ML20196D273

New Reactor Control Console QA Program

ML20196D273
Person / Time
Site:	Armed Forces Radiobiology Research Institute
Issue date:	07/05/1988
From:	ARMED FORCES RADIOBIOLOGICAL RESEARCH INSTITUTE
To:
Shared Package
ML20196D251	List: ML20196D244 ML20196D253 ML20196D262 ML20196D273 ML20196D282
References
NUDOCS 8812090010
Download: ML20196D273 (83)

Text

{{#Wiki_filter:% g u [ [ NEW REACTOR CONTROL CONSOLE [ OVALITY ASSURANCE [ [ PROGRAM [ [ [ [ [ [ [ [ [ [ !!P;28m ggy o Sil

L ~ o 6 L [ NEW REACTOR CONTROL CONSOLE QUALITY ASSURANCE PROGRAM [ The installation of the new reactor cantrol console at AFRRI requires a quality Assurance (QA) Program be implemented to assure the proper operation of the software and hardware aspecta of the [ new console. The requirements for a QA program are outlined in 10 CFR Part 50, Appendix li, ANS-1$.8 and NUREG/CR-4640. ( The regulations, written for large power plants, require an exbnustive expendituro of manpower in time and e.wpense to elevelop a comprehensive QA Program that would be beyond the scope of the [ requirements needed for a non-power ( research & test reactor) ( plant. A better method to address the need t'or such a QA Program for ( the new AFRRI console is a Software. Hardware and System (Firmware) QA Prograa that "validates through testing". The QA Programs used and supplied by General Atomics, the AFRRI Firmware validation Program, and completion of the New Console Installationn checkout and test program supplies the validation of this testing. The "validation through testing" method includes specified acceptance criteria of all aspects of systems functions of the new cons,le. This "validation through testing" is accomplished by exercising system functions and verifying proper software / hardware /firmware responses. ( The following is the sequence of "validation through testing" events either done or being done by General Atomics (GA) and/or { AFRRI, or will be done as the unit is installed:: A. In 1986, GA built and installed as a simulator at GA a state of the art digital control console. It gave GA the ( test bed ("simulator testing") for the hardware / software design, development, validation and interface. ( B. In 1986-1987 GA built a second console and installed it at their Reactor Facility in San Diego, CA. This console is currently undergoing a Six Phase Test Program (see ) and is presently being tested in Phase Four. Reactor Safety Committee approval is pending for Phase Five testing. C. In 1987-1988 GA built the New console for the AFRRt TRIGA reactor. GA assembled and tested the New console accarding to their QA Programs (see Enclosures 2,3,4). Prior to shipping the New console to AFRRI, GA tested it with their Instrumentation System Firmware Validation Program (Enclosure 5). 1 D. In 1988 GA and AFRRI installed the New console at AFRRI to operate in parallel with the 1972 AFRRI console. In - - ---.____J

1 e. J \\ Cv: e e this configurat,lon, dA's Firmware Valistat. ion Program ] (Erclosure 5) and AFRRI'm Validation Throingh Testing Procedure (Enclosure 6) will be pe r fo rtaed t.o insure system operability. ] E. AFRRI will replace t.he 1972 AFRRI console wit.h the New console and perform both GA's Validation and AFRH1's 1 Validation Through Teut.ing Programa (Enclosures 5.6) J again, af ter console installation, prior t.o operations to insure that the syst.es la completely operabic. .\\ n pa r t. of this, the New Console Installation and Checkout, pian ) and Test Program will h.e completed. These sucesence of "validat. ion through test.ing" events } consti tiato an accept.able QA Program, emphasizing the crit.ical elements of the software / hardware /firmware systems. ] ) ) ) l l l i l

[ [ [ [ [ [ ENCLOSURE 1 [ [ { ( ( { l l (

1 TESTING OF I&C SYSTEM ON TRIGA MARK I e TEST PWM BEING CARRIED DUT UNDER 10CFR50.59 APPLICATION e PHASED APPROACH BEING UTillZED - PHASE I - L2 TUP IN #EAD ONLY MODE - PHASE lA - DEMONSTRATE IN0lVIDUAL CONTROL R00 DRIVE OPERATION WITH REACTOR IN SUSC#1TICAL CONDITION PHASE 11 - DEMONSTRATE FULL MECHANICAL / ELECTRICAL DPERATIDN OF ALL ROD DRIVE SYSTEMS IN SUSC#1TICAL CONDITION. ROD MAGNET CURRENT SUPPLIED FROM OLD CONSOLE PHASE 111 - REPEAT PHASE 11, BUT WITH FUEL LOADED. DEMONSTRATE ALL PERMITTED OPERATION MODES. ALL SAFETY SYSTEMS REMAIN FUNCTIONAL 'la"!ai m m m m

_1 ii, i r r r r __, m r o g TESTING OF I&C SYSTEM ON TRIGA MARK I (Continued) 4 t PHASE IV - REPEAT PHASE 111, BUT WITH ROLES REVERSED, i.e., PRESENT SYSTEMS STILL ACTIVE, BUT ONLY IN l l "WATCHDOG" ROLE l - PHASE V PLACE NEW I&C SYSTEM IN COMPLETE CONTROL OF REACTOR - PHASE VI TRAINING AND QUALIFICATION OF ALL LICENSED OPERATORS ole *a

] ] ] ] 1 ] ] ENCLOSURE 2 ] ] ] ] ] ] ] ] ] ] L _...

[ GA Technologies In3. [' e, _ m. m..,

Title:

QUALITY ASSURANCE PROGRAM DOCUMENT - TRIGA REACTORS ( Ooc. No, OAPD-9117 lasus Date 3/31/g7 Page i of a 15 ISSUE

SUMMARY

Inus Date Prepared by Depa m ent Nrpose of issus/ Approvals Section: Changed A 3/7/80 B.C. Larcher See Approval Sheet For Use ( B 3/30/81 B.C. Larcher See Approval Sheet General Update C 7/6/82 B.C. Larcher See Approval Sheet General Update ( D 9/16/83 B.C. Larcher See Approval Sheet General Update E 10/26/84 B.C. Larcher See Approval Sheet General Update F 5/20/85 B.C. Larcher See Approval sheet General Update G 3/31/87 V. Nicolayeff See Approval Sheet General Update [ Completely Rewritten [ [ [ [ [ [ [ [ f, 2 n s-

GA TECHNOLOGIES I N C. mu, um uamm naam weaan - ma uxxu ] D00. m. QUD-9117 ISaB G PAGE 2 ] ] m m uam m no==D-En M

== nx=. 3 /td.db' - M V#tfM/ pggpgg g, V. Nicolayoff, O nlity Engineer DWV1 ] PREPARE M G. P. Connors, Manager, Reactor (A l 3 3d IN APP 90VID W: A-R. H'. 'Q1emiotth, Director, SfGA nector l ] f)om I APPROVID Es ) T. R. Colandrea, Director, O nlity Amaurance 7 J l W l J i- .J 7 l

b [' GA TECHNOLOGIES I N C. mu, cantm ASamc PioGux mmm - mcA meus [ DOC. M). QM D-9117 ISSUE G PAGE 3 TABI2 OF CONI 1NTS 1. GEERAL b 2. QUALITY ASSURANCE P!OGRAM 3. CICANIZATICN 4. Specific Onlity Assurance Requirements p 4.1 Design Control L 4.2 Procurament Cbntrol 4.3 Instructions, Procedures and Drawings p 4.4 Document Control L 4.5 Idencification and control of Items 4.6 Oontrol of Processes 4.7 Inspection [ 4.8 Test Control 4.9 Control of Measuring and M Dylpeant 4.10 Bandling, Storage and Shipping [ 4.11 Control of R>noonforming Items 4.12 Corrective Action 4.13 Onlity Assurance Records 4.14 Audits [ Table 1 CA Records Retention Responsibility Figure 1 Organizatice QA Program Index { [ [ [ [ [ [ 1 1

GA TECHNOLOGIES I N C. unE QUALIW ASSCRANCE PROGRAM DOCCMDir - MCA REACIORS ) DOC. 10. QAPD-9117 ISSUE G PNE 4 1. .mL ] 'Ihis Quality Assurance Progran Document (%PD) establishes quality assurance requirements iglenanted by GA Technologies Inc. (GA) for TRIGA (Training, Research, Isotope-Production GA) Peactor projects. M GA Reactor ] pro ects include sigle projects such as supply of spare parts and fuel for exi ting MGA reactors worldwide and couplex projects such as design and fabrication of cocyonents and construction of new MCA reactors, irradiation 1 facilities for sterilization of food or medical s les, neutron radi aphy J facilities, and radioisotope and radiopharnaceuti plants. 'Ihese pro occa are performed for a variety of custmars weldwide and may involve partners, co-developers, and subcontractors. ) 'Ihis document outlines the overall QA requirements which will be iglemented for all mGA Reactor projects. Specific QA requirements for major projects and for small projects / orders with special requirements shall be identified by an appendix. 'Ihe appendix will be designated Docunant ?b. SPD-9117-XXXX and will be issued along with a copy of QAPD-9117. 'Ihis appendix will be prepared by the responsible quality l engineer (la) and approved by the MGA Project Manager. Apgandices may not delete ce downgrade QA Manual or QAPD-9117 requirements unless they are approved by the MGA Reactor and QA Directors. j 'Ihis QAm is applicable to all organizatims within GP, where work is 1 conducted for MGA Beactor projects. J 2. QGALIW ASSURANCE P!OGRAM 7 'Ihe MGA Reactor Projects QA program is based on t)s guidelines given in ANS Standard 15.8 (also designated as ANSI Standard N102-1976), Osality Assurance Program Regiirements for Research Reactors, as ardorsed by N!C ] Pogulatory guide 2.5. 'Ihe policies and procedures used on MGA Reactor Projects are defined by the GA Ccepany Policy Manual and the GA 0ality Assurance Manual (QAF.), where 7 j applicable, as iglemented or modified by this QAPD. 'Ihe GA QA Manual is the top-level QA hmt at CA. 'Ihe QAM conplies l with ANSI N402-1976. ' Itis QAm is the top gality assurance planning document for MGA Reactor 1 projects. 'Ihe QAPD coeprises all of those planned and systematic actions J necessary to provide adequate confidence that the parts, coupments and structures will perform a6equately. It describes the quality assurance elements to be iglemented, identifies the key responsible personnel, and j establishes authority for QA activities. l

~ GA TECHNOLOGIES I N C. TITIJ.: QUALI'!T ASSURANCE PROGFAM DOCCMDir - MGA REJCICRS DOC. }D. QAPD-9117 ISSUE G PAGE 5 Procedures, instructions and other documnts used to implemnt the QA F requirements for TRIGA projects are listed in the QA Program Index (GPI) L attached to this @PD. It is the responsibility of the Project Manager to assure that all project [ personnal are properly trained in this QAPD, any QUO Appendix, and other procedures and instructions applicable to the project. [ 3. ORGANIZATION 'Ihe pertinent parts of the GA organization are shown in Figure 1. The { 'IRIGA Reactor Director has overall responsibility for all 'IRIGA projects. 'Ihe Manager of a specific MGA project is responsible to the 'IRIGA Director for the overall managenant of the project. He directs and coordinates [ the work to ensure that it is enlished within budget, scope, 9.tality, perfonnance and schedule requirements and in coupliance with the Company Policy Manual and this QAPO. 'Ihn responsible quality engineer, reporting to the Reactor QA Manager, works directly with the '!RIGA Reactor Director and the Project Managers to define the QA progra and to ensure that it is properly implemented by all r L project personnel. He is independent of the project manageant and engineering /tecNtical organizations, and is the prime interface on quality atters between GA and its co-developers, partners, subcontractors, and { custcners. 4. SPBCIFIC QUALITf ASSQANCE REQUIRDIENTS b 4.1 Basie cetrol 4.1.1 As a general rule, 'IRIGA projects have no ocuponents whose failure would [ cause undue risk to the health and safety of the pelic, defined as QA Level I (QAL I) in Quality Proce&re (CP)-3 of the QAM, and no components that fall under the jurisdiction of the Asa Boiler and Pressure Vessel Code. Any { exception shall be stated in the QAPD Agendix. 2 4.1.2 Materials, parts and ocuponents critical to the safe operation of the facility and to the safety of plant personnel shall be designated QAL II, as [ defined in CP-3 of the QAM. Critical itens shall be identified by the Project Manager and listed in the QAPD Appendix or in the 'asign ecunant index (toI). 'IRIGA fuel will always be noted as a critical tem. All non-critical [ raterials, parts and components shall be designc:ta QAL III as defined in CP-3 of the QAM. [ [

J . ] GA TECHNOLOGIES INC. TI'ILE: CCMEff ASS 2ANCE PPCGRAM DOCCMDR - MGA RT)CICRS ] DOC. 10. QMD-9117 ISSCE G PN2 6 4.1.3 'Ihe CAL II or mL III designation shall be noted on all design documents released or revised after April 1,1987. Design hm=nts include drawings, word M= ants and calculations. 4.1.4 All design M= ants shall be reviewel prior to release by at least ene ] knowledgeable reviewr. All QAL II design cscuments shall also be reviewed by G. Review of QAL II design %==9ts shall be h==nted either by signature 1 of the reviewer on the h==nt or on a docunant review sheet filed with the J h==nt original. Documents released prior to April 1,1987 do not require retroactive reviews or revisions solely to conply with this QAPD. 4.1.5 Design documents shall be released by s.gnature of the Project Manager or designee. QAL II design W==nts shall also be approved by QA. 4.1.6 Design h==nts shall be distributed by the Project Manager or his ) designee who shall also maintain a controlled distribution list. 4.1.7 Changes to design documents may be acocuplished by the use of a charge ) Notice or by revision of the original chetsnant. Change notices and revised documents shall be reviewed, released, and distributed in the same manner as the original M--nts. Change notices shall be incorporated into the affected ] h==nt at the end of the project ot when five 04s have been released against the M - nt, whichever occurs first. 4.1.8 Design doctanent nu2ering system shall be at the direction of the ] Project Manager. A Design Docunant Index shall be prepared at the beginning of each pro designee. ject and shall be maintained current by the Project Manager or l As a minimum, the document index shall state the document nu2er, j title, release letter, release date, the QAL and any unirarporated CNs. 'the i I h==nt index shall also show the hierarchy of the h==nts. Revisions to the design h= ant indes shall be distributed to the affected organizations at ] least quarterly daring the life of the project. 4.1.9 Drawing originals shall be stored at the Vallum Centar. A microfiche of 1 all drawings shall be stored at the Yellum Center and a duplicate microfiche at J the MCA project office. Nbrd design h==nts, including 04s against drawings shall be stored at the MGA project office anl a duplicate copy at the MCA Fuel Fabrication Facility. ) 4.2 PIOCURIEDR CONIML 4.2.1 All Service Recpests (SRs) for Manufacturing Services, all Procurement Requisitions (prs), Inquiry Recpisitions (irs), and Requests for Quotation (Rits), shall be reviewed by the PCE or his designee, for inclusion of ]

( [ GA TECHNOLOGIES INC. { TIIU CUALITY ASSURAM2 PROGRAM DOCMDir - TRIGA REACIORS DOC. }C. CAPD-9117 ISSUE G PAGE 7 appropriate quality requirements as required in CP-4 of the CAM. Charges and { additions made by QA to the procurement documents shall be resolm5 with the TRIGA Project Manager. r 4.2.2 92ppliers shall be surveyed prior to placement of the Purchase Order, ( only when determined to be necessary by the Project Manager and the RQt. 4.2.3 Requirements for source inspection shall be noted on the PR. Source ( ins W ien plans for designed items shall be prepared by the RQt or designee, and coordinated with the MGA Project Manager. This plan will include the following: A listing of the inspections that the GA inspector or representative a. will perform and tests to be witnessed. ( b. Verification of inspections by sign off or stamp off of the operaticus. [ c. Verification of packaging, preservation, handling and shipnent methods. p 4.2.4 Gnless otherwise indicated on the QA-approved PR or SR, all fabricated or pnchased itens shul be inspected prior to relonse for use on the project, L to verify conforlamnce with specified requirements. Itis inspection shall include physical examination, analysis and &cumentation review, as [ appropriate. 4.3 fnatructiorm Pro %rea and Drat,inem 4.3.1 All fabrication, assembly, inspection, testing, construction, or other activities used to pro &cs components for TRIGA projects shall be performed to r instructions, proce&res, and drawings which have been afproved and released L for use on the project prior to start of work on the specific activity. 4.3.2 Design dements shall be released per Section 4.1.5. QA inspection ( plans shall be released by signature or stssp of a quality engineer. 4.3.3 In-Ptw= Control - Fuel Fabrication a. For the manufacture of fuel, a systen of record control for each batch or lot of materials processed shall be utilized. [ [ [

GA TECHNOLOGIES I N C. TITLE: CCALITY ASSCPANCE PPOGRAM ECCLM2R - TRIGA RE7CICRS DOC. 10. CAM >-9117 ISSCE G PME 8 i b. 'Ibe necessary CC controls for in-process and inspction requitecents shall be prforrJed by 'IRIGA Fuel QC inspector as descriMd in the Ocality D:, vision Instructions, FtDI 324. Inspection of TRIGA Puel Element Fabrication. 4.3.4 Thermenmie rabrication 'Ihermoccuple fabrication is controlled by the Ther:coouple Processirq Procedure CP-5-5A and inspection checklist for key in-process inspection points. ).4 Doct'marit Control 4.4.1 Design &cuments shall be controlled in accordance with Section 4.1. 4.4.2 Correspordence and subcontractor design documents shall be controlled by the Project Manager or designee to ensure proper review and distribution. 4.5 Taaritifleation and entrol of It-Materials, parts, and component shall be identified to prevent the use of incorrect or defective itses. Identification shall be by drawing nu:ber, serial number, heat nunber, or other afpropriate reans either on the itens or on records traceable to the items, in accordance with (P-8 of the CAM. Electronic parts and cocponents shall be identified perranently at the final e ly level. 4.6 centrol_of Pro @ecial processes used in the fabrication or insgection of critical parts, uxponents or assemblies shall be performed by quCified personnel using qualified equipent and procedures, as described in CP-9 of the CAM. q=cial processes include welding and nordestructive===inatico. 4.7 Irspection 4.7.1 Materials, cuw ints, and assecblies shall be inspectsd to verify acceptability to applicable specification and drawings, and to provide as-built l a data. l 4.7.2 Bequirements for inspection, analysis, or test shall be specified in I writing as part of the inspection plan or test specification and inspection l results shall be h=nted and retained as a project record. Standard u inspecticn checklists / plans shall be used for rec.hanical, fuel, electrical and J electronic cceponents, when agplicable. 1 u

{' GA TECHNOLOGIES I N C. rman comm u ama F-==== - =GA =cre. D0C. M2. @ptH 117 Isam G PAGE 9 ( r 4.7.3 Receiving inspection of TRIGA fuel parts and ocaponents shall be L larformed at the MGA Fuel Fabrication Facility by the TRIGA Fuel QC Inspector to F@! 32-4 and/or a receiving checklist (if app 11 cable) prepared by a quality engineer. 4.7.4 Inspections and tests which are used for acomptance of design docunant requirements shall be performed or witnessed by gEified individuals other r than those We performed or supervised the work being inspected. Onlification L of inspectors aull be documented by QA. r L 4.7.5 The completed inspection plans shall be submitted to the M3 and a copy filed with the Project Manager. Fuel QC receiving inspection recorde shall be mintained at TRIGA Fuel Fabrication by the QC inspector. 1 4.8 Tent contral r Tests shall be conducted to taleased specifications, procedures, or inspection plans or to national standards listed on drawings or other design L doaments. [ Test results shall be doomented to provide objective evideree of actual test conditions, and to assure that all regaired test data is accurately recorded. The Gk Zab Notebooks (per Q9F203) shall be used for recordir*g { 1aboratory test data and inforuntion. 4.9 cm eral of - ta= = d r w -- 2 ( Tbols, gages, and instruments used in activities which affect safety, inspection results, or test rasults, or which form the basis for product acceptance shall be controlled per @-12 of the @M and F@! 32-4. 1 4.10 mtLING 5: CINE A2 EIFFING r 4.10.1 Razaga s All itsen going to storage shall be tagged with a green accept tag, except 7 item that do not regaire m inspection (as shown on the PR or !R) and fuel L elemento stored in the vault. 4.10.2 shimina Prior to shignant to a custcmar, the MGA Project Manager and the PQR or their designees shall sip a QA Work Raleese (Form GA-580) to verify the { components have been properly inspected and accepted, and that the shissant is [

GA TECHNOLOGIES I N C. Tmzi catm AssemcE riccaAM ocamr - ma mcTess ] DOC. 10. QUD-9117 ISSUE G PAGE 10 ] coglete per the custcner's mntract and consistent with tha custcmer's design requirements. The QA Work Release shall not be sent to the custcner or J enclosed with the shipping &=nt. For purchased items that regaire source inspection and release by GA prior ] to shipment from the supplier, a QA Work Release shall be prepared by the GA source representative in accordance with (P-7 of the QAM. ] 4.10.3 himi h ir e ts The cognizant Project Manager or designee shall define on design documents, when applicable, the special packaging, shipping, storage and ) handling measures deemed necessary to prevent danage. 4.10.4 critical Parta ] Packaging, shipping, storage, and handling requirements for critical parts t or couponents containing nuclear material or radioactive sources shall be a specified by the cogrtizant Design Engineer in design documents, or by the j agpropriate preparing organization in the inplementing instructions and procedures. Sach 6 nts shall oceply with appropriate provisions and governing State and Federal regulations mnoerning handling and transportatien ] of radioactive natorial. 4.11 CONL CF NONO2rOfMDC MMS ] 4.11.1 tbnoonformances generated at GA shall be h nted on GA Form 663 (!bnconformance rt) and processed per @-15 of the QAM. Disposition of the nonconformance a be sede by the Material Review Board (MRB) composed of the ) ME and the Project Manager, or their designees, prior to use of the affected items. 4.11.2 tbnconformances generated by suppliers and proposed deviations from GA design documents shall be h=nted on GA Form 2329 (aspplier's Disposition Request), and attaitted to the M3 through the buyer for processing by the MRB per CP-15 of the QAM. 4.11.3 The Honoonformance Deports and sms shall toccane part of the QA h - nt package, l 4.12 CORPETIVE ACTICH If need for formal corrective acticn is identified, a Corrective Action Request shall be initiatal and processed as described in (P-16 of the CAM. i l );

k {' GA TECHNOLOGIES I N C. TI'!LE: OmLITY ASERAM2 PROGRAM DOCLNDE - MGA RDCIORS DOC. 10. QMO-9117 ISSUE G PNE 11 ( 4.13 QGMJIY ASSCRAM2 REER)S { 'Ihe quality assurance records shall include those prepared by CA and its r subcontractors and suppliers, and shall provide the dessmentary evidence L regaired for each project. The retention period for records shall be five years mininam after coupletion of the project or shipment of the final part or component. Even after five years, records shall not be destroyed without [ written approval of the Project Manager. '!he tipical records required for NGA projects are identified in Table 1. Any required changes to this list for a specific project will be identified in the QMc Appendix. 'Ihe records for MGA p jects will be coepiled and maintained by the RQc. ruel QC records shall be maintained by the MGA ruel QC inspetor. L'pon ocupletion of the project, they will be transmitted to 02ality systers for [ microfilming. 4.14 AII)ITs 02ality-relatal act'.vitiae shall be acnitored by the MN. The monitoring / surveillance activities shall be routinely h= anted with regard to scop and 7 results and filed with the Qnac. L rormal audits by Osality Systems per CP-18 of the QAM are not required unless specifically regsested by the Project Manager or the Reactor QA Manager [ and approved by the MGA Reactor Director. Audits of MGA projects with QMc appendices shall be conducted in accordance with the audit regairments in the aspendices. [ [ [ [ [ [

GA TECHNOLOGIES INC. TI m s

== ASa Net PR=M om== - =GA mc=S J DOC. }O. QUD-9117 ISSCE G PAGE 12 ] natz 1 ) QA RB00RDS RE11NTION RESPCNSIBILITY Transnittal Record Storage to Storage Record Type form Responsibility Responsibility QAPD Microfilm Quality Systems Quality Systees ) QAPD Appendix Microfilm Quality Systems Osality Systees Quality Assurance Microfilm Osality Systems Osality Systems 1 Manual J Program Directives Record Copy M GA Project Originato: l and other Prograr- ) i natic Documents l l Design M m t Index Record Copy M GA Project Originator ] Hord Design Doc 1.snanta Record Copy MGA Project (1) Originator Drawings .c ature Records Mgut. Originator ) Cards or P'.crofiche Change Notims Record Copy M GA Project (1) Originator ibnconforinance Microfilm Osality Systems RQE Reports 325 plier Dispositi m Microfilm Osality Systems RQE Regaests ) Procurenant M=ar.ts Record Copy Purchasing Purchasing ] Service Recpests Beoord Copy M GA Project Originator Receiving and Scurce Microfilm Quality Systems RCE Inspection Plan (s) J (Completed, including associated data pack-ages and procurement documents (priced or ] unpriced). ]

[ GA TECHNOLOGIES INC. r Tmai acum Assama smoGmM comem - mea arxwes L DOC. PC. QMD-9117 ISWE G PNE 13 mbt 21 (Cont.) [ Transmittal Record Storage to Storage ( Record Type Form Responsibility Responsibility [ Oaality Data (PCE Microfilm (pality Tystems RQE Reports, Mat'l Certs, etc.) { Manufacturing Plana Microfilm Gs11tir Systems M (ocupleted), h [ applicable. Inspection /airveillance Microff.1m Oxality Jystems 2 { Plans (Completed) m Work Release Microfilm O nlity Systems RQE b (1)A d2plicate copy shall be stored at the M GA Fuel Fabrication Facility [ [ [ [ [ [ [ a

l GA TECHNOLOGIES 7 9 C. 1 ) I 3 TITLE: CUALITI ASSURANCE PROGRAM DOCCMDU T .R M RS COC. 10. QMD-9117 ISSUE G PM2 14 I I I I cuamuam 4.itPt.88.

v..fpitt.

l 1 I .t......i.e.t.. 8.t... 8... E ,,ee....... l in ';<!.;mu.' l .. u.,e,. ... e.e.s.e. ,...o..... i.........,, i .".!t... l a'u e,

','. a

..m..... t,'.'. ....o ....n =...., .au =aan. .an l ........n l l l .'.".u',.. --- 5 ", ',*{g',*,',' '------ ------------- 3 j. ......o............ ....,u,,,,.,,,, I t I ,i

~ ' GA TECHNOLOGIES I N C. TI'ILE: QGLITY ASSURAN3 PROGRAM ECCINENT - MIGA RDCICPS ECC.}C. QMO-9117 ISSUE G PNE 15 ATDCHMDTP 1 ( QA PROGRAM I?OEX 'this @ality Assurance Progran Irdex (QAPI) sets forth the procedures, [ instructions, and other hmts which will be used to iglement the Oaality Assurance Progran fort 'the MIGA Deactor Projects. Definition: QMt: CA Quality Larance Manual CP: Quality Procedure in QMt QMO: Quality Assurance Prograun Document ANSI N 402-1976 Dequirement GA w = ant { QMD Section QMt Procedure

• 2.1 Responsibility 1,2 CP-1 2.2 Organization 3

CP-1 [ 2.3 %==ntation 4.3 CP-5 2.4 Design Cbatrol 4.1 CP-3 2.5 Procurement Control 4.2 @-4, CP-7 [ 2.6 Document control 4.4 CP-4 2.7 Material Control 4.5, 4.10 CP-7, CP-8 2.8 Process Control 4.6 CP-9 2.9 Inspection 4.7 @-10 [ 2.10 Test control 4.8 @-11 2.11 Control of Measurirri and Test F41pnent 4.9 CP-12 2.12 Nonconforming Mater; Al and Parts 4.11 GP-15 ( 2.13 Corrective Action 4.12 CP-16 2.14 Experimental Eglipsent 1,2 CP-2 2.15 @ality Assurance Records 4.13 CP-17 { 2.16 Audits 4.14 CP-10, CP-18 2.17 Existing Pacilities 1,2,4.1.3 (P-2 4.1.4

• As iglemented. or modified by the QMO.

[ [ [ T

L E [ [ [ [ [ ENCLOSURE 3 [ [ [ [ [ [ [ [ [ [ M u uu m n'

k - , 5 ~. 7

I

'k . s i x s a rv e { t l \\ N -2n ai a o j% $- $ hq 8 E3 g u N If 4 e u }, s i o e N 'A d h 'E N 5 0 a g i-w s 1 xv/ 5 E-4 G g 3 L y C K e b 4 D T~ D h. w l ~ E 3 ~ N g s e-c i Y 9 i 6 a x g e 4' sE 5 b N E 'A A k.u' 5 l 4 y sa bE g s s ,f k k l T 3 l n ~ NE l

• V e

(w J e e e (x a E 4 m' E 4 o w h if lg $ $ E 's Q .h i s s b q w u u = o w N 3 x )- ra. $sdl\\@ L i 'I l al ~ 4 G, c t 8-xe..; a x r l N'cM R g b h 4 j l .Q E y 1 5 1 4 u s x v e k s WmK s g' k w b a N:ggNbN g N &x h R k g 4 ? 8 g 2 "( E h 4 4 D l s n ( k k D D D l c A g gb I 4 Hk U I 'k g e% t- ~ w E e t 2 s

N F l i I I I l "c.LOSURE 4 I I I I I I

GA Technolggics Inc. urcr I .-4 Titis; 'NP/NPP/NT-1000 TEST PROCEDURE lM Occ.No. GATR-E-01 sus A Date 1/6/88 Page of ISSUE

SUMMARY

Issue Date Prepared by Approved by Purpose of Issue / Sections g e Changed Y h/h M A ' 'bI A 6 Jan. 88 Original issue E o Y E e E i .i E2 8 1 2 m .5 E 3a ll ,1 I + l ~

L .E.U..,,,,,, GA TJchnolsgico inc. [ +

Title:

HP/NPP/NT-1000 TEST PROCEDURE Occ.No. CATR-E-01 .luus A Data 1/6/88 Pa;s 1 of 5 [ SCOPE This document specifies the method to test and calibrate NP-1000, NPP-1000 and hT-1000 safety channels. EQUIPMEN EQUIRED Current sources to cover the range of 1x10'I amperes to 1x10-3 amperes plus 4 to 20 milliamps. [ Oscilloscope with vertleal sensitivity of 2 mV DC or lower. f Function generator to cover the range of 1 to 300 Hz with sine and triangular c Waveforns. 3 Analog and digital multimeters, test leads, etc. g SUPPORT DOCUMENTS f Applicable schematic and assembly diagrams for each type of equignent to be [ m tssted. 11s PROCEDURE .Q -{ .s Read and understand entire procedure before starting. E _g.. Read and understood. (initials) I u List document (s) to be used by number. .5 5 j Assembly Drawing Schematic ~ 5 / 2 Certain components are unused in certain configurations. If any step is not k relevant as detennined by the applicable assembly drawing or schematic mark that step NA and continue. [ Initial conditions - cover removed, plug in components missing, module de energized. 1. Verify orientation of all potentiometers per assembly drawinr. Adju:t R 56 fully [ ccw. Perform visual inspection to assure compliance with TRIGA workmanship manual. Accept Reject Initials [ +

Z.i.; GA Technoicgios Inc.

Title:

"NP/NPP/NT-1000 TEST PROCEDURE Occ. No. GATR-E-01 luus A Date 1/6/88 Page 2 of 5 l 2. Install all plug-in components and energize module. Verify green light illuminates. 3. Using digital multimeter measure and record values of nominal + 24 VDC and

• 15 VDC at the appropriate test points. Record.

+24 V Nom. VDC -24 V Nom. VDC (Actual) (Actual) +15 V VDC -15 V VDC (actual) (actual) f 4. Install IC's. Jumper U8 Pin 8 to 9. Close S5-1 and SS-5. Connect analog multimeter to point 63. Using low range DC voltage scales adjust R31 for zero aj offset (<i100g referred to GND (point 10 or other convenient GND). 3 5. Open S6-2, So-3 and close S6-4. Connect meter to point 64 and adjust offset g, t.; zero (<.lV) using R36. l 5 j 6. Connect meter to point 56 and adjust RI31 for zero offset (< i.10 V). 3 7. Connect ester to AR-8 pin 6, jumper AR8 Pin 2 to ARS Pin 6, and ground I s point 56 with c41p lead. Adjust RI34 for zero offset. l .9 .3 8. Connect meter to point 50 and ground like AR9 Pin 3 with a clip lead. Adjust g R138 offset. Remove jumpers. l .a 8 9. Connect meter to point 38, ground U7 Pin 1, short C30 with a clip lead. Adjust j R47 for zero offset. C 's

10. Open (or verify open) S4-2, 3, 4,g,A of same polarity as high voltage pow l

7, 8 and S5-6, 7, 8. Connect digital voltmeter to point 63. Apply 1x10 a 2 supply (HVPS). Adjust R27 for 10V at point 63. With negative verify -10V at l point. ] Accept Reject Initials

11. If ccanputer gain change is not used verify jumper U4-A pins 4 to 6 and close S5-8.

Apply simulated pulse current 0.5 to 1 mA as required by project j manager) to J2 and adjust R23 for 10V a(t points 63 and/o:' 64 as in step 1 Required Current Initials Accept Reject Initials I

12. If computer gain change is used close S4-4 and using a clip lead apply

) momentary +5V to point 34. Proceed as in step 11 after jumper is verified. Accept Reject Initials l

i U.U.v.,,,,, GA TechnSlogics inc, (

Title:

NP/NPP/NT-1000 TEST PROCEDURE Occ.No. GATR-E-01 luus A Date 1/6/88 Page 3 of 5 [

13. Reduce input current to 5x10-5 A, or a value determined by project manager and proceed as in step 11 or 12 closing S5-7 and S4-3 (if required) opening S5 8 and S4-4 and adjusting R24.

Accept Reject Initials

14. Repeat step 13 using 5x10-6A ncminal current, closing S5-6 and S4-2 and

[ opening S5-7, S4 3, adjusting R25. Accept Reject Initials E L .g 15.' With input and gain adjusted for -10V at point 64 press reset button (FP), then i connect meter to point 59 and verify +10.0 volts DC. e a L j Accept Reject Initials 2

16. Leaving all adjustments and inputs as in last step, shut off power (S-1). Using E,

wt ohmeter verify pressure or absence of R56, R125, and R145 as required by 8 assembly drawing. Using same assembly drawing verify connection between pins y 10 & 12 or 11 & 12 as required on ARIO, AR 11 and AR12. L 's Accept Reject Initials C 3

17. Connect current meter between J4-22 and J4-23. Energize Inoduel. %ith +10.0

.s VDC at point 59 adjust R143 for 20 mA output. Remove input current and D push reset button. Adjust R139 for 0.0 mA out if AR12 pins 10 and 12 are connected, 4.0 mA if 11 and 12 are connected. Repeat these two adjustments ~ 8 until no interaction remains. Accept Reject Initials u 3

18. With -10.0 V at point 64 verify +10.0V at point 56.

= N Accept Reject Initials _ J

19. Connect current meter between J4-PINS 19 and 20.

Adjust R120 for 20 mA. Remove input current and adjust R123 for 0.0 or 4 mA as in step 17. Repeat as necessary. Accept Reject Initials

20. Push reset button.

Apply input current to produce about 8 VDC at point 56. Verify the same percentage of full scale at J4-19 & 20 as at J4-22 & 23 d, 1% L Accept Reject Initir.ls ee

GA Technelsgim inc, j

Title:

NP/NPP/NT-1000 TEST PROCEDURE I Occ. No. GATR-E-01 issus A Date 1/6/88 Page 4 of 5 l

21. Remove input current and push reset button.

Using a watch or clock observe the drift rate of the signal between J4 22 and 23. Wir=m acceptable drift rate is i 1% per minute. Accept Reject Initlais

22. Close S5-8.

Connect current source set to 1 A to J2. Adjust R69 to operate ) the level detector (high on UQ pin 8) at and above 1 mA in. Accept Reject Iultials ] i

23. With current source connected to J2 reduce input current to less than 1x10-83, E

Connect vol' meter to point 38 and press reset button. Adjust R77 fully cw. 1 Verify positive voltage at AR4 Fin 10 Using clock or stewatch verify zero J t drift rate of integrator at point 38 is less than 10 mV/ min. D j Accept Reject Initials 8' 3

24. Increase input current to 0.1% of range full scale value.

Continue monitoring point 38 while slowly adjusting R70 negatively (cew). Stop lowering R70 when e .E voltage at point 38 starts ramping positively. Repeat and leave R70 adjusted j so that current integration starts at 0.1% F.S. uj Accept Reject Initials 'n!

25. With equignent operating as in step 23 adjust R42 for slowest ra=p rate.

3 Adjust input current to 1x10'6 mA. Adjust R42 for a ramp rate of 15 see per l .g volt at point 38. 3 Accept Reject Initials 8 j

26. Close (or verify closed) S5-8.

Press reset. Apply input current for a potential y R54 for 20 mA output from J4-16 to J4-17. Remove input, press reset and adjust R51 for 4 mA at same polats. Repeat these adjustments for 4 20 mA output with 0-1 VDC at point 38. Accept Reject Initials

27. Adjust HV from 500 TO 800 VDC. Adjust HV trip to operate at 600V or below.

Leave HV set at 700V. Accept Reject Initials

25. Adjust NV trip to operate at 110% of full scale measured at point so. Reset.

I Accept Reject Initials I I ~>

GA Techn31sgico inc.. .. m.....,,,,,, ~ L p

Title:

NP/NPP/NT-1000 TEST PROCEDURE 4 Doc No. GATR-E-01 .lssus A Date 1/6/88 Page 5 of 5 y L [

29. Set NVr trip to operato at 1.2V measured at point 38.

Accept Reject Initials

30. Connect chmeter to J5 pins 3 & 4.

Verify operation of trip relay. Accept Reject Initials

31. Connect ohmeter to J4 11 & 12 (may have to change polarity of leads) and verify operation of trip. Repeat for J4-9 & 10.

Accept _ Reject Initials [

32. Repeat step 31 for J41 & 2 and J4 3 & 4.

.I Accept Reject Initials [

33. Repeat step 30 for J51 & 2.

t Accept Reject Initials j

34. Apply +5 to +15V to J3-3. Verify ramp at point 56. Adjust R10 for ramp rate s

of 20 seconds per volt. [ .Q L .~4 Accept Reject Initials E [ ~ ENTER MODULE SERIAL NO. Date Signature [ l [ [ +

l ] l TEST EQUIPMENT RECORD ] ] Calibration Date Description Manufacturer Model Serial No. Last Due ~ -- %eumums J i ] ] l ] l ] ] Date of Test Test Operator Signature QC Signature or Stamp Rec: arks s

4 W l 4 L [ [ [ [ EllCLOSURE 5 [ [ [ [ l [ [ [ [ i um

UdlIDI kl1l M(VllllC$ +

Title:

TRAC-1000 INSTRUMENTATION SYSTEM FIRMWARE VALIDATION PROGRAM O cc. No. CATR-E-03 luus A Date 4/14/88 Page i of tit ( QAL III ISSUE StBIMARY Purpose of Issue / Sections Issue Date Prepared by Approved by Changed y A 4/14/88 G. Logan gw Original issue r' a e I h I n I .E [ }! 11 .5 E [ is Z [ [ [ [ + [

f__ 1 %A vt401 C.41 m L v ilsl u s3 h I l

Title:

TRAC-1000 INSTRllMENTATION SYSTEM FIRMWARE VALIDATION PROGRAM I \\ O cc. No. GATR E-03 .lcue A Date 4/14/88 lPage l it of ttt l t I 7 TABLE OF CONTE. IS J V Page d PURPOSE ill l 1.0 SYSTEh! STARTUP ] 1 2.0 REDUNDANT NEIWORK...................... 3 ) 3.0 SCRAh! hiODE 5 2 E l 4.0 STEADY-STATE hiODE...................... 6 i 4.1 Entering the Steady-State hiode............. 6 ] 4.2 Exiting the Steady-State biode 8 4a i g 5.0 AUTO hiODE 8 l j' 5.1 Entering the Auto hiode................. 8 5 5.2 Exiting the Auto hiode 8 5.3 Operation Within the Auto hiode............. 9 1 .E i 6.0 SQUARE WAVE hiODE 10 l 3 6.1 Entering the Square Wave Ready hiode 10 j 6.2 Entering the Square Wave Ramp-Up hiode 11 e e 7.0 PULSE hf0DE 11 7.1 Entering the Pulse Ready hiode 12 ,,y 7.2 Entering the Pulse Data Acquisition hiode........ 13 l y 1 2 7.3 Displaying Alphanumeric Pulse Data........... 14 l .5 7.4 Graphic Pulse Data Display............... 14 T.5 Exiting the Pulse Graphic Display hiode......... 15 l 1 = l 3 8.0 HISTORY LOGGING & PLAYBACK 15 l 2 l 8.1 History Logging 15 i 8.2 History Playback 17 8.3 History Backup to Floppy Diskette 20 8.4 History Restore fran Floppy Diskette.......... 20 I l I + l

UOnOral AIOmlCS Titlt: TRAC-1000 INSTRUMENTATION SYSTEM FIRMWARE VALIDATION PROGRAM a Occ. No. CATR-E-03 luus A Date 4/14/88 Page ttt of itt ( PURPOSE { ne purpose of this program is to validate the performance of the Data Acquisition Computer (DAC) and Control System Computer (CSC) firmware. This validation will be accomplished by exercising system functions r.nd g verifying proper fimavare responses. E .b. The primary plant protection (SCRAM) functions are provided by independent j and redundant instruments which are hardwired as a physically separated scram p circuit. Le DAC and CSC computers r,rovide Secondary protection functions 3 in the form of interlocks, reactor control logie and status messages, ne I computers also generate a scram fur.tetion when the computer self-diagnostics determine there is a computer malftnetton, i.e., a Watchdog time out. .Q r o ( 5 Because the system hardware and fimmare are inter related and Inter-dependent, this validation program, by necessity, will also verify proper e a [ ,y calibration and performance of the hardware. It should also be understood j that this prograrn is written as a generic program. It covers all the major r l fimware modules. However if applied to a custom system configuration, 3 items such as Status Wmdow display Inay differ from that specified in this program. r s F 5 [ r + L I

3 Gonoral Atomics .~ + Bth: TRAC-1000 INSTRUMENTATION SYSTEM FIRM'a'ARE VALIDATION PROGRAM Occ.No. CATR-E-03 luus A Date 4/14/88 Page t of 21 1.0 SYS'IEi STARTUP For brevity, the following shorthand notations will be used: CSC = Control System Computer DAC = Data Acquisition Computer S'IW = Status Window %W = Warning Window SCW = SCRAh! Window and AW = Reactor Display Annunciator Window l

1) Turn on power to the DAC and the CSC. He DAC and the CSC should begin their boot up sequences.

You should see the memory test count up 3 to "115'l KP OK" on the console video display. Next, you should see the Bootstrap 10 second timeout. Do not type anything here, let the Boctstrap timeout. Next, you should see the CSC Operating System (IC DOS bootup. This begins with a number of lines of diegnostic printout, followe)d with 1 "IC-DOS - VER X.X", followed by Action Instruments Copyright notice, and 3 "Remote Server Process Started". E' 3 If an abnormal shutdown of the system preceeded this startup, the operating system will perform a file system consistency check consisting of 5 phases E (phases 2 through 5 are repeated) and then will reboot itself beginning with the memnry test. Do not enter any keystrokes in res file system consistency check sequence, ponse to questions 5 during the it will proceed j automaticelly. l Foilowing bootup of the operating system, auto bootup of the GA s application code will begin. De database will be booted and, if successful, the printout "Database bootup was successfulf' will be displayed. Next, the l is network is tested and if OK the printout "Network Test Cycle #X: Network E looks OK" will be dispiryed. De CSC will next attempt to establish c-mJeations with the DAC and instruct the DAC to begin its bootup { a i sequence. Durlog. the DAC bootup, the CSC draw the Reactor display on jj the high resolution CSC. If the DAC boots up successfully (approx 10 l ~ seconds), the timeout dbplay is replaced by the STV display. J j

2) ne Reactor Animation Display should contain the followi s information:

l a) Bar Graph Displays: I

• hialti range Linear Power
• % Log Power -- > corresponds to LOG PWR hardwired bar display, on left side of console.
• Period ---> corresponds to hardwired bar display
• % Power (3 graphs) -- > corresponda to two "%" hardwired bar l

displays l t b) Temperature Readout Boxes:

• [oj y

} correspond to " C" hardwired bar displays u + =

L GG;naral AtomlCS s

Title:

TRAC-1000 INSTP.UMENTATION SYSTEM FIRMWARE VALIDATION PROGRAM O cc. No. CATR-E-03 Ime A Dats 4/14/88 Page 2 Of n c) Rod Position Readout Boxes:

• Transient Rod
• Regulated Rod
• Shim Rod (one for each shim) d) AW Box Error / Warning Message Box):
• Red ek Rectangular box in top right corner.
• All CRAM messages and system error messages appear in this box e)

System Information Box:

• Date
• Time

[ Mode 3

• System
• Demand Power b

f) Reactor Graphic Display: ei .l

• Graphic for each reactor rod r

R

• Graphic for each rod drive

(

• Graphic for each rod magnet (air for transient rod) c

3) The Status Window display should contain the following information:*

Coolant water inlet temperature 3 a g Coolant water outlet temperature [ j c Coolant water pool temperature d Primary coolant flow l e Secondary coolant flow v. Prima.ry coolant conductivity ( .s g Thermal power -3 h Beam port #1 status f i Beam port #2 status { g j Beam port #3 status j k Beam port #4. door status status 1 Reactor rocen s* m) Dermal door status [ n Exposure rocan door status Radiation Area Monitor #1 o p Radiation Area Monitor #2 [ Radiation Area Monitor #3 Radiation Area Monitor #4 r Radiation Area I.fonitor #6 s t Radiation Area Monitor #6 [ u Current pulse number y System error number (

4) %ere are three windows of display information on the left hand video display:

SIW, %W, SCW. You should be able to rotate through the windows by pressing the Spacebar. 'nis differs for each console application

Gonoral Atomics a. TRAC-1000 INSTRUMENTATION SYSTEM FIRMWARE VALIDATION PROGRAM Occ. No. GATR-E-03 luus A Date 4/14/88 Page 3 of 2t a 5) Turn the hiagnet Power switch t'o the RSET position. The system should beep and remain in the SCRAh! mode. The message "SCRAh! - No Opere. tor" should appear in the AW and the SCW. I 6) Press the Acknowledge (ACK) button, ne SCRAh! message should be cleared. 7) Press the Pretest switch on the hinde Control panel. Le system will go through the Prestart Checks sequence. 8) Once the Prestart Checks have been ecxnpleted successfully, the system will return to the SIW display. i 9) Press the F5 hey en the keyboard to access the operato: log on menu. l Select menu item 1, Operator Log In. Type in an invalid password The system should respond with "Invalid Password. (such as "AAAAAA"). t Permission Denied!". E ~ 10) Log on the system using a valid password. Tr You should get the message ""*y logging on innediately a i 8' second time. Warning: Operator already l on the system "*" 02 11) Exit from the log in menu screen. Le system will return to the STW display. 5 i 12) Turn the hiagnet Power switch to the RSET position. Le system will enter l -l the Stee.dy-State (hianual) mode. s 13) Press the F2 key on the keyboard. The contents of the Status Wmdow ,y (STW) should print out on the system grinter. 5 .5 2.0 REDUNDANT NUIWORK l q 1) With both the CSC and DAC power off, assure both networks (boards, ~ y cables and terminators) are installed in the CSC and the DAC. 2) Power up the CSC. Obsene that the CSC memory test and operating system boot up properly. Refer to the System Startup Acceptance Test Procedures. Verify that during the aplication bootup sequence, the CSC ] bootup falls the network test and disp lays the message "Network Test Cycle

1. X: Network looks dead".

Verify the test number increments every 20 seconds indicating the test is being repeated. 3) Power up the DAC. Allow sufficient time for the DAC to ccrnplete its memory test, boot its o erating system, and start its application bootup sequence (3 minutes max. At this point the CSC network test cycle should complete successfully in leated by the message "Network Test cycle #N: Network looks OK". +

( (3Cl IUl Qi M L A/ l I il G + -!p

Title:

TRAC-1000 INSTRUMENTATION SYSTEM FIRMWARE VALIDATION PROGRAM k IW8 Date 4/14/88 Page 4 of 21 O cc. No. CATR-E-03 A

4) Verify the CSC ccxnpletes its boot by observing the Reactor and STW screens being displayed.

5) Verify that none of the following network failure messages appear in the AW, WW or SCW:

I a Hi IC-NET Conn Fault Lo IC-NET Conrn Fault c SCRAM - NET Fault, Please Reboot b 6) Verify the network is operating by changing some DAC input such as reactor rocxn door status and observing the change on the STW or Reactor { display. 7) Remove the terminator plug from the CSC High Network boud. ne j terminator is accessed from the rear of the CSC control console computer [ (or expansion chassis). Verify that a "Hi IC-NET Comm Fault" is generated a j m the AW and the \\W/.

8) Verify that the network continues to update the CSC even though the "Hi" 5

netwrk is inoperable. I i 9) Restore the terminator to the CSC high network boud and ACK the error condition. Verify the error messages disappeu from both the AW and the L 2 WW. .Q E .3 10) Reneve the terminator plug from the CSC Low Network boud. Verify that g a % IC-NET Comn Fault" is generated in the AW and the 'AW. i 11) Verify that the network continues to update the CSC even though the "Lo" p 4 j network is inopere,ble. C i 12) Restore the terminator to the CSC low network board and ACK the error .g condition. Verify the error messages disappear from both the AW and the g WW. z r 13) Place the system in Steady State Manual mode and remove the terminator plus from both the CSC High an(d Low) Network boards. L Verify the following: [ a' A "Hi IC-NET Comn Fault" message is queued in the AW. b A "Lo IC-NET Comn Fault" message is queued in the AW. A "SCRAM - NET Fault, Please Reboot" message is queued in the AW. c [ d A "Hi IC-NET Comn Fault" message is displayed in the WW. A "Lo IC-NET Conn Fault" message is displayed in the WW. e f) A "SCRAM - NET Fault, Please Reboot" message is displayed in the SCW. g ne Reactor display mode has changed to SCRAhSfED. h ne "MAN" pushbutton lite has extinguished. b >-um .ii .i

Gonoral Atomics a 3 p

Title:

TRAC-1000 INSIRUMENTATION SYSTEM FIRMWARE VALIDATION PROGRAM l m Doc. No. CATR-E-03 luus A Date 4/14/88 lPage E 5 of 21 i) The reactor F been SCRAh'SIED. j) SCRAh! "DATA BASE TSiE OUI" queued in the AW. k) SCRAhi "DATA BASE TIhfE OUI" queued in the SCW. 14) Restore both terminator plugs to the CSC network boards and reboot both the CSC and DAC. Verify that the system successfully reboots and the j network is totally operational as outlined above. 3.0 SCRAhi hiODE ] 1) Clear all SCRAhi and Warning messages and pir.cr the system into the Steady-State (hianual) mode. j i 2) Simulate a Percent Power #2 Hi SCRAM condition to the DAC by using the Scram Test Switches. Verify this causes: ] j a) Le message Percent Power #2 to appear in the AW and the WW. .3 3) Repeat steps (1) and (2) for Percent Power #2 H.V., Percent Power #3 Hi, [ and Percent Power #3 H.V. 4) Repeat step (1). Turn off the primary power to the Nhi-1000. Verify this -g causes: j a) ne message "Nhi1000 Corrrn Fit" to appear in the AW and the WW. 7 5) i Repeat step 1. Disconnect Fuel Temp #1 TC from the DAC input. hiomenjarily c(on)nect in voltage source equal to what the TC would I i k --g at 575 C. Verify this causes: j .a5 a) Le message "SCRAhr - Fuel Temp #1 Hi" to appear in the AW and 5 the SCW. E b The reactor to be SCRAhSfED. J ii e ne reactor display to be SCRAhnfED. j d he hiAN pushbutton lite to be extinguished. l 6) Repeat step (5) for Fuel Temp #2 TC. 7) Repeat step 1. Verify this ca(us)es: Afomentarily disconnect AC power from tht NPP-1000. ~ a) ne message "SCRAh! - NPP 1000 HV Lo" to appear in the AW and the SCW. b The reactor to be SCRAhniED. ~ The reactor display to be SCRAhnfED. c l d he hfAN pushbutton lite to be extinguished. l l 8) Repeat step (1). Repeat (2). a) ne message "SCRAh! - Pulse Power Hi" to appear in the AW and the SCW. +

Gomiral Atomics M 8: ] TRAC-1000 INSTRUMENTATION SYSTr.M FIRM'ARE VALIDATION PROGRAM Occ. No. CATR-E-03 .lstu s A Date 4/14/88 Page 6 of 21 A The reactor to be SCRAhihED. [ c The reactor display to be SCRAhihED. d The hfAN pushbutton lite to be extinguished. 9) Repeat step (1. Verify this caus)es: hiomentarily jumper the DAC "Pool Water Lo" input. a) Le message "SCRAh! - Pool Water Lo" to appear in the AW and the SCW. b The reactor to be SCRAhihfED. I e The reactor display to be SCRAMED. d The hfAN pushbutton lite to be extinguished. l i 10) Digital Scanne(r) board:hicxnentarily disconnect power from the CSC DIS 061 Repeat step 1. y Walt for at Itast 10 seconds. Verify this causes:' I .5 a) The message "SCRAh! - CSC Wa:chdog Timeout" to appear in the AW i and the SCW. b ne reactor to be SCRAhihfED. { c ne reactor display to be SCRAhihED. l ii d he hfAN pushbutton lite to be extinguished. The message, "SCRAhi CSC DIS 064 Timeout" to appear in the SCW. j e Ij 11) Repeat step (1) for the DAC DIS 064 board.* u'j 12) ALT-1 on the(11). At the DAC, switch to display window 1 by entering Repeat step I g;; keyboard. is test assumes a diagnostic keyboard and monitor are installed in th DAC.) He DAC prompt "DAC F should be a visible. Enter the cournand "PS" followed by a "return". The DAC Is operating system should list the current process table. Enter the enmund 5 "kill -9 (scanner PID)" where the scanner PID is obtained frcm the process 3 table. This should kill the scanner process and trigger the DAC watchdogs. ,8 Verify the following: I$ a) ne message "SCRAh! - DAC Data Base Timeout" to appear in the AW and the SCW. b The reactor to be SCRAhihED. l c The reactor display to be SCRAhihED. d ne hfAN pushbutton lite to be extinguished. f

13. Re-boot.

4.0 STFADY-(TTATE Nf0DE 4.1 Entering the Steady State hiode ne steady state mode is entered frcm the SCRAh! m>de by switching the I, "hfAGNUT POWER" key switch frcxn its "ON" position to its "RSEI" position and then back to the "ON" position.

• This can also be accomplished by disconnecting the cable between the DIS 004 and the Watchdog board.

i Gonoral Atomics W +

Title:

TRAC-1000 INSTRt.' MENTATION SYSTEM FIRMWARE VALIDATION PROGRMt O cc. No. CATR-E-03 .luus A Date 4/14/88 P ;e 7 of 21 l 1) Clear all SCRAhi conditions and acknowledge any SCRAM or warning messages in the AW by pressing the "ACK" button. 2) Operate the "MAGNET POWER" key switch from "ON" to "RSHI" to "ON". The message "SCRAM - No Operator" should appear in the AW and the SCW s and the Control Console should beep indicating an invalid operation has l been attempted. 3) Acknowledge the SCRAM message by pressing the "ACK" button. The l "SCRAM - No Operator" message should be cleared from both the AW and u the SCW. i 4) Initiate the operator login ence by pressing the "F5" function key. He j "Reactor Operator Log On/ fIUtility:" menu should appear, i 5) Select item 1, "Operator Log In*, by pressing the "1" key. %e prcept l .] "Please enter your password --->" should appear below the menu. Uj' 6) Enter the passwrd "AAAA". He message "Invalid Password... Permission l 5 Denied!" should momentarily appear. g .3 7) Welcome to th(6) TRIGA Control System" should momentarily appear l Repeat step and enter a valid password. The message "Accepted - f e j the entire screen replaced with the SDY. li;; 8) Repeat steps (4) and (5)*"and verify the message "*** Warning: Operator j already on the system momentarily appears below the menu. 3 .s 9) Exit the Login menu by selecting item 3, Exit, on the menu by pressing the E j "3' key. The SUV should reappear. l ) 10) Press the "MANUAL SCRAM" button. De message "SCRAM - MANUAL" l 3 should appear in the AW and the SCW. Do not acknowledge the error 'l 5 condition. 11) Attempt to invoke the Steady-State mode by operating the "MAGNET I POWER" key switch frcen "ON" to "RSEI" to "ON". %e "SCRAM" mode l] should be re entered due to the unacknowledged SCRAM condition. 12) Acknowledge the SCRAM condition and again operate the "MAGNET l POWER" key switch. %Is time the Steady-State mode should be %e Steady State mode will be indicated (Manual)"Man" pushbutton j invoked. by the lite coming on, the Reactor Display Indicating "Steady State":and Magnet Power being applied to the rod ra.gnets indicated on the Reactor Display by the Magnet Power being applied to the rod magnets Indicated on the Reactor Display by the Magnet Power Indicator boxes below the animated rod drives turning yellow. He Air Supply to the Transient rod drive will not be applied by entering the steady state mode so its air applied box below its animated rod drive will remain black. + 1

unnarat Atomics + N' TRAC-1000 INSTRUMENTATION SYSTEM FIRMWARE VALIDATION PROGRAM Doc No. CATR-E-03 issus A Date 4/14/88 Page a of 21 t.2 Exittnz the Steady State Mode The Steady-State mode will be exited when: any SCRAM condition occurs, a b the Auto mode is lavoked, the Square Wave mode Is invoked, c or the Pulse mode is invoked. b Consult the SCRAM, Auto, Square Wave and Pulse mode Acce tance Test Procedures for these items. Sections 5.0, 6.0 and 7.0, respective y. I 5.0 AUTO MODE 1 5.1 Entering the Auto Mode I L he auto mode is manually entered, after selecting which rods (reg, safety, j shim) or combination of rods are to be servoed, frcun the Steady State mode by a pressing the "AUIO" mode button or automatically by successfully ecxmpleting a [ Square Wave ramp up sequence. 1) Re boot. = L

2) Attengt to invoke the auto mode by pressing the "AUTO' mode pushbutton.

2 3 Verify that the system does not change modes and the Control Console j beeps once indicating an invalid operation is being attempted. 3) Log in, reset any SCRAM 53, and turn the MAGhTT power key switch to the ,a RESET position. Repeat (2). L '3 4) Invoke the Steady State mode by pressing the "MAN" pushbutton. The 5 "MAN' mode pushbutton lite shoulc. now be lit and the Reactor dis play p )l Indicating the Steady State mode. In addition, the Magnet Power incluator boxes at the bottom of each rod drive mechant=n should be yellow. u 5) Manually move the Reg, Safety and Shhn rods off the bottcun to their 50% [ withdrawn peeltion. Select which rods or cambination of tods with the reg rod that are to be servoed. % Translent rod may be left at the bottom. Set the "Demand Power

• thumbwheel switches to match the current power r

be roduced by the reactor and Invoke the auto mode by pressing the L "A mode pushbutton. he "AUTty' mode lite should eczna on and the "MAN" lite so off. In addition, the Reactor display should Wilcate the auto mode, b 5.2 Exittnz the Auto Mode { he system will exit the Auto mode if: a) ne Steady State mode is selected, b + [ W

Gonoral Atomics p Thit: TRAG-1000 INSTRUMENTATION SYSTEM FIRM!!ARE VALIDATION PROGRAM O cc. No. CATR-E-03 luus A Date 4/14/88 lPage 9 of 21 b any rod is SCRAhihfED. c or any SCRAh! condition. 1) In the auto mode, invoke the Steady-State mode by pressing the "hfE' pushbutton. The "hfAN" mode lite should ccme on and the "AUTO" lite go off. In addition, the Reactor display should indicate the Steady State mode. 2) hiove the Reg Rod Drive hiechanism to its fully inserted position with the remaining rods and thumbwheelt positioned per item (5) above. Invoke the auto mode. Le system should stay in the AUTO hiode. 3) Position the safety rod to its 10% withdrrmn position and the Shim and the R ~4 Reg rod at their 50% withdrawn position and invoke the auto mode. l l hianually move the Shim to the bottom. Le system should stay in the g Auto nx>de. j 4) Repeat step (3) for each rod. I 8' 5) Position the Safety to its 90% withdrawn position and the Shim and Reg rod E 3 at their 50% withdrawn position and invoke the auto mode. hianually move I g the Safety to the top. The system should stay in the auto mode, f 0) Repeat step (5) for each rod. l 35 7) In the auto mode, press the "AfANUAL SCRAhf' button. He system should j inxnediately change to the SCHAM mode and all mode lites will go out. l E u -l-5,3 Operation Within the Auto Sfode ne Auto hiode autcznatically controls the reactor r in accordance with the .5 Demand Power set into the "Demand Power" thu el switches. Control is j accompliehed by an algorithm controlling the position and speed of the servoed J j rods and by an up/down/stop algorithm for the non servoed rods, o* If the reactor power is at scxre value above or below the demand power and the j auto roode is invoked, the auto mode algorithms will move the servoed rods to i I bring reactor power equal to the demand power setting. Le servoed rods are always under ccruputer control in the auto mode, ne non-servoed rods however are under manual control. l 1) Test the ability to servo any combination of standard control rod drives. ) 2) Verify auto mode capability to bring reactor up to power on a 5 second l period. ) 3) Verify rods servo frcxn 0% to 100% with no up and down limits on any of l the roas. I +

[ UGnoral Atomics

Title:

TRAC-1000 INSTRUMENTATION SYSTDI FIRMWARE VALIDATION PROGRAM O cc. N o. CATR-E-03 luus A Date 4/14/88 Page to of 21 (

4) Verify demand power setting abo've and below power level r.nd verify ability of Auto hiode to Control the Reactor while changing power.

5) Perform long run (20 minutes)/- 1.0 percent. and observe Auto hiode Drift. Verify ability to maintain power to within +

6) Verify system response while switching between Auto mode and Steady State mode under constant and varying Power conditions.

b

7) Verify individual rod scrarrming in Auto mode.

8) Fire the transient rod and manually change its position. Oberve the ( = movement of the servoed rods to compensate for the power unge. ] Balance the power (rod) profile of the reactor by manually adjussing the positions of the safety, shim and the transient rod. Keep the servoed rods e j within their 0% to 100% boundary during the manual adjustments and finalize its position at the 50% point for optimum control. = 3 6.0 SQUARE WAVE hf0DE 6.1 Entering the Square Wave Ready hiode = j 1) While the system is in SCRAh! node, press the "SQUARE WAW button on 3 the control console. You should hear a beep; the system will remain in ,g SCRAh! mode, r l! I 2) Place the system into AUTO mode. Press the "SQUARE WAW button. You should hear a beep; the system will remain in AUTO mode. 5 L .s ) Place the system in PULSE mode. Press the "SQUARE WAVF button. You i should hear m.-3; the system will remain in PULSE mode. '5 7 g 4) Place the system in hfANUAL mode and raise the reactor power above 1 u 'iii KW. Press the "SQUARE WAVF button. You should hear a beep and the j warning message "Power must be <1 KWl' should appear la the AW and the %W. ne system will remain in hfANUAL mode. c L 5) Lower the reactor power below 1 KW and acknowledge the warning message by pressing the ACK button. ne warning message on the AW and the WW [ will disappear. 6) Press the "AIR" button on the control console. If the transient rod air supp y was on, it will turn off and the transient rod will fall to the bottom [ of t e reactor core. The rod drive will then wind down automatleally to its bottom most position. [ 7) Press the "FIRF button to apply air pressure to the transient rod. Press the "SQUlltE WAVF button. You should hear a bee and the warning message "Trans Rod Air umst be off!" should appear the AW and the WW. De system will remain in hfANUAL mode. [

E l + D 8* TRAC-1000 INSTRtl MENTATION SYSTEM FIRMWARE VALIDATION PROGPAM l E O cc. No. CATR-E-03 Issus A Date 4/14/88 Page 11 of 21 8) Remove the air supply to the t'ransient rod by pressing the "AIR" button and acknowledge the warning message by pressing the ACK button. ne l l warning message on the AW and the WW will disappear. I 9) Introduce the large negative Period to the reactor by first running a shim l l rod to its top position and then SCRAhihi1NG it. While the large negative a i period is occurring, press the "SQUARE WAVE" button. You should hear a l ) beep and the warning message "DPhi must be < +/-1!" should appear in the l AW and the WW. Le system will remain in hfANUAL mode. I I l {

10) Acknowledge the warning message by pressing the ACK button. ne warning u

message on the AW and the %W will disappear. l i 11) You have just ecrupleted testing the various interlocks which prevent entry } into SQUARE WAVE mode. Now prepare the system to enter the SQUARE l WAVE mode by creating the following conditions: a I a System is in the hfANUAL mode. { j b Reactor power is less than i KW. l tr e ne rate of change of reactor power is less than 1 DPhi. E 3 d ne transient rod air pressure is off and the transient rod is all the E way dcmn. n l .5 e) The Reg rod and all Shim rods are ot'f the bottan so the Auto mode J l can b:t validly entered. 3 4 12) Press the "SQUARE WAVF button. You should see the mode change to -] "SQUARE - READT en the reactor animation display and the SQUARE s WAVE button will illuminate on the control console. 6.2 Entering the Square Wave Ramp-Up hiode l I s f .5 1) Set the target reactor power level in the thumbwheel switch on the control 7 j console, he reactor power will not change yet. s I 2) Position the transient rod drive mechanism manually using the transient rod 2 1;P and DOWN buttons on the control console. l ~ j 3) Press the FIRE button. He system will now enter the "SQUARE - RAhfP UP" mode. If reactor power reaches the demand level as set in the 7 thumbwheel switch), the system will transfer to AUTO mv(.e. If not, the system will return to hfANUAL mode. You should ab see the error message "Pawer Level Not Reached Timeout" on the <tdeo display. 7.0 PULSE MODE Ae Pulse Ready Mode is initiated from the Steady State mode by pressing the ] "PULSF mode button and entering a wise ID string, ne pulse is initiated from the Pulse Ready mode press ng the "FIRF button. 5000 power readings are taken during the 12 second pulse period. Peak fuel temperature +

Genaral Atomics { TRAC-1000 INSTRUMENTATION SYSTEM FIRMWARE VALIDATION PROGRAM Occ.No. GATR-E-03 ,Issus A Dats 4/14/88 Page 12 of 2t readings are acquired during the next 4 seconds and then calculations are made from the pulse data and presented on the standard resolution screen. A high resolution plot of the pulse data may be displayed in the SCRAh! mode. f 7.1 Entering the Pulse Ready hiode 1) While the system is in SCRAhi mode, press the "PULSF button on the ( control console. You should hear a beep; the system will remain in SCR.ui mode. 2) Place the system into AUTO mode. Press the 'PULSF button. You should ( hear a beep;' the system will remain in AUTO mode. .1 3 3) Place the system in SQUARE WAVE READY mode. Press the "PULSF ( ,) button. You should hear a beep; the system will remain in SQUARE WAVE READY mode. !O 4) Place the system in hfANUAL mode and raise the reactor power above 1 ( f KW. Press the "PULSF button. You should hear a beep and the warning 5 message "Power must be < 1 KWI" should appear in the AW and the %W. g ne system will remain in hfANUAL mode. ( i. 5) Lower the reactor power below 1 KW and acknowledge the warning message 3 by pressing the ACK button. The warning message on the AW and the WW [ j will disappear. = E 6) Press the "AIR" button on the control console. If the transient rod air i supply was on, it will turn off and the transient rod will fall to the bottcun L of the reactor core. The rod drive will then wind down automatically to j lts bottosn-nost position. .= I l 7) Press the "FIRF button to tu n on the air pressure to the transient red. L 'il Press the "PULSF button. You should hear a beep and the warning 3 message "Trans Rod Air must be off!" should appear in the AW and the p WW. Le system will remain in hiANUAL mode. L 8) Remove the air supply to the transient rod by pressing the "AIR" button and acknowledge the warning message by pressing the ACK button. He L warning message on the AW and the WW w11 disappear. 9) Introduce a large negative Period to the reactor by first running a shim [ rod to its top position and then SCRAMhiING lt. While the large negative period is occurring, press the "PULSF button. You should hear a beep and t the warning message "DPM must be < +/.1.E should appear in the AW and the W W. Le system will remain in hfANUAI, mode. [ 10) Achowledge the warning message by pressing the ACK button. he warning meunge on the AW and the %W will disappear. [ r + L I

+

Title:

TRAC-1000 INSTRUMENTATION SYSTEM FIRMWARE VALIDATION PROGRAM Occ. No. CATR-E-03 Ime A Date 4/14/88 Page 13 of 2L 11) You have just completed testing' the various interlocks which prevent entry into PULSE READY mode. Now prepare the system to enter the PULSE READY mode by creating the following conditions: a) System is in the MANUAL mode. b') Reactor power is less than 1 kW. ci The rate of change of reactor power is less than 1 DPM. d) ne transient rod air pressure is off and the transient rod is all the way down. 12) Press the "PULSE

• button. You should see the mode change to "PULSE -

l READY" on the reactor animation display and the PULSE button should illuminate on the control console. Le EV will be replaced by the j message "Enter Puise ID String --> ". 13) Enter a string of characters to identify the pulse followed by a carriage j return, ne EV will reappear. I j 7.2 Entering the Pulse Data Acquisition Mode 8' l 3 1) Position the transient rod drive mechanism manually using the transient rod l c UP and DOWN buttons on the control console to the desired reactivity J level. s I, 2) Press the FIRE button. Le system will now enter the "PULSE" rnode and il the message "" Acquiring Pulse Data... Please Walt "* will replace the -l mV dis De transient rod air supply should turn on and the transient g rod sh drive up until stopped by the drive mechanism and a reactor s plae will be pro:!uced. He air supply will turn off after 1 second, .s however, the system data acquisition phase should continue for another 4 or { ( .E 5 seconds. 3! 3) At the end of the data acquisition phase, the rInde will switch to the l y STEADY-STATE mode with the MAN lite on and the PULSE lite off, ne 5 WAIT message should be replaced with an Alphanumeric Pulse Data display on the standard resolution screen. Verify the following pulse data items for correctness: al Identification String, b') Pulse Number, el Time Stamp. d) Peak Fuel Temperature. I Peak Power. Energy. g Width at Half Power. h Reactivity, i Minimum Period. 4) Hit the SPACEDAR key on the keyboard. De mV display will be restored. + I

E Gonoral Atomics 4 Title

• TRAC-1000 INSTRUMENTATION SYSTEM FIR:WARI VALIDATION PROGRMt D oc. No.

CATR-E-03 issus A Date 4/14/88 Page 14 of 21 [ 7.3 Displayinz Alphanumerie Pulse Data ' ( 1) Press the "F3" key on the keyboard. A "Pulse Select Menu" will replace the SIW with 10 pulse selections available. [ 2) Select the pulse just acquired by its associated ID string. De Alpha-numeric Pulse Data display for the pulse will be re-displayed. [ 3) Hit the SPACEBAR key on the keyboard. The SIW display will be restored. 4) Repeat steps (1) thru (3) for other pulses. j 7.4 Graphie Pulse Data Display { j

1) Manually SCRAM the reactor by pressing the mac'ist SCRAM button. De MAN lite shou'd extinguish and the mode should change to SCRAM. Clear j

the SCRAM message by pressing the ACK button. [ 2) Press the "F3" key on the keyboard, ne "Pulse Select Menu" will replace the FIW display. [ 3) Select the pulse just acquired above. A Graphic or Non Graphic Pulse 3 Display menu will replace the Pulse Select menu. y 4) Select the Graphic Display by entering "1" on the keyboard, he Graphic [ or Non Graphic menu will be replaced by a "Pulse Scaling Data" screen. 5) For now, select the default settings by answering "N" to the menu question [ Do you wish to alter Pulse Scaling De Pulse Scaling screen will -3 be replaced by a "Select Pulse Gra olution" menu. .s [ 6) Select the "Low" resolution by enterin "*" Graphing Pulse! Please Walt. "*g "1" on the keyboard. De message should replace the Pulse Graphics Resolution menu and will remala on the screen for a roximately 4 seconds. ne STW la then re displayed. During this time for approximately ( another 4 to 10 seconds, the graphic displa calculations are being made. At the end of this period, the reactor dis lay will be erased and the Graphic Pulse display drawn on the high reso ution screen. 7) Wrify the pulse plot is what v.as expected. Verify the alphanumeric data above the plot is the same as what was previously presented for the pulse on the standard resolution screen. b 8) Press the "F3" he on the keyboard, ne message "Do you wish to graph another Pulse? (Y ->" will replace the FIW display. [ [ + [

Yndral Atomics

Title:

TRAC-1000 INSTRl! MENTATION SYSTEM FIRMWARE VAI.IDATION PROGRAM Occ. No. CATR-E-03 luus A Date 4/14/88 Page 15 of 21 9) Enter "Y" on the keyboard. Verify other pulses, Calings and resolutions can be properly diaplayed. 7.5 Exiting the Pulse Graphie Display Mode 1) With a pulse graph on the high resolution display and the STW on the standard screen, press the "F3" key to exit the Pulse Graphie Display

mode, ne message "Do you wish to graph another Pulse? (Y/N) -->' will replace the SIW display.

2) Enter "N" on the keyboard. The message "" Rebuilding Reactor Diaplay ... Please Walt ") should appear on the standard resolution screen. The pulse graph will be erased and the Reactor display redrawn. Upon 3 completion of redrawing the Reactor display, the SIW display will be restored to the Standard screen. 3 j 8.0 HIFFORY LOGGING & PLAYIRCK 2 3 8.1 History Lozzing F A Elstory Archive file is autcznatically produced anythne the reactor is e operated. Archiving begins when the Steady State mode is initiated and Ji continues automatleally for 5 minutes following a SCRAM. Als procedure j describes how to verify the production of a predefined archive file. 3 j 1) Re-boot system. E 2) Before logging in, remove the history archive file so we can start with a i elean slate. To remove the history archive file, select \\%dow 4 by .s pressing the "Alt-4" keys. His is accomplished by holding the "Alt" key s down and then pressing the "4" key on the numeric key pad at the same l 5 time. In window 4 enter "RM/MNT/ Archive" at the IC DOS prompt to ,g remove the archive file. { j 3) Reselect the SIW by pressing the "Alt-1" keys. l g 4) Position all rod drives in the dcwn position. I 1 I 5) Select and observe the %W and the SCW and clear any warning or SCRAM conditions. 6) Login and select the Steady State mode by activating the Reset Key switch. Selecting the Steady-State mode initiate 2 the history archiving process. Record the start of logging time frcxn the Reactor display. l Observe the archiving process by watching the CSC's hard disk access Indicator lite, ne lite should fileker once every 10 seconds wher. the archive file is updated with a new frame. 7) Raise the rods and allow the archiver time to log the new positions. +

9 Ganaral Atomics + TRAC-1000 INSTRl' MENTATION SYSTEM ?!RMVARE VALIDATION PROGRAM Occ. No. CATR-E-03 luus A Dars 4/14/88 Page 16 of 21 8) Printout the S'IW by pressing the "F2" key. Se.ve the printout for couparison during playback. 9) Record dam from the Reactor display such as bar graph positons, etc., for . Q rtson durtus playback, k 10) Switch to the %W by pressing the spacebar key and introduce a warning condition such as "Coo ant Wtr Inlet Temp". Le warning message should f appear on both the AW and the WW. Allow the system a short time to l archive the warning condition. Note: the system is not only designed to archive periodically as mentioned above but also any time there is a change on the AW, the WW or the SCW. %Is v.ill be referred to sa an Event f I48* 11) Remove the warning condition and then acknowledge the warning messages { j by pressing the Ack button. De warning messages will disappear from both the AW and the WW. b 12) Introduce a "Coolant Wtr Pool Ten," warning condition. nts should appear la the AW and the WW and also set the reactor display "%TR TEMP" box red. ( 13) Remove the warning condition and observe the "%TR TEMP" box go black. Als will not cause an Event Los since nothing changed in the AW or the j WW. [ }

14) Acknowledge the warning condition messages and observe the messages g

disappear from the AW and the WW. %Is will cause an Event Log. ( 15) Select the SCW via the spacebar key. .5 16) Introduce a SCRAM condition by turning the Reset key switch off and { j observe the SCRAM message appear in both the AW and the SCW. j 17) Drop all the rods 'and allow or sinnlate the rod drives to auto wind down. ( 18) Introduce a second SCRAM condition by pressing the hhual SCRAM l button. Observe the "SCRAM - Manual" message appear on the SCW. l Observe that the AW message does not change since its "SCRAM Key I [ Switch Off" message has not been acknowledged.

19) Acknowledge the "SCRAM - Key Switch Oft" message by pressing the Ack button. De "SCRAM - Key Switch Off" message will dirappear from both

[ the AW and the SCW. % "SCRAM Manual" message, which was queued up, will appear in the AW. (

20) Acknowledge the "SCRAM Manual" message by pressing the Ach button.

The "SCRAM - Manual" message should dise.ppear from both the AW and the SCW. All SCRAMS will now be cleared. ( ( +

Linneral Atomics

Title:

TRAC-1000 INSTRUMENTATION SYSTEM FIPMWARE VALIDATION "ROGRAM Occ. No. CATk-E-03 inus l0tc 4/14/8s l Page 17 of 2t A 21) Select the History Playback mehu by preimg the "F4" Function key. Terminate-post SCRAM history logging by selecting item 4 on the menu. Record the end of history logging time from the Reactor display time. Note: post-SCRAM data logging is autcmatically terminated 5 minutes following any SCRAM condition and may already have terminated if 5 minutes has elapsed since the first SCRAM condition was initiated. 8.2 History Playback A History Archive file is automatically produced anytime the reactor iy operated. Als procedure describes how to verify the playback of the predefined archive file produced by the previous procedure. ~ ~8

1) Before initiating Playback, re-introduce the "Coolant Water Pool "l cmp" E

warning condition. Do not acknowledge the warning condition. Note: this j condition is not being archived since archiving has been terminated. ~ 5 2) Select the History 2,. back menu by pressing the "F4' Function Key and 3 attempt to enter t Playback mode. "Warning; unacknowledged warning E' message pending" appears below the manu and Playback mode is not 3 initiated. Note: any pending SCRAM or warning messages must 'ue acknowledged before Playback can be inittsted. = ~. l

3) Acknowledge the warning condition by pressing the Ack button.

Do not 3 remove the warning condition. The "WrR TEMP" box on the reactor i display should still be red. .= l 4) Select the History Playback menu by pressing the "F4' Function key and enter the Playback mode by selecting item 1 on the meau. Observe that a .s the System mode on the reacte display changes frce "AEALTIME" to s "PLAYBACK-MAN RVD" Observe that the mode changa from SCRAM to .5 FTEADY STATE OPZRATE. Verify that the time display changes frcm j realtime to the time when we began History archiving. Observe that the i realtime "WIR TEMP' red box and the "Coolant Water Pool Temp" warning a j conditions have disappeared because we are in playback. l 5) Press the "F" key to nz:aually advance to the Next playback frame. l Observe the reactor dhplay thne increments by 10 secords. 6) Continue to manually advance fonard through the archive file by pres:Ing l the "F" key. Observe the rod drives move up frcm their bottcm positions I i to the positions we set them during the History logging sequence. 7) Contir.ue forward until the time the STW was printed out occurs. Verify l l l that the STN displays the same information as the printout. Note: the printout time will not exactly coincide with the bg interval and scue slight deviation of the data may be expected. l l f +

L Inbral Atomics _ _ 4 TRAC-1000 INSTRtl MENTATION SYSTEM FIRF'a'ARE VALLOATION PROGRAM f P ;e O cc. No. CATR-E-03 I528 A Date 4ftsfag tg of 21 [ 8) Ccapue the Reactor display bar graph positions, etc., with what was r recorded euller and verify that they are the same. Note: some deviation L can be expeeted due to changing date while it was being recorded. 9) Continue forward until the "Coolant Wtr Inlet Temp" warning message { appears in the AW and the WW. Note: that this was an event log and did not necessarily occur on tite 10 second periodle log interval. r 10) Continu forward until the point of acknowledgement occurred in which case L both mescages disappear. 11) Continue forward until the 2 Coolant Wtr Pool Temp" warning and the "%TR [ TDiP" red box appear. 12) Advance until the 'WTR TDIP" box goes black. F E L i 13) Advance until the "Coolant Wtr Pool Temp" wuning messages disappear from j the AW and the %W. f 14) Switch to the SCW by pressing the spacebar key. a r 15) Advance forward until the ' ICRAh! - Key Switch OFF" SCRAM condit*.on is I ] encounured. The SCRAM.essage should appear in both the AW and the SCW. L et e that the r2 i changes to "SCRAhf. Uj 16) Advaner forward until the mi drop and the magnets turn off. l 17) Advance until "SCRAM - Manual" also appears on the SCW. s [ .s 18) Advance until the "SCRAM - Key Switch Off* message was ackncmledged in i which case the messages disappen from the AW and the SCW. Le "SCRAM 8 - Manual" message will now appest in the AW. L 19) Advance until the. "SCRAM - Manual" message was acknowledged in which z3 case the menages disappear from the AW and the SCW. He AW and the SCW will now be clear. [ 20) Advance until the end of the uchive file is reached, his will be indicated by a "beep" each time the "P' key is pres:ed. 21) Select reverse playback by pressing the "R" key. ne System mode will change to "PLAYBACK MAN RD"'. \\ ( 22) Advance backwards through the history archive file by pressing the "R" key and verify that everything plays back exactly in reverse to forward above. [ 23) Advance backwards until the begiming of the history uchive file is

reached, nla will be indicated by a "beep" each time the "R" key is pressed.

[ +

Ghnoral Atomics d .g +

Title:

TRAC-1000 INSTRtl MENTATION SYSTEM FIRMWARE VAI.IDATION PROGRAM ...d, O cc. No. CATR-E-03 issus A Dats 4/14/88 % 19 of 21 24) Select forward playback by pressing the "P key, ne System mode will change to "PLAYBACK-hfAN RVD". 25) Advance forward through 21e archive tile displaying A Frame each minute by pressing the Shift /F keys. Observe tie greater increment in time ) covered by each step (5 minutes if no Event Logs were recorded). Note that a number of the recorded events are skipped over and not displayed. 20) Myance forward until the end of the archive file la reached Indicated by a "beep" each thne the "Shift /P keys are pressed. 27) Select reverse layback by pressing the "R" key, ne System mode will ) l g change to "PI MCK hMN REV" E 28) Advance backwards through the archive file displaying A Frame / Min. by ] pressing the Shift /F keys. Observe the greater increment in time covered i by each step (5 minutes if no Event Logs were recoroed}. Note that a number of the recorded events are skipped over and not displayed. c l {' 29) Advance backwards until the beginning of the archive file is reached 5 indicted by a "beep' each time the Shift /F keys are pressed. .E 30) hiove to the end of the archive file by pressing the "F key. Observe that [. the time changes to the end of the archiving session. 31) hiove to the beginning cf th! uchive file by pressing the "B" key, i l Observe that the time changes to the beginning of the archivhts session, f E l i 32) hiove to the middle of the archive file by pressing the "hf key. Observe ) .s that the time changes

• .o approximately the middle of the archiving session.

5 .E 33) hiove to the beginning of the archive file by pressing the "If key and 1 j select the auto playback Nward mode by pressing the "A" key. De System J i mode should display "P'.AYRACK-AUID DVD". Observe that the displays ]o autor

• tically advulce at approximately 1 frame each second.

34) Intermittently press the "P and "R" keys and verify that auto playback shifts between auto playback forward and auto playback reverse as enm - Aed. 35) Terminate auto playback by pressing the "P key. Observe the System Inode changes to PLAYBACK-hiAN BVD 36) Advance to the end of the archive file by pressing the "F key and then t:miinate the playback mode by pressing the "F4" key. Observe the System trnde changes from "PLAYBACK-hfAN RVD/REV" to "REALTIhiF. A1. ? observe that the realtime "Coolant Water Pool Temp" warnincs and the n ' "%TR TEMP" box are re-displayed since they were left active bef+ = playback we.s initiated. + 1

L + yitle: TRAC-1000 INSTRLHENTATION SYSTEM FIRt'JAPJE VALIDATION PROGRMt O c:. No. CATR-E-03 ,luue A Date 4/14/88 l Pa; 20 of 21 [ 37) Remove the "Coolant Water Pool Temp" condition and acknowledge the warnings by pressing the Ack button. b 8.3 History Backup to Floppy Diskette History Archive files can be copied from fixed disk to floppy diskettes for [ permanent storage and subsequent phyback. This procedure describes how to verify the floppy diskette backup operation. [ 1) Select the History Playback menu by pressing the "F4" key and then select item 2, "Backup Archive Data to Floppy Disks". Observe that a History / Pulse Archive select menu appears. f 2) Select item 2, "Backup History Archive Data", from the inenu. An instructiond message to "Insert a formatted diskette in drive A" and to j "Strike any key when ready" should appeu on the screen. e L 3) Follow the instructions given above and verify that a message to "Enter a. name to identify this diskette, (up to 14 characters) or press return to g { j accept default (Volume - pf500018) is output to the screen. 5 4) Follow these instructions by pressing the return key. Verify the backup [ j operation in progress by observing the access lites on the fixed disk and the floppy disk drive flicker as data is transferred to the floppy diskette. 5) Follow instructions if more than one backup diskette la required. E 6) Upon ecunpletion, obse ve the nwnentary message "Backua archive has j coupleted" followed by the restoration of the EV to the cisplay, i 7) Label and save the backup diskettes for the next procedure. 5 S.4 distory Restore from Floppy Diskette I History Archive files can be copied from fixed disk to floppy diskettes for permanens storage and subsequent playback. This procedure describes how to [ verify the restore / playback operation. 1) Before restoring the backed-up history vehive ib, remove the current r history archive file fecm the ard disk. By invoking playback before and L after restoration of the archive file, we can assure ourselves the restore.tlon process actually worked. To remove the history archive file, select Window 4 by pressing the "Alt-4" keys arf then enter [ "RM/USR/GA/ DATA / Archive" at the IC-DOS prompt. 2) Reselect the mV by entering "Alt-1". Select the Playback / Archive menu [ by pressing the "F4" key and select item 1 "Enter History Playback mode". Verify the momentary message "Unable to access History Archive file" appears on the screen followed by restoration of the mV. Note that the mode is still RFALTD,fE and not PLtYBACK. + [

A.3 C lI C I CLI M L UllllV A +

Title:

TRAC-1000 INSTRDtENTATION SYSTEM FIPJtWARE VALIDATION PROG l TAM O cc. No. CATR E-03 luus 4ftsfag l Page OI A Date 21 2L 3) Reselect the Playback / Archive menu by pressing the "F4" key and this time select item 3, "Restore Archive Data from Floppy Disks". Verify that the message ""* WARNING: ne old archive file wil be destroyed "* (Do you wish to continue? (Y/N)" appears on the screen. 4) Enter the "N" key in response to the question and observe that the SBV is restored to the screen. l 5) Again select the Playback / Archive menu and select item 3. His time respond with "yes" by entering the "Y" key. Verify the message "Insert your brst archive diskette in drive A: "* Strike any key when ready "" is output to the screen. f 6) Follow the instructions and verify the message "*" Recovering File... Please Wait "" is output to the screen and that the hard disk and floppy j drive access lites are flickering as the file is being restored. 5

7) Verify that rmmentary message '*" Recovery of Archive Data has E

completed "" is displayed followed by restoration of the FBY. E' 3 8) Reselect the Playback / Archive menu and e. lect item 1 "Enter History e Playback raode". Verify that the playback nude is actually entered by .3 observing the System mods on the reactor display change from REALTIME to PLAYIMCK-MAN PND. w 4 9) Verify that the history archive file has been restored properly by stepping j through the History Playback Procedure described above. 3 i .E E .e 3 l + l

[ E [ [ [ [ [ EllCLOSURE 6 { [ [ [ [ t [ C E [ h in

~ L E I A EBR L_U RMMAB E_YA L ID A f.i ON_ PROM R AM c I This program will take a "validation through testing" approach

t. o I

the validation of the system firmware. Specifically, excerpts from the Contract Technical Specifications will be performed, reviewed and evaluated section by section to insure proper system f u nc t i o na l i t.y. I Deviations will be noted and resolved. I I l l l l l l I

L iL 1. Compare all of the parameter valves on the Reactor control screen with the Digital indicators. 2. Check the function and valves of each item on the Status Screen and compared with independent inputs. J. Test the operability of each function key. 1. Flux centrol response criteria - t1% (See Chapter 5,0 of technical speelfications). 5. Insure that Table 1 ?, and 3 are satisfied. [ TABLE 1. MEASUREMENT CilANNELS h Mi n laun_Ennhnt_Qper_able in Effective Mode Sleady State pulse Fuel Temperature Safety channel 2 2 Linear Power Channel 1 1 tog Power Channel 1 0 liigh-Flux Safety Channel 2 1* h Pulse Energy Integrating Channel 0 1* (* NOTE: Same Char.nel as linear power in this mode) [ [ [ [ [ [ .[ isi mi

.] ] TABLE 2. MINIMUM REACTOR SAFETY SYSTEM SCRAMS Maximum M i nimum_E u abe PJ D..M.ofic Channel Sat t f o l n t_. S t e_ad y_R t.(t e_ I!uls e__._. Fuel Temperature 6000C 2 2 ] Pe rcent. Powe r, liigh Flux 1.1 Mw 2 0 Console Manunt Scram Bar Closure Switches 1 1 ] liigh Voltage Loss to Safety Channels 20% 2 1 Pulse Time 15 seconds 0 1 Emergency Stop ] (1 each exposure room, 1 on console) Closure switch 1 1 Pool Water Level 14 feet from top of core 1 1 l TABLE 3. MINIMUM REACTOR SAFETY SYSTEM INTERLOCKS l KCrective_ Mode 1 Ae t.Lo n_Erelin13td S13L4dy_.J_t a t e E91sc - J Pulse inititit.lon at power levels greater than 1 kilouatt X ] Withdrawal of any control rod except transient X ] Any rod w4thdrawal with count rato in operational channel below 0.5 cps X X Simultaneous manual withdrawal of two a standard rods X j ] ] ]

L [ [ CQN T R ACT S T E Q llNJ.QA L,_SITC I F,t_C AT I QN S_EXCE R PTJ [ 3.1.5 Mode Control [ The CSC will support. 4 modes of operation select.able from

t. h e Co n t. ro l Console mode selection switches.

The four modes will be: (1) Manual (2) Automatic (3) Square Wave { (4) Pulse The current. mode selected will be indicated on the Heactor "ont.rol CRT and the appropriat.e mode switch will be 111uminated. Some modea will have multiple s t a t.e s. ( 3.1.5.1 Power off Mode { This mode will be entered when: (1) Control Console /CSC power is turned off by the Control Console Power On switch. (2) Cont.rol Console /CSC power is lost. due to a power outage. { (3) CSC power is lost, due t.o a CSC failure or disconnect. ion of the CSC. When the Power Off Mode is entered: (1) The Control Console Power On Retey will be de-energized which will open the reactor SCRAM clrr uit. and SCRAM the reactor. (2) If the Control Console remains powered but the CSC loses power, the CSC Watchdog relay will be de-energized which will { open the reactor SCRAM circuit and SCRAH the reactor. (3) The SCRAM circuit interlock relay will maintain the SCRAM condit. ion unt.il reset by the Control Console Reactor Operate Key Switch. [

. ] 3.1.5.2 Manual Mode In Manual Mode, as in all reactor power generating modes, the reactor 7 status will be graphically displayed on the Reac tor Control CRT. J -The Manual Mode will have three states: J (1) SCRAM (2) Pre-start checks ] (3) Manual ] 3.1.5.2.1 SCRAM MODE ] in SCRAM r. ODE, the control rods will be fully inserted into the reactor core, the electromagnets and air solenoid will be de-energized, and the reactor will not be at power. Control rod withdrawal will be inhibited and any uncleared SCRAM conditions will 1 be displayed on the Reactor Control CRT. J l l Initially, the operator must unlock the Control Console Reactor ] l Operate Key Switch, enter his/her identification number and reset the l reactor. This procedure will initiate the Reactor Operate Time Delay. After the time delay has timed out, power will be provided to the electromagnets and air solenold. Then, the operator may bring the ] reactor to power. After each SCRAM, the CSC will return to the SCRAM Mode. The operator 1 will need to reset the Reactor Operate Key Switch to clear the SCRAM. J However, unless the Key Switch has been turned "Off", the Facility Interlock System had been activated or the Emergency Stop System has been activated, the Reactor Operate Time Delay will not be ] reinitiated. The SCRAM Mode will be initiated whent ] (1) Power is applied to the Console /CSC and the Reactor Operate Key Switch is inserted and switches to "Operate". (2) The CSC,is in the Calibrate Test Mode and the Control Console Manual Mode pushbutton is depressed. (3) The CSC is in the Calibrate Test Mode and the automatic calibration test sequence completes successfully. (4) The CSC is in the Manual (Operate). Automatic, Square Wave, or Pulse Mode and a SCRAM occurs other than an AC power failure. ] ]

[ SCRAM Conditions are: (1) The Steady State Timer times out. {.> (2) The pulse Timer times out ( (3) The Manual Scram Switch is depressed. (%) The Emergency Stop System is Act.lvated (Henctor Operate { Rolay). (5) The Facility Interlock System is Activated (Reactor Operat.o H Relay). (6) Loss of AC power to the Control Console, the CSC. or the DAC. (7) The Reactor Operate Key is turned to "Off". (8) liigh fuel temperature Safety Channel One. (9) liigh fuel temperature Safety Channel Two. (10) }{lgh flux Safety Channel One. (11) liigh flux Safety Channel Two. { (12) Loss of High Voltage on liigh Flux Safety Channel One. (13) Loss of liigh Voltage on liigh Flux Safet.y Channel Two. (14) Low pool water level. (15) Power Monitor and Safety System #1 fault. (16) CSC/DAC communication failure. (17) DAC/CSC communication failure. (18) CSC Watchdog timeout. (19) DAC Watchdog timeout. In SCRAM Mode, the SCRAM Interlock relay will be de-energized, which will maintain the reactor in the SCRAM condition by inhibiting power to the electromagnets and air solenoid. [ [ J

In SCRAM Mode, the CSC will: (1) Set the C$C Mode to SCRAM. (2) Iss'.e a "Manual" command to t.h e DAC. ] (3) tiluminate the Control Console Manual Mode light and turn off all other mode l i g h t.s. (1) Display the Reactor Display on the Reactor Control CRT. ] (5) Issue commands to t.h e DAC to turn off all utandard control rod magnet currents. (6) Innue a command to the DAC to shut off and vent, the air supply to the transient rod drive mechanism. ] (7) Issue commands to the DAC to run the rod drives down to t. heir lower limit. (8) Inhibit operation of the control Console Auto, Square Wave and Pulse switches. ] 3.1.5.2.2. Pre-Start Check MODE. ] The Pre-Start Check Mode will be initiated when: (1) The current mode is SCRAM mode. (2) All SCRAM condit. ions are cleared. (3) The minimum source count rate is present. ] (4) All rod drives are at, their lower limit. ] (5) All Rods are fully inserted. (6) A valid operator ID has been entered. ] (7) The Pre-Start check switch is act.ivated. In Pre-Start Check Mode, the CSC will: (1) Issue a "Calibrate" command to the DAC to perform its Auto-Calibration Test sequence. (2) Perform the CSC Auto-Calibration Test sequence. (3) Display the message "Wait - Auto-Calibration Test in Progress" in the Reactor Control CRT Annunciator Window. 1

L E (4) Record the Tests performed and the Results in an tilat.orical "Calibrate" File. This file may also be replayed or printrit out. If the Auto-Calibration test wequence completes successfully, the CSC will: (1) Remove the "Auto-Calibration Test in Progreus" message from the Reactor Control CRT. (2) Initiate the Manuni (Operate) Mode. If the Auto-Calibration t.est sequence does not complete successfully, [ the CSC will: (1) Display the appropriate diagnostic message in the Reactor ( Cont.rol CRT Annunciator Window. (2) Return to the SCRAM Mode. 3.1.5.2.3 Manual (Operate) Mode The Manual (Operate) Mode will bn initiated when: (1) The Reactor Operate Key has been rotated to reset. [ (2) The Manual pushbutton is depressed in Auto, Square Wave, or Pulse Made. (3) The Squarc Wave (Ramp Up) Mode does not reach or exceed 80% of the Demand Power Setting and time out. [ (4) The Pulse (Pulse) Mode does not reach or exceed the Minimum Power Threshold and times out. (5) No uncleared SCRAM condition exist. { In Manual (Operate) Mode, the CSC wills ( (1) Set the current CSC mode to Manual (Operate). (2) Energize the SCRAM Interlock Relay. (3) Issue a "Manual" command to the DAC. (4) Issue commands to the DAC to provide power to the electromagnets. (S) Display the Reactor Control CRT rod magnets in bright yellow. [ wi i

I I (6) Initiate scanning for SCRAM conditions. 1 (7) Enable the Control Console Up, Down, Magnet and Air pushbuttons. 3.1.5.2.3.1. Transient Rod Air Supply On ] To supply air to the transient rod drive mechanism, the following conditions must be satisfied: (1) The control Console Air pushbutton is not depressed. (2) The transient rod drive mechanism is at its lower limit (3) The transient rod is at its lower limit. (4) All SCRAM conditions are cleared (5) The minimum source count rate is present. (6) The Transient Rod Fire pushbutton is depressed. When these conditions are satisfied, the CSC will: (1) Issue a command to the DAC to provide power to the Transient Rod Air solenoid. 3.1.5.2.3.2 Magnet Current Interrupt The standard control rod's magnet current will be interrupted when: l (1) The individual rod's Control Console Magnet pushbutton is depressed. When this occurs, the CSC will: n (1) Issue a command to the DAC to turn off power to the individual rod's electromagnet. (2) Issue a command to the DAC to drive the individual rod's Rod Drive. (3) Display the rod magnet in black on the Reactor Control CRT. The CSC will restore a standard control rod's magnet current when: (1) The Control Console Magnet pushbutton is no longer depressed. (2) All SCRAM conditions are c.leared. ] )

s O When these conditions are satisfied. the CSC will: (1) Issue a command to the DAC to pro ide power to the individual rod's electromagnet. (2) Display the corresponding rod savtot in bright yellow on the Reactor Control CRT. 3.1.5.2.3.3 Transient Rod Ale Supply Interrupt The transient rod's air supply will be interrupted.when: l (1) The transient rod's Control Console Air pushbutton is depressed When this occurs, the CSC will: (1) Issue a command to the DAC to turn off power to the transient rod's air solenold. ( (2) Iusue a command to the DAC to drive down the transient rod's Rod Drive. f (3) Display the transient rod air solenoid in black on the Reactor Control CRT. 3.1.5.2.3.4 Rod Withdrawul Correction Procedure /* Incorrect Procedure Rod Drives ( a. Correct action rod up (each rod) Correct action rod down (each rod) b. Mag /Dir Interrupt { c. Correct indications on screen for drive up/down each rod. ( d. Each rod control button with each other rod control. e. Correct indication on STATUS screen for each condition of { each rod. f. Compare status screen rod position with display screen position. g. Correct annual current interrupt ( [

, ] h. Correct SCRAM current interrupt I. Drive rod (each) with scram condition (all) J. Drive rod (each) with interlock condition (all) K. Insure scram on time out from pulse mode ] (Glich in system) l fo manually raise a control rod out of the core, the following 1 l cond1Llons must be met: J (1) The Control Console Rod Up pushbutton is depressed. ] (2) The same Rod Down pushbutton is not depressed. l (3) It is the only Rod Up pushbutton depressed. ] (4) The current mode is Manual (Operate). (5) Power is provided to the standard rod's electromagnet or to ] the transient rod's air solenoid, and the control rod and its drive are coupled or in contact. ] (C) The Rod Drive is not at its upper limit. (7) The minimum source count rate is present. ] When these conditions are satinfled, the CSC will: ] (1) Isuue a "Rod Up" command te the DAC. When these conditions are no longer trse, the CSC will: ] (1) Issue a "Rod Halt" command to th* DAC. ] 3.1.5.2.3.5 Rod Insertion To manually lower a control rod into the core, the following conditions must be mett (1) The individual rod's Control Console Rod Down pushbutton is depressed. (2) The individual rod's Rod Drive is not at its lower limit. When these conditions's are satisfied, the CSC will: (t) Issue a "Rod Down" command to the DAC. ] ]

When these condition's are no longer true, the CSC will: (1) Issue a "Rod Halt" command to the DAC. 3.1.5.3 Automatic Mode The Automatic Mode will allow the DAC to control the power Icvel of the reactor, including Demand Power Setpoint changes, without j assistance from the operator. The DAC will adjust the power up to a i maximum rate of a three second period and hold the power after the preset level is achieved. The rate at which the DAC adjusts thn power level will be adjustable. In the Automatic Mode the operator will be able to set the desired Power Level, set the Steady State SCRAM Time, designate which rods will be servoed and bank the appropriate rods. Then, the operator will be able to initiate the Automatic Mode and let the Reactor Control System perform the run. The Automatic Mode will be initiated when: (1) The current mode is Manual (operate). (2) The Control Console Auto Mode pushbutton is depressed. (3) The minimum source count rate is present. When the Automatic Mode is initiated, the CSC will: ( (1) Illuminate the Control Console Auto Mode light and turn off all other mode lights. [ (2) Change the displayed mode on the Heactor Control CRT to Automatic. r (3) Inhibit the Transient Rod Fire pushbutton unless the L Transient Rod Drive and Rod are fully down. (4) Transmit the Demand Power Level Setpoint to the DAC. (5) Issue an Automatic command to the DAC. (6) Retransmit the Demand Power Level Setpoint to the DAC anytime it la changed by the operator. [

. ] 3.1.5.3.1 Terminating the Automatic Mode The Automatic Mode will be terminated when: l (1) The Manuni Mode pushbutton is depressed. (2) A SCRAM occurs (See section 3.1.5.2.1). ] When the Manual Mode pushbutton is depressed, the CSC will: (1) Initiate the Manual (Operate) Mode. When a SCRAM occurs, the CSC will: ] (1) initiate the SCRAM Mode. 3.1.5.4 Square Wave Mode ] The Square Wave Mode allows the operator to bring the reactor to a preset. steady state power level in a short period of time (within a few seconds). The transient rod drive is positioned to a reactivity value such that when the transient rod in "fired" out of the fuel core, the reactor will rise rapidly to power. Since the inserted value of reactivity will not be sufficient to offset the negative reactivity characteristics of the fuel ] temperature, the power will immediately begin to decay. This temperature effect is offset by enabling the Automatic Mode of operation when the power excursion reaches 80% of the preset level. In the Automatic Mode, the necessary reactivity will be automatically 1 added to hold the power constant at the preset level. ,J ] 3.1.5.4.1 Square Wave Mode The Square Wave Mode will be initiated when: (1) The current mode is Manual (Operate) Mode. (2) The react c power is less than 1 KW. (3) Air is not applied to the transient rod drive mechanism. (4) The Control Console Square Wave Mode pushbutton is depressed. (5) The minimum source count rate is present. ] ]

When the Square Wave Mode is initiated, the CSC will: w ve Mode light and r (1) Illuminate the Control Console Square a L turn off all other mode lights. (2) Change the dispinyed mode on the Reactor Control CRT to [ Squarn Wave (Ready). (3) Inhibit all rod Up pushbut.Lons except the t rans lern t roit, p (t) Enable the Tranulent Rod Fire pushbutton. L (5) Return to Scram Mode when the Manual Mode Pushbut.Lon is depressed. y L 3.1.5.4.2 Square Wave (Ramp Up) Mode L The Square Wave (Ramp Up) Mode will be initiated when: (1) The current mode is Square Wave (Ready) (2) The Transient Rod Fire pushbutton is depressed. When the Square Wave (Ramp Up) Mode is initiated, the CSC will: (1) Transmit the Demand Power Level Setpoint to the DAC. (2) Issue a "Square Wave Ramp Up" command to the DAC. (3) Ignore the Three-Second Period Interlock. The Automatic Mode will be initiated when: (1) The Power Level reaches 80% of the Demand Power Setpoint. If the Power Level Not Reached Timeout Status is received, the CSC will: { (1) Initiate the Manual (Operate) Mode. [ 3.1.5.5 Pulse Mode The Pu:se Mode allows the reactor to reach high peak powers on an extremely short period (within milliseconds). This achieved by pneumat.cally firing the transient rod out of the core to a preset positior and thereby sending the reactor on a power excursion. [

. ] 3.l.5.5.1 Pulse (Ready) Mode The Pulse (Ready) Mode will be initiated when ] (1) The current mode is Manual (Operate). ] (2) The reactor power level is less than 1 KW. (3) Air is not applied to the transient rod drive mechanism. (4) The Control Console Pulse Mode pushbutton is depressed. (5) The minimum source count rate is present. ] When the Pulso (Ready) Mode is initiated, the CSC will (1) Illuminate the Pulse Mode pushbutton and turn of f all other ] mode lights. (2) Change the displayed mode on the Reactor Control CRT to Pulse. (3) Inhibit all rod up pushbuttons except for the transient rod. (4) Enable the Transient Rod Fire pushbutton. l (5) Return to Scram Mode when the Manual Mode pushbutton la depressed. 3.1.5.5.2 Pulse (Pulse) Mode The Pulse (Pulse) Mode will be i..itiated when: (1) The current mode is Pulse (Ready). (2) The Transient Rod Fire pushbutton is depressed. ] When the Pulse (Pulse) Mode is initiated, the CSC will: ] (1) Issue a "Pulse Initiate" command to the DAC. (2) Poll for a Pulse Complete or No Pulse Timeout status from the DAC. 3.1.5.5.3 Pulse (Display) Mode The Pulse (Display) Mode will be initiated when: ) (1) The Pulso Complete status is received. ] hm

( If a No Pulse Timeout Status is i n i t i a t.ed, the CSC will i n i t. t a r.e

t. h e Manual (Operate) Mode.

When t.he Pulse (Display) Mode is initiated, the CSC will: (1) Increment the current Pulse ID Number in battery-backed RAM. (2) Request the Pulse Data from the DAC (3) S t.o re the dat.a in RAM memory. { (4) Store the data on hard disk as the most. re c e n t. pulse data file. (5) Delete the oldest pulse data file on hard disk. ( (6) Scale the data for the Pulse Display wit.h the selected axis scaling. (7) Calculate the peak power in MW. (8) Calculate the energy produced in MW-sec. (9) Calculate the Full Width at Half Maximum Power in milliseconds. { (10) Calculate the re ac t. iv i t.y inserted in 8. (l1) Calculate the minimum period. (12) Display the Data in either Graphic Mode or Non-Graphic Mode. The operator will be able to select the current pulse or previous pulans from the Historical File and choose how the dat.a will be presented. In the Non-Graphic Mode, the following data will be presented on t.he { Henctor Status CRT: (1) Peak Pulse Power in Megawatts, c b (2) Total Energy Produced in Megawatt-Seconds. [ (3) Reactivity inserted in 8. (4) Period in seconds. .(5) Peak Pulse Fuel Temperature in degrees C. (6) Pulse number. [ hii i-ii

I in the Graphic Mode, a plot of Power (Mega Watts) vs Time (see 3.1.5.5.4) will either be printed on the Color Graphics Printer or displayed on the Reactor Control CRT. The Data will only be displayed on the Reactor Control CRT in the Scram Mode. In addition to the plot, the following information will also be printed / displayed. l (1) Data and Time of Pulse. (2) Pulse Number ( 's ) Peak Pulse Power in Megawatts. I (4) Total Energy Produced in Megawatt-Seconds. (5) Reactivity Inserted in $. (6) Period in seconds. (7) Peak Pulse Fuel Temperature in degrees C. 3.1.5.5.1 Pulse (Menu) Mode The Pulse (Menu) Mode will be selected when: (1) The current mode is SCRAM (2) A Keyboard function key is pressed. When the Pulse (Menu) Mode is selected, the CSC will interactively question the operator and allow him/her to select a maximum Y axis sealing from 100 MW to 5.000 MW, and a maximum X axis scaling from 50 milliseconds to 15 seconds. After the axis scaling has been selected, the CSC will re-initiated the SCRAM Mode. 3.1.6 Scram / Interlocks /RWP's In addition to the SCRAM'S specified in sections 3.1.5.2.1 and 9.1.6. there will be individual Control Rod SCRAMS. Depressing the Console Magnet pushbuttons will SCRAM each individual Standard Control Rod (Shim, Safe, and Reg). Depressing the Console Air pushbutton will SCRAM the Transient Control Rod. These SCRAM'S will be in effect in any mode at any time, but will not change the current CSC mode. The System Safety Interlocks specified in sections 9.1.4 through 9.1.4.4 and the Rod Withdrawal Prevents (RWP's) specified in section 9.1.5 through 9.1.5.3 will be in effect for the appropriate mede. Interlocks and RWP's prevent rod withdrawal, but do not produce SCRAM or prevent rod insertion. Interlocks and RWP's may take effect from any control rod position (from fully inserted to fully withdrawn). ] l

t 3.5.1.3 Self-Diagnostics Upon power-up and periodically thereafter the DAC will perform a series of internal sel f-diagnostics that will determine the health of the unit. These self-diagnostics will include the health of RAM arul ( Hok.. will poll the power Monitors and Safety Systems for routine internal errors. and will provide fault detection to a section of or a system on a circuit board. If a failure is detected, the DAC will [ re p a r t the error to the CSC or SCRAM the reactor if necessary. The CSC will, in turn, display an error or SCRAM message on the Reactor Str.tus or Control CRT. ( 3.5.2 Mode Control ( In addition to the data acquisition and diagnortic fun'tions, the DAC will control the reactor control rod positions. Four co.;;31 modes must be implemented: (1) Manual (2) Automat.ic (3) Square Wave (4) pulse 3.5.2.1 Manual Mode In Manual Mode, the reactor control rod positions will be manually determined by the reactor operator depressing one or more Rod ( Up/DOWN" pushbutton switches on the control Console. The CSC wilI read these inputs and transmit them to the DAC. The DAC will, in turn, command the appropriate rod (s) to move up or down accordingly. ( 3.5.2.2 Automatic Mode h In Automatic Mode, the DAC will control the reactor control rod positions to reach and maintain a specific power level set by the operator. The CSC will read the desired power level from the Cont.rol Consolo "Demand Thumbwheel Switches" and transmit the level to the DAC. The DAC will use this level as the setpoint in a s e t. f - t u n i n g control loop. The operator will be able to select which rod or combinations of rods will be servoed by the DAC (each rod will be servoed in the range of i' om 0% to 100% withdrawn). A Control Rod can not be banked and [ r

servoed at the same time, however, an operator can change the rod ] banking at any time, and can change a rod f rom biing banked to wrvo. il or servoed to banked at any time. ] 3.5.2.3 Square Wave Mode The Square Wave Mode of operation in the DAC is a combination of the ) Pulse Mode and the Automatic Mode. Upon receipt of the "Square Wave Ramp Up" command from the CSC. the DAC will perfJrm the tollowing: (1) Store the Demand Power Level setpoint included in the Square Wave command. (2) Issue a command to fire the transient rod. ] (3) Initiate a five second "Demand Power Level Not Achieved' ) timeout. (4) Begin monitoring the Multi-range Linear Power input channel and if its value is equal to or greater than 80% of the desired aetpoint, initiate the Automatic Mode control algorithm. (5) If the power level fails to reach 80% of the Demand Power Level setpoint within the five second timeout, set the "Demand Power Level Not Achieved: status flag. The DAC will report this status to the CSC upon request. ] 3.5.2.4 Pulse Mode ] The DAC will perform the following steps upon receipt of the "Pulse Initiate" command from the CSC. ] (1) Enable a one second "No Pulse" timeout. (2) Inhibit the power level SCRAMS until the pulse data is taken or the timeout occurs. ] (3) Issue a command to "fire" (app)y air to) the transient rod. This causes the transient end to be rapidly driven out of the core until stopped by the pre-positioned drive mechanism. (4) Begin sampling the reactor pulse power analog input channel at 100 microsecond intervals and store every 100th data point. until the 1 KW 1evel is reached. (5) When the 1 KW level la reached, continue sampling at the 100 microsecond rste and store the next 10,000 reading (one second) in the DAC memory. ]

f ( (6) Af ter the one second timeout has occurred or the pulse Timer has timed out, remove the air supply from the t ra n s i e n t, rod drive mechanism. (7) After the 10,000 reading have been taken, immediately begin monitoring the fuel temperatures for a peak value. The ( reading must be taken at, a minimum rate of at l e as t. ten readings per second. Continue monitoring until a peak temperature in detected or four seconds have elapsed. (8) After the 10,000 readings have been taken, co n t. i nue unmpting the reactor pulse power analog input channel at 100 m i l l'eco nd int.orvals unt.11 the pulse Timer has timed out. (9) When the one second "No Pulse" timeout has elapsed, or the latter of: a peak temperature has been detected or the four second t.imeout, has occurred, or the duise Timer has timed out, transmit the pulse data and peak temperature (or minimum Pulse Threshold Not Detected St.atus) to the CSC upon receipt of a "Pulse Data Request" Command from the CSC. 3.8 Calibration Test. Support. Software Adequate Calibration Test Support Software must be provided to meet the requirements of Section 9.0 "Surveillance Requirements". 3.8.1 CSC Calibration Test Mode [ An Automatic calibration test. sequence will execut.e in the DAC upon command from the CSC. The test sequence will systematically test all of the data and trip fer 'ures of the Power Monitor and Safety Systems ( and the fuel temperature trip mechanisms to include 0% and 100% signal input, channel verification. The Calibration Test mode will be initiated when: { (1) The current mode is Scram. ( (2) The Control Console Pre-start checka pushbutton switch la depressed. When the Calibration Test Mode is initiated, the CEC will: (1) lliuminate the Pre-start check pushbutton and turn of f all other mode lights. (2) Change the display te the Calibration Test Display which will 1Lst all the calibration tests to be performed. [ r

J (3) Highlight the current calibration test being performed on the CRT. (4) Issue a Calibrate command to the DAC. ] (5) poll for test complete status and initiate the next test. ] (6) Record all of the tests performed and their results. Thla will be available to be pt inted out upon request by the operator. ] (7) Display appropriate diagnostic message for unsuccessful tosts. (8) Return to Scram Mode when the Manual Mode pushbutton is depressed. d 3.8.2 DAC Calibration A calibration program will be supplied that will execute in the DAC upon command from the CSC. This program will systematically test all of the data and trip features of each Power Monitor and Safety Systems. The program will emulate the operator's normal procedure of switching to the various counter test modes and checking the values returned f rom the power Monitor and Safety Systems. The program will also test the trip mechanisms by setting them at levels that will cause the circuitry to energize when a specific counter test is executed, then 1 resett ing them to values that are above the test rates and verifying J that a trip does not occur. Upon completion of these tests, the system will return the Power Monitor and Safety Systems to their normal settings and report the results to the operator. ) 9.1.4 Safety System Interlocks ] Safety system interlocks are specified in sections 9.1.4.1 through 1 0.1.4.4. J 9.1.4.1 One-Kilowatt Interlock The on-Kil, watt interlock prevents application of air to the t re.n s t e n t. rod in pulse mode unless the reactor power is below 1 KW, J

a .e= o F. L 9.1.4.2 Pulse Mode Interlock r The pulse mode interlock prevents withdrawal of any cont.rol rod except. L the transient, rod in pulse mode. [ 9.1.4.3 Source Level Int.orlock The source level interlock prevents withdrawal of any control rod unless the minimum source level count rate is present on t.he log [ channel. ( 9.1.4.4 Steady Stat.e Mode Interlock The steady state mode interlock prevents simultaneous manual { withdrawal of two standard control rods in steady stato mode. 9.1.5 Rod withdrawal Prevents (RWP's) RWP's are specified in sections 9.1.5.1 through 9.1.5.3. [ 9.1.5.1 Three-Secot.J Period Interlock The three-second period interlock prevents further withdrawal of any [ control rod unless the reactor power level is increasing on a three-second or greater period in the manual and automatic modes. ) 9.1.5.2 Operat.lonal liigh Voltage Interlock [ The operat.lonal high voltage interlock prevents wit.hdrawal of any control rod unless high voltage is supplied to the fission det tor for the mult.irange linear und widera'.ge los channels. [ 9.1.5.3 Pool Water Temperature Interlock ( The pool water temperature interlock prevents iurther withdrawal of any csntrol rod when the pool "bulk" water troperature exceeds 50 deg. C. [ [ [ [ f

9.1.6 System and Safety Channel Scrams i The following are system and safety channel scrams: ] 1) II.'gh fuel temperature safety charinel one. ) ) liigh fuel temperature safety channel two. 3) liigh flux safety channel one. J 1) liigh flux s sfety channel two. 5) Loss of high voltage or high flux unfety channel one. ,} G) 1.o s s of high voltage or high flux safety channel two. ti 1.ow pool we.ter level. ) NOTE: Scram setting shall be adjustable ] 3 J J J J J J ] mi. m i i i}}