ML25280A090
| ML25280A090 | |
| Person / Time | |
|---|---|
| Site: | Kemmerer File:TerraPower icon.png |
| Issue date: | 10/08/2025 |
| From: | Reed Anzalone, Hart M, Hanh Phan NRC/NRR/DANU/UTB2 |
| To: | |
| References | |
| Download: ML25280A090 (1) | |
Text
NRC Review of Kemmerer Unit 1 Construction Permit Application Integrated Risk Evaluation and Defense-in-Depth Hanh Phan, Michelle Hart, Reed Anzalone NRR/DANU/UTB2 ACRS Subcommittee Meeting October 8-9, 2025
Topics
- Integrated risk evaluation
- Defense-in-depth (DID) adequacy evaluation
- Plant capability DID
- Programmatic DID
- Integrated decision process (IDP) and integrated decision process panel (IDPP) 2
Integrated Risk Evaluation Hanh Phan, Senior Risk and Reliability Analyst, NRR/DANU/UTB2 Michelle Hart, Senior Reactor Engineer, NRR/DANU/UTB2 3
LMP Cumulative Risk Metrics The total mean frequency of exceeding a site boundary dose of 100 mrem from all licensing basis events (LBEs) should not exceed one per plant-year The average individual risk of early fatality within one mile of the exclusion area boundary (EAB) from LBEs, based on mean estimates of frequencies and consequences, should not exceed 5x10-7 per plant-year The average individual risk of latent cancer fatalities within 10 miles of the EAB from all LBEs, based on mean estimates of frequencies and consequences, should not exceed 2x10-6 per plant-year 4
Integrated Plant Performance Assessment
- PSAR section 4.1 describes the preliminary integrated risk assessment and comparison to the NEI 18-04 LMP cumulative risk metric targets
- Integrated risk assessment included the LMP non-DBA LBEs (AOOs, DBEs, and BDBEs) consistent with guidance in NEI 21-07, as endorsed by RG 1.253
- Uses the KU1 PRA which is consistent with the overall sufficiency for use in the LMP process for the PSAR
- Departed from LMP guidance by also including PRA other quantified events (OQEs) beyond the LBE frequency cutoff
- Provides additional information than the LMP integrated risk assessment envisioned 5
Consequence Analyses for Risk Assessment
- Event-specific source terms as input
- Used consequence analysis computer code to calculate for each source term
- Individual total effective dose equivalent (TEDE) at site boundary
- Average individual risk of early fatality within 1 mile of the EAB
- Average individual risk of latent cancer fatality within 10 miles of the EAB
- Site data
- Uniform population
- No credit for emergency response actions
- Generic meteorological data assumed to be conservatively representative of site
- Uncertainty including weather trials to determine mean consequences 6
Integrated Risk Assessment Results Total mean frequency, without uncertainties, of exceeding a site boundary dose of 100 mrem (1 mSv) from all AOOs, DBEs, BDBEs, and OQEs 3.12x10-3 per plant-year LMP Target
< 1 per plant-year Mean frequency, without uncertainties, of the cumulative average individual risk of early fatality within 1 mile of the EAB, summed over all AOOs, DBEs, BDBEs, and OQEs 0 per plant-year LMP Target
< 5x10-7 per plant-year Mean frequency, without uncertainties, of the cumulative average individual risk of latent cancer within 10 miles of the EAB, summed over all AOO, DBEs, BDBEs, and OQEs 3.86x10-9 per plant-year LMP Target
< 2x10-6 per plant-year 7
Integrated Risk Assessment Conclusions
- The integrated risk results reported in PSAR section 4.1 demonstrate a large margin to each of the LMP cumulative risk metrics
- Staff determined that the integrated risk assessment
- Included the range of potential radiological release events for the facility, based on internal events, as consistent with the CP stage of review
- Used acceptable methods to quantify the consequences
- Provided mean risk results to compare to the LMP cumulative risk metrics
- PSAR provides a complete, consistent, and integrated summary of the plant risk to public health and safety, given the preliminary design information 8
Defense-in-Depth Adequacy Evaluation Reed Anzalone, Senior Nuclear Engineer, NRR/DANU/UTB2 Hanh Phan, Senior PRA Analyst, NRR/DANU/UTB2 9
NEI 21-07 Considerations
- Plant capability DID
- Margin to the F-C target curve is maintained for all individual LBEs
- Identify functions needed to keep frequency of risk-significant DBEs and BDBEs below 1E-02 and 1E-04 respectively and individual risks below the QHOs (previous discussion)
- Sufficient independence between DLs
- Assurance against over-reliance on a single feature across DLs
- Balance between prevention and mitigation in the DLs
- Programmatic DID 10
LBE Margin
- PSAR figure 3.5-1 shows margin to F-C target curve visually and tables 4.2-1 and 4.2-2 show margin for risk significant LBEs as identified by both mean and 95th percentile
- Staff concluded adequate margin was demonstrated consistent with NEI 21-07 11 PSAR Figure 3.5-1. F-C Chart for LBEs with Uncertainty Bands
Layers of Defense
- 5 DLs consistent with NEI 18-04 table 5-2
- DLs used to ensure multiple independent & diverse functions available to perform FSFs for LBEs by evaluating DLs across initiating event family 12 NEI 18-04 Table 5-2. Guidelines for Establishing the Adequacy of Overall Plant Capability Defense-in-Depth
DL Strategy 13 From TerraPower presentation on I&C DID and diversity presentation 4/2023 (ML23100A225)
DLs - Quantitative Layer Guideline
- No risk-significant AOOs
- DL3-RR1 (primary functional containment boundary), DL3-RR3a (EVHM to reactor head barrier function)
- DL4 and 5 functions identified to maintain risks below QHOs
- DL4-RR7 (fuel handling building barrier) for RFH-ESWR-2 14 NEI 18-04 Table 5-2. Guidelines for Establishing the Adequacy of Overall Plant Capability Defense-in-Depth
DLs - Independence, Single Feature Reliance,
& Prevention Mitigation Balance
- IE families evaluated across DLs to ensure independence, single-feature reliance, and prevention-mitigation balance
- Independence established through DL strategy
- One LBE has single feature reliance: RRS-ISPL-CN, DBA break of SPS-I that releases tritium accumulated in cold trap
- Dose does not exceed DBA criteria even when considering 40 years of accumulated tritium with no containment credited
- Prevention-mitigation balance assured by ensuring preventative features (DL1) exist for each IE family 15
Example DL Evaluation for DHP-LOOP Family 16 LBE ID LBE Cat.
Reactivity Control Heat Removal Radionuclide Retention DHP-LOOP-BL AOO Gravity scram (DL3-RC1), control rod driveline scram follow (DL4-RC3), alternative shunt trip (DL4-RC6)
Non-passive IAC (DL2),
passive IAC (DL4-HR1), RAC (DL3-HR4)
Fuel cladding (DL3-RR2), primary coolant boundary (DL3-RR1)
DHP-LOOP-1 DBE Gravity scram (DL3-RC1), control rod driveline scram follow (DL4-RC3), alternative shunt trip (DL4-RC6)
Non-passive IAC (DL2),
passive IAC (DL4-HR1), RAC (DL3-HR4)
Fuel cladding (DL3-RR2), primary coolant boundary (DL3-RR1)
DHP-LOOP-2 BDBE Gravity scram (DL3-RC1), control rod driveline scram follow (DL4-RC3), alternative shunt trip (DL4-RC6)
Non-passive IAC (DL2),
passive IAC (DL4-HR1), RAC (DL3-HR4)
Fuel cladding (DL3-RR2), primary coolant boundary (DL3-RR1)
DHP-LOOP-3 BDBE Gravity scram (DL3-RC1), control rod driveline scram follow (DL4-RC3), alternative shunt trip (DL4-RC6)
Non-passive IAC (DL2),
passive IAC (DL4-HR1), RAC (DL3-HR4)
Fuel cladding (DL3-RR2), primary coolant boundary (DL3-RR1)
DHP-LOOP-4 BDBE Gravity scram (DL3-RC1), control rod driveline scram follow (DL4-RC3), alternative shunt trip (DL4-RC6)
Non-passive IAC (DL2),
passive IAC (DL4-HR1), RAC (DL3-HR4)
Fuel cladding (DL3-RR2), primary coolant boundary (DL3-RR1)
DID Adequacy Evaluation Summary
- DL strategy implemented consistent with NEI 18-04
- Evaluation against quantitative guidelines demonstrates adequate margin and identifies important functions
- Evaluation against qualitative guidelines demonstrates independence, lack of single feature reliance (with one exception, which is acceptable) and prevention-mitigation balance
Integrated Decision Process (IDP)
Integrated Decision Process Panel (IDPP)
Hanh Phan, Senior PRA Analyst, NRR/DANU/UTB2 18
Integrated Decision Process (IDP)
- A structured, deliberative process to integrate deterministic insights, PRA insights, and engineering judgment
- Role in LMP framework:
Guides LBE selection and confirmation (AOOs, DBEs, BDBEs)
Supports identification of safety functions Determines SSC classification and performance requirements Ensures adequate defense-in-depth (DID) through layered protection through prevention, mitigation, and emergency preparedness
Integrated Decision Process Panel (IDPP)
Multidisciplinary body that executes the IDP and reviews DID adequacy evaluation Composition:
PRA specialists Design and systems engineering experts Operations and human factors representatives Licensing professionals and process facilitators Functions:
Deliberative decision-making with documented bases Balanced consideration of risk, engineering, and regulatory requirements Ensures defensible outcomes aligned with the LMP framework Outcome: Provides confidence in the technical justification of safety-related decisions 20
What the Staff Reviewed
- USO made documents relevant to IDP and IDPP available for staff audit, including the charter, training and qualification materials, the process for establishing the DID baseline, and reports documenting IDPP meetings
- Staff objectives:
- Verify decisions are properly documented, defensible, traceable, and supported 21
Evaluated Key Areas
- LBE selection and confirmation PRA event sequences categorized into AOOs, DBEs, BDBEs Retained low-frequency, high-consequence events where appropriate
- Safety function identification & SSC classification Safety functions reviewed and confirmed SSCs classified as SR, NSRST, or NST per role and PRA risk significance
- Defense-in-depth evaluation Independence and diversity in protective features Adequacy of physical barriers to radiological release Redundancy and independence to reduce common-cause vulnerabilities 22
Permit Condition on IDP/IDPP Prior to submittal of the operating licensing application, USO shall notify the NRC when an integrated decision-making process panel was convened to evaluate safety analysis and risk assessment of the design, and the supporting documentation is available for examination by the NRC.
Provides for staff oversight of the IDP and IDPP activities Notification and documentation give staff timely insight into safety analyses, risk assessments, and DID evaluations Provides transparency and traceability of applicant decisions Confirms alignment with NEI 18-04 and RG 1.233 Enhances regulatory confidence that safety-significant issues are resolved early 23
Summary
- USO utilized an IDP/IDPP consistent with NEI 18-04 and RG 1.233 Limited implementation documentation was available for staff review at the CP Permit condition provides for staff awareness between CP and OL Full review of implementation will be conducted at OL
- KU1 IDP should be updated during construction to meet evolving needs
- USO IDPP should be conducted throughout construction leading to the operating license application 24
Acronyms 25 ACRS - Advisory Committee on Reactor Safeguards AOO - Anticipated Operational Occurrence BDBE - Beyond Design Basis Event CCF - Common Cause Failure CFR - Code of Federal Regulations CP - Construction Permit CPA - Construction Permit Application DBA - Design Basis Accident DBE - Design Basis Event DID - Defense In Depth DL - Defense Line EAB - Exclusion Area Boundary EPRI - Electric Power Research Institute EVHM - Ex-vessel Handling Machine F-C - Frequency-Consequence FSAR - Final Safety Analysis Report OL - Operating License OLA - Operating License Application OQE - Other Quantified Events PRA - Probabilistic Risk Assessment PSAR - Preliminary Safety Analysis Report QHO - Quantitative Health Objective RAC - Reactor Air Cooling System RG - Regulatory Guide SE - Safety Evaluation SFR - Sodium Fast Reactor SR - Safety Related SSC - Structures, Systems, and Components TEDE - Total Effective Dose Equivalent TICAP - technology inclusive content of application TR - Topical Report USO - US SFR Owner FSF - Fundamental Safety Function FSAR - Final Safety Analysis Report IAC - Intermediate Air-cooling System IDP - Integrated Decision-making Process IDPP - Integrated Decision-making Process Panel IE - Initiating Event KU1 - Kemmerer Unit 1 LBE - Licensing Basis Event LMP - Licensing Modernization Project LPZ - Low Population Zone LWR - Light Water Reactor NEI - Nuclear Energy Institute NRC - Nuclear Regulatory Commission NRR - Office of Nuclear Reactor Regulation NSRST - Non-safety-related with Special Treatment NST - No Special Treatment