Text

Application for Amendment to License NPF-42 to Revise Technical Specification 3.8.1, AC Sources -- Operating, to Allow Surveillance Testing of Onsite Standby Emergency Diesel Generators (Dgs) During Modes Currently Prohibited
	ML031290050
Person / Time
Site:	Wolf Creek
Issue date:	04/30/2003
From:	Mckinney B; Wolf Creek
To:	; Document Control Desk, Office of Nuclear Reactor Regulation
References
	WO 03-0009
	Download: ML031290050 (64)
	v • d • e

WELF CREEK 'NUCLEAR OPERATING CORPORATION Britt T. McKinney Site Vice President APR 3 0 23 WO 03-0009 U. S. Nuclear Regulatory Commission ATTN: Document Control Desk Washington, DC 20555

Subject:

Docket No. 50-482: Revision to Technical Specifications 3.8.1, "AC Sources - Operating," and 3.8.4, "DC Sources - Operating" Gentlemen:

Wolf Creek Nuclear Operating Corporation (WCNOC) hereby transmits an application for amendment to Facility Operating License No. NPF-42 for the Wolf Creek Generating Station (WCGS). Per this License Amendment Request (LAR) WCNOC requests revision of Technical Specification (TS) 3.8.1, 'AC Sources - Operating," to allow surveillance testing of the onsite standby emergency diesel generators (DGs) during MODES in which it is currently prohibited.

Specifically, WCNOC proposes removing the MODE restrictions for the following Surveillance Requirements (SRs): SR 3.8.1.10 (full-load rejection test), SR 3.8.1.13 (protective-trip bypass test), and SR 3.8.1.14 (endurance and margin test).

This LAR also incorporates changes included in NRC-approved Industry/Technical Specification Task Force (TSTF) Standard Technical Specification (STS) change TSTF-283, Revision 3, which is applicable to SRs for the diesel generators as well as the station batteries under TS 3.8.4, "DC Sources-Operating." These changes would modify the Notes in SR 3.8.1.11 (loss-of-offsite-power test), SR 3.8.1.12 (safety injection actuation signal test), SR 3.8.1.16 (synchronizing test), SR 3.8.1.17 (test mode change-over test), SR 3.8.1.18 (load sequencing test), SR 3.8.1.19 (combined safety injection actuation signal and loss-of-offsite-power test), SR 3.8.4.7 (battery service test), and SR 3.8.4.8 (battery discharge test) to allow performance (or partial performance) of these surveillances during prohibited MODES in order to re-establish OPERABILITY following corrective maintenance, corrective modification, deficient or incomplete surveillance testing, and other unanticipated OPERABILITY concerns during plant operation.

Essential information is provided in the attachments to this letter. Attachment I contains a description of the proposed changes, the supporting technical analyses, and the significant hazards determination. Attachments II and III contain marked-up and revised TS pages, respectively. Attachment IV contains the TS Bases changes (for information only) to assist the staff in its review of the proposed changes. Revision to the TS Bases will be implemented PO Box 411 / Burlington. KS 66839 / Phone (620) 364-8831 An Equal Opportunity Employer M/F/HC/NET

WO 03-0009 Page 2 of 2 pursuant to the TS Bases Control Program, TS 5.5.14, upon implementation of this license amendment. Attachment V contains a list of commitments.

WCNOC is submitting this LAR in conjunction with an industry consortium of six plants as a result of a mutual agreement known as Strategic Teaming and Resource Sharing (STARS).

The STARS group consists of the six plants operated by TXU Generation Company LP, Union Electric Company, Wolf Creek Nuclear Operating Corporation, Pacific Gas and Electric Company, STP Nuclear Operating Company, and Arizona Public Service Company. The other members of the group (except STP Nuclear Operating Company) are expected to submit license amendment requests similar to this one. Pacific Gas and Electric Company's Diablo Canyon plant is the lead plant for this proposed license amendment. Due to design differences between the STARS plants, there may be some differences in the plant LARs, particularly for the information provided in Attachment I.

As indicated in Attachment I, the proposed TS changes have been evaluated pursuant to CFR 50.92, and it has been determined that this amendment application does not involve a significant hazard consideration. In addition, evaluation of the proposed changes against the requirements of 10 CFR 51.22(b) has determined that no environmental impact statement or environmental assessment needs to be prepared in connection with the issuance of a license amendment for the proposed changes. Finally, it may be noted that this amendment application was reviewed by the Plant Safety Review Committee and the Nuclear Safety Review Committee for WCNOC, and that in accordance with 10 CFR 50.91, a copy of this amendment application is being provided to the designated Kansas State official.

It is anticipated that the license amendment, as approved, will be effective upon issuance, to be implemented within 90 days from the date of issuance. Please contact me at (620) 364-4112 or Mr. Tony Harris at (620) 364-4038 for any questions you may have regarding this application.

Very truly yours, Britt T. McKinney BTM/rIg Attachments: I - Evaluation 11 - Marked-Up Technical Specifications IlIl - Proposed/Revised Technical Specifications IV - TS Bases Changes (For Information Only)

V List of Commitments cc: V. L. Cooper (KDHE), w/a J. N. Donohew (NRC), w/a D. N. Graves (NRC), w/a E. W. Merschoff (NRC), w/a Senior Resident Inspector (NRC), tv/a

STATE OF KANSAS )

) Ss COUNTY OF COFFEY )

Britt T. McKinney, of lawful age, being first duly sworn upon oath says that he is Site Vice President of Wolf Creek Nuclear Operating Corporation; that he has read the foregoing document and knows the contents thereof; that he has executed the same for and on behalf of said Corporation with full power and authority to do so; and that the facts therein stated are true and correct to the best of his knowledge, information and belief.

By QknhP Britt T. McKinney ' J Site Vice President SUBSCRIBED and sworn to before me this.3o day of Afer 2003.

Notary Pbi

[i MARY E. GIFFORD N Notary Public -State qf Kansas UMy Appt. ExpiresExpiration Date I o cIoa -

Attachment I to WO 03-0009 Page 1 of 23 EVALUATION

Subject:

Revision to Technical Specifications 3.8.1, "AC Sources - Operating," and 3.8.4, "DC Sources - Operating"

1. DESCRIPTION

2. PROPOSED CHANGES

3. BACKGROUND

3.1 DESCRIPTION

OF CLASS lE ALTERNATING CURRENT (AC) POWER SYSTEM 3.2 DIESEL GENERATORS: DESIGN FEATURES, OPERATION AND TESTING 3.3 OVERVIEW OF CLASS 1E DC POWER SOURCES (STATION BATTERIES)

4. TECHNICAL ANALYSIS 4.1 MODE RESTRICTION ELIMINATION 4.1.1 SR 3.8.1.10- FULL-LOAD REJECTION TEST 4.1.2 SR 3.8.1.13- NON-EMERGENCY PROTECTIVE TRIP BYPASS TEST 4.1.3 SR 3.8.1.14 - ENDURANCE AND MARGIN TEST 4.1.4 ADDITIONAL ANALYSES: EFFECTS OF EVENTS OCCURRING WHILE A DG IS PARALLELED TO OFFSITE POWER DURING TESTING 4.2 TSTF-283 REVISION 3 CHANGES

5. REGULATORY ANALYSES 5.1 NO SIGNIFICANT HAZARDS CONSIDERATION 5.2 APPLICABLE REGULATORY REQUIREMENTS

6. ENVIRONMENTAL CONSIDERATION

7. REFERENCES

8. PRECEDENTS

I to WO 03-0009 Attachment Attachment I to WO 03-0009 Page 2 of 23 EVALUATION

1.0 DESCRIPTION

The Technical Specifications (Appendix A of the Operating License) include Surveillance Requirements (SRs) that require the performance of testing to confirm OPERABILITY of the station emergency/standby diesel generators (DGs) and batteries. Testing, monitoring and inspection per these SRs are required to be performed on a periodic basis, but in some cases such activities may also be performed to verify or re-establish OPERABILITY following repairs or other unanticipated corrective maintenance. Testing per some of the applicable SRs can be performed during any plant MODE. However, many of these SRs contain the provision, in the form of a Note included in each SR, that the surveillance is not to be performed during certain plant MODES. The proposed changes would modify such MODE restrictions by revising the Note associated with each applicable SR to either completely remove the MODE restrictions for the affected surveillance or conditionally allow the surveillance to be performed (or partially performed) during currently prohibited MODES following corrective maintenance.

Specifically, the MODE I and 2 restrictions currently specified for the following DG Surveillance Requirements (SRs) would be removed: SR 3.8.1.10 (full load rejection test), SR 3.8.1.13 (protective-trip bypass test), and SR 3.8.1.14 (endurance and margin test). The changes would allow these DG surveillances to be performed periodically and/or following planned or unplanned maintenance, during plant operation.

In addition, the proposed changes would modify SR 3.8.1.11 (loss-of-offsite-power test), SR 3.8.1.12 (safety injection actuation signal test), SR 3.8.1.16 (synchronizing test), SR 3.8.1.17 (test mode change-over test), SR 3.8.1.18 (load sequencing test), SR 3.8.1.19 (combined safety injection actuation signal and loss-of-offsite-power test), SR 3.8.4.7 (battery service test),

and SR 3.8.4.8 (battery discharge test) to allow performance or partial performance of these surveillances in order to re-establish OPERABILITY following corrective maintenance, corrective modification, deficient or incomplete surveillance testing, and other unanticipated OPERABILITY concerns during plant operation. These changes are consistent with Nuclear Regulatory Commission (NRC) approved Industry/Technical Specification Task Force (TSTF)

Standard Technical Specification (STS) change TSTF-283, Revision 3.

The exact changes to be made to the Technical Specifications are described as follows.

2.0 PROPOSED CHANGE

S MODE Restriction Elimination The following changes are proposed in order to eliminate the MODE 1 and 2 surveillance testing restrictions for SRs 3.8.1.10, 3.8.1.13 and 3.8.1.14, as noted above. The changes would be effected by deleting the applicable Note for each surveillance, as follows:

Attachment I to WO 03-0009 Page 3 of 23

SR 3.8.1.10 currently contains the following Note:

'This Surveillance shall not be performed in MODE 1 or 2."

For the proposed change to this SR, this Note would be completely removed.

SR 3.8.1.13 currently contains the following Note:

'This Surveillance shall not be performed in MODE 1 or 2."

For the proposed change to this SR, this Note would be completely removed.

SR 3.8.1.14 currently contains Note 2 which states the following:

"This Surveillance shall not be performed in MODE 1 or 2."

For the proposed change to this SR, this Note would be completely removed (so that current Note 3 would become Note 2).

The above changes, if approved, will allow the testing required by these SRs to be performed during all MODES of operation such that the testing will no longer be required to be performed only during plant outages. This will help to reduce the complexity of coordinating work and testing activities during refueling outages and could potentially reduce outage critical path time.

In addition, this change will potentially avoid a plant shutdown if maintenance (planned or unplanned) performed during power operation results in the need to perform any of the above surveillances to demonstrate OPERABILITY. The change will also maximize flexibility in responding to an event during shutdown when other engineered safety feature (ESF) equipment may be out of service.

TSTF-283 Revision 3 Changes The following proposed changes modify the existing TS to allow more flexibility for DG and battery testing, when required to reestablish OPERABILITY following corrective maintenance, corrective modification, deficient or incomplete surveillance testing, and other unanticipated OPERABILITY concerns during plant operation, in accordance with TSTF-283, Revision 3. The changes would be effected by revising the applicable Note associated with each affected surveillance.

SR 3.8.1.11 currently contains Note 2 which states:

"This Surveillance shall not be performed in MODE 1 or 2."

For the proposed change to this SR, this Note would be replaced with the following Note 2:

"This Surveillance shall not normally be performed in MODE 1 or 2. However, portions of the Surveillance may be performed to reestablish OPERABILITY provided an assessment determines the safety of the plant is maintained or enhanced."

Attachment I to WO 03-0009 Page 4 of 23

SR 3.8.1.12 currently contains Note 2 which states:

"This Surveillance shall not be performed in MODE 1 or 2."

For the proposed change to this SR, this Note would be replaced with the following Note 2:

'This Surveillance shall not normally be performed in MODE 1 or 2. However, portions of the Surveillance may be performed to reestablish OPERABILITY provided an assessment determines the safety of the plant is maintained or enhanced."

SR 3.8.1.16 currently contains the following Note:

"This Surveillance shall not be performed in MODE 1, 2, 3, or 4."

For the proposed change to this SR, this Note would be replaced with the following Note:

"This Surveillance shall not normally be performed in MODE 1, 2, 3 or 4. However, this Surveillance may be performed to reestablish OPERABILITY provided an assessment determines the safety of the plant is maintained or enhanced."

SR 3.8.1.17 currently contains the following Note:

"This Surveillance shall not be performed in MODE 1 or 2."

For the proposed change to this SR, this Note would be replaced with the following Note:

"This Surveillance shall not normally be performed in MODE 1 or 2. However, portions of the Surveillance may be performed to reestablish OPERABILITY provided an assessment determines the safety of the plant is maintained or enhanced."

SR 3.8.1.18 currently contains the following Note:

"This Surveillance shall not be performed in MODE 1 or 2."

For the proposed change to this SR, this Note would be replaced with the following Note:

"This Surveillance shall not normally be performed in MODE 1 or 2. However, this Surveillance may be performed to reestablish OPERABILITY provided an assessment determines the safety of the plant is maintained or enhanced."

SR 3.8.1.19 currently contains Note 2 which states:

"This Surveillance shall not be performed in MODE 1 or 2."

For the proposed change to this SR, this Note would be replaced with the following Note 2:

"This Surveillance shall not normally be performed in MODE 1 or 2. However, portions of the Surveillance may be performed to reestablish OPERABILITY provided an assessment determines the safety of the plant is maintained or enhanced."

Attachment I to WO 03-0009 Page 5 of 23

SR 3.8.4.7 currently contains Note 2 which states:

"This Surveillance shall not be performed in MODE 1, 2, 3, or 4."

For the proposed change to this SR, this Note would be replaced with the following Note 2:

"This Surveillance shall not normally be performed in MODE 1, 2, 3, or 4. However, portions of the Surveillance may be performed to reestablish OPERABILITY provided an assessment determines the safety of the plant is maintained or enhanced."

SR 3.8.4.8 currently contains a Note which states:

"This Surveillance shall not be performed in MODE 1, 2, 3, or 4."

For the proposed change to this SR, this Note would be replaced with the following Note:

"This Surveillance shall not normally be performed in MODE 1, 2, 3, or 4. However, portions of the Surveillance may be performed to reestablish OPERABILITY provided an assessment determines the safety of the plant is maintained or enhanced."

Incorporating TSTF-283 for the affected SRs will give the flexibility to perform (or partially perform) these Surveillances online for the purpose of reestablishing OPERABILITY without having to shut down the plant. This can eliminate any transients potentially involved with a plant shutdown.

The marked-up and revised TS pages reflecting the above changes are provided in Attachments II and IlIl, respectively. In addition, the associated TS Bases will be revised to reflect the changes to these TS. A marked-up copy of the proposed TS Bases changes is provided in Attachment IV for information only. The TS Bases changes will be implemented in accordance with TS 5.5.14, 'Technical Specifications (TS) Bases Control Program," as part of the implementation of this amendment after NRC approval.

3.0 BACKGROUND

3.1 DESCRIPTION

OF CLASS IE ALTERNATING CURRENT (AC) POWER SYSTEM The onsite power system for the Wolf Creek Generating Station (WCGS) is provided with preferred power from an offsite power source in accordance with 10 CFR 50, Appendix A, General Design Criterion (GDC) 17, GDC 18, and Regulatory Guide 1.32. Offsite power is supplied to the unit switchyard from the transmission network by three transmission lines. With respect to the safety-related (Class 1E) power supply configuration, one preferred circuit from the switchyard supplies power to a multi-winding startup transformer, one winding of which feeds a 13.8/4.16-kV ESF transformer. The second preferred (offsite) circuit supplies power from the switchyard to the second 13.8/4.16-kV ESF transformer. Each ESF transformer supplies power to an associated Class 1E 4.16-kV bus. For each safety-related bus normally fed by its associated ESF transformer, the capability exists for either bus to be ultimately supplied via the other preferred source connection. Each offsite power circuit can be manually aligned to supply power to the opposite or both 4.16-kV buses, if required.

Attachment I to WO 03-0009 Page 6 of 23 The onsite power system is generally divided into two load groups. Each load group consists of an arrangement of buses, transformers, switching equipment, and loads fed from a common power supply. Power is supplied to loads at 13.8 kV, 4.16 kV, 480 V, 480/277 V, 208/120 V, 120 VAC, 250 VDC, and 125 VDC. The class 1E AC system loads are accordingly separated into two load groups which, as noted above, are powered from separate ESF transformers.

Each load group has power distributed by a 4.16-kV bus (NB01 or NB02), 480-V load centers, and 480-V motor control centers. Each load group is independently capable of safely bringing the plant to a cold shutdown condition, as the Class 1E electrical power distribution system is designed to satisfy the single-failure criterion.

The onsite standby power system includes Class 1E AC and DC power supply capability for equipment used to achieve and maintain a cold shutdown of the plant and to mitigate the consequences of a design basis accident (DBA). With respect to Class 1E AC power, each of the two Class 1E load groups, at the 4.16-kV bus level, is capable of being powered from an independent diesel generator (one per load group) which functions to provide power in the event of a loss of the preferred power source. Undervoltage relays are provided for each 4.16-kV bus to detect an undervoltage condition and automatically start the diesel generator in response to such a condition.

The Class 1E DC system includes four separate 125-VDC battery supplies for Class 1E controls, instrumentation, power, and control inverters. This system is discussed further in Section 3.3 of this attachment.

A simplified one-line diagram of the electrical power distribution system described above is provided on Figure 1 on the next page (i.e., page 7 of 23). As can be seen from the figure, and as described above, each of the two 4.16-kV Class 1E buses is normally supplied by its preferred (offsite) power source (via its respective ESF transformer) and is capable of being exclusively supplied by its associated diesel generator (as there is no automatic connection between the redundant load groups.)

In the event of a loss-of-coolant accident (LOCA) and/or loss of offsite power, the starting (or shedding and restarting) of Class 1E electrical loads is controlled by the load shedder emergency load sequencers (LSELS) (one for each 4.16 kV bus). In the event of a LOCA with preferred (offsite) power available to the 4.16-kV Class 1E bus(es), Class 1E loads are started in programmed time increments by the load sequencer(s). The associated DG(s) will be automatically started but not connected to the bus. However, in the event that preferred (offsite) power is lost, the load sequencer will function to shed selected loads and automatically start the associated standby diesel generator (via the DG control circuitry). The load sequencer(s) will function to start the required Class 1E loads in programmed time increments.

Attachment I to W0 03-0009 Page 7 of 23 WEST 345KV BUS C BENTON I c LA CYGNE C ROSE HILL CI EAST 1345KV BUS ii, IZ START UP 13-48= XFMR NO.6 NO.4 -8 C N.7 PA02 - I J s PA01 13-21 13-23 I)PA0201 ESF LTC XFMR A ESF LTC XFMR v lmnA YNRnl9 D/G NEO1 13.8KV/4, 16KV 13.8KV/4 16KV 3D/G NEO2 I TI NBO11 4.16 KV NB1 NBO112C NBO109C 1)NB0212 N0209 4.16 KV NB2 NB0116C C'NBO106 I NB0110 C CI TYPICAL TYPICAL I) NB NON00210 NB13 8') ')NB0216 cN80113 4180 4180 N82tNE01 XN0 MOTORS MOTORS 0 - XNGA2 XNG02 4K/XG3XNG04 4KV/

I G11 40l480V 80 V/480V l n IoGOu1 G1 NG116 C NG31 NGO41 ) NG0216 G2 PZR B/U HTRS I IG0PZR B/U HTRS NG01 NG03 NG04 NG02 1 Cl cI c c c 1 1 C 1

[NGAING01TE Eh E ING03T ING03Dl N OTlEING02A ilk I HRIPG19 PG20 lCG NK21 BAEN - BATTER1 NK2 l NK25 I INK26 INK 7E BATTERY BATTERY T NK11 I TBATTERY NK12 To wBATTERY To NK13 NK14 lNKO1 125VDC NK03 125VDC I NK02 125VDC NK04 125VDC TYPICAL DC TYPICAL DC TYPICAL DC lTYPICAL DC I IDISTRIBUTIONI IDISTRIBUTIONI IDISTRIBUTION IDISTRIBUTIONI INVERTER/UPS lINVERTER/UPS NEARTER/UPS INVERTER/UPS NN11 NG01A NN13 NN12 N NN14 c!S-!--N-G,1 SLIDING l- LINK ! )C_5LIQIG LINK INN6 I !SLIDING.!

LINK LINK XNOKIK .LD(A -ILN...

l0 NN03 120VACi I20VACE lNNO2 120VAC K I NN4 20VAC INTERLOCK Figure 1 INTERLOCK

Attachment I to WO 03-0009 Page 8 of 23 3.2 DIESEL GENERATORS: DESIGN FEATURES, OPERATION AND TESTING As noted above, the onsite standby electrical power source for each of the two Class 1E AC (4.16-kV) buses at WCGS is a dedicated DG. The DGs are automatically started on the following:

Receipt of a safety injection signal (SIS) (indicative of a LOCA)

Loss of voltage to the respective 4.16-kV bus.

Manual initiation capability is also provided, both locally (at the DG local control panel in each diesel generator room) and from the main control room.

Automatic protection for the following conditions is provided for each DG:

Start failure

Engine overspeed

High jacket coolant temperature

Low lube oil pressure

High crankcase pressure

Generator differential These protective functions (to shut down the diesel or trip the DG breaker) are retained during receipt of an SIS.

In addition to the above, DG protection is also provided for the following conditions:

Reverse power

Loss of field

Generator over-excitation (Volts/Hertz)

Generator overcurrent

Generator voltage-restrained overcurrent

Generator ground overcurrent

Underfrequency These protection functions are only in effect during tests when the diesel generator is operating in parallel with the preferred power system. However, they are automatically bypassed upon receipt of an SIS or loss of power. This is based on the design consideration that DG availability to mitigate a DBA is more critical than protecting the engine against minor problems that are not immediately detrimental to emergency operation of the DG.

Attachment I to WO 03-0009 Page 9 of 23 The following interlocks and/or permissives are relevant to DG operation:

Circuit breaker electrical interlocks are provided to prevent automatic closing of a DG breaker to an energized or faulted bus.

If preferred (offsite) power is lost, undervoltage relays on the incoming (offsite) side of the 4.1 6-kV feeder breakers prevent closure of these breakers.

The two 4.16-kV circuit breakers that control the incoming preferred source power to a 4.16-kV Class 1E bus are so interlocked that only one breaker can be closed at one time, thus preventing parallel operation of the preferred sources.

When operating from the DG supply (after a loss of offsite power), redundant load groups cannot be manually connected together since the 4.16-kV circuit breakers controlling the incoming preferred power supplies to the Class 1E buses are interlocked to prevent paralleling of the DGs.

During normal operation (with offsite power available), synchronizing check relays prevent an operator error that would parallel the standby sources with the offsite source when the two are out of synchronism.

A single, annunciated switch in the DG room is provided for each DG to block automatic start signals when the DG is out for maintenance.

As noted previously, each DG starts automatically in response to an SIS (i.e., low pressurizer pressure, steam line pressure, high containment pressure signal, or manual) or an ESF bus undervoltage signal. After the DG has started, it will automatically tie to its respective bus after offsite power is tripped as a consequence of ESF bus undervoltage or degraded voltage, independent of or coincident with an SIS. The DGs will also start and operate in the standby (ready-to-load) mode without tying to the ESF bus on an SIS alone. Following the trip of offsite power, the LSELS strips nonpermanent loads from the ESF bus. When the DG is tied to the ESF bus, loads are then sequentially connected to its respective ESF bus by the LSELS. The sequencing logic controls the permissive and starting signals to motor breakers to prevent overloading the DG by automatic load application. At the same time, the LSELS assures that ESF electrical loads are automatically connected to the DGs in sufficient time to provide for safe reactor shutdown and to mitigate the consequences of a design basis accident such as a LOCA.

OPERABILITY requirements for the onsite and offsite AC sources during plant operation, i.e.,

for MODES 1, 2, 3 and 4, are specified in TS 3.8.1, "AC Sources - Operating." TS 3.8.1 includes SRs for monitoring of the offsite sources and testing of the DGs. Some of the DG SRs involve tests in which the DG is paralleled to the offsite source (i.e., connected to its associated bus while that bus is being supplied by its preferred/offsite source). The length of time that the DG is paralleled to the offsite circuit can be on the order of minutes, depending on what test is being performed, up to a minimum time of 24 continuous hours such as required for the endurance and margin test per SR 3.8.1.14. SR 3.8.1.3, for example, requires synchronizing the DG to the bus while the bus is being supplied with offsite power and running the machine loaded to a minimum required load for at least 60 minutes.

Testing per SR 3.8.1.3 can and is allowed to be performed during any plant MODE as it is required to be done monthly, including during plant operation. The other SRs that involve paralleling the DG to offsite power, however, have MODE restrictions such that they are not permitted to be performed during plant operation. These include SR 3.8.1.10 and SR 3.8.1.14, for which WCNOC is proposing to eliminate the currently specified MODE restrictions. The

Attachment I to WO 03-0009 Page 10 of 23 basis for the MODE restrictions is given in the TS Bases for these SRs. The concern expressed for each surveillance is that "during operation with the reactor critical, performance of this Surveillance could cause perturbations to the electrical distribution systems that could challenge continued steady state operation and, as a result, unit safety systems. n In the Technical Analysis section of this attachment (i.e., Section 4.0), this and other concerns are more closely examined. The qualitative analysis provided therein explains that such perturbations are highly unlikely and that the associated risk (as evaluated qualitatively) is quite low. It includes consideration of how the DG and electrical system may respond to, say, a LOOP or fault condition occurring while the DG is connected to its associated bus and thereby paralleled to the offsite circuit.

The SRs to be changed per TSTF-283 involve surveillance tests of a more complex or intrusive nature (compared to the above SRs) for which only a conditional relaxation of the MODE restrictions is requested. Due to the nature of these surveillances, they would continue to be normally performed only during shutdown conditions. However, it is possible to perform (or partially perform) these SRs under certain circumstances or conditions during plant operation, and their performance could be needed to verify DG OPERABILITY following corrective maintenance, corrective modification, deficient or incomplete surveillance testing, and other unanticipated OPERABILITY concerns during plant operation. Under such circumstances, and as explained further in Section 4.2, it may be preferable and justifiable to perform the required testing during plant operation in lieu of shutting down the plant in order to perform the testing in an unrestricted MODE.

3.3 OVERVIEW OF CLASS I E DC POWER SOURCES (STATION BATTERIES)

The Class 1E DC electrical power system provides the AC emergency power system with control power. It also provides both motive and control power to selected safety-related equipment and preferred AC vital bus power (via inverters). As required by 10 CFR 50, Appendix A, GDC 17, the DC electrical power system is designed to have sufficient independence, redundancy, and testability to perform its safety functions, assuming a single failure.

Consistent with the dual, redundant load group configuration described previously for safety-related equipment and the AC electrical power system, the 125 VDC electrical power system consists of two independent and redundant Class 1E 125 VDC electrical power subsystems (Train A and Train B). Each DC electrical subsystem consists of two 125 VDC batteries, two battery chargers, one swing battery charger and all the associated control equipment and interconnecting cabling. (While the DC buses within each subsystem share a swing battery charger, there is no sharing between redundant Class 1E subsystems, including batteries, battery chargers, and distribution panels.) This configuration is also depicted on the one-line diagram of Figure 1 (page 7).

The Train A and Train B DC electrical power subsystems provide control power for the associated Class 1E AC power load groups, including the 4.16-kV switchgear and the 480-V load centers. The DC electrical power subsystems also provide DC electrical power to the inverters (two per subsystem, one associated with each battery/charger combination), which in turn power the AC vital buses (one associated with each inverter).

Attachment I to WO 03-0009 Page 11 of 23 During normal operation, the 125-VDC load is powered from the battery chargers with the batteries "floating" on the system. In case of a loss of normal power to the battery chargers, the DC load is automatically powered by the station batteries.

OPERABILITY requirements for the DC sources during plant operation (i.e., MODES 1, 2, 3 and 4) are specified in TS 3.8.4, 'DC Sources - Operating." TS 3.8.4 includes SRs for verifying battery performance and OPERABILITY. In particular, a battery service test per SR 3.8.4.7 and a battery performance discharge test per SR 3.8.4.8 are required to be periodically performed at a frequency of at least once per 18 months. The test interval of 18 months is based on a typical fuel cycle, as these tests are only allowed to be performed during plant shutdown conditions and are thus typically performed during each refueling outage. This is enforced by the Note attached to each of these SRs which states that the surveillance shall not be performed in MODE 1, 2, 3, or 4.

As stated in the Bases for these SRs, "The reason for the Note is that performing the Surveillance would perturb the electrical distribution system and challenge safety systems." As explained further in Section 4.2, it may be possible under certain circumstances to perform at least a portion of these tests during prohibited MODES if, for instance, a need to perform corrective maintenance on the batteries arose such that testing to confirm OPERABILITY would be required. Performance of a partial test per either of these SRs during plant operation might be possible, for example, with the battery temporarily isolated from the system, though battery inoperability would require entry into the Required Action under TS 3.8.4 (which has a Completion Time of only two hours). Nevertheless, with regard to plant risk this could be preferred to, and have less impact than, shutting down the plant in order to perform such testing during an unrestricted MODE per the current Note.

4.0 TECHNICAL ANALYSES 4.1 MODE RESTRICTION ELIMINATION Per the current Technical Specifications, and as noted previously, the surveillance tests required per SRs 3.8.1.10 (full-load rejection test), 3.8.1.13 (protective-trip bypass test), and 3.8.1.14 (endurance and margin test) must be performed while the plant is in a shut down condition, i.e. MODE 5 or 6, as enforced through the associated Notes that are to be revised per this LAR. With the plant in MODE 5 or 6, the Technical Specifications (TS 3.8.2) only require one of the two DGs to be OPERABLE. Therefore, per the current testing process, the DG being tested is typically not the DG that is being maintained or credited as the OPERABLE DG for satisfying TS 3.8.2.

The proposed changes, however (if approved), would allow DG testing to be done during MODE 1, 2, 3 or 4 - when both DGs are required to be OPERABLE per TS 3.8.1 - so that the DG under test would also be required to be OPERABLE. Any condition associated with the testing that would not make the DG OPERABLE would therefore require declaring the DG inoperable and entering Required Actions for the inoperable DG. Performance of the testing required per SR 3.8.1.14, for example, would require entering the Required Action under TS 3.8.1 because, as further discussed below, if slow starting of the DG using the mechanical governor and does not allow automatic return of the DG to a standby/ready-to-load condition.

The starting of the DG for SR 3.8.1.14 is the same method used for the monthly testing required by SR 3.8.1.3.

Attachment I to WO 03-0009 Page 12 of 23 For SR 3.8.1.10 however, no such entry would be required. In light of the electrical system design at WCGS, paralleling a DG with the offsite source for testing does not make the DG inoperable. This is due, in part, to the fact that an SIS will "override" the test mode to automatically return the DG to a standby/ready-to-load condition. This capability is a design feature of the DGs and the electrical power system, and parallel operation therefore does not adversely affect the capability of the DG to respond to an SIS. While it could be surmised that there is increased risk associated with the longer periods of time that a DG is paralleled to the offsite source for testing, such operation does not require the DG or bus loads to be considered inoperable. Therefore, it is not expected that performance of the test required per SR 3.8.1.10 would require entry into any Condition or Required Action under the TS/LCO 3.8.1 (unless an unsatisfactory test result were obtained).

Notwithstanding the above, the current TS Bases for SR 3.8.1.10 and SR 3.8.1.14 state that the reason for not permitting these surveillances to be performed in MODES 1 and 2 is to prevent unnecessary perturbations to the electrical distribution systems which could challenge steady state operation and thus plant safety systems. The current TS Bases for SR 3.8.1.13 state that the reason for not permitting this surveillance to be performed in MODES 1 and 2 is that performance of the SR would remove a required DG from service during those Modes. With regard to these concerns, testing experience has shown that the potential for any significant perturbation to bus voltage or plant loads is quite low, and that with regard to SR 3.8.1.14, DG unavailability is acceptably small. Further evaluation is provided for each SR (i.e., for SR 3.8.1.10, SR 3.8.1.13 and SR 3.8.1.14), as follows.

4.1.1 SR 3.8.1.10-FULL-LOAD REJECTION TEST The historical approach for performing the full-load rejection test per SR 3.8.1.10 has been to parallel the DG under test with the offsite power source (while the offsite source is supplying the bus), load the DG to the required load, and then open the DG output breaker, while the plant is in MODE 5 or 6. Opening of the DG output breaker separates the DG from its associated emergency bus and allows the offsite circuit to continue to supply that bus.

As previously noted above, the concern associated with performing the full-load rejection test in MODE 1, 2, 3, or 4 is that disconnecting the DG while it supplying power to the vital buses could cause undesirable electrical perturbations on the bus and thus to plant loads. In addition, the DG being tested is susceptible to grid disturbances while it is paralleled to the offsite source, and it is potentially more susceptible to tripping due to the extra protection trip relays that are cut in during the test.

Grid Disturbances The potential for occurrence of a compounding grid disturbance during the time that a DG is under test per this SR is remote. The occurrence of a grid disturbance is independent of testing performed pursuant to this SR, and since the DG is only paralleled with the offsite source before tripping the DG breaker, the probability of a grid disturbance occurring while a DG is paralleled to the offsite system is small. This conclusion is supported by the fact that normal practices of risk management ensure that SRs of this type are not scheduled during periods in which the potential for grid or bus disturbances exists (such as during severe weather or maintenance activities in the switchyard). Further, it may be noted that the amount of time the DG is required to be paralleled to the offsite source for performance of this surveillance is

Attachment I to WO 03-0009 Page 13 of 23 less than the time it is paralleled when performing the monthly test required per SR 3.8.1.3 (done in conjunction with SR 3.8.1.2 or SR 3.8.1.7) for which there is no MODE restriction.

In the event of a grid disturbance occurring while the DG is paralleled to offsite power, protective relaying and instrumentation exists to mitigate the effects of such disturbances. For example, the protective DG trips/relaying mentioned previously would be available to protect the DG while it is connected to the grid, if protective relaying associated with the offsite system or station transformers did not already effect a separation from the offsite system in response to the disturbance. (The latter is not required by the TS but it is maintained to protect plant assets and preclude costly effects and repairs.) With regard to plant loads connected to the associated safety bus and a grid disturbance involving a sustained low grid-voltage condition, the protection instrumentation required by TS 3.3.5, "Loss of Power (LOP) Diesel Generator (DG) Start Instrumentation," would be available to respond to such a condition for protection of the plant loads.

Electrical Perturbations As noted above, opening of the DG breaker during the performance of this surveillance separates the DG from the associated safety bus and allows the offsite circuit to continue supplying the bus. This evolution has little impact on plant loads. The power system loading during the testing is already well within the rating of all transformers, switchgear, and breakers before and after the load rejection. Further, experience with this test has shown that the voltage "perturbation" seen on the bus during and just after the load rejection is not significant, i.e. within 5 percent step change. Data recorded from past performances of this test show that bus voltage during the "transient" remains well above the minimum required voltage for bus loads and typically recovers within one second. Therefore, performing load reject tests in accordance with SR 3.8.1.10 during plant operation would not be expected to cause any a significant voltage perturbation that could adversely affect the plant electrical system or plant loads.

4.1.2 SR 3.8.1.13 - NON-EMERGENCY PROTECTIVE TRIP BYPASS TEST SR 3.8.1.13 requires verification that the non-emergency automatic protective trip functions (as described previously in Section 3.2) for each DG are bypassed on a loss-of-voltage signal concurrent with a safety injection signal.

This test is currently performed during shutdown while the DG is in emergency mode and actually supplying its associated emergency bus.

The test currently involves simulating trips for those functions that are automatically bypassed during an emergency start and verifying that the DG output breaker does not trip. The use of jumpers and blocking devices is not required. This test would be performed similarly if tested in MODES 1 or 2 with the exception that an appropriate overlap testing scheme would be used rather than having the DG actually supplying the emergency bus in the emergency mode.

Based on the above, the concern currently identified in the TS Bases for SR 3.8.1.13 is not significant such that performance of the SR should be restricted to shutdown conditions.

Attachment I to WO 03-0009 Page 14 of 23 4.1.3 SR 3.8.1.14- ENDURANCE AND MARGIN TEST Performance of the endurance and margin test per SR 3.8.1.14 requires synchronizing, paralleling and loading the DG with the offsite source (via the associated 4.16 kV safety bus) and then running it continuously while loaded to its full-load capability for not less than 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months . (Per the WCGS TS, during the 24-hour run the machine must be loaded and run at 110% of its continuous duty rating for at least 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months if it has been determined that the auto-connected design loads have increased above the continuous duty rating of the machine.) As for the previously discussed SRs, the proposed change would allow this surveillance test to be performed during plant operation when both DGs are required to be OPERABLE, as opposed to being performed only during shutdown conditions when only one DG is required to be OPERABLE.

Similar to the concern expressed in the TS Bases for the full-load rejection test of SR 3.8.1.10 (as previously discussed in Section 4.1.1), the concern associated with performing the 24-hour endurance test in MODE 1, 2, 3, or 4 is that while a DG is paralleled to the offsite source, the DG is not independent of disturbances on the offsite power system, and the associated safety bus and train of equipment is not independent of any potential interaction between the DG and the offsite system. Further, the DG is potentially more susceptible to tripping due to the extra protection trip relays that are cut in during such testing.

These concerns are addressed in the following evaluation which shows, through qualitative arguments, that the risk associated with testing and paralleling a DG to offsite power during plant operation is acceptably small.

Grid Disturbances The amount of time that a DG is paralleled to offsite power for performance of the 24-hour endurance test is considerably longer than the time a DG is required to be paralleled for the performance of other SRs (such as SR 3.8.1.3 and SR 3.8.1.10), when each test is separately considered. Nevertheless, the additional time is only on the order of hours such that the total time is still small compared to the thousands of hours (per year) that the DG(s) is required to be OPERABLE. The potential for occurrence of a compounding grid disturbance during the time that a DG is under test per this SR may therefore still be considered remote. Further, since there is certainly less than a 100% probability that a grid disturbance will lead to DG unavailability, the probability of a DG being rendered unavailable as a result of a grid disturbance during testing is even more remote.

As already noted, the normal practices of risk management exercised at WCGS ensure that SRs of this type are not scheduled during periods in which the potential for grid or bus disturbances exists (such as during severe weather or maintenance activities in the switchyard).

These practices also require only one DG to be tested at a time based on the established practice of "protecting" the other train when a component (or components) of one train is being tested or declared inoperable. This provides for sufficient independence of the onsite source for the other train from offsite power while still enabling testing to demonstrate DG OPERABILITY for the affected train.

Attachment I to WO 03-0009 Page 15 of 23 As also noted previously, in the event of a grid disturbance occurring while the DG is paralleled to offsite power, protective relaying and instrumentation (including the aforementioned LOP instrumentation) exists to respond to certain types of disturbances. Further, if a DG protective trip were to occur in response to a disturbance in the offsite power system, it may be possible for operator action to be taken to manually reset the lockout relay of the DG under test so that the DG can be restarted and loads properly sequenced.

Electrical Perturbations After the DG is synchronized and loaded, the test performed per SR 3.8.1.14 is essentially a continuous run involving little or no dynamic effects. Bus voltage and power factor, including the effects of any changes in offsite power (such as the typical change in grid load that occurs in the course of a day) are monitored closely during the test because SR 3.8.1.14 requires the power factor to be maintained within a certain range. Electrical perturbations are thus minimized to the extent that they are monitored and can be controlled.

The potential effects of a grid disturbance that could cause an electrical perturbation have already been discussed in part. The following section discusses the potential effects of events such as a loss of offsite power and a LOCA (or a combination of the two) occurring while a DG is under test.

4.1.4 ADDITIONAL ANALYSES: EFFECTS OF EVENTS OCCURRING WHILE A DG IS PARALLELED TO OFFSITE POWER DURING TESTING The following are separate analyses of events that may be postulated to occur concurrent with DG testing. Specifically, a LOOP, LOCA and a combination of a LOOP and LOCA are each postulated to occur while a DG is under test, i.e., while it is running and connected to its associated bus and thereby paralleled to offsite power. Such scenarios are unlikely as they involve the simultaneous occurrence of several conditions or events, but they are examined for the purpose of providing a complete assessment. The discussion is applicable to SR 3.8.1.10 and SR 3.8.1.14, though the latter may be most applicable since it involves the longest period of time that a DG is paralleled to offsite power.

Loss of Offsite Power (LOOP)

In the event of a LOOP occurring while a DG is running and paralleled to offsite power for testing (via the associated safety bus), the DG would continue supplying power to the loads on the safety bus as well as to the offsite system if no separation of the offsite source occurred.

(In this scenario, the bus undervoltage relays might not immediately trip if bus voltage is being adequately supported by the DG. On the other hand, relays in the switchyard or associated with the site transformers could trip to separate the offsite system. The latter, however, are not safety-related and therefore not credited in any accident/event analyses.) At some point, however, because loading would exceed the DG's capability, the DG would be unable to match load and either the bus undervoltage relays would trip (after timing out) or the DG overcurrent or underfrequency relays would trip. The former would cause the feeder breakers in the offsite source connection to trip (but not the DG output breaker); whereas the latter would cause the DG output breaker trip open.

Attachment I to WO 03-0009 Page 16 of 23 If the bus undervoltage relays (LOP instrumentation) tripped in response to an undervoltage condition (after the relays timed out), the feeder breakers would trip to separate the offsite source. At the same time, the LOP signal would initiate the LSELS which in turn would cause all but the permanently connected bus loads to be shed. Sequenced loads would then be loaded onto the bus via the blackout sequencer. Since the DG would already be running and connected, the DG start signal from the LOP instruments would have no effect in that regard.

From this point on, the plant would respond as it would in response to a LOOP condition.

If the overcurrent or underfrequency relays tripped (i.e., before the degraded voltage relays tripped), the DG output breaker would trip open. Immediately after the overcurrent or underfrequency relays opened the DG output breaker, the resultant dead-bus condition would cause the LOP instrumentation to trip which would then trip the feeder breakers open to fully isolate the offsite system from the bus. The DG output breaker would then re-close, re-energizing the bus. From this point on, the plant would respond as it would in response to a LOOP condition.

For the discussed scenario, the overcurrent or underfrequency trips are the features intended to open the DG output breaker without lockout. There are however, several non-essential DG trip functions (listed in 3.2) in service when the DG is paralleled with the offsite source that are bypassed when the DG is in the emergency mode. In the event that one of these functions trips, the DG output breaker will open and lockout. Depending on the trip, the DG may also trip and lockout. If one of the DG protective trips were to occur in response to a disturbance in the offsite power system, operator action could be taken to manually reset the lockout relay of the DG under test so that the DG can be restarted and loads properly sequenced.

Based on the above, the overall effect of having a DG under test when a LOOP occurs is to potentially delay the plant response to the LOOP (by several minutes), as operator action may be required to reset the DG lockout relay. In general, however, the time response to a LOOP is not critical, as there is no concurrent accident condition and the affected bus can be restored well in time to effect safe shutdown. (The response to a LOOP-LOCA condition is evaluated separately below.) It should be remembered that the other train would not be affected by the DG under test so that its response to a LOOP would be unaffected.

Loss of Coolant Accident (LOCA)

For a LOCA (SIS) while a DG is under test (paralleled to offsite power via the associated safety bus), the DG response is as designed. That is, the SIS "overrides" the test mode as follows:

The LOCA signal will cause the DG start circuitry to reset and trip the DG output breaker.

LSELS will initiate the LOCA sequence for required bus loads as the bus continues to be powered from the offsite source. The DG will start and remain in a standby ready-to-load condition. This sequence is in accordance with the design basis, and therefore, for this scenario there is no impact to the analyzed plant response to the LOCA.

It may be noted that this test mode override capability is periodically verified by test pursuant to TS SR 3.8.1.17. Also, it should be noted that there is no impact to the other bus/DG/load group since only the DG under test is affected.

Attachment I to WO 03-0009 Page 17 of 23 LOOP with LOCA In the accident analyses of the USAR, a LOCA is postulated to occur concurrently with a LOOP for the purposes of providing a bounding analysis that challenges required safety features.

Consideration of a LOOP occurring with a LOCA while a DG is under test involves a highly improbable combination of events or conditions. Certain sequences that could be postulated for such an unlikely scenario would be considered to be beyond the design or licensing basis of the facility. Notwithstanding, given such an unlikely scenario, the response of DG to a LOOP and LOCA while the DG is being tested is dependent on which occurs first (or whether the two events occur simultaneously).

When a DG is being tested and a LOOP follows or occurs simultaneously with the LOCA, the following would occur. For the simultaneous occurrence, the DG output breaker would immediately open and the DG start circuitry would be initiated (reset). Non-essential loads would be shed from the bus via LSELS and then the DG output breaker would re-close onto the de-energized bus. Immediately after that, LSELS would begin to sequence loads back onto the bus via the LOCA sequencer which by design takes precedence over the blackout sequencer.

If the LOOP occurs sometime after the LOCA, the sequence would be different. Initially, the LOCA condition (SIS) would cause loads to be sequenced onto the bus as described above, i.e., via the LOCA sequencer, but with offsite power providing power. However, if a LOOP were then to occur sometime after that (i.e., after the SIS was reset), the LOP instrumentation would cause the DG output breaker close, and the blackout sequencer would then effect reloading the bus. This would cause a shedding and re-sequencing of loads (except for permanently connected loads such as the centrifugal charging pumps), but this would be acceptable since resetting of the SIS would mean that recovery from the LOCA had already been initiated. The blackout sequencer would re-energize loads needed to maintain plant shutdown.

For the case where a LOOP occurs before a LOCA (with the DG in a test mode), the following sequence could be expected to occur. Initially, when the LOOP occurs, the sequence would be as described previously for a LOOP (only) condition. That is, either the overcurrentlunderfrequency/degraded voltage relays (LOP instrumentation) would actuate, or possibly one of the non-essential relays would actuate. Then either of the aforementioned sequences would occur or begin to occur based on which of the two noted trip functions occurred first (or in lieu of the other). The occurrence of a LOCA at this point would cause a SIS to be generated, but what happens next is dependent on which of the two trip functions had been effected in response to the LOOP.

1. If the degraded voltage relays had effected a separation of the offsite source in response to the LOOP, the SIS would cause the LOCA sequencer to go into effect.

2. If a non-essential relay had responded before the degraded voltage relays during the LOOP, a generator lockout may be in effect. Although a non-essential trip is designed to be bypassed by a SIS, the SIS cannot reset a lockout that is already in effect. Operator action may thus be required to reset the lockout before the DG is restarted in response to the LOOP-LOCA condition. The LOCA sequencer would then reload the bus with all required sequenced loads. The effect is to thus delay but not preclude system responses to the LOCA (SIS) for the affected bus. There would be no such impact to the other bus (i.e., for the DG that was not in test). As noted previously, the occurrence of a LOOP with

Attachment I to WO 03-0009 Page 18 of 23 a DG under test, followed shortly by a LOOP, is an extremely unlikely event and a beyond-design-basis scenario.

4.2 TSTF-283 REVISION 3 CHANGES As described previously, the changes proposed per TSTF-283 (Revision 3) modify SRs 3.8.1.11 (loss of offsite power test), 3.8.1.12 (safety injection actuation signal test),

3.8.1.16 (synchronizing test), 3.8.1.17 (test mode change-over test), 3.8.1.18 (load sequencing test), 3.8.1.19 (combined safety injection actuation signal and loss-of-offsite-power test), 3.8.4.7 (battery service test), and 3.8.4.8 (battery discharge test) to allow performance or partial performance of these surveillances in the prohibited MODES in order to reestablish OPERABILITY following corrective maintenance, corrective modification, deficient or incomplete surveillance testing, and other unanticipated OPERABILITY concerns.

Specifically, the TS changes will incorporate a Note in each affected SR to permit testing during restricted (currently prohibited) MODES to reestablish OPERABILITY, if required, provided an assessment is performed to assure that plant safety is maintained or enhanced. The TS Bases will be updated consistent with TSTF-283 to provide the following guidance relative to this assessment: "This assessment shall consider the potential outcomes and transients associated with a failed Surveillance, a successful Surveillance, and a perturbation of the offsite or onsite system when they are tied together or operated independently for the Surveillance; as well as the operator procedures available to cope with these outcomes. These shall be measured against the avoided risk of a plant shutdown and startup to determine that plant safety is maintained or enhanced when the Surveillance is performed in these normally restricted MODES. Risk insights or deterministic methods may be used for this assessment."

As noted previously, some SRs are more complicated or intrusive than others, and would involve too great an impact or potential perturbation to the plant to be done in their entirety during plant operation. For these, the Note incorporated per TSTF-283 only permits a partial performance of the applicable SR. In each of these cases, the text proposed for the Note (and for the associated Bases changes) refers to the "partial Surveillance" or "portions of the Surveillance" rather than referring wholly to "the Surveillance."

The intent is that performing (or partially performing) an SR should not be precluded if testing per that SR is needed to verify OPERABILITY following, for example, corrective maintenance on a DG or battery, and if a safety assessment supports performance of the SR (or a portion of the SR) during the restricted MODE. The type and degree of post-maintenance testing required depends on what was done to the DG or battery during the maintenance activity, such that only a particular SR(s) or a particular portion(s) of an SR may be required to adequately verify OPERABILITY. The required safety assessment will dictate, on case-by-case basis whether it is appropriate to perform the SRs or portions of SRs needed to confirm OPERABILITY during a restricted MODE. Otherwise, the plant will have to be brought into a non-restricted MODE or condition (shutdown) for performance of the SR(s).

Attachment I to WO 03-0009 Page 19 of 23 Conclusion/Summary The proposed change to eliminate the MODE 1 and 2 surveillance testing restrictions will provide the flexibility necessary to optimize both outage schedules and the utilization of resources. The proposed change to revise the SR Notes, consistent with TSTF-283, will provide the flexibility to perform these Surveillances online for the purposes of reestablishing OPERABILITY without having to shut down the plant. The proposed changes will not impact the health and safety of the public and station personnel.

The following is a summary of the bases and justification for the requested changes:

MODE Restriction Elimination SR 3.8.1.10 a) The testing is within the rating of all transformers, switchgear, and breakers, both before and after the load rejection, b) Based on experience this test generally has had little impact on the plant electrical distribution system. Results from tests at WCGS show that voltage changes during a full-load rejection test are not significant.

c) The likelihood of a grid disturbance occurring that would cause the tested DG to become unavailable, while the DG is under test, is judged to be quite small.

d) The other DG (not under test) will remain OPERABLE to supply its bus and all of its associated loads for safe shutdown of the facility in the event of an accident.

SR 3.8.1.13 a) The DG under test remains OPERABLE.

b) The other DG (not under test) will remain OPERABLE to supply its bus and all of its associated loads for safe shutdown of the facility in the event of an accident.

SR 3.8.1.14 a) The electrical alignment for this test is similar to the existing monthly run of the DG, (SR 3.8.1.3) for which there is no MODE restriction.

b) The likelihood of a grid disturbance occurring that would cause the tested DG to become unavailable, while the DG is under test, is judged to be quite small.

c) The tested DG is inoperable for a short period of time (15-30 minutes) at the initiation of the surveillance during the slow start of the DG. An average unavailability time of less than 30 minutes per DG per operating cycle, attributed to this test, is considered to be quite small relative to the total time the DGs are available throughout the operating cycle.

Attachment I to WO 03-0009 Page 20 of 23 d) The other DG (not under test) will remain OPERABLE to supply its bus and all of its associated loads for safe shutdown of the facility in the event of an accident.

TSTF-283 Changes a) The proposed changes are identical to those in NRC-approved TSTF-283.

b) Performance (or partial performance) of the SRs during restricted MODES will require an assessment to assure plant safety is maintained or enhanced.

c) Performance (or partial performance) of the applicable SRs during restricted MODES will only be performed for the purpose of establishing OPERABILITY.

5.0 REGULATORY ANALYSIS

5.1 NO SIGNIFICANT HAZARDS CONSIDERATION WCNOC has evaluated whether or not a significant hazards consideration is involved with the proposed amendments by focusing on the three standards set forth in 10 CFR 50.92, "Issuance of Amendment," as discussed below:

(1) Does the proposed change involve a significant increase in the probability or consequences of an accident previously evaluated?

Response: No.

The design of plant equipment is not being modified by the proposed changes. In addition, the DGs and their associated emergency loads are accident mitigating features. As such, testing of the DGs themselves is not associated with any potential accident-initiating mechanism.

Therefore, there will be no significant impact on any accident probabilities by the approval of the requested changes.

The changes include an increase in the online time that a DG under test will be paralleled to the grid (for SRs 3.8.1.10 and 3.8.1.14). As such, the ability of the tested DG to respond to a design basis accident could be adversely impacted by the proposed changes. However, the impacts are not considered significant based, in part, on the ability of the remaining DG to mitigate a DBA or provide safe shutdown. With regard to SR 3.8.1.10 and SR 3.8.1.14, experience shows that testing per these SRs typically does not perturb the electrical distribution system. In addition, operating experience and qualitative evaluation of the probability of the DG or bus loads being adversely affected concurrent with or due to a significant grid disturbance, while the DG is being tested, support the conclusion that the proposed changes do not involve any significant increase in the likelihood of a safety-related bus blackout or damage to plant loads.

The SR changes that are consistent with TSTF-283 have been approved by the NRC for submittal by licensees. The on-line tests allowed by the TSTF are only to be performed for the purpose of establishing OPERABILITY. Performance of these SRs during restricted MODES will require an assessment to assure plant safety is maintained or enhanced.

Attachment I to WO 03-0009 Page 21 of 23 Therefore, the proposed change does not involve a significant increase in the probability or consequences of an accident previously evaluated.

(2) Does the proposed change create the possibility of a new or different accident from any accident previously evaluated?

Response: No.

The capability to synchronize a DG to the offsite source (via the associated plant bus) and test the DG in such a configuration is a design feature of the DGs, including the test mode override in response to a safety injection signal. Paralleling the DG for longer periods of time during plant operation may slightly increase the probability of incurring an adverse effect from the offsite source, but this increase in probability is judged to be still quite small and such a possibility is not a new or previously unrecognized consideration.

The proposed changes would not require any new or different accidents to be postulated since no changes are being made to the plant that would introduce any new accident causal mechanisms. This license amendment request does not impact any plant systems that are potential accident initiators; nor does it have any significantly adverse impact on any accident mitigating systems.

Therefore, the proposed change does not create the possibility of a new or different accident from any accident previously evaluated.

(3) Does the proposed change involve a significant reduction in a margin of safety?

Response: No.

The proposed changes do not involve a significant reduction in the margin of safety. The margin of safety is related to the confidence in the ability of the fission product barriers to perform their design functions during and following an accident situation. These barriers include the fuel cladding, the reactor coolant system, and the containment system. The proposed changes do not directly affect these barriers, nor do they involve any significantly adverse impact on the DGs which serve to support these barriers in the event of an accident concurrent with a loss of offsite power. The proposed changes to the testing requirements for the plant DGs do not affect the OPERABILITY requirements for the DGs, as verification of such OPERABILITY will continue to be performed as required (except during different allowed MODES). The changes have an insignificant impact on DG availability, as continued verification of OPERABILITY supports the capability of the DGs to perform their required function of providing emergency power to plant equipment that supports or constitutes the fission product barriers. Only one DG is to be tested at a time, so that the remaining DG will be available to safely shut down the plant if required. Consequently, performance of the fission product barriers will not be impacted by implementation of the proposed amendment.

In addition, the proposed changes involve no changes to setpoints or limits established or assumed by the accident analysis. On this and the above basis, no safety margins will be impacted.

Therefore, the proposed change does not involve a significant reduction in a margin of safety.

Attachment I to WO 03-0009 Page 22 of 23 Based on the above evaluation, WCNOC concludes that the proposed amendment involves no significant hazards consideration under the standards set forth in 10 CFR 50.92(c), and accordingly, a finding of "no significant hazards consideration" is justified.

5.2 APPLICABLE REGULATORY REQUIREMENTS 10 CFR 50, Appendix A, GDC 17, "Electric power systems," requirements are summarized below:

Onsite electric power system and an offsite electric power system shall be provided to permit functioning of structures, systems, and components important to safety. The safety function for each system shall be to provide sufficient capacity and capability to assure that (1) specified acceptable fuel design limits and design conditions of the reactor coolant pressure boundary are not exceeded as a result of anticipated operational occurrences and (2) the core is cooled and containment integrity and other vital functions are maintained in the event of postulated accidents.

The onsite electric power supplies, including the batteries, and the onsite electric distribution system, shall have sufficient independence, redundancy, and testability to perform their safety functions assuming a single failure.

Provisions shall be included to minimize the probability of losing electric power from any of the remaining supplies as a result of or coincident with, the loss of power generated by the nuclear power unit, the loss of power from the transmission network, or the loss of power from the onsite electric power supplies."

As described previously, the design of the AC electrical power system provides independence and redundancy to ensure an available source of power to the Engineered Safety Feature (ESF) systems. The onsite Class 1E AC Distribution System for WCGS is divided into two load groups. A 4.16-kV ESF bus is associated with each load group. The two load groups are 100% redundant and are electrically and physically separated such that the loss of either group does not prevent the minimum safety functions from being performed. Each load group has connections to either of two offsite power sources from the switchyard, and a single DG.

Offsite power is supplied to the switchyard from the transmission network via two rights of way approaching the site from two different directions.

The proposed changes modify test requirements for the DGs which provide emergency power to the 4.16-kV ESF buses in the event of a loss of offsite power pursuant to GDC 17. The test requirements are intended to verify and/or ensure continued OPERABILITY of the DGs. The proposed changes involve no changes to the required tests themselves except to allow certain tests to be performed during MODES for which performance of the affected tests is currently prohibited. Evaluation of the proposed changes has determined that DG availability in not significantly affected by the proposed changes (including testing per SR 3.8.1.13), that the potential for significantly adverse electrical perturbations during tests such as SR 3.8.1.10 (full-load rejection test) is acceptably low, and that the potential for a grid disturbance causing DG unavailability while a DG is in test is quite low. Further, only one DG will be tested at a time such that OPERABILITY of the other DG and its associated bus and bus loads will be unaffected. Testing will thus continue in a manner that supports DG OPERABILITY so that the

Attachment I to WO 03-0009 Page 23 of 23 DGs will be available to perform their intended safety function consistent with regulatory requirements.

In conclusion, based on the considerations discussed above, (1) there is reasonable assurance that the health and safety of the public will not be endangered by operation in the proposed manner, (2) such activities will be conducted in compliance with the Commission's regulations, and (3) the issuance of the amendment will not be inimical to the common defense and security or to the health and safety of the public.

6.0 ENVIRONMENTAL CONSIDERATION

WCNOC has evaluated the proposed amendment for environmental considerations. The review has determined that the proposed amendment would change a requirement with respect to installation or use of a facility component located within the restricted area, as defined in 10 CFR 20, and would change an inspection or surveillance requirement. However, the proposed amendment does not involve (i) a significant hazards consideration, (ii) a significant change in the types or significant increase in the amounts of any effluent that may be released offsite, or (iii) a significant increase in individual or cumulative occupational radiation exposure.

Accordingly, the proposed amendments meet the eligibility criterion for categorical exclusion set forth in 10 CFR 51.22(c)(9). Therefore, pursuant to 10 CFR 51.22(b), no environmental impact statement or environmental assessment need be prepared in connection with the proposed amendments.

7.0 REFERENCES

1. 10 CFR 50.90, 'Application for amendment of license or construction permit"

2. TSTF-283, Revision 3, "Modify Section 3.8 Mode restriction Notes"

3. 10 CFR 50.36(a), 'Technical Specifications"

4. 10 CFR, Appendix A, GDC 17, 'General Design Criteria for Nuclear Power Plants -

Electric Power Systems" 8.0 PRECEDENTS

Amendment 173 to Columbia Generating Station Operating License (

Subject:

Columbia Generating Station Operating License NPF-21 Request for Technical Specifications Amendment to Remove Operating Mode Restrictions for Emergency Diesel Generator Surveillance Testing, dated May 18, 2001)

Attachment II to WO 03-0009 Page 1 of 12 MARKED-UP TECHNICAL SPECIFICATIONS

Attachment II to WO 03-0009 Page 2 of 12 Text Inserts for Technical Specification Chancqes Insert 1 However, portions of the Surveillance may be performed to reestablish OPERABILITY provided an assessment determines the safety of the plant is maintained or enhanced.

Insert 2 However, this Surveillance may be performed to reestablish OPERABILITY provided an assessment determines the safety of the plant is maintained or enhanced.

Attachrernt II to WO4 03-0009 AC Sources - Operating Page 3 of 12 3.8.1 L1 I AKhirp Danfi IIrKAKM1T5q IDMIM,ILLFI'4V.J fr-nntinmiid)

Qurxv" I . I%- .- , - - .- _______

SURVEILLANCE FREQUENCY SR 3.8.1.7 -- NOTE----

All DG starts may be preceded by an engine prelube period.

Verify each DG starts from standby condition and 184 days achieves in

12 seconds, voltage 2 3740 V and

4320 V, and frequency 2 58.8 Hz and

61.2 Hz.

SR 3.8.1.8 Not Used.

SR 3.8.1.9 Not Used.

SR 3.8.1.107 Verify each DG operating at a power factor

0.9 and 18 months 2 0.8 does not trip and voltage is maintained

4784 V and frequency is maintained < 65 4 Hz during and following a load rejection of 2 5580 kW and

6201 kW.

kcomlinuea)

Wolf Creek - Unit I 3 8-8 Amendment No. 123

Attachmient II to WD 03-0009 AC Sources - Operating

'- - Page-4 of 12 3.8.1 SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY SR 3.8.1.11 ---- NOTES-----

1. All DG starts may be preceded by an engine prelube period.

2. This Surveillance shall no bepeorme in MODE 1 or 2 Verify on an actual or simulated loss of offsite power 18 months signal:

a. De-energization of emergency buses;

b. Load shedding from emergency buses;

c. DG auto-starts from standby condition and:

1. energizes permanently connected loads in

12 seconds,

2. energizes auto-connected shutdown loads through the shutdown sequencer,

3. maintains steady state voltage 2 3740 V and < 4320 V,

4. maintains steady state frequency 2 58.8 Hz and < 61.2 Hz, and

5. supplies permanently connected and auto-connected shutdown loads for 2 5 minutes.

(continued)

Wolf Creek - Unit 1 3.8-9 Amendment No. 123

Attachimnt II to WD 03-0009 AC Sources -Operating Page 5 of 12 3.8.1 SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY SR 3.8.1.12 ------------- - -----------------

1. All DG starts may be preceded by a prelube period. aQ3D

2. This Surveillance shall not be performed in Verify on an actual or simulated Engineered Safety 18 months Feature (ESF) actuation signal each DG auto-starts from standby condition and:

a. In

12 seconds after auto-start and during tests, achieves voltage > 3740 V and

4320 V,

b. In

12 seconds after auto-start and during tests, achieves frequency 2 58.8 Hz and

61.2 Hz;

c. Operates for 2 5 minutes;

d. Permanently connected loads remain energized from the offsite power system; and

e. Emergency loads are auto-connected and energized through the LOCA sequencer from the offsite power system.

(continued)

Wolf Creek - Unit 1 3.8-10 Amendment No. 123

AttachTent II to WO 03-0009 AC Sources -Operating Page 6 of 12 3.8.1 SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY SR 3.8.1.13 TE--

~Tyrs Surveilance sh not be prformei /

XIODE 1yr 2. // / /,

Verify each DG's automatic trips are bypassed on 18 months actual or simulated loss of voltage signal on the emergency bus concurrent with an actual or simulated ESF actuation signal except:

a. Engine overspeed;

b. Generator differential current;

c. Low lube oil pressure;

d. High crankcase pressure;

e. Start failure relay; and

f. High jacket coolant temperature.

(continued)

Wolf Creek - Unit I 3.8-11 Amendment No. 123

Attach4ent II to WO 03-0009 AC Sources -Operating Page 7 of 12 3.8.1 SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY SR 3.8.1.14 - ----- NOTES----------------------

1. Momentary transients outside the load and power factor ranges do not invalidate this test.

( 8/ Th7 urveilla e shall be perf med*

The DG may be loaded to Ž 5580 kW and 6Q'J < 6201 kW for the entire test period, if auto-connected loads are less than 6201 kW.

Verify each DG operating at a power factor

0.9 and 18 months 2 0.8 operates for 2 24 hour2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months s:

a. For 2 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months loaded 2 6600 kW and

6821 kW; and

b. For the remaining hours of the test loaded

> 5580 kW and

6201 kW.

SR 3.8.1.15 - -- -----NOTES------

1. This Surveillance shall be performed within 5 minutes of shutting down the DG after the DG has operated 2 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months loaded 2 5580 kW and

< 6201 kW. Momentary transients outside of load range do not invalidate this test.

2. All DG starts may be preceded by an engine prelube period.

Verify each DG starts and achieves, in

12 seconds, 18 months voltage > 3740 V, and

4320 V and frequency

Ž 58.8 Hz and < 61.2 Hz.

(continued)

Wolf Creek - Unit 1 3.8-12 Amendment No. 123

Attaclirent II to WO 03-0009 AC Sources - Operating Page 8 of 12 3.8.1 SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY SR 3.8.1.16 ---- --NOTE- ____

This Surveillance shall not be performed in MODE1,2,3,or4. to Verify each DG:

a. Synchronizes with offsite power source while 18 months loaded with emergency loads upon a simulated restoration of offsite power;

b. Transfers loads to offsite power source; and

c. Returns to ready-to-load operation.

4 SR 3.8.1.17 --- OTE------

This Surveillance shall not be performed in MODE 1 or 2._- , =;---

Verify, with a DG operating in test mode and connected 18 months to its bus, an actual or simulated Safety Injection signal overrides the test mode by:

a. Returning DG to ready-to-load operation; and

b. Automatically energizing the emergency load from offsite power.

(continued)

Wolf Creek - Unit 1 3.8-1 3 Amendment No. 123

Attachment II to WO 03-0009 AC Sources -Operating Page 9 of 12 3.8.1 SURVEILLANCE REQUIREMENT (continued)

SURVEILLANCE FREQUENCY SR 3.8.1.18 --a NOTE----

This Surveillance shall not be performed in Verify interval between each sequenced load block is 18 months within +/- 10% of design interval for each LOCA and shutdown sequence timer.

(continued)

Wolf Creek - Unit 1 3.8-1 4 Amendment No. 123

Attachrrent II to WO 03-0009 AC Sources -Operating Page 10 of 12 3.8.1 SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY SR 3.8.1.19 ----- NOTES-----------

1. All DG starts may be preceded by an engine prelube period. r )

2. This Surveillance shall not e performed in MODE 1 or2.J.

Verify on an actual or simulated loss of offsite power 18 months signal in conjunction with an actual or simulated Safety Injection signal:

a. De-energization of emergency buses;

b. Load shedding from emergency buses; and

c. DG auto-starts from standby condition and:

1. energizes permanently connected loads in

< 12 seconds,

2. energizes auto-connected emergency loads through load sequencer,

3. achieves steady state voltage 2 3740 V and < 4320 V,

4. achieves steady state frequency 2 58.8 Hz and < 61.2 Hz, and

5. supplies permanently connected and auto-connected emergency loads for 2 5 minutes.

(continued)

Wolf Creek - Unit 1 3.8-1 5 Amendment No. 123

DC Sources - Operating Attachment II to WO 03-0009 3.8.4 Page 11 of 12 SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY SR 3.8.4.7 -- ---- --NOTES-------------------------

1. The modified performance discharge test in SR 3.8.4.8 may be performed in lieu of the service test in SR 3.8.4.7. nbrmall

2. This Surveillance shall not be performed in MODE 1, 2, 3, or 4.-

Verify battery capacity is adequate to supply, and 18 months maintain in OPERABLE status, the required emergency loads for the design duty cycle when subjected to a battery service test.

(continued)

Wolf Creek - Unit 1 3.8-25 Amendment No. 123

DC Sources - Operating Attachrent II to WO 03-0009 3.8.4 Page 12 of 12

.CZIM/PII ,\,.I ANt'F P;flI IIPRFMFIANTS (crnntinued)

%JWvuu5 I- .- I -.- . \- -- I ,

SURVEILLANCE FREQUENCY I

SR 3.8.4.8 NOTE-This Surveillance shall not be performed in E D2 _

Verify battery capacity is 2 85% of the manufacturer's 60 months rating when subjected to a performance discharge test or a modified performance discharge test. AND 18 months when battery shows degradation or has reached 85% of expected life with capacity

< 100% of manufacturer's rating AND 24 months when battery has reached 85% of the expected life with capacity

> 100% of manufacturer's rating J __________________________________

Wolf Creek - Unit 1 3.8-26 Amendment No. 123

Attachment III of WO 03-0009 PROPOSEDIREVISED TECHNICAL SPECIFICATIONS

AC Sources - Operating 3.8.1 SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY IAl% T Sr SR 3.8.1.7 --------- IuI r---- --------------

All DG starts may be preceded by an engine prelube period.

Verify each DG starts from standby condition and 184 days achieves in < 12 seconds, voltage 2 3740 V and

< 4320 V, and frequency 2 58.8 Hz and < 61.2 Hz.

SR 3.8.1.8 Not Used.

SR 3.8.1.9 Not Used.

SR 3.8.1.10 Verify each DG operating at a power factor < 0.9 and 18 months 2 0.8 does not trip and voltage is maintained < 4784 V and frequency is maintained < 65.4 Hz during and following a load rejection of 2 5580 kW and < 6201 kW.

(continued)

Wolf Creek - Unit 1 3.8-8 Amendment No. 423,

AC Sources - Operating 3.8.1 SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY SR 3.8.1.11 ----------- NOTES---

1. All DG starts may be preceded by an engine prelube period.

2. This Surveillance shall not normally be performed in MODE 1 or 2. However, portions of the Surveillance may be performed to reestablish OPERABILITY provided an assessment determines the safety of the plant is maintained or enhanced.

Verify on an actual or simulated loss of offsite power 18 months signal:

a. De-energization of emergency buses;

b. Load shedding from emergency buses;

c. DG auto-starts from standby condition and:

1. energizes permanently connected loads in

< 12 seconds,

2. energizes auto-connected shutdown loads through the shutdown sequencer,

3. maintains steady state voltage 2 3740 V and < 4320 V,

4. maintains steady state frequency 2 58.8 Hz and < 61.2 Hz, and

5. supplies permanently connected and auto-connected shutdown loads for 2 5 minutes.

(continued)

Wolf Creek - Unit 1 3.8-9 Amendment No. 423,

AC Sources - Operating 3.8.1 SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY SR 3.8.1.12 - -- NOTES

1. All DG starts may be preceded by a prelube period.

2. This Surveillance shall not normally be performed in MODE 1 or 2. However, portions of the Surveillance may be performed to reestablish OPERABILITY provided an assessment determines the safety of the plant is maintained or enhanced.

Verify on an actual or simulated Engineered Safety 18 months Feature (ESF) actuation signal each DG auto-starts from standby condition and:

a. In < 12 seconds after auto-start and during tests, achieves voltage Ž 3740 V and < 4320 V;

b. In < 12 seconds after auto-start and during tests, achieves frequency 2 58.8 Hz and < 61.2 Hz;

c. Operates for 2 5 minutes;

d. Permanently connected loads remain energized from the offsite power system; and

e. Emergency loads are auto-connected and energized through the LOCA sequencer from the offsite power system.

(continued)

Wolf Creek - Unit 1 3.8-1 0 Amendment No. 423,

AC Sources -Operating 3.8.1 SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY SR 3.8.1.13 Verify each DG's automatic trips are bypassed on 18 months I actual or simulated loss of voltage signal on the emergency bus concurrent with an actual or simulated ESF actuation signal except:

a. Engine overspeed;

b. Generator differential current;

c. Low lube oil pressure;

d. High crankcase pressure;

e. Start failure relay; and

f. High jacket coolant temperature.

(continued)

Wolf Creek - Unit 1 3.8-1 1 Amendment No. 4-23,

AC Sources - Operating 3.8.1 SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY SR 3.8.1.14 -- ---------- NOTES---- - -

1. Momentary transients outside the load and power factor ranges do not invalidate this test.

2. The DG may be loaded to 2 5580 kW and

6201 kW for the entire test period, if auto-connected loads are less than 6201 kW.

Verify each DG operating at a power factor

0.9 and 18 months 2 0.8 operates for 2 24 hour2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months s:

a. For 2 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months loaded 2 6600 kW and* 6821 kW; and

b. For the remaining hours of the test loaded 2 5580 kW and

6201 kW.

SR 3.8.1.15 --- -------- NOTES-- -_____

1. This Surveillance shall be performed within 5 minutes of shutting down the DG after the DG has operated 2 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months loaded 2 5580 kW and

6201 kW. Momentary transients outside of load range do not invalidate this test.

2. All DG starts may be preceded by an engine prelube period.

Verify each DG starts and achieves, in < 12 seconds, 18 months voltage 2 3740 V, and

4320 V and frequency 2 58.8 Hz and

61.2 Hz.

(continued)

Wolf Creek - Unit I 3.8-12 Amendment No. 4-I,

AC Sources - Operating 3.8.1 SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY SR 3.8.1.16 -------- -NOTE----

This Surveillance shall not normally be performed in MODE 1, 2, 3, or 4. However, this Surveillance may be performed to reestablish OPERABILITY provided an assessment determines the safety of the plant is maintained or enhanced.

Verifyeach DG: 18 months

a. Synchronizes with offsite power source while loaded with emergency loads upon a simulated restoration of offsite power;

b. Transfers loads to offsite power source; and

c. Returns to ready-to-load operation.

SR 3.8.1.17 ---- g -NOTE-- ----

This Surveillance shall not normally be performed in MODE 1 or 2. However, portions of the Surveillance may be performed to reestablish OPERABILITY provided an assessment determines the safety of the plant is maintained or enhanced.

Verify, with a DG operating in test mode and connected 18 months to its bus, an actual or simulated Safety Injection signal overrides the test mode by:

a. Returning DG to ready-to-load operation; and

b. Automatically energizing the emergency load from offsite power.

(continued)

Wolf Creek - Unit 1 3.8-1 3 Amendment No. 42A,

AC Sources -Operating 3.8.1 SURVEILLANCE REQUIREMENT (continued) .

SURVEILLANCE FREQUENCY

1-SR 3.8.1.18 - - -[Mt KI.fV1F*

iL 'II t--______--

This Surveillance shall not normally be performed in MODE 1 or 2. However, this Surveillance may be performed to reestablish OPERABILITY provided an assessment determines the safety of the plant is maintained or enhanced.

Verify interval between each sequenced load block is 18 months within +/- 10% of design interval for each LOCA and shutdown sequence timer.

(continued)

Wolf Creek - Unit 1 3.8-1 4 Amendment No. 423,

AC Sources - Operating 3.8.1 SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY SR 3.8.1.19 ------------ NOTES----

1. All DG starts may be preceded by an engine prelube period.

2. This Surveillance shall not normally be performed in MODE 1 or 2. However, portions of the Surveillance may be performed to reestablish OPERABILITY provided an assessment determines the safety of the plant is maintained or enhanced.

Verify on an actual or simulated loss of offsite power 18 months signal in conjunction with an actual or simulated Safety Injection signal:

a. De-energization of emergency buses;

b. Load shedding from emergency buses; and

c. DG auto-starts from standby condition and:

1. energizes permanently connected loads in 12 seconds,

2. energizes auto-connected emergency loads through load sequencer,

3. achieves steady state voltage 2 3740 V and

4320 V,

4. achieves steady state frequency

Ž 58.8 Hz and

61.2 Hz, and

5. supplies permanently connected and auto-connected emergency loads for 2 5 minutes.

(continued)

Wolf Creek - Unit 1 3.8-1 5 Amendment No. 423,

DC Sources - Operating 3.8.4 SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY SR 3.8.4.7 --NOTES-

1. The modified performance discharge test in SR 3.8.4.8 may be performed in lieu of the service test in SR 3.8.4.7.

2. This Surveillance shall not normally be performed in MODE 1, 2, 3, or4. However, portions of the Surveillance may be performed to reestablish OPERABILITY provided an assessment determines the safety of the plant is maintained or enhanced.

Verify battery capacity is adequate to supply, and 18 months maintain in OPERABLE status, the required emergency loads for the design duty cycle when subjected to a battery service test.

(continued)

Wolf Creek - Unit 1 3.8-25 Amendment No. 423,

DC Sources - Operating 3.8.4 SURVEILLANCE REQUIREMENTS (continued)

SURVEILLANCE FREQUENCY SR 3.8.4.8 -- -------- -NOTE-------

This Surveillance shall not normally be performed in MODE 1, 2, 3, or 4. However, portions of the Surveillance may be performed to reestablish OPERABILITY provided an assessment determines the safety of the plant is maintained or enhanced.

Verify battery capacity is 2 85% of the manufacturer's 60 months rating when subjected to a performance discharge test or a modified performance discharge test. AND 18 months when battery shows degradation or has reached 85% of expected life with capacity

< 100% of manufacturer's rating AND 24 months when battery has reached 85% of the expected life with capacity

> 100% of manufacturer's rating Wolf Creek - Unit 1 3.8-26 Amendment No. 423,

Attachment IV to WO 03-0009 Page 1 of 15 TS BASES CHANGES (For Information Only) e

Attachment IV to WO 03-0009 Page 2 of 15 Text Inserts for TS Bases Chanqes TS Bases Insert 1 The Note 2 restriction from normally performing the Surveillance in MODE 1 or 2 is further amplified to allow portions of the Surveillance to be performed for the purpose of reestablishing OPERABILITY (e.g., post-work testing following corrective maintenance, corrective modification, deficient or incomplete surveillance testing, and other unanticipated OPERABILITY concerns) provided an assessment determines plant safety is maintained or enhanced. This assessment shall, as a minimum, consider the potential outcomes and transients associated with a failed partial Surveillance, a successful partial Surveillance, and a perturbation of the offsite or onsite system when they are tied together or operated independently for the partial Surveillance; as well as the operator procedures available to cope with these outcomes. These shall be measured against the avoided risk of a plant shutdown and startup to determine that plant safety is maintained or enhanced when portions of the Surveillance are performed in MODE 1 or 2. Risk insights or deterministic methods may be used for this assessment.

TS Bases Insert 2 The restriction from normally performing the Surveillance in MODE 1, 2, 3, or 4 is further amplified to allow the Surveillance to be performed for the purpose of reestablishing OPERABILITY (e.g., post-work testing following corrective maintenance, corrective modification, deficient or incomplete surveillance testing, and other unanticipated OPERABILITY concerns) provided an assessment determines plant safety is maintained or enhanced. This assessment shall, as a minimum, consider the potential outcomes and transients associated with a failed Surveillance, a successful Surveillance, and a perturbation of the offsite or onsite system when they are tied together or operated independently for the Surveillance; as well as the operator procedures available to cope with these outcomes. These shall be measured against the avoided risk of a plant shutdown and startup to determine that plant safety is maintained or enhanced when the Surveillance is performed in MODE 1, 2, 3 or

4. Risk insights or deterministic methods may be used for this assessment.

TS Bases Insert 3 The restriction from normally performing the Surveillance in MODE 1 or 2 is further amplified to allow portions of the Surveillance to be performed for the purpose of reestablishing OPERABILITY (e.g., post-work testing following corrective maintenance, corrective modification, deficient or incomplete surveillance testing, and other unanticipated OPERABILITY concerns) provided an assessment determines plant safety is maintained or enhanced. This assessment shall, as a minimum, consider the potential outcomes and transients associated with a failed partial Surveillance, a successful partial Surveillance, and a perturbation of the offsite or onsite system when they are tied together or operated independently for the partial Surveillance; as well as the operator procedures available to cope with these outcomes. These shall be measured against the avoided risk of a plant shutdown and startup to determine that plant safety is maintained or enhanced when portions of the Surveillance are performed in MODE 1 or 2. Risk insights or deterministic methods may be used for this assessment.

Attachtmnt IVto WO 03-0009 Pag AC Sources - Operating Nl Cangcs 1 ?Ate. -4'ro FWi ?' etA B 3.8.1 A=c r

/bnA= nu" BASES SURVEILLANCE SR 3.8.1.5 (continued)

REQUIREMENTS maintenance. The presence of water does not necessarily represent failure of this SR, provided the accumulated water is removed during the performance of this Surveillance.

SR 3.8.1.6 This Surveillance demonstrates that each required fuel oil transfer pump operates and transfers fuel oil from its associated storage tank to its associated day tank. This is required to support continuous operation of standby power sources This Surveillance provides assurance that the fuel oil transfer pump is OPERABLE, the fuel oil piping system is intact, the fuel delivery piping is not obstructed, and the controls and control systems for automatic fuel transfer systems are OPERABLE.

The Frequency for this SR is 31 days.

Periodically, the capability of the fuel oil transfer pump to supply the opposite train DG via the installed cross-connect line is verified.

SR 3 8.1.7 See SR 3.8.1.2.

SR 3.8.1.8 Not Used.

SR 3.8.1.9 Not Used.

SR 3.8.1.10 This Surveillance demonstrates the DG capability to reject a full load without overspeed tripping or exceeding the predetermined voltage limits.

The DG full load rejection may occur because of a system fault or inadvertent breaker tripping. This Surveillance ensures proper engine generator load response under the simulated test conditions. This test Wolf Creek - Unit 1 B 3.8.1-18 Revision 0

Attachrent IV to WO 03-0009 AC Sources - Operating B 3.8.1 Page 5 of 15 BASES SURVEILLANCE SR 3 8.1.10 (continued)

REQUIREMENTS simulates the loss of the total connected load that the DG experiences following a full load rejection and verifies that the DG does not trip upon loss of the load. These acceptance criteria provide for DG damage protection. While the DG is not expected to experience this transient during an event and continues to be available, this response ensures that the DG is not degraded for future application, including reconnection to the bus if the trip initiator can be corrected or isolated.

In order to ensure that the DG is tested under load conditions that are as close to design basis conditions as possible, testing must be performed using a power factor 2 0.8 and < 0.9. This power factor is chosen to be representative of the actual design basis inductive loading that the DG would experience.

The 18 month Frequency is consistent with the recommendation of Regulatory Guide 1.9, Rev. 3 (Ref. 3), and is intended to be consistent with expected fuel cycle lengths.

hiRa ee odfi yNot. The r asnf theit ing o ratio with th eactor ical, p orma e oft SR gduld cause ertur ation to electr I distri tion s tems t at co d c ng ontiu sedy topron a ,as arslyi a~

SR 3.8.1.11 As required by Regulatory Guide 1.108 (Ref. 9), paragraph 2.a.(1), this Surveillance demonstrates the as-designed operation of the standby power sources during loss of the offsite source. This test verifies all actions encountered from the loss of offsite power, including shedding of the nonessential loads and energization of the emergency buses and respective loads from the DG. It further demonstrates the capability of the DG to automatically achieve the required voltage and frequency within the specified time.

The DG autostart time of 12 seconds is derived from requirements of the accident analysis to respond to a design basis large break LOCA. The Surveillance should be continued for a minimum of 5 minutes in order to demonstrate that all starting transients have decayed and stability is achieved.

Wolf Creek - Unit I B 3.8.1-19 Revision 0

Attacltmert IV to WO 03-0009 AC Sources - Operating Page 6 of 15 B 3.8.1 BASES SURVEILLANCE SR 3.8.1.11 (continued)

REQU IREMFENTS The requirement to verify the connection and power supply of permanent and autoconnected loads is intended to satisfactorily show the relationship of these loads to the DG loading logic. In certain circumstances, many of these loads cannot actually be connected or loaded without undue hardship or potential for undesired operation. For instance, Emergency Core Cooling Systems (ECCS) injection valves are not desired to be stroked open, or high pressure injection systems are not capable of being operated at full flow, or residual heat removal (RHR) systems performing a decay heat removal function are not desired to be realigned to the ECCS mode of operation. In lieu of actual demonstration of connection and loading of loads, testing that adequately shows the capability of the DG systems to perform these functions is acceptable.

This testing may include any series of sequential, overlapping, or total steps so that the entire connection and loading sequence is verified.

The Frequency of 18 months is consistent with the recommendations of Regulatory Guide 1.9, Rev. 3 (Ref. 3), takes into consideration unit conditions required to perform the Surveillance, and is intended to be consistent with expected fuel cycle lengths.

This SR is modified by two Notes. The reason for Note I is to minimize wear and tear on the DGs during testing. For the purpose of this testing, the DGs must be started from standby conditions, that is, with the engine coolant and oil continuously circulated and temperature maintained consistent with manufacturer recommendations The reason for Note 2 is that performing the Surveillance would remove a required offsite circuit from service, perturb the electrical distribution system, and challenge safety systems.

SR 3.8 1.12 This Surveillance demonstrates that the DG automatically starts and achieves the required voltage and frequency within the specified time (12 seconds) from the design basis actuation signal (LOCA signal) and operates for 2 5 minutes. The 5 minute period provides sufficient time to demonstrate stability. SR 3.8.1.12.d and SR 3.8.1.12.e ensure that permanently connected loads and emergency loads are energized from the offsite electrical power system on an ESF signal without loss of offsite power.

Wolf Creek - Unit 1 B 3.8.1-20 Revision 0

AttachTrwt IV to WO 03-0009 AC Sources - Operating B 3.8.1 Page 7 of 15 BASES SURVEILLANCE SR 3 8.1.12 (continued)

REQUIREMENTS The requirement to verify the connection of permanent and autoconnected loads is intended to satisfactorily show the relationship of these loads to the DG loading logic. In certain circumstances, many of these loads cannot actually be connected or loaded without undue hardship or potential for undesired operation. For instance, ECCS injection valves are not desired to be stroked open, or high pressure injection systems are not capable of being operated at full flow, or RHR systems performing a decay heat removal function are not desired to be realigned to the ECCS mode of operation. In lieu of actual demonstration of connection and loading of loads, testing that adequately shows the capability of the DG system to perform these functions is acceptable. This testing may include any series of sequential, overlapping, or total steps so that the entire connection and loading sequence is verified.

The Frequency of 18 months takes into consideration unit conditions required to perform the Surveillance and is intended to be consistent with the expected fuel cycle lengths. Operating experience has shown that these components usually pass the SR when performed at the 18 month Frequency. Therefore, the Frequency was concluded to be acceptable from a reliability standpoint.

This SR is modified by two Notes. The reason for Note 1 is to minimize wear and tear on the DGs during testing. For the purpose of this testing, the DGs must be started from standby conditions, that is, with the engine coolant and oil temperature maintained consistent with manufacturer recommendations. The reason for Note 2 is that during operation with the reactor critical, performance of this Surveillance could cause perturbations to the electrical distribution systems that could challenge continued steady state operation and, as a result, unit safety systems.

SR 3.8.1.13 This Surveillance demonstrates that DG noncritical protective functions are bypassed on a loss of voltage signal concurrent with an ESF actuation test signal. The noncritical trips are bypassed during DBAs and provide an alarm on an abnormal engine condition. This alarm provides the operator with sufficient time to react appropriately. The DG availability to mitigate the DBA is more critical than protecting the engine against minor problems that are not immediately detrimental to emergency operation of the DG.

Wolf Creek - Unit 1 B 3.8.1-21 Revision 0

Attachmint IV to WO 03-0009 AC Sources-Operating Page 8 of 15 B 3.8.1 BASES SURVEILLANCE SR 3.8.1.13 (continued)

REQUIREMENTS engineerinq iudgmepn1 The 18 month Fre uencv sbsdodpVrpf~rWelai;~

(<csdif~fo~rli~cotigrrf intended ~toub'e ~consist~ent with expected fuel cycle lengths. Operating experience has shown that these components usually pass the SR when performed at the 18 month Frequency. Therefore, the Frequency was concluded to be acceptable from a reliability standpoint.

Th~~ R byhe fthe Ze{ is~th ~rfo~l~

Ag Su ~eillanpswouJ~rempe a r~~uiredG fro,;Kservicp SR 3.8.1.14 Regulatory Guide 1.9, Rev. 3, (Ref. 3), requires demonstration once per 18 months that the DGs can start and run continuously at full load capability for an interval of not less than 24 hours2.777778e-4 days 0.00667 hours 3.968254e-5 weeks 9.132e-6 months , 2 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months of which is at a load equivalent to 110% of the continuous duty rating and the remainder of the time at a load equivalent to the continuous duty rating of the DG (Refer to discussion of Note 3 below). The DG starts for this Surveillance can be performed either from standby or hot conditions. The provisions for prelubricating and warmup, discussed in SR 3.8.1.2, and for gradual loading, discussed in SR 3.8.1.3, are applicable to this SR.

In order to ensure that the DG is tested under load conditions that are as close to design conditions as possible, testing must be performed using a power factor of 2 0.8 and < 0.9 at a voltage of 4160 +160 -420 volts and a frequency of 60 +/- 1.2 Hz. This power factor is chosen to be representative of the actual design basis inductive loading that the DG would experience. The load band is provided to avoid routine overloading of the DG. Routine overloading may result in more frequent teardown inspections in accordance with vendor recommendations in order to maintain DG OPERABILITY.

The 18 month Frequency is consistent with the recommendations of Regulatory GGuide 1.9, Rev. 3 (Ref. 3) aS in5eijrf it er ir u illa e, iie be consistent with expected fuel cycle leng This Surveillance is modified by IeNotes. Note 1 states that momentary transients due to changing bus loads do not invalidate this test. Similarly, momentary power factor transients outside the power factor range will not invalidate the test. f No qX (then7' ma eo i ce Wolf Creek - Unit I B 3.8.1-22 Revision 8

Attacftrent IV to WO 03-0009 AC Sources-Operating Page 9 of 15 B 3.8.1 BASES SURVEILLANCE SR 3.8.1.14 (continued)

REQUIREMENTS _ - e co c se ertu,6tionyth ele cajstripdtion stern at Id c lie ge ntinu d ste~dd state o~erag6n ad as Iesult,.initsuf t Not permits the elimination of the 2-hour overloa es, provided thathe combined emergency loads on a DG do not exceed its continuous duty rating.

SR 3.8.1.15 This Surveillance demonstrates that the diesel engine can restart from a hot condition, such as subsequent to shutdown from normal Surveillances, and achieve the required voltage and frequency within 12 seconds. The 12 second time is derived from the requirements of the accident analysis to respond to a design basis large break LOCA. The 18 month Frequency is consistent with the recommendations of Regulatory Guide 1.9, Rev. 3 (Ref. 3).

This SR is modified by two Notes. Note I ensures that the test is performed with the diesel sufficiently hot. The load band is provided to avoid routine overloading of the DG. Routine overloads may result in more frequent teardown inspections in accordance with vendor recommendations in order to maintain DG OPERABILITY. The requirement that the diesel has operated for at least 2 hours2.314815e-5 days 5.555556e-4 hours 3.306878e-6 weeks 7.61e-7 months at full load conditions prior to performance of this Surveillance is based on manufacturer recommendations for achieving hot conditions. Momentary transients due to changing bus loads do not invalidate this test. Note 2 allows all DG starts to be preceded by an engine prelube period to minimize wear and tear on the diesel during testing.

SR 3.8.1.16 As required by Regulatory Guide 1.9, Rev. 3 (Ref. 3), this Surveillance ensures that the manual synchronization and automatic load transfer from the DG to the offsite source can be made and the DG can be returned to ready to load status when offsite power is restored. It also ensures that the autostart logic is reset to allow the DG to reload if a subsequent loss of offsite power occurs. The DG is considered to be in ready to load status when the DG is at rated speed and voltage, the output breaker is open and can receive a close signal on bus undervoltage, and the load sequence timers are reset.

Wolf Creek - Unit 1 B 3.8.1-23 Revision 7

Attacftrnt IV to WO 03-0009 Page 10 of 15 B 3.8-1 BASES SURVEILLANCE SR 3.8.1.16 (continued)

REQUIREMENTS The Frequency of 18 months is consistent with the recommendations of Regulatory Guide 1.9, Rev. 3 (Ref. 3), and takes into consideration unit conditions required to perform the Surveillance.

This SR is modified by a Note. The reason for the Note is that performing the Surveillance would remove a required offsite circuit from service, perturb the electrical distribution system, and challenge safety systems.-

SR 3.8.1.17 Demonstration of the test mode (parallel mode) override ensures that the DG availability under accident conditions will not be compromised as the result of testing and the DG will automatically reset to ready to load operation if a Safety Injection actuation signal is received during operation in the test mode. Ready to load operation is defined as the DG running at rated speed and voltage with the DG output breaker open. These provisions for automatic switchover are required by IEEE-308 (Ref. 13),

paragraph 6.2.6(2).

The requirement to automatically energize the emergency loads with offsite power is essentially identical to that of SR 3.8.1.12. The intent in the requirement associated with SR 3.8.1.17.b is to show that the emergency loading was not affected by the DG operation in test mode. In lieu of actual demonstration of connection and loading of loads, testing that adequately shows the capability of the emergency loads to perform these functions is acceptable.

This testing may include any series of sequential, overlapping, or total steps so that the entire connection and loading sequence is verified.

The 18 month Frequency is consistent with the recommendations of Regulatory Guide 1.9, Rev. 3 (Ref. 3), takes into consideration unit conditions required to perform the Surveillance, and is intended to be consistent with expected fuel cycle lengths.

This SR is modified by a Note. The reason for the Note is that performing the Surveillance would remove a required offsite circuit from service, perturb the electrical distribution system, and challenge safety systems.

Wolf Creek - Unit 1 B 3.8.1-24 Revision 0

Attactrenit IV to WO 03-0009 AC Sources - Operating Page 11 of 15 B 3.8.1 BASES SURVEILLANCE SR 3.8.1.18 REQUIREMENTS (continued) Under accident and loss of offsite power conditions loads are sequentially connected to the bus by the LSELS. The sequencing logic controls the permissive and starting signals to motor breakers to prevent overloading of the DGs due to high motor starting currents. The 10% load sequence time interval tolerance ensures that sufficient time exists for the DG to restore frequency and voltage prior to applying the next load and that safety analysis assumptions regarding ESF equipment time delays are not violated. Reference 2 provides a summary of the automatic loading of ESF buses.

The Frequency of 18 months is consistent with the recommendations of Regulatory Guide 1.9, Rev. 3 (Ref. 3), takes into consideration unit conditions required to perform the Surveillance, and is intended to be consistent with expected fuel cycle lengths.

This SR is modified by a Note. The reason for the Note is that performing the Surveillance would remove a required offsite circuit from service, perturb the electrical distribution system, and challenge safety systems.

SR 3.8.1.19 -

In the event of a DBA coincident with a loss of offsite power, the DGs are required to supply the necessary power to ESF systems so that the fuel, RCS, and containment design limits are not exceeded.

This Surveillance demonstrates the DG operation, as discussed in the Bases for SR 3.8.1.1 1, during a loss of offsite power actuation test signal in conjunction with an ESF actuation signal. In lieu of actual demonstration of connection and loading of loads, testing that adequately shows the capability of the DG system to perform these functions is acceptable. This testing may include any series of sequential, overlapping, or total steps so that the entire connection and loading sequence is verified.

The Frequency of 18 months takes into consideration unit conditions required to perform the Surveillance and is intended to be consistent with an expected fuel cycle length of 18 months.

This SR is modified by two Notes. The reason for Note I is to minimize wear and tear on the DGs during testing. For the purpose of this testing, the DGs must be started from standby conditions, that is, with the engine Wolf Creek - Unit 1 B 3.8.1-25 Revision 0

Attacget IV to15 ) 0 AC Sources - Operating Page 12 of 15 B 3.8.1 BASES SURVEILLANCE SR 3.8.1.19 (continued)

REQUIREMENTS coolant and oil continuously circulated and temperature maintained consistent with manufacturer recommendations for DGs. The reason for Note 2 is that the performance of the Surveillance would remove a required offsite circuit from service, perturb the electrical distribution system, and challenge safety systems.

SR 3.8.1.20 This Surveillance demonstrates that the DG starting independence has not been compromised. Also, this Surveillance demonstrates that each engine can achieve proper speed within the specified time when the DGs are started simultaneously.

The 10 year Frequency is consistent with the recommendations of Regulatory Guide 1.108 (Ref. 9).

This SR is modified by a Note. The reason for the Note is to minimize wear on the DG during testing. For the purpose of this testing, the DGs must be started from standby conditions, that is, with the engine coolant and oil temperature maintained consistent with manufacturer recommendations.

SR 3.8.1.21 SR 3.8.1.21 is the performance of an ACTUATION LOGIC TEST for each load shedder and emergency load sequencer train except that the continuity check does not have to be performed, as explained in the Note.

This test is performed every 31 days on a STAGGERED TEST BASIS.

The Frequency is adequate based on industry operating experience, considering instrument reliability and operating history data.

Wolf Creek - Unit 1 B 3.8.1-26 Revision 0

Attachirnt IV to WO 03-0009 DC Sources -Operating

-l -~ ?we. E"aIPReN'\1b FoB 3.8.4 BASES SURVEILLANCE SR 3.8.4.4 and SR 3.8.4.5 (continued)

REQUIREMENTS anticorrosion material is used to help ensure good electrical connections and to reduce terminal deterioration. The visual inspection for corrosion is not intended to require removal of and inspection under each terminal connection. The removal of visible corrosion is a preventive maintenance SR. The presence of visible corrosion does not necessarily represent a failure of this SR provided visible corrosion is removed during performance of SR 3.8.4.4.

The Surveillance Frequencies of 18 months are based on operational experience.

SR 3.8.4.6 This SR requires that each battery charger be capable of supplying 300 amps and 128.4 V for 2 1 hour1.157407e-5 days 2.777778e-4 hours 1.653439e-6 weeks 3.805e-7 months . These requirements are based on the design rating of the chargers (Ref. 4). According to Regulatory Guide 1.32 (Ref. 10), the battery charger supply is required to be based on the largest combined demands of the various steady state loads and the charging capacity to restore the battery from the design minimum charge state to the fully charged state, irrespective of the status of the unit during these demand occurrences. The minimum required amperes and duration ensures that these requirements can be satisfied.

The Surveillance Frequency is acceptable, given the unit conditions required to perform the test and the other administrative controls existing to ensure adequate charger performance during these 18 month intervals.

In addition, this Frequency is intended to be consistent with expected fuel cycle lengths.

SR 3.8.4.7 A battery service test is a special test of battery capability, as found, to satisfy the design requirements (battery duty cycle) of the DC electrical power system. The discharge rate and test length should correspond to the design duty cycle requirements as specified in Reference 4.

The Surveillance Frequency of 18 months is consistent with the recommendations of Regulatory Guide 1.32 (Ref. 10) and Regulatory Guide 1.129 (Ref. 11), which state that the battery service test should be performed during refueling operations or at some other outage, with intervals between tests, not to exceed 18 months.

Wolf Creek - Unit I B 3 8.4-6 Revision 0

Attacirment IV to WO 03-0009 DC Sources -Operating Page 14 of 15 B 3.8.4 BASES SURVEILLANCE SR 3.8.4.7 (continued)

REQUIREMENTS This SR is modified by two Notes. Note 1 allows the performance of a modified performance discharge test in lieu of a service test.

The modified performance discharge test is a simulated duty cycle consisting of just two rates; the one minute rate published for the battery or the largest current load of the duty cycle, followed by the test rate employed for the performance test, both of which envelope the duty cycle of the service test. Since the ampere-hours removed by a rated one minute discharge represents a very small portion of the battery capacity, the test rate can be changed to that for the performance test without compromising the results of the performance discharge test. The battery terminal voltage for the modified performance discharge test should remain above the minimum battery terminal voltage specified in the battery service test for the duration of time equal to that of the service test.

A modified performance discharge test is a test of the battery capacity and its ability to provide a high rate, short duration load (usually the highest rate of the duty cycle). This will often confirm the battery's ability to meet the critical period of the load duty cycle, in addition to determining its percentage of rated capacity. Initial conditions for the modified performance discharge test should be identical to those specified for a service test.

The reason for Note 2 is that performing the Surveillance would perturb the electrical distribution system and challenge safety systems.

SR 3.8.4.8 A battery performance discharge test is a test of constant current capacity of a battery, normally done in the as found condition, after having been in service, to detect any change in the capacity determined by the acceptance test. The test is intended to trend overall battery degradation due to age and usage.

A battery modified performance discharge test is described in the Bases for SR 3.8.4.7. Either the battery performance discharge test or the modified performance discharge test is acceptable for satisfying SR 3.8.4.8; however, only the modified performance discharge test may be used to satisfy SR 3.8.4.8 while satisfying the requirements of SR 3.8.4.7 at the same time.

Wolf Creek - Unit 1 B 3.8.4-7 Revision 6

Attacgtent 1IV to DC Sources - Operating Page 15 of 15 B 3.8.4 BASES SURVEILLANCE SR 3 8.4.8 (continued)

REQUIREMENTS The manufacturer recommends that the battery be replaced if its capacity is below 80% of the manufacturer's rating. A capacity of 80% shows that the battery rate of deterioration is increasing, even if there is ample capacity to meet the load requirements. However, based on discussions with the NRC associated with the AT&T round cell batteries (Reference 13), the SR specifies a battery capacity of 85%. If battery capacity is below 85% of the manufacturer's rating, the battery is to be replaced. The battery capacity is determined using the manufacturer's minimum lifetime rating. Adverse trends in the battery capacity identified during the performance of this SR are evaluated in accordance with the corrective action program.

The Surveillance Frequency for this test is normally 60 months. If the battery shows degradation, or if the battery has reached 85% of its expected life and capacity is < 100% of the manufacturer's rating, the Surveillance Frequency is reduced to 18 months. However, if the battery shows no degradation but has reached 85% of its expected life, the Surveillance Frequency is only reduced to 24 months for batteries that retain capacity 2 100% of the manufacturer's rating. Degradation is indicated, according to IEEE-450 (Ref. 9), when the battery capacity drops by more than 10% relative to its capacity on the previous performance test or when it is 2 10% below the manufacturer's rating.

This SR is modified by a Note. The reason for the Note is that performing the Surveillance would perturb the electrical distribution system and m5 YES IMSO challenge safety systems.

REFERENCES 1. 10 CFR 50, Appendix A, GDC 17.

2. Regulatory Guide 1.6, March 10, 1971.

3. IEEE-308-1978.

4. USAR, Chapter 8.

5. IEEE-485-1983, June 1983.

6. USAR, Chapter 6.

7. USAR, Chapter 15.

8. Regulatory Guide 1.93, December 1974.

Wolf Creek - UWit 1 B 3.8.4-8 Revision 0

Attachment V to WO 03-0009 Page 1 of 1 LIST OF COMMITMENTS The following table identifies those actions committed to by Wolf Creek Nuclear Operating Corporation (WCNOC) in this document. Any other statements in this submittal are provided for information purposes and are not considered to be commitments. Please direct questions regarding these commitments to Mr. Tony Harris, Manager Regulatory Affairs at Wolf Creek Generating Station, (620) 364-4038.

COMMITMENT Due DatelEvent Revision to the TS Bases will be implemented pursuant to the TS Within 90 days of Bases Control Program, TS 5.5.14, upon implementation of this NRC approval.

license amendment.

It is anticipated that the license amendment, as approved, will be Within 90 days of effective upon issuance, to be implemented within 90 days from NRC approval.

the date of issuance. I

WO 03-0009, Application for Amendment to License NPF-42 to Revise Technical Specification 3.8.1, AC Sources -- Operating, to Allow Surveillance Testing of Onsite Standby Emergency Diesel Generators (Dgs) During Modes Currently Prohibited

Contents

Text

Subject:

Subject:

3.1 DESCRIPTION

1.0 DESCRIPTION

2.0 PROPOSED CHANGE

3.0 BACKGROUND

3.1 DESCRIPTION

5.0 REGULATORY ANALYSIS

6.0 ENVIRONMENTAL CONSIDERATION

7.0 REFERENCES

Subject:

Navigation menu

WO 03-0009, Application for Amendment to License NPF-42 to Revise Technical Specification 3.8.1, AC Sources -- Operating, to Allow Surveillance Testing of Onsite Standby Emergency Diesel Generators (Dgs) During Modes Currently Prohibited

Text

Subject:

Subject:

3.1 DESCRIPTION

1.0 DESCRIPTION

2.0 PROPOSED CHANGE

3.0 BACKGROUND

3.1 DESCRIPTION

5.0 REGULATORY ANALYSIS

6.0 ENVIRONMENTAL CONSIDERATION

7.0 REFERENCES

Subject:

Navigation menu

Search