Text

Enclosure 3 - Usuhs/Afrri Triga Reactor Control System Functional Requirements Specification (Conceptual) - T3S990001-FRS Rev a, Redacted
	ML21316A036
Person / Time
Site:	Armed Forces Radiobiology Research Institute
Issue date:	11/08/2021
From:	; US Dept of Defense, Armed Forces Radiobiology Research Institute
To:	; Office of Nuclear Reactor Regulation
Shared Package
ML21316A032	List: ML21316A033; ML21316A036; ML21316A037; ML21316A038;
References
	EPID L-2020-NFA-0012, GA/EMS-5059 T3S990001-FRS, Rev A
	Download: ML21316A036 (49)
	v • d • e

Enclosure 3 - Redacted - Available to the Public USUHS/AFRRI TRIGA Reactor Control System Functional Requirements Specification (Conceptual) - T3S990001-FRS Rev A

Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390 REVISIONS REV DESCRIPTION DATE APPROVED

+ t:IINIIIUII. A'l'OWIICS EI.EtrRONIC SVSFEWIS 4990 GREENCRAIG LANE SAN DIEGO, CA 92123-1675

, fth13 I I .

o/ / f(,/7',~ USUHS/AFRRI TRIGA REACTOR CONTROL SYSTEM

'IJ1,{Zt>13 FUNCTIONAL REQUIREMENTS SPECIFICATION ti I .L,,,. (Conceptual)

S, ,.,,~

°t - 1(,,. - Ig SIZE CAGE CODE DRAWING NUMBER REV A 58307 T3S990001-FRS A DRW LE'IE'L I SCALf NONE I SHEET 1 OF48 GA-ESl-0258 FORM-A Rev. 9/10/2012 Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390

Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390 Table of Contents 1 INTRODUCTION ...................................................................................................................................... 6 1.1 PROJECT PURPOSE ....................................................................................................................6 1.2 DEFINITIONS, ACRONYMS AND ABBREVIATIONS .................................................................. 6 1.2.1 Definitions ........................................................................................................................ 6 1.2.2 Acronyms and Abbreviations ........................................................................................... 7

1.3 REFERENCES

...............................................................................................................................9 1.3.1 Government Regulations, Standards, and Publications .................................................. 9 1.3.2 Industry Standards ........................................................................................................... 9 1.3.3 GA-ESI Documents ......................................................................................................... 9 1.3.4 Customer Documents ...................................................................................................... 9 1.4 EXISTING SYSTEM OVERVIEW ..................................................................................................9 2 REPLACEMENT SYSTEM CAPABILITIES, CONDITIONS, AND CONSTRAINTS ............................ 12 2.1 GENERAL DESCRIPTION .......................................................................................................... 12 2.2 GENERAL SYSTEM CONSOLE ................................................................................................. 13 2.3 SYSTEM FUNCTIONALITY CHARACTE~ISTICS ..................................................................... 17 2.3.1 User Login and Access .................................................................................................. 17 2.3.2 Control Console and Display Instruments ..................................................................... 18 2.3.3 Facility Interlock System ................................................................................................ 23 2.3.4 Mode Control Panel ....................................................................................................... 24 2.3.5 Rod Control Panel ......................................................................................................... 24 2.3.6 Scram/Interlock Test switch ........................................................................................... 26 2.3.7 Banked Automatic Movement. ....................................................................................... 26 2.3.8 Chart Recorder ..............................................................................................................26 2.3.9 Prestart Tests.................................................................................................................26 2.3.10 Annunciator Function ..................................................................................................... 27 2.3.11 History Capture and Playback ....................................................................................... 27 2.3.12 TINA ...............................................................................................................................28 2.3.13 TRIGA BASIC ................................................................................................................ 29 2.3.14 Radiation Monitoring ...................................................................................................... 29 2.3.15 Reactor Tank Water Level ............................................................................................. 30 2.3.16 Shleld Doors .................................................................................................................. 30 2.3.17 Water Purification System ............................................................................................. 30 2.3.18 Primary Cooling Water Temperature ............................................................................. 30 2.3.19 Primary Cooling Water Conductivities ........................................................................... 31 2.3.20 Gamma Activity of the Water in the Purification System ............................................... 31 T3S99001-FRS Rev A Page 2 Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390

Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390 2.3.21 Safety Systems .............................................................................................................. 31 2.3.22 Emergency Stop ............................................................................................................ 34 2.3.23 SCRAM Logic ................................................................................................................ 34 2.3.24 Reactor Power Measurements ...................................................................................... 35 2.4 PHYSICAL ...................................................................................................................................40 2.4.1 Electrical ........................................................................................................................40 2.4.2 UPS ................................................................................................................................40 2.4.3 Environmental ................................................................................................................ 41 2.5 MONITORS AND COMPUTERS ................................................................................................. 41 2 .5.1 Display Monitors ............................................................................................................41 2.5.2 Mice and Keyboards ...................................................................................................... 41 APPENDIX 1 CONSOLE COMPARISON TABLE .................................................................................... 42 APPENDIX 2 TRIGA REACTOR INTERLOCK 1/0 LIST .........................._. ............................................... 44 APPENDIX 3 INPUT/OUTPUT LIST .........................................................................................................46 APPENDIX 4 AFRRI O.P. BG2 PULSE OPERATION (SUBCRITICAL) .................................................. 48 T3S99001-FRS Rev A Page 3 Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390

Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390 List of Figures Figure 1 - New AFRRI Power Instrument Ranges ..................................................................................... 11 Figure 2- Functional System Block Diagram .............................................................................................. 12 Figure 3 - Conceptual Control Console ....................................................................................................... 13 Figure 4 - Reactor Display 1 ....................................................................................................................... 14 Figure 5 - Reactor Display 2 ....................................................................................................................... 15 Figure 6 - Prestarts ..................................................................................................................................... 15 Figure 7 - Pulse Display ............................................................................................................................. 16 Figure 8-Administration Screen ................................................................................................................ 16 Figure 9- Test Screen ................................................................................................................................ 17 Figure 10 - Status Display (Typical) ........................................................................................................... 22 Figure 11 - Status Display (Startup, all Annunciators Lit) .......................................................................... 22 Figure 12-TINA Interface Screen ............................................................................................................. 29 Figure 13 - AFRRI TRIGA Detector Arrangement After Console Upgrade ................................................ 37 REVISIONS Revision Date Revision Description A 9/9/2013 1. Revisions are from Rev X4 T3S900D903-DOC.

2. Revised the document number from T3S900D903-DOC Rev X4 to T3S99001-FRS Rev A to confom, to GA-ESI standards.

3. Section 2.3.2.1.2 The word NClarify??* at the end of the section was replaced by "In auto mode, the simulated REG UP and REG DOWN buttons will be a light gray color rather than the standard white present in all other modes.

This differentiates reg up and down operations performed by the computer from those performed by an operator.

Mainly, this is useful when running the history playback program so that it is relatively easy to differentiate_

computer and manual rod movements."

4. Section 2.3.15 The sentence uls there a high level scram?" was replaced.by "AFRRl's reactor does not have a high water level scram."

5. Section 2.3.23 The sentence *The console will remain on and powered by the UPS to enable a graceful shutdown* was replaced by "The console will remain on, powered by the UPS, to enable monitoring of reactor conditions and to enable a graceful shutdown of the console computers."

6. Section 2.3.2.1.6 The sentence "The data being provided includes: width at1/2 power... " was replaced by T3S99001-FRS Rev A Page 4 Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390

Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390 The data being provided includes: full width at half max ...

7. Section 2.3.21.5 The following bullet was deleted, "The control rod magnets can only be powered if the exposure room door on the same side of the shield door as the reactor is closed to enable the control rod magnets. NOTE: It is possible to manually move the reactor into Zone 2 and operate the reactor with the shield door is closed."

8. Section 2.3.24.1.4 Pulse Mode -Added bullet at the end,"The system will support AFRRl's OP 8G2, Pulse Operation (Subcritical) shown in Appendix 4."

9. Added Appendix 4 - AFRRl's OP 8G2, Pulse Operation (subcritical).

T3S99001-FRS Rev A Page 5 Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390

Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390 1 INTRODUCTION This document is the Conceptual Functional Requirements Specification (FRS) for the replacement of the existing GA-ESI monitoring, control, and safety systems of the TRIGA Mark F Research Reactor at the Armed Forces Radiobiology Research Institute {AFRRI) in Bethesda, MD. The purpose of this document is to define the conceptual requirements for the design, fabrication, and installation of the replacement systems. For the purposes of this specification; definitions, general system descriptions, and notes are provided as additional information and are not considered conceptual requirements. The conceptual requirements are defined in Section 2 and Section 3 of this document.

1.1 Project Purpose The purpose of the replacement project is to provide operators with similar reactor controls, indications, and alarms; balance of plant controls, indications, and alarms; video surveillance; and an integrated annunciator system. Controls will be updated and old obsolete equipment will be updated. See Appendix 1 for comparison between the old and new console design. GA-ESI will install the system including operating software, computers, reactor Instrumentation channels, control console, data acquisition cabinet, control rod drives, compensated ion chamber, facility interlocks, and associated wiring.

The new system has been specified with the goal of replacing existing systems with almost a drop-in replacement, in terms of its operational and physical aspects, and in providing operators with a user interface with a familiar look and feel.

1.2 Definitions, Acronyms and Abbreviations 1.2.1 Definitions The definitions used herein are consistent with IEEE 610.12-1990 with the following clarifications:

Accuracy The degree of agreement with the true value of the measured input, expressed as percent of reading for digital readouts. {ANSI N42.18-1980)

Anomaly Anything observed in the documentation or operation of software that deviates from expectations. [Derived from IEEE Std 610.12-1990]

Catastrophic Event A catastrophic event is an event without waming from which recovery is impossible. Catastrophic events include hardware or software failures resulting in computation and processing errors. The processor will halt or reset based on a configuration item after a catastrophic event.

Channel The features and capabilities associated with a detector, a sensor, or a calculated group of information.

Failsafe Condition Failsafe condition is an actuated state of the TRIGA System as the result of a catastrophic failure; such as loss of power, break of circuit, or device failure catastrophic event. In most plants, the actuation circuit uses closed contacts and energized wires for a normal non-actuated condition. In most applications, the TRIGA actuation contacts will be open in the failsafe condition.

Handled Conditions Conditions that the TRIGA is designed to handle and to continue processing.

These conditions include anomalies, faults, and failures.

Hardware A specification that documents the hardware requirements.

Requirements Specification International System The system is abbreviated SI, from the le Systeme international d'unites, Is the of Units modern form of the metric system, and is generally a system devised around the convenience of the number ten.

Interlock A system design feature, as required by a site's Safety Analysis and/or Technical Soecification, to orevent unwanted ooerator or svstem action.

T3S99001-FRS Rev A Page 6 Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390

Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390 Depending on a specific site design, some Interlocks are displayed on the annunciator pane of the U IT console and must be acknowledged by the operator, but remain displayed on the Warnings Pane as long as the prescribed design conditions remain (e.g. Rod Withdrawal Prevention Interlock), and some Interlocks are silent design features (e.g. prevent withdrawing two rods simultaneously with the ROD UP buttons).

Non-volatile Data Data that is stored in non-volatile memory. Non-volatile data is preserved over a power fail recovery.

Power Failure Power failure is the condition when AC power is outside required limits, or logic power is below a low limit.

Prohibited Materials Prohibited materials are materials that will not be used 1) during the construction of the TRIGA, 2) as consumables (grease, oil, etc.) during the manufacturing of the TRIGA, and 3) as cleaning agents during manufacturing of the TRIGA.

Rate of Change The first derivative of the smooth radiation data.

Response Time The response time is the time interval from receipt of an activity value which exceeds the setpoint at the input buffer of the TRIGA to the trip contact closure.

SCRAM An action to break the SCRAM loop circuit and thus tum off current to control rod drive electromagnets to all rods and the air solenoid to a transient rod. This allows the control rods to fall back into the core by gravity. When a SCRAM occurs, an annunciator is displayed on the annunciator pane of the UIT (until acknowledged) and indicators on the SCRAM Pane of the STATUS display will light (until the condition clears).

System A structured collection of information that embodies the requirements of the Requirements system. [IEEE Std 1233-1998) A specification that documents the Specification (SyRS) requirements to establish a design basis and the conceptual design for a system or subsystem. [GA-ESI]

Software Documentation of the essential requirements (functions, performance, design Requirements constraints, and attributes) of the software and its external interfaces. [IEEE Specification (SRS) Std 610.12-1990]

Trip The action of a measured value exceeding a preset setpoint. A trip may occur in hardware (e.g. via a comparator) or in software (e.g. IF lnp > Setpt THEN ... ).

When a trip occurs, the system design determines what actions will occur. A trip may be ignored, or initiate a Warning, Interlock, or SCRAM sequence. Ali trips that result in a Warning, Interlock, or SCRAM are logged by the TRIGA software.

Warning A trip output indicating a condition requiring operator acknowledgement.

Warnings are displayed on the Warnings Pane of the STATUS display and on the annunciator pane of the UIT console. When acknowledged, the annunciator pane Warning will be cleared, but the Warnings Pane indicator stays lit as long as the condition persists. Note that some instruments (notably radiation monitors) may issue Alerts, Alarms, and/or Warnings at various levels; for purposes of th is document, all of these outputs are called

'Warnings'.

1.2.2 Acronyms and Ab~reviations The abbreviations listed have the following meanings where used in this specification:

T3S99001-FRS Rev A Page 7 Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390

Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390 AC Alternating Current AFRRI Armed Forces Radiobiology Research Institute ANSI American National Standards Institute ASTM American Society for Testing Materials CPU Central Processing Unit Cpm Counts per Minute ccs Console Computer System. This is the Linux computer in the TRIGA Console.

csc Control System Console. This is the reactor control console found in the reactor control room.

DAC Data Acquisition Cabinet. This is a rack-mount cabinet that contains all analog and digital 1/0, reactor channels, signal conditioning, power supplies, and other hardware needed to control and report the status of the reactor's operation.

DAS Data Acquisition System. This is a software process that communicates with the DAC equipment and, therefore, the reactor.

dB Decibels DPDT Double-Pole Double-Throw FAT Factory Acceptance Test GA-ESI General Atomics Electronic Systems, Inc.

GM Geiger-MOiier IEEE Institute of Electrical and Electronic Engineers LED Light-Emitting Diode MTBF Mean Time Between Failures NEMA National Electrical Manufacturers Association NQA Nuclear Quality Assurance NRC Nuclear Regulatory Commission PVC Polyvinyl Chloride RG Regulatory Guide RH Relative Humidity Rms Root Mean Square SAR Safety Analysis Report SI International System of Units sow Statement of Work SyRS System Requirements Specification TINA Testing, Instructing, No Atomics TRIGA Training, Research, Isotope, General Atomics UI User Interface UIT User Interface Tenninal. This is the Windows-based computer in the CSC.

T3S99001-FRS Rev A Page 8 Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390

Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390 IWatchdog Timer 1.3 References 1.3.1 Government Regulations, Standards, and Publications NRC 10 CFR21 Reporting of Defects and Noncompliance NRC 10 CFR 50, Appendix Domestic Licensing of Production and Utilization Facilities, A, Criterion 13 General Design Criteria for Nuclear Power Plants, Instrumentation and Control NRC NUREG CR6303 Method for Performing Diversity and Defense*in*Depth Analyses of Reactor Protection Systems.

1.3.2 Industry Standards IEEE IEEE Std 603 IEEE Standard Criteria for Safety Systems for Nuclear Power Generating Stations.

Note: The eighth paragraph of SOW 3.2.2.4 addresses this reference.

IEEE IEEE Std 610.10 IEEE Glossary of Computer Hardware Terminology IEEE IEEE Std 610.12*1990 IEEE Glossary of Software Engineering Terminology 1.3.3 GA*ESI Documents GA-ESI Statement of Work Contract HT904412C0006 - TRIGA and Cobalt Control (SOW) (Dated Systems - Statement of Work 12/20/2012) 1.3.4 Customer Documents AFRRI SAR Safety Analysis Report for the Armed Forces Radiobiology Research Institute (AFRRI) TRIGA Mark-F Reactor AFRRI Technical Technical Specifications for the AFRRI Reactor Facility Specifications (Dated July 2004) 1.4 Existing System Overview Note: The material for the Existing System Overview and General Description sections was obtained from the AFRRI SAR, Technical Specification, a site survey performed in January 2013, and other available documents and edited for use in this document.

The AFRRI-TRIGA Mark*F reactor was originally developed and installed by the General Atomics Division of the General Dynamics Corporation. The AFRRI-TRIGA reactor first achieved criticality in 1962. The reactor is an open pool-type light water reactor which can operate in either the steady-state mode up to 1.1 megawatt (thermal) or pulse mode with a step reactivity insertion of up to 2.8% Liklk (Technical Specifications limit) and utilizes standard-design General Atomics fuel elements. The AFRRI-TRIGA T3S99001-FRS Rev A Page 9 Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390

Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390 Mark-F reactor has the unique capability of a horizontally movable core. The reactor and associated experimental facilities and equipment are contained in the reactor building located in the AFRRI complex.

The AFRRI-TRIGA Mark-F reactor serves as a source of both gamma and neutron radiation for research and radioisotope production. The unique flexibility of the AFRRI-TRIGA reactor is achieved by the horizontally movable core which can traverse from one irradiation po:;ition to another. The major irradiation facilities in which experiments can be carried out using the reactor are as follows:

Exposure Room #1 and its Extractor System

Exposure Room "#2

Pneumatic Transfer System (Optional)

Pool Irradiation

In-Core Experiment Tube (CET)

The Mark-F TRIGA research reactor runs at a steady state of 1.1 megawatt or in pulses of up to 2,500 megawatts occurring in about 0.1 second. The reactor is operated from a Control System Console (CSC) located in the control room. The Data Acquisition Cabinet (DAC) is located in the reactor room along with wall-mounted cabinets that house the digital neutron log and linear power channel (NM-1000) and the driver modules for the control rod stepping motors.

The operating mode of the reactor is determined by four push-button mode selector switches on the console. In Automatic and Steady-State modes, the reactor can operate at power levels up to 1.1 MW.

In Square Wave mode, a step insertion of reactivity rapidly raises reactor power to a steady-state level up to 1.1 MW. In the Pulse mode, a large-step insertion of reactivity results in a short duration reactor power pulse.

The reactor instrumentation is all solid-state circuitry with a mixture of analog and digital modes of operation.

The auxiliary cabinet will remain as-is and is not included in GA-ESl's SOW.

T3S99001-FRS Rev A Page 10 Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390

Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390 2:SOO tom 100 10 UMW 1 =-L-- --******---1--***----- 100%

100 10 1%

NP-1000 NPP-1000 1

-~-~.~~~~------*~~-----------*

1 !tWJmerlock 100 10 ~W-1000 11r

.;'IMP-1000 0.1 0.01 ___________L _____________________

Soi:rce Lave!

0.001 -------- --------~--------------------

Souree Jnb:rlocl:

0.0001 NLW-1000- Fission Chamber NMP-1000- Compensated Ion Chamber or Fission Chamber NP-1000 - Uncompensated Ion Chamber or Fission Chamber NPP-1000- Uncompensated Ion chamber or Fission Chamber Figure 1 - New AFRRI Power Instrument Ranges T3S99001-FRS Rev A Page 11 Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390

Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390 2 REPLACEMENT SYSTEM CAPABILITIES, CONDITIONS, AND CONSTRAINTS 2.1 General Description The new TRIGA control system proposed by GA-ESI provides operators with reactor controls, indications, balance of plant controls, and warnings. The annunciator system is integrated into the control console.

The new NP-1000 and NPP-1000 channels are upgraded analog safety channels based on the designs that AFRRI has relied on in the past for the safe operation of the reactor. The NFT-1000 fuel monitoring and safety channel is a new addition to the system that functions nearly identically to the version at site but is now contained in a single modular unit. Fuel temperature is displayed on the unit, as well as on the computer screen. All new channels now have Ethernet connectivity.

Refer to Figure 2, Functional System Block Diagram.

DAC csc

Power Supplies ( Interlock Test l ..... ***- ..... * ....* Door Position Rod Drive Motors i,,_~od D~ive ~I:) Core Position Bar Graphs Discrete Digital & Analog 1/0 : .s1.~.n.~I Pr~ce~sing.; Chart Recorder Rod Control Panel Sensoray 1/0 1 i---,*-**** -* ******~*-**?.~ ......

Ethernet Hub.1

-.,:,.,._........ ,...... ------ --~---*:(

*t CCS (Linux)

Thermocouple .

, -

NFT 1 "l;

~

t(

Thermocouple ..------.i '

NFT2 FT 3 (signal ,,

UIT (Windows)

Thermocouple - - - - - - processing) ~

CIC NMP-1000 l.!,

Fission t

,*- ._:;~~~o_ * "' j NLW-1000 UClC UCIC, Cher, UCIC Figure 2 - Functional System Block Diagram T3S99001-FRS Rev A Page 12 Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390

Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390 2.2 General System Console The conceptual design of the control console is a proposed functionally equivalent replacement of the existing system at AFRRI. All existing reactor instrumentation, control console, and auxiliary console equipment will be replaced, and the necessary interfaces with existing plant equipment will be provided.

Operational upgrades to the existing system will include system data logging and historian capabilities within the control room.

Although the new system is based on the existing system and with a look-and-feel familiar to operators, it is important to note that the new system takes advantage of current technologies. For example, hard-wired analog bar graphs, a Strip Chart recorder, and rod control will be implemented in the exact same manner as the current console. Current technology updates will be transparent in some cases (the strip chart recorder is digital vice analog, but looks and feels the same) and will have minor interface differences in others (the current Scram lnter1ock Test Switch is a large mechanical multi-layered wafer switch; the new switch will be implemented in software with the same appearance and functionality). See Appendix 1 for a detailed comparison between the old and new console design.

PANEL ASSEMBLY BARGRAPH&

AAECORDERS CSC MAIN PANEl DIGJTAL STRIP (HARO WIRED)

OIART RECORDER Figure 3 - Conceptual Control Console The reactor control console, located in the reactor control room and from which the operator conducts all licensed reactor operations, consists of two distinct sections: (1) the reactor instrumentation and control console and (2) the auxiliary console. While new hardware has been introduced and components upgraded, the concept and layout of the reactor control console has remained relatively unchanged since it was first developed and installed. The software has been significantly updated by GA-ESI to use state-of-the-art infonnation and networking technology. The auxiliary console is a custom unit from an outside vendor that will remain in use but will not be changed during this project.

The Data Acquisition Cabinet (DAG) is in the reactor room. It houses the nuclear monitoring and safety channels, as well as the controllers for the control rod drives.

The new console will be placed in the same location in the control room as the existing console. The computers and monitors will be mounted on the console. The new OAC will be installed in the reactor room in the same location as the existing DAG. It will house the NMP-1000, NP-1000, NPP-1000, NLW-1000, NFT-1000 nuclear channels, and the PA-1000 preamplifier.

T3S99001-FRS Rev A Page 13 Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390

Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390 The NFT-1000 channel will accept an input range between O and 1200 degrees C.

The NP-1000, NPP-1000, and NLW-1000 channels will be compatible with AFRRl's existing fission chambers.

The NMP-1000 channel will operate with the compensated ion chamber that is described in the List of Deliverable Items, SOW Section 2.1.

In addition to the control console, GA-ESI will provide three control rod drives and one compensated ion chamber.

The new TRIGA l&C system software relies on two computer systems. The User Interface Terminal (UIT) displays reactor activities and runs under MS Windows. The Console Computer System (CCS), actually controls the reactor and monitors all input and output channels, and runs under open source Linux.

Operational upgrades to the existing system include system data logging and historian capabilities within the control room. he method of implementing the various indications on the control console will be via graphical displays Instead of existing individual meters and readouts. The design and method of implementing graphical displays and control functions will be in accordance with GA-ESl's standard system. The figures below are typical TRIGA system screen graphics.

Figure 4 - Reactor Display 1 T3S99001-FRS Rev A Page 14 Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390

Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390 Figure 5 - Reactor Display 2 Figure 6 - Prestarts T3S99001-FRS Rev A Page 15 Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390

Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390 Figure 7 - Pulse Display Figure 8 - Administration Screen T3S99001-FRS Rev A Page 16 Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390

Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390 Figure 9 - Test Screen The TRIGA system consists of multiple screens split across two physical displays. GA-ESI will customize the screens as desired by AFRRI. AFRRI will redline and redesign a set of printed, standard screens.

AFRRI may choose to display any data that resides in the database of the standard system and may direct how and where it will be displayed on the screens. After completion of GA-ESl's software training course, AFRRI will have the training and capability to modify the screens.

2.3 System Functionality Characteristics 2.3.1 User Login and Access T3S99001-FRS Rev A Page 17 Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390

Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390 2.3.2 Control Console and Display Instruments 2.3.2.1 Graphics Monitor Display The high-resolution graphic monitor displays the following reactor parameters:

Reactor wide range linear power from NMP-1000 (see Figure 4 or 5)

Reactor wide range log power from NLW-1000 (see Figure 4 or 5)

Reactor period from NLW-1000 (in seconds) (see Figure 4 or 5)

Reactor linear power from NP-1000 and NPP-1000 (see Figure 4 or 5)

Reactor fuel temperatures (see Figure 4 or 5)

Reactor pool temperature (see Figure 4 or 5)

Rod position and reactor graphic

Strip chart recorder data with linear power and three other parameters

Pulse display graph showing pulse data

Administrative information including MWH for each operator

Test display to test the reactor/computer 1/0

Prestart tests These different "displays" appear on separate tabs on the graphics display. These tabs have the names "Reactor Display 1," "Reactor Display 2," "Reactor Prestart Tests," "Pulse Display," "Administration," and "Tests Functions." The user selects each of these tab displays using the mouse and clicking the appropriate tab.

During reactor operation (a mode other than SCRAM), only the first two tabs: "Reactor Display 1" and "Reactor Display 2" are active. When in SCRAM mode, a normal user can select the two reactor display tabs: "Reactor Prestarts Test" and "Pulse Display." The "Administration" and "Tests Functions" tabs are only shown for special "administrator" users.

2.3.2. 1.1 Reactor Status/Annunciator Panes on the Graphic Display At the top of the graphic display, regardless of which display tab the user selects, the system always draws four items: a menu bar and three status/annunciator panes.

The menu bar will contain five items: Run, Operator, History, Display, and Admin.

Run: provides options to manually run the CCS and DAS programs on the CCS computer (normally, these execute automatically) and gracefully terminate program execution.

Operator: provides the ability to log in, log out, and display certain operator statistics (e.g.,

MWH).

History: SCRAMs the system and starts the execution of the history playback program.

Dlsplay: refreshes the graphics displays (like the old QNX F7 option, though this option has proven to rarely be necessary on the new system).

Admin: option reserved for future use (normally disabled unless an administrator operator has logged on).

The three information panes immediately below the menu bar are the following: System Status, Annunciator, and the Site/Operator:

System Status: displays the current date and time, the run time (since the last reset), the operational mode (SCRAM, MANUAL, AUTO, SQUARE WAVE, PULSE, and Start-up timer in T3S99001-FRS Rev A Page 18 Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390

Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390 seconds), as well as the current demand power setting.

Annunciator: normally black with no text present. When a warning, interlock, or SCRAM occurs; and a message is written to the annunciator pane; the background becomes red, and the text is yellow. This is cleared by pressing the acknowledge button.

Site/Operator: provides the name of the site (AFRRI in this case), the operator number, the operator name, the login time for the operation, the version number for the software, and the site's total MWH (computed since the admin file was last zeroed out).

2.3.2. 1.2 Simulated Rod Control Panel Buttons On reactor display tabs #1 and #2 the system displays a set of graphic objects representing the rod control keys. These are display objects only; clicking them with the mouse has no effect. These simulated keys invert their color when the operator (or system) presses one of the rod control buttons on the rod control panel.

The main benefit to these simulated rod control buttons, when in automatic mode, these simulated buttons allow the operator to see if the system is "pressing" one of the up or down buttons to move a rod.

On the older systems there was no immediate way to easily see what the system was doing in automatic mode.

In steady state (manual) mode the simulated button colors will vary from the auto mode.

In auto mode, the simulated REG UP and REG DOWN buttons will be a light gray color rather than the standard white present in all other modes. This differentiates reg up and down operations performed by the computer from those perfonned by an operator. Mainly, this is useful when running the history playback program so that it is relatively easy to differentiate computer and manual rod movements.

2.3.2.1.3 Reactor Display 1 Reactor display tab #1 (see Figure 4) is the main graphic tab on the graphics display. During normal operation this tab is the one that an operator will most likely select for viewing reactor operation. This tab closely resembles the original graphic display on the older system at AFRRI and presents all of the information present on that older display. This display exists to make existing console users feel comfortable with the new displays.

Reactor Display 1 shows bar graphs for the following information (duplicates of hard-wired analog bargraphs):

Reactor power (in watts) from NMP-1000

Reactor log percent power from NLW-1000

Reactor period from NLW-1000 (in seconds)

Reactor linear percent power from NP-1000 and NPP-1000 Reactor Display 1 also shows a graphic representing control rod positions within the core. There are four rod graphics representing the Transient, Shim, Safety, and Reg (Regulating) rods. Each control rod graphic is composed of two pieces: a small rectangular box representing the rod (electro) magnet for the Shim, Safety and Reg rods (anvil for the Transient rod), and a rectangle representing the rod itself. The system uses the following color scheme to denote various rod/magnet conditions and positions:

If the magnet square is yellow, power is applied to the electromagnet; if the magnet rectangle is black, no power is applied (or, in the case of the Transient rod, air/no air is applied).

If the rod rectangle graphic is black, the rod is in contact with the rod-down limit switch. If the rod rectangle is green, it is off the rod-down limit switch. (This Implies that it is attached to the magnet; the magnet isn't all the way down; and the rod hasn't been driven all the way up to the motor-up limit switch.

If the rod rectangle is magenta, the rod has been lifted out of the core and the magnet has hit the T3S99001-FRS Rev A Page 19 Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390

Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390 motor-up limit switch.

The system will also display (in text) the NFT1 and NFT2 fuel temperatures and the pool water temperature {see Figure 4).

2.3.2.1.4 Reactor Display 2 Reactor Display #2 contains much of the information found on Reactor Display #1. The primary difference is that Reactor Display #2 displays a software strip chart recorder in place of the reactor pool graphic and temperature displays. To make up for the loss of the fuel and water temperature displays, Reactor Display #2 displays NFT1 and water temperatures on a bar graph. {We could have displayed this same information in bar graph form on Reactor Display #1; however, tab #1 attempts to mimic the original QNX graphic display as closely as reasonable on the new system.) Reactor Display #2 is generally considered "site configurable* to put any information the local site wants to display in graphic form.

2.3.2.1.5 Reactor Prestart Tests The Reactor Prestart Tests tab is automatically selected when the user enters the prestart mode. Once the prestart tests are complete {either via success or failure), the user can print the results or select some other tab. While in a SCRAMmed {non-operational) mode, the user can select the Reactor Prestart Tests tab to look at the last prestart test run.

2.3.2.1.6 Pulse Display The Pulse tab is automatically selected after a successful pulse operation. It will display the results of the last pulse in graphic form. The user can also select this tab at any time the reactor is in a SCRAMmed (non-operational) mode and will be able to load old pulse files and view them.

The pulse display will allow the operator to scroll horizontally in time through a pulse and scale (horizontally) the data to compress or expand it, as desired. The data being provided includes: full width at half at half max, pulse time, pulse energy, peak pulse power, pulse period, fuel temperature peeks, maximum pulse power, pulse reactivity, and the maximum value for each NFT.

The system will store pulse data files in a spreadsheet-compatible CSV file format so sites can load the pulse data into a spreadsheet program for further processing.

2.3.2.1.7 Administration 2.3.2.1.8 Tests Functions When an operator is logged in as a system administrator and the system is SCRAMmed, the "Tests Functions" tab will be added to the display tab list. The Test tab is intended for diagnostic, testing, and informative purposes.

For each digital output in the system, there is a UI checkbox element on the test screen. Checking one of these checkboxes will tum on that output. Clearing the checkbox will tum off that particular output.

However: with the test mode (which always operates in a SCRAMmed mode), attempting to tum on the magnet power outputs will not actually supply power to the magnets - the SCRAM loop prevents that T3S99001-FRS Rev A Page 20 Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390

Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390 from occurring. Checking one of the magnet power output checkboxes will write the output to the hardware port (on the and the operator can verify that the output is present by the corresponding LED on that board; magnet power is cut off after that point.

For each digital Input, the Test tab displays the input data in two fonns. First, all of the digital inputs are displayed in a binary string (ones and zeros) with each bit of that string corresponding to one of the hardware inputs (0=off, 1=on). Second, the test display also shows the digital inputs using signal names.

It draws the name with white text when the signal is zero {off) and with red text when the signal ls one

{on).

For analog inputs, the test tab will show the raw 16-bit numeric value for the input, the converted value, and the raw value (as appropriate for that particular input).

For analog outputs (rod control} the test tab provides text edit boxes into which the operator can type a value between -10.0 and +10.0. This voltage is written to the corresponding D/A converter that drives the Reg, Shim, and Safety rod control motor drivers. Note that because magnet power (and air pressure}

cannot be applied in a SCRAMmed mode, moving the control rod drive motors will not actually lift any control rods.

2.3.2.2 Reactor Status Display The Reactor Status Display monitor presents data in text format for reactor power channels, temperatures, interlock status, etc. The items displayed are determined by the facility management. All information on the selected pane is available at all times.

SCRAM pane: contains red annunciator bars for all of the system scrams including, NMP HV Low, NMP % Power, NP HV Low, NP % Power, NPP HV Low, NPP % Power, NFT1, NFT2, Low Pool Water Level, External Manual, CSC Manual, Keyswitch, CCS Watchdog, and UIT Watchdog .. The SCRAM annunciator bars are only present when an actual SCRAM has occurred.

WARNINGS pane: contains yellow annunciator bars for the following warnings: NLW HV Low, NLW Period High, NLW Low Source, NLW 1KW, NLW % Power, NLW Communication Failure, NMP HV Low, NMP % Power, NMP Communications Failure, NP HV Low, NP % Power, NP Communications Failure, NPP HV Low, NPP % Power, NPP Communications Failure, NFT 1 High, NFT 1 Communications Failure, NFT 2 High, NFT 2 Communications Failure, Low Pool Level, Pool Temp High, and Pb Door Interlock. The WARNINGS annunciator bars are only present when an actual WARNING has occurred.

STATUS pane: contains lines of text displaying reactor operation values. These include the following: NLW % Power, NMP Power (watts), NP % Power, NPP % Power, Period (in DPM},

NFT 1 Temp, NFT 2 Temp, Low Pool Level, Pool Temperature, Outlet Temperature, Demineralizer Temperature, Exposure Room 1 Door, Exposure Room 2 Door, Reactor Shield 1, Reactor Shield 2, Reactor Zone, Exp Bypass 1, Exp Bypass 2, RAMs {R1, R2, R3, RS, R6} and

{E3, E6}, the Gas Stack Monitor, the Water Box RAM, and CAMs {Primary, Secondary, ER1, ER2, and PREP AREA}.

RAM pane: displays the status of the radiation area monitors including the following: R1, R2, R3, RS, R6, E3, E6, Stack Gas Monitor, Water Box, CAM Pri, CAM Sec, CAM ER1, CAM ER2, CAM PREP AREA, and Prep Area E-3 and E-6. Because of the way the hardware works, these annunciators will be visible at all times and will be highlighted as the state of each input requires.

T3S99001-FRS Rev A Page 21 Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390

Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390 Figure 10- Status Display (Typical)

Figure 11 - Status Display (Startup, all Annunciators Lit)

The reactor status display also contains a small section with user Interface elements. This section contains (software) buttons to select one of the modes (MANUAL/steady-state, AUTO, SQUARE WAVE, or PULSE) and to start the prestart tests. This section also contains a text box that allows the operator to enter the demand power. (The system will verify the syntax of the input to make sure it is a legal real number and will display the text with a red background if there is a syntax error in the demand power input.) This section of the status display will also contain the check boxes to tell it how move the control rods in AUTO mode (reg only, reg/shim, or reg/shim/safety). Finally, the UI section contains a T3S99001-FRS Rev A Page 22 Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390

Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390 configurable up/down steady-state SCRAM timer.

2.3.2.3 Hardwired Analog Bar Graph Displays Analog bar graphs are on the control console and are hardwired separately from the computer system in the event of a computer malfunction to allow observance of reactor conditions. These bar graphs include indications of the following:

NLW-1000 log power level

NLW-1000 period

NMP Power Scram

NP-1000 linear power level

NPP-1000 linear power level

Fuel Temperature channel 1

Fuel Temperature channel 2

Fuel Temperature channel 3

NV peak power for pulsing operations

NVT integrated power for pulsing operations 2.3.3 Facility Interlock System AFRRI has provided a drawing showing a functional description of the Facility Interlock System and a table of the embedded logic as shown below. The new Facility Interlock System will function in the same manner as the existing one. Controls will be similar i.e. pushbuttons and pedals, but the decision of whether specific controls will be implemented in hardware or software will be determined in the SyRS.

T3S99001-FRS Rev A Page 23 Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390

Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390

~* -...

- - - -*---~*<>,.-.....,__ .___ ,___ ,,_,-.,.,..._...,..,......... , ..

.,_ *,~.-*.;:*'-*'""""'"c,*"' **--*--.,--**.------

, ***~

" r * ..,,_ , ,.,, . . . . . . . *

,*,.n*.:-.

~-

. l!IWiUltK DIT 1VIT~~ $\I aru: 111 lll'lt !N POS"~ COit 111 m m f1UI ltll!I 11'!!1 llll!!: lf[N CUJS[

IIO!IIIPTIDI NII l'l$m1N II <III lill1t 41 l'IISlll!llll IJ'OI Cllll£ POSII 1'111 13 CR*i wm ..,.._

i,-1 El~

-_.IIP<Wll lllllll IIIIIEl!I ti,[ 1B Clll'.IN ~!If m 19 llDI JD lllll a.mo ~

l'OSl3 POSII

.... =

lll'Ell tf[!I O.DSDI llt!I !Ult 111$13 l'IIStl PUSD a.mo 11-,~~~f *11C' 11.!ZD llD1II l1dm l1JID CIIIID

- ,, ~ .er'mr*

IUID I **

""' ""' a.an cum

~ =

IIJIID IJ'III IUD ll'lll 11'111 CIIIID ll'lll <UIID QllSD 11'111 IUlltl 11'111 11'111 l1JID 11.mD 11'111 ll'OI a.mo IUD 11111D 11.01D

<USt'I IUID QlllEI 11!1111

......, un ...,.. 11'111 ama ll'lll nmo* 11'11

""' ,,o; 1111111*

cum *a.~

...,.r llllDl> llllllltJ 1111D

"""' 11.Cl>B

fy OJI:

OJIIU CIIIID C!.llllll cum ormi orm, CIIIID Clllltl lllllO

<UJ!IJ 11!1111 CIIIID 11'11

"""" (lll!O Clllltl <USU 11'111 11'!11

~ amu QIIID

"""" CI.IIEI lllilD IUIO

""'° aw""' CIIIID

"'1'"'

.!e.!~ 111111 111111 cum OJIQ Q.IID 11!1111 ~ =a l1l'XI

~:t

.Ill-I 1111111 CllllO

. "°' :.~-

\*}:~' CllK

~~ !1IIIU

~'fu QU!II QJpO

~~- n,m

!Jill~

<<Lll!D

... ""' Qllltl

-.:...- mlOII ..... 9'ql (lll!D un

~ !RI

""' CIJl!III IUIIO

"':'.!"' a.mo.

CIIIID IIJIIEII IUIO

~" """' """!: """'

cum., rum llmdl

""'" Clll!II CO!EI: Cl!llil :um <UttJ 2.3.4 Mode Control Panel The Mode Control Panel has switches the operator uses to turn the system on or off, and test the scrams on various components in the system:

Test functions

Main power on/off 2.3.5 Rod Control Panel The Rod Control Panel has the following 15 momentary contact switches and one keyswitch to control the system:

Transient Rod Control (4): Air, Up, Down, and Fire

Shim (3): Magnet, Up, and Down

Safety (3): Magnet, Up, and Down

Reg (3): Magnet, Up and Down

Misc (2): Acknowledge, SCRAM

Magnet Power Keyswitch: Off, On, and Reset 2.3.5.1 Acknowledge Button The Acknowledge button tells the software to acknowledge any scrams, warnings or interlocks that are displayed on the annunciator pane of the main graphics window.

T3S99001-FRS Rev A Page 24 Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390

Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390 2.3.5.2 SCRAM Button The SCRAM button is hard-wired directly into the system SCRAM loop wiring (i.e., this signal is not processed by software). There is a copy of this signal provided to the software so the software can determine when the operator presses the SCRAM button, but the system SCRAM does not rely on the software to process this signal.

2.3.5.3 Keyswitch Operation The keyswitch has three positions: off, on, and reset. The "on" pole and the "reset" pole are made available as inputs to the software. There is a "break before make" action when the keyswitch moves between the "on" and "reset' positions. The software must handle the fact that the on" signal becomes 0

inactive before the "reset" signal becomes active.

2.3.5.4 Air Button Pressing the Air button engages a latch that turns off power to the air pressure source on the Transient rod. Air pressure is applied by pressing the Transient Rod Fire button; air pressure is removed by a SCRAM or by pressing the Air button.

The Air button signal is processed strictly by software.

2.3.5.5 Magnet Power Buttons Pressing the Magnet Power button on the Shim, Safety, or Reg rods will temporarily cut magnet power to the rod. Because of gravity, the control rod will immediately drop once power is briefly cut to the magnets. This control is always active, and the Magnet Power button can be pressed at any time.

This is a software-processed signal. The actual magnet power is cut via software control. Any number of Magnet Power buttons can be pressed simultaneously.

2.3.5.6 Down Buttons Pressing the rod Down button on the Shim, Safety, or Reg rods will drive the corresponding rod down unless the motor down limit switch is active. This control is always active, and the rod Down button can be pressed at any time.

This is a software-processed signal. The actual rod down control is produced via software control. The software sends an analog output signal that controls the speed of the rod drive control motor.

Any number of Down buttons can be pressed simultaneously.

Note that if an Up button is pressed at the same time as the Down button on the same rod; the system ignores both button depressions, and the rod does not move (or stops moving if it was moving previously).

2.3.5.7 Up Buttons Pressing an Up button on the Shim, Safety, Reg, or Transient rods sends a signal to the computer which will then decide whether to apply an appropriate output voltage to drive the corresponding rod up.

The Up buttons are only active in MANUALJsteady-state mode. At most one Up button can be pressed at a time. If multiple Up buttons are depressed simultaneously; the system ignores all of them, and (up) rod movement ceases (note that down rod movements on different rods can still occur).

In AUTO mode, none of the Up buttons are active; the system handles all rod movements once it is T3S99001-FRS Rev A Page 25 Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390

Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390 placed in automatic mode. It should be noted that the Down buttons are active in AUTO mode.

In SQUARE WAVE mode or PULSE mode, the Up buttons are inactive. The rods must be properly positioned (in steady-state mode} before putting the system in SQUARE WAVE mode or PULSE mode.

2.3.6 Scram/lnter1ock Test switch The Scram/Interlock Test switch functions will be maintained. These tested items are as follows:

NLW HV Low Interlock

NLW Period Low Interlock

NLW Low Source Level Interlock

NLW >1kW Interlock

NMP HV Low Interlock

NMP High Power Scram

NP HV Low Scram

NP High Power Scram

NPP HV low Scram

NPP High Power Scram

NFT 1 High Temperature Scram

NFT 2 High Temperature Scram

Pool Water High Inlet Temp

CCS Watchdog

UIT Watchdog 2.3.7 Banked Automatic Movement A manual switch or software function will be provided to allow banked automatic movement of Reg only, Shim/Reg, Safety/Reg, and Shim/Safety/Reg.

2.3.8 Chart Recorder The console hardware digital chart recorder records and displays as follows:

Wide-range Log Power

Fuel Temperature 3 Output

Rod Drop Timer Note: An option exists to add inputs to the chart recorder.

2.3.9 Prestart Tests When in SCRAM mode, the system can run a set of software-based prestart tests that include:

NLW-1000 low current test, high current, low countrate, high countrate tests

NLW-1000 high power test

NLW-1000 short positive period test T3S99001-FRS Rev A Page 26 Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390

Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390

NMP-1000 low current, high current, low countrate, high countrate tests

NMP-1000 high power test

NP and NPP prestart tests (high power on/off, HV SCRAM on/off, high power)

NFT prestart tests (high temperature on and off)

UIT watchdog test

CCS watchdog test The user presses the 'prestarts' software button on the status display to initiate the prestart tests.

Pressing the 'prestarts' button changes the graphics display to the Prestarts tab and initiates the prestart tests. Once the prestart tests are complete (either via success or failure), the user can start up the reactor. During the prestart tests, the system remains SCRAMmed, and magnet power cannot be applied.

A user does not have to be logged in to run the prestart tests. The key does not need to be inserted in the

. console to run the prestart tests.

2.3.10 Annunciator Function When a warning is received at the control console, the following will occur:

An audible signal will sound (PC speaker) and a message will be displayed on the monitor.

When the operator presses the Acknowledge button, the Annunciator pane message on the screen will clear.

The corresponding annunciator signal in the SCRAM, WARNINGS, or RAMs panes will remain lit until the signal clears.

If multiple warnings are simultaneously active the system will stack up the messages in a queue, and display each message in the annunciator pane on the graphics display as the user presses the Acknowledge button to dear the current message.

Depending on their severity; some messages may be added to the end of the queue, while more important messages will be added to the front of the queue (which is technically a double-ended queue, or deque) and replace the message on the display. The former message on the display will be pushed onto the front of the message deque to be redisplayed once the user presses the Acknowledge button.

2.3.11 History Capture and Playback The system captures all events written to the User Interface Terminal (UIT) and records them to a file on the UIT computer for later playback. The system will write these history files in a human-readable ASCII text file format using a date and time stamp (at the time the reactor was switched to steady-state mode from a SCRAM) as part of the filename so a reactor administrator or operator can locate the run history for a particular reactor run.

The system provides an executable program, separate from the UIT program that will read these historical recordings and play them back on the UIT displays. The history playback program provides the ability to quickly *fast-forward" and "rewind" through the history playback file, and then play a section of the file in single-step, slow-motion, near real-time, or accelerated speed form. A snapshot is saved every time the screen refreshed, which is approximately every 100 milliseconds.

Because the history files are maintained on the UIT computer under Microsoft Windows, the system will leave all system-administration of these files (i.e. deleting old files) to the reactor administrator or operators. The hard disk on the UIT computer will be sufficiently large to hold hundreds of (long) playback files before the system administrator would be forced to remove the files. In addition, by having the files on the Windows machine, these files can be easily moved off the system and backed up T3$99001-FRS Rev A Page 27 Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390

Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390 elsewhere (or processed by other programs) as desired.

The history playback program shall be capable of running on any Windows-based PC with specifications comparable to the UIT computer. This allows the reactor site to run a history playback file on a site-supplied computer system (other than the TRIGA console), freeing up the reactor console for other work.

During history playback on the actual TRIGA console, the reactor must be SCRAM med. The playback program does not affect any 1/0 on the system and runs only on the UIT computer.

2.3.12 TINA TINA (Testing, Instructing, No Atomics) is an external standalone system independent of and isolated from the reactor. TINA includes a reactor simulator program that provides an off-line way to test TRIGA-based software (such as modifications to TRIGA BASIC code intended to reconfigure the graphic and status displays). Reactor operation is unaffected by TINA.

TINA runs on a Windows-based PC along with simulated CCS and UIT computers. TINA emulates the DAS process on the CCS computer (which is responsible for communicating with the DAC cabinet and reading/writing all digital and analog 1/0) and provides a user interface (UI) that lets an operator simulate inputs from the reactor, and it displays outputs that the console would send to the reactor.

TINA provides a way to exercise the TRIGA console software without actually transmitting data to the reactor or reading data from the reactor. As such, TINA provides a safe way to modify and test TRIGA software (e.g., make changes to the console UI) without actually operating the reactor. TINA also allows the operator to test for faults in the software that might result in SCRAMS or other reportable events that sites would like to avoid during reactor operation.

Effectively, TINA is a mirror-image of the "Test Functions" tab on the UIT. Signals that are inputs on the test tab are outputs on TINA and vice-versa. When the user is running TINA and selects the test tab on the TRIGA UIT display, then checking one of the check boxes in TINA will cause the corresponding input on the test tab to tum red. Similarly, checking one of the output check boxes on the test tab will cause the corresponding output on TINA to become active. Figure 12 below is a sample of a typical TINA interface screen.

T3S99001-FRS Rev A Page 28 Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390

Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390 Figure 12 - TINA Interface Screen 2.3.13 TRIGABASIC Much of the system source code for operations pertaining to reactor operation will be written In a custom-designed TRIGA BASIC programming language. The TRIGA BASIC source code (and compiler for TRIGA BASIC} will be available on the console system to allow qualified site personnel to make changes to the system. Changes include things like modifying the UI layout, making slight changes to calculations, or adding new functionality to the system.

2.3.14 Radiation Monitoring The radiation monitoring systems associated with AFRRI reactor operations provide readouts and radiation alarms at the following key locations in the AFRRI complex:

Reactor Room (Room 3161}

Reactor Control Room {Room 3160}

Emergency Response Center (Room 3430}

Annunciator Panel {Hallway 3101}

The radiation alarms in the reactor room and the radiation alarm readouts in the reactor control room provide the reactor operators with information necessary for the safe operation of the AFRRI-TRIGA reactor.

The audible and visual alarms on the annunciator panel in hallway 3101 alert the security watchman T3S99001-FRS Rev A Page 29 Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390

Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390 (during non-duty hours) of unusual reactor conditions when the reactor is secured.

When reactor personnel are present in the reactor administration/control area, the audible alarm on the annunciator panel in hallway 3101 is turned off when the reactor is in operation.

2.3.15 Reactor Tank Water Level The level of the reactor tank water is monitored by float-activated switches. The first switch causes an automatic reactor scram if approximately six or more inches {15.24 cm) of water are lost below the normal pool full water level. When activated, the switch also causes a visual warning on the reactor console and an audible {during non-duty hours), and visual warning on the annunciator panel in hallway 3101 to inform the security watchman {during non-duty hours) that an unusual situation is present so that appropriate action may be taken. The second switch is low water level switch at 1" below nominal pool level which is an interlock and inhibits rod control. AFRRl's reactor does not have a high water level scram.

2.3.16 Shield Doors Power for door rotation is transmitted through a set of reduction gears. Each shield door Is connected to a reduction gear mounted on the side of the carriage track by a vertical shaft extending from the top of each door. Approximately three minutes are required to fully open or close the lead shield doors. The status of the shield doors is indicated on the reactor console.

Limit switches are used to indicate the fully opened or closed positions of the shield doors:

These limit switches, located on top of the reduction gears, are part of the facility interlock system which prevents unintentional movement of the core support carriage into the mid-pool region unless the shield doors are fully opened.

These limit switches deny power to the control rod magnets unless the shield doors are either fully opened or fully closed.

2.3.17 Water Purification System The purification pump draws a small portion{~ 20 gpm {76 lpm)) of primary water from the return line in the primary cooling system. From the water purification pump, the water passes through the water monitor box, the prefilter, and the mixed-bed demineralizers. The water monitor box measures the conductivity, water temperature {inlet), and gamma activity of the primary water before it enters the prefilter and demineralizers.

Readout of these variables is provided in the reactor control room.

2.3.18 Primary Cooling Water Temperature The primary cooling water temperature is measured at three locations:

Just above the reactor core inside the core shroud (outlet)

Six inches (15.24 cm) below the pool surface {bulk)

In the water monitor box of the primary water purification system (inlet)

These temperatures are measured by a resistance-temperature sensing element in a bridge circuit. A water temperature readout for these three probes is provided as part of the reactor status window screen on the reactor console. When the Inlet water temperature reaches or exceeds 60 °c (Technical Specifications limit), the inlet water temperature rod withdrawal prevent-interlock {described further in Section 6.2.6) prevents the further addition of positive reactivity by locking out all control rod withdrawals.

This rod withdrawal prevent-interlock does not prevent control rod insertion or reactor SCRAM.

T3S99001-FRS Rev A Page 30 Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390

Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390 2.3.19 Primary Cooling Water Conductivities Primary cooling water conductivities are measured at several points by conductivity cells containing titanium electrodes in microprocessor-based circuitry with a range of 0.2 megohm-cm to 20 megohm-cm.

Water conductivity is measured at three places in the primary water purification system:

The water monitor box (upstream from the mixed-bed demineralizers)

At the output from each demineralizer Readout for the conductivity monitors is located in the control room and at local indicator in equipment room 2158.

An audible alarm, connected to the water monitor box cell readout in the control room, is activated if the bulk water resistivity falls below 0.5 megohm-cm:

2.3.20 Gamma Activity of the Water in the Purification System The gamma activity of the water in the purification system is measured by a G-M detector in the water monitor box.

The readout and visual alarm for the detector are located in the control room.

2.3.21 Safety Systems 2.3.21.1 Actuation

Safety systems can automatically be actuated by the protection instrumentation that monitors various parameters during the reactor's operation, or

Safety systems actuations can manually be actuated by the reactor operator.

2.3.21.2 Airborne Radioactivity within the Reactor Room In the event of the release of airborne radioactivity within the reactor room, radioactivity will be detected by the reactor room Continuous Air Monitors (CAMs):

The high radiation alarm set point of the reactor room CAMs will initiate automatic closure of the reactor room dampers.

The four dampers, upon closing, actuate micro switches which complete light circuits for four indicator lights in the reactor control room. Additionally a signal is sent to the call box.

The dampers may also be closed or reset (opened) manually from the reactor control room.

2.3.21.3 Rod Withdrawal Prohibit (RWP) Interlock The RWP intertock performs the following functions:

Stops any upward motion of the standard control rods or the transient rod.

Prevents the transient control rod from being fired unless specific operating conditions are met.

Any RWP interlock prevents any further positive reactivity from being inserted into the core until specific conditions are satisfied.

An RWP interlock; however, does not prevent a control rod from being lowered or SCRAMmed.

RWP prevents air from being applied to the transient rod unless the reactor power level is under 1 kW(t). This applies in PULSE mode only.

RWP prevents anY. control rod (including Transient rod) withdrawal unless, as a minimum, source level neutrons (10~ W(t)) are present.

T3S99001-FRS Rev A Page 31 Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390

Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390

RWP prevents any further control rod withdrawal unless the power level is changing on a 3-second or longer period, as measured by the wide-range log channel during certain steady-state operations.

RWP prevents any control rod withdrawal unless high voltage is being supplied to the fission detector for the multi-range linear and wide-range log channel.

RWP prevents any control rod withdrawal unless the inlet water temperature is less than 60 °C (Technical Specifications limit}.

2.3.21.4 Facility Interlock System The facility interlock system includes the following safety indications:

Reactor Operate/Time Delay: When the console key switch is moved to the RESET position, a 30-second time delay starts while the interlock system turns on an audible alarm in each exposure room. A time-delay indication light is turned on at the console during this time. Once the time delay ends, the Reactor Operate light turns on and reactor operation is enabled.

Pb (Lead} Door Position

Pb Doors Open: Light is on when doors are open. Switch is used to open doors.

Pb Door Stop: Light is on when door is not commanded to open or close. Switch is used to stop movement.

Pb Doors Close: Light is on when doors are closed. Switch is used to close the doors.

The facility interlock system is designed to eliminate the possibility of accidental radiation exposure of personnel working in the exposure rooms or the preparation area, and to prevent interference (i.e.,

contact or impact} between the reactor tank lead shield doors and reactor core shroud.

These interlocks prevent rotation (i.e., opening or closing} of the reactor tank shield doors, and the operation and movement of the reactor core between different regions unless specific operating conditions are satisfied.

The system logic depends on the positions of the reactor core, the reactor tank shield doors, and the plug doors to the exposure rooms. The reactor core positions are classified into three regions:

o Region 1: The range of positions within 12 inches of the maximum travel distance of the core dolly carriage at ER #1.

o Region 2: The range of positions between Region 1 and Region 3, in which interference between the core shroud and the rotating reactor tank lead shield doors could occur.

o Region 3: The range of positions within 12 inches of the maximum travel distance of the core dolly carriage at ER #2.

Protection for the reactor from coming into contact with shield doors or the wall of the pool include the following:

The reactor speed is slow when in either Zone 1 or Zone 3.

The reactor speed is high when moving in Zone 2.

The limit switch at either end of the pool stops the reactor from moving toward the wall but will allow it to move away from the wall.

The shield doors cannot be opened or closed unless the reactor core is in either Region 1 or Region 3.

If the limit switch entering Zone 2 is tripped, the reactor is stopped and cannot be moved without two people. One person must direct the reactor from the TRIGA control panel, and a second T3S99001-FRS Rev A Page 32 Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390

Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390 person must initiate movement in the same direction the operator is choosing.

2.3.21.5 Operations Prevented by Faclllty Interlock System The facility interlock system prevents the following operations unless the specific conditions given are satisfied:

The reactor tank shield doors cannot be closed unless the reactor core is in either Region 1 or Region 3.

The reactor tank shield doors cannot be opened unless the reactor core is in either Region 1 or Region 3.

The reactor tank shield doors cannot be opened to allow movement of the reactor core through Region 2 to an exposure room unless:

o A warning horn has been sounded in that exposure room or o Two licensed reactor operators have visually inspected the exposure room to ensure that, prior to closing the exposure room plug door, no condition exists that is hazardous to personnel.

The reactor cannot be operated unless the reactor tank shield doors are either fully opened or fully closed.

The reactor cannot be operated within Region 1 unless the plug door to Exposure Room #1 is fully closed, and the reactor tank shield doors are fully closed; or if the reactor tank shield doors are fully opened, then both exposure room plug doors must be fully closed.

The reactor cannot be operated within Region 2 unless the plug doors to both exposure rooms are fully closed, and the reactor tank shield doors are fully opened.

The reactor cannot be operated within Region 3 unless the plug door to Exposure Room #2 is fully closed, and the reactor tank shield doors are fully closed, or if the reactor tank shield doors are fully opened, then both exposure room plug doors must be fully closed.

The reactor cannot be moved Into Region 2 unless the reactor tank shield doors are fully open.

Interlock to prevent reactor operation if Pool Pb doors are not fully open or fully closed:

o Interlock to prevent reactor operation unless reactor is between two closed doors, the pool PB doors, or exposure room doors.

o Pool Pb doors cannot be opened to allow movement of the reactor into an exposure room projection unless a warning horn has sounded in that exposure room, or unless two licensed reactor operators have visually inspected the room to ensure that no personnel remain in the room prior to securing the plug door to exposure room.

o The control rod magnets can only be powered if the exposure room door on the same side of the shield door as the reactor is closed to enable the control rod magnets.

NOTE: It is possible to manually move the reactor into Zone 2 and operate the reactor with the shield door is closed.

o The warning horns in each exposure room can be disabled. An indication needs to be provided if either exposure room horn is bypassed. This will cause the operator to physically check the exposure room(s} prior to starting an experiment.

o There can be no WARNING conditions present prior to starting the reactor startup sequence.

There are no warnings, interlocks, or SCRAM indications; correct doors are closed. At any time during the experiment if any of the following inputs are removed, the control rods will be dropped by removing power from the control rod magnets, causing the control rods to drop to the bottom of the core:

Any exposure room SCRAM T3S99001-FRS Rev A Page 33 Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390

Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390

Reactor room SCRAM

Control panel SCRAM

Relevant exposure room door closed

Control panel power

a*

Water level low

Shield door closed 2.3.22 Emergency Stop Emergency stops consist of the following:

Both exposure rooms are equipped with emergency stop buttons.

An Emergency Stop button is also located on the reactor console.

Pressing any of these emergency stop buttons causes an immediate reactor SCRAM and gives a SCRAM indication to the reactor operator at the console.

Magnetic power to the standard control rods and the air supply to the transient rod cylinder cannot be obtained in an emergency stop SCRAM condition without resetting the reactor console key which, when performed, automatically initiates a time delay with horns sounding in both exposure rooms. It also reinitiates the requirements for opening the lead shield doors. The emergency stop buttons in the ERs must be at reset as well. Once pushed, they remain activated until they are manually pulled out

The emergency stop circuit; therefore, provides an independent means for an individual accidentally trapped in an exposure room to prevent an unsafe condition involving operation from occurring, while also providing a positive indication to the reactor operator that someone could be trapped in an exposure room.

2.3.23 SCRAM Logic The SCRAM logic circuitry assures that a set of reactor core and operational conditions must be satisfied before enabling reactor operation. The SCRAM logic circuitry involves a set of open-on-failure logic relay switches in series. Any SCRAM signal or component failure in the SCRAM logic; therefore, results in a loss of standard control rod magnet power, and a loss of air to the transient rod cylinder, resulting in a reactor SCRAM.

The time between activation of the SCRAM logic and the total insertion of the control rods is limited by the Technical Specifications to assure the safety of the reactor, and the fuel elements for the range of anticipated transients for the AFRRI-TRIGA reactor.

The SCRAM logic circuitry causes an automatic reactor SCRAM under the circumstances listed below:

o The steady-state timer causes a reactor SCRAM after a given elapsed time, as set on the timer, when used during steady-state power operations. It will be manually started and stopped.

o The pulse timer causes a reactor SCRAM in PULSE mode at the time set on the timer (less than 15 seconds), or an automatic software SCRAM timeout at 15 seconds.

o The manual SCRAM button, located on the reactor console, allows the reactor operator to manually SCRAM the reactor.

o Movement of the console key to the OFF position causes a SCRAM. (Movement to the reset position while In operational mode shall also SCRAM the reactor.)

o The reactor tank shield doors in any position other than fully open or fully closed will cause a reactor SCRAM.

o Activation of any of the emergency stop buttons In the exposure rooms and on the reactor T3S99001-FRS Rev A Page 34 Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390

Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390 console causes a reactor SCRAM.

o A loss of AC power to the console UPS causes a reactor SCRAM. The console will remain on, powered by the UPS, to enable monitoring of reactor conditions and to enable a graceful shutdown of the console computers.

o High flux safety channel one causes a reactor scram at a reactor power level specified in the Technical Specifications for steady-state modes of operation.

o High flux safety channel two causes a reactor scram at a reactor power level specified in the Technical Specifications for steady-state operations.

o A loss of high voltage to any of the detectors for high flux safety channels one and two causes a reactor SCRAM.

o Fuel temperature safety channels one and two will each initiate a reactor SCRAM if the fuel temperature, as measured independently by either channel, reaches 600 °C. This assures that the AFRRI safety limit (core temperature) of 1,000 °C for AFRRI stainless steel-clad cylindrical TRIGA fuel elements, as stated in the AFRRI Technical Specifications and testing conducted by General Atomics, is never approached or exceeded. The actual operational limit for the fuel temperature safety channels may be set lower than the Technical Specifications limit of 600 °C.

o A loss of reactor pool water that leaves less than or equal to 14 feet of pool water above the core (Technical Specifications limit) causes a reactor SCRAM. The actual operational limits for the pool water level may be set more conservatively.

o Activation of either the UIT or CCS watchdog SCRAM circuits causes a reactor SCRAM.

o The reactor is operated from a Control System Console (CSC) located in the control room.

The Data Acquisition Cabinet (DAG) is located in the reactor room and the driver modules for the control rod stepping motors, as well as the nuclear channels.

The operating mode of the reactor is determined by four software-based push-button mode selector switches on the graphics display. In AUTO and MANUAUsteady-state modes, the reactor can operate at power levels up to 1.1 MW. In SQUARE WAVE mode, a step insertion of reactivity rapidly raises reactor power to a steady-state level up to 1.1 MW. In the PULSE mode, a large-step insertion of reactivity results in a short duration reactor power pulse.

Additional ventilation system instrumentation and controls are housed in a separate cabinet near the console.

The NMP-1000 will be included as a high power SCRAM. It will be included in the SCRAM tests listed above, and its HV low will be a SCRAM.

2.3.24 Reactor Power Measurements Four independent power-measuring channels provide for a continuous indication of power from the source level to peak power resulting from the maximum allowed pulse reactivity insertion.

Reactor power is measured by four separate detectors:

A compensated ion chamber,

A fission chamber, and

Two uncompensated ion chambers or fission chambers.

The signal from the fission chamber is used by the NLW-1000:

Provides wide range log power from 1 o*8 % to 100 % reactor power

Period indication from -30 seconds to +3 seconds and DPM indication for the same range One uncompensated ion chamber is connected to the NP-1000 safety channel.

T3S99001-FRS Rev A Page 35 Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390

Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390 One compensated ion chamber is connected to the NMP-1000.

A second uncompensated ion chamber is used by the NPP-1000 percent power and pulsing channel:

Both the NP-1000 and NPP-1000 provide Indication of linear reactor power from 0 % to 120 % steady state reactor power. Note that the NP and NPP channels are compatible with the fission chambers/counters and uncompensated ion chambers.

NPP-1000 also provides indication of reactor power for pulsing operations. Figure 1 shows the relative ranges of the channels.

The fission chamber for the NLW-1000 wide range instrument is connected to analog circuitry in a PA-1000 Preamplifier:

The high voltage power supply also monitors the high voltage to the fission chamber.

If a loss of high voltage to the fission chamber is sensed, a bistable circuit will be tripped, resulting in a SCRAM.

A bistable circuit provides a visual warning and rod withdrawal interlock when the period is less than a predetermined limit. The period signal is also used by the AUTO control system.

The NP-1000 safety channel provides a linear power signal:

To the console display

To analog bar graph display:

o These displays are scaled at Oto 120 % of full power.

o A bistable circuit provides SCRAM and warning functions if the high power setpoint is exceeded. The detector input to the NP-1000 safety channel is disabled during PULSE mode operations.

o A separate bistable circuit provides a SCRAM signal to the reactor protection system upon a loss of detector high voltage.

T3S99001-FRS Rev A Page 36 Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390

Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390 The proposed final arrangement of the detectors after the console upgrade is shown in Figure 13. GA-ESI and AFRRI will determine during the design phase where and how the new CIC will be mounted.

FISSION CHAMBER NP*IIIID POWER SAFETY LINEAR POWER

.. 1 CHAHNELll1

I FISSION COUNTER

.. I PA-1000 NLW-1001 PREAMP LOG POWEIU'ERIDD COIIPENSATEO IDNCIIAMHR I

POWER NMP*1DOO SAFElY MULll-RAIIG! LINEAR POWER

.. 1 CHAHNELll3 FISSION CHAMBER

I UNCOMPENSATED ION CHAMBER 1( NPP-1801 POWER PULSE ~-uN_w_,ow_E_R_PlllS_I_NG~ e~:'u CERENKOV DETECTOR Figure 13 - AFRRI TRIGA Detector Arrangement After Console Upgrade 2.3.24.1 Modes of Operation 2.3.24.1.1 Steady-State/Manual Mode

From SCRAM mode, the operator enters steady-state mode by turning the magnet power keyswitch to the reset position and releasing it. From AUTO or SQUARE WAVE mode, the operator can return to steady-state/manual mode by pressing the (software) Manual button on the status screen.

Rod position is controlled via operator interaction with the buttons on the rod control panel.

Only one Up button may be active at one time. If multiple Up buttons are depressed, the system will ignore all the Up buttons.

If an Up and Down button for the same rod are pressed simultaneously, the system ignores both buttons.

Any number of Down buttons may be pressed simultaneously.

The Air button can only be depressed if the transient rod cylinder is completely inserted (all the way down and the motor down limit switch is active).

Pressing a Magnet Power button or the Air button (on the Transient rod) will SCRAM that particular rod.

T3S99001-FRS Rev A Page 37 Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390

Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390 2.3.24.1.2 Automatic Mode

To enter AUTO mode, the system must be operating in steady-state mode, and the operator must press the (software) automatic mode button on the status screen.

The reactor power is compared against the power demand setting to obtain power error.

The period signal is monitored by the controller to limit the reactor period to a minimum of +8 seconds when power is being increased.

The power error signal is used by the DAC (DAS process in the CCS) computer to determine which direction (if any) the control rods need to move to correct the power error. The position of the Rod Select switch will determine which rods are moved in AUTO.

The rod speed is variable, and it will move slowly for small errors and fast for large errors using a PIO (Proportlonal/lntegraVDerivative) algorithm.

The rod speed cannot exceed the travel speed that is used in manual control.

The variable speed ability of the servo system reduces power overshoot during transients.

The rod(s) is(are) controlled by the servo system to control reactor power based on input signals from a power channel (NMP-1000), the reactor period signal from the NLW-1000 channel, and the power demand input.

Pressing a Magnet Power button or the Air button (Transient rod) will SCRAM that particular rod and put the system in MANUAUsteady-state mode.

2.3.24.1.3 Square-Wave Mode

The reactor must be configured in SQUARE WAVE mode.

First, the reactor power is raised to some nominal low power (less than 1kW) with the air to the Transient rod off.

Second, the transient rod anvil is raised to the position corresponding to the desired reactivity insertion.

NOTE: The demand power should be selected on the status screen.

Finally, the square wave mode switch is depressed to change the console mode from steady-state to SQUARE WAVE, and the Transient Rod Fire button pressed.

Reactor power will increase to the desired power level, and then switch to the AUTO mode to maintain a constant power level.

Pressing a Magnet Power button or the Air button (Transient rod) will SCRAM that particular rod and put the system in MANUAUsteady-state mode.

If the demand power level is not reached in a specified period of time, the console will display a message (e.g. "Demand Power Not Reached") and the console will be placed in MANUAL mode for operator intervention.

2.3.24.1.4 Pulse Mode

The reactor must be configured in steady-state mode.

First, the reactor power is raised to achieve criticality at some nominal low power {less than 1kW) with the air to the Transient rod off.

Second, the transient rod anvil is raised to the desired position {any position between the lower and upper motor limit switch).

T3S99001-FRS Rev A Page 38 Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390

Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390

Finally, the Pulse Mode switch is depressed to change the console mode from steady-state to PULSE mode, and the Transient Rod Fire button pressed.

Reactor power will spike for around 100 msec., the magnitude will depend upon the transient rod anvil position.

After the pulse, the system will automatically SCRAM within 15 seconds or when the pulse timer counts down (whichever happens first).

Alternate procedures may be used to conduct a subcritical pulse by raising reactor power (to less than 1kW) using all rods (including the transient rod), then SCRAMing the transient rod, and finally pneumatically firing the transient rod to initiate the pulse.

The system will support subcritical pulse operations per AFRRI OP 8G2 Pulse Operation (Subcritical), shown in Appendix 4.

2.3.24.1.5 SCRAM Mode

After the reactor has booted/started up or after it has SCRAMmed, it is in SCRAM mode.

In SCRAM mode magnet power cannot be applied to the rod magnets nor can air be applied to the Transient rod.

The Up and Down buttons are active as in steady-state mode, but only drive the control rod drive motors up and down.

After the SCRAM, the control rod drive motors are automatically driven down to the bottom; this action can be stopped by pressing an Up button.

The only way to leave SCRAM mode and enter steady-state mode is by turning the magnet power key to the reset position and releasing it.

2.3.24.2 Interlocks Used by Console The following are the interlocks utilized by the console:

The 1-kW permissive interlock to prevent pulsing when wide range log power is above 1 kW.

Interlock to prevent the Shim, Safe, and Reg rods from being withdrawn In PULSE mode.

Interlock to ensure that only one control rod can be manually withdrawn at a time in the steady-state mode.

Rod Withdrawal Prevent (RWP) interlock is activated by a low count rate on the NLW-1000 when 7

the log power is not greater than 1* % power. An indication is provided on the console low resolution monitor to indicate when a source level rod withdrawal interlock is present.

Interlock to prevent the application of air to the transient rod drive mechanism in the steady-state mode unless the drive cylinder is fully inserted (all the way down with the rod down limit switch active).

Interlock to ensure that only one control rod can be manually withdrawn at a time in the SQUARE WAVE mode, excluding the Transient rod. (Note that after firing the Transient rod, the system moves from SQUARE WAVE to AUTO mode, and the Transient rod is then treated like any other rod and cannot be moved by the operator.)

2.3.24.3 SCRAM Circuits The SCRAM circuits function as follows:

Shut down the reactor by dropping all four control rods to their fully inserted positions.

SCRAM is accomplished by de-energizing the magnets for the Safety, Shim, Reg rods; and by T3S99001-FRS Rev A Page 39 Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390

Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390 de-energizing the air solenoid valve for the Transient rod.

A reactor SCRAM will result under any of the following conditions:

Operator-initiated manual SCRAM.

While in an operational mode, the operator turns the key switch to the reset position.

Fuel element temperature in excess of the setpoint.

Safety or percent power channels measuring power in excess of the setpoint.

Period channel measuring rate of power increase in excess of the setpoint.

Loss of high voltage to the power measuring channels.

External scram

Water level in the reactor pool low

Pulse timer

Watchdog on CCS (Unix computer), UIT (Windows computer), and DAC (data acquisition cabinet) 2.4 Physical 2.4.1 Electrical 2.4.1.1 Input Power Requirements 2.4.1.1.1 Single Power Input Entry Point The input power shall be connected to a single power input entry point.

2.4.1.1.2 AC Power and Over-current Protection An AC power On/Off switch and over-current protection shall be provided in the console.

2.4.1.1.3 Three Wire Circuit The power to the console shall be supplied using a three-wire circuit.

2.4.1.1.4 Voltage and Frequency 2.4.1.1.4.1 120 Vac The console shall be designed for operation at 50/60 Hz +/-10% at 120 Vac +10/-10%, and 20A.

2.4.2 UPS 2.4.2.1 Equipment Powered Uninterruptible Power Supplies (UPS) will be provided for the console: 120 Vac power.

The uninterruptable power supply unit shall be powered from 120 Vac power sources.

2.4.2.2 Capacity The UPS will have approximately 15 minutes of standby time which is a sufficient amount of time to allow for an orderly shutdown of AFRRl's TRIGA reactor.

T3S99001-FRS Rev A Page 40 Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390

Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390 2.4.3 Environmental 2.4.3.1 Environmental Conditions 2.4.3.1.1 Control Console and Components The control console and components shall perform their functions under normal environmental conditions for commercial equipment as described in this section.

2.4.3.1.2 Temperature .

The design temperature shall be 50 to 104°F {10 to 40°C}.

2.4.3.1.3 Humidity The design humidity (% RH) shall be 10 to 90% RH (non-condensing}.

2.5 Monitors and Computers 2.5.1 Display Monitors The UIT display monitors shall be color LCD monitors with 1920 x 1080 HD native resolution.

2.5.2 Mice and Keyboards Mice and keyboards shall be provided for operator input.

T3S99001-FRS Rev A Page 41 Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390

Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390 APPENDIX 1 CONSOLE COMPARISON TABLE CONSOLE Item Description Original Location!Type New Location/Type Notes Prestart Checks Control System Console Software: User Interface See Figures 10 and (CSC} Terminal (UIT} Display 11 in FRS.

Panel with printed record Scram and Interlock csc No change Stays in hardware.

Tests New tests: 1} add NMP % power; 2} add NFT 3; and

3) convert HV to NMP HV Reactor Mode csc Software: UIT Display See Figures 10 and Control Panel 11 in FRS.

Steady State Timer csc Software: UIT Display See Figures 10 and Panel 11 in FRS.

Rod Drop Timing Manual Digital Strip Recorder N/A Watchdog csc No change N/A Annunciators Core Position and csc No change N/A Shield Doors DISPLAYS Item Description Original Location/type New Location/Type Notes Test Function Display CSC Status Display and Software: UIT Display For displaying Data Acquisition System settings and clearing (DAS) Display digital 1/0. See Fiaure 9 in FRS.

Pulse Display CSC Graphic Display Software: UIT Display Added feature in software: provides pulse olots.

Status Display CSC Status Display Software: UIT Display 1} Now it is a Windows interface.

2) Screen size and resolution increased.

3) Layout re-arranged slightly, but more information displayed on screens requiring less screen flinnino.

T3S99001-FRS Rev A Page 42 Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390

Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390 INPUT/OUTPUT Item Descriotion Oriainal Location/Type New Location/Type Notes Printer At Console No change Print capabilities remains.

Operating System Linux (CCS) and NIA Windows (UIT)

Strip Chart Recorder Mechanical/Analog Electronic NIA Function Keys Keyboard No change N/A Removable Data Floppy Discs USB memory Increased storage Storaae caoabilitv.

History Recording On the CSC displays On UIT or external Resolution increased; and Playback computer option to be performed on console or setup to external PC (not provided by GA); runs independent of hardware Input Device COROM CDROM/DVD Drive will be required to reload OS software.

Database Configurator TRIGA Basic DB files N/A Maintenance Software Reactor Data 1/0 DAC computer Ethernet Data Acquisition Functionally System (DAS) equivalent, like-for-like REACTOR Item Descriotion Original Location/Type New Location/Type Notes Control Rod Drives Shim and safety are fixed Shim and safety rods are Analog voltage speed. variable speed. controls the speed.

Maximum rod speed previously set by potentiometer is now set by parameter in database.

Auto Mode Shim and safety are fixed Shim, safety, and Reg Results in tighter speed. Reg rod is rods are variable speed. control.

variable soeed.

Reactor NM-1000 provided mutli- NLW-1000 provides log New CIC provides Instrumentation range linear power, log power and period. NMP- NMP-1000 input.

power, and period. 1000 provides multi-range linear oower.

T3S99001-FRS Rev A Page 43 Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390

Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390 APPENDIX 2 TRIGA REACTOR INTERLOCK 1/0 LIST INPUTS SCRAM push button (exposure roam 1)

SCRAM push button (exposure room 2)

SCRAM push button (control panel)

SCRAM push button (reactor roam)

SCRAM reset 6 11 low water level Exposure room 1 horn bypass Exposure room 2 horn bypass Exposure room 1 door closed Exposure room 2 door closed Exposure room 1 door full open Exposure roam 2 door full open Reactor shield door open (1)

Reactor shield door open (2)

Reactor shield door closed (1)

Reactor shield door closed (2)

Reactor shield door stopped Start process / Reset key switch Zone 1 end switch Zone 3 end switch Enter/Exit Zone 1 switch Enter/Exit Zone 3 switch T3S99001-FRS Rev A Page 44 Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390

Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390 OUTPUTS Move reactor toward Zone 1 - control room foot switch Move reactor toward Zone 3 - control room foot switch Move reactor toward Zone 1 - reactor room override Move reactor toward Zone 3 - reactor room override Reactor movement low speed Reactor movement high speed Reactor move bypass Control rod magnet power Reactor shield door power Exposure room 1 door power Exposure room 2 door power Exposure room 1 warning horn Exposure room 2 warning horn Exposure room horn disabled SCRAM indication on control panel Low water level indication T3S99001-FRS Rev A Page 45 Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390

Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390 APPENDIX 3 INPUT/OUTPUT LIST Inputs Range Signals Trips Notes Transient Rod 0-999 1K Pot Cylinder Up All standard TR drive Cylinder Down signals Rod Down Air Solenoid Output Shim Rod 0-999 1KPot Motor Up All standard stepping Motor Down rod drive signals Rod Down Safety Rod 0-999 1K Pot Motor Up All standard stepping Motor Down rod drive signals Rod Down Reg Rod 0-999 1K Pot Motor Up All standard stepping Motor Down rod drive signals Rod Down NP-1000 0-120% Ethernet Ethernet Trips sent via Ethernet 4-20mA to High Power SCRAM SCRAMS hardwired bar graphs 110%

HVSCRAM

<650Vdc NPP-1000 0-120% steady state Ethernet Ethernet Trips sent via Ethernet 4-20mA to High Power SCRAM SCRAMS hardwired bar graphs 110%

0-6000 MW pulse 4-20mAto HVSCRAM bar graphs <650Vdc 0-50 MW-sec pulse 4-20mAto bar graphs NMP-1000 0-120% of scale Ethernet Ethernet Trips sent via Ethernet High Power SCRAM SCRAMS hardwired 110%

HVSCRAM Range and linear

<650Vdc power developed in software NFT 1 0-1000 °c Ethernet Ethernet Trips sent via Ethernet 4-20mAto High Temp SCRAM SCRAMS hardwired bar graphs 575 °C Peak temp in pulse only NFT2 0-1000 °C Ethernet Ethernet Trips sent via Ethernet 4-20mAto High Temp SCRAM SCRAMS hardwired bar graphs 575°c Peak temp in pulse only FT3 0-1000 °C 4-20mAto bar graphs T3S99001-FRS Rev A Page 46 Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390

Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390 Inputs Range Signals Trips Notes NLW-1000 1E-8 to 100% log power Ethernet Ethernet Trips sent via Ethernet 4-20mAto 1~Trip bar graphs Low Source Trip

.. Period Trip

-30 to 3 sec period 4-20mA to HV <650Vdc bar graphs Bulk Pool Temp 0-100 °C TBD TBD 100 ohm Pt RTD Core Outlet Temp 0-100 °C TBD TBD 100 ohm Pt RTD Demin Inlet Temp 0-100 °C TBD TBD 100 ohm Pt RTD RAMR1 0.1 to 10K mR/Hr log 4-20mA ON Trips are dry contacts 5 decades from RAM Alarm sent from RAM Fail RAMR2 0.1 to 10K mR/Hr log 4-20mA ON Trips are dry contacts 5 decades from RAM Alarm sent from RAM Fail RAMR3 0.1 to 10K mR/Hr log 4-20mA ON Trips are dry contacts 5 decades from RAM Alarm sent from RAM Fail RAM RS 0.1 to 1OK mR/Hr log 4-20mA ON Trips are dry contacts 5 Decades from RAM Alarm sent from RAM Fail RAM E3 0.1 to 10K mR/Hr log 4-20mA ON Trips are dry contacts 5 decades from RAM Alarm sent from RAM Fail RAME6 0.1 to 1OK mR/Hr log 4-20mA ON Trips are dry contacts 5 decades from RAM Alarm sent from RAM Fail RAMR6 0.1 to 10K mR/Hr log 4-20mA ON Trips are dry contacts 5 Decades from RAM Alarm sent from RAM Fail Argon Stack RAM 1 to 10K CPM log 4-20mA Normal Trips are dry contacts 4 decades from RAM Alert sent from RAM High Water Box RAM 1 to 1DOK CPM log 4-20mA Normal Trips are dry contacts 5 decades from RAM Alert sent from RAM Hiah CAM Primary 50 to 50K CPM Log 4-20mA High Trips are dry contacts 3 Decades from RAM sent from RAM CAM Secondary 50 to 50K CPM Log 4-20mA High Trips are dry contacts 3 Decades from RAM sent from RAM CAM ER1 50 to SOK CPM log 4-20mA High Trips are dry contacts 3 decades from RAM sent from RAM CAM ER2 50 to SOK CPM log 4-20mA High Trips are dry contacts 3 decades from RAM sent from RAM CAM PREP 50 to SOK CPM log 4-20mA High Trips are dry contacts AREA 3 decades from RAM sent from RAM Pool Level +1 inch to-10 inches 0-10Vdc Need to verify levels High Pool Level On/Off SCRAM Float switch High Level SCRAM +1" Low Pool Level On/OffRWP Float switch Low Level -1" RWP input Low Pool Level On/Off SCRAM Float switch Low Level SCRAM-6" T3S99001-FRS Rev A Page 47 Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390

Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390 APPENDIX 4 AFRRI O.P. 8G2 PULSE OPERATION (SUBCRITICAL)

T3S99001~FRS Rev A Page 48 Proprietary Information Withhold From Public Disclosure Under 10 CFR 2.390

v t e Letter Sequence Other
EPID:L-2020-NFA-0012, Explanation of Enclosures (Approved, Closed)
Initiation Request, Request, Request, Request, Request, Request, Request, Request, Request, Request, Request, Request, Request, Request, Request, Request, Request, Request Acceptance Supplement, Supplement, Supplement, Supplement, Supplement, Supplement Administration Questions Answers Results Approval Other: ML20318A339, ML21021A182, ML21253A001, ML21302A097, ML21302A103, ML21302A107, ML21316A033, ML21316A036, ML21316A037, ML21316A038, ML22067A246
MONTHYEAR2021-02-04 [Table View]

ML21316A036

Text

1.3 REFERENCES

Navigation menu

Search