ML20149E162

Marked-up Safety Evaluation Re Proposed Safe Shutdown Sys & Exemption Requests Concerning 10CFR50,App R

ML20149E162
Person / Time
Site:	Fort Saint Vrain
Issue date:	12/18/1987
From:	Office of Nuclear Reactor Regulation
To:
Shared Package
ML20149E150	List: ML20149E148 ML20149E162
References
TAC-54373, NUDOCS 8802100360
Download: ML20149E162 (36)

Text

' '

/, ,.a a c og'o UNITED STATES

.e ]3E NUCLEAR REGULATORY COMMISSION WASHINGTON, D. C. 20555

\..../ SAFETY EVALUATION BY THE OFFICE OF NUCLEAR REACTOR REGULATION RELATING TO THE PROPOSED SAFE SHUTDOWN SYSTEM aND EXEMPTION REQUESTS CONCERNING 10 CFR PART 50, APPENDIX R FORT ST. VRAIN NUCLEAR GENERATING STAT,Ig PUBLIC SERVICE COMPANY OF COLORADO DOCKET NO. 50-267

1.0 INTRODUCTION

This Safety Evaluation addresses the compliance of the Fort St. Vrain Nuclear Generating Station (FSV) with 10 CFR Part 50, Appendix R, Sections III.G and III.J concerning fire protection programs for nuclear power facilities. The NRC regulatory criteria that form the complete fire protection licensing basis for FSV also include:

R

- Appendix A to Branch Technical Position APCSB and 9.5-1,f ev.1 PSC letter of August 17, 1984 from Lee to Johnson (P-84281)

(Reference 14). This is also contained as Appendix A of Referenc a.

, Nth Ie , % 3& - 77 o 4 , ,,+. g, ,, p , 2 ga ,g 3 L pu,_,

By letter dated ugust $ 1987 ( erence 15)M , theo,-77/o}

NRC rea firmed the above positions represented the applicable regulatory basis for fire protection at Fort St. Vrain. This position has remained unchanged from earlier correspondence, including Reference 13. This evaluation discusses both the proposed post-fire seet shutdown systems and the exemptions requested.

u d *I?rc N '

1.1 Post-Fire -$sse Shutdown Systems A review of the post-fire sek shutdown systems, proposed by Public ServiceCompanyofColorado(PSC)forFSVfireprotectionconsiderations%

was undertaken by Region IV personnel, in accordance with TIA 83-105, in October 1985. The initial review of the PSC proposal (Reference 1) resulted in a ntmber of questions which were transmitted to PSC by NRC letter dated November 1, 1985 (Reference 3). PSC responded to these questions in their December 20,1985 letter (Reference 4) which deferred S M eth i of an analys si to justify the effectiveness of the proposed subm cimletionweeldowmodels ttal 1 De ferced until the fourth quarter of 1986.

T he - approved - f i re - p ro t ec t i o n- p rog ram - pl a n-wRT-be- s ubm i t t ed - wMh-t he-next-FSAR-Update r -per-Generic-Letter-86-1Qf pending-receipt-cf-the Appendix-R-Safety-Evaluation. 76ej"#s7 f,,1 g f,.c /km u nt p!as was solu.JtY<) ,De c 15, ryg 7 (g,Q,,.cnc, 20) eso21oosso DR econoa ADOCK 05o00267 PDR

.g.

Review of the December 20, 1985 response resulted in a number of followup and clarification questions which were discussed during a telephone con-ference on February 26, 1986, and documented in PSC letters dated March 14 and April 4, 1986 (References 5 and 6, respectively).

1.2 Ey mption Requests By letter dated April 1, 1985 (Reference Id), the licensee submitted Appen-dix R Evaluation Report No. 4, which contained exemption requests and pro-posed fire protection and systems-related modifications. Eleven exemptions from the technical requirements of Section III.Gyaf+one exemption from Section III.J of Appendix R to 10 CFR Part 50 were requested t- d u .sdN b e4 W IA #

By letter dated May 31, 1985 (Reference 2), the licensee submitted ReportlocrB##J8 No. 5. "Fire Hazards Analysis and Evaluation of Fort St. Vrain Building No. 10 to BTP 9.5-1, Appendix A Guidelines."

Section III.G.2 of Appendix R requires that one train of cables and equip-ment necessary to achieve and maintain post-fire sede shutdown be maintained free of fire damage by one of the following means:

a. Separation of cables and equipment and associated non-safety circuits of redundant trains by a fire barrier having a 3-hour rating. Struc-tural steel forming a part of or supporting such fire barriers shall be protected to provide fire resistance equivalent to that required of the barrier;

b. Separation of cables and equipment and associated non-safety circuits of redundant trains by a horizontal distance of more than 20 feet with no intervening combustibles or fire hazards. In addition, fire detectors and an automatic fire suppression system shall be installed in the fire area; and

c. Enclosure of cables and equipment and associated non-safety circuits of one redundant train in a fire barrier having a 1-hour rating. In addition, fire detectors and an automatic fire suppression system shall be installed in the fire area.

4 If these conditions are not met,Section III.G.3 requires an alte. native shutdown capability independent of the fire area of concern. It also i requires that a fixed suppression system be installed in the fire area of concern if it contains a large concentration of cables or other combustibles.

These alternative requirements are not deemed to be equivalent; however, they provide equivalent protection for those configurations in which they are accepted.

Because it is not possible to predict the specific conditions under which fires may occur and propagate, the design basis protective features are specified in the rule rather than the design basis fire. Plant specific features may require protection different from the measures specified in 1

1 8 Section III.G. In such a case, the licensee must demonstrate, by means of a detailed fire hazards analysis, that existing protection or existing protection in conjunction with proposed modifications will provide a level of safety equivalent to the technical requirements of Section III.G of Appendix R.

In summary,Section III.G is related to fire protection features for ensuring that systems and associated circuits used to achieve and maintain post-fire

+ede shutdown are free of fire damage. Fire protection configurations must either meet the specific requirements of Section III.G or an alternative fire protection configuration must be justified by a fire hazard analysis.

Our general criteria for accepting an alternative fire protection configur-ation are the following:

The alternative ensures that one train of equipment necessary to achieve bot shutdown from either the control room or emergency control stations is free of fire damage.

The alternative ensures that fire damage to at least one train of equipment necessary to achieve cold shutdown is limited such that it can be repaired within a reasonable time (minor repairs with components stored onsite).

Modifications required to meet Section III.G would not enhance fire protection safety above that provided by either existing or proposed alternatives.

• Modifications required to meet Section III.G would be detrimental to overall facility safety.

2.0 EVALUATION 2.1 Post-Fire Se(s Shutdown Systems The evaluation of the%( post-Wre shutdown systen models was based on the Appendix R fire protection regulatory guidance contained in PSC's August 17, 1984 letter. This letter is included as Appendix A to Report No.1 (see Refer-encesla and reflects the guidance provided by the NRC staff for fires in congest')ad cable areas and noncongested cable areas.

L awd if It was noted (see Figures 4.4 through 4.18 of Reference Ic) that some elec-trical cables for Train A and Train B components are located in close l proximity within the same fire area (s). The licensee is rerouting some of these cables to improve separation, and it is expected that the electrical  ;

separation specified in the exemption requests and proposed modifications  !

will be verified during NRC inspections, after modifications are complete.

l

9 .

4 2.1.1 Conaested Cable Areas The criteria delineated in the ragulatory guidance for fires in con-gested cable areas were based on the use of the Alternate Cooling Method (ACM). (The congested cable areas are defined as the Control Room, 480 Volt Switchgear Room, the Auxiliary Electric Room, and the congested cable area along the "G" and "J" walls) (see References 13 and 14).

The ACM is an independent, diesel driven, 2500 kW electrical generator with an associated distribution system that is used to provide powe w to selected plant components through manual transfer switches. CO_nder ACM liner cooldown, the initial action is depressurization which must be initiated within approximately two hours; other actions are not requ_i_ted_for_aJLuch longer time period (e.g. , liner cooling must be e^jf, g g ~~Tnitiated within TMety hours), but can be initiated much sooner.

The ACM provides a source of Prestressed Concrete Reactor Vessel (PCRV)

Liner Cooling Water (LCW).G6Jhe procedure used to place the ACM in operation (A10P 48-01)wM is-inc4uded-a ndi" O to Reference-lar.

avely NonAce l7, /787.

be.cm e- -

The NRC approval of the ACM is contained in the Safety Evaluations attached to License Amendments 14, 18, and 21 (References 7, 8, and 9).

Since the licensee states (see References 4 and 5; Item 6.b) that "the design, loads and intent of the ACM has not been modified sig-nificantly since its use was approved," no additional review or approval was required.

2.1.2 Noncongested Cable Areas The criteria delineated in the regulatory guidance for fires in non-congested cable areas were based on the requirements contained in Section III.L of Appendix R to 10 CFR Part 50. The application of these criteria that apply to Fort St. Vrain is specifically defined in References 13 and 14. The limiting consequences require that, "For any single fire in a non-congested cable area, means shall be available to shut down and cool down the reactor in a manner such that no fuel damage occurs (i.e., maximum fuel particle temperature does not exceed 2900 degrees F). Tliere shall be no simultaneous rup-ture of both a primary coolant boundary and the associated secondary containment boundary such that no unmonitored radiological releases of primary coolant occur."

The means proposed by PSC in Reference la and updated in Reference 18, to shut down and cool down the reactor, consist of two trains (A and B) cf post-fire sofrshutdown systems which provide for reactivity control, PCRV integrity, and decay heat removal.

- j l

• l 1

2.1.2.1 Reactivity Control Reactor shutdown is accomplished by insertion of the 37 control rod pairs via a manually or automatically initiated reactor scram. A scram is accomplished by interrupting the power supply to the Control Rod Dri CMechanisms (CRDMs) and their associated holding brakes which allows the control rods to fall by gravity into the core. Two Wide Range Nuclear Instruments (one per train) are utilized to monitor the core GfIn addition, thewrt.dk MAh  % sObwt Y " # ' b] FSf *"

FSV design in:ludes a Reserve Shutdown Sy'stemh'w,fil h @"

~

can be manually actuated to insert se rate neutron absorbing materialLC033',I+'l into the core for reactivity control "The p0:t-fir; hutdewn proceduce d kclud : On in:tteeMon-that :hould nucl;;r in:tru;&ntati;n bi 3. l. /, .

unavailabl:, ;;;rator: Or: t0 : tiv:t: a:: Of th: h:;rv; Shutd;wn System, in shetting de-n fellowing a Tire eveni.."

Since, (1) there is a high degree of assurance that sufficient neutron absorbing material can be inserted to make the reactor subcritical, (2) there will be little effect on core reactivity except for tempera-ture enanges, and (3) there are adequate provisions for monitoring the core reactivity, we find the reactivity control provisions to be acceptable.

2.1.2.2 PCRV Integrity The shutdown models made the assumption that the integrity of the PCRV would be ensured by maintaining the decay heat removal function.

PSC subsequently provided (in Reference 4) the results of a study which found that "the absence of liner cooling had no significant effect on maximum fuel or orifice valve temperatures while forced cir-culationcoolingisfunctioning."f In addition to maintaining the structural integrity of the PCRV, the integrity of the various PCRV penetrations must also be maintained to control the primary coolant inventory. The majority of the penetra-tions are through the top head of the PCRV. These consist of 37 CROM

and purification system penetrations. Steam generator and helium circulator penetrations are located in tha bottom head, and the safety valves and instruments penetrate the sidewalls. All penetrations have a double closure design and are relatively unaffected by fires from a loss of integrity viewpoint. A summary of the PSC evaluations is contained in Reference la, Section 2.1. ,

i Based on the results of the above study, we find the PCRV integrity provisions to be acceptable.

In Reference 16, PSC concluded that "the PCRV concrete will remain below the 600 degrees F ASME code allowable following an Appendix R

, event from 83.2% power, with the liner cooling system inoperative an indefinitely long time."

pb Pa% ~ W 2.1.2.3 Decay Heat Removal (DHR) mir- W TheghutdownmodelforOHRproposedinReferencela[consistsoftwo trains of components which provide for core heat removal, primary coolant inventory control, process monitoring, and secondary heat removal.

a. Core Heat Removal Thecore-heat-remov6-model

1. ucr- Mc- d.Nwt contains the following flow paths:

Trein A Cendensete Pump 10 pre, ides cendensetrf 6 f cem the OHR Exchager-threvgh e steee-generatoe-end & heiite-ef ectriator, and Leck tWewgh the-0llR Cxchanger.

Train A - Condensate Pump IC provides condensate flow from the Condensate Storage Tank through a steam generator to atmosphere

/W 7- for the first five hours after a fire. Thereafter, the flow from the steam generator is recirculated through the DHR Exchanger.

The Condensate Pump 1C also recirculates flow through a helium circulator in both modes of operation.

Train B - The diesel driven fire water pump provides flo,e from the msin cooling tower through a steam generator and a he fum circulator.

to the W A= MThese building flows sump 3are vented re yect,ve ly to e4 r9 turned%d

, the atmosphere,

- le

• These flow paths arefshown schematically in Figures 2.1-8 and 2.1-9 in Reference D; copies of which are included in this evaluation as Attachments 1 and 2. A discussion of various aspects of these flow paths is contained in the following para-graphs. l

1) The electrical power supplies utilized are the ACM diesel generator (OG) for Train A components and Emergency Diesel Generator (EDG) set 8 for Train B components. The use of the ACM DG was necessitated by the lack of sufficient separation between the A and B EOG electrical cables. The proposed ACM DG electrical flow path runs from the 4160 volt ACM bus to the HVAC switchgear bus, to its feeder supply at the Reserve Auxiliary Transformer, through the feeder to the 4160 volt switchgear Bus 2 where it can be cross-connected to either Bus 1 or 3. The 4160 volt buses provide power to their associated, essential, 480 volt buses (1, 2, and 3). The EDGs provide power directly to the associated 480 volt essential bus; EDG A to Bus 1, EDG B to Bus 3. (These flow

.. paths can be seen on Figure 8.2-5 of the FSV FSAR.)

The proposed means to provide electrical power are acceptable.

The adequacy of procedurea, testing and trahi ing wi'l be verified during routine inspection activities.

2) iwt- M t c h i/2 6 t Theeffectivenessif'theflowpathsthroughthesteamgenerators in the proposed'modelf was questioned in Reference 3. The requested analyses were submitted by PSC letters dated- O Q wY , libIT7 &-87eff)C% . _;r M,1^0C (? C55), and May 1,1987 (P-87159) (Refer-ences 16 and 17). L a gased on a review of the available information, the conceptual designs of the flow paths are acceptable provided: (a) the above analysis verifies the 3 - - . -

7 effectiveness of the flow path, and (b) sufficient makeup a.

water capability is demonstrated. The review of these analyses will be the subject of a separate Safe)y Evaluation, r P00^ % sLdlean

3) The design of bothPTrain A and 8 utilizes the service water system. Train A includes the use of the DHR Exchanger to transfer the heat removed from the primary coolant in the steam generator to the service water system. A discussion of the service water system is contained in% subsequent sub fodparagraph Wr " (d) on secondary heat removal. c L,jn gb.%p ded

4) Bothn shutd' awn,00:!% trains provide for the opkorationElQe* o one Helium Circulator to transport the heat in the reactor -

core to the steam generators; Train A utilizes condensa)e d '" 7 flow directly, Train B utilizes fire water through the' water booster pump to drive the circulator's water turbine. A review of FSAR Section 14.4.2.1, indicates that "One helium circulator c e provide nearly 4.5% of rated flow through the reactor core when operated by itself with condensate water supplied to this water-turbine drive." However, for Train B, oparating on boosted fire water, approximately 3%

of rated helium flow can be achieved. Based on this infor-matior the primar Y d Re.9y flow tx requirement esc.es 16 can & I7 be met.

The water used to drive the water turbine of the circulators discharges into the Turbine Water Drain Tank where it is removed by one of two Turbine Water Removal Pumps. The tarA is common to both trains and the pumps are located approximately 5 feet apart; therefore, adequate separation it not maintained. However, the licensee has proposed to i

compensate for potential fire damage to both pumps by imple-me n t i ng-a-repa i r- p roc edu re-u s i ng -a - po r t abl e-t u rbine-wa te r-l remov a l- pump- a nd-c a s u a l ty-c able. The-edequacy-of-this-pros cedure-will byverified-during-future-staff-inspectionss p~8n_w a % Um.

h cddition, PSC will permanently install a third Turbine Water Removal Pump a minimum'of 50 feet from the existing tank and pumps. This pump will be used in normal plant operation and also meet the criteria of redundant Appendix R emergency shutdown equipment.

A review of the ability to operate the circulators with the proposed auxiliary equipment (see Attachment 3 for fluw diagram) disclosed provisions for providing bearing water but not for providing a source of the buffer helium for shaft sealing. The PSC response (Reference 4 Item 8) addressing the acceptability of operating a circulator without bu~fer helium indicates that tests which were conducted showed that there would be little effect on either helium egress or water ingress. Therefore, the bearing water system is adequate.

l

1 I

.g. 1 The makeup source to the bearing water system is from the ,

condensate tanks via the Emergency Bearing Water Makeup Pump for Train A and the normal Bearing Vater Makeup Pump for Train 8, both of which can be cross connected. While the makeup systems appear to be acceptable, the power supply cables lack the required separation. The licensee proposed modifications which will result in greater physical separation of the cables. These modifications have been reviewad and found acceptable as discussed in our evaluation of the exemption regt.est for the Reactor Building (See Section 2.9).

b. Primary Coolant Inventory Control Primary coolant inventory is controlled by maintaining PCRV integrity. A discussion of PCRV integrity is contained in Section 2.1.2.2, above.

c. Process Monitoring The process monitoring function is required to confirm PCRV integrity, core heat removal and secondary heat removal.

1) PCRV Integrity Monitoring PCRV integrity can be monitored by the use of primary coolant pressure and temperature indications, if available. PSC has, however, requested an exemption from monitoring PCRV integrity in their request for exemption from the requirements contained in Section III.G.2 of Appendix R for the reactor building. The basis for this exemption request is adequats.

2) Core Heat Removal and Secondary Heat Removal Monitoring Core heat removal monitoring is proposed to be accomplished by monitoring primary coolant flow in conjunction with secon-dary heat removal monitoring (i.e., steam generator flow and exit temperature). Coolant flow is detected by moni-toring the differential pressure across the circulator; the secondary heat removal is detected by monitoring feedwatermd_

flow and steam generator exit temperature d hen questioned on the adequacy of this design, PSC responded (Reference 4, gn-ssurg Item 15) that if primary flow could be confirmed, heat would be transferred to the helium as it passed through the core,6 and temperature m 6 and that would monitoring verify steam decay heat generator removal. The flow f /edwater flow instru frestm ments have a range of 0-1,200,000 lb/hr. and the condensate flow available is about(3 percent of the range. Thus, accurate flow measuremen't is possible.

77 Inorder[oadequatelymnnitorheatremoval,PSChasproposed to only monitor the steam generator exit for constant or decreasing temperature Since, the governing parameter for 9

& cnSSO resstWc f -

9 i

the heat removal process is to maintain adequate subcooling margin on the steam generator outlet, this proposal is accep-table.

In addition, the circulator flow instruments lack the required separation and are included in the reactor building exemption request. The adequacy of the proposed instrumen-tation has been addressed in the exemption request evaluation (see Section 2.9),

d. Secondary Heat Removal ,

-r,do O As discussed above, secondary heat is removed A through the use of the OHR Exchanger where the decay heat, which was transferred to the feedwater in the steam generators, is transferred to the service water system. The service water models are shown sche-matically in Figures 2.1-11A and 2.1-11B of Reference if. These figures are included as Attachments 4 and 5. 18

1) The Train A service water (SW) system utilizes a SW pump to provide flow from the SW cooling tower through the SW strainer to the various system cooled components or "loads." The return path from these loads is back to the SW cooling tower where one of the SW cooling tower fans is operated to reject

the heat to the atmosphere. Makeup flow to the SW cooling tower is provided from the domestic water supply. Tne SW pump and the tower fan can all be powered from the ACM DG.

2) The Train B SW system utilizes a circulating water pump to

! provide flow from the Main Cooling Tower to the SW system, through the various loads, and back to the tower. The licensee's evaluation of the need for operating a Main Cooling

b. e Tower Fan is contained in Reference 4 Item 5. This evalua-(M D g g

, d lesA tionkoncludes that if cooling assistanc ta desired, either A (a)' makeup water may be added or (b) a f may be operate .

- ,s .y.m g4 8 m, y 3) PSC provided a discussion of single failure consideration for ccaponents common to both proposed trains of SW in Reference 4, Item 1. In particular, the SW strainer and the flow control valves to the various loads were addressed.

Since these components are water-filled mechanisms which can be manually operated, their use was determined to be acceptable.

2.1.3 Implementation of Post-Fire Geh- Shutdown Modelp The ability to physically implement the required flow paths for the post-fire satur shutdown trains discussed in the preceding section as also evaluated. This evaluation considered whether the flow paths ,

were physically practical and if the flow paths could be established  !

within the required time period. '

i I

m 10-2.1.3.1 Establishing Flow Paths A review of numerous facility piping and instrumentation drawings (P& ids) showed that the proposed flow paths were possible, but that numerous interconnections and alignments would be necessary.

In response (Reference 4, Item 2b) to questioning on why all valves necessary to complete the flow path were not included in the listings provided in Reference la, the licensee stated that only those manual valves whose positions are required to be changed were listed. Further PSC reviews did identify some additional manual valves which were g g Added to the listings. (All power operated valves ace tMecKed, whether required to change position or not.) The plant procedures do not require a check of valve positions on a routine basis but only when returning a system to operation following an outage. A further discussion of the PSC position, contained in Reference 10, states that the existing controls are adequate and that controls over non-Technical Specification systems / components will be incorporated in the Fire Protection Program.

The acceptability of the valve lineup surveillance will be evaluated during an NRC inspection.

The description of the utesMeg-program-to-be-implemented-to-vef4fy the-operabi'ity of the pmposed-po:t-fire :afe-shutdown-models,"

teques t ed-in-R e fe re nc e-3 ;-h a s-no t-be e n-re c e ived . Toe 4fscussions cont a i ned -i n-Re fe rences-4-and-5-O tem-1H-do-no t-eppea r to-ind k a te tratany-integrated-systems = testing-oechysical wthdownseare-planned.

(khether or not adequate testing and adequate walkdowns have been pe -

/M86RT 3 \ formed will also be determined during an NRC inspection. - -

gd - f6 e .Ad j e The availability of the Fire Protection detection and suppression equipment and the Fire-Protection!6hutdown/Cooldown equioment will be demonstrated through the Fire Protection Operability Requirements submitted to the NRC on December 15, 1987, as part of the FSV

/ Fire Protection Program Plan. Upon approval of the Fire Protection j

Technical Specifications. Program Plan, PSC will request deletion of the FSV i

PSC has proposed demonstrating the g operability of a Fire-Protection-Shutdown /Cooldown 4 rain in ja < d-post-fire environment 4 -

" c % & J p .?He.

2.1.3.2 Manual Actions and Timing fd - h.+ haw _ _

( t- W e A concern was raised in Reference 3 that the numerous manual actions required to implement the>5hutdown models may require more manpower than would be available. The PSC response contained in Reference 4 (Items 12 and 13) concluded that all required manual actions could be accomplished within the required time limit of 90 minutes by the nine personnel required to be on shift. The response stated that although five personnel are dedicated to the Fire Brigade, the remaining four_,_..pec[

operating independently for 85 minutes, could implement the4 Shutdown W,e model. It was noted that all actions were assumed to be mutually independent ami that no supervision nor control room moritoring had been considered. PSC agreed to perform a more realistic assessment of the manpower requirements in Reference 5. PSC has now provided for ten personnel on shift and has made an assessment of the manning required to accomplish required manual actions for each fire area (Reference 11). This includes control room manning. Subject to con-firmation through NRC inspection efforts that procedures and training are adequate, we conclude that the proposed staffing level is acceptable.

IP 2.2 Exemption Request for Three Room Control Complex and Dit p1 6Jnerator Rooms 2.2.1 Exemption Requested The licensee requested exemptions frefd the technical requirements of Section III.G.2 of Appendix R to 10 CFR Part 50 in these areas to the extent that it requires that openings in 3-hour rated fire barriers be protected with siltillarly rated fire dampers, doors, and penetration seals.

2.2.1.1 Discussion (Three Room Control Complex)

/ rew1 The Three Room Control Complex has been considered as a single fire area. It bduses the 480-volt switchgear room, the auxiliary electric [

equipmentFbattery rooms, and the control room. The perimeter walls are constructed of reinforced concrete and have a 3-hour fire rating.

They have unrated dampers ese H'!AC hi. nnu. an R waiin. The 6 per: :r: designed to close automatically when the Halon fire suppres-sion system actuates. Doors in the Thr;; h. Control Lyk,, -...J.Fy Roo m fire wal h were originally UL-labeled, 3-hour fire door assemblies; however, hardware has been changea and security modifications have been made. As a result, these doors are not now considered 3-hour fire doors. The penetration openings in the Three Room Control Complex walls are sealed with both fire-rated and unrated penetration seals.

The walls feature some steel columns which are partially embedded within the walls. The exposed steel is unprotected inside the lower two rooms of the Three Room Control Complex proper. The f teel columns in the control room itself are enclosed by concrete blocks. The steel columns are not an integral part of the concrete wall from the stand-point of structural integrity or fire rating. In the event of a fire, the vertical loads carried by these steel columns will be transferred to the concrete walls and down to the foundations, dxllruy water spray fire suppres-Existingfireprotectionconsistsofhalonap[lectrica sion systems in the 480-volt switchgear and't ] equipment rooms; a halon fire suppression system in the control room, a partial fire ,

detection system in the control room and area-wide fire detection systems in the rest of the Three Room Control Complex; and portable fire extinguishers and manual hose stations. In addition, automatic water spray systems exist along the "G" and "J" walls outside of the CoM j ~ Th'resi~Roo# Complex. In Appendix R Evaluation Report No. 4, the licensee committed to repair the doors in the west wall of the Three Room Control Complex and to upgrade the seals in the west wall to be 3-hour fire rated.

2.2.1.2 Discussion (Diesel Generator Rooms) l The diesel generator rooms are considered as two separate fire areas. l They are bounded by reinforced concrete walls and ceiling having a l fire resistance rating of at least 3 hours3.472222e-5 days <br />8.333333e-4 hours <br />4.960317e-6 weeks <br />1.1415e-6 months <br />. Several unrated dampers exist in the HVAC duct penetrations of these walls where they form a I

J

4 common boundary with the Turbine Building. The dampers were installed ,

in conjuncticn with the existing carbon dioxide fire suppression system l for each room and are designed to close when the system actuates. No unprotected penetrations exist in the common wall between the diesel generators. Existing fire protection includes fire detection systems, the above-referenced automatic fire suppression systems, portable fire extinguishers, and manual host stations.

The licensee justifies the exemptions in these areas on the bases of the existing ( protection, the proposed modifications, and the ability to shut down the plan in the event of a fire.

2.2.3 Evaluation The technical requirements of Section III.G are not met in these locations because the penetrations of the 3-hour fire barriers are not all protected by doors, dampers, or penetration seals that have a 3-hour fire rating. In addition, there exists some unprotected steel in the perimeter walls of the Three Room Control Complex.

We were concerned that in the event of a fire of significant magnitude, products of combustion would pass through the wall and damage redundant /

alternate shutdown systems on the other side. However, the areas on both sides of these walls are protected by automatic fire detection systems as (tescribed in the Appendix R Evaluation Report. These systems alarm in the Control Room. We therefore expect that any potential i fire would be detected in its incipient stages before significant flame spread or room temperature rise occurred. The plant fire brigade would then be dispatched and would put out the fire using manual fire fighting equipment.

If rapid fire spread occurred, the automatic fire suppression systems would actuate to control the fire and reduce the rise in ambient temper-ature. Until this occurred, the existing walls which surround these i areas would act to confine the effects of the fire to the area of origin.

Because openings exist in the walls, we expect a quantity of smoke and hot gases to pass through them and enter the adjoining locations.

But the smoke would be so dissipated and the hot gases would be cooled ,

to the point where, in our judgment, they would not represent a sig-nificant threat to shutdown 7:!:t:1 systems outside of the fire area.

t pesN-Rre

. 2.2.4 Conclusion Based on our evaluation, we conclude that the licensee's alternate i fire protection configuration, with the preposed modifications, will '

achieve an acceptable level of fire saf9ty equivalent to that provided by Section III.G.2. Therefore, the licensee's request for exemption for a complete 3-hour fire barrier in the Three Room Control Complex and Diesel Generator Rooms should ce granted.

4 2.3 Exemption Request for Control Room 2.3.1 Exemption Requested The licensee requested an exemption from the technical requirements of Section III.G.3 of Appendix R to 10 CFR Part 50 to the extent that it requires that a fire detection system be installed throughout a fire area that has been provided with an alternate shutdown capability.

2.3.2 Discussion The Control Room is a separate room .sithin the Three Room Control Complex. It is bounded by walls that have a 3-hour fire rating, except for the doors, dampers, and penetra+, ion seals which are evaluated in Section 2.2.

The principal fire hazard within the area consists of cable insulation, rdem F.W sfes> and paper. Existing fire protection includes an areawide halon fire suppression system, fire dctectors in the control room cabinets and consoles, portable fire extinguishers, and manual hose stations.

The licensee justifies the exenption on the basis of the existing protection, the continuous presence of control room operators, and  ;

after the fire, independent i of the Three Room Controi Ccmpl-x, theabilitytoseMyshutdowr,theplantg/,}f~

i

. ,[

2.3.3 Evaluation The technical requirements of Section III.G are not met in this loca-tion because of the absence of a fire detection system that provides areawide coverage, g We were conceriled that be;ause of the absence of an areawide' fire r

detection system, a fire could develop which would damage shutdown systems to the extent tiat the plant could not be 5ef.'y shut down 44[

after the fire. However, the control room is t ntinuously manned and i automatic smoke detectors are located in the cc.itrol room cabinets and consoles. We, therefore, have reasonable assurance that a fire would be detected and soppressed by the control room operators or the plant fire brigada earlj, before significant damage occurred.

If a serious fire developed, the existing halon fire suppression system J would te manually actuated to put out the fire or control it until the plant fire brigade arrived.

/p h j QJ.

If such a fire caused the loss of redundant posp ,/ fi re shutdown systems, the Alternate Cocling Method is available to W the plant.M i %

htdn cdition. This ACM capbility is physically and electrically j independent of the Three Room Ccatrol Complax. Therefore, an areawide fire detection system in the Control Room is not necessary to provide us with reasonable assurance that a fire would be detected and gsede shutdown capability maintained free of firc acmage. ,g/ . Q-

2.3.4 Conclusion Based on our evaluation, we conclude that the licensee's alternate fire protection configuration provides an acceptable level of fire safety equivalent to that provided by Section III.G.3. Therefore, the licensee's request for exemption for an areawide fire detection in the Control Room should be granted.

2.4 Exemption Request for Turbine Building 2.4.1 Exemption Requested The licensee requested an exemption from the technical requirements

of Section III.G.2 of Appendix R to 10 CFR Part 50 to the extent that it requires that a fire detection system be provided throughout a fire area.

2.4.2 Discussion The Turbine Building houses the secondary plant equipment including such components and systems as the turbine generatorg, main condenser;

. steam, condensate, and feed systems; HVAC systems; and the emergency water booster pumps.

The building is essentially a three-level structure, except for 'he access control bay portion. It is constructed of insulated dual corrugated steel walls and a metal deck-ty r f. J.g j The principal fire hazards in the bui ding consist of accumulatioqs of lube oil, hydraulic oil, hydrogen gas, aed- cable insulationg J ***' DM*5.1 However, the locations which containM hese hazards are separated from the rest of the building by 2 or 3-hour fire-rated walls, are protected by automatic fire suppression systems, or both, i,,{e,th Existing fire protection includes partial fire detection and fire 7

j' suppression systems, as discussed in Appendix R Evaluation Report No.

4, manual hose stations, and portable fire extinguishers. In Report No. 4, the licensee committed to modify and extend the existing fire

, detection system detectors throughout the area of the first two levels of the turbine building and at elevation 4846 feet, 5 inches of the access control bay. The fire detection system will be in accordance withtheprovisionsofNationalFireProtectionAssociation(yPA),

Standard No. 72E.

F The licensee justifies this exemption on the basis of the existing

! fire protection, the proposed modifications, and the fact that there are no post-fire shutdown 6 systemf in those locations where no fire detectors will be provided. /

j[Co>+ re n e,n L,,

2.4.3 Evaluation fg The technical requirements of Section III.G.2 are not met in this location because redundant,05hutdownwe4eest systems are not separated by more than 20 feet, free of intervening combustibles. In addition, automatic fire suppression and detection systems are not provided throughout this area, Our evaluation of the separation and fire sup-pression issues is contained in Sections 2.5 and 2.10 of this report.

Our principal concern with this exemption was that because of the absence of an areawide fire detection system, a fire o'asi nificant magnitude could develop and damage systems needed p to n fgly) shut down the plantFHiwev'eT~TtTRe detRtW5 TJ5tWth51 meets the require-ments of NFPA Standard No. 72E will be installed at every elevation of this fire area that does contain shutdown-relatWU g systems. If a fire should occur in these locations, we expect it to be detected by the system. An alarm would be transmitted automatically to the Control Room and the fire brigade would sub! equently be dispatched. The brigade would put out the fire using manual fire figh,veting equipment.

g ped &

If fire should break out on the operating floor or the upper elevations of the Access Control Bay, we expe'ct it to be discovered, after some time delay, by plant operators or the security force. Until the arrival of the fire brigade, there are no Shutdown systems thGt could be damaged ,

by fire in these locations. Therefore, an areawide fire detection system is not necessary to provide reasonable assurance that a safe _

shutdown capability will remain free of fire damage.

ha6. FA e 2.4.4 Conclusion Based on our evaluation, we conclude that the licensee's alternate fire protection configuration, with the proposed modifications, will achieve an acceptable level of fire safety, equivalent to that provided by Section III.G.2. Therefore, the licensee's request for exemption for an areawide fire detection system in the Turbine Building should ,

be granted. '

2. 5 Exemption Request for Access Control Bay 2.5.1 Exesstion Requested l

. The licensee requested an exemption from the technical requirements 1

of Section III.G 2 to the extent that it requires that redundant p m E- ffre shutdown-related-systems be separated by 20 feet free of intervening combustible materials or by a 1-hour fire barrier and that the area be protected by an automatic fire suppression system and a fire detection system.

2.5.2 Discussion 1

The Access Control Bay is a multi-level structure which is part of the larger Turbine Building Fire Ater. It extends upward from eleva-tion 4846 feet, 6 inches to the roof at elevation 4938 feet, 0 inches.

i 1

. i 4

• t

[ Three reinforced concrete floors and one partial steel grating floor further subdivide the Access Control Bay above elevation 4846 feet, 6 l

inches. Within this structure, the licensee has-identified redundant reactor plant exhaust fans, on elevation 4846 feet, 6 inches, that  !

j are not protected per the requirements of Section III.G. The fans  ;

are separated from each other by about 18 feet, and there are no  !

.' intervening combustibles. l The fire hazard in the Access Control Bay consists of charcoal, lubricating oil, and cable insulation which represent a fire load of about 20,750 STU/sq. ft. This quantity of combustibles, if totally consumed, would produce an equivalent fire severity of about 16 l minutes as determined by the AST E-119 time-temperature curve ,

d Xs Wre ,$appressio,, on.t N <.Nes$ '

Existing fire prote on includes manual hose stations and portable S.;

4 fire extinguishers In Appendix R Evaluation Report No. 4, the licensee //,gi committed to install an automatic fire detection system on elevation i

. 4846 feet, 6 inches of the Access Control Bay. The system will be in l

! accordance with the provisions of NFPA Standard No. 72E. In addition,  ;

the licensee proposed to relocate cables and transfer switches to the i

Train A fan so that the switches are located at least 35 feet away from  !

its redundant Train B switch and cables 3are routed to each of the fans j i to enter from opposing directions and t iereby obtain the maximum separa-  :

i tion from the redundant cables of the o )posite grain.  !

l - w lu*c.h  !

{ The licensee justified this exemption on the basis of the existing  !

fire protection and the proposed modifications. In addition, the  !

licensee indicated that should these fans be damaged by a fire, alter- i nate cooling is available through a chiller unit and recirculation j fan that are located in another fire area.

2.5.3 Evaluation h- h g Mg

Although the licensee requested an exemption from Section III.G.2 I

, the requirements oi Section III.G.3 apply because of the availability  ;

j of the alternative # cooling capability. The requirements of Section )

l III.G.3 are not met in the Access Control Bay because of the absence of an areawide fixed fire suppression system.

. Our principal concern with the level of fire safety in this location <

] was that because of the relative proximity of the reactor plant exhaust  !

l fans, a fire of significant magnitude would darnage redundant post-fire 1 J shutdown-fetetad systems to such an extent tha* aafe shutdowggcould not be achieved and maintained. M j,%

J However, the fire load in this location is not significant and the l combustible materials are dispersed throughout the elevation. If a l fire should occur, it would be detected by the fire detection systee j in its incipient stages before significant flame propagation or room i temperature rise occurred. The alarm would be automatically transmitted to the control room. The fire brigade would then be dispatched and 3

would put out the fire using manual fire fighting equipment. Pending l

l

arrival of the brigade, the effects of the fire would be mitigated because the smoke and hot gases would rise up into the high ceiling area, which would tend to act as a heat sink. Also, the fan motors and related cables would be shielded from the effects of a fire by the metal fan enclosures. Nevertheless, if a fire did damage both reactor plant exhaust fans, the licensee will be able to recover from this damage by relying upon a chiller unit and recirculation fan that is located in a separate fire area. Therefore, the fixed fire suppression system is not necessary to provide reasonable assurance that sede shutdowng"anbeachievedandmaintained.

Q CooNOWn i 2.5.4 Conclusion Based on our evaluation, we conclude that the licensee's alternate fire protection configuration, plus the proposed modifications, will achieve an acceptable level of fire protection equivalent to that provided by Section III.G. Therefore, an exemption for the absence of a fixed fire suppression system in the Access Control Bay should 4

be granted.

2.6 Exemption Requests for Outside Areas-Exterior Routing and Turbine /

Reactor _ Buildings-Common Wall 2.6.1 Exemotion Requested 4

The licensee requested an exemption from the technical requirements of Section III.G.2 of Appendix R to 10 CFR Part 50 in these locations 1 to the extent that it requires a 3-hour fire barrier to separate

! redundant / alternate shutdown related systems in separate fire areas.

2.6.2.1 Discussion (Outside Areas-Exterior Routing)

. The Alternate Cooling t4ethod (ACM) aiesel and certain ACM related J

components are relied upon as the emergency power source for fke pd-ffre SLAB put+eMon 54mtdown Train A. The ACM diesel, transformers, plant 4-kV switchgear, 4-kV HVAC switchgear, 4160/480-volt transformers, reserve auxiliary transformer bus, and AOP 4-kV switchgear are located I outside of the Turbine Building. There is also ACM equipment located in the Evaporative Cooler Building, east of the Turbine Building near its southeast corner. ACM equipment in this building consists of the i

ACM batteries, ACM motor control center,fand ACM 480-volt load center.

7 pos Rre_

The Turbine Building cont - , the emergency diesel designated as the '

, emergency power supply for the ' shutdown Train B. Cabling and components associatedwiththe(shutdownTrainBarelocatedwithintheTurb Building. tfw Cabling frow the ACM diesel feeding the 4-kV switchgear, and then routed to the 4160/480-volt transformers, is used as the emergency i backfeed to load centers in the Three Room Control Complex to serve as the power supply for f.k: The cable routings up to the 4160/480f;nt:cti:.shutdownTrainA.

olt transformers are routed underground, gn l

r I

with the exception of overhead bus duct fe0ds between the 4-kV HVAC switchgear, reserve auxiliary transformer, and the plant 4-kV switch-gear. Feeds from the transformers into the Three Room Control Complex are open, ventilated, bus ducts routed above ground. These feeds pass along the east side of the Turbine Building wall.

The 4-kV switchgear is located south of the Turbine Building in the vicinity of the diesel generator rooms. The south wall of the diesel generator rooms is reinforced concrete construction. The 4-kV switch-gear is located inside a separate metal enclosure that is accessed from the yard area. The 4-kV switchgear enclosure is located approximately 8 feet south of the Turbine Building with open space in-between. Cabling within the 4-kV switchgear enclosure enters from underground.

The reserve auxiliary transformer bus duct is also used as part of this ACM backfeed.

side, approximately The reserve 20 feet auxiliary from the Turbinetransformer is located Building. The closestout p d-N, N-g [ M auw Train 8 shutdown-component is the Train B emergency diesel generator.

The emergency diesel generator room is a separate fire area, and is separated from the outside by a reinforced concrete wall.

An HVAC switchgear enclosure associated with ACM is also located south i of the Turbine Building, 7.5 feet from the building; but more than 30 feet from the nearest post-fire sede shutdown components within the

Turbine Building.

ACM components in the Eva;.orative Cooler Building are used as part of

, 'cmir- fire F:t:;ti= shutdown Train A. The Evaporative Cooler Building is a separate fire area, since it is a separate building with exterior l walls to the outside. This building is separated from the Turbine 1 Building by approximately 10 feet of open space, free of intervening combustibles.

l Other components in the yard area associated with the ACM, when used  ;

for the Train A emergency power supply, are the ACM diesel, ACM trans-a former, and the ACM 4-kV switchgear. These structures are located more than 100 feet east of the Turbine Building. l r

1' 2.6.2.2 Discussion (Turbine / Reactor Buildings-Common Wall) i The Turbine Building and Reactor Building are considered as two separate fire areas. The common wall between these two areas is l l constructed of corrugated steel. All openings in this wall are sealed l 4 so as to maintain the pressure differential required for the Reactor ,

Building. Redundan ,shutdownuelated equipment that is located on I both sides of the wa 1 are separated by at least 35 feet. Existing fire protection inci des fire detection and fire suppression systems, manualhosestationsl,andportablefireextinguishers,asdescribedin

Appendix R Evaluation Report No. 4.

yxsi- f're

• 19-p ${re-f The licensee justifies the exelnotions on the bas),/s of the existing c,on fire protection, the spatial separation between* shutdown *as4metti.systemf, /

c and the ability of the non-rated walls to provide a degree of passive fire protecti)n until any potential fire is extipguished, a.s w as dem enithitk e b tA.c. reced Psv tMru hvildNr or i Wre.

l 2.6.3 Evaluation .ge i The technical requirements of Section v!!I.G.2 and III.G.3 are not-met in these locations because norma Pshutdown systems are not separated from their redundant counterparts'or the systems associated with the alternate cooling method by a 3-hour fire-rated barrier, Our principal concern was that a fire of significoqt magnitude may l

resultindamagetocomponentsassociatedwiththenormalshutgow[n systems and the alternate cooling method. he,7- 're i

If a fire were to occur in the above-referenced ounide locations, a potential exists for components associated with the ACM to be damaged.

Howey.tz, because these areas are located outside and away from the

• ~ norma 1 9hutdown systems located within the Turbine Building, we do not fc). m:::tet the products of combustion or radiant energy from such a fire h&To-~nTfect the normiT4 systems. Smoke and hot gases would tend to be od'qk, dissipated in the open air. Radiant energy would be mitigated oy the V intervening open space and by the exterior walls of the Turbine Building, j

Similarly, if a fire were to occur inside the Turbine or Reactor Buildings, we expect the fire to be detected by the automatic fire detection systemsp e tpf plant opsrators or we security force. The i fire would either be extinguished manually by the plant fire brigade i or 4 the automatic fire suppression systems. Because these locations 3

are large open plant areas, the smoke and hot gases from such a fire might spread within each area. But it is our judgment that the metal lj and masonry walls which bound these fire areas are capableyto a sig-

, nificant extentgof confining the effects of the fire to the immediate fire area, until the fire is extinguished. Because these walls are i not all fire-rated, some products of combustion may spread beyond them. However, the smoke and hot gases would be cooled and dissipated 4

so that there will be no threat to the redundant / alternate post-fire shutdown systems in the adjoining fire areas. Therefore, complete 3-hour fire-rated walls are not necessary to provide reasonable assur- ,

ance thatpe$e shutdown conditions could be achieved and maintained with unda edsystemsintheotherfireareas, 2.6.4 Conclusion fC3T- h rc.

)

Based on our evaluation, we conclude that the licensee's alternate j fire protection configuration will achieve an acceptable level of  ;

I fire safety, equivalent to that achieved by compliance with Sections ,

I  !!!.G.2 and III.G.3. Therefore, the licensee's request.for exemption '

for a 3-hour fire wall between the Turbine Building and the Reactor l Building and outside areas should be granted, i

?

i i

I

j

./ '

l' /

Q ,

2. 7 ExemptionRequestsfor,A_ikernateCoolingMetbcd/CongestedCable Area Interface

/

2.7.' Exemption Requested The licensee requested an exemption from the technical requirements of Section yl G.2 of Appendix R to 10 CFR Part 50 to the extent it requires that redundant post-fire shutdownseMest systems be separated by mor'e than 20 feet free of intervening combustibles and the area be protected by automatic fire detection and suppression systems.

2.7.2 Discussion ,<'( /jown mt-% sidin Cabling- assor Sted with forced-e4mlatW cocidown components p ses

, through the' congested cable areay (CCA) outside of the "J" and walls for the Three Room Contro)' Complex and then into the Thr Room

/ Control Complex. For'a fire at'thest locations, sede-shutdow ould be achieved using systems associateo with the ACM. In general, ACM components and cabling are located in other fire areas outside of the

, Reactor and Turbine Buildings. Most.of the cables and components for

/

the ACM that are located in the Reactor and . Turbine Buildings are located more than 40 feet away from the congested cable area. For those systems that are located less than 40 feet from the CCA, described in Appendix R Evaluation Report No. 4, the licensee has identi ied other systems 0 hat could be employed to achieve 4afe- shutdown $cWh, Thc principal fire hazard in'those ACM/CCA interface creas is cable insulation. However, the areas of concentrated quantities of cables are protected by automatic sprinkler systems. In addition, these locations are protected by fire detection systems and are provided 4

with portable fire extinguishers and manual, hose stations. Y ba.:ris *f The licens /' justified this exemption on theH91 sting fire protection, the spatial separation between post-fire shutdown systems, and the availability'of a number of systems that could be relied upon to achieve aad maintain sede shutdowry'after,a fire.

coo}dount 2.7.3 Evaluation The techni al' requirements of Section III.G are not met in these loca-tions because the alterrate shutdown cr.pability is not physically and Gelectrical1y indenendent of the fire area.

' Our principal concern with the level of fire safety in these locations was that a fire of significant magnitude might damage systems associated with both the manual' shutdown capability and the alternate cooling method. There is no taajor; unmitigated fire hazard in these locations.

The only significant hazard which would represent a threat to shutdown systems is the concentration of combustible insulation on the cables.

However, these cable concentration art.as are protected by automatic sprinkler systems. The suppression systems along the "G" and "J" wallswereorlgir.cIlydesignedformanualtetuation. However, at our

,l. l /

r;f

f..

l l

request, the licensee converted these systems to automatic actuation.

We acknowledged that this conversion would not completely conform to the guidelines of NFPA Standards 13 and 15. But, it was our judgment that an automatic system would achieve a higher level of protection.

The interface areas will.be protected by an automatic fire detection system that meets the requirements of NFPA Standard No. 72E. As a result, we expect any potential fire to be detected early, before significant fire propagation or room temperature rise occurs. The fire would then be extinguished by the plant fire brigade using manual fire fightir.g equipment. If rapid fire spread occurred, we expect the automatic wet pipe sprinkler systems to actuate and limit fire spread, moderate room temperature rise, and protect theyshutdown d t e cables along the "G" and "J" walls. Until the arrival f the fire brigade, the spatial separation between post-fire shutdown sy tems provides passive protection to prevent damage to redundant /alterngtepphutdown systems.

For those systems which are not sufficiently separated, the licensee has identified alternate means of achieving and 'ain;aining -a4e-shutdow P *p^ g" bag ovt 3

thatwouldnotbeaffectedby) afire.

C. O t '

' I; No L L'fC, Fa Y asa.

2.7.4 Conclusion Based on our evaluation, we conclude that the licensee's alternate fire protection configuration, vi+h proposed modificat % will achieve an acceptable level of fire safety equivalent to that achieved by compliance with Section III.G. Therefore, the licensee's request for exemption in the ACM/CCA Interface Areas should be granted.

2. 8 Exemption Request for Emergency Lighting 2.8.1 Exemption Requested The licensee requested an exemption from the technical requirements of Sectio, III.J of Appendix R to 10 CFR Part 50 to the extent that it requirts emergency lights to be powered by individual 8-hour battery packs.

2.8.2 Discussion The plant is presently equipped with hard-wired, essential / emergency backup lighting systems oowered from the standby diesel gonerators and the plant DC system. However, these systems are not qufficiently independent so that they would be available in the event of a fire.

In Appendix R Evaluation Report No. 4, the licensee committed to install a new system for the Reactor and Turbine Buildings. Outlying structures requiring access for post-fire sue.-shutdown functions that are not covered by ACM powered lights will be covr. red by 8-hour battery lights. The new emergency lighting system will have the following attributes:

1. Wiring and lights configured so that multiple physically separate systems would result with ec:h system covering a zone or quadrant.

Lighting equipment in each zone will be separated by a minimum of 50 feet from that of another zone. Loss of any one zone because of a postulated fire would be compensated for by the lights in the adjacent zones, including permanently installed but movable exten-sion lights" where necessary;

2. Separate and independent power feeds for each zone covered;

3. Electrical power supplied from the ACM diesel;

4. Breaker coordination so that only one circuit would fail given the loss of any one individual light unit, or a single fault such as due to a fire;

5. A minimal number of lights per circuit so that the lighting availability loss would be minimized given a circuit loss;

6. A mix of local area lights and spot flood beams plus extension lights where necessary;

7. Receive a field check /walkdown to confirm adequate numbers, locations, and positioning of 'ights.

ope 4h A/W Essentialvapesand/orequipmentcomponentsrequirinym/anual operator action (s) wouT4 be covered by local zone lighting plus spot beams, fxom=adjacenbzones- Therefore, if a fire failed the local circuit, the spot beams from a distance greater than 30 feet would still be functional. In addition, extension lights will be available in selected areas where valves are located in upper galleries.

The licensee justifies this exemption on the bases that the proposed new lighting system provides an equivalent level of emergency lighting to individual 8-hour battery packs.

2.8.3 Evaluation The technical requirements of Section III.J are not met in the Reactor and Turbine Buildings because the new emergency lights are not powered by individual 8-hour batteries.

, " fs We had two concerns with the proposed emergency lighting system in these buildings. The first was that a sufficient number of lights would not be installed so asPprovide an adequate level of illumination.

However, all essential valves and equipment components requiring manual od egress routes thereto, will be covered operator by the localactions, zone and access,p#

lighting 5T spot beams,frosesdjecw.t ::=. In addition, at our request, the licensee in Appendix R Evaluation Report No. 4, committed.to verify the adegaacy of the illumination by conducting l a field walkdown with plant operators to confirm the adequacy of the j number", locations, and positioning of the lights.

The second concern was that a fire could damage the power supply to l the emergency lighting. However, the new system is designed in such

a manner that a fire in any one zone would not affect the errergency lighting in adjacent zones. Therefore, individual 8-hour batteries for each emergency light are not necessary to provide reasonable assur-ance that sufficient emergency lighting would be available to complete pyt-fire safe-shutdown functions af ter a fire.

2.8.4 Conclusion Based on our evaluation, we conclude that the licensec's alternate configuration will achieve an acceptable level of safety, equivalent to that achieved by compliance with Section III.J. Therefore; the licensee's request for exemption for individual 8-hour battery powered emergency lighting in the Reactor and Turbine Buildings should be granted.

2. 9 Exemption Request for Reactor Building 2.9.1 Exemption Requested jg_

The licensee requested an exemption from the technical requirements of Section III.G.2 of Appenpi'x R to 10 CFR Part 50 to the extent that it requires that redundantkshutdownacetaEE5 systems be separated by 20 feet free of intervening combustibles and be protected by automatic fire detection and suppression systems.

2.9.2 Discussion The Reactor Building is a single fire area. It contains redundant components and cables associated with the turbine water removal pumps, bearing water pumps, primary coolant and steam generator instrumenta-tion, and-reactoe-plant-exhaust-fans. It also contains Train A com-ponents and cables associated with the emergency bearing water makeup pump and Train 8 components and cables associated with the bearing water makeup pump.

The principal fire hazard in this location consists of hydraulic oil associated with the hydraulic power units and over the helium circulator-turntable. Additional combustible materials include lubricating oil and combustible cable insulation.

Existing fire protection includes automatic sprinkler systems for the hydraulic oil fire hazards and cable concentration areas, manual hose stations, and portable fire extinguishers. In Appendix R Evaluation Report No. 4, the licensee committed to install a fire detection system to provide areawide coverage of the Reactor Building below the refueling floor in a manner that reflects the potential problem of smoke stratifi-cation. The licensee also committed to reroute certain ,

cables to achieve at least 50 feet of horizontal separatgshutdownW41auRr

. ion or 30 feet I of separation if an intervening floor exists between redundant systems except as identified and evaluated in this Safety Evaluation. A third turbine water removal pump, permanently installed a min imum of 50 feet

--- ges b fTm i

l 1 from the existing tanks and pumps, will also be provided to compensate for the potential loss of redundant turbine water removal pumps on elevation 4740 feet, 6 inches.

The licensee justified the exemption on the existing fire protection, the proposed modifications, and the spatial separation between redundant p ost. Free- shutdown systems.

2.9.3 Evaluation gg The technical requirements of Section III.G.2 are not met in the Reactor Building because the intervening space between redundant 4 hutdown systems contains some combustible material. In addition, the fire detection system does not extend to the refueling floor and above, and the existing sprinkler systems do not provide #areawide coverage.

pos -Ftre_

Our principal concern was that a fire of ignificant magnitude would damage systems associated with redundant hutdown methods. However, the major fire hazards in this area are covered by an automatic fire suppression system. Consequently, a fire involving these hazards would be mitigated by the system. Remaining combustible materials are generally dispersed throughout the remainder of the area. As a result, a fire involving these materials would be of limited magnitude and extent and would be characterized, initially, by low flame propaga-tion and ambient temperature rise.

If a fire did occur, it would be detected early by the fire detection systems. Where no detectors have been provided above the refueling floor, no shutdown systems exist. Upon actuation of the detection system or discovery of the fire by plant personnel, the control room would be notified and the fire brigade dispatched. The fire would then be either suppressed manually, using portable fire fighting equipment, or automatically, if the fire originated in the sprinkler area. Until the fire is controlled, the spatial separation between post-fire shutdown systems, which in part extends over more than one floor elevation, will provide reasonable assurance that a s+fe f shutdown capability will remain free of fire damage. L po.sf F&c 2.9.4 Conclusion Based on our evaluation, we cor.clude that the licensee's alternate fire protection configuration, with the committed modifications, will provide an acceptable level of fire safety, equivalent to that achieved by compliance with Section III.G.2. Therefore, the licensee's request for exemption in the Reactor Building should be granted.

2.10 Exemption Request for Turbine Building 2.10.1 Exemption Requested The licensee requested an exemption from the technical requirements of Section III.G.2 of Appendix R to 10 CFR Part 50 to the extent that l

I

j-it requires that the redundant utdownvohtigti-systems be separated by more than 20 feet of intervening combustibles and be protected by automatic fire detection and suppression systems.

l 2.10.2 Discussion The Turbine Building houses the secondary plant equipment including such components and systems as the turbine generator, main condenser, I steam, condensate and feed systems, HVAC systems, ano the emergency j water booster pumps. ,jA 1

& lu d ~m In Table 3.11-1 of t e Appendix R Gomp14ance Report No. 4, the licensee identified thephut own-rehrted systems which do not meet the separation i g_ gg requirements of Se tion III.G. The licensee committed to either: 1) f Reroute fire-vul rable cables outside of the fire area, or 2) Protect onevshutdown di ' m by a 1-hour fire barrier, or 3) Reroute fire-vulnerable cable to achieve at least 30 feet of horizontal separation j with some intervening cables from its redundant / alternate counterpart. .

For any other fire-vulnerable cables or systems, the licer.see has )

identified anothe ne g of achievin gs @ hut own if these systems l were lost because of a fira' a.,

fLdv m e.a.n s  !

L pos& Ire. l The licensee justifies the exemption oti the bases of the existing l fire protection, the proposed modifications, the spatial separation 1 between post-fire shutdown systems, and the availability of a number of different systems that would be rel.ied upon to achieve and maintain juif b sade shutdown conditions.

2.10.3 Evaluation ,f. A The technical re u ents of Section III.G are not met in this area because redundant hutdown-calated systems are not separated by more than 20 feet free of intervening combustibles. In addition, automatic fire suppression and detection systems are not provided throughout the area. We evaluated the lack of areawide fire detection in Section 2.4 of this safety evaluation.

,- -.y ed=- Fire Our principal concern was that a fire of significant magnitude would damage systems associated with redundant"shutdown methods. However, the major fire hazards in this area are covered by an automatic fire suppression system, or are separated by fire walls, or both. Con- l sequently, a fire involving these hazards would be mitigated by the protection. Remaining combustibles materials are generally dispersed l throughout the remainder of the area. As a result, a fire involving '

these materials would be of limited magnitude and extent and wculd be characterized, initially, by low flame propagation and ambient tempera- ,

ture rise. '

ost- %

If a fire did occur, it would be detected early by t fire detection system. Where no detectors have been provided, noYshutdown systems exist. Upon actuation of the detection system or discovery of the i fire by plant personnel, the control room would be notified and the

l l

fire brigade dispatched. The fire would then be either suppressed manually, using portable fire fighting equipment, or automatically, if the fire originated in a sprinkler area. Until the fire is con-trolled, the spatial separation between post-fire shutdown systems, which in part extends over more than one floor elevation, will provide reasonable assurance that a gefe shutdown capability will remain free of fire damage. L _pg 2.10.4 Conclusion Based on our evaluation, we conclude that the licensee's alternate fire protection configuration with the committed modifications, will provide an acceptable level of fire safety, equivalent to that achieved by compliance with Section III.G.2. Therefore, the licensee's request for exemption in the Turbine Building should be granted.

2.11 Building 10 Guilding 10 is a new structure, erected subsequent to our "Appendix A A" fire protection evaluation. It is located east of the Control Complex and is connected with it by a bridgelike walkover structure.

The exterior walls are constructed of reinforced concrete. The floors are concrete on earth or concrete on metal panels. The roof is con-structed of concrete on metal panels. The building has been divided into six fire areas occupied for offices, computer rooms, electrical and mechanical equipment rooms, and related areas. Fire protection includes fire detection systems, halon fire suppression systems, and portable fire extinguishers.

&lva1 Tnt In Appendix R EompHece Report No. 4, the licensee identified one deviation from the technical requirements of Section III.G.2 of Appen-dix R to 10 CFR Part 50. The licensee requested approval of an exemp-tion from these requirements to the extent that they require that structural steel which is part of a fire barrier be protected so as to achieve a fire rating equivalent to the rating of the boundary.

The structural steel is part of a 3-hour fire wall that separates two rooms that contain redundant shutdown-4 M mtme systems. The licensee justifies the exemption on t e basis of the low fire loading and the existing automatic fire prot ction. U lrc.

fes The rooms on both sides of this wall are equipped with an automatic fire detection system. If a fire should occur, it would be detected in its formative stages before significant temperature rise occurs.

The fire would then be put out manually using portable fire extinguishers.

If rapid fire spread occurred, we expect the automatic fire suppression system to actuate to control the fire. The system has sufficient extinguishing agent for a manually initiated second discharge if the fire was not completely extinguished after the first discharge. Until the fire is extinguished, and considering the low fire loading (equivalent to a 15-minute duration on the ASTM E-119 time temperature curve), it is our judgment that the unprotected steel will remain

a A ,

undamaged and the integrity of the fire wall will be maintained. We, therefore, conclude that the licensee's fire protection configuration will provide an equivalent level of fire cafety to that achieved by compliance with Section III.G. Therefore, the licensee's request for exemption for unprotected structural steel should be granted.

At our request, the licensee also submitted, in Report No. 5, dated May 1985, a comparison of the fire protection for Building 10 to the guidelines of Appendix A to BTP APCSB 9.5-1. The licensee has indicated that the guidelines pertaining to the provision of a standpipe system, yard hydrant, fire hose, and related equipment are not applicable to Building 10. We were concerned that in the event of a fire in those areas not protected by an automatic suppression system, the licensee would not have a readily available mean; to apply water from hose streams onto the fire. However, the fire brigade would be able to bring hoses from either stations in the turbine building or a yard hydrant near the building. The licensee has confirmed this capability by test. On this basis, we consider this issue closed.

In the trip report dated September 12, 1983, which documented the '

results of an NRC site audit, we stated that the licensee did not have within its organization or as a consultant a qualified fire pro-tection engineer responsible for the formulation and implementation of the fire protection program. However, by letter dated October 16,

/@ee C ) ~ 1986,Tthe licensee informed the staff of the addition of a fire pro-k tection engineer to the PSC staff. He is responsible.for the develop-mentoftheFireProtectionProgramPlanandistheGhajrmenofthe Fire Protection Iqk= Force- On this basis, the staff considers this issue closed. t L. pp _ /,pp 2.12 Licensee Comments wA l'I)T By letter dated January 16, 1987,k @he licensee provided comments regarding the staff's November 18, 1986 draft safety evaluation. In general, these comments have been reflected in the final safety evaluation. However, the staff's description of the licensee's commitment regarding the proposed emergency lighting system for the reactor and turbine buildings remain the same as in the original draft. The licensee was concerned that the staff has interpreted the commitment to provide separate and independent power feeds for each emergency lighting zone to mean that independent power sources will be provided. The staff recognizes that the alternate cooling method (ACM) diesel will be the only source of power for the new emergency lighting system. The power feeds to the individual zones will, however, be designed such that no two adjacent zones will be I affected by any fire. The staff finds this concept acceptable, and no  !

further c

%G , g) d e w hl rification

,w ,g safety evalua, tion is necessary.4,.,f,, ,o el Jo the draft 3.0 Environmental Conside ations / V l

l Pursuant to 10 CFR 51.30, the staff concludes the following about the listed factors:

(1) The need for the proposed actions is described above; (2) The alternative to the exemptions would be to require literal compliance with Section IV.F. of Appendix E to 10 CFR Part 50. Such an action would not enhance the protection of the environment and would be adverse to the public interest generally; (3) The issuance of the exemptions, or their denial, would not affect the environmental impact of the facility; and (4) No consultation with other agencies or persons is needed.

Based on the above assessment, the NRC staff concludes, pursuant to 10 CFR 51.32, that the issuance of these exemptions will have no significant impact on the environment.

4.0 Conclusions 4.1 Post-Fire -8ene Shutdown Systems The concepts submitted by the licensee for providing post-fire sede-shutdown under fire considerations are adequate and therefore, accept-able. The remaining aspects identified herein will be addressed during inspection activities, and in confirmatory analyses as discussed in Section 4.3.

4.2 Exemptions Based on our evaluation, we conclude that the licensee's existing fire protection configuration, with the proposed modifications, achieves an equivalent level of safety to that attained by compliance with Sections III.G and III.J. Therefore, the licensee's request for exemptions in the following areas 4 M e h granted:

1. Three Room Control Complex (Fire Barriers) l I

2. Control Room (Fire Detectors) l

3. Turbine Building (Fire Detectors)

4. Building 10 (Structural Steel) 1

5. Access Control Bay (Separation Requirements)

6. Exterior routing of shutdown cabling

7. ACM/CCA Interface Areas (Separation Requirements)

8. Common Wall-Turbine Building / Reactor Building

9. Reactor Building;(Separation Requirements)

10. Turbine Building (Separation Requirements)

11. Diesel Generator Rooms (Fire Barriers)

12. 8-hour cattery pack emergency lighting 13 scJS Grc nstow 76 Io CFR Sv. YB.

4.3 Confirmatory Evaluations i As noted in Section 2.1.2.3(a)(2), PSC has submitted analyses addressing the effectiveness of the flow paths through the steam generators (for decay heat removal). The staff has requested it's contractor, Oak Ridge National Laboratory, to review these analyses. These evaluations will be considered confirmatory and will be reported in a separate Safety Evaluation.

Dated: December 18, 1987 Reviewers: D. Kubicki, DPWRL-8, NRR R. Ireland, Region IV R. Mullikin, Region IV Attachments:

1. Figure 2.1-8

2. Figure 2.1-9

3. Figure 2.1-10

4. Figure 2.1-IIA

5. Figure 2.1-118 l

l l

1 l

I l

O i ,

References

1. Appendix R Evaluation:

a. Report No. 1, Shutdown Model, November 16, 1984 (Rev. 6)

b. Report No. 2, Electrical Reviews, December ?7, 1984 (Rev. 4)

c. Report No. 3, Fire Protection, January 17, 1985 (Rev. 4)

d. Report No. 4, Exemptions and Modifications, April 1, 1985 (Rev. 2)

2. Fire Hatardi Analysis and Evaluation of Building 10 to the BTP 9.5-1 Appendix A Guidelines, Report No. 5, May 31, 1985 (Rev. 1).

3. NRC letter, Butcher to Lee, dated November 1, 1985.

4. PSC letter, Walker to Berkow, dated December 20, 1985 (P-85488).

5. PSC letter, Walker to Berkow, dated March 14, 1986 (P-86209).

6. PSC letter, Walker to Berkow, dated April 4,1986 (P-86266).

7. License Amendment No.14 with NRC letter, Denise to Walker, dated June 18, 1976.

C. License Amendment No. 18 with NRC letter, Denise to Fuller, dated October 28, 1977.

9. License Amendment No. 21 with NRC letter, Gammill to Millen, dated June 6, 1979.

10. PSC letter, Warembourg to Berkow, dated May 15, 1986 (P-86307).

l PSC 1etter, Williams to Berkow, dated July 15, 1986 (P-86462). I M # b 2.@11.

PSC letter, Gahm to NRC (LER 86-020), dated August 11, 1986 (P-86513).

u nc-e cde- ( ,-1. NRC letter, Wagner to Lee, dated June 4,1984,

14. PSC letter, Lee to Johnson, dated August 17, 1984 (P-84281).

15. NRC letter, Crutchfield to Williams, dated August 3, 1987.

gye h.h v ua.q r), I997 Cf~8705C) l

16. PSC letter, to Berkow, dated-C ember h.1^86 (-P-00003).

17. PSC letter, Brey to Calvo, dated May 1, 1987 (P-87158).

18. PSC letter, Warembourg to Calvo, dated May 15, 1987 (P-87167).

19. PSC letter, Williams to Berkow dated January 16, 1987 (P-87013).

20. Psc le f/w, t0:lliams 1; Cdv9 dbeck Decader Ig 19s!7 (f- 274x2) z j, Psc k UE , Will rants C Beckow, Ual Oehlec u, Ret (?-9&rv2)

Additional updates to References 1 & 2 were provided in:

PSC letter, Lee to Johnson, dated August 30, 1985 (P-85301).

PSC letter, Lee to Hunter, dated September 26, 1985 (P-85341).

Rehec te I

ATTACHffENT 1

, 8 e t

l FIREWATER __

SYST EM WANE *UP L-.222 DECAY $ 7 REwCV AL EXCMAN2R f 1101 &

• C* SEav1CE

$70RAct * * *E 4 ruas s' U269 02:

CMM A *! NW IC 1

r ,,

P LJf09 PI4 HE CIRC' t. A TOR C 2:01 1p

< r 8 2208

$fEAM CEH.

_.4"VENT

~ TO ATWo$.

<r 1 P f.2110 TLA8M waTEA ORA N farm m

P.2603 TL*S*4 wATEA RE *CV A;.

C FIGURE 2.14 SIMPLIFIED FLOW DIAGRAM COMXNSATE PUMP FOR CIRCULATOR DRIVE

& S/G COOLING - TRAIN A R E V.1

ATTACHMENT 2 l e

l l

O(E STL ],A NCY

??!.

• a 5e $

93y t I

0-1103 i 21:0  : '

S P4 C:ACLLArcm

• 4A W a.N COCU*4 fcwtm E .403 1r 6 8802 Sita m ,,

CEN '

T-8110  !

TL A S ' *4 CIRC. WATER w a nt4 o W AKE - UP PUWP 6" Vf MT 0" N P . 4 818

• TO ATWOS. ,

a fth atwcvat PJ 4

l STORAGE PON0l REACTOR i

j SUIL0iNG !

SUWP '

• .81033 l

DE AE R ATOR j

=

CONDENSER l

~

HOTwtLL U

TUR 81N E SUIL DIN G SUWP FIGURE 2.1-9

- SIMPLIFIED FLOW OIAGRAM FIRE WA TER FOR CIRCULATOR ORIVE & S/C COOLING - '

TRAIN 8 l

REV 7

l s

s

. FiftE PitOIECilON g ggt [ pf40T[CilOH SitulDOWN titan A e

$aggDOWHTHANB e

(mas ta AloH e CWtCta AItst rd esosgys 55agic si PAS 4 AI(W4 l geogp,g 5 ,,, r Psos g M PAf 4AI(W4 i  ; i.2006 T.Jaos  ;

= -

sa saves t Walt 84 Mavert wagg pq 4W A84#4 Walt 80 tot Anec Coma t R wa gg g

! < coog g s,

(-2:06

f. sos i f1 r

, , 1 Fi f 1 2806 588'II M 8 A

, I Ata I Arm T-2soi

, i J L Isat (KJ WY Elf AIIEC 4 L Elf AHp4 W A If it COrdW PnAgt W Alf H hAe(f 45' 54meP I AtES #AMIt8' i

%10 mCPm P-710s PunaP

( 1 P s Io m en e )

p.psos v ( ,,

@1 f P.2195 d b v

i f P-J s 07 P.Ja04 , , 5 to m &as P.2107

$h AftDC g Ett AI3E4 W4Il It W A Il 14 latsamf*5

Pt M'S V ,0 M l

. r

. , f,

. s -

F.

, flGUltE 2.1-10 SIMI*t.lfil'D I LOW DIACitAM

IMi AltlNG Wall

lt Foil CittCLA_AIOf tS

e. .

ATTACHMENT 4 o ds 1 O.

=

wg -

4 >

3 W a

R T

e E

> w I

7 iE si <

=

z iP E I

- 5 e , 22 ~

! R' g * -"

a 6 l 52: M E

.. Aa$-

'm  :,

g y 5 e

~

,g,g >

l O' ~~ -

c W l 7  ! I* $m dk: ,. ,%

• a '-r f*

I

~ = bb* L I zi <

{ 5 *"

, W c- gT, 24

<- 4 3

. -* g .

ge mz p

• -r W Y h

• e ** a dV l-At

- F

. *2 tz w..- , 5 g5 m; ==z ma w w%

w 4>

f Mzh Q er- ~ O .

o15 s- ,.

=4

>=3 .O ' '2 's *t-c.,>u

=

E I g 3 :sfa <

g X at

,- < 3

=:-

a 5 I.a35. :z $ -

g

{}..j j"!

v-102<

~

C

( yr = b.

EBU A am 2

. E o =

$ r  : s g

_a

1: $ =

t. t A55

y o

]O E .'e Ml- _

% jI

. 5 i

3;e l

'. D m q p

= j p 4*

1 r .$ .

$NE j ens 3.x

. i

=<  :

.E O E

_3 si 3.

• 6 r3s 4

e.

e 4

' ,e .

4 It)$4 deVH $ ' 2 wa ss se (eMeera. M[ 8N 4728 3  %

4 8 a nut it / (aatst)

- 4(a alMIM

, tev427s 9 i k

1. ,"se ss e s "

a Malta COOT staC IOwtH f.4803 I

CWtc. W ATER H A8t-U9 9UM9 9-4ste s e,ssaa (J'as 3 AVAL Ans E DW4278 3 gw aggg b

__ anMWh (W

' (astre sost eg (aper. wa li n OO SfMvarf Walget illt45 i H f-4100 haneP P 4:04 SW 4F17(W m

IO HnP441MNI841 i

}, ,, Sisavgi we st se s e att n 1r sr M ACIOft Pt Ate! C(Win NG It ogwt it au per sc wa st n iysI(sa . S(HvaLK u sevst e wais et Wallft t in B'( (Jaaf'id d 3481 tiMa*((amefatwa reli (stamene warra Coottal - (D'istL etsstaaron COOLERI 2

-t

-4 o

E j t rn z

TO ~4 Mavnt watare Tunesat ensuaa w

• austOswG ' " ' ' g l o Nit' ?.I-ltil suase SIMi*l II'll D I I OW DiAQtAM - Si iWICf WATfIt SYSTFM - IfIAlH !! "" #