ML20217C052

From kanterella
Jump to navigation Jump to search
Proposed Tech Specs 15.3.1.A,15.3.3.A & 15.3.3.C,eliminating Inconsistencies & Conflict Between TSs
ML20217C052
Person / Time
Site: Point Beach  
Issue date: 10/05/1999
From:
WISCONSIN ELECTRIC POWER CO.
To:
Shared Package
ML20217B961 List:
References
NUDOCS 9910130149
Download: ML20217C052 (29)


Text

t

}

NPL 99-0565 L

h Page1of14 f.

4 EDITED TECHNICAL SPECIFICATION PAGES

{

- MARK-UP TECHNICAL SPECIFICATION CHANGE REQUEST 201 MODIFICATIONS TO TECHNICAL SPECIFICATIONS

- TO PROVIDE CONSISTENCY

- POINT BEACH NUCLEAR PLANT, UNITS 1 AND 2 1

1 i

I J

l l

l i

l l

r i

E 'Ja*I Ph P

pm L2L

W:-

15.3 LIMITING CONDITIONS FOR OPERATION 15.3.1 REACTOR COOLANT SYSTEM Applicability Applies to the operating status of the Reactor Coolant System.

i Objective To specify those limiting conditions for operation of the Reactor Coolant System which must be met to ensure safe reactor operation.

Specification A.

OPERATIONAL COMPONENTS 1.

Reactor Coolant Rumps Loops

  • a.

Whea the reactor is critical, both reactor coolant pumps loops shall be operable and in operation.

-(1)

M.With one or both reactor coolant pump loop (s) ee2re eperat! g i

not in operation, the reactor shall be placed in hot shutdown within 6 bours.

I b.

When the reactor is subcritical and the average reactor coolant temperature is gre"+er th-. ;;350 F, except for tests, both reactor coolant loops shall be operable and at least one reactor coolant pump loop shall be in operation except as permitted in (1) below. If one 3

reactor coolant loop is inoperable, then restore the loop to an operable

)

condition within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />. If the inoperable loop is not restored to an operable condition within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />, then cool down to < 350*F within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />.

(1)

Both reactor coolant pumps may be dererg!2ed not in operation i

provided:'

a.

No operations are permitted that would cause A""+:^mM she a reduction in reactor coolant system boron concentration, b.

Core outlet temperature is maintained at least 10 F below

]

saturation temperature, and

)

c.

The reactor trip breakers are open, c.

^t !ert ene r-+er ree!rt 7" p c rridu2' hest eme'/2! gete. Sh2!!

be i eper2+:e- '" hen a redue+:^- ir ~2de - the beren eence-+ ret!^n of the reseter reeb-+ Deleted

~

1 2.

c+- Genenter* Deleted r" be epenb!c'"b e'c:*he 2'rer2;e c'e+er 2.

One rte-. gener2t^ A e

ec^!r+ temperature ir she zel 350%

i 3.

Components Required for Redundant Decay Heat Removal Capability *

a. -

Reactor coolant temperature less than 350 F and greater than 440.200 F.

(1)

At least two of the decay heat removal methods listed shall be operable and at least one shall be in operation.

Unit 1 - Amendment No.

15.3.1-1 Unit 2 - Amendment No.

o

i 1

(a)

Reactor Coolant Loop Ar!!r erree'+ed ste--' ;;eceret^-

r d e!+1 -- re - ter e ^ c! r t p p.

(b)

Reactor Coolant Loop B, !!r errec!eted rter' ;;e erete-- A e!+1'e-e eter ec^!rt pcmp.

j i

  • Applicable only when one or more fuel assemblics are in the reactor vessel.

j i

i

, Unit 1 - Amendment No.

15.3.1-2 Unit 2 - Amendment No.

(c)

Residual Heat Removal Loop (A)*

(d)

Residual Heat Removal Loop (B)*

(22) If. With no decay heat removal method is operable or in operation, except as permitted by (4) below, all operations causing anJacseamin the re--+c-dec2y 'e+ !ced er a reduction in reactor coolant system boron concentration shall be suspended. Corrective actions to return a required decay heat removal method {s) to operable and operation shall be initiated immediately.

(2,3_) !f the ec-d!"^=c ef spee!"-'d^- (1) 25^'re ce net be et With only one decay heat removal method operable, corrective action to return a second decay heat removal method to' operable status es soon as possible shall be initiated immediately.

(4)

^ + 1-+ ^"e ef +he ebe're decay h:2! re se' 2! - e+hede rh2!! he !=

eper2!!^-

(a).All reactor coolant pumps and residual heat removal pumps may be A^ energized not in operation for up to I hour in any 8 hour9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> period provided:

(4 a) No operations are permitted that would cause d!!u ^ of a d

reduction in the reactor coolant system boron concentration,-and And (2 b) Core outlet temperature is maintained at least 10 F below saturation temperature.

- Unit 1 - Amendment No.

15.3.1-3 j

Unit 2 - Amendment No.

L

\\

l b.

Reactor Coolant Temperature Le= Than 4404; 200 F

'(1)

Bc:h residual heat remova! !ceps sha!! be operab!c excep as permitted l

in items (3) or (4) belov.. One residual heat removal loop shall be operable and in operation. In addition either:

(a) one additional residual heat removal 1000 shall be operable:

i 9I

)

(b) with ' reactor coolant loons filled and RCS intact. the secondary side water level in one steam generator shall be creater than 30%

(narrow range).

(2)

If no residual hea remova! loop is in opemti-on, a!! cperaticas causing an increase in the reac:cr decay hea: ! cad er a reduetion in reacter ecolant system beren concentra:ica shat! be suspended. Corrective i

action 94e+eturn a decay heat remc.al method :c operation sha!! be initia:cd immediately. With one or both decav heat removal methods inoperable or none in operation. corrective actions to return required

{

decay heat removal method (s) to an operable status and to operation i

shall be initiated immediately except as provided in (3) through (6) l below.

(3)

All required residual heat removal pumps may be not in operation for up to I hour in any 8 hour9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> period provided:

(a)

No operations are permitted that would cause a reduction in reactor coolant system boron concentration.

i L

And 1

l (b) core outlet temperature is maintained at least 10 F below saturation temperature.

l (34) One residual heat removal loop may be eut-of service inoperable when l

the reactor vessel head is removed and the refueling cavity flooded.

(45) One of the two required residual heat removal loops required by h{l) j may be temporarily cu of service inoperable for up to 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> to meet surveillance requirements provided the ether residual heat renoval loop is operable and in operation.

l:

Unit 1 -~ Amendment No.

15.3.1-4 Unit 2 - Amendment No.

l 1

rr i

(6): Required residual heat removal loop (s) may be removed from cperation du;ine olanned heatuo to creater than 200*F. and to perform pressure isolation valve leakage testing in accordance with Technical J

Specification 15.4.15, when at least one reactor coolant loop is operable

. and in operation.

)

i l

l 4

i u, -

Unit 1 - Amendment No.

15.3.1 Unit 2 - Amendment No.

4.

Pressurizer Safety Valves Two Pressurizer Safety Valves shall be operable when Reactor Coolant System temperature is 2 355 F.

a.

^ t 'e-" ene prerr"r!2e- --fety 'z2! ze r' '! be eper25!e " hene cer +5e

--*e eed !r e-the erre!. One pressurizer safety valve may be inoperable for up to 15 minutes. If the pressurizer safety valve cannoth restored to an operable condition within 15 minutes, then place the reacyg in hot shutdown within 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and cool down to < 355'F within 12 hc._urs

b. n e pre r"-!2er r2fety '9:er e2!! be oper25!e "e e'rer 9e-m;>h e

er:':e2! If both pressurizer safety valves are inoperable, then phN the reactor in hot shutdown within 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and cool down to < ?55*F within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />.

1 i

D.

l' l

Unit 1 - Amendment No.

15.3.1-6 Unit 2 - Amendment No.

L

the requirements of 15.3.3.A.1 within the time specified, the reactor shall be placed in the hot shutdown condition within six hours,. 'n'e rece+e-e'?" be

-'e:-te! red in e eend!*:c" '":+b receter ee^!--+ te-'per?+"rer gr-+- +hin 350 F, un'e~ ^ e redd" b rer'er:1-leep e being re!!ed upe" +e pre';!de e

redur - e* fer decer b "+ e"'c' 2!. !- +h!r eece 'he re eter rh2!! be A

/

e

,m,, :,,,, :, ma um..... u nor,ma ianor and cooled down to < 350 F within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />. The requirements of Technical Specification 15.3.1.A.3 shall be followed.

a.

One residual heat removal pump may be eut ^f sc~!ee inoperable, provided the pump is restored to operable status within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />. The other residual heat removal pum p shall be operable.

b.

One residual heat removal heat exchanger may be eut of ee~!ee inoperable for a period of no more than 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />.

c.

Any valve in the system, required to function during accident conditions, may be inoperable provided repairs are completed within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />.

Prior to initiating repairs, all valves in the system that provide the duplicate function shall be operable.

]

l l

l Unit 1 - Amendment No.

15.3.3-2a Unit 2 - Amendment No.

y._

C.

Component Cooling System 1.

A reactor shall not be made critical unless the following conditions are met:

a.

The component cooling pumps err!gned te associated with the unit are operable.

b.

Either the component cooling heat exchanger associated with the unit together with one of the shared spare heat exchangers are operable or the two shared spare heat exchangers are operable for single unit operation.

Three component cooling heat exchangers are operable for two unit operation.

c.

. All valves, interlocks and piping associated with the above components, i

and required for functioning of the system during accident conditions, are operable.

2.

During power operation, the requirements of 15.3.3.C-1 may be modified to allow one of each of the following conditions at any one time. If the system is not restored to meet the conditions of 15.3.3.C-1 within the time period specided, the reactor shall be placed in the hot shutdown condition within 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and cooled %vn to < 350 F within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />. If the require " ente of

! 533f ! 2re "^t r+! reed "W 2n cdd!+!cu2! A' heer, +he re'rter 6?" M p!2ced !r the ce!d 9"+d^"r. cend!"e" The requirements ofTechnical Specification 15.3.!.A.3 shall be followed.

a.

One of the cer!;;ned associated component cooling pumps may be euwf sonice inoperable provided a pump is restored to operable status within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />.

b.

One of the required heat exchangers may be eut of serice inoperable provided repairs can be completed within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />.

c.

Any valve required for the functioning of the system may be inoperable provided repairs are completed within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />. Prior to initiating repairs, all valves in the system required to perform the duplicate function shall be operable Unit 1 - Amendment No.

15.3.3-4 Unit 2 - Amendment No.

l:

l Items 15.3.1.A.I.a permits an orderly reduction in power if a reactor coolant pump is lost during operation at less than or equal to 50% of rated power.

Above 50% power, an automatic reactor trip will occur if either pump is lost. The power-to flow ratio will be maintained equal to or less than 1.0, which ensures that the minimum DNB ratio increases at lower flow since the maximum enthalpy rise does not increase above its normal full-flow maximum value.*

~

Specification 15.3.1.^ 3 provides limiting conditions for operation to ensure that redundancy

(

in decay heat removal methods is provided. A single reactor coolant loop "" ' ""- "

s _ _........

...,,,.,,,,..,_.., or a single residual heat removal loop provides sufficient heat removal capacity for removing the reactor core decay heat /fowever, si wA failure considerations require that at least two decay heat removal methods be available.

w s.u secr%so k

~ Operability of a steam generator for decay heat removal meludes two sources of water, water level indication in the steam generator, a vent path to atmosphere, and the Reactor Coolant,pgg System filled and vented so thermal convection cooling of the core is possible[If the steam

'M wce h k

generators are not available for decay heat removal, this Specification requires both residual p' i

heat removal loops to be operable unless the reactor system is in sod:li.; dud ":

condition with the refueling cavity flooded and nogtiogiprogress which could cause r Smr in reter d y Em !ced er a decrease inAboron concentration. In this i

condition, the reactor vessel is essentially a fuel storage pool and removing a RHR loop from service provides conservative conditions should operability problems develop in the other RHR loop. ' Also, one res dual heat removal loop may be temporarily out of service due to f

surveillance testing, calibration, or inspection requirements.IThe surveillance procedures M##

follow administrative controls which allow for timely restoration of the residual heat removal loop to service if required.

le'ss %

Additionally, with reactor coolant temperature bc^na 350'Fr.ad M0 F, all operating decay heat removal pumps (either reactor coolant pumps or residual heat removal pumps) are allowed to be deenergized for a short time (1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br />) with the stipulation that bs; di!: !:: % w opv&bns a, rt.cLckTen h1 ceu.sw ea.W4-

-eenviderr are not allowed and that core outlet temperature remain 10'F below saturation.

MN boe

-Unit 1 - Amendment No.178 15.'3.1-3c September 3,1997 xUnit 2 - Amendment No.182

p l

l l

l The operable status of the varic'us systems and components is to be demonstrated by periodic tests, defined by Specification 15.4.5. A large fraction of these tests h

will be performed while the reactor is operating in the power range.

If a l

component is found to be inoperable it will be possible in most cases to effect l

repaiis and restore the system to full operability within a.relatively short time.

For a single component to, be inoperable does not negate the ability of the system

, to perform its function, but it, reduces the redundancy provided in the reactor design and thereby limits the ability to. tolerate additional equipment failures.-

Jf it develops that (a) the inoperable component is not repaired within the

'specified allowable time period or (b) a second component in the same or related system is found to be inoperable, the reactor will initially be put in the hot shutdown condition to provide for reduction of the decay heat from the fuel, and consequent red' ction of cooling requirements after a postulated loss-of-coolant u

accident. This will also perinit improved access for repairs in some cases. After a limited time in hot shutdown, if the malfunction (s) are not corrected, the reactor will be placed in the cold shutdown condition, utilizing normal shutdown and cooldown procedures. For example, specification 15.3.3.A.2.a allows one accumulator to be isolated or otherwise inoperable for periods of up to one hour.

s se An inoperable accumulator may be defined as one with its outlet MOV shut no

/n pressure instrumentation operable, er etter ud/0r -itr:S:P ? ice r c"0 F F-cS"""+"d with th: :r.:u :1:t:r :n th: :ther 1::p.

If the inoperable accumulator is not restored witin one hour then the ::nditi:n: Of <:::ti:n 15.2.0 :pply which req"!-es must

-4he affected unit, if critical, te be in hot shutdown within.+sireve* hours and in 31 cold shutdown within -37 hours if the condition is not corrected.

In the cold shutdown condition there is no possibility of an accident that would release fission products or damage the fuel elements.

The specified repair times do not apply to regularly scheduled maintenance of the engineered safety systems, which is normally to be perfonned during refueling shutdowns. The limiting times to repair are based on:

1 1)

Assuring with high reliability that the safety system will function properly i

if required to do so.

I 2)

Allowances of sufficient time to effect repairs using safe and proper procedures.

Unit'l - Amendment No. 163 15.3.3-7 October 12, 1995 Unit ? - Amondmant Na 147

l 1

Assuming'the reactor has been operating at full rated power for at least 100 days, the magnitude of. the decay heat decreases as follows after initiating hot shutdown.*

Time After Shutdown Decay Heat % of Rated Power 1 min.

3.6 30 min.

1.55 I hour 1.25 f

8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> 0.7

)

48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> 0.4

  • Based on ANS 5.1-1979, " Decay Heat Power in Light-Water Reactors" I

Thus, the requirement for core cooling in case of a postulated loss-of-coolant accident while in the hot shutdown condition is significantly reduced below the requirements for a postulated loss-of-coolant accident during power operation.

Putting the reactor in the hot shutdown condition significantly reduces the poten-

,r tial consequences of a losi-of-coolant accident, and also allows more free access

.,,.lswut to some of. the engineered safety system components in order to effect repairs.

.D Jh;n the feiiur:s inv: h : th: r::ide:1 50:t remr/:1 :y:t::, in rd:r t: ' :ur:

redendent meen; ;f de::.y h::t r::re:1, th; r:::t:r :y: tem y *e=11a in =

Cenditier with r;;;t:r ;;;1:nt t;;per:ture: gre:ter thia 350*r !c that the "escto"

-::: lent leep5 end.22% ;.ted 5 tee; g:n:r;t:r:

y'be uti'i::d f0r redu"di".t dt0!!

he:t r: rt:1.

lia 2vec, hen th: r;;;ining " 10 p :::t be r: lied u;:n f:r redu W nt d:::y heet reu,0,el cipability, r:::t:r :::1:nt t::p;r;tures shell b;

!-t:i :d 5:tw::n MO*,r :nd liO*F.

With respect to the core cooling function, there is some functional redundancy for certain ranges of break sizes.'*)

The operability of the 1tefueling Water Storage Tank (RWST) as part of the ECCS ensures that a sufficient supply of borated water is available for injection by the ECCS in the event of sither a LOCA or a steamline break. The limits on RWST Unit 1 --Amendment No. 161 15.3.3-8 March 6, 1995

-Unit-2.- Amendment No. 165

minimum volume and boron concentration ensure that: (1) sufficient water is available within containment to permit recirculation cooling flow to the core; (2) the reactor will remain subcritical in the cold condition ~(68 to 212 degrees-F) following a small break LOCA assuming complete mixing of the RWST, RCS, spray additive tank, containment spray system piping and ECCS. water volumes with all control rods inserted except the most reactive control rod assembly (ARI-1); (3) the reactor will remain subcritical in the cold condition following a large break

~

2 LOCA (break flow area greater than 3 ft ) assuming complete mixing of the RWST, RCS, ECCS water and other sources of water that may eventually reside in the sump post-LOCA with all control rods assumed to be out (ARO); and (4) long term subcriticality is maintained following a

  • amhe break assuming ARI-l and fuel failure is precluded.

The containment cooling function is provided by two independent systems: (a) fan coolers and

- (b) containment spray which, with sodium hydroxide addition, provides the iodine removal function. During normal power operation, only three of the four fan coolers are required to remove heat lost from equipment and piping within the containment.* In the event of a Design Basis Accident, any one of the following combinations will provide sufficient cooling to reduce containment pressure: (1) four fan coolers, (2) two containment spray pumps, (3) two fan coolers -

plus one containment spray pump.M Sodium hydroxide addition via one spray pump reduces airborne iodine activity sufficiently to limit off-site doses to acceptable values. One or two fan

(,

coolers is permitted to be inoperable for up to 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> during power operation.

Specification 15.3.3.B.2.c requires valves that provide the duplicate function be operable prior to initiating repairs on an inoperable valve. For the specific case of the containment spray pump discharge (SI-860) valves, SI-860A and SI-860D provide duplicate functions. Valves SI-860B and SI-860C are not required for system operability. Hence, prior to removing valve SI-860A s

'c valve SI-860D must be operable and vice versa.

me+ E -

The component cooling system is different from the other systems discussed above in that the components are so located in the Auxiliary Building as to be accessible for repair after a loss-of-coolant accident. The component cooling water pump together with one component cooling heat exchanger can accommodate the heat removal load on one unit either following a loss-of-coolant accident, or during normal plant shutdown. If during the post-aci:ident phase the component cooling water supply is lost, core and containment cooling could be maintained until repairs were effected.*

i i

Unit 1 - Amendment No. 74 15.3.3-9 hly 0, 507 L Unit 2 - Amendment No.4-79 '

p

?-

TSCR 201 L

' Bases Additions Insert A l

. An operable reactor coolant loop consists of an operable reactor coolant pump, an operable steam generator in accordance with Technical Specification 15.4.2.A. and necessary valves, piping and instrumentation.

j-insert B A reactor coolant loop is in operation when it is OPERABLE and the reactor coolant pump is operating.

. 1 Insert C

~

. The residual heat removal loop consists of heat exchangers, pumps, piping and the necessary valves and l

instrumentation. During plant shutdown, reactor coolant normally flows from the reactor coolant system to.

)

L the residual heat removal pumps, through the tube side of the residual heat removal heat exchangers and back to the reactor coolant system. During normal operation, the inlet line to the residual heat removal l

Esystem starts at the hot leg of one reactor coolant loop and the return line connects to the cold leg of the

-~other loop. The heat loads are transferred by the residual heat removal heat exchangers to the component cooling water.

' When flooding the reactor cavity in preparation for refueling operation, water flows from the refueling

water storage tank to the residual heat removal pumps, through the tube side of the residual heat exchangers and to the reactor coolant system. The inlet line to the residual heat removal loop starts at the refueling.

p water storage tank and the return line connects to the cold leg of a reactor coolant loop. The heat load is transferred to the water from the refueling water storage tank. Upon cornpletion of cavity flooding, tiie

, system is realigned for normal operation. '

\\ Insert D I

' Failures involving the Residual Heat Removal Syst:m may affect decay heat removal. In order to ensure j

l L redundancy of decay heat removal when failures occur, the plant is placed in a condition in which the requirements governing decay heat removal in Technical Specification 153.l A.3 apply.

Insert E

/ The component cooling water system (CC) for each unit is designed with a common (train independent) 1 l

supply and return header such that either pump assigned to the unit and the assigned or one spare heat 1

= exchanger is capable of supplying all required loads under normal or accident conditions.

Insert F h When below 200 degrees, the steam generators cannot produce steam, however they are considered

' ^ operable for decay heat removal because they are capable of being a heat sink due to their large contained l'

volume of secondary water. As long as the steam generator secondary side water is at a lower temperature J han the reactor coolant, heat transfer will occur; the rate of heat transfer is directly proportional to the t

temperature difference.

h

NPL 99-0565 Attachment'5 Page1of15-

s..

EDITED TECHNICAL SPECIFICATION PAGES -

CHANGES INCORPORATED '

TECHNICAL SPECIFICATION CHANGE REQUEST 201

' MODIFICATIONS TO TECHNICAL SPECIFICATIONS TO PROVIDE CONSISTENCY POINT BEACH NUCLEAR PLANT, UNITS 1 AND 2 1

I i

4 15.3 LIMITING CONDITIONS FOR OPERATION 15.3.1 REACTOR COOLANT SYSTEM Applicability -

1 Applies to the operating status of the Reactor Coolant System.

Objective

' To specify those limiting conditions for operation of the Reactor Coolant System which must be met to ensure safe reactor operation.

Specification

'A.

. OPERATIONAL COMPONENTS 1.

' Reactor Coolant Loops

  • a.

When the reactor is critical, both reactor coolant loops shall be operable and in operation.

(1) ; With one or both reactor coolant loop (s) not in operation, the reactor shall be placed in hot shutdown within 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />.

b.

When the reactor is subcritical and the average reactor coolant

)

- temperature is 2350*F, except for tests, both reactor co_olant loops shall

]

be operable and at least one reactor coolant loop shall be in operation j

except as permitted in (1) below. If one reactor coolant loop is inoperable, then restore the loop to an operable condition within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />. If the inoperable loop is not restored to an operable condition within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />, then cool down to < 350'F within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />.

(1)

Both reactor coolant pumps may be not in operation provided:

q a.

No operations are permitted that would cause a reduction in I

reactor coolant system boron concentration, b.-

Core outlet temperature is maintained at least 10 F below saturation temperature, and c.

~ The reactor trip breakers are open.

c.

Deleted 2.

~ Deleted 4

3.

Components Required for Redundant Decay Heat Removal Capability *

' a.-

Reactor coolant temperature less than 350'F and greater than 200 F.

(1) ' At least two of the decay heat removal methods listed shall be operable and at least one shall be in operation.

(a); Reactor Coolant Loop A (b)

Reactor Coolant Loop B

? Applicable only when one or more fuel assemblies are in the reactor vessel.

zUnit 1 - Amendment No.

15.3.1-1

' Unit 2 - Amendment No.

L

l l

(c)

Residual Heat Removal Loop (A)*

4 (d)

Residual Heat Removal Loop (B)*

_(2) ;With no decay heat removal method operable or in operation, except as permitted by (4) below, all operations causing a reduction in reactor coolant system boron concentration shall be suspended. Corrective

)

actions to return decay heat removal method (s) to operable and operation shall be initiated immediately.

)

.(3).With only one decay heat removal method operable, corrective action to -

)

I return a second decay heat removal method to operable status as soon as possible shall be initiated immediately.

(4)

All reactor coolant pumps and residual heat removal pumps may be not in operation for up to I hour in any 8 hour9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> period provided:

(a)

No operations are permitted that would cause a reduction in the i

reactor coolant system boron concentration l

I And (b)

Core outlet temperature is maintained at least 10 F below saturation temperature.

)

)

1 i

Ucit 1 - Amendment No.

15 3.1-2 Unit 2 - Amendment No.

s

p L

~b.

Reactor Coolant Temperature s 200 F (1)

One residual heat removal loop shall be operable and in operation. In L

addition, either:

(a) > one additional residual heat removal loop shall be operable; Or (b) with reactor coolant loops filled and RCS intact, the secondary side water level in one steam generator shall be greater than 30%

~

(narrow range),

.(2)

With one or both decay heat removal methods inoperable or none in operation, corrective actions to return required decay heat removal method (s) to an operable status and to operation shall be initiated immediately except as provided in (3) through (6) below.

(3)

All required residual heat removal pumps may be not in operation for up to I hour in any 8 hour9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> period provided:

(a).

No. operations are permitted that would cause a reduction in reactor coolant system boron concentration, And i

(b) core outlet temperature is maintained at least 10 F below saturation temperature.

-(4)' One residual heat removal loop may be inoperable when the reactor vessel head is removed and the refueling cavity flooded.

(5) ! : One residual heat removal loop required by b(1) may be inoperable for up to 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> to meet surveillance requirements provided the other

residual heat removal loop is operable and in operation.

(6). Required residual heat removal loop (s) may be removed from operation during planned heatup to greater than 200 F, and to perform pressure isolation valve leakage testing in accordance with Technical Specification 15.4.15, when at least one reactor coolant loop is operable and in operation.

l

~ -Unit 1 - Amendment No.

- 15.3.1-2a Unit 2 - Amendment No.

e 4.

Pressurizer Safety Valves Two Pressurizer Safety Valves shall be operable when Reactor Coolant System temperature is 2:355 F.

a. One pressurizer safety valve may be inoperable for up to 15 minutes. If the pressurizer safety valve cannot be restored to an operable condition I

within 15 minutes, then place the reactor in hot shutdown within 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and cool down to < 355 F within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />,

b. If both pressurizer safety valves are inoperable, then place the reactor in hot shutdown within 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and c.x>l down to < 355 F within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />.

f b

i i

Unit 1 - Amendment No.

15.3.1-2b Unit 2 ' Amendment No.

u:

J

'~T (tems 15.3.1.A.I.a. permits an orderly reduction in power if a reactor coolant pump is lost during operation at less than or equal to 50% of rated power.

l Above 50% power, an automatic reactor trip will occur if either pump is lost. The power-to-flow ratio will be maintained equal to or less than 1.0, which ensures that the minimum DNB ratio increases at lower flow since the maximum enthalpy rise does not increase above its normal full-flow maximum value.*

Specification 15.3.1.A.3 provides limiting conditions for operation to ensure that redundancy in decay heat removal methods is provided. A single reactor coolant loop or a s;ngle residual I

heat removal loop provides sufficient heat removal capacity for removing the reactor core decay heat. Itowever, single failure considerations require that at least two decay heat removal methods be available, i

An operable reactor coolant loop consists of an operable reactor coolant pump, an operable steam generator in accordance with Technical Specification 15.4.2.A, and necessary valves piping and

-instrumentation. Operability of a steam generator for decay heat removal when above 200 F also includes two sources of water, water level indication in the steam generator, a vent path to atmosphere, and the Reactor Coolant System filled J vented so thermal convection cooling of the core is possible. When below 200 degrees, the steam generators cannot produce steam, however they 1

are considered operable for decay heat removal because they are capable of being a heat sink due to their 1-rge contained volume of secondary water. As long as the steam generator secondary side water is at a lower temperature than the reactor coolant, heat tr;msfer will occur; the rate of heat transfer is directly proportional to the temperature difference. A reactor coolant loop is in operation when it is operable and the reactor coolant pump is operating.

The residual heat removal loop consists of heat exchangers. pumps, piping and the necessary valves and instrumentation. During plant shutdown, reactor coolant normany flows from the reactor coolant system to the residual heat removal pumps, through the tube side of the residual heat removal heat exchangers and back to the reactor coolant system. During normal operation, the inlet line to the residual heat removal system starts at the hot leg of one reactor coolant loop and the return line Unh 1 - Amendment No.

15.3.1-3c Unit 2 - Amendment Ne.

F yv M. &

' M !'

connects to the cold leg of the other loop.The heat loads are transferred by the residual heat removal heat exchangers to the component cooling water.

~

7 L When flooding the reactor cavity in preparation for refueling operation, water flows from the 1 refueling water storage tank to the residual heat removal pumps, through the tube side of the residual

heat exchangers and to the reactor coolant system.~ The inlet line to the residual heat removal loop starts at the refueling water storage tank and the retum line connects to the cold leg of a reactor

< coolant loop. The heat load.is transferred to the water from the refueling water storage tank. Upon

- conipletion of cavity flooding, the system is realigned for normal operation.

s if the steam generators are not.wailable for decay heat removal, this Specification requires both residual heat removal loops to be operable unless the reactor system is in a condition with the

' refueling cavity flooded and'no operations in progress which could a decrease in reactor coolant boron concentration. In this condition, the reactor vessel is essentially a fuel storage pool and removing a RHR loop from service provides conservative conditions should operability problems idevelop in the other RHR loop. Also, one er both residual heat removal loop may be temporarily out of service due to surveillance testing, calibration, or inspection requirements subject to specific limitations; The surveillance procedures follow administrative controls which allow for timely

. re'storation of the residual heat removal loop to service if required.

Additionally, with reactor coolant temperature less than 350 F, all operating decay heat removal pumps (either reactor coolant pumps or residual heat removal pumps) are allowed to 1 be deenergized for a short time (1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br />) with the stipulation that operations that would cause a reduction in reactor coolant syst'em boron are not allowed and that core outlet temperature remain 10*F below saturation.

o 1

Unit 1 - Amendment No; 15.3.1-3d Unit 2 - Amendraent No.

c

' The opt: ration of one reactor coolant pump or one RHR pump provides adequate flow to ensure mixing, prevent stratification and produce gradual reactivity changes during boron concentration reductions in the reactor coolant system. The reactivity change rate associated with boron reduction will, therefore, be within the capability of operator recognition and control.

Each of the pressurizer safety valves is designed to relieve 288,000 lbs per hour of saturated steam at

. setpoint. If no residual heat is removed by any of the means available, the amount of steam which could be generated at safety valve relief pressure would be less than half the valves' capacity. One valve, therefore, provide adequate defense against overpressurization. Below 350*F and 400 psig in the Reactor Coolant System, the residual heat removal system can remove decay heat and thereby control system temperature and pressure.

~ A PORV is defined as OPERABLE ifleakage past the valve is less than that allowed in Specification 15.3.1.D and the most recent associated channel test,'as specified in Table 15.4.1-1. is acceptable.

Additionally, the PORV must have the capability of operating manually to relieve reactor coolant system pressure increases.

A block valve is defined as OPERABLE if the valve can operate manually and ifit can control identified PORV leakage.

When a PORV is INOPERABLE due to excessive' seat leakage, the block valve is shut with power j

maintained to the block valve so that the block valve (s) is readily available and may be used to allow the PORV to control reactor pressure. Excessive primary system leakage is defined in specification 15.3.1.D. The block valve may remain shut to ialate the leaking PORV for a limited period of time not to exceed the next refueling shutdown. When a PORV is INOPERABLE for reasons other than excessive seat leakage, the block valve is sht.t with power removed; this precludes any inadvertent

. opening of the block valve.

s. _

When a block valve is INO!'ERABLE, the associated PORV is placed in manual control; this precludes the undesired automatic opening of the PORV.

I l

Unit 1 - Ame.ndment No.

15.3.1-3e

. Unit 2 - Am=Iment No.

I

~

The requirement that 100 KW of pressurizer heaters and their associated controls be capable of being supplied elc Mcal power from an emergency bus provides assurance that these heaters can be energized dtuing a loss of offsite power condition to maintain pressure control and natural circulation at hot shutdown.

The requirement to have a reactor coolant system gas vent operable from the reactor vessel or the pressurizer steam space assures that non-condensible gases can be released from the Reactor Coolant System if necessary. The Reacto-Coolant Gas Vent System (RCGVS) provides an orificed vent path from the pressurizer steam space and an orificed vent path from the reactor vessel. Both vent paths include two parallel solenoid-operated isolation valves which are powered from emergency buses and vent to a common header. From the common header, gases may be vented via separate lines, each with a single solenoid operated isolation valve powered from the emergency bus to the pressurizer relief tank or containment atmosphere. The orifice in these vent lines restricts leakage so that, in the event of a pipe break or isolation valve failure, makeup ws.ter for the leakage can be provided by a single coolsnt charging pump. If a RCGVS vent path from either

. the pressurizer or reactor vessel head is inoperable, Specification 15.3.1.A.7.c requires the remotely operable valves in that inoperable path to be shut with power removed. If a vent path from the common header to the pressurizer relief tank or containment atmosphere is inoperable, the isolation valve in that path must be shut but reactor operations may continue. If both vent paths to or both vent paths from the common header are inoperable, the RCGVS is inoperable and the steps in specification 15.3.1.A.7.d must be taken.

P FSAR Section 14.1.11.

m FSAR Section 7.2.3.

. Unit 1 - Amendment No.

15.3.1-3f

- Unit 2.- Amendment No.

n the requirements of 15.3.3.A.1 within the time specified, the reactor shall be placed in the hot shutdown condition within six hours and cooled down to

< 350*F within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />.' The requirements of Technical Specification 15.3.1.A.3 shall be followed.

a.

One residual heat removal pump may be inoperable, provided the pump is restored to operable status within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />. The other residual heat removal pump shall be operable.

b.

Or e residual heat removal heat exchanger may be inoperable for a period of no more than 72 how.

c.

' Any valve in the system, required to function during accident conditions,-

may be inoperable provided repairs are completed within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />, Prior to initiating repairs, all valves in the system that provide the duplicate function shall be operable.

t Unit 1 - Amendment No.

15.3.3-2a Unit 2 - Amendment No.

C. ; Component Cooling System,

'l.

A reactor shall not be made critical unless the following conditions are met:

a.

The component cooling pumps associated with the unit are operable.

b.

Either the component cooling heat exchanger associated with the unit togcSer with one of the shared spare heat exchangers are operable or the two shared spare heat exchangers are operable for single unit operation.

Three component cooling heat exchangers are operable for two unit operation.-

c.

All valves, interlocks and piping associated with the above components, and required for functioning of the system during accident conditions, are operable.

2.-

During power operation, the requirements of 15.3.3.C-1 may be modified to allow one of each of the following conditions at any one time. If the system is not restored to meet the conditions of 15.3.3.C-1 within the time period specified, the reactor shall be placed in the hot shutdown condition within 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and cooled down to < 350*F within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />. The requirements of Technical Specification 15.3.1.A.3 shall be followed.

a.

One of the associated component cooling pumps ma 7. bainoperable provided a pump is restored to operable status within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />.

b.

One of the required heat exchangers may be inoperable provided repaiu l

can be completed within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />, c.

Any valve required for the functioning of the system may be inoperable

provided repairs are completed within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />. Prior to initiating repairs, all valves in the system required to perform the duplicate function shall be operable i

i-Unit I e Amendment No.

15.3.3-4 Unit ?. - Amendment No.

j

U' 3The operable status of the various systems and components is to be demonstrated by periodic tests, defined by Specification 15.'.5.

large fraction of these tests will be performed while the reactor is 4

operating in the power rringe. If a component is found to be inoperable it will be possible in most

' cases to effect repairs and restore the system to full operability within a relatively short time. For a single component to be inoperable does not negate the ability of the system' to perform its function, but it reduces the redundancy provided in the reactor design and thereby limits the ability to tolerate

. ' additional equipment failures.. Ifit develops that (a) the inoperable component is not repaired within the specified allowable time period or (b) a second component in the same or related system is found to be inoperable, the reactor will initially be put in the hot shutdown condition to provide for reduction of the' decay heat from the fuel, and consequent reduction of cooling requirements after a postulated loss-of-coolant accident. This will also permit improved access for repairs in some cases. After a limited time in hot shutdown, if the malfunction (s) are not corrected, the reactor will be placed in the

- cold shutdown condition, utilizing normal shutdown and cooldown procedures. For example, specification 15.3.3.A.2.a allows one accumulator to te isolated or otherwise inoperable for periods of

up to one hour. i An inoperable accumulator may be defined as one with its' outlet MOV shut or no pressure f.nstrumentation operable. If the inoperable accumulator is not restored within one hour then i the affected unit, if critical, must be in hot shutdown within six hours and in cold shutdown within 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br /> if the condition is not corrected. In the cold shutdown condition there is no possibility of an

- accident that would release fission products or damage the fuel elements.

The specified repair times do~not apply to regularly scheduled maintenance of the engineered safety

. systems, which is normally to be performed during refueling shutdowns. The limiting times to repair are based on:

1) H Assuring with high reliability that the safety system will function properly if required to do so.

2). l Allowances of sufficient time to effect repairs using safe and proper procedures.

T Unit 1 - Amendment No.

115.3.3-7

. Unit 2 - Amendment No.

+

h l:

cAssuming the reactor has been operating at full rated power for at least 100 days, the magnitude of the decay heat decreases as follows after initiating hot shutdown.*

" Time After Shutdown Decay Heat % of Rated Powe_r 1 min.

3.6 30 min.~

1.55 Ihour-l.25 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br />

^

0.7 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> 0.4

-

  • Based on ANS 51 1979 " Decay Heat Power in Light Water Reactors"

' Thus, the requirement for core cooling in case of a postulated loss-of-coolant accident while in the hot shutdown condition is significantly reduced below the requirements for a postulated loss-of-coolant accident during power ope.w:on. Putting the reactor in the hot shutdown condition significantly reduces the potential consequences of a loss-of-coolant accident, and also allows mom free access to some'of the engineered safety system components in' order to effect repairs.

Failures involving the Residual Heat Removal System may affect decay heat removal. In orrier to ensure reduadancy of decay heat removal when failures occur, the plant is placed in a condition in which the requirements governing decay heat removal in Technical Specification 15.3.1.A.3 apply.

LWith respect _ to the core cooling function, there is some functional redundancy for cenain ranges of break sizes.(2)

~

The operability of the Refueling Water Storage Tank (RWST) as part of the ECCS ensures that a 4 sufficient supply of borated water is available for inject, ion by the ECCS in the event of either a LOCA or a steamline break. The limits on RWST f

Unit 1 - Amendment No.

'15.3.3-8 Unit 2 - Amendment No.

e..'

minimum volume and boron concentration ensure that: (1) sufficient water is available within

. containment to permit recirculation cooling flow to the core; (2) the reactor will remain suberitical in the cold condition (68 to 212 degrees-F) following a small break LOCA assuming complete mixing of the RWST, RCS, spray additive tank, containment spray system piping and ECCS water volumes with all control rods inserted except the most reactive control rod assembly

' (ARI-1); (3) the reactor will remain subcritical in the cold condition following a large break LOCA (break flow area greater than 3 ft') assuming complete mixing of the RWST, RCS, ECCS water and other sources of water that may eventually reside in the sump post-LOCA with all control rods assumed to be out (ARO); and (4) long term suberiticality is maintained following a steamline break assuming ARI-1 and fuel failure is precluded.

The containment cooling function is provided by two independent systems: (a) fan coolers and (b) containment spray which, with sodium hydroxide addition, provides the iodine removal function. During normal power operation, only three of the four fan coolers are required to remove heat lost from equipment and piping within the containment?) In the vent of a Design Basis Accident, any one of the following combinations will provide sufficient cooling to reduce containmsnt pressure: (1) four fan coolers, (2) two containment spray pumps, (3) two fan coolers plus one containment spray pump?) Sodium hydroxide addition via one spray pump reduces airborne iodine activity sufficiently to limit off-site doses to acceptable values. One or two fan coolers is permitted to be inoperable'for up to 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> during power operation.

Specification 15.3.3.B.2.c requires valves that provide the duplicate function be operable prior to initiating repairs on an inoperable valve. For the specific case of the containment spray pump discharge (SI-860) valves, SI-860A and SI-860D provide duplicate functions. Valves SI-860B and SI-860C are not required for system operability. Hence, prior to removing valve SI-860A from service, valve SI-860D must be operable and vice versa.

The Component Cooling System (CC) for each unit is designed with a common (train independent)

. supply and retum header such that either pump assigned to the unit and the assigned or one spare heat exchanger is capable of supplying all required loads under normal or accident conditions.

1 The component cooling system is different from the other systems discussed above in that the

components are so located in the Auxiliary Building as to be accessible for repair after a loss-of-coolant accident. The component cooling water pump together with one component cooling heat exchanger can accommodate the heat removal load on one unit either following a loss-of-coolant Unit 1 - Amendment No.

15.3.3-9 Unit 2 - Amendment No.

u

accident,' or during normal plant shutdown. If during the post-accident phase the component cooling water supply is lost, core and containment cooling could be maintained until repairs were effected.W A utal of six service water pumps are installed, only three of which are required to operate during the injection and recirculation phases of a postulated loss-of-coolant accident,* in one unit together with a hot shutdown or normal operation condition in the other unit. For either reactor to be critical, six service water pumps must be operable.

The allowed outage time for a single service water pump is 7 days. The allowed outage time for

' two or three service. water pumps is 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />. If more than one service water pump is inoperable, the 7 day allowed outage time starts when the first pump is declared inoperable and the 72 hour-allowed outage time for the second and third pumps is cumulative starting from the time the second pump is declared inoperable. Therefore, the total time that two or three pumps are inoperable during the period that LCO 15.3.3.D.2.a is in effect must not exceed 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />. All pumps must be restored to operable status within 7 days et the first pump being' declared

- inoperable.~ Specifications 15.3.3.D.2.c requires four and 15.3.3.D.2.d requimd five service water

- pumps to be operable to provide sufficient flow for accident mitigation when these specifications 1

-are in effect.

The service water ring header continuous flowpath LCO requirement (TS 15.3.3.D.2.b) applies

{

anytime continuity of the flowpath in the service water ring header is interrupted. This includes isolation of any part of the ring header. This LCO recognizes that one aspect of redundancy in

~

the service water sptem is the ability to isolate a break in the system and still maintain ability to provide required flow to supported equipment. This capability is impaired anytime the continuous flowpath of the ring header is blocked. The 7 day allowed outage time is based on the fact that a piping failure must occur to cause a subsequent problem with system operability.

Piping failures are not considered as the single failure for system functionality during an accident.

TS 15.3.3.D.2.b requires that service water system flow is evaluated within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> ifless than

- four service water pumps are operable. This is necessary to ensure that all required equipment will receive sufficient flow in this condition. Ifit is determined that any equipment will not receive sufficient flow, the applicable LCOs for the affected equipment shall bc entered. These

- LCOs can be exited if system realignment is completed to achieve the required flow rates for the

-affected equipment.

Unit 1 - Amendment No.

15.3.3 Unit 2 - Amendment No.

m