ML20235G605
| ML20235G605 | |
| Person / Time | |
|---|---|
| Site: | Waterford  |
| Issue date: | 06/30/1987 |
| From: | LOUISIANA POWER & LIGHT CO. |
| To: | |
| Shared Package | |
| ML20235G604 | List: |
| References | |
| PROC-870630, NUDOCS 8707140316 | |
| Download: ML20235G605 (47) | |
Text
_ _ _ _ _ -. _ _ _
F FUNCTIONAL DESI6N SPECIFICATION FOR THE i
SPOS ENHANCEMENT PROGRAM JUNE, 1987 LOUISIANA POWER & LIGHT COMPANY WATERFORD 3 SES i
f 1
8707140316 B7073G PDR ADOCM 05000302 P
PDR NS41285 i
TABLE OF CONTENTS fage I.
INTRODUCTION 1
j II.
SPDS DISPLAYS j
A.
Display Descriptica 2
B.
Human Factors Principles Employed 3
C.
Status Indicators 4
III. PARAMETER SELECTION A.
Parameter Data Description 5
B.
Justification for Parameters Not Selected 6
C.
Data Validation 11 IV.
SAFETY PARAMETER DISPLAY SYSTEM TEST AND VALIDATION PROGRAM 12 V.
IMPLEMENTATION SCHEDULE 13 l
VI.
REFERENCES 14 VII. ATTACHMENTS 15 ATTACHMENT I SPDS Display 1 (Normal Conditions)
ATTACHMENT II -
SPDS Display 1 (Abnormal Conditions)
ATTACHMENT III -
SPDS Display 2 (Normal Conditions)
ATTACHMENT IV -
SPDS Display 2 (Abnormal Conditions)
ATTACHMENT V Matrix For The Display Types That Have Been Selected For Each Parameter ATTACHMENT VI -
Parameter Data Sheets ATTACHMENT VII -
Data Validation Logic Tables NS41285
I.
INTRODUCTION This functional specification has been developed as a means of de-scribing the Enhancement Program that will be implemented for the Waterford 3 Safety Parameter Display System (SPDS).
The purpose of the Enhancement Program was to achieve the following object ves:
i o
Address the noted deficiencies and resolve the outstanding NRC concerns with the present design o
Accommodate operations personnel with a more efficient and useful system for rapidly and reli-ably determining the safety status of the plant o
Integrate the present design with the Waterford 3 Emergency Operating Procedures o
Continue to meet the SPDS requirements of NUREG-0737, Supplement 1.
The subsequent sections of this specification discuss the enhancements that will be employed to the existing design.
A majority of these enhancements involve modifications to the SPDS software to include the following:
Reduction in the number of SPDS Displays Reduction in the Data Response Time Addition of Status Indicators Addition of Bar Graphs Redesign of the Display Format based on the redefined Parameter Set Sole Designation of a CRT for SPDS Usage In addition to the software changes, the hardware will be modified to include a reduction in keystrokes in order to decrease the time for accessing the system.
I r
I 4
NS41285 1
II.
SPDS DISPLAY.5 A.
Display Description Based on a redefinition of the SPDS critical parameter set, a two page display concept will be implemented.
The two displays will be logically arranged to coincide with the format of the safety function checklist, as specified in the Waterford 3 Emergency Operating Procedures (EOPs).
Display 1, as depicted in Attachments I (Normal Conditions) and II (Abnormal Conditions), contains those parameters that have Deen grouped by the following safety functions:
Reactivity Control, RCS and Core Heat Removal and RCS Inventory and pressure Control.
Also included as part of Display 1 is an area designated as
" Safety Sys." to represent messages for various safety system actuation signals.
Display 2, as depicted in Attachments III (Normal Conditions) and IV (Abnormal Conditions), contains those parameters that have been grouped by the following safety functions:
Vital Auxiliaries and Containment Status, to include Containment Isolation, Radiation Monitoring, Containment Temperature and Pressure Control and Con-tainment Combustibles.
By employing two displays, each will be continuously available in the Control Room.
Since two CRTs which are adjacent to each other are available in the Control Room for SPDS usage, one will be solely allocated for the SPDS (the left CRT) while the other can be used to access the SPDS or other existing systems.
Security will be factored into the system software so that only the SPDS Displays are allowed access from the left CRT.
Additionally the software will be modified so that whenever the PMC requires rebooting, Display 1 will auto-matically appear on the left CRT and Display 2 will appear en the -
right CRT.
In order to reduce the number of keystrokes that is presently required to access an SPDS Display and thereby shorten the access time as well, a hardware change will be implemented.
There will be a total of four keys added to the console, Two of the keys (Page CRT 1, Page CRT 2) will be used for paging and the other two keys (Ack CRT 1, Ack CRT 2) will be used for acknowledging an alarmed status indicator (see Section II C for further information on status indicators). As a result, only one keystroke will be required to either acknowledge a display or page between one of the twa displays.
The maximum time to page a CRT from one display to the other will be four seconds.
NS41285 2
_--_-_a
II.
SPDS DISPLAYS (Cont'd.)
A matrix for the display types that have been selected for each parameter has been provided in Attachment V.
A parameter will be represented as one or more of the following display types:
1.
Valu~e - a numerical value will be displayed on the CRT.
2.
Trend Arrows - a trend arrow will be utilized to signify an increasing or decreasing value representation, thereby providing trending capability.
3.
Bar Graphs - the bar graph will be used to graphically display the value of a parameter within its specified range.
4.
Message - a message indication will be provided to represen' actuation of a safety system or an abnormal condition.
B.
Human Factors Principles Employed Prior to formalizing the design of the proposed SPDS Displays, t.P&L engineers applied good human factors principles when formatting the displays.
Once the format of both displays was finalized, the conr coding scheme that is consistent with the Plant Monitoring Computer (PMC) was employed.
The bases for selecting the display format and color coding scheme were as follows:
o To achieve consistency within both displays and throughout the PMC; o
To provide better contrast when viewing the displays; o
To standardize terms utilized; o
To acquire the appropriate degree of resolution to meet the operator's needs; and o
To avoid display clutter and density.
The proposed design was subsequently evaluated by four Advanced Resource Development (ARD) Corporation human factors specialists as documented in Reference 1.
NUREG-0700, " Guidelines for Control Room Design Reviews", and NUREG-0800, " Standard Review Plans for the Review of Safety Analysis Reports for Nuclear Power Plants", were used as design criteria to perform this evaluation.
Also considered during the review was the results of Waterford 3's Detailed Control Room Design Review (DCRDR) that was previously conducted by ARD.
Recommendations that were suggested by ARD as improvement items were reviewed and subsequer.tly incorporated into the final display design.
NS41285 3
II.
SPDS DISPLAYS (Cont'd.)
The color coding scheme that will be employed for the two displays is as follows:
}
Variables Colors Normal Values (to include Messages & Trend Arrows)
White Major Headings (safety function titles)
White Normal Bar Graph White Non-updatable Fields Cyan Support Information Cyan Background Information (outline)
Dark Blue Alarm for Status Indicators Yellow
- Alarm for Values Yellow
- Alarm for Bar Graphs Yellow
- Alarm for Messages Yellow
- The reasons for designating the alarm condition to be yellow as opposed to red are as follows:
(1) Yellow is consistently used for alarms throughout the PMC; and (2) Red (and green) is used for valve position throughout the Control Room and the PMC.
C.
Status Indicators Also being provided as part of the Enhancement Program are status indicators (perceptual cues).
By incorporating status indicators, operators are alerted to a change in the status of the safety functions even if on'y one SPDS CRT is available.
There will be a total of six status tedicators, one to represent each of the six critical safety function areas.
Two status indicators will be located in the bottom left hand corner of Display 1 to represent the two safety function areas contained on Display 2, and four status indicators will be lo-cated in the bottom left hand corner of Display 2 to represent the four safety function areas contained on Display 1 (see Attachments I - IV for status indicator representation).
If an operator is viewing Display 1 on CRT 1 (having only one CRT available) and one of the status indicator blocks illuminates with a yellow color, the operator is alerted to an alarming condition that exists on the display not being viewed (Display 2).
In order to reset the status indicator to its normal condition (an unilluminated box),
the operator must access the display that was not being viewed (Display 2), which requires only one keystroke, and then must acknowledge the receipt of the illuminated status indicator box, which also requires only one keystroke.
If both CRTs are available, the operator need only acknowledge the CRT with the alarming display.
Therefore, if one of the two available CRTs should fail or if one of the CRTs is being utilized to access a system other than the SPDS, operations personnel will remain cognizant of a change in the plant's safety status through the use of the status indicators.
NS41285 4
III. PMAMETER SELECTION A.
Parameter Data Description Attachment VI contains data sheets for the enhanced set of parameters that have been selected for SPDS representation.
The following information is given to define each parameter:
1.
Justification / Applicability provides the basis for select-ing the parameter to be displayed.
2.
Sensor Selection - identifies the specific computer point ID that is used for SPDS.
The criteria for selecting a sensor was based on the hierarchy that was established as follows:
)
a)
Select saf_ety grade sensor from PMC due to response time and diversity b)
Choose non-safety grade sensor-from PMC c)
Use QSPDS parameters 3.
Response Time - delineates the maximum time it takes to up-date the data from a change at the sensor until the change is depicted on the CRT.
The nominal response time should be two-thirds to three quarters of the maximum response time.
This condition is due to the timing of the various programs that are executed to make the SPDS functional.
4.
Range provides the specified range for a parameter con-sistent with plant design.
5.
Range Justification provides the adequacy to encompass the normal or abnormal conditions for a parameter.
6.
Data Validation provides the specific comparison band to be used by the SPDS to determine the suspect status of a parameter.
l 7.
Display Logic - identifies the value being displayed as l
either an average, maximum, or minimum of the two or more availatile sensor values.
8.
Alarm Setpoint provides the value at which the parameter will be alarmed.
9.
Alarm Logic - describes the process used by the SPDS to automatically determine if a parameter value should be switched to the alarm status.
An alarm condition indicates that the parameter value is beyond its anticipated range for normal conditions.
NS41285 5
{
III.' PARAMETER SELECTION (Cont'd.)
10.
Trend Deadband. defines the amount that a parameter value can vary without causing the trend arrow to be displayed.
These trend deadbands are twice'the standard' deviation of the process under steady state conditions.
The deadband eliminates a continuously changing trend arrow display due to small variations in a sensor value during steady state operation.
The trend arrow will be displayed if the-
~ difference between the present thirty second average of the
. parameter and the last thirty second average exceeds the trend deadband limit.
If more than one-third of the values are bad, the time interval will be discarded and the trend arrow will be' replaced with asterisks.
The sign (+,-) of their difference will then determine the direction of the trend. arrow.
These SPDS parameters do not require any additional connections to Class 1E systems beyond those connections required for the present SPDS as specified in Reference 2.
Therefore this SPDS design does not alter any interface between Class 1E systems and the SPDS.
Every effort ha:, been made to ensure the accuracy of this functional specification.
Also', every effort will be made to faithfully implement tie SPDS according to t_his specification.
However, if during implementation problems occur or changes are noted which will improve the SPDS, those changes will be incorporated.
Data validation setpoints, alarm setpoints and trend deadbands will be re-evaluated when the SPDS is operational under normal plant operating conditions and will be adjusted as necessary.
B.
Justification for Parameters Not Selected
- 1. A comparison of the pcrameters in the SPDS Enhancement Program with those that exist in the present design (See Reference 2) demonstrated that only nine of the existing parameters will not be included as part of the redefined parameter set.
Although these parameters may provide useful supplemental information, they are not included in the enhanced SPDS design so as to reduce the display clutter and allow a quicker assessment of the safety function status.
The following is a list of these parameters and the bases for not including them.
(a) Containment Fan Cooler Differential Pressure The con-tainment fan coolers are used to reduce the containment temperature.
If the temperature (which is monitored by the SPDS) exceeds its alarm set operator to this condition. point, the SPDS will alert the The fan differential pressure indicates if a fan is running and is supplemental or diag-nostic information (available on the control panels) that the operator would use to determine the cause or specific action to be taken to control containment temperature.
The SPDS is intended to provide overview information on the status of major safety functions as opposed to this type of more detailed diagnostic information.
Therefore, the fan cooler differential pressure is not monitored on the SPDS.
NS41285 6
i l
i III. PARAMETER SELECTION (Cont'd.)
(b) Liquid Waste Management Discharge Radiation - The radiation i
level in the effluent from the Liquid Waste Management System provides an indication of any significant. release of radio-activity by the plant liquid discharge.
However, this system does not have any direct impact on the RCS safety status.
A high radiation level does not necessarily indicate that a problem exista in the RCS.
Therefore, since the SPDS is in-tended to provide information on the safety status of the RCS, the liquid waste discharge radiation level is not monitored by SPDS.
(c) RCS Boron Concentration - The boron concentration in the RCS is measured by the boronometer located in the letdown flow path.
For many abnormal events where the SPDS would be most useful, the letdown line is closed, thereby isolating the boronometer from the RCS.
Furthermore, the measurement delay time of the boronometer is too long to provide useful infor-mation under transient conditions.
In addition, the reactor core power, which is monitored by the SPDS, can provide an indication to the operator if the RCS boron concentration is too low. Therefore the ~RCS boron concentration is not moni-tored on the SPDS.
j (d) Steam Generator Steam Flow Rate - The stean flow rate can be used to verify that heat is being removed 1' rom the RCS by the steam generators.
However, in the Waterford 3 Emergency Operating Procedures heat removal is verif ed by checking steam generator water level, saturation mar 2in, hot leg and cold leg temperature.
All of these paramt.ters are monitored by SPDS.
The steam flow is supplemental information not I
required to verify RCS heat removal and therefore is not monitored by SPDS.
(e) Main Feedwater Flow Rate - The flow rate of main feedwater indicates that water is being added to the steam generator to maintain the secondary side inventory.
If main feedwater were to fail, RCS heat removal would not necessarily be in jeopardy because the backup emergency feedwater system would autoinatically start and provide water to maintain heat re-moval.
Insufficient emergency feedwater flow when required however, could jeopardize RCS heat removal.
Thus, the SPDS does not monitor main feedwater flow but does monitor emer-gency feedwater flow which has a more direct impact on the success of RCS heat removal.
NS41285 7
III. PARAMETER SELECTION (Cont'd.)
(f) Shutdown Cooling (SDC) Heat Exchanger Inlet And Outlet Temperatures - The primary coolant temperature at the inlet and outlet of the shutdonn cooling heat exchanger indicates the effectiveness of heat removal during shutdown cooling.
However, this can also be verified by checking the low pres-sure' safety injection pump flow rate and the hot leg temper-ature, both of which are monitored by the SPDS.
It heat is not being removed, the hot leg temperature will increase above its normal value.
The heat exchanger inlet and outlet temperatures are supplemental information not required to verify RCS heat removal and therefore are not monitored by the SPDS.
(g) Pressurizer To Quench Tank Line Temperature, Quench Tank Level, Quench Tank Pressure - These three parameters indicate leakage of primary coolant past the pressurizer safety relief valves to the quench tank.
However, any significant leakage will also be' indicated by a decrease in pressurizer level and/or pressure, both of which are monitored by the SPDS.
The above parameters are supplemental or diagnostic infor-mation (available on the control panels) that the operator would use to determina the cause of the decreasing level and/or pressure.
Since the SPDS is not intended to monitor this leve. of detailed diagnostic information, the above parameters are not displayed on the SPDS.
- 2. A comparison between the parameters selected in the SPDS Enhancement Program versus those parameters that are used in the E0P Safety Function Status Checklist was also performed.
The result of this comparison indicated that only eleven parameters that are listed on the checklist are not included as part of the redefined parameter set.
Although these parameters may provide useful supplemental information, they are not included in the enhanced SPDS design so as to reduce the display clutter and allow a quicker assessment of the safety function status.
The followir>g represents a list of those parameters and the justifications for not including them.
(a) Emergency Boration in Progress - Emergency boration is provided to the RCS by the charging pumps from the Boric Acid Makeup Tanks (BAMTs) when a Safety Injection Actuation Signal (SIAS) occurs.
The charging pump flow is monitored by the SPDS.
Since there are redundant flow paths from the BAMTs, at least one path is available at all times (con-sidering a single failure). Therefore, charging pump flow in excess of 40 gpm after a SIAS is sufficient to indicate adequate emergency boration.
NS41285 8
III. PARAMETER SELECTION (Cont'd.)
(b) Main Feedwater Flow - See Item III B 1(e).
(c) 4.16 KV Non-Safety and 6.9 KV Buses Energized - Considering SPDS to be used for indication of a problem affecting the safety of the plant and due to display space limitations, the non-safety buses were omitted.
With the non-safety buses de-energized, the plant is in a degraded electrical condition but should be able to reach and maintain safe shutdown conditions as long as the safety related power sources, which are monitored by SPDS, are available.
(d) 4.16 KV Voltage and Frequency - These parameters were not selected due to CRT density considerations.
Messages are used to indicate an undervoltage on the safety buses.
(e) Boron Concentration - See Item III B 1(c).
(f) High Pressure Safety Injection (HPSI) Flow - This parameter was not selected since adequate HPSI flow varies with RCS pressure.
However, a message is used to denote the HPSI train availability.
SPDS can determine if a problem exists in availability and alert the operator for further investi-gation.
(g) SDC Train In Service - The logic here would be to check LPSI flow and RCS temperatures to verify proper SDC operation.
The AT across the Heat Exchanger is not included due to the ability to determine SDC operational success by parameters already monitored.
(h) Containment Isolation - A CIAS signal closes 56 containment isolation valves, 39 of which have valve position monitoring on the PMC and 17 of which are not monitored by the PMC.
Those valves that are monitored by the PMC will be input to the SPDS which will display an alarm message if any of these valves do not close on a CIAS.
The remaining 17 valves do not need to be monitored by the SPDS for the following reasons.
- Twelve of the unmonitored valves are on CP-8 which is the control panel directly in front of the SPDS.
The operator can look up from the SPDS and easily access the status of these twelve valves.
- Two of the unmonitored valves are on CP-33 which is directly behind the operator when he is viewing the SPDS.
NS41285 9
III. PARAMETER SELECTION (Cont'd.)
.l These containment isolation valve, (Hydrogen Analyzers) are key operated switches with the keys being under the control of the Shift Supervisor and the Control Rocm Supervisor.
These valves are maintained as locked closed valves during normal plant operations.
They are opened only during surveillance testing of the Hydrogen Analyzers, ESF Testing, and where required during the use of the E0Ps.
- Three of the unmonitored valves are located on CP-14 which is out of sight of the operator when he is at the SPDS.
These Containment Atmosphere Radiation Monitor isolation valves are normally open valves so that the containment atmosphere is sampled continuously during normal oper-ations.
This is a requirement of the Technical Spe-cifications for Waterford 3 under Leakage Detection Systems (3.4.5.1).
The valves conform with NRC re-quirements for isolation of containment and meet the single failure criteria.
(That is, a single failure of one component is credible; therefore, the second isola-tion valve in series with the failed one will meet the requirement for isolation.) These valves are tested to verify that they isolate upon a CIAS at a regular I
frequency to ensure operability.
In addition, it is required by the E0Ps that completion of a checklist be performed to verify all component actuations have occurred.
The steps requiring this action appear early in the procedure such that they will be performed simultaneously with the recovery actions.
The next time the E0Ps are revised it will be evaluated if these valves should be put at the top of the list of con-tainment isolation valves to be checked so they will be checked first.
(i) Steam Generator Isolation - The operator will receive a message "MSIS Actuated" on the SPDS and will then use the control board indication and E0P checklist to verify actuation.
No inputs are available on the PMC for monitor-ing each valve actuated on a Main Steam Isolation Signal (MSIS). Due to display limitations not all actuations will be fully monitored as in the case of Containment Isolation Action Signal (CIAS).
(j) Hydrogen Recombiners and Containment Atmospheric Relief System (CARS) - The hydrogen concentration parameter gives an indication for the success of the hydrogen recombiners and CARS in removing containment hydrogen.
Since hydrogen concentration is monitored by the SPDS and due to the fact that the hydrogen recombiners are procedurally started, these parameters are not displayed on the SPDS.
NS41285 10
III. PARAMETER SELECTION (Cont'd.)
C.
Data Validation j
l Attachment VII provides the logic tables for determining quality of the SPDS parameters based on a comparison of the signal from two or more sensors that measure the same parameter.
The inputs are flagged
" suspect" if the difference between the high and the low value exceeds the comparison band given in Attachment VI.
These bands are twice the quoted string accuracy with allowances for long term drift.
The suspect points are used to generate the parameter and the parameter is tagged with the quality as given in Attachment VII.
Parameters from QSPDS are validated per Reference 3.
An input can have four quality tags.
It is labeled " bad" if it is outside the physical range of the instrument.
It is labeled " suspect" as described above.
Ifapointistakenoutofscanbytheoperator and a value inserted in the data base it is labeled " inserted'.
Points with none of the above quality labels are considered good and are labeled as such.
SPDS display parameters can have a quality of " good",
" suspect" or " bad" per the logic table in Attachment VII.
Since an
" inserted" value is not indicative of the actual field condition, the out)ut is given a quality of " bad".
Good points are displayed in white witi no prefix.
Suspeci, noints are also displayed in white with a "S" prefix.
The digits of a b d point are displayed as asterisks which will be preceded by a "B".
tier charts will be filled with asterisks.
Cross channel comparisons can only be performed on multiple coalog points.
Of the 33 analog parameters, 18 or 55% are singic value parameters and are not validated by cross channel cov arison.
The other 15 parameters or 45% have multiple in All points are checked for " bad" and " inserted" puts and are compared.
status.
Messages with inputs that have bad quality will be identified as indeterminate.
NS41285 11
/
i L
IV.
SAFETY PARAMETER DISPLAY'SYSTCM TEST AND VALIDATION PROGRAM A software specification will be written detailing the software necessary to implement this functional specification.
This spec-ification will provide the detail; of each computer program in the SPDS.
It will-specify the inputs to the program, stipulate how those inputs are manipulated in the program and detail the outputs from the program.
This software specification will be kept current if changes are required.
Test instructions to test the SPDS and its programs will be developed based on this functional specification and the software specification.
The test'which will have specific test acceptance criteria will test the SPDS to ensure it functions as designed.
It will test such func-i tions as alarms, trends, data validation, message logic and display, parameter value logic and disp 1,ay, and bar graphs.
The response times.
l of the SPDS displays for a paging request and for step changes in the
-database will also be tested. The results of the test will be recorded.
A SPDS Validation test will be performed using the Waterford 3 (W-3) simulator to confirm that the operating system satisfies its func '
tional requirements and provides the necessary information to control room personnel.
The validation test will use, at a minimum, three W-3 Emergency Operating Procedures.
Procedures will be selected which represent' both uncomplicated and complex accident scenarios.
The procedures will be selected so that all SPDS parameters critical for monitoring plant safety status during emergency conditions are exercised.
The foundation for validating the availability of critical information parameters will be the comprehensive task analysis performed during the W-3 Detailed Control Room Design Review (DCRDR).
A comparison and evaluation will be conducted between the displays and indicators determined during the DCRDR to be relevant in mitigating emergency conditions and the variables displayed on the SPDS.
This validation process confirms that each of the displays and indicators reflects the status of a safety parameter which indicates the accomplishment or maintenance of a plant safety function.
Additionally, the ability of the information to be readily perceived and comprehended by control room personnel will be determined.
NS41285 12
V.
IMPLEMENTATION SCHEDULE The hardware station modification package and all hardware will be ready to implement by April 1, 1988.
The SPDS hardware will be installed during refuel outage 2.
The SPDS program will be written and functionally tested by July 1, 1988.
The SPDS will be installed, functionally tested and operational with approved procedures by August 1, 1988.
The validation testing of the SPDS on the Waterford-3 simulator will be completed and results evaluated by December 31, 1988.
NS41285 13
VI.
REFERENCES 1.
Human Factors Review of W-3 Safety Parameter Display System (SPDS), ARD Corporation, June 4, 1987.
2.
Waterford-3 SPDS Description, April 16, 1984 (W3P84-1007).
3.
" Functional Design Specification for the Qualified Safety Parameter Display System", NPROD-ICE-3201, Combustion Engineering, December 31, 1981.
I l
NS41285 14
VII. ATTACHMENTS ATTACHMENT I SPDS Display 1 (Normal Conditions)
ATTACHMENT II -
SPDS Display 1 (Abnormal Conditions)
ATTACHMENT III -
SPDS Display 2 (Normal Conditions)
ATTACHMENT IV SPDS Display 2 (Abnormal Conditions)
ATTACHMENT V Matrix For The Display Types That Have Been Selected For Each Parameter l
ATTACHMENT VI -
Parameter Data Sheets 1
ATTACHMENT VII -
Data Validation Logic Tables 1
NS41285 15
I PA 4
Ci f'
M C
M O
l 9
M o.
M
+
0 Z J
gMO w+
2 NWM EMM lC 0
J+
~~
o$
EEN J
AAN 4
k A
Ir r r CA DF JL ZC Mk O
lO0 wt M
O OM 07 F.
g N w
4 O O E
EN NJO lO 4
F g > ui M
D I
Z LJ M
O O
I I
L A NO NN
+
r 0 u1 M
lJ C0 W Mm
> Mb a
+
,J 3
F 0
0 C Z O
d W
O M W O
O b
J W
lC O
u O
L I
4 Z
s J wO lF wN D
m HO C ui M
M C@
l 7
8 r;
g O Mm Mb M
4_
o 4 b x
k l
M M c
NO-Q.
c.
L 00 M
E F
r Me 12 2
W a
W O
O F
4 4
F Jr Jr Mw ui s O
w 0
OlLO LA F Mm MM O
u e
M U1 O
O WL WL WL W
6 40 C0 0 Ow EO KO e
J l
w at at 4
w w
.c 0
m E
g 4
I F wO M
M L
M N
4 O C0 M
l0 D.
W D
C M
x Me a
J e
M m
I i
i
}""
1 H
W zu x
"* 4 OO D
4
- o. +
W
,.A,j M
M Ow JD FD O C0
(
4F ZF J
f.)
F4 FC wF ze
>M OM J
5 A
e D
b I
O I
S O
D O t
SP 3
O N L
I V L L
_I+
H V
O I
I M
- _G O
Lt V M A A H ZE3 RR5 R
L U V V O PP1 A
F P
D N A A L T
_M M M A
E.
N M T
. U L l
L I
LF NG SF H P V
I 0
_OO I4 0
A 3 L N
0 O2 G4 T R R C
R M9 E E I
I P
O_B I
R Z 1
A T1 P P S S S ZL7 S
RV2 U
H N
P P P P H C
C U U H H R
_S C
PL R
F 2 X P 20 i
- _L G 6 M G9 E S5 V S7 LT
_L FJG e
N e
3E 0
0 E e
O 4 L 6
5_G t
B FD F
M L i0
_ T i X S G6 TO G9 FC S5 S7 1
t H
S
+
l i
j l
{
I l
D l
l l
l i
P E
F H H S
C 20 P
O O M
+
t L L G CP G0 M S6
_ H H
E N
E O
O T
A A H H I
)TT LM LM SI S I O O N R
5 R
A*
BO C0 R0 R 0 R
CL 0 P8 P 8 H H R
F I*
I 6
0 0 F F P T 10 S*
S P
i1 2 1 E E C
- _ P*
P E
G G
R O G 0 H S 6 L
L R
S S
1 2
B G G O S S N P
D D D D D D I
_ S E E E E E E Y
T R
R T
T T T T T T I
E T
S A A A A A A V
Hi D
U U U U U U X
I OO R TE Y
T T T T T T U
T P-O OT T
C C C C C C A
C E T NR E
A A A A A A S
S LU TU F
G0 C E
F E
O1 A AS F
S S S S S AT MT F
L E cN E
A A A I
A S TA TA R
OI I
I S S F A IT NT S C C M E R VS CS
P SO M S AI E SA P GT T EI M A
RS E NR
& PP TF ET X 4
1 GN O T1 OE S T S M4 N1 RC O E T1 T DN R N H
YO P C C
HC I
l l
l l
l l
l l
l
[
I I
R EI O
R R
A N G/ I/
H/ G/ P/
/ E/ C/
/
O C
C XC C
C R NR NR C
M M KU KU EU SU SU M IM IM NU C6 C6 6 O4 OS A7 L6 L6 H3 E
N A0 A0 R0 M0 MO E0 0
0 O0 O
T-T-
E-T-
T-R+
M-M-
D-MT I
2 NS 2
4 3 S2 S5 O2 A T 1 T3 Ei T1 T8 T1 3
3 L1 MI N
N B.
D N
N M
N. N D A A
N T
T T
I I
R A L L
O N
N N
A A
G R P P
C C
C C
M M
S tE I
l l
l l
l l
1 l
l l
I 2
N S
O D
I P
T S
A L
O S
I l
ll Y
T I
V L
S IS YMS AS TSS TU TEU VU NEU CT ETT TOT ERT AA FSA AMA VPA ET AYT EET N T RS SSS HRS I&S h
N P
SO M S Y
AI E SA P A
GT T EI M R
A RS E PH NR
8 L
GN O S T T 1 T
OE S M6 M 1
MH RC O E T1 T TO DN R N N
NL YO P C C
CF NC I
I l
l l
l l
l l
l l
l 1
R bI O
T T SL D L
L SL RL R
R R
L AM O M
h N G/
I / N/ G/ P/
/ E/ E/
/
O C
C XC C
C R NR NR C
S M KU K U EU SU SU M IM IM NU C4 C 6
6 O4 OS A4 L9 L9 WS N A0 A 0 R0 M0 HO E0 O
O OO WT O
T-T E-T-
T-R-
M+
M+
D-I SE S E SE AE AE AE TE TE NE 2
0 NS 2
4 3 S9 S9 O2 A
T2 T 6 Ei T1 T8 T1 9
9 L1
$D B
N N
I N. N D
M M
M A
A H
T T
T I
I A L L
O N
N N
A A
G R P P
C C
C C
M M
S l
l l
l l
l l
I l
I l
l l
D 2
E N T E
S O
A LE ED ED VD D
I U OT VE VE LE P
T T SE LN LN AN S
A C IL AG AG VG L A P
VI VI I
O TM L
L 8L S
S MO 4A 8A 1A I
A TC S
S S
N N N E E E E E E D D D N
WA B N N E B A E E E g
E E D Y
S S S D D T
kB U U U B
I B B A B A V
L S
IS YMS AS TSS SKV V V S S S TU TEU VU NEU K K U U U CT ETT OT ERT I
1 1
ET AYT ET N T C C C RS SSS RS I&S 4 4 4 D D D
ATTACHMEN'J V (Page 1 of 2)
. MATRIX FOR ThE DISPLAY TYPES THAT HAVE
.BEEN SELECTED FOR EACH PARAMETER Tre'nd Bar Parameter
.Value Arrow Graph Message
-REACTIVITY CONTROL
- 1) Log Power X
X
- 2) Reactor Trip X
- 3) CEAs Not Inserted X
RCS AND CORE HEAT REMOVAL
- 1) Th-(2)
X X
X
- 2) Tc (2)
X
.X X
- 3) CET Temp.
X X
- 4) - SG Lyl. (2)
X X
X
- 5) SG Pres. (2)
X-X i
- 6) LPSI Flow (2)
X
'.X C) SG2 EFW Flow Low X
- 9) No RCP Running.
X RCS INVENTORY AND PRESSURE CONTROL
- 1) PRZR. Lv1.
X X
X
- 2) PRZR. Pres.
X X
X
- 3) Upper Head Void X
- 4) Upper Plenum Void X
- 5) Charging Flow X
- 6) HPSI A Unavailable X
- 7) HPSI B Unavailable X
- 8) CNTMT Sump Level X
X
- 9) RWSP Lv1. Low X
10).Subcooled Margin X
X SAFETY SYS
- 1) SIAS Actuated X
- 2) CIAS Actuated X
- 3) CSAS Actuated X
- 4) MSIS Actuated X
- 5) EFAS Actuated X
- 6) RAS Actuated X
ATTACHMENT V (Page 2 of 2)
MATRIX FOR THE DISPLAY TYPES THAT HAVE BEEN SELECTED FOR EACH PARAMETER Trend Bar Parameter Value Arrow Graph Message CONTAINMENT ISOLATION
- 1) CIAS Actuated X
[5I
- 2) CNTMT Isolation Incomplete X
, RADIATION MONITORING
- 1) Condenser Exhaust X
- 2) Main Steam Lin; (2)
X
- 3) Plant Stack Gas X
- 4) Plant Stack Iodine X
- 5) Containment Area X
- 6) Blowdown X
- 7) CNTMT Atmos. Gas X
- 8) CNTNT Atmos. Particulate X
CONTAINMENT TEMP. AND PRESS. CONTROL
- 1) Containment Press.
X X
- 2) Containment Temp.
X X
- 3) CNTMT Spray Flow Low X
CONTAINMENT COMBUSTIBLE GAS
- 1) H Concentration X
X 2
VITAL AUXILIARIES
- 1) 4.16 KV BUS A Deen X
- 2) 4.16 KV BUS B Deen X
- 4) DC BUS A Deen X
- 5) DC BUS B Deen X
- 6) DC BUS A/B Deen X
Message will identify the control board panel in which the misaligned valve is located.
-,w,,------
,,r---
,-,,-----,,----,w-r- - - -
-1 l
ATTACHMENT VI PARAMETER DATA SHEETS 1
1 W310571B
PARAMETER CORE POWER DISPLAY I_
JUSTIFICATION /APPLICABIt1TY: Provides a direct indication of the success of reactivity control. The operator can determine if power is changing due to change 4 in reactivit.y. This allows the operator to verify that power decreases after a reactor trip has occurred.
l SEdSOR(S): The excore neutron flux detector signals (Channels C and D) are taken from QSPDS. PID C26236, C26330 RESPONSE TIMFg 7.1 sec.
RANGE:
2 x 10~8 to 200 Units R.\\NGE JUSTIFICATION: This is sufficient to encompass. shutdown conditions as well as overpower events initiated from full power DATA VALIDATION:
0.7 decades DISPLAY LOGIC: Maximum A_LARM SETPOINT: High 102%
Low N/A ALARM LOGIC:
The alarm condition alerts the operator that power is exceeding the licensed limit and that action should be taten to regain reactivity control.
TREND DEADBAND: 0.02 Decade 2
W310571B
.i 4
l'ARAMETER REACTOR TRIP (MESSAGE)
DISPLAY 1 J' JUSTIFICATION / APPLICABILITY:
Indicates that a reactor trip signal has been generated due to a transient and the Control Element Assercblies (CEA's) should be dropped into the core. The operator can determine if reactivity is being controlled by verifying that core power is decreasing.
SENSOR (S): A tignal from the CEDM Bus undervoltage devices are used.
PID D36616 RESPONSE TIME:
4.75 sec.
RANGE:
N/A to N/A Units N/A RANGE JUSTIFICATION: N/A DATA VALIDATION: N/A DISPLAY LOGIC: Message ALARM SEHOINT: High F/A Low ALARM LOGIC:
This message will appear if the CEDM Bus undervoltage devices g
are de-energized. This indicates that CEA's should be dropped in,i the core due to a reactor trip.
TREND Dl:ADBAND: N/A E'
y 4
3 W310571B
f FNWIETER CEA NOT INSERTED (MESSAGE)
DISPLAY 1 f,
+
JUSTIFICATION /AFPLICABIL11T: Alerts the operator that one or more CEAs have not been fully inserted after a reactor trip. This indicates that an Anticipated Transient Without Scram (ATWS) may have occurred and or that additional action (emergency boration) may be necessary to ensure l
react.ivity control.
SENSOR (S): The CEA bottom contact indicators from the PMC are used.
PID D32012 - D34312 RESPONSE TIME:
8.75 sec.
RANGE:
N/A to N/A Unita N/A RANGE JUSTIFICt. TION: N/A DATA VALIDATIONS N/A i
DISPLAY LOGIC-Message ALARM SETPOINT: High N/A Low ALARM LOGIC: This message appears if a reactor trip condition exists and any CEA bottom contact har not been closed. A four second delay time between the reactor trip condition at.d tbe display of this message is used to l
allow time for the CEA's to insert into the core.
TREND DEADBAND: N/A
)
i l
4 W310571B l
j
PARAMETER SIAS, CIAS, CSAS, MSIS, EFA1, RAS ACTUATED (MESSAGE)
DISPLAY 1_
JUSTIFICATION / APPLICABILITY: Provides indication of the actuation of the Engineered Safety Feature Systems. This alerts the operator that automatic actions have been initiated.
SENSOR (S): Actuation relays for the Engineerd Safety Features Systems.
CIAS PID D38602, D38609: MSIS PID D38601 D38608 CSAS PID D38600, D38607: SIAS PID D38618, D38620 EFAS PID D38605, D38606, D38612, D38613
(
RAS PID D38603, D38610 RESPONSE TIKE:
4.65 sec.
RANiiEl N/A to _N]A Units N/A RANGE JUSTIFICATION: N/A DATA VALIDATION: N/A DISPLAY LOGIC: Message ALARM SETPOINT: High N/A Low N/A ALARM LOGIC: Display message when either train is actuated.
TREND DEADBAND1 N/A 5
W310571B
.n PARAMETER HOT LEG TEMPERATURE DISPLAY 1 JUSTIFICATION / APPLICABILITY Indicates the effectiveness of heat transfer
'from the core to the coolant and heat removal to the steam generators or shutdown cooling heat exchangers. An increasing temperature indicates that sufficient heat is not being removed. The temperature in each hot leg is shown separately to provide information during asymmetric events.
SENSOR (S): llot leg RTD from the QSPDS are used.
Loop 1 PID C26238 Loop 2 PID C26426, C26331 RESPONSE TIME:
13 sec.
RANGE:
50 to 750 Units F
RANGE JUSTIFICATION: This is sufficient to encompass shutdown conditions as well as the highest possible hot leg temperature (705*F) with the core covered by water.
DATA VALIDATION:
2*F DISPLAY I,0GIC: Average ALARM SETPOINT: High 620 F Low N/A l
ALARM LOGIC: This is slightly above the normal temperature at 100% power and 1
indicates that the heat removal capability has degraded.
l TREND DEADBAND:
0.4*F 6
W310571B
l.
PARAMETER COLD LEG TEMPERATURE DISPLAY 1 JUSTIFICATION / APPLICABILITY:
Indicates the effectiveness of heat removal from the RCS to the steam generator secondary side. An increasing temperature indicates that sufficient heat is not being removed. The temperature of both cold legs attached to a steam generator is averaged together to display one cold leg temperature for each steam generator loop. This reduces clutter on the display acreen and provides sufficient information for all events, including asymmetric events.
SENSOR (S): RTD signals from the Q3PDS are used.
Cold Legs 1A and 1B are averaged together and 2A and 2B are averaged together.
Loop 1 PID C26239, C26333 Loop 2 PID C26240, C26332 RESPONSE TIME:
12 sec.
RANGE:
50 to 600 Units
- F RANGE JUSTIFICATION: This is sufficient to encompass shutdown conditions as well as the highest expected cold leg temperature based on heat transfer to the steam generator secondary side at its highest possible temperature.
DATA VALIDATION:
2F DISPLAY LOGIC: Average ALARM SETPOINT: High 560 F Low N/A ALARM LOGIC: This is slightly above the highest normal cold leg temperature and indicates that heat removal has degraded.
TREND DEADBAND:
0.2'F 7
W310571B
PARAMETER STEAM GENERATOR LEVEL DISPLAY 1 JUSTIFICATION / APPLICABILITY:
Indicates secondary side water level to inform the operator that is sufficient inventory exists so that the steam generator is capable of removing heat from the RCS.
The water level must be high enough to cover adequate steam generator tube length to ensure heat transfer from the RCS coolant. The level in both steam generators is shown separately.
SENSOR (S):
Wide range level instruments from the PMC are used.
SG1 PID A11120 SG2 PID A11220 RESPONSE TIME:
6.3 sec.
4ff Rfh.
O to 100 Units RANGE JUSTIFICATION: This encompasses the height of the steam generator from the tubesheet to above the i.Amam dryers.
t DATA VALIDATION: N/A DISPLAY LOGIC:
Single value ALARM SETPOINT: High 96%
Low 501 ALARM LOGIC: A water level above 50% ensures that the steam generator tubes are covered sufficiently to remove heat from the RCS. This value is taken from the E0P's.
A water level above 96% indicates that steam generator overfill and potential damage to the turbine is imminent.
This value coincides with a feedwater isolation on high level.
TREND _DEADBAND:
1%
8 U310571B
PARAMETER STEAM GENERATOR PRESSURE DISPLAY 1 JUSTIFICATION / APPLICABILITY: Assists the operator in performing a controlled cooldown of the RCG by' indicating secondary pressure (indicative of secondary temperature 4;ith saturated conditions) and heat removal capability of the steam generator. The pressure for both steam generators is shown separately.
SENSOR (S): Pressure signals from the PMC are used.
SGI PID A11114, A11115, A11116, A11117 SG2 PID A11214, A31215, A11216, A11217 RESPONSE TIME:
6.3 sec.
RANGE:
0 to 1200 Units psia RANGE JUSTIFICATION: The highest steam generator safety relief valves setpoint pressure is 1150 psia. The safety relief valves open to limit the maximum steam generator pressure. Therefore, this range is tufficient to encompass shutdown conditions as well as the highest possible steam generator pressure.
DATA VALIDATION:
110 psi DISPLAY LOGIC: Average ALARM SETPOINT: High 1065 psia Low N/A ALARM LOGIC: This alerts the operator that pressure is increasing to the point that the steam generator safety relief valses may open. This also indicates that the atmospheric dump valve should be open if it is in automatic mode.
TREND DEADBAND:
1.25 psi 9
W310571B
PARAMETER LOW PRESSURE SAFETY INJECTION FLOW DISPLAY 1 JUSTIFICATION / APPLICABILITY:
Indicates that forced flow through the core I
exists during shutdown cooling and refueling modes of operations. LPSI flow in combination with het leg temperature indicate the effectiveness of decay heat removal by the shutdown cooling heat exchangers.
SENSOR (S): Flow instrument downstream of the shutdown cooling heat exchanger for each pump is used.
PID S43101 LPSI A PID S43201 LPSI B RESPONSE TIME:
6.3 sec.
I 1
l RANGE:
0 to 5500 Units GPM l
RANGE JUSTIFICATION: The maximum value exceeds the runout flow for the LPSI pump.
1 DATA VALIDATION:
N/A l
DISPLAY LOGIC: Single value.
ALARM SETPOINT: High N/A Low 3000 GPM ALARM LOGIC: The alarm condition will exist if the flow rate is less than 3000 gpm when the LPSI pump is running. This value is the minimum allowed by the Technical Specifications to ensure adequate decay heat removal from the RCS during shutdown cooling or refueling.
TREND DEADBAND:
100 GPM 10 W310571B
PARAMETER CORC EXIT THERMOCOUPLE (CET) " TEMPERATURE DISPLAY 1
, JUSTIFICATION / APPLICABILITY:
Provides an indication of core uncovery and fuel cladding heatup due to inadequate core heat removal. As the core uncovers, the temperature of steam at the core exit increases above saturation to superheated steam. The CET temperature trend provides information on the progress of core uncovery.
SENSOR (S): The maximum representative CET temperature from both QSPDS channels is used. The representative CET temperature is a 95%
probability maximum of all operable CETs in the core on a QSPDS channel.
PID C26417, C26510 1
RESPONSE TIME:
7.5 sec.
RANGE:
32 to 2300 _ Units F
RANGE JUSTIFICATION: This is sufficient to encompass shutdown conditions as well as superheated steam temperatures that would occur during a core uncovery event.
DATA VALIDATION:
14*F DISPLAY LOGIC: Max of the two representation CET temperatures ALARM SETPOINT: High 700*F Low N/A ALARM LOGIC:
This indicates that the core is uncovered and is consistent with the Waterford 3 E0P's.
TREND DEADBAND:
2.0 F j
l i
11 W310571B
PARAMETER EMERGENCY FEEDWATER FLOW LOW (MESSAGE)
DISPLAY 1 JUSTIFICATION / APPLICABILITY: Alerts the operator that Emergency Feedwater (EFW) flow is not sufficient to maintain RCS heat removal. For some events, steam generator inventory must be replenished to maintain RCS heat removal. This message indicates that the water level is low enough to req' tire EFW,. but the flow rate is not cufficient to increase or maintait the water level. A message is displayed for each steam generatot separately.
SENSOR (S): A f.ow signal for.each steam generator is taken from the PMC.
SG1 PID S10'01 SG2 PID S10201 RESPONSE TIME:
6.3 sec.
RANGE:
N/A to N/A Units N/A RANGE JUSTIFICATION: N/A
{
DATA VALIDATION: N/A single value i
DISPLAY LOGIC: Message ALARM SETPOINT: High N/A Low N/A ALARM LOGIC:
Ihis message appears if an Emergency Feedwater Actuation Signal (EFAS) is present and steam generator level is less than 55% and EFW flow rate is less than 150 gpm. An EFAS with 1cvel below 55% indicates that EFW flow is requi red.
A minimum flow rate of 150 gpm is necessary to replenish the inventory and ensure continued decay heat removal. This value is consistent with the E0P's.
TREND DEADBAND:
N/A i
12 W310571B
(
PARAMETER 'NO RCP RUNNING (MESSAGE)
DISPLAY 1 JUSTIFICATION / APPLICABILITY: Alerts the operator that no Reactor Coolant Pump (RCP) is running and that forced RCS circulation is not available.
Core heat removal is not as effective under natural circulation conditions which must be continuously verified.
Greater attention must be given to RCS conditions during a natural circulation cooldown.
SENSOR (S): The position of the RCP motor current breakers (open or closed) is used to determine if a RCP is running or not.
PID D13200, D13400, D13600, D13800 RESPONSE TIME:
6.5 sec.
RANGE:
N/A to N/A Units fi/A RANGE JUSTIFICATION: N/A DATA VALIDATION: N/A l
DISPLAY LOGIC: Message ALARM SETPOINT: High N/A Low N/A _
ALARM LOGIC: This message is displayed if all RCP motor current breakers are open. The RCP motor has no power if the breaker is open.
An RCP is started by closing this breaker.
i l
TREND DEADBAND: N/A 1'
l l
13 W310571B I
PARAMETER PRESSURIZER LEVEL DISPLAY I JUSTIFICATION / APPLICABILITY:
Indicates the amount of coolant inventory in the RCS (under most conditions). A decreasing level indicates that inventory is being lost at a rate that is too high for the charging pumps to replenish.
The level can also inform the operator if a leak has been isolated or brought under control.
SENSOR (S): Three signals from the PMC are used.
PID A12200, A12201, A12202 RESPONSE TIME:
6.3 sec.
RANGE:
0 to 100 Units RANGE JUSTIFICATION: This encompasses the entire height of the pressurizer.
DATA VALIDATION:
1.5%
DISPLAY LOGIC: Average ALARM SETPOINT: High 62.5%
Low 28%
ALARM LOGIC: This value is taken from the E0P's and corresponds to the level where the pressurizer heaters become uncovered and are turned off. High alarm is the technical specification limit.
TREND DEADBAND: 0.3%
l 14 W310571B
E.
PARAMETER PRESSURIZER PRESSURE DISPLAY 1 JUSTIFICATION / APPLICABILITY:
Indicates directly the success of RCS pressure control. Decreasing preasure is characteristic of a loss of inventory in excess of the charging pamp capacity or an overcooling event.
Pressurizer pressure is also important for controlling RCS conditions during a l
cooldown.
1 i
SENSOR (S): Wide range pressure instruments are used.
PID A12217, A12218 RESPONSE TIME:
6.3 sec.
1 RANGE:
0 to 3000 Units psia RANGE JUSTIFICATION: This is sufficient to encompass normal operating conditions as well as all design basis over pressurization events.
DATA VALIDATION:
190 PSI DISPLAY LOGIC:
average ALARM SETPOINT: High 2400 psia Low N/A ALARM LOGIC: The alarm condition on high pressure indicates that an over pressurization transient is in progress and alerts the operator that the presr rizer safety relief valves may open if pressure continues to a
increase.
TREND DFADBAND:
5.0 PSI 15 W310571B
PARAMETER SUBC00 LED MARGIN DISPLAY 1 JUSTIFICATION / APPLICABILITY:
Indicates Gie approach to or existence of inadequate core cooling due to a loss of RCS inventory.
Adequate subcooling ensures that RCS inventory and pressure are unde control.
Loss of all subcooling alerts :he operator that saturated conditions exist and boiling in the core may occur. A negative subcooled margin indicates superheated steam and that the core is uncovered. Subcooled margin also assists the operator to control RCS temperature and pressure during a cooldown.
SENSOR (S): The subcooled margin calculated by QSPDS and based on the representative CET temperature or the hot and cold leg temperatures is used.
PID C26506, C26413, C26508, C26415 RESPONSE TIME:
7.5 sec.
RANGE:
-200 to 200 Units F
RANGE JUSTIFICATION: This is sufficient to encompass normal operating conditions as well as superheated steam which is characteristic of core uncovery.
DATA VALIDATION:
20 F DISPLAY LOGIC: Min, of hot and cold leg temperature with RCPs running or CET representative temperature with no RCPs running.
ALARM SETPOINT: High N/A Low 28 F ALARM LOGIC:
If one or more RCP is running, the alarm condition will exist when the subcooled margin based on the highest hot or cold leg temperature is less than 28 F.
With no RCPs runnir.g the subcooled margin is based on the highest representative CET temperature.
This logic is consistent with operator training and the E0P's.
TREND DEADBAND:
2F 16 W310571B
PARAMETER CHARGING PUMP FLOW DISPLAY 1 JUSTIFICATION / APPLICABILITY:
Indicates that makeup water is being added to the RCS by the charging pumps.
SENSOR (S): A signal is taken from QSPDS.
PID C26245 RESPONSE TIME:
7.3 RANGE
0 to 150 Units GPM RANGE JUSTIFICATION: This is sufficient to e.7 compass the maximum flow from all three charging pucps together.
DATA VALIDATION: N/A Single value DISPLAY LOGIC:
Single value ALARM SETPOINT: High N/A Low 40 gpm ALARM LOGIC: This value is taken from the E0P's.
The flow from one charging pump is required during a small break. LOCA as presented in the FSAE safety analysis.
TREND DEADBAND:
1.0 GPM 17 W310571B
PARAMETER CONTAINMENT SUMP LEVEL DISPLAY 1 JUSTIFICATION / APPLICABILITY:
Indicates the water level in the containment sump. An increasing leve.' alerts the operator that a leak may exist from the RCS.
SENSOR (S):
The maximum of two signals from the PMC is used, PID A42613 RESPONSE TIME:
6.3 sec.
RANGE:
0 to 30 Units Feet RANGE JUSTIFICATION: This is sufficient to encompass the sump water level that would occur during a loss of MCS inventory.
DATA VALIDATION: N/A DISPLAY LOGIC:
Single value ALARM SETPOINT:
High 2.5 ft.
Low N/A ALARM LOGIC: This alerts the operator that a leak may exist in the RCS.
TREND DEADBAND:
0.7 ft.
l 18 W310571B l
I
PARAMETER UPPER HEAD VOID (MESSAGE)
DISPLAY 1 JUSTIFICATION / APPLICABILITY:
Indicates that the reactor vessel upper head is not full of water and that a steam or gas bubble exists. A steam bubble can occur due to a loss of RCS inventory or a depressurization that causes the upper head fluid to flash. The possible formation of a void in the upper head is monitored by the operator during a natural circulation cooldown.
SENSOR (S): The Reactor Vessel Level Measurement System (RVLMS) is used to determine the water level in the upper head. The lowest level from the two instruments is taken from QSPDS.
PID C26402 C26395 RESPONSE TIME:
7.5 sec.
RANGE:
N/A te N/A Units N/A RANGE JUSTIFICATION:
N/A DATA VALIDATION: N/A DISPLAY LOGIC: Message ALAkM SETPOINT: High N, A Low N/A ALARM LOGIC:
This message is displayed when either RVLMS drops below 100%
full.
This alerts the operator that a void has formed in the upper head.
TREND DEADBAND: N/A l
W3105718
k PARAMETER UPPER PLENUM VOID (MESSAGI:)
DISPLAY 1 JUSTIFICATION / APPLICABILITY:
Indicates that the reactor vessel upper plenum is not full of water. This alerts the operator that the amount of water inventory above the core that is available for core cooling has decreased. This indicates the approach to inadequate core cooling SENSOR (S): The RVIJIS is used to determine the-water level in the upper plenum. The lowest level from the two instruments is taken from QSPDS.
PID C26403, C26396 RESPONSE TIME:
7.5 sec.
RANGE:
N/A to N/A Units N/A RANGE JUSTIFICATION:
N/A DATA VALIDATION: N/A DISPLAY LOGIC: tiessage ALARM SETPOINT: High N/A Low N/A ALARM LOGIC: This message appears if the level in the upper plenum from either level instrument drops below 100% full. This alerts the operator that the reactor is approaching inadequate core cooling due to a loss of RCS inventory.
TREND DEADBAND: N/A W310571B f
4 i
~
PARAMETER HPSI A UNAVAILABLE (MESSAGE)
DISPLAY 1 HPSI B UNAVAILABLE (MESSAGE)
JUSTIFICATION / APPLICABILITY:
Indicates that High Pressure Safety Injection (HPSI) flow is not available when required. During an inventory loss event, HPSI flow adds water to the RCS to replenish the lost inventory.
This alerts the operator that HPSI flow will not occur because the pump is not running er a required valve is not open.
SENSOR (S): Pump breaker coatacts and valve position limit switches are used.
HPSI pumps D43400, D43500, D43600 l
SI 106A, B D44013, D44015 SI 225A, B D43013, D43011 SI 602A, B D44501, D44503 SI 226A, B D43019, D43017 SIAS D38618, D38620 SI 227A, B D43025, D43023 RAS D38603. D38610 SI 228A, B D43031, D43029 RESPONSE TIME:
6.65 9ec.
RANGE:
N/A to N/A Units N/A RANGE JUSTIFICATION: N/A DATA VALIDATION: N/A DISPLAY LOGIC: Message ALARM SETPOINT: High N/A Low _N/A ALARM LOGIC: With a SIAS-A (B) signal HPSI-A (B) pump or HPSI-A/B pump not running or SI 106A (B) not open or RAS A(B) and SI 602A(B) not open or SI 225 A(B),
I l
SI 226A(B), SI 227S(B), or SI 228A(B) close display "HPSI A (B) l Unavailable" message I
TREND DEADBAND: N/A 21 W310571B
PARAMETER RWSP LEVEL LOW (MESSAGE)
DISPLAY I JUSTIFICATION / APPLICABILITY:
Indicates that the tmount of water available in the Refueling Water Storage Pool (RWSP) for safety injection is less than was assumed in the safety analyses. This informs the operator that action should be taken to increase the level in the RWSP to ensure that sufficient water is available if a major loss of inventory event occurs.
This message also indicates that, after a SIAS, the RWSP level is low enough to initiate a Recirculation Actuation Signal (RAS).
SENSOR (S): The average of four level signals is taken from the PMC.
PID A44001, A44001, A44003, A44004 RESPONSE TIME:
6.3 sec.
RANGE:
N/A to N/A Units N/A RANGE JUSTIFICATION:
N/A DATA VALIDATION:
8.0%
DISPLAY LOGIC 1 Message l
ALARM SETPOINT: High N/A Low 83%, 12%, 10%
ALARM LOGIC: This message will appear under three different conditions; if cold leg temperature is greater than 200 F and RWSP level is below 83%,
or if cold leg temperature is less than or equal to 200 F and RWSP level is below 12%, or if a SIAS is present and RWSP level is below 10%. The first condition covers operation in Modes 1-4 (RCS temperature above 200 F) and corresponds to the Technical Specification on RWSP level for 1
safety injection. The second condition applies to Modes 5 and 5 (RCS l
temperature less than or equal to 200 F) and corresponds to the."echnical Specification on RWSP level for a borated water source. The thirc condition applies during a loss of inventory event and corresponds to the level where the safety injection flow suction is switched from the RW3P to the containment sump.
TREND DEADBAND: N/A 22 W310571B
PARAMETER CONTAINMENT TEMPERATURE DISPLAY 2 JUSTIFICATION / APPLICABILITY: During a LOCA or MSLB in containment, high energy fluid escapes its normal boundary and enters the containment atmosphere. The containment temperature will rise above its normal level providing indication of a leak in containment. The effectiveness of the containment cooling system can be evaluated during an accident in addition to monitoring RCS integrity.
SENSOR (S):
Containment Fan Cooler inlet temperatures CFC A A51115 D51102 D51103 CFC B A51119 D51104 D51105 CFC C A51123 D51106 D51107 CFC D A51127 D51108 D51109 RESPONSE TIME:
6.5 sec.
RANGE:
0 to 450 Units F
RANGE JUSTIFICATION: This range is available on the containment fan coolers intake temperature instruments and will cover the most severe design l
basis accident which results in a containment temperature of 413.5 F.
DATA VALIDATION:
7.0 F l
DISPLAY LOGIC: SPDS will monitor all four CFC intake temperatures. The temperatures of the non-running containment fan coolers will be discarded and the remaining :empe,rature averaged for display.
ALARM SETPOINT: Higt.
120 F Low N/A ALARM LOGIC: This alarm at the Tech. Spec. limit of 120 F TREND DEADBAND:
0.5 F 23 W310571B
PARAMETER CONTAINMENT PRESSURE DISPLAY 2 JUSTIFICATION / APPLICABILITY: During a LOCA or MSLB in containment, high energy fluid escapes its normal boundary and enters the containment atmosphere. The containment pressure vill rise above its normal level which can provide indication of a leak in containment. This parameter monitors the potential for breach of containment integrity.
SENSOR (S): Wide range pressures are used PID A42208, A42209 RESPONSE TIME:
6.3 sec.
RANGE:
0 to 70 Units PSIA RANGE JUSTIFICATION: This range is available through the PMC and covers pressure up to the design pressure of the contaiment.
DATA VALIDATION:
1.2 PSI DISPLAY LOGIC: Maximum ALARM SETPOINT: High 17.1 psia Low N/A,
ALARM LOGIC: The high alarm in the CIAS setpoint 1 REND DEADBAND:
0.1 PSI j
l l
l 24 W310571B j
.___-___-___-__-___a
PARAMETER CONTAINMENT SPRAY FLOW LOW (MESSAGE)
DISPLAY 2 JUSTIFICATION / APPLICABILITY: During a LOCA or MSLB in containment, high energy fluid escapes its normal boundary and enters the containment atmosphere. As a containment heat removal system, Containment Spray (CS) assists the containment cooling system in controlling containment temperature and pressure.
By accomplishing this function offsite radiation levels are minimized.
SENSOR (S): Containment Spray Flow indication.
PID S42404 and S42504 RESPONSE TIME:
6.3 sec.
RANGE:
N/A to N/A Units N/A RANGE JUSTIFICATION:
DATA VALIDATION:
N/A single value DISPLAY LOGI_C: Message ALARM LETPOINT: High N/A Low 1950 GPM ALARM LOGIC: This message is displayed if containment spray flow is in either header is less than 1950 GPM when a CSAS is present.
TREND DEADBAND: N/A 25 W310571B
PARAMETER IfYDROGEN CONCENTRATION DISPLAY 2 JUSTIFICATION / APPLICABILITY:, In the post-LOCA environment, hydrogen may gradually build up in the containment due to radiolytic and electrolytic decomposition of water, metal water reactions, and corrosion.
If no action were taken an explosive concentration could occur. The combustible gas control systems are manually started, therefore, it is necessry to monitor hydrogen concentration.
SENSOR (S): Hydrogen Analyzer B is used.
PMC PID C26339 RESPONSE TIME:
7 sec.*
RANGE:
0 to 10 Units RANGE JUSTIFICATION: This range is the available range from Hydrogen Analyzer 8 and covers the lower explosive limit concentration of 4% and the E0P action limit of 3%.
DATA VALIDATION:
Single value l
DISPLAY LOGIC:
Single value ALARM SETPOINT: High 3%
Low N/A ALARM LOGIC: This is consistent with the E0P.
If measured hydrogen concentration exceeds 3% then alarm.
This alerts the operator to take l
action to reduce the hydrogen concentration.
TREND DEADBAND:
0.1%
l l
i 1
- Response time to draw sample and analysis it is several minutes.
26
(
W310571B
PARAMETER 4.16KV BUS A DEEN (MESSAGE)
DISPLAY 2 4.16KV BUS B DEEN (HESSAGE) 4.16KV BUS A/A DEti; (HESSAGEJ
' JUSTIFICATION / APPLICABILITY:
4.16KV Buses A & B are ESF buses and supply J
power for equipment essential for the safe shutdown of the plant.
4.16KV Bus A/B can receive power from either the ' A' or
'B' 4.16KV bus and supplies power for standby equipment on the other buses.
SENSOR (S): Bus undervoltage relays are used.
PID D59604 4.16KV Bus A D59611' 4.16KV Bus B D59615 4.16KV Bus AB RESPONSE TIME:
4.5 sec.
1 RANGE:
N/A to N/A__ Units N/A RANGE JUSTIFICATION:
i DATA VALIDATION: N/A DISPLAY LOGIC: Message displayed ALARM SETPOINT: High N/A Low N/A ALARM LOGIC:
If an undervoltage condition is sensed on a bus then the associated message is displayed.
TREND DEADBAND: N/A 1
27 W310571B
PARAMETER DC BUS A DEEN'(MESSAGE)
DISPLAY 2'
DC BUS B DEEN (MESSAGE)
DC BUS A/B DEEN (MESSAGE)
JUSTIFICATION / APPLICABILITY: The DC system provides a continuous source of
-reliable power for plant protection system control and instrumentation in addition to loads which are necessary for start-up, operation and both normal and emergency shutdown.
SENSOR (S):
Bus undervoltage relays are used.
PID D59900 DC Bus A D59902 DC Bus B D59904 DC Bus AB RESPONSE TIME:
4.5 sec.
RANGE:
N/A to N/A Units N/A RANGE JUSTIFICATION:
DATA VALIDATION: N/A DISPLAY LOGIC: Message displayed ALARM SETPOINT: High N/A Low N/A ALARM LOGIC:
If an undervoltage condition is sensed on a bus then the associated message is displayed.
TREND DEADBAND: N/A
)
l 1
28 W310571B 1
PARAMETER CIAS ACTUATED (MESSAGE)
DISPLAY 2 JUSTIFICATION / APPLICABILITY:
Provide indication of the actuation of Containment Isolation. This alerts the operator that automatic containment isolation has occurred.
SENSOR (S): Actuation relay D38602, D38609 RESPONSE TIME:
4.65 sec.
RANGE:
N/A to N/A Units N/A RANGE JUSTIFICATION: N/A DATA VALIDATION: N/A DISPLAY LOGIC: Message l
ALARM SETPOINT: High N/A Low N/A ALARM LOGIC: Display message when either train is actuated.
l TREND DEADBAND: N/A 29 I
W310571B-L
PARAMETER CONTAINMENT ISOLATION (MESSAGE)
DISPLAY 2 JUSTIFICATION / APPLICABILITY:
In order to protect the health and safety of the public in the event of a reactor accident the containment must be setiled from the environment.
The operator must check and verify the containment isolation valves are close. The SPDS provides a message to alert the I
operator of a CIAS and a valve mispositioned. This parameter is included as an aid to the operator due to its significance.
The E0Ps requires l
verification valve positions using control board indication.
l l
SENSOR (S): See Attachment for mointored valves, and associated switches and digital points. The CIAS will be sensed from PMC PTID's D38602 and D38609 respectively.
RESPONSE TIME:
14.65 sec.
RANGE;_
N/A to N/A Units N/A J
RANGE JUSTIFICATION:
N/A i
DATA VALIDATION: N/A DISPLAY LOGIC:
If any monitored isolation valve does not close after CIAS then message will appear "CNTMT ISOL INCOMPLETE" and one or more of the following "CP-4 valve misaligned." to guide the operator to the proper panel.
A delay time after CIAS of 10 seconds will be used to allow the valves to close.
ALARM SETPOINT: High N/A Low N/A ALARM LOGIC:
If CIAS A or CIAS B is detected then the message will appear if a valve is not closed after 10 seconds.
1 TREND DEADBAND: N/A i
1 30 W310571B l
l
0 0 0
T 0 0 0 0 0 0 0 0 1
1 1
2 2 2 0 P
0 0 0 0 4 4 4 4 0 5 5 8 8 1
0 5 5 5 5 1
1 1
1 4 4 4 9 9 1
1 C
5 5 5 5 1
1 1
1 4 4 4 4 4 6 6 M
D D D D D D D D D D D D D D D P
no i
8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 t
a P P P P P P P P P P P P P P P c
C C C C C C C C C C C C C C C o
L
)
)
)
)
)
)
A B
)
)
A A B B 3 3 A B S
0 9 0 9 0 0 2 2
)
N 2
1 2
1 1
1 0 0
)
)
)
)
9 O
1 1
1 1
1 1
B B A B 0 I
D D 1
2 1
1 9
T S S S S B B D D 1
1 0 0 M M M M
(
(
B B 0 0 6 6 A C
A
(
(
(
(
(
(
6 6 I
)
)
)
P P
(
7 C
L S L S T T
)
)
I I
F F 5
I A S A S U U N N S S
(
(
R 1
T M A M A O O I
I
(
(
I A
R P R P
(
(
(
(
A B A G M
O Y O Y P P N
O N B N B 1
2 1
2 M M R R T
(
T U U E E N U
S S S S N N N N S S T T E N A
N N N N E E E E
)
A A M E I
I I
I G G G G 3 S S W W U G S
A A A A 4
I I
R O A
R R R R M M M M 3 S S E E T R I
t D D D D T T T T R R S T C
n S S S S I
N N I
I N
I e
I 1
2 2 S O O F F I
N n
L L L L
(
I I
o E E E E O O O O T T N N N N p
N N N N S S S S N A A O O O O m
I I
I I
I I
I I
I L L I
I I
I o
L L L L A O O T T T T C
N N N N R S S A A A A M M M M W W W W D I
I L L L L A A A A O O O O O O O O E E E E D D D D S G G S S S S T T T T W W W W K N N I
I I
I S S S S O O O O N I
I L L L L A L L T T T T N N N N B B B B T P P M M M M I
I I
I M M T T T T A A A A G G G G I
A A N N N N M M M M S S S S S S S C C C C 1
2 3 4 5 6 7 8 9 0 1
2 3 4 5 1
1 1
1 1
1 2 2 2 2 2 2 l
2 2 1
1 2 2 o
A A B B A B A B A A A A B / /
N 0
9 0 9 3 3 1
1 3 5 4 1
1 8
7 2
1 2
1 0 0 0 0 4 5 5 0 0 0 5 g
1 1
1 1
1 1
1 1
3 6 6 6 6 9 1
a 0 0 0 0 0 0 0 0 0 8 8 0 0 O 0 T
S S S S S S S S S S S S S S S Z Z Z Z Z Z Z Z Z Z Z Z Z Z Z I
I I
I I
I I
I I
I I
I I
I I
S S S S D D D D I
I I
P P A G M M M M B B B B S S S F F I
N
5 0 4 7 6 9 8 5 7 3 3 9 4 5 2 3 1
2 6 8 1
T 0
1 0 0 0 1
1 1
0 0 0 1
0 1
0 0 0 0 1
1 0 0 1
P 1
4 1
3 3 1
1 4
0 0 0 0 0 0 5 5 5 5 5 5 5 5 4 4 9 9 9 1
1 0 0 9
1 1
1 1
1 1
1 1
1 1
1 1
1 1
1 C
3 3 3 4 4 4 4 3 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 M
D D D D D D D D D D D D D D D D D D D D D D D D P
n o
8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 i
4 4 4 4 4 4 4 4 1
1 1
1 1
1 1
1 1
1 1
1 1
1 1
t a
P P P P P P I
P P P P P P P P P P P P P P P P P c
C C C C C C C C C C C C C C C C C C C C C C C C o
L
)
)
3
)
)
A 0
A B 1
0,
)
1 1
1
)
)
)
)
D
)
)
0 0 A B A B I
C 0 9 0 0 2 2
)
)
4 4
'T V
1 0
0 0 0 0 A B 0 0 R R N
C 1
1
)
)
)
0 0 1
1 2 2 V V O
)
(
)
)
)
5 3 4 R R 0 0 0 0 C
C 9
M M
)
3 4 2 0 0 0 A A 2 2 R R
(
(
0 V B B 6 0 0 0 2 2 2 C C R R A A 1
L
(
(
0 1
1 1
(
(
A A R R C C V V S
V
)
)
6 P P P C C A A
(
(
L N
C 5 4 K K P P P A A A A A
(
(
C C V
O
)
V N 0 0 N N C A A A C C C 3 3
(
(
V V I
9 C O 1
1 A A R C C C
(
(
(
S S A A L L L L T
0
(
I T T
(
(
(
(
8 8 V V V V O O C
1 T M M V V V N N 1
1 L L S
A F A W W N N F V V V L L L A A E E V V E E I
C F L G G I
I F
L L L V U V F F G G C
V O O
(
(
A A O V V V N N N N R R T T I
C S
R R L L L Y Y A A O O A A S S T
(
D I
S S D D D P P P O O O L L F F I
I H H N N A
E A A E
U U U S S S P P T T C C I
M N E N G G R R E I
I I
P P H H C C S S O
W L W O O L E E E U U X X U U I
I S S T
O B O E E T T B K K K H H H S S E E S S D D S S U
D D T T C C A A A X X X E E A
t T P T S S A A P M M M E E E E E E E E E E E R R n
E C E A A E E C S S S S S S S S P P S
e L R L W W R F R E E E E E E A A A A A A A A A
n G G G G G G E E E E E E E E R R o
S S S S S S S S R R R R R R L L L L L L L L K K G
p V V V V V V V V U U U U U U E E E E E E E E B B m
L L L L L L L L P P P P P P R R R R R R R R o
V V V V V V V V M
C S S S S S S S S S S S S S S U U L L L L L L L L O O O O O O O O O O O O O O U U O O O O O O O O M M M M M M M M M M M M M M C C S S S S S S S S T T T T T T T T T T T T T T A A I
I I
I I
I I
I A A A A A A A A A A A A A A V V T T T T T T T T T T T T T T T T T T T T T T T T M M M M M M M M M M M M M M M M M M M M M M N M T
1 T T T T T T T T T T T T T T T T T T T T T T N N N N N N N N N N N N N N N N N N N N N N N N C C C C C C C C C C C C C C C C C C C C C C C C 6 7 8 9 0 1
2 3 4 5 6 7 8 9 0 1
2 3 4 5 6 7 8 9 1
1 1
1 2 2 2 2 2 2 2 2 2 2 3 3 3 3 3 3 3 3 3 3 2
2 2 2 2 2 2 / 2 2 2
1 1
1 2 2
/ / / A 2
/ / B 5 / / 2 2 2 2 A B A B A B o
9 1
3 5 4
/
3 4 2 0 3 4 A B A B 1
1 4 4 1
N 0 0 0 0 0 0 9 6 0 0 0 2 0 0 7 8 7 7 0 0 0 0 0 0 1
4 1
1 1
1 0 0 1
1 1
0 2 2 1
1 1
1 2
2 2 2 4 4 g
0 O 0 0 0 1
1 6
0 0 0 0 0 0 0 0 0 0 0 0 0 O O a
S S S S S 0 0 0 S S S S S S 5 5 5 5 S S S S S S T
Z Z Z Z Z S S S Z Z Z Z Z Z V V V V Z Z Z Z Z Z I
I I
I I
Z Z Z I
I I
I I
I H H H I
I I
I I
i l
I I
I C C C M M P P P P P P R R R R R R R R R R V V V W W M M C A A A A A A T T T T A A A A V V C C C G G B B R C C C C C C S S S S C C C C C C
h a
T A
t g
r P
/ " " "
h i t
N g s C
i n
M s f e
P o
e f
b o en e
e i v
n l
a h
i l
a i
s n v r
i o
S t
s D a
i P r
n S
e o
3 3 4 4 4 h
p i
8 8 8 8 8 8 8 8 8 8 8 8 3 3 1
1 1
c g
O t
i n a
P P P P P P P P P P P P P P P P P h i c
C C C C C C C C C C C C C C C C C w r S o
o D m
L 8
t P e
- i S t
P n s
)
C o y y
3 m b s
)
0 n
4
)
3 o e d e
)
0
)
3
)
)
l e
h 7 2 4
)
0 L A B d i r t
)
0 0 5 2 S 6 6 e h o
D 1
L 3 0 P
2 2 t
w t
h S
1 L
(
1 1
)
)
)
a i
t
'T L P L S
)
)
/ / 0 3 9 c s n i
N S
(
S L P
)
6 5 A B 1
0 d o n o w
O P
P S
(
N 0 0 0 0 1
1 I
l o m C
(
)
(
P I
1 1
1 1
i n
(
T
(
)
(
1 1
M M M e t e
o
)
U
)
N P P / / R R R r i b i s S
T O T
)
I V
S S A B A A A a s s
N U
(
U N
(
L
)
)
)
)
(
(
9 9
(
(
(
o t
u O
O O
I V A B A B 0 0 1
p o l
I
(
E
(
(
E 6 6 4 4 T T 1
1 V V V 5
n c
T G
G L 0 0 0 0 E E L L L e
n C
G R M G R O 4 4 4 4 L L A A V V V 0
v l
i A
E U T E U I
T T R R 4
l l
L S S L S S L L L L U U H H L L L a i f
C S S S S O O
(
(
O O O s v w o
I T R R T R R P P P P S S S m
T O Z Z O Z Z
(
(
(
(
S S V V I
I I
e e d t t A
H P P H P P P P L L t
s n s
M 1
2 1
2 H M V V R R R I
e a o
O N N N N N N P P T T T h
c T
O O O O O O G G G G O O N N N t d U
I I
I I
I I
S S S S P P S S O O O e
e A
t T T T T T T M M I
I C C C C k s
h n
A A A A A A N N N N U U M c o t
S e
L L L L L L O O O O S S T T T T T P e l
A n
O O O O O O I
I I
I M M E E E h c o
I o
S S S S S S T T T T N N T T D D D e c t
C p
I I
I I
I I
A A A A O O N N h
d m
L L L L I
I C C D D D t
o e e
o G G G G G G O O O O T T A A A t k u
C N N N N N N S S S S A A R R R R R y
c d
I I
I I
I I
I I
I I
L L E E b d o
L L L L L L O O Z Z R R R e
l S
P P P P P P G G G G S S Y Y I
I I
d n
D n M M M M M M N N N N I
I L L A A A e i y P i A A A A A A I
I I
I A A r a l
S S S S S S S L L L L T T N N T T T o r l
P P P P M M A A M M M t
t a
y S S S S S S M M M M T T T T T i
m b i C C C C C C A A A A N N 2 2N N N n e r R R E R R R S S S S C C H H C C C o b o d
m n
e l
r t
l e
o o i r t
n w a i u 0
1 2 3 4 5 6 7 8 9 0 1
2 3 4 5 6 n
4 4 4 4 4 4 4 4 4 4 5 5 S 5 5 5 5 e s 3 o
r r 5 m
a o t &
e t
a b P n r 2 e e 5 t
m p
o h
o s n
c m
a e e l
t h t
l t T I
i e A
w o
6 6
N A
5 s e 5 f
/" " "
~~
c g
N 0
'T n
4 a
4 R a 5
T C
v s
r s
m S e
m e D s e
t P b t h I
S o
I il
l
)
PARAMETER MAIN STEAM LINE A AND B DISPLAY 2 JUSTIFICATION / APPLICABILITY:
If radiation levels are significant and if steam generator tube damage is experienced the monitoring of the main steam line radiation levels will aid the operator in determining which steam generator is faulted so that corrective action may be initiated. These moniters will give indication of the magnitude of the release of radiation to the environment if substantial reactor coolant activity is present in conjunctin with tube damage and if one of the following should occur: A) stuck open secondary rehit valve, b) stt ck open atmospheric dump valve, 1
or c) EFW Pump AB is in operation and being supplied from the non-intact i
)
l SENSOR (S): Main Steam Line radiation monitor PID SG A C48232 PID SG B C48233 I
I RESPONSE TIME:
73 sec.
I RANGE:
10 to 106 Units mr/hr RANGE JUSTIFICATION: This is a high range monitor which will detect the largest failures of fuel and steam generator tubes.
DATA VALIDATION:
N/A single value DISPLAY LOGIC: Single value ALARM SETPOINT:
High 2 x 100 Low N/A ALARM LOGIC:
Provides indication of SG tube rupture TREND DLADBAND:
0.2 decades 34 W310571B
i PARAME1ER STEAM GENERATOR BLOWDOWN DISPLAY 2 JUSTIFICATION / APPLICABILITY:
In the event of a primary-to-secondary leak or a SGTR Event the activity in the secondary plant increases. This parameter can aid the operators in identifying this occurrence and may be used to identify the faulted steam generator in accordance wth the existing Emerg-ncy Operating Procedures.
SENSOR (S); Blowdom radiation monitor I
PID C48182 RESPONS', TIME:
73 sec.
RANGE:
10 to 10-1 Units pc/ml RANGE JUSTIFICATION: Low range for detecting small steam generator tube leaks.
DATA VALIDATION: N/A single value DISPLAY LOGIC: Single value ALARM SETPOINT: High 1.6 x 10-5 Low N/A 1
l l
ALARM LOGIC: Provides early indicat. ion of a steam generator tube leak l
TREND DEADBAND:
0.2 decades 35 W310571B
- - - = - ---
~l l
PARAMETER CONDENSOR EXHAUST DISPLAY 2 j
JUSTIFICATION / APPLICABILITY:
An increase in secondary plant activity results in higher levels of activity being discharged from the condensor vacuum pumps. This parameter is a possible positive indicator which will alert operators that action may be required to mitigate the event and reduce off-site releases.
l SENSO~R(S):
PID C48083 RESPONSE TIME, 73 sec.
RANGE:
10-7 to 10~1 Units pc/cc RANGE JUSTIFICATION: This range is sufficient to cover all postulated occurences.
DATA VALIDATION: N/A single value DISPLAY LOGIC: Single value ALARM SETPOINT: High 1.65 x 10-6 pc/cc Low N/A ALARM LOGIC: The hig,h alarm alerts the operator of a possible steam generator tube rupture.
TREND DEADBAND:
0.2 decades 36 W310571B
PARAMETEit CONTAINMENT AREA DISPLAY 2 JUSTIFICATION / APPLICABILITY: During certain analyzed events (i.e., LOCA, Fuel llandling Incidents, etc.) where-the event has led to fuel damage an increase in containment area radiation levels way be expected as an indicator of this condition.
In monitoring these area radiation levels operators will be prompted to take corrective actions as required by established procedures.
SENSOR (S]1 PID C48017, C48019, C48022, C48023 RESPONSE TIME:
73 sec.
RANGE:
5 x 100 Units mr/hr to 5 x 105 RANGE JUSTIFICATION: Range sufficient to cover LOCA I
DATA VALIDATION: N/A Sensors are in different locations in containment and normally read different values DISPLAY LOGIC: Maximum ALARM SETPOINT: High 490 mr/hr Low N/A ALARM LOGIC:
Provides indication of a LOCA with failed fuel I
i TREND DEADBAND:
0.2 decades f
i 1
37 W310571B
PARAMETER CONTAINMENT ATMOSPHERE PARTICULATE DISPLAY 2 JUSTIFICATION / APPLICABILITY:
In accordance with plant technical specifications (3.4.5.1) a leakage detection system is required. Part of this system is a containment atmosphere radiation monitor which samples for gaseous and particulate act.ivity. This monitoring will alert the operators to changing conditions in containment which may be indicative of a possibly leak from the reactor coolant system.
SENSOR (S):
PID C48101 RESPONSE TIME:
73 sec. plus sample time RANGE:
10-11 to 10-5 Units c/cc RANGE JUSTIFICATION:
Sufficient range to detect RCS leakage DATA VALIDATION: N/A single value DISPLAY LOGIC: Single value ALARM SETPOINT: High 9.0 x 10-12 pc/cc Low N/A ALARM L' GIC:
Indicates RCS leakage s
TREND DEADBAND:
0.2 decades 38 W310571B
PARAMETER CONTAINMENT ATMOSPHERE GAS DISPLAY 2 JUSTIFICATION / APPLICABILITY:
In accordance with plant technical specifications (3.4.5.1) a leakage deteccion system is required.
Part of this system is a containment atmosphere radiation rionitor which samples for gaseous and particulate activity. This monitoring will alert the operators to changing conditions in containment which may be indicative of a possibly leak from the reactor coolant system.
SENSOR (S):
PID C48105 RESPONSE TIME:
73 sec. plus sample time RANGE: _ 10-7 to 10-1 Units pc/cc RANGE JUSTIFICATION:
Sufficient range to detect RCS leakage DATA VALIDATION: N/A single value DISPLAY LOGIC: Single value ALARM SETPOINT: High 1.4 x 10-2 Low N/A_
ALARM LOGIC:
Provides indication of RCS leakage TREND DEADBAND:
0.2 decades i
l 39 W310571B
PARAMETER PLANT STACK 100INE DISPLAY 2 JUSTIFICATION / APPLICABILITY: The plant stack is the single most significant nicase point to'the environment from the plant during normal operation.
The exhaust from the reactor auxiliary building ventilation and the containment (during purge operation) are monitored at this point.
In monitoring the radiation levels of this release point any significant 1
increase above normal levels vill key the operators to investigate the l
occurence to determine the cause and to then take the required corrective actions.
SENSOR (S):
PID C48068, C48077 RESPONSE TIME:
73 sec.
RANGS:
10-9 to 10-3 Units _yc/cc RANGE JUSTIFICATION:
Sufficient range to cover off-site releases DATA VALIDATION:
0.5 decades DISPLAY LOGIC: Maximum ALARM SETPOINT: High 1.2 x 10-8 pc/cc Low N/A ALARM LOGIC: Alerts operators to off-site release of iodine TREND DEADBAND:
0.2 decades 40 W310571B
PARAMETER PLANT STACK GAS DISPLAY 2 JUSTIFICATION / APPLICABILITY: The plant stack is the single most significant release point to the environment from the plant during normal operation.
The exhaust from the reactor auxiliary building ventilation and the containment (during purge operation) are monitored at this point.
In monitoring the radiation levels of this release point any significant increase above normal levels will key the operators to investigate the occurence to determine the cause and to then take the required corrective actions.
SENSOR (S):
PID C48071, C48080
-RESPONSE TIME:
73 sec.
RANGE:
101 to 107 Units pc/ml RANGE JUSTIFICATION:
Sufficient range to cover off-site releases DATA VALIDATION:
0.5 decades DISPLAY LOGIC: Maximum ALARM SETPOINT: High _8 x 10-4 pc/cc Low N/A ALARM LOGIC: Provides indication of off-site release.
i TREND DEADBP d:
0.2 decades 41 W310571B i
I 4
1 4
\\
k 1
ATTACHMENT VII I
t DATA VALIDATION LOGIC TABLES i
l i
W310571B
1)
SINGLE ANALOG INPUT TRUTH TABLE l-l l
1A) INPUT OUTPUT l-l G
G l
S G
l I
B l
B B
l No Cyclic Suspect 2)
SINGLE DIGITAL INPUTS - NO QUALITY 3)
TWO ANALOG INPUT TRUTH TABLE INPUT A
B QUALITY VALUE 1
G G
GOOD A,B 2
G S
N/A N/A 3
G I
GOOD A
4 G
B GOOD A
5 S
S SUSP A,B 6
S I
N/A N/A 7
S B
N/A N/A 8
I I
BAD N/A 9
I B
BAD N/A 10 B
B BAD N/A No Cyclic Suspect l
1 W310571B
INPUT A
B C
QUALITY VALUES 5A)
Three Analog Input Truth Table I
G G
G GOOD A,B,C 2
G G
S N/A N/A NOTES:
3 G
G I
GOOD A,B Suspect - Base on SPDS cross-4 G
G B
GOOD A,B check only 5
G S
S N/A N/A No PMC suspect is used 6
G I
I GOOD A
Bad - Determined by PMC l
7 G
B B
GOOD A
Inserted - Determined by PMC 8
G S
I N/A N/A 9
G S
B N/A N/A 10 G
I B
GOOD A
11 S
S S
SUSP A,B,C 12 S
S G
N/A N/A 13 S
S I
SUSP A,B 14 S
S B
SUSP A,B 15 S
G I
N/A N/A 16 S
G B
N/A N/A 17 S
I B
N/A N/A 18 I
I I
BAD N/A 19 I
I G
GOOD C
20 I
I S
N/A N/A 21 I
I B
BAD N/A 22 I
G S
N/A N/A 23 I
G B
GOOD B
24 I
S B
N/A N/A 25 B
B B
BAD N/A 26 B
B S
(/A N/A 27 B
B I
1AD N/A W310571B
l
,)
i INPUT A-B C
D OUALITY VALUE 6A) Four Analog Input Truth Tabic 1
G G
G G
GOOD A,B,C,D 2
C G
G I
GOOD A,B,C No Cyclic Suspect 3
G G
G S
N/A N/A 4
C C
G B
GOOD A,B,C 5
G G
S S
N/A N/A
.)
6 G
G S
I C00D A,B l
7 C
G S
B GOOD A,B 8
G G
I I
GOOD A,B 9
G G
I D
GOOD A,B 10 C
G B
B C00D A,B 11 C
S S
S N/A N/A 12 C
S S
I N/A N/A 13 G
S S
B N/A N/A 14 G
S I
I N/A N/A 15 C
S I
B N/A N/A
.16 G
S B
B N/A N/A 17 G
I I
I C00D A
18 G
I I
B GOOD A
)
19 G
I B
B GOOD A
20 C
B B
B GOOD A
21 S
S S
S SUSP A,B,C,D 22 S
S S
I SUSP A,B,C 23 S
S S
B SUSP A,B,C 24 S
S I
I SUSP A,B j
25 S
S I
B SUSP A,B 26 S
S B
B SUSP A,B 27 S
I I
I N/A N/A i
28 S
I I
B N/A N/A 29 S
I B
B N/A N/A 30 S
B B
B N/A N/A 31 I
I I
I BAD N/A 32 I
I I
B BAD N/A 33 I
I B
B BAD N/A 34 I
B B
B BAD N/A 35 B
B B
B BAD N/A W310571B
)
i
_.____-_-____A