TSTF-13-05, Transmittal of TSTF-536, Revision 0, Resolve CE Digital TS Inconsistencies Regarding CPCs and Ceacs
| ML13169A263 | |
| Person / Time | |
|---|---|
| Site: | Technical Specifications Task Force |
| Issue date: | 06/18/2013 |
| From: | Croft W, Gustafson O, Loeffler R, Slough R BWR Owners Group, PWR Owners Group, Technical Specifications Task Force, B & W Nuclear Energy (B&W NE), Combustion Engineering |
| To: | Document Control Desk, Office of Nuclear Reactor Regulation |
| References | |
| TSTF-13-05, TSTF-536, Rev 0 | |
| Download: ML13169A263 (108) | |
Text
TECHNICAL SPECIFICATIONS TASK FORCE TSTF A JOINT OWNERS GROUP ACTIVITY June 18, 2013 TSTF-13-05 PROJ0753 Attn: Document Control Desk U. S. Nuclear Regulatory Commission Washington, DC 20555-0001
SUBJECT:
Transmittal of TSTF-536, Revision 0, "Resolve CE Digital TS Inconsistencies Regarding CPCs and CEACs" Enclosed for NRC review is Revision 0 of TSTF-536, "Resolve CE Digital TS Inconsistencies Regarding CPCs and CEACs." TSTF-536 is applicable to Combustion Engineering plants with digital reactor protective systems.
The TSTF requests that the NRC bill the Pressurized Water Reactor Owners Group for the review of this Traveler.
Should you have any questions, please do not hesitate to contact us.
Robert Slough (PWROG/W) Richard A. Loeffler (BWROG)
Otto W. Gustafson (PWROG/CE) Wendy E. Croft (PWROG/B&W)
Enclosure cc: Michelle Honcharik, Licensing Processes Branch, NRC Robert Elliott, Technical Specifications Branch, NRC 11921 Rockville Pike, Suite 100, Rockville, MD 20852 Phone: 301-984-4400, Fax: 301-984-7600 Administration by EXCEL Services Corporation
CEOG-180, Rev. 0 TSTF-536, Rev. 0 Technical Specifications Task Force Improved Standard Technical Specifications Change Traveler Resolve CE Digital TS Inconsistencies Regarding CPCs and CEACs NUREGs Affected: 1430 1431 1432 1433 1434 Classification: 1) Technical Change Recommended for CLIIP?: Yes Correction or Improvement: Improvement NRC Fee Status: Not Exempt Changes Marked on ISTS Rev 4.0 See attached.
Revision History OG Revision 0 Revision Status: Active Revision Proposed by: San Onofre Revision
Description:
Original Issue Owners Group Review Information Date Originated by OG: 02-Aug-11 Owners Group Comments (No Comments)
Owners Group Resolution: Approved Date: 01-Sep-11 TSTF Review Information TSTF Received Date: 23-Jan-12 Date Distributed for Review 23-Jan-12 OG Review Completed: BWOG WOG CEOG BWROG TSTF Comments:
(No Comments)
TSTF Resolution: Approved Date: 01-May-13 NRC Review Information NRC Received Date: 18-Jun-13 Affected Technical Specifications LCO 3.3.1A Bases RPS Instrumentation - Operating (Digital)
Change
Description:
Table 3.3.1-1 18-Jun-13 Traveler Rev. 3. Copyright(C) 2013, EXCEL Services Corporation. Use by EXCEL Services associates, utility clients, and the U.S. Nuclear Regulatory Commission is granted. All other use without written permission is prohibited.
CEOG-180, Rev. 0 TSTF-536, Rev. 0 LCO 3.3.1B Bases RPS Instrumentation - Operating (Digital)
Change
Description:
Table 3.3.1-1 Action 3.3.1A.E RPS Instrumentation - Operating (Digital)
Change
Description:
Deleted Action 3.3.1B.E RPS Instrumentation - Operating (Digital)
Change
Description:
Deleted Action 3.3.1B.E Bases RPS Instrumentation - Operating (Digital)
Change
Description:
Deleted Action 3.3.1A.E Bases RPS Instrumentation - Operating (Digital)
Change
Description:
Deleted Action 3.3.1B.F RPS Instrumentation - Operating (Digital)
Change
Description:
Deleted Action 3.3.1A.F RPS Instrumentation - Operating (Digital)
Change
Description:
Deleted Action 3.3.1B.F Bases RPS Instrumentation - Operating (Digital)
Change
Description:
Deleted Action 3.3.1A.F Bases RPS Instrumentation - Operating (Digital)
Change
Description:
Deleted Action 3.3.1A.G RPS Instrumentation - Operating (Digital)
Change
Description:
Renamed E Action 3.3.1B.G RPS Instrumentation - Operating (Digital)
Change
Description:
Renamed E Action 3.3.1A.G Bases RPS Instrumentation - Operating (Digital)
Change
Description:
Renamed E Action 3.3.1B.G Bases RPS Instrumentation - Operating (Digital)
Change
Description:
Renamed E SR 3.3.1B.3 RPS Instrumentation - Operating (Digital)
Change
Description:
Deleted SR 3.3.1A.3 RPS Instrumentation - Operating (Digital)
Change
Description:
Deleted SR 3.3.1A.3 Bases RPS Instrumentation - Operating (Digital)
Change
Description:
Deleted SR 3.3.1B.3 Bases RPS Instrumentation - Operating (Digital)
Change
Description:
Deleted SR 3.3.1A.4 RPS Instrumentation - Operating (Digital)
Change
Description:
Renamed 3.3.1.3 18-Jun-13 Traveler Rev. 3. Copyright(C) 2013, EXCEL Services Corporation. Use by EXCEL Services associates, utility clients, and the U.S. Nuclear Regulatory Commission is granted. All other use without written permission is prohibited.
CEOG-180, Rev. 0 TSTF-536, Rev. 0 SR 3.3.1A.4 RPS Instrumentation - Operating (Digital)
Change
Description:
Renamed 3.3.1.3 SR 3.3.1A.4 Bases RPS Instrumentation - Operating (Digital)
Change
Description:
Renamed 3.3.1.3 SR 3.3.1B.4 Bases RPS Instrumentation - Operating (Digital)
Change
Description:
Renamed 3.3.1.3 SR 3.3.1B.5 RPS Instrumentation - Operating (Digital)
Change
Description:
Renamed 3.3.1.4 SR 3.3.1A.5 RPS Instrumentation - Operating (Digital)
Change
Description:
Renamed 3.3.1.4 SR 3.3.1A.5 Bases RPS Instrumentation - Operating (Digital)
Change
Description:
Renamed 3.3.1.4 SR 3.3.1B.5 Bases RPS Instrumentation - Operating (Digital)
Change
Description:
Renamed 3.3.1.4 SR 3.3.1B.6 RPS Instrumentation - Operating (Digital)
Change
Description:
Renamed 3.3.1.5 SR 3.3.1A.6 RPS Instrumentation - Operating (Digital)
Change
Description:
Renamed 3.3.1.5 SR 3.3.1A.6 Bases RPS Instrumentation - Operating (Digital)
Change
Description:
Renamed 3.3.1.5 SR 3.3.1B.6 Bases RPS Instrumentation - Operating (Digital)
Change
Description:
Renamed 3.3.1.5 SR 3.3.1A.7 RPS Instrumentation - Operating (Digital)
Change
Description:
Renamed 3.3.1.6 SR 3.3.1B.7 RPS Instrumentation - Operating (Digital)
Change
Description:
Renamed 3.3.1.6 SR 3.3.1B.7 Bases RPS Instrumentation - Operating (Digital)
Change
Description:
Renamed 3.3.1.6 SR 3.3.1A.7 Bases RPS Instrumentation - Operating (Digital)
Change
Description:
Renamed 3.3.1.6 SR 3.3.1B.8 RPS Instrumentation - Operating (Digital)
Change
Description:
Renamed 3.3.1.7 SR 3.3.1A.8 RPS Instrumentation - Operating (Digital)
Change
Description:
Renamed 3.3.1.7 SR 3.3.1A.8 Bases RPS Instrumentation - Operating (Digital)
Change
Description:
Renamed 3.3.1.7 18-Jun-13 Traveler Rev. 3. Copyright(C) 2013, EXCEL Services Corporation. Use by EXCEL Services associates, utility clients, and the U.S. Nuclear Regulatory Commission is granted. All other use without written permission is prohibited.
CEOG-180, Rev. 0 TSTF-536, Rev. 0 SR 3.3.1A.8 Bases RPS Instrumentation - Operating (Digital)
Change
Description:
Renamed 3.3.1.7 SR 3.3.1A.9 RPS Instrumentation - Operating (Digital)
Change
Description:
Renamed 3.3.1.8 SR 3.3.1B.9 RPS Instrumentation - Operating (Digital)
Change
Description:
Renamed 3.3.1.8 SR 3.3.1B.9 Bases RPS Instrumentation - Operating (Digital)
Change
Description:
Renamed 3.3.1.8 SR 3.3.1A.9 Bases RPS Instrumentation - Operating (Digital)
Change
Description:
Renamed 3.3.1.8 SR 3.3.1A.10 RPS Instrumentation - Operating (Digital)
Change
Description:
Renamed 3.3.1.9 SR 3.3.1B.10 RPS Instrumentation - Operating (Digital)
Change
Description:
Renamed 3.3.1.9 SR 3.3.1A.10 Bases RPS Instrumentation - Operating (Digital)
Change
Description:
Renamed 3.3.1.9 SR 3.3.1B.10 Bases RPS Instrumentation - Operating (Digital)
Change
Description:
Renamed 3.3.1.9 SR 3.3.1A.11 RPS Instrumentation - Operating (Digital)
Change
Description:
Renamed 3.3.1.10 SR 3.3.1B.11 RPS Instrumentation - Operating (Digital)
Change
Description:
Renamed 3.3.1.10 SR 3.3.1B.11 Bases RPS Instrumentation - Operating (Digital)
Change
Description:
Renamed 3.3.1.10 SR 3.3.1A.11 Bases RPS Instrumentation - Operating (Digital)
Change
Description:
Renamed 3.3.1.10 SR 3.3.1B.12 RPS Instrumentation - Operating (Digital)
Change
Description:
Renamed 3.3.1.11 SR 3.3.1A.12 RPS Instrumentation - Operating (Digital)
Change
Description:
Renamed 3.3.1.11 SR 3.3.1A.12 Bases RPS Instrumentation - Operating (Digital)
Change
Description:
Renamed 3.3.1.11 SR 3.3.1B.12 Bases RPS Instrumentation - Operating (Digital)
Change
Description:
Renamed 3.3.1.11 SR 3.3.1B.13 RPS Instrumentation - Operating (Digital)
Change
Description:
Renamed 3.3.1.12 18-Jun-13 Traveler Rev. 3. Copyright(C) 2013, EXCEL Services Corporation. Use by EXCEL Services associates, utility clients, and the U.S. Nuclear Regulatory Commission is granted. All other use without written permission is prohibited.
CEOG-180, Rev. 0 TSTF-536, Rev. 0 SR 3.3.1A.13 RPS Instrumentation - Operating (Digital)
Change
Description:
Renamed 3.3.1.12 SR 3.3.1A.13 Bases RPS Instrumentation - Operating (Digital)
Change
Description:
Renamed 3.3.1.12 SR 3.3.1B.13 Bases RPS Instrumentation - Operating (Digital)
Change
Description:
Renamed 3.3.1.12 SR 3.3.1B.14 RPS Instrumentation - Operating (Digital)
Change
Description:
Renamed 3.3.1.13 SR 3.3.1A.14 RPS Instrumentation - Operating (Digital)
Change
Description:
Renamed 3.3.1.13 SR 3.3.1A.14 Bases RPS Instrumentation - Operating (Digital)
Change
Description:
Renamed 3.3.1.13 SR 3.3.1B.14 Bases RPS Instrumentation - Operating (Digital)
Change
Description:
Renamed 3.3.1.13 SR 3.3.2A.2 Bases RPS Instrumentation - Shutdown (Digital)
SR 3.3.2B.2 Bases RPS Instrumentation - Shutdown (Digital)
SR 3.3.2B.3 Bases RPS Instrumentation - Shutdown (Digital)
SR 3.3.2B.4 Bases RPS Instrumentation - Shutdown (Digital)
SR 3.3.2A.4 Bases RPS Instrumentation - Shutdown (Digital)
SR 3.3.2.A3 Bases RPS Instrumentation - Shutdown (Digital)
Action 3.3.3A.C CEACs (Digital)
Change
Description:
Deleted Action 3.3.3B.C CEACs (Digital)
Change
Description:
Deleted Action 3.3.3B.C Bases CEACs (Digital)
Change
Description:
Deleted Action 3.3.3A.C Bases CEACs (Digital)
Change
Description:
Deleted Action 3.3.3B.D CEACs (Digital)
Change
Description:
Deleted Action 3.3.3A.D CEACs (Digital)
Change
Description:
Deleted Action 3.3.3B.D Bases CEACs (Digital)
Change
Description:
Deleted 18-Jun-13 Traveler Rev. 3. Copyright(C) 2013, EXCEL Services Corporation. Use by EXCEL Services associates, utility clients, and the U.S. Nuclear Regulatory Commission is granted. All other use without written permission is prohibited.
CEOG-180, Rev. 0 TSTF-536, Rev. 0 Action 3.3.3A.D Bases CEACs (Digital)
Change
Description:
Deleted Action 3.3.3B.E CEACs (Digital)
Change
Description:
Renamed C Action 3.3.3A.E CEACs (Digital)
Change
Description:
Renamed C Action 3.3.3B.E Bases CEACs (Digital)
Change
Description:
Renamed C Action 3.3.3A.E Bases CEACs (Digital)
Change
Description:
Renamed C SR 3.3.3A.2 CEACs (Digital)
Change
Description:
Deleted SR 3.3.3B.2 CEACs (Digital)
Change
Description:
Deleted SR 3.3.3A.2 Bases CEACs (Digital)
Change
Description:
Deleted SR 3.3.3B.2 Bases CEACs (Digital)
Change
Description:
Deleted SR 3.3.3A.3 CEACs (Digital)
Change
Description:
Renamed 3.3.3.2 SR 3.3.3B.3 CEACs (Digital)
Change
Description:
Renamed 3.3.3.2 SR 3.3.3A.3 Bases CEACs (Digital)
Change
Description:
Renamed 3.3.3.2 SR 3.3.3B.3 Bases CEACs (Digital)
Change
Description:
Renamed 3.3.3.2 SR 3.3.3A.4 CEACs (Digital)
Change
Description:
Renamed SR 3.3.3.3 SR 3.3.3B.4 CEACs (Digital)
Change
Description:
Renamed SR 3.3.3.3 SR 3.3.3A.4 Bases CEACs (Digital)
Change
Description:
Renamed SR 3.3.3.3 SR 3.3.3B.4 Bases CEACs (Digital)
Change
Description:
Renamed SR 3.3.3.3 SR 3.3.3A.5 CEACs (Digital)
Change
Description:
Renamed SR 3.3.3.4 18-Jun-13 Traveler Rev. 3. Copyright(C) 2013, EXCEL Services Corporation. Use by EXCEL Services associates, utility clients, and the U.S. Nuclear Regulatory Commission is granted. All other use without written permission is prohibited.
CEOG-180, Rev. 0 TSTF-536, Rev. 0 SR 3.3.3B.5 CEACs (Digital)
Change
Description:
Renamed SR 3.3.3.4 SR 3.3.3A.5 Bases CEACs (Digital)
Change
Description:
Renamed SR 3.3.3.4 SR 3.3.3B.5 Bases CEACs (Digital)
Change
Description:
Renamed SR 3.3.3.4 SR 3.3.3A.6 CEACs (Digital)
Change
Description:
Renamed SR 3.3.3.5 SR 3.3.3B.6 CEACs (Digital)
Change
Description:
Renamed SR 3.3.3.5 SR 3.3.3B.6 Bases CEACs (Digital)
Change
Description:
Renamed SR 3.3.3.5 SR 3.3.3A.6 Bases CEACs (Digital)
Change
Description:
Renamed SR 3.3.3.5 SR 3.3.4.2 Bases RPS Logic and Trip Initiation (Digital)
SR 3.3.5A.5 Bases ESFAS Instrumentation (Digital)
SR 3.3.5B.5 Bases ESFAS Instrumentation (Digital) 18-Jun-13 Traveler Rev. 3. Copyright(C) 2013, EXCEL Services Corporation. Use by EXCEL Services associates, utility clients, and the U.S. Nuclear Regulatory Commission is granted. All other use without written permission is prohibited.
TSTF-536, Rev. 0
- 1. Summary Description The proposed change revises the NUREG-1432 Technical Specifications (TS) to remove Actions and Surveillance Requirements (SRs) associated with the Core Protection Calculators (CPCs) and Control Element Assembly Calculators (CEACs) that are not related to Operability. Specific issues include required entry into Conditions related to CPC cabinet high temperature or with three or more CEAC auto restarts during a 12-hour period even though the CPCs or CEACs are Operable and associated SRs to check the CPC and CEAC auto restart count that do not provide acceptance criteria based on confirming that the Limiting Condition for Operation (LCO) is met.
This Traveler revises NUREG-1432:
(both 3.3.1A, "Without Setpoint Control Program," and 3.3.1B, "With Setpoint Control Program), Actions E and F and SR 3.3.1.3 are deleted. Subsequent Conditions and SRs are renumbered and the Bases are revised to reflect the changes to the specifications.
- TS 3.3.3, "Control Element Assembly Calculators (CEACs) (Digital)" (both 3.3.3A, "Without Setpoint Control Program," and 3.3.3B, "With Setpoint Control Program),
Actions C and D and SR 3.3.3.2 are deleted. Subsequent Conditions and SRs are renumbered and the Bases are revised to reflect the changes to the specifications.
In addition, the Bases of the following Specifications are revised to reflect changes in the Surveillance Requirement numbering:
(both 3.3.2A, "Without Setpoint Control Program," and 3.3.2B, "With Setpoint Control Program);
- TS 3.3.5, "Engineered Safety Features Actuation System (ESFAS) Instrumentation (Digital)" (both 3.3.5A, "Without Setpoint Control Program," and 3.3.5B, "With Setpoint Control Program)
A model application is included in the proposed change. The model may be used by licensees desiring to adopt TSTF 536 following publication by the NRC of the Notice of Availability in the Federal Register.
- 2. Detailed Description The CPCs perform the calculations required to derive the Departure from Nucleate Boiling Ratio (DNBR) and Local Power Density (LPD) parameters that are associated with RPS trip signals. Four separate CPCs perform the calculations independently, one for each of the four RPS channels. The CPCs provide outputs to drive display indications (DNBR margin, LPD margin, and calibrated neutron flux power levels) and provide DNBR - Low and LPD - High pre-trip and trip signals. The CPC channel outputs for the DNBR - Low and LPD - High trips operate contacts in the Matrix Logic in a manner identical to the other RPS trips.
Page 2
TSTF-536, Rev. 0 Each CPC receives the following inputs:
- Hot leg and cold leg temperatures,
- Pressurizer pressure,
- Reactor coolant pump speed,
- Excore neutron flux levels,
- Target CEA positions, and
- CEAC penalty factors.
Each CPC is programmed with "addressable constants." These are various alignment values, correction factors, etc., that are required for the CPC computations. They can be accessed for display or revision, as necessary.
The CPCs use this constant and variable information to perform a number of calculations. These include the calculation of CEA group and subgroup deviations (and the assignment of conservative penalty factors), correction and calculation of average axial power distribution (APD) (based on excore flux levels and CEA positions),
calculation of coolant flow (based on pump speed), and calculation of calibrated average power level (based on excore flux levels and T power).
The DNBR calculation considers primary pressure, inlet temperature, coolant flow, average power, APD, radial peaking factors, and CEA deviation penalty factors from the CEACs to calculate the state of the limiting (hot) coolant channel in the core. A DNBR-Low trip occurs when the calculated value reaches the minimum DNBR trip setpoint.
The LPD calculation considers APD, average power, radial peaking factors (based upon target CEA position), and CEAC penalty factors to calculate the current value of compensated peak power density. An LPD-High trip occurs when the calculated value reaches the trip setpoint. The four CPC channels provide input to the four DNBR-Low and four LPD-High RPS trip channels. They effectively act as the sensor (using many inputs) for these trips.
The CEACs perform the calculations required to determine the position of CEAs within their subgroups for the CPCs. Two independent CEACs compare the position of each CEA to its subgroup position. If a deviation is detected by either CEAC, an annunciator sounds and appropriate "penalty factors" are transmitted to all CPCs. These penalty factors conservatively adjust the effective operating margins to the DNBR-Low and LPD-High trips. Each CEAC also drives a display in the control room, which is switchable between CEACs. The display shows individual CEA positions and current values of the penalty factors from the selected CEAC.
Each CEA has two separate reed switch assemblies mounted outside the reactor coolant pressure boundary. Each of the two CEACs receives CEA position input from one of the two reed switch position transmitters on each CEA, so that the position of all CEAs is independently monitored by both CEACs.
TS 3.3.1, Condition E applies if any CPC cabinet receives a high temperature alarm.
There is one temperature sensor in each of the four CPC bays. Since CPC bays B and C also house CEAC calculators 1 and 2, respectively, a high temperature in either of these bays may also indicate a problem with the associated CEAC. The Bases for TS Page 3
TSTF-536, Rev. 0 3.3.1, Action E.1 states that if the CPC cabinet high temperature alarm is received, it is possible for the CPC to be affected and not be completely reliable. Required Action E.1 requires a Channel Function Test (CFT) be performed on the affected CPC within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />.
TS 3.3.1, Condition F applies if an Operable CPC has three or more auto restarts in a 12-hour period. CPCs and CEACs will attempt to auto restart if they detect a fault condition, such as a calculator malfunction or loss of power. A successful auto restart restores the calculator to operation. The TS 3.3.1, Action F.1 Bases state that excessive auto restarts might be indicative of a calculator problem and if a non-bypassed CPC has three or more auto restarts, it may not be completely reliable. Required Action F.1 requires a CFT be performed on the affected CPC within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.
TS 3.3.3 Condition C applies if the CPC channel B or C cabinet receives a high temperature alarm. There is one temperature sensor in each of the four CPC bays.
Since CPC bays B and C also house CEAC calculators 1 and 2, respectively, a high temperature in either of these bays may also indicate a problem with the associated CEAC. The Bases for TS 3.3.3, Action C.1 states that if the CPC cabinet high temperature alarm is received, it is possible for the CPC to be affected and not be completely reliable. Required Action C.1 requires a CFT be performed on the affected CEAC within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />.
TS 3.3.3 Condition D applies if an Operable CEAC has three or more auto restarts in a 12-hour period. CPCs and CEACs will attempt to auto restart if they detect a fault condition such as a calculator malfunction or loss of power. A successful auto restart restores the calculator to operation. The TS 3.3.3 Action D.1 Bases state that excessive auto restarts might be indicative of a calculator problem. Required Action D.1 requires a CFT be performed on the affected CEAC within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.
SR 3.3.1.3 requires a check of the CPC auto-restart count every 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> (or in accordance with the Surveillance Frequency Control Program) to monitor the CPC and CEAC for normal operation. As stated in the SR 3.3.3.2 Bases, if three or more auto restarts of a non-bypassed CPC occur within a 12-hour period, the CPC may not be completely reliable.
SR 3.3.3.2 requires a check of the CEAC auto-restart count every 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> (or in accordance with the Surveillance Frequency Control Program) to monitor the CPC and CEAC for normal operation. As stated in the SR 3.3.3.2 Bases, if three or more auto restarts of a non-bypassed CPC occur within a 12-hour period, the CPC may not be completely reliable.
- 3. Technical Evaluation CPC Cabinet High Temperature LCO 3.3.1 requires four RPS trip and bypass removal channels for each Function in Table 3.3.1-1 shall be Operable. LCO 3.3.3 requires that two CEACs shall be Operable.
NUREG-1432 does not contain an SR to verify that CPC cabinet temperature is within limits. Entry into TS 3.3.1 Condition E and TS 3.3.2 Condition C result from the receipt of a CPC Cabinet Temperature Hi-Hi annunciator alarm (typically set at approximately 101F) in the control room, or by Operator rounds determining that local indicators Page 4
TSTF-536, Rev. 0 indicate cabinet temperature is greater than the alarm limit. The associated TS 3.3.1 Action Bases state that if a CPC cabinet high temperature alarm is received, it is possible for the CPC to be affected and not be completely reliable. The associated TS 3.3.3 Action Bases state that if a CPC channel B or channel C cabinet high temperature alarm is received, it is possible for the CEAC to be affected and not be completely reliable. However, in neither case is the CPC or CEAC considered inoperable due to the high CPC cabinet temperature. The Actions require performing a CFT within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> to confirm that the associated CPC or CEAC is operable.
For CPC Cabinet high temperature alarms, Operability is confirmed by the CFT.
Because high cabinet temperature does not necessarily render the CPC or CEAC inoperable, entry into a Condition should not be required. When Control Room annunciators are received, the Operations staff is required to investigate the cause of the alarm to determine if the alarming condition results in an inoperable component.
This is true for the CPCs and CEACs as well. CPCs and CEACs should be treated no differently than other components. Placing the response to a high cabinet temperature alarm under licensee control is consistent with similar requirements for other alarm-only components.
With this change, if a CPC cabinet temperature Hi-Hi alarm is received, the plant staff would investigate the cause of the alarm and determine the effect of the condition on the Operability of the associated CPC or CEAC. If the associated CPC or CEAC is determined to be inoperable, then the appropriate TS Condition would be entered.
CPC Auto Restart Count LCO 3.3.1 requires four RPS trip and bypass removal channels for each Function in Table 3.3.1-1 to be Operable. LCO 3.3.3 requires that two CEACs be Operable.
SR 3.3.1.3 and SR 3.3.3.2 require a check of the CPC auto-restart count every 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />.
However, in neither case is an acceptance criteria specified in the SR. Entry into TS 3.3.1, Condition F, or TS 3.3.3, Condition D, requires performing a Channel Functional Test within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> on the affected CPC or CEAC, respectively. Auto restarts are checked by log readings taken every 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />; typically by checking the "System Auto Restart Log (CPC and CEAC)." The associated Bases for TS Actions F.1 and TS 3.3.3, Actions D.1, state that a successful restart restores the calculator to operation. The associated Bases go on to state that excessive auto restarts might be indicative of a calculator problem, indicating that the CPC or CEAC, as appropriate, may not be completely reliable. However, in neither case are the CPC or CEAC considered inoperable due to excessive auto restarts.
Both CPCs and CEACs have the ability to restart their programs in an attempt to recover from an error. This ability is called "auto restart." CPCs and CEACs will perform an auto restart after detection of:
- Machine malfunction
- Fixed Point divide fault
- Floating point arithmetic fault
- Illegal instruction
- Scaled fixed point overflow Page 5
TSTF-536, Rev. 0 If a CPC performs an auto restart, it will be indicated by a channel trip because this is one of the Auxiliary Trips associated with CPCs. It will also cause a CPC CHANNEL FAILURE alarm and the CPC Trouble light on the Operators module will be lit. If a CEAC performs an auto restart, it will be indicated by a CEAC FAILURE alarm. In addition, the CPC Trouble light and the CEAC Trouble lights will be lit on the Operators module.
If a CPC or CEAC successfully restarts, it is Operable. Excessive auto restarts can be indicative of a reliability issue; however, as long as the CPC or CEAC is auto restarted, there is no immediate Operability concern. Placing the response to CPC CHANNEL FAILURE alarm or CEAC FAILURE alarm under licensee control is consistent with similar requirements for other alarm-only components.
With this change, if a CPC or CEAC alarms are received, the Operations staff would investigate the cause of the alarm and determine the effect of the condition on the Operability of the associated CPC or CEAC. If the associated CPC or CEAC is determined to be inoperable, then the appropriate TS Condition would be entered. Note that the CPCs and CEACs continue to be periodically testing in accordance with the Surveillance Requirements.
Title 10 of the Code of Federal Regulations (10 CFR), Part 50, Section 50.36(c)(3) states, "Surveillance requirements are requirements relating to test, calibration, or inspection to assure that the necessary quality of systems and components is maintained, that facility operation will be within safety limits, and that the limiting conditions for operation will be met." (emphasis added.) As discussed above, the SRs proposed to be removed only require determining the CPC and CEAC auto restart count. There are no acceptance criteria for the SRs. Therefore, the SRs do not confirm that the limiting condition for operation is met, but only indicate the potential that the system is degraded and that more investigation is needed. Therefore, these SRs are inconsistent with the purpose of SRs as described in the regulation and should be removed.
10 CFR 50, Appendix B, Criterion XVI, "Corrective Action," states:
"Measures shall be established to assure that conditions adverse to quality, such as failures, malfunctions, deficiencies, deviations, defective material and equipment, and nonconformances are promptly identified and corrected. In the case of significant conditions adverse to quality, the measures shall assure that the cause of the condition is determined and corrective action taken to preclude repetition." (emphasis added).
Unexplained restarts of a CPC or CEAC or high cabinet temperature alarms will be evaluated in accordance with Criterion XVI and would be considered a significant condition adverse to quality as it is associated with the RPS. Licensee processes will require an evaluation of the cause of the issue and of the extent of condition in order to ensure that corrective actions will preclude repetition. The NRC routinely inspects licensee's Quality Assurance and corrective action programs.
LCO 3.0.2 states, in part, "Upon discovery of a failure to meet an LCO, the Required Actions of the associated Conditions shall be met" As discussed above, the Surveillances on CPC and CEAC auto restarts do not contain acceptance criteria and do not confirm that the LCO is met. Neither the CPC and CEAC auto restarts nor the CPC Page 6
TSTF-536, Rev. 0 cabinet high temperature indicate that the systems are inoperable or that the LCO is not met. As a result, the Conditions and Required Actions are inconsistent with the LCO 3.0.2 requirement of when to follow Required Actions and should be removed.
The proposed change is similar to those approved in TSTF-110-A, "Delete SR Frequencies based on inoperable alarms," in that the cabinet high temperature alarm and auto restart alarms serve to inform the Operator of a potential problem. The alarms serve as indication only. Procedures dictate the appropriate actions to be taken under these conditions. These procedures ensure that an inoperable condition will be detected and the appropriate TS Condition will be entered.
This change is acceptable because:
- 1. There are sufficient alarms and indicators for the Operator to be informed of the potential for a degraded condition;
- 2. 10 CFR 50, Appendix B, the Operability Determination Process, and plant procedures will direct the appropriate actions to ensure Operability of the CPCs and CEACs;
- 3. The affected CPC or CEAC is considered Operable following a successful auto restart or on a high cabinet temperature alarm unless it is determined that the CPC or CEAC is inoperable; and
- 4. Placing these requirements under licensee control is consistent with the treatment of other alarms in the TS.
- 4. Regulatory Evaluation 4.1 Applicable Regulatory Requirements/Criteria Title 10 of the Code of Federal Regulations (10 CFR), Part 50, Section 50.36(c) describes the required contents of Technical Specifications. The proposed change to the Improved Standard Technical Specifications eliminates requirements that do not fall under the regulatory description and is consistent with the usage rules of the Technical Specifications.
Based on the considerations discussed above, (1) there is reasonable assurance that the health and safety of the public will not be endangered by operation in the proposed manner, (2) such activities will be conducted in compliance with the Commissions regulations, and (3) the approval of the proposed change will not be inimical to the common defense and security or to the health and safety of the public.
4.2 Precedent TSTF-110-A, "Delete SR Frequencies based on inoperable alarms," was approved by the NRC on October 3, 1997. TSTF-110 deleted several surveillance Frequencies based on inoperability of monitors (rod position deviation monitor, rod insertion limit monitor, axial flux difference monitor, and quadrant power tilt radio monitor). These alarms and monitors do not directly relate to LCO limits since they act only as notification to the operator that further investigation is needed.
Page 7
TSTF-536, Rev. 0 In addition to being incorporated in many full conversions to the Improved Technical Specifications, TSTF-110 was approved in a plant-specific amendments for Beaver Valley on August 30, 1999, and R.E. Ginna on February 15, 2006.
4.3 No Significant Hazards Consideration Determination The TSTF has evaluated whether or not a significant hazards consideration is involved with the proposed generic change by focusing on the three standards set forth in 10 CFR 50.92, "Issuance of amendment," as discussed below:
- 1. Does the proposed change involve a significant increase in the probability or consequences of an accident previously evaluated?
Response: No.
The proposed change removes Surveillances and Actions associated with Core Protection Calculator (CPC) cabinet high temperature alarms and CPC and Control Element Assembly Calculators (CEAC) automatic restarts. The CPC cabinet high temperature alarm and CEAC restarts are not initiators to any accidents previously evaluated. The CPC and CEAC are used to maintain the core power distribution within the initial assumptions of the accident analysis, and therefore are indirectly related to the consequences of accidents previously evaluated. However, the CPC cabinet high temperature alarm and CEAC automatic restart count do not render the CPC or CEAC inoperable, and the Surveillances and Actions only serve to alert the operator that additional testing may be needed. As the Operability of the CPC and CEAC are not affected by elimination of the alarm and automatic restart actions, the consequences of any accident previously evaluated are not significantly increased.
Therefore, it is concluded that this change does not involve a significant increase in the probability or consequences of an accident previously evaluated.
- 2. Does the proposed change create the possibility of a new or different kind of accident from any accident previously evaluated?
Response: No.
The proposed change removes Surveillances and Actions associated with CPC cabinet high temperature alarms and CPC and CEAC automatic restarts. The proposed change does not involve a physical alteration (no new or different type of equipment will be installed) or a change in the methods governing normal plant operations.
Therefore, it is concluded that this change does not create the possibility of a new or different kind of accident from any accident previously evaluated.
Page 8
TSTF-536, Rev. 0
- 3. Does the proposed change involve a significant reduction in a margin of safety?
Response: No.
The proposed change removes Surveillances and Actions associated with CPC cabinet high temperature alarms and CPC and CEAC automatic restarts. The proposed change places the operator response to a CPC cabinet high temperature alarm or a CPC or CEAC automatic restart alarm under licensee control, consistent with the treatment of other alarms. The requirement that the CPC and CEAC be Operable is unaffected. The only effect on the margin of safety is to place the operator actions under licensee control instead of specifying the trouble shooting activities in the Technical Specifications. This is consistent with licensee actions in response to other alarms and does not have a significant effect on safety.
Therefore, it is concluded that this change does not involve a significant reduction in a margin of safety.
4.4 Conclusions In conclusion, based on the considerations discussed above, (1) there is reasonable assurance that the health and safety of the public will not be endangered by operation in the proposed manner, (2) such activities will be conducted in compliance with the Commissions regulations, and (3) the issuance of the amendment based on the proposed changes will not be inimical to the common defense and security or to the health and safety of the public.
- 5. Environmental Consideration A review has determined that the proposed change would change a requirement with respect to installation or use of a facility component located within the restricted area, as defined in 10 CFR 20, or would change an inspection or surveillance requirement.
However, the proposed change does not involve (i) a significant hazards consideration, (ii) a significant change in the types or significant increase in the amounts of any effluents that may be released offsite, or (iii) a significant increase in individual or cumulative occupational radiation exposure. Accordingly, the proposed change meets the eligibility criterion for categorical exclusion set forth in 10 CFR 51.22(c)(9). Therefore, pursuant to 10 CFR 51.22(b), no environmental impact statement or environmental assessment need be prepared in connection with the proposed change.
- 6. References
- 1. TSTF-110-A, Revision 2, "Delete SR frequencies based on inoperable alarms,"
approved October 3, 1997.
Page 9
TSTF-536, Rev. 0 Model Application
TSTF-536, Rev. 0
[DATE] 10 CFR 50.90 ATTN: Document Control Desk U.S. Nuclear Regulatory Commission Washington, DC 20555-0001
SUBJECT:
PLANT NAME DOCKET NO. 50-[xxx]
APPLICATION TO REVISE TECHNICAL SPECIFICATIONS TO ADOPT TSTF-536, "RESOLVE CE DIGITAL TS INCONSISTENCIES REGARDING CPCS AND CEACS"
Dear Sir or Madam:
Pursuant to 10 CFR 50.90, [LICENSEE] is submitting a request for an amendment to the Technical Specifications (TS) for [PLANT NAME, UNIT NOS.].
The proposed amendment removes Surveillance Requirementss and Actions associated with Core Protection Calculator (CPC) cabinet high temperature alarms and CPC and Control Element Assembly Calculators (CEAC) automatic restarts as described in TSTF-536, Revision 0, "Resolve CE Digital TS Inconsistencies Regarding CPCs and CEACs." provides a description and assessment of the proposed changes. provides the existing TS pages marked up to show the proposed changes. provides revised (clean) TS pages. provides existing TS Bases pages marked to show the proposed changes (for information only).
Approval of the proposed amendment is requested by [date]. Once approved, the amendment shall be implemented within [XX] days.
In accordance with 10 CFR 50.91, a copy of this application, with attachments, is being provided to the designated [STATE] Official.
12
TSTF-536, Rev. 0
[In accordance with 10 CFR 50.30(b), a license amendment request must be executed in a signed original under oath or affirmation. This can be accomplished by attaching a notarized affidavit confirming the signature authority of the signatory, or by including the following statement in the cover letter: "I declare under penalty of perjury that the foregoing is true and correct. Executed on (date)." The alternative statement is pursuant to 28 USC 1746. It does not require notarization.]
If you should have any questions regarding this submittal, please contact [NAME, TELEPHONE NUMBER].
Sincerely,
[Name, Title]
Attachments: 1. Description and Assessment
- 2. Proposed Technical Specification Changes (Mark-Up)
- 3. Revised Technical Specification Pages
- 4. Proposed Technical Specification Bases Changes (Mark-Up)
(for information only)
{Note: These attachments are not included in this model application.}
cc: NRC Project Manager NRC Regional Office NRC Resident Inspector State Contact 13
TSTF-536, Rev. 0 ATTACHMENT 1 - DESCRIPTION AND ASSESSMENT
1.0 DESCRIPTION
The proposed amendment removes Surveillances and Actions associated with Core Protection Calculator (CPC) cabinet high temperature alarms and CPC and Control Element Assembly Calculators (CEAC) automatic restarts as described in TSTF-536, Revision 0, "Resolve CE Digital TS Inconsistencies Regarding CPCs and CEACs."
2.0 ASSESSMENT 2.1 Applicability of Published Safety Evaluation
[LICENSEE] has reviewed the model safety evaluation dated [DATE] as part of the Federal Register Notice of Availability. This review included a review of the NRC staffs evaluation, as well as the information provided in TSTF-536. [As described in the subsequent paragraphs, ][LICENSEE] has concluded that the justifications presented in the TSTF-536 proposal and the model safety evaluation prepared by the NRC staff are applicable to [PLANT, UNIT NOS.] and justify this amendment for the incorporation of the changes to the [PLANT] TS.
2.2 Optional Changes and Variations
[LICENSEE is not proposing any variations or deviations from the TS changes described in the TSTF-536, Revision 0, or the NRC staffs model safety evaluation dated [DATE].] [LICENSEE is proposing the following variations from the TS changes described in the TSTF-536, Revision 0, or the applicable parts of the NRC staffs model safety evaluation dated [DATE].]
[The [PLANT] TS utilize different [numbering][and][titles] than the Standard Technical Specifications on which TSTF-536 was based. Specifically, [describe differences between the plant-specific TS numbering and/or titles and the TSTF-536 numbering and titles.] These differences are administrative and do not affect the applicability of TSTF-536 to the [PLANT] TS.]
3.0 REGULATORY ANALYSIS
3.1 No Significant Hazards Consideration Determination
[LICENSEE] requests adoption of TSTF-536, Revision 0, "Resolve CE Digital TS Inconsistencies Regarding CPCs and CEACs," which is an approved change to the standard technical specifications (STS), into the [PLANT NAME, UNIT NOS]
technical specifications (TS). The proposed amendment removes Surveillances and Actions associated with Core Protection Calculator (CPC) cabinet high temperature alarms and CPC and Control Element Assembly Calculators (CEAC) automatic restarts.
14
TSTF-536, Rev. 0
[LICENSEE] has evaluated whether or not a significant hazards consideration is involved with the proposed amendment(s) by focusing on the three standards set forth in 10 CFR 50.92, "Issuance of amendment," as discussed below:
- 1. Does the proposed change involve a significant increase in the probability or consequences of an accident previously evaluated?
Response: No.
The proposed change removes Surveillances and Actions associated with Core Protection Calculator (CPC) cabinet high temperature alarms and CPC and Control Element Assembly Calculators (CEAC) automatic restarts. The CPC cabinet high temperature alarm and CEAC restarts are not initiators to any accidents previously evaluated. The CPC and CEAC are used to maintain the core power distribution within the initial assumptions of the accident analysis, and therefore are indirectly related to the consequences of accidents previously evaluated. However, the CPC cabinet high temperature alarm and CEAC automatic restart count do not render the CPC or CEAC inoperable, and the Surveillances and Actions only serve to alert the operator that additional testing may be needed. As the Operability of the CPC and CEAC are not affected by elimination of the alarm and automatic restart actions, the consequences of any accident previously evaluated are not significantly increased.
Therefore, it is concluded that this change does not involve a significant increase in the probability or consequences of an accident previously evaluated.
- 2. Does the proposed change create the possibility of a new or different kind of accident from any accident previously evaluated?
Response: No.
The proposed change removes Surveillances and Actions associated with CPC cabinet high temperature alarms and CPC and CEAC automatic restarts. The proposed change does not involve a physical alteration (no new or different type of equipment will be installed) or a change in the methods governing normal plant operations.
Therefore, it is concluded that this change does not create the possibility of a new or different kind of accident from any accident previously evaluated.
- 3. Does the proposed change involve a significant reduction in a margin of safety?
Response: No.
The proposed change removes Surveillances and Actions associated with CPC cabinet high temperature alarms and CPC and CEAC automatic restarts. The proposed change places the operator response to a CPC cabinet high temperature alarm or a CPC or CEAC automatic restart alarm under licensee control, consistent with the treatment of other alarms. The requirement that the CPC and CEAC be Operable is unaffected. The only effect on the margin of safety is to place the operator actions under licensee control instead of specifying the trouble shooting 15
TSTF-536, Rev. 0 activities in the Technical Specifications. This is consistent with licensee actions in response to other alarms and does not have a significant effect on safety.
Therefore, it is concluded that this change does not involve a significant reduction in a margin of safety.
Based on the above, [LICENSEE] concludes that the proposed change presents no significant hazards consideration under the standards set forth in 10 CFR [LICENSEE] has evaluated whether or not a significant hazards consideration is involved with the proposed amendment(s) by focusing on the three standards set forth in 10 CFR 50.92, "Issuance of amendment," as discussed below: 50.92(c), and, accordingly, a finding of "no significant hazards consideration" is justified.
3.2 Conclusions In conclusion, based on the considerations discussed above, (1) there is reasonable assurance that the health and safety of the public will not be endangered by operation in the proposed manner, (2) such activities will be conducted in compliance with the Commissions regulations, and (3) the issuance of the amendment will not be inimical to the common defense and security or to the health and safety of the public.
4.0 ENVIRONMENTAL EVALUATION The proposed change would change a requirement with respect to installation or use of a facility component located within the restricted area, as defined in 10 CFR 20, or would change an inspection or surveillance requirement. However, the proposed change does not involve (i) a significant hazards consideration, (ii) a significant change in the types or significant increase in the amounts of any effluents that may be released offsite, or (iii) a significant increase in individual or cumulative occupational radiation exposure. Accordingly, the proposed change meets the eligibility criterion for categorical exclusion set forth in 10 CFR 51.22(c)(9). Therefore, pursuant to 10 CFR 51.22(b), no environmental impact statement or environmental assessment need be prepared in connection with the proposed change.
16
TSTF-536, Rev. 0 Improved Technical Specifications Mark-Up 17
TSTF-536, Rev. 0 RPS Instrumentation - Operating (Digital) (Without Setpoint Control Program) 3.3.1A 3.3 INSTRUMENTATION (Digital) 3.3.1A Reactor Protective System (RPS) Instrumentation - Operating (Digital) (Without Setpoint Control Program)
LCO 3.3.1A Four RPS trip and bypass removal channels for each Function in Table 3.3.1-1 shall be OPERABLE.
APPLICABILITY: According to Table 3.3.1-1.
ACTIONS
NOTE-----------------------------------------------------------
Separate Condition entry is allowed for each RPS Function.
CONDITION REQUIRED ACTION COMPLETION TIME A. One or more Functions A.1 Place channel in bypass or 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> with one automatic RPS trip.
trip channel inoperable.
AND A.2 Restore channel to Prior to entering OPERABLE status. MODE 2 following next MODE 5 entry B. One or more Functions B.1 Place one channel in 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> with two automatic RPS bypass and the other in trip.
trip channels inoperable.
C. One or more Functions C.1 Disable bypass channel. 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> with one automatic bypass removal channel OR inoperable.
Combustion Engineering STS 3.3.1A-1 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Operating (Digital) (Without Setpoint Control Program) 3.3.1A ACTIONS (continued)
CONDITION REQUIRED ACTION COMPLETION TIME C.2.1 Place affected automatic 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> trip channel in bypass or trip.
AND C.2.2 Restore bypass removal Prior to entering channel and associated MODE 2 following automatic trip channel to next MODE 5 entry OPERABLE status.
D. One or more Functions D.1 Disable bypass channels. 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> with two automatic bypass removal OR channels inoperable.
D.2 Place one affected 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> automatic trip channel in bypass and place the other in trip.
E. One or more core E.1 Perform CHANNEL 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> protection calculator FUNCTIONAL TEST on (CPC) channels with a affected CPC.
cabinet high temperature alarm.
F. One or more CPC F.1 Perform CHANNEL 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> channels with three or FUNCTIONAL TEST on more autorestarts during affected CPC.
a 12 hour1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> period.
EG. Required Action and EG.1 Be in MODE 3. 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> associated Completion Time not met.
Combustion Engineering STS 3.3.1A-2 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Operating (Digital) (Without Setpoint Control Program) 3.3.1A SURVEILLANCE REQUIREMENTS
NOTE-----------------------------------------------------------
Refer to Table 3.3.1-1 to determine which SR shall be performed for each RPS Function.
SURVEILLANCE FREQUENCY SR 3.3.1.1 Perform a CHANNEL CHECK of each RPS [ 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> instrument channel except Loss of Load.
OR In accordance with the Surveillance Frequency Control Program ]
SR 3.3.1.2 -------------------------------NOTE------------------------------
Not required to be performed until 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> after THERMAL POWER 70% RTP.
Verify total Reactor Coolant System (RCS) flow rate [ 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> as indicated by each CPC is less than or equal to the RCS total flow rate. OR If necessary, adjust the CPC addressable constant In accordance flow coefficients such that each CPC indicated flow with the is less than or equal to the RCS flow rate. Surveillance Frequency Control Program ]
SR 3.3.1.3 Check the CPC auto restart count. [ 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> OR In accordance with the Surveillance Frequency Control Program ]
Combustion Engineering STS 3.3.1A-3 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Operating (Digital) (Without Setpoint Control Program) 3.3.1A SURVEILLANCE REQUIREMENTS (continued)
SURVEILLANCE FREQUENCY SR 3.3.1.34 ------------------------------NOTES-----------------------------
- 1. Not required to be performed until 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> after THERMAL POWER 20% RTP.
- 2. The daily calibration may be suspended during PHYSICS TESTS, provided the calibration is performed upon reaching each major test power plateau and prior to proceeding to the next major test power plateau.
Perform calibration (heat balance only) and adjust [ 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> the linear power level signals and the CPC addressable constant multipliers to make the CPC OR T power and CPC nuclear power calculations agree with the calorimetric, if the absolute difference In accordance is [2]%. with the Surveillance Frequency Control Program ]
SR 3.3.1.45 -------------------------------NOTE------------------------------
Not required to be performed until 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> after THERMAL POWER 70% RTP.
Verify total RCS flow rate indicated by each CPC is [ 31 days less than or equal to the RCS flow determined by calorimetric calculations. OR In accordance with the Surveillance Frequency Control Program ]
Combustion Engineering STS 3.3.1A-4 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Operating (Digital) (Without Setpoint Control Program) 3.3.1A SURVEILLANCE REQUIREMENTS (continued)
SURVEILLANCE FREQUENCY SR 3.3.1.56 -------------------------------NOTE------------------------------
Not required to be performed until 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> after THERMAL POWER 15% RTP.
Verify linear power subchannel gains of the excore [ 31 days detectors are consistent with the values used to establish the shape annealing matrix elements in OR the CPCs.
In accordance with the Surveillance Frequency Control Program ]
SR 3.3.1.67 ------------------------------NOTES-----------------------------
- 1. The CPC CHANNEL FUNCTIONAL TEST shall include verification that the correct values of addressable constants are installed in each OPERABLE CPC.
- 2. Not required to be performed for logarithmic power level channels until 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> after reducing logarithmic power below 1E-4% and only if reactor trip circuit breakers (RTCBs) are closed.
Perform CHANNEL FUNCTIONAL TEST on each [ 92 days channel except Loss of Load and power range neutron flux. OR In accordance with the Surveillance Frequency Control Program ]
Combustion Engineering STS 3.3.1A-5 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Operating (Digital) (Without Setpoint Control Program) 3.3.1A SURVEILLANCE REQUIREMENTS (continued)
SURVEILLANCE FREQUENCY SR 3.3.1.78 -------------------------------NOTE------------------------------
Neutron detectors are excluded from the CHANNEL CALIBRATION.
Perform CHANNEL CALIBRATION of the power [ 92 days range neutron flux channels.
OR In accordance with the Surveillance Frequency Control Program ]
SR 3.3.1.89 -------------------------------NOTE------------------------------
[ Not required to be performed until 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> after THERMAL POWER 55% RTP.
Perform CHANNEL FUNCTIONAL TEST for Loss of [ 92 days Load Function.
OR In accordance with the Surveillance Frequency Control Program ]
Combustion Engineering STS 3.3.1A-6 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Operating (Digital) (Without Setpoint Control Program) 3.3.1A SURVEILLANCE REQUIREMENTS (continued)
SURVEILLANCE FREQUENCY SR 3.3.1.910 -------------------------------NOTE------------------------------
Neutron detectors are excluded from CHANNEL CALIBRATION.
Perform CHANNEL CALIBRATION on each [ [18] months channel, including bypass removal functions.
OR In accordance with the Surveillance Frequency Control Program ]
SR 3.3.1.1011 Perform a CHANNEL FUNCTIONAL TEST on each [ [18] months CPC channel.
OR In accordance with the Surveillance Frequency Control Program ]
SR 3.3.1.1112 Using the incore detectors, verify the shape Once after each annealing matrix elements to be used by the CPCs. refueling prior to exceeding 70% RTP SR 3.3.1.1213 Perform a CHANNEL FUNCTIONAL TEST on each Once within automatic bypass removal function. 92 days prior to each reactor startup Combustion Engineering STS 3.3.1A-7 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Operating (Digital) (Without Setpoint Control Program) 3.3.1A SURVEILLANCE REQUIREMENTS (continued)
SURVEILLANCE FREQUENCY SR 3.3.1.1314 -------------------------------NOTE------------------------------
Neutron detectors are excluded.
Verify RPS RESPONSE TIME is within limits. [ [18] months on a STAGGERED TEST BASIS OR In accordance with the Surveillance Frequency Control Program ]
Combustion Engineering STS 3.3.1A-8 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Operating (Digital) (Without Setpoint Control Program) 3.3.1A Table 3.3.1-1 (page 1 of 4)
Reactor Protective System Instrumentation APPLICABLE MODES OR OTHER SPECIFIED SURVEILLANCE FUNCTION CONDITIONS REQUIREMENTS ALLOWABLE VALUE
- 1. Linear Power Level - High 1,2 SR 3.3.1.1 [111.3]% RTP SR 3.3.1.34 SR 3.3.1.56 SR 3.3.1.67(a)(b)
SR 3.3.1.78(a)(b)
SR 3.3.1.910(a)(b)
SR 3.3.1.1314 (c)
- 2. Logarithmic Power Level - High 2 SR 3.3.1.1 [.96]%
(a)(b)
SR 3.3.1.67 SR 3.3.1.910(a)(b)
- 3. Pressurizer Pressure - High 1,2 SR 3.3.1.1 [2389] psia SR 3.3.1.67(a)(b)
SR 3.3.1.910(a)(b)
SR 3.3.1.1314 (d)
- 4. Pressurizer Pressure - Low 1,2 SR 3.3.1.1 [1763] psig SR 3.3.1.67(a)(b)
SR 3.3.1.910(a)(b)
- 5. Containment Pressure - High 1,2 SR 3.3.1.1 [3.14] psig SR 3.3.1.67(a)(b)
SR 3.3.1.910(a)(b)
SR 3.3.1.1314 (a) If the as-found channel setpoint is outside its predefined as-found tolerance, then the channel shall be evaluated to verify that it is functioning as required before returning the channel to service.
(b) The instrument channel setpoint shall be reset to a value that is within the as-left tolerance around the Limiting Trip Setpoint (LTSP) at the completion of the surveillance; otherwise, the channel shall be declared inoperable.
Setpoints more conservative than the LTSP are acceptable provided that the as-found and as-left tolerances apply to the actual setpoint implemented in the Surveillance procedures (Nominal Trip Setpoint) to confirm channel performance. The LTSP and the methodologies used to determine the as-found and as-left tolerances are specified in [insert the facility FSAR reference or the name of any document incorporated into the facility FSAR by reference].
(c) Bypass may be enabled when logarithmic power is > [1E-4]% and shall be capable of automatic removal whenever logarithmic power is > [1E-4]%. Bypass shall be removed prior to reducing logarithmic power to a value [1E-4]%. Trip may be manually bypassed during physics testing pursuant to LCO 3.4.17, "RCS Loops -
Test Exceptions."
(d) The setpoint may be decreased to a minimum value of [300] psia, as pressurizer pressure is reduced, provided the margin between pressurizer pressure and the setpoint is maintained [400] psi. Bypass may be enabled when pressurizer pressure is < [500] psia and shall be capable of automatic removal whenever pressurizer pressure is < [500] psia. Bypass shall be removed prior to raising pressurizer pressure to a value [500] psia.
The setpoint shall be automatically increased to the normal setpoint as pressurizer pressure is increased.
Combustion Engineering STS 3.3.1A-9 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Operating (Digital) (Without Setpoint Control Program) 3.3.1A Table 3.3.1-1 (page 2 of 4)
Reactor Protective System Instrumentation APPLICABLE MODES OR OTHER SPECIFIED SURVEILLANCE FUNCTION CONDITIONS REQUIREMENTS ALLOWABLE VALUE
- 6. Steam Generator #1 Pressure - 1,2 SR 3.3.1.1 [711] psia (a)(b)
Low SR 3.3.1.67 SR 3.3.1.910(a)(b)
SR 3.3.1.1314
- 7. Steam Generator #2 Pressure - 1,2 SR 3.3.1.1 [711] psia Low SR 3.3.1.67(a)(b)
SR 3.3.1.910(a)(b)
SR 3.3.1.1314
- 8. Steam Generator #1 Level - Low 1,2 SR 3.3.1.1 [24.23]%
(a)(b)
SR 3.3.1.67 SR 3.3.1.910(a)(b)
SR 3.3.1.1314
- 9. Steam Generator #2 Level - Low 1,2 SR 3.3.1.1 [24.23]%
(a)(b)
SR 3.3.1.67 SR 3.3.1.910(a)(b)
SR 3.3.1.1314
[ 10. Reactor Coolant Flow, Steam 1,2 SR 3.3.1.1 Ramp: [0.231]
Generator #1 - Low (e) SR 3.3.1.67(a)(b) psid/sec.
SR 3.3.1.910(a)(b) Floor: [12.1] psid
[SR 3.3.1.1213] Step: [7.231] psid ]
SR 3.3.1.1314 (a) If the as-found channel setpoint is outside its predefined as-found tolerance, then the channel shall be evaluated to verify that it is functioning as required before returning the channel to service.
(b) The instrument channel setpoint shall be reset to a value that is within the as-left tolerance around the Limiting Trip Setpoint (LTSP) at the completion of the surveillance; otherwise, the channel shall be declared inoperable.
Setpoints more conservative than the LTSP are acceptable provided that the as-found and as-left tolerances apply to the actual setpoint implemented in the Surveillance procedures (Nominal Trip Setpoint) to confirm channel performance. The LTSP and the methodologies used to determine the as-found and as-left tolerances are specified in [insert the facility FSAR reference or the name of any document incorporated into the facility FSAR by reference].
(e) Bypass may be enabled when logarithmic power is < [1E-04]% and shall be capable of automatic removal whenever logarithmic power is < [1E-4]%. Bypass shall be removed prior to raising logarithmic power to a value
[1E-4]%. During testing pursuant to LCO 3.4.17, bypass may be enabled when THERMAL POWER is < [5]%
RTP and shall be capable of automatic removal whenever THERMAL POWER is < [5]% RTP. Bypass shall be removed above 5% RTP.
Combustion Engineering STS 3.3.1A-10 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Operating (Digital) (Without Setpoint Control Program) 3.3.1A Table 3.3.1-1 (page 3 of 4)
Reactor Protective System Instrumentation APPLICABLE MODES OR OTHER SPECIFIED SURVEILLANCE FUNCTION CONDITIONS REQUIREMENTS ALLOWABLE VALUE
[ 11. Reactor Coolant Flow, Steam 1,2 SR 3.3.1.1 Ramp: [0.231]
(a)(b)
Generator #2 - Low (e) SR 3.3.1.67 psid/sec.
SR 3.3.1.910(a)(b) Floor: [12.1] psid
[SR 3.3.1.1213] Step: [7.231] psid ]
SR 3.3.1.1314 (a)(b)
[ 12. Loss of Load (turbine stop valve 1 SR 3.3.1.89 [100] psig ]
(f) control oil pressure) SR 3.3.1.010(a)(b)
[SR 3.3.1.1213]
(e)
- 13. Local Power Density - High 1,2 SR 3.3.1.1 [21.0] kW/ft SR 3.3.1.2 SR 3.3.1.3 SR 3.3.1.34 SR 3.3.1.45 SR 3.3.1.67(a)(b)
SR 3.3.1.910(a)(b)
SR 3.3.1.1011(a)(b)
SR 3.3.1.1112 SR 3.3.1.1213 SR 3.3.1.1314 (a) If the as-found channel setpoint is outside its predefined as-found tolerance, then the channel shall be evaluated to verify that it is functioning as required before returning the channel to service.
(b) The instrument channel setpoint shall be reset to a value that is within the as-left tolerance around the Limiting Trip Setpoint (LTSP) at the completion of the surveillance; otherwise, the channel shall be declared inoperable.
Setpoints more conservative than the LTSP are acceptable provided that the as-found and as-left tolerances apply to the actual setpoint implemented in the Surveillance procedures (Nominal Trip Setpoint) to confirm channel performance. The LTSP and the methodologies used to determine the as-found and as-left tolerances are specified in [insert the facility FSAR reference or the name of any document incorporated into the facility FSAR by reference].
(e) Bypass may be enabled when logarithmic power is < [1E-04]% and shall be capable of automatic removal whenever logarithmic power is < [1E-4]%. Bypass shall be removed prior to raising logarithmic power to a value
[1E-4]%. During testing pursuant to LCO 3.4.17, bypass may be enabled when THERMAL POWER is < [5]%
RTP and shall be capable of automatic removal whenever THERMAL POWER is < [5]% RTP. Bypass shall be removed above 5% RTP.
(f) Bypass may be enabled when THERMAL POWER is < [55]% RTP and shall be capable of automatic removal whenever THERMAL POWER is < [55]% RTP. Bypass shall be removed prior to raising THERMAL POWER to a value [55]% RTP.
Combustion Engineering STS 3.3.1A-11 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Operating (Digital) (Without Setpoint Control Program) 3.3.1A Table 3.3.1-1 (page 4 of 4)
Reactor Protective System Instrumentation APPLICABLE MODES OR OTHER SPECIFIED SURVEILLANCE FUNCTION CONDITIONS REQUIREMENTS ALLOWABLE VALUE
- 14. Departure From Nucleate Boiling 1,2 SR 3.3.1.1 [1.31]
(e)
Ratio (DNBR) - Low SR 3.3.1.2 SR 3.3.1.3 SR 3.3.1.34 SR 3.3.1.45 SR 3.3.1.67(a)(b)
SR 3.3.1.910(a)(b)
SR 3.3.1.1011(a)(b)
SR 3.3.1.1112 SR 3.3.1.1213 SR 3.3.1.1314 (a) If the as-found channel setpoint is outside its predefined as-found tolerance, then the channel shall be evaluated to verify that it is functioning as required before returning the channel to service.
(b) The instrument channel setpoint shall be reset to a value that is within the as-left tolerance around the Limiting Trip Setpoint (LTSP) at the completion of the surveillance; otherwise, the channel shall be declared inoperable.
Setpoints more conservative than the LTSP are acceptable provided that the as-found and as-left tolerances apply to the actual setpoint implemented in the Surveillance procedures (Nominal Trip Setpoint) to confirm channel performance. The LTSP and the methodologies used to determine the as-found and as-left tolerances are specified in [insert the facility FSAR reference or the name of any document incorporated into the facility FSAR by reference].
(e) Bypass may be enabled when logarithmic power is < [1E-04]% and shall be capable of automatic removal whenever logarithmic power is < [1E-4]%. Bypass shall be removed prior to raising logarithmic power to a value
[1E-4]%. During testing pursuant to LCO 3.4.17, bypass may be enabled when THERMAL POWER is < [5]%
RTP and shall be capable of automatic removal whenever THERMAL POWER is < [5]% RTP. Bypass shall be removed above 5% RTP.
Combustion Engineering STS 3.3.1A-12 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Operating (Digital) (With Setpoint Control Program) 3.3.1B 3.3 INSTRUMENTATION (Digital) 3.3.1B Reactor Protective System (RPS) Instrumentation - Operating (Digital) (With Setpoint Control Program)
LCO 3.3.1B Four RPS trip and bypass removal channels for each Function in Table 3.3.1-1 shall be OPERABLE.
APPLICABILITY: According to Table 3.3.1-1.
ACTIONS
NOTE-----------------------------------------------------------
Separate Condition entry is allowed for each RPS Function.
CONDITION REQUIRED ACTION COMPLETION TIME A. One or more Functions A.1 Place channel in bypass or 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> with one automatic RPS trip.
trip channel inoperable.
AND A.2 Restore channel to Prior to entering OPERABLE status. MODE 2 following next MODE 5 entry B. One or more Functions B.1 Place one channel in 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> with two automatic RPS bypass and the other in trip.
trip channels inoperable.
C. One or more Functions C.1 Disable bypass channel. 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> with one automatic bypass removal channel OR inoperable.
Combustion Engineering STS 3.3.1B-1 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Operating (Digital) (With Setpoint Control Program) 3.3.1B ACTIONS (continued)
CONDITION REQUIRED ACTION COMPLETION TIME C.2.1 Place affected automatic 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> trip channel in bypass or trip.
AND C.2.2 Restore bypass removal Prior to entering channel and associated MODE 2 following automatic trip channel to next MODE 5 entry OPERABLE status.
D. One or more Functions D.1 Disable bypass channels. 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> with two automatic bypass removal OR channels inoperable.
D.2 Place one affected 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> automatic trip channel in bypass and place the other in trip.
E. One or more core E.1 Perform CHANNEL 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> protection calculator FUNCTIONAL TEST on (CPC) channels with a affected CPC.
cabinet high temperature alarm.
F. One or more CPC F.1 Perform CHANNEL 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> channels with three or FUNCTIONAL TEST on more autorestarts during affected CPC.
a 12 hour1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> period.
EG. Required Action and G.1 Be in MODE 3. 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> associated Completion Time not met.
Combustion Engineering STS 3.3.1B-2 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Operating (Digital) (With Setpoint Control Program) 3.3.1B SURVEILLANCE REQUIREMENTS
NOTE-----------------------------------------------------------
Refer to Table 3.3.1-1 to determine which SR shall be performed for each RPS Function.
SURVEILLANCE FREQUENCY SR 3.3.1.1 Perform a CHANNEL CHECK of each RPS [ 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> instrument channel except Loss of Load.
OR In accordance with the Surveillance Frequency Control Program ]
SR 3.3.1.2 -------------------------------NOTE------------------------------
Not required to be performed until 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> after THERMAL POWER 70% RTP.
Verify total Reactor Coolant System (RCS) flow rate [ 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> as indicated by each CPC is less than or equal to the RCS total flow rate. OR If necessary, adjust the CPC addressable constant In accordance flow coefficients such that each CPC indicated flow with the is less than or equal to the RCS flow rate. Surveillance Frequency Control Program ]
SR 3.3.1.3 Check the CPC auto restart count. [ 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> OR In accordance with the Surveillance Frequency Control Program ]
Combustion Engineering STS 3.3.1B-3 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Operating (Digital) (With Setpoint Control Program) 3.3.1B SURVEILLANCE REQUIREMENTS (continued)
SURVEILLANCE FREQUENCY SR 3.3.1.34 ------------------------------NOTES-----------------------------
- 1. Not required to be performed until 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> after THERMAL POWER 20% RTP.
- 2. The daily calibration may be suspended during PHYSICS TESTS, provided the calibration is performed upon reaching each major test power plateau and prior to proceeding to the next major test power plateau.
Perform calibration (heat balance only) and adjust [ 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> the linear power level signals and the CPC addressable constant multipliers to make the CPC OR T power and CPC nuclear power calculations agree with the calorimetric, if the absolute difference In accordance is [2]%. with the Surveillance Frequency Control Program ]
SR 3.3.1.45 -------------------------------NOTE------------------------------
Not required to be performed until 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> after THERMAL POWER 70% RTP.
Verify total RCS flow rate indicated by each CPC is [ 31 days less than or equal to the RCS flow determined by calorimetric calculations. OR In accordance with the Surveillance Frequency Control Program ]
Combustion Engineering STS 3.3.1B-4 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Operating (Digital) (With Setpoint Control Program) 3.3.1B SURVEILLANCE REQUIREMENTS (continued)
SURVEILLANCE FREQUENCY SR 3.3.1.56 -------------------------------NOTE------------------------------
Not required to be performed until 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> after THERMAL POWER 15% RTP.
Verify linear power subchannel gains of the excore [ 31 days detectors are consistent with the values used to establish the shape annealing matrix elements in OR the CPCs.
In accordance with the Surveillance Frequency Control Program ]
SR 3.3.1.67 ------------------------------NOTES-----------------------------
- 1. The CPC CHANNEL FUNCTIONAL TEST shall include verification that the correct values of addressable constants are installed in each OPERABLE CPC.
- 2. Not required to be performed for logarithmic power level channels until 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> after reducing logarithmic power below 1E-4% and only if reactor trip circuit breakers (RTCBs) are closed.
Perform CHANNEL FUNCTIONAL TEST on each [ 92 days channel except Loss of Load and power range neutron flux in accordance with the Setpoint Control OR Program.
In accordance with the Surveillance Frequency Control Program ]
Combustion Engineering STS 3.3.1B-5 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Operating (Digital) (With Setpoint Control Program) 3.3.1B SURVEILLANCE REQUIREMENTS (continued)
SURVEILLANCE FREQUENCY SR 3.3.1.78 -------------------------------NOTE------------------------------
Neutron detectors are excluded from the CHANNEL CALIBRATION.
Perform CHANNEL CALIBRATION of the power [ 92 days range neutron flux channels in accordance with the Setpoint Control Program. OR In accordance with the Surveillance Frequency Control Program ]
SR 3.3.1.89 -------------------------------NOTE------------------------------
[ Not required to be performed until 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> after THERMAL POWER 55% RTP.
Perform CHANNEL FUNCTIONAL TEST for Loss of [ 92 days Load Function in accordance with the Setpoint Control Program. OR In accordance with the Surveillance Frequency Control Program ] ]
Combustion Engineering STS 3.3.1B-6 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Operating (Digital) (With Setpoint Control Program) 3.3.1B SURVEILLANCE REQUIREMENTS (continued)
SURVEILLANCE FREQUENCY SR 3.3.1.910 -------------------------------NOTE------------------------------
Neutron detectors are excluded from CHANNEL CALIBRATION.
Perform CHANNEL CALIBRATION on each [ [18] months channel, including bypass removal functions in accordance with the Setpoint Control Program. OR In accordance with the Surveillance Frequency Control Program ]
SR 3.3.1.1011 Perform a CHANNEL FUNCTIONAL TEST on each [ [18] months CPC channel in accordance with the Setpoint Control Program. OR In accordance with the Surveillance Frequency Control Program ]
SR 3.3.1.1112 Using the incore detectors, verify the shape Once after each annealing matrix elements to be used by the CPCs. refueling prior to exceeding 70% RTP SR 3.3.1.1213 Perform a CHANNEL FUNCTIONAL TEST on each Once within automatic bypass removal function. 92 days prior to each reactor startup Combustion Engineering STS 3.3.1B-7 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Operating (Digital) (With Setpoint Control Program) 3.3.1B SURVEILLANCE REQUIREMENTS (continued)
SURVEILLANCE FREQUENCY SR 3.3.1.1314 -------------------------------NOTE------------------------------
Neutron detectors are excluded.
Verify RPS RESPONSE TIME is within limits. [ [18] months on a STAGGERED TEST BASIS OR In accordance with the Surveillance Frequency Control Program ]
Combustion Engineering STS 3.3.1B-8 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Operating (Digital) (With Setpoint Control Program) 3.3.1B Table 3.3.1-1 (page 1 of 3)
Reactor Protective System Instrumentation APPLICABLE MODES OR OTHER SPECIFIED SURVEILLANCE FUNCTION CONDITIONS REQUIREMENTS
- 1. Linear Power Level - High 1,2 SR 3.3.1.1 SR 3.3.1.34 SR 3.3.1.56 SR 3.3.1.67 SR 3.3.1.78 SR 3.3.1.910 SR 3.3.1.1314 (a)
- 2. Logarithmic Power Level - High 2 SR 3.3.1.1 SR 3.3.1.67 SR 3.3.1.910 SR 3.3.1.1213 SR 3.3.1.1314
- 3. Pressurizer Pressure - High 1,2 SR 3.3.1.1 SR 3.3.1.67 SR 3.3.1.910 SR 3.3.1.1314 (b)
- 4. Pressurizer Pressure - Low 1,2 SR 3.3.1.1 SR 3.3.1.67 SR 3.3.1.910 SR 3.3.1.1213 SR 3.3.1.1314
- 5. Containment Pressure - High 1,2 SR 3.3.1.1 SR 3.3.1.67 SR 3.3.1.910 SR 3.3.1.1314
- 6. Steam Generator #1 Pressure - Low 1,2 SR 3.3.1.1 SR 3.3.1.67 SR 3.3.1.910 SR 3.3.1.1314 (a) Bypass may be enabled when logarithmic power is > [1E-4]% and shall be capable of automatic removal whenever logarithmic power is > [1E-4]%. Bypass shall be removed prior to reducing logarithmic power to a value [1E-4]%. Trip may be manually bypassed during physics testing pursuant to LCO 3.4.17, "RCS Loops
- Test Exceptions."
(b) The setpoint may be decreased to a minimum value of [300] psia, as pressurizer pressure is reduced, provided the margin between pressurizer pressure and the setpoint is maintained [400] psi. Bypass may be enabled when pressurizer pressure is < [500] psia and shall be capable of automatic removal whenever pressurizer pressure is < [500] psia. Bypass shall be removed prior to raising pressurizer pressure to a value
[500] psia. The setpoint shall be automatically increased to the normal setpoint as pressurizer pressure is increased.
Combustion Engineering STS 3.3.1B-9 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Operating (Digital) (With Setpoint Control Program) 3.3.1B Table 3.3.1-1 (page 2 of 3)
Reactor Protective System Instrumentation APPLICABLE MODES OR OTHER SPECIFIED SURVEILLANCE FUNCTION CONDITIONS REQUIREMENTS
- 7. Steam Generator #2 Pressure - Low 1,2 SR 3.3.1.1 SR 3.3.1.67 SR 3.3.1.910 SR 3.3.1.1314
- 8. Steam Generator #1 Level - Low 1,2 SR 3.3.1.1 SR 3.3.1.67 SR 3.3.1.910 SR 3.3.1.1314
- 9. Steam Generator #2 Level - Low 1,2 SR 3.3.1.1 SR 3.3.1.67 SR 3.3.1.910 SR 3.3.1.1314
[ 10. Reactor Coolant Flow, Steam 1,2 SR 3.3.1.1 Generator #1 - Low (c) SR 3.3.1.67 SR 3.3.1.910
[SR 3.3.1.1213]
SR 3.3.1.1314 ]
[ 11. Reactor Coolant Flow, Steam 1,2 SR 3.3.1.1 Generator #2 - Low (c) SR 3.3.1.67 SR 3.3.1.910
[SR 3.3.1.1213]
SR 3.3.1.1314 ]
[ 12. Loss of Load (turbine stop valve 1 SR 3.3.1.89 control oil pressure)(d) SR 3.3.1.910
[SR 3.3.1.1213] ]
(c) Bypass may be enabled when logarithmic power is < [1E-04]% and shall be capable of automatic removal whenever logarithmic power is < [1E-4]%. Bypass shall be removed prior to raising logarithmic power to a value [1E-4]%. During testing pursuant to LCO 3.4.17, bypass may be enabled when THERMAL POWER is
< [5]% RTP and shall be capable of automatic removal whenever THERMAL POWER is < [5]% RTP. Bypass shall be removed above 5% RTP.
(d) Bypass may be enabled when THERMAL POWER is < [55]% RTP and shall be capable of automatic removal whenever THERMAL POWER is < [55]% RTP. Bypass shall be removed prior to raising THERMAL POWER to a value [55]% RTP.
Combustion Engineering STS 3.3.1B-10 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Operating (Digital) (With Setpoint Control Program) 3.3.1B Table 3.3.1-1 (page 3 of 3)
Reactor Protective System Instrumentation APPLICABLE MODES OR OTHER SPECIFIED SURVEILLANCE FUNCTION CONDITIONS REQUIREMENTS
- 13. Local Power Density - High(c) 1,2 SR 3.3.1.1 SR 3.3.1.2 SR 3.3.1.3 SR 3.3.1.34 SR 3.3.1.45 SR 3.3.1.67 SR 3.3.1.910 SR 3.3.1.1011 SR 3.3.1.1112 SR 3.3.1.1213 SR 3.3.1.1314
- 14. Departure From Nucleate Boiling Ratio 1,2 SR 3.3.1.1 (DNBR) - Low(c) SR 3.3.1.2 SR 3.3.1.3 SR 3.3.13.4 SR 3.3.1.45 SR 3.3.1.67 SR 3.3.1.910 SR 3.3.1.1011 SR 3.3.1.1112 SR 3.3.1.1213 SR 3.3.1.1314 (c) Bypass may be enabled when logarithmic power is < [1E-04]% and shall be capable of automatic removal whenever logarithmic power is < [1E-4]%. Bypass shall be removed prior to raising logarithmic power to a value [1E-4]%. During testing pursuant to LCO 3.4.17, bypass may be enabled when THERMAL POWER is
< [5]% RTP and shall be capable of automatic removal whenever THERMAL POWER is < [5]% RTP. Bypass shall be removed above 5% RTP.
Combustion Engineering STS 3.3.1B-11 Rev. 4.0
TSTF-536, Rev. 0 CEACs (Digital) (Without Setpoint Control Program) 3.3.3A 3.3 INSTRUMENTATION (Digital) 3.3.3A Control Element Assembly Calculators (CEACs) (Digital) (Without Setpoint Control Program)
LCO 3.3.3A Two CEACs shall be OPERABLE.
APPLICABILITY: MODES 1 and 2.
ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. One CEAC inoperable. A.1 Perform SR 3.1.4.1. Once per 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> AND A.2 Restore CEAC to 7 days OPERABLE status.
B. Required Action and B.1 Verify the departure from 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> associated Completion nucleate boiling ratio Time of Condition A not requirement of LCO 3.2.4, met. "Departure from Nucleate Boiling Ratio (DNBR)," is OR met [and the Reactor Power Cutback System is Both CEACs inoperable. disabled].
AND Combustion Engineering STS 3.3.3A-1 Rev. 4.0
TSTF-536, Rev. 0 CEACs (Digital) (Without Setpoint Control Program) 3.3.3A ACTIONS (continued)
CONDITION REQUIRED ACTION COMPLETION TIME B.2 Verify all full length and part 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> length control element assembly (CEA) groups are fully withdrawn and maintained fully withdrawn, except during Surveillance testing pursuant to SR 3.1.4.3 [or for control, when CEA group #6 may be inserted to a maximum of 127.5 inches].
AND B.3 Verify the "RSPT/CEAC 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> Inoperable" addressable constant in each core protection calculator (CPC) is set to indicate that both CEACs are inoperable.
AND B.4 Verify the Control Element 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> Drive Mechanism Control System is placed in "OFF" and maintained in "OFF,"
except during CEA motion permitted by Required Action B.2.
AND B.5 Perform SR 3.1.4.1. Once per 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> C. Receipt of a CPC C.1 Perform CHANNEL 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> channel B or C cabinet FUNCTIONAL TEST on high temperature alarm. affected CEAC(s).
Combustion Engineering STS 3.3.3A-2 Rev. 4.0
TSTF-536, Rev. 0 CEACs (Digital) (Without Setpoint Control Program) 3.3.3A ACTIONS (continued)
CONDITION REQUIRED ACTION COMPLETION TIME D. One or two CEACs with D.1 Perform CHANNEL 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> three or more auto FUNCTIONAL TEST on restarts during a 12 hour1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> affected CEAC.
period.
CE. Required Action and CE.1 Be in MODE 3. 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> associated Completion Time of Condition B, C, or D not met.
SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.3.3.1 Perform a CHANNEL CHECK. [ 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> OR In accordance with the Surveillance Frequency Control Program ]
SR 3.3.3.2 Check the CEAC auto restart count. [ 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> OR In accordance with the Surveillance Frequency Control Program ]
Combustion Engineering STS 3.3.3A-3 Rev. 4.0
TSTF-536, Rev. 0 CEACs (Digital) (Without Setpoint Control Program) 3.3.3A SURVEILLANCE REQUIREMENTS (continued)
SURVEILLANCE FREQUENCY SR 3.3.3.23 Perform a CHANNEL FUNCTIONAL TEST. [ 92 days OR In accordance with the Surveillance Frequency Control Program ]
SR 3.3.3.34 Perform a CHANNEL CALIBRATION. [ [18] months OR In accordance with the Surveillance Frequency Control Program ]
SR 3.3.3.45 Perform a CHANNEL FUNCTIONAL TEST. [ [18] months OR In accordance with the Surveillance Frequency Control Program ]
SR 3.3.3.56 Verify the isolation characteristics of each CEAC [ [18] months isolation amplifier and each optical isolator for CEAC to CPC data transfer. OR In accordance with the Surveillance Frequency Control Program ]
Combustion Engineering STS 3.3.3A-4 Rev. 4.0
TSTF-536, Rev. 0 CEACs (Digital) (With Setpoint Control Program) 3.3.3B 3.3 INSTRUMENTATION (Digital) 3.3.3B Control Element Assembly Calculators (CEACs) (Digital) (With Setpoint Control Program)
LCO 3.3.3B Two CEACs shall be OPERABLE.
APPLICABILITY: MODES 1 and 2.
ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A. One CEAC inoperable. A.1 Perform SR 3.1.4.1. Once per 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> AND A.2 Restore CEAC to 7 days OPERABLE status.
B. Required Action and B.1 Verify the departure from 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> associated Completion nucleate boiling ratio Time of Condition A not requirement of LCO 3.2.4, met. "Departure from Nucleate Boiling Ratio (DNBR)," is OR met [and the Reactor Power Cutback System is Both CEACs inoperable. disabled].
AND Combustion Engineering STS 3.3.3B-1 Rev. 4.0
TSTF-536, Rev. 0 CEACs (Digital) (With Setpoint Control Program) 3.3.3B ACTIONS (continued)
CONDITION REQUIRED ACTION COMPLETION TIME B.2 Verify all full length and part 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> length control element assembly (CEA) groups are fully withdrawn and maintained fully withdrawn, except during Surveillance testing pursuant to SR 3.1.4.3 [or for control, when CEA group #6 may be inserted to a maximum of 127.5 inches].
AND B.3 Verify the "RSPT/CEAC 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> Inoperable" addressable constant in each core protection calculator (CPC) is set to indicate that both CEACs are inoperable.
AND B.4 Verify the Control Element 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> Drive Mechanism Control System is placed in "OFF" and maintained in "OFF,"
except during CEA motion permitted by Required Action B.2.
AND B.5 Perform SR 3.1.4.1. Once per 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> C. Receipt of a CPC C.1 Perform CHANNEL 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> channel B or C cabinet FUNCTIONAL TEST on high temperature alarm. affected CEAC(s).
Combustion Engineering STS 3.3.3B-2 Rev. 4.0
TSTF-536, Rev. 0 CEACs (Digital) (With Setpoint Control Program) 3.3.3B ACTIONS (continued)
CONDITION REQUIRED ACTION COMPLETION TIME D. One or two CEACs with D.1 Perform CHANNEL 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> three or more auto FUNCTIONAL TEST on restarts during a 12 hour1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> affected CEAC.
period.
E. Required Action and E.1 Be in MODE 3. 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> associated Completion Time of Condition B, C, or D not met.
SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.3.3.1 Perform a CHANNEL CHECK. [ 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> OR In accordance with the Surveillance Frequency Control Program ]
SR 3.3.3.2 Check the CEAC auto restart count. [ 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> OR In accordance with the Surveillance Frequency Control Program ]
Combustion Engineering STS 3.3.3B-3 Rev. 4.0
TSTF-536, Rev. 0 CEACs (Digital) (With Setpoint Control Program) 3.3.3B SURVEILLANCE REQUIREMENTS (continued)
SURVEILLANCE FREQUENCY SR 3.3.3.23 Perform a CHANNEL FUNCTIONAL TEST. [ 92 days OR In accordance with the Surveillance Frequency Control Program ]
SR 3.3.3.34 Perform a CHANNEL CALIBRATION in accordance [ [18] months with the Setpoint Control Program.
OR In accordance with the Surveillance Frequency Control Program ]
SR 3.3.3.45 Perform a CHANNEL FUNCTIONAL TEST in [ [18] months accordance with the Setpoint Control Program.
OR In accordance with the Surveillance Frequency Control Program ]
SR 3.3.3.56 Verify the isolation characteristics of each CEAC [ [18] months isolation amplifier and each optical isolator for CEAC to CPC data transfer in accordance with the OR Setpoint Control Program.
In accordance with the Surveillance Frequency Control Program ]
Combustion Engineering STS 3.3.3B-4 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Operating (Digital) (Without Setpoint Control Program)
B 3.3.1A BASES ACTIONS (continued)
D.1 and D.2 Condition D applies to two inoperable automatic bypass removal channels. If the bypass removal channels for two operating bypasses cannot be restored to OPERABLE status within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br />, the associated RPS channel may be considered OPERABLE only if the bypass is not in effect. Otherwise, the affected RPS channels must be declared inoperable, as in Condition B, and the bypass either removed or one automatic trip channel placed in bypass and the other in trip within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br />.
The restoration of one affected bypassed automatic trip channel must be completed prior to the next CHANNEL FUNCTIONAL TEST, or the plant must shut down per LCO 3.0.3 as explained in Condition B.
E.1 Condition E applies if any CPC cabinet receives a high temperature alarm. There is one temperature sensor in each of the four CPC bays.
Since CPC bays B and C also house CEAC calculators 1 and 2, respectively, a high temperature in either of these bays may also indicate a problem with the associated CEAC. CEAC OPERABILITY is addressed in LCO 3.3.3.
If a CPC cabinet high temperature alarm is received, it is possible for the CPC to be affected and not be completely reliable. Therefore, a CHANNEL FUNCTIONAL TEST must be performed within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />. The Completion Time of 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> is adequate considering the low probability of undetected failure, the consequences of a single channel failure, and the time required to perform a CHANNEL FUNCTIONAL TEST.
F.1 Condition F applies if an OPERABLE CPC has three or more autorestarts in a 12 hour1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> period.
CPCs and CEACs will attempt to autorestart if they detect a fault condition, such as a calculator malfunction or loss of power. A successful autorestart restores the calculator to operation; however, excessive autorestarts might be indicative of a calculator problem.
Combustion Engineering STS B 3.3.1A-27 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Operating (Digital) (Without Setpoint Control Program)
B 3.3.1A BASES ACTIONS (continued)
If a nonbypassed CPC has three or more autorestarts, it may not be completely reliable. Therefore, a CHANNEL FUNCTIONAL TEST must be performed on the CPC to ensure it is functioning properly. Based on plant operating experience, the Completion Time of 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> is adequate and reasonable to perform the test while still keeping the risk of operating in this condition at an acceptable level, since overt channel failure will most likely be indicated and annunciated in the control room by CPC online diagnostics.
EG.1 Condition EG is entered when the Required Action and associated Completion Time of Condition A, B, C, or D, E, or F are not met.
If the Required Actions associated with these Conditions cannot be completed within the required Completion Time, the reactor must be brought to a MODE where the Required Actions do not apply. The allowed Completion Time of 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> is reasonable, based on operating experience, for reaching the required MODE from full power conditions in an orderly manner and without challenging plant systems.
SURVEILLANCE The SRs for any particular RPS Function are found in the SR column of REQUIREMENTS Table 3.3.1-1 for that Function. Most Functions are subject to CHANNEL CHECK, CHANNEL FUNCTIONAL TEST, CHANNEL CALIBRATION, and response time testing.
REVIEWERS NOTE-----------------------------------
In order for a plant to take credit for topical reports as the basis for justifying Frequencies, topical reports must be supported by an NRC staff SER that establishes the acceptability of each topical report for that unit.
REVIEWERS NOTE ------------------------------------
Notes a and b are applied to the setpoint verification Surveillances for each RPS Instrumentation - Operating (Digital) Function in Table 3.3.1-1 unless one or more of the following exclusions apply:
- 1. Manual actuation circuits, automatic actuation logic circuits or instrument functions that derive input from contacts which have no associated sensor or adjustable device, e.g., limit switches, breaker position switches, manual actuation switches, float switches, proximity detectors, etc. are excluded. In addition, those permissives and interlocks that derive input from a sensor or adjustable device that is tested as part of another TS function are excluded.
Combustion Engineering STS B 3.3.1A-28 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Operating (Digital) (Without Setpoint Control Program)
B 3.3.1A BASES SURVEILLANCE REQUIREMENTS (continued)
SR 3.3.1.3 The CPC autorestart count is checked to monitor the CPC and CEAC for normal operation. If three or more autorestarts of a nonbypassed CPC occur within a 12 hour1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> period, the CPC may not be completely reliable.
Therefore, the Required Action of Condition F must be performed. [ The Frequency of 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> is based on operating experience that demonstrates the rarity of more than one channel failing within the same 12 hour1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> interval.
OR The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
REVIEWERS NOTE-----------------------------------
Plants controlling Surveillance Frequencies under a Surveillance Frequency Control Program should utilize the appropriate Frequency description, given above, and the appropriate choice of Frequency in the Surveillance Requirement.
]
SR 3.3.1.34 A daily calibration (heat balance) is performed when THERMAL POWER is 20%. The Linear Power Level signal and the CPC addressable constant multipliers are adjusted to make the CPC T power and nuclear power calculations agree with the calorimetric calculation if the absolute difference is 2%. The value of 2% is adequate because this value is assumed in the safety analysis. These checks (and, if necessary, the adjustment of the Linear Power Level signal and the CPC addressable constant coefficients) are adequate to ensure that the accuracy of these CPC calculations is maintained within the analyzed error margins. The power level must be > 20% RTP to obtain accurate data. At lower power levels, the accuracy of calorimetric data is questionable.
[ The Frequency of 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> is based on plant operating experience and takes into account indications and alarms located in the control room to detect deviations in channel outputs.
OR The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
Combustion Engineering STS B 3.3.1A-31 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Operating (Digital) (Without Setpoint Control Program)
B 3.3.1A BASES SURVEILLANCE REQUIREMENTS (continued)
REVIEWERS NOTE-----------------------------------
Plants controlling Surveillance Frequencies under a Surveillance Frequency Control Program should utilize the appropriate Frequency description, given above, and the appropriate choice of Frequency in the Surveillance Requirement.
]
The Frequency is modified by a Note indicating this Surveillance need only be performed within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> after reaching 20% RTP. The 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> after reaching 20% RTP is required for plant stabilization, data taking, and flow verification. The secondary calorimetric is inaccurate at lower power levels. A second Note in the SR indicates the SR may be suspended during PHYSICS TESTS. The conditional suspension of the daily calibrations under strict administrative control is necessary to allow special testing to occur.
SR 3.3.1.45 The RCS flow rate indicated by each CPC is verified to be less than or equal to the RCS total flow rate. The Note indicates the Surveillance is performed within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> after THERMAL POWER is 70% RTP. This check (and, if necessary, the adjustment of the CPC addressable flow constant coefficients) ensures that the DNBR setpoint is conservatively adjusted with respect to actual flow indications as determined by a calorimetric calculation. [ Operating experience has shown the specified Frequency of 31 days is adequate, as instrument drift is minimal and changes in actual flow rate are minimal over core life.
OR The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
REVIEWERS NOTE-----------------------------------
Plants controlling Surveillance Frequencies under a Surveillance Frequency Control Program should utilize the appropriate Frequency description, given above, and the appropriate choice of Frequency in the Surveillance Requirement.
]
Combustion Engineering STS B 3.3.1A-32 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Operating (Digital) (Without Setpoint Control Program)
B 3.3.1A BASES SURVEILLANCE REQUIREMENTS (continued)
SR 3.3.1.56 The three vertically mounted excore nuclear instrumentation detectors in each channel are used to determine APD for use in the DNBR and LPD calculations. Because the detectors are mounted outside the reactor vessel, a portion of the signal from each detector is from core sections not adjacent to the detector. This is termed shape annealing and is compensated for after every refueling by performing SR 3.3.1.1112, which adjusts the gains of the three detector amplifiers for shape annealing. SR 3.3.1.56 ensures that the preassigned gains are still proper. Power must be > 15% because the CPCs do not use the excore generated signals for axial flux shape information at low power levels.
The Note allowing 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> after reaching 15% RTP is required for plant stabilization and testing.
[ The 31 day Frequency is adequate because the demonstrated long term drift of the instrument channels is minimal.
OR The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
REVIEWERS NOTE-----------------------------------
Plants controlling Surveillance Frequencies under a Surveillance Frequency Control Program should utilize the appropriate Frequency description, given above, and the appropriate choice of Frequency in the Surveillance Requirement.
]
SR 3.3.1.67 A CHANNEL FUNCTIONAL TEST on each channel except Loss of Load, power range neutron flux, and logarithmic power level channels is performed to ensure the entire channel will perform its intended function when needed. The SR is modified by two Notes. Note 1 is a requirement to verify the correct CPC addressable constant values are installed in the CPCs when the CPC CHANNEL FUNCTIONAL TEST is performed.
Note 2 allows the CHANNEL FUNCTIONAL TEST for the Logarithmic Power Level - High channels to be performed 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> after logarithmic power drops below 1E-4% and is required to be performed only if the RTCBs are closed.
Combustion Engineering STS B 3.3.1A-33 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Operating (Digital) (Without Setpoint Control Program)
B 3.3.1A BASES SURVEILLANCE REQUIREMENTS (continued)
In addition to power supply tests, the RPS CHANNEL FUNCTIONAL TEST consists of three overlapping tests as described in Reference 9.
These tests verify that the RPS is capable of performing its intended function, from bistable input through the RTCBs. They include:
Bistable Tests A test signal is superimposed on the input in one channel at a time to verify that the bistable trips within the specified tolerance around the setpoint. This is done with the affected RPS channel trip channel bypassed. Any setpoint adjustment shall be consistent with the assumptions of the current plant specific setpoint analysis.
The as-found and as-left values must also be recorded and reviewed for consistency with the assumptions of the interval between surveillance interval extension analysis. The requirements for this review are outlined in Reference [10].
Matrix Logic Tests Matrix Logic tests are addressed in LCO 3.3.4. This test is performed one matrix at a time. It verifies that a coincidence in the two input channels for each Function removes power from the matrix relays.
During testing, power is applied to the matrix relay test coils and prevents the matrix relay contacts from assuming their de-energized state. This test will detect any short circuits around the bistable contacts in the coincidence logic, such as may be caused by faulty bistable relay or trip channel bypass contacts.
SR 3.3.1.67 is modified by two Notes as identified in Table 3.3.1-1. The first Note requires evaluation of channel performance for the condition where the as-found setting for the channel setpoint is outside its as-found tolerance but conservative with respect to the Allowable Value.
Evaluation of channel performance will verify that the channel will continue to behave in accordance with safety analysis assumptions and the channel performance assumptions in the setpoint methodology. The purpose of the assessment is to ensure confidence in the channel performance prior to returning the channel to service. For channels determined to be OPERABLE but degraded, after returning the channel to service the performance of these channels will be evaluated under the plant Corrective Action Program. Entry into the Corrective Action Program will ensure required review and documentation of the condition.
The second Note requires that the as-left setting for the channel be returned to within the as-left tolerance of the [LTSP]. Where a setpoint Combustion Engineering STS B 3.3.1A-34 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Operating (Digital) (Without Setpoint Control Program)
B 3.3.1A BASES SURVEILLANCE REQUIREMENTS (continued) more conservative than the [LTSP] is used in the plant surveillance procedures [NTSP], the as-left and as-found tolerances, as applicable, will be applied to the surveillance procedure setpoint. This will ensure that sufficient margin to the Safety Limit and/or Analytical Limit is maintained. If the as-left channel setting cannot be returned to a setting within the as-left tolerance of the [LTSP], then the channel shall be declared inoperable.
The second Note also requires that [LTSP] and the methodologies for calculating the as-left and the as-found tolerances be in [insert the facility FSAR reference or the name of any document incorporated into the facility FSAR by reference].
Trip Path Tests Trip path (Initiation Logic) tests are addressed in LCO 3.3.4. These tests are similar to the Matrix Logic tests, except that test power is withheld from one matrix relay at a time, allowing the initiation circuit to de-energize, thereby opening the affected set of RTCBs. The RTCBs must then be closed prior to testing the other three initiation circuits, or a reactor trip may result.
[ The Frequency of 92 days is based on the reliability analysis presented in topical report CEN-327, "RPS/ESFAS Extended Test Interval Evaluation" (Ref. 10).
OR The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
REVIEWERS NOTE-----------------------------------
Plants controlling Surveillance Frequencies under a Surveillance Frequency Control Program should utilize the appropriate Frequency description, given above, and the appropriate choice of Frequency in the Surveillance Requirement.
]
The CPC and CEAC channels and excore nuclear instrumentation channels are tested separately.
The excore channels use preassigned test signals to verify proper channel alignment. The excore logarithmic channel test signal is inserted into the preamplifier input, so as to test the first active element downstream of the detector.
Combustion Engineering STS B 3.3.1A-35 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Operating (Digital) (Without Setpoint Control Program)
B 3.3.1A BASES SURVEILLANCE REQUIREMENTS (continued)
The power range excore test signal is inserted at the drawer input, since there is no preamplifier.
The quarterly CPC CHANNEL FUNCTIONAL TEST is performed using software. This software includes preassigned addressable constant values that may differ from the current values. Provisions are made to store the addressable constant values on a computer disk prior to testing and to reload them after testing. A Note is added to the Surveillance Requirements to verify that the CPC CHANNEL FUNCTIONAL TEST includes the correct values of addressable constants. A successful test of the required contact(s) of a channel relay may be performed by the verification of the change of state of a single contact of the relay. This clarifies what is an acceptable CHANNEL FUNCTIONAL TEST of a relay.
This is acceptable because all of the other required contacts of the relay are verified by other Technical Specifications and non-Technical Specifications tests at least once per refueling interval with applicable extensions.
SR 3.3.1.78 A Note indicates that neutron detectors are excluded from CHANNEL CALIBRATION. [ A CHANNEL CALIBRATION of the power range neutron flux channels every 92 days ensures that the channels are reading accurately and within tolerance (Ref. 10).
OR The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
REVIEWERS NOTE-----------------------------------
Plants controlling Surveillance Frequencies under a Surveillance Frequency Control Program should utilize the appropriate Frequency description, given above, and the appropriate choice of Frequency in the Surveillance Requirement.
]
The Surveillance verifies that the channel responds to a measured parameter within the necessary range and accuracy. CHANNEL CALIBRATION leaves the channel adjusted to account for instrument drift between successive calibrations to ensure that the channel remains operational between successive tests. CHANNEL CALIBRATIONS must be performed consistent with the plant specific setpoint analysis.
Combustion Engineering STS B 3.3.1A-36 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Operating (Digital) (Without Setpoint Control Program)
B 3.3.1A BASES SURVEILLANCE REQUIREMENTS (continued)
The as-found and as-left values must also be recorded and reviewed for consistency with the assumptions of the interval between surveillance interval extension analysis. The requirements for this review are outlined in Reference 10. Operating experience has shown this Frequency to be satisfactory. The detectors are excluded from CHANNEL CALIBRATION because they are passive devices with minimal drift and because of the difficulty of simulating a meaningful signal. Slow changes in detector sensitivity are compensated for by performing the calorimetric calibration (SR 3.3.1.34) and the linear subchannel gain check (SR 3.3.1.56). In addition, the associated control room indications are monitored by the operators.
SR 3.3.1.78 is modified by two Notes as identified in Table 3.3.1-1. The first Note requires evaluation of channel performance for the condition where the as-found setting for the channel setpoint is outside its as-found tolerance but conservative with respect to the Allowable Value.
Evaluation of channel performance will verify that the channel will continue to behave in accordance with safety analysis assumptions and the channel performance assumptions in the setpoint methodology. The purpose of the assessment is to ensure confidence in the channel performance prior to returning the channel to service. For channels determined to be OPERABLE but degraded, after returning the channel to service the performance of these channels will be evaluated under the plant Corrective Action Program. Entry into the Corrective Action Program will ensure required review and documentation of the condition.
The second Note requires that the as-left setting for the channel be returned to within the as-left tolerance of the [LTSP]. Where a setpoint more conservative than the [LTSP] is used in the plant surveillance procedures [NTSP], the as-left and as-found tolerances, as applicable, will be applied to the surveillance procedure setpoint. This will ensure that sufficient margin to the Safety Limit and/or Analytical Limit is maintained. If the as-left channel setting cannot be returned to a setting within the as-left tolerance of the [LTSP], then the channel shall be declared inoperable.
The second Note also requires that [LTSP] and the methodologies for calculating the as-left and the as-found tolerances be in [insert the facility FSAR reference or the name of any document incorporated into the facility FSAR by reference].
Combustion Engineering STS B 3.3.1A-37 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Operating (Digital) (Without Setpoint Control Program)
B 3.3.1A BASES SURVEILLANCE REQUIREMENTS (continued)
[ SR 3.3.1.89 The characteristics and Bases for this Surveillance are as described for SR 3.3.1.67. This Surveillance differs from SR 3.3.1.67 only in that the CHANNEL FUNCTIONAL TEST on the Loss of Load functional unit is only required above 55% RTP. When above 55% and the trip is in effect, the CHANNEL FUNCTIONAL TEST will ensure the channel will perform its equipment protective function if needed. A successful test of the required contact(s) of a channel relay may be performed by the verification of the change of state of a single contact of the relay. This clarifies what is an acceptable CHANNEL FUNCTIONAL TEST of a relay.
This is acceptable because all of the other required contacts of the relay are verified by other Technical Specifications and non-Technical Specifications tests at least once per refueling interval with applicable extensions. The Note allowing 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> after reaching 55% RTP is necessary for Surveillance performance. This Surveillance cannot be performed below 55% RTP, since the trip is bypassed. ]
SR 3.3.1.89 is modified by two Notes as identified in Table 3.3.1-1. The first Note requires evaluation of channel performance for the condition where the as-found setting for the channel setpoint is outside its as-found tolerance but conservative with respect to the Allowable Value.
Evaluation of channel performance will verify that the channel will continue to behave in accordance with safety analysis assumptions and the channel performance assumptions in the setpoint methodology. The purpose of the assessment is to ensure confidence in the channel performance prior to returning the channel to service. For channels determined to be OPERABLE but degraded, after returning the channel to service the performance of these channels will be evaluated under the plant Corrective Action Program. Entry into the Corrective Action Program will ensure required review and documentation of the condition.
The second Note requires that the as-left setting for the channel be returned to within the as-left tolerance of the [LTSP]. Where a setpoint more conservative than the [LTSP] is used in the plant surveillance procedures [NTSP], the as-left and as-found tolerances, as applicable, will be applied to the surveillance procedure setpoint. This will ensure that sufficient margin to the Safety Limit and/or Analytical Limit is maintained. If the as-left channel setting cannot be returned to a setting within the as-left tolerance of the [LTSP], then the channel shall be declared inoperable.
The second Note also requires that [LTSP] and the methodologies for calculating the as-left and the as-found tolerances be in [insert the facility FSAR reference or the name of any document incorporated into the facility FSAR by reference].
Combustion Engineering STS B 3.3.1A-38 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Operating (Digital) (Without Setpoint Control Program)
B 3.3.1A BASES SURVEILLANCE REQUIREMENTS (continued)
SR 3.3.1.910 SR 3.3.1.910 is the performance of a CHANNEL CALIBRATION.
CHANNEL CALIBRATION is a complete check of the instrument channel including the sensor. The Surveillance verifies that the channel responds to a measured parameter within the necessary range and accuracy.
CHANNEL CALIBRATION leaves the channel adjusted to account for instrument drift between successive calibrations to ensure that the channel remains operational between successive tests. CHANNEL CALIBRATIONS must be performed consistent with the plant specific setpoint analysis.
The as-found and as-left values must also be recorded and reviewed for consistency with the assumptions of the surveillance interval extension analysis. The requirements for this review are outlined in Reference [10].
[ The Frequency is based upon the assumption of an [18] month calibration interval for the determination of the magnitude of equipment drift in the setpoint analysis as well as operating experience and consistency with the typical [18] month fuel cycle.
OR The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
REVIEWERS NOTE-----------------------------------
Plants controlling Surveillance Frequencies under a Surveillance Frequency Control Program should utilize the appropriate Frequency description, given above, and the appropriate choice of Frequency in the Surveillance Requirement.
]
The Surveillance is modified by a Note to indicate that the neutron detectors are excluded from CHANNEL CALIBRATION because they are passive devices with minimal drift and because of the difficulty of simulating a meaningful signal. Slow changes in detector sensitivity are compensated for by performing the daily calorimetric calibration (SR 3.3.1.34) and the monthly linear subchannel gain check (SR 3.3.1.56).
SR 3.3.1.910 is modified by two Notes as identified in Table 3.3.1-1. The first Note requires evaluation of channel performance for the condition where the as-found setting for the channel setpoint is outside its as-found Combustion Engineering STS B 3.3.1A-39 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Operating (Digital) (Without Setpoint Control Program)
B 3.3.1A tolerance but conservative with respect to the Allowable Value.
Evaluation of channel performance will verify that the channel will Combustion Engineering STS B 3.3.1A-40 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Operating (Digital) (Without Setpoint Control Program)
B 3.3.1A BASES SURVEILLANCE REQUIREMENTS (continued) continue to behave in accordance with safety analysis assumptions and the channel performance assumptions in the setpoint methodology. The purpose of the assessment is to ensure confidence in the channel performance prior to returning the channel to service. For channels determined to be OPERABLE but degraded, after returning the channel to service the performance of these channels will be evaluated under the plant Corrective Action Program. Entry into the Corrective Action Program will ensure required review and documentation of the condition.
The second Note requires that the as-left setting for the channel be returned to within the as-left tolerance of the [LTSP]. Where a setpoint more conservative than the [LTSP] is used in the plant surveillance procedures [NTSP], the as-left and as-found tolerances, as applicable, will be applied to the surveillance procedure setpoint. This will ensure that sufficient margin to the Safety Limit and/or Analytical Limit is maintained. If the as-left channel setting cannot be returned to a setting within the as-left tolerance of the [LTSP], then the channel shall be declared inoperable.
The second Note also requires that [LTSP] and the methodologies for calculating the as-left and the as-found tolerances be in [insert the facility FSAR reference or the name of any document incorporated into the facility FSAR by reference].
SR 3.3.1.1011 A CHANNEL FUNCTIONAL TEST is performed on the CPCs. The CHANNEL FUNCTIONAL TEST shall include the injection of a signal as close to the sensors as practicable to verify OPERABILITY including alarm and trip Functions. A successful test of the required contact(s) of a channel relay may be performed by the verification of the change of state of a single contact of the relay. This clarifies what is an acceptable CHANNEL FUNCTIONAL TEST of a relay. This is acceptable because all of the other required contacts of the relay are verified by other Technical Specifications and non-Technical Specifications tests at least once per refueling interval with applicable extensions..
[ The basis for the [18] month Frequency is that the CPCs perform a continuous self monitoring function that eliminates the need for frequent CHANNEL FUNCTIONAL TESTS. This CHANNEL FUNCTIONAL TEST essentially validates the self monitoring function and checks for a small set of failure modes that are undetectable by the self monitoring function.
Operating experience has shown that undetected CPC or CEAC failures do not occur in any given [18] month interval.
Combustion Engineering STS B 3.3.1A-41 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Operating (Digital) (Without Setpoint Control Program)
B 3.3.1A BASES SURVEILLANCE REQUIREMENTS (continued)
OR The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
REVIEWERS NOTE-----------------------------------
Plants controlling Surveillance Frequencies under a Surveillance Frequency Control Program should utilize the appropriate Frequency description, given above, and the appropriate choice of Frequency in the Surveillance Requirement.
]
SR 3.3.1.101 is modified by two Notes as identified in Table 3.3.1-1. The first Note requires evaluation of channel performance for the condition where the as-found setting for the channel setpoint is outside its as-found tolerance but conservative with respect to the Allowable Value.
Evaluation of channel performance will verify that the channel will continue to behave in accordance with safety analysis assumptions and the channel performance assumptions in the setpoint methodology. The purpose of the assessment is to ensure confidence in the channel performance prior to returning the channel to service. For channels determined to be OPERABLE but degraded, after returning the channel to service the performance of these channels will be evaluated under the plant Corrective Action Program. Entry into the Corrective Action Program will ensure required review and documentation of the condition.
The second Note requires that the as-left setting for the channel be returned to within the as-left tolerance of the [LTSP]. Where a setpoint more conservative than the [LTSP] is used in the plant surveillance procedures [NTSP], the as-left and as-found tolerances, as applicable, will be applied to the surveillance procedure setpoint. This will ensure that sufficient margin to the Safety Limit and/or Analytical Limit is maintained. If the as-left channel setting cannot be returned to a setting within the as-left tolerance of the [LTSP], then the channel shall be declared inoperable.
The second Note also requires that [LTSP] and the methodologies for calculating the as-left and the as-found tolerances be in [insert the facility FSAR reference or the name of any document incorporated into the facility FSAR by reference].
Combustion Engineering STS B 3.3.1A-42 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Operating (Digital) (Without Setpoint Control Program)
B 3.3.1A BASES SURVEILLANCE REQUIREMENTS (continued)
SR 3.3.1.1112 The three excore detectors used by each CPC channel for axial flux distribution information are far enough from the core to be exposed to flux from all heights in the core, although it is desired that they only read their particular level. The CPCs adjust for this flux overlap by using the predetermined shape annealing matrix elements in the CPC software.
After refueling, it is necessary to re-establish or verify the shape annealing matrix elements for the excore detectors based on more accurate incore detector readings. This is necessary because refueling could possibly produce a significant change in the shape annealing matrix coefficients.
Incore detectors are inaccurate at low power levels. THERMAL POWER should be significant but < 70% to perform an accurate axial shape calculation used to derive the shape annealing matrix elements.
By restricting power to 70% until shape annealing matrix elements are verified, excessive local power peaks within the fuel are avoided.
Operating experience has shown this Frequency to be acceptable.
SR 3.3.1.1213 SR 3.3.1.1213 is a CHANNEL FUNCTIONAL TEST similar to SR 3.3.1.67, except SR 3.3.1.1213 is applicable only to bypass functions and is performed once within 92 days prior to each startup. A successful test of the required contact(s) of a channel relay may be performed by the verification of the change of state of a single contact of the relay. This clarifies what is an acceptable CHANNEL FUNCTIONAL TEST of a relay.
This is acceptable because all of the other required contacts of the relay are verified by other Technical Specifications and non-Technical Specifications tests at least once per refueling interval with applicable extensions. Proper operation of bypass permissives is critical during plant startup because the bypasses must be in place to allow startup operation and must be removed at the appropriate points during power ascent to enable certain reactor trips. Consequently, the appropriate time to verify bypass removal function OPERABILITY is just prior to startup.
The allowance to conduct this Surveillance within 92 days of startup is based on the reliability analysis presented in topical report CEN-327, "RPS/ESFAS Extended Test Interval Evaluation" (Ref. 10). Once the operating bypasses are removed, the bypasses must not fail in such a way that the associated trip Function gets inadvertently bypassed. This Combustion Engineering STS B 3.3.1A-43 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Operating (Digital) (Without Setpoint Control Program)
B 3.3.1A BASES SURVEILLANCE REQUIREMENTS (continued) feature is verified by the trip Function CHANNEL FUNCTIONAL TEST, SR 3.3.1.67 or SR 3.3.1.89. Therefore, further testing of the bypass function after startup is unnecessary.
SR 3.3.1.1314 This SR ensures that the RPS RESPONSE TIMES are verified to be less than or equal to the maximum values assumed in the safety analysis.
Individual component response times are not modeled in the analyses.
The analyses model the overall or total elapsed time, from the point at which the parameter exceeds the trip setpoint value at the sensor to the point at which the RTCBs open. [ Response times are conducted on an
[18] month STAGGERED TEST BASIS. This results in the interval between successive surveillances of a given channel of n x 18 months, where n is the number of channels in the function. The Frequency of
[18] months is based upon operating experience, which has shown that random failures of instrumentation components causing serious response time degradation, but not channel failure, are infrequent occurrences.
Also, response times cannot be determined at power, since equipment operation is required. Testing may be performed in one measurement or in overlapping segments, with verification that all components are tested.
OR The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
REVIEWERS NOTE-----------------------------------
Plants controlling Surveillance Frequencies under a Surveillance Frequency Control Program should utilize the appropriate Frequency description, given above, and the appropriate choice of Frequency in the Surveillance Requirement.
]
REVIEWERS NOTE-----------------------------------
Applicable portions of the following TS Bases are applicable to plants adopting CEOG Topical Report CE NPSD-1167-1, "Elimination of Pressure Sensor Response Time Testing Requirements."
Response time may be verified by any series of sequential, overlapping or total channel measurements, including allocated sensor response time, such that the response time is verified. Allocations for sensor response times may be obtained from records of test results, vendor test data, or vendor engineering specifications. Topical Report CE NPSD-1167-A, Combustion Engineering STS B 3.3.1A-44 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Operating (Digital) (Without Setpoint Control Program)
B 3.3.1A BASES SURVEILLANCE REQUIREMENTS (continued)
"Elimination of Pressure Sensor Response Time Testing Requirements,"
(Ref. 11) provides the basis and methodology for using allocated sensor response times in the overall verification of the channel response time for specific sensors identified in the Topical Report. Response time verification for other sensor types must be demonstrated by test. The allocation of sensor response times must be verified prior to placing a new component in operation and reverified after maintenance that may adversely affect the sensor response time.
A Note is added to indicate that the neutron detectors are excluded from RPS RESPONSE TIME testing because they are passive devices with minimal drift and because of the difficulty of simulating a meaningful signal. Slow changes in detector sensitivity are compensated for by performing the daily calorimetric calibration (SR 3.3.1.34).
REFERENCES 1. Regulatory Guide 1.105, Revision 3, "Setpoints for Safety-Related Instrumentation."
- 3. 10 CFR 100.
- 4. NRC Safety Evaluation Report.
- 5. IEEE Standard 279-1971, April 5, 1972.
- 6. FSAR, Chapter [14].
- 7. 10 CFR 50.49.
- 8. "Plant Protection System Selection of Trip Setpoint Values."
- 9. FSAR, Section [7.2].
- 10. CEN-327, June 2, 1986, including Supplement 1, March 3, 1989.
- 11. CEOG Topical Report CE NPSD-1167-A, "Elimination of Pressure Sensor Response Time Testing Requirements."
Combustion Engineering STS B 3.3.1A-45 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Operating (Digital) (With Setpoint Control Program)
B 3.3.1B BASES ACTIONS (continued)
D.1 and D.2 Condition D applies to two inoperable automatic bypass removal channels. If the bypass removal channels for two operating bypasses cannot be restored to OPERABLE status within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br />, the associated RPS channel may be considered OPERABLE only if the bypass is not in effect. Otherwise, the affected RPS channels must be declared inoperable, as in Condition B, and the bypass either removed or one automatic trip channel placed in bypass and the other in trip within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br />.
The restoration of one affected bypassed automatic trip channel must be completed prior to the next CHANNEL FUNCTIONAL TEST, or the plant must shut down per LCO 3.0.3 as explained in Condition B.
E.1 Condition E applies if any CPC cabinet receives a high temperature alarm. There is one temperature sensor in each of the four CPC bays.
Since CPC bays B and C also house CEAC calculators 1 and 2, respectively, a high temperature in either of these bays may also indicate a problem with the associated CEAC. CEAC OPERABILITY is addressed in LCO 3.3.3.
If a CPC cabinet high temperature alarm is received, it is possible for the CPC to be affected and not be completely reliable. Therefore, a CHANNEL FUNCTIONAL TEST must be performed within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />. The Completion Time of 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> is adequate considering the low probability of undetected failure, the consequences of a single channel failure, and the time required to perform a CHANNEL FUNCTIONAL TEST.
F.1 Condition F applies if an OPERABLE CPC has three or more autorestarts in a 12 hour1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> period.
CPCs and CEACs will attempt to autorestart if they detect a fault condition, such as a calculator malfunction or loss of power. A successful autorestart restores the calculator to operation; however, excessive autorestarts might be indicative of a calculator problem.
Combustion Engineering STS B 3.3.1B-27 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Operating (Digital) (With Setpoint Control Program)
B 3.3.1B BASES ACTIONS (continued)
If a nonbypassed CPC has three or more autorestarts, it may not be completely reliable. Therefore, a CHANNEL FUNCTIONAL TEST must be performed on the CPC to ensure it is functioning properly. Based on plant operating experience, the Completion Time of 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> is adequate and reasonable to perform the test while still keeping the risk of operating in this condition at an acceptable level, since overt channel failure will most likely be indicated and annunciated in the control room by CPC online diagnostics.
EG.1 Condition E G is entered when the Required Action and associated Completion Time of Condition A, B, C, or D, E, or F are not met.
If the Required Actions associated with these Conditions cannot be completed within the required Completion Time, the reactor must be brought to a MODE where the Required Actions do not apply. The allowed Completion Time of 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> is reasonable, based on operating experience, for reaching the required MODE from full power conditions in an orderly manner and without challenging plant systems.
SURVEILLANCE The SRs for any particular RPS Function are found in the SR column of REQUIREMENTS Table 3.3.1-1 for that Function. Most Functions are subject to CHANNEL CHECK, CHANNEL FUNCTIONAL TEST, CHANNEL CALIBRATION, and response time testing.
REVIEWERS NOTE-----------------------------------
In order for a plant to take credit for topical reports as the basis for justifying Frequencies, topical reports must be supported by an NRC staff SER that establishes the acceptability of each topical report for that unit.
SR 3.3.1.1 Performance of the CHANNEL CHECK ensures that gross failure of instrumentation has not occurred. A CHANNEL CHECK is normally a comparison of the parameter indicated on one channel to a similar parameter on other channels. It is based on the assumption that instrument channels monitoring the same parameter should read approximately the same value. Significant deviations between the two instrument channels could be an indication of excessive instrument drift in one of the channels or of something even more serious. CHANNEL CHECK will detect gross channel failure; thus, it is key to verifying that the instrumentation continues to operate properly between each CHANNEL CALIBRATION.
Combustion Engineering STS B 3.3.1B-28 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Operating (Digital) (With Setpoint Control Program)
B 3.3.1B BASES SURVEILLANCE REQUIREMENTS (continued)
REVIEWERS NOTE-----------------------------------
Plants controlling Surveillance Frequencies under a Surveillance Frequency Control Program should utilize the appropriate Frequency description, given above, and the appropriate choice of Frequency in the Surveillance Requirement.
]
The 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> after reaching 70% RTP is for plant stabilization, data taking, and flow verification. This check (and if necessary, the adjustment of the CPC addressable constant flow coefficients) ensures that the DNBR setpoint is conservatively adjusted with respect to actual flow indications, as determined by the Core Operating Limits Supervisory System (COLSS).
SR 3.3.1.3 The CPC autorestart count is checked to monitor the CPC and CEAC for normal operation. If three or more autorestarts of a nonbypassed CPC occur within a 12 hour1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> period, the CPC may not be completely reliable.
Therefore, the Required Action of Condition F must be performed. [ The Frequency of 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> is based on operating experience that demonstrates the rarity of more than one channel failing within the same 12 hour1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> interval.
OR The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
REVIEWERS NOTE-----------------------------------
Plants controlling Surveillance Frequencies under a Surveillance Frequency Control Program should utilize the appropriate Frequency description, given above, and the appropriate choice of Frequency in the Surveillance Requirement.
]
Combustion Engineering STS B 3.3.1B-30 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Operating (Digital) (With Setpoint Control Program)
B 3.3.1B BASES SURVEILLANCE REQUIREMENTS (continued)
SR 3.3.1.34 A daily calibration (heat balance) is performed when THERMAL POWER is 20%. The Linear Power Level signal and the CPC addressable constant multipliers are adjusted to make the CPC T power and nuclear power calculations agree with the calorimetric calculation if the absolute difference is 2%. The value of 2% is adequate because this value is assumed in the safety analysis. These checks (and, if necessary, the adjustment of the Linear Power Level signal and the CPC addressable constant coefficients) are adequate to ensure that the accuracy of these CPC calculations is maintained within the analyzed error margins. The power level must be > 20% RTP to obtain accurate data. At lower power levels, the accuracy of calorimetric data is questionable.
[ The Frequency of 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> is based on plant operating experience and takes into account indications and alarms located in the control room to detect deviations in channel outputs.
OR The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
REVIEWERS NOTE-----------------------------------
Plants controlling Surveillance Frequencies under a Surveillance Frequency Control Program should utilize the appropriate Frequency description, given above, and the appropriate choice of Frequency in the Surveillance Requirement.
]
The Frequency is modified by a Note indicating this Surveillance need only be performed within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> after reaching 20% RTP. The 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> after reaching 20% RTP is required for plant stabilization, data taking, and flow verification. The secondary calorimetric is inaccurate at lower power levels. A second Note in the SR indicates the SR may be suspended during PHYSICS TESTS. The conditional suspension of the daily calibrations under strict administrative control is necessary to allow special testing to occur.
Combustion Engineering STS B 3.3.1B-31 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Operating (Digital) (With Setpoint Control Program)
B 3.3.1B BASES SURVEILLANCE REQUIREMENTS (continued)
SR 3.3.1.45 The RCS flow rate indicated by each CPC is verified to be less than or equal to the RCS total flow rate. The Note indicates the Surveillance is performed within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> after THERMAL POWER is 70% RTP. This check (and, if necessary, the adjustment of the CPC addressable flow constant coefficients) ensures that the DNBR setpoint is conservatively adjusted with respect to actual flow indications as determined by a calorimetric calculation. [ Operating experience has shown the specified Frequency of 31 days is adequate, as instrument drift is minimal and changes in actual flow rate are minimal over core life.
OR The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
REVIEWERS NOTE-----------------------------------
Plants controlling Surveillance Frequencies under a Surveillance Frequency Control Program should utilize the appropriate Frequency description, given above, and the appropriate choice of Frequency in the Surveillance Requirement.
]
SR 3.3.1.56 The three vertically mounted excore nuclear instrumentation detectors in each channel are used to determine APD for use in the DNBR and LPD calculations. Because the detectors are mounted outside the reactor vessel, a portion of the signal from each detector is from core sections not adjacent to the detector. This is termed shape annealing and is compensated for after every refueling by performing SR 3.3.1.1112, which adjusts the gains of the three detector amplifiers for shape annealing. SR 3.3.1.56 ensures that the preassigned gains are still proper. Power must be > 15% because the CPCs do not use the excore generated signals for axial flux shape information at low power levels.
The Note allowing 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> after reaching 15% RTP is required for plant stabilization and testing.
Combustion Engineering STS B 3.3.1B-32 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Operating (Digital) (With Setpoint Control Program)
B 3.3.1B BASES SURVEILLANCE REQUIREMENTS (continued)
[ The 31 day Frequency is adequate because the demonstrated long term drift of the instrument channels is minimal.
OR The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
REVIEWERS NOTE-----------------------------------
Plants controlling Surveillance Frequencies under a Surveillance Frequency Control Program should utilize the appropriate Frequency description, given above, and the appropriate choice of Frequency in the Surveillance Requirement.
]
SR 3.3.1.67 A CHANNEL FUNCTIONAL TEST on each channel except Loss of Load, power range neutron flux, and logarithmic power level channels is performed to ensure the entire channel will perform its intended function when needed. The SR is modified by two Notes. Note 1 is a requirement to verify the correct CPC addressable constant values are installed in the CPCs when the CPC CHANNEL FUNCTIONAL TEST is performed.
Note 2 allows the CHANNEL FUNCTIONAL TEST for the Logarithmic Power Level - High channels to be performed 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> after logarithmic power drops below 1E-4% and is required to be performed only if the RTCBs are closed. The test is performed in accordance with the SCP. If the actual setting of the channel is found to be conservative with respect to the Allowable Value but is beyond the as-found tolerance band, the channel is OPERABLE but degraded. The degraded condition of the channel will be further evaluated during performance of the SR. This evaluation will consist of resetting the channel setpoint to the [NTSP]
(within the allowed tolerance), and evaluating the channel response. If the channel is functioning as required and is expected to pass the next surveillance, then the channel is OPERABLE and can be restored to service at the completion of the surveillance. After the surveillance is completed, the channel as-found condition will be entered into the Corrective Action Program for further evaluation.
In addition to power supply tests, the RPS CHANNEL FUNCTIONAL TEST consists of three overlapping tests as described in Reference 8.
These tests verify that the RPS is capable of performing its intended function, from bistable input through the RTCBs. They include:
Combustion Engineering STS B 3.3.1B-33 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Operating (Digital) (With Setpoint Control Program)
B 3.3.1B BASES SURVEILLANCE REQUIREMENTS (continued)
Bistable Tests A test signal is superimposed on the input in one channel at a time to verify that the bistable trips within the specified tolerance around the setpoint. This is done with the affected RPS channel trip channel bypassed. The test is performed in accordance with the SCP. If the actual setting of the channel is found to be conservative with respect to the Allowable Value but is beyond the as-found tolerance band, the channel is OPERABLE but degraded. The degraded condition of the channel will be further evaluated during performance of the SR. This evaluation will consist of resetting the channel setpoint to the [NTSP]
(within the allowed tolerance), and evaluating the channel response. If the channel is functioning as required and is expected to pass the next surveillance, then the channel is OPERABLE and can be restored to service at the completion of the surveillance. After the surveillance is completed, the channel as-found condition will be entered into the Corrective Action Program for further evaluation.
Matrix Logic Tests Matrix Logic tests are addressed in LCO 3.3.4. This test is performed one matrix at a time. It verifies that a coincidence in the two input channels for each Function removes power from the matrix relays.
During testing, power is applied to the matrix relay test coils and prevents the matrix relay contacts from assuming their de-energized state. This test will detect any short circuits around the bistable contacts in the coincidence logic, such as may be caused by faulty bistable relay or trip channel bypass contacts.
Trip Path Tests Trip path (Initiation Logic) tests are addressed in LCO 3.3.4. These tests are similar to the Matrix Logic tests, except that test power is withheld from one matrix relay at a time, allowing the initiation circuit to de-energize, thereby opening the affected set of RTCBs. The RTCBs must then be closed prior to testing the other three initiation circuits, or a reactor trip may result.
[ The Frequency of 92 days is based on the reliability analysis presented in topical report CEN-327, "RPS/ESFAS Extended Test Interval Evaluation" (Ref. 9).
Combustion Engineering STS B 3.3.1B-34 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Operating (Digital) (With Setpoint Control Program)
B 3.3.1B BASES SURVEILLANCE REQUIREMENTS (continued)
OR The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
REVIEWERS NOTE-----------------------------------
Plants controlling Surveillance Frequencies under a Surveillance Frequency Control Program should utilize the appropriate Frequency description, given above, and the appropriate choice of Frequency in the Surveillance Requirement.
]
The CPC and CEAC channels and excore nuclear instrumentation channels are tested separately.
The excore channels use preassigned test signals to verify proper channel alignment. The excore logarithmic channel test signal is inserted into the preamplifier input, so as to test the first active element downstream of the detector.
The power range excore test signal is inserted at the drawer input, since there is no preamplifier.
The quarterly CPC CHANNEL FUNCTIONAL TEST is performed using software. This software includes preassigned addressable constant values that may differ from the current values. Provisions are made to store the addressable constant values on a computer disk prior to testing and to reload them after testing. A Note is added to the Surveillance Requirements to verify that the CPC CHANNEL FUNCTIONAL TEST includes the correct values of addressable constants. A successful test of the required contact(s) of a channel relay may be performed by the verification of the change of state of a single contact of the relay. This clarifies what is an acceptable CHANNEL FUNCTIONAL TEST of a relay.
This is acceptable because all of the other required contacts of the relay are verified by other Technical Specifications and non-Technical Specifications tests at least once per refueling interval with applicable extensions.
Combustion Engineering STS B 3.3.1B-35 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Operating (Digital) (With Setpoint Control Program)
B 3.3.1B BASES SURVEILLANCE REQUIREMENTS (continued)
SR 3.3.1.78 A Note indicates that neutron detectors are excluded from CHANNEL CALIBRATION. [ A CHANNEL CALIBRATION of the power range neutron flux channels every 92 days ensures that the channels are reading accurately and within tolerance (Ref. 9).
OR The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
REVIEWERS NOTE-----------------------------------
Plants controlling Surveillance Frequencies under a Surveillance Frequency Control Program should utilize the appropriate Frequency description, given above, and the appropriate choice of Frequency in the Surveillance Requirement.
]
The Surveillance verifies that the channel responds to a measured parameter within the necessary range and accuracy. CHANNEL CALIBRATION leaves the channel adjusted to account for instrument drift between successive calibrations to ensure that the channel remains operational between successive tests. The test is performed in accordance with the SCP. If the actual setting of the channel is found to be conservative with respect to the Allowable Value but is beyond the as-found tolerance band, the channel is OPERABLE but degraded. The degraded condition of the channel will be further evaluated during performance of the SR. This evaluation will consist of resetting the channel setpoint to the [NTSP] (within the allowed tolerance), and evaluating the channel response. If the channel is functioning as required and is expected to pass the next surveillance, then the channel is OPERABLE and can be restored to service at the completion of the surveillance. After the surveillance is completed, the channel as-found condition will be entered into the Corrective Action Program for further evaluation.
Combustion Engineering STS B 3.3.1B-36 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Operating (Digital) (With Setpoint Control Program)
B 3.3.1B BASES SURVEILLANCE REQUIREMENTS (continued)
Operating experience has shown this Frequency to be satisfactory. The detectors are excluded from CHANNEL CALIBRATION because they are passive devices with minimal drift and because of the difficulty of simulating a meaningful signal. Slow changes in detector sensitivity are compensated for by performing the calorimetric calibration (SR 3.3.1.34) and the linear subchannel gain check (SR 3.3.1.56). In addition, the associated control room indications are monitored by the operators.
[ SR 3.3.1.89 The characteristics and Bases for this Surveillance are as described for SR 3.3.1.67. This Surveillance differs from SR 3.3.1.67 only in that the CHANNEL FUNCTIONAL TEST on the Loss of Load functional unit is only required above 55% RTP. When above 55% and the trip is in effect, the CHANNEL FUNCTIONAL TEST will ensure the channel will perform its equipment protective function if needed. The test is performed in accordance with the SCP. If the actual setting of the channel is found to be conservative with respect to the Allowable Value but is beyond the as-found tolerance band, the channel is OPERABLE but degraded. The degraded condition of the channel will be further evaluated during performance of the SR. This evaluation will consist of resetting the channel setpoint to the [NTSP] (within the allowed tolerance), and evaluating the channel response. If the channel is functioning as required and is expected to pass the next surveillance, then the channel is OPERABLE and can be restored to service at the completion of the surveillance. After the surveillance is completed, the channel as-found condition will be entered into the Corrective Action Program for further evaluation. A successful test of the required contact(s) of a channel relay may be performed by the verification of the change of state of a single contact of the relay. This clarifies what is an acceptable CHANNEL FUNCTIONAL TEST of a relay. This is acceptable because all of the other required contacts of the relay are verified by other Technical Specifications and non-Technical Specifications tests at least once per refueling interval with applicable extensions. The Note allowing 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> after reaching 55% RTP is necessary for Surveillance performance. This Surveillance cannot be performed below 55% RTP, since the trip is bypassed. ]
Combustion Engineering STS B 3.3.1B-37 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Operating (Digital) (With Setpoint Control Program)
B 3.3.1B BASES SURVEILLANCE REQUIREMENTS (continued)
SR 3.3.1.910 SR 3.3.1.910 is the performance of a CHANNEL CALIBRATION.
CHANNEL CALIBRATION is a complete check of the instrument channel including the sensor. The Surveillance verifies that the channel responds to a measured parameter within the necessary range and accuracy.
CHANNEL CALIBRATION leaves the channel adjusted to account for instrument drift between successive calibrations to ensure that the channel remains operational between successive tests. The test is performed in accordance with the SCP. If the actual setting of the channel is found to be conservative with respect to the Allowable Value but is beyond the as-found tolerance band, the channel is OPERABLE but degraded. The degraded condition of the channel will be further evaluated during performance of the SR. This evaluation will consist of resetting the channel setpoint to the [NTSP] (within the allowed tolerance), and evaluating the channel response. If the channel is functioning as required and is expected to pass the next surveillance, then the channel is OPERABLE and can be restored to service at the completion of the surveillance. After the surveillance is completed, the channel as-found condition will be entered into the Corrective Action Program for further evaluation.
[ The Frequency is based upon the assumption of an [18] month calibration interval for the determination of the magnitude of equipment drift in the setpoint analysis as well as operating experience and consistency with the typical [18] month fuel cycle.
OR The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
REVIEWERS NOTE-----------------------------------
Plants controlling Surveillance Frequencies under a Surveillance Frequency Control Program should utilize the appropriate Frequency description, given above, and the appropriate choice of Frequency in the Surveillance Requirement.
]
Combustion Engineering STS B 3.3.1B-38 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Operating (Digital) (With Setpoint Control Program)
B 3.3.1B BASES SURVEILLANCE REQUIREMENTS (continued)
The Surveillance is modified by a Note to indicate that the neutron detectors are excluded from CHANNEL CALIBRATION because they are passive devices with minimal drift and because of the difficulty of simulating a meaningful signal. Slow changes in detector sensitivity are compensated for by performing the daily calorimetric calibration (SR 3.3.1.34) and the monthly linear subchannel gain check (SR 3.3.1.56).
SR 3.3.1.1011 A CHANNEL FUNCTIONAL TEST is performed on the CPCs. The CHANNEL FUNCTIONAL TEST shall include the injection of a signal as close to the sensors as practicable to verify OPERABILITY including alarm and trip Functions. A successful test of the required contact(s) of a channel relay may be performed by the verification of the change of state of a single contact of the relay. This clarifies what is an acceptable CHANNEL FUNCTIONAL TEST of a relay. This is acceptable because all of the other required contacts of the relay are verified by other Technical Specifications and non-Technical Specifications tests at least once per refueling interval with applicable extensions. The test is performed in accordance with the SCP. If the actual setting of the channel is found to be conservative with respect to the Allowable Value but is beyond the as-found tolerance band, the channel is OPERABLE but degraded. The degraded condition of the channel will be further evaluated during performance of the SR. This evaluation will consist of resetting the channel setpoint to the [NTSP] (within the allowed tolerance), and evaluating the channel response. If the channel is functioning as required and is expected to pass the next surveillance, then the channel is OPERABLE and can be restored to service at the completion of the surveillance. After the surveillance is completed, the channel as-found condition will be entered into the Corrective Action Program for further evaluation.
[ The basis for the [18] month Frequency is that the CPCs perform a continuous self monitoring function that eliminates the need for frequent CHANNEL FUNCTIONAL TESTS. This CHANNEL FUNCTIONAL TEST essentially validates the self monitoring function and checks for a small set of failure modes that are undetectable by the self monitoring function.
Operating experience has shown that undetected CPC or CEAC failures do not occur in any given [18] month interval.
Combustion Engineering STS B 3.3.1B-39 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Operating (Digital) (With Setpoint Control Program)
B 3.3.1B BASES SURVEILLANCE REQUIREMENTS (continued)
OR The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
REVIEWERS NOTE-----------------------------------
Plants controlling Surveillance Frequencies under a Surveillance Frequency Control Program should utilize the appropriate Frequency description, given above, and the appropriate choice of Frequency in the Surveillance Requirement.
]
SR 3.3.1.1112 The three excore detectors used by each CPC channel for axial flux distribution information are far enough from the core to be exposed to flux from all heights in the core, although it is desired that they only read their particular level. The CPCs adjust for this flux overlap by using the predetermined shape annealing matrix elements in the CPC software.
After refueling, it is necessary to re-establish or verify the shape annealing matrix elements for the excore detectors based on more accurate incore detector readings. This is necessary because refueling could possibly produce a significant change in the shape annealing matrix coefficients.
Incore detectors are inaccurate at low power levels. THERMAL POWER should be significant but < 70% to perform an accurate axial shape calculation used to derive the shape annealing matrix elements.
By restricting power to 70% until shape annealing matrix elements are verified, excessive local power peaks within the fuel are avoided.
Operating experience has shown this Frequency to be acceptable.
SR 3.3.1.1213 SR 3.3.1.1213 is a CHANNEL FUNCTIONAL TEST similar to SR 3.3.1.67, except SR 3.3.1.1213 is applicable only to bypass functions and is performed once within 92 days prior to each startup. A successful test of the required contact(s) of a channel relay may be performed by the verification of the change of state of a single contact of the relay. This clarifies what is an acceptable CHANNEL FUNCTIONAL TEST of a relay.
Combustion Engineering STS B 3.3.1B-40 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Operating (Digital) (With Setpoint Control Program)
B 3.3.1B BASES SURVEILLANCE REQUIREMENTS (continued)
This is acceptable because all of the other required contacts of the relay are verified by other Technical Specifications and non-Technical Specifications tests at least once per refueling interval with applicable extensions. Proper operation of bypass permissives is critical during plant startup because the bypasses must be in place to allow startup operation and must be removed at the appropriate points during power ascent to enable certain reactor trips. Consequently, the appropriate time to verify bypass removal function OPERABILITY is just prior to startup.
The allowance to conduct this Surveillance within 92 days of startup is based on the reliability analysis presented in topical report CEN-327, "RPS/ESFAS Extended Test Interval Evaluation" (Ref. 9). Once the operating bypasses are removed, the bypasses must not fail in such a way that the associated trip Function gets inadvertently bypassed. This feature is verified by the trip Function CHANNEL FUNCTIONAL TEST, SR 3.3.1.67 or SR 3.3.1.89. Therefore, further testing of the bypass function after startup is unnecessary.
SR 3.3.1.1314 This SR ensures that the RPS RESPONSE TIMES are verified to be less than or equal to the maximum values assumed in the safety analysis.
Individual component response times are not modeled in the analyses.
The analyses model the overall or total elapsed time, from the point at which the parameter exceeds the trip setpoint value at the sensor to the point at which the RTCBs open. [ Response times are conducted on an
[18] month STAGGERED TEST BASIS. This results in the interval between successive surveillances of a given channel of n x 18 months, where n is the number of channels in the function. The Frequency of
[18] months is based upon operating experience, which has shown that random failures of instrumentation components causing serious response time degradation, but not channel failure, are infrequent occurrences.
Also, response times cannot be determined at power, since equipment operation is required. Testing may be performed in one measurement or in overlapping segments, with verification that all components are tested.
OR The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
Combustion Engineering STS B 3.3.1B-41 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Operating (Digital) (With Setpoint Control Program)
B 3.3.1B BASES SURVEILLANCE REQUIREMENTS (continued)
REVIEWERS NOTE-----------------------------------
Plants controlling Surveillance Frequencies under a Surveillance Frequency Control Program should utilize the appropriate Frequency description, given above, and the appropriate choice of Frequency in the Surveillance Requirement.
]
REVIEWERS NOTE-----------------------------------
Applicable portions of the following TS Bases are applicable to plants adopting CEOG Topical Report CE NPSD-1167-1, "Elimination of Pressure Sensor Response Time Testing Requirements."
Response time may be verified by any series of sequential, overlapping or total channel measurements, including allocated sensor response time, such that the response time is verified. Allocations for sensor response times may be obtained from records of test results, vendor test data, or vendor engineering specifications. Topical Report CE NPSD-1167-A, "Elimination of Pressure Sensor Response Time Testing Requirements,"
(Ref. 10) provides the basis and methodology for using allocated sensor response times in the overall verification of the channel response time for specific sensors identified in the Topical Report. Response time verification for other sensor types must be demonstrated by test. The allocation of sensor response times must be verified prior to placing a new component in operation and reverified after maintenance that may adversely affect the sensor response time.
A Note is added to indicate that the neutron detectors are excluded from RPS RESPONSE TIME testing because they are passive devices with minimal drift and because of the difficulty of simulating a meaningful signal. Slow changes in detector sensitivity are compensated for by performing the daily calorimetric calibration (SR 3.3.1.34).
REFERENCES 1. Regulatory Guide 1.105, Revision 3, "Setpoints for Safety-Related Instrumentation."
- 3. 10 CFR 100.
- 4. NRC Safety Evaluation Report.
Combustion Engineering STS B 3.3.1B-42 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Operating (Digital) (With Setpoint Control Program)
B 3.3.1B BASES REFERENCES (continued)
- 5. IEEE Standard 279-1971, April 5, 1972.
- 6. FSAR, Chapter [14].
- 7. 10 CFR 50.49.
- 8. FSAR, Section [7.2].
- 9. CEN-327, June 2, 1986, including Supplement 1, March 3, 1989.
- 10. CEOG Topical Report CE NPSD-1167-A, "Elimination of Pressure Sensor Response Time Testing Requirements."
Combustion Engineering STS B 3.3.1B-43 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Shutdown (Digital) (Without Setpoint Control Program)
B 3.3.2A BASES SURVEILLANCE REQUIREMENTS (continued)
Trip Path Test Trip path (Initiation Logic) tests are addressed in LCO 3.3.4. These tests are similar to the Matrix Logic tests except that test power is withheld from one matrix relay at a time, allowing the initiation circuit to de-energize, opening the affected set of RTCBs. The RTCBs must then be closed prior to testing the other three initiation circuits, or a reactor trip may result.
[ The Frequency of 92 days is based on the reliability analysis presented in topical report CEN-327, "RPS/ESFAS Extended Test Interval Evaluation" (Ref. 6). The excore channels use preassigned test signals to verify proper channel alignment. The excore logarithmic channel test signal is inserted into the preamplifier input, so as to test the first active element downstream of the detector.
OR The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
REVIEWERS NOTE-----------------------------------
Plants controlling Surveillance Frequencies under a Surveillance Frequency Control Program should utilize the appropriate Frequency description, given above, and the appropriate choice of Frequency in the Surveillance Requirement.
]
SR 3.3.2.3 SR 3.3.2.3 is a CHANNEL FUNCTIONAL TEST similar to SR 3.3.2.2, except SR 3.3.2.3 is applicable only to bypass functions and is performed once within 92 days prior to each startup. This SR is identical to SR 3.3.1.1213. Only the Applicability differs. A successful test of the required contact(s) of a channel relay may be performed by the verification of the change of state of a single contact of the relay. This clarifies what is an acceptable CHANNEL FUNCTIONAL TEST of a relay.
This is acceptable because all of the other required contacts of the relay are verified by other Technical Specifications and non-Technical Specifications tests at least once per refueling interval with applicable extensions.
Combustion Engineering STS B 3.3.2A-10 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Shutdown (Digital) (Without Setpoint Control Program)
B 3.3.2A BASES SURVEILLANCE REQUIREMENTS (continued)
Proper operation of bypass permissives is critical during plant startup because the bypasses must be in place to allow startup operation and must be removed at the appropriate points during power ascent to enable certain reactor trips. Consequently, the appropriate time to verify bypass removal function OPERABILITY is just prior to startup. The allowance to conduct this Surveillance within 92 days of startup is based on the reliability analysis presented in topical report CEN-327, "RPS/ESFAS Extended Test Interval Evaluation" (Ref. 6). Once the operating bypasses are removed, the bypasses must not fail in such a way that the associated trip Function gets inadvertently bypassed. This feature is verified by the trip Function CHANNEL FUNCTIONAL TEST, SR 3.3.2.2.
Therefore, further testing of the bypass function after startup is unnecessary.
SR 3.3.2.4 This SR is identical to SR 3.3.1.910. Only the Applicability differs.
CHANNEL CALIBRATION is a complete check of the instrument channel excluding the sensor. The Surveillance verifies that the channel responds to a measured parameter within the necessary range and accuracy.
CHANNEL CALIBRATION leaves the channel adjusted to account for instrument drift between successive calibrations to ensure that the channel remains operational between successive tests. There is a plant specific program which verifies that the instrument channel functions as required by verifying the as-left and as-found setting are consistent with those established by the setpoint methodology. CHANNEL CALIBRATIONS must be performed consistent with the plant specific setpoint analysis.
Only the Allowable Values are specified for this RPS trip Function.
Nominal trip setpoints are specified in the plant specific setpoint calculations. The nominal setpoint is selected to ensure the setpoint measured by CHANNEL FUNCTIONAL TESTS does not exceed the Allowable Value if the bistable is performing as required. Operation with a trip setpoint less conservative than the nominal trip setpoint, but within its Allowable Value, is acceptable provided that operation and testing are consistent with the assumptions of the plant specific setpoint calculations.
Each Allowable Value specified is more conservative than the analytical limit assumed in the safety analysis in order to account for instrument uncertainties appropriate to the trip Function. These uncertainties are defined in the "Plant Protection System Selection of Trip Setpoint Values" (Ref. 4). A channel is inoperable if its actual trip setpoint is not within its required Allowable Value.
Combustion Engineering STS B 3.3.2A-11 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Shutdown (Digital) (With Setpoint Control Program)
B 3.3.2B BASES SURVEILLANCE REQUIREMENTS (continued)
Trip Path Test Trip path (Initiation Logic) tests are addressed in LCO 3.3.4. These tests are similar to the Matrix Logic tests except that test power is withheld from one matrix relay at a time, allowing the initiation circuit to de-energize, opening the affected set of RTCBs. The RTCBs must then be closed prior to testing the other three initiation circuits, or a reactor trip may result.
[ The Frequency of 92 days is based on the reliability analysis presented in topical report CEN-327, "RPS/ESFAS Extended Test Interval Evaluation" (Ref. 6). The excore channels use preassigned test signals to verify proper channel alignment. The excore logarithmic channel test signal is inserted into the preamplifier input, so as to test the first active element downstream of the detector.
OR The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
REVIEWERS NOTE-----------------------------------
Plants controlling Surveillance Frequencies under a Surveillance Frequency Control Program should utilize the appropriate Frequency description, given above, and the appropriate choice of Frequency in the Surveillance Requirement.
]
SR 3.3.2.3 SR 3.3.2.3 is a CHANNEL FUNCTIONAL TEST similar to SR 3.3.2.2, except SR 3.3.2.3 is applicable only to bypass functions and is performed once within 92 days prior to each startup. This SR is identical to SR 3.3.1.1213. Only the Applicability differs. A successful test of the required contact(s) of a channel relay may be performed by the verification of the change of state of a single contact of the relay. This clarifies what is an acceptable CHANNEL FUNCTIONAL TEST of a relay.
This is acceptable because all of the other required contacts of the relay are verified by other Technical Specifications and non-Technical Specifications tests at least once per refueling interval with applicable extensions.
Combustion Engineering STS B 3.3.2B-10 Rev. 4.0
TSTF-536, Rev. 0 RPS Instrumentation - Shutdown (Digital) (With Setpoint Control Program)
B 3.3.2B BASES SURVEILLANCE REQUIREMENTS (continued)
Proper operation of bypass permissives is critical during plant startup because the bypasses must be in place to allow startup operation and must be removed at the appropriate points during power ascent to enable certain reactor trips. Consequently, the appropriate time to verify bypass removal function OPERABILITY is just prior to startup. The allowance to conduct this Surveillance within 92 days of startup is based on the reliability analysis presented in topical report CEN-327, "RPS/ESFAS Extended Test Interval Evaluation" (Ref. 6). Once the operating bypasses are removed, the bypasses must not fail in such a way that the associated trip Function gets inadvertently bypassed. This feature is verified by the trip Function CHANNEL FUNCTIONAL TEST, SR 3.3.2.2.
Therefore, further testing of the bypass function after startup is unnecessary.
SR 3.3.2.4 This SR is identical to SR 3.3.1.910. Only the Applicability differs.
CHANNEL CALIBRATION is a complete check of the instrument channel excluding the sensor. The Surveillance verifies that the channel responds to a measured parameter within the necessary range and accuracy.
CHANNEL CALIBRATION leaves the channel adjusted to account for instrument drift between successive calibrations to ensure that the channel remains operational between successive tests. The SCP has controls which require verification that the instrument channel functions as required by verifying the as-left and as-found setting are consistent with those established by the setpoint methodology.
Allowable Values and nominal trip setpoints are specified for this RPS trip Function in the SCP setpoint calculations. The nominal setpoint is selected to ensure the setpoint measured by CHANNEL FUNCTIONAL TESTS does not exceed the Allowable Value if the bistable is performing as required. Operation with a trip setpoint less conservative than the nominal trip setpoint, but within its Allowable Value, is acceptable provided that operation and testing are consistent with the assumptions of the plant specific setpoint calculations. Each Allowable Value specified is more conservative than the analytical limit assumed in the safety analysis in order to account for instrument uncertainties appropriate to the trip Function. These uncertainties are defined in the "Plant Protection System Selection of Trip Setpoint Values" (Ref. 4). A channel is inoperable if its actual trip setpoint is not within its required Allowable Value.
Combustion Engineering STS B 3.3.2B-11 Rev. 4.0
TSTF-536, Rev. 0 CEACs (Digital) (Without Setpoint Control Program)
B 3.3.3A BASES ACTIONS (continued)
B.4 The CEDMCS is placed and maintained in "OFF," except during CEA motion permitted by Required Action B.2, to prevent inadvertent motion and possible misalignment of the CEAs.
B.5 A comprehensive set of comparison checks on individual CEAs within groups must be made within 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br />. Verification that each CEA is within 7 inches of other CEAs in its group provides a check that no CEA has deviated from its proper position within the group.
C.1 Condition C applies if the CPC channel B or C cabinet receives a high temperature alarm. There is one temperature sensor in each of the four CPC bays. Since CPC bays B and C also house CEAC calculators 1 and 2, respectively, a high temperature in either of these bays may also indicate a problem with the associated CEAC.
If a CPC channel B or C cabinet high temperature alarm is received, it is possible for the CEAC to be affected and not be completely reliable.
Therefore, a CHANNEL FUNCTIONAL TEST must be performed within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />. The Completion Time of 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> is adequate, considering the low probability of undetected failure, the consequences of failure, and the time required to perform a CHANNEL FUNCTIONAL TEST.
D.1 Condition D applies if an OPERABLE CEAC has three or more autorestarts in a 12 hour1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> period.
CPCs and CEACs will attempt to autorestart if they detect a fault condition such as a calculator malfunction or loss of power. A successful autorestart restores the calculator to operation; however, excessive autorestarts might be indicative of a calculator problem.
Combustion Engineering STS B 3.3.3A-6 Rev. 4.0
TSTF-536, Rev. 0 CEACs (Digital) (Without Setpoint Control Program)
B 3.3.3A BASES ACTIONS (continued)
If a nonbypassed CEAC has three or more autorestarts, it may not be completely reliable. Therefore, a CHANNEL FUNCTIONAL TEST must be performed on the CEAC to ensure it is functioning properly. Based on plant operating experience, the Completion Time of 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> is adequate and reasonable to perform the test while still keeping the risk of operating in this condition at an acceptable level, since overt channel failure will most likely be indicated and annunciated by CPC online diagnostics.
CE.1 Condition CE is entered when the Required Action and associated Completion Time of Condition B, C, or D are is not met.
If the Required Actions associated with these Conditions cannot be completed within the required Completion Time, the reactor must be brought to a MODE where the Required Actions do not apply. The Completion Time of 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> is reasonable, based on operating experience, for reaching the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.
SURVEILLANCE -----------------------------------REVIEWERS NOTE-----------------------------------
REQUIREMENTS In order for a plant to take credit for topical reports as the basis for justifying Frequencies, topical reports must be supported by an NRC staff Safety Evaluation Report that establishes the acceptability of each topical report for that plant (Ref. 4).
SR 3.3.3.1 Performance of the CHANNEL CHECK ensures that gross failure of instrumentation has not occurred. A CHANNEL CHECK is normally a comparison of the parameter indicated on one channel to a similar parameter on another channel. It is based on the assumption that instrument channels monitoring the same parameter should read approximately the same value.
Significant deviations between the two instrument channels could be an indication of excessive instrument drift in one of the channels or of something even more serious. CHANNEL CHECK will detect gross channel failure; thus, it is key to verifying that the instrumentation continues to operate properly between each CHANNEL CALIBRATION.
Combustion Engineering STS B 3.3.3A-7 Rev. 4.0
TSTF-536, Rev. 0 CEACs (Digital) (Without Setpoint Control Program)
B 3.3.3A BASES SURVEILLANCE REQUIREMENTS (continued)
Agreement criteria are determined by the plant staff, based on a combination of the channel instrument uncertainties, including indication and readability. If a channel is outside the criteria, it may be an indication that the sensor or the signal processing equipment has drifted outside its limits.
[ The Frequency, about once every shift, is based on operating experience that demonstrates the rarity of channel failure. Since the probability of two random failures in redundant channels in any 12 hour1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> period is extremely low, the CHANNEL CHECK minimizes the chance of loss of protective function due to failure of redundant channels. The CHANNEL CHECK supplements less formal, but more frequent, checks of channel OPERABILITY during normal operational use of the displays associated with the LCO required channels.
OR The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
REVIEWERS NOTE-----------------------------------
Plants controlling Surveillance Frequencies under a Surveillance Frequency Control Program should utilize the appropriate Frequency description, given above, and the appropriate choice of Frequency in the Surveillance Requirement.
]
SR 3.3.3.2 The CEAC autorestart count is checked to monitor the CPC and CEAC for normal operation. If three or more autorestarts of a nonbypassed CPC occur, the CPC may not be completely reliable. Therefore, the Required Action of Condition D must be performed. [ The Frequency is based on operating experience that demonstrates the rarity of more than one channel failing within the same 12 hour1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> interval.
OR The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
Combustion Engineering STS B 3.3.3A-8 Rev. 4.0
TSTF-536, Rev. 0 CEACs (Digital) (Without Setpoint Control Program)
B 3.3.3A BASES SURVEILLANCE REQUIREMENTS (continued)
REVIEWERS NOTE-----------------------------------
Plants controlling Surveillance Frequencies under a Surveillance Frequency Control Program should utilize the appropriate Frequency description, given above, and the appropriate choice of Frequency in the Surveillance Requirement.
]
SR 3.3.3.23 A CHANNEL FUNCTIONAL TEST on each CEAC channel is performed to ensure the entire channel will perform its intended function when needed. [ The quarterly CHANNEL FUNCTIONAL TEST is performed using test software. The Frequency of 92 days is based on the reliability analysis presented in topical report CEN-327, "RPS/ESFAS Extended Test Interval Evaluation" (Ref. 5).
OR The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
REVIEWERS NOTE-----------------------------------
Plants controlling Surveillance Frequencies under a Surveillance Frequency Control Program should utilize the appropriate Frequency description, given above, and the appropriate choice of Frequency in the Surveillance Requirement.
]
A successful test of the required contact(s) of a channel relay may be performed by the verification of the change of state of a single contact of the relay. This clarifies what is an acceptable CHANNEL FUNCTIONAL TEST of a relay. This is acceptable because all of the other required contacts of the relay are verified by other Technical Specifications and non-Technical Specifications tests at least once per refueling interval with applicable extensions.
There is a plant specific program which verifies that the instrument channel functions as required by verifying the as-left and as-found setting are consistent with those established by the setpoint methodology.
Combustion Engineering STS B 3.3.3A-9 Rev. 4.0
TSTF-536, Rev. 0 CEACs (Digital) (Without Setpoint Control Program)
B 3.3.3A BASES SURVEILLANCE REQUIREMENTS (continued)
SR 3.3.3.34 SR 3.3.3.34 is the performance of a CHANNEL CALIBRATION.
CHANNEL CALIBRATION is a complete check of the instrument channel including the sensor. The Surveillance verifies that the channel responds to a measured parameter within the necessary range and accuracy.
CHANNEL CALIBRATION leaves the channel adjusted to account for instrument drift between successive calibrations to ensure that the channel remains operational between successive surveillances. There is a plant specific program which verifies that the instrument channel functions as required by verifying the as-left and as-found setting are consistent with those established by the setpoint methodology.
CHANNEL CALIBRATIONS must be performed consistent with the plant specific setpoint analysis.
[ The Frequency is based upon the assumption of an [18] month calibration interval in the determination of the magnitude of equipment drift in the setpoint analysis and includes operating experience and consistency with the typical [18] month fuel cycle.
OR The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
REVIEWERS NOTE-----------------------------------
Plants controlling Surveillance Frequencies under a Surveillance Frequency Control Program should utilize the appropriate Frequency description, given above, and the appropriate choice of Frequency in the Surveillance Requirement.
]
Combustion Engineering STS B 3.3.3A-10 Rev. 4.0
TSTF-536, Rev. 0 CEACs (Digital) (Without Setpoint Control Program)
B 3.3.3A BASES SURVEILLANCE REQUIREMENTS (continued)
SR 3.3.3.45 A CHANNEL FUNCTIONAL TEST is performed on the CEACs. The CHANNEL FUNCTIONAL TEST shall include the injection of a signal as close to the sensors as practicable to verify OPERABILITY, including alarm and trip Functions. A successful test of the required contact(s) of a channel relay may be performed by the verification of the change of state of a single contact of the relay. This clarifies what is an acceptable CHANNEL FUNCTIONAL TEST of a relay. This is acceptable because all of the other required contacts of the relay are verified by other Technical Specifications and non-Technical Specifications tests at least once per refueling interval with applicable extensions. There is a plant specific program which verifies that the instrument channel functions as required by verifying the as-left and as-found setting are consistent with those established by the setpoint methodology.
[ The basis for the [18] month Frequency is that the CEACs perform a continuous self monitoring function that eliminates the need for frequent CHANNEL FUNCTIONAL TESTS. This CHANNEL FUNCTIONAL TEST essentially validates the self monitoring function and checks for a small set of failure modes that are undetectable by the self monitoring function.
Operating experience has shown that undetected CPC or CEAC failures do not occur in any given [18] month interval.
OR The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
REVIEWERS NOTE-----------------------------------
Plants controlling Surveillance Frequencies under a Surveillance Frequency Control Program should utilize the appropriate Frequency description, given above, and the appropriate choice of Frequency in the Surveillance Requirement.
]
Combustion Engineering STS B 3.3.3A-11 Rev. 4.0
TSTF-536, Rev. 0 CEACs (Digital) (Without Setpoint Control Program)
B 3.3.3A BASES SURVEILLANCE REQUIREMENTS (continued)
SR 3.3.3.56 The isolation characteristics of each CEAC CEA position isolation amplifier and each optical isolator for CEAC to CPC data transfer are verified to ensure that a fault in a CEAC or a CPC channel will not render another CEAC or CPC channel inoperable. The CEAC CEA position isolation amplifiers, mounted in CPC cabinets A and D, prevent a CEAC fault from propagating back to CPC A or D. The optical isolators for CPC to CEAC data transfer prevent a fault originating in any CPC channel from propagating back to any CEAC through this data link.
[ The Frequency of 18 months is based on plant operating experience with regard to channel OPERABILITY, which demonstrates the failure of a channel in any [18] month interval is rare.
OR The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
REVIEWERS NOTE-----------------------------------
Plants controlling Surveillance Frequencies under a Surveillance Frequency Control Program should utilize the appropriate Frequency description, given above, and the appropriate choice of Frequency in the Surveillance Requirement.
]
REFERENCES 1. 10 CFR 50.
- 2. 10 CFR 100.
- 3. FSAR, Section [7.2].
- 4. NRC Safety Evaluation Report, [Date].
- 5. CEN-327, June 2, 1986, including Supplement 1, March 3, 1989.
Combustion Engineering STS B 3.3.3A-12 Rev. 4.0
TSTF-536, Rev. 0 CEACs (Digital) (With Setpoint Control Program)
B 3.3.3B BASES ACTIONS (continued)
B.4 The CEDMCS is placed and maintained in "OFF," except during CEA motion permitted by Required Action B.2, to prevent inadvertent motion and possible misalignment of the CEAs.
B.5 A comprehensive set of comparison checks on individual CEAs within groups must be made within 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br />. Verification that each CEA is within 7 inches of other CEAs in its group provides a check that no CEA has deviated from its proper position within the group.
C.1 Condition C applies if the CPC channel B or C cabinet receives a high temperature alarm. There is one temperature sensor in each of the four CPC bays. Since CPC bays B and C also house CEAC calculators 1 and 2, respectively, a high temperature in either of these bays may also indicate a problem with the associated CEAC.
If a CPC channel B or C cabinet high temperature alarm is received, it is possible for the CEAC to be affected and not be completely reliable.
Therefore, a CHANNEL FUNCTIONAL TEST must be performed within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />. The Completion Time of 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> is adequate, considering the low probability of undetected failure, the consequences of failure, and the time required to perform a CHANNEL FUNCTIONAL TEST.
D.1 Condition D applies if an OPERABLE CEAC has three or more autorestarts in a 12 hour1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> period.
CPCs and CEACs will attempt to autorestart if they detect a fault condition such as a calculator malfunction or loss of power. A successful autorestart restores the calculator to operation; however, excessive autorestarts might be indicative of a calculator problem.
Combustion Engineering STS B 3.3.3B-6 Rev. 4.0
TSTF-536, Rev. 0 CEACs (Digital) (With Setpoint Control Program)
B 3.3.3B BASES ACTIONS (continued)
If a nonbypassed CEAC has three or more autorestarts, it may not be completely reliable. Therefore, a CHANNEL FUNCTIONAL TEST must be performed on the CEAC to ensure it is functioning properly. Based on plant operating experience, the Completion Time of 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> is adequate and reasonable to perform the test while still keeping the risk of operating in this condition at an acceptable level, since overt channel failure will most likely be indicated and annunciated by CPC online diagnostics.
CE.1 Condition CE is entered when the Required Action and associated Completion Time of Condition B is , C, or D are not met.
If the Required Actions associated with these Conditions cannot be completed within the required Completion Time, the reactor must be brought to a MODE where the Required Actions do not apply. The Completion Time of 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> is reasonable, based on operating experience, for reaching the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.
SURVEILLANCE -----------------------------------REVIEWERS NOTE-----------------------------------
REQUIREMENTS In order for a plant to take credit for topical reports as the basis for justifying Frequencies, topical reports must be supported by an NRC staff Safety Evaluation Report that establishes the acceptability of each topical report for that plant (Ref. 4).
SR 3.3.3.1 Performance of the CHANNEL CHECK ensures that gross failure of instrumentation has not occurred. A CHANNEL CHECK is normally a comparison of the parameter indicated on one channel to a similar parameter on another channel. It is based on the assumption that instrument channels monitoring the same parameter should read approximately the same value.
Significant deviations between the two instrument channels could be an indication of excessive instrument drift in one of the channels or of something even more serious. CHANNEL CHECK will detect gross channel failure; thus, it is key to verifying that the instrumentation continues to operate properly between each CHANNEL CALIBRATION.
Combustion Engineering STS B 3.3.3B-7 Rev. 4.0
TSTF-536, Rev. 0 CEACs (Digital) (With Setpoint Control Program)
B 3.3.3B BASES SURVEILLANCE REQUIREMENTS (continued)
Agreement criteria are determined by the plant staff, based on a combination of the channel instrument uncertainties, including indication and readability. If a channel is outside the criteria, it may be an indication that the sensor or the signal processing equipment has drifted outside its limits.
[ The Frequency, about once every shift, is based on operating experience that demonstrates the rarity of channel failure. Since the probability of two random failures in redundant channels in any 12 hour1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> period is extremely low, the CHANNEL CHECK minimizes the chance of loss of protective function due to failure of redundant channels. The CHANNEL CHECK supplements less formal, but more frequent, checks of channel OPERABILITY during normal operational use of the displays associated with the LCO required channels.
OR The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
REVIEWERS NOTE-----------------------------------
Plants controlling Surveillance Frequencies under a Surveillance Frequency Control Program should utilize the appropriate Frequency description, given above, and the appropriate choice of Frequency in the Surveillance Requirement.
]
SR 3.3.3.2 The CEAC autorestart count is checked to monitor the CPC and CEAC for normal operation. If three or more autorestarts of a nonbypassed CPC occur, the CPC may not be completely reliable. Therefore, the Required Action of Condition D must be performed. [ The Frequency is based on operating experience that demonstrates the rarity of more than one channel failing within the same 12 hour1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> interval.
OR The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
Combustion Engineering STS B 3.3.3B-8 Rev. 4.0
TSTF-536, Rev. 0 CEACs (Digital) (With Setpoint Control Program)
B 3.3.3B BASES SURVEILLANCE REQUIREMENTS (continued)
REVIEWERS NOTE-----------------------------------
Plants controlling Surveillance Frequencies under a Surveillance Frequency Control Program should utilize the appropriate Frequency description, given above, and the appropriate choice of Frequency in the Surveillance Requirement.
]
SR 3.3.3.23 A CHANNEL FUNCTIONAL TEST on each CEAC channel is performed to ensure the entire channel will perform its intended function when needed. [ The quarterly CHANNEL FUNCTIONAL TEST is performed using test software. The Frequency of 92 days is based on the reliability analysis presented in topical report CEN-327, "RPS/ESFAS Extended Test Interval Evaluation" (Ref. 5).
OR The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
REVIEWERS NOTE-----------------------------------
Plants controlling Surveillance Frequencies under a Surveillance Frequency Control Program should utilize the appropriate Frequency description, given above, and the appropriate choice of Frequency in the Surveillance Requirement.
]
A successful test of the required contact(s) of a channel relay may be performed by the verification of the change of state of a single contact of the relay. This clarifies what is an acceptable CHANNEL FUNCTIONAL TEST of a relay. This is acceptable because all of the other required contacts of the relay are verified by other Technical Specifications and non-Technical Specifications tests at least once per refueling interval with applicable extensions.
The Setpoint Control Program (SCP) has controls which require verification that the instrument channel functions as required by verifying the as-left and as-found setting are consistent with those established by the setpoint methodology.
Combustion Engineering STS B 3.3.3B-9 Rev. 4.0
TSTF-536, Rev. 0 CEACs (Digital) (With Setpoint Control Program)
B 3.3.3B BASES SURVEILLANCE REQUIREMENTS (continued)
SR 3.3.3.34 SR 3.3.3.34 is the performance of a CHANNEL CALIBRATION.
CHANNEL CALIBRATION is a complete check of the instrument channel including the sensor. The Surveillance verifies that the channel responds to a measured parameter within the necessary range and accuracy.
CHANNEL CALIBRATION leaves the channel adjusted to account for instrument drift between successive calibrations to ensure that the channel remains operational between successive surveillances. The SCP has controls which require verification that the instrument channel functions as required by verifying the as-left and as-found setting are consistent with those established by the setpoint methodology.
[ The Frequency is based upon the assumption of an [18] month calibration interval in the determination of the magnitude of equipment drift in the setpoint analysis and includes operating experience and consistency with the typical [18] month fuel cycle.
OR The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
REVIEWERS NOTE-----------------------------------
Plants controlling Surveillance Frequencies under a Surveillance Frequency Control Program should utilize the appropriate Frequency description, given above, and the appropriate choice of Frequency in the Surveillance Requirement.
]
SR 3.3.3.45 A CHANNEL FUNCTIONAL TEST is performed on the CEACs. The CHANNEL FUNCTIONAL TEST shall include the injection of a signal as close to the sensors as practicable to verify OPERABILITY, including alarm and trip Functions. A successful test of the required contact(s) of a channel relay may be performed by the verification of the change of state of a single contact of the relay. This clarifies what is an acceptable CHANNEL FUNCTIONAL TEST of a relay. This is acceptable because all of the other required contacts of the relay are verified by other Technical Specifications and non-Technical Specifications tests at least Combustion Engineering STS B 3.3.3B-10 Rev. 4.0
TSTF-536, Rev. 0 CEACs (Digital) (With Setpoint Control Program)
B 3.3.3B BASES SURVEILLANCE REQUIREMENTS (continued) once per refueling interval with applicable extensions. The SCP has controls which require verification that the instrument channel functions as required by verifying the as-left and as-found setting are consistent with those established by the setpoint methodology.
[ The basis for the [18] month Frequency is that the CEACs perform a continuous self monitoring function that eliminates the need for frequent CHANNEL FUNCTIONAL TESTS. This CHANNEL FUNCTIONAL TEST essentially validates the self monitoring function and checks for a small set of failure modes that are undetectable by the self monitoring function.
Operating experience has shown that undetected CPC or CEAC failures do not occur in any given [18] month interval.
OR The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
REVIEWERS NOTE-----------------------------------
Plants controlling Surveillance Frequencies under a Surveillance Frequency Control Program should utilize the appropriate Frequency description, given above, and the appropriate choice of Frequency in the Surveillance Requirement.
]
SR 3.3.3.56 The isolation characteristics of each CEAC CEA position isolation amplifier and each optical isolator for CEAC to CPC data transfer are verified to ensure that a fault in a CEAC or a CPC channel will not render another CEAC or CPC channel inoperable. The CEAC CEA position isolation amplifiers, mounted in CPC cabinets A and D, prevent a CEAC fault from propagating back to CPC A or D. The optical isolators for CPC to CEAC data transfer prevent a fault originating in any CPC channel from propagating back to any CEAC through this data link.
[ The Frequency of 18 months is based on plant operating experience with regard to channel OPERABILITY, which demonstrates the failure of a channel in any [18] month interval is rare.
OR Combustion Engineering STS B 3.3.3B-11 Rev. 4.0
TSTF-536, Rev. 0 CEACs (Digital) (With Setpoint Control Program)
B 3.3.3B BASES SURVEILLANCE REQUIREMENTS (continued)
The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
REVIEWERS NOTE-----------------------------------
Plants controlling Surveillance Frequencies under a Surveillance Frequency Control Program should utilize the appropriate Frequency description, given above, and the appropriate choice of Frequency in the Surveillance Requirement.
]
REFERENCES 1. 10 CFR 50.
- 2. 10 CFR 100.
- 3. FSAR, Section [7.2].
- 4. NRC Safety Evaluation Report, [Date].
- 5. CEN-327, June 2, 1986, including Supplement 1, March 3, 1989.
Combustion Engineering STS B 3.3.3B-12 Rev. 4.0
TSTF-536, Rev. 0 RPS Logic and Trip Initiation (Digital)
B 3.3.4 BASES SURVEILLANCE -----------------------------------REVIEWERS NOTE-----------------------------------
REQUIREMENTS In order for a unit to take credit for topical reports as the basis for justifying Frequencies, topical reports must be supported by an NRC staff Safety Evaluation Report that establishes the acceptability of each topical report for that unit (Ref. 4).
SR 3.3.4.1 A CHANNEL FUNCTIONAL TEST is performed on each RTCB channel.
This verifies proper operation of each RTCB. The RTCB must then be closed prior to testing the other RTCBs, or a reactor trip may result. [ The Frequency of 31 days is based on the reliability analysis presented in Topical Report CEN-327, "RPS/ESFAS Extended Test Interval Evaluation," (Ref. 4).
OR The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
REVIEWERS NOTE-----------------------------------
Plants controlling Surveillance Frequencies under a Surveillance Frequency Control Program should utilize the appropriate Frequency description, given above, and the appropriate choice of Frequency in the Surveillance Requirement.
]
SR 3.3.4.2 A CHANNEL FUNCTIONAL TEST on each RPS Logic channel is performed to ensure the entire channel will perform its intended function when needed. A successful test of the required contact(s) of a channel relay may be performed by the verification of the change of state of a single contact of the relay. This clarifies what is an acceptable CHANNEL FUNCTIONAL TEST of a relay. This is acceptable because all of the other required contacts of the relay are verified by other Technical Specifications and non-Technical Specifications tests at least once per refueling interval with applicable extensions.
In addition to power supply tests, the RPS CHANNEL FUNCTIONAL TEST consists of three overlapping tests as described in Reference 3.
These tests verify that the RPS is capable of performing its intended function, from bistable input through the RTCBs. The first test, the bistable test, is addressed by SR 3.3.1.66 in LCO 3.3.1.
Combustion Engineering STS B 3.3.4-11 Rev. 4.0
TSTF-536, Rev. 0 ESFAS Instrumentation (Digital) (Without Setpoint Control Program)
B 3.3.5A BASES SURVEILLANCE REQUIREMENTS (continued)
REVIEWERS NOTE-----------------------------------
Plants controlling Surveillance Frequencies under a Surveillance Frequency Control Program should utilize the appropriate Frequency description, given above, and the appropriate choice of Frequency in the Surveillance Requirement.
]
SR 3.3.5.5 SR 3.3.5.5 is a CHANNEL FUNCTIONAL TEST similar to SR 3.3.5.2, except SR 3.3.5.5 is performed within 92 days prior to startup and is only applicable to bypass functions. Since the Pressurizer Pressure - Low bypass is identical for both the RPS and ESFAS, this is the same Surveillance performed for the RPS in SR 3.3.1.1213. A successful test of the required contact(s) of a channel relay may be performed by the verification of the change of state of a single contact of the relay. This clarifies what is an acceptable CHANNEL FUNCTIONAL TEST of a relay.
This is acceptable because all of the other required contacts of the relay are verified by other Technical Specifications and non-Technical Specifications tests at least once per refueling interval with applicable extensions.
The CHANNEL FUNCTIONAL TEST for proper operation of the bypass permissives is critical during plant heatups because the bypasses may be in place prior to entering MODE 3 but must be removed at the appropriate points during plant startup to enable the ESFAS Function. Consequently, just prior to startup is the appropriate time to verify bypass function OPERABILITY. Once the bypasses are removed, the bypasses must not fail in such a way that the associated ESFAS Function is inappropriately bypassed. This feature is verified by SR 3.3.5.2.
The allowance to conduct this test with 92 days of startup is based on the reliability analysis presented in topical report CEN-327, "RPS/ESFAS Extended Test Interval Evaluation" (Ref. 11).
REFERENCES 1. Regulatory Guide 1.105, "Setpoints for Safety-Related Instrumentation," Revision 3.
- 3. 10 CFR 100.
- 4. FSAR, Section [7.3].
Combustion Engineering STS B 3.3.5A-30 Rev. 4.0
TSTF-536, Rev. 0 ESFAS Instrumentation (Digital) (With Setpoint Control Program)
B 3.3.5B BASES SURVEILLANCE REQUIREMENTS (continued)
Response time may be verified by any series of sequential, overlapping or total channel measurements, including allocated sensor response time, such that the response time is verified. Allocations for sensor response times may be obtained from records of test results, vendor test data, or vendor engineering specifications. Topical Report CE NPSD-1167-A, "Elimination of Pressure Sensor Response Time Testing Requirements,"
(Ref. 13) provides the basis and methodology for using allocated sensor response times in the overall verification of the channel response time for specific sensors identified in the Topical Report. Response time verification for other sensor types must be demonstrated by test. The allocation of sensor response times must be verified prior to placing a new component in operation and reverified after maintenance that may adversely affect the sensor response time.
[ ESF RESPONSE TIME tests are conducted on a STAGGERED TEST BASIS of once every [18] months. The [18] month Frequency is consistent with the typical industry refueling cycle and is based upon plant operating experience, which shows that random failures of instrumentation components causing serious response time degradation, but not channel failure, are infrequent occurrences.
OR The Surveillance Frequency is controlled under the Surveillance Frequency Control Program.
REVIEWERS NOTE-----------------------------------
Plants controlling Surveillance Frequencies under a Surveillance Frequency Control Program should utilize the appropriate Frequency description, given above, and the appropriate choice of Frequency in the Surveillance Requirement.
]
SR 3.3.5.5 SR 3.3.5.5 is a CHANNEL FUNCTIONAL TEST similar to SR 3.3.5.2, except SR 3.3.5.5 is performed within 92 days prior to startup and is only applicable to bypass functions. Since the Pressurizer Pressure - Low bypass is identical for both the RPS and ESFAS, this is the same Surveillance performed for the RPS in SR 3.3.1.1213. A successful test of the required contact(s) of a channel relay may be performed by the verification of the change of state of a single contact of the relay. This clarifies what is an acceptable CHANNEL FUNCTIONAL TEST of a relay.
This is acceptable because all of the other required contacts of the relay Combustion Engineering STS B 3.3.5B-28 Rev. 4.0