RA-18-018, Submittal of Changes to Technical Specifications Bases

Submittal of Changes to Technical Specifications Bases

ML18108A175
Person / Time
Site:	Oyster Creek
Issue date:	04/13/2018
From:	Jim Barstow Exelon Generation Co
To:	Document Control Desk, Office of Nuclear Reactor Regulation
References
RA-18-018
Download: ML18108A175 (186)

Text

Exelon Generation TS 6.21.d RA-18-018 April 13, 2018 U.S. Nuclear Regulatory Commission Attn: Document Control Desk

. Washington, DC 20555 Oyster Creek Nuclear Generating Station Renewed Facility Operating License No. DPR-16 Docket No. 50-219

Subject:

• Submittal of Changes to Technical Specifications Bases In accordance with the requirement of Oyster Creek Nuclear Generating Station (OCNGS)

Technical Specification 6.21.d, Exelon Generation Company, LLC hereby submits a complete updated copy of the Technical Specifications Bases. The enclosed Technical Specifications Bases include changes through the date of this letter.

If you have any questions or require further information, please contact David J. Distel at 610-765-5517.

James Barstow Director, Licensing & Regulatory Affairs Exelon Generation Company, LLC

Attachment:

Oyster Creek Technical Specifications Bases cc: USNRC Administrator, Region I (w/o enclosure)

USNRC Senior Resident Inspector, OCNGS (w/o enclosure)

USNRC Senior Project Manager, OCNGS (w/ enclosure)

Manager, Bureau of Nuclear Engineering - New Jersey Department of Environmental Protection (w/o enclosure)

Mayor of Lacey Township, Forked River, NJ (w/o enclosure)

- L SECTION3 LTh1ITING CONDITIONS FOR OPERATION

• 3.0 LIMITING CONDITIONS FOR OPERATION (GENERAL)

Applicability:

Objective:

Applies to all Limiting Conditions for Operation.

I To preserve. the single failure criterion for safety systems.

Specifications:

A. In the event Limiting Conditions for Operation (LCOs) and/or associated action requirements cannot be satisfied because of circumstances in ex~ess of those .

addressed in the specification, the unit shall be placed in COLD SHUTDOWN within the following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br /> unless corrective measures are completed that perClit operation under the permissible action statements for the specified time interval as measured from initial discovery or until the reactor is placed in a condition in which the specification is not applicable. Exceptions to the requirements shall be stated in the individual specifications.

B. When a system, subsystem, train, component or device is detennined to be inoperable solely because its emergency power source is inoperable, or solely because its normal power source is inoperable, it may be considered OPERABLE for the purpose of satisfying the requirements of applicable LCOs., provided (1) its correspo~1ding normal or emergency power source is OPERABLE; and (2) all of its redundant system(s), subsystem(s), train(s), cornponent(s) and device(s) are OPERABLE, or likewise satisfy the requirements of this specification_ Unless both conditions (1) and (2) are satisfied, the unit shall be placed in COLD SHUTDOWN within ihe following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br /> or within the time specified in the applicable specification. This specification is not applicable in COLD SHUTDOWN or the REFUEL MODE.

C. When an LCO is not met, entry into an OPERATIONAL CONDITION or other specified condition in the Applicability shall only be made:

1. When the associated LCO requirements permit continued operation in r.he OPERATIONAL CONDITION or other specified condition in the Applicability for an unlimited period of time; or

2. After performance of a risk assessment addressing inoperable systems and components, consideration of the results, determination of the accepL<i.bility of entering the OPERATIONAL CONDITION or other specified condition in the applicability, and the establishment of risk management actions, if appropriate; exceptions to this specification are stated in the individual Specifications, or '

3. When an allowance is stated in the individual value, parameter, or other Specification.

This provision shall not prevent entry into OPERATIONAL CONDITIONS or other specified conditions in the Applicability that *are required to comply with LCO requirements or that are part of a shutdown of the unit.

• • OYSTER CREEK 3.0-1 Amendment No.: M, 241

Bases:

Specification 3.0.A delineates the action to be taken for circumstances not directly provided for in the system LCOs and whose occurrence would violate the intent of the specification.

Specification 3.0.B delineates what additional conditions must be satisfied to permit operation to continue, consistent with the specifications for power sources, when a normal or emergency power source is not operable. It allows operation to be governed by the time limits of the specifications associated with the LCOs for the normal or emergency power source, not the inaividual specifications for each system, subsystem, train, component or device that is determined to be inoperable solely because of the inoperability of its normal or emergency power source. In addition, it specifically prohibits operation when one division is inoperable because its normal or emergency power source is inoperable and a safety subsystem. train, component, or device in another division is inoperable for another reason.

Specification 3.0.C establishes limitations on changes in OPERATIONAL CONDITIONS or other specified conditions in the Applicability when an LCO is not met. It allows placing the plant in an OPERATIONAL CONDITION or other specified condition stated in the Applicability (e.g., the Applicability desired to be entered) when plant conditions are such that the requirements of the LCO would not be met, in accordance with LC03.0.C.1, LCO 3.0.C.2, or LCO 3.0.C.3.

LCO 3.0.C.1 allows entry into an OPERATIONAL CONDITION or other specified condition in the Applicability with the requirements of the LCO met that permit continued operation in the OPERATIONAL CONDITION or other specified condition in the Applicability for an unlimited period of time. Compliance with LCO conditions that permit continued operation of the unit for an unlimited period of time in an OPERATIONAL CONDITION or other specified condition in the Applicability provides an acceptable level of safety for continued operation. This is without regard for the status of the unit before or after the change in OPERATIONAL CONDITION. Therefore, in such cases, entry into an OPERATIONAL CONDITION or other specified condition in the Applicability may be made in accordance with the provisions of the LCO conditions.

LCO 3.0.C.2 allows entry into an OPERATIONAL CONDITION or other specified condition in the Applic.1bility with the requirements of the LCO met after performance of a risk assessment addressing inoperable systems and components, consideration of the results, determination of the acceptability of entering the OPERATIONAL CONDITION or other specified condition in the Applicability, and establishment of risk ma.nagement actions, if appropriate.

The risk assessment may use quantitative, qualitative, or blended approaches, and the risk assessment will be conducted using the plant program, procedures, and criteria in place to implement 10 CFR 50.65(a)(4),

which requires that risk impacts of maintenance activities be assessed and managed. The risk assessment, for the purposes of LCO 3.0.C.2, must take into account all inoperable Technical Specification equipment regardless of whether the equipment is included in the normal 10 CFR 50.65(a)(-1) risk assessment scope. The risk assessments will be conducted using the procedures and guidance endorsed by Regulatory Guide 1.182, "Assessing and Managing Risk Before Maintenance Activities at Nuclear Power Plants." Regulatory Guide 1.182 endorses the guidance in Section 11 of NUMARC 93-01, "Industry Guideline for Monitoring the Effectiveness of Maintenance at Nuclear Power Plants." These documents address general guidance for the conduct of the risk assessment, quantitative and qualitative guidelines for establishing risk management actions, and example risk management actions. These include actions to plan and conduct other activities in a manner that controls overall risk, increased risk awareness by shift and management personnel, actions to reduce the duration of the condition, actions to minimize the magnitude of risk increases (establishment of backup success paths or compensatory measures), and determination that the proposed change in OPERATIONAL CONDITION is acceptable.

Consideration should also be given to the probability of completing restoration such that the requirements of the Limiting Condition for Operation would be met prior to the expiration of the specified allowable time interval requiring action to exit the LCO.

OYSTER CREEK 3.0-2 Amendment No.: 64,241

LCO 3.0.C.2 may be used with single, or multiple systems and co_mponents unavailable. NUMARC 93-01 provides guidance relative to consideration of simultaneous unavailability of multiple systems and components .

• The results of the risk assessment shall be considered in determining the acceptability of entering the OPERATIONAL CONDITION or other specified condition in the Applicability, and any corresponding risk management actions. The Specification 3.0.C.2 risk ass*essments do not have to be documented.

The Technical Specifications allow continued operation with equipment unavailable in the RUN MODE for the duration of the specified time interval. Since this is allowable, and since in general the risk impact in that particular OPERATIONAL CONDITION bounds the risk of transitioning into and through the applicable OPERATIONAL CONDITIONS or other specified conditions in the Applicability of the Limiting Condition for Operation, the use of the Specification 3.0.C.2 allowance should be generally acceptable, as long as the risk is assessed and managed as stated above. However, there is a small subset of systems and components that have been determined to be more important to risk and use of the Specification 3.0.C.2 allowance is prohibited. The Limiting Condition for Operations governing these systems and components contain Notes prohibiting the use of Specification 3.0.C.2 by stating that Specification 3.0.C.2 is not applicable.

Specification 3.0.C.3 allows entry into an OPERATIONAL CONDIDON or other specified condition in the Applicability with the Limiting Condition for Operation not met based on a Note in the Specification which states Specification 3.0.C.3 is applicable. These specific allowances permit entry into OPERATIONAL CONDITIONS or other specified conditions in the Applicability when the associated LCO requirements do not provide for continued operation for an unlimited period of time and a risk assessment has not been performed. This allowance may apply to all the LCO conditions or to a specific requirement of a Specification. The risk assessments performed to justify the use of Specification 3.0.C.2 usually only consider systems and components. For this reason, Specification 3.0.C.3 is typically applied to Specifications which describe values and parameters, and may be applied to other Specifications based on NRC plant-specific approval.

The provisions of this Specification should not be interpreted as endorsing the failure to exercise the good practice of restoring systems or components to OPERABLE status before entering an associated OPERATIONAL CONDITTON or other specified condition in the Applicability.

The provisions of Specification 3.0.C shall not prevent changes in OPERATIONAL CONDITIONS or other specified conditions in the Applicability that are required to comply with LCO requirements. In addition, the provisions of Specification 3.0.C shall not prevent changes in OPERATIONAL CONDITIONS or other specified conditions in the Applicability that result from any unit shutdown. In this context, a unit shutdown is defined as a change in OPERATIONAL CONDITION or other specified condition in the Applicability associated with transitioning from POWER OPERATION to STARTUP MODE, STARTIJP MODE to SHUTDOWN CONDIDON, and SHUTDOWN CONDIDON to COLD SHUTDOWN CONDITION.

Upon entry into an OPERATIONAL CONDITION or other specified condition in the Applicability with the Limiting Condition for Operation not met, Specification 3.0.A requires entry into the LCO requirements until the Condition is resolved, until the Limiting Condition for Operation is met, or until the unit is not within the Applicability of the Technical Specification.

OYSTER CREEK 3.0-3 AmendmentNo.: 241

Surveillances do not have to be performed on the associated inoperable equipment (or on variables outside the specified limits), as permitted by Specification 4.0.1. Therefore, utilizing Specification 3.0.C is not a violation of Specification 4.0.1 or Specification 4.0.3 for any Surveillances that have not been performed on inoperable equipment. However, Surveillance Requirements must be met to ensure OPERABILITY prior to declaring the associated equipment OPERABLE (or variable within limits) and restoring compliance with the affected Limiting Condition for Operation .

OYSTER CREEK 3.0-4 Amendment No.: 241

3.1 PROTECTIVE INSTRUMENTATION

• Applicability:

Objective:

Specifications:

Applies to the operating status*of plant instrumentation which performs a protective function.

To assure the OPERABILITY of protective instrumentation.

A. The following operating requirements for plant protective instrumentation are given in Table 3.1.1:

1. The reactor mode in which a specified function must be OPERABLE including allowable bypass conditions.

2. The minimum number of OPERABLE instrument channels per OPERABLE trip system.

I

\ '

3. The trip settings which initiate automatic protective action.

\\

4. The action required when the limiting conditions for operation

--are-not satisfied.

8. 1. Failure of four chambers assigned to any one APRM shall make the APRM inoperable.

2. Failure of two chambers from one radial core location in any one APRM shall make that APRM inoperable .

• OYSTER CREEK 3.1-1 Amendment No.: 171, 176, 235

C. I. Any two (2) LPRM as~emblies which are input to the APRM system and are* $eparated in distance by less than three (3) times the control rod pitch.may not contain

~ a combination of mor~ than three (3) inoperable detectors (i.e., APRM channel failed or bypassed, or LPRM detectors failed or bypassed) out of the four (4) detectors located in either the A and B, or the C and D levels.

2. A Travelling In-Core Probe (TIP) chamber may be used as an APRM input to meet the criteria of 3;1.B and 3.1.C.l, provided the TIP is positioned in close proximity to one of the failed LPRM's. If the criteria of 3.1.B.2 or 3.1.C.l cannot be met, POWER OPERATION may continue at up to rated power level provided a control rod withdrawal*bloc1<. 'is'"OPERATTNG or at power levels less than 61% of rated power until the TIP can be connected, positioned and satisfactorily tested, as long ~s Specification 3.1.B.l and Table 3.1.1 are satisfied.*

Bases: The plant protection system automatically initiates protective functions to prevent exceeding established limits. In addition, other protective instrumentation is provided to initiate action which mitigates the consequences of accidents or terminates operator control. This specification provides the limiting conditions for operation necessary to preserve the effectiveness of these instrument systems.

Table 3.1.1 defines, for each function, the minimum number of OPERABLE instrument channels for an OPERABLE trip system for the

• various functions specified. There are usually two trip systems required or available for each function. The specified limiting conditions for operation apply for the*indicated modes of operation.

When the specified limiting condition cannot be met, the specified Actions Required shall be undertaken promptly to modify plant operation to the condition indicated in a normal manner. Conditions under which the specified plant instrumentation may be out-of-service are also defined in Table 3.1.1.

Except as noted in Table 3.1.1 an inoperable trip system will be placed in the tripped condition. A tripped trip system is considered OPERATING since by virtue of being tripped it is performing its required function. All sensors in the untripped trip system must be OPERABLE, except as follows:

1. The high temperature sensor system in the main steam line tunnel has eight sensors in each protection logic. channel. :*

This multiplicity of sensors serving a duplicate function

.. ,-.permits--th.i s-syst.em. to .operate. for. ~wenty month nominal intervals without calibration. Thus, if one of the temperature sensors causes a trip in one of the two trip systems, there are several cross checks that would verify if this were a real one.

If not, this sensor could be removed from service. However, a minimum of two of eight are required to be OPERABLE and only one of the two is required to accomplish a trip in a single trip system .

• OYSTER CREEK 3.1-2 Amendment No.: 171,176

2. One APRM of the four in each trip system may be bypassed without tripping the trip system if core protection is mainta~n~d. Core .

~ protection is maintained by the remaining three APRM's 1n each trip system as discussed in Section. 7.5.1.8.7 of the Updated FSAR.

lit.

• 3. One IRM channel in each of the two trip systems may be bypassed without compromising the effectiveness of the system. There are few possible sources of rapid reactivity input to the system in the low power low flow condition. Effects of increasing pressure at zero or low void content are minor, cold water from sources available during startup is not much colder than that already in the system, temperature coefficients are small, and control rod patterns are constrained to be uniform by operating procedures backed up by the rod worth minimizer. Worth of individual rods is very low in a uniform rod pattern. Thus, of all possible sources of reactivity input, uni form control rod withdrawal is the most probable cause of significant power rise. Because the flux distribution associated with uniform rod withdrawals does not involve high local peaks, and because several rods must be moved to change power by a sign Hi.cant percentage of rated, the rate of power rise is very slow. Generally the heat flux is in near equilibrium with the fission rate. In an assumed uniform rod withdrawal approach to the scram level, the rate of power rise is no more than five percent of rated per minute, and three OPERABLE IRM instruments in each trip system would be more than adequate to assure.a scram before the power could exceed the safety limit. In many cases, if properly located, a single OPERABLE IRM channel in each trip system would suffice.

4. When required for surveillance testing, a channel is made inoperable. In order to be able to test its trip function to the final actuating device of its trip system, the trip system cannot already be tripped by some other means such as a mode switch, interlock, or manual trip. Therefore, there will be times during the test that the channel is inoperable but not tripped. For a two channel trip system, this means that full reliance is being placed on the channel that is not being tested. A channel may be placed in an inoperable status for up to 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> for required surveillance without placing the trip system in the tripped condition provided at least one OPERABLE channel in the same trip system is monitoring that parameter.

5. Allowed outage times (AOT) to.permit restoration of inoperable instrumentation to OPERABLE status are provided in Table 3.1.1.

AOTs vary depending on type of function and the number-of inoperable channels per function. If an inoperable channel cannot be restored to OPERABLE status within the AOT, the channel or the associated trip system must be placed in the tripped condition. Placing the inoperable channel in trip (or the associated trip system in trip)

• conservatively compensates for the inoperability and allows

- opercation .to--continue~- Alternatively, -if it is not desired.to place the channel (or trip system) in trip (e.g., as in the case where placing the inoperable channel in trip would result in a full scram) the Action Required must be taken. * *

• OYSTER CREEK 3.1-3 Amendment No.: 3,110,171,176 5/24/75

AOTs discussed in 4 (6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> for surveillance) and 5 (repair AOTs in Table 3.1.1, Notes nn, oo and pp) above have been determined in accordance with References 1 through 6 except for instrumentation in

. Table 3.1.1, Sections Mand N. Note kk has been provided to specify a 2 hour2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> surveillance AOT for those instruments .

.... Bypasses of inputs to a trip system other than the IRM and APRM bypasses are provided for meeting operational requirements listed in the notes in Table 3.1.1. Note 'a' allows the "high water level in scram discharge volume" scram trip to be bypassed in the refuel mode .. In order to reset the safety system after a scram condition, it is necessary to drain the scram discharge volume to clear this scram input condition. (This condition usually follows any scram, no matter what the initial cause might have been.} In order to do this, .this particular scram function can be bypassed only in the refuel position. Since all of the control rods are completely .inserted following a scram, it is. permissible to bypass this condition because a control rod block prevents withdrawal as long as the switch is in the bypass condition for this function.

The manual scram associated with moving the mode switch to shutdown is used merely to provide a mechanism whereby the reactor protection system scram logic channels and the reactor manual control system can be energized. The ability to reset a scram twenty (20) seconds after going*

into the SHUTDOWN MODE provides the beneficial function of relieving scram pressure from the control rod drives which will increase their expected lifetime.

To permit plant operation to generate adequate steam and pressure to establish turbine seals and condenser vacuum at relatively low reactor power, the main condenser vacuum trip is bypassed until 600 psig. This bypass also applies to the main steam isolation valves for the same reason .

The action required when the minimum instrument logic conditions are not met is chosen so as to bring plant operation promptly to such a condition that the particular protection instrument is not required; or the plant is placed in the protection or safe condition that the instrument initiates. This is accomplished in a normal manner without subjecting the plant to abnormal operations conditions. The action and out-of-service requirements apply to all instrumentation within a particular function, e.g., if the requirements on any one of the ten scram functions cannot be met then control rods shall be inserted.

The trip level settings not specified in Specification 2.~have been included in this specification. The* bases for these settings are discussed below .

.The high drywell pressure trip setting is~ 3.5 psig. This trip wil]

scram the reactor, initiate core spray, initiate primary containment isolati-On,---init-=iate--automat-ic depressurizati_on in- conjunction with low-low-low-reactor water level, initiate the standby gas treatment

• system and isolate the reactor building. The scram function shuts the core down during the loss-of-coolant accidents. A steam leak of about 15 gpm and a liquid leak of about 35 gpm from the primary system will cause drywell pressure to reach the scram point; and, therefore, the scram provides protection for breaks greater than the above.

• OYSTER CREEK 3.1-4 Amendment No.: 20,79,110,112 2/4/77 152,160,171,176

High drywell pressure provides a second means of initiating the core spray to mitigate the consequences of loss-of-coolant accident. Its trip setting of ::;3.5 psig initiates the core spray in time to provide adequate core cooling. The break size coverage of high drywell pressure was discussed above. Low-low water level and high drywell pressure in addition to initiating core spray also causes isolation valve closure. These settings are adequate to cause isolation to minimize the offsite dose within required limits.

It is permissible to make the drywell pressure instrument channels inoperable during performance of the integrated primary containment leakage rate test provided the reactor is in the COLD SHUTDOWN condition. The reason for this is that the Engineered Safety Features, which are effective in case of a LOCA under these conditions, will still be effective because they will be activated (when the Engineered Safety Features system is required as identified in the technical specification of the system) by low-low reactor water level.*

The scram discharge volume has two separate instrument volumes utilized to detect water accumulation. The high water level is based on the design that the water in the SDN's, as detected by either set of level instruments, shall not be allowed to exceed 29.0 gallons; thereby, permitting 137 control rods to scram. To provide further margin, an accumulation of not more than 14.0 gallons of water, as detected by either instrument volume, will result in a rod block and an alarm. The accumulation of not more than 7.0 gallons of water, as detected in either instrument volume will result in an alarm.

Detailed analyses of transients have shown that sufficient protection is provided by other scrams below 45% power to permit bypassing of the turbine trip and generator load rejection scrams.

However, for operational convenience, 40% of rated reactor THERMAL POWER has been chosen as the setpoint below which these trips are bypassed. This setpoint is coincident with bypass valve capacity.

A low condenser vacuum scram trip of 20 inches Hg has been provided to protect the main condenser in the event that vacuum is lost. A loss of condenser vacuum would cause the turbine stop valves to close, resulting in a turbine trip transient.

The low condenser vacuum trip provides a reliable backup to the turbine trip. Thus, if there is a failure of the turbine trip on low vacuum, the reactor would automatically scram at 20 inches Hg. The condenser is capable of receiving bypass steam until 7 inches Hg vacuum thereby mitigating the transient and providing a margin.

The settings to isolate the isolation condenser in the event of a break in the steam or condensate lines are based on the predicted maximum flows that these systems would experience during operation, thus permitting operation while affording protection in the event of a break. The settings correspond to a flow rate of less than three times the normal flow rate of 3.2Xl<Y lb/hr.

Upon initiation of the alternate shutdown panel, this function is bypassed to prevent spurious isolation due to fire induced circuit faults .

• OYSTER CREEK

• Correction 11 /30/87 3.1-5 Amendment No.: 73, 79, 112, 149, 171, 176,184,266

The setting of ten times the stack release limit for isolation of the air-ejector offgas line is to permit the operator to perform normal, immediate remedial action if the stack limit is exceeded. The time

• necessary for this action would be extremely short when considering the annual averaging which is allowed under 10 CPR 20.106, and, therefore, would produce insignificant effects on doses to the public.

Four radiation monitors are provided which initiate isolation of the reactor building and operation of the standby gas treatment system. Two monitors are located in the ventilation ducts, one is located in the area of the refueling pool and one is located in the reactor vessel head storage area. The trip logic is basically a 1 out of 4 system. Any upscale trip will cause the desired action. Trip settings of 17 mr/hr in the duct and 100 mr/hr on the refueling floor are based upon initiating standby gas treatment system so as not to exceed allowed dose rates of 10 CFR 20 at the nearest site boundary.

The SRM upscale of 5X1Cf CPS initiates a rod block so that the chamber can be relocated to a lower flux area to maintain SRM capability as 6

power is increased to the IRM range. Full scale reading is 1 x 10 CPS.

This rod block is bypassed in IRM Ranges 8 and higher since a level of 5 5

x 10 CPS is reached and the SRM chamber is at its fully withdrawn position.

• The SRM downscale rod block of I 00 CPS prevents the instrument chamber from being withdrawn too far from the core during the period that it is required to monitor the neutron flux. This downscale rod block is also bypassed in IRM Ranges 8 and higher. It is not required at this power level since good indication exists in the Intermediate Range and the SRM 5

will be reading approximately 5 x 10 CPS when using IRM Ranges 8 and higher.

The IRM downscale rod block in conjunction with the chamber full-in position and range switch setting, provides a rod block to assure that the IRM is in its most sensitive condition before startup. ff the two latter conditions are satisfied, control rod withdrawal may commence even if the IRM is not reading at least 5%. However, after a substantial neutron flux is obtained, the rod block setting prevents the chamber from being withdrawn to an insensitive area of the core.

The APRM downscale setting of2::: 2/150 full scale is provided in the RUN MODE to prevent control rod withdrawal withoµt adequate neutron monitoring.

High flow in the main steamline is set at 120% of rated flow. At this setting the isolation valves close and in the event of a steam line break limit the loss of inventory so th.at fuel clad perforation does not occur. The 120% flow would correspond to the THERMAL POWER so this would either indicate a line break or too high a power.

Temperature sensors are provided in the steam line tunnel to provide for closure of the main steamline isolation valves should a break or leak occur in this area of the plant. The trip is set at 50°F above ambient temperature at rated power. This setting will cause isolation to occur for main steamline breaks which result in a flow of a few pounds per minute or greater. Isolation occurs soon enough to meet the criterion of no clad perforation.

OYSTER CREEK 3.1-6 Amendment No.: 2, 7, Hi9, 171, 176 01/5/71, 11/5/71, 266

The low~low-low water level trip point is set at 4'8" above the top of the active fuel and will prevent spurious operation of the automatic relief system. The trip

• point established will initiate the automatic depressurization system in time to provide adequate core cooling.

Specification 3.1.8.1 defines the minimum number of APRM channel inputs required to permit accurate average core power monitoring. Specifications 3.1.B.2 and 3.1.C.1 further define the distribution of the OPERABLE chambers to provide monitoring of local power changes that might be caused by a single rod withdrawal. Any nearby, OPERABLE LPRM chamber can provide the required input for average core monitoring. A Travelling lncore Probe or Probes can be used temporarily to provide APRM input(s) until LPRM replacement is possible.

Since APRM rod block protection is not required below 61 % of rated power, operation may continue below 61 % as long as Specification 3.1.B.1 and the requirements of Table 3.1.1 are met. For operation along the flow control line and at power levels less than 61 % of rated, the inadvertent withdrawal of a single control rod does not result in MCPR less than the Fuel Cladding Integrity Safety Limit, even assuming there is no control rod block action. In order to maintain reliability of core monitoring in that quadrant where an APRM is inoperable, it is permitted to remove the OPERABLE APRM from service for calibration and/or test provided that the same core protection is maintained by alternate means.

In the rare event that Travelling In-core Probes (TIPs) are used to meet the requirements 3.1.B or 3.1.C, the licensee may perform an analysis of substitute LPRM inputs to the APRM system using spare (non-APRM input) LPRM detectors and change the APRM system as permitted by 10 CFR 50.59.

• Under assumed loss-of-coolant accident conditions and certain loss of offsite power conditions with no assumed loss-of-coolant accident, it is inadvisable to allow the simultaneous starting of emergency core cooling and heavy load ,

auxiliary systems in order to minimize the voltage drop across the emergency buses and to protect against a potential diesel generator overload. The diesel generator load sequence time delay relays provide this protective function and are set accordingly. The repetitive accuracy rating of the timer mechanism as well as parametric analyses to evaluate the maximum acceptable tolerances for the diesel loading sequence timers were considered in the establishment of the appropriate load sequencing.

Manual actuation can be accomplished by the operator and is considered appropriate only when the automatic load sequencing has been completed.

This will prevent simultaneous starting of heavy load auxiliary systems and protect against the potential for diesel generator overload.

Also, the Reactor Building Closed Cooling Water and Service Water pump circuit breakers will trip whenever a loss-of-coolant accident condition exists with a concurrent loss of offsite power. This is justified by Amendment 42 of the Licensing Application which determined that these pumps were not required during this accident condition.

Change: 6 .

OYSTER CREEK 3.1-7 Amendment No.: 9, 15, 112, 171, 176, 236,255 ECR 05-00040 01/4/80

The drywell high radiation setpoint will ensure a timely closure of the large vent and purge isolation valves to prevent releases from exceeding ten pen~ent of the dose guideline values allowed by 10 CFR 100. The containment vent and purge isolation function is provided in response to NUREG 0737 Item II E.4.2.7.

Temperature switches are provided at the entrance of the RWCU Pump.

Room to detect a line break downstream of the RWCU isolation valves. A line break will raise room temperature. Before the room temperature exceeds 180°F, the switches will trip and close the RWCU isolation valves.

This ensures that a high energy line break will automatically be detected and isolated, even if an RWCU System isolation is not initiated by a LO-LO reactor water level signal. System isolation at this temperature will minimize the impact on off-site releases and the environmental qualification profiles for the Reactor Building.

References:

(1) NEDC-30851 P-A, "Technical Specification Improvement Analyses for BWR Reactor Protection System."

(2) NEDC-30936P-A, "BWR Owners' Group Technical Specification Improvement Methodology (With Demonstration for BWR ECCS Actuation Instrumentation)," Parts 1 and 2.

(3) NEDC-30851 P-A, Supplement 1, "Technical Specification Improvement Analysis for BWR Control Rod Block Instrumentation."

• (4)

(5)

NEDC-30851 P:-A,*

Instrumentation."

Supplement 2, "Technical Specification Improvement Analysis for BWR Isolation Instrumentation Common to RPS and ECCS NEDC-31677P-A, "Technical Specification Improvement Analysis for BWR

, A Isolation Actuation Instrumentation."

(6) GENE-770-06-1-A, "Bases for Changes to Surveillance Test Intervals and Allowed Out-of-Service Times for Selected Instrumentation Technical Specifications."

• OYSTER CREEK 3.1-8 Amendment No.: 116,171, 259

TAHLt: J.1.1 Sheet I of 13 PROTECTIVE INSTRUMENTATION REQUIREMENTS Minimum Number of Minimum Number of Reactor Modes in Which OPERABLE or Instrument Channels Per Function Must Be Operable OPERA TING [tripped] OPERABLE Function Trip Setting Shutdown Refuel Startup Run Trip Systems Trip System Action Required*

A. Scram I. Manual Scram X X X X 2 Insert control

2. High Reactor Pressure ** . X(s) X(ll) X 2 2(nn) rods

3. High Drywell Pressure ~ 3.5 psig X(u) X(u) X 2 2(nn)

4. Low Reactor Water Level ** X X X 2 2(nn)

5. a. High Water Level in ~ 29 gal. X(a) X(z) X(z) 2 2(nn)

Scram Discharge Volume North Side

b. High Water Level in .:'.:: 29 gal. X(a) X(z) X(z) 2 2(nn)

Scram Discharge Volume South Side

6. Low Condenser Vacuum ~ 20 in. hg. X(b) X 3(mm)(nn)

7. DELETED OYSTER CREEK 3.1-9 Change: 4,8 Amendment No.: 29,44,63,*,m,HG,-8+; l-49,~-1-69;-J..+.I, *200

TABLE 3.1.l Sheet 2 of 13 PROTECTIVE INSTRUMENTATION REQUIREMENTS Minimum Number of Minimum Number of Reactor Modes in Which OPERABLE or Instrument Channels Per Function Must Be Oeerable OPERATrNG (tripped] OPERABLE Function Trip Setting Shutdown Refuel Startup Run Trip Systems Trip System Action Required*

X. Average Power Range ** X(c,s) X(c) X(c) 2 3(nn) l\lonitor (APRM) lJ. Intermediate Range Monitor ** X(d) X(d) 2 3(mi)

(IRM)

.~ 10 . Main Ste::unlim: Isolation ** X(b,s) X(b) X 2 4(nn)

Valve Closure I I. Turbine Trip Scram ** XG) 2 4(nn)

12. Generator Load Rejection ** X(i) 2 2(nn)

Scram

13. APRM Downscale/lRM ** X(c) 2 3(nn)

Upscale B. Reactor Isolation I. Low-Low Reactor Water ** X X X -x 2 2(00) Close Main Steam Level Isolation Valves and Close Isolation Condenser Vent Valve or,

2. High Flow in Main ~120% rated X(s) X(s) X X 2 2(00) PLACE lN COLD Steamline A SHUTDOWN OYSTER CREEK 3.1-10 Amendnu~nt No.: -ztit, m, 208

• TABLE 3.1.1 Sheet 3 of 13 PROTECTIVE INSTRUMENTATION REQUIREMENTS Reactor Modes Minimum Number of Minimum Number of in which Function OPERABLE or instrument Channels Per Must Be OPERABLE OPERATING [tripped] OPERABLE Function Trip Setting Shutdown Refuel Startup Run Trip Systems Trip System Action Required*

3. High Flow in Main Steam- .:::120% rated X(s) X(s) X X 2 2(00) line B

4. High Temperature in Main .:::Ambient at Power X(s) X(s) X X 2 2(00)

Steamline Tunnel + 50°F

5. Low Pressure in Main ** X(cc) X 2 2(00)

Steamline

6. DELETED C. Isolation Condenser Initiation I. High Reactor Pressure ** X(s) X(s) X(ll) X 2 2(pp) PLACE IN COLD

2. Low-Low Reactor ~7'2" above TOP of X(s) X(s) X X 2 2(pp) SHUTDOWN Water Level ACTIVE FUEL CONDITION D. Core Spray I. Low-Low Reactor ** X(t) X(t) X(t) X 2 2(pp} Consider the Water Level respective core spray loop

2. High Drywell Pressure ~ 3.5 psig X(t) X(t) X(t) X 2(k) 2(k)(pp) inoperable and comply with

3. Low Reactor Pressure ~ iB5 psig X(t) X(t) X(t) X 2 2(pp) Spec 3.4 (valve permissive)

OYSTER CREEK 3 .1-11 Amendment No.: 44,+l,+9, ~. ~ ~l-+-1-, 208

TABLE 3.1.1 PROTECTIVE INSTRU1vi£NTATION REQUIREMENTS Sheet 4 of 13 Reactor Modes Minimum Number of Minimum Number of in which Function OPERABLE or Instrument Channels Must Be OPERABLE OPERATING [tripped] Per OPERABLE Function Trip Setting Shutdown Refuel Startup Run Trip Systems Trip System Action Required*

E. Containment Spray Comply with Technical Specification 3.4 F. Primary Containment Isolation

1. High Drywell Pressure  ::; 3.5 psig X(u) X(u) X(u) X 2(k) 2(k)(oo) Isolate containment or PLACE IN COLD

2. Low-Low Reactor ~ 7'2" above TOP of X(u) X(u) X(u) X 2 2(00) SHUTDOWN Water Level ACTIVE FUEL CONDffiON G. Automatic Depressurization

1. High Drywell Pressure ~ 3.5 psig X(v) X(v) X(v) X 2(k) 2(k) See note h

2. Low-Low-Low ~ 4' 8" above TOP of X(v) X(v) X(v) X 2 2 See note h Reactor Water Level ACTIVE FUEL

3. Core Spray Booster > 21.2 psid X(v) X(v) X(v) X Notei Notei See note i Pump d/p Permissive H. Isolation Condenser Isolation (See Note hh)

1. High Flow Steam Line ~ 20 psigP X(s) X(s) X X 2* 2(00) Isolate affected Isolation Condenser

2. High Flow Condensate ~27"PH20 X(s) X(s) X X 2 2(00) comply with Spec Line 3.8. See note dd OYSTER CREEK 3.1-12 Amendment No.: 44,79,108,112,1>0,171,l90,l95,208, 253 Change 4; Correction: 5/11/84

TABLE 3.1.1 PROTECTIVE INSTRUMENTATION REQUIREMENTS Sheet 5 of 13 Reactor Modes Minimum Number of Minimum Number of in which Function OPERABLE or Instrument Channels Per Must Be OPERABLE OPERATING [tripped] OPERABLE Function Trip Setting Shutdown Refuel Startup Run Trip Systems Trip System Action Reguired*

I. Otfgas System Isolation I . High Radiation In S 2000 mRem/hr X(s) X(s) X X I (ii) 2(ii) See noteli Offgas Line (e)

J. Reactor Building Isolation and Standbl'. Gas Treatment S:"r:*stem Initiation Isolate Reactor I . High Radiation S 100 mR./hr X(w) X(w) X X Building and Reactor Building Initiate Standby Operating Floor Gas Treatment System or Manual

2. Reactor Building S 17 mR./hr X(w) X(w) X X I l Surveillance .for Ventilation Exhaust not more than 2-l Hours (Total for

3. High Drywell Pressure s 3.5*psig. X(u) X(u) X X l(k) 2(k) all instruments under J) in any

4. Low-Lov,: Reactor ~ 7'2" above TOP of X X X X 2 30-day period.

Water Level ACiIVE FUEL K. Rod Block 5

I. SRM Upscale S 5~10 cps X X(i) l 2 No control rod withdrawals

2. SRM Downscale ~ IOOcps(f) X X(l) 2 permitted

3. IRM Downscale * ~ 5/125 fullscale (g) X X 2 3 OYSTER CREEK 3. 1-13 Amendment No.: 44,72,75,79,91,112,l71,l9l , 208 Change: 4

TABLE 3.1.1 PROTECTIVE INSTRUMENTATION REQUIREMENTS Sheet 6 of 13 Reactor Modes Minimum Number of Minimum Number of in which Function OPERABLE or Instrument Channels Must Be OPERABLE OPERA TING [tripped] Per OPERABLE Function Trip Setting Shutdown Refuel Startup Run Trip Systems Trip System Action Required*

K. Rod Block (Cont'd.)

4. APRM Upscale ** . X(s) X X 2 3(c)

5. APRM Downscale ~ 2/150 fullscale X 2 3 (c)

6. IRM Upscale :5 I 08/ I25 fullscale X X 2 3

7. a) Water Level High :5 14 gallons X(z) X(z) X(z) I per Scram Discharge Instrument Volume North Volume b) Water Level High .:5 14 gallons X(z) X(z) X(z) I per Scram Discharge Instrument Volume South Volume L. Condenser Vacuum Pump Isolation Deleted

.M. Diesel Generator Time Delay after Load Sequence energization of relay Timers I. CRD Pump 60 sec+/- 15% X X X X 2(m) l(n)(kk) Consider the pump inoperable and comply with Spec 3.4.D (See note q)

OYSTER CREEK 3.1-14 Amendment No.: 44,63,169,169, 200

TABLE 3.1.1 PROTECTIVE INSTRUMENTATION REQUIREMENTS Sheet 7 of 13 Reactor Modes Minimum Number of Minimum Number of in which Function OPERABLE or Instrument Channels Must Be OPERABLE OPERATING [tripped] Per OPERABLE Function Trip Setting Shutdown . Refuel Startup* Run Trip Systems Trip System .Action Required*

M. Diesel Generator Load Sequence Timers (Cont'd.}

2. Service Water Pump (aa) 120 sec+/- 15% X X X X 2(o) 2(p)(kk) Consider the (SK1A). pump inoperable (SK2A) and comply 10 sec.+/- 15% within 7 days (SK7A) (See note q)

(SKSA)

3. Reactor Building Closed 166 sec+/- 15% X X X X 2(m) 1(n)(kk) Consit;fer the Cooling Water Pump pump inoperable (bb) and comply within 7 days (See note q)

N. Loss of Power

a. 4.16 KV Emergency Bus X(ff) X(ff) X(ff) X(ff) 2 1(kk)

Undervoltage (Loss of Voltage)

b. .4.16 KV Emergency Bus

.. X(ff) X(ff) X(ff) X(ff) 2 3(kk) See note cc Undervoltage (Degraded Voltage)

0. Containment Vent and Purge Isolation

1. DryweJI High Radiation s 74.6 R/hr X(u) X(u) X(u) X 1 1 Isolate vent &

Purge pathways or PLACE IN COLD SHUTDOWN CONDITION P. RWCU HELB Isolation

1. AWCU Pump Room High Temperature ~ 180°F X(s) X(s) X X 2 2(00) Close isolation valves V-16-1, V-16-2, V-16-14, & V-16-61.

OYSTER CREEK 3.1-15 Corrected Letter date, 28/99 Amendment No.: Hi,44,eG,8Q,H3G.~7~ .H~a. 2GB, 259

TABLE 3.1.1 {CONTD)

Sheet 8 of 13

• Action required when minimum conditions for operation are not satisfied. Also pennissible to trip inoperable trip system. A channel may be placed in an inoperable status for up to six hours for required surveillance without placing t~c. trip system in the tripped condition provided at least one OPERABLE instrument channel in the same trip system is monitoring that parameter.

• • See Specification 2.3 for Limiting Safety System Settings .

Notes:

a. Pennissible to bypass, with control rod block, for reactor protection system reset in REFUEL MODE.

b. Pennissible to bypass below 600 psig in REFUEL and STARTUP MODES.

0

c. One (I) APRM in each OPERABLE trip system may be bypassed or inoperable provided the requirements of Specification 3. I.C and 3.1 O.C are satislied.

Two APRM's in the same quadrant shall not be concurrently bypassed except as*noted below or pennitted by note.

Any one APRM may be removed from service for up to six hours for test or calibration without inserting trips in its trip system only if the remaining OPERABLE APRM's meet the requirements of Specification J.1.B. I and no control rods are moved outward during the calibration or test. During this short period, the requirements of Specifications 3.1.B.2, 3.1.C and 3.1 O.C need not be met.

d. The IRMs shall be inserted and OPERABLE until the APRMs are OPERABLE and reading at least 2/150 full scale.

e. Offgas system isolation trip set at .:::2,000 mRem/hr. Air ejector isolation valve closure time delay shall not exceed IS minutes.

f. Unless SRM chambers are fully inserted.

g. Not applicable when IRM on lowest range.

h. With one or more instrument channel(s) inoperable in one ADS trip system, place the relay contact(s) for the inoperable initiation signal in the tripped condition within 4 days, or declare ADS inoperable and take the action required by Specification 3.4.B.3.

With one or more instrument channel(s) inoperable in both ADS trip systems, restore ADS initiation capability in at least one trip system within I hour, or

• declare ADS inoperable and take the action required by Specification 3.4.B.3.

OYSTER CREEK 3.1-16

• Amendment No.: 44,75, 198,110,171,190, 191, 195 , 208

TABLE 3.1.11 ...... ff'D)

Sheet 9 of 13 Individual electromatic relief valve control switches shall not be placed in the "Off' position for more than 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> (total time for all control switches) in any 30-day period and only one relief valve control switch may be placed in the "Off' position at a time.

i. With two core spray systems OPERABLE:

1. A maximum of two core spray booster pump differential pressure (dip) switches may be inoperable provided that the switches are in opposing ADS trip system [i.e., only: either RV-40 A&D or RV-40 B&CJ. Place the relay contacts associated with the inoperable dip switch(es) in the de-energized position, within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />. Restore the inoperable dip switch(es) within 8 days, or declare ADS inoperable and take the action required by Specification 3.4.B.3; or,

2. If two inoperable dip switches are in the same ADS trip system [i.e., RV-40 A&B or RV-40 C&D], place the relay contacts associated with ,the inoperable dip switch(es) in the de-energized position, within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />. Restor~ the inoperable dip switches within 4 days, or declare ADS inoperable and take the action required by Specification 3.4.B.3.

With only one core spray system OPERABLE:

If one or more dip switches become inoperable in the OPERABLE core spray system, declare ADS inoperable and take the action required by Specification 3.4.B.3.

j. Not required below 40% ofrated reactor THERMAL POWER.

k. All four (4) drywell pressure instrument channels may be made inoperable during the-integrated primary containment leakage rate test (See Specification 4.5), provided that the plant is in the COLD SHUTDOWN condition and that no work is performed on the reactor or its connected systems which could result in lowering the reactor water level to less than 4' 8" above the TOP OF THE ACTIVE FUEL.

I. Bypass in IRM Ranges 8, 9, and 10.

m. There is one time delay relay associated with each of two pumps.

n. One time delay relay per pump must be OPERABLE.

OYSTER CREEK 3.1-17 Carree~eel Letter el~ea l0/28/99 Amendment No. 171, 184, 19Q, 208, 266

TABLE 3.1.1 {CONT'D)

Sheet 10 of 13

o. There are two time delay relays associated with each of two pumps. One timer per pump is for sequence starting (SK1 A. SK2A) and one timer per pump is for tripping the pump circuit breaker (SK7A, SKB,l\) *.

p. Two time delay relays per pump must be OPERABLE.

q. Manual initiation of affected component can be accompllshetj* after the automatic load sequencing Is completed.

r. Time delay starts after closing of containment spray pump circuit breaker.

s. Thes~ functions not required to be OPERABLE with the reactor temperature less than 212°F and the vessel head removed or vented or during REACTOR VESSEL PRESSURE TESTING.

t. These functions may be inoperable or bypassed when corresponding portions in the same core spray system logic train are Inoperable per Specification 3.4.A.

u. These functions not required to be OPf=AABLE when PRIMARY CONTAINMENT INTEGRITY Is not required to be maintained.

v. These functions not required to be OPERABLE when the ADS Is not required to be OPERABLE.

w. These functions must be OPERABLE only when Irradiated fuel is In the fuel pool or reactor vessel and SECONDARY CONTAINMENT INTEGRITY is required-per Specification 3.5.B.

y. Deleted.

z. The bypass function to permit scram reset In the SHUTDOWN or REFUEL MODE with control rod block must be OPERABLE In this mode.

aa. Pump circuit breakers will be tripped In 1Oseconds :t: 15% during a LOCA with a concurrent Loss of Offslte Power (LOOP) by relays SK7A and SKSA.

bb. Pump circuit br1;1akers will trip Instantaneously during a LOCA with a concurrent Loss of Offsite Power (LOOP).

cc. Only applicable d~ring STARTUP MODE while OPERATING In l~M range 10.

OYSTER CREEK 3.J-18 Amendment No.: U.44,eQ,63,71,72,1Q8,12G,17l,298, 25 5

TABLE 3.1.1 ,~ONT'D)

Sheet 11 of 13 dd. If any isolation condenser Inlet (steam side) isolation valve becomes or is made inoperable in the open position during the RUN MODE comply with Specification 3.8.E. If an AC motor-operated outlet (condensate return) isolation valve becomes or is made inoperable in the open position during the RUN MODE comply with Specification 3.8.F.

ee. With the number of OPERABLE channels one less than the Minimum Number of OPERABLE Instrument Channels per OPERABLE Trip System, operation may proceed until performance of the next required CHANNEL FUNCTIONAL TEST provided the inoperable channel Is placed in the tripped condition within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br />.

ff. This function is not required to be OPERABLE when the associated safety bus is not required to be energized or fully OPERABLE as per applicable sections of these Technical Specifications.

gg. Deleted hh. The high flow trip function for "B" Isolation Condenser is bypassed upon initiation of the alternate shutdown panel. This prevents a spurious trip of the Isolation Condenser in the event of fire induced circuit damage.

ii. Instrument shall be OPERABLE during main condenser air ejector operation except that a channel may be taken out-of-service for the purpose of a check, calibration, test, or maintenance without declaring it inoperable.

jj. With no channel OPERABLE, main condenser offgas may be released to the environment for as long as 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> provided the stack radioactive noble gas monitor is OPERABLE. Otherwise, be I~ at least SHUTDOWN CONDITION within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

kk. One channel may be placed In an Inoperable status for up to two hours for required surveillance without placing the trip system in the tripped condition.

II. This function not required to be OPERABLE with the reactor vessel head removed or unbolted.

mm. "Instrument Channel" in this case refers to the bellows which sense vacuum In each of the three condensers (A, B, and C), and Trip System" refers to vacuum trip systems 1 and 2.

OYSTER CREEK 3.1-19 Amendment No.: 80,91,108,112,130,Hi2,171,2Q8,2i3, 273

TABLE 3.1.1 (CONT'D)

Sheet 12 of 13

-~--,, nn. With one required chann~l inoperable in one Trip System, within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />, restore the inoperable channel or place the inoperable channel ~nd/or that Trip System in the tripped"'- condition.

With two or more required channels inoperable:

I. Within one hour, verify sufficient channels remain OPERABLE or tripped"" to maintain trip capability, and

2. Within 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />, place the inoperable channel(s) in one Trip System and/or that Trip System.AA in the tripped condition"', and

3. Within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />, restore the inoperable channels in the other Trip System to an.OPERABLE status or tripped"'.

Otherwise, take the Action Required.

-~ An inoperable channel or Trip System need not be placed in the tripped condition where this would cause the Trip Function to occur. In these cases, if the inoperable channel is not restored to OPERABLE status within the required time, the Actlon Required shall be taken.

...... This action applies to that Trip System with the most inoperable channels; if both Trip Systems have the same number of inoperable channels, the action can be applied to either Trip System.

oo. With one required channel inoperable in~ Trip System, either I. Place the inoperable channel in the tripped condition within

a. 12 hour1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />s* for parameters common to Scram Instrumentation, and

b. 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> for parameters not common to Scram lnstrumentation.

or 1

2. Take the Action Required.

OYSTER CREEK 3.1-20 Amendment No.: 4-7+ , 208

TABLE3.l.1 (CONTD)

Sheet 13 of 13 With one required channel inoperable in both Trip Systems,

1. Place the inoperable channel in one Trip System in the tripped condition within one hour, and Place the inoperable channel in the remaining Trip System in the tripped condition within

") a.

(I) 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> for parameters common to Scram Instrumentation, and

• (2) . 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> for parameters not common to Scram Instrumentation.

or

b. Take the Action Required.

pp. With one or more required channels inoperable per Trip System:

I. For one channel inoperable, within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> place the inoperable channel in the tripped condition or take the Action Required.

2. With more than one channel inoperable, take the Action Required.

3.1-21 OYSTER CREEK Amendment No.: +-l , 208

3.2 REACTIVITY CONTROL Applicability: Applies to core reactivity and the operating status of the reactivity control systems for the reactor.

Objective: To assura reactivity control capability of the reactor.

Specification:

A. Core Reactivity I. The SHIJTDOWN MARGlN .(SOM} unde.r.. a]l_op.era.ti.onal_condi.tiosis shall~-be equal to or greater than:

(a) 0.38% delta k/k, with the highest worth control rod analytically determined; or (b) 0.28% delta k/k, with the highest worth control rod determined by test.

2. If one or more control rods are determined to be inoperable as defined in Specification 3.2.8.4 while in the STARTUP MODE or the RUN MODE, then a determination of whether Specification 3.2 A. is met must be made within 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />. If a determination cannot be made within the specified time period, then assume Specification 3.2 A.I is not met. *

3. .If Specification 3.2.A.I is not met while in the STARTUP Mode or th*e RUN MODE, meet Specification 3.2.A.l within 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> or be in the SHUTDOWN CONDITION within the following 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />.

4. If Specification 3.2.A.I is not met while in the SHUTDOWN CONDITION~

or the COLD SHUTDOWN CONDITION, then:

(a) Fully insert all insertable control rods within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br />, AND (b} Comply with the requirements of Specifications 3.2.C and 3.5.B.

5. If Specification 3.2.A.l is not met while in the REFUEL MODE, then:

(a) Immediately suspend CORE ALTERATIONS except for fuel assembly removal, AND (b) Immediately initiate action to fully insert all insertable control rods in control cells containing one or more fuel assemblies, AND *

(c) Comply with the requirements of Specifications 3.2.C and 3.5.B.

OYSTER CREEK 3.2-1 Amendment No: 75, Ill 178

• .1. The control _rod dri.ve housing support shall be in place during power

• 2.

operation and when the reactor coolant system is pressurized above atmospheric pressure with fuel in the reactor vessel, unless all control rods are fully inserted and Specification 3.2.A is met.

The Rod Worth Minimizer (RWM) shall be operable during each reactor

-- startup until reactor power reaches 10% of rated power except as follows:**

(a) Should the RWM become inoperable after the first 12 rods have been withdrawn, the startup may continue provided that a second l 1.censed .aper.a tor ..v.e.r:i .f.ies .. tha.t-1be.._.U..censed-operator-...at. the reactor console is following the rod program.

(b) Should the RWM be inoperable before a startup is commenced or before the first twelve rods are withdrawn, one startup during I

e~ch calendar year may be performed without the RWM provided that the second licensed operator verifies that the licensed operator at the reactor console is following the rod program and provided that a_reactor engineer from the Core Engineering Group also verifies that the rod program is being followed. A startup without the RWM as described in this subsection shall be reported in a special report to the Nuclear Regulatory Commission (NRC) within 30 days of the startup stating the reason for the failure of the RWM, the action taken to repair it and the schedule for completion of the repairs.

• Control rod withdrawal sequences shall b~ established with a banked position withdrawal sequence so that the rod drop accident design limit of 280 cal/gm is not exceeded. For control rod withdrawal sequences not in strict compliance to BPWS, the maximum in sequence rod worth shall be il.0% 6K.

3. The average of the scram insertion times of all operable control rods shall be no greater than:

• Rod Length Insertion Time Inserted (%) (Seconds) 5 0.375 20 0.900 50 2.00 90 5.00

• OYSTER CREEK 3.2-2 Amendment No: 75, 113 178

The average of the scram insertion times for the three fastest control rods of all groups of four control rods in a two-by-two array shall be no greater than:

Rod Length Insertion Time

• Inserted (%)

20 50 90 5

(Seconds}

0.398 0.954 2.120 5.300 Any four rod group may contain a control rod which is valved out of service provided the above requirements and Specification 3.2.A are met. Time zero shall be taken as the de-energization of the pilot scram valve solenoids.

4. In service control rods which cannot be moved with control rod drive pressure shall be considered inoperable. If a partially or fully withdrawn control rod drive cannot be moved with drive or scram pressure, the reactor shall be brought to a shutdown condition within 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> unless investigation demonstrates that the cause of the failure is not due to a failed control rod drive mechanism collet housing. Inoperable control rods shall be valved out of service, in such positions that Specification 3.2.A is met. In no case shall the number of inoperable control rods valved out of service be greater than six during the power operation. If this specification is not met, the reactor shall be placed in the shutdown condition.

5. Control Rods shall not be withdrawn for approach to criticality unless at least two source range channels have an observed count rate equal to or greater than 3 counts per second.

C. Standby Liquid Control System

1. The standby liquid control system shall be operable at all times under the following conditions:

(a) when the reactor is not shut down by the control rods such that Specification 3.2.A is met, except as provided in Specification 3.2.C.3, and (b) when the reactor is >212°F, except during REACTOR VESSEL PRESSURE TESTING.

2. The standby liquid control solution shall have a Boron-1 O isotopic enrichment equal to or greater than 35 atom %, be maintained within the cross-hatched volume-concentration requirement area in Figure 3.2-1 and at a temperature not less than the temperature presented in Figure 3.2-2 at all times when the standby liquid control system is required to be operable.

3. (a) If one standby liquid control system pumping circuit becomes inoperable during the RUN mode and Specification 3.2.A is met, the reactor may remain in operation for a period not to exceed 7 days, provided the pump in the other circuit is verified daily to be operable, otherwise be in the Shutdown condition within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

OYSTER CREEK 3.2-3 Amendment No: 76, 124, 167,178,253, Amendment No. 262

If tne solution is outside the cross-hatched volu~e-concentration area but within the shaded volume-concentration area of Figure 3.2-1, return the

• (c}

solution to the cross-hatched area within 7 days. If, after this time period, the requirement is still not met, submit a report to the NRC within 7 days advising them of plans to return the solution to the cross-hatched volume-concentration area.

• • If the solution is outside the cross-hatched volume concentration area ~nd outside the shaded volume-concentration area of Figure 3.2-1, return the solution to within the shaded volume-concen.tration area of

.. Figure .3.2-:-1..o.r ..be ...in....the..Shutdawn-condi.tion--w-ithin -24 hours.

(d) If the solution temperature is less than the minimum shown in Figure 3.2-2, increase the temperature to greater than the minimum and verify the solution is within the shaded volume-concentration area of Figure ~.2-1 or be in the Shutdown condition within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

(e) If the enrichment requirement- of 3.2.C.2 is not met:

(1) Return the Boron-10 isotopic enrichment to greater than or equal to 35 atom% within 7 days of the receipt of the enrichment report. If, after this time period, the enrichment requirement is still not met, submit a report to the NRC within 7 days advising them of the plans to return the solution to greater than or equal to 35 atom% Boron-10 isotopic enrichment.

(2) A check shall be made to ensure that the sodium pentaborate solution meets the original design criteria by comparing the enrichment, concentration and volume to established criteria (Boron-10 equal to or greater than 82 pounds). If the sodium pentaborate solution does not meet the original criteria, be in the Shutdown condition within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

D. Reactivity Anomalies The difference between an observed and predicted control rod inventory shall not exceed the equivalent of one percent in reactivity. If this limit is exceeded and the discrepancy cannot be explained, the reactor shall be brought to the cold shutdown condition by normal order]y shutdown procedure. Opera*t ion sha 11 not be permitted until the cause has been evaluated and appropriate corrective action has been completed.

The NRC shall .be notified within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> of this situation in accordance with Specification 6.6 .

• OYSTER CREEK 3.2-4 Amendment No: 75, 12~ 178

Eases:

Limiting conditions of operation on core reactivity and the reactivity

• control systems afe required to assure that the excess reactivity of the reactor core is controlled at all times. The conditions specified herein assure the capability to provide reactor shutdown from steady state and transient conditiGns and assure the capability of limiting reactivity insertion rates under accident conditions to values which do not jeopardize the reactor coolant system integrity or operability of required saf~ty features.

The core reactivity limitation is required to assure the reactor can be shut down at any time when fuel is in the core. It is a restriction that must__ be_ incor..po.r.ated...into_ the...de.s.ign.~of.. ..the---c-ere--fuel; -**it --must *be

• applied to the conditions resulting from core alterations; and it must be applied in determining the required operability of the core reactivity control devices. The basic criterion is that the core at any point in its operation be capable of being made subcritical in the cold, xenon-free condition with the operable control rod of highest worth fully withdrawn and all other operable rods fully inserted. At most times in core life, more than one control rod drive could fail mechanically and this criterion would still be met.

The SDM limit specified in Section 3.2.A.l accounts. for the uncertainty in the demenstration of SDM by testing. Separate SOM limits are provided for testing where.the highest worth control rod is determined analytically or by measurement (Ref. 11). This is-due to the reduced uncertainty in the SDM test when the highest worth control rod is determined by measurement. When SOM is demonstrated by calculations

• not associated with a test, additional margin must be added to the specified SOM limit to account for uncertainties in the calculation. To ensure adequate SDM during the design process, a design margin of 1.0%

delta _k is included to account for uncertainties in the design calculations (Ref. 11).

Inability to meet SOM limits in the STARTUP MODE or RUN MODE is most probably due to inoperable control rods. Reduced SOM is not considered an immediate threat to nuc1ear safety, therefore time is allowed for analysis to insure Specification 3.2 A. is met, and for repair before requiring the plant to undergo a transient to achieve the SHUTDOWN CONDITION. The allowed times of 6 hour6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />s-for analysis and an additional 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> for repair, if 3.2.A.l is not.met, are considered reasonable while limiting the potential for further reduction in SOM or the occurrence of a transient.

If SOM cannot be restored, sh~tdown is required to minimize the potential for, and consequences of, an accident or malfunction of equipment important to safety. The allowed completion time of 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> is considered reasonable to achieve the SHUTDOWN CONDITION from full power in an orderly manner and without challenging plant systems .

• OYSTER CREEK 3.2-5 Amendment N9: 75, 124 178

Inabil i~v ta meet SOM li~its in the SHUTDOWN CONDIT:ON br COLD SHUTDOWN CONDITICtl could be due to inoperable control rods, discovery of errors in the SOM analysis, or discovery of errors in previous CORE ALTERATIONS. Inserting control rods maximizes SOM and, since all operable control rods are r~uired to be fully inserted in these conditions, should be able to be completed in 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br />. The Standby Liquid Control System is allowed to be inoperable and Secondary Containment Integrity is allowed to be relaxed in these conditions when SDM limits*-*are met. Therefore, they may not be available when the inability ~o meet SOM limits is recognized. The Standby Liquid Control System is needed to provide negative reactivity if control rods are not adequate to maintain the reactor subcritical. Secondary Containment Integrity is needed to provide means for control of potential radioactiye releases.

Inability to meet SOM limits in the REFUEL MODE is most probably due to CORE ALTERATION errors. CORE ALTERATIONs are suspended to prevent further reduction in SOM. Fuel assembly removal and control rod insertion reduce total reactivity and are allowed in order to recover SOM. Control rods in control cells which do not contain fuel do not affect the reactivity of the core and therefore do not have to be inserted. The Standby Liquid Control System is allowed to be inoperable in this mode when SOM limits are met and, therefore, may not be available when the inability to meet SOM limits is recognized. The Standby Liquid Control System is needed to provide negative reactivity if control rod~-are not adequate to maintain the reactor subcritical.

Secondary Containment Integrity is needed to provide means for control of potential radioactive releases.

Fuel bundles containing gadolinia as a burnable neutron absorber results in a core reactivity characteristic which increases with exposure, goes through a maximum and then decreases. Thus, it is possible that~ core could be more reactive later in the cycle than at the beginning.

Satisfaction of the above criterion can be demonstrated conveniently only at the time of refueling since it requires the core to be cold and

• xenon-free. The demonstration is designed to be done at these times and is such that if it is successful, the criterion is satisfied for the entire subsequent fuel cycle. The criterion will be satisfied by demonstrating Specification 4.2.A at the-beginning of each fuel cycle with the core in the cold, xenon-free condition. This demonstration will include consideration for the calculated reactivHy c_haracteristic during the following operating cycle -and the uncertainty in this calculation.

The control rod drive housing support restricts the outward movement of a control rod to less than 3 inches in the extremely remote event of a housing failure (2). The amount of reactivity which could be a~ded by this small amount of rod withdrawal, which is less than a norm~l single

. withdrawal increment,*will not contribute to any damage to the reactor coolant syste*. The ~upport is not required when no fuel is in the core since no nuclear ctinsequences could occur in the absence of fuel *

• • OYSTER CREEK 3.2-6 Amendment No: 75, 124 I 178

The sup~ort is not requirea if the reactbr coolant system is at atmospheric pressure since there would then be no driving force to rapidly eject a drive housing. The support is not required if all

• control rods are fully inserted since the reactor would remain subcritical even in the event of complete ejection of the strongest control rod (3).

The Rod Worth Minimizer (4) provides automatic supervision of conformance tri the specified control rod patterns. It serves as a back-up to procedural control of control rod worth. In the event that the RWM is out of service when required, a licensed operator can manually fulfill the control rod pattern conformance functions of the RWM in which-case the normal-procedural controls are backed up by independent procedural .contr:oJs_.ta assur..e....conf.ormance-..dur.ing .CGntrol-rod withdrawal. This allowance to perform a startup without the RWM is limited to once each calendar~year to assure a high operability of the RWM which is preferred over procedural controls.

Control rod drop accident (RDA) results for plants using banked position withdrawal sequences (BPWS) show that in all cases the peak fuel enthalpy in an RDA would be much less* than the 280 cal/gm design limit even with the maximum incremental rod worth. The BPWS is developed prior to initial operation of the unit following any refueling outage and the requirement that the operator follow the BPWS is super-vised by the RWM or a second licensed operator. If it is necessary to deviate slightly from the BPWS sequence (i.e., due to an inoperable control rod) no further analysis is needed if the maximum incremental rod worth in the modified sequence is equal to or less than 1.0% delta K. An incremental control rod worth of less than or equal to 1.0% delta K will not result in a peak fuel*enthalpy above the design limit of 2ao*cal/gm*

as documented in reference 10.

• The BPWS limits the reactivity worths of control rods and together with the integral rod velocity limiters and the action of the control rod drive system limits potential reactivity insertion such that the results of a control rod drop accident will not exceed a maximum fuel energy content of 280 cal/gm. Method and basis for the rod drop accident analyses are documented in Reference 5.

The control rod system is designed to bring the reactor subcritical from a scram signal at a rate fast enough to prevent fuel damage. Scram reactivity curve for the transient analyses is calculated and evaluated with each reload core. In the analytical treatment of the transients, 290 milliseconds are allowed between a neutron sensor reaching the scra~

point and the start of motion of the control rods. This is adequate and conservative when compared to the typical time delay of about 210 milliseconds estimated from scram test results. Approximately the first 90 milliseconds of each of these time intervals result from the sensor and circuit delays when the pilot scram solenoid de-energizes.

Approximately 120 milliseconds later, the control rod motion is estimated to actually begin.

• OYSTER CREEK 3.2-7 Amendment No: 75, 124, 178

However, 200 milliseconds is conservatively assumed for this time interval in the transient analyses and this is also included in the

• allowable scram insertion times of Specification 3.2.B.3. The specified limits provide sufficient scram capability to accommodate failure to scram of any one operable rod. This failure is in addition to any inoperable rods that exist in the core, provided that those inoperable rods met the core reactivity Specification 3.2.A.

Control rods (6) which cannot be moved with control rod drive pressure are clearly indicative of an abnormal operating condition on the affected rods and are, therefore, considered to be inoperable.

Inoperable rods are valved out of service to fix their position in the core and assure predictable behavior. If the rod is fully inserted and then valved out of service, it is in a safe position of maximum contribution to shutdown reactivity. If it is valved out of service in a non-fully inserted position, that position is required to be consistent with the shutdown reactivity limitation stated in Specification 3.2.A, which assures the core can be shutdown at all times with control rods. Before a rod is valved out of service in a non-fully inserted position, an analysis is performed to insure Specification 3.2.A is met.

The number of inoperable control rods permitted to be valved out of service

• could be many more than six allowed by the specification, particularly late in the operating cycle; however, the occurrence of more than six could be indicative of a generic problem and the reactor will be shut down. Operable

• rods that have been taken out of service at the fully inserted position to perform HCU maintenance are not to be counted as inoperable control rods.

Also, if damage within the control rod drive mechanism and in particular, cracks in drive internal housings, cannot be ruled out, then a generic problem affecting a number of drives cannot be ruled out.

Circumferential cracks resulting from stress assisted intergranular corrosion have occurred in the collet housing of drives at several BWRs.

This type of cracking could occur in a number of drives and if the cracks propagated until severance of the collet housing occurred, scram could be prevented in the affected rods. Limiting the period of operation with a potentially severed collet housing and requiring increased surveillance after detecting one stuck rod will assure that the reactor will not be operated with a large number of rods with failed collet housings. *Placing the reactor in the shutdown condition inserts

• the control rods and accomplishes the objective of the specifications on control rod operability. This operation is normally expected to be accomplished within eight hours.

The source range monitor (SAM) system (7) performs no automatic safety function. It does provide the operator with a visual indication of neutron level which is needed for knowledgeable and efficient reactor startup at low neutron levels. The results of the reactivity accidents are functions of the neutron flux. The requirement of at least 3 cps 8

assures that any transient begins at or above the initial value of 1ff of rated power used in the analyses of transients from cold conditions .

One operable SAM channel would be adequate to monitor the approach to critical using homogeneous patterns of scattered control rods.

OYSTER CREEK 3.2-8 Amendment No: 75, 124,178,253

The standby liquid control system i~ designed to bring the reactor to a cold shutdown condition from the full power steady state operating condition at any time in core life independent of the control rod system capabilities (8). If the reattor is shutdown by the contrQl rod system and would be subcritical in its most reactive condition as required in Specification 3.2.A, there is no requirement for operability of this system. To bring the reactor from full power to cold shutdown, sufficient liquid control must be inserted to give a negative reactivity worth equal to the combined effects of rated coolant voids, fuel Doppler, xe"on, samarium, and temperature change plus shutdown margin.

This requires a Boron-IO concentration of 110 ppm in the reactor. An additional 25% Boron-IO, which results in an average Boron-IO concentration in the reactor of 138 ppm, is inserted to provide margin fo_r mixing.. uncerta_inties in .the....r.ea.ctQr-.... An-amount .o.f-.Bor-on-,IO -equal to or greater than 82 pounds will bring the reactor to cold shutdown.

The standby liquid control system is also required to meet 10 CFR 50.62 (Requirements for Reduction of Risk from Anticipated Transients Without Scram (ATWS) Events for Light-Water-Cooled Nuclear Power Plants). The standby liquid control system must have the equi\!.alent control capacity (injection rate) of 86 gpm at 13% by wt. natural sodium pentaborate for a 251 diameter reactor pressure vessel in order to satisfy 10 CFR 0.62 11 requirements. The equivalency requirement is fulfilled by a combination of concentration, Boron-IO enrichment and flow rate of sodium pentaborate solution. A minimum of 15.0 wt.% solution and 35 atom%

Boron-IO enrichment at a 30 gpm pump flow rate satisfies the ATWS Rule (10 CFR 50,62) equivalency requirement.and assures that the reactor is shutdown*before unac-ce-ptable containment conditions develop.

The standby liquid control system is required to insert the solution within 120 minutes in order to override the rate of reactivity insertion-due to cooldown of the reactor following the xenon peak, the 3737 gallons 5 wt.% point represents the allowable maximum volume-minimum concentration values *which satisfy this requirement. Compliance with 10.

CFR 50.62 (use of enriched boron) results in the cold shutdown B-10 concentration in the reactor,* at the maximum concentration*- minimum volume points chosen 19.6 wt.% 913 gallons, being injected in approximately 26 minutes. Thus, the system will insert the solution in the time interval of between 26-120 minutes.

The shaded area of Figure 3.2-1 represents the acceptable...values of liquid control tank volume and solution concentration which assure that, with one 30 gpm liquid control pump, the reactor can be brought to the cold shutdown condition from a full power stea~y state operating condition at any time in core life independent of the control rod system capabilities. The cross-hatched area of Figure 3.2-1 represents the acceptable values of liquid control tank volume and solution _

concentration which assure that the equivalency requirements of 10 CFR 50.62 are satisfied. The maximum volume of 4213 gal is established by the tank capacity. The tank volume requirements include consideration for 137 gal of solution which is contained below the point where the pump takes suction from the tank and, therefore, cannot be inserted into the reactor.

I .

OYSTER CREEK 3.2-9 Amendment No~ 78

The solution saturation temperature varies with the concentration of sodium pentaborate.

The solution will be maintained at least 5°F above the saturation temperature to guard against precipitation. The 5°F margin is included in Figure 3.2-2. Temperature and liquid level alarms for the system are annunciated in the control room.

The acceptable time out of service for a standby liquid control system pumping circuit as well as other safety features is determined to be 1O days. However, the allotted time out of service for a standby liquid control system pumping circuit is conservatively set at 7 days in the specification. Systems are designed with redundancy to increase their availability and to provide backup if one of the components is temporarily out of service.

The standby liquid control system also has a post-LOCA safety function to buffer suppression pool pH in order to maintain bulk pH above 7.0. This function is necessary to prevent iodine re-evolution to satisfy the methodology for Alternate Source Term.

Manual initiation is used, and the minimum amount of total boron required for suppression pool pH buffering is 1460 lbm. A single pump can satisfy the post-LOCA function which applies to POWER OPERATION and SHUTDOWN CONDITION.

During each fuel cycle, excess operating reactivity varies as fuel depletes and as any burnable poison in supplementary control is burned. The magnitude of this excess reactivity is indicated by the integrated worth of control rods inserted into the core, referred to as the control rod inventory in the core. As fuel burnup progresses, anomalous behavior in the excess reactivity may be detected by comparison of actual rod inventory with expected inventory based on appropriately corrected past data.

Experience at Oyster Creek and other operating BWR's indicates that the control rod inventory should be predictable to the equivalent of one percent in reactivity. Deviations beyond this magnitude would not be expected and would require thorough evaluation.

One percent reactivity limit is considered safe since an insertion of this reactivity into the core would not lead to transients exceeding design conditions of the reactor system.

References:

(1) FDSAR, Volume I, Section 111-5.3.1 (2) FDSAR, Volume I, Section Vl-3 (3) FDSAR, Volume I, Section 111-5.2.1 (4) FDSAR, Volume I, Section Vll-9 (5) NEDE-24011-P-A, General Electric Standard Application for Reactor Fuel (GESTAR 11) (latest approved version as specified in the COLA).

(6) FDSAR, Volume I, Section 111-5 and Volume II, Appendix B (7) FDSAR, Volume I, Sections Vll-4.2.2 and Vll-4.3.1 (8) FDSAR, Volume I, Section Vl-4 .

(9) FDSAR, Amendment No. 55, Section 2 (10) C. J. Paone, Banked Position Withdrawal Sequence, January 1988 (NED0-21231)

(11) UFSAR, Volume 4, Section 4.3.2.4.1

• OYSTER CREEK 3.2-10 Amendment No: 178, 233, 262

Fig. 3.2-1 Sodium Penlaborale Solullon Volume - Concenlrallon Requirement 198 wt 'Mt 19.6 wl %,* 913 gals -4213 gal 20 m -

6 ID

. ,,t*

E 16

.,,a M

'"\\f{fi!fi'.l!!!il\\iiltlt!l\¥.i!!l!i;\l!tl[\;itit!t\lffililllliilililiilfii C

M 0

0 U1 12

.*."*.:* \ ((}\\iftfti\\\/\ttf\((:}(t:\:\1/%%\}\((f i9 ~ ,.., §

\

- l E C IO R

                                                                   . *.*."*.:-::-::.::::-:}:{:{:-::-::::-:}:{:{:{:-::.::::.::::-::-::::-\:~.::::.::::*::{:{:*::,:}::::-::::-::.::::*\*::,::::-::::-::-:}\*::.::::-::::-:::*
                                                                                    .*................  *..;..:.*......... *:....... *:. *......... *......... *........... ~.-. *:. *:*:..... *:. *......:.*..;..... *......... .

0

                                                                                                                                        . .;.,;.:......*:::.......::.:,.~*.::.::.:.::.::.:.::.::.:.::.::.:

0 U) 0 r, .......................................

                                                                                                                                     * * * *. * *. * ** *. * *. *. * *. * *. *. * *. * *. *. * *. * *. *. * *. * *. * * *. *. * *. * *. *. * *. * *o *. * * ** *.

E a, . . . . . ................ t:! a. C 4 Swl % 3737 gals 5 wl 'M, 4213 gal 0, ii

    ~          '  2 0

8 10 12 14 16 18 20 22 26 28 30 32 34 38 38 40 -42 Volume of Solullon In Tank h 101 gallons l\r1c111lml'11t tin. 121,, 178

• 160 i-GURE 3.2.2
• Sodium Pentaborate Solution Temperature Requirements 150 140

                 * * : -,Solut1on-1amo,rilli;tf'e

• must De eaual 10 or greater tnan 1nm

                         ,narcarea Dy tne curve 130
         ,20
          ,,o It-

i

         ,oo 5

ii 90 1:1

   ~

i:IZ)

  -C
   !2 eo
  '5 0

r.n ;o 60

• C *c 20 30 We,gm percant soa,um DentaDOrate 1n S01ut1an 3.2-12 40 Amendment No. 178 50

3.3 REACTOR COOLANT

• Applicability: Applies to the operating.status of the reactor coolant system.

Objective: To assure the structure integrity of the reactor coolant system. Specification: A. Pressure Temperature Relationships (i) Reactor Vessel Pressure Tests - the minimum reactor vessel temperature at a given pressure shall be in excess of that indicated by the curves in the Pressure and Temperature Limits Report (PTLR). (ii) Heatup and Cooldown Operations: Reactor noncritical -- the minimum reactor vessel temperature for heatup and cooldown operations at a given pressure when the reactor is not critical shall be in excess of that indicated by the curves in the Pressure and Temperature Limits Report (PTLR). (iii) Power operations -- the minimum reactor vessel temperature for power operations at a given pressure shall be in excess of that indicated by the curves in the Pressure and Temperature Limits Report (PTLR). (iv) Deleted

• 8. Reactor Vessel Closure Head Boltdown: The reactor vessel closure head studs may be elongated .020" (1/3 design preload) with no restrictions on.

reactor vessel temperature as long as the reactor vessel is at atmospheric pressure. Full tensioning of the studs is not permitted unless the temperature of the reactor vessel flange and closure head flange is in excess of the values specified in the Pressure and Temperature Limits Report (PTLR). C. Thermal Transients

1. The average rate of reactor coolant temperature change during normal heatup and cooldown shall not exceed the values specified in the Pressure and Temperature Limits Report (PTLR).

2. The pump in an idle recirculation loop shall not be started unless the temperature of the coolant within the idle recirculation loop is within 50°F of the reactor coolant temperature.

OYSTER CREEK 3.3-1 Amendment No: 42, 120, 1e1,

                                                                                         -188,269

\

e_J D. Reactor Coolant System Leakage

1. Reactor coolant system leakage shall be limited to:

a. 5 gpm unide*ntified leakage b.~ 25 gpm total (identified and unidentified)

c. 2 gpm increase in unidentified leakage rate within any 24 hour period while operating at steady state power

2. With the reactor coolant system leakage greater than the limits in 3.3.D.1.a or.b *above, .reduce.the .. leakage .rate .to within the acceptable limits within 8 hours, or place the reactor in the shutdown condition within the next 12 hours and be in the cold shutdown condition within the following 24 hours.

3. With any reactor coolant leakage greater than the limit in 3.3.D.1.c above, identify the source of leakage wi~hin 4 hours, or*be in the shutdown condition within the next 12 hours and be in the cold shutdown-condition within the following 24 hours.

4. For deter"fflination of unidentified leakage, the primary containment sump flow monitoring system shall be operable*except as specified below:

a. With the primary containment sump flow integrator inoperable:

1. Restore it to operable status within 7 days.

2. Calculate the unidentified leakage rate utilizing an acceptable alternate means as specified in plant procedures.

b. If Specification 3.3.0.4a cannot be met, place the reactor in the shutdown condition within the next 12 hours.

S. For deter"ffl1nation of identified leakage, the primary containment eauipment drain tank monitoring system shall be operable*exc1!pt as specified below:

a. With the primary containment eauipment drain tank monitoring system inoperable: *

1. Restore 1t to operable status within 7 days.

2. Calculate the identified leakage rate utilizing an acceptable alternate means as specified in plant procedures.

b. If Specification 3.3.D.S.a cannot* be met, place the reactor in the shutdown condition within the next 12 hours.

OYSTER CREEK 3.3-2

• • .Amendment No. 133

E. Reactor Coolant Quality

1. The reactor coolant quality during power operation with steaming rates to the turbine-condenser of less than 100,000 pounds per hour shall be limited to:

conductivity 2 us/cm[s=mhos at 25°C (77°F] chloride ion 0.1 ppm

2. When the conductivity and chloride concentration limits given in 3.3.E.1 are exceeded, an orderly shutdown shall be initiated immediately, and the reactor coolant temperature shall be reduced to less than 212°F within 24 hours.

3. The reactor coolant quality during power operation with steaming rates to the turbine-condenser of greater than or equal to 100,000 pounds per hour shall be limited to:

conductivity lOuS/cm [S=mhos at 25°C (77°F)] chloride ion 0.5ppm

4. When the maximum conductivity or chloride concentration limits given in 3.3.E.3 are exceeded, an orderly shutdown shall be initiated immediately, and the reactor coolant temperature shall be reduced to less than 212°F within 24 hours.

5. During power operation with steaming rates on the turbine-condenser of greater than or equal to 100,000 pounds per hour, the time limit above 1.0 uS/cm at 25°C (77°F) and 0.2 ppm chloride shall not exceed 72 hours for any single incident .

• F.

6. When the time limits for 3.3.E.5 are exceeded, an orderly shutdown shall be initiated within 4 hours.

Recirculation Loop Operability

1. During POWER OPERATION, all five recirculation loops shall be OPERATING except as specified in Specification 3.3.F.2.

2. POWER OPERATION with a maximum of two IDLE RECIRCULATION LOOPS or one IDLE RECIRCULATION LOOP and one ISOLATED RECIRCULATION LOOP is permitted. The reactor shall not operate with two ISOLATED RECIRCULATION LOOPS.

a. With one ISOLATED LOOP the following conditions shall be met:

1. The AVERAGE PLANAR LINEAR HEAT GENERATION RATE (APLHGR) as a function of average planar exposure, at any axial location shall not exceed 98% of the limits specified in 3.10.A. The action to bring the core to 98% of the APHLGR limits shall be completed prior to isolating the recirculation loop .

• OYSTER CREEK Amendment No: 42, 93, 135,140,212 3.3-3 Corrected Letter dated 8/7/2000
• 2.

3. The circuit breaker of the recirculation pump motor generator set associated with an ISOLATED RECIRCULATION LOOP shall be open and defeated from operation. Ail ISOLATED RECIRCUI.ATION LOOP shall not be returned to service unless the reactor is in the COLD SHUTDOWN* condition.

b. When there are two inoperable recirculation loops (either two IDLE RECIRCULATION LOOPS or one IDLE RECIRCULATION LOOP and one ISOLATED RECIRCULATION LOOP) the reactor core THERMAL POWER shall not exceed 90% of rated power.

3. If Specifications 3.3.F. l and 3.3.F.2 are not met, an orderly shutdown shall be initiated immediately until all operable control rods are fully inserted and the reactor is in either the REFUEL MODE or SHUTDOWN CONDITION within 12 hours.

4. With reactor coolant temperature greater than 2 l2°F and irradiated fuel in the reactor vessel, at least one recirculation loop discharge valve and its associated suction valve shall be in the full open position.

5. If Specification 3.3F.4 is not met, immediately open one recirculation loop discharge valve and its associated suction valve .

• 6. With reactor coolant temperature less than 2l 2°F and irradiated fuel in the reactor vessel, at least one recirculation loop discharge valve and its associated suction valve shall be in the full open position unless the reactor vessel is flooded to a level above 185 inches TAF or unless the steam separator and dryer are removed.
• OYSTER CREEK Amendment No: 135, 140, 212, 266 3.3-3a CorreeteEI Letter dateEI 8/1/2000

G. Primary Coolant System Pressure Isolation Valves Applicability: Operational conditions - Startup and Run Modes; applies to the operational status of the primary coolant system pressure isolation valves. Objective: To increase the reliability of primary coolant system pressure isolation valves thereby reducing the potential of an inter-system loss of coolant accident. Specification:

1. During reactor power operating conditions, the integrity of all pressure isolation valves listed in Table 3.3.1 shall be demonstrated. Valve leakage shall not exceed the amounts indicated.

2. If Specification I cannot be met, an orderly shutdown shall be initiated and the reactor shall be in the cold shutdown condition within 24 hours.

H. Reguired Minimum Recirculation Flow Rate for Operation in IRM Range I 0 I. During STARTUP mode operation, a minimum recirculation flow rate is required before operating in IRM range IO to ensure that technical specification

• 2.

transient MCPR limits for operation are not exceeded. This minimum flow rate is no longer required once the reactor is in the RUN mode. 39.65 x 106 lb/hr is the minimum recirculation flow rate necessary for operation in IRM range 10 at this time. This flow rate leaves sufficient margin between the minimum flow required by the RWE analysis performed and the minimum flow used while operating in IRM range 10. NRC Order Dated April 20, 1981 OYSTER CREEK 3.3-4 Corrected Letter dated 8/7/2000 Amendment No: 15, 42, 71, 212 ~ t'J*)

Section 3.3

• Bases:

The reactor coolant system(l) is a primary barrier against the release of fission products to the environs. In order to provide assurance that this barrier is maintained at a high degree of integrity, restrictions have been placed on the operating conditions to which it can be subjected. The Oyster Creek reactor vessel was designed and manufactured in accordance with General Electric Specification 21Al 105 and ASME Section I as discussed in Reference 13. The original operating limitations were based upon the requirement that the minimum temperature for pressurization be at least 60°F greater than the nil ductility transformation temperature. The minimum temperature for pressurization at any time in life has to account for the toughness properties in the most limiting regions of the reactor vessel, as well as the effects of fast neutron embrittlement.

 . Pressure and temperature curves are generated in accordance with Reference 15 and are contained in the Pressure and Temperature Limits Report (PTLR).

Stud tensioning is considered significant from the standpoint of brittle fracture only when the preload exceed approximately 1/3 of the final design value. No vessel or closure stud minimum temperature requirements are considered necessary for preload values below 1/3 of the design preload with the vessel depressurized since preloads below 1/3 of the design preload result in vessel closure and average bolt stresses which are less than 20% of the yield strengths of the vessel and bolting materials. Extensive service experience with these materials has confirmed that the probability of brittle fracture is extremely remote at these low stress levels, irrespective of the metal temperature .

• The reactor vessel head flange and the vessel flange in combination with the double "O" ring type seal are designed to provide a leak tight seal when bolted together. When the vessel head is placed on the reactor vessel, only that portion of the head flange near the inside of the vessel rests on the vessel flange.

As the head bolts are replaced and tensioned, the vessel head is flexed slightly to bring together the entire contact surface adjacent to the "O" rings of the head and vessel flange .

• OYSTER CREEK Amendment No: 15, 42, 120, 151,188,203,212,269 3.3-5 CoFFeetea Letter aateel 8./7.'2009

Detailed stress analyses were originally performed on the reactor vessel for steady state and transient conditions with respect to material fatigue for up to a 40-year plant life. The results of these analyses were presented and compared to the allowable limits in Reference (4). The specific conditions analyzed included, but were not limited to, 240 cycles of normal startup and shutdown with a heating and cooling rate of 100°P per hour applied continuously over a temperature range of 100°F to 546°F, and for 10 cycles of emergency cooldown at a rate of 300°F per hour applied over the same range. A review of the original results in Reference (4) showed that the components with the highest fatigue usage factor were the reactor vessel studs and reactor vessel basin seal skirt. These components had the potential to exceed the allowable fatigue usage factor under the original GE methodology if the number of thermal cycles (i.e., heatup/cooldown) exceeded the design assumptions. The number of heatup and cooldown cycles was later reanalyzed, as documented by Reference (17), for a higher number of cycles (240) than was expected in the original analysis (120). The reanalysis confirmed that the original fatigue usage limit of 0.8 was maintained. All other components had relatively low usage factors and did not exceed the fatigue usage factor limit for the original design life of 40 years. Thermal stresses from the analyses combined with the primary load stresses were also found to be within the ASME Code Section ill stress intensity allowables.

  *Although the Oyster Creek Unit l reactor vessel was built in accordance with Section I of the ASME Code, the design criteria included in the reactor vessel specifications were in essential agreement with the criteria that was later incorporated into Section ID of the ASME Code (6).

Subsequently, the original method for determining fatigue Cumulative Usage Factor (CUF) was changed to incorporate the NRC-approved methodology in ASME B&PV Code, Section ill. Accordingly, the CUF limit was also changed from 0.8 to 1.0 ( 18). As part of the License Renewal Application (LRA), additional detailed stress analyses were performed on the reactor vessel, as well as other critical components, with respect to material fatigue for up to a 60-year plant operation (19). For all steady state and transient conditions, the critical components are within the applicable stress (intensity) allowable, cycle limits and/or fatigue usage factor. Currently, the RPV support skirt and several locations along the Torus have the highest fatigue usage factors. These components, as well as any others, that have high cumulative usage factors are closely monitored. The two major means for computing and monitoring fatigue usage at fatigue critical locations are now cycle based fatigue (CBF) and stress based fatigue (SBF). Where components have an unanticipated increase based on cycle accumulation trends or the number of cycles approaches their limit, additional evaluation and corrective actions (as required) are to be initiated. The expected number of RPV head removal and bolt up to which the vessel will be subjected to is

80. Although no heatup or cooldown rates of 300°F per hour are expected over the life the vessel and the vessel design did not consider such events(6), stress analyses have been made which showed the allowable number of such events is 22,000 on the basis of ASME Section ill alternating stress limits.

During reactor operation, the temperature of the coolant in an idle recirculation loop is expected to remain at reactor coolant temperature unless it is valved out of service. Requiring the coolant temperature in an idle loop to be within 50°F of the reactor coolant temperature before the sump is started assures that the change in coolant temperature at the reactor vessel nozzles and bottom head region are within the conditions analyzed for the reactor vessel as discussed above. Allowable leakage rates of coolant from the reactor coolant system have been based on the predicted and experimentally observed behavior of cracks in pipes and on the ability to makeup coolant system leakage in the event of loss of offsite AC power. The normally expected background leakage due to equipment design and the detection capability for determining coolant system ieakage were also considered in establishing the limits. The behavior of cracks in piping systems has been experimentally and

• OYSTER CREEK 3.3-6 Amendment No.: 151, 2.U, ECR OC Oti 00046, ECR OC 05-00365 Correeted Lett& dated sn.0000

analytically investigated as part of the USAEC sponsored Reactor Primary Coolant System Rupture Study (the Pipe Rupture Study). Work (8) utilizing the data obtained in this study indicates that leakage from a crack can be detected before the crack grows to a dangerous or critical size by mechanically or thermally induced cyclic loading, or stress corrosion cracking or some other mechanism characterized by gradual crack growth. This evidence suggests that for leakage somewhat greater than the limit specified for unidentified leakage, the probability is small that imperfections or cracks associated with such leakage would grow rapidly. However, the establishment of allowable unidentified leakage greater than that given in the 3.3-D on the basis of the data presently available would he premature because of uncertainties associated with the data. For leakage of the order of 5 gpm as specified in 3.3-D, the experimental and analytical data suggest a reasonable margin of safety that such leakage magnitude would not result from a crack approaching the critical size for rapid propagation. Leakage of the magnitude specified can be detected reasonably in a matter of a few hours utilizing the available leakage detection schemes, and if the origin cannot be detennined in a reasonably short time, the plant should be shut down to allow further investigation and corrective action .

• OYSTER CREEK ECR OC 05-00365 3.3-6 a

The drywell floor drain sump and equipment drain tank provide the primary means of leak detection(9 ,10).. -1dentified1eakage is.that._from Y.alv.es_and_p.umps.in the_reactor...sy_stemand.from the. _... reactor vessel head flange gasket. Leakage through the seals of this equipment is piped to the drywell equipment drain tank. Leakage from other sources is classified as unidentified leakage and is collected in the drywell floor drain sump. Leakage which does not flash in a vapor will drain in the sump. The vapor will be condensed in the drywell ventilation system and routed to the sump. Condensate cannot leave the sump or the drywell equipment drain tank unless the respective pumps are running. The sump and the drain tank are provided with two pumps each. Alarms are provided for the sump that will actuate on a predetermined pumpout rate( 10) and will be set to actuate at a leakage that is less than the unidentified leakage limit of 5 gpm.

• Additional qualitative information(lO) is available to the operator via the monitored drywell atmospheric condition. However, this information is not quantitative since fluctuation in atmospheric conditions are normally expected, and quantitative measurements are not possible. The temperature of the closed cooling water which serves as coolant for the drywell ventilation system is monitored and also provides information which can be related to reactor coolant system leakage(9). Additional protection is provided by the drywell high pressure scram which would be expected to be reached within 30 minutes of a steam leak of about 12 gpm(lO).

During a loss of offsite AC power, the control rod drive hydraulic pumps, which are powered by the diesels, each can supply 110 gpm water makeup to the reactor vessel. A 25 gpm limit for total leakage, identified and unidentified, was established to be less than the 110 gpm makeup of a single rod drive hydraulic pump to avoid the use of the emergency core cooling system in the event of a loss of normal AC power. Materials in the primary system are primarily 304 stainless steel and zircaloy fuel cladding. The reactor water chemistry limits are placed upon conductivity and chloride concentration since conductivity is measured continuously and gives an indication of abnormal conditions or the presence of unusual materials in the coolant, while chloride limits are specified to prevent stress corrosion cracking of stainless steel. Chlorides are known to (1) promote intergranular stress corrosion cracking of sensitized steels, (2) induce transgranular cracking of non-sensitized stainless steels, (3) promote pitting and (4) promote crevice attack in most RCS materials (BWR Water Chemistry Guidelines, EPRI, April 1, 1984). The higher the concentration, the faster the attack. Therefore, the level of chloride in the reactor water should be kept as low as is practically achievable. The limits are therefore set to be consistent with Regulatory Guide 1.56 (Rev. 1). In the case of BWR's where no additives are used in the primary coolant, and where neutral pH is maintained, conductivity provides a very good measure of.the quality of the reactor water. When the conductivity is within its proper normal range, pH, chloride, and other impurities affecting conductivity and water quality must also be within their normal ranges. Significant changes in conductivity provide the operator with a warning mechanism so that he can investigate and remedy the conditions causing the change .

• OYSTER CREEK Amendment No: 42, 93, 97,151,212 3.3-7 Corrrected Letter dated 8/7/2000

 . . .. Measurements of pH, .chloride,.and other chemical parameters are made to determineJhe_cause.of the ....... --*- _ .. ... _-*-

unusual conductivity and instigate proper corrective action. These can be done before limiting conditions, with respect to variables affecting the boundaries of the reactor coolant, are exceeded. Several techniques are available to correct off-standard reactor water quality conditions including removal of impurities from reactor water by the cleanup system, reducing input of impurities causing off-standard conditions by reducing power and reducing the reactor coolant temperature to less than 212°F. The major benefit of reducing the reactor coolant temperature to less than 212°F is to reduce the temperature dependent corrosion rates and thereby provide time for the cleanup system to re-establish proper water quality. Specifications 3.3.F.1 and 3.3.F.2 provide the OPERABil.JTY requirements for recirculation loops including acceptable valve alignments for OPERATION with less than five OPERABLE loops. The IDLE loop configuration allows back flow through the loop discharge bypass valve and the loop temperature can be maintained within 50°F of the reactor coolant inlet temperature. An idle loop can be restarted since the restart of the loop will not result in a cold water addition transient causing a concern from either reactivity addition or reactor nozzle thennal stresses. The ISOLATED RECIRCULATION LOOP will experience a cooling of the loop temperatures greater than 50°F and restart of an isolated loop could result in a cold water addition transient. Therefore, restart of an ISOLATED loop is not permitted and the circuit breakers for the motor generator set are open and defeated from operation to prevent an inadvertent startup of an ISOLA1ED RECIRCULATION LOOP. The ISOLATED LOOP can only be returned to service when the reactor is in COLD SHUTDOWN. When a recirculation loop is ISOLAIBD, the coolant between the suction and discharge and discharge bypass valves is no longer available during a loss of coolant accident (LOCA). This lose of inventory requires a reduction to 98% of the MAPLHGR limits in the Core Operating Limits Report. During three-loop operation reactor power is limited to 90% of rated power. This is a physical restriction, since it is unlikely that the plant could operate at 90% of rated power with three operating recirculation pumps; and it is the. maximum power analyzed for three-loop operation. No more than one recirculation loop can be ISOLATED. This restriction is required since the loss of inventory from a second ISOLATED REICRCULATION LOOP has not been analyzed. Operation with two IDLE or one IDLE and one ISOLA1ED RECIRCULTION LOOPS is permissible. A non-operating recirculation loop may not be configured with both the suction valve and discharge valve in the open position since the backflow through the loop would result in non-conservative instrument readings for recirculation flow. Therefore, the reactor would be shutdown according to Specification 3.3.F.3 if a recirculation loop cannot be placed into an IDLE or ISOLATED configuration. Specifications 3.3.F.4 and 3.3.F.6 assure that an adequate flow path exists from the annular space, between the pressure vessel wall and the core shroud, to the core region. This provides sufficient hydraulic communication between these areas, thus assuring that reactor water instrument readings are 2 indicative of the level in the core region. For the bounding loss of feedwater transient< >, a single fully open recirculation loop transfers coolant from the annulus to the core region at approximately five times the boiloff rate with no forced circulation<3>_ With the reactor vessel flooded to a level above 185 inches TAP or when the steam separator and dryer are removed, the core region and all recirculation loops can therefore be isolated. When the steam separator and dryer are removed, safety limit 2.1.D ensures water level is maintained above the core shroud . OYSTER CREEK 3.3-8 Corrected Letter dated 8/7/2000 AmendmentNo.42,93, 135,140,151,212

References:

I. FDSAR, Volume 1, Section IV-2.

2. Letter to NRC dated May 19, 1979, "Transient of May 2, 1979"

3. General Electric Co. Letter G-EN-9-55, "Revised Natural Circulation Flow Calculation", dated May 29, 1979

4. Licensing Application Amendment 16, Design Requirements Section

5. (Deleted)

6. FDSAR, Volume 1, Section IV-2.3.3 and Volume 11, Appendix H

7. FDSAR, Volume l,Table IV-2-1

8. Licensing Application Amendment 34, Question 14

9. Licensing Application Amendment 28, Item ill-B-2

10. Licensing Application Amendment 32, Question 15

11. (Deleted) 12 . (Deleted)

• 13.

14. 15. Licensing Application Amendment 16, Page 1 (Deleted) SIR-05-044-A, "Pressure-Temperature Limits Report Methodology for Boiling Water Reactors," April 2007

16. (Deleted)

17. GPUN Safety Evaluation, SE-00022i-004, "Reactor Vessel Thermal Cycles"

18. 50.59 Evaluation, OC-2006-E-OO 1, Revised Method For The Determination of Fatigue Cumulative Usage Factor for ECR 06-00046

19. 50.59 Screening OC-2007-S-056, Issue New Design Analyses for License Renewal Project, for ECR 05-00365

• OYSTER CREEK 3.3-Sa Cerrested Letter dated 8.'7/2000 Amendment No: 135, 140, 151, 188,203,212, ECR OC 06 00046, 269, ECR OC 05-00365
• PAGE CONTENTS DELETED
• OYSTER CREEK 3.3-9a Amendment No.: 151,188,269
• PAGE CONTENTS DELETED
• OYSTER CREEK 3.3-9b Amendment No.: 161, 188, 269
• PAGE CONTENTS DELETED
• OYSTER CREEK 3.3-9c Amendment No.: 161,188,269
• TABLE 3.3.l PRIMARY COOLANT SYSTEM PRESSURE ISOLATION VALVES

            ..                                                       Maximwn(a)

System Valve No. Allowable Leakage Core Spray System l NZ02A 5.0 GPM

                                        *NZ02C                       5.0*GPM Core Spray System 2                     NZ02B                       5.0 GPM NZ02D                       5.0 GPM

• Footnote:

(a)l. Leakage rates less than or equal to 1.0 gpm are considered acceptable.

2. Leakage rates greater than 1.0 gpm but less than or equal to 5.0 gpm are considered acceptable if the latest measured rate has not exceeded the rate determined by the previous test by an amount that reduces the margin between measured leakage rate and the maximum permissible rate of 5.0 gpm by 5~ or greater.

3. Leakage rates greater than 1.0 gpm but less *than or equal to 5.0 gpm.

are considered unacceptable if the latest measured rate exceeded *the rate determined by the previous test by an amount that.reduces the margin between*measured leakage rate and the maximum permissible rate of 5.0 gpm by 50% or greater. *

4. Leakage rates greater than 5.0 gpm are considered unacceptable.

5. Test differential pressure shall not be less than 150 psi~ .

• OYSTER CREEK 3.3-10 Order dated: April 20, 1981

3.4' EMERGENCY COOLING .

• Applicability:

Obiective: Specifications: Applies to the operating status of the emergency cooling systems. To assure operability of the emergency cooling sysrems. A. Core Spray System NOTE: LCO 3:0.C.2 is not applicable to the Core Spray System

1. The Core Spray System shall be OPERABLE at alJ times with irradiated fuel in the re~ctor vessel with an absorption chamber water volume of at least 82,000 ft 3 excepr as specified in Table 3.4.1, or as noted below.

2. If Specification 3.4.A.1 is not met the reactor shall be PLACED IN the COLD SHUTDOWN CONDITION and no work shall be performed on the reactor or its connected systems which could result in lowering the reactor water level to less than 4'8"above TOP OF ACTIVE FUEL.

Table 3.4.1 Run or Stanup Mode (except for low power physics testing)

• Condition Any active loop component becomes inoperable.

          -OR-Two or more active ]oop ReQuiremenr The Reactor may remain in operation for a period not to exceed 15 Days.

Provided: Both Emergency Diesel . Generators are OPERABLE. The Redundant active loop components in the same loop components within the same (System 1 or Syste~ 2) are loop as the inoperable inoperable provided no two components are verified components are redundant. OPERABLE on a daily basis. Specification 3.4.A3 is met unless only a core spray booster pump is inoperable. One Emergency Diesel The Reactor may remain in AJJ core spray equipment Generator is inoperable. operation for a period not to exceed

• connected to the OPERABLE 7 Days. emergency diesel generator is (Refer to Section 3.7.C.2) OPERABLE.
• OYSTER CREEK 3.4-1 Amendment No.: }5, 153. 167, 211 ;24~. 247 Corrected by letter of 10/1.3/04

Run or Startup Mode (except for low power physics testing) Condition Requirement Provided: One core spray loop (System 1 The Reactor may remain in Both Emergency Diesel or System 2) or its core spray operation for a period not to exceed Generators are OPERABLE. header delta-P instrumentation 7 Days. becomes inoperable. The remaining loop (System 1

           -OR-                                                           or System 2) has no inoperable Both of the redundant                                                    components and is verified components in a loop (System 1                                           daily to be OPERABLE.

or System 2) are inoperable. Specification 3 .4.A.3 is met. Two of the four redundant The Reactor may remain in Both Emergency Diesel active loop components in the operation for a period not to exceed Generators are OPERABLE. core spray system not in the 7 Days. same loop (System l or System The Redundant active loop

2) are inoperable. components within the same

          -OR-                                                            loop as the inoperable Two or more non-redundant                                                components are verified active loop components are                                               OPERABLE on a daily basis.

inoperable in both loops (System 1 and System 2). Specification 3.4.A.3 is met. Shutdown or Refuel Mode Condition Requirement Provided: Maintenance or modifications Maintain reduced core spray system The Reactor is maintained in of core spray systems, their availability as follows: the COLD SHUTDOWN power supplies, or water CONDITION or in the supplies. I.At least one core spray pump, and REFUEL MODE with the system components necessary to reactor coolant system deliver rated core spray to the maintained at less than 212°F reactor vessel, must remain and vented. OPERABLE to the extent the pump and any necessary valves can be -AND-started or operated from the control room or from local control stations. No work is performed on the reactor vessel and connected 2.The Fire protection system is systems that could result in OPERABLE to the extent that one lowering the reactor water diesel driven fire pump is capable level to less than 4'8" above of providing water to the core spray the TOP OF ACTIVE FUEL. system. 3.Verify the systems in 1 & 2 above are OPERABLE on a weekly basis .

• OYSTER CREEK 3.4-2 Amendment No.: 75, 153, 167, 211,231, 24 7
• Condition Maintenance or modifications of core spray systems, their
• Shutdown or Refuel Mode Requirement Maintain reduced core spray system availability as follows:

Provided: The Reactor is: power supplies, or water fu the REFUEL MODE with supplies while work is in l .At least one core spray pump in the reactor coolant system progress having the potential to each loop, and system components maintained at less than 212°F. lower reactor water level below necessary to deliver rated core -OR-4'8" TAP.

• spray to the reactor vessel, must fu the STARTUP MODE for

                -OR-                  remain OPERABLE to the extent         the purpose of low power The Reactor is in the startup        that the pump and any necessary       physics testing.

mode for low power physics valves in each loop can be started or testing. operated from the control room or from local control stations. 2.Fire protection system is OPERABLE to the extent that one diesel driven fire pump is capable of providing water to the core spray system. 3.Verify the systems in 1 & 2 above are OPERABLE every 72 hours . The requirements for Initiate work to meet the Specification 3.4.A.2 is met. maintenance or modification requirements. can not be met.

3. In the event of inoperable active loop components the APLHGR of all the rods in any fuel assembly, as a function of average planar exposure, at any axial location shall not exceed 90% of the limits given in Specification 3.10.A. The action to bring the core to 90% of the APLHGR Limits must be completed within two hours after the component has been determined to be inoperable.

4. The core spray system is not required to be operable when the following conditions are met:

a. The reactor mode switch is locked in the "Refuel" or "Shutdown" position.

b. (1) There is an operable flow path capable of taking suction from the condensate storage tank and transferring water to the reactor vessel, and (2) The fire protection system is OPpRABLE to the extent that one diesel driven fire pump is capable of providing water to the core spray system, and (3) These systems are verified to be OPERABLE on a weekly basis .

• OYSTER CREEK 3.4-3 Amendment No.: 75, 153, 167, 2++, 231,247

c. The reactor coolant system is maintained at Jess than 212 °F and vented (except during reactor vessel pressure testing) .

d. At least one core spray pump, and system components necessary to deliver rated core spray flow to the reactor vessel, must remain operable to the extent that the pump and any*necessary valves can be*started or operated from the control room or from local control stations, and the torus is mechanically intact. Verify the pump and components are OPERABLE, as described, on a weekly basis.

e. (I) No work shall be performed on the reactor or its connected systems which could result in lowering the reactor water level to less than 4'8" above the TOP OF the ACTIVE FUEL and there is a minimum of 360,000 gallons of water available between the torus and condensate storage tank water inventories. At least two redundant core spray systems including core spray pumps and system components must remain operable as defined in d.

above. At least one recirculation loop discharge valve and its associated suction valve shall be in the full open position. Verify the pumps and components are OPERABLE, as described, on a weekly basis. OR (2) The reactor vessel head, fuel pool gate, and separator-dryer pool gates are removed and the water level is above. elevation 117 feet. When filling or draining the reactor cavity, a sufficient water inventory (between the condensate storage tank and the reactor cavity) to complete the flooding operation shall be maintained. The 360,000 gallons of water minimum requirement in (1) above does not apply during the filling and draining operation provided there is a sufficient amount of water to complete the flooding operation .

• • OYSTER CREEK 3.4-4 Amendment No.: 75, 120, 153, +99,

                                                                                            ~. 247

B. Automatic Depressmization System

• I.

2. Five electroinatic relief valves, which provide the automatic depressurization and pressure relief functions, shall be operable when the reactor water temperature is greater than 212°F and pressmized above 110 psig, except as specified in 3.4.B.2 and during Reactor Vessel Pressure Testing consistent with Specifications 1.39 and 3.3.A.(i). If at any time there are only four operable electromatic relief valves, the reactor may remain in operation for a period not to exceed 3 days provided the motor operated isolation and condensate makeup valves in both isolation condensers are verified daily to be operable.

3. If Specifications 3.4.B.l and 3.4.B.2 are not met; reactor pressure shall be reduced to 110 psig or less, within 24 hours.

4. The time delay set point for initiation after coincidence of low-low-low reactor water level and high drywell pressure shall be set not to exceed two minutes.

C. Containment Spray System and Emergency Service Water System NOTE: LCO 3.0.C.2 is not applicable to the Containment Spray System and Emergency Service Water System I. The containment spray system and the emergency service water system shall be operable at all times with irradiated fuel in the reactor vessel, except as specified in Specifications 3.4.C.3, 3.4.C.4, 3.4.C.6 and 3.4.C.8 .

• 2.

3. The absorption chamber water volume shaJI not be less than 82,000 ft3 in order for the containment spray and emergency service water system to be considered operable. If one emergency service water system loop becomes inoperable, its associated containment spray system loop shal1 be considered inoperable. If one containment spray system loop and/or its associated emergency service water system loop becomes inoperable during the run mode, the reactor may remain in operation for a period not to exceed 7 days provided the remaining containment spray system loop and its associated emergency service water system loop each have no inoperable components and are verified daily to be operable.

4. If a pump in the containment spray system or emergency service water system becomes inoperable, the reactor may remain in operation for a period not to exceed 15 days provided the other similar pump is verified daily to be operable. A maximum of two pumps may be inoperable provided the two pumps are not in the same loop. If more than two pumps become inoperable, the limits of Specification 3.4.C.3 shall apply.

5. During the period when one diesel is inoperable, the containment spray loop and emergency service water system loop connected to the operable diesel shall have no inoperable components .

• OYSTER CREEK 3.4-5 Amendment No.: 75, 153, 167, 170, 199, 24+, 24 7

6. If primary containment integrity is not required (see Specification 3.5.A), the containment spray system may be made inoperable .

7. If Specifications 3.4.C.3, 3.4.C.4, 3.4.C.5 or 3.4.C.6 are not met, the reactor shall be placed in cold shutdown condition. If the containment spray system or the emergency service water system becomes inoperable, the reactor shall be placed in the cold shutdown condition and no work shall be performed on the reactor or its connected systems which could result in lowering the reactor water level to Jess than 4'8" above the top of the active fuel.

8. The containment spray system may be made inoperable during the integrated primary containment leakage rate test required by Specification 4.5, provided that the reactor is maintained in the cold shutdown condition and that no work is performed on the reactor or its connected systems which could result in lowering the reactor level to less than 4'8" above the top of the active fuel.

D. Control Rod Drive Hydraulic System

1. The control rod drive (CRD) hydraulic system shall be operable when the reactor water temperature is above 212°F except as specified in 3.4.D.2 and 3.4.D.3 below.

2. If one CRD hydraulic pump becomes inoperable when the reactor water temperature is above 212°F, the reactor may remain in operation for a period not to exceed 7 days provided the second CRD hydraulic pump is operating and is checked at least once every 8 hours. If this condition cannot be met, the reactor water temperature shall be reduced to less than 212°F.

3. During reactor vessel pressure testing, at least one CRD pump shall be operable.

E. Core Spray and Containment Spray Pump Compartments Doors The core spray and containment spray pump compartments doors shall be closed at all times except during passage in order to consider the core spray system and the containment spray system operable. F. Fire Protection System I. The fire protection system shall be operable at all times with fuel in the reactor vessel except as specified in Specification 3.4.F.2.

2. If the fire protection system becomes inoperable during the run mode, the reactor may remain in operation provided both core spray system loops are operable with no inoperable components.

OYSTER CREEK 3.4-6 Amendment No.: 75,120, 153,247

Bases: This specification assures operability of the emergency core cooling system to provide adequate

• • core cooling. The Oyster Creek ECCS has two core spray loops (system 1 and system 2); each containing a core spray sparger and redundant active loop components consisting of two main pumps, two booster pumps, two parallel isolation valves ( outside the drywell) and two check valves in parallel (inside the drywell). Specification 3.4.A.1 insures the availability of core cooling to meet the ECCS acceptance criteria in 10 CFR 50.46 utilizing the MAPLHGR limits provided in Section 3.10. These limits are from calculations that include models and procedures which are specified in 10 CPR 50 Appendix K (see UFSAR Section 15.6.5). A core spray flow of at least 3400 gpm (1 main and 1 booster pump) from 1 loop plus 2200 gpm (1 main pump) from the other loop at a vessel pressure of 110 psig is used in the calculation. Core spray loop 2 would be required to deliver 3640 gpm if loop 2 is relied upon as the two pump contributor and 2360 gpm if loop 2 is*the single pump contributor, since loop 2 has flow losses through cracks in the core spray sparger.

Table 3.4.1 allows continued operation with one core spray loop inoperable for a limited period of time. An evaluation of data presented in Reference 5 shows that flow from a single core spray sparger, main and booster pumps delivering 3400 gpm (3640 gpm for loop 2) at a vessel pressure of 110 psig, will meet 10 CPR 50.46 criteria with a 10% reduction in MAPLHGR Limits specified in Section 3.10. At 90% of the APLHGR, each core spray system is capable of supplying the required minimum bundle flow rate to ensure core cooling (References 6 and 7). Two hours is allowed for a reduction in the APLHGR limit which is consistent with two hours provided by Specification 3.10.A.3 to return an exceeded APLHGR to within the prescribed limit. Under the APLHGR operational constraints of specification 3.4.A.3 the operable core spray loop meets all Appendix K requirements except for the case of a core spray line break inside the drywell in the operable loop. As a result, reactor operation is permitted for a period not to exceed seven days. The allowed time out of service for the redundant core spray loop is justified based on the low probability of the event, the direct operator indication of a Core Spray System pipe break, and emergency procedures which provide for additional cooling water through the fire system. The probability of a pipe break between the reactor vessel and the core spray check valve in the operable core spray loop (approx. 28 feet of 6 inch pipe) compared to the total pipe in the reactor coolant pressure boundary is very small. The probability of a core spray line break in conjunction with the other core spray loop out of service, which in itself is a low probability, is so small that it does not constitute an unacceptable risk. In the extremely unlikely event that this LOCA scenario were to occur, the operators are provided with a specific visual and audible alarm alerting them of a "Core Spray System I (II) Pipe Break" (one for each core spray loop). These alarms are initiated by differential pressure detectors on each core spray loop. In such a case the core spray line break would occur above the top of the active fuel allowing the core to be re-flooded from

      . the fire protection system through the intact core spray loop.

In addition, a small break LOCA in the operable core spray loop prior to a larger break will be detected by the drywell unidentified leakage system (drywell sump) even before it is detected by the core spray alarm system. This will provide the operators with additional time to respond. Therefore, the out-of-service time for one of the two core spray loops, as evaluated as per the guidelines in Reference 8, has been conservatively selected to be 7 days .

• OYSTER CREEK 3.4-7 Amendment No.: 75, 153, 247 ECR 13-00102

Table 3.4.1 allows continued operation with one redundant active loop component inoperable for a limited period of time. Each core spray loop contains redundant active components based upon Reference I or 5, as appropriate. Therefore, with the loss of one of these components, the system as a whole (both loops) can tolerate an additional single failure of one of its active components and still perform the intended function and meet IO CFR 50.46 criteria. If a redundant active loop component fails, a fifteen day period is allowed for repairs, based on I out of 4 components being required. The I out of 4 requirement is maintained by assuring no two inoperable components are redundant. Table 3.4.1 ensures that if one diesel is out of service for repair, the core spray components fed.by the other diesel must be OPERABLE. Since each diesel will provide power to components for both core spray loops, the required flow specified in the bases for Specification 3.4.A. I will be met. When the reactor is in the shutdown or refueling mode and the reactor coolant system is less than 2 I 2°F and vented and no work is being performed that could result in lowering the water level to less than 4'8" above the core, the likelihood of a leak or rupture leading to uncovering of the core is very low. The only source of energy that must be removed is decay heat and one day after shutdown this heat generation rate is conservatively calculated to be not more than 0.6% of rated power. Sufficient core spray flow to cool the core can be supplied by one core spray pump or one of the two fire protection system pumps under these conditions. When it is necessary to perform repairs on the core spray system components, power supplies or water sources, Table 3.4.1 permits reduced cooling system capability to that which could provide sufficient core spray flow from two independent sources. Manual initiation of these systems is adequate since it can be easily accomplished within 15 minutes during which time the temperature rise in the reactor fuel cladding will not reach 2200°F .

• In order to allow for certain primary system maintenance, which will include control rod drive repair, LPRM removal/installation, reactor leak test, etc., (all performed according to approved procedure), Table 3.4.1 requires the availability of an additional core spray pump in an independent loop, whil.e this maintenance is being performed. The likelihood of the core being uncovered is still considered to be very low, however, the requirement of a second core spray pump capable of full rated flow and the 72 hour OPERABILITY verification of both core spray pumps is specified.

Specification 3.4.A.4 allows the core spray system to be inoperable in the cold shutdown or refuel modes if the reactor cavity is flooded and the spent fuel pool gates are removed and a source of water supply to the reactor vessel is available as specified in 3.4.A.4.b. J which may include the core spray pump, a condensate pump through the feedwater system, or other defined path from the condensate storage tank capable of providing the required makeup capability. Water would then be available to keep the core flooded. The requirement in Specification 3.4.A.4.e(]) to maintain at least one recirculation loop discharge valve and its associated suction valve in the full open position assures that an adequate flow path exists from the annular space, between the pressure vessel wall and the core shroud, to the core region. The relief valves of the automatic depressurization system enable the core spray system to provide protection against the small break in the event the feedwater system is not active .

• OYSTER CREEK 3.4~8 Amendment No.: 75, ISJ, 231. 24 7

The containment spray system is provided to remove heat energy from the containment in the event of a loss-of-coolant accident. Actuation of the containment spray system in accordance with plant emergency operating procedures ensures that containment and torus pressure and temperature conditions are within the design basis for containment integrity, EQ, and core spray NPSH requirements. The flow from one pump in either loop is more than ample to provide the required heat removal capability (2). The emergency service water system provides cooling to the containment spray heat exchangers and, therefore, is required to provide the ultimate heat sink for the energy release in the event of a loss-of-coolant accident. The emergency service water pumping requirements are those which correspond to containment cooling heat exchanger performance implicit in the containment cooling description. Since the loss-of-coolant accident while in the cold shutdown condition would not require containment spray, the system may be deactivated to permit integrated leak rate testing of the primary containment while the reactor is in the coid shutdown condition. The core spray main pump compartments and containment spray pump compartments were provided with water-tight doors(4). Specification 3.4.E ensures that the doors are in place to perform their intended function. Similarly, since a loss-of-coolant accident when primary containment integrity is not required would not result in pressure build-up in the drywell or torus, the containment spray system may be made inoperable under these conditions.. References

1. (Deleted)

2. Licensing Application, Amendment 32, Question 3

• 3.

4. 5. (Deleted) Licensing Application, Amendment 18, Question 4 GPUN Topical Report 053, "Thermal Limits with One Core Spray Sparger" December 1988.

6. NEDE-30010A, "Performance Evaluation of the Oyster Creek Core Spray Sparger", January 1984.

7. Letter and enclosed Safety Evaluation, Walter A. Paulson (NRC) to P. B. Fiedler (GPUN),

July 20, 1984.

8. APED-5736, "Guidelines for Determining Safe Test Intervals and Repair Times for Engineered Safeguards", April 1969.

OYSTER CREEK 3.4-9 Amendment No.: 165, 195, 247

• ECR 13-00102

3.5 CONTAINMENT Applicability: Applies to the operating status of the primary and secondary containment systems. Objective: To assure the integrity of the primary and secondary containment systems. Specification: A. Primary Containment I. At any time that the nuclear system is pressurized above atmospheric or work is being done which has the potential to drain the vessel and irradiated fuel is in the vessel, the st1ppression pool water volume and temperature shall be maintained within the following limits.

a. Maximum water volume - 92,000 ft 3

                         ', b. Minimum water volume - 82,000 ft 3

c. Maximum water temperature (1) During normal POWER OPERATION - 95°F (2) During testing which adds heat to the suppression pool, the water temperature shall not exceed I 0°F above the normal POWER OPERATION limit specified in (1) above. In connection with such testing, the pooi temperature must be

• reduced to below the normal POWER OPERATION limit specified in (1) above within 24 hours.

(3) The reactor shall be scrammed from any operating condition if the pool temperature reaches l l0°F. POWER OPERATION shall not be resumed until the pool temperature is reduced below the normal POWER OPERATION limit specified in (1) above. (4) During reactor isolation conditions, the reactor pressure vessel shall be depressuriz~d to less than 180 psig at normal

                                     *cooldown rates if the pool temperature reaches 120°F.

d. If the limits of Specification 3.5.A. l.a, b or c(l) are exceeded, the reactor shall be PLACED IN the COLD SHUTDOWN CONDITION within 24 hours.

• OYSTER CREEK 3.5-1 Amendment No.: H;2t; 196

2. Maintenance and repair, including draining of the suppression pool, may be performed provided that the following conditions are satisfied:

a. The reactor mode switch is locked in the refuel or shutdown position.

b. (1) There is an OPERABLE flow path capable of taking suction from the condensate storage tank and transferring water to the reactor vessel, and (2) The fire protection system is OPERABLE to the extent that one diesel driven fire pump is capable of providing water to the core spray system, and (3) These systems are verified to be OPERABLE on a weekly basis.

c. The reactor coolant system is maintained at less than 212°F and vented ..

d. At least one core spray pump, and system components necessary to deliver rated core spray flow to the reactor vessel, must remain OPERABLE to the extent that the pump and any necessary valves can be started or operated from the control room or from local control stations, and the torus is mechanically intact. Verify the pump and components are operable, as described, on a weekly basis .

• e. (1) No work shall be performed on the reactor or its connected systems which could result in lowering the reactor water level to less than 4'8" above the TOP OF the ACTIVE FUEL and there is a minimum of 360,000 gallons of water available between the torus and condensate storage tank water inventories. At least two redundant core spray systems including core spray pumps and system components must remain operable as defined in d. above. At least one recirculation loop discharge valve and its associated suction valve shall be in the full open position. Verify the pumps and components are operable, as described, on a weekly basis.

or (2) The reactor vessel head, fuel pool gate, and separator-dryer pool gates are removed and the water level is above elev,ition 117 feet. When filling or draining the reactor cavity, a sufficient water inventory (between the condensate storage tank and the reactor cavity) to complete the flooding operation shall be maintained. The 360,000 gallons of water minimum requirement in (1) above does not apply during the filling and draining operation provided there is a sufficient amount of water to complete the flooding operation .

• OYSTER CREEK 3.5-2 Amendment No. 21, 45, 54, 120, 11)6, 104, :~4 7

3. PRIMARY CONTAINMENT INTEGRITY shall be maintained at all times when the reactor is critical or when the reactor water temperature is above 2I2°F and fuel is in the reactor vessel except while performing low power physics tests at atmospheric pressure during or after refueling at-power levels not to exceed 5 Mwt or during REACTOR VESSEL PRESSURE TESTING.

a. With one or more of the automatic containment isolation valves inoperable:

(I) Maintain at least one isolation valve OPERABLE in each affected penetration that is open and within 4 hours (48 hours

• for the traversing in-core probe sy~tem) either; (a) Restore the inoperable valve(s) to OPERABLE status or (b) Isolate each affected penetration by use of at.least one deactivated automatic valve secured in the isolation position, or (c) Isolate each affected penetration by use of at least one

                                  . closed manual valve or blind flange .

• (2) If Specification 3.5.A.3 or the provisions of Specifications 3.5.A.3.a.(l)(a), (b) or (c) can not be met, the reactor shall be PLACED IN the COLD SHUTDOWN CONDITION within 24 hours.

(3) An inoperable containment isolation valve of the shutdown cooling system may be opened with a reactor water temperature equal to or less than 350°F in order to PLACE the reactor IN the COLD SHUTDOWN CONDITION. The inoperable valve shall be returned to the OPERABl.E status prior to placing the reactor in a condition where PRIMARY CONTAINMENT INTEGRITY is required.

b. Ifthe primary containment air lock is inoperable, per Specification 4.5.C.2, restore the inoperable air lock to OPERABLE status within the 24 hours or be in at least a SHUTDOWN CONDITION within the next 12 hours and in cold shutdown within the foUowing 24hours.

OYSTER CREEK 3.5-3 Amendment No.: 21,44,45,54,132,186, 196

4. Reactor Building to Suppression Chamber Vacuum Breaker System

a. Except as specified in Specification 3.5.A.4.b below, two reactor building to suppression chamber vacuum breakers in each line shall be OPERABLE at all times when PRIMARY CONTAJN1\1ENT INTEGRITY is required. The set point of the differential pressure instrumentation which actuates the air-operated vacuum breakers shall not exceed 0.5 psid. The vacuum breakers shall move from closed to fully open when subjected to a force equivalent of not greater than 0.5 psid acting on the vacuum

                    --* breaker* disc.

b. From the time that one of the reactor building to suppression chamber vacuum breakers is made or found to be inoperable, the vacuum breaker shall be locked closed and reactor operation is permissible only during the succeeding seven days unless such vacuum breaker is made OPERABLE sooner, provided that the procedure does not violate PRIMARY CONTAINMENT INTEGRITY.

                 *c. If the limits of Specification 3.5.A.4.a are exceeded, reactor shutdown shall be initiated and the reactor shall be in a COLD SHUTDOWN CONDITION within 24 hours .

OYSTER CREEK 3.5-Ja Amendment No.: ~ . 196

• 5. Pressure Suppression Chamber - Drywell Vacuum Breakers

a. When primary containment is required, all suppression chamber-drywell vacuum breakers shall be OPERABLE except during testing and as stated in Specification 3.5.A.5.b and c, below.

Suppression chamber - drywell vacuum breakers shall be considered OPERABLE if (1) The valve is demonstrated to open from closed to fully open with the applied force at all valve positions not exceeding that equivalent to 0.5 psi acting on the suppression chamber face of the valve disk. (2) The valve disk will close by gravity to within not greater than 0.10 inch of any point on the seal surface of the disk when released after being opened by remote or manual means. (3) The position alarm system will annunciate in the control room if the valve is open more than 0.10 inch at any point along the seal surface of the disk.

b. Five of the fourteen suppression chamber - drywell vacuum breakers may be inoperable provided that they are secured in the closed position. With one of the nine required suppression chamber-drywell vacuum breakers inoperable, restore one vacuum breaker to OPERABLE status within 72 hours .

• C. One position alarm circuit for each OPERABLE vacuum breaker may be inoperable, provided that each OPERABLE suppression chamber- drywell vacuum breaker with one defective alarm circuit, and associated remaining position alarm circuit are verified to be OPERABLE immediately, and monthly in accordance with 4.5.F.5.a.

Additionally, a daily verification using the OPERABLE position alarm circuit that the affected vacuum breaker is closed shall be performed.

d. If Specifications 3.5.A.5(a), (b) or (c) can not be met, the reactor shall be PLACED IN the COLD SHUTDOWN CONDITION within 24 hours.

6. The primary containment oxygen concentration shall be less than 4.0 volume percent while in the RUN MODE, except as specified in 3.5.A.6.a and 3.5.A.6.b below.

a. From 24 hours after THERMAL POWER is > 15% ATP following startup, to,

b. 24 hours prior to reducing THERMAL POWER to< 15% ATP prior to the next scheduled reactor shutdown .

• OYSTER CREEK 3.5-4 Amendment No.: 21, 32, 44, 86, 87,196,230,266
• 7.

c. If the primary containment oxygen concentration is greater than or equal to 4.0 volume percent while in the RUN MODE, except as specified in 3.5.A.6.a or 3.5.A.6.b above, restore oxygen concentration to < 4.0 volume percent within 24 hours, otherwise reduce THERMAL POWER to s 15%

ATP within the next 8 hours. Deleted .

• OYSTER CREEK 3.5-4a Amendment No.: 21, :32, 44, 86, 87,196,280,266
• 8. Shock Suppretsors (Snubbers)

a. All safety related snubbers are required to be operable whenever the systems they protect are required to be operable except as noted in 3.5.A.8.b and c below.

b. With one or more snubbers inoperable, within 72 hours replace or restore the inoperable snubber(s) to.operable status.

c. If the requirements of 3.5.A.8.a and 3.5.A.8.b cannot be met, declare the protected system inoperable and follow the appropriate action statement for that system.

d. An engineering evaluation shall be performed to determine if the components protected by the snubber(s) were adversely affected by the inopera-bility of the snubber prior to returning the system to operable status.

B. *Secondary Containment

1. Secondary containment integrity shall be maintai_ned at all times unless all of the following conditions are met: *

a. The reactor is subcritical and Specification 3.2.A is met.

b. The reactor is in the cold shutdown condition.

c. The reactor vessel head or the drY"'ell head a~

in p.lace.

d. No work is being performed on the reactor or its connected systems in the reactor building which could result in inadvertent releases of radio-active material.

e. No operations are being performed in, above, or around the spent fuel storage pool that.could cause release of radioactive materials .

• *oYSTER CREEK

3. 5-5 Arilendment No.: 32, 74, 86, 87, 100

2. Upon the accidental loss of SECONDARY CONTAINMENT INTEGRITY, restore, SECONDARY CONTAINMENT INTEGRITY within 4 hours, except as provided in specification 3.5.8.3.

3. With one or more of the automatic secondary containment isolation valves inoperable:

a. Maintain at least one automatic secondary containment isolation valve in each affected penetration OPERABLE.

b. Within 8 hours restore the inoperable automatic

• secondary containment i*solation valve(s} to OPERABLE status or isolate each affected penetration with at least one valve secured in the closed position.

4. If Specifications 3.5.B.2 or 3.5.B.3 cannot be met:

a. During Power Operation:

( l) Have the reactor mode switch in the shutdown mode position within the following 24 hours. (2) Cease all work on the reactor or its* connected systems in the reactor building which could result in inadvertent releases of radioactive materials .

• b.

(3) Cease all operations in, above or around the Spent Fuel Storage Pool that could cause release of radioactive materials. During refueling: (1) Cease fuel handling operations or activities which could reduce the shutdown margin (excluding reactor coolant temperature changes). (2) Cease all .work on the reactor or its connected systems in the reactor building which could result in inadvertentt releases of radioactive materials. {3) Cease all operations in, above or around the Spent Fuel Storage Pool that could cause release of radioactive materials. s: Two separate and independent standby gas treatment system circuits shall be operable when secondary containment is required except as specified by Specification 3.5.B.6. OYSTER CREEK Amendment No.: 14,18,32,74,103 3.5-6 168,

6. With one standby gas treatment system circuit inoperable:

• a. During Power Operation:

(1) Verify the operability of the other standby gas treatment system circuit within 2 hours. If testing is required to demonstrate operability and significant painting, fire, or chemical release has taken place in the reactor building within the previous 12 hours, then demonstration by testing shal,1 take place within 1 hour of the expiration of the 12 hour period, and (2) Continue to verify the operability of the standby gas treatment system circuit once per 24 hours until the inoperable standby gas treatment circuit is returned to operable status. (3) Restore the inoperable standby gas treatment circuit to operable status within 7 days.

b. During Refueling:

(1) Verify the operability of the other standby gas treatment system within 2 hours. If testing is

• required to demonstrate operability and significant painting, fire, or chemical release has taken place in the reactor building within the previous 12 hours, then demonstration by testing shall take place within 1 hour of the expiration of the 12 hour period, and (2) Continue to verify the operability of the redundant standby gas treatment system once per 7 days until the inoperable system is returned to operable status.

(3) Restore the inoperable standby gas treatment system to operable status within 30 days or cease all spent fuel handling, core alterations or operation that could reduce the shutdown margin (excluding reactor coolant temperature changes.

7. If Specifications 3.5.8.5 and 3.5.8.6 are not met, reactor shutdown shall be initiated and the reactor shall be in the cold shutdown condition within 24 hours and the condition of Specification 3.5.8.1 shall be met.

• • OYSTER CREEK Amendment No.: 167,168,211, 233 3.5-7
• Bases:

Specifications are placed on the operating status of the containment systems to assure their availability to control the release of any radioactive materials from irradiated fuel in the event of an accident condition. The primary containment system< 1>*provides a barrier

        . against uncontrolled release of fission products to the environs in the event of a break in the reactor coolant systems.

Whenever the reactor coolant water temperature is above 2 l 2°F, failure of the reactor coolant system would cause rapid expulsion of the coolant from the reactor with an associated pressure rise in the *primary containment. Primary containment is required, therefore, to contain the thermal energy of the expelled coolant and fission products which could be released from any fuel failures resulting from the accident. If the reactor coolant is not above 2 l 2°F, there would be no pressure rise in the containment. In addition, the coolant cannot be expelled at a rate which could cause fuel failure to occur before the core spray system restores cooling to the core. Primary containment is not needed while performing low power physics tests since procedures and the Rod Worth Minimizer would limit rod worth such that a rod drop would not result in any fuel damage. In addition, in the unlikely event that an excursion did occur, the reactor building and standby gas treatment system, which shall be operational during this time, offer a sufficient barrier to keep off-site doses well below l O CFR 100 limits. The absorption chamber water volume provides the heat sink for the reactor coolant system energy released following the loss-of-coolant accident. The core spray pumps and containment spray pumps are located in the comer rooms and due to their proximity to the torus, the ambient temperature in those rooms could rise during the design basis accident. Calculations(?> made, assuming an initial torus water temperature of 100°F and a minimum water volume of 82,000 ft. 3, indicate that the comer room ambient temperature would not exceed the core spray and containment spray pump motor operating temperature limits and, therefore, would not adversely affect the long-term core cooling capability. The maximum water volume limit allows for an operating range without significantly affecting accident analyses with respect to free air volume in the absorption chamber. For example, the containment capability<1>with a maximum water volume of 92,000 ft. 3 is reduced by not more than 5.5% m~tal-water reaction below the capability with 82,000 ft. 3

• Experimental data indicate that excessive steam condensing loads can be avoided if the*

peak temperature of the suppression pool is maintained below 160°F during any period of relief valve operation with sonic conditions at the discharge exit. Specifications have been placed on the envelope of reactor operating conditions so that the reactor can be depressurized in a t_imely manner to avoid the regime of potentially high suppression chamber loadings. *

• OYSTER CREEK 3.5-8 Amendment No.:~ 196

The technical specifications allow for torus repair work or inspections that might require draining of the suppression pool when all irradiated fuel is removed or when the potential for draining the reactor vessel has been minimized. This specification also provides assurance that the irradiated fuei has an adequate cooling water supply for normal and emergency conditions with the reactor mode switch in shutdown or refuel whenever the suppression pool is drained for inspection or repair. The function of the primary containment isolation valves (PCIVs), in combination with other accident mitigation systems, is to' limit fission product release during and following postulated Design Basis Accidents (DBAs) to within limits. Primary containment isolation within the time limits specified for those isolation valves designed to close automatically ensures that the release of radioactive material to the environment will be consistent with the assumptions used in the analyses for a DBA. The OPERABILITY requirements for PCIVs help ensure that an adequate primary containment boundary is maintained during and after an accident by minimizing potential paths to the environment. Therefore, the OPERABILITY requirements provide assurance that primary containment function assumed in the safety analyses will be maintained. These isolation devices are either passive or active (automatic). Manual valves, deactivated automatic valves secured in their closed position (including check valves with flow through the valve secured), blind flanges, and closed systems are considered passive devices. Check valves, or other automatic valves designed to close without operator action following an accident, are considered active devices. Two barriers in series are provided for each penetration so that no ~ingle credible failure or malfunction of an active component can result in a loss of isolation or leakage that exceeds limits assumed in the safety analyses. One of these barriers may be a closed system. The opening of locked or sealed c.losed containment isolation valves on an intermittent basis will be performed under administrative control including the following considerations: I) an operator, who is in constant communication with the control room, will be stationed at the valve controls; 2) that operator will be instructed to close those valves in an-accident situation; and, 3) it will be assured that environmental conditions will not preclude access to close those valves and that this action will prevent the release of radioactivity outside the containment. The purpose of the vacuum relief valves is to equalize the pressure between the drywell and suppression chamber, and suppression chamber and reactor building so that the containment external design pressure limits are not exceeded. The vacuum relief system from the reactor building to the pressure suppression chamber consists of two I 00% vacuum relief breaker subsystems (2 parallel sets of 2 valves in series). Operation of either subsystem will maintain the containment external pressure less than the 2 psi external design pressure of the drywell; the external design pressure of the suppression chamber is 1 psi (FDSAR Aiiiendment 15, Section l l ).

• OYSTER CREEK 3.5-9 Amendment No.: 165,196, 211

The capacity of the 14 suppression chamber to drywall vacuum relief valves is sized to limit the external pressure of the drywall during post-accident drywall cooling operations

• to the design limit of 2 psi. They are sized on the basis of the Bodega Bay pressure 9 10 suppression tests( H >. A calculation( 15> was performed in accordance with NEDE-24802(15>

to determine the required number of vacuum breakers by using a mass and energy balance to determine vacuum breaker flow area. The results of the calculation indicate that 8 vacuum breakers are required to proivde vacuum relief capability. An aditional vacuum breaker is included for single failure criteria, bringing the total required to 9. Each suppression chamber drywall vacuum breaker is fitted with a redundant pair of limit switches to provide fail safe signals to panel mounted indicators in the reactor building and alarms in the control room when the disks are open more than 0.1" at any point along the seal surface of the disk. These switches are capable of transmitting the disk closed-to-open signal with 0.01" movement of the switch plunger. Continued reactor operation with failed components is justified because of the redundancy of components and circuits and, most importantly, the accessibility of the valve lever arm and position reference external to the valve. The fail-safe feature of the alarm circuits assures operator attention if a line fault occurs. Conservative estimates of the hydrogen produced, consistent with the core cooling system provided, show that the hydrogen air mixture resulting from a loss-of-coolant accident is considerably below the flammability limit and hence it cannot burn, and inerting would not be needed. However, inerting of the primary containment was included in the proposed design and operation. The 5% oxygen limit is the oxygen concentration limit stated by the American Gas Association for hydrogen-oxygen 4 mixtures below which combustion will not occur.( > The 4% oxygen limit was

• established by analysis of the Generation and Mitigation of Combustible Gas Mixtures in lnerted BWR Mark I Containments.<1 >

2 All nuclear reactors must be designed to withstand events that generate hydrogen either due to the zirconium metal water reaction in the core or due to radiolysis. The primary method to control hydrogen is to inert the primary containment. With the primary containment inert, that is, oxygen concentration< 4.0 volume percent (v/o), a combustible mixture cannot be present in the primary containment for any hydrogen concentration. An event that rapidly generates hydrogen from zirconium metal water reaction will result in excessive hydrogen in primary containment, but oxygen concentration will remain< 4.0 v/o and no combustion can occur. The primary containment oxygen concentration must be within the specified limit when the primary containment is inerted, except as allowed by Specifications 3.5.A.6.a or 3.5.A.6.b during startups and shutdowns. The primary containment must be inert when reactor power is greater than or equal to 15% ATP, since this is the condition with the highest probability of an event that could produce hydrogen. Specification 3.5.A.6.a requires that primary containment be inerted within 24 hours of exceeding 15 percent ATP during startup. Specification 3.5.A.6.b allows de-inerting to commence 24 hours prior to reaching 15 percent ATP during the shutdown sequence. lnerting the primary containment is an operational problem because it prevents containment access without an appropriate breathing apparatus. Therefore, the primary containment is inerj:ed as late as possible in the plant startup and de-inerted as soon as* possible in the plant shutdown. As long as power is less than 15 percent ATP, the potential for an event that generates significant hydrogen is low and the primary containment need not be inert. Furthermore, the probability of an event that generates hydrogen occurring within the first 24 hours of a startup or within the las 24 hours before

• a shutdown, is low enough that these "windows," when the primary containment is not inerted, are also justified. The 24-hour time period is a reasonable amount of time to allow plant personnel to perform inerting or de-inerting.

OYSTER CREEK 3.5-10 Amendment No.: 76, 86,196,230, 266

Snubbers are designed to prevent unrestrained pipe motion under dynamic loads as might occur during an earthquake or severe transient, while allowing normal thermal motion during startup and shutdown. The consequence of an inoperable snubber is an increase in the probability of structural damage to piping as a result of a seismic or other event initiating dynamic loads. It is, therefore, required that all snubbers required to protect the primary coolant system or any other safety system or component be OPERABLE whenever the systems they protect are required to be OPERABLE. The purpose of an engineering evaluation is to determine if the components protected by the snubber were adversely affected by the inoperability of the snubber. This ensures that the protected component remains capable of meeting the designed service. A documented visual inspection will usually be sufficient to determine system OPERABILITY. Because snubber protection is required only during low probability events, a period of 72 hours is allowed for repairs or replacements. 5 Secondary containment< > is designed to minimize any ground level release of radioactive materials which might result from a serious accident. The reactor building provides secondary containment during reactor operation when the drywall is sealed and in service and provides primary containment when the reactor is shutdown and the drywall is open, as during refueling. Because the secondary containment is an integral part of the overall containment system, it is required at all times that primary containment is required. Moreover; secondary containment is

• required during fuel handling operations and whenever work is being performed on the reactor or its connected systems in the reactor building since their operation could result in inadvertent release of radioactive material.

When secondary containment is not maintained, the additional restrictions on operation and maintenance give assurance that the probability of inadvertent releases of radioactive material will be minimized. Maintenance will not be performed on systems which connect to the reactor vessel lower than the top of the active fuel unless the system is isolated by at least one locked

  *closed isolation valve.

• The trunnion room door is not an access opening for the passage of personnel and equipment into the reactor building. During all modes of operation, the trunnion room is a low traffic area and momentary openings of the door would be limited and administratively controlled and have little effect on SGTS and HVAC. The momentary opening of the trunnion room door does not constitute a loss of secondary containment integrity. The trunnion room door may remain open during shutdown conditions (COLD SHUTDOWN CONDITION and REFUEL MODE) when the trunnion room has been isolated from the secondary containment through the reactor building walls, penetrations and either the inboard or outboard valves to the main steam and feedwater piping being secured in the closeed position. This ensures a secure secondary containment boundary since a LOCA or high energy pipe break accident is not credible during cold shutdown conditions.

When the secondary containment boundary has been relocated, SGTS testing is necessary to verify the integrity of the boundary. 5 The standby gas treatment system< > filters and exhausts the reactor building atmosphere to the stack during secondary containment isolation conditions, with a minimum release of radioactive materials from the reactor building to the environs. In Section 3.5.B.5 and 3.5.B.6 of the Technical Specification, the use of the word "Circuits" actually means "Trains" as the word trains is used in the following paragraph. OYSTER CREEK 3.5-11 Amendment No.: 18,74,76,100,196,211, 277 ECR QC 04 00842 CormsteEi: 12t24/84

6 Two separate filter trains are provided, each having 100% capacity( l. There is a section of ductwork upstream and downstream that is common to both filter trains. If one filter train becomes inoperable, there is no immediate threat to secondary containment and reactor operation may continue while repairs are being made. Since the test interval for this system is one month (Specification 4.5), the time out-of-service allowance of 7 days is based on considerations presented in the Bases in Specification 3.2 for a one-out-of-two system. There is also only one vital power supply to the SGTS automatic initiation controls and for the operation of the heating coils for both filter trains. Therefore, the SGTS is not mechanically nor electrically single failure proof. However, manual actuation of the SGTS is not vulnerable to single failures and is an acceptable backup to automatic initiation. Two automatic secondary containment isolation valves are installed in each reactor building ventilation system supply and exhaust duct penetration. Both isolation valves for each supply duct penetration are located inside the secondary containment boundary, and the two exhaust duct penetration isolation valves are located outside of the secondary containment boundary. Removal of an inboard supply or exhaust valve (closest to the boundary) is permitted only when secondary containment is not required. The outboard isolation supply or exhaust valve can be removed when secondary containment is required as long as the inboard valve is secured in the closed position.

References:

(1) (2) (3) (4) (5) (6) FDSAR, Volume I, Section V-1 FDSAR, Volume I, Section V-1.4.1 FDSAR, Volume I, Section V-1.7 Licensing Application, Amendment 11, Question 111-25 FDSAR, Volume I, Section V-2 FDSAR, Volume I, Section V-2.4 (7) Licensing Application, Amendment 42 (8) Licensing Application, Amendment 32, Question 3 (9) Robbins, C.H., "Tests on a Full Scale 1/48 Segment of the Humboldt Bay Pressure Suppression Containment, "GEAP-3596, November 17, 1960. (10) Bodega Bay Preliminary Hazards Summary Report, Appendix I, Docket 50-205, December 28, 1962. (11) Report H. R. Erickson, Bergen-Paterson To ~- R. Goller, NRC, October 7, 1974.

Subject:

Hydraulic Shock $way Arrestors. ( 12) General Electric NED0-22155 "Generation and Mitigation- of Combustible Gas Mixtures in lnerted BWR Mark I Containment" June 1982. (13) Oyster Creek Nuclear Generating Station, Mark I Containment Long-Term Program, Plant Unique Analysis Report, Suppression Chamber and Vent System, MPR-733;,August, 1982.

• OYSTER CREEK 3.5-12 Amendment No.: 14,19,79,86,97,168,196,a3G, ECR QC 04-00842 Corrected: 12/24/84

• (14)

(15) Oyster Creek Nuclear Generating Station, Mark I Containment Long-Term Program, Plant Unique Analysis Report, Torus Attached Piping, MPR-734; August, 1982. AmerGen Calculation C-1302-243-E170-087, 'Wetwell-to-Drywell Vacuum Breaker Sizing." (16) General Electric NEDE-24802, "Mark I Containment Program Mark I Wetwell-to-Drywell Vacuum Breaker Functional Requirements, Task 9.4.3," April, 1980.

• OYSTER CREEK 3.5-12a Amendment No.: 14,19,79,86,97,168,196,23Q, ECR OC 04-00842 Corrected: 12/24/84

3.6 Radioactive Effluents

• Applicability: Applies to the radioactive effluents of the facility.

Objective: To assure that radioactive material is not released to the environment in an uncontrolled manner and to assure that the radioactive concentrations of any material released is kept as low as is reasonably achievable and, in any event, within the limits of 10 CFR part 20.1301 and 40 CFR Part 190. lO(a). Specification: 3.6.A. Reactor Coolant Radioactivity The specific activity of the primary coolant except during REFUEL MODE shall be limited to: Less than or equa1 to 0.2 microcuries per gram DOSE EQUIVALENT (D.E.) 1-131. Limiting Condition for Operation

1. Whenever an isotopic analysis shows reactor coolant activity exceeds 0.2 uCi/gram DOSE EQUIVALENT (D.E.) 1-131, operation may continue for up to 48* hours. Additional analyses shall be done at least once per 4 hours until the

                      .specific activity of the primary coolant is restored to within its limit. The provisions of Specification 3.0.C.3 are applicable.

2. If the reactor coolant activity is greater than 0.2 microcuries per gram DOSE EQUIVALENT 1-131 for more than 48 hours during one continuous time interval or greater than 4.0 microcuries per gram D.E. 1-131, be in at least SHUTDOWN CONDITION*within 12 hours. The* provisions of $pacification 3.0.C.3 are applicable.

• 3. Annual Reporting Requirement The results of specific activity analyses in which the r~actor coolant exceeded tt'!e limits of Specification 3.6.A shall be reported on an annual basis. The following information.

s*hall b~ incladed: (1) Reactor power history starting 48 hours prior to the first sample in 0 which the limit was exceeded until after the radioiodine activity is reduced to le$$ than the limit; (2) Results of the last isotopic analysis for radioiodine performed prior to exceeding the limit, results of analysis while limit was exceeded and results of one analysis after radioiodine activity was reduced to less than the limit. Each result should include date and time of sampling and the radioiodine concentrations; (3) Clean-up system flow history starting 48 hours prior to the first sample in which the limit was exceeded until after the radioiodine activity is reduce to less than the limit; (4) Graph of the 1-131 concentration and one other radioiodine isotope concentration in microcuries per gram as a function of time for the duration of the specHic activity above the steady-state level; and, (5) The time duration when specific activity of the primary coolant exceeded the radioiodine limit.

• OYSTER CREEK 3.6-1 Amendment No.: 48,108,126',166, 191, 241, 2 5 5

4. With the reactor mode switch in Run or Startup position, with:

• 1.

2. Thermal power changed by more than 15% of rated thermal power in one hour*, or

                              *The off-gas level, at the SJAE, increased by more than 10,000 microcuries per second in one hour during steady state operation at release rates less than 75,000 microcuries per second, or

3. The off-gas level, at the SJAE, increased by more than 15% in one hour during steady state operation at release rates greater than 75,000 microcuries per second, take sample and analyze at least one sample, between 2 and 6 hours following the change in thermal power or off-gas level and at least once per four hours thereafter, until the specific activity of the primary coolant is restored to withln limits.

3.6.B Liquid Radwaste Treatment - RELOCATED TO THE ODCM 3.6.C Radioactive liquid Storage Applicability: Applies at all times to ~pecified outdoor tanks used to store radioactive liquids.

1. The quantity of radioactive material, excluding tritium, noble gases, and radionuclides having half-lives shorter

• than three days, contained in any of the following outdoor tanks shall not exceed 10.0 curies:

a. Waste Surge Tank, HP-T-3

b. Condensate Storage Tank

2. In the event the quantity of radioactive material in any of the tanks named exceeds 10.0 curies, begin*treatment as soon as reasonably achievable, continue it until the total quantity of radioactive material in the tank Is 1O curies or less, and describe the reason for exceeding the limit in the next Annual Effluent Release Report.

3. Specification 3.0.A and 3.0.8 do not apply.

3.6.D Condenser Offgas Treatment - RELOCATED TO THE ODCM 3.6.E Main Condenser Offgas Radioactivity

1. The gross radioactivity In noble gases discharged from the main condenser air ejector shall not exceed 0.21/E CVsec after the holdup line where E is the average gamma energy (Mev per atomic transformation).

2. In the event Specification 3.6.E.1 is exceeded, reduce the discharge rate below the limit within 72 hours or be* in at least SHUTDOWN CONDITION within the following 12 hours .

• If there are consecutive thermal power changes by more than 15% per hour, take sample and analyze at least~ sample between 2 and 6 hours following the change and at least once per four hours thereafter, until the specific activity of the primary coolant is restored to within limits.

OYSTER CREEK 3.6-2 Amendment No. 48.108.126.ff,;';_2 ~ ~

3.6.F Condenser Offgas Hydrogen Concentration

1. The concentration of hydrogen in the Augmented Offgaa System (AOG) downstream of.the recombiner during AOG operation shall. not exceed 4 percent by volume.

2. In the event the hydrogen concentration downstream of a recombiner exceeds 4 percent by volume, the concentration shall be reduced to less than 4 percent within 48 hour&.

3. In the event the hydrogen concentration is not reduced to ~4 percent within 48_hours, _be .in at ..least SHUTDOWN CONDITION or within the limit within the following 24 hours.

3.6.G Not used. 3.6.H Not used. 3.6.I Radioactivity Concentration in Liquid Effluent RELOCATED TO THE ODCM 3.6.J Limit on Dose Due to Liquid Effluent RELOCATED TO THE ODCM

• 3.6.K 3 .6.L pose Air Rate Due to Gaaeous Effluent RELOCATED TO THE ODCM Dose Due to Noble Gas in Gaseous Effluent RELOCATED TO THE ODCM 3 .6.M Dose Due to Radioiodine and Particulates in Gaseous.Effluent RELOCATED TO.THE ODCM 3.6.R Annual Total pose Due to Radioactive Effluents RELOCATED TO THE ODCM
• OYST!ll CREBlt 3.6-3 Amandmltnt Ro.: 49, 108, 12, 166 I

Basis: 3.6.A IO CFR 100, as implemented by SRP Section 15.6.4, requires that the radiological consequences of failure of a main steam line outside containment be limited to small fractions of the exposure guidelines of 10 CFR 100. During Systematic Evaluation Program (SEP) for Oyster Creek, an independent assessment of the radiological consequences of a main steam line failure outside containment (SEP Topic XV-18) was performed by the NRC staff. The assessment determined that if the existing Oyster Creek Technical Specification limit for primary coolant iodine activity (8.0 uCi total iodine per gram) is used, the potential offsite doses would exceed the applicable dose limit. The staff recommended that Oyster Creek maintain the primary coolant radio iodine activity within the General Electric Standard Technical Specification (NUREG-0123) limit (0.2 uCi/gram DOSE EQUIVALENT 1-131), which would meet the acceptance criteria. However, the Staffs analyses for Oyster Creek showed that small-line failures are more limiting than the main steam line failure. 10 CFR 100, as implemented by SRP Section 15.6.2, requires that the radiological consequences of failure of small lines carrying primary coolant outside containment be limited to small fractions of the exposure guidelines of 10 CFR 100. During the evaluation of SEP Topic XV-16 "Radiological Consequences of Failure of Small Lines Carrying Primary Coolant Outside Containment" the Staff determined that Oyster Creek does not comply with current acceptance criteria. The Staff recommended that the General Electric Standard Technical Specification (NUREG-0123) limit (0.2 uCi/gram DOSE EQUIVALENT 1-131) for reactor coolant radioiodine activity be adopted in order to ensure that the radiological consequences to the environment from a failure of small lines are acceptably low. The LCO statement permitting power operation to continue for limited time periods with the primary coolant's specific activity greater than 0.2 microcuries per gram DOSE EQUIVALENT 1-131, but less than or equal to 4.0 microcuries per gram DOSE EQUIVALENT 1-131, accommodates possible iodine spiking phenomenon which may occur following changes in THERMAL POWER. The reporting of cumulative operating time with greater than 0.2 microcuries per gram DOSE EQUIVALENT 1-131 will allow sufficient time for Commission to evah,iate the circumstances. Information obtained on iodine spiking will be used to assess the parameters associated with spiking phenomena. A reduction in frequency of isotopic analysis following power changes may be permissible if justified by the data obtained. The surveillance requirements provide adequate assurance that excessive specific activity levels in the reactor coolant will

• 3.6.B OYSTER CREEK be detected in sufficient time to take corrective action .

RELOCATED TO THE ODCM 3.6-4 Amendment No.: 49,108,126,166, 266

• 3.6.C Restricting the quantity of radioactive material contained in the specific tanks provides assurance that in the event of an uncontrolled release of the tanks' contents, the resulting concentrations would be less than the limits of 10 CFR Part 20.1001-20.2402, Appendix B, Table 2, Column 2 in the canal at the Route 9 bridge.

Retaining radioactive liquids on-site in order to permit systematic and appropriate processing is consistent with maintaining radioactive discharges to the environment as low as practicable. Limiting the contents of each outside tank to 10 curies or less assures that even if the contents of a tank were released onto the ground and drained into the discharge canal, the potential dose to a member of the public is. estimated to be less than 1 percent of the 500 mrem/year limit to the total body of a member of the public and only 1 percent of the corresponding 1500 mrem/year standard for a single organ. In t~e highly unlikely event that every outside tank named in Specification 3.6.C were to contain 10 curies and the contents of all were to spill into the discharge canal, the potential dose to a member of the public is estimated to be only about 2 percent of the 500 mrem/year limit to the total body and about 6 percent of the corresponding 1500 mrem/year standard. *

• 3.6.D RELOCATED TO THE ODCM 3.6.E Some radioactive materials are released from the plant under controlled conditions as part of the normal operation of the facility. Other radioactive material not normally intended for release could be inadvertently released in the event of an accident*.

        .Therefore, limits in 10 CFR Part 20 apply to releases during normal operation and limits in 10 CFR Part 100 apply to accidental releases.

Radioactive gases from the reactor pass through the steam lines to the turbine and then to the main condenser where they are extracted by the air ejector, passed through holdup piping and released via the plant stack preferably after treatment in the Augmented Offgas System. Radioactive materials release limits for the plant stack have been calculated using meteorological data from a 400 ft. tower at the plant site. The analysis of these on-site meteorological data shows that a release of radioactive gases after holdup in the offgas system, would not result in a whole body radiation dose exceeding the 10 CFR 20 value of 0.1 rem per year.

• OYSTER CREEK 3.6-5 Amendment No. 49,108,126,166,191

Whole body dose was calculated to determine the offgas system isolation trip setpoints for the Steam Jet Air Ejector.(SJAE) radiation monitor using RAC Code from gamma dose due to cloud passage over the receptor and not cloud submersion in which beta dose could be additive. The Holland

• plume rise model with no.correction factor was used in the calculation of the effect of momentu.

and buoyancy of a continuously emitted plume. The source terms for this calculation assumes historical (i.e .. 1989-1990) offgas isotopic composition. site specific meteorological conditions. plant specific offgas flow rates and takes credit for AOG operation 60 percent of the time. These calculations have established that a dose rate of~ 2.000 mRem/hr at the SJAE Offgas Radiation Monitor is within 10 CFR 20.130l(a}(I) limits, i.e., less than 100 mRem in a year. 3.6.F The*purpose ofSpecificationJ.6.F is to require that the*concentration of potentially explosive gas mixtures in the Augmented Offgas System be maintained below the flammability limit of hydrogen in air. although the AOG is designed to withstand a hydrogen explosion. Specification 3.6.f applies to the hydrogen concentration downstream of a recombiner during AOG operation. The AOG has redundant recombiners so that the recombiner in use can be isolated and purged with air in the event hydrogen in it exceeds the specified limit. 3.6.G NOT USED 3.6.H NOT USED 3.6.1 RELOCATED TO THE ODCM 3.6.J RELOCATED TO THE ODCM 3.6.K RELOCATED TO THE ODCM 3.6.L RELOCATED TO THE ODCM 3.6.M RELOCATED TO THE ODCM 3.6.N RELOCATED TO THE ODCM

• OYSTER CREEK 3.6-6 Amendment No.: 49,108,166, 191

3.7 AUXILIARY ELECTRICAL POWER *

• Applicability:

Objective: Specification: Applies to the OPERATING status of the auxiliary electrical power supply. To assure the OPERABILITY of the auxiliary electrical power supply. NOTE: LCO 3.0.C.2 is not applicable to Auxiliary Electrical Power. A. The reactor shall not be made critical unless all of the following requirements are satisfied:

1. The following buses or panels energized.

a. 4160 volt buses 1C and 1 D in the Turbine Building Switchgear Room.

b. 460 volt buses:

USS 1A2, USS 182, MCC 1A21, MCC 1821, Vital MCC 1A2, and Vital MCC 182 in the Reactor Building 480 V Switchgear Room. USS 1A3 and USS 183 in the Intake Structure. MCC 1A21A, MCC 1A21B, MCC 1821A, MCC 18218, and Vital MCC 1AB2 on Reactor Building 8evation 23' 6". ' MCC 1A24 and 1B24 in the Boiler House. C. 208/120 volt panels CIP-3, IP-4, IP-4A, IP-48, IP-4C and VACP-1 in the Reactor Building Switchgear Room.

d. 120 volt protection panels PSP-1 and PSP-2 in the Lower Cable Spreading Room.

e. 125 VDC Distribution Centers DC-B and DC-C.

125 VDC Power Panels DC-0 and DC-F. 125 voe MCCs DC-1 and DC-2

f. 24 volt DC power panels DC-A and DC-B in the Lower Cable Spreading Room. ' *,

2. One 230 KV line {N-line or 0-line) is fully operational and switch gear and both startup transformers are energized to carry power to the station 4160 volt AC buses and carry power to or away from the plant.

3. An additional source of power consisting of one of the following is in service connected to feed the appropriate plant 4160 V bus or buses:

a. 230 KV S-line fully operational.

b. A 34.5 KV line fully operational.

OYSTER CREEK 3.7-1 Amendment No.: 44, 55, 80, 119, 1.36, 211,222,211,215, 256 Corrected by letter of 10/:1 S/IJooit *

4. Station batteries B and C and an associated battery charger are OPERABLE.

Switchgear control power for 4160 volt bus 1D. and 460 volt buses 1B2 and 1B3

• 5.

is provided by 125 VDC Distribution Center DC-B. Switchgear control power for 4160 volt bus 1C and 460 volt buses 1A2 and 1A3 is provided by 125 VDC Distribution Center DC-C. Bus tie breakers ED and EC are in the open position. B. The reactor shall be PLACED IN the COLD SHUTDOWN CONDITION if the availability of power falls below that required by Specification A above, except that

1. The reactor may remain in operation for a period not to exceed 7 days if a startup transformer is out of service. None of the engineered safety feature equipment fed by the remaining transformer may be out of service.

2. The reactor may remain in operation for a period not to exceed 7 days if 125 VDC Motor Control Center DC-2 is out of service, provided the requirements of Specification 3.8 are met.

3. The reactor may remain in operation provided the requirements of Specification

3. 7.D are met.

C. Standby Diesel Generators

1. The reactor shall not be made critical unless both diesel generators are operable and capable of feeding their designated 4160 volt buses .

• 2. If one diesel generator becomes inoperable during power operation:

a. b. Repairs shall be initiated immediately. The reactor may remain in operation for a period not to exceed 7 days.

c. During the diesel generator out-of-service period none of the engineered safety features normally fed by the operational diesel generator may be out of service or the reactor shall be placed in the cold shutdown condition.

d. Perform the following within 24 hours: *

1. Verify the remaining diesel generator is OPERABLE and not subject to common cause failure, OR

2. Operate the remaining OPERABLE diesel generator at least one hour at greater than 80% rated load .

• OYSTER CREEK 3.7-2 Amendment No.: '14, 66, 99,119,148,197,239, 246,,,d Corrected by letter of 10/16/200'1,
• C. Standby Diesel Generators (Continued)

3. If both diesel generators become inoperable during power operation, the reactor shall be placed in the cold shutdown condition.

4. For the diesel generators to be considered operable:

A) There shall be a minimum of 14,000 gallons of diesel fuel in the standby diesel generator fuel tank, OR B) To facilitate inspection, repair, or replacement of equipment which would require full or partial draining of the standby diesel generator fuel tank, the following conditions must be met:

1) There shall be a minimum of 14,000 gallons of fuel oil contained in temporary tanker trucks, connected and aligned to the diesel generator fill station.

                                                       -AND-

2) The reactor cavity shall be flooded above elevation 117 feet with the spent fuel pool gates removed, or all reactor fuel shall be contained in the spent fuel pool with spent fuel pool gates installed.

• 3)

AND The plant shall be placed in a configuration in which the core spray system is not required to be OPERABLE.

• OYSTER CREEK 3.7-2a Amendment No: 278

D. Station Batteries and Associated Battery Chargers

• 1. With one required station battery B or C charger inoperable:

a. Restore associated station battery terminal voltage to greater than or equal to the minimum established float voltage within 2 hours,

b. Verify affected station battery float current~ 2 amps once per 12 hours, and

c. Restore station battery charger to OPERABLE status within 7 days.

2. With one or more station B and C batteries inoperable due to:

a. One station battery B or C having one or more battery cells float voltage

                        < 2.07 volts, perform 4.7.C.1.a and 4.7.C.1.b for the affected battery within 2 hours and restore affected cell(s) voltage~ 2.07 volts within 24 hours.

b. One station battery B or C float current> 2 amps, perform 4.7.C.1.a for the affected battery within 2 hours and restore affected battery float current to within limits within 12 hours.

C. One station battery B or C having one or more cells electrolyte level less than minimum established design limits, if electrolyte level was below the top of the plates restore electrolyte level to above top of plates within 8 hours and verify no evidence of leakage(*) within 12 hours. In all cases, restore electrolyte level to greater than or equal to minimum established design limits within 31 days.

d. One station battery B or C having pilot cell electrolyte temperature less than minimum established design limits, restore battery pilot cell temperature to greater than or equal to minimum established design limits within 12 hours.

(*) If electrolyte level was below the top of the plates, the verification that there is no evidence of leakage is required to be completed regardless of when electrolyte level is restored. OYSTER CREEK 3.7-3 Amendment No.: 148, 222, 245, 278

• Corrected by letter of 10/15/2004

e. Both station batteries B and C inoperable due to entering one or more Actions 3.7.D.2.a through 3.7.D.2.d, restore battery parameters for one

• f.

battery to within limits within 2 hours . Station battery B or C not meeting any Action 3:7.D.2.a through 3.7.D.2.e, meet the Action(s) within 2 hours or the reactor shall be PLACED IN the COLD SHUTDOWN CONDITION.

g. One station battery B or C having:

(i) One or more battery cells float voltage< 2.07 volts (Action 3.7.D.2.a) AND (ii) Float current> 2 amps {Action 3.7.D.2.b) Restore one battery parameter to within limits within 2 hours or the reactor shall be PLACED IN the COLD SHUTDOWN CONDITION.

3. With one station battery inoperable for reasons other than allowed in 3. 7.0.2.a through 3.7.D.2.g, restore the battery to OPERABLE status within 2 hours or the reactor shall be PLACED IN the COLD SHUTDOWN CONDITION. *

• OYSTER CREEK 3.7-3a Amendment No. 21+ 5

Bases:

• The general objective is to assure an adequate supply of power with at least one active and one standby source of power available for operation of equipment required for a safe plant

  . shutdown, to maintain the plant in a safe shutdown condition and to operate the required engineered safety feature equipment following an accident.

AC power for shutdown and operation of engineered safety feature equipment can be provided by any of three active (one or two 230 KV lines: N-line or 0-line, the 230 KV S-line, and one of two 34.5 KV lines is active) and either of two standby (two die_sel generators) sources of power. In applying the minimum requirement of one active and one standby source of AC power, since two 230 KV lines are on the same set of towers, either one or both of the 230 KV lines (N-line or 0-Line) are considered as a single active source. Normally all six sources are available .

  . However, to provide for maintenance and repair of equipment and still have redundancy of power sources the requirement of one active and one standby source of power was

• established. The plant's main generator is not given credit as a source since it. is not available .

during shutdown. The plant 125V DC system consists of three batteries and associated distribution system. Batterie~ B and C are designated as the safety related subsystems while battery A is designated as a non-safety related subsystem. Safety related loads. are supplied by batteries B and C, each with two associated full capacity chargers~ One charger on each battery is in service at all times with the second charger available in the event of charger failure. These chargers are active sources and supply the normal 125V DC requirements with the batteries _and standby sources. (1) Action 3. 7 .D.1 is for one required safety related battery B or battery C charger O.e., no station battery charger operable for the associated battery) inoperable (e.g.* the battery float voltage limit of 4.7.C.1.a is not maintained for battery B or battery C). These Actions provide a tiered* response that focuses on returning the battery to the fully charged state and restoring a fully qualified charger to OPERABLE status in a reasonable time period. Action 3.7.D.1.a requires that the battery terminal voltage be restored to greater than or equal to the minimum established float voltage within 2 hours. This time provides for returning the inoperable charger to OPERABLE status or providing an alternate means of restoring battery terminal voltage to greater than or equal to the minimum established float voltage. Restoring the battery terminal voltage to greater than or equal to the minimum established float voltage provides good

• assurance that, within 12 hours, the associated battery will be restored to its fully charged condition (as verified by Action 3.7.0.1.b) from any discharge that might have occurred due to the charger inoperability.

A discharged battery having terminal voltage of at least the minimum established float voltage indicates that the battery is on the exponential charging current portion (the second part) of its recharge cycle. The time to r~tum a battery to its fully *charged state under this condition is

   .simply a function of the amount pf the previous discharge and the recharge characteristic of the battery. Thus, there is good assurance of fully recharging the battery within 12 hours, avoiding a premature shutdown with its own attendant risk.

If established battery te1T11inal float voltage cannot be restored to greater than or equal to the minimum established float voltage within 2 hours, and the charger is not operating in the current-limiting mode, a fau~ty charger is indicated. A faulty charger that is incapable of maintaining established battery terminal float .voltage does not provide assurance that it can revert to and operate properly in the current limit mode that is necessary during the recovery period following a battery discharge event that the DC system is designed for. OYSTER CREEK 3.7-4 Amendment No.: 55, 60, 99, 1ae, 148,222, 24a,25f Corrected by letter of 10/15/2001

If the charger is operating in the current limit mode after 2 hours that is an indication that the battery is partially discharged and its capacity margins will be reduced. The time to return the battery to its fully charged condition in this case is a function of the battery charger capacity, the amount of loads on the associated DC system, the amount of the previous discharge, and the recharge characteristic of the battery. The charge time can be* extensive, and there is not adequate assurance that it can be recharged within 12 hours (Action 3.7.D.1.b) .

  . Action 3.7.D.1.b requires that the affected station battery float current be verified :s 2 amps.

This indicates that, if the battery had been discharged as the result of the inoperable battery charger, it has now been fully recharged. If at the expiration of the initial 12 hour period the battery float current is not within limits this indicates there may be additional battery problems. Action 3.7.D.1.c limits the restoration time for the inoperable battery charger to 7 days. This action is applicable if an alternate means of restoring battery terminal voltage to greater than or equal to the minimum established float voltage has been used (e.g., balance of plant non-Class 1E battery charger or the standby charger in the event it was inoperable but continued to supply minimum established float voltage). The 7 days reflects a reasonable time to effect restoration

   .of the qualified battery charger to OPERABLE status.

With one or more cells in one station battery< 2.07. V, the battery cell(s) is degraded. Per Action 3.7.D.2.a, within 2 hours, verification of the required battery charger OPERABILITY is made by monitoring the battery terminal voltage (4.7.C.1.a) and of the overall battery state of charge by monitoring the battery float charge current (4.7.C.1.b). This assures that there is still sufficient battery capacity to perform the intended function. Therefore, with one or more cells in one or more batteries < 2.07 V, continued operation is permitted for a limited period up to 24 hours.

• One safety related station battery float current > 2 amps indicates that a partial discharge of the battery capacity has occurred. This may be due to a temporary loss of a battery charger or possibly due to on*e or more battery cells in a low voltage condition reflecting some loss of capacity. Per Action 3.7.D.2.b, within 2 hours verification of the required battery charger OPERABILITY is made by monitoring the battery terminal voltage.

Since Actions 3.7.D.2.a and 3.7.D.2.b only specify "perform," a failure of 4.7.C.1.a or 4.7.C.1.b acceptance criteria does not result in this Action not being met. However, if one of the Surveillance Requirements is failed the appropriate Action(s), depending on the cause of the failure(s), is also entered.

• If the Action 3.7.0.2.b condition is due to one or more cells in a low voltage condition but still greater than 2.07 V and float voltage is found to be satisfactory, this is not indication of a substantially discharged battery and 12 hours is a reasonable tjme prior to declaring the battery inoperable.

With one station battery with one or more cells electrolyte level above the top of the plates, but below the minimum established design limits, the battery still retains sufficient capacity to perform the intended function. Per Action 3.7.D.2.c, within 31 days the minimum established design limits for electrolyte level must be re-established. With electrolyte level below the top of the plates there is a potential for dryout and plate degradation. Action 3.7.D.2.c addresses this potential (as well as provisions in Specification 6.8.5, "StationBattery Monitoring and Maintenance Program"). Within 8 hours, level is required

• to be restored to above the top of the plates. The Action requirement to verify that there is no leakage by visual inspection and the Specification 6.8.5 item to initiate action to equalize and OYSTER CREEK 3.7-4a Amendment No. 24 5

test in accordance with manufacturers' recommendation are taken from Annex D of IEEE Standard 450-1995. They are performed following the restoration of the electrolyte level to above the top of the plates. Based on the results of the manufacturer's recommended testing,

• the battery may have to be declared inoperable and the affected cell(s) replaced.

Per Action 3.7.D.2.d, with one station battery with pilot cell temperature less than the minimum established design limits, 12 hours is allowed to restore the temperature to within limits. A low electrolyte temperature limits the current and power available. Since the battery is sized with margin, while battery capacity is degraded, sufficient capacity exists to perform the intended function and the affected battery is not required to be considered inoperable solely as a result of the pilot cell temperature not met. Per Action 3.7.D.2.e, with both station batteries with battery parameters not within limits there is not sufficient assurance that battery capacity has not been affected to the degree that the batteries can still perform their required function, given that both safety related station batteries are involved. With both safety related station batteries involved, this potential could result in a total loss of function on multiple systems that rely upon the batteries. The longer restoration times specified for battery parameters on one safety related battery not within limits are therefore not appropriate, and the parameters must be restored to within limits on one required station battery within 2 hours. Per Action 3.7.D.2.f, when any battery parameter is outside the allowances of Actions 3.7.D.2.a, b, c, d, or e, sufficient capacity to supply the maximum expected load requirement is not ensured and a 2 hour restoration time is appropriate. Additionally, per Action 3.7.D.2.g, discovering one or both station batteries with one or more battery cells float voltage less than 2.07 V and float current greater than limits indicates that the battery capacity may not be sufficient to perform the intended functions. The battery must therefore be restored within

• 2 hours or the reactor placed in the COLD SHUTDOWN CONDITION .

Action 3.7.D.3 imposes a 2-hour restoration time for one station battery that is inoperable for reasons other than addressed by the parameter degradation Actions provided. With one station battery inoperable, the battery charger is supplying the DC bus. The 2-hour limit allows sufficient time to effect restoration of an inoperable battery given that the majority of the conditions that lead to battery inoperability (e.g., loss of battery charger, battery cell voltage less than 2.07 V, etc.) are identified in.Actions 3.7.D.2 together with additional specific completion times. Failing to correct this inoperability within 2 hours would require the plant to proceed to cold shutdown. The probability analysis in Appendix "L" of the FDSAR was based on one diesel and shows that even with only one diesel the probability of requiring engineered safety features at the same time as the second diesel fails is quite small. The analysis used information on peaking diesels when synchronization was required which is not the case for Oyster Creek. There are numerous sources of diesel fuel which can be obtained within 6 to 12 hours and the heating boiler fuel in a 75,000 gallon tank on the site could also be used.

• OYSTER CREEK ECR 07-00096
• 3.7-4b Amendment No.: 55,60,99,119,13e,148,222, 246 Gorreoted by letter of 10/15/2004, 278

If makeup Fuel to the Diesel Fuel Oil Tank is not available, the loading on the EDGs can be managed so that they can provide their, Des.igp Basis function without makeup to the Fuel Oil Tank for three days. Calculation C-1302-862-5360-002 provides scenarios that will ensure that the Diesels will be available for three days without makeup fuel oil. During plant cold shutdown or refueling, it may be necessary to inspect, repair and replace the 15,150 gallon standby diesel generator fuel storage tank. This would require tank partial or full drain down. An alternate fuel supply configuration may be established which consists of temporary tanker trucks capable of containing 14,000 gallons. This configuration is capable of supporting continuous operation of both diesels for at least 3 days. The temporary configuration is acceptable since a minimal power load would be required during and following a design basis condition of a loss of offsite power while the plant is in cold shutdown or refueling. Analysis shows that in the event of a tornado or seismic event which may cause a loss of offsite power and a temporary loss of the temporary EOG fuel oil supply, power can be restored before the consequences of previously analyzed conditions are exceeded.

References:

(1) Letter, Ivan R. Finfrock, Jr. to the Director of Nuclear Reactor Regulation dated April 4, 1978.

• OYSTER CREEK ECR 07-00096 3.7-5 Amendment No.: 99,148,203,222,

3.8 ISOLATION CONDENSER Applicability:Applies to operating status of the isolation condenser.

• Objective:

Specification: To assure heat removal capability under conditions of reactor vessel isolation from its normal heat sink. NOTE: LCO 3.0.C.2 is not applicable to the Isolation Condenser. A. The two isolation condenser loops shall be operable during power operations and whenever the reactor coolant temperature is greater than 212°F except as specified in C, below or during reactor vessel pressure testing. B. The shell side of each condenser shall contain a minimum water volume of 22,730 gallons. If the minimum volume cannot be maintained or if a source of makeup water is not available to the condenser, the condenser shall be considered inoperable. C. If one isolation condenser becomes inoperable during the run mode the reactor may remain in operation for a period not to exceed 7 days provided the motor operated isolation and condensate makeup valves in the operable isolation condenser are verified daily to be operable. D. If Specification 3.8.A and 3.8.B are not met, or if an inoperable isolation condenser cannot be repaired within 7 days, the reactor shall be placed in the cold shutdown condition. E. If an isolation condenser inlet (steam side) isolation valve (V-14-30, 31, 32 or 33) becomes or is made inoperable, in the open position during the run mode, the redundant inlet isolation valve shall be verified operable. If the inoperable valve is not returned to service within 4 hours declare the affected isolation condenser inoperable, isolate it and comply with Specification 3.8.C. F. If an AC motor-operated isolation condenser outlet (condensate return) isolation valve (V-14-36 or 37) becomes or is made inoperable in the open position in the run mode, return the valve to service within 4 hours or declare the affected isolation condenser inoperable, isolate it and comply with Specification 3.8.C. Basis: The purpose of the isolation condenser is to depressurize the reactor and to remove reactor decay heat in the event that the turbine generator and main condenser is unavailable as a heat sinkOl Since the shell side of the isolation condensers operate at atmospheric pressure, they can accomplish their purpose when the reactor temperature is sufficiently above 212°F to provide for the heat transfer corresponding to reactor decay heat. The tube side of the isolation condensers form a closed loop with the reactor vessel and can operate without reducing the reactor coolant water inventory. OYSTER CREEK 3.8-1 Amendment No.: 72,120,167, 241

Each condenser containing a minimum total water volume of 22,730 gallons provides I I ,060 gallons above the condensing tubes. Based on scram from a reactor power level of I 950 MWt (the design basis power level for the isolation condensers) the condenser system can accommodate the reactor decay 23 heal * ) (corrected for U-239 and NP-239) for I hour and 40 minutes without need for makeup water. One condenser with a minimum water volume of22,730 gallons can accommodate the reactor decay heat for 45 minutes after scram from I 950 MWt before makeup water is required. In order to accommodate a scram from 1950 MWt and cooldown, a total of 107,500 gallons of makeup water would be required either from the condensate storage tank or from the fire protection system. Since the rated reactor power is I 930 MWt, the above calculations represent conservative estimates of the isolation condenser system capability. The vent lines from each of the isolation condenser loops to the main steam lines downstream of the main steam lines isolatio~ \'.aJv~s are prc:>Vic;ledwitb isolation llal:v.es..whic.h..close.automaticalJy on isolation condenser actuation or on signals which close the main steam isolation valves. High temperature sensors in the isolation condenser and pipe areas cause alann in the control room to alert the operator of a piping leak in these areas. Specification 3.8.E allows reduction in redundancy of isolation capability for isolation condenser inlet (steam side) isolation valves. Reasonable assurance of isolation capability is provided by testing the operability of the redundant valve. Specification 3.8.F allows short term inoperability of the AC motor-operated isolation condenser outlet (condensate return) valve. It is not necessary to test the redundant DC motor-operated valve as this valve is normally in the closed position. These specifications permit troubleshooting and repair as well as routine maintenance, such as valve stem packing addition or replacement, to be performed during reactor *operation without reducing the redundancy of the isolation condenser heat sink function. The out of service time of 4 hours is consistent with that permitted for primary containment isolation valves.<5)

• Either of the two isolation condensers can accomplish the purpose of the system. If one condenser is found to be inoperable, there is no immediate threat to the heat removal capability for the reactor and reactor operation may continue while repairs are being made. Therefore, the time out of service for one of the condensers is based on considerations for a one out of two system.<4 ) The test interval for operability of the valves required to place the isolation condenser in operation is once/3 months (Specification 4.8). The allotted out of service time for an isolation condenser is conservatively set at seven days. However, if at the time the failure is discovered and the repair time is longer than 7 days, the reactor will be placed in the cold shutdown condition. If the repair time is not more than 7 days the reactor may continue in operation, but as an added factor of conservatism, the motor operated isolation condenser and condensate makeup valves on the operable isolation condenser are tested daily.

Expiration of the 7 day period or inability to meet the other specifications requires that the reactor be placed in the cold shutdown condition which is normally expected to take no more than 18 hours. The out of service allowance when the system is required is limited to the run mode in order to require sy~tem availability, including redundancy, at startup. OYSTER CREEK 3.8-2 Change No. 7 . Amendment No.: 77, ffl 'l.'/J1, 209

References:

1. FDSAR, Volume I, Section IV-3

2. K. Shure and D. 1. Dudziak, "Calculating Energy Release by F'J.SSion Products, 11 U.S. AEC

• Report, WAPD-T-1309, March 1961.

3. K. Shure, "Fission Product Decay Heat," in U.S. AEC Report, WAPD-BT-24, December 1961.

4. Specification 3.2, Bases.

S. Specification 3.5.3.a.1.

• OYSTER CREEK 3.8-3 Amendment No.:""72; 195

3.9 REFUELING Applicability: Applies to fuel handling operations ciurlng refueling . Objective: To assure that criticality does not occur during refueling. I Specification: A. Fuel shall not be loaded into a reactor core cell unless the control rod in that core cell is fully inserted. B. During CORE ALTERATIONS the reactor mode switch shall be locked in the refuel position. C. The refueling interlocks shall be OPERABLE with the fuel grapple hoist loaded switch set at ::;;4a5 lb. during the fuel handling operations with the head off the reactor vessel. If the frame-mounted auxiliary hoist, the trolley-mounted auxiliary hoist or the service platform hoist is to be used for handling fuel with the head off the reactor vessel the load limit switch on the hoist to be used shall be set at ::;;400 lb. Fuel Handling operations with the head off the reactor vessel can be performed with the refueling interlocks inoperable provided all the following specifications are satisfied:

1. All control rods are verified to be fully inserted.

2. Control rod withdrawal has been disabled.

D. During CORE ALTERATIONS at least two (2) source range monitor (SAM) channels shall be OPERABLE and inserted to the normal operating level. One of the OPERABLE SAM channel detectors shall be located in the core quadrant where CORE ALTERATIONS are being performed, and another shall be located in an adjacent quadrant. E. Removal of one control rod or rod drive mechanism may be performed provided that all the following specifications are satisfied.

1. The reactor mode switch is locked in the refuel position.

2. At least two (2) sources range monitor (SRM) channels shall be OPERABLE and inserted to the normal operation level. One of the OPERABLE SRM channel detectors shall be located in the core quadrant where the control rod is being removed and one shall be located in an adjacent quadrant.

F. Removal of any number of control rods or rod drive mechanisms may be performed provided all the following specifications are satisfied:

1. The reactor mode switch is locked in the refuel position and all refueling interlocks are OPERABLE as required in Specification 3.9.C. The refueling interlocks associated with the control rods being withdrawn may be bypassed as required after-the fuel assemblies have been removed from the core cell surrounding the control rods as specified in 4, below.

2. At least two (2) source range monitor (SAM) channels shall be OPERABLE and inserted to the normal operation level. One of the OPERABLE SRM channel detectors shall be located in the.. core . quadrant where.. a..control .r.od .is OYSTER CREEK 3.9-1 Amendment No.: 23, 43,229, 234

• 3.

being removed and one shall be located in an adjacent quadrant. All other control rods are fully inserted with the exception of one rod which may be partially withdrawn not more than two notches to perform refueling interlock surveillance.

4. The four fuel assemblies are removed from the core cell surrounding each control rod or rod drive mechanism to be removed.

5. The SHUTDOWN MARGIN requirements of Specification 3'.2.A are met.

6. An evaluation will be conducted for each refuel/reload to ensure that actual core criticality of the proposed order of def ueling and refueling is bounded by previous analysis performed to support such defueling and refueling activities, otherwise a new analysis shall be performed.

The new analysis must show that sufficient conservatism exists for the proposed order of defueling and refueling before such operation shall be allowed to proceed. G. With any of the above requirements not met, cease CORE ALTERATIONS or control rod removal as appropriate, and initiate action to satisfy the above requirements .

• OYSTER CREEK 3.9-2 Amendment No.: 23, 43, 178, 229

Basis: During refueling operations, the reactivity potential of the core is being altered. It is necessary to require certain 'intar:ooks and restrict certain refueling procedures such that there is assurance that inadvertent criticality does not occur. Addition of large amounts of reactivity to the core is prevented by operating procedures, which are in turn backed up by refueling interlocks (1) on rod withdrawal and movement of the refueling platform. When the mode switch is in the "Refuel" position, interlocks prevent the refueling platform from being moved over the core if a control rod is withdrawn and fuel is on a hoist. Likewise, if the

           . refueling platform is over the core with fuel on a hoist control rod motion is blocked by the interlocks. With the mode switch in the refuel position only one control rod can be withdrawn ( 1 , 2).

The one rod withdrawal interlock may be bypassed in order to allow multiple control rod removal for repair, modifications, or core unloading. The requirements for simultaneous removal of more than one control rod are more stringent than the requirements for removal of a single control rod, since in the latter case Specification 3.2.A assures that the core will remain subcritical. The refueling interlocks may be inoperable provided that all 137 control rods are verified to be fully inserted and control rod withdrawal has been disabled prior to commencing or recommencing fuel handling operations with the head off the reactor vessel. This will ensure that all control rods remain fully inserted during fuel handling operations with the head off the reactor vessel. Therefore, Specification 3.2.A is met and the core will remain subcritical during fuel handling operations. It is not the intent of the alternative option in Specification 3.9.C to eHminate the first performance of Technical Specification Surveillance 4.9.A prior to in-vessel fuel movement. It is expected that the refueling interlocks would be operable during fuel moves except for equipment failures or during maintenance that would otherwise result in false, indications of rod withdrawal during which all rods will be verified as fully inserted and rod withdrawal prevented. Fuel handling is normally conducted with the fuel grapple hoist. The total load on this hoist when the interlock is required consists of the weight of the fuel grapple and the fuel assembly. This total is approximately 773 lbs. in the extended position in comparison to the load limit of 485 lbs. Provisions have also been made to allow fuel handling with either of the three auxiliary hoists and still maintain the refueling interlocks. The 400 lb load trip setting on these hoists is adequate to trip the interlock when one of the more than 600 lb. fuel bundles is being handled. The source range monitors provide neutron flux monitoring capabilities with the reactor in the refueling and shutdown modes (3). Specifications 3.9.D, 3.9.E and 3.9.F require the OPERABILITY of at least two source range m<;mitors during CORE ALTERATIONS and when control rods are to be removed. This requirement ensures that redundant monitoring capability is available to detect changes in the reactivity condition of the core.

REFERENCES:

(1) FDSAR, Volume I, Section Vll-7.2.5 (2) FDSAR, Vol~me I, Section Xlll-2.2 (3) FDSAR, Volume I, Section Vll-4.2.2 and Vll-4.3.1

• OYSTER CREEK 3.9-3 Amendment No.: 23, 43,229, 234

3.10 CORE LIMITS Applicability: Applies to core conditions required to meet the Final Acceptance Criteria for Emergency Core Cooling Performance. Objective: To assure confonnance to the peak clad temperature limitations during a postulated loss-of-coolant accident as specified in IO CFR 50.46 (January 4, 1974) and to assure conformance to the operating limits for LOCAL LINEAR HEAT GENERATION RATE and minimum CRITICAL POWER RATIO. Specification: A. AVERAGE PLANAR LHGR

       ~  During POWER OPERATION the maximum AVERAGE PLANAR LINEAR HEAT GENERATION RATE (APLHGR) for each fuel type as a function of exposure shall not exceed the limits specified in me CORE OPERATING LIMITS REPORT (COLR).

If at any time during POWER OPERATION it is determined by normal surveillance that the limiting value for APLHGR is being exceeded, action shall be initiated to restore operation to within the prescribed limits. If the APLHGR is not returned to

• B.

within the prescribed limits within two (2) hours, action shall be initiated to bring the reactor to the COLD SHUTDOWN CONDITION within 36 hours. During this period surveillance and corresponding action shall continue until reactor operation is within the prescribed limits at which time POWER OPERATION may be continued. LOCAL LHGR During POWER OPERATION, the LOCAL LINEAR HEAT GENERATION RATE (LHGR) of any rod in any fuel assembly, at any-axial location shall not exceed the maximum allowable LHGR limits specified in the COLR. If at any time during operation it is determined by normal surveillance that the . limiting value ofLHGR is being exceeded, action shall be initiated to restore operation to within the prescribed limits. If the LHGR is not' returned to within the prescribed limits within two (2) hours, action shall be initiated to bring the reactor to the COLD SHUTDOWN CONDITION within 36 hours. During this period, surveillance and corresponding action shall continue until reactor operation is within the prescribed limits at which time POWER OPERATION may be continued. OYSTER CREEK 3.10-1 Amendment No.: 48,75,129, 147, 192

• c. Minimum CRITICAL POWER RATIO (MCPR)

I , I .. During steady state POWER OPERATION the minimum CRITICAL POWER RATIO (MCPR) shall be equal to or greater than the MCPR limit as specified in the COLR. When APRM status changes due to instrument failure (APRM or LPRM input failure), the MCPR requirement for the degraded condition shall be met within a time interval of eight (8) hours, provided that the control rod block is placed in operation during this interval. For core flows other than rated, the nominal value for MCPR shall be increased by a factor of kt, where kt is as shown in the COLR. If at any time during POWER OPERATION it is determined by normal surveillance that the limiting value for MCPR is being exceeded for reasons other than instrument failure, action shall be initiated to restore operation to within the prescribed limits. If the steady state MCPR is not returned to within the prescribed limits within two [2] hours, action shall be initiated to bring the reactor to the COLD SHUTDOWN CONDITION within 36 hours. During this period, surveillance and corresponding action shall continue until reactor operation is within the prescribed limit at which time POWER OPERATION may be continued .. OYSTER CREEK 3.10-2 Ame.~~~.~~!._r\Jo:.:_._~.~.*.?_~~-~-1.1 .* ~ ?9.~~~..?*~7.~*-~.~§,21 ?~~}.?_.......... ... . ...............---*-* * *- ................ *-*-*-*- ..............

Bases:

                                                    *   * ')I The Specification for AVERAGE PLANAR LHGR assures that the peak cladding temperature following the postulated design basis loss-of-coolant accident will not exceed the 2200°F limit specified in 10 CFR 50.46. The analytical methods and assumptions used in evaluating the fuel design limits are presented in FSAR Chapter 4.

LOCA analyses are performed for each fuel design at selected exposure points to determine APLHGR limits that meet the PCT and maximum oxidation limits of 10 CFR 50.46. The analysis is performed using GE calculational models which are consistent with the requirements of 10 CFR 50, Appendix K. The PCT following a postulated LOCA is primarily a function of the average heat generation rate of all the rods of a fuel assembly at any axial location and is not strongly influenced by the rod to rod power distribution within an assembly. Since expected location variations in power distribution within a fuel assembly affect the calculated peak clad temperature by less . than+/- 20°F relative to the peak temperature for a typical fuel design, the limit on the average linear heat generation rate is sufficient to assure that calculated temperatures are below the limits specified in 10 CFR 50.46. The maximum AVERAGE PLANAR LHGR limits for the various fuel types currently being used are provided in the COLA. The COLA includes MAPLHGR limits for five loop operation. Additional limits on MAPLHGR for operations with less than five loops are given in Specification 3.3.F.2. Fuel design evaluations are performed to demonstrate that the cladding 1% plastic strain

• and other fuel design limits are not exceeded during anticipated operational occurrences for operation with LHGRs up to the operating limit LHGR.

The analytical methods and assumptions used in evaluating the anticipated operational occurrences to establish the operating limit MCPR are presented in the FSAR, Chapters 4, 6 and 15 and in Technical Specification 6.9.1.f. To assure that the Safety Limit MCPR is not exceeded during any moderate frequency transient event, limiting transients have been analyzed to determine the largest reduction in CRITICAL POWER RATIO (CPR). The

• types of transients evaluated are pressurization, positive reactivity insertion and coolant temperature decrease. The operational MCPR limit is selected to provide margin to accommodate transients and uncertainties in monitoring the core operating state, manufacturing, and in the critical power correlation itself. This limit is derived by addition of the CPR for the most limiting transient to the safety limit MCPR designated in Specification 2.1.

OYSTER CREEK 3.10-3 Amendment No.: 48,75,111,129,147,176,192,212, 235

• The APRM response is used to predict when the rod block occurs in the analysis of the rod withdrawal error transient. The transient rod position at the rod block and corresponding MCPR can be determined. The MCPR has been evaluated for different APRM responses which would result from changes in the APRM status as a consequence of bypassed APRM channel and/or failed/bypassed LPRM inputs. The steady state MCPR required to protect the minimum transient CPR for the worst case APRM status condition (APRM Status 1). is determined in the rod withdrawal error transient analysis. The steady state MCPR values for APRM status conditions 1, 2, and 3 will be evaluated each cycle. For those cycles where the rod withdrawal .

error transient is not the most severe transient the MCPR value for APRM status conditions 1, 2, and 3 will be the same and be equal to the limiting transient MCPR value. The time interval of Eight (8) hours to adjust the steady state of MCPR to account for a degradation in the APRM status is justified on the basis of instituting a control rod block which precludes the possibility of experiencing a rod withdrawal error transient since rod withdrawal is physically prevented. This time interval is adequate to allow the operator to either increase the MCPR to the appropriate value or to upgrade the status of the APRM system while in a condition which prevents the possibility of this transient occurring. Transients analyzed each fuel cycle will be evaluated with respect to the operational MCPR limit specified in the COLA. The purpose of the k1 factor is to define operating limits at other than rated flow conditions. At less than 100% flow the required MCPR is the product of the operating limit MCPR and the k1 factor. Specifically, the k1 factor provides the required thermal margin to protect against a flow increase transient. The k1 factor curves, as shown in the COLR, were developed generically using the flow control line corresponding to RATED THERMAL POWER at rated core flow. For the manual flow control mode, the k1 factors were calculated such that at the maximum flow state (as limited by the pump scoop tube set point) and the corresponding core power (along the rated flow control line), the limiting bundle's relative power was adjusted until the MCPR was slightly above the Safety Limit. Using this relative bundle power, the MCPR's were calculated at different points along the rated flow control line corresponding to different core flows. The ratio of the MCPR calculated at a given point of core flow, divided by the operating limit MCPR determines the value of k1. The k1 factor also provides the required thermal margin to protect against reactor thermal hydraulic instability. The k1 factor establishes the required MCPR at low flow conditions such that if a reactor thermal hydraulic instability were to occur, the MCPR Safety Limit would not be exceeded .

• OYSTER CREEK Amendment No.: 76, 129,147,176,192,212,236,266 3.10-4
• 3.11
• Intentionally Left Blank
• OYSTER CREEK
• 3.11-1 Amendment No.: 29

3.12 Alternate Shutdown Monitoring Instrumentation

• Applicability:

Objective: Applies to the operating status of alternate shutdown monitoring instrumentation. To assure the operability of the alternate shutdown monitoring

• instrumentation.

Specification: A. The alternate shutdown monitoring instruments listed in Table 3.12-1 shall be operable during reactor power operations and when reactor coolant temperature exceeds 212°F. B. With less than the minimum number of op*erable channels specified in Table 3.12-1, either rest.ore the inoperable channel to operable status within 30 days, or be in at least hot shutdown within the next 12 hours and in cold shutdown within the following 24 hours. The operability of the alternate shutdown monitoring instrumentation ensures that sufficient capability is available to permit shutdown and maintenance of hot shutdown of the plant from locations outside of the control room. This capability is required in the event control room habitability is lost and is consistent with Appendix R and General Design Criteria 19 of 10 CFR

50. .

OYSTER CREEK 3.12-1 Amendment No.: 161, 233

• Functional Unit TABLE 3.12-1 ALTERNATE SHUTDOWN MONITORING INSTRUMENTATION Readout Min. Channels Location Operable Reactor Pressure RSP l Reactor Water Level (fuel zone) RSP 1 Condensate Storage Tank Level Local *1 Service Water Pump Discharge Pressure Local l Control Rod Drive System Flowmeter Rx 23* l near V-15-30 Shutdown cooling System Flowmeter Local 1 Isolation condenser "B" Shell Water Level RSP 1 Reactor Building Closed cooling Water Pump Discharge Pressure Local l RSP - Remote Shutdown Panel OYSTER CREElt 3.12-2 Amendment ~o. : 1~ , 161
• 3.13 ACCIDENT MONITORING INSTRUMENTATION Applicabilitv:

Objective: Applies to the operating st:irus of J.ccidem monitoring instrumentation. To assure operJbility of accident monitoring instrumenc:uion. Specification: A. Relief Valve Position Indicators I. The accident monicoring inscrumencation channels shown in Table 3.13. l shall be OPERABLE when the mode switch is in the Scarrup or Run positions.

2. With no accident monitoring instrumentation operable for a relief valve as specified in Table 3.13. l. either restore any inoperable channel to operable starus within 7 days, or place d!e reactor in the SHUTDOWN condition within the next 24 hours. If only the primary* detector or the backup** indicator on a relief valve becomes inoperable. no action is required. The provisions of 3.0.A do not apply .

• B. Safecv Valve Position Indicators

l. During POWER OPERATION. both primary* and backup** safety valve monitoring instruments are required to be OPERABLE except as provided in 3.13.B.2.

If the primary* accident monitoring instrument on a safety valve becomes inoperable. the primary"' accident monitoring instruments on~ adjacent valve, if OPERABLE, must have its set point appropriately reduced. When a reduced setpoint causes an alann condition due to background noise. the setpoint may be returned to normal. If the backup- accident monitoring instrument on a safety valve becomes inoperable, no action is required. _The provisions of Specificatiqn_~.O.A do not apply.

• Acoustic Monitor

      **      Thermocouple

• OYSTER CREEK 3.13-1 Amendment No.: 54, 57. %, 123, 158, 214

C. In the event that any of these monitoring channels become inoperable, they shall be made OPERABLE prior to startup following the next COLD SHUTDOWN . D. Wide Range Torus Water Level Monitor

1. Two wide range torus water level monitor channels shall be continuously indicated in the control room during POWER OPERATION.

2. With the number of OPERABLE accident monitoring channels less than the total Number of Channels shown in Table 3.13.1, restore the inoperable channel(s) to OPERABLE status within 7 days or place the reactor in the SHUTDOWN CONDITION within the next 24 hours.

3. With the number of OPERABLE accident monitoring instrumentation channels less than the Minimum Channels operable requirements of Table 3.13.1, restore the inoperable channel(s) to OPERABLE status within 48 hours or place the reactor in the SHUTDOWN CONDITION within the next 24 hours.

E. Wide Range Drywell Pressure Monitor

1. Two Wide Range Drywell Pressure monitor channels shall be continuously indicated in the control room during POWER OPERATION.

2. With the number of OPERABLE accident monitoring channels less than the total Number of Channels shown in Table 3.13.1, restore the inoperable channel(s) to OPERABLE status within 7 days or place the reactor in the SHUTDOWN CONDITION within the next 24 hours.

3. With the number of OPERABLE accident monitoring instrumentation channels less than the Minimum Channels operable requirem*ents of 3.13.1, restore the inoperable channel(s) to OPERABLE status within 48 hours or place the reactor in the SHUTDOWN CONDITION within the next 24 hours.

F. DELETED 1

• OYSTER CREEK 3.13-2 Amendment No.: 54, 57, 94, 96, 123, 158, 246

G. Containment High-Range Radiation Monitor

1. Two containment high-range radiation monitors shall be OPERABLE \Vhen PRIMARY CONTAINMENT INTEGRITY is required.

2. With the number of OPERABLE monitors less than 2:

a. Take appropriate action to restore the inoperable monitor(s) to OPERABLE status as soon as possible.

b. Perfom1 any actions required by_ Table 3 .1.1 .

c.

• Restore the inoperable monitor(s) to OPERABLE statLiS within 7 days of the failure or prepare and submit a Special Report within 14 days following the failure outlining the cause of inoperability, actions taken, anJ the planned schedule for restoring the monitors to OPERABLE stah1s.
• 3. With the number of OPERA.BLE monitors less than 1, in addition to the actions of 3.13.G.2 above, restore at least I monitor to OPERABLE status within 7 days of the failure or have available a preplanned alternate method capable of being implemented to provide an estimate of the radioactive material in containment under accident conditions.

H. High-Ramie Radioactive Noble Gas Effluent Monitor

1. The high range radioactive noble gas effluent monitors listed in Table 3.13.1 shall be OPERABLE during PO'vVER OPERATION.

2. With the number of OPERABLE channels less than required by the minimum channels OPERABLE requirements. restore the inoperable channel(s) to OPERABLE status witmn 7 days of the event or prepare and submit a Special Report within 30 days following the event outlining the action taken. the cause of the inoperability and the plans and schedule for restoring the equipment to OPERABLE status.

BASES The purpose of the .safety/relief valve accident monitoring instrumentation is to alert the operator to a stuck open safety/relief valve which could result in an inventory threatening event.

• OYSTER CREEK 3.J3-3 AmendrnentNo.: s*J,57,9*1,!16,137,157,158, l Correetion letter of Gf15/92

As the safety valves present distinctly different concerns than those related to relief valves, the technical specifications are separated as to the actions taken upon inoperability. Clearly, the actuation of a safety valve will be immediately detectable by observed increase in drywall pressure. Further confirmation can be gained by observing reactor pressure and water level. Operator action in response to the*se symptoms would be taken regardless of the acoustic monitoring system status. Acoustic monitors act only to confirm the reseating of the safety valve. In actuality, the operator actions in response to the lifting of a safety valve will not change whether or not the safety valve reseats. Therefore, the actions taken for inoperable acoustic monitors on safety valves are significantly less stringent than that taken for those monitors associated with relief valves. Should an acoustic monitor on a safety valve become inoperable, the setpoint on an adjacent monitor, if operable, will be reduced to assure alarm actuation should the safety valve lift. When a reduced setpoint results in having the acoustic monitor on an adjacent valve in an alarm condition due to background noise, the setpoint may be returned to normal. This will ensure that the adjacent valve's acoustic monitor remains operable. Analyses, using very conservative

• blowdown forces and attenuation factors, show that reducing the alarm setpoint on adjacent monitors to less than 1.4g will assure alarm actuation should the adjacent safety valve lift.

Minimum blowdown force considered was 30g with a maximum attenuation of 27dB. In actuality, a safety valve lift would result in considerably larger blowdown force. The maximum attenuatron of 27dB was determined based on actual testing of a similar monitoring system installed in a

 . similar configuration.

The operability of the accident monitoring instrumentation ensures that sufficient information is available on selected plant parameters to monitor and assess these variables during and following an accident. The capability is consistent with NUREGs 0578 and 0737. The capability is provided to detect and measure concentrations of noble gas fission products in (1) plant gaseous effluents and (2) in containment during and following an accident. For the plant gaseous effluent capability, two Radioactive Gaseous Effluent Monitoring Systems (RAG EMS) are installed at Oyster Creek. One system monitors releases at the main stack (RAG EMS I) and the other monitors the turbine building vents (RAG EMS 11). For the in containment post-accident capability, two high range radiation monitors are installed in the drywall. These monitors augment the capabilities provided by the Offsite Dosimetry Program .

• OYSTER CREEK 3.13-4 Amendment No.: 64,67,94,116,137,167,168,237, ECR OC 13-00273

TABLE 3.13.1

• INSTRUMENT ACCIDENT MONITORING INSTRUMENTATION TOTAL NO. OF MINIMUM CHANNELS CHANNELS OPERABLE

1. Relief Valve Position Indicator 1/valve (Primary Detector*)

Relief Valve Position Indicator 1/valve (Backup Indications**)

2. Wide Range Drywell Pressure 2 1 Monitor (PT/PR-53 & 54)

3. Wide Range Torus Water Level 2 1 (L T/LR-37 & 38)

4. DELETED

5. Containment High Range Radiation 2 1

6. High Range Radioactive Noble Gas Effluent Monitor

a. Main Stack 1 1

b. Turbine Building Vents 1 1

• Acoustic Monitor

    **   Thermocouple Thermocouple TE 65A can be substituted for thermocouple TE210-43V, W, or X Thermocouple TE 658 can be substituted for thermocouple TE210-43Y or Z

• ! OYSTER CREEK 3.13-5 Amendment No.: 54, 57, 88, 94, 1::f6, 1a7, 214, 246

3.14 Solid Radioactive Waste - DELETED I~ OYSTER CREElt 3.14-1 Amendment No.: 108, 166

3.15 Explosive Gas Monitoring Instrumentation Objective: The explosive gas monitoring instrumentation channels shown in Table 3.15.2 shall be OPERABLE with Alarm/Trip setpoints set to ensure that the limits of Specification 3.6.F are not exceeded. Applicability: As shown in Table 3.15.2 Specification A. Explosive Gas Instrumentation

1. With an explosive gas monitoring instrumentation channel Alarm/Trip setpoint leas conservative than required by the Objective above declare the channel inoperable and take ACTION shown in Table 3.15.2.

2. *With lesa than the minimum number of explosive gas monitoring instrumentation channels OPERABLE, take the ACTION shown in Table 3.15.2. Restore the inoperable instrumentation to OPERABLE status within 30 days and, if unsuccessful, prepare and submit a Special Report to the commission pursuant to Specification 6.9.3.

3. The provisions of Specifications 3.0 and 3.1 are not applicable.

Basis: A. The explosive gas monitoring instrumentation in Table 3.15.2 i* provided for monitoring hydrogen below the explosive level in the Offgae System downstream from the recombiner. The operability and use of this instrumentation is consistent with the requirement* of General Deaign Criteria 60 and 64 of Appendix A to 10 CFR SO. The offgaa hydrogen monitor ha* an alarm which reports in the reactor Control Room. The offgaa hydrogen monitor initiates a bypaau of the l Augmented Offgas system in the event the setpoint is exceeded *

• O!'STER CREEK 3.15-1 Amendment No.: 108,

TABLB 3.15.2 EXPLOSIVE MONITORING INSTRUMENTATION Minimum (a) Channel* Essential In*truaent Operable Function Applicability Action

1. Hain Conden*er Offga* ~reataent System 2(d) Monitor hydrogen (C) 125 Recombiner Bffluent Bydrogea Monitor concentration w

..,'"I I-'

0 ID

TABLE 3.15.2 NOTATIONS ( a) Channels shall be OPERABLE and in service as indicated except that a channel may be taken out of service for the purpose of a check, calibration, test, maintenance or sample media change without declaring the channel to be inoperable. (b) NOT USED (c) During Augmented Offgas Treatment system -operation. (d) One hydrogen and one temperature sensor. ACTION 125 With one channel OPERABLE, operation of the main condenser offgaa treatment system may continue provided a recombiner temperature sensing instrument is operable. When only one of the type* of instruments, i.e., hydrogen monitor or temperature monitor, is operable, the offgas treatment system may be operated provided a ga* sample is collected at least once per day and is analyzed for hydrogen within four hours. In the event neither a hydrogen monitor nor a recombiner temperature sensing instrument is operable when required, the Offgaa Treatment syatem may be operated provided a gas sample is collected at least once per 8 hour* and analyzed within the following 4 hours *

• OYSTER ClU!:Elt 3.15-3 Amendmant No.: 108* 1bo (

3.17 Control Room Heating, Ventilating, and Air-Conditioning System

• Applicability: Applies to the operability of the control room heating, ventilating, and air conditioning (HVAC) system and Control Room Envelope (CRE) boundary.

                   -----------------------------------------NOTE------------------------------------------.----------

The CRE boundary may be opened intermittently under administrative control. Objective: To assure the capability of the control room HVAC system and CRE boundary to minimize the amount of radioactivity, hazardous chemicals, or smoke from entering the control room in the event of an accident. Specifications: A. The control room HVAC system shall be operable during all modes of plant operation. B. With one control room HVAC system determined inoperable for reasons other than specification D: .

1. Verify once per 24 hours the partial recirculation mode of operation for the operable system, or place the operable system in the partial recirculation mode; and

2. Restore the inoperable system within 7 days, or prepare and submit a special report to the Commission in lieu of any other report required by Section 6.9, within the next 14 days, outlining the action taken, the cause of the inoperability and the plans/schedule for restoring the HVAC system to operable status.

C. With both control room HVAC systems determined inoperable for reasons other than specification D:

1. During Power Operation: place the reactor in the cold shutdown condition within .30 hours

2. During Refueling:

(a) Cease irradiated fuel handling operations; and (b) Cease all work on the reactor or its connected systems in the reactor building which could result in inadvertent releases of radioactive materials. D. When one or both control room HVAC systems are determined inoperable due to an inoperable CRE boundary:

1. During Power Operation: actions to implement mitigating actions shall be performed immediately, verification that the mitigating actions are in place shall be performed within 24 hours, and the CRE boundary shall be restored to operable status within 90 days.

2. During movement of irradiated fuel assemblies in the containment or during operations with a potential for draining the reactor vessel:

(a) Immediately suspend movement of irradiated fuel assemblies in the containment; and (b) Immediately initiate action to suspend operations with the potential to drain the reactor vessel.

• OYSTER CREEK Amendment No.: 115,139,167,211,225, 265 3.17-1

Basis: The operability of the control room HVAC system ensures that the control room will remain habitable for operations personnel during a postulated design basis accident. The CRE is the area within the confines of the CRE boundary that contains the spaces that control room occupants inhabit to control the unit during normal and accident conditions. This area encompasses the control room, and may encompass other non-critical areas to which frequent personnel access or continuous occupancy is not necessary in the event of an accident. The CRE is protected during normal operation, natural events, and accident conditions. The CRE boundary is the combination of walls, floor, roof, ducting, doors, penetrations and equipment that physically form the CRE. The OPERABILITY of the CRE boundary must be maintained to protect the CRE occupants. The CRE and its boundary are defined in the Control Room Envelope Habitability Program. I Since control room HVAC systems A and B do not have HEPA filters or charcoal absorbers, the supply fan and dampers for* each system minimize the beta and gamma doses to the operators by providing positive pressurization and limiting the makeup and infiltration air into the control room envelope. For the supply of 100% outside unfiltered air to the control room envelope, the most limiting design basis accident radiation exposure to personnel occupying the control room is limited to less than a 30-day integrated dose of 5 rem TEDE. The control room HVAC system with the use of Self Contained Breathing Apparatus (SCBA) provides protection from smoke and hazardous chemicals for the CRE occupants. The analysis of hazardous chemical releases demonstrates that the toxicity limits are not exceeded in the CRE following a hazardous chemical release (Ref. 1). The evaluation of a smoke challenge demonstrates that it will not result in the inability of the CRE occupants to control the reactor either from the control room or Jrom the remote shutdown panels (Ref. 2). A periodic offsite chemical survey, and procedures for controlling onsite chemicals, are essential elements of CRE protection against hazardous chemicals. The system design is based on low probability of offsite sources of toxic gas, based on a chemical survey of the surrounding areas. The offsite chemical survey is conducted periodically to determine any change of condition that may need to be addressed. The onsite chemicals are controlled procedurally such that they do not affect CRE habitability adversely.* The control room envelope (CRE) boundary may be opened intermittently under administrative control. This only applies to openings in the CRE boundary that can be rapidly restored to the design condition, such as doors, hatches, floor plugs, and access panels. For entry and exit through doors, the administrative control of the opening is performed by the person(s) entering or exiting the area. For other openings, these controls should be proceduralized and consist of stationing a dedicated individual at the opening who is in continuous communication with the operators in the control room. This individual will have a method to rapidly close the opening and to restore the CRE boundary to a condition equivalent to the design condition when a need for CRE isolation is indicated. In order for the Control Room HVAC System to be considered OPERABLE, the CRE boundary must be maintained such that the CRE occupant dose from a large radioactive release does not exceed the calculated dose in the licensing basis consequence analyses for DBAs, and the CRE occupants are protected from hazardous chemicals and smoke . OYSTER CREEK 3.17-2 Amendment No.: 225,262,265

If the unfiltered inleakage of potentially contaminated air past the CRE boundary and into the CRE can result in CRE occupant radiological dose greater than the calculated dose of the licensing basis analyses of OBA consequences (allowed to be up to a 30-day integrated dose of 5 rem TEDE), or inadequate protection of CRE occupants from hazardous chemicals or smoke, the CRE boundary is inoperable. Actions must be taken to restore an INOPERABLE CRE boundary within 90 days. During the period that the CRE boundary is considered inoperable, action must be initiated to implement mitigating actions to lessen the effect on CRE occupants from the potential hazards of a radiological or chemical event or a challenge from smoke. Actions must be taken within 24 hours to verify that in the event of a OBA, the mitigating actions will ensure that CRE occupant radiological exposures will not exceed the calculated dose of the licensing basis analyses of OBA consequences, and that CRE occupants are protected from hazardous chemicals and smoke. These mitigating actions (i.e., actions that are taken to offset the consequences of the inoperable CRE boundary) should be preplanned for implementation upon entry into the condition, regardless of whether entry is intentional or unintentional. The 24-hour Completion Time is reasonable based on the low probability of a OBA occurring during this time period, and the use of mitigating actions. The 90 day Completion Time is reasonable based on the determination that the mitigating actions will ensure protection of CRE occupants within analyzed limits while limiting the probability that CRE occupants will have to implement protective measures that may adversely affect their ability to control the reactor and maintain it in a safe shutdown condition in the event of a OBA. In addition, the 90 day Completion Time is a reasonable time to diagnose, plan and possibly repair, and test most problems with the CRE boundary .

REFERENCES:

(1) (2)

            . UFSAR Section 6.4 UFSAR Section 9.5

• OYSTER CREEK Amendment No. 265 3.17-3

Section 4 Surveillance Requiremems 4.0 Surveillance Requirement Applicability

• 4.0. l Surveillance requirements shall be met during the modes or other specified conditions in the applicability for individual LCOs, unless otherwise stated in the surveillance requirements. Failure to meet a surveillance, whether such failure is experienced during the performance of the surveillance or between performances of the surveillance, shall be failure to meet the LCO. Failure to perform a surveillance within the specified frequency shall be failure to meet the LCO

except as provided in 4.0.2. Surveillances do not have to be performed on inoperable equipment or variables outside specified limits.

4.0.2 If it is discovered that a surveillance was not performed within its specified frequency, then compliance with the requirement to declare the LCO not met

         /       may be delayed, from the time of discovery, up to 24 hours or up to the limit of the specified frequency, whichever is greater. This delay period is permitted to allow performance of the surveillance. A risk evaluation shall be performed for any surveillance delayed greater than 2_4 hours and the risk impact shall be managed.

If the surveillance is not performed within the delay period, the LCO must immediately be declared not met, and the applicable condition(s) must be entered. When the surveillance is performed within the delay period and the surveillance is not met, the LCO must immediately be declared not met, and the applicable

• condition(s) must be entered.

4.0.3 Entry into an OPERATIONAL CONDITION or other specified condition in the Applicability of an LCO shall only be made when the LCO's Surveillances have been met within their specified frequency, except as provided by 4.0.2. When an LCO is not met due to surveillances not having been met, entry into an OPERATIONAL CONDITION or other specified condition in the Applicability shall only be made in accordance with LCO 3.0.C.

• This provision shall not prevent entry into OPERATIONAL CONDITIONS or other specified conditions in the Applicability that are required to comply with LCO requirements or that are part of a shutdown of the unit.

BASES: Surveillance Requirement 4.0. l establishes the requirement that surveillance requirements must be met during the modes or other specified conditions in the applicability for which the requirements of the LCO apply,'unless otherwise specified in the individual surveillance requirements. This specification is to ensure that surveillances are performed to verify the OPERABILITY of systems and components, and that variables are within specified limits. Failur:e to meet a surveillance within the specified frequency constitutes a failure to meet an LCO. OYSTER CREEK 4.0-1

• Amendment No.~; ~ ' 241
• Systems and components are assumed to be OPERABLE when the associated surveillance requirements have been met. Nothing in this specification, however, is to be construed as implying that systems or components are
• OPERABLE when:

a. Th.e systems or components are known to be inoperable, although still meeting the surveillance requirements; or

b. The requirements of the surveillance(s) are known to be not met between required surveillance performances.

Surveillances do not have to be performed when the unit is in a mode or other specified condition for which the requirements of the associated LCO are not applicable, unless otherwise specified. Surveillances, including surveillances invoked by required actions, do not have to be performed on inoperable equipment because the actions define the remedial measures that apply. Surveillances have to be met and performed prior to returning equipment to OPERABLE status. Upon completion of maintenance, appropriate post maintenance testing is required to declare equipment OPERABLE. This includes ensuring applicable surveillances are not failed. Post maintenance testing may not be possible in the current mode or other specified conditions in the applicability due to the necessary unit parameters not having been established. In these situations, the equipment may be considered OPERABLE provided testing has been satisfactorily completed to the extent possible and the equipment is not otherwise believed to be incapable of performing its function. This will allow operation to proceed to a mode or other specified condition where other necessary post maintenance tests can be completed. Surveillance Requirement 4.0.2 establishes the flexibility to defer declaring affected equipment inoperable or an affected variable outside the specified limits when a surveillance has not been completed within the specified frequency. A delay period of up to 24 hours or up to the limit of the specified frequency, whichever is greater, applies from the point in time that it is discovered that the surveillance has not been performed in accordance with surveillance requirement 4.0.2 and not at the time that the specified frequency was not met.

• This delay period provides adequate time to complete surveillances that have been missed. This delay period permits the completion of a surveillance before complying with required actions or other remedial measures that might preclude
• completion of the surveillance.

The basis for this delay period includes consideration of unit conditions, adequate planning, availability of personnel, the time required to perform the surveillance, the safety significance of the delay in completing the required surveillance, and the recognition that the most probable result of any particular surveillance being performed is the verification of conformance with the requirements .

• OYSTER CREEK 4.0-2 AmendmentNo.~.~' 241

I ; When a surveillance with a frequency based not on time intervals, but upon specified unit conditions, operating situations, or requirements of regulations (e.g. prior to entering power operation after each fuel loading, or in accordance with 10 CFR 50, Appendix J, as modified by approved exemptions, etc.) is discovered to not have been performed when specified, Surveillance Requirement 4.0.2 allows for the full delay period of up to the specified frequency to perform the surveillance. However, since there is not a time interval specified, the missed surveillance should be performed at the first reasonable opportunity. Surveillance requirement 4.0.2 provides a time limit for, and allowances for the performance of, surveillances that become applicable as a consequence of mode changes imposed by required actions. Failure to comply with specified surveillance frequencies is expected to be an infrequent occurrence. Use of the delay period established by Surveillance Requirement 4.0.2 is a flexibility which is not intended to be used as an operational convenience to extend surveillance intervals. While up to 24 hours or the limit of the specified frequency is provided to perform the missed surveillance, it is expected that the missed surveillance will be performed at the first reasonable opportunity. The determination of the first reasonable opportunity should include consideration of the impact on plant risk (from delaying the surveillance as well as any plant configuration changes required or shutting the plant down to perform the surveillance) and impact on any analysis assumptions, in addition to unit conditions, planning, availability of personnel, and the time required to perform the surveillance. This risk impact should be managed through the program in place to implement 10 CFR 50.65 (a)(4) and its implementation guidance, NRC Regulatory Guide 1.182, 'Assessing and Managing Risk Before Maintenance Activities at Nuclear Power Plants.' This Regulatory Guide addresses consideration of temporary and aggregate risk impacts, determination of risk management thresholds, and risk management action up to and including plant shutdown. The missed surveillance should be treated as an emergent condition as discussed in the Regulatory Guide. The risk evaluation may use quantitative, qualitative, or blended methods. The degree of depth and rigor of the evaluation should be commensurate with the importance of the component. Missed surveillances for important components should be analyzed quantitatively. If the results of the evaluation determine the risk increase is significant, this evaluation should be used to determine the safest course of action. All missed surveillances will be placed in the licensee's Corrective Action Program. If a surveillance is not completed within the allowed delay period, then the equipment is considered inoperable or the variable is considered outside the specified limits and the completion times of the required actions for the applicable LCO conditions begin immediately upon expiration of the delay period. If a surveillance is failed within the delay period, then the equipment is inoperable, or the variable is outside the specified limits and the completion times of the required actions for the applicable LCO conditions begin immediately upon the failure of the surveillance. Completion of the surveillance within the delay period allowed by this specification, or within the completion time of the actions, restores compliance*with Surveillance Requirement 4.0. L

• OYSTER CREEK 4.0-3 Amendment No.~. 24-6, 241

ll Specification 4.0.3 establishes the requirement that all applicable Surveillance Requirements (SRs) must be met before entry.into an OPERATIONAL CONDITION or -. other specified condition in the Applicability .

• This Specification ensures that system and component OPERABILITY requirements and variable limits are met before entry into OPERATIONAL CONDIDONS or other specified conditions in the Applicability for which these systems and components ensure safe operation of the unit. The provisions of this Specification should not be interpreted as endorsing the failure to exercise the good practice of restoring systems or components to OPERABLE status before entering an associated OPERATIONAL CONDITION or other specified condition in the Applicability.

A provision is included to allow entry into an OPERATIONAL CONDITION or other specified condition in the Applicability when a Limiting Condition for Operation is not met due to a Surveillance not being met in accordance with Specification 3.0.C. However, in certain circumstances, failing to meet a Surveillance Requirement will not result in Specification 4.0.3 restricting an OPERATIONAL CONDIDON change or other specified condition change. When a system, subsystem, division, component, device, or variable is inoperable or outside its specified limits, the associated SR(s) are not required to be performed, per Specification 4-0.1, which states that surveillances do not have to be performed on inoperable equipment. When equipment is inoperable, Specification 4.0.3 does not apply to the associated SR(s) since the requirement for the SR(s) to be performed is removed. Therefore, failing to perform the Surveillance(s) within the specified Surveillance time interval does not result in a Specification 4.0.3 restriction to changing OPERATIONAL CONDITTONS or other specified conditions of the Applicability. However, since the Limiting Condition for Operation is not met in this instance, Specification 3.0.C will govern any restrictions that may (or may not) apply to OPERATIONAL CONDITION or other specified condition changes. Specification 4.0.3 does not restrict changing OPERATIONAL CONDITTONS or other specified conditions of the Applicability when a Surveillance has not been performed within the specified Surveillance time interval, provided the requirement to declare the Limiting Condition for Operation not met has been delayed in accordance with Specification 4.0.2. The provisions of Specification 4.0.3 shall not prevent entry into OPERATIONAL CONDITIONS or other specified conditions in the Applicability that are required to comply with LCO requirements. In addition, the provisions of Specification 4.0.3 shall not prevent changes in OPERATIONAL CONDITTONS or other specified conditions in the Applicability that result from any unit shutdown. In this context, a unit shutdown is defined as a change in OPERATIONAL CONDITTON or other specified condition in the Applicability associated with transitioning from POWER OPERATION to STARTUP MODE, STARTUP MODE to SHUTDOWN CONDIDON, and SHUTDOWN CONDITION to COLD SHUTDOWN CONDffiON .

• OYSTER CREEK 4.0-4 Amendment No. 241
• 4.1 SECTION 4 SURVEILLANCE REQUIREMENTS PROTECTIVE INSTRUMENTATION Applicability: Applies to the surveillance of the instrumentation that performs a safety function.

Objective: To specify the minimum frequency and type of surveillance to be applied to the safety instrumentation. Specification: Instrumentation shall be checked, tested, and calibrated as indicated in Tables 4.1.1 and 4.1.2 using the definitions given in Section 1, and at the frequencies specified in the Surveillance Frequency Control Program unless otherwise noted in Tables 4.1.1 and 4.1.2 . OYSTER CREEK 4.1-1 Amendment No.: 171, 208, 276

4.1 PROTECTIVE INSTRUMENTATION Bases: Surveillance Frequencies are controlled under the Surveillance Frequency Control Program (SFCP). The functions listed in Table 4.1.1 logically divide into three groups:

a. On-off sensors that provide a scram function or some other equally important function.

b. Analog devices coupled with a bi-stable trip that provides a scram function or some other vitally important function.

c. Devices which only serve a useful function during some restricted mode of operation, such as startup or shutdown, or for which the only practical test is one that can be performed only at shutdown.

Group (b) devices utilize an analog sensor followed by an amplifier and bi-stable trip circuit. The sensor and amplifier are active components and a failure would generally result in an upscale signal, a downscale signal, or no signal. These conditions are alarmed so a failure would not go undetected. The bi-stable portion does need to be tested in order to prove that it will assume its tripped state when required. Group (c) devices are active only during a given portion of the operational cycle. For example, the IRM is inactive during full-power operation and active during startup. Thus, the only test that is significant is the one performed just prior to shutdown and startup. The condenser Low Vacuum trip can only be tested during shutdown, and although it is connected into the reactor protection system, it is not required to protect the reactor. Testing at the frequency specified in the Surveillance Frequency Control Program is adequate. The switches for the high temperature main steamline tunnel are not accessible during normal operation because of their location above the main steam lines. Therefore, after initial calibration and in-place OPERABILITY checks, they will not be tested between refueling shutdowns. Considering the physical arrangement of the piping which would allow a steam leak at any of the four sensing locations to affect the other locations, it is considered that the function is not jeopardized by limiting calibration and testing to refueling outages. The CHANNEL FUNCTIONAL TEST verifies instrument channel operability. A successful test of the required contact(s) of a channel relay may be performed by the verification of a change in state of a single contact of the relay. This clarifies what is an acceptable CHANNEL FUNCTIONAL TEST or CHANNEL CALIBRATION of a relay. This is acceptable because all the other required contacts of the relay are verified by other Technical Specifications and non-Technical Specification tests. The logic of the instrument safety systems in Table 4.1.1 is such that testing the instrument channels trips the trip system to verify that it is OPERABLE. The testing may be performed by means of any series of sequential, overlapping, or total channel steps. However, certain systems require coincident instrument channel trips to completely test their trip systems. Therefore, SFCP Table 4.1.2 specifies the minimum trip system test frequency for these tripped systems. This assures that all trip systems for protective instrumentation are adequately tested, from sensors through the trip system. OYSTER CREEK 4.1-2 Amendment No.: 171, 2Q8, 2sa, 276

• IRM calibration is to be performed during reactor startup. The calibration of the IRMs during startup will be significant since the I RMs will be relied on for neutron monitoring and reactor protection up to 38.4% of rated power during a reactor startup.

To ensure that the APRMs are accurately indicating the true core average power, the APRMs are calibrated to the reactor power calculated from a heat balance. Limiting Safety System Settings (LSSS) 2.3.A.1 allows the APRMs to be reading greater than actual THERMAL POWER to compensate for localized power peaking. When this adjustment is made, the requirement for the absolute difference between the APRM channels and the calculated power to indicate within 2% ATP is modified to include any gain adjustments required by LSSS 2.3.A.1. LPRM gain settings are determined from the local flux profiles measured by the Traversing lncore Probe (TIP) System. This establishes the relative local flux profile for appropriate representative input to the APRM System. The Surveillance Frequency is controlled under the Surveillance Frequency Control Program. I General Electric Licensing Topical Report NEDC-30851 P-A (Reference 1), Section 5.7 indicates that the major contributor to reactor protection system unavailability is common cause failure of the automatic scram contactors. Scram contactors are tested at the frequency specified in the Surveillance Frequency Control Program. The test of the automatic scram contactors can be performed as part of the CHANNEL CALIBRATION or CHANNEL FUNCTIONAL TEST of Scram Functions or by use of the subchannel test switches.

References:

(1) NEDC~30851 P-A, "Technical Specification Improvement Analyses for BWR Reactor Protection System." (2) NEDC-30936P-A, "BWR Owners' Group .Technical Specification Improvement Methodology (With Demonstration for BWR ECCS Actuation Instrumentation)," Parts 1 and 2. (3) NEDC-30851 P-A, Supplement 1, "Technical Specification Improvement Analysis for BWR Control Rod Block Instrumentation." (4) NEDC-30851 P-A, Supplement 2, "Technical Specification Improvement Analysis for BWR Isolation Instrumentation Common to RPS and ECCS Instrumentation." (5) NEDC-31677P-A, "Technical Specification Improvement Analysis for BWR Isolation Actuation Instrumentation." OYSTER CREEK 4.1-3 AMENDMENT NO.: 71,171, 208, 263, 266, 276

TABLE 4.1.1 Page 1 of 6 MINIMUM CHECK, CALIBRATION AND TEST FREQUENCY FOR PROTECTIVE INSTRUMENTATION Instrument Channel Check {Note 5) Calibrate {Note 5) Test {Note 5) Remarks (Applies to Test & Calibration)

1. High Reactor Pressure Note 3

2. High Drywell Pressure (Scram) N/A By application of test pressure

3. Low Reactor Water Level Note 3

4. Low-Low Water Level Note 3

5. High Water Level in Scram Discharge Volume

a. Digital N/A By varying level in sensor columns

b. Analog N/A Note 3

6. Low-Low-Low Water Level N/A By application of test pressure

7. High Flow in Main Steamline By application of test pressure

8. Low Pressure in Main Steamline N/A By application of test pressure

9. High Drywell Pressure (Core Cooling) By application of test pressure

10. Main Steam Isolation Valve (Scram) N/A N/A By exercising valve OYSTER CREEK 4.1-4 Change: 7, Amendment No.: 152,171,208, 276

TABLE 4.1.1 Page 2 of 6 MINIMUM CHECK, CALIBRATION AND TEST FREQUENCY FOR PROTECTIVE INSTRUMENTATION Instrument Channel Check (Note 5) Calibrate (Note 5) Test (Note 5) Remarks (Applies to Test & Calibration)

11. APRM Level N/A NIA Verify the absolute difference between the APRM channels and the calculated power is :;; 2% rated thermal power [plus any gains required by LSSS 2.3.A.1 J APRM Scram Trips Note 2 Using built-in calibration equipment

• Flow based neutron flux - high during POWER OPERATION
• Fixed neutron flux - high or inop
• Downscale

12. APRM Rod Blocks Note 2 Upscale and downscale

13. DELETED

14. High Radiation in Reactor Building Operating Floor Using gamma source for calibration Ventilation Exhaust

15. High Radiation on Air Ejector Off-Gas Using built-in calibration equipment Channel Check Source check Calibration according to established station calibration procedures Note a OYSTER CREEK 4.1-5 Change: 7, Amendment No.: 108, 141,171,208,276

TABLE 4.1.1 Page 3 of 6 MINIMUM CHECK, CALIBRATION AND TEST FREQUENCY FOR PROTECTIVE INSTRUMENTATION Instrument Channel Check (Note 5} Calibrate (Note 5) Test (Note 5) Remarks (Applies to Test & Calibration) I

16. 1AM Level NIA Each Startup NIA 1AM Scram Using built-in calibration equipment

17. IRM Blocks NIA Prior to startup Prior to startup Upscale and downscale and shutdown and shutdown

18. Condenser Low Vacuum NIA

19. Manual Scram Buttons NIA NIA

20. High Temperature Main Steamline Tunnel N/A Using heat source box

21. SAM

                                                                         .                                   Using built-in calibration equipment

22. Isolation Condenser High Flow l\P (Steam & Water) NIA By application of test pressure

23. Turbine Trip Scram NIA NIA

24. Generator Load Rejection Scram NIA

25. Recirculation Loop Flow NIA NIA By application of test pressure

26. Low Reactor Pressure Core Spray Valve Permissive NIA By application of test pressure OYSTER CREEK 4.1-6 Amendment No.: 71, 144,193.208, 276

TABLE 4.1.1 Page 4 of 6 MINIMUM CHECK, CALIBRATION AND TEST FREQUENCY FOR PROTECTIVE INSTRUMENTATION Instrument Channel Check (Note 5) Calibrate (Note 5) Test (Note 5) Remarks (Applies to Test & Calibration) I

27. Scram Discharge Volume (Rod Block) a) Water level high NIA Calibrate by varying level in sensor column b) Scram Trip bypass NIA NIA

28. Loss of Power a) 4.16 KV Emergency Bus Undervoltage (Loss of Voltage) b) 4. 16 KV Emergency Bus Undervoltage (Degraded Voltage)

29. Drywell High Radiation N/A

30. Automatic Scram Contactors NIA NIA Note 1

31. Core Spray Booster Pump Differential Pressure NIA By application of a test pressure OYSTER CREEK 4.1-7 Amendment No.: sa,B0,116,141,144,152,171,190, 208, 276

TABLE 4.1.1 Page 5 of 6 MINIMUM CHECK, CALIBRATION AND TEST FREQUENCY FOR PROTECTIVE INSTRUMENTATION Instrument Channel Check (Note 5) Calibrate (Note 5) Test (Note 5) Remarks (Applies to Test & Calibration)

32. LPRM Level a) Electronics NIA b) Detectors NIA Note4 NIA

33. RWCU HELB High Temperature NIA Perform Channel Tests using the test switches.

Calibrate prior to startup and normal shutdown and thereafter check and test at the frequency specified in the Surveillance Frequency Control Program until no longer required. Legend: NIA= Not Applicable. OYSTER CREEK 4.1-8 Change: 5, 7, Amendment No.: 171, 208, 259, 276

TABLE 4.1.1 Page 6 of 6 MINIMUM CHECK, CALIBRATION AND TEST FREQUENCY FOR PROTECTIVE INSTRUMENTATION NOTE I: Each automatic scram contactor is required to be tested at the frequency specified in the Surveillance Frequency Control Program. When not tested by other means. the test can be performed by using the subchannel test switches. NOTE2: Al the frequency specified in the Surveillance Frequency Control Program. the reactor neutron flux peaking factor shall be estimated and flow-referenced APRM scram and rod block settings shall be adjusted. if necessary. as specified in Section 2.3 Specifications A. I and A.2. NOTE3: Calibrate electronic bistable trips by injection of an external test current at the frequency specified in the Surveillance Frequency Control Program. Calibrate transmitters hy application of test pressure at the frequency specified in the Surveillance Frequency Control Program. NOTE4: Perform LPRM detectors calibration at the frequency specified in the Surveillance Frequency Control Program. NOTE5: Surwillance Frequencies are specified in the Surveillance Frequency Control Program unless otherwise noted in the table. The following notes are only for Item I5 of Table 4. I. I: A channel may he taken out of service for the purpose of a check, calibration. test or maintenance without declaring the channel to he inoperable.

a. The CHANNEL FUNCTIONAL TEST shall also demonstrate that control room alarm annunciation occurs if any of the following conditions exists:

I) Instrument indicates measured levels above the alarm setpoint.

2) Instrument indicates a downscale failure.

3) Instrument controls not set in operate mode.

4) Instrument electrical power loss.

OYSTER CREEK 4.1-9 Change: 5, 7, Amendment No.: 71, BO, 95. 1OB, 171, 208, 263, 273, 276

TABLE 4.1.2 MINIMUM TEST FREQUENCIES FOR TRIP SYSTEMS Trip System Minimum Test Frequency (Note 1)

1) Dual Channel (Scram)

2) Rod Block

3) DELETED DELETED

4) Automatic Depressurization each trip system, one at a time

5) MSIV Closure each closure logic circuit independently (1 valve at a time)

6) Core Spray each trip system, one at a time

7) Primacv Containment Isolation each trip circuit independently (1 valve at a time)

8) Refueling Interlocks Prior to each refueling operation

• 9) 10)

Isolation Condenser Actuation and Isolation each trip circuit independently (1 valve at a time) Reactor Building Isolation and SGTS Initiation

11) DELETED DELETED

12) Air Ejector Offqass Line Isolation

13) Containment Vent and Purge Isolation Note 1: Surveillance Frequencies are specified in the Surveillance Frequency Control Program unless otherwise noted in the table.

• OYSTER CREEK 4.1-10 Amendment No.: 108,116,144,160,171,1Q3, 208, 273,276

4.2 REACTIVITY CONTROL Applicability: Applies to the surveillance requirements for reactivity control.

• Objective:

Specification: A. To verify the capability for controlling reactivity. SOM shall be verified:

1. Prior to each CORE ALTERATION, and

2. Once within 4 hours following the first criticality following any CORE ALTERATION.

B. The control rod drive housing support system shall be inspected after reassembly. C. The maximum scram insertion time of the control rods shall be demonstrated through measurement and, during single control rod scram time tests, the control rod drive pumps shall be isolated from the accumulators:

1. For all control rods prior to THERMAL POWER exceeding 40% power with reactor coolant pressure greater than 800 psig, following core alterations or after a reactor shutdown that is greater than 120 days.

2. For specifically affected individual control rods following maintenance on or modification to the control rod or control rod drive system which could affect the scram insertion time of those specific control rods in accordance with either "a" or "b" as follows:

• a.1 Specifically affected individual control rods shall be scram time tested with the reactor depressurized and the scram insertion time from the fully withdrawn position to 90% insertion shall not exceed 2.2 seconds, and a.2 Specifically affected individual control rods shall be scram time tested at greater than 800 psig reactor coolant pressure prior to exceeding 40% power.

b. Specifically affected individual control rods shall be scram time tested at greater than 800 psig reactor coolant pressure.

3. At the frequency specified in the Surveillance Frequency Control Program, for at least 20 control rods, on a rotating basis, with reactor coolant pressure greater than 800 psig.

0. Each withdrawn control rod shall be exercised at the frequency specified in the Surveillance Frequency Control Program. This test shall be performed within 24 hours in the event power operation is continuing with two or more inoperable control rods or in the event power operation is continuing with one fully or partially withdrawn rod which cannot be moved and for which control rod drive mechanism damage has not been ruled out. The surveillance need not be completed within 24 hours if the number of inoperable rods has been reduced to less than two and if it has been demonstrated that control rod drive mechanism collet housing failure is not the cause of an immovable control rod.

OYSTER CREEK 4.2-1 Amendment No: 178, 198, 249,268,275,276

E. Surveillance of the standby liquid control system shall be as follows:

1. Pump operability Note 1

2. Boron concentration Note 1 determination

3. Functional test Note 1

4. Solution volume and Note 1 temperature check

5. Solution Boron-10 Note 1. Enrichment analyses shall Enrichment be received no later than 30 days after sampling. If not received within 30 days, notify NRC (within 7 days) of plans to obtain test results.

Note 1: Surveillance Frequencies are specified in the Surveillance Frequency Control Program unless otherwise noted above. F. At specific power operation conditions, the actual control rod configuration will be compared with the expected configuration based upon appropriately corrected past data. This comparison shall be made every equivalent full power month. The initial rod inventory measurement performed with equilibrium conditions are established after a refueling or major core alteration will be used as base data for reactivity monitoring during subsequent power operation throughout the fuel cycle. G. The scram discharge volume drain and vent valv~s shall be verified open at the frequency specified in the Surveillance Frequency Control Program, except in shutdown mode*, and shall be cycled at least one complete cycle of full travel at the frequency specified in the Surveillance Frequency Control Program. H. All withdrawn control rods shall be determined OPERABLE by demonstrating the scram discharge volume drain and vent valves OPERABLE. This will be done at the frequency specified in the Surveillance Frequency Control Program by placing the mode switch in shutdown and by verifying that:

a. The drain and vent valves close within 30 seconds after receipt of a signal for control rods to scram, and

b. The scram signal can be reset and the drain and vent valves open when the scram discharge volume trip is bypassed.

• These valves may be closed intermittently for testing under administrative control .
• OYSTER CREEK 4.2-2 Corrected: 12/24/.84 Amendment No.: 64, 74, 76,124,141,169, 172, 178, 276 Change:25

BASIS: Adequate SOM must be demonstrated to ensure that the reactor can be made subcritical from any initial operating condition. Adequate SOM is demonstrated by testing before or during the first startup after fuel movement, control rod replacement, or shuffling within the reactor pressure vessel. Control rod replacement refers to the decoupling and removal of a control rod from a core location, and subsequent replacement with a new control rod or a control rod from another core location. Since core reactivity will vary during the cycle as a function of fuel depletion and poison burnup, the beginning of cycle (BOC) test must also account for changes in core reactivity during the cycle. Therefore, to obtain the SOM, the initial measured value must be increased by an adder, "R", which is the difference between the calculated value of maximum core reactivity during the operating cycle and the calculated BOC core reactivity. If the value of R is negative (that is, BOC is the most reactive point in the cycle), no correction to the BOC measured value is required. The SOM may be demonstrated during an in sequence control rod withdrawal, in which the highest worth control rod is analytically determined, or during local criticals. Local critical tests require the withdrawal of out of sequence control rods. The frequency of 4 hours after reaching criticality is allowed to provide a reasonable amount of time to perform the required calculations and have appropriate verification .

• During REFUEL MODE, adequate SOM is required to ensure that the reactor does not reach criticality during core alterations. An evaluation of each in vessel fuel movement during fuel loading (including shuffling fuel within the core) shall be performed to ensure adequate SOM is maintained during refueling. This evaluation can be a bounding analyses that demonstrate adequate SOM for the most reactive configurations during the refueling may be performed to demonstrate acceptability of the entire fuel movement sequence. For the SOM demonstrations that rely solely on calculation, additional margin must be added to the SOM limit of 0.38% delta k/k to account for uncertainties in the calculation.

The control rod drive housing support system 12l is not subject to deterioration during operation. However, reassembly must be assured following a partial or complete removal. The scram insertion times for all control rods 13 l will be determined at the time of each refueling outage. The scram times generated at each refueling outage when compared to scram times previously recorded gives a measurement of the functional effects of deterioration for each control rod drive. Scram time testing with the reactor depressurized is adequate to ensure that the control rod will perform its intended scram function during startup of the plant until scram time testing above 800 psig reactor coolant pressure is performed prior to exceeding 40% power. OYSTER CREEK 4.2-3 Amendment No.: 75, 124, 178, 249

• The control rod exercise test at the ,frequency specified in the Surveillance Frequency Control Program serves as a periodic check against deterioration of the control rod system. The Surveillance Frequency is controlled under the Surveillance Frequency Control Program. The requirement to exercise the control rods within 24 hours of a condition with two or more control rods which are valved out of service or one fully or partially withdrawn control rod which can not be moved provides assurance of the reliability of the remaining control rods.

Pump operability, boron concentration, solution temperature and volume 4 of standby liquid control system< > are checked at the frequency specified in the Surveillance Frequency Control Program. Experience with similar systems has indicated that the test frequencies are adequate. The only practical time to functionally test the liquid control system is during a refueling outage. The functional test includes the firing of explosive charges to open the shear plug valves and the pumping of demineralized water into the reactor to assure operability of the system downstream of the pumps. The test also includes recirculation of liquid control solution to and from the solution tanks. Pump operability is demonstrated on a more frequent basis. This test consists of recirculation of demineralized water to a test tank. A continuity check of the firing circuit on the shear plug valves is provided by pilot lights in the control room. Tank level and temperature alarms are provided to alert the operator to off-normal conditions . Figure 3.2.1 was revised to reflect the minimum and maximum weight percent of sodium pentaborate solution, and the minimum atom percent of 8-10 to meet 10 CFR 50.62(c)(4). Since the weight percent of sodium pentaborate can change with water makeup or water evaporation, frequent surveillances are performed on the solution concentration, volume and temperature. The sodium pentaborate is enriched with 8-10 at the chemical vendor's facility to meet the minimum atom percent. Preshipment samples of batches are analyzed for 8-1 O enrichment and verified by an independent laboratory prior to shipment to Oyster Creek. Since the 8-1 O enrichment will not change while in storage or in the SLCS tank, the surveillance for 8-1 O enrichment is performed at the frequency specified in the Surveillance Frequency Control Program. An additional requirement has been added to evaluate the solution's capability to meet the original design shutdown criteria whenever the 8oron-1 O enrichment requirement is not met. The functional test and other surveillance on components, along with the monitoring instrumentation, gives a high reliability for standby liquid control system operability.

• OYSTER CREEK 4.2-4 Amendment No.: 75,124,169,172,178,276, 276

References (1) FDSAR, Volume II, Figure 111-5-11 (2) FDSAR, Volume I, Section Vl-3 (3) FDSAR, Volume I, Section 111-5 and Volume II, Appendix B (4) FDSAR, Volume I, Section Vl-4 (5) TSTF/CLIIP-475, Revision 1, Published in Federal Register Notice 72FR63935, dated Nomvember 13, 2007

• OYSTER CREEK 4.2-5 Amendment No. 275

4.3 REACTOR COOLANT

• Applicability: Applies to the surveillance requirements for the reactor coolant system.

Objective: To determine the condition of the reactor coolant system and the operation of the satety devices related to it. Specification: A. Materials surveillance specimens and neutron flux monitors shall be installed in the reactor vessel adjacent to the wall at the midplane of the active core. Specimens and monitors shall be periodically removed, tested, and evaluated to determine the effects of neutron fluence on the fracture toughness of the vessel shell materials. Pressure and temperature .curves are contained in the Pressure and Temperature Limits Report (PTLR). B. lnservice inspection of ASME Code Class 1, Class 2 and Class 3 systems and components shall be performed in accordance with Section XI of the ASME Boiler and Pressure Vessel Code and applicable Addenda as required by 10 CFR, Section 50.55a, except where specific written relief has been granted by the NRC pursuant to 10 CFR, Section 50.55a. C.

• lnservice testing of ASME Code Class 1, Class 2 and Class 3 pumps and valves shall be performed in accordance with the ASME Code for Operation and Maintenance of Nuclear Power Plants (ASME OM Code) and applicable Addenda as required by 1o CFR, Section 50.55a, except where specific written relief has been granted by the NRC pursuant to 10 CFR, Section 50.55a .

D. A visual examination for leaks shall be made with the reactor coolant system at pressure during each scheduled refueling outage or after major repairs have been made to the reactor coolant system in accordance with Article 5000, Section XI. The requirements of specification 3.3.A shall be met during the test. E. Each replacement safety valve or valve that has been repaired shall be tested in accordance with Specification C above. Setpoints shall be as follows: Number of Valves Set Points (psig) 4 1212 +/- 36 5 1221 +/- 36 F. A sample of reactor coolant shali be analyzed at the frequency specified in the Surveillance Frequency Control Program for the purpose of determining the content of chloride ion and to check the conductivity .

• OYSTER CREEK 4.3-1 Amendment No.: 82, QO, 120, 160, 161, 164, 188, 196, 261, 268, 269, 276
• G. Primary Coolant System Pressure Isolation Valves Specification:
• 1. Periodic leakage testing(al on each valve listed in Table 4.3.1 shall be accomplished prior to exceeding 600 psig reactor pressure every time the plant is placed in the cold shutdown condition for refueling, each time the plant is placed in a cold shutdown condition for 72 hours if testing has not been accomplished in the preceding 9 months, whenever the valve is moved whether by manual actuation or due to flow conditions, and after returning the valve to service after maintenance, repair or replacement work is performed.

H. Reactor Coolant System Leakage

1. Unidentified leakage rate shall be calculated at the frequency specified in the Surveillance Frequency Control Program.

2. Total leakage rate (identified and unidentified) shall be calculated at the frequency specified in the Surveillance Frequency Control Program.

3. A CHANNEL CALIBRATION of the primary containment sump flow integrator and the primary containment equipment drain tank flow integrator shall be conducted at the frequency specified in the

                                    .Surveillance Frequency Control Program .

• Bases:

I. An inservice inspection program for piping identified in NRC Generic Letter 88-01 shall be performed in accordance with the NRG staff positions on schedule, methods, personnel, and sample expansion included in the generic letter or in accordance with alternate measures approved by the NRC staff. Data is available relating neutron fluence (E>1.0MeV) and the change in the Reference Nil-Ductility Transition Temperature (RTNoT). Pressure and temperature curves are contained in the Pressure and Temperature Limits Report (PTLR). The inspection program will reveal problem areas should they occur, before a leak develops. In addition, extensive visual inspection for leaks will be made on critical systems. Oyster Creek was designed and constructed prior to (a) To satisfy ALARA requirements, leakage may be measured indirectly (as from the performance of pressure indicators) if accomplished in accordance with approved procedures and supported by computations showing that the method is capable of demonstrating valve compliance with the leakage criteria.

• NRC Order dated April 20, 1981.
• OYSTER CREEK 4.3-2 Amendment No.: 97,118,120,161,164,188, 193, 263, 269, 276
• the existence of ASME Section XI. For this reason, the degree of access required by ASME Section XI is not generally available and will be addressed as "requests for relief' in accordance with 10 CFR 50.55a(g).

Experience in safety valve operation shows testing in accordance with the ASME Code is adequate to detect failures or deterioration. The as-found setpoint tolerance is specified in the ASME OM Code as the owner-defined tolerance or +/- 3% of valve nameplate set pressure. An analysis has been performed which shows that with all safety valves set 36 psig higher, the safety limit of 1375 psig is not exceeded. Conductivity instruments continuously monitor the reactor coolant. Experience indicates that a periodic check of the conductivity instrumentation at the frequency specified in the Surveillance Frequency Control Program is adequate to ensure accurate readings. The reactor water sample will also be used to determine the chloride ion content to assure that the limits of 3.3.E are not exceeded. The chloride ion content will not change rapidly over a period of several days; therefore, the sampling frequency is adequate .

• OYSTER CREEK 4.3-3 Amendment No.: 82, 90,261,268,276
• TABLE 4.3.1 PRIMARY COOLANT SYSTEM PRESSURE ISOLATION VALVES M-aximum (a)

System Valve No. Allowable Leakage Core Spray System l NZ02A 5.0 GPM NZ02C 5.0 GPM Core Spray System 2 NZ028 5.0 GPM NZ020 S.O GPM Footnote: (a) l. Leakage rates less than or equal to 1.0 gpm are considered acceptable.

2. Leakage rates greater than 1.0 gpm but less than or equal to 5.0 gpm are considered acceptable if the latest measured rate has not exceeded the rate determined by the previous tes~ by an amount that.reduces the margin. between measured leakage rate and the maximum permissible rate of 5.0 gpm by 50% or greater. * * *

3. Leakage rates greater than 1.0 gpm but less than or equal to 5.0 gpm are considered unacceptable if the latest measured rate exceeded the rate determined by the previous test by an amount that reduces the margin bet.ween measured lea_kage rate and the max~mum permissible rate of 5.0 gpm by 50% or greater.

4. Leakage rates greater than 5.0 gpm are considered unacceptable.

5. Test differential pressure shall not be less than 150 psid .

NRC Order _dated April 20, 1981 OYSTER CREEK 4.3-4 Amendment No.: 82

4.4 EMERGENCY COOLING

• Applicability:

Objective: Applies to surveillance requirements for the emergency cooling systems. To verify the operability of the emergency* cooling systems. Specification: Surveillance of the emergency cooling systems shall be performed as follows: . Item Fregu*ency A. Core Spray System

1. Pump Operability Note 1. Also after major maintenance and prior to startup following a refueling outage.

2. Motor operated valve Note 1 operability

3. Automatic actuation test Note 1

4. Pump compartment water- Note 1 and after each entry.

tight doors closed '

5. Core spray header aP instrumentation CHANNEL CHECK Note 1 CHANNEL CALIBRATION Note 1 CHANNEL FUNCTIONAL TEST Note 1 B. Automatic Degressurization

1. Verify each relief valve actuator Note 1 strokes when manually actuated

2. Automatic actuation test Note 1 C. Containment Cooling System

1. Pump Operability Note 1. Also after major maintenance and prior to startup following a refueling outage .

• OYSTER CREEK 4.4-1 Amendment No. 109,144,193,210,260, 26a, 276

Item Frequency

• C . Containment Cooling System

2. Motor-operated valve operability

3. Pump compartment water-tight doors closed Note 1 Note 1 and after each entry.

D. Emergency Service Water System

1. Pump Operability Note 1. Also after major maintenance and prior to startup following a refueling outage.

E. Control Rod Drive Hydraulic System

1. Pump Operability Note 1. Also after major maintenance and prior to startup following a refueling outage.

F. Fire Protection System

1. Pump Operability Note 1. Also after major maintenance and prior to startup following a refueling outage.

2. Isolation valve operability Note 1. Also after major maintenance and prior to startup following a refueling outage.

Note. 1: Surveillance Frequencies are specified in the Surveillance Frequency Control Program unless otherwise noted . Bases: It is during major maintenance or repair that a system's design intent may be violated accidentally. Therefore, a functional test is required after every major maintenance operation. During an extended outage, such as a refueling outage, major repair and maintenance may be performed on many systems. To be sure that these repairs on other systems do not encroach unintentionally on critical standby cooling systems, they should be given a functional test prior to startup. Motor operated pumps, valves and other active devices that are normally on standby should be exercised periodically to make sure that they are free to operate. Motors on pumps should operate long enough to approach equilibrium temperature to ensure there is no overheat problem. Whenever practical, valves should be stroked full length to ensure that nothing impedes their motion. Testing of components per OC lnservice Testing Program in accordance with the ASME Code provides assurances of the availability of the system. The Control Rod Hydraulic pumps and Fire Protection System pumps are not part of the lnservice Test Program per the ASME Code and will continue to be tested for operability at the frequency specified in the Surveillance Frequency Control Program .

• OYSTER CREEK 4.4-2 Amendment No.: 109,160,210,268, 276

t The operability of the Electromatic Relief Valves (EMRVs) is verified by a stroke test of its relief valve actuator as specified in TS 4.4.8.1, and by the lnservice Testing Program (1ST) . The EMRV actuator stroke test is performed with the pilot valve actuator mounted in its normal position. The test checks the manual actuation electrical circuitry, solenoid actuator, pilot operating lever, and pilot valve assembly. This verifies pilot valve movement. However, since this test is performed prior to establishing the reactor pressure needed to overcome the main valve closure spring force, the main valve will not stroke during the test, thereby minimizing the. potential for valve leakage.

 .The control rod drive hydraulic system is normally in operation, thereby providing continuous indication of system operability. A check of flow rate and operability can be made during normal operation .

• OYSTER CREEK 4A-3 Amendment No. 240, 260

4.5 CONTAINMENT SYSTEM Applicability. Applies to containment system leakage rate, continuous leak rate monitor, functional testing of valves, standby gas treatment system operability, inening surveillance, drywell coating surveillance, instrument line flow check valve surveillance, suppression chamber surveillance, and snubber surveillance. Objectives: To verify operability of containment systems, and that leakage from the containment system is maintained within specified* values, as outlined in Appendix J of 10 CFR 50. Specificatiort A.* Primary Containment Leakage Testing A Primary Containment Leakage Rate Testing Program shall be established to implement 10 <:;:FR 50, Appendix J, Option B, as modified by approved exemptions. This program shall be in accordance with the guidelines contained in Regulatory Guide 1.163, "Performance Based Containment Leak Test Program," dated September 1995, as modified by the following exception:

• 1. The first Type A test required by this program will be performed during refueling outage 18R.

B. Type A Primary Containment Integrated Leak Rate Test (PCILRn. PCILRT shall be performed in accordance with the Primary Containment Leakage Rate Testing Program. C. Type Band Type C Local Leak Rate Tests (LLRn

1. LLRT shall be performed in accordance with the Primary Containment Leakage Rate Testing Program.

2. Toe Drywell Airlock, Drywell Airlock electrical penetration, and Drywell Airlock barrel seal shall be local leak rate tested in accordance with the Primary Containment Leakage Rate Testing Program.

a. When containment integrity is required, the airlock must be tested at-10 psig within 7 days after each containment access. If the airlock is opened more frequently than once every 7 days, it may be tested at 10 psig once per 30 days during this time period.

• OYSTERCREEK 4.5-1 AmendmentNo.: 132, I8e , 200

b. If the airlock is opened during a period when Primary .

Containment is not required, it need not be tested while

• D.
• Primary Containment is not required, but must be tested at Pa prior to returning the reactor to an operating mode requiring PRIMARY CONTAINMENT INTEGRITY.

Primary Containment Leakage Rates shall be limited to:

1. The maximum allowable Primary Containment leakage rate is 1.0 La. The. maximum allowable Primary Containment leakage rate to allow for plant startup following a type A test is 0.75 La. The leakage rate acceptance criteria for the Primary Containment Leakage Rate Testing Program for Type Band Type C tests is S0.60 La at Pa, except as stated in Specification 4.5.D.2.

2. Verify leakage rate through each MSIV is s 11.9 scfh when tested at~ 20 psig.

3. The leakage rate acceptance criteria for the drywell airlock shall be s 0.05 La when measured or adjusted to Pa*

E. Continuous Leak Rate Monitor

1. When the primary containment is inerted, the containment shall be continuously monitored for gross leakage by review of the inerting system makeup requirements .

• F.

2. This monitoring system may be taken out of service for the purpose of maintenance or testing but shall be returned to service as soon as practical.

Functional Test of Valves

1. All automatic primary containment isolation valves shall be tested for automatic closure by an isolation signal at the frequency specified in the Surveillance Frequency Control Program and the isolation time determined to be within its limit. The following valves are required to close in the time specified below:

Main steam line isolation valves:_ :.: 3 seconds and s 1O seconds

2. Each automatic primary containment isolation valve shall be demonstrated OPERABLE prior to returning the valve to service after maintenance, repair or replacement work is performed on

• OYSTER CREEK 4.5-2 Amendment No.: 132, 188,196,250, 276

the valve or its associated actuator by cycling the valve through at least one complete cycle of full travel and verifying the isolation time limit is met. Following maintenance, repair or replacement work on the control or power circuit for the valves, the affected component shall be tested to assure it will perform its intended function in the circuit.

3. During each COLD SHUTDOWN, each main steam isolation valve shall be closed and its closure time verified to be within the limits of Specification 4.5.F.1 above unless this test has been performed within the last 92 days.

4. Reactor Building to Suppression Chamber Vacuum Breakers

a. The reactor building to suppression chamber vacuum breakers and associated instrumentation, including setpoint, shall be checked for proper operation at the frequency specified in the Surveillance Frequency Control Program.

b. At the frequency specified in the Surveillance Frequency Control Program, each vacuum breaker shall be tested to determine that the force required to open the vacuum breaker from closed to fully open does not exceed the force specified in Specification 3.5.A.4.a. The air-operated vacuum breaker instrumentation shall be calibrated at the frequency specified in the Surveillance Frequency Control Program.

5. Pressure Suppression Chamber - Drywell Vacuum Breakers

a. Periodic OPERABILITY Tests At the frequency specified in the Surveillance Frequency Control Program and following any release of energy which would tend to increase pressure to the suppression chamber, each OPERABLE suppression chamber- drywell vacuum breaker shall be exercised. Operation of position switches, indicators and alarms shall be verified at the frequency specified in the Surveillance Frequency Control Program by operation of each OPERABLE vacuum breaker.

                . b. The following tests, with the exception of b(4), are performed at the frequency specified in the Surveillance Frequency Control Program.

(1) All suppression chamber - drywell vacuum breakers shall be tested to determine the force required to open each valve from fully closed to fully open. (2) The suppression chamber - drywell vacuum breaker position indication and alarm systems shall be calibrated and functionally tested .

• OYSTER CREEK 4.5-3 Amendment No.: 144, 186,196,210,221,276

• (3)

(4) At least four of the suppression chamber - drywell vacuum breakers shall be inspected. If deficiencies are found, all vacuum breakers shall be inspected and deficiencies corrected such that Specification 3.5.A.5.a can be met. A drywell to suppression chamber leak rate test shall be performed once every 24 months to demonstrate that with an initial differential pressure of not less than 1.0 psi, the differential pressure decay rate shall not exceed the equivalent of air flow through a 2-inch orifice. G. Reactor Building

1. Secondary containment capability tests shall be conducted after isolating the reactor building and placing either Standby Gas Treatment System filter train in operation.

2. The tests shall be performed at the frequency specified in the Surveillance Frequency Control Program and shall demonstrate the capability to maintain a 1/4 inch of water vacuum under calm wind conditions with a Standby Gas Treatment System Filter train flow rate of not more than 4000 cfm.

3. When in COLD SHUTDOWN CONDITION or REFUEL MODE, with the trunnion room door open after the secondary containment boundary has been moved to the penetrations inside the trunnion room and the trunnion room is isolated from the secondary containment in support of outage activities, Standby Gas Treatment System testing shall be performed to demonstrate the capability to maintain a 1/4 inch of water vacuum under calm wind conditions with a Standby Gas Treatment System Filter train flow rate of not more than 4000 cfm.

4. A secondary containment capability test shall be conducted at each refueling outage prior to refueling.

5. The results of the secondary containment capability tests shall be in the subject of a summary technical report which can be included in the reports specified in Section 6.

H. Standby Gas Treatment System

1. The capability of each Standby Gas Treatment System circuit shall be demonstrated by:

a. At the frequency specified in the Surveillance Frequency Control Program, after every 720 hours of operation, and following significant painting, fire, or chemical release in the reactor building during operation of the Standby Gas Treatment System by verifying that:

(1) The charcoal absorbers remove .!:99% of a halogenated hydrocarbon refrigerant test gas and the HEPA filters remove

!:99% of the DOP in a cold DOP test when tested in accordance with ANSI N510-1975.

OYSTER CREEK 4.5-4 Amendment No.: 144,186,193,219,276, 277

(2) Results of laboratory carbon sample analysis show i:!95% radioactive methyl iodide removal efficiency when tested in accordance with ASTM D 3803-1989 (30°C, 95% relative humidity, at least 45.72 feet per minute charcoal bed face velocity).

b. At the frequency specified in the Surveillance Frequency Control Program by demonstrating:

(1) That the pressure drop across a HEPA filter is equal to or less than the maximum allowable pressure drop indicated in Figure 4.5.1. (2) The inlet heater is capable of at least 10.9 KW input. (3) Operation with a total flow within 10% of design flow.

c. At the frequency specified in the Surveillance Frequency Control Program by operating each circuit for a minimum of 15 continuous minutes.

d. Anytime the HEPA filter bank or the charcoal absorbers have been partially or completely replaced, the test per 4.5.H.1.a (as applicable}

will be performed prior to returning the system to OPERABLE STATUS.

e. Automatic initiation of each circuit at the frequency specified in the Surveillance Frequency Control Progam.

I. lnerting Surveillance When an inert atmosphere is required in the primary containment, the oxygen concentration in the primary containment shall be checked at the frequency specified in the Surveillance Frequency Control Program. J. Orywell Coating Surveillance Carbon steel test panels coated with Firebar D shall be placed inside the drywall near the reactor core midplane level. They shall be removed for visual observation and weight loss measurements during the first, second, fourth and eighth refueling outages. K. Instrument Line Flow Check Valves Surveillance The capability of a representative sample of instrument line flow check valves to isolate shall be tested at the frequency specified in the Surveillance Frequency Control Program. In addition, each time an instrument line is returned to service after any condition which could have produced a pressure flow disturbance in that line, the open position of the flow check valve in that line shall be verified. Such conditions include: OYSTER CREEK 4.5-5 Amendment No.: 132,186,216,219,276, COFF8Gted by letteF ef a/18/02, 282

Leakage at instrument fittings and valves Venting an unisolated instrument or instrument line Flushing or draining an instrument Installation of a new instrument or instrument fine L. Suppression Chamber Surveillance

1. At the frequency specified in the Surveillance Frequency Control Program, the suppression chamber water level and temperature and pressure suppression system pressure shall be checked.

2. A visual inspection of the suppression chamber interior, including water line regions, shall be made at the frequency specified in the Surveillance Frequency Control Program.

3. Whenever heat from relief valve operation is being added to the suppression pool, the pool temperature shall be continually monitored and also observed until the heat addition is terminated.

4. Whenever operation of a relief valve is indicated and the suppression pool temperature reaches 160°F or above while the reactor primary coolant system pressure is greater than 180 psig, an external visual examination of the suppression chamber shall be made before resuming normal power operation.

M. Shock Suppressors (Snubbers) As used in this specification, "type of snubber" shall mean snubbers of the same design and manufacturer, irrespective of capacity .

• 1. Each snubber shall be demonstrated OPERABLE by performance of the Snubber Inspection Program.
• OYSTER CREEK 4.5-6 Amendment No.: 82,4-86,24e,~. 286
• THIS PAGE INTENTIONALLY LEFT BLANK
• OYSTER CREEK 4.5-7 Amendment No.: ~ . 48&, 286
• THIS PAGE INTENTIONALLY LEFT BLANK
• OYSTER CREEK 4.5-8 Amendment No.: 4-32-,486,2-70, 286

N. Secondary Containment Isolation Valves

1. Each secondary containment isolation valve shall be demonstrated operable prior to returning the valve to service a'fter maintenance, repair or replacement work is performed on the valve or its associated actuator by cycling the valve through at least one complete cycle of full travel. Following maintenance, repair or replacement work on the control or power circuit for the valves, the affected component shall be tested to assure it will perform its intended function in the circuit.

• 2. At the frequency specified in the Surveillance Frequency Control Program, all valves shall be tested for automatic closure by an isolation signal.
• OYSTER CREEK 4.5-9 Amendment No.: 168,186,219,2+&, 286

4.5 CONTAINMENT SYSTEM Bases: In the event of a loss-of-coolant accident, the peak drywall pressure would be 38 psig which

• would rapidly reduce to 20 psig within 100 seconds following the pipe break. The total time the drywall pressure would be above 35 psig is calculated to be about 7 seconds. Following the pipe break, absorption chamber pressure rises to 20 psig within 8 seconds, equalizes with drywall pressure at 25 psig within 60 seconds and thereafter rapidly decays with the drywall pressure decay <1>

The design pressures of the drywall and absorption chamber are 62 psig and 35 psig, respectively.<2> The original calculated 38 psig peak drywall pressure was subsequently reconfirmed.< 3> A 15% margin was applied to revise the drywall design pressure to 44 psig. The design leak rate is 0.5%/day at a pressure of 35 psig. As pointed out above, the pressure response of the drywall and absorption chamber following an accident would be the same after about 60 seconds. Based on the calculated primary containment pressure response discussed above and the absorption chamber design pressure, primary containment pre-operational test pressures were chosen. Also, based on the primary containment pressure response and the fact that the drywall and absorption chamber function as a unit, the primary containment will be tested as a unit rat.her than testing the individual components separately. The design basis loss-of-coolant accident was evaluated at the primary containment maximum allowable accident leak rate of 1.0%/day at 35 psig. The analysis showed that with this leak rate and a standby gas treatment system filter efficiency of 90 percent for elemental and organic iodines, 90% for particulates, and assuming the fission product release fractions stated in Regulatory Guide 1.183, the maximum dose is 2.62 rem TEDE at the site boundary considering fumigation conditions over an exposure duration of two hours. The resultant doses that would

   *occur for the duration of the accident at the low population distance of 2 miles are lower than those stated due to the variability of meteorological conditions that would be expected to occur over a 30-day period. Thus, the doses reported are the maximum that would be expected in the unlikely event of a design basis loss-of-coolant accident. These doses are also based on the assumption of no holdup in the secondary containment resulting in a direct release of fission product from the primary containment through the filters and stack to the environs. Therefore, the specified primary containment leak rate and filter efficiency are conservative and provide margin between expected offsite doses and 10 CFR 50.67 guideline limits. The maximum dose to control room operators over the 30-day accident period is 4.32 rem TEDE.

Although the dose calculations suggest that the allowable test leak*rate could be allowed to increase significantly before the guideline dose limit given in 10 CFR 50.67 would be exceeded, establishing the limit of 1.0%/day provides an adequate margin of safety to assure the health and safety of the general public. It is further considered that the allowable leak rate should not deviate significantly from the containment design value to take advantage of the design leak-tightness capability of the structure over its service lifetime. Additional margin to maintain the containment in the "as-built" condition is achieved by establishing the allowable operational leak rate. The operational limit is derived by multiplying the allowable test leak rate by 0.75 thereby providing a 25% margin to allow for leakage deterioration which may occur during the period between leak rate tests.

• OYSTER CREEK 4.5-10 Amendment No.: 4ea,48e,~,2e2.

ECR 15-00054 _J

A Primary Containment Leakage Rate Testing Program has been established to implement the requirements of 10 CFR 50, Appendix J, Option B, as modified by approved exemptions.

• Guidance for implementation of Option B is contained in NRC Regulatory Guide 1.163, "Performance Based Containment Leak Test Program," Revision 0, dated September 1995.

Additional guidance for NRC Regulatory Guide 1.163 is contained in Nuclear Energy Institute (NEI) 94-01, "Industry Guideline for Implementing Performance Based Option of 10 CFR 50, Appendix J," Revision 0, dated July 26, 1995, and ANSI/ANS 56.8-1994, "Containment System Leakage Testing Requirements." The Primary Containment Leakage Rate Testing Program conforms with this guidance as modified by approved exemptions. The maximum allowable leakage rate for the primary containment (La) is 1.0 percent by weight of the containment air per 24 hours at the design basis LOCA maximum peak containment pressure (Pa). As discussed below, Pa for the purpose of containment leak rate testing is 35 psig. The penetration and air purge piping leakage test frequency, along with the containment leak rate tests, is adequate to allow detection of leakage trends. Whenever a double gasketed penetration (primary containment head equipment hatches and the absorption chamber access hatch) is broken and remade, the space between the gaskets is pressurized to determine that the seals are performing properly. The test pressure of 35 psig is consistent with the accident analyses and the maximum preoperational leak rate test pressure. Monitoring the nitrogen makeup requirements of the inerting system provides a method of observing leak rate trends and would detect gross leaks in a very short time. This equipment must be periodically removed from service for test and maintenance, but this out-of-service time be kept to a practical minimum .

• Automatic primary containment isolation valves are provided to maintain PRIMARY CONTAINMENT INTEGRITY following the design basis loss-of-coolant accident. Closure times for the automatic primary containment isolation valves are not critical because it is on the order of minutes before significant fission product release to the containment atmosphere for the design basis loss of coolant accident. These valves are highly reliable, see infrequent service and most of them are normally in the closed position. Therefore, testing at the frequency specified in the Surveillance Frequency Control Program is sufficient.

Large lines connecting to the reactor coolant system, whose failure could result in uncovering the reactor core, are supplied with automatic isolation valves (except containment cooling). Closure times restrict coolant loss from the circumferential rupture of any of these lines outside primary containment to less than that for a main steam line break (the design basis accident for outside containment line breaks). The minimum time for main steam isolation valve (MSIV) closure of 3 seconds is based on the transient analysis that shows the pressure peak 76 psig below the lowest safety valve setting. The maximum time for MSIV closure of 1O seconds is based on the value assumed for the main steam line break dose calculations and restricts coolant loss to prevent uncovering the reactor core. Per the ASME Code, the full closure test ofthe MSIVs during COLD SHUTDOWNs will ensure OPERABILITY and provide assurance that the valves maintain the required closing time. The provision for a minimum of92 days between the tests ensures that full closure testing is not too frequent. The MSIVs are partially stroked periodically as part of reactor protection system instrument surveillance testing .

• OYSTER CREEK 4.5-11 Amendment No.: 132,186,196,219,221,250, 288,276

Surveillance of the suppression chamber-reactor building vacuum breaker.consists of

• OPERABILITY checks and leakage tests (conducted as part of the containment leak-tightness tests). These vacuum breakers are normally .in the closed position and open only during tests or an accident condition. The Surveillance Frequencies are controlled under the Surveillance Frequency Control Program.

The 14 suppression chamber-drywell vacuum relief valves are designed to open to the full open position (the position that curtain area is equivalent to valve bore) with a force equivalent to a 0.5 psi differential acting on the suppression chamber face of the valve disk. This opening specification assures that the design limit of 2.0 psid between the drywall and external environment is not exceeded. At the frequency specified in the Surveillance Frequency Control Program, each valve is tested to assure that it will open in response to a force less than that specified. Also, it is inspected to assure that it closes freely and operates properly. The containment design has been examined to establish the allowable bypass area between the drywell and suppression chamber as 10.5 in2 (expressed as vacuum breaker open area). This is equivalent to one vacuum breaker disk off its seat 0.371 inch; this length corresponds to an angular displacement of 1.25°. A conservative allowance of 0.1 O inch has been selected as the maximum permissible valve opening. Valve .closure within this limit may be determined by light indication from two independent position detection and indication systems. Either system provides a control room alarm for a non-seated valve. At the end of each refueling cycle, a leak rate test shall be performed to verify that significant leakage flow paths do not exist between the drywell and suppression chamber. The drywell pressure will be increased by at least 1 psi with respect to the suppression chamber pressure. The pressure transient (if any) will be monitored with a sensitive pressure gauge. If the drywell pressure cannot be increased by 1 psi over the suppression chamber pressure it would be because a significant leakage path exists: in this event, the leakage source will be identified and eliminated before POWER OPERATION is resumed. If the drywell pressure can be increased by 1 psi over the suppression chamber, the rate of change of the suppression chamber pressure must not exceed a rate equivalent to the rate of air flow from the drywell to the suppression chamber through a 2-inch orifice. In the event the rate of change of pressure exceeds this value, then the source of leakage will be identified and eliminated before POWER OPERATION is resumed. The drywell suppression chamber vacuum breakers are exercised at the frequency specified in the Surveillance Frequency Control Program and immediately following termination of discharge of steam into the suppression chamber. This monitoring of valve operability is intended to assure that valve operability and position indication system performance does not degrade between refueling inspections. When a vacuum breaker valve is exercised through an opening-closing cycle, .the position indicating lights are designed to function as follows: Full Closed 2 Green - On (Closed to 0.10" open) 1 Red - Off Open 0.10" 2 Green - Off (0.1 O" open to full open) 2 Red -On 1* OYSTER CREEK 4.5-12 Amendment No. 128,186, 196,210,211,21 Q, 276 Correoted by letters of 8/18/02 and 4/6/02

At the frequency specified in the Surveillance Frequency Control Program, four suppression chamber-C:lrywell vacuum breakers will be inspected to assure components have not deteriorated . Since valve internals are designed for a 40-year lifetime, an inspection program which cycles through all valves in about 1110th of the design lifetime is extremely conservative. The alarm systems for the vacuum breakers will be calibrated at the frequency specified in the Surveillance Frequency Control Program. Initiating reactor building isolation and operation of the standby gas treatment system to maintain a 1/4 inch of water vacuum, tests the operation of the reactor building isolation valves, leakage tightness of the reactor building and performance of the standby gas treatment system. Checking the initiating sensors and associated trip channels demonstrates the capability for automatic actuation. Performing the reactor building in leakage test prior to refueling demonstrates secondary containment capability prior to extensive fuel handling operations associated with the outage. In addition, when the secondary containment boundary has been moved from the trunnion room door to the penetrations inside the trunnion room in support of outage-related activities, performing standby gas treatment system testing is necessary to ensure integrity of the relocated secondary containment boundary in the temporarily modified configuration. Verifying the efficiency and operation of charcoal filters at the frequecny specified in the Surveillance Frequency Control Program gives sufficient confidence of standby gas treatment system performance capability. Operation with the heaters on for a minimum of 15 continuous minutes at the frequency specified in the Surveillance Frequency Control Program demonstrates* OPERABILITY of the system. A charcoal filter efficiency of 99% for halogen removal is adequate. The in-place testing of charcoal filters is performed using halogenated hydrocarbon refrigerant which is injected into the system upstream of the charcoal filters. Measurement of the refrigerant concentration upstream and downstream of the charcoal filters is made using a gas chromatograph. The ratio of the inlet and outlet concentrations gives an overall indication of the leak tightness of the system. Although this is basically a leak test, since the filters have charcoal of known efficiency and holding capacity for elemental iodine and/or methyl iodide, the test also gives an indication of the relative efficiency of the installed system. The test procedure is an adaptation of test procedures developed at the Savannah River Laboratory which were described in the Ninth AEC Cleaning Conference.* High efficiency particulate filters are installed before and after the charcoal filters to minimize potential releases of particulates to the environment and to prevent clogging of the iodine filters. An efficiency of 99% is adequate to retain particulates that may be released to the reactor building following an accident. This will be demonstrated by testing with DOP at testing medium. The 95% methyl iodide removal efficiency is based on the formula in GL 99-02 for allowable penetration [(100% - 90% credited in DBA analysis) divided by a safety factor of 2]. If the allowable penetration is :s.5%, the required removal efficiency is ~95%. If laboratory tests for the adsorber material in one circuit of the Standby Gas Treatment System are unacceptable, all adsorber material in that circuit shall be replaced with adsorbent qualified according to Regulatory Guide 1.52. Any HEPA filters found defective shall be replaced with those qualified with Regulatory Position C.3.d of Regulatory Guide 1.52.

• D.R. Muhabier. "In Place Nondestructive Leak Test for Iodine Adsorbers." Proceedings of the Ninth AEC Air Cleaning Conference. USAEC Report CONF-660904, 1966
• OYSTER CREEK 4.5-13 Amendment No.: 186, 196, 219, 276, 277, 282

The "Snubber Inspection Program" manages the requirement for demonstrating snubber operability (examination, testing and serviGe life monitoring) as reflected in TS Section 6.25 thereby ensuring the TS remains consistent with the ISi program. The program for ISi testing of snubbers in accordance with ASME OM Code and the applicable addenda as required by 10 CFR 50.SSa(g) is required to include evaluation of supported components/ systems when snubbers are found to be inoperable .

• After the containment oxygen concentration has been reduced to meet the specification initially, the containment atmosphere is maintained above atmospheric pressure by the primary containment inerting system. This system supplies nitrogen makeup to the containment so that the very slight leakage from the containment is replaced by nitrogen, further reducing the oxygen concentration. In addition, the oxygen concentration is continuously recorded and high oxygen concentration is annunciated. Therefore, a periodic check of oxygen concentration is adequate.

This system also provides the capability for determining if there is gross leakage from the containment. The drywall exterior was coated with Firebar D prior to concrete pouring during construction. The Firebar D separated the drywall steel plate from the concrete. After installation, the drywall liner was heated and expanded to compress the Firebar D to supply a gap between the steel drywall and the concrete. The gap prevents contact of the drywell wall with the concrete which might cause excessive local stresses during drywell expansion in a loss-of-coolant accident. The surveillance program is being conducted to demonstrate that the Firebar D will maintain its integrity and not deteriorate throughout plant life. The surveillance frequency is adequate to detect any deterioration tendency of the material. <0>

• OYSTER CREEK 4.5-14 Amendment No.: ~.489.~.~. 286

The operability of the instrument line flow check valves are demonstrated to assure isolation capability for excess flow and to assure the operability of the instrument sensor when required. The representative sample consists of an approximately equal number of EFCV's such that each EFCV is tested at least every 1O years (nominal). In addition, the EFCVs in the sample are representative of the various plant configurations, models, sizes and operating environments. This ensures that any potential common problem with a specific type or application of EFCV is detected at the earliest possible time. The nominal 1O year interval is based on other performance-based testing programs, such as lnservice Testing (snubbers) and Option B to 10 CFR 50, Appendix J. EFCV test failures will be evaluated to determine if additional testing in that test interval is warranted to ensure overall reliability is maintained. Operating experience has demonstrated that these components are highly reliable and that failures to isolate are very infrequent. Therefore, testing of a representative sample was concluded to be acceptable from a reliability standpoint. (9> Because of the large volume and thermal capacity of the suppression pool, the volume and temperature normally changes very slowly and monitoring these parameters periodically is sufficient to establish any temperature trends. By requiring the suppression pool temperature to be continually monitored and also observed during periods of significant heat addition, the temperature trends will be closely followed so that appropriate action can be taken. The requirement for an external visual examination following any event where potentially high loadings could occur provides assurance that no significant damage was encountered. Particular attention should be focused on structural discontinuities in the vicinity of the relief valve discharge since these are expected to be the points of highest stress. References (1) Licensing Application, Amendment 32, Question 3 (2) FDSAR, Volume I, Section V-1.1 (3) GE-NE 770-07-1090, "Oyster Creek LOCA Drywell Pressure Response," February 1991 (4) Deleted (5) FDSAR, Volume I, Sections V-1.5 and V-1.6 (6) FDSAR, Volume I, Sections V-1.6 and Xlll-3.4 (7) FDSAR, Volume I, Section Xlll-2 (8) Licensing Application, Amendment 11, Question 111-18 (9) GE BWROG 821-00658-01, "Excess Flow Check Valve Testing Relaxation," dated November 1998

• OYSTER CREEK 4.5-15 Amendment No.: 165,186,216,219,276 Corrected by letter 3/18/-02, ECR QC 11-00473

• * *
• I Maximum Allowable Pressure Drop *(inches of water) for HEPA Filter I\) V1 0 I-'

                      *r.--~~~~~~~~~~~~-~~~~~----

0 llij fl 1111*,, ,o!,,i:;11,'li 1 ., .,  ;: ,II,;,: I ij: i:; ij,:,;T :::*;.;.. * - 1 1! I: :I,; I: i ,I111 I I I I '",II I ii ii! iI ,*11; 1,* : i i

                                                                                       *I,: , , I*,"            1*1 1'       I i;" :i .,,.   '. i i.::i i i;i 1'1' J jl: !!:! : : : : !:::

I' .. 11 1' I' ,.... *::*,* ;. 1' I . I' . I

I

                                         'I~,

I I : I !-1

j. ..I *:...

I I I

• I I

                                                                                                       *I  I ;

I I

                                                                                                                                .,   L'      I!: I f1 .. , , ' . I   I I I

: ~. I

                                                                                                                                                                  * * *

• I I...

                                                                                                                                                                                         ; I
             ,.. i!lil;*!,

iiiltlll ~11i! 1 i! l i! i ilj' iill ;,'" !1;! i:l'i*i *111  !!,i 1j\:i 1 11ll'f ii!l' i Iii! H!:j.): ..

0 Hii1i-U. I 111 Ii HI i q Ill 11 1 i 1 *I, ':r 1;*: 1 ;;:; 11 111,i I :1 1

j

::.

g. }! i,:;;11 !l, '.{ii 1'j,'llllillll/l l~i1 J ' I'll llil ,,iii' 11'ii 11ii,ji ;;<.: ~

1 1 11*, ~, ,*,:1,* 1'111: I

lli

• I' ; i nllliu.!!H k,1 111 I i l!UJ i,JI iii iii '"' 'i 1' " ' ' '

     ".I I-'

0

                      . :J1J Ii
                                      ~1f
                     ' ; I : HI \ , lj "

rut! ::l't*j;lill:'i 1 it*t ,11fI jilij*11*t: 1JJ i [j;;it;: iiH iJ'*1 µ,ii *mt j)]:J:J:[ !:;:; , 1 11 I' 111 I I .:ii :"r i !I! 1 i.,,, I: : 1 .m :.:; if!: : i: I j: ,,. i n.:.f ~-;~; :.::l_::: ..... .. ' .. .. I\)

: 1! , . n: ;: i , 1* i-t , , , 1* ,

• 1i., n: I i, 11 i ~ .;.i;; ; r: 1 r;.:1 J.:** i ,.

                                                                             '1 "'f ll'i,1 t'11'!. 111' 0                                                                                                                  j 0

n 0

                    .f i!:;I!::;
                        *1'* ., .. ;iii        u1* til-11., *t 1t~.                                                  1'   j    I    1 .* Ii *r !Hi I 1 IJI 11!1                   .... ,,:,.,
                                                                                                                                                                            ,,       n,- 1 1-rn    i;:!     H:il;:.:..:. . . .

i,*, ,1.i'" , iii' .u**.

                                                                                                                 'L
     ~                  f:Ti liTI f.!.l'      *111:, HI                                                                                                ,:1;I! ~,n 1111                  .] 1.Hj: r,*-,*:T1*1 ::::1.:

f" VI

     .......         i 1
                        ~u.l.;.!!,
                  .i. II,*Hi +Ii!I 11:TIInJ j.

i-! , l ' I Jl' ' I

• I . i I i

1 t!1 I* t ll ,.

                                                                                                                                                                                             .m . * .1 _... . .. * .
                                                                                                                                                                                        . :i1,        ... , ~~:

i-!r ,HF ...1:. ;***.:: :,, :*.: . 1'I i'I I ~ 'I"~lf' . 1* I 11  :~:r::* I I.Al i *rll! ,,lii IJ I it,l r~:  :!~: rt+l t:!.... '.... . *.. ' .

  °'          0 0

0

• I I I

:.,;,: . " ,*.,,,ijl' 11 1 1~* ,,*1*1*u

                                                                                                                *I I     11     N.IJJ ::,

r*J ., , i ~**u1** ~;~*,::::

!i{(i: -,In ,~ Jl~l!~~H '*, ~.t 'lill~~µ,~::}H~ ::::i::*.

u~:1:~iL!paJt

                    . ,, ... , ... ' .. ,,,., *I* 11             .!

I

                                                                            ,i
                                                                                  .~..

I'

                                                                                            ~u i~k '* m1; I.

1'r1i* 11 l'r .,.1 ,I 1

                                                                                                                                                      '!~~II, !i ,ii ~-:!~ :1:i¢.~~---

I '11* I r1 :"NI ii n ....... ,... .

  ~
              ~

0 .i!iilii1i li1l1ilii HI * !lit iii! l!,i I.I! I ~ 1J .j ti i . Iti~t~ ffl ##fmi tttrtt>! 1::.;!~'.! lj '11! li:1',:j I:;:*,;::* *t '11'1 1:.:1 ij;j fi!;: lj 11 '~l' ;:1, :lHJii-1-:;*: ... I 0

  ~

0  ;;;:1111*,

                         *;:1
                           .I-l'Jl!!i!        l:
                                . . .;:,' :. 1*,:.:1:I ,r!.jl I,Hi! iii!           :::* *, 1,*;.1.::1,' t1J' 111111 t.,. ur '1'1' n .. H.- :n1 1*           .            I       . "1              !l 1*. t.. .. .. J.il                                     .... h,l!.. i:..r-..:.t::.::'

ii! h ' 1d .Ii Ii* i I *l'i :*!' iHlli !JII H11 ii,~, l'\ij *::;: :::. D. I . ** . .* * **

• I * ,
• I I
• 3 I

li!..!.,J.i.L:..1 :_1... ..:L0. i...!1.:: *:..:.: *:: ::.:..J! ,,,, ,1; 1.,, ,,., 1,111w11111111 r 11,., .. ,:i, ....

  ~

c+ ti 00 O'I

THIS PAGE INTENTIONALLY LEFT BLANK

• OYSTER CREEK 4.5-17 Amendment No.: 482-,48e, 28.6

THIS PAGE INTENTIONALLY LEFT BLANK OYSTER CREEK 4.5-18 Amendment No.: 482-,400, 286

RADIOACTIVE EFFLUENT Applicability: Applies to monitoring of gaseous and liquid radioactive effluents of the Station during release of effluents via the monitored pathway(s). Each Surveillance Requirement applies whenever the corresponding Specification is applicable unless otherwise stated in an individual Surveillance Requirement. Surveillance Requirements do not have to be performed on inoperable equipment. Objective: To measure radioactive effluents adequately to verify that radioactive effluents are as low as is reasonable achievable and within the limit of 10 CFR Part 20. Specification: A. Reactor Coolant Reactor coolant shall be sampled and analyzed at the frequency specified in the Surveillance Frequency Control Program for DOSE EQUIVALENT 1-131 during RUN MODE, STARTUP MODE and SHUTDOWN CONDITION.

8. NOT USED.

C. Radioactive Liquid Storage

1. Liquids contained in the following tanks shall be sampled and analyzed for radioactivity at the frequency specified in the Surveillance Frequency Control Program when radioactive liquid is being added to the tank:

a. Waste Surge Tank, HP-T-3;

b. Condensate Storage Tank.

D. Main Condenser Offgas Treatment

• E.

RELOCATED TO THE ODCM. Main Condenser Offgas Radioactivity

1. The gross radioactivity in fission gases discharged from the main condenser air ejector shall be measured by sampling and analyzing the gases.

a. At the frequency specified in the Surveillance Frequency Control Program, and

b. When the reactor is operating at more t.han 40 percent of rated power, within 4 hours after an increase in the fission gas release via the air ejector of more than 50 percent, as indicated by the Condenser Air Ejector Offgas Radioactivity Monitor after factoring out increase(s) due to change(s) in the THERMAL POWER level.

F. Condenser Offqas Hydrogen Concentration The concentration of hydrogen in offgases downstream of the recombiner in the Offgas System shall be monitored with hydr~gen instrumentation as described in Table 3.15.2. G. NOT USED. H. NOT USED .

• TEA CREEK 4.6-1 Amendment No.: 108,126,166,191,266, 276

I. Radioactivity Concentration in Liquid Effluent RELOCATED TO THE ODCM J. Dose due to Liquid Effluent' RELOCATED TO THE ODCM K. Dose Rate Due to Gaseous Effluent RELOCATED TO THE ODCM L. NOT USED. M. Dose Due to Radioiodine and Particulatee in Gaseous Effluent RELOCATED TO THE ODCM N* Annual Total Dose cue to Radwaate Effluent RELOCATED TO THE ODCM. A. The reactor water sample will be used to as*ure that the limit

• I.

of Specification J.6.A ia not exceeded. The total radioactive iodine activity would not be expected to change rapidly over a period of several daya. In addition, the trend of the stack off-gaa releaae rate, which ia continuoualy monitored, ia a good indicator of the trend of the iodine activity in the reactor coolant. RELOCATED TO THE ODCM *

• OYSTER CRl!!EIC. 4.6-2 Amendment No.: 108, 126* 166 I

4.7 AUXILIARY ELECTRICAL POWER Applicability: Applies to surveillance requirements of the auxiliary electrical supply. Objective: To verify the availability of the auxiliary electrical supply. Specification: A. Diesel Generator

1. Each diesel generator shall be started and loaded to not less than 80% rated load at the frequency specified in the Surveillance Frequency Control Program.

2: The two diesel generators shall be automatically actuated and functionally tested at the frequency specified in the Surveillance Frequency Control Program. This shall include testing of the diesel generator load sequence timers listed in Table 3.1.1.

3. Deleted.

4. The diesel generators' fuel supply shall be checked following the above tests.

5. The diesel generators' starting batteries shall be tested and monitored per Specification 4.7.B.

B. Diesel Generator Starting Batteries

• 1. Surveillance will be performed at the frequency specified in the Surveillance Frequency Control Program to verify the following:

a. The active metallic surface of the plates shall be fully covered with electrolyte in all batteries.

b. The designated pilot cell voltage is greater than or equal to 2.0 volts.

c. The overall battery voltage is greater than or equal to 112 volts while the battery is on a float charge. *

d. The pilot cell specific gravity, corrected to 77°F, is greater than or equal to 1.190.

2. Surveillance will be performed at the frequency specified in the Surveillance Frequency Control Program to verify the specific gravity for each fourth cell is greater than or equal to 1.190 when corrected to 77°F. The specific gravity and electrolyte temperature of every fourth cell shall be recorded for surveillance review.

3. Surveillance will be performed at the frequency specified in the Surveillance Frequency Control Program to verify the specific gravity for each cell is greater than or equal to 1.190 when corrected to 77°F. The electrolyte temperature and specific gravity for every cell shall be recorded for surveillance review.

• OYSTER CREEK 4.7-1 Amendment No.: 144,189,197,227, 2as, 245,276 Corrested by letter of 10/15/2004

4. At the frequency specified in the Surveillance Frequency Control Program, the diesel generator battery capacity shall be demonstrated to be able to supply the design duty loads (diesel start) during a battery service test.

5. At the frequency specified in the Surveillance Frequency Control Program, the fallowing tests will be performed:

a. Battery capacity shall be demonstrated to be at least 80% of the manufacturers' rating when subjected to a battery capacity discharge.

test.

b. If a Diesel Generator Starting Battery is demonstrated to have less than 85% of manufacturers ratings during a capacity discharge test, it shall be replaced within 2 years.

C. Station Batteries

1. Surveillance will be performed at the frequency specified in the Surveillance Frequency Control Program to verify the following:

a. The overall battery voltage is greater than or equal to the minimum established float voltage.

b. Each station battery float current is s 2 amps when battery terminal voltage is greater than or equal to the minimum established float voltage of 4.7.C.1.a.

2. Surveillance will be performed at the frequency specified in the Surveillance Frequency Control Program to verify the following:

a. The electrolyte level in each station battery is greater than or equal to minimum established design limits.

b. The voltage of each pilot cell is greater than or equal to 2.07 volts while the respective battery is on a f Ioat charge.

c. The electrolyte temperature of each station battery pilot cell is greater than or equal to minimum established design limits.

3. Surveillance will be performed at the frequency specified in the Surveilllance Frequency Control Program to verify the voltage of each connected cell is greater than or equal to 2.07 volts while the respective battery is on a float charge .

• Oyster Creek 4.7-2 Amendment No. 142, 189, 197, 227, 246276 Corrected by letter of 10/1 e/2004

4. At the frequency specified in the Surveillance Frequency Control Program:

a. The station battery capacity shall be demonstrated to be able to supply the design duty cycle loads during a battery service test. The modified performance discharge test may be substituted for the service test.

b. (i) Verify required station battery charger supplies 2::: 429 amps for the B MG Set charger, ~ 600 amps for the A/8 static charger, and ~ 500 amps for the C charger, for~ 4 hours at greater than or equal to the minimum established float voltage, or (ii) Verify each required battery charger can recharge the battery to the fully charged state while supplying the normal steady state DC loads during station operation, after a battery discharge to the bounding design basis event discharge state.

5. The following tests will be performed to verify battery capacity:

a. At the frequency specified in the Surveillance Frequency Control Progam, battery capacity shall be demonstrated to be at least 80% of the manufacturers' rating when subjected to a performance discharge test or a modified performance discharge test.

b. Performance discharge tests or modified performance discharge tests of station battery capacity shall be given at least once per 12 months when:

(i) The station battery shows degradation, or (ii) The station battery has reached 85% of expected life with battery capacity < 100% of manufacturer's rating.

c. Performance discharge tests or modified performance discharge tests of

• station battery capacity shall be given at least once per 24 months when the battery has reached 85% of expected life with battery capacity

                        ~ 100% of manufacturer's rating .

• Oyster Creek 4.7-3. Amendment No. 248,276
• Basis: The diesel generator tests are primarily to check for failures and deterioration in the system since last use. The manufacturer has recommended the test interval, based on.

experience with many of their engines. One factor in determining this test interval (besides checking whether or not the engine starts and runs) is that the lubricating oil should be circulated through the engine periodically. The diesels should be loaded to at least 80% of rated load until engine and generator temperatures have stabilized (about one hour). The minimum 80% load will prevent soot formation in the cylinders and injection nozzles. Operation up to an equilibrium temperature ensures that there is no over-heat problem. The tests also provide an engine and generator operating history to be compared with subsequent engine-generator test data to identify and correct any mechanical or electrical deficiency before it can result in a system failure. The more comprehensive tests, performed at the frequency specified in the Surveillance Frequency Control Program, include automatic actuation and functional capability tests, to verify that the generators can start and assume toad in less than 20 seconds and testing of the diesel generator load sequence timers which provide protection from a possible diesel generator overload during LOCA conditions. The diesel generator batteries are challenged at the frequency specified in the Surveillance Frequency Control Program to perform the 80% load test. This effectively performs an uninstrumented battery service test. The diesel start, when combined with the battery service test, provides an extensive amount of data on battery performance characteristics. This test data negates the need to lower the battery performance test interval. The diesel batteries shall be tested and monitored in accordance with the requirements of Specification 4.7.B to ensure their viability. The requirement to replace any battery within 2 years which demonstrates less than 85% of manufacturers capacity during a capacity discharge test provides additional assurance of continued battery operability. Verifying, per 4.7.C.1.a, battery terminal voltage while on float charge for the batteries helps to ensure the effectiveness of the battery chargers, which support the ability of the batteries to perform their intended function. Float charge is the condition in which the charger is supplying the continuous charge required to overcome the internal losses of a battery and maintain the battery in a fully charged state while supplying the continuous steady state loads of the associated DC subsystem. On float charge, battery cells will receive adequate current to optimally charge the battery .. The voltage requirements are based on the minimum float voltage established by the battery manufacturer (2.17 V per cell average, or 130.2 V at the battery terminals). This voltage maintains the battery plates in a condition that supports maintaining the grid life (expected to be approximately 40 years for B station battery; 20 years for C station battery). The Surveillance Frequency is controlled under the Surveillance Frequency Control Program .

• OYSTER CREEK 4.7-4 AMENDMENT NO: 142,189,197,227,238,245, 276 Corrested by letter of 10/15/2004

Verifying battery float current while on float charge (4. 7.C.1.b) is used to determine the state of charge of the battery. Float charge is the condition in which the charger is

• supplying the continuous charge required to overcome the internal losses of a battery and maintain the battery in a charged state. The float current requirements are based on the float current indicative of a charged battery. Use of float current to determine the state of charge of the battery is consistent with IEEE Standard 450-1995. The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.

This Surveillance Requirement (4.7.C.1.b) provides that the float current requirement is not required to be met when battery terminal voltage is less than the minimum established float voltage of 4.7.C.1.a. When this float voltage is not maintained the Actions of 3.7.D.1 are being taken, which provide the necessary and appropriate verifications of the battery condition. Furthermore, the float current limits are established based on the float voltage range and is not directly applicable when this voltage is not maintained. The 4. 7.C.2.a minimum established design limit for electrolyte level ensures that the plates suffer no physical damage and maintains adequate electron transfer capability. For the station batteries, this is the minimum level mark on the side of the battery cell. The Surveillance Frequency is controlled under the Surveillance Frequency Control Program. Surveillance Requirements 4.7.C.2.b and 4.7.C.3 require verification that the cell float voltages are equal to or greater than 2.07 V. The Surveillance Frequencies are controlled under the Surveillance Frequency Control Program .

• Surveillance Requirement 4.7.C.2.c verifies that the pilot cell temperature is greater than or equal to the minimum established design limit (i.e., 60 degrees Fahrenheit for station battery B; 50 degrees Fahrenheit for station battery C). Cell electrolyte temperature is maintained above these temperatures to assure the battery can provide the required current and voltage to meet the design requirements. Temperatures lower than assumed in battery sizing calculations act to inhibit or reduce battery capacity. The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.

A battery service test, per 4.7.C.4.a, is a special test of the station battery capability, as found, to satisfy the design requirements (battery duty cycle) of the DC auxiliary electrical power system. The discharge rate and test length corresponds to the design duty cycle requirements. Surveillance Requirement 4.7.C.4.b verifies the design capacity of the station battery chargers. The battery charger supply is based on normal steady state DC loads during station operation and the charging capacity to restore the battery from the design minimum charge state to the fully charged state. The minimum required amperes and duration ensures that these requirements can be satisfied. The battery is recharged when the measured charging current is s 2 amps. Surveillance Requirement 4.7.C.4.b(i) requires that each required station battery charger (i.e., only one charger per station battery "required" for compliance with 3.7.A.4) be capable of supplying the amps listed for the specified charger at the minimum established float voltage for 4 hours. The ampere requirements are based on the output OYSTER CREEK 4.7-5 Amendment No. 24&, 276

rating of the chargers. The voltage requirements are based on the normal minimum established float voltage. This time period is sufficient for the charger temperature to have stabilized and to have been maintained for at least 2 hours. Alternately, 4.7.C.4.b(ii) allows that the battery charger load test be capable of recharging the battery after a service test coincident with normal steady state DC loads durir:ig station operation. This level of loading may not normally be availablefollowing the battery service test and may need to be supplemented with additional loads. The duration for this test may be longer than the charger sizing criteria since the battery recharge is affected by float voltage, temperature, an the exponential decay in charging current. A battery performance discharge test (4.7.C.5) is a test of constant current capacity of a battery, normally done in the as found condition, after having been in service, to detect any change in the capacity determined by the acceptance test. The test is intended to determine overall battery degradation due to age and usage. Degradation (as used in 4.7.C.5.b(i)) is indicated when the battery capacity drops more than 10% from its capacity on the previous performance test, or is below 90% of the manufacturer's rating. Either the battery performance discharge test or the modified performance discharge test is.acceptable for satisfying 4.7.C.5; however, only the modified performance discharge test may be used to satisfy the battery service test requirements of 4.7.C.4.a .

• OYSTER CREEK 4.7-6 Amendment No. 24 5

4.8 ISOLATION CONDENSER Applicability: Applies to periodic testing requirements for the isolation condenser system .

• Objective:

Specification: A. Item To verify the operability of the isolation condenser system.

• Surveillance of each isolation condenser loop shall be as follows:

Frequency

1. Operability of motor- Note 1 operated isolation valves and condensate makeup valves.

2. Automatic actuation and

• Note 1 or following major functional test. repair.

3. Shell side water volume Note 1 check

4. Isolation valve (steam side)

a. Visual inspection Note 1

b. External leakage check Each primary system Leak test

c. Area temperature check Note 1 Note 1: Surveillance Frequencies are specified in the Surveillance Frequency Control Program unless otherwise noted above .

Basis: Motor-operated valves on the isolation condenser steam and cond~nsate lines and on the condensate makeup line that are normally on standby should be exercised periodically to make sure that they are free to operate. The valves will be stroked full length every time they are tested to verify proper functional performance. This frequency of testing is consistent with instrumentation tests discussed in Specification 4.1. Testing of these components per the ASME Code at the frequency specified in the Surveillance Frequency Control Program provides assurance of availability of the system. Also, at this frequency of testing, wearout should not be a problem throughout the life of the plant. The automatic actuation and functional test will demonstrate the automatic opening of the condensate return line valves and the automatic closing of the isolation valves on the vent lines to the main steam lines. Automatic closure of the isolation condenser steam and condensate lines on actuation of the condenser pipe break detectors will also be verified by the test. It is during a major maintenance or repair that a system's design intent may be violated accidentally. This makes the functional test necessary after every major repair operation. By virtue of normal plant operation the operators daily observe the water level in the isolation condensers. In addition, isolation condenser shell side water level sensors provide control room annunciation of condenser high or low water level. OYSTER CREEK 4.8-1 Amendment No. 209, 268276

At the frequency specified in the Surveillance Frequency Control Program, the insulation will be periodically removed from the steam side isolation valve and the

• external valve bodies will be inspected for signs of deterioration. Additionally, special attention is specified for these valves during primary system leakage tests and the temperature in the area of these valves is checked at the frequency specified in the Surveillance Frequency Control Progam for temperature increases that would indicate valve leakage. The special attention given these valves in the 1

design and during their constructionc > along with the indicated surveillance is judged to be adequate to assure that these valves will maintain their integrity when they are required for isolation of the primary containment.

   ./

Reference (1) Licensing Application, Amendment 32, Question 5 OYSTER CREEK 4.8-2 Amendment No. 276

4.9 REFUELING Applicability: Applies to the periodic testing of those interlocks and instruments used during refueling . Objective: To verify the operability of instrumentation and interlocks in use during refueling. Specification: A. The refueling interlocks shall be tested prior to any fuel handling with the head off the reactor vessel, at the frequency specified in the Surveillance Frequency Control Program thereafter until no longer required and following any repair work associated with the interlocks.

• B. Prior to beginning any core alterations, the source range monitors (SRMs) shall be calibrated. Thereafter, the SRM's will be checked, tested, and calibrated at the frequencies specified in the Surveillance Frequency Control Program until no longer required.

C. Within four (4) hours prior to the start of control rod removal pursuant t<;> Specification 3.9.E verify:

1. That the reactor mode switch is locked in the refuel position and that the one rod out refueling interlock is operable.

2. That two (2) SAM channels, one in the core quadrant where the control rod is b~ing removed and one in an adjacent quadrant, are operable and inserted to the normal operation level.

D. Verify within four (4) hours prior to the start of control rod removal pursuant to Specification 3.9.F and at the frequency specified in the Surveillance Frequency Control Program thereafter, until replacement of all control rods or rod drive mechanisms and all control rods are fully inserted that:

1. the reactor mode switch is locked in the refuel position and the one rod out refueling interlock is operable.

2. Two (2) SAM channels, one in the core quadrant where a control rod is being removed and one in an adjacent quadrant, are operable and fully inserted.

3. All control rods not removed are fully inserted with the exception of one rod which may be partially withdrawn not more than two notches to perform refueling interlock surveillance.*

4. The four fuel assemblies surrounding each control rod or rod drive mechanism being removed or maintained at the same time are removed from the core cell.

OYSTER CREEK 4.9-1 Amendment No.: 23;-43,276

E. Verify prior to the start of removal of control rods pursuant to Specification 3.9.F that Specification 3.9.F.5 will be met. F. Following replacemen_t of a control rod or rod drive mechanism removed in accordance with Specification 3.9.F, prior to inserting fuel in the control cell, verify that the bypassed refueling interlocks associated with that rod have been restored and that the control rod is fully inserted. 1 Basis: The refueling interlocks( > are required only when fuel is being handled and the head is off the reactor vessel. A test of these interlocks prior to the time when they are needed is sufficient to ensure that the interlocks are operable. The Surveillance Frequency is controlled under the Surveillance Frequency Control Program. 2 The SRM's< > provide neutron monitoring capability during core alterations. A calibration using external testing equipment to calibrate the signal conditioning equipment prior to use is sufficient to ensure operability. The Surveillance Frequency is controlled under the Surveillance Frequency Control Program. The surveillance requirements for control rod removal assure that the requirements of Specification 3.9 are met prior to initiating control rod removal and at appropriate intervals thereafter .

References:

(1) (2) FDSAR, Volume I, Section Vll-7-2.5 FDSAR, Volume I, Sections Vll-4.2.2 and Vll-4-5.1 OYSTER CREEK 4.9-2 Amendment No.: 23;43, 276

4.10 EGGS RELATED CORE LIMITS

• Applicability:

Objective: Applies to the periodic measurement during power operation of core parameters related to ECCS performance. To assure that the limits of Section 3.10 are not being violated. Specification: A. Average Planar LHGR. The APLHGR for each type of fuel as a function of average planar exposure shall be checked at the frequency specified in the Surveillance Frequency Control Program during reactor operation at greater than or equal to 25% rated thermal power.

8. Local LHGR.

The LHGR as a function of core height shall be checked at the frequency specified in the Surveillance Frequency Control Program during reactor operation at greater than or equal to 25% rated thermal power. C. Minimum Critical Power Ratio (MCPR).

1. MCPR shall be checked at the frequency specified in the Surveillance Frequency Control Program during reactor operation at gre_ater than or equal to 25% rated thermal power. *

2. The MCPR operating limit shall be determined within 72 hours of completing scram time testing as required in Specification 4.2.C.

Bases: The LHGR shall be periodically checked at the frequency specified in the Surveillance Frequency Control Program to determine whether fuel burnup or control rod movement has caused changes in power distribution. Since changes due to burnup are slow, a periodic check of power distribution is adequate. The minimum critical power ratio (MCPR) is unlikely to change significantly during steady state power operation. In the event of a single pump trip, the surveillance frequency specified in the Surveillance Frequency Control Program remains acceptable because the accompanying power reduction is much larger than the change in MAPLHGR limits for four loop operation at the corresponding lower steady state power level as compared to five loop operation. The frequency specified in the Surveillance Frequency Control Program is also acceptable for the APRM status check since neutron monitoring system failures are infrequent and a downscale failure of an APRM initiates a control rod withdrawal block, thus precluding the possibility of a control rod withdrawal error.

• OYSTER CREEK ECR OC 04 00676 4.10-1 Amendment No.: 76, 249,276 Correotod by letter of 1OJ20.lQ4
• Because the transient analysis takes credit for conservatism in the scram speed performance, it must be demonstrated that the specific scram speed distribution is consistent with that used in the transient analysis. Surveillance 4.1 O.C.2 determines the actual scram speed distribution which is compared to the assumed distribution. The MCPR operating limit is then determined based either on the applicable limit associated with scram times of Specification 3.2.B.3 or actual scram times. The MCPR operating limit must be determined once within 72 hours after each set of scram time tests required by Surveillance 4.2.C because the effective scram speed distribution may change during the cycle. The 72 hour completion time is acceptable due to the
• relatively minor changes in scram speed expected during the operating cycle.

At core power levels less than or equal to 25% rated thermal power the reactor will be operating at or above the minimum recirculation pump speed. For all designated control rod patterns which may be employed at this point, operating plant experience and thermal hydraulic analysis indicate that the resulting APLHGR, LHGR and MCPR values all have considerable margin to the limits of Specification 3.10. Consequently, monitoring of these quantities below 25% of the rated thermal power is not required .

• OYSTER CREEK 4.10-2 Amendment No. 249
• 4.11 Sealed Source Contamination Applicability: Applies to* each licensed sealed source containing radioactive material either in excess of 100 microcuries of beta and/or gamma emitting materials or 5 microcuries of alpha emitting ..

material . Objective: To detect and prevent.contamination from sealed source leakage. Specification: A. Radioactive sources shall*be tested for contamination. The test shall be capable of detecting the presence of 0.005 microcuries of radioactive material on the test sample. If the test reveals the presence of 0.005 microcuries or more of removable contamination, it shall immediately be withdrawn from use, decontaminated, and repaired, or be disposed of in accordance with Commission regulations. B. Tests for contamination shall be performed by the licensee or by other persons specifically authorized by the Commission or an agree-ment state as follows:

l. Each sealed source, except* startup sources previously subjected to core flux, containing radioactive material, other than Hydrogen 3, with a half life greater than thirty days and in*

any form other than gas shall be tested for contamination at intervals not to exceed six months.

2. The periodic leak test required does not apply to sealed ~ourc:es that are stored and not being used. The sources excepted from this test shall be tested prior to any use or transfer to another user unless they have been tested within six months prior to the date of use or transfer. In the absence of a certificate from a transferor indicating that a test has been made within six months prior to the transfer, sealed sources shall not be put into use until tested.

3. Startup sources.shall be tested prior to and following any repair or modification and within 31 days before being subjected to core flux.

Bases: Ingestion or inhalation of source material may give rise to total body or organ irradiation. This specification assures that leakage from radio-active material sources does not exceed allowable limits .

• OYSTER CREEK 4.ll-1 Amendment No.: 19

4.12 Alternate Shutdown Monitoring Instrumentation Applicability: Applies to the surveillance requirements of the alternate shutdown monitoring instrumentation. Objective: To specify the minimum frequency and type of surveillance to be applied to the alternate shutdown monitoring instrumentation. Specification: Each of the alternate shutdown monitoring channels shown in Table 4.12-1 shall be demonstrated operable by performance of the CHANNEL CHECK and CHANNEL CALIBRATION operations at the frequencies specified in the Surveillance Frequency Control Program unless otherwise noted in Table 4.12-1. The operability of the alternate shutdown monitoring instrumentation ensures that sufficient capability is available to permit shutdown and maintenance of hot shutdown of the plant from locations outside of the control room. The surveillance frequencies are controlled under the Surveillance Frequency Control Program .

• OYSTER CREEK 4.12-1 Amendment No.: 161,263, 276
• TABLE 4.12-1 ALTERNATE SHUTDOWN MONITORING INSTRUMENTATION CHANNEL CHANNEL Functional Limit CHECK (Note 1) CALIBRATION (Note 1}

Reactor Pressure Reactor Water Level (fuel zone) n/a Condensate Storage Tank Level Service Water Pump Discharge Pressure Control Rod Drive System Flowmeter Shutdown Cooling System Flowmeter n/a Isolation Condenser "B" Shell Water Level Reactor Building Closed Cooling Water Pump Discharge Pressure

• Note 1: Surveillance Frequencies are specified in the Surveillance Frequency Control Program unless otherwise noted in the table.

OYSTER CREEK 2ea, 4.12-2 Amendment No.: *11<1, 161, 276

4.13 ACCIDENT MONITORING INSTRUMENTATION

• Applicability:

Objective: Applies to surveillance requirements for the accident monitoring instrumentation. To verify the operability of the accident monitoring instrumentation. Specification: A. Safety & Relief Valve Position Indicators Each primary and safety valve position indicator (primary detector*), relief and safety valve position indicator (backup indications**), and relief valve position indicator (common header temperature element**) channel shall be demonstrated operable by performance of the CHANNEL CHECK and CHANNEL CALIBRATION operations at the frequencies specified in the Surveillance Frequency Control Program.

• B. Wide Range Drywell Pressure Monitor Each wide range drywell pressure monitor (PT/PR 53 & 54) channel shall be demonstrated operable by performance of the CHANNEL CHECK and CHANNEL CALIBRATION operations at the frequencies specified in the Surveillance Frequency Control Program.

C. Wide Range Torus Water Level Monitor Each wide range torus water level monitor (LT/LR 37 & 38) channel shall be demonstrated operable by performance of the CHANNEL CHECK and CHANNEL CALIBRATION operations at the frequencies specified in the Surveillance Frequency Control Program. D. DELETED E. Containment High-Range Radiation Monitor Each containment high range radiation monitor channel shall be demonstrated operable by performance of the CHANNEL CHECK and CHANNEL CALIBRATION*** operations at the frequencies specified in the Surveillance Frequency Control Program. I F. High Range Radioactive Noble Gas Effluent Monitor Each high range radioactive noble gas effluent monitor (main stack and turbine building vent) channel shall be demonstrated operable by performance of the CHANNEL CHECK and CHANNEL CALIBRATION operations at the frequencies specified in the Surveillance Frequency Control Program.

• Acoustic Monitor

  **  Thermocouple
  *** CHANNEL CALIBRATION for the containment high range radiation monitor shall consist of electronic signal substitution of the channel, not including the detector, for all decades above 10R/hr and a one point calibration check of the detector at or below 1OR/hr by means of a calibrated portable radiation source traceable to NBS.

• OYSTER CREEK 4.13-1 Amendment No.: S4, 94, 1 Hi, 137,246,263, 276

Bases: The operability of the accident monitoring instrumentation ensures that sufficient information is available on selected plant parameters to monitor and assess these variables during and following an accident. This capability is consistent with NUREGs 0578 and 0737 .

• OYSTER CREEK 4.13-1a Amendment No. 276

INFORMATION ON THIS PAGE HAS BEEN DELETED OYSTER CREEK 4.13-2 Amendment No.: 54, 88, 94, 116,127,144,146,246,263, 276 Corrected lotter of 2./14.'fJ1

• 4.14 Solid Radioactive Waste - DELETED
• OYSTER CRBU 4.14-1 Amendment No.1 108, 166

4.15 Explosive Gas Monitoring Instrumentation Applicability: States surveillance requirements for OPERABILITY of explosive gas monitoring instrumentation. Objective: To demonstrate the OPERABILITY of explosive gas monitoring instrumentation. Specification: Gaseous Effluent Instrumentation Each explosive gas effluent monitoring instrument channel shall be demonstrated OPERABLE by performance of the CHANNEL CHECK, CHANNEL CALIBRATION, and CHANNEL FUNCTIONAL TEST at the frequencies specified in the Surveillance Frequency Control Program unless otherwise noted in Table 4.15.2 .

• OYSTER CREEK 4.15-1 Amendment No.: 108, 166,276

TABLE 4.15.2 EXPLOSIVE GAS MONITORING INSTRUMENTATION SURVEILLANCE REQUIREMENTS CHANNEL CHANNEL CHANNEL SOURCE CHANNEL FUNCTIONAL SURVEILLANCE INSTRUMENT CHECK (h) CHECK CALIBRATION(f)(h) TEST (h) REQUIRED (a)

1. Main Condenser N/A (g) (c)

Offgas Treatment System Hydrogen Monitor Legend: N/A = Not Applicable. TABLE 4.15.2 NOTATIONS

• (a) Instrumentation shall be OPERABLE and in service except that a channel may be taken out of services for the purpose of a check, calibration, test or maintenance without declaring it to be inoperable.

(c) During main condenser offgas treatment system operation. (f) The CHANNEL CALIBRATION shall be performed according to established station calibration procedures. (g) A CHANNEL CALIBRATION shall include the use of at least two standard gas samples, each containing a known volume percent hydrogen in the range of the instrument, balance nitrogen. (h) Surveillance Frequencies are specified in the Surveillance Frequency Control Program unless otherwise noted in the table.

  )YSTER CREEK                                         4.15-2                     Amendment No.: 137,146, 166, 166,263,276

• 4.16 Radiological Environmental surveillance RELOCATED TO THE QDCM

-* OYSTER CREEK 4.16-1 Amendment No.: 10& 166

4.17 Control Room Heating, Ventilating, and Air-Conditioning System

• Applicability:

Objective: Applies to surveillance requirements for the control room heating, ventilating, and air conditioning (HVAC) systems. To verify the capability of each control room HVAC system to minimize the amount of radioactivity from entering the control room in the event of an accident. Specification: Surveillance of each control room HVAC system shall be as follows: A. At the frequency specified in the Surveillance Frequency Control Program: by initiating, from the control room, the partial recirculation mode of _operation, and by verifying that the system components are aligned such that the system is operating in this mode. B. At the frequency specified in the Surveillance Frequency Control Program: by verifying that in the partial recirculation mode of operation, the control room and lower cable spreading room are maintained at a positive pressure of.:: 1/8 in. WG relative to the outside atmosphere. Basis: Periodic surveillance of each control room HVAC system is required to ensure the operability of the system. The operability of the system in conjunction with control room design provisions is based upon limiting the radiation exposure to personnel occupying the control room to less than a 30-day integrated dose of 5 rem TEDE for the most limiting design basis accident.

**  OYSTER CREEK                                   4.17-1                  Amendment No.: 116, 139, 262, 276}}