ML18032A614

St. Lucie, Units 1 and 2, Third Response to Request for Additional Information Regarding License Amendment Request to Adopt Risk Informed Completion Times TSTF-505, Revision 1, Provide Risk-Risk Informed Extended Completion Times - RITSTF I

ML18032A614
Person / Time
Site:	Saint Lucie
Issue date:	02/01/2018
From:	Deboer D Florida Power & Light Co
To:	Document Control Desk, Office of Nuclear Reactor Regulation
References
L-2018-006
Download: ML18032A614 (38)

Text

U. S. Nuclear Regulatory Commission Attn: Document Control Desk Washington, D.C. 20555-0001 FEB 0 1 2018 Re: St. Lucie Nuclear Plant, Units 1 and 2 Docket Nos. 50-335 and 50-389 L-2018-006 10 CFR 50.90 Third Response to Request for Additional Information Regarding License Amendment Request to Adopt Risk Informed Completion Times TSTF-505, Revision 1, "Provide Informed Extended Completion Times -RITSTF Initiative 4b"

References:

1. Florida Power & Light Company letter L-2014-242, "Application to Adopt TSTF-505, Revision 1, Provide Risk-Informed Extended Completion Times-RITSTF Initiative 4B," December 5, 2014 (ML14353A016)

2. NRC E-mail "Request for Additional Information-St. Lucie TSTF-505 EICB -MF5372 & MF 5373," March 28,2016 (ML16089A006)

3. NRC E-mail "Request for Additional Information-St. Lucie TSTF-505 APLA -MF5372 & MF5373," April13, 2016 (ML16105A456)

4. NRC E-mail "Request for Additional Information-St. Lucie TSTF 505 APLA -MF5372 & MF5373," May 27,2016 (ML16152A187)

5. Florida Power & Light Company letter L-2016-114, "Response to Request for Additional Information Regarding License Amendment Request to Adopt TSTF-505, 'Provide Informed Extended Completion Times-RITSTF Initiative 4B'," July 8, 2016 (ML16193A659)

6. Florida Power & Light Company letter L-2016-135, "Second Response to Request for Additional Information Regarding License Amendment Request to Adopt TSTF-505, 'Provide Risk-Informed Extended Completion Times-RITSTF Initiative 4B'," July 22, 2016 (ML16208A061)

7. Florida Power & Light Company letter L-2017 -007 "Supplement to License Amendment Request to Adopt Risk Informed Completion Times TSTF-505, Revision 1, "Provide Informed Extended Completion Times-RITSTF Initiative 4b," February 25, 2017 (ML17058A181)

8. NRC E-mail "Request for Additional Information-St. Lucie RICT LAR-MF5372/5363," October 4, 2017 (ML17277 A369) Florida Power & Light Company 6501 S. Ocean Drive, Jensen Beach , FL 34957 Florida Power & Light Company L-2018-006 Page 2 In Reference 1, as supplemented by References 5, 6 and 7, Florida Power & Light Company (FPL) submitted a license amendment request (LAR) for St. Lucie Units 1 and 2. The proposed amendment would revise the Technical Specifications (TS) to implement TSTF-505, Revision 1, "Provide Risk-Informed Extended Completion Times RITSTF [Risk Informed TSTFJ Initiative 4b." In Reference 8, the NRC staff requested additional information to support its review of the LAR. The Enclosure to this letter provides FPL's response to the request for additional information (RAI) in the areas of risk assessment (APLA) and technical specifications (STSB). Attachments 1 and 2 to the Enclosure provide markups of the operating licenses for St. Lucie Units 1 and 2, respectively, which add a license condition regarding the Risk Informed Completion Time Program. Attachments 3 and 4 to the Enclosure contain markups of the TS for Units 1 and 2, respectively, which revise the proposed Risk Informed Completion Time Program in the administrative section of the TS. The TS markups supersede the corresponding markups provided in Reference

7. This RAI response does not alter the conclusions in Reference 1 that the changes do not involve a significant hazards consideration pursuant to 10 CPR 50.92, and there are no significant environmental impacts associated with the changes. No new or revised commitments are included in this letter Should you have any questions regarding this submittal, please contact Mr. Mike Snyder, Licensing Manager, at (772) 467-7036.

I declare under penalty of perjury that the foregoing is true and correct. Executed on February f Sincerely, Dan DeBoer Site Director Florida Power & Light Company Enclosure

'2018 cc: NRC Regional Administrator, Region II NRC Senior Resident Inspector NRC Project Manager Ms. Cindy Becker, Florida Department of Health Enclosure L-201 8-006 Page 1 of 2 8 Response to Request for Additional Information (RAI)

A. Probabilistic Risk Assessment (APLA) RAI

1. RAI-MF5372/73-APLA-01.c.R1 (Internal event probabilistic risk assessment (PRA))

The July 8, 2016, response to RAI

-MF5372/73-APLA-01.c (Agencywide Documents Access and Management System (ADAMS) Accession No. ML16193A659) states that the initiating event frequency associated with loss of a single 120 V instrument bus is 9E

-04/year and states that the common cause failure of 120 V instrument buses would only have a "very small impact on RICT estimates." It is not clear why the common cause failure (CCF) of 120 V instrument buses would only have a very small impact on RICT estimates, given that failure of redundant 120 V instrument buses could lead to an unanticipated system response. The NRC staff notes that although the CCF frequency of 120 V instrument buses would be less than the failure frequency of a single bus, the criteria for screening initiating events based on Supporting Requirement IE

-C6 of the Probabilistic Risk Assessment (PRA) Standard would likely not be met (i.e., an initiating event can be screened if the frequency of the event is less than 1E

-06/year and the core damage would not occur unless at least two trains of mitigating systems are failed independent of the initiator).

a) Summarize the anticipated plant responses to the common mode failure of redundant 120 V instrument buses.

b) Based on the plant response, justify the exclusion of the CCF of redundant 120 V instrument buses as an initiating event contributor.

c) Provide an explanation on how excluding CCF events for these buses affects the CCF calculations described in RAIs RAI

-MF5372/73 12 and 13 below.

Florida Power & Light Company (FPL) Response a. In Unit 1, four redundant 120VAC single

-phase instrument power buses (1MA, 1MB, IMC, and IMD) provide power to essential instrumentation and control loads. Each bus is supplied separately from an inverter (1A, 1B, 1C, and 1D) powered from one of the two vital 125VDC buses (1A and 1B). Manually aligned alternate feeds are provided to the 120V AC instrument buses from vital MCC's through step

-down transformers in case of an inverter failure. To permit maintenance of any inverter without de

-energizing the corresponding instrument bus, two redundant maintenance bypass buses (1A and 1B) powered by isolimiters (1A and 1B) through "make before break" transfer switches are provided. Breaker interlocks are provided to prevent simultaneous connection of more than one instrument bus to a maintenance bypass bus.

In Unit 2, four pairs of 120VAC single

-phase instrument buses (2MA, 2MA

-1, 2MB, 2MB

-1, 2MC, 2MC-1, 2MD , and 2MD-1) provide uninterruptible power to Engineered Safety Features Actuation System (ESFAS) and Reactor Protective System (RPS) instrumentation. Each pair of instrument buses is supplied from an inverter (2A, 2B, 2C, and 2D) connected to one of the vital 125VDC buses. To permit maintenance without disabling the corresponding instrument bus, maintenance bypass transformers and voltage regulators are provided for each inverter system.

Common mode failure of redundant 120V instrument buses would cause the affected unit to trip. Emergency Core Cooling System (ECCS) would be actuated (i.e., actuates upon de-Enclosure L-201 8-006 Page 2 of 2 8 energized 120V AC buses leading to activation of 2 out of 4 channels actuation logic system) and ESFAS would be actuated. 125V DC power would still be available

, which allows ECCS and auxiliary feedwater (AFW) flow to be operational. All other components fail to their safety

-related position. Indication instruments relying on 120V AC power will also lose their function.

b. St. Lucie Models considered CCF of inverters feeding the buses rather than the buses consistent with the availability of CCF Alpha Factors for the inverters. Therefore, the CCF of buses is included as an initiating events contributor.

c. CCF of inverters feeding the buses bounds the CCF of the buses.

2. RAI-MF5372/73-APLA-02.b.R1 (Fire PRA)

The response to RAI

-MF5372/73-APLA-02 part b explains that the PRA model and update process required by the PRA procedure ensures the model is consistent with the as

-built, as-operated plant by using "various triggering factors.

" The response does not describe the factors that will be considered and monitored to trigger an update, such as plant modifications, procedure changes, changes in industry information and other changes. Accordingly, it is not clear to the NRC staff how the procedure ensures that the models used in the RICT program will reflect the as

-built, as-operated plant. Describe the factors considered and monitored that would trigger an update such as plant modifications, procedure changes, changes in industry information and other changes to

ensure the models used in the RICT program reflect the as

-built, as-operated plant.

FPL Response As required in RG 1.200, revision 2, FPL's PRA configuration and update program monitors the following for impact to the PRA:

Operational Experience, Plant Design Changes, New Maintenance Policies, Operator Training Program Changes, Technical Specification Changes, Revised Engineering Calculations, Emergency and Abnormal Operating Procedures , Operating Procedures, Fire Protection Program and Procedures, Fire Response Procedures, Plant and System Operating History, Emergency Plan Changes, Accident Management Programs, Industry Studies (NRC NUREGs, EPRI Studies, INPO SOERs, etc.).

ASME PRA Standards, and RG 1.200 Revisions

.

Enclosure L-201 8-006 Page 3 of 2 8 Any item that impacts the PRA and indicates the PRA does not match the as

-built, as-operated plant, is entered in the model change database (MCDB). Each entry is reviewed by the model owner and an estimate is made of the risk impact, including cumulative risk impact of open MCDB items. If the impact is minor, the change is made at the next scheduled model update. If the impact is major, a model change is conducted promptly.

3. RAI-MF5372/73-APLA-09.R1 (NFPA 805 Modification Implementation)

The response to RAI

-MF5372/73-APLA-09 states that "at the time of implementation of [a] RICT, any modifications that are not installed will not be credited in the estimation of [core damage frequency] or [large, early release frequency].

" Using this approach, it is possible, depending on the modifications that remain to be installed at the time of a RICT implementation, that the as

-built, as-operated plant may not meet Regulatory Guide (RG) 1.174 risk acceptance guidelines. Explain when the modification that will place the risk below the RG 1.174 acceptance guidelines is expected to be completed and what the risk is expected to be. Also, provide a license condition that will verify that the as

-built, as-operated plant meets RG 1.174 risk acceptance guidelines at the time a RICT is implemented.

FPL Response All modifications credited in the transition to NFPA 805 will be implemented prior to implementation of the Risk

-Informed Completion Time (RICT) Program. Prior to implementation of the RICT Program, FPL will confirm that the all hazards CDF and LERF estimates will be less than 1E-04 per year and 1E

-05 per year, respectively. (See response to R A I-MF5372/73-A P L A-1 6, I mp l e m e nt a t i on Items.) Current estimated risk is provided in response to RAI

-MF5372/73-APLA-09.1b, NFPA 805 Modification Implementation.

4. RAI-MF5372/73-APLA-09.R1b (NFPA 805 Modification Implementation)

The response to RAI

-MF5372/73-APLA-09 states that "at the time of implementation of [a] RICT, any modifications that are not installed will not be credited in the estimation of CDF or LERF.

" Using this approach it is possible, depending on the modifications that remain to be installed at the time of a RICT implementation, that the as

-built, as-operated plant may not meet RG 1.174 risk acceptance guidelines.

As discussed in the March 31, 2016, safety evaluation for the amendment to transition the fire protection program to Section 50.48(c) of Title 10 of the Code of Federal Regulations (10 CFR) (ADAMS Accession No. ML15344A346), FPL used the guidance in frequently asked question (FAQ) 08-0046, "Closure of National Fire Protection Association 805 Frequently Asked Question 08-0046 Incipient Fire Detection Systems," to incorporate its very early warning fire detection system (VEWFDS) into the fire PRA. In December of 2016, the NRC staff published NUREG

-2180, "Determining the Effectiveness, Limitations, and Operator Response for Very Early Warning Fire Detection Systems in Nuclear Facilities, (Delores

-VEWFIRE)," which included new guidance on modeling VEWFDS. The methodology in NUREG

-2180 is currently the best available guidance and replaces the guidance in FAQ 08

-0046, which has been retired.

Enclosure L-201 8-006 Page 4 of 2 8 By letter dated November 17, 2016 (ADAMS Accession No. ML16253A111), the NRC staff informed the industry that, "[i]f a licensee is performing a periodic or interim PRA update, performing a fire risk evaluation in support of self

-approval, or submitting a future risk informed license amendment request, the staff's expectation is that they will assess the impact of new operating experience and information [e.g., NUREG

-2180] on their PRA analyses and incorporate the change as appropriate per Regulatory Guide 1.200, Revision 2."

a) If FPL will use the methodology in NUREG

-2180, please provide:

1. An estimate of the current CDF and LERF for all quantified hazards using the NUREG

-2180 methodology in the fire PRA.

2. If the current CDF and LERF estimates do not satisfy the limitations and conditions in Section 4, item 6 of the NEI 06

-09 safety evaluation, provide an explanation of how these guidelines will be met before implementation of the RICT program.

3. If the methodology (e.g., approach, methods, data, and assumptions) has not been incorporated into the fire PRA (i.e., PRA model changes and documentation completed and the upgrade peer reviewed), provide an explanation of when it will be incorporated into the PRA model of record that will be used to estimate RICTs (the response may reference the response to RAI

-MF5372/73-APLA-16 (below) which requests a list of implementation items). b) If FPL proposes not to use the methodology in NUREG

-2180, please provide:

1. Confirmation that the methodology in the retired FAQ 08

-0046 is not the proposed methodology.

2. A description of the proposed methodology (e.g., approach, methods, data, and assumptions) that will be used in the fire PRA. The description should include a detailed comparison of that proposed methodology with the methodology in NUREG

-2180. 3. Justification of the proposed methodology including comparison with available experimental results. Development and use of a proposed alternative may result in additional RAIs and significantly extend the time and resources required to complete the review.

4. An estimate of the current CDF and LERF for each quantified hazard with fire PRA results: (1) without credit for VEWFDS; (2) that would be obtained had the guidance in NUREG

-2180 been applied, and (3) obtained using the proposed methodology.

5. If the current CDF and LERF estimates do not satisfy the limitations and conditions in Section 4, item 6 of the NEI 06

-09 safety evaluation, provide an explanation of how these guidelines will be met before implementation of the RICT program.

6. An evaluation on how using the proposed methodology instead of the NUREG

-2180 methodology could impact the RICT estimates.

7. If the methodology (e.g., approach, methods, data, and assumptions) has not been incorporated into the fire PRA (i.e., PRA model changes and documentation completed and the upgrade peer reviewed), provide an explanation of when it will be incorporated into the Enclosure L-201 8-006 Page 5 of 2 8 PRA model of record that will be used to calculate the RICTs (response may reference the response to RAI

-MF5372/73-APLA-16 which requests a list of implementation items).

FPL Response a) The methodology in NUREG

-2180 will be incorporated into the St. Lucie Fire PRA model. This update will include the incorporation of the new event tree factors for the very early warning fire detection system (VEWFDS) as well as further refinements to the Fire PRA scenarios based on the conservatisms described below.

These updates will be done using existing NRC approved Fire PRA methodologies.

1. The sensitivity evaluation for estimate of CDF and LERF for all quantified hazards with the NUREG-2180 methodology is as follows:

U1 CDF U1 LERF U2 CDF U2 LERF IE 2.64E-06 2.46E-07 1.98E-06 9.58E-08 Flood 1.09E-07 2.21E-08 5.64E-09 4.27E-10 Seismic 3.49E-06 3.49E-07 3.49E-06 3.49E-07 Fire 4.20E-05 7.28E-06 3.45E-05 5.03E-06 Fire Risk Increase due to NUREG-2180 0 0 1.00E-06 2.20E-07 Total Risk 4.82E-05 7.90E-06 4.10E-05 5.70E-06 Note: Seismic risk was evaluated based on plant

-level High Confidence of Low Probability of Failure (HCLPF) using plant

-specific data developed by EPRI. The bounding plant

-level Seismic CDF is calculated as shown and LERF value is conservatively estimated as 10% of CDF value See RAI

-MF5372/73-APLA-17, External Events, response.

2. The current CDF and LERF estimates satisfy the limitations and conditions in Section 4, item 6 of the NEI 06

-09 safety evaluation.

3. The methodology in NUREG

-2180 will be incorporated into the fire PRA model of record used to estimate RICTs as part of the next fire PRA model consistent with the maintenance and upgrade process.

b) N/A 5. RAI-MF5372/73-APLA-11.R1 Instrumentation Models In response to RAI

-MF5372/73-APLA-11, regarding the level of detail in the modeling of TS 3.3.2.1 (Unit 1) and TS 3.3.2 (Unit 2) for Engineered Safety Features Actuation System Instrumentation, the licensee stated that "the PRA model includes the individual instrumentation channels; therefore, inoperability of individual instrument channels can be assessed directly by the PRA for the RICT Program."

Enclosure L-201 8-006 Page 6 of 2 8 a) Please explain how instrumentation is modelled in the PRA. If there are different types of models (e.g., multiple channel basic events versus a single combined basic event) that are used for different instrumentation, please explain all the different models.

b) Clarify how each of the models will be changed to model the impact of an unavailable channel and why this modelling given one unavailable channel is correct or will conservatively bound the RICT calculation.

c) If any instrument channels included by the Risk Managed Technical Specifications (RMTS) program are not modeled at all in the PRA, explain how that instrument channel failure will be included in the RICT estimate.

FPL Response TS LCO/ Condition a) Please explain how instrumentation is modelled in the PRA.

If there are different types of models (e.g., multiple channel basic events versus a single combined basic event) that are used for different instrumentation, please explain all the different models b) Clarify how each of the models will be changed to model the impact of an unavailable channel and why this modelling, given one unavailable channel, is correct or will conservatively bound the RICT calculation.

c) If any instrument channels included by the Risk Managed Technical Specifications (RMTS) program are not modeled at all in the PRA, explain how that instrument channel failure will be included in the RICT estimate.

3.3.2 ESFAS

Instrumentation Functions 1a, Action 12 One of two manual SI channels inoperable This equipment is not modeled in the PRA.

If one channel is inoperable, the remaining operable

channel can still be actuated by the operator to achieve a manual SI. A bounding RICT is calculated by not crediting the required operator action to initiate a SI using the manual SI channel, which is a more limiting situation than one channel out of two being inoperable because if the operator action is not credited for the RICT, then the remaining operable channel is also not being credited.

In the case of one failed manual SI channel the event Operator Fails To Actuate SI Manually, would be set to True.

This is conservative for one channel inoperable as it mathematically will be failure of manual SI (i.e., failure of both channels).

3.3.2 ESFAS

Instrumentation Functions 1d, Action 12 One of SSCs are modeled consistent with the TS scope.

PRA model includes the individual instrumentation channels; therefore, inoperability of individual N/A Enclosure L-201 8-006 Page 7 of 2 8 two automatic SI channels inoperable (Unit 2 Only) instrument channels can be assessed directly by the PRA for the RICT Program

3.3.2 ESFAS

Instrumentation Functions 2a, Action 12 One of two manual CSAS channels inoperable This equipment is not modeled in the PRA If one channel is inoperable, the remaining operable channel can still be actuated by the operator to achieve a CSAS. A bounding RICT is calculated by not crediting the required operator action to initiate a CSAS using the manual CSAS channel, which is a more limiting situation than one channel out of two being inoperable because if the operator action is not credited for the RICT, then the remaining operable channel is also not being credited.

In the case of one failed manual CSAS channel the event Operator Fails To Initiate CS Manually, would be set to True.

This is conservative for one channel inoperable as it mathematically will be failure of manual CS (i.e., failure of both channels).

3.3.2 ESFAS

Instrumentation Functions 1a, Action 12 One of two manual SI channels inoperable This equipment is not modeled in the PRA.

If one channel is inoperable, the remaining operable channel can still be actuated by the operator to achieve a manual SI. A bounding RICT is calculated by not crediting the required operator action to initiate a SI using the manual SI channel, which is a more limiting situation than one channel out of two being inoperable because if the operator action is not credited for the RICT, then the remaining operable channel is also not being credited.

In the case of one failed manual SI channel the event Operator Fails To Actuate SI Manually, would be set to True.

This is conservative for one channel inoperable as it mathematically will be failure of manual SI (i.e., failure of both channels).

3.3.2 ESFAS

Instrumentation Functions 2c, Action 12 One of two automatic CSAS channels inoperable SSCs are modeled consistent with the TS scope.

PRA model includes the individual instrumentation channels; therefore, inoperability of individual instrument channels can be assessed directly by the PRA for the RICT Program N/A 3.3.2 ESFAS Instrumentation Function 2b, Action 18c Two SSCs are modeled consistent with the TS scope.

PRA model includes the individual instrumentation channels; therefore, inoperability of individual N/A Enclosure L-201 8-006 Page 8 of 2 8 of four Containment Pressure High-High CSAS channels inoperable instrument channels can be assessed directly by the PRA for the RICT Progr am 3.3.2 ESFAS Instrumentation Functions 3a, Action 12 One of two manual CIS channels inoperable This equipment is not modeled in the PRA This equipment is not modeled in the PRA. If one channel is inoperable, the remaining operable channel can still be actuated by the operator to achieve a CIS. A bounding RICT is calculated by not crediting the required operator action to initiate a CIS using the manual CIS channel, which is a more limiting situation than one channel out of two being inoperable because if the operator action is not credited for the RICT, then the remaining operable channel is also not being credited.

In the case of one failed manual CIS channel the event Operator Fails To Close Containment Isolation Manually, would be set to True.

T his is conservative for one channel inoperable as it mathematically will be failure of manual CIS (i.e., failure of both channels).

3.3.2 ESFAS

Instrumentation Functions 3e, Action 12 One of two automatic CIS channels inoperable SSCs are modeled consistent with the TS scope.

PRA model includes the individual instrumentation channels. Therefore, inoperability of individual instrument channels can be assessed directly by the PRA for the RICT Program N/A 3.3.2 ESFAS Instrumentation Functions 4a, Action 12 One of two manual MSIS channels inoperable Unit 1 Only) This equipment is not modeled in the PRA

. This equipment is not modeled in the PRA. If one channel is inoperable, the remaining operable channel can still be actuated by the operator to achieve a MSIS.

A bounding RICT is calculated by not crediting the required operator action to initiate a MSIS using the manual MSIS channel, which is a more limiting situation than one channel out of two being inoperable because if the operator action is not credited for the RICT, then the remaining operable channel is also not being In the case of one failed MSIS channel the event Operator Fails to Initiate MSIS would be set to True.

This is conservative for one channel inoperable as it mathematically will be failure of manual MSIS (i.e., failure of both channels).

Enclosure L-201 8-006 Page 9 of 2 8 credited 3.3.2 ESFAS Instrumentation Functions 4d, Action 8 One of two MSIS automatic actuation logic channels inoperable Unit 2 Only) SSCs are modeled consistent with the TS scope.

PRA model includes the individual instrumentation channels. Therefore, inoperability of individual instrument channels can be assessed directly by the PRA for the RICT Program N/A 3.3.2 ESFAS Instrumentation Functions 5a, Action 12 One of two manual RAS channels inoperable This equipment is not modeled in the PRA This equipment is not modeled in the PRA. If one channel is inoperable, the remaining operable channel can still be actuated by the operator to achieve a RAS. A bounding RICT is calculated by not crediting the required operator action to initiate a RAS using the manual RAS channel, which is a more limiting situation than one channel out of two being inoperable because if the operator action is not credited for the RICT, then the remaining operable channel is also not being credited.

In the case of one failed manual RAS channel the event Operator Fails To Initiate Sump Recirc After LOA & Auto Switchover Fails, would be set to True. This is conservative for one channel inoperable as it mathematically will be failure of manual RAS (i.e., failure of both channels).

3.3.2 ESFAS

Instrumentation Functions 5c, Action 12 One of two automatic RAS channels inoperable SSCs are modeled consistent with the TS scope.

PRA model includes the individual instrumentation channels. Therefore, inoperability of individual instrument channels can be assessed directly by the PRA for the RICT Program N/A 3.3.2 ESFAS Instrumentation Function 5b, Action 19a One of four Refueling Water Tank

- Low channels inoperable SSCs are modeled consistent with the TS scope.

PRA model includes the individual instrumentation channels; therefore, inoperability of individual instrument channels can be assessed directly by the PRA for the RICT Program N/A 3.3.2 ESFAS Instrumentation Functions 7a, Action 15 One of four manual This equipment is not modeled in the PRA This equipment is not modeled in the PRA. If one channel is inoperable, the remaining operable channels can still be actuated by the In the case of one failed manual AFAS channel the events for failed operator actions , would be set to True.

Enclosure L-201 8-006 Page 10 of 2 8 AFAS channels inoperable operator to achieve an AFAS. A bounding RICT is calculated by not crediting the required operator action to initiate an AFAS using the manual AFAS channels, which is a more limiting situation than one channel out of four being inoperable because if the operator action is not credited for the RICT, then the remaining operable channel is also not being credited.

This is conservative for one channel inoperable as it mathematically will be failure of manual AFAS (i.e., failure of all channels).

3.3.2 ESFAS

Instrumentation Functions 7b, Action 15 One of four AFAS Automatic Actuation Logic channels inoperable This equipment is modeled in the PRA as independent SSCs. The automatic AFAS channels are not modeled holistically. A surrogate event will be utilized for this TS as a bounding RICT. This equipment is not modeled in the PRA. If one channel is inoperable, the remaining operable channels can still be actuated to achieve an AFAS. A bounding RICT is calculated by not crediting the one AFAS signal, which is a more limiting situation than one channel out of four being inoperable.

In the case of one failed automatic AFAS channel the event Logic Circuit AF1D

[or AF2D] Fails to Generate Signal, would be set to True. This is conservative for one channel inoperable as it mathematically will be failure of one AFAS signal 3.3.2 ESFAS Instrumentation Function 7c, Action 20 One of four SG Level

- Low channels on one SG inoperable This equipment is not explicitly modeled in the PRA. A surrogate event will be utilized for this TS as a bounding RICT.

This equipment is not explicitly modeled in the PRA. If one channel is inoperable, the remaining operable channels can still actuate to provide a 2/4 low Steam Generator Signal. A bounding RICT is calculated by causing the event for miscalibration of all eight Low Steam Generator Level channels, which is a more limiting situation than one channel being inoperable because the RICT assumes failure of this function.

In the case of one failed SG Level

-Low Channels, the event Miscalibration of SG Level Xmtrs would be set to True. This is conservative for one channel inoperable as it fails all SG Level

-Low Channels. 6. R A I-MF5372/73-A P L A-1 2 C l a r i f i c a t i on of Less t h an D es ign B a s is Capa b i l ity Reduc t i on s i n t h e f unc t i o na l capab ili t y be l o w t h e des i g n b a s i s s uc c e ss c r it e r i a an d v u l ne r ab le p l an t c o n f i g u r a t i on s w i t h c u rr e n t l y s ho rt c o m p l e t i o n t i m es, w i l l reduc e t he de fense i n d e p t h and s a f e t y m a r g i n s a v a il ab le be l o w p r e v ious l y ac cep t e d l e v e l s w h ile t he p l an t ope r a t e s i n t hat cond i t i o n du r i n g a n e x t ende d c o m p l e t i o n t i m e. T he NR C s t a ff's s a f e t y e v a l ua t i o n f o r N uc lear Ene r g y I n s t i t u t e (N E I) 0 6-09 , "Ri s k-I n f o rm e d Tec h n i c a l Spec i f i c a t i on s I n i t i a t i ve 4 b - Ri s k- Mana g e d Techn i c a l Enclosure L-201 8-006 Page 11 of 2 8 Sp e c i f i c a t i on s (R M T S) G u i deli ne s ," a s w e l l a s t he c o n s t r a i n t s r e g a r d ing P R A Func t iona li t y , li m i t t he use o f P R A Fu n c t i on a l b y spec i f y i n g t h a t t h e r e m a i n i n g f un c t ion capab ili t y c on t i nue s t o mee t t he des i g n bas i s s u c ces s c r i t e r i a pa r a m e t e rs (e.g. m a i n t a i n i n g the func t iona l capab ili t y t o p e r f o rm a t t h e l e v e l o f on e ope r ab l e t r a i n) un les s a pp r op r i a t e d i spos i t ion an d r e s t r i c t i on s a re p r o v ided. Fo r e x a m p l e , i n t h e s ub m itt a l t he li cense e p ropose s a n L C O cond i t i o n as s oc i a t e d w i t h t h e C ode S a f e t y Va l v e s t ha t appea rs t o ha ve a R I C T c a l c u l a t i on, e ven t ho u g h t he de i g n b a s e s s uc c e ss cr i t e r i a pa r a m e t e r v a l ue s d o n o t s e e m t o be capab l e o f be ing m e t w h ich m a y be a T S Los s o f Fun c t i on. T ab l e E1-1 , "I n S c op e T S/L C O Cond i t i on s t o C o rrespond i n g P R A Fu n c t i on s ," o f t he Dec e m be r 5 , 2014 , LA R i nd i c a t e s t ha t t he des i g n bas i s s ucc e ss cr i t e r i a i s 3 o f 3 v a l v e s w h il e t he P R A s ucc e ss c r i t e r i a i s 2 o f 3 v a l v es. A l s o , t he re may be o t h e r T S l os s o f f unc t i o n c ond i t i on s w h i c h , i f e n t e r i n g a R I C T , a lso a re no t capab l e of meeting t he des i g n bas i s s uc ces s c r i t e r i a. Fo r eac h l os s o f f un c t i o n L C O cond i t i o n t ha t i nc lude s a R I C T , b ut w here t he des i g n bas i s s uc ces s cr i t e r i a pa r a m e t e rs m a y no t b e mode ll e d o r m a y no t b e m e t f o r t he P R A s uc ces s cr i t e r i a: a) Iden t i f y t he des i g n b a s i s pa r a m e t e rs t h a t m a y no t be a v a il ab le (e.g., t h e r e l i e f capab ili ty cred i t e d i n t h e des i g n b a s i s t h a t r e q u i r e s 3 o f 3 v e rs u s 2 o f 3 v a l ves). b) Iden t i f y t he des i g n b a s i s ac c iden t scen a r i o s t ha t r e l y o n t hose p a r a m e t e r s (e.g., what des i g n b a s i s ac c iden t s r e q u i re g r e a t e r t ha n 2 v a l ve p res s u re r e li e f capab ili t i es). c) Fo r eac h o f t h ese ac c i d e n t scen a r i os , e x p l a i n t h e i mpact o f on l y ha v i n g t h e P R A pa r a m e t e r capab ili t i e s o n t h e a ffec t e d des i g n b a s i s s uc ces s ac c iden t s. I nc l ude a j us t i f i c a t i o n o f t he e ff e c t t h i s c ha n ge i n a v a il ab le capab ili t i e s wil l h a ve o n d e fen se-i n-depth an d s a f e t y m a r g i n s. d) I f ne w P R A func t iona l p a r a m e t e rs a re p r op o sed , iden t i f y ho w these p a r a m e t e rs w i l l be i nc l ude d i n t h e t e c hn i c a l spec i f i c a t i on s. e) I f ne w P R A func t iona l p a r a m e t e rs a re no t p r o p o sed , r e m o v e t h e cond i t i o n s f r o m the p r o g r am. FPL Response FPL is not proposing to apply the RICT Program to conditions that involve a loss of function. As discussed in the February 25, 2017 supplement to this license amendment request, FPL modified the RICT Program added to the administrative section of the TS to exclude use of a RICT for any configuration that represents loss of a specified safety function or inoperability of all required trains of a system required to be operable. The RAI responses in section B of this enclosure

, Technical Specifications (STSB) RAI, discuss loss of function and withdraw proposed changes that included use of a RICT for conditions involving a loss of function.

7. R A I-MF5372/73-A P L A-1 3 C o mm o n Cause Fa i l u r e T erms f o r P lanned M a i n tenance W h il e t h e g u idanc e i n N E I 06-0 9 s t a t e s t h at n o C CF ad j u s t m e n t i s r e q u i r e d f o r p lanned m a i n tenanc e , t he NR C a pp r o v a l o f N E I 06-0 9 i s base d o n R G 1.177 , a s i nd i c a t e d i n t he NR C s a f e t y e v a l ua t i o n t o N E I 06-0 9 (A D A M S Acces s i o n N o. ML071200238

). Spec i f i c a ll y , Sec t ion 2.2 o f t he NR C s t a ff's s a f e t y e v a l ua t i o n f o r N E I 0 6-0 9 s t a t e s t h a t, "spec i f i c m e t hod s and g u i de li ne s ac c e p t ab le t o t he NR C Enclosure L-201 8-006 Page 12 of 2 8 s t a f f a re [-] o u t li ne d i n R G 1.17 7 f o r a s ses s i n g r i s k-i n f o rm e d T S c ha n g e s." Fu r t h er, Sec t i o n 3.2 o f t he NR C s t a ff's s a f e t y e v a l ua t i o n s t a t e s t h at c o m p liance w i t h t h e g u i dance o f R G 1.17 4 an d R G 1.177 , "i s ach i e v e d b y e v a l ua t i o n us i n g a c o m p rehe n s i ve r i sk ana l y s i s, w h ich as ses s e s t h e c o n f i g u r a t i on-spec i f i c r i s k b y i nc l ud ing c on t r i bu t i on s f r o m h u m a n e r r o rs an d c o m m o n c a us e f a il u r e s." T h e g u idance i n R G 1.1 7 7 , Se c t i o n 2.3.3.1 , s t a t e s t h a t , "CC F m ode li n g o f c o mponents i s n ot on l y dependen t o n t he n u m be r o f r e m a i n i n g inse r v ice c o mponen t s , b u t i s a lso dependen t on t h e reaso n c o mpone n t s w ere r e m o v e d f r o m s e r v ice (i.e. w he t he r f o r p r e ven t a t i ve o r c o r rec t i ve m a i n tenanc e)." I n r e l a t i o n t o CC F f o r p r e ven t i ve m a i n tenanc e , t h e g u i da nce i n R G 1.17 7 , Append i x A , Sec t i o n A-1.3.1.1 , s t a t e s: I f t h e c o mponen t i s do w n because i t i s b e i n g b r o u g h t do w n f o r m a i n tenan ce, t he CCF c o n t r i b u t i on s i nv o l v i n g t he c o mpone n t shou l d be m od i f i e d t o r e m o ve t he c o mpone n t an d t o o n l y i nc l ude f a il u r e s o f t h e r e m a i n i n g c o mpone n t s (a lso s ee R e g u l a t o ry Pos i t i o n 2.3.1 o f R e g u l a t o ry G u i de 1.17 7). Acc o r d i n g t o R G 1.177 , i f a c o mpone n t f r o m a C CF g r ou p o f t h r ee o r m o re c o mpone n t s i s dec l a r e d inope r ab l e , t h e CCF o f t h e r e m a i n i n g c o mponents s hou l d b e m o d i f i e d t o r e f l e c t the reduce d n u m be r o f a v a i l ab le c o mpone n t s i n o r d e r t o p r ope r l y m ode l t he a s-ope r a t e d p l an t. a) P leas e e x p l a i n h o w CC F a re i nc lude d i n t h e P R A mode l (e.g., w i t h a l l c o m b i na t i on s i n the l o g i c mode l s a s d i f f e ren t bas i c e ven t s o r w i t h iden t i f i c a t i o n o f m u l t i p le bas i c e ven t s i n the c u t s e t s) b) P lease e x p l a i n h o w t h e quan t i f i c a t i o n an d/o r m o d e l s w i l l be chan g e d when , f o r e x a m p le, one t r a i n o f a 3 X 10 0 pe r cen t t r a i n s y s t e m i s r e m ov e d f o r p r e ven t a t i ve m a i n tenance and descr i be ho w t h e t r e atmen t o f CCF e i t h e r m e e t s t h e g u idanc e i n R G 1.1 7 7 o r m e e t s t he i n ten t o f t h i s g u idanc e w he n quan t i f y i ng a R I C T. FPL Response

a. For each grouping of SSCs analyzed in PRA, there is an ALPHA factor basic event assigned to it based on the failure mode being modeled. A group of 3 SSCs would have 2 ALPHA factor basic events; one would represent CCF of any two out of three SSCs and the other would represent CCF of all 3 SSCs, for a particular failure mode. Two module AND

-gates are then added to the logic representing the failure of each SSCs such that:

CCF2_of_3 AND Alpha_Factor_2_of_3 Indep_BE CCF3_of_3 AND Alpha_Factor_3_of_3 Indep_BE Where: CCF2_of_3:

Module AND

-gate added to failure logic of each component in the group. CCF3_of_3:

Module AND

-gate added to failure logic of each component in the group.

Enclosure L-201 8-006 Page 13 of 2 8 Alpha_Factor_2_of_3:

Alpha Factor of CCF failure representing any two SSCs in the group.

Alpha_Factor_3_of_3: Alpha Factor of CCF failure representing all three SSCs.

Indep_BE: the independent basic event representing failure rate of any one SSC in the group for a particular failure mode.

One advantage of using a "module gate" in CAFTA is that when the model is solved, modules can be pruned which effectively turns the logic under the module gate to be replaced by a representative basic event in the cutsets with probability equivalent to the solution of the that logic. Using this technique for CCF, the module gates listed above will be shown in cutsets as representative basic events with probability equivalent to the multiplication of Alpha Factor times the associated independent basic event in cutsets associated with failure for each SSC in the group. In the example listed above, corresponding basic events CCF2_of_3 and/or CCF3_of_3 will be shown in associated cutsets where a particular SSC failure mode is listed.

b. For planned maintenance (PM), in order to obtain expedited calculation in a straightforward manner, the St. Lucie CRMP does not adjust the failure probabilities of CCF basic events (that appear in the final cutsets) to include only the remaining components in the group, as required by RG-1.177. Depending on the component in question and CCF group size, this treatment may underestimate the delta CDF by a value around 1E

-09 per year, which in terns may elongate the RICT time scale by a peripheral value. Delta LERF is estimated to be lower than that of the delta CDF, and thus the impact on RICT calculation is even lower. If CCF basic events for three SSCs (A, B, and C) group to be modified where SSC A is out of service for PM, CCF basic events associated with (A and B group, A and C group, and A, B, C group) would be equated to zero (or set to false), and CCF basic events associated with B and C group would be modified with a slightly higher value involving higher Alpha

-Factor for 2 out of 2 (remaining) components. FPL conclusion is the approximation treatment involving no modification of CCF basic events still meets the intent of RG

-1.177 and RICT evaluation with imperceptible impact. This methodology is consistent with that of Vogtle (MLML14315A051) accepted by the NRC (ML15127A669).

For corrective maintenance (CM), and consistent with RG

-1.177, CCF contribution involving the component would be modified to equate CCF basic events with the respective Alpha

-factors, i.e., setting the independent failure probability equal to 1 to effectively equate CCF basic event probability to the respective Alpha

-factor value. For the example of three SSCs (A, B, and C) group to be modified where SSC A is out of service for CM, CCF basic event probabilities associated with 2 out of 3 groups would be equated with Alpha

-factor of 2 out of 3 groups, and CCF basic event probability associated with 3 out of 3 group would be equated with Alpha

-factor of 3 out of 3 group. Treatment of potential CCF during RICT is explained in response to APLA-14 RAI.

Enclosure L-201 8-006 Page 14 of 2 8 8. R A I-MF5372/73-A P L A-1 4 E v a l ua t i on of C o m m on Cause f o r E m e rgent F a il u r es Acc o r d i n g t o Se c t i o n A-1.3.2.1 o f Append i x A o f R G 1.177 , w hen a c o m p onen t f a il s, t he CCF p robab ili t y f o r t h e r e m a i n i n g redundan t c o mpone n t s s hou l d be i nc r e a s e d t o r e p resen t the cond i t i ona l f a il ure p r ob a bili t y due t o CCF o f t he se c o mpone n t s , i n o r de r t o ac coun t f o r t he pos s i b ili t y t ha t t h e f ir st f a il ure w a s cause d b y a C CF mechan i s m. W h e n a c o mpone n t f a ils, t he c a l c u l a t i o n o f t h e p l an t r i s k , as s u m i n g t h a t t h ere i s n o i nc reas e i n CC F po ten t i a l i n the redundan t c o m po nen t s be f o re an y e x ten t o f cond i t i o n e v a l ua t i o n i s c o m p l e ted , c ou l d lea d to a non-conse r v a t i ve e x tende d c o m p l e t i o n t ime c a l c u l a t i on , a s ill us t r a t e d b y i nc l us i o n o f the g u idance i n Append i x A o f R G 1.177. M uc h o f t he d i sc us s i o n i n Append i x A des c r i be s how c o n f i g u r a t i o n spec i f i c r i s k c a l c u l a t i on s s hou l d b e pe r f o rm e d. I n Se c t i o n 3.2 o f t he N R C s t a ff's s a f e t y e v a l ua t i o n f o r N E I 06-0 9 , t h e s t a f f s t a t e s t h at c o m p liance w i t h t h e g u i dance o f R G 1.17 4 an d R G 1.177 , "i s ach i e v e d b y e v a l ua t i o n us i n g a c o m p rehe n s i ve r i sk ana l y s i s, w h ich as ses s e s t h e c o n f i g u r a t i on-spec i f i c r i s k b y i nc l ud ing c on t r i bu t i on s f r o m h u m a n e r r o rs an d c o m m o n c a us e f a il u r e s." T h e r e q u i r e men t t o c ons i de r add i t i ona l r i s k m i t i gati o n ac t i on s (R M A s) p r i o r t o t he c o m p l e t i on o f t he e x ten t o f caus e e v a l ua t i o n w a s i nc lude d b y t h e NR C s t a f f i n t he s a f e t y e v a l ua t i o n f o r N E I 06-0 9 a s a n add i t i o n a l measu r e t o ac c o u n t f o r t he i nc r e a s e d p o ten t i a l t ha t t h e f ir st f a il ure w a s cause d b y a CCF mechan ism. H o w e v e r , n o e x cep t i o n t o t he R G 1.1 7 7 g u idance was t a k e n i n t h e c a l c u l a t i o n o f t he R I C T w i t h r e g a r d s t o t h e quan t i f i c a t i o n o f t he un reso l ved po ten t i a l f o r CC F b e f o re t he e x ten t o f caus e e v a l ua t i o n i s c o m p l e t e. T he N R C s t a f f i n t e r p r e t s t hat t h e c o m b i ne d g u idance i n R G 1.1 7 7 an d N E I 06-0 9 0-A c ou l d b e m e t wi t h t h e f o ll o wing p roces s. W he n , p r i o r t o e x ceed i n g t h e f r on t s t o p , t h ere i s a h i g h d e g r ee o f c o n f iden ce base d o n the e v idence c o llec t e d t hat t here i s n o c o mm o n c au s e f a il u re mechan i s m t ha t c ou l d a ff e c t the redundan t c o m po nen t s , t he R I C T c a l c u l a t i o n m a y use n o m i na l C o m m o n Caus e f a c tor p robab ili t y. I f a h i g h d e g r ee o f c o n f i dence canno t b e es t ab li s h e d t h a t t he re i s n o c o mm o n caus e f a il u re that c ou l d a f f ect t h e redund a n t c o mponen t s, t h e R I C T s ha l l ac coun t f o r t h e i nc rease d pos s i b ili t y of c o mm o n caus e f a il u r e. Accoun t i n g f o r t h e i nc rea s e d pos s i b ili t y o f c o mm o n caus e f a il u re s ha l l be ac c o m p li s he d b y one o f t he t w o m e t hod s be l o w. I f one o f t h e t w o m e t ho d s be l o w i s no t u sed, the T S f r o n t s t o p sha l l n o t b e e x ceeded. 1. T h e R I C T c a l c u l a t i o n s h a l l be ad j u s t e d t o n u m e r i c a ll y ac coun t f o r t he i n c reased po ss i b ility o f c o m m o n c a us e f a il u r e , i n a c c o rdan ce w i t h R G 1.177 , a s s p e c i f i e d i n Sec t i o n A-1.3.2.1 o f Ap pend i x A o f t h e RG. Sp e c i f i c a ll y , w hen a c o mpon e n t f a ils, t he c o m m o n caus e f a il ure p robab ili t y f o r t h e r e m a i n i n g redunda n t c o m po nen t s s ha l l be i nc rease d t o r e p resen t t h e cond i t iona l f a il ure p robab ili t y due t o c o mmon caus e f a il u re o f t h ese c o mponen t s , i n o r d e r t o a c coun t f o r t h e pos s i b ili t y t h e f i r st f a il ure w a s cause d b y a c o mm o n caus e mechan ism. 2. P r i o r t o e x ceed i n g t h e f r on t s t op , t h e li censee s h a l l i m p l e men t R M A s i n a dd i t i on t o t hose a l r e a d y cred i t e d i n t h e R I C T c a l c u l a t i on , t ha t t a r g e t t h e s uc c e ss o f the redundan t and/o r d i v erse s t r uc t u r e s , s y s t e ms o r c o mponents (SS C) o f t h e f a iled SS C , and , i f p o ss i b l e , r e duce t h e f r e quenc y o f i n i t i a t i n g e ven t s w h ich c a l l upon t h e Enclosure L-201 8-006 Page 15 of 2 8 f unc t i on (s) pe r f o r m e d b y t h e f a il e d SS C. D o c u men t a t i o n o f R M A s s ha l l be a v a i l ab le f o r NR C r e v i ew. a) P lease c o n f ir m an d des c r i be ho w t ha t t rea t men t o f CC F , i n t h e c as e o f a n e m e r g e nt f a il u r e , e i t he r m e e t s t h e g u idance i n R G 1.17 7 o r mee t s t h e i n t e n t o f t hi s gu idance t o g e t h e r w i t h t h e N E I 0 6-0 9 0-A g u idanc e w he n quan t i f y i n g a R I C T. b) P lease p ropose w he re t h e g u idance o n ho w CC F s w i l l be t r e a t e d w i l l be p lace d t o ensu re t ha t t h e g u idanc e i s f o ll o wed , e.g., a s a license cond i t i o n o r i n t he Ad m i n i s t r a t i v e T S t ha t im p l e men t s t h e R I C T p r o g r a m. FPL Response a) St. Lucie will follow the industry guidance on this issue, which states that if the extent of condition evaluation for inoperable Structure, System, or Components (SSCs) is not complete prior to exceeding the Completion Time, the RICT shall account for the increased possibility of CCF by either:

1. Numerically accounting for the increased possibility of CCF in the RICT calculation, or

2. Risk Management Actions (RMAs) not already credited in the RICT calculation shall be implemented that support redundant or diverse SSCs that perform the functions(s) of the operable SSCs, and, if practical, reduce the frequency of initiating events that challenge the functions(s) performed by the inoperable SSCs.

b) Guidance on how CCFs will be treated will be placed in the Administrative TS that implements the RICT program.

9. R A I-MF5372/73-A P L A-1 5 L icense Cond i t i on I n Se c t i o n 4.0 , " L i m i t a t i o n s an d Cond i t i on s" o f t h e NR C s t a ff's s a f e t y e v a l u a t i o n f o r N E I 06-09, t he s t a f f s t a t e s: A s pa r t o f it s r e v i e w an d app r o v a l o f a li cense e's app li c a t i o n r e ques t i n g t o i m p l e ment t h e R M T S , t he NR C s t a f f i n tend s t o impose a li cens e cond i t i o n that wil l e x p li c i t l y add res s t h e sc ope o f t h e P R A an d n on-P R A m e t hod s a p p r o v e d by t he NR C s t a f f f o r us e i n t he p l an t s p e c i f i c R M T S p r o g r a m. I f a li censee w i s he s t o chan g e i t s m e t hod s , an d t h e c ha n ge i s ou t s i d e t he bound s o f t he li cense c ond i t i on , t he licensee w il l nee d NR C app r o v a l , v i a a li cense a men d men t , o f the i m p l e men t a t i o n o f t he n e w m e t ho d i n it s R M T S p r og r a m. P lease p ropose a li cen s e c ond i t i o n li m i t i n g t h e s c ope o f t h e P R A an d n o n-P R A m e t hod s t o what i s app r o v e d b y t he NR C s t a f f f o r us e i n t h e p lant-spec i f i c R M T S p r o g r a m. W o r d i n g c ons i s t e n t with t h e e x a m p l e be l o w w o u l d be ac cep t ab l e. T h e r i s k as ses s men t ap p roach , m e thod s , an d da t a s ha l l be ac c e p t ab l e t o t he NRC , be base d o n t he a s-bu il t , as-op e r a t e d , an d m a i n t a i ne d p l an t; an d r e flect t he op e r a t i n g e x pe r ienc e a t t h e p l an t. Acc e p t ab l e m e t hod s t o as s e ss t h e r isk f r o m e x tend i n g t he c o m p l e t i o n t i m e s m us t be Enclosure L-201 8-006 Page 16 of 2 8 P R A m e thod s a c cep t e d a s part o f t h i s li cense a mend m e n t , o r o t he r m e thod s c u r rentl y app r o v e d b y t he NR C for gen e r i c us e. I f a li cense e w i s he s t o c ha n g e i t s m e thod s an d t h e c ha n g e i s ou t s i de t h e bound s o f t h i s li cense cond i t i on , t he licensee w il l nee d p r i o r N R C app r o v a l , v i a a li cense a mend m e n t. FPL Response FPL proposes the following license condition, which is the same as that approved for Vogtle Units 1 and 2 in License Amendments 188 and 171, respectively, on August 8, 2017 (ML15127A669):

The risk assessment approach and methods, shall be acceptable to the NRC, be based on the as-built, as-operated, and maintained plant, and reflect the operating experience of the plant as specified in RG 1.200. Methods to assess the risk from extending the completion times must be PRA methods accepted as part of this license amendment, or other methods approved by the NRC for generic use.

If the licensee wishes to change its methods, and the change is outside the bounds of this license condition, the licensee will seek prior NRC approval via a license amendment.

10. RAI-MF5372/73-APLA-16 Implementation Items P lease p r o v i de a li st o f a c t i v i t i e s (i.e., i m p l e men t a t i o n i t ems) t h a t a re cred it e d a s p a rt o f the app r o v a l o f t h e r e ques t t o i m p l e m e n t a R I C T p r o g r a m t h a t w il l no t be c o m p l e t e d b e f ore i ss u i n g t he a mend m e nt bu t m u s t be c o m p l e t e p r i o r t o i m p l e men t a t i o n o f t h e R I C T p r o g r a m. FPL Response FPL proposes the table of implementation items and the associated license condition as shown below.

Table of implementation items:

Item Implementation Date

1. Confirm that the all hazards CDF and LERF estimates achieved using NRC accepted methods will be less than 1E

- 04 per year and 1E

-05 per year, respectively.

Prior to implementation of the Risk Informed Completion Time Program License Condition:

FPL will complete the items listed in the table of implementation items in the enclosure to FPL letter L-2018-006 dated February 1 , 2018 prior to implementation of the Risk Informed Completion Time Program.

Enclosure L-201 8-006 Page 17 of 2 8 11. R A I-MF5372/73-A P L A-1 7 Ex t e rnal E v ents N E I 06-0 9 , Se c t i o n 3.3.5 , "E x t e r na l E ven t s C ons i de r a t i on" c l a r i f i e s t h a t e x t e r na l ha z a r ds' i mpac t o n i nc r e men t a l c o n f i g u r a t i o n r i s k s hou l d b e add r e ss e d f o r e ach R I C T c a l c u l a t i on. Enc l os ure 4 o f t he Dec e m be r 5 , 201 4 , LAR , "I n f o rm a t i o n Sup p o r t i n g J u s t i f i c a t i o n o f E x c l ud i n g Sou rc e s o f Ri s k n o t ad d res s e d b y t he P R A Mode l s ," add res s e s e x t e r na l e ven t s. T h e Enc l o s ure s u mm a r i z e s t h e e v a l ua t i o n o f t h e r i s k o f e x t e r na l ha z a r d s t ha t appe a rs t o be c ons i s t e n t w i t h t he A S M E/A N S P R A S tanda r d , i.e., screen i n g a ss oc i a t e d w i t h t h e base li ne r i s k c on t r i bu t i on. The resu l t s o f t h e e v a l ua t i o n s u mm a r i z e d i n LA R T ab le E4-1 , "E v a l ua t i o n o f Ri s k s f r o m E x t e rnal H a z a r d s ," s e e m t o i nd i c a t e , ho w e v e r, t ha t a l l e x t e r na l ha z a r d s w il l be e x c lude d f r o m e v e ry c o n f i g u r a t io n r i s k e v a l ua t i on , e.g." n o un i q u e P R A m ode l f o r s e i s m i c e ven t s i s r e q u i r e d i n o rder t o as s e ss c o n f i g u r a t i o n r i sk f o r t he R I C T P r o g r a m." H o w e v e r, t h e re m a y be s i t ua t i on s w he re t he ha z a rd m a y be im po r t an t i n a c o n f i g u r a t i o n r i s k c a l c u l a t i o n e v e n t ho u g h t h e base li ne r i s k c a n be screene d ou t c o n s i s ten t w i t h t he AS M E/A N S P R A S tanda r d. Fo r e x a m p l e , e x t e rnal f lood s s e e m t o b e e x c l ude d becaus e t h e p l an t d e s i g n c o n f orms t o t he S t andard R e v i e w P l an (S R P) c r i t e r i a. P res u m a b l y , sm a ll e r f l oo d l e v e l s m a y f a i l p l an t e q u i p men t no t r e q u i r e d t o be p r o t e c t e d b y t he S RP c r it e r i a w h ich c ou l d a f f e c t c o n f i g u r a t i o n r i s k , an d s o m e t i m e s t h e f l ood ba rr i e rs t h e ms e l v e s m a y be d e g rade d o r und e r g o i n g m a i n tenanc e w h ich c ou l d a f f e ct c o n f i g u r a t i o n r i s k. S i m il a r l y , e x t r e me w i n d see m s t o b e f u ll y e x c lude d because o f l o w f r e quency o f oc c u rr e nce an d S RP c o n f o r mance , b u t thes e f a c t o rs m a y no t ha v e c ons i de r e d t he p lant c o n f i g u r a t i o n du r i n g a RIC T. P lease c l a r i f y i f a l l e x t e r n a l ha z ard r i s k s a re e x c lude d f r o m t h e R I C T p r o g r a m o r i f t h e p r o g r a m i nc l ude s g u idanc e t o as s u re t ha t t h e as s u m p t i on s suppo r t i n g t he s c reen i n g o f t h e ha z a rds r e m a i n app li c ab l e g i v e n t he p l an t c o n f i g u r a t i o n d u r i n g t h e R I C T. I f a l l ha z a r d s a re f u lly e x c luded , p lease add r e s s t h e i ss u e r e l a t e d t o sc reen i n g base d o n m e e t i n g t h e S RP cr i t e ria (e.g., des i g n f l oo d he i g h t an d m i t i g a t i n g fea t u r e s) o r base d o n l o w no m i na l r i sk v a lues. I f , i ns tead , g u idanc e i s p r o v ided , p lease des c r i b e t h e g u idanc e (e.g., i n c e r t a i n i ns tance s , ha z a rds w h ich w ere i n i t i a l l y screene d ou t f r o m t h e R I C T c a l c u l a t i o n m a y be cons i d e r e d q ua n t i t a t i v e l y i f t he p l an t c o n f i g u r a t i o n c ou l d i mpact t h e R I C T). FPL Response External hazards will not all be excluded from RICT calculation. While some analyzed external hazards will be excluded based on the provided rationale, Internal Fire, Internal Flood, and Seismic risks will be included as part of every configuration risk evaluation, including RICT calculations.

In terms of seismic risk, Florida plants, including St. Lucie, are located in areas with the lowest seismic activities in the country. Per IPEEE, St. Lucie

-specific seismic screening program was approved by the NRC based on walk down of SSCs rather than having a full Seismic Margin Assessment (SMA) calculation. Per response to post

-Fukushima Near Term Task Force (NTTF) recommendation 2.1, St. Lucie re

-evaluated its seismic risk by comparing its updated plant

-specific Ground Motion response Spectrum (GMRS) developed by EPRI against the 1.3 times the site's Safe Shutdown Earthquake (SSE) level to find that the updated GMRS where lower than the site's SSE at a range of 1 Hz to 100Hz, indicating that seismic hazard at St. Lucie is low and bounded by the design basis value of 0.10g PGA. NRC staff confirmed that GMRS developed by the NRC staff are bounded by the St. Lucie's SSE over the same range. Therefore, a seismic risk evaluation, spent fuel Enclosure L-201 8-006 Page 18 of 2 8 pool evaluation, and a high frequency confirmation were not merited for St. Lucie. Notwithstanding, FPL will include the latest bounding plant

-level seismic risk as part of RICT calculations, to ensure seismic risk is confidently being addressed. The latest bounding plant

-level seismic risk was evaluated in response to post-Fukushima NTTF recommendation 2.1, which is based on the High Confidence of Low Probability of Failure (HCLPF) method documented in the NRC GI-199 Safety/Risk assessment with the most recent plant

-specific data developed by EPRI in 2013. Based on that evaluation, it was concluded that mean seismic hazard estimate at St. Lucie is lower when used the recent EPRI data than that of IPEEE (1993).

In terms of High Winds, Hurricane, and Tornado hazards at Florida plants, including St. Lucie, controlled procedures require monitoring and tracking of these events. The most credible events at the site are associated with hurricanes, which are slow moving events. Site's controlled procedures require controlled shutdown to be initiated 30 min following a hurricane warning issuance by National Hurricane Center in Miami, Florida. The procedures also include many details for preparing the site for such events. The configuration risk management procedure includes guidance that prohibits removing the emergency diesel generators or blackout cross tie equipment out of service during the time frame of such events for any elective maintenance, and allowed only for corrective maintenance in a manner that maintains the safe shutdown status. These procedure requirements are not obviated during RICT evaluations.

All other external events hazards that are screened out in accordance with ASME PRA STANDARD as endorsed by RG

-1.200 are unlikely to contribute to the RICT calculation in any significance. The screening criteria upon which these hazards are screened would be examined for applicability on case

-by-case basis for a RICT calculation in which a particular configuration is viewed to be impacted. 12. RAI-MF5372/73-APLA-18 Dual Unit Impacts The proposed changes to the TSs sometimes differ between Unit 1 and Unit 2 (e.g., 3.6.1.7 Enclosure 1, page 11 of 23), and sometimes do not. The RICT estimates also appear to sometimes differ between the units (e.g., 3.6.2.1.a), and sometimes do not.

a) Clarify whether there are two independent baseline PRAs and, if not, how are the unit specific risk estimates developed?

b) Clarify whether two independent CRMP models will be developed and used in parallel and, if not, how will unit specific RICTs be estimated?

c) Explain how the unit

-specific RICT calculations will be appropriately estimated given any differences between the units, interactions between the units caused by the shared equipment, and the different out of service SSCs in each unit.

FPL Response St. Lucie units have limited shared systems and components and thus each unit has its own independent PRA model.

Enclosure L-201 8-006 Page 19 of 2 8 a) Each St. Lucie unit has an independent CRMP model. Shared systems and components are included in each model (e.g., Emergency Diesel Generators supporting success criteria of each unit, and instrument air systems supporting operation of both units).

b) There will be two independent CRMP models to be used for RICT calculations at St. Lucie.

c) As indicated in a) and b), each CRMP model for each unit includes shared components and thus can be evaluated independently from the other unit's CRMP.

B. Technical Specifications (STSB) RAI In the letter dated February 25, 2017, FPL stated that Attachments 3 and 4 to the letter provide a complete markup of the TS for this LAR, and supersede the TS markups provided previously. The letter also states FPL's intended approach in this supplement is to remove loss of function provisions.

The categories of items required to be in the TSs are provided in Title 10 of the Code of Federal Regulations (10 CFR) Section 50.36(c). As required by 10 CFR 50.36(c)(2)(i), the TSs will include limiting conditions for operation (LCOs), which are the lowest functional capability or performance levels of equipment required for safe operation of the facility. Per 10 CFR 50.36(c)(2)(i), when an LCO of a nuclear reactor is not met, the licensee shall shut down the reactor or follow any remedial action permitted by the TSs until the condition can be met.

Within the context of the RICT program, a TS Loss of Function (TS LOF) is considered to exist when there is insufficient OPERABLE equipment to fulfill a safety function. Additional administrative controls are needed to support the application of a RICT to TS LOF conditions due to safety margin and defense

-in-depth considerations.

The staff requests the following information to support a determination that the proposed remedial actions and time frames for completion are appropriate.

1. RAI-MF5372/MF5373

-STSB-01: Unit 1 TS LCO 3.4.3 and Unit 2 TS LCO 3.4.2.2 require that all pressurizer code safety valves shall be OPERABLE with specified lift settings. ACTION 'a' is applicable when one pressurizer code safety valve is inoperable, and requires, in part, restoring the inoperable valve to Operable status within 15 minutes. The LAR proposes to apply a RICT to this ACTION.

The TS Bases state that during operation, all pressurizer Code safety valves must be OPERABLE to prevent the Reactor Coolant System from being pressurized above its Safety Limit. Based on this statement, it appears that the safety function could not be accomplished if one Code safety valve is inoperable.

If this condition does not represent a loss of function, please provide technical justification supporting that conclusion. If this condition does represent a loss of function, please provide additional justification for its inclusion in the RICT program, including appropriate administrative controls and explain how safety margin and defense

-in-depth considerations are maintained.

Enclosure L-201 8-006 Page 20 of 2 8 If this condition does not represent a loss of function, please provide technical justification supporting that conclusion. If this condition does represent a loss of function, please provide additional justification for its inclusion in the RICT program, including appropriate administrative controls and explain how safety margin and defense

-in-depth considerations are maintained.

FPL Response FPL is withdrawing the proposed changes to TS 3.4.3 and 3.4.2.2 that added a risk

-informed completion time for an inoperable code safety valve. 2. R A I-MF5372/M F5 3 73-ST SB-02: U n i t 1 T S L C O 3.4.12 a n d U n i t 2 T S 3.4.4 r e q u i r e t h a t each P o wer O p e r a ted R e lief V a l v e (P O RV) Bl o c k V a l v e sha ll be OPERAB L E. AC T IO N 'a' app lies w h e n one o r m o re b lock v a l ves a r e i nope r a b le, and r e q u i res r e s t o r ati on o f t he b l o c k v a l v e (s) t o OPERABLE s t a t us w i t h i n one hour or c lose t he b l o c k v a l v e (s) and r e m o v e po wer f r o m t he b l o c k v a l v e (s). U n i t 1 UFSA R Sec t i on 5.5.3.2 desc r ibes t he P O R V s as ha l f-capac i t y v a l v e s w i t h a m o tor ac t ua ted i so l a t i on v a l v e upstr e a m o f e ach o f t he P O RV s t o pe r m it i so l a t i ng t he (P O RV) v a l v e f o r m a i n tenance or i n case o f v a l v e f a il u re. W i t h b o t h b l o c k v a l ves c losed and d e-ene r g i zed, ope r a t i on o f t he P O RV s cou l d be de l a yed un t i l po wer cou l d be res t o red t o t he b lock v a l ves. Please p r o v i de a des c r i p t i on o f t he a c t i ons and gene ral t i m e fr a mes t h at w ou l d be r e q u i red t o r e-en e r g i z e t he b l o c k v a l ves so that t he P O RV s cou l d be opened. Pl e a se p r o v i de a s u m m a r y o f t he U F SA R Chap ter 15 ana l yses i n w h ich ope r a t i on o f t he P O RV s i s c red i t e d; and e x p l a i n w h y de l a y s i n P O RV ope r a t i on a r e cons i s t e n t w i t h t he ana l yses p resen t e d. FPL Response For St. Lucie Units 1 and 2, the PORVs perform the safety function of providing low temperature overpressure protection for the reactor coolant system. Unit 1 LCO 3.4.13, "Power Operated Relief Valves," and Unit 2 LCO 3.4.9.3, "Overpressure Protection Systems," require operable PORVs in Mode 4 and below to perform this function. However, in Modes 1 through 3, the TS only require operability of the PORV block valves.

The PORVs are not credited with performing any accident mitigation function, and they are not relied upon to cool down the plant.

Therefore, any delay in operation of the PORVs in Modes 1 through 3 has no affect on the U F SA R Chap ter 15 ana l yses. 3. R A I-MF5372/M F5 3 73-ST SB-03: For U n i t s 1 and 2, T S L C O 3.5.1 r e q u i r e s that ea c h Reac t o r C oo lant S y s tem s a f ety i n jec t i on t a n k sha ll be OPERAB L E. AC T I O N 'b' app lies w i t h one s a f e t y i n j e c t i on t a n k i nope r ab le, e xcept a s a resu l t of pa r a m e ter li m i t s spec i f i e d i n AC T I O N 'a', n o t be i n g w i t h i n li m i t s. T he L A R p roposes to app l y a R I C T t o t h i s AC T IO N.

Enclosure L-201 8-006 Page 21 of 2 8 U n i t 1 U F SA R Sec t i on 6.2.1.3.2, "C o n t a i n ment V essel T rans ient A na l y s i s ," and U n i t 2 UFSA R Sec t i on 6.2.1.1.3, "Des i g n E v a l ua t i on - C on t a i n ment P r e s su r e - Te m pe r a t u r e A na l y s i s ," s t a t e that t he L O CA acc ident ana l yses a r e based upon t he f o ll owing add i t ional o v e r a ll assu m p t i on s: For t he d isch a r g e l e g b r eak, t he c on t e n t s o f t h ree s a f e t y i n j e c t i on t a n k s (SI T s) d ischa r ge i n t o t he r e a c t o r vessel when reac t o r c o o lant s y s tem p r e ssu r e d rops be l o w t a n k p ress u r e. T h i s ass u mes t he e n t i r e co n ten t s o f t he s a f e t y i n j e c t i on t a n k i n t he r u p t u red leg d o e s not reach t he c o r e. For t he h o t and su c t i on leg cases t he co n ten t s o f f o u r SI Ts i s cons i de red. It i s not c lear t o t he s t a ff how t he assu m p t i ons i n t he acc ident ana l y s i s w o u l d be sa t i s f ied for a L O C A i n w h ich t he con ten t s o f one acc u m u l a tor i s lost t h r o u g h t he b reak, and a second acc u m u l a t o r i s i nope r ab l e at t he t i m e o f t h e e ven t. I f t h i s cond i t i on does not rep rese n t a loss o f f un c t ion, p lease p r o v i de techn ical j us t i f i c a t i on supp o rt i n g t h at conc l us i on. I f t h i s co n d i t i on does rep rese n t a loss o f f unc t ion, p lease p r o v i de add i t ional j us t i f i c a t i on for i t s i nc l us i on i n t he R I C T p r o g r a m , i nc l ud i ng app r o p r i a t e a d m i n i str a t i v e contr o l s and e x p l a i n how sa f e t y m a r g i n and d e fense-i n-de p t h cons i de r a t i ons a r e m a i n t a ined. FPL Response FPL is withdrawing the proposed changes to TS 3.5.1, Action b that added a risk

-informed completion time for an inoperable accumulator.

4. R A I-MF5372/M F5 3 73-ST SB-04: For U n i t s 1 and 2, T S L C O 3.6.2.1 r e q u i res t h at t w o con t a i n ment sp r ay t r a i ns and t w o con t a i n m e n t coo li n g tr a i n s be op e r ab le. A C T I O N 'e' app lies when t w o con t a i n ment coo li ng tr a i ns a r e i nop e r ab le, and r e q u i r e s , i n p a r t , t h a t one coo li ng t r a i n b e r e s t o red t o ope r ab l e s t a t us w i t h i n 24 hou r s. T he L A R p r opos e s t o i n c l ude t h i s A C T I O N i n t he scope o f t he R I C T p r o g r a m. U n i t 1 U F SA R Sec t i on 6.2.1.3.2, "C o n t a i n ment V essel T rans ient A na l y s i s ," and U n i t 2 U F SA R Sec t i on 6.2.1.1.3, "Des i g n E v a l ua t i on - C on t a i n ment P r e s su r e - Te m pe r a t u r e A na l y s i s ," p r o v i de a su m m a r y o f t he co n t a i n m e nt peak p r e s su r e and t e m p e r a t u re ana l y s is. For t he L O CA , t he li s t i ng o f input ass u m p t i ons i nc ludes t he f o l l owi n g: T he ana l yses a r e b ased on t he loss o f o ff s i t e po wer i n w h ich a co i nc ident loss o f d iesel gen e r a t o r i s a ss u med. T h i s resu l t s i n t he loss o f one coo li ng t r a i n w h ich d isab les t w o f an coo l e r s and one co n t a i n m e n t s p r a y. T h i s lea ves one con t a i n m e n t s p r ay pu m p and one t r a i n o f f a n coo l e r s (i.e. t w o un i t s) a v a il ab l e for ope r a t i on.

Enclosure L-201 8-006 Page 22 of 2 8 It i s not c lear t o t he s t a ff how t he assu m p t i ons i n t he acc ident ana l y s i s w o u l d be sa t i s f ied i f t w o con t a i n ment coo li ng t r a i ns a r e i nope r ab le. I f t h i s cond i t i on does not rep rese n t a loss o f f un c t ion, p lease p r o v i de techn ical j us t i f i c a t i on supp o rt i n g t h at conc l us i o n. I f t h i s co n d i t i on does rep rese n t a loss o f f unc t ion, p lease p r o v i de add i t ional j us t i f i c a t i on for i t s i nc l us i on i n t he R I C T p r o g r a m , i nc l ud i ng app r o p r i a t e a d m i n i str a t i v e contr o l s and e x p l a i n how sa f e t y m a r g i n and d e fense-i n-de p t h cons i de r a t i ons a r e m a i n t a ined. FPL Response The condition of two inoperable containment cooling trains does not represent a loss of function. For U n i t s 1 and 2, Action e in T S 3.6.2.1 app lies when t w o con t a i n ment coo li ng tr a i ns a r e i nop e r ab l e and provides 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> to restore one cooling train to operable status before a plant shutdown is required. Action e is consistent with the required action and 72-hour completion time in TS 3.6.6A in the standard TS (NUREG

-1432) for the condition that two containment cooling trains are inoperable. If two inoperable containment cooling units represented a loss of function, a 72-hour completion time would not be appropriate because the TS typically require prompt action to initiate a plant shutdown for a loss of function. In addition, the Bases for TS 3.6.2.1 discuss that the 72

-hour completion time for Action e takes into account the redundant heat removal capability and the iodine removal capability of the remaining operable systems

.

The UFSAR for Unit 1 discusses that both containment spray subsystems provide at least minimum heat removal capability necessary to limit and reduce the post

-accident containment pressure and temperature

. In addition, analyses for Unit 2 show that operation of two containment spray trains and no fan coolers will maintain containment pressure and temperature within limits.

Plant operation in accordance with Action e requires that both containment spray trains are operable. Therefore, inoperability of two containment cooling trains does not represent a loss of function because two operable trains of containment spray must be operable at the same time to provide heat removal and iodine removal capability. On the other hand, as discussed in the Bases for TS 3.6.2.1, any combination of three or more containment cooling and containment spray trains inoperable is a condition outside the accident analysis, i.e., a loss of function, and requires a prompt plant shutdown in accordance with TS 3.0.3.

5. RAI-MF5372/MF5373

-STSB-05: Unit 1 TS LCO 3.6.3.1 and Unit 2 TS LCO 3.6.3 require that the containment isolation valves be operable. The Actions are applicable with one or more of the isolation valve(s) inoperable and require, in part, restoration of the valve(s) to operable status or isolation of each affected penetration within 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br />.

The LAR proposes to include these Actions in the scope of the RICT program.

It is not clear to the staff how the assumptions regarding containment isolation would be satisfied if more than one valve in a given penetration is inoperable.

Enclosure L-201 8-006 Page 23 of 2 8 If this condition does not represent a loss of function, please provide technical justification supporting that conclusion. If this condition does represent a loss of function, please provide additional justification for its inclusion in the RICT program, including appropriate administrative controls and explain how safety margin and defense

-in-depth considerations are maintained.

FPL Response The condition involving two inoperable containment isolation valves in the same penetration represents a loss of function. However, FPL is proposing to apply a RICT to the containment isolation valves only for conditions that do not involve a loss of safety function as explained below for each unit.

Unit 1 The Action in TS 3.6.3.1 addresses the condition in which one or more isolation valves is inoperable and provides four hours to restore valve operability or to isolate the affected penetration. However, the situation that both required containment isolation valves in the same penetration are inoperable (with the penetration not isolated by a manual valve, blind flange, or deactivated automatic valve secured in its closed position) results in a failure to maintain containment vessel integrity.

Without containment vessel integrity, the Action in TS 3.6.1.1, Containment Vessel Integrity," which provides one hour to restore containment vessel integrity, is applicable. Consequently, the RICT program would not be applicable to the condition involving a loss of function with both isolation valves in the same penetration inoperable. The RICT program would be applied to containment isolation valves in the Actions of TS 3.6.2.1 for conditions involving only one inoperable isolation valve in a penetration, a condition that does not represent a loss of function.

Unit 2 The Action in TS 3.6.3 addresses the condition in which one or more isolation valves is inoperable and provides four hours to restore valve operability or to isolate the affected penetration.

However, different from the Unit 1 TS, the Unit 2 Action includes an additional requirement to maintain at least one isolation valve operable in each affected penetration that is open when a containment isolation valve is inoperable.

Therefore, the Action in TS 3.6.3 addresses only one inoperable isolation valve in an open penetration while requiring operability of the redundant isolation valve in the penetration.

The condition that two isolation valves in the same penetration are inoperable result s in a failure to maintain containment integrity

. The Action in TS 3.6.1.1, Containment Integrity," which provides one hour to restore containment vessel integrity, is applicable. Consequently, the RICT program would not be applicable to the condition involving a loss of function with both isolation valves in the same penetration inoperable. The RICT program would be applied to containment isolation valves in the Actions of TS 3.6.3 for conditions involving only one inoperable isolation valve in a penetration, a condition that does not represent a loss of function

Enclosure L-201 8-006 Page 24 of 2 8 6. RAI-MF5372/MF5373

-STSB-06: For Unit 2, TS LCO 3.6.1.7 requires that each containment purge supply and exhaust valve be OPERABLE with each 48

-inch containment purge supply and exhaust isolation valve sealed closed and the 8-inch containment purge supply and exhaust isolation valves be open for purging and/or venting as required for safety related purposes such as those listed in the LCO.

ACTION 'a' applies with a 48

-inch containment purge supply and/or exhaust isolation valve(s) open for reasons other than maintaining containment pressure or reducing containment atmosphere airborne radioactivity and/or improving air quality. The ACTION requires closing the valve or isolating the penetration(s) within 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br />. The proposed change is to allow the calculation of a RICT for this configuration, which would allow postponement of isolating the penetration for up to 30 days.

ACTION 'b' applies with an 8

-inch containment purge supply and/or exhaust isolation valve(s) open for reasons other than maintaining containment pressure or reducing containment atmosphere airborne radioactivity and/or improving air quality. The ACTION requires closing the valve or isolating the penetration(s) within 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br />. The proposed change is to allow the calculation of a RICT for this configuration, which would allow postponement of isolating the penetration for up to 30 days.

ACTION 'c' applies with containment purge supply and/or exhaust isolation valve(s) having a measured leakage rate exceeding the limits specified in the Surveillance Requirements. The ACTION requires, in part, restoring the valve to operable status or isolating the penetrations such that the measured leakage rate does not exceed the limits within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />. The proposed change is to allow the calculation of a RICT for this configuration, which would allow postponement of restoring the valve to operable status or isolating the penetration for up to 30 days.

The St. Lucie Unit 2 UFSAR Section 15.6.5.5.2, "Compliance with RG 1.183 Regulatory Positions," Compliance with Regulatory Position 3.8 states:

100% of the radionuclide inventory of the RCS is released instantaneously at the beginning of the event. The containment purge flow is 2500 cfm through the eight

-inch line and is assumed to be isolated after 30 seconds. No filters are credited.

Please explain how the specified safety function of the containment purge portion of the containment ventilation system would be accomplished during application of a RICT to these ACTIONS. Please explain how the proposed changes would ensure the assumptions regarding isolation of the containment purge system in the accident analysis are satisfied.

FPL Response FPL is withdrawing the proposed changes that add a RICT to the Actions in TS 3.6.1.7.

Enclosure L-201 8-006 Page 25 of 2 8 7. RAI-MF5372/MF5373

-STSB-07: For U n i t s 1 and 2, T S L C O 3.7.1.5 r e q u i res t h a t each m a i n s t e a m li ne i so l a t i on v a l v e (M S I V) be O pe r ab l e. T h e AC T IO N f o r M ode 1 r e q u i r e s , i n pa r t , t h a t w i t h one M S I V i nope r ab le, P o wer O p e r a t i on m ay co n t i nue p r o v i ded t he i nope r ab l e v a l v e i s r e s t o red t o O pe r ab l e s t a t us o r c losed w i t h i n 4 hou r s. T he p roposed cha n g e i s t o a ll ow t he ca lcu l a t i on o f a R I C T for t h i s co n f i g u r a t i on, w h ich w o u l d a ll o w p o s t pone m e nt o f res t o r i ng t he v a l v e t o ope r ab l e s t a t us for up t o 30 da y s. T he T S Bases s t a t e t h at t he op e r abili t y of t he M S I V s ensu res t h at no m o r e than one s team gene r a tor w il l b l o w d o w n i n t he e vent o f a s team li ne r u p t u r e. T h i s res t r i c t i on is r e q u i red t o 1) m i n i m i z e t he pos i t i v e reac t i v i t y e f f e c t s o f t he Reac t o r C oo l a nt S y s tem coo l do w n assoc i a ted w i t h t he b l o w d o w n, and 2) li m it t he p ress u r e r i se w i t h in con t a i n m e n t i n t he e vent t he s t e a m li ne r up t u r e occu r s w i t h i n con t a i n men t. It i s not c lear t o t he s t a ff how t he assu m p t i ons i n t he acc ident ana l y s i s w o u l d be sa t i s f ied when one M S I V i s i nope r ab le. I f t h i s cond i t i on does not rep rese n t a loss o f f un c t ion, p lease p r o v i de techn ical j us t i f i c a t i on supp o rt i n g t h at conc l us i on. I f t h i s co n d i t i on does rep rese n t a loss o f f unc t ion, p lease p r o v i de add i t ional j us t i f i c a t i on for i t s i nc l us i on i n t he R I C T p r o g r a m , i nc l ud i ng app r o p r i a t e a d m i n i str a t i v e contr o l s and e x p l a i n how sa f e t y m a r g i n and d e fense-i n-de p t h cons i de r a t i ons a r e m a i n t a ined. FPL Response The main steam system is designed to prevent blowdown of both steam generators in the event of a steam line break by automatically closing the MSIVs. The failure of one MSIV to close during a steam line break does not result in an uncontrolled blowdown of more than one steam generator.

In the event that one MSIV is inoperable, the remaining operable MSIV remains available to close so t h at no m o r e than one s team gene r a tor w il l b l o w d o w n i n t he e vent o f a s team li ne r u p t u re. For a steam line break downstream of the MSIVs, closure of the operable MSIV will prevent blowdown of more than one steam generators. If a break occurs upstream of the MSIV, blowdown of the other steam generator by backflow is prevented by closure of either the MSIV in the broken steam line or closure of the MSIV in the intact steam line.

Additionally, in the case of a steam line break upstream of an MSIV on Unit 1, blowdown of the other steam generator by backflow to the break will be prevented by the check valve in the broken steam line.

With one MSIV inoperable, the remaining operable MSIV will close on an actuation signal to prevent blowdown of both steam generators in the event of a steam line break accident.

Therefore, a loss of function does not result from inoperability of one MSIV.

Enclosure L-201 8-006 Page 26 of 2 8 8. R A I-MF5372/M F5 3 73-ST SB-08: For U n i t s 1 and 2, T S L C O 3.7.1.5 r e q u i res t h a t each m a i n s t e a m li ne i so l a t i on v a l v e (M S I V) be O pe r ab le. T he e x i s t i ng A C T I O N for M ode 1 s t a tes: W i t h one m a i n s t e a m li n e i so l a t i on v a l v e i nope r a b le, P O W E R OPERA T I O N my con t i nue p r o v ided t he i n ope r ab l e v a l v e i s e i ther res t o red t o OPERABLE s t a t us or c losed w i t h i n 4 hou rs; o t he r w i se be i n HO T S T A NDB Y wi t h t he ne xt 6 h o u r s. T he e x i s t i ng A C T I O N for Modes 2 and 3 s t a t e s: W i t h one or bo t h m a i n s team i so l a t i on v a l v e (s) i nope r ab le, su b s e quent o p e r a t i on i n M O DE S 2 or 3 m ay p roceed p r o v ided t he i so l ati on v a l v e (s) i s (a r e) m a i n t a ined c losed. O t he r w ise, be i n at least H O T S TANDB Y w i t h i n t he ne x t 6 hou r s a nd i n C OLD SHU T D O W N w i t h i n t he f o ll o w i ng 24 hou r s. T he p roposed ACTI O N f or M ode 1 w o ul d s t a t e: W i t h one m a i n s t e a m li n e i so l a t i on v a l v e i nope r a b le, P O W E R OPERA T I O N my con t i nue p r o v ided t he i n ope r ab l e v a l v e i s e i ther res t o red t o OPERABLE s t a t us or c losed w i t h i n 4 hou r s o r i n acco r da nce w i t h t he RIC T P r o g r a m; o t h e r w i se be i n M O D E 2 wi t h t he ne x t 6 hou r s. T he p roposed ACTI O N f or Modes 2 and 3 w ou l d s t a t e: W i t h one or bo t h m a i n s team i so l a t i on v a l v e (s) i nope r ab le, su b s e quent o p e r a t i on i n M O DE S 2 or 3 m ay co n t i nue p r o v ided: 1. T he i nope r ab l e m a i n s t e am i so l a t i on v a l ves a r e c losed w i t h i n 8 hou rs, and 2. T he i nope r ab l e m a i n s t e am i so l a t i on v a l ves a r e v e r i f ied c losed o nce p e r 7 da y s. Ot h e r w ise, be i n a t lea st H O T S TANDB Y w i t h i n t he ne x t 6 ho u r s and i n H O T SHU T D O W N w i t h i n t he f o ll o w i ng 24 hou r s. T he p roposed cha n ges w o u l d a li g n t he St. L u c i e L C O A c t i ons w i t h t he co r respond ing A c t i ons i n t he S tanda r d Techn ical Spec i f i c a t i ons. I n t he S tanda r d Techn ical Spec i f i c a t ions, t he t i m e a ll o wed t o c lose an i nope r ab l e m a i n s team i so l a t i o n v a l v e w h i l e i n M O DE S 2 or 3 i s a b r a c k e ted v a lue. V a lues e n c losed i n b r a c ke t s a r e u sed t o s i g n i f y a license e-spec i f i c v a lue. Please p r o v i de t he tech n ical j us t i f i c a t i on for t he s e lec t i on o f t he 8 hour9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> v a l ue for S t. Luc i e.

Enclosure L-201 8-006 Page 27 of 2 8 FPL Response The MSIVs function to ensu r e t h at no m o r e than one s team gene r a tor w il l b l o w d o w n i n t he e vent o f a s team li ne r u p t u re and to provide a containment isolation boundary. With one or both MSIVs inoperable in Mode 2 or 3, eight hours is a reasonable time to close the inoperable MSIV(s) considering the probability of an accident that would require closure of the MSIVs

. The likelihood of occurrence of a steam line rupture, a postulated accident that is not expected to occur during the life of the plants, during the eight

-hour period is low.

With regard to the containment isolation function, the St. Lucie TS provide a four

- hour completion time for inoperable containment isolation valves. However , the proposed completion time is greater than four hours because the MSIVs isolate a closed system that penetrates containment. The closed system provides a second barrier for containment isolation.

In addition, providing a longer completion time for penetrations consisting of one isolation valve and a closed system is consistent with NUREG

-1432, "Standard Technical Specifications

- Combustion Engineering Plants," where TS 3.6.3 provides a 72-hour completion time for an inoperable valve in a penetration consisting of one isolation valve and a closed system.

9. R A I-MF5372/M F5 3 73-ST SB-09: T S 6.8.4 s t a t e s , "T he f o ll owi ng p r o g r a m sha ll be es t ab lished, i m p l e men t e d, and m a i n t a ined." P roposed T S 6.8.4.q desc r ibes t he R I C T p r o g r a m. El e ment c r e q u i res that when a R I C T i s be i n g u sed, any p lant co n f i g u r a t i on cha n ge wi t h i n t he scope o f t he R I C T p r o g r am must be c o ns i de red f o r t he e ffect on t he R I C T. T he t e rm i no l o g y "w i t h i n t he scope o f t he R I C T p r og r a m" cou l d be m i s i n t e r p r e ted t o on l y i nc lude e q u i p m e nt g o v e rned by T S L C O's t h a t a r e i nc luded w i t h i n t he R I C T p r o g r a m. In acco rdance w i t h NE I 0 6-09, any p lant co n f i g u r a t i on cha n ge, as d e f ined i n NE I 06-09 0-A , m u s t be cons i de red for i t s e f fect on t he R I C T. Please p r opose r e v ised l an g u a g e t o r e f l e ct t he b roader scope o f cha n ges that cou l d a ff e ct t he R I C T. T he p roposed T S 6.8.4.q does n o t ad d ress t he t r e atm e n t of co m m on cau s e when an e m e r g e nt f a il u r e occ u r s. Please p ropose add i t i o n al ad m i n i str a t i v e contr o l s t o add ress t he tr e atm e n t o f co m m on cause. FPL Response FPL proposes to revise element c in the RICT by replacing "within the scope of the RICT Program" with "within the scope of the Configuration Risk Management Program." The proposed change reflects the broader scope of changes that could affect the RICT and is consistent with NEI 06

-09. FP L p r op o ses t o add pa r ag raph e below t o t he R i s k I n f o rmed C o mple tion T i m e Pr og r am in S peci fica t i o n 6.8.4 in t h e ad mini str a t ive sec tion of t he T S. e) I f t he ex tent of condi tion evalua tion f or inope rable str uc t u r e s , s y s t e m s , or co mponen t s (SS C s) is not co mple t e p rior t o excee di ng t he C o mple tion T i me, the R I C T shall account f or t he inc rea sed po ssibili t y of c o mmo n cau s e failu r e (C C F) b y eith e r:

Enclosure L-201 8-006 Page 28 of 2 8 1. N u m e rically accoun ting f or t he inc rea sed po ssibili t y of CC F in t he R I C T calcu l a t i on , or 2. R i s k M a nage m e n t A c t i on s (R M A s) no t al rea d y c red i ted in th e R I C T calcu l a tion shall be i m pl e men ted that s uppo r t red undant or dive r s e SS C s that pe rf o r m t he f unc tion (s) of t he inope rable S S C s , and, if p r ac ticable, red uce t he frequency of ini t ia ting even t s that challe n ge t he f unc tion (s) pe rf o rmed by t he inope rable S S C s.

Attachment 1 L-201 8-006 Page 1 of 3 ATTACHMENT 1 St. Lucie Unit 1 Markups of the Operating License

Attachment 1 L-201 8-006 Page 2 of 3 INSERT J J. FPL is authorized to implement the Risk Informed Completion Time Program as approved in License Amendment No. XXX subject to the following conditions:

1. FPL will complete the items listed in the table of implementation items in the enclosure to FPL letter L

-2018-006 dated February 1 , 2018 prior to implementation of the Risk Informed Completion Time Program.

2. The risk assessment approach and methods, shall be acceptable to the NRC, be based on the as-built, as-operated, and maintained plant, and reflect the operating experience of the plant as specified in RG 1.200. Methods to assess the risk from extending the completion times must be PRA methods accepted as part of this license amendment, or other methods approved by the NRC for generic use. If the licensee wishes to change its methods, and the change is outside the bounds of this license condition, the licensee will seek prior NRC approval via a license amendment.

L-201 8-006 Page 1 of 3 ATTACHMENT 2 St. Lucie Unit 2 Markup of the Operating License

L-201 8-006 Page 2 of 3 INSERT O O. FPL is authorized to implement the Risk Informed Completion Time Program as approved in License Amendment No. XXX subject to the following conditions:

1. FPL will complete the items listed in the table of implementation items in the enclosure to FPL letter L

-2018-006 dated February 1 , 2018 prior to implementation of the Risk Informed Completion Time Program.

2. The risk assessment approach and methods, shall be acceptable to the NRC, be based on the as-built, as-operated, and maintained plant, and reflect the operating experience of the plant as specified in RG 1.200. Methods to assess the risk from extending the completion times must be PRA methods accepted as part of this license amendment, or other methods approved by the NRC for generic use. If the licensee wishes to change its methods, and the change is outside the bounds of this license condition, the licensee will seek prior NRC approval via a license amendment.

Attachment 3 L-201 8-006 Page 1 of 3 ATTACHMENT 3 St. Lucie Unit 1 Markup of the Technical Specification s

Attachment 3 L-201 8-006 Page 2 of 3 INSERT 3 r. Risk Informed Completion Time Program This program provides controls to calculate a Risk Informed Completion Time (RICT) and must be implemented in accordance with NEI 06

-09, "Risk-Informed Technical Specifications Initiative 4b: Risk

-Managed Technical Specifications (RMTS) Guidelines," Revision 0

-A, November 2006. The program shall include the following:

a. The RICT may not exceed 30 days;

b. A RICT may only be utilized in MODES 1 and 2;

c. When a RICT is being used, any plant configuration change within the scope of the Configuration Risk Management Program must be considered for the effect on the RICT.

1. For planned changes, the revised RICT must be determined prior to implementation of the change in configuration.

2. For emergent conditions, the revised RICT must be determined within the time limits of the Required Action Completion Time (i.e., not the RICT) or 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> after the plant configuration change, whichever is less.

3. Revising the RICT is not required If the plant configuration change would lower plant risk and would result in a longer RICT.

d. Use of a RICT is not permitted for entry into a configuration which represents a loss of a specified safety function or inoperability of all required trains of a system required to be OPERABLE.

e. If the extent of condition evaluation for inoperable structures, systems, or components (SSCs) is not complete prior to exceeding the Completion Time, the RICT shall account for the increased possibility of common cause failure (CCF) by either:

1. Numerically accounting for the increased possibility of CCF in the RICT calculation

, or 2. Risk Management Actions (RMAs) not already credited in the RICT calculation shall be implemented that support redundant or diverse SSCs that perform the function(s) of the inoperable SSCs, and, if practicable, reduce the frequency of initiating events that challenge the function(s) performed by the inoperable SSCs.

Attachment 4 L-201 8-006 Page 1 of 3 ATTACHMENT 4 St. Lucie Unit 2 Markup of the Technical Specification s

Attachment 4 L-201 8-006 Page 2 of 3 INSERT 3 s. Risk Informed Completion Time Program This program provides controls to calculate a Risk Informed Completion Time (RICT) and must be implemented in accordance with NEI 06

-09, "Risk-Informed Technical Specifications Initiative 4b: Risk

-Managed Technical Specifications (RMTS) Guidelines," Revision 0

-A, November 2006. The program shall include the following:

a. The RICT may not exceed 30 days;

b. A RICT may only be utilized in MODES 1 and 2;

c. When a RICT is being used, any plant configuration change within the scope of the Configuration Risk Management Program must be considered for the effect on the RICT.

1. For planned changes, the revised RICT must be determined prior to implementation of the change in configuration.

2. For emergent conditions, the revised RICT must be determined within the time limits of the Required Action Completion Time (i.e., not the RICT) or 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> after the plant configuration change, whichever is less.

3. Revising the RICT is not required If the plant configuration change would lower plant risk and would result in a longer RICT.

d. Use of a RICT is not permitted for entry into a configuration which represents a loss of a specified safety function or inoperability of all required trains of a system required to be OPERABLE.

e. If the extent of condition evaluation for inoperable structures, systems, or components (SSCs) is not complete prior to exceeding the Completion Time, the RICT shall account for the increased possibility of common cause failure (CCF) by either:

1. Numerically accounting for the increased possibility of CCF in the RICT calculation

, or 2. Risk Management Actions (RMAs) not already credited in the RICT calculation shall be implemented that support redundant or diverse SSCs that perform the function(s) of the inoperable SSCs, and, if practicable, reduce the frequency of initiating events that challenge the function(s) performed by the inoperable SSCs.