ML20246L467
| ML20246L467 | |
| Person / Time | |
|---|---|
| Site: | Comanche Peak  |
| Issue date: | 08/31/1989 |
| From: | William Cahill TEXAS UTILITIES ELECTRIC CO. (TU ELECTRIC) |
| To: | NRC OFFICE OF INFORMATION RESOURCES MANAGEMENT (IRM) |
| References | |
| TXX-89628, NUDOCS 8909060334 | |
| Download: ML20246L467 (26) | |
Text
_- , . _ _ _ _ _ -
'h
- e _
22 " 1:2 '
Log # TXX-89628 l' - File # 10010, 908.3
[ :L :: 909.4, 918.040
' 227 ::: Ref. # 10CFR50.34(b) 1UELECTRIC August 31. 1989 WilHam J. Cahul Jr.
Execurwe Vice Presidmt U. S. Nuclear Regulatery Commission Attn: Document Control Desk Washington, D. C. 20555
SUBJECT:
COMANCHE PEAK STEAM ELECTRIC STATION (CPSES)
DOCKET NOS. 50-445 AND 50-446 ADVANCE FSAR SUBMITTAL REMOVAL OF AUTOMATIC SAFETY SYSTEM INOPERABLE INDICATION (SSII) FOR DIESEL GENERATOR ROOM FANS Gentlemen:
-This letter provides an advance copy of changes to be included in a future FSAR amendment dealing with the disconnection of the automatic Safety System Inoperable Indication (SSII) for the Diesel Generator Room Fans.
The SSII for the f ans will require manual operator input to provide indication of the fans ability to start upon receipt of a diesel generator start signal In order to facilitate NRC staff review of these changes, the enclosure is organized as fellows:
- 1. Draft revised FSAR pages, with changed portions indicated by a bar in the margin, as they are to appear in a future amendment (additional pages immediately preceding and/or following the revised pages are provided if needed to understand the change).
- 2. Line-by-line description / justification of each item revised.
- 3. A copy of related SER/SSER sections.
4 An index page containing the title of " bullets" which consolidate and categorize similar individual changes by subject and related SER section.
- 5. The line-by-line description / justification for each item related to the " bullet" which has been screened as a group 1 or 2 item or a group 3 or 4 item which impacts the existing SER/SSER's. (The discussion of these groups is contained in TU Electric letter TXX-88467 dated June 1, 1988.)
8909060334 890g3; '
I
{DR ADOCK 05000445 PDC k M Mnh Ohve Street LB M Dallas, Texas 75201
.y.
4 .
TXX-89628' August 31, 1989 l.
Page 2 of 2 L
l
- 6. The bold / overstrike version of the revised FSAR pages referenced by the description / justification for.each item described above.
The bold / overstrike version facilitates review of the revisions by -
highlighting each addition of new text in bold type font and over-striking with a slash (/) the portion of the text that is' deleted.
The audible and visible alarm on outside air temperature discussed in this advance amendment will be installed by November 1,1989, which is prior to any anticipated freezing weather. Direction of operator action will be by an.-
l _
alarm response procedure _ appropriate for the alarm.
1
-If you have any questions regarding this submittal please contact Joe Harnden at (214) 812 8226.
Sincerely.
1h* ,
William J. Cahill, Jr.
3 l-By: 44 -
c Roger"D. Walker Manager, Nuclear Licensing WJH/vid
-Enclosure c -- Mr. R. D. Martin, Region IV Resident Inspectors, CPSES (3) l.
I' l
l C1_______________ _ _ _ _ _ . . _ _ . . _ _ _ _ _ _ _ _ ._ _i
Enclosure to TXX-89628 August 31, 1989 Advance FSAR Change Rega. ding the Removal of Automatic Safety System Inoperable Indication for Diesel Generator Room Fans Item 1 Draft revised FSAR Pages pg. 2 thru 6 Item 2 Description / Justification pg. 7 thru 11 Item 3 Related SER/SSER Pages pg. 12 thru 15 Item 4 Index Page Containing the pg. 16 Title of " Bullets" Item 5 Description / Justification of pg. 17 thru 19 Screened Items Item 6 Bold /0verstrike Version of pg. 20 thru 24 Revised FSAR Pages Pg. I of 24
'Eccicstra't3 TXX-89628- CPSES/FSAR Pagi 2 of 24-r 11'. Compliance with IEEE 336 [243' and NRC Regulatory Guide 1.30 [63 6
- ?
0040.56-Quality-Assurance Program for the CPSES onsite Class IE AC power- 6 system is based.on the requirements of IEEE 336 and Regulatory Guide l'30. For details see Chapter 17 and Appendix 1A(B).
0040.9
- 12. Compliance with' NRC Regulatory Guide 1.47 [9] 6 0040.9 The surveillance of each'on-site Class IE AC power system 6 operability status is based on the requirements of Regulatory Guide 1;47, augmented by Branch Technical Position ICSB 21, as described herein:
0040.9 A system IcVel safety system inoperable indication (SSII) is DRAFT-provided for each train to indicate if the on-site power source is unavailable. This indication is activated on:
A. Diesel generator remote-local-maintenance switch in local DRAFT or maintenance position DRAFT B. 6.9kV generator breaker control switch in the lockout 51 position 51 C. Operator manual action DRAFT' D. Service water system inoperable DRAFT E. Loss of 125 volts DC DRAFT F. Diesel generator disabled DRAFT 8.3.1.2.2 A'nalysis of Uninterruptible Power Systems Class IE 118-V uninterruptible AC Power Systems, which provide power to the Class IE instrumentation and control circuits, are designed to the same criteria as those for the onsite Class IE power system.
Distribution panels and equipment they feed as a minimum meet the 27 requirements of GDC 17 [1] and IB [1], NRC Regulatory Guides 1.6 [2),
and IEEE 308 [20). 344-1975 [26] and 384-1974 [313.
8.3-57 Draft Version a
SEnc10sure to TXX-89628' CPSES/FSAR Pagy 3 of'24-To be certainlthat the ventilation fans are operating when the die',els 66 are' operating, the required number of fans in each diesel generator
. compartment start automatically on receipt of diesel generator start signal. During normal plant operation, the plant ventilation is operated manually.
Monitoring of the conditions in the diesel rooms'is accomplished with the following Control Room instrumentation:
- 1. High diesel room temperature alarm
- 2. Ventilation fan motor tripped alarm Since.the diesel. generator building ventilation (DGBV) fans are DRAFT scheduled for annual maintenance, manual initiation of the diesel generator inoperable indication is provided, in accordance with
'R. G. 1.47.
Fans are powered,from the same safety-related electrical bus as the l ,
diesel that is being ventilated.
The reliability and safety of the DGBVs is ensured by the following 76 features:
- 1. Redundancy in equipment and power supplies enables the system to 76 satisfy a single active component failure without loss of functions.
- 2. Instrumentation and controls which incorporate audible and visual DRAFT alarms in the Control Room facilitate continuous monitoring of system performances and alert the operator to system malfunctions.
9.4C.I.1 Testino and Insoection Shop inspection and testing are performed for equipment, including *6 heating and controls.
Draft Verrion 9.4C-2
.<J
e -e:
' LEnclosura to1TXX i$9628 CPSES/FSAR Page 4jr.f 2A per unit) alarm if any. trouble develops. The trouble alarm does not differentiate.if the trouble renders the-D-G inoperative for auto start.in' emergency..
L Additionally, the Diesel Generator Power Window (DG Pwr) ' DRAFT on the Safety System Inoperable Indication Panel (see
.Section 8.3.1.P.1) is activated.by those conditions that render the D-G inoperable for auto start (see section a.
below). The same SSII window is also activated if' 66 the following conditions exist:
- 1. Loss of 125 volts DC DRAFT
- 2. Service Water System inoperable- DRAFT
- 3. 6.9KV generator breaker control switch in lock-out DRAFT position
- 4. Diesel generator remote-local-maintenance switch DRAFT' in local or maintenance position
- 5. Operator manual action DRAFT Although none of the conditions listed above are DRAFT electrically interlocked with the D-G,- 1't is recognized -
that they may render the D-G inoperable or are otherwise important enough to advise the operator of;its -
existence,
- a. The condition that renders the D-G incapable of.
responding to an automatic emergency-start signal are:
- 1. 125V DC not available
- 2. Overspeed trip not reset
- 3. Differential lock-out relay not reset 0040-18
- - - -- - - . - - - - - - - - - - - - - - - -- = -
g--
na 1*
M Encitsure to TXX-89628 7 Pag 2 5 of 24-CPSES/FSAR'
- a
- 4. Remote-Local-Maintenance (R-L-M) switch in-
' local or maintenance mode
- 5. Starting air pressure low
- 6. Diesel generator breaker CR HSP Selector l68 Switch in HSP position-
- b. The.present wording on the three annunciator windows in the control room for each alarm in (a) above is:
"DG trbl" (trouble) for the D-G No. 1. "DG trb1" DRAFT
.for D-G No. 2, and " Diesel Generator IEG1 or IEG2 switch not in auto" common for both D-G' units.
- c. The remaining local alarms. other than those in (a) above (approximately fifty) such as lube oil temperature high, etc. also cause the same D-G trouble window to activate.
- d. Presently, all the conditions that will render the D-G inoperable, for an auto start in an emergency.
are annunciated in the control room, though not exclusively on a separate annunciator window:
~
However, the two SSI! windows "DG Pwr" (Power). DRAFT one per D-G, are the two points in the control room which would indicate the inability of a diesel generator to start, run and to load.
- e. We are implementing the following modification:
Instead of three alarms stated in item (b).
increase the number of D-G annunciator windows to 0040-19
} , ,g.: $ ...
.,. y
- Enclosura to TXX-89628 h ' Pag] 6 of.24 CPSES/FSAR
- four, with engraving as follows
h-l
- 1. DG1 disabled DRAFT
- 2. DG2 disabled DRAFT
~
- 3. DG1 trbi DRAFT
- 4. DG2 trb1 DRAFT l le- ,
As implied by the proposed engraving windows 1 and 2 will only advise of the disabled condition of a D-G for auto start in an emergency. Windows 3 and 4 will 20 indicate all troubles, including those that disable the D-G. The safety system inoperable indication "DG Pwr" DGAFT will be activated by the conditions previously described.
Q040-19a
-i
4 dhelervra to TXX-89628L CPSESL FSAR Af8ENDMENT yPasa7ef;24j DETAILED' DESCRIPTION LFSAR Page j
- q. -
(as amanded) Group Description E
kb 8.3-57 '3 . Corrects the description of Safety System Inoperable '
j Indication-(SSII) to be consistent with TSAR'Section.
L 0&R'040.9 and asa built' plant.
Correction: '
. .r
,m - The discussion is clarified to specifically mention-f SSII. The diesel. generator remote-local-maintenance-.
switch description is corrected.- This input goes toi both the SS!! alarm and DG disabled alarm if.in' local or' maintenance position. The SSII also receives an input from'the diesel generator disabled alarm-(this l
alarm results,from those conditions that render the diesel' incapable of responding to an automatic tn emergency start signal).
75AR Change Request Number: 89-590.1 1 Related SER Section: 8.3.1
, .SER/SSER Impact: No 8.3-57 2 Revises the description of Safety System Inoperable Indicatiun'(SS!!) by deleting "Any diesel generator room cooler control switch in lockout position".
Revision:
Based on outside temperature readings, selected diesel generator (DG) room fans may be disabled via their control room control switch to ensure room design temperatures are maintained during winter months. The l- outside air temperature will have audible and visual L alarms in the Control Room to notify the operator to take action to disable and restore the DG room fans as required based on outside air temperature. Also, a -,
j' reading of the outside air temperature is available to the operator via the meteorological tower inttru- Llj mentation. The Safety System' Inoperable Indication ' ld (5511) for the>0G room fans is being disconnected from :l the control switch and converted to a manual operator input, since the disabled fans would otherwise produce a false alarm signal on the SSII panel which could mask other valid input alarms.
The'DG room fans are tested and maintained on an annual basis. Reg. Guide 1.47 lists 3 criteria which, if met, require the design of automatic indication for commonly expected conditions. One of these criteria, which is listed in Section B.2 of Reg. Guide I.47, states that the expected condition (by which a safety-related system can be completely or partially rendered inoperable) can be reasonably expected to occur more frequently than once a year. Since the DG room fans ,
are tested and maintained "once a year", the !
requirement for automatic indication (SSII) is j unnecessary.
Additionally, there is control room indication r I L _ . _ _ _ _ _ _ _ _ _ - _ _ _ _ _ _ - _ _ _ - _
.A
r of E5" .. . ~
f) h"[f [ CPSES FSAR AMENDMENT DETAILED DESCRIPT70N FSAR Page-
'(as amended) Group Description provided which shows the operator the availability of
~the fans. 'The status lights by the control hand-switches, together with the position'of the switches, indicates whether the-DG room fan is in~" auto" and is capable of starting upon the receipt of a diesel L generator start signal or is lockei in "stop" (all lights out) and will not allow the. fans to start upon a diesel generator start signal.
L FSAR Change Request Number: 89-t10.2 L
Related SER Section: 8.3.1 SER/SSER Impact: No 9.4C 2 Revises the description of the Diesel Generator (DG) a Root Ventilation System to identify that the Safety System Inoperable Indication (SSII) will be manually.
operated for the DG room fans.
Revision:
Based on outside temperature. readings, selected. diesel i generator (DG) room fans may be disabled via their-control room contrci switch to ensure room design temperatures are maintained during winter months. The outside air temperature will have audible and visual alarms in the Control Room to notify the operator to take action to disable and restore the DG fans ss required based on outside air temperature. Also. a reading of the outside air temperature is available to the operator via the meteorological tower instru-mentation. The Safety System Inoperable Indication (SSII) for the DG rooms fens is being disconnected from the control switch and converted to a manual operator input, since the disabled fans would otherwise pr.oduce a false alarm signal on the SSII panel which could mask other valid input alarms.
The DG room fans are tested and mtJntained on en annual basis. Reg. Guide 1.47 lists 3 criteria which, if met, require the disign of automatic indication for comnonly expected conditions. One of these criteria, which is listed in Section B.2 of Reg. Guide 1.47, states that the expected condition (by which a safety-related system can be completely or partially rendered inoperable) cen be reasonably expected to occur more a frequently than once a year. Since the DG room fans are tested and maintained "orece a year", the requirement for automatic indication (SSII) is unnecessary.
Additionally. there is r.ontrol room indication provided which shows the operator the availability of the fans. The status lights by the control hand-switches, together with the position of the switches, indicates whether the DG room fan is in " auto" and is capable of starting upon the receipt of a diesel
- fs e:.
89628 9 "
, CPSES FSAR AMENDMENT LDETAILED DESCRIPTION 4
- ,c JF,$AM Page 1111_ amended) Gr0MD De5CriPtiOn generator! start signal' or is locked in "stop" (all
-lights'out)'and will not allow the fans to start upon a diesel. generator start signal.: a FSAR Change Request Number::89-590.3 '
Related SER Section: 9.4.5 -
i SER/SSER Impact: .No ^ '
n, .
y
- 0&R 040 14 Clarifies the discussion regarding:the Diesel. Generator-(DG)_ Power Window on the Safety System Inoperable Indication (SSII) panel by replacing the FSAR Section 7.1.2.6' reference with FSAR Section 8.3.1.2.1. 93 Cisrification:'
FSAR 8.3.1.2.1 more appropriately describes the SSII q associated with the DG Power Window as compared to the i general _ discussion of the overall SSII system in FSAR j 7.1.2.6. a FSAR Change. Request Number: 89-590.4 a Related.SER Section: 8.3.1.
SER/SSER Impact: No $
a q
O&R 040-18 4 Clarification:
Clarifies which conditions render the diesel generator incapable of responding to an automatic emergency start signal by referencing'"section a." of the O&R Response.
FSAR Change Request Number: 89-590.5 Related SER Section: 8.3.1 SER/SSER Impact: No Q&R 040-18 3 Corrects the description of Safety System Inoperable Indication (SSII) to be consistent with FSAR.Section 8.3.1.2.1. and as-built plant.
Correction:
The diesel generator remote-locel-maintenance switch description is corrected. This input goes to both the SSII alarm and DG disabled alarm if in local or maint-enance position. The SSII.is also activated by manual initiation of the backlighted pushbutton used for SSII display as well as upon loss of 125 VDC. -The discuss-ion on conditions electrically interlocked is corrected q' for the above changes. '
FSAR Chance Request Number: 89-590.6 Related SER Section: 8.3.1 SER/SSER Impact: No
.0&R 040-18 2 Revises the description of Safety System Inoperable Indication (SSII) by deleting "Any D-G room cooler switch in the lock-off position".
Revision:
R_________.___i__.__.__ __.___.__m_i._____ __ _.a
Q EtIcitdury to ITXX-89628 - ,CPSES'FSAR AMENDMENT
~Paga 10 cf 24
. DETAILED DESCRIPTION q u FSAR Page tas amended) Group Description-Based on outside-temperature readings, selected diesel-generator (DG) room fans may be disabled via their control room control switch to ensure room design temperatures are maintained during winter months. The outssde air temperature will have audible and visual alarms in the Control Room to notify the operator to take action to disable and restore the DG room fans as required based on outside air temperature. Also, a reading of the outside air temperature is available to -
-i the operator via the meteorological tower instru-mentation. The Safety System Inoperable Indication (SSII) for the DG room fans is being disconnected from the control switch and' converted to a manual operator input, since the disabled fans would otherwise produce a false alarm signal on the SSII panel which could mask other valid input alarms.
The.DG room fans are tested and maintained on an annual basis. Reg. Guide 1.47 lists 3 criteria which, if ' met, require the design of automatic indication for-commonly expected conditions. One of these criteria, which is listed in Section B.2 of Reg. Guide 1.47, states that the expected condition (by which a safety-related system can be completely or partially rendered ,
inoperable) can be reasonably expected to occur more frequently than once a year. Since the DG room fans are tested and maintained "once a year", the requirement for automatic indication (SSII) is unnecessary.
Additionally, there is control room indication provided which shows the operator the availability of the fans. The status lights by the control hand-switches, together with the position of the switches, ,
indicates whether the DG room fan is in " auto" and is capable of starting upon the receipt of a diesel generator start signal or is locked in "stop" (all lights out)-and will not allow the fans to start upon a 1 diesel generator start signal.
FSAR Change Request Number: 89-590.7 Related SER Section: 8.3.1 '
SER/SSER Impact: No O&R 040-19, 19a 4 Correction:
Corrects the wording provided on certain diesel generator (DG) annunciator windows as well as the two Safety System Inoperable Indication (SSII) windows by providing the appropriate abbreviations associated with the windows instead of the full spellings.
FSAR Change Request Number: 89-590.8 Related SER Section: 8.3.1 SER/SSER Impact: No
t TXX-89628~
CPSES FSAR AMENDMENT DETAILED DESCRIPTION s ..
H
[SARPage (as amended) Group Description
'0&R 040-19 4 Clarification:
Clarifies that there is one Safety System Inoperable Indication (SSII) window for each diesel generator.
FSAR Change Request Number: 89-590.9 Related SER Section: 8.3.1
-SER/SSER Impact: .No O&R 040-19a' 4 Clarification:
Clerifies the. fact that there is more than one conditionthatwi1J3_activatetheSafetySystem Inoperable Indicatf M 3 FSAR Change Request. Number: 89-590.10 Related SER Section: 8.3.1 SER/SSER Impact: No
~
d
a N ..
Enclosure to TXX-896281 Page 12 of 24
. .8.3 Onsite Emercency Power Svstams S.3.1 AC Pcwer System The'ac.onsite power system is a Class 1E system which serves as a standby to the offsite power systam. The safaty' function of the ac ensite emergency ,
power systam (assuming the offsita ecwer system is not functioning) is to i
, provida sufficiant cacacity and capcbility to ensure that tha s:ru:tures, !
- systems, and ccmoonents icportant to safaty perform as intanced. The cojec- ;.
i tives of the staff review are to datermine if the ac onsite emergency powar {
system has the . required redundancy, meets the single-failure criterion, is l testable, and has the capacity, capability, and reliability to supply power to !
4 all required safety loads in accordance with the requirements of GDC 5,17, !
and 18. l J> : The onsite ac power system consists of various auxiliary electrical systems i designed to provide electric pcwer to Class 1E and non-Class 1E station leads.
The stancby ac power systems is an independent, onsite system designed to automatically start and provida adaquate power for Class 1E leads to ensure safe plant shutdown when preferred and alternate power scurces are not available.
The Class IE portion of the onsite powar system is comprised of two redundant
- and independent G.9-kV distribution systems with their 480-V load centers and I
motor control centers, 118-V ac power system, 125-V de systas, and the stancby l pcwer supplies (diesel generater units).
) Onsite emergency power for each unit is sucplied by two diesel generators.
Each diesel ganarator is automatically started by either a safety injectica actuation signal-or an emargency bus undervoltage signal on its respective emergency bus. Each diesel generator is capable of attaining rated voltage and frequency within 10 see after receiving a starting signal. After obtaining rated voltage and fregt.ency, the generators are connected automatically to their respective emergency buses. Under ac'cident conditions, the safety loads will be connected in a predetermined sequence to their respective diesel ;
generator. There is one diesel generator per bus. Each diesel gen'erater and '<
its associated equipment is located in a separate seismic Category I structure .
and is rated at 7000 kW for continuous operation, and has a 2-hr rating of i 7700 kW. The continuous rating exceeds the maximum predicted operating 1 cads.
The applicant has documented that tests will be performed to demonstrate that i during the loading sequence, the frequency and voltage are meintained above a level which would degrade the performance of any load below minimum requirements. !
The design and continuous rating are consistent with Regulatory Guide 1.9 and !
IEEE 387-1977 and, therefore, are acceptable. l; Branch Technical Position ICSS 2 (PSB) (in Appendix BA of the Standard Review Plan) requires that new and previously untried diesel generator designs to be used in nuclear power plant service undergo a prototype reliability verification testing program. The staff review indicates that the diesel generators have successfully passed a prototype reliability verification program of 300 valid start and load tests with no more than three allowed failures. This is in conformance with the staff position and is acceptable.
8-9
.. 4
.. t -.
Enclosure'to TXX-89628 Page 13 of~24
' l During the periodic testing of a diesel generator, if a safety-injection ,
actuation signal occurs, the generator breaker will be tripoed automatically ^
by an "S" signal.
Thispermitstheunittobeclearedfromparalleloperatior.h with the system and enables the diesel generator to attain the emergency stancby mode. In this moce of cperstion, the diesel governor control changes ;;
automatically to the isochronous mode which maintains the engine running at a i synchronous speed corresponding to 60 Hz at the generator terminals. All !
noncritical protective trips except engine overspeed and generator differential ,
are bypassed. Simultaneously, the voltage regulator c anges to t.9e aunma:ic i mode :.aintaining the generator at a preset constant voltaga of 6.9 kV. The '
ciesel generator unit is now ready to accept load in the event of a loss-of- ;
voltage signal (LOVS). If, during periodic testing of a diesel generator, an '
LOV5 should occur, the diesel generator breaker is tripped on overcurrent creating an LOVS on the bus. The offsite power feed breaker is tripoed and -
the diesel generator remains running, shifting the governor automatically from droop to isochronous moce and the voltage regulator to automatic moce. The diesel generator breaker is closed, connecting the diesel generator to the bus.
Branch Technical Position ICSB 17 (PSB) (in Appendix BA of the Standard Review Plan) re:;uires that diesel generator protective trips be bypassed when the-diesel generator is required for a design-basis event. All protective trips are allowed during ,criodic testing. The allowed exceptions to the above requirement for bypassing are diesel engine overspeed and generator differential current. Any other trips retained must utilize coincident logic in order to avoid spurious trips. In case of a design-basis accident, the applicant is bypassing all the protective trips except engine overspeed and generator differential. This is in full conformance with the staff position and is acceptable. (p y Diesel generator instrumentation and alarm annunciators are located on the diesel room control panel. One " diesel trouble" signal is sent to the control 1 room when any local alarm is received on the local diesel generator panel. A separate signal is sent to the safety system inoperable indication-(55II) panel wnenever the diesel generator is not ready for automatic starting. The diesel generator starting mode selector switch has " remote / local / maintenance" positions and is normally in the " remote" mode of operation position. The only time it is in the " local" position is for local manual starting in the event of control room evacuation and nonroutine testing. If the switen is not returned to the " remote" position from the " local" or " maintenance" position, an alarm in the control room persists until the switch is returned to the
" remote" mode. Other manual controls of the auxiliary system of the diesel generator are also alarmed at the SSII panel if failure to return to their auto start position would inhii:it automatie operation of the diesel generators.
In response to staff questions, the applicant has presented a list of conci-tions that would render the diesel generator units incapable of responding to an automatic emergency start signal. The staff has reviewed this information and concludes that each condition that renders a diesel generator unit incacable of responding to an automatic emergency start signal is alarmed in the control room. The alarm system display of " bypassed and inoperable status" of the diesel generators fulfills the requirements of Regulatory Guide 1.47 and is acceptable.
I 8-10
_ . _ _ _ _ _ _ _ _ _ _ _ _ _ _ . _ _ _ _ _ _ _ _ _ _ ._ i k.
. , , s: .e .
Enclosure to TXX-89628
, Pag 2 14 of 24 accident.
redundant divisionsSeparate and redundant of essential equipment. emergency fan coil unitsedare for prov CPX-VADFOC-33 in the closed position would prevent emer the safeguards dated June 19 building by tne ESF exhaust filtration units after aByLOCA manually opera,ted.1981, the applicant verified that this exhaust leta damp By letter dated July 1, 1981,.the applicant ecmmitted to provide the results of analyses demonstrating that post-LCCA rad in the auxiliary building will dauy to acciotcble levels 50 evels can te manually cperatad to sue; ort po;t-LOCA emergency that the dt :erfiltrat exhaust filtration units.
vided in the control rcom. Safety grade 'ndication of damper position 'is cro-Altarnativelyt open for all modes of plant operation except fuel handling operationst The staff of concludes the safeguards that either building course ventilation system.of action will result in accep on The safeguards building ventilation system is separatedects from the e internally generated missiles and high and moderate energyofpipe b to Sections 3.5.1.1 and 3.5.1 of this SER). reaks (refer.'
and 9.4.3 of this SER, the redundant ESF exhaust filtration callyun separated redundant from each equipment from other by walls pipe rupture, designed equipment failureto preclude coincide The emer,ency fan coil urits are located in the same and missile generation.
comp,artmen equipment they serve and are separated by train against e essentia coinc Thus, the requframents of GDC 4 and the guidelines of BTP ASB 3-1 .
are satisfied.
Based on the above, the staff concludes that the safeguards ation bu to protection against natural phenomena, with the guidalines of Regulatory Guides missilessys
, and environmental effects, a tornado-missiles and high and moderate acceptable. .
energy pip They are, therefore.
9.4.5 Miscellaneous Building ventilation Systems The safety related portions of the miscellaneous building ventilatio cooling systems consist of the service water intake structure ventilation system diesel generator and the plant ventilation discharge vent. buf1 ding ventilation system, the battery room s
exhau
, the system, t
The serviceservice water intake structure ventilation system maintains 1
water pump area tem e a ec of the service water pumps.perature low enough to permit continuous operatien I The service water intake structure ventilation of eight 50Fcapacity exhaust fans and their assoc '
There is adequate redundancy in equipment and Class 1E power .
re t '
operation of at least one service water pump per reactor unit for all mo operation. ,
The exhaust fans can be manually started on an emergency bus ,
the event of a loss-of offsite power or loss-of-coolant accident t Individual l area high-temperature alarm in the control room. exhaust 5 gratedwater service openings pump motors. in the floor of the intake structure near the base of theOu i i
The system is located in a seismic Category I e
B S-26 i
L. -
- 3 't..
Enclosure to TXX-89628 Paga 15 of 24 g~ structure which provides protection against floods, tornadoes, and tornado-generated missiles { refer to Sections 3.4.1 and 3.5.2 of this report). The system is not exposed to the effects of internally generated missiles and is
~
separated frem high-energy piping (refer to Sections 3.5.1.1 and 3.6.1 of tnis report). Thus, the requirements of GDC 2 and 4 and the guidelines of Regulatory Guices 1.25, 1.29, and 1.117 and BTP ASB 3-1 are met.
g The diesel generator building ventilation system is designed to maintain the diesel generator room temperature low enoagh for continuous operation of the diesel generators and to provide outside air for diesel combustion. Each diesel generator room is provided with a full-capacity ventilation system consisting of intake and exhaust louvers and an exhaust fan. The system is
[
designed to Quality Group C and seismic Category I criteria and is powered fr:m 4
the same safety-related electrical bus as the diesel that it serves. The diesel h generator building v' entilation system is located in a seismic Category I structure and is protected from the effects of floods, tornadoes and tornado generated missiles (refer to Sections 3.4.1 and 3.5.2 of this report). The system is .
not exposed to the effects of internally generated missiles and is separated from high-energy piping (refer to Sections 3.5.1.1 and 3.6.1 of this reocrt).
Thus, the requirements of GDC 2 and 4 with respect to protection against natural phenomena, missiles and environmental effects, and the guidelines of Regulatory Guides 1.25, 1.29, 1.117 and BTP ASB 3-1 with respect to quality group and seismic classification, tornado missiles, and pipe-break effects are met.
The battery room exhaust systec is designed to ensure a minimum number of air changes per hour in the battery rooms to keep the hydrogen concentration in I the rooms below the lower flammability limit. . Each battery room is provided with a separate exhaust system consisting of two full-capacity centrifugal fans and their associated dampers and ducting. One fan per battery room operates continuously; the standby unit is automatically actuated on receipt of an operating fan differential pressure trip signal. Failure to start is alarmed in the control room. The battery room exhaust system is designed to seismic Category I and Quality Group C criteria and is located in a seismic Category I flood- and tornado protected structure (refer to Sections 3.4.1 and 3.5.2 of this report). The room exhaust vent is also protected against the effects of missiles. The system is separated from the effects of internally generated missiles and high-energy piping (refer to Sections 3.5.1.1 and 3.6.1 of this report). Thus, the requirements of GDC 2 and 4 with respect to protection against natural phenomena, missiles and environmental effects and the guide- ;
lines of Regulatory Guides 1.26, 1.29, and 1.117 and BTP ASB 3-1 with resoect :
to quality group and seismic classification, tornado missiles, and pipe-break effects are met.
Based on its review, the staff concludes that the miscellaneous building ventilation system is in conformance with the requirements of GDC 2 and 4 with respect to protection against natural phenomena, missiles, and environmental effects and the guidelines of Regulatory Guides 1.26, 1.29, and 1.117 and STP ASB 3-1 relating to quality group and seismic classification, tornado missiles, and high- and moderate-energy pipe breaks, and is, therefore, acceptaole.
g The plant ventilation discharge vents, while not themselves safety related, g are the discharge paths for the safety-related ventilation systems serving the fuel building, auxiliary building and radwaste area, and the safeguards 9-27 D
- - , n ,3 l-Enclosure to TXX-89628
! Page 16 of 24 j; .
8.3.1 AC Power System CPPD '3 2 . The FSAR removes the automatic Safety System (77)
Inoperable Indication (SSII) for the Diesel Generator Room Fans
En61: sura to TXX-89628
(as amendedl Sr2MR Description I l
8.3-57 2 Revises the description of Safety Sys;em Inoperable Indication (SSII) by deleting "Any diesel generator a I
room cooler control switch in lockout position".
Revision:
Based on outside temperature readings, selected diesel generator (DG) room fans may be disabled via their control room control switch to ensure room design temperatures are maintained during winter months. 'The outside air temperature will have audible and visual alarms in the Control Room to notify the operator to take action to disable and restore the DG room fans as required based on outside air temperature. Also, a reading of the outside air temperature is available to the operator via the meteorological tower instru-mentation. The Safety System Inoperable Indication (SSII) for the DG room fans is being disconnected from the control switch and converted to a manual operator input, since the disabled fans would otherwise produce a false alarm signal on the SSII panel which could mask -
other valid input alarms.
The DG room fans are tested and maintained on an annual basis. Reg. Guide 1.47 lists 3 criteria which, if met, require the design of automatic indication for commonly expected conditions. One of these criteria, which is listed in Section B.2 of Reg. Guide 1.47, states that the expected condition (by which a safety-related system can be completely or partially rendered inoperable) can be reasonably expected to occur more frequently than once a year. Since the DG room fans are tested and maintained "once a year", the requirement for automatic indication (SSII) is unnecessary.
Additionally, there is control room indication provided which shows the operator the availability of the fans. The status lights by the control hand-switches, together with the position of the switches, indicates whether the DG room fan is in " auto" and is capable of starting upon the receipt of a diesel generator start signal or is locked in "stop" (all lights out) and will not allow the fans to start upon a diesel generator start signal.
FSAR Change Request Number: 89-590.2 Related SER Section: 8.3.1 SER/SSER Impact: No
f
.tEnhlosure to TXX-89628 CPSES'FSAR AMENDMENT Pag 1 18 of 24 DETAILED DESCRIPTION +
F5AR Page 1 (as amended) Group Description j i
Revises.the description of the Diesel' Generator (DG)
~
9.4C-2 2 Room Ventilation System to identify that the Safety System Inoperable Indication (SSII) will be manually 4 l
operated for the DG room fans. I Revision: j Based on outside temperature readings, selected diesel. l generator (DG) room fans may be disabled via their control room control switch to ensure room design ,
temperatures.are maintained during winter months. The I outside air temperature will have audible and visual I alarms in the Control Room to notify the operator to 1 take action to disable and restore the DG fans as l required based on outside air temperature. 'Also, a- ,j reading of the'outside air temperature is available to ;
the operator via the meteorological tower instru- -l mentation. The Safety System Inoperable Indication (SSII) for the DG rooms fans is being disconnected from j the control switch and converted to a manual operator ;
input. since the disabled fans would.otherwise produce a false alarm signal on the SSII panel which could mask other valid input alarms. l The DG room fans are tested and maintained on an annual !
basis. Reg. Guide 1.47 lists 3 criteria which, if met, !
require the disign of automatic indication for commonly ,
expected conditions. One of these r.citeria, which is i listed in Section B.2 of Reg. Guide 1.47, states that the expected condition (by which a safety-related system can be completely or partially rendered inoperable) can be reasonably expected to occur more frequently than once a year. Since the DG room fans are tested and maintained "once a year", the l requirement for automatic indication (SSII) is j unnecessary. {
Additionally, there is control room indication j provided which shows the operator the availability of l l the fans. The status lights by the control hand- j switches, together with the position of the switches, l indicates whether the DG room fan is in " auto" and is capable of starting upon the receipt of a diesel l
generator scart signal or is locked in "stop" (all I- lights out) and will not allow the fans to start upon a ,
diesel generator start signal. ' E; FSAR Change Request Number: 89-590.3 Related SER Section: 9.4.5 ;
SER/SSER Impact: No j i
JEdblosura'to TXX-89628' 'CPSES FSAR AMENDMENT nPagg 19.of 24 ' DETAILED DESCRIPTION. .
FSAR'Page (as amended) Group Dritriction O&R 040-18 2. Revises the description of Safety System Inoperable Indication'(SSII) by deleting "Any D-G room cooler switch in the lock-off position".
Revision:
Based on outside temperature readings, selected diesel generator (DG) room fans may be disabled via their control room control switch to ensure room design temperatures are maintained during winter months. The outside air temperature will have audible and visual alarms in the Control Room to notify the operator to take ection to disable-and restore the DG room fans as.
required based on outside air temperature. Also, a reading.of the outside air temperature is available to the operator via the meteorological tower instru-mentation. The Safety System Inoperable Indication (SSII) for the DG room fans is being disconnected from the control switch and converted to a manual cperator input, since the disabled fans would otherwise produce a f alse alarm signal on the SSII panel which could mask other valid input alarms.
The DG room fans are tested and maintained on an annual.
basis. Reg. Guide 1.47 lists 3 criteria which, if met, require the design of automatic indication for commonly expected conditions. One of these criteria, which is listed in Section B.2 of Reg. Guide I.47, states that the expected condition (by which a safety-related system can be completely or partfally rendered inoperable) can be reasonably expected to occur more frequently than once a year. Since the DG room fans are tested and maintained "once a year", the requirement for automatic indication (SSII) is unnecessary.
Additionally, there is control room indication provided which shows the operator the availability of the fans. The status lights by the control hand-switches, together with the position of the switches, 4 indicates whether the DG room fan is in " auto" and is capable of starting upon the receipt of a diesel l generator start signal or is locked in "stop" (all lights out) and will not allow the fans to start upon a diesel gtnerator start signal. ,
FSAR Change Request Number: 89-590.7 '
Related SER Section: 8.3.1 '
SER/SSER Impact: No 1
, - - _ _ _ - - - - - = - - - - - -
-;M.,.
EnclosuratoTXX-E9628f CPSES/FSAR Page 20 of.24'
, '11. . Complianc'e:with IEEE 336 [24] and. NRC Regulatory ' Guide 1.30 [6] 6 0040.56 Quality Assurance Program for the CPSES onsite Class IE AC power 6 system is based on the requirements of IEEE 336 and Regulatory l Guide 1.30. . For details see Chapter 17 and Appendix 1A(B).
0040.9
- 12. Compliance'with NRC Regulatory Guide 1.47 [9] 6 0040.9 !
The surveillance of each on-site class IE AC power system 6 operability status is based on the requirements of Regulatory- j Guide 1.47,; augmented by Branch Technical Position ICSB 21, as l described herein: l 0040.9 A system level safety system inoperable indication (SSII) is 6 l provided for each train to indicate if the on-site power source is unavailable. This indication is activated on:
A. Diesel generator remote-local-maintenance. switch in local or maintenance position 51-l B. 6.9kV generator breaker control switch in the lockout 51 l l'
position 51 Cl A6] 616i61 6666 fit 6f f666 d6616f 666tt61 iditdM 16 'I El 16tK66f pdfiti6n J El C B. Operator manual action 51 j D E. Service water system inoperable 51 E F. Loss of 125 volts DC 51 F. Diesel generator disabled j l
8.3.1 2.2 Analysis of Uninterruptible Power Systems Class IE 118-V uninterruptible AC Power Systems, which provide power to the Class IE instrumentation and control circuits, are designed to 'I the same criteria as those for the onsite Class IE power system.
Distribution panels and equipment they feed as a minimum meet the 27 requirements of GDC 17 [1] and'18 [1], NRC Regulatory Guides 1.6 [2], !
and IEEE 308 [20], 344-1975 [26] and 384-1974 [31].
I 1
8.3-57 Bold /0verstrike j i
Version i
'. Enclosure to TXX-89628. CPSES/FSAR Pag 221ofb4be T cortain that the ventilation fans are op2 rating whsn the diesels 66 are operating, the required number of fans in each diesel generator compartment start automatically.on receipt.of diesel generator start signal. During normal plant operation, the plant ventilation is operated manually.
Monitoring of the conditions in the diesel rooms is accomplished with the following Control Room instrumentation:
- 1. High diesel room temperature alarm
- 2. Ventilation fan motor tripped alarm Since the diesel generator building ventilation (DGBV) fans are scheduled for annual maintenance, manual initiation of the diesel generator. inoperable indication is provided, in accordance with R. G. 1.47.
Fans are powered from the same safety-related electrical bus as the diesel that is being ventilated.
The reliability and safety of the DGBVs is ensured by the following 76 features:
- 1. Redundancy in equipment and power supplies enables the system to 76 s eisfy a single active component failure without loss of functions.
- 2. Instrumentation and controls which incorporate audible and visual 76 alarms in the Control Room facilitate continuous monitoring of system performances and alert the operator to system malfunctions.
i 9.4C.1.1 Testina and Inspection Shop inspection and testing are performed for equipment, including 76 heating and controls.
Bold /0verstrike 9.4C-2 76 Version
.o-
' Enclosure to TXX-89628 Page 22 of 24 CPSES/FSAR
- per unit) alarm.if any trouble develops. The trouble alarm does not differentiate-if the trouble renders the D-G inoperative for auto start in emergency.
Additionally, the Diesel Generator Power Window (DG Pwr) on the Safety System Inoperable Indication Panel (55!I/
see Section 8.3.1.2.1 7/1/2/6) is activated by those conditions that render the D-G inoperable for auto start (see section a. below). The same SSII window is also 66 activated if the following conditions exist:
- 1. Loss of 125 volts DC
- 21. Edit df 5fiffdd Service Water System inoperable -
3 2. 6.9KV generator breaker control switch in lock-out position 3t Adf 5/6 /ddd tddIdt idiftM id fMd 7dtK/dff
$dtitidd .
- 4. Diesel generator remote-local-maintenance switch in local or maintenance position
- 5. Operator manual action Although none of the fM/dd conditions listed above are 20 electrically interlocked with the D-G, it is recognized that they may render the D-G inoperable fodddidfdif .
Aftdf 4 tKdtt $dfidd df d$dfdfiddl or are otherwise important enough to advise the operator of its existence.
l a. The condition that renders the D-G incapable of responding to an automatic emergency start signal are:
- 1. 125V DC not available
- 2. Overspeed trip not reset
- 3. Differential lock-out relay not reset 0040-18
o;*- , . .
Encicsure to TXX-89628' Paga 23 of 24 CPSES/FSAR 4.
Remote-Local-Maintenance-(R-L-M) switch in local or maintenance mode
- 5. Starting air pressure low
- 6. Diesel generator breaker CR-HSP Selector 6B Switch in HSP. position
- b. The present wording on the three annunciator windows in the control room for each alarm in (a) above is:
"DG trb1" (trouble) TBidid7 Edddfdtd/ IEEZ ffddEldlY for the D-G No. 1 "DG trb1" 79fdid7 6ddd/dfdf IE62 t/ddE7d7 for D-G No. 2, and -
" Diesel Generator IEG1 or IEG2 switch not in auto" common for both 0-G units,
- c. The remaining local alarms, other than those in (a) above (approximately fifty) such as lube oil temperature high, etc. also cause the same D-G trouble window to activate.
- d. Presently, all the conditions that will render the D-G inoperable, for an auto start in an emergency, are annunciated in the control -room, though not exclusively on a separate annunciator window:
However, the two SSII windows "DG Pwr" ed/5ffd 20
- j. (Power), one per D-G, Bididl A df 79d/5ffd Pddd/ ,
Bidid7 BT are the two points in the control room which would indicate the inability of a diesel generator to start, run and to load.
- e. We are implementing the following modification:
Instead of three alarms stated in item (b),
increase the number of D-G annunciator windows to l -
0040-19
- o ; u _
e,
~*
Encicsure to TXX-89629 Paga 24 of 24 CPSES/FSAR A -
- four with engraving as follows:
- 1. DG1 BididI/6ddd/dfd/ IEEZ disabled-
- 2. DE2 BidsdI/6ddd/dfd/ IE67 disabled
- 3. DG1 trbi BididT/Eddd/dfdf IE6Z f/ddETd
- 4. DGE trb1 sididf/6dddfdfdf IEEZ ffddB16 As implied by the proposed engraving windows 1 and 2 will only advise'of the disabled condition of a D-G for auto start in an emergency. Windows 3 and 4 will 20 indicate all troubles, including those that disable the D-G. The safety system inoperable indication "DG Pwr" ,
9d/5ffd Pddd/ Bididi 6dddtifdtf will be activated by the conditions previously described if fMd ditddit N/ddRdt- ,
idff1}fdd 12510t ddnttd1 $digt td fMd 6/9Rd iditdMgidt ,
ditK tMi didid1 gidd/didt EfddRif it dfdddd.
s t'
e l
l 0040- 19a ,
l.