NRC-07-0029, Response to Request for Additional Information Regarding License Amendment Request for Extension of Completion Time for an Inoperable Emergency Diesel Generator

From kanterella
(Redirected from NRC-07-0029)
Jump to navigation Jump to search

Response to Request for Additional Information Regarding License Amendment Request for Extension of Completion Time for an Inoperable Emergency Diesel Generator
ML071500114
Person / Time
Site: Fermi DTE Energy icon.png
Issue date: 05/23/2007
From: Plona J
Detroit Edison
To:
Document Control Desk, NRC/NRR/ADRO
References
NRC-07-0029
Download: ML071500114 (43)


Text

Joseph R Plona Site Vice President 6400 N. Dixie Highway, Newport, MI 48166 Tel: 734.586.5910 Fax: 734..586.4172 Detroit Edison A DTE Energy Company May 23, 2007 10 CFR 50.90 NRC-07-0029 U. S. Nuclear Regulatory Commission Attention: Document Control Desk Washington D C 20555-0001

References:

1) Fermi 2 NRG Doc-ket No; 50-341 NRC License No. NPF-43
2) Detroit Edison Letter to NRC, "Proposed License Amendment Request to Extend the Completion Time for Technical Specification 3.8.1 for an Inoperable Emergency Diesel Generator," NRC-06-0040, dated July 12, 2006
3) Detroit Edison Letter to NRC, "Response to Request for Additional Information Regarding License Amendment Request for Extension of Completion Time for an Inoperable Emergency Diesel Generator -

Probabilistic Risk Assessment Questions," NRC-07-0014, dated April 25, 2007

Subject:

Response to Request for Additional Information Regarding License Amendment Request for Extension of Completion Time for an Inoperable Emergency Diesel Generator In Reference 2, Detroit Edison requested NRC approval of a proposed license amendment that requests an extension of the completion time for Fermi 2 Emergency Diesel Generators (EDGs) from 7 to 14 days. In Reference 3, Detroit Edison submitted responses to a request for additional information concerning the probabilistic risk assessment.

In a November 27, 2006 electronic communication, the NRC asked for additional information needed for NRC review of the proposed changes. provides Detroit Edison's response to the NRC request for additional information. Enclosure 2 provides the marked up pages of the existing Technical Specifications (TS) to show the proposed changes. Enclosure 3 provides a typed version of the affected TS pages with the proposed changes incorporated. Enclosure 4 provides AeoI

USNRC NRC-07-0029 May 23, 2007 Page 2 marked up pages of the existing TS Bases showing the proposed changes (for information only).

The supplemental information provided in this letter does not impact the conclusions of the Determination of No Significant Hazards Consideration and Environmental Assessment presented in the July 12, 2006 submittal (Reference 2) as supplemented April 25, 2007 (Reference 3).

There are no new regulatory commitments associated with this letter.

If you have any questions regarding this submittal, please contact Ronald W. Gaston at (734) 586-5197.

Sincerely,

Enclosures:

1. Response to Request for Additional Information
2. Marked Up Existing TS Pages
3. Typed Proposed TS Pages
4. Marked Up TS Bases Pages (For Information Only) cc:

NRC Project Manager Reactor Projects Chief, Branch 4, Region III NRC Resident Office Regional Administrator, Region III Supervisor, Electric Operators, Michigan Public Service Commission

USNRC NRC-07-0029 May 23, 2007 Page 3 I, Joseph H. Plona, do hereby affirm that the foregoing statements are based on facts and circumstances which are true and accurate to the best of my knowledge and belief.

I, J. H. Plona Site Vice President Nuclear Generation On this

_- 'U day of May, 2007 before me personally appeared Joseph H. Plona, being first duly sworn and says that he executed the foregoing as his free act and deed.

?Coary Publicý NKE AFWMA Kinamwimmoow-WM Oct 11, 2Wý

ENCLOSURE I to NRC-07-0029 FERMI 2 NUCLEAR POWER PLANT Response To Request For Additional Information to NRC-07-0029 Page 2

RAI 1

The staff has required in the past that the power source that will be available as a backup to the inoperable EDG must have capacity equal to or greater than the capacity of the inoperable EDG. In addition, the Technical Specifications (TS) should contain requirements to demonstrate by testing, before taking one EDG out of operation for an extended period, that the power source is available and functional and the TS should contain requirements to take action when the power source becomes unavailable during the extended EDG outage duration. Please discuss how the above NRC staff requirements would be satisfied RAI 1 Response The nominal rating of CTG 11 Unit 1 (CTG 11-1) is 18 MW and the summer capacity rating is 15.55 MW (15,550 kW) at an ambient air temperature of 80 degrees Fahrenheit (F). This capacity exceeds the individual Emergency Diesel Generator (EDG) continuous and short term ratings of 2850kW and 3135kW respectively.

Testing of CTG 11-1 is currently required every 31 days by the Fermi 2 Technical Requirements Manual. This testing requires that the CTG starts and supplies at least 10MW to the peaker bus. Technical Specification (TS) 3.8.1 REQUIRED ACTION A.3 verifies the status of CTG 11-1. As part of work planning processes, this status would also be verified prior to taking an EDG out of service for an extended period. In addition, REQUIRED ACTION A.5 requires that CTG 11-1 be restored within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> (if it is or becomes unavailable). Detroit Edison had originally proposed the elimination of these actions, however, Detroit Edison now intends to retain these actions. See Enclosures 2 and 3 for proposed markup and retyped versions of the affected TS pages and Enclosure 4 for markup pages of the existing TS BASES (for information only).

RAI 2

Since the Combustion Turbine Generator (CTG) 11-1 is being used as a backup to an inoperable EDG during the extended EDG outage, please provide the following information:

RAI 2.a What is the capacity of the CTG 11-1?

RAI 2.a Response The nominal rating of CTG 11 Unit 1 (CTG 11-1) is 18 MW and the summer capacity rating is 15.55 MW (15,550 kW) at an ambient air temperature of 80 degrees Fahrenheit (F).

to NRC-07-0029 Page 3 RAI 2.b Specify the time it will take to manually connect the CTG 11-I to the safety bus.

RAI 2.b Response CTG 11-1 can be started and manually connected to the division 1 safety buses in approximately 29 minutes.

RAI 2.c Does CTG 11-1 meet the requirements of NUMARC 87-00, Appendix B and RG 1.155?

RAI 2.c Response CTG 11-1 meets the requirements of NUMARC 87-00, Appendix B and RG 1.155.

Fermi 2 UFSAR section A.1.155, "Regulatory Guide 1.155 (August 1988), Station Blackout" states Fermi 2 has an Alternate AC (AAC) power supply available on site that can be started from the Fermi 2 control center and switched to the plant onsite ac power system in less than one (1) hour. The AAC power supply CTG 11-1 is located near the plant's 120 kV switchyard. The AAC power system is inspected and tested periodically to demonstrate availability and reliability.

RAI 2.d Are CTG 11-1 system components in a maintenance and monitoring program?

RAI 2.d Response Performance of CTG 11-1 is monitored in the Fermi 2 Maintenance Rule Program.

Periodic preventive maintenance is performed on CTG 11-1. Testing is currently required every 31 days by the Fermi 2 Technical Requirements Manual. This testing requires that the CTG starts and supplies loads to the peaker bus.

to NRC-07-0029 Page 4 RAI 2.e Please specify loads it will be powering and their power requirements.

RAI 2.e Response CTG 11-1 can be connected to System Service Transformer 64, which is the normal (offsite) source of power for the division 1 safety related loads. It is capable of supplying power to equipment that would be energized by the division 1 EDGs (EDG 11 and 12) in the event of a loss of offsite power to this equipment. In addition, because the capacity of CTG 11-1 exceeds the combined loads for the division 1 EDGs, additional plant equipment that is fed from System Service Transformer 64 can be energized as necessary to support operation in accordance with abnormal and emergency operating procedures.

RAI 3

Please discuss what type of communication protocol has been established between the control room operator at Fermi and the transmission system operator? Is the transmission system operator notified in advance that the EDG is going to be taken out for extended period of time?

RAI 3 Response The "Nuclear Plant Operating Agreement for the Fermi 2 Nuclear Plant" between Detroit Edison Company, International Transmission Company (ITC), and Midwest Independent System Operator (MISO) requires shiftly communication to ITC to verify the status of offsite lines and any planned transmission system maintenance that could affect availability of the offsite lines. The agreement also requires that ITC immediately (within 15 minutes) inform Fermi 2 if emergent grid conditions develop that could jeopardize offsite power reliability.

ITC is not currently notified in advance that an EDG is going to be taken out of service for an extended period of time to NRC-07-0029 Page 5

RAI 4

Discuss and provide information on the reliability and availability of offsite power sources relating to the proposed change. The discussion should include duration, cause, date and time of each loss-of-offsite power (partial or complete) event.

RAI 4 Response Fermi offsite power is supplied by five transmission lines. Three of these are parallel 120kV lines that connect to a switchyard near the CTGs south of Fermi 1 (which is south of Fermi 2). This switchyard is the offsite power source for division 1 via System Service Transformer 64 (SS64). The remaining 2 lines are parallel 345kV lines that connect to a switchyard west of the Fermi 2 power block. This switchyard is the offsite power source for division 2 via System Service Transformer 65 (SS65). Fermi 2 generator output is fed into the 345kV system in this switchyard via parallel main transformers 2A and 2B. These diversely fed and physically separate switchyards reduce the likelihood that any single event, such as a fault in one of the switchyards, would result in the complete loss of offsite power (LOOP).

The following events have been experienced at Fermi 2:

Partial /

LER Full No.

LOOP Date Time Duration Cause Ground fault at 13.8kV feed breaker Partial -

position D. Found defective seal on 85-001 Div 1 only 3/28/1985 23:45 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> 30 minutes ducting at top of enclosure.

Ground fault at 13.8kV feed breaker Partial -

position D. Found defective seal on 85-002 Div I only 3/31/1985 06:45 30 minutes ducting at top of enclosure.

Partial -

Animal intrusion onto 120 kV matt,88-019 Div I only 5/7/1988 1:38 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> 8 minutes loss of transformer #1.

Partial -

Moisture intrusion Phase Z,89-003 Div 1 only 1/10/1989 8:25 15 minutes Transformer #1.

Fault on Fermi-Swan Creek 120 kV Feed (1 of 3 120 kV feeds), isolation Partial -

breaker failure to open (water 94-001 Div 1 only 1/27/1994 13:05 3 hours3.472222e-5 days <br />8.333333e-4 hours <br />4.960317e-6 weeks <br />1.1415e-6 months <br /> 25 minutes intrusion/ice buildup).03-002 Full LOOP 8/14/2003 16:10 21 hours2.430556e-4 days <br />0.00583 hours <br />3.472222e-5 weeks <br />7.9905e-6 months <br /> 32 minutes Regional electrical grid disturbance 120 Kv bus 101 restored in 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> 2 Detroit Edison Distribution Partial -

minutes, Plant loads Operations personnel performing 06-003 Div 1 only 7/29/2006 15:50 in 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> 9 minutes.

work in the 120 kV switchyard.

to NRC-07-0029 Page 6 It should be noted that the majority of the experienced loss of off-site power events to-date have been the loss of division 1 (120kV). While still a serious event, the loss of division 1 off-site power does not pose as significant an event as a loss of division 2 off-site power or the total loss of off-site power. The major reason for this is due to the availability of CTG complex as an alternate AC power source for division 1 plant loads given the loss of division 1 off-site power (LOPi).

Additional information on the frequency used in the Fermi 2 PRA model for various loss of offsite power initiators and their associated non-recovery probabilities (and the methodology used to derive them) is provided in Detroit Edison's response to PRA related RAIs (NRC-07-0014, dated April 25, 2007). Refer to the response to RAI number 2 and to Attachment 5 of that submittal.

to NRC-07-0029 Page 7

RAI 5

Provide the reliability and unavailability of all EDGs in the last few years.

Also, discuss the impact of CT extension on EDG unavailability per Maintenance Rule.

RAI 5 Response Fermi 2 collects EDG reliability data as part of our Maintenance Rule program. For each EDG, the 36 month rolling average start probability was multiplied by the probability to run to determine its overall reliability for each month of 2002 through 2005. The range of monthly combined start/run probabilities for each EDG is shown below:

EDGI 1 98.93%-99.08%

EDG12 96.47%-99.00%

EDG13 98.30%-98.53%

EDG14 96.56%-98.48%

Unavailability data for all four EDGs for 2002, 2003, 2004, and 2005 was provided in Detroit Edison's response to PRA related RAIs (NRC-07-0014, dated April 25, 2007).

Refer to the response to RAI number 5 and to Attachment 6 of that submittal.

Overall, the CT extension is expected to improve EDG unavailability even though this extension may allow additional maintenance normally scheduled during plant outages to be performed online. A significant portion of on-line maintenance activities is associated with preparation and return to service activities, such as tagging, fluid system drain down, fluid system fill and vent, system restoration, warm up to standby conditions and post maintenance testing. The duration of these activities is relatively constant. Longer Completion Time durations allow more maintenance to be accomplished during a given on-line maintenance period thereby reducing the number of EDG outages. Thus, the total EDG unavailability is expected to be reduced with this proposed change.

Fermi 2 expects to use the requested EDG CT extension on an infrequent basis. Frequent use would adversely impact the EDG system availability. The EDGs could become Maintenance Rule (a)(1) in accordance with the Fermi maintenance rule program. If the pre-established reliability or availability goals are not met for the EDGs, plant procedures require corrective actions and increased management attention to restore EDG performance.

Enclosure I to NRC-07-0029 Page 8

RAI 6

It is staff's understanding that the purpose of the requested amendment is to allow an increased outage time during plant power operation for performing EDG inspection, maintenance, and overhaul, which would include disassembly of the EDG. EDG operability verification after a major maintenance or overhaul may require a full load rejection test. If a full load rejection test is performed at power, please address the following:

RAI 6.a What would be the typical and worse-case voltage transients on the 4160-V safety buses as a result of a full-load rejection?

RAI 6.a Response Fermi 2 currently performs the full load reject testing online. A review of recent test data for each of the EDGs shows the bus transient to be minimal. Chart recorders used during these tests show a drop in voltage ranging from approximately 0% to 3%. Because the affected EDG is providing more than 2850 kW operating in parallel with the affected system service transformer, shifting this source of power from the EDG to the affected system service transformer may affect the voltages at different locations within the distribution system.

In the unlikely event that bus voltage were to decline sharply, the bus under-voltage protection would actuate, automatically isolating the bus from its offsite source. The affected EDG, still running, would automatically reconnect to supply the essential loads until the offsite supply could be manually restored.

RAI 6.b If a full-load rejection test is used to test the EDG governor after maintenance, what assurance would there be that an unsafe transient condition on the safety bus (i.e., load swing or voltage transient) due to improperly performed maintenance or repair of a governor would not occur?

RAI 6.b Response The full load reject test is performed by opening the EDG output breaker while the EDG is operating at load. Once the output breaker is opened, the safety bus is isolated from the EDG and would not experience a transient due to EDG governor malfunction.

to NRC-07-0029 Page 9 RAI 6.c Using maintenance and testing experience on the EDG, identify possible transient conditions caused by improperly performed maintenance on the EDG governor and voltage regulator. Discuss the electrical system response to these transients.

RAI 6.c Response During testing the EDG is operating in parallel with the normal divisional offsite power source, which is capable of supplying the running load on the safety bus after the EDG output breaker is opened. The protective relaying on the EDG would disconnect the EDG due to conditions such as loss of generator field which might occur due to governor or voltage regulator malfunctions. In addition, plant operators control the operation of the EDG and would shutdown the engine or open the output breaker if the EDG was not operating properly. Since the EDG is connected in parallel to the offsite source, the impact of such a transient is expected to be absorbed by the offsite source until the EDG is isolated from the bus with minimal effect on the safety bus.

RAI 6.d Provide the tests to be performed after the overhaul to declare the EDG operable and provide justification of performing those tests at power.

RAI 6.d Response An EDG is generally started slowly, loaded and run in accordance with the engine operating procedure as a post maintenance test. In addition, post maintenance tests may include the normal slow start testing or fast start and load rejection testing required by Technical Specifications (e.g. SR 3.8.1.2 or 3.8.1.7, 3.8.1.8, and 3.8.1.9) to NRC-07-0029 Page 10

RAI 7

The staff noticed that Required Actions A.3 and A.5 related to CTG-1 1 are being proposed to be deleted. Provide justification for deleting these Required Actions, specifically when CTG 11-1 is being used as a backup to the inoperable EDG during the EDG CT extension.

RAI 7 Response As discussed in the response to RAI 1, Detroit Edison now intends to retain REQUIRED ACTIONS A.3 and A.5. See Enclosures 2 and 3 for proposed markup and retyped versions of the affected TS pages and Enclosure 4 for markup pages of the existing TS BASES (for information only).

RAI 8

The staff believes that certain compensatory measures are needed during the extended EDG CT to assure safe operation of the plant. In the past, other licensees have provided the following regulatory commitments in their EDG CT extension requests. Provide a discussion as to how you would address each commitment listed below as it relates to Fermi 2.

RAI 8.a The extended CT will be typically used to perform infrequent (i.e., no more frequently than once every 24 months) diesel manufacturer's recommended inspections and preventive maintenance activities; RAI 8.a Response Safety system availability, including EDG availability, is a key performance metric that is monitored both internally, through the maintenance rule program and the Fermi 2 business plan, and externally, through the NRC performance Indicator Program. The main goals of the proposed CT extension are to improve the availability of the EDGs via improved effectiveness of planned maintenance activities and to reduce the likelihood that emergent activities would result in unscheduled shutdown of the plant.

Safety system outages are planned throughout the operating cycle to perform necessary preventive and corrective maintenance. These activities are governed by maintenance rule program requirements that minimize system unavailability throughout the cycle.

They are also governed by TS requirements that limit the duration of each system outage, thereby limiting the work that can be performed in any outage. The extended CT would allow additional work to be scheduled within each EDG system outage, reducing the to NRC-07-0029 Page 11 number of outages needed to perform the necessary preventive and corrective maintenance.

As discussed in Detroit Edison's response to PRA related RAI number 10 (NRC 0014, dated April 25, 2007), planned unavailability for each EDG averaged less than 10 days per 18 month operating cycle for the Mitigating System Performance Indicator (MSPI) data period of 2002 through 2004. Detroit Edison's Maintenance Rule Program, which implements the requirements of 10 CFR 50.65, provides adequate assurance that planned use of the extended CT will be infrequent. Therefore, no additional commitment beyond the existing requirements of 10 CFR 50.65 is necessary.

RAI 8.b No maintenance or testing that affects the reliability of the train associated with the OPERABLE EDG will be scheduled during the extended CT. If any testing and maintenance activities must be performed while the extended CT is in effect, a 10 CFR 50.65(a) (4) evaluation will be performed.

RAI 8.b Response To limit maintenance on equipment associated with the OPERABLE EDGs, TS 3.8.1 ACTION A.2 requires declaring features supported by the inoperable EDG inoperable when the redundant required feature is inoperable. In addition, Fermi 2 procedures provide additional controls to protect the operability of redundant equipment and provide for the evaluations of emergent maintenance required by 10 CFR 50.65. Refer to Detroit

  • Edison's response to PRA related RAI number 3 and Attachments 1 through 3 of that response (NRC-07-0014, dated April 25, 2007).

In summary, the requirements of TS 3.8.1 ACTION A.2 and 10 CFR 50.65 require sufficient controls on concurrent maintenance and testing activities and require evaluation of the impact of emergent maintenance activities.

RAI 8.c An alternate power source with capacity equal to or greater than the capacity of the inoperable EDG will be available as a backup to the inoperable EDG. After entering the extended CT, this source will be verified available every 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> and treated as protected equipment

-to NRC-07-0029 Page 12 RAI 8.c Response As discussed in the responses to RAls 1, 2, and 7, CTG 11-1 would be available as backup power following the loss of power (offsite power and EDGs 11 and 12) to the division 1 safety busses. Detroit Edison intends to retain existing TS requirements to verify the status of this CTG every 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br />.

In addition, Fermi 2 has two electrical divisions with two (EDGs) in each division. The extended CT is applicable only when one EDG is inoperable. If more than one EDG is inoperable, more limiting CTs apply. Therefore, in the condition when the extended CT would be applicable, TS will require the availability of CTG 11-1 and the remaining 3 EDGs.

RAI 8.d The scheduling of EDG preplanned maintenance will be avoided during seasons when the probability of severe weather or grid stress conditions is high or forecasted to be high.

RAI 8.d Response Fermi 2 has procedures that address consideration of the risks associated with both imminent threatening weather and conditions of grid stress.

Refer also to Detroit Edison's response to PRA related RAIs (NRC-07-0014, dated April 25, 2007).

RAI 8.e The system load dispatcher will be contacted once per day to ensure no significant grid perturbations are expected during the extended allowed outage time. Also, the system load dispatcher should inform the plant operator if conditions change during the extended CT (e.g., unacceptable voltages could result due to a trip of the nuclear unit).

RAI 8.e Response The "Nuclear Plant Operating Agreement for the Fermi 2 Nuclear Plant" between Detroit Edison Company, International Transmission Company (ITC), and Midwest Independent System Operator (MISO) requires shiftly communication to ITC to verify the status of offsite lines and any planned transmission system maintenance that could affect availability of the offsite lines. The agreement also requires that ITC immediately (within 15 minutes) inform Fermi 2 if emergent grid conditions develop that could jeopardize offsite power reliability.

to NRC-07-0029 Page 13 RAI 8.f Component testing or maintenance of safety systems and important non-safety equipment including offsite power systems (auxiliary and startup transformers) that increase the likelihood of a plant transient or LOOP will be avoided. In addition, no discretionary switchyard maintenance will be allowed.

RAI 8.U Any component testing or maintenance that increases the likelihood of a plant transient would be avoided; plant operation should be stable during the EDG CT. (This condition could include consideration of degraded or out-of-service balance-of-plant equipment.)

RAI 8.f and 8.i Response Fermi typically schedules system or train outages (including EDG outages) such that only one risk significant train or system is removed from service at one time. To minimize the risk associated with the removal of multiple risk significant systems from service, Fermi has implemented a protected systems program contained within the Operations Conduct Manual MOP05, "Control of Equipment." This program controls the access to equipment for which the risk analysis has determined that it is imprudent to schedule elective maintenance on simultaneously. The systems which are protected from a risk significance perspective (note that other systems are protected based upon Technical Specification limitations) are found in MMR Appendix H, "On-Line Core Damage Risk Management Guidelines". During an EDG outage, the following equipment is protected:

Restricted access to the opposite division EDGs (e.g. EDGs 11 and 12 during an EDG 14 outage).

Controlled access to the 120kV and 345 kV Switchyards.

Controlled access to CTG 11-1.

Fermi monitors and controls risk associated with combinations of equipment Out Of Service per 10CFR50.65(a)(4) risk management program as outlined in MMR12, "Equipment Out of Service Risk Management".

Restricted Access areas are used to protect systems that would result in plant transients or require a plant shutdown in accordance with Technical Specifications. Access to these areas is limited. Controlled Access areas allow personnelto pass through, taking care to not adversely impact the equipment in the area. Only activities that are reviewed, approved, and on the Plan Of the Day are allowed.

Additional information was provided in Detroit Edison's response to PRA related RAIs (NRC-07-0014, dated April 25, 2007) including excerpts from MMR App. H, and MOPNS (Attachments 2 and 3). Refer also to the response to RAI number 3 and.

-to NRC-07-0029 Page 14 RAI 8.%

TS requirements of verification that the required systems, subsystems, trains, components, and devices that depend on the remaining EDG(s) are operable and positive measures will be provided to preclude subsequent testing or maintenance activities on these systems, subsystems, trains, components, and devices.

RAI 8.2 Response TS 3.8.1 Required Action A.2 is intended to provide assurance that a loss of offsite power, during the period that one EDG is inoperable does not result in a complete loss of safety function of critical systems. This requirement is implemented in procedure 24.000.01, "Situational Surveillances/LCO Tracking," Attachment 28a.

To minimize the risk associated with the removal of multiple risk significant systems from service, Fermi has implemented a protected systems program contained within the Operations Conduct Manual, MOP05. This program controls the access to equipment for which the risk analysis has determined that it is imprudent to schedule elective maintenance on simultaneously.

Additional information was provided in Detroit Edison's response to PRA related RAIs (NRC-07-0014, dated April 25, 2007). Refer to the response to RAI number 1 and attachments 2, 3, and 4.

RAI 8.h Steam-driven feedwater pump will be controlled as "protected equipment," and will not be taken out of service for planned maintenance while an EDG is out of service for extended maintenance.

RAI 8.h Response Fermi 2 has diverse and redundant equipment that can maintain reactor water level over a large range of reactor pressure. During normal operation feedwater is supplied to the reactor by two steam driven main feedwater pumps. Operation of both of these pumps is necessary for operation at 100% power. The suction flow to the main feedwater pumps is provided by motor driven pumps. The main feedwater pumps are not available for feeding the reactor while the motor driven pumps are unavailable following a loss of offsite power.

In addition to the steam-driven reactor feed pumps (used during niormal operation), the High Pressure Coolant Injection (HPCI) system is a steam driven turbine capable of providing over 5,000 gpm. The Reactor Core Isolation Cooling (RCIC) system is a steam driven turbine capable of providing over 600 gpm. The RCIC system provides enough makeup for a reactor pressure vessel isolation accompanied by a loss of flow from the normal feedwater system. In addition to HPCI and RCIC a Standby Feedwater (SBFW) to NRC-07-0029 Page 15 system with two electric motor driven pumps (each rated at 650 gpm) can provide high pressure makeup to the reactor vessel. The SBFW pumps are powered from electrical busses that are supplied with backup power from CTG 11-1.

If both the HPCI and RCIC systems are not OPERABLE simultaneously, Technical Specifications require a plant shutdown. The additional capability of the motor driven SBFW system reduces the risk significance of the turbine driven systems for high pressure injection. Maintenance and testing is typically not scheduled for any of these systems during EDG outages. Due to the level of redundancy present for high pressure injection capability, the criteria for protecting systems outlined in Fermi procedures MMR12 and MMR Appendix H, is not met for the systems with pumps driven by steam turbines.

ENCLOSURE 2 to NRC-07-0029 FERMI 2 NUCLEAR POWER PLANT Marked Up Existing TS Pages 3.8-1 3.8-2 3.8-2a 3.8-2b

AC Sources-Operating 3.8.1 3.8 ELECTRICAL POWER SYSTEMS 3.8.1 AC Sources-Operating LCO 3.8.1 The following AC electrical power sources shall be OPERABLE:

a.

Two qualified circuits between the offsite transmission network and the onsite Class 1E AC Electrical Power Distribution System; and

b.

Two emergency diesel generators (EDGs) per division.

APPLICABILITY:

MODES 1, 2, and 3.

ACTIONS N

N T..

LCO 3.0.4.b is not applicable to EDGs.

CONDITION REQUIRED ACTION COMPLETION TIME A. One -fl-bat+ EDGu-'--

A.1 Perform SR 3.8.1.1 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br />

.... divisis*

for OPERABLE offsite inoperable, circuit(s).

AND Once per 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> thereafter AND A.2 Declare required 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> from feature(s), supported discovery of an by the inoperable inoperable EDG EDG1, inoperable when concurrent with the redundant inoperability of required feature(s) redundant are inoperable, required feature(s)

AND A.3 Verify the status of Once per 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> CTG 11-1.

AND (continued)

FERMI - UNIT 2 3.8-1 Amendment No. AM, 163

AC Sources -- Operating 3.8.1 ACTIONS CONDITION REQUIRED ACTION

{

COMPLETION TIME A.

(continued)

A.4.1 Determine OPERABLE 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> EDG(s) are not inoperable due to common cause failure.

OR A.4.2 Perform SR 3.8.1.2 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> for OPERABLE EDG(s).

AND A.5 Restore availability 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> from of CTG 11-1.

discovery of Condition A concurrent with CTG 11-1 not available AND A.6 Restore 4e&4ý-EDGK-X-Xdaysy the-

"d4v*E48 to OPERABLE status.

One or both EDGs in

/.1 Restore both EDGs in 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> C

both divisions c

one division to inoperable.

OPERABLE status.

One offsite circuit

/(1 Perform SR 3.8.1.1 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> D

inoperable.

D for. OPERABLE offsite circuit.

AND Once per 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> thereafter AND (continued)

ATh 7 :y z*....

cutz time :f T:4-Ah r,-,

2k Az)nr1-

"A

..c mr in FERMI - UNIT 2 3.8-2 Amendment No. %ZO, V, 170

Insert 1 CONDITION REQUIRED ACTION COMPLETION TIME B.

Both EDGs in one division inoperable.

B.1.

Perform SR 3.8.1.1 for OPERABLE offsite circuit (s).

AND B.2 Declare required feature(s), supported by the inoperable EDGs, inoperable when the redundant required feature(s) are inoperable.

1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> AND Once per 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> thereafter.

4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> from discovery of the inoperable EDGs concurrent with inoperability of redundant required feature(s).

24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> 24 hours 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> AND B.3.1 Determine OPERABLE EDG(s) are not inoperable due to common cause failure OR B.3.2 Perform SR 3.8.1.2 for OPERABLE EDG(s).

AND B.4 Restore one EDG in the division to OPERABLE status.

AC Sources-Operating 3.8.1 ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME (continued)

/2 Declare required 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> from feature(s) with no discovery OT no offsite power offisite power available inoperable to one division when the redundant concurrent with required feature(s) inoperability are inoperable, of redundant requi red feature(s)

AND

/3 Restore offsite 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> circuit to OPERABLE status.

' M,-

fAiIuIe to meet I.

Two offsite circuits

/1 Declare required 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> from inoperable.

feature(s) inoperable discovery of when the redundant Condition Yl, required feature(s) concurrent with are inoperable.

inoperability of redundant requi red feature(s)

AND 2

Retr one ofisite 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />..

circuit to OPERABLE status.

(conti nued)

FERý11T - UNIT 2 3.8-,'*-

Amendment No. 170

AC Sources -- Operating 3.8'.1 ACTIONS (continued)

CONDITION REQUIRED ACTION COMPLETION TIME K One offsite circuit


. NOTE..........

inoperable.

Enter applicable Conditions and Reauired Actions of AND LCO 3.87, "Distribution Systems -0 t'erti when One or both EDGs in Condition is entere Wl one Division no AC power source to one or inoperable, more 4160 V buses 64B,

54C, 65E or 65F.

(1 Restore offsite 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> circuit to OPERABLE status.

OR 2

Restore both EDGs in 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> the Division to OPERABLE status.

/

Required Action and l

Be in MODE 3.

12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> c_*

Associated Completion Time of Condition A, B, C. 8 -o-,

not met.

AND or-,

or

/2 Be in MODE 4.

36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br />

_ 0____ ___

FEPVff - UNIT 2

3.

LO-.2b r U-mendment No. 170

ENCLOSURE 3 to NRC-07-0029 FERMI 2 NUCLEAR POWER PLANT Typed Proposed TS Pages 3.8-1 3.8-2 3.8-2a 3.8-2b 3.8-2c

AC Sources -- Operating 3.8.1 3.8 ELECTRICAL POWER SYSTEMS 3.8.1 AC Sources--Operating LCO 3.8.1 The following AC electrical power sources shall be OPERABLE:

a.

Two qualified circuits between the offsite transmission network and the onsite Class 1E AC Electrical Power Distribution System; and

b.

Two emergency diesel generators (EDGs) per division.

APPLICABILITY:

MODES 1, 2, and 3.

ACTIONS


NOTE-LCO 3.0.4.b is not applicable to EDGs.

CONDITION REQUIRED ACTION COMPLETION TIME A.

One EDG inoperable.

A.1 Perform SR 3.8.1.1 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> for OPERABLE offsite circuit(s).

AND Once per 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> thereafter AND A.2 Declare required 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> from feature(s), supported discovery of an by the inoperable inoperable EDG EDG, inoperable when concurrent with the redundant inoperability of required feature(s) redundant are inoperable, required feature(s)

AND A.3 Verify the status of Once per 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> CTG 11-1.

AND (continued)

FERMI - UNIT 2 3.8-1 Amendment No. 041,/W

AC Sources -- Operating 3.8.1 ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A.

(continued)

A.4.1 Determine OPERABLE 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> EDG(s) are not inoperable due to common cause failure.

OR A.4.2 Perform SR 3.8.1.2 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> for OPERABLE EDG(s).

AND A.5 Restore availability 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> from of CTG 11-1.

discovery of Condition A concurrent with CTG 11-1 not available AND A.6 Restore EDG to 14 days OPERABLE status.

B.

Both EDGs in one B.1 Perform SR 3.8.1.1 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> division inoperable, for OPERABLE offsite circuit(s).

AND Once per 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> thereafter AND FERMI - UNIT 2 3.8-2 Amendment No. Z3,, 1*,,

/Q9

AC Sources.--Operating 3.8.1 ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME B.

(continued)

B.2 Declare required 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> from feature(s), supported discovery of by the inoperable the inoperable EDGs, inoperable when EDGs concurrent the redundant with required feature(s) inoperability are inoperable, of redundant required feature(s)

AND B.3.1 Determine OPERABLE 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> EDG(s) are not inoperable due to common cause failure.

OR B.3.2 Perform SR 3.8.1.2 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> for OPERABLE EDG(s).

AND B.4 Restore one EDG in 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> the division to OPERABLE status.

C.

One or both EDGs in C.1 Restore both EDGs in 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> both divisions one division to inoperable.

OPERABLE status.

D.

One offsite circuit D.1 Perform SR 3.8.1.1 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> inoperable, for OPERABLE offsite circuit.

AND Once per 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> AND thereafter (continued)

FERMI - UNIT 2 3.8-2a Amendment No.

A,.1W

AC Sources -- Operating 3.8.1 ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME D.

(continued)

D.2 Declare required 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> from feature(s) with no discovery of no offsite power offsite power available inoperable to one division when the redundant concurrent with required feature(s) inoperability are inoperable, of redundant required feature(s)

AND D.3 Restore offsite 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> circuit to OPERABLE status.

E.

Two offsite circuits E.1 Declare required 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> from inoperable, feature(s) inoperable discovery of when the redundant Condition E required feature(s) concurrent with are inoperable.

inoperability of redundant required feature(s)

AND E.2 Restore one offsite 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> circuit to OPERABLE status.

(continued)

FERMI - UNIT 2 3.8-2b Amendment No. /go#

AC Sources---Operating 3.8.1 ACTIONS (continued)

CONDITION REQUIRED ACTION COMPLETION TIME F.

One offsite circuit


NOTE---------

inoperable.

Enter applicable Conditions and Required Actions of AND LCO 3.8.7, "Distribution Systems - Operating," when One or both EDGs in Condition F is entered with one Division no AC power source to one or inoperable, more 4160 V buses 64B, 64C, 65E or 65F.

F.1 Restore offsite 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> circuit to OPERABLE status.

OR F.2 Restore both EDGs in 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> the Division to OPERABLE status.

G. Required Action and G.1 Be in MODE 3.

12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> Associated Completion Time of Condition A, B, C, D, E or F not AND met.

G.2 Be in MODE 4.

36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br /> FERMI

- UNIT 2 3.8-2c Amendment No.1

ENCLOSURE 4 to NRC-07-0029 FERMI 2 NUCLEAR POWER PLANT Marked Up TS Bases Pages (For Information Only)

B 3.8-5 B 3.8.1-5a B 3.8.1-6 B 3.8.1-7 Insert Pages - 2 B 3.8.1-7a B 3.8.1-7b B 3.8.1-7c B 3.8.1-7d B 3.8.1-7e B 3.8.1-8

AC Sources -Operating B 3.8.1 BASES ACTIONS A Note prohibits the application of LCD 3.0.4.b to an inoperable EDG.

There is an increased risk associated with entering a MODE or other specified condition in the Applicability with an inoperable EDG and the provisions of LCO 3.0.4.b. which allow entry into a MODE or other specified condition in the Applicability with the LCO not met after performance of a risk assessment addressing inoperable systems and components, should not be applied in this circumstance.

A.1 To ensure a highly reliable power source remains with one-r-

,e) ft-EDO diL-ifieff inoperable, it is necessary to verify the availability of the OPERABLE offsite circuits on a more frequent basis.

Since the Required Action only specifies "perform," a failure of SR 3.8.1.1 acceptance criteria does not result in a Required Action being not met.

However, if a circuit fails to pass SR 3.8.1.1, it is inoperable.

Upon offsite circuit inoperability, additional Conditions must then be entered.

A.2 Required Action A.2 is intended to provide assurance that a loss of offsite power, during the period that oneebet-EDGA in one.i...i.n is inoperable, does not result in a comp~lete loss of safety function of critical systems.

These features are designed with redundant safety related divisions (i.e., single division systems are not included).

Redundant required features failures consist of inoperable features associated with a division redundant to the division that has an inoperable EDG.

The Completion Time is intended to allow the operator time to evaluate and repair any discovered inoperabilities.

This Completion Time also allows for an exception to the normal "time zero" for beginning the allowed outage time 'clock."

In this Required Action the Completion Time only begins on discovery that both:

a.

An inoperable EDG exists; and

b.

A required featureon the other division (Division 1 or 2) that is redundant to a feature supported by the inoperable EDG>( is inoperable.

FERMI - UNIT 2 B 3.8.1-5

.Revision 30

AC Sources -Operating B 3.8.1 BASES ACTIONS (Continued)

If, at any time during the existence of this Condition (one

-Ar eth EDG' isn oe divisiio inoperable),

a required feature subsequently becomes inoperable, this Completion Time begins to be tracked.

Discovering one required EDG inoperable coincident with one or more inoperable redundant required support or supported features, or both, that are associated with the OPERABLE EDGs results in starting the Completion Time for the Required Action.

Four hours from the discovery of these FERMI - UNIT 2 B 3.8.1-5a Revision 30 1

AC Sources -Operating B 3.8.1 BASES ACTIONS (continued) events existing concurrently is acceptable because it minimizes risk while allowing time for restoration before subjecting the unit to transients associated with shutdown.

The remaining OPERABLE EDGs and offsite circuits are adequate to supply electrical power to the onsite Class 1E Distribution System.

Thus, on a component basis, single failure protection for the required feature's function may have been lost; however, function has not been lost.

The 4 hour4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> Completion Time takes into account the component OPERABILITY of the redundant counterpart to the inoperable required feature.

Additionally, the 4 hour4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> Completion Time takes into account the capacity and capability of the remaining AC sources, reasonable time for repairs, and low probability of a DBA occurring during this period.

A.3 To minimize the impact of operation with an inoperable EDG, it is necessary to periodically ensure the availability of CTG 11-1.

The verification of the status of CTG 11-1 is performed by an administrative check 6f breaker and line availability, and the CTG 11-I ability to supply Division I loads.

Since this Required Action only specifies "verify the status," even when CTG 11-1 is not available it does not result in this Required Actions being not met.

However, upon discovery that CTG 11-1 is unavailable, the limitations of Required Action A.5 are imposed.

A.4.1 and A.4.2 Required Action A.4.1 provides an allowance to avoid unnecessary testing of OPERABLE EDGs.

If it can be determined that the cause of the inoperable EDG>

does not exist on the OPERABLE EDGs, SR 3.8.1.2 does not have to be performed.

If the cause of inoperability exists on other EDG(s),

they are declared inoperable upon discovery, and Condition Bý,f LCO 3.8.1 may be entered.

Once the failure is repaired, and the common cause failure nolonger exists, Required Action A.4.1 is satisfied.

If the cause of the initial inoperable EDG cannot be confirmed not to exist on the remaining EDG(s), performance of SR 3.8.1.2 suffices to provide assurance of continued OPERABILITY of those EDGs.

In the event the inoperable EDG><a-ar-restored to OPERABLE status prior to completing either A.4.1 or A.4.2, the plant FERMI -

UNIT 2 B 3.8.1-6 Revision 0

AC Sources-Operating B 3.8.1 BASES ACTIONS (continued) corrective actioh program will continue to evaluate the common cause possibility.

This continued evaluation,

however, is no longer under the 24 hour2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> constraint imposed while in Condition A.

According to Generic Letter 84-15 (Ref. 7),

24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> is a reasonable time to confirm that the OPERABLE EDGs are not affected by the same problem as the inoperable EDG.

A.5 and A.6 According to Regulatory Guide 1.93 (Ref. 6), operation may cbhtihud with nor OPERABLE EDGs t6 one division for a period that should not exceed 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />.

With oner b-th EDG in one division inoperable, the remaining OPERABLE EDGs and offsite circuits are adequate to supply electrical power to the onsite Class 1E Distribution System.

Required Action A.5 imposes this 72 hour8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> Completion Time from the discovery of the non-availabi.lity CTG 11-1.

However, if CTG 11-1 is available to supply Division I loads (determined by administrative check of breaker, line availability, and CTG 11-1 status) Required Action A.5 would be met and Required Action A.6 would allow the restoration time of 11days.

-The- -hnn eempe.A-I -4me te restoro to al It ks-t ocEBG-inthe d4vis-RiReaeul aia ndapbility of the remaining AC s:ufes-,

o..urring durg t period.

The 7day Completion Time to I-/f restore all EDGs to OPERABLE status takes into account the capacity and capability of the remaining AC Sources, as well as the additional reliability a ffprdae by the availability of CTG 11 -1.

axrd '

ba.). fy-o.k~

a~ ?i,AOM 0 6C-C'vx T BRcon ComPleti-

,n Tim for Rgird Aetion A.6 esti shes a limit on the maximum time allowed for any combinat oIof required AC power sources to be inop..eib e during any si e contiguous occurrence of fai

<gito meet.

the LCO.

If Condi n A is entered while r instance, an offsite ci-rcuit is mop ble, and tacircuit is

  • subsequently restored OPERA

.LCO may already have been not met for up to 721h s.

is situation could lead to a total of 10 days,

  • ce initial

'lure of the LCO, to restore the EDG.

his time, an offsite

  • cuit could again become.

.erable, the EDG restored OPE and an additio 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> (for a total of 13 days) allowe ior to plete restoration of the LCO.

The 10 day Completiorn-.....

FERMI

- UNIT 2 B 3.8.1-7 Revision 35

TS Bases Insert for new Condition B B.1 To ensure a highly reliable power source remains with both EDGs in one division inoperable, it is necessary to verify the availability of the OPERABLE offsite circuits on a more frequent basis. Since the Required Action only specifies "perform," a failure of SR 3.8.1.1 acceptance criteria does not result in a Required Action being not met.

However, if a circuit fails to pass SR 3.8.1.1, it is inoperable. Upon offsite circuit inoperability, additional Conditions must then be entered.

B.2 Required Action B.2 is intended to provide assurance that a loss of offsite power, during the period that both EDGs in one division are inoperable, does not result in a complete loss of safety function of critical systems. These featurmes are desig-ned with medtmdant safety related divisions (i.e., single division systems are not included). Redundant required features failures consist of inoperable features associated with a division redundant to the division that has an inoperable EDG.

The Completion Time is intended to allow the operator time to evaluate and repair any discovered inoperabilities. This Completion Time also allows for an exception to the normal "time zero" for beginning the allowed outage time "clock." In this Required Action the Completion Time only begins on discovery that both:

a.

B6th EDG§ iii o6ie divii6sin ae mnop fabIl -~ and

b.

A required feature on the other division (Division I or 2) that is redundant to a feature supported by the inoperable EDGs is inoperable.

If, at any time during the existence of this Condition (both EDGs in one division inoperable), a required feature subsequently becomes inoperable, this Completion Time begins to be tracked.

Discovering both EDGs in one division inoperable coincident with one or more inoperable redundant required support or supported features, or both, that are associated with the OPERABLE EDGs results in starting the Completion Time for the Required Action. Four hours from the discovery of these events existing concurrently is acceptable because it minimizes risk while allowing time for restoration before subjecting the unit to transients associated with shutdown.

The remaining OPERABLE EDGs and offsite circuits are adequate to supply electrical power to the onsite Class 1E Distribution System. Thus, on a component basis, single failure protection for the required feature's function may have been lost; however, function has not been lost. The 4 hour4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> Completion Time takes into account the component OPERABILITY of the redundant counterpart to the inoperable required

feature. Additionally, the 4 hour4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> Completion Time takes into account the capacity and capability of the remaining AC sources, reasonable time for repairs, and low probability of a DBA occurring during this period, B.3.1 and B.3.2 Required Action B.3.1 provides an allowance to avoid unnecessary testing of OPERABLE EDGs. If it can be determined that the cause of the inoperable EDGs does not exist on the OPERABLE EDGs, SR 3.8.1.2 does not have to be performed. If the cause of inoperability exists on other EDGs, they are declared inoperable upon discovery, and Condition C of LCO 3.8.1 may be entered. Once the failure is repaired, and the common cause failure no longer exists, Required Action B.3.1 is satisfied. If the cause of the initial inoperable EDGs cannot be confirmed not to exist on the remaining EDGs, performance of SR 3.8.1.2 suffices to provide assurance of continued OPERABILITY of those EDGs.

In the event the inoperable EDGs are restored to OPERABLE status prior to completing either B.3. I or B.3.2, the plant corrective action program will continue to evaluate the common cause possibility. This continued evaluation, however, is no longer under the 24 hour2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> constraint imposed while in Condition B.

According to Generic Letter 84-15 (Ref. 7), 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> is a reasonable time to confirm that the OPERABLE EDGs are not affected by the same problem as the inoperable EDG.

B.4 According to Regulatory Guide 1.93 (Ref 6), operation may continue with no OPERABLE EDGs to one division for a period that should not exceed 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />. With both EDGs in one division inoperable, the remaining OPERABLE EDGs and offsite circuits are adequate to supply electrical power to the onsite Class 1E Distribution System. Required Action B.4 imposes this 72 hour8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> Completion Time.

The 72 hour8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> Completion Time to restore one EDG in the division in OPERABLE status takes into account the capacity and capability of the remaining AC sources, reasonable time for repairs, and low probability of a DBA occurring during this period.

AC Sources Operating B 3.8.1 BASES ACTIONS (continued)

<7 V\\cc

.Y\\eUP-cov&-ýý condtionaftcr di..oveyeý of foiluro to fflet the LCO.

T-hic 1

is considered reasonable for situations in whichn Condit A and C are entered concurrently.

Th connector n the 7 day and 10 day Com on Times means that both etion Times appl ultaneously, and the more restrictive m be met.

As in Required Action the Co tion Time allows for an exception toýthe al "time zero" fo inning the allowed ou-ta ime "clock."

This exceptio suits in establi ng the "timezero" at the time that the was i a ally not met, instead of the time that Condition s

emterod.

With one or both EDGs on both divisions inoperable, there may be no remaining standby AC source.

Thus, with an assumed loss of offsite electrical.power, insufficient standby AC sources are available to power the minimum required ESF functions.

Since the offsite electrical power system is the only source of AC power for a significant percentage of ESF equipment at this level of degradation, the risk associated with continued operation for a very short time could be less than-that associated with an immediate controlled shutdown.

(The immediate shutdown could cause grid instability, 'which could result in a total loss of AC power.)

Since any inadvertent unit generator trip could also result in a total loss of offsite AC power, however, the time allowed for continued operation is severely restricted.

The intent here is to avoid the risk associated with an immediate controlled shutdown and to minimize the risk associated with this level of degradation.

According to Regulatory Guide 1.93 (Ref. 6), with both divisions with EDGs inoperable, operation may continue for a period that should not exceed 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br />.

To ensure a highly reliable powersource remains with one offsite circuit inoperable, it is necessary to verify the availability of the remaining required offsite circuit on a more frequent basis.

Since the Required Action only specifies "perform," a failure of SR 3.8.1.1 acceptance criteria does not result in a Required Action not met.

However, if a second required circuit fails SR 3.8.1.1, the second offsite circuit is inoperable and Condition~jfor two offsite circuits inoperable, is entered.

FERMI

- UNIT 2 B 3.8.1-7a Revi si on:35

AC Sources-Operating B 3.8.1 BASES ACTIONS (continued)

Required Action2.2, which only applies if the division cannot be powered from an offsite source, is intended to provide assurance that an event with a coincident single failure of the associated EDG does not result in a complete loss of safety function of critical systems.

These features are designed with redundant safety related divisions (i.e.,

single division systems are not included).

Redundant required features failures consist of inoperable features associated with a division redundant to the division that has no offsite power.

The Completion Time for' Required Action 2 is intended to allow time for the operator to evaluate and repair any discovered inoperabilities.

This Completion Time also allows an exception to the normal "time zero" for beginning the allowed outage time "clock."

In this Required Action, the Completion Time only begins on discovery that both:

a.

The division has no offsite power supplying its loads and

b.

A required feature on the other division is inoperable.

If, at any time during the existence of this Condition (one offsite circuit inoperable) a required feature subsequently becomes inoperable, this Completion Time would begin to be tracked.

Discovering no offsite power to one 4160 V ESF bus of the onsite Class 1E Power Distribution System coincident with one or more inoperable required support or supported features, or both, that are associated with any other ESF bus that has offsite power, results in starting the Completion Times for the Required Action.

Twenty-four hours is acceptable because it minimizes risk while allowing time for restoration before the unit is subjected to transients associated with shutdown.

The remaining OPERABLE offsite circuit and EDGs are adequate to supply electrical power to the onsite Class 1E Distribution System.

Thus, on a component basis, single failure protection may have been lost for the required feature's function; however, function is not lost.

The 24 hour2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> Completion Time takes into account the component OPERABILITY of the redundant counterpart to the inoperable FERMI

- UNIT 2 B 3.86.1-7b Revision 35

AC Sources-Operating B 3.8.1 BASES ACTIONS (continued) required feature.

Additionally, the 24 hour2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> Completion Time takes into account the capacity and capability of the remaining AC sources, a reasonable time for repairs, and the low probability of a DBA occurring during this period.

According to Regulatory Guide 1.93 (Ref. 6), operation may continue in Condition.,2 for a period that should not exceed 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />.

With one offsite circuit inoperable, the reliability of the offsite system is degraded and the potential for a loss of offsite power is increased, with attendant potential for a challenge to the plant safety systems.

In this condition, however, the remaining OPERABLE offsite circuit and EDGs are adequate to supply electrical power to the onsite Class 1E Distribution System.

The 72 hour8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> Completion Time takes into account the capacity and capability of the remaining AC sources, reasonable time for repairs, and the low probability of a DBA occurring during this period.

tablishes a limit on the maximum time allowed for any 5

c ination of required AC power sources to be inopera>?e dunn any single contiguous occurrence of failing meet the LCD.

If Condition C is entered while, for in ance, an EDG is ino rable, and that EDG is subsequentl eturned OPERABLE, the LCO may already have been not et for up to 7 days.

This sit tion could lead to a to of 10 days, since initial fai e to meet the LCO, restore the offsite circuit.

At is time, an E could again become inoperable, the circuit estored RABLE, and an additional 7 days (for a total of 17 s) lowed prior to complete restoration of the LCD.

The day Completion Time provides a limit on the time allow in specified condition after discovery of failure to eet the This limit is considered reasonabl or situations *n which Conditions A and C are entered ncurrently. The.'

connector between the 72 hour8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> and day Completion Times m s that both Completion Ti s apply simultaneously, and t more restrictiv ompletion Time must be met.

As in equired Action the Completion Time allows for an exc i on to the n mal "time zero" for beginning the allowed out e time "cl ki This exception results in establishing the e

ro at the time the LCD was initially not met, i stead tthe.++-! thet Ccaditicri C was emte?.Id.

FERMI - UNIT 2 B 3.8.1-7c Revision 35

AC Sources-Operating B 3.8.1 BASES ACTIONS (continued)

,k.I and S.2 Required Action *1 addresses actions to be taken in the event of inoperability of redundant required features concurrent with inoperability of two offsite circuits.

Required Action*.l reduces the vulnerability to a loss of function.

The Completion Time for taking these actions is reduced to 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> from that allowed ith one division without offsite power (Required Action4.2).

The rationale for the reduction to 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> is that Regulatory Guide 1.93 (Ref, 6) allows a Completion Time of 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> for two required offsite circuits inoperable, based upon the assumption that two complete safety divisions are OPERABLE.

When a concurrent redundant required feature failure exists, this assumptionis not the case, and a shorter Completion Time of 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> is appropriate.

These features are designed with redundant safety related divisions, (i.e.,

single division systems are not included in the list).

Redundant required features failures consist of any of these features that are inoperable because any inoperability-is on a division redundant to a division with inoperable offsite circuits.

The Completion Time for Required Action',l is intended to allow the operator time to evaluate and repair any.

discovered inoperabilities.

This Completion Time also allows for an exception to the normal "time zero" for beginning the allowed outage time "clock."

In this Required Action, the Completion Time only begins on discovery that both:

a.

All-required offsite circuits are inoperable and

b.

A required feature is inoperable.

If, at any time during the existence of this Condition (two offsite circuits inoperable), -a required feature subsequently becomes inoperable, this Completion Time begins to be tracked.

According to Regulatory Guide 1.93 (Ref. 6), operation may continue in Conditiorefor a period that should not exceed 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

This level of degradation means that the offsite electrical power system does not have the capability to effect a safe shutdown and to mitigate the effects of an accident; however, the onsite. AC sources have not been FERMI - UNIT 2 B 3.8.1-7d Revision 35

AC Sources-Operating B 3.8.1 BASES ACTIONS (continued) degraded.

This level of degradation generally corresponds to a total loss of the immediately accessible offsite power sources.

Because of the normally high availability of the offsite sources, this level of degradation may appear to be more severe than other combinations of two AC sources inoperable that involve one or more EDGs inoperable.

However, two factors tend to decrease the severity of this degradation level:

a.

The configuration of the redundant AC electrical power system that remains available is not susceptible to a single bus or switching failure and

b.

The time required to detect and restore an unavailable offsite power source is generally much less than that required to detect and restore an unavailable onsite AC source.

With both of the required offsite circuits inoperable, sufficient onsite AC sources are available to maintain the u*it in 6 safe shUtddwn condition in the event of a DBA or transient.

In fact, a simultaneous loss of offsite AC sources, a LOCA, and a worst case single failure were postulated as a part of the design basis in the safety analysis.

Thus, the 24 hour2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> Completion Time provides a period of time to effect restoration of one of the offsite circuits commensurate with the importance of maintaining an AC electrical power system capable of meeting its design criteria.

According to Regulatory Guide 1.93 (Ref. 6), with the available offsite AC sources two less than required by the LCO, operation may continue for 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

If two offsite

-sources are restored within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />, unrestricted operation may continue.

If only one offsite source is restored within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />, power operation continues in accordance with Conditi onC-T

  • 1 andf2 Pursuant to LCO 3.0.6, the Distribution System ACTIONS would not be entered even if all AC sources to it were inoperable, resulting in de-energization.

Therefore, the Required Actions of Conditior1are modified by a Note to indicate that when Condition,4is entered with no AC source to any ESF bus, ACTIONS for LCO 3.8.7, "Distribution Systems -

FERMI - UNIT 2 B 3.8.1-7e Revision..35

AC Sources-Operating B 3.8.1 BASES ACTIONS (continued)

Operating," must be immediately entered.

This allows ConditionMo provide requirements for the loss of the offsite circuit and one EDG without regard to whether a division is de-energized.

LCO 3.8.7 provides the appropriate restrictions for a de-energized division.

According to Regulatory Guide 1.93 (Ref. 6), operation may continue in Condition4_or a period that should not exceed 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />.

In Conditionefindividual redundancy is lost in both the offsite electrical power system and the onsite AC electrical power system.

Since power system redundancy is provided by two diverse sources of power, however, the reliability of the power systems in this Condition may appear higher than that in Conditionr8ýloss of both required offsite circuits).

This difference in reliability is offset by the susceptibility of this power system configuration to a single bus or switching failure. The 12 hour1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> Completion Time takes into account the capacity and capability of the remaining AC sources, reasonable time for repairs, and the low probability of a DBA occurring during this period.

f.1 and.' 2 If the inoperable AC electrical power sources cannot be restored to OPERABLE status within the associated Completion Time, the unit must be brought to a MODE in which the LCO does not apply.

To achieve this status, the unit must be brought to at least MODE 3 within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> and to MODE 4 within 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br />.

The allowed Completion Times are reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.

SURVEILLANCE The AC sources are designed to permit inspection and testing REQUIREMENTS of all important areas and features, especially those that have a standby function, in accordance with 10 CFR 50, GDC 18 (Ref.

8).

Periodic component tests are supplemented by extensive functional tests during refueling outages (under simulated accident conditions).

The SRs for demonstrating the OPERABILITY of the EDGs are based on the recommendations of Regulatory Guide 1.9 (Ref. 3), Regulatory Guide 1.108 (Ref. 9),

and Regulatory Guide 1.137 (Ref.

10),

as addressed in the UFSAR.

Where the SRs discussed herein specify voltage and frequency tolerances, the following summary is applicable.

The minimum steady state output voltage of 3740 V is 90% of the nominal 4160 V output voltage.

This value, which is FERMI - UNIT 2 B 3.8.1-8 Revision 35