ML20154P954
| ML20154P954 | |
| Person / Time | |
|---|---|
| Site: | Millstone  |
| Issue date: | 09/30/1998 |
| From: | NORTHEAST NUCLEAR ENERGY CO. |
| To: | |
| Shared Package | |
| ML20154P941 | List: |
| References | |
| NUDOCS 9810230108 | |
| Download: ML20154P954 (42) | |
Text
MILLSTONE UNIT 3 SIMULATOR QUADRENNIAL CERTIFICATION REPORT OCTOBER,1998 Approved: [
Manag{f, Operator Tyning Date h
Sd OdmcAi/a 69/n a , Pr'o ss Coniputers & Simblators ' Datd N- , _
(Poc 9,) 1 VE numga, MP3 Operations Date d A j Y 30 V rector, Nuclear'l' raining / Date gBA2;ggg;ggg;;a
- _ - - -- = - - - - -. .. _- - . . ._.- . . - - . .-
IABLE OF CONTENTS Page No.
Quadrennial Certification Reoort Summary 1
- 1. Simulator Certification Program Overview 2
- 2. Description Of Performance Testing for the Four-Year Cycle
-November 1994 - October 1998 A. Testing Goals, Methodology, and Assumptions 5 l B. Normal Operation and Surveillance Testing 7 C. Malfunction Testing - 7 D. Annual Operability Testing 8 E. Physical Fidelity Verification 9 F. Instructor Station Testing 9 G. Real-Time Testing 10
- 3. Description of Uncorrected Performance Test Failures and Schedule for Correction 11
- 4. Next Four-Year Schedule 12
- 5. Plant Design Changes Not Installed Within 24-Months 12
- 6. Major Simulator Upgrades 12 Attachments A. .Open Performance Test Discrepancies B. Four-Year Schedule i
Y --rw vv ~
l l
l QUADRENNIAL CERTIFICATION REPORT
SUMMARY
The Millstone Unit 3 simulator was initially certified on October 31,1990. Certification was accomplished through the Northeast Utilities Simulator Certification Program, which is also the vehicle for ensuring continued certification. Based on the performance testing results for the last four years, the Millstone Unit 3 simulator continues to demonstrate excellent physical and functional fidelity when compared to the' reference unit. The Simulator Certification Program
- includes a comprehensive testing program, as well as procedural controls to ensure the Millstone Unit 3 simulator retains high fidelity to the plant.
This report contains the following sections and two attachments: ,
1
- Section 1 provides an overview of the simulator certification program.
- Section 2 provides a description of the perfonnance testing covering the four-year cycle ending October 1998, e Sub-section A provides a description of testing methodology and assumptions.
. Sub-sections B through G review and summarize the individual tests that make up the Millstone Unit 3 simulator performance and operability tests.
- Section 3 provides a summary of open discrepancies on the Millstone Unit 3 simulator.
- Section 4 discusses the testing sequence for the next four-year certification period (November l 1998 through October 2002). I 1
- Section 5 discusses plant design changes that were not completed within 24 months of
]
installation in the plant, l i
- Section 6 provides a description of the new simulator platform and the testing performed to l accept the new platform for use. A description of upgrades presently in progress is also included.
I'
- Attachment A lists the open performance test discrepancies and their projected resolution date.
- Attachment B lists the next four-year performance test schedule.
. The performance tests described in section 2 were all performed by presently or previously SRO qualified individuals. Any discrepancies identified during Page1of14
performance testing will be corrected in accordance with the Nuclear Simulator Engineering Manual (NSEM) NSEM-5.01, " Simulator Modification Control."
- 1. SIMULATOR CERTIFICATION PROGRAM OVERVIEW The mission of the certification program is to:
. Ensure that the simulator has the capability to support the operator training programs.
. Provide for certification in a timely, cost-effective manner, addressing the specific requirements of NRC 10CFR55.45 (b), and the methodology recommended in Regulatory Guide 1.149,1987.
- Ensure ongoing compliance with the requirements set forth in ANSI /ANS 3.5, 1985.
The effort required to accomplish this mission has been grouped into three main components: Definition of the Scope of Simulation, Validation of the Scope of Simulation, and Configuration Management. NU has put in place a collection of formal processes called the Nuclear Simulator Engineering Manual (NSEM), to direct all aspects of certification and ensure compliance to the regulatory requirements. The NSEM is a departmentally controlled document.
The Scope of Simulation that NU certifies is based upon the NU Simulator Training Guides, which encompass:
. The general requirements specified in ANSI /ANS-3.5,1985 and Regulatory Guide 1.149,1987.
. The training requirements for performing the various plant start-up, shutdown, operating and emergency procedures.
. Outside events (e.g., selected LERs, plant design changes, etc.) that affect the training programs and/or the simulator configuration.
Specific performance tests were developed for the Millstone Unit 3 simulator, which fulfill the testing requirements of ANSI /ANS 3.5,1985, and recommended testing in Regulatory Guide 1.149,1987. Included are the following test categories:
. Malfunctions Page 2 of 14
. Normal operations and surveillances
- Instructor station
. Annual operability
. Real-Time
. Physical fidelity verification The Millstone Unit 3 simulator performance tests are dynamic documents and are the primary mechanism for validating simulator performance and fidelity. As such, they are updated to reflect modifications made to the simulator and/or new reference plant performance data. The performance tests are repeated over a four-year period at the rate of approximately 25 percent per year. The operability test and physical fidelity evaluation portions are performed annually.
NU's Simulator Certification Program provides control over the configuration of the Millstone Unit 3 simulator to ensure that it can effectively support the training mission and that regulatory commitments are satisfied. The main components of simulator configuration management are: 1) Design Data Base, 2) Documentation, and 3)
Modification Control and Scope of Simulation Expansion.
- 1. The intent of the Simulator Design Data Base is to have available the complete data on which the simulator is designed, and on which upgrading is based. The specific data which fonns the design basis for the current Millstone Unit 3 simulator hardware configuration and software models has been identified and validated. As such, we utilize the latest revision of plant documents and rely on the formal plant design change process for notification of modifications and transmittal of pertinent information. Open Simulator Discrepancy Reports constitute the Updated Design Data Base described in ANSI /ANS 3.5,1985.
- 2. Simulator-specific documentation is needed for certification and/or maintenance of the simulator. While this documentation is controlled and updated, it is not considered to be part of the Simulator Design Data Base.
- 3. NU has in place a modification control process to implement design changes on the Millstone Unit 3 simulator and to ensure that the simulator fully complies with ANSI /ANS 3.5 (1985), Reg Guide 1.149, and 10 CFR 55.45. The following procedural controls have been implemented:
Major Plant Modifications - The Millstone Unit 3 simulator was certified as a plant referenced simulator. Significant reference plant control room changes, such as control room design review modifications, must receive special consider-ation due to their potential major impact on training. NSEM 6.04, " Major Plant Modifications," addresses this concern. This process guideline ensures that major Page 3 of 14
plant modifications affecting the reference plant control room are reviewed and acted on in a timely manner. This ensures that training and exams continue to be performed on a valid plant referenced Simulator.
Plant Design Changes / Procedure Changes - Plant design changes and procedure changes are sent to the training department to be reviewed for training impact and simulator impact. This assures that both training and the simulator are continually evaluated and updated as plant changes occur. Procedural controls covering this review process are in training procedures. Plant design changes requiring simulator modifications are handled within the time allowed by ANSI /ANS 3.5 Section 5.2 and 5.3.
Student Feedback - Student (licensee) feedback is an important input to simulator fidelity. Student feedback on simulator performance is requested. If there is a simulator discrepancy it is noted and provided to the Simulator Operations Assistant for dispositioning.
Reference Plant Performance Data - As plant events occur, data is retrieved and evaluated to validate simulator fidelity. NSEM 6.03," Collection of Plant Performance Data," covers the collection of reference plant perfonnance data.
Develonment of New Simulator Training Guides - Nuclear Training Procedure, NTP 134, " Developing Simulator Training and Examinations," covers requirements for validating new simulator training guides. This ensures that i.ew simulator training guides use only certified remote functions, certified malfunctions, certified initial conditions, and do not exceed any simulata operating limits.
Simulator Certification Dowmentation - As the Millstone Unit 3 simulator is modified, appropriate simulator certification documentation needs to be updated.
NSEM 5.02, " Retest Guidelines," covers updating of the perfinmance tests.
A Simulator Configuration Control Committee (SCCC) has been established to provide overall simulator design control and management of resources involved in simulator modifications. The SCCC is chaired by the Operations Manager (or designee) for Millstone Unit 3 and includes representatives from the Operator Training Branch and Process Computers and Simulators department.
Page 4 of 14
- 2. DESCRIPTION OF PERFORMANCE TESTING FOR THE FOUR YEAR CYCLE: Novem ber.1994 - October.1998 A. TESTING GOALS. METIIODOLOGY. AND ASSUMPTIONS The NU Simulator Certification Program, goals, methodologies, and assumptions were established to ensure an efficient, effective, and comprehensive approach to testing. Certain elements of this testing philosophy are worthy of mention here:
. Testing should be conducted for normal, abnormal, and emergency conditions.
. The simulator response, as verified by testing, during normal, abnormal, and emergency conditions shall meet the following criteria necessary to support the contents of the training curriculum:
Correct diagnosis of events by the operator is possible.
l Capabilities exist for the operator to intervene and mitigate events. ;
l Actions or inaction taken by operators shall result in similar
)
response as in the reference plant. '
Alarms and automatic system actuation's shall occur such that operator diagnosis and response is not adversely affected.
. Any discrepancies found during testing that violate these criteria shall be documented by generating a Trouble Report (TR), to be dispositioned in accordance with the NSEM.
. The requirements of ANSI /ANS 3.5 shall be implemented.
. Simulator controls used in training, such as, switches, annunciators, meters, controllers, recorders, lights, keylocks, pushbuttons, etc., should be tested.
. Personnel, presently or previously SRO qualified, are used for performance and operability testing.
. In the absence of finite data, a combination of operating experience, engineeringjudgment and analytical results shall be used to test the simulator response to major malfunctions such as large break LOCA, steam line break, etc.
Page 5 of 14
1 l
e Testing shall be conducted whenever a modification is made to the simulator l that affects its fidelity relative to the reference unit or its functional operation i as a simulator. Modifications to the simulator design shall be validated l
through testing prior to use in training and examination.
During the development and conduct of specific testing it became necessary to establish additional guidance. This was done to more effectively apply the i requirements of ANSI /ANS 3.5 and respond to the unique attributes of each test.
This additional guidance or deviation from the general philosophy is summarized below:
l
- 1) NORMAL OPERATIONS TESTING e Testing of surveillances on redundant equipment or flowpaths is not required if the primary piece of equipment or flowpath is tested. For example, if the Train I Service Water Pump surveillance is performed, the Train II Service Water Pump surveillance need not be performed.
- The simulator's capability of performing a reactor scram followed by recovery to rated (full) power (ANSI /ANS 3.5, Section 3.1.1, Item 4)is tested by testing:
a plant startup to 100% power, followed by a reactor trip, then an increase to power
- 2) OPERABILITY TESTING e Boron Concentration for the Steady State tests was not recorded. !
The equipment for monitoring boron concentration was removed from the control room in 1995. This parameter will be added to the test procedure prior to performing the Steady State test for the l upcoming four-year cycle. I e Control Rod Position for the Steady State tests was not recorded.
Selected controlling bank rod positions will be added to the test l procedure prior to performing the Steady State test for the i upcoming four-year cycle.
l l
Page 6 of 14
l 1
]
B. NORMAL OPERATIONS AND SURVEILLANCE TESTING
, The normal operations and surveillances required by ANSI /ANS 3.5 Section 3.1.l(1), (2),
(3), (4), (5), (6), (7), (8), and (10) were performed using controlled copies of Millstone Unit 3 operating procedures and surveillances. ANSI /ANS 3.5, Section 3.1.1 (9) was tested using a separate reactor core test procedure. NSEM 4.10, " Normal Operations Verification," contains the generic guidance used to write and perform the Millstone Unit 3 simulator normal operations and surveillance test.
Using controlled copies of Millstone Unit 3 operating procedures, the following sequence of operations was tested on the Millstone Unit 3 Simulator:
- 1. The simulator was initialized to Cold Shutdown conditions
- 2. Plant heatup
- 3. Nuclear startup
- 4. Plant Startup
. 5. Load increase to 100% power
- 6. Reactor trip initiated 7.. Reactor trip recovery
- 8. Nuclear startup
- 9. Plant startup-
- 10. Load increase to power
- 11. The simulator was reinitialized to 100% power.
- 12. Plant shutdown to hot standby
- 13. Reactor shutdown
- 14. Plant cooldown to cold shutdown C. MALFUNCTION TESTING The Millstone Unit 3 simulator is certified for 239 malfunctions, which meet the ,
requirement for 25 types of malfunctions specified in section 3.1.3 of ANSI /ANS 3.5, j (1985). j Each certified malfunction has its own test. Guidance for writing and conducting l malfunction tests is contained in:
e NSEM 4.04, Major Malfunction Testing
. NSEM 4.05, Malfunction Testing Malfimetions which cause major integrated plant effects, such as loss of coolant, loss of normal power, etc., have their respective malfunction tests written and tests conducted per the guidance in NSEM 4.04. For these " major" malfunctions, computer data, Page 7 of 14 e p q -r -- - -g-
._ _ -~ _. _ ___ _. _ _ _._._. _ _ _ _ _ . _ _ _ _ _ .
i analytical data, or actual plant response data (if available) is typically used to verify correct malfunction response. Analytical data was obtained from the following documents / sources:
i e Millstone Unit 3 Updated Final Safety Analysis Report (UFSAR) i e Westinghouse WCAP-11145-P-A (NOTRUMP Best Estimate LOCA Analysis) ;
e Millstone Unit 3 Reference Plant Data Book j e Cycle 6 Reload Analysis Report All other malfunctions that are not classified as a major malfunction have their respective malfunction tests written and tests conducted per the guidance in NSEM 4.05. This type
- o. nalfunction is typically an instrument malfunction, a controller malfunction, a pump trip, etc. Malfunction tests in this category are typically "Best Estimate" Analysis. "Best Estimate" Analysis means an NRC licensed or SRO certified instructor or previously licensed or certified individual utilizes his experience, operating procedures, piping and instrument drawings, electrical drawings, and possibly hand calculations to estimate proper simulator response.
A?4SI/ANS 3.5 (1985), Section 3.4.2, requires that provisions be available for incorporating additional malfunctions. As an example, a malfunction for failure of the i RIIR pump to trip on low RWST level (RH06) was added during the last four-year certification cycle to the simulator to reflect changes in the Millstone Unit 3 plant design.
All certified malfunctions are retested over a four year interval, as described in Section 4 of this document.
D. ANNUAL OPERABILITY TESTING ANSI /ANS 3.5 (1985) Section 5.4.2 and Appendix B specify annual operability testing requirements. The methodology used to write and conduct operability tests is described in NSEM 4.09, " Simulator Operability Testing." Using the guidance provided in NSEM 4.09, an annual operability test specific to the Millstone Unit 3 simulator was performed.
Annual operability testing consists of the following items:
- Steady state testing at 25% power,75% power and 100% power i e Stability testing at 100% power l e Performance testing for ten (10) transients Reference plant data obtained at 25%,75% and 100% power during the various plant ;
startups and power reductions was used as the basis for steady state testing. Utilizing the '
I i
Page 8 of 14 l
)
l
reference plant data, comparisons were made between the simulator and reference plant for approximately 50 selected critical and non-critical points. These 50 points include all those listed in ANSI /ANS 3.5 Section Bl.l.
A stability test was performed at 100% power for 50 points over a one hour period. This test was in conformance with ANSI /ANS 3.5 Section Bl.l. Acceptance criteria for the steady state and stability tests were based on ANSI /ANS 3.5 Section 4.1. The ten transients described in ANSI /ANS 3.5 Section Bl.2 were analyzed using the parameters indicated in ANSI /AN5 3.5 Sections Bl.2.1,2, or 3, as appropriate.
E. PIIYSICAL FIDELITY VERIFICATION ANSI /ANS 3.5 (1985) Sections 3.2 and 3.3.1 require sufficient panels and controls for simulation to conduct normal operations and malfunction response. Further, the simulator instrumentation and controls are required to duplicate the physical characteristics of the reference plant. In response to the issuance of 10CFR55.45, a two step evaluation process was employed for the existing Millstone Unit 3 simulator to ensure compliance with the ANSI /ANS 3.5 Section 3.2 and 3.3.1 requirements.
NU has a strong commitment to maintain the Millstone Unit 3 simulator up to date with the reference plant control boards in a timely manner. NSEM 6.04, " Major Plant Changes," addresses controls on major design changes (such as control room design review) that challenge a " plant referenced simulator" to remain an effective training tool.
Minor plant changes are addressed within the time constraints of ANSI /ANS 3.5 Sections 5.2 and 5.3.
F. INSTRUCTOR STATION TESTING Simulator instructor station testing was performed as described in NSEM 4.11,
" Instructor Station,"in September,1998.
Instructor station testing verified correct operation of the following features of the Millstone Unit 3 instructor station:
- Backtrack
- Fast Time e Slow Time e Boolean Trigger e Composite Malfunction e Variable Parameter Control Page 9 of 14
- - Freeze e Snapshot To verify the I/O override feature of the Millstone Unit 3 simulator, a sampling of the following points were tested to verify proper operation.
- Analog Outputs e Analog inputs e DigitalInputs e Digital Outputs e "Crywolf' Annunciator feature e Annunciator Override The purpose of the I/O override feature testing was to verify the feature itself, not every I/O override point. The Millstone Unit 3 simulator has the ability to I/O override essentially every point on the simulator. While this is a great capability, there are thousands ofI/O override points. Curriculum testing of a simulator lesson plan requires the testing of any individual I/O override point to be used in training or exams, thereby verifying the individual I/O override points to be used prior to training.-
G. REAL TIME TESTING Real time testing was performed in August 1996, per NSEM 4.13, "Real Time Simulator Verification."
The purpose of this test was to verify that all simulation models are running in real time.
Verification was accomplished by:
- Monitoring the operations of the real time executive and ensuring it is running in real time.
. Running the following complex scenarios and measuring the time used by each of the frames.
ATWS (stuck rods)
Turbine load reject / trip Steam-Line Break Loss of Coolant Accident Results: Of the 50 milliseconds available no more than 25.7 msee was ever required, leaving greater than 48.6% spare time at all times.
4 -
Page 10 of 14
i i
e Installing software counters to run at the end of each frame and comparing their actual value with values expected to cnsare there was no lapse in real time.
l The results of these tests show that the Millstone Unit 3 simulator performs in real time.
This test will be repeated once every four years or at any time a question exists that the Millstone Unit 3 simulator is not running in real time.
- 3. DESCRIPTION OF UNCORRECTED PERFORMANCE TESI FAILURES AND SCHEDULE FOR CORRECTION NSEM 5.01," Simulator Modification Control," establishes controls for the coordination, resolution, and documentation ofidentified differences between the simulator and its reference plant. A Trouble Report (TR) is a form used by the Operator Training Branch and the Process Computers and Simulators department to record all identified discrepancies and ensure that the requirements of ANSI /ANS 3.5 are satisfied. TRs are resolved in accordance with NSEM 5.01," Simulator Modification Control," and NSEM 6.04," Major Plant Modifications."
As of September 24,1998, there are fifty (50) open discrepancies on the Millstone Unit 3 simulator of which three (3) are from performance tests. These three (3) open performance discrepancies are listed in Attachment A. The open discrepancies have been evaluated for training impact. Since each scenario is validated prior to its approval and use, the impact on training is minimal and controlled. Scenarios with unacceptable simulator performance are not used in training. Approximately three hundred (300) discrepancies of all types (e.g. plant design changes) were dispositioned over the past four years.
The previous quadrennial report mentioned the possible resolution of an open DR "with a new NSSS model in 1995-1996." This model upgrade was delayed and has been rescheduled to be completed by Devember 31,1998. The upgrade of the NSSS model expands our training capability by increasing the scope of simulation, and reduces the software maintenance effort required to tune transient responses to newly acquired reference plant data. This upgrade of the NSSS model is voluntary and not for the purpose of meeting the requirements of ANSI /ANS-3.5,1985 (as endorsed by Regulatory Guide 1.149, Revision 1), but will be installed solely as a training enhancement by December 31,1998. Additionally, the presently installed NSSS model fully supported restart of the unit from the recent extended shutdown.
l l
l Page 11 of 14
- 4. NEXT FOUR-YEAR SCHEDULE. (NOVEMBER.1998 TO OCTOBER. 2002)
The Millstone Unit 3 performance tests will be repeated over a four year interval as described in Attachment B. This schedule has been written based on the guidance provided in NSEM 4.07, " Master Test Schedule." This four-year interval will start on November 1998.
The following tests must be performed each year:
. Annual operability
. Physical fidelity verification l
The following tests must be performed over a four- year interval:
. Normal operations and surveillances e Malfunctions
. Instructor station e Real time
- 5. PLANT DESIGN CHANGES NOT INSTALLED WITHIN 24 MONTHS There were two plant design changes that were not incorporated within the 24 month time frame per ANSI /ANS 3.5. They were both discovered via in-house audits. One dealt l with an indicating light that had not been removed. The other dealt with setpoint changes on the OPDT or OTDT turbine runbacks. Both had minimal to no impact on operator training and have since been incorporated.
- 6. MAJOR SIMU~LATOR UPGRADES In the first quarter of 1996, the Gould 32/87 processors and peripherals were replaced with a SUN SP ARCcenter 2000 platform and new peripherals. The re-host included complete benchn. ark testing against the previous platform by using the simulator operability test. These tests included an instructor station test and all annual operability tests. Any difference in the two benchmarks were resolved before the simulator with the new platform was placed in service.
Page 12 of 14
Millstone Unit 3 Simulator Computer System Configuration )
(A) Hardware
- SUN SPARCeenter 2000 dual 40-MHz XDBus !
- Fast SCSI-2 Buffered Ethernet SBus Card (FSBE/S)
- Internal SunCD Drive,14-Gbyte 8mm Internal Tape Drive
- Three 40 MHz System Boards with Four 85 MHz SuperSPARC-II Modules
- 192 MByte of ECC Memory SIMMs
- DSCSI Drive Tray with 3-2.1 GB drives
- 2 SBus Differential Fast / Wide Intelligent SCSI-2 Host Adapters (DWIS/S) l
- Three 20-inch Color Monitors
- Three TurboGX Frame Buffers (B) Software 4
- SUN Solaris 2.4 operating system
- Sybase 4.9.2 relatic,nal database management system
- Dataview 9.5 graphical tool runtime ;
- NUSE (Northeast Utilities Simulation Environment) !
- NUXIS (Northeast Utilities X-Window Instructor Station) j NUSE The Northeast Utilities Simulation Environment (NUSE) was developed in-house by the Simulators and Computer Engineering (SCE) staff. The real time portion of NUSE includes the real time executives (MainExec, Rtexec), interactive debugging task (IDT), I/O module, etc. and provides the model execution sequencing, scheduling , panel interfacing and on-line parameter monitoring. The off-line portion of NUSE includes tools and utilities used by engineers to develop, debug and maintain the simulation models.
NUXIS Northeast Utilities X-Window Instructor Station (NUXIS) was also developed in-house by the SCE staff using Dataview's graphic tools. NUXIS provides a window based, point and click, graphical user interface for instructors. The new instructor station is capable of storing 98 initial conditions versus the 59 which is what was available on the previous model.
Page 13 of 14
(C) Hardware and Software in 1998 SCE took on the task of updating the hardware to a new SUN Enterprise 3000 server along with incorporating a new NSSS model. This model upgrade was delayed and has been rescheduled to be completed by December 31,1998. I The upgrade of the NSSS model expands our training capability by increasing the scope of simulation, and reduces the software maintenance effort required to tune transient responses to newly acquired reference plant data. This upgrade of the ;
NSSS model is voluntary and not for the purpose of meeting the requirements of ANSI /ANS-3.5,1985 (as endorsed by Regulatory Guide 1.149, Revision 1), but l- will be installed solely as a training enhancement by December 31,1998. i Additionally, the presently installed NSSS model fully supported restart of the unit from the recent extended shutdown.
l l
l l
t l
l l
Page 14 of 14
i ATTACHMENT A l
!- l l
l Millstone Unit 3 l~ OPEN PERFORMANCE TEST DISCREPANCIES l
September 24.1998 l
The discrepancies identified during the performance testing are listed herein. The discrepancies are annotated as to the proposed schedule for resolution based on Operator Training needs; This I schedule is our best estimate at this time, however, it is subject to change based on resources, emergent work, and Millstone Unit 3's needs.
1 i
1 - . - - -- - _.
ATTACHMENT A Millstone Unit 3 Open Performance Test Discrepancies September 24,1998 DR Number Dusipline Due Date DR Title 1998-3-0130 SW 6/1/99 DRPI Alarms (RD12)Do Not Actuate 1998-3-0167 SW 7/U99 Malfunction SWO6 (SW liDR Failure) Severity Not Correct 1998-3-0170 SW 7/1/99 SW IlX Fouling (SWO7) Malfunction No Response i
)
1 4
. .. . - ~ _ . . . - . . - . . . . . . . . . . . . . - - _ . = - . . . . . - .
ATTACHMENTB Millstone Unit 3 PERFORMANCE TEST SCHEDULE START END Performance Test:
)
Year One: 11/1/1998 10/31/1999 YearTwo: 11/1/1999 10/31/2000 Year Three: 11/1/2000 10/31/2001 Year Four: 11/1/2001 10/31/2002 APPROVED: Original signed by MP3 ASOT on 9/11/98 ASOT Rev.: 3 Date: 3/26/97 Page: 8.3-1 of 24 NSEM-4.07
YEAR ONE TEST DATE INITIALS Annumi Onerability NSEM-4.00 25% Steady State Accuracy 75% Steady State Accuracy 100% Steady State Accuracy 100% Stability Transient #1: Manual Reactor Trip Transient #2: Simultaneous Trip of All Feed Water Pumps Transient #3: Simultaneous Closure of All Main Steam Isolation Valves !
Transient #4: Simultaneous Trip of All Reactor Coolant Pumps Transient #5 Trip of Any Single Reactor Coolant Pump Transient #6 Main Turbine Trip at Power Less than P9 Transient #7 Large Load Rejection Transient #8 Maximum Size LOCA with a Loss of Offsite Power Transient #9 Maximum Size Main Steam Line Rupture Inside Containmes
- Transient #10 Reactor Coolant System Depressurization i to Saturation Conditions Using PORV Rev.
- 3 Date: 3/26/97 Page: 8.3-2 of 24 NSEM-4.07
YEAR ONE l
! TEST DATE INITIALS Physical Fidelity Verification NSEM-4.12 Maior Malfunctions NSEM-4.04
. ED01 e FW10A(B)(C)(D) e MS01A(B)(C)(D)
Malfunctions NSEM-4.05
- CC System Malfunctions
~
CC01 - RPCCW Pump Trip l
I CC02 - RHR HX CC VV Failure CC03 - Loss of RCP Cooling Water Supply I CC04 - RPCCW Pipe Leak CC05 - RPCCW Surge Tk M/U VV Failure CC06 - RPCCW HX Outlet TCV Failure CC07 - Safety injection PP Clr Blockage CC08 - Charging PP Cig Wtr Sys Blockage e CH System Malfunctions CH02 - CTMT Air Recirculation Fan Trip CH03 - Chilled Wtr Circulating PP Trip l Rev.: 3 Date: 3/26/97 l
Page: 8.3-3 of 24 NSEM-4.07
i I
l YEAR ONE ,
i l
TEST DATI INITIALS CH04 - Loss of CTMT Vacuum 1
CH05 - Breach of CTMTIntegrity ;
l CH06 - Control Rod Drive Cooling Fan Trip CH07 - Loss of Reactor Plant Chilled Water
- CR System Malfunctions !
CR01 - Fuel Cladding Failure
. CS System Malfunctions l
CS01 - Quench Spray PP Trip i CS03 - CTMT Recire PP Trip CS04 - RWST Leak e CV System Malfunctions CV01 - Letdown Leak Inside CTMT CV02 - Letdown Leak Outside CTMT CV03 - Letdown HX Tube Leak to RPCCW CV04 - Letdown Temp Transmitter Failure CV05 - Letdown Press Transmitter Failure CV06 - M/U Control Failure
- Rev.
- 3 l Date: 3/26/97 Page: 8.34 of 24
! NSEM-4.07
l 1
l YEAR ONE TEST DATE INITIALS CV07 - RCS Uncontrolled Dilution CV08 - M/U Water PP Trip CV09 - Volume Control Tank Leak CV10 - VCT Lvl Transmitter Failure CV11 - Charging Pump Trip CV12 - Charging Line Leak Inside CTMT CVl3 - RCP #1 Seal Failure 1
CV14 - RCP #2 Seal Failure CV15 - RCP #3 Seal Failure i
CV16 - RCP Thermal Barrier Tube Failure CV18. Charging Flow Control VV Failure CV19 - BTRS TCV Failure
. CW System Malfunctions I
CW01 - Circulating Water PP Trip
, CWO2 - Main Condenser Tube Leak l
CWO3 - Station Vacuum Priming PP Trip CWO4 - Traveling Screen High DP CWO5 - Condenser Tube Sheet Plugging Rev.: 3 Date: 3/26/97 Page: 8.3 5 of 24 NSEM-4.07 l
YEAR ONE i
TEST DATE INITIALS l
CWO6 - Main Condenser Tube Rupture e ED System Malfunctions ED02 - Unit Service Transformer Failure ED03 - Loss of 6.9 KV Bus ED04 - Loss of 4160 V Bus ED05 - Loss of 480 V Load Center ED06 - Loss of Emergency Bus MCC ED07 - Automatic Bus Fast Transfer Failure ED08 - Loss ofInstrument Bus ED09 - Loss of Battery Bus ED10 - Degraded 345KV System Voltage EDI1 - EDG Sequencer A Failure ED12 - EDG Sequencer B Failure ED13 - Loss of Selected Non-Vital MCC ED14 - Loss of Annunciator Panel Power Bus Normal Plant Evolutions NSEM-4.10 e Plant Startup Normal Ops Test Rev.: 3 Date: 3/26/97 Page: 8.34 of 24 NSEM 4.07
l YEAR ONE ,
l TEST DATE INITIALS
. Nuclear Startup Normal Ops Test l
I 1
Rev.: 3 Date: 3/26/97 Page: 8.3-7 of 24 NSEM-4.07
YEAR TWO TEST DATE INITIALS Annual Operability NSEM409
- 25% Steady State Accuracy 75% Steady State Accuracy 100% Steady State Accuracy 100% Stability Transient #1: Manual Reactor Trip Transient #2: Simultaneous Trip of All Feed Water Pumps Transient #3: Simultaneous Closure of All Main Steam Isolation Valves Transient #4: Simultaneous Trip of All Reactor Coolant Pumps Transient #5 Trip of Any Single Reactor Coolant Pump i Transient #6 Main Turbine Trip at Power Less than P9 Transient #7 Large Load Rejection Transient #8 Maximum Size LOCA with a Loss of OfTsite !
Power Transient #9 Maximum Si7e Main Steam Line Rupture Inside Containment Transient #10 Reactor Coolant System Depressurization to Saturation Conditions Using PORV Rev.: 3 Date: 3/26/97 Page: 8.3 8 of 24 NSEM-4.07
YEAR TWO TEST DATE INITIALS Physical Fidelity Verification NSEM-4.12 Maior Malfunctions NSEM-4.04 MS02A(B)(C)(D) e MS03 RC02A(B)(C)(D)
Malfunctions NSEM-4.05
. EG System Malfunctions EG01 - Main Generator Trip EG02 - Main Generator Voltage Regulator Fails to Manual EG03 - Main Generator Output Bkr Fail to Open EG04 - Main Generator Exciter Bkr Trip EG05 - SBO Diesel Output Bkr Trip EG06 - Diesel Generator Trip EG07 - Diesel Generator Fail to Start EG08 - Diesel Generator 1,oad Limiter Failure EG09 - Main Gen Auto Voltage Regulator Swing EG10 - Main Gen Manual Voltage Regulator Rev.: 3 l Date: 3/26/97 l Page: 8.3-0 of 24 l NSEM-4.07
YEAR TWO TEST DATE INITIALS Failure EGI 1 - Diesel Generator Fuel Oil Transfer PP Trip d
EG12 - SBO Diesel Supply Bkr Trip EGl3 - EDG Auto Start Failure e FW System Malfunctions FW01 - Lowering Condenser Vacuum FWO2 - Condenser Hotwell Lvl Xmtr Failure FWO3 - Condensate PP Trip FWO4 - Condensate Recirc VV FV48 Failure FWO5 - Condensate Demin DP Increase FWO6 - LP Htr Byp VV MOV88 Fail open FWO7 - Feed Water PP Trip FWO8 - Feed Water Regulating VV Failure FWO9 - Feed Water Line Rupture Outside CTMT FW11 - Feed Water Line Leak Inside CTMT l l
FW13 - LP Heater Tube Rupture FW14 - HP Heater Tube Rupture Rev.: 3 ,
Date: 3/26/97 l Page: 8.3-10 of 24 !
NSEM-4.07
YEAR TWO TEST DATE INITIALS FW15 - LP Heater Hi-Hi Lvl Switch Actuates FW16 - Fourth Point Htr Drn PP Trip FWl7 - Moisture Separator Drn PP Trip FW18 - MDAFW Pump Trip FW19 -TDAFW Pump Trip FW20 - AFW Pump Fails to Auto Start FW21 - AFW PP Discharge VV Closed FW22 - AFW Pipe Rupture Inside CTMT FW23 - DWST Rupture FW24 - Condensate Storage / Surge Tk Leak .
1 FW25 - Condenser Air Removal PP Trip 1'
FW26 - LP Htr Byp VV MOV88 Leakage FW27 - Main FW PP Spd Control Fails in Auto FW28 - Main Feed PP Recire VV Fails Open 1
FW29 - Main Feed PP Recirc VV Fails Closed l FW31 - Main Feed Reg VV Byp VV Failure FW32 - MSR Dm Tank Dump VV Failure ;
FW33 - Condensate PP Coupling Shear Rev.: 3 4 Date: 3/26/97 Page: 8.3-11 of 24 NSEM-4.07
YEAR TWO TEST DATE INITIALS FW34 - Hotwell Leakage FW35 - Main Feed Reg VV Seat Leakage e IA System Malfunctions IA01 - Service Air Compressor Trip IA02 - Instrument Air Compressor Trip IA03 - Loss ofInstrument Air _
IA05 - CTMT Instrument Air Supply VV PV15 Fails Closed IA06 - Shutdown Instrument Air Compressor Trip
- MS System Malfunctions '
l MS04 - Reheater Stm Sply Press Controller Fail MS05 - Moisture Separator Reheater Tube Leak MS06 - Main Steam Isolation VV Trip MS07 - Main Steam Safety VV Failure MS08 - Gland Seal Regulator Failure MS09 - Pressure Relieving VV Failure MS10 - Extraction Stm NRV Fails In Position 1 Rev.: 3 Date: 3/26/97 Page: 8.3-12 of 24 NSEM-4.07
. - _ - . .. = . _ - . - _ _ . - -
YEAR TWO TEST DATE INITIALS e NI System Malfunctions N101 - Source Range Channel Failure NIO2 - Source Range Channel Noisy NIO3 -Incorrect Source Range Channel Response N104 - Source Range High Voltage Fails to De-Energize NIO5 - Intermediate Range Channel Failure NIO6 - IRN1 Channel Improper Compensation NIO7 - Power Range Channel Failure N108 - PRNI Upper Detector Failure NIO9 - PRNI Lower Detector Failure nil 0 - P6 Bistable Failure Nll1 - P10 Interlock Failure nil 2 - Power Range Channel Random Noise Normal Plant Evolutions Tests NSEM-4.10 e Turbine Startup and Generator Synchronization Normal Ops Test
- Power Ascension Normal Ops Test l
e Reactor Trip and Recovery Normal Ops Test Rev.: 3
, Date: 3/26/97 Page: 8.3-13 of 24 NSEM-4.07 l
l'
- - . - - . - . . . - . . - . . .. . . . - . . . . . . . - - _ _ _ . . . - - - - = - . - . . . . - .
i YEAR TWO i l
TEST DATE INITIALS
- Real Time Simulation Verification NSEM-4.13 i*
1 1
1 1
1 l
1 1
1 1
I l
1 i
I y
i Rev.: 3 Date: 3/26/97
- Page: 8.3-14 of 24 3
N SEM-4.07 A
YEAR TIIREE I TEST DATE INITIALS Annual Operability NSEM-4.09 25% Steady State Accuracy 75% Steady State Accuracy I 100% Steady State Accuracy i
1 100% Stability Transient #1: Manual Reactor Trip Transient #2: Simultaneous Trip of All Feed Water Pumps Transient #3: Simultaneous Closure of All Main Steam _
Isolation Valves Transient #4: Simultaneous Trip of All Reactor Coolant Pumps l
l Transient #5 Trip of Any Single Reactor Coolant Pump i
Transient #6 Main Turbine Trip at Power Less than P9 )
1 Transient #7 Large Load Rejection Transient #8 Maximum Size LOCA with a Loss of Offsite Power l Transient #9 Maximum Size Main Steam Line Rupture Inside Containment Transient #10 Reactor Coolant System Depressurization to Saturation Conditions Using PORV Rev.: 3 Date: 3/26/97 Page: 8.3-15 of 24 NSEM-4.07
YEAR THREE TEST DATE INITIALS Physical Fidelity Verification NSEM-4.12 Maior Malfunctions NSEM-4.04 e RC03A(B)(C)(D) e RC09A(B)(C)(D)
RC10A(B)(C)(D)
Malfunctions NSEM-4.05
- PC System Malfunctions l l
PC01 - Loss of Plant Computer !
e RC System Malfunctions RC01 - RCS Crud Burst RC04 - Reactor Vessel Head Flange Leak RC05 - Reactor Vessel Head Vent Leak RC06 - Pressurizer Safety Valve Leakage _
RC07 - Pressurizer PORV Leakage RC08 - Pressurizer PORV Fails Closed RCl2 - RCP Oil Leak, Upper Reservoir RCl3 - RCP Oil Lift PP Failure RCl4 - RCP Upper Oil Reservoir Clg Wtr Leak Rev.: 3 Date: 3/26/97 Page: 8.3-16 of 24 NSEM-4.07
l l
l YEAR TIIREE 1
TEST DATE INITIALS ,
RCIS - Pressurizer Safety VV Fails to Open RCl8 - PORV Fails Open e RD System Malfunctions RD01 - Rod Bank Continuous Withdrawal RD02 - Rod Bank Continuous Insertion ,
i RD03 - Dropped Control Rod I l
RD04 - Stuck Control Rod j i
RDOS - Control Rods Fail to Move in Auto i
RD06 - Control Rods Fail to Move in Manual I RD07 - Controlling Rod Bank Moves Opposite to Auto Demand Signal RD08 - Control Rod Speed Failure in Auto l
RD09 - Control Rod Block Failure to Block RD10 - Control Rod Position Failure Data A RD11 - Control Rod Position Failure Data B RDl3 - Broken Control Rod l
RD14 - Group Rod Position Failure RD15 - Step Cntrs Move One Half Normal Spd Rev.: 3 Date: 3/26/97 l Page: 8.3-17 of 24 l l
NSEM-4.07
l YEAR THREE j TEST DATE INITIALS RD16 - Control Rods Fail to Fully Insert l
e RH System Malfunctions RH01- Residual Heat Removal PP Trip l
, RH02 - Loss of RHR PP Suction RH03 - RHR Flow Transmitter Failure RH04 - RHR Heat Exchanger Tube Failure _.
RH05 - RHR PP Seal Failure RH06 - RHR PP Fail to Trip on RWST Level Low j e RM System Malfunctions l
RM01 - Area Rad Mon Failure (CTMT)
RM02 - Area Rad Mon Failure (Aux & ESF .
Bldg)
RM03 - Area Rad Mon Failure RM04 - Process Rad Mon Failure (Aux Bldg)
RM05 - Process Rad Mon Failure e RP System Malfunctions RP01 - RCS Flow Transmitter Failure l RP02 - Reactor Trip Actuation l Rev.: 3 Date: 3/26/97 I Page: 8.3-18 of 24 I
NSEM-4.07
l YEAR TilREE I TEST DATE INITIALS l l
RP03 - Phase A CTMT Isolation Actuation l RP04 - CTMT Spray Actuation RP05 - Safety Injection Actuation RP06 - CTMT Spray Auto Actuation Failure RP07 - Safety Injection Auto Actuation Failure RP08 - Main Steam Line Auto Actuation Failure RP09 - Manual Reactor Trip Failure RP10 - Auto Reactor Trip Failure l
RPl1 - Failure of Safety Sys to Auto Actuate RP12 - C5 Interlock Failure RP13 - P12 Interlock Failure RP14 - CBI Auto Actuation Failure Normal Plant Evolutions NSEM-4.10
. Surveillance Testing Nonnal Ops Test e Plant Shutdown Normal Ops Test Rev.: 3 Date: 3/26/97 Page: 8.3-19 of 24 NSEM-4.07 l
i l
i YEAR FOUR 1
j TEST DATE INITIALS l l
Annual Operability NSEM-4.09 25% Steady State Accuracy -
i 75% Steady State Accuracy l
l 100% Steady State Accuracy i 100% Stability l
l Transient #1: Manual Reactor Trip Transient #2: Simultaneous Trip of All Feed Water Pumps !
Transient #3: Simultaneous Closure of All Main Steam Isolation Valves Transient #4: Simultaneous Trip ot All Reactor Coolant Pumps Transient #5 Trip of Any Sing:e Reactor Coolant Pump Transient #6 Main Turbine Trip at Power Less than P9 Transient #7 Large Load Rejection Transient #8 Maximum Size LOCA with a Loss of Offsite Power Transient #9 Maximum Size Main Steam Line Rupture Inside Containment Transient #10 Reactor Coolant System Depressurization to Saturation Conditions Using PORV Rev.: 3 Date: 3/26/97 Page: 8.3-20 of 24 NSEM-4.07
l YEAR FOUR TEST DATE INITIALS Physical Fidelity Verification NSEM-4.12 Maior Malfunctions NSEM-4.04 RC11 A(B)(C)(D) e RC17
. RD12 SG01A(B)(C)(D) l Malfunctions NSEM-4.05
- RX System Malfunctions i
RX01 - RCS Wide Range Press Xmtr Failure l RX02 - RCS WR Cold Leg Temp Xmtr Failure RXO3 - RCS WR Hot Leg Temp Xmtr Failure RX04 - RCS NR Cold Leg Temp Xmtr Failure RX05 - RCS NR Hot Leg Temp Xmtr Failure RX06 - Pressurizer Spray VV Auto Cont Failure RX07 - Pressurizer Heaters Fail RX08 - Failure of RCS Loop Isol VV Temp Interlock to Prevent Opening RXO9 - Pressurizer Press Xmtr Failure RX10 - Pressurizer Lvl Xmtr Failure Rev.: 3 Date: 3/26/97 Page: 8.3-21 of 24 NSEM-4.07
. . - - _ _ - - = _ -_- .-.. - - -. . -
YEAR FOUR TEST DATE INITIALS RXI1 - Steam Generator Press Xmtr Failure l
RX12 - Steam generator NR Lvl Xmtr Failure RX13 - Steam Generator Feed Flow Xmtr Fail RX14 - Steam Generator Stm Flow Xmtr Fail RXI5 - Main Stm Hdr Press Xmtr Failure RX16 - Turbine 1st Stage Press Xmtr Failure RX17 - Loss of Condenser Available Permissive RXI 8 - Spurious Noise Pickup by RPS Xmtr RX19 - Failure of 3FWS-PT508
. SG System Malfunctions SG02 - SG Blowdown Isol VV Fails' As Is SG03 - Steam Generator Tube Leak !
1 l
e SI System Malfunctions SIOl - Safety Injection Accumulator Level Inc SIO2 - Safety Injection Accumulator Level Dec SIO3 - SI Accumulator N2 Press Dec SIO4 - Safety Injection PP Trip l SIO5 - Safety Injection Accumulator Press Inc
! Rev.: 3
! Date: 3/26/97 Page: 8.3-22 of 24 NSEM-4.07
l-l l
l YEAR FOUR TEST DATE INITIALS l SIO6 - RCS to SIInner System LOCA l
. SW System Malfunctions SWOI - Service Water PP Trip SWO2 - Service Water PP Failure to Auto Start
- 1 SWO3 - Loss of Cooling To Emergency Diesel SWO6 - Service Water System Break SWO7 - Service Water Heat Exchanger Fouling l
l 4 TC System Malfunctions I TC01 -Turbine Trip l TC02 -Turbine Runback TC03 -Turbine Fails to Trip l l
l TC04 -Turbine Fails to Runback i
TC05 - EllC PP Trip ;
I TC06 - Turbine Stop VV Fails in Position l
l TC07 -Turbine Control VV Failure TC08 - Loso shed TC09 -Turbine Rate Failure l
- TC10 - EHC Input Transmitter Failure Rev.; 3 Date
- 3/26/97 Page: 8.3-23 of 24 NSEM-4.07 l
l
YEAR FOUR j TEST DATE INITIALS
- TP System Malfunctions TP01 - TPCCW PP Trip TP02 - TPCCW PP Failure to Auto Start TP03 -Turbine Lube Oil TCV Failure TPO4 - Mn Gen Hydrogen Cooling Failure TP05 - Mn Gen Stator Coolant PP Trip e TU System Malfunctions TU01 - Loss of Turbine Lube Oil Supply TUO2 - Turbine Bearing High Vibration TUO3 -Turbine Oil PP Trips TUO4 - Shaft Driven Oil PP Failure _
Normal Plant Evolutions NSEM-4.10
- Plant Shutdown Normal Ops Test
. Plant Cooldown to Cold Shutdown Normal Ops Test i
Instructor Sta .n Verification NSEM-4.11 Rev.: 3 Date: 3/26/97 Page: 8.3-24 of 24 NSEM-4.07
- a