TSTF-03-02, Traveler - August 12, 2003 Transmits TSTF-423, Technical Specifications End States, NEDC-32988-A.: Difference between revisions
StriderTol (talk | contribs) (Created page by program invented by StriderTol) |
StriderTol (talk | contribs) (Created page by program invented by StriderTol) |
||
| Line 3: | Line 3: | ||
| issue date = 08/12/2003 | | issue date = 08/12/2003 | ||
| title = Traveler - August 12, 2003 Transmits TSTF-423, Technical Specifications End States, NEDC-32988-A. | | title = Traveler - August 12, 2003 Transmits TSTF-423, Technical Specifications End States, NEDC-32988-A. | ||
| author name = Furio P | | author name = Furio P, Infanger P, Silko T, Wideman S | ||
| author affiliation = B & W Owners Group, BWR Owners Group, Technical Specifications Task Force, Westinghouse Owners Group | | author affiliation = B & W Owners Group, BWR Owners Group, Technical Specifications Task Force, Westinghouse Owners Group | ||
| addressee name = Beckner W | | addressee name = Beckner W | ||
| addressee affiliation = NRC/NRR/DRIP | | addressee affiliation = NRC/NRR/DRIP | ||
| docket = | | docket = | ||
| Line 408: | Line 408: | ||
Evaluation. | Evaluation. | ||
2.0 Proposed Change The Topical Report and Safety Eva luation describe changes to 22 Technical Specifications in NUREG-1433, which appl y to BWR/4 plants, and 20 Technical Specifications in NUREG | |||
Change The Topical Report and Safety Eva luation describe changes to 22 Technical Specifications in NUREG-1433, which appl y to BWR/4 plants, and 20 Technical Specifications in NUREG | |||
-1434, which appl y to BWR/6 plants. The affected Specifications are listed in Table 1. | -1434, which appl y to BWR/6 plants. The affected Specifications are listed in Table 1. | ||
Appropriate Bases changes a re also made to reflect the changes to the Specifications. | Appropriate Bases changes a re also made to reflect the changes to the Specifications. | ||
| Line 423: | Line 421: | ||
NEDC-32988-A justified the modification of 42 Technical Specification s Required Action end stat es. The modified end states allow the plant to remain in MODE 3 instead of going to MODE 4 or to MODE 3 with steam dome pressure | NEDC-32988-A justified the modification of 42 Technical Specification s Required Action end stat es. The modified end states allow the plant to remain in MODE 3 instead of going to MODE 4 or to MODE 3 with steam dome pressure | ||
£ 150 psig. | £ 150 psig. | ||
4.0 Technical Analysis The Topical Report provides a systematic review of the risks associated with all Required | |||
Analysis The Topical Report provides a systematic review of the risks associated with all Required | |||
Actions in Technical Specifications ending in placing the unit in cold shutdown (MODE 4). Cold shutdown is normally required when an inoperable system or train cannot be restored to an OPERABLE status within the allowed time. | Actions in Technical Specifications ending in placing the unit in cold shutdown (MODE 4). Cold shutdown is normally required when an inoperable system or train cannot be restored to an OPERABLE status within the allowed time. | ||
| Line 450: | Line 446: | ||
license amendment to revise their end states must include in their amendment requests plant | license amendment to revise their end states must include in their amendment requests plant | ||
-specific information addressing the stipulations identifie d in Section 7.0 of the SE." These stipulations have been addressed in this Traveler as discussed in Table 2. | -specific information addressing the stipulations identifie d in Section 7.0 of the SE." These stipulations have been addressed in this Traveler as discussed in Table 2. | ||
5.0 Regulatory Analysis 5.1 No Significant Hazards Consideration The T echnical Specification Task Force (TSTF) has evaluated whether or not a significant hazards consideration is involved with the proposed generic change by focusing on the three standards set forth in 10 CFR 50.92, "Issuance of amendment," as discussed below: | |||
Analysis 5.1 No Significant Hazards Consideration The T echnical Specification Task Force (TSTF) has evaluated whether or not a significant hazards consideration is involved with the proposed generic change by focusing on the three standards set forth in 10 CFR 50.92, "Issuance of amendment," as discussed below: | |||
: 1. Does the proposed change involve a significant increase in the probab ility or consequences of an accident previously evaluated? | : 1. Does the proposed change involve a significant increase in the probab ility or consequences of an accident previously evaluated? | ||
Response: No. | Response: No. | ||
| Line 473: | Line 467: | ||
margin of safet | margin of safet | ||
: y. Based on the above, the TS TF concludes that the proposed change presents no significant hazards considerations under the standards set forth in 10 CFR 50.92(c), and, accordingl y , a finding of "no significant hazards consideration" is justified. | : y. Based on the above, the TS TF concludes that the proposed change presents no significant hazards considerations under the standards set forth in 10 CFR 50.92(c), and, accordingl y , a finding of "no significant hazards consideration" is justified. | ||
5.2 Applicable Regulatory Requireme nts/Criteria Required Actions are not specified by any regulatory requirement or criteria. The Limiting | |||
Regulatory Requireme nts/Criteria Required Actions are not specified by any regulatory requirement or criteria. The Limiting | |||
Conditions for Operation, which are based on accident analysis assumptions and regulatory | Conditions for Operation, which are based on accident analysis assumptions and regulatory | ||
| Line 494: | Line 486: | ||
significant increa se in individual or cumulative occupational radiation exposure. Accordingly, the proposed change meets the eligibility criterion for categorical exclusion set forth in 10 CFR 51.22(c)(9). Therefore, pursuant to 10 CFR 51.22(b), no environmental impact st atement or environmental assessment need be prepared in connection with the proposed change. | significant increa se in individual or cumulative occupational radiation exposure. Accordingly, the proposed change meets the eligibility criterion for categorical exclusion set forth in 10 CFR 51.22(c)(9). Therefore, pursuant to 10 CFR 51.22(b), no environmental impact st atement or environmental assessment need be prepared in connection with the proposed change. | ||
7.0 References | |||
: 1. Topical Report NEDC | : 1. Topical Report NEDC | ||
-32988-A, "Technical Justification to Support Risk | -32988-A, "Technical Justification to Support Risk | ||
| Line 532: | Line 523: | ||
TSTF-423 2) The changes described in the Topical Report and the Safety Evaluation are based on Revision 1 of NUREG | TSTF-423 2) The changes described in the Topical Report and the Safety Evaluation are based on Revision 1 of NUREG | ||
-1433. In Revision 2, there is an additional Action (Action D). This additional Action does not affect the justification, but does aff ect the numbering of the Actions that are revised. 3) The changes described in the Topical Report and the Safety Evaluation are based on Revision 1 of NUREG-1433. In Revision 2, there is an additional Action (Action B). This Action applies when two MCREC subsystems are inoperable due to an inoperable control room boundary in MODE 1, 2, or 3. Since the Topical Report an d the Safety Evaluation justify remaining in MODE 3 when two MCREC subsystems are inoperable for any reason, the MODE 3 end state also is applied to not meeting the Required Action and associated Completion Times of Condition B. | -1433. In Revision 2, there is an additional Action (Action D). This additional Action does not affect the justification, but does aff ect the numbering of the Actions that are revised. 3) The changes described in the Topical Report and the Safety Evaluation are based on Revision 1 of NUREG-1433. In Revision 2, there is an additional Action (Action B). This Action applies when two MCREC subsystems are inoperable due to an inoperable control room boundary in MODE 1, 2, or 3. Since the Topical Report an d the Safety Evaluation justify remaining in MODE 3 when two MCREC subsystems are inoperable for any reason, the MODE 3 end state also is applied to not meeting the Required Action and associated Completion Times of Condition B. | ||
: 4) No deviations from the Topical Report or the S afety E valuation. However, deletion of Required Action B.3.2 necessitates the additional change of renaming Required Action B.3.1 to B.3. 5) The changes described in the Topical Report and the Safety Evaluation are based on Revision 1 of NUREG | : 4) No deviations from the Topical Report or the S afety E valuation. However, deletion of Required Action B.3.2 necessitates the additional change of renaming Required Action B.3.1 to B.3. 5) The changes described in the Topical Report and the Safety Evaluation are based on Revision 1 of NUREG | ||
-1433. In Revisi on 2, Condition A (one DC electrical power subsystem inoperable) is divided into three Conditions (A | -1433. In Revisi on 2, Condition A (one DC electrical power subsystem inoperable) is divided into three Conditions (A | ||
| Line 613: | Line 604: | ||
so that the plant can be restored to power operation. Ordinarily the failures result in a degraded plant condition. Consequently, with respect to additional licensee outage activities that could affect the safe conduct of operations and that are not directly | so that the plant can be restored to power operation. Ordinarily the failures result in a degraded plant condition. Consequently, with respect to additional licensee outage activities that could affect the safe conduct of operations and that are not directly | ||
required for correction of the failure or failures that cause d the CT to be exceeded, a licensee must make two commitments: | required for correction of the failure or failures that cause d the CT to be exceeded, a licensee must make two commitments: | ||
: a. The licensee will perform a safety assessment in accordance with the maintenance rule prior to undertaking such additional activities. | : a. The licensee will perform a safety assessment in accordance with the maintenance rule prior to undertaking such additional activities. | ||
: b. If conditions change so that the safety assessme nt is no longer valid, the licensee will suspend all such additional activities via a process consistent with safety until the assessment has been revalidated. The staff expects the licensee to make a contingency | : b. If conditions change so that the safety assessme nt is no longer valid, the licensee will suspend all such additional activities via a process consistent with safety until the assessment has been revalidated. The staff expects the licensee to make a contingency | ||
| Line 726: | Line 717: | ||
-Informed Modification to Sele cted Required End States for BWR Plants, December 2002. | -Informed Modification to Sele cted Required End States for BWR Plants, December 2002. | ||
3.6 CONTAINMENT SYSTEMS 3.6.1.1 Primary Containment Primary Containment 3.6.1.1 LCO 3.6.1.1 APPLICABILITY: | |||
SYSTEMS 3.6.1.1 Primary Containment Primary Containment 3.6.1.1 LCO 3.6.1.1 APPLICABILITY: | |||
ACTIONS Primary containment shall be OPERABLE.MODES 1, 2, and 3.CONDITION REQUIRED ACTION COMPLETION TIME A.Primary containment A.1 Restore primary 1 hour inoperable. | ACTIONS Primary containment shall be OPERABLE.MODES 1, 2, and 3.CONDITION REQUIRED ACTION COMPLETION TIME A.Primary containment A.1 Restore primary 1 hour inoperable. | ||
containment to OPERABLE status.B.Required Action and B.1 Be in MODE 3.12 hours associated Completion Time not met.lAND SURVEILLANCE REQUIREMENTS SR 3.6.1.1.1 BWRl4STS SURVEILLANCE Perform required visual examinations and leakage rate testing except for primary containment air lock testing, in accordance with the Primary Containment Leakage Rate Testing Program.3.6.1.1-1 FREQUENCY In accordance with the Primary Containment Leakage Rate Testing Program Rev.2, 04/30101 BASES ACTIONS SURVEILLANCE REQUIREMENTS Primary Containment B 3.6.1.1 In the event primary containment is inoperable, primary containment must be restored to OPERABLE status within 1 hour.The 1 hour Completion Time provides a period of time to correct the problem commensurate with the importance of maintaining primary containment OPERABILITY during MODES 1, 2, and 3.This time period also ensures that the probability of an accident (requiring primary containment OPERABILITY) occurring during periods where primary containment is inoperable is minimal.If primary containment cannot be restored to OPERABLE status within the required Completion Time, the plant must be brought to a MODE in which the oes nI.To achieve this status, the plant must be brought to at least MODE 3 within 12 6 ur The allowed Completion Timet ai!:easonable, based on....([£)operating experience, to reach the required plant conditions from full onditions in an orderly manner and without challenging plant systems.SR 3.6.1.1.1 Maintaining the primary containment OPERABLE requires compliance with the visual examinations and leakage rate test requirements of the Primary Containment Leakage Rate Testing Program.Failure to meet air lock leakage testing (SR 3.6.1.2.1),[secondary containment bypass leakage (SR 3.6.1.3.12),] | containment to OPERABLE status.B.Required Action and B.1 Be in MODE 3.12 hours associated Completion Time not met.lAND SURVEILLANCE REQUIREMENTS SR 3.6.1.1.1 BWRl4STS SURVEILLANCE Perform required visual examinations and leakage rate testing except for primary containment air lock testing, in accordance with the Primary Containment Leakage Rate Testing Program.3.6.1.1-1 FREQUENCY In accordance with the Primary Containment Leakage Rate Testing Program Rev.2, 04/30101 BASES ACTIONS SURVEILLANCE REQUIREMENTS Primary Containment B 3.6.1.1 In the event primary containment is inoperable, primary containment must be restored to OPERABLE status within 1 hour.The 1 hour Completion Time provides a period of time to correct the problem commensurate with the importance of maintaining primary containment OPERABILITY during MODES 1, 2, and 3.This time period also ensures that the probability of an accident (requiring primary containment OPERABILITY) occurring during periods where primary containment is inoperable is minimal.If primary containment cannot be restored to OPERABLE status within the required Completion Time, the plant must be brought to a MODE in which the oes nI.To achieve this status, the plant must be brought to at least MODE 3 within 12 6 ur The allowed Completion Timet ai!:easonable, based on....([£)operating experience, to reach the required plant conditions from full onditions in an orderly manner and without challenging plant systems.SR 3.6.1.1.1 Maintaining the primary containment OPERABLE requires compliance with the visual examinations and leakage rate test requirements of the Primary Containment Leakage Rate Testing Program.Failure to meet air lock leakage testing (SR 3.6.1.2.1),[secondary containment bypass leakage (SR 3.6.1.3.12),] | ||
| Line 921: | Line 911: | ||
While this Surveillance can be performed with the reactor at power, operating experience has shown that these components usually pass the Surveillance when performed at the[18]month Frequency, which is based on the refueling cycle.Therefore, the Frequency was found to be acceptable from a reliability standpoint. | While this Surveillance can be performed with the reactor at power, operating experience has shown that these components usually pass the Surveillance when performed at the[18]month Frequency, which is based on the refueling cycle.Therefore, the Frequency was found to be acceptable from a reliability standpoint. | ||
]REFERENCES 1.10 CFR 50, Appendix A, GDC 41.2.FSAR, Section[6.2.3].BWRl4STS B 3.6.4.3-5 Rev.2, 04/30101 BWRl4 Leo 3.7.1 RHRSW System INSERT 1 If one RHRSW subsystem is inoperable or one RHRSW pump in one or two subsystems is inoperable and not restored within the provided Completion Time, the plant must be brought to a condition in which the overall plant risk is minimized. | ]REFERENCES 1.10 CFR 50, Appendix A, GDC 41.2.FSAR, Section[6.2.3].BWRl4STS B 3.6.4.3-5 Rev.2, 04/30101 BWRl4 Leo 3.7.1 RHRSW System INSERT 1 If one RHRSW subsystem is inoperable or one RHRSW pump in one or two subsystems is inoperable and not restored within the provided Completion Time, the plant must be brought to a condition in which the overall plant risk is minimized. | ||
To achieve this status, the plant must be brought to at least MODE 3 within 12 hours.Remaining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 5)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.The allowed Completion Time is reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.INSERT 2 5.NEDC-32988-A, Revision 2, Technical Justification to Support Risk-Informed Modification to Selected Required End States for BWR Plants, December 2002. | To achieve this status, the plant must be brought to at least MODE 3 within 12 hours.Remaining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 5)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.The allowed Completion Time is reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.INSERT 2 5.NEDC-32988-A, Revision 2, Technical Justification to Support Risk-Informed Modification to Selected Required End States for BWR Plants, December 2002. | ||
3.7 PLANT SYSTEMS 3.7.1 Residual Heat Removal Service Water (RHRSW)System RHRSW System 3.7.1 LCO 3.7.1 APPLICABILITY: | |||
SYSTEMS 3.7.1 Residual Heat Removal Service Water (RHRSW)System RHRSW System 3.7.1 LCO 3.7.1 APPLICABILITY: | |||
ACTIONS Two RHRSW subsystems shall be OPERABLE.MODES 1, 2, and 3.CONDITION REQUIRED ACTION COMPLETION TIME A.One RHRSW pump A.1 Restore RHRSW pump to 30 days inoperable. | ACTIONS Two RHRSW subsystems shall be OPERABLE.MODES 1, 2, and 3.CONDITION REQUIRED ACTION COMPLETION TIME A.One RHRSW pump A.1 Restore RHRSW pump to 30 days inoperable. | ||
OPERABLE status.B.One RHRSW pump in B.1 Restore one RHRSW 7 days each su bsystem pump to OPERABLE inoperable. | OPERABLE status.B.One RHRSW pump in B.1 Restore one RHRSW 7 days each su bsystem pump to OPERABLE inoperable. | ||
| Line 962: | Line 950: | ||
A.1 Restore[PSW]pump to OPERABLE status.30 days 7 days]7 days Restore one[PSW]pump to OPERABLE status.Restore cooling tower fan(s)to OPERABLE status.B.1 B.One[PSW]pump in each subsystem inoperable. | A.1 Restore[PSW]pump to OPERABLE status.30 days 7 days]7 days Restore one[PSW]pump to OPERABLE status.Restore cooling tower fan(s)to OPERABLE status.B.1 B.One[PSW]pump in each subsystem inoperable. | ||
r@[oneormorecoolin g towers with one cooling tower fan inoperable. | r@[oneormorecoolin g towers with one cooling tower fan inoperable. | ||
-REVIEWER'S NOTEThe[]°F is the maximum allowed UHS temperature value and is based on temperature limitations of the equipment that is relied upon for accident mitigation and safe shutdown of the unit. Verify water temperature of the UHS is[90]°F averaged over the previous 24 hour period.Once per hour]o@.[Water temperature of'V the UHS>[90]OF and[]OF.c., BWRl4 STS 3.7.2-1 Rev.2, 04/30101 | -REVIEWER'S NOTEThe[]°F is the maximum allowed UHS temperature value and is based on temperature limitations of the equipment that is relied upon for accident mitigation and safe shutdown of the unit. Verify water temperature of the UHS is[90]°F averaged over the previous 24 hour period.Once per hour]o@.[Water temperature of'V the UHS>[90]OF and[]OF.c., BWRl4 STS 3.7.2-1 Rev.2, 04/30101 | ||
[PSW]System and[UHS]3.7.2 ACTIONS (continued) | [PSW]System and[UHS]3.7.2 ACTIONS (continued) | ||
__. | __. | ||
CONDITION One[PSW]sUbsystem inoperable for reasons other than Condition[s] | CONDITION One[PSW]sUbsystem inoperable for reasons other than Condition[s] | ||
A | A | ||
@j REQUIRED ACTION*NOTES*1.Enter applicable Conditions and Required Actions of LCO 3.8.1,"AC SourcesOperating," for diesel generator made inoperable by[PSW].2.Enter applicable Conditions and Required Actions of LCO 3.4.8,"Residual Heat Removal (RHR)Shutdown Cooling System-Hot Shutdown," for[RHR shutdown cooling]made inoperable by[PSW].COMPLETION TIME Restore the[PSW]72 hours subsystem to OPERABLE status.BWRl4 STS 3.7.2-2 Rev.2, 04/30101 | @j REQUIRED ACTION*NOTES*1.Enter applicable Conditions and Required Actions of LCO 3.8.1,"AC SourcesOperating," for diesel generator made inoperable by[PSW].2.Enter applicable Conditions and Required Actions of LCO 3.4.8,"Residual Heat Removal (RHR)Shutdown Cooling System-Hot Shutdown," for[RHR shutdown cooling]made inoperable by[PSW].COMPLETION TIME Restore the[PSW]72 hours subsystem to OPERABLE status.BWRl4 STS 3.7.2-2 Rev.2, 04/30101 | ||
[PSW]System and[UHS]3.7.2 ACTIONS (continued) | [PSW]System and[UHS]3.7.2 ACTIONS (continued) | ||
CONDITION[Required Action and associated Completion Time of met]fl)?OR Both[PSW]subsystems inoperable for reasons other than Condition[s] | CONDITION[Required Action and associated Completion Time of met]fl)?OR Both[PSW]subsystems inoperable for reasons other than Condition[s] | ||
B[andl@[OR[UHS]inoperable for reasons other@.Condition | B[andl@[OR[UHS]inoperable for reasons other@.Condition | ||
]REQUIRED ACTION F.1 Be in MODE 3.F.2 Be in MODE 4.COMPLETION TIME 12 hours 36 hours SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.7.2.1 SR 3.7.2.2 SR3.7.2.3 SR 3.7.2.4 BWRl4 STS[Verify the water level of each[PSW]cooling tower 24 hours]basin is[]ft.[Verify the water level[in each PSW pump well of the 24 hours]intake structure] | ]REQUIRED ACTION F.1 Be in MODE 3.F.2 Be in MODE 4.COMPLETION TIME 12 hours 36 hours SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.7.2.1 SR 3.7.2.2 SR3.7.2.3 SR 3.7.2.4 BWRl4 STS[Verify the water level of each[PSW]cooling tower 24 hours]basin is[]ft.[Verify the water level[in each PSW pump well of the 24 hours]intake structure] | ||
is[60.1]ft[mean sea level].[Verify the average water temperature of[UHS]is 24 hours]::;[]OF.[Operate each[PSW]cooling tower fan for 31 days][15]minutes.3.7.2-3 Rev.2, 04/30101 | is[60.1]ft[mean sea level].[Verify the average water temperature of[UHS]is 24 hours]::;[]OF.[Operate each[PSW]cooling tower fan for 31 days][15]minutes.3.7.2-3 Rev.2, 04/30101 | ||
[PSW]System and[UHS]B 3.7.2 BASES ACTIONS With one[PSW]pump inoperable in each subsystem, the inoperable pump must be restored to OPERABLE status within 7 days.With the unit in this condition, the remaining OPERABLE[PSW]pumps (even allowing for an additional single failure)are adequate to perform the[PSW]heat removal function;however, the overall reliability is reduced.The 30 day Completion Time is based on the remaining[PSW]heat removal capability to accommodate additional single failures, and the low probability of an event occurringduringthis time period.With one[PSW]pump inoperable ineachsubsystem, one inoperable pump must be restored to OPERABLE status within 7 days.With the unit in this condition, the remaining OPERABLE[PSW]pumps are adequate to perform the[PSW]heat removal function;however, the overall reliability is reduced.The 7 day Completion Time is based on the remaining[PSW]heat removal capability to accommodate an additional single failure and the low probability of an event occurring during this time (rflS U+If one or more cooling towers have one fan inoperable (Le., up to one fan per cooling tower inoperable), action must be taken to restore the inoperable cooling tower fan(s)to OPERABLE status within 7 days.The 7 day Completion Time is based on the low probability of an accident occurring during the 7 days that one cooling tower fan is inoperable in one or more cooling towers, the number of available systems, and the time required to reasonably complete the Required Action.]*REVIEWER'S NOTE*The[]OF is the maximum allowedUHS temperature value and is based on temperature limitations of the equipment that is relied upon for accident mitigation and safe shutdown of the unit.With water temperature of the UHS>[90]OF, the design basis assumption associated with initial UHS temperature are bounded provided the temperature of the UHS averaged over the previous 24 hour period is[90]OF.With the water temperature of the UHS>[90]OF, long term cooling capability of the ECCS loads and DGs may be affected.BWRl4 STS B 3.7.2-3 Rev.2,04/30101 | [PSW]System and[UHS]B 3.7.2 BASES ACTIONS With one[PSW]pump inoperable in each subsystem, the inoperable pump must be restored to OPERABLE status within 7 days.With the unit in this condition, the remaining OPERABLE[PSW]pumps (even allowing for an additional single failure)are adequate to perform the[PSW]heat removal function;however, the overall reliability is reduced.The 30 day Completion Time is based on the remaining[PSW]heat removal capability to accommodate additional single failures, and the low probability of an event occurringduringthis time period.With one[PSW]pump inoperable ineachsubsystem, one inoperable pump must be restored to OPERABLE status within 7 days.With the unit in this condition, the remaining OPERABLE[PSW]pumps are adequate to perform the[PSW]heat removal function;however, the overall reliability is reduced.The 7 day Completion Time is based on the remaining[PSW]heat removal capability to accommodate an additional single failure and the low probability of an event occurring during this time (rflS U+If one or more cooling towers have one fan inoperable (Le., up to one fan per cooling tower inoperable), action must be taken to restore the inoperable cooling tower fan(s)to OPERABLE status within 7 days.The 7 day Completion Time is based on the low probability of an accident occurring during the 7 days that one cooling tower fan is inoperable in one or more cooling towers, the number of available systems, and the time required to reasonably complete the Required Action.]*REVIEWER'S NOTE*The[]OF is the maximum allowedUHS temperature value and is based on temperature limitations of the equipment that is relied upon for accident mitigation and safe shutdown of the unit.With water temperature of the UHS>[90]OF, the design basis assumption associated with initial UHS temperature are bounded provided the temperature of the UHS averaged over the previous 24 hour period is[90]OF.With the water temperature of the UHS>[90]OF, long term cooling capability of the ECCS loads and DGs may be affected.BWRl4 STS B 3.7.2-3 Rev.2,04/30101 | ||
[PSW]System and[UHS]B 3.7.2 BASES ACTIONS (continued) | [PSW]System and[UHS]B 3.7.2 BASES ACTIONS (continued) | ||
Therefore, to ensure long term cooling capability is provided to the ECCS loads when water temperature of the UHS is>[90]OF, Required Action is provided to more frequently monitor the water temperature of the UHS and verify the temperature is:;;[90]OF when averaged over the previous 24 hour period.The once per hour Completion Time takes into.consideration UHS variations and the increased monitoring frequencyneededto ensure design basis assumptions and equipment limitations are not exceeded in this condition. | Therefore, to ensure long term cooling capability is provided to the ECCS loads when water temperature of the UHS is>[90]OF, Required Action is provided to more frequently monitor the water temperature of the UHS and verify the temperature is:;;[90]OF when averaged over the previous 24 hour period.The once per hour Completion Time takes into.consideration UHS variations and the increased monitoring frequencyneededto ensure design basis assumptions and equipment limitations are not exceeded in this condition. | ||
| Line 980: | Line 968: | ||
[PSW]subsystem results in an inoperable DG or RHR shutdown cooling subsystem, respectively. | [PSW]subsystem results in an inoperable DG or RHR shutdown cooling subsystem, respectively. | ||
This is in accordance with LCO 3.0.6 and ensures the proper actions are taken for these components. | This is in accordance with LCO 3.0.6 and ensures the proper actions are taken for these components. | ||
If he[P subsystem be rest 0 0 a'.th Il!IJe 0 oth[PSW]subsystems ar inoperable for reasons ot er than Condition B and[or[UHS]is determined inoperable for reasons other than Condition C or<mthe unit must be placed in a MODE in which the LCO does not apply.To 8WRJ4 STS 83.7.2-4 Rev.2, 04/30101 | If he[P subsystem be rest 0 0 a'.th Il!IJe 0 oth[PSW]subsystems ar inoperable for reasons ot er than Condition B and[or[UHS]is determined inoperable for reasons other than Condition C or<mthe unit must be placed in a MODE in which the LCO does not apply.To 8WRJ4 STS 83.7.2-4 Rev.2, 04/30101 | ||
[PSW]System and[UHS]B 3.7.2 BASES SURVEILLANCE REQUIREMENTS (continued) | [PSW]System and[UHS]B 3.7.2 BASES SURVEILLANCE REQUIREMENTS (continued) | ||
SR 3.7.2.5 Verifying the correct alignment for each manual, power operated, and automatic valve in each[PSW]subsystem flow path provides assurance that the proper flow paths will exist for[PSW]operation. | SR 3.7.2.5 Verifying the correct alignment for each manual, power operated, and automatic valve in each[PSW]subsystem flow path provides assurance that the proper flow paths will exist for[PSW]operation. | ||
| Line 991: | Line 979: | ||
_.__.-- | _.__.-- | ||
BWR/4 LCO 3.7.4 MCREC System INSERT 1 Remaining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 5)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.INSERT 2 Therefore, the plant must be brought to a MODE in which the overall plant risk is minimized. | BWR/4 LCO 3.7.4 MCREC System INSERT 1 Remaining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 5)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.INSERT 2 Therefore, the plant must be brought to a MODE in which the overall plant risk is minimized. | ||
To achieve this status, the plant must be brought to at least MODE 3 within 12 hours.Remaining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 5)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.The allowed Completion Time is reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.INSERT 3 5.NEDC-32988-A, Revision 2, Technical Justification to Support Risk-Informed Modification to Selected Required End States for BWR Plants, December 2002. | To achieve this status, the plant must be brought to at least MODE 3 within 12 hours.Remaining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 5)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.The allowed Completion Time is reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.INSERT 3 5.NEDC-32988-A, Revision 2, Technical Justification to Support Risk-Informed Modification to Selected Required End States for BWR Plants, December 2002. | ||
[MCREC]System 3.7.4 3.7 PLANT SYSTEMS 3.7.4[Main Control Room Environmental Control (MCREC)]System LCO 3.7.4 APPLICABILITY: | [MCREC]System 3.7.4 3.7 PLANT SYSTEMS 3.7.4[Main Control Room Environmental Control (MCREC)]System LCO 3.7.4 APPLICABILITY: | ||
ACTIONS Two[MCREC]subsystems shall be OPERABLE.-NOTE-The main control room boundary may be opened intermittently under administrative control MODES 1, 2, and 3, During movement of[recently] | ACTIONS Two[MCREC]subsystems shall be OPERABLE.-NOTE-The main control room boundary may be opened intermittently under administrative control MODES 1, 2, and 3, During movement of[recently] | ||
| Line 1,016: | Line 1,004: | ||
containment. | containment. | ||
AND D.2.2 Initiate action to suspend Immediately OPDRVs. | AND D.2.2 Initiate action to suspend Immediately OPDRVs. | ||
E.Two[MCREe]E.1 subsystems inoperable in MODE 1, 2, or 3 for;If\MO()ff 1-/2 houa reasons other than Condition B.BWRl4STS 3.7.4-2 Rev.2,04/30101 | E.Two[MCREe]E.1 subsystems inoperable in MODE 1, 2, or 3 for;If\MO()ff 1-/2 houa reasons other than Condition B.BWRl4STS 3.7.4-2 Rev.2,04/30101 | ||
[MCREC]System B 3.7.4 BASES ACTIONS (continued) | [MCREC]System B 3.7.4 BASES ACTIONS (continued) | ||
If the main control room boundary is inoperable in MODE 1, 2, or 3, the MCREC trains cannot perform their intended functions. | If the main control room boundary is inoperable in MODE 1, 2, or 3, the MCREC trains cannot perform their intended functions. | ||
| Line 1,041: | Line 1,029: | ||
containment must be suspended immediately. | containment must be suspended immediately. | ||
Suspension of these activities shall not preclude completion of movement of a component to a safe position.Also, if applicable, actions must be initiated immediately to suspend OPDRVs to minimize the probability of a vessel draindown and the subsequent potential for fission product release.Actions must continue until the OPDRVs pre suspended. | Suspension of these activities shall not preclude completion of movement of a component to a safe position.Also, if applicable, actions must be initiated immediately to suspend OPDRVs to minimize the probability of a vessel draindown and the subsequent potential for fission product release.Actions must continue until the OPDRVs pre suspended. | ||
An alternative to Required Action D.1 is to immediately suspend activities that present a potential for releasing radioactivity that might require isolation of the control room.This places the unit in a condition that minimizes risk.BWRl4 STS | An alternative to Required Action D.1 is to immediately suspend activities that present a potential for releasing radioactivity that might require isolation of the control room.This places the unit in a condition that minimizes risk.BWRl4 STS | ||
[MCREC]System B 3.7.4 BASES ACTIONS (continued) of these activities shall not preclude completion of movement of a component to a safe position.If applicable, actions must be initiated immediately to suspend OPDVRs to minimize the probability of a vessel draindown and subsequent potential for fission product release.Actions must continue until the OPDRVs are suspended. | [MCREC]System B 3.7.4 BASES ACTIONS (continued) of these activities shall not preclude completion of movement of a component to a safe position.If applicable, actions must be initiated immediately to suspend OPDVRs to minimize the probability of a vessel draindown and subsequent potential for fission product release.Actions must continue until the OPDRVs are suspended. | ||
SURVEILLANCE SR 3.7.4.1 REQUIREMENTS This SR verifies that a subsystem in a standby mode starts on demand and continues to operate.Standby systems should be checked periodically to ensurethatthey start and function properly.As the environmental and normal operating conditions of this system are not severe, testing each sUbsystem once every month provides an adequate check on this system.Monthly heater operation dries out any moisture that has accumulated in the charcoal as a result of humidity in the ambient air.[Systems with heaters must be operated for10 continuous hours with the heaters energized. | SURVEILLANCE SR 3.7.4.1 REQUIREMENTS This SR verifies that a subsystem in a standby mode starts on demand and continues to operate.Standby systems should be checked periodically to ensurethatthey start and function properly.As the environmental and normal operating conditions of this system are not severe, testing each sUbsystem once every month provides an adequate check on this system.Monthly heater operation dries out any moisture that has accumulated in the charcoal as a result of humidity in the ambient air.[Systems with heaters must be operated for10 continuous hours with the heaters energized. | ||
| Line 1,050: | Line 1,038: | ||
[MCREC]System B 3.7.4 BASES SURVEILLANCE REQUIREMENTS (continued) room positive pressure, with respect to potentially contaminated adjacent areas (the turbine building), is periodically tested to verify proper function of the[MCREC]System.During the emergency mode of operation, the[MCREC]System is designed to slightly pressurize the control room:?:[0.1]inches water gauge positive pressure with respect to the turbine building to prevent unfiltered inleakage. | [MCREC]System B 3.7.4 BASES SURVEILLANCE REQUIREMENTS (continued) room positive pressure, with respect to potentially contaminated adjacent areas (the turbine building), is periodically tested to verify proper function of the[MCREC]System.During the emergency mode of operation, the[MCREC]System is designed to slightly pressurize the control room:?:[0.1]inches water gauge positive pressure with respect to the turbine building to prevent unfiltered inleakage. | ||
The[MCREC]System is designed to maintain this positive pressure at a flow rate of s;[400]cfm to the control room in the pressurization mode.The Frequency of[18]months on a STAGGERED TEST BASIS is consistent with industry practice and other filtration systems SRs.]1.FSAR, Chapter[6].2.FSAR, Chapter[9].3.FSAR, Chapter[15].4.FSAR, Section[6.4.1.2.2].Regulatory Guide 1.52, Rev.[2].BWRl4 STS B3.7.4-7 Rev.2, 04/30101 BWRl4 LCO 3.7.5 Control Room AC System INSERT 1 Remaining in the Applicability ofthe LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 2)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.INSERT 2 Therefore, the plant must be brought to a MODE in which the overall plant risk is minimized. | The[MCREC]System is designed to maintain this positive pressure at a flow rate of s;[400]cfm to the control room in the pressurization mode.The Frequency of[18]months on a STAGGERED TEST BASIS is consistent with industry practice and other filtration systems SRs.]1.FSAR, Chapter[6].2.FSAR, Chapter[9].3.FSAR, Chapter[15].4.FSAR, Section[6.4.1.2.2].Regulatory Guide 1.52, Rev.[2].BWRl4 STS B3.7.4-7 Rev.2, 04/30101 BWRl4 LCO 3.7.5 Control Room AC System INSERT 1 Remaining in the Applicability ofthe LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 2)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.INSERT 2 Therefore, the plant must be brought to a MODE in which the overall plant risk is minimized. | ||
To achieve this status, the plant must be brought to at least MODE 3 within 12 hours.Remaining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 2)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.The allowed Completion Time is reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.INSERT 3 2.NEDC-32988-A, Revision 2, Technical Justification to Support Risk-Informed Modification to Selected Required End States for BWR Plants, December 2002. | To achieve this status, the plant must be brought to at least MODE 3 within 12 hours.Remaining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 2)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.The allowed Completion Time is reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.INSERT 3 2.NEDC-32988-A, Revision 2, Technical Justification to Support Risk-Informed Modification to Selected Required End States for BWR Plants, December 2002. | ||
3.7 PLANT SYSTEMS 3.7.5[Control Room Air Conditioning (AC)]System[Control Room AC]System 3.7.5 be OPERABLE.uel assemblies in the ning the reactor vessel COMPLETION TIME AC]30 days BLE 12 hours/"36 hour;')------------ontrol Immediately in Rev.2, 04/30101 3.7.5-1 Place OPERABLE[c room AC]subsystem operation. | |||
SYSTEMS 3.7.5[Control Room Air Conditioning (AC)]System[Control Room AC]System 3.7.5 be OPERABLE.uel assemblies in the ning the reactor vessel COMPLETION TIME AC]30 days BLE 12 hours/"36 hour;')------------ontrol Immediately in Rev.2, 04/30101 3.7.5-1 Place OPERABLE[c room AC]subsystem operation. | |||
Restore[control room subsystem to OPERA status.-LCO 3.0.3 is not applicable. | Restore[control room subsystem to OPERA status.-LCO 3.0.3 is not applicable. | ||
Be in MODE 3.REQUIRED ACTION Two[control room AC]subsystems shall MODES 1, 2, and 3, During movement of[recently] | Be in MODE 3.REQUIRED ACTION Two[control room AC]subsystems shall MODES 1, 2, and 3, During movement of[recently] | ||
| Line 1,076: | Line 1,062: | ||
irradiated fuel assemblies in the[secondary] | irradiated fuel assemblies in the[secondary] | ||
containment. | containment. | ||
AND E.2 Initiate actions to suspend Immediately OPDRVs.SURVEILLANCE REQUIREMENTS SR 3.7.5.1 BWRl4STS SURVEILLANCE Verify each[control room AC]subsystem has the capability to remove the assumed heat load.3.7.5-2 FREQUENCY[18]months Rev.2, 04/30101 | AND E.2 Initiate actions to suspend Immediately OPDRVs.SURVEILLANCE REQUIREMENTS SR 3.7.5.1 BWRl4STS SURVEILLANCE Verify each[control room AC]subsystem has the capability to remove the assumed heat load.3.7.5-2 FREQUENCY[18]months Rev.2, 04/30101 | ||
[Control Room AC]System B 3.7.5 BASES ACTIONS (continued) | [Control Room AC]System B 3.7.5 BASES ACTIONS (continued) | ||
In MODE 1, 2, or 3, if the inoperable | In MODE 1, 2, or 3, if the inoperable | ||
| Line 1,089: | Line 1,075: | ||
containment must be suspended immediately. | containment must be suspended immediately. | ||
Suspension of these activities shall not preclude completion of movement of a component to a safe position.Also, if applicable, actions must be initiated immediately to suspend OPDRVs to minimize the probability of a vessel draindown and subsequent potential for fission product release.Actions must continue until the OPDRVs are suspended. | Suspension of these activities shall not preclude completion of movement of a component to a safe position.Also, if applicable, actions must be initiated immediately to suspend OPDRVs to minimize the probability of a vessel draindown and subsequent potential for fission product release.Actions must continue until the OPDRVs are suspended. | ||
BWRl4 STS B3.7.5-3 Rev.2, 04/30101 | BWRl4 STS B3.7.5-3 Rev.2, 04/30101 | ||
[Control Room AC]System B 3.7.5 BASES ACTIONS (continued) | [Control Room AC]System B 3.7.5 BASES ACTIONS (continued) | ||
If both[control room AC]subsystems are inoperable in MODE 1,2, or 3, the[Control Room AC]S stem may not be capable of performing the intended function.her e en m el E.1 and E.2 The Required Actions of Condition E are modified by a Note indicating that LCO 3.0.3 does not apply.If moving[recently] | If both[control room AC]subsystems are inoperable in MODE 1,2, or 3, the[Control Room AC]S stem may not be capable of performing the intended function.her e en m el E.1 and E.2 The Required Actions of Condition E are modified by a Note indicating that LCO 3.0.3 does not apply.If moving[recently] | ||
| Line 1,314: | Line 1,300: | ||
-Informed Modification to Selected Required End States for BWR Plants, December 2002. | -Informed Modification to Selected Required End States for BWR Plants, December 2002. | ||
3.6 CONTAINMENT SYSTEMS 3.6.1.1 Primary Containment Primary Containment 3.6.1.1 LCO 3.6.1.1 APPLICABILITY: | |||
SYSTEMS 3.6.1.1 Primary Containment Primary Containment 3.6.1.1 LCO 3.6.1.1 APPLICABILITY: | |||
ACTIONS Primary containment shall be OPERABLE.MODES 1, 2, and 3.CONDITION REQUIRED ACTION COMPLETION TIME A.Primary containment A.1 Restore primary 1 hour inoperable. | ACTIONS Primary containment shall be OPERABLE.MODES 1, 2, and 3.CONDITION REQUIRED ACTION COMPLETION TIME A.Primary containment A.1 Restore primary 1 hour inoperable. | ||
containment to OPERABLE status.B.Required Action and B.1 Be in MODE 3.12 hours associated CompletionTime not met.. SURVEILLANCE REQUIREMENTS SURVEILLANCE SR 3.6.1.1.1 Perform required visual examinations and leakage rate testing except for primary containment air lock testing, in accordance with the Primary Containment Leakage Rate Testing Program.SR 3.6.1.1.2[Verify primary containment structural integrity in accordance with the Primary Containment Tendon Surveillance Program.BWRl6 STS 3.6.1.1-1 FREQUENCY In accordance with the Primary Containment Leakage Rate Testing Program In accordance with the Primary Containment Tendon Surveillance Program]Rev.2, 04/30/01 BASES ACTIONS | containment to OPERABLE status.B.Required Action and B.1 Be in MODE 3.12 hours associated CompletionTime not met.. SURVEILLANCE REQUIREMENTS SURVEILLANCE SR 3.6.1.1.1 Perform required visual examinations and leakage rate testing except for primary containment air lock testing, in accordance with the Primary Containment Leakage Rate Testing Program.SR 3.6.1.1.2[Verify primary containment structural integrity in accordance with the Primary Containment Tendon Surveillance Program.BWRl6 STS 3.6.1.1-1 FREQUENCY In accordance with the Primary Containment Leakage Rate Testing Program In accordance with the Primary Containment Tendon Surveillance Program]Rev.2, 04/30/01 BASES ACTIONS | ||
| Line 1,425: | Line 1,410: | ||
or during[recently] | or during[recently] | ||
irradiated fuel OPDRVs.assemblies in the[primary and secondary containment]. | irradiated fuel OPDRVs.assemblies in the[primary and secondary containment]. | ||
AND BWRl6STS 3.6.4.1-1 Rev.2, 04/30101 | AND BWRl6STS 3.6.4.1-1 Rev.2, 04/30101 | ||
[Secondary Containment] | [Secondary Containment] | ||
B 3.6.4.1 BASES APPLICABILITY (continued) | B 3.6.4.1 BASES APPLICABILITY (continued) | ||
| Line 1,435: | Line 1,420: | ||
[secondary containment] | [secondary containment] | ||
OPERABILITY) occurring during periods where[secondary containment] | OPERABILITY) occurring during periods where[secondary containment] | ||
is inoperable is minimal.BWRl6STS B 3.6.4.1-3 Rev.2, 04/30/01 | is inoperable is minimal.BWRl6STS B 3.6.4.1-3 Rev.2, 04/30/01 | ||
[Secondary Containment] | [Secondary Containment] | ||
B 3.6.4.1 BASES ACTIONS (continued) | B 3.6.4.1 BASES ACTIONS (continued) | ||
| Line 1,459: | Line 1,444: | ||
Furthermore, the 24 hour Frequency is considered adequate in view of other indications available in the control room, including alarms, to alert the operator to an abnormal[secondary containment] | Furthermore, the 24 hour Frequency is considered adequate in view of other indications available in the control room, including alarms, to alert the operator to an abnormal[secondary containment] | ||
vacuum condition. | vacuum condition. | ||
]BWRl6 STS B 3.6.4.1-4 Rev.2, 04/30101 | ]BWRl6 STS B 3.6.4.1-4 Rev.2, 04/30101 | ||
[Secondary Containment] | [Secondary Containment] | ||
B 3.6.4.1 BASES SURVEILLANCE REQUIREMENTS (continued) demonstrates that the pressure in the[secondary] | B 3.6.4.1 BASES SURVEILLANCE REQUIREMENTS (continued) demonstrates that the pressure in the[secondary] | ||
| Line 1,552: | Line 1,537: | ||
BWRl6 STS B 3.6.5.6-4-----,---- | BWRl6 STS B 3.6.5.6-4-----,---- | ||
....--Rev.2, 04/30101 BWRl6 Leo 3.7.1 SSW System and UHS INSERT 1 If one or more cooling towers with one cooling tower fan are inoperable or one SSW subsystem is inoperable for reasons other than Condition A and not restored within the provided Completion Time, the plant must be brought to a condition in which the overall plant risk is minimized. | ....--Rev.2, 04/30101 BWRl6 Leo 3.7.1 SSW System and UHS INSERT 1 If one or more cooling towers with one cooling tower fan are inoperable or one SSW subsystem is inoperable for reasons other than Condition A and not restored within the provided Completion Time, the plant must be brought to a condition in which the overall plant risk is minimized. | ||
To achieve this status, the plant must be brought to at least MODE 3 within 12 hours.Remaining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 8)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.The allowed Completion Time is reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.INSERT 2 8.NEDC-32988-A, Revision 2, Technical Justification to Support Risk-Informed Modification to Selected Required End States for BWR Plants, December 2002. | To achieve this status, the plant must be brought to at least MODE 3 within 12 hours.Remaining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 8)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.The allowed Completion Time is reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.INSERT 2 8.NEDC-32988-A, Revision 2, Technical Justification to Support Risk-Informed Modification to Selected Required End States for BWR Plants, December 2002. | ||
[SSW]System and[UHS]3.7.1 3.7 PLANT SYSTEMS 3.7.1[Standby Water (SSW)]System and[Ultimate Heat Sink (UHS)]LCO 3.7.1 APPLICABILITY: | [SSW]System and[UHS]3.7.1 3.7 PLANT SYSTEMS 3.7.1[Standby Water (SSW)]System and[Ultimate Heat Sink (UHS)]LCO 3.7.1 APPLICABILITY: | ||
Division 1 and 2[SSW]subsystems and[UHS]shall be OPERABLE.MODES 1, 2, and 3.ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A.[One or more cooling A.1 Restore cooling tower 7 days]towers with one cooling fan(s)to OPERABLE tower fan inoperable. | Division 1 and 2[SSW]subsystems and[UHS]shall be OPERABLE.MODES 1, 2, and 3.ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A.[One or more cooling A.1 Restore cooling tower 7 days]towers with one cooling fan(s)to OPERABLE tower fan inoperable. | ||
| Line 1,565: | Line 1,550: | ||
@ | @ | ||
AND@ot met.@.2't:@Be in MODE 4.36 hours OR@Both[SSW]SUbsystems inoperable | AND@ot met.@.2't:@Be in MODE 4.36 hours OR@Both[SSW]SUbsystems inoperable | ||
[for reasons other than Condition A].[OR[UHS]inoperable for reasons other than Condition A[or@].]'h.-BWRl6 STS 3.7.1-2 Rev.2, 04/30101 | [for reasons other than Condition A].[OR[UHS]inoperable for reasons other than Condition A[or@].]'h.-BWRl6 STS 3.7.1-2 Rev.2, 04/30101 | ||
[SSW]System and[UHS]B 3.7.1 BASES ACTIONS[A.1 If one or more cooling towers have one fan inoperable (Le., up to one fan per cooling tower inoperable), action must be taken to restore the inoperable cooling tower fan(s)to OPERABLE status within 7 days.(mOlle-t>The 7 day Completion Time is reasonable, based on the low probability of an accident occurring during the 7 days that one cooling tower fan is inoperable in one or more cooling towers, the number of available systems, and the time required to complete the Required Action.][rj1@-REVIEWER'S NOTE-The[]OF is the maximum allowed UHS temperature value and is based on temperature limitations of the equipment that is relied upon for accident mitigation and safe shutdown of the unit.With water temperature of the UHS>[90]OF, the design basis assumption associated with initial UHS temperature is bounded provided the temperature of the UHS averaged over the previous 24 hour period is[90]OF.With the water temperature of the UHS>[90]OF, long term cooling capability of the ECCS loads and DGs may be affected.Therefore, to ensure long term cooling capability is provided to the ECCS loads when water temperature of the UHS is>[90rF, Required Action@@.1 is provided to more frequently monitor the water temperature of the UHS and verify the temperature is[90]OF when averaged over the previous 24 hour period.The once per hour Completion Time takes into consideration UHS temperature variations and the increased monitoring frequency needed to ensure design basis assumptions and equipment limitations are not exceeded in this condition. | [SSW]System and[UHS]B 3.7.1 BASES ACTIONS[A.1 If one or more cooling towers have one fan inoperable (Le., up to one fan per cooling tower inoperable), action must be taken to restore the inoperable cooling tower fan(s)to OPERABLE status within 7 days.(mOlle-t>The 7 day Completion Time is reasonable, based on the low probability of an accident occurring during the 7 days that one cooling tower fan is inoperable in one or more cooling towers, the number of available systems, and the time required to complete the Required Action.][rj1@-REVIEWER'S NOTE-The[]OF is the maximum allowed UHS temperature value and is based on temperature limitations of the equipment that is relied upon for accident mitigation and safe shutdown of the unit.With water temperature of the UHS>[90]OF, the design basis assumption associated with initial UHS temperature is bounded provided the temperature of the UHS averaged over the previous 24 hour period is[90]OF.With the water temperature of the UHS>[90]OF, long term cooling capability of the ECCS loads and DGs may be affected.Therefore, to ensure long term cooling capability is provided to the ECCS loads when water temperature of the UHS is>[90rF, Required Action@@.1 is provided to more frequently monitor the water temperature of the UHS and verify the temperature is[90]OF when averaged over the previous 24 hour period.The once per hour Completion Time takes into consideration UHS temperature variations and the increased monitoring frequency needed to ensure design basis assumptions and equipment limitations are not exceeded in this condition. | ||
If the water temperature of the UHS exceeds[90]OF when averaged over the previous 24 hour period or the water temperature of the UHS exceeds[]OF, Condition@nust be entered immediately.] | If the water temperature of the UHS exceeds[90]OF when averaged over the previous 24 hour period or the water temperature of the UHS exceeds[]OF, Condition@nust be entered immediately.] | ||
If one[SSW]subsystem is inoperable | If one[SSW]subsystem is inoperable | ||
[for reasons other than Condition A], it must be restored to OPERABLE status within 72 hours.With the unit in this condition, the remaining OPERABLE[SSW]subsystem is adequate to perform the heat removal function.However, the overall reliability is reduced because a single failure in the OPERABLE,[SSW]subsystem could result in loss of[SSW]function.The 72 hour Completion Time was developed taking into account the BWRl6 STS B3.7.1-4 Rev.2, 04/30101 | [for reasons other than Condition A], it must be restored to OPERABLE status within 72 hours.With the unit in this condition, the remaining OPERABLE[SSW]subsystem is adequate to perform the heat removal function.However, the overall reliability is reduced because a single failure in the OPERABLE,[SSW]subsystem could result in loss of[SSW]function.The 72 hour Completion Time was developed taking into account the BWRl6 STS B3.7.1-4 Rev.2, 04/30101 | ||
[SSW]System and[UHS]B 3.7.1 BASES ACTIONS (continued) redundant capabilities afforded by the OPERABLE subsystem and the low probability of a DBA occurring during this period.The Required Action is modified by two Notes indicating that the applicable Conditions of LCO 3.8.1,"AC Sources-Operating," and LCO 3.4.9,"Residual Heat Removal (RHR)Shutdown Cooling SystemHot Shutdown," be entered and the Required Actions taken if the Hinoperable | [SSW]System and[UHS]B 3.7.1 BASES ACTIONS (continued) redundant capabilities afforded by the OPERABLE subsystem and the low probability of a DBA occurring during this period.The Required Action is modified by two Notes indicating that the applicable Conditions of LCO 3.8.1,"AC Sources-Operating," and LCO 3.4.9,"Residual Heat Removal (RHR)Shutdown Cooling SystemHot Shutdown," be entered and the Required Actions taken if the Hinoperable | ||
[SSW]subsystem results in an inoperable DG or RHRVISe,..,!":t shutdown cooling, respectively. | [SSW]subsystem results in an inoperable DG or RHRVISe,..,!":t shutdown cooling, respectively. | ||
| Line 1,581: | Line 1,566: | ||
With the[UHS]water source below the minimum level, the affected[SSW]subsystem must be declared inoperable. | With the[UHS]water source below the minimum level, the affected[SSW]subsystem must be declared inoperable. | ||
The 24 hour Frequency is based on operating experience related to trending of the parameter variations during the applicable MODES.][SR 3.7.1.2 This SR verifies the water level[in each[SSW]pump well of the intake structure] | The 24 hour Frequency is based on operating experience related to trending of the parameter variations during the applicable MODES.][SR 3.7.1.2 This SR verifies the water level[in each[SSW]pump well of the intake structure] | ||
to be sufficient for the proper operation of the[SSW]pumps (net positive suction head and pump vortexing are considered in determining this limit).The 24 hour Frequency is based on operating experience related to trending of the parameter variations during the applicable MODES.]BWRl6 STS B3.7.1-5 Rev.2, 04/30101 | to be sufficient for the proper operation of the[SSW]pumps (net positive suction head and pump vortexing are considered in determining this limit).The 24 hour Frequency is based on operating experience related to trending of the parameter variations during the applicable MODES.]BWRl6 STS B3.7.1-5 Rev.2, 04/30101 | ||
[SSW]System and[UHS]B 3.7.1 BASES SURVEILLANCE REQUIREMENTS (continued) | [SSW]System and[UHS]B 3.7.1 BASES SURVEILLANCE REQUIREMENTS (continued) | ||
SR 3.7.1.6 This SR verifies that the automatic isolation of the[SSW]System will automatically switch to the safety or emergency position to provide cooling water exclusively to the safety related equipment during an accident event.This is demonstrated by use of an actual or simulated initiation signal.This SR also verifies the automatic start capability of the[SSW]pump and cooling tower fans in each subsystem. | SR 3.7.1.6 This SR verifies that the automatic isolation of the[SSW]System will automatically switch to the safety or emergency position to provide cooling water exclusively to the safety related equipment during an accident event.This is demonstrated by use of an actual or simulated initiation signal.This SR also verifies the automatic start capability of the[SSW]pump and cooling tower fans in each subsystem. | ||
| Line 1,589: | Line 1,574: | ||
5.FSAR, Chapter[15].6.FSAR, Section[6.2.2.3]. | 5.FSAR, Chapter[15].6.FSAR, Section[6.2.2.3]. | ||
B 3.7.1-7 Rev.2, 04/30101 BWRl6 LCO 3.7.3 CRFA System INSERT 1 Remaining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 5)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.INSERT 2 Therefore, the plant must be brought to a MODE in which the overall plant risk is minimized. | B 3.7.1-7 Rev.2, 04/30101 BWRl6 LCO 3.7.3 CRFA System INSERT 1 Remaining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 5)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.INSERT 2 Therefore, the plant must be brought to a MODE in which the overall plant risk is minimized. | ||
To achieve this status, the plant must be brought to at least MODE 3 within 12 hours.Remaining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 5)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.The allowed Completion Time is reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.INSERT 3 5.NEDC-32988-A, Revision 2, Technical Justification to Support Risk-Informed Modification to Selected Required End States for BWR Plants, December 2002. | To achieve this status, the plant must be brought to at least MODE 3 within 12 hours.Remaining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 5)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.The allowed Completion Time is reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.INSERT 3 5.NEDC-32988-A, Revision 2, Technical Justification to Support Risk-Informed Modification to Selected Required End States for BWR Plants, December 2002. | ||
[CRFA]System 3.7.3 3.7 PLANT SYSTEMS 3.7.3[Control Room Fresh Air (CRFA)]System LCO 3.7.3 APPLICABILITY: | [CRFA]System 3.7.3 3.7 PLANT SYSTEMS 3.7.3[Control Room Fresh Air (CRFA)]System LCO 3.7.3 APPLICABILITY: | ||
ACTIONS Two[CRFA]sUbsystems shall be OPERABLE.-NOTE-The control room boundary may be opened intermittently under administrative control.MODES 1, 2, and 3, During movement of[recently] | ACTIONS Two[CRFA]sUbsystems shall be OPERABLE.-NOTE-The control room boundary may be opened intermittently under administrative control.MODES 1, 2, and 3, During movement of[recently] | ||
irradiated fuel assemblies in the[primary or secondary containment], During operations with a potential for draining the reactor vessel.(OPDRVs).CONDITION REQUIRED ACTION COMPLETION TIME A.One[CRFA]subsystem A.1 Restore[CRFA]7 days inoperable. | irradiated fuel assemblies in the[primary or secondary containment], During operations with a potential for draining the reactor vessel.(OPDRVs).CONDITION REQUIRED ACTION COMPLETION TIME A.One[CRFA]subsystem A.1 Restore[CRFA]7 days inoperable. | ||
subsystem to OPERABLE status.B.Two[CRFA]subsystems | subsystem to OPERABLE status.B.Two[CRFA]subsystems 8.1 Restore control room 24 hours inoperable due to boundary to OPERABLE inoperable control room status.boundary in MODE 1, 2, or 3.C.Required Action and C.1 Be in MODE 3.12 hours Associated Completion Time of Condition A or B AND not met in MODE 1, 2, c/BeinMQ.B6 or 3.BWRl6 STS 3.7.3-1 Rev.2, 04/30101 ACTIONS (continued) | ||
control room 24 hours inoperable due to boundary to OPERABLE inoperable control room status.boundary in MODE 1, 2, or 3.C.Required Action and C.1 Be in MODE 3.12 hours Associated Completion Time of Condition A or B AND not met in MODE 1, 2, c/BeinMQ.B6 or 3.BWRl6 STS 3.7.3-1 Rev.2, 04/30101 ACTIONS (continued) | |||
[CRFA]System 3.7.3 CONDITION REQUIRED ACTION COMPLETION TIME D.Required Action and._-------------------------- | [CRFA]System 3.7.3 CONDITION REQUIRED ACTION COMPLETION TIME D.Required Action and._-------------------------- | ||
associated Completion | associated Completion | ||
| Line 1,610: | Line 1,592: | ||
[recently] | [recently] | ||
irradiated fuel assemblies in the[primary and secondary containment]. | irradiated fuel assemblies in the[primary and secondary containment]. | ||
AND D.2.2 Initiate action to suspend Immediately OPDRVs. E.Two[CRFA]subsystems E.1 inoperable in MODE 1, BeMDOr1, I?-",",OIAJt..(2, or 3 for reasons other than Condition B.BWRl6STS 3.7.3-2 Rev.2, 04/30101 | AND D.2.2 Initiate action to suspend Immediately OPDRVs. E.Two[CRFA]subsystems E.1 inoperable in MODE 1, BeMDOr1, I?-",",OIAJt..(2, or 3 for reasons other than Condition B.BWRl6STS 3.7.3-2 Rev.2, 04/30101 | ||
[CRFA]System B 3.7.3 BASES ACTIONS (continued) relative humidity, and physical security.Preplan ned measures should be available to address these concerns for intentional and unintentional entry into the condition. | [CRFA]System B 3.7.3 BASES ACTIONS (continued) relative humidity, and physical security.Preplan ned measures should be available to address these concerns for intentional and unintentional entry into the condition. | ||
The 24 hour Completion Time is reasonable based on the low probability of a DBA occurring during this time period, and the use of compensatory measures.The 24 hour Completion Time is a typically reasonable time to diagnose, plan and possibly repair, and test most problems with the control room boundary.C.1 01/jOla.,+In MODE 1, 2, or 3, if the inoperable | The 24 hour Completion Time is reasonable based on the low probability of a DBA occurring during this time period, and the use of compensatory measures.The 24 hour Completion Time is a typically reasonable time to diagnose, plan and possibly repair, and test most problems with the control room boundary.C.1 01/jOla.,+In MODE 1, 2, or 3, if the inoperable | ||
| Line 1,620: | Line 1,602: | ||
or during OPDRVs, if the inoperable | or during OPDRVs, if the inoperable | ||
[CRFA]subsystem cannot be restored to OPERABLE status within the required Completion Time, the OPERABLE[CRFA]subsystem may be placed in the isolation mode.This action ensures that the remaining subsystem is OPERABLE, that no failures that would prevent automatic actuation will occur, and that any active failure will be readily detected.Required Action D.1 is modified by a Note alerting the operator to[place the system in the toxic gas protection mode if the toxic gas, automatic transfer capability is inoperable]. | [CRFA]subsystem cannot be restored to OPERABLE status within the required Completion Time, the OPERABLE[CRFA]subsystem may be placed in the isolation mode.This action ensures that the remaining subsystem is OPERABLE, that no failures that would prevent automatic actuation will occur, and that any active failure will be readily detected.Required Action D.1 is modified by a Note alerting the operator to[place the system in the toxic gas protection mode if the toxic gas, automatic transfer capability is inoperable]. | ||
An alternative to Required Action ,0.1 is to immediately suspend activities that present a potential for releasing radioactivity that might require BWRl6 STS B3.7.3-4 Rev.2, 04/30101 | An alternative to Required Action ,0.1 is to immediately suspend activities that present a potential for releasing radioactivity that might require BWRl6 STS B3.7.3-4 Rev.2, 04/30101 | ||
[CRFA]System B 3.7.3 BASES ACTIONS (continued) isolation of the control room.This places the unit in a condition that minimizes risk.If applicable, movement of[recently] | [CRFA]System B 3.7.3 BASES ACTIONS (continued) isolation of the control room.This places the unit in a condition that minimizes risk.If applicable, movement of[recently] | ||
irradiated fuel assemblies in the[primary and secondary containment] | irradiated fuel assemblies in the[primary and secondary containment] | ||
| Line 1,639: | Line 1,621: | ||
SR 3.7.3.2 This SR verifies that the required CRFA testing is performed in accordance with the[Ventilation Filter Testing Program (VFTP)].The[VFTP]includes testing HEPA filter performance, charcoal adsorber efficiency, minimum system flow rate, and the physical properties of the activated charcoal (general use and following specific operations). | SR 3.7.3.2 This SR verifies that the required CRFA testing is performed in accordance with the[Ventilation Filter Testing Program (VFTP)].The[VFTP]includes testing HEPA filter performance, charcoal adsorber efficiency, minimum system flow rate, and the physical properties of the activated charcoal (general use and following specific operations). | ||
Specific test frequencies and additional information are discussed in detail in the[VFTP].SR 3.7.3.3 This SR verifies that each[CRFA]subsystem starts and operates on an actual or simulated initiation signal.The LOGIC SYSTEM FUNCTIONAL TEST in SR 3.3.7.1.5 overlaps this SR to provide complete testing of the safety function.The[18]month Frequency is specified in Reference@ | Specific test frequencies and additional information are discussed in detail in the[VFTP].SR 3.7.3.3 This SR verifies that each[CRFA]subsystem starts and operates on an actual or simulated initiation signal.The LOGIC SYSTEM FUNCTIONAL TEST in SR 3.3.7.1.5 overlaps this SR to provide complete testing of the safety function.The[18]month Frequency is specified in Reference@ | ||
This SR verifies the integrity of the control room enclosure and the assumed inleakage rates of potentially contaminated air.The control room positive pressure, with respect to potentially contaminated adjacent areas, is periodically tested to verify proper function of the[CRFA]System.During the emergency mode of operation, the[CRFA]System is designed to slightly pressurize the control room to[0.1]inches water BWRl6 STS B3.7.3-6 Rev.2, 04/30/01 Ii! | This SR verifies the integrity of the control room enclosure and the assumed inleakage rates of potentially contaminated air.The control room positive pressure, with respect to potentially contaminated adjacent areas, is periodically tested to verify proper function of the[CRFA]System.During the emergency mode of operation, the[CRFA]System is designed to slightly pressurize the control room to[0.1]inches water BWRl6 STS B3.7.3-6 Rev.2, 04/30/01 Ii! | ||
[CRFA]System B 3.7.3 BASES SURVEILLANCE REQUIREMENTS (continued) gauge positive pressure with respect to adjacent areas to prevent unfiltered inleakage. | [CRFA]System B 3.7.3 BASES SURVEILLANCE REQUIREMENTS (continued) gauge positive pressure with respect to adjacent areas to prevent unfiltered inleakage. | ||
The[CRFA]System is designed to maintain this positive pressure at a flow rate of[500]cfm to the control room in the isolation mode.The Frequency of[18]months on a STAGGERED TEST BASIS is consistent with industry practice and other filtration system SRs.REFERENCES 1.FSAR, Section[6.5.1].2.FSAR, Section[9.4.1].3.FSAR, Chapter[6].4.FSAR, Chapter[15].Regulatory Guide 1.52, Rev.[2].BWRl6STS B 3.7.3-7 Rev.2, 04/30101 BWRl6 LCO 3.7.4 Control Room AC System INSERT 1 Remaining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 3)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.INSERT 2 Therefore, the plant must be brought to a MODE in which the overall plant risk is minimized. | The[CRFA]System is designed to maintain this positive pressure at a flow rate of[500]cfm to the control room in the isolation mode.The Frequency of[18]months on a STAGGERED TEST BASIS is consistent with industry practice and other filtration system SRs.REFERENCES 1.FSAR, Section[6.5.1].2.FSAR, Section[9.4.1].3.FSAR, Chapter[6].4.FSAR, Chapter[15].Regulatory Guide 1.52, Rev.[2].BWRl6STS B 3.7.3-7 Rev.2, 04/30101 BWRl6 LCO 3.7.4 Control Room AC System INSERT 1 Remaining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 3)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.INSERT 2 Therefore, the plant must be brought to a MODE in which the overall plant risk is minimized. | ||
To achieve this status, the plant must be brought to at least MODE 3 within 12 hours.Remaining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 3)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.The allowed Completion Time is reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.INSERT 3 3.NEDC-32988-A, Revision 2, Technical Justification to Support Risk-Informed Modification to Selected Required End States for BWR Plants, December 2002.___* | To achieve this status, the plant must be brought to at least MODE 3 within 12 hours.Remaining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 3)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.The allowed Completion Time is reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.INSERT 3 3.NEDC-32988-A, Revision 2, Technical Justification to Support Risk-Informed Modification to Selected Required End States for BWR Plants, December 2002.___* | ||
.. | .. | ||
*I.;'ill | *I.;'ill | ||
[Control Room AC]System 3.7.4 3.7 PLANT SYSTEMS 3.7.4[Control Room Air Conditioning (AC)]System LCO 3.7.4 APPLICABILITY: | [Control Room AC]System 3.7.4 3.7 PLANT SYSTEMS 3.7.4[Control Room Air Conditioning (AC)]System LCO 3.7.4 APPLICABILITY: | ||
ACTIONS Two[control room AC]subsystems shall be OPERABLE.MODES 1, 2, and 3, During movement of[recently] | ACTIONS Two[control room AC]subsystems shall be OPERABLE.MODES 1, 2, and 3, During movement of[recently] | ||
| Line 1,671: | Line 1,653: | ||
or during[recently] | or during[recently] | ||
irradiated fuel OPDRVs.assemblies in the[primary and secondary containment]. | irradiated fuel OPDRVs.assemblies in the[primary and secondary containment]. | ||
AND E.2 Initiate action to suspend Immediately OPDRVs.SURVEILLANCE REQUIREMENTS SR 3.7.4.1 BWRl6 STS SURVEILLANCE Verify each[control roomAC]subsystem has the capability to remove the assumed heat load.3.7.4-2 FREQUENCY[18]months Rev.2, 04/30101 | AND E.2 Initiate action to suspend Immediately OPDRVs.SURVEILLANCE REQUIREMENTS SR 3.7.4.1 BWRl6 STS SURVEILLANCE Verify each[control roomAC]subsystem has the capability to remove the assumed heat load.3.7.4-2 FREQUENCY[18]months Rev.2, 04/30101 | ||
[Control Room AC]System B 3.7.4 BASES ACTIONS (continued) | [Control Room AC]System B 3.7.4 BASES ACTIONS (continued) | ||
B.1@rlm In MODE 1, 2, or 3, if the inoperable | B.1@rlm In MODE 1, 2, or 3, if the inoperable | ||
| Line 1,684: | Line 1,666: | ||
must be suspended immediately. | must be suspended immediately. | ||
Suspension of these activities shall notprecludecompletion of movement of a component to a safe position.Also, if applicable, actions must be initiated immediately to suspend OPDRVs to minimize the probability of a vessel draindown and subsequent potential for fission product release.Actions must continue until the OPDRVs are suspended. | Suspension of these activities shall notprecludecompletion of movement of a component to a safe position.Also, if applicable, actions must be initiated immediately to suspend OPDRVs to minimize the probability of a vessel draindown and subsequent potential for fission product release.Actions must continue until the OPDRVs are suspended. | ||
'BWRl6 STS B3.7.4-3 Rev.2,04/30/01 | 'BWRl6 STS B3.7.4-3 Rev.2,04/30/01 | ||
[Control Room AC]System B 3.7.4 BASES ACTIONS (continued) | [Control Room AC]System B 3.7.4 BASES ACTIONS (continued) | ||
D.1 If both[control room AC]subsystems are inoperable in MODE 1,2, or 3, the[Control Room AC S stem may not be capable of performing the intended function.h[e lae.E.1 and E.2 The Required Actions of Condition E.1 are modified by a Note indicating that LCO 3.0.3 does not apply.If moving[recently] | D.1 If both[control room AC]subsystems are inoperable in MODE 1,2, or 3, the[Control Room AC S stem may not be capable of performing the intended function.h[e lae.E.1 and E.2 The Required Actions of Condition E.1 are modified by a Note indicating that LCO 3.0.3 does not apply.If moving[recently] | ||
Revision as of 05:17, 14 July 2019
| ML032270250 | |
| Person / Time | |
|---|---|
| Issue date: | 08/12/2003 |
| From: | Furio P, Infanger P, Silko T, Wideman S B & W Owners Group, BWR Owners Group, Technical Specifications Task Force, Westinghouse Owners Group |
| To: | Beckner W Division of Regulatory Improvement Programs |
| References | |
| +sunsi/sispmjr=200604, NEDC-32988-A, TSTF-03-02 | |
| Download: ML032270250 (260) | |
Text
{{#Wiki_filter:TSTF TECHNICAL SPEd FICATIONS TASK FORCE A JNT O"WNERS GROUP ACTIVITY Tuesday, August12,2003 TSTF-03-02 Dr.William D.Beckner, Director Operating Reactor Improvements Program Division of Regulatory Improvement Programs Office of Nuclear Reactor Regulation U.S.Nuclear Regulatory Commission Washington, DC 20555-0001
Dear Dr.Beckner:
Enclosed for NRC consideration is Technical Sp Revision 0,"Technical Specifications End States, N Risk Informed Technical Specification Task Fo Required Actions Preferred End States."'Ification Task Force Traveler TSTF-423, C-32988-A." This Traveler supports NEIInitiative 1,"Technical Specification a fee waiver pursuant to the provisions rt NRC generic regulatory improvements ce with 10 CFR l70.11(a)(1)(iii). This gelo on this subject dated January 10,.44C nt Silk'O (BWROG)IIW Patricia Furio (CEOG)Should you have any questions, please do not hesitat 0 contact us.We request that NRC review of the Traveler be gran of 10 CFR 170.11.Specifically, the request is to sup (risk management technical specifications), in accor request is consistent with the NRC letter to A.R.Pie'2003. Steve Wideman (WOG)Enclosure cc: A.R.Pietrangelo, NEI 11921 Rockville Pike, Suite 100, Rockville, MD 20852 Phone: 301-984-4400, Fax: 301-984-7600 Email: tstf@excelservices.com Administered by EXCEL Services Corporation (BWI OWNERS'GROUP V Bee: Steve Wideman (WOG)Patricia FOOo (CEOG)Tom Silko (BWROG)KenPumam(BWROG) Paul Infanger (BWOG)Donald Hoffinan (EXCEL)Brian Mann (EXCEL) TSTF-423, Rev. 0 BWROG-87, Rev. 0 NUREGs Affected: Technical Specifications End States, NEDC-32988-A Technical Specification Task Force Improved Standard Technical Specifications Change Traveler 1430 1431 1432 1433 1434 Classification:
- 1) Technical Change Recommended for CLIIP?:
Industry Contact: Tom Silko, (802) 258-4146, tsilko@entergy.com Yes Correction or Improvement: Improvement See Attached. Revision History Affected Technical Specifications OG Revision 0 Revision Status: Active Original Issue Revision
Description:
Revision Proposed by: BWROG Owners Group Review Information Date Originated by OG: 29-May-03 Owners Group Comments: (No Comments) Date: 21-Jul-03 Owners Group Resolution: Approved TSTF Review Information TSTF Received Date: 23-Jul-03 Date Distributed for Review: 23-Jul-03 TSTF Comments: (No Comments) Date: 08-Aug-03 TSTF Resolution: Approved OG Review Completed: BWOG CEOG WOG BWROG NRC Review Information NRC Received Date: 15-Aug-03 Ref. 3.3.8.2 Bases NUREG(s)- 1433 Only RPS Electric Power Monitorin 11-Aug-03 Traveler Rev. 3. Copyright (C) 2003, EXCEL Services Corporation. Use by EXCEL Services associates, utility clients, and the U.S. Nuclear Regulatory Commission is granted. All other use without written permission is prohibited. TSTF-423, Rev. 0 BWROG-87, Rev. 0 Action 3.3.8.2.C NUREG(s)- 1433 Only RPS Electric Power Monitorin Action 3.3.8.2.C Bases NUREG(s)- 1433 Only RPS Electric Power Monitorin Ref. 3.4.3 Bases NUREG(s)- 1433 Only S/RVs Action 3.4.3.B NUREG(s)- 1433 Only S/RVs Action 3.4.3.B Bases NUREG(s)- 1433 Only S/RVs Action 3.4.3.C NUREG(s)- 1433 Only New Action Change
Description:
S/RVs Action 3.4.3.C Bases NUREG(s)- 1433 Only New Action Change
Description:
S/RVs SR 3.4.3.2 Bases NUREG(s)- 1433 Only S/RVs Ref. 3.5.1 Bases NUREG(s)- 1433 Only ECCS - Operating Action 3.5.1.B NUREG(s)- 1433 Only ECCS - Operating Action 3.5.1.B Bases NUREG(s)- 1433 Only ECCS - Operating Action 3.5.1.E Bases NUREG(s)- 1433 Only ECCS - Operating Action 3.5.1.G NUREG(s)- 1433 Only New Action Change
Description:
ECCS - Operating Action 3.5.1.G NUREG(s)- 1433 Only Renumbered to H and revised Change
Description:
ECCS - Operating Action 3.5.1.G Bases NUREG(s)- 1433 Only Renumbered to H and revised Change
Description:
ECCS - Operating Action 3.5.1.G Bases NUREG(s)- 1433 Only New Action Change
Description:
ECCS - Operating Action 3.5.1.H NUREG(s)- 1433 Only Renumbered to I Change
Description:
ECCS - Operating Action 3.5.1.H Bases NUREG(s)- 1433 Only Renumbered to I Change
Description:
ECCS - Operating Ref. 3.5.3 Bases NUREG(s)- 1433 Only RCIC System Action 3.5.3.B NUREG(s)- 1433 Only RCIC System Action 3.5.3.B Bases NUREG(s)- 1433 Only RCIC System Ref. 3.6.1.1 Bases NUREG(s)- 1433 Only Primary Containment Action 3.6.1.1.B NUREG(s)- 1433 Only Primary Containment 11-Aug-03 Traveler Rev. 3. Copyright (C) 2003, EXCEL Services Corporation. Use by EXCEL Services associates, utility clients, and the U.S. Nuclear Regulatory Commission is granted. All other use without written permission is prohibited. TSTF-423, Rev. 0 BWROG-87, Rev. 0 Action 3.6.1.1.B Bases NUREG(s)- 1433 Only Primary Containment Ref. 3.6.1.6 Bases NUREG(s)- 1433 Only LLS Valves Action 3.6.1.6.B NUREG(s)- 1433 Only LLS Valves Action 3.6.1.6.B Bases NUREG(s)- 1433 Only LLS Valves Action 3.6.1.6.C NUREG(s)- 1433 Only New Action Change
Description:
LLS Valves Action 3.6.1.6.C Bases NUREG(s)- 1433 Only New Action Change
Description:
LLS Valves SR 3.6.1.6.1 Bases NUREG(s)- 1433 Only LLS Valves Ref. 3.6.1.7 Bases NUREG(s)- 1433 Only Reactor Building-to-Suppression Chamber Vacuum Breakers Action 3.6.1.7.D NUREG(s)- 1433 Only New Action Change
Description:
Reactor Building-to-Suppression Chamber Vacuum Breakers Action 3.6.1.7.D NUREG(s)- 1433 Only Renumbered to E Change
Description:
Reactor Building-to-Suppression Chamber Vacuum Breakers Action 3.6.1.7.D Bases NUREG(s)- 1433 Only Renumbered to E Change
Description:
Reactor Building-to-Suppression Chamber Vacuum Breakers Action 3.6.1.7.D Bases NUREG(s)- 1433 Only New Action Change
Description:
Reactor Building-to-Suppression Chamber Vacuum Breakers Action 3.6.1.7.E NUREG(s)- 1433 Only Renumbered to F and Revised Change
Description:
Reactor Building-to-Suppression Chamber Vacuum Breakers Action 3.6.1.7.E Bases NUREG(s)- 1433 Only Renumbered to F and Revised Change
Description:
Reactor Building-to-Suppression Chamber Vacuum Breakers Ref. 3.6.1.8 Bases NUREG(s)- 1433 Only Suppression Chamber-to-Drywell Vacuum Breakers Action 3.6.1.8.B NUREG(s)- 1433 Only New Action Change
Description:
Suppression Chamber-to-Drywell Vacuum Breakers Action 3.6.1.8.B NUREG(s)- 1433 Only Renumbered to C Change
Description:
Suppression Chamber-to-Drywell Vacuum Breakers Action 3.6.1.8.B Bases NUREG(s)- 1433 Only New Action Change
Description:
Suppression Chamber-to-Drywell Vacuum Breakers Action 3.6.1.8.B Bases NUREG(s)- 1433 Only Renumbered to C Change
Description:
Suppression Chamber-to-Drywell Vacuum Breakers Action 3.6.1.8.C NUREG(s)- 1433 Only Renumbered to D and Revised Change
Description:
Suppression Chamber-to-Drywell Vacuum Breakers 11-Aug-03 Traveler Rev. 3. Copyright (C) 2003, EXCEL Services Corporation. Use by EXCEL Services associates, utility clients, and the U.S. Nuclear Regulatory Commission is granted. All other use without written permission is prohibited. TSTF-423, Rev. 0 BWROG-87, Rev. 0 Action 3.6.1.8.C Bases NUREG(s)- 1433 Only Renumbered to D and Revised Change
Description:
Suppression Chamber-to-Drywell Vacuum Breakers Ref. 3.6.1.9 Bases NUREG(s)- 1433 Only MSIV LCS Action 3.6.1.9.C NUREG(s)- 1433 Only MSIV LCS Action 3.6.1.9.C Bases NUREG(s)- 1433 Only MSIV LCS Ref. 3.6.2.3 Bases NUREG(s)- 1433 Only RHR Suppression Pool Cooling Action 3.6.2.3.B NUREG(s)- 1433 Only New Action Change
Description:
RHR Suppression Pool Cooling Action 3.6.2.3.B NUREG(s)- 1433 Only Renumbered to C Change
Description:
RHR Suppression Pool Cooling Action 3.6.2.3.B Bases NUREG(s)- 1433 Only Renumbered to C Change
Description:
RHR Suppression Pool Cooling Action 3.6.2.3.B Bases NUREG(s)- 1433 Only New Action Change
Description:
RHR Suppression Pool Cooling Action 3.6.2.3.C NUREG(s)- 1433 Only Renumbered to D and Revised Change
Description:
RHR Suppression Pool Cooling Action 3.6.2.3.C Bases NUREG(s)- 1433 Only Renumbered to D and Revised Change
Description:
RHR Suppression Pool Cooling SR 3.6.2.3.2 Bases NUREG(s)- 1433 Only RHR Suppression Pool Cooling Ref. 3.6.2.4 Bases NUREG(s)- 1433 Only RHR Suppression Pool Spray Action 3.6.2.4.C NUREG(s)- 1433 Only RHR Suppression Pool Spray Action 3.6.2.4.C Bases NUREG(s)- 1433 Only RHR Suppression Pool Spray SR 3.6.2.4.1 Bases NUREG(s)- 1433 Only RHR Suppression Pool Spray Ref. 3.6.4.1 Bases NUREG(s)- 1433 Only Secondary Containment Action 3.6.4.1.B NUREG(s)- 1433 Only Secondary Containment Action 3.6.4.1.B Bases NUREG(s)- 1433 Only Secondary Containment Ref. 3.6.4.3 Bases NUREG(s)- 1433 Only SGT System Action 3.6.4.3.B NUREG(s)- 1433 Only SGT System Action 3.6.4.3.B Bases NUREG(s)- 1433 Only SGT System Action 3.6.4.3.D NUREG(s)- 1433 Only SGT System 11-Aug-03 Traveler Rev. 3. Copyright (C) 2003, EXCEL Services Corporation. Use by EXCEL Services associates, utility clients, and the U.S. Nuclear Regulatory Commission is granted. All other use without written permission is prohibited. TSTF-423, Rev. 0 BWROG-87, Rev. 0 Action 3.6.4.3.D Bases NUREG(s)- 1433 Only SGT System Ref. 3.7.1 Bases NUREG(s)- 1433 Only RHRSW System Action 3.7.1.D NUREG(s)- 1433 Only Renumbered to E Change
Description:
RHRSW System Action 3.7.1.D NUREG(s)- 1433 Only New Action Change
Description:
RHRSW System Action 3.7.1.D Bases NUREG(s)- 1433 Only Renumbered to E Change
Description:
RHRSW System Action 3.7.1.D Bases NUREG(s)- 1433 Only New Action Change
Description:
RHRSW System Action 3.7.1.E NUREG(s)- 1433 Only Renumbered to F Change
Description:
RHRSW System Action 3.7.1.E Bases NUREG(s)- 1433 Only Renumbered to F Change
Description:
RHRSW System Ref. 3.7.2 Bases NUREG(s)- 1433 Only PSW System and UHS Action 3.7.2.C NUREG(s)- 1433 Only Renumbered to D Change
Description:
PSW System and UHS Action 3.7.2.C NUREG(s)- 1433 Only New Action Change
Description:
PSW System and UHS Action 3.7.2.C Bases NUREG(s)- 1433 Only New Action Change
Description:
PSW System and UHS Action 3.7.2.C Bases NUREG(s)- 1433 Only Renumbered to D Change
Description:
PSW System and UHS Action 3.7.2.D NUREG(s)- 1433 Only Renumbered to E Change
Description:
PSW System and UHS Action 3.7.2.D Bases NUREG(s)- 1433 Only Renumbered to E Change
Description:
PSW System and UHS Action 3.7.2.E NUREG(s)- 1433 Only Renumbered to F Change
Description:
PSW System and UHS Action 3.7.2.E Bases NUREG(s)- 1433 Only Renumbered to F Change
Description:
PSW System and UHS Action 3.7.2.F NUREG(s)- 1433 Only Renumbered to G and Revised Change
Description:
PSW System and UHS Action 3.7.2.F Bases NUREG(s)- 1433 Only Renumbered to G and Revised Change
Description:
PSW System and UHS 11-Aug-03 Traveler Rev. 3. Copyright (C) 2003, EXCEL Services Corporation. Use by EXCEL Services associates, utility clients, and the U.S. Nuclear Regulatory Commission is granted. All other use without written permission is prohibited. TSTF-423, Rev. 0 BWROG-87, Rev. 0 Ref. 3.7.4 Bases NUREG(s)- 1433 Only MCREC System Action 3.7.4.C NUREG(s)- 1433 Only MCREC System Action 3.7.4.C Bases NUREG(s)- 1433 Only MCREC System Action 3.7.4.E NUREG(s)- 1433 Only MCREC System Action 3.7.4.E Bases NUREG(s)- 1433 Only MCREC System SR 3.7.4.3 Bases NUREG(s)- 1433 Only MCREC System Ref. 3.7.5 Bases NUREG(s)- 1433 Only Control Room AC System Action 3.7.5.B NUREG(s)- 1433 Only Control Room AC System Action 3.7.5.B Bases NUREG(s)- 1433 Only Control Room AC System Action 3.7.5.D NUREG(s)- 1433 Only Control Room AC System Action 3.7.5.D Bases NUREG(s)- 1433 Only Control Room AC System Ref. 3.7.6 Bases NUREG(s)- 1433 Only Main Condenser Offgas Action 3.7.6.B NUREG(s)- 1433 Only Main Condenser Offgas Action 3.7.6.B Bases NUREG(s)- 1433 Only Main Condenser Offgas SR 3.8.1 Bases NUREG(s)- 1433 Only AC Sources - Operating Ref. 3.8.1 Bases NUREG(s)- 1433 Only AC Sources - Operating Action 3.8.1.G NUREG(s)- 1433 Only AC Sources - Operating Action 3.8.1.G Bases NUREG(s)- 1433 Only AC Sources - Operating SR 3.8.1.2 Bases NUREG(s)- 1433 Only AC Sources - Operating SR 3.8.1.5 Bases NUREG(s)- 1433 Only AC Sources - Operating SR 3.8.1.6 Bases NUREG(s)- 1433 Only AC Sources - Operating SR 3.8.1.9 Bases NUREG(s)- 1433 Only AC Sources - Operating SR 3.8.1.10 Bases NUREG(s)- 1433 Only AC Sources - Operating SR 3.8.1.11 Bases NUREG(s)- 1433 Only AC Sources - Operating SR 3.8.1.14 Bases NUREG(s)- 1433 Only AC Sources - Operating SR 3.8.1.15 Bases NUREG(s)- 1433 Only AC Sources - Operating SR 3.8.1.16 Bases NUREG(s)- 1433 Only AC Sources - Operating 11-Aug-03 Traveler Rev. 3. Copyright (C) 2003, EXCEL Services Corporation. Use by EXCEL Services associates, utility clients, and the U.S. Nuclear Regulatory Commission is granted. All other use without written permission is prohibited. TSTF-423, Rev. 0 BWROG-87, Rev. 0 SR 3.8.1.17 Bases NUREG(s)- 1433 Only AC Sources - Operating SR 3.8.1.18 Bases NUREG(s)- 1433 Only AC Sources - Operating SR 3.8.1.20 Bases NUREG(s)- 1433 Only AC Sources - Operating Ref. 3.8.4 Bases NUREG(s)- 1433 Only DC Sources - Operating Action 3.8.4.D NUREG(s)- 1433 Only DC Sources - Operating Action 3.8.4.D Bases NUREG(s)- 1433 Only DC Sources - Operating SR 3.8.4.1 Bases NUREG(s)- 1433 Only DC Sources - Operating SR 3.8.4.2 Bases NUREG(s)- 1433 Only DC Sources - Operating SR 3.8.4.3 Bases NUREG(s)- 1433 Only DC Sources - Operating Ref. 3.8.7 Bases NUREG(s)- 1433 Only Inverters - Operating Action 3.8.7.B NUREG(s)- 1433 Only Inverters - Operating Action 3.8.7.B Bases NUREG(s)- 1433 Only Inverters - Operating Ref. 3.8.9 NUREG(s)- 1433 Only Distribution Systems - Operating Action 3.8.9.D NUREG(s)- 1433 Only Distribution Systems - Operating Action 3.8.9.D NUREG(s)- 1433 Only Distribution Systems - Operating Ref. 3.3.8.2 Bases NUREG(s)- 1434 Only RPS Electric Power Monitoring Action 3.3.8.2.C NUREG(s)- 1434 Only RPS Electric Power Monitoring Action 3.3.8.2.C Bases NUREG(s)- 1434 Only RPS Electric Power Monitoring SR 3.3.8.2.1 Bases NUREG(s)- 1434 Only RPS Electric Power Monitoring Ref. 3.4.4 Bases NUREG(s)- 1434 Only S/RVs Action 3.4.4.B NUREG(s)- 1434 Only S/RVs Action 3.4.4.B Bases NUREG(s)- 1434 Only S/RVs Action 3.4.4.C NUREG(s)- 1434 Only New Action Change
Description:
S/RVs Action 3.4.4.C Bases NUREG(s)- 1434 Only New Action Change
Description:
S/RVs Ref. 3.5.1 Bases NUREG(s)- 1434 Only ECCS - Operating Action 3.5.1.D NUREG(s)- 1434 Only ECCS - Operating 11-Aug-03 Traveler Rev. 3. Copyright (C) 2003, EXCEL Services Corporation. Use by EXCEL Services associates, utility clients, and the U.S. Nuclear Regulatory Commission is granted. All other use without written permission is prohibited. TSTF-423, Rev. 0 BWROG-87, Rev. 0 Action 3.5.1.D Bases NUREG(s)- 1434 Only ECCS - Operating Action 3.5.1.E Bases NUREG(s)- 1434 Only ECCS - Operating Action 3.5.1.G NUREG(s)- 1434 Only ECCS - Operating Action 3.5.1.G Bases NUREG(s)- 1434 Only ECCS - Operating SR 3.5.1.3 Bases NUREG(s)- 1434 Only ECCS - Operating Ref. 3.6.1.1 Bases NUREG(s)- 1434 Only Primary Containment Action 3.6.1.1.B NUREG(s)- 1434 Only Primary Containment Action 3.6.1.1.B Bases NUREG(s)- 1434 Only Primary Containment SR 3.6.1.1.2 Bases NUREG(s)- 1434 Only Primary Containment Ref. 3.6.1.6 Bases NUREG(s)- 1434 Only LLS Valves Action 3.6.1.6.B NUREG(s)- 1434 Only LLS Valves Action 3.6.1.6.B NUREG(s)- 1434 Only LLS Valves Action 3.6.1.6.C NUREG(s)- 1434 Only New Action Change
Description:
LLS Valves Action 3.6.1.6.C Bases NUREG(s)- 1434 Only New Action Change
Description:
LLS Valves SR 3.6.1.6.1 Bases NUREG(s)- 1434 Only LLS Valves Ref. 3.6.1.7 Bases NUREG(s)- 1434 Only RHR Containment Spray System Action 3.6.1.7.C NUREG(s)- 1434 Only RHR Containment Spray System Action 3.6.1.7.C Bases NUREG(s)- 1434 Only RHR Containment Spray System SR 3.6.1.7.2 Bases NUREG(s)- 1434 Only RHR Containment Spray System Ref. 3.6.1.8 Bases NUREG(s)- 1434 Only PVLCS Action 3.6.1.8.C NUREG(s)- 1434 Only PVLCS Action 3.6.1.8.C Bases NUREG(s)- 1434 Only PVLCS Ref. 3.6.1.9 Bases NUREG(s)- 1434 Only MSIV LCS Action 3.6.1.9.C NUREG(s)- 1434 Only MSIV LCS Action 3.6.1.9.C Bases NUREG(s)- 1434 Only MSIV LCS Ref. 3.6.2.3 Bases NUREG(s)- 1434 Only RHR Suppression Pool Cooling 11-Aug-03 Traveler Rev. 3. Copyright (C) 2003, EXCEL Services Corporation. Use by EXCEL Services associates, utility clients, and the U.S. Nuclear Regulatory Commission is granted. All other use without written permission is prohibited. TSTF-423, Rev. 0 BWROG-87, Rev. 0 Action 3.6.2.3.B NUREG(s)- 1434 Only Renumbered to C Change
Description:
RHR Suppression Pool Cooling Action 3.6.2.3.B NUREG(s)- 1434 Only New Action Change
Description:
RHR Suppression Pool Cooling Action 3.6.2.3.B NUREG(s)- 1434 Only New Action Change
Description:
RHR Suppression Pool Cooling Action 3.6.2.3.B Bases NUREG(s)- 1434 Only Renumbered to C Change
Description:
RHR Suppression Pool Cooling Action 3.6.2.3.C NUREG(s)- 1434 Only Renumbered to D and Revised Change
Description:
RHR Suppression Pool Cooling Action 3.6.2.3.C Bases NUREG(s)- 1434 Only Renumbered to D and Revised Change
Description:
RHR Suppression Pool Cooling SR 3.6.2.3.2 Bases NUREG(s)- 1434 Only RHR Suppression Pool Cooling Ref. 3.6.4.1 Bases NUREG(s)- 1434 Only Secondary Containment Action 3.6.4.1.B NUREG(s)- 1434 Only Secondary Containment Action 3.6.4.1.B Bases NUREG(s)- 1434 Only Secondary Containment Ref. 3.6.4.3 Bases NUREG(s)- 1434 Only SGT System Action 3.6.4.3.B NUREG(s)- 1434 Only SGT System Action 3.6.4.3.B Bases NUREG(s)- 1434 Only SGT System Action 3.6.4.3.D NUREG(s)- 1434 Only SGT System Action 3.6.4.3.D Bases NUREG(s)- 1434 Only SGT System Ref. 3.6.5.6 Bases NUREG(s)- 1434 Only Drywell Vacuum Relief System Action 3.6.5.6.D NUREG(s)- 1434 Only Renumbered to E Change
Description:
Drywell Vacuum Relief System Action 3.6.5.6.D NUREG(s)- 1434 Only New Action Change
Description:
Drywell Vacuum Relief System Action 3.6.5.6.D Bases NUREG(s)- 1434 Only Renumbered to E Change
Description:
Drywell Vacuum Relief System Action 3.6.5.6.D Bases NUREG(s)- 1434 Only New Action Change
Description:
Drywell Vacuum Relief System Action 3.6.5.6.E NUREG(s)- 1434 Only Renumbered to F Change
Description:
Drywell Vacuum Relief System 11-Aug-03 Traveler Rev. 3. Copyright (C) 2003, EXCEL Services Corporation. Use by EXCEL Services associates, utility clients, and the U.S. Nuclear Regulatory Commission is granted. All other use without written permission is prohibited. TSTF-423, Rev. 0 BWROG-87, Rev. 0 Action 3.6.5.6.E Bases NUREG(s)- 1434 Only Renumbered to F Change
Description:
Drywell Vacuum Relief System Action 3.6.5.6.F NUREG(s)- 1434 Only Renumbered to G and Revised Change
Description:
Drywell Vacuum Relief System Action 3.6.5.6.F Bases NUREG(s)- 1434 Only Renumbered to G and Revised Change
Description:
Drywell Vacuum Relief System Action 3.6.5.6.G NUREG(s)- 1434 Only Renumbered to H Change
Description:
Drywell Vacuum Relief System Action 3.6.5.6.G Bases NUREG(s)- 1434 Only Renumbered to H Change
Description:
Drywell Vacuum Relief System Ref. 3.7.1 Bases NUREG(s)- 1434 Only SSW System and UHS Action 3.7.1.B NUREG(s)- 1434 Only Renumbered to D Change
Description:
SSW System and UHS Action 3.7.1.B Bases NUREG(s)- 1434 Only Renumbered to D Change
Description:
SSW System and UHS Action 3.7.1.C NUREG(s)- 1434 Only Renumbered to B Change
Description:
SSW System and UHS Action 3.7.1.C NUREG(s)- 1434 Only New Action Change
Description:
SSW System and UHS Action 3.7.1.C Bases NUREG(s)- 1434 Only New Action Change
Description:
SSW System and UHS Action 3.7.1.C Bases NUREG(s)- 1434 Only Renumbered to B Change
Description:
SSW System and UHS Action 3.7.1.D NUREG(s)- 1434 Only Renumbered to E Change
Description:
SSW System and UHS Action 3.7.1.D Bases NUREG(s)- 1434 Only Renumbered to E Change
Description:
SSW System and UHS Ref. 3.7.3 Bases NUREG(s)- 1434 Only CRFA System Action 3.7.3.C NUREG(s)- 1434 Only CRFA System Action 3.7.3.C Bases NUREG(s)- 1434 Only CRFA System Action 3.7.3.E NUREG(s)- 1434 Only CRFA System Action 3.7.3.E Bases NUREG(s)- 1434 Only CRFA System SR 3.7.3.3 Bases NUREG(s)- 1434 Only CRFA System Ref. 3.7.4 Bases NUREG(s)- 1434 Only Control Room AC System 11-Aug-03 Traveler Rev. 3. Copyright (C) 2003, EXCEL Services Corporation. Use by EXCEL Services associates, utility clients, and the U.S. Nuclear Regulatory Commission is granted. All other use without written permission is prohibited. TSTF-423, Rev. 0 BWROG-87, Rev. 0 Action 3.7.4.B NUREG(s)- 1434 Only Control Room AC System Action 3.7.4.B Bases NUREG(s)- 1434 Only Control Room AC System Action 3.7.4.D NUREG(s)- 1434 Only Control Room AC System Action 3.7.4.D Bases NUREG(s)- 1434 Only Control Room AC System Ref. 3.7.5 Bases NUREG(s)- 1434 Only Main Condenser Offgas Action 3.7.5.B NUREG(s)- 1434 Only Main Condenser Offgas Action 3.7.5.B Bases NUREG(s)- 1434 Only Main Condenser Offgas SR 3.8.1 Bases NUREG(s)- 1434 Only AC Sources - Operating Ref. 3.8.1 Bases NUREG(s)- 1434 Only AC Sources - Operating Action 3.8.1.G NUREG(s)- 1434 Only AC Sources - Operating Action 3.8.1.G Bases NUREG(s)- 1434 Only AC Sources - Operating SR 3.8.1.2 Bases NUREG(s)- 1434 Only AC Sources - Operating SR 3.8.1.5 Bases NUREG(s)- 1434 Only AC Sources - Operating SR 3.8.1.6 Bases NUREG(s)- 1434 Only AC Sources - Operating SR 3.8.1.9 Bases NUREG(s)- 1434 Only AC Sources - Operating SR 3.8.1.10 Bases NUREG(s)- 1434 Only AC Sources - Operating SR 3.8.1.11 Bases NUREG(s)- 1434 Only AC Sources - Operating SR 3.8.1.14 Bases NUREG(s)- 1434 Only AC Sources - Operating SR 3.8.1.15 Bases NUREG(s)- 1434 Only AC Sources - Operating SR 3.8.1.16 Bases NUREG(s)- 1434 Only AC Sources - Operating SR 3.8.1.17 Bases NUREG(s)- 1434 Only AC Sources - Operating SR 3.8.1.18 Bases NUREG(s)- 1434 Only AC Sources - Operating SR 3.8.1.20 Bases NUREG(s)- 1434 Only AC Sources - Operating Ref. 3.8.4 Bases NUREG(s)- 1434 Only DC Sources - Operating Action 3.8.4.D NUREG(s)- 1434 Only New Action Change
Description:
DC Sources - Operating Action 3.8.4.D NUREG(s)- 1434 Only Renumbered to E Change
Description:
DC Sources - Operating 11-Aug-03 Traveler Rev. 3. Copyright (C) 2003, EXCEL Services Corporation. Use by EXCEL Services associates, utility clients, and the U.S. Nuclear Regulatory Commission is granted. All other use without written permission is prohibited. TSTF-423, Rev. 0 BWROG-87, Rev. 0 Action 3.8.4.D Bases NUREG(s)- 1434 Only New Action Change
Description:
DC Sources - Operating Action 3.8.4.D Bases NUREG(s)- 1434 Only Renumbered to E Change
Description:
DC Sources - Operating Action 3.8.4.E NUREG(s)- 1434 Only Renumbered to F and Revised Change
Description:
DC Sources - Operating Action 3.8.4.E Bases NUREG(s)- 1434 Only Renumbered to F and Revised Change
Description:
DC Sources - Operating SR 3.8.4.1 Bases NUREG(s)- 1434 Only DC Sources - Operating SR 3.8.4.2 Bases NUREG(s)- 1434 Only DC Sources - Operating SR 3.8.4.3 Bases NUREG(s)- 1434 Only DC Sources - Operating Ref. 3.8.7 Bases NUREG(s)- 1434 Only Inverters - Operating Action 3.8.7.B NUREG(s)- 1434 Only Renumbered to C Change
Description:
Inverters - Operating Action 3.8.7.B NUREG(s)- 1434 Only New Action Change
Description:
Inverters - Operating Action 3.8.7.B Bases NUREG(s)- 1434 Only Renumbered to C Change
Description:
Inverters - Operating Action 3.8.7.B Bases NUREG(s)- 1434 Only New Action Change
Description:
Inverters - Operating Action 3.8.7.C NUREG(s)- 1434 Only Renumbered to D and Revised Change
Description:
Inverters - Operating Action 3.8.7.C Bases NUREG(s)- 1434 Only Renumbered to D and Revised Change
Description:
Inverters - Operating Ref. 3.8.9 Bases NUREG(s)- 1434 Only Distribution Systems - Operating Action 3.8.9.D NUREG(s)- 1434 Only Distribution Systems - Operating Action 3.8.9.D Bases NUREG(s)- 1434 Only Distribution Systems - Operating 11-Aug-03 Traveler Rev. 3. Copyright (C) 2003, EXCEL Services Corporation. Use by EXCEL Services associates, utility clients, and the U.S. Nuclear Regulatory Commission is granted. All other use without written permission is prohibited. TSTF-423 1.0 Description Topical Report NEDC -32988-A, "Technical Justification to Support Risk -Informed Modification to Selected Required Action End States for BWR Plants," Revision 2, December 2002, (Reference 1) justified modifying the Technical Specifications e nd state for selected Required Actions in NUREG -1433 , "Standard Technical Specifications for BWR/4 Plants," and NUREG -1434 , "Standard Technical Specifications for BWR/6 Plants ." These Required Actions are modified to allow the plant to stay in MODE 3. Th e Topical Report was approved in a letter from the NRC to Jack Gray, Chairman of the BWR Owners Group, dated September 27, 2002, entitled, "Safety Evaluation of Topical Report NEDC -32988, Rev. 2, 'Technical Justification to Support Risk -Informed Modificati on to Selected Required Action End States fo r BWR Plants,' (TAC No. MB1054) " (Reference 2). This Traveler implements the changes justified in the Topical Report and approved in the Safety
Evaluation. 2.0 Proposed Change The Topical Report and Safety Eva luation describe changes to 22 Technical Specifications in NUREG-1433, which appl y to BWR/4 plants, and 20 Technical Specifications in NUREG -1434, which appl y to BWR/6 plants. The affected Specifications are listed in Table 1. Appropriate Bases changes a re also made to reflect the changes to the Specifications. As new references are added to the Bases, existing references are renumbered as necessary so
that the numeric order of the references in the "References" subsection matches the order of their
disc ussion in the text. This is consistent with Section 4.2.1.g of NEI 01 -03, "Writer's Guide for the Improved Standard Technical Specifications."
3.0 Background
NEDC-32988-A justified the modification of 42 Technical Specification s Required Action end stat es. The modified end states allow the plant to remain in MODE 3 instead of going to MODE 4 or to MODE 3 with steam dome pressure £ 150 psig. 4.0 Technical Analysis The Topical Report provides a systematic review of the risks associated with all Required
Actions in Technical Specifications ending in placing the unit in cold shutdown (MODE 4). Cold shutdown is normally required when an inoperable system or train cannot be restored to an OPERABLE status within the allowed time. However, g oing to cold shutdown results in the loss of steam-driven core cooling systems, challenges the shutdown heat removal systems, and requires restarting the plant over a greater range of plant conditions. A more preferred operational MODE is one that maintains adequate risk levels while repairs are completed without causing unnecessary challenges to plant equipment during shutdown and startup transitions. Th e Topical Report analysis considered hot shutdown (MODE 3) as a preferred alternative to cold shutdown.
TSTF-423 The risks during the two MODES of operation were evaluated using the Probabilistic Safety Analysis (PSA) for a typical BWR -4 plant, but the results are applicable for all the BWR models (BWR-2 through 6). The plant -specific PSA model was modified to evaluate the core damage frequency (CDF) during MODE 3 and MODE 4 operations. This allowed a comparison of the risks between the two shutdown MODES for va rious inoperable conditions specified in Technical Specifications. In addition to the quantitative analysis, the two MODES of operation were evaluated based on defense -in-depth considerations. The Topical Report demonstrates that , for the modified condit ions, remaining in MODE 3 is appropriate for the primary purpose of performing the short-duration repairs needed to correct the failure which necessitated exiting the original operating MODE. In response to the S taffs' questions, the BWROG stated that "The BWRs are most likely to stay in hot shutdown for no more than 2 to 3 days and definitely, not more than a week." In the Safety Evaluation, the staff stated that they expect that the licensees will follow this guidance. The proposed changes to NUREG -1433 and NUREG -1434 are consistent with the justification presented in the Topical Report as approved by the Safety Evaluation. In some cases, there are editorial differences between the changes described in the Topical Report and Safety Evaluation
and the ch anges made to NUREG -1433 and NUREG -1434. These differences are described in Notes to Table 1. In all cases, the changes made to NUREG -1433 and NUREG -1434 are consistent with the justification presented in the Topical Report and the approval in the Safety Evaluation. The letter transmitting the Safety Evaluation (Reference 2) states, "Licensees requesting a
license amendment to revise their end states must include in their amendment requests plant -specific information addressing the stipulations identifie d in Section 7.0 of the SE." These stipulations have been addressed in this Traveler as discussed in Table 2. 5.0 Regulatory Analysis 5.1 No Significant Hazards Consideration The T echnical Specification Task Force (TSTF) has evaluated whether or not a significant hazards consideration is involved with the proposed generic change by focusing on the three standards set forth in 10 CFR 50.92, "Issuance of amendment," as discussed below:
- 1. Does the proposed change involve a significant increase in the probab ility or consequences of an accident previously evaluated?
Response: No. Required Actions are not an initiator of any accident previously evaluated . Therefore, the proposed changes do not affect the probability of any accident previously evaluated. NED C-32988-A demonstrated that the proposed changes in the required end state do not significantly increase the consequences of any accidents previously evaluated.
TSTF-423 Therefore, it is concluded that this change does not significantly increase the probability or consequences of an accident previously evaluated.
- 2. Does the proposed change create the possibility of a new or different kind of accident from any accident previously evaluated?
Response: No. The changes do not involve a physical alteration of the plant (i.e., no new or different type of equipment will be installed) or a change in the methods governing normal plant operation. In addition, the changes do not impose any significant new or different requirements. The changes do not alter assumptions made in the safety analysis. Therefore, the possibility of a new or different kind of accident from any accident
previously evaluated is not created.
- 3. Does the proposed change involve a significant reduction in a margin of safety?
Response: No. NEDC-32988-A demonstrated that the changed end states represent a condition of equal or lower risk than the original end states. Therefore, it is concluded that this change does not involve a significant reduction in the
margin of safet
- y. Based on the above, the TS TF concludes that the proposed change presents no significant hazards considerations under the standards set forth in 10 CFR 50.92(c), and, accordingl y , a finding of "no significant hazards consideration" is justified.
5.2 Applicable Regulatory Requireme nts/Criteria Required Actions are not specified by any regulatory requirement or criteria. The Limiting
Conditions for Operation, which are based on accident analysis assumptions and regulatory
requirements , are not affected by this change. Therefore, n o regulatory requirements or criteria are affected by this change. In conclusion, based on the considerations discussed above, (1) there is reasonable assurance that
the health and safety of the public will not be endangered by operation in the proposed m anner, (2) such activities will be conducted in compliance with the Commission's regulations, and (3) the approval of the proposed change will not be inimical to the common defense and security or
to the health and safety of the public.
TSTF-423 6.0 Environmental Consideration A review has determined that the proposed change would not change a requirement with respect
to installation or use of a facility component located within the restricted area, as defined in 10
CFR 20, or would not change an inspection or su rveillance requirement. The proposed change does not involve (i) a significant hazards consideration, (ii) a significant change in the types or significant increase in the amounts of any effluent that may be released offsite, or (iii) a
significant increa se in individual or cumulative occupational radiation exposure. Accordingly, the proposed change meets the eligibility criterion for categorical exclusion set forth in 10 CFR 51.22(c)(9). Therefore, pursuant to 10 CFR 51.22(b), no environmental impact st atement or environmental assessment need be prepared in connection with the proposed change. 7.0 References
- 1. Topical Report NEDC
-32988-A, "Technical Justification to Support Risk -Informed Modification to Selected Required Action End States for BWR Plants," Revision 2, December 2002 . 2. Letter from the NRC to Jack Gray, Chairman of the BWR Owners Group, dated September 27, 2002, entitled, "Safety Evaluation of Topical Report NEDC -32988, Rev. 2, 'Technical Justification to Support Risk -Informed Modification to Selected Required Action End States for BWR Plants,' (TAC No. MB1054)."
TSTF-423 Table 1 Deviation from the Topical Report or Safety Evaluation Design Specification Title Topical Report Section Safety Evaluation Section Deviations from the Topical Report or Saf ety Evaluation BWR/4 3.3.8.2 RPS Elect ric Power Monitoring 4.5.1.1 6.5 None BWR/4 3.4.3 Safety / Relief Valves 4.5.1.2 6.1 None BWR/4 3.5.1 ECCS - Operating 4.5.1.3 6.2 None BWR/4 3.5.3 RCIC System 4.5.1.4 6.3 None BWR/4 3.6.1.1 Primary Containment 4.5.1.5 6.10 See Note 1
- 1. BWR/4 3.6.1.6 LLS Valves 4.5.1.6 6.4 None BWR/4 3.6.1.7 Reactor Building
-to-Suppression Chamber Vacuum
Breakers 4.5.1.7 6.11 See Note 1 . BWR/4 3.6.1.8 Suppression Chamber-to-Drywell Vacuum Breakers 4.5.1.8 6.12 See Note 1 . BWR/4 3.6.1.9 MSIV LCS 4.5.1.9 6.13 None BWR/4 3.6.2.3 RHR Suppression Pool Cooling 4.5.1.10 6.24 See Note 1
- 0. BWR/4 3.6.2.4 RHR Suppression Pool Spray 4.5.1.11 6.14 None BWR/4 3.6.4.1 Secondary Containment 4.5.1.12 6.15 See Note 11.
BWR/4 3.6.4.3 SGT Syste m 4.5.1.13 6.16 None BWR/4 3.7.1 RHRSW System 4.5.1.14 6.17 None BWR/4 3.7.2 PSW System and UHS 4.5.1.15 6.18 See Note s 1 and 2. BWR/4 3.7.4 MCREC System 4.5.1.16 6.19 See Note 3. BWR/4 3.7.5 Control Room AC System 4.5.1.17 6.20 None BWR/4 3.7.6 Mai n Condenser Offgas 4.5.1.18 6.21 See Note 4. BWR/4 3.8.1 AC Sources - Operating 4.5.1.19 6.6 None BWR/4 3.8.4 DC Sources - Operating 4.5.1.20 6.7 See Note 5. BWR/4 3.8.7 Inverters - Operating 4.5.1.21 6.8 None BWR/4 3.8.9 Distribution Systems - Operati ng 4.5.1.22 6.9 None TSTF-423 Design Specification Title Topical Report Section Safety Evaluation Section Deviations from the Topical Report or Saf ety Evaluation BWR/6 3.3.8.2 RPS Electric Power Monitoring 4.5.2.1 6.5 None BWR/6 3.4.4 Safety / Relief Valves 4.5.2.2 6.1 None BWR/6 3.5.1 ECCS - Operating 4.5.2.3 6.2 None BWR/6 3.6.1.1 Primary Containment 4.5.2.4 6.10 See Note 1
- 1. BWR/6 3.6.1.6 LLS Valves 4.5.2.5 6.4 None BWR/6 3.6.1.7 RHR Containment Spray 4.5.2.6 6.22 None BWR/6 3.6.1.8 Penetration Valve Leakage Control
System 4.5.2.7 6.23 None BWR/6 3.6.1.9 MSIV LCS 4.5.2.8 6.13 None BWR/6 3.6.2.3 RHR Suppression Pool Cooling 4.5.2.9 6.24 See Note 6. BWR/6 3.6.4.1 Secondary Containment 4.5.2.10 6.15 See Note 1
- 1. BWR/6 3.6.4.3 SGT System 4.5.2.11 6.16 None BWR/6 3.6.5.6 Drywell Vacuum Relief System 4.5.2.12 6.25 See Note 1.
BWR/6 3.7.1 SSW System and UHS 4.5.2.13 6.26 See Note 7. BWR/6 3.7.3 CRFA System 4.5.2.14 6.27 See Note 8. BWR/6 3.7.4 CRAC System 4.5.2.15 6.28 None BWR/6 3.7.5 Main Condenser Offgas 4.5.2.16 6.29 See Note 4. BWR/6 3.8.1 AC Sources - Operating 4.5.2.17 6.6 None BWR/6 3.8.4 DC Sources - Operating 4.5.2.18 6.7 S ee Note 9. BWR/6 3.8.7 Inverters - Operating 4.5.2.19 6.8 None BWR/6 3.8.9 Distribution Systems - Operating 4.5.2.20 6.9 None Notes: 1) The order of the Conditions is changed from that described in the Topical Report and S afety Evaluation. According t o NEI 01-03, Writer's Guide for the ISTS, Section 4.1.6.i.5, Conditions stating "Required Action and associated Completion Time not met," should follow after the last Condition to which it applies. Therefore, the new MODE 3 End State Condition is inserted after the applicable Condition and the subseq uent Conditions are renumbered. This does not affect the justification.
TSTF-423 2) The changes described in the Topical Report and the Safety Evaluation are based on Revision 1 of NUREG -1433. In Revision 2, there is an additional Action (Action D). This additional Action does not affect the justification, but does aff ect the numbering of the Actions that are revised. 3) The changes described in the Topical Report and the Safety Evaluation are based on Revision 1 of NUREG-1433. In Revision 2, there is an additional Action (Action B). This Action applies when two MCREC subsystems are inoperable due to an inoperable control room boundary in MODE 1, 2, or 3. Since the Topical Report an d the Safety Evaluation justify remaining in MODE 3 when two MCREC subsystems are inoperable for any reason, the MODE 3 end state also is applied to not meeting the Required Action and associated Completion Times of Condition B.
- 4) No deviations from the Topical Report or the S afety E valuation. However, deletion of Required Action B.3.2 necessitates the additional change of renaming Required Action B.3.1 to B.3. 5) The changes described in the Topical Report and the Safety Evaluation are based on Revision 1 of NUREG
-1433. In Revisi on 2, Condition A (one DC electrical power subsystem inoperable) is divided into three Conditions (A - one or two battery chargers in one division inoperable, B - one or two batteries on one division inoperable, and C - one DC electrical power subsystems i noperable for reasons other than Condition A or B). Since the Topical Report and the Safety Evaluation justify remaining in MODE 3 when one DC electrical power subsystem is inoperable for any reason, the MODE 3 end state is applied to not
meeting the Requ ired Action and associated Completion Time of Condition A, B, or C. 6) The changes described in the Topical Report and the Safety Evaluation are based on Revision 1 of NUREG -143 4. Condition A applies on one inoperable RHR suppression pool cooling subsy stem and Condition B applies to two inoperable subsystems. Condition C applies when the Required Actions and associated Completion Times are not met. Therefore, the changes corresponding to the justification given in the Topical and the Safety Evaluation are the addition of a new Condition B which applies when the Required Actions and associated Completion Time of Condition A are not met. Condition B requires being in MODE 3 in 12
hours. Condition C (now D) is modified to only apply to two inoperable RH R suppression pool cooling subsystems (now Condition C). These changes do not affect the justification.
- 7) The changes described in the Topical Report and the Safety Evaluation are based on Revision 1 of NUREG
-143 4. In Revision 2, there is a new Conditi on B which applies when the UHS temperature is water temperature is > 90 °F and less than a plant -specific limit. In order to implement the end state change and follow the guidance in NEI 01 -03, Condition B is moved to Condition D and Condition C is moved to Condition B. A new Condition C is added which applies when the Required Action and associated Completion Time of Condition A or B are not met. This change does not affect the justification.
- 8) The changes described in the Topical Report and the Safet y Evaluation are based on Revision 1 of NUREG
-1434. In Revision 2, there is an additional Action (Action B). This Action TSTF-423 applies when two CRFA subsystems are inoperable due to an inoperable control room boundary in MODE 1, 2, or 3. Since the Topical Rep ort and the Safety Evaluation justify remaining in MODE 3 when two CRFA subsystems are inoperable for any reason, the MODE 3 end state is applied to not meeting the Required Action and associated Completion
Times of Condition B.
- 9) The changes described i n the Topical Report and the Safety Evaluation are based on Revision 1 of NUREG
-143 4. In Revision 2, Condition A (Division 1 or 2 DC electrical power subsystem inoperable) is divided into three Conditions (A - one or two battery chargers in one division i noperable, B - one or two batteries on one division inoperable, and C - one Division 1 or 2 DC electrical power subsystems inoperable for reasons other than Condition A or B). Since the Topical Report and the Safety Evaluation justify remaining in MODE 3
when one Division 1 or 2 DC electrical power subsystem is inoperable for any reason, the
MODE 3 end state is applied to not meeting the Required Action and associated Completion
Times of Condition A, B, or C. Modifications are made to apply the MODE 4 end state to a Division 3 DC electrical power subsystem inoperable for any reason. This presentation is consistent with the justification in the Topical Report and the Safety Evaluation.
- 10) The changes described in the Topical Report and the Safety Evaluat ion are based on Revision 1 of NUREG
-1433. In Revision 2, there is an additional Action (Action B). This additional Action does not affect the justification, but does affect the numbering of the Actions that are revised. 11) The Safety Evaluation findin g for these changes referenced the availability of other systems to maintain defense in depth. These specific references to the availability of other systems are not included in the Traveler. The purpose of the new MODE 3 end state is to allow for
perfor mance of maintenance to restore the inoperable system or component. For this situation, 10 CFR 50.65(a)(4) requires that risk impacts of maintenance activity be assessed and managed, and this assessment includes consideration of both the system or compone nt undergoing maintenance and other systems that may be inoperable. Guidance for 10 CFR 50.65(a)(4) risk assessments is provided in Regulatory Guide 1.182, "Assessing and
Managing Risk Before Maintenance Activities at Nuclear Power Plants," which endorses the guidance in Section 11 of NUMARC 93 -01, "Industry Guideline for Monitoring the Effectiveness of Maintenance at Nuclear Power Plants." Since application of 10 CFR 50.65(a)(4) risk assessments include consideration of the system undergoing maintenance
and the operability of other systems, it is not necessary to explicitly reference the other
systems referenced in the SER.
TSTF-423 Table 2 Implementation of Section 7.0 Stipulations from the Safety Evaluation Section 7.0 of the Safety Evaluation, "Commitments N eed ed to Implement the TSs Related to Topical Report NEDC -32988," state s , Any licensee requesting the TS changes to operate a plant in accordance with this BWROG topical report, must commit to implement the following stipulations in the TS or
its associa ted Bases. The following stipulations assure that the implementation of this topical report will be consistent with staff 's safety evaluation: Each of the stipulations provided in the Safety Evaluation will be implemented by licensees
requesting to adopt the Traveler. However, as discussed below, the Technical Specifications or Bases are not always the appropriate documents to implement the stipulations. The implementation of each of the stipulations is described below.
- 1. Entry into the shutdown modes approved in this SE shall be for the primary purpose of accomplishing short
-duration repairs which necessitated exiting the original operating mode. In response to the staffs questions, the BWROG stated that "The BWRs are most likely to stay in hot shutdow n for no more than 2 to 3 days and definitely, not more than a week." The staff expects that the licensees will follow this guidance. Implementation The Bases for each modified Required Action which allows remaining in MODE 3 is modified to include the fo llowing statement, "Remaining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 and because the time spent in MODE 3 to perform the necessary repairs to restore the system
to OPERA BLE status will be short." Regarding the specific time limits, a BWR in MODE 3 only generates sufficient decay heat to remain in MODE 3 for 2 to 3 days, and for not more than a week. Therefore, this is not an administrative limitation, but a physical lim itation. As a result, there is no need for a licensee to incorporate these specific times in the Technical Specifications or Bases.
- 2. Appropriate plant procedures and administrative controls will be used when the plant is operated in the proposed end st ates. Implementation Licensees will implement appropriate plant procedures and administrative controls to be used
when the plant is operated in the proposed end states as required by Technical Specification
5.4, "Procedures," and 10 CFR 50, Appendix B. Appropriate plant procedures and administrative controls must be used when the plant is operated in any plant operating MODE. The MODE 3 end states are not unique in this regard. Therefore, this stipulation is not appropriate for inclusion in the Technic al Specifications or Bases as it is does not provide guidance to the operator that is unique to the conditions to be entered.
TSTF-423 3. Entry into and use of the proposed end states shall be in accordance with the requirements of 10 CFR 50.65(b)(4). The license e should do a risk assessment with respect to performance of the key shutdown safety functions, as described in Section 4 of this SE. (There is no 10 CFR 50.65(b)(4); it is assumed that the reference was to
10 CFR 50.65(a)(4).) Implementation Use of th e new MODE 3 end states will be accompan ied by the performance of maintenance to restore the inoperable system or component. When perform ing maintenance, licensees are required to perform a risk assessment by 10 CFR 50.65(a)(4). This risk assessment is i n accordance with the plant procedures in place to implement 10 CFR 50.65(a)(4) and envelopes the situation where entering a MODE or other specified condition in the applicability is contemplated with plant equipment inoperable. Those plant procedures wil l follow the guidance in NUMARC 93 -01, "Assessment of Resulting from Performance of Maintenance Activities," Section 11, as revised in February 2000 and as endorsed by NRC Regulatory Guide 1.182, "Assessing and Managing Risk Before Maintenance Activities a t Nuclear Power Plants." The risk evaluations performed in accordance with these documents consider the key shutdown safety functions. Therefore, implementation of these end state
changes imposes no new requirements with regard to implementation of 10 CF R 50.65(a)(4). As a result, this stipulation is not appropriate for inclusion in the Technical Specifications or Bases as it is contrary to the content and format of the Improved Standard Technical
Specifications to repeat regulatory requirements in the T echnical Specifications.
- 4. The purpose of the BWROG request is to allow corrective maintenance in a safe operating mode after an CT has been exceeded and minimize the corrective action time
so that the plant can be restored to power operation. Ordinarily the failures result in a degraded plant condition. Consequently, with respect to additional licensee outage activities that could affect the safe conduct of operations and that are not directly
required for correction of the failure or failures that cause d the CT to be exceeded, a licensee must make two commitments:
- a. The licensee will perform a safety assessment in accordance with the maintenance rule prior to undertaking such additional activities.
- b. If conditions change so that the safety assessme nt is no longer valid, the licensee will suspend all such additional activities via a process consistent with safety until the assessment has been revalidated. The staff expects the licensee to make a contingency
plan to address this situation. The conting ency plan may require such actions as (1) suspending the activity until conditions are again appropriate, (2) terminating the activity and starting over when conditions are again appropriate, and (3) continuing
the activity if safety is best ensured by com pleting the activity. The staff recognizes that such decisions may have to be made on the basis of engineering judgment should an unforeseen situation arise.
TSTF-423 Implementation Use of the new MODE 3 end states will be accompan ied by the performance of mainte nance to restore the inoperable system or component. When perform ing maintenance licensees are required to perform a risk assessment by 10 CFR 50.65(a)(4). This risk assessment must consider all maintenance being performed, regardless of whether the main tenance is related to restoring the inoperable equipment which lead to the use of the new MODE 3 end state. Therefore, the inclusion of stipulation 4.a in the Technical Specifications or Bases is not needed as it is unnecessary for a licensee to commit to follow the requirements in 10 CFR 50.65(a)(4). The requirements of 10 CFR 50 are imposed by regulation. If plant conditions change during performance of maintenance, 10 CFR 50.65(a)(4) requires
the new condition to evaluated, and if necessary, risk ma nagement actions to be taken. The actions may include stopping the maintenance activity, taking other risk management actions, or completing the activity. These actions are implemented in plant procedures. Therefore, inclusion of stipulation 4.b in the Technical Specifications or Bases is not needed as it is unnecessary for a licensee to commit to having a contingency plan to follow the requirements in 10 CFR 50.65(a)(4). The requirements of 10 CFR 50 are already imposed by regulation. In addition, i t is contrary to the content and format of the Improved Standard Technical Specifications to repeat regulatory requirements in the Technical Specifications.
- 5. The requested end state changes do not prohibit licensees from entering cold shutdown if they wis h to do so for operational reasons or maintenance requirements. In such cases, the specific requirements associated with the requested end state changes do not apply.
Implementation The Bases for each modified Required Action which allows remaining in MO DE 3 is modified to include the following statement, "Voluntary entry into MODE 4 may be made as it is also an acceptable low -risk state." As stated above, the specific requirements associated with the MODE 3 end state s are not unique to implementation of this change. Therefore, it not necessary to implement the qualification that these requirements do not apply if cold shutdown is entered. O nce MODE 4 is entered, the subject Technical Specifications do not apply. Therefore, any requirements associated with the modified Required Actions are not applicable. As a result, it is not necessary to implement this stipulation in the Technical Specifications or Bases.
BWR/4 LCO 3.3.8.2 RPS Electric Power Monitoring INSERT 1 Remaining inthe'A,l'plicability oftheLCO is acceptable similar to or lower than the risk in MODE 4 (Ref 2)and because, the time spent ip MOPE 3 to perform the necessary repairs to restore the system to'OPERABLE However, voluntary entry into MODE 4 may be made as it is also an acceptable1ow..;riskstate. INSERT 2 2.NEDC-32988-A, Revision 2, Technical Justification to Support to Selected Required End States for BWR Plants, December 2002. RPS Electric Power Monitoring 3.3.8.2 3.3 INSTRUMENTATION 3.3.8.2 Reactor Protection System (RPS)Electric Power LCO 3.3.8.2 APPLICABILITY: ACTIONS Two RPS electric power monitoring assemblies shall for each inservice RPS motor generator set or alternate power supply.MODES 1, 2, and 3, MODES 4 and 5[with any control rod withdrawn from acore.cell containing one or more fuel assemblies]. CONDITION A.One or both inservice A.1 power supplies with one electric power monitoring assembly inoperable. B.One or both inservice B.1 power supplies with both electric power monitoring assemblies inoperable. REQUIRED ACTION Remove associated inservice power supply(s)from service.Remove associated inservice power supply(s)from service.COMPLETION TIME 72 hours 1 hour C.Required Action and associated Completion Time of Condition A or B not met in MODE 1, 2, or 3.C.1 Be in MODE 3.:%MQOE4./12 hours/'3V lluu n>>D.Required Action and D.1 associated Completion Time of Condition A or B not met in MODE 4 or 5[with any control rod withdrawn from a core cell containing one or AND more fuel assemblies]. Initiate action to fully iIlsert Immediately all insertable control rods in core cells containing one or more fuel assemblies. BWRl4 STS 3.3.8.2-1 Rev.2, 04/30101 RPS Electric Power Monitoring B 3.3.8.2 BASES ACTIONS (continued) an event requiring RPSelectric power monitoring protection occurring during this period.It allowstime for plantoperati.ons persOrinelto take corrective actions or to pJace the plant in the required condition in an orderly manner and without challenging plant systems.Alternately, if it is not desired to remove the power supply from service (e.g., as in the case where removing t"'e powersupply(s} from service would result in a scram or isolation), Condition C or D,as applicable, must be entered and its Required Actions taken.If both power monitoring assemblies for an inservice power supply (MG set or alternate) are inoperable or bothpower monitoringa,ssemblies in each inservice power supply are inoperable, the system protective function is lost.In this condition, 1 hour is allowed to restore one assembly to OPERABLE status for each inservice power sQpply.Ifone inoperable assembly for each inservice power supply cannol be restored to OPERABLE status, the associated power supply(s}must be removed from service within 1 hour (Required Action B.1).An alterllatepower supply with OPERABLE assemblies lTIay then be used to power one RPS bus.The 1 hour Completion Time is sufficient for thepJantoperations personnel to take corrective actions and is acceptable because*it minimizes risk whileallowingtime for restoration or removal from service of the electric power monitoring assemblies. Alternately, if it is not desired to remove the power supply(s}from service (e.g., as in the case where removing the power supply(s}from service would result in a scram or isolation), Condition Cor D, as applicable, must be entered and its Required Actions taken.C.1(89(@BWRl4STS B 3.3.8.2-4 Rev.2, 04/30/01 RPS Electric Power MonitOring B3.3.8.2 BASES SURVEILLANCE REQUIREMENTS (continued) indicate an oLitage of sufficient duration 10 allow forscheduUng and proper performance of the Surveillance. The 184 day Frequency and the Note in the Surveillance are based on guidance provided in Generic Letter 91-09 (Refcj'SR 3.3.8.2.2 CHANNEL CALIBRATIONis acompletecheck of the.instrument loop and the sensor.This test verifies that the channel responds to the measured paramE;lter within the necessary range and accuracy.CHANNEL CALIBRATION leaves the channel adjusted toaccpuntfor instrument drifts between successive calibratipns consistent with the plant specific setpoint methodology. The Frequency is based on the assumption of an 18 interval in the determination of the magnitude of equipment drift in the setpoint analysis.SR 3.3.8.2.3 Performance of a system functional test demonstrates that, with a required system actuation (simulated or actual)signal, the.logic of the system will automatically trip open the associatedl'0wer monitoring assembly.Only one signal per power monitoring assembly is rE;lquired to be tested.This Surveillance overlaps with theCHANNELCALIBRATI()N to provide complete testing of the ThesystElmfunctiona.1 test of the Class 1E circuit breakers is included as part ofthistest to provide complete testing of the safety function.If the breakElJ'S;are incapable of operating, the associated electric power monitoring assembly would be inoperable. The 18 month Frequency is based on the need to performlhis Surveillance under the conditions that apply during a the potential for an unplanned transient performed with the reactor at power.Operatingexl'eriE;ll'lce that these components usually pass the Surveillance when performed at the 18 month Fre.quency. REFERENCES BWRl4STS 1.FSAR, Section[8.3.1.1.4.BJ. B 3.3.8.2-6 Rev.2, 04/30/01 RPS ElectricPower Monitoring B3.3.8.2 BASES REFERENCES (continued) oS l NRC Generic Letter 91-09, the Electrical Protective Assemblies in Power Supplies for the Reactor Protection System." BWRl4STS B 3.3.8.2-7 Rev.2, 04/30/01 BWRl4 LCO 3.4.3 Safety I Relief Valves INSERT 1 Remaining in the Applicability of the LCO is acceptable because the plant risk 3 is similar to or lower than the risk in MODE 4 (Ref J)and because the time spentiJ;rMODE 3to perform the necessary repairs to restore the system to OPERABLE status will be short.However,voluntary entry into MODE 4 may be made as it is also an acceptable low.;riskstate. INSERT 2 C.l and C.2 If[three]or more[required] SIRVs are inoperable, a transient may result intheviolationofthe ASME Code limit on reactor pressure.The plant must be brought to a MODE in which the LCO does not apply.To achieve this status, the plantmustbe brought to MODE 3 within.12 hours and to MODE 4 within 36 hours.The allowed Completion Times are reasonable, based on operating experience, to reach required plant conditions from full power conditions in an orderly manner and without challenging plant systems.INSERT 3 3.NEDC-32988-A, Revision 2, Technical Justification to Support Risk-Inforrned Modification to Selected Required End States for BWR Plants, December 2002. S/RVs 3.4.3 3.4 REACTOR COOLANT SYSTEM (RCS)3.4.3 Safety/Relief Valves (S/RVs)LCO 3.4.3 APPLICABILITY: ACTIONS The safety function of[11]S/RVs shall be OPERABLE.MODES 1, 2, and 3.CONDITION A.[One[or two][required] S/RV[s]inpperable. A.1 REQUIRED ACTION Restore the[required] S/RV[s]to OPERABLE status.COMPLETION TIME 14 days]B.[RequiredAction.and associated Completion Time of Condition A not met.]c.[Three]or more[required] S/RVs inoperable. BWRl4STS B.1 Be in MODE 3.C., Be.;", MO<<1.ANO e-.2.'Be ,'" 3.4.3-1 12 hours I
- ], ht;M,£.Rev.2, 04/30/01 S/RVs B 3.4.3 BASES ACTIONS[A.1 With the safety function of one[or two][required]
remaining OPERABLE S/RVs are capable of providing overpressure protection. Because of additional designmafgin, theA$MIt Code limits for the RCPB can also be satisfied with inoperable. However, the overall reliability of the reduced because additional failures in the could result in failure to adequately relieve
- .event.For this reason, continued operation is permitted fOr a Iirnited time only.The 14 day Completion Time to restore the inoperable required S/RVs to OPERABLE status is based on the relief capability of tile remaining S/RVs, the low probability of an event requiringS/RV actuation, and a reasonable time to complete the Required Action.] 1'1a..J ,.,'0$((£ SURVEILLANCE SR 3.4.3.1 REQUIREMENTS This Surveillance requires that the[required]
S/RVs will open at the.pressures assumed in the safety analysis of Reference 1.The demonstration of the S/RV safe lift settings mustbe perforrnedduril'lg shutdown, since this is a bench test,[to be done in accordance with the Inservice Testing Program].The lift setting pressure shall correspond to ambient conditions of the valves at nominal operating temperatures and pressures. The S/RV setpoint is+/-[3]%forOPERABIL.ITY;.however, the valves are reset to+/-1%during the Surveillance to aUow.for drift.[1\Note is provided to allow up to[two]of the required[11]S/RVs to be physically* replaced with S/Rvs with lower setpoints. This providesoP19rational flexibility which maintains the assumptions in the BWRl4 STS B 3.4.33 Rev.2, 04/30/01 S/RVs B 3.4.3 BASES SURVEILLANCE REQUIREMENTS (continued) The 18 month Frequency was selected.because this Surveillance must be performedduringshutdown conditions and is based on the time between reflJelings. SR 3.4.3.2 A manual actuation of each[required] S/RV is performed to verify that, mechanically, the valve is functioning properly and no blockage exists in the valve discharge line.This can be demonstrated by the response of the turbine control valves or bypass valves, by a change in the measured steam flow, or by any other method suitable to verify steam flow.Adequate reactor steam dome pressure must be available to perform this test to avoid damaging the valve.Also, adequate steam flow must be passing through the main turbine or turbine bypass valves to continue to control reactor pressure when the*S/RVs*divert steam flow upon opening.Sufficient time is therefore allowed after the required pressure and flow are achieved to perform this test.Adequate pressure at which this test is to be performed is[920]psig (the pressure recommended by the valve manufacturer). Adequate steam flow is represented by[at least 1.25 turbine bypass valves open, or total steam flow10 6 Ib/hr].Plant startup is allowed prior to performing thistest because valve OPERABILITY and the setpoints for overpressure protection are verified, per ASME Code requirements, prior tovalve installation. Therefore, this SR is modified by a Note that states the Surveillance is not required to be performed until 12 hours after reactor steam pressure and flow are adequate to perform the test.The 12 hours allowed for manual actuation after the required pressure is reached is sufficient to achieve stable.conditions for testing and provides a reasonable time to complete the SR.If a valve fails to actuate due only to the failure of the solenoid but is capable of opening on overpressure, the safety function of the S/RV is considered OPERABLE.The[18]month on a STAGGERED TEST BASIS Frequency ensures that each solenoid for each S/RV is alternately tested.The 18 month Frequency was developed based on the S/RV tests required by the ASME Boiler and Pressure Vessel Code, Section XI (Ref.perati g experience has shown that these components usually pass the Surveillance when performed at the 18 month Frequency. Therefore, the Frequency was concluded to be acceptable from a reliability standpoint. BWRl4 STS B3.4.3-4 Rev.2, 04/30/01 BASES REFERENCES S/RVs B 3:4.3 1.FSAR, Section[5.2.2.2.4]. 2.FSAR, Section[15].<--@n5e r fD ASME, Boiler and Pressure Vessel Code, Section XI.BWRl4STS B 3.4.3-5 Rev.2, 04/30/01 BWRl4 LCO 3.5.1 ECCS-Operating INSERT 1 Remaining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 13)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.INSERT 2 H.landH.2 If two or more ADS valves are inoperable, there is a reduction in the depressurization capability. The plant must be brought to a condition in which the LCO does not apply.To achieve this status, the plant must be brought to at least MODE 3 within 12 hours and reactor steam dome pressure reduced to:::;150 psig within 36 hours.The allowed Completion Times are reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.INSERT 3 13.NEDC-32988-A, Revision 2, Technical Justification to Support Risk-Informed Modification to Selected Required End States for BWR Plants, December 2002. ECCS*Operating 3.5.1 3.5 EMERGENCY CORE SYSTEM (ECCS)AND REACTOR CORE ISOLATION COOLING SYSTEM (RCIC)3.5.1 ECCS-Operating LCO 3.5.1 APPLICABILITY: ACTIONS Each ECCS injection/spray subsystem end the Automatic Depressurization System (ADS)function of[seven]safety/relief valves shall be OPERABLE.MODE 1, MODES 2 and 3, except high pressure coolant injection (HPCI)and ADS valves are not required to be OPERABLE with reactor steam dome pressure s[150]psig.CONDITION REQUIRED ACTION COMPLETION TIME A.One low pressure ECCS A.1 Restol"e*low pressure 7 days injection/spray ECCS injection/spray subsystem inoperable. subsystem(§) to OPERABLE status.OR One LPCI pump in both LPCI subsystems inoperable. B.Required Action and B.1 Be in MODE 3.12 hours associated Completion Time of Condition A not AND met. C.HPCI System C.1 Verify by administrative Immediately inoperable. means RCIC System is OPERABLE.AND C.2 Restore HPCI System to 14 days OPERABLE status.BWRl4STS 3.5.1*1 Rev.2, 04/30/01 ECCS-Operating 3.5.1 ACTIONS (continued) CONDITION REQUIRED ACTION COMPLETION TIME D.HPCI System inoperable. D.1 Restore HPCI System to OPERABLE status.72 hours Condition A entered.D.2 Restore low pressure ECCS injection/spraY subsystem to OPERABLE status.72 hours 6-.I E.One ADS valve E.1 Restore ADS valve to 14 days inoperable. OPERABLE status.F.One ADS valve F.1 Restore ADS valve to 72 hours inoperable. OPERABLE status.AND OR Condition A entered.F.2 Restore low prElssure 72 hours ECCS injection/spray subsystem to OPERABLE status.U@Two or more ADS valves@.1 Be in MODE 3.12 hours inoperable. 1+AND (f.2 Reduce reactor steam 36 hours II dome pressure to[150]psig.BWRl4 STS 3.5.1-2 Rev.2, 04/30/01 ECCS-Operating 3.5.1 ACTIONS (continued) CONDITION Two or more low pressure ECCS injection/spray subsystems inoperable for reasons other than Condition A.HPCI System and one or more ADS valves inoperable. REQUIRED ACTION Enter LCO 3.0.3.COMPLETION TIME Immediately SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.5.1.1 SR 3.5.1.2 Verify, for each ECCS injection/spray subsystem, the 31 days piping is filled with water from the pump discharge valve to the injection valve.*NOTE*Low pressure coolant injection (LPCI)subsystems may be considered OPERABLE during alignment and operation for decay heat removal with reactor steam dome pressure less than[the Residual Heat Removal (RHR)cut in permissive pressure]in MODE 3, if capable of being manually realigned and not otherwise inoperable. Verify eachECCS injection/spray subsystem manual, power operated, and automatic valve in the flow path, 31 days that is not locked, sealed, or otherwise secured in position, is in the correct position.SR 3.5.1.3 BWRl4STS Verify ADS[air supply header]pressure is[90]psig.3.5.1-3 31 days Rev.2, 04/30/01 ECCS-Operating B 3.5.1 BASES ACTIONS (continued)ove ll4l11 fla-.,+r'ts t<-is Y'VI;m iyJ C.1 and C.2 If the HPCI System is inoperable and the RCIC System is verified to be OPERABLE, the HPCI System must be restored to OPERABLE status within 14 days.In this Condition, adequate core cooling is ensured by the OPERABILITY.of the redundant and diverse low pressure ECCS injection/spray subsystems in conjunction.with ADS.Also, the RCIC System will automatically provide makeup water at most reactor operating pressures. Verification of RCIC OPERABILITY immediately is therefore required when HPCI is inoperable. This may be performed as an administrative check by examining logs or other information to determine if RCIC is out of service for maintenance or other reasons.It does not mean to perform the Surveillances needed to demonstrate the OPERABILITY of the RCIC System.If the OPERABILITY of the RCIC System cannot be verified, however, Condition G must be immediately entered.If a single active component fails concurrent with a design basis LOCA, there is a potential, depending onthe.specific failure, that the minimum required ECCS equipment will not beavailable.A 14 day Completion Time is based on a reliability study cited in Reference 12 and has been found to be acceptable through operating experience. D.1 and D.2 If anyone low pressure ECCS injection/spray subsystem, or one LPCI pump in bothtPCI subsystems, is inoperable in addition tean inoperable HPCI SY$tem, the inoperable low pressure ECCS injection/spray subsystem or the HPCI Sy$tem must be to OPERABLE status within 72 hours.In this Condition, adequate core cooling is ensured by the OPERABILITY of the ADS and the remaining low pressure ECCS subsystems. However, the overall ECCS reliability is significantly reduced because a single failure in one.of the remaining OPERABLE subsystems concurrent with a design basis LOCA may result in the BWRl4STS B 3.5.1-6 Rev.2, 04/30/01 ECCS-Operating B 3.5.1 BASES ACTIONS (continued) ECCS not being able to perform its intended$afety function.Since both a high pressure system (HPCI)and a 10wpressuresubsystel11 are inoperable, a more restrictive CompletionTime of 72 hours is required.to restore either the HPCI System or the low pressure ECCS injection/spray subsystem to OPERABLE status.This Completion Time is based on a reliability study cited In.Reference 12 and has been found to be acceptable through operating experience. @The LCO requires seven ADS valves trJ,e OPERABLE in order to provide the ADS function.Reference the results of an analysis that evaluated the effect of one ADS valve being out of service.Per this analysis, operation of only six ADS valves will provide the required depressurization. However, overaU reliability of the ADS is reduced, because a single failure in the OPERABLE ADS valves could result in a reduction in depressurization capability. Therefore, operation is only allowed for a limited time.The 14 day Completion Time is based on a reliability study cited in Reference 12 aM has been found to be acceptable through operating experience. F.1 and F.2 If anyone low pressure ECCSinjection/spray subsystem, or one LPCI pump in both LPCI subsystems, is inoperable in addition to one inoperable ADS valve, adequate core cooling is ensured by the OPERABILITY of HPCI andtheremaining low pressure ECCS injection/spray subsystem. However, overall ECCS reliability is reduced because a single active component failure concurrent with a design basis LOCA could result in the minimum.required ECCSequipment not being available. Since both a high pressure system (ADS)and a low pressure subsystem are inoperable, a more restrictive Completion Time of 72 hours is required to restore either the low pressure ECCS$ubsystem orthe ApS valve to OPERABLE status.This Completion Time is based on a reliability study cited in Reference 12 and has been found to be acceptable through operating experience.BWRl4 STS B 3.5.1-7 Rev.2, 04/30/01 ECCS-Operating B 3.5.1 BASES ACTIONS (continued) When multiple ECCS subsystems are inoperable, as stated in Conditioib4, the plant is ina condition outside of the accident analyses.Therefore, LCO 3.0.3 must be entered immediately. SURVEILLANCE REQUIREMENTS SR 3.5.1.1 The flow path piping has the potential todevelop voids and pockets of entrained air.Maintaining the pump discharge lines of the HPCI System, CS System, and LPCI subsystems full of water ensures thatthe ECCS will perform properly, injecting its full ca.pacity intothe RCS upon demand.This will also prevent a water hammer following an ECCS initiation signal.One acceptable method of ensuring thatthe lines are fiJlI is to vent at the high points.The 31 day Frequency is based on the gradual nature of void buildup in the ECCS piping, the procedural controls governing system operation, and operating experience. SR 3.5.1.2 Verifying the correct alignment for manual, power operated, and automatic valves in the ECCS flow paths provides assurance that the proper flow paths will exist for ECCS operation. This SR does not apply to valves that are locked, sealed, or otherwise secured in position since these were verified to be in the correct position prior to locking, sealing, or securing.A valve that receives an initiation signal is allowed to be in a nonaccident position provided the valve will automatically reposition in the proper stroke time.This SR does not require any testing or valve manipulation; rather, it involves verification that those valves capable of potentially being mispositioned are in the.correct position..This SR does not apply to valves that cannot be inadvertently misaligned, such as check valves.For the HPCI System, this SR also includes the steam flow path for the turbine and the flow (X)ntroUer position..The 31 day Frequency ofthisSR wasderived from the Inservice Testing Program requirements for performing valve testing at least once every 92 days.The Frequency of 31 days is further justified because the BWRl4STS B 3.5.1-8 Rev.2, 04/30/01 BASES REFERENCES ECCS-Operating B 3.5.1 1.FSAR, Section[6.3.2.2.3]. 2.3.4.5.6.7.8.9.10.11.12.FSAR,*Section [6.3.2.2.4]. FSAR, Section[6.3.2.2.1]. FSAR, Section[6.3.2.2.2]. FSAR, Section[15.2.8].FSAR, Section[15.6.4].FSAR, Section[15.6.5].10 CFR 50, Appendix K.FSAR, Section[6.3.3].10 CFR 50.46.FSAR, Section[7.3.1.2.2]. Memorandum from R.L.Baer (NRC)to V.Stello, Jr.(NRC),"Recommended Interim Revisions to LCOs for ECCS Components," December 1, 1975.FSAR, Section[6.3.3.3]. BWRl4STS B 3.5.1-14 Rev.2, 04/30101 BWRl4 LCO 3.5.3, RCIC System RPS INSERT 1 Remaining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 4)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.INSERT 2 4.NEDC-32988-A, Revision 2, Technical Justification to Support Risk-Informed Modification to Selected Required End States for BWR Plants, December 2002. RCIC System 3.5.3 3.5 EMERGENCY CORE COOLING SYSTEM (ECCS)AND REACTOR CORE ISOLATION COOLING SYSTEM (RCIC)3.5.3 RCIC System LCO 3.5.3 APPLICABILITY: ACTIONS The RCIC System shall be OPERABLE.MODE 1, MODES 2 and 3 with reactor steam dome pressure>[150]psig.CONDITION A.RCIC System inoperable. A.1 A.2 REQUIRED ACTION Verify by administrative means High Pressure Coolant Injection System is OPERABLE.Restore RCIC System to OPERABLE status.COMPLETION TIME Immediately 14 days B.Required Action and associated Completion Time not met.B.1 Be in MODE 3.Reduce reactor s dome pressur 0::;[150]psi.12 hours SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.5.3.1 BWRl4STS Verify the RCIC System piping is filled with water 31 days from the pump discharge valve to the injection valve.3.5.3-1 Rev.2, 04/30/01 RCIC System B 3.5.3 BASES ACTIONS (continued) demonstrate the OPERABILITY of the HPCI System.If the OPERABILITY of the HPCI System cannot be verified, however, Condition B must be immediately entered.For transients and certain abnormal events with no LOCA, RCIC (as opposed to HPCI)is the preferred source of makeup coolant because of its relatively small capacity, which allows easier control of the RPV water level.Therefore, a limited time is allowed to restore the inoperable RCIC to OPERABLE status.The 14 day Completion Time is based on a reliability study (Ref.3)that evaluated the impact on ECCS availability, assuming various components and subsystems were taken out of service.The results were used to calculate the average availability of ECCS equipment needed to mitigate the consequences of a LOCA as a function of allowed outage times (AOTs).Because of similar functions of HPCI and RCIC, the AOTs (Le., Completion Times)determined for HPCI are also applied to RCIC.If the RCIC System cannot be restored to OPERABLE status within the associated Completion Time, or if the HPCI System is simultaneously ino erable, the lant must be brought to a condition in which the L oes a I.To achieve this status, the plant must be brought to at Ie t MODE 3 within 12 orne rf:"'\r eo to::;si within 3S1lOursl" rThe allowed ompletion Timelfeasonable, based on operating experience, to reach the required-plantconditions from full power conditions in an orderly manner and without challenging plant systems.SURVEILLANCE SR 3.5.3.1 REQUIREMENTS The flow path piping has the potential to develop voids and pockets of entrained air.Maintaining the pump discharge line of the RCIC System full of water ensures that the system will perform properly, injecting its full capacity into the Reactor Coolant System upon demand.This will also prevent a water hammer following an initiation signal.One acceptable method of ensuring the line is full is to vent at the high points.The 31 day Frequency is based on the gradual nature of void buildup in theRCICpiping, the procedural controls governing system operation, and operating experience. BWRl4STS B 3.5.3-3 Rev.2, 04/30/01 BASES REFERENCES RCIC System B 3.5.3 1.10 CFR 50, Appendix A, GDC 33.2.FSAR, Section[5.5.6].3.Memorandum from R.L.Baer (NRC)to V.Stello, Jr.(NRC),"Recommended Interim Revisions to LCOs for ECCS Components,"December 1,1975.BWRJ4STS B 3.5.3-6 Rev.2, 04/30101 TSTF-423 BWR/4 L CO 3.6.1.1, Primary containment INSERT 1 Remaining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref. 4), because the time spent in MODE 3 to
perform the necessary repairs to restore the system to OPERABLE status will be shor
- t. However, voluntary entry into MODE 4 may be made as it is also an acceptable low
-risk state. INSERT 2 4. NEDC-32988-A, Revision 2, Technical Justification to Support Risk -Informed Modification to Sele cted Required End States for BWR Plants, December 2002.
3.6 CONTAINMENT SYSTEMS 3.6.1.1 Primary Containment Primary Containment 3.6.1.1 LCO 3.6.1.1 APPLICABILITY: ACTIONS Primary containment shall be OPERABLE.MODES 1, 2, and 3.CONDITION REQUIRED ACTION COMPLETION TIME A.Primary containment A.1 Restore primary 1 hour inoperable. containment to OPERABLE status.B.Required Action and B.1 Be in MODE 3.12 hours associated Completion Time not met.lAND SURVEILLANCE REQUIREMENTS SR 3.6.1.1.1 BWRl4STS SURVEILLANCE Perform required visual examinations and leakage rate testing except for primary containment air lock testing, in accordance with the Primary Containment Leakage Rate Testing Program.3.6.1.1-1 FREQUENCY In accordance with the Primary Containment Leakage Rate Testing Program Rev.2, 04/30101 BASES ACTIONS SURVEILLANCE REQUIREMENTS Primary Containment B 3.6.1.1 In the event primary containment is inoperable, primary containment must be restored to OPERABLE status within 1 hour.The 1 hour Completion Time provides a period of time to correct the problem commensurate with the importance of maintaining primary containment OPERABILITY during MODES 1, 2, and 3.This time period also ensures that the probability of an accident (requiring primary containment OPERABILITY) occurring during periods where primary containment is inoperable is minimal.If primary containment cannot be restored to OPERABLE status within the required Completion Time, the plant must be brought to a MODE in which the oes nI.To achieve this status, the plant must be brought to at least MODE 3 within 12 6 ur The allowed Completion Timet ai!:easonable, based on....([£)operating experience, to reach the required plant conditions from full onditions in an orderly manner and without challenging plant systems.SR 3.6.1.1.1 Maintaining the primary containment OPERABLE requires compliance with the visual examinations and leakage rate test requirements of the Primary Containment Leakage Rate Testing Program.Failure to meet air lock leakage testing (SR 3.6.1.2.1),[secondary containment bypass leakage (SR 3.6.1.3.12),] [resilient seal primary containment purge valve leakage testing (SR 3.6.1.3.7),] or main steam isolation valve leakage (SR 3.6.1.3.13) does not necessarily result in a failure of this SR.The impact of the failure to meet these SRs must be evaluated against the Type A, B, and C acceptance criteria of the Primary Containment Leakage Rate Testing Program.As left leakage prior to the first startup after performing a required Primary Containment Leakage Rate Testing Program leakage test is required to be<0.6 La for combined Type Band C leakage, and[<0.75 La for Option A]0.75 La for Option B]for overall Type A leakage.At all other times between required leakage rate tests, the acceptance criteria is based on an overall Type A leakage limit of1.0 La.At1.0 La the oftsite dose consequences are bounded by the assumptions of the safety analysis.The Frequency is required by the Primary Containment Leakage Rate Testing Program.BWRl4STS B 3.6.1.1-3 Rev.2, 04/30101 Primary Containment B 3.6.1.1 BASES SURVEILLANCE REQUIREMENTS (continued)
- REVIEWER'S NOTE*, Regulatory Guide 1.163 and NEI 94-01 include acceptance criteria forleft and as-found Type A leakage rates and combined Type Band C leakage rates, which may be reflected in the Bases.SR 3.6.1.1.2 Maintaining the pressure suppression function of primary containment requires limiting the leakage from the drywell to the suppression chamber.Thus, if an event were to occur that pressurized the drywell, the steam would be directed through the downcomers into the suppression pool.This SR measures drywell to suppression chamber differential pressure during a[10]minute period to ensure that the leakage paths that would bypass the suppression pool are within allowable limits.Satisfactory performance of this SR can be achieved by establishing a known differential pressure between the drywell and the suppression chamber and verifying that the pressure in either the suppression chamber or the drywell does not change by more than[0.25]inch of water per minute over a 10 minute period.The leakage test is performed every[18 months].The[18 month]Frequency was developed considering it is prudent that this Surveillance be performed during a unit outage and also in view of the fact that component failures that might have affected this test are identified by other primary containment SRs.Two consecutive test failures, however, would indicate unexpected primary containment degradation; in this event, as the Note indicates, increasing the Frequency to once every[9 months]is required until the situation is remedied as evidenced by passing two consecutive tests.REFERENCES 1.FSAR, Section[6.2].BWRl4 STS 2.FSAR, Section[15.1.39].
3.10 CFR 50, Appendix J, Option[A][B].B 3.6.1.1-4 Rev.2, 04/30101 BWRl4 LCO 3.6.1.6 Low-Low Set Valves INSERT 1 Remaining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 2)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.INSERT 2 C.1 and C.2 If two or more LLS valves are inoperable, there could be excessive short duration S/RV cycling during an overpressure event.The plant must be brought to a condition in which the LCO does not apply.To achieve this status, the plant must be brought to at least MODE 3 within 12 hours and MODE 4 within 36 hours.The allowed Completion Times are reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.INSERT 3 2.NEDC-32988-A, Revision 2, Technical Justification to Support Risk-Informed Modification to Selected Required End States for BWR Plants, December 2002. LLS Valves 3.6.1.6 3.6 CONTAINMENT SYSTEMS 3.6.1.6 Low-Low Set (LLS)Valves LCO 3.6.1.6 APPLICABILITY: ACTIONS The LLS function of[four]safety/relief valves shall be OPERABLE.MODES 1, 2, and 3.CONDITION A, One LLS valve inoperable. A,1 REQUIRED ACTION Restore LLS valve to OPERABLE status.COMPLETION TIME 14 days 12 hours B.Required Action and associated Completion Time of Condition A not met.c.Two or more LLS valves inoperable. B.1 Be in MODE 3. SURVEILLANCE REQUIREMENTS SURVEILLANCE SR 3.6.1.6.1-NOTE-Not required to be performed until 12 hours after reactor steam pressure and flow are adequate to perform the test.Verify each LLS valve opens when manually actuated.FREQUENCY[18]months[on a STAGGERED TEST BASIS for each valve solenoid]BWRl4STS 3.6.1.6-1 Rev.2, 04/30/01 BASES LCO APPLICABILITY ACTIONS LLS Valves B 3.6.1.6[Four]LLS valves are required to be OPERABLE to satisfy the assumptions of the safety analyses (Ref.1).The requirements of this LCO are applicable to the mechanical and electrical/pneumatic capability of the LLS valves to function for controlling the opening and closing of the S/RVs.In MODES 1,2, and 3, an event could cause pressurization of the reactor and opening of S/RVs.In MODES 4 and 5, the probability and consequences of these events are reduced due to the pressure and temperature limitations in these MODES.Therefore, maintaining the LLS valves OPERABLE is not required in MODE 4 or 5.With one LLS valve inoperable, the remaining OPERABLE LLS valves are adequate to perform the designed function.However, the overall reliability is reduced.The 14 day Completion Time takes into account the redundant capability afforded by the remaining LLS valves and the low probability of an event in which the remaining LLS valve capability would be inadequate.ct-J a-0 Cifmore are or...w1he)inoperable LLS valve cannot be restored to OPERABLE status within the required Completion Time, the plant must be brought to a MODE in which the(!:..C*f'do68"rloO a To achieve this status, the plant must be brought to at least MODE 3 within 12 hours 4 Witb#f?6 houtJ'The allowed Completion Time_reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.4.VUl2d-V SURVEILLANCE SR 3.6.1.6.1 REQUIREMENTS A manual actuation of each LLS valve is performed to verify that the valve and solenoids are functioning properly and no blockage exists in the valve discharge line.This can be demonstrated by the response of the turbine control or bypass valve, by a change in the measured steam flow, or by any other method that is suitable to verify steam flow.Adequate reactor steam dome pressure must be available to perform this test to avoid damaging the valve.Adequate pressure at which this test is to be performed is[920]psig (the pressure recommended by the valve manufacturer). Also, adequate steam flow must be passing through the BWRl4STS B 3.6.1.6-2 Rev.2, 04/30/01 LLS Valves B 3.6.1.6 BASES SURVEILLANCE REQUIREMENTS (continued) main turbine or turbine bypass valves to continue to control reactor pressure when the LLS valves divert steam flow upon opening.Adequate steam flow is represented by[at least 1.25 turbine bypass valves open, or total steam flow;;:: 10 6 Ib/hr].The[18]month Frequency was based on the S/RV tests r quired by the ASME Boiler and Pressure Vessel Code, Section XI (Re..The Frequency of 18 months on a STAGGERED TEST BASIS ensures that each solenoid for each S/RV is alternately tested.Operating experience has shown that these components usually pass the Surveillance when performed at the[18]month Frequency. Therefore, the Frequency was concluded to be acceptable from a reliability standpoint. Since steam pressure is required to perform the Surveillance, however, and steam may not be available during a unit outage, the Surveillance may be performed during the startup following a unit outage.Unit startup is allowed prior to performing the test because valve the setpoints for overpressure protection are verified by Referenceto valve installation. After adequate reactor steam dome pressure and flow are reached, 12 hours is allowed to prepare for and perform the test.SR 3.6.1.6.2 The LLS designated S/RVs are required to actuate automatically upon receipt of specific initiation signals.A system functional test is performed to verify that the mechanical portions (Le., solenoids) of the LLS function operate as designed when initiated either by an actual or simulated automatic initiation signal.The LOGIC SYSTEM FUNCTIONAL TEST in SR 3.3.6.3.7 overlaps this SR to provide complete testing of the safety function.The 18 month Frequency is based on the need to perform this Surveillance under the conditions that apply during a plant outage and the potential for an unplanned transient if the Surveillance were performed with the reactor at power.Operating experience has shown these components usually pass the Surveillance when performed at the 18 month Frequency. Therefore, the Frequency was concluded to be acceptable from a reliability standpoint. This SR is modified by a Note that excludes valve actuation. This prevents a reactor pressure vessel pressure blowdown.BWRl4 STS B 3.6.1.6-3 Rev.2, 04/30101 REFERENCES LLS Valves B 3.6.1.6 BASES 1.FSAR, Section[5.5.17]._----;iI'" (]J j..ASME, Boiler and PressureVesselCode, Section XI.BWRl4 STS Rev.2, 04/30101 BWRJ4 LCO 3.6.1.7 Reactor Building-to-Suppression Chamber Vacuum Breakers INSERT 1 If one line has one or more reactor building-to-suppression chambervacuumbreakers inoperable for opening and they are not restored within the Completion Time in Condition C, the remaining breakers in the remaining lines can provide the opening function.The plant must be brought to a condition in which the overall plant risk is minimized. To achieve this status, the plant must be brought to at least MODE 3 within 12 hours.Remaining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 2)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.The allowed Completion Time is reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.INSERT 2 2.NEDC-32988-A, Revision 2, Technical Justification to Support Risk-Informed Modification to Selected Required End States for BWR Plants, December 2002. Reactor Building-to-Suppression Chamber Vacuum Breakers 3.6.1.7 3.6 CONTAINMENT SYSTEMS 3.6.1.7 Reactor Building-to-Suppression Chamber Vacuum BreakersLCO3.6.1.7 APPLICABILITY: ACTIONS Each reactor building-to-suppression chamber vacuum breaker shall be OPERABLE.MODES 1, 2, and 3.-Separate Condition entry is allowed for each line.CONDITION REQUIRED ACTIONCOMPLETIONTIME A, One or more lines with A,1 Close the open vacuum 72 hours one reactor building-to-breaker.suppression chamber vacuum breaker not closed.B.One or more lines with B.1 Close one open vacuum 1 hour two reactor bUilding-to-breaker.suppression chamber vacuum breakers not closed.C.One line with one or C.1 Restore the vacuum 72 hours more reactor bUilding-to-breaker(s) to OPERABLE suppression chamber status.vacuum breakers..inoperable for opening.7'Two[or more]lines with@.1 Restore all vacuum 1 hour one or more reactor rbreakers in[one]line to building-to-suppression OPERABLE status.chamber vacuum breakers inoperable for opening.D, a...cl 0.1'&f\.., MOo£3. A i",-kj (ovYlj'Ouf,O'1 j';'rvt.e.",f LoV'.,,), ,.J,:I'Ot-> C...It"""""",,,c,>.> __.."..BWRl4 STS Vlot I'Yle1.Rev.2, 04/30101 Reactor Building-to-Suppression Chamber Vacuum Breakers 3.6.1.7 ACTIONS (continued) CONDITION REQUIRED ACTION COMPLETION TIMERequired Action and (lJ.e;r.v Be in MODE 3.Associated Completion r met J.;l AND of Con ell t,C>v1S?!.,I 13, or?!.J V"(i)(/).2 Be in MODE 4.SURVEILLANCE REQUIREMENTS SURVEILLANCE SR 3.6.1.7.1 12 hours 36 hours FREQUENCY*NOTES*1.Not required to be met for vacuum breakers that are open during Surveillances. 2.Not required to be met for vacuum breakers open when performing their intended function.Verify each vacuum breaker is closed.14 days SR 3.6.1.7.2 SR 3.6.1.7.3 BWRl4STS Perform a functional test of each vacuum breaker.Verifytheopening setpoint of each vacuum breaker is[0.5]psid.3.6.1.7-2[92]days[18]months Rev.2, 04/30101 Reactor Building-to-Suppression Chamber Vacuum Breakers B 3.6.1.7 BASES ACTIONS (continued) consistent with requirements for inoperable drywell vacuum breakers in LCO 3.6.1.8, Drywell Vacuum Breakers." The 72 hour Completion Time takes into account the redundancy capability afforded by the remaining breakers, the fact that the OPERABLE breaker in each of the lines is closed, and the low probability of an event occurring that would require the vacuum breakers to be OPERABLE during this period.With one or more lines with two vacuum breakers not closed, primary containment integrity is not maintained. Therefore, one open vacuum breaker must be closed within 1 hour.This Completion Time is consistent with the ACTIONS of LCO 3.6.1.1,"Primary Containment," which requires that primary containment be restored to OPERABLE status within 1 hour.With one line with one or more vacuum breakers inoperable for opening, the leak tight primary containment boundary is intact.The ability to mitigate an event that causes a containment depressurization is threatened, however, if both vacuum breakers in at least one vacuum breaker penetration are not OPERABLE.Therefore, the inoperable vacuum breaker must be restored to OPERABLE status within 72 hours.This is consistent with the Completion Time for Condition A and the fact g-VlseA the leak tight primary containment boundary is being maintained. @f<A1 With two[or more]lines with one or more vacuum breakers inoperable for opening, the primary containment boundary is intact.However, in the event of a containment depressurization, the function of the vacuum breakers is lost.Therefore, all vacuum breakers in[one]line must be restored to OPERABLE status within 1 hour.This Completion Time is consistent with the ACTIONS of LCO 3.6.1.1, which requires that primary containment be restored to OPERABLE status within 1 hour.. !9 II! vacuum breakers in be closed or restored to OPERABLE status within the required Completion Time, the plant must be brought to a MODE in which the LCO does not apply.To achieve this BWRl4 STS B 3.6.1.7-4 Rev.2, 04/30101 Reactor Building-to-Suppression Chamber Vacuum Breakers B 3.6.1.7 BASES SURVEILLANCE REQUIREMENTS (continued) power.For this unit, the[18]month Frequency has been shown to be acceptable, based onoperatingexperience, and is further justified because of other surveillances performed at shorter Frequencies that convey the proper functioning status of each vacuum breaker.REFERENCES 1.FSAR, Section[6.2].BWRl4 STS B 3.6.1.7-6 Rev.2, 04/30101 BWRl4 LCO 3.6.1.8 Suppression Chamber-to-Drywell Vacuum Breakers INSERT 1 If a required suppression chamber-to-drywell vacuum breaker is inoperable for opening and is not restored to OPERABLE status within the required Completion Time, theplantmust be brought to a condition in which the overall plant risk is minimized. To achieve this status, theplantmust be brought to at least MODE 3 within 12 hours.Remaining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 2)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-riSk state.The allowed Completion Time is reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.INSERT 2 2.NEDC-32988-A, Revision 2, Technical Justification to Support Risk-Informed Modification to Selected Required End States for BWR Plants, December 2002. Suppression Chamber-to-Drywell Vacuum Breakers 3.6.1.8 3.6 CONTAINMENT SYSTEMS 3.6.1.8 Suppression Chamber-to-Drywell Vacuum Breakers LCO 3.6.1.8 APPLICABILITY: ACTIONS[Nine]suppression chamber-to-drywell vacuum breakers shall be OPERABLE for opening.[Twelve]suppression chamber-to-drywell vacuum breakers shall be closed, except when performing their intended function.MODES 1, 2, and 3.CONDITION REQUIRED ACTION COMPLETION TIME A.One required A.1 Restore one vacuum 72 hours suppression chamber-to-breaker to OPERABLE drywell vacuum breaker status.inoperable for opening.@<ll.One suppression @.1 Close the open vacuum 2 hours chamber-to-drywell @breaker.vacuum breaker not closed.(Q)@Required Action andBe in MODE 3.12 hours associated Completion Tim*'not met..AND (Of Ct>Yl eJ,'ft'()MJ v-@.2 Be in MODE 4.36 hours Y B,;r",;,.J/fA,...."..l I p.I 13.e.MOOE 3 1 I';)..ho<"'-,}a..-s.sr:c.-1'e.-IeJ TIMe ,i'CO....d ,'-hIP,,)A nD+rYl47.BWRl4STS 3.6.1.8-1 Rev.2, 04/30101 BASES SURVEILLANCE SR 3.6.1.8.1 REQUIREMENTS Rev.2, 04/30/01 B 3.6.1.8-4 A Note is added to this SR which allows suppression chamber-to-drywell vacuum breakers opened in conjunction with the performance of a Surveillance to not be considered as failing this SR.These periods of o en.....suppression chamber-to-drywell vacuum breaker cannot be closed or r within the required Completion Time, the plant must be brought to a MODE in which the LCO does not apply.To achieve this status, the plant must be brought to at least MODE 3 within 12 hours and to MODE 4 within 36 hours.The allowed CompletionTimesare reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.Each vacuum breaker is verified closed to ensure that this potential large bypass leakage path is not present.This Surveillance is performed by observing the vacuum breaker position indication or by verifying that a differential pressure of[0.5]psid between the suppression chamber and drywell is maintained for 1 hour without makeup.The 14 day Frequency is based on engineering judgment, is considered adequate in view of other indications of vacuum breaker status available to operations personnel, and has been shown to be acceptable through operating experience. This verification is also required within 2 hours after any discharge of steam to the suppression chamber from the safety/relief valves or any operation that causes the drywell-to-suppression chamber differential pressure to be reduced by[0.5]psid.An open vacuum breaker allows communication between the drywell and suppression chamber airspace, and, as a result, there is the potential for suppression chamber overpressurization due to this bypass leakage if a LOCA were to occur.Therefore, the open vacuum breaker must be closed.A short time is allowed to close the vacuum breaker due to the low probability of an event that would pressurize primary containment. If vacuum breaker position indication is not reliable, an alternate method of verifying that the vacuum breakers are closed is to verify that a differential pressure of[0.5]psid between the suppression chamber and drywell is maintained for 1 hour without makeup.The required 2 hour Completion Time is considered adequate to perform this test. Suppression Chamber-to-Drywell Vacuum Breakers B 3.6.1.8 BWRl4STS ACTIONS (continued)@"@1 Suppression Chamber-to-Drywell Vacuum Breakers B 3.6.1.8 BASES SURVEILLANCE REQUIREMENTS (continued) opening vacuum breakers are controlled by plant procedures and do not represent inoperable vacuum breakers.SR 3.6.1.8.2 Each required vacuum breaker must be cycled to ensure that it opens adequately to perform its design function and returns to the fully closed position.This ensures that the safety analysis assumptions are valid.The 31 day Frequency of this SR was developed, based on Inservice Testing Program requirements to perform valve testing at least once every 92 days.A 31 day Frequency was chosen to provide additional assurance that the vacuum breakers are OPERABLE, since they are located in a harsh environment (the suppression chamber airspace). In addition, this functional test is required within 12 hours after either a discharge of steam to the suppression chamber from the safety/relief valves or after an operation that causes any of the vacuum breakers to open.SR 3.6.1.8.3 Verification of the vacuum breaker opening setpoint is necessary to ensure that the safety analysis assumption regarding vacuum breaker full open differential pressure of[0.5]psid is valid.The[18]month Frequency is based on the need to perform this Surveillance under the conditions that apply during a plant outage and the potential for an unplanned transient if the Surveillance were performed with the reactor at power.For this facility, the[18]month Frequency has been shown to be acceptable, based on operating experience, and is further justified because of other surveillances performed at shorter Frequencies that convey the proper functioning status of each vacuum breaker.REFERENCES 1.FSAR, Section[6.2].caM5eYij)BWRl4 STS B 3.6.1.8-5 Rev.2, 04/30/01 BWRl4 LCO 3.6.1.9 MSIV LCS INSERT 1 Remaining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 3)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.INSERT 2 3.NEDC-32988-A, Revision 2, Technical Justification to Support Risk-Informed Modification to Selected Required End States for BWR Plants, December 2002. MSIVLCS 3.6.1.9 3.6 CONTAINMENT SYSTEMS 3.6.1.9 Main Steam Isolation Valve (MSIV)Leakage Control System (LCS)LCO 3.6.1.9 APPLICABILITY: ACTIONS Two MSIV LCS subsystems shall be OPERABLE.MODES 1, 2, and 3.CONDITION REQUIRED ACTION COMPLETION TIME A.One MSIVLCS A.1 Restore MSIV LCS 30 days subsystem inoperable. subsystem to OPERABLE status.B.Two MSIV LCS 8.1 Restore one MSIV LCS 7 days subsystems inoperable. subsystem to OPERABLE status.C.Required Action and C.1 Be in MODE 3.12 hours associated Completion Time not met..2 SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.6.1.9.1 SR 3.6.1.9.2 SR 3.6.1.9.3 BWRl4STS Operate each MSIV LCS blower[15]minutes.31 days Verify electrical continuity of each inboard MSIV LCS 31 days subsystem heater element circuitry. Perform a system functional test of each MSIVLCS[18]months subsystem. 3.6.1.9-1 Rev.2, 04/30/01 BASES APPLICABILITY ACTIONS D\leta/l ('{, Ie ,...Yrlt'JlliM;zeJ SURVEILLANCE REQUIREMENTS MSIVLCS B 3.6.1.9 In MODES 1, 2, and 3, a DBA could lead to a fission product release to primary containment. Therefore, MSIV LCS OPERABILITY is required during these MODES.In MODES 4 and 5, the probability and consequences of these events are reduced due to the pressure and temperature limitations in these MODES.Therefore, maintaining the MSIV LCS OPERABLE is not required in MODE 4 or 5 to ensure MSIV leakage is processed. With one MSIV LCS subsystem inoperable, the inoperable MSIV LCS subsystem must be restored to OPERABLE status within 30 days.In this Condition, the remaining OPERABLE MSIV LCS subsystem is adequate to perform the required leakage control function.However, the overall reliability is reduced because a single failure in theremainingsubsystem could result in a total loss of MSIV leakage control function.The 30 day Completion Time is based on the redundant capability afforded by the remaining* OPERABLE MSIV LCS subsystem and the low probability of a DBA LOCA occurring during this period.With two MSIV LCS subsystems inoperable, at least one subsystem must be restored to OPERABLE status within 7 days.The 7 day Completion Time is based on the low probability of the occurrence of a DBA LOCA.If the MSIV LCS subsystem cannot be restored to OPERABLE status within the required om letion Time, the plant must be brought to a MODE in which the oes noI.iTo achieve this status, the plant must be brought to at least MODE 3 within 12 D. allowed Completion Timelh!easonable, based IS on operatineXperience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.SR 3.6.1.9.1 Each MSIV LCS blower is operated for[15]minutes to verify OPERABILITY. The 31 day Frequency was developed considering the known reliability of the LCS blower and controls, the two subsystem redundancy, and the low probability of a significant degradation of the BWRl4STS B 3.6.1.9-2 Rev.2, 04/30101 MSIVLCS B 3.6.1.9 BASES SURVEILLANCE REQUIREMENTS (continued) MSIV LCS subsystems occurring between surveillances and has been shown to be acceptable through operating experience. SR 3.6.1.9.2 The electrical continuity of each inboard MSIV LCS subsystem heater is verified by a resistance check, by verifying that the rate of temperature increase meets specifications, or by verifying that the current or wattage draw meets specifications. The 31 day Frequency is based on operating experience that has shown that these components usually pass this Surveillance when performed at this Frequency. SR 3.6.1.9.3 A system functional test is performed to ensure that the MSIV LCS will operate through its operating sequence.This includes verifying that the automatic positioning of the valves and the operation of each interlock and timer are correct, that the blowers start and develop the required flow rate and the necessary vacuum, and that the upstream heaters meet current or wattage draw requirements (if not used to verify electrical continuity in SR 3.6.1.9.2). The[18]month Frequency is based on the need to perform this Surveillance under the conditions that apply during a plant outage and the potential for an unplanned transient if the Surveillance were performed with the reactor at power.Operating experience has shown that these components usually pass the Surveillance when performed at the[18]month Frequency. Therefore, the Frequency was concluded to be acceptable from a reliability standpoint. REFERENCES 1.FSAR, Section[6.5].2.Regulatory Guide 1.96, Revision[1].BWRl4STS B 3.6.1.9-3 Rev.2, 04/30101 BWRl4 LCO 3.6.2.3 RHR Suppression Pool Cooling INSERT 1 If one RHR suppression pool cooling subsystem is inoperable and is not restored to OPERABLE status within the required Completion Time, theplantmust be brought to a condition in which the overall plant risk is minimized. To achieve this status, the plant must be brought to at least MODE 3 within 12 hours.Remaining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 2)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.The allowed Completion Time is reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.INSERT 2 2.NEDC-32988-A, Revision 2, Technical Justification to Support Risk-Informed Modification to Selected Required End States for BWR Plants, December 2002. RHR Suppression Pool Cooling 3.6.2.3 3.6 CONTAINMENT SYSTEMS 3.6.2.3 Residual Heat Removal (RHR)Suppression Pool Cooling LCO 3.6.2.3 APPLICABILITY: Two RHR suppression pool cooling sUbsystems shall be OPERABLE.MODES 1, 2, and 3.ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A.One RHR suppression A.1 Restore RHR suppression 7 days pool cooling subsystem pool cooling subsystem to inoperable. OPERABLE status.Two RHR suppression @1 Restore one RHR 8 hours pool cooling subsystemssuppression pool cooling inoperable. subsystem to OPERABLE status.I Required Action and l2 associated Completion TimEtliiot met.L C)-...Be in MODE 3.AND--:-Be in MODE 4.12 hours 36 hours SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.6.2.3.1 Verify each RHR suppression pool cooling 31 days subsystem manual, power operated, and automatic valve in the flow path that is not locked, sealed, or otherwise secured in position is in the correct position or can be aligned to the correct position...15,'BL;'" MOOE S.3.6.2.3-1 Rev.2, 04/30101 RHR Suppression Pool Cooling B 3.6.2.3 BASES LCO APPLICABILITYACTIONS During a DBA, a minimum of one RHR suppression pool cooling subsystem is required to maintain the primary containment peak pressure and temperature below design limits (Ref.1).To ensure that these requirements are met, two RHR suppression pool cooling subsystems must be OPERABLE with power from two safety related independent power supplies.Therefore, in the event of an accident, at least one subsystem is OPERABLE assuming the worst case single active failure.An RHR suppression pool cooling subsystem is OPERABLE when one of the pumps, the heat exchanger, and associated piping, valves, instrumentation, and controls are OPERABLE.In MODES 1, 2, and 3, a DBA could cause a release of radioactive material to primary containment and cause a heatup and pressurization of primary containment. In MODES 4 and 5, the probability and consequences of these events are reduced due to the pressure and temperature limitations in these MODES.Therefore, the RHR Suppression Pool Cooling System is not required to be OPERABLE in MODE 4 or 5.With one RHR suppression pool cooling subsystem inoperable, the inoperable subsystem must be restored to OPERABLE status within 7 days.In this Condition, the remaining RHR suppression pool cooling subsystem is adequate to perform the primary containment cooling function.However, the overall reliability is reduced because a single failure in the OPERABLE subsystem could result in reduced primary containment cooling capability. The 7 day Completion Time is acceptable in light of the redundant RHR suppressionpoolcooling capabilities afforded by the OPERABLE subsystem and the low probability of a DBA (In.s.e,t during this period.With two RHR suppression pool cooling subsystems inoperable, one subsystem must be restored to OPERABLE status within 8 hours.In this condition, there is a substantial loss of the primary containment pressure and temperature mitigation function.The 8 hour Completion Time is based on this loss of function and is considered acceptable due to the low probability of a DBA and the potential avoidance of a plant shutdown transient that could result in the need for the RHR suppression pool cooling subsystems to operate.BWRl4 STS B 3.6.2.3-2 Rev.2, 04/30101 RHR Suppression Pool Cooling B 3.6.2.3 BASES ACTIONS (continued) If the Required Action and associated Completion Time cannot be met, the plant must be brought to a MODE in which the LCO doesnt apply.To achieve this status, the plant must be brought to at least M DE 3 within 12 hours and to MODE 4 within 36 hours.The allowed ompletion Times are reasonable, based on operating experience, to reac the required plant conditions from full power conditions in an orderl manner and without challenging plant systems.SURVEILLANCE SR 3.6.2.3.1 REQUIREMENTS Verifying the correct alignment for manual, power operated, an automatic valves in the RHR suppression pool cooling mode flo path provides assurance that the proper flow path exists for system peration.This SR does not apply to valves that are locked, sealed, or oth rwise secured in position since these valves were verified to be in the correct position prior to locking, sealing, orsecuring.A valve is also all wed to be in the nonaccident position provided it can be aligned to the ccident position within the time assumed in the accident analysis.This is acceptable since the RHR suppression pool cooling mode is m nually initiated. This SR does not require any testing or valve manipulation; rather, it involves verification that those valves capable of being mispositioned are in the correct position.This SR does not ap Iy to valves that cannot be inadvertently misaligned, such as check alves.The Frequency of 31 days is justified because the valves are 0 erated under procedural control, improper valve position would affect nlya single subsystem, the probability of an event requiring initiation of the system is low, and the subsystem is a manually initiated syste.This Frequency has been shown to be acceptable based on operati g experience. SR 3.6.2.3.2 Verifying that each RHR pump develops a flow rategm while operating in the suppression pool cooling mode with flow throu h the associated heat exchanger ensures that pump performance ha not degraded during the cycle.Flow is a normal test of centrifugal ump.h""\3 performance required by ASME Code, Section XI (Ref..I test\.::V confirms one point on the pump design curve, and the resultsae indicative of overall performance. Such inservice inspections c nfirm component OPERABILITY, trend performance, and detect inci ient BWRl4 STS B 3.6.2.3-3 Rev.,04/30101 BASES SURVEILLANCE REQUIREMENTS (continued) Rev.2,04/30/01 B 3.6.2.3-4 ASME, Boiler and Pressure Vessel Code, Section XI.failures by indicating abnormal performance. The Frequency of this SR is[in accordance with the Inservice Testing Program or 92 days].RHR Suppression Pool Cooling B 3.6.2.3 BWRl4STS REFERENCES 1.FSAR, Section[6.2].---.:;. BWRl4 Leo 3.6.2.4 RHR Suppression Pool Spray INSERT 1 Remaining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 2)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.INSERT 2 2.NEDC-32988-A, Revision 2, Technical Justification to Support Risk-Informed Modification to Selected Required End States for BWR Plants, December 2002. RHR Suppression Pool Spray 3.6.2.4 3.6 CONTAINMENT SYSTEMS 3.6.2.4 Residual Heat Removal (RHR)Suppression Pool Spray LCO 3.6.2.4 APPLICABILITY: ACTIONS Two RHR suppression pool spray subsystems shall be OPERABLE.MODES 1, 2, and 3.CONDITION REQUIRED ACTION COMPLETION TIME A.One RHR suppression A.1 Restore RHR suppression 7 days pool spray subsystem pool spray subsystem to inoperable. OPERABLE status.B.Two RHR suppression B.1 Restore one RHR 8 hours pool spray sUbsystems suppression pool spray inoperable. subsystem to OPERABLE status.C.Required Action and C.1 Be in MODE 3.12 hours associated Completion /Time not met.AND SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.6.2.4.1 BWRl4STS Verify each RHR suppression pool spray subsystem 31 days manual, power operated, and automatic valve in the flow path that is not locked, sealed, or otherwise secured in position is in the correct position or can be aligned to the correct position.3.6.2.4-1 Rev.2, 04/30101 RHR Suppression Pool Spray B 3.6.2.4 BASES ACTIONS (continued)If the inoperable RHR suppression pool spray subsystem cannot be restored to OPERABLE status within the associated Completion Time, the plant must be brought to a MODE in which thc\LCQ:?Oes To achieve this status, the plant must be brou ht to at least MODE 3within 12 hours@nd)A8'OE 4 Within S&FidUii.he allowed Completionreasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.low probability of a DBA and because alternative methods to remove heat from primary containment are available. SURVEILLANCE SR 3.6.2.4.1 REQUIREMENTS Verifying the correct alignment for manual, power operated, and automatic valves in the RHR suppression pool spray mode flow path provides assurance that the proper flow paths will exist for system operation. This SR does not apply to valves that are locked, sealed, or otherwise secured in position since these valves were verified to be in the correct position prior to locking, sealing, or securing.A valve is also allowed to be in the nonaccident position provided it can be aligned to the accident position within the time assumed in the accident analysis.This is acceptable since the RHR suppression pool cooling mode is manually initiated. This SR does not require any testing or valve manipulation; rather, it involves verification that those valves capable of being mispositioned are in the correct position.This SR does not apply to valves that cannot be inadvertently misaligned, such as check valves.The Frequency of 31 days is justified because the valves are operated under procedural control, improper valve position would affect only a single subsystem, the probability of an event requiring initiation of the system is low, and the subsystem is a manually initiated system.This Frequency has been shown to be acceptable based on operating experience. SR 3.6.2.4.2 Verifying each RHR pump develops a flow rate[400]gpm while operating in the suppression pool spray mode with flow through the heat exchanger ensures that pump performance has not degraded during the cycle.Flow is a normal test of centrifugal pump performance required by BWRl4 STS B 3.6.2.4-3 Rev.2, 04/30101 RHR Suppression Pool Spray B 3.6.2.4 BASES SURVEILLANCE REQUIREMENTS (continued)Section XI of the ASME Code This test confirms one point on the pump design curve and is indicative of overall performance. Such inservice inspections confirm component OPERABILITY, trend performance, and detect incipient failures by indicating abnormal performance. The Frequency of this SR is[in accordance with the Inservice Testing Program, but the Frequency must not exceed 92 days].REFERENCES 1.FSAR, Section[6.2].ASME, Boiler and Pressure Vessel Code, Section XI.BWRl4STS B 3.6.2.4-4 Rev.2, 04/30101 TSTF-423 BWR/4 LCO 3.6.4.1, Secondary C ontainment INSERT 1 Rem aining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref. 3), because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will b e short. However, voluntary entry into MODE 4 may be made as it is also an acceptable low -risk state. INSERT 2 3. NEDC-32988-A, Revision 2, Technical Justification to Support Risk -Informed Modification to Selected Required End States for BWR Plants, Dece mber 2002.
[Secondary] Containment 3.6.4.1 3.6 CONTAINMENT SYSTEMS 3.6.4.1[Secondary] Containment LCO 3.6.4.1 APPLICABILITY: ACTIONS The[secondary] containment shall be OPERABLE.MODES 1, 2, and 3, During movement of[recently] irradiated fuel assemblies in the[secondary] containment, During operations withapotential for draining the reactor vessel (OPDRVs).CONDITION REQUIRED ACTION COMPLETION TIME A,[Secondary] containment A,1 Restore[secondary] 4 hours inoperable in MODE 1, containment to 2,or3.OPERABLE status.B.Required Action and B.1 Be in MODE 3.12 hours associated Completion -Time of Condition A not AND met.C.[Secondary] containment C.1---------------------------- inoperable during-NOTE-movement of[recently] LCO 3.0.3 is not irradiated fuel applicable.
assemblies in the[secondary] containment Suspend movement of Immediately or during OPDRVs.[recently] irradiated fuel assemblies in the[secondary] containment. AND C.2 Initiate action to suspend Immediately OPDRVs.BWRl4STS 3.6.4.1-1 Rev.2, 04/30101 ACTIONS BASES Rev.2, 04/30/01 B 3.6.4.1-3-Duringfuel handling/core alterations, ventilation system and radiation monitor availability (as defined in NUMARC 91-06)should be assessed, with respect to filtration and monitoring of releases from the fuel.Following shutdown, radioactivity in the fuel decays away fairly rapidly.The basis of the Technical Specification operability amendment is the reduction in doses due to such decay.The goal of maintaining ventilation system and radiation monitor availability is to reduce doses even further below that provided by the natural decay.-A single normal or contingency method to promptly close primary or secondary containment penetrations should be developed. Such prompt methods need not completely block the penetration or be capable of resisting pressure.If[secondary] containment is inoperable, it must be restored to OPERABLE status within 4 hours.The 4 hour Completion Time provides a period of time to correct the problem that is commensurate with the importance of maintaining [secondary] containment during MODES 1, 2, and 3.This time period also ensures that the probability of an accident (requiring [secondary] containment OPERABILITY) occurring during periods where[secondary] containment is inoperable is minimal.[Secondary] Containment B 3.6.4.1 The purpose of the"prompt methods" mentioned above are to enable ventilation systems to draw the releasefroma postulated fuel handling accident in the proper direction such that it can be treated and monitored." APPLICABILITY (continued) BWRl4 STS If[secondary] containment cannot be restored to OPERABLE status C)ve>/'ell1 J within the required Completion Time, the plant must be brought to a (,'"Ie IS Yl1I'hr/ll'llze MODE in which th L esTo achieve this statusREfe plant must be brought to at least MODE 3 within 12 4)G:v-allowed Completion TimJ'lIlireasonable, basedJ:l£} I r1..s e ,,-+! opefFg experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems. BASES SURVEILLANCE REQUIREMENTS (continued) Rev.2, 04/30101 B 3.6.4.1-6 2.FSAR, Section[15.1.41]. [secondary] containment boundary integrity. The secondary purpose of these SR[s]is to ensure that the SGT subsystem being tested functions as designed.There is a separate LCO with Surveillance Requirements which serves the primary purpose of ensuring OPERABILITY of the SGT System.These SR[s]need not be performed with each SGT subsystem. The SGT subsystem used for these Surveillance[s] is staggered to ensure that in addition to the requirements of LCO 3.6.4.3, either SGT subsystem will perform this test.The inoperability of the SGT System does not necessarily constitute a failure of these Surveillance[s] relative to the[secondary] containment OPERABILITY. Operating experience has shown the[secondary] containment boundary usually passes these Surveillance[s] when performed at the[18]month Frequency. Therefore, the Frequency was concluded to be acceptable from a reliability standpoint. [Secondary] Containment B 3.6.4.1 1.FSAR, Section[15.1.39]. BWRl4 STS REFERENCES BWRl4 LeO 3.6.4.3 SGT System INSERT 1 Remaining in the Applicability oftheLCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 3)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.INSERT 2 Therefore, the plant must be brought to a MODE in which the overall plant risk is minimized. To achieve this status, the plant must be brought to at least MODE 3 within 12 hours.Remaining in the Applicability oftheLCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 3)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.The allowed Completion Time is reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.INSERT 3 3.NEDC-32988-A, Revision 2, Technical Justification to Support Risk-Informed Modification to Selected Required End States for BWR Plants, December 2002. SGT System 3.6.4.3 3.6 CONTAINMENT SYSTEMS 3.6.4.3 Standby Gas Treatment (SGT)SystemLCO3.6.4.3 APPLICABILITY: ACTIONS[Two]SGTsUbsystemsshall be OPERABLE.MODES 1, 2, and 3, During movement of[recently] irradiated fuel assemblies in the[secondary] containment, During operations with a potential for draining the reactor vessel (OPDRVs).CONDITION REQUIRED ACTION COMPLETION TIME A.One SGT subsystem A.1 Restore SGT subsystem 7 days inoperable. to OPERABLE status.B.Required Action and B.1 Be in MODE 3.12 hours associated Completion Time of Condition A not V: met in MODE 1, 2, or 3. C.Required Action and._-------------------------- associated Completion .NOTE*Time of Condition A not LCO 3.0.3 is not met during movement of applicable. ._-------------------------- [recently] irradiated fuel assemblies in the C.1 Place OPERABLE SGT Immediately [secondary] containment subsystem in operation. or during OPDRVs.OR C.2.1 Suspend movement of Immediately [recently]. irradiated fuel assemblies in[secondary] containment. AND BWRJ4STS 3.6.4.3-1 Rev.2, 04/30101 SGT System 3.6.4.3 ACTIONS (continued) CONDITION REQUIRED ACTION COMPLETION TIME C.2.2 Initiate action to suspend Immediately OPDRVs. D.Two SGT subsystems D.1 inoperable in MODE 1, Be;/'), M OOE 3.J?.hov(l!',S 2,or3.E.Two SGT subsystems E.1---------------------------- inoperable during-NOTE-movement of[recently] LCO 3.0.3 is not irradiated fuel applicable. ._-------------------------- assemblies in the[secondary] containment Suspend movement of Immediately or during OPDRVs.[recently] irradiated fuel assemblies in[secondary] containment. AND E.2 Initiate action to suspend Immediately OPDRVs.SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.6.4.3.1 Operate each SGT subsystem for[10]continuous 31 days hours[with heaters operating]. SR 3.6.4.3.2 Perform required SGT filter testing in accordance In accordance with the Ventilation Filter Testing Program (VFTP).with the VFTP SR 3.6.4.3.3 Verify each SGT subsystem actuates on an actual or[18]months simulated initiation signal.SR 3.6.4.3.4[Verify each SGT filter cooler bypass damper can be[18]months]opened and the fan started.BWRJ4 STS 3.6.4.3-2 Rev.2, 04/30101 BASES ACTIONS SGT System B 3.6.4.3 With one SGT subsystem inoperable, the inoperable subsystem must be restored to OPERABLE status in 7 days.In this Condition, the remaining OPERABLE SGT subsystem is adequate to perform the required radioactivity release control function.However, the overall system reliability is reduced because a single failure in the OPERABLE subsystem could result in the radioactivity release control function not being adequately performed. The 7 day Completion Time is based on consideration of such factors as the availability of the OPERABLE redundant SGT System and the low probability of a DBA occurring during this period.B.1§ij(2)If the SGT subsystem cannot be restored to OPERABLE status within the required Com letion Time in MODE 1, 2,or 3, the plant must be brought to a MODE in which the C es nl1t1l I.To achieve this status, the plant must be brought to at least MODE 3 within 12 hours(Ci@O'!EfM08E 4J allowed Completion based:J:@on operamg experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.C.1, C.2.1, and C.2.2 During movement of[recently] irradiated fuel assemblies, in the[secondary] containment or during OPDRVs, when Required Action A.1 cannot be completed within the required Completion Time, the OPERABLE SGT SUbsystem should immediately be placed in operation. This action ensures that the remaining subsystem is OPERABLE, that no failures that could prevent automatic actuation have occurred, and that any other failure would be readily detected.An alternative to Required Action C.1 is to immediately suspend activities that representapotential for releasing a significant amount of radioactive material to the[secondary] containment, thus placing the plant in a condition that minimizes risk.If applicable, movement of[recently] irradiated fuel assemblies must immediately be suspended. Suspension of these activities must not preclude completion of movement of a component to a safe position.Also, if applicable, actions must immediately be initiated to suspend OPDRVs in order to minimize the probability of a vessel draindown and subsequent potential for fission product release.Actions must continue until OPDRVs are suspended. BWRl4 STS B 3.6.4.3-3 Rev.2, 04/30/01 SGT System B 3.6.4.3 BASES ACTIONS (continued) The Required Actions of Condition C have been modified by a Note stating that LCO 3.0.3 is not applicable. If moving[recently] irradiated fuel assemblies while in MODE 4 or 5, LCO 3.0.3 would not specify any action.If moving[recently] irradiated fuel assemblies while in MODE 1, 2, or 3, the fuel movement is independent of reactor operations. Therefore, in either case, inability to suspend movement of[recently] irradiated fuel assemblies would not be a sufficient reason to require a reactor shutdown.If both SGTS subsystems are inoperable in MODE 1, 2, or 3, the SGT system may not be capable of supporting the required radioactivity release control function.There ,c Ions ulre t er LC..Imme y.E.1 and E.2 When two SGT subsystems are inoperable, if applicable, movement of[recently] irradiated fuel assemblies in[secondary] containment must immediately be suspended. Suspension of these activities shall not preclude completion of movement of a component to a safe position.Also, if applicable, actions must immediately be initiated to suspend OPDRVs in order to minimize the probability of a vessel draindown and subsequent potential for fission product release.Actions must continue until OPDRVs are suspended. Required Action E.1 has been modified by a Note stating that LCO 3.0.3 is not applicable. If moving[recently] irradiated fuel assemblies while in MODE 4 or 5, LCO 3.0.3 would not specify any action.If moving[recently] irradiated fuel assemblies while in MODE 1, 2, or 3, the fuel movement is independent of reactor operations. Therefore, in either case, inability to suspend movement of[recently] irradiated fuel assemblies would not be a sufficient reason to require a reactor shutdown.SURVEILLANCE SR 3.6.4.3.1 REQUIREMENTS Operating each SGT sUbsystem for[10]continuous hours ensures that[both]subsystems are OPERABLE and that all associated controls are functioning properly.It also ensures that blockage, fan or motor failure, or excessive vibration can be detected for corrective action.Operation[with the heaters on (automatic heater cycling to maintain temperature)] BWRl4 STS B 3.6.4.3-4 Rev.2, 04/30101 SGT System B 3.6.4.3 BASES SURVEILLANCE REQUIREMENTS (continued) for[10]continuous hours every 31 days eliminates moisture on the adsorbers and HEPA filters.The 31 day Frequency was developed in consideration of the known reliability of fan motors and controls and the redundancy available in the system.SR 3.6.4.3.2 This SR verifies that the required SGT filter testing is performed in accordance with the Ventilation Filter Testing Program (VFTP).The VFTP includes testing HEPA filter performance, charcoal adsorber efficiency, minimum system flowrate,and the physical properties of the activated charcoal (general use and following specific operations). Specific test frequencies and additional information are discussed in detail in the VFTP.SR 3.6.4.3.3 This SR verifies that each SGT subsystem starts on receipt of an actual or simulated initiation signal.While this Surveillance can be performed with the reactor at power, operating experience has shown that these components usually pass the Surveillance when performed at the[18]month Frequency. The LOGIC SYSTEM FUNCTIONAL TEST in SR 3.3.6.2.6 overlaps this SR to provide complete testing of the safety function.Therefore, the Frequency was found to be acceptable from a reliability standpoint. [SR 3.6.4.3.4 This SR verifies that the filter cooler bypass damper can be opened and the fan started.This ensures that the ventilation mode of SGT System operation is available. While this Surveillance can be performed with the reactor at power, operating experience has shown that these components usually pass the Surveillance when performed at the[18]month Frequency, which is based on the refueling cycle.Therefore, the Frequency was found to be acceptable from a reliability standpoint. ]REFERENCES 1.10 CFR 50, Appendix A, GDC 41.2.FSAR, Section[6.2.3].BWRl4STS B 3.6.4.3-5 Rev.2, 04/30101 BWRl4 Leo 3.7.1 RHRSW System INSERT 1 If one RHRSW subsystem is inoperable or one RHRSW pump in one or two subsystems is inoperable and not restored within the provided Completion Time, the plant must be brought to a condition in which the overall plant risk is minimized. To achieve this status, the plant must be brought to at least MODE 3 within 12 hours.Remaining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 5)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.The allowed Completion Time is reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.INSERT 2 5.NEDC-32988-A, Revision 2, Technical Justification to Support Risk-Informed Modification to Selected Required End States for BWR Plants, December 2002. 3.7 PLANT SYSTEMS 3.7.1 Residual Heat Removal Service Water (RHRSW)System RHRSW System 3.7.1 LCO 3.7.1 APPLICABILITY: ACTIONS Two RHRSW subsystems shall be OPERABLE.MODES 1, 2, and 3.CONDITION REQUIRED ACTION COMPLETION TIME A.One RHRSW pump A.1 Restore RHRSW pump to 30 days inoperable. OPERABLE status.B.One RHRSW pump in B.1 Restore one RHRSW 7 days each su bsystem pump to OPERABLE inoperable. status.C.One RHRSW subsystem C.1._-------------------------- inoperable for reasons-NOTE-other than Condition A.Enter applicable Conditions and Required Actions of LCO 3.4.8,"Residual Heat Removal (RHR)Shutdown Cooling System-Hot Shutdown," for[RHR shutdown cooling]made inoperable by RHRSW System.._-------------------------- Restore RHRSW 7 days subsystem to OPERABLE status./'D.Re1IA-;veJ !+e,-h'f)... I ,'iSf!Ih MODE s.I l.,OUI';"J' 0,1,+J (p UfJ'l>'" a.S Sf>CI<II t VYJ!'-r J cP lI'Id, 'rYe 0 A 13 I'C nof Wle1:)IBWRl4 STS 3.7.1-1 Rev.2, 04/30101 ACTIONS (continued) RHRSW System 3.7.1...............I CONDITION REQUIREQ ACTION COMPLETION TIME@Both RHRSW:1._--------
subsystems inoperable NOTE*E for reasons other than Enter ap1cable Condition B.Condition and Required Actions 0.LCO 3.4.8 for[RHR shutdown cooling]made ino;erable by RHRSW ystem.----------:----------------- Restore ohe RHRSW[8]hours to OPERABLE status.;Required Action and@1 Be in 3.12 hours associated CompletionTime'fiot met.): G.f 0 Be in 4.@.2 36 hours SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.7.1.1 Verify each RHRSW manual, poyver operated, and 31 days automatic valve in the flow path, lthat is not locked, sealed, or otherwise secured in is in the correct position or can be to the correct position.I BWRl4 STS 3.7.1-2 Rev.2, 04/30101 RHRSW System B 3.7.1 BASES ACTIONS (continued) C.1 Required Action C.1 is intended to handle the inoperability of one RHRSW subsystem for reasons other than Condition A.The Completion Time of 7 days is allowed to restore the RHRSW subsystem to OPERABLE status.With the unit in this condition, the remaining OPERABLE RHRSW subsystem is adequate to perform the RHRSW heat removal function.However, the overall reliability is reduced because a single failure in the OPERABLE RHRSW subsystem could result in loss of RHRSW function.The Completion Time is based on the redundant RHRSW capabilities afforded by the OPERABLE subsystem and the low probability of an event occurring requiring RHRSW during this period.The Required Action is modified by a Note indicating that the applicable Conditions of LCO 3.4.8, be entered and Required Actions taken if the inoperable RHRSW subsystem results in inoperable [RHR shutdown cooling].This is an exception to LCO 3.0.6 and ensures the proper r-r:::i"\actions are taken for these components.Y\ser+.3J-([P'-' With both RHRSW subsystems inoperable for reasons other than Condition B (e.g., both subsystems with inoperable flow paths, or one subsystem with an inoperable pump and one subsystem with an inoperable flow path), the RHRSW System is not capable of performing its intended function.At least one subsystem must be restored to OPERABLE status within 8 hours.The 8 hour Completion Time for restoring one RHRSW subsystem to OPERABLE status, is based on the Completion Times provided for the RHR suppression pool cooling and spray functions. The Required Action is modified by a Note indicating that the applicable Conditions of LCO 3.4.8, be entered and Required Actions taken if the inoperable RHRSW sUbsystem results in inoperable [RHR shutdown cooling].This is an exception to LCO 3.0.6 and ensures the proper actions are taken for these components.Iflthe RHRSW subsystems cannot be not estored to OPERABLE status within the associated Completion Time , he unit must be placed in a MODE in which the LCO does not apply.To achieve this status, the unit must be placed in at least MODE 3 within 12 hours and in MODE 4 within BWRl4 STS B3.7.1-4 Rev.2, 04/30101 RHRSW System 83.7.1 8ASES ACTIONS (continued) 36 hours.The allowed Completion Times are reasonable, based on operating experience, to reach the required unit conditions from full power conditions in an orderly manner and without challenging unit systems.SURVEILLANCE SR 3.7.1.1 REQUIREMENTS The 31 day Frequency is based on engineering judgment, is consistent with the procedural controls governing valve operation, and ensures correct valve positions. Verifying the correct alignment for each manual, power operated, and automatic valve in each RHRSW sUbsystem flow path provides assurance that the proper flow paths will exist for RHRSW operation. This SR does not apply to valves that are locked, sealed, or otherwise secured in position, since these valves are verified to be in the correct position prior to locking, sealing, orsecuring.A valve is also allowed to be in the nonaccident position, and yet considered in the correct position, provided it can be realigned to its accident position.This is acceptable because the RHRSW System is a manually initiated system.This SR does not require any testing or valve manipulation; rather, it involves verification that those valves capable of being mispositioned are in the correct position.This SR does not apply to valves that cannot be inadvertently misaligned, such as check valves.Rev.2, 04/30101 3.FSAR, Chapter[15l 4.FSAR, Section[6.2.1.4.3l 83.7.1-5 2.FSAR, Chapter[6].1.FSAR, Section[9.2.7].REFERENCES BWRl4 STS TSTF-423 BWR/4 LCO 3.7.2 PSW System and UHS INSERT 1 C.1 If one PSW pump in one or both subsystems is inoperable and is not resto red to OPERABLE status within the required Completion Times, the plant must be brought to a condition in which
the overall plant risk is minimized. To achieve this status, the plant must be brought to at least
MODE 3 within 12 hours. Remaining in the Appl icability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref. 3) and because the
time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE
status will be short. Howev er, voluntary entry into MODE 4 may be made as it is also an acceptable low -risk state. The allowed Completion Time is reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly
manner and wi thout challenging plant systems. INSERT 2 3. NEDC-32988-A, Revision 2, Technical Justification to Support Risk -Informed Modification to Selected Required End States for BWR Plants, December 2002.
[PSW]System and[UHS]3.7.2 3.7 PLANT SYSTEMS 3.7.2[Plant Service Water (PSW)]System and[Ultimate Heat Sink (UHS)]LCO 3.7.2 Two[PSW]subsystems and[UHS]shall be OPERABLE.APPLICABILITY: MODES 1, 2, and 3.ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A.One[PSW]pump inoperable. A.1 Restore[PSW]pump to OPERABLE status.30 days 7 days]7 days Restore one[PSW]pump to OPERABLE status.Restore cooling tower fan(s)to OPERABLE status.B.1 B.One[PSW]pump in each subsystem inoperable. r@[oneormorecoolin g towers with one cooling tower fan inoperable. -REVIEWER'S NOTEThe[]°F is the maximum allowed UHS temperature value and is based on temperature limitations of the equipment that is relied upon for accident mitigation and safe shutdown of the unit. Verify water temperature of the UHS is[90]°F averaged over the previous 24 hour period.Once per hour]o@.[Water temperature of'V the UHS>[90]OF and[]OF.c., BWRl4 STS 3.7.2-1 Rev.2, 04/30101 [PSW]System and[UHS]3.7.2 ACTIONS (continued) __. CONDITION One[PSW]sUbsystem inoperable for reasons other than Condition[s] A @j REQUIRED ACTION*NOTES*1.Enter applicable Conditions and Required Actions of LCO 3.8.1,"AC SourcesOperating," for diesel generator made inoperable by[PSW].2.Enter applicable Conditions and Required Actions of LCO 3.4.8,"Residual Heat Removal (RHR)Shutdown Cooling System-Hot Shutdown," for[RHR shutdown cooling]made inoperable by[PSW].COMPLETION TIME Restore the[PSW]72 hours subsystem to OPERABLE status.BWRl4 STS 3.7.2-2 Rev.2, 04/30101 [PSW]System and[UHS]3.7.2 ACTIONS (continued) CONDITION[Required Action and associated Completion Time of met]fl)?OR Both[PSW]subsystems inoperable for reasons other than Condition[s] B[andl@[OR[UHS]inoperable for reasons other@.Condition ]REQUIRED ACTION F.1 Be in MODE 3.F.2 Be in MODE 4.COMPLETION TIME 12 hours 36 hours SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.7.2.1 SR 3.7.2.2 SR3.7.2.3 SR 3.7.2.4 BWRl4 STS[Verify the water level of each[PSW]cooling tower 24 hours]basin is[]ft.[Verify the water level[in each PSW pump well of the 24 hours]intake structure] is[60.1]ft[mean sea level].[Verify the average water temperature of[UHS]is 24 hours]::;[]OF.[Operate each[PSW]cooling tower fan for 31 days][15]minutes.3.7.2-3 Rev.2, 04/30101 [PSW]System and[UHS]B 3.7.2 BASES ACTIONS With one[PSW]pump inoperable in each subsystem, the inoperable pump must be restored to OPERABLE status within 7 days.With the unit in this condition, the remaining OPERABLE[PSW]pumps (even allowing for an additional single failure)are adequate to perform the[PSW]heat removal function;however, the overall reliability is reduced.The 30 day Completion Time is based on the remaining[PSW]heat removal capability to accommodate additional single failures, and the low probability of an event occurringduringthis time period.With one[PSW]pump inoperable ineachsubsystem, one inoperable pump must be restored to OPERABLE status within 7 days.With the unit in this condition, the remaining OPERABLE[PSW]pumps are adequate to perform the[PSW]heat removal function;however, the overall reliability is reduced.The 7 day Completion Time is based on the remaining[PSW]heat removal capability to accommodate an additional single failure and the low probability of an event occurring during this time (rflS U+If one or more cooling towers have one fan inoperable (Le., up to one fan per cooling tower inoperable), action must be taken to restore the inoperable cooling tower fan(s)to OPERABLE status within 7 days.The 7 day Completion Time is based on the low probability of an accident occurring during the 7 days that one cooling tower fan is inoperable in one or more cooling towers, the number of available systems, and the time required to reasonably complete the Required Action.]*REVIEWER'S NOTE*The[]OF is the maximum allowedUHS temperature value and is based on temperature limitations of the equipment that is relied upon for accident mitigation and safe shutdown of the unit.With water temperature of the UHS>[90]OF, the design basis assumption associated with initial UHS temperature are bounded provided the temperature of the UHS averaged over the previous 24 hour period is[90]OF.With the water temperature of the UHS>[90]OF, long term cooling capability of the ECCS loads and DGs may be affected.BWRl4 STS B 3.7.2-3 Rev.2,04/30101 [PSW]System and[UHS]B 3.7.2 BASES ACTIONS (continued) Therefore, to ensure long term cooling capability is provided to the ECCS loads when water temperature of the UHS is>[90]OF, Required Action is provided to more frequently monitor the water temperature of the UHS and verify the temperature is:;;[90]OF when averaged over the previous 24 hour period.The once per hour Completion Time takes into.consideration UHS variations and the increased monitoring frequencyneededto ensure design basis assumptions and equipment limitations are not exceeded in this condition. If the water temperature of the UHS exceeds[90]OF when averaged over the previous 24 hour period or the water temperature of the UHS exceeds[]OF, Condition F must be entered immediately.]With one[PSW] for reasons other than Condition A and inoperable flow path or both pumps inoperable in a loop), the[PSW]subsystem must be restored to OPERABLE status within 72 hours.With the unit in this condition, the remaining OPERABLE[PSW]subsystem is adequate to perform the heat removal function.However, the overall reliability is reduced because a single failure in the OPERABLE[PSW]subsystem could result in loss of[PSW]function.The 72 hour Completion Time is based on the redundant[PSW]System capabilities afforded by the OPERABLE subsystem, the low probability of an accident occurring during this time period, and is consistent with the allowed Completion Time for restoring an inoperable DG.Required modified by two Notes indicating that the applicable Conditions of LCO 3.8.1,"AC Sources-Operating," LCO 3.4.8,"Residual Heat Removal (RHR)Shutdown Cooling SystemHot Shutdown," be entered and Required Actions taken if the inoperable [PSW]subsystem results in an inoperable DG or RHR shutdown cooling subsystem, respectively. This is in accordance with LCO 3.0.6 and ensures the proper actions are taken for these components. If he[P subsystem be rest 0 0 a'.th Il!IJe 0 oth[PSW]subsystems ar inoperable for reasons ot er than Condition B and[or[UHS]is determined inoperable for reasons other than Condition C or<mthe unit must be placed in a MODE in which the LCO does not apply.To 8WRJ4 STS 83.7.2-4 Rev.2, 04/30101 [PSW]System and[UHS]B 3.7.2 BASES SURVEILLANCE REQUIREMENTS (continued) SR 3.7.2.5 Verifying the correct alignment for each manual, power operated, and automatic valve in each[PSW]subsystem flow path provides assurance that the proper flow paths will exist for[PSW]operation. This SR does not apply to valves that are locked, sealed, or otherwise secured in position, since these valves were verified to be in the correct position prior to locking, sealing, or securing.A valve is also allowed to be in the nonaccident position, and yet considered in the correct position, provided it can be automatically realigned to its accident position within the required time.This SR does not require any testing or valve manipulation; rather, it involves verification that those valves capable of being mispositioned are in the correct position.This SR does not apply to valves that cannot be inadvertently misaligned, such as check valves.This SR is modified by a Note indicating that isolation of the[PSW]System to components or systems may render those components or systems inoperable, but does not affect the OPERABILITY of the[PSW]System.As such, when all[PSW]pumps, valves, and piping are OPERABLE, but a branch connection off the main header is isolated, the[PSW]System is still OPERABLE.The 31 day Frequency is based on engineering judgment, is consistent with the procedural controls governing valve operation, and ensures correct valve positions. SR 3.7.2.6 This SR verifies that the automatic isolation valves of the[PSW]System will automatically switch to the safety or emergency position to provide cooling water eXclusively to the safety related equipment during an accident event.This is demonstrated by the use of an actual or simulated initiation signal.This SR also verifies the automatic start capability of one of the two[PSW]pumps in each subsystem. Operating experience has shown that these components usually pass the SR when performed at the[18]month Frequency. Therefore, this Frequency is concluded to be acceptable from a reliability standpoint. REFERENCES 1.FSAR, Chapter[4].Rev.2, 04/30101 2.FSAR, Chapter[6]. BWRl4 STS B 3.7.2-6............ _.__.-- BWR/4 LCO 3.7.4 MCREC System INSERT 1 Remaining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 5)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.INSERT 2 Therefore, the plant must be brought to a MODE in which the overall plant risk is minimized. To achieve this status, the plant must be brought to at least MODE 3 within 12 hours.Remaining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 5)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.The allowed Completion Time is reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.INSERT 3 5.NEDC-32988-A, Revision 2, Technical Justification to Support Risk-Informed Modification to Selected Required End States for BWR Plants, December 2002. [MCREC]System 3.7.4 3.7 PLANT SYSTEMS 3.7.4[Main Control Room Environmental Control (MCREC)]System LCO 3.7.4 APPLICABILITY: ACTIONS Two[MCREC]subsystems shall be OPERABLE.-NOTE-The main control room boundary may be opened intermittently under administrative control MODES 1, 2, and 3, During movement of[recently] irradiated fuel assemblies in the[secondary] containment, During operations withapotential for draining the reactor vessel (OPDRVs).CONDITION REQUIRED ACTION COMPLETION TIME A.One[MCREe]A.1 Restore[MCREe]7 days subsystem inoperable. subsystem to OPERABLE status.B.Two[MCREe]B.1 Restore control room 24 hours subsystems inoperable boundary to OPERABLE due to inoperable control status.room boundary in MODE 1,2, or 3.C.Required Action and C.1 Be in MODE 3.12 hours associated Completion -Time of Condition A or Bnot met in MODE 1, 2,or 3.BWRl4 STS 3.7.4-1 Rev.2, 04/30101 ACTIONS (continued) [MCREe]System 3.7.4...'.......-.-....-........... ." CONDITION REQUIRED ACTION COMPLETION TIME D.Required Action and._-------------------------- associated Completion
- NOTE*Time of Condition A not LCO 3.0.3 is not met during movement of applicable.
._-------------------------- [recently] irradiated fuel assemblies in the D.1._-------------------------- [secondary] containment
- NOTE*or during OPDRVs.[Place in toxic gas protection mode if automatic transfer to toxic gas protection mode is inoperable.
]._-------------------------- Place OPERABLE Immediately [MCREe]subsystem in[pressurization] mode.OR D.2.1 Suspend movement of Immediately [recently]. irradiated fuel assemblies in the[secondary] containment. AND D.2.2 Initiate action to suspend Immediately OPDRVs. E.Two[MCREe]E.1 subsystems inoperable in MODE 1, 2, or 3 for;If\MO()ff 1-/2 houa reasons other than Condition B.BWRl4STS 3.7.4-2 Rev.2,04/30101 [MCREC]System B 3.7.4 BASES ACTIONS (continued) If the main control room boundary is inoperable in MODE 1, 2, or 3, the MCREC trains cannot perform their intended functions. Actions must be taken to restore an OPERABLE main control room boundary within 24 hours.During the period that the main control room boundary is inoperable, appropriate compensatory measures (consistent with the intent of GDC 19)should be utilized to protect control room operators from potential hazards such as radioactive contamination, toxic chemicals, smoke, temperature and relative humidity, and physical security.Preplanned measures should be available to address these concerns for intentional and unintentional entry into the condition. The 24 hour Completion Time is reasonable based on the low probability of a DBA occurring during this time period, and the use of compensatory measures.The 24 hour Completion Time is a typically reasonable time to diagnose, plan and possibly repair, and test most problems with the main control room boundary. In MODE 1, 2, or 3, if the inoperable [MCREC]subsystem or control room boundary cannot be restored to OPERABLE status within the associated 7\Completion Time, the unit must be placed in a MODE that minimizes risk.To achieve this status, the unit must be laced in at least MODE 3 within 12 hours an I4..3r The allowed Completion Time,.t@reasona e, based on operating experience, to reach the required unit conditions from full power conditions in an orderly manner and without challenging unit systems.0.1, 0.2.1 and 0.2.2 The Required Actions of Condition 0 are modified by a Note indicating that LCO 3.0.3 does not apply.If moving irradiated fuel assemblies while in MODE 1, 2, or 3, the fuel movement is independent of reactor operations. Therefore, inability to suspend movement of[recently] irradiated fuel assemblies is not sufficient reason to require a reactor shutdown.During movement of[recently] irradiated fuel assemblies in the[secondary] containment or during OPDRVs, if the inoperable [MCREC]subsystem cannot be restored to OPERABLE status within the required Completion Time, the OPERABLE[MCREC]subsystem may be placed in the pressurization mode.This action ensures that the remaining subsystem is OPERABLE, that no failures that would prevent automatic actuation will occur, and that any active failure will be readily detected.BWRl4 STS B3.7.4-4 Rev.2,04/30101 BASES ACTIONS (continued) Rev.2, 04/30/01 B3.7.4-5 If applicable, movement of[recently] irradiated fuel assemblies in the[secondary] containment must be suspended immediately. Suspension During movement of[recently] irradiated fuel assemblies in the[secondary] containment or during OPDRVs, with two[MCREC]subsystems inoperable, action must be taken immediately to suspend activities that present a potential for releasing radioactivity that might require isolation of the control room.This places the unit in a condition that minimizes risk.The Required Actions of Condition F are modified by a Note indicating that LCO 3.0.3 does not apply.If moving[recently] irradiated fuel assemblies while in MODE 1, 2, or 3, the fuel movement is independent of reactor operations. Therefore, inability to suspend movement of[recently] irradiated fuel assemblies is not sufficient reason to require a reactor shutdown.F.1 and F.2[MCREC]System B 3.7.4 Required Action D.1 is modified by a Note alerting the operator to[place the system in the toxic gas protection mode if the toxic gas automatic transfer capability is inoperable]. If both[MCREC]subsystems are inoperable in MODE 1, 2, or 3 for reasons other than an inoperable control room boundary (Le., Condition B), the[MCREC]System may not be capable of performing the intended functio n the un con I Ion tside the a ses.ThereeC.0.ust be If applicable, movement of[recently] irradiated fuel assemblies in the[secondary] containment must be suspended immediately. Suspension of these activities shall not preclude completion of movement of a component to a safe position.Also, if applicable, actions must be initiated immediately to suspend OPDRVs to minimize the probability of a vessel draindown and the subsequent potential for fission product release.Actions must continue until the OPDRVs pre suspended. An alternative to Required Action D.1 is to immediately suspend activities that present a potential for releasing radioactivity that might require isolation of the control room.This places the unit in a condition that minimizes risk.BWRl4 STS [MCREC]System B 3.7.4 BASES ACTIONS (continued) of these activities shall not preclude completion of movement of a component to a safe position.If applicable, actions must be initiated immediately to suspend OPDVRs to minimize the probability of a vessel draindown and subsequent potential for fission product release.Actions must continue until the OPDRVs are suspended. SURVEILLANCE SR 3.7.4.1 REQUIREMENTS This SR verifies that a subsystem in a standby mode starts on demand and continues to operate.Standby systems should be checked periodically to ensurethatthey start and function properly.As the environmental and normal operating conditions of this system are not severe, testing each sUbsystem once every month provides an adequate check on this system.Monthly heater operation dries out any moisture that has accumulated in the charcoal as a result of humidity in the ambient air.[Systems with heaters must be operated for10 continuous hours with the heaters energized. Systems without heaters need only be operated for15 minutes to demonstrate the function of the system.]Furthermore, the 31 day Frequency is based on the known reliability of the equipment and the two subsystem redundancy available. SR 3.7.4.2 This SR verifies that the required[MCREC]testing is performed in accordance with the[Ventilation Filter Testing Program (VFTP)].The[VFTP]includes testing HEPA filter performance, charcoal adsorber efficiency, minimum system flow rate, and the physical properties of the activated charcoal (general use and following specific operations). Specific test frequencies and additional information are discussed in detail in the[VFTP].SR 3.7.4.3 This SR verifies that on an actual or simulated initiation signal, each[MCREC]subsystem starts and operates.The LOGIC SYSTEM FUNCTIONAL TEST in SR 3.3.7.1.5 overlaps this SR to provide complete testing of the safety function.The[18]month Frequency is specified in ReferenceW [SR 3.7.4.4 This SR verifies the integrity of the control room enclosure and the assumed inleakage rates of potentially contaminated air.The control BWRl4 STS B3.7.4-6 Rev.2,04/30101 REFERENCES [MCREC]System B 3.7.4 BASES SURVEILLANCE REQUIREMENTS (continued) room positive pressure, with respect to potentially contaminated adjacent areas (the turbine building), is periodically tested to verify proper function of the[MCREC]System.During the emergency mode of operation, the[MCREC]System is designed to slightly pressurize the control room:?:[0.1]inches water gauge positive pressure with respect to the turbine building to prevent unfiltered inleakage. The[MCREC]System is designed to maintain this positive pressure at a flow rate of s;[400]cfm to the control room in the pressurization mode.The Frequency of[18]months on a STAGGERED TEST BASIS is consistent with industry practice and other filtration systems SRs.]1.FSAR, Chapter[6].2.FSAR, Chapter[9].3.FSAR, Chapter[15].4.FSAR, Section[6.4.1.2.2].Regulatory Guide 1.52, Rev.[2].BWRl4 STS B3.7.4-7 Rev.2, 04/30101 BWRl4 LCO 3.7.5 Control Room AC System INSERT 1 Remaining in the Applicability ofthe LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 2)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.INSERT 2 Therefore, the plant must be brought to a MODE in which the overall plant risk is minimized. To achieve this status, the plant must be brought to at least MODE 3 within 12 hours.Remaining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 2)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.The allowed Completion Time is reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.INSERT 3 2.NEDC-32988-A, Revision 2, Technical Justification to Support Risk-Informed Modification to Selected Required End States for BWR Plants, December 2002. 3.7 PLANT SYSTEMS 3.7.5[Control Room Air Conditioning (AC)]System[Control Room AC]System 3.7.5 be OPERABLE.uel assemblies in the ning the reactor vessel COMPLETION TIME AC]30 days BLE 12 hours/"36 hour;')------------ontrol Immediately in Rev.2, 04/30101 3.7.5-1 Place OPERABLE[c room AC]subsystem operation. Restore[control room subsystem to OPERA status.-LCO 3.0.3 is not applicable. Be in MODE 3.REQUIRED ACTION Two[control room AC]subsystems shall MODES 1, 2, and 3, During movement of[recently] irradiated f[secondary] containment, During operations withapotential for drai (OPDRVs).A.One[control room AC]A,1 subsystem inoperable. C.Required Action and associated Completion Time of Condition A not met during movement of[recently] irradiated fuel assemblies in the C.1[secondary] containment or during OPDRVs.B.Required Action and B.1 associated Completion Time of Condition A not met in MODE 1, 2, or 3.BWRl4 STS CONDITION ACTIONS APPLICABILITY: LCO 3.7.5 ACTIONS (continued) [Control Room AC]System 3.7.5.......CONDITION REQUIRED ACTION COMPLETION TIME C.2.1 Suspend movement of Immediately [recently] irradiated fuel assemblies in the[secondary] containment. AND C.2.2 Initiate action to suspend Immediately OPDRVs. D.Two[control room AC]D.1 subsystems inoperable EeMoOE 3.1;;(.houa'in MODE 1,2, or 3.E.Two[control room AC]._-------------------------- subsystems inoperable
- NOTE*during movement of LCO 3.0.3 is not[recently]
irradiated fuel applicable. ._-------------------------- assemblies in the[secondary] containment E.1 Suspend movement of Immediately or during OPDRVs.[recently] irradiated fuel assemblies in the[secondary] containment. AND E.2 Initiate actions to suspend Immediately OPDRVs.SURVEILLANCE REQUIREMENTS SR 3.7.5.1 BWRl4STS SURVEILLANCE Verify each[control room AC]subsystem has the capability to remove the assumed heat load.3.7.5-2 FREQUENCY[18]months Rev.2, 04/30101 [Control Room AC]System B 3.7.5 BASES ACTIONS (continued) In MODE 1, 2, or 3, if the inoperable [control room AC]ubsystem cannot be restored to OPERABLE status within the associated Completion Time, the unit must be placed in a MODE that minimizes risk.To achieve this status, the unit must be placed in at least MODE 3 within 12 t?OD I hin 36 r The allowed Completion to reach the required unit conditions from full power conditions in an orderly manner and without challenging unit systems.C.1, C.2.1, and C.2,2 The Required Actions of Condition C are modified by a Note indicating that LCO 3.0.3 does not apply.If moving[recently] irradiated fuel assemblies while in MODE 1, 2, or 3, the fuel movement is independent of reactor operations. Therefore, inability to suspend movement of[recently] irradiated fuel assemblies is not sufficient reason to require a reactor shutdown.During movement of[recently] irradiated fuel assemblies in the[secondary] containment or during OPDRVs, if Required Action A.1 cannot be completed within the required Completion Time, the OPERABLE[control room AC]subsystem may be placed immediately in operation. This action ensures that the remaining subsystem is OPERABLE, that no failures that would prevent actuation will occur, and that any active failure will be readily detected.An alternative to Required Action C.1 is to immediately suspend activities that presentapotential for releasing radioactivity that might require isolation of the control room, This places the unit in a condition that minimizes risk.If applicable, movement of[recently] irradiated fuel assemblies in the[secondary] containment must be suspended immediately. Suspension of these activities shall not preclude completion of movement of a component to a safe position.Also, if applicable, actions must be initiated immediately to suspend OPDRVs to minimize the probability of a vessel draindown and subsequent potential for fission product release.Actions must continue until the OPDRVs are suspended. BWRl4 STS B3.7.5-3 Rev.2, 04/30101 [Control Room AC]System B 3.7.5 BASES ACTIONS (continued) If both[control room AC]subsystems are inoperable in MODE 1,2, or 3, the[Control Room AC]S stem may not be capable of performing the intended function.her e en m el E.1 and E.2 The Required Actions of Condition E are modified by a Note indicating that LCO 3.0.3 does not apply.If moving[recently] irradiated fuel assemblies while in MODE 1, 2, or 3, the fuel movement is independent of reactor operations. Therefore, inability to suspend movement of[recently] irradiated fuel assemblies is not a sufficient reason to require a reactor shutdown.During movement of[recently] irradiated fuel assemblies in the[secondary] containment or during OPDRVs, with two[control room AC]subsystems inoperable, action must be taken immediately to suspend activities that present a potential for releasing radioactivity that might require isolation of the control room.This places the unit in a condition that minimizes risk.If applicable, handling of[recently] irradiated fuel in the[secondary] containment must be suspended immediately. Suspension of these activities shall not preclude completion of movement of a component to a safe position.Also, if applicable, actions must be initiated immediately to suspend OPDRVs to minimize the probability of a vessel draindown and subsequent potential for fission product release.Actions must continue until the OPDRVsaresuspended. SURVEILLANCE SR 3.7.5.1 REQUIREMENTS This SR verifies that the heat removal capability of the system is sufficient to remove the control room heat load assumed in the[safety analyses]. The SR consists of a combination of testing and calculation. The[18]month Frequency is appropriate since significant degradation of the[Control Room AC]System is not expected over this time period.REFERENCES 1.FSAR, Section[6.4].BWRl4STS B3.7.5-4 Rev.2, 04/30101 BWRl4 LCO 3.7.6 Main Condenser Off gas INSERT 1 Remaining in the Applicability oftheLCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 3)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.INSERT 2 3.NEDC-32988-A, Revision 2, Technical Justification to Support Risk-Informed Modification to Selected Required End States for BWR Plants, December 2002. Main Condenser Offgas 3.7.6 3.7 PLANT SYSTEMS 3.7.6 Main Condenser Offgas LCO 3.7.6 APPLICABILITY: ACTIONS The gross gamma activity rate of the noble gases measured at[the main condenser evacuation system pretreatment monitor station]shall be[240]mCilsecond [after decay of 30 minutes].MODE 1, MODES 2 and 3 with any[main steam line not isolated and]steam jet air ejector (SJAE)in operation. CONDITION REQUIRED ACTION COMPLETION TIME A.Gross gamma activity A.1 Restore gross gamma 72 hours rate of the noble gases activity rate of the noble not within limit.gases to within limit.B.Required Action and B.1[Isolate all mainsteam 12 hours]associated Completion lines.Time not met.OR B.2 Isolate SJAE.12 hours ORBe in MODE 3.12 hours /BWRl4 STS 3.7.6-1 Rev.2, 04/30101 Main Condenser Offgas B 3.7.6 BASES APPLICABILITY (continued) SJAE in operation. In MODES 4 and 5, steam is not being exhausted to the main condenser and the requirements are not applicable. ACTIONS If the offgas radioactivity rate limit is exceeded, 72 hours is allowed to restore the gross gamma activity rate to within the limit.The 72 hour Completion Time is reasonable, based on engineering judgment, the time required to complete the Required Action, the large margins associated with permissible dose and exposure limits, and the low probability of a Main Condenser Offgas System rupture. An alternative to R quired Actions B.1 and B.2 is to place the unit in a MODE in which th L oes ACt a I.To achieve this status, the unit must be placed in at least MODE 3 within 12 hours allowed Completion reasonable, based on..0 ing experience, to reach the required unit conditions from full power conditions in an orderly manner and without challenging unit systems.If the gross gamma activity rate is not restored to within the limits in the associated Completion Time,[all main steam lines or]the SJAE must be isolated.This isolates the Main Condenser Offgas System from the source of the radioactive steam.The main steam lines are considered isolated if at least one main steam isolation valve in each main steam line is closed, and at least one main steam line drain valve in each drain line is closed.The 12 hour Completion Time is reasonable, based on operating experience, to perform the actions from full power conditions in an orderly manner and without challenging unit systems.SURVEILLANCE REQUIREMENTS SR 3.7.6.1 This SR, on a 31 day Frequency, requires an isotopic analysis of an offgas sample to ensure that the required limitsaresatisfied. The noble gases to be sampled are Xe-133, Xe-135, Xe-138, Kr-85, Kr-87, and Kr-88.If the measured rate of radioactivity increases significantly (by::?: 50%after correcting for expected increases due to changes in THERMAL POWER), an isotopic analysis is also performed within 4 hours after the increase is noted, to ensure that the increase is not indicative of a sustained increase in the radioactivity rate.The 31 day BWRl4 STS B3.7.6-2 Rev.2, 04/30101 Main Condenser Offgas B 3.7.6 BASES SURVEILLANCE REQUIREMENTS (continued) Frequency is adequate in view of other instrumentation that continuously monitor the offgas, and is acceptable, based on operating experience. This SR is modified by a Note indicating that the SR is not required to be performed until 31 days after any[main steam line is not isolated and]the SJAE is in operation. Only in this condition can radioactive fission gases be in the Main Condenser Offgas System at significant rates.REFERENCES 1.FSAR, Section[15.1.35]. 2.10 CFR 100.BWRl4STS B3.7.6-3 Rev.2, 04/30101 BWRl4 LCO 3.8.1 AC Sources-Operating INSERT 1 Remaining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 8)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.INSERT 2 8.NEDC-32988-A, Revision 2, Technical Justification to Support Risk-Informed Modification to Selected Required End States for BWR Plants, December 2002. AC Sources-Operating 3.8.1 ACTIONS (continued) CONDITION REQUIRED ACTION COMPLETION TIME F.[One[required]
[automatic load-REVIEWER'S NOTE-sequencer] inoperable. This Condition may be deleted if the unit design is such that any sequencer failure mode will only affect the ability of the associated DG to power its respective safety loads following a loss of offsite power independent of, or coincident with, a Design Basis Event.------------------------------------ F.1 Restore[required] [12]hours][automatic load sequencer] to OPERABLE status.G.Required Action and G.1 Be in MODE 3.12 hours Associated Completion Time of Condition A, B,[:/:: C, D, E, or[F]not met.Be in Mc;6E 4. H.Three or more[required] H.1 Enter LCO 3.0.3.Immediately AC sources inoperable [for reasons other than Condition E].SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.8.1.1 BWRl4 STS Verify correct breaker alignment and indicated power 7 days availability for each[required] offsite circuit.3.8.1-4 Rev.2, 04/30101......_._._._.._-_.1..-_--------- AC Sources-Operating B 3.8.1 BASES ACTIONS (continued) immediate shutdown could cause grid instability, which could result in a total loss of AC power.)Since any inadvertent unit generator trip could also result in a total loss of offsite AC power, however, the time allowed for continued operation is severely restricted. The intent here is to avoid the risk associated with an immediate controlled shutdown and to minimize the risk associated with this level of degradation. According to Regulatory Guide 1.93 (Ref.6), with both DGs inoperable, operation may continue for a period that should not exceed 2 hours.LEJ.The sequencer(s) is an essential support system to[both the offsite circuit and the DG associated with a given ESF bus.][Furthermore, the sequencer(s) is on the primary success path for most major AC electrically powered safety systems powered from the associated ESF bus.]Therefore, loss of an[ESF bus's sequencer] affects every major ESF System in the[division). The[12]hour Completion Time provides a period of time to correct the problem commensurate with the importance of maintaining sequencer OPERABILITY. This time period also ensures that the probability of an accident requiring sequencer OPERABILITY occurring during periods when the sequencer is inoperable is minimal.This Condition is preceded by a Note that allows the Condition to be deleted if the unit design is such that any sequencer failure mode only affects the ability of the associated DG to power its respective safety loads under any conditions. Implicit in this Note is the concept that the Condition must be retained if any sequencer failure mode results in the inability to start all or part of the safety loads when required regardless of power availability, or results in overloading the offsite power circuit to a safety bus during an event thereby causing its failure.Also implicit in the Note is that the Condition is not applicable to any division that does not have a sequencer. ]If the inoperable AC electrical power sources cannot be restored to OPERABLE status within the associated Com letion ime, the unit must be brought to a MODE in which the L oeB"11I.To achieve this must be brought to at least MODE 3 within 12 hours..@!.@ww:nrt The allowed Completion reasonable based on operatln experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.BWRl4 STS B 3.8.1-12 Rev.2, 04/30101 BASES ACTIONS (continued) H.1 SR 3.8.1.1 Rev.2, 04/30101 B 3.8.1-13 This SR ensures proper circuit continuity for the offsite AC electrical power supply to the onsite distribution network and availability of offsite AC electrical power.The breaker alignment verifies that each breaker is in its correct position to ensure that distribution buses and loads are connected to their preferred power source and that appropriate AC Sources-Operating B 3.8.1 The AC sources are designed to permit inspection andtesting of all important areas and features, especially those that have a standby function, in accordance with 10 CFR 50, GDC 18 (Ref.enodic component tests are supplemented by extensive functional tests during refueling outages (under simulated accident conditions). The SRs for demonstrating the OPERABILITY of the DGs are in accordance with the recommendations of Regulatory Guide 1.9 (Ref.3), Regulatory Guide 1.108 (Ref.,and Regulatory Guide 1.137 (Ref.@), as addressed in the F AR.1 0 C@Where the SRs discussed herein specify voltage and frequency tolerances, the following summary is applicable. The minimum steady state output voltage of[3740]V is 90%of the nominal 4160 V utput I voltage.This value, which is specified in ANSI C84.1 (Ref.,a ows for voltage drop to the terminals of 4000 V motors whose minimum operating voltage is specified as 90%or 3600 V.It also allows for voltage drops to motors and other equipment down through the 120 V level where minimum operating voltage is also usually specified as 90%of name plate rating.The specified maximum steady state output voltage of[4756]V is equal to the maximum operating voltage specified for 4000 V motors.It ensures that for a lightly loaded distribution system, the voltage at the terminals of 4000 V motors is no more than the maximum rated operating voltages.The specified minimum and maximum frequencies of the DG are 58.8 Hz and 61.2 Hz, respectively. These values are equal to+/-2%of the 60 Hz nominal frequency and are derived from the recommendations found in Regulatory Guide 1.9 (Ref.3).Condition H corresponds to a level of degradation in which all redundancy in the AC electrical power supplies has been lost.At this severely degraded level, any further losses in the AC electrical power system will cause a loss of function.Therefore, no additional time is justified for continued operation. The unit is required by LCO 3.0.3 to commence a controlled shutdown.BWRl4 STS SURVEILLANCE REQUIREMENTS AC Sources-Operating B 3.8.1 BASES SURVEILLANCE REQUIREMENTS (continued) independence of offsite circuits is maintained. The 7 day Frequency is adequate since breaker position is not likely to change without the operator being aware of it and because its status is displayed in the control room.SR 3.8.1.2 and SR 3.8.1.7 These SRs help to ensure the availability of the standby electrical power supply to mitigate DBAs and transients and maintain the unit in a safe shutdown condition. To minimize the wear on moving parts that do not get lubricated when the engine is not running, these SRs have been modified by a Note (Note 1 for SR 3.8.1.2 and Note for SR 3.8.1.7)to indicate that all DG starts for these Surveillances may be preceded by an engine prelube period and followed by a warmup prior to loading.For the purposes of this testing, the DGs are started from standby conditions. Standby conditions for a DG mean that the diesel engine coolant and oil are being continuously circulated and temperature is being maintained consistent with manufacturer recommendations. [In order to reduce stress and wear on diesel engines, some manufacturers recommend a modified start in which the starting speed of DGs is limited, warmup is limited to this lower speed, and the DGs are gradually accelerated to synchronous speed prior to loading.These start procedures are the intent of Note 2, which is only applicable when such modified start procedures are recommended by the manufacturer. ]SR 3.8.1.7 requires that, at a 184 day Frequency, the DG starts from standby conditions and achieves required voltage and frequency within 12 seconds.The 12 secondstartrequirement supports thein the design basis LOCA analysis of FSAR, Section[6.3] The x:;I 12 secondstartrequirement is not applicable to SR 3.8.1.2 (see Note 2 of SR 3.8.1.2), when a modified start procedure as described above is used.If a modified start is not used, the 12 second start requirement of SR 3.8.1.7 applies.Since SR 3.8.1.7 does require a 12 second start, it is more restrictive than SR 3.8.1.2, and it may be performed in lieu of SR 3.8.1.2.In addition to the SR requirements, the time for the DG to reach steady state operation, unless the modified DG start method is employed, is BWRl4STS B 3.8.1-14 Rev.2, 04/30101 AC Sources-Operating B 3.8.1 BASES SURVEILLANCE REQUIREMENTS (continued) Note 4 stipulates a prerequisite requirement for performance of this SR.A successful DG start must precede this test to credit satisfactory performance. SR 3.8.1.4 This SR provides verification that the level of fuel oil in the day tank[and engine mounted tank]is at or above the level at which fuel oil is automatically added.The level is expressed as an equivalent volume in gallons.and is selected to ensure adequate fuel oil for a minimum of 1 hour of DG operation at full load plus 10%.The 31 day Frequency is adequate to ensure that a sufficient supply of fuel oil is available, since low level alarms are provided and facility operators would be aware of any large uses of fuel oil during this period.SR 3.8.1.5 Microbiological fouling is a major cause of fuel oil degradation. There are numerous bacteria that can grow in fuel oil and cause fouling, but all must have a water environment in order to survive.Removal of water from the fuel oil day[and engine mounted]tanks once every[31]days eliminates the necessary environment for bacterial survival.This is the most effective means of controlling microbiological fouling.In addition, it eliminates the potential for water entrainment in the fuel oil during DG operation. Water may come from any of several sources, including condensation, ground water, rain water, contaminated fuel oil, and breakdown of the fuel oil by bacteria.Frequent checking for and removal of accumulated water minimizes fouling and provides data regarding the watertight integrity of the fuel oil system.The are established by Regulatory Guide 1.137 (Ref..This SR is for II preventive maintenance. The presence of water does not necessarily represent a failure of this SR provided that accumulated water is removed during performance of this Surveillance. SR 3.8.1.6 This Surveillance demonstrates that each required fuel oil transfer pump operates and transfers fuel oil from its associated storage tank to its associated day tank.It is required to support continuous operation of standby power sources.This Surveillance provides assurance that the fuel oil transfer pump is OPERABLE, the fuel oil piping system is intact, BWRl4 STS B 3.8.1-16 Rev.2, 04/30/01 AC Sources-Operating B 3.8.1 BASES SURVEILLANCE REQUIREMENTS (continued) the fuel delivery piping is not obstructed, and the controls and control systems for automatic fuel transfer systems are OPERABLE.[The Frequency for this SR is variable, depending on individual system design, with up to a[92]day interval.The[92]day Frequency corresponds to the testing requirements for pumps as contained in the Itf ASME Boiler and Pressure Vessel Code, Section XI (Ref.;however, the design of fuel transfer systems is such that pumps operate automatically or must be started manually in order to maintain an adequate volume of fuel oil in the day[and engine mounted]tanks during or following DG testing.In such a case, a 31 day Frequency is appropriate. Since proper operation of fuel transfer systems is an inherent part of DG OPERABILITY, the Frequency of this SR should be modified to reflect individual designs.]SR 3.8.1.7 See SR 3.8.1.2.[SR 3.8.1.8 Transfer of each 4.16 kV ESF bus power supply from the normal offsite circuit to the alternate offsite circuit demonstrates the OPERABILITY of the alternate circuit distribution network to power the shutdown loads.The[18 month]Frequency of the Surveillance is based on engineering judgment taking into consideration the plant conditions required to perform the Surveillance, and is intended to be consistent with expected fuel cycle lengths.Operating experience has shown that these components usually pass the SR when performed on the 18 month Frequency. Therefore, the Frequency was concluded to be acceptable from a reliability standpoint. ]This SR is modified by a Note.The reason for the Note is that, during operation with the reactor critical, performance of this SR could cause perturbations to the electrical distribution systems that could challenge continued steady state operation and, as a result, plant safety systems.This restriction from normally performing the Surveillance in MODE 1 or 2 is further amplified to allow the Surveillance to be performed for the purpose of reestablishing OPERABILITY (e.g.post work testing following corrective maintenance, corrective modification, deficient or incomplete surveillance testing, and other unanticipated OPERABILITY concerns)provided an assessment determines plant safety is maintained or enhanced.This assessment shall, as a minimum, consider the potential BWRl4STS B 3.8.1-17 Rev.2, 04/30101 AC Sources-Operating B 3.8.1 BASES SURVEILLANCE REQUIREMENTS (continued) outcomes and transients associated with a failed Surveillance, a successful Surveillance, and a perturbation of the offsite or onsite system when they are tied together or operated independently for the Surveillance; as well as the operator procedures available to cope with these outcomes.These shall be measured against the avoided risk of a plant shutdown and startup to determine that plant safety is maintained or enhanced when the Surveillance is performed in MODE 1 or 2.Risk insights or deterministic methods may be used for this assessment. SR 3.8.1.9 Each DG is provided with an engine overspeed trip to prevent damage to the engine.Recovery from the transient caused by the loss of a large load could cause diesel engine overspeed, which, if excessive, might result in a trip of the engine.This Surveillance demonstrates the DG load response characteristics and capability to reject the largest single load without exceeding predetermined voltage and frequency and while maintaining a specified margin to the overspeed trip.The largest single load for each DG is a residual heat removal service water pump (1225 bhp).This Surveillance may beaccomplishedby either: a.Tripping the DG output breaker with the DG carrying greater than or equal to its associated single largest post-accident load while paralleled to offsite power, or while solely supplying the bus or b.Tripping its associated single largest post-accident load with the DG solely supplying the bus.'£As required by IEEE-308 (Ref. the load rejection test is acceptable if the increase in diesel speed does not exceed 75%of the difference between synchronous speed and the overspeed trip setpoint, or 15%above synchronous speed, whichever is lower.For DGs 2A, 2C, and 1 B, this represents 65.5 Hz, equivalent to 75%of the difference between nominal speed andtheoverspeed trip setpoint.The time, voltage, and frequency tolerances specified in th'is SR are derived from Regulatory Guide 1.9 (Ref.3)recommendations for response during load sequence intervals. The[6]seconds specified is equal to 60%of the 10 second load sequence interval associated with sequencing the residual heat removal (RHR)pumps during an undervoltage on the bus concurrent with a LOCA.The voltage and frequency specified are consistent with the design range of the equipment powered by the DG.SR 3.8.1.9.a corresponds to the BWRJ4 STS B 3.8.1-18 Rev.2, 04/30101 BASES SURVEILLANCE REQUIREMENTS (continued) Rev.2, 04/30101 B 3.8.1-19 maximum frequency excursion, while SR 3.8.1.9.b and SR 3.8.1.9.c are steady state voltage and frequency values to which the system must recover following load rejection. The[18 month]Frequency is consistent with the recommendation of Regulatory Guide 1.108 (Ref.This SR is modified by two Notes.The reason for Note 1 is that, during operation with the reactor critical, performance of this SR could cause perturbations to the electrical distribution systems that could challenge continued steady state operation and, as a result, plant safety systems.Note 2 ensures that the DG is tested under load conditions that are as close to design basis conditions as possible.When synchronized with offsite power, testingshouldbe performed at a power factor of[0.9].This power factor is representative of the actual inductive loading a DG would see under design basis accident conditions. Under certain conditions, however, Note 2 allows the surveillance to be conducted at a power factor other than[0.9].These conditions occur when grid voltage is high, and the additional field excitationneededto get the power factor to[0.9]results in voltages on the emergency busses that are too high.Under these conditions, the power factor should be maintained as close as practicable to[0.9]while still maintaining acceptable voltage limits on the emergency busses.In other circumstances, the grid voltage may be such that the DC excitation levelsneededto obtain a power factor of[0.9]may not cause unacceptable voltages on the emergency busses, but the excitation levels are in excess of those recommended for the DC.In such cases, the power factor shall be maintained as close as practicable to[0.9]without exceeding the DG excitation limits.This restriction from normally performing the Surveillance in MODE 1 or 2 is further amplified to allow the Surveillance to be performed for the purpose of reestablishing OPERABILITY (e.g.post work testing following corrective maintenance, corrective modification, deficient or incomplete surveillance testing, and other unanticipated OPERABILITY concerns)provided an assessment determines plant safety is maintained or enhanced.This assessment shall, as a minimum, consider the potential outcomes and transients associated with a failed Surveillance, a successful Surveillance, and a perturbation of the offsite or onsite system when they are tied together or operated independently for the Surveillance; as well as the operator procedures available to cope with these outcomes.These shall be measured against the avoided risk of a plant shutdown and startup to determine that plant safety is maintained or enhanced when the Surveillance is performed in MODE 1 or 2.Risk insights or deterministic methods may be used for this assessment. In order to ensure that the DG is tested under load conditions that are as close to design basis conditions as possible, Note 2 requires that, if AC Sources-Operating B 3.8.1 BWRJ4STS AC Sources-Operating B 3.8.1 BASES SURVEILLANCE REQUIREMENTS (continued) synchronized to offsite power, testing must be performed using a power factor[0.9].This power factor is chosen to be representative of the actual design basis inductive loading that the DG would experience. -REVIEWER'S NOTE-The above MODE restrictions may be deleted if it can be demonstrated to the staff, on a plant specific basis, that performing the SR with the reactor in any of the restricted MODES can satisfy the following criteria, as applicable: a.Performance of the SR will not render any safety system or component inoperable, b.Performance of the SR will not cause perturbations to any of the electrical distribution systems that could result in a challenge to steady state operation or to plant safety systems, and c.Performance of the SR, or failure of the SR, will not cause, or result in, an ADO with attendant challenge to plant safety systems.SR 3.8.1.10 I This Surveillance demonstrates the DG capability to reject a full load without overspeed tripping or exceeding the predetermined voltage limits.The DG full load rejection may occur because of a system fault or inadvertent breaker tripping.This Surveillance ensures proper engine generator load response under the simulated test conditions. This test simulates the loss of the total connected load that the DG experiences following a full load rejection and verifies that the DG does not trip upon loss of the load.These acceptance criteria provide DG damage protection. While the DG is not expected to experience this transient during an event, and continues to be available, this response ensures that the DG is not degraded for future application, including reconnection to the bus if the trip initiator can be corrected or isolated.The[18 month]Frequency is consistent with the recommendation of Regulatory Guide 1.108 (Ref.il>and is intended to be consistent with expected fuel cycle lengths.t.ti9 This SR is modified by two Notes.The reason for Note 1 is that during operation with the reactor critical, performance of this SR could cause perturbations to the electrical distribution systems that would challenge BWRl4 STS B 3.8.1-20 Rev.2, 04/30101 AC Sources-Operating B 3.8.1 BASES SURVEILLANCE REQUIREMENTS (continued) b.Performance of the SR will not cause perturbations to any of the electrical distribution systems that could result in a challenge to steady state operation or to plant safety systems, and c.Performance of the SR, or failure of the SR, will not cause, or result in, an AOO with attendant challenge to plant safety systems.SR 3.8.1.11 fil))§As required by Regulatory Guide 1.108 (Ref.eli), paragraph 2.a.(1), this Surveillance demonstrates the as designed operation of the standby power sources during loss of the offsite source.This test verifies all actions encountered from the loss of offsite power, including shedding of the nonessential loads and energization of the emergency buses and respective loads from the DG.It further demonstrates the capability of the DG to automatically achieve the required voltage and frequency within the specified time.The DG auto-start time of 12 seconds is derived from requirements of the accident analysis for responding to a design basis large break LOCA.The Surveillanceshouldbe continued for a minimum of 5 minutes in order to demonstrate that all starting transients have decayed and stability has been achieved.The requirement to verify the connection and power supply of permanent and auto-connected loads is intended to satisfactorily show the relationship of these loads to the DG loading logic.In certain circumstances, many of these loads cannot actually be connected or loaded without undue hardship or potential for undesired operation. For instance, Emergency Core Cooling Systems (ECCS)injection valves are not desired to be stroked open, or systems are not capable of being operated at full flow, or RHR systems performing a decay heat removal function are not desired to be realigned to the ECCS mode of operation. In lieu of actual demonstration of the connection and loading of these loads, testing that adequately shows the capability of the DG system to perform these functions is acceptable. This testing may include any series of sequential, overlapping, or total steps so that the entire connection and loading sequence is verified.The Frequency of[18 consistent with the recommendations of Regulatory Guide 1.108 (Ref.(i paragraph 2.a.(1), takes into consideration plant conditions required to perform the Surveillance, and is intended to be consistent with expected fuel cycle lengths.BWRl4 STS B 3.8.1-22 Rev.2, 04/30/01 AC Sources-Operating B 3.8.1 BASES SURVEILLANCE REQUIREMENTS (continued) in any of the restricted MODES can satisfy the following criteria, as applicable: a.Performance of the SR will not render any safety system or component inoperable, b.Performance of the SR will not cause perturbations to any of the electrical distribution systems that could result in a challenge to steady state operation or to plant safety systems This restriction from normally performing the Surveillance in MODE 1 or 2 is further amplified to allow the Surveillance to be performed for the purpose of reestablishing OPERABILITY (e.g.post work testing following corrective maintenance, corrective modification, deficient or incomplete surveillance testing, and other unanticipated OPERABILITY concerns)provided an assessment determines plant safety is maintained or enhanced.This assessment shall, as a minimum, consider the potential outcomes and transients associated with a failed Surveillance, a successful Surveillance, and a perturbation of the offsite or on site system when they are tied together or operated independently for the Surveillance; as well as the operatorproceduresavailable to cope with these outcomes.These shall be measuredagainstthe avoided risk of a plant shutdown and startup to determine that plant safety is maintained or enhanced when the Surveillance is performed in MODE 1 or 2.Risk insights or deterministic methods may be used for this assessment, and c.Performance of the SR, or failure of the SR, will not cause, or result in, an AOO with attendant challenge to plant safety systems.SR 3.8.1.14Regulatory Guide 1.108 (Ref.(f), paragraph 2.a.(3), requires demonstration once per[18 months]that the DGs can start and run continuously at full load capability for an interval of not less than 24 hours-22 hours of which is at a load eqUivalent to the continuous rating of the DG, and 2 hours of which is at a load equivalent to 110%of the continuous duty rating of the DG.Plant Hatch has taken an exception to this requirement and performs the 2 hour run at the 2000 hour rating (3100 kW).The DG starts for this Surveillance can be performed either from standby or hot conditions. The provisions for prelube and warmup, discussed in SR 3.8.1.2, and for gradual loading, discussed in SR 3.8.1.3, are applicable to this SR.BWRl4 STS B 3.8.1-26 Rev.2, 04/30101 AC Sources-Operating B 3.8.1 BASES SURVEILLANCE REQUIREMENTS (continued) A load band is provided to avoid routine overloading of the DG.Routine overloading may result in more frequent teardown inspections in accordance with vendor recommendations in order to maintain DG OPERABILITY. The[18 month]Frequency with the recommendations of Regulatory Guide 1.1 08 2.a.(3);takes into consideration plant conditions required to perform the Surveillance; and is intended to be consistent with expected fuel cycle lengths.This Surveillance has been modified by three Notes.Note 1 states that momentary transients due to changing bus loads do not invalidate this test.Similarly, momentary power factor transients above the limit do not invalidate the test.The reason for Note 2 is that during operation with the reactor critical, performance of this Surveillance could cause perturbations to the electrical distribution systems that would challenge continued steady state operation and, as a result, plant safety systems.Note 3 ensures that the DG is tested under load conditions that are as close to design basis conditions as possible.When synchronized with offsite power, testing should be performed at a power factor of[0.9].This power factor is representative of the actual inductive loading a DG would see under design basis accident conditions. Under certain conditions, however, Note 3 allows the surveillance to be conducted at a power factor other than[0.9].These conditions occur when grid voltage is high, and the additional field excitation needed to get the power factor to[0.9]results in voltages on the emergency busses that are too high.Under these conditions, the power factor should be maintained as close as practicable to[0.9]while still maintaining acceptable voltage limits on the emergency busses.In other circumstances, the grid voltage may be such that the DG excitation levels needed to obtain a power factor of[0.9]may not cause unacceptable voltages on the emergency busses, but the excitation levels are in excess of those recommended for the DG.In such cases, the power factor shall be maintained as close as practicable to[0.9]without exceeding the DG excitation limits.This restriction from normally performing the Surveillance in MODE 1 or 2 is further amplified to allow the Surveillance to be performed for the purpose of reestablishing OPERABILITY (e.g.post work testing following corrective maintenance, corrective modification, deficient or incomplete surveillance testing, and other unanticipated OPERABILITY concerns)provided an assessment determines plant safety is maintained or enhanced.This assessment shall, as a minimum, consider the potential outcomes and transients associated with a failed Surveillance, a successful Surveillance, and a perturbation of the offsite or onsite system BWRl4 STS B 3.8.1-27 Rev.2, 04/30/01 SR 3.8.1.16 AC Sources-Operating B 3.8.1 BASES SURVEILLANCE REQUIREMENTS (continued) when they are tied together or operated independently for the Surveillance; as well as the operator procedures available to cope with these outcomes.These shall be measured against the avoided risk of a plant shutdown and startup to determine that plant safety is maintained or enhanced when the Surveillance is performed in MODE 1 or 2.Risk insights or deterministic methods may be used for this assessment. SR 3.8.1.15 This Surveillance demonstrates that the diesel engine can restart from a hot condition, such as subsequent to shutdown from normal Surveillances, and achieve the required voltage and frequency within[12]seconds.The[12]second time is derived from the requirements of the accident analysis to respond to a design basis large break LOCA.The[18 month]Frequency is consistent with the recommendations of Regulatory Guide 1.108 (Ref.(j), paragraph 2.a.(5).W This SR is modified by two Notes.Note 1 ensures that the test is performed with the diesel sufficiently hot.The requirement that the diesel has operated for at least 2 hours at full load conditions prior to performance of this Surveillance is based on manufacturer recommendations for achieving hot conditions. The load band is provided to avoid routine overloading of the DG.Routine overloads may result in more frequent teardown inspections in accordance with vendor recommendations in order to maintain DG OPERABILITY. Momentary transients due to changing bus loads do not invalidate this test.Note 2 allows all DG starts to be preceded by an engine prelube period to minimize wear and tear on the diesel during testing.As required by Regulatory Guide 1.108 (Ref.e, paragraph 2.a.(6), this Surveillance ensures that the manual synchronization and automatic load transfer from the DG to the offsite source can be made and that the DG can be returned to ready-to-Ioad status when offsite power is restored.It also ensures that the auto-start logic is reset to allow the DG to reload if a subsequent loss of offsite power occurs.The DG is considered to be in ready-to-Ioad status when the DG is at rated speed and voltage, the output breaker is open and can receive an auto-close signal on bus undervoltage, and the load sequence timers are reset.BWRl4 STS B 3.8.1-28 Rev.2, 04/30101 AC Sources-Operating B 3.8.1 BASES SURVEILLANCE REQUIREMENTS (continued) The Frequency of[18 months] with the recommendations of Regulatory Guide 1.108 (Ref.t>. 2.a.(6), and takes into consideration plant conditions required to perform the Surveillance. This SR is modified byaNote.The reason for the Note is that performing the Surveillance would remove a required offsite circuit from service, perturb the electrical distribution system, and challenge safety systems.This restriction from normally performing the Surveillance in MODE 1 or 2 is further amplified to allow the Surveillance to be performed for the purpose of reestablishing OPERABILITY (e.g.post work testing following corrective maintenance, corrective modification, deficient or incomplete surveillance testing, and other unanticipated OPERABILITY concerns)provided an assessment determines plant safety is maintained or enhanced.This assessment shall, as a minimum, consider the potential outcomes and transients associated with a failed Surveillance, a successful Surveillance, and a perturbation of the offsite or onsite system when they are tied together or operated independently for the Surveillance; as well as the operator procedures available to cope with these outcomes.These shall be measured against the avoided risk of a plant shutdown and startup to determine that plant safety is maintained or enhanced when the Surveillance is performed in MODE 1 or 2.Risk insights or deterministic methods may be used for this assessment. SR 3.8.1.17 Demonstration of the test mode override ensures that the DG availability under accident conditions is not compromised as the result of testing.Interlocks to the LOCA sensing circuits cause the DG to automatically reset to ready-to-Ioad operation if an ECCS initiation signal is received during operation in the test mode.Ready-to-Ioad operation is defined as the DG running at rated speed and voltage with the DG output breaker open.These provisions for automatic switch over are required by IEEE-308 (Ref'lJ>paragraph 6.2.6(2).The requirement to automatically energize the emergency loads with offsite power is essentially identical to that of SR 3.8.1.12.The intent in the requirements associated with SR 3.8.1.17.b is to show that the emergency loading is not affected by the DG operation in test mode.In lieu of actual demonstration of connection and loading of loads, testing that adequately shows the capability of the emergency loads to perform these functions is acceptable. This testing may include any series of BWRl4 STS B 3.8.1-29 Rev.2, 04/30101 AC Sources-Operating B 3.8.1 BASES SURVEILLANCE REQUIREMENTS (continued) sequential, overlapping, or total steps so that the entire connection and loading sequence is verified.The[18 month]Frequency i-r!sistent with the recommendations of Regulatory Guide 1.1 08 paragraph 2.a.(8);takes into consideration plant conditions required to perform the Surveillance; and is intended to be consistent with expectedfuelcycle lengths.This SR is modified byaNote.The reason for the Note is that performing the Surveillance would remove a required offsite circuit from service, perturb the electrical distribution system, and challenge safety systems.This restriction from normally performing the Surveillance in MODE 1 or 2 is further amplified to allow portions of the Surveillance to be performed for the purpose of reestablishing OPERABILITY (e.g.post work testing following corrective maintenance, corrective modification, deficient or incomplete surveillance testing, and other unanticipated OPERABILITY concerns)provided an assessment determines plant safety is maintained or enhanced.This assessment shall, as a minimum, consider the potential outcomes and transients associated with a failed partial Surveillance, a successful partial Surveillance, and a perturbation of the offsite or onsite system when they are tied together or operated independently for the partial Surveillance; as well as the operator procedures available to cope with these outcomes.These shall be measuredagainstthe avoided risk of a plant shutdown and startup to determine that plant safety is maintained or enhanced when portions of the Surveillance are performed in MODE 1 or 2.Risk insights or deterministic methods may be used for the assessment. SR 3.8.1.18 Under accident conditions [and loss of offsite power]loads are sequentially connected to the bus by the automatic load sequencer. The sequencing logic controls the permissive and starting signals to motor breakers to prevent overloading of the DGs due to high motor starting currents.The[10]%load sequence time interval tolerance ensures that sufficient time exists for the DG to restore frequency and voltage prior to applying the next load and that safety analysis assumptions regarding ESF equipment time delays are not violated.Reference 2 provides a summary of the automatic loading of ESF buses.The Frequency of[18 months]is consistent with the recommendations of RegUlatory Guide 1.108 (RefJ)'paragraph 2.a.(2);takes into BWRJ4STS B 3.8.1-30 Rev.2, 04/30101 AC Sources-Operating B 3.8.1 BASES SURVEILLANCE REQUIREMENTS (continued) SR 3.8.1.20 This Surveillance demonstrates that the OG starting independence has not been compromised. Also, this Surveillance demonstrates that each engine can achieve proper speed within the specified time when the OGs are started simultaneously. The 10 year Frequency is consistent with the recommendations of Regulatory Guide 1.108 (Ref.This SR is modified by a Note.The reason for the Note is to minimize wear on the OG during testing.For the purpose of this testing, the OGs must be started from standby conditions, that is, with the engine coolant and oil continuously circulated and temperature maintained consistent with manufacturer recommendations. REFERENCES 1.10 CFR 50, Appendix A, GOC 17.2.3.4.5.6.10 (i.II<0.12.&1>.ISJ'f(}.FSAR, Section[8.2].Regulatory Guide 1.9.FSAR, Chapter[6].FSAR, Chapter[15].Regulatory Guide 1.93.Generic Letter 84-15.10 CFR 50, Appendix A, GOC 18.Regulatory Guide 1.108.Regulatory Guide 1.137.ANSI C84.1, 1982.FSAR, Section[6.3].ASME Boiler and Pressure Vessel Code, Section XI.BWRl4 STS B 3.8.1-33 Rev.2,04/30101 BASES REFERENCES (continued)@.IEEE Standard 308.BWRJ4 STS B 3.8.1-34 AC Sources-Operating B 3.8.1 Rev.2, 04/30/01 BWRl4 LCO 3.8.4 DC Sources-Operating INSERT 1 Remaining in the Applicability oftheLCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 8)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.INSERT 2 8.NEDC-32988-A, Revision 2, Technical Justification to Support Risk-Informed Modification to Selected Required End States for BWR Plants, December 2002. DC Sources-Operating 3.8.4 3.8 ELECTRICAL POWER SYSTEMS 3.8.4 DC Sources-Operating LCO 3.8.4 APPLICABILITY: ACTIONS The[Division 1 and Division 2 station service, and DG 1 B, 2A, and 2C]DC electrical power SUbsystems shall be OPERABLE.MODES 1, 2, and 3.CONDITION REQUIRED ACTION COMPLETION TIME A.One[or two]battery A.1 Restore battery terminal 2 hours charger[s on one voltage to greater than or division]inoperable. equal to the minimum established float voltage.AND A.2 Verify battery float current Once per[12]hours[2]amps.AND A.3 Restore battery charger[s] 7 days to OPERABLE status.[B.One[or two]batter[y][ies B.1 Restore batter[y][ies] to[2]hours]on one division]OPERABLE status.inoperable. C.One DC electrical power C.1 Restore DC electrical [2]hours subsystem inoperable power su bsystem to for reasons other than OPERABLE status.Condition A[or B].D.Required Action and D.1 Be in MODE 3.12 hours Associated Completion Time of Condition A[, B,:%or C]not met for station D.service DC subsystem. BWRl4 STS 3.8.4-1 Rev.2, 04/30101 DC Sources-Operating B 3.8.4 BASES ACTIONS (continued) complete loss of DC power to the affected division.The 2 hour limit is consistent with the allowed time for an inoperable DC Distribution System division.If one of the required DC electrical power subsystems is inoperable for reasons other than Condition A or B (e.g., inoperable battery charger and associated inoperable battery), the remaining DC electrical power subsystems have the capacity to support a safe shutdown and to mitigate an accident condition. Since a subsequent worst case single failure could, however, result in the loss of minimum necessary DC electrical subsystems to mitigate a worst case accident, continued power operation should not exceed 2 hours.The 2 hour Completion Time is based on Regulatory Guide 1.93 (Ref.7)and reflects a reasonable time to assess unit status as a function of the inoperable DC electrical power subsystem and, if the DC electrical power subsystem is not restored to OPERABLE status, to prepare to effect an orderly and safe unit shutdown.If the DG DC electrical power subsystem cannot be restored to OPERABLE status in the associated Completion Time, the associated DG may be incapable of performing its intended function and must be immediately declared inoperable. This declaration also requires entry into applicable Conditions and Required Actions for an inoperable DG, LCO 3.8.1,"AC Sources-Operating." BWRl4 STS B 3.8.4-7 Rev.2,04/30101 DC Sources-Operating B 3.8.4 BASES SURVEILLANCE SR 3.8.4.1 REQUIREMENTS Verifying battery terminal voltage while on float charge for the batteries helps to ensure the effectiveness of the battery chargers, which support the ability of the batteries to perform their intended function.Float charge is the condition in which the charger is supplying the continuous charge required to overcome the internal losses of a battery and maintain the battery in a fully charged state while supplying the continuous steady state loads of the associated DC subsystem. On float charge, battery cells will receive adequate current to optimally charge the battery.The voltage requirements are based on the nominal design voltage of the battery and are consistent with the minimum float voltage established by the battery manufacturer ([2.20]Vpc or[127.6]V at the battery terminals). This voltage maintains the battery plates in a condition that supports maintaining the grid life (expected to be approximately 20 years).The 7 day Frequency-is consistent with manufacturer recommendations and IEEE-450 SR 3.8.4.2 This SR verifies the desig capacity of the batt.ery chargers.According to Regulatory Guide 1.32 (Ref., the battery charger supply is recommended to be based on the largest combined demands of the various steady state loads and the charging capacity to restore the battery from the design minimum charge state to the fully charged state, irrespective of the status of the unit during these demand occurrences. The minimum required amperes and duration ensures that these requirements can be satisfied. This SR provides two options.One option reqUires that each battery charger be capable of supplying[400]amps at the minimum established float voltage for[8]hours.The ampere requirements are based on the output rating of the chargers.The voltage requirements are based on the charger voltage level after a response to a loss of AC power.The time period if sufficient for the charger temperature to have stabilized and to have been maintained for at lease[2]hours.The other option requires that each battery charger be capable of recharging the battery after a service test coincident with supplying the largest coincident demands of the various continuous steady state loads (irrespective of the status of the plant during which these demands occur).This level of loading may not normally be available following the battery service test and will need to be supplemented with additional loads.The duration for this test may be longer than the charger sizing criteria since the battery recharge is affected by float voltage, BWRJ4 STS B 3.8.4-8 Rev.2, 04/30101 DC Sources-Operating B 3.8.4 BASES SURVEILLANCE REQUIREMENTS (continued) temperature, an the exponential decay in charging current.The battery is recharged when the measured charging current is[2]amps.The Frequency is acceptable, given the unit conditions required to perform the test and the other administrative controls existing to ensure adequate charger performance during these[18 month]intervals. In addition, this Frequency is intended to be consistent with expected fuel cycle lengths.SR 3.8.4.3 A battery service test is a special test of the battery's capability, as found, to satisfy the design requirements (battery duty cycle)of the DC electrical power system.The discharge rate and test length corresponds to the design duty cycle specified in Reference 4.The Frequency of[18 months is consistent with the Regulatory Guide 1.32 (Ref.and Regulatory Guide 1.129 (Ref.1.&),.J..., which state that the battery service test should be performed during refueling operations or at some other outage, with intervals between tests not to exceed[18 months].This SR is modified by two Notes.Note 1 allows the performance of a modified performance discharge test in lieu of a service test.The reason for Note 2 is that performing the Surveillance would remove a required DC electrical power subsystem from service, perturb the electrical distribution system, and challenge safety systems.This restriction from normally performing the Surveillance in MODE 1 or 2 is further amplified to allow portions of the Surveillance to be performed for the purpose of reestablishing OPERABILITY (e.g.post work testing following corrective maintenance, corrective modification, deficient or incomplete surveillance testing, and other unanticipated OPERABILITY concerns)provided an assessment determines plant safety is maintained or enhanced.This assessment shall, as a minimum, consider the potential outcomes and transients associated with a failed partial Surveillance, a successful partial Surveillance, and a perturbation of the offsite or onsite system when they are tied together or operated independently for the partial Surveillance; as well as the operator procedures available to cope with these outcomes.These shall be measuredagainstthe avoided risk of a plant shutdown and startup to determine that plant safety is maintained or enhanced when portions of BWRl4 STS B 3.8.4-9 Rev.2, 04/30101 DC Sources-Operating B 3.8.4 BASES SURVEILLANCE REQUIREMENTS (continued) the Surveillance are performed in MODE 1 or 2.Risk insights or deterministic methods may be used for the assessment. REFERENCES 1.10 CFR 50, Appendix A, GDC 17.2.Regulatory Guide 1.6.3.IEEE Standard 308, 1978.4.FSAR, Chapter[8].5.FSAR, Chapter[6].6.FSAR, Chapter[15].(JVlSerT"3J 7.Regulatory Guide 1.93.Cf(j.IEEE Standard 450, 1995./0 fJ.Regulatory Guide 1.32, February 1977.II d1).Regulatory Guide 1.129, December 1974.BWRl4 STS B 3.8.4-10 Rev.2, 04/30/01 BWRl4 Leo 3.8.7 Inverters-Operating.INSERT 1 Remaining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 4)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.INSERT 2 4.NEDC-32988-A, Revision 2, Technical Justification to Support Risk-Informed Modification to Selected Required End States for BWR Plants, December 2002. Inverters-Operating 3.8.7 3.8 ELECTRICAL POWER SYSTEMS 3.8.7 Inverters-Operating LCO 3.8.7 APPLICABILITY: ACTIONS The[Division 1]and[Division 2]inverters shall be OPERABLE.*NOTE*[One/two]inverter[s] may be disconnected from[its/their] associated DC bus for s;[24]hours to perform an equalizing charge on[its/their] associated [common]battery, provided: a.The associated AC vital bus[es][is/are]energized from[its/their] [Class1E constant voltage transformers] [inverter using internal AC source]and b.All other AC vital buses are energized from their associated OPERABLE inverters. 1 MODES 1, 2, and 3.CONDITION REQUIRED ACTION COMPLETION TIME A.One[required] inverter A.1._-------------------------- inoperable.
- NOTE*Enter applicable Conditions and Required Actions of LCO 3.8.9,"Distribution Systems-Operating" with any AC vital bus de-energized
.._-------------------------- Restore inverter to 24 hours OPERABLE status.B.Required Action and B.1 Be in MODE 3.12 hours associated Completion Time not met.AND BWRl4STS 3.8.7-1 Rev.2, 04/30/01 Inverters-Operating B 3.8.7 BASES APPLICABILITY (continued) a.Acceptable fuel design limits and reactor coolant pressure boundary limits are not exceeded as a result of AOOs or abnormal transients and b.Adequate core cooling is provided, and containment OPERABILITY and other vital functions are maintained in the event of a postulated DBA.Inverter requirementfor MODES 4 and 5 are covered in the Bases for LCO 3.8.8,"Inverters -Shutdown." ACTIONS With a required inverter inoperable, its associated AC vital bus becomes inoperable until it is manually re-energized from its[Class1E constant voltage source transformer or inverter using an internal AC source].LCO 3.8.9 addresses this action;however, pursuant to LCO 3.0.6, these actions would not be entered even if the AC vital bus were de-energized. Therefore, the ACTIONS are modified by a Note torequirethe ACTIONS for LCO 3.8.9 be entered immediately. This ensures the vital bus isenergized within 2 hours.Required Action A.1 allows 24 hours to fix the inoperable inverter and return it to service.The 24 hour limit is based upon engineering judgment and takes into consideration the time required to repair an inverter and the additional risk to which the unit is exposed because of the inverter inoperability. This risk has to be balanced against the risk of an immediate shutdown, along with the potential challenges to safety systems that such a shutdown might entail.When the AC vital bus is powered from its constant voltage source, it is relying upon interruptible AC electrical power sources (offsite and onsite).Similarly, the uninterruptible inverter source to the AC vital buses is the preferred source for powering instrumentation trip setpoint devices.If the inoperable devices or components cannot b restored to OPERABLE status within the associated Completion ime, the unit must be brought to a MODE in which theCs.To achieve this status, the plant must be brought to at least MODE 3 within 12 ([0The allowed Completion reas:a6,ased on operating experience, to reach the required plant:::r Ylse,..f:t BWRl4 STS B 3.8.7-3 Rev.2, 04/30/01 REFERENCES Inverters-Operating B 3.8.7 BASES ACTIONS (continued) conditions from full power conditions in an orderly manner and without challenging unit systems.SURVEILLANCE SR 3.8.7.1 REQUIREMENTS This Surveillance verifies that the inverters are functioning properly with all required circuit breakers closed and AC vital buses energized from the inverter.The verification of proper voltage and frequency output ensures that the required power is readily available for instrumentation connected to the AC vital buses.The 7 day Frequency takes into account the redundant capability of the inverters and other indications available in the control room that alert the operator to inverter malfunctions. 1.FSAR, Chapter[8].2.FSAR, Chapter[6].r 3.FSAR, Chapter[15].cr BWRl4 STS B 3.8.7-4 Rev.2, 04/30101 BWRl4 LCO 3.8.9 Distribution Systems-Operating INSERT 1 Remaining in the Applicability oftheLCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 4)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.INSERT 2 4.NEDC-32988-A, Revision 2, Technical Justification to Support Risk-Informed Modification to Selected Required End States for BWR Plants, December 2002. Distribution Systems-Operating 3.8.9 ACTIONS (continued) CONDITION REQUIRED ACTION COMPLETION TIME C.One or more[station C.1 Restore DC electrical 2 hours service]DC electrical power distribution power distribution subsystem(s) to AND subsystems inoperable. OPERABLE status.16 hours from discovery of failure to meet LCO D.Required Action and D.1 Be in MODE 3.12 hours associated Completion Time of Condition A, B, AND or C not met. E,[One or more DG DC E,1 Declare associated DG(s)Immediately] electrical power inoperable. distribution subsystems inoperable. F.Two or more electrical F.1 Enter LCO 3.0.3.Immediately power distribution subsystems inoperable that result in a loss of function.SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.8.9.1 BWRl4 STS Verify correct breaker alignments and voltage to 7 days[required] AC, DC,[and AC vital bus]electrical power distribution subsystems. 3.8.9-2 Rev.2, 04/30101 Distribution Systems-Operating B 3.8,9 BASES ACTIONS (continued) establishing the"time zero" at the time the LCO was initially not met, instead of at the time Condition C was entered.The 16 hour Completion Time is an acceptable limitation on this potential of failing to meet the LCO indefinitely. D.1(anJ@)Ove"".11 flC?"!-/-,/",,:slc If the inoperable distribution subsystem cannot be restored to OPERABLE status within the associated Com letion Ti e the unit must be brought to a MODE in which the LC es neta I To achieve this status, the plant must be brought to at least MODE 3 within 12 <fQJii1CIDJf4 wifFlu:ga:50ur§l The allowed Completion reasonable, based on 0 eratin xperience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.With one or more DG DC buses inoperable, the associated DG(s)may be incapable of performing their intended functions. In this situation the DG(s)must be immediately declared inoperable. This action also requires entry into applicable Conditions and Required Actions of LCO 3.8.1,"AC Sources-Operating." Condition F corresponds to a level of degradation in the electrical distribution system that causes a required safety function to be lost.When more than one AC or DC electrical power distribution subsystem is lost, and this results in the loss ofa required function, the plant is in a condition outside the accident analysis.Therefore, no additional time is justified for continued operation. LCO 3.0.3 must be entered immediately to commence a controlled shutdown.SURVEILLANCE SR 3.8.9.1 REQUIREMENTS This Surveillance verifies that the AC and DC, electrical power distribution systems are functioning properly, with the correct circuit breaker alignment. The correct breaker alignment ensures the appropriate .separation and independence of the electrical buses are maintained, and the appropriate voltage is available to each required bus.The verification of proper voltage availability on the buses ensures that the required voltage is readily available for motive as well as control functions for BWRl4STS B 3.8.9-8 Rev.2, 04/30101 Distribution Systems-Operating B 3.8.9 BASES SURVEILLANCE REQUIREMENTS (continued) critical system loads connected to these buses.The 7 day Frequency takes into account the redundant capability of the AC, DC, and AC vital bus electrical power distribution subsystems, and other indications available in the control room that alert the operator to sUbsystem malfunctions. REFERENCES 1.FSAR, Chapter[6].2.FSAR, Chapter[15].3.Regulatory Guide 1.93, December 1974.gns e 4'f 9 BWRJ4STS B 3.8.9-9 Rev.2, 04/30101 BWRl6 LCO 3.3.8.2 RPS Electric Power Monitoring INSERT 1 Remaining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref.2)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.INSERT 2 2.NEDC-32988-A, Revision 2, Technical Justification to Support Risk-Informed Modification to Selected Required End States for BWR Plants, December 2002. RPS Electric Power Monitoring 3.3.8.2 3.3 INSTRUMENTATION 3.3.8.2 Reactor Protection System (RPS)Electric Power Monitoring LCO 3.3.8.2 APPLICABILITY: ACTIONS Two RPS electric power monitoring assemblies shall be OPERABLE for each inservice RPS motor generator set or alternate power supply.MODES 1, 2, and 3, MODES 4 and 5[with any control rod withdrawn from a core cell containing one or more fuel assemblies]. CONDITION REQUIRED ACTION COMPLETION TIME A.One or both inservice A.1 Remove associated 72 hours power supplies with one inservice power supply(s)electric power monitoring from service.assembly inoperable. B.One or both inservice B.1 Remove associated 1 hour power supplies with both inservice power supply(s)electric power monitoring from service.assemblies inoperable. C.Required Action and C.1 Be in MODE 3.12 hours associated Completion Time of Condition A or Bnot met in MODE 1,2, or 3.D.Required Action and D.1 Initiate action to fully insert Immediately associated Completion all insertable control rods Time of Condition A or B in core cells containing not met in MODE 4 or 5 one or more fl,.Jel[with any control rod assemblies. withdrawn from a core cell containing one or AND more fuel assemblies]. BWRl6STS 3.3.8.2-1 Rev.2, 04/30101 RPS Electric Power Monitoring B 3.3.8.2 BASES ACTIONS (continued) power supply with OPERABLE power monitoring assemblies may then be used to power the RPS bus.The 72 hour Completion Time takes into account the remaining OPERABLE electric power monitoring assembly and the low probability of an event requiring RPS Electric Power Monitoring protection occurring during this period.It allows time for plant operations personnel to take corrective actions or to place the plant in the required condition in an orderly manner and without challenging plant systems.Alternatively, if it is not desired to remove the power supply(s)from service (e.g., as in the case where removing the power supply(s)from service would result in a scram or isolation), Condition C or 0, as applicable, must be entered and its Required Actions taken.If both power monitoring assemblies for an inservice power supply (MG set or alternate) are inoperable, or both power monitoring assemblies in each inservice power supply are inoperable, the system protective function is lost.In this condition, 1 hour is allowed to restore one assembly to OPERABLE status for each inservice power supply.If one inoperable assembly for each inservice power supply cannot be restored to OPERABLE status, the associated power supplies must be removed from service within 1 hour (Required Action B.1).An alternate power supply with OPERABLE assemblies may then be used to power one RPS bus.The 1 hour Completion Time is sufficient for the plant operations personnel to take corrective actions and is acceptable because it minimizes risk while allowing time for restoration or removal from service of the electric power monitoring assemblies. Alternately, if it is not desired to remove the power supply(s)from service (e.g., as in the case where removing the power supply(s)from service would result in a scram or isolation), Condition C or 0,asapplicable, must be entered and its Required Actions taken.C.1(an?@)BWRl6 STS B 3.3.8.2-4 Rev.2, 04/30101 RPS ElectricPowerMonitoring B 3.3.8.2 BASES If any Required Action and associated Completion Time of Condition A or B are not met in MODE 4 or 5, with any control rod withdrawn from a core cell containing one or more fuel assemblies or with both RHR shutdown cooling valves open, the operator must immediately initiate action to fully insert all insertable control rods in core cells containing one or more fuel assemblies (Required Action 0.1).This Required Action results in the least reactive condition for the reactor core and ensures that the safety function of the RPS (e.g., scram of control rods)is not required.In addition, action must be immediately initiated to either restore one electric power monitoring assembly to OPERABLE status for the inservice power source supplying the required instrumentation powered from the RPS bus (Required Action 0.2.1)or to isolate the RHR Shutdown Cooling System (Required Action 0.2.2).Required Action 0.2.1 is provided because the RHR Shutdown Cooling System may be needed to provide core cooling.All actions must continue until the applicable Required Actions are completed. SURVEILLANCE SR 3.3.8.2.1 REQUIREMENTS A CHANNEL FUNCTIONAL TEST is performed on each overvoltage, undervoltage, and underfrequency channel to ensure that the entire channel will perform the intendea function.A successful test of the required contact(s) of a channel relay may be performed by the verification of the change of state of a single contact of the relay.This clarifies what is an acceptable CHANNEL FUNCTIONAL TEST of a relay.This is acceptable because all of the other required contacts of the relay are verified by other Technical Specifications and non-Technical Specifications tests at least once per refueling interval with applicable extensions. Any setpoint adjustment shall be consistent with the assumptions of the current plant specific setpoint methodology. As noted in the Surveillance, the CHANNEL FUNCTIONAL TEST is only required to be performed while the plant is in a condition in which the loss BWRl6 STS B 3.3.8.2-5 Rev.2, 04/30101 RPS Electric Power Monitoring B 3.3.8.2 BASES SURVEILLANCE REQUIREMENTS (continued) of the RPS bus will not jeopardize steady state power operation (the design of the system is such that the power source must be removed from service to conduct the Surveillance). The 24 hours is intended to indicate an outage of sufficient duration to allow for scheduling and proper performance of the Surveillance. The 184 day Frequency and the Note in the Surveillance are based on guidance provided in Generic Letter 91-09 (Ref.@).CID SR 3.3.8.2.2 CHANNEL CALIBRATION is a complete check of the instrument loop and the sensor.This test verifies that the channel responds to the measured parameter withinthenecessary range and accuracy.CHANNEL CALIBRATION leaves the channel adjusted to account for instrument drifts between successive calibrations consistent with the plant specific setpoint methodology. The Frequency is based upon the assumption of an 18 month calibration interval in the determination of the magnitude of equipment drift in the setpoint analysis.SR 3.3.8.2.3 Performance of a system functional test demonstrates a required system actuation (simulated or actual)signal.The logic of the system will automatically trip open the associated power monitoring assembly circuit breaker.Only one signal per power monitoring assembly is required to be tested.This Surveillance overlaps with the CHANNEL CALIBRATION to provide complete testing of the safety function.The system functional test of the Class1E circuit breakers is included as part of this test to provide complete testing of the safety function.If the breakers are incapable of operating, the associated electric power monitoring assembly would be inoperable. The 18 month Frequency is based on the need to perform this Surveillance under the conditions that apply during a plant outage and the potential for an unplanned transient if the Surveillance were performed with the reactor at power.Operating experience has shown that these components usually pass the Surveillance when performed at the 18 month Frequency. BWRl6 STS B 3.3.8.2-6 Rev.2, 04/30101 BASES REFERENCES 1. RPS Electric Power Monitoring B 3.3.8.2 FSAR, Section[8.3.1.1.5]. NRC Generic Letter 91-09,"Modification of Surveillance Interval for the Electric Protective Assemblies in Power Supplies for the Reactor Protection System." BWRl6STS B 3.3.8.2-7 Rev.2, 04/30101 BWRl6 LCO 3.4.4 Safety/Relief Valves INSERT 1 Remaining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 4)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.INSERT 2 C.l and C.2 If[two]or more[required] SIRVs are inoperable, a transient may result in the violation of the ASME Code limit on reactor pressure.Theplant must be brought to a MODE in which the LCO does not apply.To achieve this status, the plant must be brought to MODE 3 within 12 hours and to MODE 4 within 36 hours.The allowed Completion Times are reasonable, based on operating experience, to reach required plant conditions from full power conditions in an orderly manner and without challenging plant systems.INSERT 3 4.NEDC-32988-A, Revision 2, Technical Justification to Support Risk-Informed Modification to Selected Required End States for BWR Plants, December 2002. S/RVs 3.4.4 3.4 REACTOR COOLANT SYSTEM (RCS)3.4.4 Safety/Relief Valves (S/RVs)LCO 3.4.4 APPLICABILITY: ACTIONS The safety function of[seven]S/RVs shall be OPERABLE, The relief function of[seven]additional S/RVs shall be OPERABLE.MODES 1, 2, and 3.CONDITION REQUIRED ACTION COMPLETION TIME A.[One[required] S/RV A.1 Restore[required] S/RV to 14 days]inoperable. OPERABLE status.B.[Required Action and B.1 Be in MODE 3.12 hours associated CompletionTime of Condition Anotmet.].2 /36 htfurs){QID C.CO l Be i.../f/lt>ltJe 3./2 y,o"C'1[Two]or more[required]S/RVs inoperable. £:,2 Be!j;".,/VlIJoe.tf.
- 1 I.
BWRl6 STS 3.4.4-1 Rev.2, 04/30101 S/RVs B3.4.4 BASES APPLICABILITY (continued) S/RVs may be required to provide pressure relief to discharge energy from the core until such time that the Residual Heat Removal (RHR)System is capable of dissipating the heat.In MODE 4, decay heat is low enough for the RHR System to provide adequate cooling, and reactor pressure is low enough that the overpressure limit is unlikely to be approached by assumed operational transients or accidents. In MODE 5, the reactor vessel head is unbolted or removed and the reactor is at atmospheric pressure.The S/RV function is not needed during these conditions. ACTIONS With the safety function of one[required] S/RV inoperable, the remaining OPERABLE S/RVs are capable of providing the necessary overpressure protection. Because of additional design margin, the ASME Code limits for the RCPB can also be satisfied with two S/RVs inoperable. However, the overall reliability of the pressure relief system is reduced because additional failures in the remaining OPERABLE S/RVs could result in failure to adequately relieve pressure during a limiting event.For this reason, continued operation is permitted for a limited time only.The 14 day Completion Time to restore the inoperable required S/RVs to OPERABLE status is based on the relief capability of the remaining S/RVs, the low probability of an event requiring S/RV actuation, and a reasonable time to complete the Required Action.8.1 BWRl6 STS B 3.4.4-3 Rev.2, 04/30101 S/RVs B 3.4.4 BASES SURVEILLANCE REQUIREMENTS (continued) steam flow, or any other method suitable to verify steam flow.Adequate reactor steam dome pressure must be available to perform this test to avoid damaging the valve.Also, adequate steam flow must be passing through the main turbine or turbine bypass valves to continue to control reactor pressure when the S/RVs divert steam flow upon opening.Sufficient time is therefore allowed after the required pressure and flow are achieved to perform this test.Adequate pressure at which this test is to be performed is 950 psig (the pressure recommended by the valve manufacturer). Adequate steam flow is represented by[at least 1.25 turbine bypass valves open, or total steam flow10 6 Ib/hr].Plant startup is allowed prior to performing this test because valve OPERABILITY and the setpoints for overpressure protection are verified, per ASME requirements, prior to valve installation. Therefore, this SR is modified by a Note that states the Surveillance is not required to be performed until 12 hours after reactor steam pressure and flow are adequate to perform the test.The 12 hours allowed for manual actuation after the required pressure is reached is sufficient to achieve stable conditions for testing and provides a reasonable time to complete the SR.If the valve fails to actuate due only to the failure of the solenoid but is capable of opening on overpressure, the safety function of the S/RV is considered OPERABLE.The[18]month on a STAGGERED TEST BASIS Frequency ensures that each solenoid for each S/RV is alternately tested.The 18 month Frequency was developed based on the S/RV tests required by the ASME Boiler and Pressure Vessel Code, Section XI (Ref.1).Operating experience has shown that these components usually pass the Surveillance when performed at the 18 month Frequency. Therefore, the Frequency was concluded to be acceptable from a reliability standpoint. REFERENCES 1.ASME, Boiler and Pressure Vessel Code, Section III.2.FSAR, Section[5.2.5.5.3]. 3.FSAR, Section[15].BWRl6 STS B 3.4.4-5 Rev.2, 04/30101 BWRl6 LCO 3.5.1 ECCS-Operating INSERT 1 Remaining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 13)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.INSERT 2 13.NEDC-32988-A, Revision 2, Technical Justification to Support Risk-Informed Modification to Selected Required End States for BWR Plants, December 2002. ACTIONS (continued) ECCS-Operating 3.5.1 CONDITION REQUIRED ACTION COMPLETION TIME D.Required Action and D.1 Be in MODE 3.12 hours associated Completion Time of Condition A, B, AND or C not met. E.One ADS valve E.1 Restore ADS valve to 14 days inoperable. OPERABLE status.F.One ADS valve F.1 Restore ADS valve to 72 hours inoperable. OPERABLE status.AND OR One low pressure ECCS F.2 Restore low pressure 72 hours injection/spray ECCS injection/spray subsystem inoperable. subsystem to OPERABLE status.G.Two or more ADS valves G.1 Be in MODE 3.12 hours inoperable. AND OR G.2 Reduce 37 Required Action and dome pressure to associated Completion r[150]psig.Time of Condition E or F not met.BWRl6 STS 3.5.1-2 Rev.2, 04/30/01 ECCS-Operating B 3.5.1 BASES ACTIONS (continued) 14 day Completion Time is based on the results of a reliability study (Ref.12)and has been found to be acceptable through operating experience. With two ECCS injection subsystems inoperable or one ECCS injection and one ECCS spray subsystem inoperable, at least one ECCS injection/spray sUbsystem must be restored to OPERABLE status within 72 hours.In this Condition, the remaining OPERABLE sUbsystems provide adequate core cooling during a LOCA.However, overall ECCS reliability is reduced in this Condition because a single failure in one of the remaining OPERABLE subsystems concurrent with a design basis LOCA may result in the ECCS not being able to perform its intended safety function.Since the ECCS availability is reduced relative to Condition A, a more restrictive Completion Time is imposed.The 72 hour Completion Time is based on a reliability study, as provided in Reference 12. If any Required Action and associated Completion Time of Condition A, B, or C are not met, the plant must be brought to a MODE in which the L es.To achieve this status, the plant must be brought to at least MODE 3 within 1 4..wtt\11n 36@r§>The allowed Completion based on operatingexperience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.U iA The LCO requires eight AD valves to be OPERABLE toprovidethe ADS function.Reference contains the results of an analysis that evaluated the effect of one ADS valve being out of service.Per this analysis, operation of only sevenADSvalves will provide the required depressurization. However, overall reliability of the ADS is reduced because a single failure in the OPERABLE ADS valves could result in a reduction in depressurization capability. Therefore, operation is only allowed for a limited time.The 14 day Completion Time is based on a reliability study (Ref.12)and has been found to be acceptable through operating experience. BWRl6 STS B 3.5.1-6 Rev.2, 04/30/01 ECCS-Operating B 3.5.1 BASES ACTIONS (continued) F.1 and F.2 If any Required Action and associated Completion Time of Condition E or F are not met or if two or more ADS valves are inoperable, th lant must be brought to which theCsI.To achieve thisstatus,the lant must be brought to at least MODE 3 within 12 hou and re.aetc1r"'§leam orne re uc I r=:tl_@Uitt The allowed Completion Time easonable, based on J operating experience, to reach the required plant con I Ions from full power conditions in an orderly manner and without challenging plant systems.When multiple ECCS subsystems are inoperable, as stated in Condition H, the plant is in a condition outside of the accident analyses.Therefore, LCO 3.0.3 must be entered immediately. SURVEILLANCE SR 3.5.1.1 REQUIREMENTS The flow path piping has the potential to develop voids and pockets of entrained air.Maintaining the pump discharge lines of the HPCS System, LPCS System, and LPCI subsystems full of water ensures that the systems will perform properly, injecting their full capacity into the RCS upon demand.This will also prevent a water hammer following an ECCS initiation signal.One acceptable method of ensuring the lines are full is to vent at the high points.The 31 day Frequency is based on operating BWRl6 STS B 3.5.1-7 Rev.2, 04/30101 ECCS-Operating B 3.5.1 BASES SURVEILLANCE REQUIREMENTS (continued) experience, on the procedural controls governing system operation, and on the gradual nature of void buildup in the ECCS piping.SR 3.5.1.2 Verifying the correct alignment for manual, power operated, and automatic valves in the ECCS flow paths provides assurance that the proper flow paths will exist for ECCS operation. This SR does not apply to valves that are locked, sealed, or otherwise secured in position since these valves were verified to be in the correct position prior to locking, sealing, or securing.A valve that receives an initiation signal is allowed to be in a nonaccident position provided the valve will automatically reposition in the proper stroke time.This SR does not require any testing or valve manipulation; rather,it involves verification that those valves potentially capable of being mispositioned are in the correct position.This SR does not apply to valves that cannot be inadvertently misaligned, such as check valves.The 31 day Frequency of this SR was derived from the Inservice Testing Program requirements for performing valve testing at least once every 92 days.The Frequency of 31 days is further justified because the valves are operated under procedural control and because improper valve alignment would only affect a single subsystem. This Frequency has been shown to be acceptable through operating experience. This SR is modified by a Note that allows LPCI subsystems to be considered OPERABLE during alignment and operation for decay heat removal with reactor steam dome pressure less than the RHR cut in permissive pressure in MODE 3, if capable of being manually realigned (remote or local)to the LPCI mode and not otherwise inoperable. This allows operation in the RHR shutdown cooling mode during MODE 3 if necessary. SR 3.5.1.3 Verification every 31 days that ADS airreceiverpressure is[150]psig assures adequate air pressure for reliable ADS operation. The accumulator on each ADS valve provides pneumatic pressure for valve actuation. The designed pneumatic supply pressure requirements for the accumulator are such that, following a failure of the pneumatic supply to the accumulator, at least two valve actuations can occur with the drywell at 70%ofdesignpressure (Ref.The ECCS safety analysis assumes only one actuation to achieve the depressurization required for operation 5 BWRl6 STS B 3.5.1-8 Rev.2, 04/30101 ECCS-Operating B 3.5.1 BASES REFERENCES (continued) 10.11.12.10 CFR 50.46.FSAR, Section[6.3.3.3]. Memorandum from R.L.Baer (NRC)to V.Stello, Jr.(NRC),"Recommended Interim Revisions to LCO's for ECCS Components," December 1, 1975.FSAR, Section[6.3.3.7.8]. FSAR, Section[7.3.1.1.1.4.2]. BWRl6 STS B 3.5.1-12 Rev.2, 04/30101 TSTF-423 BWR/6 LCO 3.6.1.1, Primary containment INSERT 1 Remaining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref. 5), because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.
However, voluntary entry into MODE 4 may be made as it is also an acceptable low -risk s tate. INSERT 2 5. NEDC-32988-A, Revision 2, Technical Justification to Support Risk -Informed Modification to Selected Required End States for BWR Plants, December 2002.
3.6 CONTAINMENT SYSTEMS 3.6.1.1 Primary Containment Primary Containment 3.6.1.1 LCO 3.6.1.1 APPLICABILITY: ACTIONS Primary containment shall be OPERABLE.MODES 1, 2, and 3.CONDITION REQUIRED ACTION COMPLETION TIME A.Primary containment A.1 Restore primary 1 hour inoperable. containment to OPERABLE status.B.Required Action and B.1 Be in MODE 3.12 hours associated CompletionTime not met.. SURVEILLANCE REQUIREMENTS SURVEILLANCE SR 3.6.1.1.1 Perform required visual examinations and leakage rate testing except for primary containment air lock testing, in accordance with the Primary Containment Leakage Rate Testing Program.SR 3.6.1.1.2[Verify primary containment structural integrity in accordance with the Primary Containment Tendon Surveillance Program.BWRl6 STS 3.6.1.1-1 FREQUENCY In accordance with the Primary Containment Leakage Rate Testing Program In accordance with the Primary Containment Tendon Surveillance Program]Rev.2, 04/30/01 BASES ACTIONS /I ('I'-f,!C. i..!. SURVEILLANCE REQUIREMENTS Primary Containment B 3.6.1.1 In the event that primary containment is inoperable, primary containment must be restored to OPERABLE status within 1 hour.The 1 hour Completion Time provides a period of time to correct the problem that is commensurate with the importance of maintaining primary containment OPERABILITY during MODES 1, 2, and 3.This time period also ensures that the probability of an accident (requiring primary containment OPERABILITY) occurring during periods where primary containment is inoperable is minimal.If primary containment cannot be restored to OPERABLE status within the associated Completion Time, the plant must be brought to a MODE in which the L.To achieve thisstatus,the plant must be brou ht to at least MODE 3 within 12 hourS@ndJ"iii!1tlE 4,..wtthin) 3 rs The allowed Completion Time14 easonable, based on l'..s opera Ing experience, to reach the required p ant conditions from full power conditions in an orderly manner and without challenging plant systems.SR 3.6.1.1.1 Maintaining the primary containment OPERABLE requires compliance with the visual examinations and leakage rate test requirements of the Primary Containment Leakage Rate Testing Program.Failure to meet air lock leakage testing (SR 3.6.1.2.1 and SR 3.6.1.2.4),[secondary containment bypass leakage (SR 3.6.1.3.9),] resilient seal primary containment purge valve leakage testing (SR 3.6.1.3.6), or main steam isolation valve leakage (SR 3.6.1.3.10) does not necessarily result in a failure of this SR.The impact of the failure to meet these SRs must be evaluated against the Type A, B, and C acceptance criteria of the Primary Containment Leakage Rate Testing Program.As left leakage prior to the first startup after performing a required Primary Containment Leakage Rate Testing Program leakage test is required to be<0.6 La for combined Type Band C leakage, and[<0.75 La for Option A][::;0.75 La for Option B]for overall Type A leakage.At all other times between required leakage rate tests, the acceptance criteria is based on an overall Type A leakage limit of::;1.0 La.At::;1.0 La the oftsite dose consequences are bounded by the assumptions of the safety analysis.The Frequency is required by the Primary Containment Leakage Rate Testing Program.BWRl6 STS B 3.6.1.1-3 Rev.2, 04/30101 Primary Containment B 3.6.1.1 BASES SURVEILLANCE REQUIREMENTS (continued)
- REVIEWER'S NOTE*Regulatory Guide 1.163 and NEI 94-01 include acceptance criteria forleft and as-found type A leakage rates and combined Type Band C leakage rates,whichmy be reflected in the Bases.[SR 3.6.1.1.2 The structural integrity of the primary containment is ensured by the successful completion of the Primary Containment Tendon Surveillance Program and by associated visual inspections of the steel liner and penetrations for evidence of deterioration or breach of integrity.
This ensures that the structural integrity of the primary containment will be maintained in accordance with the provisions of the Primary Containment Tendon Surveillance Program.Testing and Frequency are consistent with the recommendations of Regulatory Guide 1.35 (Ref.]fJl)REFERENCES 1.FSAR, Section[6.2].2.FSAR, Section[15.6.5].3.10 CFR 50, Appendix J, Option[A][B].seA4.FSAR, Section[].(1j<1>Regulatory Guide 1.35, Revision[1].BWRl6 STS B 3.6.1.1-4 Rev.2, 04/30101
BWRl6 Leo 3.6.1.6 Low-Low Set Valves INSERT 1 Remaining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 3)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.INSERT 2 C.l and C.2 If two or more LLS valves are inoperable, there could be excessive short duration SIRV cycling during an overpressure event.The plant must be brought to a condition in which the LCO does not apply.To achieve this status, the plant must be brought to at least MODE 3 within 12 hours and MODE 4 within 36 hours.The allowed Completion Times are reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.INSERT 3 3.NEDC-32988-A, Revision 2, Technical Justification to Support Risk-Informed Modification to Selected Required End States for BWR Plants, December 2002. LLS Valves 3.6.1.6 3.6 CONTAINMENT SYSTEMS 3.6.1.6 Low-Low Set (LLS)Valves LCO 3.6.1.6 APPLICABILITY: ACTIONS The LLS function of[six]safety/relief valves shall be OPERABLE.MODES 1, 2, and 3.CONDITION REQUIRED ACTION COMPLETION TIME A.One LLS valve A.1 Restore LLS valve to 14 days inoperable. OPERABLE status.B.Required Action and B.1 Be in MODE 3.12 hours associated Completion Time of Condition AnotAND met.B Bein,s hours'--C-.I BeM ()OE'3.12 noOol':'s LII Two or more LLS valves A-1VlO inoperable.
- -..--Be,\" MDoe"l.'36 hOtA-r'SSURVEILLANCE REQUIREMENTS SURVEILLANCE SR 3.6.1.6.1.NOTE*Not required to be performed until 12 hours after reactor steam pressure and flow are adequate to perform the test.Verify each LLS valve opens when manually actuated.FREQUENCY[18]months[on a STAGGERED TEST BASIS for each valve solenoid]BWRl6STS 3.6.1.6-1 Rev.2,04/30/01 BASES LCO APPLICABILITY ACTIONS SURVEILLANCE REQUIREMENTS LLS Valves B 3.6.1.6[Six]LLS valves are required to be OPERABLE to satisfy the assumptions of the safety analysis (Ref.2).The requirements of this LCO are applicable to the mechanical and electrical/pneumatic capability of the LLS valves to function for controlling the opening and closing of the S/RVs.In MODES 1, 2, and 3, an event could cause pressurization of the reactor and opening of S/RVs.In MODES 4 and 5, the probability and consequences of these events are reduced due to the pressure and temperature limitations in these MODES.Therefore, maintaining the LLS valves OPERABLE is not required in MODE 4 or 5.With one LLS valve inoperable, the remaining OPERABLE LLS valves are adequate to perform the designed function.However, the overall reliability is reduced.The 14 day Completion Time takes into account the redundant capability afforded by the remaining LLS S/RVs and the low probability of an event in which the remaining LLS S/RV capability would be inadequate.
Oller.JI I.J LLS valves-are orJ,ff the inoperable LLS valve cannot be restored to OPERABLE status within the required Completion Time, the plant must be brought to a MODE in which the{LCo:¥es""'noOTo achieve this status, the plant must be brou ht to at least MODE 3 within 14J1ours and ur he allowed Completion reasonable, based on operating experience, to reach the reqUired plant conditions from full power conditions in an orderly manner and without challenging plant systems.SR 3.6.1.6.1 A manual actuation of each LLS valve is performed to verify that the valve and solenoids are functioning properly and that no blockage exists in the valve discharge line.This can be demonstrated by the response of the turbine control or bypass valve, by a change in the measured steam flow, or by any other method that is suitable to verify steam flow.Adequate reactor steam dome pressure must be available to perform this test to avoid damaging the valve.Adequate pressure at which this test is to be performed is[950]psig (the pressure recommended by the valve manufacturer). Also, adequate steam flow must be passing through the BWRl6 STS B 3.6.1.6-2 Rev.2, 04/30101 LLS Valves B 3.6.1.6 BASES SURVEILLANCE REQUIREMENTS (continued) main turbine or turbine bypass valves to continue to control reactor pressure when the ADS valves divert steam flow upon opening.Adequate steam flow is represented by[at least 1.25 turbine bypass valves open, or total steam flow10 6 Ib/hr].The[18]month Frequency was developed based on the S/RV tests i?uired by the ASME Boiler and<!j)Pressure Vessel Code, Section XI (Ref..The Frequency of[18]months on a STAGGERED TEST BASIS ensures that each solenoid for each S/RV is alternately tested.Operating experience has shown these components usually pass the Surveillance when performed at the[18]month Frequency. Therefore, the Frequency was concluded to be acceptable from a reliability standpoint. Since steam pressure is required in order to perform the Surveillance, however, and steam may not be available during a unit outage, the Surveillance may be performed during the shutdown prior to or the startup following a unit outage.Unit startup is allowed prior to performing this test because valve OPERABILITY and the setpoints for overpressure protection are verified by Reference prior to valve installation. After adequate reactor steam dome pressure and flow are reace, ours are allowed to prepare for and perform the test.SR 3.6.1.6.2 The LLS designed S/RVs are required to actuate automatically upon receipt of specific initiation signals.A system functional test is performed to verify that the mechanical portions (Le., solenoids) of the automatic LLS function operate as designed when initiated either by an actual or simulated automatic initiation signal.The LOGIC SYSTEM FUNCTIONAL TEST in SR 3.3.6.5.4 overlaps this SR to provide complete testing of the safety function.The 18 month Frequency is based on the need to perform this Surveillance under the conditions that apply during a plant outage and the potential for an unplanned transient if the Surveillance were performed with the reactor at power.Operating experience has shown these components usually pass the Surveillance when performed at the 18 month Frequency. Therefore, the Frequency was concluded to be acceptable from a reliability standpoint. This SR is modified by a Note that excludes valve actuation. This prevents a reactor pressure vessel pressure blowdown.BWRl6 STS B 3.6.1.6-3 Rev.2,04/30/01 BASES REFERENCES LLS Valves B 3.6.1.6[1.GESSAR-II, Appendix 3BA.8.]FSAR, Section[5.5.17].ASME, Boiler and Pressure Vessel Code, Section XI.BWRl6 STS B 3.6.1.6-4 Rev.2, 04/30101 BWRl6 LCO 3.6.1.7 RHR Containment Spray Sysem INSERT 1 Remaining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 2)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.INSERT 2 2.NEDC-32988-A, Revision 2, Technical Justification to Support Risk-Informed Modification to Selected Required End States for BWR Plants, December 2002. RHR Containment Spray System 3.6.1.7 3.6CONTAINMENTSYSTEMS 3.6.1.7 Residual Heat Removal (RHR)Containment Spray System LCO 3.6.1.7 APPLICABILITY: ACTIONS Two RHR containment spray subsystems shall be OPERABLE.MODES 1, 2, and 3.CONDITION REQUIRED ACTION COMPLETION TIME A.One RHR containment A.1 Restore RHR containment 7 days spray sUbsystem spray subsystem to inoperable. OPERABLE status.B.Two RHR containment B.1 Restore one RHR 8 hours spray subsystems containment spray inoperable. subsystem to OPERABLE status.C.Required Action and C.1 Be in MODE 3.12 hours associated Completion Time not met.ANBe inflODE 4./36BWRl6STS 3.6.1.7-1 Rev.2, 04/30101 BASES LCO APPLICABILITY ACTIONS RHR Containment Spray System B3.6.1.7 In the event ofaDesign Basis Accident (DBA), a minimum of one RHR containment spray subsystem is required to mitigate potential bypass leakage paths and maintain the primary containment peak pressure below design limits.To ensure that these requirements are met, two RHR containment spray subsystems must be OPERABLE.Therefore, in the event of an accident, at least one subsystem is OPERABLE assuming the worst case single active failure.An RHR containment spray subsystem is OPERABLE when the pump, the heat exchanger, and associated piping, valves, instrumentation, and controls are OPERABLE.In MODES 1, 2, and 3, a DBA could cause pressurization of primary containment. In MODES 4 and 5, the probability and consequences of these events are reduced due to the pressure and temperature limitations in these MODES.Therefore, maintaining RHR containment spray subsystems OPERABLE is not required in MODE 4 or 5.With one RHR containment spray subsystem inoperable, the inoperable subsystem must be restored to OPERABLE status within 7 days.In this Condition, the remaining OPERABLE RHR containment spray subsystem is adequate to perform the primary containment cooling function.However, the overall reliability is reduced because a single failure in the OPERABLE subsystem could result in reduced primary containment cooling capability. The 7 day Completion Time was chosen in light of the redundant RHR containment capabilities afforded by the OPERABLE subsystem and the low probability of a DBA occurring during this period.With two RHR containment spray subsystems inoperable, one subsystem must be restored to OPERABLE status within 8 hours.In this Condition, there is a substantial loss of the primary containment bypass leakage mitigation function.The 8 hour Completion Time is based on this loss of function and is considered acceptable due to the low probability of a DBA and because alternative methods to remove heat from primary containment are available. If the inoperable RHR containment spray subsystem annot be restored to OPERABLE status within the required Com letio ime, the plant must be brought to a MODE in which the C not To achieve this status, the plant must be brought to at least MODE 3 within 12 hoursBWRl6 STS B 3.6.1.7:'2 Rev.2, 04/30101 RHR Containment Spray System B 3.6.1.7 BASES ACTIONS G;,Slh>+..;)<to4 The allowed Completion TimJreasonable, based onoperatingexperience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.SURVEILLANCE SR 3.6.1.7.1 REQUIREMENTS Verifying the correct alignment for manual, power operated, and automatic valves in the RHR containment spray mode flow path provides assurance that the proper flow paths will exist for system operation. This SR does not apply to valves that are locked, sealed, or otherwise secured in position, since these were verified to be in the correct position prior to locking, sealing, or securing.This SR does not require any testing or valve manipulation; rather, it involves verification that those valves capable of being mispositioned are in the correct position.This SR does not apply to valves that cannot be inadvertently misaligned, such as check valves.The 31 day Frequency of this SR is justified because the valves are operated under procedural control and because improper valve position wouldaffectonly a single sUbsystem. This Frequency has been shown to be acceptable based on operating experience. A Note has been added to this SR that allows RHR containment spray subsystems to be considered OPERABLE during alignment to and operation in the RHR shutdown cooling mode when below[the RHR cut in permissive pressure in MODE 3], if capable of being manually realigned and not otherwise inoperable. At these low pressures and decay heat levels (the reactor is shut down in MODE 3), a reduced complement of subsystems can provide the required containment pressure mitigation function thereby allowing operation of an RHR shutdown cooling loop when necessary. SR 3.6.1.7.2 Verifying each RHR pump develops a flow rate:::[5650]gpm while operating in the suppression pool cooling mode with flow through the associated heat exchanger ensures that pump performance has not degraded during the cycle.It is tested in the pool cooling mode to demonstrate pump OPERABILITY without spraying down equipment in primary containment. Flow is a normal test of centrifugal pump performance required by the ASME Code, Section XI (Ref..This test confirms one point on the pump design curve and is indicative of overall BWRl6STS B 3.6.1.7-3 Rev.2, 04/30101 RHR Containment Spray System B 3.6.1.7 BASES SURVEILLANCE REQUIREMENTS (continued) performance. Such inservice inspections confirm component OPERABILITY, trend performance, and detect incipient failures by indicating abnormal performance. [The Frequency of this SR is in accordance with the Inservice Testing Program or 92 days.]SR 3.6.1.7.3 This SR verifies that each RHR containment spray subsystem automatic valve actuates to its correct position upon receipt of an actual or simulated automatic actuation signal.Actual spray initiation is not required to meet this SR.The LOGIC FUNCTIONAL TEST in SR 3.3.6.3.6 overlaps this SR to provide complete testing of the safety function.The[18]month Frequency is based on the need to perform this Surveillance under the conditions that apply during a plant outage and the potential for an unplanned transient if the Surveillance were performed with the reactor at power.Operating experience has shown that these components usually pass the Surveillance when performed at the[18]month Frequency. Therefore, the Frequency was concluded to be acceptable from a reliability standpoint. SR 3.6.1.7.4 This Surveillance is performed every 10 years to verify that the spray nozzles are not obstructed and that flow will be provided when required.The 10 year Frequency is adequate to detect degradation in performance due to the passive nozzle design and its normally dry state and has been shown to be acceptable through operating experience. FSAR, Section[6.2.1.1.5]. ASME, Boiler and Pressure Vessel Code, Section XI.BWRl6 STS B 3.6.1.7-4 Rev.2, 04/30101 BWRl6 LCO 3.6.1.8 PVLCS INSERT 1 Remaining in the Applicability ofthe LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 2)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.INSERT 2 2.NEDC-32988-A, Revision 2, Technical Justification to Support Risk-Informed Modification to Selected Required End States for BWR Plants, December 2002. PVLCS 3.6.1.8 3.6 CONTAINMENT SYSTEMS 3.6.1.8 Penetration Valve Leakage Control System (PVLCS)LCO 3.6.1.8[Two]PVLCS subsystems shall be OPERABLE.APPLICABILITY: MODES 1, 2, and 3.ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A.One PVLCS subsystem A.1 Restore PVLCS 30 days inoperable. subsystems to OPERABLE status.B.[Two]PVLCS B.1 Restore one PVLCS 7 days subsystems inoperable. subsystem to OPERABLE status.C.Required Action and C.1 Be in MODE 3.12 hours associated Completion Time not met.AND SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.6.1.8.1 Verify air pressure in each subsystem is 2[101]psig.24 hours SR 3.6.1.8.2 Perform a system functional test of each PVLCS[18]months subsystem. BWRl6STS 3.6.1.8-1 Rev.2, 04/30101 BASES LCO (continued) APPLICABILITY ACTIONS PVLCS B 3.6.1,8 leakage when the containment atmosphere is at the maximum peak containment pressure, P a'In MODES 1, 2, and 3, a DBA could cause a release of radioactive material to primary containment. In MODES 4 and 5, the probability and consequences of these events are reduced due to the pressure and temperature limitations of these MODES.Therefore, the PVLCS is not required to be OPERABLE in MODES 4 and 5 to prevent leakage of radioactive material from primary containment. With one PVLCS sUbsystem inoperable, the inoperable subsystem must be restored to OPERABLE status within 30 days.In this Condition, the remaining OPERABLE PVLCS subsystem is adequate to perform the leakage control function.The 30 day Completion Time is based on the low probability of the occurrence of a LOCA, the amount oftimeavailable after the event for operator action to prevent exceeding this limit, the low probability of failure of the OPERABLE PVLCS subsystem, and the availability of the PCIVs.With[two]PVLCS subsystems inoperable, at least one subsystem must be restored to OPERABLE status within 7 days.The 7 day Completion Time is based on the low probability of the occurrence of a DBA LOCA, the availability of 25 minutes for operator aqtion, and the availability of the PCIVs..If the inoperable PVLCS sUbsystem cannot be restored to OPERABLE status within the required Completio ime, the plant must be brought to a MODE in which the , To achieve this status, the plant must be brought to at least MODE 3 within 12 4) The allowed Completion .@on operating experience, to reach the required plant conditions fron;l full power conditions in a orderly manner and without challenging plant systems..BWRl6STS B 3.6.1.8-2 Rev.2, 04/30101 PVLCS B 3.6.1.8 BASES SURVEILLANCE SR 3.6.1.8.1 REQUIREMENTS The minimum air supply necessary for PVLCS OPERABILITY varies with the system being supplied with compressed air from the PVLCS accumulators. Due to the support system function of PVLCS for S/RV actuator air, however, the specified minimum pressure of[101]psig is required, which provides sufficient air for[]S/RV actuations with the drywell pressure at 30 psig.This minimum air pressure alone is sufficient for PVLCS to support the OPERABILITY of these S/RV systems and is verified every 24 hours.The 24 hour Frequency is considered adequate in view of other indications available in the control room;such as alarms, to alert the operator to an abnormal PVLCS air pressure condition. SR 3.6.1.8.2 A simulated system operation is performed every[18]months to ensure that the PVLCS will function throughout its operating sequence.This includes correct automatic positioning of valves once the system is initiated manually.Proper functioning of the compressor and valves is verified by this Surveillance. The[18]month Frequency was developed considering it is prudent that many Surveillances be performed only during a plant outage.Operating experience has shown that these components usually pass the Surveillance when performed at the[18]month Frequency. Therefore, the Frequency was concluded to be acceptable from a reliability standpoint. REFERENCES BWRJ6STS 1.FSAR, Section[15.6.5]., B 3.6.1.8-3 Rev.2, 04/30101 BWRl6 LCO 3.6.1.9 MSIV LCS INSERT 1 Remaining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to orlower than the risk in MODE 4 (Ref 4)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.INSERT 2 4.NEDC-32988 ...A, Revision 2, Technical Justification to Support Risk-Informed Modification to Selected Required End States for BWR Plants, December 2002. MSIVLCS 3.6.1.9 3.6 CONTAINMENT SYSTEMS 3.6.1.9MainSteam Isolation Valve (MSIV)Leakage Control System (LCS)LCO 3.6.1.9 APPLICABILITY: ACTIONS Two MSIV LCS subsystems shall be OPERABLE.MODES 1, 2, and 3.CONDITION REQUIRED ACTION COMPLETION TIME A, One MSIVLCS A,1 Restore MSIV LCS 30 days subsystem inoperable. subsystem to OPERABLE status.B.Two MSIV LCS B.1 Restore one MSIV LCS 7 days subsystems inoperable. sUbsystem to OPERABLE status.C.Required Action and C.1 Be in MODE 3.12 hours associated Completion Time not met.AN SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.6.1.9.1 SR 3.6.1.9.2 SR 3.6.1.9.3 BWRl6STS Operate each MSIV LCS blower;;:[15]minutes.31 days Verify electrical continuity of each inboard MSIV LCS 31 days subsystem heater element circuitry. Perform a system functional test of each MSIV LCS[18]months subsystem. 3.6.1.9-1 Rev.2, 04/30/01 BASES LCO ApPLICABILITY , ACTIONS MSIVLCS B 3.6.1.9 One MSIV LCS subsystem can provide the required processing of the MSIV leakage.To ensure that this capability is available, assuming worst case single failure, two MSIV LCS subsystems must be OPERABLE.In MODES 1, 2, and 3, a DBA could lead to a fission product release to primary containment. Therefore, MSIV LCS OPERABILITY is required during these MODES.In MODES 4 and 5, the probability and consequences of these events are reduced due to the pressure and temperature limitations in these MODES.Therefore, maintaining the MSIV LCS OPERABLE is not required in MODE 4 or 5 to ensure MSIV leakage is processed. "" With one MSIV LCS subsystem inoperable, the inoperable MSIV LCS subsystem must be restored to OPERABLE status within 30 days.In this Condition, the remaining OPERABLE MSIV LCS subsystem is adequate to perform the required leakage control function.However, the overall reliability is reduced because a single failure in the remaining subsystem could result in a total loss of MSIV leakage control function.The 30 day Completion Time is based on the redundant capability afforded by the remaining OPERABLE MSIV LCS subsystem and the low probability of a DBA LOCA occurring during this period.With two MSIV LCS subsystems inoperable, at least one subsystem must be restored to OPERABLE status within 7 days.The 7 day Completion Time is based on the low probability of the occurrence of a DBA LOCA.If the MSIV LCS subsystem cannot be restored to OPERABLE status within the required Completion Time, the plant must be brought to a MODE in which the es a I.To achieve this status, the plant must be brought to at least MODE 3 within 12 17 allowed Completion based@n operatrng experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.BWRl6 STS B 3.6.1.9-2 Rev.2, 04/30/01 MSIVLCS B 3.6.1.9 BASES SURVEILLANCE SR 3.6.1.9.1 REQUIREMENTS Each MSIV LCS blower is operated for[15]minutes to verify OPERABILITY. The 31 day Frequency was developed considering the known reliability of the LCS blower and controls, the two subsystem redundancy, and the low probability of a significant degradation of the MSIV LCS subsystem occurring between surveillances and has been shown to be acceptable through operating experience. SR 3.6.1.9.2 The electrical continuity of each inboard MSIV LCS subsystem heater is verified by a resistance check, by verifying the rate of temperature increase meets specifications, or by verifying the current or wattage draw meets specifications. The 31 day Frequency is based on operating experience that has shown that these components usually pass this Surveillance when performed at this Frequency. SR 3.6.1.9.3 A system functional test is performed to ensure that the MSIV LCS will operate through its operating sequence.This includes verifying that the automatic positioning of the valves and the operation of each interlock and timer are correct, that the blowers start and develop the required flow rate andthenecessary vacuum, and the upstream heaters meet current or wattage draw requirements (if not used to verify electrical continuity in SR 3.6.1.9.2). The 18 month Frequency is based on the need to perform this Surveillance under the conditions that apply during a plant outage and the potential for an unplanned transient if the Surveillance were performed with the reactor at power.Operating experience has shown that these components usually pass the Surveillance when performed at the[18]month Frequency. Therefore, the Frequency was concluded to be acceptable from a reliability standpoint. REFERENCES 1.FSAR, Section[6.7].2.Regulatory Guide 1.96, Revision[1].BWRl6STS 3.FSAR, Section[15.6.5]. 5J B 3.6.1.9-3 Rev.2, 04/30101 BWRl6 LCO 3.6.2.3 RHR Suppression Pool Cooling INSERT 1 If one RHR suppression pool cooling subsystem is inoperable and is not restored to OPERABLE status within the required Completion Time, the plant must be brought to a condition in which the overall plant risk is minimized. To achieve this status, the plant must be brought to at least MODE 3 within 12 hours.Remaining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 2)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.The allowed Completion Time is reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.INSERT 2 2.NEDC-32988-A, Revision 2, Technical Justification to Support Risk-Informed Modification to Selected Required End States for BWR Plants, December 2002. RHR Suppression Pool Cooling 3.6.2.3 3.6 CONTAINMENT SYSTEMS 3.6.2.3 Residual Heat Removal (RHR)Suppression Pool Cooling LCO 3.6.2.3 APPLICABILITY: ACTIONS Two RHR suppression pool cooling subsystems shall be OPERABLE.MODES 1, 2, and 3.CONDITION REQUIRED ACTION COMPLETION TIME A.One RHR suppression A.1 Restore RHR suppression 7 days pool cooling subsystem pool cooling subsystem to inoperable. OPERABLE status.Two RHR supression t Restore one RHR 8 hours (!J pool cooling subsystems suppression pool cooling inoperable. subsystem to OPERABLE status.@.Required Action and.1[g)Be in MODE 3.12 hoursassociated Completion Time 0tnot met. <0@.2 Be in MODE 4.36 hours SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.6.2.3.1 Verify each RHR suppression pool cooling 31 days subsystem manual, power operated, and automatic valve in the flow path that is not locked, sealed, or otherwise secured in position is in the correct position or can be aligned to the correct position.(5' I E./TJe ,"" M O!JE], 1:2.-1,0",)tfl-U()c/a kd-r:>fY\t cJ f c"""'ell'0;" A r1 0+rvtoff.BWRl6STS 3.6.2.3-1 Rev.2, 04/30101 RHR Suppression Pool Cooling B 3.6.2.3 BASES LCO APPLICABILITY ACTIONS During a DBA, a minimum of one RHR suppression pool cooling subsystem is required to maintain the primary containment peak pressure and temperature below the design limits (Ref.1).To ensure that these requirements are met, two RHR suppression pool cooling subsystems must be OPERABLE with power from two safety related independent power supplies.Therefore, in the event of an accident, at least one subsystem is OPERABLE, assuming the worst case single active failure.An RHR suppression pool cooling subsystem is OPERABLE when the pump, two heat exchangers, and associated piping, valves, instrumentation, and controls are OPERABLE.In MODES 1, 2, and 3, a DBA could cause a release of radioactive material to primary containment and cause a heatup and pressurization of primary containment. In MODES 4 and 5, the probability and consequences of these events are reduced due to the pressure and temperature limitations in these MODES.Therefore, the RHR Suppression Pool Cooling System is not required to be OPERABLE in MODE 4 or5.With one RHR suppression pool cooling subsystem inoperable, the inoperable subsystem must be restored to OPERABLE status within 7 days.In this Condition, the remaining RHR suppression pool cooling subsystem is adequate to perform the primary containment cooling function.However, the overall reliability is reduced because a single failure in the OPERABLE subsystem could result in reduced primary containment cooling capability. The 7 day Completion Time is acceptable in light of the redundant RHR suppression pool cooling capabilities afforded by the OPERABLE subsystem and the low probability of a DBA Gr Yls.Aoccurring during this period.O()1 With two RHR suppression pool cooling subsystems inoperable, one subsystem must be restored to OPERABLE status within 8 hours.In this condition, there is a substantial loss of the primary containment pressure and temperature mitigation function.The 8 hour Completion Time is based on this loss of function and is considered acceptable due to the low probability of a DBA and the potential avoidance of a plant shutdown transient that could result in the need for the RHR suppression pool cooling subsystems to operate.BWRl6 STS B 3.6.2.3-2 Rev.2, 04/30101 RHR Suppression Pool Cooling B 3.6.2.3 BASES ACTIONS (continued)@.1 and g,.2 G-r (J If the Required Action and required Completion Time{annot be met, the plant must be brought to a MODE in which the LCO does not apply.To achieve this status, the plant must be brought to at least MODE 3 within 12 hours and to MODE 4 within 36 hours.The allowed Completion Times are reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.SURVEILLANCE SR 3.6.2.3.1 REQUIREMENTS Verifying the correct alignment for manual, power operated, and automatic valves, in the RHR suppression pool cooling mode flow path provides assurance that the proper flow path exists for system operation. This SR does not apply to valves that are locked, sealed, or otherwise secured in position since these valves were verified to be in the correct position prior to being locked, sealed, or secured.A valve is also allowed to be in the nonaccident position, provided it can be aligned to the accident position within the time assumed in the accident analysis.This is acceptable, since the RHR suppression pool cooling mode is manually initiated. This SR does not require any testing or valve manipulation; rather, it involves verification that those valves capable of being mispositioned are in the correct position.This SR does not apply to valves that cannot be inadvertently misaligned, such as check valves.The Frequency of 31 days is justified because the valves are operated under procedural control, improper valve position would affect only a single subsystem, the probability of an event requiring initiation of the system is low, and the subsystem is a manually initiated system.This Frequency has been shown to be acceptable, based on operating experience. SR 3.6.2.3.2 Verifying each RHR pump develops a flow rate[7450]gpm, while operating in the suppression pool cooling mode with flow through the associated heat exchanger at least every 92 days, ensures that pump performance has not degraded during the cycle.Flow is a normal test of centrifugal pump performance required by ASME Section XI (Ref.This test confirms one point on the pump design curve, and the results are indicative of overall performance. Such inservice inspections confirm component OPERABILITY, trend performance, and detect incipient BWRl6STS B 3.6.2.3-3 Rev.2, 04/30/01 RHR Suppression Pool Cooling B 3.6.2.3 BASES SURVEILLANCE REQUIREMENTS (continued) failures by indicating abnormal performance. The Frequency of this SR is[in accordance with the Inservice Testing Program or 92 days].REFERENCES 1.FSAR, Section[6.2]. I..:::;: W VY ASME, Boiler and Pressure Vessel Code, Section XI.BWRl6 STS B 3.6.2.3-4 Rev.2, 04/30101 TSTF-423 BWR/6 LCO 3.6.4.1, Secondary containment INSERT 1 Remaining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref. 4), because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short. However, voluntary entry into MODE 4 may be made as it is also an acceptable low -risk state. INSERT 2 4. NEDC-32988-A, Revision 2, Technical Justification to Support Ri sk-Informed Modification to Selected Required End States for BWR Plants, December 2002.
[Secondary Containment] 3.6.4.1 3.6 CONTAINMENT SYSTEMS 3.6.4.1[Secondary Containment] LCO 3.6.4.1 The[secondary containment] shall be OPERABLE.APPLICABILITY: MODES 1, 2, and 3,[During movement of[recently] irradiated fuel assemblies in the[primary or secondary containment], During operations with a potential for draining th,e reactor vessel (OPDRVs).]ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A.[Secondary containment] A.1 Restore[secondary 4 hours inoperable [in MODE 1, containment] to 2, or 3].OPERABLE status.B.Required Action and B.1 Be in MODE 3.12 hours associated Completion Time[of Condition A]notmet.C.[[Secondary containment] C.1---------------------------- inoperable during*NOTE*movement of[recently] LCO 3.0.3 is not irradiated fuel applicable. ._-------------------------- assemblies in the[primary or secondary Suspend movement of Immediately containment] or during[recently] irradiated fuel OPDRVs.assemblies in the[primary and secondary containment]. AND BWRl6STS 3.6.4.1-1 Rev.2, 04/30101 [Secondary Containment] B 3.6.4.1 BASES APPLICABILITY (continued) Service During Shutdown Conditions", sUbheading"ContainmentPrimary (PWR)/Secondary (BWR)"."The followingguidelinesare included in the assessment of systems removed from service during movement of irradiated fuel:-During fuel handling/core alterations, ventilation system and radiation monitor availability (as defined in NUMARC 91-06)should be assessed, with respect to filtration and monitoring of releases from the fuel.Following shutdown, radioactivity in the fuel decays away fairly rapidly.The basis of the Technical Specification operability amendment is the reduction in doses due to such decay.The goal of maintaining ventilation system and radiation monitor availability is to reduce doses even further below that provided by the natural decay.*-A single normal or contingency method to promptly close primary or secondary containment penetrations should be developed. Such prompt methods need not completely block the penetration or be capable of resisting pressure.The purpose of the"prompt methods" mentioned above are to enable ventilation systems to draw the release from a postulated fuel handling accident in the proper direction such that it can be treated and monitored." ACTIONS If[secondary containment] is inoperable, it must be restored to OPERABLE status within 4 hours.The 4 hour Completion Time provides a period of time to correct the problem that is commensurate with the importance of maintaining [secondary containment] during MODES 1, 2, and 3.This time period also ensures that the probability of an accident (requiring [secondary containment] OPERABILITY) occurring during periods where[secondary containment] is inoperable is minimal.BWRl6STS B 3.6.4.1-3 Rev.2, 04/30/01 [Secondary Containment] B 3.6.4.1 BASES ACTIONS (continued) ...(j])@@ff36The allowed Completion based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.[C.1 and C.2 Movement of[recently] irradiated fuel assemblies in the[primary or secondary containment] and OPDRVs can be postulated to cause significant fission product release to the[secondary containment]. In such cases, the[secondary containment] is the only barrier to release of fission products to the environment. Therefore, movement of[recently] irradiated fuel assemblies must be immediately suspended if the[secondary containment] is inoperable. Suspension of these activities shall not preclude completing an action that involves moving a component to a safe position.Also, action must be immediately initiated to suspend OPDRVs to minimize the probability of a vessel draindown and subsequent potential for fission product release.Actions must continue until OPDRVs are suspended. Required Action C.1 has been modified by a Note stating that LCO 3.0.3 is not applicable. If moving[recently] irradiated fuel assemblies while in MODE 4 or 5, LCO 3.0.3 would not specify any action.If moving[recently] irradiated fuel assemblies while in MODE 1, 2, or 3, the fuel movement is independent of reactor operations. Therefore, in either case, inability to suspend movement of[recently] irradiated fuel assemblies would not be a sufficient reason to require a reactor shutdown.]SURVEILLANCE [SR 3.6.4.1.1 REQUIREMENTS This SR ensures that the[secondary containment] boundary is sufficiently leak tight to preclude exfiltration under expected wind conditions. The 24 hour Frequency of this SR was developed based on operating experience related to[secondary containment] vacuum variations during the applicable MODES and the low probability of a DBA occurring between surveillances. Furthermore, the 24 hour Frequency is considered adequate in view of other indications available in the control room, including alarms, to alert the operator to an abnormal[secondary containment] vacuum condition. ]BWRl6 STS B 3.6.4.1-4 Rev.2, 04/30101 [Secondary Containment] B 3.6.4.1 BASES SURVEILLANCE REQUIREMENTS (continued) demonstrates that the pressure in the[secondary] containment can be maintained::?; [0.266]inches of vacuum water gauge for one hour using one SGT subsystem at a flow rate[4000]cfm.The 1 hour test period allows[secondary] containment to be in thermal equilibrium at steady state conditions. The primary purpose of these SR[s]is to ensure[secondary] containment boundary integrity. The secondary purpose of these SR[s]is to ensure that the SGT subsystem being tested functions as designed.There is a separate LCO with Surveillance Requirements which serves the primary purpose of ensuring OPERABILITY of the SGT System.These SR[s]need not be performed with each SGT subsystem. The SGT subsystem used for these Surveillance[s] is staggered to ensure that in addition to the requirements of LCO 3.6.4.3, either SGT subsystem will perform this test.The inoperability of the SGT System does not necessarily constitute a failure of these Surveillance[s] relative to the[secondary] containment OPERABILITY. Operating experience has shown the[secondary] containment boundary usually passes these Surveillance[s] when performed at the[18]month Frequency. Therefore, the Frequency was concluded to be acceptable from a reliability standpoint. REFERENCES 1.FSAR, Section[15.6.5].2.FSAR, Section[15.7.6].3.FSAR, Section[15.7.4].T'Vl sev+2 BWRl6 STS B 3.6.4.1-6 Rev.2, 04/30101 BWRl6 LCO 3.6.4.3 SGT System INSERT 1 Remaining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 4)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.INSERT 2 Therefore, the plant must be brought to a MODE in which the overall plant risk is minimized. To achieve this status, the plant must be brought to at least MODE 3 within 12 hours.Remaining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 4)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.The allowed Completion Time is reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.INSERT 3 4.NEDC-32988-A, Revision 2, Technical Justification to Support Risk-Informed Modification to Selected Required End States for BWR Plants, December 2002. SGT System 3.6.4.3 3.6 CONTAINMENT SYSTEMS 3.6.4.3 Standby Gas Treatment (SGT)System LCO 3.6.4.3 APPLICABILITY: ACTIONS Two SGT subsystems shall be OPERABLE.MODES 1, 2, and 3, During movement of[recently] irradiated fuel assemblies in the[primary or secondary containment], During operations with a potential for draining the reactor vessel (OPDRVs).CONDITION REQUIRED ACTION COMPLETION TIME A.One SGT subsystem A.1 Restore SGT subsystem 7 days inoperable. to OPERABLE status.B.Required Action and B.1 Be in MODE 3.12 hours associated Completion Time of Condition A not AND met in MODE 1, 2, or 3. "-C.Required Action and._-------------------------- associated Completion .NOTE*Time of Condition A not LCO 3.0.3 is not met during movement of applicable. ._-------------------------- [recently] irradiated fuel assemblies in the C.1 Place OPERABLE SGT Immediately [primary or secondary subsystem in operation. containment] or during OPDRVs.OR C.2.1 Suspend movement of Immediately [recently] irradiated fuel assemblies in the[primary and secondary containment]. AND BWRl6STS 3.6.4.3-1 Rev.2, 04/30101 SGT System 3.6.4.3 ACTIONS (continued) CONDITION REQUIRED ACTION COMPLETION TIME C.2.2 Initiate action to suspend Immediately OPDRVs. ([m<.@i!jatelV D.Two SGT subsystems D.1 inoperable in MODE 1,&e 12-
- .s 2,or3.ilfl Moo£3.E.Two SGT subsystems E.1._--------------------------
inoperable during.NOTE*movement of[recently] LCO 3.0.3 is not irradiated fuel applicable. ._-------------------------- assemblies in the[primary or secondary Suspend movement of Immediately containment] or during[recently] irradiated fuel OPDRVs.assemblies in the[primary and secondary containment]. AND E.2 Initiate action to suspend Immediately OPDRVs.SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.6.4.3.1 Operate each SGT subsystem for[10]continuous 31 days hours[with heaters operating]. SR 3.6.4.3.2 Perform required SGT filter testing in accordance In accordance with the Ventilation Filter Testing Program (VFTP).with the VFTP SR 3.6.4.3.3 Verify each SGT subsystem actuates on an actual or[18]months simulated initiation signal.SR 3.6.4.3.4[Verify each SGT filter cooler bypass damper can be[18]months]opened and the fan started.BWRl6 STS 3.6.4.3-2 Rev.2, 04/30101 SGT System B 3.6.4.3 BASES APPLICABILITY (continued) SGT System is only required to be OPERABLE during fuel handling involving handling recently irradiated fuel (Le., fuel that has occupied part of a critical reactor core within the previous[]days).]ACTIONS With one SGT sUbsystem inoperable, the inoperable subsystem must be restored to OPERABLE status within 7 days.In this Condition, the remaining OPERABLE SGT subsystem is adequate to perform the required radioactivity release control function.However, the overall system reliability is reduced because a single failure in the OPERABLE subsystem could result in the radioactivity release control function not being adequately performed. The 7 day Completion Time is based on consideration of such factors as the availability of the OPERABLE redundant SGT subsystem and the low probability of a DBA occurring during this period.B.1@nSiij.'2) If the SGT subsystem cannot be restored to OPERABLE status within the re uired Com letion Time in MODE 1, 2, or 3, the plant must be brought to a MODE in which thCsa I.To achieve this status, the plant must be brought to at least MODE 3 within 12 hours@jdJ8""MOBE 4) The allowed Completion based@opera Ing experience, to reach the required plan conditions from full'oS power conditions in an orderly manner and without challenging plant systems.C.1.C.2.1.and C.2.2 During movement of[recently] irradiated fuel assemblies in the[primary or secondary containment] or during OPDRVs,whenRequired Action A.1 cannot be completed within the required Completion Time, the OPERABLE SGT subsystem should be immediately placed in operation. This Required Action ensures that the remaining subsystem is OPERABLE, that no failures that could prevent automatic actuation have occurred, and that any other failure would be readily detected.An alternative to Required Action C.1 is to immediately suspend activities that represent a potential for releasing a significant amount of radioactive material to the secondary containment, thus placing the unit in a Condition that minimizes risk.If applicable, movement of[recently] irradiated fuel assemblies must be immediately suspended. Suspension BWRJ6STS B 3.6.4.3-3 Rev.2, 04/30101 SGT System B 3.6.4.3 BASES ACTIONS (continued) of these activities shall not preclude completion of movement of a component to a safe position.Also, if applicable, action must be immediately initiated to suspend OPDRVs to minimize the probability of a vessel draindown and subsequent potential for fission product release. must continue until OPDRVs are suspended. The Required Actions of Condition C have been modified by a Note stating that LCO 3.0.3 is not applicable. If moving[recently] irradiated fuel assemblies while in MODE 4 or 5, LCO 3.0.3 would not specify any action.If moving[recently] irradiated fuel assemblies while in MODE 1, 2, or 3, the fuel movement is independent of reactor operations. Therefore, in either case, inability to suspend movement of[recently] irradiated fuel assemblies would not be a sufficient reason to require a reactor shutdown.If both SGT subsystems are inoperable in MODE 1, 2, or 3, the SGT system may not be capable of supportin the r'ioactivity release control function.er s are C..imme y.E.1 and E.2 When two SGT subsystems are inoperable, if applicable, movement of[recently] irradiated fuel assemblies in the[primary and secondary containment] must be immediately suspended. Suspension of these activities shall not preclude completion of movement of a component to a safeposition.Also, if applicable, actions must be immediately initiated to suspend OPDRVs to minimize the probability of a vessel draindown and subsequent potential for fission product release.Action must continue until OPDRVs are suspended. Required Action E.1 has been modified by a Note stating that LCO 3.0.3 is not applicable. If moving[recently] irradiated fuel assemblies while in MODE 4 or 5, LCO 3.0.3 would not specify any action.If moving[recently] irradiated fuel assemblies while in MODE 1, 2, or 3, the fuel movement is independent of reactor operations. Therefore, in either case, inability to suspend movement of[recently] irradiated fuel assemblies would not be sufficient reason to require a reactor shutdown.BWRl6 STS B 3.6.4.3-4 Rev.2, 04/30101 BASES REFERENCES BWRl6 STS 1.10 CFR 50, Appendix A, GDC 41.2.FSAR, Section[6.2.3].3.FSAR, Section[15.6.5].B 3.6.4.3-6 SGT System B 3.6.4.3 Rev.2, 04/30101 BWRl6 LCO 3.6.5.6 Drywell Vacuum Relief System INSERT 1 If one[or two]drywell post-LOCA vacuum relief subsystems are inoperable for reasons other than not being closed or one drywell purge vacuum relief subsystemisinoperable for reasons other than not being closed, and not restored within the provided Completion Time, the plant must be brought to a condition in which the overall plant risk is minimized. To achieve this status, the plant must be brought to at least MODE 3 within 12 hours.Remaining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 2)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.The allowed Completion Time is reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.INSERT 2 2.NEDC-32988-A, Revision 2, Technical Justification to Support Risk-Informed Modification to Selected Required End States for BWR Plants, December 2002. Drywell Vacuum Relief System 3.6.5.6 3.6 CONTAINMENT SYSTEMS 3.6.5.6 Drywell Vacuum Relief System LCO 3.6.5.6 APPLICABILITY: ACTIONS[Two]drywell post-LOCA and[two]drywell purge vacuum relief subsystems shall be OPERABLE.MODES 1, 2, and 3.-NOTE-Enter applicable Conditions and Required Actions of LCO 3.6.5.1,"Drywell," when inoperable drywell purge vacuum relief subsystem(s) results in exceeding overall drywell bypass leakage rate acceptance criteria.CONDITION REQUIRED ACTION COMPLETION TIME A.------------------------- A.1 Close the subsystem. 4 hours-NOTE-Separate Condition entry is allowed for each vacuum relief subsystem.
One or more vacuumreliefsubsystems not closed.B.One or[two]drywell 8.1 Restore drywell post-30 days post-LOCA vacuum LOCA vacuum relief relief subsystems subsystem(s) to inoperable for OPERABLE status.reasons other than Condition A.C.One drywell purge C.1 Restore drywell purge 30 days vacuum relief subsystem vacuum relief subsystem inoperable for reasons to OPERABLE status..-:.other than Condition A. Ik/'d"I 0.1 1St?Ii;..M 00£J.I (':l J,OfA.y 0-ltd COf'V\(JUfl il'" (,f (oi"lJt'+l'c.> ....T!BW'Rl6 STS Of C.., 0" 3.6.5.6-1 Rev.2, 04/30/01 ACTIONS (continued) Drywell Vacuum Relief System 3.6.5.6 E CONDITION REQUIRED ACTION COMPLETION TIME@.[Two]drywell purge@)1 Restore one drywell purge 72 hours vacuum relief£vacuum relief subsystem subsystems inoperable to OPERABLE status.for reasons other than Condition A.@.[Two]drywell post-LOCA Restore one drywell post-72 hours f vacuum relief F LOCA vacuum relief or subsystems inoperable drywell purge vacuum for reasons other than relief subsystem to Condition A.OPERABLE status.AND One drywell purge vacuum relief subsystem inoperable for reasons other than Condition A.(1).Required Action and Be in MODE 3.12 hours associated Completion 6-Time of Condition A,AND .(;Of'F@.2 Be in MODE 4.36 hours (I§).[Two]drywell purge Be in MODE 3.12 hours vacuum relief subsystems inoperable AND for reasons other than Ii Condition A. Be in MODE 4.36 hours AND One or[two]drywell post-LOCA vacuum relief SUbsystems inoperable for reasons other than Condition A.BWRl6 STS 3.6.5.6-2 Rev.2, 04/30101 Drywell Vacuum Relief System B 3.6.5.6 BASES ACTIONS (continued) perform the depressurization mitigation function since two[10]inch lines remain available. The 30 day Completion Time takes into account the redundant capability afforded by the remaining subsystems, a reasonable time for repairs, and the low probability of an event requiring the vacuum (l.nSer+i)....--_.
- c1ion occurring dunng this period With[two]drywell purge vacuum reliefsubsystemsinoperable or with[two]drywell post-LOCA and one drywell purge vacuum relief sUbsystems inoperable, for reasons other than being not closed, at least one inoperable sUbsystem must be restored to OPERABLE status within 72 hours.In these Conditions, only one[10]inch line remains available.
The 72 hour Completion Time takes into account at least one vacuum relief subsystem is still OPERABLE, a reasonable time for repairs, and the low probability of an event requiring the vacuum relief subsystems to function occurring during this period.If the inoperable drywell vacuum relief subsystem(s) cannot be closed or restored to OPERABLE status within the required Completion Time, or if two drywell purge vacuum relief subsystems are inoperable, for reasons other than being not closed, andtwo drywellpost-LOCA vacuum relief subsystem(s) are inoperable, for reasons other than being not closed, the plant must be brought to a MODE in which the LCO does not apply.To achieve this status, the plant must be brought to at least MODE 3 within 12 hours and to MODE 4 within 36 hours.The allowed Completion Times are reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems..SURVEILLANCE SR 3.6.5.6.1 REQUIREMENTS Each vacuum breaker and its associated isolation valve is verified to be closed to ensure that this potential large bypass leakage path is not present.This Surveillance is performed by observing the vacuum breaker or associated isolation valve position indication or by verifying that the vacuum breakers are closed when a differential pressure of[1.0]psid between the drywell and primary containment is maintained for 1 hour without makeup.The 7 day Frequency is based on engineering judgment, is considered adequate in view of other indications of vacuum BWRl6 STS B 3.6.5.6-3 Rev.2, 04/30101 Drywell Vacuum Relief System B 3.6.5.6 BASES SURVEILLANCE REQUIREMENTS (continued) breaker or isolation valve status available to the plant personnel, and has been shown to be acceptable through operating experience. Two Notes are added to this SR.The first Note allows drywell vacuum breakers opened in conjunction with the performance of a Surveillance to not be considered as failing this SR.These periods of opening drywell vacuum breakers are controlled by plant procedures and do not represent inoperable drywell vacuum breakers.A second Note is included to clarify that vacuum breakers open due to an actual differential pressure are not considered as failing this SR.SR 3.6.5.6.2 Each vacuum breaker and its associated isolation valve must be cycled to ensure that it opens adequately to perform its design function and returns to the fUlly closed position.This provides assurance that the safety analysis assumptions are valid.A 31 day Frequency was chosen to provide additional assurance that the vacuum breakers and their associated isolation valves are OPERABLE.SR 3.6.5.6.3 Verification of the vacuum breaker opening setpoint is necessary to ensure that the safety analysis assumption that the vacuum breaker will open fully at a differential pressure of[1.0]psid is valid.The[18]month Frequency is based on the need to perform this Surveillance under the conditions that apply during a plant outage and the potential for an unplanned transient if the Surveillance were performed with the reactor at power.Operatingexperience has shown these components usually pass the Surveillance when performed at the[18]month Frequency, which is based on the refueling cycle.Therefore, the Frequency was concluded to be acceptable from a reliability standpoint.
REFERENCE:
11.FSAR, Section[6.2]. BWRl6 STS B 3.6.5.6-4-----,---- ....--Rev.2, 04/30101 BWRl6 Leo 3.7.1 SSW System and UHS INSERT 1 If one or more cooling towers with one cooling tower fan are inoperable or one SSW subsystem is inoperable for reasons other than Condition A and not restored within the provided Completion Time, the plant must be brought to a condition in which the overall plant risk is minimized. To achieve this status, the plant must be brought to at least MODE 3 within 12 hours.Remaining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 8)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.The allowed Completion Time is reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.INSERT 2 8.NEDC-32988-A, Revision 2, Technical Justification to Support Risk-Informed Modification to Selected Required End States for BWR Plants, December 2002. [SSW]System and[UHS]3.7.1 3.7 PLANT SYSTEMS 3.7.1[Standby Water (SSW)]System and[Ultimate Heat Sink (UHS)]LCO 3.7.1 APPLICABILITY: Division 1 and 2[SSW]subsystems and[UHS]shall be OPERABLE.MODES 1, 2, and 3.ACTIONS CONDITION REQUIRED ACTION COMPLETION TIME A.[One or more cooling A.1 Restore cooling tower 7 days]towers with one cooling fan(s)to OPERABLE tower fan inoperable. status.;-----------------------------(j.1 Verify water temperature Once per hour]*REVIEWER'S NOTE*of the UHS is s;[90]°F The[]°F is the maximum averaged over the (.iY1i)allowed UHS temperature previous 24 hour period.value and is based on f1R.>c temperature limitations Of the equipment that is relied upon for accident mitigation and safe shutdown of the unit.----------------------------- l[Water temperature of , the UHS>[90]OF and s;P[]OF., C.Req K-lftJ A,f,7>\I eLl Be ,\..MOO£" 3..It,OCA.Y';Sd. r Cc:;y'Vl r rI" VYt/tor B nc>+rAVf...BWRl6 STS 3.7.1-1 Rev.2, 04/30/01 ACTIONS (continued) [SSW]System and[UHS]3.7.1 CONDITION REQUIRED ACTION COMPLETION TIME One[SSW]subsystem@.1._-------------------------- B inoperable [for reasons ft>*NOTES*other than Condition A].1.Enter applicable Conditions and Required Actions of LCO 3.8.1,<:: +c"AC Sources-Operating," for diesel generator made inoperable by[SSW].2.Enter applicable Conditions and Required Actions of LCO 3.4.9,"Residual Heat Removal (RHR)Shutdown Cooling System-Hot Shutdown," for[RHR shutdown cooling]made inoperable by[SSW].._-------------------------- Restore[SSW]subsystem 72 hours to OPERABLE status.@Required Action and@1 Be in MODE 3.12 hours associated Completion @ AND@ot met.@.2't:@Be in MODE 4.36 hours OR@Both[SSW]SUbsystems inoperable [for reasons other than Condition A].[OR[UHS]inoperable for reasons other than Condition A[or@].]'h.-BWRl6 STS 3.7.1-2 Rev.2, 04/30101 [SSW]System and[UHS]B 3.7.1 BASES ACTIONS[A.1 If one or more cooling towers have one fan inoperable (Le., up to one fan per cooling tower inoperable), action must be taken to restore the inoperable cooling tower fan(s)to OPERABLE status within 7 days.(mOlle-t>The 7 day Completion Time is reasonable, based on the low probability of an accident occurring during the 7 days that one cooling tower fan is inoperable in one or more cooling towers, the number of available systems, and the time required to complete the Required Action.][rj1@-REVIEWER'S NOTE-The[]OF is the maximum allowed UHS temperature value and is based on temperature limitations of the equipment that is relied upon for accident mitigation and safe shutdown of the unit.With water temperature of the UHS>[90]OF, the design basis assumption associated with initial UHS temperature is bounded provided the temperature of the UHS averaged over the previous 24 hour period is[90]OF.With the water temperature of the UHS>[90]OF, long term cooling capability of the ECCS loads and DGs may be affected.Therefore, to ensure long term cooling capability is provided to the ECCS loads when water temperature of the UHS is>[90rF, Required Action@@.1 is provided to more frequently monitor the water temperature of the UHS and verify the temperature is[90]OF when averaged over the previous 24 hour period.The once per hour Completion Time takes into consideration UHS temperature variations and the increased monitoring frequency needed to ensure design basis assumptions and equipment limitations are not exceeded in this condition. If the water temperature of the UHS exceeds[90]OF when averaged over the previous 24 hour period or the water temperature of the UHS exceeds[]OF, Condition@nust be entered immediately.] If one[SSW]subsystem is inoperable [for reasons other than Condition A], it must be restored to OPERABLE status within 72 hours.With the unit in this condition, the remaining OPERABLE[SSW]subsystem is adequate to perform the heat removal function.However, the overall reliability is reduced because a single failure in the OPERABLE,[SSW]subsystem could result in loss of[SSW]function.The 72 hour Completion Time was developed taking into account the BWRl6 STS B3.7.1-4 Rev.2, 04/30101 [SSW]System and[UHS]B 3.7.1 BASES ACTIONS (continued) redundant capabilities afforded by the OPERABLE subsystem and the low probability of a DBA occurring during this period.The Required Action is modified by two Notes indicating that the applicable Conditions of LCO 3.8.1,"AC Sources-Operating," and LCO 3.4.9,"Residual Heat Removal (RHR)Shutdown Cooling SystemHot Shutdown," be entered and the Required Actions taken if the Hinoperable [SSW]subsystem results in an inoperable DG or RHRVISe,..,!":t shutdown cooling, respectively. This is in accordance with LCO 3.0.6 and ensures the proper actions are taken for these components. ,------.... f?1 'i1-H.s-..v.+---II-<I,...-+A,+:- ()0, I 1)If the S tem e restored.sftrr(js withi Cfhe clated CQ..I):!@1etiorkRm!i;1, or both[SSW]subsystems are inoperable [for reasons other than Condition A], or the determined inoperable for reasons other than Condition Athe unit must be placed in a MODE in which the LCO does not apply.To achieve this status, the unit must be placed in at least MODE 3 within 12 hours and in MODE 4 within 36 hours.The allowed Completion Times are reasonable, based onoperatingexperience, to reach the required unit conditions from full power conditions in an orderly manner and without challenging unit systems.SURVEILLANCE [SR 3.7.1.1 REQUIREMENTS This SR ensures adequate long term (30 days)cooling can be maintained. With the[UHS]water source below the minimum level, the affected[SSW]subsystem must be declared inoperable. The 24 hour Frequency is based on operating experience related to trending of the parameter variations during the applicable MODES.][SR 3.7.1.2 This SR verifies the water level[in each[SSW]pump well of the intake structure] to be sufficient for the proper operation of the[SSW]pumps (net positive suction head and pump vortexing are considered in determining this limit).The 24 hour Frequency is based on operating experience related to trending of the parameter variations during the applicable MODES.]BWRl6 STS B3.7.1-5 Rev.2, 04/30101 [SSW]System and[UHS]B 3.7.1 BASES SURVEILLANCE REQUIREMENTS (continued) SR 3.7.1.6 This SR verifies that the automatic isolation of the[SSW]System will automatically switch to the safety or emergency position to provide cooling water exclusively to the safety related equipment during an accident event.This is demonstrated by use of an actual or simulated initiation signal.This SR also verifies the automatic start capability of the[SSW]pump and cooling tower fans in each subsystem. The LOGIC SYSTEM FUNCTIONAL TEST in SR 3.3.5.1.6 overlaps this SR to provide complete testing of the safety function.Operating experience has shown that these components usually pass the SR when performed on the[18]month Frequency. Therefore, this Frequency is concluded to be acceptable from a reliability standpoint. REFERENCES BWRl6 STS 1.Regulatory Guide 1.27, Revision 2, January 1976.2.FSAR, Section[9.2.1].3.FSAR, Table[9.2-3].4.FSAR, Section[6.2.1.1.3.3.1.6]. 5.FSAR, Chapter[15].6.FSAR, Section[6.2.2.3]. B 3.7.1-7 Rev.2, 04/30101 BWRl6 LCO 3.7.3 CRFA System INSERT 1 Remaining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 5)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.INSERT 2 Therefore, the plant must be brought to a MODE in which the overall plant risk is minimized. To achieve this status, the plant must be brought to at least MODE 3 within 12 hours.Remaining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 5)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.The allowed Completion Time is reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.INSERT 3 5.NEDC-32988-A, Revision 2, Technical Justification to Support Risk-Informed Modification to Selected Required End States for BWR Plants, December 2002. [CRFA]System 3.7.3 3.7 PLANT SYSTEMS 3.7.3[Control Room Fresh Air (CRFA)]System LCO 3.7.3 APPLICABILITY: ACTIONS Two[CRFA]sUbsystems shall be OPERABLE.-NOTE-The control room boundary may be opened intermittently under administrative control.MODES 1, 2, and 3, During movement of[recently] irradiated fuel assemblies in the[primary or secondary containment], During operations with a potential for draining the reactor vessel.(OPDRVs).CONDITION REQUIRED ACTION COMPLETION TIME A.One[CRFA]subsystem A.1 Restore[CRFA]7 days inoperable. subsystem to OPERABLE status.B.Two[CRFA]subsystems 8.1 Restore control room 24 hours inoperable due to boundary to OPERABLE inoperable control room status.boundary in MODE 1, 2, or 3.C.Required Action and C.1 Be in MODE 3.12 hours Associated Completion Time of Condition A or B AND not met in MODE 1, 2, c/BeinMQ.B6 or 3.BWRl6 STS 3.7.3-1 Rev.2, 04/30101 ACTIONS (continued) [CRFA]System 3.7.3 CONDITION REQUIRED ACTION COMPLETION TIME D.Required Action and._-------------------------- associated Completion -NOTE-Time of Condition A not LCO 3.0.3 is not met during movement of applicable. ._-------------------------- [recently] irradiated fuel assemblies in the D.1._-------------------------- [primary or secondary-NOTE-containment] or during[Place in toxic gas OPDRVs.protection mode if automatic transfer to toxic gas protection mode is inoperable. ]._-------------------------- Place OPERABLE[CRFA]Immediately subsystem in[isolation] mode.OR D.2.1 Suspend movement of Immediately [recently] irradiated fuel assemblies in the[primary and secondary containment]. AND D.2.2 Initiate action to suspend Immediately OPDRVs. E.Two[CRFA]subsystems E.1 inoperable in MODE 1, BeMDOr1, I?-",",OIAJt..(2, or 3 for reasons other than Condition B.BWRl6STS 3.7.3-2 Rev.2, 04/30101 [CRFA]System B 3.7.3 BASES ACTIONS (continued) relative humidity, and physical security.Preplan ned measures should be available to address these concerns for intentional and unintentional entry into the condition. The 24 hour Completion Time is reasonable based on the low probability of a DBA occurring during this time period, and the use of compensatory measures.The 24 hour Completion Time is a typically reasonable time to diagnose, plan and possibly repair, and test most problems with the control room boundary.C.1 01/jOla.,+In MODE 1, 2, or 3, if the inoperable [CRFA]subsystem or control room boundary cannot be restored to OPERABLE status within the associated Completion Time, the unit must be placed in a MODE that minimizes risk.To achieve this status, the unit must be£laced in at least MODE 3 within 12 hours<iindJR1t7fOl5E4 w.i1bH'r36 hourj The allowed Completion reasonable, based on operating experience, to reach the required unit conditions from full power conditions in an orderly manner and without challenging unit systems.D.1.D.2.1 and D.2.2 The Required Actions of Condition D are modified byaNote indicating that LCO 3.0.3 does not apply.If moving[recently] irradiated fuel assemblies while in MODE 1, 2, or 3, the fuel movement is independent of reactor operations. Therefore, inability to suspend movement of[recently] irradiated fuel assemblies is not sufficient reason to require a reactor shutdown.During movement of[recently] irradiated fuel assemblies in the[primary or secondary containment] or during OPDRVs, if the inoperable [CRFA]subsystem cannot be restored to OPERABLE status within the required Completion Time, the OPERABLE[CRFA]subsystem may be placed in the isolation mode.This action ensures that the remaining subsystem is OPERABLE, that no failures that would prevent automatic actuation will occur, and that any active failure will be readily detected.Required Action D.1 is modified by a Note alerting the operator to[place the system in the toxic gas protection mode if the toxic gas, automatic transfer capability is inoperable]. An alternative to Required Action ,0.1 is to immediately suspend activities that present a potential for releasing radioactivity that might require BWRl6 STS B3.7.3-4 Rev.2, 04/30101 [CRFA]System B 3.7.3 BASES ACTIONS (continued) isolation of the control room.This places the unit in a condition that minimizes risk.If applicable, movement of[recently] irradiated fuel assemblies in the[primary and secondary containment] must be suspended immediately. Suspension of these activities shall notprecludecompletion of movement of a component to a safe position.Also, if applicable, actions must be initiated immediately to suspend OPDRVs to minimize the probability of a vessel draindown and subsequent potential for fission product release.Actions must continue until the OPDRVs are suspended. If both[CRFA]subsystems are inoperable in MODE 1, 2, or 3 for reasons other than an inoperable control room boundary (Le., Condition B), the[CRFA]System may not be capable of performing the intended function and the unit is in a condition outside of the accident analyses. 3.0.3 F.1 and F.2 The Required Actions of Condition F are modified byaNote indicating that LCO 3.0.3 does not apply.If moving[recently] irradiated fuel assemblies while in MODE 1,2, or 3, the fuel movement is independent of reactor operations. Therefore, inability to suspend movement of[recently] irradiated fuel assemblies is not sufficient reason to require a reactor shutdown.During movement of[recently] irradiated fuel assemblies in the[primary or secondary containment] or during OPDRVs, with two[CRFA]subsystems inoperable, action must be taken immediately to suspend activities that present a potential for releasing radioactivity that might require isolation of the control room.This places the unit in a condition that minimizes risk.If applicable, movement of[recently] irradiated fuel assemblies in the[primary and secondary containment] must be suspended immediately. Suspension of these activities shall notprecludecompletion of movement of a component to a safe position.If applicable, actions must be initiated immediately to suspend OPDRVs to minimize the probability of a vessel draindown and subsequent potential for fission BWRl6 STS B3.7.3-5 Rev.2, 04/30101 SR 3.7.3.4[CRFA]System B 3.7.3 BASES ACTIONS (continued) product release.Actions must continue until the OPDRVs are suspended. SURVEILLANCE SR 3.7.3.1 REQUIREMENTS This SR verifies that a subsystem in a standby mode starts on demand and continues to operate.Standby systems should be checked periodically to ensure that they start and function properly.As the environmental and normal operating conditions of this system are not severe, testing each subsystem once every month provides an adequate check on this system.Monthly heater operation dries out any moisture accumulated in the charcoal from humidity in the ambient air.[Systems with heaters must be operated for10 continuous hours with the heaters energized. Systems without heaters need only be operated for15 minutes to demonstrate the function of the system.]Furthermore, the 31 day Frequency is based on the known reliability of the equipment and the two subsystem redundancy available. SR 3.7.3.2 This SR verifies that the required CRFA testing is performed in accordance with the[Ventilation Filter Testing Program (VFTP)].The[VFTP]includes testing HEPA filter performance, charcoal adsorber efficiency, minimum system flow rate, and the physical properties of the activated charcoal (general use and following specific operations). Specific test frequencies and additional information are discussed in detail in the[VFTP].SR 3.7.3.3 This SR verifies that each[CRFA]subsystem starts and operates on an actual or simulated initiation signal.The LOGIC SYSTEM FUNCTIONAL TEST in SR 3.3.7.1.5 overlaps this SR to provide complete testing of the safety function.The[18]month Frequency is specified in Reference@ This SR verifies the integrity of the control room enclosure and the assumed inleakage rates of potentially contaminated air.The control room positive pressure, with respect to potentially contaminated adjacent areas, is periodically tested to verify proper function of the[CRFA]System.During the emergency mode of operation, the[CRFA]System is designed to slightly pressurize the control room to[0.1]inches water BWRl6 STS B3.7.3-6 Rev.2, 04/30/01 Ii! [CRFA]System B 3.7.3 BASES SURVEILLANCE REQUIREMENTS (continued) gauge positive pressure with respect to adjacent areas to prevent unfiltered inleakage. The[CRFA]System is designed to maintain this positive pressure at a flow rate of[500]cfm to the control room in the isolation mode.The Frequency of[18]months on a STAGGERED TEST BASIS is consistent with industry practice and other filtration system SRs.REFERENCES 1.FSAR, Section[6.5.1].2.FSAR, Section[9.4.1].3.FSAR, Chapter[6].4.FSAR, Chapter[15].Regulatory Guide 1.52, Rev.[2].BWRl6STS B 3.7.3-7 Rev.2, 04/30101 BWRl6 LCO 3.7.4 Control Room AC System INSERT 1 Remaining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 3)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.INSERT 2 Therefore, the plant must be brought to a MODE in which the overall plant risk is minimized. To achieve this status, the plant must be brought to at least MODE 3 within 12 hours.Remaining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 3)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.The allowed Completion Time is reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.INSERT 3 3.NEDC-32988-A, Revision 2, Technical Justification to Support Risk-Informed Modification to Selected Required End States for BWR Plants, December 2002.___* ..
- I.;'ill
[Control Room AC]System 3.7.4 3.7 PLANT SYSTEMS 3.7.4[Control Room Air Conditioning (AC)]System LCO 3.7.4 APPLICABILITY: ACTIONS Two[control room AC]subsystems shall be OPERABLE.MODES 1, 2, and 3, During movement of[recently] irradiated fuel assemblies in the[primary or secondary containment], During operations withapotential for draining the reactor vessel (OPDRVs).CONDITION REQUIRED ACTION COMPLETION TIME A.One[control room AC]A.1 Restore[control room AC]30 days subsystem inoperable. subsystem to OPERABLE status.B.Required Action and B.1 Be in MODE 3.12 hours Associated CompletionTime of Condition A not AND , met in MODE 1, 2, or 3.V C.Required Action and---------------------------- associated Completion .NOTE*Time of Condition A not LCO 3.0.3 is not met during movement of applicable.
[recently] irradiated fuel assemblies in the C.1 Place OPERABLE[control Immediately [primary or secondary room AC]subsystem in containment] or during operation. OPDRVs.OR BWR/6 STS 3.7.4-1 Rev.2, 04/30101 ACTIONS (continued) [Control Room AC]System 3.7.4 CONDITION REQUIRED ACTION COMPLETION TIME C.2.1 Suspend movement of Immediately [recently] irradiated fuel assemblies in the[primary and secondary containment]. AND C.2.2 Initiate action to suspend Immediately OPDRVs. D.Two[control room AC]D.1 subsystems inoperable "&.MDOE.3.J 2 f1DtA."'-' in MODE 1,2, or 3.E.Two[control room AC]._-------------------------- subsystems inoperable
- NOTE*during movement of LCO 3.0.3 is not[recently]
irradiated fuel applicable. ._-------------------------- assemblies in the[primary or secondary E.1 Suspend movement of Immediately containment] or during[recently] irradiated fuel OPDRVs.assemblies in the[primary and secondary containment]. AND E.2 Initiate action to suspend Immediately OPDRVs.SURVEILLANCE REQUIREMENTS SR 3.7.4.1 BWRl6 STS SURVEILLANCE Verify each[control roomAC]subsystem has the capability to remove the assumed heat load.3.7.4-2 FREQUENCY[18]months Rev.2, 04/30101 [Control Room AC]System B 3.7.4 BASES ACTIONS (continued) B.1@rlm In MODE 1, 2, or 3, if the inoperable [control room AC]subsystem cannot be restored to OPERABLE status within the associated Completion Time, the unit must be placed in a MODE that minimizes risk.To achieve this status the unit must in at least MODE 3 within 12 hoursl§ffi gODf.lfWiti)J0if36 The allowed Completion Time'based on operating experience, to reach the required unit conditions from full power conditions in an or erly manner and without challenging unit systems.nseA4-C.1.C.2.1.and C.2.2 The Required Actions of Condition C are modified byaNote indicating that LCO 3.0.3 does not apply.If moving[recently] irradiated fuel assemblies while in MODE 1, 2, or 3, the fuel movement is independent of reactor operations. Therefore, inability to suspend movement of[recently] irradiated fuel assemblies is not sufficient reason to require a reactor shutdown.During movement of[recently] irradiated fuel assemblies in the[primary or secondary containment] or during OPDRVs, if Required Action A.1 cannot be completed within the required Completion Time, the OPERABLE[control room AC]subsystem may be placed immediately in operation. This action ensures that the remaining subsystem is OPERABLE, that no failures that would prevent actuation will occur, and that any active failure will be readily detected.An alternative to Required Action C.1 is to immediately suspend activities that present a potential for releasing radioactivity that might require isolation of the control room.This places the unit in a condition that minimizes risk.If applicable, movement of[recently] irradiated fuel assemblies in the[primary and secondary containment] must be suspended immediately. Suspension of these activities shall notprecludecompletion of movement of a component to a safe position.Also, if applicable, actions must be initiated immediately to suspend OPDRVs to minimize the probability of a vessel draindown and subsequent potential for fission product release.Actions must continue until the OPDRVs are suspended. 'BWRl6 STS B3.7.4-3 Rev.2,04/30/01 [Control Room AC]System B 3.7.4 BASES ACTIONS (continued) D.1 If both[control room AC]subsystems are inoperable in MODE 1,2, or 3, the[Control Room AC S stem may not be capable of performing the intended function.h[e lae.E.1 and E.2 The Required Actions of Condition E.1 are modified by a Note indicating that LCO 3.0.3 does not apply.If moving[recently] irradiated fuel assemblies while in MODE 1, 2, or 3, the fuel movement is independent of reactoroperations.Therefore, inability to suspend movement of[recently] irradiated fuel assemblies is not sufficient reason to require a reactor shutdown.During movement of[recently] irradiated fuel assemblies in the[primary or secondary containment] or during OPDRVs with two[control room AC]subsystems inoperable, action must be taken to immediately suspend activities that present a potential for releasing radioactivity that might require isolation of the control room.This places the unit in a condition that minimizes risk.If applicable, handling of[recently] irradiated fuel in the[primary or secondary containment] must be suspended immediately. Suspension of these activities shallnotpreclude completion of movement of a component to a safe position.Also, if applicable, actions must be initiated immediately to suspend OPDRVs to minimize the probability of a vessel draindown and subsequent potential for fission product release.Actions must continue until the OPDRVs are suspended. SURVEILLANCE SR 3.7.4.1 REQUIREMENTS This SR verifies that the heat removal capability of the system is sufficient to remove the control room heat load assumed in the[safety analyses]. The SR consists of a combination of testing and calculation. The[18]month Frequency is appropriate since significant degradation of the[Control Room AC]System is not expected over this time period.REFERENCES BWRl6STS 1.FSAR, Section[6.4].83.7.4-4 Rev.2, 04/30101 BASES REFERENCES (continued)2.FSAR, Section[9.4.1].(j::VlseAD [Control Room AC]System B 3.7.4 BWRl6 STS B3.7.4-5 Rev.2, 04/30101 BWRl6 LCO 3.7.5 Main Condenser Offgas INSERT 1 Remaining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 4)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.INSERT 2 4.NEDC-32988-A, Revision 2, Technical Justification to Support Risk-Informed Modification to Selected Required End States for BWR Plants, December 2002. Main Condenser Offgas 3.7.5 3.7 PLANT SYSTEMS 3.7.5 Main Condenser Offgas LCO 3.7.5 APPLICABILITY: ACTIONS The gross gamma activity rate of the noble gases measured at[the offgas recombiner effluent]shall be[380]mCilsecond [after decay of 30 minutes].MODE 1, MODES 2 and 3 with any[main steam line not isolated and]steam jet air ejector (SJAE)in operation. CONDITION A.Gross gamma activity rate of the noble gases not within limit.B.Required Action and associated Completion Time not met.A.1 B.1 B.2 REQUIRED ACTION Restore gross gamma activity rate of the noble gases to within limit.[Isolate all mainsteam lines.Isolate SJAE.COMPLETION TIME 72 hours 12 hours]12 hours BWRl6STS OR B.3(l}Be in MODE 3. 3.7.5-1 12 hours Rev.2, 04/30/01 Main Condenser Offgas B 3.7.5 BASES APPLICABILITY (continued) during MODES 2 and 3 with any main steam line not isolated and the SJAE in operation. In MODES 4 and 5, steam is not being exhausted to the main condenser and the requirements are not applicable. ACTIONS If the offgas radioactivity rate limit is exceeded, 72 hours is allowed to restore the gross gamma activity rate to within the limit.The 72 hour Completion Time is reasonable, based on engineering judgment considering the time required to complete the Required Action, the large margins associated with permissible dose and exposure limits, and the.low probability of a Main Condenser Offgas Systemruptureoccurring. B.1. If the gross gamma activity rate is not restored to within the limits within the associated Completion Time,[all main steam lines]or the SJAE must be isolated.This isolates the Main Condenser Offgas System from the source of the radioactive steam.The main steam lines are considered isolated if at least one main steam isolation valve in each main steam line is closed, and at least one main steam line drain valve in each drain line is closed.The 12 hour Completion Time is reasonable, based on operating experience, to perform the actions from full power conditions in an orderly manner and without challenging unit systems.C>\J e".l'f'/et".J., ('I'tilt;.$YYl,*iI'l/h-li'UJ. SURVEILLANCE REQUIREMENTS An alternative to Actions B.1 and B.2 is to place the unit in a MODE in which th c()Jiftis mn appli.To achieve this status, the unit must be placed in at least MODE 3 within 12 hours(aneE..4-wit!i!6) The allowed Completion on@operating experience, to reach the required unit conditions from full power conditions in an orderly manner and without challenging unit systems.SR 3.7.5.1'This SR, on a 31 day Frequency, requires an isotopic analysis of an offgas sample to ensure that the required limits are satisfied. The noble gases to be sampled are Xe-133, Xe-135, Xe-138,Kr-85,Kr-87, and Kr-88.If the measured rate of radioactivity increases significantly (by50%after correcting for expected increases due to changes in THERMAL POWER), an isotopic analysis is also performed within 4 hours after the increase is noted, to ensure that the increase is not BWRl6 STS B3.7.5-2 Rev.2, 04/30101 Main Condenser Offgas B 3.7.5 BASES SURVEILLANCE REQUIREMENTS (continued) indicative of a sustained increase in the radioactivity rate.The 31 day Frequency is adequate in view of other instrumentation that continuously monitor the offgas, and is acceptable based on operating experience. This SR is modified by a Note indicating that the SR is not required to be performed until 31 days after any[mainsteamline is not isolated]and the SJAE is in operation. Only in this condition can radioactive fission gases be in the Main Condenser Offgas System at significant rates.REFERENCES 1.FSAR, Section[15.7.1]..2.NUREG-0800. co 3.10CFR 100.BWRl6 STS B3.7.5-3 Rev.2, 04/30101 BWRl6 LCO 3.8.1 AC Sources-Operating INSERT 1 Remaining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 8)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.INSERT 2 8.NEDC-32988-A, Revision 2, Technical Justification to Support Risk-Informed Modification to Selected Required End States for BWR Plants, December 2002. AC Sources-Operating 3.8.1 ACTIONS (continued) CONDITION REQUIRED ACTION COMPLETION TIME G.Required Action and G.1 Be in MODE 3.12 hours Associated Completion -Time of Condition A, B, AND C, D, E, or[F]not met. v./36 hours H.Three or more[required] H.1 Enter LCO 3.0.3.Immediately AC sources inoperable. SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.8.1.1 SR 3.8.1.2 Verify correct breaker alignment and indicated power 7 days availability for each[required] offsite circuit.-NOTES-1.All DG starts may be preceded by an engine prelube period and followed by a warmup period prior to loading.[2.A modified DG start involving idling and gradual acceleration to synchronous speed may be used for this SR as recommended by the manufacturer. When modified start procedures are not used, the time, voltage, and frequency tolerances of SR 3.8.1.7 must be met.]BWRl6STS Verify each DG starts from standby conditions and achieves steady state voltage[3744]V and[4576]V and frequency[58.8]Hz and[61.2]Hz.3.8.1-5 31 days Rev.2, 04/30101 AC Sources-Operating B 3.8.1 BASES ACTIONS (continued) loads under any conditions. Implicit in this Note is the concept that the Condition must be retained if any sequencer failure mode results in the inability to start all or part of the safety loads when required, regardless of power availability, or results in overloading the offsite power circuit to a safety bus during an event thereby causing its failure.Also implicit in the Note is the concept that the Condition is not applicable to any Division that does not have a sequencer[Division 3 does not normally have a sequencer in the circuitry]. ]If the inoperable AC electrical power sources[and sequencers] cannot be restored to OPERABLE status within the associated Completion Time, the unit must be brought to a MODE in which the a To achieve this status, the unit must be brought to MODE 3 within 12 hours@nd to::Mffi1E 4 wit6iii4'61lourS) The allowed Completionreasonable, based on operating experience, 0 reac e require plant conditions from full power conditions in an orderly manner and ,.r--r---' without challenging plant systems. 1..Condition H corresponds to a level of degradation in which all redundancy in the AC electrical power supplies has been lost.At this severely degraded level, any further losses in the AC electrical power system will cause a loss of function.Therefore, no additional time is justified for continued operation. The unit is required by LCO 3.0.3 to commence a controlled shutdown.SURVEILLANCE REQUIREMENTS The AC sources are designed to permit inspection andtesting of all important areas and features, especially those that have a standby function, in accordance with 10 CFR 50, GDC 18 (Ref.8).Periodic component tests are supplemented by extensive functional tests during refueling outages under simulated accident conditions. The SRs for demonstrating the OPERABILITY of the DGs are in accordance with the recommendations of Regulatory Guide 1.9 (Ref.3), Regulatory Guide 1.108 (Ref.(1), and Regulatory Guide 1.137 (Ref.@).Where the SRs herein specify voltage and tolerances, the following summary is applicable. Thestate output voltage of[3740]V is 90%of the nominal 4160 Vvoltage.This value, which is specified in ANSI C84.1 (Ref. allows for voltage drop to the terminals of 4000 V motors whose minimum operating BWRl6 STS B 3.8.1-13 Rev.2, 04/30101 AC Sources-Operating B 3.8.1 BASES SURVEILLANCE REQUIREMENTS (continued) warmup be limited to this lower speed, and that DGs be gradually accelerated to synchronous speed prior to loading.These start procedures are the intent of Note 2, which is only applicable when such procedures are recommended by the manufacturer. ]SR 3.8.1.7 requires that, at a 184 day Frequency, the DG starts from standby conditions and achieves required voltage and frequency within 10 seconds.The 10 second start supports the in the design basis LOCA analysis (Ref..The 10 second start-Jj.;requirement may not be applicable to SR 3.8.1.2 (see Note 2 of SR 3.8.1.2), when a modified start procedure as described above is used.If a modified start is not used, the 10 second start requirement of SR 3.8.1.7 applies.Since SR 3.8.1.7 does require a 10 second start, it is more restrictive than SR 3.8.1.2, and it may be performed in lieu of SR 3.8.1.2.In addition to the SR requirements, the time for the DG to reach steady state operation, unless the modified DG start method is employed, is periodically monitored and the trend evaluated to identify degradation of governor and voltage regulator performance. The 31 day Frequency for SR 3.8.1.2 is consistent with Regulatory Guide 1.9 (Ref.3).The 184 day Frequency for SR 3.8.1.7 is a reduction in cold testing consistent with Generic Letter 84-15 (Ref.7).These Frequencies provide adequate assurance of DG OPERABILITY, while minimizing degradation resulting from testing.SR 3.8.1.3 This Surveillance demonstrates that the DGs are capable of synchronizing and accepting greater than or equal to the equivalent of the maximum expected accident loads.A minimum run time of 60 minutes is required to stabilize engine temperatures, while minimizing the time that the DG is connected to the offsite source.Although no power factor requirements are established by this SR, the DG is normally operated at a power factor between[0.8 lagging]and[1.0].The[0.8]value is the design rating of the machine, while[1.0]is an operational limitation [to ensure circulating currents are minimized]. The load band is provided to avoid routine overloading of the DG.Routine overloading may result in more frequent teardown inspections in accordance with vendor recommendations in order to maintain DG OPERABILITY. BWRl6STS B 3.8.1-15 Rev.2, 04/30101 AC Sources-Operating B 3.8.1 BASES SURVEILLANCE REQUIREMENTS (continued) of accumulated water minimizes fouling and provides data regarding the watertight integrity of the fuel oil system.The Surveillance Frequencies are established by Regulatory Guide 1.137 This SR is for JJ))preventive maintenance. The presence of water does not necessarily represent a failure of this SR provided that accumulated water is removed during performance of this Surveillance. SR 3.8.1.6 This Surveillance demonstrates that each required fuel oil transfer pump operates and transfers fuel oil from its associated storage tank to its associated day tank.It is required to support the continuous operation of standby power sources.This Surveillance provides assurance that the fuel oil transfer pump is OPERABLE, the fuel oil piping system is intact, the fuel delivery piping is not obstructed, and the controls and control systems for automatic fuel transfer systems are OPERABLE.[The Frequency for this SR is variable, depending on individual system design, with up to a 92 day interval.The 92 day Frequency corresponds to the testing requirements for pumps as contained in the ASME Boilerand Pressure Vessel Code, Section XI (Ref.@);however, the design of fuel transfer systems is such that pumps operate automatically or must be started manually in order to maintain an adequate volume of fuel oil in the day[and engine mounted]tanks during or following DG testing.In such a case, a 31 day Frequency is appropriate. Since proper operation of fuel transfer systems is an inherent part of DG OPERABILITY, the Frequency of this SR should be modified to reflect individual designs.]SR 3.8.1.7 See SR 3.8.1.2.[SR 3.8.1.8 Transfer of each 4.16 kV ESF bus power supply from the normal offsite circuit to the alternate offsite circuit demonstrates the OPERABILITY of the alternate circuit distribution network to power the shutdown loads.The[18 month]Frequency of the Surveillance is based on engineering judgment taking into consideration the plant conditions required to perform the Surveillance, and is intended to be consistent with expected fuel cycle lengths.Operatingexperience has shown that these components usually pass the SR when performed on the[18 month]BWRl6 STS B 3.8.1-17 Rev.2, 04/30101 AC Sources-Operating B 3.8.1 BASES SURVEILLANCE REQUIREMENTS (continued) b.Tripping its associated single largest post-accident load with the DG solely supplying the bus..-1.7.').As required by IEEE-308 (Ref. load rejection test is acceptable if the increase in diesel speed does not exceed 75%of the difference between synchronous speed and the overspeed trip setpoint, or 15%above synchronous speed, whichever is lower.For the Grand Gulf Nuclear Station these values are the same.The time, voltage, and frequency tolerances specified in this SR are derived from Regulatory Guide 1.9 (Ref.3)recommendations for response during load sequence intervals. The 3 seconds specified is equal to 60%of the 5 second load sequence interval associated with sequencing of this largest load.The voltage and frequency specified are consistent with the design range of the equipment powered by the DG.SR 3.8.1.9.a corresponds to the maximum frequency excursion, while SR 3.8.1.9.b and SR 3.8.1.9.c are steady state voltage and frequency values to which the system must recover following load rejection. The[18 month]Frequency is consistent with the recommendation of RegUlatory Guide 1.108 (Ref.This SR has been modified by two Notes.The reason for Note 1 is that during operation with the reactor critical, performance of this SR could cause perturbations to the electrical distribution systems that could challenge continued steady state operation and, as a result, plant safety systems.This restriction from normally performing the Surveillance in MODE 1 or 2 is further amplified to allow the Surveillance to be performed for the purpose of reestablishing OPERABILITY (e.g.post work testing following corrective maintenance, corrective modification, deficient or incomplete surveillance testing, and other unanticipated OPERABILITY concerns)provided an assessment determines plant safety is maintained or enhanced.This assessment shall, as a minimum, consider the potential outcomes and transients associated with a failed Surveillance, a successful Surveillance, and a perturbation of the oftsite or on site system when they are tied together or operated independently for the Surveillance; as well as the operator procedures available to cope with these outcomes.These shall be measured against the avoided risk of a plant shutdown and startup to determine that plant safety is maintained or enhanced when the Surveillance is performed in MODE 1 or 2.Risk insights or deterministic methods may be used for this assessment. Note 2 ensures that the DG is tested under load conditions that are as close to design basis conditions as possible.When synchronized with oftsite power, testing should be performed at a power BWRl6STS B 3.8.1-19 Rev.2, 04/30/01 AC Sources-Operating B 3.8.1 BASES SURVEILLANCE REQUIREMENTS (continued) protection. While the DG is not expected to experience this transient during an event, and continues to be available, this response ensures that the DG is not degraded for future application, including reconnection to the bus if the trip initiator can be corrected or isolated.In order to ensure that the DG is tested under load conditions that are as close to design basis conditions as possible, testing must be performed using a power factor[0.9].This power factor is chosen to be representative of the actual design basis inductive loading that the DG would experience. The[18 month]Frequency is consistent with the recommendation of Regulatory Guide 1.108 (Ref.(j)and is intended to be consistent with expected fuel cycle lengths.t@This SR has been modified by a Note.The reason for the Note is that during operation with the reactor critical, performance of this SR could cause perturbation to the electrical distribution systems that could challenge continued steady state operation and, as a result, plant safety systems.This restriction from normally performing the Surveillance in MODE 1 or 2 is further amplified to allow the Surveillance to be performed for the purpose of reestablishing OPERABILITY (e.g.post work testing following corrective maintenance, corrective modification, deficient or incomplete surveillance testing, and other unanticipated OPERABILITY concerns)provided an assessment determines plant safety is maintained or enhanced.This assessment shall, as a minimum, consider the potential outcomes and transients associated with a failed Surveillance, a successful Surveillance, and a perturbation of the offsite or onsite system when they are tied together or operated independently for the Surveillance; as well as the operator procedures available to cope with these outcomes.These shall be measured against the avoided risk of a plant shutdown and startup to determine that plant safety is maintained or enhanced when the Surveillance is performed in MODE 1 or 2.Risk insights or deterministic methods may be used for this assessment. -REVIEWER'S NOTE-The above MODE restrictions may be deleted if it can be demonstrated to the staff, on a plant specific basis, that performing the SR with the reactor in any of the restricted MODES can satisfy the following criteria, as applicable: BWRl6 STS B 3.8.1-21 Rev.2, 04/30101 AC Sources-Operating B 3.8.1 BASES.SURVEILLANCE REQUIREMENTS (continued) a.Performance of the SR will not render any safety system or component inoperable, b.Performance of the SR will not cause perturbations to any of the electrical distribution systems that could result in a challenge to steady state operation or to plant safety systems, and c.Performance of the SR, or failure of the SR, will not cause, or result in, an AOO with attendant challenge to plant safety systems.SR 3.8.1.11As required by Regulatory Guide 1.108 (Ref.(i), paragraph 2.a.(1), this Surveillance demonstrates the as designed operation of the standby power sources during loss of the otfsite source.This test verifies all actions encountered from the loss of otfsite power, including shedding of the nonessential loads and energization of the emergency buses and respective loads from the DG.It further demonstrates the capability of the DG to automatically achieve the required voltage and frequency within the specified time.The DG auto-start time of 10 seconds is derived from requirements of the accident analysis to respond to a design basis large break LOCA.The Surveillance should be continued for a minimum of 5 minutes in order to demonstrate that all starting transients have decayed and stability has been achieved.The requirement to verify the connection and power supply of permanent and auto-connected loads is intended to satisfactorily show the relationship of these loads to the DG loading logic.In certain circumstances, many of these loads cannot actually be connected or loaded without undue hardship or potential for undesired operation. For instance, ECCS injection valves are not desired to be stroked open, systems are not capable of being operated at full flow, or RHR systems performing a decay heat removal function are not desired to be realigned to the ECCS mode of operation. In lieu of actual demonstration of the connection and loading of these loads, testing that adequately shows the capability of the DG system to perform these functions is acceptable. This testing may include any series of sequential, overlapping, or total steps so that the entire connection and loading sequence is verified.The Frequency of[18 months]is consistent with the recommendations of Regulatory Guide 1.108 paragraph 2.a.(1), takes into@BWRl6STS B 3.8.1-22 Rev.2, 04/30101 AC Sources-Operating B 3.8.1 BASES SURVEILLANCE REQUIREMENTS (continued) -REVIEWER'S NOTE-The above MODE restrictions may be deleted if it can be demonstrated to the staff, on a plant specific basis, that performing the SR with the reactor in any of the restricted MODES can satisfy the following criteria, as applicable: a.Performance of the SR will not render any safety system or component inoperable, b.Performance of the SR will not cause perturbations to any of the electrical distribution systems that could result in a challenge to steady state operation or to plant safety systems, and c.Performance of the SR, or failure of the SR, will not cause, or result in, an ADO with attendant challenge to plant safety systems.SR 3.8.1.14.cRegulatory Guide 1.108 (Ref.(9), paragraph 2.a.(3), requires demonstration once per 18 months that the DGs can start and run continuously at full load capability for an interval of not less than 24 hours-22 hours of which is at a load equivalent to the continuous rating of the DG, and 2 hours of which is at a load equivalent to 110%of the continuous duty rating of the DG.The DG starts for this Surveillance can be performed either from standby or hot conditions. The provisions for prelube and warmup, discussed in SR 3.8.1.2, and for gradual loading, discussed in SR 3.8.1.3, are applicable to this SR.In order to ensure that the DG is tested under load conditions that are as close to design conditions as possible, testing must be performed using a power factor::;[0.9].This power factor is chosen to be representative of the actual design basis inductive loading that the DG could experience. The[18 month]Frequency with the recommendations of Regulatory Guide 1.108 (Refi', paragraph 2.a.(3);takes into consideration plant conditions required to perform the Surveillance; and is intended to be consistent with expected fuel cycle lengths.This Surveillance is modified by three Notes.Note 1 states that momentary transients due to changing bus loads do not invalidate this test.The load band is provided to avoid routine overloading of the DG.Routine overloading may result in more frequent teardown inspections in BWRl6 STS B 3.8.1-26 Rev.2, 04/30101 SR 3.8.1.16 AC Sources-Operating B 3.8.1 BASES SURVEILLANCE REQUIREMENTS (continued) Surveillances, and achieve the required voltage and frequency within 10 seconds.The 10 second time is derived from the requirements of the accident analysis to respond to a design basis large break LOCA.The[18 month]Frequency is consistent with the recommendations of Regulatory Guide 1.108 (Ref. 2.a.(5).This SR has been modified by two Notes.Note1 ensures that the test is performed with the diesel sufficiently hot.The requirement that the diesel has operated for at least 2 hours at full load conditions prior to performance of this Surveillance is based on manufacturer recommendations for achieving hot conditions. The load band is provided to avoid routine overloading of the DG.Routine overloads may result in more frequent teardown inspections in accordance with vendor recommendations in order to maintain DG OPERABILITY. Momentary transients due to changing bus loads do not invalidate this test.Note 2 allows all DG starts to be preceded by an engine prelube period to minimize wear and tear on the diesel during testing.d9J As required by Regulatory Guide 1.108 paragraph 2.a.(6), this Surveillance ensures that the manual synchronization and automatic load transfer from the DG to the offsite source can be made and that the DG can be returned to ready-ta-Ioad status when offsite power is restored.It also ensures that the auto-start logic is reset to allow the DG to reload if a subsequent loss of offsite power occurs.The DG is considered to be in ready-to-Ioad status when the DG is at rated speed and voltage, the output breaker is open and can receive an auto-close signal on bus undervoltage, and the load sequence timers are reset.The Frequency of[18 with the recommendations of Regulatory Guide 1.108 (Ref.i 2.1.(6), and takes into consideration plant conditions required to perform the Surveillance. This SR is modified by a Note.The reason for the Note is that performing the Surveillance would remove a required offsite circuit from service, perturb the electrical distribution system, and challenge safety systems.This restriction from normally performing the Surveillance in MODE 1 or 2 is further amplified to allow the Surveillance to be performed for the purpose of reestablishing OPERABILITY (e.g.post work testing following corrective maintenance, corrective modification, deficient or incomplete surveillance testing, and other unanticipated BWRl6 STS B 3.8.1-28 ,.__._._--------------- Rev.2, 04/30101.-.mr,,.,__ AC Sources-Operating B 3.8.1 BASES SURVEILLANCE REQUIREMENTS (continued) OPERABILITY concerns)provided an assessment determines plant safety is maintained or enhanced.This assessment shall, as a minimum, consider the potential outcomes and transients associated with a failed Surveillance, a successful Surveillance, and a perturbation of the offsite or onsite system when they are tied together or operated independently for the Surveillance; as well as the operator procedures available to cope with these outcomes.These shall be measured against the avoided risk of a plant shutdown and startup to determine that plant safety is maintained or enhanced when the Surveillance is performed in MODE 1 or 2.Risk insights or deterministic methods may be used for this assessment. SR 3.8.1.17 Demonstration of the test modeoverrideensures that the DG availability under accident conditions is not compromised as the result of testing.Interlocks to the LOCA sensingcircuitscause the DG to automatically reset to ready-to-Ioad operation if an ECCS initiation signal is received during operation in the test mode.Ready-to-Ioad operation is defined as the DG running at rated speed and voltage with the DG output breaker open.These provisions for automatic switchover are required by IEEE-308 (Ref. paragraph 6.2.6(2).t.(jJ)The requirement to automatically energize the emergency loads with offsite power is essentially identical to that of SR 3.8.1.12.The intent in the requirement associated with SR 3.8.1.17.b is to show that the emergency loading is not affected by the DG operation in test mode.In lieu of actual demonstration of connection and loading of loads, testing that adequately shows the capability of the emergency loads to perform these functions is acceptable. This testing may include any series of sequential, overlapping, or total steps so that the entire connection and loading sequence is verified.The[18 month]Frequency with the recommendations of Regulatory Guide 1.108 (Refi', paragraph 2.a.(8);takes into consideration plant conditions required to perform the Surveillance; and is intended to be consistent with expected fuel cycle lengths.This SR has been modified by a Note.The reason for the Note is that performing the Surveillance would remove a required offsite circuit from service, perturb the electrical distribution system, and challenge safety systems.This restriction from normally performing the Surveillance in MODE 1 or 2 is further amplified to allow portions of the Surveillance to BWRl6 STS B 3.8.1-29 Rev.2, 04/30101 AC Sources-Operating B 3.8.1 BASES SURVEILLANCE REQUIREMENTS (continued) be performed for the purpose of reestablishing OPERABILITY (e.g.post work testing following corrective maintenance, corrective modification, deficient or incomplete surveillance testing, and other unanticipated OPERABILITY concerns)provided an assessment determines plant safety is maintained or enhanced.This assessment shall, as a minimum, consider the potential outcomes and transients associated with a failed partial Surveillance, a successful partial Surveillance, and a perturbation of the offsite or onsite system when they are tied together or operated independently for the partial Surveillance; as well as the operator procedures available to cope with these outcomes.These shall be measured against the avoided risk of a plant shutdown and startup to determine that plant safety is maintained or enhanced when portions of the Surveillance are performed in MODE 1 or 2.Risk insights or deterministic methods may be used for the assessment. SR 3.8.1.18 Under accident conditions [and loss of offsite power]loadsare sequentially connected to the bus by the load sequencing panel.The sequencing logic controls the permissive and starting signals to motor breakers to prevent overloading of the DGs due to high motor starting currents.The[10]%load sequence time interval tolerance ensures that sufficient time exists for the DG to restore frequency and voltage prior to applying the next load and that safety analysis assumptions regarding ESF equipment time delays are not violated.Reference 2 provides a summary of the automatic of ESF buses.The Frequency of[18 monthsconsistent with the recommendations of Regulatory Guide 1.108 (Ref.,paragraph 2.a.(2);takes into consideration plant conditions required to perform the Surveillance; and is intended to be consistent with expected fuel cycle lengths.This SR is modified by a Note.The reason for the Note is that performing the Surveillance during these MODES would remove a required offsite circuit from service, perturb the electrical distribution system, and challenge plant safety systems.This restriction from normally performing the Surveillance in MODE 1 or 2 is further amplified to allow the Surveillance to be performed for the purpose of reestablishing OPERABILITY (e.g.post work testing following corrective maintenance, corrective modification, deficient or incomplete surveillance testing, and other unanticipated OPERABILITY concerns)provided an assessment determines plant safety is maintained or enhanced.This assessment shall, as a minimum, consider the potential outcomes and BWRl6 STS B 3.8.1-30 Rev.2, 04/30101 AC Sources-Operating B 3.8.1 BASES SURVEILLANCE REQUIREMENTS (continued) The Frequency of[18 months]takes into consideration plant conditions required to perform the Surveillance and is intended to be consistent with an expected fuel cycle length of[18 months].This SR is modified by two Notes.The reason for Note 1 is to minimize wear and tear on the DGs during testing.For the purpose of this testing, the DGs must be started from standby conditions, that is, with the engine coolant and oil being continuously circulated and temperature maintained consistent with manufacturer recommendations. The reason for Note 2 is that performing the Surveillance would remove a required offsite circuit from service, perturb the electrical distribution system, and challenge plant safety systems.This restriction from normally performing the Surveillance in MODE 1 or 2 is further amplified to allow portions of the Surveillance to be performed for the purpose of reestablishing OPERABILITY (e.g.post work testing following corrective maintenance, corrective modification, deficient or incomplete surveillance testing, and other unanticipated OPERABILITY concerns)provided an assessment determines plant safety is maintained or enhanced.This assessment shall, as a minimum, consider the potential outcomes and transientsassociatedwith a failed partial Surveillance, a successful partial Surveillance, and a perturbation of the offsite or onsite system when they are tied together or operated independently for the partial Surveillance; as well as the operator procedures available to cope with these outcomes.These shall be measured against the avoided risk of a plant shutdown and startup to determine that plant safety is maintained or enhanced when portions of the Surveillance are performed in MODE 1 or 2.Risk insights or deterministic methods may be used for the assessment. SR 3.8.1.20 This Surveillance demonstrates that the DG starting independence has not been compromised. Also, this Surveillance demonstrates that each engine can achieve proper speed within the specified time when the DGs are started simultaneously. The 10 year Frequency is consistent with the recommendations of Regulatory Guide 1.1 08 This SR is modified by a Note.The reason for the Note is to minimize wear on the DG during testing.For the purpose of this testing, the DGs must be started from standby conditions, that is, with the engine coolant BWRl6 STS B 3.8.1-32 Rev.2, 04/30101 AC Sources-Operating B 3.8.1 BASES SURVEILLANCE REQUIREMENTS (continued) and oil continuously circulated and temperature maintained consistent with manufacturer recommendations. REFERENCES 1.10 CFR 50, Appendix A, GDC 17.2.FSAR, Chapter[8].3.Regulatory Guide 1.9.4.FSAR, Chapter[6].5.FSAR, Chapter[15].6.Regulatory Guide 1.93. /0,.,I z...(fJ.IJ@/if@Generic Letter 84-15, July 2,1984.10 CFR 50, Appendix A, GDC 18.Regulatory Guide 1.108.Regulatory Guide 1.137.ANSI C84.1, 1982.ASME, Boiler and Pressure Vessel Code, Section XI.IEEE Standard 308.BWRl6 STS B 3.8.1-33 Rev.2, 04/30101 BWRl6 LCO 3.8.4 DC Sources-Operating INSERT 1 D.l If a Division 1 or 2 DC electrical power subsystem is inoperable and not restored within the provided Completion Time, the plant must be brought to a condition in which the overall plant risk is minimized. To achieve this status, the plant must be brought to at least MODE 3 within 12 hours.Remaining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 8)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.The allowed Completion Time is reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.INSERT 2 8.NEDC-32988-A, Revision 2, Technical Justification to Support Risk-Informed Modification to Selected Required End States for BWR Plants, December 2002. DC Sources-Operating 3.8.4 3.8 ELECTRICAL POWER SYSTEMS 3.8.4 DC Sources-Operating LCO 3.8.4 APPLICABILITY: ACTIONS The[Division 1],[Division 2], and[Division 3]DC electrical power sUbsystems shall be OPERABLE.MODES 1, 2, and 3.CONDITION REQUIRED ACTION COMPLETION TIME A One[or two]battery A1 Restore battery terminal 2 hours charger[s on one voltage to greater than or division]inoperable. equal to the minimum established float voltage.AND A2 Verify battery float current Once per[12]hours[2]amps.AND A3 Restore battery charger[s] 7 days to OPERABLE status.[B.One[or two]batter[y][ies B.1 Restore batter[y][ies] to[2]hours]on one division]OPERABLE status.inoperable. C.[Division 1 or 2]DC C.1 Restore[Division 1 and 2][2]hours electrical power DC electrical power subsystem inoperable subsystems to for reasons other than OPERABLE status.Condition A[or B].I'0, 4e.-he>"'t 0./Be ,"" 3.I/ o.-.su>c/e: fr:J.. h""" T;'JfVI....t.fo.r CO,'Ih l$;/',J...1-Or:2 J Dc f-:h sktt" tfc>.;..COVlC), VIo1-1+1!.o-r c ,,'+;YUr{, I I BWRl6 STS 3.8.4-1 Rev.2, 04/30101 DC Sources-Operating 3.8.4 ACTIONS (continued) CONDITION REQUIRED ACTION COMPLETION TIME (/@.[Division 3]DC electrical @.1 Declare High Pressure Immediately power subsystem<@Core Spray System inoperable for reasons[and 2C Standby Service other than Condition A Water System]inoperable. [or B].W@Required Action and Be in MODE 3.12 hours associated Completion Timevnot met.)- C.O'\I5l'> 3J yc lit If (P()t.ft-Y" j",J.,s,"'fe."":ft>r U>Vld,.-/,'"", J Be in MODE 4.36 hours 8>1<X"fl-SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.8.4.1 SR 3.8.4.2 Verify battery terminal voltage is greater than or 7 days equal to the minimum established float voltage.Verify each[required] battery charger supplies[18 months][400]amps at greater than or equal to the minimum established float voltage for[8]hours.Verify each battery charger can recharge the battery to the fUlly charged state within[24]hours while supplying the largest combined demands of the various continuous steady state loads, after a battery discharge to the bounding design basis event discharge state.BWRl6 STS 3.8.4-2 Rev.2, 04/30101 DC Sources-Operating B 3.8.4 BASES ACTIONS (continued) complete loss of DC power to the affected division.The 2 hour limit is consistent with the allowed time for an inoperable DC distribution system division.If one of the required[Division 1 or 2]DC electrical power subsystems is inoperable for reasons other than Condition A or B (e.g., inoperable battery charger and associated inoperable battery), the remaining DC electrical power subsystems have the capacity to support a safe shutdown and to mitigate an accident condition. Since a subsequent worst case single failure could, however, result in the loss of minimum necessary DC electrical sUbsystems, continued power operation should not exceed 2 hours.The 2 hour Completion Time is based on Regulatory Guide 1.93 (Ref.7)and reflects a reasonable time to assess unit status as a function of the inoperable DC electrical power subsystem and, if the DC electrical power subsystem is not restored to OPERABLE status, to prepare to effect an orderly and safe unit shutdown.lM\1 W With the Division 3 DC electrical power subsystem inoperable for reasons other than Condition A or B, the HPCS and 2C Standby Service Water System may be incapable of performing their intended functions and must be immediatelydeclaredinoperable. This declaration also requires entry into applicable Conditions and Required Actions of LCO 3.5.1,"ECCS-Operating,"[and LCO 3.7.1,"Standby Service Water (SSW)]System and[Ultimate Heat Sink (UHS)"]].. D" 3 If the inoperable C electrical power subsystem cannot be restored to OPERABLE status within the associated Completion Time, the unit must be brought to a MODE in which the LCO does not apply.To achieve this status, the plant must be brought to at least MODE 3 within 12 hours and to MODE 4 within 36 hours.The allowed Completion Times are reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.The Completion Time to bring the unit to MODE 4 is consistent with the time required in Regulatory Guide 1.93 (Ref.7).BWRl6 STS B 3.8.4-7 Rev.2, 04/30101 DC Sources-Operating B 3.8.4 BASES SURVEILLANCE SR 3.8.4.1 REQUIREMENTS Verifying battery terminal voltage while on float charge for the batteries helps to ensure the effectiveness of the battery chargers, which support the ability of the batteries to perform their intended function.Float charge is the condition in which the charger is supplying the continuous charge required to overcome the internal losses of a battery and maintain the battery in a fully charged state while supplying the continuous steady state loads of the associated DC subsystem. On float charge, battery cells will receive adequate current to optimally charge the battery.The voltage requirements are based on the nominal design voltage of the battery and are consistent with the minimum float voltage established by the battery manufacturer ([2.20]Vpc or[127.6]V at the battery terminals). This voltage maintains the battery plates in a condition that supports maintaining the grid life (expected to be approximately 20 years).The 7 day Frequency is consistent with manufacturer recommendations and IEEE-450 (Ref.(3).SR 3.8.4.2This SR verifies the design apacity ofthebattery chargers.According to Regulatory Guide 1.32 (Ref. battery charger supply is recommended to be based on the largest combined demands of the various steady state loads and the charging capacity to restore the battery from the design minimum charge state to the fully charged state, irrespective of the status of the unit during these demand occurrences. The minimum required amperes and duration ensures that these requirements can be satisfied. This SR provides two options.One option requires that each battery charger be capable of supplying[400]amps at the minimum established float voltage for[8]hours.The ampere requirements are based on the output rating of the chargers.The voltage requirements are based on the charger voltage level after a response to a loss of AC power.The time period if sufficient for the charger temperature to have stabilized and to have been maintained for at lease[2]hours.The other option requires that each battery charger be capable of recharging the battery after a service test coincident with supplying the largest coincident demands of the various continuous steady state loads (irrespective of the status of the plant during which these demands occur).This level of loading may not normally be available following the battery service test and will need to be supplemented with additional loads.The duration for this test may be longer than the charger sizing criteria since the battery recharge is affected by float voltage, BWRl6STS B 3.8.4-8 Rev.2, 04/30/01 DC Sources-Operating B 3.8.4 BASES SURVEILLANCE REQUIREMENTS (continued) temperature, an the exponential decay in charging current.The battery is recharged when the measured charging current is[2]amps.The Surveillance Frequency is acceptable, given the unit conditions required to perform the test and the other administrative controls existing to ensure adequate charger performance during these[18 month]intervals. In addition, this Frequency is intended to be consistent with expected fuel cycle lengths.SR 3.8.4.3@-A battery service test is a special test of the battery's capability, as found, to satisfy the design requirements (battery duty cycle)of the DC electrical power system.The discharge rate and test length corresponds to the design duty cycle requirements as specified in Reference 4.The Surveillance Frequency of[18 months] the recommendations of Regulatory Guide 1.32 (e.and Regulatory Guide 1.129 which state thatthebattery service test should be performed during refueling operations or at some other outage, with intervals between tests not to exceed[18 months].This SR is modified by two Notes.Note1 allows the performance of a modified performance discharge test in lieu of a service test.The reason for Note 2 is that performing the Surveillance would remove a required DC electrical power subsystem from service, perturb the electrical distribution system, and challenge safety systems.This restriction from normally performing the Surveillance in MODE 1 or 2 is further amplified to allow portions of the Surveillance to be performed for the purpose of reestablishing OPERABILITY (e.g.post work testing following corrective maintenance, corrective modification, deficient or incomplete surveillance testing, and other unanticipated OPERABILITY concerns)provided an assessment determines plant safety is maintained or enhanced.Thisassessment shall, as a minimum, consider the potential outcomes and transients associated with a failed partial Surveillance, a successful partial Surveillance, and a perturbation of the offsite or onsite system when they are tied together or operated independently for the partial Surveillance; as well as the operator procedures available to cope with these outcomes.These shall be measured against the avoided risk of a plant shutdown and startup to determine that plant safety is maintained or enhanced when portions of BWRl6STS B 3.8.4-9 Rev.2, 04/30101 DC Sources-Operating B 3.8.4 BASES SURVEILLANCE REQUIREMENTS (continued) the Surveillance are performed in MODE 1 or 2.Risk insights or deterministic methods may be used for the assessment. REFERENCES 1.10 CFR 50, Appendix A, GDC 17.2.Regulatory Guide 1.6.3.IEEE Standard 308, 1978.4.FSAR, Chapter[8].5.FSAR, Chapter[6].6.FSAR, Chapter[15].7.Regulatory Guide 1.93, December 1974. IEEE Standard 450,1995.cr 11'" IDRegulatory Guide 1.32, February 1977.II 69.Regulatory Guide 1.129, December 1974.BWRl6STS B 3.8.4-10 Rev.2, 04/30101 BWRl6 LCO 3.8.7 Inverters-Operating INSERT 1 B.1 If a Division 1 or 2 inverter is inoperable and not restored within the provided Completion Time, the plant must be brought to a condition in which the overall plant risk is minimized. To achieve this status, the plant must be brought to at least MODE 3 within 12 hours.Remaining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 4)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.The allowed Completion Time is reasonable, based on operating experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.INSERT 2 4.NEDC-32988-A, Revision 2, Technical Justification to Support Risk-Informed Modification to Selected Required End States for BWR Plants, December 2002. Inverters-Operating 3.8.7 3.8 ELECTRICAL POWER SYSTEMS 3.8.7 Inverters-Operating LCO 3.8.7 APPLICABILITY: ACTIONS The[Division 1],[Division 2], and[Division 3]inverters shall be OPERABLE..NOTE*[[One/two]inverter[s] may be disconnected from[its/their] associated DC bus for[24]hours to perform an equalizing charge on[its/their] associated [common]battery, provided: a.The associated AC vital bus[es][is/are]energized from[its/their] [Class 1 E constant voltage transformers] [inverter using internal AC source]and b.All other AC vital buses are energized from their associated OPERABLE inverters.] .MODES 1, 2, and 3.CONDITION REQUIRED ACTION COMPLETION TIME A.[Division 1 or 2]inverter A.1._-------------------------- inoperable. .NOTE*Enter applicable Conditions and Required Actions of LCO 3.8.9,"Distribution Systems-Operating" with any AC vital bus de-energized .._-------------------------- Restore[Division 1 and 2]24 hours inverters to OPERABLE status.rB, Re 1 IA)feJ.Ac+lo.... -Bot 73e I"'" ,4/100£3 1 I/2.. uJ.f'tlc,'eokJ".f 4 y)()1 yYt£f.BWRl6 STS 3.8.7-1 Rev.2, 04/30/01 ACTIONS (continued) Inverters-Operating 3.8.7 CONDITION REQUIRED ACTION COMPLETION TIME[[Division 3]inverter@.1 Declare High Pressure Immediately] C inoperable. r9 Core Spray System[and 2C Standby Service Water System]inoperable.Required Action and Be in MODE 3.12 hours associated Completion f@Time'flot met.)£D of Coll'1c;i,'f /'av!c)Bein MODE 4.36 hours SURVEILLANCE REQUIREMENTS SR 3.8.7.1 BWRl6 STS SURVEILLANCE Verify correct inverter voltage,[frequency,] and alignment to required AC vital buses.3.8.7-2 FREQUENCY 7 days Rev.2, 04/30/01 Inverters-Operating B 3.8.7 BASES APPLICABILITY (continued) a.Acceptable fuel design limits and reactor coolant pressure boundary limits are not exceeded as a result of AOOs or abnormal transients and b.Adequate core cooling is provided, and containment OPERABILITY and other vital functions are maintained in the event of a postulated DBA.Inverter requirements for MODES 4 and 5 are covered in the Bases for LCO 3.8.8,"Inverters -Shutdown." ACTIONS With a required inverter inoperable, its associated AC vital bus becomes inoperable until it is manually re-energized from its[Class1E constant voltage source transformer or inverter using internal AC source].LCO 3.8.9 addresses this action;however, pursuant to LCO 3.0.6, these actions would not be entered even if the AC vital bus were de-energized. Therefore, the ACTIONS are modified by a Note stating that ACTIONS for LCO 3.8.9 must be entered immediately. This ensures the vital bus is re-energized within 2 hours.Required Action A.1 allows 24 hours to fix the inoperable inverter and return it to service.The 24 hour limit is based upon engineering judgment, taking into consideration the time required to repair an inverter and the additional risk to which the plant is exposed because of the inverter inoperability. This risk has to be balanced against the risk of an immediate shutdown, along with the potential challenges to safety systems that such a shutdown might entail.When the AC vital bus is powered from itsconstantvoltage source, it is relying upon interruptible AC electrical power sources (offsite and onsite).The uninterruptible inverter source to the AC vital buses is the preferred source for powering Ci'"'Y\serf trip setpoint devices.<?1(l1.With the Division 3 inverter inoperable, the associated Division 3 ECCS subsystem may be incapable of performing intended function and must be immediately declared inoperable. This also requires entry into applicable Conditions and Required Actions for LCO 3.5.1,"ECCSOperating." BWRJ6 STS B 3.8.7-3 Rev.2,04/30101 Inverters-Operating B 3.8.7 BASES ACTIONS (ContinUed! SURVEILLANCE SR 3.8.7.1 REQUIREMENTS This Surveillance verifies that the inverters are functioning properly with all required circuit breakers closed and AC vital buses energized from the inverter.The verification of proper voltage and frequency output ensures that the required power is readily available for the instrumentation connected to the AC vital buses.The 7 day Frequency takes into account the redundant capability of the inverters and other indications available in the control room that alert the operator to inverter malfunctions. REFERENCES 1.FSAR, Chapter[8].2.FSAR, Chapter[6].3.FSAR, Chapter[15].BWRl6 STS B 3.8.7-4 Rev.2, 04/30101 BWRl6 Leo 3.8.9 Distribution Systems-Operating INSERT 1 Remaining in the Applicability of the LCO is acceptable because the plant risk in MODE 3 is similar to or lower than the risk in MODE 4 (Ref 4)and because the time spent in MODE 3 to perform the necessary repairs to restore the system to OPERABLE status will be short.However, voluntary entry into MODE 4 may be made as it is also an acceptable low-risk state.INSERT 2 4.NEDC-32988-A, Revision 2, Technical Justification to Support Risk-Informed Modification to Selected Required End States for BWR Plants, December 2002. Distribution Systems-Operating 3.8.9 ACTIONS (continued) CONDITION REQUIRED ACTION COMPLETION TIME C.One or more[Division 1 C.1 Restore[Division 1 and 2]2 hours and 2]DC electrical DC electrical power power distribution distribution subsystem(s) AND subsystem inoperable. to OPERABLE status.16 hours from discovery of failure to meet LCO D.Required Action and D.1 Be in MODE 3.12 hours associated Completion I'Time of Condition A, B, or C not met. / E.One or more[Division 3]E.1 Declare High Pressure Immediately AC, DC, or AC vital bus Core Spray System[and electrical power 2C Standby Service Water distribution subsystems System]inoperable. inoperable. F.Two or more electrical F.1 Enter LCO 3.0.3.Immediately power distribution SUbsystems inoperable that result in a loss of function.SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.8.9.1 BWRl6 STS Verify correct breaker alignments and voltage to 7 days[required] AC, DC,[and AC vital bus]electrical power distribution subsystems. 3.8.9-2 Rev.2, 04/30/01 Distribution Systems-Operating B 3.8.9 BASES ACTIONS (continued) D.1@n¥l{)If the inoperable electrical power distribution system an not be restored to OPERABLE status within the associated Completio Times, the plant must be bought to a MODE in which the[LC;aes iief'aepIY. To achieve this statu;.the plant must be brought to at least MODE 3 within 12 hours 4 wfTIIBS I The allowed Completion base onoperaflng experience, to reach the required plant conditions from full power conditions in an orderly manner and without challenging plant systems.With the Division 3 electrical power distribution system inoperable, the Division 3 powered systems are not capable of performing their intended functions. Immediately declaring the high pressure core spray inoperable allows the ACTIONS of LCO 3.5.1,"ECCS-Operating," to apply appropriate limitations on continued reactor operation. Condition F corresponds to a level of degradation in the electrical distribution system that causes a required safety function to be lost.(Single division systems are not included, although for this Action, Division 3 is considered redundant to Division 1 and 2 ECCS.)When two or more inoperable electrical power distribution subsystems result in the loss of a required function, the plant is in a condition outside the accident analysis.Therefore, no additional time is justified for continued operation. LCO 3.0.3 must be entered immediately to commence a controlled shutdown.SURVEILLANCE SR 3.8.9.1 REQUIREMENTS Meeting this Surveillance verifies that the AC, DC, and AC vital bus electrical power distribution systems are functioning properly, with the correct circuit breaker alignment. The correct breaker alignment ensures the appropriate separation and independence of the electrical divisions is maintained, and the appropriate voltage is available to each required bus.The verification of proper voltage availability on the buses ensures that the required voltage is readily available for motive as well as control functions for critical system loads connected to these buses.The 7 day Frequency takes into account the redundant capability of the AC, DC, and AC vital bus electrical power distribution subsystems, and other BWRl6 STS B 3.8.9-8 Rev.2, 04/30101 Distribution Systems-Operating B 3.8.9 BASES SURVEILLANCE REQUIREMENTS (continued) indications available in the control room that alert the operator to subsystem malfunctions. REFERENCES BWRl6 STS 1.FSAR, Chapter[6].2.FSAR, Chapter[15].3.Regulatory Guide 1.93, December 1974.B 3.8.9-9 Rev.2, 04/30/01}}