NL-21-0994, Adoption of TSTF-283-A, Revision 3, Modify Section 3.8 Mode Restriction Notes

From kanterella
Jump to navigation Jump to search

Adoption of TSTF-283-A, Revision 3, Modify Section 3.8 Mode Restriction Notes
ML21356B485
Person / Time
Site: Vogtle  Southern Nuclear icon.png
Issue date: 12/22/2021
From: Gayheart C
Southern Nuclear Operating Co
To:
Document Control Desk, Office of Nuclear Reactor Regulation
References
NL-21-0994
Download: ML21356B485 (42)


Text



&KHU\O$*D\KHDUW &RORQQDGH3DUNZD\



5HJXODWRU\$IIDLUV'LUHFWRU %LUPLQJKDP$/



  

 



FDJD\KHD#VRXWKHUQFRFRP











'HFHPEHU22





'RFNHW1RV 

    1/





861XFOHDU5HJXODWRU\&RPPLVVLRQ

$771'RFXPHQW&RQWURO'HVN

DVKLQJWRQ'&



6RXWKHUQ1XFOHDU2SHUDWLQJ&RPSDQ\

9RJWOH(OHFWULF*HQHUDWLQJ3ODQW8QLWVDQG

$GRSWLRQRI767)$5HYLVLRQ0RGLI\6HFWLRQ0RGH5HVWULFWLRQ1RWHV'





/DGLHVDQG*HQWOHPHQ



3XUVXDQWWR&)56RXWKHUQ1XFOHDU2SHUDWLQJ&RPSDQ\ 61& KHUHE\UHTXHVWVD

OLFHQVHDPHQGPHQWWR9RJWOH(OHFWULF*HQHUDWLQJ3ODQW 9(*3 8QLWUHQHZHGRSHUDWLQJ

OLFHQVH1)3DQG8QLWUHQHZHGRSHUDWLQJOLFHQVH1)37KHSURSRVHGDPHQGPHQWLV

FRQVLVWHQWZLWK15&DSSURYHG7HFKQLFDO6SHFLILFDWLRQ7DVN)RUFH 767) $5HYLVLRQ

0RGLI\6HFWLRQ0RGH5HVWULFWLRQ1RWHV



7KHSURSRVHGFKDQJHVPRGLI\7HFKQLFDO6SHFLILFDWLRQV 76 ³$&6RXUFHV2SHUDWLQJ'

DQG76³'&6RXUFHV+/-2SHUDWLQJ'&RQVLVWHQWZLWK767)$1RWHVZRXOGEHDGGHG

WRDOORZJUHDWHUIOH[LELOLW\LQSHUIRUPLQJ6XUYHLOODQFH5HTXLUHPHQWV 65V LQ0RGHVRU

7KH6XUYHLOODQFH1RWHVZLOODOORZIXOORUSDUWLDOSHUIRUPDQFHRIWKH65VWRUHHVWDEOLVK

2SHUDELOLW\SURYLGHGDQDVVHVVPHQWGHWHUPLQHVWKHVDIHW\RIWKHSODQWLVPDLQWDLQHGRU

HQKDQFHG7KHVH65VFXUUHQWO\KDYH1RWHVSURKLELWLQJWKHLUSHUIRUPDQFHLQ0RGHVRURULQ

0RGHVRU



7KHHQFORVXUHSURYLGHVDEDVLVIRUWKHSURSRVHGFKDQJH$WWDFKPHQWVDQGFRQWDLQPDUNHG

XS76SDJHVDQGUHYLVHG76SDJHVUHVSHFWLYHO\$WWDFKPHQWFRQWDLQVWKHPDUNHGXS76

%DVHVIRULQIRUPDWLRQRQO\



61&UHTXHVWVDSSURYDORIWKHSURSRVHGDPHQGPHQWZLWKLQRQH\HDUIURPDFFHSWDQFHRIWKH

DPHQGPHQWIRUUHYLHZ7KHSURSRVHGFKDQJHVZRXOGEHLPSOHPHQWHGZLWKLQGD\VDIWHU

LVVXDQFHRIWKHDPHQGPHQWV



,QDFFRUGDQFHZLWK&)5DFRS\RIWKLVDSSOLFDWLRQLVEHLQJSURYLGHGWRWKHGHVLJQDWHG

  • HRUJLD2IILFLDO

 

861XFOHDU5HJXODWRU\&RPPLVVLRQ

3DJH







7KLVOHWWHUFRQWDLQVQRUHJXODWRU\FRPPLWPHQWV,I\RXKDYHDQ\TXHVWLRQVSOHDVHFRQWDFW5\DQ

-R\FHDW



,GHFODUHXQGHUSHQDOW\RISHUMXU\WKDWWKHIRUHJRLQJLVWUXHDQGFRUUHFW([HFXWHGRQWKH

BBBBGD\RI'HFHPEHU





5HVSHFWIXOO\VXEPLWWHG









&KHU\O$*D\KHDUW

'LUHFWRU5HJXODWRU\$IIDLUV

6RXWKHUQ1XFOHDU2SHUDWLQJ&RPSDQ\



&$*GVScbg



(QFORVXUH%DVLVIRU3URSRVHG&KDQJHV



$WWDFKPHQWV 3URSRVHG7HFKQLFDO6SHFLILFDWLRQ&KDQJHV 0DUNHGXS3DJHV 

   5HYLVHG7HFKQLFDO6SHFLILFDWLRQ3DJHV

   3URSRVHG7HFKQLFDO6SHFLILFDWLRQ%DVHV&KDQJHV 0DUN8S IRU

   ,QIRUPDWLRQ2QO\



FF 5HJLRQDO$GPLQLVWUDWRU5HJLRQOO 

 1553URMHFW0DQDJHU+/-9RJWOH  

 6HQLRU5HVLGHQW,QVSHFWRU+/-9RJWOH 

 6WDWHRI*HRUJLD(QYLURQPHQWDO3URWHFWLRQ'LYLVLRQ

 57\SH&9&

ENCLOSURE Southern Nuclear Operating Company Vogtle Electric Generating Plant - Units 1 and 2 Adoption of TSTF-283-A, Revision 3, "Modify Section 3.8 Mode Restriction Notes Basis for Proposed Changes

Basis for Proposed Changes 1.0

SUMMARY

DESCRIPTION Southern Nuclear Operating Company (SNC) requests an amendment to Vogtle Electric Generating Plant (VEGP) Unit 1 renewed operating license NFP-68 and Unit 2 renewed operating license NFP-81. The proposed amendment is consistent with NRC-approved Technical Specification Task Force (TSTF) -283-A, Revision 3, "Modify Section 3.8 Mode Restriction Notes."

The proposed changes modify Technical Specification (TS) 3.8.1, AC Sources - Operating, and TS 3.8.4, DC Sources - Operating. Consistent with TSTF-283-A, Notes would be added to allow greater flexibility in performing Surveillance Requirements (SRs) in Modes 1 or 2, or in Modes 1, 2, 3, or 4. The Surveillance Notes will allow full or partial performance of the SRs to re-establish Operability provided an assessment determines the safety of the plant is maintained or enhanced. These SRs currently have Notes prohibiting their performance in Modes 1 or 2, or in Modes 1, 2, 3, or 4, as stated in each SR.

2.0 DETAILED DESCRIPTION 2.1 Reason for the Proposed Change The proposed changes will reduce the potential for a plant shutdown should corrective maintenance (planned or unplanned) performed during power operation result in the need to perform any of the revised SRs to demonstrate operability.

2.2 Description of the Proposed Change The modified Surveillance Notes described below will allow full or partial performance of the SRs to re-establish Operability provided an assessment determines the safety of the plant is maintained or enhanced. These Surveillances currently have Notes prohibiting their performance in Modes 1 or 2, or in Modes 1, 2, 3, or 4, as stated in each SR.

These changes are consistent with the Nuclear Regulatory Commission (NRC)-approved TSTF-283-A, Revision 3 (Reference 1) on eliminating mode restrictions on the performance of SRs in TSs 3.8.1 and 3.8.4. The NRC has approved the TSTF for inclusion in the Improved Standard Technical Specifications and it is reflected in NUREG-1431, Revision 5, for Westinghouse plants, and for consideration for being added to plant TSs. The intent of the TSTF is to allow testing of the Emergency Diesel Generators (EDGs) and Class 1E batteries in modes not currently allowed for the purpose of maintaining or re-establishing system or component Operability (e.g., post maintenance testing), provided a safety assessment is made before the testing for Operability.

Numbering differences between the VEGP SRs and the NUREG-1431, Revision 5, formats are described below. The NUREG SR number is in parenthesis following the VEGP SR number.

Each SR is annotated in parenthesis with (Insert 1) or (Insert 2), as appropriate per TSTF-283-A, to align with the marked-up TS pages in Attachment 1. The TS Bases are marked up in using (Bases Insert 1) and (Bases Insert 2), as appropriate. For those SRs that include restrictions in Modes 3 and 4, the applicable Bases Insert is modified to include Modes 3 and 4. The TS Bases markups are included as information only. The following eight SRs are affected, followed by a summary of variations from TSTF-283-A.

E-1

Basis for Proposed Changes

1. SR 3.8.1.10 (NUREG SR 3.8.1.11), which tests the response to a loss of offsite power signal, contains a Note prohibiting performance in Mode 1, 2, 3, or 4. The Note is proposed to be modified to state that performance is normally prohibited in Mode 1, 2, 3, or 4, but portions of the SR may be performed to reestablish operability provided an assessment determines the safety of the plant is maintained or enhanced. (Insert 2)
2. SR 3.8.1.11 (NUREG SR 3.8.1.12), which tests the response to an Engineered Safety Feature (ESF) initiation, contains a Note prohibiting performance in Mode 1 or 2. The Note is proposed to be modified to state that performance is normally prohibited in Mode 1 or 2, but portions of the SR may be performed to reestablish operability provided an assessment determines the safety of the plant is maintained or enhanced. (Insert 2)
3. SR 3.8.1.12 (NUREG SR 3.8.1.13), which tests that each DGs automatic trips are bypassed on a loss of voltage signal concurrent with an ESF initiation signal, contains a Note prohibiting performance in Mode 1 or 2. The Note is proposed to be modified to state that performance is normally prohibited in Mode 1 or 2, but the SR may be performed to reestablish operability provided an assessment determines the safety of the plant is maintained or enhanced. (Insert 1)
4. SR 3.8.1.15 (NUREG SR 3.8.1.16), which verifies transfer from DG to offsite power, contains a Note prohibiting performance in Mode 1, 2, 3, or 4. The Note is proposed to be modified to state that performance is normally prohibited in Mode 1, 2, 3, or 4, but the SR may be performed to reestablish operability provided an assessment determines the safety of the plant is maintained or enhanced. (Insert 1)
5. SR 3.8.1.16 (NUREG SR 3.8.1.17), which verifies that a DG operating in test mode will return to ready-to-load condition and energize the emergency load from offsite power on receipt of an ESF initiation signal, contains a Note prohibiting performance in Mode 1, 2, 3, or 4. The Note is proposed to be modified to state that performance is normally prohibited in Mode 1, 2, 3, or 4, but portions of the SR may be performed to reestablish operability provided an assessment determines the safety of the plant is maintained or enhanced. (Insert 2)
6. SR 3.8.1.17 (NUREG SR 3.8.1.18), which verifies the interval between each sequenced load, contains a Note prohibiting performance in Mode 1, 2, 3, or 4. The Note is proposed to be modified to state that performance is normally prohibited in Mode 1, 2, 3, or 4, but the SR may be performed to reestablish operability provided an assessment determines the safety of the plant is maintained or enhanced. (Insert 1)
7. SR 3.8.1.18 (NUREG SR 3.8.1.19), which verifies the response to a loss of offsite power signal and ESF actuation signal, contains a Note prohibiting performance in Mode 1, 2, 3, or 4.

The Note is proposed to be modified to state that performance is normally prohibited in Mode 1, 2, 3, or 4, but portions of the SR may be performed to reestablish operability provided an assessment determines the safety of the plant is maintained or enhanced. (Insert 2)

8. SR 3.8.4.3 (NUREG SR 3.8.4.3), which verifies battery capacity for emergency loads, contains a Note prohibiting performance in Mode 1, 2, 3, or 4. The Note is proposed to be modified to state that performance is normally prohibited in Mode 1, 2, 3, or 4, but portions of the SR may be performed to reestablish operability provided an assessment determines the safety of the plant is maintained or enhanced. (Insert 2)

SNC is proposing the following variations from the TS changes described in TSTF-283-A. These variations do not affect the applicability of TSTF-283-A.

E-2

Basis for Proposed Changes The VEGP TS contain a Surveillance Frequency Control Program. Therefore, the Surveillance Requirement Frequencies for TS 3.8 are "In accordance with the Surveillance Frequency Control Program."

The VEGP TS do not contain several of the TS 3.8.1 SRs found in NUREG 1431, Revision 5.

Specifically, the following SRs from NUREG-1431, Revision 5 are not in the VEGP TS: SR 3.8.1.8, SR 3.8.1.9, SR 3.8.1.10, and SR 3.8.1.14. As such, addition of the TSTF-283-A changes that provide exceptions to the Mode restrictions in these SRs are not necessary and are not adopted. Additionally, NUREG-1431 was updated previously with extensive changes in the TS 3.8.4 SRs. Therefore, the NUREG 1431, Revision 5 SR numbering and Notes do not necessarily match the SRs in TSTF-283-A. Using the content of the SR and the existing Notes in the VEGP TS, only one VEGP 3.8.4 SR matches the changes described in NUREG-1431, Revision 5, and is described in Item 8 above.

The TSTF-283-A Bases changes associated with VEGP SRs 3.8.1.10, 3.8.1.15, 3.8.1.16, 3.8.1.17, 3.8.1.18 and 3.8.4.3 incorrectly state that the associated Notes restrict performance of the Surveillances in Mode 1 and 2. These Surveillances actually restrict performance of the Surveillances in Mode 1, 2, 3, or 4. This error is corrected in the VEGP TS Bases markups included in Attachment 3.

3.0 TECHNICAL EVALUATION

Summary of the Approved Traveler Justification The allowance to perform the SRs in currently prohibited Modes is restricted to only allow the SRs to be performed for the purpose of reestablishing Operability (e.g., post-work testing following corrective maintenance, corrective modification, deficient or incomplete surveillance testing, and other unanticipated Operability concerns) provided an assessment determines plant safety is maintained or enhanced. This assessment shall, as a minimum, consider the potential outcomes and transients associated with a failed SR, a successful SR, and a perturbation of the offsite or onsite power system when they are tied together or operated independently for the SR; as well as the operator procedures available to cope with these outcomes. These shall be measured against the avoided risk of a plant shutdown and startup to determine that plant safety is maintained or enhanced when the SR is performed. Risk insights or deterministic methods may be used for this assessment.

Note that the Maintenance Rule provision contained in 10 CFR 50.65(a)(4) states that before performing maintenance activities, the licensee shall assess and manage the increase in risk that may result from the proposed maintenance activities. This includes the performance of SRs to reestablish Operability. Therefore, in addition to the assessment required by the SR Notes, an assessment of plant risk will also be performed.

The justification presented in the approved Traveler is applicable to VEGP. The Traveler is being adopted by VEGP with no significant changes beyond those described above in Section 2.0.

The NRC implemented the approved Traveler, and its contents are reflected in NUREG-1431, Revision 5. NUREG-1431, Revision 5, was used for the NUREG SR numbers impacted.

E-3

Basis for Proposed Changes

4.0 REGULATORY EVALUATION

4.1 Applicable Regulatory Requirements/Criteria The proposed change has been evaluated to determine whether applicable regulations and requirements continue to be met.

Criterion 17 - Electrical Power Systems An onsite electric power system and an offsite electric power system shall be provided to permit the functioning of structures, systems, and components important to safety. The safety function for each system (assuming that the other system is not functioning) shall be to provide sufficient capacity and capability to assure that (1) specified acceptable fuel design limits and design conditions of the reactor coolant pressure boundary are not exceeded as a result of anticipated operational occurrences and (2) the core is cooled and containment integrity and other vital functions are maintained in the event of postulated accidents.

The onsite electric power supplies, including the batteries, and the onsite electric distribution system shall have sufficient independence, redundancy, and testability to perform their safety functions, assuming a single failure.

Electric power from the transmission network to the onsite electric distribution system shall be supplied by two physically independent circuits (not necessarily on separate rights-of-way) designed and located so as to minimize, to the extent practical, the likelihood of their simultaneous failure under operating and postulated accident and environmental conditions. A switchyard common to both circuits is acceptable. Each of these circuits shall be designed to be available in sufficient time, following the loss of all onsite alternating current power sources and the offsite electric power circuit, to assure that specified acceptable fuel design limits and design conditions of the reactor coolant pressure boundary are not exceeded. One of these circuits shall be designed to be available within a few seconds following a LOCA to assure that core cooling, containment integrity, and other vital safety functions are maintained.

Provisions shall be included to minimize the probability of losing electric power from any of the remaining supplies as a result of, or coincident with, the loss of power generated by the nuclear power unit, the loss of power from the transmission network, or the loss of power from the onsite electric power supplies.

Discussion An onsite electric power system and an offsite electric power system are provided to permit the functioning of structures, systems, and components important to safety. Each Class 1E electric power system is designed with adequate independence, capacity, redundancy, and testability to ensure the functioning of engineered safety features (ESF). Independence is provided by physical separation and electrical isolation of component and cables.

A failure of a single component will not prevent the safety-related systems from performing their function. Each of the connected preferred offsite power circuits is designed to be available in sufficient time, following a loss of all onsite power sources and the other offsite electric power circuit, to assure that specified acceptable fuel design limits and design conditions of the reactor coolant pressure boundary are not exceeded.

E-4

Basis for Proposed Changes Emergency onsite AC power is furnished by two diesel generators per unit. Each diesel generator is connected to a Class 1E bus. The ESF loads are divided between the Class 1E buses in balanced, redundant load groupings. Each diesel generator is capable of supplying sufficient power in sufficient time for the operation of the ESF required for the unit during a postulated LOCA. During a postulated LOCA, both diesel generators start automatically. If preferred power is available to the Class 1E bus following a LOCA, the ESF loads will be started sequentially. However, in the event that preferred power is lost, the load sequencing system will shed all loads, connect each diesel generator to its associated Class 1E bus, and sequentially start the ESF equipment. The diesel generators are arranged so that a failure of a single component will not prevent the safe shutdown of the reactor.

The onsite Class 1E DC power supply consists of four independent battery systems. Failure of a single component in the DC power supply will not impair function of the ESF required to maintain the reactor in a safe condition.

Criterion 18 - Inspection And Testing Of Electric Power Systems Electric power systems important to safety shall be designed to permit appropriate periodic inspection and testing of important areas and features, such as wiring, insulation, connections, and switchboards, to assess the continuity of the systems and the condition of their components. The systems shall be designed with a capability to test periodically (1) the operability and functional performance of the components of the systems, such as onsite power sources, relays, switches, and buses, and (2) the operability of the systems as a whole and, under conditions as close to design as practical, the full operation sequence that brings the systems into operation, including operation of applicable portions of the protection system, and the transfer of power among the nuclear power unit, the offsite power system, and the onsite power system.

Discussion Class 1E electric power systems are designed as described below in order that the following aspects of the system can be periodically tested:

A. The operability and functional performance of the components of Class 1E electric power systems (diesel generators, ESF buses, DC system).

B. The operability of these electric power systems as a whole and under conditions as close to design as practical, including the full operational sequence that actuates these systems.

The DC system is provided with detectors to indicate and alarm when there is a ground existing on any part of the system. During plant operation, normal maintenance may be performed.

Provisions for the testing of Class 1E AC electric power systems, Class 1E DC power systems, and the standby power supplies (diesel generators) are described in the TS.

Regulatory Guide 1.108, Revision 1, August 1977, Periodic Testing Of Diesel Generator Units Used As Onsite Electric Power Systems At Nuclear Power Plants This guide describes a method acceptable to the NRC for complying with regulations with regard to periodic testing of diesel electric power units to ensure that the diesel electric power systems will meet their availability requirements.

Discussion This guide has been withdrawn and superseded by Regulatory Guide 1.9, Revision 3, Selection, Design, and Qualification of Diesel-Generator Units Used as Standby (Onsite) Electrical Power Systems at Nuclear Power Plants. Regulatory Guide 1.108 was the original licensing basis for diesel generator testing: however, since the time that Regulatory Guide 1.108 was withdrawn, E-5

Basis for Proposed Changes Regulatory Guide 1.9, Revision 3, has been used in specific instances to revise diesel generator testing requirements for VEGP. Therefore, diesel generator testing requirements at VEGP represent a combination of Regulatory Guide 1.108 and Regulatory Guide 1.9, Revision 3.

Title 10 of the Code of Federal Regulations Part 50.36(c)(3), states: Surveillance requirements are requirements relating to test, calibration, or inspection to assure that the necessary quality of systems and components is maintained, that facility operation will be within safety limits, and that the limiting conditions for operation will be met.

The regulations do not specify details such as special Mode restrictions or allowing the crediting of unplanned events as satisfying a Surveillance Requirement.

The proposed changes are consistent with the regulatory requirements stated above. They do not change the type of testing performed or the frequency of testing performed. They will allow testing to reestablish operability of affected systems.

4.2 Precedent Two recent plant-specific NRC approvals of the changes in TSTF-283-A are:

Edwin I. Hatch Nuclear Plant, Units 1 and 2, dated September 29, 2016 (Reference 2).

Joseph M. Farley Nuclear Plant, Units 1 and 2, dated August 3, 2016 (Reference 3).

These amendments approved a number of TSTFs for these stations, including TSTF-283-A.

4.3 No Significant Hazard Consideration Determination Analysis Southern Nuclear Operating Company (SNC) has evaluated the proposed changes to the Technical Specifications (TS) using the criteria in 10 CFR 50.92 and has determined that the proposed changes do not involve a significant hazards consideration.

The proposed changes modify TS 3.8.1, AC Sources - Operating, and TS 3.8.4, DC Sources

- Operating. Consistent with Technical Specification Task Force (TSTF)-283-A, Notes would be added to allow greater flexibility in performing Surveillance Requirements (SRs) in Modes 1 or 2, or in Modes 1, 2, 3, or 4. The Surveillance Notes will allow full or partial performance of the SRs to re-establish Operability provided an assessment determines the safety of the plant is maintained or enhanced. These Surveillances currently have Notes prohibiting their performance in Modes 1 or 2, or in Modes 1, 2, 3, or 4, as noted in each specific SR.

As required by 10 CFR 50.91(a), the SNC analysis of the issue of no significant hazards consideration is presented below:

1. Does the proposed change involve a significant increase in the probability or consequences of an accident previously evaluated?

Response: No The proposed changes modify Mode restriction Notes to allow performance of the Surveillance in whole or in part to reestablish AC and DC electrical power systems Operability, and to allow the crediting of unplanned events that satisfy the Surveillances.

E-6

Basis for Proposed Changes The AC and DC electrical power systems and their associated emergency loads are accident mitigating features and are not an initiator of any accident previously evaluated. As a result, the probability of any accident previously evaluated is not significantly increased. To manage any increase in risk, the proposed changes require an assessment to verify that plant safety will be maintained or enhanced by performance of the Surveillance in the current prohibited Modes.

The radiological consequences of an accident previously evaluated during the period that the AC and DC electrical power systems are being tested to reestablish Operability are no different from the radiological consequences of an accident previously evaluated while the AC and DC electrical power systems are inoperable. As a result, the consequences of any accident previously evaluated are not increased.

Therefore, the proposed changes do not involve a significant increase in the probability or consequences of an accident previously evaluated.

2. Does the proposed change create the possibility of a new or different kind of accident from any accident previously evaluated?

Response: No The proposed changes do not involve a physical alteration to the plant (i.e., no new or different type of equipment will be installed) or a change to the methods governing normal plant operation. The changes do not alter the assumptions made in the safety analysis.

Therefore, the proposed change does not create the possibility of a new or different kind of accident from any accident previously evaluated.

3. Does the proposed change involve a significant reduction in a margin of safety?

Response: No The purpose of Surveillances is to verify that equipment is capable of performing its assumed safety function. The proposed changes will only allow the performance of the Surveillances to reestablish Operability, and the proposed changes may not be used to remove an AC and DC electrical power system from service. In addition, the proposed changes will potentially shorten the time that an AC and DC electrical power system is unavailable because testing to reestablish Operability can be performed without a plant shutdown. The proposed changes also require an assessment to verify that plant safety will be maintained or enhanced by performance of the Surveillance in the normally prohibited Modes. Therefore, the proposed change does not involve a significant reduction in a margin of safety.

4.4 Conclusion In conclusion, based on the considerations discussed above, SNC concludes: (1) there is reasonable assurance that the health and safety of the public will not be endangered by operation in the proposed manner, (2) such activities will be conducted in compliance with the Commissions regulations, and (3) the issuance of the amendment will not be inimical to the common defense and security or the health and safety of the public.

E-7

Basis for Proposed Changes

5.0 ENVIRONMENTAL CONSIDERATION

The proposed change would change a requirement with respect to installation or use of a facility component located within the restricted area, as defined in 10 CFR Part 20, and would change an inspection or surveillance requirement. However, the proposed change does not involve (i) a significant hazards consideration, (ii) a significant change in the types or significant increase in the amounts of any effluent that may be released offsite, or (iii) a significant increase in individual or cumulative occupational radiation exposure. Accordingly, the proposed change meets the eligibility criterion for categorical exclusion set forth in 10 CFR 51.22(c)(9). Therefore, pursuant to 10 CFR 51.22(b), no environmental impact statement or environmental assessment need be prepared in connection with the proposed change. Accordingly, the amendment meets the eligibility criteria for categorical exclusion set forth in 10 CFR 51.22(c)(9). Pursuant to 10 CFR 51.22(b), no environmental impact statement or environmental assessment need be prepared in connection with the issuance of the amendment.

6.0 REFERENCES

1. Technical Specification Task Force (TSTF)-283-A, Rev 3, "Modification 3.8 Mode Restriction Notes," approved April 13, 2000.
2. Letter from Nuclear Regulatory Commission to SNC, "Edwin I. Hatch Nuclear Plant, Unit Nos. 1 and 2 - Issuance of Amendments Regarding Multiple Technical Specification Changes," dated September 29, 2016. ML16231A041
3. Letter from Nuclear Regulatory Commission to SNC, "Joseph M. Farley Nuclear Plant, Units 1 and 2 - Issuance of Amendments Adopting 21 Previously NRC-Approved TSTF Travelers and One request not Associated with TSTF Travelers," dated August 3, 2016.

ML15233A448 E-8

Southern Nuclear Operating Company Vogtle Electric Generating Plant - Units 1 and 2 Adoption of TSTF-283-A, Revision 3, "Modify Section 3.8 Mode Restriction Notes Attachment 1 Proposed Technical Specification Changes (Marked-up Pages)

AC Sources - Operating 3.8.1 SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY SR 3.8.1.10 ------------------------------NOTES--------------------------

1. All DG starts may be preceded by an engine prelube period.
2. This Surveillance shall not normally be performed in MODE 1, 2, 3, or 4. However, portions of the Surveillance may be performed to reestablish OPERABILITY provided an assessment determines the safety of the plant is maintained or enhanced. cCredit may be taken for unplanned events that satisfy this SR.

In accordance with Verify on an actual or simulated loss of offsite the Surveillance power signal: Frequency Control Program

a. De-energization of emergency buses;
b. Load shedding from emergency buses;
c. DG auto-starts from standby condition and:
1. energizes permanently connected loads in 11.5 seconds,
2. energizes auto-connected shutdown loads through automatic load sequencer,
3. maintains steady state voltage 3750 V and 4330 V,
4. maintains steady state frequency 58.8 Hz and 61.2 Hz, and
5. supplies permanently connected and auto-connected shutdown loads for 5 minutes.

(continued)

Vogtle Units 1 and 2 3.8.1-11 Amendment No. 158 (Unit 1)

Amendment No. 140 (Unit 2)

AC Sources - Operating 3.8.1 SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY SR 3.8.1.11 ------------------------------NOTES--------------------------

1. All DG starts may be preceded by an engine prelube period.
2. This Surveillance shall not normally be performed in MODE 1 or 2. However, portions of the Surveillance may be performed to reestablish OPERABILITY provided an assessment determines the safety of the plant is maintained or enhanced. cCredit may be taken for unplanned events that satisfy this SR.

Verify on an actual or simulated Engineered In accordance with Safety Feature (ESF) actuation signal each DG the Surveillance auto-starts from standby condition and: Frequency Control Program

a. In 11.4 seconds after auto-start and during tests, achieves voltage 3750 V and 4330 V;
b. In 11.4 seconds after auto-start and during tests, achieves frequency 58.8 Hz and 61.2 Hz;
c. Operates for 5 minutes;
d. Permanently connected loads remain energized from the offsite power system; and
e. Emergency loads are energized or auto-connected through the automatic load sequencer from the offsite power system.

(continued)

Vogtle Units 1 and 2 3.8.1-12 Amendment No. 158 (Unit 1)

Amendment No. 140 (Unit 2)

AC Sources - Operating 3.8.1 SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY SR 3.8.1.12 -------------------------------NOTE---------------------------

This Surveillance shall not normally be performed in MODE 1 or 2. However, this Surveillance may be performed to reestablish OPERABILITY provided an assessment determines the safety of the plant is maintained or enhanced. cCredit may be taken for unplanned events that satisfy this SR.

In accordance with Verify each DG's automatic trips are bypassed on the Surveillance actual or simulated loss of voltage signal on the Frequency Control emergency bus concurrent with an actual or Program simulated ESF actuation signal except:

a. Engine overspeed;
b. Generator differential current; and
c. Low lube oil pressure; SR 3.8.1.13 -------------------------------NOTES-------------------------
1. Momentary transients outside the kW and kVAR load ranges do not invalidate this test.
2. Credit may be taken for unplanned events that satisfy this SR.

Verify each DG operates for 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> while In accordance with maintaining voltage 4330 V: the Surveillance Frequency Control

a. For 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> loaded 6900 kW and Program 7700 kW and operating as close as practicable to 3390 kVAR; and
b. For the remaining hours of the test loaded 6500 kW and 7000 kW and operating as close as practicable to 3390 kVAR.

(continued)

Vogtle Units 1 and 2 3.8.1-13 Amendment No. 158 (Unit 1)

Amendment No. 140 (Unit 2)

AC Sources - Operating 3.8.1 SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY SR 3.8.1.14 ------------------------------NOTES--------------------------

1. This Surveillance shall be performed within 5 minutes of shutting down the DG after the DG has operated 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> loaded 6500 kW and 7000 kW.

Momentary transients outside of load range do not invalidate this test.

2. All DG starts may be preceded by an engine prelube period.

Verify each DG starts and achieves, in In accordance with 11.4 seconds, voltage 4025 V, and 4330 V the Surveillance and frequency 58.8 Hz and 61.2 Hz. Frequency Control Program SR 3.8.1.15 -----------------------------NOTE-----------------------------

This Surveillance shall not normally be performed in MODE 1, 2, 3, or 4. However, this Surveillance may be performed to reestablish OPERABILITY provided an assessment determines the safety of the plant is maintained or enhanced. cCredit may be taken for unplanned events that satisfy this SR.

In accordance with Verify each DG: the Surveillance Frequency Control

a. Synchronizes with offsite power source Program while loaded with emergency loads upon a simulated restoration of offsite power;
b. Transfers loads to offsite power source; and
c. Returns to ready-to-load operation.

(continued)

Vogtle Units 1 and 2 3.8.1-14 Amendment No. 158 (Unit 1)

Amendment No. 140 (Unit 2)

AC Sources - Operating 3.8.1 SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY SR 3.8.1.16 -----------------------------NOTE-----------------------------

This Surveillance shall not normally be performed in MODE 1, 2, 3, or 4. However, portions of the Surveillance may be performed to reestablish OPERABILITY provided an assessment determines the safety of the plant is maintained or enhanced. cCredit may be taken for unplanned events that satisfy this SR.

In accordance with Verify, with a DG operating in test mode and the Surveillance connected to its bus, an actual or simulated ESF Frequency Control actuation signal overrides the test mode by: Program

a. Returning DG to ready-to-load operation; and
b. Automatically energizing the emergency load from offsite power.

SR 3.8.1.17 -----------------------------NOTE-----------------------------

This Surveillance shall not normally be performed in MODE 1, 2, 3, or 4. However, this Surveillance may be performed to reestablish OPERABILITY provided an assessment determines the safety of the plant is maintained or enhanced. cCredit may be taken for unplanned events that satisfy this SR.

In accordance with Verify interval between each sequenced load the Surveillance block is within 10% of design interval for each Frequency Control load sequencer. Program (continued)

Vogtle Units 1 and 2 3.8.1-15 Amendment No. 158 (Unit 1)

Amendment No. 140 (Unit 2)

AC Sources - Operating 3.8.1 SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY SR 3.8.1.18 -----------------------------NOTES---------------------------

1. All DG starts may be preceded by an engine prelube period.
2. This Surveillance shall not normally be performed in MODE 1, 2, 3, or 4. However, portions of the Surveillance may be performed to reestablish OPERABILITY provided an assessment determines the safety of the plant is maintained or enhanced. cCredit may be taken for unplanned events that satisfy this SR.

Verify on an actual or simulated loss of offsite In accordance with power signal in conjunction with an actual or the Surveillance simulated ESF actuation signal: Frequency Control Program

a. De-energization of emergency buses;
b. Load shedding from emergency buses; and
c. DG auto-starts from standby condition and:
1. energizes permanently connected loads in 11.5 seconds,
2. energizes auto-connected emergency loads through load sequencer,
3. achieves steady state voltage:

3750 V and 4330 V,

4. achieves steady state frequency:

58.8 Hz and 61.2 Hz, and

5. supplies permanently connected and auto-connected emergency loads for 5 minutes.

(continued)

Vogtle Units 1 and 2 3.8.1-16 Amendment No. 158 (Unit 1)

Amendment No. 140 (Unit 2)

DC Sources - Operating 3.8.4 SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY SR 3.8.4.2 Verify the battery charger supplies: In accordance with 400 amps for System A and B the Surveillance 300 amps for System C, and Frequency Control 200 amps for System D Program at greater than or equal to the minimum established float voltage for 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> for Systems A and B and 3 hours3.472222e-5 days <br />8.333333e-4 hours <br />4.960317e-6 weeks <br />1.1415e-6 months <br /> for Systems C and D.

OR Verify each battery charger can recharge the battery to the fully charged state within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> while supplying the largest combined demands of the various continuous steady state loads, after a battery discharge to the bounding design basis event discharge state.

SR 3.8.4.3 ----------------------------NOTES-----------------------------

1. The modified performance discharge test in SR 3.8.6.6 may be performed in lieu of the service test in SR 3.8.4.3.
2. This Surveillance shall not normally be performed in MODE 1, 2, 3, or 4. However, portions of the Surveillance may be performed to reestablish OPERABILITY provided an assessment determines the safety of the plant is maintained or enhanced. cCredit may be taken for unplanned events that satisfy this SR.

Verify battery capacity is adequate to supply, and In accordance with maintain in OPERABLE status, the required the Surveillance emergency loads for the design duty cycle when Frequency Control subjected to a battery service test. Program Vogtle Units 1 and 2 3.8.4-4 Amendment No. 188 (Unit 1)

Amendment No. 171 (Unit 2)

Southern Nuclear Operating Company Vogtle Electric Generating Plant - Units 1 and 2 Adoption of TSTF-283-A, Revision 3, "Modify Section 3.8 Mode Restriction Notes Attachment 2 Revised Technical Specification Pages

AC Sources - Operating 3.8.1 SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY SR 3.8.1.10 ------------------------------NOTES--------------------------

1. All DG starts may be preceded by an engine prelube period.
2. This Surveillance shall not normally be performed in MODE 1, 2, 3, or 4. However, portions of the Surveillance may be performed to reestablish OPERABILITY provided an assessment determines the safety of the plant is maintained or enhanced. Credit may be taken for unplanned events that satisfy this SR.

In accordance with Verify on an actual or simulated loss of offsite the Surveillance power signal: Frequency Control Program

a. De-energization of emergency buses;
b. Load shedding from emergency buses;
c. DG auto-starts from standby condition and:
1. energizes permanently connected loads in 11.5 seconds,
2. energizes auto-connected shutdown loads through automatic load sequencer,
3. maintains steady state voltage 3750 V and 4330 V,
4. maintains steady state frequency 58.8 Hz and 61.2 Hz, and
5. supplies permanently connected and auto-connected shutdown loads for 5 minutes.

(continued)

Vogtle Units 1 and 2 3.8.1-11 Amendment No. (Unit 1)

Amendment No. (Unit 2)

AC Sources - Operating 3.8.1 SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY SR 3.8.1.11 ------------------------------NOTES--------------------------

1. All DG starts may be preceded by an engine prelube period.
2. This Surveillance shall not normally be performed in MODE 1 or 2. However, portions of the Surveillance may be performed to reestablish OPERABILITY provided an assessment determines the safety of the plant is maintained or enhanced. Credit may be taken for unplanned events that satisfy this SR.

Verify on an actual or simulated Engineered In accordance with Safety Feature (ESF) actuation signal each DG the Surveillance auto-starts from standby condition and: Frequency Control Program

a. In 11.4 seconds after auto-start and during tests, achieves voltage 3750 V and 4330 V;
b. In 11.4 seconds after auto-start and during tests, achieves frequency 58.8 Hz and 61.2 Hz;
c. Operates for 5 minutes;
d. Permanently connected loads remain energized from the offsite power system; and
e. Emergency loads are energized or auto-connected through the automatic load sequencer from the offsite power system.

(continued)

Vogtle Units 1 and 2 3.8.1-12 Amendment No. (Unit 1)

Amendment No. (Unit 2)

AC Sources - Operating 3.8.1 SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY SR 3.8.1.12 -------------------------------NOTE---------------------------

This Surveillance shall not normally be performed in MODE 1 or 2. However, this Surveillance may be performed to reestablish OPERABILITY provided an assessment determines the safety of the plant is maintained or enhanced. Credit may be taken for unplanned events that satisfy this SR.

Verify each DG's automatic trips are bypassed on In accordance with actual or simulated loss of voltage signal on the the Surveillance emergency bus concurrent with an actual or Frequency Control simulated ESF actuation signal except: Program

a. Engine overspeed;
b. Generator differential current; and
c. Low lube oil pressure; SR 3.8.1.13 -------------------------------NOTES-------------------------
1. Momentary transients outside the kW and kVAR load ranges do not invalidate this test.
2. Credit may be taken for unplanned events that satisfy this SR.

Verify each DG operates for 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> while maintaining voltage 4330 V: In accordance with the Surveillance

b. For 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> loaded 6900 kW and Frequency Control 7700 kW and operating as close as Program practicable to 3390 kVAR; and
b. For the remaining hours of the test loaded 6500 kW and 7000 kW and operating as close as practicable to 3390 kVAR.

(continued)

Vogtle Units 1 and 2 3.8.1-13 Amendment No. (Unit 1)

Amendment No. (Unit 2)

AC Sources - Operating 3.8.1 SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY SR 3.8.1.14 ------------------------------NOTES--------------------------

1. This Surveillance shall be performed within 5 minutes of shutting down the DG after the DG has operated 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> loaded 6500 kW and 7000 kW.

Momentary transients outside of load range do not invalidate this test.

2. All DG starts may be preceded by an engine prelube period.

Verify each DG starts and achieves, in In accordance with 11.4 seconds, voltage 4025 V, and 4330 V the Surveillance and frequency 58.8 Hz and 61.2 Hz. Frequency Control Program SR 3.8.1.15 -----------------------------NOTE-----------------------------

This Surveillance shall not normally be performed in MODE 1, 2, 3, or 4. However, this Surveillance may be performed to reestablish OPERABILITY provided an assessment determines the safety of the plant is maintained or enhanced. Credit may be taken for unplanned events that satisfy this SR.

In accordance with Verify each DG: the Surveillance Frequency Control

a. Synchronizes with offsite power source Program while loaded with emergency loads upon a simulated restoration of offsite power;
b. Transfers loads to offsite power source; and
c. Returns to ready-to-load operation.

(continued)

Vogtle Units 1 and 2 3.8.1-14 Amendment No. (Unit 1)

Amendment No. (Unit 2)

AC Sources - Operating 3.8.1 SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY SR 3.8.1.16 -----------------------------NOTE-----------------------------

This Surveillance shall not normally be performed in MODE 1, 2, 3, or 4. However, portions of the Surveillance may be performed to reestablish OPERABILITY provided an assessment determines the safety of the plant is maintained or enhanced. Credit may be taken for unplanned events that satisfy this SR.

In accordance with Verify, with a DG operating in test mode and the Surveillance connected to its bus, an actual or simulated ESF Frequency Control actuation signal overrides the test mode by: Program

a. Returning DG to ready-to-load operation; and
b. Automatically energizing the emergency load from offsite power.

SR 3.8.1.17 -----------------------------NOTE-----------------------------

This Surveillance shall not normally be performed in MODE 1, 2, 3, or 4. However, this Surveillance may be performed to reestablish OPERABILITY provided an assessment determines the safety of the plant is maintained or enhanced. Credit may be taken for unplanned events that satisfy this SR.

In accordance with Verify interval between each sequenced load the Surveillance block is within +/- 10% of design interval for each Frequency Control load sequencer. Program (continued)

Vogtle Units 1 and 2 3.8.1-15 Amendment No. (Unit 1)

Amendment No. (Unit 2)

AC Sources - Operating 3.8.1 SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY SR 3.8.1.18 -----------------------------NOTES---------------------------

1. All DG starts may be preceded by an engine prelube period.
2. This Surveillance shall not normally be performed in MODE 1, 2, 3, or 4. However, portions of the Surveillance may be performed to reestablish OPERABILITY provided an assessment determines the safety of the plant is maintained or enhanced. Credit may be taken for unplanned events that satisfy this SR.

Verify on an actual or simulated loss of offsite In accordance with power signal in conjunction with an actual or the Surveillance simulated ESF actuation signal: Frequency Control Program

a. De-energization of emergency buses;
b. Load shedding from emergency buses; and
c. DG auto-starts from standby condition and:
1. energizes permanently connected loads in 11.5 seconds,
2. energizes auto-connected emergency loads through load sequencer,
3. achieves steady state voltage:

3750 V and 4330 V,

4. achieves steady state frequency:

58.8 Hz and 61.2 Hz, and

5. supplies permanently connected and auto-connected emergency loads for 5 minutes.

(continued)

Vogtle Units 1 and 2 3.8.1-16 Amendment No. (Unit 1)

Amendment No. (Unit 2)

DC Sources - Operating 3.8.4 SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY SR 3.8.4.2 Verify the battery charger supplies: In accordance with 400 amps for System A and B the Surveillance 300 amps for System C, and Frequency Control 200 amps for System D Program at greater than or equal to the minimum established float voltage for 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> for Systems A and B and 3 hours3.472222e-5 days <br />8.333333e-4 hours <br />4.960317e-6 weeks <br />1.1415e-6 months <br /> for Systems C and D.

OR Verify each battery charger can recharge the battery to the fully charged state within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> while supplying the largest combined demands of the various continuous steady state loads, after a battery discharge to the bounding design basis event discharge state.

SR 3.8.4.3 ----------------------------NOTES-----------------------------

1. The modified performance discharge test in SR 3.8.6.6 may be performed in lieu of the service test in SR 3.8.4.3.
2. This Surveillance shall not normally be performed in MODE 1, 2, 3, or 4. However, portions of the Surveillance may be performed to reestablish OPERABILITY provided an assessment determines the safety of the plant is maintained or enhanced. Credit may be taken for unplanned events that satisfy this SR.

Verify battery capacity is adequate to supply, and In accordance with maintain in OPERABLE status, the required the Surveillance emergency loads for the design duty cycle when Frequency Control subjected to a battery service test. Program Vogtle Units 1 and 2 3.8.4-4 Amendment No. (Unit 1)

Amendment No. (Unit 2)

Southern Nuclear Operating Company Vogtle Electric Generating Plant - Units 1 and 2 Adoption of TSTF-283-A, Revision 3, "Modify Section 3.8 Mode Restriction Notes Attachment 3 Proposed Technical Specification Bases Changes (Marked-up Pages)

For Information Only

AC Sources - Operating B 3.8.1 BASES SURVEILLANCE SR 3.8.1.10 (continued)

REQUIREMENTS This SR is modified by two Notes. The reason for Note 1 is to minimize wear and tear on the DGs during testing. For the purpose of this testing, the DGs must be started from standby conditions, that is, with the engine coolant and oil continuously circulated and temperature maintained consistent with manufacturer recommendations. The reason for Note 2 is that performing the Surveillance would remove a required offsite circuit from service, perturb the electrical distribution system, and challenge safety systems. This restriction from normally performing the Surveillance in MODE 1, 2, 3, or 4 is further amplified to allow portions of the Surveillance to be performed for the purpose of reestablishing OPERABILITY (e.g. post work testing following corrective maintenance, corrective modification, deficient or incomplete surveillance testing, or other unanticipated OPERABILITY concerns) provided an assessment determines plant safety is maintained or enhanced. This assessment shall, as a minimum, consider the potential outcomes and transients associated with a failed partial Surveillance, a successful partial Surveillance, and a perturbation of the offsite or onsite system when they are tied together or operated independently for the partial Surveillance; as well as the operator procedures available to cope with these outcomes. These shall be measured against the avoided risk of a plant shutdown and startup to determine that plant safety is maintained or enhanced when portions of the Surveillance are performed in MODE 1, 2, 3, or 4. Risk insights or deterministic methods may be used for this assessment. Credit may be taken for unplanned events that satisfy this SR. Examples of unplanned events may include:

1. Unexpected operational events which cause the equipment to perform the function specified by this Surveillance, for which adequate documentation of the required performance is available; and
2. Post Corrective maintenance testing that requires performance of this Surveillance in order to restore the component to OPERABLE, provided the maintenance was required, or performed in conjunction with maintenance required to maintain OPERABILITY or reliability.

SR 3.8.1.11 This Surveillance demonstrates that the DG automatically starts and achieves the required voltage and frequency within the specified time (11.4 seconds) from the design basis actuation signal (LOCA signal) and operates for 5 minutes. The 5 minute period provides sufficient time to demonstrate stability. SR 3.8.1.11.d and SR 3.8.1.11.e ensure Vogtle Units 1 and 2 B 3.8.1-22 Revision No. 48

AC Sources - Operating B 3.8.1 that permanently connected loads and emergency loads are energized from the offsite electrical power system on an ESF signal without loss of offsite power.

The requirement to verify the connection of permanent and autoconnected loads is intended to satisfactorily show the relationship of these loads to the DG loading logic. In certain circumstances, many of these loads cannot actually be connected or loaded without undue hardship or potential (continued)

Vogtle Units 1 and 2 B 3.8.1-22 Revision No. 48

AC Sources - Operating B 3.8.1 BASES SURVEILLANCE SR 3.8.1.11 (continued)

REQUIREMENTS for undesired operation. For instance, ECCS injection valves are not desired to be stroked open, or high pressure injection systems are not capable of being operated at full flow, or RHR systems performing a decay heat removal function are not desired to be realigned to the ECCS mode of operation. In lieu of actual demonstration of connection and loading of loads, testing that adequately shows the capability of the DG system to perform these functions is acceptable.

This testing may include any series of sequential, overlapping, or total steps so that the entire connection and loading sequence is verified.

The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.

This SR is modified by two Notes. The reason for Note 1 is to minimize wear and tear on the DGs during testing. For the purpose of this testing, the DGs must be started from standby conditions, that is, with the engine coolant and oil continuously circulated and temperature maintained consistent with manufacturer recommendations. The reason for Note 2 is that during operation with the reactor critical, performance of this Surveillance could cause perturbations to the electrical distribution systems that could challenge continued steady state operation and, as a result, unit safety systems.

This restriction from normally performing the Surveillance in MODE 1, or 2 is further amplified to allow portions of the Surveillance to be performed for the purpose of reestablishing OPERABILITY (e.g. post work testing following corrective maintenance, corrective modification, deficient or incomplete surveillance testing, or other unanticipated OPERABILITY concerns) provided an assessment determines plant safety is maintained or enhanced. This assessment shall, as a minimum, consider the potential outcomes and transients associated with a failed partial Surveillance, a successful partial Surveillance, and a perturbation of the offsite or onsite system when they are tied together or operated independently for the partial Surveillance; as well as the operator procedures available to cope with these outcomes.

These shall be measured against the avoided risk of a plant shutdown and startup to determine that plant safety is maintained or enhanced when portions of the Surveillance are performed in MODE 1, or 2.

Risk insights or deterministic methods may be used for this assessment. Credit may be taken for unplanned events that satisfy this SR. Examples of unplanned events may include:

1. Unexpected operational events which cause the equipment to perform the function specified by this Surveillance, for which adequate documentation of the required performance is available; and (continued)

Vogtle Units 1 and 2 B 3.8.1-24 Revision No. 48

AC Sources - Operating B 3.8.1 BASES SURVEILLANCE SR 3.8.1.11 (continued)

REQUIREMENTS

2. Post Corrective maintenance testing that requires performance of this Surveillance in order to restore the component to OPERABLE, provided the maintenance was required, or performed in conjunction with maintenance required to maintain OPERABILITY or reliability.

SR 3.8.1.12 This Surveillance demonstrates that DG noncritical protective functions (e.g., high jacket water temperature) are bypassed on a loss of voltage signal concurrent with an ESF actuation test signal. The noncritical trips are bypassed during DBAs and provide an alarm on an abnormal engine condition. This alarm provides the operator with sufficient time to react appropriately. The DG availability to mitigate the DBA is more critical than protecting the engine against minor problems that are not immediately detrimental to emergency operation of the DG.

The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.

The SR is modified by a Note. The reason for the Note is that performing the Surveillance would remove a required DG from service. This restriction from normally performing the Surveillance in MODE 1, or 2 is further amplified to allow the Surveillance to be performed for the purpose of reestablishing OPERABILITY (e.g. post work testing following corrective maintenance, corrective modification, deficient or incomplete surveillance testing, or other unanticipated OPERABILITY concerns) provided an assessment determines plant safety is maintained or enhanced. This assessment shall, as a minimum, consider the potential outcomes and transients associated with a failed Surveillance, a successful Surveillance, and a perturbation of the offsite or onsite system when they are tied together or operated independently for the Surveillance; as well as the operator procedures available to cope with these outcomes. These shall be measured against the avoided risk of a plant shutdown and startup to determine that plant safety is maintained or enhanced when the Surveillance is performed in MODE 1, or 2. Risk insights or deterministic methods may be used for this assessment. Credit may be taken for unplanned events that satisfy this SR. Examples of unplanned events may include:

1. Unexpected operational events which cause the equipment to perform the function specified by this Surveillance, for which adequate documentation of the required performance is available; and (continued)

Vogtle Units 1 and 2 B 3.8.1-25 Rev. 48

AC Sources - Operating B 3.8.1 BASES SURVEILLANCE SR 3.8.1.14 (continued)

REQUIREMENTS conditions. Momentary transients due to changing bus loads do not invalidate this test. Note 2 allows all DG starts to be preceded by an engine prelube period to minimize wear and tear on the diesel during testing.

SR 3.8.1.15 As required by Regulatory Guide 1.108 (Ref. 9), paragraph 2.a.(6),

this Surveillance ensures that the manual synchronization and automatic load transfer from the DG to the offsite source can be made and the DG can be returned to ready to load status when offsite power is restored. It also ensures that the autostart logic is reset to allow the DG to reload if a subsequent loss of offsite power occurs.

The DG is considered to be in ready to load status when the DG is at rated speed and voltage, the output breaker is open and can receive an autoclose signal on bus undervoltage, and the load sequence timers are reset.

The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.

This SR is modified by a Note. The reason for the Note is that performing the Surveillance would remove a required offsite circuit from service, perturb the electrical distribution system, and challenge safety systems. This restriction from normally performing the Surveillance in MODE 1, 2, 3, or 4 is further amplified to allow the Surveillance to be performed for the purpose of reestablishing OPERABILITY (e.g. post work testing following corrective maintenance, corrective modification, deficient or incomplete surveillance testing, or other unanticipated OPERABILITY concerns) provided an assessment determines plant safety is maintained or enhanced. This assessment shall, as a minimum, consider the potential outcomes and transients associated with a failed Surveillance, a successful Surveillance, and a perturbation of the offsite or onsite system when they are tied together or operated independently for the Surveillance; as well as the operator procedures available to cope with these outcomes. These shall be measured against the avoided risk of a plant shutdown and startup to determine that plant safety is maintained or enhanced when the Surveillance is performed in MODE 1, 2, 3, or 4. Risk insights or deterministic methods may be used for this assessment. Credit may be taken for unplanned events that satisfy this SR. Examples of unplanned events may include:

1. Unexpected operational events which cause the equipment to perform the function specified by this Surveillance, for which Vogtle Units 1 and 2 B 3.8.1-28 Rev. 48

AC Sources - Operating B 3.8.1 adequate documentation of the required performance is available; and

2. Post Corrective maintenance testing that requires performance of this Surveillance in order to restore the component to OPERABLE, provided the maintenance was required, or performed in conjunction with maintenance required to maintain OPERABILITY or reliability.

(continued)

Vogtle Units 1 and 2 B 3.8.1-28 Rev. 48

AC Sources - Operating B 3.8.1 BASES SURVEILLANCE SR 3.8.1.16 REQUIREMENTS (continued) Demonstration of the test mode override ensures that the DG availability under accident conditions will not be compromised as the result of testing and the DG will automatically reset to ready to load operation if a LOCA actuation signal is received during operation in the test mode. Ready to load operation is defined as the DG running at rated speed and voltage with the DG output breaker open. These provisions for automatic switchover are required by IEEE-308 (Ref. 11), paragraph 6.2.6(2).

The requirement to automatically energize the emergency loads with offsite power is essentially identical to that of SR 3.8.1.11. The intent in the requirement associated with SR 3.8.1.16.b is to show that the emergency loading was not affected by the DG operation in test mode. In lieu of actual demonstration of connection and loading of loads, testing that adequately shows the capability of the emergency loads to perform these functions is acceptable. This testing may include any series of sequential, overlapping, or total steps so that the entire connection and loading sequence is verified.

The Surveillance Frequency is controlled by the Surveillance Frequency Control Program.

This SR is modified by a Note. The reason for the Note is that performing the Surveillance would remove a required offsite circuit from service, perturb the electrical distribution system, and challenge safety systems. This restriction from normally performing the Surveillance in MODE 1, 2, 3, or 4 is further amplified to allow portions of the Surveillance to be performed for the purpose of reestablishing OPERABILITY (e.g. post work testing following corrective maintenance, corrective modification, deficient or incomplete surveillance testing, or other unanticipated OPERABILITY concerns) provided an assessment determines plant safety is maintained or enhanced. This assessment shall, as a minimum, consider the potential outcomes and transients associated with a failed partial Surveillance, a successful partial Surveillance, and a perturbation of the offsite or onsite system when they are tied together or operated independently for the partial Surveillance; as well as the operator procedures available to cope with these outcomes. These shall be measured against the avoided risk of a plant shutdown and startup to determine that plant safety is maintained or enhanced when portions of the Surveillance are performed in MODE 1, 2, 3, or 4. Risk insights or deterministic methods may be used for this assessment. Credit may be taken for unplanned events that satisfy this SR. Examples of unplanned events may include:

1. Unexpected operational events which cause the equipment to perform the function specified by this Surveillance, for which Vogtle Units 1 and 2 B 3.8.1-29 Rev. 48

AC Sources - Operating B 3.8.1 adequate documentation of the required performance is available; and (continued)

Vogtle Units 1 and 2 B 3.8.1-29 Rev. 48

AC Sources - Operating B 3.8.1 BASES SURVEILLANCE SR 3.8.1.16 (continued)

REQUIREMENTS

2. Post Corrective maintenance testing that requires performance of this Surveillance in order to restore the component to OPERABLE, provided the maintenance was required, or performed in conjunction with maintenance required to maintain OPERABILITY or reliability.

SR 3.8.1.17 Under accident and loss of offsite power conditions, loads are sequentially connected to the bus by the automatic load sequencer.

The sequencing logic controls the permissive and starting signals to motor breakers to prevent overloading of the DGs due to high motor starting currents. The 10% load sequence time interval tolerance ensures that sufficient time exists for the DG to restore frequency and voltage prior to applying the next load and that safety analysis assumptions regarding ESF equipment time delays are not violated.

Reference 2 provides a summary of the automatic loading of ESF buses.

The Surveillance Frequency is controlled by the Surveillance Frequency Control Program.

This SR is modified by a Note. The reason for the Note is that performing the Surveillance would remove a required offsite circuit from service, perturb the electrical distribution system, and challenge safety systems. This restriction from normally performing the Surveillance in MODE 1, 2, 3, or 4 is further amplified to allow the Surveillance to be performed for the purpose of reestablishing OPERABILITY (e.g. post work testing following corrective maintenance, corrective modification, deficient or incomplete surveillance testing, or other unanticipated OPERABILITY concerns) provided an assessment determines plant safety is maintained or enhanced. This assessment shall, as a minimum, consider the potential outcomes and transients associated with a failed Surveillance, a successful Surveillance, and a perturbation of the offsite or onsite system when they are tied together or operated independently for the Surveillance; as well as the operator procedures available to cope with these outcomes. These shall be measured against the avoided risk of a plant shutdown and startup to determine that plant safety is maintained or enhanced when the Surveillance is performed in MODE 1, 2, 3, or 4. Risk insights or deterministic methods may be used for this assessment. Credit may be taken for unplanned events that satisfy this SR. Examples of unplanned events may include:

Vogtle Units 1 and 2 B 3.8.1-30 Rev. 48

AC Sources - Operating B 3.8.1

1. Unexpected operational events which cause the equipment to perform the function specified by this Surveillance, for which adequate documentation of the required performance is available; and (continued)

Vogtle Units 1 and 2 B 3.8.1-30 Rev. 48

AC Sources - Operating B 3.8.1 BASES SURVEILLANCE SR 3.8.1.17 (continued)

REQUIREMENTS

2. Post Corrective maintenance testing that requires performance of this Surveillance in order to restore the component to OPERABLE, provided the maintenance was required, or performed in conjunction with maintenance required to maintain OPERABILITY or reliability.

SR 3.8.1.18 In the event of a DBA coincident with a loss of offsite power, the DGs are required to supply the necessary power to ESF systems so that the fuel, RCS, and containment design limits are not exceeded.

This Surveillance demonstrates the DG operation, as discussed in the Bases for SR 3.8.1.10, during a loss of offsite power actuation test signal in conjunction with an ESF actuation signal. In lieu of actual demonstration of connection and loading of loads, testing that adequately shows the capability of the DG system to perform these functions is acceptable. This testing may include any series of sequential, overlapping, or total steps so that the entire connection and loading sequence is verified.

The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.

This SR is modified by two Notes. The reason for Note 1 is to minimize wear and tear on the DGs during testing. For the purpose of this testing, the DGs must be started from standby conditions, that is, with the engine coolant and oil continuously circulated and temperature maintained consistent with manufacturer recommendations for DGs. The reason for Note 2 is that the performance of the Surveillance would remove a required offsite circuit from service, perturb the electrical distribution system, and challenge safety systems.. This restriction from normally performing the Surveillance in MODE 1, 2, 3, or 4 is further amplified to allow portions of the Surveillance to be performed for the purpose of reestablishing OPERABILITY (e.g. post work testing following corrective maintenance, corrective modification, deficient or incomplete surveillance testing, or other unanticipated OPERABILITY concerns) provided an assessment determines plant safety is maintained or enhanced. This assessment shall, as a minimum, consider the potential outcomes and transients associated with a failed partial Surveillance, a successful partial Surveillance, and a perturbation of the offsite or onsite system when they are tied together or operated independently for the partial Surveillance; as well as the operator procedures available to cope with these outcomes. These shall be measured against the avoided risk of a plant shutdown and Vogtle Units 1 and 2 B 3.8.1-31 Rev. 48

AC Sources - Operating B 3.8.1 startup to determine that plant safety is maintained or enhanced when portions of the Surveillance are performed in MODE 1, 2, 3, or 4. Risk insights or deterministic methods may be used for this assessment.

Credit may be taken for unplanned events that satisfy this SR.

Examples of unplanned events may include:

(continued)

Vogtle Units 1 and 2 B 3.8.1-31 Rev. 48

DC Sources - Operating B 3.8.4 BASES SURVEILLANCE SR 3.8.4.3 (continued)

REQUIREMENTS The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.

This SR is modified by two Notes. Note 1 allows the performance of a modified performance discharge test in lieu of a service test.

The reason for Note 2 is that performing the Surveillance would perturb the electrical distribution system and challenge safety systems. This restriction from normally performing the Surveillance in MODE 1, 2, 3, or 4 is further amplified to allow portions of the Surveillance to be performed for the purpose of reestablishing OPERABILITY (e.g. post work testing following corrective maintenance, corrective modification, deficient or incomplete surveillance testing, or other unanticipated OPERABILITY concerns) provided an assessment determines plant safety is maintained or enhanced. This assessment shall, as a minimum, consider the potential outcomes and transients associated with a failed partial Surveillance, a successful partial Surveillance, and a perturbation of the offsite or onsite system when they are tied together or operated independently for the partial Surveillance; as well as the operator procedures available to cope with these outcomes. These shall be measured against the avoided risk of a plant shutdown and startup to determine that plant safety is maintained or enhanced when portions of the Surveillance are performed in MODE 1, 2, 3, or 4. Risk insights or deterministic methods may be used for this assessment. Credit may be taken for unplanned events that satisfy this SR. Examples of unplanned events may include:

1. Unexpected operational events which cause the equipment to perform the function specified by this Surveillance, for which adequate documentation of the required performance is available;
2. Post Corrective maintenance testing that requires performance of this Surveillance in order to restore the component to OPERABLE, provided the maintenance was required, or performed in conjunction with maintenance required to maintain OPERABILITY or reliability.

REFERENCES 1. IEEE-308-1978.

2. 10 CFR 50, Appendix A, GDC 17.
3. IEEE-485-1983, June 1983.
4. FSAR, Chapter 8.
5. Regulatory Guide 1.32, February 1977.
6. FSAR, Chapter 6.

Vogtle Units 1 and 2 B 3.8.4-11 Rev. 48

DC Sources - Operating B 3.8.4

7. FSAR, Chapter 15.
8. Regulatory Guide 1.93, December 1974.
9. WCAP-16294-NP-A, Rev. 1, Risk-Informed Evaluation of Changes to Technical Specification Required Action Endstates for Westinghouse NSSS PWRs, June 2010.

(continued)

Vogtle Units 1 and 2 B 3.8.4-11 Rev. 48