.
In addition, the licensee's RG 1.97 submittal and Regulatory Guide Source Document, " Design and Qualification Criteria for Post Accident Monitoring Instrumentation," identified these transmitters as being appropriately EQ qualified with no deviations from NRC guidance.
The licensee did not adequately categorize and identify the exceptions taken on the RG 1.97 data sheets.
2.3.9.3 Backlog Of EQ Iteas There were other potentially significant EQ issues that remained open.
The licensee had recently identified an expanded HELB concern in the turbine building that had the potential to impact safety related components in the turbine building.
2.4 FSAR Inconsistencies Prior to the ISA team atiival on site, the licensee initiated a FSAR and Technical Specification review to identify discrepancies with the licensing basis.
The licensee placed priority on reviewing those systems being reviewed by the ISA team.
Over 100 issues were identified.
The ISA team identified additional discrepancies which are discussed throughout the report. Many of these issues will require changes to the FSAR and 10 CFR 50.59 reviews since equipment and procedures at MYAPS have changed from that described in the i
FSAR.
2.4.1 Spent Fuel Pool Heat Exchanger Rating The nameplate rating on the spent fuel pool (SFP) heat exchanger was not consistent with the design values in the FSAR.
Section 9.8.2 of the FSAR stated that the tube-side design of the heat exchanger (HX) was 225 *F and the nameplate stated that the tube-side rating of this HX was 200 *F.
This discrepancy was noted in 1996 by an NRC review before the formation of the ISA team. The ISA team was concerned that the 200 *F HX tube rating could possibly prohibit the restoration of SFP cooling following a prolonged loss of SFP cooling and bulk boiling in the SFP. The licensee claimed a reasonable expectation that this HX could be used to restore normal cooling following bulk boiling and was tracking an action item to analyze by January 1, 1997, the capability of this HX to go to 225 *F.
The ISA team considered the licensee's schedule reasonable because (1) the FSAR does not acknowledge restoration of normal cooling following bulk boiling, (2) the HX can be bypassed if necessary, and (3) there was an expectation for margin in the capability of this HX.
31
2.4.2 Atmospheric Steam Dump Rated For 2.5 Percent Power The FSAR assumptions made regarding the response to a steam generator tube rupture (SGTR) were not realistic.
In addition, the licensee assumed a capability of the atmospheric steam dump (ASD) of five percent power as part of its validation for E0Ps.
Subsequent licensee analysis of the steam generator tube rupture (SGTR) and inadequate core cooling (ICC) events revealed that the 2.5 percent value was acceptable for SGTR but not for ICC.
The ICC event was beyond the design basis of the plant but was considered as part of the E0Ps.
(See Section 3.1.3.1)
FSAR, Section 14.12, stated, "The quantity of reactor coolant transported through the leak to the steam system is the same with or without offsite The primary to secondary leakage is assumed to be terminated within 30 power.
minutes following the rupture."
The ISA team considered that the additional complication of a loss of offsite power (LOOP) during an SGTR event would make it unlikely that the operators would be able to isolate the leak as quickly as would be the case with offsite power available.
i Without offsite power, the operators would lose their ability to vent steam to the main condenser, they would be limited in venting steam for cooldown through a single 2.5 percent capacity ASD valve.
They would have to manually shut a valve locally in the vicinity of the steam generator relief valves before opening the ASD valve.
The time to isolate the affected steam generator would be longer than stated in the FSAR.
In a letter dated July 1, 1996, to the NRC, the licensee committed to make physical changes to the atmospheric steam dump system to improve relieving capacity and reduce the isolation time of the affected SG.
e 32
3.0 ASSESSMENT
OF OPERATIONAL SAFETY The ISA team assessed Maine Yankee's performance in the areas of operations, maintenance and testing, and engineering by evaluating the programs in each of these areas and the licensee's implementation of these programs.
3.1 Operations Assessment The ISA team assessed the ability of Maine Yankee to safely operate the plant in accordance with its licensing and design bases. The areas assessed included the licensee's programs for identifying and resolving problems, the quality of the licensee's operations, and the programs established to operate the plant.
In addition, the radiation protection and the fire protection programs were reviewed. The team interviewed operators and managers, performed three days of continuous control room observations, conducted detailed walkdowns of safety systems, reviewed E0Ps, observed simulator requalification training, and observed the implementation of programs used to operate the plant.
Overall, performance in the area of operations was very good. Strengths were noted in the areas of operator performance during routine and transient operating conditions; shift turnovers and pre-evolution briefs; use of risk information to ensure safe operations; and the involvement of management in day-to-day operations. Areas for improvement include reducing the number of operator workarounds and compensatory actions, log-keeping, and post trip reviews.
3.1.1 Problem Identification / Problem Resolution The team assessed the programs used by Operations to identify and resolve problems in the plant. The team found that Operations was effective in identifying problems, but noted weaknesses with problem resolution.
3.1.1.1 Operator Workarounds and Compensatory Actions Maine Yankee had several problems involving plant equipment, which created an additional burden on the operators during the plant shutdown and startup observed by the team.
In addition, Maine Yankee had established several compensatory actions to address weaknesses in plant design. Some of these compensatory actions would require operators to take manual actions during a plant transient.
Several workarounds and compensatory actions were longstanding issues or recurring problems which the licensee had not resolved.
During the performance of a plant shutdown on July 19 and 20,1996, the team observed that the operators experienced several equipment problems which complicated the shutdown. These problems involved the trip of a motor-driven main feedwater (MDFW)-pump.following an attempted start, the slow response of the main feedwater pump recirculation valve when the pump was started, leakage past a main feedwater regulating valve bypass valve which required additional operator attention and actions, and the inability to operate the cortrol element assemblies' (CEAs) in the manual sequential mode due to a plant computer which was easily overloaded.
The manual sequential mode problems 33
(
contributed to the operator's decision to manually trip the reactor from low l
power during the shutdown.
Maine Yankee had also implemented or proceduralized actions to compensate for I
weaknesses in the design of the plant.
Compensatory actions were taken as a result of design vulnerabilities associated with ventilation systems for the j
safety-related battery rooms, switchgear rooms, emergency diesel generator j
(EDG) rooms, and the containment-spray building; turbine building flooding concerns; the inability to _ remotely isolate a ruptured steam generator; -a i
i single, undersized, steam generator atmospheric steam dump (ASO) valve; and a 1
degraded offsite power supply.
3.1.1.2 Control Room Staffing t
i In March 1996, following its review of NRC Information Notice _ (IN) 95-33, i
"Switchgear Fire and Partial Loss of Offsite Power at Waterford Generating I
Station Unit 3," and IN 95-48, "Results of Shift Staffing Study," Maine Yankee i
evaluated the ability of the operating crews, at their established manning i
levels, to respond to a plant fire similar to that experienced at Waterford Unit 3 in 1995.
The team found that Maine Yankee's evaluation,was thorough I
and that the licensee had identified weaknesses in (1) timely implementation of the emergency plan,. (2) oversight by the Plant Shift Superintendent (PSS),
i (3) workload of the remaining Control Room Operators (CR0s), and (4) normal j
{
Shift Technical Advisor (STA) oversight.
Maine Yankee found that if a medical 6
i emergency occurred during a plant fire, the PSS, as the assigned medical emergency responder, and the Shift Operating Supervisor (SOS), as the assigned
}
fire brigade leader, could both be summoned from the control room to perform j
these duties.
The team was concerned that the licensee had established conflicting procedural requirements that would be impossible to comply with in the event i
of fire coincident with a medical emergency.
During this postulated event, the minimum staffing requirements required in the Technical Specifications would not be satisfied if the senior reactor operators responded as described i
in the licensee's administrative procedures.
The team found that Maine Yankee has previously developed a comprehensive action plan to address the. shift
]
staffing issues which incluueo: (1) using security personnel rather than the l
l PSS as medical first responder, (2) using a second CR0 as the fire brigade i
leader rather than the SOS, (3) providing an additional security guard for the fire brigade to replace an auxiliary operator, (4) enhancing the dose projection process, and (5) enhancing STA effectiveness.
However, the team j
determined that Maine Yankee's schedule for implementing these corrective actions by the end of 1996 was not timely. The team also determined that the licensee missed an opportunity to identify and correct this vulnerability
}
during itc n view of IN 91-77, " Shift Staffing at Nuclear Power Plants," which E
discussed Maine Yankee's response to a fire.
j j
In response to the team's concerns, Maine Yankee reassigned the duties of the medical first responder to the security supervisor, thus removing these duties from the PSS. Additionally, the licensee planned to add a third licensed reactor operator to the control room staff and assigned the duties ~ of the fire brigade leader to the reactor operator.
34
3.1.2 Quality Of Operations 3.1.2.1 Control Room Observations 1
The team observed the performance of operators during a 3 day period of sustained control room observations.
During this time, operators performed a plant shutdown and cooldown to correct a design deficiency in the PCCW system.
Operators performed well during the plant shutdown and cooldown. The team observed. good comand and control and good use of procedures.
In addition, operators quickly identified and responded well to several equipment problems experienced during each activity.
The quality of communications used by operators during plant activities was good; however, the use of repeat-backs was inconsistent.
In addition, control room alarms were seldom announced to the entire crew.
The team observed similar weaknesses during simulator training sessions. Control room logs lacked detail and did not meet the guidance provided in Haine Yankee's administrative procedures.
For example, operators did not log the starting time and stopping time of an EDG, equipment problems experienced during the
. plant shutdown, and the initiation of a manual reactor trip to shut down the reactor when problems were experienced with the CEA drive system. Observed shift turnovers and pre-evolution briefs were informative and provided operators with complete information about shift activities.
Auxiliary operator performance was identified as a strength. Team members t
accompanied auxiliary operators on their plant tours and found that they were knowledgeable, perfonned thorough rounds, took accurate logs, identified housekeepina deficiencies, and communicated well with operators in the control room. The utilization and performance of STAS was also a strength at Maine Yankee. The STAS were very experienced, had a good knowledge of plant operations, and were assigned a wide range of responsibilities, including conducting independent reviews of operability determinations and technical specification interpretations, making reportability. determinations, and assisting the PSS with emergency plan implementation. The STAS also had a good understanding of probabilistic risk assessment which they used in performing on-line risk assessments and shutdown safety assessments.
STAS updated these assessments as plant conditions changed and evaluated the effect of emergent maintenance on the assessment.
STAS maintained the system unavailability log book and investigated unusual occurrences reported on their shift.
3.1.2.2 Safety Systems Walkdowns The team performed a detailed walkdown of the accessible portions of the high-pressure fety injection (HPSI) and the service water (SW) systems to verify they were voperly aligned. The systems were found to be properly aligned for emergency operation in accordance with the licensee's system operating procedures and plant drawings.
Valves in the systems were labeled properly.
Control room labeling of remotely operated valves was satisfactory with each remotely operated valve identified by number, noun name, and actuation signal (if applicable). Minor deficiencies, such as inoperable local valve position indicators and unidentified packing leaks, were identified by the ISA team and I
35
\\
the licensee entered these deficiencies into its work order system.
Material condition deficiencies associated with the SW system are discussed in Section 3.2.1.5 of this report.
3.1.2.3 Management Oversight of Operations Management oversight of plant operations was good.
Managers were involved in the day-to-day operation of the plant and in the resolution of emergent problems.
In addition, managers were actively involved in the operator requalification training program.
Managers observed and evaluated crew performance during simulator training sessions, participated in the critique of crew performance, and reinforced their expectations for operator performance, including communications.
Operations management met with crews during the training week to discuss operations issues.
Management also conducted periodic assessments of the Operations Department as part of the Operations Performance Assessment Program.
Yankee was also very good.
Control of overtime at Maine 3.1.2.4 Risk Management The use of Online Safety Assessments (0LSAs) and Shutdown Safety Assessments (SSAs) were strengths.
The OLSA was used as a tool to assess the safety implications of scheduled maintenance, unexpected equipment failures, unscheduled maintenance, and for developing long-range maintenance schedules.
The SSA provided a simplified indication of the level of plant safety when the plant was shut down.
The STAS performed safety assessments each shift, or when major equipment was found inoperable or removed from service.
These assessments were communicated throughout the organization and risk insights were apparent in the licensee's decision-making process.
The OLSA was based on key safety functions, PRA significance, external events, as well as operational and engineering judgment.
Both the online and shutdown assessments used relatively simple,.;traight-forward methods to assess risk.
OLSA was computer based and provided a plant score which was converted to a risk condition, i.e., green, yellow, orange, or red (in order of increasing risk).
The OLSA program allowed calculation and control of accumulated risk during power operation by use of simple methods.
SSAs were qualitattve rathcr than quantitative and resulted in an overall risk condition, i.e., green, yellow, orange or red.
Management controls required approvals for intentional entry into the higher risk conditions and provided directions (such as immediate exit or development of contingency actions) for unplanned entry into higher risk states.
Controls were established for exceeding calculated allowable times in higher risk states.
3.1.2.5 Operability Determinations Maine Yankee's operability determinations were generally acceptabTe, although some weaknesses were noted.
determinations perfornied in the past by Maine Yankee and found that theThe t determinations were appropriate.
However, while on site, the team noted that 36
i the licensee made an incorrect operability determination associated with the performance of engineered safeguards feature relay testing.
On August 15, 1996, the licensee initiated SIC 96-18 to address inadequate
. testing of safety injection actuation system relays associated with the HPSI and the containment spray swing pumps. The PSS and the STA performed an-operability determination and appropriately declared these pumps inoperable.
On August 16,,the licensee reported that the testing of HPSI pumps P-14A and 14B did not test all contacts in the pump start circuitry.
On August 17, the Operations Manager issued a memorandum stating that these testing discrepancies did not render the ECCS pumps inoperable because the Technical Specifications (TSs) did not specifically require that all safety injection actuation system contacts associated with the pump start circuitry be tested.
The team found that this interpretation of the TS requirements was incorrect.
The licensee inappropriately interpreted the relay tests required by TS Table 4.1-2, " Minimum Frequencies for Checks, Calibrations and Testing of Engineered Safeguards Systems Instrumentation Controls," were limited to verifying that the relays actuated properly.
The licensee did not believe that TSs required contact actuation verification to confirm proper operation of the pump.
Following a conference call between Maine Yankee, NRC Region I and NRR personnel, the Operations Manager wrote a memorandum to the PSSs and STAS, which stated that if a safety-related logic circuit testing deficiency was identified, the associated components would be considered inoperable due to a failed surveil-lance and the appropriate TS would be entered.
3.1.2.6 Technical Specification Interpretations The team reviewed 64 TS interpretations and found that the licensee appropriately used the interpretations to clarify specifications which lacked detail. However, 2 of the 64 interpretations reviewed inappropriately changed the intent of the applicable TS.
Technical Specification 5.5.B.9 required Maine Yankee's Nuclear Safety Audit and Review Committee (NSARC) to audit facility activities at frequencies defined by Sections a through k of this specification. The licensee had incorrectly applied the provisions of TS 4.0.A and incorporated a maximum allowable extension of +25 percent to the audit intervals. Maine Yankee indicated that it planned to cancel the interpretation.
TS 3.14 required two reactor coolant leakage detection systems of different operating principles to be operating, with one of the two systems sensitive to radioactivity in the containment, when the reactor was above two percent power.
In a TS interpretation approved in 1985, Maine Yankee determined that leak detection systems sensitive to radioactivity were the containment gaseous radiation monitoring system, the containment air particulate detector radiation monitoring system, and daily containment grab samples.
The team concluded that including a daily containment grab sample in this interpretation was a change to the TSs because this did not represent a continuously operating system. The licensee disagreed with the team.
37
At the conclusion of the assessment, the NRC was reviewing the appropriateness of this TS interpretation.
3.1.2.7 Post-Trip Reviews The team reviewed five post-trip reviews (PTRs) from 1991 through 1996. The PTRs, in general, lacked rigor and completeness. The reviews did not have detailed event timelines, complete descriptions of the event, and operator responses could not be determined from the documentation. The PTRs did not contain a complete list of required and completed short-term corrective actions and planned.long-term corrective actions.
In addition, individual l
operator statements contained in the reviews generally did not contain sufficient detail to add value to the review.
One PTR reviewed by the team indicated that data from the plant computer was unavailable because of problems associated with the plant computer and its inputs.
3.1.3 Programs And Procedures 3.1.3.1 Emergency Operating Procedures Although the quality of the emergency operating procedures (E0Ps) at Maine Yankee was good, some exceptions were noted.
In general, procedures conformed to the writer's guide and gave clear guidance to the operators. However, Maine Yankee recently reported that E0Ps may not be adequate to address an inadequate core cooling (ICC) event and a steam generator tube rupture (SGTR) under certain ronditions.
In 1986 Maine Yankee identified the inability to recover from an ICC event due to the small relief capacity of the atmospheric steam dump valve.
The ICC event is a low-probability event which requires a small-break loss-of-coolant accident coincident with a loss of condenser vacuum and loss of both trains of HPSI.
Although the licensee planned to correct the problem, these plans were deferred and ultimately canceled in 1992.
The licensee did not provide an explanation as to why the plans to increase the relief capacity were canceled.
In February 1996, the E0P coordinator re-discovered Maine Yankee's inability to recover from an ICC eveni. anu brought the issue to plant management's attention. Maine Yankee informed NRC on March 4, 1996, that the information contained in a previously submitted E0P generation package regarding the capacity of the atmospheric steam dump valve was incorrect.
In the Plant Root Cause Evaluation Report completed in July 1996, the licensee concluded that the ICC event was not a design-basis event and Maine Yankee was not required, nor did it commit, to have the capability to 71tigate an ICC event.
Nonetheless, the licensee did inform the team it intends to modify the plant to increase steam relief capacity. At the conclusion of the assessment, the NRC was reviewing Maine Yankee's commitments with respect to the ICC event.
In May 1996, Maine Yankee found that it may take more time to isolate a ruptured steam generator than was originally assumed in the SGTR E0P analyses.
Specifically, in the event of a SGTR with a coincident loss of condenser 38
a vacuum, the time to isolate the ruptured steam generator could exceed 20 minutes; this is 15 minutes longer than the analysis assumption of five minutes. This increase was identified when Maine Yankee found that, due to a harsh environment created by the lifting of the main steam safety valves, an operator would have to don protective clothing to enter the main steam valve house in order to close a manual valve to isolate the ruptured steam generator.
The licensee determined that, as a result of the additional time to isolate the steam generator, the potential existed to overfill the steam generator, releasing radioactive liquid to the environment, and possibly exceeding the limits of 10 CFR Part 100.
In response to its finding, the licensee conducted training to reduce the amount of time it would take an operator to don protective clothing and isolate the steam generator. The licensee stated that operators could isolate the ruptured steam generator prior to overfill.
To ensure that the limits of 10 CFR Part 100 would not be exceeded in the event that an overfill condition did occur, Maine Yankee administratively limited reactor coolant system activity to 10-percent of the maximum value allowed by TS.
The team reviewed Maine Yankee's E0P transient analyses for two additional events, loss of secondary heat sink and post LOCA cooldown, and did not identify any discrepancies with the information or assumptions used for these transients.
The team conducted walkdowns of selected E0P operator actions performed outside of the control room. Walkdown of actions outside of the control room for establishing HPSI and EFW/AFW, identified by the IPE as important recovery actions, revealed that the procedures were adequate to perform the tasks.
Necessary tools were available and valves were properly labeled.
Sufficient I
emergency lighting was installed to allow proper identification of components, with the exception of the upper levels of the main steam valve area.
- However, the licensee indicated that in an emergency, the operators would be wearing
" bunker gear" which has a helmet light that would allow component identification. Also, the licensee was evaluating the installation of emergency lighting in this area.
Control room switches were properly labeled, and all valves that might require local operation were also properly labeled.
3.1.3.2 Configuration Controls Maine Yankee drawings were accurate with a low backlog of drawing revisions.
Control room drawings were of good quality and appropriately updated to reflect plant temporary modifications.
Equipment labeling was good. The team noted that labeling on major equipment (valves and pumps) was very good.
Labeling on plant instrumentation and gauges was not as good as on valves and pumps, but no deficiencies were noted.
During tours of the containment, the team found handwritten markings on the wall that included informal system drawings, component identifications, and a scale used in determining reactor vessel water level when in reduced inventory. The licensee indicated that these were old markings, were not used, and would be removed.
39
During control room observations, the team witnessed locked valve controls and hanging of equipment tag-outs, including team verification of the adequacy of tagging boundaries.
The team also reviewed controls associated with operator information postings.
Equipment tag-outs were appropriate and locked valves were properly positioned and locked.
During walkdowns of the SW and HPSI systems, the team found the systems properly aligned and valves properly locked, 3.1.'3.3 ' Restart Readiness Program l
The team reviewed the Restart Readiness Program initiated during the extended outage in 1995.
The purpose of the program was to achieve an event-free startup, to cperate the unit safely and reliably throughout tne operating cycle,' and to ensure that plant equipment, procedures and staff were well prepared for startup and continued power operation following the extended outage.
By initiating the Restart Readiness Program, Maine Yankee management provided additional' oversight of the restart effort and performed a systematic and thorough review of equipment readiness.
Maine Yankee also reviewed i
internal and industry operating experience to identify potential pitfalls and good practices related to restarting from an extended outage.
The team found that the Restart Readiness Program was generally successful; however, it did not preven.t several fuel handling events which occurred toward the end of the outage.
As detailed in NRC Inspection Report IR 95-24, NRC staff noted weaknesses in the areas of preparation, training, decision-making, and problem identification, as well as corrective actions associated with the incidents.
- 3. '1. 3'. 4 Operations Performance Assessment Program The Operations Performance Assessment Program was effectively implemented The program consisted of periodic self-assessments in the areas of conduct of operations, housekeeping, training, and administrative controls.
Management reviewed the results of the assessments for repetitive problems and to evaluate the effectiveness of corrective actions.
Negative findings received management attention and adjustments were made to the assessment frequency > as necessary.
3.1.4 Plant Suppon.
3.1.4.1 Fire Protection Program I
i The team found that.the Fire Protection Program at Maine Yankee was receiving increased management attention and resources to address previous problems in this area.
Maine Yankee had experienced problems with penetration seals, control of combustibles, and fire protection equipment.
As a result of these problems, Maine Yankee instituted a Fire Protection. Improvement Plan (FPIP) in 1995. The team found that Maine Yankee had made progress in implementing the FPIP. Planned activities included documenting the design basis for the FP i
l system, inspecting penetration seals, and upgrading the procedures for controlling combustibles and ignition sources.
Maine Yankee added a Fire Protection Engineer, planned to hire a new Fire Protection Coordinator, and j
created a Fire. Protection Training Instructor position.
i,'
40
3.1.4.2 Training Program The team observed four simulator training sessions to evaluate the effectiveness of E0P training.
Crews performed well.
Recent initiatives to improve training'and evaluations, including increased involvement of the crews in critiques, commitments by crews to improve in those areas identified as needing improvement, and objective evaluations of crew communications, were viewed as < mod enhancements to operator training.
The team noted that there was an increased emphasis on improving crew communications.
In addition, the team observed that Operations management attended simulator training sessions j
and participated in the evaluation and critique of crew performance.
1 Simulator training was good and management's participation was a strength.
I The team observed a classroom presentation and found that it contained a good mix of lecture, questions, and crew participation.
3.1.4.3 Radiation Protection Program The team assessed the Radiation Protection Program in the areas of radiation exposure controls, the "as-low-as-is-reasonably achievable" (ALARA) personnel exposure program, contamination controls, and the effectiveness of earlier improvement programs.
The licensee's ALARA program was generally effective in controlling personnel exposure. With the exception of 1995, which consisted of an extended outage to repair steam generators, yearly personnel exposure had declined for all years (outage and non-outage). Maine Yankee management was proactive in the implementation of the ALARA program and had established an aggressive personnel exposure goal for 1996. Daily exposure was discussed at the morning meetings'and management recognized that the personnel exposure for the spent i
fuel pool rerack project was higher than previously expected. As a result, management initiated a review of the work to reassess the ALARA planning and l
detennine if the proper controls were in place to minimize exposure.
ALARA planning packages reviewed by the team were thorough, comprehensive, and included ALARA hold-points, the use of training mock-ups, the identification of low dose rate niting areas, and shielding evaluations. ALARA briefings observed by the team were comnrahensive.
l Maine Yankee was not effective in identifying and controlling contamination in areas of the plant considered to be clean.
The team reviewed the personnel 4
contamination events identified by Maine Yankee in 1996 and found that j
l approximately 50 percent (44 out of 90) of the contamination event:; cccurred in areas that were believed to be clean or uncontaminated.
The radiation protection program had been effective in identifying areas where improvement was needed, but had been less effective at resolving these problems.
Specifically, recurring problems had been noted in the areas of unplanned exposure, the control of personnel contaminations, use of procedures, and supervisory oversight, l
41 1L ___ _
3.2 Maintenance And Testing Assessment The team determined performance in the Maintenance area was good overall, however, testing was weak.
The results of the operating perfomance reviews for the auxiliary feedwater (AFW), emergency feedwater (EFW), high pressure safety injection (HPSI), and emergency diesel generator (EDG) systems showed mixed equipment performance.
With some exceptions, safety-related pumps and valves operated well, and containment penetration testing has resulted in few problems,- reflecting good plant material condition. Communications were found to be good among Operations, Maintenance, and Plant Engineering Deparitnent personnel.
The Maintenance Department staff did an effective job at identifying material condition deficiencies however some deficient conditions were not identified, such as the poor condition of the circulating water pump building service water plant maintenance was go(SW) bay space, and AFW deficiencies.
The quality of od as evidenced by minimal maintenance rework issues, and the overall good equipment operating performance.
Several instances of equipment malfunctions which occurred during multiple plant shutdown.and i
startup attempts in 1996 indicated declining material condition following the 1995 outage.
-Inadequacies in the scope of testing programs were identified, as were weaknesses in the rigor in which testing was performed and in the evaluation of testing results to demonstrate functionality of safety equipment. A lack of a questioning attitude, and stressed resources resulted in the use of poor surveillance procedures and ineffective evaluation of surveillance test data.
In contrast to these weaknesses, the extent and types of eddy current testing of steam generator (SG) tubes was evidence of an aggressive and questioning i
i attitude to determine the extent of SG tube cracking. The results of that testing led to the decision to sleeve SG tubes in 1995.
Overall work order planning and trackin were found in the work control process.g was good, however, some weaknesses 3.2.1 Equipment Performance Equipment performance was good overall with some areas being excellent and some being weak, Conditional probabilities which incorporate component availabilities and reliabilities were poor for the AFW system, good for the EDG and HPSI systems, and excellent for the EFW system.
Equipment performance i
of pumps and valves tested in the inservice testing (IST) program was excellent, and containment penetration testing results indicated the capability of the containment to withstand postulated accidents. There were some indications that plant material problems were increasing within the last year as evidenced by operational problems occurring during 1996 that were caused by poor material condition. Plant walkdowns indicated some material condition problems including the poor material condition of the service water bay space in the circulating water pump building.
3.2.1.1 Equipment Performance of Auxiliary Feedwater, Emergency Feedwater, l
High Pressure Safety injection, and Emergency Diesel Generators The team performed an indepth review of equipment operating statistics for l
AFW, EFW, HPSI, and EDG systems for the time period from January 1,1992, 4
}
42 l
I i
through June 30, 1996, (the time period) to determine their individual equipment conditional probabilities.
The calculated conditional probability value for each system represents the probability that the system would be able to complete its mission when demanded, and was calculated by determining the product of (1) the standby availability (ratio of time not in maintenance to the total time in maintenance for operating conditions 5, 6, and 7), (2) the probability of start (cumulative successful starts / cumulative total starts),
and (3) the probability of run (run for 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> given that a successful start had occurred). The results of the conditional probability study for the four systems that were reviewed showed mixed equipment performance.
Performance of the AFW system was determined to be poor, EFW system was excellent, HPSI system was good, and the EDG system was good.
Additional information showing time-dependent probabilities appears in Appendix C.
The findings for each system are detailed below:
(1)
Auxiliary feedwater system conditional probability Based on the results of testing, the AFW system (consisting of one steam driven pump) performed poorly for the time period analyzed and was worse than the performance values assumed in the licensee's Individual Plant Examination (IPE). The licensee's IPE assumed conditional probability of approximately 91-percent, however, the team found that the conditional probability of the AFW system responding to a demand varied over the tice period (January 1, 1992 to June 30, 1996) from a high of approximately 82 percent to its latest conditional probability of approximately 76 percent.
The licensee was not fully aware of the poor condition of AFW pump P-25B an,1 had not updated assumptions made in their IPE.
The AFW pump P-25B had difficulties both with failing to start and failing to run during surveillance testing.
It had a failure to run in October 1992, because of an overspeed trip, a failure to start in January 1993, due to a controller problem, a failure to run in October 1993, due to an overspeed trip, a failure to start in January 1995, due to a controller problem, and a failure to run in June 1996, due to water and oil leakage problems. Due to several overspeed trips and maintenance down time after June 30, 1996, the overall conditional probability would likely drop below 70-percent. The AFW system was a standby system that had not been used by the plant for actual
)
demands, and was designed to be started manually by operators.
(2)
Emergency feedwater pump conditional probabilities The EFW system (consisting of two electrically driven pumps) performed well during the time period analyzed and compared well with the performance values used in the licensee's IPE. The system responded to actual demands following reactor trips during the time period. The system also responded adequately to demands during plant startups and shutdowns.
The system did not respond to all test demands during the period in that EFW pump P-25C had one failure to start during a surveillance test in December 1993, when a breaker tripped open. There were no testing failures for pump 43
P-25A pump during the time period. The EFW system automatically started and ran successfully on three separate (ccasions following reactor trips during the time period from January 1,1992 to June 30, 1996.
During each event, the pumps performed as designed.
(3)
High pressure safety injection system conditional probabilities Overall, the HPSI system performed reasonably well during the time period analyzed. and compared well with the performance values used in the licensee's j
IPE, with the exception of " failure to start on demand assumptions." The licensee's IPE would indicate a conditional probability of approximately 99.5 percent, however, the team found that the conditional probability of the HPSI system was better for pump P-14A at 100-percent (does not include test failure in August 1996, caused by a cut wire in the start circuity), and lower for pumps P-14B and P-14S at approximately 98-percent but was improving.
The failure to start of HPSI pump P-14A occurred after the period of analyses.
Had this test failure been included in the analysis, the conditional probability would have been lower.
The HPSI pumps had few failures during the time period analyzed.
There was a failure to start of HPSI pump P-14B in March 1994, due to a breaker problem, and one failure to start of pump P-145 in August 1992, due to an interlock key in bus 6 that would not engage properly.
For the time period analyzed, there were no emergency actuations of the HPSI system.
In response to a weakness identified by the team regarding lack of logic testing, the licensee perfonned some additional testing. A special test of pump P-14A resulted in a failure to start.
Troubleshooting activities to determine the cause of the failure indicated that a wire had been inadvertently removed in the safety injection actuation signal (SIAS) start circuit for pump P-14A.
Consequently, whenever pump P-14A had been aligned as the alternate pump during normal operation, it would not have received an automatic start signal as designed.
If needed, the pump would have to be started manually.
The licensee recalculated their IPE with this automatic signal missing to pump P-14A and found that the core damage frequency was increased by approximately six percent.
(4)
Emergency diesel generator conditional probabilities The performance of the EDGs (consisting of two diesels) during testing was good overall for the time period analyzed, and compared reasonably well with the values used in the licensee's IPE. The licensee's IPE would indicate a conditional probability of approximately 91 percent, while the team determined the conditional probabilities for EDG-1A and IB to be approximately 92 and 90 percent respectively.
The IB diesel had been slowly improving from a weak conditional probability of approximately 88 percent from December 1993, to June 1996, when it reached 90 percent. The latest trend for the IB diesel was downward to due increased planned and unplanned maintenance.
EDG-1A had one failure to run in April 1996, due to a cooling water pump shaft seal leak and a fuel oil fitting leak.
EDG-1B had one failure to start (cause unknown) and one failure to run (cooling water pump seal leakage) in December 44
i l
l l
1993. The EDGs were not required to be started as a result of an emergency non-test actuation during the time period considered while at power operations.
3.2.1.2 Equipment Performance Demonstrated Through Pump and Valve Testing Results of pump and valve testing performed as part of the licensee's IST program were very good, and test results showed that critical pumps and valves operated.well, indicating good plant material condition.
Of the 21 pumps in i
the IST program, none were in the alert or action ranges which would require either accelerated testing or corrective actions.
In addition, of the 381 valves in the IST program, only three were on an accelerated test frequency program due to stroke times in the alert range.
Along with the IST results, vibration data were collected through the predictive maintenance program which l
was used to assess the performance of rotating equipment.
The rotating equipment log was used effectively to document items requiring additional monitoring and correction.
3.2.1.3 Containment Performance Demonstrated Through 10 CFR 50 Appendix J Leak Rate Testing l
Results of testing performed in accordance with 10 CFR Part 50 (Appendix J) for containment penetrations revealed few problems.
These test results indicated the acceptability of the contai* mnt as a barrier to fission product release and that containment leakage criteria were met.
For example, seven integrated leak rate tests (ILRTs) were accomplished since 1972 (1972, 1975, 1979,1982,1985,1988, and 1992), resulting in one test failure (1985).
Some repetitive problems had occurred while performing local leak rate testing (LLRT). Testir.g of containment purge valves over the last few years has resulted in some failures that were adequately addressed by the licensee in 1995. The main cause of the failed tests was determined by the licensee to be an improper adjustment of an actuator during maintenance activities.
In addition, the licensee had established a close out plan to identify and track issues with purge valves in general. Additional repetitive testing failures involved the containment sump isolation valves caused by debris in the sump such as tie-wraps, weld rod and safety wire. The LLRTs for these valves had routinely exceeded the administrative limit of 2.0 pound mass (1bm)/ day and their inoperable limit of 10 lbm/ day.
The last five tests (performed since December 1995) were above the administrative limit, but below the inoperable limit.
Proposals had been suggested to provide additional trench screens and to clean the sump and containment trenches during the 1997 refueling outage.
l 3.2.1.4 Equipment Problems Trending Upwards Plant material condition at Maine Yankee had been good over the last few years but during 1996 there were indications that equipment problems have been increasing.
During the three years prior to the 1995 steam generator repair outage, Maine Yankee experienced a generally good plant operating performance record and plant material condition.
45 l
l
Since coming back on-line in January 1996, the overall performance of Maine Yankee had been mixed.
Although the unit was placed in service on January 16, 1996, power was reducej from 18 percent to less than 10-percent, and the main generator was taken off the grid to repair a main generator cooling control valve.
The reactor tripped on February 13, 1996, when a feedwater valve positioner failed, and on July 14, 1996, power was reduced to locate a small leak in a condenser waterbox.
A plant outage to perform modifications to the primary component cooling water (PCCW) system piping began on July 20, 1996.
During the plant shutdown, several equipment problems occurred, including the trip of a motor-driven main feedwater pump upon manual start, the slow response of main feedwater regulating bypass valves, and the inability to insert the control element assemblies in manual sequential mode.
During the outage, additional equipment problems were identified that needed to be addressed prior to startup, including operability problems with AFW pump P-258, excessive leakage of a residual heat removal valve (RH-4), and identification of safeguards equipment actuation logic testing deficiencies and associated equipment problems.
The attempts to restart required the licensee to change operating conditions many l
times to address equipment concerns.
After completion of repairs, the plant was returned to service on September 2, 1996.
The number of equipment problems identified in 1996 indicated that problems were trending upwards following the 1995 steam generator repair outage.
3.2.1.5 Plant Walkdown Observations The team conducted walkdowns throughout the plant.
There were noteworthy observations of PCCW piping corrosion, service water (SW) pump bay degraded components, and cleanliness problems within the containment building.
The tear. observed extensive external corrosion on a large portion of the PCCW piping within containment during a walkdown.
This problem was previously identified and was monitored by the licensee.
The corrosion, while creating a visible appearance of an extremely poor material condition, did not prevent the piping from perfonning its afety function and had been monitored by the licensee. The licensee indicated that portions of the corroded PCCW piping located inside of containment would be replaced with stainless steel piping during the 1997 refueling outage.
Team walkdowns of the SW pump bay in the circulating water pump building also revealed extensive material condition problems, such as water on the floor, corroded fasteners, corroded supports, pump base plate corrosion, missing u-bolt hanger parts, and cracked grout pads.
After the team identified these problems, the licensee performed an in-depth inspection of the SW pump area, and found additional problems, which included a disengaged support (caused by the lack of weld penetration) for the raw water line leading to SW pump P-298.
The pump was declared inoperable until a preliminary analysis indicated that the pump could withstand applicable loads despite the degraded support.
The licensee indicated that resources would be made available to greatly ioprove the material condition of the Di pump bay.
The licensee had not effectively inspected the containment for cleanline after the outage.
Team observations inside the containment indicated that 46
housekeeping required greater attention to eliminate inappropriate foreign material or items left over from maintenance activities.
During inspections f
inside of the containment, the team identified problems with housekeeping and cleanliness, such as items wrapped in unqualified plastic, and discarded tape.
During followup inspections, the licensee found uncontrolled tools in the containment.
The licensee implemented an initiative to replace plastic coverings utilized inside the containment with high-temperature qualified material.
3.2.2 Problem Identification And Resolution The Maintenance Department staff was effective in finding and documenting material ccndition deficiencies within the plant. They also identified and initiated the majority of corrective and non-corrective work orders (W0s). The WO process was the primary process used to initially identify and correct deficiencies. However, the effectiveness of the problem identification and resolution process was inconsistent. In many instances, testing was not an effective tool in identifying problems. A lack of a questioning attitude during test performance and evaluation was not conducive to discovering equipment problems, but rather to accepting equipment performance.
Walkdowns of plant systems indicated that some deficient conditions were not being identified by either of the three main groups (Maintenance, Engineering, and Operations Departments). These included the poor conditions of the circulating water pump building SW bay space and AFW pump P-25B deficiencies.
~
Depending upon the type or severity of a deficient condition, the licensee used other corrective action processes to evaluate the cause. The main i
corrective action program used by the Maintenance Department to review rework was not fully effective and, in some cases, failed to identify substantive problems or trends.
Procedure No. 67-300-1, " Maintenance Self-Assessment Program (MSAP)," established a system for maintenance rework identification and corrective action follow-through.
The procedure provided a syste:n for equipment trending to identify recurring problems and to determine appropriate corrective action, and provided a system to enhance availability of lessons learned during previous maintenance evolutions.
For example, rework and repetitive failures associated with the AFW and EFW pumps were not identified by the program as issues.
Examples that were found indicated that the program l
was not always effective and in some cases the organizations at Maine Yankee were not communicating and cooperating with each other to identify and prevent repeat problems. Maine Yankee had identified this deficiency and was in the process of integrating existing fragmented corrective action programs with the intent of being more effective in identifying, resolving, tracking deficiencies, and minimizing repetitive failures.
The resolution of the Magne-Blast breaker problems demonstrated an effective program that corrected manufacturer equipment component defects and workmanship.
Beginning in September 1993, the licensee experienced many problems with 4.16 kV and 6.9 kV Magne-Blast breakers.
Problems with the breakers at other plants had also been observed and had continued to be identified by the industry during 1996.
As a result of the various breaker issues commencing with the 1993 occurrence, a significant testing and 47
i inspection program was implemented by Maine Yankee to resolve these problems, including consultation with the manufacturer, General Electric. The process was characterized by good. focus, proactive approach, organized and comprehensive tracking of issues, clear communication, and traceability of documentation.
3.2.3 Quality of Maintenance-i The quality of plant maintenance was good, as evidenced by good overall plant l
l 1
material condition, good equipment operating performance, and a competent Maintenance staff.
However, several instances of equipment malfunctions which c curred during recent plant shutdown and startup attempts indicated a dedining trend in material condition.
Equipment problems that delayed recent plant startups or complicated shutdowns i
L included, repetitive AFW pump P-25B problems, leak-by of valve RH-4, foreign 1
l material in steam generator blowdown valve BD-T-12, a motor-driven _ feed pump trip, a slow response of a main feedwater (FW) regulating by-pass valve, and i
the inability to operate the control element assemblies (CEAs) in manual sequential mode.
3 l
The team observed or. reviewed several maintenance activities.
Pre-job briefings were noted as excellent.
In general, procedure use and adherence l
were appropriate, bw there were some instances of pc.or maintenance work l
practices.
(1)-
Failure to implement vendor recommendations for 6FW pump P-25A During 1995, the licensee overhauled EFW pump P-25A, as a result of vendor recommendations to replace certain carbon steel-pump internals with stainless steel parts because of previous incidents of internal component cracking.
At the same time, additional internal pump parts were replaced. After reassembly of the pump, the licensee noted a binding of the pump internals when the pump
)
was hand rotated during troubleshooting activities.
Because of the bind-ing, i
the new internals were subsequently removed and the old internals were reinstalled.
During the final stages of the reinstallation of the old l
i internals, the licensee had not performed a magnetic particle inspection of the "used" pump dirtusers prior to reassembly es recommended by the manufacturer.
However, it was also noted that the pump had perfomed well since January 15, 1996.
P (2)
Work order instructions not followed, service water system declared inoperable 1
Licensee communication weakness resulted in a degraded condition of the SW system during maintenance on a seismic pi discovered and reported by the licensee, ping support.
This event, which was related to a single event involving a problem of W0 adherence and potential communication inadequacies.
A maintenance Section head discovered that Maintenance personnel had removed a i
seismically qualified pipe sup without tagging out the pump. port on a seal water line for SW pump P-29CThe
)
only prefab work was allowed by the WO. This condition was reported to the i
48
control room, and the operators declared the pump inoperable on August 13, 1996. The support was repaired, and the pump was subsequently declared operable on August 17, 1996.
(3)
Poor foreign material exclusion work practices resulted in a failure of steam generator blowdown valve, BD-T-12.
On August 18, 1996, following repeated attempts to close valve BD-T-12 (a containment isolation valve), the valve was declared inoperable because it would not completely close. When the valve body was disassembled, a piece of weld rod was found lodged in the seat, preventing the valve from closing. The licensee was unable to determine the source of foreign material.
(4)
Lack of procedural detail for installation and control of fastener lockwire A lack of WO detail resulted in a failure to reinstall fastener lock wire on components following maintenance activities.
The team discovered that lockwire was missing during a containment walkdown involving five in-core instrumentation seal housings and on motor-operated valve (MOV) actuator mounting bolts for reactor coolant (RC) valve RC-M-32.
These conditions did not pose an immediate safety concern, however, the licensee generated W0s to install the missing lockwire.
The licensee also took actions to review and revise procedures involving lockwire installations.
3.2.4 Testing Weaknesses The team found inadequacies in the scope of testing programs, and weaknesses in the rigor in which testing was performed, and in the evaluation of testing results to demonstrate functionality of safety equipment.
Despite the many inconsistencies between information contained in the Final Safety Analysis Report (FSAR) and the as-built condition of the plant (See Section 2.4), the licensee did not recognize a need to review and reconcile test procedures with design requirements, and to correct these errors. A lack of a questioning attitude resulted in the use of poor surveillance procedures, and in the ineffective evaluation of surveillance test data to determine equipment operability. Of the test procedures that were reviewed, the team found several examples of tests that had been developed, performed, and evaluated many times without questioning the validity of the test results.
Examples include:
(1)
Poor emergency diesel generator testing procecures A large number of important electrical time-delay relays were not verified for proper operation and were not in the licensee's calibration program.
The team identified that the 10 and 20 second EDG load sequencing relays had not been calibrated since installation, the tolerance band and acceptance criteria had not been established, and these relays were not in the Maine Yankee Calibration Program. The team also identified that the actuation time of the 10 and 20 second sequencing time delay relays and the tolerance acceptance criteria for the relays were not logged on the surveillance procedure, and the 20 second timer actuation was not verified in the procedure.
The procedure 49
..~
1 i
was also incorrect in that the signoff for the 20 second timer actuation was listed in the procedure as 30 seconds.
The procedure had been performed many times without questioning the 10 second error in the timing sequence.
i Based on the team's questions in this area, the licensee identified several other relays that were not tested or included in their calibration program.
These relays included, the motor-driven fire pump start permissive relay and the permissive relays to remove the low pressure safety injection (LPSI) pump trip 10 seconds after the recirculation actuation signal to allow manual restart of the pump.
The licensee indicated that an appropriate calibration interval would be assigned to these relays.
4 (2)
Control room ventilation test results not properly evaluated I
The licensee failed to question the adequacy of a surveillance test used to determine if a positive differential pressure (dp) existed between the control room (CR) and adjoining rooms or buildings, and the assumptions used in a Yankee Atomic Electric Company (YAEC) calculation issued to justify the operability of the CR ventilation system.
On October 31, 1995, a negative dp was observed during a surveillance test.
The procedure required a positive dp a
to be acceptable. On December 12, 1995, YAEC issued a memorandum to the i,
licensee, which justified operability of the CR ventilation system in response to the test results.
However, the YAEC calculation failed to incorporate the negative pressure results in the calculation (based on engineering judgment and control room pressure history the analyst assumed that the pressure was positive).
Subsequent to the YAEC memorandum, the licensee failed to question the assumptions in the YAEC response and declared the CR ventilation system j
Based on the team's concern that no corrective actions had been taken to address the failed CR ventilation surveillance test, the licensee i
performed an extensive dp surveillance and determined that current CR dp was 1
positive.
Further review of the October 31, 1995, failed test and the YAEC calculation assumptions by the licensee indicated that the CR ventilation i
system was inoperable from the failed test in October 1995, until the successful retest in August 1996.
i, (3)
Inappropriate inservice test procedures for check valve testing The methodology used in test procedures to verify closure of safety-related pump discharge check valves in the IST program was inappropriate.
The team observed the performance of surveillance test 3.1.22, Revision 15, " Emergency Feedwater System Cold Shutdown Flow Test," and questioned whether the specified pressure instrument and test methodology was acceptable to measure backleakage through the check valve.
The licensee concluded that the instrumentation was not appropriate for the test application and retested using a pressure instrument at an alternate location.
The licensee later determined that this too was an unacceptable test method because the EFW suction piping was connected to an open system.
For the EFW system, the licensee determined that measuring reverse flow through the check valve was the method that should be used.
The licensee initiated a review to determine if other systems were similarly affected, identified procedural inadequacies, and declared that the HPSI, LPSI, PCCW, secondary component cooling water (SCCW), and EFW systems were inoperable.
The licensee reviewed results of 50
other tests of the affected systems, revised test procedures, and retested the valves to determine system operability.
Subsequent test results were acceptable. The licensee reported the issue to the NRC in LER 96-028 on
)
August 28, 1996.
(4)
Emergency equipment actuation circuitry not adequately tested and HPSI pump P-14A discovered incapable of starting on SIAS when in standby mode f
The team. reviewed procedure 3-1.15.2, Revision 17, "ECCS Operational Test Recirculation Actuation System," and identified that the recirculation l
actuation signal (RAS) circuitry for the CS pump P-615 was not tested and i
verified. The licensee concurred with this finding and concluded, due to the j
similarity of the circuits, that there were also portions of HPSI pump P-14S circuitry that were not being tested.
The licensee stated that even though the circuits were not fully tested, the systems were in compliance with the technical specifications (TS).
The team disagreed with this interpretation on the basis of the TS definition of operable and the requirements in TS Table 4.1.2 that required complete testing of SIAS actuation relays. The licensee decided to perform additional tests prior to increasing puwer above two percent that would verify that the HPSI pumps (P-14A, P-14B and P-14S) would start from the standby mode through exclusive actuation of the SIAS relays.
During this testing on August 17, 1996, HPSI pump P-14A failed to start due to an open lead (cut wire) that I
interrupted the start signal from the logic relay to the pump controller.
The cut wire was found to' have been partially removed (about 15 feet of wire was missing) with the remainder of the wire marked as " spare" in the wiring bundle l
at the main control board. The plant was brought to cold shutdown to make repairs, and Unusual Occurrence Reports were written to document the testing problems found on the HPSI pump P-14A and CS pump P-61S.
l (5)
Additional examples of insufficient logic testing identified and I
equipment deficiencies discovered l
In response to the team's questions concerning the adequacy of logic testing i
and as part of its implementation plan in response to NRC Generic Letter (GL) 96-01, " Testing of Safety-Related Logic Circuits," the licensee initiated a l
surveillance testing closeout plan to identify and correct other potential testing discrepancies.
Several additional examples of insufficient logic t
circuit testing were identified involving the SIAS, CS actuation, RAS, containment isolation, feedwater trip, EFW initiation, reactor protection, EDG actuation, and main steam isolation systems.
For the circuit testing that was completed prior to startup, three additional equipment deficiencies were identified that required repair; (1) a stuck relay in the CS pump P-61S circuitry was replaced, (2) a suction pressure switch on HPSI pump P-14B was replaced, and (3) a breaker for CS pump P-61S cycled when the undervoltage device was reset.
The breaker trip was being investigated by the licensee.
(6)
Control board annunciator fault alarm circuits not periodically tested The team reviewed the licensee's emergency core cooling system surveillance procedures and identified that four annunciator fault alarms were not tested 51
i
{.
or operationally checked and verified by procedure.
These alarms provided j
indication of a defect, such as loss of continuity, in the circuit.
l (7)
Standby power meters required by Regulatory Guide 1.97 not calibrated j
and periodically tested The team identified that the licensee had excluded most instrumentation met j
required by NRC Regulatory Guide (RG) 1.97, " Instrumentation for Light-Water-j Cooled Nuclear Power Plants to Assess Plant and Environs Conditions During and Following an Accident," from its calibration program.
The licensee stated that the volt meters and ammeters for the inverters, battery chargers, DC i
buses, EDGs and emergency buses were determined to be out of the scope of equipment that required calibration to support operability determinations.
The licensee had concluded that the only standby power instruments that required periodic testing and calibration were the power and reactive load meters for the emergency diesel generators.
The team disagreed with this position.
Further discussions with the licensee indicated that the additional meters would be added to its calibration program.
i l
(8)
Lack of calibration for EDG room exhaust fan thermostat 1
t 1
The team identified that the EDG room thermostats were not periodically i
calibrated and were not in a calibration program. The thermostats were calibrated when installed in 1990, and they were functionally checked to i
ensure that the exhaust fan started;.however, the thermostat actuation point i
was not recorded and no acceptance criteria was applied.
Since the operation i
'of the EDG room exhaust ventilation fan affects the ambient air temperature, j
the thermostat calibration could potentially increase the need to derate the EDGs kW output limit.
For example, ambient air temperatures above 90 'F,
i combined with jacket water temperatures above 190 'F (LOCA conditions) would require a derating of the electrical output of the EDG.
These factors were i
not accounted for in the EDG loading calculations.
l (9)
Recirculation actuation signal manual trip switch contacts not j.
effectively-tested The team identified tha.t trains "A" and "B" RAS manual trip switch contacts i
j were not functionally tested in procedure 3-1.15.2, Revision 17, "ECCS j
Operational Test Recirculation Actuation System." The test procedure inappropriately tested the RAS manual contacts with the RAS automatic signal present, thereby not assuring that the RAS manual trip switch contacts were actuated during the RAS manual test.
(10)
Importance of air-operated valve testing recently recognized Although the air operated. valve (A0V) testing program was in general compliance with the licensing' basis and applicable regulations, the testing did not effectively verify the' functionality of safety-related A0Vs in design applications for safety-related systems.
A large percentage of remotely operated valves at Maine Yankee were A0Vs rather than motor-operated valves (MOVs). The reliance on A0Vs to perform safety functions should have 52
i commanded earlier management support for a comprehensive A0V testing program that would ensure reliable operation. Although the regulatory requirements to verify design functions under realistic accident conditions were not as explicit as for MOVs, the licensee was mandated by their design criteria, i
I technical specifications and the FSAR to adequately test the safety-related valves to verify that they would operate under accident flows and pressures.
In addition, inservice testing did not adequately erify functionality of A0Vs under representative accident conditions.
There were examples of A0V testing failures at Maine Yankee that may have been preventable if a comprehensive testing program had been in place.
Recent examples included the failure of the FW regulating bypass valves (FW-A-112, 212,312) to completely isolate during a reactor shutdown, the leakage detected during IST testing in the EFW isolation valves EFW-A-101, 201, 301, 338, 339, 340), and the failure of a blowdown trip isolation valve (BD-T-32) to close due to insufficient actuator spring pressure.
)
Additionally, approximately 10-pertent of the station A0Vs were included in the IST program. Many of the valves not included in the IST program performed safety-related functions such as the temperature control valves for the PCC9 and SCCW systems (PCCW-T-19, 20 and SCCW-T-23, 24).
Despite a history of actuator problems, these valves were not in the IST testing program.
The Maintenance Department had recently recognized the need for a comprehensive A0V testing program and was in the process of obtaining funding to procure the required diagnostic and testing equipment, and program training.
(11) Reactor-Water storage tank level transmitters overheated During the ISA team's review of the temperature range used for RWST lesel setpoint calculations, a walkdown was performed by the licensee as a result of the ISA team's inquiries. The walkdown resulted in finding transmitter enclosures for train B that were heated above the transmitters' design temperature of 130' F.
This condition caused the transmitters to be in an unanalyzed condition, invalidated the setpoint calculation for these transmitters, and caused two tonsmitters to exceed their qualified life.
ne resultant setpoint change was slightly non-conservative and did not affect the operability of the ECCS pumps.
The transmitters were subsequently replaced.
3.2.5 Maintenance Work Order Control i
Overall WO planning and tracking was good. The use of the On-Line Maintenance Risk Management Program to set maintenance work priorities at Maine Yankee was excellent.
Extensive risk-based methodologies were used at many levels by the licensee. The basis for some of the risk information may not be as conservative as previously assumed, as was the case for AFW pump P-25B which l
had a conditional probability (overall probability for success) much less than that specified in the licensee's IPE because equipment failure data had not been updated.
Both the licensee and the team had identified some inconsistencies and inefficiencies with the WO process, and there was a large 53
backlog of open W0s (some dating back to 1991) where the actual work had been completed, although closecut of the work package was not yet performed.
3.2.5.1 Use Of Probabilistic Risk Assessment Methodologies In support of the licensee, the YAEC organization had established and implemented extensive probabilistic risk assessment (PRA) methodologies to assist in making risk-informed decisions to perform maintenance and testing activities.
Yankee Atomic personnel were very experienced in PRA techniques, and the licensee was accustomed to using PRA insights on a daily basis.
The licensee established an On-Line Maintenance Risk Management Program to manage risk.
This program effectively used insights from the PRA to help plant personnel, on a daily basis, make decisions concerning maintenance and testing of equipment.
Risk assessments used by the Operations and Maintenance staffs to plan and schedule work were relatively simple.
These assessments may not be as conservative as assumed, as was the case for AFW pump P-25B who's performance was much worse than that specified the licensee's IPE.
Individual W0s were prioritized using risk perspectives to ensure that the most risk significant work was accomplished first.
To accomplish this task, the WO process established specific equipment priorities based upon PRA information.
3.2.5.2 Work Planning And Tracking Overall WO planning and tracking was good.
Some weaknesses were found in the work control process, however, the licensee was assessing how to improve WO efficiency.
In addition, the database used to capture individual W0 activities was useful in determining who initiated the W0, its priority, age, outage or nonoutage condition, safety or nonsafety-related condition, WO status, and many other parameters.
The capabilities of the WO tracking system were under-utilized as a tool to aid management in understanding the status of WGs.
The licensee encouraged anyone, upon discovery of a deficient condition, to initiate a W0 without intervention from others.
However, a review of the 1995 steam generator outage WO statistics indicated there was a high percentage of W0s that were canceled, deferred or voided after the W0s were entered and prioritized. This practice produced administrative inefficiencies which were largely caused by duplicate W0s, lack of initial deficiency tagging of components, or a subsequent determination that a WO was not required after one had been initiated. A review of open W0s showed that there was a backlog of 185 W0s (many greater than one year with the oldest being 1991), where the work had been completed, including functional testing, but the work package was not yet closed out.
The processes used to perform work within the Maintenance Department differed between the mechanical, electrical, and instrumentation and control groups which caused some minor work control inconsistencies in tracking and trending of work. These work control differences also affected the reporting of monthly WD statistics, in that preventive maintenance or surveillance testing activities may or may not have been included in WO statistics.
54 i
1 Work involving temporary repairs using sealants or coatings such as Furmanite and Belzona were well controlled and tracked.
The team identified that no temporary sealants were in use in safety-related applications at Maine Yankee.
3.3 Engineering Assessment The quality of engineering work was mixed but considered good overall.
Strengths were noted in the capability and experience of the engineering staff, day-to-day engineering support of maintenance and operations, in the quality of most calculations, and in the routine use and application of analytic code 1.
However, engineering was stressed by a shortage of resources, and there was a tendency to accept existing conditions.
Specific weaknesses were noted with inconsistent identification and resolution of problems, inadequate testing, and work on some calculations and analytic codes.
3.3.1 Identification And Resolution Of Problems The team found that, although the overall contribution of engineering to the identification and resolution of problems was generally good, some significant weaknesses were evident.
There were many examples of appropriate resolution of problems. These included the addition of safety-related ventilation fans in the EFW pump room, the recent addition of relief valves in the PCCW piping, the sleeving of the steam generator tubes, and the modification in progress for improving the ventilation supply into the containment spray building.
However, in some cases, these were longstanding design deficiencies, that could have been resolved much earlier. The Plant Engineering Department gave very good i
support to operations and maintenance in solving day-to-problems.
l Through its IPE and IPEEE programs the licensee had either resolved or was in the process of resolving other issues. Safety improvements had been made, such as resolution of the lack of safety-related ventilation for the EFW pump room (identified in late 1995 and correu.ed in early 1996), the addition of a spare inverter, consideration and compensatory measures to accommodate turbine building flooding, and consideration of a larger spectrum of high-energy line breaks in the turbine building, for which compensatory measures had also been taken.
However the team also found:
deficient design conditions that had not been entered in a e
corrective action system or were dropped, corrective action for problems that was not appropriately expanded I
e I
to look for similar issues, and e
other long-standing deficient conditions.
{
Examples of issues for which appropriate corrective actions were not taken were (1) a design deficiency noted in 1991 by a YAEC engineer who described the potential to lose safety-related ventilation flow into the containment 55 r
spray building due to the closure of ventilation dampers utilizing a non-safety-related source of instrument air and (2) the limitation of the atmospheric steam dump valve to relieve only 2.5 percent power which was identified in the mid-1980s, dropped as an issue needing resolution, and resurfaced by the licensee in 1996.
Examples of deficiencies that could have been found if the corrective actions were appropriately expanded to look for similar issues included problems with the ventilation systems in the protected switchgear room, the containment spray building, the control room, and the emergency diesel generator room.
Other examples of long-standing deficiencies missed, or not effectively pursued, were identified in the environmental qualification (EQ) program and equipment testing.
The team noted the lack of a conservative testing philosophy that resulted in the identification of numerous safety-related components that were not being periodically tested or calibrated.
The team also found specific testing weaknesses with recirculation actuation signal (RAS) manual actuation, the P-61S CS pump, control room fault annunciators, the EDG room ventilation thermostat, Agastat relays used for timing safety-related components, and various safety-related valves team's findings in this area, a(n operability problem was identified with HPSI CCW bypass, check valves). As a result of the pump P-14A.
As a followup to the team's concerns, licensee testing revealed that HPSI pump P-14A would not have started automatically on a safety-injection signal with offsite power available, although the pump could have been started manually.
The service water operational performance inspection (SWOPI) performed by the licensee was effective at identifying problems; however the licensee stated that the evaluation and resolution of the c problems were dalaysd by resource constraints resulting from the steam generator tube sleeving effort in 1995.
3.3.2 Engineering Programs The engineering staff was technically competent with particularly good historical knowledge of the plant.
The relationship between Maine Yankee and Yankee Atomic (YAEC) appeared to be a significant positive factor.
There was extensive technical expertise within the YAEC organization, and its degree of familiarity with the Maine Yankee facility surpassed what could be expected in a normal client / architectural engineering firm relationship.
The team assessed Engineering programs relating to (1) closure of NUREG-0737 responses to TMI action items, (2) modifications and temporary modifications, including the performance of 10 CFR 50.59 reviews, (3) erosion / corrosion detection in piping systems, (4) and the SWGPI effort. This assessment was performed by reviewing procedures and selected program documents, as well as by discussions and interviews with licensee personnel. Maine Yankee audits and assessments were reviewed to determine the effectiveness of Maine Yankee self-identification and correction of problems related to these programs.
l 56
3.3.2.1 Engineering Modifications And Temporary Modifications The team reviewed the program for plant design changes and modifications, including procedures and selected program documents, and held discussions and interviews with licensee personnel. Audits and assessments were reviewed to determine if self-identified problems had been corrected.
The procedures were good, meeting the requirements of ANSI N45.2.11 " Quality Assurance Requirements for the Design of Nuclear Power Plants." Reviewed modification packages were also good. The 10 CFR 50.59 reviews and screening documents reviewed were generally correct.
Temporary modifications were acceptable; however, some temporary modifications had been installed for a long time (approximately 10 years).
The licensee was aware of this condition, and had recently made some improvements in this area to reduce the number of temporary modifications.
Licensee weaknesses and problems identified in self-assessments and audits in the area of modifications were appropriately corrected or were in the process of being corrected.
3.3.2.2 Erosion / Corrosion (E/C) Program The licensee's Erosion / Corrosion Program was difficult to assess because the common industry practice of using a computer based program to determine inspection points was not being used. Although weaknesses were noted, the E/C program was considered adequate.
The licensee strengthened its program following the failure of a moisture separator reheater scavenging vent elbow in 1992.
Immediate corrective action included a complete rewrite of the E/C implementing procedure to make it more effective.
The changes comprised a program and rm cess to facilitate consistent implementation, screening of all piping for susceptibility to E/C, a documented basis for any exclusion, qualitative analysis of all susceptible lines, a process for selecting components for inspection, and documentation of actions taken on all industry experience.
The licensee also stated that it was making plans to use the EPRI CHECWORKS software but did not commit to an implementation date.
In certain cases, the licensee had replaced adjacent piping when it replaced fittings as a result of E/C testing.
Whenever possible, the licensee used replacement components fabricated of steel having 2.25 percent chrome content, which the licensee stated reduced E/C rates by at least a factor of four.
The licensee stated that its control of water chemistry by (1) the use of morphaline, (2) raising the cold condensate Ph to >9.2, and (3) maintaining oxygen in the condensate at <5 ppb had significantly reduced the corrosion rate for the affected systems.
The E/C program covered approximately 3000 fittings, of which approximately 826 had been replaced as a result of excessive wear.
Historically, the plant has had limited success at preventing leaks. The plant had six small leaks in high-energy piping included in the program, four of these were pinhole leaks, and two of which were in fittings that had been inspected and had subsequently l
leaked.
57
4 There had been several small. leaks in secondary drain lines to the main condenser, and during the last outage, the licensee failed to replace components on WO 94-02568-00 related to high pressure drain trap 15, which had been identified as having E/C.
3.3.2.3. Service Water Operational Performance Inspection The SWOPI, which the licensee performed in 1994, was comprehensive and insightful.
It identified over 155 findings related to the service water system, PCCW, and SCCW systems.
At the time of this assessment, 18 SWOPI findings were not closed. These 18 findings involved the adequacy of cooling of the EDGs' testing.and trending-of heat exchanger efficiencies (fouling) required for safety analyses, and the absence of "a formal set of minimum heat transfer requirements related to containmen heat removal" to support containment safety analysis. Resource impacts of the SG sleeving outage impacted the scheduled completion of these potentially significant items.
The team reviewed the SWOPI report and the responses to its findings'in detail. Many of the items discussed in this report in Section 2.2.2 were identified in the SWOPI self-assessment but were not yet fully resolved.
For example, even though work had been started, an effective program was not in place to ensure that the heat exchanger fouling did not exceed the bounding values assumed in calculations.
3.3.3 Design-Basis Information The quality and availability of design basis information (DBI), including drawings,. calculations, and other documents containing detailed design information, was good.overall but varied in. quality depending on the-functional area.
Design basis documents were reviewed for safety related and important to safety systems.
Calculations varied with the engineering discipline.
Eiectrical calculations were tuically excellent and recently revised.
Some mechanical calculations were easily misinterpreted because there were portions of various revisions to the same calculation considered applicable.
The earlier calculation revisions were not annotated to identify that they were
" superseded" or " void."
In general, electrical DBI was excellent and mechanical DBI was good.
J Design basis summary documents (DBSDs) were produced as part of an ongoing program to consolidate available design information on selected systems. This program had been in effect for about 10 years. The design basis recovery (DBR) for each system was accomplished primarily by creating a DBSD for the system. The 10 functional areas for which DBSDs had been developed were HPSI, LPSI, CS, EFW/AFW, PCCW/SCCW/SW, instrument air, control room habitability, flooding, station blackout, and Appendix R (fire protection). There were no DBSDs 'as yet for nine areas identified in this program, including the emergency diesel generators (EDGs), electrical distribution, ventilation (partial), reactor protection, and safety-actuation signals (SAS). The overall quality of the.DBSDs was good and they provided a valuable roadmap to 1
other applicable documents and calculations.
However, the team found that i
58 i
they could not be completely relied upon without verification in that there were some minor discrepancies. Maine Yankee implemented an Inputs and Assumptions Source Document (IASD) in 1986 in response to an NRC confirmatory action letter in 1982. The IASD contained key parameters (important to safety and operator controlled) that were assumed in safety analyses.
There was no similar document to provide configuration control of the numerous other safety-related parameters required in design and licensing-bases calculations and plant procedures. The licensee had identified weaknesses in the IASD and was working to replace it with a more comprehensive document called the Safety Analysis Information Document (SAID), which had a projected completion date of 1997. Completion of this effort was delayed as a result of the SG sleeving project.
As-built drawings were identified for all safety-related piping covered by NRC Bulletin 79-14, " Seismic Analyses For As-Built Safety-Related Piping Systems,"
(which included most safety-related piping) and for other specific Maine Yankee projects such as main control board verification.
Other drawings had been verified on an as-needed basis, and, as a result, other systems such as SW, lacked a complete set.of as-built drawings. The team walked down portions of the HPSI, CS, and EFW/AFW systems, verifying the as-built drawings against the plant configur& tion. A few errors were noted on the drawings walked down by the team, but none of these errors were significant.
The overall quality of drawings was very good.
1 3.3.4 Quality Of Engineering The team reviewed numerous engineering calculations and found their quality to be mixed and good overall. Deficiencies included ' errors and inappropriate assumptions. A weakness was also noted in the overall control of calculations.
Most of the calculations reviewed were detailed, comprehensive, and rigorous, particularly in the area of electrical design. However, there were examples of significant calculational deficiencies including the EDG loading calculation (approximately 200 KW of %d was not accounted for), the NPSH calculation for the containment spray pumps (incorrect suction piping head losses and other inappropriate assumptions), and the heat load calculation for the CCW systems (inappropriate assumptions). These and other examples are discussed in more detail in Section 2 of this report.
The quality of 10 CFR 50.59 analyses was considered good, however the team found several isolated deficiencies of these analyses, such as, for a change to the RWST high-level alarm, consideration was not given to the potential for the consequences of adding more water to containment following an accident thereby potentially impacting environmental qualification of instrumentation.
The licensee had recently identified other problems with regard to 10 CFR 50.59 analyses.
Before the team arrived onsite, the licensee initiated a review of selected FSAR sections to insure that the licensing basis of the plant was correctly stated. At the time of the ISA, this effort was partially completed but resulted in over 100 Apparent Discrepancy Reports, of which approximately 50 will require FSAR changes and accompanying 10 CFR 50.59 reviews.
59
A weakness in the control of calculations was noted.
For example there were two active revisions of calculation MYC-272, "NPSH Study, Containment Spray Pump."
Revision 2, of this calculation was the basis for the injection phase NPSH, and Revision 4 of this calculation determined the suction piping frictional losses for the recirculation phase.
Revision 2 was not annotated to identify that a portion of this calculation was superseded by a later revision.
Calculation MYC-1731, Revision 0, dated August 26, 1994, calculated the post-LOCA containment sump temperature.at 263 'F.
This calculation should have been superseded since the sump temperature of record was 255 *F,
developed from calculation MYC 1740, Revision 1, dated June 25, 1996.
The ISA team found the SW system design ~ calculations, and the Engineering Directive that provided operational guidance based on these calculations, to be an example of excellent engineering work.
This directive summarized a number of complex interrelated parameters in a clear format.
However, the limits established in this directive were not consistent with the FSAR (se)
Section 2.2.2.6), but this inconsistency was not safety-significant.
1 60
4.0 SELF ASSESSMENT, CORRECTIVE ACTIONS, PLANNING, AND RESOURCES Weaknesses were identified in the areas of problem identification and resolution.
While licensee self-assessments were generally good, they occasionally failed to identify weaknesses or incorrectly characterized the significance of the findings.
Additionally, some corrective actions were not timely and others were ineffective, leading to repetitive problems.
Licensee planning was generally effective, although some weaknesses were found in the overall implementation of improvement plans. Some economic pressures resulted in limitations on resources, which impaired the licensee's ability to complete improvement projects that affected plant safety.
Equipment problems were not resolved and improvement programs were not effectively implemented because the licensee perceived them to be of low safety significance.
The team (1) assessed the licensee's progr,ams, procedures, and actions in the areas of problem identification and resolution, planning, and resources and (2) evaluated timeliness and effectiveness of corrective actions. The team conducted more than 100 formal interviews, observed numerous meetings, reviewed relevant documents, and used the technical findings discussed in Sections 2 and 3 as a basis for its assessment.
4.1 Self Assessment The licensee's demonstrated ability to identify and assess problems affecting plant performance and safety has been adequate.
Numerous examples of internal and external assessments revealed a pattern of identifying problems and characterizing them effectively for station management.
However, while many problems discussed in this report had previously been identified by the licensee, some notable problems had not been adequately identified or characterized.
Management encouraged all levels of the plant organization to identify performance problems. There was no evidence of a general reluctance to raise perceived safety concerns to station management.
Interviews cornistently indicated that the workers often highlighted problems in the plant and did not fear reprisals from supervisors or management. Management oversight of plant activities was adequate in assuring problem identification with some notable exceptions such as the faiiure to identify design problems in the ventilation systems and testing deficiencies of safeguards logic circuits. The active presence of key managers inside the plant, and the use of the zone inspection i
program have strengthened the oversight of many programs and activities throughout the plant.
However, the team noted that supervisors occasionally missed obvious problems within the plant such as deficient material conditions in the service water pump bay and foreign material that remained inside the containment after closeout.
l The Performance Assessment Program was generally effective in providing line j
management assessment of performance in individual departments.
Each department manager assigned specific areas to department supervisors and other l
qualified personnel for problem identification and assessment. The effectiveness of these programs varied between departments.
The Operations and Maintenance Departments were effectively identifying problems; however, i
l l
61 l
the Engineering Department had implemented the program, but had not conducted a sufficient number of assessments to provide meaningful feedback.
The Quality Control (QC) Program was effective in identifying problems and maintaining the standards of quality for required activities at Maine Yankee.
Programatic controls over work processes that were important to quality assured the proper qualification of QC inspectors and welders, the delegation of line responsibility for work quality, and the appropriate use'of QC hold points and controls 'during maintenance planning and work control.
The Quality Assurance (QA) Program had a generally successful record of assessing the overall quality of station activities and identifying specific areas of vulnerability before performance degraded or the vulnerabilities became the subjects of regulatory enforcement. Annual audit and surveillance areas were selected using a weighted criterion of 11 factors that included safety, industry experience, regulatory impact, and power generation to assure that the most risk-sensitive areas are assessed. Most of tha licensee's assessments were thoroughly performed and properly self-critical.
For i
example, in 1994, the Quality Performance Department (QPD) identified and correctly characterized the problems with controlling the inputs to the safety analyses. However, the team identified a'few areas as being adverse to quality which the licensee had not recognized as significant.
Examples of such areas included the failure to identify components in the containment that were below submergence level in the Environmental Qualification (EQ) Program and the lack of complete testing of emergency core cooling system (ECCS) actuation logic.
1 Maine Yankee has effectively used outside organizations to characterize and objectively assess specific areas that had been identified by internal audits and assessments as requiring outside expertise. The licensee has concissioned at least 19 external assessments over the last three years that have often revealed aspects of the problem areas that eluded internal assessments.
Recent examples of the successful use of outside assessment in areas which were first highlighted by QPD i.~1uded audits of the Radiological Protection Organization by Westinghouse (1990), Cove's Edge Inc. (1995), and Millennium Engineering (1996).
The Cultural Assessment Team (CAT) Report (1996) was another example of the effective and timely use of outside experts to evaluate and characterize problems. This team of organizational psychologists and human factors specialists conducted an objective assessment of plant organizational culture in response to worker and management concerns.
The overall finding was that the cultural atmosphere at Maine Yankee was " conducive to the raising of concerns perceived as safety significant, but is not conductive to forthright and prompt reporting for issues and concerns which are perceived to have little or no safety significance " When interviewed by the ISA team, most employees and managers expressed agreement with the findings and the recommendations of the CAT report.
The licensee was developing an action plan to address the concerns and recommendations of the CAT report.
Proposed actions included development of a new vision statement, increasing the Human Resources Section's presence on site, implementation of the Supervisory l
Improvement Program, and review of the End of Life Committee's f
62 t
l l
recommendations.
Additionally, meetings were held with workers to emphasize the need to identify all problems.
Maine Yankee has made effective use of oversight committees to monitor the assessment process and to ensure that objective and independent views are presented to the Board of Directors.
The Plant Operations Review Committee (PORC) effectively monitored such routine operational decisions as 10 CFR 50.59 reviews and procedure changes, and assessed how the licensee was handling unusual occurrence reports (UORs).
The Nuclear Safety Audit and Review Committee (NSARC) functioned as the licensee's independent oversight board for all station issues. This committee was comprised of senior managers from Maine Yankee as well as outside experts from other utilities and experts from Yankee Atomic Electric Company (YAEC).
Committee members effectively raised concerns as appropriate.
NSARC members were observed to be actively involved in many assessment activities, including QA audit exit meetings and event reviews.
However, the Chairman of the NSARC was also the Manager of QA for YAEC.
In the latter position, he provided audit resources for Maine Yankee. As the Chairman of the NSARC, he was in charge of committee oversight of his department's work.
This resulted in the appearance of a lack of independence.
The Nuclear Oversight Committee consisted of outside experts who reported dir: ctly to the Board of Directors regarding high-level issues that impacted the industry.
The licensee used numerous performance indicators and managers met monthly to examine them and discuss their meaning. Although this process was a comprehensive. effort, there were several key performance indicators that were under development and that had only two months of data, thus lit ting the usefulness of trending the data at the time of the assessment.
Tracking and reporting of many performance indicators was discontinued during the 1995 outage. Consequently, some managers stated that they saw little management benefit from many performance indicators and they were continuing to adjust their content and presentation to aid in use and interpretation.
The team found that performance indicatucs for the Maine Yankee Task Tracking System (MYTTS) did not reflect the significance of open items or identify late items.
During the assessment, the licensee corrected this weakness when informed by the team.
Performance indicators for maintenance work orders included only approximately 25 percent of the total number of outstanding work orders that were listed in the Maintenance Information and Parts Procurement System (MIPPS).
For example, the indicator used to reflect corrective maintenance backlog contained only approximately 15 percent of the relevant action codes.
Consequently, the total workload in the backlog was not accurately characterized by the performance indicator although the overall trend in the work off rate was representative.
The licensee's problem identification and tracking process consisted of approximately 29 individual systems. The fragmentation of the identification process was recognized by the licensee in several corrective action audits conducted over the past few years.
Additionally, NRC Region I staff noted this issue in 1995.
The licensee initiated the Learning Process Improvement Program to provide a plantwide methodology to integrate the separate tracking systems.
i 63
l A review of approximately 4 years of data indicated that the existing problem identification systems such as the UORs and the safety issue concerns (SIC),
were effectively highlighting station problems to managers. Management had t
recently emphasized the need to lower the threshold for problem identification in response to the Cultural Assessment Team Report and the December 1995 allegations.
One indication of the effectiveness of this threshold change was f
the increase since the beginning of the year in the number of design bases screens (DBS).
In 1994 the number of DBSs identified by the licensee was 12.
The licensee had identified more than 50 issues in 1996.
Although the threshold for raising problems had decreased since the beginning of the year, the team found some examples where cultural barriers to problem identification still existed: for example, the poor foreign material controls for containment and the poor condition of the service water building.
Additionally, the licensee had not recognized a number of significant equipment and program deficiencies.
These deficiencies included the l
inappropriate safety system check valve testing, the numerous environmental qualification concerns, and the lack of complete safety system logic testing.
l f
4.2 Corrective Actions The team assessed the licensee's Corrective Action Program by evaluating the following areas: problem evaluation, problem resolution, and commitment tracking. Additionally, the team reviewed the licensee's new Learning Process, a program for improving corrective actions. The root cause i
evaluation process was generally effective; however, tracking of corrective actions was fragmented. Overall, the Corrective Action Program was weak and resulted in instances of untimely and ineffective corrective actions.
t 4.2.1 Problem Evaluation l
The team reviewed the licensee's problem evaluation processes and determined that the Plant Root Cause Evaluation (PRCE) process and Human Performance Evaluation System (HPES), when used, were effective in identifying root causes and recomending corrective actions.
The individuals performing the root cause evaluations were trained in various root cause determination methods.
These methods were effectively used in the PRCEs reviewed by the team.
l Although the depart.edal root cause determinations were less detailed than i
the PRCEs, they appeared effective at addressing lower level problems.
The licensee's Quality Performance Department (QPD) performed trending on various root causes (PRCEs, HPEss, LERs, SICS, and Radiological Incident Reports), QPDs nonconformance reports (NCRs), and corrective action requests (CARS). This information was provided to management annually in the Functional Area Assessment Report (FAAR).
The department level (Operation::
and Maintenance) root causes were not trended.
However, radiological controls issues such as personnel contamination events were trended separately.
The lack of departmental root cause trending combined with the infrequent FAAR i
trend data did not give management the information it needed to assess adverse trends. Timely trending could have identified continuing problems in the l
areas of foreign material exclusion control, and auxiliary feedwater (AFW) 64 i
system reliability. The licensee's new Learning Process was designed to address this issue.
4.2.2 Problem Resolution The team determined that the licensee's corrective action resolution process was weak. The licensee's tracking system was fragmented with approximately 21 individual systems. The backlog of corrective actions was relatively large and was increasing.
Excluding work orders, there were approximately 1000 issues identified in the major tracking systems (CARS, Items for Investigation, and MYTTS). The other 17 systems had approximately 2200 items.
The average age of the items was 8 to 9 months, and some items were as old as 10 years. The licensee did not determine the resource requirements to comp,lete corrective actions, but developed scheduled completion dates for the items.
The July 1996 MYTTS Report showed that 534 items were open. This included 184 commitment items of which 42 percent were late, and 157 operational experience report items of which 28 percent were late.
The licensee's 1995 corrective action audit also questioned the commitment of management to timely problem resolution. The team reviewed a number of corrective action items and determined that the licensee continued to be untimely in correcting some significant issues. One example was the untimely actions to address concerns with the undersized atmospheric steam dump valve i
which the licensee first identified in 1986.
A second example was the Service Water System Operational Performance Inspection conducted by the licensee in l
1994. The report contained nine recommendations. None of the recommendations had been closed out and three were overdue. Additionally, numerous follow-up items were still open. One item identified a turbine hall flooding issue l
l which was scheduled to be addressed in June 1997.
However, the April 1996 IPEEE findings showed that the plant was outside of its design basis for a turbine hall flood. This design issue could have been identified and resolved in 1994. A third example was the issue of the ventilation damper in the containment spray building. This issue was previously raised by Yankee Atomic in a 1991 memorandum, but had not been acted on by Maine Yankee.
Some of the licensee's corrective actions have been ineffective and have caused repetitive problems. An example of such ineffective corrective actions was the repetitive problems with the AFW control system and the continuing problem with the main feedwater pump P-2B tripping on low lube oil pressure.
l An example of inadequate corrective action was how the licensee addressed the negative control room pressure identified during a surveillance conducted in October 1995.
The team reviewed the licensee's commitment tracking performance and found that the current commitment tracking system was good because of recent changes.
In the April 1996 "RELAP/5YA Self Assessment Report," the licensee identified fragmented commitment tracking systems as a contributing cause.
In response, the licensee adopted guidance outlined in the Nuclear Energy Institute's " Guideline for Managing NRC Commitments," dated December 19, 1995.
In addition, the licensee reviewed earlier documentation to verify the inclusion of all commitments.
At the close of the assessment, the licensee l
l had reviewed all applicable documents for the preceding 5 years.
65
~.
1 e
i In response to self-identified concerns, the licensee developed an integrated Corrective Action Program, the Learning Process, which was scheduled for 4
implementation in the fall of 1996. The development of the Learning Process 1
was a reengineering effort which involved a team approach. The objectives were to integrate the processes of problem identification, problem prioritization, root cause evaluation develop a more useful trending process,. problem tracking and resolution, and to The new system was designed to be a computer-based system.
At the close of the assessment, the licensee was developing the implementing procedures and necessary training.
4.3' Planning And Resources l
Licensee planning was effective; however, weaknesses were identified in i
planning integration and improvement plan im which resulted in limitations on resources, plementation.
Economic pressures, 2
interfered with the licensee's ability to complete projects and other efforts that would bring improvements j
to plant safety and testing activities.
Equipment problems were not resolved and improvement programs were not effectively implemented because the licensee j
perceived them to be of low safety significance.
4 l
4.3.1 Plans j
The licensee did not have an integrated overall planning document.
While many elements of an integrated plan existed, none of these elements contained information which identified required resources to achieve specified goals and objectives.
Additionally, specific performance measurements to determine the level of accomplishment were not included.
The licensee had independently identified the lack of an integrated overall plan and was in the process of incorporating the fragmented elements into a single document as part of the Business Plan Initiative and Executive Management Initiatives improvement plans.
Licensee work planning was organized and effective. On average, 80 to 90 percent of planned work was accumplished on the day scheduled. An additional strength of the planning process was the use of risk measurements to aid in timing of equipment and system outages and to increase employee awareness.
Outage planning was also organized and effective. The licensee used state-of-the-art computer planning aids and incorporated risk measurements into the overall outage plan.
The licensee effectively incorporated industry guidance for shutdown risk management into the work planning process.
The licensee had a number of improvement plans for various purposes.
Improvement plans included the Learning Process described earlier, the Maintenance Improvement Program (including a Procedure Adherence Initiative),
the Engineering Quality Improvement Program, the Safety Analyses Improvement Plan, and the Supervisory Improvement Plan (a personnel training program).
These programs were well thought out, adequately documented, and promulgated to the appropriate staff.
Some past improvement programs were successful; for example, the licensee's efforts to improve industrial safety performance.
In April 1996, all maintenance work was stopped in response to industrial safety concerns 66
-s w--
is
.w-1
identified by licensee management.
Several days were then dedicated to discussing and highlighting industrial safety prior to resumption of work.
This action, coupled with continuing emphasis on industrial safety issues resulted in reductions in industrial safety hazards and lost time injuries.
The team observed good industrial safety performance during the assessment.
The team also found that some previous improvement plans were not effective.
For example, beginning in 1990, the licensee initiated several improvement plans to correct problems in the Radiation Protection Department.
Despite the,se attempts at improvement, problems continued to repeat themselves.
Some improvement plans had not been accomplished because of lack of funding.
For example, the improvement initiatives associated with implementing a comprehensive air-operated valve (A0V) testing program had not been funded for the past 3 years and the Erosion Control Program was not fully funded for 1995. Also, some programs had received funding, but the licensee had discontinued them during times of resource stress.
For example, the Supervisory Improvement Program was discontinued during the 1995 refueling outage.
(
4.3.2 Economic Environment Like all licensees, the Maine Yankee Atomic Power Company (MYAPCo) has l
experienced competitive pressure to generate power at low cost.
- However, unlike others, Maine Yankee has not engaged in drastic. staff reductions, work process reengineering or other budget cutback efforts to maintain competitiveness because it has historically maintained a lean and efficient organization.- Staffing levels and budget expenditures have been constrained to that necessary to generate power efficiently.
l The NYAPCo owners comprise 10 utilities in the New England region.
The largest single owner, Central Maine Power (CMP), owns 38 percent of the company. Northeast Utilities, in combination with other subsidiaries, owns approximately 20 percent of the company. The balance of the owners consist of other New England utilities.
The owners have exclusive rights to the power that is generated by the plant in proportion to their equity share. They are also required to provide for the operating and capital expenses to produce this power. The owners do not directly purchase the power from MYAPCo.
Instead, they funded the approved budget and cover any unexpected funaing requirements in proportion to their l
share in equity. The owners can pass along their respective share of prudent operating costs to their rate payers.
The cost of producing power at Maine Yankee is lower than for most other base load power in the area. Maine Yankee has the capacity to produce approximately 50 percent of the power in the State of Maine at a wholesale cost of 2.5 to 3.5 cents per kilowatt-hour.
However, due to ownership shares, approximately 25 percent of the total power in the State of Maine is actually generated by Maine Yankee, and the remainder of the power is exported to out-of-state owner utilities.
The owners have established multi-year contracts to resell approximately six to seven percent of the power produced by Maine Yankee to other utilities.
67
- - -.. - -.-. - - - _ _ _. _ _ - -.--.~ _
Senior plant management maintains control over the capital and operating
-budgets by setting budget targets and monitoring expenditures. The budget targets are constrained by Federal Energy Regulatory Comnission (FERC) regulations and are required to be justified as needed and as reasonable.
One of the criteria used by the FERC process to establish the rate for wholesale power is the avoided cost of power on. the grid.
The rate structure in Maine was established by the Maine Public Utility Commission in December 1994, and constrains CMP to a multi-year Alternative l
Rate Plan (ARP) agreement which explicitly caps the cost of retail power to l
customers throughout the State.
In addition, CMP signed a series of long-term power contracts with smaller independent power producers (IPPs) and non-utility generators (NUGs) with wholesale rates that were previously set between 9 and 11 cents per kilowatt-hour.
This combination of multi-year high-cost power contracts and ARP retail rate caps effectively forces CMP to balance the conflicting objectives by mitigating the higher cost of power from the numerous NUGs and IPPs in their service area with low-cost power from i
Maine Yankee.
4.3.3 Results Of Resource Constraints Unlike most utilities, MYAPCo does not retain earnings and does not set asside reserve funds for unplanned requirements, except those required by law. All monies in excess of operational expenses are periodically returned to the owners.
The owner utilities are required to either capitalize or immediately finance emergent requirements from their operating budgets. ' The 1995 steam generator sleeving project is an example of an unplanned requirement at the plant causing severe financial impact to several owners.
In order to respond to the immediate cash requirements, MYAPCo imposed a 10-percent reduction in operating and maintenance (0&M) costs across the board and terminated all outside contract labor on site.
Except for the decommissioning fund, the nuclear waste trust funds, and pension funds which were mandated by law, the organization did not set aside reserve capital funding to provide for emergent needs.
MYAPCo used a sophisticated financial model to determine the cost factors that could encourage larae industrial customers to elect to generate their own power and erode tne mix between industrial and residential users. These factors combined to internally constrain the utility budget targets to reflect the competitive position of the regional spot market for power which were even lower than the cost factors listed above.
In sumary, Maine Yankee produced some of the least expensive power in the New England region and the regional utilities in Maine had limited budget funding to offset higher costs and competitive presrures.
Management has effectively operated the plant within the budget constraints established by the owners.
However, the limitations on resources have delayed and deferred plant upgrades, improvements, and lower priority corrective actions which did not meet the threshold for safety, regulatory compliance, or reliable prode tion.
Projects which would likely have prevented problems were unfunded because of budget limits.
68
~
One illustrative example was the imposed delay of the completion of the Safety Analyses Inputs Document (SAID) which could have re-identified the problem with the undersized ASD sooner. The SAID project was the corrective action to prevent loss of control over the safety analyses inputs in response to concerns first documented in 1994 by the Nuclear Engineering Department and QPD. Development of the SAID was substantially delayed in 1995 when the steam generator sleeving project required the redirection of engineering resources.
A request from the Corporate Engineering Department (CED) in the 1995 budget request to add an additional engineer to continue the SAID development was not l
funded by the senior plant management.
Another example of a case in which limited resources interfered with performance was the decision not to implement a comprehensive A0V testing In 1995, the Maintenance Department proposed to implement the program.
testing program and to procure a diagnostic testing system for A0Vs. The consequence of not funding the effort was stated in the unfunded 0&M budget list as " continue to work on A0Vs on an 'as fail' basis (reactive) rather than predictive maintenance." Despite these words of caution and a strong justification to proceed, management did not authorize the $218,000 needed to correct this problem because the testing system was not explicitly required by NRC regulations.
If implemented, this testing system could have detected and prevented some of the A0V problems identified elsewhere in this report.
Another example of deferring needed projects because of a lack of funding is the halting of the mechanical / electrical /I&C specialty training program during the 1995 steam generator sleeving outage. This training prepared maintenance workers as journeymen and provided continuing proficiency training. All specialty training was halted in an effort to increase the availability of maintenance workers to support outage work.
Additionally, funds were not approved in the 1995 0&M budget to respond to industry reaccreditation issues.
Another example of the impact of limited resources on important projects was that the design-basis sumary program was halted during the 1995 steam generator sleeving outage because of constraints on staff resources.
If this program had continued, there would have been additional opportunities during the development of design-basis documents to identify some of the older design problems that were later identified by the team.
In addition, approximately 100 high priority work orders were deferred from the 1995 outage schedule at the end of the outage because of schedule constraints. With maintenance work order and corrective action tracking system backlogs increasing, senior plant management has recently decided to add more staff.
69
l
5.0 CONCLUSION
S 7
l The conclusions drawn from this assessment and the underlying root causes for the significant safety findings follow.
5.1 Licensing And Design-Basis Maine Yankee was in general conformance with its licensing-basis although significant items of non-conformance were identified.
The licensing-basis was and had not been well maintained. understood by the licensee but lacked specif The use of analytic codes for safety analyses was very good.
Cycle specific core performance analyses were excellent.
More complicated, less frequently be acceptable based on compensating margin. performed safety analy Conditions of use specified in the safety evaluation reports were found to be satisfied, but not documented.
The quality and availability of design-basis information was good overall.
basis and compensatory measures adequately supported plan power level of 2440 MWt.
However, the team could not conclude, and the licensee did not demonstrate, that the design-basis supported operation at and for the heat removal capability of the PCCW and SCCW sy
~
5.2 Operational Safety 5.2.1 Operations Overall performance in the area of operations was very good.
noted in the areas of operator performance during routine and transientStrengths were operating conditions; shift turnovers and pre-evolution briefs; use of risk day-to-day operations.information to ensure safe opet ulons; anu the involvement of m Weaknesses were noted in the area of "workarounds" and compensatory measures which unnecessarily burdened the operators or complicated their response to transient conditions.
practices and post-trip reviews lacked rigor.
Additionally, log-keeping 5.2.2 Maintenance And Testing Performance in the area of maintenance was good overall however, testing was weak.
The results of the review of equipment reliability for the auxiliary feedwater, emergency feedwater, high pressure safety injection, and emergency diesel generator systems showed mixed equipment performance.
Strengths were noted in the areas of knowledge and use of risk methodologies for planning, prioritizing, and scheduling work; the control and limited use of temporary sealants; and a motivated and dedicated work force.
Although material condition was considered good overall, a number of significant material condition deficiencies were notea as was a decline in material condition following the 1995 steam generator tubing outage.
70 I
-. - - = - - -
_ - -. - = -
Inadequacies in the scope of testing programs were identified, as were weaknesses in the rigor with which testing was performed and the evaluation of testing results to damonstrate functionality of safety equipment. A lack of a questioning attitude ard stressed resources resulted in the use of poor i
surveillance procedurr.s and ineffective evaluation of surveillance test data.
5.2.3 Engineering The quality of engineering work was mixed but considered good overall.
Strengths were noted in the capability and experience of the engineering staff, day-to-day engineering support of maintenance and operations, in the quality of most calculations, and in the routine use and application of
. aalytic codes. However, engineering was stressed by a shortage of resources, and there was a tendency to accept existing conditions. Specific weaknesses were noted with inconsistent identification and resolution of problems, inadequate testing, and work on some calculations and analytic codes.
5.3 Root Causes Of Significant Findings Overall performance at Maine Yankee was considered adequate for operation of the facility. However, a number of deficiencies were identified by the team in each of the areas assessed.
These deficiencies, which included weak identification and resolution of problems; inadequate scope, and weak rigor and evaluation of testing; and declining material condition stemmed from two closely related root causes.
5.3.1 Root Cause 1:
Economic Pressure Economic pressure to be a low-cost energy producer has limited available resources to address corrective actions and some plant improvement upgrades.
Management has effectively prioritized available resources, but financial pressures have caused the postponement of some needed program improvements and actions.
The economic pressures discussed in Section 4.3 resulted in limitations on resources and interfered with the licensee's ability to complete projects and other efforts that would improve plant safety and testing activities.
Examples include the failure to adequately test safety related components (Section 3.2.4); the long-standing deficient design conditions, such as the undersized atmospheric steam dump valve (Sections 3.1.3.1 and 3.3.1) and environmental qualification issues (Section 2.3.9); and the lack of effective improvement programs, such as the design basis reconstitution program (Sections 3.3.3 and 4.3.3).
These and other examples discussed in the report illustrate the licensee's willingness to accept existing conditions, many of which became operator workarounds (Section 3.1.1.1).
5.3.2 Root Cause 2:
Problem Identification There is a lack of a questioning culture which has resulted in the failure to identify or promptly correct si;nificant problems in areas perceived by management to be of low safety significance. Management appears complacent 71 L
with the current level of safety performance and there does not appear to be a clear incentive for improvement.
Examples of issues which illustrate complacency and the failure to identify or promptly correct significant problems, include previously undiscovered deficient conditions of the service water and auxiliary feedwater water 4
systems (Section 3.2.2); inadequacies in ventilation systems (Section 2.3.7);
post-trip reviews which lacked rigor and completeness (Section 3.1.2.7);
emergency operating procedures that may not adequately address an inadequate core cooling event and a steam generator tube rupture under certain conditions (Section 3.1.3.1); lack of a questioning attitude during test performance and evaluation that was not conducive to discovering equipment problems, but rather to accepting equipment performance (Sections licensee self-assessments that occasionally failed to identify weaknesses, or2.2.1, 3 incorrectly characterized the significance of findings (Section 4.1).
leading to repetitive problems (Section 4.2). addition, some corrective In 72
6.0 REGULATORY ISSUES During the course of this assessment, a number of deficiencies were identified for which the NRC shares some responsibility.
Certain of these deficiencies are identified here and will be developed and addressed as part of a separate NRC followup effort on the lessons learned from the Maine Yankee Independent Safety Assessment.
6.1 Analytic Code Validation The ISA team noted that the validation of RETRAN to known industry benchmarks for integral and separate effects test data was deficient. This validation is important to assure that the plant-specific application of the code effectively models known physical effects; however, the requirement for this validation was vague.
The requirement can be traced to Generic Letter 83-11,
" Licensee Qualification for Performing Safety Analyses in Support of Licensing Action," issued on February 8, 1993, which states in part:
... some licensees planning to perform their own safety analyses may not intend to demonstrate their ability to use the code by performing their own code verification.
Rather, they plan to rely on the code verification work previously perfomed by the code developer or others.
NRR does not consider this acceptable and each licensee or vendor who intends to use a safety analysis computer code to support licensing actions should demonstrate their proficiency in using the code by submitting code verification performed by them, not others.
The NRC has acted inconsistently relative to its expectations in this area.
In some cases, computer codes have been endorsed for use with little or no validation accomplished. The NRC should review its expectations relative to validation and assure they are made clear to the industry.
6.2 Compliance With Safety Evaluation Reports During the Maine Yankee IdA, compliance with conditions imposed on the use of l
analytic codes was verified for 67 SER conditions affecting 13 codes.
l Although compliance was confirmed, an audit trail to assure compliance was not always available, necessitating, in some cases, additional analyses to verify compliance.
The regulatory status of an SER imposed commitment is unclrar and should be reviewed.
If conditions within an SER are considered appn riate, clear NRC expectations relative to compliance, auditability, and reportability should be established.
6.3 Licensing Reviews For Power Uprates The Maine Yankee ISA team identified a number of mechanical components for which confirmation of operability at the upgraded power level of 2700 MWt 73
-_. _~
could not be confirmed.
The NRC should review the scope and rigor of the licensing reviews conducted for power uprates.
6.4 Safety Guide 1 NRC Safety Guide 1, " Net Positive Suction Head for Emergency Core Cooling and Containment Heat Removal System Pumps" issued on November 2, 1970, states, NPSH for emergency core cooling and containment heat removal system pumps caused by increases in temperature of the pumped fluid under loss of coolant accident conditions can be accommodated without reliance on the calcul'ated increase in containment pressure."
Emergency core cooling and containment heat removal systems should be designed so that adequate net positive suction head is provided to system pumps assuming maximum expected temperatures of pumped fluids and no increase in containment pressure from that present prior to postulated loss of coolant accidents.
The NRC should review and clarify its intent relative to relying on l
containment pressure for assuring appropriate NPSH for emergency core ccoling and containment heat removal pumps. Specifically, the issue of whether or not the containment can be assumed to be pressurized at the saturation pressure for the sump fluid temperature should be addressed.
6.5 Inspection Program The adequacy of the scope and implementation of the NRC inspection program should be reviewed in the following areas:
e the licensee-implemented testing programs for safety systems relative to its scope, rigor, and analyses of results e
the periodic review of licensee developed Technical Specification interpretations to assure consistency with the intent of the approved Technical Specifications assessment of the adequacy of the plant design-basis including a review e
of the disposition of significant findings from previous licensee efforts such as design-basis documentation or de.cign-basis reconstitution programs.
74
7.0 EXIT MEETINGS Two interim exit meetings were held during the course of this assessment.
The first was held on July 26, 1996, at the end of the first two week onsite assessment period, and the second was held on August 23, 1996, at the end of the second and final onsite assessment period.
The purpose of the interim exit meetings was to provide an opportunity for the ISA team leader and functional area leaders to provide an integrated discussion of the assessment findings to date.
A final meeting, open for public observation, will be held with Maine Yankee representatives at the Wiscasset Middle School, Wiscasset Maine on October 10, 1996. The conclusions of the report will be discussed at this meeting.
l l
75 i
AB8REVIATIONS AE0D Office for Analysis and Evaluation of Operational Data (NRC)
AFW auxiliary feedwater ALARA as low as is reasonably achievable A0V air-operated valve ARP alternative rate plan ASD atmospheric steam dump BIRP Boron Injection RETRAN Post-processor CAL confirmatory action letter CAR corrective action request CAT cultural assessment team CCW component cooling water CDF core damage frequency CEA control element assembly CED Corporate Engineering Department CMP Central Maine Power CR control room CR0 Control Room Operator CS containment spray CWPH circulating water pump house DBA design-basis accident DBI design-basis information DBS design-bases screen DBSD design-basis summary document DBR design basis recovery
~
DNB departure from nucleate boiling DNBR departure from nucleate boiling ratio DP differential pressure E/C erosion / corrosion ECCS emergency core cooling system EDG omergency dies:1 96nerator EFW emergency feedwater E0P emergency operating procedure EPRI Electric Power Research Institute EQ environmental qualification i
A-I Appendix A l
l
FAAR
~ functional area assessment report i
FERC Federal Energy Regulatory Commission FME foreign material exclusion FP fire protection t
FPIP Fire Protection Improvement Plan FSAR Final Safety Analysis Report GDC General Design Criteria l
GL.
generic letter
~.
HELB high-energy line break
-HFP hot full power HI Hydraulic Institute HPES
. human performance evaluation system i
HPSI high-pressure safety injection HVAC heating, ventilation, and air conditioning i
HX heat exchanger IASD Inputs and Assumptions Source Document I&C instrumentation and controls l
ICC inadequate core cooling ILRT integrated leak rate test IN information notice IPE Individual Plant Examination IPEEE Individual Plant Examination of Externally Initiated Events l
IPP independent power producer ISA Independent Safety Assessment IST inservice testing l
. LBLOCA large-break loss-of-coolant accident '
LER licensee event report LLRT-local leak rate test LOCA less-of-coolant accident l
LOOP-loss of offsite power i
LPSI low-pressure safety injection MCC motor control center MDFW motor-driven main feedwater
'l MIPPS maintenance information and parts procurement system
- MOV motor-operated valve MSLR main steam line rupture MSR moisture separator reheater l
mwd /MTU megawatt day per metric ton uranium l
MYAPCo Maine Yankee Atomic Power Company l
MYAPS Maine Yankee Atomic Power Station l
MYTTS Maine Yankee Task-Tracking System 3
l-I A-2 Appendix A
~
G a
NCR nonconformance report NPSH net positive suction head
- NPSH, net positive suction head available
- NPSH, net positive suction head required NRC Nuclear Regulatory Commission NRR Office of Nuclear Reactor Regulation (NRC)
NSARC Nuclear Safety Audit and Review Committee NUG non-utility generator
[
t UIG Office of the Inspector General (NRC)
OLSA online safety assessment O&M operating and maintenance PCCW primary component cooling water PED Plant Engineering Department PORC Plant Operation Review Comittee PRA probabilistic risk assessment l
PRCE plant root cause evaluation l
PSS Plant Shift Superintendent l
PTR post-trip review PWR pressurized-water rea'ctor QA quality assurance QC quality control QPD Quality Perfcrmance Department RAS recirculation actuation signal i
RCP reactor coolant pump RCS reactor coolant system RG regulatory guide RHR residual heat removal RPS reactor protection system RWST refueling water storage tank SAID Safety Analysis Information Document i
SALP systematic assessment of licensee performance SAS safety-actuation signal SCCW secondary component cooling water i
SCU Statistical Combination of Uncertainties SER safety evaluation report l
SFP spent fuel pool i
SG steam generator SGTR steam generator tube' rupture SIAS safety injection actuation signal SIC safety issues concerns SOS Shift Operating Supervisor l
SSA shutdown safety assessment 3
l SW service water SW0PI service water operational performance inspection A-3 Appendix A
1 i
T/H thermal-hydraulic TS Technical Specification UOR unusual occurrence report WO work order YAEC Yankee Atomic Electric Company t
A-4 Appendix A i
i i
i, MAINEYANKEE ATOMIC POWER COMPANY Chairman Board of Directors D.T. Flanagan i
President /
Chief Executive Officer C.D.FrizAe i
l l
l Vice President Vice Presider;t Vice President Vice President a Gtneral Counsel Licensing & Engin mring Finance & Administration Operations M.A. Lynch G.D. Whittle -
P.S. Lydon G.M. Leitch i
I Manager Project Manager 1
Public & Govt Affaira (YNSD)
Plant Manager Senior Manager, Outage ManagerTraining L.R. Diehl P.L. Anderson C.R. Shaw R.W. Blackmore R.M. Hayward Manager QPD/
Manager, Corporate Manager Strategic Planning Engineering Learning Process Manager, Outage J.C. Frothingham S.E. Nichols A.R. Shean R.L. Bickford Manager, L&E Support Manager
! Maintenance J.R. Hebert M.J. Veilleux i
Manager, Plant Manager i
Engineerin9 Operations i
E.D. Soule j
S.P. Smith 1
I ManagerTechnical Support J.M. Connell Appendix B
-_-----_--------------_--j
APPENDIX C EQUIPMENT PERFORMANCE FOR AUXILIARY FEEDWATER, EMERGENCY FEEDWATER, HIGH PRESSURE SAFETY INJECTION, AND EMERGENCY DIESEL GENERATOR SYSTEMS FROM JANUARY 1, 1992 THROUGH JUNE 30, 1996 1
l i
i
i
~;
t
' Figure 1 Maine Yankee Independent Safety Assessment Team-Emergency Feedwater Pump Train P-25A - Conditional Probability Operating Conditions 5, 6, 7 from January 1, 1992 to June 30, 1996 These curves represent the probability that the emergency feedwater (EFW) purp train P-25A will respond to a random demand, during power operations, for injection into the steam generators and will start and will
[
inject into the steam generators for 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.
The conditional probability.Is calculated by determining the product of (1) the standby availability (ratio of time not in maintenance to the total time in operating conditions 5, 6 and 7), (2) the probability of start (cumulative successful starts / cumulative total starts)*
and (3) the probability of run (rin for 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> given a successi::1 start).
l t
The conditional probability curve shows a very high value (over 99 percent) until January 1996.
On January 8, 1996, the pump was placed in maintenance to repair a bearing oil leak and stayed in maintenance for 143.5 I
hours.
Therefore the standby availability dropped in January 1996 with a resultant drop in the conditional I
probability.
There have been no failures to start or failures to run of the pump train over the time l
period.
The value of the conditional probab.111ty as of June 30, 1996, was 97.9 percent.
Thus it is expected that the EFW pump train P-250 would complete its mission approximately 98 out of 100 random demands.
For these curves, high values are better than low values.
i 130 Total Starts Successful' Starts 130 Failures to Start 0
487 f
Total Run Hours 0
Run Failures l
Planned Maintenance Hours 44.5
{
143.5 Unplanned Maintenance Hours l
7 Appendix C
{
i t
L i
i
[
--__n.
j g1 w.-
I
. glli jg!
- 8f' +. ~ ~
l
~*
4gIj ju n!- +r 8 3 i
j jf3 J,{j t
,+=s
- ?
'(
l' i
.c
.w I
e
. wm 7
nw of =
x1 1.
.P M-art
! Eil n
(
-~:
r i n.. <
t2 g p
- gg
- a-s I3 I,{s t
F-E l
61
[mw t
a=
g j
j
~
f u-asi um
)l i
me
-Ej tsw '
l
~
l
$6 Iuw
. a.
s
- l# 5 i
7
.e -r aw iP'h 1, r.- --
.I i
7 -l l1I:
'i
- 2!
g$
k:
IE gi 6
3" i
6e:
l g
g.
l i
5-
- l.. 6 gf)
Ls;s.l gl
!)l c5
- i!
_gi1 A,
ji, u*
?
l
{
!]I !
ma r u~
- l.. -
a, C
C C
L G
E t
C 8
i s
's a
s e s
s a
=
3 WW a
i
.y J
g!
p f
h III.
[ww jjj l'e:y-v a
1 jlI
- "~
!j[1
- a-ines t
.,"t
. w" c.
l ww e
pxw 20 3:
w=.
r g,.
!E j gg'
[ ** i
!.l l l
E1<
um m
g 1
mas l I<
iIy{5
. m.,
t g[j' l1,; 1 u"
.;o
.m Pt i g, '
t o
=
a=
=
g
.u j
i
- e. -
m+
l gr i u,=
=*
3 3
7 iI.
- m.s l
p;,.
8 -
s 3 h.
^ }s n*
J
'ur 6
t
- s. s t um
[',
um 0
1 g J_)
11
- i.,.
u=,
a a
l E
E E
E g
g g
g g
g j
f s
s a
e g
s a
=
=
r
1 Figure 2 Maine Yankee Independent Safety Assessment Team Emergency Feedwater Pump Train P-25C - Conditional. Probability Operating Conditions 5, 6, 7 from J,anuary 1, 1992 to June 30, 1996 These curves represent the probability that the emergency feedwater (EFW) pump train p-25C will respond to a random demand, during power operations, for injection into the steam generators and will start and will inject into the steam generators for 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />. The conditional probability is calculated by determining the product of (1) the standby availability (ratio of time not in maintenance to the total time in operating conditions 5, 6 and 7), (2) the probability of start (cumulative successful starts / cumulative total starts)*
i and-(3) the probability of run (run for 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> given a successful start).
The conditional probability curve shows a very high value (over 99 percent) until December 1993. On December 6, 1993, the pump failed to start due to problems with a breaker for the pump. Therefore the probability of start dropped in December 1993 with a resultant drop in the conditional probability
- There have been no failures to run of the pump train over the time period.
The value of the conditional probability as of June 30, 1996, was 99.2 percent Thus it i theEFWpumptrainP-250wouldcompleteitsmissionapproximately99outof10brandomdeman For these curves, high values are better than low values.
l Total Starts 192 i
Successful Starts 191 Failures to Start 1
i t
Total Run flours 992 i
0 Run Failures Planned Maintens. ace Hours 29.5
)
I.5 Unplanned Maintenance Hours Appendix C l
l e
F 5
+
~
~~
,uw tn
?
us I3.i f "-
5 i
fgl l
r==
.t.-
jj li
'i t
I i
l l
FI r **
["
{'"" \\
i t
E ta F'
- E.
'"-a 4g t==
Iis xi t-E
' ~ ~
=]
==
51s t
I]e f "*
I 4 g a t-
- ls{
if;; :
t""
f==
j' 3
t-
.I -=
i
.E
!~
t-lqlij.
fa-t
?
s, l
!"- i 4
i l}j
.:. ; s ;
t a*
- ' 'I 8 ijs i
11 l!J:g!
4.;jf;:=a*
i jaJ;
- si iii
~
i
=,
i !,12 ' i-- ll l
hi!
1 kj
[
l
~
.t 3
e a
e e
g a
a a
e a
i i
5 8
8 s
a e
j s
a a
J
. sow 9
g 1"*
f **
,jr.i t**
Ii
!It s ls 4;
}
hh!
q
$h
}
IP r-1p i-4 itW W
El[s I"*
et f 8**si t *Wei E 3
[ ""
g1 j [.
t "*
,a f
e E
a
- 1..-
r*
6 l
- W.
E PM t
f L
39 fM 4
I
- 'S ysj 8
!s..
-:l !!i 11 :
? jp!
F-~
- -~
11; il E==
!)Il t
ti s
il l'pi !--
r g
a a
s
=
g a
a s
a a
i
Figure 3 Maine Yankee Independent Safety Assessment Team Auxiliary Feedwater Pump Train P-25B - Conditional Probability Operating Conditions 5, 6, 7 from January 1, 1992 to June 30, 1996 These curves represent the probability that!the auxiliary feedwater (AFW) pump train P-258 will respond to a random demand, during power operation, for injection into the steam generators and will start and will inject into the steam generators for 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.
The conditional probability is calculated by determining the product of (1) the standby availability (ratio of time not in maintenance to the total time in operating conditions 5, 6 and 7), (2) the probability of start (cumulative successful starts / cumulative total starts)'
and (3) the probability of run (run for 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> given a successful start).
The conditional probability curve shows a very low value over the time period'.
There have been two failures to start and three failures to run over time period.
The standby availability has been steadily droPPi"9 over the time period because of the time spent to repair failures.
The value of the conditional probability as of June 30, 1996, was 76.3 percent.
Thus it is expected that the AFW pump train P-258 would complete its mission approximately 76 out of 100 random demands.
For these curves, high values are better than low values.
59 Total Starts 57 Successful Starts 2
Failures to Start 26.5 Total Run Hours 3
Run Failures 132.5 Planned Maintenance Hours 441.0 Unplanned Maintenance Hours Appendix C s
-a i
-*1
-.m 6
u 4,
e
--.-oa..
e~--g,s_
W.
,,sm__
W massumme. -memme unssup B
.saw i
1 etw
'j 5 i
f6 1
[
ag g
ise w ss w il' d i ji
-+ :
1 j[I;;
III
(
1 r-l F.e.
i t,,,
i
[m y
n
!r I
!s ili E
i
- ==
i u<
.n di
~~
j
.t -
- 43..
1) se1 e
Egg {
R e<
3*
Sjkl ffE
' #W i
E e
a
- =
(
w I-
$6 K
-me t
5 5.
[ 8*S l"3 3 h ""*
8 ihm!!lE[
Illi!""
t li ia*
j 'ti z
z ih~
!5
}:-j ;ji! ;-
!8!!
- l lj-12 [-
is fi f **
s l
t t
t 5
5 5
5 5
i g
a a
s s
e g
E 8
8 8
}
j
==,
y
-j se w
. f=j
(
. se**r i
~
' fil
+
~
- 3..{
l t
i I
j gs t
{
i." +
5~
alj UI!
-ww
/
(
i gI, 3
3
)
ww g g-Rs.
m
.3!
] 1 2e j ji 1 l
- =
!I s
e3:
i 1,1i l!
g w
gi 4
- 1. l.e i
=s.Ut.L8 N
i 5.
f =~~
s
=~
3 j
l p
e I
. gydesq f W=
\\
. pagg i
1 r
3 ra-t ***
i I
in t
h r-2*5 8I I
}
- W i
n.
e i g
- h. 1 '1 *W e
l klI }3 I"*
i 5) f
['
f f
5 8
l k_
> l l
f l
I I
I I
I I
l s
i I
I I
I Figure 4 Maine Yankee Independent Safety Assessment Team High Pressure Safety Injection Pump Train P-14A - Conditional Probability Operating Conditions 5, 6, 7 from January 1, 1992 to June 30, 1996 These curves represent the probability-that the high pressure safety injection (HPSI) pump train P-14A will respond.to a random demand, during power operation, for injection into the reactor vessel and will start and will inject into the reactor vessel for 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.
The conditional probability is calculated by determining the product of (1) the standby availability (ratio of time not in maintenance to the total time in operating conditions 5, 6 and 7), (2) the probability of start (cumulative successful starts / cumulative total starts)*
and (3) the probability of run (run for 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> given a successful start).
l The conditional probability curve shows a very high value (over 99 percent).
Thus it is expected that the HPSI pump train P-14A would complete its mission approximately 100 out of 100 random demands.
During the course of the independent safety assessment team evaluation, it was discovered that there was a missing wire (had been inadvertently removed) in the safety injection actuation system (SIAS) logic which l
would have prevented P-14A from starting if P-14A were the " alternate pump" during power operation This failure was not included in the conditional probability of pump train P-14A, but rather was ' included in the failure of the SIAS logic in the Maine Yankee Individual Plant Examination.
For the curves, high values are better than low values.
Total Starts 79 Successful Starts 79 Failures to Start 0
i Total Run 1lours 9.996 p
Run Failures 0
While aligned t
Planned Maintenance Hours 4.4 0.5 Unplanned Maintenance Hours Appendix C f
f
9 i
j
_,, l se c l
l l
f I-*
ii 1l.!-
,L*l i
73 t =w !
1 i!
"2 !
l ffI
+;
i j'
fj l
3 I --+i r aw
'f5
,I~~ l l
jf$
f"* !
l I
i
>j f
\\
l 3
I"" \\
i
.Enw I 12 lI f=.w f[
f
!-~ i f"*
=
5 J
- p I
t-zl1 lIb Il I!d 1;I t,
I i~!
E s
Yy '
In
- =-s i
==
E j{M j) g
(_="
=!r t
1 ji I'""
s i
i 3._ i y
=
i l
-I 1
t
(
I"* !
j ?!!
5
! l!!
{5l
.-a 1
y
- =~
T- -
2
! ig a
- t -
=
j hI b$
h 'H '
- um !
e{
'ji],_ '
lq i g:~
i 1a-i
., = =
h U
f so dr 5
- so-dr l i!
I"*
( **
i l 11 1* 4
! si; i
ilp!
- i t =~
1
{
ijji i
I t-r f
t.* i N,1 r
l2 ww hww jI d
f==
ij!
i]t ll@"
i,]l 5;
l= $g
!5
]:
- l j;
g;i li tb 11 t =~ l 1
j-* i
-i i
t!
o,
~~
- ** i t
}
[a* !
I
' "* i v a-i r
I r
I if:
~
f
.T 7
- i. i ["*
$i
! ! "* i
- ; uw '
k
$l ki!!$!!""
!s!
- s p! me H
t8 is pi emw i
i
}I I!Ie=
l r
I
- u-i r
ww
i Figure 5 Maine Yankee Independent Safety Assessment Team High Pressure Safety Injection Pump Train P-148 - Conditional Probability Operating Conditions 5, 6, 7 from January 1, 1992 to June 30,1996 These curves represent the probability that the high pressure safety injection (HPSI) pump train P-14B will respond to a random demand, during power operation, for injection into the reactor vessel and will start and will inject into the reactor vessel.for 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.
The conditional probability is calculated by determining the product of (1) the-standby availability (ratio of time not in maintenance to the total time in operating conditions 5, 6 and 7), (2) the probability of start (cumulative successful starts / cumulative total starts)*
and (3) the probability of run (rin for 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> given-a successful start).
I.
i h
ditional probability curve shows a very high value (over 99 percent) until March 1994.
On March 23, 994
-148 failed to start because of control problems.
There have been no failures to run of the pump train over the time period.
The value of the conditional probability as of June 30, 1996, was 98.5 percent.
Thus it is expected tha't f
the HPSI pump train P-14B would complete its mission approximately 98 out of 100 random demands.
For these curves, high values are better than low values.
i 68 Total Starts l
Successful Starts 68 Failures to Start I
Total Run Hours.
6,592 0
Run Failures i
While aligned Planned Maintenance Hours 9.5 0.7 Unplanned Maintenance Hours i
Appendix C '
i l
a.
.s
- n_k 6
-,a.-"
6*
,L,,a a
}W--
~
J.-c s
an
~
h l
.g
[ **,
Ig.i I
{.i im' i
==
..N l
N, ff
- t fi.l
,t -
1 f,,!
==
f,fI
}
l
[##
i I' w*=
e
. ww gc e
,s
~~
l
[ *~
g"(
yA{E L ww
. ww 5 I"
==;
- a. D i g
Eh
"*8
' #*S E ;
4 s;;
t ;.
P J-~
==
r i
y 3
..w l
}
EB mI E w.s !
l!i Im.s i w
2 5
S i :a-l 1ll iiiiian i
- Is
s f.
5-e[g.-["* l g
i
!pS
,.$s!
5.'
- I; la'
]I[ i"* '
fir I
lj g
u!
!tua:
'g:
i ll!!m. i l
a y
aw '
i
- aw,
i
{
["
I
[ ""
1 i
r i
.i r-o l
[
n I8 1.s. q I!!
+1 5"
il!
1,p i
ip 3
1
.s I-ww
.wn
,p 2/
. IIM.,
H 5
/g5 i
. ww 3
3, t w=
E f
{ B"
{-
o e
l E. t..,
...s f..s EO' g
r a Pl'
'M g
{w
! Uk
=*j I
r a* '
i t-- i i
i I
h" !
{
k
["
- =~
i ri v:
i t., I"*5 I
If 8'
- =~li
' "*5 II
!!))=~
j y
Y ll j
}
1 1
!(
e-r u-I I !-
l 1
1 L
i l
l l
l
l Figure 6 Maine Yankee Independent Safety Assessment Team High Pressure Safety Injection Pump Train P-145 - Conditional Probability Operating Conditions 5, 6, 7 from January 1, 1992 to June 3'0, 1996 These curves represent the probability that the high pressure safety injection (HPSI) pump train P-14S will i
respond to a random demand, during power operation, for injection into the reactor vessel and will start and I
will inject into the reactor vessel for-24 hours.
The conditional probability is calculated by determining the product of (1) the standby availability (ratio of time not in maintenance to the total time in operating conditions 5, 6 and 7), (2) the probability of start (cumulative successful starts / cumulative total starts),
and-(3) the probability of run (run for 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> given a successful start).
On August 5, 1992, there was a failure to start of P-14S.
There were no other failures 1 over the time period. The Conditional Probability curve shows that the value was relativ 1 1
beginning of the period (93.7 percent) and has risen to 98.3 percent over the time period f th conditional probabilit) as of June 30, 1996, was 98.3 percent.
Thus it is expected that teHS pump train P-14S would complete its mission approximately 98 out of 100 random demands.
For these curves, high values are better than low values.
Total Starts 60 Sut.cassful Starts 59 Failures to Start I
' Total Run Hours 11,159 0
Run Failures While aligned Planned Maintenance Hours 27.3 0.0 Unplanned Maintenance Hours Appendix C 4
t
_.. ~ _ - -,,.
,~
- - - - +
O t
d 4
1.!
d l -
g r.
i
-w l
I t
I f4 l
- D I
gil t
1 4i8. 4, llIi Ia I
jf5l I,
l I
1 1
- l i
i 1
I P
1 T "" l l
I i
1'
[""
y 1
j y
r ee*si
!,*ese j !I faa f !g)
E*=
fi Ps I'*~
l Il=s I'~
IIt i-i
>(
- l, 3
k 5
4
,!.spW a?
f,
- 13W s.
f =~ l f
I"~
i e-e
-i j
.$l!
me
-aw r...Im s
}if
- r.. -l a*s '
w
~-
I
'I I,
7, '
-MW
[
l
(
,.f. :
m... men.
.=
s.-
ff:
.:I.
]g.
!; r<. rsesi e.
- e i
~
&mui r
f&mn h
h h
h j
.- es*
r wwl l
f ee*
-d.
fwe
~
i
.g i e
1 Jii 8!
!"* i II 8
-Wi j
jij raw l k!:M i
~
i r a= ;
ji l-i i
1 1[i, ja-1, t
o 0
p
(
t g.
s.
p ggg
.ve 5
Iwan 3*
o, Iwan lE f **
(
I -*
s 1
a j-it gl1
!=*s i
==
a j
ti t=~
t t
F =~ !
c 3
!==
l N
~,
r.
I
\\
i
{ { - k m*s '
j l{I i
\\
r goes i ti r
$1i-z : =~ !
E m;
q t =~,
i
!r!
[
E mw.
I 9
lE!
l f *""
l Il s.
i me,i 5*
1 j
l I
E I
I E
I E
I 6
i E
l i
Figure 7 Maine Yankey Independent Safety Assessment Team I
Emergency Diesel Generator Train EDG-1A - Conditional Probability i
Operating Conditions 5, 6, 7 from January 1, 1992 to June 30, 1996 These curves represent the probability that the emergency diesel generator (EDG)' train EDG-1A'will respond to a random demand,~during power operation, for ac electric power to its 4.16 kV bus and will start and power the bus for 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.
The conditional probability is calculated by determining the product of (1) the l
standby availability (ratio of time not in maintenance to the total time in operating conditions 5, 6 and 7), (2) the probability of start-(cumulative successful starts / cumulative total starts), and (3) the probability of run (run for 24 hcurs given a successful start).
On April 23, 1996, there was a failure to run of EDG-1 A.
There were no other failures in this EDG train over the time period. The. conditional probability curve shows that the value was relatively constant over the time period (90 to 92 percent).
The value of the conditional probability as of June 30, 1996, was 91.7 percent Thus it i the EDG train EDG-1A would complete its mission approximately 92 out of 100 random demands For these curves, high values are better than low values.
67 Total Starts Successful Starts 67 Failures to Start 0
Total Run Hours 113 I
Run Failures Planned Maintenance Hours 367.5 86.2 Unplanned Maintenance Hours i
Appendix C l
2 9
s i
I e
r 7
4 p
aw
,1 gi
)
tw=
l
{
j..,
!j" i!I:j % aw 3
aw I
r t
fg aw li aI 4.'
jgj
..w g-p5;)
i u
f
,t. =es
. es1 p
fww r' ww :
f l
[m l
=.
l El#
E E
["
l l
3g
- ==
g
> = =
3 1
{8 t
4 ln
- =**
g a**
.v l=w gge{
g.' =w
.,)
4 s
r
["
h f
[**
3 ll{
t aw I
inw f==. l l
i f
F lm.
l T
. ia !
i i!j!
_. c. !=-5 ij :=~ :
I B i! l:=~
li li!'!g)ji--
!jj J_ e=~ '.
3 f!F
! ::a~ i I
ljt 1
1[4-~!
l sam
. aw l l
1, l
t l
E I
I I
i l
I i
1 E
l l
l
)
hwk tww
! *w
{
lJ; fI
[ww i
4 j
g gj r.-
I 8
}
lh
{"
I i
h,I rs
>s k.c s
>j h.I g-
.s I
. w.
Ea!.y.-.
.w
,r-I f
I f"'
is
~
1::
r mI aIB
.aw r =* i
- W t
t I
a!
(
i i i i jA i
11
- -i
-i E.
[pl 1
I m
j S!$
i s m*s i I
g 3
g I
jl
- 1. ; f #*S 7.-
- g
az i
?),
i g
,g.
tgs L aw :
I
_i y
a.
I gs emw i"I ' 6l h
6h f*
- 1 L
j ft ti (-
l 1) 1 2
["* !
I 1
1 D
D) i i
t--
l t
l f
f I
I E
l l
f E
I I
E
Figure 8 Maine Yankee Independent Safety Assessment Team Emergency Diesel Generator Train EDG-1B - Conditional Probability Operating Conditions 5, 6, 7 from January 1, 1992 to June 30, 1996 These curves represent the probability that the emergency diesel generator (EDG) train EDG-1B will respond to a random demand, during power operation, for ac electric power to its 4.16 kV bus and will start and power the bus for 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />. The conditional probability.is calculated by determining the product of (1) the standby availability (ratio of time not in maintenance to the total time in operating conditions 5 6 and 7), (2) the probability of start (cumulative successful starts / cumulative total starts), and (3) the probability of run (run for 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> given a successful start).
17, 1993,"there b s both a failure to start of EDG-1B and a failure th run4of EDG-1B.
There On December were no other failures in this EDG train over the time period.
The conditional probability curve shows that the value varied over the time period from 88 to 92 percent.
The overall trend has been negative except for i
the last few months.
The value of the conditional probability as of June 30, 1996, was 90.1 percent. Thus it is expected that the EDG train EDG-1B would complete its mission approximately 90 out of 100 random demands.
For these curves, high values are better than low values.
80 Total Starts 79 Successful Starts 1
. Failures to Start 111 Total Run Hours 1
Run Failures 396.5 Planned Maintenance Hours 132.5 Unplanned Maintenance Hours t
i Appendix C I
t
G e.e -
1 k;.
I T
t"*
It.s r
,I f,
~~
r8 g ew 1
\\..
3 nw I
..,i I
-t i
EL I
l
{s.ill 3-
'l
.w II@l e,
i t
ll1 r-t i l) i' t-l 8\\
Fnw
?
r
.a t-l t
B
?
E
(&
,)
I *'"
E I
agg g f.g ta lf Ij
==
rs t
EIh I.-
$l f*
i gI E
i-~
s T*
I
,f ll g,
f imo. !
}
gz I
f.
.I g
1
_.;;... a
! s, I
5I.
- 5' I)"h g.bj i{-:
1 t
0' 6l:.aw
?
fl.' j! p.. aw j }
e.
ll,j;y:j,*I"*
r i, Iw.s.
r l
&ast l
h h
h g
Ow a
s I
5 I
, asw !
8 1
r sprel I
rt m*
I F
j 1
i,3
\\
i l
{
'lI.
p 1
LE NI.f I
345 j
!3iI i
t-I i!
jg <g : --+.,!"-
!jri i I 1
,5
) I-1 r==.
g
.i r -w r
i
[
i
- "~'
- e 3,
a t*~
Ei t
gig
["
BC i
.m IIg r ""
E3 W
I~
EIIr}
l ~~
E
-i t-5:a1 s!!
51 r
i
.m a al a
eg I
r m%.
l E" $.1 8
Ig e1 imdasi j
i.
2
- w i
' = i r
l
-f
. gew a 1
i 8, t- :
F-I mes '
I el
!=
152,g r.
aj(y.....,
e }p; [F-i!!!""
I P
1 I3et I
l 2
i s
i I
z l
I lj1r w!
i n ((."
- I j
Il fE 4
.b:i r
y
.mw ;
1 a
g f
h l
l
{
g
~
i
Maine Yankea Independent Safety Assessment Team Edward L. Jordan l
Team Manager i
AEOD Ellis W. Merschoff Tearn Leader l
Region ll Uldis Vanags Patrick Dostle A
n ds tant David Decrow Region II State Representati/es 1
I I
I 1
Kriss M. Kennedy Ronald Lloyd Thomas O. Martin Alan L. Madison Jack E. Rosenthal OPS / Training Maint./ Testing Eng. Desi n/ Tech.
Management & Organization Analytic Code Support Region IV AEOD RE AEOD AEOD Harold ris ensen G. Norman Lauben ogdman Larry Bell Russel By ater John TTC John Kauffman Peter Prescott George Hausman Brian Haagensen Leonard Ward EOD AEOD Region 111 Contractor Contractor Robert Christie Cyril Crane Contractor Oontractor George Cha Contractor Michael Shlyamberg Contractor Appendix D
1 6
i Mr. Charles D. Frizzle Distribution:
J. Hilboan, EDO W. Russell, NRR D. Morrison, RES T. Martin, RI l
S. Ebneter, RII H. Miller, RIII L. Callan, RIV W. Beecher, OPA D. Rathbun, OCA K. Cyr, OGC J. Lieberman, OE G. Caputo, 01 l
W. Olmstead, OGC D. Ross, AE00 l
D. Chanagg, RI V. McCree, EDO Docket File 50-309 Public PDI-3 Plant SVarga, NRR JZwolinski, NRR PNcKee, NRR EPeyton, NRR ETrottier, NRR ACRS JRogge, RI File Center AE00 R/F l
l
a l
July 17, 1996 Mr. Charles D. Frizzle, President Maine Yarlee Atomic Power Company l
329 Bath Road l
Brunswick, ME 04011
Dear Mr. Frizzle:
SUBJECT:
INDEPENDENT SAFETY ASSESSMENT TEAM ENTRANCE MEETING This letter documents the July 15, 1996, entrance meeting of the Maine Yankee Independent Safety Assessment Team (ISAT). The e sting was held in the Maine Yankee Information Center and was open to the pubife.
The purpose of the meeting was to introduce the ISAT members, describe the mission, process and 4
special features of the assessment, and discuss the participation of the State of Maine. A copy of the presentation outline and a list of attendees is enclosed.
We appreciate the cooperation of you and your staff in facilitating this meeting.
No response is required to this letter.
Sincerely, E.@L Jordan 0 kisigned by:
Edward L. Jordan, Director Office for Analysis and Evaluation of Operational Data Docket No. 50-309
Enclosures:
1.
Presentation 2.
Attendees cc/w enclosures:
See page 2 Distribution:
See page 3
- See previous concurrence l TJ secolve a espy of ede h huSeate in see bes:
DOCUMENT MAME: MYENTRMT.R "C" = Copy without enclosures "E" = Copy with enclosures "N" = No copy
{
OFFICE AE00:ISA:TL D:AE00 NAME EMerschoff*
ELJordan*
DATE 07/12/96:obw 07/17/96 0FFICIAL RECORD COPY
%M M
l l
I l
Mr. Charles D. Frizzle )
\\
1 l
cc/w enclosures:
Chaiman Jackson Mr. Graham M. Leitch l
Commissioner Rogers Vice President, Operations l
Commissioner Dicus Maine Yankee Atomic Power Station l
James M. Taylor, NRC P.O. Box 408 l
SECY Wiscasset, ME 04578 l
Mr. Charles B. Brinkman Mr. James R. Hebert, Manager Manager ' Washington Nuclear Nuclear Engineering and Licensing Operations Maine Yankee Atomic Power Company i
l AB8 Combustion Engineering 329 Bath Road l
12300 Twinbrook Parkway, Suite 330 Brunswick, ME 04011 Rockville, MD 20852 l
Mr. Robert W. Blackmore Thomas G. Dignan, Jr., Esquire Plant Manager Ropes & Gray Maine Yankee Atomic Power Station One International Place P.O. Box 408 Boston, MA 02110-2624 Wiscasset, ME 04578 l
Mr. Uldis Vanags Mr. G. D. Whittier, Vice President State Nuclear Safety Advisor Licensing and Engineering l
State Planning Office Maine Yankee Atomic Power Company State House Station #38 329 Bath Road Augusta, ME 04333 Brunswick, ME 04011 Mr. P. L. Anderson, Project Manager Mr. Patrick J. Dostie Yankee Atomic Electric Company State of Maine Nuclear Safety 580 Main Street Inspector Bolton, MA 01740-1398 Maine Yankee Atomic Power Station P.O. Box 408 Regional Administrator, Region I Wiscasset, ME 04578 U.S. Nuclear Regulatory Commission i
475 Allendale Road Mary Ann Lynch, Esquire l
King of Prussia, PA 19406 Maine Yankee Atomic Power Company 329 Bath Road First Se;ectuan of Wiscasset Brunswick, ME 04578 Municipal Building U.S. Route 1 Mr. Jonathan M. Block Wiscasset, ME 04578
. Attorney at Law P.O. Box 566 Mr. J. T. Yarokun Putney, VT 05346-0566 Senior Resident Inspector l
Maine Yankee Atomic Power Station U.S. Nuclear Regulatory Commission P.O. Box E Wiscasset, ME 04578 4
I MAINE YANKEE INDEPENDENT SAMTY ASSESSMENT TEAM ENTRANCE MEETING JULY 15, 1996 I
[
l i
f EDWARD L. JORDAN - TEAM MANAGER ELLIS W. MERSCHOFF - TEAM LEADER i
i
t i
i MISSION OF THE MAINE YANKEE ISAT 1
Provide an independent assessment of the conformance of Maine 1.
Yankee Atomic Power Station to its design and licensing bases including appropriate reviews at the site and corporate offices.
ll Provide an independent assessment of operational safety 2.
performance providing risk perspectives, where appropriate.
1 t
Evaluate the effectiveness of licensee self-assessments, corrective 3.
l actions, and improvement plans-Determine the root cause(s) of safety significant findings and draw 4.
conclusions on overall performance.
[
2 l
I
.ll l
1<!j iil i[
l
't i i :i,
l!
l t
I:1
,i 3
n l t r
a o e
hp b
d t p u
r nu a
ar eS o
L Wt s eD S
c odO n
a E
dr roe a
t R
r n
.C A m
a o Ec i
r nC o
e t
kyca N
L l
an JA G
m t
tn a
sa e
n t
o n
e Wis it s
a e
n T
nz s
e oin n
s B "d
.e s a e
nr t
y t1 eo i
a*
d s1 n
Od aGD in gtc l
e A
M&O ro aa r
.tE hi at g
n m
LenA Ce Ho R
nm d
nC s
ae l
g o
a i
l es Aa r
r n
a B
a H
ee f
M n
f ks a
o dr h
ns r e r
ce n
n og sd1 1
n a
aA JnD ra rh a
i a
t m
e a
ee n c
Yy LME MLi MT d
uI at Cto
.aO o
a e m
g I
nr hr sI o
et dmA
.me
/
.n rD an r c c
Wear gS OiE aO Hio Ca ea r
e a a r
gt r
oE g
nf wT s
seR BA ee s
e T
tn r n l
ir o oo aD gR yC eC i
a d
i l
a E
E m g.
n r
l h
o C
G S
on o
e M
h E J
t T
G n
e e
re t
s t
i d
d t
t e
yg a
o s
e v
n si wi oi w11 c
r n
i ro t
s gt oa t
e a srt LesD y1 eD hc t
l n
n oc TO Bo rO Ca ne r
d /E g
PE p
aDes i
t l
t n l
l e
Vk De anA e e rA r
t o
nia sR e
e r
t bC scdp
~
e oM s
e o
d i
i i
r d t vR R
u P
R n
U PDta aae R
l I
tS y
d n
e a
ng m
l n
l niV e
f nI ei B
fD Kan C
u ro aO
.Ti yT E
/g rT K
MSe r
A PR a
n sO L
h s
o r
J i
K
STATE PARTICIPATION l
o TECHNICAL TEAM - DAY-TO-DAY PARTICIPATION IN EACH OF l
THE FIVE FUNCTIONAL AREAS BEING ASSESSED.
e ULDIS VANAGS o
PATRICK DOSTIE
[
e DAVID DECROW t
PROCESS TEAM - OBSERVE THE PROCESS AT KEY MILESTONES TO ASSURE ISAT IS FAIR, BALANCED, AND i
OBJECTIVE.
1 l
PETER WILEY l
e DR. FORREST REMICK i
e CITIZEN'S GROUP - PERIODIC BRIEFINGS FOR GOVERNOR AND t
CITIZEN'S GROUP TO KEEP THEM INFORMED OF PROGRESS.
i e
DR. DON ZILLMAN e
MR. ROGER HERSOME l
e MS. ELIZABETH ARMSTRONG i
e DR. EDWARD LAVERTY l
l e
MR. THOMAS BROUSSARD l
4 i
~. _. _ _. _ _. _ _ _..
MAINE YANKEE INDEPENDENT SAFETY ASSESSMENT f
SPECIAL FEATURES o
TEAM MEMBERS ARE INDEPENDENT OF REGION I AND THE OFFICE OF NUCLEAR REACTOR REGULATION o
MEMBERS ARE INDEPENDENT OF SIGNIFICANT PRIOR l
INVOLVEMENT WITH THE LICENSEE l
o THE TEAM MANAGER REPORTS DIRECTLY TO THE CHAIRMAN i
o CONTRACTORS WILL BE USED IN EACH FUNCTIONAL AREA, EXCEPT OPERATIONS l
l o
STATE REPRESENTATIVES WILL PARTICIPATE AS MEMBERS OF THE TEAM UNDER THE PROVISIONS OF FR 57.6462 POLICY STATEMENT
~
h i
?
5 l
l t
I
I MAINE YANKEE INDEPENDENT SAFETY ASSESSMENT l
(Continued)
SPECIAL FEATURES THE INSPECTION WILL BE CONDUCTED AT THE SITE, THE e
CORPORATE OFFICES, THE YANKEE ATOMIC ELECTRIC COMPANY OFFICES, AND MAY INCLUDE OTHER VENDOR OFFICES THE AREAS OF MANAGEMENT AND ORGANIZATION, e
OPERATIONS AND TRAINING, MAINTENANCE AND TESTING, ENGINEERING AND LICENSING, AND ANALYTIC CODE i
SUPPORT WILL BE ASSESSED o
INTERVIEWS OF VENDOR AND LICENSEE PERSONNEL WILL BE e
CONDUCTED l
l i
MAINE YANKEE INDEPENDENT SAFETY ASSESSMENT j
(Continued)
SPECIAL FEATURES I
l o
ROOT-CAUSES FOR PERFORMANCE PROBLEMS WILL BE ASSESSED l
o THE CHAIRMAN TRANSMITS THE TEAM REPORT TO THE LICENSEE l
[
{
7
)
MAINE YANKEE INDEPENDENT SAFETY ASSESSMENT PROCESS r
~
I SOURCES OF INFORMATION l
I o
DOCUMENT REVIEWS
}
e SYSTEM WALKDOWNS t
e OBSERVATIONS OF ACTIVITIES l
i e
FORMAL PERSONNEL INTERVIEWS j
i e
i i
i h
i 8
ON-SITE SAFETY ASSESSMENT PROCESS LICENSEE MANAGEMENT / STAFF INTERVIEWS e
ABOUT 100 FORMAL INTERVIEWS e
USED TO UNDERSTAND AND EVALUATE:
e TECHNICAL PROGRAMS e
WORK PROCESS e
PERFORMANCE ISSUES e
MANAGEMENT PRACTICES e
ORGANIZATIONAL ISSUES i
e CONDUCTED BY ALL TEAM MEMBERS e
PRESIDENT TO WORKING LEVEL e
FORMAL INTERVIEWS LAST ONE-TO-TWO HOURS e
SCHEDULES BASED ON INTERVIEWEE AVAILABILITY 9
ON-SITE SAFETY ASSESSMENT PROCESS COMMUNICATIONS OF TEAM OBSERVATIONS AND FINDINGS
[
t e
DAILY FEEDBACK BETWEEN FUNCTIONAL AREA i
COUNTERPARTS i
t e
DAILY FEEDBACK BETWEEN TEAM LEADER AND MAINE YANKEE MANAGEMENT i
e SAFETY ISSUES AFFECTING EQUIPMENT OPERABILITY WILL BE RESOLVED PROMPTLY WITH REGIONAL INVOLVEMENT r
?
l i
h i
l 10
SAFETY ASSESSMENT STATUS l
l PLANNED SITE ACTIVITIES i
e WALKDOWN SYSTEMS EXTENDED CONTROL ROOM OBSERVATIONS e
VERTICAL SLICE REVIEW SERVICE WATER 1
HIGH PRESSURE SAFETY INJECTION AUXILIARY FEED WATER (PARTIAL)
EMERGENCY DIESEL GENERATORS (PARTIAL)
~
PROGRAM / PROCESS / PROCEDURE REVIEW e
I e
ANALYTIC CODE REVIEW i
1 HORIZONTAL REVIEW TO SER VERTICAL SLICE REVIEW STEAM LINE' BREAK VERTICAL SLICE REVIEW DROPPED ROD l
e INTERVIEWS i
11 i
MAINE YANKEE ISAT SCHEDULE l
i i
JUNE 10-14:
- TEAM LEADERS PREPARE i
i JUNE:17.
JULY 12
- TEAM PREPARATION t
i JUNE 20-21:
- ADVANCE SITE TRIP JULYi5
- PUBLIC ENTRANCE MEETING
~
JULY 15-26
- INITIAL ONSITE EVALUATION j
1 JULY 29 - AUG 9
- COMPILE PRELIMINARY FINDINGS 1
AUGUST 12 - 23
- SECOND ONSITE EVALUATION 1
OCT 10
- CONDUCT PUBLIC EXIT MEETING
[
i 12 i
l
(
i l
MAINE YANKEE l
I INDEPENDENT SAFETY ASSESSMENT TEAM i
ENTRANCE MEETING JULY 15,1996 l
\\
t NAME ORGANIZATION PHONE NUMBER t
- 1. MtM @
- 5% G)(2.7
- 2. D6L s%4 Lws\\ h haus Se a a)
)
- 3. A o & L
}q
@2 51 7 4.GR'o-ll0sc ;
hIf c
- 5. &jj wk Siz s,qs 6.h fg) ygg(
(Sg)Sgg z w 7 34, (",,,,_;,,,
Q,,y gg',,,;,, q_
- m. >/gm. ga ga v'
/ /~
8 4dn Bc1t Canvessmam LM, e C24 - 3dO8 e
i u
u
- 9. n t.;p,
(;n) u 10.EL,sc.O.Meuce r
osetc l
11.F L Jbrda -
tLSNKQ 30t Wr 1m-12.
13.
l 14.
l l
15.
i 16.
17.
1 18.
19.
20.
i MAINE YANKEE INDEPENDENT SAFETY ASSESSMENT TEAM ENTRANCE MEETING JULY 15,1996 NAME ORGANIZATION PHONE NUMBER 1. J o d o & p e,,a (q C4.f. fueN.!
77c2 -/fo()
2.3/eut'hcs.t.c Ck } A'fd 5'
3.'hiIsu'{([cj%
( V( ' /) - (l - (c l_^ " 9 2 f, - h, (> b L,
- 4. f, n n, e f(,/(
fty5p)
C /
(,
>n 5.kg3 Qaag7w l,mf t (%,k hhd [q, g 5 - 5 o c(-;
6 /Lu C.(m-MNw fo" 6A (t-1.. % 7_.P k
3 ik.- r--
t-o.i/.12c./.rua b&n -,
7.YIkaf Drtt. b fr c s' j
33] $33
- w
- 8. &h.ifis, y g ) ),,, b y72-s y9
- 9. 64 fo%Am vs.Libi P n.r/ W Yk
$$b MV/o c) fP
!})hs'ii,o bi) 'dP FP/3 - 95'S~3
~
b 11-Y
- 12. h %Nc, a gm /qge m m _qa Gp 13.[(gQoget_
U_
q3 f3g 14QQA %_ b nn&y 889-5sal 15f&lf &k y
.. /)& flufy,c.
goyfggppya 1 6.. $J m 0 x x g e c_.
IVjpiwr few p 7z s?J3
- 17. j, g p,.3, 3 y o,, ry 9, ggg-(p72
- 18. Q a b u gy gg t - 4 pg.
- 19. 8// $cA4Nt
) 14i
)%/rx 882~s767 20llmr ko,m,J
/Y)V 882-SBS7
MAINE YANKEE INDEPENDENT SAFETY ASSESSMENT TEAM ENTRANCE MEETING JULY 15,1996 l
~
l NAME ORGANIZATION PHONE NUMBER j
1 3 ; j, f f,,,3 %
y y'
.g, p g 2NYON/f) 000SMf)SP 6?88 3fWQ,,,,
yy 57g4 j
4 hs j
r77c 5.hNo){!lubes
$i r /, ; -
j 6.YEk (3&
M \\/
Y2-4 )
l
- 7. h L E f W taL d B\\/
8613 8 bl42K $21)bw6 En YLf
$bb9
~
9 0hffb l'16b Mh
[bSl 1
l 10./(),'//> ' m Ym cr/
- 11) )/
$3/[
o l
- 11. james Crawkcl 0mbnk %m
[
o
- 12. Wr1),n
[)ga ypc my y g;zo i
13.gL, t/g-foL.
gQg Q. L y sia cy
~
r
-,72..s45g 14.
g;j[ L;wtj p c,n g 9 ( c k m,,
ygy. y;).q un 15.
l 16.
17.
18.
19.
20.
li-l.
l l
MAINE YANKEE l
+
INDEPENDENT SAFETY ASSESSMENT TEAM ENTRANCE MEETING i
JULY 15,1996 zo,.e,u.u u NAME ORGANIZATION PHONE NUMBER 1..-t w s ~P a k,-
m., u /a:a,..sw x cys~4
/
2 Lex dar.taawo 11me 6me/wuxsnuu x A3If 3.BREn r Toci<>E niae4am/,llMk x 4-3(C
- 4. f, ' f 4 ( a' f.,]
'(
x 5 Lg7 tt
_5. ' Tot O.3ab at >r x 5sIo 6.
bme Mruo,'(Ao m x 5 C,'y:3 7.' C te lhuAirr Nunt Cndx x 5707 l
- bu ria ca 3Aha,j as si y S&,0
- 9. Q (,. A It
((
yy1yQ l
- 10. A. g. sh.
uy Aw m x yses
- 11. b ut4- (rv e Nasc N 53 to i
l
- 12. L,y h l,, y y yygh gfgo7
- 13. c%sToeatn g, sage
- %me %my %, s,,,,,
x gigy l
- 14. f.},
/L,,
,t/;.
w,&
y574y
- 15. Ab i -2 et t < -
A B8 cE v
5- ) '+ 5~
- 16. [wt/9,,i&,, yy
/ h V t& s- /}lc a X 57.,')&
- 17. sarenr>.ev, a,e a yy m>+ >sr y - s,c.1
- 18. g /
J e,,
t]1f' yan i
- 19. m yg3yqr Ay g 4p rs
- 20. h &,lg My X 6///9
(
v
MMNE YANKEE INDEPENDENT SAFETY ASSESSMENT TEAM ENTRANCE MEETING l
1 JULY 15,1996 i
r
(
l NAME ORGANIZATION PHONE NUMBER 1.Q.,,h,,,,,n4 7)f,,; n $ 4,p n ggp _ggy, 2 $. L PL Y 9:1 m -C74'T i
l 3.
4.
6.
7.
8.
l 9.
10.
11.
l 12.
l 13.
14.
15.
16.
17.
I.
18.
19 Att.
MAINE YANKEE INDEPENDENT SAFETY ASSESSMENT TEAM ENTRANCE MEETING JULY 15,1996 NAME ORGANIZATION PHONE NUMBER
- 1. [ fo u y d ' [ p p s a p,y QJyf; fy z 87 572g
- 2. h L.orp R
Jnn % /
a87 -S&rs, n
3.
4.
5.
6.
7.
8.
9.
10.
11.
12.
13.
14.
15, 16.
17.
i 18.
19.
20.
9
MAINE YANKEE I
INDEPENDENT SAFETY ASSESSMENT TEAM ENTRANCE MEETING JULY 15,1996 NAME ORGANIZATION PHONE NUMBER 1.
)&f
- $R( W 907 --g, yy.-ygm yg 2\\fekt $vn &
K2rtv" A c, C&S -SoyV% n)
<- e J yia E tfNial hcq -9 2V2 - C7 Tl '
I
- 3. l}LA hl 13JuR 4.//f((gjtKfjg64{ JVf(gg fgQ M 7 792 cT3g)
- 5. L%,,, %,.a
/Nu r S' Ace s zo1 - 22z-s s e/
- 6. d d E f,y A/gb (fafgg 7.
[
d 8.
9.
l 10.
11.
l 12.
~ 13.
14.
15.
16.
17.
18.
19.
20.
i.*
MAINE YANKEE INDEPENDENT SAFETY ASSESSMENT TEAM l
ENTRANCE MEETING l
JULY 15,1996 l
NAME ORGANIZANbN PHONE NUMBER l
1.jp' f,,,,,
,g,Q g7.,,,.3yy 2-
\\
~
m.s n
3I G%
Q,ap A g, 4.Gu d L <-
M l
- 5. d &,
gy
- 6. k;))fyr YeI
$. a) s
- 7. b
[o; e,
my f fu sp 8 1 7d~ / +
uy i
/
/
- 9. h,4 L g, t/ms7)
+
l
- 10. g i gq, _
y'm g 5 11.fygg,fyh Nt yn
- 12. k,3 7)f L,
lA)I 13.
M MGrEv/A YNSD 14Sieue Fo//en yMso
- 15. b,w Q>ik&tt0 mu.
- 16. N x [ %
(Jk,,mAi 35/,J C)S(%
17.(,4Nm &
yN$D
- 18. T d d O g A/l M.
- 19. h j u k,,)
- ~$A', inh & j,y @ ) -f 995>
1 20.' L L 'i & L,I '
wv l
l
l.--
l.,
I U. S. NUCLEAR REGULATORY COMMISSION se SIGN-IN SHEET NAME ORGANIZATION PHONE NUMBER DATE 1
1.
l{&t! l.l.DVD
(,g((}&
30} Qg-C5yJ 7/MYK
- 2. g 4toggg y,7. g y, 7fy/m l
3.
yey, gg ag gg 4-G r ea cc Mvs 4W 5.
6.
7.
8.
I 9.
10.
11.
12.
13.
14.
15.
i 16.
l 17 l
18.
19.
20.
i 21.
l l
l
MAINE YANKEE INDEPENDENT SAFETY ASSESSMENT TEAM ENTRANCE MEETING JULY 15.1996 NAME ORGANIZATION PHONE NUMBER lISoleM~bCkesb 3ba beW M)6ff-/N 2.o/a 3. u M 6T NRfL.
404-32/- 4f7S' 3.CY CRANE Al A C C 08 78c Tot {300 YIi~- 69tM
- 4. holt \\l.CtV8 HPc cscTdAcTt-Gi)-3f-oc'E%
~
- 5. pp,e ppgcg mie c__.
(%,) y, p 7 g g /
6fv;Sef/ fipoJu pge f,tl/.3gy-ggo7
- 7. -7;i.,e y i pu t.4 g 5 y g 5 s-g z 4 8.fon y gugw azc_
(sci).y,g sygo 9.gg' m, w m agc 3 c,. gg, 3 2. y
- 10. y g yq L l gw.syghw g9 'nlA%3, 110cm /g&
- us Qef_A (f 4 5-55tf y
- 12. & h f)"p k 7"ph
_ gg2.-58'9"/
13.humaCsdirow m.6,
f-d n (
- 14. uncot.y SPEED MY 888-5683
- 15. h thcLd Agu,/,. c, 4e 5ago 16.Dgdf)ff&}.,(_.
hh,fgjp, 4-if 1~94t 4t-ln
- 17. Q M t n
ii 3gyy C4a /7M
'193-294(o
- 18. Iow /// caul ~4.
7 19.jp g, f oso um, V V 7-9 0 O S' 20.1{be b A. %
a 9 41%
l
- w 4
UNITED STATES
{
j NUCLEAR REGULATORY COMMISSION
~t WASHINGTON, D.C. 20555-0001 o
%, * * * *
- j/
August 1, 1996 Mr. Charles D. Frizzle President Maine Yankee Atomic Power Company 329 Bath Road Brunswick, Maine 04011
Dear Mr. Frizzle:
SUBJECT:
TECHNICAL REVIEW 0F PRELIMINARY RESULTS OF AFW/EFW RELIABILITY ASSESSMENT As part of the ongoing Independent Safety Assessment (ISA) of the Maine Yankee i
Nuclear Power Plant, your staff has been providing assistance in obtaining, and entering component reliability data that will be used in the assessment of I
selected system components.
The attached documents (forwarding note, preliminary Maine Yankee results, and sample report) were provided to Mr. Steve Follen on July 25, 1996, to facilitate your review to determine if any factual errors exist in the data we have used to develop the emergency and auxiliary feedwater pump reliaoilities.
'.le are reviewing the treatment of early run failures which if classed as failures to start may change the numerical determination of reliability.
Please provide any errors you note to Mr. Ron Lloyd by August 9,1996. Mr. Lloyd can be reached at (301)-415-5543.
Sincerely, L- - m l
Edwar ~ L Jordan, Director Offic.
r Analysis and Evaluation cf Operational Data t
Docket No, 50 3G9
Enclosure:
As stated cc w/ enclosures:
See page 2 l
l 4
(
&fy ww a
r c
e
~
Mr. Charles D. Frizzle 2
Mr. Robert W. Blackmore cc/w enclosures:
I Chairman Jackson Plant Manager Maine Yankee Atomic Power Station
)
Commissioner Rogers Commissioner Dicus P.O. Box 408 i
James M. Taylor, NRC Wiscasset, ME 04578 SECY Mr. G. D. Whittier, Vice President Mr. Charles B. Brinkman Licensing and Engineering Manager - Washington Nuclear Maine Yankee Atomic Power Company Operations 329 Bath Road ABB Combustion Engieering Brunswick, ME 04011 12300 Twinbrook Parkway, Suite 330 Rockville, MD 20852 Mr. Patrick J. Dostie State of Maine Nuclear Safety Thomas G. Dignan, Jr., Esquire Inspector Ropes & Gray Maine Yankee Atomic Power Station One International Place P.O. Box 408 Boston, MA 02110-2624 Wiscasset, ME 04578 Mr. Uldis Vanags Mr. Graham M. Leitch State Nuclear Safety Advisor Vice President, Operations State Planning Office Maine Yankee Atomic Power Station State House Station #38 P.O. Box 408 Augusta, ME 04333 Wiscasset, ME 04578 Mr. P. L. Anderson, Project Manager Mary Ann Lynch, Esquire Yankee Atomic Electric Company Maine Yankee Atomic Power Company 580 Main Street 329 Bath Road Bolton, MA 01740-1398 Brunswick, ME 04578 Regional Administrator, Region I Mr. Jonathan M. Block U.S. Nuclear Regulatory Commission Attorney at Law 475 Allendale Road P.O. Box 566 King of Prussia, PA 19406 Putney, VI 05346-0566 First Selectman of Wiscasset Municipal Building i
U.S. Route 1 Wiscasset, ME 04578 Mr. J. T. Yerokun Senior Resident Inspector Maine Yankee Atomic Power Station U.S. Nuclear Regulatory Commission P.O. Box E Wiscasset, ME 04578 Mr. James R. Hebert, Manager Nuclear Engineering and Licensing Maine Yankee Atomic Power Company 329 Bath Road Brunswick, ME 04011 i
- ~ _ _
Mr. Charles D. Frizzle 3
f i
Distribution.
J. Milhoan, EDO 3
W. Russell, NRR D. Morrison, RES T. Martin, RI S. Ebneter, RII H. Miller, RIII L. Callen, RIV W. Beecher, OPA D. Rathbun, OCA K. Cyr, OGC J. Lieberman, OE G. Caputo, 01 W. Olmstead, OGC D. Ross, AE00 D. Chanagg, RI V. McCree, ED0 Docket File 50-309 Public PDI-3 Plant SVarga, NRR JZwolinski, NRR PMcKee, NRR EPeyton, NRR Etrottier, NRR ACRS JRogge, RI 9
f August 1, 996 Mr. Charles D. Frizzle President Maine Yankee Atomic Power Company 329 Bath Road 1
Brunswick, Maine 04011 j
Dear Mr. Frizzle:
SUBJECT:
TECHNICAL REVIEW 0F PRELIMINARY RESULTS OF AFW/EFW RELIABILITY ASSESSMENT As part of the ongoing Independent Safety Assessment (ISA) of the Maine Yankee Nuclear Power Plant, your staff has been providing assistance in obtaining, and entering component reliability data that will be used in the assessment of selected system components.
The attached documents (forwarding note, preliminary Maine Yankee results, and sample report) were provided to Mr. Steve Follen on July 25, 1996, to facilitate your review to determine if any factual errors exist in the data we have used to develop the emergency and auxiliary feedwater pump reliabilities. We are reviewing the treatment of early run failures which if classed as failures to start may change the numerical determination of reliability.
Please provide any errors you note to Mr. Ron Lloyd by August 9, 1996.
Mr. Lloyd can be reached at (301)-415-5543.
Sincerely, Ori inal Signed by:
0 E.L Jordan Edward L. Jordan, Director Office for Analysis and Evaluation of Operational' Data Docket No. 50-309
Enclosure:
As stated cc w/ enclosures:
See page 2 Distribution:
See page 3
- FOR PREVIOUS CONCURRENCE SEE ATTACHED COPY DOCUMENT HAME:A:\\MYAFW l
T. e. n et m. de.--t. Indi = la *. bec c - c.n.nhui d 7 - c.n enh ad -= r - N c.n 0FFICE AE0D:ISA AE0D:ISA D:AE00/74f
_f NAME
- RLloyd:obw
- EMerschoff ELJord6' '
DATE 08/ /96 08/ /96 08/ / /96 08/ /96 08/ /96; 0FFICIAL RECORD COPY
J i
{
1 a
i Mr. Charles D. Frizzle President Maine Yankee Atomic Power Company 329 Bath Road-Brunswick, Maine 04011 i
Dear Mr. Frizzle:
SUBJECT:
TECHNICAL REVIEW 0F PRELIMINARY RESULTS OF AFW/EFW RELIABILITY
+
l ASSESSMENT a
}
As part of the ongoing Independent Safety Assessment (ISA) of the Maine Yankee Nuclear Power Plant, your staff has been providing assistance in obtaining, 1
and entering component reliability data tnat will be used irl the assessment of selected system components.
The attached documents (forwarjing note, i
preliminary Maine Yankee results, and sample report) were provided to Mr. Steve Follen on July 25,-1996, to facilitate your review to determine if any errors exist in the data we have used to develop the emergency and auxiliary feedwater pump reliabilities.
Please provide any errors you note in this analysis to Mr. Ron Lloyd by Augu,st 9,1996.
Mr. Lloyd can be reached at (301)-415-5543.
)
Sincerely, Edward L. Jordan, Director Office for Analysis and Evaluation of Operational Data Docket No. 50-309
Enclosure:
As stated cc w/ enclo.sures:
See page 2 Distribution:
See page 3
- FOR PREVIOUS CONCURRENCE SEE ATTACHED COPY DOCUMENT NAME:A:\\MYAFW To mesise a espy of this doessment, indiente in the her "A Copy yishout escisewes *E' - Copy with escisewes "W" - Ne copy 0FFICE AE00:ISA AEGS:fSA' l D:AE00 NAME
- RLloyd:obw illdytefioff ELJordan DATE 07/- /96 d@E/9 /96 07/
/96 07/ /96 07/ /96
Mr. Charles D. Frizzle President Maine Yankee Atomic Power Company 4
329 Bath Road Brunswick, Maine 04011
Dear Mr. Frizzle:
1
SUBJECT:
TECHNICAL REVIEW 0F PRELIMINARY RESULTS OF AFW/EFW RELIABILITY ASSESSMENT l
As part of the ongoing Independent Safety Assessment (ISA) of the Maine Yankee Nuclear Power Plant, your staff has been providing assistance in obtaining, and entering component reliability data that will be used in the assessment of i
selected system components.
The attached documents (forwarding note,
- preliminary Maine Yankee results, and sample report) were provided to Mr. Steve Follen on July 25, 1996, to facilitate your review to determine if any errors exist in the data we have used to develop the emergency and auxiliary feedwater pump reliabilities.
Please provide any errors you note in this analysis to Mr. Ron Lloyd by August 4, 1996.
Mr. Lloyd can be reached at (301)-415-5543.
Sincerely, Edward L. Jordan, Director Office for the Analysis and Docket No. 50-309
Enclosure:
As stated cc w/ enclosures:
See page 2 Distribution:
See page 3 i
DOCUMENT NAME:A:\\MYAFW To sessive e espy of this daeunast. udents in the bec *C" - Copy withest escisewes *E* - Copy with encisewes *E* - No copy 0FFICE AE00:iSA 57-AE00:ISA D:AE00 NAME RLloyd:chw'!
EMerschoff ELJordan DATE 07/'2 /96 07/ /96 07/
/96 07/ /96 07/ /96 0FFICIAL RECORD COPY
_j
I i
dA
]
25.1996 To: Steve Follen From: Bob Christie 1
4
Subject:
Technical Review of Preliminary Results of AFW/EFW.
i Attached is a copy of the preliminary results of the Conditional Probability Analysis for the Auxiliary Feedwater System and the Emergency Feedwater System. Also enclosed is a sample of the writeup of the Arkansas Nuclear One - Unit 1 Conditional Probability Analysis for their Emergency Feedwater System and a sample of the curves for.the Emergency Feedwater l
Systems at ANO Unit I and ANO Unit 2. The Arkansas Nuclear One material is included to provide details concerning the analysis and some curves to compare to the preliminary results for Maine Yankee EFW/AFW systend.
Please review the preliminary results for Maine Yankee. Special attention should be paid to the basic assumptions defined for the study. Hopefully the maintenance downtimes and start /run successes and failures are consistent with the assumptions.
/-
N ENCLOSURE
m____
d'
-a6 a-O r14hM4----
1 444e-eeh--44-E--4--
&+a 42a2.42a a&
4-4 W_,+J.
.J2a._.h
._4.e-4u
.A 1.A S<&4-h..-4-.4m dam m
,e J 4h,b J.%e46...a 4.u, a
,%--.,.m.a e4m#m s-I ey A
4 t
o
}
1 s
l PRELIMINARY MAINE YANKEE RESULTS i
l 1
s l
i 1
)
!i i
}
1 i
j 1
k
~
l Table of Contents Tables f
1 EFW/AFW Assumptions j
2' EFW Automatic Actuations 3 EFW/AFW Pump Start / Run / Failure Summary 4a Maintenance Downtime - P-25A 4b Maintenance Downtime - P-25B l
4c Maintenance Downtime - P-25C l
i 5a Summary of Failures - P-25A l
Sb Summary of Failures - P-25B Sc Summary of Failures - P-25C 1
Sd Summary of Non-Failure Events l
(For rev_ier_gr.1v - not for nublished renort)
Figures 1
P-25A (Scale 96% - 100%)
Conditional Probability of Success on Actual Demand a
b Standby Availability c Probability of Successful Start d Probability of Successful 24 Hour Run 2
P-25B (Scale 10,1 - 100%) IMOTE SCALE 1 a Conditional Probability of Success on Actual Demand - P-25B b Standby Availability - P-25B c Probability of Successful Start - P-25B
(
d Probability of Successful 24 Hour Run - P-25B 3
P-25C (Scale 96% - 100%)
l a Conditional Probability of Success on Actual Demand - P-25C
(
b Standby Availability - P-25C c Probability of Successful Start - P-25C i
d Probability of Successful 24 Hour Run - P-25C I
~
c
.._._..___.._..m.
l.
l 1EEER...
- similar curves for EDGs, HPSI, SW i
Monthly Core Damage Frequency Curves (based on actual l
equipment performance provided in preceeding curves) l n
P l
i l
t l
I I
I I
i r
,,1s-
--m-
MAINE YANKEE Table 1 (Preliminary)
AUXILIARY FEEDWATER SYSTEM and EMERGENCY FEEDWATER SYSTEM ASSUMPTIONS l.
Evaluation will consider only conditions 7,6,5. Time spent in conditions 4,3,2, I will not be evaluated.
The evaluation will separate out the times in conditions 7,6,5 in the raw data sheets but all events in conditions 7,6,5 will be lumped together for the calculation of Conditional Probability.
2.
All starts of the pumps will be generally considered in the evaluation. This includes starts performed in accordance with procedure 1-104-7, which is used for control oflevel in the steam generators during l
startup and shutdown. Test starts are included in the evaluation for demands and failures if the test start is "close enough" to an actual demand.
3.
He time during surveillances 3 1 5.2, 3 1-5.3,3 1 5.4, when the pump is considered " inoperable" (entered Remedial Action Technical Specification 3.8.E), will not be considered "down time" for purposes of calculating Standby Availability. Dese times are considered to be short and the purpose of the procedure is to check the operability of the pump.
4.
He time during the surveillance 3-1 5.1, valve position check and valve stroke timing, when the pump may be considered " inoperable," will not be considered "down time" for purposes of calculating Standby Availability. Dese times are considered to be short and the purpose of the surveillance is to check the operability of the valves.
5.
" Failures" wiil be evaluated using the following criteria.
If the standby pump is started automatically, would the pump have automatically started and run a.
for the mission time (24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />) given an actual demand under these circumstances.
b.
If the standby pump is started manually, would the pump have started manually on the first try and run for the mission time (24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />) given an actual demand under these circumstances.
Only one failure will be counted per event. Following a failure, all starts and runs prior to the official surveillance run that results in the pump being declared " operable" are considered " trouble shootms" starts / runs following a failure and will not be included in the evaluation Unplanned downtime starts when the failure occurs. His unplanned downtime continues until the start time of the surveillance run which l
declares the pump" operable."
l Unplanned downtime can be the result of a.) Failure, b.) Corrective maintenance for a problem which may not be a " failure" but for which corrective
- maintenance is done in a short time frame (less than 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> from the time the problem was identified), c.) Extensions of the time in planned maintenance caused by l
corrective maintenance due to problems discovered during planned maintenance.
i 6.
Planned downtime starts with the White Tag Out that starts the maintenance and continues until the start of i
the surveillance run which declares the pump " operable." Planned downtime can include corrective maintenance if the corrective maintenance does not have to be performed immediately and the work is l
done at a time which is " voluntary" and not forced.
l l
7.
If the pump fails to achieve rated flow on the first try, the event is considered a Failure to Start. Generally l
the pump achieves full flow within the first two minutes. Failures after the first two minutes are considered Failures to Run.
l 8.
Post maintenance testing will be included in the evaluation unless part of trouble shooting.
l 9.
During Instrumentation and Controls (l&C) surveillances, there are short periods of time when a logic pattern or a valve position or a switch position would not allow the pumps to function in an actual demand l
and the pump is stated to be in a Remedial Action Technical Specification. These tests are not considered l
in the calculation of Standby Availability time. These include surveillances 3-6.2.2.18 and 3 6.2.2.22.
10.
Downtime and run times were generally rounded to the nearest 0.5 hours5.787037e-5 days <br />0.00139 hours <br />8.267196e-6 weeks <br />1.9025e-6 months <br />. However, if the time was vi y short, the time was recorded to the nearest 0.1 hours1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br />.
11.
Ignored daylight savings time. April had 72p hours and October 744 hours0.00861 days <br />0.207 hours <br />0.00123 weeks <br />2.83092e-4 months <br /> in the calculations.
6 I
4 t
s MAINE YANKEE l
Table 2 (Preliminary)
EMERGENCY FEEDWATER AUTO ACTUATION i
(FOLLOWING REACTOR TRIPS)
January 1,1992 to June 30,1996 i
i 5/18/94 Reactor trip at 2025 hours0.0234 days <br />0.563 hours <br />0.00335 weeks <br />7.705125e-4 months <br /> Emergency Feedwater pumps P-25 A and P-25C automatically started following the trip from full power. The times the pumps were secured were not recorded in the control room logs. Assumed 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> of run l
time for each pump.
1/14/95 Reactor tripped at 0839 hours0.00971 days <br />0.233 hours <br />0.00139 weeks <br />3.192395e-4 months <br />. Emergency Feedwater pumps P-25A a'l P-25C automatically started. P-25A was secured at 0859 hours0.00994 days <br />0.239 hours <br />0.00142 weeks <br />3.268495e-4 months <br />. P-25C was secured at 0903 hours0.0105 days <br />0.251 hours <br />0.00149 weeks <br />3.435915e-4 months <br />.
l 2/13/%
Reactor tripped at 2228 hours0.0258 days <br />0.619 hours <br />0.00368 weeks <br />8.47754e-4 months <br />. Emergency Feedwater pumps P-25A and P-25C automatically started. P-25C was secured at 2251 hours0.0261 days <br />0.625 hours <br />0.00372 weeks <br />8.565055e-4 months <br /> and restaned at 0125 hours0.00145 days <br />0.0347 hours <br />2.066799e-4 weeks <br />4.75625e-5 months <br /> on 2/14/% hours. P-25A was secured at 0127 hours0.00147 days <br />0.0353 hours <br />2.099868e-4 weeks <br />4.83235e-5 months <br /> on 2/14/%.
i h
e v
4 i
1 l
l l
MAINE YANKEE l
Table 3 (Preliminary) i i
EMERGENCY FEEDWATER SYSTEM and AUXILIARY FEEDWATER SYSTEM
.1 i
j January 1,1992 to June 30,1996 Conditions 7,6,5 Emergency Auxiliary Emergency Feedwater Feedwater Feedwater l
P-25A P-25B P-25C l
j Total Starts 130 58 192 2
i Successful Starts 130 56 191 Fail to Start 0
2 1
Fail to Run 1
5 0
Run Hours 487 26.5 992 l
J e
. _. ~.,,.
D Wla(l\\e N 3 - premma
~
MAINTENANCE DOWN TIME page 1 AUXILAIRY / EMERGENCY FEEDWATER P-25A Plant Hours P/U*
Date Tinne condition Unavail.
6/29/92 0750-1115 7
3.5 P
From control room logs; nature of work unknown; assumed planned.
10/19/92 0700-1431 7
7.5 P
From control room logs; for maintenance; aesumed p1 Lined.
3/8/93 0717-1135 7
4.5 P
From control room logs; for lubrication.
11/22/93 0520-1404 7
8.5 P
From control room logs; for packing adjustment; tagging order 2254-93; re:ack outboard bearing.
12/20/93 0650-1322 7
6.5 P
From control room logs; tagging order 2375-93; inspect & megger P-25A.
1/17/94 0630-1344 7
7 P
From control room logs; for maintenance; assumed planned.
4/11/94 0553-1238 7
7 P
Tagging order 0474-94; annual lubrication and sample.
1/5
- 1137 5
162 U
Pump bearing oil leak following '95 refueling rebuild / internals
-15/96 replacement; old internals reinstalled; tagging orders 37-96, 60-96, 69-96, 81-96 & 117-96; work orders94-328 &
96-102.
1 J' ~ I0(C g
?
t k>0 e cl l"Ihbb MAINTENANCE DOWN TIME page 2 AUXIIAIRY / EMERGENCY FEEDWATER P-25A 2
Plant Hours P/U Date Time Condition Unavail.
7/3/96 0934-1310 7
3.5 P
From control room logs; preventive maintenance.
~~k\\e%~
i a w a. 9 MAINTENANCE DOWN TIME page 3 AUXILAIRY / EMERGENCY FEEDWATER l
P-25B Plant Hours Dates Tinne Condition Unavail.
P/U" Comuments 2/4/92 1000-1218 7
2.0 P
From control room logs; MS-185 shut; assumed planned.
8/18/92 0605-1041 7
4.5 P
From control room logs; replaced lube oil reservoir level guage; work order 92-02752-00 9/15/92 1000-1245 7
3 P
From control room logs; for work on turbine govenor valve, MS-P-168 (limit switches sticky) ; work order 91-5407-00.
10/13/92 0941-09e.8 7
0.1 U
P-25B tripped on overspeed; reset trip valve and restarted.
I 11/10/92 0756-1526 7
7.5 P
From control room logs; white tag out on turbine governor valve, MS-P-168; replace limit switches.
'1/4-5/93 1039-2110 6/7 34.5 U
From control room logs; P-25B tripped n attempted start.
3/1/93 0618-1742 7
11.5 P
From control room logs; lubrication; work order 93-00378-00.
3/29/93 0926-1307 7
3.5 P
From control room logs; oil guage work; work order 93-01347-00.
L i
~.
h[I b
6 VV-lieuA A t
,)
(6 MAINTENANCE DOWN TIME page 4 AUXILAIRY / EMERGENCY FEEDWATER P-25B Plant Hours Date Time Condition Unavail.
P/U*
Comments 5/28/93 0631-1204 7
5.5 P
Prom control room logs; PIC-1106 maintenance; had trouble with post maintenance test.
5/28/93 1204-1445 7
3 U
After maintenance on PIC-1106, had to abort post maintenance test due to MS-P-168. controller problems; work order 93-01647-00.
7/19/93 1123-1700 7
5.5 P
From control room logs; work on turbine steam isolation valve, MS-T-163; replaced leaking diaphram; work order 7/20/93 0500-1155 7
7 P
93-2286-00.
10/5 1955-1255 5/6 112.5 U
P-25B placed in administrative hold; tagging order 2016-93; packing
-10/93 adjustment, overspeed trip, governor problem.
2/23/94 0600-1540 7
9.5 P
From control room logs; calibrate P 25B
& valve work on MS-T-163; tagging orders t
0267-94 & 0270-94.
8/18/94 0620-1315 7
7 P
From control room logs; P-25B annual lubrication and lube oil cooler inspection; tagging order 1177-94.
g (mter s j
{
4 C CO k
^W
^
I l
MAINTENANCE DOWN TIME page 5 l
AUXILAIRY / EMERGENCY FEEDWATER l
l P-25B l
Plant Hours l
Date Time Condition Unavail.
P/U' Comments 10/3-0520-1236 7
55 P
From control room logs; inject dye into j
5/94 suction line; tagging order 1368-94; j
work order 94-3510.
0630-1330 5
7 P
1/23-Terminated quarterly surveillance due to Pressure regulator hunting; UOR 95-014.
i 25/95 1330-1118 5
45.5 U
1/30-1430-1630 5
26 U
Aborted surveillance procedure 3.1.22 31/95 after P-25B tripped twice on overspeed during normal start; MS-P-168 erratic; i
UO!' 95 - 014. (note: stopped tracking unavailabi% hours at 1630 on 1/31f95 l
due to plant entering condition 4.)
l 1[4-9/96 1027-1259 5
122.5 U
Frozen lines, stuck discharge check valve; UOR 96-002; tagging orders 35-96 i
& 53-96; work orders 93-3699-01 &
96-106.
l 3/20/96 1030-1430 7
4 P
From control room logs; lubrication.
4/5-6/96 1253-0152 7
13 U
6/12-1635-2136 7
53 U
Fr m control room logs; water in lube 14/96
- oil, 6/13-1800-1829 7
48.5 U
18/96 i
I
^i
'l k A 4(d.
C. -
.C4 (WlW3 C l
MAINTENANCE DOWN TIME page 6 AUXILAIRY / EMERGENCY FEEDWATER P-25C Plant IIours Date Time Condition U'navail.
P/U*
Comments-4/21/92 0921-1015 7
1 U
From control-room log; P-25C shutdown during surveillence, need to add oil.
3/22/93 0651-1443 7
8 P
From control room log; assumed planned.
12/6/93 0925-1005 7
.5 U
From control room logs; breaker troubleshooting; breaker replaced; UOR 93-112.
1/14/94 0923-0949 7
.5 P
From control room log; breaker swap.
3/28/94 0600-1830 7
12.5 P
Megger & junction box inspection; tagging order 0415-94 6/17/94 1257-1322 7
.5 P
From control room logs; breaker replacement.
12/5/94 0805-1201 7
4 P
From control room logs; replace gland bolts; tagging order 1649-94.
i 1/31/96 0934-1358 7
4.5 P
From control room logs; maintenance /
annual lubrication.
Indicates uhether down time was Planned or Unplanned.
1.
h
Table 5a Summary of Failures - P-25A
" Event Plant Event Summary Dato condition 1/5 5
Pump rebuilt during '95 outage; oil leaks
-15/96 developed during pre-plant startup pump use; trouble shooting indentified problems with the new internals; pump rebuilt using original internals; placed in service 1/15/96; no problems since.
J f
4 1
l i.
f a
s ll d
e
W 4
l *.
4 l
Table 5b l
Summary of Failures - P-25B i
Event Plant
"'""#I Date Condition j
10/13/92 7
Overspeed trip after 7 minutes of run time j
during surveillance 3-1-5.3 i
l 1/4/93 7
Tripped on attempted start; trouble with MS-P-168 controller.
10/5/93 5
Overspeed trip after 5 minutes of run time under procedure 1-104-7.
j 1/23/95 5
Terminated quarterly surveillance due to pressu'e regulator hunting; UOR 95-014.
i r
1/30/95 5
Aborted surveillance 3-1-22 after 2 attempts to start; MS-P-168 erratic; UOR 95-014.
l 1/4/96 5
Frozen piping prevented pump from running; UOR 96-002.
l 4/5/96 7
Failure to run; water in lube oil.
i i
i 1
I
.=
n.
I i
Table Sc
(
Summary of Failures - P-25C I
Event Plant Event Summary Data condition i
1/6/93 7
Pump's breaker tripped open on attempted I
start during surveillance; UOR 93-112.
i 3
s i
i 4
?
i 3
i l
i 9
i
}
l i
i i
e a
Table 5d Summary of H9.n-Failure Events l
(For review only - not for oublished renort)
Event Plant Pump
"'""#I Date Condition P-25 l
4/21/92 7
C Pump shutdown after 9 minute surveillance run because of need to l
add oil; retarted after 43 minutes; I
tested satisfactory, l
5/28/93 7
B Aborted surveillance due to MS-P-168 l
problems; assumed problem found before attempted pump start.
8/11/94 5
B During surveillance 3-1-22, discharge flow / pressure fluctuations lead to pump overspeed trip; conditions I
considered not like an actual demand.
6/14 7
B Pump starts and stops considered to
-18/96 be related to troubleshooting of j
water in lube oil problem.
See l
4/5/96 entry in Table 5b.
I l
l I
i i
1.
l e
f I
l
_-.rNume q... -
-.......f,y gets Maine Yankee - EFW P-25A Q g) gg.y ged
{g CONDITIONAL PROBABILITY i
100.0%------------------------------------------------------------------------------------------------------
i 99.5% --------------- ----------------- ---------------------
8 i
i B
i gg,g..___ --_____-- --_--------------------_----_-----__...- - ___ -_ ---._____.____......__.
96.5% -- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
I 98.0%
-- --*--- ---------- ------------ ~~------------------ -------
t I
- - - - - - - - - - - - - - - - - - - - - ~ ~ - - - ~ ~ ~ - - - - - - - - - - - ^ - - - - - - - - - - - - - - - - - - - - - -
97.5% - - -l Conditions 7,6,5l i
i 97.0% --- MhMm i
outage months I
... Steam Generator Outage 96 5 % - -------------- -------------------- ------------------~~~~~
January 1995 - January 1996 r
Not to scale on X axis I f I
go.gs g
g g
g 2
E E
E E
E E
3 3
3 3
3 3
E E
E E
gkhhbhhkbh hhkhhb hhk b
k.
k
MtumoG f/O Maine Yankee - EFW P-25A I
3 STANDBY AVAILABillTY b se Duk Ttv Yh%ed 7 Y,'
100.0%------------------------=------------------------------------------------------------------------------
99.5% -------------------------------------------------------- ----------------------------- - -
t 99.0% -------------- --- ----------------- ------------------------- ----------------------- --- --- -
12 MONTH SLIDING VALUE 98.5% ------
-- ----------------------- ------~~~~~--------------- -'--------- -------
98.0% -------------------------------------------- -----~~--- - ------- --
i
- l CONDITIONS 7.6.5 l - - - _ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
97 5%' -
t gy_gs.. - - - -. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Breaks in chart are outa9e months 96.5% -- - - - - - - - - - - - - - - - - - " - - " - - - - " - - ~ ~ ~ ~ - ~ ~ ~ - - - - - - ' - - ~ ~ ~ - ~ ' ~ ~ ~ ~
Steam Generator outage
~~~~
'~~ ~
January 1995 -January 1996 Not to scale on X axis 1 f
' ' ' ' ' ' ' '-~~' *'~ r '
'''''2 3
3 3
3 3
3 E
E E
E 96.0 %
2 2
2 2
g g
g g
g 9
4 A
s 6
a A
6 2
a 6
e o
e a
e i
4
,e 2"
,a m
4
,m 2
,E g
h g
s 2
m z
2 2
z 7
2 2
" t q O f0-
{
4,----..-
"fb WV t*Mr f
( M'd 7
0
PROBABILITY OF START 100.0% o-c 99.5% - ----------------------------------------._-------__
99.0% ----- ------- -- --------------------------------------._______________________
lCUMULATIVE STARTS E
i 96.5% -- --------------------------------------------------
96.0% - ------ -- ------------ -----------------------------------------_.__________...._____ __
lCondieons 7,6,5l 97.5% --- ------------------ ----------- ------ ------ ------- ------- ------___.-_______.. ___
Breaks in chart are --------~~ ---~~~--- -------------------- ---------------------
97.0% -
W eh 96.5% - ----- ---- ------------------------------------ ---------
Steam Generator Outage January 1995 -January 1996 Not to scale on X axis
............, -- r r--, -- r_) (_,._.,__,,.,._,
96.0 %
?
s?
!s
?
?
?
?
?
a
?
?
4 4
4 a
a s
a a
s 4814 AI45l3 A545!4 1$4
$ij N
YY$
_ _. _ _ _fvlek(SAy/_ _ _ _ _ _ _ _ _ - - _ _ _
MAINE YANKEE - ER19-25A
$g
&_ ggd c.uk rtV YbvtM PROBACILITY OF RUN o
I 100.M E
l 99.6% -
t l
l 99.5 -
CUMULATNE RUN HOURS WITH 24 HOUR MISSION TIME i
t 96.5% - -------------------------------------------- ---------------------------------- ---
r i
Qg.
i 97.5% -- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
i i
l Conditions 7. 6. 5l
[
1; gy,q.....------------------------------ ----------------------------------------- ------- ----
j Brooks in chart are l
outage months 96.5% -------- -------------------------------------------- '--------
Steam Generator Outage-. - - - -
t i
January 1995-January 1996
(
Not to scale on X axis f
I f I
L
- 96. 5 g
g g
9 9
2 2
S S
S S.
E.
3 3
3 E.
E 8
L N.
j
{
C e
,3 b
~
,3 o
c 6
c
,e Q
,3 i
,e s
s z
z m
t n
1 h
Fi g ik
McIne Ycnkee - AFW P-25B
/9 d ff,y,gff 7 f(g CONDITIONAL PROBABILITY f
100%----------------------------------------------------------------------------------------------------
l'f i
As==ned sstor O
,_i_._ le ggg......-------- -----------------------------------------------------------------------------------
143 eierileEure 35 hr dommeme itW92 overspeed W.
O FaRwe to furt ggg 10f93 gov. problem.
Fanure so turt 113hr doumume 70 %
145 Press reg huntng Fauure to run-Fauure to start (overspeed).
MS-P-166 errauc.
lCondluons 7,6,5l T9 hre down g
_ - - - - - - - - - - - -. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - = - -.... - -.. - - - - - - - - -
Breaks in chart are Oulage(nonthe 1/96 frozen Ene. Fagure to run. -353' hrs E 4/98.Fagurt o rvq-water klube os t
50% -
6/96 water in tube oE M - 102 hrs downtmo i
Stoom Generator Outage January 1995-January 1998 Not to scale on X axis 40 %
n n
n n
g g
g g
g g
m n
n n.
.n
,8 i
M.$
j z$
,8 j
k 4
p z$
6 k
s sI a
e s
s s
z 4
y g
4 s
s
/'
1 O
d 96-unr 96-Jdy 96-qed L.
l Y.
G i
w
' 96-uer f
h g
t6-^0N a
n X
5*
l t6+s 2
,s g
. %[ 3 g ).,
r v61nr f
l l
g g. s.
l 3 m $1
' #6-AeW w
mg j
l
[ t6-jew m
l l
l nfb 4 _!
" #6-uer L
Q
- a.==
t 2
l l
i
($
l l
l l
- E6-^0N M
g l
l
- E6-des 0
9 l
g l
l l
3 a m
- E6-inr g,:-
i
>O l
l l
l i
z
! E" l
l l
l l
l l
l
- E6-Aew t
l l
l l
l l
C6-Jew l
l l
l l
l l
E6-uer l
E6-^0N E64S E61nr s
l l
l l
l m
l l
l l
l@
l l
l E6-Aen s
Q gid gs-Jen O
E6-uer h
h h
h h
h h
a s
a s
a e
e s
s
\\
a i m< A
[ 96-unc '
' 96->dy I
]
l l
{
b l
l h.
l l
[ 96-qed d,
l l
l g
g i
V.
I' r
l l
l l
96-uer
.6 -
L 2
i 3
l l
l l
l 3
5 M-^0N O
x j
g g
l l
l l
3,8 M-des 5
l l
f l
l l
l l
l l
m 3
g-inr
,o i
l l
l l
3s$
M 48W m
mg hE M-Jew 14 l
l l
l l
[g.uer H
cn h
i e
e e
O E
~ E6-^0N uJ zg
- 2 l
l l
l l
l l
- E6-des 3
Z$g l
l l
l l
l l
p
=8 i
i
- 88 "r d
Zg 2A l
l l
l l
l l
l E6-A*W IE E6-jew l
l l
l l
l l
E6-uer 0
l l
l -
l l
l l
z6-^oN W
H i
i i
I t
i
. m l
l l
l l
V E6-Inr f
~
l l
l l
l N
l l
l l
g6-AeW 3
t e
0 l
l l
P_
36-jew l
l l
l H
g E6-uer E
s I
s I
e s
s I
g
it MAINE YANKEE - AFW P-25B f<e hwhY
[gg
- 2. gf,,
C-aw du W
)1 00.0%-------------------------------------------
95.0% -
o-c 90.0% - -- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
85.0% ---- ------------- --
80.0%....------------.- ---------------. --- -- ----- --.-
CUMULATIVE RUN HOURS FOR 24 HOUR MISSION TIME 75.0% -
70.0% -------- ------ ---- ---
65.0 %
_l-------------------------------
60.0% -
@onditions 7,6,5 55.0% ---- - ----- - - --
~~-~~~~~-----~~-----
Breaks in chart are 50.0% - -
Steam Generator Outage January 1995-January 1996
- - - - - - - - - - - - - - - - - - - ~ ~ ~ ~ ' ~ ~ ~ ' ' ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ - ~ ~ ~ ~ - ~ ~ ~ - ~
Not to scale on X axis _~
~ ~
~
45.0%
I f r -
m-40.0%
S h
h N
N h
h h
h h
8 3
E E
E 8
N N
N N
N N
=
c a
6 s
,6 4
e
,s
^
=
c 6
8
,s e
4 k
4, 8zs
,6 s
s m
z m
s s
e z
4 s
s
.em.
f t Q OTG b
Maine Yankee - EFW P-25C t' relia m G-
/t&
7%$[%
CONDITIONAL PROBABILITY CawSe ouk
- I 100.0%-----------------------------------------------------------------_-----------....----_--------_...--.
i q
(
99.5% -- - - - - - - - - - - - - " - - - - - - - - - - - - " - " - " " - - " - " - - - ~ -
l h
99.0 %
'------- ~~~'~
'~
' ------- ~~~-'--
i f
--- -----~~~~ ---~~-----
-~
~
96.5% - - - - - - - - - - - - - - - - - - - - - - - - - - - " - " - - - - - - - - - - - " " " -
gg,gg __..... *. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Y
l------------------------------------
t 97.5% -
l Conditions 7,6,5 gy,q._-
outage months 96.5% - ---- ---------------------------- ------------ ----------- -
Steam Generator Outage January 1995-January 1996 Not to scale on X axis 1
)
.m 2
3 3
3 3
3 3
2 8
3 g
96.0 %
g a
2 2
2 2
2 2
g g
g khhbhhk h
h$k h
hhk kkk M
tguvv
~ -
4 O-sm 96-unc l
96->dy
)
)
f 1
1
'3 96-qeg y
l w.
7,.
l g
l j
T 96 uer
)
i l
l E
j i
- 6 ^0N g
4 O xi j
.,8;:
- t6-des i
, 1. -
[
i
. g.
e lL*
l l
l 8
961nr
-o; 4
d l
E' t6-AeW m
1 4
j - [-
1
- ! O l
96-jew e
I i G_
r
, g g 1
g l
- r. 96-ue,-
3
]g i.
. C6-^0N 4.
p 3
l 0
l E6 des
.as y
, c a! >g Q l
I O
E6-int
/
2 2
i h,,,,
4 iI" c6-Aen e
i s,
t
[ C6 Jew a
i l
l l
l l
l l
to-uer 4
i i
t l
l l
I Z6-^0N u
a 4
Z6-des m
g
'.E61nr N
m ge-Asn 3
u Z6-J8W i
o Z6-uer 9
9 c.
9 c.
9 c.
8 8
8 8
8 3
5 8
8
N j
yeiminde
,d h regey 7h[76 MAINE YANKEE - EFW P-25C PROBABILITY OF START 100.0% two---
0 9 -------------------------------------._---
t 99.5% - -------------------------- ---------------------
------------ -------- ---.- P i
gg,gg __-------_ ---------- ---------------------------
98.5% --------------------------------- ---------------- ---------- -
lCUMULATNE STARTSJ r
M.0% -.-
2-----------------------------
4 97.5 %
f lCondloons 7,6,5j gy,gs i
Breaksin chart are outage months Steam GmaW Outage 96.5 %
~~~-~~-----------
January 1995-January 1996 l
Not to scale on X axis i
l t
l f, r-.
r 9s.0%
r 9
9 2
9 9
5 8
?
?
?
?
?
4 4
4 4
3 4
8 E
R h
4 L-B
,E 4 gz
,E 4
?
^
k4 4
8
,8 8
5 s
e z
s s
a 2
s w
z t
MAINE YANKEE - EFW P-25C hee pr PROBABILITY OF RUN g,,aw stwg cot r Vuv sed 7[n(/W, 100.5 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
om
- gg,5%........._---...------------------------------------- -.---. ----................................
gg,g.
FOR 24 HOUR MISSION TIME
-- --~~~--------------------
96.5% - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - ' - -
- 96. 5
*----------------------------------------~~---------- -----------------------~~-'
97.5% -- - - - - - - - - - " - - - - - - - - - - - - - ~ ~ ~ " - - - - - ~ ~ ~ ~ ~ ~ ~ ~ - - - " - - - - - - - - - - - - - - - - - - - - - - - - - - - - - ~ ~ ~ ~
~
l Conditions 7,6,5l gy g...............---------.----------- - ---------------- ---- -------------------------
Breaks in chart are outage months 96.5% -- - - - - - - - - - - - - - - - - - - - - - - ~ ~ " - - - " - ~ ~ ~ ~ ~ ~ ~ - - - - - " - - - - ~ ~ ~ ~ ~ - - - - - - '
January 1995-January 1996 Not to scale on X axis 1 P f
4 4
4
'4 3
4 4
8 96.m s?
?
?
?
E
?
2 9
g a
2 2
,E b
4 8
E 5
4 B
,E 4
g
,5 4,
A g
j 2
s z
s s
z w
z t$ Vir'G 3
l(s STATE OF MAINE EXECUTIVE DEPARTMENT l
STATE PLANNING OFFICE ANGUS S. KING, dR.
October 10,1996 EVAN D. RICHERT. AICP covmNN DIRECTm Ellis W. Merschoff U.S. Nuclear Regulatory Commission Washington D.C. 20555-0001
Dear Ellis,
With this l'etter I would like to provide some comments pertaining to the process of the Independent Safety Assessment (ISA) ofMaine Yankee. But first I want to thank you and Ed Jordan for the full cooperation you gave to me and to other state team participants and observers.
Your doors were always open for discussions, and we were always able to work out solutions that preserved the interest and mission of the NRC and that of the State ofMaine.
A large team, as this was, required strong leadership to. move forward, and I believe your skills were exceptional in assuring that all team members wer' able to contribute and the process e
i remained focused and objective. As I read the report, I believe it is fair, objective and balanced
~ which is the result of a team made up ofindividuals who are highly qualified and confident in their disciplines, and able to critically discuss the issues in a large group.
I also want to note that this typ'e ofinspection/ assessment that the team performed was much more revealing of the Maine Yankee operation than the many " spot" inspections that NRC conducts routinely. Without doubt, an integrated inspection / assessment requires more resources from NRC as well as the licensee, however consideration to some type of periodic 1
inspection / assessment of a nuclear power plant in lieu of " spot" inspections may be of greater benefit to the NRC, the public, and to the licensee.
As for comments on the process, I offer the following:
1)
NRC should continue to offer States to participate in inspection / assessment activities.
However, if states are offered full participation privileges, care must be taken to assure the independence of State participants as well.as those of the NRC with regards to regulation or oversight of the licensee. The independence of a team must be preserved, as it was in the Maine i
Yankee ISA, to provide a fresh look at a nuclear power plant operation and to give credibility of l
the results to the public.
2)
As with this team, State participants must be full time members of the team to assure a full understanding of the issues that are brought forth.
38 State 9t'ation, Augusta. Maine o4333 - Offices located at 184 Stata Street-Rf,, s
~
- ' Telephone (207] 2,874261 / FAX (207) E87-6489 nI to
1 I
3)
I thought the use of State process observers worked well, and I think it would be l
appropriate and useful to provide a limited number of opportunities where the process observers can express their thoughts and provide comments on issues and tne process with the full team present.
4)
The NRC team leader has the most influence and control to assure an inspection / assessment is technically comprehensive and supportable, as well as retaining the fairness, objectivity and balance. The criteria and/orjudgment that was used in choosing the NRC team leader for the Maine Yankee Independent Safety Assessment is appropriate and should be considered in the formation future teams.
5)
As a final comment, I thought the organization, management, and process control of the team was excellent and should be used as a model for future NRC / State cooperative efforts.
It was a pleasure to work with the NRC through the summer, and I wish you well.
Sincerely,
&c Uldis Vanags State Nuclear Safety Advisor cc:
Edward L. Jordan, Director AEOD, US NRC Governor Angus S. King, JR.
Peter Wiley, Office of the Governor
.o
-e e '
1 July 9, 1996
)
i l
Dr. Forrest J. Remick l
305 E. Hamilton Avenue l
State. College, PA 16801-5413' l
l l
Dear Dr. :
Remick:
It is our understanding that you will advise the State of Maine regarding 1
NRC's Independent Safety Assessment of the Maine Yankee Nuclear Power Plant.
Your expertise and insights will be greatly appreciated during this l
comprehensive evaluation.
As a representative of the State of Maine, we understand you will participate as a consultant to the State, associated with j
observation of the Independent Safety Assessment' Team process, reporting j
i directly to Mr. Uldis Vanags, a State of Maine official, for this assignment.
)
Because of the sensitive nature of this effort, certain protocols were agreed to during previous discussions with the State and are in accordance with NRC Policy and NRC Management Directive 5.2, " Memoranda of Understanding With l
States." These protocols are outlined in the enclosed Memorandum of Understanding.
Please sign and return this Memorandum of Understanding as soon'as possible. Thank you-fo. your cooperation.
If you have any questions, please contact me or Ellis Merschoff at (301) 415-6954.
i Sincerely, l
Onginal Signed by:
E. L Jordan -
Edward L. Jordan, Director Office.for Analysis and Evaluation l
of Operational Data Docket No. 50-309 i
Enclosure:
Memorandum of Understanding l
cc:-
Chairman Jackson j
l Commissioner Rogers
' Commissioner Dicus J. Taylor, NRC D. J. Chawaga, NRC SECY
'1 k
a l
l Q
\\
x j
k
l l'
Mcaro e
t UNITED STATES 3
j NUCLEAR REGULATORY COMMISSION 2
WASHINGTON, D.C. 206 6 0001
\\...s p#
July 9, 1996 Dr. Forrest J. Remick 305 E. Hamilton Avenue State College, PA 16801-5413
Dear Dr. Remick:
It is our understanding that you will advise the State of Maine regarding i
NRC's Independent Safety Assessment of the Maine Yankee Nuclear Power Plant.
Your expertise and insights will be greatly appreciated during this comprehensive evaluation. As a representative of the State of Maine, we understand you will participate as a consultant to the State, associated with observation of the Independent Safety Assessment Team process, reporting directly to Mr. Uldis Vanags, a State of Maine official, for this assignment.
Because of the sensitive nature of this effort, certain protocols were agreed to during previous discussions with the State and are in accordance with NRC Policy and NRC Management Directive 5.2, " Memoranda of Understanding With States." These protocols are outlined in the enclosed Memorandum of Understanding.
Please sign and return this Memorandum of Understanding as soon as possible. Thank you for your cooperation.
If you have any questions, please contact me or Ellis Herschoff at (301) 415-6954.
Sincerely, f
i dwar Jordan, Director Offi e for Analysis and Evaluation of perational Data Docket No. 50-309
Enclosure:
Memorandum of Understanding cc:
Chairman Jackson Commissioner Rogers Commissioner Dicus J. Taylor, NRC D. J. Chawaga, NRC SECY
')
e
J)0'ff4 l.~
\\ s F. J. Remick 2
l Distribution:
J. M11hoan, ED0 V. McCree,-EDO l
W. Russell, NRR PDI-3 Plant D. Morrison, RES S. Varga, NRR
-T. Martin, RI J. Zwolinski, NRR S. Ebneter, RII P. McKee, NRR H. Miller, RIII E. Peyton, NRR L. Callan, RIV E. Trottier, NRR D. Rathbun, OCM ACRS i
W. Beecher*, OPA J. Rogge, RI K. Cyr, OGC Docket File 50-309 J. Lieberman, OE AE00 R/F G. Caputo, 01 File Center W. Olmstead, 0GC Public D. Ross, AE00 l
- FOR PREVIOUS CONCURRENCE SEE ATTACHED COPY DOCUMENT NAME:A:\\MYASTATE.M0 l
T. w.. n.: m. w we. in e. h.c v - c.n wah.c.m v - en 59 i v - u. c.n l
,M NAME
- EWMerschoff:obw
- KCyr RBangart" fV DATE 07/
/96 07/ /96 07/tjf/96 27/ /96 0'i/ /96 c
0FFiCE RECORD COPY r
4
' '4 e
F. J. Remick 2
Distribution:
J. Milhoan, ED0 V. McCree, ED0 W. Russell, NRR PDI-3 Plant D. Morrison, RES S. Varga, NRR T. Martin, RI J. Zwolinsk;, NRR S. Ebneter, RII P. McKee, NRR H. Miller, RIII E. Peyton, NRR L. Callan, RIV E. Trottier, NRR D. Rathbun, OCM ACRS W. Beecher, OPA J. Rogge, RI K. Cyr, 0GC Docket File 50-309 J. Lieberman, OE AE0D R/F G. Caputo, 01 File Center W. Olmstead, 0GC Public D. Ross, AE00 l
DOCUMENT NAME:A:\\MYASTATE.M0 Te rese6se e sayy of thi)s ssipant, innsato in the her "C" - Copy without enclosures *E" - Copy with enclosures "N* - Ne copy 0FFICE AJiG6)(V OGC OSP l
l NAME fiDIeffeffoff:obw KCyr %;Il Oksf8d RBangart DATE Af6fft/96 4Hr/3 /96_
06/
/96 06/ /96 06/
/96 7 0FFICE RECORD COPY