ML20212A802
| ML20212A802 | |
| Person / Time | |
|---|---|
| Site: | Paducah Gaseous Diffusion Plant |
| Issue date: | 08/27/1999 |
| From: | UNITED STATES ENRICHMENT CORP. (USEC) |
| To: | |
| Shared Package | |
| ML20212A773 | List: |
| References | |
| NUDOCS 9909170132 | |
| Download: ML20212A802 (135) | |
Text
--
I
?
, to GDP 99-0160
- USEC-01 Application for United States Nuclear Regulatory Commission Certification Paducah Gaseous Diffusion Plant Revision 41 (August 27,1999) 9909170132 990830 ADOCK 0700 001
.gDR
Y$lY W~NY dpk.E
/t?/ f)-
APPLICATION FOR UNITED STATES am.uumaavaa COMMISSION CERTIFICATION C --
bN-ADUCAH GASEOUS DIFFUSION PLANT REMOVAL / INSERTION INSTRUCTIONS m ensamese er Geselheeden Golde dNGEq999 - REVISION 41 C3L*?55 iEtanNGENCN1 Insert Page.
VOLUME 1 List of Effective Pages List of Effective Pages LOEP-1/LOEP-2, LOEP-7/LOEP-8 through LOEP-1/LOEP-2, LOEP-7/LOEP-8 through LOEP-17/LOEP-18 LOEP-17/LOEP-18 Table of Contents Table of Contents 9/10, 13/14 9/10, 13/14 SAR Chapter 1. Appendix A SAR Chapter 1, Appendix A A-1/A-2, A-5/A-6 A.1/A-2, A-5/A-6 SAR Section 3.12 SAR Section 3.12 3.12-30.12-4, 3.12-5S.12-6, 3.12-6aa.12-6b, 3.12-3/3.12-4,3.12 5/3.12-6,3.12-6aa.12-6b.
3.12-6c/3.12-6d, 3.12-7S.12-8, 3.12-8aa.12-8b 3.12-6c/3.12-6d, 3.12-7S.12-8, 3.12-8aa.12-8 b SAR Section 3.15 SAR Section 3.15 3.15-50.15-6, 3.15-6a/3.15-6b, 3.15-1 10.15-12, 3.15-5G.15-6, 3.15-6aG. I 5-6b, 3.15-1 l a.15-12, 3.15-130.15-13a. 3.15-13 b/3.15-14, 3.15-17/3.15-18, 3.15-138.15-13a. 3.15-13bS.15-14,3.15-17S.15-18, 3.15-18aS.15-18b, 3.15-278.15-28, 3.15-28a/3.15-28b, 3.15-18a/3.15-18 b, 3.15-27S.15-28, 3.15-28aG.15-28 b, 3.15-318.15-32,3.15-33S.15-34,3.15-34a/3.15 34b, 3.15-310.15-32, 3.15-334.15-34, 3.15-34aG.15-34 b, 3.15-358.15-36, 3.15-36a/3.15-36b 3.15-35S.15-36, 3.15-36a'3.15-36b k._]/
r VOLUME 2 SAR Chapter 4, Appendix A SAR Chapter 4, Appendix A 1 3/1 4, 2-5/2-6, 2-6a/2-6b,2-9/2-10, 2-10a/2-10b, 1-3/1-4, 2-5/2-6, 2-6a'2-6b,2-9/2-10,2-10a/2-10b, 2-10c/2-10d, 2 1 1/2-12, 2 12a/2-12 b, 2-12c/2-12 d, 2-10c/2-10d, 2-1 1/2-12, 2-12aG-12 b, 2-12c/2 12d, 2-13/2-14, 2-15/2 15 a, 2 15b/2-16, 2-17/2-18, 2-13/2-14, 2-15/2 15a, 2-15b/2-16, 2-17/2-18, 2 19/2-20, 2-20a/2-20b, 2-21/2-22, 2-23/2-24, 2-19/2-20,2-20a/2 20b,2 21/2-22,2-23/2-24, 2-39/2-40,2-41/2-42,2-47/2-48 2-39/2-40,2-41/2-42,2-47/2-48 SAR Chapter 5.2 SAR Chapter 5.2 5.2-5/5.2-6 5.25/5.2-6 VOLUME 4 TSR List of Effective Pages TSR List of Effective Pages ii iii, iv ii. iii, iv TSR Section 2.1 TSR Section 2.1 2.1-24,2.1-25,2.1-26 2.1-24,2.1 25. 2.1-26, 2.1-26a, 2.1-26b, 2.1-26c TSR Section 2.2 TSR Section 2.2 2.2 17,2.2-18 2.2-17,2.2-18,2.2-18a, 2.2 18b, 2.2-18e TSR Section 2.3 TSR Section 2.3 2.3-21,2.3-22 2.3-21, 2.3-22, 2.3-22a, 2.3-22b TSR Section 2.4 TSR Section 2.4 2.4-19,2.4-20 2.4 19, 2.4-20, 2.4-20a, 2.4-20b, 2.4-20c TSR Section 2.5 TSR Section 2.6 2.6-6, 2.6-7, 2.6-8 2.6-6,2.6-7,2.6-8, 2.6-9, 2.6-10, 2.6 11 1
1
SAR-PGDP August 27,1999 Rev.41 LIST OF EFFECTIVE PAGES Eaggg Revision Eagn Revision List of Effective Pares 14 3
15 3
LOEP-1 41' 16 8
LOEP-2 40 17 38 LOEP-3 38 18 8
LOEP-4 38 19 3
LOEP-5 38 20 3
LOEP-6 38 21 3
LOEP-7 41 22 24 LOEP-8 41 23 3
LOEP-9 41 24 3
LOEP-10 41 25 3
LOEP-11 41 26 3
LOEP-12 41 27 3
LOEP-13 41 28 3
LOEP-14 41 l
LOEP-15 41 Definitions LOEP-16 41 LOEP-17 41 1
11 LOEP-18 41 2
40 0
/
3 11 Introduction 4
1 1
25 Chapter 1 2
40 3
39 1-1 2
4 8
1-2 24 1-3 24 Table of Contente 1-4 2
1-5 2
1 3
1-6 2
2 2
1-7 26 3
3 1-8 26 4
38 1-9 26 5
1 1-10 4
6 1
1-11 21 7
3 1-12 21 8
3 A-1 41 9
41 A-2 41 10 4
A-3 10 11 3
A4 8
12 38 A-5 41 13 41 A4 8
f~h Q
LOEP-1
}
SAR-PGDP August 13, 1999 Rev. 40 LIST OF EFFECTIVE PAGES Eggn Revision P_ ages Revision Chanter 1 (Continued) 2.1-28a 40 2.1-28b 38 1
A-7 8
2.1-29 1
A-8 8
2.1-30 1
A-9 8
2.1-31 1
A-10 8
2.1-32 1
2.1-33 1
Chanter 2 2.1-34 1
2.1-1 3
2.2-1 2
2.1-2 38 2.2-2 2
2.1-3 40 2.1-4 3
2.3-1 1
2.1-5 3
2.3-2 1
2.1-6
~
l 2.3-3 1
2.1-7 38 2.3-4 1
2.1-8 38 2.3-5 2.1-9 40 2.3-6 2.1-10 8
2.3-7 2
2.1-11 8
2.3-8 2
2.1-12 38 2.3-9 2
2.1-13 8
2.3-10 2
2.1-14 8
2.3-11 1
2.1-1da 38 2.3-12 1
2.1-14b 8
2.1-15 40 2.4-1 2
2.1-16 38 2.4-2 2
2.1-16a 38 2.4-3 1
2.1-16b 38 2.4-4 1
2.1-17 40 2.4-5 2
2.1-18 38 2.4-6 1
)
2.1-18a 38 2.4-7 2
I 2.1-18b 8
2.4-8 2
2.1-19 38 2.4-9 1
2.1-20 2
2.4-10 1
2.1-21 2
2.4-11 1
2.1-22 1
2.4-12 1
2.1-23 1
2.1-24' 1
2.5-1 2
2.1-25 38 2.5-2 1
2.1-26 1
2.5-3 1
2.1-27 40 2.5-4 1
2.1-28 1
2.5-5 1
LOEP-2
I' SAR-PGDP August 27,1999 O-Rev.41 LIST OF EFFECTIVE PAGES P.aggg Revision P_agsg P.evision Chmater 3 (CnntinnaA) 3.12-6 41 3.12-6a 41 3.9-17 24 3.12-6b 41 3.9-18 24 3.12-6c 41 3.9-19 24 3.12-6d 41 3.9-20 2
3.12-7 41 3.9-21 8
3.12-8 41 3.9-22 1
3.12-8a 41 3.9-23 '
2 3.12-8b 41 3.9-24 2
3.9-25 24 3.13-1 2
3.9-25a 24 3.13-2 24 3.9-25b 24 3.13-3 24 3.9-26 24 3.13-4 24 3.9-27 24 3.13-5 24 3.9-28 24 3.13-6 2
3.9-29 38 3.13-7 24 3.9-30 38 3.13-8 2
3.9-31 1
3.13-9 2
3.9-32 1
3.13-10 2
3.9-33 1
3.13-11 2
N 3.9-34 2
3.13-12 2
3.9-35 8
3.9-36 2
3.14-1 2
3.9-37 2
3.14-2 3
3.9-38 1
3.15-1 38
-3.10-1 38 3.15-2 3
3.10-2 38 3.15-3 38 3.10-3 21 3.15-4 38 3.10-4 1
3.15-5 41 3.15-6 41 3.11-1 24 3.15-6a 41 3.11-2 24 3.15-6b 41 3.11-3 24 3.15-7 38 3.11 4 24 3.15-7a 10 3.11-5 24 3.15-7b 10 3.11-6 24 3.15-8 3
3.15-9 38 j
3.12-1 2
3.15-9a 38 3.12-2 24 3.15-9b 24 3.12-3 40 3.15-10 24 3.12-4 41 3.15-11 24 3.12-5 41 3.15-12 41 LOEP-7
SAR-PGDP August 27,1999 Rev. 41 LIST OF EFFECTIVE PAGES Eggss Revision Eagg.g Revision Chanter 3 (Continued) 3.15-45 38 3.15-46 3
3.15-13 41 3.15-47 19 3.15-13a 41 3.15-48 3
3.15-13b 41 3.15-49 3
3.15-14 3
3.15-50 3
3.15-15 3
3.15-51 8
3.15-16 3
3.15-52 3
3.15-17 41 3.15-53 34 3.15-18 41 3.15-54 24 3.15-18a 41 3.15-55 24 3.15-18b 41 3.15-56 24 3.15-19 36 3.15-57 3
3.15-20 36 3.15-58 38 3.15-21 34 3.15-22 3
3.16-1 24 3.15-23 38 3.16-2 24 3.15-24 38 3.16-3 24 3.15-25 23 3.16-4 24 3.15-26 38 3.15-27 41 Chanter 4 3.15-28 41 3.15-28a 41 4.1-1 2
3.15-28b 41 4.1-2 1
3.15-29 4
4.1-3 1
3.15-30 38 4.1-4 1
3.15-31 38 4.1-5 1
3.15-32 41 4.1-6 1
3.15-33 3
3.15-34 41 4.2-1 2
3.15-34a 41 4.2-2 1
3.15-34b 41 4.2-3 1
3.15-35 41 4.2-4 1
3.15-36 41 4.2-5 2
3.15-36a 41 4.2-6 1
3.15-36b 41 4.2-7 1
3.15-37 3
4.2-8 1
3.15-38 29 3.15-39 29 4.3-1 2
3.15-40 29 4.3-2 3
3.15-41 38 4.3-3 38 3.15-42 38 4.3-4 26 3.15-43 38 4.3-4a 38 3.15-44 38 4.3-4b 3
LOEP-8
r SAR-PGDP August 27,1999
(
Rev. 41 LIST OF EFFECTIVE PAGES Eagg Revision Eagn Ervision Chanter 4 (Continn~D 4.3-43 38 4.3-44 38 4.3-5 3
4.3-45 38 4.3-6 38 4.3-45a 38 4.3-7 24 4.3-45b 38 4.3-8 3
4.3-46 3
4.3-9 3
4.3-47 3
4.3-10 3
4.3-48 3
4.3-11 3
4.3-48a 3
4.3-12 3
4.3-48b 3
4.3-13 3
4.3-49 24 4.3-14 3
4.3-50 38 4.3-15 3
4.3-51 21 4.3-16 3
4.3-52 38 4.3-16a 3
4.3-53 1
4.3-16b 3
4.3-54 21 4.3-17
~2 4.3-55 3
4.3-18 1
4.3-56 2
4.3-19 3
4.3-57 2
4.3-20 3
4.3-58 1
4.3-21 3
4.3-59 2
o 4.3-22 24 4.3-60 2
4.3-23 3
4.3-61 1
4.3-24 38 4.3-62 3
4.3-25 3
4.3-63 2
4.3-26 3
4.3-64 38 4.3-27 3
4.3-65 2
4.3-28 3
4.3-66 38 4.3-29 3
4.3-67 2
4.3-30 3
4.3-68 1
4.3-31 3
4.3-69 2
' 4.3-32 38 4.3-70 1
4.3-33 38 4.3-71 1
4.3-34 3
4.3-72 1
4.3-34a 34 4.3-73 1
4.3-34b 3
4.3-74 1
4.3-35 34 4.3-75 1
4.3-36 3
4.3-76 1
4.3 36 4.3-77 1
4.3-38 4
4.3-78 1
4.3-39 3
4.3-79 1
4.3-40 8
4.3-80 1
4.3-41 3
4.3-81 1
4.3 3 4.3-82 4
LOEP-9
SAR-PGDP August 27,1999 Rev. 42 LIST OF EFFECTIVE PAGES i
Pagn Revision P.agu Revisien Chanter 4 (Continued) 4.6-2 2
4.6-3 1
{
4.3-83 38 4.6-4 2
4.3-84 38 4.6-5 1
4.3-85 1
4.6-6 2
4.3-86 1
4.6-7 24 4.6-8 2
4.4-1 24 4.6-9 1
4.4-2 3
4.6-10 1
4.4-3 2
4.6-11 2
4.4-4 2
4.6-12 1
4.4-5 2
4.6-13 1
4.4-6 21 4.6-14 2
4.4-7 24 4.6-15 2
4.4-8 24
,4.6-16 1
4.4-9 24
'4.6-17 1
4.4-10 1
'4.6-18 1
4.4-11 24 4.6-19 1
4.4-12 38 4.6-20 1
4.4-13 1
4.6-21 1
4.4-14 1
4.6-22 1
4.4-15 34 4.6-23 1
4.4-16 34 4.6-24 1
4.4-17 24 4.4-18 24 4.7-1 1
4.4-19 24 4.7-2 2
4.4-20 24 4.7-3 4
4.4-21 2
4.7-4 4
4.4-22 1
4.7-5 1
4.4-23 1
4.7-6 2
4.4-24 1
4.7-7 2
4.4-25 2
4.7-8 24 4.4-26 2
4.7-9 2
4.4-27 1
4.7-10 2
4.4-28 1
4.7-11 2
4.7-12 2
4.5-1 2
4.7-13 2
4.5-2 24 4.7-14 3
4.5-3 1
4.7-15 2
4.5-4 1
4.7-16 2
4.7-17 38 4.6-1 38 4.7-18 3
4.6-1a 24 4.7-19 2
i 4.6-1 b 24 4.7-20 1
I LOEP-1
)
\\
f SAR-PGDP August 27,1999 O
]
Rev. 41 LIST OF EFFECTIVE PAGES Egggg Revision Eaggs Revision Chanter 4 (Continued) 4.10-1 24 4.10-2 24 j
4.7-21 1
4.10-3 38 4.7-22 1
4.10-4 24 4.7-23 2
4.7-24 1
4.11-1 1
4.7-25 2
4.11-2 1
4.7-26 2
4.11-3 1
4.7-27 1
4.11-4 1
4.7-28 1
4.7-29 2
4.7-30 2
Chanter 4. Anoendix A 4.7-31 2
4.7-32 2
1 24 4.7-33 2
2 24 4.7-34 2
4.7-35 2
1-1 40 4.7-36 2
1-2 24 4.7-37 2
1-3 41 4.7-38 2
1-4 41 O
4.7-39 1
1-5 24 4.7-40 1
1-6 40 4.7-41 1
1-7 40 4.7-42 1
1-8 24 4.7-43 1
1-9 40 4.7-44 1
1-10 24 4.7-45 1
1-11 24 4.7-46 1
1-12 24 4.7-47 1
1-13 24 4.7-48 1
1-14 24 4.7-49 1
4.7-50 1
2-1 40 2-2 24 4.8 1 3
2-3 24 4.8-2 3
2-4 24 2-5 41 4.9 1 1
2-6 41 4.9-2 I
2-6a 41 4.9-3 2
2-6b 41 4.9-4 2
2-7 29 4.9-5 34 2-8 24 4.9-6 2
2-9 41 LOEP-11
f SAR-PGDP August 27,1999 Rev. 41 LIST OF EFFECTIVE PAGES Egggs Revision Egges Revision Chanter 4. Annendix A (Continued) 2-41 41 242 24 2-10 41 2-43 24 2-10a 41 2-44 24 2-10b 41 2-45 24 2-10c 41 2-46 24 2-10d 41 2-47 41 2-11 24 2-48 41 2-12 41 2-49 24 j
2-12a 41 2-50 24
{
2-12b 41 2-51 29 2-12c 41 2-52 24 2-12d 41 2-52a 29 2-13 41 2-52b 29 2-14 29 2-53 24 2-15 41 2-54 24 2-15a 41 2-55 38 2-15b 41 2-56 38 2-16 41 2-57 24 2-17 41 2-58 24 2-18 29 2-59 24 2-19 41 2-60 38 2-20 41 2-61 38 2 20a 41 2-62 24 2-20b 41 243 24 2-21 41 2-64 38 2-22 41 245 38 2-23 41 2-66 38 2-24 24 2-67 24 2-25 24 2-68 38 2-26 24 2-69 24 2-27 24 2-70 24 2-28 24 2-71 38 2-30 24 2-72 38 2-31 24 2-73 24 2-32 24 2-74 38 2-33 24 2-75 38 2-34 24 2-76 38 2-35 24 2-77 38 2-36 24 2-78 38 2-37 24 2-79 38 2-38 24 2-80 38 2-39 41 2-81 38 2-40 24 2-82 24 LOEP-12
' SAR-PGDP August 27,1999 CJ LIST OF EFFECTIVE PAGES Eaggs Revision Eaggg Revision Chanter 4. Annendix A (Continued) 2-125 38 2-126 24 2-83 24 2-127 38 2-84 24 2-128 24 2-85 24 2-129 24 2-86 24 2-130 24 2-87 24 2-131 24 2-88 24 2-132 38 2-89 24 2-133 38 2-90 24 2-134 38 2-91 24 2-135 38 2-92 24 2-136 38 2-93 24 2-137 38 2 24 2-138 38 2-95 24 2-139 24 2-%
24 2-140 24 i
2-97 24 2-141 24 2-98 24 2-142 38 l
2-99 24 2-143 24 2-100 24 2-144 38 2-101 24 2-145 24 2-102 24 2-146 24 2-103 24 2-147 38 2-104 24 2-148 24 2-105 24 2-149 38 2-106 24 2-150 38 2-107 24 2-151 38 2-108 24 2-152 24 2-109 24 2-153 38
~ 2-110 24 2-154 38 2-111 24 2-155 38 2-112 24
'2-156 38 2-113 24 2-157 38
.2-114 24 2-158 38 2-115 24 2-159 38 2-116 24 2-160 38 2-117 38 2-161 24 2-118 38 2-162 24 2-119*
38 2-163 24 2-120 38 2-164 24 2-121 38 2-165 24 2-122 24 2-166 24 i
2-123 24 2-167 24 2-124 24 2-168 24 LOEP-13
SAR-PGDP August 27,1999 Rev. 41 LIST OF EFFECTIVE PAGES Eggga Revision Eages Revision Chanter 4. Anoendix A (Continued) 3-14 24 3-15 24 2-169 24 3-16 38 2 170 24 3-17 38 2-171 24 3-18 24 2-172 24 3-19 38 2-173 24 3-20 38 2-174 24 3-21 38 2-175 24 3-22 38 2-176 24 3-23 38 2 177 24 3-24 38 2-178 24 3-25 38 2-179 24 3-26 24 2-180 24 3-27 24 2-181 24 3-28 24 2-182 24 3-29 24 2-183 24 3-30 24 2-184 24 3-31 24 2-185 24 3-32 24 2-186 38 3-33 24 2-187 38 3-34 24 2-188 38 3-35 24 2-189 24 3-36 24 2-190 38 3-37 38 2-191 38 3-38 38 2-192 38 2-193 24 4-1 24 2-194 38 4-2 24 2-195 38 4-3 24 2-l%
38 4-4 24 4-5 24 3-1 24 44 24 3-2 24 4-7 38 3-3 24 4-8 24 3-4 38 4-9 24 3-5 38 4-10 24 3-6 38 4-11 24 3-7 38 4-12 24 3-8 38 4-13 24 3-9 38 4-14 24 3-10 38 4-15 24 3-11 38 4-16 24 3-12 38 4-17 24 3-13 38 4-18 24 LOEP-14
SAR-PGDP August 27,1999
/3 Rev. 41 V
LIST OF EFFECTIVE PAGES Eaggg Revision Eagst Revision Chanter 4. Anoendix A (Continued) 5.1-26 1
5.1-27 38 4-19 24 5.1-28 1
4-20 24 5.1-29 1
4-21 24 5.1-30 21 4-22 24 5.1-31 1
4-23 24 5.1-32 1
4-24 24 5.1-33 38 5.1-34 1
5-1 24 5.1-35 3
5-2 24 5.1-36 1
5.1-37 1
5.1-38 1
Chanter 5 5.1-39 1
5.1-40 1
5.1-1 21 5.1-41 1
5.1-2 21 5.1-42 1
5.1-3 2
5.1-43 1
5.1-4 3
5.1-44 1
5.1-5 21 5.1-45 1
O 5.1-6 3
5.1-46 1
5.1-7 21 5.1-47 1
5.1-8 3
5.1-48 1
5.1-9 38 5.1-49 1
5.1-10 3
5.1-50 1
5.1-11 21 5.1-51 1
5.1-12 21 5.1-52 1
5.1-13 21 5.1-53 1
5.1-13a 21 5.1-54 1
5.1-13b 21 5.1-14 21 5.2-1 2
5.1-14a 24 5.2-2 24 5.1-14b 24 5.2-3 24 5.1-15 3
5.2-4 24 5.1-16 3
5.2-5 24 5.1-17 21 5.2-6 41 5.1-18 3
5.2-7 2
5.1-19 1
5.2-8 4
5.1-20 1
5.2-9 4
5.1-21 1
5.2-10 34 5.1-22 21 5.2-11 24 5.1-23.
21 5.2-12 2
5.1-24 21 5.2-13 4
5.1-25 38 5.2-14 2-LOEP-15 l
SAR-PGDP August 27,1999 Rev. 41 LIST OF EFFECTIVE PAGES Egggs Revision Eagsk Revision Chanter 5 (Continued) 5.3-39 2
5.3-40 24 5.2-15 38 5.3-41 2
5.2-16 24 5.3-42 2
5.2-17 24 5.2-18 24 5.4-1 3
i 5.4-2 3
5.3-1 39 5.4-3 3
5.3-2 38 5.4-4 3
5.3-3 4
5.3-4 4
5.4-5 3
5.3-5 3
5.4-6 3
5.3-6 4
5.4-7 3
5.3-7 38 5.4-8 3
5.3-8 4
5.4-9 24 5.3-9 24 5.4-10 24 5.3-10 3
5.3-11 3
5.5-1 24 5.3-12 3
5.5-2 24 5.3-13 3
5.3-14 3
5.6-1 3
5.3-15 24 5.6-2 3
5.3-16 24 5.6-3 3
5.3-17 38 5.6-4 3
5.3-18 4
5.6-5 3
5.3-19 24 5.6-6 3
5.3-20 38 5.6-7 38 5.3-21 4
5.6-8 24 5.3-22 38 5.3-23 24 5.7-1 3
5.3-24 3
5.7-2 24 5.3-25 4
5.7-3 24 5.3-26 24 5.7-4 24 5.3-27 2
5.7-5 3
5.3 28 24 5.7-6 3
5.3-29 2
5.7-7 1
5.3-30 24 5.7-8 3
5.3-31 38 5.7-9 24 5.3-32 24 5.7-10 3
5.3-33' 2
5.7-11 1
5.3-34 2
5.7-12 1
5.3-35 2
5.7-13 1
5.3-36 2
5.7-14 1
5.3-37 2
5.7-15 24 5.3-38 2
5.7-16 1
LOEP-16
c SAR-PGDP '
August 27,1999 Cg-Rev. 41 LIST OF EFFECTIVE PAGES fagsg Revision Eages Revision Chanter 6 6.4-2 38 6.4-3 38 j
6.1-1 39 6.4-4 38 1
6.1-2 39 6.4-5 38 6.1-3 39 6.4-6 38 6.1-4 39 6.4-7 38 6.1-4a 24 6.4-8 38 6.1-4b 24 6.4-9 24 6.1-5 39 6.4-10 1
6.1-6 39 6.17 39 6.5-1 38 6.1-8 39 6.5-2 8
6.1 9 3
6.5-3 24 6.1-10 8
6.5-4 38 6.1-11 39 6.5-5 2
6.1-12 24 6.5-6 2
6.1-13' 24 6.5-7 2
6.114 24 6.5-8 2
6.1-15 24 6.5-9 39 6.1-16 24 6.5-10 24 O
6.1-17 39 6.1-18 2
6.6-1 3
6.6-2 3
6.2-1 24 6.6-3 38 6.2-2 3
6.6-4 3
6.6-5 3
6.3-1 2
6.6-6 3
6.3-2 2
6.6-7 3
6.3-3 2
6.6-8 3
6.3-4 2
6.6-9 3
6.3-5 3
6.6-10 3
6.3-6 3
6.6 11 3
6.3-7 3
6.6-12 3
6.3-8 38 6.6-13 3
6.3-9 38 6.6-14 8
6.3-10 3
6.6-15 3
6.3-11 38 6.6-16 8
6.3-12 2.-
6.6-17 24 6.3-13' 24 6.6-18 3
6.3 14 24 6.3-15 24 6.7-1 3
6.3-16 24 6.7 2 3
6.7-3 1
6.4-1 38 6.7-4 1
LOEP-17 J
SAR-PGDP August 27,1999 Rev. 41 LIST OF EFFECTIVE PAGES Eagn Ervision Eagts Revision Chanter 6 (Continued) 6.11-6 38 6.8-1 39 6.11-6a 38 6.8-2 3
6.I1-6b 38 6.8-3 38 6.11-7 3
6.8-4 1
6.Il-8 24 A-1 4
6.9-1 24 A-2 3
6.9-2 31 A-3 4
6.9-3 31 A-4 2
6.9-4 1
B-1 3
6.9-5 24 B-2 3
6.9-6 24 B-3 4
6.9-7 24 B-4 3
)
6.9-8 3
6.9-9 3
6.9-10 3
6.9-11 24 6.9-12 3
6.9-13 3
6.9-14 3
6.9-15 24 6.9-16 38 6.9-17 24 6.9-18 24 6.9-19 3
i 6.9-20 3
6.10-1 2
6.10-2 2
6.10-3 2
6.10-4 3
6.10-5 3
6.10-6 2
6.10-7 2
6.10-8 2
6.10-9 1
6.10-10 1
6.11-1 38 6.11-2 4
6.11-3 3
6.11-4 3
6.11-5 3
LOEP-18
SAR-PGDP August 27,1999 C
Rev. 41 TABLE OF CONTENTS Eage CHAPTER 3 3.9 UTILITIES.........................................
- 3. 9-1 3.9.1 Plant Electrical System.............................
3.9-1 3.9.2 Water Systems.................................
3.9-9 3.9.3 C-616 Waste Water Treatment Plant.................... 3.9-15 3.9.4 C-615 Sewage Treatment System...................... 3.9-16 3.9.5 Plant Steam and Condensate System.................... 3.9-16 3.9.6 Plant Air System................................. 3.9-20 3.9.7 Plant Nitrogen System............................. 3.9-22 3.9.8 Plant Oxygen and Acetylene Systems.................... 3.9-24 3.9.9 Chlorine System................................. 3.9-25 3.9.10 Sulfuric Acid System...
3.9-28 3.10 MANAGEMENT OF MIXED AND RADIOACTIVE WASTE........ 3.10-1 3.10.1 Waste Segregation And Collection 3.10-1 3.10.2 Radioactive Waste Storage.......................... 3.10-1 3.10.3 Radioactive Waste Treatment 3.10-2 3.10.4 Facilities...................................... 3.10-2 k
3.11 LABORATORY..............
3.11-1 3.11.1 Laboratories 3.11-2 3.11.2 Technology Laboratories...........
3.11-3 3.12 COhBfUNICATIONS AND ALARM SYSTEMS 3.12-1 3.12.1 Telecommunications System 3.12-1 3.12.2 Radio Communication System.......
3.12-2 3.12.3 Public Address System..........
3.12-3 3.12.4 Data Communications............................ 3.12-3 3.12.5 Process Building Evacuation Alarm System 3.12-4 3.12.6.a Criticality Accident Alarm System (Existing Configuration) 3.12-4 3.12.6.b Criticality Accident Alarm System (New Configuration)....
3.12-6 3.12.7 Argon Gammagraph............................. 3.12-6b 3.12.8 References.................................... 3.12-6c C
9
SAR-PGDP July 26,1996 Rev. 4 TABLE OF CONTENTS Eggg CHAPTER 3 3.13 MAINTENANCE 3.13-1 3.13.1 Maintenance Facilities.............
3.13-1 3.13.2 Maintenance Activities...........
3.13-2 3.13.3 Fuel Storage Facilities 3.13-5 3.13.4 Miscellaneous Facilities...............
3.13-6 3.14 ADMINISTRATION FACILITIES............
3.14-1 3.14.1 C-100 Administration Building...
3.14-1 3.14.2 C-100 Engineering Trailers.......
3.14-1 3.14.3 C-101 Cafeteria...
3.14-1 3.14.4 C-102 Dispensary 3.14-1 3.14.5 C-100-A and C-102 Office Trailers 3.14-1 3.14.6 C-200 Complex: Fire and Guard Headquarters 3.14-1 3.14.7 C-202 Guard Training Facility.......
3.14-1 3.14.8 C-212 Offices........
3.14-2 3.14.9 C-302 Operations Data Center.........
3.14-2 3.14.10C-304 Training and Cascade Office Building....
3.14-2 3.14.11C-743 Offices..
3.14-2 3.15 Q AND AQ STRUCTURES, SYSTEMS AND COMPONENTS.
.3.15-1 3.15.1 Q Boundary Definitions 3.15-1 3.15.2 AQ Boundary Definitions
. 3.15-41 3.15.3 AQ Structures.
. 3.15-57 3.16 ITEMS ADDRESSED BY COMPLIANCE PLAN........
3.16-1 3.16.1 Conformance of the Facility and Process Description to Plant Configuration.....
3.16-1 j
3.16.2 Autoclave ManualIsolation System.
3.16-1 j
3.16.3 Redundant Operational / Safety System Trips and Alarms 3.16-1
)
3.16.4 Testing of the UF, Release Detection System 3.16-2 3.16.5 C-360 Transfer Manifold Pressure Relief.
3.16-2 3.16.6 Determination of Q and AQ Support Systems 3.16-2 3.16.7 Design Modifications to Support Q and AQ Boundary Definitions. 3.16-2 3.16.8 Identification of Nuclear Criticality Safety SSCs 3.16-3 3.16.9 CAAS Audibility.
. 3.16-3 3.16.10 Autoclaves..
3.16-3 3.16.11 Power for CellTrips.....
3.16-4 3.16.12 Slaving of CAAS Alarm Systems.
3.16-4 l
10
SAR-PGDP August 27,1999 Rev. 41 TABLE OF CONTENTS P.agn List of Fieures (mnthued) 3.8-1 C-400 building process areas..................
........... 3.8-21 3.9-1 C-333 and C-337 electrical power diagram.............................. 3.9-31 3.9-2 C-331 and C-335 electrical power diagram......... ........... 3.9-3 2 3.9-3
Breaker-and-a-half" scheme..........................................
3.9-33 33-4 Sanitary and fire water system..........................................
3.9 3 4 3.9-5 High pressure fire water system...................
.. 3.9 35 3.9-6 Dry nir distribution system............................................. 3. 9-3 6 3.9-7 Nitrogen distribution system.......................................... 3.9-37 3.12-1 Simplified schematic of horn / beacon control circuit (Existing Configuration)....... 3.12-8 3.12-la Simplified schematic of horn / beacon control circuit (New Configuration).......... 3.12-8a
{
(
13 I
i
i SAR-PGDP May 31,1996 Rev. 3 O
Blank Page O
14
1 SAR-PGDP August 27,1999 Rey,41 Appendix A Applicable Codes, Standards, and Regulatory Guidance
- Ihis Appendix lists the various industry codes, standards, and regulatory guidance documents which l
have been referenced in certification correspondence. The extent to which PGDP satisfies each code, standard, and guidance document is identified below, subject to the completion of applicable actions required by the Compliance Plan.
1.0 American National Standards Institute (ANSI) 1.1 ANSI N14.1, Uranium Hexaflouride - Packaging for Transport,1990 Edition 1
PGDP satisfies the requirements of this standard, except for those portions superseded by Federal Regulations, with the following clarifications:
New cylinders and associated valves - Entire standard i
Cylinders and valves already owned and operated by PGDP that were not purchased to meet this edition of the standard - Satisfy only Sections 4, 5, 6.2.2 - 6.3.5, 7, and 8 of the standard.' Cylinders purchased prior to 1990 were manufactured to meet the version of the ANSI standard or specification in effect at the time of the placement of the purchase order.
I'N d
Section 5.2.1 - For U.S. Department of Transportation 7A Type A packaging, satisfy U.S.
Department of Energy (DOE) evaluation document DOE /RL-%-57, Revision 0, Volume 1, which' supersedes DOE /00053-H1.-
Tinning of cylinder valve and plug threads: ANSI N14.1 - 1990 requires the use of ASTM B32 50A, a 50/50 tin / lead solder alloy described in the 1976 and previous editions of the ASTM standard. Cylinder valve and plug threads are tinned with solder alloys meeting the requirements of ASTM B32. Tinning is performed with nominal 50% tin alloy or with a mixture of alloys with nominal tin content from 40% to 50%, with a lower limit of 46% tin in the mix.
Cylinder Valve Protectors (CVPs): The standard requires these devices to be fabricated from
' ASTM A285 Grade C or A516 steel. Likewise, the set screws are to be manufactured to specific requirements for each CVP. The PGDP CVPs are steel, similar in design to those specified in ANSI N14.1-1990, and meet the intent of this standard. Set screws that are employed in these CVPs are also steel and are manufactured in accordance with the ANSI i
N14.1-1990 design, a derivative of this design, or a grade 5 bolt.
See SAR Sections 3.7.1 and 4.3.1.5 and the basis statements for TSR Sections 2.1.4.8,2.2.4.6, and 2.3.4.16.
1.2 ANSI /ANS 2.8, Determining Design Basis Flooding at Power Reactor Sites,1981 Edition The extent to which PGDP satisfies the requirements of this standard will be determined as part of the SAR Upgrade activity.
x[]
For references to this standard, see SAR Section 2.4.3.
A-1
SAROGDP August 27,1999 Rev. 41 1.3 ANSI /ANS 3.1, Selection, Qualification, and Training of Personnel for Nuclear Power Plants,1987 Edition PGDP satisfies only the following section of this standard:
Section 4.3.3 - The qualifications of the Radiation Protection Manager identified in SAR Section 6.1 satisfy the requirements of this section of the standard.
1.4 ANSI /ANS 3.2, Administrative Controls and Quality Assurance for the Operational Phase of Nuclear Power Plants,1994 Edition The extent to which PGDP satisfies the requirements of this standard is outlined in SAR Section 6.11.1 and Appendix B to SAR Section 6.11.
1.5 ANSI /ANS 8.1, Nuclear Criticality Safety in Operations With Fissionable Materials Outside Reactors,1983 Edition PGDP satisfies the requirements of this standard.
For references to this standard, see SAR Sections 5.2.2.1, 5.2.2.3, 5.2.3.2, 5.2.4.1, and Table 6.9-1.
1.6 ANSI /ANS 8.3, Criticality Accident Alarm System,1986 Edition The recommendations of this standard were used as guidance only for the design of the CAAS.
PGDP satisfies the requirements of this standard with the following exceptions:
Section 4.4.1 - The CAAS alarm is not audible in all permit-required confined spaces and cell housings associated with cells that are runmng. A " buddy system" is used to ensure personnel working in these areas are notified of alarms in order to evacuate.
I Secdon 4.4.2 - An alarm signal with a complex sound wave or modulation is not provided.
j
\\
Section 4.5.3 - Emergency power supplies for AQ and NS alarm systems are not provided.
A battery backup serves as the backup power supply for the cluster ard local nitrogen horn j
(for the existing system). For the new system the local horns have been replaced by building j
horns which have battery backup power supplies.
)
Section 5.3 - The CAAS is not designed to withstr hi seismic stresses.
Section 7.2.2 - Instead of acquainting all employees with the alarm signal by actual demonstration at their work location, a recording of the alarm signal will be used to familiarize employees.
For references to this standard, see SAR Section 3.12.6, Section 2.5.1 of Appendix A to Chapter 4, and the basis statements for TSR Sections 2.1.4.5, 2.2.4.3, 2.3.4.7, 2.4.4.2 and 2.6.4.1.
1.7 ANSI /ANS 8.7 (N16.5), Guide for Nuclear Criticality Safety in the Storage of Fissile Material, 1975 Edition PGDP satisfies the requirements of this standard with the following exceptions / clarifications:
Section 4.2.6 - Fire protection systems are installed throughout the process buildings where flammable liquids are used in operating equipment. Individual cell housings do not contain fire protection systems.
A-2
r
- SAR-PGDP August 27,1999
./.
Rev.41
, 2.0 American Society of Mechanical Eiigl..we (ASME) 2.1 ASME NQA-1, Quality Assurance Program Requirements for Nuclear Facilities,1989 Edition PGDP satisfies the requimnents of this standard, includmg Basic and Supplementary Requirements, with exceptions and clarifications identified in the Quality Assurance Program Description. See also SAR Sections 6.6.13,6.8.1, and 6.8.2 and Section 7.5 of the Emergency Plan.
2.2 ASME Boiler and Pressure Vessel Code,1995 Edition PGDP satisfies the following sections of this code as clarified below:
Section VIII - PGDP satisifies the requirements of Section VIII for the edition in effect at the time of fabrication of the following pressure components and systems: freezer / sublimer, condenser /reboiler, accumulator, autoclave, cell coolant condenser, nitrogen system (relief devices only), air system and dryer, cell coolant pressure rehef, CAAS air accumulators, and l
UF, cylinders except that UF cylinders do not have pressure relief devices.
Section IX - PGDP satisifies the requirements of Section IX for the components identified above for Section VIII.
For references to this code, see SAR Sections 3.2.3, 3.2.5.8, 3.3.4.5.1, 3.6.7.7, 3.7.1, 4.3.3.1.2, O
4.3.4.1.2, Chapter 4 Appendix A Section 2.5.1.2, and the basis statements for TSR Sections 2.1, l
2.2,2.3, and 2.4.
3.0 National Fire Protection Association (NFPA) i 3.1 NFPA 10, Portable Fire Extinguishers,1989 Edition-As described in SAR Section 5.4.3, the requirements of this standard were used as guidance only in determimag the size, selection, and distribution of portable fire extinguishers. PGDP will satisfy the requimments of this standard for modifications to the plant except as documented and justified by the Authority Having Jurisdiction (AHJ).
For references to this standard, see SAR Sections 5.4.1 and 5.4.3.
3.2 NFPA 13, Sprinkler Systems,1989 Edition As described in SAR Section 5.4.1.1, the process buildings meet the definition of Ordinary Hazard Occupancies (Group 2) as stated in this standard and the fire protection system exceeds the sprinkler
' discharge of 0.15 gpm/sq. ft. for this type of occupancy. PGDP will satisfy the requirements of this standard for modifications to the plant except as documented and justified by the AHJ.
For references to this standard, see SAR Sections 3.3.5.12, 5.4.1, and 5.4.1.1.
A-5 l
SAR-PGDP April 15,1997 Rev. 8 3.3 NFPA 15, Water Spray Systems,1990 Edition l
PGDP will satisfy the requirements of this standard for modifications to the plant except as documented and justified by the AHJ.
l For references to this standard, see SAR Section 5.4.1.
l 3.4 NFPA 24, Private Fire Service Mains,1992 Edition l
l PGDP will satisfy the requirements of this standard for modifications to the plant except as l
documented and justified by the AHJ.
l l
For references to this standard, see SAR Section 5.4.1.
l l
3.5 NFPA 25, Inspection, Testing and Maintenance of Water-Based Fire Protection Systems,1995 l
Edition l
l The 90-second response time criteria for the C-300 fire alarm is consistent with the requirements l
of this standard. See the basis statements for TSR Sections 2.3.4.8 and 2.4.4.5.
j l
3.6 NFPA 30, Flammable Liquids,1990 Edition l
As described in SAR Section 5.4.1.1, the requirements of this standard are used as guidance only for procedures used to handle flammable liquids. PGDP will satisfy the requirements of this standard for modifications to the plant except as documented and justified by the AHJ.
For references to this standard and year, see SAR Sections 5.4.1 and 5.4.1.1.
3.7 NFPA 72, National Fire Alarm Code,19% Edition The 90-second response time criteria for the C-300 fire alarm is consistent with the requirements of this standard. See the basis statements for TSR Sections 2.3.4.8 and 2.4.4.5.
I 3.8 NFPA 101, Life Safety Code,1991 Edition PGDP uses the requirements of this standard as guidance only for the review of emergency egress paths.
For references to this standard, see SAR Section 5.4.1.2.
l l
3.9 NFPA 232 (and 232 AM), Standard for the Protection of Records,1986 Edition As described in SAR Section 6.10.1.8, there are several acceptable methods for the storage of permanent records. If the NFPA 232 (or 232 AM) method of storage in 2-hour-rated containers i
is used, any exceptions to this standard will be documented and justified by the AHJ.
)
A-6
)
i
m i
SAR-PGDP August 13, 1999 Rev.40 3.12.2.5 Emergency Communication System Personnel involved in the handling of plant emergencies use radio units with individual or combined access to the operations, maintenance, or security repeater networks. Key supervisory personnel, such as the shift superintendent, have access to radio units that operate on the three networks. Most f
emergency vehicles are equipped with security and operations network radio units since both networks are used during emergency situations.
Scanners are available to monitor local law enforcement networks. Radios permit emergency l
communication with the Kentucky State Police.
The plant is also a station point for NAWAS (Federal Emergency Management Agency's National Warning System). Telephones along with other necessary equipment for NAWAS are located in the
- C-200 and C-300 buildings.
3.12.3_ Public Address System The plant utilizes a Public Address System which provide voice communications to the plant site.
A Hi-Low tone on this system is used in an emergency to signal personnel to listen to the subsequent Public Address announcement.
All paging is initiated from the C-300 CCF and the C-200 Control Center and is distributed by the
_O transmission of audio and control voltage through underground and overhead cable. The C-200 system is a slave to the C-300 master control. These voltages are distributed to each building where they supply signals to drive a building amplifier and associated speakers. Some buildings have individual local public address systems with supervisory override from C-300. The C-720 building has four different local systems while the C-200, C-340, C-400, and C-410/420 buildings all have local systems.
3.12.4 Data Communications Several miscellaneous telecommunications systems are in use throughout the plant. These systems are operated for the transmission or reception of signals, writings, images, or sounds. These include systems such as facsimile trammiuion devices, data communications devices, cryptographic devices, the virtual address extend (VAX) system, intercom systems, and programmable calculators (to be used as computer terminals via telephone circuits).
In addition to these methods of data communication previously mentioned, a vacuum tube system is utilized between the ACR and their power supplying switchyard to provide rapid transport of permits.
The C-720 building also uses one of these systems between the stores and work order area.
3.12-3
SAR-PGDP August 27,1999 Rev. 41 3.12,5 Process Building Evacuation Alarm System The plant utilizes horns or howlers in the process buildings to signal building evacuation. The horns and howlers are also used to signal personnel where the Public Address System and Hi-Low tone may not be audible (such as the process buildings).
3.12.6.a Criticality Accident Alarm System (Existing Configuration) l The criticality ace dwt alarm system (CAAS) is designed to detect gamma radiation levels that would result from the minimum criticality accident of concern and to activate the building evacuation alarms and alarms in the Central Control Facility (CCF). The system consists of radiation instrument assemblies.
An instrument assembly consists of three individual instruments connected so that an alarm state on two of the three instruments in an assembly will cause a radiation alarm. The radiation assembly is referred to as a " cluster" while any one of the three instruments which compose the cluster is designated a
" detector module." The radiation alarms do not prevent a criticality. They do, however, mitigate the consequences to personnel in the immediate area by providing audible alarms which will warn personnel to evacuate the area immediately and prevent reentry into the area until an all-clear is given by the incident commander.
He clusters are installed in buildings containing special nuclear material except where a criticality safety analysis has been performed that demonstrates that a criticality could not occur. There are a total of 35 permanent clusters. Criteria for when these detector modules are required are established by the Nuclear Criticality Safety Section. Requirements as specified in American National Standards Institute standard ANSI /ANS-8.3 were used to determine the surveillance practices. Current cluster locations are listed in Table 3.12-1. Figure 3.12-1 shows a simplified schematic of the horn / beacon control circuit for air operated alarm horns.
Where possible, these detector locations provide for areas of overlapping coverage such that coverage is maintained even when a single cluster unit is unavailable. The TSRs for each facility specify the actions regmred when complete coverage is lost. These actions may include time requirements for repair of the lost clusters, use of a portable CAAS unit, shutdown of the affected area, or mitigative actions which reduce the potential for a criticality.
The portable CAAS units are similar in design and function to the permanent clusters 6 addition to being used when permanent clusters are inoperable, these portable units may be usd in situations where temporary conditions create the potential for a criticality, such as monitoring fissile. aste storage areas. Additionally, the C-720 facility was recently identified as requiring coverage whenever converter maintenance is performed and the portable unit will be used if necessary until a permanent cluster is installed.
A building which does not contain special nuclear material as previously described but would be affected by a criticality occurrmg in an alarmed building is provided with alarms which are slaved to the alarmed building.
3.12-4 4
)
j SAR-PGDP August 27,1999
- f. 3 Rev. 41 j
i 1
V When a cluster goes into alarm, it activates the building evacuation horn, the cluster's plant air or j
nitrogen evacuation horn (where applicable), the external red beacon lights, and the audible and visual
{
alarms on the master control console in the CCF, Building C-300.
Each cluster is designed to operate independently of the 120 VAC power supply for a minimum of four hours. The clusters consist of three detector modules which alarm when a gamma dose-rate of 10 milliroentgen per hour (mR/hr) above background is detected. Each module has an internally generated signal to maintain a constant operational check of the detection circuits. This " background" is adjusted to a predetermined value on the front panel meter. Any detected radiation will add to the meter reading.
The 10 mR/hr-type instrument consists of three detector modules, each module is identically calibrated to provide an output at a predetermined radiation dose-rate. The outputs of these modules are connected into a voting logic matrix such that at least two modules, or under some faulted conditions one module, must alarm to give a criticality incident alarm. The circuit of the detector module has been designed to provide instrument sensitivity to a preselected radiation dose-rate delivered within a short period of time, but insensitive to a radiation field below a predetermined threshold value. Therefore, the instrument is capable of detectmg a nuclear incident and providing an alarm to those locations which have received significant radiation dosages, but self-adjusts to compensate for minor fluctuations in background. The critical incident detector has been designed to exhibit the highest degree of reliability.
The alarm modules do not have external adjustments and cannot be used for quantitative measurements.
A feature has been incorporated to provide a trouble alarm on the C-300 radiation alarm console whenever any of the following occurs:
Line power failure
- -Module removal Cable separation C
IAss of nitrogen pressure (where applicable)
Increased or decreased manifold pressure (where applicable)
Loss of signal at a detector module Indication of radiation detection by only.Ong detector module External temperature below cluster's specified minimum operating temperature (where applicable) l W her t CAAS goes into alarm, associated building horns (air-powered and electronic) and warning lights ext:.n the building are energized automatically. Air-powered local horns are supplied by plant air with the aption of the AC and AD clusters in C-746-Q, which are completely nitrogen powered.
In the event of a loss of plant air, each local horn has a nitrogen backup system to sound the horns.
Nitrogen bottles are replaced when the pressure is less than 900 psig. A standard nitrogen bottle at a pressure of 900 psig will sound the horn for more than 120 seconds. Some evacuation horns are supplied from plant air and may be turned off from the CCF.
I Other evacuation horns are electronic (C-709, C-710, C-720, and C-720M). The #1, 2, and 3 portable clusters are also electronic. The electronic horns have a self-contained battery backup power supply. 'Ihe alarm instrumentation is designed to actuate at the 10-milliroentgen level, and provides an alarm indication in the C-300 CCF.
Slaved buildings are buildings located within the 12 Rad radius from a CAAS alarmed building or area and that are equipped with a plant air or nitrogen operated horn unit similar to the unit described above, or an electronic evacuation horn that produces a similar sound. Slaved building horns are located in Buildings C-709. C-310A, C-420, and C-720-M. Building C-709 is slaved from Building C-710; Building C-310A is slaved from Building C-310; Building C-420 is slaved from Building C-400; and j
Building C-720-M is slaved from Building C-409.
3.12-5 J
SAR-PGDP August 27,1999 Rev. 41 When a cluster enters an alarm condition, the evacuation and criticality alarm horn units in buildings slaved to that detector module are also activated.
As previously mentioned, the C-300 CCF radiation alarm console panel is designed to give alarm indications and locations. The panel displays a map with indicating lights showing the condition of the alarm system. Controls for resetting the alarm units, individual building alarm horn lockouts, and devices for remote sounding of the building alarm horns are part of the design.
If the detector modules are in alarm condition, the 10 mR/hr (red) light illuminates and a memory light (blue) locks in. After the incident commander has acknowledged the radiation alarm, the detector modules may be reset. Other building evacuation horns may be energized for complete personnel evacuation. The memory light must be reset with a key.
3.12.6.b Criticality Accident Alarm System (New Configuration)
The criticality accident alarm system (CAAS) is designed to detect gamma radiation levels that would result from the minimum criticality accident of concern and to activate the building evacuation alarms and alarms in the Central Control Facility (CCF). The system consists of radiation instrument assemblies.
An instnnnent assembly consists of three individual instruments connected so that an alarm state on two of the three instruments in an assembly will cause a radiation almn. The radiation assembly is referred to as a " cluster" while any one of the three instruments which compose the cluster is designated a
" detector module." The radiation alarms do not prevent a criticality. They do, however, mitigate the consequences to personnel in the immediate area by providing audible alarms which will warn personnel to evacuate the area immediately and prevent reentry into the area until an all-clear is given by the incident commander. Audibility is not provided for areas in permit-required confined spaces and cell housings associated with cells that are running. A
- buddy system" is used to ensure personnel working in these areas are notified of alarms in order to evacuate.
The clusters are installed in buildings containing special nuclear material except where a criticality safety analysis has been performed that demonstrates that a criticality could not occur. There are a total of 35 permanent clusters. Criteria for when these detector modules are required are established by the Nuclear Criticality Safety Section. Requirements as specified in American National Standards Institute standard ANSI /ANS-8.3 were used to determine the surveillance practices. Current cluster locations are listed in Table 3.12-1. Figure 3.12-la shows a simplified schematic of the horn /beacan control circuit for air operated alarm horns.
Where possible, these detector locations provide for areas of overlapping coverage such that coverage is maintained even when a single cluster unit is unavailable. The TSRs for each facility specify the actions required when complete coverage is lost. These actions may include time requirements for repair of the lost clusters, use of a portable CAAS unit, shutdown of the affected area, or mitigative actions which reduce the potential for a criticality.
The portable CAAS units are similar in design and function to the permanent clusters. In addition to being used when permanent clusters are inoperable, these portable units may be used in situations where temporary conditions create the potential for a criticality, such as monitoring fissile waste storage areas.
3.12-6
(
l
r SAR-PGDP August 27,1999 (O)
Rev. 41 A building which does not contain special nuclear material as previously described but would be affected by a criticality occurrmg in an alarmed building is provided with alarms which are slaved to the alarmed building.
When a cluster goes into alarm, it activates the building evacuation horns, the external red beacon lights, and the audible and visual alarms on the master control console in the CCF, Building C-300.
Each cluster is designed to operate independently of the 120 VAC power supply for a minimum of four hours. The clusters consist of three detector modules which alarm when a gamma dose-rate of 10 milliroentgen per hour (mR/hr) above background is detected. Each module has an internally generated signal to maintain a constant operational check of the detection circuits. This " background" is adjusted to a predetermined value on the front panel meter. Any detected radiation will add to the meter reading.
'Ihe 10 mR/hr-type instrument consists of three detector modules, each module is identically calibrated to provide an output at a predetennined radiation dose-rate. The outputs of these modules are connected into a voting logic matrix such that at least two modules, or under some faulted conditions one module, must alarm to give a criticality incident alarm. The circuit of the detector module has been designed to provide instrument sensitivity to a preselected radiation dose-rate delivered within a short period of time, but insensitive to a radiation field below a predetermined threshold value. Therefore, the mstmment is capable of detecung a nuclear incident and providing an alarm to those locations which have received significant radiation dosages, but self-adjusts to compensate for minor fluctuations in background. The criticality accident detector has been designed to exhibit the highest degree of O
reliability. The alarm modules do not have external adjustments and cannot be used for quantitative h
measurements. A feature has been incorporated to provide a trouble alarm on the C-300 radiation alarm console whenever any of the following occurs:
Line power failure Module removal Cable separation Loss of air accumulator supply pressure (where applicable)
Loss of signal at a detector module Indication of radiation detection by only om detector module Loss of power to horn circuits (where applicable)
External temperature below cluster's specified minimum operating temperature (where applicable)
When the CAAS goes into alarm, associated building horns (air-powered and electronic) and warning lights external to the building are energized automatically. Air-powered horns are supplied by the CAAS air accumulators The accumulators are air tanks which provide the needed air capacity to blow all of the horns to be supplied' for a minimum of two minutes. The accumulators are maintained at a pressure of approximately i
150 psig. The supply to the whistles is maintained at the whistle design pressure necessary to blow the horns. The accumulators are filled by an air compressor located inside the associated building. The accumulators are monitored for pressure such that the compressors automatically recharge at a certain pressure. At a lower pressure, an alarm is generated in the Central Control Facility (C-300). The air compressor installation is designed such that quick removal and replacement can be accomplished with
()
3.12-6a
SAR-PGDP August 27,1999 Rev. 41 a spare compressor should replacement become necessary. When CAAS surveillances or post-maintenance testing is performed it is necessary to sound all CAAS alarms in the affected area and ensure all horns are functional. This depletes the CAAS accumulators below the pressure necessary to blow the air whistles for two minutes. The time to recharge the accumulators above this pressure has been estimated at greater than five hours using the permanently installed compressors alone. To reduce this recovery time a temporary connection is installed to allow the connection of a portable air compressor with enough capacity to recharge the e.ccumulators in approximately one hour. This reduces CAAS outage time necessary to perform surveillances and post-maintenance testing.
In shop areas, offices, area control rooms, and other enclosed areas, electronic horns are installed.
These horns are actuated from the same relays that energize the air whistle solenoids. The power supply to the electronic horns is the same as that for the air whistle solenoids. These power supplies will be backed up by the cascade batteries or uninterruptable power supplies. The portable clusters also have electronic horns.
l Monitoring of the power to the whistle and horn circuits is provided which actuates a C-300 cluster trouble alarm if this power is interrupted.
Slaved buildings are buildings located within the 12 Rad radius from a CAAS alarmed building or area and that are equipped with an air operated horn unit similar to the unit described above, or an electronic evacuation horn that produces a similar sound. The slaved building horns are actuated by the cluster or clusters which provide detection coverage for that area.
O When a cluster enters an alarm condition, the evacuation and criticality alarm horn units in buildings slaved to that detector module are also activated.
As previously mentioned, the C-300 CCF tadiation alarm console panel is designed to give alarm indications and locations. The panel displays a map with indicating lights showing the condition of the alarm system. Controls for resetting the alarm units, individual building alarm horn lockouts, and devices for remote sounding of the building alarm horns are part of the design.
If the detector modules are in alarm condition, the 10 mR/hr (red) light illuminates and a memory light (blue) locks in. After the incident commander has acknowledged the radiation alarm, the detector modules may be reset. Other building evacuation horns may be energized for complete personnel evacuation. The memory light must be reset with a key.
3.12.7 Argon Gammagraph Radiation measurement systems consisting of sensitive argon gammagraphs, are also placed at strategic points in the plant. The gammagraph supplies a continuous record of the background gamma radiation and will assist the incident commander in determining conditions in the area immediately following a criticality incident. The argon gammagraph is a radiation rate measuring instrument which utilizes an ionization chamber to telemeter information continuously to recorders in the ACR and CCF radiation alarm consoles. This instrument will switch automatically in four ranges, and indicate the l
3.12-6b I
l
)
- SAR-PGDP August 27,1999 Rev. 41 ranges with colored lights both locally and at the C-300 CCF radiation alarm console. The argon
> gammagraphs are not ioentified as a TSR system since they only record a radiation or criticality incident.
3.12.8 References
- 1. K/PS-1056, First Article Evaluation Testing of the NRC Criticality Alarm Clusters, dated May 1985.
O 3.12-6c I
SAR-PGDP August 27,1999 Rev. 41 i
meage g
3.12-6d
F-I SAR PGDP August 27,1999 Rev,41 Table 3,12-1. Listing of cluster locations.
- q clusters Locauon C-310-H, Cell floor, cemral area, Col. D-11 G
Ground floor, loadmg room, Col. C-11Y C-310A slave Actuated from C-310 C-331 J.
Cell floor, Col. H-10 K'
Cell floor, Col. Y-10 L
Ground floor, atop surge drum room Col. W-16 Portable (when Ground floor, Col. S-30 installed)
C-333 Z,
Cell floor, Col. S-9Y AJ Ground floor, Col. MA-22 C-333A AA, 1 West, Col. MC-50 AB 1 East, Col. N-50 C-335 A,
Cell floor, Col. H-10
- B, Cell floor, Col. Y 10 -
- C, Ground floor, stop surge dnan room Col. X 16 AP Cell Floor, Col. J-21 Portable (when Ground floor, Col. S-30 installed)
C-337 T,
Cell Floor, Col. T-9Y U,
Cell Floor, Col. T-25Y V,
Cell Floor, Col. T-41Y W.
Cc!! Floor, Col. G-9Y O
X, Cell Floor, Col. G-41Y Y,
Ground Floor, Col. Ga-27 AK Cell Floor, Col. G-25Y C-337A N
Ground Floor, Col. N-51 l
C-360 R.
Central area, Col. E-3
-S South Wall, Col. AB-3 C-400 D.
Test loop area, Col. D-10 E
Spray booth area, Col. C-4 C-409 P.
Decontamination Booth Col. B-9 AE South Wall, Col. C-8 C-420 slave Actuated frosn C-400 C-709 slave Actuated from C-710 C-710 AM 1st Floot Hall, Col.1 3 AN ist Floor Hall, Col. G-3 AP Lab Room #80 AQ 1st Floor Hall, Col. C-5 AR ist Floor Hall, Col. C-8 C-720 AL Ground floor, Col. K-13 C-720-M '
slave Actuated from C-409
.C-746-Q AC, Center Wall, West AD Cemer Wall, East C-310 Argon Gammagraph Cell floor, central area, Col. D-11 Ground floor withdrawal room, Col. F-2 C-331 Argon Gammagraph Cell floor, control area, Col. W-17 C-335 Argon Gammagnph Cell floor, control area, Col. V-18 C-400 Argon Gamm= graph Central area, Col. C 7
.b
.\\
/
3.12-7 h
SAR-PGDP August 27,1999 Rev. 41 7_
10$
10$
IM I
DETECTOR DETECTOR DETECTOR
[ CLUSTER UNIT l
CHrfNEL CHANEL CHANEL i
i i
I LOGIC WHERE I
((y l
PUWT AIR AP LICABLE t__
____a VA-1 Id I
LEDD:
LOCAL HORN
-Ih I
(L) RADIATIM MRH CABIET CONTROL BOX t.__s LOCAL HORN (RASC) RADIATION MRM SYSU CONS 1E NITROGEN 120 VAC yA h ") H l EEf i
1*BLDGLIGHTSI Z8 RESET
- V Hj 7 CO$ECTIONFROM OTER CLUSTER UNITS i
N, 9m:
ggNe
~
4
, mC),
y j'l h
puTQc i
I "* PERMISSIVE S'CL fBR"l i
+48Vli
=0 i
3e c iUN* PERM.ON*
l l+48V
--o e )
I I H I
-f g,
l l
M V / $}- - - - -
HIN M
HORN " PERM. OFF" A
l C
'Xy J HORN CONTROL SWITCH NOTE: TITLES SHOWN IN "
" ARE LABELS VISIBLE ON THE PANELS OR COMPONENTS Figure 3.12-1. Simplified schematic of horn / beacon control circuit. (Existing Configuration) l 3.12-8
SAR-PGDP August 27,1999 t &
Rev. 41 l
L
%J vu met is uut is mut DETECTOR DE1ECTOR DETECTOR CHANNEL CHAWNEL CHAWNEL
.C CLUSTER uNf7 Lo mc ALARM MATRIK isovAC 3 suuwNo Ya ;
F 1
3 mEACOWs (LJ RADETION ALARM CAtlNET g
(RASC) RADETION ALARM LRIHTS system CONSOLE V h-Y But.Dede j
ELECTRONIC
\\
HORNS CONNECTION FROM q
ofHER CLUSTER uNrrs 12 v^c j
sun.otNO
/
\\H su vo'C
~
N s..
PREnsuRE
- "'* C 180 PSIO
,gy;
- HORN " PERM. ON" ACC LATORS i
-e (NASC)
+=vl n
--4
% HORMRM.0Fr= b HORN ET R
HORN CONTROL SWITCH NOTE: TITLES SHOWN Bd *
- ARE LABELS VISIBLE ON THE PANELS OR COMPOWENTS Figure 3.12-la. Simplified schematic of horn / beacon control circuit (New configuration) 3.12-8a
SAR-PGDP August 27,1999 0 Rev. 41 3.12-8b
SAR-PGDP August 27,1999 Rev.41 Boundary The system bou:xlaries include:
1.
UF, detector heads located at:
- a. the heated housings b piping trench
- c. feed piping along wall
- d. the jet station 2.
The associated alarms and alarm circuitry
. 3.15.1.1.6.a Criticality Accident Alarm System (Existing Configuration) l O Function The Criticality Accident Alarm System (CAAS) is used to detect the elevated levels of gamma p
radiation that result from the minimum criticality accident of concern and warn plant personnel in the
- event that a criticality accident occurs.
i See Section 3.12.6 for a description of this system.
Boundary The system boundaries for the CAAS cluster unit include:
1.
Gamma detector channel 2.
Cluster logic module 3.
Cluster housing The bounded components of the alarm horn include:
1.
Local hern 2.
Nitrogen regulator 3.
Air to nitrogen solenoid valves 4.
Pressure switches for the horn manifold and the nitrogen bottle l
3.15-5 J
SAR-PGDP August 27,1999 Rev. 41 5.
Piping from the nitrogen bottle and solenoid valve to the horn 6.
Backup battery for the cluster 7.
Trouble relays associated with loss of power and loss of a.ir/ nitrogen pressure 8.
Nitrogen supply The system boundaries for the Radiation Alarm Cabinet in each building include:
1.
Relay from the clusters 2.
Relay to actuate the building / slave lights and horns 3.
Plant air system, back to the isolation valves 4.
Building / slave lights and horns 5.
Power supply for the building / slave lights and horns (120 Volt), back to the first breaker The system boundaries for C-300 include:
1.
48 volt power supply from the radiation alarm annunciator cabinets (A and B) 2.
Loss of power relays 3.
Loss of power indication on the C-300 console 4.
Building horn control switch S.15.1.1.6.b Criticality Accident Alarm System (New Configuration)
O Function The Criticality Accident Alarm System (CAAS) is used to detect the elevated levels of gamma radiation that result from the minimum criticality accident of concern and warn plant personnel in the event that a criticality accident occurs.
See Section 3.12.6 for a description of this system.
Boundary The system boundaries for the CAAS cluster unit include:
1.
Gamma detector channel 3.15-6 1
1 i
. SAR-PGDP August 27,1999 Rev.41 i
2.
Cluster logic module
- 3.. Cluster housing 4.
Backup battery for the cluster 5.
Trouble relays associated with loss of power to radiation alarm clusters The system boundaries for the Radiation Alarm Cabinet and Building Horn Relay Cabinet in each building include:
1.
Relay from the clusters 2.
Relays to actuate the building / slave lights and horns 3.
Loss of horn power relay and indicator light 4.
Power supply for the building / slave lights and horns (120 Volt), back to the first breaker The system boundaries for the CAAS Air Accumulator System include:
[
1.
Air accumulators and relief valves on accumulators 2.
Air piping from accumulator to pressure regulators 3.
Accumulator low pressure switch, pressure indicator, and alarm 4.
Isolation and check valves in flow path between accumulators and pressure regulators The system boundaries for the building horns and lights includes:
1.
Building / slave air horns i
2.
Building / slave electronic horns 3.
Building / slave lights -
4.
Building / slave air horn solenoids 5.
Air piping between pressure regulators and building / slave air horn solenoids 6.
Air piping between air horn solenoids and building / slave air horns 7.
Pressure regulators 5
3.15-6a 1
J
SAR-PGDP August 27,1999 Rev. 41 The system boundaries for C-300 include:
1.
48 volt power supply from the radiation alarm annunciator cabinets (A and B) 2.
Loss of power relays 3.
Loss of power indication on the C-300 console 4.
Building horn control switch 3.15.1.1.6.1 Portable CAAS O Function For buildings that require permanent CAAS coverage, a portable CAAS can be used on a temporary basis until the permanent CAAS is installed. These ponable units can also be used when a permanent CAAS is out of service. The portable CAAS functions to detect the elevated levels of gamma radiation that result from the minimum criticality accident of concern and warn plant personnel in the event that a criticality accident occurs. These portable units are equipped with an electric horn. When used in this manner, the portable CAAS are connected to the building alarm system (the building lights and horns and the C-300 alarm).
O A portable CAAS may also be used for off normal conditions in areas where there is no requirement for permanent CAAS, but a temporary need exists for portable CAAS coverage until the conditions are returned to normal (e.g., a truck containing fissile material in an outdoor area). When used in this manner, the portable CAAS will not be tied to a permanent building alarm system, but the portable CAAS alarm will be audible in all areas requiring immediate evacuation.
See Section 3.12.6 for a description of this system.
3.15-6b
o SAR-PGDP April 15,1998 A
Rev. 24 b
6.
Air operated UF, vent valve 7.
Air operated R-114 bypass valve.
On the RCW loop, the boundary includes:
1.
Air operated pump flow control valve 2.
Air operated 3-way RCW valve l
3.
Air operated RCW flow control valve l
4.
Associated circuitry to position the valves.
[
Of these valves, only the R-Il4 by-pass valve f9s to the desired position.
3.15.1.2.4 Intermediate Gas Removal High Temperature Control System O Function
'Ihe IGR High Temperature Control System limits the trap temperature to prevent an ignition source for a destructive reaction.
See Section 3.3.6.7 for a description of this system.
Boundary The system boundary includes:
1.
Thermocouples 2.
Trip circuitry 3.
Air operated inlet and outlet block valves 4.
Air operated inlet flow control valves.
All of the valves fail closed upon loss of air, isolating the traps. In case of a power loss, the multipoint r:: corders will be disabled, and the inlet gas valves to the traps will automatically fail closed.
Since loss of air or power will isolate the traps, the support systems do not need to be bounded.
l 3.15-11 i
1 i
\\
SAR-PGDP August 27,1999 Rev. 41 3.15.1.2.5.a Criticality Accident Alarm System (Existing Configuration) l
]
O Function The Criticality Accident Alarm System (CAAS) is used to detect the elevated levels of gamma radiation that result form the minimum criticality accident of concern and warn plant personnel in the event that a criticality accident occurs.
See Section 3.12.6 for a description of this system.
Boundary The system boundaries for the CAAS cluster unit include:
1.
Gamma detector channel 2.
Cluster logic module 3.
Cluster housing.
The bounded components of the alarm horn include:
1.
Local horn O
2.
Nitrogen regulator 3.
Air to nitrogen solenoid valves
)
4.
Pressure switches for the horn manifold and the nitrogen bottle 5.
Piping from the nitrogen bottle and sohnoid valve to the horn 6.
Backup battery for the cluster 7.
Trouble relays associated with loss of power and loss of air / nitrogen pressure 8.
Nitrogen supply The system boundaries for the Radiation Alarm Cabinet in each building include:
1.
Relay from the clusters 2.
Relay to actuate the building / slave lights and horns.
3.
Plant air system, back to the isolation valves 4.
Building / slave lights and horns 3.15-12
o SAR-PGDP August 27,1999
- /'
. Rev. 41
\\
5.
Power supply for the building / slave lights and horns (120 Volt), back to the first breaker.
The system boundaries for C-300 include:
1.
48 volt power supply from the radiation alarm annunciator cabinets (A and B) 1 2.
Ims of power relays J
f 3.
Ims of power indication on the C-300 console
' 4.
Building horn control switch.
3.15.1.2.5.b Criticality Accident Alarm System (New Configuration)
O Function The Criticality Accident Alarm System (CAAS) is used to detect the elevated levels of gamma radiation that result form the minimum criticality accident of concern and warn plant personnel in the event that a criticality accident occurs.
See Section 3.12.6 for a description of this system.
O
.o.
1f.c system boundaries for the CAAS cluster unit include:
1.
Gamma detecar channel 2.
Cluster logic module 3.
Cluster housing.
4.
Backup battery for the cluster 5.
Trouble relays associated with loss of power to radiation alarm clusters The system boundaries for the Radiation Alarm Cabinet and Building Horn Relay Cabinet in each building include:
1.
Relay from the clusters 2.
Relays to actuate the building / slave lights and horns 3.
Loss of horn power relay and indicator light 3.15-13
SAR-PGDP August 27,1999 Rev.41 4.
Power supply for the building / slave lights and horns (120 Volt), back to the first breaker I
The system boundaries for the CAAS Air Accumulator System include:
1.
Air accumulators and re.2f valves on accumulators 2.
Air piping from accumulator to pressure regulators 3.
Accumulator low pressure switch, pressure indicator, and alarm 4.
Isolation and check valves in flow p.; cetween accumulators and pressure regulators The system boundaries for the building horns and lights includes:
1.
Building / slave air horns 2.
Building / slave electronic horns 3.
Building / slave lights 4.
Building / slave air horn solenoids 5.
Air piping between pressure regulators and building / slave air horn solenoids 6.
Air piping between air horn solenoids and building / slave air horns 7.
Pressure regulators The system boundaries for C-300 include:
1.
48 volt power supply from the radiation alarm annunciator cabinets (A and B) 2.
Loss of power relays 3.
Loss of power indication on the C-300 console 4.
Building horn control switch.
3.15.1'.2.S.1 Portable CAAS O Function For buildings that require permanent CAAS coverage, a portable CAAS can be used on a temporary basis until the permanent CAAS is installed. These portable units can also be used when a permanent
{
G]
3.15-13a i
o
r SAR-PGDP August 27,1999
/~}
' Rev. 41 a
CAAS is out of service. The portable CAAS functions to detect the elevated levels of gamma radiation that result from the minimum criticality accident of concern and warn plant personnel in the event that a criticality accident occurs. These portable units are equipped with an electric horn. When used in this manner, the portable CAAS are connected to the building alarm system (the building lights and horns and the C-300 alarm).
A portable CAAS may also be used for off normal conditions in areas where there is no requirement for a permanent CAAS, but a temporary need exists for portable CAAS coverage (e.g., a truck containing fissile material in an outdoor area). When used in this manner, the portable CAAS will not be tied to a permanent building alarm system, but the portable CAAS alarm will be audible in all areas requiring immediate evacuation.
See Section 3.12.6 for a description of this system.
Boundary The system boundaries for the portable CAAS unit include:
1.
Gamma detector channel 2.
Cluster logic module 3.
Cluster housing 4.
Associated circuitry i
5.
Local electric horn 6.-
Backup battery for the cluster and horn 7.
Connecting cable to connect to the building system 4
3.15-13b
SAR-PGDP May 31,1996 Rev. 3 3.15.1.3 Withdrawal Facilities Q systems for the C-310 and C-315 withdrawal facilities are listed below.
3.15.1.3.1 UF, Release Detection System - Normeter Pump O Function The UF. release detection system provi6 :oe means to detect a UF, release. The system function is to automatically shutdown the Normetex purrp and close the discharge valve to decrease the system pressure and end the release.
See Section 3.5.2.1 for a description of this system.
Boundary The system boundaries include:
1.
UF, detector heads located above the Normetex pump discharge valve, expansion joint, pump housing, pump flange 2.
Associated circuitry to trip the pump and close the discharge valve. The associated circuitry includes a programmable logic controller (and software) that determines whether pump trip is required and provides the trip signal.
3.
Alarms and associated alarm circuitry.
3.15.1.3.2 UF, Release Detection System - Withdrawal Station Low Voltage System O Function The UF. release detection system provides the means to detect a UF. release. The system function is to detect a UF. release, and to automatically isolate the withdrawal position, limiting the release quantity.
See Sections 3.4.7 and 3.5.7 for a description of this system.
Boundary The system boundary includes:
1.
UF, detector heads located above each withdrawal position 2.
Liquid drain line block valves, air operated 3.
The cylinder valve 3.15-14
e SAR-PGDP August 27,1999
/~T Rev.41 U.
Boundary i
The system boundary includes:
1.
Differential pressure sensor i
2.
3.
Associated interlocks on the air supply to the scale cart.
The scale carts fail safe upon loss of air.
3.15.1.3.7.a Criticality Accident Alarm System (C-310) (Existing Configuration) l O Function The Criticality Accident Alarm System (CAAS) is used p detect the elevated levels of gamma radiation that result from the minimum criticality accident of concern and warn plant personnel in the event that a criticality accident occurs.
See Section 3.12.6 for a description of this system.
g 50undary The system boundaries for the CAAS cluster unit include:
1.
Gamma detector channel 2.
Cluster logic module 3.
Cluster housing.
.,8 The bounded components of the alarm horn include:
I 1.
Local horn 2.
Nitrogen regulator 3.
Air to nitrogen solenoid valves 4.
Pressure switches for the horn manifold and the nitrogen bottle 5.
Piping from the nitrogen bottle and solenoid valve to the horn 6,
Backup battery for the cluster b
3.15-17
SAR-PGDP August 27,1999 Rev. 41 7.
Trouble relays associated with loss of power and loss of air / nitrogen pressure I
8.
Nitrogen supply The system boundaries for the Radiation Alarm Cabinet in each building include:
1.
Relay from the clusters 2.
Relay to actuate the building / slave lights and horns.
3.
Plant air system, back to the isolation valves 4.
Building / slave lights and horns 5.
Power supply for the building / slave lights and horns (120 Volt), back to the first breaker.
The system boundaries for C-300 include:
1.
48 volt power supply from the radiation alarm annunciator cabinets (A and B) 2.
Loss of power relays 3.
Loss of power indication on the C-300 console 4.
Building horn control switch.
3.15.1.3.7.b Criticality Accident Alarm System (C-310) (New Configuration)
O Function The Criticality Accident Alarm System (CAAS) is used to detect the elevated levels of aamma radiation that result from the minimum criticality accident of concern and warn plant personnel in the event that a criticality accident occurs.
See Section 3.12.6 for a description of this system.
Boundarv The system boundaries for the CAAS cluster unit include:
1.
Gamma detector channel 2.
Cluster logic module 3.
Cluster housing.
3.15-18
t SAR-PGDP August 27,1999 Rev.' 41 4.
Backup battery for'the cluster 5.
Trouble relays associated with loss of power to radiation alarm clusters The system boundaries for the Radiation Alarm Cabinet and Building Horn Relay Cabinet in each building include:
1.
Relay from the clusters -
2.
Relays to actuate the building / slave lights and horns
' 3.
Loss of horn power relay and indicator light 4.'
Power supply for the building / slave lights'and horns (120 Volt), back to the first breaker The system boundaries for the CAAS Air Accumulator System include:
- 1. - Air accumulators and relief valves on accumulators
- 2. Lair piping from accumulator to pressure regulators 3.-
Accumulator low pressure switch, pressure indicator, and alarm
^4.
Isolation and check valves in flow path between accumulators and pressure regulators f
The system boundaries for the building horns and lights includes:
1.
Building / slave air horns 2.'
Building / slave electronic horns
' 3.' 1 Building / slave lights 4.
Building / slave air horn solenoids
- 5. ' Air piping between pressure regulators and building / slave air horn solenoids
- 6. ' Air piping between air horn solenoids and building / slave air horns 7.'
Pressure regulators.
The system boundaries for C-300 include:
1.
48 volt power supply from the radiation alarm annunciator cabinets (A and B) 3.15-18a i
SAR-PGDP August 27,1999 Rev.41 2.
Loss of power relays 3.
Loss of power indication on the C-300 console 4.
Building horn control switch.
3.15.1.3.7.1 Portable CAAS Q Function For buildings that require permanent CAAS coverage, a portable CAAS can be used on a temporary basis until the permanent CAAS is installed. These ponable units can also be used when a permanent CAAS is out of service. The ponable CAAS functions to detect the elevated levels of gamma radiation that result from the minimum criticality accident of concern and warn plant personnel in the event that a criticality accident occurs. These ponable units are equipped with an electric horn. When used in this manner, the ponable CAAS are connected to the building alarm system (the building lights and horns and the C-300 alarm).
A portable CAAS may also be used for off normal conditions in areas where there is no requirement for a permanent CAAS, but a temporary need exists for portable CAAS coverage (e.g., a truck containing fissile material in an outdoor area). When used in this manner, the portable CAAS will not be tied to a permanent building alarm system, but the ponable CAAS alarm will be audible in all areas requiring immediate evacuation.
See Section 3.12.6 for a description of this system.
Boundary The system boundaries for the ponable CAAS unit include:
3.15-18b i
y SAR-PGDP August 27,1999
)
Rev. 41 (V
3.
Associated interlocks on the air supply to the scale cart.
The scale carts fail safe upon loss of air.
3.15.1.4.9.a Criticality Accident Alarm System (Existing Configuration) l 1
O Function The Criticality Accident Alarm System (CAAS) is used to detect the elevated levels of gamma radiation that result from the minimum criticality accident of concern and warn plant personnel in the '
event that a criticality accident occurs.
See Section 3.12.6 for a description of this system.
Boundary The system boundaries for the CAAS cluster unit include:
1.
Gamma detector channel 2.
Cluster logic module j
3.
Cluster housing The bounded components of the alarm horn include:
1.
Local horn 1
2.
Nitrogen regulator 3.
Air to nitrogen solenoid valves 4.
Pressure switches for the horn manifold and the nitrogen bottle f
5.
Piping from the nitrogen bottle and solenoid valve to the horn 6.
Backup battery for the cluster 7.
Trouble relays associated with loss of power and loss of air / nitrogen pressure 8.
Nitrogen supply The system boundaries for the Radiation Alarm Cabinet in each building include:
1.
Relay from the clusters O().
3.15-27
r SAR.PGDP August 27,1999 Rev. 41
)
2.
Relay to actuate the building / slave lights and horns j
j 3.
Plant air system, back to the isolation valves
)
4.
Building / slave lights and horns j
5.
Power supply for the building / slave lights and horns (120 Volt), back to the first breaker d
The system boundaries for C-300 include:
1.
48 volt power supply from the radiation alarm annunciator cabinets (A and B) 2.
Loss of power relays 3.
Loss of power indication on the C-300 console 4.
Building horn control switch J
3.15.1.4.9.b Criticality Accident Alarm System (New Configuration)
O Function The Criticality Accident Alarm System (CAAS) is used to detect the elevated levels of gamma radiation that result from the minimum criticality accident of concern and warn plant personnel in the event that a criticality accident occurs.
See Section 3.12.6 for a description of this system.
Boundary The system boundaries for the CAAS cluster unit include:
1.
Gamma detector channel 2.
Cluster logic module 3.
Cluster housing 4.
Backup battery for the cluster 5.
Trouble relays associated with loss of power to radiation alarm clusters The system boundaries for the Radiation Alarm Cabinet and Building Horn Relay Cabinet in each building include:
3.15-28
SAR-PGDP August 27,1999 O
l.
Relay from the clusters 2.
Relays to actuate the building / slave lights and horns t
' 3.
Loss of horn power relay and indicator light 4.'
Power supply for the building / slave lights and horns (120 Volt), back to the first breaker The system boundaries for the CAAS Air Accumulator System include:
1.
Air accumulators and relief valves on accumulators 2.
Air piping from accumulator to pressure regulators 3.
Accumulator low pressure switch, pressure indicator, and alarm 4.
Isolation and check valves in flow path between accumulators and pressure regulators The system boundaries for the building horns and lights includes:
1.
Building / slave air horns 2.
Building / slave electronic horns 3.
Building / slave lights
~ 4. ~ Building / stave air horn solenoids 5.
Air piping between pressure regulators and building / slave air horn solenoids 6.
Air piping between air horn solenoids and building / slave air horns 7.
Pressure regulators The system boundaries for C-300 include:
1, 48 volt power supply from the radiation alarm annunciator cabinets (A and B)
- 2. ' Lbss of power relays 3.
Loss of power indication on the C-300 console 4.
Building horn control switch 3.15-28a -
SAR-PGDP A en 27,1999 Rev. 41 3.15.1.4.9.1 Portable CAAS O Function For buildings that require permanent CAAS coverage, a portable CAAS can be use( on a temporary basis until the permanent CAAS is installed. These portable units can also be used when a permanent CAAS is out of service. The portable CAAS functions to detect the elevated levels of gamma radiation that result from the minimum criticality accident of concern and warn plant personnel in the event that a criticality accident occurs. These portable units are equipped with an electric horn. When used in this manner, the portable CAAS are connected to the building alarm system (the building lights and horns and the C-300 alarm).
A portable CAAS may also be used for off normal conditions in areas where there is no requirement for a permanent CAAS, but a temporary need exists for portable CAAS coverage (e.g., a truck containmg fissile material in an outdoor area). When used in this manner, the portable CAAS will not be tied to a permanent building alarm system, but the portable CAAS alarm will be audible in all areas requiring immediate evacuation.
See Section 3.12.6 for a description of this system.
Boundary The system boundaries for the portable CAAS unit include:
1.
Gamma detector channel 2.
Cluster logic module 3.
Cluster housing 4.
Associated circuitry 3.15-28b
F SAR-PGDP April 14,1999 Rev.38 4.
Interlock switch that prevents scale cart movement when the levelator is not in the appropriate position l
The system boundary for the elevator includes:
1.
Hydraulic lift 2.
Hydraulics 3.
Key lock for the elevator, the interlock on the elevator doors to prevent opening when the elevator floor is not level with the floor 4.
Deadman switch to prevent scale cart movement.
3.15.1.4.14 UF. Cylinders O Function Cylinders utilized to contain UF. have been designed, built and tested to ANSI N14.1 and a prescribed minimum volume specified in USEC-651. This ensures safe containment of UF. during transport, sampling, feedmg, filling, and storage and to prevent a release of liquid UF.. The issue of fail safe is not applicable to this system.
The 2S and 1-kg cylinders are not included as Q due to their small size. These cylinders are classified as AQ.
See Section 3.7.1 for a description of this system.
Boundary The system boundary includes:
1.
Cylinder 2.
Cylinder valve 3.
Cylinder plug The cylinder valve protector has been identified as AQ.
3.15-31 L
SAR-PGDP August 27,1999 Rev.41 3.15.1.4.15 UF, Pigtails O Function UF. cylinder pigtails are designed to safely transfer liquid UF.from a parent cylinder to a sample manifold or a daughter cylinder during transfer operations.
l See Section 3.6.1 for a description of this system.
Boundary The system boundary includes:
1.
Pigtail assembly, including the tubing, adapter, and gaskets.
3.15.1.4.16 C-360 Liquid UF, Transfer Piping and Vnives O Function The function of the piping and valves is to safely contain, sample, and transfer liquid UF..
See Section 3.6.1 for a description of this system.
Boundary The boundary includes:
1.
Transfer lines from the pigtail on the parent cylinder through the drain manifold to the pigtail for 4
the daughter cylinder, the header, and sampling lines to the sample cabinet.
]
i 2.
Isolation valves, evacuation isolation valves, and transfer line isolation valves.
3.15.1.5 Chemical Facilities Q systems in the decontamination systems are listed.
3.15.1.5.1.a Criticality Accident Alarm Systems (Existing Configuration) l O Function The Criticality Accident Alarm System (CAAS) is used to detect the elevated levels of gamma radiation that result from the minimum criticality accident of concern and warn plant personnel in the event that a criticality accident occurs.
See Section 3.12.6 for a description of this system.
3.15-32 L
l SAR-PGDP May 31,1996 3
.Rev.3 Boundary The system boundaries for the CAAS cluster unit include:
1.
Gamma detector channel 2.
Cluster logic module 3.
Cluster housing The bounded components of the alarm horn include:
1.
Local horn 2.
Nitrogen regulator
- 3.
Air to nitrogen solenoid valves 4.
Pressure switches for the horn manifold and the nitrogen bottle 4
5.
Piping from the nitrogen bottle and solenoid to the horn 6.
Backup battery for the cluster 7.
Trouble relays associated with loss of power and loss of air / nitrogen pressure 8.
Nitrogen supply The system boundaries for the Radiation Alarm Cabinet in each building include:
1.
Relay from the clusters
- 2.
Relay to actuate the building / slave lights and horns 3.
Plant air system, back to the isolation valves 4.
Building / slave lights and horns
- 5.
Power supply for the building / slave lights and horns (120 Volt), back to the first breaker The system boundaries for C-300 include:
1.
48 volt power supply from the radiation alarm annunciator cabinets (A and B) 2.=
Loss of power relays f~
3.15-33
SAR-PGDP August 27,1999 Rev. 41 3.
Loss of power indication on the C-300 console 4.
Building horn control switch 3.15.1.5.1.b Criticality Accident Alarm Systems (New Configuration)
O Function The Criticality Accident Alarm System (CAAS) is used to detect the elevated levels of gamma radiation that result from the minimum criticality accident of concern and warn plant personnel in the event that a criticality accident occurs.
See Section 3.12.6 for a description of this system.
Boundary The system bour.daries for the CAAS cluster unit include:
1.
Gamma detector channel 2.
Cluster logic module 3.
Cluster housing 4.
Backup battery for the cluster 5.
Trouble relays associated with loss of power to radiation alarm clusters The system boundaries for the Radiation Alarm Cabinet and Building Horn Relay Cabinet in each building include:
1.
Relay from the clusters 2.
Relays to actuate the building / slave lights and horns 3.
Loss of horn power relay and indicator light 4.
Power supply for the building / slave lights and horns (120 Volt), back to the first breaker
'The system boundaries for the CAAS Air Accumulator System include:
1.
Air accumulators and relief valves on accumulators 2.
Air piping from accumulator to pressure regulators 3.15-34
7 SAR-PGDP August 27,1999 O
Rev. 41 3.
Accumulator low pressure switch, pressure indicator, and alarm 4.
Isolation and check valves in flow path between accumulators and pressure regulators The system boundaries for the building horns and lights includes:
1.
Building / slave air horns 2.
Building / slave electronic horns 3.
Building / slave lights 4.
Building / slave air horn solenoids 5.
Air piping between pressure regulators and building / slave air horn solenoids 6.
Air piping between air horn solenoids and building / slave air horns 7.
Pressure regulators The system boundaries for C-300 include:
1.
48 volt power supply from the radiation alarm annunciator cabinets (A and B) 2.
Loss of power relays 3.
Loss of power indication on the C-300 console 4.
Building horn control switch 3.15.1.5.1.1 Portable CAAS O Function For buildings that require permanent CAAS coverage, a portable CAAS can be used on a temporary basis until the permanent CAAS is installed. These portable units can also be used when a permanent CAAS is out of service. The portable CAAS functions to detect the elevated levels of gamma radiation that result from the minimum criticality accident of concern and warn plant personnel in the event that a criticality accident occurs. These portable units are equipped with an electric horn. When used id this manner, the portable CAAS are connected to the building alarm system (the building lights and horns and the C-300 alarm).
A portable CAAS may also be used for off normal conditions in areas where there is no requirement for a permanent CAAS, but a temporary need exists for portable CAAS coverage (e.g., a tmck contaming fissile material in an outdoor area). When used in this manner, the portable CAAS will OQ 3.15-34a
SAR-PGDP August 27,1999 Rev. 41 not be tied to a permanent building alarm system, but the portable CAAS alarm will be audible in all areas requiring immediate evacuation.
See Section 3.12.6 for a description of this system.
Boundary The system boundaries for the portable CAAS unit include:
1.
Gamma detector channel 2.
Cluster logic module 3.
Cluster housing 4.
Associated circuitry 5.
Local electric horn 6.
Backup battery for the cluster and horn 7.
Connecting cable to connect to the building system 3.15.1.6 Waste Management Q systems in radioactive waste management activities are listed.
3.15-34b
SAR-PGDP August 27,1999 f]
Rev. 41 V
3.15.1.6.1.a Criticality Accident Alarm Systems (Existing Configuration) l O Function The Criticality Accident Alarm System (CAAS) is used to detect the elevated levels of gamma radiation that result from the minimum criticality accident of concern and warn plant personnel in the event that a criticality accident occurs.
See Section 3.12.6 for a description of this system.
Boundarv The system boundaries for the CAAS cluster unit include:
1.
Gamma detector channel 2.
Cluster logic module 3.
Cluster housing The bounded components of the alarm horn include:
(
1.
Local horn 2.
Nitrogen regulator 3.
Air to nitrogen solenoid valves 4.
Pressure switches for the horn manifold and the nitrogen bottle 5.
Piping from the nitrogen bottle and solenoid valve to the horn 6.
Backup battery for the cluster 7.
Trouble relays associated with loss of power and loss of air / nitrogen pressure 1
8.
Nitrogen supply The system boundaries for the Radiation Alarm Cabinet in each building include:
1.
Relay from the clusters 2.
Relay to actuate the building / slave lights and horns 3.
Plant air system, back to the isolation valves A
t
)
3.15-35 l
J
SAR-PGDP August 27,1999 Rev. 41 4.
Building / slave lights and horns 5.
Power supply for the building / slave lights and horns (120 Volt), back to the first breaker The system boundaries for C-300 include:
1.
48 volt power supply from the radiation alarm annunciator cabinets (A and B) 2.
Loss of power relays 3.
Loss of power indication on the C-300 console 4.
Building horn control switch.
3.15.1.6.1.b Criticality Accident Alarm Systems (New Configuration)
O Function The Criticality Accident Alarm System (CAAS) is used to detect the elevated levels of gamma radiation that result from the minimum criticality accident of concern and warn plant personnel in the event that a criticality accident occurs.
See Section 3.12.6 for a description of this system.
Boundary The system boundaries for the CAAS cluster unit include:
1.
Gamma detector channel 2.
Cluster logic module 3.
Cluster housing 4.
Backup battery for the cluster 5.
Trouble relays associated with loss of power to radiation alarm clusters The system boundaries for the Radiation Alarm Cabinet and Building Horn Relay Cabinet in each
' building include:
1.
Relay from the clusters 2.
Relays to actuate the building / slave lights and horns 3.15-36
U
- SAR-PGDP August 27,1999 O
Rev.41 V
3.
. Loss of horn power relay and indicator light 4.
Power supply for the building / slave lights and horns (120 Volt), back to the first breaker The system boundaries for the building horns and lights includes:
1.
Building / slave electronic horns 2.
Building / slave lights The system boundaries for C-300 include:
1.
48 volt power supply from the radiation alarm annunciator cabinets (A and B) 2.
Loss of power relays 3.
Loss of power indication on the C-300 console 4.
Building horn control switch.
3.15.1.6.1.1 Portable CAAS O Function For buildings that require permanent CAAS coverage, a portable CAAS can be used on a temporary basis until the permanent CAAS is installed. These portable units can also be used when a permanent CAAS is out of service. The ponable CAAS functions to detect the elevated levels of gamma radiation that result from the minimum criticality accident of concern and warr plant personnel in the event that a criticality accident occurs. These ponable units are equipped with an electric horn. When used in this manner, the portable CAAS are connected to the building alarm system (the building lights and horns and the C-300 alarm).
A ponable CAAS may also be used for off normal conditions in areas where there is no requirement for a permanent CAAS, but a temporary need exists for portable CAAS coverage (e.g., a i
truck c ** g fissile matenalin an outdoor area). When used in this manner, the portable CAAS will not be tied to a permanent building alarm system, but the portable CAAS alarm will be audible in all areas requiring immediate evacuation.
See Section 3.12.6 for a description of this system.
Boundary The system boundaries for the portable CAAS unit include:
1 1.
Gamma detector channel 3.15-36a j
i i
i i
SAR-PGDP August 27,1999 Rev.41 2.
Cluster logic module 3.
Cluster housing 4.
Associated circuitry S.
Local electric horn 6.
Backup battery for the cluster and horn 7.
Connecting cable to connect to the building system O
i I
I i
1 l
j
SAR-PGDP Chapter 4, Appendix A August 27,1999 Rev.41'.
Table 1.1-1. Plant areas affected by HAUP (excluding CAAS)
Building Description -
Physically Operationally No.
affected affected C-310.
Purge and Product Building Yes Yes C-310-A Product WithdrawalBuilding No Yes C-331 Process Building -
Yes Yes C-333 Process Building Yes Yes C-333-A Feed Vaporization Facility No Yes C-335 Process Buing Yes Yes C-337 Process Building Yes Yes C-337-A-Feed Vaporization Facility No Yes C-360' TollTransfer Facility Yes Yes C-400 D-*==ia=+im/ Cleaning Facility Yes Yes C-409 Stabilization Building (New Yes Yes Decontanunation Building)
C-710 Technical Services Building Yes Yes C-720 Maintenance and Stores Building No Yes C-720-C Co rerter Repair Shop No Yes C-728 Ma ior Cleaning Facility No Yes C-745 Pri duct Cylinder Storage Yards (all)
No Yes C-746-E Sci ip Metal Storage Yard No Yes
(
C-746-0 UF. Dnun Storage Building Yes Yes Table 1.1-2. Plant at eas associated with changes in CAAS (Existing Con 6guration) l Building No.
Description C-310 Product;VithdrawalBuilding C-331 Process Building C-333-Process Building C-333-A UF. Feed Facility -
C-335 Process Buihg C-337 Process Building C-337-A UF. Feed Facility C-360 -
TollTransfer and Sampling Building C-400 Decontamination / Cleaning Facility C-409 Stabilization Building (New D-*==ination Building)
C-710 TechnicalSenices Building C-720~
Maintenance and Stores Building C-720-C Converter Repair Shop C-728 Motor Cleaning Facility C-746-Q UF, Drum Storage Building 1-3
l 1
SAR-PGDP Chapter 4, Appendix A August 27,1999 Rev.41 Table 1.1-2a. Plant areas associated with changes in CAAS (New Configuration) l Building No.
Description l
C-310 Product Withdrawal Buildmg C-331 Process Building C-333 Process Building C-333-A UF, Feed Facility C-335 Process Building C-337 Process Building C-337-A UF, Feed Facility C-360 Toll Transfer and Sampling Building C-400 Decontamination / Cleaning Facility C-409 Stabilization Building (New Decontanunation Building)
C-331/335 Tie Line UF, Tie Line C-710 Technical Services Building C-720 Maintenance and Stores Building C-720-C Converter Repair Shop C-728 Motor Cleaning Facility C-337/360 Tie Line UF, Tie Line C-746-Q UF, Drum Storage Building O
1 O
l-4 U
SAR PGDP Chapter 4, Appendix A August 27,1999 Rev.41 2.5 INSTRUMENTATION AND CONTROL SYSTEMS / FEATURES 2.5.1 Criticality Accident Alarm System The Criticality Accident Alarm System (CAAS) is used for warning plant personnel of a criticality incident. The system is designed to detect gamma radiation and provide a distinctive, audible signal that will aleit personnel to evacuate the areas that are potentially affected.
> A block diagram of the overall system configuration is depicted in Fig. 2.5-1. In addition to the devices described in the figure, one other type of detector is associated with the system. This detector is identified
- as the argon gammagraph detector. This detector and its logic was not changed or affected by the changes for the HAUP and will not be discussed. For more information on these desices and their functions, refer to Sect. 3.12.7 of the PGDP SAR.
3 The CAAS was significantly affected by the HAUP due to the additional areas requiring criticality alann coverage. The entire system will be described and resiewed for acceptability.
2.5.1.1 Principal Design Basis and Criteria The primary input (i.e., pnncipal design criteria) for the CAAS is ANSI /ANS 8.3. The following design criteria support the present bases for CAAS ai PODP.
2.5.1.1.1 Text Deleted
- 2.5.1.1.2 ANSUANS 8.3 1.
Gamma radiation detectors shall be capable of detectmg a criticality that produces an absorbed dose in free air of 20 rads of combined neutron and gamma radiation at an unshielded distance of 2 m from the fissionable material within 60 s==k Areas where this requirement is not met must have %*
-justification for not providing alarm coverage. It should be noted that this req 6ement is not applicable to areas 9,' "g materialless than I wt % 2"U.
. 2.
The system shall automatically initiate an evacuation alarm signal within one half second of the alarm setpoint being exceeded The building evacuation alarm system shall be capable of being metally activated from a central remote location.
- 3. - Text Deleted I
4.
The system shall remam in an alarm condition after initiation regardless of radiation levels returmng to l
normal until a manual reset of the alarm has been accomplished. Reset capability shall be limited in access to preclude inadvertent reset and shall be located outside the area to be evacuated.
5.
Process areas in which activities will continue during a power outage shall have emergency power supplies for alarm systems or such activities shall be monitored continuously with portable instruments.
- 6. _ The system shall be designed to preclude inadvertent initiation signals to the extent practical to proside system credibility.
2-5 y
SAR-PGDP Chapter 4, Appendix A August 27,1999 Rev.41 7.
The system shall be designed to provide an indication of system malfunctions for alerting personnel of maintenance requirements.
8.
A means shall be provided to test the response and performance of the system (excluding the sounding of the alanu) without causing an evacuation alarm. In addition, the portions of the system not affected by the test shall still remain functional.
)
9.
The system shall provide sufficient information to the Central Control Facility (CCF) to allow j
implementation of site emergency response procedures for criticality accidents; this information shall be provided independent of off-site ac power for a minimum of 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br />.
- 10. The alarm signal shall be for immediate evacuation purposes paly and of sufficient volume and coverage to be heard in all areas that are to be evacuated.
I1. The CAAS shall remain operable in the event of seismic shock equivalent to the site-specific design basis carthquake or the equivalent value specified by the Uniform Building Code.
Each of these criteria will be addressed in Sect. 2.5.1.3 by illustrating how the system meets the requirements.
2.5.1.2.a System Description (Existing Configuration) l The CAAS is primarily divided into three categories for description. These three areas are the local alarm system, building alarm system, and the Building C-300 CCF alarms and controls. The local alarm system includes the individual cluster unit detectors that provide detection capability for the entire system.
The cluster unit detection system actuates both visual and audible alarms in the affected area (s). The personnel alarms that would be activated consist of:
a local horn (continuous high pitched blast) actuated by plant air or by nitrogen or an electronic hem, building horns (air or electric),
red rotating or strobe beacons located on the outside of buildings, and an audible and visible alann on the Building C-300 CAAS control panel.
The local and building horns produce a loud, distinctive sound and are used as an emergency signal for immediate evacuation of all personnel from the building or area.
Due to the significant number of changes in this system, the local and building alarm system will be described first. Once the basic concept has been established, each building or area will be discussed in detail to provide information on the specific configuration and how the system is arranged.
2.5.1.2.b System Description (New Configuration)
The CAAS is primarily divided into three categories for description. These three areas are the detection system, building alarm system, and the Building C-300 CCF alarms and controls. The detection system includes the individual cluster unit detectors that provide detection capability for the entire system.
The cluster unit detection system actuates both visual and audible alarms in the affected area (s). The personnel alarms that would be activated consist of:
O 2-6
SAR-PGDP Chapter 4, Appendix A August 27,1999
. building horns (air or electric),-
red rotating or strobe beacons located on the outside of buildings, and an audible and visible alarm on the Building C-300 CAAS control panel.
The building horns produce a loud, distinctive sound and are used as an emergency signal for immediate evacuation of all personnel from the building or area.
The building alarm system will be described first. Once the basic concept has been established, each building or area will be discussed in detail to provide information on the specific configuration and how the systemis arranged 2.5.1.2.1.s Local alarm system (Existing Configuration Only, New Configuration Will Remove Local Alarm System)
The local alarm system consists of three major devices: the cluster unit, the local junction / horn control box, and the alarm horn. - The cluster unit sends the required input to the building alarm system and to the CCF. The individuallocal alarm units are located throughout the plant as indicated on Fig. 2.5-2. C-710 and C 720 do not have a specific local horn.
O a
2-6a
SAR-PGDP Chapter 4, Appendix A August 27,1999 Rev.41 9\\
Blank Page O
2-6b
SAR PGDP Chapter 4, Appendix A August 27,1999 Rev. 41 Each detector channel has three possible states normal, fault alarm, and radiation alarm. Pre-determined values of fault alarm and radiation alarm are selected to provide annunciation if the unit falls outside the nonnat operating range (10 mR/hr radiation). In the normal state, the meter on the front panel of the detector hannel indicates a pre-determmed normal background reading on the upper scale, and no other alarm c
' indicators are activated. If something in a detector channel fails and causes the signal level to drop to a fault alarm point, the detector channel will go into the fault state, actuating the FAULT ALARM light on the front panel. If a detector channel goes into the fault state, the cluster logic module will detect it, then activate an audible alarm and tum on a trouble light at the CAAS console in the CCF. Radiation levels of 10 mR/h or more above the background reading will exceed the cluster unit's alarm setpoint, and the cluster unit will go into the alann state. In this state, the RAD ALARM light on the front panel of the detector channel will turn on.
'In addition to providing space for mounting the three detector channels and the cluster logic module, the cluster unit housing also provides electronic connections from each detector channel to the cluster logic module. Also mounted on the back of the cluster unit housing is the cluster unit housing / mother board assembly. This assembly provides power supply connections to cach detector channel, a connection slot for the cluster logic module printed circuit board, and connections to cable connectors slots J2, J3, J5, and J7 on the cluster unit housing.
If only one detector channel goes into the alarm state, the cluster logic module considers it a malfunction and generates a trouble alann on the CAAS console at CCF. If two detector channels go into alarm at the same time, the cluster logic module considers it genuine and generates a radiation alarm. If two detector channels are already in the fault state and the third detector channel goes into alarm, the cluster logic module generates a radiation alarm.
O-To summanze, a radiation alarm will occur if two or more (any two) detector channels go into the alarm state or if only one goes into the alarm state while the other two are in the fault state. All other combinations of abnonnal states will cause a fault alarm.
A radiation alarm signal generated by the above sequence not only turns on the RAD ALARM light on the detector channel but also tums on the ALARM light on the cluster logic module and the 10-mR indicator light or strobe on the CAAS console. In addition to the panel alarm light indicators, a radiation alarm signal activates red rotatmg or strobe beacons located on the exterior of the affected building, and a group of evacuation horns located in the affected area along with any applicable slave horns.
The cluster logic module for all detector assemblies was replaced with the cluster logic module developed for K 25 alarm system application. The new module operates in the same manner as the original logic module with the exception that two output circuits are available for functional raw-y. The voting logic for detector channel input is identical to the previous module. There are two channels of output relays, K4 and KS. An analysis' was performed on the new module to determine the capability to meet the single failure requirements. The results indicated that the logic gates and the relays met the functional single failure requirements. The primary reason for this change is to provide additional protection against single failure in the individual cluster units.
Local. horn alarm description (Existing Configuration Only, New Configuration Will Remove Local Horn Alarm)'
Local horn alanns are located at each of the cluster unit installations except at C-710 and C-720. The local horns are either electronic or are actuated by plant air during the normal operating mode and by nitrogen (N ) from a dedicated cylinder as a backup if the plant air pressure decreases below a preset value. An 2
exception to the above statement does exist. Plant air is not available in Building C-746-Q; therefore, a dual O-N cylinder manifold serves as the primary source and a single N cylinder senesi as the backup for each of 2
2 the two clusters in this building. C-710 and C-720 have all electric horns with no dedicated local horn.
2-9
SAR-PGDP Chapter 4, Appendix A August 27,1999 i
Rev. 41 The air-operated local horn alarm consists of a clarion horn, a compressed nitrogen gas cylinder, and a local horn control box which is electrically connected through a junction box to components located in the cluster unit. A simplified electrical schematic of the circuit is shown in Fig. 2.5-10.
The local horn control box is normally mounted on a wall or column just below the cluster unit and junction box; the nitrogen supply, a 2200-psig cylinder, is secured on the floor just below the local horn control box. The ham is mounted several feet higher than the local horn control box. Fig. 2.5-1I shows a typical field installation of the local horn alarm system unit.
The local horn control box contains a nitrogen pressure regulator, three pressure switches (SSA, SSB, and S6), a double solenoid four-way salve to control pressure to the hom, a plant air connection with a backflow check valve, a switch and test socket to accommodate a test / control unit, a termmal block for l
electrical connections, and miscellaneous hardware. Fig. 2.5-10 shows the electrical schematic circuit, and Fig. 2.5-12 shows the component layout and connections in the local horn control box. Clusters which are located in an outdoor environment are equipped with a low temperature alann (TSLL-129). The TSLL-129 l
alarm contacts (when installed) are in series with SSA, SSB and S6 and will initiate a CLUSTER TROUBLE alarm in C-300 if the extemal temperature of the cluster approaches the cluster's specified nummum operating temperature.
A pressure regulator regulates the nitrogen pressure at 5 psi below plant air pressure but not higher than 80 psig which is required to provide the necessary sound level from the hom. Pressure switch SS monitors the regulator pressure through the trouble circuit. One pair of S5 contacts (SSB) is set to open on decreasing presstire at approximately 75 psig, and the other set of contacts (SSA) is adjusted to open on increasing pressure at approximately 135 psig. Pressure switch S6 on the supply cylinder is set to open at or before 900 psig on decreasing pressure. The two pressure switches are connected electrically to give a
" FAULT ALARM" indication at the cluster unit and a " CLUSTER TROUBLE" alarm at the CAAS console if the pressure being measured exceeds the prescribed limits.
Solenoid valve val is pilot operated so that inlet pressure aids the plunger movement. For the valve W
to open, the OFF coil must not be energized, the ON coil must be energized, and there must be at least 10 psig of pressure from the output of the regulator. To reset or close valve VA1 after it has been actuated or out of service, the ON coil must be without power and the OFF coil must be energized while there is pressure (10 psig or more) in the valve. Some pressure must be present for the reset action, so a slight loss of nitrogen may be associated with resetting the solenoid valve.
A local hom control box failure is expected to manifest itself as one of the following: outleakage from the high-pressure side of the box, which is signaled by a " CLUSTER TROUBLE" alarm at the CAAS console; seat leakage of the cylinder gas regulator causing a pressure increase in the low-pressure part of the local horn control box, which actuates a " CLUSTER TROUBLE" alarm at the CAAS console; or failure of the solenoid valve to either open or close when energized.
The local horn can be reset by two methods. The first method involves manually mo ing the piston of solenoid valve VA-1. This manipulation is done by removing the end caps and pushing the pistons to the reset position. The second method is by connecting a Reset Module, which has a red push-button switch, to Pins 13 and 14 of Test Connector J-3 on the cluster unit housing. This Reset Module is available in each building from maintenance personnel. The module was designed and fabricated by the PGDP Instrument Mr.intenance Department. The module resets the alann by depressing the switch and applying 24-V de to the OFF solenoid and resetting the valve.
The nitrogen supply cylinder is capable of delivering nitrogen to the horn for at least two minutes should the plant air system fail. This would provide sufficient waming to personnel in the affected area.
2.5.1.2.1.b Detection system (New Configuration)
The detection system consists of the local cluster units. The cluster unit sends the required input to the building alarm system and to the CCF.
2-10
SAR-PGDP Chapter 4, Appendix A August 27,1999 Rev.41 Cluster unit description A cluster unit consists of three major subassemblies: three identical detector channels, a cluster logic module, and the cluster unit housing. The modular design of a cluster unit allows for quick, straightforward removal of all major assemblies. Any one of the detector channels may be removed or replaced without affecting the reliability of the reinaming units. A block diagram of the cluster unit with the three detector channels and the cluster logic module located in the cluster unit housing is shown in Fig. 2.5-3.
. Cluster units, Model GCM-650 gamma criticality monitors, are the heart of the CAAS. These units detect gamma radiation from criticality events and initiate evacuation alarms and other indications pertment to operations and maintenance. Each cluster unit consists of three independent and fully redundant detector channels that are electrically maa~*~1 in a cluster " voting" logic. Each detec*.or channel is powered by ac line power, and this source is backed up by an internal battery and regulating charger to enable operation for 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> in case of an ac power line failure.
The modular design of the cluster units allows selective removal of any one of a cluster unit's detector channels for changeout or repair without affecting the detection capability of the remammg two detector channels. This design also permits universal substitution of calibrated detector channels reqmrmg no adjustment for operation in a particular station in the unit. The cluster unit has input and output connections provided by connectors mounted on the right side of the cluster unit.
j Each of the three detector channels in a cluster unit consists of a detector assembly which contains the i
following; a gamma detector tube assembly; a power supply and signal processing printed circuit boards; a battery backup power supply pack; fuses for both ac and battery power supplies; two light-emitting diode (LED) lights to indicate FAULT ALARM or RAD ALARM status when appropriate; and a front panel with indicators and self-test electronic controls to use for the diagnosis of any malfunction or for the calibration, adjustment, and testing of the cluster unit. These components are shown in Figs. 2.5-4 and 2.5-5. The three k
detector channels are intere=@i through the mother board to the cluster logic module. Each channel is also designed to function as a self-containe.f gamma monitor.
I An important part of the detector channel is the detector assembly. This assembly detects gamma radation from a criticality event and provides an amplified alarm signal from a buffer ampli5cr to the electronic circuits in the cluster unit. The detector assembly tube uses a plastic scintillator coupled to a photomultiplier tube (PMT) and buffer amplifier. Gamma radiation impinging on the scintillator generates a photon of light, which is converted to an electrical signal and amplified by the PMT. PMT output is
. amplified and shaped by a buffer amplifier, which then drives the signal processing circuitry. The signal processing circuitry contains circuits that make a level companson to the preset alarm and fault setpoints.
If the gamma radiation field intensity is large enough that the signal exceeds the alarm setpoint, the detector channel sends an alarm status signal to the cluster logic module. The logic circuit in the cluster logic module compares the inputs from the three redundant detector channels according to a preset " voting" scheme and causes an alann output if appropriate.
The detector channel contains provisions for contmually determmmg whether the detector tube and associated electronic circuits are in good working order. An LED light source in contact with the scintillator is used to create a simulated input signal The PMT and associated electrical circuits process this simulated input in the same way it would process a gamma-initiated signal. By monitoring the proper handling of this i
signalithe operating status of the d:tector channel can be dWa~1 If for any reason a fault has occurred, a fault status signal is generated and sent to the cluster unit's electronics for reportmg system status to the CAAS console.
Past expenenz has danaamated that PMT gain shifts can occur with excursions of ambient temperature or with high-voltage supply drift. The detector channel incorporates a gain stabilization technique to limit such gain shifts to values well within the specification. The LED light source mentioned earlier is pulsed and used as a stabilized reference light source. Since the amplitude is compensated for temperature shifts, the output of the light source is a stable, reliable reference. The control electronics use this input to measure the s
gain performanceof the system and adjust the PMT high voltage supply to regulate the system gain. The 2-10a
SAR-PGDP Chapter 4, Appendix A August 27,1999 Rev. 41 l
reference signal is ac coupled and direct current (de) restored and is therefore not foiled by slowly rising or falling radiation fields. The LED light source can be pulsed at low repetition rates below background or can be pulsed faster to simulate higher background rates. The light source can also be used to simulate still higher rates for test purposes. Controls to accomplish these functions are located on the detector channel front panel, which is accessible through a hinged door on the front of the detector channel (refer to Figs. 2.5-4 and 2.5-7). The meter and meter switching controls can be used to monitor alarm level setpoint, fault level setpoint, high-voltage setting, battery test, and analog output signal.
The meter on the detector channel has two scales. The upper scale has 50 divisions that represent 0 to 50 mR/h. The circuits have been adjusted for a predetermined nonnal background no-signal meter reading on the upper scale. The lower scale of the meter has 30 divisions and is labeled V dc. During " battery test,"
the range is 0 to 30 V dc. Durmg "high voltage" test, the range is 0 to 3000 V dc.
Also located just below the meter are two LED lights to indicate FAULT ALARM or RAD ALARM status when appropriate. Fuses for both power supplies, the ac and the battery backup, are located at the bottom of the unit.
A battery pack is also provided for each of the three detector channels in a cluster unit. The pack, which
% backup power for its detector channel in the event of an ac power failure, is located on the underside y
of the det% dunnel chassis beneath the printed circuit boards and the detector tube assembly (see Fig. 2.5-5). The batteries are tested periodically as indicated in Sect. 5 to verify their operable status. They are replaced wher. the acceptance criteria for operability are not met.
The batteries, if defective (open, shoned, or discharged), will not affect the operation of the unit if ac is present. In the event of loss of power, however, a defective battery will cause failure of the detector channel in which it is contained. Provided one detector channel contains an operable battery, the cluster logic module will continue to correctly report the status of the unit.
The front panel of the cluster logic module (Fig. 2.5-9) contains a master reset switch, ALARM RESET, for resetting all channels, and a large red ALARM lamp to signal alann status. Also on the front panel is a key-lock MODE switch, which, when in the TEST position, allows the operator to test the cluster alarm circuits. The key can be removed only when the lock has been returned to the NORMAL position. In the NORMAL position, any detector channel can be self-tested by manual switches located on the unit. Durmg this type of testing, the cluster unit will not initiate an alarm signal unless the unit is actually subjected to a tme radiation level exceeding the preset alann setpoint.
The cluster logic module also contains the cluster " voting" logic and the relays that are an integral part of the CAAS alann and control systems. The three detector channels are connected to the cluster logic module through a mother board in the cluster logic module, which is mounted on the inside back panel of the cluster housing. The "alann" and " fault" signals generated in the detector channels are fed to the cluster logic module where a logic matrix evaluates signals from the three detector channels and determines through a
" voting" logic matrix if an alarm signal is to be generated and transmitted to the alarm control circuits that operate the warning beacons, the horns, and the alarm monitors in the CCF or if a " fault" alarm signal is to be generated to indicate an operational malfunction in the detector channel.
Cable connections from the cluster unit to the evacuation alarm systems and the indicator / control systems of the CAAS console are located on the right side of the cluster unit housing. Connections for these cables are shown in Fig. 2.5-9.
The cluster logic module monitors the status of the three detector channels and sen es as an arbitrator to determme if a radiation alarm should be activated or if a fault in the system has occurred and should be reported as a fault alann.
O 2-10b
I SAR-PGDP Chapter 4, Appendix A August 27,1999 Rev. 41 Each detector channel has three possible states: normal, fault alarm, and radiation alann. Pre-determined values of fault alarm and radiation alarm are selected to provide annunciation if the unit falls outside the normal operating range (10 mR/hr radiation). In the normal state, the meter on the front panel of the detector channel indicates a pre-detemuned normal background reading on the upper scale, and no other alann indicators are activated. If something in a detector channel fails and causes the sipal level to drop to a fault alarm point, the detector channel will go into the fault state, actuating the FAULT ALARM light on the front panel. If a detector channel goes into the fault state, the cluster logic module will detect it, then activate an audible alarm and turn on a trouble light at the CAAS console in the CCF. Radiation levels of 10 mR/h or more above the background reading will exceed the cluster unit's alarm setpoint, and the cluster unit will go into the alarm state. In this state, the RAD ALARM light on the front panel of the detector channel will turn on.
t In addition to providing space for mounting the three detector channels and the cluster logic module, the cluster unit housing also provides electronic connections from each detector channel to the cluster logic module. Also mounted on the back of the cluster unit housing is the cluster unit housing / mother board assembly. This assembly provides power supply connections to each detector channel, a connection slot for the cluster logic module printed circuit board, and connections to cable connectors slots J2, J3, J5, and J7 on the cluster unit housing.
If only one detector channel goes into the alarm state, the cluster logic module considers it a malfunction and generates a trouble alarm on the CAAS console at CCF. If two detector channels go into alarm at the same time, the cluster logic module considers it genuine and generates a radiation alarm. If two detector channels are already in the fault state and the third detector channel goes into alarm, the cluster logic module generates a radiation alarm.
To summarize, a radiation alarm will occur if two or more (any two) detector channels go into the alarm O
state or if only one goes into the alarm state while the other two are in the fault state. All other combinations of abnormal states will cause a fault alarm.
A radiation alarm signal generated by the above sequence not only turns on the RAD ALARM light on the detector channel but also tums on the ALARM light on the cluster logic module and the 10-mR indicator light or strobe on the CAAS console. In addition to the panel alarm light indicators, a radiation alarm signal activates red rotating or strobe beacons located on the exterior of the affected building, and a group of evacuation homs located in the affected area along with any applicable slave horns.
The cluster logic module for all detector assemblies was replaced with the cluster logic module developed for K-25 alarm system application. The new module operates in the same manner as the original logic module with the exception that two output circuits are available for funedanni reAnnAncy. The voting logic for detector channel input is identical to the previous module. There are two channels of output relays, K4 and K5. An analysis' was performed on the new module to detemune the capability to meet the single failure requirements. The results indicated that the logic gates and the relays met the functional single failure requirements. The primary reason for this change is to provide additional protection against single failure in the individual cluster units.
2.5.1.2.2.a Building alarm system (Existing Configuration)
Figure 2.5-1 is an overall layout drawing of the cluster locations and connections of the basic wws of the CAAS. Each covered area contams building hams that prmide audible warnings inside the buildings. Rotating or strobe red beacons located on the outside of the affected buildings serve as a visible wwning not to enter the building. local radiation alarm cabinets (RACs) to which the outputs of all the cluster units in the alarmed area O
2-10c
l SAR-PGDP Chapter 4, Appendix A August 27,1999
- l O
Blank Page 1
2-10d
SAR-PGDP Chapter 4, Appendix A April 15,1998 Rev. 24 are connected. The changes made to this system include providing additional alarms and beacons and inputs to the existing building alarms from individual cluster units. In addition, the piping to the existing horns was increased in diameter to provide more air flow to the horns for better sound and coverage. The method of
. operation of the building alarm system, (i.e. homs and lights) was not changed. The existing building alarm system is described in Sect. 3.12.6 of the SAR.
l The RACs are located in the primary building that they support. These cabinets are the routing point for all local cluster unit inputs to the building alarms and the CCF. The building horns are either electronic or are air-or nitrogen-operated horns and are located in each building to sound an evacuation alarm should the local cluster units detect a criticality. The beacons are rotating or strobe lights located at various locations l
on/in the building to provide a visual signal of the alarm condition.
Radiation alarm cabinet The RAC contains control relays that, in conjunction with other control circuits in the Radiation Alarm Annunciator Cabinet and the CAAS console, provide the warning signals and related operator controls for CAAS. The relays that control operation of the building horns and rotating or strobe beacons for a particular l
building (or area) are located in the RACs of that building. Fig. 2.5-14 is a simplified schematic of the relay control circuits.
Fig. 2.5-14 illustrates the three detector channels' connection to an alarm logic matrix located in the cluster logic module within the cluster unit. The output of the matrix goes to control circuits in the local hom control box and to alarm control relay circuits in the RAC. The alarm control relays in the building's RAC controls the operation of the building homs and rotating or strobe beacons. When the cluster unit is exposed l
to a radiation level that is higher than 10 mR/h above background, an alarm signal from the cluster unit j
f energizes relay Z, which in tum energizes relays W and Y. Relays W and Y energize the building horns and beacons,respectively. - A horn control switch on the CAAS console at the CCF can be moved to the OFF l
position to energize relay X to turn off the building horns. The beacons cannot be tumed off from the CAAS console because of a holding circuit for relay Y. The beacons are tumed off by pushing the BUILDING LIGHTS RESET switch on the RAC located in the same building as the beacons. Actuatmg this switch breaks the holding circuit for relay Y. The horn control switch can also be positioned at either ON or AUTO.
At the ON position, the building horns can be activated; however, the HORN PERMISSIVE switch must be in the ON position for the horns to be energized. In the AUTO position (normal position), the horns and beacons are actuated automatically when an alarm signal is received from a cluster unit through the action of relay Z. Each cluster unit will have relays W, X, and Z, but there will be only one relay Y for each building RAC. Relay Y turns on the outside beacons and will operate if any cluster unit within the designated warning zone goes into alarm (see Fig. 2.5 14).
Field wiring connects the CAAS console at C-300 to the cluster units, the warning devices, and the RAC located in each building; the wiring is channeled through two radiation alarm master termmal cabinets located in the basement of Building C-300. The temunal connections in these master ternunal cabinets are configured to allow connection flexibility in the CAAS. This flexibility derives from the capability to interconnect in the master terminal cabinet relay contacts associated with the cluster relays to the desired horn and beacon control relays located in the RACs.
Building evacuation horns
~
The building horns are located in strategic locations throughout the building to provide an audible alarm signal upon initiation from the local cluster units. The building horns are similar to the electronic or air-operated local alarm horns in their operation. The solenoid valves that open to provide air to the building horns are similar to the local ham solenoids with the exception that they operate from either 120 V ac or 125 l
V de power from the 2-11
SAR-PGDP Chapter 4, Appendix A August 27,1999 Rev.41 local distribution within the building they support. The local horn solenoid valves are operated with 24 V dc.
Table 2.5-1 is a summary of cluster unit locations and the associated building alarms they support.
The building horns can be manually controlled by the horn control switch operating in conjunction with the HORN PERMISSIVE switch, both of which are located on the CAAS console in Building C-300. These switches are also used to disable the building horns during testing or maintenance to prevent unwanted alarm I
signals.
I The building horns are controlled by relays energized by an alarm signal from the cluster unit (s) located in the affected area. These relays are located in the RAC associated with the affected building / area. The building evacuation horns are either electronic or are actuated by plant air or nitrogen. Slave building horns are located in buildings that do not have a cluster unit but where evacuation of plant personnel is required when a cluster unit in the affected area of coverage is activated. C-333/C-333A and C-337/C-333A have additional slaved horns, refer to Table 2.5.1 for more information.
Beacons The red rotating or strobe beacons are operated in the same manner as the horns for the building except that relay Y provides the initiation. The beacons, mounted on the exterior of the monitored building, can be turned off after an alarm or a test by using the key-operated BUILDING LIGHTS RESET switch located on the RAC in the affected building. These lights are powered from a local 120 V ac source within the affected building.
2.5.1.2.2.b Building alt.m system (New Configuration)
Figure 2.5-la is an overall layout drawing of the cluster locations and connections of the basic components of the CAAS. Each covered area contains building homs that provide audible warnings inside the buildings. Rotating or strobe red beacons located on the outside of the affected buildings serve as a visible warning not to enter the building. Local radiation alarm cabinets (RACs) serve as a central location to which the outputs of all the cluster units in the alarmed area are connected. The existing building alann system is described in Sect. 3.12.6 of the SAR.
The RACs are located in the prunary building that they support. These cabinets are the routing point for all local cluster unit inputs to the building alarms and the CCF. The building homs are either electronic or are air-operated horns and are located in each building to sound an evacuation alarm should the local cluster units detect a criticality. The beacons are rotating or strobe lights located at various locations on/in the building to provide a visual signal of the alarm condition.
He CAAS building hom system has been upgraded in these areas to provide greater alarm signal audibility and system reliability. The system consists of air accumulators which contain an adequate supply to blow the air whistles for a minimum of two minutes. He pressure in the accumulators is maintained at approximately 150 psig. Air piping routes the air from the accumulators to the air whistles through pressure regulators and solenoid valves. He pressure regulators maintain the air pressure to the whistles at approximately 80 psig which is their design operating pressure. The solenoid valves operate to turn the whistles on and off. In addition to the air whistles, electronic homs have been installed in some low noise areas. The following description of these components details their operation and analyzes their possible failures.
To provide an adequate waming signal level in the process buildings, a sufficient number of air whistles have been appropriately located. He air whistles are actually two whistles mounted as a single assembly having two frequencies,497 Hz and 502 Hz. Rese frequencies were selected because sound level surveys have shown a lower background level in the 1/3 octave with a center frequency of 500 Hz.
This allows the alarm signal to be distinguishable by freqeuncy as well as amplitude from the background noise. Also, the 5 Hz difference (502 vs. 497 Hz) establishes a " beat" of 5 Hz that is noticable in areas 2-12
1 l
l SAR PGDP Chapter 4, Appendix A August 27,1999 O
Rev.41 (Y
around the air whistles. His adds another distinguishable characteristic of the waming signal. He addition of an adequate number of homs with sufficient signal amplitude and a distinguishable frequency provide audibility in the areas now deficient, including the areas of the clusters. His removed the necessity for local homs so they have been disconnected and abandoned in place or removed. In areas such as the building area control rooms (ACR), maintenance shops, locker rooms, and C-746Q, where the installation of air whistles was impractical due to the amplitude of the whistle signal at large distances, electronic homs were installed which have a frequency of 470 Hz. He most likely failure mode of the air whistles is an obstruction of the flow path causing a degraded output signal. He most likely failure mode of the electronic homs is an electronic component failure causing the hom to fail to produce the required output signal. Failure of the air whistles and electronic homs is protected against by performing quarterly functional testing to detect any component degradation prior to failure and identify any failures of components which have occurred. nese components are then replaced and retested prior to declaring the system operable.
He building air whistles and electronic homs are actuated by two W relays which energize the hom ON solenoids and electronic homs. All of the horns are energized by either of the W relays if any cluster in the area initiates an alarm signal. His redundancy ensures the horns will actuate even if one of the I
relays fails. The building air whistles are deenergized by dual X relays which energize the ham OFF solenoids. He W and X relays are located in new Building Hom Relay Cabinets (except in C-333A, C-360, C-400, C-710, C-720, and C-746Q) located adjacent to the Radiation Alarm Cabinets in each building. In C-333A, C-360, C-400, C-710, C-720, and C-746Q the W and X relays are located in the Radiation Alann Cabinet. He possible failure modes of these relays are contact failure or coil failure which would prevent the homs from being actuated. Rese failures are protected against by providing
(~ )
two relays which can perfonn the same function independently and by performing quarterly functional V
testing to detect any component degmdation prior to failure and identify any failures of components which have occurred. Rese components are then replaced and retested prior to declaring the system operable.
He Building Hom Relay Cabinets in each building also contain a loss of power relay and indicating light. He purpose of this relay and light is to provide an alarm signal upon a loss of power to the CAAS
)
building homs. He alarm signal is indicated by a cluster trouble alarm at C-300 and a loss of power light inside the Building Hom Relay Cabinet. He possible failure modes of these components are contact failure, coil failure, or the lamp buming out. Any of these failures would prevent an alarm signal, due to interruption of power to the building homs, from producing a C-300 cluster trouble alarm or a visible alarm at the Building Hom Relay Cabinet. These failures are protected against by performing quarterly functional testing to detect any component degradation prior to failure and identify any failures of components which have occurred. Rese components are then replaced and retested prior to declaring the system opemble.
j i
ne air whistles are actuated by four-way double acting solenoid valves which are actuated by 120 VAC or 120 VDC. For the valve to open, the OFF coil must not be energized, the ON coil must be i
energized, and there must be at least 35 psig of pressure from the output of the regulator. To reset or close the valve after it has been actuated or out of service, the ON coil must be without power and the I
OFF coil must be energized while there is pressure in the valve. He ON coils are energized by the above l
mentioned W relays and the OFF coils are energized by dual X relays. Rese solenoid valves are housed in solenoid panels which are located in the vicinity of the air whistles that they serve. He possible failure modes of the solenoid valves are a stuck solenoid, a coil failure, piping leaks, or valve leaks. Any of these failures could cause loss of proper air flow to the whistle resulting in a degraded output signal and loss of air resulting in failure of the homs to blow for the required time at the required flow rate. Rese (d
failures are protected against by performing preventive maintenance of the solenoids and by performing
)
quarterly functional testing to detect any component degradation prior to failure and identify any failures j
2-12a l
i I
SAR-PGDP Chapter 4, Appendix A August 27,1999 Rev.41 of components which have occurred. Rese components are then replaced and retested prior to declaring the system operable. Also, leakage is protected against by a pressure switch installed on the air header between the accumulators and the pressure regulators which sends in a low pressure alarm if the system pressure falls below a set pressure which is slightly above the accumulator pressure limit for 2 minute operation of the air whistles.
The air supply from the air accumulators to the air whistles is controlled by individual pressure centrol valves which maintain supply pressure to the air whistles at their design pressure of approximately 80 psig from the accumulator supply which is at approxunately 150 psig. These control valves are located in the air line between the accumulators and each solenoid valve. Rese control valves are spring loaded, diaphragm actuated valves. The valves are opened by spring pressure and closed by control air pressure, therefore they fail open on loss of control air pressure. He safety function of the pressure control valves is to provide flow control and isolation over all expected system pressures. He possible failure modes of the pressure control valves are sticking of the valve and valve leakage. These failures could result in improper supply pressure to the whistles which could cause inadequate output sound from the hom and failure of the system to sound the homs for the required two minutes. Rese failures are protected by the procurement and dedication process of the components as Q items. Also, the system is tested quarterly to detect any component degradation prior to failure and identify any failures of components which have occurred and the valve settings are checked annually. Rese components are then replaced and retested prior to declaring the system operable.
He power for the air whistles is supplied from a dedicated air supply system. He piping is routed to a main air supply header which is then routed to an accumulator (air storage tank) located outside of the building. He accumulators are maintained at a pressure of approximately 150 psig. He supply to the whistles is maintained at the whistle design pressure necessary to blow the homs, 80 psig. The minimum pressure in the accumulators necessary to blow the homs for a minimum of two minutes is dependent on the capacity of the accumulators. He accumulator capacity can be changed by taking one or more tanks out of service for maintenance or inspection. Maintaining the minimum pressure, based on the number of accumulators in senice, above that necessary to blow all the homs for a minimum of two minutes ensures that sufficient air capacity is available. The accumulators are designed to fulfill the requirements of Section VIII, Division 1, of the American Society of Mechanical Engineers (ASME)
Boiler and Pressure Vessel Code, hey have a maximum allowable working pressure (MAWP) of 175 psig at 150 'F.
They are connected to a common header which runs inside of the building. Local pressure and temperature indicators are installed at the tanks for monitoring. He accumulators each have a pressure relief valve which is set to relieve at 175 psig. An overpressure condition in the accumulators could be caused by a failure of the compressor control system preventing the compressor from turning off at its high pressure cutout. The relief valves are designed to relieve pressure to prevent accumulator pressure from exceeding 110% ofits MAWP when filling at the compressor flow rate. He possible failure modes of the accumulators are fracture or rupture. His is protected against by fabrication and testing of the accumulators in accordance with ASME code requirements and pressure relief valve protection. He possible failure modes of the pressure relief valves are sticking of the valve open or shut, valve structure failure, spring failure, and orifice obstruction. These failures are protected against by performing preventive maintenance on the relief valves and by performing pre-installation testing and inspection of the valves. Also, system leakage is protected against by a pressure switch installed on the air header between the accumulators and the pressure regulators which sends in a low pressure alann if the system pressure falls below a set pressure which is slightly above the accumulator pressure limit for 2 minute operation of the air whistles. Isolation valves are available to isolate one or more of the accumulators from the system to perform corrective or preventive maintenance as necessary.
2-12b i
i
SAR-PGDP Chapter 4, Appendix A August 27,1999 Rev. 41 The accumulators are filled using an air compressor located inside the building. He input to the air compressor is' from the plant air system at 90 psig nominal pressure. He output is directly into the accumulator. He accumulators are monitored for pressure such that the compressors recharge the I
accumulators at approximately 150 psig and tum off at approximately 160 psig. If the system falls below i
a set pressure which is slightly above the accumulator pressure limit for 2 minute operation of the air whieles, a cluster trouble alarm is generated in the Central Control Facility (C-300). He air compressor installation is designed such that quick removal and replacement can be accomplished with a spare compressor should replacement become necessary. When CAAS surveillances or post-maintenance testing i
is performed it is necessary to sound all CAAS alarms in the affected area and ensure all homs are l
functional. His depletes the CAAS accumulators below the pressure necessary to blow the air whistles for two minutes ne time to recharge the accumulators above this pressure has been estimated at greater than five hours using the permenantly installed compressors alone. To reduce this recovery time a temporary connection is installed to allow the connection of a portable air compressor with enough capacity to recharge the accumulators in approximately one hour. His reduces CAAS outage time necessary to perform surveillances and post-maintenance testing.
He Radiation Alarm Cabinet (RAC) and Building Hom Relay Cabinet (BHRC) contains control relays that, in conjunction with other control circuits in the Radiation Alarm Annunciator Cabinet and the CAAS console, provide the waming signals and related operator controls for CAAS. He relays that control operation of the building homs anNatmg or strobe beacons for a particular building (or area) are located in the RACs and BI!RCs d mat building. Fig. 2.5-14a is a simplified schematic of the relay I
control circuits.
Fig. 2.5-14a illustrates the three detector channels' connection to an alann logic matrix located in the cluster logic module within the cluster unit. The output of the matrix goes to alarm control relay circuits 1
in the RAC and BHRC. He alann control relays control the operation of the building homs and rotating or strobe beacons When the cluster unit is exposed to a radiation level that is higher than 10 mR/h above bkkpvand, an alarm signal from the cluster unit energizes relay Z, which in tum energizes relays W and Y. Relays W and Y energize the building homs and beacons, respectively. A horn control switch on the.
CAAS console at the CCF can be moved to the OFF position to energize relay X to tum off the building i
homs. De beacons cannot be turned off from the CAAS console because of a holding circuit for relay Y.
He beacons are tumed off by pushing the BUILDING LIGiffS RESET switch on the RAC located in the same building as the beacons Actuating this switch breaks the holding circuit for relay Y. He hom contml switch can also be packianM at either ON or AUTO. At the ON position, the building homs can be activated; however, the HORN PERMISSIVE switch must be in the ON position for the homs to be energized. In the AUTO position (normal position), the homs and beacons are actuated automatically when an alarm signalis received from a cluster unit.through the action of relay Z. Each cluster unit will have a Z relay but there will be only one relay Y and two X and Z relays for each building RAC/BHRC.
The W and X relays are located in the BHRC (except in C-333A, C-360, C 400, C-710, C-720, and C-746Q where they are in the RAC) and the Y and Z relays are located in the RAC. Relay Y tums on the outside beacons and the W and X relays operate the building homs if any cluster unit within the designated waming zone goes into alarm (see Fig. 2.5-14a).
Field wiring connects the CAAS console at C-300 to the cluster units, the waming devices, the RAC, and the BHRC located in each building; the wiring is channeled through two radiation alarm master terminal cabinets located in the basement of Building C-300. He terminal connections in these master terminal cabmets are configured to allow connection flexibility in the CAAS. His flexibility derives from the capability to interconnect in the master terminal cabinet relay contacts associated with the cluster relays to the desired hom and beacon control relays located in the RACs and BHRCs.
2-12c U
r SAR PGDr Chapter 4, Appendix A August 27,1999 Rev. 41 he building homs can be manually controlled by the hom control switch operating in conjunction with the HORN PERMISSIVE switch, both of which are located on the CAAS console in Building C-300.
Rese switches are also used to disable the building homs during testing or maintenance to prevent unwanted alarm signals.
Slave building homs are located in buildings that do not have a cluster unit but where evacuation of plant personnel is required when a cluster unit in the affected area of coverage is activated, refer to Table
{
2.5.la for more information.
Clusters which are located in an outdoor emironment are equipped with a low temperature alarm (TSLI-129). The TSLL-129 alarm contacts (when installed) will initiate a CLUSTER TROUBLE alarm in C.300 if the external temperature of the cluster approaches the cluster's specified minimum operating temperature.
Beacons The red rotating or strobe beacons are operated in the same manner as the horns for the building except that relay Y provides the initiation. The beacons, mounted on the exterior of the monitored building, can be turned off after an alarm or a test by using the key-operated BUILDING LIGHTS RESET switch located on the RAC in the affected building. These lights are powered from a local 120 V ac source within the affected building.
2.5.1.2.3 Central control facility Changes were also made in C-300 for the CAAS. These changes and their descriptions are provided m Sect. 2.5.2.
2.5.1.2.4 Spare equipment It will be necessary to take the local alarm horns out of service to perform testing and/or maintenance on a periodic basis. In addition, some failure within these components is expected to occur. Therefore, portable alarm units will be available for quickly locating to an existing area to allow continued operation in accordance with the TSRs. Rese units will be similar to the existing units with the exception that they will be portable to allow maneuverability. The portable clusters are equipped to be operated as standalone units or replacements for a fixed cluster. For details on operability requirements, refer to the TSRs.
2.5.1.3 System Analysis The system analysis will address each point of the criteria in the same sequence they are provided in Sect. 2.5.1.1.
The analysis will show how the system meets the specific requirements and/or prmide justification for not meeting the requirements.
The CAAS is required to provide coverage of areas in accordance with Sect. 4.2 of ANSI /ANS 8.3'.
The range of detection for each cluster is based on the minimum accident of concern indicated in ANSI /ANS 8.3. The individual plant areas requiring coverage during normal and abnormal operations were identified. Fig. 2.5-2 indicates the individual clusters that are provided to detect a criticality accident. Plant areas that may contain enriched material greater then or equal to ! wt % mU during nonroutine operating conditions will require a minimum of one CAAS unit to be stationed in each area where the material will be processed. NCS will be required to approve the location of the alarms before operation.
O 2-12d
SAR-PGDP Chapter 4, Appendix A August 27,1999
[,}
Rev.41 n
2.5.1.3.1 Criteria 1-11 In Building C-333, the only area provided with permanent coverage from the cell floor units is the area of Unit 6. As indicated in Table 2.6-1, the assay gradient for 5 wt % "'U would generally have a top assay of about 0.8 ut % "'U for a 0.2 ut % usU tails in all of Building C-333. Although there are some variations with this configuration and assay level, normal operation in this facili}'t ' will generally b 1 ut % "5U with the exception of Unit 6 which could slightly exceed I wt %
'U, Therefore, only Unit 6 (highest assay area) will be protected by a local alarm unit during all modes of operation. Although the production within this portion of the cascade is expected to be in the I wt % "50 range and less, the potential far feeding up to 5 wt % "'U is provided in C-333 A. This feed would bypass the entire C-333 cascade provided the feed assay level exceeded the level for C-333 enrichment. The feed line is maintained in a gaseous state, which will provide one method of criticality control (i.e., density). In addition, the moderation within the system is controlled by maintaining system integrity and the temperature and pressure within acceptable ranges as indicated in Sect. 2.6.2.3. The cell floor is provided with coverage by use of the cluster unit AJ even though it is located on the ground floor. Based upon this analysis, Building C-333 has adequate permanent CAAS coverage for operation.
In Building C-331, the areas with some overlapping coverage include units 3 and 4. These two units could potentially contain uranium enriched greater than or equal to I wt % "'U. The remaining two units are very low assay during normal operation due to their pnmary roles as strippers in the enrichment process. The remaining parts of the building are similar to the configuration for Building C-333. Therefore, the same justification is applicable to the remaining areas of C-331. Based upon this analysis, Building C-331 has adequate permanent CAAS coverage for operation.
In Building C-335, the areas provided with redundant some overlapping coverage include units 2,3, and 4.
These units could potentially contain uranium enriched greater than or equal to I wt % "'U.
The f,)
remaining unit is very low assay during normal operation due to its primary role as a stripper in the V
enrichment process. The remaining parts of the building are similar to the configuration for Building C-331.
Therefore, the same justification is applicable to the remaining areas of C-335. Based upon this analysis, Building C-335 has adequate permanent CAAS coverage for operation.
2.5.1.3.2 Text Deleted 2.5.1.3.3.a C-331, C-333, C-335, and C-337 (ground floors) (Existing Configuration) l The ground floor of buildings C-331, C-333, C-335, and C 337 has detection coverage with one cluster unit located on the ground floors and additional coverage provided by cell floor cluster units. A connection for a portable cluster has also been provided on the ground floors of both C-331 and C-335 so that a portable cluster can be tied into the building alaans. The portable cluster will allow fissile activities (such as movement of legacy waste) in the areas of these buildings without detection coverage from permanent clusters.
In building C-337, each unit has CAAS coverage with some areas of overlapping coverage. The remaining parts of the building are similar to the configuration for Building C-333. Based upon this analysis, Building C-337 has adequate permanent CAAS coverage for operation.
Building C-310 has two clusters with some areas of overlapping coverage. Based upon this analysis, Building C-310 has adequate permanent CAAS coverage for operation.
The building tie lines have criticality coverage as described in PGDP document KY/G-578 " Criticality j
Accident Alarm Coverage of the Interbuilding Tie Lines at the Paducah Gaseous Diffusion Plant".
Building C-333A has two clusters with overlapping coverage. Based upon this analysis, Building C-333-A has adequate permanent CAAS coverage for operation.
Building C-337A has one cluster with overlapping coverage form C-337. Based upon this analysis,
,m Building C-337A has adequate permanent CAAS coverage for operation.
(k-)
Building C-360 has two clusters of overlapping coverage. Based upon this analysis, Building C-360 has adequate permanent CAAS coverage for operation.
2-13 1
L-
]
SAR-PGDP Chapter 4, Appendix A October 31,1998 Rev.29 O'
Building C-400 has two clusters with some areas of overlapping coverage. Based upon this analysis, Building C-400 has adequate permanent CAAS coverage for operation.
Building C-409 has two clusters of overlapping coverage. Based upon this analysis, Building C-409 has adequate permanent CAAS coverage for operation.
Building C-710, a laboratory facility, has live clusters and Building C-720, a maintenance facility, has one cluster. C-720 has single cluster coverage only. As with all cluster units it has three detectors along with a functionally redundant logic module for sending input to the building alarm system. Based on this analysis, i
this is acceptable for current operations.
{
Building C-746-Q East, has one cluster and is used as a waste storage facility. As with all cluster units, each has three detectors along with a functionally redundant logic module for sending input to the building alarm system. Based upon this analysis, Building C-746-Q East has adequate permanent CAAS coverage for storage.
Therefore, the coverage requirement of criteria 1 has been met. The CAAS provides coverage of all these areas by selecting the setpoint for initiation in accordance with ANSI /ANS 8.3' The coverage area is calculated based upon the setpoint of 9.5 to 10.5 mR/h.
The cluster units were designed to meet the requirement of one-half second response time. This requirement verified by field testing to ensure system functionality. Figure 2.5-14 illustrates the method of initiating the building alarm horns from C-300 by placing the HORN CONTROL SWITCH in the ON position and by having the HORN PERMISSIVE SWITCH in the ON position. This meets Criterion 2 as specified in Sect. 2.5.1.1.
Once an individual cluster unit detects and outputs an alarm condition, the alarm signal is sealed in to prevent inadvertent reset when radiation levels return to less than alarm conditions. This can be seen by reviewing Fig. 2.5-6. The alarm is generated when the output from logic gates U3C 4011 and U3D 4011 or USC 4011 and USD 4011 cause transistor Q2 or Q3 to allow sufficient current through the K4 and K5 relays to initiate the alarm. Logic gates U3C 4011, U3D 4011, USC 4011, and USD 4011 are arranged in a " flip-flop" configuration (logic memory) that remains in the alarm state until the logic reset signal is generated either locally or from C-300. In addition to the individual cluster units, the local alarm horns will remain in the alarm state after the cluster unit has been reset until the local reset circuit is applied to the horn control box as illustrated on Fig. 2.5-10 or until the nitrogen is depleted if plant control air is lost. The building alarm horns are maintainxi in the alarm condition by the local cluster until the cluster unit is reset or the building horn is reset via tha HORN CONTROL SWITCH being placed in the OFF position within C-300 (see Fig.
2.5-14). The buildmg alarm lights require reset at the respective building RAC. Therefore, all alarm circuits are sealed in once the initiation has occurred until a specific manual reset action has occurred. All of these devices can be reset from a remote location with the exception of the local horns. The basis for not hasing remote reset capability for the local alarms is to avoid the potential of an alarm being termmated prematurely by local personnel. Based on this review, the CAAS meets the intent of the requirements of Criterion 4 stated in Sect. 2.5.1.1.
j As indicated in the description provided in Sect. 2.5.1.2.1, the clusters are equipped with a direct current (de) battery backup with a design rating of four hours upon loss of ac power to the cluster unit. This supply will supply sufficient power to all necessary components within the system to actuate the local alarm without ac power. In addition to being independent of electrical power, the local alarm horn can operate for a minimum of two minutes without plant control air. The two-minute time frame is sufficient to meet the requirement stated in Sect. 4.4.1 of ANSI /ANS 8.3 that says the alarm signal is for immediate evacuation purposes only. The nitrogen supply is capable of delivering the design rate of flow to the clarion horn by proper operation of the backflow check valve and the pressure switches within the local hom control box.
This meets the requirements of Criterion 5 as stated presiously.
Criterion 6 states that the system shall be designed to preclude inadvertent initiation signals from being generated (i.e., false alarms) to the extent practical. This requirement has been met by prosiding a logic g!
circuit that requires a nummum of two detector channels to provide an alarm output to the logic board W
simultaneously (except when two detectors are already in a faulted condition). Indisidual component failures 2-14 I
I
(
1 SAR PGDP Chapter 4, Appendix A August 27,1999 Rev. 41 7(v fmm the detector circuit to the building alarm system could cause spurious operation of the system. However, past operational history has shown this portion of the system to be reliable in preventing spurious alarms within the system. Therefore, based upon the detection logic and past operational experience, the system configuration meets the applicable criterion.
Section 2.5.1.2.1 presiously described the self-testing capability of the individual detector channel by the function of the LED light source within the assemblies. This meets the requirements for indication of system malfunctions for the detector channels (Criterion 7). In addition to this capability, the power supply circuits are monitored with appropriate alarm indication within C-300 as well as the local hom control boxes as described presiously. In addition to the self-monitoring of the system, periodic testing of the system is also performed as described in Sect. 5 to verify proper system operability.
Test circuits and switches are located throughout the system to allow for system verification as described in Sect. 5. In addition, local alarms will remain operational as long as the individual alarm is not being tested.
These local alarms will still send input to the building alarms during these conditions unless the building alarms have been disabled before the test. The individual detector channels have their own test circuit along i
with the cluster logic module. The building alarm system can be tested by the HORN CONTROL SWITCH
{
as previously described. Therefore, the system meets the testability requirement specified in Criterion 8.
As described in Sect. 2.5.2, all of the alarms and fault conditions are displayed in C-300. Section 2.5.2 gives a detailed evaluation of this requirement (Criterion 9) for the CAAS.
Criterion 10 is one of the most difficult ponions of the system to verify by analysis. ANSI /ANS 8.3-1986, Sect. 4.4.1, requires that the alarm signal shall be for immediate evacuation purposes on13 and of j
sufficient volume and coverage to be heard in all areas that are to be evacuated. Those areas that do not have sufficient volume to be audible are being addressed under the PGDP Compliance Plan.
The following acceptance criteria were developed using approved industry standards and are used by PGDP to verify compliance with ANSI /ANS 8.3,1986 CAAS audibility requirements:
p
- 1) Ensure the broadband CAAS alarm signal is at least 10 dB above the maximum expected broadband t
I background noise. If this criterion cannot be met, go to step 2.
V 1
- 2) Ensure the 1/3 octave 500 Hz CAAS alarm signalis at least 13 dB above the maximum expected 1/3 octave 500 Hz effective masked threshold. If this criterion cannot be met, go to step 3.
- 3) Expose a nummum of ten people, representing a cross section of the plant population's age and hearing capability, to the alarm signal and ensure each of the test subjects can hear the alarm signal.
This test is repeated five times and the results are satisfactory if each of the test subjects hear the signal each time they are exposed.
If any of the above criteria are met, the CAAS meets the CAAS audibility requirement of ANSl/ANS 8.3, 1986.
PIP repott number PIP:45-89-0043, Improve Afaintenance andAfonitoring ofRadiation Alarm System",
documented that the present system could not be proven to meet Criterion 11. This section requires that the system remain operable in the event of a seismic shock equivalent to the site specific design basis earthquake or the equivalent value specified by the Uniform Building Code. The CAAS does not meet seismic qualifications. Specific exceptions to ANSI /ANS 8.3 criteria are listed in SAR Section 1.6.
2.5.1.3.3.b C-331, C-333, C-335, and C-337 (ground floors) (New Configuration)
The ground floor of buildings C-331, C-333, C-335, and C-337 has detection coverage with one cluster unit located en the ground floors and additional coverage provided by cell floor cluster units. A connection for a portable cluster has also been provided on the ground floors of both C-331 and C-335 so that a portable cluster can be tied into the building alarms. The portable cluster will allow fissile activitbs (such as movemet of legacy waste) in the areas of these buildings without detection coverage from permanent clusters.
In building C-337, each unit has CAAS coverage with some areas of overlapping coverage.
The remaining parts of the building are similar to the configuration for Building C-333. Based upon this analysis, Q]
r Building C-337 has adequate permanent CAAS coverage for operation.
Building C-310 has two clusters with some areas of overlapping coverage. Based upon this analysis, Building C-310 has adequate permanent CAAS coverage for operation.
2-15 e
SAR PGDP Chapter 4, Appendix A August 27,1999 Rev.41 The builaing tie lines have criticality coverage as described in PGDP document KY/G-578 " Criticality Accident Alarm Coverage of the Interbuilding Tie Lines at the Paducah Gaseous Diffusion Plant" Building C-333A has two clusters with overlapping coverage. Based upon this analysis, Building C-333-A has adequate permanent CAAS coverage for operation.
Building C-337A has om, cluster with overlapping coverage form C-337. Based upon this analysis, Building C-337A has adequate permanent CAAS coverage for operation.
Building C-360 has two clusters of overlapping coverage. Based upon this analysis, Building C-360 has adequate permanent CAAS coverage for operation.
Building C-400 has two clusters with some areas of overlapping coverage. Based upon this analysis, Building C-400 has adequate permanent CAAS coverage for operation.
Building C-409 has two clusters of overlapping coverage. Based upon this analysis, Building C-409 has adequate permanent CAAS coverage for operation.
Building C-710, a laboratory facility, has five clusters and Building C-720, a maintenance facility, has one cluster. C-720 has single cluster coverage only. As with all cluster units it has three detectors along with a functionally redundant logic module for sending input to the building alarm system. Based on this analysis, this is acceptable for current operations.
Building C-746-Q East, has one cluster and is used as a waste storage facility. As with all cluster units, each has three detectors along with a functionally redundant logic module for sending input to the building alann system. Based upon this analysis, Building C-746-Q East has adequate pennanen*. CAAS coverage for storage.
Therefore, the coverage requirement of criteria 1 has been met. The CAAS provides coverage of all these areas by selecting the setpoint for initiation in accordance with ANSI /ANS 8.3'. The coverage area is calculated based upon the setpoint of 9.5 to 10.5 mR/h.
The cluster units were designed to meet the requirement of one-half second response time. This requirement is verified by field testing to ensure system functionality. Figure 2.5-14a illustrates the method of initiating the building alarm horns from C-300 by placing the HORN CONTROL SWITCH in the ON position and by having the HORN PERMISSIVE SWITCH in the ON position. This meets Criterion 2 as specified in Sect. 2.5.1.1.
Once an individual cluster unit detects and outputs an alarm condition, the alarm signal is sealed in to prevent inadvertent reset when radiation levels return to less than alarm conditions. This can be seen by reviewing Fig. 2.5-6. The alarm is generated when the output from logic gates U3C 4011 and U3D 4011 or USC 4011 and USD 4011 cause transistor Q2 or Q3 to allow sufficient current through the K4 and K5 relays to initiate the alarm. Logic gates U3C 4011, U3D 4011, USC 4011, and USD 4011 are arranged in a " flip-flop" configuration (logic memory) that remains in the alarm state until the logic reset signal is generated either locally or from C-300. The building alarm horns are maintained in the alarm condition by the local cluster until the cluster unit is reset and the building horn is reset via the HORN CONTROL SWITCH being placed in the OFF position within C-300 (see Fig. 2.5-14a). The building alarm lights require reset at the respective building RAC. Therefore, all alarm circuits are sealed in once the initiation has occurred until a specific manual reset action has occurred. All of these devices can be reset from a remote location. Based on this review, the CAAS meets the intent of the requirements of Criterion 4 stated in Sect. 2.5.1.1.
As indicated in the description provided in Sect. 2.5.1.2.1, the clusters are equipped with a direct current (de) battery backup with a design rating of four hours upon loss of ac power to the cluster unit. This supply will supply sufficient power to all necessary componen:s within the system to actuate the building homs without ac power. In addition to being independent of electrical power, the building horns can operate for a minimum of two minutes. The two-mimne time frame is sufficient to meet the requirement stated in Sect. 4.4.1 of ANSI /ANS 8.3 that says the alarm signal is for immediate evacuation purposes only. This meets the requ rements of Criterion 5 as stated previously.
Criterion 6 states that the system shall be designed to preclude inadvertent iriitiation signals from being generated (i.e., false alarms) to the extent practical. This requirement has been met by prosiding a logic circuit that requires a mmunum of two detector channels to provide an alarm output to the logic board 2-15a
}
1 SAR-PGDP Chapter 4, Appendix A August 27,1999 Rev.41 A
simultaneously (ex wt when two detectors are already in a faulted condition). Individual component failures from the detector circuit to the building alarm system could cause spurious operation of the system. However, past operational history has shown this portion of the system to be reliable in preventing spurious alarms within the systere. Therefore, based upon the detection logic and past operational experience, the system I
configuration meets the applicable criterion.
Section 2.5.1.2.1 previously described the self testing capability of the individual detector channel by 1
the function of the LED light source within the assemblies. This meets the requirements for indication of system malfunctions for the detector channels (Criterion 7). In addition to this capability, the power supply circuits are monitored with appropriate alarm indication within C-300. In addition to the self n> wring of the system, periodic testing of the system is also performed to verify proper system operability.
Test circuits and switches are located throughout the system to allow for system verification.. The individual detector channels have their own test circuit along with the cluster logic module. The building alarm system can be tested by the HORN CONTROL SWITCH as previously described. Therefore, the system meets the testability requirement specified in Criterion 8.
As described in Sect. 2.5.2, all of the alarms and fault conditions are displayed in C-300. Section 2.5.2 gives a detailed evaluation of this requirement (Criterion 9) for the CAAS.
I Criterion 10 is one of the most difficult portions of the system to verify by analysis.
ANSI /ANS 8.3-1986, Sect. 4.4.1, requires that the alarm signal shall be for immediate evacuation purposes m]y and of sufficient volume and coverage to be heard in all areas that are to be evacuated. Paducah takes exception to this in permit-required confined spaces and cell housings associated with cells that are running.
In these areas a " buddy system"is used to ensure personnel working in these areas are notified of alarms in order to evacuate.
The following acceptance criteria were developed using approved industry standards and are used by p)
PGDP to verify compliance with ANSI /ANS 8.3,1986 CAAS audibility requirements:
- 1) Ensure the broadband CAAS alarm signal is at least 10 dB above the maximum expected broadband V
background noise. If this criterion cannot be met, go to step 2.
- 2) Ensure the 1/3 octave 500 Hz CAAS alarm signal is at least 13 dB above the maumum expected 1/3 octave 500 Hz effective masked threshold if this criterion cannot be met, go to step 3.
- 3) Expose a muumum of ten people, representing a cross section of the plant population's age and hearing capability, to the alarm signal and ensure each of the test subjects can hear the alarm signal.
This test is repeated five times and the results are satisfactory if each of the test subjects hear the signal each time they are exposed.
If any of the above criteria are met, the CAAS meets the CAAS audibility requirement of ANSI /ANS 8.3,1986.
PIP scport number PIP:45-89-0043, Improve Maintenance andMonitoring ofRadiation Alarm System",
documented that the present system could not be proven to meet Criterion 11. This section requires that the system remain operable in the event of a seismic shock equivalent to the site specific design basis earthquake or the equivalent value specified by the Uniform Building Code. The CAAS does not meet seismic qualifications. Specific exceptions to ANSI /ANS 8.3 criteria are listed in SAR Section 1.6.
2.5.1.4.a CAAS Safety Class Equipment and Instrumentation (Existing Configuration) l The CAAS is designated a safety system. The core of the CAAS is the radiation detection cluster unit, the alarm horn control box, and the local alarm hom which are installed throughout PGDP where fissionable material is handled and a non-trivial risk of a criticality exists. These devices must function in order to initiate a prompt evacuation of personnel from the area of detection in the event of an inadvertent criticality.
The following are the components of the CAAS which are identified as safety system components-building CAAS horns and lights (lights are not safety system components in C-710 and associated G/
facilities) 2-15b L
J
i SAR-PGDP Chapter 4, Appendix A August 27,1999 Rev.41 O
gamma criticality monitors (cluster):
three detectors, one common control panel; j
alarm hom control box (where applicable):
- one nitrogen regulator (where applicable),
two pressure switches (where applicable),
one air to nitrogen control valve (where applicable),
alarm cabinet (relay matrix):
e control relays (W, Y, and Z relays),
j local alarm homs.
2.5.1.4.b CAAS Safety Class Equipment and Instrumentation (New Configuration)
Volume 1, Section 3.15 details the boundary descriptions for the Criticality Accident Alarm System.
2.5.2 Central Control Facility Provisions and Features 2.5.2.1 System Description At the radiation alarm system console, the operator can identify cluster imits in an " ALARM" or
" TROUBLE" state, silence alarms, test and tum on building horns, and disable alarms.
The radiation alarm system console is located in C-300 (CCF). Portions of the radiation alarm system console front panel are shown in Fig. 2.5 15. Portion "A" of Fig. 2.5-15 is a plot plan that depicts the alarm indicators and controls associated with each cluster unit. Figure 2.5-16 shows a grouping ofindicator lights and control switches, all of which are common to the radiation alann system console. The functions of the components shown in Fig. 2.5-15, portions "A, " "B," and "C," are discussed below.
A group ofindicators and switches provide indications and controls for one cluster unit. This cluster unit plot plan is shown in portion "A" of Fig. 2.5-15.
1.
10-mR Alarm Light The red 10-mR light comes on, along with the console horn, when a criticality alarm signal is recen ed from the related cluster unit. After the alarm condition is over, this light is reset by pushing the CL RESET (cluster reset) switch, which turns off the 10-mR light and resets the logic in the cluster unit (see Sect. 2.5.1).
2.
Memory Light This light is part of the MEMORY /CL RESET combination as shown in Fig. 2.5-15, portion "A." When a criticality event signal is received, the red 10-mR and blue MEMORY lights come on and the red 2-R light comes on if conditions so warr;m. Reset of the 10-mR light is discussed in Item 1; however, after the criticality event is over and no alarm signal is being received from the chtster unit, the MEMORY light will remain ON until the console operator actuates the MEMORY RESET switch located in the common indicators and controls section (see Fig. 2.5-15, portion "B").
3.
CL (Cluster) Reset Switch The CL RESET switch is pushed to reset the logic in the cluster unit and turn off the 10-mR light at the radiation alarm system console when a criticality event is over.
2-16 i
l
f.
- SAR PGDP O
Chapter 4, Appendix A August 27,1999 Rev.41 AJ 4.a Cluster Trouble Light (Existing Configuration) l This light comes on when an abnormal condition is in the system. This indicates trouble at the 10-mR cluster, 2 R cluster, local horn control box, or other electrical system problems.
4.b. Cluster Trouble Light (New Configuration)
This light comes on when an abnormal condition is in the system. Tids indicates trouble at the 10-mR cluster, r==dator air system, or other electrical system problems.
5.
Buildmg Hom On This light indicates that the evacuation homs located in the building covered by the associated cluster unit have been tumed on from the control room by moving the hom control switch (CS-310 in Fig. 2.5-15, portion "A") to ON after the HORN PERMISSIVE switch (Fig. 2.5-15, portion "B"), located in the common indicators and controls section, has been turned ON.
6.
Building Horn Locked Out This light comes on when the console operator has disabled the circuit that energizes the building homs
- in the area covered by the associated cluster unit. The console operator disables the ham circuit by moving the horn control switch (Fig. 2.5-15, portion "A") to the OFF position.
7.
Horn Control Switch (CS-310 in Fig. 2.5-15, portion "A")
The horn control switch has three positions which are OFF, AUTO, and ON.. In the OFF position, the building homs are locked out as described in Item 5. In the AUTO position, the building horns and the red beacons are automatically tumed on in the area covered by the associated cluster unit when a criticality alarm is received from the cluster unit. In the ON position, building horns can be manually turned on in the area covered by the cluster unit if the HORN PERMISSIVE switch is in the ON position.
A group of indicators and switches located on the lower right side of the console provides common indications and controls for all cluster unit systems. These indicatars and controls are shown in Fig. 2.5-15, portion "B."
- The functions of these lights and switches are described below:
1.
Direct Current Power Failure A loss of 48 V de power to the system causes this light to come on.
2.
A'c Power Failure A loss of 120 V ac power causes this light to come on if 48 V de power is available.
1 3.
Horn Permissive On l
This light comes on when the HORN PERMISSIVE switch is moved to the ON position. In this
[
position, the console operator can tum on the building homs in the area covered by the associated cluster N
unit (s) by turning the hom control switch to ON.
2-17 f
L l
SAR-PGDP Chapter 4, Appendix A October 31,1998 Rev.29 4.
Hom Permissive Off This light comes on when the HORN PERMISSIVE switch is moved to the OFF position. In this condition, the console operator cannot turn on the building horns by positioning the horn control switch to ON.
5.
Hom Permissive This switch function was explained in Steps 3 and 4, 6.
Alarm Silence This switch silences the audible (bell, buzzer, etc.) alarm signals existing at the radiation alarm system console.
7.
System Test This switch turns on all annunciator alarms, console MEMORY lights, and audible alarms to test their electrical operation.
8.
Memory Reset The MEMORY light on the control, which indicates present or past existence of a criticality event, is not automatically tumed off when the criticality event is over and the criticality alarm signal no longer exists. The MEMORY light must be tumed off by the console operator using the key-operated MEMORY RESET switch.
If the building has an argon gammagraph alarm on the console, an alarm will sound and a light on the panel will indicate a radiation alarm when the Argon Gammagraph in the field senses radiation. A HIGH LEVEL RANGE RESET switch resets the alarm lights after a criticality event is over. The overall pictorial j
layout of the radiation alarm system console is shown in Fig. 2.5 16 and Fig. 2.5-17.
2.5.2.2 System Analysis The changes made for HAUP in the CCF were primarily to support the major additions oflocal clusters and their associated input to the building alarm system. The hazards involved were mainly of the electrical hazard. Some failure modes could be created within the CAAS. However, these are evaluated m Sect. 2.5.1.
Based upon this evaluation, no additional requirements were addressed.
2.5.2.3 Safety Features and Controls Although none of this equipment is specifically required to perform a function to detect and/or alarm should an actual criticality incident occur, the equipment connected to the system will be operated in such a manner as to ensure it does not prevent the required portions of the system from actuating should an alann actually be required.
1 As required, design features for safety, admmistrative controls, and surveillances were developed to support operation at enrichments up to 5.5 wt % 2"U. These safety features are listed below.
2-18
SAR-PGDP Chapter 4, Appendix A August 27,1999 O
Rev.41 G'
1 2.5.23.1 Text Debed 2.5.2.3.2.a Surveillance Requirements (Existing Configuration) l 2.
Annual verification of operability of the detector units shd be performed using a radiation source.
3.
Quarterly verification of local alann operability shall be performed. This testing shall include verification that nitrogen pressure is greater than 900 psig, battery test, and applying a back pressure on the check valve at the nitrogen / plant air interface to ensure operability of the check valve. The nitrogen system tests are not required where nitrogen backup is not required.
- 4. _ Quarterly verification of building alarm operability shall be performed. This testing shall include verification that nitrogen pressure is greater than 900 psig, battery test, and applying a back pressure on the check valve at the nitrogen / plant air interface to ensure operability of the check valve. The nitrogen system tests are not required where nitrogen backup is not required.
5.
An integrated' test of the entire CAAS shall be performed on an annual basis in accordance with ANSI /ANS 8.3, Sect 6.4.
2.5.2.3.2.b Surveillance Requirements (New Configuration) 2.
Annual verification of operability of the detector units shall be performed using a radiation source.
3.
Accumulator air pressure is greater than that necessary to sound the horns for at least two minutes, a battery test, and the horns are sounded to verify their functionality.
4.
An integrated test of the entire CAAS shall be perfonned on an annual basis in accordance with ANSI /ANS 8.3, Sect 6.4.
l tm
{
2-19 L
SAR-PGDP Chapter 4, Appendix A August 27,1999 Rev. 41 Table 2.5-1. Criticality clusters and building alarms (Existing Configuration) l Building Local Notes clusters / alarms C-310/310-A G and H Local horns with building horn.
)
C-331 J, K, L*, and Localhorns with building hom.
portable cluster (wheninstalled)
C-333 Z and AJ Local horns with building horn.
C-333-A AA and AB Local horns with buildin;;hom. Either cluster will also actuate building horas in C-333 C-335 A, B, C* *, AF, and Localhorns with building horn.
portable cluster (when installed)
C-337 T, U, V, W, X, Y, Local horns with building hom. Cluster N in C-and AK 337-A will actuate building homs in C-337 Clusters V and X in C-337 will also actuate a building horn in C-337-A C-337-A N
Local homs with building horn. Cluster N in C-337-A will actuate building 3 horns in C-337.
C-360 R and S Local horns with building horn.
C-400 D and E Local horns with building horn.
C-409 P and AE Local homs with building hom.
C-710 AM, AN, AP, AQ, Building horns.
AR C-746-0 AC and AD Local horns with building horn.
r 770 AL RniMim hnrn Portable cluster when installed in C-331 has alarm contacts in para'lel with cluster L.
Portable cluster when installed in C-335 has alarm contacts in parallel with cluster C.
O 2-20
SAR-PGDP Chapter 4, Appendix A August 27,1999 Rev,41 Table 2.5-la. Criticality clusters and building alarms (New Configuration)
Building Clusters / alarms Notes l
C-310/310-A G and H Building homs andlights.
l C 331 J, K, L*, and Building homs and lights. Clusters will also portable cluster actuate homs and lights associated with the C-(when installed) 331/335 tie line.
C-333 Z and AJ Building horns and lights. Either cluster will also actuate horns and lights at C-333A.
C-333-A.
AA and AB Building horns and lights. Either cluster will also actuate building horns and lights in C-333.
1 C-335 A, B, C", AF, and Building horns and lights. Clusters will also
- portable cluster actuate horns and lights associated with the C-(when installed) 331/335 tie line.
C-337 T, U, V, W, X, Y, Building horns and lights. Clusters in C-337 will and AK also actuate building horns and lights in l
C-337 A.
l O
C-337-A N
Building horns and lights. Cluster N in C-337-A will actuate building horns and lights in C 337 and horns associated with the C-337A/360 tie line.
C-360 R and S Building horns and lichte-l C-400 D and E Building homs and lights. Either cluster will also actuate building homs in C-420.
C-409 P and AE Building horns and lights.
l C-710 AM, AN, AP, AQ, Building horns.
l AR C-746-Q AC and AD Building horns and lights.
l
(*.770 AL hi1Aino hnrn l
Portable cluster when installed in C-331 has alarm contacts in parallel with cluster L.
Portable cluster when installed in C-335 has alarm contacts in parallel with cluster C.
i O
2-20a
SAR-PGDP Chapter 4, Appendix A August 27,1999 Rev.4I l
9' Blank Page 2-20b
oYE w>
yy;28e f
)
k._
r M~4*
=
r
~
,~r -
=
m
=
i 8 'b* J brL
=
N" At r
i
=
U I
=
- h*
- ;i la8 v
1f L
~b"U r
I
=
s.i d"-
+-
3 h'
J l,_
8 v
- s m
r e
=
I r
- OEU "z.
s:P s:_.
c 8
?f s
1 l.
fa8
.i i
- OEU 5
r
- s 4?
Ha 8 EU IO 3
s
=
r T
=
- OEU
- s
- s. e
=
I t
mt iOEU 8
=
- s la8 r
t l
-fEU s.
r
=
I EU E
-, 8
!O 8
l
=
- s r
r f
- OEU s
r s.
n e
=.
=
s 8
c.
.Ha 8 EU u
!O c
nt bEU
- M.
- s r
s.
/_
i r
Ha E iOEU m
=
T-
\\
8
=
- s r
e e
- bEU t
E m
e.i&
I iOEU bEu 4a nW'r e
n la s
8 r
j
=
iOEU i
e
- s I
t 8-s
.a8 r
l EU i
- s m
z.
.Ha 8 iOEU t
c 8
t
- s E
T r
?
- 0KU.
49
- s 4
r Ha 8 iOEU
=
8 iw r
.b7n.u
- =.
s.
l
=
._Ha 8 iOEU i
l 8-
,a E
r
-bEU
=
I
- s j
=
m8 iOEU t
=
c
._ '-, 8
- s 4G l
r r
EU r
l
- s g=mW-J
=
eO t
iOEU 28
=
la8 s
- s r
r H
.bEU I
t iOEU t
=
om m
e l
e
/.
m 2_
E8E ] { g~ 5 a a e a-B-mUK E g. E
, \\
SAR-PGDP Chapter 4, Appendix A August 27,1999 Rev.41 pa>
1 v4 O
r 11 lo=a1 l'"I
(
i "I, b
to=T I -it
!! io=T 1
- l!!
]I 11 emT
- !$'I 3mT 1
- i$'I k-1.
Il le=T
-lij, 1
i le=T, i
1 lo"T 1.
p1.'F[F"I 1
il I
11 lo"I l"
l 1,
I! b((iF5T 1
lo=T l
i 1
E C.le=a 9
1.
Il pareT
.4
!! to=T g
1 qi i
1 11 i
f[P"
~l!
p[i pmT g
- I pgymT 1-ij 11 lost l' !
l-E F=T 1
ll-la a
!a= r
-lQ io 1,
r 1
i le=T1 j!
! DEpa r 1.
Il Eg3 r
1-1 to-,1, 1
-4
!!d--6 Il 1 a e-T l
iii
!alaJg
\\
le"I:
I~"I, 3
Fig 2.5-la. Criticality accident alarm system block diagram. (New Configuration) 2-22
1 i
SAR PGDP Chapter 4, Appendix A August 27,1999 Rev. 41 g
o u --
i V
I W
ai-n
\\
j
s h
t l
j
[
{
i o
L
- n. e.s e.s e.s
.u i
s
,i
. : =
- "Y=:_ g i
.- /
f 5
3 I
j j
f '.
C C C 2 2 2 4
a i
Z : C C I j
.s.
i i
_g -
e m
_,_ c
_n n
i g_ _
a L
J g4 g-e.,Lemnid 7/Fil t., L - J ~g [/w s
3
+
H
_.m
,,u m,a, 2,2
-m e
m.,.
c.
~ [{ I"thi t
I w] =
N
~
ll '
l t
E f l
le, t.
g,d_I.1..k dlLlb f r
i l$
'1 E.~o D % '*=e @ g,
C3
-Ex\\
o I
i i -..,
1-Sri
( EE E3 R Y*C g~kp
~
~
j l
3 N
L E g.
d i'
N r ats L
l E Tl E-I i
I ym a t
""~'" ]
E E
- 'M an g
- [
E u.
~
C
%,4 s-m i..g.
i l
T,J J,j
)
f C
w cwsret see avvo<
1 O EXISTING fWt00N
.T - ^- W O CAAS CONSOLE Nb5 (N EM$
{
d Fig 2.5-2. Criticality accident alarm system cluster locations.
2-23
$1
SAR PGDP Chapter 4, Appendix A April 15,1998 Rev.24 O
Blank Page l
l i
I l
O 2-24
. SAR PGDP Chapter 4, Appendix A August 27,1999 Rev. 41 O
LOCAL HORN LOCAL CONTROL BOX
- -______=__:
S KET L.
J TB l
l TEST l I
S 4 KEY SW.
- ON
- O2 l l
/
l hl l
VA 1 l
4 ot lI
!l
- PLANT,
\\
OFF n
AIR (RESET) u 1 41 I s.
I l2 e
I ty S5A gg
'I L
-)
G g PNEUMATIC LINE A
NITROGEN CYLINOER N2 iin usnuus O
Fig 2.5-10. Local horn control box electrical schematic. (Existing configuration, New configuration will remove Local horn control box.)
2-39 L..
SAR PGDP Chapter 4, Appendix A April 15,1998 Rev.24 i
\\
Blank Page I
O 2-40 J
SAR PGDP Chapter 4, Appendix A August 27,1999 Rev.41 l
' 'r.
i i
i
,/~
LOCAL {(T' j
'i '? -
HORN
/
tl g
=e -
CLUSTER [
g g' : -
UNITm 3i
'G G G
/
4
.[
f f.
, i';
y
?
1 Q :
U-
^
,@i'sM. -;,. ;A%.
,.,.. U/ s%
.s
.8 i
?: t9 i
CM i
l1 i
';.: t l
i
_l J.
I LOCAL 1
'.' *s '
I
. HORN CONTROL BOX 5:'.:
l
(
J i--
.k' e
.:s:
Lll
'..7i.;..
.s'
? b i
r i
.:. ?
- s D 3 NITROGEN
. I '5!!
7*.
'[
I d
- ~ CYLINDER W.
hed
. 1 rmeA4. i-esAu TmeALwAu.
INSTALLATaoM INSTALLATION
- stavATion -
- Lan sios ssCTION =
h Fig 2.5-11. Installation details oflocal horn alarm system for air operated alarm horns.
V (Existing configuration, New configuration will remove Local horn alarm system.)
l 2-41
I Chapter 4, Appendix A April 15,1998
~
24 9
O' 2-42 J
1 SAR-PGDP Chapter 4, Appendix A August 27,1999 RAC 41 (w'
i r-------_------,
IM IM 10m DETECTOR DETECTOR DETECTOR I
[ CLUSTER UNIT l
CHMEL CHAEL CilHEL I
I I
I LOGIC WHERE-I m
I gnpyy PLANT AIR AP LICABLE 7, _
L__-.___
__ __ _ J VA-1 1N l
)
IBBC:
LOCAL HORN-----I h I
(L) RADIATIM(UNI DEIET CONTROL B0X e.__a LOCAL HORN (RASC) RADIATIM AURI SYSTEM CWSulf
~
NITROGEN Ye 120.VAC R
sBUILDING d h (L) '
l'8 I
BEACONS
.'. '8LDB LIGHTS l R
Z V Fd d y RESET' Y
O C0 K CTION FROM V
OTER CLUSTER LNITS I
d)
\\p Z 120VAC2 ld BWM HORNS (SAS_C)
I g~
i sna c,
jij I " PERMISSIVE SQ_.
l f0TTl
+48Vli 20 i sic l
l+48V --o ! c !GN " PERM. ON" W
}
I d
l l
H h v b 4 }- - - - -
tai l
l Ma HORN " PERM. OFF" A
SET I
C i
'QX
'--' HORN.
CONTROL SWITCH NOTE: TITLES SHOWN IN "
" ARE LABELS VISIBLE ON THE PANELS OR COMPONENTS Fig 2.5-14. Simplified schematic of horn / beacon control circuit. (Existing Configuration) l 2-47 L-
SAR-PGDP Chapter 4, Appendix A August 27,1999 RAC 41 O
is uut is uut is amt DETECTOR DETECTOR DETECTOR CHANNEL CHANNEL CHANNEL h
CLUSTER UNIT LD mc ALARM MATRIK
$,ulLDfNe Y2 120 VAC I
DEACONS LEGEND:
b (L) RADRYlON ALARM CASINET
- SGO (RASC) RADETION ALARM g
SYSTEM CONSOLE RESET" i v p-y sun.DWo ELECTRONIC h
HORNS CONNECTION FROM OTHER CLUSTER UNITS 120 VAC
/
BUILDWG 126 C
\\
H s_..
PRESSURE IM#
C 150 PS40 no,
,ggy l ACCU LATORS HORN " PERM. ON"
-oY (RASC)
+48Vl H
4 LDO.
HO ERM 0FF= b HORN ESeT N
HORN CONTROL SWITCH NOTE: TITLES SHOWN W *
- ARE LABELSVISIBLE ON THE PANELS OR COMPONENTS Fig 2.5-14a. SimpliGed schematic of horn / beacon control circuit. (New Configuration) 2-48 1
1
)
SAR-PGDP April 15,1998 Rev.24 Each completed NCSA is issued as a controlled document. The permanent NCSAs are maintained in a controlled manual which is issued to the personnel who need access to the NCSAs. The temporary NCSAs are issued to the appropriate personnel performing the temporary operation. Approved NCSEs/NCSAs are quality records and are handled according to the plant's Document Control and Records Management Program described in Section 6.10.
The NCSA/NCSE process provides assurance that operations will remain suberitical under both normal and credible abnormal conditions. Any operations that do not comply with the double contingency principle are documented in NCSEs and Section 4.4
'Ihere are three operations which do not meet the double contingency principle. These are product cylinder operations, operation of the enrichment cascade, and removal of large cascade equipment (e.g.,
compressor, convertor, G-17 valve, etc). These operations have been evaluated to be safe and are described in the accident analysis. Summaries of the accident scenarios associated with the operation of the ocnt cascade and the removal of enrichment cascade equipment are presented in SAR Section 4.4.1.1. The accident scenarios associated with UF. product cylinder operations are discussed in SAR Section 4.4.3.4.
Additional details concerning the accident scenarios associated with these three operations are provided in Appendix A to SAR Chapter 4 The System Safety Analysis (SSA) for the PGDP Higher Assay Upgrading Project. Sections 2.6.2.3,2.6.2.7.9, and 2.9 of the SSA specifically j
discuss the operation of the enrichment cascade and maintenance activities associated with removal and servicing of enrichment cascade equipment. Sections 2.6.2.5 and 2.6.2.6 of the SSA discuss the UF, product withdrawal facilities and cylinder handling requirements.
There are TSRs to ensure controls are in place for those operations identified above which do not meet double w-Py. Sections 2.4 and 2.5 of the TSRs list controls for operation of the enrichment cascade'and for removal and maintenance of enrichment cascade equipment, respectively. Section 2.3 of the TSRs provides the controls associated with ensuring moderation ' control for the product cylinders.
New operations and operations other than those identified as not meeting the double contingency principle in Section 4.4 shall comply with the double contingency principle. In the event future operations are found to not comply with the double contingency principle, Section 4.4 will be n:odified to address this issue and will be reviewed and approved as described in Section 6.3.
i Emergencies arising from unforeseen circumstances can present the need for immediate action.
If NCS expertise or guidance is needed immediately to avert the potential for a criticality accident, direction will be provided verbally or in writing. Such direction can include a stop work order or other appropriate instructions. A NCSA or other form of documentation will then be prepared to justify the actions taken once the emergency condition has been stabilized. This documentation shall be prepared within 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> following the stabilization of the emergency condition.
nQ 5.2-5 Li
SAR-PGDP August 27,1999 Rev. 41 5.2.2.4 Design Philosophy and Review Designs of new fissile material equipment and processes must be approved by the NCS Section before implementation and will include the use of favorable geometry or engineered controls on mass, moderation, volume, concentration, interaction, or neutron absorption, as the preferred approach over the use of administrative controls. Advantage will be taken for the nuclear and physical characteristics of process equipment and materials provided control is exercised to maintain them.
The preferred design approach includes two goals. 'Ihe first is to design equipment with NCS independent of the amount of internal moderation or fissile concentrations, the degree of interspersed moderation between units, the thickness of reflectors, the fissile material density, and the fissile material chemical form. The second is to minimize the possibility of accumulating fissile material in inaccessible locations and, where practical, to use favorable geometry for those inaccessible locations. The adherence to this approach is determined during the preparation and technical review of the NCS evaluation performed to support the equipment design. This preferred design approach is implemented through adherence to plant NCS procedures.
Fissile material equipment designs and modifications are reviewed to ensure that favorable geometry and engineered controls are used to advantage. Administrative limits and controls will be implemented in NCSAs to satisfy the double contingency principle for those cases where the preferred design approach cannot be met.
5.2.2.5 Criticality Accident Alarm System Coverage A CAAS is provided to alert personnel if a criticality accident should occur. The system utilizes a distinctive audible signal to notify personnel in the affected area and initiate evacuation, thereby reducing personnel exposure to emitted radiation. Audibility is not provided in permit-required confined spaces and cell housings associated with cells that are running. In these areas a " buddy system" is used to ensure personnel working in these areas are notified of alarms in order to evacuate.
At PGDP, the CAAS detects gamma dose rate. The system uses clustered detectors. Each cluster contams three scintillation detectors. Activation of any two of the three detectors in a cluster will initiate evacuation alarms. The failure of any major component of the system will result in a notification that indimw the need for corrective maintenance. A more detailed discussion of the physical function of the CAAS system is provided in Section 3.12.6.
Operations involving fissile material are evaluated for NCS prior to initiation. The need for CAAS coverage is considered during the evaluation process. Coverage is provided unless it is determined that coverage is not required and that fmding is documented in the NCSE. For example, areas containing no more than 700 g of"U,50 g of SU in any square meter of floor or ground area,5 g of"U in any 10-liter volume, or areas having material that is either packaged and stored in compliance with 10 CFR 71 or specifically exempt according to 10 CFR 71.10, can be shown by evaluation not to require alarm coverage. Areas that do not contain any operations involving uranium enriched to I wt % or higher "U and 15 g or more of"U do not require an NCSE and are not required to have CAAS coverage. 10 CFR 76.89(a) authorizes USEC to " describe for the approval of the Commission defined areas to be excluded from the monitoring reqmrement." This submittal to the NRC "must describe the measures that will be used to ensure against criticality including kinds and quantities of material that will be permitted and 5.2-6
TSR-PGDP August 27,1999 Rev.41
- y LIST OF EFFECTIVE PAGES Pages Revision Eaggi Revision il 41 2.1-24 41 lii 41 2.1-25 41 iv 41 2.1-26 41 y
11 2.1-26a 41 vi 5
2.1-26b 41 vil 5
2.1-26c 41 viii 34 2.1-27 5
ix 5
2.1-28 5
)
x 5
2.1-29 5
xi 5
2.1-30 5
xii 5
2.1-31 5
2.1-32 5
1.0-1 5
2.1-33 5
1.0-2 11 2.1-34 5
1.0-3 11 2.1-35 5
1.0-4 11-2.1-36 5
1.0-5 11 2.1-37 5
1.0-6 11 2.1-38 5
1.0-7 11 2.1-39 5
1.0-8 11 2.1-40 5
1.0-9 11 2.1-41 5
O-2.1-42 5
2.0-1 5
2.1-43 5
2.1-44 5
2.1-1 5
2.1-45 16 2.1-2 5
2.1-46 5
2.1-3 5
2.1-47 36 2.1-4 7
2.1-48 5
2.1-5 5
2.1-49 5
2.1-6 5
2.1-50 7
2.1-7 13 2.1-51 5
2.1-8 5
2.1-52 5
2.1-9 5
2.1-10 12 2.2-1 5
2.1-11 5
2.2-2 5
2.1-12 5
2.2-3 7
2.1-13 23 2.2-4 5
2.1-14 23 2.2-5 5
2.1-15 23 2.2-6 13 2.1-16 23 2.2-7 5
2.1-17 5
2.2-8 5
2.1-18
'5 2.2-9 12 2.1-19 5
2.2-10 5
2.1-20 12 2.2-11 5
2.1-21 5
2.2-12 26
.,A 2.1-22 6
2.2-13 5
().
2.1-23 5
2.2-14 5
ii
TSR-PGDP August 27,1999 Rev. 41 q
LIST OF EFFECTIVE PAGES (Continued)
(/
Eagts Revision Eagc1 Revision 2.2-15 6
2.3-22 41 2.2-16 5
2.3-22a 41 2.2-17 41 2.3-22b 41 2.2-18 41 2.3-23 12 2.2-18a 41 2.3-24 5
)
2.2-18b 41 2.3-25 5
l 2.2-18c 41 2.3-26 5
2.2-19 33 2.3-27 5
2.2-20 5
2.3-28 5
2.2-21 5
2.3-29 5
2.2-22 5
2.3-30 5
2.2-23 5
2.3-31 5
2.2-24 5
2.3-32 5
2.2-25 5
2.3-33 5
2.2-26 5
2.3-34 5
2.2-27 5
2.3-35 5
2.2-28 5
2.3-36 5
2.2-29 5
2.3-37 5
2.2-30 16 2.3-38 5
2.2-30a 33
'2.3-39 5
g 2.2-30b -
18 2.3-40 5
y) 2.2-31 10 2.3-41 5
2.2-32 5
2.3-42 5
2.2-33 5
2.3-43 5
2.2-34 5
2.3-44 5
2.3-45 5
2.3-1 5
2.3-46 16 2.3-2 5
2.3-47 36 4
2.3-3 5
2.3-48 5
2.3-4 34 2.3-49 5
2.3-5 34 2.3 50 12 2.3-6 34 2.3-51 5
2.3-7 12 l
2.3-8 5
2.4-1 5
2.3-9 5
2.4-2 5
2.3-10 5
2.4-3 5
2.3-11 5
2.4-4 7
2.3-12 5
2.4-5 5
2.3-13 5
2.4-6 5
2.3-14 5
2.4-7 5
2.3-15 5
2.4-8 5
2.3-16 5
2.4-9 5
2.3-17 5
2.4-10 5
2.3-18
.5 2.4-11 5
2.3-19 37 2.4-12 12
(^
2.3-20 32 2.4-13 5
(
2.3-21
'41 2.4-14 5
iii
TSR-PGDP August 27,1999 Rev. 41 q
LIST OF EFFECTIVE PAGES (Continued)
V Eaggs Revision Eaggs Revision 2.4-15 5
2.6-1 5
2.4-16 5
2.6-2 5
2.4-17 22 2.6-3 33 l
2.4-18 5
2.6-4 6
2.4-19 41 2.6-5 29 2.4-20 41 2.6-6 41 2.4-20a 41 2.6-7 41 2.4-20b 41 2.6-8 41 2.4-20c 41 2.6-9 41 2.4-21 5
2.6-10 41 2.4-22 5
2.6-11 41 2.4-23 5
2.4-24 5
3.0-1 5
2.4-25 28 3.0-2 39 2.4-26 5
3.0-3 14 2.4-27 5
3.0-4 5
2.4-28 5
3.0-5 5
2.4-29 5
3.0-6 5
2.4-30 5
3.0-7 5
2.4-31 5
3.0-8 5
2,4-32 5
3.0-9 39 s'
2.4-33 5
3.0-10 19 2.4-34 5
3.0-11 5
2.4-35 5
3.0-12 5
2.4-36 5
3.0-13 5
2.4-37 5
3.0-14 5
2.4-38 5
3.0-15 5
2.4-39 5
3.0-16 5
2.4-40 5
2,4-41 17 2.4-42 17 2.4-43 17 2.4-44 5
2.4-45 5
2.4-46 5
2.4-47 5
2.5-1 5
2.5-2 5
2.5-3 11 2.5-4 11 2.5-5 11 2.5-6 11 2.5-7 5
2.5-8 5
2.5-9 5
iv
TSR-PGDP August 27,1999 Rev.41 SECTION 2.1 SPECIFIC TSRs FOR TOLL TRANSFER AND SAMPLING FACILITY (C-360) 2.1.4 GENERAL LIMITING CONDITIONS FOR OPERATION 2.1.4.5 CRITICALITY ACCIDENT ALARM SYSTEM LCO 2.1.4.5b: Criticality accident alarm shall be operable (audible).
APPLICABILITY:
In areas where the maximum foreseeable absorbed dose in free air exceeds 12 rad, except areas in permit-required confined spaces. This LCO is applicable when the new criticality accident alarm system supplied by air accumulators is operable.
ACTIONS:
Condition Required Action Completion Time l
A. Area does not have an A.1 Implement the following for areas, equipment, or immediately audible criticality processes where a criticality accident could result accident alarm.
in a manmum foreseeable dose exceeding 12 rad in the area of inaudibility and LCO 2.1.4.5a applies.
A.l.1 Discontinue movement of cylinders containing UF, enriched to 2 I wt % "U.
M A.I.2 Complete the current transfer and/or sampling operation and place transfer or sampling autoclaves processing cylinders containing UF, enriched to k I wt % "U in Mode 2.
M A.I.3 Roll cylinders containing UF, enriched to 2 I wt
% "U with valves not in the 12 o' clock position to place the cylinder valve in the 12 o' clock position..
M.
A.I.4 Discontinue movement of uranium enriched to 2 I wt % "U.
M A.2.1 Evacuate area ofinaudibility applicable to this Immadi*1y LCO.
M A.2.2 Restrict access to area evacuated in A.2.1.
M A.3 Provide personnel allowed into the area that immediately would be restricted under Action A.2.1 with an alternate menne of criticality alarm notification, such as a device that will alarm on sensing a 10mr/hr dose rate, or a radio in constant communication with the Central Control Facility.
B. Area does not have an B.1 Restore criticality accident alarm to operable Prior to reinitiating audible criticality status.
activities TSR 1.6.2.2d is not applicable.
2.1-24
TSR-PGDP August 27,1999
'Rev. 41 SECTION 2.1 SPECIFIC TSRs FOR TOLL TRANSFER AND SAMPLING
(
FACILITY (C-360) 2.1.4 GENERAL LIMITING CONDITIONS FOR OPERATION l
l 2.1.4.5 CRITICALITY ACCIDENT ALARM SYSTEM (continued) l l
SURVEILLANCE REQUIREMENTS:
Surveillance Frequency l
SR 2.1.4.5b-1 Test the CAAS and building horns.
Quarterly l
SR 2.1.4.5b-2 Verify that the CAAS air accumulators supply Quarterly l
pressure to the building horns is at least 125 l
Psig.
l SR 2.1.4.5b-3 Verify that the condition of the battery Annually l
backups to the electronic horns is sufficient to l
power the horns for at least 120 seconds.
l 1
BASIS:
l l
The CAAS is used to warn plant personnel of a criticality or radiation accident. This system l
is designed to detect radiation and provide a distinctive, audible signal which will alert personnel l
to move from those work areas which are potentially affected. Audibility is not provided for l
areas in permit-required confined spaces. A " buddy system" is used to ensure personnel working l
in these areas are notified of alarms in order to evacuate. One person remains outside the area l
and maintains communication with personnel in the area. Evacuation of the area of inaudibility l
and restricting access to those areas will eliminate the potential for increased consequences due l
)
to personnel not hearing an alarm. The design of the system, three detection modules per l
cluster, provides protection for criticality events even with partial losses of required equipment.
l The CAAS provides detection coverage in most areas by using an overlapping pattern of l
individual cluster units.
Criticality concerns with the C-360 facility are associated with l
movement of fissile materials. The action items maintain the facility in steady state operations l
to limit the potential for these concerns to the extent possible. The alarm signal is provided by l
sounding building horns which sound upon a signal from any cluster. Providing another means l
of coverage (i.e., portable detector / alarm, personal alarm device, etc.), restricting operations, l
or restrictmg access to the area in the event of the loss of alarm will establish protection. [SAR l
Chapter 4, Appendix A, Section 2.5.1.1.2, SAR 5.2.2.5, ANSl/ANS 8.3]
l I
The CAAS air accumulators provide for 120 seconds of horn actuation when at their minimum l
acceptable pressure of 125 psig. Electronic horns are also installed in some areas. These horns have battery backup power supplies which will provide for at least 120 seconds of horn actuation I
even if off-site power is lost.
l q
l (J
2.1-25
TSR-PGDP August 27,1999 Rev.41 SECTION 2.1 SPECIFIC TSRs FOR TOLL TRANSFER AND SAMPLING FACILITY (C-360) 2.1.4 GENERAL LIMITING CONDITIONS FOR OPERATION l
l 2.1.4.5 CRITICALITY ACCIDENT ALARM SYSTEM (continued) l l
BASIS (continued):
l l
Requiring the cylinders be rotated to place the cylinder valve in the 12 o' clock position ensures l
that if the outage continues long enough that UF. solidifies in the affected cylinder (s), the l
cylinder valve will be above the surface of the solid.
l l
The quarterly surveillance of the CAAS building horns consists of placing the cluster in the test
[
mode with a keyswitch, and manually causing two detector modules to generate radiation l
readings above the alarm setpoint. The cluster electronics determines that this meets the high l
radiation alarm criteria and propagates a high radiation alarm signal to the rest of the system.
l This signal activates the high radiation alarm light and bell in C-300 and activates the building l
CAAS horns and lights. Each horn and light is qualitatively verified to be operating. This test l
is a horn and light functional test and each module combination is tested to generate the high l
radiation signal.
l O
4 1
0 2.1-26 l
TSR-PGDP August 27,1999 Rev. 41 SECTION 2.1 SPECIFIC TSRs FOR TOLL TRANSFER AND SAMPLING
(
FACILITY (C-360) 2.1.4 GENERAL LIMITING CONDITIONS FOR OPERATION 2.1.4.5 CRITICALITY ACCIDENT ALARM SYSTEM LCO 2.1.4.5c: Criticality accident alarm shall be operable (audible).
l APPLICABILITY:
In areas where the maximum foreseeable absorbed dose in free air exceeds 12 rad and the new system described in LCO 2.1.4.5b has not l
been declared operable.
l ACTIONS:
Condition Required Action Completion Time A. Area does not have an A.1 Implement the following for areas, equipment, or immediately audible criticality processes where a criticality accident could result
{
accident alarm.
in a maximum foreseeable dose exceeding 12 rad in the area ofinaudibility and LCO 2.1.4.5a applies.
A.I.1 Discontinue movement of cylinders containing UF, enriched to 21 wt % *U.
M O
A.I.2 Complete the current transfer and/or sampling operation and place transfer or sampling i
autoclaves processing cylinders containing UF, enriched to a I wt % SU in Mode 2.
M A.I.3 Roll cylinders containing UF, enriched to 2 I wt
% "U with valves not in the 12 o' clock position j
to place the cylinder valve in the 12 o' clock position.
M A.I.4 Discontinue movement of uranium enriched to 2 I wt % SU.
M A.2.1 Evacuate area ofinaudibility applicable to this immediately LCO.
i M
A.2.2 Restrict access to area evacuated in A.2.1.
ANil A.3 Provide personne! 4llowed into the area that i m m M iately wold be resnicted under Action A.2.1 with an altewie means of criticality alarm notification, such as a device that will alarm on sensing a 10mr/hr dose rate, or a radio in constant communication with the Central Control Facility.
B. Area does not hav: an B.1 Restore criticality accident alarm to operable Prior to reinitiating audible criticality satus.
sctivities g
(
accident alarm.
l L
TSR 1.6.2.2d is not applicable.
2.1-26a u
TSR-PGDP August 27,1999 Rev.41-SECTION 2.1 SPECIFIC TSRs FOR TOLL TRANSFER AND SAMPLING FACILITY (C-360)
' 2.1.4 ' GENERAL LIMITING CONDITIONS FOR OPERATION
- 2.I.4.5 CRITICALITY ACCIDENT ALARM SYSTEM (continued)
SURVEILLANCE REQUIREMENTS:
Surveillance Frequency SR 2.1.4.5c-1 Test the CAAS, local cluster horns and Quarterly l
building horns.
SR 2.1.4.5c-2 Verify that the nitrogen supply pressure to the Quarterly l
cluster horns is at least 900 psig.
BASIS:
The CAAS is used to warn plant personnel of a criticality or radiation accident. This system is designed to detect radiation and provide a distinctive, audible signal which will alert personnel to move from those work areas which are potentially affected. Evacuation of the area of inaudibility and restricting access to those areas will eliminate the potential for increased consequences due to personnel not hearing an alarm. The design of the system, three detection modules per cluster, O
provides protection for criticality events even with partial losses of required equipmem. The
- CAAS provides detection coverage in most areas by using an overlapping pattern of individual cluster units. Criticality concerns with the C-360 facility are associated with movement of fissile materials. The action items maintain the facility in steady state operations to limit the potential
- for these concerns to the extent possible. The alarm signal is provided by sounding a local horn associated with each individual cluster and building horns which sound upon a signal from any cluster. Providing another means of' coverage (i.e., portable detector / alarm, personal alarm device, etc.), restricting operations, or restricting access to the area in the event of the loss of alarm will establish protection. [SAR Chapter 4, Appendix A, Section 2.5.1.1.2, SAR 5.2.2.5, ANSI /ANS 8.3]
JIhe nitrogen bottles which backup plant air for the local cluster horns are standard cylinder size 8
1A (1.55 ft, 9 x 51 inches) and provide for 120 seconds of horn actuation when at their minimum acceptable pressure of 900 psig.
' Requiring the ' cylinders be rotated to place the cylinder valve in the 12 o' clock position ensures that if the outage continues long enough that UFisolidifies in the affected cylinder (s), the cylinder valve will be above the surface of the solid.
The quarterly surveillance of the CAAS,' local cluster horns and building horns consists of placing the cluster in the test mode with a keyswitch, and manually causing two detector modules to q
generate radiation readings above the alarm setpoint. The cluster electronics determines that this j'
meets the high radiation alarm criteria and propagates a high radiation alarm 2.1-26b l
TSR-PGDP ~
August 27,1999 Rev.41 n
SECTION 2.1 SPECIFIC TSRs FOR TOLL TRANSFER AND SAMPLING
\\J -
FACILITY (C-360) 2.1.4 GENERAL LIMITING CONDITIONS FOR OPERATION 2.1.4.5 CRITICALITY ACCIDENT ALARM SYSTEM (continued)
BASIS (continued):
signal to the rest of the system. This signal activates the high radiation alarm light and bell in C-300, causes the local cluster to sound and activates the building CAAS horns and lights. Each horn and light is qualitatively verified to be operating. This test is a horn and light functional test and each module combination is tested to generate the high radiation signal.
O o
b/
2.1-26c
TSR-PGDP August 27,1999 Rev. 41 SECTION 2.2 O
SPECIFIC TSRs FOR UF, FEED FACILITIES (C-333-A AND C-337-A) 2.2.4 GENERAL LIMITING CONDITIONS FOR OPERATION 2.2.4.3 CRITICALITY ACCIDENT ALARM SYSTEM (continued)
LCO 2.2.4.3b:
Criticality accident alarm shall be operable (audible).
APPLICABILITY:
In areas where the maximum foreseeable absorbed dose in free air exceeds 12 rad, except areas in permit-required confined spaces. This LCO is applicable when the new criticality accident alarm system supplied by air accumulators is operable.
' ACTIONS:
Condition Required Action Completion Time l
A. Area does not have A.1 Implement the following for areas, Immediately an audible criticality equipment, or processes where a criticality accident alarm.
accident could result in a maximum foreseeable dose exceeding 12 rad in the area of inaudibility and LCO 2.2.4.3a or 2.4.4.2a applies.
A.1.1 Discontinue movement of cylinders containing UF, enriched to 2 I wt % "U.
O M
A.I.2 Place autoclaves processing cylinders containing UF enriched to 21 wt % "U in Mode 2.
M A.1.3 Perform Required Actions A.I.1 through A.I.6 of TSR 2.4.4.2b.
M A.1.4 Discontinue movement of uranium enriched to 2 1 wt % "U.
Immediately A.2.1 Evacuate area ofinaudibility applicable to this LCO.
M A.2.2 Restrict access to area evacuated in A.2.1.
Immediately M
A.3 Provide personnel allowed into the area that would be restricted under Action A.2.1 with an alternate means of criticality alarm notification, such as a device that will alarm on sensing a 10 mr/hr dose rate, or a radio in constant communication with the Central Control Facility.
B. Area does not have B.1 Restore criticality accident alarm to Prior to i
an audible criticality operable status.
reinitiating O-accident alarm.
activities TSR 1.6.6.2d is not applicable.
2.2-17 j
v TSR-PGDP.
August 27,1999
'Rev.41' SECTION 2.2 SPECIFIC TSRs FOR UF, FEED FACILITIES (C-333-A AND j
C-337-A) 2.2.4 GENERAL LIMITING CONDITIONS FOR OPERATION
' 2.2.4.3 CRITICALITY ACCIDENT ALARM SYSTEM (continued)
SURVEILLANCE REQUIREMENTS:
Surveillance Frequency l
SR 2.2.4.3b-1 Test the CAAS and building horns.
Quanerly l
SR 2.2.4.3b-2 Verify that the CAAS air accumulator supply Quarterly pressure to the building horns is greater than or equal to that necessary to sound all building horns for at least 120 seconds based on the number of accumulators in service. (Note: The air accumulator supply for C-333-A is in C-333 and the supply for C-337-A is in C-337.)
- Number of accumulatars in service Minimum oressure 4
137 psig 3
143 psig BASIS:
The CAAS is used to warn plant personnel of a criticality or radiation accident. This system is designed to detect radiation and provide a distinctive, audible signal which will alert personnel to move from those work areas which are potentially affected. Audibility is not provided for areas in permit-required confined spaces. A " buddy system" is used to ensure personnel working in
' these areas are notified of alarms in order to evacuate. One person remains outside the area and maintains contact with personnel in the area. Evacuation of the area of inaudibility and restricting access to those areas will eliminate the potential for increased consequences due to personnel not
-hearing an alarm. The design of the system, three detection modules per cluster, provides protection for criticality events even with-partial losses of required equipment. The CAAS provides detection coverage in most areas by using an overlapping pattern of individual cluster units. Criticality concerns with the feed facilities are associated with movement of fissionable materials. The action items maintain the facility in ' steady state operations to limit the potential for these concerns to the extent possible. The alarm signal is provided by sounding building horns which sound upon a signal from any cluster. Providing another means of coverage (i.e., portable b=W/ alarm, personal alarm device, etc.), restricing operations, or restricting access to the area in the event of the loss of alarms will establish protection. [SAR Chapter 4,- Appendix A, Section
~ 2.5.1.1.2, SAR 5.2, ANSI /ANS 8.3]
i O
2.2 18
{
9
TSR-PGDP August 27,1999 Rev.41 c
SECTION 2.2 SPECIFIC TSRs FOR UF, FEED FACILITIES (C-333-A AND C-337-A) 2.2.4 GENERAL LIMITING CONDITIONS FOR OPERATION 2.2.4.3 CRITICALITY ACCIDENT ALARM SYSTEM (continued)
BASIS (continued):
The CAAS air accumulators provide for 120 seconds of horn actuation when at their minimum acceptable pressure based on the number of accumulators in service. The air accumulator supply for C-333-A is in C-333 and the supply for C-337-A is in C-337.
The quarterly surveillance of the CAAS building horns consists of placing the cluster in the test mode with a keyswitch, and manually causing two detector modules to generate radiation readings above the alarm setpoint. The cluster electronics determines that this meets the high radiation alarm criteria and propagates a high radiation alarm signal to the rest of the system. This signal activates the high radiation alarm light and bell in C-300 and activates the building CAAS horns and lights. Each horn and light is qualitatively verified to be operating. This test is a horn and light functional test and each module combination is tested to generate the high radiation signal.
O nU 2.2-18a L
y TSR-PGDP August 27,1999 Rev.41 SECTION 2.2 SPECIFIC TSRs FOR UF, FEED FACILITIES (C-333-A AND
-(
C-337-A) 2.2.4 GENERAL LIMITING CONDITIONS FOR OPERATION 2.2.4.3 CRITICALITY ACCIDENT ALARM SYSTEM (continued)
LCO 2.2.4.3c: Criticality accident alarm shall be operable (audible).
l APPLICABILITY:
In areas where the maximum foreseeable absorbed dose in free air exceeds 12 rad and the new system described in LCO 2.2.4.3b has not been declared operable.
ACTIONS:
Condition Required Action Completion Time A. Area does not have A.1 Implement the following for areas, Immediately an audible criticality equipment, or processes where a criticality accident alarm.
accident could result in a maximum foreseeable dose exceeding 12 rad in the area ofinaudibility and LCO 2.2.4.3a or 2.4.4.2a applies.
A. I.1 Discontinue movement of cylinders containing UF. enriched to 2 I wt % "U.
O M
V A.1.2 Place autoclaves processing cylinders containing UF, enriched to 21 ut % "U in Mode 2.
M A.1.3 Perform Required Actions A.I.1 through A.1.6 of TSR 2.4.4.2c.
l M
A.1.4 Discontinue movement of uranium enriched to 2 1 wt % *U.
M A.2.1 Evacuate area of inaudibility applicable to Immediately this LCO.
M A.2.2 Restrict access to area evacuated in A.2.1.
M A.3 Provide personnel allowed into the area that Immediately i
would be restricted under Action A.2.1 I
with an alternate means of criticality alarm notification, such as a device that will alarm on sensing a 10 mr/hr dose rate, or a radio I
in constant communication with the Central l
Control Facility.
B. - Area does not have B.1 Restore criticality accident alarm to Prior to reinitiating I
an audible criticality operable status, activities i
3 accident alarm.
(V TSR 1.6.6.2d is not applicable.
1 2.2-18b
p TSR-PGDP -
August 27,1999 Rev.41 g
SECTION 2.2 SPECIFIC TSRs FOR UF, FEED FACILITIES (C-333-A AND g
C-337-A) 2.2.4 GENERAL LIMITING CONDITIONS FOR OPERATION
-2.2.4.3 CRITICALITY ACCIDENT ALARM SYSTEM (continued) l SURVEILLANCE REQUIREMENTS:
Surveillance Frequency SR 2.2.4.3c-1 Test the CAAS, local cluster horns and Quarterly l
building horns.
SR 2.2.4.3c-2 Verify that the nitrogen supply pressure to the Quarterly l
cluster horns is at least 900 psig.
BASIS:
The CAAS is used to warn plant personnel of a criticality or radiation accident. This system is designed to detect radiation and provide a distinctive, audible signal which will alert personnel to move from those work areas which are potentially affected. Evacuation of the area of inaudibility and restricting access to those areas will eliminate the potential for increased O
consequences due to personnel not hearing an alarm. The design of the system, three detection modules per cluster, provides protection for criticality events even with partial losses of required equipment.- The CAAS provides detection coverage in most areas by using an overlapping pattern of individual cluster units. Criticality concerns with the feed facilities are associated witt movement of fissiosb4 materials. The action items maintain the facility in steady state operations to limit R ptentiai Mr these concerns to the extent possible. The alarm signal is provided by sounding a local horn associated with each individual cluster and building horns which sound upon a signal from any cluster. Providing another means of coverage (i.e.,
portable detector / alarm, personal alarm device, etc.), restricting operations, or restricting access to the area in the event of the loss of alarms will establish protection. [SAR Chapter 4, Appendix A, Section 2.5.1.1.2, SAR 5.2, ANSI /ANS 8.3]
The nitrogen bottles which backup plant air for the local cluster horns are standard cylinder size 1A (1.55 ft', 9 x 51 inches) and provide for 120 seconds of horn actuation when at their minimum acceptable pressure of 900 psig.
The quarterly surveillance of the CAAS, local cluster horns and building horns consists of placing the cluster in the test mode with a keyswitch, and manually causing two detector modules to ~ generate radiation readings above the alarm setpoint. The cluster electronics
- determines that this meets the high radiation alarm criteria and propagates a high radiation alarm signal to the rest of the system. This signal activates the high radiation alarm light and bell in C-300, causes the local cluster to sound and activates the building CAAS horns and lights. Each I
horn and light is qualitatively verified to be operating. This test is a horn and light functional test and each module combination is tested to generate the high radiation signal.
O 2.2-18e
m TSR-PGDP August 27,1999 Rev. 41 SECTION 2.3 SPECIFIC TSRs FOR PRODUCT AND TAIIE WITHDRAWAL
.nV FACILITIES
.2.3.4 GENERAL LIMITING CONDITIONS FOR OPERATION
.2.3.4.7 - CRITICALITY ACCIDENT ALARM SYSTEM (continued)
LCO 2.3.4.7b: Criticality accident alarm shall be operable (audible).
APPLICABILITY:
In areas where the maximum foreseeable absorbed dose in free air exceeds 12 rad, except areas in permit-required confmed spaces. This LCO is applicable when the new criticality accident alarm system supplied by air accumulators is operable.
ACTIONS:
Condition Required Action Completion Time l
A. Area does not have A!
Implement the following for areas, equipment, or Immediately an audible.
processes where a criticality accident could result criticality accident in a maximum foreseeable dose exceeding 12 rad in alarm.
the area ofinaudibility and LCO 2.3.4.7a applies.
A.1.1 Discondnue movement of cylinders contaimag UF, enriched to 21 wt % SU.
M A.I.2 NaF traps containing uranium enriched to 21 wt
% "U shall not be handled.
O M
A.I.3 Waste containing uranium enriched to 21 wt %
"U shall not be transported.
M A.I.4 Discontinue maintenance activities that reguire breach of containment of equipment containing uranium enriched to 21 wt %"U.
M A.1.5 gU will be discontinued. [In-progress cylinder linder Filling with UF, enriched to 21 wt %
filling cycle (s) may be completed, stopped, and/or i
re-started as nece=ry. Nonnal operanon of withdrawal compressors, ce=ta-rs, and accumulators is not restricted by this action.]
M A.I.6 Perform Required Actions A.I.1, A.1.2, A.I.3, A.I.4, A.2.1, A.2.2, A.3, B.1 of TSR 2.4.4.2b.
M A.2.1 Evacuate area ofinaudibility Immediately M
A.2.2 Restrict access to the area ofinaudibility.
M A.3 Provide personnel allowed to enter the area of immediately inaudibihty with an alternate means of criticality alarm notification such as a device that will alarm on sensing a 10mr/hr dose rate, or a radio in constant communication with the Central Control Facility.
B.
Area does not have B.1 Restore criticality accident alarm to operable status.
48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> qT an audible (effective when NRC
=!
~
criticality accident TSR 1.6.6.2d is not applicable.
assumes regulatory alarm.
authority) 2.3-21
' TSR-PGDP I
August 27,1999 1
f Rev. 41 A
- SECTION 2.3 SPECIFIC TSRs FOR PRODUCT AND TAILS WITHDRAWAL U-FACILITIES 2.3.4 ' GENERAL LIMITING CONDITIONS FOR OPERATION 2.3.4.7 CRITICALITY ACCIDENT ALARM SYSTEM (continued)
SURVEILLANCE REQUIREMENTS:
Surveillance _
Frequency l
SR 2.3.4.7b-1 Test the CAAS and building horns.
Quarterly l
SR 2.3.4.7b-2. Verify that the CAAS air accumulator supply Quarterly j
pressure to the building horns is at least 129 psig.
BASIS: -
The CAAS is used to warn plant personnel of a criticality or radiation accident. This system is designed to detect radiation and provide a distinctive, audible signal which will alert personnel to move from those work areas.which are potentially affected. Audibility is not provided for areas in permit-required confined spaces. A " buddy system" is used to ensure personnel working in these areas are notified of alarms in order to evacuate. One person remains outside the area and maintains contact with personnel in the area. Evacuation of the area of inaudibility and restricting O
access to those areas will eliminate the potential for increased consequences due to personnel not hearing an alarm. The design of the system, three detector modules per cluster, provides protection for criticality events even with partial losses of required equipment. The CAAS ilso provides detection coverage in most areas by using an overlapping pattern of individual cluster units. Criticality concerns with the product withdrawal facility are associated with the movement of fissionable materials. The action items maintain the facility in steady state operations to limit the potential for these concerns to the extent possible. The alarm signal is provided by sounding building horns which sound upon a signal from any cluster. Providing another means of coverage (i.e., portable detector / alarm, personal alarm device, etc.), restricting operations, or restricting access to the area in the event of the loss of alarms will establish protection. [SAR Chapter 4, Appendix'A, Section 2.5.1.1.2, SAR 5.2,- ANSI /ANS 8.3]
The CAAS air accumulators provide for 120 seconds ~of horn actuation when at their minimum acceptable pressure of 129 psig. Electronic horns are installed in some areas. These horns have battery backup power supplies which will provide for at least 120 seconds of horn actuation even if off-site power is lost.
The q' arterly surveillance of the CAAS building horns consists of placing the cluster in the test u
I mode with a keyswitch, and manually causing two detector modules to generate radiation readings above the alarm setpoint. The cluster electronics determines that this meets the high radiation alarm criteria and propagates a high radiation alarm signal to the rest of the system. This signal activates the high radiation alarm light and bell in C-300 and activates the building CAAS horns and lights. Each horn and light is qualitatively verified to be operating. This test is a horn and light functional test and each module combination is tested to generate the high radiation signal.
~
2.3-22
~
TSR-PGDP August 27,1999 Rev.41 SECTION 2.3 SPECIFIC TSRs FOR PRODUCT AND TAILS WITHDRAWAL FACILITIES 2.3.4 GENERAL LIMITING CONDITIONS FOR OPERATION 2.3.4.7 CRITICALITY ACCIDENT ALARM SYSTEM (continued)
LCO 2.3.4.7c: Criticality accident alarm shall be operable (audible).
[
)
APPLICABILITY:
In areas where the maximum foreseeable absorbed dose in free air exceeds 12 rad and the new system described in LCO 2.3.4.7b has not been declared operable.
ACTIONS:
Condition Required Action Completion Time A.
Area does not have A.1 Implement the following for areas, equipment, or Immediately an audible processes where a criticality accident could result in criticality accident a maximum foreseeable dose exceedmg 12 rad in alarm.
the area ofinaudibility and LCO 2.3.4.7a applies.
A.1.1 Discontinue movement of cylinders containing UF.
enriched to 2 I wt % "'U.
M A.I.2 NaF traps containing uranium enriched to a I wi %
"'U shall not be handled.
M O
A. I.3 Waste containing uranium enriched to a 1 wt % "'U Q
shall not be transported.
M A.I.4 Discontinue maintenance activities that require breach of containment of equip" ment containing uranium enriched to a I wt %
'U.
M A.1.5 CylmderFilling with UF, enriched to 2 I wt %"5U will be discontinued. [In-progress cylinder filling cycle (s) may be completed, stopped, and/or re-started as necessary. Normal operation of withdrawal compressors, condensers, and accumulators is not restricted by this action.]
M Immediately A.1.6 Perform Required Actions A.I.1, A.I.2, A.l.3, A.I.4, A.2.1, A.2.2, A.3, B.1 of TSR 2.4.4.2c.
l M
A.2.1 Evacuate area ofinaudibility Immediately M
A.2.2 Restrict access to the area ofinaudibility.
M A.3 Provide personnel allowed to enter the area of inaudibility with an altemate means of criticality alarm notification such as a device that will alarm on sensing a 10mr/hr dose rate, or a radio in constant communication with the Central Control Facility.
B.
Area does not have B.1 Restare criticality accident alarm to operable status.
48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> an audible (effectivewhi.r NRC
' /~~Y criticality accident TSR 1.6.6.2d is not applicable.
assumes regulatory
().
alarm.
authority) 2.3-22a
l TSR-PGDP '
August 27,1999 Rev. 41 O
SECTION 2.3 SPECIFIC TSRs FOR PRODUCT AND TAILS WITHDRAWAL riCit==s 1
2.3.4 GENERAL LIMITING CONDITIONS FOR OPERATION i
2.3.4.7 CRITICALITY ACCIDENT ALARM SYSTEM (continued)
)
SURVEILLANCE REOUIREMENTS:
Surveillance Frequency SR 2.3.4.7c-1 Test the CAAS, local cluster horns and building Quarterly l
horns.
SR 2.3.4.7c-2 Verify that the nitrogen supply pressure to the Quarterly l
cluster horns is at least 900 psig.
~ BASIS:
The CAAS is used to warn plant personnel of a criticality or radiation accident. This system is f
designed to detect radiation and provide a distinctive, audible signal which will alert personnel to move from those work areas which are potentially affected. Evacuation of the area ofinaudibility and restricting access to those areas will eliminate the potential for increased consequences due to personnel not hearing an alarm. The design of the system, three detector modules per cluster, provides protection for criticality events even with partial losses ofrequired equipment. The CAAS
, also provides detection coverage in most areas by using an overlapping pattern ofindividual cluster units. Criticality concerns with the product withdrawal facility are associated with the movement j
offissionable materials. The action items maintain the facility in steady state operations to limit the
- potential for these concems to the extent possible. The alarm signal is provided by sounding a local hom associated with each individual cluster and building horns which sound upon a signal from any cluster. Providing another means of coverage (i.e., portable detector / alarm, personal alarm device,
' etc.), restricting operations,'or restricting access to the area in the event of the loss of alarms will establish protection. [SAR Chapter 4, Appendix A, Section 2.5.1.1.2, SAR 5.2, ANSI /ANS 8.3]
I The nitrogen bottles which backup plant air for the local cluster horns are standard cylinder size 1 A (1.55 ft$, 9 x 51 inches) and provide for 120 seconds of horn actuation when at their minimum acceptable pressure of 900 psig.
The quarterly surveillance of the CAAS, local cluster horns and building horns consists of placing the cluster in the test mode with a keyswitch, and manually causing two detector modules to
- generate radiation readings above the alarm setpoint. The cluster electronics determines that this meets the high radiation alarm criteria and propagates a high radiation alarm signal to the rest of the systein.. This signal activates the high radiation alarm light and bell in C-300, causes the local cluster to sound and activates the building CAAS horns and lights. Each horn and light is qualitatively verified to be operating. This test is a horn and light functional test and each module combination is tested to generate the high radiation signal.
j pU 2.3-22b u
TSR-PGDP August 27,1999 Rev. 41 pJ SECTION 2.4 ' SPECIFIC TSRS FOR ENRICHMENT CASCADE FACILITIES 2.4.4 GENERAL LIMITING CONDITIONS FOR OPERATION 2.4.4.2 CRITICALITY ACCIDENT ALARM SYSTEM
~ LCO 2.4.4.2b: Criticality accident alarm shall be operable (audible).
APPLICABILITY:
In areas where the maximum foreseeable absorbed dose in free air exceeds 12 rad, except areas in permit-required confm' ed spaces and cell housings associated with cells that are running. This LCO is applicable when the new criticality accident alarm system supplied by air accumulators is declared operable.
ACTIONS:
Condition Required Action Completion Time l
A.
Area does not A.1 Implement the following for areas, equipment, or ImmeAntely have an audible proc, esses where a criticahty accident could result in a criticality manmum foreseeable dose exceeding 12 rad in the area accident alarm.
ofinaudibility and LCO 2.4.4.2a or 2.2.4.3a applies.
A.1.1 Discontinue cell maintenance activities that reqmre breach of the containment boundary of cells containing UF enriched to 21 wt % "U.
A.I.2 Monitor temperatures / pressures in the cascade cells containing UF, enriched to 21 wt % *U hourly to annintain UF,in the gaseous state.
A.I.3 containi uranium enriched to 2 I wt % "U O
shall not be habed.
A.I.4 air Ih.shall not be used for evacuation of cells containin enriched to 2 I wt % SU.
A.1.5 containinM.- and pressure o tor -- i drums cariched to 2 I wt %
hourly to maintain inventory in gaseous state.
A.1.6 freezer /sublimers containin wt % SU in mode F/S 3. F/S 4,g UF enriched to 21 F/SborF/S6.
A.1.7 rm Required Actions A.I.1 and A.I.2 of TSR 2.2.4.3b A.I.8 a
ementi etions$.these actions in C-310, rm
- Required 1.1. A.1.2, A.I.3, A.I.
1.5, A.2.1. A.2.2, A.3, and B.1 of TSR 2.3.4.7b.
Evacuate area ofinaudibility.
Immediately A.2.2 estnct access to area evacuated in A.2.1.
- Provide nnel allowed into the area that would be immediately testric under Action A.2.1 with an ahernate means of criticality alarm notification such as a device that will alarm on sensing,a 10mr/br dose rate, or a radio in constant commumcation with the Central Control Facility.
B. ' Area does not B.1 Restore criticality accident alarm to operable stams.
48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> have an audible (effective when criticality TSR 1.6.2.2(d) is not applicable.
NRC assumes O
accident alarm.
regulatory authority) 2.4-19 o
1 TSR-PGDP August 27,1999 Rev. 41 SECTION 2.4 SPECIFIC TSRS FOR ENRICIBfENT CASCADE FACILITIES O
2.4.4 GENERAL LIMITING CONDITIONS FOR OPERATION 2.4.4.2 CRITICALITY ACCIDENT ALARM SYSTEM (continued)
SURVEILLANCE REQUIREMENTS:
Surveillance Frequency
[
SR 2.4.4.2b Test the CAAS and building horns.
Quarterly l
SR 2.4.4.2b-2 Verify that the CAAS air accumulator supply Quarterly pressure to the building horns is greater than or equal to that necessary to sound all building horns for at least 120 seconds based on the number of accumulators in service.
C-333/C-337 Number of accumulators in service Minimum oressure 4
137 psig 3
143 psig C-331/C-335 Number of accumulators in service Minimum oressure 2
129 psig O
C-331/C-335 Tie Line Number of accumulators in service Minimum oressure 1
121 psig BASIS:
1 The CAAS is used to warn plant personnel of a criticality or radiation accident. This system is designed to detect radiation and provide a distinctive, audible signal which will alert personnel to move from those work areas which are potentially r.ficcted. Audibility is not provided for areas in permit-required confined spaces and cell housings associated with cells that are running.
A " buddy system" is used to ensure personnel workirg in these areas'are notified of alarms in J
- order to evacuate. One person remians outside the ares and maintains contact with personnel in the area. Evacuation of the crea of inaudibility and restricting access to those areas will eliminate the potential for increased consequences due to personnel not hearing an alarm. - Criticality concerns with the cascade involve freeze-out of UF. and moderator introduction. The action items maintain the cascade in steady state operations to limit the potential for these concerns to the ex' tent possible. Ceasing the movement of fissile waste prevents a criticality associated with waste storage. The design of the system, three detector modules per cluster, provides protection for criticality events even with partial losses of required equipment. The alarm signal is provided by sounding building horns which sound upon a signal from any cluster. Providing O
2.4-20
TSR-PGDP August 27,1999 Rev. 41 SECTION 2.4 SPECIFIC TSRS FOR ENRICHMENT CASCADE FACILITIES 2.4.4 GENERAL LIMITING CONDITIONS FOR OPERATION 2.4.4.2 CRITICALITY ACCIDENT ALARM SYSTEM (continued)
BASIS (continued):
another means of coverage (i.e., portable detector / alarm, personal alarm device, etc.), restricting l
operations, or restricting access to the area in the event of inaudibility will establish protection.
l
[SAR Chapter 4, Appendix A, Section 2.5.1.1.2, SAR 5.2, ANSI /ANS 8.3]
The CAAS air accumulators provide for 120 seconds of horn actuation when at their minimum acceptable pressure based on the number of accumulators in service. Electronic horns are also installed in som: areas. These horns have battery backup power supplies which will provide for at least 120 seconds of horn actuation even if off-site power is lost.
The quarterly surveillance of the CAAS building horns consists of placing the cluster in the test mode with a keyswitch, and manually causing two detector modules to generate radiation
]
readings above the alarm setpoint. The cluster electronics determines that this meets the high j
radiation alarm criteria and propagates a high radiation alarm signal to the rest of the system.
l This signal activates the high radiation alarm light and bell in C-300 and activates the building l
CAAS horns and lights. Each horn and light is qualitatively. verified to be operating. This test l
(m is a horn and light functional test and each module combination is tested to generate the high l
s
(
radiation signal.
l 1
V 2.4-20a
n TSR-PGDP August 27,1999 Rev. 41 SECTION 2.4 SPECIFIC TSRS FOR ENRICHMENT CASCADE FACILITIES
\\
2.4.4 GENERAL LIMITING CONDITIONS FOR OPERATION 2.4.4.2 CRITICALITY ACCIDENT ALARM SYSTEM LCO 2.4.4.2c:
Criticality accident alarm shall be operable (audible).
l APPLICABILITY:
In areas where the maximum foreseeable absorbed dose in free air exceeds 12 rad and the new system described in LCO 2.4.4.2b has not been declared operable.
ACTIONS:
Condition Required Action Completion Time A. Area does not A.1 Implement the following for areas, equipment, or immediately have an audible processes where a criticality accident could result in a criticality maximum foreseeable dose exceeding 12 rad in the area accident alarm.
ofinaudibility and LCO 2.4.4.2a or 2.2.4.3a applies.
A.I.1 Discontinue cell maintenance activities that require breach of the containment boundary of cells containing UF, enriched to 21 wt % SU.
A.I.2 tor ratures ressures in the cascade cells containing enri to 21 wt % "U hourly to rnaintain UF, an the gaseous state.
M A.I.3 Waste containing uranium enriched to 21 wt % SU shall not be handled.
A.I.4 air shall not be used for evacuation of cells containin
, enriched to 2 I wt % "U.
aa A.1.5 Momtor temperature and pressure of surgU hourly to j
e drums containing UF, enriched to 21 wt % 2' maintain inventory in gaseous state.
A.I.6 freezer /sublimers containing UF, enriched to 2 I wt % "U in mode F/S 3, F/S 4, F/S 5 or F/S 6.
M A.I.7 Perform Required Actions A.I.1 and A.I.2 of TSR 2.2.4.3c.
l M
A.I.8 When implementing these actions in C-310, perfonn
- Required Actions A.I.1, A.I.2, A.I.3, A.I.4, A.I.5, A.2.1, A.2.2, A.3, and B.1 of TSR 2.3.4.7c.
l 1 Evacuate area ofinaudibility.
Immediately A.2.2 et access to area evacuated in A.2.1.
Provide restricte[bnoel allowed imo the area that would be Immediately Action A.2.1 with an alternate means of j
criticality alarm notification such as a device that will alarm on sensing a 10mr/hr dose rate, or a radio in
- constant communication with the Central Control Facility.
B.
Area does not B.1 Restore criticality accident alarm to operable status.
48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> have an audible (effective when j
- \\
criticality TSR 1.6.2.2(d) is not applicable.
NRC assumes i
Q accident alarm.
regulatory authority) 2.4-20b i
TSR-PGDP August 27,1999 Rev. 41 l
. SECTION 2.4 SPECIFIC TSRS FOR ENRICHMENT CASCADE FACILITIES f.
2.4.4 ~ GENERAL LIMITING CONDITIONS FOR OPERATION 2.4.4.2 CRITICALITY ACCIDENT ALARM SYSTEM (continued)
SURVEILLANCE REQUIREMENTS:
Surveillance Frequency SR 2.4.4.2c-1 Test the CAAS, local cluster horns and Quarterly l
building horns.
SR 2.4.4.2c-2 Verify that the nitrogen supply pressure to Quarterly l
the cluster horns is at least 900 psig.
BASIS:
The CAAS is used to warn plant personnel of a criticality or radiation accident. This system is designed to detect radiation and provide a distinctive, audible signal which will alert personnel to move from those work areas which are potentially affected. Evacuation of the area of inaudibility and restricting access to those areas will eliminate the potential for increased consequences due to personnel not hearing an alarm. Criticality concerns with the cascade involve freeze-out of UF and moderator introduction. The action items maintain the cascade in steady state operations to limit the potential for these concerns to the extent possible. Ceasing the movement of fissile waste prevents a criticality associated with waste storage. The design of the system, three detector modules per cluster, provides protection for criticality events even with partial losses of required equipment. The alarm signal is provided by sounding a local horn associated with each individual cluster and building horns which sound upon a signal from any cluster. Providing another means of coverage (i.e., portable detector / alarm, personal alarm
' device, etc.), restricting operations, or restricting access to the area in the event of inaudibility will establish protection.
[SAR~ Chapter 4, Appendix A, Section 2.5.1.1.2, SAR 5.2, ANSI /ANS 8.3]
- The nitrogen bottles which backup plant air for the local cluster horns are standard cylinder size
. lA (1.55 ft*, 9 x 51 inches) and provide for 120 seconds of horn actuation when at their
- minimum acceptable pressure of 900 psig.
-The quarterly surveillance' of the CAAS, local cluster horns and building horns consists of
. placing the cluster in the test mode with a keyswitch, and manually causing two detector
_ modules to generate radiation readings above the alarm setpoint. The cluster electronics determines that this meets the high radiation alarm criteria and propagates a high radiation alarm signal to the rest of the system.t This signal activates the high radiation alarm light and bell in C-300, causes the local cluster to sound and activates the building CAAS horns and lights. Each horn and light is qualitatively verified to be operating. This test is a horn and light functional test and each module combination is tested to generate the high radiation signal.
2.4-20c -
TSR-PGDP August 27,1999 Rev.41 SECTION 2.6 SPECIFIC TSRs FOR CAAS (NON-CASCADE FACILITIES)
O 2.6.4 GENERAL LIMITING CONDITIONS FOR OPERATION 2.6.4.1 CRITICALITY ACCIDENT ALARM SYSTEM (continued) l l
LCO 2.6.4.lb:
Criticality accident alarm shall be operable (audible).
l l
APPLICABILITY: In areas in the facilities listed in 2.6.4.la where the maximum l
foreseeable absorbed dose in free air exceeds 12 rad, except areas in l
permit-required confm' ed spaces. This LCO is applicable when the new l
criticality accident alarm system with air accumulators and/or electronic l
horns has been declared operable.
l 1
ACTIONS:
Condition Required Actic,n Completion l
Time l
A.
Area does not have an A.1 Discontinue operations with Immediately l
audible criticality fissionable material.
l accident alarm.
M l
A.2.1 Evacuate area of inaudibility Immediately l
Q ANE l
V A.2.2 Restrict access to the area of l
inaudibility.
l AND l
A.3 Provide personnel allowed into the Immediately l
area that would be restricted under l
Action A.2.1 with an alternate l
means of criticality alarm l
notification such as a device that l
will alarm on sensing a 10mr/hr l
dose rate, or a radio in constant l
communication with the Central l
Control Facility.
l B.
Area does not have an B.1 Restore criticality accident alarm Prior to l
audible criticality to operable status.
reinitiating l
. accident alarm.
activities l
TSR 1.6.2.2d is not applicable.
I nU-2.6-6
TSR-PGDP -
August 27,1999 Rev. 41 SECTION 2.6 SPECIFIC TSRs FOR CAAS (NON-CASCADE FACILITIES) 2.6.4 GENERAL LIMITING CONDITIONS FOR OPERATION 2.6.4.1 CRITICALITY' ACCIDENT ALARM SYSTEM (continued)
SURVEILLANCE REQUIREMENTS:
Surveillance Frequency l
SR 2.6.4.lb-1 Test the CAAS and building horns.
Quarterly l
SR 2.6.4.lb-2 Verify that the CAAS air accumulator supply Quarterly pressure to the building horns is greater than'or equal to that necessary to sound all building horns for at least 120 seconds based on the number of accumulators in service.
C-400 Number of accumulators in service Minimum oressure 2
125 psig
~
1 145 psig C-409 Number of accumulators in service Minimum oreElra 1
125 psig SR 2.6.4.1b-3 Verify that the condition of the battery backups Annually to the electronic horns are sufficient to power the horns for at least 120 seconds.
BASIS:
l The CAAS is used to warn plant personnel of a criticality or radiation accident. This system
(
is designed to detect radiation and provide a distinctive, audible signal which will alert personnel l
to move from those work areas which are potentially affected. Audibility is not provided for l
areas in permit-required confined spaces. A " buddy system" is used to ensure personnel working l
. in these areas are notified of alarms in order to evacuate. One person remains outside the area l
and maintains contact with personnel in the area. Evacuation of the area of inaudibility and l
restricting access to those areas will eliminate the potential for increased consequences due to l
personnel not hearing an alarm. The design of the system, three detector modules per cluster, l
provides protection for criticality events even with partial losses of required equipment. The l
CAAS also provides ~ detection coverage in most areas by using an overlapping pattern of l
individual cluster units. Criticality concerns with the listed facilities are associated with the l
handling of fissile materials. He action items maintain the facility in steady state operations to l
limit the potential for these concerns to the extent'possible. The alarm signal is provided by l
_ sounding building horns which sound upon a signal from any cluster. iThe building horns for l
_C-709 and C-710 are configured in two separate networks, either of which can independently l
2.6-7.
E
7
]
TSR-PGDP August 27,1999 Rev.41 SECTION 2.6 SPECIFIC TSRs FOR CAAS (NON-CASCADE FACILITIES) 2.6.4 GENERAL LIMITING CONDITIONS FOR OPERATION 2.6.4.1 CRITICALITY ACCIDENT ALARM SYSTEM (continued) l l
BASIS (continued):.
l I
sound the required evacuation signal. The building horn configuration in C-709 and C-710 l
allows the CAAS for those buildings to remain operable even when one of the independent horn l
networks is temporarily out of service. Providing another means of coverage (i.e., portable l
detector / alarm, personal alarm device, etc.), restricting operations, or restricting access to the l
area in the event of the loss of alarms will establish protection.
l l
Facilities containing criticality accident alarm systems (other than those covered by TSR l
Sections 2.1-2.4) include C-400, C-409, C-710, C-720, C-720M, C-720K, C-720R, C-720S, l
C-720-C, C-728, and C-746-Q-1. [SAR Chapter 4, Appendix A, Section 2.5.1.1.2, SAR 5.2, l
ANSI /ANS 8.3]
l l
The CAAS air accumulators provide for 120 seconds of horn actuation when at their minimum l
acceptable pressure based on the number of accumulators in service. Electronic horns are also l
installed in some areas. These horns have battery backup power supplies which will provide for l
at least 120 seconds of horn actuation even if off-site power is lost.
l
.O i
'Ihe quarterly surveillance of the CAAS building horns consists of placing the cluster in the test l
mode with a keyswitch, and manually causing two detector modules to generate radiation readings above the alarm setpoint. The cluster electronics determines that this meets the high radiation alarm criteria and propagates a high radiation alarm signal to the rest of the system.
This signal activates the high radiation alarm light and bell in C-300 and activates the building l
CAAS horns and lights. Each horn and light is qualitatively verified to be operating. This test l
is a horn and light functional test and each module combination is tested to generate the high j
radiation signal.
l 2.6-8
E e
TSR-PGDP-August 27,1999 Rev.41 SECTION 2.6 SPECIFIC TSRs FOR CAAS (NON-CASCADE FACILITIES) 2.6.4 GENERAL LIMITING CONDITIONS FOR OPERATION 2.6.4.1 ' CRITICALITY ACCIDENT AIA.RM SYSTEM (continued)
' LCO 2.6.4.1c: ' Criticality accident alarm shall be operable (audible).
[
. APPLICABILITY:.
In areas in the facilities listed in 2.6.4.la where the maximum
~ foreseeable absorbed dose in free air exceeds 12 rad and the new l
system described in LCO 2.6.4.lb has not been declared operable.
l ACTIONS:
Condition Required Action Completion Time A.
Area does not have an A.1 Discontinue operations with Immediately audible criticality fissionable material.
accident alarm.
M A.2.1 Evacuate area of inaudibility Immediately M
A.2.2 Restrict access to the area of O
inaudibility.
M A.3 Provide personnel allowed into the Immediately area that would be restricted under Action A.2.1 with an alternate means of criticality alarm notification such as a device that will alarm on sensing a 10mr/hr dose rate, or a radio in constant communication with the Central Control Facility.
B.
Area does not have an B.1 Restore criticality accident alarm Prior to audible criticality to operable status.
reinitiating accident alarm..
activities l
TSR 1.6.2.2d is not applicable.
O 2.6-9 L__
TSR-PGDP August 27,1999 Rev.41 O
SECTION 2.6 SPECIFIC TSRs FOR CAAS (NON-CASCADE FACILITIES) 2.6.4 GENERAL LIMITING CONDITIONS FOR OPERATION 2.6.4.1 CRITICALITY ACCIDENT ALARM SYSTEM (continued)
SURVEILLANCE REQUIREMENTS:
Surveillance Frequency SR 2.6.4.1c-1 Test the CAAS, local cluster horns and building Quarterly l
horns.
SR 2.6.4.le-2 Verify that the nitrogen supply pressure to the Quarterly l
cluster horns is at least 900 psig.
j SR 2.6.4.1c-3 Verify that the condition of the battery backups Annually l
to the electronic horns are sufficient to power the horns for at least 120 seconds.
BASIS:
The CAAS is used to warn plant personnel of a criticality or radiation accident. This system is designed to detect radiation and provide a distinctive, audible signal which will alert personnel to move from those work areas which are potentially affected. Evacuation of the area of
)
inaudibility and restricting access to those areas will eliminate the potential for increased consequences due to personnel not hearing an alarm. The design of the system, three detector modules per cluster, provides protection for criticality events even with partial losses of required equipment. The CAAS also provides detection coverage in most areas by using an overlapping pattern of individual cluster units. Criticality concerns with the listed facilities are associated
-with the handling of fissile materials. The action items maintain the facility in steady state operations to limit the potential for these concerns to the extent possible. The alarm signal is provided by sounding building. horns which sound upon a signal from any cluster, and by sounding in some locations a local horn associated with each individual cluster. The building horns for C-709 and C-710 are configured in two separate networks, either of which can indapandantly sound the required evacuation signal. The building horn configuration in C-709 and C-710 allows the CAAS for those buildings to remain operable even when one of the independent horn networks is temporarily out of service. Providing another means of coverage (i.e., portable detector / alarm, personal alarm device, etc.), restricting operations, or restricting access to the area in the event of the loss of alarms will establish protection.
Facilities containing criticality accident alarm systems (other than those covered by TSR Sections '2.1-2.4) include C-400, C-409, C-710, C-720, C-720M, C-720K, C-720R, C-720S, C-720-C, C-728, and C-746-Q-1. [SAR Chapter 4, Appendix A, Section 2.5.1.1.2, SAR 5.2, ANSI /ANS 8.3]
The nitrogen bottles which backup plant air for the local cluster horns are standard cylinder size I/^
1A (1.55 ft', 9 x 51 inches) and provide for 120 seconds of horn actuation when at their 1
\\
minimum acceptable pressure of 900 psig.
I 2.6-10 J
)
i TSR-PGDP August 27,1999 Rev. 41 q
SECTION 2.6 SPECIFIC TSRs FOR CAAS (NON-CASCADE FACILITIES) b 2.6.4 GENERAL LIMITING CONDITIONS FOR OPERATION 2.6.4.1 CRITICALITY ACCIDENT ALARM SYSTEM (continued)
BASIS (continued):
The quarterly surveillance of the CAAS, local cluster horns and building horns consists of placing the cluster in the test mode with a keyswitch, and manually causing two detector modules to generate radiation readings above the alarm setpoint. The cluster electronics determines that this meets the high radiation alarm criteria and propagates a high radiation alarm signal to the rest of the system. This signal activates the high radiation alarm light and bell in C-300, causes the local cluster to sound (where applicable) and activates the building CAAS horns and lights. Each horn and light is qualitatively verified to be operating. This test is a horn and light' functional test and each module combination is tested to generate the high radiation signal.
1 Ci V
l f~~
2.6-11 J