ML20212D166

From kanterella
Jump to navigation Jump to search

Rev 1 to Emergency Feedwater Initiation & Control Auxiliary Feedwater Sys Description
ML20212D166
Person / Time
Site: Rancho Seco
Issue date: 12/05/1986
From:
SACRAMENTO MUNICIPAL UTILITY DISTRICT
To:
Shared Package
ML20212D124 List:
References
TAC-64359, NUDOCS 8612310306
Download: ML20212D166 (68)


Text

9 O

e a

e 9

h EFIC AUXILIARY FEEDWATER SYSTEM DESCRIPTION REVISION 1 e

O 8612310306 861205 PDR ADOCK 05000312 P

PDR

Cycle 8 Auxiliary Feedwatse System Description (EFIC)

Table of Contents Page Preface il 1

1.0 Scope 2.0 System Requirements 1

3.0 Design Description 9-13-3.4 EFIC System Description 14 3.4.1 Input Logic 15 3.4.2 Initiate Lggic 16 3.4.3 Trip Logic 18 3.4.4 vector Logic 3.4.5 Control Logic 20 21 3.4.6 EFIC Trip Testing 3.4.7 EFIC Signal Application 22 3.4.8 OTSG Level sensing 23 3.4.9 Interface with '.*alve and Pump Controllers 24 24 3.5 Annunciation p

3.6 Main Feedwater Overfill Termination 24 3.7 Appendix

'R' Interface 25 25 4.0 System Limits, Precautions, and Setpoints 28 5.0 Operation 29 6.0 Casualty Events and Recovery Procedures 33 7.0 Testing and Maintenance Tables 34 3.4-1 Analog Output Signals 35 3.4-2 Equipment Actuation through the T.I.E.

36 4.2-1 AFW System Setpoints 4.2-2 Flux To Feedwater Setpoint 37 Appendices 38 A

List of Figures 39 B

Instrumentation Requirements C

EFIC Electrical Cabling Separaticn Requirements 41 46 D

EFIC Annunciation i

s PREFACE This document is a detailed description of the AFW System including EFIC.

It includes also a functional description of Atmospheric Dump Valve (ADV) control, MFW isolation control, and loss of Main Feedwater anticipatory Reactor Trip.

For a cursory introduction please read Sectt;, 6 and consult the Post EPIC AFW P & ID (Figure 3.1-1).

l 1

.]

o m

+

9

1.0 SCOPE This document describes the Post EFIC Auxiliary Feedwater (AFW) System.

Any physical changes to the plant necessary to bring the present system to conform to this description including AFW valving modifications, Control Room control and indication modifications, EFIC SG level transmitter installation, etc, are covered by Mod 1 and Mod 123.

It also describes the Reactor power versus Main Feedwater Flow Anticipatory trip (Flux /MFW Flow trip) located in the Reactor Protection System, control to isolate Main Feedwater (MFW) for steamline break protection and MEW overfill, and control of Atmospheric Dump valves (ADV's) independently from ICS.

This document is based,largely on the AFW System Description 'Jritten for the Distict by Babcock :& Wilcox (B &.W Document No. 15-1120580 Rev. 4).

Functional requirements needed to properl-y interface tpe AFW System with

~

the nuclear steam supply (NSS) are taken from that document. Other sources of requirements are NUREG - 0578, Short Term Lesstn Learned; NUREG - 0667, Transient Response of B & W Designed Reactors; NUREG -

0737, Clarification of TMI Action Plan Requiremen,ts.

This document contains the criteria-necessary to upgrade the AFW

.acem to substantially comply with the Standard Review Plan Section 10.

.9, Branch Technical Position AS310-1 and other standards generally applied to new designs. In implementing these requirements, some exceptions may be taken where the improvement in system reliability is so small that the required modification is not justified for an operating plant. Note that "feedwater", as used in this document, refers to AFW unless otherwise stated.

2.0 SYSTEM REQUIREMENTS

.The AFW system requirements are listed below.

2.1 NSS Interface Requirements 2.1.1 Maximum Feedwater Flow The maximum allowable continuous AFW flow is.1300 gpm per steam generator (SG).

This maximum AFW flow limit is required to minimize flow induced' vibration of the steam generator tubes.

This limit must not be exceeded at any steam pressure.

,D 2.1.2 Minimum Available Feedwater Flow The AFW system must be sized so that a minimum of 760 gpm (total) can be delivered to either one or both SGs at a SG pressure of 1050 psig. This flow must be available for all accident conditions considered in the design basis for the plant even with a single active failure in the system.

AFWTECDO Pa's 1 Rev. 1 l

2.1.3 Maximum Automatic Initiation Time The system shall be designed so that the minimum AFW flow is established within 70 seconds after an initiation signal is reached. This initiation time is based on the requirements to:

A.

Maintain continuity in reactor coolant system (RCS) flow

-in the transition from forced to natural circulation when the Reacter-Coolant pumps (RCPs) are tripped.

B.

Provide margin to prevent overpressurization of the RCS

.following a loss of main FW event and reactor trip.

,And the desirability of:

C.

Reducing the probabiltiy of boil off of the entire inventory of liqu'id water from the SG's immediately following a loss'of main FW. occurrence.

-J 2.1.4 Initiation and Control R'ecuirements 271.4.1 General Requirements The requirements to which the AFW control system shall be designed are:

A.

The system shall provide automatic actuation of AFW, for the conditions specified in Section 2.1.4.2.

The capability for bypassing certain initiations shall be provided for unit startup or shutdown in accordance with the IEEE-279-provisions for shutdown bypasses.

3.

The system shall be designed to minimize overcooling following A loss of main FN event.

This feature of the system is not required to meet the single failure criterion.

C.

The system, including control valve positioners, sensors, control and actuation signals and their auxiliary supporting

systems, s, hall be designed as safety. grade systems to'the extent possible. As such, they function independently of the ICS, NNI, and other non-safety systems.

D.

Redundancy and testability shall be provided-to enhance the reliability demanded of a, safety grade system.

AFWTECDO Page 2 Rev. 1 e

1 E.

A single failure shall not prevent'actuattor. of AFW when required. This criterion shall apply to the AFW system and its auxiliary supporting features.

In addition to this single failuce, all failures.which can be predicted as a condition or a result of the initiating event.

requiring AFW shall be considered.

F.

Indication of AFW operational availability, flowrate and OTSG level shall be available to the operator.

4 G.

The capability.for manual override of the automatic functioning of the system shall be provided. This condition shall be indicated in the Contcol. Room.

l

.H.

The capability for manual intiation of AFW shall be provided.,

.I. The capability for manual control of AFW shall be provided in the main Control Room.

The-capability for 7.FW and ADV control from a remote shutdown panel shall be provided to meet the requirements of 10 CFR 50 Appendix R.

J.

The system shall be designed to prevent or minimize cycling of the AFW control valves during normal plant operation when the AFW system is not in operation.

2.1.4.2.

. Actuation Requirement 1

AFW shall be automaticilly initiated after the occurrence of any of the following conditions:

[oss of main feedwater as indicated by the loss of mainfeedwater anticipatory Reactor trip located in the RPS.

Low level in either steam generator.

Loss of all 4 reactor coolant pumps.

Low pressure in either SG (corresponding to MFW I

isolation to a low pressure SG).

SFAS ECCS actuation (high RB pressure or low RC pressure).

Page 3 Rev. 1 AFWTECDO l

l i-i

2.1.4.3 OTSG Level

  • Control Requirements Three level setpoints are required.

A.

Following AFW actuation, the level setpoint shall be automatically selected to control OTSG level to approximately 2 feet if one or mor,e RCPs are running.

B.

Following AFW actuation, if all f0ur reactor coolant pumps are not rur.ning, the level setpoint shall be automatically selected to a level sufficiently high to assure natural circulation within the RCS.

This setpoint shall be at least 20 feet.

C.

Provision for manual selection of a high level-setpoint of approximately 32. feet shall be i

provided. This setpoint will be selected by the operato-in accordance with operating

. s.

guidelines and is intended for use during small break loss of coolant accidents.

  • For the purpose of AFW design, ' LEVEL" refers to the equivalent height of a saturated liquid column referenced from the top of the lower tube sheet. See Table 4.2-1 for setpoints.

2.1.4.4 Fillrate Requirement The objective of the fillrate control is to minimize overcooling when adding large quantities of AFW during low Decay Heat conditions such as when filling the SG following loss of all RCP's.

If no RCP's are running, the AFW flow rate is controlled by the rate of level increase.

A level of 2 to 8 inches per minute has been determined to provide adequate RCS cooling. This fill rate is varied as function of steam generator pressure in the range of 800 to 1050 psig for the transient conditions which require AFW.

Fillrate control is not necessary for the RC pumps running level setpoint.

The level rate limit can to be adjusted at the Channel A and Channel B Cabinets under administrative control.

In operation, the AFW flowrate is modulated to hold the level fill rate or level at the desired value.

2 AFWTECDO Page 4 Rev. 1 l

e

2.1.5 'Steamline Break /Feedwater Line Break A steamline break or feedwater line break which depressurizes a SG shall cause_the isolation of the main FW line to any depressurized SG.

AFW shall be automatically supplied in accordance with the selection logic below.

s To meet-these requirements the following design shall oe implememted:

A.

MFW Isolation - Low steam pressure (below approximately 600 psig) in either SG will tsolate the main feedwater line to the affected SG(s).

Once isolated, manual action is required to defeat the isolation command if desired.

B.

AFW Isolation Logic If both SGs are above 600 psig, supply AFW to both SGs.

h If only one SG is below 600 psig, isolate AFW to that SG.

4 If both SG's are below 600 psig and the pressure difference between the two SGs exceeds a fixed setpoint (approximately 100 psig) isolate AFW only to the SG with the lower pressure.

-If both SGs are below 600 psig and the pressure j

difference is less than the fixed setpoint, no d

AFW will be isolated.

f AFW isolation logic will reset automatically to allow for changing steam generator conditions. For instance, if the pressure in one steam generator dropped below the 600 psig setpoint and then recovered to a pressure above the setpoint, AEf would at.first be isolated to that SG and then would automatically be fed as the pressure again exceeded the 600.psig setpoint.

2.1.6 Main Feedwater Overfill Provisions must be made in the. design to terminate a main feedwater overfill condition. The steam generator overfill setpoint should be high enough to prevent spurious tripping of this function (and subsequent MFW isolation) during normal power operation. However, it must also be low enough to minimize.the effects of the overfill. See Setpoint Table s

4.2.1.

AFWTECDO Page 5 Rev. 1 i

e e

2.2. Fluid System Requirements 2.2.1 Branch Technical Position ASB10-1 BTP ASB10-1 places the following requirment on the AFW system:

A.

.The auxiliary FW system should consist of at least two full capacity, independent systems that include diverse power sources.

B.

Other powered components of the auxiliary FW system should also use the concept of separate and multiple sources of motive energy.

An example of the required diversity would be two separate auxiliary FW trains, each capable of removing the afterheat load.of the reactor system, having one separate train powered from either of two AC sources and the other train wholly powered by steam and DC electric power.

C.

The piping arrangement, both intake and discharge, for each train should be designed to permit the pumps to supply FW to any combination of SGs.

This arrangement should take into account pipe f ailure, a ctive component failure, power supply failure, or contrcl system failure that could prevent system function. One arrangement that would be acceptable is crossover piping containing valves that can be operated by remote manual control from the control Room, using the power diversity principle for the valve operators and acutation systems.

D.

The auxiliary FW system should be designed with suitable redundancy to offset the consequences of any single active component failure: however, each train need not

~

contain redundant active components.

E.

When considering a high energy line break, the system should be so arranged as to assure the capabiltiy tc supply necessary auxiliary FW to the SG despite the postulated rupture of any high energy section of the system, assuming a concurrent single active failure.

Note: If the AFW system is not used (and therefore not pressurized) during startup, Hot standby and shutdown conditions, then a high energy line break

~

in the AFW system only needs to be considered between the SG and the first check valve upstream-of the SG.

Page 6 Rev. 1 AFWTECD0 l

O e

2.2.2 Water Sources Seismic Category I water sources shall be provided of sufficient volume to remove decay heat for four hours and to subsequenty cooldown the plant to the decay heat removal (DHR) system pressure.

2.2.3 AFW Pump Protection The system design shall protect the AFW pump from runout and cavitation due to high energy line breaks for single failures in the system. Any automatic pump trip features must (a) not override automatic initiation of AFW, or (b) be designed as a Class lE system.

2.2.4 AFW Support Systems The requirements for diverse power sources and operation with a single f ailure also apply to the AFN support systems.

These systems include:

Electrical power to support systems.

Compressed air for AFW control valves.

HVAC as applicable.

2.2.5 Cross Connects AFW system shall be designed to allow either pump to feed either steam generator. The crosstie provided for this purpose shall include normally open remotely operated isolation valves.

2.2.6 Alarms As a minimum, the following alarm outputs are required:

High SG level.

(For SG A and SG 3) l Low SG level to warn approach to low SG level EFIC l!

initiate.

(For SG A and SG B)

I Low condensate storage tank level (approach to water I

source transfer)

AFW Pump Runout i

i Low AFW pump suction pressure.

(For Pump P-318 ar.d 4

Pump P-319)

AFWTECDO Page 7 Rev. 1 s

I T

1 l

2. 2.7 - Indication

~

As a minimum, the following indication shalliot available to the. o pe ra tor.

{

AFW flow to each SG.

(Channel A and Channel B) 6 Low range and wide range SG Level and SG Pressure, hG ks

\\

k (,

and SG B).

(Channel A and B indicated full time and Channels A, B, C and D available upon request on the plant computer)

Condensate storage tank level (Channel A and Channel 3).

~

EFIC control system status (level setpoint' selected)

  • (Channel A and' Channel B).

EFIC AFW level; controls 'st'atus (activej not active)

~

(Channel A and Channel 3).

AFW pump discharge pressure Trip Status of the EPIC system.

(Channel A and B).

EFIC Channel in shutdown bypass'(Channel A,B,C, and D).

\\

1

.n A

Continuous actual valve position for AFW control valves FV-20527, FV-20528, FV-20531, FV-20532.

AFW isolation valves HV-20577, RV-20578, HV-20581, A

N, HV-20582, and AFW flow test valve FV-31855 shall' indicate valve open or closed.

2.2.8 Physical ~ Separation System components and piping shall have sufficient physical separation or shielding to protect the essential portions of the system from the effects of internally and externally generated, missiles.

Functional capability of the system shall also be assured for fires. Specific channel separation requirements to meet s

IEEE-279, BELBA, Missile, and Appendix R requirements are

/

s shown in Appendix

'C'.

is s

(.

t 2.2.9 P'.uid Flow Instabilities J

l l

The system design shall preclude the occurence of fluid flow

/

instabilities; e.g., water hammer -in system piping during normal plant opera, tion or during upset or accident conditions.

4 l

2.2.10 Operational Testing

\\

Provis' ions shall be made to allow periodic operations testing.

r I

l AFWTECD0 Page 8 Rev. 1

\\

~

2.3 Guides and 'R3ferenc2s

'k ~,

The below listed guides and referencea see those general references used for the design of the.EFIC System and its functional interaction with the Rancho Seco Plant. Additional guides and g

standards for the installation of individual components other'than EFIC will be covered by the specific installation documentation.

A.

URC Documents NUREG - 0800 Standard Review Plan NUREG - 0578 Short Term Lessons Learned Report g

NUREG - 0667 Transient Response of 3 & W Designed Reactors NUREG - 0737 Clarification of TMI Action Plan Requirements B.

IEEiStandards g

4-279-1971 Criteria for Protection Systems for Nuclear Power s

[t Generating Stations (for initiation portions of AFW

^

k System) 323-1971 Standard for Qualifying Class lE Equipment for

. Nuclear Power Generating Stations 344-1971 Recommended Practices for Seismic Qualification of Class lE Equipment for Nuclear Power Generating Stations 3.0 DESIGN DESCRIPTION 3.1 Sun. mary Description The AFW system consists of two interconnected trains capable of supplying auxiliary feedwater (AFW) to either or both SG's by s

automatic or manual initiation and control. The normal source of water is the condensate storage, tank, however the Folsom South Canal and the onsite reservoir are also available as secondary sources. A simplified piping and instrumentation diagram for the " Post EFIC AFW System

  • Figure 3.1-1, shows the AFW System and portions of the MFW and Main Steam Systems in their operating form as modified by the changes included in Mod 1.

In the flow path between the AFM pumps and the SG's there are i

isolation valves, check valves, control valves, ilow instrumentation, and pressure instrumentation to control and monitor the flow of AFW to the SG's.

The f,iuid system design is described i

l in Section 3.2.

The instrumentatien system design is described in Section 3.4.

3.2 Fluid System Design The AFW system is designed to provide a minimum of 760 gpm of AFW to the SG's at 1050 psig within 70 seconds of system initiation signal. The system is designed as two interconnected trains with

' redundant components to insure that the system will meet these requirements even with a single failure.

j Y

AFUTECDO Page 9 Rev. 1 t

l

~

i

~ -. -

c; s

-].

+

3.2.1 Suction a

The primary water source for-both AFW trains,is the Seismic t Category I condensate storage tank, T-358,..

Although there are other connections to this tank, they' draw through an internal stand-pipe which assures that a minimum of 250,000

~

gallons is held in reserve exclusively for the AFW syJtem.

f i

This volume of water will remove decay heat (plus RC pump heat for 2 pumps) for approximately 13 hours1.50463e-4 days <br />0.00361 hours <br />2.149471e-5 weeks <br />4.9465e-6 months <br />. This volume will also be suf ficient to remove decay heat plus cooldown to allow cooling by the Decay Eeat Remo6al (DER) System in ~ '

approximately 10.5 hours5.787037e-5 days <br />0.00139 hours <br />8.267196e-6 weeks <br />1.9025e-6 months <br /> or allow hot shutdown for 4

. approximately 5.5 hours5.787037e-5 days <br />0.00139 hours <br />8.267196e-6 weeks <br />1.9025e-6 months <br /> followed by a 5 hour5.787037e-5 days <br />0.00139 hours <br />8.267196e-6 weeks <br />1.9025e-6 months <br /> cooldown (50 degrees F/hr) to DBR System changeover. Water Li supplied from this tank to the AFW pumps by separate inch lines containin'g. locked open manual valves'FWS-045,-FWS-046, MCM-057, and MCM-058.

.Alernative'AFW system suction sources'are available from the on-site reservoir and the Folsom South Canal. These a

alternate sources enter the cross connect in the suction

. piping between locked closed manual valves PWC-076 and PWC-079.

Suction must be manually transferred from the condensate storage tank to the reservoir or the Folsom South Canal by opening the ic:ked closed manual valves'PWC-076 and FWC-079, closing the locked open manual valves MCM-057 and McM-058, and either:

(1) operating the Folsom South Canal transfer pumps and valves or (2) opening motor' operated valve HV-430ll to obtain gravity flow from the on-site reservoir. The suction cross connect also includes pressure relief valves PSV-31800 and PSV-31900. The operators are alerted via IDADS to perform this suction transfer by redundant, low level alarms from safety-grade in'strumentation on the condensate storage tank.

3.2.2 Pumps and Discharge Cross-Connect AFW Train B pump, P-318, is a combination turbine-driven and motor-driven pump with both the turbine and electric motor on a common shaft. Either motive source can drive the pump at its rated capacity of 840 gpm at 1150 psig with a normal minimum flow of 60 gpm.

The turbine drive is used as the primary motive source for this pump. The motor drive can be manually initiated, and is powered fecm a diesel backed emergency bus.

AFW Train A pump, P-319' is a motor-driven pump which has the same rated capacity and minimum flow as the Train 3 pump.

AFWTECDO Page 10 Rev. 1 e

W w

+

--m y

v n

m

+r-S H

.+t

+

v nw w

% ?) ~ ~

O, zT The pumps discharge through check valves and locked open

^

manual valves into 6-inch cross-connected discharge lines.

The cross-connection line contains two normally-open motor-operated valves (HV-31926 and HV-31827). The valves are powered from separate diesel backed lE sources. This 1.

cross-connect permits either pump to feed either or both e

s Steam generators.

3.2.3 Auxiliary Feedwater Flow Control Valves The flow of AFW to steam generator A is con' trolled by a normally open pneumatically operated control valve, FV-20527, in parallel with a normally open modulating solenoid operated control valve, FV-20531.

Flow to steam generator B is controlled in a similar manner using valves FV-20528 (pneumatic) and FV-20532 (solenoid). The pneumatic operated valves which fail open on loss of air pressure have a back-up supply of air available from a seismic class I source which l

enables the valves to be operated for up to 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> following i

a loss of the plant air supply to the valves. The solenoid operated valves are DC battery backed. Initiation and control instrumentation is described in Section 3.4 of this report.

,The class I backup air supply is described in Section 3.2.7.

. 3.2.4 Auxiliary Feedwater Iso'lation Valves In line with each normally open AFW control valve is a normally closed AFW isolation valve; HV-20577, HV-20581,

.EV-20578, and EV-20582.

These valves receive open and close commands from the EFIC vector logic and can be manually opened or closed from the main Control Room. Section 3.4, further describes this control. All four valves are powered by non-interruptable D.C. busses.

3.2.5 Pump Minimum Flow and Test Lines Minimum flow and test lines are connected to the discharge piping of both pumps. The minimum flow required for pump protection is maintained with normally open flow paths to the condenser. The manual valves FWS-051 and FWS-052 located in the minimum flow lines shall be locked open whenever the secondary coolant system is the primary cooling medium for the RC system.

l AFWTECDO Page 11 Rev. 1 9

c-

. Full flow test capability is provided through a 6-inch line which intersects the AFW system cross-connect between the.twc normally open motor-operated valves HV-31826 and HV-31827.

This full flow test path is isolated from the cross-connect during normal operation by normally closed manual ~ valve FWS-055 and pneumaticaly operated control valve FV-31855.

Either AFW train can be full-flow tested by opening valves FWS-055 and FV-31855 and starting the appropriate AFW pump.

The full capability of both AFW trains to supply AFW on demand is maintained during the test since either an EFIC channel A or B AFW initiation signal will result in automatic closure of valve FV-3.1855.

The AFW system is, therefore, automatically restored to its normal configuration, even in the unlikely event that testing were in progress at the time of system initiation.

3.2.6 Steam Supply for the AFW Turbine (K-308)

Steam supply for the AFW pump P-318 turbine (K-308).is obtained from both steam generators through six-inch lines containing check valves MSS-051.and MSS-052, locked-open manual valves MSS-049 and MSS-050, and normally-opened motor operated valves HV-20569 and HV-20596.

The check valve and motor operated valve provide redundant isolation capability to preclude blowing down the good steam generator in.the event of main steam line or feed line break.

Downstream of these valves the lines join to form a common supply to the pump turbine. Upstream of the turbine is a normally closed DC motor operated valve FV-30801.

A description of the controls for this valve is contained in Section 3.4.

Turbine exosuat is vented to the atqosphere.

3.2.7 Back-up Air Supply As Required for EPIC Related Pneumatic valves The normal air supply for control and actuation of the AFW control valves FV-20527 and FV-20528, MFW valves FV-20525, FV-20575, FV-20526 and FV-20576, and Atmospheric Dump Valves PV-20562A, B, C; PV-20571A, B,

C comes from the normal plant air supply which is not a safety system. To assure that the AFW valves and ADV's will function properly even in the event of loss of offsite power or other loss of normal air supply, and that'the MFW valves will close and remain closed if required by the EFIC, a two hout back-up supply of air is provided. The back-up system is seismic class I and, except for low pressure indication, functions totally' independent of electrical power supplies.

It is a four train supply system with one train supplying air to FV-20527, FV-20525, and FV-20575; one train supplying FV-20528, FV-20526, and FV-20576; one train supplying air to PV-20562A, B,

and C; and one train supplying air to PV-20571A, B and C.

Three of the trains are associated with "A" channel conpenents only, while the train feeding PV-20562A, B and C is a "B" Channel train.

Each train uses a set of high pressure air bottles headered through a pressure reduction valve to supply air to the normal valve control and actuation air supply at a pressure of 85 psig. Since the normal air supply pressure is AFWTECDO Page 12 Rev. 1

approximately 100 psig, the back-up supply will only function if the normal supply is unable to.

Check valves and excess flow check valves are used to prevent flow from'the back-up supply into the normal supply and to isolate a depressurized branch of the back-up air supply. Backup supply to the MFW valves will assure only the EFIC closure function of the valve.

3.3 Supporting Systems The AFW system valves and pumps, including pump motors and turbine are self-contained entities without dependencies on secondary support systems (exclnsive of electrical sources discussed below).

The EFIC cabinets are dependent upon sufficient cooling for the building in which they reside (NSEB).

3.3.1 Electrical Power The two AFW trains are powered from diverse power sources.

AFW pump P-318 is turbine driven with an AC powered back-up motor, and AFW pump P-319 'is AC motor driven.

Each of the pump motors are powered from a diesel generator backed emergency bus.

The following valves required to operate the AFW system are also on AC power with back-up power from a diesel generator: HV-20569, HV-20596, HV-31826, HV-31827, and HV-20565.

In the highly unlikely event that there is a concurrent loss of of fsite power, reactor or turbine trip, and f ailure of all i

emergency diesel generators, the AFW system would remain functional although with reduced redundancy.

AFW pump P-318 (only) would be available and driven from its turbine. P-319 would not be available.. Valves HV-31826, EV-31827, HV-20569, j

HV-20596 and HV-20565 would remain in their last position (unless operated by hand locally). All other AFW functions would remain in service for at least 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br />.

3.3.2 Service Air t

The normal air supply to the EFIC related pneumatic control valves is provided by the plant air system.

In the event that the air supply to these valves is interrupted or lost, a

l back-up supply will be available for at least two hours; see section 3.2.7.

3.4 AFW Initiation and Control (EFIC) System Description It should be noted that all setpoints and values used in the following discussion are approximate and are given for purposes of illustration.

For actual setpoints, see Table 4.2-1.

i' The emergency feedwater ihitiation and centrol system (EFIC) is a 1qgic, control and electrical switching system designed to provide I

the following:

1.

Initiation of auxiliary feedwater (AFW),

2.

Control of AFW flow to maintain steam generator level at appropriate setpoints, AFWTECDO Page 13 Rev. 1

3.

Level rate control when requiced to minimize overcooling,

_4.

Isolation of the main feedwater lines of a depressurized steam generator, 5.

The selection of AFW flow to the appropriate steam generator (s) under conditions of steamline break or main feedwater or emergency feedwater line break downstream of the last check valve.

6.

Control the Atmospheric Dump Valves (ADV's) independent of ICS or other non-manual control. Control should minimize challenges to the main steam safety valves, and allow-cooldown controlled from the main control room or the' Appendix "R" shutdown area.

The emergency feed initiation and control system (EFIC) functional logic is illustrated in Figures 3.4-1 thru'3.4-8.

Figure 3.4-1 illustrates the EFIC organization while the remaining figures illustrate the individual logics that comprise the system. The interf ace of the EFIC with the secondary plant is illustrated in Figure 3.1-1.

The EFIC - see Figure 3.4-1, consists of four channels ( A,B,C, & Db.

Each of the four channels are provided with input, initiate, and vectot logica. Channels A and B also contain trip logics and control logics.

Channels A and B monitor initiate signals from each of the four initiate logics by means of the trip logics to transmit trip signals when r equired. Channels A and B also exercise control'of AFW flow to the SO's by means of control logics to maintain SG level at prescribed values once AFW has been initiated. Channels A and B also monitor SG A and B overfill signals originating in the Channel A, B, C and D initiate logics.

In addition Channel A controls the ADV's on the "A" Main Steam Line. Channel B controls the ADV's on the "B" Main Steam Line.

3.4.1 Inout Logic

.he input logic, depicted in Figures 3.4-3a, 3.4-3b and 3.4-3c Tis located in each of the four EFIC channels. The input logic:

1.

Powers and monitors 6 analog signals; Steam Line Pressure

("A" and

'B"), Wide Range Level (SG "A" and SG "B"),

Low Range Level (SG "A" and SG

  • B"),

2.

Provides input buffering as required, 3.

Incorporates " bistable" logic to compare analog signals to 12 appropriate setpoints to develop digital signals l

based on analog values; S.G.

level tcr, S.G.. lev,el high,.

S.G. level high-high, steam pressure less,than shutdown _

bypass permissive, steam pressure low, steam pressure "A" less than "B", steam pressure "B'

less than "A".

/

Rev. 1 A FWTECDO Page 14 4

4

4.

Provides for calibration and testing of Analog conitoring equipment.

5.

Provides for buffered Class lE output signals and isolated non-lE output signals. Output signals are summarized in Table 3.4-1.

6.

Provi' des signals to other logic within the same channel.

7.

Provides for the insertion of time delays so that transient phenomena, which momentarily force EFIC monitored parameters into initiate regions, do not produce spurious initiations.

3.4.2 Initiate Logic The initI~ ate logic, depicted in Figure 3.4-4 is located in each channel. The initiate logic within each channel derives its inputs from input logic in the same channel and provides outputs to the ' TRIP LOGICS

  • in both channels A and B (see 3.4.3 below), and outputs to initiate logic in every other channel.

Initiate logics within channels A and B also output a ' loss of all RCP's' signal to " CONTROL LOGIC" within their respective channel.

The initiate logic issues a call (to the trip logic) for AFW initiation when:

1.

All four RC pumps are tripped.

2.

Loss of MFW anticipatbry reactor trip is present.

3.

The level of either steam generator is-low.

4.

Either steam generator pressure is low.

Other functions of the initiate logi are:

1.

Issue a call to the trip logic for Steam Generator "A"

isolation when SG A pressure is low.

2.__ Issue a call to the trip logic for Steam Generator "B *

  • i, solation-wifeii SG.S, pr essu r,e_. is.., low,

, ~, _

3.

Issue a call to the trip logic for isolation of MFW to Steam Generator A when SG A level exceeds the high-high level setpoint.

4.

Issue a call to the te,ip logic for isolation of MFW to.

Steam Generator B when SG B level exceeds the high-high level setpoint.

e l

AFWTECDO Page 15 Rev. 1

~

e h

5..

Provide for shutdown bypassing (manually init_tated I

locally at the EFIC cabinet or from the Control Room)-

which blocks the logic of the Steam Generator low level, high-high level, low pressure, and loss of all four RCP's signals out of the initiate logic. The shutdown bypassing function is combined with a low steam generator pressure-permissive signal such that manual initiation of shutdown bypassing can occur on a

,i per channel basis, but will automatically be reset (i.e., signal block will be removed) on a per channel basis if.the pressure setpoint is exceeded.

6.

Provide for maintenance bypassing of initiate outputs to the Trip Logics.

Interties between the channel initiate logics preclude more than one channel from-being in maintenance bypass at any time.

1 Maintainenance bypassing of a NI/RPS channel will t

preclude or. countermand maintenance bypass of any i

other EFIC channel intiate logic (e.g., NI/RPS channel A placed in bypass will preclude or countermand maintenance bypassing of initiate logics in EFIC channels B, C, and D.)

I 7.

Provide for local manual initiation of a) Flux /MFW flow AFW initiate (will not trip RPS) b)

loss of any or all RCP's (will not trip an RCP) c) either spare AFW initiate trip ( Anticipatory Trip 1, Anticipatory Trip 2)-

d) Shutdown Bypass (when bypass permissive exists) e) Bypass Reset 3.4.3 Trip Logic

~

The trip logic is, illustrated in Figure 3.4-5.

Trip Logic 7A, 8A, 9A, 10A, llA, and 14A are located in EFIC Channel A.

Trip Logics 7B, 8B, 9B, 108, llB and 14B are located in EFIC Channel B.

No trip logics are located in eitber Channel C or Channel D.

The trip logic of the EFIC employ 1 a 2(1-out-of-2) format. The format provides for easy one step testing from the input logic test switches to the initiated controllets. Testing is facilitated by

~~ __

~

locating the,;A;1D. portion.,of the 2(1-out-of-2) logic in the

~ 3 rip. interface equipartt [Tff TE.'T. "'A-character ~istic rof r* ' e-

~7 coincidence logic systems is that a test stimulus inserted at the input propagates to the first AND element of the system and no furthec. Since the first AND element of the EFIC is in the TIE, test stimuli inserted at the input logic will be propagated to each apptopriate controller in-the TIE.

FFIC testing philosophy is discussed in Section 3.4.6.

t AFWTECD0 Page 16 Rev. 1 t

i l

The trip logic is provided with five trip networ'ks which interface'with the TIE.

These networks monitor the appropriate outputs of the initiate logics in each of the channels. They output a full trip when a (2(1-out-of-2)]

network exists in the intiate logic. Thus, for trip modules located in Channel

'A",

AFW initiate signals from all four Channels would be combined to produce a full AFW initiate trip signal when (' A' or "B") and ("C" or."D")

are present. However note that for trip modules located in Channel

'B",

the full trip condition occurs when ("A*

or "C") and ("B" or "D*) are present.

The five trip networks per channel are:

1.

Auxiliary feedwater initiate 2.

SG A isolate 3.

SG A main feedwater isolate 4.

SG B isolate s

5.

SG B main feedwater isolate The trip module trip signals are output to the' Trip Interface Equipment (TIE) cabinets. The trip interface equipment actuates AFW system and related components as a result of these signals. The components actuated from the TIE are summarized in Table 3.4-2.

An addition to the above, trip modules (called control enable modules) located in Channel

'A' and Channel "B'

1 will ' trip" whenever a full trip is output from the AFW initiate trip module. The control enable module in turn activates the normally dormant cont,rol logic. The control logic will remain activated until the control enable modules are manually reset.,This allows the Control Room operator to place the AFW Initiate trip into manual in order to release' EFIC commands to AFW components without defeating the autbmatic S.G. level control.

The AFW trip logics (logics 7A and 7B) are input by Safety Features Actuation System (SFAS) trip signals to assure that AFW is initiated coincident with Emergency Core 4

Cooling actuation.

'~

..-_:.= r r,, _,

^6e triF16"gic^is1FoI/ididewithaca= --

. -. _. ~ -

For eacE,'_tifip'funEEloht..

c t

twb manual ' trip" switches located in the Control Room.

This affords the operator a means of manually initiating a selected function by depressing both switches. The use of two

  • trip" switches allows for testing the trip busses and l

also reduces the possibility of accidental manual initiation, f

. 1 AFWTECD0 Page 17 Rev.

e 4

~

Once a. trip of the trip bus occurs (i.e., ence the trip bus has sent a signal to the TIE), the trip condition will-remain until it is manually reset. A ' reset

  • switch and a

" manual" switch are also provided in the Control Room for each of the five trips in both Channel A and Channel B.

The ' reset

  • switch is a momentary contact button which allows the operator to clear a trip signal from the trip bus after the initiating conditions have cleared. The

' manual

  • switch is a momentary contact button which allows the operator to clear a full trip signal from the trip busses after the trip has occurred but before-the

-initiating conditions have cleared. This allows the operator to take manual' control of EFIC actuated equipment to optimize response to the initiating condition.

Whether cleared by the ' reset" or the " manual

  • switches, the trip signal will be re-esta' lished if initiating c

conditions re-initialize; i.s., if.the conditions which caused the trip return to acceptable values and then those conditions (or any other) re-enter a trip region.

Both the ' manual" and the ' reset" switches are also used in conjunction with the " trip" buttons to test the trip circuits. Each of these switches are located in the main Control Room and locally in EFIC Cabinets A and B.

Trip signals are transmitted out of the EFIC to the TIE by activating a solid state relay, thereby gating power onto the trip busses.

In this manner, the EFIC provides power to energize the control relays in the trip interface equipment (TIE) whose contacts form the AND gates in the controllers..The TIE also provides signals to the EFIC in response to half trip conditions for test purposes.

3.4.4 Vector Logic The Vector logic is shown on figure 3.4-6.

The function of the vector logic is to determine whether AFW should not be fed to one or the other s' team generator. This is to precl.ude the continued, addition of AFW to a depressurized steam generator and thus minimize the overcooling effects

-f a steam leak.

Each vector logic may isolate AFW to v.

-,, gnly,.ong st.eay1.generat;or or the other, never both.

-a

... m Y4%.?uG" _

There are four sets of vector logic; one in each channel

~ ~ ' " ~

of EFIC.

Each set of vector logic receives steam generator pressure information from bistables located in the input logic of the same EFIC channel. The pressure information received is:

AFWTECDO Page -18

-Rev. 1 h

i

,m---

c3,_

l. s' team generator ' A' pressure less than 600 psig
2. steam generator "B" pressure less than 600 psig
3. steam generator

'A' pressure 100 psid greater than steam generator *B" pressure

4. steam generator "B" pressure 100 psid greater than steam generator "A" pressure Each vector logic also receives a vector /c'ontrol enable signal from both EFIC channel A and channel B when AFW is initiated.

The vector logic develops signals for open/close control of steam generator

'A' and "B" auxiliary feedwater valves.

The vec'or logic outputs are in a neutral state until t

enabled by the control / vector enable from the channel A or

.1 B trip logics. When enabled, the channel A vector logic can. issue close commands. to valves FV-20527 and FV-20528.

Channel B can issue close comman's to FV-20531 and d

FV-20532.

Channel C can issue open or close-commands to HV-20578 and HV-20581.

Channel D can issue open or close commands to HV-20577 and HV-20582.

j The valve open/close commands are determined by the relative values of steam generator pressures as follows:

Pressure Status SG

'A' Valves SG

'B' Valves If, SG

'A'

  • B" 600 psig Open Open If, SG "A" 600 psig &

Open Close SG

'B' 600 psig IF, SG

'A' 600 psig &

Close Open SG

  • B' 600 psig If, SG

'A' 600 psig

& SG *B" 600 psig

.. y.:.* v-x:.. g. :y;. - 3. m 3--,-- g,;mm.,__.

SG

'A'

  • B" within Open Open 100 psid AND SG "A" 100 psid SG
  • B*

Open Close SG

  • B' 100 psid SG A"

Close Open AFWTECDO

~

Page 19 Rev. 1

~

4 w+-e 9-

-rw

-- mm y,.4

,_%~.mm_,-

..-w_..,,. _ _ _, -.,.. -,

.p-99,,

,,--%.-7_,.,,.

-9m em_qc-_,%- -.

,-n.,

sv. p.

3,

.w.. - -.. - >.4J...:.

.2a pressure in SG

'A' increased to'above 600 psig, AFW would be re-tdmitted to SG "A*.

3.4.5 Control Logic The control logic is shown in Figure 3.4-2, 1

Control logic is located in EFIC Channels A and B only.

The control logic in Channel A controls level in steam

-generators "A" and "B', and steam overpressure, control for steam line

'A' only. Likewise, the control logic in

. Channel B controls level in steam generators

'A' and "B",

and steam overpressure control for steam line "B"

only.

3.4.5.1 steam Generator Level Control If the AFW system is initiated with one or more Reactor Ccolant Pumps running, the level, control

. logic in JFIC channel A will be " enabled" by a signal from the A and/or B channel trip logic and will send control signals to AEW -flow control valves FV-20527 and FV-20528 (feeding steam generators A and a respectively) to maintain a level of approximately 2 feet.

(See Table 4.2-1 for exact setpoints).

If all four of th,e Reactor Coolant Pumps are not running, the control logic in channel A will automatically select a level setpoint high enough to assure good natural circulation characteristics in the RCS.

The natural circulation setpoint is approximately half way up e

the steam generator. Tc minimize overcooli.1g effects on the RCS while tilling to this higher 1evel, the level control employs a level ' rate of increase" control which uses ste'am generator pressure as a feedback parameter.

In this way, the cate of level increase is controlled such that it will not rise faster than approximately 8 inches per minute if the steam pressure maintains 1050 psig or greater. This rate of increase would decrease linearly with decreasing steam pressure to a value of ap'roximately 2 inches per p

minute at e steam pressure of 800 psig or below.

C"*"~"'""*

C;2tu e.cca A third level setpoint called the ECC setpoint (for EMERGENCY CORE COOLING) can be selected if all four Reactor Coolant Pumps are off. The operator can select a high level setpoint of approximately 31.75 feet by pushing a button in the Control Room. This option is intended for use during some LOCAs, and utilizes the same rate of fill limits as the natural circulation setpoint.

AFWTECDO Page 20 Rev. 1

)

~

1,

< y

=

3 F;

.E.D.

4

--.-,,----e,

,m_---.

,.-.. -,- -.,.-,,,._ r -,

.,....,-r--..

Level control logic in EFIC channel B, controls

. level in both steam generator A and 3 in'a similar fashion. Channel B controls AFW flow

-control valves FV-20531 and FV-20532.

Individual manual control of all four AFW flow control valves and all four AFW isolation valves is possible from the Control Room whether or not AFW has been initiated.

3.4.5.2 Steam Generator Pressure Control Steam line overpressurization control is aided by the pressure control logic in EFIC.

EFIC Channel A pressure control monitors steam line "A" cnly.

EPIC Channel B monitors steam line "B" only..

Pressure control logic constantly monitors

~

pressure in one steam line only and if the 4

pressure exceeds a setpoint will progressively open the Atmospheric Dump Valves ( ADV's) on that l

steam line. The setpoint is to be set. higher than the post reactor trip Turbine Bypass Valve setpoint, but lower than the lowest expected opening setpoint of any steam line code s'afety valve.

3.4.6 EPIC Trip Testing 1

l The EFIC System is fully testable on a per channel basis during normal plant operation. Testing is fully in i

compliance with IEEE 279 sections 4.9 and 4.10; from sensor input to trip actuation. Testing will neither initiate not prevent initiation of AFW.

Figure 3.4-7 illustrates the test philosophy of the EFIC in simplified j _

form for one EFIC trip function (e.g., AFW initiate i

l trip). For purpose of the following discussion, the test t

pushbuttons associated with each bistable are capable of forcing the bistable input into the trip region. The bistables employ a low dead band so the bistable will reset once the pushbutton is released.

Completed trip testing (input to controllers) may be initiated from the input logic bistable module in each of the channels.

Depressing the pushbutton in Channel A will trip the Channel A bistable and:

1.

The Channel A initiate logic will transmit initiate signals to both the Channel A and Channel B trip.

logic.

2.

. The Channel A and Channel B trip logics will ha'lf trip (trip one of the two trip buses).

AFWTECDO Page 21 Rev. 1

~

e h

I 3.

the half trip.The channel A and. Chann l e

The half trip will beB trip. logics will latch reset of the bistable.

circuit.

in This tests the latchingretained after 4

Each controller in the TIE confirmation signal back towill acknowledg receiving the half trip r p by transmitting a test 5.

EPIC.

A full complement of test result is that thesatisfy the ANO gate in bothconfirm sig Channel A and B.

success.

confirm lamps would indicate t The 6.

The trip logic est locally in the EPIC cabireset switches in the Coritrol reset the half trip. The confirm Iamp shouldnets'can n Room.or 7

If some, but not all o

go out.

to a malfunction, the confirm la, controllers were to The foregoing tests mp will flash. respond due 8.

from all channels. channel in turn to test thmay be co e ability to transmit 9.

trips The foregoing tests functions from all chann l conducted for may be e s for all trip 10 as described above complete trip testing.

Tests of the local and remote mamay also be switches.

not the initiate logic.This will test only the t inua TIE:

3.4 7 r p module and EPIC Signal Application' Figure 3.1-1 illustrate Salient features s the application of the arrangement are: of EPIC signals.

1.

The channel signal admitsemergency feedwater pumpA AFW trip ' signa

, P-319 electric e

failure of the A or'B trileast one pump feedwater pump The P-318.

With this e

auxiliary arrangement, at p logics.arted even with a single

~

2 AFW will be initiated aIf the initiating event i s in 1 above.s low SG pressure in SG

'A' the trip logics in chan trip logic will. isolate Smain feedwater isolation t in

'A' In addition, r p signals.

closing the MFW-control valvG 'A' main feedwater byThe ch and MFW block valv A

e, on the

'A'MFW line (i ee, S.U. control valve, FV-20525, PV-20575 trip logic wi-11 isolat

, and HV-20529).

'iaolation -valve" on ttie *A

~

The Channel e

'A' MFW by closing the MFW AFWTECDO B

' MFW line (i.e. HV-20515)

Page 22 Rev. 1

,w-

3.

The Ghannel A and Channel B trip, logics will latch in the half trip. The half trip will be retained after reset of the bistable. This tests the latching

circuit, j

~

4.

Each controller in the TIE receiving tha half trip will acknowledge the half trip by transmitting a test confirmation signal back to EFIC.

5.

A full complement of test confirm signals,will satisfy the AND gate in both Channel A and B.

The result is that the confirm lamps would indicate test success.

6.

The trip logic reset switches in the Control Room.or locally in the EFIC cabinets '.can n,ow be depressed tu reset the half trip. The confirm-lamp,should go out.

7.

If some, but not all, control'lers were so respond due to a malfunction, the confirm lamp will flash.

8.

The foregoing tests may be conducted from each

~

~

channel in turn to test the ability to transmit trips from all channels.

9.

The foregoing tests may be conducted for all trip functions from all channels for complete trip testing.

10.

Tests as described above may also be conducted by use of the local and remote manual trip and reset switches. This will test only the trip module and TIER not the initiate logic.

3.1.7 EFIC Signal Application' l

Figure 3.1-1 illustrates the application of EPIC signals.

Salient features of the arrangement are:

1.

The channel A AFW trip Signal starts the elect'ric emergency feedwater pump, P-319.

The channel B trip signal admits steam to the turbine powered auxiliary l

feedwater pump, P-318.

With this arrangement, at least one pump will be started even with a single

~

failure of the A or'B trip logics.

2.

If the initiating event is low SG pressure in SG *A*,

AFW will be initiated as in 1 above. In addition, the trip logics in channels A and' B will issue SG *A*

main feedwater isolation trip signals. The channel A trip logic will. isolate SG *A's ma,in feedwater by closing the MFW control valve, S.U. control valve, and MFW block valve. on the *A* MFW line (i.e.

TV-20525, Fv-20575, and EV-20529). The Channel B trip logic wi11 iso. late "A* MFW by closing the MFW

' isolation -valve' on 'the ' A' MFW line (i.e. EV-20515).

AFWTECDO Page 22 Rev. 1

. h 3.

Isolation o.f SG "B" main feedwater lines occurs in the same way as described in 2 above for SG A except that the Channel A and B SG *B" sain feedwater trip logics are employed. Channel A will close rv-20526, i

FV-20576, and HV-20530. Channel B will close EV-20516.

4.

Given the condition where_both SG pressures are low, MFW to both SG's is terminated.

5.

Since MFW isolation is commanded out of the trip logics, the isolaticn command will not automatically reset if pressure in the SG recovers. The isolate command will, however, be removed if the SG isolation trip logic is taken into manual by pushing the manual or reset pus,hbutton in the Control Room.

6.

The Auxiliary Feedwater flow path to each generator

^

contains two control valves in parallel and an isolation valve in series with each of the control

'ralves. This assures feeding of both steam generators even with the preaence of a single valve or control failure.-

7.

- Atmospheric Dump Valves ( ADV's) PV-20571 A, B, C and PV-20562 A, B, C are modulating control valves which relieve main steam to the atmosphere from the main steam line "A" and main steam line "B" respectively.

EFIC Channel A will continously monitor pressure in 2

I main steam line "A" and will open -PV-20571 A, B, and j

C if pressure in that line exceeds a setpoint. EFIC Channel B will similarly control PV-20562 A, B, and C.

8.

Both the AFW control valves and the ADV's have

~

manual / auto control stations located in the control Room. The AFW vavles, FV-20527, Fv-20531, rV-20523, and FV-20532, have one manual / auto station each, located on HISS.

For the ADV's one manual / auto f

station will control PV-20571A, B, and C in parallel, I

and another will control PV-20562A, B, and C.

These two stations will be located on ElRI. Manual positioning of the valves will be possible at anytime (whether or not EFIC has initiated AFW). Bumpless

. transfer from EFIC auto control to manual control is j

provided.

3.4.8 OTSG Level Sensing Figure 3.4-1 Sheet 2, contains the arrangement for OTSG

~

level. sensing. Allowable instrument error requirements are given in' Appendix B.

.To provid,e 'for low level control and low level initiation signals..for the auxiliary feedwater, four level transmitters (dP transmitters) per SG are used. The s'ensing lines for these transmitters will be connected between level taps located 156 inches above the ' top face of the lower tube sheet and to level taps at 6 inches 1

above the top face of the lower tube sheet.

APWTECD0 Page 23

~

Rev. 1

0 To provide high level control and overfill protection sign 41s, four level transmitters per SG will be used. The upper sensing oonnections will be taps at 619 inches above the top face of the lower tube sheet. The lower sensor connections will be 6 inches above the top face of the lower tube sheet.

Both the low and high S.G. level signals are altered within EFIC to compensate for density variations in the liquid and th.e pressure contribution of steam between the liquid level and the upper level tap.

EFIC S.G. level indication will therefore indicate true liquid height above the lower tube sheet, when low flows in the S.G.

exi,st (i.e., during post reactor trip operation). -

3.4,9 Interface with Valve and Pump Controllers g'

All valve andl pump controllers shall be designed such that signals from the EFIC system will have priority over other commands except equipment protection commands. Also, except for the YFW isolation signal to the MFW start-up and control valves, when an EFIC trip signal is placed in manual or is reset, the controller design shall be such that valves will not change position an'd pumps will not change state without a specific additional manual command. When the vector logic close command to an AFW control valve is removed, the control valve shall be positioned as required by the AFW* control system (or the manual control as selected) until the operator resets the automatic control function.

3.5 Annunciation Many annunciated EPIC points, will be available to the dontrol Room operators via the IDADS plant computer. These points are listed in Appendix "D".

An IDADS generated alarm will warn the Control Room operators when steam generator levels are approaching the EPIC low level setpoint which initiates AFW.

In addition, an annunciator window will show that EFIC has initiated AFW and/or isolated MFW to a steam generator.

3.6 Main Feedwater Overfill Termination The EFIC System, as required in Section 2.1.6, is designed to provide signals for termination of main feedwater to a steam generator on approach to 'an overfill condition. This capability will be present for initial startup of EFIC, however, the overfill setpoint will be set at its maximum value of 619".

This will allow data collection to determine a safe margin between operation at high power levels and the trip setpoint.

Implementation of main feedwater overfill termination is accomplished by EFIC trip circuits and MrW valve closures as is done for MFW isolation on low SG pressure, however there is no automatic initiation of AFW concurrent with SG overfill.

AFWTECD0 Page 24 Rev. 1

(l

=

3.7 Appendix' "R" Interface To integrate the new AFW and ADV control modes into the Appendix "R" mandated shutdown and cooldown procedure, some EFIC instrumentation and controls which are duplicates of those located in the Control Room will be located at the Appendix "R" shutdown controls area.

Isolation switches at EFIC Channels A and B will transfer and l

-isolate the controls from the Ccntrol Room to the Appendix "R" shutdown area. These switches also provide Class 1 isolation between EFIC and the Appendix 'R" shutdown area.

}

EFIC Channel A will provide SG

'A' and SG "B" level and SG "A" pressure indication t~o the shutdown controls area. Channel A will

.also.interf ace with the shutdown controls area via three hand / auto Icont'rols; one each for FV-20527, Fv-20528, and PV-20571A, B

,Iand C.

EFIC Channel B will provide SG

  • B" pressure and a hand / auto control for PV-20562A, B and C.

f 4,

4.0 BYSTEN LIMITS, PRECAUTIONS AND SETPOINTS 3

i 4.1

' Limits and Precautions 4.1.1 AFW Flow Limits Maximum allowable continuous flow - 1800 gps /SG

~

- 760 gym Total flow to both i

Minimum required flow generators, with 1050 psig i

pressure in the generators 4.1.2 AFW Pump Suction Pressure P-318 minimum required NPSH - 18 feet at 840 gpa, 28 feet at 1200 gym P-319 minimum required NPSR - 18 feet at 840 gpm, 28 feet at 1200 gpm 4.'1. 3 System Limits Design) 1301 psig

}

Pressure 0

ll5 F i

Temperaure I

4.1.4 Minimum Required Pump Flow P-318 60 gym 1

P-319 -

60 gpm l

t AFWTECDO Page 25 Rev. 1 4

i I

E

b

'4.2 Setpoints All setpoints given in this acetion and defined as " normal" are

~

instrument calibration points.. Instrument string errors as

[

defined in Appendix B were used in the analyses to determine the conservation maximum and minimum setpoint values. The maximum-and minimum setpoints represent the earliest and latest assumed actuation point for use in anlaysis.

For the purpose of this discussion, " Level

  • refers to the equivalent height of a saturated water column referenced from the top of the lower tube sheet.

4.2.1 Flux to Main Feedwater Flow Ratio Setpoint The flux to feedwater ratio setpoint is shown on Figure 4.2.1.

This setpoint was developed as an

{

i anticipatory trip for loss of feedwatet events. The*

j equation used for this setpoint and errors and delay times

~

i are also.shmm on Figure 4.2.1.

This trip function is

.A located in the RPS.

An output from the RPS will feed the I

EFIC to initiate AFW.

4.2.2.

Low SG Level AFW Initiate Setpoint i

This is a protective setpoint designed to initiate AFW following loss of, or insufficient main feedwater flow.

The low range level instrumentation is used to monitor low level in the steam generators. For setpoints see Table 4.2-1.

4.2.3.

AFW Control Level Setpoint This is a level control setpoint designed to be automatically selected following initiation of AFW if one' l

or more reactor coo'lant pumps are' providing forced

~

circulation. The low range level instrumentation is used to monitor steam generator level at this point and to provide signals to the EFIC control system. For setpoints i

see Table 4.2-1.

l 4.2.4 Natural Circulation control Level Setpoint 4

This is a level control setpoint designed to be automatically selected following intiation of AFW if all j

four reactor coolant pumps have stopped. Twenty (20) feet of steam generator level provides a thermal center in the steam generator at a higher elevation than that of the reactor. Controlling steam generator level at a minimum l

level of approximately 26.4 feet insures natural circulation of the reactor coolant system fluid. The wide l

range level instrumenation is used to monitor steam generator level at this point and to provid'e signals to the EFIC control, system. For setpoint see Table 4.2-1.

AFWTECD0 Page 26 Rev. 1 b

e

+w w- -, - - --- - - - - - - - - ---- - --. - w-.,w,.-

--r---c,---_

,,----,,,,e-,-~ww,-m.-,v e---,r--

,e-,-e

,-----y--

---,=-rw

-+m-------

--,---e',

b o_

4.2.5 ECCS Fill Limit Setpoint This is a level control setpoint designed to be manually selected when no RCP's are running following a LCCA. This setpoint will establish a steam generator feedwater level which will support steam condensation natural circulation. The wide range level instrumenation is used to monitor steam generator level in this region. For setpoints see Table 4.2-1.

4.2.6 Low Steam Generator Pressure Setpoint This is a pressure setpoint designed to initiate AFW and to automatically isolate the main feedwater lihet to the -

affected steam generatqc. This setpoint will isolate main feedwater to the affected steam generator only. Feedwa ter to the other steam generator will not be isolated. If one or both steam generators are below this setpoint the EFIC system will initiate AFW and terminate MFW to one or both SGs as appropriate. Pressure instrumentation string-requirements are given in Appendix B.

For setpoint see Table 4.2-1.

4.2.7 Low SG Prgssure Bypass Permissive Setpoint The EFIC shutdown bypass will only work if' the steam generator pressure remains below this setpoint. This permissive feature is required by IEEE-279 and NUREG-0737 II.E.1.2.

The setpoint must be high enough to allow operators to place the EFIC Channnel in bypass in normal cooldown sequences prior to reaching the low SG pressure setpoint, but low enough to assure that the system will, not be bypassed (will automatically reset) during a normal heatup prior to reaching hot shutdown. For setpoint, see Table 4.2-1.

4.2.8 Steam Generator Differential Pressure Setpoint If both SGs are below the low SG pressure setpoint, the differential pressure setpoint will automatically determine, by comparing the difference in steam generator pressures, which steam generator is to be fed with AFW.

Pressure instrumentation string requirements,are given in l

Appendix B.

For setpoint see Table 4.2-1.

f l

1 t

AFWTECDO

~

Page 27 Rev. 1 6

G S

e

[

4.2.9 Atmospheric Dump Valve Operating Setpoint This is a pressure sotpoint designed to automatically open the atmospheric dump valves to relieve steam generator pressure. This setpoint is higher than ICS setpoint for TBV's but is lower than the lowest main steam relief valve lift point and will therefore decrease the frequency of challenges to the relief valves. Pressure instrumentation string requirements are given in Appendix B.

For.

setpoints see Table 4.2.1.

5.0 OPERATION The AFW is in standby mode during normal power operation. Manual action will be required to bypass features of the EFIC system during various modes of operation. The system design will permit bypassing of four 1

EPIC functions when steam generator "A" or "B" pressure is below a permissive setpoint of 725 psig. Those functions aro steam generator

~

low pressure AFW initiate, all four RC pumps tripped AFW initiate, steam generator low level AFW initiate, and steam generator overfill terminate. All four functions will be capable of being bypassed via a single 'EFIC Shutdown Bypass' switch in each channel. The bypass switches are located in the main Control Room on HISS and in each of the EFIC Cabinets. Automatic reset of all, four trip functions will occur if they are in bypass and both steam generator "A" and "B" pressures exceed 725 psig.

5.1 Heatup from Cold Shutdown to Hot Standby Before heating up from cold shutdown, the operator should verify the status of the EFIC.

All signals should be in bypass.

Shutdown bypassing of the EFIC System is indicated by backlighted 1'

pushbuttons on the HISS Console. The reactor power /MFW flow trip does not have an explicit bypass. However, this. trip will allow

  • the plant to go to approximately 20% power with no MFW flow and, therefore, this trip is ef fectively bypassed. As heatup progresses the four functions of SG low pressure AFW initiate, all four RCP's tripped AFW initiate, SG low level AFW initiate, and SG overfill terminate will automatically reset when both steam generator A and B pressures exceed 725 psig. A manual reset of the shutdown bypass is possible at the EFIC cabinets, regardless of SG pressure.

5.2 Bot Standby to rull Power At hot standby conditions, all trip functions should be active.

No operator actions are required.

Conversely, when reducing power from full powe'r to hot standby, no operator actions are required. Shutdown bypassing is also possible through. local switches in th'e EFIC cabinets.

AFWTECDO Page 28 Rev. 1 o

d 5.3

_Cooldown from Hot Standby to Cold Shetdown During the cooldown, four EFIC functions must be manually bypassed. These functions are SG low pressure AFW initiate, all four RC pumps tripped AFW initiate, SG low level AFW initiate, and SG overfill terminate. When either steam generator is below 725 psig these functions may be bypassed via a single "EFIC Shutdown Bypass" in each of the four channels. The bypass switches are located in the main Control Room. Action to bypass these function must be taken before either steam generator pressure reaches 600 psig.

6.0 CASUALTY EVENTS AND RECOVERY PROCEDURES 6.1 Casualty Events As part of the design of the AFW system, consideration was given to handling the following casualties:

a)

Loss of sain feedwater (LMFW) b)

LMFW w/ loss of offsite AC power c)

LMFW w/ loss of onsite and offsite AC power d)

Plant cooldown e)

Turbine trip with and without bypass f)

Main feedline break g)

Main steam line break / auxiliary feedwater line break h)

Small break LOCA i)

Fire outside of Control Room J)

Fire in the Control Room 6.2 Design Features to Mitigate Effects of Casualty Events 6.2.1 Loss of' Main Feewater (LMFW)

Loss Main Faedwater (LMFW) - Upon loss of all feedwater AFW pumps are automatically initiated by the EFIC system.

A valves wide open flow rate of 760 gpm even with a single failure is sufficient to mitigate the ef fects of LMPW.

After initiation, the leve,1.will be automatically dontrolled to about-2 feet. The only required operator actions concerning AFW are to confirm that AFW flow has been initiated ar.d that a level has been established in both OTSG's.

AFWTECDO Page 29 Rev. 1 e

e

i, l Iil 6.2.2 Loss of Main Feedwater with Loss of Of fsite AC Power -

Upon loss of offsite AC power (which causes a loss of the RC pumps), the AFW system is used to establish natural circulation. APW pumps are automatically initiated by the EFIC system. The level rate control system will automatically raise the level in the OTSC's to the natural circulation setpoint at a rite of between 2*/ minute and 8*/ minute. The high auxiliary feedwater injection point in the steam generators provides a high thermal center which will establish natural circulation even with a low steam generator level. For a high decay heat rate event, the level should increase to the natural circulation setpoint at 8*/ minute without requiring any operator action. For lower decay heat rate events, the excess APW injection will begin to quench the steam, and steam j

pressure in the OTSG will drop. This decrease in OTSG steam pressure (and saturation temperature) will continue to cool the primary system. The EPIC is designed to automatically throttle back APW flow as steam pressure drops.

The flow will be throttled to a minimum of about 2*/ minute level increase when steam pressure drops to about 800 psig or below. This feature will minimize the potential for overcooling. For very low decay heat rates, the operator may have to take manual control of the AFW system and further reduce AFW flow to keep from loosing pressurizer level. The design basis for the EPIC is to allow a minimum of 10 minutes with no operator action for all cases. It is anticipated that either no operator action will be required, or time well in excess of 10 minutes will be available for operator action.

6.2.3 Loss of Main Feedwater with Loss of Onsite and Offsite AC Power - This event is not a design basis for the plant, but the APW system is designed to supply, as required, up to 760 gpm flow with the loss of both onsite and offsite AC power. All EFIC controls are powered by battery-backed vital busses as are the APW control and isolation valves.

The turbine driven train of APW should start and supply sufficient flow as described in Section 6.2.2.

However, single and multiple failures of the AFW system are not taken into consideration.

6.2.4 Plant Cooldown - The AFW system is capable of being used to assist in a plant cooldown. The plant, however, was not designed for a normal cooldown using only safety grade systems. The motor-driven AFW pumps can be used with the atmospheric dump valves to cool the plant down to the Decay Beat Removal System cut-in temperature.

6.2.5 Turbine Trip With and Without Turbine Bypass - This event does not affect the APW system unless MFW fails. In which case, the loss of MFW event in Section 6.2.1 describes the behavior of the AFW system.

AFWTECDO Page 30 Rev. 1

. l?

.;6 Nain Fe'ed 'Line Break - This break is a more abrupt case of j

LOFW and has approximately the same requirements for AFW flow. If the break is upstream of the last feedwater line i

check valve, the accident should proceed as the loss of

-#'W

' *O'?,' ' * *

~

main feedwater event described in 6.2.1.

If the break is downstream of the last check valve, the steam generator will blow down to the containment or the tank farm and AFW will be initiated through EFIC by either a low SG level or low SG pressure. When the SG has depressurized below approximately 600 peig, the steam generator isolation logic will isolate main feedwater to the affected steam generator. Upon reactor trip the' turbine control commands the turbine throttle valves to close, thus allowing the unaffected steam generator to repressurize. After isolation of the affected steam generator the EFIC vector i

logic will. upply AFW only to the intact steam generator, s

f

.7 Nain Steam Line Break / Auxiliary Feedwater Line Break - The ef fect on the system from both of these transients is essentially the same. For smaller. break sizes, the steam generator will not depressurize or will require a very long time to depressurize. No automatic action is taken for these cases. The operator must diagnose the problem and take appropriate manual actions. For break sizes that 6f"M,7*!<!#"N will depressurize the steam generator down to approximately 600 peig, EFIC will automatically terminate main feedwater to the depressurized steam generator (s).

Some break sizes and locations may cause both steam generators to depressurize below 600 psig without a 100 i

psid differential between the two steam generator pressures. In this case main feedwater will be terminated automatically to both steam generators. A reactor / turbine trip signals (via the turbine control) the turbine stop valves to.close. If the break is downstream of the turbine stop valves, both steam generators should repressurize. AFW will then be fed to both steam generators.

If the break is upstream of the turbine stop valves, one steam generator will repressurize unless both EV-20560 and EV-20569 are open. The EFIC vector logic r

will direct AFW only to the intact steam generator or if both are depressurized equally, will feed both.

For a steam line break with a concurrent failure of one turbine stop valve in the unbroken line, the back pressure in the unbroken steam line may prevent the turbine stop l

valves in the broken lines from seating. Both steam

~

generators will blow dry after the rupture. Since main feedwater has been isolated, the accident is terminated,

~~ ~g.,,,

.pgg,g,3,,

g;,.

and the core does not return to criticality. An equilibrium reactor system cooldown and depressurization l

is achieved by operator control of the auxiliary feedwater I

flow with steam relief out of the steam line break.

l Refer to Abnormal Transient Operating Guidelines (ATOG)4kf,'ek*,

for operator actions required.

1 Page 31 Rev. 1 l

l i

i

- - -,. ~ - -

-n---n-----

6.2.8 Small Break LOCA - For a small Break LOCA (SBLOCA) event, the APW system will be automatically initiated by an SFAS signal. Current procedure also requires that - the RC pumps be tripped for a Small Break LOCA.

Under these conditions, the EFIC system should automatically raise level at a controlled rate in the steam generators to the natural circulation setpoint. The time it takes for the controlled rate fill to get level process to the natural circulation setpoint will vary depending on initial SG inventory. During this time, current procedures require that the operator diagnose the event to determine that it is a SBLOCA. When this determination has been made, the operator is instructed to select the ECC level setpoint.

The purpose of raising the level is to assist in establishing steam condensation natural circulation if part of the primary system is voided. Prior to reaching I

the required ECC level setpoint there will be substantial AFW flows high in the OTSG. These flows will provide good heat transfer high in the OTSG.

- Selection of the ECC level setpoint will continue the filling of the OTSG at a controlled rate.

If filling the OTSG at some rate other than the one used in the EFIC system is required, the operator may take manual control of the AFW control valves. AFW can then be manually controlled as required for a given situation.

6.2.9 OTSG Overfill.- A main Feedwater (MFW) overfill event is detected by a high range differential pressure signal.

When an excessive level is detected, main feedwater to the l

affected steam generator is terminated. Termination of l:

MFW will, in most instances, lead to a reactor trip.

Recovery from this condition requires operator action to determine the causes and restore MFW.

6.2.10 Shutdown Initiated by Fire Outside the Control Room - The fire and its location are reported to the main Control Room and at the operator's discretion cooldown using auxiliary feedwater may commence. The operator manually initiates auxiliary feedwater via EFIC controls on HISS.

Automatic level control will be available through EFIC Channel A and/or B.

However, one or the other channel may be af fected by the fire and require isolation of the control valves using Control Room controls.

1 1

6.2.11 Shutdown Initiated by Fire in the Control Room - After evacuation of the Control Room auxiliary feedwater may be controlled from the shutdown panel H2SD in the West Switchgear Room through EFIC Channel A.

OTSG pressure control and cooldown rate will be through EFIC Channels A and B for OTSG's A and B respectively. Control Room to Shutdown Panel EFIC control transfer and manual initiation of auxiliary feedwater will be performed locally at the EFIC A and B cabinets located in the NSEB.

AFWTECDO Page 32 Rev. 1

7.0 TESTING AND MAINTENANCE The AFW System is designed to allow periodic testing during power operation. Routine maintenance activities, however, should be performed during plant outages. The technical specification will allow one train of the AFW system to be inoperable for only a short period of time during power operation (72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />). Therefore, most corrective

{

maintenance must be performed with the plant shutdown.

i i

i 7.1 Periodic Testing of the Fluid System f!s' The system design allows testing of the pumps and valves in the d:

3 AFW system during power operation. The pumps can be tested by manually starting them and flowing through the flow test valve FV-31855 to,the condenser. The AFW isolation valves are closed in the absence of an automatic initiation signal. Therefore, no system realignment or bypassing is required to perform this test.

All automatic valves in the AFW system can be full stroke exercised (with the AFW pumps off) during power operation. No system realignment is required to perform these valve tests.

7.2 Periodic Testing of the EPIC The EFIC is designed to be tested from its input terminals to the actuated device controllers. A test of the EFIC trip logic will actuate one of two relays in the controllers. Activation of both relays is required in order to actuate the controllers. The two relays are tested individually to prevent automatic actuation of the component. Testing of the sensor inputs to the EPIC will

~

normally be accomplished with the plant at cold shutdown. EFIC trip testing is discussed in Section 3.4.6.

l l

l AFWTECDO Page 33 Rev. 1

Table 3.4.1 ANALOG OUTPUT SIGNALS Outputs to the Control Room (C.R.) and shutdown panel are hardwired to indicators. Outputs to MUX (multiplexer) can be made available on IDADS or SPDS.

Signals planned to be available on IDADS are marked with an (I); those planned to be on SPDS are marked with an (S).

Signal Process EPIC Channel IE Range Range A

B C

D Steam Line (S.G.) Pressure "A* to MUX X

0-10V 0-1200 psig X(S)(I) X(S)(I)

X(I)

X(I)

Steam Line (S.G.) Pressure

'A' to C.R.

K 0-10V 0-1200 psig X

X Steam Line (S.G.), Pressure "A" to Shutdown 1-SV 0-1200 psig X

Panel Steam Line (S.G.) Pressure "B" to MUX l X 0-10V 0-1200 psig X(S)(I)' X(S)(I)

X(I)

X(I)

Steam Line (S.G.) Pressure "B"

to C.R.

X 0-10V 0-1200 psig X

X Steam Line (S.G.) Pressure "B" to Shutdown 1-SV 0-1200 psig X

Panel S.G. "A" Low Range Level to MUX

'X 0-10V

'6-156 inches X(S)(I)

X(S)(I)

X(I)

X(I)

S.G.

"A" Low Range Level to Control Room X

0-10V 6-156 inches X

X S.G.

"B" Low Range Level to MUX X

0-10V 6-156 inches X(S)(I) X(S)(I)

X(I)

X(I)

S.G.

"B" Low Range Level to Control Room l

X 0-10V 6-156 inches X

X S.G.

"A" Wide Range Level to MUX X

0-10V 6-619 inches X(S)(I)

X(S)(I)

X(I)

X(I)

S.G.

" A" Wide Range Level to Control Room X

0-10V 6-619 inches X

X S.G. "A" Wide Range Level to ShutdoV3 Panel 1-SV 6-619 inches X

S.G.

"B' Wide Range Level to MUX X

0-10V 6-619 inches X(S)(I) X(S)(I)l X(I)

X(I)

S.G.

"B" Wide Range Level to Control Roes X

0-10V 6-619 inches X

X S.G.

"B" Wide Range Level to Shutdown Panel X

l-5V l 6-619 inches X

AFWTECDO Page 34 7

IU w

t

  • a s

4

. i y' ki Table 3.4-2 Bquipment Actuated through the Trip Interface Bquipment I

EFIC lE or Non-lE Channel Control Circuit i

APW Initiate (Trip Bus 7) 1.

AFW Pump, P-319 (start)

A 1E 2.

AFW Flow Test Valve KV-31855 (close)

A& B lE FY-31855 (close)

A&B non-lE 3.

APW Pump Steam Inlet Valve B

IE FV-30801 (open) 4.

MFW Pump Turbine Steam Valve A&B lE (From "A" OTSG), KV-20565 (close) 5.

EFIC AFW Initiation A&B IE Indication (H2SF) 6.

Annunciator Window (AFW Initiate)

A& B non-lE Main Steam Line Isolation

'A' OTSG (Trip Bus 8)

- None -

Main Feedwater Isolation "A" OTSG (Trip Bus 10) 1.

MFW Control Valve ("A" OTSG)

A lE FV-20525, (close) 2.

MFW Start-up control Valve A

1E

("A" OTSG), FV-20575, (close) g 3.

EV-20529, Block Valve (close)

A lE 4.

MFW Isolation Valve ("A" OTSG)

B IE HV-20515, (close) 5.

Annunciator Window (MFW Isolation)

A&B non-lE Main Steam Line Isolation "B" OTSG (Trip Bus 9)

~,

- None -

Main Feedwater Isolation "B" OTSG (Trip Bus 11,)

1.

MFW Control Valve

(*B' OTSG)

A lE FV-20526, (close) 2.

MFW Start-up control Valve A

lE

("B" OTSG), FV-20576 (close) 3.

RV-20530 Block Valve (close)

A 1E 4.

MFW Isolation valve

("B" OTSG)

B IE HV-20516, (close) 5.

Annunciator Window (MFW Isolation)

A&B non-lE AFWTECDO Page 35 Rev. 1

F V

Table 4.2-1 AFW SYSTEM SETPOINTS ANALYTICAL ANALYTICAL NORMAL MAXIMUM SETPOINT MINIMUM SETPOINT SETPOINT SETPOINT NORMAL ACCIDENT NORMAL ACCIDENT Low SG Level Initiate 13.5" 16.5" N/A 9'

N/A AFW Control Level 27.5" 44.5" 9'

Natural, Cir culation Control Level 317

  • 388"

-e 240*

SG Overfill Setpoint 619" EPIC Shutdown Bypass Permissive 725 psig N/A N/A ECCS Fill Limit 381" N/A 420.5*

N/A 336" Low Steam Generator Pres'sure 600 psig 675 psig N/A*

575 psig N/A*

Steam Generator Differential Pressure 100 psig 150 psig N/A*

50 psig N/A*

  • The steam generator pressure measurements wil' be located outside the reactor building and protected from temperature excursions so accident environment errors do not apply.

All level setpoints refer to the equivalent height of a saturated water column referenced from the top of the lower tube sheet. It should be -

noted that the lowest low range instrument sensing tap is at an elevation of 6' above top of lower tube sheet.

l 4

AFWTECDO Page 36 Rev. 1

d i

i Figure 4.2.1 Flus to Feedwater Setpoint The following is the equation for the nominal setpoint used in Figure 4.2-1.

~

Flux

= 1.9 MFW + 21 where: MFW = total rain feedwater flowrate in 1 of total flow Flux

= neutron flux measured in t full power The errors and delay time used in developing this setpoint are:

Flow measurement error = 5.5%

Flux measurement error = 6.0%

Delay time = 2 sec. (max.)

i, AFWTECDO Page 37 Rev. 1

T l

APPkNDIX A List of figures which fore a part of this document NUMB ER TITLE 3.1-1 Cycle 8 Auxiliary Feedwater System (2 Sheets) 3.4-1 EFIC Organization 3.4-2 EPIC Control Logic l

3.4-3a EFIC Steam Generator

'A' Input Logic 3.4-3b EFIC Stian Generator

'B' Input Logic

~

3.4-3c EFIC Steam Generator Pressure Input Logic 3.4-4 EFIC Initiate Logic 3.4-5 EFIC Trip Logic 3.4-6 EFIC Vector Logic 3.4-7 EPIC Test Philosophy 3.4-8 EFIC Symbology

(

i i

i AFWTECDO Page 38 Rev. 1 l

l l

l

7 e

APPENDIX B l

INSTRUMENTATION REQUIREMENTS The instrumentation requirements listed below are capatible with the systems analysis and setpoints performed under B&W document 32-1155738.

Instrumentation environments listed in the Secondary Notes are valid for those specific transmitters which provide sensor inputs to EFIC.

1. Low Range Level Instrument String
a. Tap Elevations 6' & 156'
b. Pressure 1200 psig
c. Temperature 600 F
d. Instrument String Errors:

e.1 Normal Operating Environment

+3' (trip)/+3.2" (control)

-4.5"

-4.6"

+17" e.2 Design Break Environment

-18.5* (trip)/+3.2" (control)

-4.6 See Notes 1, 2 and 3

  • See also secondary Notes a, b and c.
2. Wide Range Level Instrument String
a. Tap Elevations 6' & 619'
b. Pressure 1200 psig
c. Temperature 600 F
d. Instrument String Errors:

e.1 Normal Operating Environment

+12.5" (trip)/+15.5" (control)

-18"

-21.5" e.2 Small LOCA Environment

+39.5* (trip)/+15.5" (control)

-45"

-21.5" e.3 Design Break Environment

+71' (trip)/+15.5" (control)

-77"

-21.5" See Notes 1, 2 and 3, Also Secondary Notes a, b, and c

3. Pressure Instrument Strings
a. Span 0-1200 psig
b. Response Time 1 second
c. Instrument String Errors:

c.1 Noracl Operating Environment

+/-25 psi APWTECD0 Page 39 Rev. 1

6 I

i NOTES:

+

1.

Level measurement to be density / pressure compensated over a pressure range of atmospheric to 1050 peig assuming a saturated volume of steam and water. Since the level measurement is density compensated, the unit

' inches

  • refers to the actual level in the steam generator over the specified pressure range.

2.

String errors include a -1.4* and 5.72' reference leg heatup error for the low range and wide range, respectively.

3.

During power operation, flow rates through the steam generator can be considerable. The differential pressure transmitter readings feeding EFIC or other systems can therefore be altered considerably due to flow related pressure drop and lack of a definitive steam / water interface.

" Level" as read by EFIC or other systems, during power operation, is related to inventory or liquid in the steam generator, but the quantitative relationship is complex and varies with generator fouling.

For very low power operation, (less than about 5% power), and for steam flows typical of past reactor trip, the " Level' as indicated by EPIC is the real liquid level (in inches) above the lower tube sheet.

Secondary Motes:

a. Normal Operating Environment 80F to 140F/100%RH
b. Small LOCA Environment 80F to 240F/100%RH Radiation Dose Air (TID Rads) - 2 Hours = 1.86 x 10 (includes 40 yr. service 36 Hourt: = 6.0 x 10 dose of 10 RADS) 30 Days 9.2 x 10 a

Peak Building Pressure 43 psia 9 2500 seconds af ter accident

c. Design Break Environment Building Pressure - 1 min. - 60 psia Temperature - 3 min. - 320F 2 min. 69 psia 6 min. - 300F 2 hrs. 18 psia 30 min. - 275F 2 weeks - 18 psia 1 hr.

- 200F 1 week - 190F Humidity - 100%

Radiation Dose Air (TID RADS) - 3.4 x 10 (includes 40 yr service dose of 10 RADS)

Building Spray pH - 7.5 to 10 AFWTECDO Pagg40 Rev. 1

A!

APPENDIX C REV. 1 ATTACBMENT TO EFIC SYSTEM DESCRIPTION

(

Subject:

EFIC Electrical Cabling Separation Requirements The EPIC System uses a four (4) channel input scheme for it's " initiation" logic, but is a two channel " actuation" and " control" logic scheme. Thus, if EFIC is gathering inputs which it will combine logically to automatically initiate AFW or isolate MFW then it will require four channel input. However once it has made a decision, or if it is told to do something by another logic system (e.g. Control Room Operator, or SFAS) it Will carry out the function with two channels of actuation and/or control. Basically the scheme is, in this regard, just like the RPS and SFAS, all three require four channels of

" inputs" but only " actuate" two output channels. However, we know that SFAS differs from RPS in the details of how this is done, and EFIC also differs from both RPS and SFAS in the details of how it combines logic and carries out commands.

AFWTECDO Page 41 Rev. 1

l' 9

In order to determine the separation and protection criteria for the cabling to be installed as a part of Med 001, the desired functions were

{

compared to the required number of redundancies. A matrix was developed showing channel separation required to assure sufficient redundancy for 1

each type of cable in each sub-ECN.

It shows the required redundancies for each of the accidents being protected against. The matrix reflects the necessity to preserve automatic Initiation of AFW for those HELB and missile scenarios which directly cause or result from loss of main feedwater and/or loss of steam generator pressure. Appendix "R'

scenarios allow manual initiation of EPIC functions from the Control Room for fires outside the Control Room, and manual initiation of EFIC functions from EPIC cabinet "A* for events requiring evacuation of the Control Room. This is consistent with rules developed for current i

Appendix

'R' procedures and 10CFR50, Appendix R, IIIG and IIIL.

The separation requirements shown are sufficient to assure safe operation in all assumed accidents. However, instances may arise in which the

' separation formula' may not be possible without extreme measures being tak_eg. Relief from the separation formula may be possible for the specifi'c instances. For instance, full four channel protection is not required for a break of the Decay Heat line inside containment. This is because the safety function for automatically starting the AFW system ' or f

I a LOCA is via the SFAS to EFIC. Exceptions from the separation formula should be dealt with on a case by case basis.

AFWTECDO Page 42 Rev. 1

~

l Electrical Separation Appendix R Sub ECN (Separate wireways)

HELBA/ Missile Fire Separation 5415B A,

B, C, D A,

B, C, D_

A, B

5415C Pressure Signal A, B, C, D A, B,C,D AC, BD l

Freeze Protection A, B N/A N/A j.

i.

541'5D In Control Room A, B.

N/A N/A Control Room A, B,C,D A,

B, C, D A,

B' to EFIC MFW Flow X-mitters to RPS A, B, C, D See 0737 II.K.2.10 N/A (Attached)

RPS to MUX A, B, C, D N/A N/A 5415E Power A, B, C, D A,B,C,D A, B EFIC to Mux A,

B,C,D A, B A, B EFIC to TIE A, B A, B A, B 5415F In Control Room A, B N/A N/A Control Room A, B A,

B A, B to EFIC 5415G A, B A, B A, B 5415L A,B,C,D A,

B, C, D A, B 5415M A, B A, B A, B AFWTECDO Page 43 Rev. I 9

-n

---.--n-

2' Electrical Separation Appendix R Sub ECN (Separate wirewasy)

HZLBA/ Missile Fire Separation 5415N A, B A, B A, B 5415P EPIC to transfer A, B A, B A, B switch Transfer switch j

to shutdown panel N/A N/A N/A 54150 Signal Cable A, B A,

B A, B Freeze Protection A, B N/A N/A, 5415R A, B, C, D, Non-lE N/A N/A 5415S A, B, C, D, Non-lE A,

B, C, D

A, B 5415T I

TIE to FV-31855 A, B A, B N/A 5415U A, B,C,D AC, BD AC, BD 5415V A, B A,

B A,

B 5415W A, B, C, D AC, BD AC, BD 5415X A, B, C, D

AC, BD AC, BD 5415Y A, B A, B A,

B 5415Z A, B A, B A,

B AFWTECDO Page 44 Rev. 1 9

0 Electrical. Separation Appendix R Sub ECN (Separate wireways)

HELBA/ Missile Fire Separation 5415AA A,

B, C, D AC, BD AC, BD' 5415AB A, B A, B A, B 5415AC A, B A, B A, B 5415AD A, B A, B A, B i

5415AE A, B A, B A, B A

I AFWTECDO Page 45 Rev. 1 i

l 7

__.a.

APPENDIX D DIGITAL STATUS SIGNALS FROM EFIC AND AUXILIARY FEEDWATER SYSTEM l

The following is a list of those outputs from either the EFIC or the AFW system which will be provided to the IDADS. The ' DESCRIPTION

  • is the actual 32 character desctiption assigned to the signal which will be displayed by IDADS. The ' ALM LOG" indicates whether the parameter is t1 be logged (L), alarmed and logged (AL), or only available for status (S).

Analog signals are indicated by the word " Analog" in the ' ALM LOG

  • column.

l I

l AFWTECDO Page 46 Rev. 1

~_

e i

EFIC COMPUTER POINT LISTING DESCRIPTION ALM COMPUTER LOG NUMBtR I

SG-A MS ISOL 1A L/A G1811 SG-B MS ISOL 1B L/A G1812 SG-A MS ISOL 1B L/A GA813 I

SG-B MS ISOL 2A L/A G1814 SG-A MS ISOL 2A L/A G1815 SG-B MS ISOL 2B L/A G1816 SG-A MS ISOL 2B L/A G1817 EFIC B SG-3 MANUAL ADV' S L/A G1820 EFIC A SG-A MANUAL ADV'S L/A G1821 EFIC CH B BYAA35 MAY Be DOS t./ A G1926 EFIC CL A BYPASS MAYBE 005 L/A G1927 EFIC CH D BYPASS MAYBd OOS L/A G1928 EFIC CH C BVPASS MAYBE OOS L/A G1929 EFIC B LOSS OF 4 RCP' S L

G1930 EFIC A LOSS OF 4 RCP' S L

G1931 EFIC D LOSS OF 4 RCP'S L

G1932 EFIC C LOSS OF 4 RCP' S L

G1933 EFIC B SHUTDOWN BYPASS L

G1934 EFIC A SHUTDOWN BYPASS L

G1935 EFIC D SHUTDOWN BYPASS L

G1936 EFIC C SHUTDOWN BYPASS L

G1937 EFIC B SGA HI LtVEL L/A G1938 EFIC A SGA HI LEVEL L/A G1939 EFIC D SGA HI LEVEL L/A G1940 EFIC C SGA HI LEVEL L/A G1941 EFIC CH A STM GdN B LO RANGE LVL ANALO6 61810 EFIC CH A STM GEN A LO RANGE LVL L1811 EFIC CH B STM GtN B LO RANGd LVL L1812 EFIC CH B STM GEN A LO RANGE LVL L1813 EFIC CH C STM GtN B LO RANGE LVL 61814 EFIC CH C STM GEN A LO RANGE LVL L1815 EFIC CH D STM GdN B LO RANGk LVL L1816 EFIC CH D STM GEN A LO RANGE LVL lib 17 EFIC CH C STM GdN B HI RANGd LVL L1820 EFIC CH C STM GEN A HI RANGE LVL L1821 EFIC CH D STM GdN B Hi RANGt LVL 61824 EFIC CH D STM GEN A HI RANGE LVL U

L1825 EFIC A SG-B LO LVL SIGNAL L

L1830 EFIC A SG-A LO LVL SIGNAL L

L1831 EFIC B SG-B LO LVL SIGNAL L

L1832 EFIC B SG-A LO LVL SIGNAL L

L1833 EFIC C SG-B LO LVL SIGNAL L

L1834 EFIC C SG-A LO LVL SIGNAL L

L1835 EFIC D SG-B LO LVL EIGNAL L

L1836 EFIC D SG-A LO LVL SIGNAL L

L1837 EFIC A SG-B MANUAL LVL CNTRL L/A L1846 EFIC A SG-A MANUAL LVL CNTRL L/A L1847 EFIC B SG-B MANUAL LVL CNTRL L/A L1848 EFIC B SG-A MANUAL LVL CNTRL L/A LA849 EFIC A SG-B OVERFILL L/A m1854 47

f l-EPIC COMPUTEN DUINT LISTING DESCRIPTION ALM COMPUTER LOG NU1 Ben HV-20517 ISOLATE SWITCn L/A c1409 EFIC B ISOLATE SWITCH L/A E1416 EFIC A ISOLATE SWITCH L/A c1417 AFW VALVE HV-20582 ISO TO OPEN L/A E1418 AFW VA.VE HV-20581 ISO TO OPEN u/A E1419 P319 ISOLATE SWITCH.

L/A E1475 ISOLATION SW AT ISO POSITION L/A E1478 ISOLATION SW AT 150 POSITION L/A E1479 P318 ELECT THOUBLE L/A c1522 EFIC A AFW TO SG-B L

F1610 EFIC A AFW TO SG-A L

F1611 EFIC B AFW TO SG-B L

F1612 EFIC B AFW TO SG-A L

F1613 EFIC C AFW TO SG-B L

F1614 EFIC C AFW TO S6-A L

F1615 EFIC D AFW TO SG-B L

F1616 EFIC D A.W TO 56-A L

F1617 EFIC A NO AFW TO SG-B L/A FiE16 EFIC A NO AFW TO S6-A L/A c1619 EFIC B NO AFW TO SG-B L/A F1620 EFIC B NO AFW TO S6-A L/A F1621 EcIC C NO AFW TO SG-B L/A F1622 i

EFIC C NO AFW TO S6-A L/A F1623 EFIC D NO AFW 70 SG-B L/A F1624 EFIC D NO AFW TO S6-A L/A F1625 CH A RPS MAIN FW FLOW LOOP B (LATER)

ANALC6 F1626 CH A RPS MAIN FW FLOW LOOP A F1627 CH B RPS MAIN FW FLOW LOOP B F1628 CH B RPS MAIN FW FLOW LOOP A F1629 CH C RPS MAIN FW FLOW LOOP B F1636 CH C RPS MAIN FW FLOW LOOP A F1631 CH D RPS MAIN FW FLOW LOOP B F1632 ~.

CH D RPS MAIN FW FLOW LOOP A Y

F F1633 AFW INITIATE 1B L/A G1600 A:W INITIATE 1A L/A G1601 AFW INITIATE 2B L/A G1602 AFW INITIATE 2A L/A G1603 SG-B MFW ISOL 1A L/A G1604 SG-A MFW ISOL 1A L/A G1605 I

SG-B MFW ISOL 2A L/A G1606 SG-A MFW ISOL 2A L/A G1607 SG-B MFW ISOL 1B L/A G1603 SG-A MFW ISOL IB L/A G1609 SG-B MFW ISOL 2B L/A G1610 4f[,.

SG-A MFW ISOL 2B L/A G1611

'4

. CHANNEL B RPS PWR/MFW FLOW TRIP S

G1612 CHANNEL A RPS PWR/MFW FLOW TRIP S

G1613 CHANNEL D RPS PWR/MFW FLOW TRIP S

G1614 CHANNEL C RPS PWR/MFW FLOW TRIP S

GiE15 SG-B MS ISOL 1A L/A G1810 48

E 6

i E IC COMPJTEM POINT LISTING DESCRIPTION ALM COMPLiTER LOG NUMBcR EFIC A SG-A OVERFILL L/A L1855 EFIC B SG-B OVERFILL L/A L1856 EFIC B SG-A OVERFILL L/A L1857 EFIC C SG-B OVERFILL L/A L1858 EFIC C SG-A OVERFILL L/A L1859 EFIC D SG-B DVERFILL L/A L1860 EFIC D SG-A OVERFILL L/A L1861 EFIC B ECC LVL ScTPOINT L

L1864 EFIC A ECC LVL SETPOINT L

L1865 EFIC B NAT CIRC LVL.ScTPOINT L/A L1866 EFIC A NAT CIRC LVL SETPOINT L/A L1867 EFIC CH A STM GtN B H1 R4NGc LVL A 11 A LOG L9818 EFIC CH A STM GEN A HI RANGE LVL L9819 EFIC CH B STM GEN B HI RANGE LVL 69822 EFIC CH B STM GEN A HI RANGE LVL L9823 E IC CH C STM GcN B PHESSURE P1824 EF!C CH'C'STM GEN A PRESSURE P1825 EFIC CH D STM gen B PHESSURE P1826 EFIC CH D STM GEN A PRESSURE u

P1827 EFIC A SG-B LO PRESS SIGNAL L

P1840 EFIC A SG-A LO PRESS SIGNAL L

P1841 EFIC B SG-B LO PRESS SIGNAL L

P1842 EFIC B SG-A LO PRESS SIGNAL L

P1643 EFIC C SG-P LO PRESS SIGNAL L

P1844 EFIC C SG-A LO PRESS SIGNAL L

P1845 EFIC D SG-B LO PRESS SIGNAL L

P1846 EFIC D SG-A LO PRESS SIGNAL L

P1847 EFIC CH A STM GEN B PHESSUHE AN ALO G P9800 EFIC CH A STM GEN A PRESSURE P9801 EFIC CH B STM GcN B PHESSURE P9802 EFIC CH B STM GEN A PRESSURE Y

P9803 EFIC D NON-1E PWR FAIL L/A X1362 EFIC C NON-1E PWR FAIL L/A X1363 AFW TEST LINE VALVE FV-31855 L/A Z1600 AFW TEST LINE VALVE FV-31855 S

Z1601 P318 RUNNING S

Z1618 P319 RUNNING L

21619 FV-30801 OPEN S

Z1620 EFIC B SGB HI LEVEL L/A 21926 EFIC A SGB HI LEVEL L/A Z1927 EFIC D SGB HI LEVEL L/A Z1928 EFIC C SGB HI LtVEL p

L/A Z1929 TIE B1 COMPONENT DISABLED ALARM L/A Z1932 TIE Al COMPONENT DISABLED ALARM L/A Z1933 49

il N

Q 4' A

g i

s.

I i

j "g 'i i

.)!

i j

B! b /,;

1 j

h

!l-L e

g i g.'

E g

8 d's i;,f i

+*h!!!!#1 l h!L I

I

~

tlil (s II IINi.

Il j.

i gg,{!

~lI I MM-i

~

I I4 lh jj g_f+.-.

Q y I

II:l6 11*{

i T

't y &

f l 3 _ fl 3

f i.i ii

.!. 1 i 4F O' A

ll'@s {@e; i$ Wl;!l;! g e i i

@,'@,[<4I'I!

kh 4

n!!

l l j!

7.

g xj j

.W j

~

J

?gPio i% ici e i, g+%o M-

!41 l

!g

!f

!!f

-r l-I

~

i t'"lI'!

i ib ltDi

II
8 i

I 1

ill E, -led lll "[

I g:q' v

1l af pl<2>$ '

l

'i

!! ;j,

'e m,

b j

d t

ii i

li 11 1 i

6.gp 88 i

i GO:< i!

Gj@'

1, 1

I I

lt;r, y,.

k

!!!!!I-I;;!

l1

~

iiis !5 I Ils

![ !!I lii:-

~

iP!!!!th,E!

iilj!j13:!!

it!

i i

i Idk

-) Id i

!.ih!!

il 11 l.

i

-I si

'l l

l j

l T

r c

Iql jg jr I,

>~

t kg

'v ei

t. d I

I E

ii 19 I

2. <

s 3

49 ;-

8 i

-l

=

=

t O

g$ )b f

j

$g_

3

...I u-e g_

4 3

g n

___g i

e cp i a e

M

!d l-l

f

.~.

x d

1 i,:.g 5; j -

l.! $

81e y

"WT' P i

iTT

'Y k-b 1#

bk

]

--6 4

st g g!:

is El-0 I$'

l

--6 x

@S-1-wl @ i 3

  • O i;

4 k I

'~@

i h

0 A__.I

..__;t m~li e

(If9b 1

f@

7 i @;

'l I-r43" i Y@4D u

x, j

...e J

]

i i

4..

8 s

- * <:o w

~

b

@To !

e'90

?b w

-tt> a

@g miib 9,y i

i !

co-xA l

Adoo m;A cgis caJr* t_

I,

&YW co-Ap g

or e cm Jy, a

i e

I

?'; CDG jij OCE ; ;

M:

@X:f n,

crn.Ag l)

G7 I

t A2 cog # oco :':g=i I

I I

cD4 8

gy

:Do co4 cmA cuih t

b F-

^

((

)

L J

i I!I f*dfr

[O

!!E

[fh 6

ph

.;f'i

~

b*d R

$$ili g

ih g *@

l l

j{l g.

1 lik jid jih 55! I lli 3 liN liN .!iN lib l! 9 11ll g ~' 11 I li iN i s li! s E is l:i 1"1 lj 8-lj ll 11 ne I I L____J I I l-l .__j l

1 i I{ a a e J X Ll V O OOM I E RNO R d-TE NP OPM 3 CAW 0 m ODn E 1 a. 'F NS E T A O N :a S.T O ~ O bI M I. ER

CEN, E

i. AT FUN. n ~ E In RPWE r. EMOR TODU 7$ UI NCTG N O I .M F I CMS T F O'R H Z S IO I A . s. ER*7 I N 3y. a A E C G I T FR O EO i i 3 s N = i h 13 i g;13 i $1 3 s g <13 m j ;41 l 13 s . 's g 1 3 '_ n 1I i s .5 e I 13 i e 11 .3 I 1 3 l

  1. 7 8

I d 13 i I I 1 3 i' 1 1iI ] i5 ,2 .d ii l e gs1 .2 t )1 g a 1 . g t1 .3

i: gi1

.2 m g.' gh1

'd!

c 3 .2 If jg i5 5 j E. s = u =., o es g i v sa

=

={"='" ' = = e" = s ra A e v "E.7., J a. ~ o o e s _M l.d 'f l d 1 ]s = d l 1 ] =_ 1ji15 i d i l g v1 gi13 1 d lN 4 1 5 1 1$ n!3 ~., i h1 ]i d1 1 j 2 d d 1]l p- , i' i1 i h1]l h 1 ]l 1iE f& * !i 3 .a A t Ig1 c e I g 1id e g1l.d I w a k_ g1l I o !g1E. d 16 . 3 ..m**' g. t m..m = r.1 w ..= e r .= a m. = e ~ e e ~~ e

9 l gw g .p - d5 h .i E L 5 O O$ E lo Og-r a g oa .I yE UW i = -l 4 Zj 2 j 'E E u. 2 o o e-W g Y W H @0 2 3 u. 23 N i' E' 9,e bh? ? g h. T W kJ e-E p g -, =>, m n,--.m -,s s!- p g om 2m o, ... m amv.4 s io: E9R s,wAno ama dNO3,JM,os. asn y)E w M-)- .dwo2 isai ,sa sos v u3: NWtJBC3 1531 N adM WWE W 143'~ 3 Me> #C) 1531,0s 75R WT5 WTOi! segad @ 153hm43 w M3Tg - 3 O g nuiec3 As31,,ou men eos e m__ y g neue an osi,sn gas e m-7 r.d dh7) AHA 'TJEL # dN VUE B 'W3_ q-y Z { asis m e vos.a v3_ y v.euw3 e cuanNo3As3a 243 H3 0 4 @ WO I I. 5 , =a + 38 .-i 11 0I ii ^^ h g Ei n a a p 1,.., aw, m dv 1,.. -. m w. 2 G3SSvdAE o 'M3 o>sswdAg y m q d_.- s ~,o i _d.m-mi d.c3 Aus,ou =d sus v m rewid6 151 A ' M 7EN WUs W M3 ' WukseNO3 AE3 A M adt9 TUs W M3 MW648C3 AEBA ',Uti D W wwise Asn,o3isu.o v m: av.o au eda aos a w31 V _ _ _ nwwwo3 Asn,ou,sm aus a v3: y WhldNU3 4531 'K3EE E dM VUs 9 W3 - LLJ g Aui w.,.sa vUs3. m3E 3 4 => dw3 n~ m-1 5 x M w j V = O O O ( g

tt y! T b i ii,! Il 7 ', ',f1 d T gl-L I-l,i i ,.g,ll!l .gg,l ! g! 'g ~L;i I, y3 s 'il !,i rr 4r r Pg 11, 'a I 3- ~ 2d5 _rL " l . *r k'ji, M R' lli ~~ 'l! ' ~j!;l "ir 'l h tI. E.!!1!..[(- @,li -!I ' l,ll1 il 0--!!

i.I

!!._!ill I 11'- i i l_ i' i <i y , g. plIi -it [. l iji: '., 11'!!i i!lilllil!!! h, T !q 'I i i -1. ~ + I !r r ll 1 l h I!! -l!lj 1-{p!j E i-( li i i i ll!i i ll T e'@ f Li. ., t i!i Iil! l[ !! '- (~[ T., I al t jrii as

  1. {'8 0-h;j.[l!1!!!T

_jg_{,_{,_j,i; ( J - i! i iE Jtur) g lb w 1 f.h [ ]' i g #e e i I' h!i ll! &!jq-E 0 T,J;, vi nr t h d l, 5, ll 1.b .l1 ! t ni i-1 i .l g .l i ~II. I '!!g ll ll I, i ii g i i h ,i J,a,, ,1 jTi' = ~~ i $ [] -90'il 'i I il -ij 1.j e i. I I!,l llM i. s .n 7% 'ff !!!il 'g $ys .o

i
i. l).Lil.!.WA WllIleIll F.:1.

i b

I f i ~ 3 5-I W,a j H u <suo E E

((((
. : 3 p:

'i ls e s is ra CW p: r ee e:: 8 n-s-agu <!;;gki S s !ii-i o 2002 i, g liiG E 5 ~ I s il ti e 5

  1. li g!!

g.g*8 E ;. <= ua m g 055s :Eiil 8 rut"

i d d,i gamin-my !3 l l ;i

n = in i= e555i!ss fj ff l j ff j j fE Ei Y.i.E5 i II ii i' I! $$3 i i EEIEEEE55 ~ s l k 4a* 4-i 01 li s in gg 7 T T-- F r-n-- k) OO 7-n---------] (D()(9.l l D 6k] ti.l E5 m m.a. % J.-, i g ,,3. i, i El :I ai;EE i i I I t bl 1 i i i ,4 .,1 i i i m, 1 t t-4 4 4 f %T;11i= a ~

  • l

= s i lh s .s ! 14 18,, l~jjl j i;i ii es %)

5 w;ws a

i i, = i' Ew 2 g a i,T l l t t t t t ii !"g: !$.I.. d. 4 d. I I -a = i i i i a ii gi i i i u I I

  • l sd l

I ,M s,!.!.!.$lc %_3" aj l g,g e !!, 5 d l i = l d l ~~ gg; ag_.._2_ __t_t 2____t__ _t =_____; c5 !! d 8e = a e +a-a s-O l g g i

l l 4 i i q l l i i i i i A a =-- I T wi i N l l 8c j h. ) < e J 0 N ! s 8 l u

2 a a n

~ ~ s t u b $y "th Qxw ! j-j 3 3 . a. kkN e s e i n

I t h b b f
  • e o 0 J

a J J! lr IE 1 1 [l ll ll i l s v ! ! ! e t g . e Is ]3 j }- g \\; ' E 4 n. 5 5 !v**e x i== <w .s:s==n 85 t h l' essash_- Es ll 1 ;1 als

ii 6 I i-i n
r
3HiD r r r-7 7---fg___ l

' a. ! 8$,@ @ @.. is i i .l,i l 'l ) t _i_,_t. 4. !un u i l t Il a l

n.._

ll...Ya ? g g = 2 "Ee m' lI

  • I*

5 l *_ g g l$i $~ l 55g! hhI h ! I EIE E 3 9e I p,.. lij l I l ~5 I < n., ai-i- ia i 8 en ~ n!7 I Iss $ YT T" i w st. f! ' N d ll$ 5 I!$ I ..2 i = = o;s i i !!g,bh Ob 15 l 5 ,gp_J__1._J-_i.J_pl. j _~ lj5 {

ai.e o

i i " -s = e .8 # .j. l i g .- is 5 li j $593 ET

I t-i i

1-i s s s s! s.s e s = = serg ua gig l sI 3 -r i iii L____;, Wiz 55 j 3 ! 5 31 **g arv. se s 4 6 9 O 9 D 7 o a g g g

j i i i 1 i 4 i I i o 5-g c m 1 e

  • S S

g '"] 2 A S I b. s t b h t useO { 9 < = d o i s y 4 l' _.- s

  • ~l E l a i

} n e t t gx .. o o a 1 l l l 1 1 1: l al l' t i a o ! ! 8 8 li ' g j w e 9 I 11 N V: 5 !!Efui* k:', ' I

==== =_ N, n!!! sis r===ses 3 Ii 1 is;;illii ^ + i l -I !e iv., i@Hi)-- '- r r 7---fg___ a! (DOSOG ' il i l , si i a k e 1 I

  • g

+la,_t L _

  • a i;_

1 i ( d d a. 5 1 i-r : a i s 2 i W i i m v s *g S I;i y i i l ll5 g@ 3 vgi g

=

= s,- ig i l l !E l ::E IEE E E! ; EIS E ; I i ,ils,. l } g !rPP M-! i ~ ~ ~ i l thi l i : t i 1; - l] g, b Obbllb

a. e u a 1 l

u w* f I ' 8 d f f,3,

g 1_.L._i _ i__.t. Lj J l

I j _~ l _ g,, = E R Ii @ ! 1 I s g-l 5 5: 3.1 a_t i_ n.. I It! _ s a,e]-es .3 g a _ !_ a_ i s

l; i

311 = alx w J 2. 1 2w0n e i g g

-I -_

}1 i w a: ! 8. C te u_. mCO O.s ~ 6w 92 UE

u. -

-2 + W d .k I II BE t .I 3 --{ ::=:: l [,q ..m... }_ m. l S_1 na** m _ ._.4l." 1 .. w ..sw {I . i, = - n n.s us. i, ...c. t 4 -. - =a + 7 r q_ H ra ~~. a........... . vs r 2;u;; l s

e. to as s.

6m. u.me hT 8 -. u.. u. Ne EU 5 aum.m. _Y T essme vs.su w.= . ), g,] .,,, g,g g3 w a6mm may g,,,, e, u. ~ I s ou e.enas A SM e... esse* 4 es. as..m an as. T .,..m .m.M a 2,;;:: ; f i .~... .m..... 6 0 >.mu e in a k

m. a es.... g gige

'm ..qag

e.. o a a s*t 9.W9..

.St. g g

e. u a=..

g as alt

  • Ces i sg 4h
  • . su. ea.=en.

p A 8 l e g g .w e 9

T-I r-a m gI M I ~ N'1 [7 j ._J_~C' l -C I I j f i i = ... = a p i I on } "l l -i -{C"' -t 9 9 *: s~.. h --c - g f= s e s *el c-~- _z r-i i -r-i m___ __ r- _ _ _ _ _ _, e L._____. _ _. _ _ _ __ _ _ _-r J ewl t_____ ______j E -sp-cb; _. apch pg, w -- m _i 4 i i .l __ 1 i 1 i -e i i j M'b O .M'd W i s s i i q i ~q i k=- I==== =-:-=-== =n y_. m_ _:3 =n ra r.- %; i i q'O 1 i ..._; y pg, .- 9 I6 = 4 g l l l l-1 i 1 l l i I J l l %l .l '~i i

  • 1

~ - =- 5=i. y w %1 l -+- i +- g a i s m r-m__.___,==, r= =_ m =__===, .s-- a - a'=r'.:f. -cL._. - _.c w 7g -- jy % N Tg, a ~ i-I I =T) I l i l M s i i M! ... met-rw e,4 -dsx.w: q. l .-e- --o-. f-es-, I 7_I ^-m I >= =#=s m-u== 7 p==+===-=-====1 L f+ W 2 r+ M f%g lMg i c i 4 i 1 I i C I l Ji i ~ l l -C-M -C i i 1 .- rd: m I --r= w i -m 1 t 1 L(=3 m ee1-___=== _, Lp:~= y===___'_p t = g-9 4 $-) @.__, k..- ', l l _c ._ c -C- ,,.)I )I ' I l y.1 j,,, --b-- 4 i z .. _ = ,= I i Ld'1 t__ _ _ e-- __ _ _@_ n J t _ __ _ a re r __ _ __.. - g i +0e =..Su

~ 11 g-o e + i i i i W W 9 \\ \\ \\ \\ 8 i l g o 8 F i \\ \\ e i a oo ,s ~, 5 s ~ ss em m w s a 8 e r 3 y v v ? oo y f e e i t u4 s g E. k. d 1 O s 8 D l \\ \\ M ~ e s ~ ,_ g ? I I N li e E E S v 1 d e 's I i k 'i: s s = = I-2' I IllN 3-5 j 5 .E < e u o ,i s a v v = = v4 ws i Y. E! .41 r1 a m M 4 il1 4 11 i t I i i-83 r g) g3 l .I A._~.. f1 f I s 3 = = + 2 g l g r a g ~ ~v ~ = s i "' i

E

{ [ g =c 2 A g

EE.

t g a a.: m= g := g gp s s -[ c im A ag sj! I f I ri s s!!_! eg 4:R: c c E E u -.-..w e e ow e e 99

l I l I o 11 - W e i e i a. 4 L. h5 0 A i

q. M I

h). GO cA M .S e E 4W r --- ~~ - 7 r ---* D I'Wli I t, ll D' l 'I li aj 1 a u : 5I 'C fl 3. 'g I Ii l

l l I!*

[ I- - h l i l + l

n G ll.lRt 8

i i f -j ll )J' l I "t* n E ri !c T i t= l '= g_ i 3 m I 3 1 iI I L _ _iE LIk l l 1 eh g ____JL_ __J = =,.,

t.. I

, o! r ..1. ! h i $r il '1 g"> -, ~'t m,; e c = 8

  • X-

_g: 7 3 u I I; a [ 5 3 a 3 i i i

i

-{ l x-,3 1 xw g u i +x

2

!r .x ' in [ r, ____x; 1 = 7_L__., -t i :x*i I _t._ I xx xx i 5m_L T. u._x. 7-s T. _L_ . lE

!!'I u_

ill E i ii. a..l.i. o i i w .. m es we.m =+* ee-ee

o e l liS14WMist OffERitCf 3 I wuf3 HFEsssG Te (FIC 9IsleUWsT3. Tat { f eLLOW'56 C3sttSISM W8LL SE EMPLOTES. Tut Ep(AGEeCT FIEge&TIO Intia& Ties Ae9 C0e!act 115 TEM Amt ,,lt C.A... u a...C -., ,,,,,,,1,,,, Te PteCESS - SE318tBeEsl 580sT5ffM sum 8ER PATR H31Ga& Ties IF sitt }- --o-Ca & O REMOTE HLAllut g r) TO Pe0CES3 , EftC I gg g g luff RT f a etMen LOCanta BHeilCAL :551stpetui suMNR If este gLAst 13 (f 4C CAtlaEIS ~ ~ "~~ '7 '" ~~ Pt9CES$ Viel&BLE Amt FumCT40s O*"'*""" mesetaYaeY Cen1 ACT > ac -u"Pa n, r 1..,,..,C. COP, EFat LOGIC StenAL 50TATIOuS [C malaialste C0eraCT (j j anettE LOGIC SIGNALS COUPLE est (F4C LOGIC Yo Seef att. Tut 31GaALS ARE IDEstiflED A5 f OLLew3: seeMtafaIv SulTCu BEf f t TO EFIC n0Am1LLT CLO3f D l LOGIC memH4 LOGIC e 31GaAL $0VOCE g MTO itEMT (F,C FueCTiesAL LOGICS M NAV 159 Funciles. r SIGa&L HsneAitou LOGtt 90. TITLt Pe0CE.ss was a nis3 L'J L'J l'J' 3 *J ' ' p. we L I'"" *88 MC i suase etutaA14e A LEVIL ltP9T M EFIC CuanetL ( A.B.C GA B) 2 $Tf AM G(af taiga e LEstL laPti a 3 STE AM GEsta& Tea Pet $ suet enruf 13f stICAL isStavMOT egue(E (Fit LOGIC puuste uste entt wh(R MosE fuAs Out SUCN t 45W4M MC as5TAUMEst 15 53ES. SEguf ull AL SIGaAL suMef t OF SIGNALS 4 Musa LOGIC 041GlatileG is TNE 50ueCE LOGIC PATW H54Gm17 ton 0F TWO es est,tE Pains PERFORM SIMILA8 EFIC Csas#EL (4'a.C et 3) 8 $G-1 seats STEAastlet 854LAT80s FusC110a3 1(iff t & ETC. WILL SE uste to Olf finEstil eftmu s Pains. In P Lar.it y QSTE&asLlut 154LAT10m NguNabas!aM$'s L s$*Pt!CEESED EFtC LOGIC NUMBEE 9 " ' ""',E;r iv.inMM..H.

c a;;;C"<a'"' '5aan" a

18 sG-s pass futuATEa Isetation im LOGtC Pe0CisS VARI ABLE A FN#CTies g,,,,,,,, gy,,,t g 02 STE AM GEnf RATOR Cemit0L EUCEEDING 'E I'H 8 na (FsC Telt TEST P41Le50Puf Q* ftest SEcemo LETTER LETTER V A$P = AuttLlatt Snuipows panel uit - <Mauur Fuana i=innia a cana sunu .. C O,,,,,,,4 ,,,,,0L I ESFA5. ENGletit(9 Saf ETT FEAfstE3 ACigatlem ST5 tin '**'Ca'* MCe - utga C0ala0L n00M N "" gifsP3. NUCLE AR in$ituMENTA110s Rf ACT04 PIGTECTion ST11(M S SWITCn y COMPgTE $6 - $1E AM G(af taf04 P Pets 50RE LLELIEILAL e es0tavian F(X) f ontisen ce n UM ELEC siCAL EFIC guffEsinG WN1 a P0ws a 1 hip non-naw /ME m. g,; g h _~ / "e 4

l' Design Changes from NRC SER " Rancho Seco - Auxiliary Feedwater Systems" dated September 26, 1983. E e b i s

~ ( f L V In 1983 the NRC completed a review of the Rancho Seco upgraded Auxiliary Feedwater System and issued an SER (NRC letter dated September 26, 1983 - Status of the AFWS Upgrade Review NUREG-0737 Item II.E.1.1). That SER whs based upon information sent to the NRC concerning the AFW system and the Emergency Feedwater Initiation and Control System (EFIC). Since that time, there have been a number of minor changes to the Rancho Seco EFIC and AFW upgraded design. Those changes were discussed in a letter to the NRC dated March 3, 1986, and in presentations to the NRC on August 14, 1986 and at Rancho Seco on September 9, 1986. The District has reviewed the September 26, 1983 SER and compared it to our present design. The discussion below identifies the difference between the current design and items discussed in the SER (Page and section number refer to the attachment to the SER). 1. Page 6, I.B.1.c - the existing APW flow control valves FV-20527 and FV-20528 are original plant equipment. Prior to issue of the SER the District did not have complete seismic qualification documentation of these valves. Prior to startup, the District will have documentation for the qualification of these valves. Therefore, they will not be replaced. 2. Page 7, I.B.l.d - the SER states that "Each AFW pump is equipped with a full flow recirculation line to the condensers which can be used for periodic functional testing purposes".. Actually only one full flow test line is provided. Either AFW pump may use it for surveillance testing during normal operation without taking either AFW train out of service. See the simplified P&ID (Figure 3.1-1) attached to the EFIC AFW System Description. 3. Page 13, I.B.2.d - instead of one AC and one DC powered motor operated AFW isolation valve in each train, both AFW isolation valves per train will be DC powered. 4. Page 13, I.B.2.d - accumulators will not be used to provide seismic I air for powering the AFW valves FV-20527 and FV-20528. Instead a seismic I back-up air supply using compressed gas bottles will be installed. The air bottles will provide air for at least 2 hours following a loss of plant air supply to the valves. 5. Psge 14, I.B.2.e - only a single full flow test line is available (see item 2 above). The test line has a normally closed manual valve in series with the normally closed, fail closed air operated control valve. By administrative control these valves will only be open during surveillance testing of either AFW pump; approximately one hour every two weeks. As stated in the SER, in the event of EFIC AFW initiation, the test flow control valve will be closed automatically. In the event that the normally closed, fail closed flow test valve did not close upon AFW initiation, the operators could isolate flow to the test line by closing the AFW crosstie valves HV-31826 and HV-31827.

6. Page 17, I.B.2.1 - the AFW pump runout issue was resolved by the NRC SER dated February 15, 1985. 7. Page 18, I.B.2.j - Class 1 CST level transmitters are installed and operational, with Class I level indication on SPDS. However, the class 1 indication to be provided on the control room console BlSS will not be available for restart. This instrumentation will not be available until the " integrated" HISS is installed. Meanwhile, non-Class 1 CST level is available on the existing console alSS. The low level alarm is not safety grade. 8. Page 30, II.A.II - The SER indicated that manual valve FWS-055 will be replaced by motor operated valve (FV-31855), however, manual valve FWS-055 will remain in series with test flow control valve PV-31855 (see item 2). 9. Page 40, II.B.7 - position alarm for manual valves is not provided. The five maintenance / manual valves in each AFW train which must be open to assure flow to the steam generator are locked open at all times during normal operation. Dual verification of valve position for each of these valves is performed each month during normal operation. 10. Page 42, II.D - the minimum AFW flow requirement is 760 gpm delivered within 70 seconds. This is based on our submittals to the NRC dated ( January 14, 1983 and February 18, 1983. 1 l l l

l. OVERSIZE DOCUMENT PAGE PULLED SEE APERTURE CARDS NUMBER OF OVERSIZE PAGES FILMED ON APERTURE CARDS APERTURE CARD /HARD COPY AVAILABLE FROM RECORD SERVICES BRANCH,TIDC FTS 492-8989 l k d L------.- _-,-_na-w.--m,--_m , ww wr ww wn-..}}