ML20151T656

From kanterella
Jump to navigation Jump to search
Proposed Tech Specs Section 3.4.10,increasing as-found Psv Setpoint Tolerances
ML20151T656
Person / Time
Site: San Onofre  Southern California Edison icon.png
Issue date: 09/04/1998
From:
SOUTHERN CALIFORNIA EDISON CO.
To:
Shared Package
ML20151T642 List:
References
NUDOCS 9809100099
Download: ML20151T656 (112)


Text

. . - . . _ . _ _ . _ . _ _ _ . ._ . .__ _.... . - . .. _ _ . . _ -.

PCN 493 l

I 1

Attachment A Existing Technical Specifications and Bases SONGS Unit 2 l

i 9809100099 98o904 m-yDR ADOCK o m g PDR

Pressurizer Safety Valves 3.4.10 3.4 REACTOR COOLANT SYSTEM (RCS) 3.4.10 Pressurizer Safety Valves LC0 3.4.10 Two pressurizer safety valves shall be OPERABLE with a lif t setting of 2500 psia i 1%.

APPLICABILITY: MODES 1, 2, and 3.


NOTE--------------------------_-

The lift settings are not required to be within LC0 limits during MODE 3 for the purpose of setting the pressurizer safety valves under ambient (hot) conditions. This exception is allowed for 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br /> following entry into MODE 3 provided a preliminary cold setting was made prior to heatup.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. One pressurizer safety A.1 Restore valve to 15 minutes valve inoperable. OPERABLE status.

B. Required Action and B.1 Be in MODE 3. 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> associated Completion Time not met. AND OR B.2 Be ii, MODE 4. 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> Two pressurizer safety valves inoperable.

SAN ON0FRE--UNIT 2 3.4-28 Amendment No. 127

I Pressurizer Safety Valves 3.4.10 l l

SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.4.10.1 Verify each pressurizer safety valve is In accordance OPERABLE in accordance with inservice with the testing program. Following testing, lift Inservice settings shall be within i 1%. Testing Program 1

l l

l l

l i

l i

SAN ON0FRE--UNIT 2 3.4-29 Amendment No. 127

1 Pressurizer Safety Valves B 3.4.10 B 3.4 REACTOR C0OLANT SYSTEM (RCS)

B 3.4.10 Pressurizer Safety Valves BASES BACKGROUND The purpose of the two spring loaded pressurizer safety valves is to provide RCS overpressure protection. Operating in conjunction with the Reactor Protection System, two valves are used to ensure that the Safety Limit (SL) of 2750 psia is not exceeded for analyzed transients during operation in MODES 1, 2 and 3. During MODE 4, MODE 5, and MODE 6 with the reactor pressure vessel head on, overpressure protection is provided by operating procedures and LC0 3.4.12. " Low Temperature Overpressure Protection (LT0P) System." For these conditions, American Society of Mechanical Engineers (ASME) requirements are satisfied with one safety valve.

The self actuated pressurizer safety valves are designed in accordance with the requirements set forth in the ASME, Boiler and Pressure Vessel Code,Section III (Ref.1). The required lift pressure is 2500 psia i 1%. The safety valves discharge steam from the pressurizer to a quench tank located in the containment (Ref. 2). The discharge flow is indicated by an increase in temperature downstream of the safety valves and by an increase in the quench tank temperature and level.

The upper and lower pressure limits are based on the

  • 1%-tolerance requirement (Ref.1) for lif ting pressures above 1000 psig. The lift setting is for the ambient conditions associated with MODES 1, 2, and 3. This requires either that the valves be set hot or that a correlation between hot and cold settings be established.

The pressurizer safety valves are part of the primary success path and mitigate the effects of postulated accidents. OPERABILITY of the safety valves ensures that I the RCS pressure will be limited to 110% of design pressure. i The consequences of exceeding the ASME pressure limit ,

(Ref.1) could include damage to RCS components, increased l leakage, or a requirement to perform additional stress I analyses prior to resumption of reactor operation. )

(continued) I SAN ONOFRE--UNIT 2 B 3.4-51 Amendment No. 127 l

Pressurizer Safety Valves B 3.4.10

(

BASES (continued)

APPLICABLE- All accident analyses in the UFSAR that require safety valve SAFETY ANALYSES actuation assume operation of both pressurizer safety valves to limit increasing reactor coolant pressure (Ref. 3). The overpressure protection analysis is also based on operation of both safety valves and assumes that the valves open at the high range of the setting (2500-psia system design pressure plus 1%). These valves must accommodate pressurizer insurges that could occur during a startup, rod j withdrawal, ejected rod, loss of main feedwater, or main i feedwater line break accident. The combined relief capacity -

of these valves is sufficient to limit the System pressure to within its Safety Limit of 2750 psia following a complete i loss of turbine generator load while operating at RATED THERMAL POWER and assuming no reactor trip until the first Reactor Protective System trip setpoint (Pressurizer Pressure-High) is reached (i.e., no credit is taken for a direct reactor trip on the loss of turbine) and also assuming no operation of the steam dump valves. The startup accident establishes the minimum safety valve capacity. The startup accident is assumed to occur at < 15% power. Single failure of a safety valve is neither assumed in the accident analysis nor required to be addressed by the ASME Code.

Compliance with this specification is required to ensure that the accident analysis and design basis calculations remain valid.

The pressurizer safety valves satisfy Criterion 3 of the NRC Policy Statement.

LC0- The two pressurizer safety valves are set to open at the RCS design pressure (2500 psia) and within the ASME specified tolerance to avoid exceeding the maximum RCS design pressure SL, to maintain accident analysis assumptions, and to comply with ASME Code requirements. The upper and lower pressure tolerance limits are based on the i 1% tolerance requirements (Ref.1) for lifting pressures above 1000 psig.

The limit protected by this specification is the reactor coolant pressure boundary (RCPB) SL of 110% of design pressure. Inoperability of one or both valves could result in exceeding the SL if a transient were to occur. The consequences of exceeding the ASME pressure limit could include damage to one or more RCS components, increased leakage, or additional stress analysis being required prior to resumption of reactor operation.

(continued)

SAN ON0FRE--UNIT.2 B 3.4-52 Amendment No. 127

l

' i Prescurizer Safety Valves l

, B 3.4.10 1 BASES 4 l

ACTIONS B.1 and B.2 (continued)

The 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> allowed is reasonable, based on operating

, experience, to reach MODE 3 from full power without

! challenging plant systems. Similarly, the 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> allowed i

' is reasonable, based on operating experience, to reach

' MODE 4 without. challenging plant systems. The' change from MODE 1, 2, or 3 to MODE 4 reduces the RCS energy (core power i'

and pressure), lowers the potentiai for large pressurizer insurges, and thereby removes the need for overpressure protection by two pressurizer safety valves.

4 SURVEILLANCE SR 3.4.10.1 REQUIREMENTS ,

. SRs are specified in the inservice testing program.

Pressurizer safety valves are to be tested one at a time and

! in accordance with the requirements of Section XI of the

ASME Code (Ref. 1), which provides the activities and the Frequency necessary to satisfy the SRs. No additional requirements are specified.

The pressurizer safety valve setpoint is i 1% for OPERABILITY.

1

4
REFERENCES 1. ASME, Boiler and Pressure Vessel Code,Section III,
Section XI. -

1 2. UFSAR, Section 5.4

3. UFSAR, Section 15.

j-SAN ON0FRE--UNIT 2 B 3.4-54 Amendment No. 127

]

l 1

PCN 493 I

1 Attachment B Existing Technical Specifications and Bases SONGS Unit 3 i

l i

l l

I

Pressurizer Safety Valves 3.4.10 3.4 REACTOR C0OLANT SYSTEM'(RCS) 3.4.10 Pressurizer Safety Valves LC0 3.4.10 Two pressurizer safety valves shall be OPERABLE with a lift setting of 2500 psia i 1%.

APPLICABILITY: MODES 1, 2, and 3.


NOTE----------------------------

The lift settings are not required to be within LC0 limits during MODE 3 for the purpose of setting the pressurizer safety valves under ambient (hot) conditions. This exception is allowed for 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br /> following entry into MODE 3 provided a preliminary cold setting was made prior to heatup.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME i

A. One pressurizer safety A.1- Restore valve to 15 minutes valve inoperable. OPERABLE status.

B. Required Action and- B.1 Be in MODE 3. 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> associated Completion Time not met. .A_tLD OR B.2 Be in MODE 4. 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> Two pressurizer safety valves inoperable.

SAN ON0FRE--UNIT 3 3.4-28 Amendment No. 116

Pressurizer Safety Valves 3.4.10 SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.4.10.1 Verify each pressurizer safety valve is In accordance OPERABLE in accordance with inservice with the testing program. Following testing, lift Inservice settings shall be within i 1%. Testing Program

)

i SAN ON0FRE--UNIT 3 3.4-29 Amendment No. 116

- ._ --. . . _ . .. -- ~ . . _ - . - . - . .

Pressurizer Safety Valves B 3.4.10 B 3.4 REACTORCOOLANTSYSTEM(RCS)

B 3.4.10 Pressurizer Safety Valves BASES BACKGROUND The purpose of the two spring loaded pressurizer safety valves is to provide RCS overpressure protection. Operating in conjunction with the Reactor Protection System, two valves are used to ensure'that the Safety Limit (SL) of 2750 psia is not exceeded for-analyzed transients during operation in MODES 1, 2 and 3. During MODE 4, MODE 5, and MODE 6 with the reactor pressure vessel head on, overpressure protection is provided by operating procedures and LC0 3.4.12, " Low Temperature Overpressure Protection (LTOP) System." For these conditions, American Society of Mechanical Engineers (ASME) requirements are satisfied with one safety valve.

The self actuated pressurizer safety valves are designed in accordance with the requirements set forth in the ASME, Boiler and Pressure Vessel Code,Section III (Ref.1). The required lift pressure is 2500 psia i 1%. The safety valves discharge steam from the pressurizer to a quench tank located in the containment (Ref. 2). The discharge flow is indicated by an increase in temperature downstream of the safety valves and by an increase in the quench tank temperature and level.

The upper and lower pressure limits are bcsed on the i 1%-tolerance requirement (Ref.1) for lifting pressures above 1000 psig. The lift setting is for the ambient conditions associated with MODES 1, 2, and 3. This requires either that the valves be set hot or that a correlation between hot and cold settings be established.

The pressurizer safety valves are part of the primary success path and mitigate the effects of postulated

' accidents. OPERABILITY of the safety valves ensures that the RCS pressure will be limited to 110% of design pressure.

The consequences of exceeding the ASME pressure limit (Ref.1) could include damage to RCS components, increased leakage, or a requirement to perform additional stress analyses prior to resumption of reactor operation.

(continued)

SAN ON0FRE--UNIT 3 B 3.4-51 Amendment No. 116

Pressurizer Safety Valves B 3.4.10 BASES (continued)

APPLICABLE All accident analyses in the UFSAR that require safety valve SAFETY ANALYSES actuation assume operation of both pressurizer safety valves j to limit increasing reactor coolant pressure (Ref. 3). The '

overpressure protection analysis is also based on operation of both safety valves and assumes that the valves open at the high range of the setting (2500-psia system design pressure plus 1%). These valves must accommodate pressurizer insurges that could occur during a startup, rod withdrawal, ejected rod, loss of main feedwater, or main feedwater line break accident. The combined relief capacity

, of these valves is sufficient to limit the System pressure to within its Safety Limit of 2750 psia following a complete loss of turbine generator load while operating at RATED THERMAL POWER and assuming no reactor trip until the first )

Reactor Protective System trip setpoint (Pressurizer Pressure-High) is reached (i.e., no credit is taken for a 1 direct reactor trip on the loss of turbine) and also assuming no operation of the steam dump valves. The startup  !

accident establishes the minimum safety valve capacity. The startup accident is assumed to occur at < 15% power. Single '

failure of a safety valve is neither assumed in the accident  :

analysis nor required to be addressed by the ASME Code.

Compliance with this specification is required to ensure that the accident analysis and design basis calculations remain valid.

The pressurizer safety valves satisfy Criterion 3 of the NRC Policy Statement.

l l

LCO The two pressurizer safety valves are set to open at the RCS i design pressure (2500 psia) and within the ASME specified tolerance to avoid exceeding the maximum RCS design pressure SL, to maintain accident analysis assumptions, and to comply J with ASME Code requirements. The upper and lower pressure '

tolerance limits are based on the

  • 1% tolerance requirements (Ref.1) for lifting pressures above 1000 psig.

The limit protected by this specification is the reactor coolant pressure boundary (RCPB) SL of 110% of design pressure. Inoperability of one or both valves could result in exceeding the SL if a transient were to occur. The consequences of exceeding the ASME pressure limit could include damage to one or more RCS components, increased s

leakage, or additional stress analysis being required prior to resumption of reactor operation.

2 (continued)

SAN ON0FRE--UNIT 3 B 3.4-52 Amendment No. 116

Pressurizer Safety Valves B 3.4.10 BASES ACTIONS B.1 and B.2 (continued) l l

The 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> allowed is reasonable, based on operating l experience, to reach MODE 3 from full power without l challenging plant systems. Similarly, the 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> allowed [

is reasonable, based on operating experience, to reach MODE 4 without challenging plant systems. The change from  ;

MODE 1, 2, or 3 to MODE 4 reduces the RCS energy (core power  !

and pressure), lowers the potential for large pressurizer insurges, and thereby removes the need for overpressure protection by two pressurizer safety valves.

SURVEILLANCE SR 3.4.10.1 REQUIREMENTS SRs are specified in the inservice testing program.

Pressurizer safety valves are to be tested one at a time and )

in accordance with the requirements of Section XI of the ASME Code (Ref. 1), which provides the activities and the Frequency necessary to satisfy the SRs. No additional requirements are specified.

The pressurizer safety valve setpoint is i 1% for OPERABILITY.

REFERENCES 1. ASME, Boiler and Pressure Vessel Code,Section III, Section XI.

2. UFSAR, Section 5.4
3. UFSAR, Section 15.

SAN ONOFRE--UNIT 3 B 3.4-54 Amendment No. 116

! I o

I l

l l

l I

l l

Attachment C Proposed Technical Specification and Bases (Bases changes are for Information Only)

(Redline and Strikeout) i SONGS Unit 2 l

l-

Pressurizer Safety Valves 3.4.10 3.4 REACTORCOOLANTSYSTEM(RCS) 3.4.10 Pressurizer Safety Valves LC0 3.4.10 .Two pressurizer safety valves shall,.b.e OPERABLE with a l i ii.

as-found:iliftsettingsof2500 psia',7+3%lo@24iI?..

APPLICABILITY: MODES 1, 2, and 3.


NOTE----------------------------

The lift settings are not required to be within LC0 limits during MODE 3 for the purpose of setting the pressurizer safety valves under ambient (hot) conditions. This exception is allowed for 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br /> following entry into MODE 3 provided a preliminary cold setting was made prior to heatup.

EachMesslurizefiafety'is19eMas{ad. as 'foundj:t'oleranceEof

+3% or:N2%.v -:FollowingT. testing in: ac.cordanceJwith _. , . ..

TS! 5; 5. 2210 k pres su ri zer L s a fe ty;; va l ves is halli. beis etiwi thi n 11Rofit h.eis pe.c i fi edi s e tnoi.nt t ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. One pressurizer safety A.1 Restore valve to 15 minutes valve inoperable. OPERABLE status.

B. Required Action and B.1 Be in MODE 3. 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> associated Completion Time not met. AND 0_R B.2 Be in MODE 4. 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> Two pressurizer safety valves inoperable.

SAN ON0FRE--UNIT 2 3.4-28 Amendment No. 127

Pressurizer Safety Valves 3.4.10 SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.4.10.1 Verify each pressurizer safety valve is In accordance OPERABLE in accordance with inservice with the testing program. Following testing, liii.

~

Inservice as-found; lift se_.tting_s..shall be.within +3% Testing Program ori-2*t.t.;.However, . pressurizer safety valves

~

shall? be' set:1to within *1%[of1the.lspecified I setpoin.ti 14.  ;

i l

1 l

l l

l l

l SAN ONOFRE--UNIT 2 3.4-29 Amendment No. 127

Pressurizer Safety Valves B 3.4.10 B 3.4 REACTOR C0OLANT SYSTEM (RCS)

B 3.4.10 Pressurizer Safety Valves 1 l

BASES

]

BACKGROUND The purpose of the two spring loaded pressurizer safety  !

, valves is to provide RCS overpressure protection. Operating in conjunction with the Reactor Protection System, two )

valves are used to ensure that the Safety Limit (SL) of i

2750 psia is not exceeded for analyzed transients during operation in MODES 1, 2 and 3. During MODE 4, MODE 5, and MODE 6 with the reactor pressure vessel head on, overpressure protection is provided by operating procedures and LC0 3.4.12, " Low Temperature Overpressure Protection (LTOP) System " For these conditions, American Society of MechanicalEnhineers(ASME)requirementsaresatisfiedwith one safety valve.

The self actuated pressurizer safety valves are designed in accordance with the requirements set forth in the ASME . . _

Boilet and Pressure Vessel Code Section III (Ref. 1 as-foundtlifttpressuresist2500 p,sia,#3*eorM2%%Ref)d. 4 d, T Fo11'wingitesting

~

withinfi1%1of5ther# pressurizer %safetyyvalvesish o

specifiedisetpoint; The iequhci iiil t

pic33uie is 2500 paia 1^..'The safety valves discharge steam from the pressurizer to a quench tank located in the containment'(Ref. 2). The discharge flow is indicated by an increase in temperature downstream of the safety valves and by an increase in the quench tank temperature and level.

TheTs5!fou d upper onll imi ti ngithe s RCS@ pres su retto pes surs of30lda V110%S t des i gn! nc611iiit tll6fG3%31Wbase pre s s u re:;;;fo r infrequentidesign3basisneventsiandil20%iofsdesigntpressure for41 Imi .t i ng ; f aul ted; even t si JThes a sefoundil owera pres su re :.

tolerance 41imit occ u rs t ont h.i ressgh y p[of92%11 si b_ase d ionien s u ri ng s ai actuationi(Ref.J); gizer; , i ne pressure l prior;tossafety3yalve uppei anu ivwei fessui e j unj a ai e unscu un Luc A A9-Luieiante i equ i s einen t pc i . Aj ivi iiiLiny pressuies o'u vy c 1000 p3 h. The lift setting is for the ambient conditions associated with MODES 1, 2, and 3. This requires either that the valves be set hot or that a correlation between-hot and cold settings be established.

The pressurizer safety valves are part of the primary success path and mitigate the effects of postulated accidents. OPERABILITY of the safety val.ves ensures that the RCS pressure will_be limited to 110% ort 120% of..desikn te pres s ure , Ldependi designTbasiss: event. The ng [on T thef f requencifcl consequences of exceeding as s_1 the ficat ion'ofi' ASME pressure' limit"(Ref. 1) could include damage to RCS components, increased leakage, or e requirement to perform additional stress analyses prior to resumption of reactor operation.

(continued)

-SAN ON0FRE--UNIT 2 8 3.4-51 Amendment No. 127

4 Pressurizer Safety Valves B 3.4.10 BASES (continued) i APPLICABLE All accident analyses in the UFSAR that require safety valve SAFETY ANALYSES actuation assume operation of 6.th pressurizer safety valves

to limit increasing reactor coolant pressure (Ref. 3). The
overpressure protection analysis is also based on operation j

of both safety valves and assumes that the valves open at the high range of the setting (2500-psia system design

_ pressure plus 1%). These valves must accommodate pressurizer insurges that could occur during a startup, rod withdrawal ejected rod, loss of main feedwater or main feedwateriinebreak. accident. Thecombinedreiiefcapacity of these valves is sufficient to limit the System pressure to within its Safety Limit of 2750 psia following a complete loss of turbine' generator load while operating at RATED THERMAL POWER and assuming no reactor trip until the first Reactor Protective System trip setpoint (Pressurizer Pressure-High) is reached i.e., no credit is taken for a direct reactor trip on the(loss of turbine) and also assuming no operation of the steam dump valves. The startup i

~ accident establishes the minimum safety valve capacity. The startup accident is assumed to occur at < 15% power. Single i failure of a safety valve is neither assumed in the accident

! analysis nor required to be addressed by the ASME Code.

4 Compliance with this specification is required to ensure j

~

that the accident analysis and design basis calculations remain valid.

2 The pressurizer safety valves satisfy Criterion 3 of the NRC Policy Statement.

LC0 The design twopressure pressurizer '2500 safety) valves psia and within arethe setASME to open at the RCS specified

tolerance to avoid exceeding the maximum RCS design pressure
SL, to maintain accident analysis assumptions,_and to comply

, Thel as-found < upper / pressure .

with.ASMECode.

tolerancealimitiofa3%2istba requirements.$$donslimitingLthe?RCSipressure

toil 10%soffdesiin; pressure;for;1nfrequentidesignbasis1 d

events L and e 120% > of' design! pressureiforal imi ti ng / f aul ted .

events N Theiassfoundflower?pressurettoleranc'erlimit;ofM 2%

issbasedfoniensuringLalreactoretriploccursionihigh
pressurizerfpressurejprioritofsafepjvalvef actuati,onf(Ref!

{ 4). % upper oriu iuwer pr c33ui e, j ini L3,aie,uadeu via Liit 2

, A-a- Lv i ci o sit.c i equ i s ciutric pe i . Aj ivi iiicsay picasusc3 abvvc 1000 pais. -The limit protected by this s is the. reactor coolant pressure boundary (RCPB)pecification SL of 110%

orL120% of design pressure. Inoperability of one or both l valves could result in exceeding the SL if-a transient were to occur. The consequences of exceeding the ASME pressure limit could include damage to one or more RCS compc rots, increased leakage, or additional stress analysis beug

. required prior to resumption of reactor operation.

W (continued)

SAN ON0FRE--UNIT 2 B 3.4-52 Amendment No. 127

_ . . . _ ___ __. . . _ . ~. _ __ _ _ . . _ _ _ . _ _ _ _ _ _ . _ __

Pressurizer Safety Valves B 3.4.10 BASES ACTIONS B.1 and B.2 (continued)

The 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> allowed is reasonable, based on operating experience, to reach MODE 3 from full power without challenging plant systems. Similarly, the 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> allowed l is reasonable, based on operating experience, to reach l M0DE 4 without challenging plant systems. The change from '

MODE 1, 2, or 3 to MODE 4 reduces the RCS energy (core power and pressure), lowers the potential for large pressurizer  !

insurges, and thereby removes the need for overpressure l protection by two pressurizer safety valves.

l SURVEILLANCE SR 3.4.10.1 REQUIREMENTS SRs are specified in the inservice testing program.

Pressurizer safety valves are to be tested one at a time and in accordance with the requirements of Section XI of the ASME Code (Ref. 1), which provides the activities and the Frequency necessary to satisfy the SRs. No additional requirements are specified.

The assfddnd. pressurizer safety _ valve .tolbFsncsfis33Qor . l E2%1forSOPERABILITY.;j followingitesting E pressurizerf safety, valvesishallibeiset91thinf*1%:offtheisp;ecified;setpoint; s e i.pv i n i. is i 14 Tur GFERABILITY.

REFERENCES 1. ASME, Boiler and Pressure Vessel Code,Section III, Section XI.

2. UFSAR, Section 5.4
3. UFSAR, Section 15.

l 4i AB@iit t sr LNoMSTs96M23 l d ali@Did erne n?.'19h i996 i s ubj ec t s:)Tra nsmi t t al 4a nd l Compl e ti oni.ofit he ; S C E i SONGS t

2/3 JSV1 Tolerance [ Study 2 I

SAN ON0FRE--UNIT 2 B 3.4-54 Amendment No. 127

i l'

l 1

Attachment D Proposed Technical Specifications and Bases i (Bases changes are for Information Only)

(Redline and Strikeout)

SONGS Unit 3 l

i 1

r l

l l

l

Pressurizer Safety Valves 3.4.10 3.4 REACTOR COOLANT SYSTEM (RCS) 3.4.10 Pressurizer Safety Valves LC0 3.4.10 .Two pressurizer safety valves shall be OPERABLE with a liii as@foundslift settings of 2500 psia,i+3%for42% t--h.

APPLICABILITY: MODES 1, 2, and 3.

)


NOTE---------------------------- l The lif t settings are not required to be within LCO limits during MODE 3 for the purpose of setting the pressurizer safety valves under ambient (hot) conditions. This exception is allowed for 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br /> following entry into MODE 3 provided a preliminary cold setting was made prior to heatup.

Eabli?pressurizerfsafetyLValYe%As? an 'as1found:sfl'branceJf

+3% orl-2%iETollow1.ngitesting11n;accordan~ceiwith 1 .

TS ; 5;5 ; 2.10,j. pres su ri zer ;;s afe t9.s val vesis ha l l f befs et L wi t hi n il %::Lof [t he; s pe c i fi ed ;s et poi n t ;

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. One pressurizer safety A.1 Restore valve to 15 minutes valve inoperable. OPERABLE status.

B. Required Action and 8.1 Be in MODE 3. 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> associated Completion l Time not met. AND OR B.2 Be in MODE 4. 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> Two pressurizer safety valves inoperable. l SAN ON0FRE--Ut?IT 3 3.4-28 Amendment No. 116

_ . ~ . . - . _ - _ . _ _ - _ _ _ . . _ _ . . _ _ _ _ _ . _ _ _ _ . _ _ _ _ _ . . . . . . _ _ . - . _ . .

1 Pressurizer Safety Valves i 3.4.10

\

SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.4.10.1 Verify each pressurizer safety valve is In accordance OPERABLE in accordance with inservice with the testing progr.am. Following testing, iiii. Inservice 64found;. lift settings Testing Program ori-2%hEHowevern pres. .shal1 surizer.; safetybe withi.n 43(

1 valves shallibelsetito:within?..*1%%off thegpecified

's.etpoi_ntett.

f f

4 I

i l

] --.

i l'

SAN ON0FRE--UNIT 3 3.4-29 Amendment No. 116

-r .

,, y _.- , .- ., ,, - ,- - - - - .---,,-x-

l Pressurizer Safety Valves i B 3.4.10 )

B 3.4 -REACTOR COOLANT SYSTEM (RCS)

B 3.4.10 Pressurizer Safety Valves BASES 1

BACKGROUND The purpose of the two spring loaded pressurizer safety '

valves is to provide RCS overpressure protection. Operating in conjunction with the Reactor Protection System, two valves are used to ensure that the Safety Limit (SL) of 2750 psia is not exceeded for analyzed transients during operation in MODES 1, 2 and 3. During MODE 4, MODE 5, and MODE 6 with the reactor pressure vessel head on, overpressure protection is provided by operating procedures and LC0 3.4.12, " Low Temperature Overpressure Protection (LTOP) System " For these conditions, American Society of Mechanical Engineers (ASME) requirements are satisfied with one safety valve.

The self actuated pressurizer safety valves are designed in accordance with the requirements set forth in the ASME,.

Boiler and Pressure Vessel. Code, Section.III_(Ref. 1 .J The as-found411ftvpressure;is52500 psiaW3%for:-2%SRef)n4).a Followi ng : tes ti ng 4 pressuri zer;1:saf ety

  • val ves ;sha' i n be" set wi thi n it 1%L ofithe itspeci f i ed ); s e t poi nt . The iequo ed liiL ~

piessuic is ^500 psia i 1;..~The safety valves discharge steam from the pressurizer to a quench tank located in the containment (Ref. 2). The discharge flow is indicated by an increase in temperature downstream of the safety valves and by an increase in the quench tank temperature and level.

Thelaskf00Adid ertpres'sureit01shncellisitMf33Ris4ased onslimitingith .RCS; pressure 4to1110%Joftdesig Epressure.i?for infrequentsdesignLbasisteventscandil20%1of designJpres'sure forilfmitingifaultedfevents. ITheras-found lowerzpressure-tolerance /1imit.:Lof52%AistbasedJon; ensuring a. reactoritrip occurston:-highipressurizeripressure prior to safetp valve actuation [(Ref;d)v,Theupper and lum f essute i hnj n ar e vascu vu Luc A v.-tuiciante a cqu i s tiuta n pt s . Aj ivi iiicing pie 33uic3 abuve 1000 p3 9 The lift setting is for the ambient conditions associated with MODES 1, 2, and 3. This requires either that the valves be set hot or that a correlation between hot and cold settings be established.

The pressurizer safety valves are part of the primary success path and mitigate the effects of postulated accidents. OPERABILITY of the safety valves ensures that the RCS pressure will be limited to.110%J r): 120% of design pressure sdepending:fonithelfrequencyiclassification ofithe designTbasisxevent.~ The'conseguences of exceeding the ASME pressure' limit'(Ref. 1) could include damage to RCS components, increased leakage, or a requirement to perform additional stress analyses prior to resumption of reactor operation.

(continued)

SAN ON0FRE--UNIT 3 8 3.4-51 Amendment No. 116

Pressurizer Safety Valves B 3.4.10 BASES (continued)

APPLICABLE All accident analyses in the UFSAR that require safety valve SAFETY ANALYSES actuation assume operation of both pressurizer safety valves to limit increasing reactor coolant pressure (Ref. 3). The overpressure protection analysis is also based on operation of both safety valves and assumes that the valves open at the high range of the setting (2500-psia system design pressure plus 1%). These valves must accommodate pressurizer insurges that could occur during a startup, rod withdrawal ejected rod loss of main feedwater or main feedwateriinebreakacc,ident. Thecombinedreliefcapacity of these valves is sufficient to limit the System pressure to within its Safety Limit of 2750 psia following a complete loss of turbine generator load while operating at RATED THERMAL POWER and assuming no reactor trip until the first Reactor Protective System trip setpoint (Pressurizer i.e., no credit is taken for a Pressure-High) direct reactor trip is on reached the (loss of turbine) and also assuming no operation of the steam dump valves. The startup accident establishes the minimum safety valve capacity. The startup accident is assumed to occur at < 15% power. Single failure of a safety valve is neither assumed in the accident analysis nor required to se addressed by the ASME Code.

Compliance with this specification is required to ensure that the accident analysis and design basis calculations remain valid.

The pressurizer safety valves satisfy Criterion 3 of the NRC Policy Statement.

LCO The two pressurizer safety) designpressure(2500 psia and valves withinare thesetASMEto open at the RCS specified tolerance to avoid exceeding the maximum RCS design pressure SL, to maintain accident analysis assumptions with . ASME . Code. requirements. ._Theias-found ~

rupp, and,to comply eripressure tolerancellimitfof n3%fis; based ontlimitingi: thel:RCS pressure toil 10%jofldesi eventsi and ?l20%gnipressure?fordnf

ofcdesign
pressure +for;< requent$ design?

limiting? basi sT ~ ~

faulted events N The;askfoundflowerfpressureitolerancetlimit(ofM2%

istbasedion?ensuringiaireactorftriproccurston high' pres su ri zeripres sure/ pri orntof s afe,tysv al ve J actu a ti ont(Rsf i 4). ine upper aliu !vner p a c3 3u r c , l un a c3, a s,t vastu un cut 2

v. - c u i c i a u t.e a cqu a i tiacu c pei . Aj ivi aiscing pit 33ures a'uve u 1000 p3is. The limit protected by this s is the reactor coolant pressure boundary (RCPB)pecification SL of 110%

ort 120% of design pressure. Inoperability of one or both l valves ~could result in exceeding the SL if a transient were I to occur. The consequences of exceeding the ASME pressure limit could include damage to one or more RCS components, increased leakage, or additional stress analysis being required prior to resumption of reactor nperation.

I 1

1 (continued)  !

SAN ON0FRE--UNIT 3 B 3.4-52 Amendment No. 116

Pressurizer Safety Valves B 3.4.10 BASES l

ACTIONS B.1 and B.2 (continued) l The 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> allowed is reasonable, based on operating experience, to reach MODE 3 from full power without challenging plant systems. Similarly, the 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> allowed is reasonable, based on operating experience, to reach MODE 4 without challenging plant systems. The change from MODE 1, 2, or 3 to MODE 4 reduces the RCS energy (core power j and pressure), lowers the potential for large pressurizer  ;

insurges, and thereby removes the need for overpressure protection by two pressurizer safety valves.

I SURVEILLANCE SR 3.4.10.1 REQUIREMENTS SRs are specified in the inservice testing program.

Pressurizer safety valves are to be tested one at a time and in accordance with the requirements of Section XI of the ASME Code (Ref. 1), which provides the activities and the Frequency riecessary to satisfy the SRs. No additional requirements are specified.

The 'a'-fou~nd s pressurizer safMy valve toleranceffs +3% or

-2% for:0PERABILITY: . LFolloWing{testi_ng,L pressurizer safety valvestshall'beiset'withinii1%iofithe:specified setpoint.

s t ipu un. o i le fur GFETABILITs.

REFERENCES 1. ASME, Boiler and Pressure Vessel Code,Section III, Section XI.

2. UFSAR, Section 5.4
3. UFSAR, Section 15.

~

4. ABBl Letter:No.t~ ST-96-6231 dated December 19,_::1996i- .

subject Transmittal andicompletionfof:the SCE. SONGS 2/3_PSV3 Tolerance-Stub I

i l

SAN ON0FRE--UNIT 3 B 3.4-54 Amendment No. 116 l

1 l

l l

PCN 493 Attachment E Proposed Technical Specifications SONGS Unit 2 l

i l

l l

k

Pressurizer Safety Valves 3.4.10 h

3.4 REACTOR C0OLANT SYSTEM (RCS) 3.4.10 Pressurizer Safety Valves LC0 3.4.10 Two pressurizer safety valves shall be OPERABLE with as-found lif t settings of 2500 psia, +3% or -2%.

APPLICABILITY: MODES 1, 2, and 3.


NOTE--------------------------_-

The lift settings are not required to be within LC0 limits <

during MODE 3 for the purpose of setting the pressurizer i safety valves under ambient (hot) conditions. This exception is allowed for 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br /> following entry into MODE 3 provided a preliminary cold setting was made prior to heatup.

Each pressurizer safety valve has an as-found tolerance of

+3% or -2%. Following testing in accordance with TS 5.5.2.10, pressurizer safety valves shall be set within *'

11% of the specified setpoint.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME 1

A. One pressurizer safety A.1 Restore valve to 15 minutes ,

valve inoperable. OPERABLE status.

B. -Required Action and B.1 Be in MODE 3. 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> associated Completion Time not met. AND t-

-OR B.2 Be in MODE 4. 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> Two pressurizer safety valves inoperable.

SAN ON0FRE--UNIT 2 3.4-28

Pressurizer Safety Valves 3.4.10 SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.4.10.1 Verify each pressurizer safety valve is In accordance ,

OPERABLE in accordance with inservice with the I testing program. Following testing as-found Inservice lift settings shall be within +3% or -2%. Testing Program However, pressurizer safety valves shall be set to within *1% of the specified setpoint. i l

l l

l l

l l

l SAN ONOFRE--UNIT 2 3.4-29

PCN 493 l

1 l

l 1

I Attachment F I l

Proposed Technical Specifications )

l SONGS Unit 3

Pressuriger Safety Values 3.4.10 3.4 1 REACTOR COOLANT SYSTEM (RCS) 3.4.10 Pressurizer Safety Valves-LC0 3.4.10 Two pressurizer safety valves shall be OPERABLE with as found lift settings of 2500 psia, +3% or -2%.

' APPLICABILITY: MODES 1, 2, and 3.


NOTE---------------------------.

The lift settings are not required to be within LC0 limits during MODE 3 for the purpose of setting the pressurizer safety valves under ambient (hot) conditions. This exception is allowed for 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br /> following entry into MODE 3 provided a preliminary cold setting was made prior to heatup.

Each pressurizer safety valve has an as-found tolerance of

+3% or -2%. Following testing in accordance with TS 5.5.2.10, pressurizer safety valves shall be set within.

  • 1% of the specified setpoint.

ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. One pressurizer safety A.1 Restore valve to 15 minutes valve inoperable. OPERABLE status.

B. Required Action and B.1 Be in MODE 3. 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> associated Completion -

Time not met. AND OR B.2 Be in MODE 4. 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> .

Two pressurizer safety i valves inoperable. i SAN ON0FRE--UNIT 3 3.4-28

Pressurizer Safety Valves 3.4.10 SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.4.10 i Verify each pressurizer safety valve is In accordance OPERABLE in accordance with inservice with the testing program. Following testing as-found Inservice lif t settings shall be within +3% or -2%. Testing Program However, pressurizer safety valves shall be set to within 11% of the specified setpoint.

l l

l 1

SAN ON0FRE--UNIT 3 3.4-29

i l

I l

l l

Attachment G (For Information Only)

Updated Final Safety Analysis Report (UFSAR) Chapter 15 Analysis Sections for Loss of Condenser Vacuum, Chemical and Volume Control System Malfunction, and Feedwater System Pipe Breaks Analyses.

I

15.2 DECREASE IN HEAT REMOVAL BY THE SECONDARY SYSTEM TURBINE PLANT 15.2.1 MODERATE FREQUENCY INCIDENTS 15.2.1.3 Loss of Condenser Vacuum 15.2.1.3.1 Identification of Causes and Frequency Classification The estimated frequency of a loss of condenser vacuum classifies it as a moderate frequency incident, as defined in reference 1 of section 15.0. A loss ofcondenser vacuum may occur due to failure of the circulating water system to supply cooling water, failure of the main condenser evacuation system to remove noncondensible gases, or excessive leakage of air through a turbine gland packing.

in accordance with the direction given in Sections 15.0 and 15.0.7, additional information whict.

completes the presentation of this event is provided in Section 15.10.2.1.3.

I5.2.1.3.2 Sequence of Events and Systems Operation The turbine generator trip that occurs due to a loss of condenser vacuum would normally generate an immediate reactor trip signal from the turbine stop valves (through unitized actuator pressure monitors). If credit is not taken for reactor trip on turbine trip, reactor trip would occur as a result of high-pressurizer pressure. The turbine bypass valves are unavailable following a loss of condenser vacuum due to the actuation of the condenser vacuum interlock on the turbine generator trip. The feedwater pumps would trip on low suction pressure soon aner turbine trip.

It is conservatively assumed that feedwater flow is terminated immediately aner turbine trip. The pressure increases in the primary and secondary systems following reactor trip are limited by the pressurizer and steam generator safety valves. Following turbine trip, offsite power is available to provide ac AC power to the auxiliaries. The case ofloss of all normal ae AC power is presented in paragraph 15.2.1.4. The operator May may cool the NSSS using manual operation of the auxiliary feedwater system and the atmospheric steam dump valves any time aner the reactor trip occurs.

The analysis presented herein conservatively assumes that operator action is delayed until 30 minutes aner the first indication of the event.

The consequences of a sin 3:u nie! function of en ective coniponaii vi spieni fo!loivin3 e loss of condenser iecunni Loss of Condenser Vacuum are discussed in peregrepli ! 5.2.2.3.

Tab!v 15.2-1 gis cs e scquencu of events no more adver'se thet occur than those following a loss Loss of condenser incunni Condenser Vacuum' with a single failure; which is described in 15.2.2.3. Therefore, refer to the finel steb!lkcd condition sequence ofevents and results of the

~

LOCV with Single Failure ~ (Section 15.2.2.3) for. event sequence details.

igr[rt 3oja nup sXslaut da;jouunuaa 1

1ya soja uup sXs)aut daajouuuuoc dujeutataas jo[jom!uS u loss oj3oupausaJ Auonnut ula uo uto;a upraaso tycu ptosa jolloa!uS e qoss 033oupousaJ Auonnut sppt g!u8 01 dv!inaa' mq!oy !s pasapqap ;u duac 52edy igrgrg-l I

, , , _ , _ , m _ ,__-- - - . ,_ - ,- - _ - ,

7 41 D 1I t 31 IID 111 D I T41 An3 f '

g* ' " ', f ' *f ',C ' 1 1 119 tkPDD T NC5f AlfCS 1 A 91 tilCC AT 99.lfnSffC3f- - - - . - _4_D9nif . . - - -t. .t- f- - -M DC m,,

. - _ - .1fC1ff9 ) tis 7 ND a SMtt1$(11131,__ lf f A- _ - - - -I Dlit if 9C9f f AMI f fI C391T ATI fF'A' Cf f f fif tDiMf

, _ _ _ _ ,. , _ . ._ _,. , ,, . . f fiS 1119T 111711 !t tdt kilf ATI

.,_,r_ _ , _

nS dStf 11fi S f f Af t f t f n919D1S A At11t f91k.,if_l\[, tif _ _lits _ 19D91

,, - _ _ ,A1 - _ _9 if f 9u ..OC_Cf titA lirf T1f1f f D1Mf 1f CTf t 1fTN m13-

_ ... ___ ,,y . . . _ , , , , - , _ _ _ _ . , _ , - - . ,-- ;, , ;_ _, _,

9 Af f lItn 191_ dl A9f Dtit 119C9Y 1n9n tif C991f A11 f e'n Mt1f f 11TS S Y# 1 h1

% 9 Af 131D1t Af T nSC9t f nuf til it fpir131_ ,

+

g* _* *,

  • V ' f ' C ' " m---------_- -. , - , - _, - --,;,------

T 111 tn I f UI DI t 131 S I C DIID IIItlIDI 1 AIInill A11C 1 f f S f f TI(1fi ditf Df T IS19f C )tt iM f f iT1f 711 9 At f N11fif tic nCSM 1 A ?ttITtf( 7S 11TS t k DD D I SCd Af fCS 1 A U T ACC AT 9 Atin3t fCSF _ _ - _ _ _ _ .41tMt1f fit Df S nf Cilf CCMf tf f C39tf Ar f 1 *t ' A TTI ditf 1fint711'

,, , , _ , _ _1t__f ACS ,. _ d,1ti _ _ ,Df fiS1ST C 1fiD1__ ,- ,- - . .,, _ . , ,,

--u 31 $ nif thnS 1 A 1fiS DfiDf[CIC nicinCCSn 1/9fn u )ti N fIC1Mf lit 1 STATS ,

fr'*."'

D3f 391T Atf AT 1f tS fit 7tf fifDT 1t fnnN A1 AI(91St11AffTAT lits lf f SCC 1f f f731- - __ -__ _ ,9 Af t171tf C( C13t tic M DC

-, .7 , . ._-_ , .r---_ _, . . ___ _, . _ . . ,u___. .. , .. . . , _ _ , , - . .

M{3919n1Alff39f1fnS 19St91 A T M f A11tf fi C[C131fI lf\O D[ NT 9CC111 S f f T111ND1TTf fI M( lits ltf 9CC1fi. f_791

_ _- CdfU f f iS 111111D19 A11ntif Af f C T AI- . ,1tfS dt if f 9tdDT df A9 SCC .4 Dt f 9tn19C f tf Af ffl A1 Mf 1t[ itis 9 At it Ad9f D111t91111111

- - -- r J /.,\ A aJ\ ~ - r ' , , ' ', - i s

- --- - ' -- - .l s2 u cifI'ISI'\ TC AT [ C( C'1Sf t fa---i;;---,-----

r-- - - - - - , - - --

17 T/ led D[ M SI S '4 D' T IMI M t 1t ffif 1f f S 1309'1 A' I- Ttd9f D1ttiN I N9t Af f 9f 4 9f f 111*('1U1/f S I?'A.2 ir---i --- ,- . _ _ _ _, _ _ , .. _ __.._. -___ _ _ _ _ , ___ ,_n___

--1A n3131ffittiS if1N C31 A19Af tnt 11 A11C 1f fSt1 _ . -

M niffif lff A1fif 93 11TS 11I AC1 Uif 4 ST CS lli SCC 1ti t7D1f A11 Y Atf n u lt t9 D f nCC ni 9Anngf f C,f_ ypSnnlli n$SDnCg )gC pqqni rC nnif)ut9 nI )tnC tighnyytS[ SD]79gf[ utnifnCd,33!n "I$$) Ikk  !!_ j$!- )OIk 9Ef $$ 9 )")'Y !k !!( ) kk _&)E '_ IO !

u--- -' - - - . - - - - - - - - - - - - -------;--r.- - - - -r --. ,,_ ,, , ,_,- - . . - . , -

f f A u f ' tis' Df TM df 9CC1tf f 731- - - - - -lli SCCSf f S u ST S 9 AtiCtitSf Mf 111 Af if ST- ,-1 A 9 4 ?tt1fS11S 1119 f1 311391C ATI d9DN g

_")N

)fk) !!.!)!EI )9!.)- !!k 9 9I. I)!U)UIk lf f 3CC1f f 1791 ?tf f n C Df(( 1-SY!I N )I)U$! ' E$

. - -(_._. . -_, - - . . . . . .. . - - . . . . . . . - - , , _ _ , . - . . . . . . , _. , .-- - _

C99 Af T1f Df[ f t3111 F Stitn A D1' nnS lA. , ,1 FIN ANStfittN AT 1f tS C1SDtf f . 9f f 9f 7ti AT- - . CDf31( 4 Df % 3C' A39D1f CS AT D i--- - - -- i --- -r---- > - - ----i--- --i-in u 91 111111D1 C99AttnUf( diSCCn13' Uf f f f ffitDI S AT S 11119 1 -1Stitlf

- - - ST - - 1111f

- - - af sN .A1 w ea a* - 34 - ->tC

- --tiCC1f

- - - --t -113n r ' , if C f t - -

i--- - - - ,- - - - - - -- - - - - -- - ---rusi--..-_- ._,._ __ - . , - - _ _ _ _ _,_ _ _ , _ _ _ _ _ , _, _ _ - . -

tSCC 1tfDfI 1lfS 111f111f1111111 SV!I.Y13n f1fll Yf A u 31 S D t 1f S ' 01119N D l A u 91 11111 t D E SATS Q ,ISi ,.13111Yf 3li g

. _ _ , ._ _ - ,;.r-,u,, .. .. - _ - _ _ , , - ___

df Anif 99C U t ffN1191 d SDIN f\ O D IffNCC1tt$' 1fIS DCCn!!tdll Af f AT Df f f f1131 131TT5fSf D1ni N

, _ . ., . . . . . , . , . . . . . _ _ , . . . 1f._I ,? ,1"w y jg

- - - - - - - - - - - - u---------- , -- uw---------- re-- ,- ,; , ,

9 Af f CSI 4 D114 S" _ _ _ _ _ _ _ _ _ _ _ _ _ ,1 __,h b7up

,. .. .. .. _,,, _ T/391311C11f9111S _ _ . - _ . . _ ,f\N , .D lf f ,9CC1tf . - - -3 . n3f

, _ .D[C .. ,lliS _ , f,tt9ti.dI

._ . . _ SCC _ _ .1f f 1791- _, . _ . .

- - - - - -.__,...7

- - . _ _ _ . __ ,dISCC1ffS tSD91AI 411S A d9ffttib A1 'f f S if1 SCCni17SI_ _ _ - CD191( 4 Df 4 9C' Uf f 11111191 9D Yf f NCC1f f $ ir T

  • A"f A Yf Cf D u DC 1 A1f ttif ,.lA I SC1f T1 llI 1lfS lit __. tiSC1 NSStiN f\O D dt SCC 1f f 9' T ITS T Dt tkS A1 f\ $C1f f SC SAliCtif 3f Mf f C . _ _ . _ _ .14 311 lit 1D AtS S; y , , . - . . _ - . - . .-. ---- .-g., - . - . , - . - - - - g-- -. , - _ , - . , - . . . - --, , . ,g-- ,, -

Ir'A.F" t f f 9f 391C111N it t9 S AT S 111f 91 f f A M T 111S 5fi dnif 9NC TUC191 111ttiC5fAf i 1f ff yltfitiS . 1\S D AY ittO g T - ,- g-- -

J,- ' - B l - 6-- -

-g ~ Yl - 5 iUU, J ,

dI r--- f f flUf -- u( ---- 9113f 9,[ ,;-3 tf f 9f 371CS' nif1 A N'-'IIIS - - t-AC' - - -C-A -f iS - - '1'1

- - -131 - - f- l-A-------r-----

A

- -Stf - -A'( - -'1- t- f- S C99 A f tif -. _

D' f (

  • U A' A % S f f A f O AT

__v,_ . _ _ _ _ , _ , , _ _ _,

if SCf 9f f f f A M" -it tS tif 9f f.If f 9CCnt t731 dt SCCni S 1f id etkT1DI IC NSf f 3f D1Mf CA Af f 3f fnit$ti t if f f 3ND13 ttiS 311334 AT TDC19F f i S ?t i 11DtfCNAt1*

l ii. i v c s u--r- u- 1. _ . . _ _ , _ _ , _ _ _ _ _ _ . .. ._,___,_g _________,___,_,,_..-.____,___-

TM_ MITE I 11S n( t litilliS AS t f ?141 A1 AT f f t fif AT 1Dlli tkDDD d71f D1113131C f Afl A M 1119 D T ACC aj l 1 e ',* T c - 1 e . _ - - _

S AI T1f 9 f f C91 _---4 D91f nt11 f C d1 SC31113if 111 f f it t 3C 1F'*.f 1t f T M1f 9t f IP"" t'

,_ , - _ - _ , _ , _ _ , _ _ . _ _ ,_ _ , _ _ . . _ , , , - - ,7 - _ , _ _ , . _ _ _ , _ __ - - - - _,7 ,

ITIS IACC AT C 13 D l i f IT A M nnN l A 9f AC1tY S AY lliS 1n11/ fits C1 AN 4 Df % SC 5f f A1f1f 9SC U I Dlf tif lli9f $DCN f f f 1113


. _ _ _ - . . . - - . -_- . --- . _ - - - - - - .7 g-------- ., . - . - - - - - . - - _ , - - . - - g_._- ., , . , - - -

CSMfitnitI[ df 3CC1f f S* I f fTC $f f Anif 9NC 71 I Dlf tn nS9f SDCS tif itis lf f f f f f*1f ( .1 A.CSSAfinDt[ 1f 3D1 11 Df1Cf 3f '

N) b _I 9 f

. k I k - I ' ' ! E !_ 9  !- .I ) !!- ) )9 kS I_  !. I I $)$ )

_ . . . - _ - - _ _ _ _ . _ ,-_ _ _ _ _ _ _ _., 3 . _ - - - - .. _ , _ _ . . _ . _ _ - - . , _, . . _ _ .. ,- --.-.g -

5fI 9CC1f f 17ST_ _ _ _ . . .lt19CC1f f S ifi nnif 9f t f 9 D f ff 911 di SCC 1tf f 791_ Dt7tt t t f Ct9117tf f** D1 C39At tnC Df tif D 3; g. - . _ . - - - -- - - - - - - - - ---,-_,;-. ----7,,, , u , -_-.7- , y ,. 3.--- (- . .. . . . . . . . -

l t fINf f.lfi SCC 1f f 17N1.- if f 9CC1f t S I SD91 Af 171$f Mf f f1f f it n f I 't i O'f C99Af tnC' f fiS % 1""UC A99f f f nt Ttif$f1119 it ti A

.w .--v - ~ .,- a _ . ...~>a,n n_.~n .+-nn ..+wa-.--a~.--~u ~n.n.-.n.,....a_u,.u.a-. ~ . ~ . . ,._~~,,w_n l

l l

v 4

  1. L_ _ - . . - -. 1n 9 _ _ _ _ _ _ _ _ i. 1
  • _t. i . .?_._t_._ _?_____.__ ,n,

__ . _ _ _ _ _ _ _ . _ . anf .PP_tt _ _ _

IEU UU5 5 GL A V.J JLb U I IU 3, VVIIIbil LU13 EllllGLU3 Lilb 4U3 0 gJu n b& AllbibG3L GL 4 UJ.4 / U UI IL414 gJU n UI .

a e

i; Tt . . _ - - . . . _ _ P x1 - a. _ - _ . - - - - - __P . __._t- - - _. 1n 1 ----3. - - 1L_ .P

- - - . . - - . . .__1.

5 IlU Ug>bl53'85 Us u m JLbGut gbsiUi GLUi 3GIULy s Gn b3 GL a v. a 3Ebunu3 Guu uiU pn U33ullLbi.. .3G4ULy s Giv53

_i eAn __ _ _.3_ __ __t* .L il _ 3__--__.*__ 3 __ i- -*Jt

- i.- --- -. . 1 . __ it -

? GL I V.V JUbUllL&J bU5 3 5L133 55 - _ . . -VY ILli L435 UUb4 bGJ181g bUl b fU WWE_ _ . _ _ _ . _ _ UL84 LU EUGbtU4____i___.Ltlg> LU 4 G yIL8tf ILL8 tabu L115

- .___. _ _a __ .__r____._..___ __ _n__.___ _i> - _ _ _ _ _ _ _ _ _ _ _ _ __ _ _ - . _ _ _ _ _ _ _ 1 gIllillG4J GIIu JUbURIUG&J g18UJ3L54U3 GILU4 A UGb8 B53 Bg G 443GAAIIEL53 44 gl4 U33L33 3LUE._ _ _ _g/1033L45 _ _ _ _ _ _ _b_UI P% & -, 4 < g135G.

I"TV ___._ I TL_ _ _ _ . __ __P_i-____1. -- 1--- _i 1er -.___.J_ TL_ -i__.-- . .-- . . . _ f* - ._1___ _t_ '

5 IIU [15 b33451 ELUX _ 3G AULJ D G4 V U3 blV35 GL 5 J.J 3b bt/Ilt4 3. A asb JLEGIII gbisba GLUE. 3G8blJ DGIVU3 blUJU GL

' r E n _ _ - _ _ _ 1 ..

U.TV JUbV il%3 3.

s Ti _ _. i

.______l____ __ _1 ? - - _ _ _ _ _ _ _ i_ il_ _. ._ . _t____ __._?1it_ ...-____t.

  • 5 liU JLUG3 ll 5'8 GLUs *Gi+ bc. bus __ _ LiisuU.._ _ i_LU i bilb i U 3LbGiii LU LiiU GLisiU3;>llbiU LasittiLlib GtraiU3);iibasb -

l

__i. _ _ _ _ .i _ _ ___t _ _ _ _ _ _ _ _ . _ J 1_ _ _ _ _ _ _ _ _ ._ _m 9A .__?...___ Tt_ _ _1___. . .1_._ l JLballl ULAIIIgl V GL % b3 G A U Ug/btibt! UJ Ug1ER GLUE. _Gb_ LIUll . _ _ GL J V lllllik3 LUJ. 5 AIL g/1GllL 43 Lilbli . _ _bVUIUL5

___ f _ J i_LU '

$ f n T* _ i _ _ 1 ? _ t_

(

. - - - -L iJ______ ___l' _ * . * .__J JJV & GL VV 81Bbli LIll35 3EIULU AJ VVIL bUUll315 's 83"LaGLUu.

TL- - _ _ . . . . . . . nr& _A ---_3- 1_ . - _ . ...A l 1nn? _P1.* P_1t______.  ;

1 IIU AllGAllllW4 B1 Albd GIIU 3EkU44UGB) g/l b33444 0 UU 35UL UAbbbt! ! I V / U UL LIU3158 3 f>' '33u' ' 'U'3U "" 85 a j t_ _. _P -

____ _ _ .. _ _ _ _ . . . . .L_ _ ___ . _ _ . _. it _. .e - t__- . . -P .i _ non ___a___ _ _ __ __ __ _ . _ __ ._

EUJ3 UK b(Juubl43b4 ) GbML4811, LIIL53 GJ3U E E5 55 '8'GL ' 8 8' '" 5'J U5 '"' 'Aba Gaiss si!Gaai JLbG!si Jy JLUnia 13

__ . ' . _ _ f TL_ . _ _* . _ _ _ _ fu f n n _Pa on ? . _ _1 '-_. - - _ _ _ ? 1_ i . - . . Pit _ P . _1

  • L - -

I t?-_.i-5 41G L B IL G13 3bt4. 5 IIU J tilitiL R 8 Mill L/ill.JIT U1 A .00 AllulbOLb3AAU b lVIGLEURI VI LI!U IMUI L 4 8EllllG1 181113 L3.

T1 _ _ - - 1. _L__ _ il _ i i L _ nDD __ __f_ -__._li_ _ Pit __ f ne1 P __.- . _ _ _ _ . _ _ _ _ _ * ._._1__ 1

& AIU G8 5GBJ J13 DllV VV 3 LI!GL LllU IAbd [FUGIS gil b33L615 l b3LABL3 UL LI EU 1,VL Y U)b33% GRU Og1gJtVAI18tGLbly J

_ 1___.__.*L__ _

.1._ y not f ._L e?_ 1_ Ta . .'t . _ .

TL. ..P . _ _ .._P .i_ iL_ __ _ _ _ _ _P __ _ _. . __J g13 B G IU W E R L 41GE L LilU 1.sVL Y VV A LI L 015 55 8 "8 8 ' - 3 3 8' ' " u ' ', ' ' L u L ' 3l 8 8 U L ' ' ' 8 ' 5 3 a 8 8'8 t_ _ P 11_ _ E nr t y _. it r? __t_ T*-*t _ _ __ /0- . _ - - 12 nn A\ P_ _ .___ . _ - - - - . - -- J1_*1-Ib3L5EL3 U& LilU 5 V b Y MILII OBil5sb s Osibil U gaUbtivia s oi.e. .Jj aVi bibl!L 3stgubisb5 tswLGI:3.

15.2.1.3.4 Barrier Performance The barrier perfornisnce parsmeterifoll6 wing loss 6f condenMr vacuum Would be less adverse than thdsi follbwingloss of bondense'r vacuumLwith singis failureNhiah isLdescribed in psagraph 15.2.2.3l4; I

tE S 1 1 4 1 1 2 _ A t_ - -_ _ 2 __l kk_ 31 TL_ ___it--. =.-_1 --_1-1 -- -_J P_ _ _--1-__i_._ PL---- -

1 J , a. , E . J . "T . & 1YIGL IEUI R EGLibGl IT IUULI. 5 IlU IIIGLIIUlm 34G4 IIIUUU1 L&JULA AU4 bVGiuGLIUll U& UQ318UI

___P_______.__ ?_?2. . __.i ._ .t_. ;___ >< _ a- __ tie e i 4 ,

gIUl &UE IBIGIIbb 13 IUb3 8% AbGI LU LilGL UU3bl 5UUU All g7 L5glil 5Jae. 4.J.J.

,, , , , ,, . ___ _. n___ __ . ___ __i v._wc___rm . . . _ _ mt_ _ _ _ _ _ _. . _ _ . . . ___; w_,____r..

l .J . a. 1. J . "T . a. R E EUU L I GR GI EIL LUI 3 GIILI E l ll L l fII t. UllLAILEUIE3. & IIU Illg/L8L gJGI GLIEULU13 GIIL4 IlllLIG1 bU18UILIVIl3

__aP_ _ ____t______ . P i_ . __ _ P _ _ _ _ _ _ .  ;.._. .__i _ .t- __ 4 _ _ ._ _ t _ a - _ . - - _t L535k1 AVI U V GELIGLIVIL UE UG3 5 IUI-_ g>Ul &U15 E RGE.bb G5 4 IL3511LIbal EU LIEU 35 LAU3bi lULLA III g>G A G5' at>

tf 9 1 9 *1 aJ. .a.J.J.

tf a I 1 1 1 h . 11 f* *_ _ _ . _ _ _ 1P M n ____J 1E M n . . _ . _ ,f ___ _ _ _ _ _ _ _ . _ . . - ___1 .1 __ __ _ _ _ . . _ _ __P i-5 J . e. . A . J . "T . J ITU JUIL J 585uiU3 J . s. U Glau a J. 7 58 ' ' 5 8 8' l '3 3'8 8 '' Giisa JLbGiii gbilb> GLU 3Gasty

___1 - L1 _ - - _ .- 1 --

P_ __ i t . . 1.___ _P D Gl % U &lV V4 5 GLb 3 __V U13U3 LillBb AVE Ll!U IU33 Vi

-____t--- TL ' - ..- -.__.1 - . _ . 1-.--. .1-- __- .. ..___----__.______.-_P- xL'_

bU13L5b813UA-D -Gbt&Ulli - _ - - . - LI _ _Gil3BUlst...- . _ . . . 3 III3 LI GIIJEUlit (11 UULib53 L&EU II AGAILIBListi g1185 bigly g>& b 33Li! E AVI LIIA3 P__ ._ . _ _ _ _ _ _ _i__ _?P___ _ _ _ _ __ ; .t.__P____ __.__.i___.t - _ _ _ _ _ . _ _ _ _ _ _ _ _t_n__.__ 2-t _ ._._, __i_..i_i_;

18 ULjLlbilbJ 43G3JtilbGLIUll, GilkA LliUi U AU5 5 A UJL4&L3 I!! LIIb AllV3L Jb i bl U bl&GI AUllgU. A115 LULGA VGIUU3 GLUM I1_ _ _ - - _ . _ 11 .___L if__ _ . _ _ _ _ _ _ . . . _ _ . __ P_i_. __f__._ i____ __1 .___J M A n 11 .f_ TL_ __i_J II _ _

AIV FY A GLU LIII UL45 L'85 l' 8 ' 3 3 ' ' ' 3"I) 'Gl=U3 uUU3alVL _U A b5U u Tv sUisit3. a slb a GLUsa siv ut

_____'P_ .1 ?__ __.___l'_ _ . . . _i1. il _ A D 1 A F* L_?t__ ___J . _ . _ _ . _ _ __ ______1 __J_ __ 16O 1 L _ _ _ 1_ P_ _ __ _L _P

- Jg1Ubl!!EL4 All bU13Ig115GilkU __VVILII LIIb 001VIIs LIU llb 5 Gl!U g11 b33ul U %b33bt bUt35, 13 3U AUIll/ 3 AVI UGbli UK ilis ivv6 iGIis3. IIisiUfUis, i!is iiiGAisiiuiii in 633uiiz6f 64fbiy > G!i6 IlVvviGib [6i i!is I635 Of

---_1---- - . . . _ _ . . - - - -- ...___& ~1- - --x _- . _ _ . A xL_ i_1 1 ---1 I1_ - . -_-. 1.- .33'i' xL- --

bVIIUb333bi V GbML513 4 LI Gli38%&lt UUU3 IIUL LAbbELA Ll!U LULGA E GLULA AIU VV A GLU. II L GULAILIVIL, LIES JLUGlit 1 J'__i - - - J P_____ il _ _ . . _. __ __ _______1_m .I _ ____J_.___J  ! __ il _ _ . . _ __t_ i_.f ____J t_ _ ___ -- -- .

U13% A IG4 55 a Unis LiiU g>> b33Las it03_ _ - - 13 bUisigiiULUsy UUniubii34u sin LiiU bgLiblabli 1Giiss Giisi isblibU 13 litiL

__t__ __1 i_._ 11_ _ _ ._ ___L____ A i 9n .i__ .- t _ . _ i t_ _ _1 -- _ t __?_ __ _ - - - J _ . _ _ _ ___.t---_ _ - _ _ _ _.._J A UlbG3ULB LU LIIU GLi 3 3513gJilb& b. OLJV II HI EL4 LU3, YV 5 8U14 LilU GLI 4 EU3g>1 bel lb DLbGI B A UL&4 5 Eg1 D GI V ED GI U UpIU31EL~ p

.t__ _ _ _ __ . _ _ __ ...P . .___L___ _ _ .? H t ____ r__t_ _a___ . _ _ _ _ .t___ nn i nn _ _ __t _P______.

L 81b JLUGIII gbilblGLUI 3Glb LJ % Ql V ED VV ill I EG ) U L383b!!G' 5' 8 8V 8 8 3U5 ' iGai 7 7, a vU g>Utaisss 3 Us JL UGill.

A _ _ _ _ -- --_i_1__ r / n Ann _ _____J_ ___P_i_____ __ _. 1J L_ J ? _ _1_ _ . . _J iI____ ___._L iL_ . _ _ L _ _? _ _i__._.

OgJg15 UAltllGLUEJ UVU,VUV g>UL4&Ik3 3 Ut JL bOI 41 VVUL31L3 UU L513bilGi gUu L818 UU558 LiiU GLiiiU3g>3 abilb JLEGis s

'i i i

1

1 1

l Junip velies dui..is ilie 3-lioni coo ldonii,3 uii3 e iciel stceiiiisicese tu tiie ei iiosplicis of 759,100 poniids. l i

15.2.1.3.5. Radiological Consequences The radiological consequences due to steam releases from the secondary system are less severe than the consequences of the inadvertent opening of the atmospheric dump valve discussed in paragraph 15.1.1.4, I

. . _ _ . . -- ..m..~ - -~ _ . ~, _ _ , . . _ , . . .___.-..__m. ._m_. .. . . - _ . . _ . _c . .

1 t

i T _ t 1_ ie6 i I GU4b iv. 4

?

I C hy v C AIv fuf*tA'r'Ciw hA vs U C1/C h y a.4aft O4 Y'A i ava f 3 Tf_f was D a fa Asu C hvuv O AUvs #' As Av Y4TE/ NC ATLAiCussaw E D 17 y A 4 t"*f tu TI f1L AM v viv a e

c_.__-.

4 O b L g1UllIL 3 I$ nib (566) livetttS Gi 'v' Gluc i &O COsui~i vL ius'v$n6 5iOy vG!v Us Oii lui'v$ais iisp L!d610 lO55 ==

_c____a--_____.._____. _

U& bUllubil3bl ) GbL Lilli I

l r- t ____r.__

6-5m

=

a ugu ya b33ui u.UI_ piU33ui u u ip buuus uvu, yJiG Y, 2  !

I g.. ist._t . _ _ _ _ _ _ _ _ _ _ . . _ __ _ _ _ _ . _ . .a_ _____i . . _ _ . _ _ . ;

5 5155 3 t>' '3 3"' ' P'U33uau usy 3:3iiGi 3b4:UiGtUta -

i Ti . _ _ _ _ . f*_i... ___i.._. f. _ _ . . . . _ i_ _ _ _ _ _ _ __ _

. &AU33L411451_ _3Gibby %Ql)LJ UUg181Lv Ug1bil, p31G ,,

T c_-__ ________.__c. ____i.___t ._s G LUGill gb51EI GLVA 3Gibt) % Glib 3 UUg!!8kJg/LIll!Lg,g131G n,

A em cr_t. .n_ i . _ _ . . _ - _

b b A3 UU533'Lv taivgisiitkibuiU 1A_ _ _ . . _ _ _ . .

J /\1 m _ c c _ij f .

AD AGAIIIIL413 4 bUL E g1V V% U A_ _ _ _ _ . _ . . I V J . a. UL Eull 9

N e

, IV GAllliLiki! hk Ubbb43 b, glbkG Me Maximum pressurizer liquid volumerR' 9M f

n__._...__.___ - __1*_i.. ___i. __ _f___ a

  • A & U33LAI ALb4 3G A b LJ ) G1 V L3 b!V3GLI, g131G an ,

a 4

4 t, . M.9 MGxiiiiuiii JieGiii geiierGtUi- pl bssui U, psiG M, .

a c..___ _ _ _ _ . . _ _ _ _ _ _ . ._c. ____i___ _i___ __ _. n -

4 I

J LUGill SUllUA GLUE 3GLULJ V GID U3 b!V3b, g>3EG , ,

0

' l 1

i nnn n n_.- __ _ _ _ _ _ . .. - --i___ _ _ _ . -- _i ----__t _._t- n f 1, o uv.v ~

' vyLi Gtva vyUu3 Gu nv3yuki ab 3LbGui uuu sy v Gn U3 Lv v'5"'

i 1... - _ia__ .. . _ _i .a________ __

, piGut kuviuv n u Lv JuuLuv n u bvv""5

,. c t . a _. - - - _ _ _c__ __a 4 1,v i e nn n-j vv. v onuLuu n u buvuuS nuuG65u 1

l m mt_ .-- . ._ __i_.-._ _. . _____.._._a_._.t_ n-_____at_i_--. -ua_i___e 3115 U A43 Lilly Gl!G4) 313 ball GbbV144R AIUuGLU LilU &libi bG3EU alV1uli'5 buis uGIGy LamM c__--.- 1E nA\ Tt_ ____i____.__ _c.t_ ____i__ _ _ . _ ._._n' _i a J Ub L 8 v l 4 5 1. V,

). 1 IIU bullblL831Ull3 U& LilU G11GI) 3I3 GI U ullGilUbLULA, a

1 tM mL- ---i - - - - t--- - .t . .i-- nro -- -t -- - --- - - - - - - - - - 1- rt-

  • nc s r _ - -- -

a uk GuGay 313 Juv n 3 u aG6 uaU su ,a pbGn y! U33ua U I U3uu3 va Lub Lvu v U w LuL Ga U

_ . _ _ _ _ . . _..,,____i- ___.t___ .i__ , no s , _ _ . o c t .. .,_r_i_.__ mi_____c____ __c._._ t_

Mg1g1&VAlll&GLbly J g> JAG IV n bl LIIGliLilU L V b % Y% 4LII Jill 5'c 5 Gisul b. isUl Uivl U, i UsUn Lu LiiU

_ _ _ _ _ _ _ _ _ _ _c__ . . . ___a.___m__ct. . nes r _ _ _: t en_,_r_i.__<c__. _ _ .

se,,,\ c_ _

' JULgk344 8bb U& U % EllL3 Gilu A U3UIL3 V& L e ib 1sVb V n t L 41 0 5 3 35 ' "'2' ' \ 0 E' 5 3 U3 3 's - *->1'U'

_ _ _ . . . - _ _ _ _ _ _ a . ._ ? , _

bDbllb JUkjub!!b5 UbtG183.

4 t

l l

1 i

- i _ , . ._ _ _ ..m_. . -_ . , _ _ _ . _.;4 . m 3 ... .m_.

I i

e I

i

  • T* _ f_ t _ sem m

& QUlb & ./ . 4 "4 A f* t' t i1 A h*f *1 k 1 f* f*n t's *1*f f ra f n r (* A f* r n s ? h ra i t r$ F* f a 1 P A 79 F TT fi E A Lfaf 1 f f*

nJ J U 4VII I& &ld A VI\ EIAL,LVJJ UA L Ull l> L & l J LI\ V n L U U4VI n Al n L & J l

I h.-__ p___.____.

A G4 Gillb Lb4_ _ _ _ . _

n33ul14 g/ L &Ull 1 _i__1 _ - - - . . _ _- __ t_-- t 1 E117.

All& LIGA bUl b })L1W U4 IL D LI, AD A TY L ,

LolU i !!Uk bub!Gilk kN!!!g>dl Gkuid, Core mass fkv, rate;409tmt4tr +64-9 "eGcioi coU'GiIt Jy siciii vicssucc, psia s;e50 n__ ._ .- __J?_1 __ __s.' __ 1*._1 . _ _ _ . ?t_ _ _ _ _ _ . . . . _ _ . _ _

Ullb gIlli A GkllG1 g1LGIkilly IGVLUI, WIL44 u!IbUl LG4]IL)' ,

t __._1 __ __ . - - . . . _ . . _ _ _ _ rst f rT n Ill!L EG A LUl U A & t!!!1B ilulli 1/111J 3%

(*. _ . . . . . . _ .

O LUGill gUllbl GLUI. _ _ _ plL33W4U,g131G g

v st..n_............__._,...-.._m_._. i n4 A f _ M _ f ra AYsuubautva Lba s syba tst u s b s ub 413% sba n t , av MNN l' .

1

_1___ __ _ _* .. .- .1 b uU ,ti*1~~l,.L I , , u , ,',._1?_

r% _ _ _

vUyy~l e I ~ ,._ e-as i

/* ra A ____._it_ * ._ n/A LLH W ULL&&AUA f*___i_L& lf, / UM I

f* i . . . _ 1___.__ _ . . _ . .f ..__._i O LUGIll U)'pG33 VUllL A UI 3) 3LN

~

dihhcI GLIV U l n___._-_.---_ _ .- 1 - - _ _ _ v_.__.___.._ _ __

l\UGbLUE L A Igl Ull LLll UlllV Lily EllVfUl Gil% U p___ - _i____ _ _ . . . . i _ _ . _ _ _ i__.___ ___.. _

& IUJ3ullLU& IU ) bt bVilLI V A JJ 3LUlit EllUg>U A GLi % U g_________. . - - - _ _ _ _ _ _ _ . - - . t __._1 _ . _ _ . _ y._______i?.

aIU33u1LLUA gl4533ulb bUl&LIUA 3) 3 L 5 4 3 8 18 5Ug154 GLii U f

I i

W l

l

15.2.2.3 Loss of Condenser Vacuum with a Concurrent Single Failure of an Active Comnonent 15.2.2.3.1 Identification of Causes and Frequency Classification The estimated frequency of a loss of condenser vacuum with a concurrent single failure of an active component classifies this incident as an infrequent incident as defined in reference 1 of section 15.0. The cause of the loss of condenser vacuum is discussed in paragraph 15.2.1.3.1.

Various active component single failures were considered to determine which failure had the most adverse effect following a loss of condenser vacuum. The single failures considered were (1) a loss of all AC power on turbine trip, and (2) failure of a pressurizer level measurement channel associated with the pressurizer level control system. The failure of a pressurizer level measurement channel produces the most adverse effect following a loss of condenser vacuum.

This failure is assumed to produce a false low level signal, resulting in activation of both standby charging pumps and the closing of the letdown control valve to its minimum flow area.

In accordance with the direction given in Sections 15.0 and 15.0.7, additional information which completes the presentation of this event is provided in Section 15.10.2.2.3.

15.2.2.3.2 Sequence of Events and System Operation The systems and reactor trip which operate following a loss of condenser vacuum with failure of a pressurizer level measurement channel are the same as those described in paragraph 15.2.1.3.2 following a loss of condenser vacuum.

Table 15.2-5 and Table 15.2-7 give a sequence of events that occur following a loss of condenser vacuum with concurrent failure of a pressurizer level measurement channel for peak RCS pressure and peak secondary pressure cases.

4 e

i

l I

l 1

l Table 15.2-5 SEQUENCE OF EVENT S FOR THE LOSS OF CONDENSER VACUUM EVENT WITH CONCURRENT SINGLE FAILURE - PEAK RCS PRESSURE CASE

  • Time (sec) Event Setpoint or Value 0.0 Closure of turbine stop valves on turbine trip due to loss of condenser vacuum 9-8.84 High pressurizer pressure trip condition 2;439 241.0 psia occurs 1

8-79,5 Trip breakers opeii, pressurLsi sefety velves (Ten 10.3 Pressurizer safety valves begin to open, psia 2:536 2575 psia iM Main steam safety valves open +H31122 psia 10 5 9S CEAs begin to drop into core 10.51 R5 Maximum RCS pressure occurs 2744 +2-750 psia lli3 1 Me Peak secondary pressure occurs <l210 psia 15.'2 MB Pressurizer safety valves close 2Mie 2459 psia 15.67 1800 Operators bhgin plasticoold6wn thiough - --

atmosph'eric; dun p valves.

The sequeiice of evciits picss ited is for the peek RCS picssure cosc which esadiiica &

MSSV sctpun i tolersiice of ;3% The peek RCS pressure cese .c.ievied eiid Appivved by the NRC essuiiied e MSSV sctpoiiit tolerer.ce of : 2W

Table 15.2-6 KEY PARAMETERS ASSUMED IN THE LOSS OF CONDENSER VACUUM ANALYSIS WITH CONCURRENT SINGLE FAILURE - PEAK RCS PRESSURE CASE PARAMETER, UNIT VALUE Initial Core Power, MWt 3,478 Initial inlet Coolant Temperature, F 5+2 537F Initial volumetric Flow Rate,4#4bm/hr, gpm iM9 376,200 Initial RCS Pressure, psia 2,000 Initial Steam Generator Pressure, psia 796 Moderator Temperature Coeflicient,10" Ap/ F &O -0.3(")

Fuel Temperature Coeflicient Multiplier 0.75 Minimum CEA Worth at Trip, % Ap -6.0 Pressurizer Safety Valve Opening Setpoint Tolerance +3%

Main Steam Safety Valve Opening Setpoini Tolerance +2%

Steam Bypass Control System Inoperative Reactor Trip on Turbine Trip Inoperative Pressurizer Pressure Control System Inoperative Pressurizer Level Control System Single Failure is Assumed

(*) The initial core inlet tsmperature (Ta) was varied from 532 F to 560 F to' determine the (Ta)which maximizes peak RCS pressure

(**) This analysis supports a most positive MTC of-0.3x104 Ap/ F at IIFP. (Technical ,

Specification LCS 3.1.100) l I

l l

1 i

I l

Table 15.2-7 SEQUENCE OF EVENTS FOR THE LOSS OF CONDENSER VACUUM EVENT XNALYSIS WITH CONCURRENT SINGLE FAILURE - PEAK SECONDARY PRESSURE l CASE

  • i i

Time (sec) Event Setpoint or Value 0.0 Closure of turbine stop valves on turbine trip -----

due to loss of condenser vacuum 1

4-6.4.0 Main Steam Safety Valves Open i+B .1122 psia M 9.9 High pressurizer pressure trip condition  ?;4M 2,4.10 psia  !

occurs th410.8 Trip breakers open ------

B Picssurizer aefdy ,el,c, opeii 2;538 psie I M Md.uniiniii ECS P esause occuis < 2,600 paia M 11,9 CEAs begin to drop ^intofcore 49-5 Mo.umuni Pressurizer Liquid Voluiiic ocenia 40M-#

its Pressurizcr >&feij 4 elves close 2,410 psie 44-9 13.1 Peak secondary pressure occurs  ; 1,2101178 psia 13 3 Maximuni RCS pressure' occurs 4,600 psia l 1800 Operat6rs begin plant cooldown througli -----

! atmospheric' dump valves

  • The scqusiice of cweiits pasciited is fcw the pcek RCS psssure cese ishich essuiiied a MSSV sdponni tolerence of :"G. The peek RCS pressure cese essuiiied & MSSV seipuini 10'ei Anve vf t 2%.

l l

i l

. . . . . . . . . _ _ . . . . . . _= -._._._. .-_--. .._- - . .-~ . . . - . _ _ _

3 Table 15.2-8 KEY PARAMETERS ASSUMED IN TiiE LOSS OF CONDENSER VACUUM ANALYSIS WITH CONCURRENT SINGLE FAILURE -' PEAK SECONDARY PRESSURE CASE ,

PARAMETER, UNIT VALUE Initial Core Power, MWt 3,478 Initial Inlet Coolant Temperature, F 560 Initial Core Mass VolUmetiic Flow Rate, M*-lbm/hr gpm MOS 443,520 Initial RCS Pressure, psia 2,000 Initial Steam Generator Pressure, psia 955 964 Moderator Temperature Coefficient,10" Ap/ F 0.0 Fuel Temperature Coeflicient Multiplier 0.75 Minimum CEA Worth at Trip, % Ap -6.0 Piessurizer SafetyValve Opening'Setpdint T61erance +3%

~

Main Steam Ssfetp Valve; Opening Setpoint Tolefance t2%

Steam Bypass Control System Inoperative Reactor Trip on Turbine Trip Inoperative Pressurizer Pressure Control System Automatic Pressurizer Level Control System Automatic l

1 l

- . - - . . . - .~ - -- -. . - -. .. -- --

15.2.2.3.3 Core and System Performance 15.2.2.3.3.1 Mathematical Model.--The niethenietice! niodel used for c,oluetion of corv oiid systeni pu funiience is idwiiicel to that ds ciibed in peregrayli 15.2.1.3.3 The NSSS response to'a loss of coridenser vacuuni with concurrent single failure was simulate'd using the CESEC

~

computer program described in section 15.0.~

l 15.2.2.3.3.2 Innut Parameters and Initial Conditions. The input parameters and initial conditions used for evaluation of core and systems performance are listed in Table 15.2-6 and Table 15.2-8 l for peak RCS pressure and peak secondary pressure cases. I 15.2.2.3.3.3 Results The results presented below are for the peak RCS pressure and peak secondary pressure cases which assumed a MSSV setpoint tolerance of+3% +2%. The peel- l RCS pre >>uis end peek secondery pressure ceses is,-icved end epproved by the NRC essunied e MSSV seipoint tolerancs of l 2%.JThe dynamic behavior ofimportant NSSS parameters following a loss of condenser vacuum with a concurrent failure of the pressurizer level control system is presented in figures 15.2-H 22 through 15.2-M 30 for the peak RCS pressure case.

The loss of steam flow due to closure of the turbine stop valves produces a rapid increase in the secondany pressure. This produces a rapid decrease in the primary-to-secondary heat transfer, which causes a rapid heatup of the primary coolant. The insurge to the pressurizer increases the pressurizer pressure producing a high-pressurizer pressure reactor trip condition et 7.8 seconds.

The CCAs begin droppin3 into the coie et 9.8 seconds.

The opening of the steam generator safety valves et 10.8 sccends and the pressurizer safety valves et 8.7 ssconds combined with the decreasing core power due to reactor trip to rapidly reduce the primary and secondary pressures after reaching a maximum pressurizer pressure less than 2750 psia. The pressuriur sefciy vel,e> cl esc at 14.8 sucunds. Pcak avvundeiy picasucc end Peak pressurizer water volunn are is calculated in e scperatu sose to be less than 12!0 pais end ! css than the volume which would release liquid through the pressurizer safety valves, respcsiimly.

Peak secondary pressure is calculated in a' separate case'to be less than 1210 psia'.

The steam generator valves continue to relieve steam to the atmosphere until the atmospheric steam dump valves are opened by operator action at 30 minutes. The plant is then cooled to 350 F at which time shutdown cooling is initiated.

The detaild iequence of events for the peak' primary pressure and the peak' secondary pressure cases are presented in Tables.15.2-5_ and 15.2-7 respectively.

The maximum RCS and secondary pressures do not exceed 110% of design pressure following a loss of condenser vacuum with concurrent failure of the pressurizer level control system, thus assuring that the integrity of the RCS and main steam system is maintained.

. - . . .~. . - - . . . - - . _ - . - - - - . -. -- - . - . - - - - . . - . -

i i

15.2.2.3.4 Barrier Performance 15.2.2.3.4.1 Mathematical Model. The mathematical model used for evaluation of barrier j performance is identical to that described in paragraph 15.2.1.3.315,2.2.3.3.

15.2.2.3.4.2 Inout Parametersand Initial Conditions. The input parameters and initial conditions j used for evaluation of barrier performance are listed in Table 15.2-6land Table'15/2-8.

15.2.2.3.4.3 Results Figures 15.2-M 29 and 15.2-24 30 give the pressurizer and steam generator safety valve flowrate versus time following a loss of condenser vacuum witn concurrent failure of the pressurizer level measurement channel. Until operator action is taken at 30 minutes,

. the total steam release to atmosphere discharged through the steam generator safety valves has been no more than 99;ies 100,000 pounds. The operator would then begin a controlled NSSS 4

cooldown at 75 F/hr by opening the atmospheric steam dump valves. After the 3-hour a cooldown, the primary system will have reached an average temperature of 350 F at which point

, the shutdown cooling system may be placed in operation The total steam release to atmosphere during the course of this transient is 759,100 760,000 pounds.

I 15.2.2.3.5 Radiological Consequences i

j The radiological consequences of this event are less severe than the consequences of the inadvertent opening of an atmospheric dump valve discussed in paragraph 15.1.2.4.

1 J

l

d 4

110

, 100 90 80 e

i E e'

f 60 f

e g 50 w

E 40 O

u 30 20 10 0

0 5 10 15 20 25 TIME, SECONDS SAN ONOFRE NUCLEAR GENERATING STATION UNITS 2 & 3 Updated Safety Analysis Report l

LOSS OF CONDENSER VACUUM WITH CONCURRENT SINGLE FAILURE I CORE POWER vs TIME i

Figure 15.2-22  ;

l l

l 1

110 100 90 80 o 70 e

[ 60 d

Q 50 e

$ 40  !

2

'C 30 O

u 20 10 0

0 5 10 15 20 25 TIME, SECONDS i SAN ONOFRE NUCLEAR GENERATING STATION UNITS 2 & 3

. Updated Safety Analysis Report i

LOSS OF CONDENSER VACUUM WITH CONCURRENT SINGLE FAILURE CORE AVERAGE HEAT FLUX vs TIME Figure 15.2-23 1

'2800 2600 s

E J

$ 2400 0

5 h2200 u) e-2000 b

cc 1800 INCLUDES REACTOR COOLANT PUMP HEAD 1600 0 5 10 15 20 25 TIME, SECONDS SAN O'NOFRE NUCLEAR GENERATING STATION UNITS 2 & 3 Updated Safety Analysis Report

' LOSS OF CONDENSER VACUUM WITH CONCURRENT SINGLE FAILURE REACTOR COOLANT SYSTEM PRESSURE vs TIME Figure 15.2-24

l 650 625-Tout 600 O

8 Tave-N 5"15 5

e 5

8 550 0 Tin 525 500 0 5 10 15 '20 25 TIME, SECONDS SAN ONOFRE NUCLEAR GENERATING STATION UNITS 2 & 3

. Updated Safety Analysis Report LOSS OF CONDENSER VACUUM WITH CG. ' CURRENT SINGLE FAILURE COOLANT TEMPERATURES vs TIME )

Figure 15.2-25 i

900 800

- 3 '100 9

5 2

5 a:

U 600 2

8 8

2 500 i

400 O 5 10 15 20 25 TIME, SECONDS I

SAN ONOFRE NUCLEAR GENERATING STATION UNITS 2 & 3

. Updated Safety Analysis Report LOSS OF CONDENSER VACUUM WITH CONCURRENT SINGLE FAILURE PRESSURIZER WATER VOLUME vs TIME Figure 15.2-26

. . .. . . . . . . . , . . . - . . . . . - . . . ~ . = ~ . - . _ - . . . - - . _ . . - . _ . _ ~ . . . - . . . - - . . . - . - . _ - . . . . . ,

4 4

1200 l

h  !

j 1100

2

~

@ 1000

.8 a:

i .S 2

i @ 900 0

k 0 j 800  ;

?

1 i

j 700 ,

0 5 10 15 20 25 TIME, SECONDS SAN ONOFRE NUCLEAR GENERATING STATION

- UNITS 2 & 3 Updated Safety Analysis Report LOSS OF CONDENSER VACUUM WITH CONCURRENT SINGLE FAILURE STEAM GENERATOR PRESSURE vs TIME Figure 15.2-27 -

l

.. . .. . . , ~ . . . . - . . ~ - . . . . . . . . - - . . . ~ . . . . ~ . . . . . . ~ . . . ~ . ~ . . . - .- . - . ~ . = .

180000 170000' 5.

a 160000 rE 2

x Q

g 150000 3

s 8

$ 140000 en 130000 -

120000 O 5 10 15 20 25 TIME, SECONDS SAN ONOFRE NUCLEAR GENERATING STATION

. UNITS 2 & 3 Updated Safety Analysis Report LOSS OF CONDENSER VACUUM WITH CONCURRENT SINGLE FAILURE SECONDARY LIQUID MASS vs TIME Figure 15.2-28 l

l I

l

San Onofre 2&3 FSAR Update i

300 t

(.

i t

j j 250

. s ,

fi b A  !

)  !

td I

h200

s I 3

i su

< w 150 i D 1- -$

i 5 g 100 l N

1. E
i. y

{ 50 .

0 0 5- 10 15 20 25 TIME, SECONDS

, SAN ONOFRE NUCLEAR GENERATING STATION UNITS 2 & 3 Updated Safety Analysis Report LOSS OF CONDENSER VACUUM WITH CONCURRENT SINGLE FAILURE PRESSURIZER SAFETY VALVE '

FLOWRATE vs TIME Figure 15.2-29

1 I

San Onofre 2&3 FSAR Update l l

l 1600 I l

4 1400 l N I 3r 1 v3 1200 a

s i 1000

[

S 6

h 800 s

t:

d 600

$ j g 400 5

1 200 ,

0 0 5 10 15 20 25 TIME, SECONDS SAN ONOFRE j NUCLEAR GENERATING STATION I UNITS 2 & 3 l Updated Safety Analysis Repon LOSS OF CONDENSER VACUUM WITH CONCURRENT SINGLE FAILURE MAIN STEAM SAFETY VALVE FLOWRATE vs TIME ,

Figure 15.2-30

San Oncfre 2&3 FSAR Updated INCREASE IN REACTOR COOLANT SYSTEM INVENTORY 15.5 INCREASE IN REACTOR COOL ANT SYSTEM INVENTORY 15.5.1 MODERATE FREQUENCY INCIDENTS 15.5.1.1 Chemical and Volume Control System Malfunction 15.5.1.1.1 Identification of Causes and Frequency Classification The estimated frequency of a Chemical and Volume Control System (CVCS) malfunction classifies it as a moderate frequency incident as defined in Reference 1 of section 15.0. A CVCS malfunction that produces an unplanned increase in reactor coolant inventory may be caused by equipment or electrical malfunction or operator error that erroneously activates one or more standby charging pumps or decreases letdown flow. The CVCS malfunction is assumed to occur without increasing or diluting the primary coolant initial boron concentration. The case of a CVCS malfunction that produces a boron dilution is presented in paragraph 15.4.1.4.

15.5.1.1.2 Sequence of Events and System Operation Under normal operating conditions at power, the Pressurizer Level Control System (PLCS) responds to an increase in pressurizer level by increasing the letdown flow to maintain the programmed level. There are two pressurizer level measurement and control channels, each having a process signal indicator and a low-level and high-level alarm associated with it. Only one channel at a time, selected by the operator, is in control of the PLCS. The PLCS can be operated either in manual or automatic to maintain programmed pressurizer level. Usually at

. least one charging pump is running, matched by letdown and reactor coolant pump seal bleedoff.

Several faults or errors can be postulated that will lead to a mismatch between charging and letdown flow and in turn result in an increasing pressurizer level and pressure. For example, with the PLCS in manual, the letdown valve could close, reducing letdown flow to zero, while 1 charging flow remains constant. In the same mode, a standby charging pump could start as the result of a single equipment fault or operator error; in this event, with constant letdown flow, pressurizer level would increase.

The limiting moderate frequency incident, (i.e., the event that would lead to the most rapid increase in RCS inventory) occurs in the automatic mode. This incident causes the pressurizer level controller to fail and transmit a signal to start both non-operating charging pumps

. (assuming that both are in standby) and close the letdown control valve.

San Onofre 2 & 3 FSAR Update CHEMICAL AND VOLUM. "ONTROL SYSTEM MALL JNCTION A low level alarm will be annunciated inuaediately by the defective level instrument channel, and low-low level alarm will be annunciated if the failure was off-scale low or sufficiently on-scale low. A high level and then a high-high level alarm will be annunciated by the alternate channel as actual level increases. In this discussion the alternate channel refers to the level control channel that has not been selected for control. The initial pressurizer level is assumed to be just below the high level alarm setpoint such that the alarm is present shortly after the beginning of the event. Indications include the second channel of pressurizer level, charging and letdown flow rate and all charging pumps running.

\

The operator is expected to respond to the alarms and indications either by switching to the  !

second level channel for control, or by stopping the charging pumps manually, or by restoring letdown.

The primary pressure is limited by the High Pressurizer Pressure (HPP) trip and pressurizer safeties, or by operator action to terminate the event.

The secondary pressure is limited by the steam bypass control system (SBCS) valves, or by the steam generator safety valves if SBCS is not available.

The consequences of a single component or system malfunction following this event are discussed in paragraph 15.5.2.1.

8 .

15.5.1.1.3 Core and System Performance A. Mathematical Model The NSSS response to the CVCS malfunction was simulated using the CESEC-III computer program described in Section 15.0.

A bounding calculation was done for the CVCS malfunction to determine if the potential existed for filling the pressurizer before operator action can terminate the charging-letdown flow imbalance. Thejotal volume added by the charging-letdown flow imbalance over a 15 minute period, whi6 is the conservative time assumed for operator action, was determined. Fiiially, a liquid volume increase is produced by condensing the steam in the pressurizer due to the proportional sprays. This volume wcs conservatively assumed to be the liquid volume that would result from condensing the total initial steam region in the pressurizer. The sum of these two volumes, plus the initial pressurizer liquid volume, produces the pressurizer liquid volume based on initial conditions that could be produced during a CVCS malfunction.

~ . - ._. _ _ _ . _._ _ . _ __ _ =._ _ _ _ _ ._

San Onofre 2 & 3 FSAR Update CHEMICAL AND VOLUME CONTROL SYSTEM MALFUNCTION B. Input Parameters and Initial Conditions The input parameters and initial conditions used to analyze the NSSS response to the CVCS malfunction are discussed in Section 15.0. In particular, those parameters unique to this analysis are listed in Table 15.5-1.

Since the primary coolant pressure transient before the reactor trip is caused by an increase in primary coolant inventory and not by reactor power increase, no 1 l' power, coolant temperature, or DNB transient is produced before the trip.

MinimizinF the initial RCS pressure results in the longest time possible for filling the pressurizer, which makes the pressure spike worse on a trip. However, maximizing initial RCS pressure causes an earlier trip and allows enough time for j the charging pumps to raise RCS pressure again before operator action is credited.

The peak RCS pressure on repressurization is worse than on the trip.

C. Results The following scenario describes the sequence of events that would occur during _

the limiting CVCS malfunction.

The increase in reactor coolant' inventory initiated by the startup of the CVCS '

charging pumps and loss ofletdown produces an over pressurization of the reactor coolant system (RCS). The increasing pressurizer pressure activates the proportional sprays which slow the pressure increase by condensing steam in the pressurizer.

J The addition of water to the RCS by both sprays and charging increases the i

pressurizer liquid volume and hence raises the water level in the pressurizer. The

. rate of filling is slow enough so that operator action in 15 minutes to terminate the charging-letdown flow imbalance is sufficient to prevent filling the pressurizer. The total increase of waterjevel in the pressurizer during the first 15 l minutes of the transient is approximately 80% of the available steam volume.

l

-If pressurizer sprays were not available the RCS pressare increases so that a y high-pressurizer pressure reactor trip is required. The RCS coolant contraction on E trip decreases the rate ofliquid level rise in the pressurizer so that operator action ,

in 15 minutes is sufficient to prevent filling and produces an immediate reduction i

of the RCS pressure.

! The maximum RCS pressure is limited by the high-pressurizer pressure reactor i

di 4

N

- - , y ,_. r .# ...m.. . , _ , _ . - . ,,

San Onofre 2 & 3 FSAR Update CHEMICAL AND VOLUME CONTROL SYSTEM MALFUNCTION trip and the primary safety valves to 110% of design pressure. Also, the steam generator safety valves limit the main steam system pressure to within 110% of design. Therefore, the integrity of the RCS and main steam system is maintained.

The CVCS malfunction transient is slow enough so that the core protection calculators will assure therejsjhe: ic mininuun ONC" is gaa:c ian 1.31 iraughou;ic CVCS ma:Sa;&n :ia..ia:indiceng no violation of the fuel thermal limits.

The dynamic behavior of the significant NSSS parameters following a CVCS

.i . malfunction are shown in Figures 15.5-1 through 15.5-12, and the sequence of events is given in Table 15.5-2.

15.5.1.1.4 Barrier Performance i:

} A. Mathematical Model y

4

- The mathematical model used for evaluation of barrier performance is identical to j that described in paragraph 15.5.1.1.3.

B. Input Parameters and Initial Cdnditions

, The input parameters and initial conditions used for evaluating barrier

performance are identical to those described in paragraph 15.5.1.1.3, t

b C. Results Any steam discharged by the primary (pressurizer) safety valves is completely condensed in the quench tank and not released to the atmosphere. The steam releases to atmosphere through the steam generator safety valves and maximum RCS pressure reached during the CVCRmalfunction transient are not worse than those of the loss of condenser vacuum shown in paragraph 15.2.1.3. This is due to the less severe primary and secondary transient with a CVCS malfunction.

15.5.1.1.5 Radiological Consequences The radiological consequences due to steam releases from the secondary system are less severe than those due to the inadvertent opening of the atmospheric dump valve discussed in paragraph 15.1.1.4.

_ __ . . _ _ . _ _ . _ _ _ _ , _ . _ . . _ . _ ~ ~ . _ _ _ _ _ _ _ _ _ m . _ _ _ . _ _. ._.- _ _ _ . - . .

d

[ San Onofre 2 & 3 FSAR Update 1

I CHEMICAL AND VOLUME CONTROL SYSTEM MALFUNCTION i- 15.5.2 INFREQUENTINCIDENTS 15.5.2.1 Chemical and Volume Control System Malfunction with a Concurrent Single j Failure of an Active Comoonent 1

15.5.2.1.1 Identification of Causes and Frequency Classification i

f ' The estimated frequency of a CVCS malfunction with a concurrent single failure of an active

]_ - component classifies this incident as an infrequent incident as defined in reference 1 of Section F 15.0. The cause of the CVCS malfunction is discussed in paragraph 15.5.1.1.1. Various active i component single failures were considered to determine which failure has the most adverse effect ]

!' following a CVCS malfunction. The worst single active failure is the loss of offsite power at the j- time of reactor trip.

! l

- i i
15.5.2.1.2 Sequence of Events and System Operation

! The systems and reactor trip that operate following a CVCS malfunction with single active

} ' failure are the same as those described in paragraph 15.5.1.1.2 .

f' 15.5.2.1.3 Core and System Performance i .

) A. Mathematical Model  !

The mathematical model used for evaluating core and system performance is

-identical to that described in paragraph 15.5.1.1.3.

\

j B. Input Parameters and initial Conditions  ;

o i- The input parameters and initial conditions used for evaluation of core and system performance in response to the CVCS malfunction with a single active failure are

[ discussed in paragraph 15.0. Those parameters unique to this analysis are listed in

?

Table 15.5-3. The single active failure is the loss of offsite power at the time of I reactor trip. Minimizing initial RCS pressure delays the high pressure trip and causes a higher peak RCS pressure.

[

C. - Results The dynamic behavior of the NSSS following a CVCS malfunction with loss of i- offsite power at the time of trip is similar to that following a CVCS malfunction, j which is described in paragraph 15.5.1.1.3. Operator action will correct the y i p  !

1

)' )

l

.,,-J,.

.l l

. - _ ~ . _ - . _ _ _ . _ _ _ _ _ _ . . _ _ _ _ _ _ _ _ _ _.- __

San Onofre 2 & 3 FSAR Update

, CHEMICAL AND VOLUME CONTROL SYSTEM MALFUNCTION

CVCS malfunction and prevent filling the pressurizer even if such action is delayed until 15 minutes after first indication of the event.

, The peak RCS and main steam system pressures are within 110% of design

! ensuring that the integrity of the RCS and main steam system is maintained following a CVCS malfunction with loss of offsite power at the time of reactor trip. The minimum DNBR is greater than 1.31 indicating no violation of the fuel thermal limits.

The dynamic behavior of the significant NSSS parameters following a CVCS malfunction with single failure is shown in Figures 15.5-13 through 15.5-24, and the sequence of events is given in Table 15.5-4.

15.5.2.1.4 Barrier Performance 1'

A. Mathematical Model The mathematical model used for evaluating barrier performance is identical to that described in paragraph 15.5.1.1.3.

B. Input Parameters and Initial Conditions The input parameters and initial conditions used for evaluating barrier

performance are identical to those described in paragraph 15.5.2.1.3 .

C. Results As in the CVCS malfunction, described in paragraph 15.5.1.1.4, the steam

. released to containment or atmosphere and maximum RCS pressure reached are no worse than that released in the loss of condenser vacuum discussed in paragraph 15.2.1.3.

15.5.2.1.5 Radiological Consequences The radiological consequences of this event are less severe than the consequences of the inadvertent opening of a steam generator atmospheric dump valve as discussed in paragraph

15.1.2.4.

. 15.5.3 LIMITING FAULTS

?

l There are no limiting faults resulting from an increase in RCS inventory, t

San Onofre 2 & 3 FSAR Update

, CHEMICAL AND VOLUME CONTROL SYSTEM MALFUNCTION TABLE 15.5-1 ASSUMPTIONS FOR THE CVCS MALFUNCTION ANALYSIS Parameter Assumotion Initial core power level, Mwt 3,478 Core inlet coolant temperature, F 54i2-53.3 Core mass flow rate, E+6 lbm/hr 143.7 Reactor coolant system pressure, psia 2,300 Moderator temperature coefficient, E-4 0.0

'.(delta K/K)2[F Doppler coefficient multiplier 1.25 CEA worth on trip, M " i$.5 -6.0 SBCS, mode Manual i PPCS mode Manual j CVCS flow mismatch, Charging, gpm 135 Letdown + RCP bleedoff, gpm 4 Initial Pressurizer Volume, ft' , 913 4 l

PF6 siiTrHiiC)5fiitip~f VAXFs?I61Xfs fiEk' f3%[f22%

MAiWE)heiMisifsitivjlisi;T6XsiFaHEM t2%. M 2% ,

4 i

4 i

8

i l

l 1

San Onofre 2 & 3 FSAR Update CHEMICAL AND VOLUME CONTROL SYSTEM MALFUNCTION m._. - , - e ,

A O E.8 E.J End d. ii.d g m./ de n yn n e v ew s t a n mm e v e rg s t m n man meen av va n mm., m esta m e ^ss m e t e, s s m d L U \ / L 11 L L VL L V L L1 1 J L V IT 1.11 L L V L 6.J 11f"'11 a L U L1 L 1 i Vil La V L 11 1 4

M -' -- -

P n.

E A AkkU g k) C l L/ V i 11 L U 1_

n . - n-_ x.

9 __ _

t,_

h.) C L L V C 11 ( yg1UC

&Q A44 4. b/ M 4L%Q b 44LL de p hb bi M 4 & I 4 E~ A

. mAmmmv . .AvM m.. Am m m , sym s

4 1 $9 8 eI _ _T__ _ _ _ _ __ __ ' - -_ _ __ _ _ -- - _ _ _ A_ _ _ _ _ _ O j i O A "I I e I~ IAAy&4 f A U Q Q LA 4. A de U E f k U G G b4i G b&Ap 6 "3 A V t

- - _ .- _ _u - 1 . __ '

] U 4 4 L J. Q b G b4 p fGAQ 4 .n - mm. - ,_ - _ _ _ __ _ _ ,_ _ _ _ >

A3v.v va no ucy A6s uv u J. v y man m nn -

n .- _ _ _ _ . _ . n _ r_. ,, _ , _ _ _ _ ,_ _ _ _ . _ < < ms 4 de "I %d e V - V 6 U Q ALL V G & 4 U A G L b/ 4.- W G d. U g VQAVUG UCy A44 6 \s# A 4 4. 4.

1 1

nam n n__ _ _ _ .-- . .. _ m _ r-__ es . , __ _ _ . - _ ._ - - - - meme I

de "I 4. g J VQ4VGQ

& L U Q Q b& 4. A 4.s G J. a)GkUg b/f G & 4 y fGAQ 4. V I en/

I

)

mim n _ _ ,_ nnn . _ . . . _ _ . _ men , ,

E U Q Eh p & G G Q LA 4. G p

s. "I d. e J ATY aJ fGAQ 4. U "3 "3 )

4 s l'* M M - - .. __ __ _- . __ n _P - - -

e? _ 1 - _ . _ M1 _ __ SSS$

9 n'i. J"I V e d E' J. U Q Q 64 L A se U J. mJQ&GJ VQAVUG V 4 b/ O U d. 6 d 4.

4

- SAA di nL _ - - - - r* _ _._ _ __ _ . _ - M _ _ 1_ eM _ _ _ _ _ _ _ _ _ _ _ -

  • 9 9 SA dedVe6 h.J b U Q41% kJ G A 4 C J. Q L \/ J.- E G Q Tb & J. U G G b4 4. U g [QAQ A A 4. J I

e n. . _ .___ _ ._ . n_ r. . _ ,,_ , - _ _ .. . _ meme  ;

i 3 Escaaua46ca._

. aQLcy vQAvca vyp44 r yaAQ 6J4 J '

  • ren m n _ _ , nnn .. ._ _ _ _ _ _ _ _ ._ _

men .e 1

e.s u a . a E m Q r. nua yLuaausmo yaAQ s. u n 's 1 e,, ,. n__ _ _. . .. . _

, , _ c_ ,,_ , _ _ . . -, .. ,,,,

=/ I de ed f 4. G m2 Q be 4. A se G d. n)QkCg V Q 4 V U al V A b/ O U de d de ne a

A *i r A es - - . _ _ . ._ _ __ n_r___ vv_ , _ _ _ _ _ _ _ _ _ _ _ _ _ _

6 r* -9 e V esJ kJ e d E 4. G G ed bd J. A se G &

V Q 4. G J V Q A V U sJ b/f G A & g e

fCAQ 4. =/ I e.#

A *"t #

Vav.a A r% _ _

EcQn nua y s. c a a u a u a yo4Q 1_ MMn _ _ _ _ _ _ _ _ _ _ _ _ _

W n,n , m_. _ _ _. __ __ _ _. _ .. n_ r___ ,,_ , _ . . _ _ m, _ __ nnnn WWde i ELUQQukALUM VQLUJ VGAVUG V4vDU 66N6 imn

'IUV u-.._..

54unamum n_---...A-we--

5 u v a v ua u1-..: 3utu a

n,.-,

vvaumw rus

a. v

, s er sAsvs. s g m._

\s/f G M Q 6 bd J.

_ __ _ __ _ __ . . i- _ _ _ _ - . _ , - e L Q Th C G (a b/ & & L J. b/ A bd i fAQ&AL

_ 3 - - .

. . ~ . . . . - . . - . . . - . . - . - . . . - - . . . . . - - . _ .. - - . - . . - _ . .

San Onofre 2 & 3 FSAR Update CHEMICAL AND VOLUME CONTROL SYSTEM MALFUNCTION TABLE;:15!522 SEOUENCE'I'OF? E VENTS'FOR"THEECVCS' MALFUNCTIONIEVENT Time,. Setooint or Sec Event Value O Charging flow maximized, letdown + RCP 135 and 4 bleedoff flow minimized, gpm 147J4 High pressurizer pressure trip 2410 generated, psia 1.48]6 CEAs begin to drop

~

24058 Steam GeiisFsE6EisaffeyJValV65 begin to 1122 open, psia 242.(9 PEsi5d~fEdiissgs XValtisE6 peri, psia 2525 242.'.9 Peak RCS pressure, psia 2644 PEeTsEElidFiSafs9;yalieiiC16ss

~

246;.3 2222

' 2985'2 SyWiRGsii"eEhE63dEPsaICPisssEis, psia 1129 569]3 Prss5EfiiWR{SifeplValies open, psia 2575 569.3 PgRC_S_ pressure / psia 2644 572.5 PFsiidFi(6r2Sife23 Valve 5[Closs 2222 83 6l. 9 Pi ssEfliss} Sa f spiVsises open, psia 2575

'836.9 Peak RCS pressure,~ psia 2644 839.7 PfJssEFlieEXS.sfspjalvesiclose 2222 90.0 MsgisidiiC Pfdsshii FiQL1cfEic! ) Volume ~,7f t' <f46517 901 Ops EsE66Fa kis[66ri~tif6116f 31EnM ---

r;

l l

San Onofre 2 & 3 FSAR Update CHEMICAL AND VOLUME CONTROL SYSTEM MALFUNCTION TABLEZ1575:3 AS'SUMPTIDNS7 FOR THE7CVCSX MALFUNCTION i ANALYSIS WITH ?SINC;LE' FAILURE Heme +

PsFsin~stdF I I61Eisi;_ core 2powerzfsis1HMwE 31478 i

CoEb;;idliCW66WsiiREEnipsrs66rs, *E 5.33 C6Fe ms'ssIflEis~Es71Et631 bid 7hE 143.'7 RWFE8FidollidCsTiitieXpissisij^,72Fils 2,:300 a

, tempera.ture poeffic.i_en.,_

. . , _ _ _ _ _ . . _ . . . ~

Mode _r_a,.

torz g,iE-. ,4 0'. 0 (delta K/K)],lE D6. ppl.e. r_76o_s'ffi6~.i. 's. h.E"I'n.6..

- . _ f_Eipl. ..isi.

1125 CEA worth on trip, %d -670

~

SBCS,i~ mods Madual PP_QS[rsody Msnual 4

CVQSif16%El'5EEEbh',j l Charg1rigA*.gpni 135 LetidowridRCP,1ble~dddff,7cJpid 4_

Isi'tisll, PfeisdfilzsEEVol;dini,1f t 3 '

& 5913 PEeEssiissE[Ssfs6ysVs19ET61FFdiids +3%lllH2%

Ma lRS t e aiEZS5 f,sViZNa fvi[T6fe rsh'c e +2%f/,.i~-2%

l

- . .- - . . . . .- - .. . . ~ - -. . . _ - -- . - . - -

San Onofre 2 & 3 FSAR Update CHEMICAL AND VOLUME CONTROL SYSTEM MALFUNCTION TABLE 15.5-4 SEOUENCE OF EVENTS FOR THE CVCS MALFUNCTION EVENT WITH SINGLE FAILURE Time, Setpoint Sec Event or Value O Charging flow maximized, letdown + RCP flow 135 and 4 minimized, gpm 600-9 High pressurizer pressure trip generated

'50,013 and loss of offsite power, psia E+ N241.0 001.0 CEAs begin to drop ---

5_0.1. 7. .._3 000.4 Pressurizer 5efetim5S[ifE'y))51pE5 open, psia -29502575 503Il 000.0 Peak RCS pressure, psia e6292625 50319, '

007.0 Mexirnuin p&esouitzer 1 quid <1405.7222 507y6; v o 1 Line Pisj571Ts%ES a[f dEEVal1ps5]ildsd , 0 W hilE C00.5 Feek RCO pressureStissCysE5' rat 6r[,ssfifies 29001122 53.117, bi~cKf)Ttf626dEH, psia C12.7 C17.511220teein generetor sefetieo o ' egmn w -M+6113 3 567?7 open, peissteam generator peak pressure, psia -

96t Cperetor tekme control of plent 9.0.0 MaMmu_mipress;GiliiC1MHMlli615fd67;fE8 <116517 901l Op5FsE6F Xsk~6hlEEEE"r31Z6fThrahh ---

l San Cnofre 2&3 FSAR 1 Updated INCREASE IN REACTOR COOLANT SYSTEM INVENTORY

, CVCS Malfunction i i i i i i i . i 1 - -

5 Sm 0.8 - -

E B

?

Tu 0.6 - -

cc

'5 C

8o E

'.5 0.4 - -

E E

G '

B o

0.2 - -

0 O 100 200 300 400 500 600 700 800 900 1000 Time, seconds

)

SAN ONOFRE NUCLEAR GENERATING STATION Units 2 & 3 Updated Safety Analysis Repod CVCS WALFUNCTION RCS PEAK PRESSURE CASE CORE POWER vs. TIME Floure iS.54 l l

l l

l

s 1 I

l l

San Onofre 2&3 rSAR I Updated INCREASE IN REACTOR COOLANT SYSTEM INVENTORY i

. CVCS Malfunction i i . . . . i i i 1

1 - -

l 1 5 3

a 0.8 - -

E 5

5 m

g ,

e a: 0.6 - -

~

o 8

5m C

g 0.4 - -

E E

4- e I '

2 o

0 0.2 - -

) .

0 0 100 200 300 400 500 600 700 800 900 1000 Time, seconds SAN ONOFRE NUCLEAR GENERATING STATION Units 2 &~3 .

Updated Safety Analysis Report CVCS M'1. FUNCTION RCS P5M. PRESSURE CASE CORE HEAT FLUX vs. TIME Figure 15.5-2 l 1

I l

l I

San Onofre 2&3 FSAR Updated INCREASE IN REACTOR CCOLANT SYSTEM INVENTORY

- CVCS Malfunction 2700 , , , , , , , , ,

1 2600 - -

/ 1 2500 - -

I I

m ke 2400 -

/ i '

/ -

)

' j

$ /

dt 2300 [ -

l i

B E

il 2 2200 - -

1 2100 - -

l 1

I 2000 - -

1900 0 100 200 300 400 500 600 700 800 900 1000 i Time, seconds SAN ON0FRE NUCLEAR GENERATING STATION

. . _ Units 2 & 3 . .

Updated safety Analysis Report CVCS MALFUNCTION RCS PEAK PRESSURE CASE PRESSURIZER PRESSURE Figure 15.5 3

I

' l San Onofre 2&3 FSAR Updated INCREASE IN REACTOR COOLANT SYSTEM INVENTORY

. CVCS Malfunction 2700 , , , , , , , , ,

2600 - -

.g 2500 - -

S e

c.

2400

-[ .

! y E 2300 - -

.O o ,

E

" 2200 - -

3 0

. en

!$ 2100 -

2000 - -

1900 '

O 100 200 300 400 500 600 700 800 900 1000 Time, seconds

(

SAN ONOFRE NUCLEAR GENERATING STATION Units 2 & 3 Updated Safety Analysis Report CVCS MALFUNCTION RCS PEAK PRESSURE CASE RCS COLD LEG DISCHARGE PRESSURE Figure 15.5-4 l

5-

. . - - ... .. ~. - , -. .- .

i San Cnofre 2&3 FSAR Updated INCREASE IN REACTOR COOLANT SYSTEM INVENTORY CVCS Malfunction 0.03 , , , , , , , , ,

Total Moderator -----

0.02 - Doppler -

. .. . . .... ... .... . .S. .c. r.a. .m. . . - -

i '

0.01 - -

0 - - - - - - - - - - - - - - - - - - - -  !

4

$ -0.01 -

vi

.3 -0.02 - -

M.

Cc e '0.03 o

0

-0.04 - -

-0.05 - -

-0.06 - -

-0.07 0 100 200 300 400 500 600 700 800 900 1000 Time, seconds SAN ONOFRE NUCLEAR GENERATING STATION

. Units 2 & 3. . .. .

Updated Safety Analysis Report CVCS MALFUNCTION RCS PEA.K PRESSURE CASE CORE REACTMTY vs. TIME Figure 15.5 5

. . _ . ~ . - . . .. . - - . - .

San Cnofre 2&3 FSAR  !

Updated INCREASE IN REACTOR COOLANT SYSTEM I!NENTORY CVCS Malfunction ,

640 i , , , , , , , , j I

T-out T-avg ----- i T-in '

620 - -

600 - -

u.

cn o l V i f 580 - -

3 5

g ---......,

5 560 -

{[#' "'"*'"*"*^""^"~F -

+ . . .

vy g

0 '

E 540 - -

520 - -

500 O 100 200 300 400 500 600 700 800 900 1000 Time, seconds SAN ONOFRE NUCLEAR GENERATING STATION

.. Units 2 & 3 _ . . . .

Updated safety Analysis Repost CVCS MALFUNCTION

!- RCS PEAK PRESSURE CASE RCS TEMPERATURE vs. TIME i

Fig 0re 15.5 6 l

l l

San Onofre 2&3 FSAR Updated INCREASE IN REACTOR COOLANT SYSTEM INVENTORY CVCS Malfunction '

1600 , , , , , , , , ,

l i

i 1400 - - j 1200 - -

e 8

y 1000 -

{ -

f -V 3 800 - -

i 5

.d j 600 - -

m 2

ct 400 - - -

200 - -

0 O 100 200 300 400 500 600 700 800 900 1000 Time, seconds i

SAN ONOFRE i NUCLEAR GENERATING STATION Units 2 & 3 _

Updated Safety Analys6s Repost cVCS MALFUNCTION RCS PEAK PRESSURE CASE PRESSURIZER LIQUIDVOLUME vs. TIME Figure 15.5 7 I

I i

i

1 l

l l

San Onofre 2&3 FSAR ,

Updated  !

INCREASE IN REACTOR CCOLANT SYSTEM INVENTORY CVCS Malfunction 250 , , , , , , , , ,

200 - -

8 m

3

.o.

d i

h 150 - -

3 m

8 2m

- M 100 - -

B

'E

  • ic 50 - -

0 O 100 200 300 400 500 600 700 800 900 1000 Time, seconds SAN ONOFRE NUCLEAR GENERATING STATION Units 2 & 3 ..

Updated Safety Analysis Repod Cyc8 MALFUNCTION RCS PEAK l PRESSURE CASE PRESSURIZER SAFETY FLOW RATE vs; TIME Figure 15.5 6 i

San Cnofre 2&3 FSAR Updated INCREASE IN REACTOR COOLANT SYSTEM INVENTORY CVCS Malfunction 20 , , , , , , , , ,

. Charging

.i.eiaown pius oieeaon -----

8 m 16 - -

i!

e f 14 -

e 3

12 -

ee

_o_ 10 -

aa 2

3

@ 8 -

B E -

m 6 -

cn

.G En 2

4 -

o 2 -

0 100 200 300 400 500 600 700 800 900 1000 Time, seconds SAN ONOFRE . .

(

NUCLEAR GENERATING STATION l

Units 2 & 3 . . .  ;

Updated Safety Analysis Report CVCS MALFUNCTION RCS PEAK PRESSURE CASE CHARGING AND LETDOWN /RCP BLEEDOFF FLOW RATE vs. TIME Figure 15.5-9 l

l

San Onofre 2&3 FSAR

, Updated

INCREASE IN REACTOR COOLANT SYSTEM INVENTORY l

l CVCS Malfunction 1300 i i , i , i . . i 1200 - -

l 1100 - .

)

.9

$ 1000 - _

l e

8 m

e

' 900 - .

g

<n 800 -

700 - -

600 O 100 200 300 400 500 600 700 800 900 1000 Time, seconds SAN'ONOFRE NUCLEAR GENERATING STATION Units 2 & 3 Updated' Safety Analysis Repost CVCS MALFUNCTION RCS PEAK PRESSURE CASE STEAM GENERATOR PRESSURE vs. TIME Figure 15.5-10

San Cno f re 2 & 3 FSla Updated INCREASE IN REACTOR COOLANT SYSTEM INVENTORY CVCS Malfunction 2500 , , , , , , , , ,

2000 - -

O Sj 1500 - -

1

.n.

d C

3 1000 - -

E rn O 500 - -

en 0 -

s -- -

)

-500 O 100 200 300 400 500 600 700 800 900 1000  !

Time, seconds SAN ONOFRE '

NUCLEAR GENERATING STATION Unns 2 & 3 .

Updated Safety Analysis Report CVCS MALFUNCTION RCS PEAK PRESSURE CASE STEAM GENERATOR' STEAM FLOW RATE vs.

TIME FIGUre 15.5-11

l l

l San Onofre 2&3 FSAR Updated INCREASE IN REACTOR COOLANT SYSTEM INVENTORY CVCS Malfunction 2500 , , , , , , , , ,

2000 - -

8m 3

s 1500 - -

~

d m

C

_O LL.

$ 1000 - -

u.

O en

. l 500 - -

l 1

0 O 100 200 300 400 500 600 700 800 900 1000 Time, seconds 1

SAN ONOFRE NUCLEAR GENERATING STATION Units 2 & 3  ;

Updated Safety Analysis Repost CVCS MALFUNCTION RCS PEAK PRESSURE CASE FEEDWATER FLOW vs. TIME Figure 15.5-12

San Onofre 2&3 ESAR Updated INCREASE IN REACTOR COOIANT SYSTEM INVENTORY CVCS Malfunction with Single Failure i i i i i i i i i 1 -

B

a. 0.8 - -

m E

E 3

g 0.6 - -

z 8

5 8

". 0.4 - -

B a.

2 -

0 0.2 - -

0 O 100 200 300 400 500 600 700 800 900 1000 Time, seconds SAN ONOFRE NUCLEAR GENERATING STATION Units 2 & 3 Updated Safety Analysis Report CVCS MALFUNCTION WITH SINGLE FAILURE RCS PEAK PRESSURE CASE CORE POWER vs. TIME Figste 15.5-13 l

San Onofre 2&3 FSAR  !

Updated INCREASE IN REACTOR COOLANT 1 SYSTEM INVENTORY )

l CVCS Malfunction with Single Failure i i i i i i i i i 1

B o.

a 0.8 - -

E B

5 u

2m CC 0.6 - -

o 8

~5 m

tt f 0.4 - -

c e

o 0 0.2 - -

0 0 100 200 300 400 500 600 700 800 900 1000 Time, seconds SAN'ONOFRE . . .

NUCLEAR' GENERATING STATION Units 2 & 3 Updated Safety Analysis Report CVCS MALFUNCTION WITH SINGLE FAILURE RCS PEAK PRESSURE C ASE CORE HEAT FLUX vs. TIME Figure 15.5-14

San Onofre 2&3 FSAR Updated INCREASE IN REACTOR COOLANT SYSTEM INVENTORY CVCS Malfunction with Single Failure 2700 . . . , , , , , i 2600 - -

2500 - -

.!9 E. 2400 -

/

e /

3 i 2300 - -

5 E

3 g 2200 - -

t 2100 -

2000 -

1900 0 100 200 300 400 500 600 700 800 900 1000 Time, seconds SAN ONOFRE NUCLEAR GENERATING STATION Units 2 & 3 Updated Safety Analysis Repost CVCS MALFUNCTION WITH SINGLE FAILURE RCS PEAK PRESSURE CASE PRESSURIZER PRESSURE Figure 15.5-15

San Onofre 2&3 FSAR Updated INCREASE IN REACTOR COOLANT  :

SYSTEM INVENTORY l CVCS Malfunction with Single Failure 2700 , , , , , , , , , ,

2600 - -

.g 2500 - -

a.

d 3

$ 2400 - -

b E 2300 - -

.O Q

?

2200 - -

O i en O 2100 -

2000 - -

1900 O 100 200 300 400 500 600 700 800 900 1000 Time, seconds SAN ONOFRE NUCLEAR GENERATING STATION Units 2 & 3 LIpdated Safety Analyss Repost CVCS MALFUNCTION WITH SINGLE FAILURE RCS PEAK PRESSURE CASE RCS COLD LEG DISCHARGE PRESSURE Figure 15.5-16

l l

l San Onofre 2&3 FSAR Updated I INCREASE IN REACTOR COOLANT SYSTEM INVENTORY CVCS Malfunction with Single Failure 0.03 i i i i i i i i i Total Moderator -----

0.02 - Doppler - -

Scram i 0.01 - ,.

4 0 -

~~

t

$ -0.01 - -

vi

E j -0.02 - _

8 E

2 -0.03 - -

o 0

-0.04 - -

-0.05 -

I _ )

-0.06 - -

l 1

-0.07 0 100 200 300 400 500 600 700 800 900 1000  !

Time, seconds SAN ONOFRE NUCLEAR GENERATING STATION Units 2 & 3 Updated safety Analysis Repost CVCS MALFUNCTION WITH SINGLE FAILURE RCS PEAK PRESSURE CASE CORE REACTMTY vs TIME Figure 15.5-17

l San Cnofre 2&3 FSAR Updated INCREASE IN REACTOR COOLANT SYSTEM INVENTORY CVCS Malfunction with Single Failure 640 i , , , , , , , .

T-out T-avg -----

T-in 620 - -

600 - -

u.

8' u

ui 580 - -

2 3

e

---.........................),;

, ,/...........-

g 5 560 -

!![.. . , .

+ y --

CD  :

O W

540 - -

520 - -

500 O 100 200 300 400 500 600 700 800 900 1000 Time, seconds SAN'ONOFRE  :

NUCLEAR GENERATING STATION Units 2 & 3 .. . .

I Updated Safety Analysis Report CVCS MALFUNCTION WITH SINGLE FAILURE l RCS PEAK PRESSURE CASE RCS TEMPERATURE vs. TIME I 1

Figure 15.518 i l

l l

l l

l San Onofre 2&3 FSAR Updated

~NCREASE IN REACTOR COOLANT SYSTEM INVENTORY CVCS Malfunction with Single Failure 1600 , , , , , , , , i l

l 1400 - -

)

1 l

l 1200 - _

l c ,

O I y 1000 - -

2 3er 800 - -

a E

e g 600 - -

m 2

c.

400 -

200 - _

0 O 100 200 300 400 500 600 700 800 900 1000 Time, seconds SAN ONOFRE . . . _ i NUCLEAR GENERATING STATION  :

Units 2 &~3 ,

Updated Safety Analysis Report CVCS MALFUNCTION WITH SINGLE FAILURE RCS PEAK PRESSURE CASE PRESSURIZER LIQUl0 VOLUME vs.uTIME Figure 15.519 I l

I

San Onofre 2&3 FSAR Updated INCREASE IN REACTOR COOLANT SYSTEM INVENTORY CVCS Malfunction with Single Failure 250 , , , , , , , , ,

200 - -

8 m .

3 I 5

y 150 - -

3 2

u.

E 5

'm M 100 - -

E E

a m

2 a ,

50 - -

1 0

O 100 200 300 400 500 600 700 800 900 1000 Time, seconds  !

l i

SAN ONOFRE . .

NUCLEAR GENERATING STATION Units 2 & 3 . . . .

Updated Safety Analysis Report CVCS MALFUNCTION WITH SINGLE FAILURE RCS PEAK PRESSURE CASE PRESSURIZER SAFETY. FLOW RATE vs.. TIME Figure 15.5-20 l

San Onofre 2&3 FSAR Updated 5

INCREASE IN REACTOR COOLANT SYSTEM INVENTORY CVCS Malfunction with Single Failure 20 , , , , , , , , ,

Charging Lotdown plus bleedoff -----

18 - -

o 8 16 - -

1

(

1 14 - -

3

$ 12 - -

=

h 3 10 - -

cn h

3 8 8 - -

lis a

E e 6 - -

p 4 - -

0 2 - -

0 O 100 200 300 400 500 600 700 800 900 1000 Time, seconds SAN ONOFRE

- NUCLEAR GENERATING STATION Units 2 & 3 Updated Safety Analysis Report CVCS MALFUNCTION WITH SINGLE FAILURE RCS PEAK PRESSURE CASE CHARGING'AND LETDOWN /RCP BLEEDOFF FLOW RATE vsz TIME Figune 15.5-21

l l

l San Onofre 2&7 FSAR L'pdated l

NCREASE IN REACTCR COOLANT l SYSTEM :NVENTORY l l

1 CVCS Malfunction with Single Failure I 1300 , , , , , , , , ,

I 1200 - -

1100 - -

3 l 9 1000 - -

e

?n

<n e

900 - -

Q v) 800 - -

700 - -

600 0 100 200 300 400 500 600 700 800 900 1000 Time, seconds SAN DNOFRE a NUCLEAR GENERATING STATION

. . , _ _ Units 2 & 3 .

Updated Safety Analysis Report CVCS MALFUNCTION WITH SINGLE FAld)RE RCS PEAK PRESSURE CASE STEAM GENERATOR PRESSURE vs. TIME Figure 15.5 22 i

San Onofre 2&3 FSAR Updated i INCREASE IN REACTOR COOLANT l SYSTEM HNENTORY l l

CVCS Malfunction with Single Failure 2500 , , , , , , , , ,

l 2000 - -

O

$ 1500 - -

1 42 s

m C"

3 1000 - -

E m

S en O 500 - -

en 0 --- --

-500 0 100 200 300 400 500 600 700 800 900 1000 Time, seconds l I

SAN ONOFRE l NUCLEAR GENERATING STATION

. Units 2 & 3 .

Updated Safety' Analysis Report CVCS MALFUNCTION WITH SINGLE FAILURE RCS PEAK PRESSURE CASE STEAM GENERATOR STEAM FLOW RATE vs.

TIME Fi0ure 15.5-23 i

l 1

)

1 San Cnofre 2&3 FSAR Updated l INCREASE IN REACTOR COOLANT SYSTEM INVENTORY l

1 CVCS Malfuirtion with Single Failure i 2500 , , , , , , , , ,

2000 -

8-m I

3 e 1500 -

, <u.

5 W C i 3

o 2

CC u

$ 1000 -

u.

O u) 500 - -

I l

' ' J ' ' ' ' '

0 l 0 100 200 300 400 500 600 700 800 900 1000 i Time, seconds 1 i

i 1

SAN ONOFRE NUCLEAR GENERATING STATION Units 2 & 3 l Updated Safety Analysis Report CVCS MALFUNCTION WITH SINGLE FAILURE RCS PEAK PRESSURE CASE FEEDWATER FLOW vs. TIME Figste 15.5 24

1 4

15.2.3 LIMITING FAULTS 1

- 15.2.3.1 Feedwater System Pine Brenh t l 15.2.3.1.1 _ Identification of Causes and Frequency Classification i-The'_ estimated frequency of a feedwater system pipe break classifies it as a limiting fault incident as defined in Reference 1 of section 15.0. A feedwater system pipe break may occur due to a pipe faihtre in the main feedwater system.

i g 15.2.3.1.2 Sequence of Events and Systems Operation A'feedwater system pipe break may produce a total loss of normal feedwater and a blowdown of one steam generator. If normal plant electrical power is lost, this superimposes a loss of primary coolant flow, turbine load, pressurizer pressure and level control, and steam bypass control. The culmination of these events is a rapid decrease in the heat transfer capability of both steam generators and eventual elimination of one steam generator's heat transfer capability. The result is an RCS heatup and pressurization. The NSSS is protected during this transient by the pressurizer safety valves and the following reactor trips: (1) steam generctor low water level, (2) steam generator low pressure, (3) high pressurizer pressure, (4) low DNBR and (5) high containment pressure. Depending on the particular initial conditions, any one of these trips may terminate this transient. The NSSS is also protected by main steam isolation valves, the feedline check valves, the steam generator safety valves, and the auxiliary feedwater system which serve

- to maintain the integrity of the secondary heat sink following reactor trip. In this analysis, however, the most adverse single active failure assumed is equivalent to the failure of the electric driven auxiliary feedwater pump associated with the intact steam generator. The operator can initiate a controlled plant cool-down using the atmospheric steam dump valves any time after reactor trip occurs. The analysis presented herein conservatively assumes that operator action is delayed until 30 minutes after the first initiating event. Table 15.2-8 gives the sequence of events that occurs following a feedwater system pipe break to the final stabilized condition; 15.2.3.1.3 Core and System Performance 15.2.3.1.3.1' Mathematical _Model. The NSSS response to a feedwater system pipe break was simulated using the CESEC III computer program described in section 15.0 along with the blowdown model described below. A detailed description of the method of analysis, the initial conditions, and the input parameters is presented in Appendix 15E. Using the core heat flux and core inlet conditions calculated by CESEC-III, the thermal margin on DNBR in the reactor core

- was simulated using the CETOP-D, the thermal margin on DNBR in the reactor core was simulated using the CETOP-D computer program described in section 15.0 with the CE-1 CHF correlation described in Chapter 4.

/- - Blowdown of the steam generator nearest the feedwater line break was modeled assuming

I frictionless critical flow calculated by the Henry-Fauske correlationm. The enthalpy of the blowdown is assumed to be that of saturated liquid until no liquid remains, at which time saturated steam discharge is assumed. This model conservatively underestimates the blowdown energy and overestimates the discharge rate, thereby leading to a more rapid blowdown and thus minimizing the steam gene ator heat removal capability.

A sensitivity study was performed to determine the influence on peak RCS pressure of the rate of decrease of effective heat transfer area in the ruptured steam generator. The effective heat transfer area is assumed to decrease linearly (from design valuc to zero) as the steam generator mass decreases (from selected value to zero). Thus, decreasing the mass interval over which the rampdown is assumed to occur implies a more rapid loss of heat transfer in the ruptured steam

generator. This study showed that maximizing the rate of decrease of heat transfer area

! maximizes the peak RCS pressure. Therefore, a conservatively high rate ofloss of heat transfer is assumed.

1 e

s

1 I

1 1

T.Lt_ 1f99 o s uvaw a d em.J u O m.. _m _ f 79.. .4,. [.. _ a L I9_ ...].. .a_O....&,.. M ! _ . n 1. T9. . _ A LFb %a Lab l ab b UL L T bla LJ IUI 111b 1 b b ka TV L& Lb l LJ T JLb ill I I L1b l> 1 b LAIS L Y L IIL

'I*! _ . .m._

O _. a _ _. a _ . .

a s44sw, Jwk uw tyvata6 va b

n.._a.._ _l' a t _. 1 f f a\uytuaw va usw Avausu a T' wwu. .. vimwa

1. . ... up

.. _ f:e ---

9 f T I . . L M _ _ _ _. . . ! . _ _ M _ _ .. . . . . T_f , /* _ _ . l ' a ! _ _

s 94CA a Aagu a awJaua 4Lwa A a bJJ tu w a a sp .v> !us uvaa, rsv A ff* _aJ 04__ /9__ .a.. T*_ _af_ IL_ fAAA 414 Aww twu utbusas wiwaawa mva haaaytawJ, a va a n suvv T_

  • _ n _ .. _1. .. . n _ _ _

4 4 4y uswunwiJ vywu, ---

AT__1A _. ! a _ M _...- f _.

4 T va &atua \/44 Ja bw A vvTw4 hvJt ---

9 h_____ *

  • O _ f .a . I f . I . . .. O a .. a a_ rT___ $ffA j E a beJJ taA 4 Lw & UMA w 4J V u& T wJ U s&aa t Lv N/p%s&, yJ44a a. d d u .

I f*_______.f*__.J..._.a 4a..af-O!._1 fa 9 f $ *7 1 L a z aw & 5* ' '* / ' * * " " " ' * * * ' """ " ' 55 " e ' ' '-V*'

g. r*r*4.. n__!

b L4AJ LJ wgasa tv 4./& \/y A_ Yt__

M .. . 1. n O O T1 .. . . . _ A _. . . . _? 9OA9 87

, & bua% a\bu A avJJtaJw w/wwuad 9 yJau 6. u / d e i j

  • l l

M__f.Oa _. O___a.._TL___.__. A _._.._ _ . . . _ . 1 1 f *7 9 l A wtan U 4wu1&a LJh&&w& ub%14 & a wJJu4 h L#ww baa Jy fJhu 4 a v ( s ee M _ _ . . . _f . _ O f* a . . 1P_l.. Of_ _ _. I 99AA

m. . A a wJJuA aLwa vuaw tJ v m i wa w avaw, yJa64 =vv ga.. t h m..m D mo-...:,m t imm: A Trmt..mm rh,m , M a a men a a a s wa n a a a w ww wa a ssw a a.s s3 wa se v vousaaw v w w sma n.r, as

-1 if fa

's"TV.#st

).

1

  • ! .. . f* m 1. . . _ a - _ f* _ a _ _ . f a _a Oa-__ /'..____a__

. 4 aua y A wwu vT satwa hanwA J a s a tuw 6 unusana LJwaawsutva

)

1 i

a_.***-- __a_ . . . a . . - _

utvuau %Jwaawa u6va hu vv... A .AvJJusw

  • _ . * . . _ t a sy wvaauauvaa unau av4U vis l T i s t _ a m.s '

assauutwsa, y3i8

  • s I_ 04__ r__t_ar _ sr_1..__ n _.a 01_ . _

a.

av ausas unwudas AJuamavas T u&WwJ Uw S' V3*

r* _ _1_ a _ c 1_ . . _ _ _ f s f ! _ O a _ _ _ f .. _ f 4 :_ _ t r _1. . _ T _ _ ! _ a : _ . ~

a. wussayaw 6w w avJur w vs Artussa v twsuas sJvauuvu v ua i wJ a wa anasauu"S n i.....J _.. _ f_ _ _ a t. . . f a _ _ . 04___ e _ ___a_

a.J aL7 7T LaL# vT a4 44 v4aa L&aw &&&btaw b V tw64a al wJ w& awa u bv4 1 f! f- .. Y I . . ! ,) 1 X . - I 4 L _ O a . _. __m /* .

. ___a . /5- _ a .. . I a f 0 0 '?

4. avsuaAssaussa haquiu ivauJJ Au taaw u kwsassa tswaaws utut w vatsawwtwu tu vuus f ._4 _ a f* _ _ J t ! _ t t. _

saa66aw s a wwutaasw, avua

kE_!_ D a _ __ _ O _ f*_ a . 1y F _1. . _ _ r\ _ _. _ .. _ 4 L . Y _ s _ _4 ca_.__ r______4__ 1 t S an avaussa u nwussa uuaw ty us s wa vyvaa ust 643 % s a atuw t v twuais s.swaaws utva , aass A _ _ _ _ i _ , A _ _ _ __ a L _ Aa- ..__L___?_ Da_.__ N . . _ _ 1 7,.1. . _ ,. a .. L .. . . ? _

vyvs tatus vyvasa usw a-nuasvaysawa aw utvutaa Leusaay v ua v ba tv s.rkgsas ---

ni__. r%__t.i_____ a_ c t..aa_..._ c.._i!_ _

& awaat w vvauv vi sa tv usabstuv vv a s wvv433'5 O L . . a J _ . _ r'* _ 1 ? _ __ Y _ ! a ! _ a _ _1 us a utuu vi s s v vu s a s s5 * ** * "6" ---

l l

I l

e 4

I 1

I l

1 e

-Wr~MGm -a.---a-emTOZMU T.bl ~ - m..ae a 15.2 3; ..:8

a. Sqc .T',pSeonence of Evente for the Feedwater System Pine Break Event

..m-._,,, -

Time lsec Event Setpoint or Value 2

0_.0 R_uP_turebf the_ Main F..eedwater_Lin~e

" 7 .-

36.9 H.. igh_'P.re_ssdr.i.z_erPr_essu. reTri ~ Con.d_iti_o.~. P_ n" 7.2434 psia 37.8 Trip Breakers;Open; d':---

Normal'On.s...i.te.Po.wer.

L'o. st " .u--.

38.1 Emergencyfeedwater Actuation Signal,"ft 126.27 3_8.5 Affeicte& Steam Ge_nerator EmLties'I_b_m_,

u _? _5000 3 8...s.8.

-s C.4.Mes.s EA'oe wu .Begin.wmm+

v to D rop e-

  • ? T

< U % b = hw '

39.6 Pressurizer S_afetyJalves Start to_ Ope,n; psia ,22575 41'.1, P_eak RCS Pressure,0ccurs, psia J 2832.2 4 511 Pealf SteamiGeneratoLressure P Occursipsia al156.8 4- .7_.57

- M_a.xim._um._

Pre _ssuri.z._e.. r L.- i..qu.. -.

id.,V_ol_um.e .O...ccurs..l .f. t' , <1465.7 48.2 Pressurizer SafetyJ,alves.Close[ psia 12356.1 92.0-A_ux_iliary_Feedw,_.,_ ate _r Ent.ers_Intac_t _

Stea.,m,G_ener_a. tor +-..

212.2 Steam Generator LowJressure Trip;Qondition and._MSIS {675 Ini_tiatedfpsia -

21.3:1 .

M. < ._ain. ~.S_ tea.m_~Is_ola.ti.o__n. - --

i Va_lves B_e. 8 n. J Close 223:1 Complete, Closure;of Main Steam _ Isolation Valves Terminating > ~R B_16wdown... fro._m._the In. tact .Ste. a.m.. ._G._e.nerato. r

__ - . . .~

250.2 Minimum Liquid Mass in the Steam Generator .Qonnected to 1.6990 Intactleediineilbm

414.4 Main Steam Safety Valves Ope.n on the Intact Ste_am Generator, 1133 Psia 1800.0 Operatgr Opens the Atmospheric Steam Dump Valves to begin --

Plant Cooldgwn to Shutdgwn.. Cooling 10 7,2,,_8 1 -

n Coo.-o.in.

Shut,d, ow. 4m, r- s l .. g Initiated I

e

15.2.3.1.3.2 Innut Parameters and Initial Conditions. The input parameters and initial conditions used to analyze the NSSS response to a feedwater pipe break are discussed in Section 15.0, in particular, those parameters which were unique to the analysis discussed below are listed in Table 15.2-9.

The initial conditions for the principal process variables monitored by the COLSS were varied within the reactor operating space given in Table 15.0-4 to determine the set of conditions that would produce the most adverse consequences following a feedwater system pipe break. The full spectrum of break areas was considered up to a break size of the combined area of the flow distributing nozzles in the feedwater ring. For each break, the initial steam generator liquid inventory and the initial pressurizer pressure were adjusted within the plant operating space to maximize the mismatch between core power and steam generator heat removal capacity prior to the CEAs dropping into the core. This mismatch will thus, maximize the peak RCS pressure and

. pressurizer volume. In order to eliminate any impact of uncertainty in the calculated water level in the ruptured steam generator, no credit was taken for low water level trip in the ruptured steam generator. This delays the reactor trip, prolonging the RCS heatup and increasing the peak RCS _ )

pressure. Loss of AC is assumed to occur at the time of turbine trip. This causes the RCS pumps to coastdown, resulting in higher peak RCS pressure.' In addition, in response to loss of non-emergency AC power upon trip, turbine stop valves are assumed to close immediately.

Core inlet temperature and flow had negligible effects on the peak RCS pressure for a gi /en blowdown rate. However, maximizing the core inlet temperature also maximizes the steam generator pressure, which increases the maximum blowdown rate. The maximum inlet temperature of 560*F also maximizes the RCS energy content and thereby increases the radiological releases associated with steam generator safety valve and atmospheric steam dump valve flows. The pressurizer control system is maintained in the automatic mode so that it suppresses the pressure transient before trip. This delays the time of reactor trip, prolonging the RCS heatup and increasing the over-pressurization. However, this control system mode had a small impact on peak RCS pressure.

Of those systems and components called upon to mitigate the consequences of a feedwater system pipe break; i.e., pressurizer and steam generator safety valves, feed line check valves, auxiliary feedwater system, and reactor protective system, failure of the pressurizer or steam generator safety valves, or the feed line check valves, is not considered credible. With respect to the reactor protective system, the most reactive CEA is conservatively assumed to be stuck in the fully withdrawn position. Therefore, the worst active single failure, in addition to the stuck CEA, is the failure of one out of the two auxiliary feedwater pumps. This failure leads to larger radiological releases through the steam generatar safety valves with only one-half the auxiliary feedwater flow available.

15.2.3.1.3.3 Results The dynamic behavior ofimportant parameters following a feedwater system pipe break for abreak size of 0.2 R.2, which gives the maximum of the peak pressure, is

. presented in figures 15.2-37 through 15.2-50.

1 Table 15.2.3-9 4

ASSUMPTIQNS FOR TIIE FEEDWATER SYSTEM PIPE BREAK 4

l - Parameter. Unit Value Initial Core Power, Mwt 3478 i Initial Inlet Coolant Temperature,'F 560 Initial Core Mass Flow Rate, gpm 356,400 Initial RCS Pressure, psia 2%92150 Initial Steam Generator Pressure, psia 949961.6 Moderator Temperature Coefficient,104 Ap/ F 0.0 Fuel Temperature Coefficient Multiplier 0.75 Minimum CEA Worth at Trip, % Ap -6.0 Steam Bypass Control System Inoperative Pressurizer Pressure Control System Automatic Mode .

Pressurizer Level Control System Automatic Mode Feedwater Line Break Area, ft2 0.2 Initial Intact Steam Generator Inventory, Ibm 180,000 Auxiliary Feedwater Flow assuming 1 Pump Only, gpm Figure 15.2.3-51 Number of U-tubes Assumed Plugged per Steam Generator 1000 PSV Setpoint, psia EH02575 Initial Pressurizer Volume, fP 9B9,_13@

i a

4

The rupture of the main feedwater line is assumed to instantaneously terminate feedwater flow to I the steam generators. Critical flow is assumed to be instantaneously established from the steam generator connected to the ruptured feedline due to the break location between the steam generator and the check valve. Check valve closure prevents flow from the intact steam

, generator to the break. The first -384368 seconds are characterized by a gradual heatup of the ,

3

^

primary and secondary systems due to the absence of subcooled feedwater flow to the steam  ;

generators. During this stage, the steam generator connected to the ruptured line loses its heat ,

j transfer capability due to the depleted inventory. This initiates an RCS-to-steam generator power

mismatch, producing a large insurge to the pressurizer, causing its pressure to exceed the high pressure trip setpoint at 38436,9 seconds. A decrease in the steam generator water level
initiates a reactor trip on low steam generator water level simultaneously. Reactor trip followed j by turbine trip occurs at 38@338, seconds. Pressurizer pressure continues to increase, passing i the pressurizer safety valve setpoint of 25502575 psia at 39:039.6 seconds. Loss of normal onsite and offsite electrical power is assumed to occur simultaneously with the turbine trip, causing the reactor coolant pumps to coast down. The pressure turns around after reaching a maximum of 3893S2_8322 psia in the RCS at 42-641,1 seconds.

i The core heat flux has decayed sufficiently by this time to reduce the RCS-to-steam generator ,

i power imbalance. By 39-042.2 seconds, the steam generator safety valves open, limiting the j steam generator pressure to a maximum of 4%M1'156.8 psia. By 42-645;l seconds, the power imbalance reverses, with the steam generator removing more energy than the core produces. The pressurizer safety valves close at 54_8J2 seconds as the primary coolant temperature decreases, j- The auxiliary feedwater flow reaches the intact steam generator by 9H92.0 seconds. Reverse steam flow from, the intact to the ruptured steam generator and to the break causes the secondary pressure to decrease below the main steam isolation signal (MSIS) setpoint of 675 psia at j 225:0212.2 seconds closing the main steam isolation valves (MSIVs). Closure of the MSIVs

causes the secondary pressure and temperature in the intact steam generator to rise, decreasing i- the differential temperature (RCS-to-steam generator) and reducing the heat transfer rate. This i i causes the core average temperature and RCS pressure to rise by 300 seconds and to reach a steady state by 500 accc,aaupon the PSVs_ reopening. By 436-0414.4 seconds, the steam generator safety valves open again and continue to relieve steam to the atmosphere until the atmospheric dump valves are opened by the operator at 30 minutes. The plant is then cooled to l 350 F at which time shutdown cooling is initiated.

i j The results indicate that the feedwater system pipe break event will not result in a peak RCS l

pressure which exceeds the faulted stress pressure limitof 3,000 psia.

15.2.3.1.4 Barrier Performance i 15.2.3.1.4.1 Mathematical Model. The mathematical model used for evaluation of barrier performance is identical to that described in paragraph 15.2.3.1.3.

I 15.2.3.1.4.2' Input Parameters and Initial Conditions. The input parameters and initial conditions i

used for evaluation of barrier performance are identical to those described in Paragraph i e 15.2.3.1.3.

i ,

i a

! l

15.2.3.1.4.3 Results Figures 15.2-48 and 15.2-49 are steam generator and pressurizer safety )

valve flowrates versus time for the feedwater system pipe break transient. By 30 minutes, when the atmospheric dump valves are opened, the steam generator safety valves will have discharged no more than 74,800 pounds of steam. Approximately 934,000 pounds of steam would be discharged through the atmospheric dump valves during the 3.2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> of cooldown, giving total steam release to the atmosphere of 1,008,800 pounds. The steam generator connected to the ruptured feedwater line discharges 151,033 pounds of fluid to containment. The pressurizer safety valves release BE&less,than 3000 pounds of steam to the quench tank.

15.2.3.1.5 Radiological Consequences The radiological consequences of this event are less severe than the consequences of the main i steam line break discussed in Paragraph 15.1.3.1.B. I l

l l

j 0

t

. 1.1 l

.1 0.9 l u E

c, 0.8 e

m y 0.7 i o- 1 a \

o 0.6

.a 1 U .)

U 1 m '

u 0.5 I w '

G l e 0.4 1

n 0 l m 1 e 0.3 u

l' O

O

j. 0.2 l

l

j. 0.1 '

1 0

l' 0' 10 20 30 40 50 60 l~ Time, Seconds SAN ONOFRE l NUCLEAR GENERATING STATION Units 2 & 3 l

Feedwater System Pipe Break Core Power vs. Time Figure 15.2-37 1

- 1 It l t

d 4

l t' _

l l

1.1 1

a 5.

o 0.9 M

W 0.8 o

g 0.7 8

$ 0.6 d

f0.5 a i 1

e 0.4 x l e

E 0.3 0

< 0.2 8

O ,

O 0.1 0

0 10 20 30 40 50 60 Time, Seconds SAN ONOFRE NUCLEAR GENERATING STATION Units 2 & 3 Feedwater System Pipe Break Core Average Heat Flux vs. Time Figure 15.2-38

. . . . - . . - - . - - - . . ~ . - . = . . . - . - - . . - - . _ - - - . - . . . - - . . . - . - - - -.

2900 1

2800 a

m CL 2700 o

o 2600  ;

U.

E 2500

$ i s,

2400 o

u

?

O 2300 o

.W

?

o 2200 m

2100 2000 0 10 20 30 40 50 60 Time, Seconds j l

SAN ONOFRE NUCLEAR GENERATING STATION Units 2 & 3 Feedwater System Pipe Break Reactor Coolant System Pressure vs. Time Figure 15.2-39 I

l l

i l

i

1 650 640 630 Tout r.u 4 620 8

Ju 610 3

Tavg h600 o.

E o

S 590 a

d

'm "o 580 o '

U 570 Tin 560 550 0 10 20 30 40 50 60 Time, Seconds SAN ONOFRE NUCLEAR GENERATING STATION Units 2 & 3 Feedwater System Pipe Break Coolant Temperatures vs. Time Figure 15.2-40 l

I

1350 1300 g 1250

,d '

aI 1200 2 .

1150 N '

  • '1100

$ 1050 8

  • 1000 t

950 ,

900 0 10 20 30 40 '50 60 Time, Seconds SAN ONOFRE NUCLEAR GENERATING STATION Units 2 & 3 l

Feedwater System Pipe Break  ;

Pressurizer Water Volume vs. Time  !

Figure 15.2-41

)

l 1200 1150 -

.2 S. 1100 - Intact SG oI i n

$ 1050 8

%u 1000-8 E 950 Affected SG 900 850 0 10 20 30 40 50 60 Time, Seconds l

SAN ONOFRE i

, NUCLEAR GENERATING STATION Units 2 & 3 1 1

Feedwater System Pipe Break l Steam Generator Pressure vs. Time l Figure 15.2-42 l

1 l

l i

l l

l l

4000 l l

3000 Intact SG l

0 2000 I e l b

. 1000 o> l G 0-o z

E

$ -1000 M

Affected SG

-2000

-3000 0 10 20 30 40 50 60 Time, Seconds SAN ONOFRE NUCLEAR GENERATING STATION Units 2 & 3 Feedwater System Pipe Break Steam Nozzle Flow vs. Time Figure 15.2-43

0 Intact 3G j l

% l

-500 l l

l E i li I O -1000 i

0 Y -1500 4

8 W Affected SG

-2000

-2500 0 10 20 30 40 50 60 Time, Seconds SAN ONOFRE NUCLEAR GENER ATING STATION Units 2 & 3 Feedwater System Pipe Break Feedwater Flow vs. Time Figure 15.2-44

'2800 l

2700  !

m 2600 5

w 2500 S

a i s 2400 u

0

'O 2300 c

E 8

  • 2200 2100 2000 0 10 20 30 40 50 60 Time, Seconds i

l SAN ONOFRE HUCLEAR GENERATING STATION Units 2 & 3 Feedwater System Pipe Break Pressurizer Pressure vs. Time Figure 15.2-45 i

l l

I l

180000 160000 140000 b

120000

.o 100000 3

4 80000 D

60000 g Affected SG 40000 20000 0

0 10 20 30 40 50 60 Time, Seconds SAN ONOFRE NUCLEAR GENERATING STATION Units 2 & 3 Feedwater System Pipe Break Secondary Liquid Mass vs. Time Figure 15.2-46 l

40000 l

35000 )

o i q

S 30000 i i I

a 25000 3

3 s

j 20000 8

O U

15000 10000 0 10 20 30 40 50 60 Time, Seconds SAN ONOFRE NUCLEAR GENERATING STATION Units 2 & 3 Feedwater System Pipe Break Core Average Inlet Flow vs. Time Figure 15.2-47

1 l

1 a

4 900

@ 800.

! O 700

t

! 3 Intact SG w 600 I

- i y 500  ;

& l 0 400

~

300 0

-8 Affected SG

$ 200

!o g 100 0

0 10 20 30 40 50 60 Time, Seconds l

SAN ONOFRE NUCLEAR GENERATING STATION Units 2 & 3 Feedwater System Pipe Break Steam Generator Safety Valve Flow vs. Time  ;

Figure 15.2-48 l

l

)

I

350 g 300 e

.o

& l

, 250  !

3 l l

C '

~

s'200  !

x I a j g 150 , ,

m en u ,

D 1 N 100 u  ;

o m

m D

s 50 i

1 0 0 10 20 30 40 50 60 4 1 Time, Seconds i

4

[ SAN ONOFRE

NUCLEAR GENERATING STATION Units 2 & 3 Feedwater System Pipe Break i Pressurizer Safety Valve Flow vs. Time Figure 15.2-49 4

4 e

, 1 1

1

I 2000 1800 --

o e 0

0 1600

'e

.0 1400 i

O s 1200 - ,

k..

e c

.s.1000 A

e 800 -

o W

a m 600 u

o N

s 400  :

i

.k 1

.a m  ;- 2 0 0 -

n c

q' f-

.9_

-200i 0 10. 20 30 40 50 60 Time, Seconds i

SAN ONOFRE NUCLEAR GENERATING STATION Units 2 & 3 ,

l Feedwater System Pipe Break Pressurizer Surge Inlet Flow vs. Time i

Figure 15.2-50 l

]