ML20206P512

From kanterella
Jump to navigation Jump to search
Proposed Tech Specs 3.5.2,3.6.2.1,3.7.1.2,3.7.3.1 & 3.7.4.1, Incorporating Changes to ESF Pump Testing
ML20206P512
Person / Time
Site: Millstone Dominion icon.png
Issue date: 01/04/1999
From:
NORTHEAST NUCLEAR ENERGY CO.
To:
Shared Package
ML20206P509 List:
References
NUDOCS 9901120122
Download: ML20206P512 (28)


Text

. - _ . .. .~-- - .. .- .. . .- .-

l

. Docket No. 50-336

! B17517 l

l l

1 ,

l Attachment 3 ,

l l Millstone Nuclear Power Station, Unit No. 2 Proposed Revision to Technical Specifications Engineered Safety Features Pump Testing l Marked Up Pages j l

l l

l l

i i

i

)

l l

January 1999 9901120122 990104 r PDR ADOCK 05000336-P PDR _

l

4 h _, .m

. SURVEILLANCE REOUIREMENTS t

~

4.5.2 Each ECCS subsystem shall be demonstrated OPERABLE: r

(

a. At least once per 31 days on a STAGGERED TEST BASIS by:
  • 1.

Verifying that each high-pressure safety injection puiap:

a) Starts automatically on a test signal.

b) Develons a differential pressure of. 2 1231 g on recirculation flow. ~

c) Operates for at least 15 minutes. F 2.

Verifying that each low-pressure safety injection pump:

a)~ Starts automatically on.a test signal.

b) Develops a differential pressure of 2 -M7---ps4- on

  • recirculation flow.

f c) Operates for at least 15 minutes.

/63fnd

3. Verifying that each charging pump:

a) Starts automatically on a test signal. -

b) Operates for at least 15 minutes.

4. Veri fying that each boric acid pump (when required  :

OPERABLE per Specification 3.5.2,_p l

a) ' Starts automatically on a test signal. <

b) Develops a discharge pressure of I 1 98 psig on recirculation flow. i c) Operates for at least 15 minutes.

5.

Verifying that upon a sump recirculation actuation signal, the containment sump isolation valves open.

6.

Cycling each testable, automatically operated valve through at least one complete cycle.

7. Veri fying the correct position for each manual valve not locked, sealed or otherwise secured in position.  !
8. Verifying the correct position for each remote or automatically operated valve.  ;

I

9. Verifying that each ECCS subsystem is aligned to receive i@
  • i electrical power from separate OPERABLE emergency busses. ~

MILLST0HE - UNIT 2 3/4 5-4 oo71 AmendmentNo.((,(([

l

. . . _ _ _ __ _ . _ _ . ~ _ _ _ _ _ . . _ _ _. .__.

7 .

' CONTAINMENT SYSTEMS

3/4.6.2 '

i DEPRESSURIZATION AND COOLING SYSTEMS

, CONTAINMENT SPRAY AND COOLING SYSTEMS l k' LIMITING CONDITION FOR OPERATION l

l 3.6.2.1 each cooling train consisting of two containment air re units, shall be OPERABLE. '

APPLICABILITY _: MODES 1, 2 and 3*. l ACTION _:

Inoperable Equipment i Required Action  ;

t

a. One containment a.1 I

spray train Restore the inoperable containment spray train to OPERABLE status within 7 days or be  !

b.

in HOT SHUTDOWN within the next 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />.

One containment b.1 cooling train Restore the inoperable containment cooling train to OPERABLE status within 7 days or be  ;

c. in HOT SHUTDOWN within the next 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />. (

) One containment c.1 spray train Restore the inoperable containment spray AND train or the inoperable containment cooling ,

i

)

One containment train to OPERABLE status within 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> or cooling train be in HOT SHUTDOWN within the next 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />. t

d. Two containment cooling trains d.1. Restore at least one inoperable containment cooling train to OPERABLE status within 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> or be in H0T SHUTDOWN within the next 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />.

l e. All other j combinations e.1 Enter LCO 3.0.3 immediately, l

SURVEILLANCE REQUIREMENTS l

l 4.6.2.1.1 Each containment spray train shall be demonstrated OPERABLE:

a. l At least once per 31 days on a STAGGERED TEST. BASIS by:

1.

Starting each spray pump from the control room, 2.

Verifying, that on recirculation flow, each spray pump develops a discharge pressure of 2 M4-ps+9,

) " ~

psid

[

  • The Containment pressurizer pressure Spray is < System 1750 psia. is not required to be OPERABLE in MODE 3 if MILLSTONE - UNIT 2 3/4 6-12 AmendmentNo.M/d

1 ..

unusuasy 26,-M i

+

PLANT $YSTEMS AUXILIARY FEE 0 WATER PUMPS '

_ LIMITING CONDITIONS FOR OPERATION i

3.7.1.2 At least three steam generator auxiliary . feedwater pumps OPERABLE with:

e shall b!

)

a. Two feedwater pumps ca of being powered I OPERABLE emergency busses,pable and from separate b.

One steam feedwater supply system. pump capable of being powered from an OPERABLE  !

APPLICABILITY: H0 DES 1, 2, and 3. I ACTION:

1 a.

' With one auxiliary feedwater pump inoperable, restore the required auxiliary feedwater puraps to OPERABLE status within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and in H)

SHUTDOWN within the following 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />.

! b.

With STANDBY twowithin auxiliary 6 feedwater hours pumps inoperable be in at least HOT following 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />. . and .in HOT SHUTDOWN within ~  !

the , (

c. With three auxiliary feedwater pumps inoperable, immediately initiate corrective action to restore at least oen auxilftry feedwater pump to OPERABLE status as soon as possibit.

an OPERATIONAL MODE or other specified cntry uito condition under provisions of . Specification auxiliary feedwater pumps inoperable.3.0.4 shall not be made with the three SURVEILLANCE REOUIREHENTS 4.7.1.2 Each auxiliary feedwater pump shali Le demonstrated OPERABLE:

a.

At least once per 31 days by:  !

i 1.

Starting each pump from the control room, i

2. Verifying that: i NVV fld a)

Each motor driven pump develops a disdarge pressure of 1 1070 p 4 on recirculation flow, and b)' gggyg /

The steam turbine driven pump develops a discharga pressure of 2 4000 pihon recirculation flow when the

secondary steam supply pressure is greater than 800 psig.

The provisions for entry into Hode of Specification

3. 4.0.4 are not applicable 4@*

t/39psid-r a h J p m,sycnud,m b A HILLSTONE - UNIT'2 3/4 7 4 Amendment No. fG. 7g an N/

. - . ~ - . . . . . _ . . - . ~ - - . _ - . - . - . _ - . _ _ . - . . _ _ - . - - . - . -

Augen --; ,1375 --

gN I PLANT SYSTEMS 3/4.7.3 REACTOR BUILDING CLOSED COOLING WATER SYSTEM LIMITING CONDITION FOR OPERATION

! 3.7.3.1 shall be OPERABLE.Two independent reactor building closed cooling water loops  !

APPLICABILITY
MODES 1, 2, 3 and 4.

i s i ACTION:

l I L

With one reactor building closed cooling water loop inoperable, restore i the inoperable loop to OPERABLE status within 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> or be in COLD SHUTDOWN within the next 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br />. 1 l

SURVEILLANCE REQUIREMENTS i

,+

i i 4. 7. 3.1 strated OPERABLE:

Each reactor building closed cooling water loop shall be demon-k) a.

i At lea'st once per 31 days on a STAGGERED TEST BASIS by: i t

1.

Starting (unless already operating) each pump from the control room, I l

2.

f Verifying that each pump develops at least 93% of the l di d.r;c pressure for the applicable flow rate as deter-(Mtaafal . mined from the manufacturer's pump Performance Curve.

3.

Verifying that each pump operates for at least 15 minutes, 4.

Verifying that each. loop is aligned to receive electrical power from separate OPERABLE emergency busses.

4 5.

Verifying correct position of all valves servicing safety related equipment that are not locked, sealed or otherwise secured in position, and i 6.

Exercising all automatically operated valves servicing safety related equipment and testable during plant operation.

b.

.( At least once per 18 months by exercising all power operated valves through one complete cycle of full travel.

~} MILLSTONE - UNIT 2 3/4 7-11

Y .

";22)%

, PLANT SYSTEMS l l

i 3/4.7.4 SERVICE WATER SYSTEM 1

,- )

yle, i LIMITING CONDI110N FOR OPERATION

(

3.7.4.1 Two independent service water loops shall be OPERABLE. 1 APPLICABILITY: MODES 1, 2, 3 and 4. I I

ACTION: i l With one service water loop inoperable, restore the inoperable loop to OPERABLE status within 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> or be in COLD SHUTDOWN within the next 36 hours.

)

I SURVEILLANCE REQUIREMENTS 1 l 4'.7.4.1 Each service water loop shall be demonstrated OPERABLE:

l l a.

i At least. once per 31 days on a STAGGERED TEST BASIS by:

1. .

Starting (unless already operating) each pump from the control room,

-)  ;

2. Verifying that each pump develops at least 93% of the CcdM"'**I ..._. .. pressure for the applicable flow rate as deter- i mined from the manufacturer's Pump Performance Curve.

3.

Verifying tha.t each pump operates for at least 15 minutes, <

4.

Verifying that each loop is aligned to receive electrical 1

power from separate OPERABLE emergency busses.

5.

Verifying correct position of all valves servicing safety related equipment that are not locked, sealed or other-wise secured in position, and 6.

Exercising all automatically operated valves servicing safety related equipment and testable during plant operation. '

L b.

[ At least once per 18 months

  • Except that;the surveillance requirement due no later than May 5, 1994, may be
) deferred until theisnext 1994, whichever refuelin'g outage, but no later than September 30, earlier.

MILLSTONE - UNIT 2 3/4 7-12 s

0123 4

AmendmentNo.((/

a 3/4.5 EMERGENCY CORE COOLING E SYSTEMS LECCSJ "

BASES

(

3/4.5.1 SAFETY INJECTION TANK _S (continued)_

within 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> hours. The and pressurizer pressure reduced to < 1750 psia within 12 experience, allowed to reach completion the required times plant are reasonable, condition from based full power on condit opera in an orderly manner and without challenging plant systems .

ons If more than accident one SIT is inoperable, the unit is analyses. l Therefore, LC0 3.0.3 must be entered immediately.in a co 3/4.5.2 and 3/4.5.3 ECCS SUBSYSTEMS _

The OPERABILITY of two separatensures and thatindepen n of a LOCA assuming consideration. the loss of one subsystem through any single fa injec ion tanksEither subsystem is capable operating of supplying in conjunction sufficient core with the cooling o limit the t safety  !

peak cladding temperatures within acceptable downward. reak pipe l

)

The ECCS leak rate surveillance requirements assure that +

the leakage rates assumed not for be exceeded. the system outside containment during the recirculation The Surveillance Requirements provided to ensure OPERABillTY each component of ensures met that and that at a minimum, subsystem the is OPERABILITY assumptions maintained. used in the accident s are analyse pump (s) have not degraded to a point where the accid adversely impacted.

e

-t-PWpumps dif ferentiel pressurc (-dischuga eee4rculaticu ece 1209 and 150 4uc4 ion}-when r g err-4he-Techtric al Spcci fic a t iuns 1si, rapeetMjr-Tha_ accept-anse-cLiter-ia--in uncertainties and de iit. were aMed upward Lu autuuni h tt-rument-

~ ._

TMERT HILLSTONE - UNIT 2 040tl 113/45-2 AmendmentNo.FJ,77,JE7,7J7,//%

. INSERT A - Paae B 3/4 5-2 The acceptance criteria for the HPSI pumps Technical Specification Surveillance Requirement (SR 4.5.2.a.1.b), a minimum pump recirculation flow test, was developed assuming a 5% degraded pump using the manufacturer curves. The associated accident analyses assume a HPSI flow that represents 5% degradation. Early delivery of HPSI pump flow, at high head conditions similar to those established when the pump is on recirculation flow, is an important assumption in the accident analyses. Flow measurement instrument inaccuracy has been accounted for in the design basis hydraulic analysis. Pressure measurement instrument inaccuracy will be accounted for in the acceptance criteria contained in the surveillance procedure for SR 4.5.2.a.1.b.

Pressure measurement instrument inaccuracy is not reflected in the Technical Specification acceptance criteria.

The acceptance criteria for the LPSI pumps Technical Specification Surveillance Requirement (SR 4.5.2.a.2.b) was developed assuming a 10% degraded pump from the actual pump curves. The associated accident analyses assume a LPSI flow that represents 10% degradation. For the limiting large break loss of coolant accident (LBLOCA) analysis case, the analysis does not credit LPSI flow following the safety injection actuation signal until after a time delay which simulates the time for the emergency diesel generators to start and load. After this delay, the Reactor Coolant System (RCS) has depressurized well below the shutoff head of the LPSI pumps. At this low RCS pressure, the operating point of the pumps is significantly greater than minimum recirculation flow. For boron precipitation control following a loss of coolant accident, the LPSI pump is credited with providing hot leg injection flow. The operating point for the LPSI pumps during hot leg injection is also greater than minimum recirculation flow. Flow measurement instrument inaccuracy has been accounted for in the design basis hydraulic analysis. Pressure measurement instrument inaccuracy will be applied and controlled by the surveillance procedures when verifying pump performance in the flow ranges credited in the accident analyses. No correction for pressure measurement instrument inaccuracy will be applied to minimum recirculation flow type test data since this portion of the curve is not credited in the accident analyses. Pressure measurement instrumentation inaccuracy is not reflected in either Technical Specification SR 4.5.2.a.2.b, or in the associated surveillance procedure.

r.

,. I CONTAINMENT SYSTEMS - hy-25, 1000- ,

i BASES '

3/4.6.2 DEpRESSURIZATION AND COOLING SYSTEMS 3/4.6.2.1 CONTAINMENT SPRAY AND COOLING SYSTEMS The OPERABILITY of the containment spray system ensures that contain-ment depressurization and cooling capability will be available in the event of a LOCA. The pressure reduction and resultant lower containment leakage rate are consistent with the assumptions used in the accident analyses. The leak rate surveillance requirements assure that the leakage assumed for the system outside containment during the recircula-tion phase will not be exceeded.

l

(

! The OPERABILITY of the containment cooling system ensures that 1) the containment air temperature will be maintained within limits during normal operation, and 2) adequate heat removal capacity is available when operated LOCA conditions.

in conjunction with the containment spray system during post- \

I To be OPERABLE, the two trains of the containment spray system shall be capable of taking a suction from the refueling water storage tank on a  !

containment spray actuation signal and automatically transferring suction to T the containment sump on a sump recirculation actuation signal. Each i l ) containment spray train flow path from the containment sump shall be via an OPERABLE shutdown cooling heat exchanger.

trains. The containment cooling system consists of two containment cooling Each containment cooling train has two containment air recirculation and cooling units. For the. purpose of applying the appropriate action i

l statement, the loss of a single containment air recirculation and cooling unit will make the respective containment cooling train inoperable.

Either the containment spray system or the containment cooling system has sufficient heat removal capability to handle any design basis accident.

However, the containment spray system is more effective in dealing with the superheated steam from a main steam break inside containment. Therefore, at l

least one train of containment spray is always required to be OPERABLE, when l pressurizer pressure is 1 1750 psia.

l 3/4.6.3 CONTAINMENT ISOLATION VALVES Qw.er a The Technical Requirements Manual contains the list of containment l

isolation valves (except the containment air lock and equipment hatch). Any changes to this list will be reviewed under 10CFR50.59 and approved by the Plant Operations Review Committee (PORC).

The OPERABILITY of the containment isolation valves ensures that the

! ) containment atmosphere will be isolated from the outside environment in j /

the phere event of a release ofofradioactive or pressurization the containment. material to the containment atmos-i Containment isolation within MILLSTONE - UNIT 2 B 3/4 6-3 Amendment No. , pf, 7Jp,

1 l -

\

l l

INSERT B - Paae B 3/4 6-3  !

l l

The Technical Specification Surveillance Requirements provided to ensure '

OPERABILITY of each component ensures that at a minimum, the assumptions used in i the accident analysis are met and that subsystem OPERABILITY is maintained. The l purpose of the containment spray pumps differential pressure test on recirculation, Surveillance Requirement 4.6.2.1.1.a.2, ensures that the pumps have not degraded to a point where the accident analysis would be adversely impacted The surveillance requirement acceptance criteria for the containment spray pumps was developed assuming a 5% degraded pump from the actual pump curves. Flow and pressure measurement instrument inaccuracies have been accounted for in the design basis ,

hydraulic analysis. It is not necessary to account for either flow or pressure measure '

instrument inaccuracy in the acceptance criteria contained in the surveillance procedure. Flow and pressure measurement instrument inaccuracies are already reflected in the Technical Specification acceptance criteria.

l l

l l

l

. .- - _ --. . - . = . - - - - - .-_ - -- - .

t'Ovcsabcr 13,1337 PLART SYSTEMS RARFt

(

I 3/4.7.1.2 AUX 1LIARY FEEDWATER PUMPS The OPERABILITY of the auxiliary feedwater pumps ensures that the Reactor Coolant System can be cooled down to less than 300*F from normal operating c.onditions in the event of a total loss of off-site power.

Any single motor driven or steam driven pump has the required capacity to provide sufficient feedwater flow to remove reactor decay '

heat and reduce the RCS temperature to 300*F where the shutdown cooling system may be placed into operation for continued cooldown.

3/4.7.1.3 CONDENSATE STORAGE TANK The OPERABILITY of the condensate storage tank with the minimum water volume ensures that sufficient water is available for cooldown of

) the Reactor Coolant System to less than 300*F in the event of a total loss of off-site power. The minimum water volume is sufficient to

/.

maintain discharge totheatmosphere.

RCS at HOT STANDBY conditions f.or 10 hours1.157407e-4 days <br />0.00278 hours <br />1.653439e-5 weeks <br />3.805e-6 months <br /> with steam

~

\._ _

3/4.7.1.4 ACTIVITY The limitations on secondary system specific activity ensure that the resultant off-sito rrdiation dose will be limi;ed to a small fraction l

)

MittST0HE - UNIT 2 B 3/4 7-2 Amendment No. 57, FJ, J7 '

0323 8

t *

  • JB INSERT C - Pace B 3/4 7-2 The Technical Specification Surveillance Requirements provided to ensure OPERABILITY of each component ensures that at a minimum, the assumptions used in the accident analysis are met and that subsystem OPERABILITY is maintained. The purpose of the auxiliary feedwater pumps differential pressure tests on recirculation, Surveillance Requirements 4.7.1.2.a.2.a and 4.7.1.2.a.2.b, is to ensure that the pumps have not degraded to a point where the accident analysis would be adversely impacted. The surveillance requirement acceptance criteria for the auxiliary feedwater pumps was developed assuming a 5% degraded pump from the actual pump curves.

l The surveillance requirement acceptance criteria for the turbine driven auxiliary l feedwater pump can be adjusted to account for the affect on pump performance of variations in pump speed. Flow and pressure measurement instrument inaccuracies have not been accounted for in the design basis hydraulic analysis for the motor driven auxiliary feedwater pumps. Flow, pressure, and speed measurement instrument inaccuracies have not been accounted for in the design basis hydraulic analysis for the turbine driven auxiliary feedwater pump. Corrections for flow, pressure, and speed l (turbine driven pump only) measurement instrument inaccuracies will be applied to test l data taken when verifying pump performance in the flow ranges credited in the accident I analyses. No corrections for flow, pressure, and speed (turbine driven pump only) measurement instrument inaccuracies will be applied to minimum recirculation flow type test data since this portion of the curve is not credited in the accident analyses.

Corrections for flow, pressure, and speed (turbine driven pump only) measurement

instrument inaccuracies are not reflected in the Technical Specification acceptance
criteria.

l l

l PLANT SYSTEMS

% " 21' 1999 BASES f

a feedwater isolation signal since credits them in prevention of feed line volume flashing in some casesth the block valves are not credited with isolation, they red .

Sincenot requi are operate valves are as fast as the isolation valves although equal response times specified. to MSI signal, Feedwater pumps are assumed to trip immediately with an i 3/4.7.2 ,

STEAM GENERATOR PRESSURE / TEMPERATURE LIMITATION l The limitation on steam generator ,

that the pressure induced stresses in thepressure and temperature ensures the70*F maximum allowable fracture toughness stress steam generators do not exceed of limits. The limitations and are sufficient to prevent brittle fracture.and of 50*F 200-psig are bas 3/4.7.3 REACTOR BUllDING CLOSED COOLING WATER SYSTEM The OPERABillTY of the reactor building closed cooling water system i

of vital accident components and Engineered Safety Feature conditions.

a single failure, is consistent with the assumptions usedThe redundan! l

) analyses.

in the accident /

\

SUSEg T D l

l a

MILLSTONE - UNIT 2 0359 B 3/4 7-3a AmendmentNo.//[]

i 1%

- INSERT D - Paae B 3/4 7-3a The Technical Specification Surveillance Requirements provided to ensure OPERABILITY of each component ensures that at a minimum, the assumptions used in

! the accident analysis are met and that subsystem OPERABILITY is maintained. The purpose of the reactor building closed cooling water pumps differential pressure test, Surveillance Requirement 4.7.3.1.a.2, a substantial flow test, is to ensure that the j pumps have not degraded to a point where the accident analysis would be adversely )

impacted. The surveillance requirement acceptance criteria for the reactor building '

closed cooling water pumps was developed assuming a 7% degraded pump from the I actual pump curves. Flow measurement instrument inaccuracy for the reactor building  !

closed cooling water pumps has been accounted for in the design basis hydraulic analysis. Pressure measurement instrument inaccuracy for the reactor building closed cooling water pump 3 is accounted for in the acceptance criteria contained in the surveillance procedure.

)

1 l

i l

!p .

!A 4 --Augeg i

PLANT SYSTEMS BASES l -

2

, 3/4.7.4 SERVICE WATER SYSTEM

\'

.The OPERABILITY of the service water system ensures t cooling capacity is available for continued operation of vital and Engineered Safety Feature equipment during ditions. normal components ent con-and acc, single failure, is consistent with the assumptions analyses.

ccident u!

3/4.7.5 FLOOD LEVEL to an elevation of 22 feet.The service water pump motors are nor or if a severe storm is approaching the plant site, one serv motor will be protected against flooding to a minimum a er elevati pump i g ensure the reactor. that this pump will continue to be capable on ofof 28removing feet to de

/

cay heat from i

action reaches plant tograde provide level. pump motor protection will be ure initia

(

e water level 3/4.7.6 CONTROL ROOM EMERGENCY VENTILATION SYSTEM ensures that 1) the ambient air temperature for continuous duty rating for the equipmeowable temperature s em t -

doe cooled by this system and 2) the control nroom wille remain and instrumentation habitab operations personnel during and following all credible accide t for i

The OPERABILITY of this system in conjunction with cont n conditions.

rol room design provisions is based on limiting ,the radiation expos re to personnel or its equivalent.

This Criteria limitation is consistent 10 of Appendix "A",

with the requirements of G 10 CFR 50. . eneral Design i

i

)

MILLSTONE - UNIT 2 B 3/4 7-4 l

l

_ _ - _- . -- = - _- - . - - -._--- _- -

, tf a e'

INSERT E - Paae B 3/4 7-4 The Technical Specification Surveillance Requirements provided to ensure

OPERABILITY of each component ensures that at a minimum, the assumptions used in l the accident analysis are met and that subsystem OPERABILITY is maintained. The purpose of the service water pumps differential pressure test, Surveillance l Requirement 4.7.4.1.a.2, a substantial flow test, is to ensure that the pumps have not degraded to a point where the accident analysis would be adversely impacted. The surveillance requirement acceptance criteria for the service water pumps was l developed assuming a 7% degraded pump frorn the actual pump curves. Flow and pressure measurement instrument inaccuracies for the service water pumps have been accounted for in the design basis hydraulic analysis. It is not necessary to account for l flow and pressure measurement instrument inaccuracies in the acceptance criteria )

l contained in the surveillance procedure. I l

l l

l l

i e

t

..n--- - ,,

Docket No. 50-336

. B17517 ll i

l Attachment 4 I Millstone Nuclear Power Station, Unit No. 2 Proposed Revision to Technical Specifications Engineered Safety Features Pump Testing Retyped Pages l

January 1999 P

l l

l

e o ENERGENCY CORE COOLING SYSTENS SURVEILLANCE REQUIRENENTS

, i 4 .' 5. 2 Each ECCS subsystem shall be demonstrated OPERABLE:

a. At least once per 31 days on a STAGGERED TEST BASIS by: 1
1. Verifying that each high-pressure safety injection pump:

a) Starts automatically on a test signal, b) Develops a differential pressure of 2 1193 psid on l recirculation flow.

c) Operates for at least 15 minutes.

2. Verifying that each low-pressure safety injection pump:

a) Starts automatically on a test signal.  !

1 b) Develops a differential pressure of 2163 psid on [

recirculation flow.

c) Operates for at least 15 minutes. 1

3. Verifying that each charging pump:

a) Starts automatically on a test signal.

b) Operates for at least 15 minutes. 1 l

4. Verifying that each boric acid pump (when required OPERABLE per Specification 3.5.2.d):

a) Starts automatically on a test signal, b) Develops a discharge pressure of 2 98 psig on recirculation  ;

fl ow. '

c) Operates for at least 15 minutes.

5. Verifying that upon a sump recirculation actuation signal, the containment sump isolation valves open.
6. Cycling each testable, automatically operated valve through at least one complete cycle.
7. Verifying the correct position for each manual valve not locked, sealed or otherwise secured in position.
8. Verifying the correct position for each remote or automatically operated valve.
9. Verifying that each ECCS subsystem is aligned to receive electrical power from separate OPERABLE emergency busses.

MILLSTONE - UNIT 2 3/4 5-4 Amendment No. J/, JJJ 0011

I CONTAINMENT SYSTEMS 3/4.6.2 DEPRESSURIZATION AND COOLING SYSTEMS

\ b i

! CONTAINMENT SPRAY AND COOLING SYSTEMS l.IMITING CONDITION FOR OPERATION 3.6.2.1 Two containment spray trains and two containment cooling trains, with each cooling train consisting of two containment air recirculation and cooling units, shall be OPERABLE.

l l APPLICABILITY: MODES 1, 2 and 3*.

ACTION:

1 Inoperable Equipment Required Action

a. One containment spray train a.1 Restore the inoperable containment spray train to OPERABLE status within 7 days or be in HOT SHUTDOWN within the next 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />.
b. One containment b.1 Restore the inoperable containment cooling cooling train train to OPERABLE status within 7 days or be in HOT SHUTDOWN within the next 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />.
c. One containment c.1 Restore the inoperable containment spray l spray train l train or the inoperable containment cooling AND train to OPERABLE status within 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> or One containment be in HOT SHUTDOWN within the next 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />.

cooling train

d. Two containment d.1 Restore at least one inoperable containment cooling trains cooling train to OPERABLE status within 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> or be in HOT SHUTDOWN within the next 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />.
e. All other e.1 Enter LC0 3.0.3 immediately.

combinations SURVEILLANCE REQUIREMENTS 4.6.2.1.1 Each containment spray train shall be demonstrated OPERABLE:

a. At least once per 31 days on a STAGGERED TEST BASIS by:
1. Starting each spray pump from the control room,
2. Verifying, that on recirculation flow, each spray pump develops a differential pressure of 2 232 psid, l l

pressurizer pressure is < 1750 psia.

MILLSTONE - UNIT 2 3/4 6-12 Amendment No. Uji 0612

L* PLANT SYSTEMS AUXILIARY FEEDWATER PUMPS LIMITING CONDITION FOR OPERATION 3.7.1.2 At least three steam generator auxiliary feedwater pumps shall be OPERABLE with:

l l

a. Two feedwater pumps capable of being powered from separate OPERABLE emergency busses, and
b. One feedwater pump capable of being powered from an OPERABLE steam supply system.

l APPLICABILITY: MODES 1, 2 and 3.

, ACTION:

a. With one auxiliary feedwater pump inoperable, restore the required auxiliary feedwater pumps to OPERABLE status within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> or be 7

' in at least HOT STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and in HOT SHUTDOWN within the following 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />. I

b. With two auxiliary feedwater pumps inoperable be in at least HOT l l

STANDBY within 6~ hours and in H0T SHUTDOWN within the l following 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />.

c. With three auxiliary feedwater pumps inoperable, immediately initiate corrective action to restore at least one auxiliary j feedwater pump to OPERABLE status as soon as possible. Entry into t an OPERATIONAL MODE or other specified condition under the provisions of Specification 3.0.4 shall not be made with three auxiliary feedwater pumps inoperable.

SURVEILLANCE'RE0VIREMENTS i

4.7.1.2 Each auxiliary feedwater pump shall be demonstrated OPERABLE:

a. At least once per 31 days by:
1. Starting each pump from the control room, i
2. Verifying that: i a) Each motor driven pump develops a differential pressure ,

of 21144 psid on recirculation flow, and b) The steam turbine driven pump develops a differential pressure of 21134 psid, corrected to rated pump speed, on recirculation flow when the secondary steam supply pressure is greater than 800 psig. The provisions of Specification 4.0.4 are not applicable for entry into 1 Mode 3.

NILLSTONE - UNIT 2 3/4 7-4 Amendment No. JJ, 77, pp, JJJ, 0613'

,g, .

) PLANT SYSTEMS 3/4.7.3 REACTOR BUILDING CLOSED COOLING WATER SYSTEM i LINITING CONDITION FOR OPERATION 3.7.3.1 Two independent reactor building closed cooling water loops shall be OPERABLE.

APPLICABILITY: MODES 1, 2, 3 and 4.

ACTION:

With one reactor building closed cooling water loop inoperable, restore the inoperable loop to OPERABLE status within 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> or be in COLD SHUTDOWN within the next 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br />.

SURVEILLANCE REQUIREMENTS 4.7.3.1 Each reactor building closed cooling water loop shall be demon-strated OPERABLE:

l

a. At least once per 31 days on a STAGGERED TEST BASIS by:
1. Starting (unless already operating) each pump from the Control room, Verifying that each pump develops at least 93% of the differential pressure for the applicable flow rate as 1

I  !

determined from the manufacturer's Pump Performance Curve.

3. Verifying that each pump operates for at least 15 minutes,
4. Verifying that each loop is aligned to receive electrical ,

power from separate OPERABLE emergency busses.  !

5. Verifying correct position of all valves servicing safety l related equipment that are not locked, sealed or otherwise secured in position, and
6. Exercising all automatically operated valves servicing safety related equipment and testable during plant l operation.

r l b. At least once 'per 18 months by exercising all power operated valves through one complete cycle of full travel.

d NILLSTONE - UNIT 2 3/4 7-11 Amendment No.

! NB14 l

I t

)

PLANT SYSTENS '

3/4.7.4 SERVICE WATER SYSTEN LINITING CONDITION FOR OPERATION 3.7.4.1 Two independent service water loops shall be OPERABLE.

APPLICABILITY: MODES 1, 2, 3 and 4.

ACTION:

With one service water loop inoperable, restore the inoperable loop to OPERABLE status within 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> or be in COLD SHUTDOWN within the next 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br />.

SURVEILLANCE REQUIRENENTS 4.7.4.1 Each service water loop shall be demonstrated OPERABLE:

a. At least once per 31 days on a STAGGERED TEST BASIS by:
1. Starting (unless already operating) each pump from the control room,
2. Verifying that each pump develops at least 93% of the differential pressure for the applicable flow rate as l determined from the manufacturer's Pump Performance Curve.
3. Verifying that each pump operates for at least 15 minutes,
4. Verifying that each loop is alipaed to receive electrical power from separate OPERABLE energency busses.
5. Verifying correct position of oil valvos servicing safety related equipment that are not loc's ea, sealed or other-wise secured in position, and
6. Exercising all automatically operated valves servicing safety related equipment and testable during plant operation.
b. At least once per 18 months
  • Except that the surveillance requirement due no later than May 5,1994, may be deferred until the next refueling outage, but no later than September 30, 1994, whichever is earlier.

NILLSTONE - UNIT 2 3/4 7-12 0614 Amendment No. J77 1

l . - _ _ _ - . . - _ _ _ - . _

I

J3 s .

3/4.5 EMERGENCY CORE COOLING SYSTEMS (ECCSI d

BASES w

3/4.5.1 SAFETY INJECTION TANKS fcontinued) within 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and pressurizer pressure reduced to < 1750 psia within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />. The allowed completion times are reasonable, based on operating experience, to reach the required plant condition from full power conditions in an orderly manner and without challenging plant systems.

If more than one SIT is inoperable, the unit is in a condition outside the accident analyses. Therefore, LC0 3.0.3 must be entered immediately.

3/4.5.2 and 3/4.5.3 ECCS SUBSYSTEMS The OPERABILITY of two separate and independent ECCS subsystems ensures that sufficient emergency core cooling capability will be available in the event of a LOCA assuming the loss of one subsystem through any single failure consideration. Either subsystem operating in conjunction with the safety injection tanks is capable of supplying sufficient core cooling to limit the peak cladding temperatures within acceptable limits for all postulated break sizes ranging from the double ended break of the largest RCS cold leg pipe downward.

The ECCS leak rate surveillance requirements assure that the leakage rates assumed for the system outside containment during the recirculation phase will not be exceeded.

The Surveillance Requirements provided to ensure OPERABILITY of each component ensures that at a minimum, the assumptions used in the accident analyses are met and that subsystem OPERABILITY is maintained. The purpose of the HPSI and LPSI pumps differential pressure test on recirculation ensures that the

pump (s) have not degraded to a point where the accident analysis would be adversely impacted.

The acceptance criteria for the HPSI pumps Technical Specification Surveillance Requirement (SR 4. 5. 2. a J. . b) , a minimum pump recirculation flow test, was developed assuming a 5% degraded pump using the manufacturer curves. The associated accident analyses assume a HPSI flow that represents 5% degradation. Early delivery of HPSI pump flow, at high head conditions similar to those established when the pump is on recirculation flow, is an important assumption in the accident analyses. Flow measurement instrument ,

inaccuracy has been accounted for in the design basis hydraulic analysis.

Pressure measurement instrument inaccuracy will ue accounted for in the l

acceptance criteria contained in the surveillance procedure for <

SR 4.5.2.a.1.b. Pressure measurement instrument inaccuracy is not reflected in the Technical Specification acceptance criteria.

The acceptance criteria for the LPSI pumps Technical Specification Surveillance Requirement (SR 4.5.2.a.2.b) was developed assuming a 10%

degraded pump from the actual pump curves. The associated accident analyses

. assume a LPSI flow that represents 10% degradation. For the limiting large i

MILLSTONE - UNIT 2 oen B 3/4 5-2 Amendment No. JJ, 77, M , 7/7, 179, l

i EMERGENCY CORE COOLING SYSTEMS 2

BASES br,eak loss of coolant accident (LBLOCA) analysis case, the analysis does not credit LPSI flow following the safety injection actuation signal until after a time celay which simulates the time for the emergency diesel generators to I

start and load. After this delay, the Reactor Coolant System (RCS) has

! depressurized well below the shutoff head of the LPSI pumps. At this low RCS l pressure, the oper'.cing point of the pumps is significantly greater than i minimum recirculation flow. For boron precipitation control following a loss

' of coolant accident, the LPSI pump is credited with providing hot leg injection fl ow.

The operating point for the LPSI pumps during hot leg injection is also greater than minimum recirculation flow. Flow measurement i instrument inaccuracy has been accounted for in the design basis hydraulic analysis. Pressure measurement instrument inaccuracy will be applied and I

controlled by the surveillance procedures when verifying pump performance in

' the flow ranges credited in the accident analyses. No correction for pressure i

measurement instrument inaccuracy will be applied to minimum recirculation flow type test data since this portion of the curva is not credited in the accident analyses. Pressure measurement instrumentation inaccuracy is not reflected in either Technical Specification 3R 4.5.2.a.2.b, or in the associated surveillance procedure.

l The purpose of the ECCS throttle valve surveillance requirements is to provide i assurance that proper ECCS flows will be maintained in the event of a LOCA.

I Maintenance of proper flow resistance and pressure drop in the piping system to each injection point is necessary to: (1) prevent total pump flow from exceeding runout conditions when the system is in its minimum resistance configuration, (2) provide the proper flow split between injection points in accordance with the assumptions used in the ECCS-LOCA analyses, and (3) provide an acceptable level of total ECCS flow to all injection points equal to or above that assumed in the ECCS-LOCA analyses.

Verification of the correct position for the mechanical and/or electrical valve stops can be performed by either of the following methods:

1. Visuallly verify the valve opens to the designated throttled position; or l 2. Manually position the valve to the designated throttled position and verify that the valve does not move when the applicable valve control switch is placed to "0 PEN."

In MODE 4 the automatic safety injection signal generated by low pressurizer pressure and high containment pressure and the automatic sump recirculation i

actuation signal generation by low refueling water storage tank level are not required to be OPERABLE. Automatic actuation in MODE 4 is not required because adequate time is available for plant operators to evaluate plant conditions and respond by manually operating engineered safety features components. Since the manual actuation (trip pushbuttons) portion of the safety injection and sump recirculation actuation signal generation is required to be OPERABLE in MODE 4, the plant operators can use the manual trip pushbuttons to rapidly position all components to the required accident MILLSTONE - UNIT 2 B 3/4 5-2a Amendment No. JJ, JJ7, Jp), 7J),

onts 777. EJE. 779.

l

- - . -~ . - - . --. - -. - - _ _ . -

+J

  • g s.

, CONTAINMENT SYSTEMS C

BASES l

3/4.6.2 DEPRESSURIZATION AND COOLING SYSTEMS l 3/4.6.2.1 CONTAINMENT SPRAY AND COOLING SYSTEMS l The OPERABILITY of the containment spray system ensures that contain-ment depressurization and cooling capability will be available in the event of a LOCA. The pressure reduction and resultant lower containment leakage rate are consistent with the assumptions used in the accident analyses. The leak rate surveillance requirements assure that the leakage assumed for the system outside containment during the recircula-tion phase will not be exceeded.

The OPERABILITY of the containment cooling system ensures that

1) the containment air temperature will be maintained within limits during normal operation, and 2) adequate heat removal capacity is available when operated in conjunction with the containment spray system during post-LOCA conditions.

i To be OPERABLE, the two trains of the containment spray system shall be capable of taking a suction from the refueling water storage tank on a containment spray actuation signal and automatically transferring suction to  !

the containment sump on a sump recirculation actuation signal. Each '

containment spray train flow path from the containment sump shall be via an l OPERABLE shutdown cooling heat exchanger.

{

l The containment cooling system consists of two containment cooling i

! trains. Each containment cooling train has two containment air recirculation and cooling units. For the purpose of applying the appropriate action statement, the loss of a single containment air recirculation and cooling unit

will make the respective containment cooling train inoperable.

4 Either the containment spray system or the containment cooling system has sufficient heat removal capability to handle any design basis accident. '

However, the containment spray system is more effective in dealing with the superheated steam from a main steam break inside containment. Therefore, at  !

! least one train of containment spray is always required to be OPERABLE, when l pressurizer pressure 12 2 1750 psia. i The Technical Specification Surveillance Requirements provided to ensure  !

OPERABILITY of each component ensures that at a minimum, the assumptions used  :

l in the accident analysis are met and the subsystem OPERABILITY is maintained.

The purpose of the containment spray pumps differential pressure test on i i recirculation, Surveillance Requirement 4.6.1.1.a.2, ensures that the pumps have not degraded to a point where the accident analysis would be adversely impacted. The surveillance requirement acceptance criteria for the containment spray pumps was developed assuming a 5% degraded pump from the actual pump curves. Flow and pressure measurement instrument inaccuracies have been accounted for in the design basis hydraulic analysis. It is not necessary to account for either flow or pressure measure instrument inaccuracy i

in the acceptance criteria contained in the surveillance procedure. Flow and pressure measurement instrument inaccuracies are already reflected in the Technical Specification acceptance criteria. l 1

MILLSTONE - UNIT 2 B 3/4 6-3 Amendment No. 7), JJ, 7Jp, 7J),

0616 i

A -  ;

8 PLANT SYSTENS I BASES

, 3/4.7.1.2 AUXILIARY FEEDWATER PUMPS The OPERABILITY of the auxiliary feedwater pumps ensures that the

! Reactor Coolant System can be cooled down to less than 300 F from normal ,

operating conditions in the event of a total loss of off-site power. i 1

\

Any single motor driven or steam driven pump has the required capacity  ;

to provide sufficient feedwater flow to remove reactor decay  :

heat and reduce the RCS temperature to 300"F where the shutdown l cooling system may be placed into operation for continued cooldown. l The Technical Specification Surveillance Requirements provided to ensure OPFRABILITY of each component ensures that at a minimum, the assumptions used in the accident analysis are met and that subsystem OPERABILITY is maintained. The purpose of the auxiliary feedwater pumps differential pressure tests on recirculation, Surveillance Requirements 4.7.1.2.a.2.a and 4.7.1.2. a.2.b, is to ensure that the pumps have not degraded to a point where the accident analysis would be adversely impacted.

The surveillance requirement acceptance criteria for the auxiliary feedwater t

pumps was developed assuming a 5% degraded pump from the actual pump curves.

The surveillance requirement acceptance criteria for the turbine driven auxiliary feedwater pump can be adjusted to account for the affect on pump i

l performance of variations in pump speed. Flow and pressure n.easurement instrument inaccuracies have not been accounted for in the design basis hydraulic analysis for the motor driven auxiliary feedwater pumps. Flow, pressure, and speed measurement instrument inaccuracies have not been accounted for in the design basis hydraulic analysis for the turbine driven auxiliary feedwater pump. Corrections for fl ow, pressure, and speed '

i (turbine driven pump only) measurement instrument inaccuracies will be applied to test data taken when verifying pump performance in the flow ranges credited in the accident analyses. No corrections for fl ow, pressure, and speed (turbine driven pump only) measurement instrument inaccuracies will be applied to minimum recirculation finw type test data since this portion of the curve is not credited in the accident analyses.

Corrections for fl ow, pressure, and speed (turbine driven pump only) measurement instrument inaccuracies are not reflected in the Technical Specification acceptance criteria.

3/4.7.l.3 CONDENSATE STORAGE TANK The OPERABILITY of the condensate storage tank with the minimum water volume ensures that sufficient water is available for cooldown of l the Reactor Coolant System to less than 300*F in the event of a total loss of off-site power. The minimum water volume is sufficient to maintain the RCS at HOT STANDBY conditions for 10 hours1.157407e-4 days <br />0.00278 hours <br />1.653439e-5 weeks <br />3.805e-6 months <br /> with steam discharge to atmosphere. '

! 3/4.7.1.4 ACTIVITY t

The limitations on secondary system specific activity ensure that the resultant off-site radiation dose will be limited to a small fraction NI LSTONE - UNIT 2 B 3/4 7-2 Amendment No. 77, JJ, 77, 7/J l

p ~

s s PLANT SYSTENS l

BASES i a feedwater isolation signal since the steam line break accident analysis credits them in prevention of feed line volume flashing in some cases. Since the block valves are not credited with isolation, they are not required to operate as fast as the isolation valves although equal response times for all i

valves are specified. Feedwater pumps are assumed to trip immediately with an MSI signal.

3/4.7.2 STEAM GENERATOR PRESSU'lE/ TEMPERATURE LIMITATION The limitation on steam generator pressure and temperature ensures l that the pressure induced stresses in the steam generators do not exceed

the maximum allowable fracture toughness stress limits. The limitations i of 70*F and 200-psig are based on a steam generator RTuoy of 50*F l

! and are sufficient to prevent brittle fracture.

3/4.7.3 REACTOR BUllDING CLOSED COOLING WATER SYSTEM i

1 The OPERABILITY of the reactor building closed cooling water system '

ensures that sufficient cooling capacity is available for continued operation i

)

' of vital components and Engineered Safety Feature equipment during normal and accident conditions. The redundant cooling capacity of this system, assuming a single failure, is consistent with the assumptions used in the accident j analyses.

The Technical Specification Surveillance Requirements provided to ensure OPERABILITY of each component ensures that at a minimum, the assumptions used I in the accident analysis are met and that subsystem OPERABILITY is maintained.

The purpose of the reactor building closed cooling water pumps differential pressure test, Surveillance Requirement 4.7.3.1.a.2, a substantial flow test, is to ensure that the pumps have not degraded to a point where the accident -

analysis would be adversely impacted. The surveillance requirement acceptance l criteria for the reactor building closed cooling water pumps was developed l

assuming a 7% degraded pump from the actual pump curves. fi c.s ;.iaasurement  !

i instrument inaccuracy for the reactor building closed cooling water pumps has been accounted for in the design basis hydraulic analysis. Pressure  ;

measurement instrument inaccuracy for the reactor building closed cooling l water pumps is accounted for in the acceptance criteria containec' in the surveillance procedure, i

! MILLSTONE - tiNIT 2 B 3/4 7-3a Amendment No. 7/7 oeie

i f%

C c7 PLANT SYSTEMS BASES 3/4.7.4 SERVICE WATER SYSTEM The OPERABILITY of the service water system ensures that sufficient cooling capacity is available for continued operation of vital components I

and Engineered Safety Feature equipment during normal and accident con-ditions. The redundant cooling capacity of this system, assuming a single failure, is consistent with the assumptions used in the accident analyses.

The Technical Specification Surveillance Requirements provided to ensure OPERABILITY of each component ensures that at a minimum, the assumptions used in the accident analysis are met and that subsystem OPERABILITY is maintained. The purpose of the service water pumps differential pressure test, Surveillance Requirement 4.7.4.1.a.2, a substantial flow test, is to ensure that the pumps have not degraded to a point where the accident analysis would be adversely impacted. The surveillance requirement acceptance criteria for the service water pum was developed assuming a 7% degraded pump from the actual pump curves.ps Flow and pressure measurement instrument inaccuracies for the service water pumps have been accounted for in the design basis hydraulic analysis. It is not necessary to account for flow and pressure measurement instrument inaccuracies in the acceptance criteria contained in the surveillance procedure. I 3/4.) A g 00 LEVEL The service water pump motors are normally protected against water damage to an elevation of 22 feet. If the water level is exceeding plant grade level or if a severe storm is approaching the plant site, one service water pump motor will be protected against flooding to a minimum elevation of 28 feet to ensure that this pump will continue to be capable of removing decay heat from the reactor. In order to ensure operator accessibility to the intake structure action to provide pump motor protection will be initiated when the water level reaches plant grade level.

3/4.7.6 CONTROL ROOM EMERGENCY VENTILATION SYSTEM The OPERABILITY of the control room emergency ventilation system ensures that 1) the ambient air temperature does not exceed the allowable temperature for continuous duty rating for the equipment and instrumentation cooled by this system and 2) the control room will remain habitable for operations personnel during and following all credible accident conditions.

The OPERABILITY of this system in conjus.ction with control room design i provisions is based on limiting the radiation exposure to personnel l occupying the control room to 5 rem or less whole body, or its equivalent.

This limitation is consistent with the requirements of General Design Criteria 10 of Appendix "A", 10 CFR 50.

MILLSTONE - UNIT 2 B 3/4 7-4 Amendment No.

oeis 1