ML20235H320

From kanterella
Jump to navigation Jump to search
Proposed Tech Specs Re Electrical Power Sys Ac Sources, Surveillance Requirements & Diesel Generator Test Schedule
ML20235H320
Person / Time
Site: McGuire, Mcguire  Duke Energy icon.png
Issue date: 02/10/1989
From:
DUKE POWER CO.
To:
Shared Package
ML20235H307 List:
References
NUDOCS 8902230565
Download: ML20235H320 (20)
v • d • e


Text

c_

ATTACHMENT 1 Proposed McGuire Unit 1 and 2 Technical Specification Changes l

.I l

1 l

l 1

l

)

8902'230565 890210 PDR ADOCK 05000369 PDL p

,. - ~

m cw(,e3 mo mg F*on w tsa m m sow w w 3/4.8 ELECTRICAL POWER SYSTEMS j

3/4.8.1 A.C. SOURCES OPERATING LIMITING CONDITION FOR OPERATION

3. 8.1.1 As a minimum, the following A.C. electrical power sources sh'all be OPERABLE:

l a.

Two physically independent circuits between the offsite transmission network and the Onsite Essential Auxiliary Power System, and b.

Two separate and independent diesel generators, each with:

1)

A separate day tank containing a minimum volume of 120 gallons of fuel, 2)

A separate Fuel Storage System containing a minimum volume of 28,000 gallons of fuel, and 3)

A separate fuel transfer pump.

APPLICABILITY:

MODES 1, 2, 3, and 4.

1 ACTION:

With an offsite circuit of the above required A.C. electrical power a.

sources inoperable, demonstrate the OPERABILITY of the remaining A.C.

sources by performing Surveillance Requirement 4.8.1.1.la. within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> and at least once per 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> thereafter; separately demon-strate the operability of two diesel generators by performing Sur-veillance Requirements 4.8.1.1.2a.4 and 4.8.1.1.2a.5 within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> unless this surveillance was performed within the previous 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />, or unless the diesel is operating, restore at least two offsite circuits and two diesel generators to OPERABLE status within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />.

b.

With one offsite c.ircuit and one diesel generator of the above required A.C. electrical power sources inoperable *, demonstrate the OPERABILITY of the remaining A.C. source by performing Surveillance Requirement 4.8.1.1.la. within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> and at least once per 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br />.

i thereafter; demonstrate the operability of the remaining diesel generator by performing Surveillance Requirements 4.8.1.1.2a.4 and 4.8.1.1.2a.5 within 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> unless this surveillance was performed within the previous 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />, or unless the diesel is operating **;

restore at least one of the inoperable sources to OPERABLE status within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and in COLD SHUTOOWN within the following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />; with the diesel

    • This test is required to be completed regardless of when the inoperable diesel gen'erator is restored to OPERABLE status.

The provisions of Specification 3.0.2 are n.ot applicable.

l McGUIRE - UNITS 1 and 2 3/4 8-1 Amendment No. 71 (Unit 1)

Amendment No. 52 (Unit 2) s

I To cnam m ron mmmr,ov o~g ELECTRICAL POWER SYSTEMS

]

LIMITING CONDITION FOR OPERATION ACTION: (Continued) generator restored to OPERABLE status, follow action statement a; with the offsite circuit restored to OPERABLE status, follow action statement d.

c.

With one diesel generator inoperable in addition to ACTION b. or d.

above, verify that:

1.

All required systems, subsystems, trains, components, and devices that depend on the remaining OPERABLE diesel generator as a i

source of emergency power are also OPERABLE, and 2.

When in MODE 1, 2, or 3 with a steam pressure greater than 900 psig, the steam-driven auxiliary feedwater pump is l

OPERABLE.

If these conditions are not satisfied within 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> be in at least HOT STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and in COLD SHUT 00WN within the following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />.

r d.

With a diesel generator of the above required A.C. electrical power sources inoperable *, demonstrate the OPERABILITY of the A.C. offsite sources by performing Surveillance Requirement 4.8.1.1.la within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> and at least once per 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> thereafter; and unless the in-operability of the diesel was due to preplanned testing or maintenance, demonstrate the OPERABILITY of the remaining diesel generator by per-forming Surveillance Requirements 4.8.1.1.2a.4) and 4.8.1.1.2a.5) within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> or unless the diesel is operating **, restore diesel generators to OPERABLE status within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />.

j With two of the above required offsite A.C. circuits inoperable, e.

separately demonstrate the OPERABILITY of two diesel generators by l

performing Surveillance Requirements 4.8.1.1.2a.4) and 4.8.1.1.2a.5) within 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br />, unless the diesel generators are already operating; restore at least one of the inoperable offsite sources to OPERABLE status within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> or be in at least HOT STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and in COLD SHUTDOWN within the following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />.

With only one offsite source restored, follow action statement a.

f.

With two of the above required diesel generators inoperable *, demon-strcte the OPERABILITY of two offsite A.C. circuits by performing Surveillance Requirement 4.8.1.1.la. within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> and at least once

    • This test is r.equired to be completed regardless of.when the inoperable diesel generator is restored to OPERABLE status.

The provisions of Specification 3.0.2 are not applicable.

McGUIRE - UNITS 1 and 2 3/4 8-2 Amendment No. 71 (Unit 1)

Amendment No. 52 (Unit 2)

NocwAnasmaPR

$96 IHf0RMA rnoa ONLY ELECTRICAL POWER SYSTEMS LIMITING CONDITION FOR OPERATION ACTION: (Continued) per 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> thereafter; restore at least one of the inoperable diesel generators to OPERABLE status within 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> or be in at least HOT STAN0BY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and in COLD SHUTOOWN within the following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />. With one diesel generator restored, follow action statement d.

SURVEILLANCE REQUIREMENTS 4.8.1.1.1 Each of the above required independent circuits between the offsite transmission network and the onsite Essential Auxiliary Power System shall be:

a.

Determined OPERABLE at least once per 7 days by verifying correct breaker alignments, indicated power availability, and l

b.

Demonstrated OPERABLE at least once per 18 months during shutdown by transferring (manually and automatically) unit power supply from the normal circuit to the alternate circuit.

4.8.1.1.2 Each diesel generator shall be demonstrated OPERABLE:

a.

In accordance with the frequency specified in Table 4.8-1 on a STAGGERED TEST BASIS, by:

1)

Verifying the fuel level in the day tank, McGUIRE - UNITS 1 and 2 3/4 8-2a Amendment No.71 (Unit 1)

Amendment No. 52 (Unit 2)

&b CHM &Ei 7M P Fon IwraamArios cous.,

s ELECTRICAL POWER SYSTEMS SURVEILLANCE REQUIREMENTS (Continued) 2)

Verifying the fuel level in the fuel storage tank, 3)

Verifying the fuel transfer pump starts and transfers fuel from the storage system to the day tank, 4)

Verifying the diesel starts from ambient condition and accelerates to at least 488 rpm in less than or equal to 11 seconds *.

The generator voltage and frequency shall be l

at least 4160 volts and 57 Hz within 11 seconds after the start signal.

The diesel generator shall be started for this test by using one of the following signals:

a)

Manual, or b)

Simulated loss-of-offsite power by itself, or c)

Simulated loss-of-offsite power in conjunction with an'ESF Actuation test signal, or d)

An ESF Actuation test signal by itself.

5)

Verifying.the. generator is synchronized, loaded to greater than or equal to 3000 kW in less than or equal to 60 seconds, and to 4000 kW within 10 minutes and operates for at least 60 minutes, j

and 6)

Verifying the diesel generator is aligned to provide standby power to the associated emergency busses.

b.

By removing accumulated water:

1)

From the day tank at least once per 31 days and after each occasion when the diesel is operated for greater than 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br />, and 2)

From the storage tank at least once per 31 days.

c.

By sampling new fuel oil in accordance with ASTM 04057-81 prior to addition to the storage tanks and:

1)

By verifying in accordance with the tests specified in ASTM 0975-81 prior to addition to the storage tanks that the sample has:

a)

An API Gravity of within 0.3 degrees at 60*F or a specific gravity of within 0.0016 at 60/60 F, when compared to the supplier's certificate or an absolute specific gravity at 60/60 F of greater than'or equal to 0.83 but less than or equal to 0.89 or an API gravity at 60*F of greater than or equal to 27 degrees but less than or equal to 39 degrees.

  • The diesel generator start (11 sec) from ambient conditions shall be performed at least once per 184 days in these surveillance tests.

All other engine starts for the purpose of this surveillance testing may be preceded by an engine pre-lube period and/or other warmup procedures recommended by the manufacturer so that mechanical stress and wear on the diesel engine is minimized.

McGUIRE - UNITS 1 and 2 3/4 8-3 Amendment No.71 (Unit 1)

Amendment No.52 (Unit 2)

l

. ELECTRICAL POWER' SYSTEMS SURVEILLANCE REQUIREMENTS (Continued)

A' kinematic vicosity at 40*C of greater than or equal to b)'

1.9 centistokes, but less'than or equal to 4.1 centistokes fi (alternatively, Saybolt viscosity, SUS at-100*F of greater than or equal to 32.6, but.less than or equal to 40.1), if

'q gravitywasnotdeterminedbycomparisonwiththesupplierfs certification.

A' flash point equal to or greater than 125'F, and c)

A clear-and bright appearance with proper color'when d)'

tested in accordance with ASTM 04176-82.

j l

i By verifying within'31 days of obtaining the sample that the 0975-81 are met q

2) other properties specified in Table 1 of ASTMexcept that the x

0975-81 when tested in~accordance with ASTM analysis for sulfur may be performed in accordance with l

ASTM D1552-79 or ASTM 02622-82.

4 I

At least once svery 31 days by obtaining a sample of fuel oil from and verifying d.

the storage tanks in accordance with ASTM D2276-78, that total particulate contamination is less than 10 mg/ liter when Method A.

checked in accordance with ASTM D2276-78, At least once per 18 monthsAin;;-ittug by:

l e.

SubjectingthedieseltoaninspectfIninac$r~dIncewith

~l I ~' '~

procedures prepared in conjunction with its manufacturer's 1) recommendations for this class of standby service; Verifying the generator capability to reject a load of greater than or equal to 576 kW wnile maintaining voltage at 4160 t 2) 420 volts and frequency at 60 t 1.2 Hz; Verifying the generator capability to reject a load of 4000 kW The generator voltage shall not exceed 3) without tripping.

4784 volts during and following the load rejection; anws swru~a' l

Simulating a loss-of-offsite power by itself, and:

4)

Verifying deenergization of the emergency busses and load a) shedding from the emergency busses, and Verifying the diesel starts on the auto-start signal, j

energizes the emergency busses with permanently connected b)

I loads within 11 seconds, energizes the auto-connected blackout loads through the load sequencer and operates for greater than or equal to 5 minutes while its generator is After energization, the loaded with the blackout loads.

l steady-state voltage and frequency of the emergency busses

/

shall be maintained at 4160 t 420 volts and 60 t 1.2 Hz l

during this test.

Amendment'No.

(Unit 1) 3/4 8-4 McGUIRE - UNITS 1 and 2 Amendment No.

(Unit 2) 1.

~

El.ECTRICALPBS $YSTDIS

,o SURVEILLANCFMSUIRBEITS (Continued) 5)

Verifying that on an ESF actuation test signal, without loss-of-j offsite power, the diesel generator starts on the auto-start signal and operates on standby for greater than or equal to 5 minutes.

The generator voltage and frequency shall be at least 4160 volts and 57 Hz within 11 seconds after the auto-start signal; the steady-state generator voltage and

]

frequency shall be maintained within 4160 t 420 volts and 60

  • 1.2 Hz during this test; 6)

Simulating a loss-of-offsite power in conjunction with an ESF actuation test signal, and Ow Ale *& $ kwsdowd a)

Verifyin'g'deenergitation of the emergency bussee and load k

shedding from the emergency busses; 3.sw ww.e b)

Verifyin,g'the diesel starts on the auto-start signal,.

l energizes the emergency busses with permanently connected loads within 11 seconds, energizes the auto-connected emergency (accident) loads through the load sequencer and operates for greater than or equal to 5 minutes while its generator is loaded with the emergency loads. After energization, the steady-state voltage and frequency of the emergency busses shall be maintained at 4160 t l

420 volts and 60 i 1.2 Hz during this test; and c)

Verifying that all automatic diesel generator trips, except engine overspeed, lube oil pressure, generator time over-G current and generator differential are automatically P

bypassed upon loss of voltage on the emergency bus concur-J; rent with a Safety Injection Actuation signal.

L lb ownin suurw, I

7) iWperating for one hour at 4000 W to achieve temperature stabil-ity. Within 5 minutes, restart and perform Surveillance

. Requirement 4.8.1.1.2e.6)b).

8)

Verifying the diesel generator operates for at least 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

During the first 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> of this test, the diesel generator shall be loaded to greater than or equal to 4400 W and during t

the remaining.22 hours2.546296e-4 days <br />0.00611 hours <br />3.637566e-5 weeks <br />8.371e-6 months <br /> of this test, the diesel generator shall I

be loaded to greater than or equal to 4000 W.

The generator voltage and frequency shall be at least 4160 volts and 57 Hz within 11 seconds after the start signal.

The steady-state ganerator voltage and frequency shall be maintained within 4160

  • 420 volts and 60
  • 1.2 Hz during this test.

McGUIRE - UNITS 1 and 2 3/4 8-5 AmendmentNo.h(Unit 1]

i ELECTRICAL POWER SYSTEMS SURVEILLANCE REQUIREMENTS (Continued)

Verifying, oms s,~ room *that the auto-connected. loads to each diesel

-l 9) generator do not exceed the 2-hour rating of 4400 kW; Verifying,onon su room *the diesel generator's capability to:

l 10) a)

Synchronize with the offsite power' source while the generator is loaded with its emergency loads upon a simula,ted restoration of offsite power, b)

Transfer its loads to the offsite power source, and c)

Be restored to its standby status.

11) Verifying that with the diesel generator operating in a test mode, connected to its bus, a simulated Safety Injection signal overrides the test mode by:

(1) returning the diesel generator to standby operation, and (2) automatically energizing the emergency loads with offsite power;

12) Verifying that the fuel transfer pump transfers fuel from each fuel storage tank to the day tank of each diesel via the installed cross-connection lines;
13) Verifying that the automatic load sequence timer is OPERABLE with the interval between each load block are within the l..

tolerances shown in Table 4.8-2;

14) Verifying that the following diesel generator lockout features prevent diesel generator starting only when required:

a)

Turning gear engaged, and b)

Emergency stop.

15) Verifying that with all diesel generator air start receivers pressurized to less than or equal to 220 psig and the compres-sors secured, the diesel generator starts at least 2 times from ambient conditions and accelerates to at least 488 rpm in'less than or equal to 11 seconds,

~

f.

At least once per 10 years or after any modifications which could affect diesel generator interdependence by starting both diesel generators simultaneously, during shutdown, and verifying that both diesel generators accelerate to at least 488 rpm in less than or equal to 11 seconds; and g.

At least once per 10 years by:

!,e McGUIRE - UNITS 1 and 2-3/4 8-6 Amendment No.

(Unit 2)

Amendment No.

(Unit 1) l

sac cxAmu noos pAQ' )

f*A M90ANAnta opny

~

ELECTRICAL POWER SYSTEMS SURVEILLANCE REQUIREMENTS (Continued) 1)

Draining each fuel-oil storage' tank, removing the accumulated sediment and cleaning the tank using a sodium hypochlorite solution, and 2)

Performing a pressure test of those portions of the diesel fuel oil system designed to Section.III, subsection ND of the ASME Code at a test pressure equal to 110% of the system design pressure.

.4.8.1.1.3 Reports - All diesel generator failures, valid ~or non-valid, shall.

-be reported to the Commission pursuant to Specification 6.9.2 within 30 days.

l Reports of diesel generator failures shall include the information-recommended-in Regulatory Position C.3.b of Regulatory Guide 1.108, Revision 1, August 1977.

If the number of failures in the last 100 valid tests'(on a per nuclear unit basis) is greater than or equal to 7, the report shall be supplemented to include the additional information recommended in Regulatory Position C.3.b of Regulatory Guide 1.108, Revision 1, August 1977.

4.8.1.1.4 Diesel Generator Batteries - Each diesel generator 125-volt' battery bank and charger shall be demonstrated OPERABLE:

a.

At least once per'7 days by verifying that:

1)

The electrolyte level of each battery is above the plates, and 2)

The overall battery voltage is greater than or equal'to 125 volts under a float charge.

b.

At least once per-18 months by verifying that:

1)

The batteries, cell plates and battery racks show no visual indication of physical damage or abnormal deterioration; J

2)

The battery-to-battery and terminal connections are clear, tight, free of corrosion and coated with anti-corrosion material; and i

)

3)

The battery capacity is adequate to supply and maintain in OPERABLE status its emergency loads when subjected to a battery service test.

I i

1 McGUIRE - UNITS 1 and 2 3/4 8-7 Amendment No. 52 (Unit 1)

Amendment No. 33 (Unit 2)

NbuA w mu

,., -r. _

y

,1 TABLE 4.8-1

~

DIESEL GENERATOR TEST SCHEDULE

. NUMBER OF FAILURES' NUMBER OF. FAILURES IN

-IN LAST 100 VALID' LAST 20 VALID TESTS

  • TESTS
  • TEST FREQUENCY 11 14 Once per 31 days 3, 2** -

>5 Once per 7 days

  • Criteria.for determining number of failures and number of valid tests shall be in accordance with Regulatory Position C.2.e of Regulatory Guide 1.108,-

but determined on a per diesel generator basis.

For the purposes of determining the required test frequency, the previous test failure count may be reduced to zero if a complete diesel overhaul to like-new conditions is completed, provided that the overhaul including appro-priate post-maintenance operation and testing, is specifically approved by the manufacturer and if acceptable reliability has been demonstrated. The reliability criterion shall be the successful completion of 14 consecutive tests in a single series. Ten of these tests shall be in accordance with the routine surveillance requirements of Specifications 4.8.1.1.2.a.4 and 4.8.1.1.2.a.5; the remaining four tests in accordance with the 184-day requirements specified in the footnote to Specification 4.8.1.1.2.a.4.and Specification 4.8.1.1.2.a.5.

If this criterion is not satisfied during the first series of tests, any alternate criterion to be used to transvalue the failure count to zero requires NRC approval.

    • The associated test frequency shall be maintained until seven consecutive failure free demands.have been performed and the number of failures in the f

last 20 valid demands has been reduced to one.

McGUIRE - UNITS 1 and 2 3/4 8-8 Amendment No. 71 (Unit 1)

Amendment No. 52 (Unit 2)

Ho eHnHcen nous Ps wonnenw ou TABLE 4.8-2 x

LOAD SEQUENCING TIMES LOAD GROUP SEQUENCE TIME NUMBER (Seconds)

E 9.7 + 0.3 Initiate Timer (T,)

1 (T )

T,+ 0.9 + 0.1 1

2 (T )

T + 5.6 + 0.4 2

o 3 (T )

T, + 9.4 + 0.6 3

4 (T )

T + 14.1 + 0.9 4

o 5 (T )

T + 18.4 + 1.2 S

o T + 23.1 + 1.4 6 (T )

o 6

7 (T )

T + 28.3 + 1.7 7

o 8 (T )

T, + 530.0 + 60.0 8

T8 + 56.0 + 4.0 9 (T )

g T8 + 112.3 1 7.0 10 (TIO) l l

l McGUIRE - UNITS 1 and 2 3/4 8-9

& comes 1% Q raa Mosmw omy 3/4.8 ELECTRICAL POWER SYSTEMS

,~

BASES 3/4.8.1, 3/4.8.2 AND 3/4.8.3 A.C. SOURCES, D.C. SOURCES AND ONSITE POWER DISTRIBUTION SYSTEMS The OPERABILITY of the A.C. and D.C power sources and associated distribution systems during operation ensures that sufficient power will be available to supply the safety-related equipment required for:

(1) the safe shutdown of the facility, and (2) the mitigation and control of accident condi-tions within the facility.

The minimum specified independent and redundant A.C. and 0.C. power sources and distribution systems satisfy the requirements of General Design Criterion 17 of Appendix A to 10 CFR 50.

The ACTION requirements specified for the levels of degradation of the power sources provide restriction upon continued facility operation commensurate with the level of degradation..The OPERABILITY of the power sources are consistent with the initial condition assumptions of the safety analyses and are based upon maintaining at least one redundant set of onsite A.C. and 0.C.

power sources and associated distribution systems OPERABLE during accident conditions coincident with an assumed loss-of-offsite power and single failure of the other onsite A.C. source.

The A.C. and D.C. source allowable out-of-service times are based on Regulatory Guide 1.93, " Availability of Electrical Power Sources", December 1974. When one diesel generator is inoperable, there is an additional ACTION requirement to verify that all required s) stems, subsystems, trains, components and devices, that depend on the remaining OPERABLE diesel generator as a source of emergency power, are also GPERABLE, and that the steam-driven auxiliary feedwater pump is OPERABLE.

This require-ment is intended to provide assurance that a loss-of-offsite power event will not result in a complete loss of safety function of critical systems during the period one of the diesel generators is inoperable.

The term verify as used in this context means to administratively check by examining logs or othe-in-formation to determine if certain components are out-of-service for maintenance or other reasons.

It does not mean to perform the Surveillance Requirements needed to demonstrate the OPERABILITY of the component.

The ACTION requirements for diesel generator testing in the event of the inoperability of other electric power sources also reflect the potential for degradation of the diesel genera-tor due to excessive testing.

This concern has developed, concurrently with increased industry experience with diesel generators, and has been acknowledged by the NRC staff in Generic Letter 84-15.

The OPERABILITY of the minimum specified A.C. and 0.C. power sources and I

associated distribution systems during shutdown and refueling ensures that:

(1). the f acility can be maintained in the shutdown or refueling condition for extended time periods, and (2) sufficient instrumentation and control capability is available for monitoring and maintaining the unit status.

The Surveillance Requirements for demonstrating the OPERABILITY of the diesel generators are in accordance with the recommendations of Regulatory Guides 1.9, " Selection of Ciesel Generator Set Capacity for Standby Power Supplies," March 10, 1971, 1.108, " Periodic Testing of Diesel Generator Units l

Used as Onsite Electric Power Systems at Nuclear Power Plants," Revision 1, August 1977, and 1.137, " Fuel-Oil Systems for Standby Diesel Generators,"

l Revision 1, October 1979; also, Generic Letter 84-15, which modified the test-k ing frequencies specified in Regulatory Guide 1.108.

l l

McGUIRE - UNITS 1 and 2 8 3/4 8-1 Amendment No. 71 (Unit 1)

Amendment No. 52 (Unit 2)

t w cxa m es ry ELECTRIC POWER SYSTEMS i

BASES A.C. SOURCES, D.C. SOURCES AND ONSITE POWER DISTRIBUTION SYSTEMS (Continued)

The Surveillance Requirement for demonstrating the OPERABILITY of the station batteries are based on the recommendations of Regulatory Guide 1.129,

" Maintenance Testing and Replacement of Large Lead Storage Batteries for Nuclear Power Plants," February 1978, and IEEE Std 450-1980, "IEEE Recommended Practice for Maintenance, Testing, and Replacement of Large Lead Storage Batteries for Generating Stations and Substations."

Verifying average electrolyte temperature above the minimum for which the battery was sized, total battery terminal voltage onfloat charge, connection resistance values and the performance of battery service and discharge tests ensures the effectiveness of the charging system, the ability to handle high discharge rates and compares the battery capacity at that time with the rated capacity.

Table 4.8-3 specifies the normal limits for each designated pilot cell l

and each connected cell for electrolyte level, float voltage and specific gravity.

The limits for the designated pilot cells float voltage and specific gravity, greater than 2.13 volts and 0.015 below the manufacturer's full charge specific gravity or a battery charger current that had stabilized at a low value, is characteristic of a charged cell with adequate capacity. The normal limits for each connected cell for float voltage and specific gravity, greater than 2.13 volts and not more than 0.020 below the manufacturer's full charge specific gravity with an average specific gravity of all the connected cells not more than 0.010 below the manufacturer's full charge specific gravity, ensures the OPERABILITY and capability of the battery.

Operation with a battery cell's parameter outside the normal limit but within the allowable value specified in Table 4.8-3 is permitted for up to 7 days.

During this 7-day period:

(1) the allowable values for electrolyte level ensures no physical damage to the plates with an adequate electron transfer capability; (2) the allowable value for the average specific gravity of all the cells, not more than 0.020 below the manufacturer's recommended full charge specific gravity, ensures that the decrease in rating will be less than the safety margin provided in sizing; (3) the allowable value for an individual cell's specific gravity, ensures that an individual cell's specific gravity will not be more than 0.040 below the manufacturer's full charge specific gravity and that the overall capability of the battery will be maintained within an acceptable limit; and (4) the allowable value for an individual cell's float voltage, greater than 2.07 volts, ensures the battery's capability to perform its design function.

l 1

McGUIRE - UNITS 1 and 2 B 3/4 8-2 Amendment No. 71 (Unit 1)

Amendment No. 52 (Unit 2) j l

l

Justification and Safety Analysis The proposed changes to Technical Specification 3/4.8.1.1 are to allow certain 18-month diesel generator surveillance currently required to be performed during unit shutdown to also be able to be conducted during unit operation (i.e., not restricted to specific modes).

These changes would provide additional flexibility in scheduling surveillance and the ability to do certain tests at times other than during outages.

Technical Specification 4.8.1.1.2.e lists 15 surveillance which are to be performed on an 18-month basis as part of the surveillance requirements necessary to demonstrate each diesel generator (D/G) operable.

While the 15 surveillance are collectively specified to be performed during shutdown, shutdown conditions are not technically necessary for some of the individual surveillance.

The collective shutdown requirement is based on the Westing-house Standard Technical Specification which generally anticipates that these 18-month surveillance would naturally be performed during refueling outages, which are expected to occur within 18-month intervals.

The proposed changes would delete the "During Shutdown" proviso from the opening general requirements (collectively applicable) statement in T.S.

4.8.1.1.2.e, and add them only to the specific indiviuual surveillance that are either actually technically required or desired to be performed during shutdown (i.e., e.1, 4, 6.a, 6.b, 7, 9, and 10).

This would then allow the individual surveillance for which the words "During Shutdown" are not added (i.e., e.2, 3, 5, 6.c, 8, 11, 12, 13, 14, and 15) to be performed regardless of the unit's mode of operation, including while the unit is "On-Line".

Specific justifications / reasons for changing / keeping the "During Shutdown" proviso for each of the 15 surveillance are as follows:

e.1)

The "During Shutdown" proviso is maintained for this surveillance as it involves a teardown of the D/G which renders the D/G inoperable for an extended length of time, which would be unacceptable during unit operation, e.2)

No mode restrictions are being placed on this surveillance.

The D/G system was designed to allow for this type testing on-line.

Performance of this surveillance does not impact unit operation (when the load is rejected, it is automatically transferred to i

normal (offsite) power through transformer ATC - there is no power interruption to Bus ETA (ETB)), and this surveillance can be performed with the D/G fully functional.

During performance of this surveillance, receipt of any valid actuation signal (safety i

injection or blackout or both) by the sequencer would generate an override signal which would enable the D/G to carry out its intended functions (with D/G running, would automatically load shed and then add required loads).

Since this surveillance does not inhibit functional operability of the D/G or impact unit operation, there is no need for the "During Shutdown" proviso.

i

e.3)

.No mode restrictions are being placed on this surveillance.

The justification for not having the "During Shutdown" proviso is the same as for e.2 above.

e.4)

The "During-Shutdown" proviso is maintained for this surveillance.-

l While there is no technical reason the surveillance must be done L

during' shutdown conditions (as in e.2 above, receipt of a valid' actuation signal would override the surveillance enabling the D/G to carry out its interded functions) and the surveillance would not impact unit operation, practical considerations make it.

unnecessary to change the requirement.

McGuire performs this surveillance as part of the ESF-Test Procedure'which is required to be done during shutdown, and therefore no scheduling / flexibility advantage would be gained by' changing it.

Since this surveillance requires special alignments, etc., which have to be done for the.

ESF Test'anyway, it is desirable to conduct them at the same time, e.5)

No mode restrictions are being placed on this surveillance.

While this surveillance can be verified during the ESF Test (see e.4 above), McGuire uses a separate test procedure (the D/G Load Sequencer Test) to take credit for this surveillance.

This l

separate test does not have the practical considerations involved in the ESF Test that make that test desirable to be performed during shutdown, and would not impact unit operation.

The D/G System is designed to allow for this type testing cn-line.

As in e.2 above, the D/G remains fully functional and any valid actuation

. signal received would override the test mode enabling the D/G to carry out its intended functions.

The only operational detriment associated with the D/G Load Sequencer Test is that with the sequencer cabinet in the test mode the safety pumps cannot be controlled (started or stopped) manually (without being reset),

but receipt of a valid signal would start them' automatically (the signal resets the sequencer) so that is not a concern.

e.6)

Although there is no technical reason this surveillance must be done during shutdown conditions and the surveillance would not impact unit operation, the "During Shutdown" proviso is maintained

'for Parts 6.a and 6.b, as these surveillance are done during the ESF Test which is performed during shutdown (see e.4 above).

However, McGuire uses a different test procedure (the Diesel Generator Periodic Test) to take credit for surveillance 6.c.

l This separate test does not have the practical considerations involved in the ESF Test which make that test desirable to be performed during shutdown, therefore, no mode restrictions are being placed on surveillance 6.c in order to allow greater sched-uling flexibility for this test.

While this test does not impact unit operation, during performance of this surveillance the D/G is made functionally inoperable (the D/G is inoperable, not started; D/G start on any signal is disabled).

The surveillance is performed by testing contacts / sliding links, etc. (voltages) inside the D/G control panel.

Although the D/G is declared inoperable for approximately four hours for this test, it is only functionally inoperable for approximately one hour.

This is well within the Technical Specification's allowed outage time of 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />.

During 2

s this time the' unit is relying on th'e other train's_(operable) D/G.

Also, personnel are at.the D/G during this testing who could restore it to operable, if needed.

This situation would be?

.similar to other surveillance testing that is allowed to be done on-line which inhibits D/G functional operability such as the-Quarterly Slave Relay. Testing.

e.7)

The "During Shutdown" proviso.is' maintained for this surveillance.

While there is no technical reason the surveillance must be done during shutdown conditions (as in e.2 above, an override signal-would be generated enabling the D/G to carry out. its intended functions) and the surveillance would not impact unit ~ operation,.

this surveillance is done during the ESF Test which is performed during shutdown (see e.4 above).

e.8)

No mode restrictions are being'placed on this surveillance. The D/G is not functionally. inoperable for this surveillance.and is

'not declared to be inoperable.

There is no technical reason the surveillance must be done during shutdown conditions (as in e.2 above, an override signal would be generated enabling the D/G to carry out its intended functions), and the surveillance would not impact unit operation.

Thus the D/G remains fully operable during this surveillance.

e.9)

The "During Shutdown" proviso is maintained for this surveillance.

While there is no technical reason the. surveillance must be done during shutdown conditions (as in e.2 above, an override signal w uld be generated enabling the D/G to carry out its intended

. functions) and the surveillance would not impact unit operation, this surveillance is done during the ESF Test which is performed during shutdown (see e.4 above).

e.10)

The "During Shutdown" proviso is maintained for this surveillance.

.While there is no technical reason the surveillance must be done during shutdown conditions (as 'in e.2 above, an override signal would be generated enabling the D/G to carry out its intended functions) and the surveillance would not impact unit operation, this surveillance is done during the ESF Test which is performed during shutdown (see e.4 above).

e.11)

No mode restrictions are being placed on this surveillance.

There is no technical reason the surveillance must be done during shutdown conditions, and the surveillance would not impact unit operation.

Loading of the D/G will be by accepting load from the vital bus as is currently done to perform Surveillance Requirement 4.8.1.1.2.a.5 (on-line testing / loading of the D/G) and will present no unique situations in transferring loads.

During i

performance of most of this surveillance receipt of a valid l

actuation signal would override the test mode enabling the D/G to carry out its intended functions, as in e.2 above.

However, during 3

i L__-____________________-_

i q

performance of part of this surveillance the D/G is made func-tionally inoperable (while in the test mode a sliding link is opened which doesn't keep the D/G from starting, but prevents loading).

While the D/G is declaregi inoperable for approximately one hour for performance of this part of the surveillance, it is only functionally inoperable for approximately 30 minutes. This is well within the Technical Specification's allowed outage time of 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />.

During this time the unit is relying on the other train's (operable) D/G.

Also, personnel are at tne D/G during this part of the surveillance testing who could restore it to operable, if needed.

This part of the surveillance testing is the same as Quarterly Slave Relay Testing (which inhibits D/G func-tional operability) which is allowed to be done on-line.

e.12)

No mode restrictions are being placed on this surveillance.

There is no technical reason this surveillance must be done during shutdown conditions, and the surveillance would not impact unit l

operation.

Performance of this surveillance in no way inhibits the D/G or its response.

Although the D/G is declared inoperable during performance of the test procedure (the Diesel Generator Periodic Test) which covers this surveillance (among others), the D/G is not made functionally inoperable for this surveillance.

This surveillance just involves alignment of the D/G day tank to the fuel oil storage tanks (manual fuel oil transfers only, no D/G starts), and no matter how its lined up on fuel it has a full day tank and therefore should in no way affect D/G operability.

e.13)

No mode restrictions are being placed on this surveillance.

This surveillance is just verifying the sequencer parameters, and doesn't affect the functional operability of the D/G at all.

While this surveillance can be verified during the ESF Test (see e.4 above), McGuire uses a separate test procedure (the D/G Load Sequencer Test) to take credit for this surveillance.

This separate test does not have the practical considerations involved in the ESF Test that make that test desirable to be performed during shutdown, and would not impact unit operation.

The D/G system was designed to allow for this type testing on-line.

As in e.2 above, the D/G remains fully functional and any valid actuation signal received would override the test mode enabling the D/G to carry out its intended functions.

The only operational detriment associated with the D/G Load Sequencer Test is that with the sequencer cabinet in the test mode the safety pumps cannot be controlled (started or stopped) manually (without being reset),

but receipt of a valid signal would start them automatically (the signal resets the sequencer) so that is not a concern.

e.14)

No mode restrictions are being placed on this surveillance. While this surveillance can be verified during the ESF Test (see e.4 above), McGuire uses a separate test procedure (the Diesel Generator Periodic Test) to take credit for this surveillance.

This separate test does not have the practical considerations involved in the ESF Test which make that test desirable to be performed during shutdown, and would not impact unit operation.

During performance of this surveillance the D/G is made functionally inoperable 4

L f

1

q l

(links are slid which inhibit D/G functioning while doing that test).

Although the D/G is declared inoperable for approximately four. hours for this test, it is only functionally inoperable for approximately one hour.

This is well within the Technical Speci-fication's' allowed outage time of 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />.

During this time the unit is. relying on the other train's (operable) D/G.

Also, personne1'are at the D/G during this testing who could restore it to operable,.if needed.

This situation would be similar to other surveillance testing that is allowed to be done on-line which inhibits D/G functional operability such as the Quarterly Slave Relay Testing.

e.lb)

No mode restrictions are being placed on this surveillance.

There is no technical reason this surveillance must be done during shutdown conditions, and the surveillance would not impact unit operation.

This surveillance involves starting the D/G twice with the Diesel Generator Engine Starting Air (VG) System compressors isolated (the D/G is not loaded for this surveillance).

After the second start the compressors are allowed to start to maintain VG System pressure.

However, the D/G is functionally inoperable because with both compressors locked out, after the second start (before the compressors are cycled back on) there wouldn't be sufficient starting air pressure to start the D/G a third time.

1 Although the D/G is declared inoperable for approximately four hours during performance of the test procedure (the Diesel Gen-1 erator Periodic Test) which covers this surveillance (among others), the D/G is functionally inoperable for this surveillance only for that brief period of time from the second start until the compressors restore system pressure (typically a few minutes).

This is well within the Technical Specification's allowed outage time of 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />.

During this time the unit is relying on the other train's (operable) D/G.

Also, personnel are at the D/G during this testing who could restore it to operable, if needed.

This situation would be similar to other surveillance testing that is allowed to be done on-line which inhibits D/G functional operability such as the Quarterly Slave Relay Testing.

Further, per the test procedure the D/G remains running after the second start until VG System pressure is restored.

Since the D/G should already be running after the second start (assuming it started on the second attempt), VG System air shouldn't be needed to start the D/G.during the brief time system pressure is low.

Therefore the D/G should actually be functionally ~ operable the entire time (assuming it started on the second attempt) since receipt of a valid actuation signal would not cause the D/G to be stopped and then restarted prior to adding the required loads, etc.

The surveillance requirements for which the "During Shutdown" proviso is being removed do not involve disassembly of any part of the D/G or Diesel Support Systems.

None of the surveillance disable the D/G for any extended length of time.

Except for surveillance e.8, the diesel generator will be declared inoperable for the time of the applicable test procedure performance which may be accomplished well within the allowed outage time of 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> if there are no significant problems (if all proceeds smoothly, all of these tests may be completed within six hours).

The surveillance can be safety completed as 5

I oposed without affecting unit operation.

During performance of these tests the unit's other D/G would be fully operable and capeble of performing the

-intended safety function..The surveillance would still be conducted at least once per 18 months as is currently required.

Changes similar'to several of these changes have been previously reviewed and.

. approved by the NRC for Catawba Nuclear Station (ref. Catawba Facility Operating Licenses Amendments 10 (Unit 1)/3 (Unit 2) dated September 15, 1986).

'dased'upon the preceding justification and safety analysis, Duke Power Company concludes that the proposed amendments will not be inimical to the health and safety of the public.

No changes to the Technical Specification Bases are necessitated as a result of the proposed amendments.

l 6

ATTACHMENT 3 Analysis of Significant Hazards Consideration As required by 10CFR 50.91, this analysis is provided concerning whether the proposed amendments involve significant-hazards considerations, as defined by

.10CFR 50.92.

Standards for determination that a proposed amendment involves no significant hazards considerations are if operation of the facility in accordance with the proposed amendment would not:

1) involve a significant increase in the probability or consequences of an accident previously evaluated; or 2) create the possibility of a new or different kind of accident from any accident previously evaluated; or 3) involve a significant reduction in a margin of safety.

The proposed amendments seek to remove restrictions on the modes certain Diesel Generator (D/G) Technical. Specification serveillances can be performed, thus allowing them to be performed with the unit on line rather than only during unit shutdown.

The proposed amendments would not involve an increase in the probability of an accident previously evaluated as they only impact the Diesel Generators.

Since the D/G's serve only to mitigate accidents and do not involve any accident causal mechanisms, there can be no effect on the probability of previously evaluated accidents. The proposed amendments would not involve a significant increase in the consequences of an accident previously evaluated.

For all but the changes'to T.S. 4.8.1.1.2.e.6.c, e.11, e.14, and e.15 the D/G remains functionally operable I

during performance of the surveillance testing and thus capable of performing its intended safety function if called upon. While the D/G is made functionally inoperable during portions of the T.S. 4.8.1.1.2.e.6.c, e.11, e.14, and e.15 surveillance testing, the equipment would not be removed from service for an extended time and certainly not long enough to challenge the Technical Specification's allowed outage time.

During performance of the affected surveillance the unit's other D/G would be fully operable and capable of performing the necessary accident mitigation functions.

The proposed amendments would not create the possibility of a new or different kind of accident from any accident previously evaluated. As discussed above, the D/G's serve only to mitigate accidents and could not cause an accident. The proposed changes would not alter any actual surveillance, the changes would.

simply allow the surveillance to be met at a different time, not restricted to when the unit is shutdown (the affected surveillance can be safely conpleted in any mode without impacting unit operation).

The changes introduce no new mode of plant operation, and none of the proposed changes would place operation of the unit in jeopardy or in an unanalyzed condition.

The proposed amendments would not involve a significant reduction in a margin of safety.

The surveillance would still be conducted at least once per 18 months as is currently required. The changes would allow equipment to be removed from l

service during unit operation for surveillance testing.

However, the test (s) must be completed within the current allowed outage times. As the allowed outage time defines the required margin of safety for equipment operability, removing equipment from service for testing and returning it to service within the allowed outage time does not significantly affect a margin of safety.

Based on the preceding analyses, Duke Power Company concludes that the proposed amendments do not involve a Significant Hazards Consideration.

4

Retrieved from "https://kanterella.com/w/index.php?title=ML20235H320&oldid=3951250"