ML20211A257

From kanterella
Jump to navigation Jump to search
Safety Evaluation Accepting Mods to App R,Clarified by Generic Ltrs 81-12 & 83-33,to Prevent Spurious Equipment Operation Caused by fire-induced Conductor or Cable Faults, Facilitate Operator Actions & Resolve Addl Circuit Concerns
ML20211A257
Person / Time
Site: Summer South Carolina Electric & Gas Company icon.png
Issue date: 05/22/1986
From:
NRC
To:
Shared Package
ML20211A224 List:
References
GL-81-12, GL-83-33, NUDOCS 8606110096
Download: ML20211A257 (11)


Text

patog 6 ICg UNITED STATES

[ ,.j .3(

, g NUCLEAR REGULATORY COMMISSION WASHINGTON, D. C. 20555 5 Q .

j O 8 -

l SAFETY EVAlllATION PEPORT VIRGIL C. SilMitER NUCLEAR STATION ADDENDIX R FLANT MODIFICATION REVTFW DOCKET NO. 50-395 I. INTRODtlCTION In Supplement No. 3 of the Viroil C. Sumer Nuclear Station Safety Evaluation Report (SER) the staff provided its evaluation of the station's compliance with Appendix R to 10 CFR 50, Section III.G and III.L. relative to safe shutdown capability in the event of a fire.

Subsequent to the SER, Generic Letters 81-12 and 83-33 were issued which provided clarifications of the staff's interpretation of certain requirements of Appendix R including safe shutdown capability. Based on additional guidance and infonnation obtained by the licensee at NPC Region II Appendix R fire protection workshop, the licensee reevaluated safe shutdown capability at the V.C. Sumer Nuclear Station.

By letters dated May 29, September 4, 16, 20, November 1, and December 30, 1985, the licensee submitted the results of a reassessment of safe shutdown capability at V.C. Summer Nuclear Station. As a result of the reanalysis, the licensee proposed modifications to provide greater assurance of compliance with the requirements o' Appendix R to 10 CFR 50 and to resolve associated circuits concerns. The proposed modifications fall into three categories. The ob,iective of the first category is to prevent and/or mitiga te spurious equipment operation caused by fire induced conductor to conductor or cable to cable faults. The original fire hazards analysis did not consider this to be a credible fire damage mechanism relative te sa#e shutdown equipment er cable selection. The objective of the second category of modifications is to facilitete local operator actions, i.e., modifications are proposed to reduce the need for post-fire repairs or jumper procedures for cold shutdown equipment before plant operators can manipulate equipment locally. The third Category of modifications resolve additional associated circuits concerns identified during the course o' the fire hazards analysis.

II. FVALUATION (a) Auxiliary Spray Valve Cable Control cables associated with auxiliary spray valve IXVT-8145-CS) are routed through the following fire areas:

Auxiliary Building fire area AB-1

- Control Buildirg fire area CB-6, CR-10. CR-15 and CB-17 Interrediate Building fire crea 19-25 Reactor Building fire area RB-1 8606110096 860522 PDR ADOCK 05000395 F PDR

)

-?-

A fire occurring in any of the above listed fire areas could potentially cause spurious operation of the auxiliary spray valve due to a hot short in the solenoid control cable. Inadvertent opening of this valve with a charging pump in operation could result in primary plant de-pressurization. To preclude this from happening, the licensee proposed to replace the control cables from the control room to the valve with cabling which includes a grounded shield.

In addition, the licensee proposed to provide a second control power disconnect independent from the control room disconnect to preclude the potential for spurious auxiliary spray valve operation in the event of a control room fire.

This modification has been scheduled to be completed by the end of the third refuelino outage (second quarter of 1987). The staff has reviewed the proposed modification and found it to be acceptable. Further, the licensee has developed an interim wire cutting procedure that is functionally equivalent to the proposed second electrical disconnect. This com ensatory action will remain in effect until the modification is complete. The staff finds this interim approach acceptable.

(bl Stean fienerator Power Operated Relief Valve Cable Control cables associated with the steam generator power operated relief valves (IPV 7000-MS, IPV-2010-MS and IPV-20?0-MS) are routed through the followino fire areas:

- Auxiliary Buidling fire area A.B-I

- Control Building fire areas CB-1, CB-2, CB 4, Cli-5, CB-6, CB-10, CB-l?

CB-17 and CB-18

- Intermediate Building fire areas 18-20,18-22 and IR-25 A fire occurring in any of the fire areas listed above could potentially cause spurious operation of the steam generator power operated relief valves due to a hot short in the control cables associated with either of the two contrni solenoids for each valve. Inadvertent opening of these valves could cause excessive cooldown and reactor coolant system shrinkage. To preclude the potential for spurious operation of the steam generator power operated relief l

valves from an external hot short, the licensee proposed to modify the control j solenoids such that the POPV fails closed. In addition, the licensee proposed l

to provide a second control power disconnect in the cable spreading room, independent o' the control room disconnect, to prevent spurious steam generator power operated relief valve operation in the event of a control room fire.

This modification is scheduled to be completed by the end of the third refuelinq outage (second quarter of 1987). Ilntil the above modifications are completed, .

the automatic fire detection and/or suppression systems presently in place will be supplemented with a 2-hour roving fire watch. Based on its review, the staff finds that the preposed modifications ard the interim compensatory action of providing P-hour roving fire ,watch in the areas of concein are acceptable.

(c) Excess Letdown Isolation Valve Cable Control cables associated with the excess letdown isolation valves (XVT-8153-CS and XVT-8154-CS) are routed through the following # ire areas:

Control Building fire areas CB-1, CB-6, CB-17, CB-15 and CB-17

- Intennediate Puf1 ding fire area 18-25 Reactor Ruilding fire area RR-1 A fire occurring in any of $.he above listed fire areas could cause spurious operation of both excess letdown isolation valves. Inadvertent opening of these valves could cause a loss of reactor coolant system inventory. To preclude the potential for spurious operation of both excess letdown isolation valves, the licensee proposed to explicitly identify the control power disconnects in the control room and install a second set of control power disconnects in the cable spreading room. The licensee contends that this will ensure closure of these valves since two independent hot shorts would have to occur to open the valves. This modification is scheduled to be completed by the end of the third refueling outage (escond quarter of 1987). The staff has reviewed the proposed modification found it to be acceptable. Further, the licensee has developed an inte, - . post fire shutdown procedure for a fire in the control room that will ensure tne removal of control power to the valves. The staff finds the licensee's interim compensatory action acceptable.

(d1 Main Steam Isolation and Bypass Valve Cable Control cables associated with the main steam isolation and bypass valves (XVM-2801 A, B, C and XVT-2869 A, B, C-MS1 are routed through the following fire areas:

Control Building fire areas CB-1, CB-2, CB-4, CB-6, CB-10, CB-12, CB-15, CB-17 and CB-18 Interriediate Building fire areas IR-20.18-22 and IB-?5 A fire occurring in any of the above listed fire areas could potentially cause spurious operation of the main stean isolation and bypass valves. Inadvertent opening of these valves due to external hot shorts could cause a loss of secondary side inventory. To preclude the potential spurious operation of the

main steam isolation and bypass valves the licensee proposes to explicitly i identify the control power disconnects in the control room and install a second set of disconnects in a separate fire area. The licensee contends that this will ensure closure of these valves. This modification is scheduled to be completed by the end of the third refueling outage (second quarter of 1987).

The staff has reviewed the proposed modf fication and finds it to be acceptable.

Further, the licensee's interim post-fire shutdown procedure is in place for a fire in the control room to ensure the removal of control power to the main steam isolation and bypass valves.

(e) Pressurizer Power Operated Relief Velve Cable Control cables associated with the pressurizer power operated relief valves (IPV-444B, IPV-445A, and IPV-445B) are routed through the following areas:

Auxiliary Building fire area AB-1 Control Building fire areas CB-10, CR-15 and CB-18 Intennediate Building fire areas 18-14, 18-20, IR-21, IB-22 and IB-?5 Deactor Building fire area RB-1

A fire occurring in any of the fire areas listed above could cause spurious operation of a pressurizer power operated relief valve. Inadvertent opening of a pressurizer power operated relief valve due to an external hot short could cause a loss of reactor coolant inventory. To preclude this, the licensee proposes to replace the control cabling from the control room to the valves with cable which includes a grounded shield. In addition, the licensee proposes to install a second set of control power disconnects independent of the control room disconnects to prevent spurious pressurizer power operated relief velve operation in the event of a control room fire. This modification is scheduled to be completed by the end of third refueling outage (second quarter of 1987).

The staff has reviewed the proposed modification and finds it acceptable.

Further, the licensee has instituted an interim wire cutting procedure which is functionally equivalent to the proposed second electrical disconnect. The staff finds the compensatory measure acceptable.

(f) Diesel Generator Control Transfer Switch Cables Cables (DGM 298, DGM 218 and DGU 2?B) associated with the Train "B" diesel generator control transfer switch are routed through the cable spreading room, CB-15. A fire in the cable spreading room could result in external hot shorts which could render the Train "B" diesel generator inoperable in addition to damaging cabling associated with the Train "A" diesel generator. Thus, the ability to achieve and maintain hot standby conditions from the control room evacuation panel utilizing onsite power capability may be .ieopardized. The licensee proposed to relocate cables DGM 218 and 228 outside the fire area of cencern and isolate cable DGM 299 by modifying the circuit and utilizine additional contacts associated with the existing control transfer ewitch. This modification was completed at the erd of the second refueling outage (fourth quarter of 1985). The staff has reviewed the modification and finds it acceptable.

(g) Current Transformer Circuits A fire in either the control room or cable spreading room could damage both trairs of switchgear required for safe shutdown by damaging the current transformer circuits. The fire could possibly cause the current transformer

circuit to open, resulting in a secondary fire at the current transfonner in the respective switchgear. By letter dated May 29, 1985, the licensee identified this condition to the NRC.

To preclude the potential for a secondary fire in the switchgear, the licensee proposes to install thyrite surge suppressors in the circuit in parallel with the current transformer. This will prevent an over voltage surge in the event of an open current transformer circuit. This modification is scheduled to be completed by April 1986. The staff has reviewed the proposed modi #ication and G finds it acceptable. Further, in a letter dated June 21, 1985, the licensee committed to provide a rovina fire watch until the ncdification is completed.

The staff finds the licensee's interin action acceptable.

(h) Power Cable Tray Separation In the evet of a fire in the southwest corner of elevation 417'-0" of the intermediate building, fire area 18-25, near column line 7.5/G.d, redundant cabling required for systens necessary to achieve and maintain hot standby cerditions cculd be damaged. Tray 3088 which contains Train "A" DC control power to all essential safe shutdown systems interacts with Tray 4149 which contains Train "B" control power for the chilled water system and the component cooling water system. In addition, conduit VUC-28 which contains Train "B" control power cabling for the chilled water system and trays 10?5, 2058 and 3128 which contain Train "B" power to the chilled water system and conponent cooling water system also interact with cable tray 3088. Since the chilled water system provides bearing cooling of the charging pumps, a fire in this area affecting the chilled water system enuld possibly render both charging pumps inoperable. By letter dated May 29, 1985, the licensee identified this condition to the NRC.

The licensee proposes to enclose cable tray 3088 in a 1-hour fire barrier throughout 'fre area IR-25. This modification is scheduled to be completed by the end of the first ouarter of 1986. The staff has reviewed the proposed modif(catior, and finds it acceptable. Further, the licensee has committed to provide a roving fire watch until the modification is completed. The staff finds the licensee's interim action to be acceptable.

(i) Source Range Nuclear Instrumentation Cables A fire in the north cable chase of the control building on elevation 436'-0",

could damage all available source range nuclear instruments. By letter dated May 29, 1985, the licensee identified this condition to the NRC. In order to preclude the loss of all three source range instruments due to a fire in fire area CR-1, the licensee proposes to either enclose one train of source range cabling in a 1-hour fire barrier or install a power source selector switch for one train of source range instrumentation. This modification is scheduled to be completed by the end of the first quarter in 1986. The staff has reviewed the proposed modification and finds it acceptable. Further, the licensee has committed to provide a roving fire watch until the modification is completed.

The staff finds the licensee's interim action to be acceptable.

(j) Emergency Lighting The licensee requested deviation from Section III.J of Appendix R to 10 CFR 50 to the extent that it requires that all areas needed for operation of safe shutdown equipment and in access and egress routes thereto be provided with 8-hour battery powered emergencv lighting units.

Discussion To effect and maintain safe shutdown under certain fire scenarios, the licersee has indicated that operators would need to go between the turbine building, the service water pumphouse, and the circulating water pumphouse.

The yard lighting will provide the illumiration of the external entrances and exits of the affected structures. No lighting is planned for general yard areas, since the prevision of entrance lights to illuminate doors and stairwells and to serve as guide beacons is sufficient for safe travel between structures. This lighting, however, does not comply with the reouirement of Section III.J of Appendix R specifying an 8-hour battery supply.

The yard area lichting is powered by the diesel generator busses. Therefore, the yard lighting can be maintained for the 8-hour time period specified in Section III.J of Appendix R. In all other locations, the licensee will meet Section III.1 by providing individual 8-hour battery powered lighting units. The additional lighting units required to meet this are scheduled to be installed by June 30, 1986. In the interim, the existing emergency lighting is being supplemented by hand held lighting and an existing Central DC powered emergency lighting system.

Evaluation We had several concerns with the licensee's proposed lighting configuration.

The first was that hand held lights would be relied upon as the sole means of illumination. The licensee has confirmed that, while the operators will be carrying flashlights, they will only be relied upon to supplement the security lighting. And, if the flashlights become inoperable or could not be used while performing the safe shutdown function, the security lighting itself would supply sufficient illumination.

Our second concern was that the same fire which resulted in the need to go to the areas covered by the security or banked-battery lighting would cause the loss of this capability. The security lighting is supplied power from the diesel generator busses and is, therefore, not vulnerable to fire loss under the postulated fire scenario.

Our third concern was that the level of illumination would be sufficient to provide us with reasonable assurance that the safe shutdown function could be echieved. The licensee conducted a walkdown of the yard areas where the alternate lighting configuration was provided. This walkdown confirmed that an adequate level of illumination had been provided.

Ve were also concerned that the security lighting would not be maintained.

However, this lighting is inspected and maintained as part of the plant security requirements. We find this acceptable.

Conclusion Based on our review, we conclude that the use of the proposed emergency lighting systems and the field verification of the adequacy of the lighting provide an acceptable margin of safety eouivalent to that provided by the technical requirements of Section III.J. Therefore, the licensee's request for a deviation is granted.

We also fird that in the interim, the existing emergency lighting, supplemented by hand held lighting and an existing central DC powered emergency lighting system is acceptable until the additional 8-hour battery lights are installed.

(k) Service Water Booster Pump "P" Board Barrier By letters dated September 20, 1985 and December 30, 1985, the licensee submitted inforretion on the adequacy of a horizontal fire barrier over the "A-Train" service water booster pump, including commitments to modify the existing barrier by protecting the barrier's support assembly.

Discussion The A-train service water booster pump is located on elevation 412' of the

, intermediate building. A horizontal barrier is installed above the pump to separate the A-train pump from redundant "B" train cables in raceways directly above the pump. This barrier is constructed of "Kaowool M-Board" supported by an unprotected steel uni-strut frame assembly suspended by red hanoers.

The in-situ fire load for this location is 43,000 BTU /ft' with a total RTU content o' 471,145,000 BTUS. Area sprinkler protection erd fire detection are provided above and below the barrier assembly. In addition, fusible-type water spray nozzles are provided for the cable tray stacks in the overhead.

However, the area sprinkler protection is obstructed in the ceiling overhead by piping, electrical raceway and PVAC ducting. The sprinkler design does not meet the design guidance of NFPA 13 in that the system does not compensate for significant obstructions and overlapping obstructions exceeding 48 inches.

It was an NRC concern that in the event of an exposure fire in this crea, sprinkler response to the fire condition could be delayed due to these obstructions. This, in conjunction with the non-fire rated structural steel supporting the P-Board barrier, could ,ieopardize the fire barrier design by causing structural deformation to the barrier support system. The failure of the barrier support system could cause both redundant trains of shutdown systems to be damaged by fire.

The licensee responded to this concern by letters dated September 20, 1985 and December 30, 1985, by committing to protect the support assembly for the M-Board barrier with naterial that will withstand a 1-hour fire exposure as determined by the test methods of ASTM E-119.

The licensee justified the adequacy of the modificetions on the basis that "the addition of protective materials to the barrier supports will provide protection equivalent to a one-hour rating to ensure that the barrier will remain in place in the event of a fire. This will further ensure that the barrier will perform its fire protection function as a radiant energy shield between the service water booster pump A and the redundant cable trays."

Evaluation The NPC staff's original concern was that because of the vertical alignment of redundant shutdown systems in this area and the unprotected support assembly of the horizontal barrier, a fire located near the floor would cause the horizontal barrier to fail and result in damage to both shutdown divisions.

However, the area is protected by automatic fire detection and suppression systems. Therefore, it is reasonable to expect that a fire would be detected in its initial stages, before significant room temperature rise occurred. The plant fire brigade would be dispatched to put out the fire using manual fire fighting equipment. Pending arrival of the brigade, the horizontal barrier and the existing sprinkler system would act in concert to control fire spread, to limit temperature rise and to protect the shutdown-related systems from fire damage. Because the metal support assembly for the horizontal barrier will be completely protected by fire-rated material, there is reasonable assurance that the barrier will remain in place until the fire is suppressed.

Conclusion Based on the above evaluation, the NRC staff concludes that the licensee's fire protection configuration in the Service Water Pooster pump area provides an acceptable level of fire safety. The NPC staff, therefore, concludes that upon implementation of the licensee's commitment to protect the support assembly for the horizontal barrier, this issue is resolved.

(1) Circuits Associated by Common Enclosure By letter dated September 4, 1985, the licensee submitted a description of the approach used in their Appendix R reanalysis to demonstrate that adequate overcurrent protection exists for all cables including those which could be associated by common enclosure. Two reports were prepared by the licensee to demonstrate the adequacy of overcurrent protection.

Each report included detailed infornation of the plant design criteria and practices which were used to provide overcurrent protection for plant cabling.

In order to demonstrate that the design criteria and practices were followed, the as-built conditions were evaluated using a statistical sampling technique to validate each report. The statistical procedure used was suitable to demonstrate a 95% confidence level that 95% of the power circuits have adequate overcurrent protection. The technique and acceptance criteria used were similar to those used to demonstrate the adeouacy of pipe supports.

For the first report, the statistical evaluation used a population of circuits that included all power cables in the plant larger than 10 AWG, Class IE associated, and Non-Class IE. Fifty-nine circuits selected by i random sample out of the 1834 circuits were then checked. Each circuit had adeouate short circuit protection and long term ampacity. This provided 95t confidence that 95% of the circuits have adequate overcurrent protection and validated the licensee's design criteria and practices. -

. -g-The seccnd report dealt with cables limited to Class IF and IE associated circuits. A random sample of 59 out of 391 circuits were checked and each circuit had adequate short-circuit and overload protection. As in the first report, this provided a 95%/95% confidence in the circuits and validated the licensee's design criteria and practices.

Conclusion We have evaluated the licensee's approach to circuits associated by common enclosure and find that the licensee has validated its design criteria and practices with a 95%/957 confidence level, therefore, we conclude that the licensee's design and approach to circuits associated by common enclosure are acceptable.

(m) Control Transfer Switches For fires in the control room, relay room and cable spreading rooms which require control room evacuation, shutdown control will be directed from the control room evacuation panel (CREP). The following "B" Train equipment is necessary for safe shutdown and is subject to spurinus operation due to fire induced hot shorts.

EQtIIPMENT TAG N0. DESCRIPTION MFN-978-AH Reactor Bldg. "B" Train Cooling Fan MFN-97D-AH Reactor Bldg. "B" Train Cooling Fan XEG-1B-DG "B" Diesel Generator XFN-388-AH Chgr. Room Supply Fan "R" XFM-45A-AH DG "B" 50% Supply Fan XFM-46B-AH DG "B" 50% Supply Fan XFN-468-VL Charging /S1 Purp "R" Room Fan l XFN-49R-VL RHR/ Spray Pump "B" Far

! XFN-76-VL ESFIDP Switchgear Room l ran l

F...

~

EQlIIPMENT TAG NO. DESCRIPTION XFN-808-AH SWPH Supply Fan "R" XFN-81R-VL SW Booster Pump "B" Fan XFN-106B-VL CREP and "B" Speed Switch Poom Supply Fan XFN-133-VL Aux. Ridg. "B" Switchgear Poom Fan XHX-19-VU "B" Chiller XPP-18-CC CC Pump "B" XPP-318-RH Residual Heat Removal Pump "8" XPP-398-SW SW Pump "R" XPP-438-CS Chn nino Pump "B" XPP-45B-SW SW Booster Pump "B" XPP-48R-VU Chilled Water Pump "B" XSWIDR, U14 Charging /S1 Pump "C" Feeder "B" XSW-IDA-ES, U1 Normal Offsite Breaker XSW-IDA-ES, U1 Alt. Offsite Breaker XSW-IDA-ES, U3 "A" D.G. Breaker XSW-1DB-ES, U3 Alt. Offsite Breaker XSW-IDB-ES, U16 Normal Offsite Breaker XSV-IDB1, U4C ** Tie Breaker to XSW 183 XSV-IDB.ES, U4 XSW-1[8-ES Feeder Breaker XSW-IDR-ES, U6 FDR Breaker R.B. Spray PP 388 XSV-IDS-ES, U7 Unit Sub Feeder Rreaker

e EQUIPMENT TAG NO. DESCRIPTION XSW-1EB-ES, U3 FDR Breaker for Unit Sub IEB1 XSW-1DB1-ES, U4B ESF a80 Unit Sub Main Breaker XSW-IDB1, U7B FDR Breaker R.B Fan 968 XSW-IDB1, U7C FDR Breaker R.B. Fan 96D XSW-1DB2-ES, U48 ESF 480 Unit Sub Main Breaker XSW-1EB1-ES, U48 ESF 480 Unit Sub Main Breaker The licensee proposes to either modify this equipment by adding control transfer switches and local controls or develop jumper procedures to facilitate local marual operator action. The licensee, in a letter dated April 4, 1985, stated that repair procedures will be provided for equipmert needed only to achieve cold shutdown, and for equipnent not needed in the first 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> of shutdown. Additionally, for fires not requiring control rnon evacuation, local actions to a lesser extent will be required. In these cases, a different repair other than jumper procedures may be used, such as portabic fans. These repair procedures will be only for eouipment not needed in the first 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> of shutdown. These modifications have been scheduled to be completed by the end of the third refueling outage (second quarter of 19871 The staff has reviewed the proposed modifications and finds them acceptable.

Further, the licensee's interim procedures which are functionally eouivalent to the proposed modi #ications are in place and acceptable to the staff.

Principal Contributors:

Jon B. Hopkins, Proiect Directorate #2, PWR-A Paj K. Anand, Facility Operations Branch, RWR Dennis J. Kubicki, Plent, Electrical, Instrumentation and Control Systems Branch, PWR-R

__ _