ML18033A325: Difference between revisions

From kanterella
Jump to navigation Jump to search
(Created page by program invented by StriderTol)
(Created page by program invented by StriderTol)
 
(3 intermediate revisions by the same user not shown)
Line 17: Line 17:


=Text=
=Text=
{{#Wiki_filter:ENCLOSURE 1 PROPOSED TECHNICAL SPECIFICATIONS REVISIONS BROWNS FERRY NUCLEAR PLANT UNITS 1, 2, AND 3 (TVA BFN TS 249)8808240002 880812 PDR ADOCK 05000260 TABLE 3.2.F Surveillance Instrumentation Hinimum¹of Operable Instrument Channels~tn rument¹Instrum n Type Indication and Ran Notes LI-3-58A LI-3-58B LI-3-46A PI-3-74A PI-3-74B PI-3-79 XR-64-50 PI-64-678 TI-64-52AB Reactor Mater Level Reactor Water Level Reactor Pressure Reactor Pressure Drywell Pressure Indicator 0-1200 psig (9)Recorder 0-80 psia Indicator 0-80 psia (1)(2)(3)Indicator-155" to (1)(2)(3)+60" Indicator-155" to (9)60" Indicator 0-1200 psig (1)(2)(3)XR-64-50 XR-64-52 N/A N/A PS-64-678 TS-64-52A&PIS-64-58A
{{#Wiki_filter:ENCLOSURE 1 PROPOSED TECHNICAL SPECIFICATIONS REVISIONS BROWNS FERRY NUCLEAR PLANT UNITS 1, 2, AND 3 (TVA BFN TS 249) 8808240002 880812 PDR ADOCK 05000260
&IS-6'4-67A LI-84-2A LI-84-13A Drywell Temperature Suppression Chamber Air Temperature Control Rod Position Neutron Honi toring Drywell Pressure Drywell Temperature and Pressure and Timer CAD Tank"A" Level CAD Tank"8" Level Recorder, Indicator 0-4004F Recorder 0-400'F 6V Indicating
)Lights)SRH, IRH, LPRH)0 to 100/power)Alarm at 35 psig))Alarm if temp.)>281'F and)pressure>2.5 psig)after 30 minute)delay)Indicator 0 to 1005 Indicator 0 to 100'4 (1)(2)(3)(1)(2)(3)(1)(2)(3)(4)I (1)(2),(3)(4)(1)(1)-BFN-Unit 2 t'I lg I (1)From and after the date that one of these parameters is reduced to one indication, continued operation is permissible during the succeeding 30 days unless such instrumentation is sooner made OPERABLE.(2)From and after the date that one of these parameters is not indicated in the control room, continued operation is permissible during the succeeding seven days unless such instrumentation is sooner made OPERABLE.(3)If the requirements of notes (1)and (2)cannot be met, and if one of the indications cannot be restored in (6)hours, an orderly shutdown shall be initiated and the reactor shall be in a cold condition within 24 hours.(4)These surveillance instruments are considered to be redundant to each other.From and after the date that both the acoustic monitor and the temperature indication on any one valve fails to indicate in the control room, continued operation is permissible during the succeeding 30 days, unless one of the two monitoring channels is sooner made OPERABLE.If both the primary and secondary indication on any SRV tailpipe is INOPERABLE, the torus temperature will be monitored at least once per shift to observe any unexplained temperature increase which might be indicative of an open SRV.(6)A channel consists of eight sensors, one from each alternating torus bay.Seven sensors must be OPERABLE for the channel to be OPERABLE.(7)When one of these instruments is INOPERABLE for more than seven days, in lieu of any other report required by Specification 6.7.2, prepare and submit a Special Report to the Commission pursuant to Specification


====6.7.3 within====
TABLE  3.2.F Surveillance Instrumentation Hinimum ¹ of Operable Instrument                                                Type Indication Channels      ~tn  rument ¹          Instrum  n              and Ran                  Notes LI-3-58A            Reactor Mater Level        Indicator  -  155"  to   (1) (2) (3)
the next seven days outlining the action taken, the cause of inoperability, and the plans and schedule for restoring the system to OPERABLE status.(s)With the plant in the power operation, Startup, or Hot Shutdown condition and with the number of OPERABLE channels less than the required OPERABLE channels, either restore the INOPERABLE channel(s) to OPERABLE status within 72 hours,.or initiate the preplanned
LI-3-58B                                      +60" LI-3-46A            Reactor Water Level         Indicator    155" to    (9) 60" PI-3-74A          Reactor Pressure            Indicator 0-1200 psig      (1) (2) (3)
.alternate method of monitoring the appropriate parameter.
PI-3-74B PI-3-79           Reactor Pressure           Indicator 0-1200 psig      (9)
If this instrument is inoperable, establish within the next hour a patrolling fire watch in fire area 16 to ensure that the affected fire area is checked hourly.BFN Unit 3.2/4.2-33 TABLE 4.2.F HINIHUH TEST ANO CALIBRATION FREQUENCY FOR SURVEILLANCE INSTRUMENTATION In rumn hnn 1 1)Reactor Water Level (LI-3-46A,SBA&B)
XR-64-50           Drywell Pressure            Recorder 0-80 psia        (1) (2) (3)
I 2)Reactor Pressure (PI-3-79,74A&B) 3)Drywell Pressure (PI-64-67B) and XR-64-50 n 4)Drywell Temperature (TI-64-52AB) and XR-64-50 5)Suppression Chamber Air Temperature (XR-64-52) 8)Control Rod Position 9)Neutron Monitoring 10)Drywell Pressure (PS-64-67B)l 11)Orywell Pressure (PIS-64-58A) 12)Orywell Temperature (TS-64-52A) 13)Timer (IS-64-67A) 14)CAD Tank Level 15)Containment Atmosphere Honitors libra ion Fre uenc Once/6 months Once/12 months Once/6 months Once/6 months Once/6 months N/A (2)Once/6 months Once/6 months Once/6 months Once/6 months Once/6 months Once/6 months In rum nt Ch ck Each Shift Each Shift Each Shift Each Shift Each Shift Each Shift Each Shift N/A N/A N/A N/A Once/day Once/day BFN-Unit 2  
PI-64-678                                      Indicator 0-80 psia TI-64-52AB XR-64-50           Drywell Temperature        Recorder,    Indicator    (1) (2) (3) 0-4004F XR-64-52           Suppression Chamber    Air Recorder 0-400'F          (1) (2) (3)
'II lg I
Temperature N/A            Control   Rod Position     6V  Indicating          )
Lights                  )
N/A            Neutron Honi toring        SRH,  IRH, LPRH        ) (1) (2) (3) (4) 0  to 100/ power      )                I PS-64-678          Drywell Pressure            Alarm at 35 psig        )
                                                                                            )
TS-64-52A &
PIS-64-58A &
Drywell Temperature and Pressure and Timer Alarm  if temp.
281'F and
                                                                                            )
                                                                    >                        ) (1) (2),(3) (4)
IS-6'4-67A                                     pressure >2.5 psig      )
after 30 minute          )
delay    )
LI-84-2A          CAD Tank "A" Level         Indicator  0  to  1005    (1)
LI-84-13A          CAD  Tank  "8" Level      Indicator  0  to  100'4  (1)
-BFN-Unit 2


===3.2 BASES===
    'I t
(Cont'd)Trip setting of 100 mr/hr for the monitors in the refueling zone are based upon initiating normal ventilation isolation and SGTS operation so that none of the activity released during the refueling accident leaves the Reactor Building via the normal ventilation path but rather all the activity is processed by the SGTS.Flow integrators and sump fill rate and pump out rate timers are used to determine leakage in the drywell.A system whereby the time interval to fill a known volume will be utilized to provide a backup.An air sampling system is also provided to detect leakage inside the primary containment (See Table 3.2.E).For each parameter monitored, as listed in Table 3.2.F, there are two channels of instrumentation except as noted.By comparing readings between the two channels, a near continuous surveillance of instrument performance is available.
lg I
Any deviation in readings will initiate an early recalibration, thereby maintaining the quality of the instrument readings.A single channel of instruments at the backup control panel provides the additional indication of reactor vessel water level and reactor pressure.This indication is available to ensure safe shutdown capability from outside the control room.Instrumentation is provided for isolating the control room and initiating a pressurizing system that processes outside air before supplying it to the control room.An accident signal that isolates primary containment will also automatically isolate the control room and initiate the emergency pressurization system.In addition, there are radiation monitors in the normal ventilation system that will isolate the control room and initiate the emergency pressurization system.Activity required to cause automatic actuation is about one mRem/hr.Because of the constant surveillance and control exercised by TVA over the Tennessee Valley, flood levels of large magnitudes can be predicted in advance of their actual occurrence.
In all cases, full advantage will be taken of advance warning to take appropriate action whenever reservoir levels above normal pool are predicted; however, the plant flood protection is always in place and does not depend in any way on advanced warning.Therefore, during flood conditions, the plant will be permitted to operate until water begins to run across.;the top of the pumping station at elevation 565.Seismically qualified, redundant level switches each powered from a separate division of power are provided at the pumping station to give main control room indication of this condition.
At that time an orderly shutdown of the plant will be initiated, although surges even to a depth of several feet over the pumping station deck will not cause the loss of the main condenser circulating water pumps.BFN Unit 2 3.2/4.2-69 C r TABLE 3.5-1 MINIMUM RHRSW AND EECW PUMP ASSIGNMENT Time Limit Da s Indefinite 30 RHRSW (D)(E)(G)7 (C)(D)(E)(F)(G) 7 or 6 (D)(E)(G)6 Minimum Service Assignment EECW(B)(A)(H)(A)(C)(F)(H) 2 ox'3 (A)(H)2 (A)At least one operable pump must be assigned to each header.(B)Only automatically starting pumps may be assigned to EECW header service.(C)Nine pumps must be OPERABLE.Either configuration is acceptable:
7 and 2.or 6 and 3 (except reduced by notes D and E).(D)Requirements may be reduced by two for each unit with fuel unloaded.(E)For units with fuel loaded, the minimum RHRSW pump requirements may be reduced by one pump for each unit that has been in COLD SHUTDOWN CONDITION for more than 96 hours.At least 2 of the required pumps must be powered from separate electric power sources with their associated RHR pumps, heat exchangers, and diesel generator(s)
OPERABLE.(F)These minimum service requirements are also applicable to startup from a COLD SHUTDOWN CONDITION.(G)RHRSW pumps D2 and either Cl or C2 must be OPERABLE during unit 2 REACTOR POWER OPERATION.
If D2 or both Cl and C2 pumps are inoperable, within the next hour establish a patrolling fire watch'n fire areas/zones shown in Table 3.5-2 to ensure the affected.fire.areas/zones are cheeked hourly.(H)EECW pumps A3, B3, C3, and D3 must be OPERABLE during unit 2 REACTOR POWER OPERATION.
If one or more of these pumps is inoperable, within the next hour establish a patrolling fire watch in fire areas/zones shown in Table 3.5-2 to ensure the affected fire areas/zones are checked hourly.BFN Unit 2 3.5/4.5-11 TABLE 3.5-2 RHRSW/EECW Pump Inoperable Fire Areas/Zones to Establish Patrolling Fire Watch Cl,and C2 D2'""'Aa, i)A3 B3 C3 D3~J g~2-2, 2-5, 16, 18 I~Il~~2-1'," 2-3;2-4, 2-6, 9 I 2-1, 2-2, 2-3, 2-4, 2-5, 2-6, 9 I 16, 18 2-1,'-2,'2-3, 2-4, 2-5, 2-6, 9 16, 18 k''<~c~l~o>~~"I LA~i.~~~=~~~'I, 1 Jr~~~g,~~BFN Unit 2 3.5/4.5-lla


===3.5 Bases===
(1) From and after the date that one of these parameters is reduced    to one indication, continued operation is permissible during the succeeding 30 days unless such instrumentation is sooner made OPERABLE.
(Cont'd)The suppression chamber can be drained when the reactor vessel pressure is atmospheric, irradiated fuel is in the reactor vessel, and work is not in progress which has the potential to drain the vessel.By requiring the fuel pool gate to be open with the vessel head removed, the combined water inventory in the fuel pool, the reactor cavity, and the separator/dryer pool, between the fuel pool low level alarm and the reactor vessel flange, is about 65,800 cubic feet (492,000 gallons).This will provide adequate low-pressure cooling in lieu of CSS and RHR (LPCI and containment cooling mode)as currently required in Specifications 3.5.A.4 and 3.S.B.9.The additional requirements for providing standby coolant supply available will ensure a redundant supply of coolant supply.Control rod drive maintenance may continue during this period provided no more than one drive is removed at a time unless blind flanges are installed during the period of time CRDs'are not in place.Should the capability for providing flow through the cross-connect lines be lost, a 10-day repair time is allowed before shutdown is required.This repair time is justified based on the very small probability for ever needing RHR pumps and heat exchangers to supply an adjacent unit.REFERENCES 1.Residual Heat Removal System (BFNP FSAR subsection 4.8)2.Core Standby Cooling Systems (BFNP FSAR Section 6)3.5.C.RHR Service Water S stem and Emer enc E ui ment Coo n Water S stem EECWS There are two EECW headers (north and south)with four automatic starting RHRSW pumps on each header.All components requiring emergency cooling water are fed from both headers thus assuring continuity of operation if either header is operable.Each header alone can handle the flows to all components.
(2) From and   after the date that one of these parameters is not indicated in the control room, continued operation is permissible during the succeeding seven days unless such instrumentation is sooner made  OPERABLE.
Two RHRSW pumps can supply the full flow requirements of all essential EECW loads for any abnormal or postaccident situation.
(3) If the requirements of notes (1) and (2) cannot be met, and of the indications cannot be restored in (6) hours, an orderly if one shutdown shall be initiated and the reactor shall be in a cold condition within 24 hours.
In fire areas 9, 16 and 18 and fire zones 2-lp 2 2p 2 3p 2 4p 2-5, and 2-6, a postulated fire could result in only two EECW pumps being available that are required by the plant Appendix R evaluation.
(4) These surveillance instruments are considered to be redundant to each other.
If one of these.two remaining EECW pumps was the one allowed by the technical specifications to be indefinitely out of service, then the required two EECW pumps for safe shutdown would not be available.
From and  after the date that both the acoustic monitor and the temperature indication on any one valve fails to indicate in the control room, continued operation is permissible during the succeeding 30 days, unless one of the two monitoring channels is sooner made OPERABLE. If both the primary and secondary indication on any SRV tailpipe is INOPERABLE, the torus temperature will be monitored at least once per shift to observe any unexplained temperature increase which might be indicative of an open SRV.
If one of the required EECW pumps is out of service, a hourly patrolling fire watch will be established in the appropriate fire area/zones as a compensatory measure.For a fire in any other areas/zones of the plant, adequate RHRSW swing/EECW pumps are available to supply necessary cooling water to the diesel generators, even if one of the EECW pumps is out of service.BFN Unit 2 3.5/4.5-26 Ijh 3.5 BASES (Cont'd)There are four RHR heat exchanger headers (A, B, C, 8 D)with one RHR heat exch'anger.
(6) A channel consists of eight sensors, one from each alternating torus bay. Seven sensors must be OPERABLE for the channel to be OPERABLE.
from each unit on each header.~There are two RHRSW pumps.on each header;one normally assigned to each header (A2,-B2, C2, or D2)and one on alternate assignment-(A1, Bl, Cl, or Dl).One RHR h'eat exchanger header can adequat'ely deliver~the" flow supplied by both RHRSW pumps to any two of the three RHRSW heat exchangers on the header;One RHRSW pump can'upply the full flow requirement of one RHR heat exchanger.
(7) When one   of these instruments is INOPERABLE for more than seven days, in lieu of any other report required by Specification 6.7.2, prepare and submit a Special Report to the Commission pursuant to Specification 6.7.3 within the next seven days outlining the action taken, the cause of inoperability, and the plans and schedule for restoring the system to OPERABLE status.
Two,RHR exchangers can more than adequately handle the cooling requirements of one unit in any abnormal or postaccident situation.
(s)  With the plant in the power operation, Startup, or Hot Shutdown condition and with the number of OPERABLE channels less than the required OPERABLE channels, either restore the INOPERABLE channel(s) to OPERABLE status within 72 hours, .or initiate the preplanned .
~'The RHR Service Water, System was designed as a shared system for three units.The specification, as written, is conservative when consideration is given to particular pumps being out of service and to possible valving arrangements.
alternate method of monitoring the appropriate parameter.
If unusual operating conditions arise such that more pumps are out of service than allowed by this specification, a special case request may be made to the NRC to allow continued operation if the actual system cooling requirements can be assured.ll Should three of the four RHRSW pumps normally or alternately assigned to the RHR heat exchanger headers supplying the standby coolant supply connection become inoperable, capability for long-term fluid makeup to the unit reactor and for cooling of the unit containment remains operable.Because of the availability of makeup and cooling capability which is demonstrated to be operable immediately and with specified subsequent surveillance, a 30-day repair period is justified.
If this instrument is inoperable, establish within the next hour a patrolling fire watch in fire area 16 to ensure that the affected fire area is checked hourly.
Unit 2 may be supplied standby coolant from either of four pumps-Bl, B2, Dl, or D2.Should the capability to provide standby coolant supply be lost, a 10-day repair time is justified based on the low probability for ever needing the standby coolant supply.The plant Appendix R evaluation requires that either RHRSW pump Cl or D2 be available, however both pumps are required to be operable to ensure the one required RHRSW pump is available for a specific fire location.If one of the two required RHRSW pumps is out of service, a hourly patrolling fire watch will be established in the appropriate fire areas/zones as a compensatory measure.3.5.D E ui ment Area Coo ers II There is an equipment area cooler for each RHR pump and an equipment area cooler for each set (two pumps, either the A and C or B and D pumps)of core spray pumps.The equipment area coolers take suction near the cooling air discharge of the motor of the pump(s)served and discharge air near the cooling air suction of the motor of the pump(s)served.This ensures that cool air is supplied for cooling the pump motors.BFN Unit 2 3.5/4.5-27 tg ,pl~~
BFN                                       3.2/4.2-33 Unit


===3.5 BASES===
TABLE  4.2.F HINIHUH TEST ANO CALIBRATION FREQUENCY  FOR SURVEILLANCE INSTRUMENTATION In rumn      hnn  1                      libra ion  Fre uenc                    In  rum nt Ch ck
(Cont'd)The equipment area coolers also remove the pump, and equipment waste heat from the basement rooms housing the engineered safeguard equipment.
: 1) Reactor Water Level                          Once/6 months                          Each Shift (LI-3-46A,SBA&B)
The various conditions under which the operation of the equipment air coolers is required have been identified by evaluating the normal and abnormal operating transients and accidents over the full range of planned operations.
I
The surveillance and testing of the equipment area coolers in each of their various modes is accomplished during the testing of the equipment served by, these coolers.This testing is adequate to assure the operability of the equipment area coolers.REFERENCES 1.Residual Heat Removal System (BFNP FSAR paragraphs 4.8.9.1 and 4.8.9.2)2.Core Standby Cooling System (BFNP FSAR subsection 6.7)3.S.E.Hi h Pressu e Coolant In ection S stem PCXS The HPCIS is provided to assure that the reactor core is adequately cooled to limit fuel clad temperature in the event of a small break in the nuclear system and loss of coolant which does not result in rapid depressurization of the reactor vessel.The HPCIS permits the reactor to be shut down while maintaining sufficient reactor vessel water level inventory until the vessel is depressurized.
: 2) Reactor Pressure                              Once/12 months                          Each Shift (PI-3-79,74A&B)
The HPCIS continues to operate until reactor vessel pressure is below the pressure at which LPCI operation or core spray system operation maintains core cooling.The capacity of the system is selected to provide this required core cooling.The HPCI pump is designed to pump 5,000 gpm at reactor pressures between 1,120 and 150 psig.Two sources of water are available.
: 3) Drywell Pressure                            Once/6 months                            Each Shift (PI-64-67B) and XR-64-50 n
Initially, water from the condensate storage tank is used instead of injecting water from the suppression pool into the reactor.When the HPCI System begins operation, the reactor depressurizes more rapidly than would occur if HPCI was not initiated due to the condensation of steam by the cold fluid pumped into the reactor vessel by the HPCI system.As the reactor vessel pressure continues to decrease, the HPCI flow momentarily reaches equilibrium with the flow through the break.Continued depressurization caused the break flow to decrease below the HPCI flow and the liquid inventory begins to rise.This.type, of response.is, typical.af the small breaks., The core never uncovers and is continuously cooled throughout the transient so that no core damage of any kind occurs for breaks that lie within the capacity range of the HPCI.The minimum required NPSH for HPCI is 21 feet.There is adequate elevation head between the suppression pool and the HPCI pump, such that the required NPSH is available with a suppression pool temperature up to 1404F with no containment back pressure.BFN Unit 2 3.5/4.5-28
: 4) Drywell Temperature                          Once/6 months                            Each Shift (TI-64-52AB) and XR-64-50
: 5) Suppression Chamber    Air Temperature      Once/6 months                          Each  Shift (XR-64-52)
: 8) Control  Rod Position                        N/A                                    Each  Shift
: 9) Neutron Monitoring                            (2)                                   Each  Shift
: 10) Drywell Pressure  (PS-64-67B)l              Once/6 months                          N/A
: 11) Orywell Pressure  (PIS-64-58A)              Once/6 months                          N/A
: 12) Orywell Temperature    (TS-64-52A)          Once/6 months                          N/A
: 13) Timer (IS-64-67A)                           Once/6 months                          N/A
: 14) CAD Tank Level                              Once/6 months                          Once/day
: 15) Containment Atmosphere Honitors              Once/6 months                          Once/day BFN-Unit 2


===3.5 BASES===
II lg I
(Cont'd)The HPCIS serves as a backup to the RCICS;as a source of feedwater makeup during primary csystem isolation'conditions., The ADS.serves as a backup, to the'HPCIS.for reactor depress'surization for postulated transients and acdident.Both these systems are checked for.operabilit:y i8 the HPCI is determined to.be.inoperable.;
Considering the iredundant.
systems, an allowable r'epair time of.seven days was II selectedi~~U~~~~C~~~" 6~I E$Jj II I y~,$~~-~,(The HPCI'and RCIC as-well-as all.other Core Standby Cooling Systems must.be operable when starting up from a Cold Condition.
It is realized that the HPCI is not designed to operate at full capacity until'eactor pressure exceeds 150 psig and the steam supply to the HPCI turbine is automatically isolated before the reactor pressure decreases below 100 psig.It is the intent of this specification to assure that when the reactor is being started up from a Cold Condition, the HPCI is not known to be inoperable.
3.5.F Reactor Core Iso ation Cool n S stem RCICS CI S The various conditions under which the RCICS plays an essential role in providing makeup water.to the>reactor vessel have.been identified, by evaluating-the various'plant events over the full range of planned operations.
The specifications ensure that the function for which the RCICS was designed will be available when needed.The minimum required NPSH for RCIC is 20 feet.There is adequate elevation head between the suppression pool and the RCIC pump, such that the required NPSH is available with a suppression pool temperature up to 140'F with no containment back pressure.Because the low-pressure cooling systems (LPCI and core spray)are capable of providing all the cooling required for any plant event when nuclear system pressure is below 122 psig, the RCICS is not required below this pressure.Between.122 psig and 150.psig the RCICS need not provide its design flow, but reduced flow is required for certain events.RCICS design flow (600 gpm)is sufficient to maintain water level above the top of the active fuel for a complete loss of feedwater flow at design power (105 percent of rated)..~s~~=II (1 e ss li Consideration of.the availability of the RCICS reveals that the average risk-associated with failure of the RCICS to cool the core when r'equired is not increased if the RCICS is inoperable for no longer than seven days, provided that the HPCIS is operable during this period.REFERENCE 1.Reactor Core Isolation Cooling System (BFNP FSAR Subsection 4.7)3.5.G Automatic De ressurization S stem ADS~I This specification ensures the operability of the ADS under all conditions for which the depressurization of the nuclear system is an essential response to station abnormalities.
BFN Unit 2 3.5/4.5-29 0 k (1 t ,I ,I  


===4.6 PRIMARY===
3.2   BASES  (Cont'd)
SYSTEM BOUNDARY I s LIMITING CONDITIONS FO ERATION SURVE ANCE REQUIREMENTS 3.6.D Relief Valves MSRV 2-PCV-1-19 2-PCV-1-22 2-PCV-1-23 2-PCV-1-31 2-PCV-1-179 2-PCV-1-180 Affected A eas Zones 2-3, 2-4, 9 2-2 2-2 2-3, 2-4, 9 2-3, 2-4, 9 2-2 3.4.The integrity of the relief valve bellows shall be continuously monitored when valves incorporating the bellows design are installed.
Trip setting of     100 mr/hr for the monitors in the refueling zone are based upon initiating normal ventilation isolation and SGTS operation so that none of the activity released during the refueling accident leaves the Reactor Building via the normal    ventilation path but rather all the activity is   processed by the SGTS.
At least one relief valve shall be disassembled and inspected each operating cycle.3.6.E.J~et Pum s 3.E.E~Jet Pum s Whenever the reactor is in the STARTUP or RUN modes, all jet pumps shall be OPERABLE.If it is determined that a jet pump is inoperable, or if two or more jet pump flow instrument failures occur and cannot be corrected within 12 hours, an orderly shutdown shall be initiated and the reactor shall be placed in the COLD SHUTDOWN CONDITION within 24 hours.Whenever there is recirculation flow with the reactor in the STARTUP or RUN modes with both recirculation pumps running, jet pump operability shall be checked daily by verifying that the following conditions do not occur simultaneously:
Flow  integrators  and sump fill rate Aand determine leakage in the drywell.
a.The two recircu-tion loops have a flow imbalance of 15%or more when the pumps are operated at the same speed.b.The indicated value of core flow rate varies from the value derived from loop flow measurements by more than 10%.BFN Unit 2 3.6/4.6-11 c.The diffuser to lower plenum differential pressure reading on an individual jet pump varies from the mean of all jet pump differential pressures by more than 10%.
pump out rate timers are used to system whereby the time interval to fill  a known volume will be utilized to provide a backup.     An air sampling system is also provided to detect leakage inside the primary containment (See Table 3.2.E).
>2'j h, t 6 3.6/4.6 6~3.6.D/4.6.D (Cont'd)el I The requirements established above apply when the nuclear, system canj be pressurized above ambientPconditions.
For each parameter monitored, as listed in Table 3.2.F, there are two channels of instrumentation except as noted. By comparing readings between the two channels, a near continuous surveillance of instrument performance is available. Any deviation in readings will initiate an early recalibration, thereby maintaining the quality of the instrument readings. A single channel of instruments at the backup control panel provides the additional indication of reactor vessel water level and reactor pressure. This indication is available to ensure safe shutdown capability from outside the control room.
These requirements-are.applicable at nuclear: system pressures below normal operating pressures because abnormal openational transients could possibly start at these,conditions such that eventual overpressure relief would be needed.However, these transients are much less severe, in terms of pressure, than those starting at rated conditions.
Instrumentation is provided for isolating the control room and initiating a  pressurizing system that processes outside air before supplying the control room. An accident signal that isolates primary containment it to will also automatically isolate the control room and initiate the emergency pressurization system.       In addition, there are radiation monitors in the normal ventilation system that will isolate the control room and initiate the emergency pressurization system.         Activity required to cause automatic actuation is about one mRem/hr.
The valves need>not be functional when the vessel head is, removed, since the nuclear system cannot be pressurized.
Because of the constant surveillance and control exercised by TVA over the Tennessee Valley, flood levels of large magnitudes can be predicted in advance of their actual occurrence. In        all cases, full advantage will be taken of advance warning to take appropriate action whenever reservoir levels above normal pool are predicted; however, the plant flood protection is always in place and does not depend in any way on advanced warning. Therefore, during flood conditions, the plant        will be permitted to operate until water begins to run across .;the top of the pumping station at elevation      565. Seismically qualified, redundant level switches each powered from a separate division of power are provided at the pumping station to give main control room indication of this condition. At that time an orderly shutdown of the plant will be initiated, although surges even to a depth of several feet over the pumping station deck will not cause the loss of the main condenser circulating water pumps.
e In fire area 9 and fire zones 2-2, 2-3, and 2-4, a postulated,fire could potentially disable all but three MSRVs.If one of these three MSRVs was the MSRV,allowed by the technical specifications,to be indefinitely out of service, then the required number of three MSRVs for safe shutdown would not be>available.
BFN                                        3.2/4.2-69 Unit 2
If one of the required MSRVs is out of service, an hourly patrolling fire watch will be established in the appropriate fire areas/zones ps a compensatory measure.For a fire in any other fire areas/zones of the plant, at least four MSRVs.would be available.
Thus, even if one MSRV is out of service, the required number of three MSRVs would remain available for safe shutdown.e REFERENCES 1.Nuclear System Pressure Relief System (BFNP FSAR Subsection 4.4)I 2.=Amendment 22 in response to AEC Question 4.2 of December 6, 1971.3."Protection Against Overpressure" (ASME Boiler and Pressure Vessel Code, Section III, Article 9)4.Browns Ferry Nuclear Plant Design Deficiency Report-Target Rock Safety-Relief Valves, transmitted by J.E.Gilleland to F.E.Kruesi, August 29, 1973 5.Generic Reload Fuel Application, Licensing Topical Report, NEDE-24011-P-A and Addenda 3.6.E/6.6.E
~Jet Pum e Failure of a jet pump nozzle assembly holddown mechanism, nozzle assembly and/or riser, would increase the cross-sectional flow area for blowdown following.the design basis double-ended line break.Also, failure of the diffuser would eliminate the capability to reflood the core to two-thirds height level following a recirculation line break.Therefore, if a failure occurred, repairs must be made.The detection technique is as follows.With the two recirculation pumps balanced in speed to within g 5 percent, the flow rates in both recirculation loops will be verified by control room monitoring instruments.
If the two flow rate values do not differ by more than 10 percent, riser and nozzle assembly integrity has been verified.BFN Unit 2 3.6/4.6-31 4 t f I.h S.6/4.6 gASES 3.6.E/4.6.E (Cont'd)If they do differ by 10 percent or more~the core flow rate measured by the jet pump diffuser differential pressure system must be checked against the core flow rate derived from the measured values of loop flow to core flow correlation.
If the difference between measured and derived core flow rate is 10 percent or more (with the derived value higher)diffuser measurements will be taken to define the location within the vessel of failed jet pump nozzle (or riser)and the unit shut down for repairs.If the potential blowdown flow area is increased, the system resistance to the recirculation pump is also reduced;hence, the affected drive pump will"run out" to a substantially higher flow rate (approximately 115 percent to 120 percent for a single nozzle failure).If the two loops are balanced in flow at the same pump speed, the resistance characteristics cannot have changed.Any imbalance between drive loop flow rates would be indicated by the plant process instrumentation.
In addition, the affected jet pump would provide a leakage path past the core thus reducing the core flow rate.The reverse flow through the inactive jet pump would still be indicated by a positive differential pressure but the net effect would be a slight decrease (3 percent to 6 percent)in the total core flow measured.This decrease, together with the loop flow increase, would result in a lack of correlation between measured and derived core flow rate.Finally, the affected jet pump diffuser differential pressure signal would be reduced because the backflow would be less than the normal forward flow.A nozzle-riser system failure could also generate the coincident failure of a jet pump diffuser body;however, the converse is not true.The lack of any substantial stress in the jet pump diffuser body makes failure impossible without an initial nozzle-riser system failure.3.6.F/4.6.F Recirculation Pum 0 erat on Steady-state operation without forced recirculation will not be permitted for more than 12 hours.And the start of a recirculation pump from the natural circulation condition will not be permitted unless the temperature difference between the loop to be started and the core coolant temperature is less than 75 F.This reduces the positive reactivity insertion to an acceptably low value, Requiring the discharge valve of the lower speed loop to remain closed until the speed of the faster pump is below 50%of its rated speed provides assurance when going from one-to-two pump operation that excessive vibration of the jet pump risers will not occur.3.6.G/4.6.G Structural Inte rit The requirements for the reactor coolant systems inservice inspection program have been identified by evaluating the need for a sampling~examination of areas of high stress and highest probability of failure in the system and the need to meet as closely as possible the requirements of Section XI, of the ASME Boiler and Pressure Vessel Code.BFN Unit 3.6/4.6-32 i ,i 7J, 3~.6/4.6 BASES'.6.G/4.6.G'Cont'd)'he<<prqgram
'reflects the built-in limitations.
of access to.-the reactor coolant systemsi~-~~.,hr g r ev~hh~V'~tv.p~r~~vV), g~~V It is iintdnded that the required.-examinations and.inspection be c'ompleted during'each 10-year'~interval.
~Thevperiodic examinations are to be.done during:refueling outages'or other-extended plant-shutdown periods.Only proven nondestructive testing techniques will be.usedt I'r I 0 More frequent inspections.
shall be performed on certain circumferential pipe welds as)listed iniSection 4.6iG.4 to provide additfonal protection against pipe, whip: These welds were selected in respect to their distance from hangers or supports wherein a failure of the weld would permit the unsupported segments of pipe to strike the drywell wall or nearby auxiliary systems or control systems.Selection was based on judgment from actual plant observation of hanger and support locations and review of.drawingsc Inspection of all these welds during each 10-year inspection interval will result in three additional examinations above the requirements of Section XI of ASME Code.An augmented inservice surveillance program is required to determine whether any stress corrosion has occurred in.any stainless steel piping, stainless components, and highly-stressed alloy steel such as hanger springs, as a result of environmental conditions associated with the March 22, 1975 fire.f REFERENCES l'~V I V l.Inservice Inspection and Testing (BFNP FSAR Subsection 4.12)2.Inservice Inspection of'Nuclear Reactor Coolant Systems, Section XI, ASME Boiler and Pressure Vessel Code 3: ASME Boiler and Pressure Vessel Code, Section III (1968 Edition)I h 4.American'Society for"Nondestructive Testing No.SNT-TC-1A (1968 Edition)1 ll llr Q~V hl f~I I h t V~lt I V 5.Mechanical Maintenance Instruction 46 (Mechanical Equipment, Concrete, and Structural Steel Cleaning Procedure for Residue From Plant Fire-'Units 1 and 2)V h~~h~, V 6.Mechanical Maintenance Instruction 53 (Evaluation of Corrosion Damage of Piping Components Which Were Exposed to Residue From March 22, 1975 Fire)7.Plant Safety Analysis (BFNP FSAR Subsection 4.12)BFN Unit 2 3.6/4.6-33 II l 4io~
.'4'UXILIARY ELEC AL SYSTEM LIMITING CONDITIONS FOR OPERATION 3.9 AUXIL ARY ELECTRICAL SYSTEM A licabilit SURVEILLANCE REQUIREMENTS


===4.9 AUXILIARY===
C r
ELECTRICAL SYSTE A licabilit Applies to all the auxiliary electrical power system.~Ob ective Applies to the periodic testing requirements of the auxiliary electrical system.~Ob ective To assure an adequate supply of electrical power for operation of those systems required for safety.Verify the operability of the auxiliary electrical system.S ecificatio A.Auxilia Electrical E ui ment A.Auxi ia Electrical S ste 1.The reactor shall not be started up (made critical)from the COLD CONDITION unless the following are satisfied:
 
1.Diesel Generators a.Diesel generators A, B, C, D, 3A, 3B, 3C and 3D OPERABLE.b.Requirements 3.9.A.3 through 3;9.Ae6 are met.c.At least two of the following offsite power sources are available:
TABLE  3.5-1 MINIMUM RHRSW AND EECW PUMP ASSIGNMENT Time                                    Minimum Limit                              Service Assignment Da s                    RHRSW                          EECW(B)
a.Each diesel generator shall be manually started and loaded once each month to demonstrate operational readiness.
(D)(E)(G)                    (A)(H)
The test shall continue for at, least a 1-hour period at 75%of rated load or greater.(1)The 500-kV system is available to the units 1 and 2 shut-down boards through the unit 1 station-service transformer
Indefinite                  7 (C)(D)(E)(F)(G)              (A)(C)(F)(H) 30                      7  or 6                      2  ox'3 (D)(E)(G)                    (A)(H) 6                            2 (A)    At least one operable      pump must be    assigned to each header.
-TUSS 1B with no credit taken for the two 500-kV Trinity lines.If the unit 2 station-service transformer is the second source, a minimum of two 500-kV lines must be available.
(B)    Only automatically    starting  pumps may be    assigned to  EECW  header service.
During the monthly generator test, the.diesel generator starting air compressor shall be checked for operation and its""i''-".-ec"-rge air receivers.
(C)   Nine pumps must be    OPERABLE. Either configuration is acceptable:
The operation of the diesel fuel oil transfer pumps shall be demonstrated, and the diesel starting time to reach rated voltage and speed shall be logged.BFN Unit, 2 3.9/4.9-1
7 and 2  .or 6 and 3  (except reduced by notes      D and E).
~l l 1, I, r'./4.ILIAR EL C L S.S.M.LIMITING,CO~IONS FOR OPERATION SURVEILLANCE REQUIREMENTS 3.9.A<,,<Auxil E ct ical.E ui ment 2..<Zhg peqctor shall not be started up (made critical)>gzom the, POT.STANDBY-CONDITION ,unl,esp.all,,of.,the.f'ollowing conditions are satisfied:
(D)    Requirements may be reduced by two        for  each  unit with fuel unloaded.
4.9.A.>kAuxil ar E ecerica.S ste 2., DC Power System-Unit Batteries (250-V), Diesel-Generatoz Batteries (125-V)and Shutdown Board;-Batteries ,(250;V),a...At least one offsite power source is available as ,,specif jed iu,.3.9.A.l,c.
(E)    For units with fuel loaded, the minimum RHRSW pump requirements may be reduced by one pump for each unit that has been in COLD SHUTDOWN CONDITION for more than 96 hours.        At least 2 of the required pumps must be powered from separate electric power sources with their associated RHR pumps, heat exchangers, and diesel generator(s)
a~~1~~~~"C~tl:<'I"" I'I~~k~~I II lt'b.Three units 1 and 2 diesel generators, and three-unit 3 diesel generators shall be OPERABLE.t~~'I ,,a.Every week the specific gravity, voltage and temperature of the pilot.i.cell and<overall.battery voltage shall be measured and logged.b.Every three months the measurement.
OPERABLE.
shall-be made of voltage of each cell to nearest 0.1 volt, specific gravity of each cell, and temperature of every fifth cell.These measurements shall be logged.c.An additional source of power, consistjng of one of the following:
(F)     These minimum    service requirements are also applicable to startup from a  COLD SHUTDOWN CONDITION.
~~(1)A: second,offsite
(G)    RHRSW pumps D2 and     either Cl or    C2 must be OPERABLE during unit 2 REACTOR POWER OPERATION.      If D2  or both Cl and C2 pumps are inoperable, within the next hour establish a patrolling fire watch fire areas/zones shown in Table 3.5-2 to ensure the affected              'n
.power source available as specified in 3.9;A.l;c.
      .fire .areas/zones are cheeked hourly.
(2)A fourth OPERABLEunits 1 and 2 diesel generator~>and afourth OPERABLE;ynit 3 diesel generator.
(H)    EECW pumps A3, B3, C3, and D3 must be OPERABLE during            unit  2 REACTOR POWER OPERATION.       If  one or more    of these pumps  is inoperable, within the next hour establish a patrolling fire watch in fire areas/zones shown in Table 3.5-2 to ensure the affected fire areas/zones are checked hourly.
ll It~d.Requirements 3.9.A.3, through 3.9.A.6.are met.c.A battery rated discharge (capacity) test shall be performed and the voltage, time, and output current measurements shall be logged at intervals not to exceed 24 months.It~~1 I BFN Unit 2 3.9/4.9-4 I 4h'A C]1 4 AUXIL AL SYSTEM LIMITING CONDITIONS FOR OPERATION SURVEILLANCE REQUIREMENTS 3.9.A.uxi a E ect cal E u ment 4.9.A.A i a E ectrica S stem 3.Buses and Boards Available 3~Logic Systems a.The respective start bus is energized for each common station-service transformer designated as an offsite power source.a~Both divisions of the common accident signal logic system shall be tested every 6 months to demonstrate that it will function on actuation of the core spray system of each reactor to provide an automatic start signal to all 4 units 1 and 2 diesel generators.
BFN                                            3.5/4.5-11 Unit 2
b.The 4-kV bus tie board is energized and capable of supplying power to the units 1 and 2 shutdown boards if a cooling tower transformer is designated as an offsite power source.b.Once every 6 months, the condition under which the 480-volt load shedding logic system is required shall be simulated using pendant test switches and/or pushbutton test switches to demonstrate that the load shedding logic system would initiate load shedding signals on the diesel auxiliary boards, RMOV boards, and the 480-V shutdown boards.c.The units 1 and 2 and unit 3 4-kV shutdown boards are energized.
 
BFN Unit 2 3.9/4.9-5 4 A ILIARY ELEC CAL SYSTEM I l~LIMITING CONDITIONS FOR OPERATION 3.9.A.Auxilia Electrical E ui ment~is=~j'~~~3.9.A.3.(Cont'd)SURVEILLANCE REQUIREMENTS 4.9.A.Auxilia Electrical S stem h F s C d.The 480-V shutdown boards ,1A, 2A";;2B, 3A, ancl 3B'are"energized.
TABLE              3.5-2 RHRSW/EECW                                                          Fire Areas/Zones to Pump  Inoperable                                                    Establish Patrolling Fire Watch Cl,and            C2                                            2-2, 2-5, 16,          18 I  ~ Il    ~ ~
'~<~~4 ll~~I~e.The units 1 and 2 an'd unit"3 auxiliary boards are energized.
D2'""                                                            2-1', 2-3; 2-4, 2-6, 9
@r f.Loss of voltage and degraded voltage relays OPERABLE on 4-kV shutdown boards A, B, C, D, 3EA, 3EB, 3EC, and 3ED.g.Shutdown buses 1 and'2 energized.
                    'Aa, i)                                    ~
h.The 480-V reactor motor-operated valve (RMOV)boards 2D 8 2E are energized with motor-'generator (mg)sets 2DN, 2DA, 2EN, and 2EA in service.i.The 480-V reactor motor-operated valve (RMOV)board 2C is energized.
J I
The 4-kV bus tie board is available for cross-tying units 1 and 2 and unit''-kV shu'tdown boards.4.The three 250-V unit batteries, the four units 1 and 2 shutdown board batteries and 3EB shutdown board battery, a battery charger for.each battery, and associated battery boards are OPERABLE.4.Undervoltage Relays a.(Deleted)b.Once every 6 months, the the conditions u"..dcr which the loss of voltage and degraded voltage relays are required shall be simulated with an undervoltage on each shutdown board to demonstrate that the associated diesel generator will start.BFN Unit 2 3.9/4.9-6 4 AUXILIARY ELEC uAL SYSTEM LIMITING CONDITIONS FOR OPERATION 3.9.A.Auxilia Electrical E ui ment SURVEILLANCE REQUIREMENTS 4.9.A.Auxi ia Electrical S stem 4.9.A.4.(Cont'd)c.The loss of voltage and degraded voltage relays which start the-diesel generators from the 4-kV shutdown boards shall be calibrated annually for trip and reset and the measurements logged.These relays shall be calibrated as specified in Table 4.9.A.4.c.
A3                                                              2-1, I
d.4-kV shutdown board voltages shall be recorded once every 12 hours.5.Logic Systems a.Common accident signal logic system is OPERABLE.b.480-V load shedding logic system is OPERABLE.5.480-V RMOV Boards 2D and 2E a.Once per operating cycle the automatic transfer feature for 480-V RMOV boards 2D and 2E shall be functionally tested to verify auto-transfer capability.
2-2, 2-3, 2-4, 2-5, 2-6,       9 B3                                                              16, 18 C3 g  ~
6.Diesel Fuel a.There shall be a minimum of 103,300 gallons of diesel fuel in the standby diesel-generator fuel tanks for units 1 and 2.b.There shall be a minimum.of 103,300 gallons of diesel fuel in the standby diesel-generator fuel tanks for units 3.BFN Unit 2 3.9/4.9-7 e~e e'3.9/4.9 AUXILIARY ELECTRICAL SYSTEM LIMITING" CONDITIONS FOR'PERATION SURVEILLANCE REQUIREMENTS"'.9.B.0 eration with Ino erable~Eui mant 4.9.B.'0 eration with Ino erable~Eui mant Mhenever.the reactor is in STARTUP mode or RUN mode and not in a COLD COHDITIOH, the availability of electric power shall be as specified in 3.9.A except as specified herein.e H 1.From and after the date that only one offsite power source is available, REACTOR POMER OPERATION is permissible for 7 days.Mhen only one"offsite power source is OPERABLE, all uriits 1 and 2 diesel generators must be demonstrated to be OPERABLE within 24 hours, and power availability for the associated boards shall be verified within one hour and at least once per 8 hours thereafter.
2-1,'-2,          '2-3, 2-4, 2-5, 2-6, 9 D3                                                              16, 18 k''  <~c      ~ l~ o> ~ ~
e 2.a 2.b From and after the date that the 4-kV bus tie board becomes INOPERABLE, REACTOR POMER OPERATION is permissible indefinitely provided one of the required offsite power sources is" not'supplied from the 161-kV system through the'bus'ie board.~e If the 4-kV bus tie board'ecomes unavailable for cross-tying, units 1 and 2 and unit 3 4-kV,shutdown boards, within the next hour establish a patrolling fire watch in fire zones 2-3 and 2-4 to ensure that the affected fire zones are checked hourly.2ea Mhen a required offsite power source'is unavailable to'unit 1 because the 4-kV bus tie board or a start bus is INOPERABLE, all unit 1 and 2 diesel generators shall be demonstrated OPERABLE within 24 hours, and power availability for the associated boards shall be verified within one hou.and at'ea"t, once per 8 hours there-after.The remaining offsite source and associated buses shall be checked to be energized daily.2.b Ho additional surveillance required.BFH Unit 2 3.9/4.9-8 4.AUXILIARY ELE CAL S STEM LIMITING CONDITIONS FOR OPERATION 3.9.B.0 eration With Ino erable~Euf ment SURVEILLANCE REQUIREMENTS 4.9.B.0 eration With Ino erable E~ul ment 3.a When one of the units 1 and 2 diesel generator is INOPERABLE, continued REACTOR POWER OPERATION is permissible during the succeeding 7 days, provided that 2 offsite power sources are available as specified in 3.9.A.l.c and all of the unit 2 CS, RHR (LPCI and containment cooling)systems, and the remaining three units 1 and 2 diesel generators are OPERABLE.If this requirement cannot be met, an orderly shutdown shall be initiated and the reactor shall be in the COLD SHUTDOWN CONDITION within 24 hours.3.a When one of the units 1 and 2 diesel generators is found to be INOPERABLE, all of the CS, RHR (LPCI and contain-ment cooling)systems and the remaining diesel generators and associated boards shall be demonstrated to be OPERABLE immediately and daily thereafter.
                                        "I LA ~ i  . ~ ~        ~= ~
3.b When one unit 3 diesel generator is inoperable, continued REACTOR POWER OPERATION is permissible during the succeeding 7 days.If this require-ment cannot be met, an orderly shutdown shall be initiated and the reactor shall be in a COLD SHUTDOWN CONDITION within 24 hours.3.b No additional surveillance required.4.a When one units 1 and 2 4-kV shutdown board is INOPERABLE, continued REACTOR POWER OPERATION is permissible for a period of 5 days.provided that 2 offsite power sources are available as specified in 3.9.A.l.c and the remaining units 1 and 2 4-kV shutdown boards~e~4.a When one units 1 and 2 4-kV shutdown board 4~-A~e e.v eeeeee~V ll t INOPERABLE, all remaining units 1 and 2 diesel generators associated with the remaining 4-kV shutdown boards shall be demonstrated to be OPERABLE within 24 BFN Unit 2 3.9I4.9-9 4 AUXILIARY ELE CAL SYSTE LIMITING CONDITIONS FOR OPERATION 3.9.B.0 eration With Ino erable E~ui ment SURVEILLANCE REQUIREMENTS 4.9.B.0 eration With Ino erable~Euf ment and associated diesel generators, and unit 2 CS,-RHR (LPCI and containment cooling}systems, and all unit 2 480-V emergency power boards are OPERABLE.If this.requirement cannot be met, an orderly shutdown shall be initiated and the reactor shall be in the COLD SHUTDOWN CONDITION within 24 hours.hours and power.availability for the remaining 4-kV shut-down boards shall be verified within 1 hour and at least once per 8 hours thereafter.
                                                  ~         ~
4.b When one, unit 3 4-kV shutdown board is inoperable, continued REACTOR POWER OPERATION is permissible for a period of 5 days.If this requirement cannot be met, an orderly shutdown shall be-initiated and the reactor shall be in a COLD SHUTDOWN CONDITION within 24 hours.4.b No additional surveillance required.5.When one of the shutdown buses is INOPERABLE, REACTOR POWER OPERATION is permissible for a period of 7 days.5.When a shutdown bus is found to be INOPERABLE, all 1 and 2 diesel generators shall be proven OPERABLE within 24 hours.6.a 6.b I When one of the units 1 and 2 480-V diesel auxiliary-boards becomes INOPERABLE, REACTOR POWER OPERATION is permissible for a period ,of R clays, When one of the unit 3 480-V diesel auxiliary boards become INOPERABLE, REACTOR POWER OPERATION is permissible for a period of 5 days.6.When one units 1.and 2 diesel auxiliary board is found to be INOPERABLE, each unit 1 and 2 diesel generator shall be proven OPERABLE within 24 hours and power availability for the remaining diesel auxiliary board shall be verified within 1 hour and at least once per 8 hours thereafter.
                                                                                        'I,      1 Jr  ~                                         ~         ~ g,  ~ ~
BFN Unit 2 3.9/4.9-10 l l 4 AUXILIARY ELECTRICAL SYSTEM e LIMITING CONDITIONS FO ERATION SURVEILLA REQUIREMENTS 3.9.B 0 eration With Ino erable EeeEui ment 4.9.B 0 eration With Ino e ab e E~ui ment 7.From and after the date that one of the three 250-V unit batteries and/or its associated battery board is found to be INOPERABLE for any reason, continued REACTOR POWER OPERATION is permissible during the succeeding 7 days.Except for routine surveillance testing, NRC shall be notified within 24 hours of the situation, the precautions to be taken during this period, and the plans to return the failed component to an OPERABLE state.6.b No additional surveillance required.8.From and after the date that one of the 250-V shutdown board batteries and/or its associated battery board is found to be INOPERABLE for any reason, continued REACTOR POWER OPERATION is permissible during the succeeding five.days in accordance with 3.9.B.7.9.When one division of the logic system is INOPERABLE, continued REACTOR POWER OPERATION is permissible under this condition for seven days, provided the CSCS requirements listed in Specification 3.9.B.3 are satisfied.-
BFN                                                                    3.5/4.5-lla Unit 2
The NRC shall be notified within 24 hours of the situation, the precautions to be.taken during this period, and the plans.to.saturn the fa'led component to an OPERABLE state.10.(deleted)The following limiting conditions for operation exist for the undervoltage relays which start the diesel generators on the 4-kV shutdown boards.BFN Unit 2 3.9/4.9-11 4 AUXILIARY ELEC AL S STE LIMITING CONDITIONS FOR OPERATION 3.9.B.0 eration W t no crab e~Eui ment 3.9.B.ll (Cont'd)SURVEILLANCE REQUIREMENTS a.The loss of voltage , relay channel which starts the diesel generator for a complete loss of voltage on a 4-kV shutdown board may be INOPERABLE for 10 days provided the degraded voltage relay channel on that shutdown board is OPERABLE (within the surveillance schedule of 4.9.A.4.b).
 
b.The degraded voltage relay channel which starts the diesel generator for degraded voltage on a 4-kV shutdown board may be INOPERABLE for 10 days provided the loss of voltage relay channel.on that shutdown board is OPERABLE (within the surveillance.
3.5    Bases    (Cont'd)
The suppression    chamber can be drained when the    reactor vessel pressure is atmospheric, irradiated fuel is in the reactor vessel, and work is not in progress which has the potential to drain the vessel. By requiring the fuel pool gate to be open with the vessel head removed, the combined water inventory in the fuel pool, the reactor cavity, and the separator/dryer pool, between the fuel pool low level alarm and the reactor vessel flange, is about 65,800 cubic feet (492,000 gallons).
This will provide adequate low-pressure cooling in lieu of CSS and RHR (LPCI and containment cooling mode) as currently required in Specifications 3.5.A.4 and 3.S.B.9. The additional requirements for providing standby coolant supply available will ensure a redundant supply of coolant supply. Control rod drive maintenance may continue during this period provided no more than one drive is removed at a time unless blind flanges are installed during the period of time CRDs'are not in place.
Should the    capability for providing flow through the cross-connect lines  be lost, a 10-day repair time is allowed before shutdown is required. This repair time is justified based on the very small probability for ever needing RHR pumps and heat exchangers to supply          an adjacent unit.
REFERENCES
: 1. Residual Heat Removal System        (BFNP FSAR subsection 4.8)
: 2. Core Standby Cooling Systems        (BFNP FSAR Section 6) 3.5.C. RHR Service    Water  S  stem and Emer enc    E ui ment Coo  n  Water S stem EECWS There are two    EECW  headers  (north  and south) with four automatic starting    RHRSW  pumps on each    header. All components requiring emergency cooling water are fed from both headers thus assuring continuity of operation        if either header is operable. Each header alone can handle the flows to all components. Two RHRSW pumps can supply the full flow requirements of all essential EECW loads for any abnormal or postaccident situation.
In fire areas 9,     16 and 18 and fire zones 2-lp 2 2p 2 3p 2 4p 2-5, and 2-6,  a  postulated fire could result in only two EECW pumps being available that are required by the plant Appendix R evaluation. If one of these .two remaining EECW pumps was the one allowed by the technical specifications to be indefinitely out of service, then the required two EECW pumps for safe shutdown would not be available.           If  one of the required EECW pumps is out of service, a hourly patrolling fire watch will be established in the appropriate fire area/zones as a compensatory measure.       For a fire in any other areas/zones of the plant, adequate RHRSW swing/EECW pumps are available to supply necessary cooling water to the diesel generators, even EECW pumps is out of service.
if one of the BFN                                          3.5/4.5-26 Unit 2
 
Ijh 3.5      BASES  (Cont'd)
There are four RHR heat exchanger headers (A, B, C, 8 D) with one RHR heat exch'anger. from each unit on each header. There are two RHRSW
                                                                ~
pumps .on each header; one normally assigned to each header (A2,-B2, C2, or D2) and one on alternate assignment-(A1, Bl, Cl, or Dl). One RHR h'eat exchanger header can adequat'ely deliver~the" flow supplied by both RHRSW pumps to any two of the three RHRSW heat exchangers      on the header; One RHRSW pump can'upply the full flow requirement of one RHR heat exchanger. Two,RHR exchangers can more than adequately handle the cooling requirements of one unit in any abnormal or postaccident situation.
                                          ~
The RHR    Service Water, System was designed as a shared system for three units. The specification, as written, is conservative when consideration is given to particular pumps being out of service and to possible valving arrangements.      If  unusual operating conditions arise such that more pumps are out of service than allowed by this specification, a special case request may be made to the NRC to allow continued operation assured.
if ll the actual system cooling requirements can be Should three      of the four RHRSW pumps normally or alternately assigned to the RHR heat exchanger headers supplying the standby coolant supply connection become inoperable, capability for long-term fluid makeup to the unit reactor and for cooling of the unit containment remains operable. Because of the availability of makeup and cooling capability which is demonstrated to be operable immediately and with specified subsequent surveillance, a 30-day repair period is justified. Unit 2 may be supplied standby coolant from either of four pumps        Bl, B2, Dl, or D2. Should the capability to provide standby coolant supply be lost, a 10-day repair time is justified based on the low probability for ever needing the standby coolant supply.
The   plant Appendix R evaluation requires that either RHRSW pump Cl or D2 be    available, however both pumps are required to be operable to ensure the one required RHRSW pump is available for a specific fire location. If one of the two required RHRSW pumps is out of service, a hourly patrolling fire watch will be established in the appropriate fire    areas/zones  as a compensatory measure.
3.5.D  E  ui  ment Area Coo ers II There is an equipment area cooler for each RHR pump and an equipment area cooler for each set (two pumps, either the A and C or B and D pumps) of core spray pumps. The equipment area coolers take suction near the cooling air discharge of the motor of the pump(s) served and discharge air near the cooling air suction of the motor of the pump(s) served. This ensures that cool air is supplied for cooling the pump motors.
BFN                                          3.5/4.5-27 Unit  2
 
tg
,pl
    ~~
 
3.5    BASES  (Cont'd)
The equipment area coolers also remove the pump, and equipment waste heat from the basement rooms housing the engineered safeguard equipment. The various conditions under which the operation of the equipment air coolers is required have been identified by evaluating the normal and abnormal operating transients and accidents over the full range of planned operations. The surveillance and testing of the equipment area coolers in each of their various modes is accomplished during the testing of the equipment served by, these coolers. This testing is adequate to assure the operability of the equipment area coolers.
REFERENCES
: 1. Residual Heat Removal System    (BFNP FSAR paragraphs  4.8.9.1 and 4.8.9.2)
: 2. Core Standby Cooling System (BFNP FSAR subsection      6.7) 3.S.E. Hi h Pressu    e Coolant In ection  S  stem  PCXS The HPCIS  is provided to assure that the reactor core is adequately cooled to limit fuel clad temperature in the event of a small break in the nuclear system and loss of coolant which does not result in rapid depressurization of the reactor vessel. The HPCIS permits the reactor to be shut down while maintaining sufficient reactor vessel water level inventory until the vessel is depressurized.       The HPCIS continues to operate until reactor vessel pressure is below the pressure at which LPCI operation or core spray system operation maintains core cooling.
The  capacity of the system is selected to provide this required core cooling. The HPCI pump is designed to pump 5,000 gpm at reactor pressures between 1,120 and 150 psig. Two sources of water are available. Initially, water from the condensate storage tank is used instead of injecting water from the suppression pool into the reactor.
When  the HPCI System begins operation, the reactor depressurizes more rapidly than would occur    if HPCI was not initiated due to the condensation of steam by the cold fluid pumped into the reactor vessel by the HPCI system. As the reactor vessel pressure continues to decrease, the HPCI flow momentarily reaches equilibrium with the flow through the break. Continued depressurization caused the break flow to decrease below the HPCI flow and the liquid inventory begins to rise.
This. type, of response. is, typical.af the small breaks., The core never uncovers and is continuously cooled throughout the transient so that no core damage of any kind occurs for breaks that lie within the capacity range of the HPCI.
The minimum  required NPSH for HPCI is 21 feet. There is adequate elevation head between the suppression pool and the HPCI pump, such that the required NPSH is available with a suppression pool temperature up to 1404F with no containment back pressure.
BFN                                        3.5/4.5-28 Unit 2
 
3.5    BASES        (Cont'd)
The HPCIS serves as a backup                              to the RCICS;as a source of feedwater makeup during primary csystem                            isolation'conditions., The ADS .serves as                  a backup, to the'HPCIS .for reactor depress'surization for postulated transients and acdident. Both these systems are checked for.
operabilit:y i8 the HPCI is determined to.be. inoperable.; Considering the iredundant. systems, an allowable r'epair time of. seven days was selectedi          ~ ~
II U ~      ~ ~        ~                C
            ~      "        6 ~  I E  $      Jj  II I y  ~,  $      ~ ~
                                                                                        ~,(
                                                                                                  ~ ~
The HPCI 'and RCIC as-well-as all.other Core Standby Cooling Systems must. be operable when starting up from a Cold Condition.                                               It is realized that the HPCI is not designed to operate at                                              full  capacity until'eactor pressure exceeds 150 psig and the steam supply to the HPCI      turbine is automatically isolated before the reactor pressure decreases below 100 psig.                            It      is the intent of this specification to assure that when the reactor is being started up from a Cold Condition, the HPCI is not known to be inoperable.
3.5.F  Reactor Core Iso ation Cool n                                S  stem        RCICS CI                              S The      various conditions under which the RCICS plays an essential role in providing makeup water.to the>reactor vessel have. been identified, by evaluating -the various 'plant events over the full range of planned operations. The specifications ensure that the function for which the RCICS was designed will be available when needed.                                                The minimum required NPSH for RCIC is 20 feet.                            There is adequate elevation head between the suppression pool and the RCIC pump, such that the required NPSH is available with a suppression pool temperature up to 140'F with no containment back pressure.
Because        the low-pressure cooling systems (LPCI and core spray) are capable of providing all the cooling required for any plant event when nuclear system pressure is below 122 psig, the RCICS is not required below this pressure.                      Between.122 psig and 150.psig the RCICS need not provide its design flow, but reduced flow is required for certain events. RCICS design flow (600 gpm) is sufficient to maintain water level above the top of the active fuel for a complete loss of feedwater flow at design power (105 percent of rated)..
                      ~ s  ~        ~  =    II (    1       e    ss      li Consideration of. the availability of the RCICS reveals that the average risk- associated with failure of the RCICS to cool the core when r'equired is not increased                          if  the RCICS is inoperable for no longer than seven days, provided that the HPCIS is operable during this period.
REFERENCE
: 1. Reactor Core            Isolation Cooling                      System (BFNP FSAR Subsection            4.7) 3.5.G  Automatic        De      ressurization              S  stem        ADS
                                                                                                ~ I This specification ensures the operability of the ADS under all conditions for which the depressurization of the nuclear system is an essential response to station abnormalities.
BFN                                                                    3.5/4.5-29 Unit  2
 
0 k (1
t
,I
,I
 
4.6    PRIMARY SYSTEM BOUNDARY I        s LIMITING CONDITIONS   FO    ERATION                  SURVE    ANCE REQUIREMENTS 3.6.D    Relief Valves MSRV      Affected    A eas Zones                3. The  integrity of    the relief  valve bellows 2-PCV-1-19    2-3, 2-4,    9                           shall be continuously 2-PCV-1-22    2-2                                     monitored when valves 2-PCV-1-23    2-2                                      incorporating the bellows 2-PCV-1-31    2-3, 2-4,    9                            design are installed.
2-PCV-1-179    2-3, 2-4,   9 2-PCV-1-180    2-2                                 4. At least one    relief  valve shall   be disassembled and inspected each operating cycle.
3.6.E. J~et Pum s                                  3. E.E  ~Jet Pum s Whenever the reactor is in the                       Whenever    there is STARTUP  or RUN  modes,  all jet                    recirculation flow with pumps shall be OPERABLE. If                          the reactor in the it is determined that a jet                          STARTUP or RUN modes pump is inoperable, or if two                        with both recirculation or more jet pump flow instrument                      pumps  running,   jet  pump failures occur and cannot be                          operability shall be corrected within 12 hours, an                        checked daily by orderly shutdown shall be                            verifying that the initiated and the reactor shall                       following conditions be placed in the COLD SHUTDOWN                        do  not occur CONDITION within 24 hours.                           simultaneously:
: a. The two recircu-tion loops have a flow imbalance of 15% or more when the pumps are operated at the same speed.
: b. The  indicated value of core flow rate varies from the value derived from loop flow measurements    by more than 10%.
: c. The  diffuser to lower plenum  differential pressure reading on an individual jet pump varies from the     mean of all jet pump differential    pressures by more than 10%.
BFN                                          3.6/4.6-11 Unit  2
 
>2
  'j h, t
 
6 3.6/4.6 6  ~
3.6.D/4.6.D (Cont'd) el                                                              I The requirements established above apply when the nuclear, system canj be pressurized above ambientPconditions. These requirements -are .applicable            at nuclear: system pressures below normal operating pressures because abnormal openational transients could possibly start at these,conditions such that eventual overpressure relief would be needed. However, these transients are much less severe, in terms of pressure, than those starting at rated conditions. The valves need>not be functional when the vessel head is, removed, since the nuclear system cannot be pressurized.
In fire area 9 and fire zones 2-2, 2-3, and 2-4, a postulated,fire could e
potentially disable all but three MSRVs. If one of these three MSRVs was the MSRV,allowed by the technical specifications,to be indefinitely out of service, then the required number of three MSRVs for safe shutdown would not be
      >  available. If one of the required MSRVs is out of service, an hourly patrolling fire watch will be established in the appropriate fire areas/zones ps a compensatory measure.         For a fire in any other fire areas/zones of the plant, at least four MSRVs .would be available. Thus, even if one MSRV is out of service, the required number of three MSRVs would remain available for safe shutdown.
e REFERENCES
: 1.      Nuclear System Pressure Relief System        (BFNP FSAR Subsection 4.4)
I
: 2.   =
Amendment 22    in response  to AEC  Question 4.2 of December 6, 1971.
: 3.      "Protection Against Overpressure"      (ASME  Boiler and Pressure    Vessel Code, Section    III, Article 9)
: 4.      Browns    Ferry Nuclear Plant Design Deficiency Report    Target Rock Safety-Relief Valves, transmitted by J. E. Gilleland to F. E. Kruesi, August 29, 1973
: 5.       Generic Reload Fuel Application, Licensing Topical Report, NEDE-24011-P-A and Addenda 3.6.E/6.6.E          ~Jet Pum e Failure of        a jet pump nozzle assembly holddown mechanism, nozzle assembly and/or riser,      would increase the cross-sectional flow area for blowdown following .the design basis double-ended line break. Also, failure of the diffuser would eliminate the capability to reflood the core to two-thirds height level following a recirculation line break.
made.
Therefore, if a failure occurred, repairs must be The    detection technique is as follows. With the two recirculation pumps balanced in   speed to      within g 5 percent, the flow rates in both recirculation loops will be  verified by control room monitoring instruments. If the two flow rate values do  not differ by more than 10 percent, riser and nozzle assembly integrity has been    verified.
BFN                                                3.6/4.6-31 Unit    2
 
4 t
f I.
h
 
S.6/4.6    gASES 3.6.E/4.6.E (Cont'd)
If they  do differ by 10 percent or more~ the core flow rate measured by the jet pump diffuser differential pressure system must be checked against the core flow rate derived from the measured values of loop flow to core flow correlation. If  the difference between measured and derived core flow rate is 10 percent or more (with the derived value higher) diffuser measurements will be taken to define the location within the vessel of failed jet pump nozzle (or riser) and the unit shut down for repairs. If the potential blowdown flow area is increased, the system resistance to the recirculation pump is also reduced; hence, the affected drive  pump will "run out" to a substantially higher flow rate (approximately 115 percent to 120 percent for a single nozzle failure).
If  the two loops are balanced in flow at the same pump speed, the resistance characteristics cannot have changed. Any imbalance between drive loop flow rates would be indicated by the plant process instrumentation. In addition, the affected jet pump would provide a leakage path past the core thus reducing the core flow rate. The reverse flow through the inactive jet pump would      still be indicated by a positive differential pressure but the net effect would be a slight decrease (3 percent to 6 percent) in the total core flow measured.       This decrease, together with the loop flow increase, would result in a lack of correlation between measured and derived core flow rate. Finally, the affected jet pump diffuser differential pressure signal would be reduced because the backflow would be less than the normal forward flow.
A  nozzle-riser system failure could also generate the coincident failure of a jet pump diffuser body; however, the converse is not true. The lack of any substantial stress in the jet pump diffuser body makes failure impossible without an initial nozzle-riser system failure.
3.6.F/4.6.F    Recirculation  Pum  0 erat  on Steady-state    operation without forced recirculation    will not  be permitted for  more than 12 hours. And the start of a recirculation  pump from the natural circulation condition will not be permitted unless the temperature difference between the loop to be started and the core coolant temperature is less than 75 F. This reduces the positive reactivity insertion to an acceptably low value, Requiring the discharge valve of the lower speed loop to remain closed until  the speed of the faster pump is below 50% of its rated speed provides assurance when going from one-to-two pump operation that excessive vibration of the jet pump risers will not occur.
3.6.G/4.6.G    Structural Inte  rit The requirements    for the reactor coolant systems inservice inspection program have been identified by evaluating the need for a sampling
    ~
examination of areas of high stress and highest probability of failure        in the system and the need to meet as closely as possible the requirements of Section XI, of the   ASME  Boiler  and Pressure  Vessel Code.
BFN                                          3.6/4.6-32 Unit
 
i
  ,i 7J,
 
3~.6/4.6 BASES'.6.G/4.6.G'Cont'd)'he<<prqgram
                                                        'reflects the built-in limitations. of access to.-the reactor coolant systemsi                                          ~      -        ~  ~.
        ,hr g              r          ev~hh            ~  V'
                                                              ~    tv    . p    ~  r~~    vV      ),  g        ~          ~          V It is iintdnded                                        that the required.-examinations and.inspection be c'ompleted during 'each 10-year'~interval. Thevperiodic examinations are to be. done                      ~
during:refueling outages 'or other-extended plant-shutdown periods.
Only proven nondestructive testing techniques will be.usedt r                                                                  I' I                            0 More        frequent inspections. shall be performed on certain circumferential pipe welds as )listed iniSection 4.6iG.4 to provide additfonal protection against pipe, whip: These welds were selected in respect to their distance from hangers or supports wherein a failure of the weld would permit the unsupported segments of pipe to strike the drywell wall or nearby auxiliary systems or control systems. Selection was based on judgment from actual plant observation of hanger and support locations and review of.drawingsc                                                            Inspection of all these welds during each 10-year inspection interval will result in three additional examinations above the requirements of Section XI of ASME Code.
An augmented                                        inservice surveillance program is required to                                                determine whether any                                      stress corrosion has occurred in. any stainless                                                  steel piping, stainless components, and highly-stressed alloy steel such                                                                                        as hanger springs, as a result of environmental conditions associated                                                                                        with the March 22, 1975                                          fire.
f REFERENCES                                                                                                          l '        ~
V                                                    I        V
: l.      Inservice Inspection                                                        and      Testing        (BFNP FSAR          Subsection 4.12)
: 2.      Inservice Inspection of'Nuclear Reactor Coolant Systems, Section XI, ASME                      Boiler and Pressure Vessel Code 3:      ASME I
Boiler                  and Pressure h
Vessel Code, Section                      III (1968  Edition)
: 4.      American 'Society for"Nondestructive Testing No. SNT-TC-1A (1968 Edition) 1 ll                llr      Q ~ V hl f      ~ I      I  h t V  ~ lt  I  V
: 5.      Mechanical Maintenance Instruction 46 (Mechanical Equipment, Concrete, and Structural Steel Cleaning Procedure for Residue From Plant Fire -'Units 1 and 2)                                                                            V        h  ~ ~  h ~,
V
: 6.      Mechanical Maintenance                                                          Instruction                53      (Evaluation of Corrosion        Damage of Piping Components                                                      Which Were Exposed to Residue From March 22, 1975 Fire)
: 7.      Plant Safety Analysis                                                          (BFNP FSAR            Subsection 4.12)
BFN                                                                                                          3.6/4.6-33 Unit  2
 
II l
4io~
 
.'      4  'UXILIARYELEC            AL SYSTEM LIMITING CONDITIONS      FOR OPERATION                  SURVEILLANCE REQUIREMENTS 3.9    AUXIL ARY ELECTRICAL SYSTEM                      4.9 AUXILIARYELECTRICAL      SYSTE A  licabilit                                        A    licabilit Applies to all      the  auxiliary                    Applies to the periodic electrical  power system.                            testing requirements of the auxiliary electrical      system.
          ~Ob  ective                                            ~Ob  ective To assure    an adequate supply of                    Verify the operability of the electrical  power for operation of                  auxiliary electrical system.
those systems required for safety.
S  ecificatio A. Auxilia    Electrical    E  ui ment        A. Auxi ia      Electrical  S ste
: 1. The  reactor shall not be                    1. Diesel Generators started up (made critical) from the COLD CONDITION unless the following are satisfied:
: a. Diesel generators A,                          a. Each  diesel B, C, D, 3A, 3B, 3C                                generator shall be and 3D OPERABLE.                                  manually started and loaded once each month
: b. Requirements 3.9.A.3                              to demonstrate through 3;9.Ae6 are                                operational readiness.
met.                                              The  test shall continue for  at, least a 1-hour
: c. At least two of the                                period at 75% of rated following offsite power                            load or greater.
sources are available:
(1) The 500-kV system is                          During the monthly available to the                            generator test, the units 1 and 2 shut-                        . diesel generator down boards through                          starting air compressor the unit  1  station-                      shall be checked for service transformer                          operation and its TUSS 1B  with no                            ""i'' -" .-ec"-rge air credit taken for the                        receivers. The two 500-kV    Trinity                        operation of the diesel lines. If the                                fuel oil transfer pumps unit 2 station-                              shall be demonstrated, service transformer                          and the diesel starting is the  second source,                      time to reach rated a minimum    of two                          voltage and speed shall 500-kV lines must be                        be logged.
available.
BFN                                              3.9/4.9-1 Unit, 2
 
      ~l l
1, I,
 
r '.    /4            .ILIAR EL                            C  L S. S.      M
    .LIMITING,CO~IONS FOR                              OPERATION                          SURVEILLANCE REQUIREMENTS 3.9.A<,,< Auxil                        E      ct ical.        E    ui    ment        4.9.A. >kAuxil ar        E    ecerica  . S ste 2..  < Zhg peqctor shall not be                                                      2.,    DC  Power System  Unit started up (made critical)                                                          Batteries (250-V), Diesel-
              >  gzom the, POT .STANDBY- CONDITION                                                    Generatoz Batteries (125-V)
                ,unl,esp .all,,of.,the .f'ollowing                                                    and Shutdown Board;- Batteries conditions are satisfied:                                                          ,(250;V)
                ,a...      At least one                      offsite power                        ,,a. Every      week the specific source            is available as                                                gravity, voltage and
                      ,,specif jed iu,. 3.9.A.l,c.                                                          temperature of the pilot a ~  ~      1  ~  ~
                                        ~
                                            ~    "C      ~  tl:<                                      .i. cell and< overall .battery I" "
II'I  ~  ~          k ~    ~
voltage shall be measured      and logged.
II lt '
: b.        Three          units        1 and 2          diesel                      b.      Every three months the generators, and three -unit 3                                                    measurement. shall- be made diesel generators shall be                                                        of voltage of each cell OPERABLE.                                                                        to nearest 0.1 volt, specific gravity of          each t              'I                                                  cell,  and temperature of fifth
                                                ~    ~
every            cell. These measurements shall be logged.
: c.      An additional source of                                                    c. A battery rated power, consistjng of one                                                          discharge (capacity) of the following:                                                                test shall be performed
                                      ~      ~                                                                and the voltage, time, (1)      A:    second,offsite .                                                  and output current power source                  available                                measurements shall as specified                  in                                        be logged at 3.9;A.l;c.                                                              intervals not to exceed 24 months.
(2)    A      fourth OPERABLE units 1 and 2 diesel generator~>and afourth                                                        It ~      ~1  I OPERABLE;ynit 3 diesel generator.
ll    It ~
: d. Requirements                            3.9.A.3, through 3.9.A.6
                          .are met.
BFN                                                                            3.9/4.9-4 Unit  2
 
I 4h' A
C
]1
 
4    AUXIL                  AL SYSTEM LIMITING CONDITIONS    FOR OPERATION                SURVEILLANCE REQUIREMENTS 3.9.A. uxi    a  E  ect  cal  E u  ment        4.9.A. A  i  a    E  ectrica  S  stem
: 3. Buses and Boards      Available                  3~  Logic Systems
: a. The  respective start bus                      a~  Both divisions of the is energized for each                              common  accident signal common  station-service                            logic system shall      be transformer designated as                          tested every 6 months an offsite power source.                            to demonstrate that will function    on it actuation of the core spray system of each reactor to provide an automatic start signal to all 4 units 1 and      2 diesel generators.
: b. The 4-kV bus    tie board                      b. Once  every 6 months, is energized    and capable                        the condition under of supplying power to the                          which the 480-volt load units 1 and 2 shutdown                              shedding logic system boards  if  a cooling tower transformer is designated is required shall be simulated using pendant as an offsite power source.                        test switches and/or pushbutton test switches to demonstrate that the load shedding logic system would initiate load shedding signals on the diesel auxiliary boards, RMOV boards, and the 480-V shutdown boards.
: c. The    units  1 and 2 and  unit 3 4-kV shutdown boards are energized.
BFN                                          3.9/4.9-5 Unit  2
 
4    A    ILIARY ELEC            CAL SYSTEM I          l ~
LIMITING CONDITIONS          FOR OPERATION                          SURVEILLANCE REQUIREMENTS 3.9.A. Auxilia
              ~ is=  ~  j'Electrical
                              ~ ~  ~
E          ui ment      4.9.A.
h Auxilia F
s Electrical C
S  stem 3.9.A.3. (Cont'd)
: d. The 480-V shutdown boards r
                ,1A, 2A";;2B,' 3A, ancl 3B 'are                                      @
                "energized. ll
                  ~ <  ~  ~  4      ~  ~ I            ~
: e. The units 1 and 2 an'd unit"3 auxiliary boards are energized.
: f. Loss of voltage and degraded voltage relays OPERABLE on 4-kV shutdown boards A, B, C, D, 3EA, 3EB, 3EC, and 3ED.
: g. Shutdown buses 1 and '2 energized.
: h. The 480-V        reactor motor-operated valve (RMOV) boards 2D 8 2E are energized with motor-'generator (mg) sets      2DN, 2DA, 2EN, and 2EA in service.
: i. The 480-V          reactor motor-operated valve (RMOV) board 2C is energized.
The 4-kV bus          tie    board          is available for cross-tying units 1 and 2 and              unit''-kV shu'tdown boards.
: 4. The    three 250-V unit batteries,                              4. Undervoltage Relays the four units 1 and 2 shutdown board batteries and 3EB shutdown                                    a. (Deleted) board battery, a battery charger for .each battery, and associated                                  b. Once  every 6 months, the battery boards are OPERABLE.                                            the conditions u"..dcr which the loss of voltage and degraded voltage relays are required shall be simulated with an undervoltage on each shutdown board to demonstrate that the associated diesel generator will start.
BFN                                                            3.9/4.9-6 Unit 2
 
4    AUXILIARYELEC      uAL SYSTEM LIMITING CONDITIONS  FOR OPERATION              SURVEILLANCE REQUIREMENTS 3.9.A. Auxilia    Electrical  E ui ment        4.9.A. Auxi ia    Electrical  S  stem 4.9.A.4. (Cont'd)
: c. The  loss of voltage and degraded voltage relays which start the -diesel generators from the 4-kV shutdown boards shall be calibrated annually for trip and reset and the measurements logged.
These relays shall be calibrated as specified in Table 4.9.A.4.c.
: d. 4-kV shutdown board voltages shall be recorded once every 12 hours.
: 5. Logic Systems                                5. 480-V RMOV  Boards 2D and 2E
: a. Common  accident signal                      a. Once  per operating logic  system  is  OPERABLE.                    cycle the automatic transfer feature for
: b. 480-V load shedding                              480-V  RMOV boards  2D logic system is OPERABLE.                        and 2E  shall be functionally tested to verify auto-transfer capability.
: 6. Diesel Fuel
: a. There shall be a minimum of 103,300 gallons of diesel fuel in the standby diesel-generator fuel tanks for units 1 and 2.
: b. There shall be a minimum
            . of 103,300 gallons of diesel fuel in the standby diesel-generator fuel tanks for units 3.
BFN                                        3.9/4.9-7 Unit  2
 
e              ~ e    e' 3.9/4.9  AUXILIARY ELECTRICAL SYSTEM LIMITING"CONDITIONS FOR'PERATION                                    SURVEILLANCE REQUIREMENTS" 0  eration with Ino erable                                4.9.B. '0 eration with Ino erable '.9.B.
            ~Eui mant                                                          ~Eui mant Mhenever. the reactor is in                                                      e H
STARTUP mode or RUN mode and not in a COLD COHDITIOH, the availability of electric power    shall be as specified in 3.9.A except as specified herein.
: 1. From and      after the date                                      Mhen  only one that only      one  offsite                                    "offsite power source power source        is available,                                is OPERABLE, all REACTOR POMER OPERATION                  is                      uriits  1 and 2            diesel permissible for 7 days.                                          generators must be demonstrated      to be OPERABLE    within 24 hours, and power availability for              the associated boards shall be  verified within              one hour and at least once per 8 hours thereafter.
2.a    From and      after the date                                2ea  Mhen a  required that the 4-kV        bus tie                                    offsite  power source board becomes INOPERABLE,                                      'is  unavailable to REACTOR POMER OPERATION                  is                      'unit  1 because the permissible indefinitely                                          4-kV bus tie board e
provided one of the                                              or a start bus              is required offsite power                                            INOPERABLE,      all sources is" not 'supplied                                        unit  1 and 2      diesel from the 161-kV system                                            generators shall be through      the'bus'ie    board.                                demonstrated      OPERABLE
                            ~ e within  24  hours, and 2.b    If the    4-kV bus    tie                                      power  availability for unavailable forboard'ecomes the associated boards cross-tying, units 1 and                2                        shall  be verified within and    unit  3  4-kV,shutdown                                  one hou. and at 'ea"t, boards, within the next hour                                      once per 8 hours there-establish      a  patrolling                                    after. The remaining fire watch in fire zones                                          offsite source and 2-3 and 2-4 to ensure that                                        associated buses shall the affected fire zones                                          be checked        to be are checked hourly.                                              energized daily.
2.b  Ho  additional surveillance required.
BFH                                                          3.9/4. 9-8 Unit  2
: 4. AUXILIARYELE        CAL  S  STEM LIMITING CONDITIONS  FOR OPERATION                    SURVEILLANCE REQUIREMENTS 3.9.B. 0 eration With Ino erable                    4.9.B. 0 eration With Ino erable
        ~Euf ment                                              E~ul ment 3.a  When one of    the units  1                    3.a  When one of the and 2 diesel    generator    is                      units 1 and 2 diesel INOPERABLE,    continued                              generators is found REACTOR POWER OPERATION        is                      to be INOPERABLE, permissible during the                                all of the CS, RHR succeeding    7  days,                                (LPCI and contain-provided that    2  offsite                          ment cooling) power sources    are                                  systems and the available as    specified                            remaining diesel in 3.9.A.l.c and all of                                generators and the unit 2 CS, RHR (LPCI        and                  associated boards containment cooling)                                  shall          be systems, and the remaining                            demonstrated to be three units 1 and 2 diesel                            OPERABLE immediately generators are OPERABLE.                              and        daily If  this requirement cannot                            thereafter.
be met, an    orderly shutdown    shall be initiated    and the    reactor shall  be  in the  COLD SHUTDOWN CONDITION within  24  hours.
3.b  When one    unit  3  diesel                      3.b  No      additional generator is inoperable,                              surveillance required.
continued REACTOR POWER OPERATION is permissible during the succeeding 7  days. If this    require-ment cannot be met, an orderly shutdown shall be initiated and the reactor shall be in a COLD SHUTDOWN CONDITION    within    24 hours.
4.a  When one    units  1 and 2                      4.a  When one units 1 and 4-kV shutdown board is                                2 4-kV shutdown board INOPERABLE, continued                      ~ e  ~
4 ~ e ~- e. v eeeeeeA V llt
                                                                                          ~
REACTOR POWER OPERATION        is                      INOPERABLE,              all permissible for a period                              remaining units 1 and of 5 days. provided that                              2 diesel generators 2  offsite  power sources                            associated with the are available as                                      remaining 4-kV shutdown specified in 3.9.A.l.c                                boards shall be and the remaining units        1                      demonstrated to be and 2 4-kV shutdown boards                            OPERABLE              within 24 BFN                                            3.9I4.9-9 Unit  2
 
4  AUXILIARYELE          CAL SYSTE LIMITING CONDITIONS    FOR OPERATION                  SURVEILLANCE REQUIREMENTS 3.9.B. 0  eration With Ino erable                    4.9.B. 0  eration With Ino erable E~ui ment                                            ~Euf ment and associated diesel                          hours and power.
generators, and unit 2 CS,-                    availability for  the RHR  (LPCI and containment                    remaining 4-kV shut-cooling} systems, and all                      down boards shall be unit 2 480-V emergency                          verified within 1 hour power boards are OPERABLE.                      and at least once per If this. requirement cannot                  8 hours thereafter.
be met, an orderly shutdown shall be initiated and the reactor shall be in the    COLD SHUTDOWN CONDITION    within  24  hours.
4.b  When one,  unit 3 4-kV shutdown                4.b  No  additional board  is inoperable, continued                      surveillance REACTOR POWER OPERATION is                            required.
permissible for a period of 5 days. If this requirement cannot be met, an orderly shutdown shall be -initiated and the reactor shall be in a COLD SHUTDOWN      CONDITION within 24 hours.
: 5. When one    of the shutdown                    5. When a shutdown bus buses  is  INOPERABLE,                              is found to  be REACTOR POWER OPERATION is                            INOPERABLE,  all permissible for a period                              1 and 2 diesel of  7  days.                                          generators shall be proven  OPERABLE within 24  hours.
I 6.a  When one    of the units    1                  6. When one units 1.
and 2 480-V diesel auxiliary-                        and 2 diesel boards becomes INOPERABLE,                            auxiliary  board is REACTOR POWER OPERATION      is                      found to be permissible for    a  period                        INOPERABLE, each
              ,of  R  clays,                                        unit  1 and 2 diesel generator shall be 6.b  When one    of the unit 3                            proven OPERABLE within 480-V diesel auxiliary                                24 hours and power boards become INOPERABLE,                            availability for the REACTOR POWER OPERATION                              remaining diesel is permissible for      a period                    auxiliary board shall of  5  days.                                          be  verified within 1  hour and at least once per 8 hours thereafter.
BFN                                            3.9/4.9-10 Unit  2
 
l l
 
4    AUXILIARYELECTRICAL SYSTEM e
LIMITING CONDITIONS        FO      ERATION              SURVEILLA    REQUIREMENTS 3.9.B  0  eration With Ino erable                      4.9.B 0  eration With Ino  e ab e EeeEui  ment                                          E~ui ment
: 7.          From and    after the date                6.b  No  additional surveillance that one    of the three                        required.
250-V unit batteries and/or its associated battery board is found to be INOPERABLE for any reason, continued REACTOR POWER OPERATION is permissible during the succeeding    7 days. Except for routine surveillance testing, NRC shall be notified within 24 hours of the situation, the precautions to be taken during this period, and the plans to return the failed component to an OPERABLE    state.
: 8.      From and after the date that one of the 250-V shutdown board batteries and/or its associated battery board is found to be INOPERABLE for any reason, continued REACTOR POWER OPERATION      is permissible during the succeeding five days  in  accordance    with 3.9.B.7.
: 9.      When one    division of the logic system    is  INOPERABLE,  continued REACTOR POWER OPERATION      is permissible under this condition for seven days, provided the CSCS requirements      listed in Specification 3.9.B.3 are satisfied.-      The NRC  shall be  notified within 24 hours of the situation, the precautions to be
                  .taken during this period, and the plans .to. saturn the fa'led component to an OPERABLE      state.
: 10. (deleted)
The  following limiting conditions for operation exist for the undervoltage relays which start the diesel generators on the 4-kV shutdown boards.
BFN                                                3.9/4.9-11 Unit  2
 
4  AUXILIARYELEC          AL  S STE LIMITING CONDITIONS      FOR OPERATION              SURVEILLANCE REQUIREMENTS 3.9.B. 0 eration    W  t    no crab e
        ~Eui ment 3.9.B.ll (Cont'd)
: a. The  loss of voltage
                  ,  relay channel which starts the diesel generator for a complete loss of voltage on a 4-kV shutdown board may be INOPERABLE for 10 days provided the degraded voltage relay channel on that shutdown board is  OPERABLE  (within the surveillance schedule of 4.9.A.4.b).
: b. The degraded    voltage relay channel which starts the diesel generator for degraded voltage on a 4-kV shutdown board may be INOPERABLE for 10 days provided the loss of voltage relay channel
                . on that shutdown board is OPERABLE   (within the surveillance.
schedule of 4.9.A.4.b).
schedule of 4.9.A.4.b).
c.One of the three phase-to-phase degraded voltage-relays provided to detect a degraded voltage on a 4-kV shutdown board may be INOPERABLE for 15 days provided both of the following conditions are satisfied.
: c. One   of the three phase-to-phase degraded voltage relays provided to detect a degraded voltage on a 4-kV shutdown board may be INOPERABLE for 15 days provided both of the rr ~ r ~ ~ %rem r  ~
r rr~r~~%rem~BFN Unit 2 3.9/4.9-12 AUXILIARY ELE ICAL SYSTEM LIMITING CONDITIONS FOR OPERATION SURVEILLANCE REQUIREMENTS 3.9.B.0 erat on With Ino erable E~ui ment 12.When one unit 2 480-V shutdown board is found to be INOPERABLE, the reactor will be placed in the HOT STANDBY CONDITION within 12 hours and COLD SHUTDOWN CONDITION within 24 hours.13.If one unit 2 480-V RMOV board mg set is INOPERABLE, the REACTOR POWER OPERATION may continue for a period not to exceed seven days, provided the remaining 480-V RMOV board mg sets and their associated loads remain OPERABLE.14.If any two unit 2 480-V RMOV board mg sets become INOPERABLE, the reactor shall be placed in the COLD SHUTDOWN CONDITION within 24 hours.15.When one 480-V shutdown board (lA or 3A or 3B)is found to be INOPERABLE, REACTOR POWER OPERATION is permissible for a period of 7 days.16.If the 480-V RMOV board 2C becomes INOPERABLE, within the next hour establish,a patrolling fire watch in fire zones 2-5 and 2-6 to ensure these zones are checked hourly.BFN Unit 2 3.9/4.9-14 4 AUXILIARY ELE CAL SYSTEM LIMITING CONDITIONS FOR OPERATION SURVEILLANCE REQUIREMENTS 3;9.B;0 eration.With Ino erable~Eui ment 17...If.the requirements for operating in the conditions specified by 3.9.B.1 through 3.9.B.16 cannot be met,, an orderly shutdown shall be initiated and the reactor shall be in the COLD SHUTDOWN CONDITION within 24 hours.3.9.C.0 eration in COLD SHUTODWN Whenever the reactor is in COLD SHUTDOWN CONDITION with irradiated fuel in the reactor, the availability of electric power shall be as specified in Section 3.9.A except as specified herein.1.At least two units 1 and 2 diesel generators and their associated 4-kV shutdown boards shall be OPERABLE.2.An additional source of power energized and capable of supplying power to the units 1 and 2 shutdown boards consisting of at least one of the following:
following conditions are  satisfied.
a.One of the offsite power sources specified in 3.9.A.l.c.
BFN                                         3.9/4.9-12 Unit  2
b.A third OPERABLE diesel generator.
 
3;At least one 480-V shutdown board for each unit must be OPERABLE.BFN Unit 2 4.One 480-V RMOV board mg set is required for each RMOV board (2D or 2E)required to support operation of the RHR system in accordance with 3.5.B.9.3.9/4.9-15  
AUXILIARYELE      ICAL SYSTEM LIMITING CONDITIONS FOR OPERATION                   SURVEILLANCE REQUIREMENTS 3.9.B. 0 erat on With Ino   erable E~ui ment
>',li 4g I II P  
: 12. When one unit 2 480-V shutdown board is found to be INOPERABLE, the     reactor will be   placed   in the HOT STANDBY   CONDITION within 12 hours and COLD SHUTDOWN CONDITION within 24 hours.
: 13. If one unit   2 480-V RMOV board mg set is INOPERABLE,   the REACTOR POWER OPERATION     may continue for a period not to exceed seven days, provided the remaining 480-V RMOV board mg sets and their associated loads remain OPERABLE.
: 14. If any two unit   2 480-V RMOV board mg   sets become INOPERABLE, the reactor shall be placed in the COLD SHUTDOWN CONDITION within 24 hours.
: 15. When one 480-V shutdown board (lA or 3A or 3B) is found to be INOPERABLE, REACTOR POWER OPERATION     is permissible for     a period of 7 days.
: 16. If the 480-V   RMOV board 2C becomes   INOPERABLE,   within the next hour establish,a patrolling fire watch in fire zones 2-5 and 2-6 to ensure these zones are checked hourly.
BFN                                         3.9/4.9-14 Unit 2
 
4     AUXILIARYELE          CAL SYSTEM LIMITING CONDITIONS       FOR OPERATION                 SURVEILLANCE REQUIREMENTS 3;9.B;   0   eration.With Ino erable
          ~Eui ment 17... If .the requirements for operating in the conditions specified by 3.9.B.1 through 3.9.B.16 cannot be met,, an orderly shutdown shall be initiated and the reactor shall be in the   COLD SHUTDOWN CONDITION   within 24 hours.
3.9.C. 0 eration in     COLD SHUTODWN Whenever the     reactor is in COLD SHUTDOWN CONDITION       with irradiated fuel in the reactor, the   availability of electric power   shall   be as specified in Section 3.9.A except as specified herein.
: 1. At least two units 1 and 2 diesel generators and their associated 4-kV shutdown boards shall be OPERABLE.
: 2. An additional source of power energized and capable of supplying power to the units 1 and 2 shutdown boards consisting of at least       one of the following:
: a. One   of the offsite power sources specified in 3.9.A.l.c.
: b. A third   OPERABLE diesel generator.
3; At least one 480-V shutdown board   for each unit must be OPERABLE.
: 4. One   480-V RMOV board mg set is required for     each RMOV board (2D or 2E) required to support operation of the RHR system in accordance with 3.5.B.9.
BFN                                              3.9/4.9-15 Unit  2
 
>',li 4g I
II P
 
3.9        BASES The  objective of this specification is to assure an adequate source oE electeical power. to operate facilities 4o cool the plant dueing shutdown, to operate the engineered safeguards following an accident, and to being the plant to cold shutdown for a Eire at any location.
There are theee sources oE altenlating current electrical enox;gy available, namely, the 161-kV teansmission system, the 500-kV transmission system, and the diesel generatoes.
For a  fire, units 1 and    2 and  unit 3 diesel goneeators  and associated electrical disteibution    systems are required to he available in various combinations to ensure adequate power to safe shutdown systems. The plant Appendix R evaluation establishes the need Eoe certain units 1 and 3 auxiliary powex. systems to achieve and maintain cold shutdown on unit 2. For this reason, these required systems have been added to the unit 2 technical specifications with allowed inoperable pex..iods which are identical to the existing      unit 1 and 3  technical specifications.
The  unit station-service transformer B for unit 1 or the unit station-service transformer B for unit 2 provide nonintereuptible souecos  ot  offsite power from the 500-kV teansmission system to the units  1 and 2 -hutdown    boards. Auxiliary power can also be supplied from the 161-kV transmission system through the common station-sex.vice transformers or through the cooling tower transformers by way of the bus tie hoard. The 4-kV bus tie board may x;emain out of service indefinitoly provided one of the required offsite power soueces is not supplied from the 161-kV system through the hus tie hoard. For a Eire, the 4-kV bus tie board is used to cross-tie the units 1 and 2 and unit 3 4-kV shutdown boaeds so that power from unit 3 diesel generators can be provided to unit 2 for various fixe locations. As previously stated, the 4-kV bus tie board may ho out of service indeEinitely provided the requix;ed offsite power sources are available. However, the plant Appendix R evaluation requix.es that the 4-kV bus tio board cross-tie capability ho available at all times.        If  the 4-kV bus tie boaxd is unavailable for cross-tying, an hourly patrolling fix.e watch is requieed to be established in fice zones 2-3 and 2-4.
The minimum fuel    oil  requirement of 103,300 gallons is sufficient for seven days of    full load operation oE three units 1 and 2 diesols and is conservatively based on availahility of a replenishment supply. An identical    requix.oment  is provided for the unit  3 diesols.
  -.''- .The degraded voltage sensing"relays provide a"start'signal to'he
~
diesel generator:s in the event that a deteriorated voltage condition exists on a 4-kV shutdown hoard.      This starting signal is indepondent of the starting signal genexated by the complete loss of voltage rolays and will continue to function and start tho diesel generator:s on complete loss of voltage should tho loss of voltage relays become inoporablo.
The 15-day inoperable time limit specified when one of the theoe phaso-to-phaso degraded voltage x.'clays is inopoeahlo is justified based an tho two-out-of-three pennissivo logic scheme provided with those relays.
SFH                                              3.9/4.9-17 1Jnit    2
 
c(.
3.9    BASES  (Cont'd) 0 A  units 1 and 2 4-kV shutdown board is allowed to be out of operation for a brief period to allow for maintenance and testing, provided all remaining units 1 and 2 4-kV shutdown boards and associated diesel generators, CS, RHR, (LPCI and containment cooling) systems supplied by the remaining units 1 and 2 4-kV shutdown boards, and all emergency 480-V power boards are operable. A unit 3 4-kV shutdown board is allowed to be out of operation for a brief period to allow for maintenance and    testing.
There are eight 250-V dc battery systems,      each of which consists of a battery, battery charger, and distribution equipment. Three of these systems provide power for unit control functions, operative power for unit motor loads, and alternative drive power for a 115-V ac unit-preferred mg set. One 250-V dc system provides power for common plant and transmission system control functions, drive power for a 115-V ac plant-preferred mg set, and emergency drive power for certain unit large motor loads. The four remaining systems deliver control power to the 4,160-V shutdown boards.
Each 250-V dc shutdown board    control power supply can receive power from its  own  battery, battery charger, or from a spare charger. The chargers are powered from normal plant auxiliary power or from the standby diesel-driven generator system. Zero resistance short circuits between the control power supply and the shutdown board are cleared by fuses located in the respective control power supply. Each power supply is .
located in the reactor building near the shutdown board      it supplies.
Each battery is located in its own independently ventilated battery, room.
The 250-V dc system is so arranged, and the batteries sized so that the loss of any one unit battery    will not prevent the safe shutdown and cooldown of    all  three units in the event of the loss of offsite power and a design basis accident in any one unit. Loss of control power to any engineered    safeguard control circuits is annunciated in the main control room of the unit affected. The loss of one 250-V shutdown board battery affects normal control power only for the 4,160-V shutdown board which it supplies. The station battery supplies loads that are not essential for safe shutdown and cooldown of the nuclear system. This battery was not considered in the accident load calculations.
There are two 480-V ac RMOV boards that contain mg sets in their feeder lines. These 480-V ac RMOV boards have an automatic transfer from their normal to alternate power source (480-V ac shutdown boards). The mg sets 'act as electrical isolators to prevent a fault from propagating between electrical divisions due to an automatic transfer. The 480-V ac RMOV boards involved provide motive power to valves associated with the LPCI mode of the RHR system.      Having an mg set out of service reduces the assurance that full RHR (LPCI) capacity will be available when required. Since sufficient equipment is available to maintain the minimum complement required for RHR (LPCI) operation, a 7-day servicing period is justified. Having two mg sets out of service can considerably reduce equipment availability; therefore, the affected unit shall be BFN                                        3.9/4.9-18 Unit 2
 
II W
~  'I V~
 
4.9    BASES placed  in  Cold Shutdown  within  24 hours. 480-V RMOV Board 2C is required to fire locations.
be operable If since it is  used to supply power for specific 480-V RMOV Board 2C becomes inoperable, an hourly patrolling fire    watch is required to be established in fire zones 2-5 and  2-6.
The  offsite power source requirements are based on the capacity of the respective lines. The Trinity line is limited to supplying two operating units because of the load limitations of CSST's A and B. The Athens line is limited to supplying one operating unit because of the load limitations of the Athens line. The limiting conditions are intended to prevent the 161-kV system from supplying more than two units in the event of a single failure in the offsite power system.
The monthly tests of the diesel generators are primarily to check for failures and deterioration in the system since last use. The diesels will  be loaded to at least 75 percent of rated power while engine and generator temperatures are stabilized (about one hour). The minimum 75-percent load    will  prevent soot formation in the cylinders and injection nozzles. Operation up to an equilibrium temperature ensures that there is no overheating problem. The tests also provide an engine and generator operating history to be compared with subsequent engine-generator test data to identify and to correct any mechanical or electrical deficiency before it can result in a system failure.
The test during refueling outages is more comprehensive, including procedures that are most effectively conducted at that time. These include automatic actuation and functional capability tests to verify that the generators can start and be ready to assume load in 10 seconds.      The annual inspection will detect any signs of wear long before failure. The diesel generators are shared by units 1 and 2.
Therefore, the capability for the units 1 and 2 diesel generators to accept the emergency loads will be performed during the unit 1 operating cycle using the unit 1 loads.
Battery maintenance with regard to the floating charge, equalizing charge, and electrolyte level will be based on the manufacturer's instruction and sound maintenance practices. In addition, written records will be maintained of the battery performance. The plant batteries will deteriorate with time but precipitous failure is unlikely. The type of surveillance called for in this specification is that which has been demonstrated through experience to provide an
      -indication of a cell .becoming irregular or unserviceable long before becomes    a failure.
it The equalizing charge, as recommended by the manufacturer, is vital to maintaining the ampere-hour capacity of the battery, and will be applied as recommended.
BFN                                          3.9/4.9-19 Unit 2
 
4.9  BASES The  testing of the logic systems will verify the ability of the logic systems to bring the auxiliary electrical system to running standby readiness with the presence of an accident signal from any reactor or an undervoltage signal on the 4-kV shutdown boards.
The  periodic simulation of accident signals in conjunction with diesel-generator voltage available signals will confirm the ability of the 480-V load shedding logic system to sequentially shed and restart 480-V loads  if  an accident signal were present and diesel-generator voltage were the only source of electrical power.
The  unit  3 diesel generators  and associated electrical distribution systems requirements    for operability and surveillance are identical to the existing unit 3 technical specifications. However, if a unit 3 diesel generator or associated electrical distribution system becomes inoperable, no additional surveillance is required. Since the Appendix R shutdown equipment powered by the remaining unit 3 power sources are not redundant to the inoperable equipment, additional testing would not improve the reliability of the power supplies for a specific fire location.
REFERE CES
: 1. Normal  Auxiliary Power  System (BFNP FSAR Subsection    8.4)
: 2. Standby  AC  Power Supply and  Distribution  (BFNP FSAR  Subsection 8.5)
: 3. 250-Volt  DC  Power Supply and  Distribution  (BFNP FSAR  Subsection 8.6)
: 4. Memorandum  from Gene M. Wilhoite to H. J. Green dated December 4, 1981 (LOO 811208 664) and memorandum from C. E. Winn to H. J. Green dated January 10, 1983 (G02 830112 002)
BFN                                        3.9/4.9-20 Unit 2
 
(,
hi l
t"
 
ENCLOSURE 2 DESCRIPTION AND JUSTIFICATION BROWNS FERRY NUCLEAR PLANT  (BFN)
UNIT 2 Descri tion  o  Chan e BFN  Unit 2 Technical Specifications are being revised'o include additional unit  2 equipment not presently required to be operable and unit 1 and 3 equipment needed for unit 2 safe shutdown. See the attached technical specification markups for proposed changes.
Reason  for  Chan e In accordance with 10 CFR 50.48 and 10 CFR 50, Appendix R, adequate protection of equipment is required to ensure the safe shutdown of a nuclear plant in the event of a fire at any location in the plant. In addition, Generic Letter 81-12, "Fire Protection Rule,"-requested that "Technical Specifications of the surveillance requirements and limiting conditions for operation for that equipment not already covered by existing Technical Specifications" be provided. The proposed changes are being made to address the  limiting conditions with respect to the plant, equipment which is being utilized for postfire  shutdown  of unit 2.
Justification for    Chan e A  plant Appendix R evaluation was performed for the Browns Ferry Nuclear Plant, Units 1, 2, and 3, to ensure that safe shutdown capability can be maintained during and after a fire in compliance with section III.G, III.J, and III.L of Appendix R. The Appendix R evaluation identified the minimum systems required to be operable for postfire safe shutdown and the modifications that were necessary to ensure the operability of the minimum systems. The plant Appendix R evaluation was performed assuming concurrent operation of the three Browns Ferry units and did not factor in the unavailability of equipment because of possible outage of a unit. A supplemental evaluation was also performed for only unit 2 operating. As a result, the safe shutdown capability of unit 2 depends upon equipment not directly covered in the existing technical specifications for unit 2.
The existing unit 2 technical specifications for the main steam relief valves (MSRVs), residual heat removal service water (RHRSW) pumps, and emergency equipment cooling water (EECW) pumps do not provide sufficient equipment operability for all postulated Appendix R events. Unit 2 safe shutdown capability also relies upon- portions of the unit-1 'and' -auxiliary power systems, including the unit 3 diesel generators, which are not directly included in the unit 2 technical specifications. Also, the reactor water level and reactor vessel pressure instrumentation at the backup control panel as identified in the plant Appendix R evaluation do not currently have any technical specification operability requirements.
 
HSRVs  The  existing unit 2 technical specifications Eor the        HSRVs  permit indefinite plant operation with one relief valve inoperable.          The  plant Appendix R evaluation assessed the availability of HSRVs to ensure that three HSRVs are available for any given Eire location for safe shutdown.            In fire area 9 and fire zones 2-2, 2-3, and 2-4, a postulated fire could result in only three HSRVs being available. If one of these three MSRVs was the one currently allowed by the technical specification to be indefinitely out of service, the required number of MSRVs (three) for safe shutdown during a fire would not be available. An hourly patrolling fire watch will be established in the appropriate Eire areaslzones as a compensatory measure if one of the required HSRVs is out of service. For a fire in any other areas/zones of the plant, at least four HSRVs would be available. Thus, even if one were out of service, the required number of three MSRVs would still be available for safe shutdown.
The proposed  technical specifications ensure a safe shutdown capability and provide  a compensatory  measure during plant operations with an inoperable HSRV. Establishing a  patrolling fire watch within one hour is intended to observe hazardous conditions which are not normally detected by installed fire protection ystems. These conditions include activities by plant personnel that could increase the hazards of a fire. They also include conditions likely to lead to a fire, such as spills of flammable liquids or the presence of ignition sources, and accumulations of transient combustible materials.
The patrolling fire watch is intended to provide prompt notification of a fire and to provide fire fighting activities until the fire brigade responds.            The patrolling fire watch provides assurances that the existence of unsafe or fire conditions would be minimized.
Auxiliar    Power S stem  The existing unit 2 technical specifications for the auxiliary  power system require the operability of the units 1 and 2 diesel generators and associated auxiliary power distribution systems. The associated auxiliary power distribution systems includes 4-kV and 480V shutdown boards, 480V reactor motor-operated valve (RMOV) boards, 250V unit batteries and associated chargors and boards. The auxiliary powor system is required to provide a postfire power source Eor the plant equipmont. The plant Appendix R evaluation assumed the availability oE the units 1 and 2 diesel generators, unit 3 diesel generators, and associated power distribution systems- The plant Appendix R evaluation assumed the 4-kV bus tie board cross-tie capability to be available at      all  times to cross-tie unit, 1 and 2 and unit, 3 4kV shutdown boards.      Additionally, since 480V RMOV board 2C supplies power to valves which are operated during a fire, this board has also been added to the technical specifications.          The proposed changes are to
- .transfer the appropriate sections of the unit 1 and unit, 3 technical specifications Eor the auxiliary power system to the unit 2 technical specification. Presently  some oE  the unit  3  equipment  is indirectly included
 
I t IV le rk I
 
in the unit 2 technical specifications through the definition of operability (e.g., a unit 3 diesel is required to be available to power an EECW pump required Eor unit 2 operation). The proposed changes explicitly add the unit 1 and 3 auxiliary power systems which are required to be operable for postfire safe shutdown to the unit 2 technical specifications. The unit 1 and 3 technical specifications are not aEfected by this change.
The shutdown requirements for inoperable unit 1 and 3auxiliary power system components are identical to the existing unit 2 requirements. If the 4-kV bus tie board or 480-V RNOV board 2C is inoperable, a patrolling Eire watch is established in fire zones 2-3 and 2-4 or zones 2-5 and 2-6, respectively. The previous discussion under MSRVs provides justification Eor patrolling Eire watches.
The unit 3 diesel generators and associated electrical distribution systems requirements  for operability and surveillance are identical to the existing unit 3 technical specifications. However, iE a unit 3 diesel generator or associated electrical distribution systems becomes inoperable, no additional surveillance is required. Since the remaining unit 3 diesel generators do not supply power to the required shutdown equipment powered by the inoperable diesel generator, additional testing would not improve the reliability of the power supplies Eor the established Appendix R events.
The proposed technical specifications ensure adequate emergency power for postfire saEe shutdown and provide a compensatory measure during plant operations with inoperable equipment.
Reactor Vessel Instrumentation  The existing unit 2 technical specifications (table 3.2.P) for. instruments require the operation of reactor vessel water level and reactor pressure indication in the control room. The plant Appendix R evaluation assumed that the reactor vessel water level and pressure indicators on the backup control panel were also available for fires in the control bay that could force plant operators to abandon the main control room. The proposed technical specifications ensure a safe shutdown capability and provide a compensatory measure during plant operation with the backup control panel instruments inoperable. The compensatory measure of the patrolling fire watch provides assurances that the existence of unsaEe or Eire conditions would be be minimized. The previous discussion under HSRVs provides justification for patrolling Eire watches. A surveillance requirement for these instruments on the backup panel is added which is identical to the requirement for the instruments in tho control room.
 
l a J'
I V
IJ
~1 Ll
 
RSW a d    ECW S stems  The  existing unit  2  technical specifications for the RHRSW and EECW pumps    permit indefinite plant..operation with one RHRSW and one EECW pump inoperable when three      units are operating. The number of RHRSW pumps required to be operable is further reduced with units 1 and 3 in a cold shutdown condition or defueled. The plant Appendix R evaluation assumed the availability of all four    EECW pumps. In fire areas 9, 16, and 18, and fire zones 2-1, 2-2, 2-3, 2-4, 2-5, and 2-6, a postulatedfire could result in only two EECW pumps being available that are requir'ed by the plant Appendix R evaluation. If one of these two EECW pumps was the one currently allowed by the technical specifications to be indefinitely out of service, then the required two EECW pumps for safe shutdown would not be available. For a fire in any other areas/zones of the plant, adequate RHRSW swing/EECW pumps are available to supply necessary cooling water to the diesel generators even one of the EECW pumps is out of service.
if The  plant Appendix R evaluation required that either RHRSW pumps Cl or D2 be available, however both pumps are required to be operable to ensure the one required RHRSW pump is available for a specific fire location. If one of the two required RHRSW pumps is out of service, an hourly patrolling fire watch will be  established in the appropriate    fire  areas/zones as a compensatory measure.
For postulated    fires in any other areas of the plant (i.e., other than 2-1, 2-2, 2-3, 2-4, 2-5, 2-6, 9, 16, 18), one train of equipment needed to achieve and maintain hot shutdown will be free of fire damage through fire area boundary separation.      In those cases where hot shutdown is assured and alternate shutdown is not required, plant operating instructions (e.g., EOIs) will be used to complete the cooldown process. The plant Appendix R evaluation for Unit 2 operation further identified equipment which can be used to reach cold shutdown without repair. With hot shutdown assured, adequate time is available for the operators to perform necessary actions using symptom oriented procedures (e.g., EOIs) to ensure that there are adequate RHRSW and EECW pumps available to achieve cold shutdown.        This will provide the flexibility to align equipment which may be operable but not necessarily a preselected shutdown path.
The proposed    technical specifications ensure a safe shutdown capability by providing  a  compensatory measure during plant operation with inoperable RHRSW and EECW pumps. The compensatory measure of the patrolling fire watch provides assurances that the existence of unsafe or fire conditions would be minimized. The previous discussion under MSRVs provides justification for patrolling fire watches.
 
ENCLOSURE 3 BROWNS FERRY NUCLEAR PLANT SIGNIFICANT HAZARDS CONSIDERATION UNIT 2 Descri tion of  Amendment Re  uest The proposed amendment would change the      technical specifications of Browns Ferry Nuclear Plant Unit 2 by revising the limiting conditions for operation, the surveillance requirements, and periodicity for equipment required for Appendix R safe shutdown.
Basis    or Pro osed No Si nificant  Hazards Consideration Determination NRC  has provided standards for determining whether a significant hazards consideration exists as stated in 10 CFR 50.92(c). A proposed amendment to an operating license involves no significant hazards considerations      if of the facility in accordance with the proposed amendment would not (1) operation involve a significant increase in the probability or consequences of an accident, previously evaluated, (2) create the possibility of a new or different kind of accident from an accident previously evaluated, or (3) involve a significant reduction in a margin of safety.
: 1. The proposed amendment does    not involve a significant increase in the probability or consequences    of an accident previously evaluated. The proposed amendment. does not  alter the function or the testing of any equipment or systems previously analyzed in the BFN Final Safety Analysis Report, but provides additional equipment operability requirements to support the safe shutdown of the plant for a fire event.
: 2. The proposed amendment does    not create the possibility of a new or different kind of accident from an accident previously evaluated. This proposed change is still within the bounds of the design of the systems.
Equipment previously covered by    units 1 and 3 technical specifications are incorporated into the unit 2 technical specifications to ensure availability to support unit 2 safe shutdown during a fire for periods when  units 1 and 3 may be  shutdown.
: 3. The proposed amendment does not involve a significant reduction. in the margin of safety. The proposed change ensures a safe shutdown capability for a fire at any location in the plant.      It does not alter the safety function of the involved equipment.
Determination of Basis for Pro osed    No Si  nificant Hazards Since the application for amendment involves a proposed change that is encompassed by the criteria for which no significant hazards consideration exists, TVA has made a proposed determination that the application involves no significant hazards consideration.


===3.9 BASES===
3 I I  ~  ~ s 3.5      BASES (Cont'd) 3.5.L. APRM  Set pints Operation is constrained to  a maximum LHGR  of 18.5 kW/ft for 7x7 fuel and 13.4 kW/ft. This limit    is reached when core maximum fraction of limiting power density (CMFLPD) 'equals 1.0. For the case where CMFLPD exceeds the fraction of rated thermal power, operation is permitted only at less than 100-percent rated power and only with APRM scram settings as required by Specification 3.5.L.l. The scram trip setting and 'rod block trip setting are adjusted to ensure that no combination of CMFLPD and FRP will increase the LHGR transient peak beyond that allowed by the 1-percent plastic strain limit. A 6-hour time period to achieve this condition is justified since the additional margin gained by the setdown adjustment is above and beyond that ensured by the safety analysis.
The objective of this specification is to assure an adequate source oE electeical power.to operate facilities 4o cool the plant dueing shutdown, to operate the engineered safeguards following an accident, and to being the plant to cold shutdown for a Eire at any location.There are theee sources oE altenlating current electrical enox;gy available, namely, the 161-kV teansmission system, the 500-kV transmission system, and the diesel generatoes.
3.5.M. References
For a fire, units 1 and 2 and unit 3 diesel goneeators and associated electrical disteibution systems are required to he available in various combinations to ensure adequate power to safe shutdown systems.The plant Appendix R evaluation establishes the need Eoe certain units 1 and 3 auxiliary powex.systems to achieve and maintain cold shutdown on unit 2.For this reason, these required systems have been added to the unit 2 technical specifications with allowed inoperable pex..iods which are identical to the existing unit 1 and 3 technical specifications.
: 1. Loss-of-Coolant Accident Analysis for Browns Ferry Nuclear Plant Unit 2, NEDO  24088-1 and Addenda.
The unit station-service transformer B for unit 1 or the unit station-service transformer B for unit 2 provide nonintereuptible souecos ot offsite power from the 500-kV teansmission system to the units 1 and 2-hutdown boards.Auxiliary power can also be supplied from the 161-kV transmission system through the common station-sex.vice transformers or through the cooling tower transformers by way of the bus tie hoard.The 4-kV bus tie board may x;emain out of service indefinitoly provided one of the required offsite power soueces is not supplied from the 161-kV system through the hus tie hoard.For a Eire, the 4-kV bus tie board is used to cross-tie the units 1 and 2 and unit 3 4-kV shutdown boaeds so that power from unit 3 diesel generators can be provided to unit 2 for various fixe locations.
: 2.   "BWR  Transient Analysis Model Utilizing the   RETRAN Program,"
As previously stated, the 4-kV bus tie board may ho out of service indeEinitely provided the requix;ed offsite power sources are available.
TVA-TR81-01-A.
However, the plant Appendix R evaluation requix.es that the 4-kV bus tio board cross-tie capability ho available at all times.If the 4-kV bus tie boaxd is unavailable for cross-tying, an hourly patrolling fix.e watch is requieed to be established in fice zones 2-3 and 2-4.The minimum fuel oil requirement of 103,300 gallons is sufficient for seven days of full load operation oE three units 1 and 2 diesols and is conservatively based on availahility of a replenishment supply.An identical requix.oment is provided for the unit 3 diesols.~-.''-.The degraded voltage sensing"relays provide a"start'signal to'he diesel generator:s in the event that a deteriorated voltage condition exists on a 4-kV shutdown hoard.This starting signal is indepondent of the starting signal genexated by the complete loss of voltage rolays and will continue to function and start tho diesel generator:s on complete loss of voltage should tho loss of voltage relays become inoporablo.
: 3. Generic Reload Fuel Application, Licensing Topical Report, NEDE  24011-P-A and Addenda.
The 15-day inoperable time limit specified when one of the theoe phaso-to-phaso degraded voltage x.'clays is inopoeahlo is justified based an tho two-out-of-three pennissivo logic scheme provided with those relays.SFH 1Jnit 2 3.9/4.9-17 c(.
BFN                                         3. 5/4. 5-32 Unit    2
0 3.9 BASES (Cont'd)A units 1 and 2 4-kV shutdown board is allowed to be out of operation for a brief period to allow for maintenance and testing, provided all remaining units 1 and 2 4-kV shutdown boards and associated diesel generators, CS, RHR, (LPCI and containment cooling)systems supplied by the remaining units 1 and 2 4-kV shutdown boards, and all emergency 480-V power boards are operable.A unit 3 4-kV shutdown board is allowed to be out of operation for a brief period to allow for maintenance and testing.There are eight 250-V dc battery systems, each of which consists of a battery, battery charger, and distribution equipment.
Three of these systems provide power for unit control functions, operative power for unit motor loads, and alternative drive power for a 115-V ac unit-preferred mg set.One 250-V dc system provides power for common plant and transmission system control functions, drive power for a 115-V ac plant-preferred mg set, and emergency drive power for certain unit large motor loads.The four remaining systems deliver control power to the 4,160-V shutdown boards.Each 250-V dc shutdown board control power supply can receive power from its own battery, battery charger, or from a spare charger.The chargers are powered from normal plant auxiliary power or from the standby diesel-driven generator system.Zero resistance short circuits between the control power supply and the shutdown board are cleared by fuses.located in the respective control power supply.Each power supply is located in the reactor building near the shutdown board it supplies.Each battery is located in its own independently ventilated battery, room.The 250-V dc system is so arranged, and the batteries sized so that the loss of any one unit battery will not prevent the safe shutdown and cooldown of all three units in the event of the loss of offsite power and a design basis accident in any one unit.Loss of control power to any engineered safeguard control circuits is annunciated in the main control room of the unit affected.The loss of one 250-V shutdown board battery affects normal control power only for the 4,160-V shutdown board which it supplies.The station battery supplies loads that are not essential for safe shutdown and cooldown of the nuclear system.This battery was not considered in the accident load calculations.
There are two 480-V ac RMOV boards that contain mg sets in their feeder lines.These 480-V ac RMOV boards have an automatic transfer from their normal to alternate power source (480-V ac shutdown boards).The mg sets'act as electrical isolators to prevent a fault from propagating between electrical divisions due to an automatic transfer.The 480-V ac RMOV boards involved provide motive power to valves associated with the LPCI mode of the RHR system.Having an mg set out of service reduces the assurance that full RHR (LPCI)capacity will be available when required.Since sufficient equipment is available to maintain the minimum complement required for RHR (LPCI)operation, a 7-day servicing period is justified.
Having two mg sets out of service can considerably reduce equipment availability; therefore, the affected unit shall be BFN Unit 2 3.9/4.9-18 II W~'I V~'


===4.9 BASES===
il o p, I I
placed in Cold Shutdown within 24 hours.480-V RMOV Board 2C is required to be operable since it is used to supply power for specific fire locations.
If 480-V RMOV Board 2C becomes inoperable, an hourly patrolling fire watch is required to be established in fire zones 2-5 and 2-6.The offsite power source requirements are based on the capacity of the respective lines.The Trinity line is limited to supplying two operating units because of the load limitations of CSST's A and B.The Athens line is limited to supplying one operating unit because of the load limitations of the Athens line.The limiting conditions are intended to prevent the 161-kV system from supplying more than two units in the event of a single failure in the offsite power system.The monthly tests of the diesel generators are primarily to check for failures and deterioration in the system since last use.The diesels will be loaded to at least 75 percent of rated power while engine and generator temperatures are stabilized (about one hour).The minimum 75-percent load will prevent soot formation in the cylinders and injection nozzles.Operation up to an equilibrium temperature ensures that there is no overheating problem.The tests also provide an engine and generator operating history to be compared with subsequent engine-generator test data to identify and to correct any mechanical or electrical deficiency before it can result in a system failure.The test during refueling outages is more comprehensive, including procedures that are most effectively conducted at that time.These include automatic actuation and functional capability tests to verify that the generators can start and be ready to assume load in 10 seconds.The annual inspection will detect any signs of wear long before failure.The diesel generators are shared by units 1 and 2.Therefore, the capability for the units 1 and 2 diesel generators to accept the emergency loads will be performed during the unit 1 operating cycle using the unit 1 loads.Battery maintenance with regard to the floating charge, equalizing charge, and electrolyte level will be based on the manufacturer's instruction and sound maintenance practices.
In addition, written records will be maintained of the battery performance.
The plant batteries will deteriorate with time but precipitous failure is unlikely.The type of surveillance called for in this specification is that which has been demonstrated through experience to provide an-indication of a cell.becoming irregular or unserviceable long before it becomes a failure.The equalizing charge, as recommended by the manufacturer, is vital to maintaining the ampere-hour capacity of the battery, and will be applied as recommended.
BFN Unit 2 3.9/4.9-19


===4.9 BASES===
3.5    BASES (Cont'd)
The testing of the logic systems will verify the ability of the logic systems to bring the auxiliary electrical system to running standby readiness with the presence of an accident signal from any reactor or an undervoltage signal on the 4-kV shutdown boards.The periodic simulation of accident signals in conjunction with diesel-generator voltage available signals will confirm the ability of the 480-V load shedding logic system to sequentially shed and restart 480-V loads if an accident signal were present and diesel-generator voltage were the only source of electrical power.The unit 3 diesel generators and associated electrical distribution systems requirements for operability and surveillance are identical to the existing unit 3 technical specifications.
The nuclear system pressure relief system provides automatic nuclear system depressurization for small breaks in the nuclear system so that the low-pressure coolant injection (LPCI) and the core spray subsystems can operate to protect the fuel barrier. Note that this specification applies only to the automatic feature of the pressure  relief  system.
However, if a unit 3 diesel generator or associated electrical distribution system becomes inoperable, no additional surveillance is required.Since the Appendix R shutdown equipment powered by the remaining unit 3 power sources are not redundant to the inoperable equipment, additional testing would not improve the reliability of the power supplies for a specific fire location.REFERE CES 1.Normal Auxiliary Power System (BFNP FSAR Subsection 8.4)2.Standby AC Power Supply and Distribution (BFNP FSAR Subsection 8.5)3.250-Volt DC Power Supply and Distribution (BFNP FSAR Subsection 8.6)4.Memorandum from Gene M.Wilhoite to H.J.Green dated December 4, 1981 (LOO 811208 664)and memorandum from C.E.Winn to H.J.Green dated January 10, 1983 (G02 830112 002)BFN Unit 2 3.9/4.9-20
Specification 3.6.D specifies the requirements for the pressure relief function of the valves. It is possible for any number of the valves assigned to the ADS to be incapable of performing their ADS functions because of instrumentation failures yet be fully capable of performing their pressure relief function.
(, hi l t" ENCLOSURE 2 DESCRIPTION AND JUSTIFICATION BROWNS FERRY NUCLEAR PLANT (BFN)UNIT 2 Descri tion o Chan e BFN Unit 2 Technical Specifications are being revised'o include additional unit 2 equipment not presently required to be operable and unit 1 and 3 equipment needed for unit 2 safe shutdown.See the attached technical specification markups for proposed changes.Reason for Chan e In accordance with 10 CFR 50.48 and 10 CFR 50, Appendix R, adequate protection of equipment is required to ensure the safe shutdown of a nuclear plant in the event of a fire at any location in the plant.In addition, Generic Letter 81-12,"Fire Protection Rule,"-requested that"Technical Specifications of the surveillance requirements and limiting conditions for operation for that equipment not already covered by existing Technical Specifications" be provided.The proposed changes are being made to address the limiting conditions with respect to the plant, equipment which is being utilized for postfire shutdown of unit 2.Justification for Chan e A plant Appendix R evaluation was performed for the Browns Ferry Nuclear Plant, Units 1, 2, and 3, to ensure that safe shutdown capability can be maintained during and after a fire in compliance with section III.G, III.J, and III.L of Appendix R.The Appendix R evaluation identified the minimum systems required to be operable for postfire safe shutdown and the modifications that were necessary to ensure the operability of the minimum systems.The plant Appendix R evaluation was performed assuming concurrent operation of the three Browns Ferry units and did not factor in the unavailability of equipment because of possible outage of a unit.A supplemental evaluation was also performed for only unit 2 operating.
Because the automatic depressurization system does not provide makeup to the reactor primary vessel, no credit is taken for the steam cooling of the core caused by the system actuation to provide further conservatism to the   CSCS.
As a result, the safe shutdown capability of unit 2 depends upon equipment not directly covered in the existing technical specifications for unit 2.The existing unit 2 technical specifications for the main steam relief valves (MSRVs), residual heat removal service water (RHRSW)pumps, and emergency equipment cooling water (EECW)pumps do not provide sufficient equipment operability for all postulated Appendix R events.Unit 2 safe shutdown capability also relies upon-portions of the unit-1'and'-auxiliary power systems, including the unit 3 diesel generators, which are not directly included in the unit 2 technical specifications.
With two ADS valves known to be incapable of automatic operation, four valves remain operable to perform their ADS function. The ECCS loss-of-coolant accident analyses for small line breaks assumed that four of the six ADS valves were operable. Reactor operation with three ADS valves inoperable is allowed to continue for seven days provided that the HPCI system is demonstrated to be operable. Operation with more than three of the six ADS valves inoperable is not acceptable.
Also, the reactor water level and reactor vessel pressure instrumentation at the backup control panel as identified in the plant Appendix R evaluation do not currently have any technical specification operability requirements.
3.5,H. Maintenance of Filled Dischar  e Pi  e If  the discharge piping of the core spray, LPCI, HPCIS, and RCICS are not filled, a water hammer can develop in this piping when the pump and/or pumps are started. To minimize damage to the discharge piping and to ensure added margin in the operation of these systems, this Technical Specification requires the discharge lines to be filled whenever the system is in an operable condition. If a discharge pipe is not filled, the pumps that supply that line must be assumed to be inoperable for Technical Specification purposes.
HSRVs-The existing unit 2 technical specifications Eor the HSRVs permit indefinite plant operation with one relief valve inoperable.
The core spray and RHR system  discharge piping highpoint vent is visually  checked for water flow once a month prior to testing to ensure that the lines are filled. The visual checking will avoid starting the core spray or RHR system with a discharge line. not filled. In addition to the visual observation and to ensure a filled discharge line other than prior to testing, a pressure suppression chamber head tank is-located approximately 20 feet above the discharge line highpoint to supply makeup water for these systems. The condensate head tank located approximately 100 feet above the discharge highpoint serves as a backup charging system when the pressure suppression chamber head tank is not in service. System discharge pressure indicators are used to determine the water level above the discharge line highpoint. The indicators will reflect approximately 30 psig for a water level at the highpoint and 45 psig for a water level in the pressure suppression chamber head tank and are monitored daily to ensure that the discharge lines are filled.
The plant Appendix R evaluation assessed the availability of HSRVs to ensure that three HSRVs are available for any given Eire location for safe shutdown.In fire area 9 and fire zones 2-2, 2-3, and 2-4, a postulated fire could result in only three HSRVs being available.
BFN                                      3.5/4.5-30 Unit 2
If one of these three MSRVs was the one currently allowed by the technical specification to be indefinitely out of service, the required number of MSRVs (three)for safe shutdown during a fire would not be available.
An hourly patrolling fire watch will be established in the appropriate Eire areaslzones as a compensatory measure if one of the required HSRVs is out of service.For a fire in any other areas/zones of the plant, at least four HSRVs would be available.
Thus, even if one were out of service, the required number of three MSRVs would still be available for safe shutdown.The proposed technical specifications ensure a safe shutdown capability and provide a compensatory measure during plant operations with an inoperable HSRV.Establishing a patrolling fire watch within one hour is intended to observe hazardous conditions which are not normally detected by installed fire protection ystems.These conditions include activities by plant personnel that could increase the hazards of a fire.They also include conditions likely to lead to a fire, such as spills of flammable liquids or the presence of ignition sources, and accumulations of transient combustible materials.
The patrolling fire watch is intended to provide prompt notification of a fire and to provide fire fighting activities until the fire brigade responds.The patrolling fire watch provides assurances that the existence of unsafe or fire conditions would be minimized.
Auxiliar Power S stem-The existing unit 2 technical specifications for the auxiliary power system require the operability of the units 1 and 2 diesel generators and associated auxiliary power distribution systems.The associated auxiliary power distribution systems includes 4-kV and 480V shutdown boards, 480V reactor motor-operated valve (RMOV)boards, 250V unit batteries and associated chargors and boards.The auxiliary powor system is required to provide a postfire power source Eor the plant equipmont.
The plant Appendix R evaluation assumed the availability oE the units 1 and 2 diesel generators, unit 3 diesel generators, and associated power distribution systems-The plant Appendix R evaluation assumed the 4-kV bus tie board cross-tie capability to be available at all times to cross-tie unit, 1 and 2 and unit, 3 4kV shutdown boards.Additionally, since 480V RMOV board 2C supplies power to valves which are operated during a fire, this board has also been added to the technical specifications.
The proposed changes are to-.transfer the appropriate sections of the unit 1 and unit, 3 technical specifications Eor the auxiliary power system to the unit 2 technical specification.
Presently some oE the unit 3 equipment is indirectly included I t IV le rk I  in the unit 2 technical specifications through the definition of operability (e.g., a unit 3 diesel is required to be available to power an EECW pump required Eor unit 2 operation).
The proposed changes explicitly add the unit 1 and 3 auxiliary power systems which are required to be operable for postfire safe shutdown to the unit 2 technical specifications.
The unit 1 and 3 technical specifications are not aEfected by this change.The shutdown requirements for inoperable unit 1 and 3auxiliary power system components are identical to the existing unit 2 requirements.
If the 4-kV bus tie board or 480-V RNOV board 2C is inoperable, a patrolling Eire watch is established in fire zones 2-3 and 2-4 or zones 2-5 and 2-6, respectively.
The previous discussion under MSRVs provides justification Eor patrolling Eire watches.The unit 3 diesel generators and associated electrical distribution systems requirements for operability and surveillance are identical to the existing unit 3 technical specifications.
However, iE a unit 3 diesel generator or associated electrical distribution systems becomes inoperable, no additional surveillance is required.Since the remaining unit 3 diesel generators do not supply power to the required shutdown equipment powered by the inoperable diesel generator, additional testing would not improve the reliability of the power supplies Eor the established Appendix R events.The proposed technical specifications ensure adequate emergency power for postfire saEe shutdown and provide a compensatory measure during plant operations with inoperable equipment.
Reactor Vessel Instrumentation
-The existing unit 2 technical specifications (table 3.2.P)for.instruments require the operation of reactor vessel water level and reactor pressure indication in the control room.The plant Appendix R evaluation assumed that the reactor vessel water level and pressure indicators on the backup control panel were also available for fires in the control bay that could force plant operators to abandon the main control room.The proposed technical specifications ensure a safe shutdown capability and provide a compensatory measure during plant operation with the backup control panel instruments inoperable.
The compensatory measure of the patrolling fire watch provides assurances that the existence of unsaEe or Eire conditions would be be minimized.
The previous discussion under HSRVs provides justification for patrolling Eire watches.A surveillance requirement for these instruments on the backup panel is added which is identical to the requirement for the instruments in tho control room.
l a J'I V IJ~1 Ll RSW a d ECW S stems-The existing unit 2 technical specifications for the RHRSW and EECW pumps permit indefinite plant..operation with one RHRSW and one EECW pump inoperable when three units are operating.
The number of RHRSW pumps required to be operable is further reduced with units 1 and 3 in a cold shutdown condition or defueled.The plant Appendix R evaluation assumed the availability of all four EECW pumps.In fire areas 9, 16, and 18, and fire zones 2-1, 2-2, 2-3, 2-4, 2-5, and 2-6, a postulatedfire could result in only two EECW pumps being available that are requir'ed by the plant Appendix R evaluation.
If one of these two EECW pumps was the one currently allowed by the technical specifications to be indefinitely out of service, then the required two EECW pumps for safe shutdown would not be available.
For a fire in any other areas/zones of the plant, adequate RHRSW swing/EECW pumps are available to supply necessary cooling water to the diesel generators even if one of the EECW pumps is out of service.The plant Appendix R evaluation required that either RHRSW pumps Cl or D2 be available, however both pumps are required to be operable to ensure the one required RHRSW pump is available for a specific fire location.If one of the two required RHRSW pumps is out of service, an hourly patrolling fire watch will be established in the appropriate fire areas/zones as a compensatory measure.For postulated fires in any other areas of the plant (i.e., other than 2-1, 2-2, 2-3, 2-4, 2-5, 2-6, 9, 16, 18), one train of equipment needed to achieve and maintain hot shutdown will be free of fire damage through fire area boundary separation.
In those cases where hot shutdown is assured and alternate shutdown is not required, plant operating instructions (e.g., EOIs)will be used to complete the cooldown process.The plant Appendix R evaluation for Unit 2 operation further identified equipment which can be used to reach cold shutdown without repair.With hot shutdown assured, adequate time is available for the operators to perform necessary actions using symptom oriented procedures (e.g., EOIs)to ensure that there are adequate RHRSW and EECW pumps available to achieve cold shutdown.This will provide the flexibility to align equipment which may be operable but not necessarily a preselected shutdown path.The proposed technical specifications ensure a safe shutdown capability by providing a compensatory measure during plant operation with inoperable RHRSW and EECW pumps.The compensatory measure of the patrolling fire watch provides assurances that the existence of unsafe or fire conditions would be minimized.
The previous discussion under MSRVs provides justification for patrolling fire watches.
ENCLOSURE 3 BROWNS FERRY NUCLEAR PLANT SIGNIFICANT HAZARDS CONSIDERATION UNIT 2 Descri tion of Amendment Re uest The proposed amendment would change the technical specifications of Browns Ferry Nuclear Plant Unit 2 by revising the limiting conditions for operation, the surveillance requirements, and periodicity for equipment required for Appendix R safe shutdown.Basis or Pro osed No Si nificant Hazards Consideration Determination NRC has provided standards for determining whether a significant hazards consideration exists as stated in 10 CFR 50.92(c).A proposed amendment to an operating license involves no significant hazards considerations if operation of the facility in accordance with the proposed amendment would not (1)involve a significant increase in the probability or consequences of an accident, previously evaluated, (2)create the possibility of a new or different kind of accident from an accident previously evaluated, or (3)involve a significant reduction in a margin of safety.1.The proposed amendment does not involve a significant increase in the probability or consequences of an accident previously evaluated.
The proposed amendment.
does not alter the function or the testing of any equipment or systems previously analyzed in the BFN Final Safety Analysis Report, but provides additional equipment operability requirements to support the safe shutdown of the plant for a fire event.2.The proposed amendment does not create the possibility of a new or different kind of accident from an accident previously evaluated.
This proposed change is still within the bounds of the design of the systems.Equipment previously covered by units 1 and 3 technical specifications are incorporated into the unit 2 technical specifications to ensure availability to support unit 2 safe shutdown during a fire for periods when units 1 and 3 may be shutdown.3.The proposed amendment does not involve a significant reduction.
in the margin of safety.The proposed change ensures a safe shutdown capability for a fire at any location in the plant.It does not alter the safety function of the involved equipment.
Determination of Basis for Pro osed No Si nificant Hazards Since the application for amendment involves a proposed change that is encompassed by the criteria for which no significant hazards consideration exists, TVA has made a proposed determination that the application involves no significant hazards consideration.  


3 I I~~s 3.5 BASES (Cont'd)3.5.L.APRM Set pints Operation is constrained to a maximum LHGR of 18.5 kW/ft for 7x7 fuel and 13.4 kW/ft.This limit is reached when core maximum fraction of limiting power density (CMFLPD)'equals 1.0.For the case where CMFLPD exceeds the fraction of rated thermal power, operation is permitted only at less than 100-percent rated power and only with APRM scram settings as required by Specification 3.5.L.l.The scram trip setting and'rod block trip setting are adjusted to ensure that no combination of CMFLPD and FRP will increase the LHGR transient peak beyond that allowed by the 1-percent plastic strain limit.A 6-hour time period to achieve this condition is justified since the additional margin gained by the setdown adjustment is above and beyond that ensured by the safety analysis.3.5.M.References 1.Loss-of-Coolant Accident Analysis for Browns Ferry Nuclear Plant Unit 2, NEDO-24088-1 and Addenda.2."BWR Transient Analysis Model Utilizing the RETRAN Program," TVA-TR81-01-A.
      ~ ~ r ~
3.Generic Reload Fuel Application, Licensing Topical Report, NEDE-24011-P-A and Addenda.BFN Unit 2 3.5/4.5-32 il o p, I I  
t.',
.h I
j<<
ry


===3.5 BASES===
) g I ~
(Cont'd)The nuclear system pressure relief system provides automatic nuclear system depressurization for small breaks in the nuclear system so that the low-pressure coolant injection (LPCI)and the core spray subsystems can operate to protect the fuel barrier.Note that this specification applies only to the automatic feature of the pressure relief system.Specification 3.6.D specifies the requirements for the pressure relief function of the valves.It is possible for any number of the valves assigned to the ADS to be incapable of performing their ADS functions because of instrumentation failures yet be fully capable of performing their pressure relief function.Because the automatic depressurization system does not provide makeup to the reactor primary vessel, no credit is taken for the steam cooling of the core caused by the system actuation to provide further conservatism to the CSCS.With two ADS valves known to be incapable of automatic operation, four valves remain operable to perform their ADS function.The ECCS loss-of-coolant accident analyses for small line breaks assumed that four of the six ADS valves were operable.Reactor operation with three ADS valves inoperable is allowed to continue for seven days provided that the HPCI system is demonstrated to be operable.Operation with more than three of the six ADS valves inoperable is not acceptable.
3,5   BASES   (Cont'd)
3.5,H.Maintenance of Filled Dischar e Pi e If the discharge piping of the core spray, LPCI, HPCIS, and RCICS are not filled, a water hammer can develop in this piping when the pump and/or pumps are started.To minimize damage to the discharge piping and to ensure added margin in the operation of these systems, this Technical Specification requires the discharge lines to be filled whenever the system is in an operable condition.
When in their normal standby condition, the suction for the HPCI and RCIC pumps are aligned to the condensate storage tank, which is physically at a higher elevation than the HPCIS and RCICS piping. This assures that the HpCIand RCIC discharge piping remains filled. Further assurance is provided by observing water flow from these systems'ighpoints monthly.
If a discharge pipe is not filled, the pumps that supply that line must be assumed to be inoperable for Technical Specification purposes.The core spray and RHR system discharge piping highpoint vent is visually checked for water flow once a month prior to testing to ensure that the lines are filled.The visual checking will avoid starting the core spray or RHR system with a discharge line.not filled.In addition to the visual observation and to ensure a filled discharge line other than prior to testing, a pressure suppression chamber head tank is-located approximately 20 feet above the discharge line highpoint to supply makeup water for these systems.The condensate head tank located approximately 100 feet above the discharge highpoint serves as a backup charging system when the pressure suppression chamber head tank is not in service.System discharge pressure indicators are used to determine the water level above the discharge line highpoint.
3.5.I. Maximum Avera e Plana   Linear Heat Generation Rate   MAPLHGR This specification assures that the peak cladding temperature following the postulated design basis loss-of-coolant accident will not exceed the limit specified in the 10 CFR 50, Appendix K.
The indicators will reflect approximately 30 psig for a water level at the highpoint and 45 psig for a water level in the pressure suppression chamber head tank and are monitored daily to ensure that the discharge lines are filled.BFN Unit 2 3.5/4.5-30
The peak cladding temperature following a postulated loss-of-coolant accident is primarily a function of the average heat generation rate of all the rods of a fuel assembly at any axial location and is only dependent secondarily on the rod-to-rod power distribution within an assembly. Since expected. local variations in power distribution within a fuel assembly affect the calculated peak clad temperature by less than + 20 F relative to the peak temperature for a typical fuel design, the limit on the average linear heat generation rate is sufficient to assure that calculated temperatures are within the 10 CFR 50 Appendix K limit. The limiting value for MAPLHGR is shown in Tables 3.5.I-l and -2. The analyses supporting these   limiting values are presented in   Reference l.
~~r~t.',.h I j<<ry
3.5.J. Linear Heat Generation Rate     LHGR This specification assures that the linear heat generation rate in any rod is less than the design linear heat generation is postulated.
)g I~3,5 BASES (Cont'd)3.5.I.When in their normal standby condition, the suction for the HPCI and RCIC pumps are aligned to the condensate storage tank, which is physically at a higher elevation than the HPCIS and RCICS piping.This assures that the HpCIand RCIC discharge piping remains filled.Further assurance is provided by observing water flow from these systems'ighpoints monthly.Maximum Avera e Plana Linear Heat Generation Rate MAPLHGR This specification assures that the peak cladding temperature following the postulated design basis loss-of-coolant accident will not exceed the limit specified in the 10 CFR 50, Appendix K.The peak cladding temperature following a postulated loss-of-coolant accident is primarily a function of the average heat generation rate of all the rods of a fuel assembly at any axial location and is only dependent secondarily on the rod-to-rod power distribution within an assembly.Since expected.local variations in power distribution within a fuel assembly affect the calculated peak clad temperature by less than+20 F relative to the peak temperature for a typical fuel design, the limit on the average linear heat generation rate is sufficient to assure that calculated temperatures are within the 10 CFR 50 Appendix K limit.The limiting value for MAPLHGR is shown in Tables 3.5.I-l and-2.The analyses supporting these limiting values are presented in Reference l.3.5.J.Linear Heat Generation Rate LHGR This specification assures that the linear heat generation rate in any rod is less than the design linear heat generation if fuel pellet densification is postulated.
if fuel pellet densification The LHGR shall be checked daily during reactor operation at g 25 percent power to determine   if fuel burnup, or control rod movement has caused changes in power distribution. For LHGR to be a limiting value below 25 percent rated thermal power, the R factor would have to be less than 0.241 which is precluded by a considerable margin when employing any permissible control rod pattern.
The LHGR shall be checked daily during reactor operation at g 25 percent power to determine if fuel burnup, or control rod movement has caused changes in power distribution.
3.5.K. inimum Critical Power Ratio MCPR At core thermal power levels less than or equal to 25 percent, the reactor will be operating at minimum recirculation pump speed and the moderator void
For LHGR to be a limiting value below 25 percent rated thermal power, the R factor would have to be less than 0.241 which is precluded by a considerable margin when employing any permissible control rod pattern.3.5.K.inimum Critical Power Ratio MCPR At core thermal power levels less than or equal to 25 percent, the reactor will be operating at minimum recirculation pump speed and the moderator void'ontent will be very small.For all designated control rod patterns which mav be employed at this point, operating plant experience and thermal hydraulic analysis indicated that the resulting MCpR value is in excess of requirements by a considerable margin.With this low void content, any inadvertent core flow increase would only place operation in a more conservative mode relative to MCpR.The daily requirement for calculating MCPR above 25 percent rated thermal power is sufficient since power distribution shifts are very slow when there have not been significant power or control rod cnanges.The requirement for calculating MCPR when a limiting control rod pattern is approached ensures that MCPR will be known following a change in power or power shape (regardless of magnitude) that could place operation at a thermal limit.QFg Unit 2 3.5/4.5-31  
          'ontent will be very small. For all designated         control rod patterns which mav be employed at this point, operating plant experience and thermal hydraulic analysis indicated that the resulting MCpR value is in excess of requirements by a considerable margin. With this low void content, any inadvertent core flow increase would only place operation in a more conservative mode relative to MCpR. The daily requirement for calculating MCPR above 25 percent rated thermal power is sufficient since power distribution shifts are very slow when there have not been significant power or control rod cnanges. The requirement for calculating MCPR when a limiting control rod pattern is approached ensures that MCPR will be known following a change in power or power shape (regardless of magnitude) that could place operation at   a thermal limit.
QFg                                       3.5/4.5-31 Unit 2


===4.6 PRIMARY===
4.6   PRIMARY SYSTEM BOUNDARY LIMITING CONDITIONS     FOR   ERATION                   SURVEILL    CE REQUIREMENTS 3.6.C   Coolant Leaka   e                               4.6.C     Coolant Leaka   e
SYSTEM BOUNDARY LIMITING CONDITIONS FOR ERATION 3.6.C Coolant Leaka e SURVEILL CE REQUIREMENTS 4.6.C Coolant Leaka e 2.Both the sump and air sampling systems shall be OPERABLE during REACTOR POWER OPERATION.
: 2. Both the sump and air sampling                        2. With the  air sampling systems shall be OPERABLE during                           system INOPERABLE, grab REACTOR POWER OPERATION.       From                         samples shall be obtained and after the date that one of                             and analyzed at  least once these systems is made or found                             every 24 hours.
From and after the date that one of these systems is made or found to be INOPERABLE for any reason, REACTOR POWER OPERATION is permissible only during the succeeding 24 hours for the sump system or 72 hours for the air sampling system.2.With the air sampling system INOPERABLE, grab samples shall be obtained and analyzed at least once every 24 hours.The air sampling system may be removed from service for a period of 4 hours for calibration, function testing, and maintenance without providing a temporary monitor.3~If the condition in 1 or 2 above cannot be met, an orderly shutdown shall be initiated and the reactor shall be placed in the COLD SHUTDOWN CONDITION within 24 hours.3.6.D.Relief Valves 4.6.D.Relief Valves When more than one relief valves are known to be failed, an orderly shutdown shall be initiated and the reactor depressurized to less than 105 psig within 24 hours.During REACTOR POWER OPERATION, if one of the following relief valves is inoperable, establish within the next hour a patrolling fire watch to ensure that the affected fire areas/zones listed b low are checked hourly.1.Approximately one-half of., all relief valves shall be bench-checked or replaced with a bench-checked valve each operating cycle.All 13 valves will have been checked or replaced-upon the completion of every second cycle.2.Once during each operating cycle, each relief valve shall be manually opened until thermocouples and acoustic monitors downstream of the valve indicate steam is flowing from the valve.BFN Unit 2 3.6/4.6-10}}
to be INOPERABLE for any reason, REACTOR POWER OPERATION is permissible only during the succeeding 24 hours for the sump system or 72 hours for the air sampling system.
The air sampling system may be removed from service for a period of 4 hours for calibration, function testing, and maintenance without providing   a temporary monitor.
3~   If the   condition in 1 or 2 above cannot be met, an orderly shutdown shall be initiated and the reactor shall be placed in the COLD SHUTDOWN CONDITION   within 24 hours.
3.6.D. Relief Valves                                   4.6.D. Relief Valves When more   than one relief valves                   1. Approximately one-half of.,
are known to be failed, an                                 all relief valves shall orderly shutdown shall be                                   be bench-checked or initiated and the reactor                                   replaced with a depressurized to less than                                 bench-checked valve psig within     hours.                               each operating cycle.
ifDuring 105              24 REACTOR POWER OPERATION,         one                       All 13 valves will have of the following relief valves                             been checked or replaced is inoperable, establish                                 -  upon the completion of within the next hour a                                       every second cycle.
patrolling fire watch to ensure that the affected                             2. Once  during each fire areas/zones listed   b low                           operating cycle, each are checked hourly.                                         relief valve shall be manually opened until thermocouples and acoustic monitors downstream of the valve indicate steam is flowing from the valve.
BFN                                           3.6/4.6-10 Unit  2}}

Latest revision as of 16:54, 3 February 2020

Proposed Tech Specs 249 Re App R Safe Shutdown Equipment
ML18033A325
Person / Time
Site: Browns Ferry Tennessee Valley Authority icon.png
Issue date: 08/12/1988
From:
TENNESSEE VALLEY AUTHORITY
To:
Shared Package
ML18033A324 List:
References
TAC-00062, TAC-00063, TAC-00064, TAC-62, TAC-63, TAC-64, TVA-BFN-TS-249, NUDOCS 8808240002
Download: ML18033A325 (61)
v • d • e


Text

ENCLOSURE 1 PROPOSED TECHNICAL SPECIFICATIONS REVISIONS BROWNS FERRY NUCLEAR PLANT UNITS 1, 2, AND 3 (TVA BFN TS 249) 8808240002 880812 PDR ADOCK 05000260

TABLE 3.2.F Surveillance Instrumentation Hinimum ¹ of Operable Instrument Type Indication Channels ~tn rument ¹ Instrum n and Ran Notes LI-3-58A Reactor Mater Level Indicator - 155" to (1) (2) (3)

LI-3-58B +60" LI-3-46A Reactor Water Level Indicator 155" to (9) 60" PI-3-74A Reactor Pressure Indicator 0-1200 psig (1) (2) (3)

PI-3-74B PI-3-79 Reactor Pressure Indicator 0-1200 psig (9)

XR-64-50 Drywell Pressure Recorder 0-80 psia (1) (2) (3)

PI-64-678 Indicator 0-80 psia TI-64-52AB XR-64-50 Drywell Temperature Recorder, Indicator (1) (2) (3) 0-4004F XR-64-52 Suppression Chamber Air Recorder 0-400'F (1) (2) (3)

Temperature N/A Control Rod Position 6V Indicating )

Lights )

N/A Neutron Honi toring SRH, IRH, LPRH ) (1) (2) (3) (4) 0 to 100/ power ) I PS-64-678 Drywell Pressure Alarm at 35 psig )

)

TS-64-52A &

PIS-64-58A &

Drywell Temperature and Pressure and Timer Alarm if temp.

281'F and

)

> ) (1) (2),(3) (4)

IS-6'4-67A pressure >2.5 psig )

after 30 minute )

delay )

LI-84-2A CAD Tank "A" Level Indicator 0 to 1005 (1)

LI-84-13A CAD Tank "8" Level Indicator 0 to 100'4 (1)

-BFN-Unit 2

'I t

lg I

(1) From and after the date that one of these parameters is reduced to one indication, continued operation is permissible during the succeeding 30 days unless such instrumentation is sooner made OPERABLE.

(2) From and after the date that one of these parameters is not indicated in the control room, continued operation is permissible during the succeeding seven days unless such instrumentation is sooner made OPERABLE.

(3) If the requirements of notes (1) and (2) cannot be met, and of the indications cannot be restored in (6) hours, an orderly if one shutdown shall be initiated and the reactor shall be in a cold condition within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

(4) These surveillance instruments are considered to be redundant to each other.

From and after the date that both the acoustic monitor and the temperature indication on any one valve fails to indicate in the control room, continued operation is permissible during the succeeding 30 days, unless one of the two monitoring channels is sooner made OPERABLE. If both the primary and secondary indication on any SRV tailpipe is INOPERABLE, the torus temperature will be monitored at least once per shift to observe any unexplained temperature increase which might be indicative of an open SRV.

(6) A channel consists of eight sensors, one from each alternating torus bay. Seven sensors must be OPERABLE for the channel to be OPERABLE.

(7) When one of these instruments is INOPERABLE for more than seven days, in lieu of any other report required by Specification 6.7.2, prepare and submit a Special Report to the Commission pursuant to Specification 6.7.3 within the next seven days outlining the action taken, the cause of inoperability, and the plans and schedule for restoring the system to OPERABLE status.

(s) With the plant in the power operation, Startup, or Hot Shutdown condition and with the number of OPERABLE channels less than the required OPERABLE channels, either restore the INOPERABLE channel(s) to OPERABLE status within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />, .or initiate the preplanned .

alternate method of monitoring the appropriate parameter.

If this instrument is inoperable, establish within the next hour a patrolling fire watch in fire area 16 to ensure that the affected fire area is checked hourly.

BFN 3.2/4.2-33 Unit

TABLE 4.2.F HINIHUH TEST ANO CALIBRATION FREQUENCY FOR SURVEILLANCE INSTRUMENTATION In rumn hnn 1 libra ion Fre uenc In rum nt Ch ck

1) Reactor Water Level Once/6 months Each Shift (LI-3-46A,SBA&B)

I

2) Reactor Pressure Once/12 months Each Shift (PI-3-79,74A&B)
3) Drywell Pressure Once/6 months Each Shift (PI-64-67B) and XR-64-50 n
4) Drywell Temperature Once/6 months Each Shift (TI-64-52AB) and XR-64-50
5) Suppression Chamber Air Temperature Once/6 months Each Shift (XR-64-52)
8) Control Rod Position N/A Each Shift
9) Neutron Monitoring (2) Each Shift
10) Drywell Pressure (PS-64-67B)l Once/6 months N/A
11) Orywell Pressure (PIS-64-58A) Once/6 months N/A
12) Orywell Temperature (TS-64-52A) Once/6 months N/A
13) Timer (IS-64-67A) Once/6 months N/A
14) CAD Tank Level Once/6 months Once/day
15) Containment Atmosphere Honitors Once/6 months Once/day BFN-Unit 2

II lg I

3.2 BASES (Cont'd)

Trip setting of 100 mr/hr for the monitors in the refueling zone are based upon initiating normal ventilation isolation and SGTS operation so that none of the activity released during the refueling accident leaves the Reactor Building via the normal ventilation path but rather all the activity is processed by the SGTS.

Flow integrators and sump fill rate Aand determine leakage in the drywell.

pump out rate timers are used to system whereby the time interval to fill a known volume will be utilized to provide a backup. An air sampling system is also provided to detect leakage inside the primary containment (See Table 3.2.E).

For each parameter monitored, as listed in Table 3.2.F, there are two channels of instrumentation except as noted. By comparing readings between the two channels, a near continuous surveillance of instrument performance is available. Any deviation in readings will initiate an early recalibration, thereby maintaining the quality of the instrument readings. A single channel of instruments at the backup control panel provides the additional indication of reactor vessel water level and reactor pressure. This indication is available to ensure safe shutdown capability from outside the control room.

Instrumentation is provided for isolating the control room and initiating a pressurizing system that processes outside air before supplying the control room. An accident signal that isolates primary containment it to will also automatically isolate the control room and initiate the emergency pressurization system. In addition, there are radiation monitors in the normal ventilation system that will isolate the control room and initiate the emergency pressurization system. Activity required to cause automatic actuation is about one mRem/hr.

Because of the constant surveillance and control exercised by TVA over the Tennessee Valley, flood levels of large magnitudes can be predicted in advance of their actual occurrence. In all cases, full advantage will be taken of advance warning to take appropriate action whenever reservoir levels above normal pool are predicted; however, the plant flood protection is always in place and does not depend in any way on advanced warning. Therefore, during flood conditions, the plant will be permitted to operate until water begins to run across .;the top of the pumping station at elevation 565. Seismically qualified, redundant level switches each powered from a separate division of power are provided at the pumping station to give main control room indication of this condition. At that time an orderly shutdown of the plant will be initiated, although surges even to a depth of several feet over the pumping station deck will not cause the loss of the main condenser circulating water pumps.

BFN 3.2/4.2-69 Unit 2

C r

TABLE 3.5-1 MINIMUM RHRSW AND EECW PUMP ASSIGNMENT Time Minimum Limit Service Assignment Da s RHRSW EECW(B)

(D)(E)(G) (A)(H)

Indefinite 7 (C)(D)(E)(F)(G) (A)(C)(F)(H) 30 7 or 6 2 ox'3 (D)(E)(G) (A)(H) 6 2 (A) At least one operable pump must be assigned to each header.

(B) Only automatically starting pumps may be assigned to EECW header service.

(C) Nine pumps must be OPERABLE. Either configuration is acceptable:

7 and 2 .or 6 and 3 (except reduced by notes D and E).

(D) Requirements may be reduced by two for each unit with fuel unloaded.

(E) For units with fuel loaded, the minimum RHRSW pump requirements may be reduced by one pump for each unit that has been in COLD SHUTDOWN CONDITION for more than 96 hours0.00111 days <br />0.0267 hours <br />1.587302e-4 weeks <br />3.6528e-5 months <br />. At least 2 of the required pumps must be powered from separate electric power sources with their associated RHR pumps, heat exchangers, and diesel generator(s)

OPERABLE.

(F) These minimum service requirements are also applicable to startup from a COLD SHUTDOWN CONDITION.

(G) RHRSW pumps D2 and either Cl or C2 must be OPERABLE during unit 2 REACTOR POWER OPERATION. If D2 or both Cl and C2 pumps are inoperable, within the next hour establish a patrolling fire watch fire areas/zones shown in Table 3.5-2 to ensure the affected 'n

.fire .areas/zones are cheeked hourly.

(H) EECW pumps A3, B3, C3, and D3 must be OPERABLE during unit 2 REACTOR POWER OPERATION. If one or more of these pumps is inoperable, within the next hour establish a patrolling fire watch in fire areas/zones shown in Table 3.5-2 to ensure the affected fire areas/zones are checked hourly.

BFN 3.5/4.5-11 Unit 2

TABLE 3.5-2 RHRSW/EECW Fire Areas/Zones to Pump Inoperable Establish Patrolling Fire Watch Cl,and C2 2-2, 2-5, 16, 18 I ~ Il ~ ~

D2'"" 2-1', 2-3; 2-4, 2-6, 9

'Aa, i) ~

J I

A3 2-1, I

2-2, 2-3, 2-4, 2-5, 2-6, 9 B3 16, 18 C3 g ~

2-1,'-2, '2-3, 2-4, 2-5, 2-6, 9 D3 16, 18 k <~c ~ l~ o> ~ ~

"I LA ~ i . ~ ~ ~= ~

~ ~

'I, 1 Jr ~ ~ ~ g, ~ ~

BFN 3.5/4.5-lla Unit 2

3.5 Bases (Cont'd)

The suppression chamber can be drained when the reactor vessel pressure is atmospheric, irradiated fuel is in the reactor vessel, and work is not in progress which has the potential to drain the vessel. By requiring the fuel pool gate to be open with the vessel head removed, the combined water inventory in the fuel pool, the reactor cavity, and the separator/dryer pool, between the fuel pool low level alarm and the reactor vessel flange, is about 65,800 cubic feet (492,000 gallons).

This will provide adequate low-pressure cooling in lieu of CSS and RHR (LPCI and containment cooling mode) as currently required in Specifications 3.5.A.4 and 3.S.B.9. The additional requirements for providing standby coolant supply available will ensure a redundant supply of coolant supply. Control rod drive maintenance may continue during this period provided no more than one drive is removed at a time unless blind flanges are installed during the period of time CRDs'are not in place.

Should the capability for providing flow through the cross-connect lines be lost, a 10-day repair time is allowed before shutdown is required. This repair time is justified based on the very small probability for ever needing RHR pumps and heat exchangers to supply an adjacent unit.

REFERENCES

1. Residual Heat Removal System (BFNP FSAR subsection 4.8)
2. Core Standby Cooling Systems (BFNP FSAR Section 6) 3.5.C. RHR Service Water S stem and Emer enc E ui ment Coo n Water S stem EECWS There are two EECW headers (north and south) with four automatic starting RHRSW pumps on each header. All components requiring emergency cooling water are fed from both headers thus assuring continuity of operation if either header is operable. Each header alone can handle the flows to all components. Two RHRSW pumps can supply the full flow requirements of all essential EECW loads for any abnormal or postaccident situation.

In fire areas 9, 16 and 18 and fire zones 2-lp 2 2p 2 3p 2 4p 2-5, and 2-6, a postulated fire could result in only two EECW pumps being available that are required by the plant Appendix R evaluation. If one of these .two remaining EECW pumps was the one allowed by the technical specifications to be indefinitely out of service, then the required two EECW pumps for safe shutdown would not be available. If one of the required EECW pumps is out of service, a hourly patrolling fire watch will be established in the appropriate fire area/zones as a compensatory measure. For a fire in any other areas/zones of the plant, adequate RHRSW swing/EECW pumps are available to supply necessary cooling water to the diesel generators, even EECW pumps is out of service.

if one of the BFN 3.5/4.5-26 Unit 2

Ijh 3.5 BASES (Cont'd)

There are four RHR heat exchanger headers (A, B, C, 8 D) with one RHR heat exch'anger. from each unit on each header. There are two RHRSW

~

pumps .on each header; one normally assigned to each header (A2,-B2, C2, or D2) and one on alternate assignment-(A1, Bl, Cl, or Dl). One RHR h'eat exchanger header can adequat'ely deliver~the" flow supplied by both RHRSW pumps to any two of the three RHRSW heat exchangers on the header; One RHRSW pump can'upply the full flow requirement of one RHR heat exchanger. Two,RHR exchangers can more than adequately handle the cooling requirements of one unit in any abnormal or postaccident situation.

~

The RHR Service Water, System was designed as a shared system for three units. The specification, as written, is conservative when consideration is given to particular pumps being out of service and to possible valving arrangements. If unusual operating conditions arise such that more pumps are out of service than allowed by this specification, a special case request may be made to the NRC to allow continued operation assured.

if ll the actual system cooling requirements can be Should three of the four RHRSW pumps normally or alternately assigned to the RHR heat exchanger headers supplying the standby coolant supply connection become inoperable, capability for long-term fluid makeup to the unit reactor and for cooling of the unit containment remains operable. Because of the availability of makeup and cooling capability which is demonstrated to be operable immediately and with specified subsequent surveillance, a 30-day repair period is justified. Unit 2 may be supplied standby coolant from either of four pumps Bl, B2, Dl, or D2. Should the capability to provide standby coolant supply be lost, a 10-day repair time is justified based on the low probability for ever needing the standby coolant supply.

The plant Appendix R evaluation requires that either RHRSW pump Cl or D2 be available, however both pumps are required to be operable to ensure the one required RHRSW pump is available for a specific fire location. If one of the two required RHRSW pumps is out of service, a hourly patrolling fire watch will be established in the appropriate fire areas/zones as a compensatory measure.

3.5.D E ui ment Area Coo ers II There is an equipment area cooler for each RHR pump and an equipment area cooler for each set (two pumps, either the A and C or B and D pumps) of core spray pumps. The equipment area coolers take suction near the cooling air discharge of the motor of the pump(s) served and discharge air near the cooling air suction of the motor of the pump(s) served. This ensures that cool air is supplied for cooling the pump motors.

BFN 3.5/4.5-27 Unit 2

tg

,pl

~~

3.5 BASES (Cont'd)

The equipment area coolers also remove the pump, and equipment waste heat from the basement rooms housing the engineered safeguard equipment. The various conditions under which the operation of the equipment air coolers is required have been identified by evaluating the normal and abnormal operating transients and accidents over the full range of planned operations. The surveillance and testing of the equipment area coolers in each of their various modes is accomplished during the testing of the equipment served by, these coolers. This testing is adequate to assure the operability of the equipment area coolers.

REFERENCES

1. Residual Heat Removal System (BFNP FSAR paragraphs 4.8.9.1 and 4.8.9.2)
2. Core Standby Cooling System (BFNP FSAR subsection 6.7) 3.S.E. Hi h Pressu e Coolant In ection S stem PCXS The HPCIS is provided to assure that the reactor core is adequately cooled to limit fuel clad temperature in the event of a small break in the nuclear system and loss of coolant which does not result in rapid depressurization of the reactor vessel. The HPCIS permits the reactor to be shut down while maintaining sufficient reactor vessel water level inventory until the vessel is depressurized. The HPCIS continues to operate until reactor vessel pressure is below the pressure at which LPCI operation or core spray system operation maintains core cooling.

The capacity of the system is selected to provide this required core cooling. The HPCI pump is designed to pump 5,000 gpm at reactor pressures between 1,120 and 150 psig. Two sources of water are available. Initially, water from the condensate storage tank is used instead of injecting water from the suppression pool into the reactor.

When the HPCI System begins operation, the reactor depressurizes more rapidly than would occur if HPCI was not initiated due to the condensation of steam by the cold fluid pumped into the reactor vessel by the HPCI system. As the reactor vessel pressure continues to decrease, the HPCI flow momentarily reaches equilibrium with the flow through the break. Continued depressurization caused the break flow to decrease below the HPCI flow and the liquid inventory begins to rise.

This. type, of response. is, typical.af the small breaks., The core never uncovers and is continuously cooled throughout the transient so that no core damage of any kind occurs for breaks that lie within the capacity range of the HPCI.

The minimum required NPSH for HPCI is 21 feet. There is adequate elevation head between the suppression pool and the HPCI pump, such that the required NPSH is available with a suppression pool temperature up to 1404F with no containment back pressure.

BFN 3.5/4.5-28 Unit 2

3.5 BASES (Cont'd)

The HPCIS serves as a backup to the RCICS;as a source of feedwater makeup during primary csystem isolation'conditions., The ADS .serves as a backup, to the'HPCIS .for reactor depress'surization for postulated transients and acdident. Both these systems are checked for.

operabilit:y i8 the HPCI is determined to.be. inoperable.; Considering the iredundant. systems, an allowable r'epair time of. seven days was selectedi ~ ~

II U ~ ~ ~ ~ C

~ " 6 ~ I E $ Jj II I y ~, $ ~ ~

~,(

~ ~

The HPCI 'and RCIC as-well-as all.other Core Standby Cooling Systems must. be operable when starting up from a Cold Condition. It is realized that the HPCI is not designed to operate at full capacity until'eactor pressure exceeds 150 psig and the steam supply to the HPCI turbine is automatically isolated before the reactor pressure decreases below 100 psig. It is the intent of this specification to assure that when the reactor is being started up from a Cold Condition, the HPCI is not known to be inoperable.

3.5.F Reactor Core Iso ation Cool n S stem RCICS CI S The various conditions under which the RCICS plays an essential role in providing makeup water.to the>reactor vessel have. been identified, by evaluating -the various 'plant events over the full range of planned operations. The specifications ensure that the function for which the RCICS was designed will be available when needed. The minimum required NPSH for RCIC is 20 feet. There is adequate elevation head between the suppression pool and the RCIC pump, such that the required NPSH is available with a suppression pool temperature up to 140'F with no containment back pressure.

Because the low-pressure cooling systems (LPCI and core spray) are capable of providing all the cooling required for any plant event when nuclear system pressure is below 122 psig, the RCICS is not required below this pressure. Between.122 psig and 150.psig the RCICS need not provide its design flow, but reduced flow is required for certain events. RCICS design flow (600 gpm) is sufficient to maintain water level above the top of the active fuel for a complete loss of feedwater flow at design power (105 percent of rated)..

~ s ~ ~ = II ( 1 e ss li Consideration of. the availability of the RCICS reveals that the average risk- associated with failure of the RCICS to cool the core when r'equired is not increased if the RCICS is inoperable for no longer than seven days, provided that the HPCIS is operable during this period.

REFERENCE

1. Reactor Core Isolation Cooling System (BFNP FSAR Subsection 4.7) 3.5.G Automatic De ressurization S stem ADS

~ I This specification ensures the operability of the ADS under all conditions for which the depressurization of the nuclear system is an essential response to station abnormalities.

BFN 3.5/4.5-29 Unit 2

0 k (1

t

,I

,I

4.6 PRIMARY SYSTEM BOUNDARY I s LIMITING CONDITIONS FO ERATION SURVE ANCE REQUIREMENTS 3.6.D Relief Valves MSRV Affected A eas Zones 3. The integrity of the relief valve bellows 2-PCV-1-19 2-3, 2-4, 9 shall be continuously 2-PCV-1-22 2-2 monitored when valves 2-PCV-1-23 2-2 incorporating the bellows 2-PCV-1-31 2-3, 2-4, 9 design are installed.

2-PCV-1-179 2-3, 2-4, 9 2-PCV-1-180 2-2 4. At least one relief valve shall be disassembled and inspected each operating cycle.

3.6.E. J~et Pum s 3. E.E ~Jet Pum s Whenever the reactor is in the Whenever there is STARTUP or RUN modes, all jet recirculation flow with pumps shall be OPERABLE. If the reactor in the it is determined that a jet STARTUP or RUN modes pump is inoperable, or if two with both recirculation or more jet pump flow instrument pumps running, jet pump failures occur and cannot be operability shall be corrected within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />, an checked daily by orderly shutdown shall be verifying that the initiated and the reactor shall following conditions be placed in the COLD SHUTDOWN do not occur CONDITION within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />. simultaneously:

a. The two recircu-tion loops have a flow imbalance of 15% or more when the pumps are operated at the same speed.
b. The indicated value of core flow rate varies from the value derived from loop flow measurements by more than 10%.
c. The diffuser to lower plenum differential pressure reading on an individual jet pump varies from the mean of all jet pump differential pressures by more than 10%.

BFN 3.6/4.6-11 Unit 2

>2

'j h, t

6 3.6/4.6 6 ~

3.6.D/4.6.D (Cont'd) el I The requirements established above apply when the nuclear, system canj be pressurized above ambientPconditions. These requirements -are .applicable at nuclear: system pressures below normal operating pressures because abnormal openational transients could possibly start at these,conditions such that eventual overpressure relief would be needed. However, these transients are much less severe, in terms of pressure, than those starting at rated conditions. The valves need>not be functional when the vessel head is, removed, since the nuclear system cannot be pressurized.

In fire area 9 and fire zones 2-2, 2-3, and 2-4, a postulated,fire could e

potentially disable all but three MSRVs. If one of these three MSRVs was the MSRV,allowed by the technical specifications,to be indefinitely out of service, then the required number of three MSRVs for safe shutdown would not be

> available. If one of the required MSRVs is out of service, an hourly patrolling fire watch will be established in the appropriate fire areas/zones ps a compensatory measure. For a fire in any other fire areas/zones of the plant, at least four MSRVs .would be available. Thus, even if one MSRV is out of service, the required number of three MSRVs would remain available for safe shutdown.

e REFERENCES

1. Nuclear System Pressure Relief System (BFNP FSAR Subsection 4.4)

I

2. =

Amendment 22 in response to AEC Question 4.2 of December 6, 1971.

3. "Protection Against Overpressure" (ASME Boiler and Pressure Vessel Code, Section III, Article 9)
4. Browns Ferry Nuclear Plant Design Deficiency Report Target Rock Safety-Relief Valves, transmitted by J. E. Gilleland to F. E. Kruesi, August 29, 1973
5. Generic Reload Fuel Application, Licensing Topical Report, NEDE-24011-P-A and Addenda 3.6.E/6.6.E ~Jet Pum e Failure of a jet pump nozzle assembly holddown mechanism, nozzle assembly and/or riser, would increase the cross-sectional flow area for blowdown following .the design basis double-ended line break. Also, failure of the diffuser would eliminate the capability to reflood the core to two-thirds height level following a recirculation line break.

made.

Therefore, if a failure occurred, repairs must be The detection technique is as follows. With the two recirculation pumps balanced in speed to within g 5 percent, the flow rates in both recirculation loops will be verified by control room monitoring instruments. If the two flow rate values do not differ by more than 10 percent, riser and nozzle assembly integrity has been verified.

BFN 3.6/4.6-31 Unit 2

4 t

f I.

h

S.6/4.6 gASES 3.6.E/4.6.E (Cont'd)

If they do differ by 10 percent or more~ the core flow rate measured by the jet pump diffuser differential pressure system must be checked against the core flow rate derived from the measured values of loop flow to core flow correlation. If the difference between measured and derived core flow rate is 10 percent or more (with the derived value higher) diffuser measurements will be taken to define the location within the vessel of failed jet pump nozzle (or riser) and the unit shut down for repairs. If the potential blowdown flow area is increased, the system resistance to the recirculation pump is also reduced; hence, the affected drive pump will "run out" to a substantially higher flow rate (approximately 115 percent to 120 percent for a single nozzle failure).

If the two loops are balanced in flow at the same pump speed, the resistance characteristics cannot have changed. Any imbalance between drive loop flow rates would be indicated by the plant process instrumentation. In addition, the affected jet pump would provide a leakage path past the core thus reducing the core flow rate. The reverse flow through the inactive jet pump would still be indicated by a positive differential pressure but the net effect would be a slight decrease (3 percent to 6 percent) in the total core flow measured. This decrease, together with the loop flow increase, would result in a lack of correlation between measured and derived core flow rate. Finally, the affected jet pump diffuser differential pressure signal would be reduced because the backflow would be less than the normal forward flow.

A nozzle-riser system failure could also generate the coincident failure of a jet pump diffuser body; however, the converse is not true. The lack of any substantial stress in the jet pump diffuser body makes failure impossible without an initial nozzle-riser system failure.

3.6.F/4.6.F Recirculation Pum 0 erat on Steady-state operation without forced recirculation will not be permitted for more than 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />. And the start of a recirculation pump from the natural circulation condition will not be permitted unless the temperature difference between the loop to be started and the core coolant temperature is less than 75 F. This reduces the positive reactivity insertion to an acceptably low value, Requiring the discharge valve of the lower speed loop to remain closed until the speed of the faster pump is below 50% of its rated speed provides assurance when going from one-to-two pump operation that excessive vibration of the jet pump risers will not occur.

3.6.G/4.6.G Structural Inte rit The requirements for the reactor coolant systems inservice inspection program have been identified by evaluating the need for a sampling

~

examination of areas of high stress and highest probability of failure in the system and the need to meet as closely as possible the requirements of Section XI, of the ASME Boiler and Pressure Vessel Code.

BFN 3.6/4.6-32 Unit

i

,i 7J,

3~.6/4.6 BASES'.6.G/4.6.G'Cont'd)'he<<prqgram

'reflects the built-in limitations. of access to.-the reactor coolant systemsi ~ - ~ ~.

,hr g r ev~hh ~ V'

~ tv . p ~ r~~ vV ), g ~ ~ V It is iintdnded that the required.-examinations and.inspection be c'ompleted during 'each 10-year'~interval. Thevperiodic examinations are to be. done ~

during:refueling outages 'or other-extended plant-shutdown periods.

Only proven nondestructive testing techniques will be.usedt r I' I 0 More frequent inspections. shall be performed on certain circumferential pipe welds as )listed iniSection 4.6iG.4 to provide additfonal protection against pipe, whip: These welds were selected in respect to their distance from hangers or supports wherein a failure of the weld would permit the unsupported segments of pipe to strike the drywell wall or nearby auxiliary systems or control systems. Selection was based on judgment from actual plant observation of hanger and support locations and review of.drawingsc Inspection of all these welds during each 10-year inspection interval will result in three additional examinations above the requirements of Section XI of ASME Code.

An augmented inservice surveillance program is required to determine whether any stress corrosion has occurred in. any stainless steel piping, stainless components, and highly-stressed alloy steel such as hanger springs, as a result of environmental conditions associated with the March 22, 1975 fire.

f REFERENCES l ' ~

V I V

l. Inservice Inspection and Testing (BFNP FSAR Subsection 4.12)
2. Inservice Inspection of'Nuclear Reactor Coolant Systems,Section XI, ASME Boiler and Pressure Vessel Code 3: ASME I

Boiler and Pressure h

Vessel Code, Section III (1968 Edition)

4. American 'Society for"Nondestructive Testing No. SNT-TC-1A (1968 Edition) 1 ll llr Q ~ V hl f ~ I I h t V ~ lt I V
5. Mechanical Maintenance Instruction 46 (Mechanical Equipment, Concrete, and Structural Steel Cleaning Procedure for Residue From Plant Fire -'Units 1 and 2) V h ~ ~ h ~,

V

6. Mechanical Maintenance Instruction 53 (Evaluation of Corrosion Damage of Piping Components Which Were Exposed to Residue From March 22, 1975 Fire)
7. Plant Safety Analysis (BFNP FSAR Subsection 4.12)

BFN 3.6/4.6-33 Unit 2

II l

4io~

.' 4 'UXILIARYELEC AL SYSTEM LIMITING CONDITIONS FOR OPERATION SURVEILLANCE REQUIREMENTS 3.9 AUXIL ARY ELECTRICAL SYSTEM 4.9 AUXILIARYELECTRICAL SYSTE A licabilit A licabilit Applies to all the auxiliary Applies to the periodic electrical power system. testing requirements of the auxiliary electrical system.

~Ob ective ~Ob ective To assure an adequate supply of Verify the operability of the electrical power for operation of auxiliary electrical system.

those systems required for safety.

S ecificatio A. Auxilia Electrical E ui ment A. Auxi ia Electrical S ste

1. The reactor shall not be 1. Diesel Generators started up (made critical) from the COLD CONDITION unless the following are satisfied:
a. Diesel generators A, a. Each diesel B, C, D, 3A, 3B, 3C generator shall be and 3D OPERABLE. manually started and loaded once each month
b. Requirements 3.9.A.3 to demonstrate through 3;9.Ae6 are operational readiness.

met. The test shall continue for at, least a 1-hour

c. At least two of the period at 75% of rated following offsite power load or greater.

sources are available:

(1) The 500-kV system is During the monthly available to the generator test, the units 1 and 2 shut- . diesel generator down boards through starting air compressor the unit 1 station- shall be checked for service transformer operation and its TUSS 1B with no ""i -" .-ec"-rge air credit taken for the receivers. The two 500-kV Trinity operation of the diesel lines. If the fuel oil transfer pumps unit 2 station- shall be demonstrated, service transformer and the diesel starting is the second source, time to reach rated a minimum of two voltage and speed shall 500-kV lines must be be logged.

available.

BFN 3.9/4.9-1 Unit, 2

~l l

1, I,

r '. /4 .ILIAR EL C L S. S. M

.LIMITING,CO~IONS FOR OPERATION SURVEILLANCE REQUIREMENTS 3.9.A<,,< Auxil E ct ical. E ui ment 4.9.A. >kAuxil ar E ecerica . S ste 2.. < Zhg peqctor shall not be 2., DC Power System Unit started up (made critical) Batteries (250-V), Diesel-

> gzom the, POT .STANDBY- CONDITION Generatoz Batteries (125-V)

,unl,esp .all,,of.,the .f'ollowing and Shutdown Board;- Batteries conditions are satisfied: ,(250;V)

,a... At least one offsite power ,,a. Every week the specific source is available as gravity, voltage and

,,specif jed iu,. 3.9.A.l,c. temperature of the pilot a ~ ~ 1 ~ ~

~

~ "C ~ tl:< .i. cell and< overall .battery I" "

II'I ~ ~ k ~ ~

voltage shall be measured and logged.

II lt '

b. Three units 1 and 2 diesel b. Every three months the generators, and three -unit 3 measurement. shall- be made diesel generators shall be of voltage of each cell OPERABLE. to nearest 0.1 volt, specific gravity of each t 'I cell, and temperature of fifth

~ ~

every cell. These measurements shall be logged.

c. An additional source of c. A battery rated power, consistjng of one discharge (capacity) of the following: test shall be performed

~ ~ and the voltage, time, (1) A: second,offsite . and output current power source available measurements shall as specified in be logged at 3.9;A.l;c. intervals not to exceed 24 months.

(2) A fourth OPERABLE units 1 and 2 diesel generator~>and afourth It ~ ~1 I OPERABLE;ynit 3 diesel generator.

ll It ~

d. Requirements 3.9.A.3, through 3.9.A.6

.are met.

BFN 3.9/4.9-4 Unit 2

I 4h' A

C

]1

4 AUXIL AL SYSTEM LIMITING CONDITIONS FOR OPERATION SURVEILLANCE REQUIREMENTS 3.9.A. uxi a E ect cal E u ment 4.9.A. A i a E ectrica S stem

3. Buses and Boards Available 3~ Logic Systems
a. The respective start bus a~ Both divisions of the is energized for each common accident signal common station-service logic system shall be transformer designated as tested every 6 months an offsite power source. to demonstrate that will function on it actuation of the core spray system of each reactor to provide an automatic start signal to all 4 units 1 and 2 diesel generators.
b. The 4-kV bus tie board b. Once every 6 months, is energized and capable the condition under of supplying power to the which the 480-volt load units 1 and 2 shutdown shedding logic system boards if a cooling tower transformer is designated is required shall be simulated using pendant as an offsite power source. test switches and/or pushbutton test switches to demonstrate that the load shedding logic system would initiate load shedding signals on the diesel auxiliary boards, RMOV boards, and the 480-V shutdown boards.
c. The units 1 and 2 and unit 3 4-kV shutdown boards are energized.

BFN 3.9/4.9-5 Unit 2

4 A ILIARY ELEC CAL SYSTEM I l ~

LIMITING CONDITIONS FOR OPERATION SURVEILLANCE REQUIREMENTS 3.9.A. Auxilia

~ is= ~ j'Electrical

~ ~ ~

E ui ment 4.9.A.

h Auxilia F

s Electrical C

S stem 3.9.A.3. (Cont'd)

d. The 480-V shutdown boards r

,1A, 2A";;2B,' 3A, ancl 3B 'are @

"energized. ll

~ < ~ ~ 4 ~ ~ I ~

e. The units 1 and 2 an'd unit"3 auxiliary boards are energized.
f. Loss of voltage and degraded voltage relays OPERABLE on 4-kV shutdown boards A, B, C, D, 3EA, 3EB, 3EC, and 3ED.
g. Shutdown buses 1 and '2 energized.
h. The 480-V reactor motor-operated valve (RMOV) boards 2D 8 2E are energized with motor-'generator (mg) sets 2DN, 2DA, 2EN, and 2EA in service.
i. The 480-V reactor motor-operated valve (RMOV) board 2C is energized.

The 4-kV bus tie board is available for cross-tying units 1 and 2 and unit-kV shu'tdown boards.

4. The three 250-V unit batteries, 4. Undervoltage Relays the four units 1 and 2 shutdown board batteries and 3EB shutdown a. (Deleted) board battery, a battery charger for .each battery, and associated b. Once every 6 months, the battery boards are OPERABLE. the conditions u"..dcr which the loss of voltage and degraded voltage relays are required shall be simulated with an undervoltage on each shutdown board to demonstrate that the associated diesel generator will start.

BFN 3.9/4.9-6 Unit 2

4 AUXILIARYELEC uAL SYSTEM LIMITING CONDITIONS FOR OPERATION SURVEILLANCE REQUIREMENTS 3.9.A. Auxilia Electrical E ui ment 4.9.A. Auxi ia Electrical S stem 4.9.A.4. (Cont'd)

c. The loss of voltage and degraded voltage relays which start the -diesel generators from the 4-kV shutdown boards shall be calibrated annually for trip and reset and the measurements logged.

These relays shall be calibrated as specified in Table 4.9.A.4.c.

d. 4-kV shutdown board voltages shall be recorded once every 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />.
5. Logic Systems 5. 480-V RMOV Boards 2D and 2E
a. Common accident signal a. Once per operating logic system is OPERABLE. cycle the automatic transfer feature for
b. 480-V load shedding 480-V RMOV boards 2D logic system is OPERABLE. and 2E shall be functionally tested to verify auto-transfer capability.
6. Diesel Fuel
a. There shall be a minimum of 103,300 gallons of diesel fuel in the standby diesel-generator fuel tanks for units 1 and 2.
b. There shall be a minimum

. of 103,300 gallons of diesel fuel in the standby diesel-generator fuel tanks for units 3.

BFN 3.9/4.9-7 Unit 2

e ~ e e' 3.9/4.9 AUXILIARY ELECTRICAL SYSTEM LIMITING"CONDITIONS FOR'PERATION SURVEILLANCE REQUIREMENTS" 0 eration with Ino erable 4.9.B. '0 eration with Ino erable '.9.B.

~Eui mant ~Eui mant Mhenever. the reactor is in e H

STARTUP mode or RUN mode and not in a COLD COHDITIOH, the availability of electric power shall be as specified in 3.9.A except as specified herein.

1. From and after the date Mhen only one that only one offsite "offsite power source power source is available, is OPERABLE, all REACTOR POMER OPERATION is uriits 1 and 2 diesel permissible for 7 days. generators must be demonstrated to be OPERABLE within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />, and power availability for the associated boards shall be verified within one hour and at least once per 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> thereafter.

2.a From and after the date 2ea Mhen a required that the 4-kV bus tie offsite power source board becomes INOPERABLE, 'is unavailable to REACTOR POMER OPERATION is 'unit 1 because the permissible indefinitely 4-kV bus tie board e

provided one of the or a start bus is required offsite power INOPERABLE, all sources is" not 'supplied unit 1 and 2 diesel from the 161-kV system generators shall be through the'bus'ie board. demonstrated OPERABLE

~ e within 24 hours, and 2.b If the 4-kV bus tie power availability for unavailable forboard'ecomes the associated boards cross-tying, units 1 and 2 shall be verified within and unit 3 4-kV,shutdown one hou. and at 'ea"t, boards, within the next hour once per 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> there-establish a patrolling after. The remaining fire watch in fire zones offsite source and 2-3 and 2-4 to ensure that associated buses shall the affected fire zones be checked to be are checked hourly. energized daily.

2.b Ho additional surveillance required.

BFH 3.9/4. 9-8 Unit 2

4. AUXILIARYELE CAL S STEM LIMITING CONDITIONS FOR OPERATION SURVEILLANCE REQUIREMENTS 3.9.B. 0 eration With Ino erable 4.9.B. 0 eration With Ino erable

~Euf ment E~ul ment 3.a When one of the units 1 3.a When one of the and 2 diesel generator is units 1 and 2 diesel INOPERABLE, continued generators is found REACTOR POWER OPERATION is to be INOPERABLE, permissible during the all of the CS, RHR succeeding 7 days, (LPCI and contain-provided that 2 offsite ment cooling) power sources are systems and the available as specified remaining diesel in 3.9.A.l.c and all of generators and the unit 2 CS, RHR (LPCI and associated boards containment cooling) shall be systems, and the remaining demonstrated to be three units 1 and 2 diesel OPERABLE immediately generators are OPERABLE. and daily If this requirement cannot thereafter.

be met, an orderly shutdown shall be initiated and the reactor shall be in the COLD SHUTDOWN CONDITION within 24 hours.

3.b When one unit 3 diesel 3.b No additional generator is inoperable, surveillance required.

continued REACTOR POWER OPERATION is permissible during the succeeding 7 days. If this require-ment cannot be met, an orderly shutdown shall be initiated and the reactor shall be in a COLD SHUTDOWN CONDITION within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

4.a When one units 1 and 2 4.a When one units 1 and 4-kV shutdown board is 2 4-kV shutdown board INOPERABLE, continued ~ e ~

4 ~ e ~- e. v eeeeeeA V llt

~

REACTOR POWER OPERATION is INOPERABLE, all permissible for a period remaining units 1 and of 5 days. provided that 2 diesel generators 2 offsite power sources associated with the are available as remaining 4-kV shutdown specified in 3.9.A.l.c boards shall be and the remaining units 1 demonstrated to be and 2 4-kV shutdown boards OPERABLE within 24 BFN 3.9I4.9-9 Unit 2

4 AUXILIARYELE CAL SYSTE LIMITING CONDITIONS FOR OPERATION SURVEILLANCE REQUIREMENTS 3.9.B. 0 eration With Ino erable 4.9.B. 0 eration With Ino erable E~ui ment ~Euf ment and associated diesel hours and power.

generators, and unit 2 CS,- availability for the RHR (LPCI and containment remaining 4-kV shut-cooling} systems, and all down boards shall be unit 2 480-V emergency verified within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> power boards are OPERABLE. and at least once per If this. requirement cannot 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> thereafter.

be met, an orderly shutdown shall be initiated and the reactor shall be in the COLD SHUTDOWN CONDITION within 24 hours.

4.b When one, unit 3 4-kV shutdown 4.b No additional board is inoperable, continued surveillance REACTOR POWER OPERATION is required.

permissible for a period of 5 days. If this requirement cannot be met, an orderly shutdown shall be -initiated and the reactor shall be in a COLD SHUTDOWN CONDITION within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

5. When one of the shutdown 5. When a shutdown bus buses is INOPERABLE, is found to be REACTOR POWER OPERATION is INOPERABLE, all permissible for a period 1 and 2 diesel of 7 days. generators shall be proven OPERABLE within 24 hours.

I 6.a When one of the units 1 6. When one units 1.

and 2 480-V diesel auxiliary- and 2 diesel boards becomes INOPERABLE, auxiliary board is REACTOR POWER OPERATION is found to be permissible for a period INOPERABLE, each

,of R clays, unit 1 and 2 diesel generator shall be 6.b When one of the unit 3 proven OPERABLE within 480-V diesel auxiliary 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> and power boards become INOPERABLE, availability for the REACTOR POWER OPERATION remaining diesel is permissible for a period auxiliary board shall of 5 days. be verified within 1 hour and at least once per 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> thereafter.

BFN 3.9/4.9-10 Unit 2

l l

4 AUXILIARYELECTRICAL SYSTEM e

LIMITING CONDITIONS FO ERATION SURVEILLA REQUIREMENTS 3.9.B 0 eration With Ino erable 4.9.B 0 eration With Ino e ab e EeeEui ment E~ui ment

7. From and after the date 6.b No additional surveillance that one of the three required.

250-V unit batteries and/or its associated battery board is found to be INOPERABLE for any reason, continued REACTOR POWER OPERATION is permissible during the succeeding 7 days. Except for routine surveillance testing, NRC shall be notified within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> of the situation, the precautions to be taken during this period, and the plans to return the failed component to an OPERABLE state.

8. From and after the date that one of the 250-V shutdown board batteries and/or its associated battery board is found to be INOPERABLE for any reason, continued REACTOR POWER OPERATION is permissible during the succeeding five days in accordance with 3.9.B.7.
9. When one division of the logic system is INOPERABLE, continued REACTOR POWER OPERATION is permissible under this condition for seven days, provided the CSCS requirements listed in Specification 3.9.B.3 are satisfied.- The NRC shall be notified within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> of the situation, the precautions to be

.taken during this period, and the plans .to. saturn the fa'led component to an OPERABLE state.

10. (deleted)

The following limiting conditions for operation exist for the undervoltage relays which start the diesel generators on the 4-kV shutdown boards.

BFN 3.9/4.9-11 Unit 2

4 AUXILIARYELEC AL S STE LIMITING CONDITIONS FOR OPERATION SURVEILLANCE REQUIREMENTS 3.9.B. 0 eration W t no crab e

~Eui ment 3.9.B.ll (Cont'd)

a. The loss of voltage

, relay channel which starts the diesel generator for a complete loss of voltage on a 4-kV shutdown board may be INOPERABLE for 10 days provided the degraded voltage relay channel on that shutdown board is OPERABLE (within the surveillance schedule of 4.9.A.4.b).

b. The degraded voltage relay channel which starts the diesel generator for degraded voltage on a 4-kV shutdown board may be INOPERABLE for 10 days provided the loss of voltage relay channel

. on that shutdown board is OPERABLE (within the surveillance.

schedule of 4.9.A.4.b).

c. One of the three phase-to-phase degraded voltage relays provided to detect a degraded voltage on a 4-kV shutdown board may be INOPERABLE for 15 days provided both of the rr ~ r ~ ~ %rem r ~

following conditions are satisfied.

BFN 3.9/4.9-12 Unit 2

AUXILIARYELE ICAL SYSTEM LIMITING CONDITIONS FOR OPERATION SURVEILLANCE REQUIREMENTS 3.9.B. 0 erat on With Ino erable E~ui ment

12. When one unit 2 480-V shutdown board is found to be INOPERABLE, the reactor will be placed in the HOT STANDBY CONDITION within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> and COLD SHUTDOWN CONDITION within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.
13. If one unit 2 480-V RMOV board mg set is INOPERABLE, the REACTOR POWER OPERATION may continue for a period not to exceed seven days, provided the remaining 480-V RMOV board mg sets and their associated loads remain OPERABLE.
14. If any two unit 2 480-V RMOV board mg sets become INOPERABLE, the reactor shall be placed in the COLD SHUTDOWN CONDITION within 24 hours.
15. When one 480-V shutdown board (lA or 3A or 3B) is found to be INOPERABLE, REACTOR POWER OPERATION is permissible for a period of 7 days.
16. If the 480-V RMOV board 2C becomes INOPERABLE, within the next hour establish,a patrolling fire watch in fire zones 2-5 and 2-6 to ensure these zones are checked hourly.

BFN 3.9/4.9-14 Unit 2

4 AUXILIARYELE CAL SYSTEM LIMITING CONDITIONS FOR OPERATION SURVEILLANCE REQUIREMENTS 3;9.B; 0 eration.With Ino erable

~Eui ment 17... If .the requirements for operating in the conditions specified by 3.9.B.1 through 3.9.B.16 cannot be met,, an orderly shutdown shall be initiated and the reactor shall be in the COLD SHUTDOWN CONDITION within 24 hours.

3.9.C. 0 eration in COLD SHUTODWN Whenever the reactor is in COLD SHUTDOWN CONDITION with irradiated fuel in the reactor, the availability of electric power shall be as specified in Section 3.9.A except as specified herein.

1. At least two units 1 and 2 diesel generators and their associated 4-kV shutdown boards shall be OPERABLE.
2. An additional source of power energized and capable of supplying power to the units 1 and 2 shutdown boards consisting of at least one of the following:
a. One of the offsite power sources specified in 3.9.A.l.c.
b. A third OPERABLE diesel generator.

3; At least one 480-V shutdown board for each unit must be OPERABLE.

4. One 480-V RMOV board mg set is required for each RMOV board (2D or 2E) required to support operation of the RHR system in accordance with 3.5.B.9.

BFN 3.9/4.9-15 Unit 2

>',li 4g I

II P

3.9 BASES The objective of this specification is to assure an adequate source oE electeical power. to operate facilities 4o cool the plant dueing shutdown, to operate the engineered safeguards following an accident, and to being the plant to cold shutdown for a Eire at any location.

There are theee sources oE altenlating current electrical enox;gy available, namely, the 161-kV teansmission system, the 500-kV transmission system, and the diesel generatoes.

For a fire, units 1 and 2 and unit 3 diesel goneeators and associated electrical disteibution systems are required to he available in various combinations to ensure adequate power to safe shutdown systems. The plant Appendix R evaluation establishes the need Eoe certain units 1 and 3 auxiliary powex. systems to achieve and maintain cold shutdown on unit 2. For this reason, these required systems have been added to the unit 2 technical specifications with allowed inoperable pex..iods which are identical to the existing unit 1 and 3 technical specifications.

The unit station-service transformer B for unit 1 or the unit station-service transformer B for unit 2 provide nonintereuptible souecos ot offsite power from the 500-kV teansmission system to the units 1 and 2 -hutdown boards. Auxiliary power can also be supplied from the 161-kV transmission system through the common station-sex.vice transformers or through the cooling tower transformers by way of the bus tie hoard. The 4-kV bus tie board may x;emain out of service indefinitoly provided one of the required offsite power soueces is not supplied from the 161-kV system through the hus tie hoard. For a Eire, the 4-kV bus tie board is used to cross-tie the units 1 and 2 and unit 3 4-kV shutdown boaeds so that power from unit 3 diesel generators can be provided to unit 2 for various fixe locations. As previously stated, the 4-kV bus tie board may ho out of service indeEinitely provided the requix;ed offsite power sources are available. However, the plant Appendix R evaluation requix.es that the 4-kV bus tio board cross-tie capability ho available at all times. If the 4-kV bus tie boaxd is unavailable for cross-tying, an hourly patrolling fix.e watch is requieed to be established in fice zones 2-3 and 2-4.

The minimum fuel oil requirement of 103,300 gallons is sufficient for seven days of full load operation oE three units 1 and 2 diesols and is conservatively based on availahility of a replenishment supply. An identical requix.oment is provided for the unit 3 diesols.

-.- .The degraded voltage sensing"relays provide a"start'signal to'he

~

diesel generator:s in the event that a deteriorated voltage condition exists on a 4-kV shutdown hoard. This starting signal is indepondent of the starting signal genexated by the complete loss of voltage rolays and will continue to function and start tho diesel generator:s on complete loss of voltage should tho loss of voltage relays become inoporablo.

The 15-day inoperable time limit specified when one of the theoe phaso-to-phaso degraded voltage x.'clays is inopoeahlo is justified based an tho two-out-of-three pennissivo logic scheme provided with those relays.

SFH 3.9/4.9-17 1Jnit 2

c(.

3.9 BASES (Cont'd) 0 A units 1 and 2 4-kV shutdown board is allowed to be out of operation for a brief period to allow for maintenance and testing, provided all remaining units 1 and 2 4-kV shutdown boards and associated diesel generators, CS, RHR, (LPCI and containment cooling) systems supplied by the remaining units 1 and 2 4-kV shutdown boards, and all emergency 480-V power boards are operable. A unit 3 4-kV shutdown board is allowed to be out of operation for a brief period to allow for maintenance and testing.

There are eight 250-V dc battery systems, each of which consists of a battery, battery charger, and distribution equipment. Three of these systems provide power for unit control functions, operative power for unit motor loads, and alternative drive power for a 115-V ac unit-preferred mg set. One 250-V dc system provides power for common plant and transmission system control functions, drive power for a 115-V ac plant-preferred mg set, and emergency drive power for certain unit large motor loads. The four remaining systems deliver control power to the 4,160-V shutdown boards.

Each 250-V dc shutdown board control power supply can receive power from its own battery, battery charger, or from a spare charger. The chargers are powered from normal plant auxiliary power or from the standby diesel-driven generator system. Zero resistance short circuits between the control power supply and the shutdown board are cleared by fuses located in the respective control power supply. Each power supply is .

located in the reactor building near the shutdown board it supplies.

Each battery is located in its own independently ventilated battery, room.

The 250-V dc system is so arranged, and the batteries sized so that the loss of any one unit battery will not prevent the safe shutdown and cooldown of all three units in the event of the loss of offsite power and a design basis accident in any one unit. Loss of control power to any engineered safeguard control circuits is annunciated in the main control room of the unit affected. The loss of one 250-V shutdown board battery affects normal control power only for the 4,160-V shutdown board which it supplies. The station battery supplies loads that are not essential for safe shutdown and cooldown of the nuclear system. This battery was not considered in the accident load calculations.

There are two 480-V ac RMOV boards that contain mg sets in their feeder lines. These 480-V ac RMOV boards have an automatic transfer from their normal to alternate power source (480-V ac shutdown boards). The mg sets 'act as electrical isolators to prevent a fault from propagating between electrical divisions due to an automatic transfer. The 480-V ac RMOV boards involved provide motive power to valves associated with the LPCI mode of the RHR system. Having an mg set out of service reduces the assurance that full RHR (LPCI) capacity will be available when required. Since sufficient equipment is available to maintain the minimum complement required for RHR (LPCI) operation, a 7-day servicing period is justified. Having two mg sets out of service can considerably reduce equipment availability; therefore, the affected unit shall be BFN 3.9/4.9-18 Unit 2

II W

~ 'I V~

4.9 BASES placed in Cold Shutdown within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />. 480-V RMOV Board 2C is required to fire locations.

be operable If since it is used to supply power for specific 480-V RMOV Board 2C becomes inoperable, an hourly patrolling fire watch is required to be established in fire zones 2-5 and 2-6.

The offsite power source requirements are based on the capacity of the respective lines. The Trinity line is limited to supplying two operating units because of the load limitations of CSST's A and B. The Athens line is limited to supplying one operating unit because of the load limitations of the Athens line. The limiting conditions are intended to prevent the 161-kV system from supplying more than two units in the event of a single failure in the offsite power system.

The monthly tests of the diesel generators are primarily to check for failures and deterioration in the system since last use. The diesels will be loaded to at least 75 percent of rated power while engine and generator temperatures are stabilized (about one hour). The minimum 75-percent load will prevent soot formation in the cylinders and injection nozzles. Operation up to an equilibrium temperature ensures that there is no overheating problem. The tests also provide an engine and generator operating history to be compared with subsequent engine-generator test data to identify and to correct any mechanical or electrical deficiency before it can result in a system failure.

The test during refueling outages is more comprehensive, including procedures that are most effectively conducted at that time. These include automatic actuation and functional capability tests to verify that the generators can start and be ready to assume load in 10 seconds. The annual inspection will detect any signs of wear long before failure. The diesel generators are shared by units 1 and 2.

Therefore, the capability for the units 1 and 2 diesel generators to accept the emergency loads will be performed during the unit 1 operating cycle using the unit 1 loads.

Battery maintenance with regard to the floating charge, equalizing charge, and electrolyte level will be based on the manufacturer's instruction and sound maintenance practices. In addition, written records will be maintained of the battery performance. The plant batteries will deteriorate with time but precipitous failure is unlikely. The type of surveillance called for in this specification is that which has been demonstrated through experience to provide an

-indication of a cell .becoming irregular or unserviceable long before becomes a failure.

it The equalizing charge, as recommended by the manufacturer, is vital to maintaining the ampere-hour capacity of the battery, and will be applied as recommended.

BFN 3.9/4.9-19 Unit 2

4.9 BASES The testing of the logic systems will verify the ability of the logic systems to bring the auxiliary electrical system to running standby readiness with the presence of an accident signal from any reactor or an undervoltage signal on the 4-kV shutdown boards.

The periodic simulation of accident signals in conjunction with diesel-generator voltage available signals will confirm the ability of the 480-V load shedding logic system to sequentially shed and restart 480-V loads if an accident signal were present and diesel-generator voltage were the only source of electrical power.

The unit 3 diesel generators and associated electrical distribution systems requirements for operability and surveillance are identical to the existing unit 3 technical specifications. However, if a unit 3 diesel generator or associated electrical distribution system becomes inoperable, no additional surveillance is required. Since the Appendix R shutdown equipment powered by the remaining unit 3 power sources are not redundant to the inoperable equipment, additional testing would not improve the reliability of the power supplies for a specific fire location.

REFERE CES

1. Normal Auxiliary Power System (BFNP FSAR Subsection 8.4)
2. Standby AC Power Supply and Distribution (BFNP FSAR Subsection 8.5)
3. 250-Volt DC Power Supply and Distribution (BFNP FSAR Subsection 8.6)
4. Memorandum from Gene M. Wilhoite to H. J. Green dated December 4, 1981 (LOO 811208 664) and memorandum from C. E. Winn to H. J. Green dated January 10, 1983 (G02 830112 002)

BFN 3.9/4.9-20 Unit 2

(,

hi l

t"

ENCLOSURE 2 DESCRIPTION AND JUSTIFICATION BROWNS FERRY NUCLEAR PLANT (BFN)

UNIT 2 Descri tion o Chan e BFN Unit 2 Technical Specifications are being revised'o include additional unit 2 equipment not presently required to be operable and unit 1 and 3 equipment needed for unit 2 safe shutdown. See the attached technical specification markups for proposed changes.

Reason for Chan e In accordance with 10 CFR 50.48 and 10 CFR 50, Appendix R, adequate protection of equipment is required to ensure the safe shutdown of a nuclear plant in the event of a fire at any location in the plant. In addition, Generic Letter 81-12, "Fire Protection Rule,"-requested that "Technical Specifications of the surveillance requirements and limiting conditions for operation for that equipment not already covered by existing Technical Specifications" be provided. The proposed changes are being made to address the limiting conditions with respect to the plant, equipment which is being utilized for postfire shutdown of unit 2.

Justification for Chan e A plant Appendix R evaluation was performed for the Browns Ferry Nuclear Plant, Units 1, 2, and 3, to ensure that safe shutdown capability can be maintained during and after a fire in compliance with section III.G, III.J, and III.L of Appendix R. The Appendix R evaluation identified the minimum systems required to be operable for postfire safe shutdown and the modifications that were necessary to ensure the operability of the minimum systems. The plant Appendix R evaluation was performed assuming concurrent operation of the three Browns Ferry units and did not factor in the unavailability of equipment because of possible outage of a unit. A supplemental evaluation was also performed for only unit 2 operating. As a result, the safe shutdown capability of unit 2 depends upon equipment not directly covered in the existing technical specifications for unit 2.

The existing unit 2 technical specifications for the main steam relief valves (MSRVs), residual heat removal service water (RHRSW) pumps, and emergency equipment cooling water (EECW) pumps do not provide sufficient equipment operability for all postulated Appendix R events. Unit 2 safe shutdown capability also relies upon- portions of the unit-1 'and' -auxiliary power systems, including the unit 3 diesel generators, which are not directly included in the unit 2 technical specifications. Also, the reactor water level and reactor vessel pressure instrumentation at the backup control panel as identified in the plant Appendix R evaluation do not currently have any technical specification operability requirements.

HSRVs The existing unit 2 technical specifications Eor the HSRVs permit indefinite plant operation with one relief valve inoperable. The plant Appendix R evaluation assessed the availability of HSRVs to ensure that three HSRVs are available for any given Eire location for safe shutdown. In fire area 9 and fire zones 2-2, 2-3, and 2-4, a postulated fire could result in only three HSRVs being available. If one of these three MSRVs was the one currently allowed by the technical specification to be indefinitely out of service, the required number of MSRVs (three) for safe shutdown during a fire would not be available. An hourly patrolling fire watch will be established in the appropriate Eire areaslzones as a compensatory measure if one of the required HSRVs is out of service. For a fire in any other areas/zones of the plant, at least four HSRVs would be available. Thus, even if one were out of service, the required number of three MSRVs would still be available for safe shutdown.

The proposed technical specifications ensure a safe shutdown capability and provide a compensatory measure during plant operations with an inoperable HSRV. Establishing a patrolling fire watch within one hour is intended to observe hazardous conditions which are not normally detected by installed fire protection ystems. These conditions include activities by plant personnel that could increase the hazards of a fire. They also include conditions likely to lead to a fire, such as spills of flammable liquids or the presence of ignition sources, and accumulations of transient combustible materials.

The patrolling fire watch is intended to provide prompt notification of a fire and to provide fire fighting activities until the fire brigade responds. The patrolling fire watch provides assurances that the existence of unsafe or fire conditions would be minimized.

Auxiliar Power S stem The existing unit 2 technical specifications for the auxiliary power system require the operability of the units 1 and 2 diesel generators and associated auxiliary power distribution systems. The associated auxiliary power distribution systems includes 4-kV and 480V shutdown boards, 480V reactor motor-operated valve (RMOV) boards, 250V unit batteries and associated chargors and boards. The auxiliary powor system is required to provide a postfire power source Eor the plant equipmont. The plant Appendix R evaluation assumed the availability oE the units 1 and 2 diesel generators, unit 3 diesel generators, and associated power distribution systems- The plant Appendix R evaluation assumed the 4-kV bus tie board cross-tie capability to be available at all times to cross-tie unit, 1 and 2 and unit, 3 4kV shutdown boards. Additionally, since 480V RMOV board 2C supplies power to valves which are operated during a fire, this board has also been added to the technical specifications. The proposed changes are to

- .transfer the appropriate sections of the unit 1 and unit, 3 technical specifications Eor the auxiliary power system to the unit 2 technical specification. Presently some oE the unit 3 equipment is indirectly included

I t IV le rk I

in the unit 2 technical specifications through the definition of operability (e.g., a unit 3 diesel is required to be available to power an EECW pump required Eor unit 2 operation). The proposed changes explicitly add the unit 1 and 3 auxiliary power systems which are required to be operable for postfire safe shutdown to the unit 2 technical specifications. The unit 1 and 3 technical specifications are not aEfected by this change.

The shutdown requirements for inoperable unit 1 and 3auxiliary power system components are identical to the existing unit 2 requirements. If the 4-kV bus tie board or 480-V RNOV board 2C is inoperable, a patrolling Eire watch is established in fire zones 2-3 and 2-4 or zones 2-5 and 2-6, respectively. The previous discussion under MSRVs provides justification Eor patrolling Eire watches.

The unit 3 diesel generators and associated electrical distribution systems requirements for operability and surveillance are identical to the existing unit 3 technical specifications. However, iE a unit 3 diesel generator or associated electrical distribution systems becomes inoperable, no additional surveillance is required. Since the remaining unit 3 diesel generators do not supply power to the required shutdown equipment powered by the inoperable diesel generator, additional testing would not improve the reliability of the power supplies Eor the established Appendix R events.

The proposed technical specifications ensure adequate emergency power for postfire saEe shutdown and provide a compensatory measure during plant operations with inoperable equipment.

Reactor Vessel Instrumentation The existing unit 2 technical specifications (table 3.2.P) for. instruments require the operation of reactor vessel water level and reactor pressure indication in the control room. The plant Appendix R evaluation assumed that the reactor vessel water level and pressure indicators on the backup control panel were also available for fires in the control bay that could force plant operators to abandon the main control room. The proposed technical specifications ensure a safe shutdown capability and provide a compensatory measure during plant operation with the backup control panel instruments inoperable. The compensatory measure of the patrolling fire watch provides assurances that the existence of unsaEe or Eire conditions would be be minimized. The previous discussion under HSRVs provides justification for patrolling Eire watches. A surveillance requirement for these instruments on the backup panel is added which is identical to the requirement for the instruments in tho control room.

l a J'

I V

IJ

~1 Ll

RSW a d ECW S stems The existing unit 2 technical specifications for the RHRSW and EECW pumps permit indefinite plant..operation with one RHRSW and one EECW pump inoperable when three units are operating. The number of RHRSW pumps required to be operable is further reduced with units 1 and 3 in a cold shutdown condition or defueled. The plant Appendix R evaluation assumed the availability of all four EECW pumps. In fire areas 9, 16, and 18, and fire zones 2-1, 2-2, 2-3, 2-4, 2-5, and 2-6, a postulatedfire could result in only two EECW pumps being available that are requir'ed by the plant Appendix R evaluation. If one of these two EECW pumps was the one currently allowed by the technical specifications to be indefinitely out of service, then the required two EECW pumps for safe shutdown would not be available. For a fire in any other areas/zones of the plant, adequate RHRSW swing/EECW pumps are available to supply necessary cooling water to the diesel generators even one of the EECW pumps is out of service.

if The plant Appendix R evaluation required that either RHRSW pumps Cl or D2 be available, however both pumps are required to be operable to ensure the one required RHRSW pump is available for a specific fire location. If one of the two required RHRSW pumps is out of service, an hourly patrolling fire watch will be established in the appropriate fire areas/zones as a compensatory measure.

For postulated fires in any other areas of the plant (i.e., other than 2-1, 2-2, 2-3, 2-4, 2-5, 2-6, 9, 16, 18), one train of equipment needed to achieve and maintain hot shutdown will be free of fire damage through fire area boundary separation. In those cases where hot shutdown is assured and alternate shutdown is not required, plant operating instructions (e.g., EOIs) will be used to complete the cooldown process. The plant Appendix R evaluation for Unit 2 operation further identified equipment which can be used to reach cold shutdown without repair. With hot shutdown assured, adequate time is available for the operators to perform necessary actions using symptom oriented procedures (e.g., EOIs) to ensure that there are adequate RHRSW and EECW pumps available to achieve cold shutdown. This will provide the flexibility to align equipment which may be operable but not necessarily a preselected shutdown path.

The proposed technical specifications ensure a safe shutdown capability by providing a compensatory measure during plant operation with inoperable RHRSW and EECW pumps. The compensatory measure of the patrolling fire watch provides assurances that the existence of unsafe or fire conditions would be minimized. The previous discussion under MSRVs provides justification for patrolling fire watches.

ENCLOSURE 3 BROWNS FERRY NUCLEAR PLANT SIGNIFICANT HAZARDS CONSIDERATION UNIT 2 Descri tion of Amendment Re uest The proposed amendment would change the technical specifications of Browns Ferry Nuclear Plant Unit 2 by revising the limiting conditions for operation, the surveillance requirements, and periodicity for equipment required for Appendix R safe shutdown.

Basis or Pro osed No Si nificant Hazards Consideration Determination NRC has provided standards for determining whether a significant hazards consideration exists as stated in 10 CFR 50.92(c). A proposed amendment to an operating license involves no significant hazards considerations if of the facility in accordance with the proposed amendment would not (1) operation involve a significant increase in the probability or consequences of an accident, previously evaluated, (2) create the possibility of a new or different kind of accident from an accident previously evaluated, or (3) involve a significant reduction in a margin of safety.

1. The proposed amendment does not involve a significant increase in the probability or consequences of an accident previously evaluated. The proposed amendment. does not alter the function or the testing of any equipment or systems previously analyzed in the BFN Final Safety Analysis Report, but provides additional equipment operability requirements to support the safe shutdown of the plant for a fire event.
2. The proposed amendment does not create the possibility of a new or different kind of accident from an accident previously evaluated. This proposed change is still within the bounds of the design of the systems.

Equipment previously covered by units 1 and 3 technical specifications are incorporated into the unit 2 technical specifications to ensure availability to support unit 2 safe shutdown during a fire for periods when units 1 and 3 may be shutdown.

3. The proposed amendment does not involve a significant reduction. in the margin of safety. The proposed change ensures a safe shutdown capability for a fire at any location in the plant. It does not alter the safety function of the involved equipment.

Determination of Basis for Pro osed No Si nificant Hazards Since the application for amendment involves a proposed change that is encompassed by the criteria for which no significant hazards consideration exists, TVA has made a proposed determination that the application involves no significant hazards consideration.

3 I I ~ ~ s 3.5 BASES (Cont'd) 3.5.L. APRM Set pints Operation is constrained to a maximum LHGR of 18.5 kW/ft for 7x7 fuel and 13.4 kW/ft. This limit is reached when core maximum fraction of limiting power density (CMFLPD) 'equals 1.0. For the case where CMFLPD exceeds the fraction of rated thermal power, operation is permitted only at less than 100-percent rated power and only with APRM scram settings as required by Specification 3.5.L.l. The scram trip setting and 'rod block trip setting are adjusted to ensure that no combination of CMFLPD and FRP will increase the LHGR transient peak beyond that allowed by the 1-percent plastic strain limit. A 6-hour time period to achieve this condition is justified since the additional margin gained by the setdown adjustment is above and beyond that ensured by the safety analysis.

3.5.M. References

1. Loss-of-Coolant Accident Analysis for Browns Ferry Nuclear Plant Unit 2, NEDO 24088-1 and Addenda.
2. "BWR Transient Analysis Model Utilizing the RETRAN Program,"

TVA-TR81-01-A.

3. Generic Reload Fuel Application, Licensing Topical Report, NEDE 24011-P-A and Addenda.

BFN 3. 5/4. 5-32 Unit 2

il o p, I I

3.5 BASES (Cont'd)

The nuclear system pressure relief system provides automatic nuclear system depressurization for small breaks in the nuclear system so that the low-pressure coolant injection (LPCI) and the core spray subsystems can operate to protect the fuel barrier. Note that this specification applies only to the automatic feature of the pressure relief system.

Specification 3.6.D specifies the requirements for the pressure relief function of the valves. It is possible for any number of the valves assigned to the ADS to be incapable of performing their ADS functions because of instrumentation failures yet be fully capable of performing their pressure relief function.

Because the automatic depressurization system does not provide makeup to the reactor primary vessel, no credit is taken for the steam cooling of the core caused by the system actuation to provide further conservatism to the CSCS.

With two ADS valves known to be incapable of automatic operation, four valves remain operable to perform their ADS function. The ECCS loss-of-coolant accident analyses for small line breaks assumed that four of the six ADS valves were operable. Reactor operation with three ADS valves inoperable is allowed to continue for seven days provided that the HPCI system is demonstrated to be operable. Operation with more than three of the six ADS valves inoperable is not acceptable.

3.5,H. Maintenance of Filled Dischar e Pi e If the discharge piping of the core spray, LPCI, HPCIS, and RCICS are not filled, a water hammer can develop in this piping when the pump and/or pumps are started. To minimize damage to the discharge piping and to ensure added margin in the operation of these systems, this Technical Specification requires the discharge lines to be filled whenever the system is in an operable condition. If a discharge pipe is not filled, the pumps that supply that line must be assumed to be inoperable for Technical Specification purposes.

The core spray and RHR system discharge piping highpoint vent is visually checked for water flow once a month prior to testing to ensure that the lines are filled. The visual checking will avoid starting the core spray or RHR system with a discharge line. not filled. In addition to the visual observation and to ensure a filled discharge line other than prior to testing, a pressure suppression chamber head tank is-located approximately 20 feet above the discharge line highpoint to supply makeup water for these systems. The condensate head tank located approximately 100 feet above the discharge highpoint serves as a backup charging system when the pressure suppression chamber head tank is not in service. System discharge pressure indicators are used to determine the water level above the discharge line highpoint. The indicators will reflect approximately 30 psig for a water level at the highpoint and 45 psig for a water level in the pressure suppression chamber head tank and are monitored daily to ensure that the discharge lines are filled.

BFN 3.5/4.5-30 Unit 2

~ ~ r ~

t.',

.h I

j<<

ry

) g I ~

3,5 BASES (Cont'd)

When in their normal standby condition, the suction for the HPCI and RCIC pumps are aligned to the condensate storage tank, which is physically at a higher elevation than the HPCIS and RCICS piping. This assures that the HpCIand RCIC discharge piping remains filled. Further assurance is provided by observing water flow from these systems'ighpoints monthly.

3.5.I. Maximum Avera e Plana Linear Heat Generation Rate MAPLHGR This specification assures that the peak cladding temperature following the postulated design basis loss-of-coolant accident will not exceed the limit specified in the 10 CFR 50, Appendix K.

The peak cladding temperature following a postulated loss-of-coolant accident is primarily a function of the average heat generation rate of all the rods of a fuel assembly at any axial location and is only dependent secondarily on the rod-to-rod power distribution within an assembly. Since expected. local variations in power distribution within a fuel assembly affect the calculated peak clad temperature by less than + 20 F relative to the peak temperature for a typical fuel design, the limit on the average linear heat generation rate is sufficient to assure that calculated temperatures are within the 10 CFR 50 Appendix K limit. The limiting value for MAPLHGR is shown in Tables 3.5.I-l and -2. The analyses supporting these limiting values are presented in Reference l.

3.5.J. Linear Heat Generation Rate LHGR This specification assures that the linear heat generation rate in any rod is less than the design linear heat generation is postulated.

if fuel pellet densification The LHGR shall be checked daily during reactor operation at g 25 percent power to determine if fuel burnup, or control rod movement has caused changes in power distribution. For LHGR to be a limiting value below 25 percent rated thermal power, the R factor would have to be less than 0.241 which is precluded by a considerable margin when employing any permissible control rod pattern.

3.5.K. inimum Critical Power Ratio MCPR At core thermal power levels less than or equal to 25 percent, the reactor will be operating at minimum recirculation pump speed and the moderator void

'ontent will be very small. For all designated control rod patterns which mav be employed at this point, operating plant experience and thermal hydraulic analysis indicated that the resulting MCpR value is in excess of requirements by a considerable margin. With this low void content, any inadvertent core flow increase would only place operation in a more conservative mode relative to MCpR. The daily requirement for calculating MCPR above 25 percent rated thermal power is sufficient since power distribution shifts are very slow when there have not been significant power or control rod cnanges. The requirement for calculating MCPR when a limiting control rod pattern is approached ensures that MCPR will be known following a change in power or power shape (regardless of magnitude) that could place operation at a thermal limit.

QFg 3.5/4.5-31 Unit 2

4.6 PRIMARY SYSTEM BOUNDARY LIMITING CONDITIONS FOR ERATION SURVEILL CE REQUIREMENTS 3.6.C Coolant Leaka e 4.6.C Coolant Leaka e

2. Both the sump and air sampling 2. With the air sampling systems shall be OPERABLE during system INOPERABLE, grab REACTOR POWER OPERATION. From samples shall be obtained and after the date that one of and analyzed at least once these systems is made or found every 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

to be INOPERABLE for any reason, REACTOR POWER OPERATION is permissible only during the succeeding 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> for the sump system or 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> for the air sampling system.

The air sampling system may be removed from service for a period of 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> for calibration, function testing, and maintenance without providing a temporary monitor.

3~ If the condition in 1 or 2 above cannot be met, an orderly shutdown shall be initiated and the reactor shall be placed in the COLD SHUTDOWN CONDITION within 24 hours.

3.6.D. Relief Valves 4.6.D. Relief Valves When more than one relief valves 1. Approximately one-half of.,

are known to be failed, an all relief valves shall orderly shutdown shall be be bench-checked or initiated and the reactor replaced with a depressurized to less than bench-checked valve psig within hours. each operating cycle.

ifDuring 105 24 REACTOR POWER OPERATION, one All 13 valves will have of the following relief valves been checked or replaced is inoperable, establish - upon the completion of within the next hour a every second cycle.

patrolling fire watch to ensure that the affected 2. Once during each fire areas/zones listed b low operating cycle, each are checked hourly. relief valve shall be manually opened until thermocouples and acoustic monitors downstream of the valve indicate steam is flowing from the valve.

BFN 3.6/4.6-10 Unit 2

Retrieved from "https://kanterella.com/w/index.php?title=ML18033A325&oldid=2418339"