ML20207T517
| ML20207T517 | |
| Person / Time | |
|---|---|
| Site: | South Texas  |
| Issue date: | 03/31/1987 |
| From: | HOUSTON LIGHTING & POWER CO. |
| To: | |
| Shared Package | |
| ML20207T515 | List: |
| References | |
| NUDOCS 8703240090 | |
| Download: ML20207T517 (13) | |
Text
..
t r
SUPPLEMENT 1 TO THE VERIFICATION AND VALIDATION PROCESS FINAL REPORT FOR THE SOUTH TEXAS PROJECT QUALIFIED DISPLAY PROCESSING SYSTEM MARCH 1987 8703240090 870319 PDR ADOCK 05000490 A
PDR 2244n:56/ GEL /1286 Sl-1
TA8LE OF CONTENTS I.
SUMMARY
II.
BACKGROUND III.
SUMMARY
OF VERIFICATION ACTIVITIES IV.
SUMMARY
OF VALIDATION ACTIVITIES l
i 2244n:56/ GEL /1286 51-2
I.
SUMMARY
The Qualified Display Processing System (QOPS) was purchased by the Houston Lighting and Power Company (HL&P) in 1984. Subsequent to the.
j purchase of the system, several upgrades were incorporated..The design l
of the system was " frozen" in the last quarter of 1985. Any changes to the QOPS subsequent to ti.e freeze date required a utility approved Design Change Approval Requesi. (DCAR). Several DCARs (11) were approved for implementation.
l The QDPS Verification and Validation Final Report, issued in December 1986, provided a status of the verification and validation activities for l
the QDPS, all design changes prior to the system freeze, and all except four DCARs (512, 513, 515 and 522). This is referred to in this report as " base scope" activity. The " upgrade" activity referred to in this
-report addresses the verification and validation activities associated with these four DCARs.
For the upgrade activity, a total of 289 software units were tested, consisting of 131 new units and 158 modified units that were previously verified in the " base scope" effort. The verification activity on the i
"up grade" activity generated 93 verification trouble reports and 87 l
clarification reports.
l Considering both the " base scope" and " upgrade" activity, a total of 1369 software units were tested with 666 trouble reports and 649 clarification reports issued. All the verification trouble reports and clarification l
reports have been resolved. No verification open reports are outstanding.
At the time of issuance of the final report in December 1986, all validation testing was completed on " base scope", however, test data reduction was still in progress. Corresponding to the test data analyzed as of December, a total of 53 validation trouble reports had been issued.
The data has now been analyzed for " base scope" and validation testing I
has been completed on the " upgrades". A total of 72 validation trouble reports have been issued identifying a total of 87 error types. A total of 6 trouble reports were issued on Man-Machine Interface testing; 7 2244n:56/ GEL /1286 S1-3
. trouble reports on Prudency testing; 9 trouble reports on Control /SGWLS/TAS; and 50 trouble reports on PSMS. Of the 87 error types-reported, 81 have been resolved either through software changes, functional requirement changes, validation test procedure / decomposition modifications, hardware changes or recognizing the documented error was
.not a problem. The remaining 6 trouble reports require modifications to the display graphics and are still pending final implementation. These 6 trouble. reports address use of incorrect acronyms, instrument tag mislabelling and absence of engineering unit designation.
These' trouble reports will be resolved prior to the South Texas Project Unit 1 achieving commercial operation.
In addition to the trouble reports, a total of 30 clarification reports were issued on the " base scope" and " upgrade" activity. All clarification reports have been addressed and have been successfully cleared.
A review of all issued validation trouble and clarification reports indicated that none ofthe errors identified would have been found during the verification process. The validation reports were in areas specific to validation testing.
l l
l 2244n:56/ GEL /1286 SI-4
=
II. BACKGROUND l
Following the purchase of the Qualified Display Processing System (QDPS) in 1984, the system was upgraded in many areas due to several factors such as required plant design' modifications, man-machine interface enhancements and desired plant functional upgrades. Design upgrades included in the above categories are:
- a. Temperature Averaging System (TAS) which permitted the removal of the RCS bypass loops;
- b. Essential cooling Water Flow Control which was implemented to limit flow of cold water through the condenser during cold weather.
- c. CCW and ECW display pages to provide functional display to the operator.
The design of the QDPS was " frozen" in the last quarter of 1985, requiring a utility approved Design Change Approval Request (DCAR) prior to initiating any design modifications by the utility, Bechtel or Westinghouse.
Subsequent to the design " freeze" date, several DCARs were approved for implementation. These included the following:
- a. DCAR-511 Revised AFWST time to empty algorithm.
- b. DCAR-512 Reactor Vessel Water Level (RVWL) display modification
- c. DCAR-513 Containment water level and normal sump water level j
l display modifications l
- d. DCAR-515 Critical safety function display action points, design points and setpoint additions
- e. DCAR-516 Display modifications
- g. DCAR-518 ECW detail data display modifications
- h. DCAR-519 Class 1E arc suppression circuit addition
- j. DCAR 522 QDPS alarm addition
- k. DCAR-524 Display modifications 2244n:56/ GEL /1286 Sl-5
The Verification and Validation Final Report for the South Texas Project Qualified Display Processing System was submitted to the NRC in letter ST-HL-AE-1859 from M. R. Wisenburg to Vincent S. Noonan dated December 23, 1986. This report included a summary of the ydrification
~
and validation activities that had been conducted on the " base scope" 00PS. -The base scope is described herein as all QDPS modifications prior to-the system " freeze" in the last quarter of 1985 and all approved DCARs listed above except 512, 513, 515 and 522. Due to schedular impacts and/or complexity of the design, it was necessary to exclude these four DCARs from the " base scope"' verification and validation effort. System
" upgrades" are defined herein as all system modifications related to DCARs 512, 513, 515 and 522.
1 The purpose of this supplement is to provide a summary of the verification and validation activities that have been conducted on the system " upgrades" and a final report on the closure of the trouble and clarification reports on the " base scope" system that remained open when the final verification and validation report was issued in December 1986.
l i
l 2244n:56/ GEL /1286 SI-6
III. SUfelARY OF VERIFICATION ACTIVITIES Prior to discussing the verification activities associated with the system " upgrades", a brief review of the status of the verification-activities is presented on the " base scope" at the time the final verification and validation report was submitted.
The_ verification effort associated with the " base scope" system consisted of investigating 1238 units of software. Of the 1238 units investigated, 1202 of the units had passed successfully (97 percent of the total).
Resolution of the remaining 36 units had been incorporated into the QDPS
" upgrade" activity described in the report. A total of 571 trouble reports were issued for resolution. Of the 571 trouble reports, 535-had been resolved, with the remaining 36 incorporated into the " upgrade" activity. Some of the 36 outstanding trouble reports were declared obsolete due to the software modifications required by the system
" upgrades" and some were resolved via resolution of related trouble reports. All the 36 trouble reports have been cleared and no effort remains on the " base scope" system.
f In addition to the issuance of trouble reports, clarification reports were issued. A total of-545 clarification reports were issued on " base scope". Of the 545 clarification reports, 507 had been resolved prior to the final report. The remaining 38 clarification reports had been incorporated into the " upgrade" activity. All the outstanding clarification reports on the " upgrade" activity have been cleared and no L
effort remains on the " base scope" system.
The identical verification process described in detail in the December l
1986 Verification and Validation Final Report was utilized in addressing the system " upgrades". When only considering the " upgrade" activity, a total of 289 software units were tested, consisting of 131 new units and 158 modified units that were previously verified in the " base scope" effort. The verification activity generated 93 trouble reports and 87
{'
clarification reports, All the trouble reports and clarification reports generated as part of the " upgrade" activity have been resolved. No open reports are outstanding.
i t
2244n:56/ GEL /1286 SI-7
The.. table below provides s summary of the number of. trouble reports and clarification reports generated during " base scope" activity, " upgrade" activityandthetotalforthe00PSverificationactivities$
Units Testeel Trouble RepoEts
% of Units Tested Base Scope 1238 571 46 Upgrades
- 289 95 33 Total 1369 666 49-Units Tested Clarification Reports
% of Units Tested Base Scope 1238 545 44-Upgrades
- 289 104 36 Total 1369 649 47
- includes 158 base scope modified units Observation of the data indicates that the number of trouble reports and clarification reports as a percent of units tested decreased significantly for the " upgrade" activity when compared to the " base scope" activity.
The primary reason for this reduction in the number of trouble and clarification reports being issued was due to the experience gained by both the design team and verification team during the " base scope" effort.
l As the verification team documented trouble reports, the type of error responsible for the generation of the trouble report was identified.
Such coding permitted error types to be analyzed with respect to frequency of occurrence. As discussed in the Verification and Validation Final Report, the " base scope" activity identified only three error types that contained a significant portion of the total errors. Similarly, the
" upgrade" activity also identified the same three error components that contained a significant portion of the total errors.
l t
2244n:56/ GEL /1286 51-8
All trouble and clarification reports have been resolved at this time.
No open items currently exist.
Implementation of the verification plan discussed in the QDPS Verification and Validation Plan (Appendix A of the final report) has proven to an effective process for identifying deficiencies.
l i
l 2244n:56/ GEL /1286 SI-9
IV.
SUMMARY
OF VALIDATION ACTIVITIES A brief review of the status of the validation activities will first be presented on the " base scope" at the time the final verificdtion and validation report was submitt'ed in December 1986. The overall scope of the validation effort on the " base scope" consisted of conducting 2243 tests and 230 drawing confirmations. Prior to the issuance of the final report, all validation tests were completed on the " base scope", however, all te:t data reduction had not been completed.
For the test data analyzed, a total of 53 validation trouble reports were issued that contained a total of 62 error types.
Subsequent to the issuance of the final report, all validation test data reduction has been completed. This effort resulted in the issuance of 13 additional trouble reports on " base scope" activity.
A segregation of the number of trouble reports for the total " base scope" activity with respect to the functional areas is as follows: Man-Machine Interface Testing -6; Prudency Testing - 7; Control /SGWLCS/TAS - 9; and PSMS - 44.
The validation testing on the QDPS " upgrade" activity resulted in an additional 6 trouble reports being issued. All these trouble reports were associated with the QDPS PSMS subsystem. No additional trouble reports were identified in the other functional areas.
The identification of these 6 trouble reports resulted in a total of 50 trouble reports associated with PSMS for " base scope" and " upgrade" activities.
4 The total number of validation trouble reports issued on QOPS is then
- 72. These trouble reports identified a total of 87 error types.
As the design team evaluated the validation trouble reports, the method of resolving each of the trouble reports was documented.
The validation and design team identified five mechanisms for resolving the reports:
sof tware changes; hardware changes; functional requirement changes; 1
2244n:56/ GEL /1286 Sl-10
validation test procedure / decomposition changes; and no problem identified. Figure S1.1 illustrates the percentage of each method that was utilized for resolving the trouble report error types. As seen from the figure, the majority of the errors (53 percent) were refolved by software changes; 16 percent were resolved via changes to the functional requirements; 14 percent were found not to be an actual problem; 8 percent were resolved by modifications to the validation test procedure / decomposition; and 2 percent were resolved via hardware changes.
The remaining 7 percent of the errors (6) which affect the plasma display graphics are still pending implementation.
Four (4) of these trouble reports have identified acronyms that appear on the QDPS plasma displays that are not consistent with the standard list of South Texas Project acronyms and abbreviations. One of the trouble reports identified an instrument tag mislabelling of the displayed variable. The final pending trouble report addressed the absence of engineering unit designation.
I Corrective actions for these six trouble reports will be implemented prior to the South Texas Project Unit 1 achieving connercial operation.
In addition to a total of 72 validation trouble reports being issued, a total of 30 clarification reports were issued on the " base scope" and
" upgrade" activity. All clarification reports have been addressed and have been cleared.
A review of the issued validation trouble and clarification reports indicated that none of the errors identified would have been found during the verification process. The trouble and clarification reports were in areas specific to validation testing.
i 2244n:56/ GEL /1286 S1-11
i l
VALIDATION TROUBLE REPORT RESOLUTION-Trouble Reports 72 - Total Error Types 87 l
SOFTWARE CHANGE (46)
REQUIREMENTS CHANGE (14)
(53%),
=
i
/.-
-,s NOT A PROBLEM (12) s s
/
\\
- /
TEST CHANGE (7) 2s l
llllll PENDING (5) a 10 t
p--
s f,
c s..
.mx)
N ll Y
f
\\\\
',,M8%)
(t ex)s N
/
i l
'sy /
\\<,.'
e 4
3/ 5/87
.