ML20245E944
| ML20245E944 | |
| Person / Time | |
|---|---|
| Site: | Arkansas Nuclear, Rancho Seco, 05000000 |
| Issue date: | 01/31/1989 |
| From: | Murley T Office of Nuclear Reactor Regulation |
| To: | Stello V NRC OFFICE OF THE EXECUTIVE DIRECTOR FOR OPERATIONS (EDO) |
| Shared Package | |
| ML20245E948 | List: |
| References | |
| REF-GTECI-124, REF-GTECI-NI, TASK-124, TASK-OR NUDOCS 8902030163 | |
| Download: ML20245E944 (6) | |
Text
. _ _ _ _ - _ _ _ _ _ -
D eket'Nos. 50-368
'14 0 1 1223 and 50-312 MEf0RANDUM FOR:
Victor Stello, Jr.
Executive Director for Operations
~FROM:
Thomas E. Murley, Director Office of Nuclear Reactor Regulation
SUBJECT:
PLANT-SPECIFIC BACKFIT FOR IMPROVED AUXILIARY FEEDWATER SYSTEM RELIABILITY AT ARKANSAS NUCLEAR ONE, UNIT 2 AND RANCHO SECO Enclosed for your information are proposed plant-specific backfit analyses for receired improvement in secondar Arkansas Nuclear One, Unit 2 (ANO-2)y decay heat removal capability at and Rancho Seco. This action is being
'taken as the final action for resolution of Generic Issue 124. Auxiliary Feedwater System Reliability.
The staff has determined that the two-pump auxiliary feedwater systems at ANO-2 a.nd Rancho Seco need to be upgraded.
The staff concludes that substantial improvement in plant safety can be achieved b feed pump)y provision of an additional means of water supply (e.g., startup to the steam generators.
I plan to inform the individual licensees of this decision promptly.
With this action, the staff considers GI-124 to be resolved. The CRGR was informed of this action by memorandum from J. Sniezek to E. Jordan dated December 2, 1988.
Orir.inalsigm dby
. nc:as I. caricy Thomas E. Murley, Director Office of Nuclear Reactor Regulation
Enclosure:
As stated cc w/encTosure:
l J. Taylor l
E. Beck,iord CONTACT: J. Wermiel X20870 1
1.
f*
/
I g o200 D bcf l
C.
1
s PLANT SPECIFIC BACKFIT ANALYSIS GENERIC ISSUE 124, AUXILIARY FEEDWATER SYSTEM RELIABILITY ARKANSAS NUCLEAR ONE, UNIT 2 As a result of its review and resolution of auxiliary feedwater system reliability in those plants with two-pump auxiliary feedwater systems (AFWS) under Generic Issue (GI) 124, the staff has concluded that improvement in secondary side decay heat renoval capability is necessary at Arkansas Nucleag One, Unit 2 (Ah0-2).
The SRP Section 10.4.9 unavailability criterion of 10~ to 10
- per -denand served as the goal to be achieved to resolve GI-124. The SRP criterion permits a greater AFWS unavailability if suitably reliable compen-satory decay heat removal features are provided, and therefore, the staff's review focused on this area.
A suitably reliable compensatory feature is one which provides an alternative means of supplying water to the steam generators.
However, such alternative capability has not been demonstrated for ANO-2. The above action is being taken at this time in order to avoid a repetition of the significant delay in achieving significant secondary decay heat removal improve-ments such as occurred prior to the Davis-Besse loss of all feedwater event.
It is the staff's judgement that substantial safety improvement can be gained by providing additional means of decay heat removal through the steam generators.
An additional compensatory feature of this type can provide as much as an order of magnitude decrease in the likelihood of a loss of all feedwater. The staff recognizes the existence and availability of other means of decay heat removal, i.e., " feed-and-bleed" and use of condensate pumps. However, the use of " feed-and-bleed" is appropriate only as a last resort action in an emergency.
There are two factors which form the basis for the staff's conclusion that
" feed-and-bleed" entails large uncertainty as a decay heat removal feature at ANO-2. The first factor is the operators inherent reluctance to initiate
" feed-and-bleed" given the resulting consequences of this action as was observed during the Davis-Besse loss of all feedwater event.
" Feed-and-bleed" cooling intentionally releases substantial amounts of reactor coolant into the containment which will result in delays in plant restart because of 1) a potentially lengthy cleanup period,,and 2) the necessity to correct those secondary heat sink deficiencies that caused the reliance on " feed-and-bleed." The second factor is the basic'PWR primary system design which is not intended for direct decay heat removal at high pressure. The staff recognizes that ANO-2 has a unique " bleed" capability which permits rapid primary system depressurization to the high pressure safety injection pump discharge pressure through a 3-inch vent path. However, even with this capability, " feed-and-bleed" must be initiated in a timely manner, priur to steam generator dryout, in order to be an effective means of decay heat removal prior to core uncovery. The above factors preclude consideration of " feed-and-biced" as a reliable compensatory decay heat removal feature.
1 0
4 1 e "ee n'
- candansate pump for decay heat removal through the steam generators
- u. tne event of a loss of-all main and auxiliary feedwater avoids the catticulties noted for " feed-and-bleed" initiation, but does not represent an adequate compensatory feature as was claimed by the ANO-2 licensee.. The-staff has for some time recognized explicit use of condansate pumps as an emercency source of supply to the steam generators. All plants have the capability to employ a condensate pump to supply flow to the steam generators once secondary side pressure has been reduced sufficiently below the pump shutoff head. While the staff notes that the ANO-2 condensate pumps have a marginally higher discharge pressure than other plants as was shown by the licensee, action to depressurize the secandary side must still be taken.
Therefore, the AND-2 capability in this regard is similar to that for other PWR plants.
To supplement the above qualitative evaluation, the staff performed a quan-titative value impact assessment of the proposed action. This assessment utilized the licensee's estimate of AFW system unavailability per demand and site specific data to determine the person-rem release resulting from a postu-lated core melt and containment failure due to a loss of decay heat removal.
The assessment was based on an assumed range in success rate for " feed-and-bleed" of 10% and 90%.
The frequency of extended loss of secondary heat sink in the value impact assessment assumes credit for condensate pump availability. The results indicated that when considering only $1000/ person-rem fr-the proposed improvement in decay heat removal capability, the proposed action is cost effective when a 10% success rate for " feed-and-bleed" is assumed. The proposed action is only marginally cost effective when a 90% success rate for " feed-and-bleed" is assumed. However, when considering the uncertainty in use of " feed-and-bleed" and other factors in the cost of recovery following its use (i.e., cleanup of the containment and cost of replacement power while the plant is down following the loss of all feedwater event), a substantially greater expenditure can be justified.
For the reasons indicated above, the staff proposes the identified plant specific backfit. The licensee should proceed to implement improvement in secondart ecay leat removal capability and propose a schedule for completion d
of necessary' modifications.
1 e
PLANT SPECIFIC BACKFIT ANALYSIS GENERIC ISSUE 124, AUXILIARY FEEDWATER SYSTEM RELIABILITY RANCHO SEC0 NUCLEAR GENERATING STATION As a result of its review and resolution of avriliary feedwater system reliability in those plants with two-pump tuaiiiary feedwater systems (AFWS) under Generic Issue (GI) 124, the staff has concluded that improvement in secondary side decay heat removal capability is necess The SRP Section 10.4.9 unavailability criterion of 10~gry at Rgncho Seco.
to 10~ per demand served as the goal to be achieved to resolve GI-124 The SRP criterion permits a greater AFWS unavailability if suitably reliable compensatory decay heat removal features are provided, and therefore, the staff's review focused on this area.
A suitably reliable compensatory feature is one which provides an alternative means of supplying water to the steam generators. However, such alternative capability has not been demonstrated for Rancho Seco. The above action is being taken at this time is, order to avoid a repetition of the significant deley in achieving significant secondary decay heat removal improvements such as occurred prior to the Davis-Besse loss of all feedwater event.
It is the staff's judgement that substantial safety improvement can be gained by providing additional means of decay heat removal through the steam generators.
An additional compensatory feature of this type can provide as much as an order of magnitude decrease in the likelihood of a loss of all feedwater.
The staff recognizes the existence and availability of other means of cecay I
heat removal, i.e., " feed-nd-bleed" and use of condensate pumps. However, the use of " feed-and-bleed" is appropriate only as a last resort action in an emergency.
There are two factors which form the basis for the staff's conclusion that
" feed-and-bleed" entails large uncertainty as a decay heat removal feature at Rancho Seco. The first factor is the operators inherent reluctance to initiate
" feed-and-bleed" given the resulting consequences of this action as was observed during the Davis-Besse loss of all feedwater event.
" Feed-and-bleed" cooling intentionally releases substantial amounts of reactor coclant into the containm'ect which will result in delays in plant restart b.cause of 1) a potentially lengthy cleanup period, and 2) the necessity to correct those j
secondary heat sink deficiencies that caused the reliance on " feed-and-bleed."
The second factor is the basic PWR primary system design which is not intended for direct decay heat removal at high pressure. The staff recognizes that the action necessary to initiate " feed-and-bleed" is relatively simple at Rancho Seco.
Because of the high discharge pressure (above the primary safety valve setpoint) of the high pressure injection (HPI) pump, " feed-and-bleed" is l
initiated by merely turning on the HPI pump. However, " feed-and-bleed" must l
be initiated in a timely manner, particularly in view of the small steam generatnr inventory in the Babcock and Wilcox plants in order to be an effective means of decay heat removal prior to core uncovery. The above factors preclude consideration of " feed-and-bleed" as a reliable compensatory decay heat removal feature.
)
- n i'c a of a condensate pump to supply water to the steam generators can'be a viable means of removing decay heat once the secondary system pressure is recuted to a point sufficiently below the condensate pump shutoff head. Such an action avoids the difficulties noted for " feed-and-bleed" initiation, but does not represent an adequate compensatory feature. The staff has for some-time recognized explicit use of condensate pumps as an. emergency source of supply to the steam generatcrs.
All plants have the capability to employ a.
condensate pump to supply _ flow to the steam generators following action to depressurize them. 'However,#in a Babcock and Wilcox reactor such as Rancho
.Seco, the.small steam generator inventory will dry out rapidly when depressurization is begun.- Reestablishing secondary decay heat removal.must occur soon after dry out to be effective.. Therefore, the Rancho Seco capability in this regard is not as effective as that for other PWR plants.
The staff notes that.during discussions with the licensee on AFW system reliability, the licensee pointed to the dual drive (electric motor and turbine) AFW pump as a unique feature of the Rancho Seco system which should be considered a compensatory feature as identified in the SRP criterion. The licensee stated its opinion that the dual drive would offset most of the causes of individual pump failure since the primary contributor to the pump failure rate was due to driver failure. The staff has examined AFW pump failure data and concludes that contrary to the licensee's contention, the duel drive does not significantly improve AFW pump reliability.
Failures in i
the AFW pump itself are frequent enough to offset. failure reduction provided' by a dual drive feature. Therefore, this feature is not a sufficiently reliable compensatory capability to justify AFW system unavailability above q
the SRP criterion.
To supplement the above qualitative evaluation, the staff performed a quantitative' value impact assessrent of the proposed action. This assessment utilized the staff's previous estimate of AFW system unavailability per demand and site specific data to determine the. person-rem release resulting from a postulated ccre melt and containment failure due to a loss'of decay heat removal. The es.sessment was based on an assumed range in success rate for j
"f eed-ant-bleed" of.10% and 90%. The frequency of extended loss sof secondary i
heat sink in'the value impact assessment assumes credit for condensate pump i
availability. The results indicated that when considering only $1000/ person-rem for the proposed improveme'nt in decay heat removal capability, the proposed action is cost effective when a 10% success rate for " feed-and-bleed" is assumed.
The proposed action is only marginally cost effective when a 90% success rate for
" feed-and-bleed" is assumed.
However, when considering the uncertainty in use of feed-and-bleed" and other f actors in the cost of recovery following its use (i.e. cleanup of the containment and cost of replacement power while the plant is down following the loss of all feedwater event), a substantially greater j
expenditure can be justified.
{
u
., y f}, N -
- i.,
- 1
- v. '
p-For;the reasons indicated'above,-the staff proposes the identified plant specific backfit. 'The: licensee should proceed to implement improvement'in secondary decay' heat. removal capability and propose a schedule 'for. ' completion -
of,.neces sary-modifications.
(.
9 i
.i l:
I l
(
l i
l
t
., [,
/p,2 mtc
'c UNITED ETATES
' [
.r.
- ,j NUCLEAR REGULATORY COMMISSION
'g E
WASHINGTON, D. C. 20655 c
(*
'"[
June 14,1988 Lectet No.:
50-368 Mr. T. Gene Campbell Vice President, Nuclear Operations Arkansas Fower & Light Company Post Office Box 551 Little Rock, Arkansas 72203 0 ear Fr. Campbell:
~
SUE, JECT : ARtM'SAS NUCLEAR ONE, UNIT E - RESOLUTION OF GI-124, AUXILIARY FEECVATEP SYSTEM RELIABILITY An Auxiliery feedwater System (AFWS) review group was fonted on Septerber E3, 1986 to prepare an overall reliability assessment for each of seven plants with a two train auxiliary feedwater system, Gl-124, Auxiliary Feedwater System Reliability. This effort included a plant-specific review and an on-site audit j
of the AFL system, and included calculated estimates of the reliability of the a
AFPS given various initiating events. The staff selected this approach for j
reselving GI-124 rather than a strictly analytical approach because the staff believed that a first-har.d cedit of the AFWS design and operation more directly addressed the rcot causes cf AFW system unavailability ano unreliability.
The resciution apprcach adopted by the AFWS review team relied on an audit of several parameters thet directly or indirectly affect the availability ard reliability of the AFW system. These parameters include design configurations; maintenance, surveillance, and testing procedures and practices; operating procedures; personnel training; system layout; operating experience; instrumentation, art control; and environment and accessibility for operator recovery actions following potential malfunctions. The Standard Pevi (SRP) Section 10.4.9. AFP system numerical reliability criterion (10~gw Planto 10-5 per demand) served as the basis for concluding that the AFW system in the seven plants of concern was acceptably reliable. Because the SRP criterier specifies consideration of compensating factors such as other reliable decay heat removal methods to justify a larger AFW system unavailability, the AFWS review team evaluated compensatory features as part of its effert.
I By letter dated July 31, 1907, a draft report of the results of the GI-174 team's-findings for Arkansas Nuclear One, Unit 2 (ANO-2) was transmitted to the licensee. By letter dated November 17, 1987, the staff requested licensee contents on the concerns identified in the draft report. The licensee's responses were provided by letter dated January 29, 1988. The enciesed report documents the results cf the staff review of the licensee's responses and conclusien cor.cerning AFhS reliability at AND-2.
Based on that review, the staff concludes that improvement in the reliability of the AFWS and secondary side decay heat ren;cval capability for ANO-2 is I
warranted. This conclusion is based on the staff's evaluation of the AFWS j
I e
T. Gene' Campbell reliability, which indicates a reliability below the 10~4 to 10-5 per demand acceptence criterion, ar.d the staff's determination that the uncertainties and disadvanteces associated with the use of the feed-and-bleed decey heat removal methcd cannot justify it as a suitable compensatory feature.
Feed-and-bleed shoulo therefore be considered only as a last resort for decay heat removal in the event of-a loss of all feedwater.
You are requested to provide a response to findings of the enclosed report withir 60 days of the receipt of the report.
In your response you should specifically address how you propose to upgrade your AFWS reliability to include a tentative schedule for implementation.
Fleesc contact us if you have any questions concerning the enclosed report.
If recessary we are available to meet with ycu tc ciscuss the recommendations ccricu.e6 thetein.
The reporting and/or recordkeeping requirements contained in this letter affect fewer than ten respondents, therefore, OPP clearance is not required under P.L.96-511.
Sincerely, fh C
C. Craig Harbuck, Project Manager Project Directorate - IV Division cf Peactor Projects - III, IV, V and Special Projects
Enclosure:
As stated cc w/ enclosure: See rext page i
l j
s.-
Mr. T. Gene Campbell Arkansas Power & Light Compar.y Arkansas Nuclea,r One, Unit 2 CC:
Mr. Dan R. Howard, Manager Mr. Charles B. Brinkman, Manager Licensing Washington Nuclear Operations Arkanset futlear One C-E Power Systems P. O. Box 600 7910 Woodmont Avenue Russellville, Arkansas 72001 Suite 1310 Bethesda, Maryland 20814 Pr. James M. Levine, Executive Directer Site Nuclear Operations Mr. Frank Wilson, Director' Arkansas Nuclear One' Division of Environmental Health P. O. Box 608
. Protection Pussellville, Arkansas 72801 Department of Health Arkansas Departnent cf Pealth Mr. Nicholas S. Reynolds 4815 West Markhan Street Bishop, Cook, Perce11 & Reynolds Little Rock, Arkansas ???01 1400 L Street, N.W.
1.'a s b i n gtor,, D. C.
20005-3E0?
Honorable' William Abernathy i
County Judoe of Pope County Pegional Administrator, Region IV Pope County Ccurthouse U.S. Nuclear Regulatory Commission Russellville Arkansas 72801 Office of Executive Director for Operaticns 611 Ryan Pla:e Prive, Suite 1000 Arlincter, Texas 76011 Senior Pcsidert Inspector U.S. Nuclear Regulatory Connission I huclear Plant Road Russellville, Arkansas 7?P01 Ms. Greta Dieus, Director Division of Environtertel Health Protection Arkansas Departrent cf Health 4815 West Marken Street Little Pcck, Arkansas 72201 Mr. Robert B. Borsum Babcock & Vilcox Nuc1 car Pcwer Generation Division 1700 Rockville Pike, Suite 525 Rockville, Maryland 208E2 l
n 4
q l
)
Arkansas Nuclear One, Unit Auxiliary Feedwater System Reliability Assessment q
i A.
Executive Summary and Conclusions This report contains the staff's assessment of the overall reliability of the auxiliary feedwater system (AFWS) for Arkansas Nuclear One, Unit 2 (ANO-2).
This review was performed in connection with the resolution of Generic Issue (GI-124), " Auxiliary Feedwater System Reliability," which addresses AFWS
{
reliability in certain plants.
AFWS reliability analyses indicated that many plants fell in the high reliabil-ity range; however, several plants fell in the lower reliability range.
While these plants met applicable licensing requirements for the AFWS, their system reliability was still in question.
Some licensees for this latter group of piants implemented modifications to increase AFWS reliability to an acceptable range.
However, AFWS reliability for seven plants remained questionable.
The plants in this category are ANO-1 and 2, Crystal River, Ft. Calhoun, Prairie Island Units 1 and 2, and Rancho Seco.
The objective of the review under GI-124 is to evaluate the AFWS reliability for these seven plants and to document any recommendations for further licensee action.
The resolution approach adopted by the staff-in its review of ANO-2 relied on an audit of several plant features that directly or indirectly affect the availability and reliability of the AFW system in addition to an assessment of numerical unavailability.
These variables included design configurations; main-tenance, surveillance and testing procedures and practices; operating procedures; personnel training; operating experience; instrumentation and control; and environment and accessibility for operator recovery actions following potential malfunctions.
The AFWS numerical reliability criterion (10 4 to 10 5 per demand)
I
(
1 C ____ _ ___ _ _____ __________ _ _ _ _. _ _ _ _ _.. _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _______ _
a t.
\\
\\
given in Section 10.4.9 of the Standard Review' Plan (SRP) served as the basis for evaluating the AFWS in the seven plants of concern.
Because the SRP criterion specfies consideration of compensating factors such as the availability.
~
of other reliable decay heat removal methods to justify a larger AFWS unavailability, an evaluation of compensatory features was also conducted.
i l
i When determining whether or not to give credit for compensatory decay heat H
k removal features, the staff position has been and continues to be that only
.q features which relate to secondary side decay heat removal capability (e.g. a l
startup feedwater pump, AFW pump discharge crossconnections between units, or-a third AFW pump) can be' considered acceptable for satisfying the SRP criterion.
i While the staff recognizes the capability to remove decay heat in'the " feed and
-bleed" mode utilizing the primary system safety / relief valves and high pressure injection pumps, such a method involves large uncertainties in operator response.
Therefore, it is considered to be a suitable backup to the AFWS in emergency proc'edures as a last resort for decay heat removal, but is not sufficiently reliable to justify it as a compensatory feature in order to meet the SRP goal'for AFWS reliability.
A five person review team reviewed documents and interviewed maintenance, operations, engineering, and training personnel and management.
The review included a three day plant site visit.
The licensee's statistical analysis conducted for the last six year period for the ANO-2 AFWS-related failures shows a decreasing failure rate trend with no significant failures since 1983.
This indicates an improvement in equipment performance.
As discussed subsequently, the majority of equipment failures over a five year period from 1981 through 1985 was determined to be readily recover-able at the equipment location.
Therefore, the staff believes that ease of access to various AFWS equipment is important to overall system reliability and availability.
Ease of access includes factors such as normal and emergency lighting, adequate communications, clear and legible equipment identification.
These issues are discussed in detail in Section D.S.
c s.
f Although significant' improvements in valve performance has resulted over the last few years, the. licensee's adoption of the MOVATS* methodology for valve setpoint setting (see Section D.2.2) is expected to further improve valve performance.
The' licensee's emergency operating procedures (EOPs) explicitly and clearly instruct operators, if. the AFW flow cannot be established, to attempt to l
reestablish the MFW flow or, if that is unsuccessful, to rely on the condensate pump flow..The E0Ps provide guidance and precautions about degraded modes of equipment operations.
If all MFW and AFW are not readily recovable, the E0Ps instruct the operator to initiate the " feed-and-bleed" mode of decay heat removal.
The staff has certain concerns with the " feed-and-bleed" capability including operability requirements, and emergency operation (see Section D.3.).
The AND-2 " feed-and-bleed" system does however provide redundant flow paths with a dedicated 3-inch diameter line with two motor operated valves in series and a parallel path with two low temperature overpressure' protection valves.
This size flow path is sufficient to depressurize the reactor coolant system to allow the high head safety injection pumps flow in the reactor vessel for core cooling.
Thus, " feed-and-bleed" can serve as an acceptable backup to a reliable AFWS as a last resort in emergency procedures for decay heat removal should all feedwater be lost.
As discussed in Section D.7, the plant's rate of unanticipated automatic reactor scrams is high (5 per year in 1986).
However, it has been decreasing.
- Also, the failure rate of its two emergency diesel generators has been relatively low.
l
- M0 VATS = Motor Operated Valve Testing System 3
l
= __ _
-e 1
l d
On the basis' of its review, the staff finds that the ANO-2 AFW system is l
generally well designed and instrumented.
The staff also finds that the AFW,
system design and operation adequately consider other staff generic ' concerns raised within GI-124 (i.e., GI-68 with respect to environmental qualifications of the motor driven AFW pump, GI-93 with to steam binding of the AFW pumps, GI-122.1.a, b, and c with respect to isolation valve failure, and interruption and recovery of AFW flow, GI-122.2 with respect to initiation of " feed-and-bleed,"
and GI-125.II.1.b with respect to single failure protection of existing AFW systems).
However, the staff initially found that the licensee should take certain steps before the ANO-2 AFW system could be found accetably reliable.
The steps were as follows:
1.
The licensee should justify, using a reliability analysis based on plant-specific. operating experience, whether the closed position of the first
' AFWS discharge valve in each discharge line is optimum for safety (See Section D.1.2).
2.
The licensee should propose appropriate Technical Specifications for the pressurizer vent valves and low temperature overpressure protection valves (Section D.3.2).
3.
The licensee should confirm whether one low temperature overpressure protection valve is sufficient for decay heat removal via " feed-and-bleed" (Section D.3.2).
4.
What constitutes " abnormal" in the E0P should be adequately discussed during training (Section D.3.2).
5.
Clear instructions as to whether or not to use certain key equipment should be included at the appropriate steps in the Inadequate Core Cooling section of the E0P (Section D.3.d2).
6.
The licensee should specify in the operator training length of time, after loss of all feedwater conditions are reached, in which " feed-and-bleed" t
cooling will be effective (Section D.3.2).
4
7.
The licensee should verify.the basis for the environmental qualification of'the AFW valves, and remove' discrepancies in referencing Q-listed valves (Section D.5.2).
8.
The_ licensee should maintain all available communication means, including the public announcement (PA) system in a ready and operable condiition (Section D.5.2).
9.
The licensee should improve normal and emergency ac lighting, and emergency de lighting, in the vicinity of the AFW pump rooms (Section D.5.2).
10.
The licensee should maintain the cleanliness of the AFWS equipment and its surroundings (Section D.5.2).
11.
The licensee shoald relocate and orient (as appropriate) the AFW disch' rge a
piping temperature, pressure, and turbine speed gauges to be readily visible (Section D.5.2).
l 12.
The licensee should ensure the integrity of all equipment supports in the AFW system (Section D.5.2).
13.
The licensee should complete the retagging program for the AFW system (Section D.5.2).
14.
The licensee should develop a " maximum time to access" from the control room, for each piece of AFWS equipment that may potentially be manually exercised during emergency decay heat removal, and for the atomspheric dump valves (Section D.5.3).
15.
The licensee should pursue its trip reduction program to decrease the unscheduled automatic reactor trip rate (Section D.7.2).
16.
The licensee should complete its AFWS reliability analysis and implement changes that provide significant improvements to the system reliability based on that analysis (Section D.7.2).
5 1
. l
.{
l 17.
The licensee should provide an. alternate method of providing water to the steam generators such as a connection to the auxiliary feedwater systems '
at Unit 1.
The operability of this source of water should be required by the plant's Technical Specifications (Section D.7.3).
l 1
18.
The licensee'should emphasize in its operator training program, the grave-ness of not initiating the " feed-and-bleed" where a genuine total loss of i
feedwater is suspected.
Training on recognition and mitigation of such an event should also be emphasized (Section D.7.2).
By letter dated July 31, 1987,. a draft report of the results of the staff review team's findings for AND-2 was transmitted to the licensee.
By letter i
dated November 17, 1987, the staff requested licensee comments on the concerns identified in the draft report.
The licensee's responses were provided by letter dated January 29, 1988.
The following listing is the staff's evaluation-of those responses.
The discussion below corresponds to the item numbers above.
1.
In response to the staff's concern regarding the normally closed position for the first AFWS discharge valve and its affect on system reliability, the licensee stated that it had evaluated the advantages and disadvantages of a normally closed versus open valve.
It was their determination that the benefits in prevention of hot water backleakage for reduction in potential AFW pump steam birding, and improved isolation capability for a depres-surized steam generator (such as following a mainsteam line break) with a closed valve outweigh the minor benefits resulting from a normally open valve.
This issue is resolved.
2.
In response to the staff request that technical specifications be proposed for the pressurizer vent and low temperature overpressure protection valves, the licensee stated that because use of these valves in the " feed-and-bleed" mode is beyond the design basis for AND-2, the Commission Policy Statement on Technical Specification Improvement indicates that incorporating these valves in the technical specifications is inappropriate.
Since the staff is proposing that the reliability of the AFWS be further improved (see 6
Item 17. below) so that the reliance on " feed-and-bleed" as a compensatory l
decay heat removal means for supplementing AFWS reliability is not assumed, such technical specifications are unnecessary.
This issue is resolved.
3.
In response'to the staff request to confirm the adequacy of a single low temperature overpressure protection (LTOP) valve for " feed-and-bleed", the 1
licensee stated that analysis has indicated that sufficient depressuriza-tion capability is provided by one LTOP valve because of its.relatively large size compared to a standard PORV.
This issue is resolved.
4.
In response to the staff concern that the meaning of " abnormal" with regard to E0Ps be adequately discussed during training, the licensee indicated i
that a review of operator training coverage of what constitutes " abnormal" in the E0Ps has been initiated.
The licensee further stated its belief that current training and control board indication of abnormal conditions
-is adequate.
This issue is resolved.
5.
In response to the staff concern that clear instructions on the use of certain equipment be included in the inadequate core cooling (ICC) secton of the E0P, the licensee agreed that the current wording in the E0P on the use of the turbine driven AFW pump was not adequate.
The l
licensee committed to revise the ICC section of the E0P to be indicated to the operator that an attempt should be made to establish flow from the turbine driven AFW pump before using the condensate pumps.
This change l
will be made during the scheduled E0P revision in April 1988.
This issue q
is resolved.
6.
In response to the staff request that the licensee provide operator training i
guidance on the time frane in which " feed-and-bleed" cooling will be effective i
following a loss of all feedwater, the licensee stated that current procedures call for initiation of " feed-and-bleed" anytime feedwater flow is not established and RCS (Tc) temperature is greater than 560 F and l
I l
1 7
i increasing.
The licensee stated that operator training will. continue to emphasize the importance of following this guidance without delay in order to ensure the effectiveness of " feed-and-bleed" for decay heat removal.
This issue'is resolved.
7.
In response to the staff request that the licensee verify environmental qualification and Q-listing of AFW valves, the licensee stated that it is verifying that the maintenance procedures for the AFW valves are in agree-ment with the Q-list in order to confirm compliance with environmental-qualification requirements.
Any discrepancies will be corrected.
This issue arose from an incorrect application of a 1977 ANO-2 pipe break analysis.
The licensee indicated that the AFW pump room doors are fire doors and thus remain normally closed.
Therefore, the valves in the room f
are not subject to a harsh environment from postulated high energy pipe f
breaks.
Thus, the valves are not required to be qualified to a harsh environment under the environmental qualification requirements.
This i
issue is resolved.
8.
.In response to the staff concern that the public announcement (PA) system
{
be maintained and operable, the licensee stated that the broken PA system head set noted by the AFW review team has been repaired.
The licensee'further
)
stated that in order to ensure the operability of communications critical to remote shutdown capability, certain telephones are inspected for oper-ability on a quarterly basis.
This issue is resolved.
)
9.
In response to the staff concern that emergency lighting in the AFW pump rooms be improved, the licensee stated that it has conducted a review of I
lighting in the pump rooms.
Based on that review, the licensee stated that they have verified that adequate emergency lighting is available for
)
performance of manual actions in the area.
The licensee further noted j
that a review of the existing emergency lighting as part of the fire I
)
8
)
y protection evaluation conducted for compliance with 10CFR50 Appendix R
~
found the emergency. lighting arrangement acceptable.
This issue is resolved.
l'.
In response to the staff concern regarding the cleanliness of the AFWS 0
equipment and its surroundings, the licensee indicated that it will pro-vide for regular inspection of the housekeeping conditions for the AFWS.
The licensee stated..that it recognizes.the importance of equipment and structural cleanliness:to ensure proper operation.and maintenance of plant systems.
This issue is resolved.
11.
In response to the staff concern regarding access and visibility of'certain AFW system instrumentation, the licensee stated that it is evaluating modifications necessary to relocate the AFW pumps ' discharge temperature and pressure gauges and the AFW pump turbine speed gauge to be more readily visible.
The licensee is also evaluating possible rotation of the AFW-turbine steam supply valve in order to improve access to it for manual operation.
This issue is resolved.
12.
In response to the staff concern that the integrity of equipment suppo.rts in the AFWS be maintained, the licensee stated that it has established a short and long term program to ensure equipment support integrity.
In the short term, a plant isometric drawing update program has been implemented which includes a piping system walkdown/inspecton to verify drawing accuracy.
For the long term, a continuous rotating schedule of safety related system walkdowns has been implemented for detection of.
equipment deficiencies during normal operation.
The licensee stated that the above program should identify the types of equipment support problems identified by the staff AFWS review team.
This issue is resolved.
1 l
9
_____-____-_______d
1 13.
In response to the staff concern that the AFWS component retagging program be completed, the licensee stated that retagging was nearly complete.
-This issue is resolved.
14.
In response to the staff request that the licensee identify access times t
for various AFWS equipment and the atmospheric' dump valves which may require local manual manipulation during an emergency, the licensee stated that time-lines developed for Appendix R (post-fire alternative shutdown) accom-plish this purpose.
Maximum access times have been incorporated into the operator training program.
This issue is resolved.
i 15.
In response to the staff request that the licensee pursue its unscheduled automatic reactor trip reduction program, the licensee stated that their current Transient Reduction Program provides a systematic method for pro-cessing improvement recommendations intended to decrease plant trips.
It encompasses information from the programs underway for AN0-1 including the B&W Owners Group Safety and Performance Improvement Program, and those of the CE Owners Groups Operations Subcommittee.
Several modifications.
have been identified for future incorporation in the plant to reduce trips.
Recent operating history for ANO-2 shows a reduction in the number of trips.
j This issue is resolved.
l 16.
In response to the staff request that the licensee complete its AFWS reliability analysis and implement changes which improve system relia-bility, the licensee stated the analysis has been completed with the ANO-2 AFWS shown to be highly reliable.
The licensee stated its position I
that using a plant specific data base, it has demonstrated that the system
~4 meets the SRP Section 10.4.9 numerical reliability criterion of 10 per demand.
The need for further AFWS modifications to enhance reliability
]
is currently under evaluation by the licensee on a cost / benefit basis.
j The licensee also stated its intent to develop full plant PRAs for ANO 1 and 2 in the near future which will provide insights into overall plant risk as well as AFW reliability.
The licensee concluded that the current 10
4 s
level of AFWS reliability was adequate.
The staff cannot concur with the licensee's conclusion as discussed further in item 17 below.
17.
In response to the staff position that the licensee provide an alternate method of providing water to the steam generator such as connection to the ANO-1 AFWS, the licensee indicated that it disagreed with the staff.
The licensee stated its position that the existing decay heat removal capability consisting of the main feedwater system, AFWS, "high-head" condensate pumps and " feed-and-bleed" system is adequate to satisfy the SRP reliability goal.
The licensee also noted that several AFWS design and plant program-matic changes have also contributed to improved AFWS reliability.
These include 1) the addition of a solenoid valve to reduce potential AFW pump turbine overspeed trips, 2) new (motor driven) AFW flow control valves, 3) new AfW discharge isolation valves, 4) a lower setpoint for low steam gene-rator level initiation of AFWS to reduce AFWS challenges, and 5) implemen-tation of a trip reduction program to reduce AFWS demands.
The licensee further stated its belief that the staff's position is inconsistent with other activities related to decay heat removal adequacy such as USI A-45 and " severe accident" policy where the contribution of AFWS to core melt is being considered, and where other new requirements to address this area may be imposed in the future.
The staff has considered the licensee's position and assertions.
The staff does not agree and concludes that improvement in the secondary side decay heat removal capability is necessary for ANO-2.
The staff recognizes that the improvements made by the licensee should improve AFWS reliability. However, AFWS reliability is still considered to be below
~4 the SRP criterion (10 per demand).
Uncertainties associated with the operator's response for initiation of " feed-and-bleed" and the intentional release of reactor coolant into containment as a means for mitigation of a loss of all feedwater makes " feed-and-bleed" an unsatisfactory compensating feature.
The staff recognizes that ANO-2 has the capability to rapidly depressurize the primary systet,and utilize the safety injection pumps in a feed and-bleed decay hes.t removal mode, but recognizing the uncertainty associated with operator response in the available time frame, the staff believes it should only be considered a last resort action for decay 11
__-_________D
V heat removal.
The staff also concludes that while use of the condensate pumps and " feed-and-bleed" for decay heat removal is appropriate in emergency procedure guidance for coping with loss of all feedwater, it is not an adequate compensatory feature and does not justify AFWS reliability below the SRP value.
The staff notes that use of a condensate pump is not unique to ANO-2. Further, even though these pumps may have a slightly higher discharge pressure, secondary side depressurization is required in order for the pumps to deliver water to the steam generators as is the case in all pressurized water reactors.
With regard to the impact of GI-124 on other staff actions, the staff believes that any action implemented to increase the level of AFWS reliability to achieve the goals defined in GI-124 should not conflict with USI A-45 or the " severe accident" policy.
The staff does not believe that further delay in improving AFWS reliability is justified.
Therefore, the licensee should make secondary side decay heat removal cap 0bility improvements to increase AFWS reliability.
This issue is not resolved.
18.
In response to the staff request that the licensee emphasize the importance of initiating " feed-and-bleed" when required in its training program, the licensee stated that explicit guidance for recognizing and initiating
" feed-and-bleed" is provided in the emergency operating procedures and use of the procedures in the operator training program is detailed and extensive.
The licensee provided a summary of the procedural guidance for coping with loss of feedwater and core cooling events.
This issue is resolved.
In conclusion, the staff finds that the above issues have been resolved with the exception of the need for additional features to improve secondary side decay heat removal reliability.
The licensee should propose appropriate compensatory features as necessary to improve the AFWS reliability of ANO-2.
1 I
12
5 : {3F 'M
%,u
,i 7
'E
-k. t j-y ie-at gi l l 4
f Q, --
T,
/5 5,
, l
\\
'ld k $,
P"i f),}
( $1!,
I j 4
,~d' i
6, [ *.
'7',j l
.}
g
.,. er:
b, l k
~
.)
9
~ ~ -
l 9
l
'i g:]
l< m* +.,
st
(
'l c
Mlp,
'1' a..
I J
M t[
E"g,
k,,
=
'I J l(' PJ,
{
1 J.
3
< ~4 ' d 5 #'?,'
I
.,W'
.Qq l
Y.
'fN r-g 1
4 p'.,'
na g1
,hi -
8
_e==3 r
eJ, J
'A'
- *N Cf.
3M R1 fb
^
Ficure 5 2 Access To Turbine Steam Admission Valve 2CV-0340 Is Poor 13
\\
i l
<J i
. ',k
.)
' YE2Nji h TEAsh
/[ j a+hnnTd.,.y.id
_,.T Tf v.
lals l.?:l W%.$?
l
\\
- s
, # mJ
~
m 3 f
8 P rA i w
,(-
's J P.M
-.i
. m..
' f, I,MI 3
- u.. -
. ab,
f _. ~@
U...
' V: E-&
L qJ.
S
/
j yN'.
_i
,.s..
Ficure 5-2 Access To Condensate Water Supply V&lve 2CV-0745-2 Is Poor 14
J e
8 4
4 3 e. ~
e
=
D g
g
. t:
e g-r
.% Z
~
1.
..! ' i
[
~W sM3,..4 I*
q.!
- w.
.c
- Si
^
r y
v w.
4, f-Is T..
l g,
[
I
'.. ',p 2
d@'-
N l
.(,...
.-;g+
J l
r
,s
. (*
\\
AP 1;
n b
@.W.
i.i
' y,'
N b
i=
l n
rJfdter 8
i 3
C g.
d
}
I.
f
-g.
el m
,a i
l g,2 W *^M +.
'y M&
W L%
w-pagn ',
a,.,-un
.a
.s i
91 Q I
,g_.-
~
g g
--. _.- 2 v
,~
.s v
.. -,,>v
'h' 4
, ifo I 1
,e
~.\\
kb'ob(
i. i..
$5 Ficure 5-5 Poor Access to Discharge Pipe Temperature Gauge (Gauge behind the steam pipe) 16
1 4
q.-
2
.Jh. ~..
bl W.
- wg <.
\\
_2.... M.
en.
1
- L,
t Ws o
- ~.
e m?.
i..g_
\\.&
\\
o-1 s
r*
a
.- t c
.sms a
o
'f e fauP
,.3
\\ -.' r l
2 M4e..< 3 mig!
- .E 4 5, 7.4
.+., \\.
.i a c.
s..
e w
.<.? 'r g
.E E A
,.1-g,,.
J4. -
'a g
1 ib
_ uf' u e
e
-- o j u. ~
^.Q(;,.-
~. 0. : {
m
' ~
ey 4,;...
/
-n i
_t o
e,:-
i 9
Eo
>=
(
\\
%. a c r.+.m+ m.,...
....y.~
e
% ~.r.,W; al., f,a, m 1 3-WW-w se y
$ ;,, x m
. % o.'-
.y
' 's
.. g g I
- -o
-; gp',
.h aIg g
n y....,q.
..r w,.-
r.
-[*..;i -
~..,*/ % *
,J s
N, 4
, '** h..
&3,"/[11L1b',I"8.d.L*'t> I
. w,
- I. s' k*
t 3
N f
1 l
f 4
17
8L 7
B?as-
^l k
'M'-
A
..,.: f ta.
Imamma N Tt? w W :/':'
WQ n
1 y,
, 'y m,
L,
r u
T b
I. N,* ! k' b
u.=
~ ~ -
e M-
- f. y u.. m.a g
13 is i
d, 7
's D
i,,
l
. b*
$~
hy[
'g
.y,,w.
au=
i 3
'55
(,[.-
%I (kN31'{'i.
j
[ i$i
\\,
(I,$ l i
_ y j, 3
u g'.5 4
e{
L.. #.' %;
- p *,
,ae
<J C u *~
~
\\
3,0 'g 1
<:~
.L n.., r%
w
^ fe _
<g
[
\\g.
.Q L-t.
g}...
lyys$~&,N-
'4 '
e:..e.
n','e**'**
{
O G
9 e
ammam 4
i n.<:.y.+;b.5. e.9V'"TMEf.W
.;n
-gr
,' w,Y f*.*.!n; f ~
'f
[
b 5.,.
' *n'Af..
.... e
~.
,. 4..y.w, -
n
.c
~.
.. 4~ h. A R...s. $..,,,.d,. p.,
,v-v r.
m v..
.n. -
oi
..'Y i i:
Q'>
I 4
m
.l..
(#;.... :f i 1
. 2. Cl,yQ CQ.,IS; fbi l
[
o
..,)-. '..C...
.3 j:,5.-
.,. m 3
.:.m.,. u I.. J. A.
2
-7 l'2MC1 -(':2 h
ac.m w
2. y%. % l t-\\
y?%W"R s
1
.,7
< 135 p 2,.2 1
.............., s. s.
l i
.n n,-
..~
{
- f., 3
,J
.y
. g'
,w gt.,
e e,. s..%>%.
.g-W,'
7t7 T.~ 4'7,4 -
by %y V
,, o. cry.,
i.-...
r-O,.
L; N '
Y. : y '
~,
'G'??
.-a Est2. W.; $:
.h'<v Q.,...<
[
. ys %....im g;
m,.
Wu Fioure 5-8 Condensate Storage Tank Discharge Value Locked Open 19
I-t f.
Arkansas Nuclear One, Unit 2 - Auxiliary Feedwater System Reliability' Assessment B.
Introduction This report contains the staff's assessment of the Auxiliary Feedwater System (AFWS) reliability of Arkansas Nuclear One, Unit 2 (ANO-2).
This review is being done in connection with the resolution of Generic Issue.(GI) 124.
GI-124,
" Auxiliary Feedwater System Reliability," addresses the reliability of AFWSs.
Reliability analyses
- for AFWSs indicated that many plants fell in the high reliability range.
However, several plants fell in the lower reliability ranges.
Licensees for some of these plants implemented sufficient modifi-cations to increase their AFWS reliability to an acceptable range.
- However, the reliability of the AFWSs for seven plants, including ANO-2, remained questionable.
The six other plants are AND-1, Crystal River, Ft. Calhoun, Prairie Island, Units 1 and 2, and Rancho Seco.
The objective of this task is to determine whether the AFWS of each of the-subject seven plants is sufficiently reliable and to document any recommenda-tions for further licensee or staff actions.
This report presents the resolution approach-and evaluation philosophy in Section C, and detailed evaluations in Section D.
The summary and conclusions are presented in Section A of this report.
Appendix A contains the references.
Appendix B lists the names of the NRC and licensee personnel who participated in this task.
- NUREG-0611, and NUREG-0635, Generic Evaluation of Feedwater Transients and Small Break LOCA in Westinghouse and CE Designed Plants, respectively, and NRC memoranda from A. Thadani to 0. Parr dated October 17, 1983, October 23, 1983, and November 9, 1984.
20
q
- C.
Resolution Approach l
I The staff. believes that a high degree of availability and reliability for the AFWS can only be achieved if such a system is adequately designed, properly maintained and well operated.
Proper maintenance and operating practices help 3
I reduce component failures.
These practices are enhanced by good training programs for the maintenance and operations personnel.
Good training programs also help the operations personnel understand the system's capabilities and its importance to safety.
System understanding reduces failure due to maloperation of equipment and improves the likelihood of recovery. in case of unanticipated
. component failures.
The staff believes that assessment of the above variables should provide a significant indication of the degree of reliability of the AFWS.
Therefore, the resolution approach adopted by the staff relied on an audit of several plant. variables that directly or indirectly affect the availability and reliability of the AFW system.
The main items of this task include the folicwing:
1.
Consideration of relevant information pertaining to the AFWS and support systems capability and reliability (e.g., Systems Descript-ions, Piping and Instrumentation Diagrams, Logic Diagrams, Safety Analyses Reports, AFWS Reliability Analyses, INPO Reports, AE00 and IE Reports, and staff Safety Evaluation Reports).
1 l
2.
Evaluation of plant operating experience with emphasis on the degree of failure repetitiveness and the rate of unanticipated automatic scrams.
3.
Evaluation of the AFWS maintenance, surveillance and testing, backlog of l
maintenance work-requests, and ability for failure root-cause identification.
l 4.
Evaluation of the clarity and accuracy of the AFWS-related Emergency Operating Procedures, with emphasis on ease of recovery from faulted conditions, accessibility of equipment and adequacy of instrumentation
)
and controls.
I 21 l
W
' 5.
Evaluation of the licensee's training programs for maintenance, operations
.and engineering personnel.
6.
Appraisal of the system layout, accessibility, indication and. control, environment during.an accident, and cleanliness, etc.
7.
Consideration of alternate plant features to maintain adequate core. cooling.
if main and auxiliary feedwater systems became inoperable.
8.
' Review of the plant post-TMI modifications.
The AFWS review team audit of the above plant variables is not intended to replace other systematic staff reviews of any of these variables but merely assesses their effects on the overall AFWS reliability and availability.
The licensee is developing an AFWS reliability analysis which was provided to the staff in draft form.
The staff has made a preliminary review of.the analysis, which is discussed in Section D.7.
The seismic qualification review
- in response to Generic Letter 81-14, Seismic Resistance of AFW Systems, was previously performed by the staff.
That review determined "that the emergency feedwater system has sufficient seismic capabil-ity to withstand a safe shutdown earthquake and accomplish its safety function."
The Appenoix R fire protection staff review of AND-2 is still in progress.
In performing this AFW reliability evaluation the staff conducted reviews of licensee-supplied documents at the NRC Headquarters, reviews of additional documents at the plant site, and numerous interviews with the maintenance, operations, engineering, and. training personnel and management.
Memorandum from L. S. Rubenstein, to G. C. Lainas, " Arkansas Nuclear One, Unit 2:
Seismic Qualification of the Emergency reedwater System", MPA l
C-14, dated June 18, 1984.
l l
I 22
i.
j TheAFWSreviewteam.consistedoffourmultidisciplineteammembersandat$am leader..The team effort included three day plant site visit' an'd pre-visit and post-visit reviews.
The names and organizations of the NRC and licensee participants are listed in Appendix B.
O. I Design and Configuration D,1.1 Approach The staff conducted a review of the design and configuration'of ine Arkansas Nuclear One - Unit 2 (AND-2) auxiliary feedwater (AFW) system (in this report the phrases " auxiliary feedwater" and " emergency feedwater" are used interchangeably).
The staff reviewed the system descriptions in the updated FSAR, together wit.h pertinent drawings and figures (Reference 1), and the Technical Specifications (Reference 2).
The staff also reviewed the following for additional informa-tion:
NUREG-0635 (Reference 3); and Status and Safety Analysis Reports for
-TMI Action Plan NUREG-0737 (Reference 4).
The staff also conducted a comparison of the ANO-2 AFWS design with the Criteria of Standard Review Plan Section 10.4.9.
A walkdown of the AFW system was con-ducted by the staff to determine the degree of ANO-2 compliance with applicable criteria and drawings.
D.1.2 Evaluation AN0-2 is a CE designed 2815 M4(t) reactor, with two U-tube steam generators, two MFW trains, each with a turbine-driven pump, and with three motor-driven condensate pumps.
The reactor is also equipped with three high head safety injection pumps with a shut-off head of 1450 psia.
The pressurizer has two low-setpoint safety valves each with two motor operated isolation valves (low temperature overpressure protection system) and a 3-inch vent valve arrangement for use in the " feed-and-bleed" mode of decay heat removal.
The reactor is located in a large dry reinforced concrete containment.
The plant is provided with two 100% capacity diesel generators for shutdown cooling if offsite power is lost.
23
l!
nS AV s
6 '
hf B
G b
S5 fb T.1 S
kL T-
> a I
y, 3
e
>3 6
3 1
5 3
3 0
, 's 8
o o
8 n
i i
c, QW c-c C-4 E
l_
,s A
5 A
C M
g*F v
D E
C
<t z
I A
t gt i
1 n
l 5
2 5
z 0)
M o
L C
E 2 7 'O w
6,, o-G i
i R
4, m v
C yie c
A 4
D DQl rW
=
c p-y s
a t
2 N
iW A
t o
6 l
i WX
- ;q w
W F
t F
r t
6 2
a 2
sa n
A i
r 3
t l
i 1
b 7
6
,p W
n.
o
't d
F W
g
- e. s r
a t
2 2
t a
^
T w
L i
e,g t
1
)
7 y
)
I uP
/-
P 0
r W
2-
,g 6
3 nh 1
s E
.a
~
1 5 f
w W0 gc~~
s u
i N5 n
g z
o A
,^
' g4 r
rL 3
o NN i;
T w
c c4 o
F
/
r sP 1
e-2 r
s g/
2 j
A
\\
, A-vI S uF f
2 t
a
,Q HN
/
N WN NW s
/
N m
L, D _
C.
F Y
M.z A
F F
t e
L o
s y
\\#
a v
s A
y7 O
/
l W
8
/
E N
F 6
t 0
2 1
i 0
7 z
\\- s-1 o
/
w 0
CQMn g
HW OA o Nm.
o z
A y
F v
c
{_
L.
o c
t 1
s j_ fm a
(
a c
i 2
T-
,p
{,
SA t
C~
m m_
A 4
3 o
1 L. "
m Q
9 gA ^^
Qh
- L
,3 D
,e m5b 4
J i
t T-t F
C'g h-S
)
k
4 The AND-2 AFW system is a two-train system.
One train contains a centrifugal pump driven by an electric motor (2P78) and the other train contains a steam turbine driven pump (2P7A).
Diversity in pump drivers eliminates common mode failures in the AFWS motive power.
The AFW system configuration is shown in Figurei-1.
The pumps, 2P7A and 2P78, are identical.
At rated flow, each pump is capable of providing 575 gpm of water, which is sufficient for removing decay heat loads of 3 percent of rated thermal power.
The plant is also equipped with a steam bypass system.
Each of the plant's two steam lines is equipped with an atmospheric steam dump valve (ADV) upstream of the main steam isolation valve (M51V).
This arrangement makes the dump valves operable even if the M51Vs are closed.
Each ADV is capable of removing about 11% of rated steam flow.
The AFW pumps are horizontal, multi-stage pumps with horizontally split cases, I
using double volutes at each stage and impellers arranged in opposed groups for hydraulic balancing.
The steam turbine driver (for 2P7A) is a single stage, solid wheel, non-condensing, horizontal, split case Terry turbine unit.
It is designed for variable speed operation and is equipped with an electrohydraulic actuator for speed control, an overspeed trip mechanism, and an integral trip throttle valve.
It is also designed for rapid starting and will operate with steam generator pressures ranging from 1,100 psia to 60 psia.
Steam can be supplied to the tur-bine driver from either or both steam headers.
The steam supply lines are insu-lated to minimize condensation.
Also steam traps are installed on the turbine steam supply lines to continuously remove any condensate.
The turbine exhausts to the atmosphere.
Cooling water for the turbine oil cooler is piped from the pump suction line rather than from the pump recirculation line.
This is because the pressure available at the suction provides adequate cooling water flow through the cooler.
Pump and motor bearings do not require auxiliary cooling.
The electric motor driver is capable of accelerating the pump to rated speed j
within 4.5 seconds with 80 percent voltage and within 2.4 seconds at full l
1 voltage.
The motor can be powered from normal, preferred, or emergency power sources.
25
V o
o 4
The AFWS is used for plant startup.
Below five percent full power, normal i
suction for the AFWS pumps is the startup and blowdown demineralized effluent,.
with provisions for transfer to the in-use condensate storage tank or, if off-site power and the condensate storage tank are unavailable, to the Service Water System (SWS).
Above five percent full power, AFWS suction is= shifted to the condensate storage tanks (CSTs), and the startup and blowdown demineralized source is isolated by closing valve 2CV-0706.
The plant is provided with a 200,000 gallon capacity CST with a Technical Specification minimum value of 1
160,000 gallons.
There is also 100,000 gallons of water available from a swing CST, which is shared by both AND units, and can be manually lined up to either j
unit.
The two redundant and independent 6-inch SWS lines provide an assured
]
4 source of water in the case of failure of the Seismic Category 2 condensate
{
supply line..-The condensate supply line is furnished with two motor operated isolation. valves, 2CV-0795 and 2CV-0789, and two pressure switches 2PIS-0795 and 2PIS-0789.
The service water lines are each provided with a non-return check valve and motor operated isolation valves:
The normal pressure in the condensate line is about 10 psig.
If the pressure drops to 7 (+1,-0) psig, local and control room alarms will be actuated.
If the pres-sure drops to 5 (+1,-0) psig during an emergency operation, the pressure switches will automatically close the condensate line isolation valves, 2CV-0795 and 2CV-0789, and will simultaneously open the SWS valves 2CV-0711 and 2CV-0716.
The AFW pump discharge lines are provided with cross-connected flushing lines with normal'ly closed block valves (see Figure 1-1).
These flushing lines are provided in order to meet feedwater quality requirements.
An air operated valve on each flush line is automatically closed if emergency operation of the AFWS is initiated.
A pump minimum flow recirculation line is provided from each pump discharge bypassing the air operated flush valves.
Each minimum flow line is provided with an orifice and one common globe valve for limiting and regulating the flow while providing a normally open flow path to ensure that each pump has a minimum flow of 50 gpm.
The AFWS discharge piping and valving arrangement, shown in Figure 1-1, is i
designed to allow either pump to supply cooling water to either or both steam generators.
Each supply line to each steam generator is provided with 26 l
i
c 4
s redundant control valves, in accordance with the single failure criteria, to ensure isolation of any faulted steam generator, and feeding of the intact steam generator as required during emergency operation of the auxiliary feed-water system following a postulated main steam or feedwater line break.
Each discharge line has a closed MOV, an open MOV, and two check valves.
In addi-tion to the check valves the closed MOVs provide an additional barrier to hot water backleakage and potential AFW pump steam binding.
The closed MOVs, thus, i
help avoid the steam binding problem.
However, these valves must open success-fully in order for the AFWS to serve its safety function.
The likelihood of these valves' failure to open is directly related to the adequacy of their main-tenance.
Given two operable check valves in series and a discharge temperature check every shif t (see Section D 5, Walkdown; the AFWS review team initially requested that the licensee review the risk associated with the normally closed' MOVs failing to open on demand.
The licensee responded to this issue in their January 29, 1988 letter.
The staff considers this concern resolved as discussed in Section A.of this report.
Feeding of the steam generators during non-emergency cooldown is by means of the electric motor driven pump and power operated control valves 2CV-1025 and 2CV-1075.
It is also possible to use the steam turbine driven pump by adjust-ing the variable speed control.
The steam supply line feeding the steam tur-bine driver provides an assured source of steam to the turbine, even when the main steam isolation valves are closed.
The steam admission valves 2CV-1000 and 2CV-1050 are normally open.
When an AFWS actuation signal is received, bypass valve 2SV-0205-2 and the turbine cooling water solenoid valve 2SV-0317-2 will open, and the turbine will reach idle speed, allowing the turbine governor hydraulic system to pressurize.
Fifteen seccads later, the main steam valve 2CV-0340-2 will open, 2SV-0205-2 will close, and the turbine speed comes under the governor control.
Upon receipt of the automatic actuation signal the four closed discharge MOVs receive signals to open if their respective steam generators are intact.
27 E
t During plant startup,-the AFWS is placed in operation until sufficient steam is available to run the main feedwater pump turbine drivers and the condensate and feedwater system is placed in operation.
This, in effect, is a full flow test of the AFWS before it is put in the automatic standby mode.
l During hot standby and hot shutdown, the AFWS is placed in operation to maintain steam generator level.
The average feedwater flow requirement in this case is about 320 gpm, which is within the rated capacity of a single AFW pump (575 gpm).
I During normal cooldown, the AFWS is placed in operation to maintain steam genera-tor level during decay heat removal operation until the RCS temperature is brought down to about 350 F, at which time decay heat removal is switched over I
to the Shutdown Cooling System (SCS).
The operation of the'AFWS in this mode lasts about 3.4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> at an average flow of 510 gpm.
The licensee noted that~it is their intent to share the new, partially tornado-protected, CST (originally installed for ANO-1 use) with ANO-2 and to eliminate the automatic switchover to the service water system.
While the new CST will provide additional water inventory, this arrangement will also minimize inadver-tent admission of low quality service water into the steam generators because of spurious signals as has occurred in the past.
The AFW pumps start automatically on a steam generator low level signal.
However, if the low level signal occurs because of a break in the steam line or the feedwater line as would be evident by low pressure in one steam genera-tor, the closed MOVs do not receive a signal to open and the open MOVs receive a signal to close for the steam generator with the lower pressure.
The essential valves in the turbine driven pump system are all powered from a de source since this system is required to operate in the absence of all ac power.
This includes all motor and solenoid operated valves at the suction and dischange sides of the pump, with the exception of steam supply valves 2CV-1000, and 2CV-1050, and condensate supply valve 2CV-0707.
These valves are ac operated, but are normally open and do not change positions upon AFW actuation.
28
In the event of a complete loss of the AFW system, other methods are available to remove the decay heat, including (1) use of the condensate pumps, and (2)
~
" feed-and-bleed." These decay heat removal methods are discussed in detail in Section D.3, Emergency Operating Procedures, of this report.
D.1.3 Conclusion On the basis of this evaluation, the staff concludes that the AFW system in the ANO-2 nuclear power plant complies with the applicable criteria of Section 10.4.9 of the Standard Review Plan, including single failure considerations (this also addresses staff concerns raised in GI-125.II.1.b, with respect to single fail-ure protection for existing AFW systems), and including the guidelines of NUREG-0737, Item II.E.1.1.
The staff notes that use of the condensate pumps and the " feed and-bleed" capability are effective means of decay heat removal and enhance the plant's overall capability of decay heat removal.
However, as indicated previously, " feed-and-bleed" is appropriate only as a last resort for decay heat removal in emergency procedures in the event of a loss of all feedwater.
D.2 Maintenance, Surveillance and Testing D.2.1 Approach The reliability of a system depends to a large extent on the maintenance pro-grams applied to such a system.
The adequacy of system maintenance will be reflected by component failure rates during operation, surveillance and testing.
The AFWS evaluation team performed a detailed audit of the AFWS-related mainte-nance and surveillance procedures and surveillance results.
Members of the team interviewed maintenance and operations personnel and management on the practices and organization of the maintenance programs.
Training of the maintenance and operations personnel was also explored, and is further discussed in Section D.6, Training.
29
l i
1 1
f 1
AND-2 is one of several plants for which the NRC staff evaluated the maintenance program practices.
The staff completed its evaluation report, Technical Letter Report, Site Survey of Arkansas Nuclear One Unit-2 Maintenance Program and 4
Practices," and issued it in June 1986.
This technical letter is provided in i
.NUREG-1212 (Reference 5).
In this reference the staff presents its evaluation of five areas at ANO-2.
These are:
Organization and Administration, Facilities and Equipment, Technical Procedures, Personnel, and Work Control.
-l lists the AND-2 maintenance program as " Good and Improving." The NUREG lists several significant observations.
The ones most relevant to the subject of this report are' listed below:
(1) Maintenance Department Work Control - This included a description of the newly implemented Work Control Center (WCC), and the Station'Information Management System (SMIS), both of which are improvements over previous-practice.
The WCC and SIMS are discussed below.
(2) The use of procedures and setting of formal management goals were found to be good and highly developed.
(3) Maintenance backlog due to material shortages was rare.
(4) Component labelling for ANO-2 was not started at the time of staff review.
j The potential for mislabelling of equipment was expressed as a staff concern.
(5) ANO-2 was reasonably staffed to minimize maintenance backlog.
(6) There was a formal training program in place.
This is discussed in detail in Section D.6, Training.
This section and Section D.6, Training, of this report supplement NUREG-1212 as j
it pertains to the ANO-2 AFWS.
The AFWS review team endorses the NUREG-1212 findings as supplemented by this report.
30
L l
5 D.2.2 Evaluation' l
The ANO-Unit 2 maintenance program is basically composed of two parts.
The first part is the periodic maintenance (or, preventive maintenance), and sur-i veillance and testing.
These are identified in the plant operating procedures, maintenance procedures, and Technical Specifications.
These assure that the i
AFW system and its support systems are kept operable and capable of reliably performing their intended function.
The second part of the maintenance program is the corrective maintenance.
The responsibility of any plant worker is to spot potential system or component failures and report them.
The maintenance program revolves around the work control center (WCC).
This system processes, monitors, and controls the maintenance job until it is com-pleted.
The process works as follows (refer to Figure 2-1 for job order flow path):
When a problem is suspected a job request is initiated.
The job request identi-I fies the component by number, the problem (how the component failed), the loca-l tion, and any other pertinent information.
The job request then goes to the
" schedulers" in the WCC.
The " schedulers" check whether the job has already been identified.
If the job has not been previously identified, the job request is then forwarded to the " planner." The " planner" screens the problem, at the component location if necessary, evaluates any previous events involving the component, and writes a job order.
The job order fully describes the component, the work to be done, and other pertinent information.
The " planner" also assigns the job priority to one of the following categories:
A.
Emergency B.
Priority 1 - to be done quickly C.
Priority 2 - to be done within 2 days l
D.
Priority 3 - to be done within 3 weeks Priority 2 and 3 may be done during refueling outage depending on the job.
31
~ ~ - _ _ _ _ - _ _ - _ _ _ _ _ _ _ _ _ -.-- _
Gb p.;.. *.
O 9
o e
.!!I I,__l i I l
i I
I"al lji ff mumm-si s
8 E
E i
5 i
1:
{
is 11 g
j s
Emme
,,, d i
?
a M
I w
{
Ej f ?
g 11 o
3
- mmm, d.
-- e il i
< mas I
l
==>
s I
2 1
mesume i
i
' muunu l
ili m
I I
L 8
---__2-__-___________-_____---___
I
{
)
1 The " planner" then returns the job order back to the " schedulers" to schedule job and coordinate the work with " health physics," the parts expediter, and
{
th(
the outage schedule for the plant.
The package is then sent to the craft super-l intendent for assignment to a craftsman to perform the work.
The craftsman per-forms the work in accordance with the job order and reports the status of the i
work back to the " schedulers" at the end of each shift.
When the job 1s com-pleted the paperwork is returned to the " planner" for review and evaluation of l
the job order and the work.
Finally it is sent to the " work closing" group which is responsible for updating the maintenance history.
This group evaluates the job order for correctness, completes a failure report which may be input in the nuclear plant reliability data system (NPRDS), and updates the component maintenance data base.
This data base is an important part of the station information management system (SIMS).
The " work closing" group then forwards the paperwork to " records."
A root cause analysis is performed throughout this process.
The job requester does a preliminary root cause analysis when the job is requested.
The planner continues the root cause analysis by evaluating the job and the maintenance and failure history of the component in the preparation of the job order.
The craft superintendent contributes to the root cause analysis when he receive.s the job order package which includes a repetitive failure printout on the com-ponent.
The root cause analysis program also includes evaluation of unplanned trips and transients by the significant events review committee (SERC), and evaluation of reportable abnormal conditions (RACs) and licensee event reports (LERs).
Since the group of people evaluating a component failure may change from failure to failure, the staff finds that no one particular person is responsible for the AFWS operation or failure evaluations.
This means that the root cause analysis for AFWS failures may rely on the general knowledge and expertise of the person i
or persons who happen to review the failure.
However, the newly operational j
SIMS data base provides a promising tool for failure trending analysis which is l
a significant factor in root cause determination and analysis.
The SIMS data 1
base, however, has been in operation for less than a year and equipment 1
I i
l l
33 1
1 L -- -
1 1
histories are not being entered into the system retroactively.
Therefore, the benefits gained from such a system in root cause analysis may be more apparent >
as equipment data accumulates.
The usefulness of the SIMS data base for this i
purpose will depend to a large degree on the accuracy and amount of detail of the equipment history that is entered in the system and subsequently retrieved for use.
The review team believes that as the SIMS data base increases, and if g
the system is properly used for failure trending analysis, a significant increase 5
in AFWS reliability and availability will result.
I 1
The evaluation team has the following additional observations on the maintenance, j
i surveillance and testing program:
-l l
1.
All maintenance personnel hired by the plant start at the entry level
{
and must go through the Arkansas Power and Light Company (AP&L-the owner of Arkansas Nuclear One plants) training program.
This assures i
uniformity in training of maintenance personnel and their knowledge of the systems and procedures.
2.
If a job is unfamiliar or new, a pre-job meeting is held by the main-tenance crew to discuss the procedures required and any special instructions.
In addition, for a design change, the work package would specify any additional or specific training necessary for the job.
These are positive features in the maintenance practices.
3.
The licensee stated that the rate of maintenance staff turnover is i
low (between 3 - 6% per year).
In previous years this rate has been high.
The change is attributed to an aggressive program to retain plant workers which includes hiring more local people, training, com-petitive salaries and job security.
The staff believes that a reduc-tion in staff turnover rate leads to an expertise enrichment, which in turn leads to enhancing systems availability.
{
l 4.
Plant officials take pride in their high rate of early reporting of r
incipient failures.
The plant has a mandatory preventive maintenance program for safety related equipment which goes beyond the normal l
technical specification requirements.
34 I
l
e 5.
The periodic maintenance procedures, surveillance procedures and system operating procedures for the AFWS and its components were of sufficient detail to properly complete the task.
However, the staff found some discrepancies in procedures for similar components.-
Examples.of these discrepancies include:
cautionary notes, equipment and parts needed for certain tasks, incomplete procedure statements, and undefined setpoints or tolerances existed in one procedure but not in another.
These items were brought to the attention of the licensee who explained that he was in the process of revising all of the procedures and that this revision would be completed by the end of 1987.
The licensee also explained that some discrepancies may be due to the fact that different people revise different y
sections for similar equipment.
The procedures revision includes:
(a) making the procedural steps shorter and simpler (e.g., one action per step).;
i (b) revising the format and content; (c) checking the procedure against the component technical manual to assure accuracy; and (d)_ including in the maintenance procedure a requirement that the first line supervisor go over the procedure with the craftsman prior to commencing work.
6.
In response to IE Bulletin 85-03, with respect to motor-operated valve (MOV) limit, torque, and bypass switch setting, the licensee is under-taking an aggressive program in testing and calibrating its valves (many with full operating AP across the valves) using the motor operated valve analysis and test system (MOVATS) methodology.
In this methodology, mea-surement of changes in the electric current required to operate the valve motors during the valve travel are interpreted to indicate the various stresses on the valve motor, valve stem, and valve seats or gates.
These electric current measurements can also be used for early detection of degrading valve conditions (e.g., insufficient valve lubrication, broken stem threads, etc.).
The AFWS review team believes that the licensee's approach and commitment to valve testing and calibration adequately address the concerns raised by GI-122.1.a, and c with respect to MOV failures and AFW flow interruption.
This approach by the licensee i
enhances the reliability of the MOVs when called upon to operate, which i
t 35
}
in turn enhances the AFWS reliability.
The licensee's response to IE'Bulletin 85-03 with respect to motor operated valve settings is still under staff review at the time of_this report' writing.
7.
The licensee stated that the findings in the ANO, Unit I safety system functional inspection (SSFI) report (Reference 6) relevant'to ANO, Unit 2 have been implemented.
Examples of the SSFI report findings included:
inadequate torque switch, and torque switch bypass settings; valves'that were required to be periodically. tested were not tested; controlled design documents and drawings contained errors and omis-sions.
The AFWS review team notes, however, that the ANO-2 FSAR continues to have errors and discrepancies.
D.2.3 Conclusions The staff review of the ANO-2 maintenance, surveillance and testing was somewhat limited due to the major procedure revision effort underway.
The staff reviewed the latest revisions of selected AFWS procedures and relied mainly on the licensee's statements in describing the procedure revision effort.
Based on our review of the maintenance, surveillance and testing, and based on the licensee's statements, and the status of the procedures revision effort, the staff notes that the licensee appreciates the significance of important maintenance-related elements like work control, failure trending, root cause determination, and record keeping.
The AFWS review team, therefore, expects that upon revision completion, the maintenance and surveillance program will enhance the AFWS reliability.
D.3 Emergency Operating Procedures D.3.1 Approach The staff reviewed the emergency operating procedures which included the overall emergency procedures and the abnormal operating procedures relating to the AFW system (References 7, 8).
The AFWS review team's objective was to determine whether these procedures can easily be followed and understood and whether they 36
'6:-
0;
,e.
.,e e
enhance the plant's overall capability to remove decay heat under emergency conditions.
The licensee conducted a limited simulator demonstration of a loss of feedwater event.
lD.3.2 Evaluation The ANO-2 Nuclear Power Plant emergency operating procedure (EOP), E0P 2202.01, deals with various accident conditions.
The conditions which initiate use of E0P 2202.01 include automatic or manual reactor trip or indications of a steam generator tube rupture.
The reactor may be tripped manually when an operator senses a condition that may damage the plant or pose injury to personnel.
The operator.may also trip the plant because of a failure of the reactor protection system (RPS) to function when reaching any of its setpoints.
When responding to an emergency condition the operator proceeds to the proper section in E0P 2202.01, either " Reactor Trip" or " Steam Generator Tube Rupture Within Charging Pump Capacity" wherein further directions are provided for recovery from these conditions.
The reactor trip section may direct the opera-tor to other sections as appropriate.
The other E0P sections are contained in the same document and include:
1.
Degraded Power, 2.
- Blackout, 3.
Overcooling, 4.
Main Steam Isolation, 5.
Safety Injection Actuation, 6.
Steam Generator Tube Rupture Within Charging Pump Capacity, 7.
Steam Generator Tube Rupture Greater than Charging Pump Capacity, 8.
Inadequate Core Cooling, and 9.
Emergency Reactivity Control.
Any section may then refer to other sections or to other actions required in the recovery process.
All of these sections refer to the operation of the AFW system, either directly in the section, or indirectly by referring the operator to another section.
37
The licensee uses a " Procedures Writers Guide" for reference when writing a procedure.
The procedure is then independently reviewed for completeness and '
accuracy.
Procedure validation is then performed using one.or more of the
.following tools:
(a) round-table discussion by experienced operators; (b) procedure walk-through., and (c) actually conducting the procedure.
Before.
the procedure is implemented it must be reviewed by the Plant Safety Committee.
l The emergency procedures for ANO Unit 2 also include abnormal operating proce-dures-which deal with events of. lesser severity than does E0P 2202.01.
Those
.which deal with the emergency feedwater system include'2203.120 (Annunciator 2K04), 2203.12F (Annunciator 2K06), 2203.12G (Annunciator 2K07),
and 2203.13 (Natural Circulation Cooldown), Reference 8.
When specific windows in the annunciator are activated, the operator reverts to the appropriate abnormal operating procedure to find the instructions to clear the fault.
The review team has the following observations:
1.
At the beginning of the procedure there is a procedure entry condition (PEC). list that clearly defines when that procedure is entered and lists the RPS setpoints.
The operator is instructed to manually trip the reactor if any of the RPS setpoints is exceeded, and automatic trip had not occur-red.
The PEC list is followed by an immediate actions list.
This list is a reminder to the operator of the expected ranges of plant parameters.
The team finds that providing these lists at the front of the E0P is a very useful practice.
2.
The E0P section dealing with degraded power provides useful estimates of l
the condensate water requirements at different times following a loss of offsite power.
Also, useful instructions are provided to monitor the j
emergency diesel generator fuel oil inventory, and economize the station batteries loading.
3.
Useful notes, cautions, and directions are frequently used throughout the E0P.
These alert the operator that under certain degraded conditions control room indications may be inaccurate, explain certain anticipated 38
equipment performance, and instruct the operator on how to reset and -
operate equipment under degraded conditions, if necessary.
4.
The E0P clearly indicates that if the AFW flow cannot be established the operator should attempt to restore' the main feedwater (MFW) flow.
These instructic*
ere provided in several locations of the E0P.
Additional guidance av precautions are provided to the operator so that he may start the MFW pumps under degraded conditions, if necessary.
Reminders are also provided that the MFW pumps may be run as long as sufficient steam exists in the steam generators.
If starting the MFW pumps is unsuccessful the operator is instructed to attempt establishing the condensate pump flow.
If that, in turn, fails the operator is clearly instructed to " feed-and-bleed." This is accomplished by manually initiating the safety injection, verifying maximum safety injection and charging pump flow, then opening the emergency core cooling system (ECCS) vent valves on top of the pres-surizer.
If the vent valves fail to open the operator is instructed to open the low temperature overpressure protection (LTOP) valves and the pressurizer and reactor vessel high point vent valves. The vent valves will reduce the reactor pressure sufficiently to allow the high head j
safety injection (HH5I) flow into the reactor vessel.
These valves are
]
schematically shown in Figure 3-1.
5.
The licensee stated that the ECCS vent valves have been full Ap tested using the MOVATS methodology (See Section D.2).
The licensee stated that the motor torque capability and the torque switch bypass settings for the LTOP valves are such that these valves can open against the full system differential pressure.
However, the staff notes that neither the vent l
valves nor the LTOP valves are in the plant's Technical Specifications j
(TS).
Therefore, the licensee should propose for staff review appropriate I
Technical Specifications for these valves.
The licensee responded to this issue in their January 29, 1988 letter.
The staff considers this j
concern resolved as discussed in Section A of this repert.
6.
Each of two HH51 pumps will deliver 320 gpm at about 1250 psig.
A third, l
similar capacity HH5I pump is on standby and can be started manually if I
one of the operable pumps becomes unavailable.
In addition, each of i
three, safety grade, charging pumps can deliver 44 gpm at pressures up to
\\
l l
39
- - _. -._----_-____________j
?
j
.s 2300 psia.
Two of the changing pumps are required to be operable by the plant's TS when the reactor is operating.
Only one safety injection pump' is sufficient to remove decay heat.
Since a single failure of the vent valve 4740-2 can disable the vent path and an LTOP valve (see Figure 3-1) the licensee is requested to verify whether one LTOP valve is capable of full decay heat removal via " feed-and-bleed".
l l
The AND-2 " feed-and-bleed" system is unique in that it provides a dedicated 3-inch diameter flow path with two series motor operated valves.
The review team believes that, with verification of the LTOP valve capability, as discussed in Section A, Item 3, the ANO-2 " feed-and-bleed" system constitutes an alternate decay heat removal means, and therefore supplements the AFWS in decay heat removal.
However, as indicated previously, because of. uncertainties in operator action associated with its initiation, it serves only as a suitable last resort for decay heat removal but is not an appropriately reliable compensatory feature.
It does serve as a supplement to the AFWS for decay heat removal as a last resort in emergency procedures.
This is discussed further in Section A of this report.
7.
At the end of the E0P there are useful figures and appendices that may be used for quick reference during an emergency.
However, the AFW review team also has the following additional observations:
8.
We noted some minor apparent inconsistencies between similar steps in the E0P.
9.
In several locations of the E0P the operator is directed to do certain actions if a parameter was " abnormal." Further guidance, in the E0P, to define what is " abnormal" may help avoid costly mistakes under emergency circumstances.
What constitutes " abnormal" should be adequately discussed during training.
10.
The inadequate core cooling section of the E0P (Step 2.C MFW), instructs the operator to attempt to start the motor driven AFW pump (2P78).
No instruction addresses the turbine driven AFW pump (2P7A).
Clear instruction as to whether or not to use 2P7A should be included.
40
e o
-m:
r l
T. Q T.,v.
A
\\
L%4 *
- bH-l gq waivtS[S (r..* S tvop.e W 8 "'-
4 ~/
9 :3* v. +
s P
- w. V.'su
.eL J.
CII 2 i
g U*
)D
- N>CEO 4611-1 2 Sv.
2Sv.
1%V-
- w. i..
w -2
- w-2 2{g.,
J n,..,
JFI
- EI JET JEI 1:,
Jp n 4t i
l
.,w. 2 ve,n
~
~'
1 i
j I
p,, s,,
Puoe:.
t r.e u ux y,
Y t $$f l t
i 7%we. 3-\\
Wivc4 usc.A br fud ad bla) l 1
41 1
1
11.
During our review the licensee calculated an AND-2 specific steam generator dryout time of about 19 minutes, and hot leg saturation time.of about 52' minutes using CEPAC, a.PC-based CESEC (a CE transient code).
The licensee also stated that the " feed-and-bleed" mode of decay heat removal will be effective if it is started anytime up to hot leg saturation time.
- However, since there may be a natural tendency for the operatcr to resist initiating.
" feed-and-bleed," which is, in effect, a small break LOCA, the licensee should specify in the operator training material a time limit window after the " feed-and-bleed" condition is reached (the E0P specifies this as T 560 F and increasing).
The operator must initiate " feed-and-bleed" before c
this time limit has expired or if T rises excessively, whichever occurs first, c
or the risk for core uncovery and possible fuel failure will be too great.
Guidance for.what constitutes excessive rise of Tc should be provided in the training program.
The review team believes that the above measures will also resolve staff concerns raised by GI-122.2, with respect to initiation of " feed-and-bleed."
D.3.3 Conclusion The staff found that, with the exception of the above observations, the AND-2 emer'gency operating procedure is generally well organized and provides clear instructions, notes, cautions, and directions.
As indicated in section A of this report, the licensee has provided satisfactory responses to these concerns, and therefore, the staff concludes that, the ANO-2 emergency operating procedure enhances the AFWS and alternate systems reliability and the overall plant capability for decay heat removal.
D. 4 Instrumentation and Control D.4.1 Approach The review team audited the instrumentation and control circuits for the Auxiliary Feedwater System (AFWS).
As part of that audit we conducted a walkdown of the as built system and compared it to the design in the following areas:
1.
Review electrical instrumentation and control system drawings for confor-mance to IEEE Standard 279(i.e., Independence, Single Failure, Automatic and Manual Initiation and NUREG-0737, Item 11.E.1.2.
42
[p a.
o 9
2.
Verify from the control room and drawings that the operator has indication for normal and abnormal conditions (LOMF, LOOP) in accordance with the Emergency Procedures and Regulatory Guide 1.97, " Instrumentation for Light Water Cooled Nuclear Power Plants to Assess Plant and Environs Conditions During and Following an Accident."
D.4.2 Evaluation ANO-2 has a Class IE Auxiliary Feedwater (AFW) system consisting of one turbine driven pump (2P7A), one motor driven pump (2P78), and two independent trains, each capable of supplying water to either of the two steam generators as shown in Figure 1-1.
Each pump train has two parallel flow paths to allow a given pump to feed one or both steam generators.
Each flow path in turn has two elec-trically operated valves in series.
The first valves in the electric motor driven pump trains are normally closed and are used for feed flow control.
The second valves are normally open.
The first valves and the motor driven pump are powered from Class IE, diesel generator backed power supplies (power train I-RED).
The second valves are powered from the redundant Class IE, diesel generator backed power supplies (power train II-GREEN).
The turbine driven train also has two parallel paths from the pump discharge and each path has two valves in series.
The first set of valves (normally closed) are powered from the Class IE DC power system (power train II-GREEN)
The second set of valves are normally open and are powered from the redundant DC power system (power train I-RED).
.The turbine steam admission and control valves are powered from a Class IE battery backed DC system.
The turbine driven train is independent of AC power.
Therefore, upon loss of all AC and a demand for AFW system, the turbine driven train can supply water to the steam generators.
I 43
-]
I
The normal water. source for the AFW system is the 200,000 gallon (with a-
' Technical Specification minimum value of 160,000 gallons), non-seismic
~
condensate storage tank (CST).
There is another 100,000 gallon swing CST that is shared between the two AND units.
The secondary source of water is' the Seismic Category-1 service water system (SWS) whose supply is either the ~emer-gency cooling pond or'the Dardanelle Reservoir.
The AFW system is designed i
so' that the supply is automatically shifted from normal to secondary on low AFW pump suction pressure (5 psig).
The instrumentation and control power supplies to support the AND-2 configuration consists of a two train system each associated with a separate diesel generator.
Each train provides power to a 480V motor control center (MCC) vital bus.
The redundant MCC provides the AC power for valve control in the motor driven pump train.
The DC power for the turbine driven train comes from redundant DC buses each having its own battery charger.
There is a third standby battery charger which can be switched by operator action to replace either normal battery charger.
The initiation signals and circuits are part of the Engineered Safety Features Actuation System (ESFAS).
The ESFAS consists of sensors, logic and actuation circuits which monitor steam generator water level and pressure.
If these para-meters reach preselected setpoints, an emergency feedwater actuation signal (EFAS) is initiated.
The EFAS is initiated to Steam Generator 1 either by a low steam generator water level coincident with no low pressure trip present on Steam Generator 1, or by a low steam generator water level coincident with a differential pressure between the two steam generators with the higher pressure I
in Steam Generator 1.
The EFAS for Steam Generator 2 is identical to that of Steam Generator 1.
The actuation signals are derived from 2-out-of-4 coinci-dence logic measurement channels.
Each of the four channels have a 120-volt uninterruptable AC power supply system which consists of four inverters and four distribution panels.
Each inverter has three sources of power:
- 1) the normal Class 1E MCC source, 2) the battery bank as the backup source, and 3) a second Class 1E MCC as the emergency standby sources.
44
1 When an actuation signal is received from the EFAS, both pumps will start and simultaneously all valves in the discharge lines will open, unless there is a '
steam or feedwater line break, then the EFAS logic will open only the valves leading to the intact steam generator.
There is a time delay of 90 seconds after the EFAS signal and before the motor driven pump can start.
This start-ing delay ensures that the turbine has accelerated to full speed and under governor control to preclude drawing suction pressure excessively low (cavita-tion point) which could cause the turbine pump to overspeed and trip Based on our review of the AFWS, we conclude that the system is designed with due consideration of safe failure modes if conditions such as system disconnec-tion or loss of power are experienced.
Therefore, we find that the AFWS satis-i fies the requirements of GDC-23, " Protection System Failure Modes." We also conclude that the design provides the necessary instrumentation to sense acci-dent conditions and anticipated operational occurrences.
This in=trumentation as designed will actuate the AFWS.
Therefore, we find that the AFW system satisfies the requirements of GDC 20, " Protection System function."
ANO-2 instrumentation provides information for the operator's use during all modes of normal operation, including operational transients, and enables the operator te verify safety system performance following an accident and manually perform required safety functions.
The information incl.udes indications, records (for level, pressure and flow), status lights for pumps, valve position indi-cation, annunciators and alarms.
Table 4-1 lists the information available at the control room.
Table 4-2 lists information available at the equipment locations.
The scope of our review audit included tables of system variables and component states to be indicated, functional diagrams, electrical drawings, emergency procedures and submittals on conformance to R.G. 1.97 (Reference 9).
Since the arrangement, clarity, and layout of control room instrumentation is adequately b
addressed by the staff in the Detailed Control Room Design Review (DCRDR) as i
required by NUREG-0737, the review team did not actively pursue that aspect of the control room instrumentation.
However, the team had concerns about the r
9 a
e' I
lucations, orientation, and clarity, especially under emergency lighting conditions. of the instrumentation at the equipment locations.
These concerns' l
are discussed in Section D.5, System Walkdown.
D.4.3 Conclusion Based on document reviews, licensee statements, and direct observations the staff determined that adequate independence between trains was provided such that any single failure of components in a train will not prevent the other-train from completing its safety function.
In addition it was demonstrated 3
i that the automatic and manual initiation signals and circuits for the' AFWS also comply with the single failure criterion.
Based on-the audit, the stiff concludes that the AND-2 AFWS can perform its intended function, and that it conforms to the design basis requirements for IEEE Standard 279, 1971.
The staf f also concludes' that the information available to the operator includes appropriate variables and that their range is consistent with the guidelines identified in R.G. 1.97.
Therefore, the staff finds that the information systems satisfy the ' requirements of GDC-13, " Instrumentation and Control" for monitoring -
variables and systems over their anticipated ranges for normal operation, anticipated operational occurrences, and accident conditions.
With the exception of staff concerns identified in Section D.5 of this report, the staff concludes that the ANO-2 Instrumentation and control provisions are adequate and enhance the AFW system reliability.
46
j 1
3
'S>
',ble 4-1
=AFWS Information Available to tne Operator in the Control Room-2P7A Steam Driven Pump Indication Lube Oil Temp 50*-250'F l
Speed (2K03) 0-5000 RPM Discharge Press 0-2000 PSIG 2P7A+5/G B Flow-0-750 GPM j
- 2P7A+S/G A Flow 0-750 GPM Main Steam Pressure to.2P7A 0-2000 PSIG 2P7A Controls (With Indication)-
1 Steam Bypass Valve Position Open/ Closed 2K03 Seal Water Open/ Closed Steam Supply Valve Open/ Closed Main Steam to Turb.
Open/ Closed Main Steam _to Turb.
Open/ Closed
~
- 2K03 Speed Controller "Dailed" Speed Output Signal 0-100%
2P7A+S/G A. Valve-1026 Open/ Closed
' 2F7A+S/G.A Valve-1037 Open/ Closed
- 2P7A+S/G B Valve-1076 Open/ Closed 2P7A+S/G B Valve-1039 Open/ Closed Condensate to 2P7A Open/ Closed Service Water to 2P7A Open/ Closed Room Cooler Service Water
'Open/ Closed 2VUC 6A Room Cooler On/Off 2P7A Annunciators Turbine Overspeed Trip Suction Pressure Low Discharge Pressure High/ Low A S/G~ Flow High/ Low B S/G Flow High/ Low Service Water Pressure Low Lube Oil Temp. High/ Low EFAS Overriden i
2P7B Electric Driven Pump 2P78 Discharge Pressure 0-2000 PSIG 2P7B-SG A Flow 0-750 GPM 2P78-SG B Flow 0-750 GPM 47
v,:,t
-Table 4-1 (Continued) 2P7B Controls With' Indication Indication 2P7+5G'A Valve-1038 Open/ Closed
-2P7B+5G B Valve-1036 Open/ Closed i-2P7B+5G A Modulative Valve-1025 Open/ Closed and 0-100%
Open 2P7B+SG B Modulative Valve-1075 Open/ Closed and 0-100%
Open Condensate to 2P78 Open/ Closed Service Water tc 2P7B Open/ Closed 2P7B Start Switch On/Off/ Springs.
Charged EFW Flush Valve A Open/ Closed EFW' Flush Valve B Open/ Closed SG A/SG B Wide Range Level 20-460" Room Cooler Service Water Open/ Closed 2VUC-6B. Room Cooler On/Off 2P7B Annunciators 2P7B Overload Breaker Trip Suction Pressure Low Discharge-Pressure High/Los A S/G Flow High/ Low B S/G Flow High/ Low Service Water Pressure High/ Low Additional Instrumentation (Water Sources)
Service water Header #2 Pressure 0-200 PSIG Service Water Header #1 Pressure 0-200 PSIG CST A/B Level 0-100%
Q-CST Level 0-100%
Additional Instrumentation (Steam Generators)
S/G Narrow Range Level (4 Channels l
Per Generator) 0-100%
S/G Narrow Range Level (2 Channels Per Generator) 0-100%
S/G Wide Range Level (2 Channels l
Per Generator) 20"-460" S/G Pressure (4 Channels Per o
Generator) 0-1200 PSIG S/G Narrow Range Level 0-100%
L S/G Pressure 0-1200 PSIG L
f l
48
- j..
l 1
l-i l
l l
l i
1
)
Table 4-1 (Continued)
Additional Annunciators Service Water pump (A, B, C) Discharge Pressure High Service Water Header (1, II) Discharge Pressure Low j
CST (A, B) Level Low-Low CST (A, B) Temperature Low 49
Table 4-2 AFWS Information Outside Control Room 2P7A Turbin~e Pump Room Indication S.W. to 2P7A Pressure 0-160 PSIG 2P7A Suction Pressure 0-100 PSIG 2P7A Discharge Pressure 0-2000 PSIG 2P7A Disch. Header Temp.
0-240 F 2P7A Speed 0-5000 RPM 2P7A Governor Oil Pressure 0-60 PSIG 2P78 Motor Pump Room S.W. to 2P7B Pressure 0-160 PSIG 2P7B Suction Pressure 0-60 PSIG 2P7B Discharge Pressure 0-2000 PSIG 2P7B Discharge Header Temp.
0-240 F Penetration Rooms S/G A Level 0-100%
S/G B Level 0-100%
1 4
l 1
l l
l
\\
t 1
50 1
1 I
D.5 System Walkdown D. 5.1 Approach A key part of the staff's site visit to AND, Unit-2 was an AFWS walkdown.
The walkdown afforded the staff the opportunity to examine the as-built system configuration, specific components, and potential undesirable interactions.
The system walkdown had two main objectives, one was to confirm that the installed system conformed to the staff's understanding of the system design basis as identified in previous evaluations, and to determine if the system may be sub-ject to common mode failure mechanisms or hazards (e g, flooding, fire, mis-siles. suction strainers, etc.).
The other main objective was to examine the ease of operator access to vital equipment for performing necessary recovery actions.
This includes assessment of emergency local lighting, communications and other factors (e.g., cleanliness, equipment labeling, use of locking devises, posting of simple instructions at equipment locations, etc.).
The walkdown covered the entire piping and component layout from the condensate storage tanks, through the pumps to the containment penetration and included the turbine driven AFW pump steam supply lines, switchgear, and the instrumen-tation and control.
D.5.2 Evaluation The system walkdown, in addition to confirming the "as built" configuration of the system, was also used to determine the location of the AFW system motor operated valves (MOVs).
Determining the AFW system valve locations was impor-tant in verifying whether the valves had been properly qualified, that is environmentally qualified and Q-listed.
Prior to the site visit the staff reviewed the limitorque motor operated valve maintenance procedures (procedure numbers 1403.160 for model SMB-000 and 1403.161 for model SMB-00, Reference 10), which identified whether a valve was environmentally qualified or Q-listed Based on this review and the walkdown the staff determined that the AFWS motor operated valves listed in Table 5-1 were either not environmentally qualified, not Q-listed, or both.
The status of these valves was discussed with the licensee.
l 51
]
For the'Q-listing of valves'on Table 5-1,.the licensee stated that all'AFW system MOVs.were qualified.
The. licensee also stated that.the component Q-list; but not the' maintenance procedures (1403.160 and 1403.161), is the controlling factor in determining whether a valve is qualified (Q-Listed).
The staff 1
inspected the Q-List and verified that valves 2CV-0711-2 and 2CV-1025-1 were on the-list.
In order to avoid' discrepancies and confusion, th'e licensee should update procedures 1403 160 and 1403.161, and other similar procedures', to conform to the Q-List.
For the environmental. qualification of valves an Table 5-1, the licensee stated that an analysis.was performed in 1977 to determine temperature conditions in the'AFW pump rooms following a unit cooler failure.
For the worst case condi-
. tion in the.~ turbine driven AFW pump room, the temperature after three hours operation would approach 115 F.
Based on this analysis'it was determined that the valves-did not'need to-be environmentally qualified.
The analysis was not available for the AFWS team review.
Thus, the staff could not verify the assumptions used, initial conditions or other pertinent parameters, which could have an effect on the room temperature.
The licensee stated that this analysis was performed prior to plant fire protection modifications (fire doors have subsequently been installed on pump room entrances).
These modifications could have an impact on the analysis..The licensee was requested to reverify his analysis and the adequacy of the environmental qualification of these valves l
Part of the system walkdown included an evaluation of the plant communication i
and lighting systems in the AFWS rooms.
The communication system for this area consists of a telephone system, the plant public announcement (PA) system, and hand-held radios.
The AFWS review team noticed a broken handset on the PA system located in the hallway outside the AFW pump rooms.
Although the telephone system and hand-held radios act as redundant communication means, the staff urges the licensee to maintain all available communication means, including the PA system, in a ready and operable condition.
The lighting system for this area consists of the normal and emergency AC fluorescent fixtures, and battery pack lighting.
The lighting was found to be inadequate particularly during the postulated station blackout scenario when 52 1
L-___-_--._-_-
r.
Y.
~.
4 Table 5-1 "NOT' QUALIFIED" AFW MOTOR OPERATED VALVES f
Not Not Valve Identification Description EQed Q-Listed 2CV-0789-1 Pump.2P-78 Condensate Suction MOV X
2CV-0795-2 Pump.2P-7A Condensate Suction MOV X
.2CV-0711-2 Pump 2P-7A Service Water Suction MOV X.
X 2CV-0716-1 Pump 2P-7B Service Water Suction MOV.
X 2CV-1529-1 Service Water to AFW Room 2P7A unit cooler MOV X
2CV-1532-1 Service' Water to AFW Room 2P7B unit cooler MOV X
2CV-1025-1 Pump 2P-7B Discharge to SG-A control valve X
l l
l l
i I
)
53 1
_----___---__--____--_--_A
3
]
1.
proper operation of the turbine driven AFW pump is' imperative.
The emergency 1
l DC lighting for the turbine driven AFW pump room is powered from the battery pack located in the motor driven AFW pump room.
A battery failure due to an accident could result in no lighting in either room.
The review team noted that the hallway leading to the two AFW pump rooms was dark with potentially 1
hazardous stairway steps especially under stressful emergency conditions.
The review team did not observe any normal or emergency AC lighting in the hallway.
As.a part of the system walkdown, the staff reviewed the emergency lighting dia-j.
gram for the AFW pump rooms area (see Figure 5-1) and the surveillance procedure that is performed quarterly on the emergency lighting (Ref. 11).
A review of the surveillance procedure and the system walkdown showed that the. aiming of the emergency lighting may not be correct to provide adequate illumination to perform manual actions.
This is particularly true for the turbine driven pump room.
Since this room is crowded and access to most valves is difficult, even under normal conditions, adequate illumination is necessary.
According to Table 1 of Reference 11 the lighting in this room is aimed toward the west wall the opposite wa'l from where the lights are mounted.
This-would not provide adequate illumination for the trip and throttle valve, the local control panel, or the condensate water supply valve, 2CV-0795-2.
The trip and throttle valve is located north of the lights, and behind some pipes when seen from the location of the lights.
The local control panel faces the west wall and may receive an inadequate amount of indirect lighting by reflection.
The condensate water sup-ply valve 2CV-0795-2 is located in the southwest area'of the room and may receive an inadequate amount of indirect lighting.
It is the AFWS review team's assess-ment that the lighting especially emergency DC lighting is inadequate for the turbine driven AFW pump room as well as the turbine and motor pump control panels, and valves.
The review team requests that the licensee ensures the adequacy of normal and emergency AC lighting, and the adequacy and aiming of emergency DC lighting.
The review team did not observe or check the emergency lighting intensity but notes that the illumination level should be a minimum of 10 foot-candles at the work station to conform to the NRC's criteria for station lighting (NllREG-0700).
54
o D
e
'Q
.,lytt w 3:,, t.p ;
e.
N y,se
.\\.
's\\ Min,s i
d 4 -e W
.. - ~
Nm
~
6 i
,~
.' (
l e
~-
'y '
Cl J
l r.w, A.
I
&%d f e=t b.
I l
JL 8
4 g
\\
\\
^
j 88 b
- ww.w Ncf4h p
l 6
' A T-W bP g
,, /
e..
g i
]
l 1
/
I I.._
r I
a
.2 A
I 1
C l
a il[!1
..:' - WI
- l.-
i l1:\\
- ar g:i
- y.4weis2E I i
g;
-y
-e
.t u
. :4; 3.'. ;
g jT1
...' E..l. E,' 3 ","..
,r--------"
y 1
==%
- v am.
a-1 I
- ; ;[ '
e sm t
W.
I 37sts i
1 l
grge-F3ag l,:
l.' <
l Ot>
W O_ " _ " *..: ;;
4
- .ssa, tas: ~
.., : 3 g
g a
I b
D.,
- h:::b_t ::i r :.
)
--el ["1
~
T
]
1 I
3 n..
9 f : ' a' : PQ i.. _. q.. &.... j ! !. :}.i i... l :. : l' l
- p. s.....
- u :;-
stou
=
rv ljd ~ ii.3Mm t________
g,1
, x t
g Ficure 5-1 Emergency DC Lighting Diagram For The AFW Pumps Vicinity 55
\\
l L
I
'The evaluation team has the following additional observations:
l I
I L
During the AFW system walkdown the staff noted that the degree of equip-j ment and structural cleanliness was less than desirable That is possibly
-f amplified by the dark colors of the walls and floors.
In one case, in order to read a nameplate on a valve limitorque a thick coating of dust and dirt had to be removed from the label.
Dust and dirt may contribute i
to malfunctions of equipment with low tolerance moving parts, or electrical relays and contacts.
The malfunctions of the latter may also be compounded j
by moisture.
I 2
The review team noted that operator access to AFWS equipment for normal surveillance, or for emergency remedial actions is generally poor.
This problem would be more pronounced during stressful conditions, or poor lighting (in case of station blackout).
Examples of this are shown in Figures 5-2, 5-3, and 5-4.
Emergency remedial actions may be greatly hampered by poor access to equipment, especially if compounded by poor emergency lighting.
Therefore, ease of access is of vital importance (see D.3.2 for available time discussion).
3.
To guard against AFW pump steam binding due to hot water back-leakage through the pump discharge piping the licensee checks the discharge piping temperature locally once every shif t.
In order to achieve that, an operator has to climb over equipment or under piping to get to the far corner of the room and possibly lean over other equipment to see the temperature gauge.
This is shown in Figures 5-5, 5-6. and 5-7.
Although this once-a-shift task addresses staff concerns raised in GI-93 with respect to pump steam binding due to hot water backleakage, the current location of the tempera-ture gauge increases the potential of equipment malfunction due to an operator inadvertently stepping on, or bumping into such equipment.
In addition, this may increase the possibility of personnel injury.
The licensee is requested to move the AFW discharge piping temperature display closer to the room entrance so that the operator may avoid entering the room every shift if the only objective is to take the temperature reading.
The licensee stated that AND-2 has not had any backleakage steam binding events.
l 56
The review team noted that at least one' pipe support was loose such that,.
4 if. sufficient force was exerted on that pipe, a pipe crack may develop.
Figure 5-7 shows a loose pipe support in the turbine driven AFW pump room.
This pipe is located in a tight passage way where it may be leaned against by an operator attempting to carry out the surveillance procedure described in item 3 above.
The licensee is requested to ensure the integrity of all equipment supports in the AFW system,.and improve its surveillance program
'to sustain such integrity.
5.
Under certain emergency conditions the only means of decay. heat removal is through injecting water in the steam generators by manually and slowly starting the turbine driven AFW pump using the trip and throttle valve (TTV).
In.that process the operator needs to monitor the discharge pres-sure and possibly the turbine tachometer in order to ensure proper pump operation.
However, the pressure gauge and tachometer are not directly visible from the TTV location.
This may necessitate pump starting in several stages if one operator is assigned this task, since such operator will have to manipulate the TTV then move to check the readings of the gauges.
Alternately, the task may require two operators.
The review team feels that this is an important (last resort in case of station blackopt) remedial recovery action that can be made much easier by properly locating
)
the necessary gauges so that they can be clearly seen from the TTV location.
l The gauges should be clearly visible under the postulated station blackout lighting conditions.
Therefore, the staff suggests that the licensee move and reorient the above gauges, considering the proper emergency DC lighting, i
so-that recovery actions by the operator may be easily carried out.
i 6.
The review team noted that equipment identification (e.g., labelling) is i
i generally not adequate.
While some equipment was clearly marked, most I
labels or nameplates were not easily legible.
The licensee stated that a retagging program is underway to improve equipment identification.
The licensee also stated that the ANO-2 inside-of-containment retagging has been completed, and that the AFW system will soon be retagged.
The AFWS l
team notes that after the system is retagged, verifying that the correct i
tag is attached to the intended equipment is an equally important task.
57
m..
7.
The review' team noted that the licensee used adequate locking devices on j
mar,ual valves in their standby mode (see Figure 5-8)
Th'e licensee stated
'l that all manual valves tha't, if not properly aligned, can divert or block f
i th'e AFW flow are secured in their standby position by chains-and locks.
I The keys to these locks are readily available to the control-room operator.
The licensee has a procedure for a pre-heatup valve position alignment I
(Reference 12) which includes physically checking the locking chains to ensure that they are not cut.
By procedure.the licensee also performs a pre-heatup valve position verification which specifically. instructs that the verification be done by an individual different from that who did the alignment check.
The review team finds this independent verification useful in assuring system readiness.
The licensee also stated that by procedures the steam trap valves are ensured to be unisolated before plant-startup, and the steam lines purged by steam via steam trap bypass. valves every shift to further ensure no condensate in the lines.
8.
The review team noted that the licensee posts some system piping and instrumentation diagrams (P& ids) locally at the equipment location.
While the team did not check the accuracy of the P& ids or whether they are of current revision, it is the team's opinion-that this is a very useful j
practice that tends to reduce confusion and improve equipment identifica-tion.
The review team also noted that the licensee is currently revising the turbine driven AFW pump overspeed trip reset and manual control pro-cedures (Reference 13).
The licensee stated that he intends to post exhibits A, B, and C of that procedure at the turbine driven pump room for quick reference.
With proper consideration of equipment location and lighting, the review team finds that posting of these simple exhibits can be very helpful during any potential recovery actions.
9.
The AFW pumps are located in separate isolated rooms such that a postulated steam line break in the 2P7A pump room will not adversely affect the motor operator of pump 2P7B in the next room.
This pump arrangement addresses staff concerns raised in GI-68 with respect to AFW motor operator environmental qualifications following a steam line break in a pump room.
58
I Q.5.3 Conclusion t.
Based upon its review, the AFWS review team found that the "as built" configuration of the AND-2 AFWS is consistent with the design documentation.
The staff, however, had several concerns as discussed in the evaluation section above.
Based on discussions with.the staff the licensee indicated that it is already taking certain steps to address some of the staff concerns.
Of the several staff concerns raised above, one is of particular significance.
L, This concern is over the ease of access to equipment to carry out manual'reme-dial actions under emergency conditions.
Since the plants capability to safely mitigate transients and accidents depends to a large degree on the operators ability to perform various recovery actions, some of which may be outside the control room, it is the staff's opinion that ease of access to the AFW system equipment is of paramount importance.
Therefore, the staff requests that the licensee develop a " maximum time to access," (MTA) from the control room to each piece of the AFWS equipment that may potentially be exercised during the course
. of an event.
Also, since the atmospheric dump valves are key equipment that may be used in combination with the AFWS for decay heat removal, an MTA should be developed for these valves.
The MTA should be introduced in the operator training program, and actual practice be performed by all operators as a part.
of that training.
MTA training should be introduced in the same context as the
" time window" concept discussed in Section D 3, Emergency Operating Procedures.
In derloping the MTA, the licensee should consider potentially adverse environ-ments (e.g., elevated temperatures due to lack of ventilation from station l
blackout) and emergency lighting conditions.
The licensee should also ensure the availability of necessary tools (e g., ladders or wrenches) that may be used to operate various pieces of AFWS equipment.
The MTA should be determined as the maximum time for an operator to reach a particular piece of equipment and be able to start operating it.
After operating the equipment the AFW flow should be, resumed to the steam generators before their water levels reach the zero level mark.
This will help the plant avoid temporary loss of the secondary heat sink.
1 The staff concludes that, provided the licensee adequately addresses
)
1 staff concerns discussed in this section and in Section D.5.2 above, the AFW i
system as installed, instrumented, and operated addresses staff concerns raised i
59 j
A
.%.g
- i
,. r
.in GI-68 with respect to'AFW motor operator, environmental ~ qualifications follow-
'ing a steam line' break in a pump room,,in GI-1221.b, and c with respect to.AFW -
b interruption.and recovery, and'in. GI-124 inlthat it is cond0cive to safe and I
1reliableoperationduringaccident'or'transientconditions. !As indicated in '
Section A, the lice.nsee provided ~ satisfactory responses to these concerns,' and ~
-therefore, the staff considers the issues: identified during-the walkdown to be:
resolved.
D. 6 -
Training D. 6. I'
-Approach The.AFW team reviewed the training program to establish an understanding.of.the licensees commitment to maintain.and enhance.the proficiency level'of its main-
~
tenance, operations and engineering staffs with respect to normal, and-emergency operation the AFW system.
The-team review consisted mainly of interviews with-training instructors and staff members.
The team also inspected,some: training-documentation.
This review does not address the completeness of the training program and'should L
not be considered as an acceptance review.
D. 6. '2 Evaluation Prior to'being hired by Arkansas Power and Light Company (AP&L) the prospective maintenance employee is screened for aptitude and trainability.
In addition the prospective employee's educational background must include one or more of the following:
Vocational-Technical School, Tecnnical School, or college.
The utility assigns new hires as entry level trainees.
A person would have to be exceptionally qualified to be hired above an entry level position.
L l
L Newly hired maintenance personnel must take the AP&L training program.
This program consists of five years of both schooling and on-the-job (0JT) training.
The program also includes continuing training and refresher courses. The training program, however, is not strictly geared to the AFWS but in general to all plant systems and equipment.
60 l
.,The entry level personnel undergoes ~four months of. training after he is hired.
-During these four months, he attends a' company-owned offsite training school.
- This school ~ introduces the trainee to the basic courses (mathematics,' mechanics, thermodynamics, pumps, controls, etc.). The entry level personnel has the option of " testing out" or qualifying for the individual courses.
To " test out," the trainee takes a test in the course subject matter, if he passes the test, he gets credit for that course and does not have to take the course.
Some of these courses have been transferred to the onsite training facility.
Upon completion of the entry-level training course, the trainee becomes an apprentice trainee and selects an area of specialization:
rigger,-steam fitter / welder, electrician, mechanic, etc.
The apprentice trainee undergoes four years of training.
During these four years, he attends a company-owned on-site training school, which provides the trainee with basic-skills training for the specific craft he has chosen.
This training provides some hands-on experience in disassembling and reassembling equipment similar to that found at the plant.
The balance of the four years is spent at the plant as on-the-job training.
The on-the-job training consists of a check-off list of typical jobs and duties which the apprentice trainee must complete prior to advancing to the next level.
The check-off list starts out with general items and becomes more specialized as one progresses.
Upon completion of the aoprentice trainee program, the trainee becomes a journeyman.
The journeyman course includes required schooling and on-the-job training over a minimum one year period.
Upon~ completion of the program the journeyman becomes a mechanic, electrician, etc.
Both the apprentice trainee and the journeyman courses are INP0 certified, and take full advantage of manufacturer material.
In addition to the formal training courses, the ANO Unit 2 Maintenance Training Department has a continuing / refresher training program.
This program allots approximately 25% of the total yearly man hours for continuing education during a refueling outage year, and 15% to 20% during a non-refueling outage year.
The program makes use of plant training facilities, company training facilities 61 I
i
i t
J and manufacturer training programs. 'Its purpose is to maintain and enh'nce the a
)
skills of the maintenance personnel.
The licensee informed.the review team.
that part of.the new parts and component procurement process will be to negot-iate the. inclusion of vendor' training (maintenance and troubleshooting)'as
{
part of the purchase contract.
)
By inspection of training documentation, interviews, and a partial walkdown of the training facility, the review team found the maintenance training program to be thorough and detailed.
It makes extensive use of manufacturer materials, technical bulletins, sales brochures, technical manuals and demonstration models, as well as on-the-job training.
Since operator licensing is a regulated activity and has been extensively considered by the NRC, the evaluation team spent a minimum amount'of time in the operator training area.
' ANO Unit 2 management emphasized the licensee's commitment to training, and stated that it encouraged the plant engineers and plant superintendents to maintain their reactor operator (RO), and senior reactor operator (SRO) licenses current, A.few select individuals in this group were required by j
company policy to maintain current licenses.
However, due to the amount of required training, testing, and serving on control room shifts (approximately 25%-30% of the yearly man hours), it was stated that it was difficult for many ex-R0s and ex-SR0s to maintain the license and perform there assigned regular duties.
Thus, many of these individuals allow their licenses to lapse.
The staff does not encourage this approach since it lessens the level of awareness of plant operation and systems interrelations.
1 D.6.3 Conclusions The staff finds that the licensee's commitment and implementation of the training programs as discussed above promotes good understanding of plant operation in general, and in particular may enhance the licensee's ability to minimize system malfunctions and improve the likelihood of recovery once a malfunction takes place.
The staff, therefore, concludes that with resolution 62
'l
?
of the concerns raised in Section D.5, and other sections, the ANO-2 training program contributes to and enhances the plants capability for decay heat removal.
D.7 Operating Experience and Reliability Analysis D.7.1 Approach' I
h The staff reviewed several documents including the Licensee Event Reports (LERs)
{
and Nuclear Plant Reliability Data System (NPRDS) files pertinent to AND-2
{
(References 14 and 15).
The staff also discussed with the licensee the licensees statistical analysis relative to equipment failures.
D.7.2 Evaluation The staff searched the LER and NPRDS files for the period of 1981 through 1985 for data pertinent to the AND-2 AFW System (References 14 and 15).
The search revealed a substantial number of discharge valve failures and several failures in suction valves, steam admission valves to the turbine drives for the AFW pump, turbine driven pump overspeed, and pump packing.
The licensee replaced some of the discharge valves, and stated that the rate of valve failures has significantly decreased.
Some valve failures continued to occur as of late 1985, the period covered by this data search.
In nine instances the failures disabled or degraded an AFW train.
However, all of these were readily recover-able by an_ operator at the equipment location.
Discharge valve failures par-tially disabled an AFW train.
These failures were all readily recoverable at the equipment location.
Only one instance was found that is a precursor to a nonrecoverable AFW train failure.
That was an excessive packing leakage which resulted in the pump bearing oil being contaminated by the leaking water.
The licensee conducted a statistical analysis for AND-2 AFW train failures and component failures for the period of 1980 through 1986.
This analysis shows a rapidly decreasing failure rate trend (e.g., from 16 single train failures in 1980, to 8 failures in 1981, to zero in 1982 and subsequent years).
For other component failures, the licensee shows a similar trend, from 20 in 1980, to zero in 1983 and later.) The staff believes that this trend in reduced number of failures is significant, and is indicative of a substantial licensee effort 63
t 4
4
- to' improve equipment performance.
Most of the equipment-failures are j;
recoverable given an easy access route and sufficient time before reactor coolant system degradation (See Sections D.3 and D.5 for discussion of time av'ailable for action, and of equipment accessibility).
Since reactor scrams place the plant in a condition where decay heat must be removed,'such scrams constitute potential challenges to the AFW system.
The licensee's operating experience relative to unscheduled' automatic reactor scrams and associated challenges to the AFWS, shows a promising trend, Although-AND-2 had a scram rate of 24* scrams / year in 1981'the rate has general.ly declined since then to 5 scrams / year in 1986.
The plant had 8 unanticipated scrams'in 1985.
This is about double the national average for that year (4.3 scrams / plant year, Reference 16).
However, the licensee appears to be committed to reducing the plant ~ scram rate through its trip reduction program.
The trip reduction program is directed at minimizing the causes for reactor trips. e.g., reactor protection (including the core protection calculator) anomalies, main feedwater upsets, and turbine generator control-malfunctions.
If the above improvement rate continues, much reduction in the challenge rate of the AFWS will result.
A survey.of the f ailure rate history of the emergency' diesel generators (DGs) on all operating nuclear power plants in the period of 1983 through 1985 (Referen'ce 17) shows that ANO-2 emergency diesel generators have an average failure rate of 0.016 and 0.02 failures per demand, and meet the reliability criterion identified in the proposed Regulatory Guide, " Station Blackout."
This Regulatory Guide has been issued for comment and identifies a DG relia-bility acceptance criterion of no more than 0.025 failures / demand for the ANO-2 diesel generator configuration.
- The licensee attributed most of the scrams to the CE core protection calculator (CPC), which is currently being improved.
64
+
a
}Th'e -licensee l has performed an AFtf5 reliability analysis.
Below is a summary M
of the' licensee's' analysis.
After performing a benchmark analysis against the NUREG-0635 (Reference 3)' results, the licensee conducted two additional an$ lyses using the same model but with different failure rate data.
These analyses are.
referred to as " Bayesian Update" and "Best Estimate" analyses.
The results are provided below for the loss of feedwater (LOFW) and the loss of offsite j
power (LOOP) events.
~,
1 Benchmark Analysis 1.1E-3 2.2E-3 Bayesian Update 9.9E-4 2.1E-3 Best Estimate 6.3E-5 3.3E-4 i
)
The failure rate data used for the benchmark analysis is the same as that used for the NUREG-0635 analysis.
The failure rate data used for the Bayesian Update analysis was obtained by combining plant-specific data with industry generic data.
The failure rate data used for the Best Estimate analysis was obtained from'the generic data base and additionai modeling assumptions.
The above analyses do not account for:
(a)-operator action to recover faulted conditions or to use alter-nate equipment; (b) support system failures (other than ac power); (c) AFWS failure due to control system faults; or (d) common cause contributors to system unreliability.
Consideration of these factors could affect the reliability esti-mate in different ways.
The AFWS review team places significant weight on each of the above factors and suggests that the licensee complete its reliability analyses.
The licensee should consider implementing those measures identified in the analyses that will enhance the AFWS reliability.
The above estimated AFWS reliabilities may be combined wi.th the frequencies of the LOFW or LOOP to arrive at an estimate of the expected frequency of AFWS j
failure when it is needed for decay heat removal.
AND-2 has experienced 12 LOFW events in the period of 1981 through 1986.
While this is a high rate of occurrence the licensee stated that all events were readily recoverable.
- Also, the rate of LOFW decreased steadily from 5 events in 1981 to no events in 1986.
The plant experienced no LOOP events during the same period.
In order to 65
\\
h 3
e estimate the frequency of failure of.AFWS'when needed the' staff assumed a f requency of 0.646 non-recoverable LOFW events per reactor year.
This was estimated by Duke Power Company.for Oconee, Unit 3 (Reference 18) and is believed to be a reasonable-estimate for other plants.
In the'following' calculations the plant-specific bayesian update'results were used.
Number of AFWS failures when needed=
0.646 (LOFW~ events / year) x'25.4 (years-assumed remaining operation life)*
x 9.9E-4 (failure / demand)= 0.016 Therefore, there is a 1.6% chance that during the remaining life of the plant-it will experience a total loss of main and auxiliary feedwater.
In a case of
~ total-1oss of.feedwater the operator must successfully initiate the " feed-and '
bleed" mode of decay heat removal or risk fuel failure and radioactive releases.
The staff estimates the risk to the public as a result of total loss of main-feedwater and auxiliary feedwater systems to be 1480 person-rems.
If the AFWS' and back-up systems reliability is increased to IE-4 failures / demand as per the Standard Review Plan Section 10.4.9, Auxiliary Feedwater System, risk to thej public would be decreased by 1330 person-rems.
In light of this risk reduction the staff believes.that the licensee should provide an alternate source of water to_the steam generators such that the reliability of decay heat ~ removal means-may be enhanced.
The staff believes that the addition of the alternate means of water delivery to the steam generators will enhance the~AFWS reliability to.the IE-4 failures / demand criterion.
Furthermore, the licensee should emphasize, in its operator training program, the graveness of not initiating " feed-and-bleed" if a total loss of feedwater is suspected.
Training on recognition and mitigation of such an event should also be emphasized.
80% of_the remaining calendar plant life of 31.7 year 66
s D.7.3
' Conclusion 6'
Based on staff review and observations, and based on the licensee's statements, the staff concludes that the licensee is actively pursuing improvements in the AFW' system reliability and availability.
The licensee's statistical analysis conducted for the last six years for the ANO-2 AFWS-related failures shows a rapidly < decreasing failure rate trend with no significant' failures since 1983' i
This indicates a substantial improvement in equipment performance.
As discussed above.the majority of equipment failures, over a five year period.
from 1981 through 1985, were determined to be readily recoverable at the equip-ment location.
Therefore, the staff believes that ease of access to:various AFWS equipment is of paramount importance to the overall system reliability and availability.
Ease of-access requires adequate normal and emergency lighting, adequate communications, clear and legible equipment-identification, and avail-ability of tools that may be necessary to operate such equipment.
These issues are discussed in detail in Section D.5 above.
Although significant improvement in valve performance has resulted over the last few years, the licensee's adoption of the M0 VATS methodology for valve setpoint setting (see Section D.2.2) is expected to further improve these valves performance.
The licensee's E0Ps explicitly and clearly instruct the operators, if the AFW flow can not be established, to attempt to reestablish the MFW flow or, if that is unsuccessful, to rely on the condensate pump flow.
The E0P sections provide guidance and precautions about degraded modes of equipment operations, if neces-sary.
If all MFW and AFW are not readily recoverable, the E0Ps instruct the operator to initiate the " feed-and-bleed" mode of decay heat removal.
Although the staff has certain concerns regarding operator initiation of " feed-and-bleed" as discussed previously, the staff believes that ANO-2 " feed-and-bleed" system with its 3-inch flow path with two motor operated valves in series, enhances the decay heat removal capability.
This flow path is sufficiently large to depressurize the reactor coolant system to allow flow from the high head safety injection pumps.
However, while this provides additional capability for 67
4.
4 y
, decay heat removal the overall decay heat removal system reliability remains
.less than adequate.
This is due to the large uncertainties in.the operators, use of " feed-and-bleed" as mentioned previously'which limit its consideration as a last resort for decay heat removal rather than an. adequately reliable compensatory decay heat removal feature to justify a larger AFWS unavailability.
Therefore, the staff believes that an alternate method of providing water to the steam generators is needed so that the overall decay heat. removal. system
-reliability may be enhanced.
The alternate water source for AND-2 could use existing equipment such as an interconnection to.the AND-1 AFWS, or could incorporate a separate startup feedwater pump.
-As discussed above, the plant's rate of unanticipated automatic reactor scrams is high, however, it is steadily decreasing.
Also, the licensee has had a relatively low failure rate of its two emergency diesel generators.
Based on the above, the staff concludes that, upon resolution of the staff concern identified in Section A of this report for an additional method of secondary side decay heat removal capability, the ANO-2 AFW system is properly designed, instrumented, maintained, and operated, and that the licensee has an adequate E0P, and training program for the AFW system.
The st'aff, therefore, concludes that, upon resolving the above concern, the AND-2 AFWS will be sufficiently reliable.
68
t.
Appendix A References 1.
ANO-2 FSAR Section 9.2.1, Service Water System., 10.3, Main Steam Supply j
System, 10.4.9, Emergency Feedwater System 2.
Plant Technical Specifications Section 3.7.1.2, 3.7.1.3, 3.8 1.1 3.
NUREG-0635, " Generic Evaluation of Feedwater Transients and Small Breaks b
Loss of Coolant Accidents in CE Designed Plants"Section X.1, pages X-2 through X-15, AND-2 Emergency Feedwater System.
4.
ANO-2, II-E.1.1 Safety Analysis Reports dated November 10, 1980, May 12, 1981, February 3,1982, March 25,1982, and November 18, 1983.
5.
NUREG-1212, " Status of Maintenance in the U.S. Nuclear Power Industry 1985," Volume 2, June 1986 6.
Inspection Report No. 50-313/86-01, Safety System Functional Inspection of AND, Unit 1 AFWS, dated March 31, 1986 7.
Emergency Operating Procedure, E0P 2202.01, Rev. 2 8.
Annunicators 2K04, 2K05, 2K06, and 2K07 Corrective Actions 9.
Drawings audited for conformance to IEEE Standard 279 and NUREG-0737 Item II.E.1.2.
Ti_tle DWG. No Station Single Line Diagram E-2001 Single Line Relay Diagram E-2002 Single Line Relay Diagram (6900 Volt)
E-2003 Single Line Relay Diagram (4160 Volt)
E-2004 Single Line Relay Diagram ESF E-2005 (4160 Volt)
Low Voltage Safety System E-2006 Single Line Relay Diagram (480 Volt)
E-2008 Schematic Diagram (125 Volt DC)
E-2085 Functional Logic Diagram EFWS E-2403 Functional Logic Diagram Aux Cooling E-2406 Water 69
m M
Title DWG No.
M2202 Condensate & Feedwater (P&ID)
M2204 Steam Generator Secondary System (P&ID) M2206 1
EFW Turbine MOVs 2CV-1000-1 &
E229 2CV-1050-2 EFW Pump Suction MOVs E2296 EFW Discharge. Valves E2300 EFW Condensate Suction MOVs E2301 Emergency Power Supply for Control E2420 Room AC System l3 EFW Turbine Driver Steam Isolation E2443 Valves 10.
Maintenance Procedures 1403.160 for model SMB-000, and 1403 161 for model SM8-00 11.
System.0perating Procedure 2107.04, "DC Electrical System Operation, Supplement VI" 12.
Plant Pre-heatup and Pre-critical Checklist 2102.01, Rev. 23.
13.
Emergenr.y Feedwater System Operating Procedure OP 2106.06, Exhbits A, 2P7A Turbine Overspeed Trip Reset., B, Drawing., and C, Manual Control of 2P7A.
14.
F. Hebdon to T. Speis, Preliminary Review of AFW Related LERs, April 18, i
1986.
15.
F. Hebdon to T. Speis, Review of AFW Related LER and NPRDs Data, July 25, 1986.
16.
INPO 86-012, " Unplanned Automatic Scrams in U.S. Electric Generating Units in 1985," April 1986.
17.
NSAC-108, "The Reliability of Emergency Diesel Generators at U.S Nuclear Powe. Plants in 1983 through 1985," September 1986.
18.
NSAC-60, "A Probabilistic Risk Assessment of Oconee Unit 3," June 1984.
1 1
1 4
70 L _ _ _ _ _ ___ _ ___ _ _ ___ _._ _ _
s.1 aa.
?*
Appendix _B 8
Individuals involved in the AFW System Review NRC:Personne1' AFWS Evaluation' Team Paul Norian, Team Leader, NRR Sammy Diab, Task Manager, NRR-Norman Wagner, NRR Robert Giardina, NRR fl Joseph Joyce, NRR L
l Robert Lee, ANO-2 Licensing Project Manager Charles Harbuck, Resident Inspector Region IV Willim Johnson, Senior Resident Inspector, Region IV Arkansas Power and Lioht (AP&L) Personnel
'Ted Enos,' Manager of Nuclear-Engineering _and Licensing, AP&L Charles Turk Supervisor of Nuclear Engineering, AP&L Bill Converse, Supervisor of Plant Performance, AP&L
'Kurt Taylor, Supervisor of Operational Technical Support, AP&L Jason Remer, Maintenance History Supervisor, AP&L Kenny Coates, Mechanical Maintenance Supervisor, AP&L Larry Taylor, Plant Licensing Engineering, AP&L Jerry Peter, Operational Technica1' Support, AP&L David McKenny, Reactor Operator, AP&L Randal Golden, Senior Reactor Operator, AP&L
-Bill Craddock, Reliability Analysis Group, AP&L l
I-I 71
__