ML20215J369

Proposed Changes to Tech Spec 3/4.5,removing Need to Conduct Surveillances on Redundant ECCS When Sys Found or Made Inoperable

ML20215J369
Person / Time
Site:	Pilgrim
Issue date:	04/30/1987
From:	BOSTON EDISON CO.
To:
Shared Package
ML20215J354	List: BECO-87-069, Application for Amend to License DPR-35,consisting of Proposed Change 87-02,revising Tech Specs to Remove Need to Conduct Surveillances on Redundant ECCS When Sys Found or Made Inoperable ML20215J369
References
NUDOCS 8705070381
Download: ML20215J369 (11)

Text

t LIMITING CONDITION FOR OPERATION SURVEILLANCE REQUIREMENT 3.5.A Core-Spray and LPCI Subsystems 4.5.A Core Spray and LPCI Subsystems (cont'd) (cont'd)

Check Once/ day Calibrate Once/3 months Test Once/3 months

2. From and after the date that one 2.

of the core spray subsystems is made or found to be inoperable for any reason, continued reactor operation.is permissible during the succeeding seven days, provided that during such seven

-days all active components of the other core spray subsystem and active components of the LPCI subsystem and the diesel generators are operable.

3. The LPCI Subsystems shall be 3. LPCI Subsystem Testing shall be as operable whenever irradiated fuel follows:

is in the reactor vessel, and prior to reactor startup from a a. Simulated Once/ Operating Cold Condition, except as Automatic Cycle specified in 3.5.A.4, 3.5.A.5 and Actuation 3.5.F.5. Test

b. Pump Once/ month Operability

~

c. Motor Operated Once/ Month and valve Once/ cycle from operability the Alternate Shutdown Panel

- d. Pump Flow Once/3 months Three LPCI pumps shall deliver 14,400 gpm against a system

) head corresponding to a vessel pressure of 20 psig.

Amendment No. 42, 62 104 8705070301 870430 PDR ADOCK 05000293 P PDR

. . .~. _ . - - _ - . _

7 LIMITING CONDITION FOR OPERATION SURVEILLANCE REQUIREMENT 3.5.Ai-Core Spray and LPCI Subsystems 4.5.A. Core Spray and LPCI Subsystems (cont'd) (cont'd)

4. From and after the date that one 4.

of the RHR (LPCI) pumps is made or found to be inoperable for any reason, continued reactor operation is permissible only during the succeeding thirty days provided that during such thirty days the containment cooling subsystem, the remaining active components of the LPCI Subsystem, and all active components of both core spray subsystems and diesel generators are operable.

5. From and after the date that the 5.

LPCI subsystem is made or found to be inoperable for any reason, continued reactor operation is permissible only during the succeeding seven days unless it is sooner made operable, provided that during such seven days the containment cooling subsystem (including 2 LPCI pumps) and active components of both core spray subsystems, and the diesel generators required for operation of-such components if no external source of power were available shall be operable.

6. If the requirements of 3.5.A cannot be met, an orderly shutdown of the reactor shall be initiated and the reactor shall be in the Cold Shutdown Condition within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

105

LIMITING CONDITION FOR OPERATION SURVEILLANCE REQUIREMENT

• 3.5.8 Containment Cooling Subsystem 4.5.8 Containment Cooling Subsystem

-(Cont'd) (Cont'd)

2. From.and after the date that one 2.

containment cooling subsystem loop is made or found to be Inoperable for any reason, ,

continued reactor operation is l

-permissible only during the succeeding seven days unless such subsystem loop is sooner made operable, provided that the other containment cooling subsystem '

loop, including its associated diesel generator, is operable.

3. If the requirements of 3.5.8 cannot- be met, an orderly shutdown shall be initiated and the reactor shall be in a Cold Shutdown Condition within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

C. HPCI Subsystem C. HPCI Subsystem

1. The HPCI Subsystem shall be 1. HPCI' Subsystem testing shall be operable whenever there is performed as follows:

trradiated fuel in the reactor vessel, reactor pressure is a. Simulated Once/ operating greater than 104 psig, and prior Automatic cycle to reactor startup from a Cold Actuation Condition, except as specified in Test 3.5.C.2 and 3.5.C.3 below.

b. Pump Oper- Once/ month and ability Once/ cycle from the Alternate Shutdown Station

c. Motor Operated Once/ month Valve Oper- and Once/ cycle ability from the Alternate Shutdown Station

' d. Flow Rate at Once/3 months 1000 psig

e. Flow Rate at Once/ operating 150 psig cycle

• Conditional relief granted from this LCO for the period October 31, 1980 through November 7, 1980.

Amendment No. 44 107

-. _ _ _ _ - _ . - _ ,_- - - . _ _ ~ _ - - - - - _ _ - _ - - _ - -

' LIMITING CONDITION FOR OPERATION SURVEILLANCE REQUIREMENT 3.5.C.-HPCI Subsystem (Cont'd) 4.5.C HPCI Subsystem (Cont'd)

The HPCI pump shall deliver at least 4250 gpm for a system head corresponding to a reactor pressure of 1000 to 150 psig.

2. From and after the date that the 2.

HPCI Subsystem is made or found to be inoperable for any reason, continued reactor operation is

-permissible only during the succeeding seven days unless such subsystem is sooner made operable, providing that during such seven days all active components of the ADS subsystem, the RCIC system, the LPCI subsystem and both core spray

. subsystems are operable.

3. If the requirements of 3.5.C cannot be met, an orderly shutdown shall be initiated and the reactor pressure shall be reduced to or below 104 psig within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

3.5.D Reactor Core Isolation Cooling 4.5.D Reactor Core Isolation Cooling (RCIC) Subsystem (RCIC) Subsystem

1. The RCIC Subsystem shall be 1. RCIC Subsystem testing shall be operable whenever there is performed as follows:

trradiated fuel in the reactor vessel, the reactor pressure is a. Simulated Once/ operating greater than 104 psig, and prior Automatic cycle to reactor startup from a Cold Actuation Condition, except as specified Test in 3.5.D.2 below.

b. Pump Once/ month and Operability Once/ cycle from the Alternate Shutdown Station

c. Motor Once/ month and Operated Once/ cycle from Valve the Alternate Operability Shutdown Station Amendment No. 42 108

~

a LIMITING CONDITION FOR OPERATf0N SURVEILLANCE REQUIREMENT 3.5.0 Reactor Core Isolation Cooling 4.5.D Reactor Core Isolation on Cooling (RCIC) Subsystem (Cont'd) (RCIC) Subsystem (Cont'd)

d. Flow Rate at Once/3 months 1000 psig

e. Flow Rate at Once/ operating 150 psig cycle The RCIC pump shall deliver at least 400 gpm'for a system head corresponding to a reactor pressure of 1000 to 150 psig.

2. From and after the date that the 2.

RCICS is made or found to be inoperable for any reason, continued reactor power operation is permissible only during the succeeding seven days provided that during such seven days the HPCIS is operable.

3. If the requirements of 3.5.0 cannot be met, an orderly shutdown shall be initiated and the reactor pressure shall be reduced to or below 104 psig within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

3.5.E Automatic Depressurization System 4.5.E Automatic Depressurization System (ADS) (ADS)

1. The Automatic Depressurization 1. During each operating cycle the Subsystem shall be operable following tests shall be performed whenever.there is irradiated on the ADS:

fuel in the reactor vessel and the reactor pressure is greater a. A simulated automatic actuation than 104 psig and prior to a test shall be performed prior to startup from a Cold Condition, startup after each refueling except as specified in 3.5.E.2 outage.

below,

b. With the reactor at pressure, each relief valve shall be manually opened until a corresponding change in reactor pressure or main turbine bypass valve positions indicate that steam is flowing from the valve.

c. Perform a test from the alternate shutdown panel to verify that the relief valve solenoids actuate. Test shall be performed after each refueling outage prior to startup.

Amendment No. 57 109 c , . , , e., , . ~ . . . . ~ - - - . - - . . . . _ .,..m.- - - e ,-

LIMITING CONDITION FOR OPERATION SURVEILLANCE REQUIREMENT 3.5.E.LAutomatic-Depressurization 4.5.E Automatic Depressurization Subsystem-(ADS) (Cont'd) System (ADS) (Cont'd)

2. From and after the date that ,ne 2.

valve-in the automatic depressurization subsystem is made or found to be inoperable for any reason, continued reactor operation is permissible only during the succeeding seven days unless such valve is sooner made operable, provided that during such seven days the HPCI subsystem is operable.

3. If the requirements of 3.5.E cannot be met, an orderly shutdown shall be initiated and the reactor pressure shall be reduced to at least 104 psig within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />. '

3.5.F Minimum Low Pressure Cooling and 4.5.F Minimum Low Pressure Cooling and Diesel Generator Availability Diesel Generator Availability

1. During any period when one 1.

diesel generator is inoperable, continued reactor operation is i permissible only during the '

succeeding seven days unless such diesel generator is sooner made operabla, provided that all of the low pressure core and containment cooling subsystems l and the remaining diesel generator shall be operable. If q this requirement cannot be met, '

an orderly shutdown shall be initiated and the reactor shall be placed in the Cold Shutdown Condition within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

2. Any combination of inoperable conponents in the core and containment cooling systems shall not defeat the capability of the remaining operable components to fulfill the cooling functions.

Amendment No. 15 110

BASES:

3.5.A Core Spray and LPCI Subsystems (Cont'd) this reference, the repair period is_found to be less than 1/2 the test interval. This assumes that the core spray subsystems and LPCI constitute a 1 out of 2 system; however, the combined effect of the two systems to limit excessive clad temperatures must also be considered. The test interval specified in Specification 4.5 was 3 months. Therefore, an allowable repair period which maintains the basic risk considering single failures should be less than 30 days and this specification is within this period. For multiple failures, a shorter interval is specified and to improve the assurance that the remaining systems will function, a daily test is called for. Although it is recognized that the infor.mation given in reference (1) provides a quantitative method to estimate allowable repair times, the lack of operating data to support the analytical approach prevents complete acceptance of this method at this time. Therefore, the times stated in the specific items were established with due regard to judgment.

Should one core spray subsystem become inoperable, the remaining core spray and the LPCI system are available should the need for core cooling arise.

Based on judgments of the reliability of the remaining systems; i.e., the core spray and LPCI, a seven-day repair period was obtained.

Should the loss of one LPCI pump occur, a nearly full complement of core and containment cooling equipment is available. Three LPCI pumps in conjunction with the core spray subsystem will p rform the core cooling function. Because of the availability of the majority of the core cooling equipment, a 30-day repair period is justified. If the LPCI subsystem is not available, at least 2 LPCI pumps must be available to fulfill the containment cooling function.

The 7-day repair period is set on this basis.

The LPCI Subsystem is not considered inoperable when the RHR System is operating in the shutdown cooling mode.

(1) Jacobs, I.M., " Guidelines for Determining Safe Test Intervals and Repair Times for Engineered Safeguards", General Electric Co., A.P.E.D., April, 1969 (APED 5736) 114

BASES:

3.5.B Containment Cooling Subsystem The containment cooling subsystem for Pilgrim I consists of two independent

loops each of which to be an operable loop requires one LCPI pump, two RBCCW pumps, and two SSHS pumps to be operable. There are installed spares for margin _above the design conditions. Each system has the capability to perform its function; i.e., removing 64 x 10' Btu /hr-(Ref. Amendment 18), even with some system degradation. If one loop _ls out-of-service, reactor operation is _

. permitted for seven days.

With components or subsystems out-of-service, overall core and containment cooling reliability is maintained by the operability of the remaining cooling equipment.

Since some of the SH and RBCCW pumps are required for normal operation, capacity testing of individual pumps by direct flow measurement is impractical. The pump capacity test is a comparison of measured pump performance parameters to shop performance tests combined with a comparison to the performance of the previously tested' pump. These pumps are rotated during operation and performance testing will be integrated with this or performed during refueling when pumps-can be flow tested individually. Tests during normal operation will be performed by measuring the shutoff head. Then the pump under test will be placed in service and one of the previously operating pumps secured. Total flow indication for the system will be compared for the two cases. Where this is not feasible due to changing system conditions, the

. pump discharge pressure will be measured and its-power requirement will be 4 used to establish flow at that pressure.

115

BASES:

3.5.D RCIC System The RCIC is designed to provide makeup to the nuclear system as part of the planned operation for periods v5en the normal heat sink is unavailable. The nuclear safety analysis, FSAR Appendix G, shows that RCIC also serves as redundant makeup system on total loss of all offsite power in the event that HPCI is unavailable. In all other postulated accidents and transients, the ADS provides redundancy for the HPCI. Based on this and judgments on the reliability of the HPCI system, an allowable repair time of seven days is specified.

117

' BASES:

-. 3. 5. E - Automatic Depressurization System (ADS)

-The limiting conditions for operating the ADS are derived from the Station Nuclear Operational Analysis (Appendix G) and a detailed functional analysis

.of the ADS (Section 6).

This-specification ensures the operability of the ADS under all conditions for which the automatic or manual depressurization of the nuclear system is an essential response to station abnormalities.

The nuclear system pressure relief system provides automatic nuclear system depressurization for small breaks in the nuclear system so that the low pressure coolant injection (LPCI) and the core spray subsystems can operate to protect the fuel barrier.

Because the Automatic Depressurization System does not provide makeup to the reactor primary vessel, no credit'is taken for the steam cooling of the core caused by the system actuation to provide further conservatism to the-CSCS.

Performance analysis of the Automatic Depressurization System is considered only with respect to its depressurizing effect in conjunction with LPCI or Core Spray. There are four valves provided and each has a capacity of 800,000 lb/hr at a reactor pressure of 1125 psig.

The allowable out of service time for one ADS valve is determined as seven days because of the redundancy. Therefore, redundant protection for the core with a small' break in the nuclear system is still available.

The ADS test circuit permits continued surveillance on the operable relief valves to assure that they will be available if required.

Amendment No. 15 118

BASES:

-4.5 Core and Containment Cooling Systems Surveillance Frequencies The testing interval for the core and containment cooling systems is based on industry practice, quantitative reliability analysis, judgment and practicality. The core cooling systems have not been designed to be fully testable during operation. For example, in the case of the HPCI, automatic initiation during power operation would result in pumping cold water into the

-reactor vessel which is not desirable. Complete ADS testing during power operation causes an undesirable loss-of-coolant inventory. To increase the availability of the core and containment cooling systems, the components which make up the system; i.e., instrumentation, pumps, valves, etc., are tested frequently. The pumps and motor operated injection valves are also tested each month to assure their operability. A simulated automatic actuation test once each cycle combined with monthly tests of the pumps and injection valves is deemed to be adequate testing of these systems.

The surveillance requirements provide adequate assurance that the core and containment cooling systems will be operable when required.

1 122