ML20211J589

From kanterella
Jump to navigation Jump to search
Forwards Draft Document Re Human Reliability Analysis for Study of Risks from SFP Accidents at Decommissioning Plants for Review & Comment by 990917
ML20211J589
Person / Time
Issue date: 08/19/1999
From: Huffman W
NRC (Affiliation Not Assigned)
To: Richards S
NRC (Affiliation Not Assigned)
References
NUDOCS 9909030195
Download: ML20211J589 (51)


Text

\\

l

\\

\\

p 1

UNITED STATES l

g j

NUCLEAR REGULATORY COMMISSION

\\*****l*

WASHINGTON, D.C. 200664J001 l

Au8ust 19, 1999 MEMORANDUM TO: Stuart A. Richards, Director 1

Project Directorate IV & Decommissioning Division of Licensing Project Management Office of Nuclear Reactor Regulation l

FROM:

William C. Huffman, Project Managen Decommissioning Section

\\.A'

{

Project Directorate IV & Decommissioning Division of Licensing Project Management j

Office of Nuclear Reactor Regulation i

SUBJECT:

HUMAN RELIABILITY ANALYSIS FOR THE STUDY OF RISKS FROM SPENT FUEL POOL ACCIDENTS AT DECOMMISSIONING PLANTS The staff is in the process of developing a risk-informed technical basis that will support the j

establishment of a predictable approach for regulatory decision making in the areas of emergency planning and insurance (and possibly other areas) for decommissioning nuclear power plants. A draft technical study entitled " Draft Technical Study of Spent Fuel Pool l

Accidents at Decommissioning Plants" has been made available to the industry and the public stakeholders. The report uses both deterministic and probabilistic assessments to evaluate the risks from spent fuel pool accidents at decommissioning plants. Several public meetings have been held to provide stakeholders with information on the report development and solicit any comments the stakeholders may have. A public workshop was conducted on July 15-16,1999, to provide stakeholders an opportunity to identify risk perspectives, design characteristics, procedurec, capabilities, or other aspects of decommissioning plants that may refine the scenarios and analyses in the draft technical study. At the workshop, the staff agreed to further i

examine the <traft report's human reliability aspects and involve stakeholders in staff human i

reliability considerations before finalizing the report.

Attached, for your information, is a draft document on human reliability assessment that is being sent to Dr. Harold Blackman of Idaho National Engineering and Environmental Laboratory, and Dr. Dennis Bley of Buttonwood Consulting, Inc., for their review and comment.

3 They were chosen because they have experience in the following areas:

Human reliability analysis (HRA), specifically with defining and incorporating human failure events (HFEs) into logic models and the quantification with a variety of models i

(understanding what are typical probabilities for these HFEs and the conditions they 4

l represent);

G'9 W / g

'\\

Behavioral Science /Cognitivo Science, particularly in identifying and characterizing

(' J those factors that can influence human performance, in responding to alarms and V

changing plant conditions, in the performance of routine surveillance, and in the performance of tasks; y y 59 f

rO@l

.s Qd b _k. g h M'bc W 9909030195 990819 PDR ORG NRRA PDR

S. A. Richards 2-August 19, 1999 Understanding failures of organizations in preventing major accidents; and Probabilistic risk assessments of spent fuel pools Once their comments are received, the document will be finalized and will represent the staff's human reliability analysis apprcach for this particular application.

Copies of this memorandum with the attachment will also be provided directly to interested public stakeholders. Comments, particularly from experts with experience matching the criteria above, received by September 17,1999, will be considered. Comments (with a description of any background in the area of human reliability analysis) should be addressed to U.S. Nuclear Regulatory Commission, Attn: Richard Dudley, Mail Stop O-11 D19, Washington D.C.,20555.

Attachment:

As stated cc w/att: See next page t

l l

cc:

Mr. Ralph Beedle Ms. Lynnette Hendricks, Director Senior Vice President Plant Support and Chief Nuclear Officer Nuclear Energy Institute Nuclear Energy Institute 1776 i Street, NW, Suite 400 1776 i Street, NW, Suite 400 Washington, DC 20006-3708 Washington, DC 20006-3708 Mr. Charles B. Brinkman, Director Mr. Alex Marion, Director Washington Operations Programs ABB-Combustion Engineering, Inc.

Nuclear Energy Institute 12300 Twinbrook Parkway, Suite 330 i

1776 l Street, Suite 400 Rockville, MD 20852 Washington, DC 20006-3708 Mr. Michael Meisner Mr. David Modeen, Director Maine Yankee Atomic Power Co.

l Engineering 321 Old Ferry Road Nuclear Energy Institute Wiscassett, ME 04578-4922 1776 i Street, NW, Suite 400 Washington, DC 20006-3708 Mr. Ray Shadis Friends of the Coast Mr. Anthony Pietrangelo, Director P. O. Box 98 Licensing Edgecomb, ME 04556 Nuclear Energy Institute 1776 i Street, NW, Suite 400 Mr. David Lochbaum Washington, DC 20006-3708 Union of Concerned Scientists i

1616 P St. NW, Suite 310 Mr. H. A. Sepp, Manager Washington, DC 20036 l

Regulatory and Licensing Engineering Westinghouse Electric Company Mr. Paul Gunter P.O. Box 355 Nuclear Information Resource Service j

Pittsburgh, PA 15230-0355 142416* St. NW, Suite 404 Washington, DC 20036 Mr. Jim Davis, Director Operations Mr. Peter James Atherton Nuclear Energy Institute P.O. Box 2337 1776 i Street, NW, Suite 400 Washington, DC 20013 Washington, DC 20006-3708 Mr. H. G. Brack Mr. Paul Blanch Center for Biological Monitoring Energy Consultant P.O. Box 144 135 Hyde Road Hull's Cove, ME 04644 West Hartford, CT 06117 Ms. Deborah B. Katz New England Coalition on Nuclear Citizen's Awareness Network Pollution P. O. Box 3023 P. O. Box 545 Charlemont, MA 01339-3023 Brattleboro, VT 05302

U 1

August i1,1999 TO:

Harold Blackman Dennis Bley FROM:

Gareth Parry

SUBJECT:

HUMAN RELIABILITY ANALYSIS (HRA) FOR SPENT FUEL POOLS As we discussed, I would appreciate your input on the assessment of human error probabilities for spent fuel pool risk assessment for decommissioned plants." Attached is a strawman document discussing the assessment of the contribution ofoperating staff failure to respond to an incident leading to a loss of the cooling function. Also attached is the probabilistic risk assessment (PRA) model in the form of event trees, fault trees and functional assignments that 1

identify the correspondence between the fault tree gates and the event tree branch points.

The focus of the discussion is on the' identification of plant operational practices that serve to enhance performance in responding, or equivalently as defences against failures to respond, to losses of the spent fuel pool cooling function, and to use simple models to calibrate the failure probabilities for example plant practices. This will be used to form the basis for making judgements as to whether existing or planned plant practices are adequate to justify that the likelihood of failing to respond when required to prevent fuel uncovery and possible zirconium fires is a small contributor to risk.

Please review and provide your comments. Specifically could you please address the following:

Is the general approach sound and consistent with current HRA practices? Suggest e

modifications or improvements you think are necessary.

l Are the operational practices that are proposed as aids to good performance reasonable?

e Are additional conditions required to define what constitutes a " good" implementation of the practice. For example, is it necessary to be clearer about the frequency and content of training? I don't believe it is necessary to be overly prescriptive, but it is useful to have some objective criteria against which to assess the " quality" of the practices. Many of the practices are already written so they.can be objectivelyjudged.

e One of the keys to arguing for low failure probabilities is that there is so much time for recovery of errors made by a particular crew. Based on your experience in analyzing significant event histories can you identify possible mechanisms for inter-crew common cause failures that would defeat the defences? For example, is it feasible that plant conditions could be such that both alarms and walkdown indications could be rationally argued away?

ATIAGRelNr

F 1

\\

I Can you suggest suitable representative values, including extreme values, for each of the human error probabilities (HEPs), particularly taking into account the long times available? Please indicate the assumed conditions for the values you suggest.

The analysis of the repair and leak isolation events is outside the scope of typical HRA j

e.

models. In the draft document there are some factors identified that impact the likelihood of success. Are there other factors you could point to that should be identified, perhaps during a walkdown? Do you know of any sources of data that could be used to provide j

some generic ranges for failure probabilities?

In order to meet our overall schedule, your response is requested by September 10,1999.

l

1 l

Spent Fuel Pool Human Reliability Analysis (HRA)

l. Introduction I

One of the issues that has been raised with respect to the probabilistic risk assessment (PRA)

- performed for the spent fuel pool during the decommissioning phase of plant life is how much credit can be given to the operating staff to respond to an incident at a spent fuel pool that would, if not attended to, lead to a loss of cooling and eventually to a zirconium fire. The initial risk assessment performed by the staff used estimates of human error probabilities that resulted in operator non-response being a significant contribution to the estimates of risk. The industry expressed its concern that, because of the very long time scales and the relative simplicity of the required actions, the non-response probabilities should be very low, and, in particular, much lower than those assumed in the staff analysis.

The objective of this task is to explore this issue and identify, in a systematic way, under what conditions, taking into account the full range of possible challenges to the pool functionality, it can be argued that the non-response probabilities can be argued to be low. This exercise will provide input to a technical study that will assist the exemption process and rulemaking i

development for decommissioning nuclear power plants. The conditions include the physical plant characteristics (e.g., nature and number of alarms, available mitigation equipment) and 1

identifiable and measurable characteristics of operational and management practices, 1

procedures, and training.

II.- Analysis Aooroach For spent fuel pool operation during the decommissioning phase, there are unique conditions not typical of those found during full-power operation. For most scenarios, the time-sxale for

' changes to plant condition to become significant are protracted so that there are many opportunities for plant personnel to recognize off-normal conditions, and a long time to take corrective action, such as making repairs, hooking up attemate cooling or inventory make-up systems, or even bringing in help from off site. In addition, there is only one function to be maintained, namely decay heat removal, and the systems available to perform this function are relatively simple. However, because the back-up systems are not automatically initiated, operator action is essential to successful response to failures of the cooling function, in the staff's initial evaluation, because there is little in the way of redundant onsite equipment, the failure to bring on offsite equipment is one of the most important contributors.

l in developing this approach, the following characteristics were identified as being desirable.

Because of the long time scales, it is essential to address the potential for recovery of failures on the part of one crew or individual, by other plant staff including subsequent shifts, and consider potential sources of dependency that could lead to a failure of the organization as a whole to respond adequately.

Identification of the conditions under which operating staff performance can be considered as providing high reliability should be based upon current understanding of the factors that influence human performance.

i I

Those factors that the industry has suggested that will help ensure adequate response

"(monitoring strategies, procedures, contingency plans) should be addressed.

Where possible, any evaluations of human error probabilities (HEPs) should be calibrated against currently accepiable ranges of HEPs.

. The current PRA model is accepted as being an appropnate framework for analyzing the risk from a spent fuel pool, and is maintained as a framework within which to discuss the

)

human performance issues.

- The reasoning behind the assumptions made should be transparent.

Ill. Human Performance lasues in order to be successful in coping with an incident at the facility, there are three basic functions that are required of the operating staff, and these are represented in some way in the PRA model.

. plant personnel must be able to detect and recognize when the spent fuel cooling function is deteriorating or pool inventory is being lost (Awareness).

plant personnel must be able to interpret the indications (identify the source of the f

problem) and formulate a plan that would mitigate the situation (Situation Assessment and Response Planning).

plant personnel must be able to perform the actions required to maintain cooling of and/or add water to the spent fuel pool (Response implementation).

Ill.1. Detection of Deviant Conditions There are two types of monitoring that can be expected to be used in alerting the plant staff to devlant conditions: a) passive monitoring in which alarms and annunciators are used to alert operators; b) active monitoring in which operators, on a routine basis, make observations to detect off-normal behavior. In practice both would probably be used. The amount of credit that can be assumed depends on the detailed design and application of the monitoring scheme.

a) In assessing the effectiveness of alarms there are several factors that could be taken into account, for example:

i l

alarms (including control room indications) are maintained and checked / calibrated on a i

regular basis alarm set-point is not too sensitive, so that there are few false alarms alarms cannot be permanently canceled without taking action to clear the signal alarms have multiple set-points corresponding to increasing degradation the existence of independent alarms that measure different primary parameters (e.g.,

level, temperature), or provide indirect evidence (sump pump alarms, secondary side cooling system trouble alarms) 2 1

1

]

1

R i

The first and last of these factors may be reflected in the reliability assumed for the alarm and in

.the structure of the logic model (fault tree) for the event tree function CRA, respectively. The other factors may be taken into account in assessing the reliability of the operator response.

(

b) For active monitoring, examples of the factors used 8n assessing the effectiveness of the monitoring inc'ude:

I scheduled walkdowns required within areas of concem, with specific items to check (particularly to look for indications not annunciated in or monitored from the control room, for example, indications of leakage, operation of sump pumps if not monitored, steaming 1

over the pool, humidity level)

. active measurement of (multiple, e.g., temperature, level) parameters rather than simply observing the condition of the pool

_ requirement to log results of monitoring j

alert levels specified and noted on measurement devices l

These factors can all be regarded as performance shaping factors (PSFs) that affect the reliability of the operators.

An important factor that should mitigate against not noticing a deteriorating condition is the time scale of development, which allows the opportunity for several shifts to notice the problem. The requirement for a formal shift tumover meeting should be considered.

111.2 Situation Assessment and Response Planning The principal operator aids for situation assessment and response planning are procedures and training in their use.

The types of procedures that might be available are:

annunciator / alarm response procedure that is explicit in pointing towards potential

[

problems l

detailed procedures for repair of systems, use of alternate systems indicating primary and back up sources, recovery of power, etc..

The response procedures may have features that enhance the likelihood of success, for l

example:

l procedures that provide for early action on contingencies (e.g., alerting offsite agencies l

such as fire brigades) in parallel with a primary response such as carrying out repairs or lining up an on-site alternate system.

in addition:

training for plant staff to give an awareness of the time available for response as a function of the age of the fuel would enhance tne likelihood of successful response.

3 L-

ll1.3 Response implementation Successful implementation of planned responses may be influenced by several factors, for

. example:

accessibility / availability of equipment staffing levels that are adequate for conducting each task and any parallel contingency plans, or plans to bring in additional staff training timely feedback on corrective action IV. Analysis of the Soecific Human Failure Events (HFEs) of the PRA model In order to provide a credible assessment of the effectiveness of the mitigation activities proposed, based on current models of human reliability, it is necessary to have enough detail about the way the mitigation activities are implemented that a model can be constructed. Since the details of the implementation of the mitigation strategies are not known at this time, and are i

likely to vary from plant to plant, the following discussion is based upon some fairly broad i

assumptions. The intent is to provide an indication of the factors that would help assure that human performance in responding to an incident is as effective as possible.

IV.1 Detection of Deviant Conditions IV.1.1 HEP-RES-ALARM: Original description is " Operator fails to respond to an alarm in the control room".

A more accurate description of this event is, the failure of the operating staff to detect and respond to an indication of an off-normal condition, given an operable alarm (or alarms)in the control room. The failure of the alarm itself is an event in the functional fault tree for event CRA.

The THERP (Techniques for Human Error Rate Prediction) handbook gives a range of probabilities for response to annunciated abnormal events. For an immediate response that is governed by plant rules, Table 20-23 suggests an HEP of 3E-04, if some diagnosis is involved, this HEP is considered time dependent and the screening model in Table 20-1 gives an HEP of 3E-03 at one hour, and about 1E-03 in one day. (These values are converted from the median values quoted to rounded off mean values, using the error factors given.) In the context of the model, the HFE can be regarded as failure to recognize that there is a problem rather than a failure to diagnose the cause. Therefore, as long as it is a plant rule that the cause of the alarm be investigated, a base HEP of 3E-04 for a single crew is appropriate.

Because there is a significant amount of time before action is required, several crews would

. have to fail to respond to the alarm for the fai'ure to occur. How much credit can be taken for successive crews depends on the nature of the alarms and crew responses. If, for example, the alarm could be permanently canceled, this would defeat the opportunities for subsequent crews to respond. However, typically, the auditory alarm would be canceled but the annunciator light would remain lit until the problem had been fixed. Swain gives very little credit for the operator 4

l

who canceled the alarm responding to the legend light once one minute has elapsed form the initial concellation of the annunciator. However, if it is normal practice that on a crew change, the status of all equipment is checked, a probability of 0.95 that the deviant indication would be detected (Table 11-8)is suggested.

j

- One PSF that could influence the likelihood of not responding immediately to the alarm is that the alarm set-point is such that there is a history of false alarms. It is not unreasonable to suppose that the annunciator be canceled and, because of other activities, the corrective action is put off. Using Table 11-12 gives a value of 1E-03 for such a response.

Taking these issues into consideration, a range of values can be estimated for this HEP. The most conservative is:

1E-03 x.05 = SE-05 (oversensitive alarm and no formal shift change, requiring the second shift to notice the annunciator panel light)

Given an alarm with a meaningful setpoint, and a plant rule to respond by investigating the cause of the alarm, together with plant operational procedures that require checking of all equipment status at least once a shift should be adequate to assure such a low probability.

Given also, that, for some initiating events, there are several related alarms, the probability may be argued to be even lower. For example, in the case of loss of cooling, an alarm on pool temperature may be preceded by an alarm indicating trouble with the primary cooling ' system, or an alarm on pool level may be preceded by a drain or sump alarm. It is noted, however, that such alarms were not present at the plants visited by the staff.

IV.1.2 REC-WLKDWN-LOI-S/ REC-WLKDWN-LOC / REC-WLKDWN-LOl-L Operator fails to notice.... Again, these events should really be described as operating staff fail to detect, over several shifts, that.....

n Chapter 19 of the handbook, Swain and Guttmann present models for detection of deviant conditions as a result of operator walkdowns. On the basis of a specific set of assumptions, including that no written procedure is used, no special oral instructions are given, and deviations are " fairly obvious", Table 19-4 gives probabilities of failure to detect a particular deviant condition within 30 days for a variety of different inspection routines. The probability of failure for a three shift system with one inspection per shift is high,.52, driven by a low expectation on the part of the plant personnel of finding a (Iow probability) deviant condition, and on an assumption of reliance on memory to detect differences in plant status from one observation to the next.

I The term " fairly obvious' is not defined, but by inference means noticeable without being clearly obvious, since it is assumed in the Handbook that very obvious indications such as a large pool of water on the floor, and presumably steam rising from the pool, would always be noticed.

Thus, such gross indications are assumed to guarantee identification of the need to respond.

The principal requirement for these obvious indications would be that the walkdowns were

' indeed carried out with a frequency that would result in observation of the deviant condition i

before fuel uncovery. Since, for many of the initiating events, the pool conditions are expected to change slowly, and, while they may be noticeable, they need not be readily detectable. The 5

i

- fficacy of an early detection of a deviant condition would be greatly increased by requiring e

measurements to be taken, recorded, and trended. In this case, changes could be identified early.

Possible failure modes for the function include (numbers in parenthesis refer to numbers taken

~. from the referenced table in THERP):

failure to carry out inspection (1E-03, Table 20-6) missing a crucial step in the written procedure (ranging from 1E-02 to 1E-03, Table 20-7) misreading a measuring device (on the order of 3E-03, Tables 20-10 and 20-11)

A detailed model could only be developed by making some detailed assumptions about the nature of the administrative procedure for performing the walkdown inspections. So, for example, if it were assumed that there is a procedure with a short check-off list which includes recording one parameter value, read from analog meter, then the probability of failure of one operator to measure the parameter is 1E-03, (failure to carry out inspection) +

1E-03, (omission, item (1) in Table 20-7) +

3E-03, (error of commission, item (1) in table 20-10) = 5E-03 If there are two parameters that have to be checked, then the failure probability would be dominated by the failure carry out the inspection. If each shift can be regarded as acting independently, then the failure probability over two crews would be the square of the HEP for one crew. That over three shifts would be the cube of the HEP. The limiting factor would be something that would create a inter-crew dependency. Possible mechanisms for introducing dependency include a lack of management commitment to,' or lack of enforcement of, carrying out the inspections, a poorly written procedure, or analog meters that are badly designed.

The range of possible values for the HEP is large. However, given a strict adherence to carrying out walkdowns, and a procedure that directs the checking of critical parameters, with a requirement for trending the observed values to identify slowly changing conditions, the likelihood of not detecting a deviant condition over several crew changes can be argued to be very low.

IV 1.3 Dependency The two events HEP-RES ALARM and REC-WLKDWN-XXX, appear in the same sequence.

Therefore it is reasonable to ask whether there is some common cause mechanism. Since the combination of failures would represent a failure of the control room operators to take charge of the situation and initiate some response, they are a single point in the process. However, given the independent nature of the separate sets of indications, failing to respond would have to be a wilful decision, motivated by some plant conditions that were misleading.

6

1 l

- IV.2 Recovery Events:

There are several different recovery events in the model. It is assumed that, since the failure to recognize that there is a deviant condition is already accounted for in the events discussed in Section IV.1, these events represent the failure of the operators to identify the cause of the problem and take appropriate corrective action. These events therefore should include failures in situation assessment and response planning and in the execution of those plans. The details of the steps requir.sd to perform these recovery actions are not known at this time.

IV.2.1 The events HEP-COOL-LOC-E, HEP-COOL-LOC-L, and HEP-COOL-LOP-E, represent the failure to restore the normal cooling system, for three different conditions. The first two, early and late, refer to the cases where detection is as a result of an alarm, and when detection is a result of attemate means of detection respectively. It is assumed there will be less time to respond in the second case. Given that the time scales are so long, it is not clear that this is an important factor.

The third event, HEP-COOL-LOP-E, represents the failure to restore after recovery of offsite pcwer, and therefore represents failure to perform a straightforward system restart. Since this is i

assumed to be a simple, and obvious step to take, the value of 3E-03 used in the initial staff analysis is appropriate for the initial failure to restart, being a value typically used in PRAs, but given that will typically still be a significant amount of time before fuel uncovery, (restoration of offsite power from plant centered events is typically on the order of hours, and from severe j

weather, on the order of a day) there are ample opportunities to recover, suggesting that a case could be made for a much lower value.

Events HEP-COOL-LOC-E, HEP-COOL-LOC-L are different in nature in that the response 1

required is repair as opposed to a simple restoration. This is not typically addressed by HRA techniques, but by actuarial data on repair times. In the initial staff paper, an exponential repair model with a mean time to repair of 10 hours1.157407e-4 days <br />0.00278 hours <br />1.653439e-5 weeks <br />3.805e-6 months <br />, with a cut-off value of 1E-04.

IV.2.2 Events HEP-INV-MKUP-E, and HEP-INV-MKUP-L are events that represent the failure to isolate leaks.gnd to start the make-up system. Again, these event probabilities are dependent on the location of the leaks and whether they can be isolated. The PRA model uses the same basic event in the function, failure to use the fire system as an alternate make-up system, which essentially assumes that the dominant factor is the failure to isolate. The source of a leak large enough to exceed the capacity of both the make up pump and the fire pump and require isolation should bo identifiable given accessibility to the areas adjacent to the pool or the cooling systems. Thus the factors that influence the failure probability include the location of the leak, the accessibility for both visual inspection and isolation, the size of the leak (which in tum govems the time available to perform the isolation). A low probability could be assumed if the locations of potential leaks (structural failures of the fuel pool itself are excluded as they are non-isolable), can be demonstrated to be readily identifiable, and isolation points are accessible.

IV.2.3 HEP-MKUP-SML represents the failure to initiate the normal coolant make-up system for q

smallleaks. This should be a commonly practiced procedure, since presumably it will be l

required to make up for evaporative losses from the pool. An HEP in the range of 1E-03 to 3E-03 would be typical for a failure of a single operator to start a system. However, given the 7

e i

extremely long time available, there are opportunities for several crews to correct an initial failure, and the likelihood of a sustained failure to correctly initiate the system should be low.

The limitation would be the occurrence of an inter-crew common cause failure mechanism.

IV.2.4 The events HEP-ALTCL-E, HEP-ALTCL-L, HEP-ALTCL-LP-E, represent failure to establish attemate cooling, using fire pumps, given a loss of normal spent fuel pool (SFP) cooling. The different cases are: E, response to early indication from the control room; L, later indication from walkdown; and LP-E, given a loss of offsite power. The principle difference between cases E and L is in the time assumed available.

The response for which this event represents failure is contingent upon a failure to reestablish normal cooling, except in the case that there is a non-recovered loss of offsite power, in which case there is no normal cooling available. It is possible to speculate about potential failure mechanisms, e.g., a fixation on trying to repair the normal system, but it is difficult to use such reasoning to assess a probability of failure, since there may be several mechanisms, each with its own PSFs. The likelihood of the failure mechanism postulated above, for example, would be influenced by the assessment of the operating crew on how close they are to fixing the problem, which in tum depends on the nature of the failure. Instead of building up a model from failure mechanisms, the approach proposed here is to start with an identification of those features of plant operations that could help to ensure that, if required, the action would be taken. These could include:

clear procedural guidance that the addition of water to the SFP is an appropriate contingency, guidance on when to begin the alignment of the fire water systems so that action can be taken in a timely manner, guidance on when to start adding water to the pool, provision of a dedicated person to monitor conditions, and determine when water addition should begin, a demonstration that the alignment can be achieved within the time expected to be available and assumed in setting the guidance on when to begin addition of water to the

pool, training in the procedures and the alignment of the systems.

Other factors that influence the possibility of success include:

whether the there is a need to run hoses or to connect them to an existing injection path whether all required equipment is situated in the vicinity of where the required actions are to be taken.

With the conditions defined, the problem becomes more constrained and amenable to evaluation. Since the response is likely to involve manual action in the vicinity of the pool area, one of the constraints that needs to be addressed is that caused by environmental conditions, such as high radiation, high humidity, or flooding. These will be event specific. For example, high radiation is more of a concem for the drain-down scenario than it is for the loss of cooling.

8

'lV.2.5 Events REC-lNV-OFFSITE, REC-INV-OFFSITE1, REC-INV-OFFSITE2, REC-INV-

' OFFSITE3, represent failure to recover inventory using offsite sources (e.g., fire trucks) for various time frames. Again, this event appears when all local means of adding water to the pool have failed. Since the actual response would be one for which a fire department could be expected to execute with a high success probability, given there are no physical obstacles that prevent access to the pool building, the key to success would be for the plant staff to plan early enough ahead to ensure that a fire truck was available when needed. As with the HEP-ALTCL-XXX events, the influence of the timing of detection of the problem is less significant if there are procedural instructions to prepare in advance and alert the fire department in a timely manner.

The defenses that would help ensure success include:

clear procedural guidance that the addition of water to the SFP is an appropriate contingency, guidance on when to contact the fire brigade to ensure that action can be taken in a timely manner, guidance on when to start adding water to the pool, provision of a dedicated person to monitor conditions, and determine when water addition should begin, a demonstration that the alignment can be achieved within the time expected to be available and assumed in setting the guidance on when to begin addition of water to the

pool, training in the procedures and the alignment of the systems.

9

I l

l 1

NE N

M g

EM 8E88 M 48 Opment Casug 4Aust h g

Gunner Thun Caseg pumaan unsg er canas a

3 fuun Get Symene Ommes Osnaues assues e

M DEM0ft e

m 9 44 let 50E ppt Cm Cy oce ort M1 EQf oft

-l 1948 6 um l

000CEPOC8 ost 5 00E40F warur.

16 9EM gg pardus IMM g

g um f1 H WWIIIT O MM g

gg a surrdams S MO w

gM 1MM pr sun R eMahuP8tAuv11 Pee ed M 44 08 M9140 N JpWIA90 gaf R 8A AT OfCOM8ideMPWS thessumamon Dune ab1990 See 87 70146 Car e 1 esse atmadeC estTIAT840 EM CA08 9

.. _... ~.,.... --

F

~

7.~

.-...c

... ~.... -

--.-.. - - - - - ~ + -

- - - - * - - + + - - - -.--

gumms reap reas sumsnapu r,eumt sumuuryu N

g p

Saul meumi tasyey of Sympus Casang IJung Owap a

0 mum man

  • Of SCsuPT0ft peseutsa;y NN W

h W

C"***

$isuus SW tyensus Omune tuwaus Sumpass 944 4)

SE PPI C3 CM OCS Ort "1

tot OK BW OK e

M M4EPim rrir N

OK i

11st401 N

\\

6 00tM m

HEGeus E MM gqqqq Og

~

m. sum 1M UuWIT S MM m

m sluseus

$ MM M

1MO grrett C 1AWfurtAGPp.N ed it to ed 974149 6 99 SFP fli&A Al DECOMMiS& sos 40 Pb4NTS Ouusumannen Dune 696 et14 al TOTAL Cap e1.318 4 36 4tiGMcC seTutusO SV00ff CAN S Fip 2b

_Seu_

rum -

seeme o

umg oness comm ensa mange at evasse r

asumer than cassg puessen

uns, er ossae 6

s fasse sea symose esses newess ensus e

m atacasrtm e

9 A4 tot get Fri ces ceF OCS OF8 9

EQE OK

. ~...

EMC8P OK 13Dt401 UGuL4p6 BQGCGPOCS OK

$ tot 407 WUL LEE GWM

=

m REE.ous I

f4

\\

z l

INEW gggCS Oml Eaes J

LPgrIY i

0 MO SMCMIPS SAWM

.

  • REGeus 1986 402 30EPF4 9.844E8 M

C wnNurmatrp4 ed 14 W 66 91474s W8WWWWelA 1 A SEP mest A10tConw&&K>stD PhAfffG Chefussenen Done 96 Of at to 701Ah CasF e t 9864e8 stewCesTnAtos0 EVENT CAGS $

.n.

~

eD ne m e.G

6 db 40

.e en W

6Wk 9

  • 4.

e en e*=

g se m S h

.e

.d b

4 6

5 EN 5 - - - - -

g b 98 er fen SGud Agesuuf M

g Ass Deaf en err Femmen unse omsee e

amasser tag Omed Susens e

SBQLassOESteGir?OR e

resougMCY Pn Pumes Put cer p

CFD B 086403 usst W

=

Faceroest ou e

iMO Uusbwurr e

1 l

'g, FmotroeseFC SME487 l

l 1

i c e.w. e. ie, u simme we*,.

, peu.

,,n.

0=sevenaion Does eMege to be 44 TOTAk Caer

  • 4 8444W7 J

MI Frys as

~ ~

1 1

.~ ~...

e.

)

... ~....,.

l

m. gie.

..see.==

e,.eu.

..-**--.emer**

'"N*'*

~* * * * "

" " * ~ *

  • ~

~**** ~** * * * * * * '

m me e een anse n,-wy ime a

p Aan SW em WP h 4Jusg Onnes O

s Ammar Der Ouseet Guaruus e

DESWirf0ft e

pgugAML*y Pee Pwsus PWI cer Oman OPD d 900402 ut<m 4

I I

It ossage Gwawn

\\

i I

6 M

e IMM hr 4

FM 1M stam C NGPP Ne 9W 14 to42 974759 wie84AJpAA10 gg, gy gg gg,gg g

Owastession Dese eMess te M 41 Tota 6 Casp a testees off1M F8tt pW7hkfes0 EteNT CAN S

  • * - ~ ~

e me me

.m gF.'gure.

3h

n.~

.m..

.... - =.-...--

seneeog.i e

u-m

-a muum emm e ew

-eeesms.e+

eee+

ene=e

=

=*wum e e w e e

m,..

m ww Y

Y h bib g em Eged.

Linkg g

g AdB W en $PP Peneen Unet Omiae 0

e flesser goal Cammel emawns e

SEOKNCE DESC3tIPTCft e

Maoiscv Pee swese P 8t OW Caen C, D

_-.m 4 00f 403 IDE T

Fft067 OK

_t rioEJiot EJsF41pt l

e S

W iM6 WIT

agg C -..........,,,.> -,.
  1. ,*"I*#88N W8 Oesneeemise Osie MM91193 R2 1Of AL CMP
  • 9 FJEm etTERse% FWtt piff tATeeQ tWMT CA38 8

. =

~

v e.e

--Sm g.m e weep.mes 9 4 Pgwe,3c

... _....; --.---. a ; - + ;. -

.*a.-.

....n..

w.

}

}

48'8

  • user usumur w

suspuert unst p

. OBEEif Amun emesamms af Amessry W estanes tenhaus ORIAs Gesses 9

dame Lams of among esame -

unse pse e

Coung Puuss N CEtauP70ft e

pseenmMCY LOC Esta se ocs OPD OP3 LOC OK e

9,

LDCOC8 Ost 14e8404

-u.m

"'"* 'N CH t 90E401 urus465 8 NG403

'1 Elf 402 m

g g,g,,

user, visseumi i

LOCCRA OK

=

innemance gg BJW408 i

\\

$ D9EM

=

a nermaM Oil EsWepuur S SIEW

swu64er, p

8*

E man I MPf*A a gM viss essi e

1 WW LOMamepC tmW "a*

DID4er, c unmuntau,nes e, se ei ne efetse um+ancia s s ye me n cecc 4sena0 we N 0sse SantWB to as de 10146 CasP e tmert LOS4 08 C00 Lees Cen t Fi ure 40-

m....-...-.

.a

,. +.. -.. - -. _,.

...... - - +............... _..

~

.~

~

~-

- - ~ - ~ - - - ' + -

N

-F h

Camag Asma genusume et Asseumsy of tiemmes tanname

--Canae Gesume s

g h

SEGLENCE DEstBurfm DumoutNCY LOC CELA edD OCS OPD OF9 "1

LOC OIE LDCCC8 OK 6 SN4BB i

ma 4pr.

IW OK I

'[

6 00EW EFDt4w S Wm 1888 6 innnreneDOFS 1AN42

u4pr, surcusi

.s l

I oK i

annemance gg S 10f W esm4st.

9914M aneraaneeneg gt

=

esim i

17W491 pruk4us.

1 ME (neena%= g m

m sturxpusi 1888 48 wocumee tassist

=

NN C WWreAJpelAe89.Ft.ac ed 14 Ma2 019749 medVPunA 14 y# AM A10E"

^^"^ W4 Ousmansten Due SMt9s to te e6 101AL Casp e 1015487 Lott OF C00 Lase CARE S

~

p g

-M M

R ace.4b

-............ ~..... _..... we e _e+.

....7

... - - ~....

imus u upy ugerum usesmer

-. -- -. unst g

p OEERG hepa tueessmus af Amassesy of heimms tasmane CNhes Gesens a

O desem naus at emesse symme Lase Pee o

a q

e WOutdCE Ds20fMPTOR e

fgEQUENCY LOC cnA se ces CFD OF5 U3C OK f

4 l

l LOCOCS OK 4 Jefe smaa4UG M

8W OK 100$4100 UU4Il Y S W403 190f402 LOCOCAOPCOPS 1.tM40B e4us nascusi LOOCAA OK i

I M

i fWTGM 1 M401 e6a6496 OK thusum l

1 I

1M UIEFI Y

.e l

1 1 EE

!*"8'* ^N

$ 006WP nur quei e

?

l l

s sosaar LOCename unsass i

som c anwsupstasp.stes e* te u ss e7efse e ts asp am at oacoussissosto pwas Ce** Dee eMeet st en ta 107AL CMP e 17384e6 4084 0F C00LeeG CAN 8 eM

.e*

N. *..

O*

l

-~^4 0 M

, a.mye +, esp -

-6e e

,w

.. w as m n mm

.m-a m-=~*

ome

-a.o

= = = = ~ ~ ~ " -

~ ~ = ~ ~ - - ~

= = = = ' " - * '

~ ~

  • Ceansie tennemi teamed Insem tiesseers af Duereery Lees biselles tiessee ham Cihee Omsses 4

.C.a. pee.p eM.

be.smeery A.sid.ee tes La.ng Pse Aawus was hastee O

Dueseary e

i e.

u.s.

p q

eW hameaws mamse tdshed Purege 408 6LA CAA DO One 04 Chan WD M1 LG OK T

LCIOS OK t toget tET m

e rsraarwn oK 2 00E AC2 OblEs 100E @1 REG-umu i rurwarw,,rWD 4ME407 LOCAA CK

!^^

LCICAAOS CK 1 tof (41 Mx s oitM LOICP AN**K OK pyp

$ 006M Ondu 2 We i m.e armananarr*O 17st40s 100t 402 sax U

LCICRADC SSIE407 i

N i

l El0 Lope,L OK

?11 (CINLLOL OK 1 SN401 OldW

? t2 Lemme a m **ar.

OK i

l 120t4CQ Unsuur e sete 5WM E13 a riens i ris rimmerwg g egge M

MM e

? b4 W W

516 Lore,LTAADIL CK 1 DN #9 DW 8915403 El4 LoosuC# an M CK UC 12ot402

7 p nt Lomuca an= naaKCr0 tma4ce g

1 1WM itig i Mama _i P_s a m-(yqgg c wrear u eimite.em se t se ovetee veeie a,e misa at oecomminism wts Owe =4nsuest Done 06.2699 04 ef.31 10146 Cadr e 3 844408 LOSS 08 COQ 6 ANT #fvENTORY case i Rc ur, 5a.

~.

.,.. w e w, e,.

e,e e

owe y w ee-r--

  • ==.===m e

e

  • =w

'e

  • - = = * = - -

W* * * * -

.- =-

== =-

W Desmui Matane Asem hugsslern af buseMery Lass tresRM btheme themenS Okee townst g

o asummary Capose ans Atwee assemery And Womes tesame uorg Pee Q

4 r

tassau Leme W

e encupact mecsuPTom e

fitEQUENCY mennen senest Laes taenes,e evo awass asemaw mags a poemee LO 84.A CAA DO Q4 04 Caen OFD Mi LOI Ost re gesang ogg 1 Sof @t W

rr i nneaux on 8 eM402 WLE LOIQWOhlfEFD M415

=

LCICMOt3 On 2006401 g408

-7 ince usenur on 110E&1 Gus&E LM* N 1.7M@7

.?

Elpi

gg' Lo.cM o Lei,u o-

"11 LDesLLCEL CM 102f 401 DiidT 512 Laaalm_=.

CM 120E402 C

e act #$

1 seem

't8 & = -D amme C

uh7rY

?W OK

?1l LDINLLCMCIL OK 102f 401 DRev 8

" to LCouCRA0lLcteK OR 13ce402 DhiC

g. coo E17 LopuCa ana aunarp 14164c7
gg s,. te u-

,.W.,

...., me,_ -,

Quemecanee Cee SW2HG C6 et 38 TOTAL Chef e 4 Oct AIDS LO44 OF COOLANT pr4NTORY

- - + - - - -

annum== m e== e.m an e - e EmsN Las samuus seuru guns p masset L--_

Uppem

__ _ _, som p

GeEEps 8ABNeal Mghoup Rose taggisse gf gausuwy Laes hames luaman taghamp Canas towess 9

ammesy Cassey aus Adrums envunny Asw imamme essmee Wasg Poe e

esumme nse Puses e

N DescsuPTom o

Muayency esmann sesent W

geene,s seu,

geen,u, p.,gs e messes pung Les eth cnA se ce6 on Ch8K OFD

"^1 LOI OK

=a*

LCEDES OK

.oem CEa

=

i nstwannaar og 190E*000 Us4EI Y

"^^ 'W 18f5408 Lo.c.

oK LoscaAoss oK 1354 m

a narannannase og 1.

User i r 5 #

m e nare egg nEG41553 1MM ur4ci e

i l

3906401 m==

a nare am sytag suptouk j

i tie LaatLL OK "11 6 OK 1908401 UmsW

=13 i nas a na naa '

OK 1800+0B0 UsNT T 10 Watt 8 006W

=13 a runs i na nasarneD 4MM Lanmuk nurxius e

h $4 IhanIPA.

g a

hjg i fMaA 1 PA anda g

190Est uusw 196f 409 "14 LDes s emane n*"'

OK En m 10 M Us43IT bit a naam i emann namensg ggg e

.4 4,,

MM C EMassWD dA 487 Ste ed it 62 ed p?ctes twise.edupnA 14 gpp fb4A AT Of"'""

  • PhANTS Ehsmemamea Osas ebJees as et to Tof AL Casp e 1m4es 4088 OF COOLANT INWOMTORY CA88 8

~

p,

, g em r-gn===*&+er pw.m e*

Fipre '*5c **

  1. ^

- ~...

~. ~...

..w,._

~ ~ - - - - - -

SEsEBF M PWIB %

Agnesy.

SpEent MM M $1EINtm Q

pass Censued een and nun past es RMest thang eguum a

8 8

mW Oss Amund pues W and Ilbst 96 LPs 50 gust OC.

OR8K CFD 9

LPt OK s ecte M4es-on

==m mm IEEG. cum

~

LP100R OK t teem h

LPtopmonen ou t este hr i

B Mm S WEm m

m m.=

u4ri umE4ms t

M M

d 4485 mm.as4er o

I$$ @

U 1 met 7 8EEm usensu 6

l 6 set.a "11 LP1 tasse "12 LP1M 9 000m h

s ense

?ts LPtDoopnorp fasse nar.4mm 1

numimo w.

c -

,b.

,a>

. imm

..n.

e-LOSS OP OP76tft POWIER PROM PLANT CteffEEGO EVEIfft g,

~

Fgwe 64

e.-

4

- W ee p - ee. a Mee hasagge m opp pe g op@99 6

~~

G 69 t ee ee ge e 4 m+

09 0 4 e s 4

g, gge eM M @ (uB RuS6 mee A 4e e

ese S 94 e-h 4 em e

  • =

-.mm

+-

4 sie e use wem 9

EEN NE NN M

M

%W g

UM MM M

W WW h GEnfMS Steu comused

' enus ans man Puur a meest easheep evenni e

susem Augues puni%

~ and b e

MOLANN DBSCRIPTOst e

940Lesecy teesse LP1 DG crut ace cast cPD

"^1 LP%

CK

-~.

F est4es

-4ur 0980481 umswru e

MM 100tM uBG=Uuri LPim OK 3 0eE409 uununsrr

$5M O EM m

m

=

m4n

)

meo OK

? sagdes smus4cr ap

  • 10 LP1M W

3888 #

9 W#

us.evasu e

68eEM

=11 LP1 Smassess uBG pus I

"13 LP10M M

8 8EEM

'11 LPtD00Pm0PD 18'E488 MC cus C wasaJP8tAGFD.

ese 96 toe 3 97974 MA8W8UBEM 14 GFP R4a A1 Off ^--- -" ul PL#ff t Onomeaunen Date Of.84 es TOTAL CW e e iMM

)

FRoad PLMff CttiftfEDDEIffS 6

e

_H3w<

I

{

i

(

amms er gunse Emmem um gernes reum sasag n-_-_

1 r, som p

Peuer Pame Pee pesso husemary eymem Ameswery unsg Osmas enumma p

Pine Caused Obst and 8ha puur es n>ean tastegg Sumese 5

ad One Asmuse Pam Wassnesy sus 8hm 8

N 8

NN Sees vs 50 crut Oct cem crD "1 W1 Cet V10C3 OK 18eE40F i

I

-Aus-Vecce0==

OK 3 00E4RP punwry ggg

.e LPtOPR OK

'1988403 IEEG4mi 1 LP10PncesK OK 1 eo8401 UE88kawr r S WW SMW m

m m

ut m sur.4=s LP108 OK LP1000C8 OK i

4sur E tt #1000ceDasK OK 1H 1H UINTY WWWT Y J

B

.gg gpg 93pg4gg

.. W10 0 l

e agIm usupers OEE "13 LP100M 4 SOS 4M MCeus CeweAJpetApp31.ptow 9462H #5414e N 14 Qwammutan ome 86 Glee 8010J3 101AL Cer o f f?t4ms sep assn Af Dsconshns>0mdOPLANT4 LO68 08 OPf orts Posten fit 0W PLANT CENTIAGO Evtarts p ep4 AM s.6

.me W&

O*

((

~'

~

1

~..

~~

asse e. -

sums a gimme wumes smung eummer sumspeery run p

Pauset P8ue Pee puse Respany Ssessa ilmesury West OAmes towtus 0

Osume Sun sus hun Pier en Sh>ssue thuneg Gymsm 0

yhusmer -

M ysmsuesy su shmi g

andm8ar89E90EPTOR p

fggthmssCV Daues 675 00 CPUI OCS Obst CFD I

'^1 LPE OK

~~

LP30C8 Ost e 44E4BS msw e

LPSOCSolsK OK f $30400 m

S GOE403 gpennen n*D 9M488 NEccua LP90Pft OK r

us4rz EsEEdus LP300 Ost LPtpe006 Ost 4448408

-4sr e

?te LPuhmmaa"*'

OK 1mm

?MM 3x>eisuu s 0

0 EEEE

?t1 LPmrmmn unsD

&NS4BS uspeus "12 N Ost 3 GBEW IIKaurs 0

'11 LP3OOOP40PO 9.385 4 88 0-,......,p,.,s.-,.

,,,..A,m_-,

enseansema ces eWaees 37 to 10 TOTAL CesF e tJ754ES L0es CF OFFSfft Pouter PROM Sevtsig vetAften SWafft gg

~

j

~'

~

...e e....

1

--.~. -. - -

1 j

sans a vanse usam =

vimme =

casse unwom

% von PuuF #m PM Ptsup Amarewy Gyanssa Aseguen Lest Genes tewame g

j esume Eint one 8hst Pner to AMann temas.g eyeesa 8

tunamer pud unummy aus fhan e

M.ASCIUPT0ft e

fugon.mscy j

eu.a.

4 LP3 DG cpR OC4 Ohm (wD l

1 i

4 I

N 4

r was wi.es4ss-e u

cuwrra

,mm g got401 NEr^nVa LP30PeoidK on

=

2 0064D9 m...,

h9 g

K4ra RETAna LP300 OK LP3000C8 OK

=

? tot 403 mm,es4pr "10 N M

3008409 9488401 pa.simi summarrr y

MC4 Jus

?t2 LP3000PR ON 100E401 NErAnra 1,=gg m -

.-..--1...,

.,m _ _,

Queandesten Does GCM90 7 as es TOTE CedP e. Jet.N LO6, CF QFF,tTI POWutR Paced 8048151NE.AW M gg

  • ~ ~ -

j

en sS*-espN.s.*

M N '

Mg

.6M

.N AS $

... -. -... - - -. ~ - -...-

I naus ===se sums as

Pum, sense

_M MM W

g sismuses wun.

9

@WW %

M M

Genese h as shes pular to Roems temeMpSymom 0

e tigesmer punt W aus em 8

e WWE0lmeCY 473 no crut aca cam crc m w on

\\

. )

LPaces on

_1 M W o

N i

~

WW Sauseems 4

\\

M I

-I r este um

-W N

OK i

n earm,

)

~

ras.

LPNG W

LP300cc8 OK 1 acte

- 4sr en II$

M 1m t eIBees WI T M 31 8

==

1,, -

to -

0-t

' t1 LP2000pAWD TM M943us 93 af P Ri$n A100t ^

A 3

g

^^ ^ 3 PLAfffs 9

to

...ni Paons atvasta vtaAngR twerte Cant 3

~~

- ~. --

R y re 7 c - -- -

~. -.

  • ~

~~

,olli

  • 1?

!1 ll !1ll!

,!;i I.

II i; ee 1

u I[

.; o l il'

l:

ili!I ;,

n n

n i

P P

i i

N F

P P

E E

t E

D g

T-F F

H H

G i

L S

4 r

r n

o o

C S

t A

M M

e f

f e

N P

Pra b

y y

b P

X X

t t

E E4 Fe U

E E

b b

o lu l

t u

o t

3 p

R t

t n3 no K

H H

d a

a d

E eO e n M

X X

e b

b e

F vW v

m3 o

o m3 o

F T-T-

ue p

p ue E

et e

r r

t 9

d P

L L

ss ss n-n n S

A A

sa e

e sa E

oL o

E a

aC h

h aC t

t t -

C d

d n

n n

e n e

t t

eN eF e4 e4 e4 e

R a in m

s sT v3 v3 v3 ai ic I

r r

s U

ain aF

.e e3 e3 e3 e

e i

O O

O sl w

w sl O

b b

i E

Pc nW nW nW pb E

pb E

t t

s S

eR eMe ot ot ot mi m L-mL ua n

a e

e-ml 9

9 9

ia t

t l

y aA aUi ua r

d d

d -

mPe e L-e L-eL pv uC uC pv m1 l

e sT sT a

a i-t p

sE sE sE e n sL sL ir isGx aN aN aN ir t

e n sC n

eF eDe bI f u aA aA u

bI bI f

A k

1 2

2 s

0 0

0 i

E E

E 2

2 2

1 R

8 0

0 0

0 0

0 T

1 6

1 E

3, E

E E

E P

N 3

3 0

0 A

0 6

A

/

/

F V

2 2

2 1

8 N

2 1

N S

E 1

1 1

2 3

1 2

3 1

s s

s e

e e

e e

e e

e e

e h

s s

s s

s s

s s

s a

a a

a a

a a

a a

t C

C C

C C

C C

C C

n i

A d

el e

o p

in.s n ]r.

s ce

)

)

r s

r o n v h

p ise) a 2uodW m

X s

c mmM i

ef l

I t

u o=ehs5 u

El r

r D

U s

o c

pr n

p ot aa7a0 L-o a 1

e fn vC2b e

f e

l Cpr N

s e

i o e f so imTr r

r e

rLop A

noi f

f E

e e

o f gsi e

f h

oar e g2 t of A f o i

a

'P c

chl n er en de t

r ei bi oa n soPnh e

sd0a R s P

n n

h un2l at (u i E iabCw t

A e

u it (i 1 o

aHnto r

e g yf vk rd gc i

u d

~

oi indngs n

g ndoal i

e uf lo loI nbo n i eu q

d a

n io e ssb l

sr gb e

N is o

ehon o

eov i

t n

M o

u u

r t i a cght b cgc2 r

F enx5 emd lal T

t r

t en go F

P s

d P

len i

t t e ymTn i

ie s o nl U a

obnb

/

o n

S

r. o i e moeo s

R t

a C

s t

n e c ist n r. s cl e

l e

bR e

P aohu Pal w r

S R

r i

s o

ys aFriemd Wo ll l

l i

vo t

E 8

t aFeot r

1 i

D p

op h S e x e 2. h h S s ph s

a m

i hos n*

l t

i n

o wWTta02

=

i n

sbf Nr ekl i

t t

u r

b u

s vp 1

e e

ue n

ps of saie o

=mimbv p

n a

n nn e

r t e

e I

o i

t g

=o rl m

b e

md1 t

p pi a n e

so r

t n eri o "n sf a r

uc o

d m

ee o

o a smto eeo t

t f t f r

e u

kt so a3a smd Co ls o L e (t r

p a o ub la ssl s P

e p

l r

k s

w e

mp la oe sonrdl f

f o oafo5 u one s t

o a

oe r

r ob rl t al gb o

wB o n

p c

t o

r1 t r l

aoir el a

os mat a ndwc t

o e

e r

r l

i t

u e r nr e n

i e

r v

s c

l s

eet smde eesed e

e ie pv o ainm pvsm ai i

E D

E Fd OgcC[ at i

l T

i o

Oiugsst l

E I

F F

R T

T A

F F

F E

L N

T P

P F

L-L-

T M

M C

C N

U U

P T

T E

P P

U L

L V

G L

K A

A E

D E

M P

P-P P

P E

E F

F F

H H

i

.' ', i t

i, '

,ii

.j n t' l fLj i jr i

. 'j

!I1 l.

.t};

i

!l lI tjl l ;

t i'-'

l-t!

,1 i; ' -

t

.t r

E n

P2n 2

ir ia X

e4 a

- a P El E-p p

n-v3 F 3pt e

e iE

.e3 E

S edn1 r) r)

dH oO ee o e o e eXasW e

Mbe vs e

t d t d d - r l t n

t r

n Xko eu b

ee ir r

t ir i

iPo a9 i2 ee t

v a3 a-r t4 a2 a

r l n

Eustioe o

uia6 p-pE ia a2 1

r2 1

oFf eL E

t lu e -

p-p-

v eE e2 vE eE eE pS d e E l

r r

l os r o E

d a aE r5 r

r t

i E

H nS N hi af Xsml smie L-e f

gen a,n.I f

3 o

o4 o

o F

m3 f e f

5 t

e2 t 9 t 1 r

me C

t vs n

E o m=

o Lh s

T ss yi) e=

e )=

yE

)=

m=

e=

Tioih ue m

Gf esoi n

R r

r r

el c

T L

sa t t 8 u) u8 At i

t u) u )4 r r cL iN*

2) il E

4 ee A

aC be1 2

a*4 2

4 R

l l

ot s aP 4

a5 a1 ba8 ia2 o8 dr i

t C

n3 oE P

e n ad* E f*

f*

b b 0 o0 o0 f

f ad*

f f

C 4' u p E r e-e 3 a m L-n r

f f

von E

ai b b 01 o0 o0 o

e3 u

4 m3to yX e

o eWi s H

sl r m1 n 9

.,i C m1 y1 y/

o t

4 r

y1 y/

t 1

T o

pb pe/e l

1 l

Or p o. 1 1

1 1

nWoeE l

t t

t s

o L- ;P L t

1 f

u1 1

u1 R

a l

mt e-f E -

l sH e

i -

i-o1 f dE ;. E A r

m (p (p ap ap o

b(

b(

m (p (p ap ap d

us b(

b(

9t nX H

a uo-eN P

py u xxp bx bx uxx bx bx e L b pP l

biLhH e

iE i

e n sE nI s

m s

s ee o oe oe see oe oe aN PesF a = = (c s

r r

s r

r n

i r

LrS t

s iu p=

p=

a==

p=

p=

bI f

Y T

2 2

4 3

2 4

2 1

3 I

0 0

0 0

0 0

0 0

0 rL nE E

E E

E E

E-E E

E N

EA 0

0 A

0 5

2 2

1 2

5

/

8 N

vB 1

5 4

2 9

1 3

1 E O R

1 2

3 1

2 3

1 2

3:

1 P

e e

e e

e e

e e

e e

s s

s s

s s

s s

s s

a a

a a

a a

a a

a a

C C

C C

C C

C C

C C

)

n g

yo gn

e. o.

e

. r f r s

o oe i

p nnl e

Ri e inet (f s sh i

t t d l h msl os b

ot g t dr sT uhe oiae oeinehe fi e u r

o o

mm cl Ebs nh s.

p N

0e ceiu l

b ol f r hr oRobgd e4 am 2

e2v oe oss2.

f x

uni 8 nr rl 1 a sTpa e sv ot oW ein A

sel I

ed f foo s s

s v s r

o pss oa oac si ph e a

i esh s aia r

s t s e3 gm3 l

l ss2 amdiC aikl z

ein&

mo&

ei ue5 nr na r neu l

eo etoapo c

(

ef e m b v W g1 t r gx e

o s sl 1 ivs3r virl s n eJ s

yo s t

igsfo aic e sr e2

=

enJ gm&or t e t u ir s

t O

os mo1 e o ms eot a

gnse ci e et aeC noas t

ci; e o smh e L p (e W t r ncCa m

t r e e t

i sl et 0 s

.o o n nC yos i 4 ysl s o

o r

s n

e e st a n s

ea e )s chnin f

r ad n

emr a a

mTh gnCen gwir uu niei B

son gnba C.

e'.d n o l

niowc n

u cnMa d o oM s h e=

d e

i i

l E

e en cma 3

ok ed r

d s A 6=

sN ea o

olcemo o

hwa c oM2&

e 1 v c v eh i a =v

=o3 ef = e1 e uEt r

)

a2 r s t d m p&

l n ns r

ee ouee cvt l eIn s e c qi l r

s r

h a a e

o lo neapms v

e r

=n1 hs t

e sl ace t

s r

i a s

s.

r e y0 h o s ee n e eI sl egt C epm rd 22 csiC ooe oprher oonEoopne r

r oaoo o e r r 15 s

mf iLp of f t

t e

t n

i t

s 'o C si0bo sacr ibe s s

ol l

e y

f r

s s

2s n

ucTfoWt e u e est r

s e

r f sin ely1t s a

oi sho r

l wse l

t dL do o

rf e u u

rl e r a o v oem nan b T h r

t o

r oe a

s opc o

i.

t

- s h

oI xd ah2 Pa uo t

t 4

t r n s at s s0 at a

i i

n2 aeee nEnot o n e r

r r

rt ee e s e neh1 e eHgvieid r

einp ec e

pv pvx2e pv ebmtcn pN p

Oiva Oee5b i

n s

Oeiboiaa Ocia goc t

E, E

L E

E C

C P

,A P

O O

O L

L L

L T

L L

L-L-

C O

O O

E T

y L

O O

O E

A C

C C

P P-P P

E E

E E

H H

H H

i i

' i

!i'

l ii!;ti -.

i

. 8,"

  • 3.'

e Ilj ;j-4 '

ll.

.l![ p,'

l[i l*

g,i j ! 8 [

4 l!

l l

.lj.

,I!'

il t

l f

e o

h E

L Rcg s

ri t

mo-Ltow S4(

S E

r n

Vin C

O Nsl f

R R

O i

EtcL Oat I

2e o

S P

n saE Oee N V N

U I

I r

L u

E sf N Cpt A N A

K E b e-cn 7

- yf k g W8 C

eeI s

l

- oi MI s

L M

M Xe ai t

N hh P s n y.

in r 2 r

r t

l o1 E

oTi Esog WE E

V-Eidn oa p -

.w Heclo X

H4 N

f v i t r R

eG Hin t

E pl n nr s o X -

1 t

st l

er rE Xda uo r

X3 E

e 3

I F

oe ey eoid P H s

PO P

Put dt eR t h E

evt g h f so a

vU eh F

mesio n

S X4 a

FW E

r r i

t t t

e 3

C St H

F b,s N

el sl 9

S s

ee RN umt sP 3 s

o r

s n e

h p E

1 s od haS 4 e 1

in l

t F O e

n L-e n3t e

igo hd t

s t

r C

ee c o e

an g

n R

st h

ic 4

eSW m

eE m

vOs a

5n e3s s

hd r

n a, st hae3 vd9 it t

U as ie vN n

eI it O

Cr en 5o h3 en-eWs C

f a

e1 T. O n )a L 5

t nn 5

n9les oe v8 e

e s

f t e

e S

sh e4 o

t os n s

W E

e oi e

t t

r c e5 o3 N m

d) m e

a ag L

o a

on S 3 is3 r E g9 i

2 m

dE n

e n

d eha3 c C n L-eEI u

e-u m

it oI t a o -

aOmN a(i s

a8 s

s s

o e u m

aid E9 eNe e c

t i

mdnW O

iE s7 n r

s sE s

u f u OR oni nh t a

)

t bit s s

eg DT bE3 A

b(

a E

E Sa29 FLI r

I 30-Y E

3 2

2 2

1 2

1 1

3 3

2 0

R 0

0 0

0 0

0 0

0 0

0 0

3 TE E

E E

E-E E

E E

E E

E NB EA 0

8 0

0 0

0 0

0 0

0 0

3, 1

1 5

1 5

1 3

2 2

1 7

VB 2,

E O 3

1 2

3 1:

2 3

1 2

3 1

R 2

s P

e e

e e

e e

e e

e e

e e

s s

s s

s s

s s

s s

s s

a a

a a

a a

a a

a a

a a

C C

C C

C C

C C

C C

C C

od mlu s

t naf s

Eo k

mspo u

s e

m l

r c

eos np o

sn e d o

l oo go - h eew ia e 3

n o

t l

aLo t

lerl r

i r yed 8

l

. d m3 u

i il l 3

sis e&

b A

ooae il n or l

r n

r t f us me n

i t i

dn n efi

- 1 o

du w noe a me1 no

~

s c

ac vn uhe ade

, e o

nI s

i i smi.st s ot sea sbt sa t

se e or sRAvC owc J.C i

e0 o

n l f l

n n2 m

y n g1 '.br o ymi r

or 6af i

r s

N oia o1 r e me oo t

r t t l t r n

nfE ah a a

a s a

O na t

f el l

T eihe5osb I

c Pr ie%Ut i

n e a e

c aC n

v d t, npwg v

P o

n n Kl c an a

n a

2ereof e I

i vi f

I t

C eWVlwdova e

Ms a se n

l 1

r e

E a a5 bvegm aI Vo mrsd g

t S

gr l

u a

v f

oe5e r

r i

m r

orha g

Nh e7 l

l D

a 2fl n 9, aI 8

n0=

d o

2v n

e pP i e

aiv e e p1 1 o o

up ner uEs d

t eGoioo2 t

ieHa ef s p

s e

ior s

okErdd ee eani ns l

t f R

h e

ok t

t saRl el imUen0ea mim n0 r s r

l i

Neevu2hC o

ne oe5 o

o t t n

t c t

oT ne t t y

s n

ssl aml et r

s ats eee e

s o

e a

e ar 5 s. f eoe e

t e

l l

e oo t

l e f ne f

nn1 es f

f obc r

o i

m r

cFie B r r

r ro dd nbh e c ee os o

seie 5

cl gi t id t

l t nmhcem1 s

ea ap aeo a

ae r

r uiwe emv e e ep e

r r

n r r e nr sd Onare nesn po sk ph p p

r t

polas abaa Onit OTa O

sa L

M E

E L

S M

R A

P P

P R

R d

U U

U A

K K

K L

p A

T M

M M

f S

E V

V-V-

f E

V N

N N

R I

I I

E P

P P

P E

E E

E H

H H

H

'l4 i1 i!'

iIiI j;!'I i IiI!

i !,I l'r j I

e

i
:!

t

i i '

i; i!

l

,i?I ii i'i i

6 e

e e

9) e e

e n

- 1 t

n innw 4 0 s

s s

i a o e 1 1 a-e-

s-n nl r

0x s

e epda t s t s t

ae ae ee v

E 3id did di t

vdus d

did g

C Dn i

igeh n l

u l

u u

l N

Te at et at y

ya so t

p i

ri E

Sp t

s r s is g

gluea t

r r

t i

t R

EA sr cr s r o

ot t r F

Oe d h d h d h o

o o a e j

E u e u e u e l

l sf p

t t

t d

d ph o 2

2 E

De no no no o

ot I

s i

i 1

1 nd nd h

h ng R

n(

nd t s t

son 6

6 o

lo l

os o n o n o n e0 e0mi lE e

a a

a 1

9 9

C di d

d d

m7 m7 t

V V

t e

4 4

3ea ed e2 o2 e2 3

R su s1 o1 s1 g0 s

45 5

5 5

g0n n

a 3

n 7

7 U

at a6) e6) a8) i0 i0od C

3R R

2 2

b4g b0 8 b0 9 s1 s1 s

O b

s n 0C C

r 1

1 x

u-x un a o

//

I S

ee eGi eG eGi R

R d

og g 6G G

G G

t d

l t

d d T h

t t

at aEn eE aEn e

eTinin r

9 a

E E

E E

it mo mRe mR mRe vI vI ddio li LR R

R R

iU iUp iR iR iUp id t

t r

r nl g m

E U U

U U

t t

sn sNp sN sNp eP eP e n i

E(

E(A DE DEmwo S

N N N

N N

Ea E(A I

6 2

3 3

2 0

0 0

0 0

E 3

2 3

E E

E E

0 6

6 5

0 0

0 0

0 0

0 T

4 0

0 0

E E

E 8

7 3

1 N

E E

E 0

0 0

3, 3,

3, 3,

E 3,

5 5

5 9

4 9

V 2,

2 2

1 2,

2, 2,

2, E

1 1:

2 3

1 2

3 1

1 1

1 s

s s

s s

e e

e e

e e

e e

e e

e s

s s

s s

s s

s s

s s

a a

a a

a a

a a

a a

a C

C C

C C

C C

C C

C C

y lt o

c t

f y

e el o r

r r

w geg e

e g

o t

gd au w

w in n

nd mf in d

o o

e lo ov p

p v

4 ia at o e

o r

sue v

e e

c in ol dymd A

g9 e n ls li i

l l

c o w

s o

o t

n coe e o f

f o

o r e ietw lr f

f dd sr i

o d

o o

p p

I e

udrl du o

o o

o t

f f

f f

vm a

ol o eu cdf f eh t s s s s

s e

esd s

st s

s s

s t

ds nee n ll e i r on o

o o

l r N

ea e

ua Inl l

e l

l l

vo r v r

r r

l 0

ps et i

dt a

o e o

o o

mt den y

f f

f f

1 l

r 1

in pe ce os a a

)d

)

l

)r

)

r r

r P

te o

e mr e n e at a

a a

r I

av dupr r

r y ea e e e

e R

r p

e e yl yh y

y e

kst c

C t

e sn e nn r r rt r

r r s s

S iad salab io e

ea e

e pd pe p

p E

E espo n

(i

(

n e s r

w

(

(

D a-at i

,t n

y g y

y y

t ro f y f nnd oi cd cn c

c t

oi oeee f it a

nn nre n

n r

vvm

)d e a e v e

e

) g

)

ee r

r n

u u e u

u r

ae a

u a

sse o

qd qs q

q t

en eids e c e e e

o e

yh 9e t

R e t

t f

yI y

r y

r rPry rt rn b

t eFe er s e a n n nd n

n t

t t

t p

py oi (Sv

(# Fs Dlp '

t e e ee e

e o

vc vs v

v yoc yr

.d yd et eis e

e cgneya nt ga gm g

g c e n

t ct n neu r o t

e gl e n el ea itnl nI ms n s p

it t t t bt u oe uivy ulu ow qmfu qP c e qt e

sn en len e

eFno e s inm r

r o o

mv mv it e it e ie t

r e v

o Fdt FSuh Fp nr n

e e

e I f I

I I

L E

P O

A M

O V

S P

A C

N I

N T-O I

1 2

T F

R E

P P

L-L-

N A

D R

L L

O O

K F

P P

O O

I E

R V

C S

T-O O

P P.

E R

A A.

C N

O O

O O

I L

L L

L I

E E

E E

E E

E I

I I

I I

I I

i

.i i _

i i

i.

i-i

t'

{;

! [{;nn ; j,

i l,!

!I r

Il

,!8,

g.

ltI - I!!

i i:.

,i,

lj l

,,- i l

' : i iI

'l e !

s s

s e

4s ed r

e e

M e n g

o e s

ri f

r Fo h

h ti f e f

o a

dm l

ag oh d o

C s

t t

rl a

i l

eoe u

n s

n

=

i

&su L1 3

e 3

f n

3w n

t g me E

s 3

O&

o n

i f

oal n

i i

w m C

o r nob l

i e

o se a e 2, tno 2,

N i8 mte et u sn c n o s f

3st sin i

t E

a8 ont r

sn sn 1 t 1 els 1

sin o

n e

e 1

e pF s e r yo v

3 s )s 4

r R

m1 so ed s eA s

s f

v pl s e.s sn e

.I e

e am e

E w-eC e m )r i

r e

per p*

e aa sc s

sCr s

r F

iG ateho e uI p pa p Ct aieO c

t k e rL a

adla a

n r

iE daTf eg s

u.t n

E Cmu s

i C

Cn a C )s n

s es sl t R

nR nD. s yi st.

sa n a

J smrt esny l

a, CR im o a me niea e n

n F

oU o c n

uleas e

elo l

n pk u

py e pl dSl m l

e e pl i

f i

i C

dN dt otepi r

i l

u edof e.

d )s a s d

da n

e mie e

e ads 5i a b ya n e s

e h

ela R

om se smi O

bf bCmtsE2 M

bn abye o qb smay sn po Ui U a (w UR l

s bk U

eo al o

u i

Seo U a,o &

r r

M.d n r

i P

o l

t y t y 3

.F

.lal

.C t

1 s

cis n

S ed el t o

.L edci or e2n ed e RO eo e

eod n

a l e eg a n5pxe a m pi a m pi l

Ps l

t e ag 1

a e t

e t

t n t

t n

n ahcm eLis a a eC L ed mi meFpoh n

up muud m

m (u iuud me u m,ee m

m e

iso r t ia it t it i 1 r s eC u og sb sa dspt o

t scn t scn i

t t os I

t t

t r s sPea sO sd nf sscu s scu s

Eo E N a o (a n Eaob Eaob Epa ELt C EL E (u a EL r

h I

l 5

7 0

0 Y

T E

E 2

2 1

0 8

0 0

0 I

TL NB E

E-E 2

5 I

EA 3,

3, 0

0 0

VB 2,

2, 5

1 1

E O 1

1 2

2 1

1 R

s s

1 2

3 0

0 0

0 P

e e

e e

e E-E E

E s

s s

s s

e a

a a

a 0

0 0

0 C

C C

C C

5 1

1 2

y lt gce n ir isd P

e e

e e

r r

u f

1 r

ir i

od S

ca O

1 H,

f, 5

e g

g g

g el 5

e (e

(e A

o a

e l

e let f

(

(

k ime s

s d

os s

sr s

s t p e

eu e

e u

em cs clo c s cs u

dm gu uu u

u u uu g

r r r

r r r

s r

t eu ap oo oy o o oo r

r t e g

sh sr sh sh a

eo l

e N

e m

yn e0 ev r

i6 e0 e

e ei t 5 t

5 O

g ns nlo sf l

i is s3 of l

l si ei I

o T

5 gt io no N

f f

n o

n cc o

op oe o

f f

P 0

oe i

s u

s h

R o

dv nP ge gt gt gs I

n n e n

ne ae uF im ish ss t

e is ic C

sS s m 4

mis s

x S

s u e ul ue u e E

0 oh ie l

n yo y

Me s

yn t t t

a-nt D

a r o r

r i

op oi oi ef r

t t e t e o

f y vo m

ne nl nl f

oR es d

er eb eb r

)

) g t

ve v o v a a

a e en a

nh n s nt r

r r

e en E e m

iw ie is t

n r v r

rv r v y

yi ao ea es ea ea r

rPry t p v

vt v

v a

o o o n o e o e e

eFe hm cm c e cm cm

!I (p

p(Sv y

yo c yc t o eS e v o

e et e8 r

r r

r n

neu eo o )s-o )s-o )s-o )s-c ct n t r t

t t

t e

e gl bs ee ee ee ee u

uoe a e r n r n r

q qmfu bl ui ui uin ruin e

ob ng B g g g B g e

r r e o r a an en an an F

Fdt Pc Fe Fe Fe Fe 1

2 3

m 8

E E

E E

m T

T T

T I

I I

I A

a T

S S

S S

N O

V F

F F

F T

C D

E F

F F

F O

O O

O N

A E

I E

M N

R V-V-

V V-V S

R F

N N

N N

I I

E E

O I

I I

I S

T-C C

C C

C E

E E

E E

E E

R R

R R

R I

I i'

1t

!i l.

,l i

i iI !

i,

=. =,

. =... -

ii a i i s

}i I o}ih l :1 1

l li 3

i ul nl 2

i

n h

a d

8 8

8 8

8 8

8 8

i w"

l! !.!; ; ! ! !

1 1 l

s I u. n a s a i s i

i s 1

Il

} I 1

11 l

1 :i i

i 1j 14 18 1

1 I b

i1 3l l

I I

p 3H i

{

I)I 111. !i.,!

l

~

.r,I 1

.!il i li 11 1

8 8

I I I a

a e

i g.-

i.

.!l l

Iil1 11l

,~

o-I i

l l'

,! :I i'j i t

.j'+it i

t e

F L

2 n

O in in n

n n

i i

i ns i

F P

F O

A oi F

A A

2 M

2 C

hn n

2 1

1 1

po F-C C

E F-F-

F-C C

mh n

i C

C C

C F

F ut o

C F

F s

N V-V-

X X

X se a

sn t

P P

P ER K

K T

T T

am m

D D

D r

A M

M A

E C

C H

H H

eu o

F 1

1 1

1 1

ht f

I 1

1 r

E C

C C

C C

s n2 t

nn i1 C

C C

t P

P P

P P

oi nl P

P P

A E

S S

S S

S f

4 4

1 do oa S

S S

C n

n3 n

n3 n

e ey dV t

t t

t t

t t

t n

n n

R e4 e3 e4 e3 e4 0

s nt e5 e4 e4 e4 v3 vO v3 vO v3 4

a em s7 v3 v3 v3 U

e3 eW e3 eW e3 7

C bh d a 2 e3 e3 e3 O

O e

b O

da w t

0 1

t 1

O O

O nW n9 nW n9 n/

nW nW nW o

e s u eG m

S ot o-ot o L-o6 G

t t

ot ot ot 9

L 9

9 l

r ewq a

9 9

9 de L-dE d -

E o

moe it dE d

mE d

d -

d R

e L-eL e L-e eL eN eL R

R sE sN sE r

it nI nE U

is et n EN t at sE sE sE bI N

sh o sU aN aN aN m

I aN a

aN e

eN n

bI bi bI bin bI bI bI 5

5 5

4 5

3 4

3 3

0 0

0 0

0 0

0 0

0 v

T E

E E

E E

5 5

1 E

E E

E 9

2 9

4 2

0 0

0 0

9 9

9 Tu l

1 3

1 2

2 E

E E

2 5

3 3

Ne EA 3

3 3

3, 3

0 0

0 3,

3 3,

3, Ve 1

1 1'

2, 1

2, 1

2, 2,

1 1

1 E O 1

1 1

1 1

1 1

1 1

1 2

3 R

s s

s s

s s

s s

s P

e e

e e

e e

e e

e e

e e

s s

s s

s s

s s

s s

s s

a a

a a

a a

a a

a a

a a

C C

C C

C C

C C

C C

C C

tee r

e h

e g

s e

g r

r n

e e

h t

e h

g 7

c n

s h

is e

e e

n n

c d

u u

A d

h t

r r

a u

s se c

r l

p s

e c

p d

d e

m e

p n

y m

n n

t a

a I

e n u

t o

h u

he p

a t

t p

c e

o r

r r

t e

n o

o gp g

h no n

s g

e g

t t

t n

s s

N loi a

o o

a n

t l

E n

s t

o o

i g

o t

t O

oo o

o f

h n

s c

R B

o s

s IT cm c

p m

c i

l x

r t

P l

l e

e n

e e

e u

u o

f f

l l

oh o

o I

t d

a o

o e u

s t s f

1 2

R pn p p f

y a e n

p C

e o

h s

er o

a l

l p

p l

l S

ep en E

uo ui o

g hh i

c e

m m

t l

e c

i u

f f o b

n Fv n

t f

u u

r D

o n

o o

o o

Pl b

c f

p p

m f

f f

t I

e o

g g

s e

Se ee eh e

l u

f e*

e n

in r

en o

r E

r r

r ul u n u

r ha s

a u

o lo v

l io B e R

e t

B o

o l

m s

c aw ep e

g f

o o

e f

c c

f l o l*

n o2 l

l eh eo e

a l

i e

e o

c rd s e st s

h s

l l

s o

o u

u s u

c un e

e u

P P

am ae a

x g a n

n a

e e

r n

n c

e e

l l

c cv c

t e

l t

e a

e n

u u

ng no n

a gg h

d o

F F

or ow o

e nn c

ma mk m

h m

iga t

t l

l mh mc m

F gh e

e m

e e

n n

c e

os oh o

P uc v

v i

l x e

e o

p p

Cd Cc C

S Pe L

L C

S S

E A

4 R

H 4

1 2

F F-F-

A F

F-F R

G F

P C

T T

N C

C C

T L

O O

C F

F T

C C

C F

P L

L N

V-V-

X X

X L-L-

P-P-

P E

K K

T T

T V

V M

M M

VE C

C H

H.

H L

L P

P P

C C

C C

C C

C-C C

C P

P P

P P

P P

P P

P S

S S

S S

S S

S S

S I

i j:*

.......=.:=--=..= : -

APPENDIX B 1

Functional Assignments for the Event Trees l

~

Table B-1. Functional Assignments for the Seismic Event Tree i

Event Equation Fault Tree' Comments EQE lE-EQE FFT-lE

' solve at gate GFFT1 AO, single event IE-SEISMIC FPI SFP-INT.

FFT MISC solve at gate GFFT140, single event SFP-lNTEG-HCLPF CSI UNTTY FFT-MISC solve at gate GFFT111, single event *TRUE' flag CSF n/a OCS n/a OFB REC-OSS FFT REC solve at gate GFFT110. single event REC-lN%OFFSITE 1

Table B 2. Functional Assignments for the internal Fire Event Tree Event Equation Fault Tree Comments FIR lE-FIR FFT-lE solve at gate GFFT142, single event IE-INT-FIRE OSP-OSP-FIR FFT-REC solve at gate GFFT150, single event REC FIRE EVT OMK OMK-DGFP LOP-REC solve et gate GLPR142 for Cases 1 & 2. For Case 3, use UNITY OFD REC-OSS1 FFT REC solve at gate GFFT111, single event REC-IN%OFFSITE1 Table B 3. Functional Assignments for the Loss of Cooling Event Tree Event Equation Fault Tree Comments LOC E-LOC FFT-lE solve at gate GFFT172, single event IE40-POOL-COOL CRA CR ALARM CR-ALARM solve et gate GCRA112 lND IND-LOC FFT-REC solve at gate GFFT130, single event REC WLKDWN-LOC OCS OCSE-LOC LOC-REC solve at gate GLCR121 OCSL-LOC LOC-REC solve at gate GLCR161 OFD OFDE-LOC LOC-REC solve at gate GLCR123 for Cases 1 & 2. For Case 3, use UNITY OFDL-LOC LOC-REC solve at gate.GLCR163 for Cases 1 & 2. For Case S use UNITY OFB REC-OSS1 FFT-REC solve at gite GFFT111, single event REC-lNV-OFFSITE1 B-1

-T S

S 9

s.

mNem

' e e

=

- - - - -- r.; _.

l Table B Functional Assignments for the Loss of Inventory Event Tree Event Equation Fauft Tree Comments l

~

~

LOl IE-LOI FFT-lE -

solve at gate GFFT174, single event IE LO-POOL-INV NLL LOl-SML FFT-MISC solve at gate GFFT142, single event LOl-SMALL CRA CR ALARM CR-ALARM solve at gate GCRA112 IND IND-LOIL FFT-REC solve at gate GFFT132, single event REC-WLKDWN-LOI-L IND-LOIS FFT-REC solve at gate GFFT134, single event REC-WLKDWN-LOI S i

OIS OlS-E LOI-REC solve et gate GLIR121 i

OlS-L LOI-REC solve at gate GLIR151 Olt OlMU LOI-REC solve at gate GLIR181 OMK OMK E LOI-REC solve at gate GLIR123 for Cases 1 & 2. For Case 3, use UNITY OMK-L LOl-REC solve at gate GLIR153 for Cases 1 & 2. For Case 3, use UNITY OMK-LOl LOI-REC solve at gate GLIR183 for Cases 1 & 2. For Case 3. use UNITY OFD REC-OSS FFT REC solve at gate GFFT110, single event REC-INV OFFSITE REC-OSS2 FFT-REC solve at gate GFFT112, single event REC-INV OFFSITE2 REC-OSS3 FFT REC solve at gate GFFT114. single event REC-INV OFFSITE3 Table B 5. Functional Assignments for the Loss of Offsite Power (Plant Centered) Event Tree Event Equation Fault Tree Comments LP1 IE-LP1 FFT-lE solve at gate GFFT134, single event IE LOOP-LP1 DG-DG START LOP REC solve at gate GLPR142 for Cases 1 & 2. For Case 3, use UNITY OPR REC OSP1 FFT-REC solve at gate GFFT170, single event REC-OSP-PC OCS OCSE-LOP CS-REC solve at gate GCSR112 OMK OMK-FPS LOP REC solve at gate GLPR112 for Cases 1 & 2. For Case 3, use UNITY OMK-DGFP LOP-REC solve at gate GLPR142 for Cases 1 & 2. For Case 3, use UNITY OMK-EPFP LOP-REC solve at gate GLPR172 for Cases 1 & 2. For Case 3, use UNITY OFD REC-OSS FFT-REC solve at gate GFFT110, single event REC-INV OFFSITE B-2

~

__, m,._,...,_..._. _

3 Table B 4 - Functional Assigrunents for the Less of ONsite Power (Severs Weather) Event Tree Event Equation Fault Tree Comments LP2 IE-LP2 FFTlE solve at gate GFFT170, single event IE-LOOP-LP2 DG DG-START LOP-REC solve at gate GLPR142 for Cases 1 & 2. For Case 3, use UNITY

{

OPR REO-OSP2 FFT. REC solve at gate GFFT172, single event REC-OSP.SW OCS OCSE-LOP CS-REC solve at gate GCSR112 OMK OMK-FPS LOP-REC solve at gate GLPR112 for Cases 1 & 2. For Case 3, use UNITY OMK-DGFP LOP REC solve at gate GLPR142 for Cases 1 & 2. For Case 3, use UNITY

)

OMK-EPFP LOP-REC solve at gate GLPR172 for Cases 1 & 2. For Case 3 use UNITY OFD REC.OSS FFT REC solve at gate GFFT110. single event REC lNV.OFFSITE O

8 er

,e, l

B-3

o FAILURE OF SFP COOLING SYSTEM 0

TO RE. START AND RUN Aneryst MCClCreaten Date 061&M Revmon: 05 27.M n.w-

==.in

.,,I.-,

_I, YS, Eld

-~D S

amm u.:.. w

~,. '.. ~ ~ =

\\

3 A.

-W I4

\\

M M EM.

f co-ca.e apeu 1

9eene i

.c

_ *~ Q)

()

v.st' v s.t'l

~

~

4 g.

l ens.oenons s anc.newir4 i

3 seems

&sepees M

e Onesege CCP 4Haen Ped.lfg

.g. coe Wees i

8 l

arcurren om s.cp ers.no 1 Ate 436 a espese 1Je>406 SJamete a

7 9

J

. m

~

1 A

i 5

)

i E

c

~ ~ ~ - - -- i

up upu.u ppuu

i l

{

u i

i i

z e

a FAILURE TO RESPOND TO 1

O A CONTROL ROOM ALARM Aneyst. MCClCreebon Date 05 16-99 Rewmon. 06 16 99

---i.

es Cpt 1

._ m,,s I

i

%M, d

w.-

2 ese -

a=

sunue

mau, 4M 8ABD488 SABD408 3

4

' S 8

7 S

.4 9

4 A

B~

j 1

1

.P i

a e

e

e. m

.-e e

--e

  • * = = *

= -.

FMLURE TO MmGATE O

LOSS OF COOUNG EVENT Analyst MCCl Creation Oate. 0616 99 Revesort 05-27-99 a

-u cueuse.eh as OBEMGE 1

-4LaR14 (h

O MU Caseg Gymsm namesep 2

eumni aumta

. -.v.. -.

TM'CW" "g't""

ElLa',5 3

es,4cotroca ee,4 ve64

emeswer, tegoded 133e433 133 4m 4

Ie.s of Lan Lane 5

oumiu s.-

Ceegg Speem GAshelp s

GLCfHet 4Lo.988 8

1 i =*%a

.===,

. = _. =.

.vm

- #=

mier.o 7

s h oC4 esadLTEL4 m

SJhs4B8 2 Ste4N 1ABreW e

9 1

A S

g...

~~-

'--- ~---^

. 1..

.. ~

9 i

i i

a i

a i

e i

o FMLURE TO MAKE UP INVENTORY 0

LOSS OF INVENTORY EVENTS Analyst MCCjCasabon Date 06 19-99 Rewason 05 27 99 w use vs.eappiaiA Oseenm 7ese.

Magene LOS Gosne Eng 1_

~

FWoh m FM W W Laos ens tiemme en Fee Pwnpa w 48588W hiEhWup Chet GeWWEG 2

mm<s, amm 8,

8 Casesener fet t Anydas SPF biete g Osweest Fees W FAA.L*f 70 66AsW.

tessee tese P

Pft0 3

eenente armeieassan eeeecusw4 may 1 Age 48

, Abe4lH 9A90003 4 Ae>002

&lagste LCA Gwere

  • Late 4

mau2

~

,e.._.

,e._

and.mene oEN" s

amis, I

aumes

_.T. -.

""". h

.:lll"M

,2I*,KsN#,5 6

er asonsw.a mesecumas.L caesann

_.- g

.,g

.g

,_ g suse 7

sasn O

I I

Y& O M SWY Lane mid mese 9e fee Pusage er espues theanup Ostas Bewest 8

else,ei amm a,_.

_efesa pean mamm mannene er seaeomv ev vea op tenmie masame er enes Lemmes aged Lanhas FRS PROTECTicee 80f8 9

ee -

ere.aeenoun mas : n =

2 00>438 9 AM1 8 00>458 1 A004G3 A

B C

- - - - - ~ ' ~ - - ' - ' '

- - ~

'- ~ ~ ' -

u a

i i

g i

a i

e i

e FAlLURE TO MAKE UP INVENTORY 0

LOSS OF POWER EVENTS

.Anahst MCC[Creeuon Date 0619-99 Revoon. 05 27 99 mediumc woueuraAss Fehse e annano aussesy masg EP jlO he Susupe 1

_%,i, b.?O.R FAAB,.TO om,L5W YO teu.tEW PAE w Anu n nom e u a os C00 Lees.na An SMLV F54 PetOftcnces Pup 2

searcto4 sommesw 9 AB*dE2 9 atm4Rf 3

W e sensie Wuusert uus4 00 to mese 4

eLPe142

~

w e =.na TO Ort 2ATOR PAE9 Chasse Pee Are

-w CocLaso SMLV Pam es Pummen 5

eearcLe4

- -en 1JR>GRf 9AB>SM Pehse a suasie einesemy unsg EP te peup 7

eLPatn T

I OpWRATom PAA.5 TO__

Esmet Pte SSTAnuSM AL.TtsgeAM Pesansumi ptsus CocaJang SAALY Pen a Poemen emith&4 fp4hMadh#?p I

,- g

.- g 9

i A

i I

B i

l L

e - - --

~

l i

. - -.. ~.

mwd

,_^

l d

- ~ * ~

-~ ;-'

~,

e i

i i

z i

a i

e i

o FUNCTIONAL FAULT TREE O

RECOVERY EVENTS Anesynt MCClCreehon Date 06 16-99 Remson: 06 10-99 Sese Lec = ma N 14 1

eryttie errTtti

-errviis 4ryttia

()

()

(1 I

I I

rense e am reen as aseman paause To accNust rattsu 7oscogn en omise e.e.m, m.is cause amense wcryont sovacas m oppsnt sowices wess M

  • asius; sury one esses (Tina e aspets; (Tam e esevie) 2

, -. a.,eni

, -. rensa 4 Asper SAe>4at (Annan Seas 4e1 3

Wr7133 errTt32 WrftM

()

(1 (1

1 e

i i

oMn oc*a" e.M EEl0".e a.ml"w.".M o.e -

e 4

mm am< i.aa - i ei a.

=< = =rmaa i a

1Josett 1mmett 4M S

enmse 54113 aPEW FAL5 hCo e

sewesev7 7

eppTtse errTtn i

l%"

E "vtas"E E asocemec sucesmew 94t>408 18B>400 i

1 a

1 A

~

l I

e I

i I

C--

n a

I

    • AM.-

." O* ;...

U i

1 4

3 6

i e

s a

FUNCTIONAL FAULT TREES 0

Aneyst. MCCl Creation Done: 06 17-99 Revisen; 06 27 99 en.w ummumai.e 1

omise

_.switu

... i (1

~

I s

eenAmo swm Caam OmoP As GuuA supmW PWIOC2DLMS PUIGSENT 2

_ _= g e-_ g

- ar s ommenop 1

?

3 4

emus omsu (1

i sanAmo www.

BrTW81NAL Pstt Loep som Pipe 1 M PROM Gr4#TDoWite auf Gse towns 5

1 e.strm e 4 cop 4ri

'" b "b

~

)

1 7

epmn emin emiu l

l I

LOOP Phou Laos W geassig Gee.

tenA11seg rwarf.

messag Lams e Peas WW Ceems snesawy 8

eromootmv eroepen se -

18BeeBB

$ Eteeft 1 AB>GW a

A emus emus

()

()

e mesugasse.

esTuresa rwarr.

Seemus tous trP PAILLsta Peoni

  • & Ipues SM TOdtMADO bdIGGE.8%

B a amenac m.T- -

.- g

.g c..

o e

i i

g FUNCTK) MAL FAULT TREE O

MtSCELLANEOUS EVENTS Ane4st MCC[Caeshon Date 05-14-se Reveon. 0&19 99 mentac uom.mi.e 1

emns suna em, a o

seinese mast 2

mes4 serv A Amestes / T

\\.3/

3 4

WW emist

()

(1 i.

ep ainsas,888W9 W

tee tass LO,mmes esanew Geen W g

5

_=w m

_ ~D

'~ Q)

V.

S 7

A j

i l

5 C...

j

i S. A. Richards August 19, 1999 Understanding failures of organizations in preventing major accidents; and Probabilistic risk assessments of spent fuel pools Once their comments are received, the document will be finalized and will represent the staff's human reliability analysis approach for this particular application.

Copies of this memorandum with the attachment will also be provided directly to interested public stakeholders. Comments, particu'arly from experts with experience matching the criteria above, received by September 17,1999, will be considered. Comments (with a description of any background in the area of human reliability analysis) should be addressed to U.S. Nuclear Regulatory Commission, Attn: Richard Dudley, Mail Stop O-11 D19, Washington D.C.,20555.

Attachment:

As stated cc w/att See next page DISTRIBUTION:

Central File RBarrett PDIV D r/f DJackson PUBLIC GHolahan JZwolinski/SBlack GHubbard OGC ACRS RDudley TEaton GParry To receive a copy of this document, indicate "C" in the box

]

IW l l l

OFFICE PDIV-3/PM C PDIV-3/LA C

SPLB:SC C

SPbNBC

,C PDIV-k j

C NAME WHufftod>6.%

CJamersonhC h rd h JHannonjb.j%dMh

)

OATE 8// tf/99 8/18/99

[]

d4/b99 8/ 8 /99 b 8//1/99 DOCUMENT NAME: G:\\PDIV-3\\ Regulatory Improvement \\HRA-SFP-Study.wpd OFFICIAL RECORD COPY hk D

u