Text

Proposed Tech Specs 3.3.5 Re ESFAS Instrumentation
	ML20198L621
Person / Time
Site:	San Onofre
Issue date:	12/31/1998
From:	; SOUTHERN CALIFORNIA EDISON CO.
To:	;
Shared Package
ML20198L593	List: ML20198L588; ML20198L613; ML20198L621;
References
	NUDOCS 9901050073
	Download: ML20198L621 (53)
	v • d • e

. . .. . - _ . _ _ _ _ _ . _ _ _ _ _ . _. __ _ - . _.

ESFAS Ins,trumentation - ,

3.3.5 3.3 INSTRUMENTATION 3.3.5 EngineeredSafetyFeaturesActuationSystem(ESFAS) Instrumentation.

LCO 3.3.5 Four ESFAS trip and bypass removal channels for each j Function in Table 3.3.5-1 shall be OPERABLE. i I

APPLICABILITY: According to Table 3.3.5-1.

ACTIONS i

..............................-------NOTES----------------------..------....-.

1. Separate Condition entry is allowed for each ESFAS Function.

2. If a channel is pl' aced in bypass, continued' operation with the channel in the bypassed condition for the Completion Time specified by Required Action A.2 or C.2.2 shall be reviewed by the Onsite Review Committee.

CONDITION REQUIRED ACTION COMPLETION TIME ,

A. One or more Functions A.1 Place Functional Unit I hour with one automatic in bypass or trip.

ESFAS trip channel i inoperable. MQ A.2 Restore channel to Prior to OPERABLE status. entering MODE 2 .

l. following next MODE 5 entry (continued) i-L.

9901050073 981231 PDR ADOCK 05000361 P PDR

SAN ON0FRE--UNIT'2 3.3-22 Amendment No. 127

ESFAS fnstrumentation .

3.3.5 ACTIONS (continued)

CONDITION REQUIRED ACTION COMPLETION TIME B. One or more Functions B.1 --------NOTE---------

with two automatic LC0 3.0.4 is not ESFAS trip channels applicable.

inoperable. ---------------------

Place one Functional 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months Unit in bypass and the other in trip.

C. One or more Functions C.1 Disable bypass 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months with one automatic channel.

bypass removal channel inoperable. E C.2.1 Place affected I hour automatic trip channel in bypass or trip.

E C.2.2 Restore bypass Prior to removal channel and entering MODE 2 associated automatic following next trip channel to MODE 5 entry 0PERABLE status.

D. One or more Functions ------------NOTE-------------

with two automatic LC0 3.0.4 is not applicable.

bypass removal -----------------------------

channels inoperable.

D.1 Disable bypass 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months .

channels. I M

(continued)

SAN ON0FRE--UNIT 2 3.3-23 Amendment No. 127

ESFAS Instrumentation -

3.3.5 ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME D. (continued) 0.2 Place one affected I hour automatic trip channel in bypass and place the other in trip.

E. Required Action and E.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time for Safety M Injection Actuation Signal, Containment E.2 Be in MODE 4. 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months Spray Actuation Signal, Containment Isolation Actuation Signal, Main Steam Isolation Signal, or Emergency Feedwater Actuation Signal not met.

l F. Required Action and F.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time for Recirculation M Actuation Signal not met. F.2 Be in MODE 5. 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months j SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.3.5.1 Perform a CHANNEL CHECK of each ESFAS 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months channel.

(continued)

SAN ON0FRE--UNIT 2 3.3-24 Amendment No. 127

Attachment B (Existing Pages)

I SONGS Unit 3 1

l

l ESFAS Instrumentation -

3.3.5 3.3 INSTRUMENTATION 3.3.5. Engineered Safety Features Actuation System (ESFAS) Instrumentation i

LC0 3.3.5 Four ESFAS tri) and bypass removal channels for each l Function in Ta)1e 3.3.5-1 shall be OPERABLE. l I

APPLICABILITY: According to Table 3.3.5-1.

ACTIONS

NOTES------------------------------------

1. Separate Condition entry is allowed for each ESFAS Function.

t

2. If a chanael is placed in bypass, continued operation with the channel in the bypassed condition for the Completion Time specified by Required Action A.2 or C.2.2 shall be reviewed by the Onsite Review Committee.

CONDITION REQUIRED ACTION COMPLETION TIME A. One or more Functions A.1 Place Functional Unit I hour with one automatie in bypass or trip. !

ESFAS trip channt :

inoperable. ARQ i A.2 Restore channel to Prior to . !

OPERABLE status. entering MODE 2 following next MODE 5 entry (continued) l l

SAN ON0FRE-~-UNIT 3 3.3-22 Amendment No. 116 ,

I l

ESFAS Instrumentation -

3.3.5 ACTIONS (continued)

CONDITION REQUIRED ACTION COMPLETION TIME B. One or more Functions B.1 --------NOTE---------

with two automatic LC0 3.0.4 is not ESFAS trip channels applicable.

inoperable. ---------------------

Place one Functional I hour Unit in bypass and the other in trip.

C. One or more Functions C.1 Disable bypass I hour with one automatic channel.

bypass removal channel inoperable. QR C.2.1 Place affected 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months automatic trip channel in bypass or trip.

AND C.2.2 Restore bypass Prior to re, oval channel and entering MODE 2 associated automatic following next trip channel to MODE 5 entry OPERABLE status.

D. One or more Functions ------------NOTE-------------

with two automatic LC0 3.0.4 is not applicable.

bypass removal -----------------------------

channels inoperable.

D.1 Disable bypass 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months channels.

QB (continued) i SAN ON0FRE--UNIT 3 3.3-23 Amendment No. 116

i ESFAS instrumentation .

3.3.5 ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME 1

D. (cont'nued) D.2 Place one affected 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months automatic trip

, channel in bypass and l place the other in l trip.

E. Required Action and E.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion Time for Safety M Injection Actuation Signal, Containment E.2 Be in MODE 4. 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months Spray Actuation Signal, Containment l Isolation Actuation ,

Signal, Main Steam 1 Isolation Signal, or Emergency Feedwater i Actuation Signal not I met. j F. Required Action and F.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion .

Time for Recirculation M )

Actuation Signal not '

met. F.2 Be in MODE 5. 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months i

SURVEILLANCE REQUIREMENTS l SURVEILLANCE FREQUENCY i

SR 3.3.5.1 Perform a CHANNEL CHECK of each ESFAS 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months l channel.

(continued) l SAN ON0FRE--UNIT 3 3.3-24 Amendment No. 116

Attachment C

< Proposed Pages (RedlineandStrikeout)

SONGS Unit 2

ESFAS Instrumentation 3.3.5 3.3 INSTRUMENTATION L

l 3.3.5 Engineered Safety Features Actuation System (ESFAS) Instrumentation l-i LC0 3.3.5 Four ESFAS tri) and bypass removal channels for each L Function in Ta)le 3.3.5-1 shall be OPERABLE.

APPLICABILITY: According to Table 3.3.5-1. ;

i ACTIONS

...----------------------------------NOTES------------------------------------

l 1. Separate Condition entry is allowed for each ESFAS Function.

2. If a channel is placed in by) ass, continued operation with the channel in the bypassed. condition for t1e Completion Time specified by Required Action A.2LBJ2l or EG.2.2 shall be reviewed by the Onsite Review Committee.

I l

l CONDITION REQUIRED ACTION COMPLETION TIME A. One or more Functions A.1 Place Functional Unit I hour with one automatic in bypass or trip.

ESFAS trip channal

inoperable..(otheith'iii M RWST?LevelytowXforfth.e RASL.functiontor)SG A.2' Restore channel to Prior to Pressure-LowTorlSG_ OPERABLE status. entering MODE 2-P.ressure?Differencei following next Hightforithe: EFAS MODE 5 entry function)s

'7 0ijels.utomatisitFip B Bil Pisce}Fdnc.tidnill.U_nij Ehouh channele ino )erableWo.. ..r inibypass; RWSTaleilele .oyfor[the ..

t RAS]functionforTSG M PressureLLowloriSG Pressu'relDiffersnce2 BT2 Ressre7shsnnsl3to PsiorLitd ...

High?for!th63.EFAS ' ~ OPERABLE { status) enteringjMODE 2 f.. u. n. ct.. i on. .!.

following n_ ext ~

M00E251. entry (continued)

SAN ON0FRE--UNIT 2 3.3-22 Amendment No. 127 l

ESFAS Instrumentation 3.3.5 :

ACTIONS (continued)

CONDITION REQUIRED ACTION COMPLETION TIME CB. One or more Functions ' B.1 C

^

NOTE---- ----

with two automatic LCO 3.0.4 is not ESFAS trip channgls applicable.

inoperable ---------------------

than?RWSTde(6therVelstdE

~

forMhesRASifuddtid5 Place one Functional i hour Br/SGj Pres;s'urejlow@j Unit in bypass and the other in trip.

SGYPressure.fd,fdj DifferenchsHfg thMEFAS;[ unction);

DE tit 6?isfMillEEES'FAs

~

(fil~~ C5fC "250 TEE- Z S

'gg.Tcharsrie1s'..TT^ ~ [C'033!d?471s[~ndf" ~

hplicabisF

~

inbperable2foisRWST LevelpLogforMhelRnS' Rp(Qhi-ffE?f@t-y

- i functionsoreSG-Pressure.sLoR o M$G , PliE5I6dEIFiINEff6iisi l1]IiBtif Pressure? Difference ~- Unitlin}bypassland

[ HighiforsthelEFAS. ~ thhhthe.rgin%tdM functioM, dflN 02 Kiif6Fifosi%iffEEfsif

automaticitfip _...

Osii lcha_nnelito10PfRABLE l status 2 l

'~Es. One or more Functions EG.1 Disable bypass I hour with one automatic channel.

bypass removal channel inoperable. M EG.2.1 Place affected 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months L automatic trip l channel in bypass or

! trip.

Atill EG.2.2 Restore bypass Prior to removal channel and entering MODE 2

associated automatic following next trip channel to MODE 5 entry OPERABLE status.

(continued) f SAN.0N0FRE--UNIT 2 3.3-23 Amendment No. 127 E

l ESFAS instrumentation 3.3.5 I ACTIONS (continued)

CONDITION REQUIRED ACTION COMPLETION TIME

~FB. One or more Functions ------------NOTE-------------

with two automatic LC0 3.0.4 is not applicable.

bypass removal -----------------------------

channels inoperable. I

.Fe.1 Disable bypass channels. I hour QR FB.2 Place one affected 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months automatic trip channel ,

in bypass and place the i other in trip.

GE. Required Action and GE.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion i Time for Safety AtLQ l Injection Actuation Signal, Containment GE.2 Be in MODE 4. 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months Spray Actuation Signal, Containment Isolation Actuation Signal, Main Steam Isolation Signal, or Emergency Feedwater Actuation Signal not met.

HF. Required Action and IIF.1 Be in MODE 3.

~

6 f.ours associated Completion Time for AtlQ Recirculation Actuation Signal not IIF.2 Be in MODE 5. 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months met.

l SAN ON0FRE--UHIT 2 3.3-24 Amendment No. 127

l l ESFAS Instrumentation 3.3.5 I

SURVEILLANCE REQUIREMENTS

SURVEILLANCE FREQUENCY SR 3.3.5.1 Perform a CHANNEL CHECK of each ESFAS 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months channel.

SR 3.3.5.2 Perform a CHANNEL FUNCTIONAL TEST of each 30 days on a l ESFAS channel. STAGGERED TEST l

BASIS l

SR 3.3.5.3 Perform a CHANNEL FUNCTIONAL TEST of-each 120 days ESFAS channel bypass removal function. ,

i SR 3.3.5.4 Perform a CHANNEL CALIBRATION of Function 18 months 5, Recirculation Actuation Signal, l including bypass removal functions. J SR 3.3.5.5 Perform a CHANNEL CALIBRATION of each ESFAS 24 months channel, with the exception of Function 5, l including bypass removal functions.

SR -3.3.5.6 Verify ESF RESPONSE TIME is within limits. 24 months on a STAGGERED TEST BASIS i SR 3.3.5.7 Perform a CHANNEL FUNCTIONAL TEST on each Once within automatic bypass removal channel. 120 days prior to each reactor startup j i

l l

l SAN ONOFRE--UNIT 2 3.3-25 Amendment No. 127

Attachment D !

Proposed Pages (RedlineandStrikeout)

SONGS Unit 3 l 1

1 i

t

- .- . - . - ._ . ~ - - - . _ -

l ESFAS Instrumentation 3.3.5 l

3.3 INSTRUMENTATION l 1

3.3.5 Engineered Safety Features Actuation System (ESFAS) Instrumentation l

LC0 3.3.5 Four ESFAS tri) and bypass removal channels for each i Function in Ta)1e 3.3.5-1 shall be OPERABLE. !

1 APPLICABILITY: According to Table 3.3.5-1. j ACTIONS

! -------------------------------------NOTES------------------------------------

1. Separate Condition entry is allowed for each ESFAS Function.

i

2. If a channel is placed in by) ass, continued operation with the channel in the bypassed condition for tie Completion Time specified by Required ActionA.2hB.2lorEG.2.2shallbereviewedbytheOnsiteReview !

Committee. l i

I CONDITION REQUIRED ACTION COMPLETION TIME A. One or more Functions A.1 Place Functional Unit I hour with one automatic in bypass or trip.

ESFAS trip channel inoperable (othertthan M RWSTRevelslowjforL the RAS? function: Lor!SG A.2 Restore channel to Prior to l Pressure-Low'or.:SG . OPERABLE status. entering MODE 2 Pressdre?Diffe ence- ~

following next Hightfor3theJ EFAS MODE 5 entry

. function)

BR ~0ne [autoniaOcitrip . _. B[1 PlaceTFunctionsl!Usif IQo0F channel ^11_noyerablelfor ini:_ bypass RWST} Level owiforithe ..

RASsfunction;lor;SG M Pressure-Low ors:SG _ , . _ . . _ . _ . . . . . . . .

Pressure:Differenc.e- B;2 . Restore: ch_ ann _e .lito Priorito ..

HighsforitheiEFAS OPERABLE statusi entering'M00E!2 following'next function!~'

" ' ' ~ ~ ' ~ ~

M0D.E(5jentry

{ (continued)

SAN ON0FRE--UNIT 3 3.3-22 Amendment No. 116

ESFAS Instrumentation 3.3.5 ACTIONS (continued)

CONDITION REQUIRED ACTION COMPLETION TIME CB. One or more Functions CB.1 --------NOTE---------

with two automatic LC0 3.0.4 is not ESFAS trip channels applicable.

inoperable _(other.. . ---------------------

than'.RWSTJLevel-Low .

for:the:RAsifunction_ Place one Functional I hour or:SG;-Pressure.Lowior Unit in bypass and SG. Pressure; ,. the other in trip.

Difference-H1' h';::

g ..for the:EFAS; Function).

Dr

~

TwoTautomatiCESFAS Dil ------4 NOTE 2--------

trip: channels 1 .' . LCO'3.0;4:isinot inoperable forlRWST applicabicc Level-Lowifor!thel RAS ~

function or SG ~~'

~ .. . . . .

Pressure-Lowfor;SG. P1 acetone Functional. 1!-hour PressureiDifference- Unit in?bypassLand High for?the EFAS the1other ini trip.

~~ ' ~'^ '

~

function.1 .

MQ D12 Rastbre;onelaffsct'ad 7_.l: days automaticL trip ;.. . .

channelftoiOPERABLE status.

EG. One or more functions EG.1 Disable bypass I hour with one automatic channel.

bypass removal channel inoperable. DE EG.2.1 Place affected I hour automatic trip channel in bypass or trip.

MQ EG.2.2 Restore bypass Prior to removal channel and entering MODE 2 associated automatic following next trip channel to MODE 5 entry OPERABLE status.

(continued)

SAN ON0FRE--UNIT 3 3.3-23 Amendment No. 116

ESFAS Instrumentation 3.3.5 ACTIONS (continued) t CONDITION REQUIRED ACTION COMPLETION TIME FB. One or more Functions

~

NOTE-------------

with two automatic .LCO 3.0.4 is not applicable.

bypass removal -----------------------------

channels. inoperable. .

FB.1 Disable bypass channels. I hour DE FB.2 P1 ace one affected

~

1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months i automatic trip channel in bypass and place the other in trip.

GE. Required Action and dE.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months ;

associated Completion Time for Safety M :

Injection Actuation Signal, Containment GE.2 Be in MODE 4. 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months Spray Actuation 1 Signal, Containment '

Isolation Actuation Signal, Main Steam Isolation Signal, or Emergency Feedwater Actuation Signal not met.

NF. Required Action and ~Ilf.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months associated Completion

' Time for M Recirculation Actuation Signal not HF.2 Be in MODE 5. 36 nours .

met. ,

l SAN ONOFRE--UNIT 3 3.3-24 Amendment No. 116

- .. .- - a

ESFAS Instrumentation 3.3.5 SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.3.5.1 Perform a CHANNEL CHECK of each ESFAS 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months channel.

SR 3.3.5.2 Perform a CHANNEL FUNCTIONAL TEST of each 30 days on a ESFAS channel. STAGGERED TEST BASIS SR 3.3.5.3 Perform a CHANNEL FUNCTIONAL TEST of each 120 days ESFAS channel bypass removal function.

4 Sr. 3.3.5.4 Perform a CHANNEL CALIBRATION of Function 18 months 5, Recirculation Acte tion Signal, including bypass removal functions.

SR 3.3.5.5 Perform a CHANNEL CALIBRATION of each ESFAS 24 months channel, with the exception of Function 5, including bypass removal functions.

SR 3.3.5.6 Verify ESF RESPONSE TIME is within limits. 24 months on a STAGGERED TEST BASIS SR 3.3.5.7 Perform a CHANNEL FUNCTIONAL TEST on each Once within automatic bypass removal channel. 120 days prior to each reactor startup

Verification of the RESPONSE TIME of the 30 subgroup relays identified in the February 18, 1997 Edison letter is not ap)11 cable until return to Mode 4 from the Unit 3 Cycle 9 refueling outage, wit) the additional commitments made in the February 18, 1997 letter. The safety justification for not performing this testing is also included in the February 18, 1997 letter.

SAN ON0FRE--UNIT 3 3.3-25 Amendment No. 11C,122,127

l l

1 1

1 l

l Attachment E Proposed Pages SONGS Unit 2 i

l 1

ESFAS Instrumentation 3.3.5 3.3 INSTRUMENTATION 3.3.5 Engineered Safety Features Actuation System (ESFAS) Instrumentation LC0 3.3.5 Four ESFAS tri) and bypass removal channels for each Function in Ta)le 3.3.5-1 shall be OPERABLE.

APPLICABILITY: According to Table 3.3.5-1.

ACTIONS

NOTES------------------------------------

1. Separate Condition entry is allowed for each ESFAS Function.

2. If a channel is placed in by) ass, continued operation with the channel in the bypassed condition for tie Completion Time s)ecified by Required l Action A.2, B.2, or E.2.2 shall be reviewed by tae Onsite Review l Committee.

CONDITION REQUIRED ACTION COMPLETION TIME A. One or more Functions A.1 Place Functional Unit I hour with one automatic in bypass or trip.

ESFAS trip channel inoperable (other than ARQ RWST Level-Low for the RAS function or SG A.2 Restore channel to Prior to Pressure-Low or SG OPERABLE status. entering MODE 2 Pressure Difference- following next High for the EFAS MODE 5 entry function).

B. One automatic trip B.1 Place Functional Unit I hour channel inoperable for in bypass.

RWST Level-Low for the RAS function or SG AHQ Pressure-Low or SG Pressure Difference- B.2 Restore channel to Prior to High for the EFAS OPERABLE sta.as, entering MODE 2 function. following next MODE 5 entry (continued)

SAN ON0FRE--UNIT 2 3.3-22 Amendment No.

ESFAS Instrumentation 3.3.5 ACTIONS (continued)

' CONDITION REQUIRED ACTION COMPLETION TIME ;

C. One.or more Functions C.1 .--------NOTE--------- l with two automatic LC0 3.0.4 is not ESFAS trip channels applicable.

inoperable (other. ---------------------

than RWST Level-Low for.the RAS function Place one Functional I hour :

or SG Pressure-Low or Unit in bypass and SG Pressure .

.the other in trip.

Difference-High for ;

the-EFAS Function).

i D. Two autoniatic ESFAS D.1 --------NOTE---------

trip channels LC0 3.0.4 is not inoperable for RWST applicable.

Level-Low for the RAS ---------------------

function or SG >

Pressure-Low or SG Place one Functional I hour Pressure Difference- Unit in bypass and High for the EFAS the other in trip.

function.

M D.2 Restore-one affected 7 days automatic trip-channel to OPERABLE '

status.

E. One or more Functions- E.1 Disable bypass 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months l with-one automatic channel.

bypass removal channel inoperable. DR E.2.1 Place affected I hour l automatic trip channel in byphss or t trip.

M E.2.2 Restore bypass Prior to j removal channel and entering MODE 2 associated automatic followina next trip channel to MODE 5 eiitry i OPERABLE status.

(continued)

SAN ON0FRE--UNIT 2 3.3-23 Amendment No.

. -. - - - = - . .- -- ._ _ _. - - _ . - --

i ESFAS Instrumentation 3.3.5 ACTIONS (continued)

CONDITION REQUIRED ACTION COMPLETION TIME l I

F. One or more Functions ------------NOTE-------------

with two automatic LC0 3.0.4 is not applicable.

bypass removal -----------------------------

channels inoperable.

F.1 Disable bypass I hour l channels.

DH 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months F.2 Place one affected l automatic trip channel in bypass and place the other in trip.

G. Required Action and G.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months l associated Completion Time for Safety M Injection Actuation Signal, Containment G.2 Be in MODE 4. 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months l Spray Actuation Signal, Containment Isolation Actuation Signal, Main Steam Isolation Signal, or Emergency Feedwater Actuation Signal not met.

H. Required Action and H.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months l associated Completion Time for Recirculation M Actuation Signal not met. H.2 Be in MODE 5. 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months l l

l I

l SAN ON0FRE--UNIT 2 3.3-24 Amendment No.

{

i ESFAS Instrumentation 3.3.5 l

SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY l L SR 3.3.5.1 Perform a CHANNEL CHECK of each ESFAS 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months I channel.

SR 3.3.5.2 Perform a CHANNEL FUNCTIONAL TEST of each 30 days on a ESFAS channel. STAGGERED TEST BASIS l SR 3.3.5.3 Perform a CHANNEL FUNCTIONAL TEST of each 120 days I ESFAS channel bypass removal function.

SR 3.3.5.4 Perform a CHANNEL CALIBRATION of Function 18 months .

5, Recirculation Actuation Signal, l including bypass removal functions.

SR 3.3.5.5 Perform a CHANNEL CALIBRATION of each ESFAS 24 months channel, with the exception of Function 5, including bypass removal functions.

SR 3.3.5.6 Verify ESF RESPONSE TIME is within limits. 24 months on a STAGGERED TEST BASIS SR 3.3.5.7 Perform a CHANNEL FUNCTIONAL TEST on each Once within automatic bypass removal channel. 120 days prior to each reactor startup l

l l

l SAN ON0FRE--UNIT 2 3.3-25 Amendment No.

l

Attachment F f

I Proposed Pages

4 SONGS Unit 3 i

6 j

4 3

a a

J

ESFAS Instrumentation 3.3.5 3.3 INSTRUMENTATION 3.3.5 Engineered Safety Features Actuation System (ESFAS) Instrumentation LCO 3.3.5 Four ESFAS tri) and bypass removal channels for each Function in Ta)le 3.3.5-1 shall be OPERABLE.

APPLICABILITY: According to Table 3.3.5-1. i ACTIONS

.._____________.....__---------------NOTES------------------------------------

1. Separate Condition entry is allowed for each ESFAS Function.

2. If a channel is placed in by) ass, continu . i operation with the channel in the bypassed condition for tie Completion Time s)ecified by Required Action A.2, B.2, or E.2.2 shall be reviewed by tie Onsite Review l Committee.

CONDITION REQUIRED ACTION COMPLETION TIME A. One or more Functions A.1 Place Functional Unit I hour with one automatic in bypass or trip.

ESFAS trip channel inoperable (other than ARQ RWST Level-Low for the RAS function or SG A.2 Restore channel to Prior to Pressure-Low or SG OPERABLE status. ente' ring MODE 2 Pressure Difference- following next High for the EFAS MODE 5 entry function).

B. One automatic trip B.1 Place Functional Unit 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months channel inoperable for in bypass.

RWST Level-Low for the RAS function or SG ARQ Pressure-Low or SG Pressure Difference- B.2 Restore channel to Prior to High for the EFAS OPERABLE status. entering MODE 2 function. following next MODE 5 entry (continued)

SAN ON0FRE--UNIT 3 3.3-22 Amendment No.

l -

ESFAS Instrumentation ACTIONS (continued) l i'

CONDITION REQUIRED ACTION COMPLETION TIME l -C. One or more Functions C.1 --------NOTE--------- l l with two automatic -LC0 3.0.4 is not l ESFAS trip channels applicable.

l inoperable (other ---------------------

i than RWST Level-Low for the RAS function Place one FJnctional 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months or SG Pressure-Low or Unit in bypass and SG Pressure the other in trip.

Difference-High for the EFAS Function).

D. Two automatic ESFAS D.1 --------NOTE---------

l trip channels LC0 3.0.4 is not

inoperable for RWST applicable.

Level-Low for the RAS ---------------------

function or SG Pressure-Low or SG Place one Functional 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months Pressure Difference- Unit in bypass and High for the EFAS the other in trip.

function.

O D.2 Restore one affected 7 days automatic trip channel to OPERABLE status.

l One or more Functions Disable bypass 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months l E. E.1 l L with one automatic channel. I l

bypass removal l channel inoperable. OR E.2.1 Place affected 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months l ,

automatic trip l l channel in bypass or trip.

1 g l E.2.2 Restore bypass Prior to l l removal channel and entering MODE 2 l associated automatic following next l trip channel to MODE 5 entry l OPERABLE status.

(continued)

SAN ON0FRE--UNIT 3 3.3-23 Amendment No.

l l

l

ESFAS Instrumentation 3.3.5 ACTIONS (continued)

CONDITION REQUIRED ACTION COMPLETION TIME F. One or more Functions ------------NOTE------------- l with two automatic LC0 3.0.4 is not applicable.

bypass removal -----------------------------

channels inoperable.

F.1 Disable bypass channels. I hour l DE F.2 Place one affected 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months l automatic trip channel in bypass and place the other in trip.

G. Required Action and G.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months l associated Completion Time for Safety AND Injection Actuation Signal, Containment G.2 Be in MODE 4. 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months l Spray Actuation Signal, Containment Isolation Actuation Signal, Main Steam Isolation Signal, or Emergency Feedwater Actuation Signal not met.

H. Required Action and H.1 Be in MODE 3. 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months l associated Completion Time for At1Q Recirculation Actuation Signal not H.2 Be in MODE 5. 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months l met, l

i SAN ON0FRE--UNIT 3 3.3-24 Amendment No.

L

ESFAS Instrumentation 3.3.5 SURVEILLANCE REQUIRP::NTS SURVEILLANCE FREQUENCY SR 3.3.5.1 Perform a CHANNEL CHECK of each ESFAS 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months channel.

SR 3.3.5.2 Perform a CHANNEL FUNCTIONAL TEST of each 30 days on a ESFAS channel. STAGGERED TEST BASIS SR 3.3.5.3 Perform a CHANNEL FUNCTIONAL TEST of each 120 days ESFAS channel bypass removal function.

SR 3.3.5.4 Perform a CHANNEL CALIBRATION of Function 18 months 5, Recirculation Actuation Signal, including bypass removal functions.

SR 3.3.5.5 Perform a Ci:ANNEL CALIBRATION of each ESFAS 24 months channel, with the exception of Function 5, including bypass removal functions. ,

SR 3.3.5.6 Verify ESF RESPONSE TIME is within limits. 24 months on a i STAGGERED TEST BASIS SR 3.3.5.7 Perform a CHANNEL FUNCTIONAL TEST on each Once within automatic bypass removal channel. 120 days prior to each reactor startup

Verification of the RESPONSE TIME of the 30 subgroup relays identified in the February 18, 1997 Edison letter is not ap)licable until return to Mode 4 from the Unit 3 Cycle 9 refueling outage, wit 1 the additional commitments made in the February 18, 1997 letter. The safety justification for not performing this testing is also included in the February 18, 1997 letter.

SAN ONOFRE--UNIT 3 3.3-25 Amendment No.

Attachment G Proposed Bases Pages (For Information Only)

SONGS Unit 2

{

t

ESFAS Instrumentation B 3.3.5 BASES ACTIONS Two Notes have been added to the ACTIONS. Note 1 has been (continued) added to clarify the application of the Completion Time rules. The Ccnditions of this Specification may be entered independently for each Function. The Completion Time for the inoperable channel of a Function will be tracked separately for each Function starting from the time the Condition was entered for that Function. Note 2 was added to ensure review by the Onsite Review Committee is performed to discuss the desirability of maintaining the channel in the bypassed condition.

A.1 and A.2 Condition A applies to the failure of i. single channel of one or more input parameters in the folsowing ESFAS Functions:

1. Safety Injection Actuation Signal Containment Pressure-High Pressurizer Pressure-Low

2. Containment Spray Actuation Signal Containment Pressure-High High Automatic SIAS

3. Containment Isolation Actuation Signal Containment Pressure-High l

4. Main Steam Isolation Signal Steam Generator Pressure-Low l S. Recirculaticri Actuation Signal Refueling ',later Storage Tank Level-bew

6. Emergency Feedwater Actuation Signal SG #1 (EFAS-1) l Steam Generator Level-Low l SC Prcssurc Dif fcrcncc-High Steam Cenerator Pressure-bew

7. Emergency Feedwater Actuation Signal SG #2 (EFAS-2)

Steam Generator Level-Low

, SC Pressure Difference-High a s w., us isi u vi , . c a a m i c - bow ESFAS coincidence logic is normally two-out-of-four.

(continued)

SAN ON0FRE--UNIT 2 B 3.3-95 Amendment No, W

l ESFAS Instrumentation t

B 3.3.5 BASES i

ACTIONS A.1 and A.2 (continued) i If one ESFAS channel is inoperable, startup or power operation is allowed to continue, providing the inoperable l channel is l Action A.1)placed in bypass or trip within 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months (Required The Completion Time of 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months allotted to restore, bypass, i or trip the channel is sufficient to allow the operator to I take all appropriate actions for the failed channel and still ensures that the risk involved in operating with the l failed channel is scceptable. '

The failed channel must be restored to OPERABLE status prior to entering MODE 2 following the next MODE 5 entry. With a channel bypassed, the coincidence logic is now in a two-out-of-three configuration. In this configuration, common cause failure of dependent channels cannot prevent trip. The Completion Time of prior to entering MODE 2 following the next MODE 5 entry is based on. adequate channel to channel independence, which allows a two-out-of-three channel operation, since no single. failure will cause or prevent a reactcr tripan ESFAS} actuation.

In the event that Trip Channel Bypass condition is indeterminate for a channel function (i.e., the pushbutton is depressed but indication lights do not energize or the indication lights remain energized after the pushbutton is released), the channel is conservatively assumed to be in Bypass and the provisions of this section apply. The pushbutton must be depressed to ensure the interlock with other channels is in effect. The function is administrative 1y controlled to prevent operation of trip channel bypass for the same function in other channels.

l In the event the channel does not actually 90 into Bypass when the pushbutton is depressed, the channel is free to process any trip channel, which is conservative. By having the channel in Bypass, even if the Bypass contacts do not close, the electrical interlock and administrative controls are implemented meeting the requirement to have an inoperable channel in Trip or Bypass. This prevents any other channel from being put into Bypass, preserving the function's ability to trip with any other single channel failed.

(continued)

SAN ON0FRE--UNIT 2 B 3.3-96 Amendment No. 427 12/30/96

ESFAS Instrumentation B 3.3.5 BASES ACTIONS Bifihd"B12

'(continue'd) c C0ddifibnlBilsppliisiid!the:Jfsilube?6fialsingle7channelidf onetorTmoreLinputfparameters;insthet ollowing;ESFAS f functions)

~

O '

RAEiFculktidn?AstUilibsSisnAL .. %dy Refueling 1Wat'er7StoragelTank(Lsvel l 1

2? l55FgencyJFeidEil SGjPressuresDiffe.Er[ActiiAli6(

renceHHigh

~

$isni1[SG K (EFAssi).

SGdressureHLoi~~

-3} Essrgeni:ydeidnAlir/AilhEtidnisihrial[sGis2?^(EFAss2)

SG! Pressure;DifferenceBHigh~

SG7ressureHLow Ifioneidhinhel?6D Pres sureb Die-HighToriSG1 fferenc[RWsTRis$1 Pressure-Low 1forxthe Zoiiforft EFAS' helRA$Efur func t i on s:1_ sli nope rabl e gs ta rt up f orJ powe rJ o ) era t i on 11 s al l owed ; toiconti nue p prov id i ng ? theli nopera )l e r channel f i s .

pl aced ri n;ibypas s t wi thi nt11hou r?(Requ i red t Act i on ': Bil) h ; Foy these(functionshoperationtwith"oneTchannellinitriptis undesirable)dueato sthesconsequencesi off auspurioushtrip.x _ '

WithioneichannelMnitr1pWthenfunctionlisiinfalonepout-of- I t hreej confi gu ra t i on n and ia ;s i ngl eMai l u retc anil e a d it o /a spurious #t_.ript ThelCoinfliliBMTiss3f/1?hou@siletiidit67bypas' s lk rsitore the?channelfistsufficientitolallow theloperatorstoitakefall app ropri a te?ac ti on s tfo ri the i;f a i l ed schannelia nd is ti l l i en s u res thatttheCrisk;involvedtinfoperati.nsiwithnheifailedchannel isf acceptable?

ThWfill sd shinnill niush biifes f6fidN6TOPERABLEisiaiss? peio r tosentering!M00E02/fo110 wing;the channellbypassedothe; coincidence i (next1MODEt5l entry.g ll.ogictssnowHnLa LWi twoeo ut-of-thr'ee conf.iguration M Inithisiconfiguration L conson !causesf ail urefof fdependentschannel sicannott prevent trip' M The2CompletiontTimetoffpriorito;enteringiMODE 21 followingithe next?MODEj5;;entrygistbased;toniadequate channel to : channel;i ndependence hwhi ch i;al l owsl alp twopou t-of-t hree channelioperationMsinceinoising k failure.iwillicausefor prevent;an;ESFAS; actuation.

l i

(continued)

SAN ON0FRE--UNIT 2 B 3.3-97 Amendment No. 127 12/30/95

ESFAS Instrumentation B 3.3.5 BASES ACTIONS B.1FahdT[2]1(cddindsd)

B

^

InTtheleilsnt7thit{Tsip[Chanas)?BypassVconditibn3 s .. . .. .

indeterminatel:foriaLchannelifunctioni(i.e.Rthe?pushbutton isidepressedibut:iindicationilightstdo!not; energize or..the i ndication':;:l ights h remainienergi zed f af ter? thel pushbut t6n -. i s rel ea sed) Mt heichannel pi s1 conserva ti vely;as sumed ito !: be r:Lin Bypassland (the 'provi sions70fa thi s:;section* applybThe ' ~ ' ' '

pushbutton f mustibeidepressed ? to' ensurei the f interlockii th ' ~~~

other/channelstis?:in?effect R Thelfunctioniis admi ni s t ra ti ve1 ysontrol l ed :ito ? prevent toperatibhTbf2 ti i cha.n.ne13 bypa s s Mori t he ss am.elfu nc t i o n :::i n ~;;ot he r; c h a nnel s . p Ini thei evenEths%hsnns17dossi notlactuals igoli ntMBypss when ithe; pus hbu t ton:21 s } depres sed , gt he ;chennel l.1 s if ree:: to processiany; trip':channelW whichbistconservative N Bylhaving thelchannelsini; Bypass.:;:eventif f theiBypasWcontactsidofnot closesthe electricalsinterlock?andi: administrative [ controls arel implemented;; meeting;thelrequirementitolhave an.

inoperableLchannel41nJBypassGThis preventsianytothef channel s from j beingf put1:>intoj By ) ass',f preserving : the function's: abilitystoitrip;wi.tfanyy;other(single chinnsi

.f a t._l ed ; " ~ ~

CfL1 The Required Action is modified by a Note stating that LCO 3.0.4 is not applicable. The Note was added to allow the changing of MODES even though two channels are inoperable, with one channel bypassed and one tripped. In this configuration, the protection system is in a one-out-of-two logic, which is adequate to ensure that no random failure will prevent protection system operation.

Condition B applies to the failure of two channels of one or more input parameters in the following ESFAS automatic trip Functions:

1. Safety Injection Actuation Signal Containment Pressure-High Pressurizer Pressure-Low

2. Containment Spray Actuation Signal Containment Pressure-High High Automatic SIAS

3. Containment Isolation Actuation Signal Containment Pressure-High (continued)

SAN ON0FRE--UNIT 2 B 3.3-98 Amendment No. 127 12/30/9L

i j

ESFAS Instrumentation i B 3.3.5 BASES ACTIONS C.1 and C.2 (continued)

4. Main Steam Isolation Signal Steam Generator Pressure-Low

5. Rccirculation Actuation Signal Rcfucling "eter Storagc Tank Level-bew

6. Emergency Feedwater Actuation Signal SG #1 (EFAS-1)

Steam Generator Level-Low SC Pressure Differencc-lMgh Stcam Ccacrator Pressure-bow ,

. Emergency Feeawater Actuation Signal SG #2 (EFAS-2)

Steam Generator Level-Low '

SC Pressurc Diffsrsnce-lH9h Stcam Ccacratcr Pressure-bew With two inoperable channels, power operation may continue, provided one inoperable channel is ) laced in bypass and the 1 other channel is placed in trip wit 11n 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months . With one channel of protective instrumentation bypassed, the ESFAS Function is in two-out-of-three logic in the bypassed input ;

parameter, but with another channel failed, the ESFAS may be )

operating with a two-out-of-two logic. This is outside the ;

assumptions made in the analyses and should be corrected.

To correct the problem, the second channel is placed in trip. This places the ESFAS Function in a one-out-of-two i logic. If any of the other OPERABLE channels receives a trip signal, ESFAS actuation will occur. 1 l

One of the two inoperable channels will need to be restored ;

to operable status prior to the next required CHANNEL FUNCTIONAL TEST because channel surveillance testing on an !

OPERABLE channel requires that the OPERABLE channel be '

placed in bypass. However, it is not possible to bypass more than one ESFAS channel, and placing a second channel in trip will result in an ESFAS actuation. Therefore, if one ESFAS channel, is in trip and a second channel is in bypass, i a third inoperable channel would place the unit in i

. LC0 3.0.3.

l 1

M1a6I 7 2 I Th'eJRiq'd'i rid! AiB oiiT gin 6di @hO l LCO[3.014 sis)not?applicableOThe3 Not'feWanadded fsd MyWN6 t!E sis tii n@d ola t he scha ng i ng?of; MOD ESleve~nithoughitwCchannel sya re 1 (continued)

SAN ONOFRE--UNIT 2 8 3.3-99 Amendment No. 127 12/30/0S

ESFAS Instrumentation B 3.3.5 BASES ACT' IONS Dii3AidiD22Q(E~oi({ddhil);

f6FpTFib1EFitth?6hifdhinhs1?bipis?sEUsiidf6 serf 1p)id2jI6 thisjconfigbratfondthe7protectionksystemkispnia ..E i.LT one-out-of-two$ logic nwhichtisjadequatesto ensuredthi.tino ~

ran' dom 3 f ail ureiwil ljprevent ip ro t ecti on ; sys t em [ opera t i on t._._

Condi. ti on: D ia ppl i e sito i t hsif a il u re tof s two::Tchannels70ffonelor mo re ?i nputs pa rame;te Fslinit h e Jol]..osi Ab ES FASlast ompt i cit ri p "

functfons; g . g g g.<g

g. ~

. g RtfuelinglWatersStorage.Manki:LiVelil'6W 2{ EsifgEndyffiidiffe@X61isill6$Sigiial[SGjil(EFA5$1) '

SGiPressure?DifferenceMigh~

S,GjPres_su&e iLow ~'~ "

M UiEFiEEEE7FEidiffEE EtLilliniSi ' ' ~ ~ '" E

~~

SGlPressupeiDifferenceEHj'gh- ~gEil3SGI)2[(EFAS

' ~ " ~

2) 4 SG h essure {.Lof '~" " ' ~

. . , ~ . s., p yu, 3 . p , , . . s..m.,,, s.,,.,,,.,,,;,s..so..,,r.y,,.y,y.gs,.w. + . v.t f,. 7,q,p,,.,,.g,,.

Wi thttwosino,er,ab. p . ,s.7.,.sl eichannel s u powe,rMpera tion .may3 conti n.....g ,7.ue; proVidedIonelinoperableichanneSisSlaced?in?bypaistand ~

otherichanhellisipladsdsin$triiRuit11n11shonnaWith30ne(the ~

channblioffprdtectivelinstpumentationibypasssdNthalESFAS,.t F6n ctidniis fi n s twcibuthf# t hieell ogi c ni n4 the7 byphs s sdii npu parame t#Fh)i but:iwi thf ano t hersha '

nnel af a i l ed ist he > ES Thiitisfoutsidesthe~

opsrating! 1thsitW6'-out?ofitWo!!1ogicM'ould!bescorrectedW assumptionsimadelinithe%na19sesVand!sh p iaEsdMn 7 To!correctithelp tri pMT hi O pl a ce6toblein$theisecondichanne1Sisip;ostJofftw;o hen ESFASifu ncti onlinlifon'e-l og i c M I fe a ny ? ofi:thelo ther20PERABLE ichannel si -

ki pislinalMJSfASla c tu a tio[yi 11 {ocfcu M^-~f~ecei v esla ~ ' - ~

AEff6E?DIPh?69Tdsifi71Tiffi6WIdiyM6FibpIF5IT6EIslI6 21:i hope rabl ei c h annel sM I ns t helone-ou tsof-two* cohf i g u ra ti 6h}

aT51 ngl eicha'nnelsfailureicinicause?a ispUriousitriph !Forj RAS a;nd s EFAS jfunc t idhsMilj ps~ 6fiblislt ri plEanil ead 3 tolUndes i reabj e; con. sequences 2during;certainlDesignt Basis!;. Events?

T6iMdiff t~iiiistliEftYpF6FfiliiT6ps~FitI6Hil315Albi 1 itFItlb

' ~

' erform? airequi rdd/CHANNEld FUNCTIONAliTESTf on fone" channel 1chsisQypas'ed s wh;d an fjsMr!pped)) );whilelihecondichinnellisiinope.rable'

't (continued)

SAN ON0FRE--UNIT 2 B 3.3-100 Amendment No. +27 12/30/0S

ESFAS Instrumentation B 3.3.5 BASES ACTIONS ?

D.1 aAU D.21 3continiied)

Tliej74sy t'imell151t?$fso maistAiris JacceptableLcore damage frequencyJas. discussed-in NSG:98-007,'~ Time Limit for RAS or

' ~ ~ ' ' ' ' ' ~' '~

EFAS; Channel 11nmipi(Reference;11).

Asireqdited WSichi oriT5!512 f14EaConfi gufst fion 'Ri s k Management 2 Program;istimplemented.in1the-eventLof~~

' ' ~ ~ ~ ~ ~ ~ ~ ~~ ~ ~

Cond1.tfonlD.

EG.I. EG.2.1. and EG.2.2 Condition C applies to one automatic bypass removal channel inoperable. The only automatic bypass removal on an ESFAS is on the Pressurizer Pressure-Low signal. This by removal is shared with the RPS Pressurizer Pressure pass Low bypass removal.

If the bypass removal channel for any operating bypass cannot be restored to OPERABLE status the associated ESFAS channel may be considered OPERABLE on}y if the bypass is not in effect. Otherwise, the affected ESFAS. channel must be as in Conditions'A and B, and the declared bypass inoperable,d either remove or the bypass removal' channel repaired. The Bases for the Required Actions and required Completion Times are consistent with Conditions Afand B.

FB.1 and 'FB.2 The Required Action is modified by a Note stating that LC0 3.0.4 is not applicable. The Note was added to allow the changing of MODES even though two channels are inoperable, with one channel bypassed and one tripped. M this configuration the protection system is in a one-out-of-two log c, which is adequate to ensure that no ,

random failure wil prevent protection system operation. l Condition FB applies to two inoperable automatic bypass removal channels. If the bypass removal channels for two operating bypasses the associated ESFAScannot channelbe restored may to OPERABLE be considered OPERABLE status, on ly I

if the bypass is not in effect. Otherwise, the affected l ESFAS channels _must be declared inoperable, as in Conditions C'and'DB, and either the bypass removed or the ,

bypass remonl~ channel repaired The restoration of one !

affected bypassed automatic trip channel must be completed prior to the next CHANNEL FUNCTIONAL TEST or the plant must shut down per LC0 3.0.3, as explained in Conditions.C and l D0. Completion Times are consistent with Conditions C and DB.

(continued)

SAN ONOFRE--UNIT 2 B 3.3-101 Amendment No. 127 12/30/96

ESFAS Instrumentation L 3.3.5 BASES ACTIONS GE.1 and GE.2 (continued)

If the Required Actions and associated Completion Times of Condition A, CB, EG, or F9 cannot be met for the Safety Injection Actuation Signal, Containment Spray Actuation Signal, Containment Isolation Actuation Signal, Main Steam

. Isolation._Signali or Emergency. Feedwater Actuatio.n Signal,

~

or?i fithei Requi red? Actions tand -.as soc i a ted kCompl etionlTimes ofj Condi tioniB RD2 E d o riEica hrjots belme t?fo rs t helC-6??r.~cy,

[ccdwater Act h ticr,~SigrdlSG: Pressure? Difference-Highu np'ut '

orithe?SGIPressure ActuationTSignal,the

^

flosinputitolthelEmergency1Feedwater

^

plant must be brought to a MODE in whRh' the LC0 does not apply. To achieve this status, the plant must be brought to at least MODE 3 within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and to MODE 4 within 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months . The allowed Completion Times are reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems. !

HF.1 and NF.2 If the Required _ Actions and associated Completion Times of ConditionB;fD,jERor[FA,0,C,or0cannotbemetforthe Recirculation Actuation Signal, the plant must be brought to a MODE in which the LC0 does not apply. to achieve this status, the plant must be brought to at least MODE 3 within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and MODE 5 within 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months . The allowed Completion Times are reasonable, based on operating experience, to reach the required plant conditions in an orderly manner and without challenging plant systems.

SURVEILLANCE SR 3.3.5.1 REQUIREMENTS Performance of the CHANNEL CHECK once every 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months ensures that a gross failure c; instrumentation has not occurred. A CHANNEL CHECK is a comparison of the parameter indicated on one channel to a similar aarameter on other channels. It is based on the assumption t1at instrument channels monitoring the same parameter should read approximately the same value.

Significant deviations between instrument channels could be an indication of excessive instrument drift in one of the channels or of something even more serious. CHANNEL CHECK will detect gross channel failure; thus, it is key to verifying the instrumentation continues to operate properly between each CHANNEL CALIBRATION.

(continued)

I l-SAN ON0FRE--UNIT 2 8 3.3-102 Amendment No. 127 12/30/95

l ESFAS Instrumentation B 3.3.5 BASES l SURVEILLANCE Agreement criteria are determined by the plant staff based REQUIREMENTS on a combination of the channel instrument uncertainties, (continued) including indication and readability. If a channel is l outside the match criteria, it may be an indication that the j sensor or the signal processing equipment has drifted outside its limit. If the channels are within the match criteria, it is an indication that the channels are 4 OPERABLE.

The Frequency, about once every shift, is based on operating experience that demonstrates channel failure is rare. Thus, ;

performance of the CHANNEL CHECK guarantees that undetected :

overt channel failure is limited to 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months . Since the l probability 01 two random failures in redundant channels in l any 12 hour1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months period is low, the CHANNEL CHECK minimizes the ,

I chance of loss of protective function due to failure of l l redundant channels. The CHANNEL CHECK supplements less ,

formal, but more frequent, checks of channel OPERABILITY i during normal ooerational use of displays associated with the LC0 require'd channels.

l SR 3.3.5.2 and SR 3.3.5.3 l

l A CHANNEL FUNCTIONAL TEST is performed every 30 days on a STAGGERED TEST BASIS for SR 3.3.5,2 to ensure the entire channel will perform its intended function wher, needed.

LC0 3.3.5 Action A permits plant operation with one or more Functions with one automatic ESFAS trip channel inoperable

, until MODE 2 entry following the next MODE 5 entry (provided

! the Functi6nal Unit is placed in bypass or trip). During i

plant operation in that condition, CHANNEL FUNCTIONAL TESTS on the '!noperable Functions in that channel are not required l (SR 3.0.1), and n remains at 4, where n is the total number of channels in the definition of STAGGERED TEST BASIS.

Therefore, tests on the affected Functions in the remaining

!. 3 channels may continue to be performed such that each channel is tested every 4 Surveillance Frequency intervals.

Discussions with the NRC Technical Specifications Branch on I this clarification are documented in Action Request

, 980601488-1.

The CHANNEL FUNCTIONAL TEST is part of an overla) ping test sequence similar to that employed in the RPS. T 11 s l sec uence, consisting of SR 3.3.5.2, SR 3.3.5.3, SR 3.3.6.1, l anc SR 3.3.6.2, tests the entire ESFAS from the bistable input through the actuation of the individual subgroup (continued)

SAN ON0FRE--UNIT 2 B 3.3-103 Amendment No. 127 09/10/90

ESFAS fnstrumentation B 3.3.5 BASES SURVEILLANCE relays. These overlapping tests are described in REQUIREMENTS Reference 1. SR 3.3.5.2 and SR 3.3.6.1 are normally (continued) performed together and in conjunction with ESFAS testing.

SR 3.3.6.2 verifies that the subgroup relays are capable of actuating their respective ESF components when de-energized.

SR 3.3.5.3 is performed every 120 days to verify ESFAS channel bypass removal function.

These tests verify that the ESFAS is capable of performing its intended function, from histable input through the actuated components. SRs 3.3.6.1 and 3.3.6.2 are addressed in LC0 3.3.6. SR 3.3.5.2 includes bistable tests.

A test signal is superimposed on the input in one channel at a time to verify that the bistable trips within the s)ecified tolerance around the setpoint. This is done with tie affected PPS trip channel bypassed.

l SR 3.3.5.4 and SR 3.3.5.5 l I

CHANNEL CALIBRATION is a complete check of the instrument channel including the sensor and the bypass removal functions, if applicable. The Surveillance verifies that .

the channel responds to a measured parameter within the l r,ecessary range ard ? curacy. CHANNEL CALIBRATICN leaves the channel adjusted ta sccount for instrument drift between )

successive calibrations to ensure that the channel remains l operational fatween successive surveillances. Measurement i error determfiiation, setpoint error determination, and I calibration adjustment must be performed consistent with the l plant specific setpoint analysis. The channel shall be left calibrated consistent with the assum)tions of the current

)lant specific setpoint analysis. T1e 24 month Frequency is 3ased on the need to perform this Surveillance under the conditions that apply during a plant outage and the potential for an unplanned transient if th3 Surveillance were performed with the reactor at power.

SR 3.3.5J This Surveillance ensures that the train actuation response times are within the maximum values assumed in the safety analyses.

. Response time testing acceptance criteria are included in Reference 9.

(continued)

SAN ON0FRE--UNIT 2 B 3.3-103a Amendment No. 127 09/10/90

l l

I ESFAS Instrumentation B 3.3.5 l

BASES i

l SURVEILLANCE ESF RESPONSE TIME tests are conducted on a STAGGERED TEST REQUIREMENTS BASIS of once every 24 months. The 24 month Frequency is (continued) consistent with the typical industry refueling cycle and is based upon plant operating experience, which shows that random failures of instrumentation components causing '

serious response time degradation, but not channel failure, are infrequent occurrences.

SR 3.3.5.7 i SR 3.3.5.7 is a CHANNEL FUNCTIONAL TEST similar to SR 3.3.5.2 and SR 3.3.5.3, except SR 3.3.5.7 is performed within 120 days prior to startup and is only applicable to bypass functions. Since the Pressurizer Pressure-Low '

bypass is identical for both the RPS and ESFAS, this is the l same Surveillance performed for the RPS in SR 3.3.1.13. j The CHANNEL FUNCTIONAL TEST for proper operation of the bypass permissives is critical during plant heatups because l the bypasses may be in place prior to entering MODE 3 but l l must be removed at the appropriate points during plant 1 l startup to enable the ESFAS Function. Consequently, just prior to startup is the approariate time to verify bypass l function OPERABILITY. Once t1e bypasses are removed, the bypasses must not fail in such a way that the associated i ESFAS Function is inappropriately bypassed. This feature is

! verified by SR 3.3.5.2. The allowance to conduct this test once within 120 days prior to each reactor startup is based i on a plant specific report based on the reliability analysis

! presented in topical report CEN-327, "RPS ESFAS Extended l Test Interval Evaluation" (Refs. 8 and 10 .

l l

REFERENCES 1. SONGS Units 2 and 3 UFSAR, Section 7.3. !

l l 2. 10 CFR 50, Appendix A. j i I

3. IEEE Standard 279-1971. I l 4. SONGS Units 2 and 3 UFSAR, Chapter 15.

l i

5. 10 CFR 50.49.

'6. PPS Setpoint Calculation CE-NPSD-570.

7. SONGS Units 2 and 3 UFSAR, Section 7.2.

(continued)

. SAN ON0FRE--UNIT 2 B 3.3-103b Amendment No. 127 09/10/08

,i.- . . _ - . . . ._

-.. ._ . . . _ . _ - _ ~ _ _ _ _ _ _ _ . _ . . __ ~ . . _ . _ _ _ _ _ _ _ . .

l l

ESFAS Instrumentation B 3.3.5 l ~ BASES REFERENCES 8. CEN-327, May 1986, including Supplement 1, March 1989.

(ccntinued)

9. LicenseeControlledSpecification3.3.10."RPS/ESFAS Response Times."

10. RPS/ESFAS Extended Test Interval Evaluation for 120 Days Staggered Testing at SONGS Units 2 and 3, Calculation Number 09/010-AS93-C-002, November 1993.

~117 'Riiidf6NSGT98I0'0712"Tiiiis!Oniitif6E[" RAS"bEEEF S?ChinNil

' j ndfjW"lApriB17 $9.9.8 T - ' " ' '" ~~~ ^ ~ ~ ~

I t

I l

l l

SAN ON0FRE--UNIT 2 B 3.3-103c Amendn.ent No. 127 09/18/98 l

[

t 1

i l

l l

t .

l l

r I

i

( Attachment H l Proposed Bases Pages (For Information Only) i 1 50NGS Unit 3 )

l I

i

, I l

i l

l 4

ESFAS instrumentation B 3.3.5 BASES ACTIONS Two Notes have been added to the ACTIONS. Note 1 has been (continued) added to clarify the application of the Completion Time rules. The Conditions of this Specification may be entered independently for each-Function. The Completion Time for the inoperable channel of a Function will be tracked separately for each Function starting from the time the Condition was entered for that Function. Note 2 was added to ensure review by the Onsite Review Committee is performed to discuss the-desirability of maintaining the channel in the bypassed condition.

A.1 and A.2 Condition A applies to the failure of a single channel of one or more input parameters in the following ESFAS Functions:

1. Safety Injection Actuation Signal Containment Pressure-High Pressurizer Pressure-Low

2. Containment Spray Actuation Signal Containment Pressure-High High Automatic SIAS

3. Containment Isolation Actuation Signal Containment Pressure-High

4. Main Steam Isolation Signal Steam Generator Pressure-Low S. Recirculatica Actuatica Signal Rcfueling 'o'ater Storage Tank Lcvel-6w Emergency Feedwater Actuation Signal SG #1 (EFAS-1) 6.

Steam Generator Level-Low SC Prcssurc Difference-tHsh Stcam Ocneratar Pressur e-tsw

7. Emergency Feedwater Actuation Signal SG #2 (EFAS-2)

Steam Generator Level-Low 50 Pressurc Difference-tH9h Steam Ccacratcr Pressure-tow (continued)

SAN ON0FRE--UNIT 3 8 3.3-95 Amendment No M 6

l l

ESFAS Instrumentation l B 3.3.5 l i l

BASES l

ACTIONS A.1 and A.2 (continued) l If one ESFAS channel is inoperable, startup or power l operation is allowed to continue, providing the inoperable !

l channel is l

Action A.1)placed in bypass or trip within 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months (Required l

l The Completion Time of 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months allotted to restore, bypass, or trip the channel is sufficient to allow the operator to !

take all appropriate actions for the failed channel and 1 still ensures that the risk involved in operating with the failed channel is acceptable.

The failed channel must be rcstored to OPERABLE status prior ,

to entering MODE 2 following the next MODE 5 entry. With a l channel bypassed, the coincidence logic is now in a j two-out-of-three configuration. In this configuration, common cause failure of dependent channels cannot prevent trip. The Completion Time of prior to entering MODE 2 '

f following the next MODE 5 entry is based on adequate channel to channel independence, which allows a two-out-of-three ;

channel operation, since,no single failure will cause or i prevent a reactor tr; pan ESFASfactuation. i In the event that Trip Channel Bypass condition is indeterminate for a channel function (i.e., the pushbutton is depressed but indication lights do not energize or the indication lights remain energized after the pushbutton is I released), the channel is conservatively assumed to be in Bypass and the provisions of this section apply. The

< pushbutton must be depressed to ensure the interlock with i other channels is in effect. The function is I administratively controlled to prevent operation of trip channel bypass for the same function in other channels.

In the event the channel does not actually go into Bypass when the pushbutton is depressed, the channel is free to process any trip channel, which is conservative. By having the channel in Bypass, even if the Bypass contacts do not close, the electrical interlock and administrative controls are implemented meeting the requirement to have an inoperable channel in Trip or Bypass. This prevents any

. Other channel from being put into Bypass, preserving the I

function's ability to trip with any other single channel failed.

(continued)

SAN ON0FRE--UNIT 3 B 3.3-96 Amendment No. 110 12/30/95

l ESFAS Instrumentation l B 3.3.5 )

i

~ BASES l l l

ACTIONS Bf N nF BI2

Of_(co.. n.t. i.n. s.."i.d).

u

.g .g g. . . g ., .

one/6bimove{ input!:parametepsMnithelfollowingiESFAS ~~ ~ '

functions; 11 '

RidiFc01Ali6nFXdI0stion!Sigdsli . _ -

Refueling (WaterJStorage)TankgeVeljlow.

2? EspgEndy$5s65fiE AEthAtid6ESIgnh17sd !#1Y( EFAS71).

' ' ' ~ ' ' ' ~ ~~~

SGl:PressureiDifference l

SGl:Pressuref Low ~ M'igh"'

l EmergsncyIFssdnis6AEfaAli6niSignA13G7(22(EFASE2)'

3l ^'

SG:{PressurejDifferenceiljigh SGPressureB1.ow

< Ifisnsishih6sliiflRW3TKevelM6W366EheTRASifdnilidn # os SG l

PressurelDifference-HighToriSGJ Press 0r.enlowiforf the:iEFAS ~

function 11sMnoperabledstartupioripower;o >erationlis . _

! al l owed itoi con ti nue n provi di ng itheli nopera )1 es channel si s l placedLinibypassWithin T houri (Rsquired?ActiontB.1) 8 For ^~

theseifunctionsWoperationswitkoneichanneljinitrip51s ~ ~

l undesirableiduestolthefconsequencesfoff a7spuriousstripe ,

l Withionelchannellinytripphesfunctio'nlis;i.n(a'one-outof-threetconfiguration andia9 sin ~~~

spuriousstri.pl ^ ' g' ' ~ " ~ glenfailuretcanEleadttota ' ~ " ~ ~ ~

l ThilC6sdistibn3Tisf6ffii}idupiall6ttsdJtbibjpissfop;Fest6Fe

theZchannel?is: psufficientStosa110w;.theroperatoritof take;all a ppropri ate:t ac t i on sifors the:(f ai l ed ic hanne10 a nd i s til l; en s ure s, that;;the(riskjinvolvedlinloperatinglwitMtheifailed[ channel' isfacceptable; Th'eEf ailidichindsn insi6 bs; rest 6fid if6TOPERABl.EHtaids? prior to tentering ; MODE 327 fol lowingithe 2nexti MODEt5(entryst. LWi thf a '

channelbbypasse.d8thetcoincidenceflogick.i sinowlin a _

po-outfof-three: configuration. 'Insthis* configuration;_

common causelfa11ure'ofEdependent<channelsycannott)revent trip M ThefCompletion1 Time;offprior4toientering'M0)E)2L

following!thetnext;MODEt5Lentrygisibasedton adequate: channel

( toj channeMindependence p whichfallowsraf two)out-of-threE~

channel 1: ope rat i on n s i nce3 no ;s i ngl e Maj l u reiwi l l icau s e t o r prevent)aniESFASlactuationt l-l

, (continued) i SAN ON0FRE--UNIT 3 B 3.3-97 Amendment No. 115 12/30/95 w- %. -. -- , _% . ,- g._y..,

ESFAS Instrumentation B 3.3.5 BASES ACTIO$ B71Mnd"Bi2 s l(coidindid).

InithEeientMhatiTripTChanne1[Bypasi:!

indeterminatedforia::channeltfunction::(fonditidnlis.. i'.e. ,4 the:'pushbu t. ton _

isdepressedbutfindication(1ights?do::not1 energize {orfthe i nd i c a ti on 411 gh t s':: remai n t:Lene rg i zed i a f t e r ? t he r pu s hbu t t onl: i s releasad)Sthe::channelsisiconservativelyiassumednto betin Bypass::andithelprovisionslofithisysection:applyt :The '

pushbutton"must/bejdepresseditotensure;thelinterlockiith other? channels 11s!LinLeffect E::Theifunction.is .

administratively! controlled l:to prsventioperatiof of^tfip channel ;; bypa s s jforithe ; s amelfunc t t on ;i.n i otherf channel st Iithe%vekthefi:E nnel sdsesi riotTid tbslly l goli ntoTBipa s s when the;pushbutton?isfdepressedi::nthe:channelidstfree to . ,

processyanyltriplchannel h whichSisiconservative n By h.aving thelchannelilini Bypassp eventifetheiBypassTcontacts':1do:not close;1the LelectricaixinterlocEand administrativeicontrols are : implemented (meeting thel requirement 3 to: havetan" L..f i noperabl e?: channel a i n; Bypas s & Th i s ; prevent s ! anyf other channel kfrom! being f put :(i nto! Bypass 6 preserving:1the functioni.sf abi..l.i_ty;_toitripf withf any :oth.er?. single;ch_annel -

CfL1 The Required Action is modified by a Note stating that LC0 3.0.4 is not applicable. The Note was added to allow the changing of MODES even though two channels are inoperable, with one channel bypassed and one tripped. In this configuration, the protection system is in a one-out-of-two logic, which is adequate to ensure that no random failure will prevent protection system operation.

Condition B applies.to the failure of two channels of one or more input parameters in the following ESFAS automatic trip Functions: '

1. Safety Injection Actuation Signal Containment Pressure-High Pressurizer Pressure-Low

2. Containment Spray Actuation Signal Containment Pressure-High High Automatic SIAS

3. Containment Isolation Actuation Signal Containment Pressure-High (continued)

SAN ON0FRE--UNIT 3 8 3.3-98 Amendment No. 115 12/30/95

ESFAS Instrumentation B 3.3.5 BASES ACTIONS C.1 and C.2 (continued)

4. Main Steam Isolation Signal Steam Generator Pressure-Low S. Rccirculatica Actuation Signal Refueling 'n'atcr Stcragc Tank Lcycl-bew l 6. Emergency Feedwater Actuation Signal SG #1 (EFAS-1)

Steam Generator Level-Low SC Prcssurc Differencc-Mgh Stcam Ccacratcr Pressure-bew

7. Emergency Feedwater Actuation Signal SG #2 (EFAS-2) ,

Steam Generator Level-Low l SC Pressurc Diffcccnte-Mgh i Steam Ocncratcr Prcssure-bew !

With two inoperable channels, power operation may continue, provided one inoperable channel is 31 aced in bypass and the other channel is placed in trip wit 11n 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months . With one channel of protective instrumentation bypassed, the ESFAS Function is in two-out-of-three logic in the bypassed input parameter, but with another channel failed, the ESFAS may be operating with a two-out-of-two logic. This is outside the assumptions made in the analyses and should be corrected.

To correct the problem, the second channel is placed in trip. This places the ESFAS Function in a one-out-of-two logic. If any of the other OPERABLE channels receives a trip signal, ESFAS actuation will occur.

One of the two inoperable channels will need to be restored to operable status prior to the next required CHANNEL FUNCTIONAL TEST because channel surveillance testing on an OPERABLE channel requires that the OPERABLE channel be placed in bypass. However, it is not possible to bypass more than one ESFAS channel, and placing a second channel in trip will result in an ESFAS actuation. Therefore, if one ESFAS channel, is in trip and a second channel is in bypass, a third inoperable channel would place the ur.it in LC0 3.0.3.

ILIEand'02 Tlief.Rsquir$df stionTishnsdifisdWaiNote s't'ating that .

LCOL 3;0.4?is:notiapplicable. 'The Note was Ladded ;to' allow thefchanginglof1M.00ESjevenithoughltwo channels;are (continued)

SAN ONOFRE--UNIT 3 B 3.3-99 Amendment No. 115 12/30/96 l

I l

l ESFAS Instrumentation I B 3.3.5 I 1

1 1

l l BASES

~

AC'TIONS Dli hfQ[(h~dhtlndid) a jgoggriblh7ilth?bheThhanns11:.bypasssdJ andione$trippsdl ~ LIn

!his(configuration;?theprotection1 system;;jsjin?a...._.m -

one-out-of-two11ogichwhich Listadequate?to'ensuresthat Lno ,

random; failure swillipreventf pr'otectionisystem .operatio'n. l Condi tiont D !appli eshtol the , f ail ure tofitwo t channel shof ?one~of m(reSi n pu t j pa ramete Es[i nit h eMol l..owi nf ES FASlau t oma t is at r.i p '

.Fu.nc t.io.ns ,

U 'R$di rc0l iiioiUAEfust i on/S i gnsl' RefuelinglWaterkStoragelTankf Livel d _OW L I 2] EmergendflFe$disiir diUsfi6n SGiPressure;Differe[ncesHigh[Sjgnal}SG31I(EFAS$11

~ ~ ~ ' ~~

SGj Pressufeylos M EnisFiiify{FlidsifsFJdiuillonTSl ' i SG? Pressure)DifferenceM' iighf "inaf 5G92[(EFASE2) l

! .SGlPfessurel lo f ~

l WithIli6XiH6piFibleTdni^nheliTosen:::apsfallo6Tninyirc6hiinnex

~

'rovidedfonedinoperabl fchanne sis blacedtinTbypass?andfthe p l other7channelli sfpl achd [inj t ri p7wi t 11 n ?1?houf M Wi t h lon e? ' l cha n nellof f p ro.t ec t.i v e? i ns t rume n t a ti o;nj byha s s edhth eJES FAS_ l Fu ncti on 11 s d nitwo;outiofit hree?1 og i cIi nllt h e:s bypas s ed2i npu t '

parame t er ? bu t ? wi th iano t he rJ cha n nel !f a i l ed $t he; ES FASimaytb..e. i opsratingdithMtW6;out of4tWollogi'cQThis71sYodtsidElthe i

assumptfonsimadelind hefinalysesiandcshouldibs!Lcorredted W I

Toscorr5ctstheipFoblemNtheYseco;ndion'iin? !channe131s#1alced?in atone-out-ofitw;o I

t ri p MT hi s ipl acesithe x ESFAS ! Fu'nct 1 og i c Ed I fla n9 ;of 4 the76ther20PERAB LEf chsnnel s7Fecei v es?a ~

.trjp2signalM ESFASfactua'ltioniwillioccurT ~ ~ ~ ~ ~ ~ '

Adif6diDMpfbilddFisildff?6f#Tdayi{fdRbieESI{6iGWifh .__

2:einoperableich~annelsF )In?thaTohe-outsofetwo configuration,-

a isi ngl eicha nnel %fa i l u Fef c anicaus e% s psr' iou ss t rip MFolrl RAS an.d: EFAS $functionsi:!/alsphpiousitpiscansl e'ad s to 3u.n.desi reabl e con s.equ encesidu ring [ce rt ai n; Desi g n;;;.Ba si.sl Ev en t s ;

i l ThhTd ajffiiss311dild pfoildisidperifi6halW1 exi b)) i tEf6 i brform aJrequirediCHANNEL1FUNCTIONAlfTESTJonfoneichannel l which11s? bypassed)?while::a.fsecond chsnneljisji.n;oper.able l an[jQtripped); "' ~ ^ ~ ~ ~ ' l f

i (continued)

SAN ON0FRE--UNIT 3 8 3.3-100 Amendment No. 110 12/30/05

ESFAS Instrumentation B 3.3.5

,4 BASES

$TIONS DiPERFiffG(EiiiiiniiEd)'

TREMasylitiatilsi RaisWiiMiiWuse^$ubl eTcse7diMag e .

f requency fasidi scussed si n?NSG !984007 ;jTime1 Limi t sfor[RASior EFASlCh,annelRn3Trjpl(RefefenceM1.)2 ~ " ~ ~ ~ ~

Xsi?EWiTFEd 4FMiEtiss75TERMC63f guriEisn!RIik Management 4Programf~isVimp~lementedninkthe;"eventEof ~ ~

Condition f

~~ ~~~~ ~ ~ ~ ~ ~ ~ ~ '

-EG.I. lG.2.1. and 'EG.2.2 Condition C applies to one automatic bypass removal channel I' inoperable. The 'only automatic bypass removal on an ESFAS is on the Pressurizer Pressure-Low signal. This by removal is shared with the RPS Pressurizer Pressure pass i Low bypass removal.

If the bypass removal channel for any operating bypass cannot be restored to OPERABLE status the associated ESFAS channel may be considered OPERABLE oniy if the bypass is not

! in effect. Otherwise, the affected ESFAS channel must be as in Conditions Atand i declared bypass eitherinoperable,d remove or the bypass removal ~lB, and the channel l

repaired. The Bases for the Required Actions and re CompletionTimesareconsistentwithConditionsAhnhutred 18.

FB.1 and VB.2 The Required Action is modified by a Note stating that LC0 3.0.4 is not applicable. The Notc was added to allow i the changing of MODES even though two channels are i

inoperable, with one channel bypassed and one tripped. In this configuration the protection system is in a one-out-of-two loa c, which is adequate to ensure that no random failure w1I prevent protection system operation.

L Condition fB applies to two inoperable automatic bypass removal channels. If the bypass removal channels for two operating the associated bypasses ESFAScannot channelbe may restored to OPERABLE be considered OPERABLE status,on ly if the bypass is not in effect. Otherwise, the affected ESFAS channels must be declared inoperable, as in Conditions Cta'ndtDB, and either the bypass removed or the bypass removal ^1hannel repaired. The-restoration of one affected bypassed automatic trip channel must be completed

, prior to the next CHANNEL FUNCTIONAL TEST or the plant must j- shut down per LC0 3.0.3, as explained in Conditions Cland-DB. Completion Times are consistent with Condition's~Ciand DB.

1 F

(continued) l SAN ONOFRE--UNIT 3 8 3.3-101 Amendment No. 115 12/30/95

l l

! ESFAS Instrumentation B 3.3.5 l BASES ACTIONS GE.1 and GE.2 (continued)

If the Required Actions and associated Completion Times of

, Condition A, CB, EG, or FB cannot be met for the Safety l Injection Actiiation Signil, Containment Spray Actuation Signal, Containment Isolation Actuation Signal, Main Steam Isolation Signali or Emergency Feedwater Actuation Signal, or 41 fit hel Rsqdi red fAitions i a'nd! As soci at'sFCompl etf65 Times l FEcannotibCmet?for;theEddspicy l oflCondi tioM B M

[chdwater Actuatica D den Sjgna o r;:l SG[ Pres su re lDi f tfe re;nce;t H i oNt he ?SG 7 Pressu re-Low Li nputz to s t he E Eme rgency Te edwa ter

~ ~ i ActbationTSignal,"the pl' ant n ust be^ brought' tdt MODE 'in

l. ~

l. which~th'e~LC0 does not apply. To achieve this status, the l plant must be brought to at least MODE 3 within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and

! to MODE 4 within 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months . The allowed Completion Times are

! reasonable, based on operating experience, to reach the

! recuired plant conditions from full power conditions in an i orcerly manner and without challenging plant systems. l I

r WF.1 and NF.2 If the Required Actions and associated Completion Times of ConditionBRDGEM6dFA,0,C,orDcannotbemetforthe Recirculation Actuation Signal, the plant must be brought to

a MODE in which the LC0 does not apply. to achieve this status, the plant must be brought to at least MODE 3 within 6 hours6.944444e-5 days 0.00167 hours 9.920635e-6 weeks 2.283e-6 months and MODE 5 within 36 hours4.166667e-4 days 0.01 hours 5.952381e-5 weeks 1.3698e-5 months . The allowed Completion Times are reasonable, based on operating experience, to l

! reach the required plant conditions in an orderly manner and without challenging plant systems.

I l SURVEILLANCE SR 3.3.5.1 REQUIREMENTS Performance of the CHANNEL CHECK once every 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months ensures that a gross failure of instrumentation has not occurred. A

CHANNEL CHECK is a comparison of the parameter indicated on l l one channel to a similar parameter on other channels. It is l based on the assumption that instrument channels monitoring l

the same parameter should read approximately the same value.

Significant deviations between instrument channels could be an indication of excessive instrument drift in one of the l channels or of something even more serious. CHANNEL CHECK i will detect gross channel failure; thus, it is key to verifying the instrumentation continues to operate properly between each CHANNEL CALIBRATION.

(continued)

SAN ON0FRE--UNIT 3 8 3.3-102 Amendment No. 110 12/30/96 i

l ESFAS Instrumentation B 3.3.5 l

BASES l

SURVEILLANCE Agreement criteria are determined by the plant staff based REQUIREMENTS on a combination of the channel instrument uncertainties, (continued) including indication and readability. If a channel is outside the match criteria, it may be an indication that the sensor or the signal processing equipment has drifted l outside its limit. If the channels are within the match ,

criteria, it is an indication that the channels are l OPERABLE.

l The Frequency, about once every shift, is based on operating i experience that demonstrates channel failure is rare. Thus,

, performance of the CHANNEL CHECK guarantees that undetected ;

overt channel failure is limited to 12 hours1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months . Since the '

probability of two random failures in redundant channels in any 12 hour1.388889e-4 days 0.00333 hours 1.984127e-5 weeks 4.566e-6 months period is low, the CHANNEL CHECK minimizes the chance of loss of protective function due to failure of redundant channels. The CHANNEL CHECK supplements less formal, but more frequent, checks of channel 0PERABILITY during normal operational use of displays associated with the LC0 required channels.

SR 3.3.5.2 and SR 3.3.5.3 A CHANNEL FUNCTIONAL TEST is performed every 30 days on a STAGGERED TEST BASIS for SR 3.3.5.2 to ensure the entire 4 channel will perform its intended function when needed. ;

LC0 3.3.5 Action A permits plant operation with one or more Functions with one automatic ESFAS trip channel inoperable j until MODE 2 entry following the next MODE 5 entry (provided i the Functional Unit is placed in bypass or trip). During l plant operation in that condition, CHANNEL FUNCTIONAL TESTS l on the inoperable Functions in that channel are not required I (SR 3.0.1), and n remains at 4, where n is the total number l of channels in the definition of STAGGERED TEST BASIS. i Therefore, tests on the affected Functions in the remaining !

3 channels may continue to be performed such that each channel is tested every 4 Surveillance Frequency intervals. 1 Discussions with the NRC Technical Specifications Branch on I this clarification are documented in Action Request 980601488-1.

The CHANNEL FUNCTIONAL TEST is part of an overla) ping test sequence similar to tnat employed in the RPS. T1is l sec uence, consisting of SR 3.3.5.2, SR 3.3.5.3, SR 3.3.6.1, I anc SR 3.3.6.2, tests the entire ESFAS from the bistable I input through the actuation of the individual subgroup (continued) l SAN ONOFRE--UNIT 3 B 3.3-103 Amendment No. 115 09/10/90 l l

l l

l ESFAS Instrumentation B 3.3.5 BASES SURVEILLANCE rel ays . These overlapping tests are described in i REQUIREMENTS Reference 1. SR 3.3.5.2 and SR 3.3.6.1 are normally l (continued) performed together and in conjunction with ESFAS testing. I SR 3.3.6.2 verifies that the subgroup relays are capable of l actuating their respective ESF components when de-energized. l SR 3.3.5.3 is performed every 120 days to verify ESFAS channel bypass removal function.

These tests verify that the ESFAS is capable of performing its intended function, from bistable input through the actuated components. SRs 3.3.6.1 and 3.3.6.2 are addressed ,

in LCO 3.3.6. SR 3.3.5.2 includes bistable tests. l l

A test signal is superimposed on the input in one channel at !

a time to verify that the bistable trips within the saecified tolerance around the setpoint. This is done with t1e affected PPS trip channel bypassed.

SR 3.3.5.4 and SR 3.3.5.5 )

l CHANNEL CALIBRATION is a complete check of the instrument channel including the sensor and the bypass removal functions, if applicable. The Surveillance verifies that the channel responds to a measured parameter within the necessary range and accuracy. CHANNEL CALIBRATION leaves the channel adjusted to account for instrument drift between successive calibrations to ensure that the channel remains operational between successive surveillances. Measurement error determination, setpoint error determination, and calibration adjustment must be performed consistent with the plant specific setpoint analysis. The channel shall be left calibrated consistent with the assum)tions of the current alant specific setpoint analysis. T1e 24 month Frequency is

)ased on the need to perform this Surveillance under the conditions that apply during a plant outage and the potential for an unplannea transient if the Surveillance were performed with the reactor at power. ;

SR 3.3.5.6 This Surveillance ensures that the train actuation response times are within the maximum values assumed in the safety analyses.

I Response time testing acceptance criteria are included in Reference 9.

(continued)

( SAN ON0FRE--UNIT 3 8 3.3-103a Amendment No. 110 09/10/90

ESFAS Instrumentation B 3.3.5 BASES SURVEILLANCE ESF RESPONSE TIME tests are conducted on a STAGGERED TEST REQUIREMENTS BASIS of once every 24 months. The 24 month Frequency is (continued) consistent with the typical industry refueling cycle and is based upon plant operating experience, which shows that random failures of instrumentation components causing serious response time degradation, but not channel failure, 4 are infrequent occurrences.

SR 3 LL2.

SR 3.3.5.7 is a CHANNEL FUNCTIONAL TEST similar to SR 3.3.5.2 and SR 3.3.5.3, except SR 3.3.5.7 is performed within 120 days prior to startup and is only applicable to bypass functions. Since the Pressurizer Pressure-Low bypass is identical for both the RPS and ESFAS, this is the same Surveillance performed for the RPS in SR 3.3.1.13.

The CHANNEL FUNCTIONAL TEST for proper operation of the bypass permissives is critical during plant heatups because the bypasses may be in place prior to entering MODE 3 but must be removed at the a >propriate points during plant startup to enable the ES:AS Function. Consequently,just prior to startup is the approariate time to verify bypass function OPERABILITY. Once tie bypasses are removed, the bypasses must not fail in such a way that the associated ESFAS Function is inappropriately bypassed. This feature is verified by SR 3.3.5.2. The allowance to conduct this test once within 120 days prior to each reactor startup is based on a plant specific report based on the reliability analysis presented in topical report CEN-327, "RPS/ESFAS Extended Test Interval Evaluation" (Refs. 8 and 10).

REFERENCES 1. SONGS Units 2 and 3 UFSAR, Section 7.3.

2. 10 CFR 50, Appendix A.

3. IEEE Standard 279-1971.

4. SONGS Units 2 and 3 UFSAR, Chapter 15.

5. 10 CFR 50.49,

6. PPS Setpoint Calculation CE-NPSD-570.

l 7. SONGS Units 2 and 3 UFSAR, Section 7.2.

(continued)

SAN ONOFRE--UNIT 3 B 3.3-103b Amendment No. 115 09/10/90

ESFAS Instrumentation B 3.3.5 BASES REFERENCES 8. CEN-327, May 1986, including Supplement 1, March 1989.

(continued)

9. LicenseeControlledSpecification3.3.10,"RPS/ESFAS Response Times."

10. RPS Days Staggered

/ESFASExtendedTestIntervalEvaluationfor120 Testing at SONGS Units 2 and 3, Calculation Number 09/010-AS93-C-002, November 1993.

l

11) 'R's pofENSGT981007lf"TimEOniifEforTR^'SioMEFASfChanh51 ^ ~ ^ ~ ~ '

l

ingripM! Aprilf17H1.9.98f ~~~~~~^ ' ~

l l

i l

1 1

L 4

St.N ON0FRE--UNIT 3 B 3.3-103c Amendment No. 115 09/10/90 y q- -

nn-, ,n-- --,

ML20198L621

Text

Navigation menu

Search