ML24159A209

From kanterella
Jump to navigation Jump to search
Updated Final Safety Analysis Report (Ufsar), Revision 32, Chapter 4, Reactor Coolant System
ML24159A209
Person / Time
Site: Cook  American Electric Power icon.png
Issue date: 05/30/2024
From:
Indiana Michigan Power Co
To:
Office of Nuclear Reactor Regulation
Shared Package
ML24159A261 List: ... further results
References
AEP-NRC-2024-20
Download: ML24159A209 (1)


Text

INDIANA MICHIGAN POWER Revised: 27.0 D. C. COOK NUCLEAR PLANT Section: 4.1 UPDATED FINAL SAFETY ANALYSIS REPORT Page: i of i

4.0 REACTOR COOLANT SYSTEM.......................................... 1 4.1 DESIGN BASES..........................................................................1 4.1.1 Performance Objectives..........................................................1 4.1.2 Application of Design Criteria.................................................1 4.1.3 Design Characteristics.............................................................2 4.1.3.1 Design Pressure.............................................................................. 3 4.1.3.2 Design Temperature........................................................................ 3 4.1.3.3 Seismic Loads................................................................................. 3 4.1.3.4 Support Load Stresses.................................................................... 4 4.1.4 Cyclic Loads.............................................................................4 4.1.4.1 Heatup and Cooldown..................................................................... 5 4.1.4.2 Unit Loading and Unloading............................................................ 6 4.1.4.3 Step Increase and Decrease of 10%.............................................. 6 4.1.4.4 Large Step Decrease in Load.......................................................... 7 4.1.4.5 Loss of Load.................................................................................... 7 4.1.4.6 Loss of Power.................................................................................. 7 4.1.4.7 Loss of Flow.................................................................................... 8 4.1.4.8 Reactor Trip from Full Power.......................................................... 8 4.1.4.9 Hydrostatic Test Conditions............................................................ 8 4.1.4.10 Primary Side Leak Test................................................................... 9 4.1.4.11 Pressurizer Surge and Spray Line Connections............................. 9 4.1.4.12 Accident Conditions....................................................................... 10 4.1.5 Service Life............................................................................. 11 4.1.6 Codes and Classifications..................................................... 11

INDIANA MICHIGAN POWER Revised: 27.0 D. C. COOK NUCLEAR PLANT Section: 4.1 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 1 of 12

4.0 REACTOR COOLANT SYSTEM

The reactor coolant system, shown on Figures 4.2-1 and 4.2-1A, consists of four similar heat transfer loops connected in parallel to the reactor vessel. Each loop contains a circulating pump and a steam generator. The system also includes a pressurizer, connecting piping, pressurizer safet y and relief valves, and relief tank, necessary for operational control. While instrumentation is a part of, and is shown on the flow diagram of the reactor coolant system, all instrumentation is discussed in Chapter 7.

4.1 DESIGN BASES 4.1.1 Performance Objectives The principal design data for the reactor coolant system are given in Table 4.1-1.

The reactor coolant s ystem transfers the heat generated in the core to the steam generators where steam is generated to drive the turbine generator. Demineralized light water is circulated at the flow rate and temperature consistent with achieving the reactor core thermal hydraulic performance presented in Chapter 3. The water also acts as a neutron moderator and reflector, and as a solvent for the neutron absorber used in chemical shim control.

The reactor coolant system provides a boundary for containing the coolant under operating temperature and pressure conditions. It serves to confine radioactive material and limits, to acceptable values, an y uncontrolled release to the secondary system or to other parts of the plant under conditions of either normal or abnormal reactor behavior. During transient operation, the systems heat capacity attenuates thermal transients generated by the core or steam generators.

The reactor coolant system accommodates coolant volume changes within the protection system criteria presented in Chapter 7.

By appropriate selection of the inertia of the reactor coolant pumps, the thermal-h ydraulic effects are reduced to a safe level during the pump coastdown, which would result from a loss -of-flow situation. The layout of the system assures natural circulation capability following a loss of flow to permit decay heat removal without overheating the core. Part of the systems piping serves as part of the emergency core cooling system to deliver cooling water to the core during a loss-of-coolant accident.

4.1.2 Application of Design Criteria The reactor coolant s ystem is of primary importance with respect to its safety function in protec ting the health and safet y of the public.

Quality standards for material selection, design, fabrication and inspection conform to the applicable provisions of recognized codes and good nuclear practice (Section 4.1.6). Details of INDIANA MICHIGAN POWER Revised: 27.0 D. C. COOK NUCLEAR PLANT Section: 4.1 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 2 of 12

the quality assurance program test procedures and inspection acceptance levels are given in Sub-Chapters 4.3 and 4.5. Particular emphasis was placed on the assurance of quality of the reactor vessel to obtain material whose properties are uniformly within tolerances appropriate to the application of the design methods of the code delineated in Section 4.1.6.

Reactor Coolant System piping and components containing operating pressure and their supporting structures are designed as seismic Class I. Details are given in Section 4.1.4.

The Reactor Coolant S ystem is located in the containment, which was designed to seismic Class I criteria. This design also considered such events as accidents or other applicable natural phenomena. Details of the containment design are given in Chapter 5.

Records of the design, fabrication and construction of the major Reactor Coolant System components will be maintained for the life of the plant. Code records will be maintained for the mandatory period, and thereafter either by Westinghouse or the American Electric Power Company.

The applicable portions of the Missile Protection Criteria as stated in Sub -Chapter 1.4 apply to Class I equipment in this chapter. An additional discussion can be found in Section 4.2.4.

The operation of the react or is such that the severit y of a hypothetical ejection accident is inherentl y limited. Since control rod clusters are used to control load variations only and core depletion is followed with boron dilution, only the rod cluster control assemblies in the controlling groups are inserted in the core at power. At full power these rods are only partially inserted. A rod insertion limit monitor is provided as an administrative aid to the operator to assure that this condition is met.

B y u s i n g the flexibility in the selection of control rod groupings, radial locations and position as a function of load, the design limits the maximum fuel temperature for the highest worth ejected rod to a value which precludes any resultant damage to the Reactor Coolant System pressure boundar y, i.e., gross fuel dispersion in the coolant and possible excessive pressure surges.

The failure of a rod mechanism housing causing a rod cluster to be rapidly ejected from the core was evaluated as a theoretical, though not a credible accident. While limited fuel damage could result from this hypothetical event, the fission products are confined to the Reactor Coolant System and the reactor containment. The environmental consequences of rod ejection are less severe than from the h ypothetical loss of coolant, for which public health and safet y is shown to be adequatel y protected. Reference is made to Chapter 14.

4.1.3 Design Characteristics Design data for the respective Reactor Coolant System components are listed in Tables 4.1-3 through 4.1-8 and Table 4.1-12.

INDIANA MICHIGAN POWER Revised: 27.0 D. C. COOK NUCLEAR PLANT Section: 4.1 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 3 of 12

4.1.3.1 Design Pressure The Reactor Coolant System design and operating pressure together with the safety, power relief and pressurizer spray valves set points, and the Protection System set point pressures are listed in Table 4.1-2. The selected design margin includes operating transient pressure changes from core thermal lag, coolant transport times and pressure drops, instrumentation and control response characteristics, and s ystem relief valve characteristics. Table 4.1-9 gives the design pressure drop of the Reactor Coolant System components.

4.1.3.2 Design Temperature The design temperature for each component was selected to be above the maximum coolant temperature in that component under all normal and anticipated transient load conditions. The design and operating temperatures of the respective system components are listed in Tables 4.1-3 through 4.1-8.

4.1.3.3 Seismic Loads The seismic loading conditions are established by the Operating Basis Earthquake (OBE) and Design Basis Earthquake (DBE). Definitions of these conditions are given in Chapter 2.

For the OBE loading condition, the Nuclear Steam Supply System (NSSS) is designed to be capable of continued safe operation. Therefore, for this loading condition, critical structures and equipment needed for this purpose are required to remain operable. The seismic design for the DBE is intended to provide a margin in design that assures capability to shut down and maintain the reactor in a safe condition. In this case, it is necessary to ensure that the Reactor Coolant System components do not lose their capability to perform their safety function. This has come to be referred to as the no -loss-of-function criteria and the loading condition as the no-loss-of-function loading condition.

The criteria adopted for allowable stresses and stress intensities in vessels and piping subjected to normal loads plus seismic loads are defined in Sub-Chapter 2.9.

In addition, design stress limits associated with emergency and faulted conditions, as defined in Sub-Chapter 2.9, were applied to systems and components which were felt capable of liberating sufficient energy from pipe whip as to potentially damage the containment, increase the severity of a LOCA or damage a safeguard system. These included portions of the Main Steam and Feedwater piping, Steam Generator drains, Accumulator Piping, Containment Spray and Residual Heat Removal System Sprays, and other major piping systems within the containment. The loading combinations and stress limits criteria were based on tables in Sub -Chapter 2.9.

Design and construction practices in accordance with these criteria assure the integrity of the Reactor Coolant System under seismic loading.

INDIANA MICHIGAN POWER Revised: 27.0 D. C. COOK NUCLEAR PLANT Section: 4.1 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 4 of 12

4.1.3.4 Support Load Stresses The criteria applied in the design of the principal Reactor Coolant System component supports, restraints, snubbers and guides are defined in Sub-Chapter 2.9. An integrated dynamic anal ysis of the primary loop piping, the NSSS equipment and NSSS equipment supports was performed. The integrated system was analyzed for both seismic and pipe rupture conditions. For the seismic analysis, building response spectra at building support interfaces were used as input. For the rupture condition, breaks at various critical locations in both the primary and secondary piping were considered. Time history forcing functions associated with the various breaks were used as input to the integrated dynamic model.

Results from these anal yses were combined with operating conditions to obtain the resultant state of stress and strain in both the piping system and the support system. These results showed that the NSSS support system and primary loop piping system were both within an acceptable state of stress and strain for the postulated loading conditions.

4.1.4 Cyclic Loads The reactor coolant system and its components are designed to accommodate 10 percent of full power step changes in plant load and 5 percent of full power per minute ramp changes over the range from 15 percent full power up to and including but not exceeding 100 percent of full power without reactor trip. The reactor coolant system can accept a complete loss of load from full power with reactor trip.

Reactor coolant system components were designed to withstand the effects of cyclic loads due to reactor system temperature and pressure changes. These cyclic loads are introduced by normal power changes, reactor trip, and startup and shutdown operations. The number of thermal and loading cycles used for design purposes are given in Table 4.1-10. These thermal and loading cycles were also used for the Unit 1 rerating program except as noted in the table. During unit startup and shutdown, the rates of temperature and pressure changes are limited as indicated in Sub-Chapter 4.3.

A renewed operating license extends the license term an additional 20 years for CNP, Units 1 and

2. This extension was justified based on design transient cyclic loads defined in Table 4.1-10. The reactor coolant s ystem was originally qualified using a conservative estimate of design cycles for a 40 year life. However, design life is dependent in part on fatigue cycles, not years of service. In evaluations performed for CNP, the actual number of cycles was extrapolated to 60 years. For the major reactor coolant system components, the extrapolated numbers of cycles over a 60- year life will not exceed the design cycles. The actual transient c ycles are tracked and documented to ensure they remain below the allowable number of design cycles, as further discussed in Chapter 15 of the UFSAR.

INDIANA MICHIGAN POWER Revised: 27.0 D. C. COOK NUCLEAR PLANT Section: 4.1 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 5 of 12

To provide the necessary high degree of integrity for the equipment in the reactor coolant system, the transient conditions selected for equipment fatigue evaluation were based on a conservative estimate of the magnitude and frequency of the temperature and pressure transients resulting from normal operation, normal and abnormal load transients and accident conditions. To a large extent, the specific transient operating conditions considered for equipment fatigue anal yses were based upon engineering judgment and experience. The transients chosen are representative of transients which prudently should be considered to occur during plant operation and which are sufficiently severe or may occur frequently to be of possible significance to component cyclic behavior.

For fatigue calculation of Class I s ystems and components, 20 OBE occurrences of 20 cycles each for a total of 400 occurrences was considered acceptable. However, for the reactor vessel a more conservative 10 OBE occurrences of 20 cycles each for a total of 200 occurrences was considered acceptable.

In accordance with Technical Specifications, CNP tracks the number of transient occurrences listed in the following sections. Each transient condition is discussed in order to make clear the nature and basis for the various transients.

4.1.4.1 Heatup and Cooldown For design evaluation, the heatup and cooldown cases are represented by continuous heatup or cooldown at a rate of 100°F per hour, which corresponds, to a heatup or cooldown rate under abnormal or emergency conditions. The heatup occurs from ambient to the no load temperature and pressure condition and cooldown represents the reverse situation. In actual practice, the rate of temperature change of 100°F per hour will usually not be attained because of other limitations such as:

a. Criteria for prevention of non-ductile failure, which establish maximum permissible temperature rates of change as a function of plant pressure and temperature.
b. Slower initial heatup rates when using pumping energy only.
c. Interruptions in the heatup and cooldown cycles due to such factors as drawing a pressurizer steam bubble, rod withdrawal, sampling, water chemistry and gas adjustments.

The heatup and cooldown rates, imposed by plant operating procedures, are limited to no more than 60°F per hour for heatup and 100°F per cooldown for normal operation. Ideall y, heatup and cooldown would occur only before and after refueling. In practice, additional unscheduled plant cooldowns may be necessary for plant maintenance. The frequency of maintenance shutdowns is expected to decrease as the plant matures.

INDIANA MICHIGAN POWER Revised: 27.0 D. C. COOK NUCLEAR PLANT Section: 4.1 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 6 of 12

As experience was gained with Yankee-Rowe, the number of shutdowns decreased; for example Core II ran for a year from 1962 to 1963 with no cooldown. Table 4.1-11 is a summary of the Yankee-Rowe plant outage for the period 1964 through to 1969.

4.1.4.2 Unit Loading and Unloading The unit loading and unloading cases considered for the original design are conservatively represented b y a continuous and uniform ramp power change of 5% per minute between 15% load and full load. This load swing is the maximum possible consistent with operation with automatic reactor control. The reactor coolant temperature will vary with load as programmed by the temperature control system. The number of each operation is specified at 18,300 times over the life of the plant.

For Unit 1 rerating conditions these cases are conservatively represented by a continuous and uniform ramp power change of 5% per minute between 0% load and full load. The number of each operation is specified at 11,680 times over the life of the plant.

The Unit 1 Babcock & Wilcox (BWI) Model 51R replacement steam generators have been anal yzed for both the pre-Measurement Uncertainty Recapture (MUR) power uprate power rating (3264 MWt) and the 3600 MWt power uprate condition for a continuous and uniform ramp power change of 5% per minute between 0% and full load, with 11,680 cycles as described above.

4.1.4.3 Step Increase and Decrease of 10%

The +/-10% step change in load demand is a control transient, which is assumed to be a change in turbine control valve opening, which might be occasioned by disturbances in the electrical network into which the plant output is tied. The reactor control system is designed to restore plant equilibrium without a reactor trip following a +/- 10% step change in turbine load demand initiated from nuclear plant equilibrium conditions in the range between 15% and 100% full load, the power range for automatic reactor control. In effect, during load change conditions, the reactor control system attempts to match turbine and reactor outputs in such a manner that the peak reactor coolant temperature is minimized and reactor coolant temperature is restored to its programmed set point, at a sufficientl y slow rate, to prevent excessive pressurizer pressure decrease.

Following a step load decrease in turbine load, the secondary side steam pressure and temperature initially increase since the decrease in nuclear power lags behind the step decrease in turbine load.

During the same increment of time, the reactor coolant system average tempe rature and pressurizer pressure also initially increase. Because of the power mismatch between the turbine and reactor and the increase in reactor coolant temperature, the control system automatically inserts the control rods to reduce core power. With load decrease, the reactor coolant temperature will ultimately be reduced from its peak value to a value below its initial equilibrium value at the inception of the transient. The reactor coolant average temperature set point change is made as a function of turbine generator load as determined by the first stage turbine pressure measurement. The pressurizer INDIANA MICHIGAN POWER Revised: 27.0 D. C. COOK NUCLEAR PLANT Section: 4.1 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 7 of 12

pressure will also decrease from its peak pressure value and follow the reactor coolant decreasing temperature trend. At some point during the decreasing pressure transient, the saturated water in the pressurizer begins to flash which reduces the rate of pressure decrease. Subsequently, the pressurizer heaters come on to restore the plant pressure to its normal value.

Following a step load increase in turbine load, the reverse situation occurs, i.e., the secondary side steam pressure and temperature initially decrease and the reactor coolant average temperature and pressure initially decrease. The control system automatically withdraws the control rods to increase core power. The decreasing pressure transient is reversed b y actuation of the pressurizer heaters and eventually the system pressure is restored to its normal value. The reactor coolant average temperature will be raised to a value above its initial equilibrium value at the beginning of the transient. The number of each operation is specified at 2000 times over the life of the plant.

4.1.4.4 Large Step Decrease in Load This transient applies to a step decrease in turbine load from full power of such magnitude that the resultant rapid increase in reactor coolant average temperature and secondary side steam pressure and temperature will automatically initiate the secondary side steam dump system. The plant is designed to accept a step decrease of 50% from full power by use of a steam dump system that provides a heat sink to accept approximately 40% of full load steam flow. The remaining 10% of the total step change is assumed by the reactor rod control system as noted in Chapter 3.

The number of occurrences of this transient is specified at 200 times over the life of the plant.

Reference to the Yankee-Rowe record indic ates that this basis is adequatel y conservative.

4.1.4.5 Loss of Load This transient applies to a step decrease in turbine load from full power occasioned by the loss of turbine load without immediately initiating a reactor trip and represents the most sev ere transient on the reactor coolant system. In this assumed case, the reactor and the turbine eventuall y trip as a consequence of a high pressurizer level trip initiated b y the Reactor Protection System.

The number of occurrences of this transient is specified at 80 times over the life of the plant. Since redundant means of tripping the reactor upon turbine trip are provided as part of the Reactor Protection System, transients of this nature are not expected.

4.1.4.6 Loss of Power This transient applies to a blackout situation involving the loss of offsite electrical power to the station and a reactor and turbine trip, on low reactor coolant flow, culminating in a complete loss of plant electrical power. Under these circumstances, the reactor coolant pumps are de-energized and, following the coastdown of the reactor coolant pumps, natural circulation builds up in the system to some equilibrium value. This condition permits removal of core residual heat through the steam generators, which at this time are receiving feedwater from the Auxiliary Feedwater INDIANA MICHIGAN POWER Revised: 27.0 D. C. COOK NUCLEAR PLANT Section: 4.1 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 8 of 12

System operating from Diesel Generator power. Steam is removed for reactor cooldown through atmospheric pilot-operated relief valves provided for this purpose.

The number of occurrences of this transient is specified at 40 times over the life of the plant.

4.1.4.7 Loss of Flow This transient applies to a partial loss of flow accident from full power in which a reactor coolant pump is tripped out of service as a result of a loss of power to that pump. The consequences of such an accident at a high power level are a reactor and turbine trip on low reactor coolant flow, followed by automatic opening of the steam dump system and flow reversal in the affected loop.

The flow reversal results in reactor coolant, at cold leg temperature, being passed through the steam generator and cooled still further. This cooler water then passes through the hot leg piping and enters the reactor vessel outlet nozzles. The net result of the flow reversal is a sizeable reduction in the hot leg coolant temperature of the affected loop.

The number of occurrences of this transient is specified at 80 times over the life of the plant.

4.1.4.8 Reactor Trip from Full Power A reactor trip from full power may occur for a variety of causes resulting in temperature and pressure transients in the Reactor Coolant System and in the secondary side of the steam generator.

This is the result of continued heat transfer from the reactor coolant in the steam generator. The transient continues until the reactor coolant and steam generator secondary side temperatures are in equilibrium at zero power conditions. A continued supply of feedwater and controlled dumping of secondary steam remove the core residual heat and prevent the steam generator safet y valves from lifting. The reactor coolant temperature and pressure undergo a rapid decrease from full power values as the Reactor Protection System causes the control rods to move into the core.

The number of occurrences of this transient is specified at 400 times over the life of the plant.

4.1.4.9 Hydrostatic Test Conditions The pressure tests are outlined below:

a. Primary Side Hydrostatic Test Before Initial Startup at 3107 psig The pressure tests covered by this section include both shop and field hydrostatic tests, which occurred as a result of component, or system testing. This hydro test was performed at a water temperature, which is compatible with reactor vessel material Design Transition Temperature (DTT) requirements and a maximum test pressure of 3107 psig. In this test, the primary side of the steam generator was pressurized to 3107 psig coincident with the secondary side pressure of 0 psig. The Reactor Coolant System is designed for 5 cycles of this hydro test.
b. Secondary Side Hydrostatic Test Before Initial Startup INDIANA MICHIGAN POWER Revised: 27.0 D. C. COOK NUCLEAR PLANT Section: 4.1 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 9 of 12

The secondary side of the steam generator was pressurized to 1356 psig with a minimum water temperature of 70°F coincident with the primary side of 0 psig.

The Unit 1 steam generators ma y experience 5 c yc les of this test. The Unit 2 steam generators may experience 5 cycles of this test.

4.1.4.10 Primary Side Leak Test Subsequent to each time t he primar y s ystem has been opened, a leak test will be performed. During this test the primary system pressure is, for design purposes, assumed to be raised to 2500 psia with the system temperature above Design Transition Temperature, while the system is checked for leaks.

In actual practice, the primary system will be pressurized to below 2500 psia to prevent the pressurizer safety valves from lifting during the leak test.

4.1.4.11 Pressurizer Surge and Spray Line Connections The surge and spray nozzle connections at the pressurizer vessel are subject to cyclic temperature changes resulting from the transient conditions described previously. The various transients are characterized b y variations in reactor coolant temperature, which in turn result in water surges into or out of the pressurizer.

The surges manifest themselves as changes in s ystem pressure which, depending upon whether an increase or decrease in pressure occurs, result in introducing spray water into the pressurizer to reduce pressure or in actuating the pressurizer heaters to increase pressure to the equilibrium value.

To illustrate a load change cycle as it affects the pressurizer, consider a design step increase in load. The pressurizer initially experiences an outsurge with a drop in system pressure which actuates the pressurizer heaters to restore s ystem pressure. As the Reactor Control System reacts, the reactor coolant temperature is increased which causes an insurge into the pressurizer raising system pressure. As pressure is increased, the heaters go off and, at the pressure set point; the spray valves open to limit the pressure rise and restore s ystem pressure. Thus the pressurizer surge nozzle is subjected to a temperature increase on the outsurge followed b y a temperature decrease on the insurge during this load transient. The pressurizer spray nozzle is subjected to a temperature decrease when the spray valve opens to admit reactor coolant cold leg water into the pressurizer.

The pressurizer experiences a reverse situation during a load decrease transient, i.e., an insurge followed by an outsurge.

It is assumed that the spray valve opens to admit spray water into the pressurizer once, at the design flowrate, for each design step change in plant load. Thus the number of occurrences for the spray nozzle corresponds to that shown for the other components in Table 4.1-10.

During plant cooldown, spray water is introduced into the pressurizer to cool it down. The maximum pressurizer cooldown rate is specified at 200°F per hour, which is twice the rate specified for the other Reactor Coolant System components.

INDIANA MICHIGAN POWER Revised: 27.0 D. C. COOK NUCLEAR PLANT Section: 4.1 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 10 of 12

4.1.4.12 Accident Conditions The effect of the accident loading was evaluated in combination with normal loads to demonstrate the adequacy to meet the stated plant safet y criteria.

A brief description of each accident transient considered follows. In each case one occurrence is evaluated.

a. Reactor Coolant Pipe Break This accident involves the rupture of a Reactor Coolant System pipe resulting in a loss of primary coolant. It was conservatively assumed that the system pressure and temperature would be reduced rapidly and that the Safety Injection System would be initiated to introduce 70°F water into the Reactor Coolant System. The safety injection signal will also result in a turbine and reactor trip. Because of the rapid blowdown of coolant from the system and the comparatively large heat capacity of the metal sections of the components, it is likely that the metal is still at no-load temperature conditions when the 70°F safety injection water is introduced into the system.
b. Steam Line Break For component evaluation, the following conservative conditions were considered:
1. The reactor is initially in a hot, no -load, just critical condition, assuming all rods in except the most reactive rod, which is assumed to be stuck in its fully withdrawn position.
2. A steam line break occurs inside the containment resulting in a reactor and turbine trip.
3. Subsequent to the break, there is no return to power and the reactor coolant temperature cools down to 212°F.
4. The centrifugal charging pumps restore the reactor coolant pressure to 2500 psia.

The above conditions result in the most severe temperature and pressure variations which the component will encounter during a steam break accident.

c. Steam Generator Tube Rupture This accident postulates the double-ended rupture of a steam generator tube resulting in a decrease in pressurizer level and reactor coolant pressure. Reactor trip will occur due to a safety injection signal on low pressurizer pressure. When the accident occurs, some of the reactor coolant blows down into the affected steam INDIANA MICHIGAN POWER Revised: 27.0 D. C. COOK NUCLEAR PLANT Section: 4.1 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 11 of 12

generator causing the level to rise. If the level rises to a pre-selected setpoint, a high level alarm will occur and the feedwater regulating valve will close.

It is expected this accident will result in a transient which is no more severe than that associated with a reactor trip. For this reason, it requires no special treatment in so far as fatigue evaluation is concerned. Further detail about the sequence of events may be found in Section 14.2.4 (Units 1 and 2).

4.1.5 Service Life The service life of the Reactor Coolant System pressure containing components depends upon the end-of-life material radiation damage, unit operational thermal cycles, design and manufacturing quality standards, environmental protection, maintenance standards and adherence to established operating and maintenance procedures.

The reactor vessel is the only component of the Reactor Coolant System which is exposed to a significant level of neutron irradiation and therefore it is the only component which is subject to material radiation damage effects.

The NDTT shift of the vessel material and welds during service due to radiation damage effects is monitored by a radiation damage surveillance program. Details are given in Sub-Chapter 4.5.

Reactor vessel design was based on the transition temperature method of evaluating the possibility of brittle fracture of the vessel material as a result of operation.

To establish the service life of the Reactor Coolant System components as required by the ASME (Section III) Boiler and Pressure Vessel Code for A vessels, unit operating conditions were established for the initial 40 year design life. These operating conditions include the cyclic application of pressure loadings and thermal transients. The numbers of operating transients during the 60- year licensed life are not projected to exceed the number of transients assumed for the initial plant design life.

The number of thermal and loading cycles used for design purposes is listed in Table 4.1-10.

4.1.6 Codes and Classifications Pressure-containing components of the Reactor Coolant System were designed, fabricated, inspected and tested in conformance with the applicable codes listed in Table 4.1-12. Refer to Sub-Chapter 4.5 for a discussion of Inservice Inspection.

Reactor Coolant System piping has been designed and supported in accordance with the USAS B31.1-1967 Code for Pressure Piping. The Code requirement that the piping shall be arranged and supported with consideration of vibration was met by means of variable spring hangers, rigid supports, constant support hangers, pipe anchors, guides and snubbers. The Code does not specifically require any vibrational test programs. However, during the normal course of the preoperational test program, specific attention was directed at evaluating possible vibration INDIANA MICHIGAN POWER Revised: 27.0 D. C. COOK NUCLEAR PLANT Section: 4.1 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 12 of 12

problems during performance of specific transients associated with the required preoperational tests. Excessive vibrations or deficiencies, determined by visual examinations, which were indicative of possible vibration problems, were investigated and corrected when necessary. This was done to verif y that the piping and piping restraints within the Reactor C oolant S ystem pressure boundary were adequately designed to withstand dynamic effects resulting from transient conditions.

INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT Section: 4.2 UPDATED FINAL SAFETY ANALYSIS REPORT Page: i of ii

4.2 SYSTEM DESIGN AND OPERATION...............................................1 4.2.1 General Description................................................................. 1 4.2.2 Components Description.........................................................1 4.2.2.1 Reactor Vessel................................................................................ 1 4.2.2.1.1 Unit 1.......................................................................................................................... 3 4.2.2.1.2 Unit 2.......................................................................................................................... 3 4.2.2.2 Pressurizer...................................................................................... 4 4.2.2.2.1 Pressurizer Spray......................................................................................................... 5 4.2.2.2.2 Surge Line................................................................................................................... 6 4.2.2.3 Pressurizer Relief Tank................................................................... 6 4.2.2.3.1 Discharge Piping......................................................................................................... 7 4.2.2.4 Steam Generators........................................................................... 7 4.2.2.5 Reactor Coolant Pumps................................................................. 9 4.2.2.6 Reactor Coolant System Vents..................................................... 12 4.2.2.7 Reactor Coolant Piping................................................................. 13 4.2.2.8 Valves............................................................................................ 14 4.2.2.8.1 Pressurizer Safety Valves.......................................................................................... 15 4.2.2.8.2 Power Relief Valves.................................................................................................. 15 4.2.2.9 Reactor Coolant System Supports................................................ 16 4.2.3 Pressure-Relieving Devices................................................... 17 4.2.4 Protection against Proliferation of Dynamic Effects........... 17 4.2.5 Materials of Construction...................................................... 18 4.2.6 Maximum Heating and Cooling Rates................................... 19 4.2.7 Leakage...................................................................................20 4.2.7.1 Leakage Prevention...................................................................... 20 4.2.7.2 Locating Leaks.............................................................................. 20 4.2.7.3 Leak Detection Methods................................................................ 20 4.2.8 Water Chemistry..................................................................... 22 4.2.9 Reactor Coolant Flow Measurements................................... 22 INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT Section: 4.2 UPDATED FINAL SAFETY ANALYSIS REPORT Page: iiof ii

4.2.9.1 Reactor Coolant Margin To Saturation.......................................... 22 4.2.10 Loose Parts Detection............................................................ 23 4.2.11 Reactor Vessel Water Level................................................... 23 4.2.11.1 References for Section 4.2............................................................ 24

INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT Section: 4.2 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 1 of 24

4.2 SYSTEM DESIGN AND OPERATION 4.2.1 General Description The Reactor Coolant System consists of four similar heat transfer loops connected in parallel to the reactor vessel. Each loop contains a steam generator, a pump, loop piping and instrumentation.

The pressurizer surge line is connected to one of the loops. Auxiliary system piping connections into the reactor coolant piping are provided as necessary. A flow diagram of the system is shown in Figures 4.2-1 and 4.2-1A.

Reactor Coolant System design data are listed in Tables 4.1-1 through 4.1-8 and Table 4.1-12.

Pressure in the system is controlled by the pressurizer, where water and steam pressure is maintained through the use of electrical heaters and sprays. Steam can either be formed by the heaters, or condensed by a pressurizer spray, to minimize pressure variations due to contraction and expansion of the coolant. Instrumentation used in the pressure control system is described in Chapter 7. Spring-loaded safety valves and power-operated relief valves are connected to the pressurizer and discharge to the pressurizer relief tank, where the discharged steam is condensed and cooled by mixing with water.

4.2.2 Components Description 4.2.2.1 Reactor Vessel The reactor vessel is cylindrical with a welded hemispherical bottom head and a removable, flanged and gasketed, hemispherical upper head. The vessel contains the core, core support structures, control rods, thermal shield and other parts directly associated with the core. The reactor vessel closure head contains head adaptors. These head adaptors are tubular members, attached by partial penetration welds to the underside of the closure head. The upper end of these adaptors contain Acme threads for the assembly of control rod drive mechanisms (Unit 1 and Unit 2 design has eliminated the Core Exit Thermocouple (CET) ACME threads). A dedicated nozzle, near the center of the reactor head, connects to vent piping, which vents to the upper containment volume, to provide reactor vessel head venting of non-condensable gas while maintaining adequate core cooling and containment integrity (Both Unit 1 and Unit 2 have a dedicated reactor head vent nozzle). For further details see Sub-Section 4.2.2.6. The seal arrangement at the upper end of these adaptors consists of omega seal weld to the CRDM pressure housing. The upper end of the instrument adaptor consists of a mechanical sealing assembly. The vessel has inlet and outlet nozzles located in a horizontal plane just below the vessel flange but above the top of the core.

Coolant enters the inlet nozzles and flows down the core barrel-vessel wall annulus, turns at the bottom and flows up through the core to the outlet nozzles.

INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT Section: 4.2 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 2 of 24

The bottom head of the vessel contains penetration nozzles for connection and entry of the nuclear in-core detection instrumentation. Each tube is attached to the inside of the bottom head by a partial penetration weld.

The reactor vessel is designed to provide the smallest and most economical volume required to contain the reactor core, control rods and the necessary supporting and flow-directing internals.

Inlet and outlet nozzles are spaced around the vessel. Outlet nozzles are located on opposite sides of the vessel to facilitate optimum layout of the Reactor Coolant System equipment. The inlet nozzles are tapered from the coolant loop -vessel interfaces to the vessel inside wall to reduce loop pressure drop.

The reactor vessel flange and head are sealed by two hollow metallic O-rings. Seal leakage is detected by means of two leak-off connections; one between the inner and outer ring, and one outside of the outer O-ring. Piping and associated valving are provided to direct any leakage to the reactor coolant drain tank. Leakage will be indicated by a high-temperature alarm from a detector in the leakoff line.

Ring forgings have been used in the following areas of the reactor vessel:

A. Vessel Flange B. Eight Primary Nozzles C. The Unit 1 and Unit 2 closure heads are one-piece forgings.

Core structural load bearing members were made from annealed type 304 stainless steel, so there is no possibility that they may become furnace sensitized 2. The only exception is the core barrel itself, which required stress relief during manufacture at temperatures over 750°F, to minimize the possibility of severe sensitization while maintaining the necessary conditions for relieving residual fabrication stresses.

Other pressure or strength bearing stainless steel components or parts in the reactor vessel and associated Reactor Coolant System that may become furnace sensitized 1 during the fabrication sequence include:

2 The term "furnace sensitized" is interpreted as austenitic stainless steel wrought material and weld metal components which have been post weld heat treated in accordance with ASME Section III requirements, and which on the basis of its composition and thermal history would not be expected to pass ASTM-A-393.

INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT Section: 4.2 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 3 of 24

4.2.2.1.1 Unit 1 A. Reactor Vessel

1. Primary nozzle safe ends - Type 316 forging B. Steam Generators
1. Primary nozzle safe ends - weld metal buttered ends - Type 316 LN forgings (Unit 1 Replacement Steam Generator). 3 4.2.2.1.2 Unit 2 A. Reactor Vessel
1. Primary nozzle safe ends - Type 316 forging overlaid with weld prior to final post weld heat treatment.
2. Monitor Tubes.

B. Steam Generators

1. Primary nozzle safe ends - weld metal buttered ends.

Westinghouse has evaluated the use of sensitized stainless steel and reactor components in pressurized water reactors. The results of this evaluation are summarized in Reference 1, which covers the nature of sensitization, conditions leading to stress corrosion and associated problems with both sensitized and non-sensitized stainless steel. The results of extensive testing and service experience that justify the use of stainless steel in the sensitized condition for components in Westinghouse PWR Systems is presented in Reference 1.

Although Westinghouse testing and evaluation showed justification for the use of sensitized stainless steel, extra modifications were made during the fabrication of these vessels, when it was revealed that the work would not significantly affect the delivery schedules and would result in a somewhat more conservative design. Also, for the Unit 2 replacement steam generator lower assemblies the use of severely sensitized stainless steels was prohibited on the primary nozzle safe ends.2 The cylindrical portion of the reactor vessel below the refueling seal ledge is permanently insulated with a metallic reflective-type insulation supported from the reactor coolant nozzles. This insulation consists of inner and outer sheets of stainless steel spaced 3 inches apart with multilayers

3 Through an R & D program performed by Babcock & Wilcox (BWI), it was demonstrated that the primary nozzle safe end material does not sensitize when subjected to the PWHT times that the Unit 1 Replacement Steam Generator (RSG) was subjected to.

INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT Section: 4.2 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 4 of 24

of stainless steel. Removable panels of the metallic reflective insulation described above are provided for the reactor vessel head and closure region.

These panels are supported on the refueling seal ledge and vent shroud support ring. The rest of the closure head is insulated with removable panels of at least three inches of the reflective insulation described. The bottom head is also insulated with reflective insulation, which is not removable.

Schematics of the reactor vessel are shown in Figures 4.2-2 and 4.2-2A. The materials of construction are given in Table 4.2-1 and the design parameters are given on Table 4.1-3. A description of the reactor vessel internals is given in Chapter 3.

4.2.2.2 Pressurizer The pressurizer provides a point in the Reactor Coolant System where liquid and vapor can be maintained in equilibrium under saturated conditions for control purposes.

The pressurizer is a vertical, cylindrical vessel with hemispherical top and bottom heads constructed of carbon steel, with austenitic stainless steel cladding on all surfaces exposed to the reactor coolant. Electrical heaters are installed through the bottom head of the vessel while the spray nozzle, relief and safety valve connections are located in the top head of the vessel. The heaters are removable for maintenance or replacement. A vent connection is provided on the piping ahead of the power-operated relief valves to vent non-condensible gases or steam from the pressurizer to the upper containment volume. For further details see Sub-Section 4.2.2.6.

The pressurizer is designed to accommodate positive and negative surges caused by load transients. The surge line, which is attached to the bottom of the pressurizer, connects the pressurizer to the hot leg of one reactor coolant loop.

During an insurge, the spray system, which is fed from two cold legs, condenses steam in the vessel to prevent the pressurizer pressure from reaching the set-point of the power-operated relief valves. The spray valves on the pressurizer are modulating, air operated, control valves. In addition, the spray valves can be operated manually by a switch in the control room. A small continuous spray flow is provided through a manual bypass valve around the power-operated spray valves to assure that the pressurizer liquid is homogeneous with the coolant and to prevent excessive cooling of the spray piping.

During an outsurge, flashing of water to steam and generating of steam by automatic actuation of the heaters keep the pressure above the minimum allowable limit. Heaters are also energized on high water level during insurges to heat the subcooled surge water entering the pressurizer from the reactor coolant loop. A screen at the surge line nozzle and baffles in the lower section of the pressurizer prevents cold insurge water from flowing directly to the steam/water interface and it assists mixing.

INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT Section: 4.2 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 5 of 24

The volume of the pressurizer is equal to or greater than, the minimum volume of steam, water, or total of the two, which satisfies all of the following requirements:

1. The combined saturated water volume and steam expansion volume is sufficient to provide the desired pressure response to system volume changes.
2. The water volume is sufficient to prevent the heaters from being uncovered during a step-load increase of ten percent of full power.
3. The steam volume is large enough to accommodate the surge resulting from the design step load reduction of full load with reactor control and steam dump without the water level reaching the high-level reactor trip point.
4. The steam volume is large enough to prevent water relief through the safety valves following a loss of load with the high water level initiating a reactor trip.
5. The pressurizer will not empty following reactor trip and loss of load.
6. The Emergency Core Cooling Signal will not be activated during reactor trip and turbine trip.

The general configuration of the pressurizer is shown in Figure 4.2-3 and the design data are given in Table 4.l-4.

4.2.2.2.1 Pressurizer Spray Two separate, automatically controlled spray valves with remote manua l overrides are used to regulate pressurizer spray. In parallel with each spray valve is a manual throttle valve which permits a small continuous flow through both spray lines to reduce thermal stresses and thermal shock when the spray valves open, and to help maintain uniform water chemistry and temperature in the pressurizer. Temperature sensors with low alarms are provided in each spray line to alert the operator to insufficient bypass flow. The layout of the common spray line piping to the pressurizer forms a water seal, which prevents steam buildup back to the control, valves. The spray rate from one valve is sufficient to prevent the pressurizer pressure from reaching the operating (set) point of the power relief valves during a step reduction in power level of ten percent full load.

The pressurizer spray lines and valves are large enough to provide adequate spray flow using as the driving force the differential pressure between the surge line connection in the hot leg and the spray line connection in the cold leg. The spray line inlet connections extend into the cold leg piping in the form of a scoop so that the velocity head of the reactor coolant loop flow adds to the spray driving force. The line may also be used to assist in equalizing the boron concentration between the reactor coolant loops and the pressurizer.

A flow path from the Chemical and Volume Control System to the pressurizer spray line is also provided. This additional facility provides auxiliary spray to the vapor space of the pressurizer during cooldown if the reactor coolant pumps are not operating. The thermal sleeve on the INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT Section: 4.2 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 6 of 24

pressurizer spray connection is designed to withstand the thermal stresses resulting from the introduction of cold spray water.

4.2.2.2.2 Surge Line The surge line is sized to limit the pressure drop during the maximum anticipated surge to less than the difference between the maximum allowable pressure in the reactor vessel and the loops (at the point of highest pressure) and the pressure in the pressurizer at the maximum allowable accumulation with the safety valves discharging.

The surge line and the thermal sleeves at each end are designed to withstand the thermal stresses resulting from volume surges of relatively hotter or colder water, which may occur during operation.

4.2.2.3 Pressurizer Relief Tank The pressurizer relief tank condenses and cools the discharge from the pressurizer safety and relief valves, as well as several smaller relief valves. The tank normally contains water and a predominantly nitrogen atmosphere; however, provision is made to permit the gas in the tank to be periodically analyzed to monitor the concentration of hydrogen and/or oxygen.

The pressurizer relief tank, by means of its connection to the Waste Disposal System, provides a means for removing any non-condensable gases from the Reactor Coolant System, which might collect in the pressurizer vessel.

Steam is discharged through a sparger pipe under the water level. This condenses and cools the steam by mixing it with water that is near ambient temperature. The tank is equipped with an internal spray and a drain, which are used to cool the tank following a discharge. The tank is protected against a discharge exceeding the design value by two rupture discs, which discharge into the reactor containment. The tank is carbon steel with a corrosion-resistant coating on the wetted surfaces. A flanged nozzle is provided on the tank for the pressurizer discharge line connection. This nozzle and the discharge piping and sparger within the vessel are austenitic stainless steel.

The tank design is based on the requirement to condense and cool a discharge of pressurizer steam equal to 110 percent of the volume above the 100%-power pressurizer water level set-point. The tank is not designed to accept a continuous discharge from the pressurizer. The volume of water in the tank is capable of absorbing the heat from the assumed discharge, with an initial temperature of 120°F and increasing to a final temperature of 210°F. If the temp erature in the tank rises above 126°F during plant operation, the tank is cooled by spraying in cool water and draining out the warm mixture to the Waste Disposal System.

The spray rate is designed to cool the tank from 200°F to 120°F in approximately one hour following the design discharge of pressurizer steam. The volume of nitrogen gas in the tank is selected to limit the maximum pressure following a design discharge to 50 psig.

INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT Section: 4.2 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 7 of 24

The rupture discs on the relief tank have a relief capacity equal to the combined capacity of the pressurizer safety valves. The tank design pressure is twice the calculated pressure resulting from the maximum safety valve discharge described above. The tank and rupture discs holders are also designed for full vacuum to prevent tank collapse if the contents cool following a discharge without nitrogen being added.

Principal design parameters of the pressurizer relief tank are given in Table 4.1-4.

4.2.2.3.1 Discharge Piping The discharge piping (from the safety and power-operated relief valves to the pressurizer relief tank) is sized to prevent back-pressure at the safety valves from exceeding 20 percent of the set-point pressure at full flow. The pressurizer safety and power relief valves discharge lines are stainless steel.

4.2.2.4 Steam Generators The steam generators are vertical shell and U-tube heat exchangers with integral moisture separating equipment. The reactor coolant flows through the inverted U-tubes, entering and leaving through the nozzles located in the hemispherical bottom head of the steam generator. The head is divided into inlet and outlet chambers by a vertical partition plate extending from the head to the tube sheet. Manways are provided for access to both sides of the divided head. Feedwater enters the steam generators and is distributed through a feedwater ring located just below the moisture separators. Thermal sleeves are provided in the feedwater piping elbows at the steam generator inlet (Unit 2 only). For the Unit 1 Babcock & Wilcox Model 51R replacement steam generators, the thermal sleeves are welded to a transition ring which is then welded to the main feedwater nozzle forging on the steam drum shell side of the steam generator. Feedwater flow is out of the top of the feedwater ring through J tubes, down between the steam generator shell and tube bundle wrapper and into the tube bundle just above the tube sheet. The J tubes prevent rapid drainage of the feedwater ring due to a drop in steam generator water level and thus eliminate or reduce the possibility of water hammer in the feedwater line. Steam is generated on the shell side of the tube bundle and flows upward through the moisture separators to the outlet nozzle at the top of the vessel.

The units are primarily constructed of carbon steel. The heat transfer tubes are Inconel, the primary side of the tube sheets are clad with Inconel, and the interior surfaces of the reactor coolant channel heads and nozzles are clad with austenitic stainless steel.

The Unit 2 and Unit 1 steam generators of this type are shown in Figures 4.2-4 and 4.2-4a through 4.2-4e respectively. Design data are given in Table 4.1-5.

Each steam generator is designed to produce 25 percent of the steam flow required at full-power operation. The internal moisture-separating equipment is designed to insure that the moisture INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT Section: 4.2 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 8 of 24

carryover will not exceed 0.045 percent by weight for Unit 1 and 0.15 percent by weight for Unit 2 under the following conditions:

a. Steady-state operation up to 105 percent of full-load steam flow, with water at the normal operating level.
b. Loading or unloading at a rate of five percent of full power steam flow per minute in the range from 15% to 105% of full load steam flow. The Unit 1 Babcock &

Wilcox Model 51R replacement steam generators have been analyzed for both the pre-Measurement Uncertainty Recapture power uprate power rating (3264 MWt) and the 3600 MWt power uprate condition for a continuous and uniform ramp power change of 5% per minute between 0% and full load. The Unit 2 Model 51 replacement steam generators have been analyzed for both the pre-Measurement Uncertainty Recapture power uprate power rating (3425 MWt) and the 3600 MWt power uprate condition for a continuous and uniform ramp power change of 5% per minute between 0% and full load, with 11,680 cycles as described above.

c. A step-load change of ten percent of full power in the range from 15% to 105% full load steam flow.

In 2000, the Unit 1 steam generators were replaced. The Babcock & Wilcox (BWI) Model 51R replacement steam generators consist of a lower replacement steam generator subassembly (RSGSA), replacement steam drum internals, and replacement feedring fabricated by BWI plus the re-used existing Model 51R steam drum pressure boundary. The procurement of the replacement steam generator subassemblies did not affect the original design basis. Where appropriate, the tables and subsections of Chapter 4 have been revised to reflect the design enhancements of the Unit 1 RSG.

During the summer of 1988, Unit 2 steam generators were replaced. This entailed the procurement of new replacement lower assemblies and refurbishment of the upper assemblies and internals (steam dome). The procurement of the replacement steam generator assemblies did not affect the original design basis. Where appropriate, the tables and subsections of Chapter 4.0 have been revised to reflect the design enhancements of the replacement steam generator lower assemblies with their refurbished upper assemblies.

The Unit 1 and Unit 2 design pressure limit for primary-to-secondary pressure differential is 1600 psi. Certain operating conditions (e.g., low full-power vessel average temperature, high steam generator tube plugging levels, and reactor coolant system pressure controlled to 2250 psia) can result in the maximum primary -to-secondary pressure gradient to exceed the 1600 psi limit during normal transients. Calculations indicate that a minimum full-power steam pressure of 679 psia is necessary such that the maximum primary -to-secondary pressure gradient remains less than or equal to 1600 psi during normal transients for either Unit 1 or Unit 2. In order to provide additional conservatism relative to the design differential pressure limit, the minimum full-power steam INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT Section: 4.2 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 9 of 24

pressure shall be restricted to 690 psia when reactor coolant system pressure is controlled to 2250 psia.

4.2.2.5 Reactor Coolant Pumps Each reactor coolant loop contains a vertical single stage mixed flow pump, which employs a controlled leakage seal assembly. The principal design parameters for the pumps are listed in Table 4.1-6. The reactor coolant pump estimated performance and NPSH characteristics are shown in Figure 4.2-8.

Reactor coolant is drawn up through the pump impeller, discharged through passages in the diffuser and out through a discharge nozzle in the side of the casing. The rotor-impeller can be removed from the casing for maintenance or inspection without removing the casing from the piping. All parts of the pump in contact with the reactor coolant are austenitic stainless steel or equivalent corrosion resistant materials.

The pump employs a controlled leakage seal assembly to restrict leakage along the pump shaft, a second seal which directs the controlled leakage out of the pump, and a third seal which minimizes the leakage of water out of the pump. The second and third seals drain to the reactor coolant drain tank.

The shaft seal section consists of the number 1 controlled leakage, film riding face seal, a shutdown seal (SDS) assembly and the number 2 and number 3 rubbing face seals. The seals are contained within the main flange and seal housing. The SDS is housed within the number 1 seal area and is a passive device actuated by high seal flow temperature resulting from a loss of seal injection and component cooling water (CCW) cooling to the thermal barrier cooling coil.

In the event of a loss of seal injection and CCW flow to the thermal barrier heat exchanger, reactor coolant begins to travel along the RCP shaft and displaces the cooler seal injection water. Once the temperature within the number 1 seal reaches the actuation temperature range of the SDS, the SDS will activate to limit leakage from the RCS through the RCP seal package. The loss of reactor coolant through the RCP seal package is limited when the SDS polymer ring activates (clamps down) around the number 1 seal sleeve.

A portion of the high pressure water flow from the charging pumps is injected into the reactor coolant pump between the impeller and the controlled leakage seal. Part of the flow enters the Reactor Coolant System around the thermal barrier cooling coil and through a labyrinth seal on the lower pump shaft to serve as a buffer to keep reactor coolant from entering the upper portion of the pump. The remainder of the injection water flows along the drive shaft, through the controlled leakage seal, and finally out of the pump. A very small amount, which leaks through the second seal, is also collected and removed from the pump.

Component cooling water is supplied to the motor bearing oil coolers and the thermal barrier-cooling coil. Should the seal injection water flow be lost or interrupted, Reactor Coolant flows INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT Section: 4.2 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 10 of 24

across the thermal barrier-cooling coil in the reverse direction and is cooled. It then becomes the source of water to the pump radial bearing and to the pump seals.

The squirrel cage induction motor driving the pump is air-to-water cooled, and has oil lubricated thrust and radial bearings. A water-lubricated bearing provides radial support for the pump shaft.

An oil collection system is provided for each reactor coolant pump motor to minimize the fire potential from spillage. The fire protection/suppression system is described in Section 9.8.1.

A flywheel on the shaft above the motor provides additional inertia to extend flow coastdown. An inadvertent, early actuation of the SDS on the pump shaft, with the shaft still rotating, will not adversely impact RCP coastdown. Each pump contains a ratchet mechanism to prevent reverse rotation. The reactor coolant pump flywheel is shown in Figure 4.2-6.

Precautionary measures, taken to preclude missile formation from primary coolant pump components, assure that the pumps will not produce missiles under any anticipated accident condition.

Components of the reactor coolant pump motor have been analyzed for missile generation. Any fragments of the motor rotor would be contained by the heavy stator. The same conclusion applies to the pump impeller because the small fragments that might be ejected would be contained by the heavy casing.

The most adverse operating condition for the flywheel is visualized to be the loss-of-load situation.

The following conservative design-operation conditions precluded missile production by the flywheel. The wheels were fabricated from rolled, vacuum-degassed, ASTM A-533 steel plates.

Flywheel blanks were flame-cut from the plate, with allowance for exclusion of flame-affected metal. A minimum of six Charpy tests were made from each plate, three parallel and three normal to the rolling direction. The tests determined that each blank satisfied the design requirements.

An NDTT less than +10°F is specified. The finished flywheels were subjected to 100% volumetric ultrasonic inspection. The finished machined bores were also subjected to magnetic particle, or liquid penetrant examination.

These design-fabrication techniques yield flywheels with primary stress at operating speed (shown in Figure 4.2-7) less than 50% of the minimum specified material yield strength at room temperature (100 to 150° F).

Bursting speed of the flywheels has been calculated on the basis of Griffith-Irwins results (References 2, and 3), to be 3900 rpm, more than three times the operating speed.

A fracture mechanics evaluation was completed for the reactor coolant pump flywheel.

To estimate the magnitude of fatigue crack growth during plant life, an initial radial crack length of 10% of the distance through the flywheel (from the keyway to the flywheel outer radius) was conservatively assumed. The analysis assumed 6000 cycles of pump starts and stops. The existing analysis is valid for the period of extended operation associated with license renewal.

INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT Section: 4.2 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 11 of 24

The reactor coolant pump motor bearings are of conventional design, the radial bearings are the segmented pad type, and the thrust bearings are tilting pad Kingsbury bearings. All are oil lubricated; the lower radial bearing and the thrust bearings are submerged in oil, and the upper radial bearing is oil fed from an impeller integral with the thrust runner. Low oil levels would signal an alarm in the control room. Each motor bearing contains embedded temperature detectors; therefore initiation of failure, separate from loss of oil, would be indicated and alarmed in the control room as high bearing temperature. This would alert the operator to take corrective action.

Even if the bearing proceeded to failure, the low melting point Babbitt metal on the pad surfaces would ensure that no sudden seizure of the bearing would occur. In this event the motor would continue to drive, as it has sufficient reserve capacity to operate, even under such conditions.

However, it would draw excessive currents and at some stage would shut down because of the high current.

It may be hypothesized that the pump impeller might severely rub on a stationary member and then seize. Analysis has shown that under such conditions, assuming instantaneous seizure of the impeller, the pump shaft would fail in torsion just below the coupling to the motor. This would constitute a loss of coolant flow in the one loop; the effect of which is analyzed in Chapter 14.

Following the seizure, the motor would continue to run without any overspeed, and the flywheel would maintain its integrity, as it would still be supported on a shaft with two bearings.

There are no other credible sources of shaft seizure other than impeller rubs. Any seizure of the pump bearing would be precluded by shearing of the graphitar in the bearing. Any seizure in the seals would result in a shearing of the anti-rotation pin in the seal ring. An inadvertent actuation of the shutdown seal on the shaft will not interrupt core cooling flow provided by the RCP. The motor has adequate power to continue pump operation even after the above occurrences.

Indications of pump malfunction in these conditions would be initially by high temperature signals from the bearing water temperature detector, excessive No. 1 seal leakoff indications, and off-scale

  1. 1 seal leakoff indications, respectively. Following these signals, pump vibration levels would be checked. These would show excessive levels, indicating some mechanical trouble.

The design specifications for the reactor coolant pumps include, as a design condition the stresses induced by a design basis earthquake. Beside evaluating the externally produced loads on the nozzles and support lugs, an analysis was made of the effect of gyroscopic reactions on the flywheel, the bearings and in the shaft, due to rotational movements of the pump about a horizontal axis, during the maximum seismic disturb ance.

The pump would continue to run unaffected by such conditions. In no case does any bearing stress in the pump or motor exceed or even approach a value, which the bearing could not carry.

The design requirements of the bearings are primarily aimed at ensuring a long life with negligible wear, so as to give accurate alignment and smooth operation over long periods of time. To this end, the surface bearing stresses are held at a very low value, and even under the most severe INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT Section: 4.2 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 12 of 24

seismic transients or accidents, do not begin to approach loads which cannot be adequately carried for short periods of time.

Because there are no established criteria for short-time stress-related failures in such bearings, it is not possible to make a meaningful quantification of such parameters as margins to failure, safety factors, etc. A qualitative analysis of the bearing design, embodying such considerations, gives assurance of the adequacy of the bearing to operate without failure.

As is generally the case with machines of this size, the shaft dimensions are predicated on avoidance of shaft critical speed conditions, rather than actual levels of stress.

There are many machines as large as, and larger than these, that are designed to run at speeds in excess of first shaft critical. However, it is considered more desirable to operate below first critical speed, and the reactor coolant pumps are designed in accordance with this philosophy. This results in a shaft design, which, even under the most severe postulated transient, gives very low values of actual stress. While it would be possible to present quantitative data of imposed operational stress relative to maximum tolerable levels, if the mode of postulated failure were clearly defined, such figures would have little significance in a meaningful assessment of the adequacy of the shaft to maintain its integrity under operational transients. However, a qualitative assessment of such factors gives assurance of the conservative stress levels experienced during these transients.

In each of these cases, where the functional requirements of the component control its dimensions, it can be seen that if these requirements are met, the stress-related failure cases are more than adequately satisfied.

It is thus considered to be beyond the bounds of reasonable credibility that any bearing or shaft failure could occur that would endanger the integrity of the pump flywheel.

4.2.2.6 Reactor Coolant System Vents The reactor coolant system is provided with a reactor vessel head vent and a pressurizer steam space vent to remove non-condensible gas or steam from the system. The vents are designed to pass a combined capacity equal to one-half of the reactor coolant system volume in one hour at system design pressure and temperature. They are designed to mitigate a possible condition of inadequate core cooling, inadequate natural circulation or inability to depressurize the system to permit initiation of the residual heat removal system as a result of a condition causing the accumulation of non-condensible gas or steam in the reactor coolant system. The reactor vessel head vent and the pressurizer steam space vent are designed as seismic Class I with two parallel, one inch nominal pipe size flow paths. Each path contains redundant safety grade, fail -closed solenoid valves. Orifices (1/4" reactor head vent path, 3/8" pressurizer steam space vent path) are installed upstream of the solenoid operated isolation valves to limit the maximum postulated flow, in the case of a pipe break down stream of the orifices, to less than the capacity of one centrifugal charging pump. Sealed-open, hand operated valves are installed upstream of the orifices. The solenoid valves in one flow path are powered independently from the valves in the second flow INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT Section: 4.2 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 13 of 24

path and each valve has a separate control switch. All are normally closed and have stem position indicators to provide remote indication of valve position.

Downstream of the solenoid valves, RTDs are installed to detect leakage and provide an alarm.

For the reactor vessel head vent, one 1/4" orifice is installed downstream of the solenoid operated isolation valves to limit piping and support loads during venting. Both vents discharge to the upper volume of the containment in an area, which will provide adequate dilution of any combustible gas.

4.2.2.7 Reactor Coolant Piping The reactor coolant piping and fittings, which make up the loops, are austenitic stainless steel. The reactor coolant piping is made by a centrifugal casting process. All smaller piping which comprises part of the Reactor Coolant System boundary, such as the pressurizer surge line, spray and relief line, loop drains, and connecting lines to other systems is also austenitic stainless steel.

The nitrogen supply line for the pressurizer relief tank is carbon steel. The joints and connections in piping which comprise part of the reactor coolant boundary are welded, except for the pressurizer safety valves, where flanged joints are used. Thermal sleeves are installed at points in the system where high thermal stresses could develop due to rapid changes in fluid temperature during normal operational transients. These points include:

1. Charging connections from the Chemical and Volume Control System.
2. Return lines from the Residual Heat Remo val Loop (also part of the Emergency Core Cooling System).
3. Both ends of the pressurizer surge line.
4. Pressurizer spray line connection to the pressurizer.

Thermal sleeves are not provided for the remaining injection connections of the ECCS since these connections are not in normal use.

Piping connections from auxiliary systems are made above the horizontal centerline of the reactor coolant piping, with the exception of:

1. Residual heat removal pump suction, which is 45o down from the horizontal centerline. This enables the water level in the reactor coolant system to be lower in the reactor coolant pipe while continuing to operate the residual heat removal system, should this be required for maintenance.
2. Loop drain lines and the connection for temporary level measurement of water in the reactor coolant system during refueling and maintenance operation.
3. The differential pressure taps for flow measurement are downstream of the steam generators on the 90o elbow.

INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT Section: 4.2 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 14 of 24

4. RVLIS piping connections are located at the horizontal centerline of Loops 1 and
3. A connection for the Mid-Loop instrument piping is located 60º down from the horizontal centerline of Loop 2.

Penetrations into the coolant flow path are limited to the following:

1. The spray line inlet connections extend into the cold-leg piping in the form of a scoop so that the velocity head of the reactor coolant loop flow adds to the spray driving force.
2. The reactor coolant sample system taps are inserted into the main stream to obtain a representative sample of the reactor coolant.
3. The wide range temperature detectors are located in RTD wells that extend into the reactor coolant pipes.
4. Three thermowell-mounted narrow -range RTDs extend into the hot leg scoops to provide a representative hot leg temperature.
5. A thermowell-mounted narrow-range RTD extends into each reactor coolant cold leg pipe.

Principal design data for the reactor coolant piping are given in Table 4.1-7.

Piping was restrained for postulated break conditions to prevent plastic hinge formation, except for certain breaks where no damage to Class I systems or the containment liner could result which would violate the criteria discussed in Section 4.2.4.

Numerous pipe whip restraints were designed for postulated ruptures occurring within the reactor coolant boundary to limit the consequences of the postulated ruptures. The pipe whip restraints were designed for circumferential ruptures in the reactor coolant system and connecting systems at changes in direction of the piping and nozzle junctions when consequential damage from these ruptures might occur. They were also provided to limit the consequences of longitudinal ruptures having a jet force equal to that of a circumferential rupture. Longitudinal splits were postulated to occur at selected points within the reactor coolant boundary.

4.2.2.8 Valves All valves in the reactor coolant system which are in contact with the coolant are constructed primarily of stainless steel. Other materials in contact with the coolant are special materials such as hard surfacing and packing.

Hard surfacing performed on austenitic stainless steel pressure boundary parts is controlled to minimize severe sensitization of the stainless steel. Seat rings are utilized in valve design to preclude sensitization of the reactor coolant pressure boundary wall.

Indication of valve position for the pressurizer safety and power-operated relief valves is provided by a four channel acoustic flow monitor. There are four accelerometers; one strapped to the INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT Section: 4.2 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 15 of 24

discharge of each of the three pressurizer safety valves and one on the common discharge of the three power relief valves. Flow through any of these valves produces an acoustic energy input to the respective accelerometer and this is amplified on the assigned channel of the monitor which is located in the control room. Indication on four vertical rows of light emitting diodes represents a bar graph display of relative flow through the monitored valves.

4.2.2.8.1 Pressurizer Safety Valves The pressurizer safety valves are totally enclosed pop-type valves. The valves are spring-loaded, self-activated and with back-pressure compensation designed to prevent system pressure from exceeding the design pressure by more than 110 percent, in accordance with the ASME Boiler and Pressure Vessel Code,Section III. The set pressure of the valves is 2485 psig.

The 6 pipes connecting the pressurizer nozzles to their respective safety va lves are shaped in the form of a loop seal. Piping is connected to the bottom of each loop seal to drain any condensate that accumulates in the loop seal. An acoustic flow monitor and a temperature indicator on each valve discharge alerts the operator to the passage of steam due to leakage or valve lifting.

4.2.2.8.2 Power Relief Valves The pressurizer is equipped with 3 power-operated relief valves, which limit system pressure for a large power mismatch and thus lessen the likelihood of an actuation of the fixed high-pressure reactor trip. The relief valves operate automatically or by remote manual control. The original design for 3 PORVs was to provide 100% load rejection capability. Since the load rejection capability has been reduced to 50%, the third PORV is now considered an installed spare. The 50% load rejection transient is an ANS Condition 1 event, also known as a Normal Operating Transient, or Plant Condition 1. ANSI/ANS Standard 51.1 does not consider the effects of single failure for Condition 1 events. The operation of these valves also limits the undesirable operation of the spring-loaded safety valves. Remotely operated stop valves are provided to isolate the power-operated relief valves. An acoustic flow monitor and a temperature indicator on the common discharge of the relief valves alerts the operator to the passage of steam due to leakage or valve opening. Indication of valve position is also provided by limit switches on each valve.

During startup and shutdown, a manually energized safeguard circuit is in service while the reactor coolant system temperature is below 297°F for Unit 1 and 291°F for Unit 2. This allows automatic opening of that Unit's two power relief valves at 435 psig for low temperature overpressure protection (LTOP) of the reactor vessel. This safeguard circuit ensures that the reactor pressure remains below the ASME Section III, Appendix G Protection Against Nonductile Failure limits in the case of an LTOP event.

The PORVs are spring-loaded-closed, air required to open valves. Normally this air is supplied by the plant control air source. To assure operability of the valves upon a loss of control air, a backup air supply is provided for two of the PORVs. The backup air supply consists of compressed INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT Section: 4.2 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 16 of 24

air bottles. The backup air supply contains sufficient air for the required number of PORV strokes in a ten minute period during an LTOP event.

Design parameters for the pressurizer spray control, safety, and power relief valves are given in Table 4.1-8.

4.2.2.9 Reactor Coolant System Supports

1. Steam Generator Support Each steam generator is supported by a structural system consisting of four vertical support columns and upper and lower lateral restraints approximately 461/2 feet apart. The vertical columns have a ball joint connection at each end to accommodate both the radial growth of the steam generator itself and the radial movement of the vessel from the reactor center.

The lower lateral support consists of an inner frame, keyed and shimmed to the four steam generator support feet to accommodate radial growth of these feet. The inner frame is surrounded by an outer frame, which is embedded in both the primary shield and crane wall concrete. The connection between the inner and outer frame consists of a series of shimmed points, which act as both guides and limit stops to allow for expansion from the center of the reactor. The lower lateral support restrains both torsional and translational movements.

The upper lateral support consists of a ring band, which is shimmed to the steam generator at twelve locations around the circumference. Attached to this band are lugs 180o apart which are shimmed and guided to a structural framing system which is embedded in the crane wall and steam generator enclosure wall concrete.

Hydraulic snubbers are also connected 180O apart on the band and tied to other embedded frames in a direction coincident with the direction of movement away from the reactor center. The upper lateral support restrains rapid translational movements in all horizontal directions.

2. Reactor Vessel Supports The reactor vessel is supported by four of its eight nozzles by four individual weldments embedded in the primary shield concrete. Each nozzle pad bears on a shoe that is supported by a heavy U-shaped weldment, which wraps around the shoe. The U-shaped weldment is water-cooled at the junction of the outer flange and the web by two continuous welded angles on either side of the web. The U-shaped weldment bears vertically on two shims and is restrained horizontally by a series of shims and bearing plates. These bearing plates and shims are connected to an outer weldment, which completely surrounds the U-shaped weldment and is embedded in the concrete.

INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT Section: 4.2 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 17 of 24

The reactor support system allows the reactor to expand radially from its vertical centerline but resists rotational motion in all orthogonal planes. The nozzle horizontal centerlines translate in the vertical direction relative to the shoes.

3. Pressurizer Support The pressurizer is supported on a ring girder, which is in turn supported on a concret e slab. Horizont ally, the vessel is restrained at two el evations approximately 27 feet apart.

The lower restraint consists of anchor bolts in slightly oversize holes in the ring girder. The upper restraint consists of four individual weldments embedded in concrete that allow the pressurizer to expand radially, but resist torsional and translational horizontal movements.

4. Reactor Coolant Pump Support Each reactor coolant pump is supported vertically by three ball joint ended columns.

This structural column system resists both overturning and vertical movement while allowing for expansion from the center of reactor. Excessive torsional and horizontal translational movements are resisted by a combination of lateral thrust columns anchored into the crane wall concrete.

4.2.3 Pressure-Relieving Devices The Reactor Coolant System is protected against overpressure by control and protective circuits such as the high-pressure trip and by relief and safety valves connected to the top head of the pressurizer. The safety valves are currently analyzed for steam discharge only. The power operated relief valves are analyzed for steam or water discharge. However, evaluations have shown that the pressurizer will not become water solid before at least 10 minutes following a spurious Safety Injection or a feedline break. The relief and safety valves discharge into the pressurizer relief tank, which condenses and collects the valve effluent. The schematic arrangement of the relief devices is shown in Figure 4.2-1A, and the valve design parameters are given in Table 4.1-8. The valves are further discussed in Sub-Section 4.2.2.8.

4.2.4 Protection against Proliferation of Dynamic Effects The Reactor Coolant System is surrounded by concrete shield walls. These walls provide shielding to permit access into certain areas of the containment building during full power operation for inspection and maintenance of miscellaneous equipment. These shielding walls also provide missile protection for the containment liner plate and all essential equipment inside the containment against blowdown jet forces and pipe whip to meet the missile protection criteria of Section 1.4.1 and the following:

1. A break of a steam or feedwater pipe inside the containment must not cause a break in a steam or feedwater pipe of another loop.

INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT Section: 4.2 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 18 of 24

2. The leak tightness of the containment liner must not be damaged by a whip or blowdown jet force of a pipe which is part of the reactor coolant pressure boundary or which is necessary to function after a LOCA.

The concrete deck over the Reactor Coolant System also provides shielding and missile damage protection.

Reactor coolant pressure boundary equipment and piping are supported and provided with restraints to resist the actions of seismic, thermal expansion and pipe rupture effects.

4.2.5 Materials of Construction The materials used in the Reactor Coolant System are selected for the expected environment and service conditions. The major component materials are listed in Table 4.2-1.

Reactor Coolant System materials which are exposed to the coolant are corrosion-resistant. They consist of stainless steel and Inconel, and they are chosen for specific purposes at various locations within the system for their superior compatibility with the reactor coolant. The chemical composition of the reactor coolant is maintained within the specification given in Table 4.2-2.

Reactor coolant chemistry is further discussed in Section 4.2.8.

The secondary side water chemistry is controlled to minimize corrosion and sludge buildup in the steam generators. Plant procedures list the limits for containments in the steam generators. The levels of these contaminates are normally maintained well below the limits.

The phenomena of stress-corrosion cracking and corrosion fatigue are not generally encountered unless a specific combination of conditions is present. The necessary conditions are a susceptible alloy, an aggressive environment, stress, and time.

It is a characteristic of stress corrosion that combinations of alloy and environment, which result in cracking, are usually quite specific. Environments, which have been shown to cause stress-corrosion cracking of stainless steels, are free alkalinity in the presence of chlorides, fluorides, and free oxygen. Experience has shown that deposition of chemicals on the surface of tubes can occur in a steam-blanketed area within a steam generator. In the presence of this environment under very specific conditions, stress-corrosion cracking can occur in stainless steels having the nominal residual stresses, which resulted from normal manufacturing procedures. The steam generator contains Inconel tubes. Testing to investigate the susceptibility of heat exchanger construction materials to stress corrosion in caustic and chloride aqueous solutions has indicated that Inconel alloy has excellent resistance to general and pitting-type corrosion in severe operating water conditions. Extensive operating experience with Inconel units has confirmed this conclusion.

External insulation of Reactor Coolant system components is compatible with component materials. The cylindrical shell exterior, closure flanges and bottom head of the reactor vessel are insulated with stainless steel, metallic, reflective insulation. The closure head is insulated with INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT Section: 4.2 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 19 of 24

stainless steel, metallic, reflective insulation. Other external corrosion-resistant surfaces in the Reactor Coolant System are insulated with low or halide-free insulating material as required.

The remaining material in the reactor vessel, and other Reactor Coolant System components, meets the appropriate design code requirements and specific component function.

The reactor vessel material is heat-treated specifically to obtain good notch-ductility which ensures a low RTNDT temperature, and thereby gives assurance that the finished vessels can be initially hydrostatically tested and operated as near to room temperature as possible without restrictions.

The stress limits established for the reactor vessel are dependent upon the temperatures at which the stresses are applied. As a result of fast neutron irradiation in the region of the core, the material properties will change, including an increase in the RTNDT temperature.

The effects and methods of calculating the cumulative fast neutron (E > 1 MeV) exposure of the vessel wall material is described in Section 4.5.

To evaluate the RTNDT temperature shift of welds, heat affected zones and base material for the vessel; test coupons of these material types have been included in the reactor vessel surveillance program described in Sub-Section 4.5.1.3.

The methods used to measure the initial RT NDT temperature of the reactor vessel base plate m aterial are given in Sub-Section 4.5.1.3.

4.2.6 Maximum Heating and Cooling Rates The Reactor Coolant System operating cycle used for design purposes is given in Table 4.1-10 and described in Section 4.1.5. The normal system heating and cooling rate is 60°F/hr. Sufficient electrical heaters are installed in the pressurizer to permit a heatup rate, starting with a minimum water level, of 55°F/hr. This rate takes into account the small continuous spray flow provided to maintain the pressurizer liquid homogeneous with the coolant.

The fastest cooldown rates, which result from the hypothetical case of a break of a main steam line, are discussed in Chapter 14.

Surface thermocouples on each Steam Generator above the level of the tubesheet are provided to permit a direct measurement of Steam Generator temperature, to determine that no more than a 50°F difference exists with the Reactor Coolant System cold leg temperature pr ior to starting a reactor coolant pump in the inactive loop with the Reactor Coolant System in the water solid condition. A reactor coolant pump may be started (or jogged) only if there is a steam bubble in the pressurizer, or if the SG/RCS Delta T is les s than 50°F.

INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT Section: 4.2 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 20 of 24

4.2.7 Leakage The existence of leakage from the Reactor Coolant System to the lower containment compartment regardless of the source of leakage is detected by one or more of the following conditions:

a. Two radiation-sensitive instruments provide the capability for detection of leakage from the Reactor Coolant System. The containment air particulate monitor is quite sensitive to low leak rates and can be used to alarm the presence of new leaks, if desired. The containment gas monitor is much less sensitive but can be used as a backup to the air particulate monitor.
b. An increase in the amount of coolant make-up water which is required to maintain normal level in the pressurizer, or an increase in containment sump level.

4.2.7.1 Leakage Prevention Reactor Coolant System components are manufactured to exacting specifications which exceeds normal code requirements (as outlined in Section 4.1.6). In addition, because of the welded construction of the Reactor Coolant System and the extensive non-destructive testing to which it is subjected (as outlined in Sub-Chapter 4.5), it is considered that leakage through metal surfaces or welded joints is very unlikely.

However, some leakage from the Reactor Coolant System is permitted by the reactor coolant pump seals. Also all sealed joints are potential sources of leakage even though the most appropriate sealing device is selected in each case. Thus, because of the large number of joints and the difficulty of assuring complete freedom from leakage in each case, a small integrated leakage is considered acceptable.

4.2.7.2 Locating Leaks Experience has shown that hydrostatic testing is successful in locating leaks in a pressure containing system.

Methods of leak location, which can be used during plant shutdown, include visual observation for escaping steam or water or for the presence of boric acid crystals near the leak. The boric acid crystals are transported outside the Reactor Coolant System in the leaking fluid and then left behind by the evaporation process. Portable sonic detectors sensitive to ultrasonic frequencies provide another means for locating small leaks.

4.2.7.3 Leak Detection Methods

a. Containment Air Particulate and Containment Radiogas Monitors The containment air particulate monitor is the most sensitive instrument of those available for detection of reactor coolant leakage into the containment. This instrument is capable of detecting particulate radioactivity in concentrations as low as 10-9 µ Ci/cc of containment air.

INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT Section: 4.2 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 21 of 24

The sensitivity of the air particulate monitor to an increase in reactor coolant leak rate is dependent upon the magnitude of the normal base line leakage into the containment. The sensitivity is greatest where base line leakage is low, as has been demonstrated by the experience of Indian Point Unit No. 1, Yankee Rowe, and Dresden Unit 1. Where containment air particulate activity is below the threshold of detectability, operation of the monitor with stationary filter paper would increase leak sensitivity to a few cubic centimeters per minute. Assuming a low background of containment air particulate radioactivity, a reactor coolant corrosion product radioactivity (Fe, Mn, Co, Cr) of 0.2 µ Ci/cc (a value consistent with little or no fuel cladding leakage), and complete dispersion of the leaking radioactive solids into the containment air, the air particulate monitor is capable of detecting leaks as small as approximately 0.0013 gal/min (5 cc/minute) within thirty minutes after they occur. If only ten percent of the particulate activity is actually dispersed in the air, the threshold of detectable leakage is raised to approximately 0.013 gpm (50 cc/minute).

For cases where base line reactor coolant leakage falls within the detectable limits of the air particulate monitor, the instrument can be adjusted to alarm on leakage increases from two to five times the base-line value.

The containment radiogas monitor is inherently less sensitive (threshold at 10-6µ Ci/cc) than the containment air particulate monitor, and would function only in the event that significant reactor coolant gaseous activity exists due to fuel cladding defects. Assuming a reactor coolant gas activity of 0.3 µCi/cc, the occurrence of a leak of two to four gpm would double the background (predominantly argon-41) in less than one hour. In these circumstances this instrument would be a useful backup to the air particulate monitor.

b. Liquid Inventory in the Process Systems and in the Containment Sump An increase in the amount of coolant make-up water, which is required to maintain normal level in the pressurizer, will be indicated by an increase in charging flow or change in volume control tank level. Further details of the operation of the charging system is supplied in Chapter 9.

Gross leakage will be indicated by a rise in normal containment sump level and periodic operation of containment sump pumps. A run time meter is provided to monitor the frequency of operation and running time of each containment sump pump.

INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT Section: 4.2 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 22 of 24

4.2.8 Water Chemistry The water chemistry is selected to provide the necessary boron content for reactivity control and to minimize corrosion of Reactor Coolant System surfaces.

Reactor coolant water chemistry specifications are listed in Table 4.2-2. Periodic analysis of the coolant chemical composition are performed to verify that the reactor coolant water quality meets these specifications. Maintenance of the water quality to minimize chemical control is maintained with the Chemical and Volume Control System and Sampling System, which are described in Chapter 9.

4.2.9 Reactor Coolant Flow Measurements Elbow taps are used in the Reactor Coolant System as an instrument device that indicates the status of the reactor coolant flow (Reference 4). The basic function of this device is to provide information as to whether or not a reduction in flow rate has occurred. The correlation between flow reduction and elbow tap read out has been well established by the following equation:

2 P

,=

P o o wh =

established in providing core protection against low coolant flow in Westinghouse PWR plants. Po is the referenced pressure differential with the corresponding referenced flow The expected absolute accuracy of the channel is within +/- 10% and field results have shown the then established by extrapolating along the correlation curve. The technique has been well rate o P is the pressure differential with the corresponding flow rate.

repeatability of the trip point to be within +/- 1%. The analysis of the loss of flow transient presented The full flow reference point is established during initial plant startup. The low flow trip point is in Sub-Chapter 14.1 assumes instrumentation error of +/- 3%.

4.2.9.1 Reactor Coolant Margin To Saturation A digital subcooling monitor is provided to display in the control room either the temperature or pressure margin available for the sub-cooled operating condition below the corresponding saturation pressure or saturation temperature.

The device selects the highest temperature reading from 8 core exit thermocouples and 8 hot and cold leg RTDs, and the lower pressure reading from two RVLIS reactor coolant wide range pressure sensors, and then calculates the corresponding saturation conditions, and displays the available margin of subcooling below saturation, in either temperature (°F) or pressure (psi).

INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT Section: 4.2 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 23 of 24

The Plant Process Computer (PPC) may also be used to display the margin of subcooling temperature (°F) on a trend recorder in the control room. The computer uses a calculated saturation temperature derived from the lowest valid value of the RC System wide range pressure inputs, the atmospheric pressure constant and the steam tables in conjunction with one of the following:

1. Hottest of the valid Hot and Cold Leg Wide Range RCS Temperature Inputs (RTDs);
2. Hottest of the valid Incore Thermocouples;
3. Average of the valid Hot and Cold Leg Wide Range RCS Temperature Inputs (RTDs);
4. Average of the valid Incore Thermocouples.

4.2.10 Loose Parts Detection A loose parts monitoring system is used to detect loose metallic parts impacting within the reactor coolant system. Metallic debris may appear as a result of outage work or wear of system internals.

Carried through the system, such debris may damage internal primary system components. The loose parts monitoring system provides early detection of loose metallic parts to minimize damage.

The system was designed to meet the intent of Regulatory Guide 1.133, Rev. 1.

The system consists of redundant accelerometers at the reactor vessel and steam generators. A metallic impact will result in minute accelerations in the reactor coolant system component material, which will be detected by the accelerometers. The system alarms when impacts above a previously established threshold occur. Bypassing of alarms based on plant conditions is controlled by plant procedures.

4.2.11 Reactor Vessel Water Level A Reactor Vessel Level Instrumentation System (RVLIS) is provided to indicate the relative vessel water level or the relative void content of fluid in the vessel during post-accident conditions. This level indication assists the operator in recognizing conditions, which may lead to high temperatures that could damage the vessel or its internals. Level indicators and recorders are located in the control rooms.

Sensors measuring the differential pressure between the vessel head and the bottom and between the head and the hot legs provide the basis for level indication. Because flow through the vessel affects differential pressure measurement, three level indication ranges are provided by separate sensors. One range monitors water level from the vessel bottom to the head during full flow conditions in the reactor vessel. The remaining two ranges monitor the entire vessel level and partial water level (top reactor head to hot leg) at zero forced flow conditions (no reactor coolant pump operating).

INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT Section: 4.2 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 24 of 24

The differential pressure measurements are compensated for process effects using reactor coolant system pressure and temperature measurements. They are also compensated for environmental temperature effects on the RVLIS sensing lines using temperature measurements at representative sensing line locations.

4.2.11.1 References for Section 4.2

1. Sensitized Stainless Steel in Westinghouse PWR Nuclear Steam Supply Systems WCAP 7735 (Westinghouse Class 3), July 1971.
2. Ernest L. Robinson, Bursting Tests of Steam -Turbine Disk Wheels, Transactions of the A.S.M.E., July 1944.
3. Application of the G riffith-Irwin Theory of Crack Propagation to the Bursting Behavior of Disks, Including Analytical and Experimental Studies, by D. H.

Winne and B. M. Wundt, ASME, December 1, 1957.

4. J. W. Murdock, Performance Characteristic of Elbow Flowmeters, Transact ions of the ASME, September, l964.

INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT §4.3 & §4.4 UPDATED FINAL SAFETY ANALYSIS REPORT Page: i of i

4.3 SYSTEM DESIGN EVALUATION....................................................1 4.3.1 Safety Factors...........................................................................1 4.3.1.1 Reactor Vessel - (Unit 1)..........................................................................1 4.3.1.2 Method of Analysis - (Unit 1)....................................................................1 4.3.1.3 Reactor Vessel - (Unit 2)..........................................................................2 4.3.1.4 Method of Analysis - (Unit 2)....................................................................3 4.3.1.5 General....................................................................................................4 4.3.1.6 Piping.......................................................................................................5 4.3.1.7 Normal Operating Loads..........................................................................6 4.3.1.8 Seismic Loads.........................................................................................6 4.3.1.9 Blowdown Loads......................................................................................6 4.3.1.10 Combined Blowdown and Seismic Loads................................................7 4.3.1.11 Steam Generators...................................................................................7 4.3.1.11.1 Unit 1.......................................................................................................................... 7 4.3.1.11.2 Unit 2.......................................................................................................................... 9 4.3.1.12 Pressurizer............................................................................................ 12 4.3.1.13 Reactor Coolant Pump.......................................................................... 13 4.3.2 Reliance on Interconnected Systems................................... 13 4.3.3 System Integrity..................................................................... 14 4.3.4 Pressure Relief....................................................................... 14 4.3.5 System Incident Potential...................................................... 15 4.3.6 References for Section 4.3..................................................... 15 4.4 SAFETY LIMITS AND CONDITIONS.............................................. 18 4.4.1 System Heatup and Cooldown Rates................................... 18 4.4.2 Reactor Vessel, Pressurized Thermal Shock....................... 19 4.4.3 Reactor Coolant Activity Limits............................................. 19 4.4.4 Maximum Pressure................................................................. 19 4.4.5 System Minimum Operating Conditions............................... 19

INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT §4.3 & §4.4 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 1 of 19

4.3 SYSTEM DESIGN EVALUATION 4.3.1 Safety Factors The safety of the reactor vessel and other Reactor Coolant System pressure containing components and piping is dependent on several major factors including, design and stress analysis, material selection and fabrication, quality control and operations control.

4.3.1.1 Reactor Vessel - (Unit 1)

1. The following components of the reactor pressure vessel were analyzed in detail through systematic analytical procedures.

A. Control Rod Housings B. Closure Head Flange and Shell C. Main Closure Studs D. Inlet Nozzles (and Vessel Support Pads)

E. Outlet Nozzles (and Vessel Support Pads)

F. Vessel Wall Transition G. Core-Barrel Support Pads H. Bottom Head to Shell Juncture I. Bottom Head Instrument Penetrations, etc.

4.3.1.2 Method of Analysis - (Unit 1)

Item (A). An interaction analysis was performed on the CRDM housing. The flange was assumed to be a ring and the tube a long cylinder. The different values of Youngs Modulus and coefficients of thermal expansion of the tubes were taken into account in the analysis. Local flexibility was considered at appropriate locations. The closure head was treated as a perforated spherical shell with modified elastic constants. The effects of redundants on the closure head were assumed to be local only. Using the mechanical and thermal stresses from this analysis, a fatigue evaluation was made for the J weld.

Item (B). The closure head, closure head flange, vessel flange, vessel shell and closure studs were all evaluated in the same analysis. An analytical model was developed by dividing the actual structure into different elements such as sphere, ring, long cylinder and cantilever beam, etc. An interaction analysis was performed to determine the stresses due to mechanical and thermal loads.

These stresses were evaluated in light of the strength and fatigue requirements of the ASME Boiler and Pressure Vessel Code Section III.

Item (C). A similar analysis was performed for the vessel flange to vessel shell juncture and for the main closure studs.

INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT §4.3 & §4.4 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 2 of 19

Items (D) & (E). For the analysis of nozzle and nozzle to shell juncture, the loads considered were internal pressure, operating transients, pipe reactions (thermal, gravity and seismic), the static weight of vessel, earthquake loading and expansion and contraction, etc. A combination of methods was used to evaluate the stresses due to mechanical, thermal and external loads resulting from seismic pipe reactions, earthquake and pipe break, etc. For fatigue evaluation, peak stresses resulting from external loads and thermal transients are determined by concentrating the stresses as calculated by the above described methods. Combining these stresses enabled the fatigue evaluation to be performed.

Item (F). The vessel wall transition was analyzed by means of a standard interaction analysis. The thermal stresses are determined by the skin method, which assumed that the inside surface of the vessel is at the same temperature as the reactor coolant and the mean temperature of the shell remains at the steady state temperature. This method is considered conservative.

Item (G). The thermal, mechanical and pressure stresses were calculated at various locations on the core barrel support pad and at the vessel wall. Mechanical stresses were calculated by the flexure formula for bending stress in a beam, pressure stresses were taken from the analysis of the vessel to bottom head juncture and thermal stresses were determined by the conservative method of skin stresses. The stresses due to the cyclic loads were multiplied by a stress concentration factor, where applicable, and used in the fatigue evaluation.

Item (H). The standard interaction analysis and skin stress methods were employed to evaluate the stresses due to mechanical and thermal stresses respectively. The fatigue evaluation was made on a cumulative basis where superposition of all transients was taken into consideration.

Item (I). An interaction analysis was performed by dividing the actual structure into an analytical model composed of different structural elements. The effects of the redundants on the bottom head were assumed to be local only. It was also assumed that for any condition where there was interference between the tube and the head, no bending at the weld can exist. Using the mechanical and thermal stresses from this analysis a fatigue evaluation was made for the J weld.

4.3.1.3 Reactor Vessel - (Unit 2)

1. The following components of reactor pressure vessel were analyzed in detail through systematic analytical procedures.

A. Control Rod Drive Mechanism (CRDM) Penetrations B. Head and Shell Flanges and Closure Studs C. Reactor Coolant Nozzle (and Vessel Support Pad) Outlets D. Reactor Coolant Nozzle (and Vessel Support Pad) Inlets E. Main Shell Thickness Transitions F. Core Barrel Support Pads G. Instrumentation Tubes INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT §4.3 & §4.4 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 3 of 19

4.3.1.4 Method of Analysis - (Unit 2)

Item (A). Two models were made for the stress analysis of the CRDM tubes of the top head. A three-dimensional finite element model was used to analyze the J -groove weld region, while a two-dimensional model was used to analyze the bi-metallic weld region.

The analysis includes the bimetallic weld between the tube flange and the tube and the partial penetration weld between the tube and the top head. In the models, the vessel head extends in the meridional direction to a point halfway between the tube and its nearest neighbor.

For temperature calculations, three-dimensional heat transfer was assumed. A finite element program for axisymmetric bodies was used to compute the stresses of the model. Another computer program was utilized for the fatigue analysis. This program is coded to perform the fatigue analysis in accordance with the ASME Code Section III.

Item (B). For the thermal analysis, a finite element method was used in calculating the thermal profile. The model used was three-dimensional. The circumferential boundaries were chosen to represent symmetry of the studs and near symmetry of the perforated region.

The stress analysis was performed using a three -dimensional finite element method of analysis.

A complete fatigue analysis was performed using all operating transients including the effects of thermal and pressure loading. Usage factors were calculated using linear damage criteria.

Items (C) & (D). The outlet and inlet rea ctor coolant nozzles were analyzed as follows:

A complete thermal analysis was made for each operating transient. Temperature distributions were calculated by finite differences, using an axisymmetric model.

At critical times during the transients the the rmal stresses, as well as stresses due to internal pressure, were calculated using an axisymmetric finite-element model. The finite element method was selected so that secondary and peak stresses associated with material and thickness changes could be studied.

The stresses produced by mechanical loads were calculated using a finite-element model, which included the effects of circumferential variations in the loads. The mechanical loads, consisting of seismic loads, dead weight loads, and thermal expansion loads were applied to the safe ends, the vessel support pads and the internal projection of the nozzle.

The calculated stresses were evaluated using the criteria of Section III of the ASME Code. As part of this evaluation a complete fatigue analysis was performed at selected points on the nozzle surface, and fatigue usage factors were calculated.

Item (E). Both the cylinder to bottom head transition and the transition between the 81/2 and 101/2 wall thickness were analyzed.

Temperature distributions at the shell transitions were calculated by a finite difference technique using an axisymmetric model.

INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT §4.3 & §4.4 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 4 of 19

Primary and secondary stresses due to pressure and thermal gradients were calculated using the KALNINS thin-shell program. The stresses were evaluated by the criteria of Section III of the ASME Code and a fatigue analysis was performed.

Item (F). The core support pads were analyzed as follows:

Using a plane two dimensional model, temperature distributions in the pad were calculated. These calculations were made using a finite difference technique. Thermal stresses were calculated using a plane finite-element model.

Stresses in the support pad, due to mechanical loads on the support pads, were calculated using formulas for the bending and torsion of rectangular beams. The stresses in the shell due to these loads were found using the results of Bijlaard as described in WRC Bulletin 107.

Fatigue usage factors were calculated, taking into account stress concentration effects.

Item (G). The stress analysis of the CRDM Penetration indicated that the outermost tube is much more critical than the center one. Therefore, for the investigation of the instrumentation tubes only the outermost model was made. The analysis of this model follows the same method as described for the CRDM Penetrations.

4.3.1.5 General The location and geometry of the areas of discontinuity and/or stress concentration are shown in Figures 4.3-1, 4.3-2, and 4.3-3. The identification letters refer to Unit 1 as desc ribed above.

For the original design and rerating program, a summary of the estimated primary plus secondary stress intensity for components of the Unit 1 reactor vessel and the estimated cumulative fatigue usage factors for the components of the Unit 1 reactor vessel is given in Tables 4.3-1 and 4.3-2.

The cycles specified for the fatigue analysis are the results of an evaluation of the expected plant operation coupled with experience from nuclear power plants in service at the time of the evaluation, such as Yankee-Rowe.

The conservatism of the design fatigue curves used in the fatigue analysis has been demonstrated by the Pressure Vessel Research Committee (PVRC) in a series of cyclic pressurization tests of model vessels fabricated according to the Code. The results of the PVRC tests showed that no crack initiation was detected at any stress level below the code allowable fatigue curve and that no crack progressed through a vessel wall in less than three times the allowable number of cycles.

Similarly, fatigue tests have been performed on irradiated pressure vessel steels with comparable results (Reference 1).

The vessel design pressure is 2485 psig while the normal operating pressure is 2235 psig. The resulting operating membrane stress is therefore amply below the code allowable membrane stress to account for operating pressure transients.

The allowable pressure-temperature relationship as a function of rate of temperature change was determined according to the method given in Appendix G2000 of the ASME Code,Section III.

INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT §4.3 & §4.4 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 5 of 19

The actual shift in RTNDT temperature will be established periodically during plant operation by testing of vessel material samples which are irradiated cumulatively by securing them near the inside wall of the vessel in the core area. To compensate for any increase in the RT NDT temperature caused by irradiation, the limits given in the plant operating manual on the pressure-temperature relationship are periodically changed to stay within the stress limits during heatup and cooldown.

For further details see Sub-Chapter 4.4.

The vessel closure contains fifty-four 7-inch diameter studs. The stud material is SA -540, which has a minimum yield strength of 104,400 psi at design temperature. The membrane stress in the studs when they are at the steady-state operational condition is less than half this value. This means that about half of the fifty-four studs have the capability of withstanding the hydrostatic end load on vessel head without the membrane stress exceeding yield strength of the stud material at design temperature.

As part of the plant operator training program, operating personnel receive instruction in reactor vessel design, fabrication and testing, as well as precautions necessary for pressure testing and operating modes. The need for record keeping is stressed; such records being helpful for future summation of time at power level and temperature which tend to influence the properties of the irradiated material in the core region.

4.3.1.6 Piping The analysis of the Reactor Coolant Loop/Supports System was based on an integrated analytical model, which included the effects of the supports and the supported equipment.

A three-dimensional, multi-mass, elastic-dynamic model was constructed to represent the Reactor Coolant Loop/Supports System. The seismic spectrum at the concrete to support interface, obtained from an elastic-dynamic model of the reactor containment internal structure, was used as input to the piping analysis.

The dynamic analysis employed displacement method, lumped parameter, stiffness matrix formulations and assumptions that all components behave in a linear elastic manner. The proprietary computer code WESTDYN was used in this analysis.

The evaluation of damage propagation from pipe whip and blowdown jet forces was based upon piping configuration, location of barriers and supports, locations of postulated breaks, separation of redundant parts of the system and location of other systems and equipment in relation to the system under consideration. Confirmatory dynamic analyses of the Reactor Coolant Loop were performed for postulated circumferential as well as longitudinal ruptures. A total of eight guillotine and longitudinal ruptures were postulated and their consequences evaluated. The locations and types of rupture were chosen to realistically encompass the most severe loading on the component supports.

Subsequent to the initial design considerations discussed in the previous paragraph, the allowances of Generic Letter 84-04, Safety Evaluation of Westinghouse Topical Reports Dealing with Elimination of Postulated Pipe Breaks in PWR Primary Main Loops were adopted. This Leak-INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT §4.3 & §4.4 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 6 of 19

Before-Break (LBB) methodology eliminates the design requirement to consider the dynamic effects of postulated main coolant loop ruptures. Note that, subsequent of the analysis, the postulated breaks in the pressurizer surge line, 10 diameter accumulator line, 14 diameter residual heat removal (RHR) line and 6 diameter safety injection (SI) line have been eliminated from requiring consideration of dynamic pipe break effects as a result of LBB methodology provided by 10 CFR Part 50, Appendix A, GDC 4, and approved by NRC per references 23, 24 and 25. The LBB methodology eliminates consideration of pipe whip effects, blowdown jet forces, and main coolant loop and reactor vessel support loads, for the previously postulated ruptures, on attached and adjacent SSCs.

Cook Nuclear Unit 1 has performed Mechanical Stress Improvement Process, MSIP@, on the D. C. Cook Unit 1 RPV inlet and outlet nozzles. The MSIP mitigates the potential formation of cracks from PWSCC by placing compressive residual stresses on the inside surface of the weld region by compressing the pipe through controlled plastic deformation. There will be no leak when there is no through-wall flaw, and it is beneficial for the LBB defense. However, LBB evaluation is performed with postulated through-wall flaws. Structural evaluations show that all LBB margins are satisfied. Margins remain valid for other critical locations after MSIP application. Also, as part of this evaluation, Flaw Crack Growth was performed, and the results show that the crack will not grow through the pipe wall.

4.3.1.7 Normal Operating Loads System design operating parameters were used as the basis for the analysis of equipment, coolant piping and equipment support structures for normal operating loads. The analysis was performed using a static model to predict deformation and stresses in the system under normal operating conditions. The analysis with respect to the piping and vessels was in accordance with the provisions of USAS B31.1 and ASME Section III, respectively. Results of the analysis gave six generalized action components, three bending moments and three forces. These moments and forces were resolved into stresses in the piping in accordance with applicable codes. Stresses in the structural supports were determined by the material and section properties assuming linear elastic small deformation theory.

4.3.1.8 Seismic Loads Analysis for seismic loads was based on a dynamic modal analysis. The appropriate floor spectral accelerations were used as input forcing functions to the detailed dynamic model. The loads developed from the dynamic model were incorporated into a detailed support model to determine the support member stresses.

4.3.1.9 Blowdown Loads Analysis of blowdown loads resulting from loss-of-coolant accidents were based on the time-history responses of simultaneously applied blowdown forcing functions on a single broken loop dynamic model. The forcing functions were defined at points in the system loop where changes INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT §4.3 & §4.4 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 7 of 19

in cross section or direction of flow occur such that differential loads are generated during the blowdown transient. The loads developed from the dynamic models were incorporated into detailed support models to determine equipment support member stresses.

4.3.1.10 Combined Blowdown and Seismic Loads The stresses in components resulting from normal loads and the worst case blowdown analysis were combined with the worst case seismic analysis to determine the maximum stress for the combined loading case. This is considered a very conservative method since it is highly improbable that both maxima will occur at the same instant. These stresses were combine d to determine that the Reactor Coolant Loop/Supports System does not lose its intended functions for this highly improbable situation. The limiting stress criteria used in the analysis are defined in Sub-Chapter 2.9.

Under a postulated main steam pipe break, the resulting stresses in unbroken piping attached to the steam generator were calculated to be quite low and are well within the limiting criteria for the Faulted Condition. See Sub-section 5.2.2.7 for details of the structural design requirements for postulated pipe breaks.

4.3.1.11 Steam Generators 4.3.1.11.1 Unit 1 For Donald C. Cook Unit 1, the Babcock & Wilcox Model 51R replacement steam generators consist of a lower replacement steam generator subassembly (RSGSA), replacement steam drum internals, and replacement feedring fabricated by BWI plus the re-used existing steam drum pressure boundary.

Structural and seismic evaluations of Model 51R primary and secondary side pressure boundaries demonstrate that these components satisfy ASME III, Division 1, Class 1 design requirements for Service Levels A, B, C, and D (Normal, Upset, Emergency and Faulted conditions, respectively).

Model 51R internal components are required to withstand all specified loadings to maintain heat transfer capability during and following a design basis (Safe Shutdown) earthquake. The structural design basis for steam generator internals is that the limiting primary side LOCA or a secondary side pipe rupture combined with a simultaneous SSE do not result in a simultaneous release of primary and secondary coolant or loss of the heat transfer capability of the Model 51R. Internals loading during these postulated events do not result in rupture, collapse, or deformation of the Model 51R tubes; rupture of the secondary side shell; or pull the tubes from the tubesheet. In the case of a primary pressure loss accident, the primary-secondary design pressure differential can reach approximately 1100 psig. This pressure differential is less than the primary-secondary design pressure differential of 1600 psi for normal operating conditions. Thus, safe shutdown capability is maintained. The seismic evaluation of the Unit 1 Model 51R internals and the Unit 1 Model 51R structural evaluation is documented in the steam generator stress reports. For the re-used existing steam drum pressure boundary, the Level A and B fatigue analysis includes INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT §4.3 & §4.4 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 8 of 19

consideration of accumulated transient cycles up to the time of steam generator replacement plus a 40 year design life after steam generator replacement.

Classical methods and finite element modeling (where required for pressure and thermal transients) are employed to prove that the components examined meet the ASME Code allowable stresses. For seismic loading, the loads were first established by seismic analysis using the specified response spectrum and then these loads on components were used in the subsequent stress analysis. The design and hydrotest primary stresses in the Model 51R meet the design and hydrotest allowables of ASME III as shown in the following sections.

The requirements of Subsection NB-3221 for design stresses are met as follows:

Pm Sm at design temperature P1 1.5 S m at design temperature P1 + Pb 1.5 Sm at design temperature Where:

Pm = General primary membrane stress P1 = Local primary membrane stress Pb = Primary bending stress Sm = Design stress intensity value Sy = Yield strength Su = Ultimate strength The criteria for normal and upset loads are the ASME Levels A & B allowables for the range of primary plus secondary stress. The requirements of Subsection NB-3222 and NB-3223 are met as follows:

Range of (Pm + P b +Q) 3 Sm at operating temperature Where:

Q = Secondary Stress For pressure boundary components and tubing, it is also shown that the cumulative fatigue usage factor remains below 1.0 for all Service Level A, B, and test condition operating cycles.

The criterion for Service Level C loading conditions is to maintain integrity of tube, tube supports (lattice grid) and steam d rum internals for emergency conditions of Level C. The requirements of Subsection NB-3224 are met as follows:

Pm greater of (1.2 Sm or Sy) at operating temperature PL + P b greater of (1.8 Sm or 1.5 Su) at operating temperature INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT §4.3 & §4.4 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 9 of 19

The criterion for Service Level D loading condition (combined main steam line break and design basis earthquake) is to ensure tube integrity by proving that tube rupture and leakage cannot occur.

The requirements of Subsection NB-3225 are met as follows:

Pm lesser of (2.4 Sm or 0.7 Su) at operating temperature PL + P b lesser of (3.6 Sm or 1.05 Su) at operating temperature The requirements of Subsection NB-3226 for hydrotest are met as follows:

for Pm 0.67 Sy at test temperature Pm + P b 1.35 S y at test temperature for 0.67 Sy < P m 0.9 S y at test temperature Pm + P b (2.15 Sy - 1.2 P m) at test temperature 4.3.1.11.2 Unit 2 Calculations confirm that the steam generator tube sheet will withstand the loading (which is quasi-static rather than a shock loading) caused by loss of reactor coolant. The maximum primary membrane plus primary bending stress in the tube sheet under these conditions is 44,800 psi. This is well below the ASME Section III material yield strength of 56,600 psi at 650°F. Bec ause the pressure in the primary channel head would drop to zero under the condition postulated, no damage will result to the channel head.

The rupture of primary or secondary piping has been assumed to impose a maximum pressure differential of 2235 psig across the tubes and tube sheet from the primary side or a maximum pressure differential of 805 psi across the tubes and tube sheet from the secondary side. Under these conditions there is no rupture of the primary to secondary boundary, including tubes and tube sheet. This criterion prevents any violation of the containment boundary.

To meet this criterion, it has been established that under the postulated accident conditions, where a primary to secondary side differential pressure of 2235 psig exists, the primary membrane stresses in the tube sheet ligaments, averaged across the ligament and through the tube sheet thickness, does not exceed 70 percent of material tensile stress at the operating temperature.

Also, the computed primary membrane plus primary bending stress in the tube sheet ligament, averaged across the ligament width at the tube sheet surface location giving maximum stress, do not exceed 105 percent of material tensile stress at the operating temperature.

This criterion is considered applicable to faulted (Level D) circumstances in that it is consistent with the ASME Boiler and Pressure Vessel Code,Section III, Nuclear Power Plants Components Division, Appendix F. The stresses in the actual tube sheet design are obtained by using the applicable stress criteria.

A complete tube sheet analysis was performed to verify the structural integrity of the primary-secondary boundary under blowdown plus seismic conditions.

The tubes have been designed to the requirements (including stress limitations) of Section III for normal operation, assuming 1600 psig as the normal operating pressure differential. Hence, the INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT §4.3 & §4.4 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 10 of 19

secondary pressure loss accident condition imposes no extraordinary stress on the tubes beyond that normally expected and considered in Section III requirements.

Tube material was selected for both units based on industry experience and requirements of Section III. Inconel tubing is used in both units due to its strength and resistance to corrosion.

In the case of a primary pressure loss accident, the secondary-primary pressure differential can reach 805 psig. This pressure differential is less than the primary-secondary design pressure differential of 1600 psi. No stresses in excess of those covered in the ASME Section III rules for design conditions are experienced on the tube sheet for this accident case. An analysis of the U-bend portion under external pressures forms the basis for a calculated collapse pressure of 1500 psi providing the tubes a factor of safety of 1.86 against collapse. Analysis of straight tubes of the same size indicate actual tube strengths are significantly higher than the above. A collapse pressure of 2415 psi was calculated for a straight tube.

In addition, consideration has been given to the superimposed effects of secondary side pressure loss and the design basis earthquake loading. Furthermore, the fluid dynamic forces on the internal components affecting the primary-secondary boundary (tubes) have been assessed as well. For this condition, the criterion is that no rupture of the primary to secondary boundary (tubes and tube sheet) occurs.

In the most severe case, the fluid dynamic forces on the internals under secondary steam break accident conditions indicate that the tubes are adequate to constrain the motion of the baffle plates, with some plastic deformation, while boundary integrity is maintained.

The ratio of the allowable stresses on various components (based on an allowable membrane stress of 0.7 of the nominal tensile stress of the material) to the computed stresses for postulated faulted conditions have also been calculated and documented in applicable steam generator stress reports.

The evaluation of Westinghouse steam generator tube sheets was performed according to rules of the ASME Boiler and Pressure Vessel Code for Nuclear Vessels,Section III, Article 4 - Design.

The design criteria included consideration of steady-state and transient operation as specified in the design specification. Due to the complex nature of the tube-tube sheet-shell-head structure, the analysis of the tube sheet required the application of the results of related research programs (such as the design data on perforated plates resulting from Pressure Vessel Research Committee (PVRC) programs) and the utilization of current techniques in computer analysis, the application of which was verified by comparing analytical and experimental results for related equipment.

The introductory paragraph I-900 of the ASME Boiler and Pressure Vessel Code,Section III -

Nuclear Vessels, states that consideration may be given to the stiffening and staying effects of tubes in perforated plates, if applicable. Furthermore, it is noted that the stress analysis methods of Appendix I of Section III are accepted techniques for obtaining solutions to problems for which these procedures are applicable. It allows use of other valid analytical or experimental techniques, where necessary.

Although the Nuclear Pressure Vessel Code Article I-9 provides rules and techniques in analysis of perforated plates, it should be noted that the stress intensity levels for perforated plate are given INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT §4.3 & §4.4 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 11 of 19

for triangular perforation arrays. Westinghouse tube sheets contain square arrays. Hence, Westinghouse utilized its own data and that obtained from PVRC research in square array perforation patterns for development of similar charts for stress intensity factors and elastic constants. The resulting stress intensity levels and fatigue stress ranges were evaluated according to the stress limitation of the Code.

The Westinghouse analysis of the steam generator tube sheets was included as part of the Stress Report requirement for Class A Nuclear Pressure vessels. The evaluation was based on the stress and fatigue limitations outlined in Article 4 Design of ASME Section III. The stress analysis techniques utilized in evaluation of the tube sheet complex included all factors considered appropriate to conservative determination of the stress levels. The analysis of the tube sheet complex includes the effect of all appurtenances attached to the perforated region of the tube sheet considered appropriate to conservative analysis of stress for evaluation on the basis of ASME Section III stress limitations. The evaluation involved the heat conduction and stress analysis of the tube sheet, channel head, and secondary shell structure for particular steady-state design conditions for which Code stress limitations are to be satisfied and for discrete points during transient operation for which the temperature/pressure conditions must be known to evaluate stress maxima and minima for fatigue life usage. In addition, limit analyses were performed to determine tube sheet capability to sustain emergency operating conditions for which elastic analysis does not suffice. The analytic techniques utilized were computerized and significant stress problems were verified experimentally to justify the techniques where possible.

Generally, the analytic treatment of the tube -tube sheet complex included a determination of elastic equivalent plate stress within the perforated region by an interaction analysis utilizing effective elastic constants appropriate to the nature of the perforation array.

For the steam generators, the fatigue analysis of the complex was performed at potentially critical regions in the complex such as the junction between tube sheet and channel head or secondary shell as well as at many locations throughout the perforated region of the tube sheet. For the holes for which fatigue evaluation was done, several points around the hole periphery were considered to assure that the maximum stress excursion has been considered. The fatigue evaluation was computerized to include stress maxima -minima excursions considered on an intra-transient basis.

The evaluation of the tube-to-tube sheet juncture of Westinghouse PWR System steam generators is based on a stress analysis of the interaction between tube and tube sheet hole for the significant thermal and pressure transients that are applied to the steam generator in its predicted histogram of cyclic operation. The evaluation is based on the numerical limits specified in the ASME Boiler and Pressure Vessel Code,Section III, Nuclear Vessels.

Of importance in the analysis of the interaction system was the behavior of the tube hole, where it was recognized that the hole behavior is a function of the behavior of the entire tube sheet complex with attached head and shell. Hence, the output of the tube sheet analysis giving equivalent plate stresses in the perforated region was utilized in determining the free boundary displacements of the perforation to which the tube is attached.

INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT §4.3 & §4.4 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 12 of 19

Analysis of the juncture for the fillet-type weld utilized in the Westinghouse steam generator design was made with consideration of the effect of the rolled-in joint in the weld region, as well as with the conservative assumption that the tube flexure relative to the perforation is not inhibited with the rolled-in effect. Analysis of the juncture for the flush tube weld utilized in the Westinghouse steam generator design for Cook Nuclear Plant Unit 2 was made with the conservative assumption that the tube flexure relative to the perforation is not aided by contact with the tube plate.

A wide range of computational tools were utilized in these solutions including finite element, heat conduction and thin shell computer programs.

In all cases evaluated, the Westinghouse steam generator tube sheet complex meets the stress limitations and fatigue criteria specified in Article 4 of ASME Section III as well as faulted condition limitations specified in the equipment design specifications.

In this way, the tube-tube sheet integrity of the Westinghouse steam generator was demonstrated under the most adverse conceivable conditions resulting from a major breach in either the primary or secondary system piping.

The results of the tube sheet complex are listed in the appropriate steam generator stress report.

4.3.1.12 Pressurizer The Pressurizer was analyzed for fatigue conditions in accordance with Section III of the ASME Boiler and Pressure Vessel Code using the thermal and pressure transient conditions listed elsewhere in this chapter.

The pressurizer vessel was analyzed for the following:

1. Normal operational loadings which include:
a. Weight of water based on the vessel filled with cold water and including insulation.
b. Normal loadings exerted by connecting piping.
2. Seismic loadings which include:
a. The Operational Basis Earthquake (OBE). The pressurizer vessel was designed to resist earthquake loadings simultaneously in horizontal and vertical directions and to transmit such loadings through the vessel supports to the foundation. The OBE results in mechanical loadings, which in combination with the normal operational loads is considered to be an upset condition. The components of loadings exerted by the external piping due to the OBE were included in this evaluation.
b. The Design Basis Earthquake (DBE). Pressurizer vessel integrity is not impaired to prevent a safe and orderly shutdown of the reactor plant when the DBE loadings, both horizontal and vertical acting simultaneously, are imposed on the vessel. These loadings and the centers of gravity involved INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT §4.3 & §4.4 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 13 of 19

are determined on the basis of the vessel at normal operating pressure, temperature, and water level. The components of loadings exerted by the external piping due to the DBE were included in this evaluation.

3. Pipe break loadings in combination with the normal operational loads. The moment and forces were considered as acting in combination with each force separately.

The pipe break accident was considered to be a faulted condition with the exception that the stress intensity limits were those specified under the Design Basis Earthquake condition.

4. Normal operating loads plus the DBE loads plus the pipe break loads. The resulting stress intensities do not exceed the stress intensity limits of Paragraph N417.11 (faulted conditions) in Section III of the Code with the following exception. The combination of all primary stress intensities in the vessel supports are within the support material yield strength specified in the above code.

4.3.1.13 Reactor Coolant Pump All the pressure-containing parts of the reactor coolant pump were analyzed in accordance with Article 4 of the ASME Boiler and Pressure Vessel Code,Section III. This includes the casing, the main flange and the main flange bolts. The analysis included pressure, thermal and cyclic stresses, which were compared with the allowable stresses in the code.

Mathematical models of the parts were prepared and used in the analysis, which proceeded in two phases.

1. In the first phase, the design was checked against the design criteria of the ASME Code, with pressure stress calculations, although thermal effects are included implicitly with the experience factors. By this procedure, the shells were profiled to attain optimum metal distribution, with stress levels adequate to meet the more limiting requirements of the second phase.
2. In the second phase, the interactivity forces needed to maintain geometric capability between the various components are determined at design pressure and temperature, and applied to the components along with the external loads to determine the final stress state of the components. These are finally compared with the Code allowable values.

There are no other sections of the Code which are specified as areas of compliance, but where Code methods, allowable stresses, fabrication methods, etc., are applicable to a particular component, these were used to give a rigorous analysis and a conservative design.

4.3.2 Reliance on Interconnected Systems The principal heat removal systems which are interconnected with the Reactor Coolant System are the Steam and Feedwater Systems and the Safety Injection and Residual Heat Removal Systems.

The Reactor Coolant System is dependent upon the steam generators, the main steam, feedwater, INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT §4.3 & §4.4 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 14 of 19

and condensate systems for decay heat removal for normal operating conditions down to a reactor coolant temperature of approximately 350°F. The layout of the system ensures the natural circulation capability to permit plant cooldown following a loss of all reactor coolant pumps.

The Steam and Power Conversion System is described in Chapter 10. In the event that the condensers are not available to receive the steam generated by residual heat, the water stored in the feedwater system may be pumped into the steam generators and the resultant steam vented to the atmosphere. The Auxiliary Feedwater System will supply water to the steam generators in the event that the main feedwater pumps are inoperative.

The Safety Injection System is described in Chapter 6. The Residual Heat Removal System is described in Chapter 9.

4.3.3 System Integrity As part of the quality control on materials, Charpy V-notch toughness tests were run on the ferritic material used in fabricating pressure-retaining parts of the reactor vessel, steam generator and pressurizer to provide assurance for hydrotesting and operation in the ductile region at all times.

In addition, drop-weight tests and Charpy V-notch transition temperature tests were performed on the reactor vessel materials.

As an assurance of system integrity, components in the system are hydrotested at 3107 psig prior to initial operation. (3106 psig for Unit 1 RSGs) 4.3.4 Pressure Relief The Reactor Coolant System is protected against overpressure by safety valves located on the top of the pressurizer. The safety valves on the pressurizer are sized to prevent system pressure from exceeding the design pressure by more than 10 percent, in accordance with Section III of the ASME Boiler and Pressure Vessel Code. The capacity of the pressurizer safety valves was determined from considerations of: (1) the reactor protective system, and (2) accident or transient conditions which may potentially cause overpressure.

The combined capacity of the pressurizer safety valves is equal to or greater than the maximum surge rate resulting from a complete loss of load without a direct reactor trip or any other control, except that the safety valves on the secondary plant were assumed to open when the steam pressure reaches the secondary plant safety valve settings.

INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT §4.3 & §4.4 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 15 of 19

The design and installation criteria for mounting of the pressure-relieving devices (pressurizer relief and safety valves) are as follows:

1. Piping is able to withstand normal plus DBE loads and normal transient operating conditions.
2. Piping is to be able to withstand the worst condition arising from the operational mode of multiple discharges acting simultaneously.
3. Stresses in piping and its supports are to be held within the limits presented in Sub -

Chapter 2.9.

4.3.5 System Incident Potential Analysis of system incidents are discussed in Chapter 14.

4.3.6 References for Section 4.3

1. Fatigue Properties of Irradiated Pressure Vessels by Gibbon et. al., ASTM STP 426, pages 408 to 437.
2. Pellini, W. S. and Puzak, P. P., Fracture Analysis Diagram Procedures for the Fracture Safe-Engineering Design of Steel Structures. NRL Report 5920, M arch 15, 1962, Welding Research Council Bulletin No. 88 (1963).
3. Pellini, W. S. and Puzak, P. P., Practical Considerations in Applying Laboratory Fracture Test Criteria to the Fracture - Safe Design of Pressure Vessels, NRL Report 6630, Nov. 5, 1963.
4. Pellini, W. S. and Loss, F. J., Integration of Metallurgical and Fracture Mechanics Concepts of Transition Temperature Factors Relating to Fracture-Safe Design for Structural Steels, Welding Research Council Bulletin No. 141 (1969).
5. Mager, T. R. and Hazelton, W. S., Evaluation of Linear Elastic Fracture Mechanics of Radiation Damage to Pressure Vessel Steels, Vienna I AEA -

Meeting, June 2-9, 1969.

6. Porse, L., Reactor Vessel Design Considering Radiation Effects, ASME 6 WA 100.
7. W. E. Berry and F. W. Fink, The Corrosion of Inconel in High Temperature Water, Batelle Memorial Institute, April, 1958.
8. W. J. ODonnell, A Study of Perforated Plates with Square Penetration Patterns, Welding Research Council Bulletin No. 124, September, 1967.
9. B. Mahoney and V. L. Salerno, Stress Analysis of a Circular Plate Containing a Rectangular Array of Holes, Welding Research Council Bulletin No. 106, July 1965.
10. M. M. Lemcoe, Feasibility Studies of Stresses in Ligaments, Welding Research Council Bulletin No. 65, November 1960.

INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT §4.3 & §4.4 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 16 of 19

11. ODonnell, W. J. and C. M. Purdy, The Fatigue Strength of Members Containing Cracks, ASME Transactions, Journal of Engineering for Industry, Vol. 86-B, 1964, pp. 205-213.
12. WCAP-15131 Revision 1, Technical Bases for Eliminating Large Primary Loop Pipe Rupture as the Structural Design Basis for D. C. Cook Units 1 and 2 Nuclear Power Plants, October 1999.
13. Standard Review Plan: Public Comments Solicited: 3.6.3 Leak -Before-Break Evaluation Procedures: Federal Register/Vo. 52, No. 167/ Friday, August 28, 1987/Notices, pp. 32626-32636.
14. Westinghouse Calculation CN-PAFM-10-5, Revision 0, Fatigue Crack Growth and Leak-Before-Break (LBB) Evaluations for D. C. Cook Unit 1 Reactor Vessel Nozzles with the Mechanical Stress Improvement Process (MSIP) Applied.
15. WCAP-7927 Addendum 1 Revision 0, Analysis of the Reactor Coolant Loop Piping/Support System with the Application of MSIP on the Reactor Pressure Vessel Inlet and Outlet for D. C. Cook Unit No. 1, February 2010 (Draft).
16. NuVision Engineering Report No. 4628-4-001- 00, Analytical Verification of MSIP for RV Hot Leg Nozzle to Safe End Weld DC Cook Unit 1, December 2009.
17. NuVision Engineering Report No. 4628-4-002- 00, Analytical Verification of MSIP for RV Cold Leg Nozzle to Safe End Weld DC Cook Unit 1, December 2009.
18. WCAP-12135, Volume 1, Donald C. Cook Nuclear Plant Units 1 and 2 Rerating Engineering Report, September 1989.
19. Westinghouse Calculation CN-PAFM-09-91, Revision 1, D. C. Cook Unit 1 Reactor Vessel Outlet Nozzles with the Mechanical Stress Improvement Process Applied.
20. Westinghouse Calculation CN-PAFM-09-92, Revision 1, D. C. Cook Unit 1 Reactor Vessel Inlet Nozzles with the Mechanical Stress Improvement Process Applied.
21. NUREG/CR-6721, ANL-01/07, Effects of Alloy Chemistry, Cold Work, and Water Chemistry on Corrosion Fatigue and Stress Corrosion Cracking of Nickel Alloys and Welds, April 2001.
22. Westinghouse Letter LTR-PAFM-10-15, February 26, 2010, Reactor Coolant Loop Piping Leak-Before-Break Evaluation Summary for D. C. Cook Unit 1 with MSIP Application.
23. Letter from John F. Stang, Nuclear Regulatory Commission, to Robert P. Powers, Indiana Michigan Power Company, Donald C. Cook Nuclear Plant, Units 1 and 2

- Review of Leak-Before-Break for the Pressurizer Surge Line Piping as Provided INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT §4.3 & §4.4 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 17 of 19

by 10 CFR Part 50, Appendix A, GDC 4, dated November 8, 2000 (ML003767675).

24. Letter from Robert F. Kuntz, Nuclear Regulatory Commission, to Joel Gebbie, Indiana Michigan Power Company, Donald C. Cook, Nuclear Plant, Units Nos 1 and 2 - Issuance of Amendment Nos. 349 and 330 to Apply Leak-Before-Break Methodology to Reactor Coolant System Branch Lines and Deletion of Containment Humidity Monitor Requirement (EPID L-2018-LLA-0726), dated January 23, 2020 (ML19329A011).
25. Letter from Russell S Haskell, Nuclear Regulatory Commission, to Joel Gebbie, Indiana Michigan Power Company, Donald C. Cook, Nuclear Plant, Unit No. 1 -

Issuance of Amendment No. 346 RE: "Approval of Application of Proprietary Leak-Before-Break Methodology for Reactor Coolant System Small Diameter Piping" (EPID L-2018-LLA-0054) dated August 1, 2019 (ML19170A362).

INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT §4.3 & §4.4 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 18 of 19

4.4 SAFETY LIMITS AND CONDITIONS 4.4.1 System Heatup and Cooldown Rates Operating limits for the Reactor Coolant System with respect to heatup and cooldown rates are defined in the Technical Specifications.

Assurance of adequate fracture toughness of the reactor coolant system is provided by compliance with the requirements for fracture toughness testing included in Section III of the ASME Boiler and Pressure Vessel Code and the Code of Federal Regulations, 10 CFR 50, Appendices G and H.

The original heatup and cooldown curves for the plant were based on the actual measured fracture toughness properties of the vessel materials determined in accordance with the Summer 1972 Addenda to Section III of the ASME Boiler and Pressure Vessel Code, as implemented by the Code Case #1514. Allowable pressures as a function of the rate of temperature change and the actual temperature relative to the nilductility transition reference temperature (RT NDT) of the reactor vessel were established according to the methods given in Appendix G 2000, Protection Against Non-Brittle Failure, of Section III of the ASME Boiler and Pressure Vessel Code.

The original curves are based on a temperature scale relative to the RTNDT of the vessel, including appropriate estimates of RTNDT caused by radiation. Predicted RTNDT values were derived by using a curve depicting RTNDT vs Fluence (N/cm 2 > 1 MeV) for various copper contents of vessel weld material, and the fluence of 1/4T corresponding to the maximum for the service period applicable. Initial RT NDT included an assumed RTNDT corresponding to that predicted after 2 integrated full power years of operation.

The heatup and cooldown curves are updated based on information obtained from our radiation surveillance program in accordancewith the Technical Specifications.

The use of RTNDT that includes a RTNDT to account for radiation effects on the core region material automatically provides additional conservatism for other vessel regions which are exposed to much lower radiation levels. Therefore, the flanges, nozzles, and other such regions less affected by radiation are favored by additional conservatism approximately equal to the assumed RTNDT. Changes in fracture toughness of the core region plates or forgings, weldments and associated heat affected zones due to radiation damages are monitored by a surveillance program which conforms with ASTM E-185, Standard Recommended Practice for Surveillance Tests for Nuclear Reactor Vessels. The evaluation of the radiation damage in this surveillance program is based on pre-irradiation and post-irradiation testing by Charpy V-notch and tensile specimens and post-irradiation testing of wedge opening loading specimens carried out during the lifetime of the reactor vessel. Specimens are irradiated in capsules located near the core mid-height and removed from the vessel at specified intervals.

INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT §4.3 & §4.4 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 19 of 19

4.4.2 Reactor Vessel, Pressurized Thermal Shock As required by 10 CFR 50.61, the projected values of Reference Temperature, Pressurized Thermal Shock (RT PTS) have been calculated for all of the Unit No. 1 and 2 reactor vessel beltline region materials for the fluence received to date and for the projected fluence levels received up to the expiration date of the operating licenses. The calculations revealed that none of the materials in either unit will exceed the RT PTS screening criterion of 10 CFR 50.61 prior to the expiration of the operating licenses.

The RTPTS assessment will be updated whenever core loadings, surveillance measurements, or other information (i.e. extension of operating license) indicates a significant change in the projected values. As such, all future core loading design changes and future surveillance capsule dosimetry data will be evaluated for possible effects on the RTPTS asses sment.

4.4.3 Reactor Coolant Activity Limits Release of activity into the reactor coolant in itself does not constitute a hazard to the public.

Activity in the coolant could constitute a hazard to the public only if the Reactor Coolant System barrier is breached, and then only if the coolant contains excessive amounts of activity which could be released to the environment. The plant systems are designed for operation with activity in the Reactor Coolant System corresponding to 1 percent fuel defects. In the event of steam generator tube leakage, high activity level at the condenser air ejector exhaust will initiate an alarm to warn the operator to take corrective action. The Reactor Coolant System activity limit during operation is defined in the Technical Specifications.

4.4.4 Maximum Pressure The Reactor Coolant System serves as a barrier preventing radionuclides contained in the reactor coolant from reaching the atmosphere. In the event of a fuel cladding failure the Reactor Coolant System is the primary barrier against the uncontrolled release of fission products. By establishing a system pressure limit, the continued integrity of the Reactor Coolant System is assured. Thus, the safety limit of 2735 psig (110% of design pressure) has been established. This represents the maximum transient pressure allowable in the Reactor Coolant System under the ASME Code,Section III. Reactor Coolant System pressure settings are given in Table 4.1-2.

4.4.5 System Minimum Operating Conditions Minimum Operating Conditions for the Reactor Coolant System for all phases of operation are given in the Technical Specifications.

INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT Section: 4.5 UPDATED FINAL SAFETY ANALYSIS REPORT Page: i of i

4.5 TESTS AND INSPECTIONS...........................................................1 4.5.1 Reactor Coolant System Inspection.......................................1 4.5.1.1 Non-Destructive Inspection of Material and Components............... 1 4.5.1.1.1 Radiation Surveillance Program................................................................................. 1 4.5.1.1.2 Dosimeters.................................................................................................................. 4 4.5.1.1.3 Thermal Monitors....................................................................................................... 4 4.5.1.1.4 Surveillance Capsule Program Update - Unit One Only............................................. 7 4.5.1.1.5 Quality Control Program............................................................................................. 8 4.5.1.1.6 Electroslag Weld Quality Assurance........................................................................... 9 4.5.1.1.7 In-Process Control of Variables................................................................................ 11 4.5.1.2 Reactor Coolant System In-Service Inspection Program.............. 12 4.5.1.3 Determination of Reactor Vessel RTNDT...................................... 16 4.5.1.4 References for Section 4.5............................................................ 19

INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT Section: 4.5 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 1 of 19

4.5 TESTS AND INSPECTIONS 4.5.1 Reactor Coolant System Inspection 4.5.1.1 Non-Destructive Inspection of Material and Components Table 4.5-1 summarizes the quality control program for Reactor Coolant System components. In this table, the non-destructive tests and inspections which are required by Westinghouse specifications on Reactor Coolant System components and materials are specified for each component. The tests required by the applicable codes are included in this table. Westinghouse requirements, which are more stringent in some areas than those requirements specified in the applicable codes, are also included. The fabrication and quality control techniques used in the fabrication of the Reactor Coolant System were equivalent to those used for the reactor vessel.

Westinghouse requires, as part of its reactor vessel specification, that certain special tests, which are not specified by the applicable codes, be performed. These tests are listed below.

1. Ultrasonic Testing - A 100% volumetric ultrasonic test of reactor vessel plate for shear wave was performed in addition to code requirements. This 100% volumetric ultrasonic test is a severe requirement, but it assures that the plate is of the highest quality.
2. Radiation Surveillance Program - In the surveillance program, the evaluation of the radiation damage is based on pre-irradiation testing of Charpy V-notch and tensile specimens and post-irradiation testing of Charpy V-notch, tensile, and wedge opening loading (WOL) fracture mechanics test specimens. This program is directed toward evaluation of the effect of radiation on the fracture toughness of reactor vessel steels based on the transition temperature approach and the fracture mechanics approach, in accordance with ASTM-E-185, Standard Recommended Practice for Surveillance Tests for Nuclear Reactor Vessels. The surveillance program does not include thermal control specimens. These specimens are not required since the surveillance specimens will be exposed to the combined neutron irradiation and temperature effects and the test results will provide the maximum transition temperature shift. Thermal control specimens as considered in ASTM-E-185 would not provide any additional information on which the operational limits for the reactor vessel are set.

4.5.1.1.1 Radiation Surveillance Program The reactor vessel surveillance program uses eight specimen capsules which is more than the minimum number recommended by ASTM-E-185. The capsules are located about 3 inches from the vessel wall directly opposite the center portion of the core. Sketches of an elevation and plan view showing the original location and dimensional spacing of the capsules with relation to the core, thermal shield and vessel and weld seams is shown in Figures 4.5-1 and 4.5-2, respectively.

INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT Section: 4.5 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 2 of 19

The capsules can be removed when the vessel head is removed, and can be replaced when the internals are removed. The capsules contain reactor vessel steel specimens from the limiting shell plate located in the core region of the reactor and associated weld metal and heat affected zone metal. (As part of the surveillance program, a report of the residual elements in weight percent to the nearest 0.01% will be made for surveillance material base metals and as deposited weld metal.)

In addition, 64 correlation monitors made from fully documented specimens of SA-533 Grade B Class 1 material obtained through Subcommittee II of ASTM Committee E10, Radioisotopes and Radiation Effects, are inserted in the capsules for Unit No. 1 only. The eight capsules contain approximately 32 tensile specimens, 352 Charpy V-notch specimens (which include weld metal and heat affected zone material) and 32 WOL specimens. Dosimeters including Ni, Cu, Fe, Co-A1, Cd shielded Co-A1, Cd shielded Np-237 and Cd shielded U-238 are placed in filler blocks drilled to contain the dosimeters. The dosimeters permit evaluation of the flux seen by the specimens and vessel wall. In addition, thermal monitors made of low melting alloys are included to monitor temperature of the specimens. The specimens are enclosed in a tight fitting stainless steel sheath to prevent corrosion and ensure good thermal conductivity. The complete capsule is helium leak tested. Vessel material sufficient for at least 2 capsules will be kept in storage should the need arise for additional replacement test capsules in the program.

INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT Section: 4.5 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 3 of 19

The eight capsules for Unit No. 1 contain the following types and number of specimens.

Material Capsule S, V, W, and X Capsule T and U Capsule Y and Z

Charpy Tensile WOL Charpy Tensile WOL Charpy Tensile WOL

Limiting Plate 10 -- -- 10 2 4 10 2 --

Limiting Plate 10 2 4 10 -- -- 10 -- --

Weld Metal 8 2 -- 8 2 -- 8 2 4

HAZ 8 -- -- 8 -- -- 8 -- --

Correlation Monitors 8 -- -- 8 -- -- 8 -- --

Specimens machined in the major rolling direction of the plate.

Specimens machined normal to the major rolling direction of the plate.

INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT Section: 4.5 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 4 of 19

The eight capsules for Unit No. 2 contain the following types and number of specimens.

Material Capsule S, V, W, and X Capsule T, U, Y and Z

Charpy Tensile WOL Charpy Tensile WOL

Limiting Plate* 8 -- -- 8 -- --

Limiting Plate** 12 2 4 12 2 --

Weld Metal 12 2 -- 12 2 4

HAZ 12 -- -- 12 -- --

Each capsule contains the following dosimeters and thermal monitors.

4.5.1.1.2 Dosimeters Pure Cu Pure Fe Pure Ni CoA1 (0.15% Co)

CoA1 (Cadmium shielded)

U238 (Cadmium shielded)

NP237 (Cadmium shielded)

4.5.1.1.3 Thermal Monitors 97.5% Pb, 2.5% Ag (579°F MP) 97.5% Pb, 1.75% Ag, 0.75% Sn (590°F MP)

  • Specimens machined in the major rolling direction of the plate.
    • Specimens machined normal to the major rolling direction of the plate.

INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT Section: 4.5 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 5 of 19

The fast neutron exposure of the specimens occurs at a faster rate than that experienced by the adjacent vessel wall because the specimens are located between the core and the vessel. Since these specimens experience accelerated exposure and are actual samples from the materials used in the vessel, the RTNDT measurements are representative of the vessel at a later time in life.

The calculated maximum fast neutron (E > 1 MeV) exposure of the reactor vessel at the clad/base metal interface after 48 EFPY of cumulative operating time is 2.57 x 10 19 n/cm2 for Unit 1 and 2.44 x 1019 n/cm 2 for Unit 2.

The reactor vessel surveillance capsules were originally located at orientations shown in Figure 4.5-2. The capsule lead factors (ratio of fast fluence at the capsule location versus that at the vessel inner wall) for Unit 1 and 2 are listed below:

Unit 1 Unit 2 Capsule Identification Lead Factor Lead Factor T 3.38 3.33 X 3.38 3.32 Y 3.38 3.33 U 3.37 3.31 V, Z 0.95* 0.95*

S 1.38* 0.95*

W 0.98* 0.95*

  • The projected Unit 1 and Unit 2 lead factors for Capsules W, V, Z, and S above correlate to 48 EFPY.

The cumulative lead factor for Capsule S in Unit 1 will continue to decrease with increased EFPY based on relocations of Capsule S in the reactor vessel in 1995 and 2010. The Unit 1 lead factors were updated in 2023 per the analysis in WCAP-18860-NP (Reference 4.5 #6). The Unit 2 lead factors were updated in 2020 per the analysis in WCAP-18456-NP (Reference 4.5 #4).

The Unit 1 capsule at the 4° position was originally known as capsules S while the Unit 1 capsule at the 184° position was originally known as capsule W. In 1995 the capsule at the 4° position was moved to the 40° position and was re-designated as capsule W while the capsule at the 184° position was re-designated as capsule S. These changes were documented in AEP Safety Review Screening Checklist CE-95-0309, dated 9/19/95.

During Unit 1 refueling outage in March 2010 (U1C23), Capsule W was formally relocated back to its 4 degree location and re-named as capsule S, (which was its original designation). The INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT Section: 4.5 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 6 of 19

designation of Capsule S at 184 degrees was changed back to W which was its original designation.

Correlations between the calculations and the measurements on the irradiated samples in the capsules, assuming the same neutron spectrum at the samples and the vessel inner wall, are described in Sub-Section 4.5.1.3 and indicate good agreement.

The anticipated degree to which the specimens will perturb the fast neutron flux and energy distribution will be considered in the evaluation of the surveillance specimen data. Verification and possible readjustment of the calculated wall exposure will be made by use of data on withdrawn capsules. Capsules T, U, X, and Y have been removed and tested for both units.

Capsule W has been removed and tested for Unit 1.

The schedule for removal of capsules is as follows:

Removal Time Effective Full Power Years (EFPY)

Capsule Unit 1 Capsule Unit 2

T 1.27 T 1.08 X 3.48 X 5.25 Y 4.95 Y 3.22 U 9.17 U 8.66 W 32.9 S Standby S 32 V, Z Standby V, W, Z Standby

CNP previously committed to pulling and testing a standby capsule at the end of the original license around 32 EFPY. Capsule W was pulled during refueling outage U1C31 after 32.9 EFPY and shipped to Westinghouse for analysis. The capsule was analyzed and report, WCAP-18837, was issued relating to the Unit 1 Reactor Vessel Surveillance Program in June 2023. Capsule S was removed during refueling outage U2C28 and will be analyzed like Capsule W for the Unit 2 Reactor Vessel Surveillance Program. CNP also committed to pulling one additional standby capsule for each unit between 32 and 48 EFPY to cover the peak fluence expected at 60 years. To support this commitment, Capsule Z, V and W in Unit 2 have been relocated to higher fluence areas near the core to accumulate a fluence in excess of the 60 year value. Capsules S, V and Z in Unit 1 will be relocated to higher fluence areas of the core for the same purpose.

INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT Section: 4.5 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 7 of 19

4.5.1.1.4 Surveillance Capsule Program Update - Unit One Only In accordance with the Radiation Surveillance Program described previously, capsules T, X, Y, U, and W were removed from Unit One reactor vessel at the defined removal time. Capsules S, V, and Z remain in the vessel. Capsule W (Unit 1) was removed at 32.9 EFPY and a fluence update was completed with the issuance of WCAP-18837-NP (Reference 4.5 #5).

Subsequent to the removal of capsule U, Unit One began operating at a reduced reactor coolant system temperature and pressure (RTP) to improve original steam generator longevity. As a result of this change, it was decided to relocate one of the remaining radiation surveillance capsules to a higher lead factor area to determine the potential embrittlement affects of operating at reduced temperature and pressure.

To address these changes from an administrative standpoint, the following changes have been made to the capsule designations. It should be noted that the specimens located within the capsules are physically stamped with their original letter designations.

The Unit 1 capsule at the 4° position was originally known as capsules S while the Unit 1 capsule at the 184° position was originally known as capsule W. In 1995 the capsule at the 4° position was moved to the 40° position and was re-designated as capsule W while the capsule at the 184° position was re-designated as capsule S. These changes were documented in AEP Safety Review Screening Checklist CE-95-0309, dated 9/19/95.

Figure 4.5.2a shown in revision 21.2 of the UFSAR provides a surveillance capsule location view for Unit One based on the capsule movements and re-designations described above.

During Unit 1 refueling outage in March 2010 (U1C23), Capsule W was formally relocated back to its 4 degree location and re-named as capsule S, which was its original designation. The designation of Capsule S at 184 degrees was changed back to W, which was its original designation.

At the conclusion of Fuel Cycle 14, the original Capsule S from location of 4 degree was relocated to 40 degree location in 1995 and was relocated back to 4 degree location in 2010. The 40 degree location is a higher lead factor location and Capsule S accumulated a higher dose for about 15 years. Therefore, the total irradiation history of Capsule S encompassed Fuel Cycles 1 through 14 at the 4º location, Fuel Cycles 15 through 22 at the 40º location, and Fuel Cycles 23 and beyond at the 4º location. At the time of capsule relocation, D. C. Cook Unit 1 had operated for a total of 22.381 Effective Full Power Years (EFPY).

The impact of the relocation of D. C. Cook Unit 1 Reactor Vessel Materials Surveillance Capsule S from a quadrant equivalent azimuthal location of 40º to an azimuthal location of 4º relative to the core cardinal axes at the conclusion of Fuel Cycle 22 has been documented in a Westinghouse report noted in Reference (2) in Section 4.5.1.4.

By this back relocation of the capsule, Figure 4.5-2a becomes superseded and Figure 4.5-2 provides the location of remaining three capsules going forward from U1C31.

INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT Section: 4.5 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 8 of 19

4.5.1.1.5 Quality Control Program Table 4.5-1 summarizes the quality control program with regard to inspections performed on reactor coolant system components. In addition to the inspections shown in Table 4.5-1, there were those performed by the equipment supplier to confirm the adequacy of material he received, and those performed by the material manufacturer in producing the basic material. The inspections of reactor vessel, pressurizer, and steam generator were governed by ASME code requirements.

The inspection procedures and acceptance standards required on piping materials and piping fabrication were governed by USAS B31.1 and Westinghouse requirements and are equivalent to those performed on ASME coded vessels.

Procedures for performing the examinations were consistent with those established in the ASME Code Section III and were reviewed by qualified engineers. These procedures have been developed to provide the highest assurance of quality material and fabrication. They consider not only the size of the flaws, but equally as important, how the material is fabricated, the orientation and type of possible flaws, and the areas of most severe service conditions. In addition, the accessible external surfaces of the primary reactor coolant system pressure containing segments received a 100% surface inspection by Magnetic Particle or Liquid Penetrant Testing after hydrostatic test (See Table 4.5-1). Reactor vessel plate material was subjected to angle beam as well as straight beam ultrasonic testing to give maximum assurance of quality. Reactor vessel forgings received the same inspection. In addition, 100% of the material volume was covered in these tests as an added assurance over the grid basis required in the code.

Quality Control engineers monitored the suppliers work, witnessing key inspections not only in the suppliers shop but in the shops of subvendors of the major forgings and plate material. Normal surveillance included verification of records of material, physical and chemical properties, review of radiographs, performance of required tests, and qualification of supplier personnel.

Section III of the ASME Code required that nozzles carrying significant external loads are attached to the shell by full penetration welds. This requirement was carried out in the reactor coolant piping, where auxiliary pipe connections to the reactor coolant loop were made using full penetration welds.

The Reactor Coolant System components were welded under procedures, which required the use of both preheat and post-heat.

Preheat requirements, not mandatory under Code rules, were performed on weldments including P1 and P3 materials which are the materials of construction in the reactor vessel, pressurizer and steam generators. The purpose of using both preheat and post-heat of weldments was to produce tough, ductile metallurgical structures in the completed weldment. Preheating produces tough ductile welds by minimizing the formation of hard zones. Post-heating achieves this by tempering any hard zones, which may have formed due to rapid cooling.

INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT Section: 4.5 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 9 of 19

4.5.1.1.6 Electroslag Weld Quality Assurance The 90o elbows used in the reactor coolant loop piping are electroslag welded. The following efforts were performed for quality control of these components.

1. The electroslag welding procedure employing one wire technique was qualified in accordance with the requirements of ASME Boiler and Pressure Vessel Code Section IX and Code Case 1355 plus supplementary evaluations as requested by WNES-PWRSD. The following test specimens were removed from a 5 -inch thick weldment and successfully tested. They are:
a. 6 Transverse Tensile Bars - as welded
b. 6 Transverse Tensile Bars - 2050°F, H20 Quench
c. 6 Transverse Tensile Bars - 2050°F, H20 Quench + 750°F stress relief heat treatment
d. 6 Transverse Tensile Bars - 2050°F, H20 Quench, tested at 650°F
e. 12 Guided Side Bend Test Bars
2. The casting segments were surface conditioned for 100% radiographic and penetrant inspections. The acceptance standards were ASTM E-186 severity level 2 except no category D or E defectiveness was permitted and USAS Code Case N-10, respectively.
3. The edges of the electroslag weld preparations were machined. These surfaces were penetrant inspected prior to welding. The acceptance standards were USAS Code Case N -10.
4. The completed electroslag weld surfaces were ground flush with the casting surface. Then, the electroslag weld and adjacent base material were 100%

radiographed in accordance with ASME Code Case 1355. Also, the electroslag weld surfaces and adjacent base material were penetrant inspected in accordance with USAS Code Case N-10.

5. Weld metal and base metal chemical and physical analyses were determined and certified.
6. Heat treatment furnace charts were recorded and certified.

Reactor coolant pump casings fabricated by electroslag welding were qualified as follows:

1. The electroslag welding procedure employing two and three wire technique was qualified in accordance with the requirements of the ASME Code Section IX and Code Case 1355 plus supplementary evaluations as requested by WNES-PWRSD.

The following test specimens were removed from an 8 inch thick and from a 12 INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT Section: 4.5 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 10 of 19

inch thick weldment and successfully tested for both the 2 wire and the 3 wire techniques, respectfully. They are:

a. Two wire electroslag process - 8 thick weldment.
1. 6 Transverse Tensile Bars - 750°F post weld stress relief
2. 12 Guided Side Bend Test Bars
b. Three wire electroslag process - 12 thick weldment
1. 6 Transverse Tensile Bars - 750°F post weld stress relief
2. 17 Guided Side Bend Test Bars
3. 21 Charpy-V Notch Specimens
4. Full section macro examination of weld and heat affected zone
5. Numerous microscopic examinations of specimens removed from the weld and heat affected zone regions
6. Hardness survey across weld and heat affected zone
c. A separate weld test was made using the 2-wire electroslag technique to evaluate the effects of a stop and restart of welding by this process. This evaluation was performed to establish proper procedures and techniques as such an occurrence was anticipated during production applications due to equipment malfunction, power outages, etc. The following test specimens were removed from an 8 inch thick weldment in the stop-re-start-repaired region and successfully tested. They are:
1. 2 Transverse Tensile Bars - as welded
2. 4 Guided Side Bend Test Bars
3. Full section macro examination of weld and heat affected zone.
d. The weld test blocks in a., b., and c. above were radiographed using a 24 MeV Betatron. The radiographic quality level as defined by ASTM E-94 obtained was between one-half of 1% to 1%. There were no discontinuities evident in any of the electroslag welds.
2. The casting segments were surface conditioned for 100% radiographic and penetrant inspections. The radiographic acceptance standards were ASTM E-186 severity level 2 except no category D or E defectiveness was permitted for section thickness up to 41/2 inches and ASTM E-280 severity level 2 for section thicknesses greater than 41/2 inches. The penetrant acceptance standards were ASME Code Section III, paragraph N-627.
3. The edges of the electroslag weld preparations were machined. These surfaces were penetrant inspected prior to welding. The acceptance standards were ASME Code Section III, paragraph N-627.

INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT Section: 4.5 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 11 of 19

4. The completed electroslag weld surfaces were ground flush with the casting surface. Then, the electroslag weld and adjacent base material were 100%

radiographed in accordance with ASME Code Case 1355. Also, the electroslag weld surfaces and adjacent base material were penetrant inspected in accordance with ASME Code Section III, paragraph N-627.

5. Weld metal and base metal chemical and physical analyses were determined and certified.
6. Heat treatment furnace charts were recorded and certified.

4.5.1.1.7 In-Process Control of Variables There are many variables that must be controlled in order to maintain desired quality welds. These, together with an explanation of their relative importance are as follows:

1. Heat Input vs Output The heat input is determined by the product of volts times current and is measured by voltmeters and ammeters, which are considered accurate, as they are calibrated every 30 days. During any specific weld these meters are constantly monitored by the operators.

The ranges specified are 500-620 amperes and 44-50 volts. The amperage variation, even though it is less than ASME allows by Code Case 1355, is necessary for several reasons:

a. The thickness of the weld is in most cases the reason for changes.
b. The weld gap variation during the weld cycle will also require changes. For example, the procedure qualifications provide for welding thicknesses from 5 to 11 with two wires. The curr ent and voltage are varied to accommodate this range.
c. Also, the weld gap is controlled by spacer blocks. These blocks must be removed as the weld progresses. Each time a spacer block is removed there is the chance of the weld pinching down to as much as 1 or opening to perhaps as much as 11/2. In either case, a change in current may be necessary.
d. The heat output is controlled by the heat sink of the section thickness and metered water flow through the watercooled shoes. The nominal temperature of the discharged water is 100°F.
2. Weld Gap Configuration As previously mentioned, the weld gap configuration is controlled by 11/4 spacer blocks. As these blocks are removed there is the possibility of gap variation. It has been found that a variation from 1 to 1 -3/4 is not detrimental to weld quality as long as the current is adjusted accordingly.

INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT Section: 4.5 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 12 of 19

1. Flux Chemistry The flux used for welding is Arcos BV-1 Vertomax. This is a neutral flux whose chemistry is specified by Arcos Corporation. The molten slag is kept at a nominal depth of 1-3/4 and may vary in depth by plus or minus 3/8 without affecting the weld. This is measured by a stainless steel dipstick.
2. Weld Cross Section Configuration It is noted that the higher the current or heat input and the lower the heat output the greater the dilution of weld metal with base metal. This causes a more round barrel-shaped configuration as compared to welding with less heat input and higher heat output. This would cut the amount of dilution to provide a more narrow barrel-shaped configuration. This is also a function of section thicknesses; the thinner the section, the more round the pattern that is produced.
3. Welder Qualification Welder qualification is in accordance with ASME Code,Section IX rules, using transverse side bend test specimens per Table Q.24.1.

4.5.1.2 Reactor Coolant System In-Service Inspection Program

1. Introduction
a. Basis The in-service inspection program is based, as far as is practicable, on the applicable edition of Section XI of the ASME Code, In-Service Inspection of Nuclear Power Plant Components. Since this code was not available during the early design stages, 100- percent compliance may not be feasible.

Access for in-service examination was considered during the final design, and modifications were made where practical to make provisions for maximum accessibility within the limits of the basic plant design. For details of these provisions, see item 4, Access For Examination.

b. Methods of Examination Although ultrasonic techniques will be used for most of the volumetric examination, radiography may be used on small-diameter piping as well as for cast structures and other areas where material characteristics do not allow the use of ultrasonic techniques.

The method of examination planned for each area - volumetric, surface, or visual - is detailed as part of the in -service inspection program.

INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT Section: 4.5 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 13 of 19

2. Inspection Program The ISI Program Plan was developed according to the requirements of 10 CFR 50.55(a), paragraph g(4). Every ten years the program will be updated in accordance with 10 CFR 50.55(a), paragraph g(4).
3. Examination Techniques and Personnel Qualifications The in-service examinations are scheduled to be performed by several techniques.

These techniques are listed below with some comments as to their applicability.

a. Visual Examination - A visual examination can readily be made of the exterior of the piping and its supports, valves and their supports, pumps and their supports, and the pressurizer and the steam generators when the insulation has been removed. With the insulation in place, a visual examination can determine relatively gross changes, leaks, support hanger settings, etc. A visual examination can be made of the exterior of the upper closure head outside the control rod drive structure, but a visual examination of the interior surface of the head will require either decontamination or remote techniques. A gross visual examination of the interior of the reactor can be made through the use of monoculars or binoculars of 5X to 10X magnification. A critical visual examination can be made with remote viewing equipment such as borescopes or television systems. Direct or remote visual examination of the internal surfaces of the vessel can indicate surface scratches or evidence of corrosion, erosion, misalignment, or movement, but it is not believed to be capable of determining cracking in the cladding. Mechanical removal of the oxide layer can make cracks visible by direct or remote visual observation, but this technique is only feasible on selected areas.

In general, visual examination shall be conducted in conformance with Section XI of the ASME Boiler and Pressure Vessel Code.

b. Surface Examination
1. Magnetic Particle Examination - This examination is applicable only to ferromagnetic materials and, in general, shall be conducted in conformance with Section XI of the ASME Boiler and Pressure Vessel Code.
2. Liquid Penetrant Examination - This examination is applicable to any nonporous surface. As with visual techniques, liquid penetrant techniques usually cannot detect cracks in the cladding after the system has been in service unless the surface oxide is mechanically removed. Any liquid penetrant examination conducted shall be in INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT Section: 4.5 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 14 of 19

conformance with Section XI of the ASME Boiler and Pressure Vessel Code.

c. Volumetric Examination Radiography - This technique was used to examine almost all of the pressure boundary welds in the system covered by Section III of the ASME Boiler and Pressure Vessel Code. These techniques may be duplicated in-service on most of these welds with the exception of those in the reactor pressure vessel. However, as pointed out for the pump casing welds, such radiography may be very difficult during in-service inspection due to the background radiation and the geometry involved. Thus, where radiography must be employed during in-service inspection, techniques and results that are not in conformance with Section XI of the ASME Boiler and Pressure Vessel Code may be required. However, any radiography to be performed, will be in accordance with the Code as far as is practical.

Ultrasonic Examination - This will be performed using both manual and automated techniques, depending upon the radiation level and the geometry involved. The procedures used for the in-service inspection program, in general, conform with Section XI of the ASME Boiler and Pressure Vessel Code.

d. Personnel Qualification Personnel performing the nondestructive examination operation are qualified in accordance with SNT-TC-1A as applicable to the examination techniques and methods used. All in-service nondestructive examinations will be performed by or under the direct supervision of Level II personnel.

Personnel performing examinations not covered by SNT-TC-1A, shall be qualified to comparable levels of competence by subjection to comparable examinations.

Detailed procedures have been written for all examination methods.

INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT Section: 4.5 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 15 of 19

4. Access for Examination
a. Plant Accessibility The following provisions and modifications were performed within the limits of the basic plant design to maximize the plant accessibility for examination purposes:
1. The reactor vessel closure head is stored dry on the reactor operating deck during refueling to facilitate visual examination.
2. Reactor vessel studs, nuts and washers are removed todry storage during refueling.
3. Removable plugs are provided in the primary shield just above the nozzle welds, and the metallic insulation covering the nozzle welds is readily removable.
4. Those components and piping requiring insulation and subject to in-service inspection according to Section XI are provided with readily removable metallic insulation over all welds (except for the reactor vessel shell and those piping welds in the primary shield and crane wall penetrations).
5. The reactor coolant pump design was modified to include a removable coupling (spool piece) between the motor and pump to facilitate reactor coolant pump seal inspection and/or replacement.
6. Access holes are provided in the lower internals barrel flange to allow remote access to the reactor vessel internal surfaces between the flange and the nozzles without removal of the lower internals.
7. A removable manway is provided in the lower internals lower core support plate to allow remote visual examination of the reactor vessel bottom head without removal of the lower internals.
8. Manways are provided in the steam generator channel head and pressurizer top head to allow access for internal examination.
9. Subsequent to the formal issue of the Section XI code, requirements were established to locate, where possible, piping deadweight and seismic supports and rupture restraints to reduce to a minimum the interference with examination.
b. Reactor Vessel The reactor vessel presents special problems in access because of the radiation levels and the need for remote underwater accessibility. Because of these limitations, several steps were incorporated into the design and INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT Section: 4.5 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 16 of 19

fabrication of the vessel to facilitate the preparation for in-service examination. These are:

1. The design of the reactor vessel in the core area is a clean, uncluttered cylindrical surface to permit positioning of in-service examination tools without obstruction.
2. Shop ultrasonic examinations were performed on internally clad surfaces to an acceptance and repair standard to assure an adequate cladding bond to allow ultrasonic testing of the base metal.

Indications of cladding separation whose amplitude equals or exceeds that of a 3/4T reference hole were not permitted.

3. Subsequent to the reactor vessel shop hydrostatic test, important areas of the reactor vessel were ultrasonically tested and mapped.

4.5.1.3 Determination of Reactor Vessel RTNDT A. Measurement of Integrated Fast Neutron (E > 1.0 MeV) Flux at the Irradiation Samples The current plans for the Unit 1 and Unit 2 Reactor Vessel Irradiation Surveillance Program, as developed by Southwest Research Institute, contain the detailed procedures that describe the methods used to test the irradiation samples and to determine their specific activity and analyze and compute the neutron fluence exposure. The procedure is generally applicable for testing and analysis of any gamma-emitting specimens but is used specifically for:

1. 59Co (n, ) 60Co
2. 58Ni (n, p) 58Co
3. 54Fe (n, p) 54Mn
4. 63Cu (n, ) 60Co The procedures are based on ASTM Method E181, Standard General Methods for Analysis of Radioisotopes, ASTM Method E261,Standard Method for Measuring Neutron Flux by Radioactivation Techniques, and ASTM E185, Standard Recommended Practice for Surveillance Tests for Nuclear Reactor Vessel. The procedures are used to correlate the neutron fluence with the changes in reactor vessel material fracture toughness properties so that the heat-up and cool-down limitations can be determined in accordance with requirements of the Technical Specifications. See Section 4.4 for further details.

INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT Section: 4.5 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 17 of 19

B. Calculation of Integrated Fast Neutron (E > 1.0 MeV) Flux at the Irradiation Samples (Reference 1)

As part of the surveillance testing and evaluation program, the neutron transport and dosimetry analysis serves two purposes: (1) to determine the neutron fluence (E > 1.0 MeV) in the surveillance capsule where the metallurgical test specimens are located and (2) to determine the neutron fluence (E > 1.0 MeV) incident on and within the reactor pressure vessel (RPV).

The methodology for RPV fluence determination is based on combining results of transport calculations with measured dosimeter activities. The transport calculations provide three important sets of data in the overall analysis: (1) spectrum-weighted, effective dosimeter cross sections, (2) lead factors for various locations in the RPV, and (3) fluence rates at locations of interest.

The calculated effective cross sections for different dosimeters are divided into the measured reaction rates in order to obtain the fluence rate (E > 1.0 MeV) at the capsule location. The corresponding fluence rates at various depths into the RPV are obtained by dividing the capsule fluence rate by the appropriate lead factors.

Both the effective cross sections and the lead factors depend only on ratios of computed results so that absolute calculations are not required. The measured dosimeter activities provide the fluence rate normalization. However, absolute fluence rates are calculated to compare with measurements to provide a measure of the uncertainty involved in the RPV fluence determination procedure.

Industry developments have improved upon neutron flux calculation techniques used in earlier Southwest Research capsule analysis reports for Units 1 & 2. The capsule analysis reports should be consulted for the specific technique employed to compute the neutron flux. The current technique utilizes a discrete ordinates calculation using an updated version of the Dot 4 one and two-dimensional neutron/photon transport code to obtain the radial and azimuthal () fluence-rate distribution for the vessel geometry and capsule location. The inclusion of the surveillance capsules in the R-model accounts for the significant perturbation effects from the physical presence of the capsules. A 47-group energy structure for the SAILOR cross-section, and S8 angular structure and a P3 Legrendre cross-section are used in the computations.

C. Measurement of the Initial RTNDT of the Reactor Pressure Vessel Base Plate and Forgings Material The unirradiated or initial RTNDT temperature of pressure vessel base plate and forgings material is measured by two methods. These methods are the drop weight test per ASTM E208 and the Charpy V-notch impact test (Type A) per ASTM E23.

The RTNDT temperature is defined in ASTM E208 as the temperature at which a INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT Section: 4.5 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 18 of 19

specimen is broken in a series of tests in which duplicate no break performance occurs at 10°F higher temperature. Using the Charpy V -notch test, the RTNDT is defined as the temperature at which the energy required to break the specimen is a certain fixed value.

For ASTM A533B Class 1, A508 Class 2 and A508 Class 3 steel the ASME III Table N-421 specifies an energy value of 30 ft-lb. This value is based on a correlation with the drop weight test and is referred to as the 30 ft -lb-fix. A curve of the temperature versus energy absorbed in breaking the specimen is plotted. To obtain this curve, 15 tests are performed which include three tests at five different temperatures. The intersection of the energy versus temperature curve with the 30 ft-lb ordinate is designated as the RTNDT.

As part of the surveillance program, Charpy V-notch impact tests, tensile tests, and fracture mechanics specimens are taken from the core region plates and forgings, and core region weldments including heat-affected zone material. The test locations are similar to those used in the tests by the fabricator at the plate mill.

The uncertainties of measurement of the RTNDT of base plate are:

1. Differences in Charpy V-notch foot pound values at a given temperature between specimens.
2. Variation of impact properties through plate thickness.

The fracture toughness technology for pressure vessels and correlation with service failures based on Charpy V-notch impact data are based on the averaging of data.

The Charpy V-notch 30 ft-lb fix temperature is based on multiple tests by the material supplier, the fabricator, and by Westinghouse as part of the surveillance program. In the review of available data, differences of 0°F to approximately 40°F are observed in comparing curves plotted through the minimum and average values respectively. The value of RTNDT derived from the average curve is judged to be representative of the material because of the averaging of at least 15 data points, consistent with the specified procedures of ASTM E23. In the case of the assessment of RTNDT shift due to fast neutron flux, the displacement of transition curves is measured. The selection of maximum, minimum or average curves for this assessment is not significant since like curves are used.

There are quantitative differences between the RTNDT temperature measurements at the surface, 1/4 thickness or the center of a plate. Differences in RTNDT temperature between 1/4 T and the center in heavy plates had been observed to vary from improvement in the RTNDT temperature to increases up to 85° F. The RTNDT temperature at the surface had been measured to be as much as 85°F lower than at 1/4 T.

INDIANA MICHIGAN POWER Revised: 32.0 D. C. COOK NUCLEAR PLANT Section: 4.5 UPDATED FINAL SAFETY ANALYSIS REPORT Page: 19 of 19

The 1/4 T location is considered conservative since the enhanced metallurgical properties of the surface are not used for the determination of RTNDT temperature.

In addition, the limiting RTNDT temperature for the reactor vessel after operation is based on the RTNDT temperature shift due to irradiation. Since the fast neutron dose is highest at the inner surface, usage of the 1/4 T RTNDT temperature criterion is conservative.

Data are being accumulated on the variation of RTNDT across heavy section steels at Westinghouse Nuclear Energy Systems. Similarly, the Pressure Vessel Research Committee sponsors an evaluation of properties of pressure vessel steels in plates and forgings greater than 6 inches thick. Preliminary data show RTNDT temperature differences between 1/4 T and center of less than 20°F. The present criteria of using RTNDT temperature + 60°F at the 1/4 T location without taking advantage of the enhanced properties at the surface of reactor vessel plates is conservative.

To assess any possible uncertainties in the consideration of RTNDT temperature shift for welds, heat affected zone, and base metal, test specimens of these three material types are included in the reactor vessel surveillance program.

4.5.1.4 References for Section 4.5

1. Reactor Vessel Materi al Surveillance Program for Cook Nuclear Plant Unit 2 Analysis of Capsule X, P. K. Nair, et. al. (May 1987)
2. Westinghouse letter No. AEP-10-89 dated May 20, 2010 and its attachment Engineering Report No. LTR-REA-10-79
3. WCAP-18455-NP Revision 1, D.C. Cook Unit 1 Heatup and Cooldown Limit Curves for Normal Operation
4. WCAP-18456-NP Revision 0, D.C. Cook Unit 2 Heatup and Cooldown Limit Curves for Normal Operation
5. WCAP-18837-NP Revision 0, Analysis of Capsule W from the American Electric Power Company D. C. Cook Unit 1 Reactor Vessel Radiation Surveillance Program
6. WCAP-18860-NP Revision 0, D.C. Cook Unit 1 Heatup and Cooldown Limit Curves for Normal Operation and Supplemental Reactor Vessel Integrity Based on Capsule W Data