ML20247G793

From kanterella
Jump to navigation Jump to search
Safety Evaluation Supporting Amend 59 to License NPF-29
ML20247G793
Person / Time
Site: Grand Gulf 
Issue date: 03/27/1989
From:
Office of Nuclear Reactor Regulation
To:
Shared Package
ML20247G762 List:
References
NUDOCS 8904040318
Download: ML20247G793 (21)


Text

,

l

,' ff k

UNITED STATES

  • y'y g

N.UCLEAR REGULATORY COMMISSION l

. G g; j

WASHINGTON. D. C. 20555 l

. o., &

s gv.....f j

i l

l SAFETY EVALUATION BY THE OFFICE OF NUCLEAR REACTOR REGULATION i

SUPPORTING AMENDMENT NO. 59 TO FACILITY OPERATING LICENSE NO. NPF-29 SYSTEM ENERGY RESOURCES, INC., ET AL.

l GRAND GULF NUCLEAR STATION, UNIT 1 l

DOCKET NO. 50-416 l

l

1.0 INTRODUCTION

l By letter dated September 23, 1988, as revised November 30, December 16 and December 21, 1988 System Energy Resources, Inc. (the licensee),

requested an amendment to Facility Operating License No. NPF-29 for the Grand Gulf Nuclear Station, Unit 1.

The proposed amendment would change the Techr.ical Specifications (TS) by adding the new plant service water radiation monitor in TS 3/4.3.7.1, " Radiation Monitoring Instrumentation,"

and adding two new valves in TS 3/4.8.4.2, " Motor Operated Valves Thermal 4

Overload Protection." These new TS are proposed for an alternate decay heat removal system (ADHRS) to be installed for use during refueling 1

outages when the residual heat removal (RHR) system is out of service for i

maintenance, inspection or repair.

The proposed ADHRS would use plant service l

water (PSW) in the ADHRS heat exchangers to remove decay heai. from reactor cooling water.

The service water radiation monitor would detect heat exchanger tube leakage.

The ADHRS woulo consist of two pumps and two j

heat exchangers in parallel with a common suction line conne.:ted to the

,j existing RHR suction line and a comon discharge line connected to one of

.the low pressure coolant injection (LPCI) lines.

The two valves added to i

TS 3/4.8.4.2 would be used to isolate the ADHRS from the RHR and the LPCI lines during plant operation.

By letters dated February 6 and 23, March 3 and 6, 1989, the licensee provided additional information regarding the ADHRS design, their earlier safety analyses, and limitations on the ADHRS usage.

The licensee described administrative controls and procedures for use of the ADHRS and committed to limit usage of the ADHRS to.the third refueling outage (RF03) until an evaluation is made of the need for TS changes to govern the long term use of +he ADHRS. A note was proposed to be added to TS 3.4.9.2, TS 3.9.11.1, ord TS 3.9.11.2 to limit use of ADHRS to RF03.

The licensee's submittals dated February 6, and 23, March 6 and 8, 1989, which provide a restriction on the use of the ADHRS to the third refueling outage, an expanded safety analysis and clarification of the operability requirements for systems related to the use of the ADHRS, did not significantly alter the action previously noticed or affect the initial determination published in the Federal Register on February 1, 1989.

890404o318 890327 DR ADOCK 05000416 p

PNV

. 2.0 EVALUATION The licensee has designed and is installing an ADHRS for use during Operational Condition (0C) 4, " Cold Shutdown," and OC 5, " Refueling," to supplement the decay heat removal capability of the RHR system..During each refueling outage, one or both loops of the RHR system are removed from service in order to perform surveillance, maintenance or repair on the loops or on supporting systems.

The limiting conditions for operation (LCO) of the RHR system, during OC 4 and OC 5, are specified in TS 3.4.9.2,

" Residual Heat Removal - Cold Shutdown", TS 3.9.11.1, " Residual Heat Removal and Coolant Circulation - Refueling Operations with High Water Level," and TS 3.9.11.2, " Residual Heat Removal and Coolant Circulation with Low Water Level." Each of these three TS.has an Action statement 3

which states, in part, that if the.RHR loops required by the LC0 are not operable, the licensee should " demonstrate the operability of at least one alternate method capable of decay heat removal."

In the two previous refueling outages, the licensee used the reactor water. cleanup (RWCU) system, the control rod drive (CRD) system, and the fuel pool cooling and cleanup (FPCCU) system as alternate methods capable of decay heat removal when an RHR loop was out of service.

However, because of the small capacity of these systems, adequate heat removal capability is not avail-able until about the twenty-sixth day after reactor shutdown.

The ACHRS is designed to have adequate heat removal capacity at day one after I

reactor shutdown.

The licensee estimates that the use of the ADHRS as the alternate method of decay heat removal will reduce the outage length about two weeks.

Based on the use of ADHRS, for RF03 it is scheduled for 45 days.

The second refueling outage was scheduled for two months.

During our review of the ADHRS, as summarized in the following sections of this Safety Evaluation, the staff expressed concerns that the present TS do not adequately limit the conditions for long term use of the-ADHRS as

=

l a supplemental decay heat removal system.

Unlike the RHR loops, the

)

ADHRS is not a safety-related system, cannot be powered by an onsite i

diesel generator, and uses PSW as the cooling water for the heat exchangers.

Voluntarily entering the action statement to perform RHR loop maintenance and surveillance for a short time using the less reliable methods for decay heat removal has been considered acceptable.

However, the licensee's expressed purpose of using the ADHRS is to shorten the outage length.

The ADHRS is designed to be used any time during the outage, without any time restrictions.

During.RF03, the licensee plans to use the ADHRS twelve days.

In future outages, it could be used for a longer time.

In response to NRC staf# concerns, the licensee committed to limit the-use of ADHRS to RF03 and to provide administrative controls on require-ments for i+s use.

The licensea also committed to evaluate TS changes

. i needed to implement these requirements for the long-term use of the ADHRS.

Thus, for RF03 the licensee proposed to add a note to TS 3.4.9.2, TS 3.9.11.1 and TS 3.9.11.2 which would limit use of the ADHRS with.the present TS to RF03.

o w

4

. We have reviewed the proposed ADHRS design and associated TS changes, the supporting analytical results ano the licensee's responses to the our 4

review questions. As a result of the review, we prepared the follewing-evaluation based on the licensee proposals.

2.1 ADHRS Description A flow diagram of the ADHRS is attached as Figure 1.

The ADHRS consists of existing and new components.

The existing components include the common RHR shutdown cooling suction line and fuel pool cooling and cleanup (FPCCU) piping.

The new components include two ADHRS pumps, two heat exchangers, associated piping, valves, instrumentation and controls. A j

manually operated valve is added to isolate ADHRS from the FPCCU.

In I

order to minimize the piping lengths, the new ADHRS equipment is located in RHR 'C' pump room.

Functional control is provided from the main control room.

The PSW system provides coolant to the ADHRS heat exchangers for heat removal.

A radiation monitor with an alarm indicator in the control room is added to the PSW cooling water discharge header to detect intersystem leakage from a heat exchanger tube leakage or failure. Motor operators are added to valves E12F066A and B to allow the valves to be remote manually operated from the control room.

The functional purpose of the ADHRS is important to safety, but is not safety related, since the ADHRS does not automatically mitigate the consequences resulting from accidents.

However, safety-related ^ components are used in vario'us portions of the ADHRS to ensure that current safety-related requirements of the 1

ECCS and RHR system are not compromised by the installation or use of the ADHRS.

The ADHRS is designed to operate in OC 4 (cold shutdown) ano OC 5 i

(refueling).

During operational conditions 1, 2, and 3, ADHRS is isolated by locked closed or deenergized valves from connected plant systems.

The ADHRS can be operated in different modes as follows:

1.

Suppression pool to suppression pool flush / test mode:

From suppression pool (SP) suction line, the SP water is pumped through the ADHRS pumps, heat exchangers, flow control valve and back to the SP via the RHR 'C' full flow test return line.

When ADHRS is operated in this mode, RHR 'C' loop will be declared inoperable.

2.

Reactor vessel (decay heat) cooling mode via RHR A or B:

Using the existing RHR shutdown cooling common suction line, reactor coolant is pumped from the reactor coolant 'B' recirculation loop through valves E12Ft06A and E12F066A (RHR A loop) or valves E12F006B and E12F0668 l

(RHR 8 loop) to the ADHRS pumps, then to the heat exchangers and back to the reactor vessel via RHR C LPCI injection lire.

3.

Spent fuel pool to reactor vessel mode:

Coolant is pumped from the spent fuel pool through valves F226 and F348 to the ADHRS heat exchangers and back to the reactor vessel through RHR 'C' LPCI injection line.

Operation in this mode is applicable only to 0C 5 when the upper reactor cavity is flooded.

This mode provides an ADHRS shutdown cooling flow path and allows the RHR shutdown cooling suction line to be taken out of service for maintenance.

. i)

The design temperature of the ADHRS on the primary (reactor coolant) side is 200 F.

This is the limiting TS temperature for OC 4.

The rated flow on the primary side is 3600 gpm. A flow control valve, operated from j

the centrol room, allows a decrease in flow to a minimum of 1000 gpm.

System performance is monitored in the main control room by using the j

existing LCPI "C" flow i' dication and new ADHRS heat exchanger inlet and j

outlet temperature indicators. When the reactor coolant recirculation i

pumps are in operation, the temperature of reactor coolant in the recircu-l lation piping will also be used to monitor system performance.

System j

j!

status is monitored in the main control room by position indication of the ADHRS suction piping isolation valves E12F066A and E12F0668, by the flow i

control valve position, by the ADHRS pump running status lights, and the position indicators for existing motor operated valves in the ADHRS flow

path, i'l 2.2 Design Bases j

l Component and Pipino Design ADHRS components and piping en the tube (primary) side of the heat l

exchanger and the heat exchanger itself are designed and constructed according to the Class 3 requirements of Section III of the ASME Boiler and Pressure Vessel Code (Code) and Seismic Category I requirements.

Piping on the shell (secondary) side of the heat exchanger are designed and constructed according to the ANSI B31.1 rules to withstand safe i

shutdown earthquake (SSE) loads.

During OC 1, 2 and 3, isolation valves in the coelino vi::ter supply to 'he heat exchangers are closed to eliminate interaction with the standby service water (SSW) system.

During OC 4 and 5, if there is a loss of offsite power, the ADHRS heat exchangers together with other components receive standby service water automatically since the ADHRS cooling water piping is connected to the SSW B loop header.

The licensee has evaluated the effect of ADHRS on reducing SSW flow to essential components and concluded that the effect was insignificant.

In any case, the ADHRS heat exchangers can be isolated from the SSW header if additional flow to

}

essential components is required.

Design pressure of the ADHRS suction piping is 80 psig.

This piping is attached to FPCCU piping which is also designed for 80 psig.

The ADHRS suction piping is isolated from the FPCCU piping by ASME Class 3 valve E12F410.

This valve is manually operatnd and closed during OC 1, 2 and 3.

The ADHRS suction piping is isolated from the RHR suction piping by valves E12F066 A and B which are motor-operated valves.

During 0C 1, 2 and 3, the valves are closed and the power to these valves is removed.

During OC 4, when ADHRS is operating, if the decay heat removal function is lost, these valves will be closed by operators using site procedures to prevent over-pressurization of the ADHRS.

With no shutdown cooling loop in operation the TS require monitoring of the reactor coolant temperature and pressure once per hour.

Design pressure of the discharge piping upstream of the flow control valve and check valve is 250 psig.

The design pressure of the flow control valve, check valve and associated piping a

e

~ i connected to the LPCI "C" injection line is 500 psig.

The check valve serves as the isolation valve, between the 500 psig ECCS injection line and the 250 psig ADHRS discharge piping.

This check valve will be periodically leakage tested to ensure that the ADHRS discharge piping will not be i

over-pressurized from operation of the LPCI "C" system.

I Based on our review of the submittals, we conclude that the mechanical design of the ADHRS piping and components is acceptable.

Pipe Support Desian We reviewed the adequacy of the pipe supports to assure that the method-ology used in the design is consistent with the appropriate codes and, in conformance with the regulatory requirements.

i In order to perform the task, we visited the plant, audited the calcula-tions and met with the licensee to discuss the technical aspects of the design. The pipe supports were designed in accordance with the design specifications and consistent with the American Institute of Steel Construction (AISC) Code, Seventh Edition, using the computer code STRUDL II CE-901 and P-Delta STRUDL,~ Version 0787.

These computer programs have been used previously and have been accepted i the NRC staff.

The base plate design was not included in this review,,ecause it was previously i

accepted by our staff in a review of the licensee's response to.IE Bulletin 1

79-02.

I 1

1 On January 4 and 5, 1989, members of the NRC staff visited the plant to review the calculations for pipe supports pertaining to the ADHRS.

The visit included a tour of the portion of the facility where the ADHRS is located.

During the' review we noted that: (1) not all of the shear components in members subjected to torsional loads were accounted for, and (2) that the prying action was not explicitly considered in the calculations.

In view of the above, we requested that the licensee perform the following:

(1)

Identify the supports where torsional loads contribute to the

^

stresses in structural members, (2) Determine that the stresses in those sections are within the code allowables and that the effects of torsional loads are properly accounted for, and (3) Provide results of the survey and the quantitative results of the analysis to the NRC staff, 4

.._...__._-._______-----_---_-_iRL

v e

  • The licensee provided a summary of stresses in ADHRS pipe supports.

The submittal contained the following for each affected pipe support:

(1) the maximum shear stress and (2) the maximum flexure stress or the result of combination of bending and axial stresses that would be obtained from an interaction equation, where applicable.

Review of that submittal indicates that all stresses are below those permitted by the AISC Code (0.4 Fy for shear and 0.6 Fy fer tension where Fy is the yield stress at the design temperature).

Since the actual stresses are within the Coce allowables, the stresses in the pipe

-supports are acceptable.

Furthermore, during a meeting we held with the licensee on February 14, 1989, the licensee presented information supporting the methodology used to design the ADHRS pipe supports. As a result of this presentation, the licensee then documented the technical basis for the conclusion that the pipe support design methodology used is conservative.

The submittal consisted of a discussion comparing the licensee's simalified St. Venant approach with the more rigorous method described in the AISC publications entitled, " Torsional Analysis of Steel Members," dated 1983.

From this comparison, the licensee concluded, and the staff agrecs, that the approximate method envelopes the AISC method with a large margin and is, therefore, acceptable. With regard to prying action in the design of bolted connections, the licensee. indicated that there are no steel-to-steel bolted connections in the ADHRS design of pipe supports.

All connections are made by welds; therefore, prying action is not a concern.

The staff agrees with the statement that prying action is not a concern for welded connections.

On the basis of the review of the licensee's calculations pertaining to the design of the ADHRS pipe supports, the discussions during the meetings with licensee and his consultants and reviews of the documents pertinent to the subject matter, we conclude that the design of the ADHRS pipe supports is acceptable.

Structural Design External events of high winds, flooding and earthquakes were considered in the staff's review.

With respect to high winds, tornadoes, tornado missiles, and flooding, components of the ADHRS are completely housed inside the existing auxiliary building, a safety-related structure designed in accordance with commitments in UFSAR Sections 3.3, 3.4 and 3.5.

Thus, the ADHRS is well. protected against these adverse events.

With respect to seismic events, the responst.pectra method has been utilized to calculate dynamic responses. All modal frequencies in the range of 0.25 to 33 hertz are considered in the seismic analysis.

Damping ratios used are consistent with Regulatory Guide 1.61.

Load combinations used are in accordance with the commitments of the UFSAR.

This method of analysis for the ADHRS is, therefore, acceptable.

The response spectra employed as the seismic design base motion for the ADHRS were developed by first applying a ground time history of the auxiliary building model.

~

t b____

m_.m_

w

_ 7 The criteria of Regulatory Guides 1.61 and 1.122 were then utilized to develop the floor spectra, as described in UFSAR Section 3.7.2.5.

We reviewed the individual floor response spectra for all applicable building elevations, seismic events and damping including those of Elevation 93'-0" of the auxiliary building where the ADHRS is supported.

Those response spectra are acceptable.

Our major concern of the ADHRS is that it would not impact or impose excessive loads on the existing auxiliary building and would not increase stresses beyond the code allowable limits.

The licensee calculated the ADHRS "fcot print" reaction loads at each of the system supports from the response spectrum analysis, and applied these reaction loads to the auxiliary building for the structural evaluation.

Evaluations thus conducted were to ensure that stresses in the structure were within the allowable limits established in,the UFSAR sections, which identify the applicable codes, load combinations and allowable stresses.

At a result of this evaluation, we found that the structural integrity of the auxiliary building due to loads imposed by the ADHRS is not impaired.

d The major ADHRS components are located on the building basemat at Elevation 93' so there is no appreciable effect on structural seismic response. Loads imposed by the ADHRS design on walls, beams or other structural elements are acceptable.

Based on this evaluation, we conclude.that the method of seismic structural analysis for the ADHRS, as well as the procedures to obtain response spectra for the base motion, are reasonable and acceptable.

The installa-tion and use of the ADHRS will cause no adverse interactions with the existing auxiliary building which completely houses and supports the

{

components of the ADHRS.

~

Materials Desian The ADHRS is designed to operate at a temperature of 200 F and a discharge pressure of 250 psig.

The materials proposed for the ADHRS are compatible with interfacing materials used at GGNS.

The ADHRS is designated as a moderate energy, ASME Code Class 3 system, operating only in operational conditions for reactor cold shutdown and refueling.

Repairs and replace-monts at GGNS are to be fabricated and installed in compliance to the re;uirements of Section XI of the ASME Boiler and Pressure Vessel Code, 1977 Edition, including Summer 1979 Addenda.

This Code requires that repairs and replacements meet the requirement of the Construction Code to which the original component or part was constructed.

The licensee stated that the components and parts of the ADHRS are constructed in ccmpliance to Section III of the ASME Boiler and Dressure Vessel Code, edition and addenda as shown in Table 1 of the licensee's submittal of Nosember 30, 1988.

The Inservice Inspection (ISI) Program for the first ten-year interval at GGNS (July 1, 1985 to July 1, 1995) was approved by the Commission on May 2, 1986.

The ISI program is based on the requirements of the 1977 Edition, Summer 1979 Addenda, of Section XI of the ASME Boiler and Pressure Vessel Code. After the construction of the ADHRS is completed, a preservice inspection will be conducted.

Then the ISI Program will be modified to include the Class 3 components of the ADHRS.

3 a

v r

. When secured during non-outage periods, the ADHRS will be filled with demineralized water.

The system will be flushed prior to use to assure an initially clean system. During its operation the ADHRS would not introduce materials that could adversely interact with the reactor system.

Therefore, we conclude from our review that the ADHRS is acceptably l

fabricated, constructed and inspected in conformance with appropriate l

regulations.

Future ISI surveillance as noted above, is also acceptable.

l Motor Operators for ADHRS Isolation Valves As part of the implementation of ADH", class 1E motor operators were added to currently manual valves Elu o66A and 8 to allow these valves to be remote manually controlled from the control room.

Valves E12F066A and B are presently used to provide a suction path from the spent fuel pool to the RHR pumps for operation in the spent fuel assist mode of RHR.

With the installation of the ADHRS, valves E12F066A and B will also be used to provide a suction path for ADHRS operation during OC 4 and 5.

During OC 1, 2 and 3 the valves will be closed and power to these valves will be locked out at the motor control center.

Valve,;osition indication is provided in the control room.

Valves E12F066A and B are powereo from the Class 1E buses. The motor i

operator for these' valves are rated at 4kW each.

The thermal overload devices provided for the motor operators of these valves will be bypassed for routine operation.

The thermal overload devices will provide motor protection only when the valve motor operators are undergoing (a)riodic pe testing.

This is consistent with Regulatory Guide 1.106 C.11 The TS change proposed by the licensee as a result of new ADHRS adds thermal overload devices for valves E12F066A and B to the TS Table 3.8.4.2-1.

Based on these considerations, the design of the motor operators on l

ADHRS valves E12F066A and B and the proposed TS change addressing the addition of the thermal overload devices to TS Table 3.8.4.2-1 are acceptable.

Instrumentation and Control Design The ADHRS design is primarily nonsafety-related, but includes both Class 1E and Non-Class 1E circuitry.

The design adheres to licensing basis commitments such as applicable Regulatory Guide 1.75 requirements.

Conformance with these design requirements provides assurance that the electrical controls and circuits added by the ADHRS will not adversely effect the performance of safety-related systems.

In addition, the licensee performed an ADHRS interaction evaluation to assess the acceptability of new electrical control interactions introduced by ADHRS.

This evaluation considered potential interactions during both normal plant operation (when ADHRS is isolated) and '0C 4 and 5 (when ADHRS may be operating).

Licensing basis assumptions and events were considered including single active failures and operator errors.

No credit was taken

'___1_.._?_l..

i 4

s

-9 for Non-Class IE circuitry. The ADHRS electrical control interaction evaluation confirmed that the ADHRS introduces no new interactions which could adversely affect the performance of safety-related systems.

A modification of the RHR A and B pump permissive logic was made to ensure that the RHR A or B pump does not inadvertently start when either valve E12F066A or 512F0668 is open and no suction path exists.

This condition only occurs during OC 4 and 5 when the ADHRS is operating.

In this situation, remote manual valve realignment from the control room to establish pump suction would allow the associated RHR pump to be started.

Two Class 1E RHR pump bypass control switches, one for RHR A and one for RHR B, have been added in the control room as part of thi_s change. An assessment of the acceptability of the interaction of these new switches with the existing pump interlocks was documented in the ADHRS interaction evaluation submitted by the licensee. We reviewed that analysis.

A safety-related interlock was added to prevent the RHR C pump from starting when its suction valve is closed during ADHRS operation.

Stopping the ADHRS and a manual realignment to establish pump suction would allow the pump to be started.

i The ADHRS instrumentation and associated controls are nonsafety-related.

However, the currently installed instrumentation will be used to monitor and control decay heat removal.

We reviewed the licensee's submittals and agree that the instrumentation added, as part of the ADHRS modification, does not adversely affect or interfere with the instclied Class IE instrumentation of the RHR system and is, therefore, acceptable.

The RHR A and B pump permissive logic modification and the RHR C pump interlock do not prevent the use of these pumps for ECCS injection when manually realigned.

On this basis, the ADHRS electrical control modification is acceptable.

Fire Protection Design The ADHRS will not increase the combustible loading in those areas where it will be located beyond that already assumed in the Fire Hazard Analysis.

Existing fire detectors and suppression capability are adequate for the proposed ADHRS.

No changes or additions were needed to these systems.

Installation of the ADHRS will not affect the integrity of fire barriers or penetration seals.

Therefore, the proposed ADHRS is acceptable with respect to fire protection.

Radiation Protection Design Areas outside of the RHR C and low pressure core spray (LPCS) pump rooms where the ADHRS piping will be routed are currently designated as zone B (0.5-2.5mr/hr) areas.

In order to ensure that the existing radiation zones in these areas are not exceeded following installation of the ADHRS system, the licensee added lead wrap shielding to the ADHRS piping in these areas to allow continued general access.

The licensee has performed a 10 CFR 50.59 evaluation of this additional shielding as recommended by

v

' i Information Notice No. 83-64, " Lead Shielding Attached to Safety-Related Systems Without 10 CFR 50.59 Evaluations."

In order to minimize operator 1

exposure during valve operation, the licensee has added two velve motor operators to the ADHRS which will allow the valves to be remotely operated from the control room.

ADHRS equipment and piping inside the RHR C and LPCS pump room are not shielded.

Radiation levels in these rooms will increase to 56.6 mr/hr (zone D) during the first day of ADHR3 operation (24 hcurs after shutdown), and decline to zone C (2.5-15 mr/hr) levels within 7 days and zone B (0.5 -2.5 mr/hr) levels after the reactor cavity / upper containment pool is flooded and the reactor coolant is diluted.

The existing radiation zone designation for these rooms is zone B.

Normal

{

administrative controls for access to the RHR rooms will be in effect during ADHRS operation.

Issuance of a radiation work permit may or may not be required depending on reason for entry and estimated occupancy time.

These rooms are surveyed by health physics personnel at least weekly and prior to entries into the rooms when conditions are changing (e.g., when i

ADHRS is being placed into operation).

The licensee has estimated that the additional integrated dose over 40 years from operation of the ADHRS will be about 225 rads.

This additionaldosesupplementisinconsequentialwhen.addgdtothecurrent

. integrated dose (normal plus accident) of about 5 X 10 rads.

The licensee has estimated that the addition of the ADHRS will have no adverse impact on the environmental qualification of equipment in the rooms where the new equipment will be located.

The total estimated dose for installation of the ADHRS is approximately 81 man-rems.

The GGNS ALARA committee has reviewed the work package in detail and has implemented changes to reduce total personnel dosage.

This ccmmittee will closely monitor the work progress during ADHRS installation to ensure that the total man-rem received during installation of the system will be minimized.

The licensee's estimate of 81 man-rem to install the ADHRS and the GGNS ALARA conmittee's efforts to minimize this dose are acceptable.

Since the ADHRS is not designed for post-accident operation, the licensee has not addressed post-accident shielding and dose effects.

Based on our review of the licensee's submittals, the radiation protection design features used to minimize personnel doses are consistent with the guidelines in Regulatory Guide 8.8 and are acceptable.

Radiation Monitor for Plant Service Water The function of this radiation monitor is to detect intersystem leakage of reactor coolant into the plant service water system that supplies cooling water to the ADHRS heat exchangers.

The radiacion monitor is not safety-related.

It neither performs an accident mitigation function, nor is it required for safe shutdown of the plant.

This monitor is intended for information only. The monitor consists of a single channel gamma

4

. scintillation detector, high radiation alarms in the main control room, and a local sample point.

The monitor has three trip circuits:

two j

upscale (high-high and high) and one downscale (low).

Each trip is l

visually displayed on the radiation monitor.

Each of the trips actuates j

corresponding control room annunciators.

The design and operaticn of the monitor are identical to existing radiation j

monitors provided in the component cooling water system and the standby 4

service water system.

In addition, the monitor meets the acceptance criteria provided in the NRC Standard Review Plan, Section 11.5.

Therefore, the design of the radiation monitor is acceptable.

2.3 Operation of the ADHRS j

With the design coolant flow rate of 3600 gpm, the ADHRS is capable of removing decay heat from the reactor coolant starting one day after reactor shutdown to maintain reactor coolant temperature of 184 F. Calculations by the licensee also indicate that a temperature of 200 F (the TS temperature limit in OC 4) can be maintained with a flow rate of 2600 gpm.

The ADHRS is designed to operate at a lower flow rate of 1000 gpm by using a flow control valve.

Operating procedures will be implemented to preclude operation of ADHRS at flow rates less than that which would allow reactor coolant temperature to exceed TS limiting temperatures.

In addition, the RHR shutdown cooling TS require that systems such as ADHRS, which are to be used as an

" alternate method capable of decay heat removal" must have their operabi-lity demonstrated prior to use and periodically thereafter.

l The ADHRS could be used during cold shutdown (OC 4) and refueling (OC 5) for shutdown cooling to supplement the resic al heat removal function of the RHR system.

The proposed use of the ADHRS together with the use of the RHR loops for shutdown cooling (SDC), the use of ECCS systems for water injection and associated diesel generators (DG) are shown for RF03 in Figure 2 (attached).

Plant operational conditions (labeled MODE in Figure 2) are shown in Item I.

TS LC0 requirements for shutdown cooling loops (TS 3.4.9.2, TS 3.9.11.1, TS 3.9.11.2), ECCS subsystems (TS 3.5.2),

and diesel generators (TS 3.8.1.2) are indicated in Item II of Figure 2.

The scheduled ECCS subsystems, RHR loops, ADHRS and DGs are indicated in Item III of Figure 2.

When the plant is in OC 4 or 0C 5 with a low reactor cavity water level (LVL), the TS require two operable ECCS subsystems, two operable RHR shutdown cooling loops, and two operable DGs, One DG is required in DIV III, which is capable of powering only the HPCS.

The other required DG is capable of powering one of the two required RHR shutdown cooling loops and some of the ECCS subsystems.

DIV I can power LPCS, LPCI A and RHR A.

DIV 11 can power LFCI B and.C and RHR B and C.

If the DG powering the shutdown cooling loop fails with a loss of offsite power, the HPCS and its associated DIV III DG can be used for cooling the core until power is restored.

This occurs by injecting water into the reactor vessel and discharging water to the suppression pool.

5 Thus, for example, in the first two days of,the outage (See Figure 2) while in DC 4 with the reactor pressure vessel head on, HPCS can be powered by DIV III DG and the alternate shutdown cooling loop RHR B can be powered by DIV II DG (indicated by an asterisk in Figure 2). The other two loops, LPCS and RHR A can only be powered by offsite power during this portion of the outage because the DIV I DG is undergoing maintenance.

The ADHRS is designed for operation on offsite power only.

In Item III of Figure 2, the RHR (SDC) line shows which RHR loops are operable.

The Alternate (SDC) line shows the RHR loops that are not operable, but will be used as the " alternate method capable of decay heat removal" allowed in Action a of TS 3.4.9.2, TS 3.9.11.1 and TS 3.9.11.2, when an RHR train is not operable.

The new ADHRS would also be used as an alternate method capable of decay heat removal in accordance with these specifications.

Since the ADHRS 9

cannot be powered by a DG its use as an alternate SDC system either (1) would be limited to replacement of an RHR loop also powered by offsite power or (2) would be backed up by an RHR loop capable of being powered by its associated DG. As shown in Figure 2, the first condition is met for days 17 to 28 of the outage because RHR A loop, powered by DIV I is-operable.

The second condition is met for days 13 to 15 of the outage because ADHRS is backed up by RHR A loop.

The backup RHR A loop would be l

inoperable because it would b.e lined up to take suction from the spent fuel pool rather than from th'e reactor.

However, it would be capable of keeping reactor coolant temperature within TS limits in the event of the loss of offsite power. The implementation of these requirements is included in GGNS administrative procedures.

TS are discussed in Section 2.5.

l The licensee performed an analysis of the effect of the ADHRS design and operation on the operation of safety-related systems in OC 1, 2 and 3 and on the operation of RHR loops and ECCS subsystems in OC 4 and 5.

i As discussed in Section 2.2, the ADHRS will be isolated on the reactor coolant side and on the plant service water side during OC 1, 2 and 3.

The motor operated isolation valves will have power removed from the operators.

The interlock on the RHR C pump start and the start permissive on RHR A and RHR B pumps would be in effect with the valves associated with these circuits positioned to allow pump starts. A failure of the circuit may cause one of the pumps to fail to start when an actuation signal is received, but this is within the bounds of the single failure criterion used in the FSAR safety analysis and is, therefore, acceptable.

In OC 4 and 5, more interactions are potentially possible between the ADHRS and the safety-related RHR shutdown cooling loops and ECCS subsystens. As shown in Figure 1, the ADHRS suction is connected to the fuel pool cooling and cleanup line which is joined to the RHR A, B and C loop suction piping.

This results in the need for additional procedural controls and constraints to assure continued shutdown cooling and ECCS injection when the ADHRS is being operated.

The licensee has performed an analysis of the interaction of the ADHRS design and operation with the existing plant systems to ensure that l

' potential adverse affects would be minimized. Appropriate procedural controls and rest.*aints are included as a part of the operating instructions.

The analysis included a review of events and ADHRS operating modes.

The events included inadvertent draining of the reactor vessel and loss of shutdown cooling.

For the reactor vessel draining events, the ability of the assumed operable ECCS subsystems to deliver flow to the reactor vessel in accordance with OC 4 and 5 requirements were examined.

Criteria included maintenance of keep-fill and minimum flow functions, maintenance of the ASME Class 2 boundary of the ECCS flow path, avoidance of pump excess flow or pump net positive suction head concerns and, avoidance of overpressurization of the ADHRS.

Single failures and operator errors were examined for their effects.

The interconnected systems examined for compatibility and continued operability included the RHR system (for shutdown cooling, and water injection modes), and the fuel pool cooling and cleanup system (for cooling and shielding, and LPCS modes) and the nuclear boiler system (for temperature control, coolant circulation, shielding and coolant inventory).

As a result of this interaction analysis, the licensee identified procedural controls necessary for acceptable operation of ADHRS and RHR in shutdown cooling and water injection modes.

Some of the more significant require-ments are:

1.

ADHRS should be stopped and manually isolated if loss of shutdown cooling occurs during OC 4 when the reactor pressure vessel head is on.

This would prevent overpressurization of the ADHRS.

2.

ADHRS should be isolated on the primary and secondary sides during OC 1, 2 or 3.

3.

Simultaneous operation of the ADHRS and RHR loops A & B for shutdown cooling should be precluded for certain alignments of these systems.

4.

Simultaneous operation of ACHRS and LPCI C water injection should be precluded.

5.

Adequate time should be available to realign valves and to start shutdown cooling subsystems (ADHRS, RHR A or RHR B) in the event the operating shutdown cooling train is lost or an inadvertent drainage of the reactor pressure vessel occurs During our review of the licensee's submittals, several other areas were considered which impact operation of safety-related systems as follows:

1.

The jockey pumps which keep the discharge lines of LPCI A, B and C pumps filled must be turned off when ADHRS is operating, because a valve upstream of the suction to the jockey pumps must be closed.

The licensee states that the ADHRS will keep the lines filled.

However, the keep-fill low pressure alarm on the LPCI A is expected to come on, thus making LPCI A inoperable as the reactor cavity water level is drained. Also, because the jockey pumps are off, one channel of the suppression pool water level instrumentation is

- _ - - - _ - - - - - _ - - - - - - - - - - - - - - ~ - -

1 expected to be inoperable (TS 3.5.3 Action C). These interactions were reviewed by the NRC staff and are acceptable for RF0 3 as described in the safety evaluation for Amendment No. 58, issued i

March 16, 1989. However, for the long term the licensee committed to determine actions necessary to prevent these adverse interactions.

2.

Some TS (e.g., TS 3.7.1.1 Action A.2) applicable to OC 3 (hot shutdown) require the operator to " maintain reactor coolant temperature as low as practical by use of alternate heat removal methods."

If the ADHRS is used for this purpose in OC 3, the ADHRS l

may be overpressurized.

RHR suction piping valves are interlocked I

at 135 psig pressure. However, the ADHRS systc;n suction piping is designed for 80 psig.

The licensee will add a caution in its Off Nonnal Event Procedure 05-1-01-III-1 stating that the ADHRS should i

not be used for this purpose. We conclude that the use of a caution in GGNS procedures is acceptable for RF03. However, prior to subsequent use of the ADHRS we consider that the TS should be changed to preclude the use of the ADHRS in OC 1, 2 or 3.

To address these concerns about how the above conditions will be implemented in plant procedures and administrative controls, and how operators will be trained to use the ACHRS, the licensee responded that ADHRS procedural controls will be incorporated into existing procedures (System Operating i

Instruction 04-1-01-E12-1 " Residual Heat Removal System - Safety-Related,"

l and Off Normal Event Procedure 05-1-01-111-1 " Inadequate Decay Heat Removal"). Operators will be trained in the use of the ADHRS during qualification training prior to start of RF03.

Also during the course of our review, we expressed concerns about the adequacy of the operator response time to prevent inadequate core cooling (core uncovery) for cases with:

(a) inadvertent RCS drainage, and (b) loss of heat removal capability.

In response, the licensee committed to implement administrative controls in the form of Technical Specification Position Statements

  • to require at least one of the valves (E12F008 and l

E12F009 which isolate the RCS from the decay heat removal system) to be automatically isolated on a Level 3 (L3) reactor water level signal during any activity with a potential for draining the reactor vessel.

With the implementation of the TSPS, the licensee concluded, and we agree, that an operator time of about 25 minutes is adequate to manually place a low pressure ECCS pump in service to maintain the core covered with water.

This is supported by the UFSAR Section 5.4.7.2.7 analysis which assumes l

  • Technical Specification Position Statements (TSPS) are operating limitations and requirements in the Plant Operations Manual, Administrative Procedure 01-S-15-2 " Plant Staff Handling of Plant Licensing Activities - Safety-Related.

These TSPS, in part, provide requirements that are more conservative than TS and are placed in effect until TS changes can be proposed and reviewed by the NRC.

1

, automatic isolation of valves E12F008 and E12F009 on L3 water level.

The TSPS will also require that, when possible, both valves will be nade capable of automatic actuation.

In addition, the licensee committed to require at l' east one of the two operable ECCS subsystems to be capable of automatically injecting water upon receipt of a low reactor vessel water level signal.

The acceptability of an operator response time of 25 minutes is based on the licensee's calculation. -The licensee calculated that the maximum heatup rate is about 53 F/hr in the event of loss of all heat removal systems.

The calculation is based on:

(1) the design' decay p(ower for the ADHRS (decay power at 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> following reactor shutdown),

2) the reactor vessel water level is one foot below the top of the vessel flange, and (3) the initial reactor coolant temperature is 185 F.

The licensee concluded that the resulting operator response time of 25 minutes is adequate to prevent the water from reaching 212 F for the worst case

'l loss of cooling event which may occur during 0C 5 with the maximum operating temperature of 140 F.

GGNS Unit 1 "Off Normal Event Procedure 05-1-01-III-1" includes conservative time-to-boil curves which will be used to determine the acceptability of manual actions required to place backup shutdown cooling loops and ECCS subsystems into operation.

Based on our review, we conclude that with the appropriate procedures incorporating the procedural requirements discussed,in this section and With adequate operator training, as committed by the licensee, the ADHRS is acceptable as an alternate method for decay heat removal during RF03.

2.4 Accidents i

As a part of our review, we calculated the offsite dose consequences of a postulated rupture of an ADHRS heat exchanger tube when the ADhRS is.

operating.

The ADHRS is designed to operate only in OC 4 and 5 (cold shutdown and refueling).

Therefore, no new fuel damage is assumed as a result of this tube failure. We assumed that the radioactivity available for a postulated uncontrolled release to the environment due to a failure of the ADHRS pressure boundary will be the maximum amount of radioactivity allowed in the reactor primary coola,1t by the GGNS TS.

This reactor coolant activity limit is prior to the failure and assumes that the entire reactor primary coolant mass is released to the environment.

The calculation further assumes that all noble gases and ten percent of the radiciodines are instantaneously released, unfiltered, to the site boundary using the zero to two hour atmospheric dispersion factor.

No iodine spiking in the coolant due to the ADHRS failure is assumed. Our analyses indicate that-the resultant offsite boundary doses are 3 rem thyroid and 0.2 rem whole body.

These doses are well within the radiation exposure guidelines of 10 CFR Part 100.

As a result of the ADHRS failure, the entire reactor coolant mass is assumed to enter the groundwater table below the plant and to move to the

' Mississippi River.

There are no unrestricted groundwater users between the plant and the river.

However, the Mississippi River provides a source ofpotablewatertoanindustrialuserwelldownstreamofthgplant.

We previously calculated an overall dilution factor of 7.6 x 10 at this users intake (see " Safety Evaluation Report related to the operation of Grand Gulf Nuclear Station, Units 1 and 2," September 1981, Section 15.5, concerning a postulated radioactive release due to a radioactive liquid tank failure). Considering dilution only, the calculated radionuclides concentrations in the Mississippi River are small fractions of the limits of 10 CFR Part 20, Appendix B, Table 2, Column 2, for unrestricted areas.

Based on our independent accident analyses, we conclude that the proposed ADHRS design is acceptable because failure of the ADHRS allowing the entire reactor coolant mass to be released to the environment meets the limits in 10 CFR Part 20 and the guidelines in 10 CFR Part 100.

2.5 _ Technical Specification Changes One of the proposed TS changes is to add the new radiation monitor in the PSW to TS Table 3.3.7.1-1.

The new PSW radiation monitor would be added as Item 3 with the operational conditions specified as a new footnote which states:

"with ADHR system heat exchanger in operation." The identical surveillance requirements for those of the component cooling water and the standby service water radiation monitors are added as Item 3 of Table 4.3.7.1-1 for the PSW radiation monitor.

The design of this radiation monitor as discussed in Section 2.2 was found to be acceptable.

Therefore, the addition of this TS is acceptable.

The other proposed TS change is to add the new thermal overload protection devices for isolation valves E12F066A and E12F0668 to Table 3.8.4.2-1.

The design of these devices, as discussed in Section 2.2, was found to be acceptable.

Therefore, the addition of this TS is acceptable.

During the review, we questioned the licensee's interpretation and implementa-tion of the existing Technical Specifications for the ECCS and RHR systems during OC 4 and 5.

With regard to ECCS requirements, the licensee committed to implement administrative controls in the form of a TSPS to require that at least one of the two ECCS subsystems required operable by TS 3.5.2 be capable of automatic initiation and injection of water to the reactor vessel.

In addition, the TSPS will require that if no ECCS subsystem with automatic initiation and injection is operable, then operations which have a potential for draining the reactor vessel will be suspended immediately.

With regard to RHR requirements, and in order to consider ADHRS as part of the shutdown cooling means, the licensee committed to implement administrative controls in the form of a TSPS that provides requirements as follows:

1.

For TS 3.9.11.2 (0C 5 with a low water level) and TS 3.4.9.2 (0C 4),

one operable and one operating shutdown cooling system:

a.

In the event that a loss of offsite power occurs, one of the systems shall be capable of removing decay heat (i.e., powered

v o

' by an onsite power source).

No single failure (in addition to

~

the loss of offsite power) need he assumed in this case.

b.

In the event of the loss of one of the operating systems, the opurable system shall be placed in service for decay heat removal.

Relevant action statements of the TS shall also be used.

4 c.

In the event of a loss of offsite power and the loss of the operating shutdown cooling system (either ADHRS or RHR), an ECCS system shall be operable and capable of being powered with its associated onsite power. supply.

2.

For TS 3.9.11.1 (OC 5 with a high water level), only one operating.

shutdown system is required. When the ADHRS is being used to fulfill the requirements of an alternate, as described in TS 3.9.11.1, Action a, an RHR system shall be available as a backup and capable of accommodating a loss of offsite power (i.e., can be powered by an onsite power).

Section 2.3 identifies additional procedural limitations and requirements for operation of the ADHRS. Automatic isolation of the RHR common sucticn line is required upon receipt.of a low reactor vessel water level signal.

Actions are needed' to eliminatie the adverse interaction of the ADHRS on the operability of LPCI A subsystem and the operability of the suppression pool water level instrumentation.

Procedures are needed to preclude the use of ADHRS in OC 1, 2 or 3.

We evaluated the proposed subsystem procedural requirements and found that the existing safety margin of the TS for the ECCS and RHR systems does not significantly decrease with implementation of the procedural requirements.

Therefore, for the short term, the staff concludes that addition of the ADHRS as one of the shutdown cooling systems is acceptable for RF03, using these requirements. The licensee committed to evaluate incorporation of these requirements into the TS for the long term.

The evaluation will'be completed by August 28, 1989 and submitted to NRC by September 22, 1989.

That submittal will document the results of the evaluation, including TS changes as necessary.

This commitment for the long term implementation of these requirements is acceptable.

The licensee has proposed the addition of a note to TS 3.4.9.2, 3.9.11.1 and 3.9.11.2 to limit the use of the ADHRS with the present TS to RF03.

These TS changes are acceptable.

s 2.6 Summary We have evaluated the licensee's submittals including the ADHRS functional design requirements, operational evaluation, procedural requirements, and TSPS requirements.

Therefore, we conclude that with the appropriate procedures and TSPS and with adequate operator training, operation of the proposed ADHRS is acceptable for RF03.

The proposed TS changes are also acceptable for RF03 For the long term use of the ADHRS after RF03, additional considerations for TS to implement limiting conditions for operation of ECCS subsystems and shutdown cooling loops, including the ADHRS are needed.

The licensee has committed to evaluate TS changes and by October 2, 1989, to provide the results of its evaluation for our review and approval.

3.0 ENVIRONMENTAL CONSIDERATION

This amendment changes a requirement with respect to the installation or use of a facility component located within the restricted area as defined in 10 CFR Part 20 and changes to the surveillance requirements.

The staff has determined that the amendment involves no significant increase in the amounts, and no significant change in the types, of any effluents that may be released off site; and that there is no significant increase in individual or cumulative occupational radiation exposure.

The Commission has previously issued a proposed finding that this amendment involves no significant hazards consideration and there has been no public correent on such finding. Accordingly, this amendment meets the eligibility criteria for categorical exclusion set forth in 10 CFR 51.22(c)(9).

Pursuant to 10 CFR 51.22(b), no environmental impact statement or environmental assessment need be prepared in connection with the issuance of this amendment.

4.0 CONCLUSION

The Commission made a proposed determination that this amendment involves no significant hazards consideration, which was published in the Federal Register (54 FR 5166) on February 1,1989, and consulted with 'the State of Mississippi.

No public comments or requests for hearing were received, and the State of Mississippi did not have any coments.

The staff has concluded, based on the considerations discussed above, that:

(1) there is reasonable assurance that the health and safety of the public will not be endangered by operation in the proposed manner, and (21 auch activities will be conducted in compliance with the Commission's regulations and the issuance of this amendment will not be inimical to the common defense and the security, or to the health and safety of the public.

Principal Contributors:

S. Sun, Reactor Systems Branch H. Shaw, Mechanical Engineering Branch E. J. Sullivan, Jr., Mechanical Engineering Bracch R. Lipinski, Mechanical Engineering Branch

v l

e

  • l S. Chan, Structural and Geosciences Branch F. Litton, Materials Engineering Branch I

D. Notley, Chemical Engineering Branch J. Lee Radiation Protection Branch C.'Hinson, Radiation Protection Branch O. Chopra,- Electrical Systems Branch I

R. Jones, Reactor Systems Branch B. Marcus, Instrumentation and Control Systems Branch i

C. Schulten, Technical Specifications Branch j

L. Kintner, Project Directorate 11-1 J

Dated:

'1 arch 27, 1989 4

l l

l ll e

m 20

[

4 4

edd a

h lgf e

s

=

oo e

e a

  • WV n

mm>

y_

...............................-...e r,,

f, fn.........

g y

2I f

p.c.o..... A......c.o. 3 i"

g E

i i

i

~

~

T

!h<

gs w

. w..,....... x -,

d x

x e

z z

x8

  • g j@3 L 3

l 3

Y l

Y li, 58 I ! g-b i

! c m.can l

r-I +-

I

e....CxQ. p N.... 7... w h

"g a

.i...........-

F r

2 5

s m

ss n8 J

e e

e w

E i

9 o

a a

a I

6 f

f

~

x N

(o 9

q (o N (o m

l4

.o 5

2 m

E E

au 3

r 'C> C - - - - #

8 I

w

+

r g

E I

5 w

s z.4ji I

mu f,

v m.

a u

~x m

l+lT

~

~

c

H *

=":

2 4W4 u

e a% sw 9

mees mL mL g

74 M

v5 v:

D Li DLi 6

b m

7 7 N

n gCW h

4 8:

o q

'd d a Wc'

/\\

TT

.a MxwW>

l l

  • '~

E DO2 M,

A,

A A

"A 4 4 3 4 l

l 9 3 y

3 4 l

3 3 B

I

/

3 4 I

7 1

v 2 4 i

E D

8 0 D

I/

2 4 O 4 V

5 0 M

A lB 2 3 4

4 8 2

2 3 3 7 2 3 3 8 2 3 S

1 6

R 2 3 HR 0

'4 L

2 V

E L

9 3 D

1 3

Os W

2 2 M

O 1

2

(

L N

I 7

1 R

P 1 3

L t

A 8 0 E

V O

4 et D

L 1

3 1

i 2

v Oa I

5 9 M

O i

T f

D 1

2

/

H 4 8 I

V 1

2 A

A t

O 3 7 1

3 T

3 4 1

2 S

1 s

1 t

0 d A

RE 1

3 L

S 3

E V

R AL 9 2 D

L H

2 Os W

2 D

8 2 M

A E U O

1 L

LD 7 2 0

CE S 2

)

e N

"2 S

1 i

o UH t

8 i

4 1

c E NC u

7

^

A A

l RU 3

1 S

G e

I F

2 1

V I

I F

8 D

L3 A

1 1

1 4

E UO 3

1 D

L E

0 a A

i B V

GF 3

l 9 2 M

A O

R R

2 1

E E

D 8

1 E

R P

2 1

D 6

7 0 M

T

^

1

_ O Os E

1 N

3 1

V 4

R t

6 G.

O A

E 8

2 L

W V

R 8

L H 2 C

H O

4 R

7 G

P G

2 i

A H

M3 Y

6 2

C 2

i A

A i

4 N 4

E D

wL 2

i E

Os oV 8

2 l

1 t

G 4

2 M.

tL V

i A

i "i

I R

0 3

D 2

E

^

E 9

D I

M 2

O4 2

2 I

E 1

M v

8 i

E 1

1 D

A A

i i

i T 7

S E

I 1

)

)

)

OT L

P T

)

C E

S Y

CN U

U N

C E

LE S D G D

S E

E T

N T

A A N

M D

G O

D N

c_ M C (S /

E C

I N

S

/

A D

L E

Q EE CR D H

C T

G

(

I N

D D

G

]

T L

ER EH C

E C

L R

R E

A T

E A

H E )C T

U TD SI R

S J

E U

N NN RQ 3

I R

R T

A O

O O

L L

I A (S C

AO cE O

T A

L C.

iR F

U U

A N

O E

T R

(

A S

M S

I.

I.

l.

l

(

I I

A

'