ML20211F370
| ML20211F370 | |
| Person / Time | |
|---|---|
| Site: | Waterford |
| Issue date: | 08/24/1999 |
| From: | ENTERGY OPERATIONS, INC. |
| To: | |
| Shared Package | |
| ML20211F361 | List: |
| References | |
| NUDOCS 9908300314 | |
| Download: ML20211F370 (31) | |
Text
i l
e
(
l I
l NPF-38-207 l
l l
ATTACHMENT A l
EXISTING SPECIFICATIONS i
l 9908300314 990824 PDR ADOCK 05000302 P
4 4
N 1
1 O
I T
C 5
3 3
2 5
A 1
1 1
1 1
E L
BS AE 3
3 3
3 3
CD IO LM 2
2 2
2 2
N P
O P
I A
1 1
1 1
1 TA T
N E
2 M
U f mr r
r r
T SE oao o
o o
S MLL et mt mt mt N
UEB st a aa aa aa I
MNA tsr er er er I NR e
e t e t e t e M
NAE srn sn sn sn E
I l P ee
/ e
/e
/ e l
T MCO 2pg 3 g 3 g 3
2g
)
S d
Y e
S u
n N
i O
2 t
I mr r
r r
n T
S f ao o
o o
o A
LP oet mt mt mt C
U EI t a aa aa aa
(
T NR t sr er er er C
NT e
e t e t e t e 3
A A
srn sn sn sn l O ee
/e
/e
/e l
S CT 1pg 2g 2 g 2
1 g 3
E 3
R U
E T
L A
2 B
E A
F
.S f mr r
r r
T OL oao o
o o
Y NE et mt mt mt T
N st a aa aa aa E
LN t sr er er er F
AA e
e t e t e t e A
Tl srn sn sn sn i
S OC ee
/e
/ e
/e T
2pg 4 g 4 g 4
2 g D
F E
O R
E E
)
N S
)
e I
A s wr G
F n ou n
c N
E o
L s o
i E
(
t h
s i
g t
g - e) t oG E B
)
i r2 a
LS R u i
T 2
l
)P/
u
)
2 1
t eew A p
/
/G(
c vgo i
1 1/
A l nL W
D r
(
)
(Sp aa E T d2 i
c VR -
E
(
l n/
l or i
F ea1 eNT t c l el T
l v
(
v ai od e I
Y a ew edw mg riv N
C u L oP L no oo tWe U
N n LA aL tL n(L E a G
G u
o L
G M S
S A
C A
R N
E O
M I
E a b
c d
e T
C N
U F
7 o0 L*
l2 3
w o3 wJ cf55E e
TABLE 3.3-3 (Continued)
TABLE NOTATION (a) Trip function may be bypassed in this MODE when pressurizer pressure is less than 400 psia; bypa.ss shall be automatically removed when pressurizer pressure is greater than or equal to 500 psia.
(b) An SIAS signal is first necessary to enable CSAS logic.
The provisions of Specification 3.0.4 are not applicable.
ACTION STATEMENTS ACTION 12 -
With the number of OPERABLE channels one less than the Total Number of Channels, restore the inoperable channel to OPERABLE status within 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> or be in at least HOT STANDBY within the '
next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />.
ACTION 13 -
With the number of channels OPERABLE one less than the Total Number of Channels, STARTUP and/or POWER OPERATION and/or opera-tion in the other applicable MODE (S) may continue provided the inoperable channel is placed in the bypassed or tripped l
condition within I hour.
If the inoperable channel is bypassed, the desirability of maintaining this channel in the bypassed condition shall be documented by the Plant O'perations Review Committee in accordance with plant administrative procedures.
The channel shall be returned to OPERABLE status no later than prior to entry into the applicable MODE (S) following the next COLD SHUTDOWN.
i i
With a channel process measurement circuit that affects multiple functional units inoperable or in test, bypass or trip all associated functional units as listed below:
Process Measurement Circuit Functional Unit Bypassed / Tripped i
1.
Containment Pressure - High Containment Pressure - High (ESF)
Containment Pressure - High (RPS) i 2.
Steam Generator. Pressure -
Steam Generator Pressure - Low Low Steam Generator AP 1 and 2 (EFAS),
3.
Steam Generator Level Steam Generator Level - Low steam Generator Level - High Steam Generator AP (EFAS) l l
WATERFORD - UNIT 3 3/4 3-17 AMENDMENT NO.109 1
TABLE 3.3-3 (Centinutd)
TABLE NOTATION ACTION 14 -
With the number of OPERABLE channels one less than the Minimum Channels OPERABLE, STARTUP and/or POWER OPERATION and/or opera-tion in the other applicable MODE (S) may continue provided the following conditions are satisfied:
a.
Verify that one of the inoperable channels has been bypassed and place the other inoperable channel in the tripped condition within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br />.
b.
All functional units affected by the bypassed / tripped channel shall also be placed in the bypassed / tripped condition as listed below.
Process Measurement Circuit Functional Unit Bypassed / Tripped 1.
Containment Pressure Circuit Containment Pressure - High (ESF)
Containment Pressure - High (RPS) 2.
Steam Generator Pressure -
Steam Generator Pressure - Low Low Steam Generator Level - High Steam Generator AP (EFAS) 3.
Steam Generator Level Steam Generator Level -Low Steam Generator Level - High Steam Generator AP (EFAS)
STARTUP and/or POWER OPERATION and/or operation in the other applicable MODE (5) may continue until the performance of the next required CHANNEL FUNCTIONAL TEST.
Subsequent STARTUP and/or POWER OPERATION and/or' operation in the other applicable MODE,(S) may continue if one channel is restored to OPERABLE status and the provisions of ACTION 13 are satisfied.
ACTION 15 -
With the number of OPERABLE channels one less than the Total Number of Channels, restore the inoperable channels to OPERABLE status within 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> or be in at least HOT STAND 8Y within 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and in H0T SHUTDOWN within the following 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />.
ACTION 16 -
With the number of OPERABLE channels one less than the Total Number of Channels, restore the inoperable channel to OPERABLE status within 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> or declare the associated valve inoperable and take the ACTION required by Specification 3.7.1.5.
ACTION 17 -
With the number of OPERABLE channels one less than the Total Number of Channels, STARTUP and/or POWER OPERATION may continue provided the inoperable channel is placed in the tripped (D.C.
Relay energized) condition within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br />, the remaining Emergency Diesel Generator is OPERA 8LE, and the inoperable.
channel is restored to OPERABLE status within the next 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br />.
Othenvise, be in at least HOT STAND 8Y within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and COLD SHUTDOWN within the next 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />.
The surveillance requirements of Table 4.3-2 are waived for all channels while this action requirement is in effect.
WATERFORD - UNIT 3 3/4 3-18 Amendment No. 47
TABLE 3 3 3 (enntinued)
~
TABLE NOTATION ACTION 18 -
With more than one channel inoperable, or if the inoperable channel cannot be placed in the trip (D.C. Relay energized) condition, declare the associated Emergency Diesel Generator inoperab!e and take the ACTION required by Specification 3.8.1.1. The surveillance requirements of Table 4.3-2 are waived for all channels while this acbon requirement is in effect.
l ACTION 19 -
With the number of channels OPERABLE one less than the Total Number of Channels, STARTUP and/or POWER OPERATION and/or operation in the other applicable MODE (S) may continue, provided the inoperable channel is placed in the bypassed or tripped condition within 1 hour:
1 I
a.
If the inoperable channel is to remain in the bypassed condition, the desirability of maintaining this channel in the bypassed condition shall be documented by the Plant Operations Review Committes in accordance with plant administrative procedures. The channel shall be retumed to OPERABLE status no later than prior to entry into the applicable MODE (S) following the next COLD SHUTDOWN.
1 b.
If the inoperable channel is required to be placed in the tripped condition, within 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> either restore the channel to OPERABLE status or place the channelin the bypassed condition. If the tripped channel can not be retumed to OPERABLE status in 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br />, be in at least HOT STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br /> or place the tripped channel in bypass.
1 ACTION 20 -
With the number of OPERABLE channels one less than the Minimum l
Channels OPERABLE, STARTUP and/or POWER OPERATION and/or operation in the other applicable MODE (S) may continue provided the following conditions are satisfed:
a.
Verify that one of the inoperable channels has been bypassed and place the other inoperable channel in the tripped condition within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br />.
b.
Restore at least one of the inoperable channels to OPERABLE status within 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> l
and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />. Subsequent operation in the applicable MODE (S) may continue if one channel is restored to OPERABLE status and the provisions of ACTION 19 are satisfed.
l WATERFORD - UNIT 3 3/4 3-18a Amendment No. 47,143
3/4 3 INSTRUMENTATION RARFS
. 3/4 31 and 3/4 3 2 REACTOR PROTECTIVE AND ENGINFERFr) SAFETY FEATURES ACTUATION SYSTFMS INSTRUMENTATION The OPERABILITY of the Reactor Protective and Engineered Safety Features Actuation Systems instrumentation and bypasses ensures that (1) the associated Engineered Safety Features Actuation action and/or reactor trip will be initiated when the parameter monitored by each channel or combination thereof reaches its setpoint, (2) the specified coincidence logic is rnaintained (3) suf5cient redundancy is maintained to permit a channel to be out of service for testing or maintenance, and (4) sufficient system functional capability is available from diverse parameters.
The OPERABILITY of these systems is required to provide the overall reliability, redundancy, and diversity assumed available in the facility design for the protection and stigation of accident and transient conditions. The integrated operation of each of these systems is consistent with the assumptions used in the safety analyses.
The redundancy design of the Control Element Assembly Calculators (CEAC) provides reactor protection in the event one or both CEACs become inoperable. If one CEAC is in test or inoperable, verification of CEA position is performed at least every 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br />. If the second CEAC fails, the CPCs will use DNBR and LPD penalty factors to restrict reactor operation to some maximum fraction of RATED THERMAL POWER. If this maximum fraction is exceeded, a reactor trip will occur.
Table 3.3-3 ACTION 19 allows for continued operation in the applicable MODE (S) with one of the Refueling Water Storage Pool (RWSP)- Low channels inoperable provided the channelis placed in the bypass or tripped condition within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br />. If an inoperable channel of the RWSP - Low is required to be placed in the tripped condition within one hour, then within 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> the channel must either be restored to OPERABLE status or be placed in the bypassed condition. The bypassed channel must be restored to OPERABLE status prior to entering MODE 4 following the next MODE 5 entry. With one of the RWSP - Low channels inoperable and in bypass, and testing or repairs is necessary on one of the remaining channels, ACTION 20 must be entered.
ACTION 19a is annotated with an askerisk for the 3.0.4 exemption to allow the changing of MODES even though one channelis bypassed. MODE changes between MODES 1 and 4 with this configuration are allowed, to permit maintenance and testing on the inoperable channel. In this configuration, the protection system is in a two-out-of-three logic, and the probability of a random failure affecting two of the OPERABLE channels is remote. The tripped condition does not have this annotation as a single failure could cause the Emergency Core Cooling System and Containment Spray System suctions to be supplied from the Safety injection System Sump prematurely and loss of the Low Pressure Safety injection Systems.
Table 3.3-3 ACTION 20 allows for continued operation in the applicable MODE (S) with two of the RWSP - Low channels inoperable provided that one of the inoperable channels is bypassed and the other inoperable channel is placed in the tripped condition within one hour.
One of the inoperable RWSP - Low channels must be restored to OPERABLE status within 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> to allow removal of the channel from the tripped condition. The allowed time is acceptable because operating experience has demonstrated the low probability of the follow sequence of events occuring: the need to place one RSWP - Low channelin the tripped WATERFORD - UNIT 3 B 3/4 3-1 Amendment No. 69,4+3,143
Of*t.O ft4 0 if M >tVtCl4 i M 1f v l4 BASES 3/4.3.1 and 3/4.3.2 REACTOR PROTECTIVE AND ENGINEERED SAFETY FEATURE SAFETY
, ACTUATION SYSTEMS INSTRUMENTATION condition while another RWSP-Low channel is in bypass, the receipt of a valid Safety injection Actuation Signal Actuation, and a coincident failure of one of the two remaining OPERABLE RWSP-Low channels. These conditions could cause the Emergency Core Cooling System and Containment Spray System suctions to be supplied from the Safety injection System Sump prematurely due to containment pressure being higher than RWSP outlet pressure and loss of the Low Pressure Safety injection Systems.
When one of the inoperable channels is restored to OPERABLE status, subsequent operation in the applicable MODE (S) may continue in accordance with the provisions of ACTION 19.
The Surveillance Requirements specified for these systems ensure that the overall system functional capability is maintained comparable to the original design standards. The periodic surveillance tests performed at the minimum frequencies are sufficient to demonstrate this capability. The quarterly frequency for the channel functional tests for these systems comes from the analyses presented in topical report CEN-327: RPS/ESFAS Extended Test Interval Evaluation, as supplemented.
Testing frequency for the Reactor Trip Breakers (RTBs) is described and analyzed in CEN NPSD-951. The quarterly RTB channel functional test and RPS logic channel functional test are scheduled and preformed such that RTBs are verified OPERABLE at least every 6 weeks to accommodate the appropriate vendor recommended interval for cycling of each RTB.
RPS\\ESFAS Trip Setpoints values are determined by means of an explicit setpoint calculation analysis. A Total Loop Uncertainty (TLU) is calculated for each RPS/ESFAS instrument channel. The Trip Setpoint is then determined by adding or subtracting the TLU from the Analytical Limit (add TLU for decreasing process value; subtract TLU for increasing process value). The Allowable Value is determined by adding an allowance between the Trip Setpoint and the Analytical Limit to account for RPS/ESFAS cabinet Periodic Test Errors (PTE) which are precent during a CHANNEL FUNCTIONAL TEST. PTE combines the RPS/ESFAS cabinet reference accuracy, calibration equipment errors (M&TE), and RPS/ESFAS cabinet bistable Drift. Periodic testing assures that actual setpoints are within their Allowable Values. A channel is inoperable if its actual setpoint is not within its Allowable Value and corrective action must be taken. Operation with a trip set less conservative than its setpoint, but within its specified ALLOWABLE VALUE is acceptable on the basis that the difference between each trip Setpoint and the ALLOWABLE VALUE is equal to or less than the Periodic Test Error allowance assumed for each trip in the safety analyses.
The measurement of response time at the specified frequencies provides assurance that the protective and ESF action function associated with each channel is completed within the time limit assumed in the safety analyses. No credit was taken in the analyses for those channels with response times indicated as not applicable.
Response time may be demonstrated by any series of sequential, overlapping, or total channel test measurements provided that such tests demonstrate the total channel response time as defined. Sensor response time verification may be demonstrated by (1) in place, onsite, or offsite test measurements or (2) utilizing replacement sensors with certified response times.
WATERFORD - UNIT 3 8 3/4 3-ia Amendment No. 44-3,-4+3 153
t l
l e
e l
\\
NPF-38-207 ATTACHMENT B i
PROPOSED MARKED-UP SPECIFICATIONS j
a 1
I l
l l
l i
l
y 0
0 2
2 b*
b*
FT #I yA i
94 N
I l
1 1
e O
I
,k
- a *3 T
C 5
3 2
5 9
A 1
i1 1 1 1
1 E
L BS AE 3
3 3
3 3
w A
CD I
J C
IO LM 2
2 2
2 2
TN P
MN AO P
TI A
1 1
1 1
1 TA E T gSE
%N t
E 2
(0RW f mr r
r TT oao o
o SS MLL et m
mt mt NN UEB st a a"
aa aa II MNA t sr e#
er er DI NR e
e t
- t e t e NAE srn s"
sn sn l
E I iP ee
/ '
/ e
/e T
MCO 2pg 3 9 3 g 3
2g
)
S d
Y e
S un NO 2
i t
I mr r
r n
T S
f ao o
o o
A LP oet m
mt mt C
U EI t a a"
aa aa
(
T NR t sr e"
er er C
NT e
e t
- t e t e 9
3 A
A srn s"
sn sn HO ee
/'
/ e
/e 3
S CT 1pg 29 2g 2
1 g E
3 RU E
T L
A 2
B E
A F
.S f mr I
r r
T OL oao o
o Y
NE et m
mt mt T
N st a a*
aa aa E
LN t sr e"
er er F
AA e
e t
- t e t e A
Ti srn s"
sn sn l
S OC ee
/
/ e
/e 9'
T 2pg 4
4 g 4
2g D
F E
O R
E E
)
N S
)
e I
A s wr G
F n ou n
c N
E o
L s o
i E
(
t h
s i
g t
g e) t oG R u i
r2 a
LS E B
)
)P/
u
)
i l
T 2
2 1
t eew A p
/
/G(
c vgo W
i 1
1/
A l nL D r
(
)
(Sp aa E T d2 i
c VR -
or n/
l E
(
l i
F ea1 eNT tc l el T
l v
(
v ai od e Y a ew edw mg riv I
N C u L oP L no oo tWe U
N n LA aL tL n(L E
a G
G u
o L
G M S
S A
C A
R N
E O
M I
E a
b c
d e
TCNU F
7
~ DE oE e w
w1 wO*
s 4
TABLE 3.3-3 (Continued)
TABLE NOTATION (a) Trip function may be bypassed in this MODE when pressurizer pressure is i
less than 400 psia; bypass shall be automatically removed when pressurizer pressure is greater than or equal to 500 psia.
(b) An SIAS signal is first necessary to enable CSAS logic.
The provisions of Specification 3.0.4 are not applicable.
ACTION STATEMENTS ACTION 12 -
With the number of OPERABLE channels one less than the Total Number of Channels, restore the inoperable channel to OPERABLE status within 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and in COLD SHUTD0WN within the following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />.
ACTION 13 -
With the number of channels OPERABLE one less than the Total Number of Channels, STARTUP and/or POWER OPERATION and/or opera-tion in the other applicable MODE (S) may continue provided the inoperable channel is placed in the bypassed or tripped condition within I hour.
If the inoperable channel is bypassed, the desirability of maintaining this channel in the bypassed condition shall be documented by the Plant O'perations Review Committee in accordance with plant administrative procedures.
The channel shall be returned to OPERABLE status no later than prior to entry into the applicable MODE (S) following the next COLD SHUTDOWN.
i With a channel process measurement circuit that affects multiple functional units inoperable or-in test, bypass or trip all associated functional units as listed below:
Process Measurement Circuit Functional Unit Bypassed / Tripped 1.
Containment Pressure - High Containment Pressure - High (ESF)
Containment Pressure - High (RPS) 2.
Steam Generator Pressure -
Steam Generator Pressure - Low Low Steam Generator AP 1 and 2 (EFAS) f
~
A--Steam C;r.;reter-Level team Gen rp y'
Ste,a'mA, fra't 6P(EFA'S)jth era Stfean en 3
/
i O
J WATERFORD - UNIT 3 3/4 3-17 AMENDMENT NO.109
TABLE 3.3-3 (Centinued)
TABLE NOTATION ACTION 14 -
With the number of OPERABLE channels one less than the Minimum Channels OPERA 8LE, STARTUP and/or POWER OPERATION and/or opera-tion in the other applicable MODE (S) may continue provided the following conditions are satisfied:
a.
Verify that one of the inoperable channels has been bypassed and place the other inoperable channel in the tripped condition within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br />.
b.
All functionk1 units affected by the bypassed / tripped channel shall also be placed in the bypassed / tripped condition as listed below.
Process Measurement Circuit Functional Unit Bypassed / Tripped 1.
Containment Pressure Circuit Containment Pressure - High (ESF)
Containment Pressure - High (RPS) 2.
Steam Generator Pressure -
Steam Generator Pressure Low '
SteaurGeneratopilvel - High Low g Steam Generator AP (EFAS)
J u d l 4
y f
4.
Steen-Generator-Level.
5 a
el e
K g _ Steam nerator dP (E STARTUP and/or POWER OPERATIDR and/or operat M n the other applicable MODE (S) may continue until the performance of the next required CHANNEL FUNCTIONAL TEST.
Subsequent STARTUP and/or POWER OPERATION and/or operation in the other applicable MODE,(S)
~
may continue if one channel is restored to OPERABLE status and the provisions of ACTION 13 are satisfied.
ACTION 15 -
With the number of OPERABLE channels one less than the Total Number of Channels, restore the inoperable channels to OPERABLE status within 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> or be in at least H0T STAND 8Y within 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and in HOT SHUTDOWN within the following 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />.
ACTION 16 -
With the number of OPERA 8LE channels one less than the Total Number of Channels, restore the inoperable channel to OPERABLE status within 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> or declare the associated valve inoperable and take the ACTION required by Specification 3.7.1.5.
ACTION 17 -
With the number of OPERA 8LE channels one less than the Total Number of Channels, STARTUP and/or POWER OPERATION may continue provided the inoperable channel is placed in the tripped (D.C.
Relay energized) condition within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br />, the remaining Emergency Diesel Generator is OPERA 8LE, and the inoperable.
channel is restored to OPERABLE status within the next 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br />.
Otherwise, be in at least HOT STAND 8Y within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />
~
and COLD SHUTDOWN within the next 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />. The surveillance requirements of Table 4.3-2 are waived for all channels while this action requirement is in effect.
1 WATERFORD - UNIT 3 3/4 3-18 Amendment No. 47
TARI F 3 3 3 (r%ntinnaan i
TABLE NOTATION l
l ACTION 18 -
With more than one channel inoperable, or if the inoperable channel cannot be placed in the trip (D.C. Relay energized) condition, declare the associated Emergency Diesel Generator inoperable and take the ACTION required by Specification 3.8.1.1. The surveillance requirements of Table 4.3-2 are waived for all channels while this action requirement is in effect.
ACTION 19 -
With the number of channels OPERABLE one less than the Total Number of Channels, STARTUP and/or POWER OPERATION and/or operation in the other applicable MODE (S) may continue, provided the inoperable channel is placed in the bypassed or tripped condition within 1 hour:
a.
If the inoperable channelis to remain in the bypassed condition, the desirability of maintaining this channel in the bypassed condition shall be documented by the Plant Operations Review Committee in accordance with plant administrative procedures. The channel shall be retumed to OPERABLE status no later than prior to entry into the
/g668f applicable MODE (S) following the next COLD SHUTDOWN.
\\
b.
If the inoperable channelis required to be placed in the tripped condition, within 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> either restore the channel to OPERABLE status or place the channelin the bypassed condition. If the tripped channel can not be retumed to OPERABLE status in 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br />, be in at least HOT STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br /> or place the tripped channel in bypass.
ACTION 20 -
With the number of OPERABLE channels one less than the Minimum Channels OPERABLE, STARTUP and/or POWER OPERATION and/or operation in the other applicable MODE (S) may continue provided the following conditions are satisfed:
inopkra h
1 ou b.
Restore at least one of the inoperable channels to OPERABLE status
) SEA 7 7, within 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />. Subsequent operation in the applicable MODE (S) may continue if one channelis restored to OPERABLE status and the provisions of ACTION 19 are satisfed.
WATERFORD - UNIT 3 3/4 3-18a Amendment No. 47,143 4
INSERT 1 With a channel process measurement circuit that affects multiple functional units inoperable or in test, bypass or trip all associated functional units as listed below:
Process Measurement Circuit Functional Unit Bypassed / Tripped 1.
Steam Generator Pressure Steam Generator Pressure - Low
- Low Steam Generator AP 1 and 2 (EFAS) 2.
Steam Generator Level Steam Generator Level-Low Steam Generator Level-High Steam Generator AP (EFAS) i l
l I
i
F'
't I
I l
insert 2 j
a.
Verify that one of the inoperable channels has been bypassed and place the other inoperable channelin the tripped condition within 1 I
hour. With a channel process measurement circuit that affects multiple functional units inoperable or in test, bypass or trip all associated functional units as listed below:
Process Measurement Circuit Functional Unit Bypass / Tripped 1.
Steam Generator Pressure Steam Generator Pressure - Low
- Low Steam Generator AP 1 and 2 (EFAS) 2.
Steam Generator Level Steam Generator Level-Low Steam Generator Level-High Steam Generator AP (EFAS)
)
I i
4
l 3/4 3 INSTRUMENT AllON
~
BASES
\\
3/4 3.1 and 3/4 3 2 REACTOR PROTECTIVE AND ENGINFERFD SAFETY FEATURES ACTUATION SYSTEMS INSTRUMENTATION The OPERABILITY of the Reactor Protective and Engineered Safety Features Actuation Systems instrumentation and bypasses ensures that (1) the associated Engineered Safety i
Features Actuation action and/or reactor trip will be initiated when the parameter monitored by each channel or combination thereof reaches its setpoint, (2) the specified coincidence logic is maintained, (3) sufficient redundancy is maintained to permit a channel to be out of service for testing or maintenance, and (4) sufficient system functional capability is available from diverse parameters.
The OPERABILITY of these systems is required to provide the overall reliability, redundancy, and diversity assumed available in the facility design for the protection and mitigation of accident and transient conditions. The integrated operation of each of these systems is consistent with the assumptions used in the safety analyses.
The redundancy design of the Control Element Assembly Calculators (CEAC) provides reactor protection in the event one or both CEACs become inoperable. If one CEAC is in test or inoperable, verification of CEA position is performed at least every 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br />. If the second CEAC fails, the CPCs will use DNBR and LPD penalty factors to restrict reactor operation to some rnaximum fraction of RATED THERMAL POWER. Jf-this-me N
a reactor trip will occur.
// SE/?T 3
/
Tage
-3 ACTIOQ19 aligws for tinueq o tio in the' pli e M DE( with n th byp%toragg Po((R ater F) ' o an i dn to ~ ed e
the e ling i
o if a o
ble hann of ortrippedpn ' tion nn is ce a
i w
equirgd to placed irt e ' pe con ition ' thin e ho, th withi 48 i
the W u
han' I st either stored to PE BL stat' or pfa d in eb assed co diti '.
eb as d ch'annel ust t$e res cred O
s sp r to tenqp SPglovlbghan els pergble d t sting or repairs is ne\\With'onecessary on one of the rema e n 41 MODE 5' entry.
O
',Ilo ing e
a i
yp
.s,
20 s te nter'ed.
TIO a is annotated '
en :t2 for M 3.0.4 e mption to allow the changing of MO, Eh)even ough one chalgrle is_ bypassed.JODE ch ges between MODES 1 and 4 with co uration are allowed, to permitmaintenan and testing on the inoperable 1
chann this configuration, the protection system is in a two cut-of-three logic, and the L
probability of a random failure affecting two of the OPERABLE channels is remote. The tri _
condition does not have this annotation as a single failure could cause the Emergency Cod Cooling System and Containment y-Systesuctions to be supplied from the Safety and lo s of the Low issure Safety injection Sys msy q
injection System Sum w Steam Genersge AP (EFAS)
Table 3.3-3 T N 20 allows for continuyedration in the applicable MODE (S) 'th two of the RWSP-nnels ifnoabterprovided that one of the inoperable channels is bypassed and the otherihoperabTe channelis placed in the tripped condition within one hour.
One of the inoperable RWSP - Low channels must be restored to OPERABLE status within 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> to allow removal of the channel from the tripped condition. The allowed time is acceptable because operating experience has demo low probability of the following sequence of events occuring: the need to place o R6WP -l.
channelin the tripped SJ5P
(._
WATERFORD - UNIT 3 B 3/4 3-1 Amendment No.69;M3143
r Insert 3 Table 3.3-3 ACTION 19 allows for continued operation in the applicable l
MODE (S) with one of the Refueling Water Storage Pool (RWSP)- Low or Steam l
Generator AP Emergency Feedwater Actuation Signal (EFAS) channels l
. inoperable provided the channel is placed in the bypass or tripped condition within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br />. If an inoperable channel of the RWSP - Low or Steam Generator AP (EFAS) channel is required to be placed in the tripped condition within one hour, then within 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> the channel must either be restored to OPERABLE or be placed in the bypassed condition. The bypassed channel must be restored to OPERABLE status prior to entering the applicable MODE (S) following the next MODE 5 entry. With one of the RWSP - Low or Steam Generator AP (EFAS) channels inoperable and in bypass, and a failure occurs or repairs are necessary on one of the remaining channels, ACTION 20 must be entered.
k Insert 4 with a premature Recirculation Actuation Signal (RAS) or with an inadvertent EFAS could cause the automatic isolation of a faulted generator from Emergency Feedwater (EFW) to not occur as assumed by the Waterford 3 safety analysis.
l l
l I'
I
.3W. 31840 i fuJetriceu e M s st.ssu BASES 3/4.3.1 and 3/4.3.2 REACTOR PROTECTIVE AND ENGINEERED SAFETY FEATURE SAFETY ACTUATION SYSTEMS INSTRUMENTATION condition while another RWSP-Low channelis in bypass, the receipt of a valid Safety injection l
l Actuation Signal Actuation, and a coincident failure of one of the two remaining OPERABLE RWSP-Low channels. These conditions could cause the Emergency Core Cooling System and Containment Spray System suctions to be supplied from the Safety injection System Sump prematurely due to containment pressure being higher than RWSP outlet pressure and loss of the Low Pressure Safety injection Systems, gL 7~'n l
MSE fJ c
l When one of the inoperable channels is est>iOP5RABLE status, subsequent operation in the applicable MODE (S) may continue in accordance with the provisions of ACTION 19.
7 e
n'Sft T fo those systems ensure that the overall The Surveillance Requirements spe i system functional capability is maintained comparable to the original design standards. The periodic surveillance tests performed at the minimum frequencies are sufficient to demonstrate this capability. The quarterly frequency for the channel functional tests for these systems comes from the analyses presented in topical report CEN-327: RPS/ESFAS Extended Test Interval Evaluation, as supplemented.
Testing frequency for the Reactor Trip Breakers (RTBs) is described and analyzed in CEN channel functional test and RPS logic channel functional test are NPSD-951. y n,.su that RTBs are verified OPERABLE at least every 6 weeks to ff scheduled ar accommodath m: 6 vendor recommended interval for cycling of each RTB.
RPS\\ESFAS Trip Setpoints values are determined by means of an explicit setpoint calculation analysis. A Total Loop Uncertainty (TLU) is calculated for each RPS/ESFAS instrument channel. The Trip Setpoint is then determined by adding or subtracting the TLU from the Analytical Limit (add TLU for decreasing process value; subtract TLU for increasing process value). The Allowable Value is determined by adding an allowance between the Trip Setpoint and the Analytical Limit to account for RPS/ESFAS cabinet Periodic Test Errors (PTE) which are present during a CHANNEL FUNCTIONAL TEST PTE combines the RPS/ESFAS cabinet reference accuracy, calibration equipment errors (M&TE), and RPS/ESFAS cabinet bistable Drift Periodic testing assures that actual setpoints are within their Allowable Values. A channel is inoperable if its actual setpoint is not within its Allowable Value and corrective action must be taken. Operation with a trip set less conservative than its setpoint, but within its specified ALLOWABLE VALUE is acceptable on the basis that the difference between each trip Setpoint and the ALLOWABLE VALUE is equal to or less than the Periodic Test Error allowance assumed for each trip in the safety analyses.
l The measurement of response time at the specified frequencies provides assurance that the protective and ESF action function associated with each channelis completed within the time limit assumed in the safety analyses. No credit was taken in the analyses for those channels with response times indicated as not applicable.
Response time may be demonstrated by any series of sequential, overlapping, or total channel test measurements provided that such tests demonstrate the total channel response time as defined. Sensor response time verification may be demonstrated by (1) in place, ogr ":M: K.n::~ements or (2) utilizing replacement sensors with certified nem Angdment No.M3,-443 WATERFORD -UNIT 3 B 3/4 3-1a W
W L
Insert 5 One of the inoperable Steam Generator AP (EFAS) channels must be restored to OPERABLE status within 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> to allow removal of the channel from the tripped condition. The allowed outage time is acceptable because operating experience has demonstrated the low probability of the following sequence of events occurring: the need to place one Steam Generator AP (EFAS) in the tripped condition while another Steam Generator AP (EFAS) is in bypass, coincident with a failure of one of the two remaining OPERABLE Steam Generator AP (EFAS) channels, and the occurrence of a Main Steam Line Break (MSLB) or Feedwater Line Break (FWLB). These conditions could cause the automatic isolation of a faulted steam generator from Emergency Feedwater (EFW) to not occur as assumed by the Waterford safety analysis.
F, s
l Insert 6 Because of the interaction between process measurement circuits and associated functional units as listed in the ACTIONS 19 and 20, placement of an inoperable channel of Steam Generator Level in the bypass or trip condition results in corresponding placements of Steam Generator AP (EFAS) instrumentation. Depending on the number of applicable inoperable channels, the provisions of ACTIONS 19 and 20 and the aforesaid scenarios for Steam Generator AP (EFAS) would govern.
l
)
}
l l
k Insert 7 The Reactor Trip Breakers Functional in Table 32-1 refers to the reactor trip breaker channels. There are four reactor trip breaker channels. Two reactor trip breaker channels with a coincident trip logic of one-out-of-two taken twice (reactor trip channels A or B, and C or D) are required to produce a trip. Each reactor trip breaker channel consists of two reactor trip breakers. For a reactor trip breaker channel to be considered OPERABLE, both of the reactor trip breakers of that reactor trip breaker channel must be capable of performing their safety function (disrupting the flo'w of power in its respective trip leg). The safety function is satisfied when the reactor trip breaker is capable of automatically opening, or otherwise opened or racked-out.
If a racked-in reactor trip breaker is not capable of automatically opening, the ACTION for an inoperable reactor trip breaker channel shall be entered. The ACTION shall not be exited unless the reactor trip breaker capability to automatically open is restored, or the reactor trip breaker is opened or racked-out.
NOTE-DO NOTADD THE BELOW TEXT As discussed in the coverletter (W3F1-98-0033 dated July 2,1998), this bases insert (Insert 7) has been reviewed and approved by the W3 PORC in accordance with 10CFR50.59. This text is being provided with this TSCR so that when the NRC issues the requested amendment, this text can be included in the updated version forcompleteness.
I
9 o
NPF-38-207 ATTACHMENT C PROPOSED SPECIFICATIONS
e I
0 0
2 2
b, b,
N 9
9 O
O N
1 1
I T
T a
a C
5 9
9 2
5 N
A 1
1 1
1 1
E M
D N
E E
LB M
S A
A E
C I D 3
3 3
3 3
N LO 2
2, 2,
O P
P M 2
2 I
T A
1 1
1 1
1 ATNE M
URTS SE N
LL I
MEB 2mr r
r r
f o
o o
o M
UNA oat mt mt mt ea a
a a
MNR st r ar ar ar E
I t
se ee ee ee T
N AE e r n t
n t n t
n
)
S I
HP s
s s
s ee
/ e
/ e
/ e d
Y MCO 2pg 3 g 3g 3
2 g e
S un N
i O
tn I
o T
S 6
C A
L 1
U E P 2mr r
r r
o o
o o
3
(
3 T
NI f at mt mt mt 4
C N R oea a
a a
/
t r ar ar ar 3
3 A
A T se ee ee ee te n
t n
t n
t n
3 S
HO s
s r
s s
ee
/ e
/ e
/ e E
E CT 1 pg 2 g 2 g 2
1 g L
R B
U A
T T
A S
E L
F E
Y O.N i
N N 2 mr r
r r
o o
o o
f A
oat mt mt mt
-t L H ea a
a a
F st r ar ar ar A
A C se ee ee ee t
T e
S r n t
n n
t n t
OF s
s s
s ee
/ e
/ e
/ e D
TO 2 pg 4 g 4g 4
2g
)
E S
R A
E F
E E
N
(
I R
G E
N T
E A
s
)
e wr n
c W
no o u o
ig s
D L
t s
it t
E u
- e a
oG 3
)
h
) r u
L T
E B
S I
F p
/
ig 2P) c e
I t
T 2
2 N
v e )w
/
G1 A
/
1 H
1 N
Y ir
(
g U
la
(/ (
c U
C T
led no val esp it l
(
L N
la e a/
eNT m
)
v n2 voi a
D lor r
A E
el R
u L
1 L
oi c r
N G
n w(
d w e
t t g nd v O
O R
a GoP Gno uo o
e F
I E
T
(
C M
E N
E a
b c
d e
TA U
F 7
W
TABLE 3.3-3 (Continued)
TABLE NOTATION (a) Trip function may be bypassed in this MODE when pressurizer pressure is less than 400 psia; bypass shall be automatically removed when pressurizer pressure is greater than or equal to 500 psia.
(b) An SlAS signal is first necessary to enable CSAS logic.
The provisions of Specification 3.0.4 are not applicable.
ACTION STATEMENTS ACTION 12 With the number of OPERABLE channels one less than the Total Number of Channels, restore the inoperable channel to OPERABLE status within 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />.
ACTION 13 With the number of channels OPERABLE one less than the Total Number of Channels, STARTUP and/or POWER OPERATION and/or operation in the other applicable MODE (S) may continue provided the inoperable channel is placed in the bypassed or tripped condition within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br />, if the inoperable channelis bypassed, the desirability of maintaining this channelin the bypassed condition shall be documented by the Plant Operations Review Committee in accordance with plant administrative procedures.
The channel shall be returned to OPERABLE status no later than prior to entry into the applicable MODE (S) following the next COLD SHUTDOWN.
With a channel process measurement circuit that affects multiple functional units inoperable or in test, bypass or trip all associated functional units as listed below:
Process Measurement Circuit Functional Unit Bypassed / Tripped 1.
Containment Pressure - High Containment Pressure - High (ESF)
Containment Pressure - High (RPS) 2.
Steam Generator Pressure -
Steam Generator Pressure - Low Low Steam Generator AP 1 and 2 (EFAS)
WATERFORD - UNIT 3 3/4 3-17 AMENDMENT NO. 409 I
TABLE 3.3-3 (Continued)
TABLE NOTATION ACTION 14 With the number of OPERABLE channels one less than the Minimum Channels OPERABLE, STARTUP and/or POWER OPERATION and/or operation in the other applicable MODE (S) may continue provided the following conditions are satisfied:
a.
Verify that one of the inoperable channels has been bypassedand place the other inoperable channel in the tripped condition within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br />.
b.
All functional units affected by the bypassed / tripped channel shall also be placed in the bypassed / tripped condition as listed below.
Process Measurement Circuit Functional Unit Bypassed / Tripped 1.
Containment Pressure Circuit Containment Pressure - High (ESF)
Containment Pressure - High (RPS) 2.
Steam Generator Pressure -
Steam Generator Pressure - Low Low Steam Generator aP 1 and 2 (EFAS)
I STARTUP and/or POWER OPERATION and/or operation in the other applicable MODE (S) may continue until the performance of the next required CHANNEL FUNCTIONAL TEST. Subsequent STARTUPand/or POWER OPERATION and/or operation in the other applicable MODE (S) may continue if one channelis restored to OPERABLE status and the provisions of ACTION 13 are satisfied.
ACTION 15 With the number of OPERABLE channels one less than the Total Number of Channels, restore the inoperable channels to OPERABLE status within 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> or be in at least HOT STANDBY within 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and in HOT SHUTDOWN within the following 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />.
ACTION 16 With the number of OPERABLE channels one less than the Total Number of Channels, restore the inoperable channel to OPERABLE status within 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> or declare the associated valve inoperable and take the ACTION required by Specification 3.7.1.5.
WATERFORD - UNIT 3 3/4 3-18 AMENDMENT NO. 47
t TABLE 3.3-3 (Continued)
TABLE NOTATION ACTION 17 With the number of OPERABLE channels one less than the Total Number of Channels, STARTUP and/or POWER OPERATION may continue provided the inoperable channel is placed in the tripped (D.C. Relay energized) condition within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br />, the remaining Emergency Diesel Generator is OPERABLE, and the inoperable channel is restored to OPERABLE status within the next 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br />. Otherwise, be in at least HOT STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and COLD SHUTDOWN within the next 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />. The surveillance requirements of Table 4.3-2 are waived for all channels while this action requirement is in effect.
ACTION 18 With more than one channel inoperable, or if the inoperable channel cannot be placed in the trip (D.C. Relay energized) condition, declare the associated Emergency Diesel Generator inoperable and take the ACTION required by Specification 3.8.1.1. The surveillance requirements of Table 4.3-2 are waived for all channels while this action requirement is in effect.
ACTION 19 With the number of channels OPERABLE one less than the Total Number of Channels, STARTUP and/or POWER OPERATION and/or operation in the other applicable MODE (S) may continue, provided the inoperable channel is placed in the bypassed or tripped condition within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br />; a.
If the inoperable channel is to remain in the bypassed condition, the desirability of maintaining this channelin the bypassed condition shall be documented by the Plant Operations Review Committee in accordance with plant administrative procedures. The channel shall be returned to OPERABLE status no later than prior to entry into the applicable MODE (S) following the next COLD SHUTDOWN.
b.
If the inoperable channelis required to be placed in the tripped condition, within 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> either restore the channel to OPERABLE status or place the channelin the bypassed condition. If the tripped channel can not be returned to OPERABLE status in 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br />, be in i
at least HOT STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br /> or place the tripped channel in bypass.
l With a channel process measurement circuit that affects multiple functional units inoperable or in test, bypass or trip all associated functional units as listed below-l WATERFORD - UNIT 3 3/4 3-18a AMENDMENT NO. 47,143, l
f TABLE 3.3-3 (Continued)
TABLE NOTATION Process Measurement Circuit Functional Unit Bypassed / Tripped 1.
Steam Generator Pressure Steam Generator Pressure - Low
- Low Steam Generator aP 1 and 2 (EFAS) 2.
Steam Generator Level Steam Generator Level-Low Steam Generator Level-High Steam Generator aP (EFAS)
ACTION 20 With the number of channels OPERABLE one less than the Minimum Channels OPERABLE, STARTUP and/or POWER OPE YATION and/or operation in the other applicable MODE (S) may continus provided the following conditions are satisfied a.
Verify that one of the inoperable channels has been bypassed and place the other inoperable channel in the tripped condition within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br />. With a channel process measurement circuit that affects multiple functional units inoperable or in test, bypass or trip all associated functional units as listed below:
Process Measurement Circuit Functional Unit Bypassed / Tripped 1.
Steam Generator Pressure Steam Generator Pressure - Low
- Low Steam Generator AP 1 and 2 (EFAS) 2.
Steam Generator Level Steam Generator Level-Low Steam Generator Level-High Steam Generator AP (EFAS) b.
Restore at least one of the inoperable channels to OPERABLE status within 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />. Subsequent operation in the applicable MODE (S) may continue if one channel is restored to OPERABLE status and the provisions of ACTION 19 are satisfied.
WATERFORD - UNIT 3 3/4 3-18b AMENDMENT NO. 47; 443
t e
3/4.3 INSTRUMENTATION BASES 3/4.3.1 and 3/4.3.2 REACTOR PROTECTIVE AND ENGINEERED SAFETY FEATURES ACTUATION SYSTEMS INSTRUMENTATIOM The OPERABILITY of the Reactor Protective and Engineered Safety Features Actuation Systems instrumentation and bypasses ensures that (1) the associated Engineered Safety Features Actuation action and/or reactor trip will be initiated when the parameter monitored by each channel or combination thereof reaches its setpoint, (2) the specified coincidence logic is maintained, (3) sufficient redundancy is maintained to permit a channel to be out of service for testing or maintenance, and (4) sufficient system functional capability is available from diverse parameters.
The OPERABILITY of these systems is required to provide the overall reliability, redundancy, and diversity assumed available in the facility design for the protection and mitigation of accident and transient conditions. The integrated operation of each of these systems is consistent with the assumptions used in the safety analyses.
The redundancy design of the Control Element Assembly Calculators (CEAC) provides reactor protection in the event one or both CEACs become inoperable. If one CEAC is in test or inoperable, verification of CEA position is performed at least every 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br />. If the second CEAC fails, the CPCs will use DNBR and LPD penalty factors to restrict reactor operation to some maximum fraction of RATED THERMAL POWER. If this maximum fraction is exceeded, a reactor trip will occur.
Table 3.3-3 ACTION 19 allows for continued operation in the applicable MODE (S) with one of the Refueling Water Storage Pool (RWSP)- Low or Steam GeneratoraP Emergency Feedwater Actuation Signal (EFAS) channels inoperable provided the channel is placed in the bypass or tripped condition within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br />. If an inoperable channel of the RWSP - Low or Steam Generator aP EFAS channel is required to be placed in the tripped condition within one hour, then within 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> the channel must either be restored to OPERABLE status or be placed in the bypassed condition. The bypassed channel must be restored to OPERABLE status prior to entering the applicable MODE (S) following the next MODE 5 entry. With one of the RWSP - Low or Steam Generator aP (EFAS) channels inoperable and in bypass, and a failure occurs or repairs are necessary on one of the remaining channels, ACTION 20 must be entered.
ACTION 19a is annotated with a 3.0.4 exemption to allow the changing of MODE (S) even I
though one channelis bypassed. MODE changes between MODES 1 and 4 with this configuration are allowed, to permit maintenance and testing on the inoperable channel. In this configuration, the protection system is in a two-out-of-three logic, and the probability of a random failure affecting two of the OPERABLE channels is remote. The tripped condition does not have this annotation as a single failure could cause the Emergency Core Cooling System and Containment Spray System suctions to be supplied from the Safety injection System Sump prematurely and loss of the Low Pressure Safety injection Systems with a premature l
WATERFORD - UNIT 3 B 3/4 3-1 AMENDMENT NO. 33,113,143
e 2
s 3/4.3 INSTRUMENTATION BASES (Cont'd) 3/4.3.1 and 3/4 3.2 REACTOR PROTECTIVE AND ENGINEERED SAFETY FEATUBE SAFETY ACTUATION SYSTEMS INSTRUMENTATION (Continued)
Recirculation Actuation Signal (RAS) or with an inadvertent EFAS could cause the automatic isolation of a faulted steam generator from Emergency Feedwater (EFW) to not occur as assumed by the Waterford 3 safety analysis.
Table 3.3-3 ACTION 20 allows for continued operation in the applicable MODE (S) with two of the RWSP - Low or Steam GeneratoraP (EFAS) channels inoperable provided that one l
of the inoperable channels is bypassed and the other inoperable channel is placed in the tripped condition within one hour.
One of the inoperable RWSP-Low channels must be restored to OPERABLE status within 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> to allow removal of the channel from the tripped condition. The allowed time is acceptable because operating experience has demonstrated the low probability of the following sequence of events occurring: the need to place one RWSP-Low channel in the tripped l
condition while another RWSP-Low channel is in bypass, the receipt of a valid Safety injection Actuation Signal Actuation, and a coincident failure of one of the two remaining OPERABLE RWSP-Low channels. These conditions could cause the Emergency Core Cooling System and Containment Spray System suctions to be supplied from the Safety injection System Sump prematurely due to containment pressure being higher than RWSP outlet pressure and loss of the Low Pressure Safety injection Systems.
I One of the inoperable Steam Generator AP (EFAS) channels must be restored to OPERABLE status within 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> to allow removal of the channel from the tripped condition.
The allowed time is acceptable because operating experience has demonstrated the low probability of the following sequence of events occurring: the need to place one Steam Generator 6P (EFAS) channel in the tripped condition while another Steam Generator AP (EFAS) is in bypass, coincident with a failure of one of the two remaining OPERABLE Steam Generator aP (EFAS) channels, and the occurrence of a MSLB or FWLB. These conditions could cause the automatic isolation of a faulted steam generator from Emergency Feedwater (EFW) to not occur as assumed by the Waterford safety analysis.
i When one of the inoperable channels is restored to OPERABLE status, subsequent operation in the applicable MODE (S) may continue in accordance with the provisions of ACTION 19.
i WATERFORD - UNIT 3 B 3/4 3-1a AMENDMENT NO. 00,113,143
O t
e 3/4.3 INSTRUMENTATION BASES (Cont'd) 3/4.3.1 and 3/4.3.2 REACTOR PROTECTIVE AND ENGINEERED SAFETY FEATURE SAFETY ACTUATION SYSTEMS INSTRUMENTATION (Continued)
Because of the interaction between process measurement circuits and associated functional units as listed in the ACTIONS 19 and 20, placement of an inoperable channel of Steam Generator Level in the bypass or trip condition results in corresponding placements of Steam Generator AP (EFAS) instrumentation. Depending on the number of applicable inoperable channels, the provisions of ACTIONS 19 and 20 and the aforesaid scenarios for Steam Generator aP (EFAS) would govern.
The Surveillance Requirements specified for these systems ensure that the overall system
{
functional capability is maintained comparable to the original design standards. The periodic j
surveillance tests performed at the minimum frequencies are sufficient to demonstrate this I
capability. The quarterly frequency for the channel functional tests for these systems comes f
from the analyses presented in topical report CEN-327: RPS/ESFAS Extended Test Intervai Evaluation, as supplemented.
Testing frequency for the Reactor Trip Breakers (RTBs) is described and analyzed in CEN NPSD-951. The quarterly RTB channel functional test and RPS logic channel functional test are l
scheduled and performed such that RTBs are verified OPERABLE at least every 6 weeks to accommodate the appropriate vendor recommended interval for cycling of each RTB.
RPS\\ESFAS Trip Setpoints values are determined by means of an explicit setpoint calculation analysis. A Total Loop Uncertainty (TLU) is calculated for each RPS/ESFAS instrument channel. The Trip Setpoint is then determined by adding or subtracting the TLU from the Analytical Limit (add TLU for decreasing process value; subtract TLU for increasing process value). The Allowable Value is determined by adding an allowance between the Trip Setpoint and the Analytical Limit to account for RPS/ESFAS cabinet Periodic Test Errors (PTE) which are present during a CHANNEL FUNCTIONAL TEST. PTE combines the RPS/ESFAS cabinet reference accuracy, calibration equipment errors (M&TE), and RPS/ESFAS cabinet bistable Drift. Periodic testing assures that actual setpoints are within their Allowable Values. A channel is inoperab!e if its actual setpoint is not within its Allowable Value and corrective action must be taken. Operation with a trip set less conservative than its setpoint, but within its specified ALLOWABLE VALUE is acceptable on the basis that the difference between each trip Setpoint and the ALLOWABLE VALUE is equal to or less than the Periodic Test Error allowance assumed for each trip in the safety analyses.
The measurement of response time at the specified frequencies provides assurance that the protective and ESF action function associated with each channel is completed within the time limit assumed in the safety analyses. No credit was taken in the analyses for those channels with response times indicated as not applicable.
WATERFORD - UNIT 3 B 3/4 3-1b AMENDMENT NO. 113,143,153
P 1
e o
3/4.3 INSTRUMENTATION BASES (Cont'd) 3/4.3.1 and 3/4.3.2 REACTOR PROTECTIVE AND ENGINEERED SAFETY FEATURE SAFETY ACTUATION SYSTEMS INSTRUMENTATION (Continued)
TABLE 3.3-1. Functional Unit 13. Reactor Trio Breakers Response time may be demonstrated by any series of sequential, overlapping, or total channel test measurements provided that such tests demonstrate the total channel response time as defined. Sensor response time verification may be demonstrated by (1) in place, onsite, or offsite test measurements or (2) utilizing replacement sensors with certified response times.
The Reactor Trip Breakers Functional Unit in Table 3.3-1 refers to the reactor trip breaker channels. There are four reactor trip breaker channels. Two reactor trip breaker channels with a coincident trip logic of one-out-of-two taken twice (reactor trip breaker channels A or 8, and C or D) are required to produce a trip. Each reactor trip breaker channel consists of two reactor trip breakers. For a reactor trip breaker channel to be considered OPERABLE, both of the reactor trip breakers of that reactor trip breaker channel must be capable of performing their safety function (disrupting the flow of power in its respective trip leg). The safety function is satisfied when the reactor trip breaker is capable of automatically opening, or otherwise opened or racked-out.
If a racked-in reactor trip breaker is not capable of automatically opening, the ACTION for an inoperable reactor trip breaker channel shall be entered. The ACTION shall not be exited unless the reactor trip breaker capability to automatically open is restored, or the reactor trip breaker is opened or racked-out.
WATERFORD - UNIT 3 B 3/4 3-1c AMENDMENT NO.